# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1704 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1705 --- ## [Not Able to load data in ElasticSearch](https://discuss.elastic.co/t/not-able-to-load-data-in-elasticsearch/213328)
**Author:** [@Saurabh\_Jain](https://discuss.elastic.co/u/Saurabh_Jain)\ **Replies:** 2\ **Last updated:** [January 1, 2020, 8:59am UTC](https://discuss.elastic.co/t/not-able-to-load-data-in-elasticsearch/213328 "2020-01-01T08:59:57Z")
Hi, I am trying to upload data via logstash in ElasticSearch but somehow not able to do. Could you pls chk the conf file and logstash logs and suggest for the same. input { file { path =\> "C:\\Users\\SaurabhJain\\Deskt… --- ## [How to upgrade elasticsearch from 5.6.6 to 5.8](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-from-5-6-6-to-5-8/213127)
**Author:** [@Varshini](https://discuss.elastic.co/u/Varshini)\ **Replies:** 3\ **Last updated:** [January 1, 2020, 7:52am UTC](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-from-5-6-6-to-5-8/213127 "2020-01-01T07:52:59Z")
I have installed elasticsearch version 5.6.6 on my windows machine. I wanted to know the steps to be taken to upgrade to version 5.8 in detail. Could anyone please help me. Thanks in advance. --- ## [Hostname is same for 10 devices , but now in kibana i am able to see one device data only](https://discuss.elastic.co/t/hostname-is-same-for-10-devices-but-now-in-kibana-i-am-able-to-see-one-device-data-only/213473)
**Author:** [@vijaya12](https://discuss.elastic.co/u/vijaya12)\ **Replies:** 0\ **Last updated:** [January 1, 2020, 5:17am UTC](https://discuss.elastic.co/t/hostname-is-same-for-10-devices-but-now-in-kibana-i-am-able-to-see-one-device-data-only/213473 "2020-01-01T05:17:31Z")
hostname is same for 10 devices , but now in kibana i am able to see one device data only.but 2 metricbeat modules running on 2 different devices. but i am getting only one device data i kibana dashboard --- ## [How to rectify wrong UTC offset value](https://discuss.elastic.co/t/how-to-rectify-wrong-utc-offset-value/213331)
**Author:** [@ruranga](https://discuss.elastic.co/u/ruranga)\ **Replies:** 3\ **Last updated:** [January 1, 2020, 2:21am UTC](https://discuss.elastic.co/t/how-to-rectify-wrong-utc-offset-value/213331 "2020-01-01T02:21:14Z")
Hi, I sending my Symantec proxy (Bluecoat) logs to ELK stack. The date formats is as follows "\[dd/MMM/YYYY:HH:mm:ss Z\]" "\[30/Dec/2019:15:34:11 +0550\]" Unfortunately due to a bug in current SGOS (proxy firmware) versi… --- ## [Public live dashboard/workpad](https://discuss.elastic.co/t/public-live-dashboard-workpad/213465)
**Author:** [@Jeremy\_Andrews](https://discuss.elastic.co/u/Jeremy_Andrews)\ **Replies:** 2\ **Last updated:** [December 31, 2019, 10:04pm UTC](https://discuss.elastic.co/t/public-live-dashboard-workpad/213465 "2019-12-31T22:04:53Z")
I'd like to create a public page on my website which shows live data from Elasticsearch, and I'm trying to figure out the best approach. Ideally I'd just like to embed a Canvas workpad but I can't quite find a way to do … --- ## [Kibana not seeing ES logs insterted via HTTP POST](https://discuss.elastic.co/t/kibana-not-seeing-es-logs-insterted-via-http-post/210398)
**Author:** [@maxstone9](https://discuss.elastic.co/u/maxstone9)\ **Replies:** 4\ **Last updated:** [December 31, 2019, 8:39pm UTC](https://discuss.elastic.co/t/kibana-not-seeing-es-logs-insterted-via-http-post/210398 "2019-12-31T20:39:28Z")
Hey all, I got Kibana and ES working together and data flowing from Winston without any issues. I have a mobile app that I am trying to hook up to ES and wanted to do it via an HTTP POST call. POST /logs-2019.12.03/\_d… --- ## [Failed to connect to localhost port 9200: Connection refused \[Fresh Install\]](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused-fresh-install/212788)
**Author:** [@WhatsElastic](https://discuss.elastic.co/u/WhatsElastic)\ **Replies:** 7\ **Last updated:** [December 31, 2019, 7:51pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused-fresh-install/212788 "2019-12-31T19:51:48Z")
First time installing ELK and I am already stuck with E. I am using this EasyELK method for installing on a raspberry pi /etc/elasticsearch/elasticsearch.yml network.host: 127.0.0.1 http.port: 9200 service elasticsear… --- ## [Logstash convert String into milliseconds](https://discuss.elastic.co/t/logstash-convert-string-into-milliseconds/213398)
