# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1702 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1703 --- ## [How to cover all conditions when fetch all data with scroll?](https://discuss.elastic.co/t/how-to-cover-all-conditions-when-fetch-all-data-with-scroll/213461)
**Author:** [@riverbuilding](https://discuss.elastic.co/u/riverbuilding)\ **Replies:** 6\ **Last updated:** [January 3, 2020, 12:53pm UTC](https://discuss.elastic.co/t/how-to-cover-all-conditions-when-fetch-all-data-with-scroll/213461 "2020-01-03T12:53:21Z")
based on this discuss: the content I quote below: Short answer: yes, if you have a single shard index (as seems to be in your case) - it is expected behavior, but it can happen even if you have multiple shards. Longer… --- ## [AWS ELK : Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError"](https://discuss.elastic.co/t/aws-elk-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror/213691)
**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\ **Replies:** 2\ **Last updated:** [January 3, 2020, 12:52pm UTC](https://discuss.elastic.co/t/aws-elk-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror/213691 "2020-01-03T12:52:20Z")
Hi All, Getting LogStash::ConfigurationError in AWS ELK environment. below is my logstash file input { file { type =\> "audit" path =\> \["/var/log/tomcat8/\*\*/\*-audit.log"\] start… --- ## [elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for](https://discuss.elastic.co/t/elasticsearch-common-breaker-circuitbreakingexception-parent-data-too-large-data-for/213703)
**Author:** [@abhi\_12](https://discuss.elastic.co/u/abhi_12)\ **Replies:** 0\ **Last updated:** [January 3, 2020, 12:28pm UTC](https://discuss.elastic.co/t/elasticsearch-common-breaker-circuitbreakingexception-parent-data-too-large-data-for/213703 "2020-01-03T12:28:57Z")
Hi All, We are getting these error on elastic-search. Please let me know the permanent fix for this. elastic-search version:elasticsearch-7.3.2 filebeatversion: filebeat-7.3.2 ERROR pipeline/output.go:100 Failed t… --- ## [Grok parse failure ensist](https://discuss.elastic.co/t/grok-parse-failure-ensist/213698)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 0\ **Last updated:** [January 3, 2020, 12:02pm UTC](https://discuss.elastic.co/t/grok-parse-failure-ensist/213698 "2020-01-03T12:02:53Z")
Hello, I am trying to parse the following log. My purpose is to take the number 4 field that is highlighted in the vertical red rectangle The exact log message to be parsed is this one: C:\\Program Files (x86)\\Always… --- ## [Elastic storage purpose and what will be stored in that](https://discuss.elastic.co/t/elastic-storage-purpose-and-what-will-be-stored-in-that/213688)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 11:44am UTC](https://discuss.elastic.co/t/elastic-storage-purpose-and-what-will-be-stored-in-that/213688 "2020-01-03T11:44:15Z")
Hi Team, I am planning to implement ELK to one of my application for log analysis. i would like to know what will be stored in elastic storage ? how to estimate the elastic storage capacity requirement? does the log fi… --- ## [Pipeline disabling](https://discuss.elastic.co/t/pipeline-disabling/213604)
**Author:** [@pchakour](https://discuss.elastic.co/u/pchakour)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 10:37am UTC](https://discuss.elastic.co/t/pipeline-disabling/213604 "2020-01-03T10:37:24Z")
Hello ! I'm currently working on the logstash 7.5.1. I'm using the multiple pipelines file with the auto reload mode to create and delete pipelines when logstash is running. I noticed that Logstash doesn't create a p… --- ## [Kibana:7.5.1(latest) Helm-Chart is in Pending State!?](https://discuss.elastic.co/t/kibana-7-5-1-latest-helm-chart-is-in-pending-state/213632)
**Author:** [@JDev](https://discuss.elastic.co/u/JDev)\ **Replies:** 2\ **Last updated:** [January 3, 2020, 10:09am UTC](https://discuss.elastic.co/t/kibana-7-5-1-latest-helm-chart-is-in-pending-state/213632 "2020-01-03T10:09:14Z")
Hi, i have succesfully deployed elasticsearch master and can access it from other container. Service URL: http://elasticsearch-master.efk.svc.cluster.local:9200 I'm trying to deploy kibana with default settings, but re… --- ## [Elasticsearch connector error](https://discuss.elastic.co/t/elasticsearch-connector-error/213593)
