# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1708 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1709 --- ## [Clarification required on shard](https://discuss.elastic.co/t/clarification-required-on-shard/213144)
**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\ **Replies:** 3\ **Last updated:** [December 27, 2019, 1:37pm UTC](https://discuss.elastic.co/t/clarification-required-on-shard/213144 "2019-12-27T13:37:02Z")
Hi I have basic doubt on Shard concept. my understanding // Shard is physical data segment wherein indexes are spread across . and multiple shard is for performance // Question is , if Shard is physical segment con… --- ## [How can we put multiline filter for below custom log](https://discuss.elastic.co/t/how-can-we-put-multiline-filter-for-below-custom-log/213161)
**Author:** [@KashinathPatil](https://discuss.elastic.co/u/KashinathPatil)\ **Replies:** 5\ **Last updated:** [December 27, 2019, 1:36pm UTC](https://discuss.elastic.co/t/how-can-we-put-multiline-filter-for-below-custom-log/213161 "2019-12-27T13:36:09Z")
MachineName: PC00287 TimeStamp: 12/19/2019 6:18:33 PM FullName: POA.ReaserchSolution.Infrastructure.Logging, Version=2.51.7292.26907, Culture=neutral, PublicKeyToken=null AppDomainName: /RM/W3SVC/4/ROOT-2-132212323240… --- ## [Connection to ES on a remote single server too slow](https://discuss.elastic.co/t/connection-to-es-on-a-remote-single-server-too-slow/213189)
**Author:** [@weiwei107](https://discuss.elastic.co/u/weiwei107)\ **Replies:** 4\ **Last updated:** [December 27, 2019, 1:11pm UTC](https://discuss.elastic.co/t/connection-to-es-on-a-remote-single-server-too-slow/213189 "2019-12-27T13:11:02Z")
The connection with ES is Ok locally. Then we put the ES on a single server of Aliyun. The search speed becomes very slow. Everything else is the same except the difference between local and remote. The ES version is 5.… --- ## [I got error when use "elasticsearch-rest-high-level-client 7.5.1"](https://discuss.elastic.co/t/i-got-error-when-use-elasticsearch-rest-high-level-client-7-5-1/213171)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 12:03pm UTC](https://discuss.elastic.co/t/i-got-error-when-use-elasticsearch-rest-high-level-client-7-5-1/213171 "2019-12-27T12:03:55Z")
If i use elasticsearch-rest-high-level-client version 7.5.1, i got the following error: NoClassDefFoundError: org/elasticsearch/client/Cancellable However, if i use lower version to 7.4.x, it works fine. I followed … --- ## [Parse logs generated by Ksh script](https://discuss.elastic.co/t/parse-logs-generated-by-ksh-script/213166)
**Author:** [@simo123](https://discuss.elastic.co/u/simo123)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 11:50am UTC](https://discuss.elastic.co/t/parse-logs-generated-by-ksh-script/213166 "2019-12-27T11:50:20Z")
Hello everyone, I'm just beginning with ELK . I have a custom logs generated by Ksh Script (see Below) and I want is possible to exctact specific lines from it like (Comment,Start Date,End Date ) Perhaps should I use G… --- ## [Kibana Query Language documentation](https://discuss.elastic.co/t/kibana-query-language-documentation/213178)
**Author:** [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\ **Replies:** 2\ **Last updated:** [December 27, 2019, 11:43am UTC](https://discuss.elastic.co/t/kibana-query-language-documentation/213178 "2019-12-27T11:43:46Z")
Hi, I'm using Kibana in a browser to query for some log data that has been fed into Elasticsearch. I'm not able to get enough help material on usage information for various fields. For example, what is "host" and what… --- ## [Import kibana saved object using API and Powershell (Invoke-WebRequest)](https://discuss.elastic.co/t/import-kibana-saved-object-using-api-and-powershell-invoke-webrequest/212929)
**Author:** [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 11:42am UTC](https://discuss.elastic.co/t/import-kibana-saved-object-using-api-and-powershell-invoke-webrequest/212929 "2019-12-27T11:42:05Z")
I can easily import sets of Kibana saved objects using API and curl: curl -X POST "https://mykibana:443/api/saved\_objects/\_import" -H "kbn-xsrf: true" --form file=@file.ndjson -u admin:admin What is the best approach t… --- ## [FIRST() & LAST() SQL Aggregate functions returns parsing\_exception](https://discuss.elastic.co/t/first-last-sql-aggregate-functions-returns-parsing-exception/213071)
