# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1724 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1725 --- ## [Elastic Search Developers Needed](https://discuss.elastic.co/t/elastic-search-developers-needed/212058)
**Author:** [@Sebiyo\_Search](https://discuss.elastic.co/u/Sebiyo_Search)\ **Replies:** 0\ **Last updated:** [December 16, 2019, 8:33pm UTC](https://discuss.elastic.co/t/elastic-search-developers-needed/212058 "2019-12-16T20:33:55Z")
Hello Friends, We are in the process of creating a search engine. We are looking for freelancer Elastic Search developers. Please contact us if you are interested. Thanks in advance and hope to hear from you as soon as… --- ## [PUT index api not working](https://discuss.elastic.co/t/put-index-api-not-working/212053)
**Author:** [@sameep1994](https://discuss.elastic.co/u/sameep1994)\ **Replies:** 1\ **Last updated:** [December 16, 2019, 7:58pm UTC](https://discuss.elastic.co/t/put-index-api-not-working/212053 "2019-12-16T19:58:32Z")
Hi All, I'm trying update an existing index using PUT/my\_index/\_mapping. But i'm unable to do so, error encountered: "type": "action\_request\_validation\_exception", "reason": "Validation Failed: 1: mapping type is mis… --- ## [Compare two datasets (failed)](https://discuss.elastic.co/t/compare-two-datasets-failed/211968)
**Author:** [@carmezsa](https://discuss.elastic.co/u/carmezsa)\ **Replies:** 1\ **Last updated:** [December 16, 2019, 7:57pm UTC](https://discuss.elastic.co/t/compare-two-datasets-failed/211968 "2019-12-16T19:57:47Z")
I am configure LOGSTASH to compare two dataset but something is wrong. tail /var/log/logstash/logstash-plain.log \[2019-12-16T10:12:14,264\]\[ERROR\]\[logstash.javapipeline \]\[main\] Pipeline aborted due to error {:pipe… --- ## [Count API Performance Downgraded After cluster upgrade from 6.8.4 to 7.5](https://discuss.elastic.co/t/count-api-performance-downgraded-after-cluster-upgrade-from-6-8-4-to-7-5/210783)
**Author:** [@jihua.zhong](https://discuss.elastic.co/u/jihua.zhong)\ **Replies:** 11\ **Last updated:** [December 16, 2019, 7:56pm UTC](https://discuss.elastic.co/t/count-api-performance-downgraded-after-cluster-upgrade-from-6-8-4-to-7-5/210783 "2019-12-16T19:56:20Z")
Hi, After cluster upgraded from 6.8.4 to 7.5.0. the performance on count api in 7.5 is much slower than in 6.8.4 in Kibana run this GET /myindex or alias/\_count in 6.8.4 all count API response time is under sub se… --- ## [Wrapping CSV Output Fields in Quotes](https://discuss.elastic.co/t/wrapping-csv-output-fields-in-quotes/212049)
**Author:** [@Mohammad\_Etemad](https://discuss.elastic.co/u/Mohammad_Etemad)\ **Replies:** 2\ **Last updated:** [December 16, 2019, 7:44pm UTC](https://discuss.elastic.co/t/wrapping-csv-output-fields-in-quotes/212049 "2019-12-16T19:44:36Z")
Hi all, I am using the csv output for my logstash, but I want to have each field wrapped in quotes. So now I have the output as: filed1Value,field2Value,field3Value but I want the output to be: "filed1Value","field2V… --- ## [Kibana running on 0.0.0.0 but other computer not able to access it](https://discuss.elastic.co/t/kibana-running-on-0-0-0-0-but-other-computer-not-able-to-access-it/208600)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 7\ **Last updated:** [December 16, 2019, 7:27pm UTC](https://discuss.elastic.co/t/kibana-running-on-0-0-0-0-but-other-computer-not-able-to-access-it/208600 "2019-12-16T19:27:55Z")