**Author:** [@xemyleex](https://discuss.elastic.co/u/xemyleex)\ **Replies:** 3\ **Last updated:** [January 3, 2020, 10:07am UTC](https://discuss.elastic.co/t/elasticsearch-connector-error/213593 "2020-01-03T10:07:37Z")
I have this error with the elasticsearch connector. Do you know why? \`name "elasticsearch-sink"\` \`connector \` \`state "RUNNING"\` \`worker\_id "xxx.xxx.xxx.xxx:8083"\` \`tasks \` \`0 \` \`id 0\` \`state "FAILED"\` \`worker\_id "xxx.xx… --- ## [When I delete a lot indices.The cluster is red.What does the cluster do when I delete a lot indices?](https://discuss.elastic.co/t/when-i-delete-a-lot-indices-the-cluster-is-red-what-does-the-cluster-do-when-i-delete-a-lot-indices/213674)
**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 9:36am UTC](https://discuss.elastic.co/t/when-i-delete-a-lot-indices-the-cluster-is-red-what-does-the-cluster-do-when-i-delete-a-lot-indices/213674 "2020-01-03T09:36:15Z")
When I delete a lot indices,about 20 indices .The cluster become red.What does the cluster do when I delete a lot indices?Or is there any document than I can read. --- ## [How to update index pattern in Kibana?](https://discuss.elastic.co/t/how-to-update-index-pattern-in-kibana/213651)
**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 9:19am UTC](https://discuss.elastic.co/t/how-to-update-index-pattern-in-kibana/213651 "2020-01-03T09:19:32Z")
How to update index pattern in Kibana ? --- ## [Unable to index csv to elasticsearch (MalformedCSVError: Unclosed quoted field)](https://discuss.elastic.co/t/unable-to-index-csv-to-elasticsearch-malformedcsverror-unclosed-quoted-field/211422)
**Author:** [@SHUBHAM\_KADAM](https://discuss.elastic.co/u/SHUBHAM_KADAM)\ **Replies:** 4\ **Last updated:** [January 3, 2020, 9:01am UTC](https://discuss.elastic.co/t/unable-to-index-csv-to-elasticsearch-malformedcsverror-unclosed-quoted-field/211422 "2020-01-03T09:01:03Z")
Hi, I have been trying to index csv file to elasticsearch using logstash. But, due to issue related to the csv file, I am unable to do so. Sample data: file,id,Last-Updated,SubmittedOn,Engg,Des /path/to/file.c,id21,4… --- ## [Multiple users ...multiple kibana instances?](https://discuss.elastic.co/t/multiple-users-multiple-kibana-instances/213626)
**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\ **Replies:** 2\ **Last updated:** [January 3, 2020, 8:43am UTC](https://discuss.elastic.co/t/multiple-users-multiple-kibana-instances/213626 "2020-01-03T08:43:26Z")
Hi forum. After having my first xpack-enabled cluster I want to experiment with multiple users. The idea is having multiple users accessing their indices (so, multiple users share the EL cluster) while keeping them enc… --- ## [Rest High Level Client : Request timeout is not working](https://discuss.elastic.co/t/rest-high-level-client-request-timeout-is-not-working/213479)
**Author:** [@KULDEEP\_SINGH](https://discuss.elastic.co/u/KULDEEP_SINGH)\ **Replies:** 5\ **Last updated:** [January 3, 2020, 8:00am UTC](https://discuss.elastic.co/t/rest-high-level-client-request-timeout-is-not-working/213479 "2020-01-03T08:00:59Z")
We are trying to use a request timeout in our queries but it doesn't seem to be working for us. Here're the things we have done as part of setup: search.default\_allow\_partial\_results : false (on server side as well a… --- ## [LDAP authentication on local node and processing on cloud node](https://discuss.elastic.co/t/ldap-authentication-on-local-node-and-processing-on-cloud-node/213449)
**Author:** [@binith](https://discuss.elastic.co/u/binith)\ **Replies:** 4\ **Last updated:** [January 3, 2020, 7:55am UTC](https://discuss.elastic.co/t/ldap-authentication-on-local-node-and-processing-on-cloud-node/213449 "2020-01-03T07:55:22Z")
Our LDAP server is restricted to requests from the intranet. But we would like to run ElasticSearch with LDAP on cloud. Is it a good strategy to run a local node of ElasticSearch locally within the intranet( only intende… --- ## [Logstash JDBC Plugin Cassandra, Maria Driver Not Working](https://discuss.elastic.co/t/logstash-jdbc-plugin-cassandra-maria-driver-not-working/213555)