**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\ **Replies:** 4\ **Last updated:** [December 31, 2019, 7:00pm UTC](https://discuss.elastic.co/t/logstash-convert-string-into-milliseconds/213398 "2019-12-31T19:00:47Z")
Hi, I am using logstash to convert below two strings into integer and then converting integer to milliseconds. i have nginx logs with below values request\_time="0.051" response\_time="0.027" first i am converting the… --- ## [Very slow queries stop words and synonyms after upgrade to 6.7.0 from 6.2.3](https://discuss.elastic.co/t/very-slow-queries-stop-words-and-synonyms-after-upgrade-to-6-7-0-from-6-2-3/210254)
**Author:** [@bayers51](https://discuss.elastic.co/u/bayers51)\ **Replies:** 4\ **Last updated:** [December 3, 2019, 6:56pm UTC](https://discuss.elastic.co/t/very-slow-queries-stop-words-and-synonyms-after-upgrade-to-6-7-0-from-6-2-3/210254 "2019-12-03T18:56:30Z")
Removing the stop word or synonym, the query is fast. Removing the stop word, removes spanNear(\[SpanGap(:1), from the query. ES version 6.7. "took" : 9913, (Note: artificial intelligence has a synonym to ai as well) … --- ## [Run APM Server with Docker Compose](https://discuss.elastic.co/t/run-apm-server-with-docker-compose/213345)
**Author:** [@drnextgis](https://discuss.elastic.co/u/drnextgis)\ **Replies:** 2\ **Last updated:** [December 31, 2019, 5:26pm UTC](https://discuss.elastic.co/t/run-apm-server-with-docker-compose/213345 "2019-12-31T17:26:50Z")
Is there any docker-compose.yml file that can be used to run APM server without building it? --- ## [Find documents in which fiel\_a=field\_b](https://discuss.elastic.co/t/find-documents-in-which-fiel-a-field-b/213464)
**Author:** [@Hamed\_Jml](https://discuss.elastic.co/u/Hamed_Jml)\ **Replies:** 0\ **Last updated:** [December 31, 2019, 4:49pm UTC](https://discuss.elastic.co/t/find-documents-in-which-fiel-a-field-b/213464 "2019-12-31T16:49:27Z")
Hi Is there any way to search for all documents that field\_a equals field\_b? For example first\_name=last\_name. --- ## [Two groks?](https://discuss.elastic.co/t/two-groks/213397)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 2\ **Last updated:** [December 31, 2019, 4:39pm UTC](https://discuss.elastic.co/t/two-groks/213397 "2019-12-31T16:39:33Z")
I have logs of memory usage, the problem is that some logs description are in spanish and others in english Logs: 12/30/19 15:34:50 host-name Uso de Memoria % vm.memory.size\[pused\] 67.6928 12/30/19 16:03:58 host-na… --- ## [How to extract data from ES index using kibana](https://discuss.elastic.co/t/how-to-extract-data-from-es-index-using-kibana/213426)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 1\ **Last updated:** [December 31, 2019, 4:04pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-es-index-using-kibana/213426 "2019-12-31T16:04:48Z")
Hi, Is that any possibility to extract the value from the source message after it got indexex in ES using kibana. --- ## [Multiline codec is not breaking messages correctly](https://discuss.elastic.co/t/multiline-codec-is-not-breaking-messages-correctly/213460)
**Author:** [@sparkblaze](https://discuss.elastic.co/u/sparkblaze)\ **Replies:** 0\ **Last updated:** [December 31, 2019, 3:10pm UTC](https://discuss.elastic.co/t/multiline-codec-is-not-breaking-messages-correctly/213460 "2019-12-31T15:10:05Z")
Afternoon, I'm having some issues with the multiline codec config and it adding events to the previous message so not being very helpful. in logstash I have the following input definition syslog { id =\> "input… --- ## [Additional tags while indexing local files using fscrawler](https://discuss.elastic.co/t/additional-tags-while-indexing-local-files-using-fscrawler/213072)
**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\ **Replies:** 5\ **Last updated:** [December 31, 2019, 2:12pm UTC](https://discuss.elastic.co/t/additional-tags-while-indexing-local-files-using-fscrawler/213072 "2019-12-31T14:12:26Z")
Hi I want to add additional tag while indexing local files using fscrawler. Using rest API Additional tags we can achieve above requirement but while indexing local file,can we archive this functionality. Thanks, --- ## [Elastic 2.4 - Get substring of text field](https://discuss.elastic.co/t/elastic-2-4-get-substring-of-text-field/213450)
