# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1692 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1693 --- ## [Logstash parsing problem](https://discuss.elastic.co/t/logstash-parsing-problem/214379)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 4\ **Last updated:** [January 9, 2020, 7:01pm UTC](https://discuss.elastic.co/t/logstash-parsing-problem/214379 "2020-01-09T19:01:33Z")
Hello guys! I'm trying to parse the following type of log message: 111.22.333.444 - - \[08/Jan/2020:11:50:15 +0100\] \[https://awdasfe.asfeaf.cas:111\] "POST /VFQ3P/asfiheasfhe/v2/safiehjafe/check HTTP/1.1" 204 0 "-" "-" (… --- ## [TCP input plugin generate additional port field](https://discuss.elastic.co/t/tcp-input-plugin-generate-additional-port-field/214459)
**Author:** [@lantern77](https://discuss.elastic.co/u/lantern77)\ **Replies:** 2\ **Last updated:** [January 9, 2020, 7:00pm UTC](https://discuss.elastic.co/t/tcp-input-plugin-generate-additional-port-field/214459 "2020-01-09T19:00:12Z")
Hello, For some reason, I can't seem to figure out why, but whenever we use the tcp input plugin, an addition "port" field gets added to our documents. For example "port": 39750. Can anyone confirm if this is default b… --- ## [Index strategy for non retantion data and huge dataset](https://discuss.elastic.co/t/index-strategy-for-non-retantion-data-and-huge-dataset/214477)
**Author:** [@sweb](https://discuss.elastic.co/u/sweb)\ **Replies:** 0\ **Last updated:** [January 9, 2020, 6:37pm UTC](https://discuss.elastic.co/t/index-strategy-for-non-retantion-data-and-huge-dataset/214477 "2020-01-09T18:37:22Z")
I have many content sites and their produce about 1000 content per day, and many of them now is has about 3 million records. Sample document: { "website\_id": 10, "title": "Sample title", "description": "Sample de… --- ## [Using Upsert across index](https://discuss.elastic.co/t/using-upsert-across-index/214465)
**Author:** [@smo](https://discuss.elastic.co/u/smo)\ **Replies:** 4\ **Last updated:** [January 9, 2020, 5:22pm UTC](https://discuss.elastic.co/t/using-upsert-across-index/214465 "2020-01-09T17:22:27Z")
I use this config to insert document in ES :\`\`\` output { if \[type\] == "usage" { elasticsearch { hosts =\> \["elastic4:9204"\] index =\> "usage-%{+YYYY-MM}" document\_id =\> "%{IDSU}" action =\> "update" doc\_as\_upsert =\> … --- ## [cosineSimilarity: script score query returned an invalid score for doc:](https://discuss.elastic.co/t/cosinesimilarity-script-score-query-returned-an-invalid-score-for-doc/213931)
**Author:** [@lok63](https://discuss.elastic.co/u/lok63)\ **Replies:** 2\ **Last updated:** [January 9, 2020, 6:09pm UTC](https://discuss.elastic.co/t/cosinesimilarity-script-score-query-returned-an-invalid-score-for-doc/213931 "2020-01-09T18:09:04Z")
I have a strange issue with the \_search API. I saw other people in this forum which had similar issues and the problem for them was that they had negative values. However in my case I am using dense vectors. Moreover my … --- ## [Help with combining events from a log](https://discuss.elastic.co/t/help-with-combining-events-from-a-log/214441)
**Author:** [@chapmanjc](https://discuss.elastic.co/u/chapmanjc)\ **Replies:** 1\ **Last updated:** [January 9, 2020, 5:40pm UTC](https://discuss.elastic.co/t/help-with-combining-events-from-a-log/214441 "2020-01-09T17:40:47Z")
Hello all, I am a total newbie to the ELK Stack (Please be kind!) and I am hoping to get some assistance. Essentially what I am wanting to do is when I go into Discovery in Kibana, it takes a "sessionID" and combines i… --- ## [Snapshot process timing out , How to split snapshot process up?](https://discuss.elastic.co/t/snapshot-process-timing-out-how-to-split-snapshot-process-up/214468)
**Author:** [@Bkelly](https://discuss.elastic.co/u/Bkelly)\ **Replies:** 3\ **Last updated:** [January 9, 2020, 5:22pm UTC](https://discuss.elastic.co/t/snapshot-process-timing-out-how-to-split-snapshot-process-up/214468 "2020-01-09T17:22:38Z")
I have designed an AWS lambda function to snapshot all indices on our smaller cluster . We have 16 data nodes , 3 master nodes , 2 query nodes; with quite alot of data to snapshot. The function worked ,however lambda f… --- ## [Type string in a multiple input Http\_Poller for different Grok pattern](https://discuss.elastic.co/t/type-string-in-a-multiple-input-http-poller-for-different-grok-pattern/211481)