Here is the kibana.yml. I can access kibana from my ip address, but when I gave my ip address to another user to access kibana, it wont let them access # Kibana is served by a back end server. This setting specifies the… --- ## [Journalbeat Dashboards Fail](https://discuss.elastic.co/t/journalbeat-dashboards-fail/211542)
**Author:** [@alphaDev23](https://discuss.elastic.co/u/alphaDev23)\ **Replies:** 3\ **Last updated:** [December 16, 2019, 7:17pm UTC](https://discuss.elastic.co/t/journalbeat-dashboards-fail/211542 "2019-12-16T19:17:15Z")
Using journalbeat 7.4.2 and ELK 7.4.2. Enabled kibana dashboards in journalbeat.yml: setup.dashboards.enabled: true sudo journalbeat -c /etc/journalbeat/journalbeat.yml setup ILM policy and write alias loading not e… --- ## [Bootstrap monitoring process did not exit as expected](https://discuss.elastic.co/t/bootstrap-monitoring-process-did-not-exit-as-expected/208673)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 21\ **Last updated:** [December 16, 2019, 6:10pm UTC](https://discuss.elastic.co/t/bootstrap-monitoring-process-did-not-exit-as-expected/208673 "2019-12-16T18:10:11Z")
Hi there, I try to install a "large ". I started a few month ago with a small Installation and now we need to expand. For now I just try to install 2.4.2 on a new VM and it is not exiting without errors. But there are … --- ## [Google\_cloud\_storage](https://discuss.elastic.co/t/google-cloud-storage/212043)
**Author:** [@elk3](https://discuss.elastic.co/u/elk3)\ **Replies:** 0\ **Last updated:** [December 16, 2019, 6:09pm UTC](https://discuss.elastic.co/t/google-cloud-storage/212043 "2019-12-16T18:09:13Z")
i want read file from cloud into ES index, i created file google\_cloud\_storage via input plugin into Es but problem is logstash not terminating(i.e)logstash not shutdown , i want force logstash by ctrl+c or sigint is th… --- ## [How to calculate unique count of hosts based on multiple field condition in TSVB](https://discuss.elastic.co/t/how-to-calculate-unique-count-of-hosts-based-on-multiple-field-condition-in-tsvb/211786)
**Author:** [@SunilSMenon](https://discuss.elastic.co/u/SunilSMenon)\ **Replies:** 1\ **Last updated:** [December 16, 2019, 6:08pm UTC](https://discuss.elastic.co/t/how-to-calculate-unique-count-of-hosts-based-on-multiple-field-condition-in-tsvb/211786 "2019-12-16T18:08:28Z")
Hi Team, I need to find the count of Hosts where any of the following parameters have crossed 60% for a specific timeline System CPU Utilisation System Memory Utilisation System Disk utilisation I am trying to achiev… --- ## [Server fail over, suggested method](https://discuss.elastic.co/t/server-fail-over-suggested-method/211843)
**Author:** [@LordMathis](https://discuss.elastic.co/u/LordMathis)\ **Replies:** 1\ **Last updated:** [December 15, 2019, 10:25pm UTC](https://discuss.elastic.co/t/server-fail-over-suggested-method/211843 "2019-12-15T22:25:50Z")
Kibana version: 7.3 Elasticsearch version: 7.3 APM Server version: 7.3 APM Agent language and version: Intake API Our team was wondering what you all believe is the best method of fail over for the APM servers. We ar… --- ## [Filebeat+kibana+canvas](https://discuss.elastic.co/t/filebeat-kibana-canvas/211356)
**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\ **Replies:** 2\ **Last updated:** [December 16, 2019, 5:58pm UTC](https://discuss.elastic.co/t/filebeat-kibana-canvas/211356 "2019-12-16T17:58:12Z")
Hello. I am new to filebeat and I am using it to inject logs into Elasticsearch. And, I want to build some visualizations in Kibana with the data that I am getting. Is it a good approach to go with Canvas, knowing th… --- ## [Upgrade/New Kibana 7.5 java.lang.String cannot be cast to java.util.Map](https://discuss.elastic.co/t/upgrade-new-kibana-7-5-java-lang-string-cannot-be-cast-to-java-util-map/211761)