**Author:** [@macarop](https://discuss.elastic.co/u/macarop)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 11:38am UTC](https://discuss.elastic.co/t/first-last-sql-aggregate-functions-returns-parsing-exception/213071 "2019-12-27T11:38:44Z")
Hello I try to get the lastest value of a parameter using the LAST aggregation function { "query": "SELECT LAST(system.uptime.duration.ms, \\"@timestamp\\") from \\"metricbea\*\\" where host.name='titi' " } This ret… --- ## [Azure nsg flow logs](https://discuss.elastic.co/t/azure-nsg-flow-logs/213147)
**Author:** [@sourabhlangoo](https://discuss.elastic.co/u/sourabhlangoo)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 7:16am UTC](https://discuss.elastic.co/t/azure-nsg-flow-logs/213147 "2019-12-27T07:16:05Z")
Hi, I need to parse azure nsg flow log using logstash version 2.4 but i am unable to find the solution following is the log Input Log : {"records":\[{"time":"2019-12-06T10:37:14.5140721Z","systemId":"2c002c16-72f3-4d… --- ## [JAVA8\_HOME not found while running tests](https://discuss.elastic.co/t/java8-home-not-found-while-running-tests/212976)
**Author:** [@CroissantBlanc](https://discuss.elastic.co/u/CroissantBlanc)\ **Replies:** 2\ **Last updated:** [December 27, 2019, 10:30am UTC](https://discuss.elastic.co/t/java8-home-not-found-while-running-tests/212976 "2019-12-27T10:30:35Z")
Hi, This is my first post, so I apologize if something is not as clear as it should be. I am sure the next ones will be better :slight\_smile: I want to contribute to the project so I forked and cloned the github repo a… --- ## [Kibana alerts creates ticket in Topdesk?](https://discuss.elastic.co/t/kibana-alerts-creates-ticket-in-topdesk/212790)
**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\ **Replies:** 2\ **Last updated:** [December 27, 2019, 9:48am UTC](https://discuss.elastic.co/t/kibana-alerts-creates-ticket-in-topdesk/212790 "2019-12-27T09:48:40Z")
Hello, With Kibana you can set alerts. I have read it could create automatic tickets in a ticket system from Kibana alerts. Is this possible with Topdesk? Where can I find information about this? Robin --- ## [Kibana - Edit an object in multiple spaces](https://discuss.elastic.co/t/kibana-edit-an-object-in-multiple-spaces/210509)
**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 9:44am UTC](https://discuss.elastic.co/t/kibana-edit-an-object-in-multiple-spaces/210509 "2019-12-27T09:44:11Z")
Hello everybody, I have the "Default" space with all the objects and other spaces that contain a subset of the "Default" objects with the same ID. is it possible to modify an object in "Default" and propagate the modif… --- ## [Disable "amazon\_es" output plugin console logs](https://discuss.elastic.co/t/disable-amazon-es-output-plugin-console-logs/209995)
**Author:** [@ArunANayagam](https://discuss.elastic.co/u/ArunANayagam)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 9:21am UTC](https://discuss.elastic.co/t/disable-amazon-es-output-plugin-console-logs/209995 "2019-12-27T09:21:01Z")
Hi, I use a docker logstash (7.1.1) and write to AWS ES via amazon\_es output plugin. The plugin as such works fine, but then all the messages are printed on the console and that generates a lot of I/O on disk, making t… --- ## [Date visualization error](https://discuss.elastic.co/t/date-visualization-error/213098)
**Author:** [@ronics](https://discuss.elastic.co/u/ronics)\ **Replies:** 2\ **Last updated:** [December 27, 2019, 9:14am UTC](https://discuss.elastic.co/t/date-visualization-error/213098 "2019-12-27T09:14:38Z")
I have multiple date field in RDMS data. I have downloaded it in csv format for every month. I have converted string field into date using mutate. When I try it create visualization in kibana, the date field only shows t… --- ## [Error: Could not find or load main class Warning:](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-warning/212358)
**Author:** [@Suniel](https://discuss.elastic.co/u/Suniel)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 8:54am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-warning/212358 "2019-12-27T08:54:40Z")
Whenever I am trying to start elasticserach from windows command prompt. I am getting following error. Error: Could not find or load main class Warning: I installed elasticsearch from .MSI installation file. --- ## [Problem running elasticsearch](https://discuss.elastic.co/t/problem-running-elasticsearch/212748)