**Author:** [@orenco](https://discuss.elastic.co/u/orenco)\ **Replies:** 0\ **Last updated:** [December 31, 2019, 12:57pm UTC](https://discuss.elastic.co/t/elastic-2-4-get-substring-of-text-field/213450 "2019-12-31T12:57:18Z")
I'm using Elastic 2.4 . One of the fields I need to get is very long text, and I'm trying to get only a short part of it. I've tried substring, but it doesn't work. I'm not sure I tried it correctly or if it is supported… --- ## [ES 7.2.1 Node fails to join due to incorrect text in http secure store](https://discuss.elastic.co/t/es-7-2-1-node-fails-to-join-due-to-incorrect-text-in-http-secure-store/213444)
**Author:** [@es4dp](https://discuss.elastic.co/u/es4dp)\ **Replies:** 0\ **Last updated:** [December 31, 2019, 12:00pm UTC](https://discuss.elastic.co/t/es-7-2-1-node-fails-to-join-due-to-incorrect-text-in-http-secure-store/213444 "2019-12-31T12:00:46Z")
Hi All, I have setup 7.2.1 cluster successfully with 3 nodes. While enabling the http security, I incorrectly entered following command on one of the node: elasticsearch/bin/elasticsearch-keystore add xpack.security.h… --- ## [Qradar to Elastic](https://discuss.elastic.co/t/qradar-to-elastic/213443)
**Author:** [@Sahil.zxc](https://discuss.elastic.co/u/Sahil.zxc)\ **Replies:** 0\ **Last updated:** [December 31, 2019, 11:46am UTC](https://discuss.elastic.co/t/qradar-to-elastic/213443 "2019-12-31T11:46:15Z")
We want to extend our Qradar to Elastic for threat hunting, so we intend on forwarding logs from Qradar to Elastic via log forwarding, via syslog or via JSON. Since I cannot install any beats on QRadar Server, will forw… --- ## [How can I calculate a metric ratio in Kibana?](https://discuss.elastic.co/t/how-can-i-calculate-a-metric-ratio-in-kibana/213371)
**Author:** [@talsantos](https://discuss.elastic.co/u/talsantos)\ **Replies:** 2\ **Last updated:** [December 31, 2019, 11:24am UTC](https://discuss.elastic.co/t/how-can-i-calculate-a-metric-ratio-in-kibana/213371 "2019-12-31T11:24:30Z")
I need to show a metric based on a ratio of other two metrics. Is there any way? --- ## [Failed to start elastic search](https://discuss.elastic.co/t/failed-to-start-elastic-search/213440)
**Author:** [@saurabshresthanewar](https://discuss.elastic.co/u/saurabshresthanewar)\ **Replies:** 0\ **Last updated:** [December 31, 2019, 11:23am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/213440 "2019-12-31T11:23:17Z")
Hi, I was installing wazuh for integrity monitoring but during installation my elastic search was not able to start . Could you please provide some solution for this ? Below is the status for elastic search . \[root@loc… --- ## [A large number of pending tasks lock the elastic](https://discuss.elastic.co/t/a-large-number-of-pending-tasks-lock-the-elastic/212776)
**Author:** [@ludaca](https://discuss.elastic.co/u/ludaca)\ **Replies:** 2\ **Last updated:** [December 31, 2019, 9:57am UTC](https://discuss.elastic.co/t/a-large-number-of-pending-tasks-lock-the-elastic/212776 "2019-12-31T09:57:22Z")
Hello, Elasticsearch version 5.6.10 Application - graylog Suddenly a large amount of pending tasks is created, preventing processing data to indices. All of type put-mapping , 300-400 tasks insertOrder timeInQueue … --- ## [Logstash ruby filter is not working](https://discuss.elastic.co/t/logstash-ruby-filter-is-not-working/213432)
**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\ **Replies:** 0\ **Last updated:** [December 31, 2019, 9:48am UTC](https://discuss.elastic.co/t/logstash-ruby-filter-is-not-working/213432 "2019-12-31T09:48:08Z")
Hi All , I am using ruby filter in logstash . Xpack is enabled in my local machine. I am not able to put username and password in ruby filter like i am putting after index name(elastic:elastic). Hence, my ruby filter lo… --- ## [Unable to start auditbeat for siem](https://discuss.elastic.co/t/unable-to-start-auditbeat-for-siem/213431)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 0\ **Last updated:** [December 31, 2019, 9:46am UTC](https://discuss.elastic.co/t/unable-to-start-auditbeat-for-siem/213431 "2019-12-31T09:46:25Z")
