# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1681 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1682 --- ## [Sending Log4j logs ( in XML format) to Elasticsearch](https://discuss.elastic.co/t/sending-log4j-logs-in-xml-format-to-elasticsearch/214387)
**Author:** [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\ **Replies:** 5\ **Last updated:** [January 16, 2020, 1:34pm UTC](https://discuss.elastic.co/t/sending-log4j-logs-in-xml-format-to-elasticsearch/214387 "2020-01-16T13:34:43Z")
Hello, I need to send log files generated using Log4j on client machines to Elasticsearch installed on a server. The logs are in XML format. Is there any other plugin, etc required, or can it just be done using Filebea… --- ## [Different index for different logs](https://discuss.elastic.co/t/different-index-for-different-logs/215317)
**Author:** [@srisum0728](https://discuss.elastic.co/u/srisum0728)\ **Replies:** 0\ **Last updated:** [January 16, 2020, 1:33pm UTC](https://discuss.elastic.co/t/different-index-for-different-logs/215317 "2020-01-16T13:33:52Z")
Need different index for each log file path. 1\> access log in access.conf file -\> same server 2\> csv file in task\_engine.csv -\> same server Need to have task\_engine.csv file in different index so that I can pull it in… --- ## [Unable to comunicate elastic search server 6.2.3 usingrest high level client](https://discuss.elastic.co/t/unable-to-comunicate-elastic-search-server-6-2-3-usingrest-high-level-client/215316)
**Author:** [@chubb123](https://discuss.elastic.co/u/chubb123)\ **Replies:** 0\ **Last updated:** [January 16, 2020, 1:19pm UTC](https://discuss.elastic.co/t/unable-to-comunicate-elastic-search-server-6-2-3-usingrest-high-level-client/215316 "2020-01-16T13:19:59Z")
Hi Team, We have elastic search server 6.2.3 it is installed in MDM 10.3 .we have certificates for elastic search server it is working fine in browser. when I try to call the rest high level client it is not work… --- ## [CPU utilization always high](https://discuss.elastic.co/t/cpu-utilization-always-high/215274)
**Author:** [@Ankit\_Kumar](https://discuss.elastic.co/u/Ankit_Kumar)\ **Replies:** 1\ **Last updated:** [January 16, 2020, 12:34pm UTC](https://discuss.elastic.co/t/cpu-utilization-always-high/215274 "2020-01-16T12:34:04Z")
HI guys, I have around 20 index and 5 shards for each index, each shard takes bout 80-100 mb, data will grow exponentially in future, how many nodes should i have? Currently i have only 1 node and i am doing many searc… --- ## [Not able to Install Elastic Search as windows](https://discuss.elastic.co/t/not-able-to-install-elastic-search-as-windows/215309)
**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\ **Replies:** 0\ **Last updated:** [January 16, 2020, 12:18pm UTC](https://discuss.elastic.co/t/not-able-to-install-elastic-search-as-windows/215309 "2020-01-16T12:18:41Z")
Hello , I was trying to install Elastic search as windows service with the below steps. When i try to start the service I am receiving the attached error ? I tried with nssm.exe utility as well , Uninstall and install a… --- ## [Can't load installed filter plugin](https://discuss.elastic.co/t/cant-load-installed-filter-plugin/215303)
**Author:** [@toms130](https://discuss.elastic.co/u/toms130)\ **Replies:** 0\ **Last updated:** [January 16, 2020, 11:27am UTC](https://discuss.elastic.co/t/cant-load-installed-filter-plugin/215303 "2020-01-16T11:27:44Z")
Hi all, I found logstash-filter-jwt-decode plugin to decode jwt tokens, but I am not able to load it despite successfull installation. Below is what i've done. bash-4.2$ logstash-plugin install logstash-filter-jwt-deco… --- ## [Logstash as SNMP Trap to GELF Converter, how to split message into seperate fields?](https://discuss.elastic.co/t/logstash-as-snmp-trap-to-gelf-converter-how-to-split-message-into-seperate-fields/214988)
**Author:** [@Salve](https://discuss.elastic.co/u/Salve)\ **Replies:** 2\ **Last updated:** [January 16, 2020, 5:37am UTC](https://discuss.elastic.co/t/logstash-as-snmp-trap-to-gelf-converter-how-to-split-message-into-seperate-fields/214988 "2020-01-16T05:37:25Z")
Hello, I am new to logstash and I want to use it to convert SNMP Traps to GELF. This is my very first (simple) pipeline. input { snmptrap { id =\> "snmptrap" type =\> "snmptrap" port =\> 1162 } } output {… --- ## [Gmail problems](https://discuss.elastic.co/t/gmail-problems/213467)