**Author:** [@kamalesh](https://discuss.elastic.co/u/kamalesh)\ **Replies:** 3\ **Last updated:** [January 9, 2020, 5:10pm UTC](https://discuss.elastic.co/t/type-string-in-a-multiple-input-http-poller-for-different-grok-pattern/211481 "2020-01-09T17:10:10Z")
Hi All, I am trying to using multiple Url's for the http\_poller and need to use a different Grok patterns for each of the Url's I am aware that i can make use of type string in the Input plugins and make Grok patterns … --- ## [Content Security Policy: error](https://discuss.elastic.co/t/content-security-policy-error/214257)
**Author:** [@oussama\_ben\_sassi](https://discuss.elastic.co/u/oussama_ben_sassi)\ **Replies:** 1\ **Last updated:** [January 9, 2020, 5:07pm UTC](https://discuss.elastic.co/t/content-security-policy-error/214257 "2020-01-09T17:07:50Z")
Content Security Policy: Les paramètres de la page ont empêché le chargement d’une ressource à inline (« script-src »). please how to fix this error --- ## [Kibana Optimization and Load Balancing](https://discuss.elastic.co/t/kibana-optimization-and-load-balancing/214343)
**Author:** [@Purushoth\_Kumar](https://discuss.elastic.co/u/Purushoth_Kumar)\ **Replies:** 1\ **Last updated:** [January 9, 2020, 5:07pm UTC](https://discuss.elastic.co/t/kibana-optimization-and-load-balancing/214343 "2020-01-09T17:07:12Z")
Hi guys, I'm working on my 4 node ES cluster. I see that my kibana is lagging as many users are trying to access the kibana. I need to arrive at a solution to optimize the kibana performance. After going through some d… --- ## [Setting up Kibana behind AWS application load balancer](https://discuss.elastic.co/t/setting-up-kibana-behind-aws-application-load-balancer/214348)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 1\ **Last updated:** [January 9, 2020, 4:59pm UTC](https://discuss.elastic.co/t/setting-up-kibana-behind-aws-application-load-balancer/214348 "2020-01-09T16:59:55Z")
I am having trouble setting up multiple Kibana 7.3.2 instances behind an AWS ALB. Actually, I don't even get that far as the installation of Kibana is not going well. I follow the simple guide (https://www.elastic.co/g… --- ## [Not able to write in file with particular tag](https://discuss.elastic.co/t/not-able-to-write-in-file-with-particular-tag/214440)
**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\ **Replies:** 3\ **Last updated:** [January 9, 2020, 4:46pm UTC](https://discuss.elastic.co/t/not-able-to-write-in-file-with-particular-tag/214440 "2020-01-09T16:46:40Z")
I'm trying to write all logs with tag Prod to file but it's not working. When I remove tag condition it works but not with tags. Any inputs? Here is my pipeline: input { tcp { port =\> 10514 type =\> syslog… --- ## [Curator configuation](https://discuss.elastic.co/t/curator-configuation/214279)
**Author:** [@Dev\_Chakraborty](https://discuss.elastic.co/u/Dev_Chakraborty)\ **Replies:** 3\ **Last updated:** [January 9, 2020, 4:41pm UTC](https://discuss.elastic.co/t/curator-configuation/214279 "2020-01-09T16:41:14Z")
Hi Team, I am using curator version 5.8.1 and I have setup the config file as below: curator.yml client: hosts: — serverIP or localhost port: 9200 url\_prefix: use\_ssl: False certificate: client\_cert: client\_ke… --- ## [Persisted queue and Zabbix Ouput Plugin](https://discuss.elastic.co/t/persisted-queue-and-zabbix-ouput-plugin/214395)
**Author:** [@Halgrim](https://discuss.elastic.co/u/Halgrim)\ **Replies:** 1\ **Last updated:** [January 9, 2020, 3:58pm UTC](https://discuss.elastic.co/t/persisted-queue-and-zabbix-ouput-plugin/214395 "2020-01-09T15:58:10Z")
Hello! I'm using logstash with a persisted queue option. And it works fine when I using elasticsearch as output plugin. (If the connection with ES is lost messages goes to persisted queue and when the connection is up a… --- ## [How to make cgroup metrics visible from node stat API](https://discuss.elastic.co/t/how-to-make-cgroup-metrics-visible-from-node-stat-api/214376)
**Author:** [@Cyndi-Tsui](https://discuss.elastic.co/u/Cyndi-Tsui)\ **Replies:** 1\ **Last updated:** [January 9, 2020, 3:52pm UTC](https://discuss.elastic.co/t/how-to-make-cgroup-metrics-visible-from-node-stat-api/214376 "2020-01-09T15:52:58Z")
Hi, I am trying to use node stat API to collect some cgroup metrics like: os.cgroup.memory.limit\_in\_bytes os.cgroup.memory.usage\_in\_bytes But cgroup metrics are not visible: API: https://localhost:9200/\_nodes/\<… --- ## [Index Templates for older filebeat indices...how?](https://discuss.elastic.co/t/index-templates-for-older-filebeat-indices-how/214461)