**Author:** [@sharath\_sai](https://discuss.elastic.co/u/sharath_sai)\ **Replies:** 0\ **Last updated:** [January 2, 2020, 10:37am UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-cassandra-maria-driver-not-working/213555 "2020-01-02T10:37:54Z")
I am Working on Logstash input Jdbc with different databases, Primarily I am trying for cassandra and I am using DBSchema driver, the driver is properly working with my java jdbc code, but when coming integrate with Logs… --- ## [Parsing special charaters with grok](https://discuss.elastic.co/t/parsing-special-charaters-with-grok/213548)
**Author:** [@chivas](https://discuss.elastic.co/u/chivas)\ **Replies:** 2\ **Last updated:** [January 3, 2020, 6:07am UTC](https://discuss.elastic.co/t/parsing-special-charaters-with-grok/213548 "2020-01-03T06:07:56Z")
My log file contains lines in below format: cat -A test3\_client1\_out-0.log \[2020-01-02 12:38:33.378\] ^\[\[32mINFO ^\[\[39m: ^\[\[36m\ success member\<232687\>^\[\[39m$ \[2020-01-02 11:55:05.698\] ^\[\[32mINFO ^\[\[39m: ^\[\[36m\ **Author:** [@Manjula\_Piyumal](https://discuss.elastic.co/u/Manjula_Piyumal)\ **Replies:** 2\ **Last updated:** [January 3, 2020, 5:30am UTC](https://discuss.elastic.co/t/does-elastic-could-run-on-their-own-infrastructure-or-on-other-cloud-service-providers-like-aws-gcp-or-azure/213401 "2020-01-03T05:30:51Z") Hi, I want to understand more about the elastic cloud and how does it works. Is it runs on their on infrastructure or on other cloud service providers? And if it's possible to run on AWS, can I integrate it with my exis… --- ## [Extract date from log message - Logstash](https://discuss.elastic.co/t/extract-date-from-log-message-logstash/213648)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 0\ **Last updated:** [January 3, 2020, 3:56am UTC](https://discuss.elastic.co/t/extract-date-from-log-message-logstash/213648 "2020-01-03T03:56:52Z")
Hi, I have this situation where I have installed filebeat in a server to monitor OASIS application logs. Their log is not very constant and has multiple formats across 100 files. Is there a way to pickup the time of t… --- ## [Dynamic Mapping on Index](https://discuss.elastic.co/t/dynamic-mapping-on-index/213619)
**Author:** [@pmatreides](https://discuss.elastic.co/u/pmatreides)\ **Replies:** 2\ **Last updated:** [January 2, 2020, 10:52pm UTC](https://discuss.elastic.co/t/dynamic-mapping-on-index/213619 "2020-01-02T22:52:38Z")
How do I disable dynamic mapping on an index in ElasticSearch 7.5 --- ## [Force reroute of a primary to a particular node](https://discuss.elastic.co/t/force-reroute-of-a-primary-to-a-particular-node/213617)
**Author:** [@UDixit](https://discuss.elastic.co/u/UDixit)\ **Replies:** 3\ **Last updated:** [January 2, 2020, 10:42pm UTC](https://discuss.elastic.co/t/force-reroute-of-a-primary-to-a-particular-node/213617 "2020-01-02T22:42:33Z")
We are operating a very large ES 7.0 cluster where many indices have no replicas. Once the index has turned green, is there a way to force reroute its primary shard to another node within the cluster? --- ## [Fonts on Auto Reporting Email dashboard legend](https://discuss.elastic.co/t/fonts-on-auto-reporting-email-dashboard-legend/211539)
**Author:** [@sushmamagesh](https://discuss.elastic.co/u/sushmamagesh)\ **Replies:** 4\ **Last updated:** [January 2, 2020, 10:02pm UTC](https://discuss.elastic.co/t/fonts-on-auto-reporting-email-dashboard-legend/211539 "2020-01-02T22:02:17Z")
Hi, Below is a screenshot of the legend that shows in an embedded dashboard image in a watcher email. Is there a way to configure or change this. thanks --- ## [Query SQL failed: Internal Server Error](https://discuss.elastic.co/t/query-sql-failed-internal-server-error/213124)
**Author:** [@Jun\_Zhang](https://discuss.elastic.co/u/Jun_Zhang)\ **Replies:** 2\ **Last updated:** [January 2, 2020, 9:12pm UTC](https://discuss.elastic.co/t/query-sql-failed-internal-server-error/213124 "2020-01-02T21:12:51Z")
Elasticsearch & Kibana Version: 7.5.1 Query SQL like: POST /\_sql?format=txt { "query": """ DESCRIBE "metricbeat-7.2.0-2019.12.26-000001" """ } response: { "statusCode": 500, "error": "Internal Serv… --- ## [Convert timezone of @timestamp field](https://discuss.elastic.co/t/convert-timezone-of-timestamp-field/212703)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 7\ **Last updated:** [January 2, 2020, 8:41pm UTC](https://discuss.elastic.co/t/convert-timezone-of-timestamp-field/212703 "2020-01-02T20:41:20Z")