**Author:** [@Rob\_wylde](https://discuss.elastic.co/u/Rob_wylde)\ **Replies:** 6\ **Last updated:** [January 16, 2020, 11:00am UTC](https://discuss.elastic.co/t/gmail-problems/213467 "2020-01-16T11:00:26Z")
I'm trying to enable watcher to send email when conditions require an email to be sent. however i'm encounter issues and have been bashing my head against the wall for a while and decided its time to ask for assistance. … --- ## [Unbalanced primary shards affects search queries?](https://discuss.elastic.co/t/unbalanced-primary-shards-affects-search-queries/215293)
**Author:** [@ragian](https://discuss.elastic.co/u/ragian)\ **Replies:** 1\ **Last updated:** [January 16, 2020, 10:54am UTC](https://discuss.elastic.co/t/unbalanced-primary-shards-affects-search-queries/215293 "2020-01-16T10:54:34Z")
In a lot of topic is said that we shouldn't worry about balancing primary shards across all nodes. Currently my primaries are highly unbalanced in my elasticsearch cluster (3 nodes with elastic 6.4.0). On the cluster… --- ## [Add additional field (count of another field)](https://discuss.elastic.co/t/add-additional-field-count-of-another-field/215008)
**Author:** [@anon42972578](https://discuss.elastic.co/u/anon42972578)\ **Replies:** 8\ **Last updated:** [January 16, 2020, 10:43am UTC](https://discuss.elastic.co/t/add-additional-field-count-of-another-field/215008 "2020-01-16T10:43:37Z")
Hello, i have documents with multiline fields in my.field and need to count the number of received filenames. @Fabio-sama suggested me in another thread (which was in the wrong section) something like that: { "my… --- ## [APM AGENT Issue](https://discuss.elastic.co/t/apm-agent-issue/215271)
**Author:** [@Peter\_Versan\_Setier](https://discuss.elastic.co/u/Peter_Versan_Setier)\ **Replies:** 1\ **Last updated:** [January 16, 2020, 10:36am UTC](https://discuss.elastic.co/t/apm-agent-issue/215271 "2020-01-16T10:36:51Z")
I have tried the version elastic-apm-agent-1.11 and 1.12 \[apm-reporter\] ERROR co.elastic.apm.agent.report.IntakeV2ReportingEventHandler - Error sending data to APM server: Server returned HTTP response code: 400 for UR… --- ## [Error: Unable to find driver class via URLClassLoader in given driver jars](https://discuss.elastic.co/t/error-unable-to-find-driver-class-via-urlclassloader-in-given-driver-jars/215254)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 1\ **Last updated:** [January 16, 2020, 10:32am UTC](https://discuss.elastic.co/t/error-unable-to-find-driver-class-via-urlclassloader-in-given-driver-jars/215254 "2020-01-16T10:32:05Z")
Hello, I am trying run config file using logstash. It is giving below error: Error: Unable to find driver class via URLClassLoader in given driver jars: Java::oracle.jdbc.driver.OracleDriver and Java::oracle.jdbc.dri… --- ## [Can't parse boolean value](https://discuss.elastic.co/t/cant-parse-boolean-value/215273)
**Author:** [@Valentin\_Hirson](https://discuss.elastic.co/u/Valentin_Hirson)\ **Replies:** 2\ **Last updated:** [January 16, 2020, 10:14am UTC](https://discuss.elastic.co/t/cant-parse-boolean-value/215273 "2020-01-16T10:14:51Z")
Hello, I have got the following issue on my production environnement : 2020-01-15 16:26:54\] report.ERROR: {"error":{"root\_cause":\[{"type":"query\_shard\_exception","reason":"failed to create query: { "terms" : { "spt\_t… --- ## [Suggestion: ECE Ansible Role Addition](https://discuss.elastic.co/t/suggestion-ece-ansible-role-addition/215285)
**Author:** [@TWhitehouse](https://discuss.elastic.co/u/TWhitehouse)\ **Replies:** 0\ **Last updated:** [January 16, 2020, 9:46am UTC](https://discuss.elastic.co/t/suggestion-ece-ansible-role-addition/215285 "2020-01-16T09:46:54Z")
I've used the Ansible role to configure a number of ECE hosts running on RHEL7 I noticed that the docker installation on RHEL7 doesn't include docker-procy, docker-runc, or docker-init (only \*-current e.g docker-proxy-c… --- ## [Kibana elasticsearch Cluster communication](https://discuss.elastic.co/t/kibana-elasticsearch-cluster-communication/214559)
**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\ **Replies:** 2\ **Last updated:** [January 16, 2020, 9:13am UTC](https://discuss.elastic.co/t/kibana-elasticsearch-cluster-communication/214559 "2020-01-16T09:13:01Z")
Hi Team, We are currently using 7 node elasticsearch cluster with 6.7.1 with 5 master eligible nodes. Recently observed that whenever master changes KIbana is not losing connectivity without modifying elasticsearch ip… --- ## [Date field type problem in reindexing](https://discuss.elastic.co/t/date-field-type-problem-in-reindexing/212865)