**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\ **Replies:** 0\ **Last updated:** [January 9, 2020, 3:52pm UTC](https://discuss.elastic.co/t/index-templates-for-older-filebeat-indices-how/214461 "2020-01-09T15:52:21Z")
I migrated to a 7.4 cluster from a stand alone 5.x single test instance. I may have carried over some legacy bad habits so to speak. Attempting to implement ILM policies but exposing other issues. I followed the same … --- ## [Logstash 7.5.1 High CPU Usage](https://discuss.elastic.co/t/logstash-7-5-1-high-cpu-usage/214120)
**Author:** [@chris\_g](https://discuss.elastic.co/u/chris_g)\ **Replies:** 6\ **Last updated:** [January 9, 2020, 3:46pm UTC](https://discuss.elastic.co/t/logstash-7-5-1-high-cpu-usage/214120 "2020-01-09T15:46:02Z")
I recently upgraded Elastic from 7.0.1 to 7.5.1. Elasticsearch and Kibana had no issues but I am having some trouble with Logstash. When I run Logstash 7.0.1, no issues. Everything works as normal. Then, I upgraded to 7… --- ## [How to get exact number of buckets returned with too\_many\_buckets\_exception](https://discuss.elastic.co/t/how-to-get-exact-number-of-buckets-returned-with-too-many-buckets-exception/214284)
**Author:** [@BrianJenney](https://discuss.elastic.co/u/BrianJenney)\ **Replies:** 1\ **Last updated:** [January 9, 2020, 3:36pm UTC](https://discuss.elastic.co/t/how-to-get-exact-number-of-buckets-returned-with-too-many-buckets-exception/214284 "2020-01-09T15:36:07Z")
Like many people - I've received the too\_many\_buckets\_exception error with an unoptimized query. How can we get the actual number of buckets returned that triggered this error? --- ## [ElasticSeach Prefix Query For boost](https://discuss.elastic.co/t/elasticseach-prefix-query-for-boost/214458)
**Author:** [@abhishek.tripathi](https://discuss.elastic.co/u/abhishek.tripathi)\ **Replies:** 0\ **Last updated:** [January 9, 2020, 3:31pm UTC](https://discuss.elastic.co/t/elasticseach-prefix-query-for-boost/214458 "2020-01-09T15:31:35Z")
Hi Everyone, I am trying to search for data in my index with the exact match in prefix query, but the analyzer changes it to different tokens and give me results based on different tokens. For example I have few fields … --- ## [Exact Match of words by using Multimatch query](https://discuss.elastic.co/t/exact-match-of-words-by-using-multimatch-query/214456)
**Author:** [@ashutosh1](https://discuss.elastic.co/u/ashutosh1)\ **Replies:** 0\ **Last updated:** [January 9, 2020, 3:26pm UTC](https://discuss.elastic.co/t/exact-match-of-words-by-using-multimatch-query/214456 "2020-01-09T15:26:10Z")
Hi All, From last 10 days i am trying manage my search result coming by multimatch query. The problem is i am getting the results in which the words are partially matched. Example: if i am looking for testing in my met… --- ## [What security layer logstash uses](https://discuss.elastic.co/t/what-security-layer-logstash-uses/214021)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 3\ **Last updated:** [January 9, 2020, 3:19pm UTC](https://discuss.elastic.co/t/what-security-layer-logstash-uses/214021 "2020-01-09T15:19:34Z")
HI All, We are using logstash to transfer data from our source to elasticsearch, just wondering when data is transferred is there any kind of encryption happens to send the data securely? Thanks Gauti --- ## [Scatter plot using a field from filebeat against a field from metricbeat?](https://discuss.elastic.co/t/scatter-plot-using-a-field-from-filebeat-against-a-field-from-metricbeat/214454)
**Author:** [@Shweta\_Patil](https://discuss.elastic.co/u/Shweta_Patil)\ **Replies:** 0\ **Last updated:** [January 9, 2020, 3:10pm UTC](https://discuss.elastic.co/t/scatter-plot-using-a-field-from-filebeat-against-a-field-from-metricbeat/214454 "2020-01-09T15:10:46Z")
I am using Kibana 7.2.0, is it possible to create scatter plot using a field from filebeat against a field from metricbeat? E.g scatter plot for Requests Per Second (from Filebeat) vs CPU usage (from Metricbeat) --- ## ["Cannot delete indices that are being snapshotted" when deleting index](https://discuss.elastic.co/t/cannot-delete-indices-that-are-being-snapshotted-when-deleting-index/214442)