**Author:** [@Nikolaos\_Metaxas](https://discuss.elastic.co/u/Nikolaos_Metaxas)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 9:00am UTC](https://discuss.elastic.co/t/problem-running-elasticsearch/212748 "2019-12-27T09:00:13Z")
I Install Elasticsearch 7.5.1 ( msi installation ) in windows 10 When I run from C:\\Program Files\\Elastic\\7.5.1\\bin elasticsearch I receive the error Error: Could not find or load main class Warning: Please Help o… --- ## [Elasticsearch-setup-passwords interactive batch](https://discuss.elastic.co/t/elasticsearch-setup-passwords-interactive-batch/213158)
**Author:** [@screwyy](https://discuss.elastic.co/u/screwyy)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 8:39am UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-interactive-batch/213158 "2019-12-27T08:39:46Z")
hello, I'm using elasticsearch 7.3.1 and I am automating my deployment of elasticsearch with ansible. This involves managing users and their passwords (elastic, kibana etc.) I'm using file realm and nothing else (no na… --- ## [Split - Only String and Array types are splittable. field:\[value\] is of type = NilClass](https://discuss.elastic.co/t/split-only-string-and-array-types-are-splittable-field-value-is-of-type-nilclass/213154)
**Author:** [@exilemirror](https://discuss.elastic.co/u/exilemirror)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 8:11am UTC](https://discuss.elastic.co/t/split-only-string-and-array-types-are-splittable-field-value-is-of-type-nilclass/213154 "2019-12-27T08:11:08Z")
Hi I'm trying to filter a JSON file extracted from Microsoft Graph API. JSON file content below. { "@odata.context": "https://microsoft.com", "value": \[ { "currentScore": 203.0, "maxScore": 802.0, "createdDateTim… --- ## [Error 500 on kibana startup - Unable to connect to Elasticsearch](https://discuss.elastic.co/t/error-500-on-kibana-startup-unable-to-connect-to-elasticsearch/211782)
**Author:** [@sezio](https://discuss.elastic.co/u/sezio)\ **Replies:** 6\ **Last updated:** [December 27, 2019, 7:47am UTC](https://discuss.elastic.co/t/error-500-on-kibana-startup-unable-to-connect-to-elasticsearch/211782 "2019-12-27T07:47:28Z")
Hello, I've not been able to find a similar problem or a working answer so I'm opening a new topic. I've installed Kibana through the apt repository to see what happens in my elastic search database. I've been using ES… --- ## [\[logstash.outputs.kafka \] Sending batch to Kafka failed](https://discuss.elastic.co/t/logstash-outputs-kafka-sending-batch-to-kafka-failed/212942)
**Author:** [@gloria\_xie](https://discuss.elastic.co/u/gloria_xie)\ **Replies:** 2\ **Last updated:** [December 27, 2019, 7:15am UTC](https://discuss.elastic.co/t/logstash-outputs-kafka-sending-batch-to-kafka-failed/212942 "2019-12-27T07:15:45Z")
hi everyone, i am using logstash to sink data from one kafka topic A to another kafka topic B; whenever A produced data,B will receive it immediately; everything works fine,but i keep getting this message in the log … --- ## [Visualization in Elasticsearch](https://discuss.elastic.co/t/visualization-in-elasticsearch/212918)
**Author:** [@Karrie\_Koo](https://discuss.elastic.co/u/Karrie_Koo)\ **Replies:** 3\ **Last updated:** [December 27, 2019, 7:11am UTC](https://discuss.elastic.co/t/visualization-in-elasticsearch/212918 "2019-12-27T07:11:07Z")
abc-log-2019.11.12 abc-log-2019.11.11 abc-log-2019.11.13 abc-log-2019.11.10 abc-log-2019.11.09 If i want to group these logs into abc-log\* and show in data table How could I do? --- ## [Migrate elasticsearch data to AWS from another cloud](https://discuss.elastic.co/t/migrate-elasticsearch-data-to-aws-from-another-cloud/213030)
**Author:** [@trenunu](https://discuss.elastic.co/u/trenunu)\ **Replies:** 3\ **Last updated:** [December 27, 2019, 6:42am UTC](https://discuss.elastic.co/t/migrate-elasticsearch-data-to-aws-from-another-cloud/213030 "2019-12-27T06:42:40Z")
Hey Guys, We're currently hosting our elasticsearch cluster on azure(not azure service, we set up our own cluster), and we are migrating to AWS. Am wondering what is the best approach. I saw the repository-s3 plugin, i… --- ## [Logstash aggregate filter is inconsistent](https://discuss.elastic.co/t/logstash-aggregate-filter-is-inconsistent/212925)