**Author:** [@Sina\_Gholami](https://discuss.elastic.co/u/Sina_Gholami)\ **Replies:** 6\ **Last updated:** [January 16, 2020, 8:08am UTC](https://discuss.elastic.co/t/date-field-type-problem-in-reindexing/212865 "2020-01-16T08:08:43Z")
I am trying to merge multiple indices with same fields in Elasticsearch by using \_reindex API as follow: POST \_reindex { "source": { "index": \["a","b"\] }, "dest": { "index": "ab" } } my problem is the date fiel… --- ## [Is Open Java with Elasticsearch is suggestable?](https://discuss.elastic.co/t/is-open-java-with-elasticsearch-is-suggestable/215260)
**Author:** [@Sanjeev\_Kumar](https://discuss.elastic.co/u/Sanjeev_Kumar)\ **Replies:** 1\ **Last updated:** [January 16, 2020, 7:51am UTC](https://discuss.elastic.co/t/is-open-java-with-elasticsearch-is-suggestable/215260 "2020-01-16T07:51:16Z")
Is Open Java with Elasticsearch is suggestable? I mean, is there any limitations in terms of features and usage? Also is the latest OravleJava version is included in OpenJava that impacts Elasticsearch operations? --- ## [Accessing elastic search from a network](https://discuss.elastic.co/t/accessing-elastic-search-from-a-network/215116)
**Author:** [@fekade](https://discuss.elastic.co/u/fekade)\ **Replies:** 12\ **Last updated:** [January 16, 2020, 7:35am UTC](https://discuss.elastic.co/t/accessing-elastic-search-from-a-network/215116 "2020-01-16T07:35:43Z")
I configured Elasticsearch and kibana 7.5.1 in windows server 2016 and working successfully. I need to access elasticsearch from the network but I couldn't please any one have some idea. kibana is accessible from the n… --- ## [Message pattern Identification in kibana](https://discuss.elastic.co/t/message-pattern-identification-in-kibana/215251)
**Author:** [@manikandanid](https://discuss.elastic.co/u/manikandanid)\ **Replies:** 0\ **Last updated:** [January 16, 2020, 6:48am UTC](https://discuss.elastic.co/t/message-pattern-identification-in-kibana/215251 "2020-01-16T06:48:25Z")
On searching for a term "took" under discover i do get 10k messages. I am sure all these 10K messages fall under a total 15 message pattern. What i need is to get the different pattern available in the 10k messages. Is t… --- ## [Passing the security credentials in REST Search API](https://discuss.elastic.co/t/passing-the-security-credentials-in-rest-search-api/214944)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [January 16, 2020, 6:29am UTC](https://discuss.elastic.co/t/passing-the-security-credentials-in-rest-search-api/214944 "2020-01-16T06:29:33Z")
I am looking for the way to transfer the credential details for the REST Search API request. Checked the API specification and haven't found any fields. Would like to know how the authentication and authorization is … --- ## [Is there a way to set security based on value-level of field](https://discuss.elastic.co/t/is-there-a-way-to-set-security-based-on-value-level-of-field/215246)
**Author:** [@Tennis](https://discuss.elastic.co/u/Tennis)\ **Replies:** 0\ **Last updated:** [January 16, 2020, 6:14am UTC](https://discuss.elastic.co/t/is-there-a-way-to-set-security-based-on-value-level-of-field/215246 "2020-01-16T06:14:39Z")
Data Framework: Category: A, number: 1 Category: B, number: 2 Category: A, number: 3 Category: C, number: 4 Category: B, number: 5 As we can set the filed level security as official mentioned. (Field level securi… --- ## [How to use dm\_crypt with elasticsearch](https://discuss.elastic.co/t/how-to-use-dm-crypt-with-elasticsearch/214781)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 3\ **Last updated:** [January 16, 2020, 5:41am UTC](https://discuss.elastic.co/t/how-to-use-dm-crypt-with-elasticsearch/214781 "2020-01-16T05:41:38Z")
In my case, the data stored in elasticsearch must be encrypted. So i will use dm\_crypt + LUKS. Here is my file system. elasticsearch.yml In the current state, inserting and searching data using kibana dev tools w… --- ## [Newly added keyword field is not searchable](https://discuss.elastic.co/t/newly-added-keyword-field-is-not-searchable/215239)