**Author:** [@hogehoge](https://discuss.elastic.co/u/hogehoge)\ **Replies:** 2\ **Last updated:** [January 9, 2020, 3:06pm UTC](https://discuss.elastic.co/t/cannot-delete-indices-that-are-being-snapshotted-when-deleting-index/214442 "2020-01-09T15:06:48Z")
Elasticsearch 6.8 AWS (Use Elasticsearch service) Automatic snapshot performed at UTC0 Temporarily store file contents in index Format the data based on the fetched index and store it in another index Delete temporary… --- ## [How to change the ip address dynamically without stop & start?](https://discuss.elastic.co/t/how-to-change-the-ip-address-dynamically-without-stop-start/214450)
**Author:** [@sunnut](https://discuss.elastic.co/u/sunnut)\ **Replies:** 1\ **Last updated:** [January 9, 2020, 3:02pm UTC](https://discuss.elastic.co/t/how-to-change-the-ip-address-dynamically-without-stop-start/214450 "2020-01-09T15:02:54Z")
As title described --- ## [Unable to start Elasticsearch 7.5 on RHEL 7](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-5-on-rhel-7/214244)
**Author:** [@stressedsalmon](https://discuss.elastic.co/u/stressedsalmon)\ **Replies:** 15\ **Last updated:** [January 9, 2020, 2:51pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-5-on-rhel-7/214244 "2020-01-09T14:51:39Z")
Hello, I am having an issue running the elasticsearch service after installation. I have seen another article here which was not answered. I am running into the same issue as the other user. Here are some log files: Pa… --- ## [Issue with kibana log data](https://discuss.elastic.co/t/issue-with-kibana-log-data/214230)
**Author:** [@Guy\_Rawsthorn](https://discuss.elastic.co/u/Guy_Rawsthorn)\ **Replies:** 4\ **Last updated:** [January 9, 2020, 2:40pm UTC](https://discuss.elastic.co/t/issue-with-kibana-log-data/214230 "2020-01-09T14:40:48Z")
Hi, I am using filebeat and logstash to parse the logs of a server to elastic search and then Kibana. elastic search version 7.5 & kibana version: latest. I am seeing logs being processed in kibana but the output seem… --- ## [Delete documents by query with values from other index](https://discuss.elastic.co/t/delete-documents-by-query-with-values-from-other-index/214400)
**Author:** [@johanwallenborg](https://discuss.elastic.co/u/johanwallenborg)\ **Replies:** 2\ **Last updated:** [January 9, 2020, 1:43pm UTC](https://discuss.elastic.co/t/delete-documents-by-query-with-values-from-other-index/214400 "2020-01-09T13:43:43Z")
Hello, I've created a similar question before which didn't get any answers so I create a new topic but with more information / code that maybe helps to understand what i'm after. I've made an example of what I want to … --- ## [How can I remove the es-default service installed by cloud-on-k8s](https://discuss.elastic.co/t/how-can-i-remove-the-es-default-service-installed-by-cloud-on-k8s/214358)
**Author:** [@Jone](https://discuss.elastic.co/u/Jone)\ **Replies:** 1\ **Last updated:** [January 9, 2020, 1:15pm UTC](https://discuss.elastic.co/t/how-can-i-remove-the-es-default-service-installed-by-cloud-on-k8s/214358 "2020-01-09T13:15:00Z")
How can I remove the es-default service installed by cloud-on-k8s, or add port to the es-default service? --- ## [Logstash aggregate - JDBC SQL Relations](https://discuss.elastic.co/t/logstash-aggregate-jdbc-sql-relations/214424)
**Author:** [@Ahmed\_Ahmed](https://discuss.elastic.co/u/Ahmed_Ahmed)\ **Replies:** 0\ **Last updated:** [January 9, 2020, 12:02pm UTC](https://discuss.elastic.co/t/logstash-aggregate-jdbc-sql-relations/214424 "2020-01-09T12:02:36Z")
Hi, I have been following your responses and found them always helpful and spot on. I would like to ask With reference to the following where there is a parent-child relation is pipelined Logstash aggregate-example4 I… --- ## [Elasticsearch Bool Query Issue](https://discuss.elastic.co/t/elasticsearch-bool-query-issue/214384)
**Author:** [@Venkata\_Naresh](https://discuss.elastic.co/u/Venkata_Naresh)\ **Replies:** 1\ **Last updated:** [January 9, 2020, 12:45pm UTC](https://discuss.elastic.co/t/elasticsearch-bool-query-issue/214384 "2020-01-09T12:45:01Z")
Im unable to query elasticsearch documents for the below scenario. For Ex: ID:1 Val:2,3 I will query ES with combination of ID and Val. So if both matches it should return the matched documents, if not it should retu… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1691) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1693)