HI, im using elk stack of version 7.5.1 with x-pack installed and i cant able to start auditbeat for siem. Please help me solve it: Exiting: 2 errors: 1 error: failed to create audit client: failed to get audit status… --- ## [Snow API to avoid duplicates](https://discuss.elastic.co/t/snow-api-to-avoid-duplicates/213074)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 13\ **Last updated:** [December 31, 2019, 9:31am UTC](https://discuss.elastic.co/t/snow-api-to-avoid-duplicates/213074 "2019-12-31T09:31:28Z")
Hi Team, im working with a Snow API on my ELK setup (7.2.0), and below is the configuration of my logsatsh config file. input { http\_poller { urls =\> { snowinc =\> { url =\> "https://service-now.com/api/n… --- ## [Use kibana error](https://discuss.elastic.co/t/use-kibana-error/213155)
**Author:** [@yanan\_ge](https://discuss.elastic.co/u/yanan_ge)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 11:27am UTC](https://discuss.elastic.co/t/use-kibana-error/213155 "2019-12-27T11:27:14Z")
I start kibana servers I get an error it's "Error: Not Found at http://192.168.1.234:5601/bundles/commons.bundle.js:3:1370476" --- ## [Want to delete documents from elasticsearch which are deleted from database](https://discuss.elastic.co/t/want-to-delete-documents-from-elasticsearch-which-are-deleted-from-database/213334)
**Author:** [@milankamboya](https://discuss.elastic.co/u/milankamboya)\ **Replies:** 3\ **Last updated:** [December 31, 2019, 8:08am UTC](https://discuss.elastic.co/t/want-to-delete-documents-from-elasticsearch-which-are-deleted-from-database/213334 "2019-12-31T08:08:00Z")
Hi All, I want to delete records from Elasticsearch for below use-case. What are the possible resolutions? Fetching data from database through logstash and adding into Elasticsearch. document\_id is combination of key … --- ## [Duplicated Document Over All Nodes](https://discuss.elastic.co/t/duplicated-document-over-all-nodes/213415)
**Author:** [@ZeroPoint](https://discuss.elastic.co/u/ZeroPoint)\ **Replies:** 0\ **Last updated:** [December 31, 2019, 7:26am UTC](https://discuss.elastic.co/t/duplicated-document-over-all-nodes/213415 "2019-12-31T07:26:04Z")
Hi ALL Im new in elastic and i want to design a cluster for increase performance and horizontal scaling. also we have very stable and high failed system so i dont need any elastic high availability. Question: when i t… --- ## [Master node на виртутальной машине](https://discuss.elastic.co/t/master-node/213195)
**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\ **Replies:** 4\ **Last updated:** [December 31, 2019, 7:18am UTC](https://discuss.elastic.co/t/master-node/213195 "2019-12-31T07:18:32Z")
Доброго времени суток! Собираюсь поднять один сервер ES с приемлемым для небольших объёмов данных (1-2Tb) железом. Основные задачи, которые планируются - это полнотекстовый поиск и агрегации. Тк сервер один, то он и m… --- ## [Logstash Data Recovery point](https://discuss.elastic.co/t/logstash-data-recovery-point/213408)
**Author:** [@rkcharlie](https://discuss.elastic.co/u/rkcharlie)\ **Replies:** 0\ **Last updated:** [December 31, 2019, 5:18am UTC](https://discuss.elastic.co/t/logstash-data-recovery-point/213408 "2019-12-31T05:18:41Z")
Hello Team, How to handle Logstash Data Recovery point if you have any. We are connecting logstash with DB Source ( MSSQL,PostgreSql). We are able to make connectivity but not sure if source or logstash goes down then f… --- ## [Query does not support \[prefix\]](https://discuss.elastic.co/t/query-does-not-support-prefix/213261)
**Author:** [@finau](https://discuss.elastic.co/u/finau)\ **Replies:** 1\ **Last updated:** [December 31, 2019, 4:59am UTC](https://discuss.elastic.co/t/query-does-not-support-prefix/213261 "2019-12-31T04:59:15Z")
When I post the following query, I got an error response {"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"\[prefix\] query does not support \[prefix\]","line":1,"col":119}\],"type":"parsing\_exception","reason":"… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1703) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1705)