**Author:** [@tamjid](https://discuss.elastic.co/u/tamjid)\ **Replies:** 0\ **Last updated:** [January 16, 2020, 5:25am UTC](https://discuss.elastic.co/t/newly-added-keyword-field-is-not-searchable/215239 "2020-01-16T05:25:07Z")
ES version: 6.8.x Hi, I added 2 new keyword fields to some of my documents (10%) in an index. But those 2 new fields are not searchable. I refreshed the field list from kibana (management -\> index pattern -\> Refresh bu… --- ## [Ingest pipeline for nested type](https://discuss.elastic.co/t/ingest-pipeline-for-nested-type/215235)
**Author:** [@shaileshgaikwad](https://discuss.elastic.co/u/shaileshgaikwad)\ **Replies:** 0\ **Last updated:** [January 16, 2020, 4:43am UTC](https://discuss.elastic.co/t/ingest-pipeline-for-nested-type/215235 "2020-01-16T04:43:10Z")
I am trying to use Ingest pipeline for nested object and I am getting error. "type" : "ingest\_processor\_exception", "reason" : "java.lang.IllegalArgumentException: field \[content\] not present as part of … --- ## [Field list](https://discuss.elastic.co/t/field-list/214863)
**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\ **Replies:** 22\ **Last updated:** [January 16, 2020, 4:29am UTC](https://discuss.elastic.co/t/field-list/214863 "2020-01-16T04:29:03Z")
I have this entry in logstash.conf mutate { split =\> \["message","Employee"\] add\_field =\> {"part1" =\>"%{\[message\]\[0\]}"} add\_field =\> {"part2" =\>"%{\[message\]\[1\]}"} } mutate { split =\> \[… --- ## [Any way to do something similar to SQL's "IN"/"NOT IN" other table?](https://discuss.elastic.co/t/any-way-to-do-something-similar-to-sqls-in-not-in-other-table/214750)
**Author:** [@Wang\_Hay\_Ng](https://discuss.elastic.co/u/Wang_Hay_Ng)\ **Replies:** 9\ **Last updated:** [January 16, 2020, 1:42am UTC](https://discuss.elastic.co/t/any-way-to-do-something-similar-to-sqls-in-not-in-other-table/214750 "2020-01-16T01:42:09Z")
i have never used elk before and not very familiar with the structure of the database, mostly work with mysql stuff before at the old place. since people want a visualization of the server log, i put the log into elk st… --- ## [Geo lookups using Canadian postal codes](https://discuss.elastic.co/t/geo-lookups-using-canadian-postal-codes/215230)
**Author:** [@Rob\_wylde](https://discuss.elastic.co/u/Rob_wylde)\ **Replies:** 2\ **Last updated:** [January 16, 2020, 1:30am UTC](https://discuss.elastic.co/t/geo-lookups-using-canadian-postal-codes/215230 "2020-01-16T01:30:22Z")
Has anyone come across a solution for this? I know maxmind mmdb's are not an option. So i think im stuck possibly writing a custom filter to query a google api and to be honest I do not even know where to begin with that… --- ## [Skip\_on\_invalid\_json skipping all filters](https://discuss.elastic.co/t/skip-on-invalid-json-skipping-all-filters/215195)
**Author:** [@jfcantu](https://discuss.elastic.co/u/jfcantu)\ **Replies:** 3\ **Last updated:** [January 16, 2020, 12:06am UTC](https://discuss.elastic.co/t/skip-on-invalid-json-skipping-all-filters/215195 "2020-01-16T00:06:54Z")
Hi, I ran across something unexpected yesterday, that doesn't seem to line up with the Logstash documentation, and I was wondering if this was intended behavior (or if I did something wrong.) TL;DR - if you have multip… --- ## [Elasticsearch version 6.8.6 oss unable to start](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918)
**Author:** [@mrnguuyen](https://discuss.elastic.co/u/mrnguuyen)\ **Replies:** 4\ **Last updated:** [January 15, 2020, 11:12pm UTC](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918 "2020-01-15T23:12:24Z")
Hi all, I am trying to do a fresh install of elasticsearch-oss-6.8.6 with OpenJDK version 1.8.0\_181. An elasticsearch-oss-6.5 was able to successfully install before but I am receiving errors related to the keystore and… --- ## [Scripted Field for elements inside JSON objects](https://discuss.elastic.co/t/scripted-field-for-elements-inside-json-objects/215224)
**Author:** [@yishaihl](https://discuss.elastic.co/u/yishaihl)\ **Replies:** 0\ **Last updated:** [January 15, 2020, 10:54pm UTC](https://discuss.elastic.co/t/scripted-field-for-elements-inside-json-objects/215224 "2020-01-15T22:54:39Z")
Hey Guys, I'm using FluentD (deployed as DaemonSet) to stream k8s app (containers) logs to elasticsearch. i want to extract specific keys from the 'log' key string (see attached) in elastic such as logKey: ... or status… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1680) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1682)