**Author:** [@karfei00](https://discuss.elastic.co/u/karfei00)\ **Replies:** 2\ **Last updated:** [December 27, 2019, 6:02am UTC](https://discuss.elastic.co/t/logstash-aggregate-filter-is-inconsistent/212925 "2019-12-27T06:02:10Z")
I'm trying to group multiple cities into the same country using data from jdbc. I'm making use of the config push\_previous\_map\_as\_event, but result is inconsistent even though SQL is ordered correctly by country code. T… --- ## [Search two ranges at the same time](https://discuss.elastic.co/t/search-two-ranges-at-the-same-time/213104)
**Author:** [@ChaosMTA](https://discuss.elastic.co/u/ChaosMTA)\ **Replies:** 2\ **Last updated:** [December 27, 2019, 4:22am UTC](https://discuss.elastic.co/t/search-two-ranges-at-the-same-time/213104 "2019-12-27T04:22:15Z")
Hey guys, I just have a question about a nested query I’m trying to do. So I have a index with a nested object. In that nested object I have two range types a date range and a double range. I want to create a query whe… --- ## [Request cache can not be enabled successfully in java transport client](https://discuss.elastic.co/t/request-cache-can-not-be-enabled-successfully-in-java-transport-client/213118)
**Author:** [@pphust](https://discuss.elastic.co/u/pphust)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 2:29am UTC](https://discuss.elastic.co/t/request-cache-can-not-be-enabled-successfully-in-java-transport-client/213118 "2019-12-27T02:29:08Z")
Hi, I meet one strange problem in our es cluster. When I submit one http request through curl, or submit it through java rest client, the request cache works well and I can see "hit\_count" keep increasing when submitti… --- ## [If I change one of the .yml files, do I need to run \[metricbeat or filebeat\] setup each time to reindex, etc?](https://discuss.elastic.co/t/if-i-change-one-of-the-yml-files-do-i-need-to-run-metricbeat-or-filebeat-setup-each-time-to-reindex-etc/213113)
**Author:** [@Shorthills](https://discuss.elastic.co/u/Shorthills)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 12:10am UTC](https://discuss.elastic.co/t/if-i-change-one-of-the-yml-files-do-i-need-to-run-metricbeat-or-filebeat-setup-each-time-to-reindex-etc/213113 "2019-12-27T00:10:24Z")
Question above says it all. I ask b/c I'm trying to troubleshoot my own issues and it would be helpful to know. Thanks in advance. --- ## [Kibana HA Documentation](https://discuss.elastic.co/t/kibana-ha-documentation/213110)
**Author:** [@jeffspahr](https://discuss.elastic.co/u/jeffspahr)\ **Replies:** 1\ **Last updated:** [December 26, 2019, 9:05pm UTC](https://discuss.elastic.co/t/kibana-ha-documentation/213110 "2019-12-26T21:05:12Z")
The Kibana docs don't address how to properly run two or more Kibana instances to provide HA. You would have to read through all of the settings to discover these independently. The ones I'm aware of are: xpack.report… --- ## [Filtering in LogStash using the if..in syntax](https://discuss.elastic.co/t/filtering-in-logstash-using-the-if-in-syntax/213090)
**Author:** [@RunningSmurf](https://discuss.elastic.co/u/RunningSmurf)\ **Replies:** 2\ **Last updated:** [December 26, 2019, 7:42pm UTC](https://discuss.elastic.co/t/filtering-in-logstash-using-the-if-in-syntax/213090 "2019-12-26T19:42:53Z")
Hello, I want to update the "tags" filed to a certain value when my "message" contains the string "Error: 18456" in it. This is the \[message\] value that ends up in Kibana: message 2019-12-26 15:07:09.53 Logon Er… --- ## [Pie gender based on heterogen value](https://discuss.elastic.co/t/pie-gender-based-on-heterogen-value/213023)
**Author:** [@kamelgh](https://discuss.elastic.co/u/kamelgh)\ **Replies:** 2\ **Last updated:** [December 26, 2019, 7:38pm UTC](https://discuss.elastic.co/t/pie-gender-based-on-heterogen-value/213023 "2019-12-26T19:38:28Z")
Hi, I would like to know how to create a pie using aggregation (or any else) to create 2 part : Male/Female. But I have only one field which can contains more than 2 value : Mr, Mrs, Mr., Mme... WIth Dev Tools I am ab… --- ## [Kibana average showing it in percentage](https://discuss.elastic.co/t/kibana-average-showing-it-in-percentage/212869)
**Author:** [@Sergioc](https://discuss.elastic.co/u/Sergioc)\ **Replies:** 4\ **Last updated:** [December 26, 2019, 6:38pm UTC](https://discuss.elastic.co/t/kibana-average-showing-it-in-percentage/212869 "2019-12-26T18:38:06Z")
Is there any way to show the average metric in percentage in Kibana? if you see the numbers are 0.078 I would like them to be like 7.8% for example. Thank you all [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1707) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1709)