I need to do this because we are putting all out index with Etc/UTC timezone and setting up all user on kibana with Etc/UTC timezone. that way when use login to kibana they see data on proper time when we run sql quer… --- ## [Migrate my elasticsearch data to an SQL database with Logstash](https://discuss.elastic.co/t/migrate-my-elasticsearch-data-to-an-sql-database-with-logstash/213625)
**Author:** [@Elvis\_Goncalves](https://discuss.elastic.co/u/Elvis_Goncalves)\ **Replies:** 0\ **Last updated:** [January 2, 2020, 8:38pm UTC](https://discuss.elastic.co/t/migrate-my-elasticsearch-data-to-an-sql-database-with-logstash/213625 "2020-01-02T20:38:00Z")
I need to know how I can put together a configuration file that can consult me ​​all the information about my elastic and can insert it in an SQL. --- ## [Failing to restoring from snapshot](https://discuss.elastic.co/t/failing-to-restoring-from-snapshot/212978)
**Author:** [@Rob\_wylde](https://discuss.elastic.co/u/Rob_wylde)\ **Replies:** 5\ **Last updated:** [January 2, 2020, 7:05pm UTC](https://discuss.elastic.co/t/failing-to-restoring-from-snapshot/212978 "2020-01-02T19:05:35Z")
So I'm evaluating ECE and testing its abilities to restore from snapshot. So i had a functional ECE install with a number of deployments. All of which were sending snaps to minio regularly without issue. Before uninstall… --- ## [Elasticsearch 7.3.2 plugin install could not find java Raspberry Pi4 Buster](https://discuss.elastic.co/t/elasticsearch-7-3-2-plugin-install-could-not-find-java-raspberry-pi4-buster/213265)
**Author:** [@xiaojunma](https://discuss.elastic.co/u/xiaojunma)\ **Replies:** 1\ **Last updated:** [January 2, 2020, 6:38pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-2-plugin-install-could-not-find-java-raspberry-pi4-buster/213265 "2020-01-02T18:38:02Z")
After installation of Elasticserach 7.3.2. on Raspberry Pi4 / Buster, sudo /usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-attachment could not find java in JAVA\_HOME or bundled at /usr/share/elastics… --- ## [Missing libraries while building plugin](https://discuss.elastic.co/t/missing-libraries-while-building-plugin/213612)
**Author:** [@Brian\_Seel](https://discuss.elastic.co/u/Brian_Seel)\ **Replies:** 0\ **Last updated:** [January 2, 2020, 6:20pm UTC](https://discuss.elastic.co/t/missing-libraries-while-building-plugin/213612 "2020-01-02T18:20:23Z")
I need to use sqlite in my ruby filter (so not the sqlite logstash plugin, but the ruby gem). I am following the directions for building and installing a ruby gem from the logstash plugin documentation, but I seem to be … --- ## [How to bind to loopback address with docker](https://discuss.elastic.co/t/how-to-bind-to-loopback-address-with-docker/213610)
**Author:** [@bclipp770](https://discuss.elastic.co/u/bclipp770)\ **Replies:** 0\ **Last updated:** [January 2, 2020, 6:19pm UTC](https://discuss.elastic.co/t/how-to-bind-to-loopback-address-with-docker/213610 "2020-01-02T18:19:53Z")
I'm trying to run logstash using docker (with or without compose). I have set network.publish\_host=127.0.0.1 but I still get the following: logstash\_1 | {"type": "server", "level": "INFO", "component": "o.e.t.Transp… --- ## [Authentication problem using OIDC](https://discuss.elastic.co/t/authentication-problem-using-oidc/212148)
**Author:** [@firabby](https://discuss.elastic.co/u/firabby)\ **Replies:** 3\ **Last updated:** [January 2, 2020, 6:01pm UTC](https://discuss.elastic.co/t/authentication-problem-using-oidc/212148 "2020-01-02T18:01:51Z")
I am not sure where to post this. As I am seeing this error in kibana, I am posting here. I am using 30 day on premise trial license to test a project where I need to use OIDC. My elasticsearch.yml is: xpack.security.… --- ## [Muli query watcher](https://discuss.elastic.co/t/muli-query-watcher/213167)
**Author:** [@sholzhauer](https://discuss.elastic.co/u/sholzhauer)\ **Replies:** 3\ **Last updated:** [January 2, 2020, 4:37pm UTC](https://discuss.elastic.co/t/muli-query-watcher/213167 "2020-01-02T16:37:27Z")
I am trying to build a watcher which alerts me when the following occurs: Event A (based on three tags and field result="InvalidPassword" for username=y) occurs three times. Event A is followed by event B (based on thr… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1701) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1703)