**Author:** [@Fin4l](https://discuss.elastic.co/u/Fin4l)\ **Replies:** 1\ **Last updated:** [December 16, 2019, 5:46pm UTC](https://discuss.elastic.co/t/upgrade-new-kibana-7-5-java-lang-string-cannot-be-cast-to-java-util-map/211761 "2019-12-16T17:46:17Z")
Hi all, i have problem which kibana 7.5. After i update from 6.8 to 7.5 i have 3 problems/info FATAL Error: \[elasticsearch.ssl.verify\]: definition for this key is missing FATAL Error: \[elasticsearch.url\]: definitio… --- ## [Logstash persisted queue with xpack monitoring](https://discuss.elastic.co/t/logstash-persisted-queue-with-xpack-monitoring/210898)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 7\ **Last updated:** [December 16, 2019, 5:26pm UTC](https://discuss.elastic.co/t/logstash-persisted-queue-with-xpack-monitoring/210898 "2019-12-16T17:26:21Z")
I am using x-pack monitoring to monitor the logstash. logstash.yml xpack.monitoring.enabled: true xpack.monitoring.elasticsearch.hosts: \["node-1", "node-2", "node-3"\] my logstash command: ./bin/logstash -f my\_conf.c… --- ## [Problems in visualization/filtering a date field in Discover module](https://discuss.elastic.co/t/problems-in-visualization-filtering-a-date-field-in-discover-module/211530)
**Author:** [@Pablo\_Albertengo](https://discuss.elastic.co/u/Pablo_Albertengo)\ **Replies:** 2\ **Last updated:** [December 16, 2019, 5:12pm UTC](https://discuss.elastic.co/t/problems-in-visualization-filtering-a-date-field-in-discover-module/211530 "2019-12-16T17:12:41Z")
Hi, I am having a problem with date fields in the "Discover" module Specifically I have a field with the following definition: "checkIn": { "type": "date" } Additionally I have the following settings: . Timezone f… --- ## [How to access sub fields in Kibana?](https://discuss.elastic.co/t/how-to-access-sub-fields-in-kibana/211731)
**Author:** [@Coder\_HK](https://discuss.elastic.co/u/Coder_HK)\ **Replies:** 1\ **Last updated:** [December 16, 2019, 4:48pm UTC](https://discuss.elastic.co/t/how-to-access-sub-fields-in-kibana/211731 "2019-12-16T16:48:11Z")
I want to access the sub-fields technique\_id etc for visualization.. for example I want to make a pie chart of how many events are created per technique id. But I can't access those sub fields inside message field. Ho… --- ## [Geoip doen't create field correctly](https://discuss.elastic.co/t/geoip-doent-create-field-correctly/212012)
**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\ **Replies:** 2\ **Last updated:** [December 16, 2019, 4:44pm UTC](https://discuss.elastic.co/t/geoip-doent-create-field-correctly/212012 "2019-12-16T16:44:10Z")
I create this filter filter { # Filter only CEF logs here if "syslog" in \[tags\]{ # Manipulate the message mutate { # Saved the original message into a temporary field add\_field =\> { "tmp\_mess… --- ## [Fails to deploy ES on Kubernetes](https://discuss.elastic.co/t/fails-to-deploy-es-on-kubernetes/211499)
**Author:** [@nobound](https://discuss.elastic.co/u/nobound)\ **Replies:** 2\ **Last updated:** [December 16, 2019, 4:30pm UTC](https://discuss.elastic.co/t/fails-to-deploy-es-on-kubernetes/211499 "2019-12-16T16:30:26Z")
Hi, I am using the elasticsearch helm chart (https://github.com/elastic/helm-charts/tree/master/elasticsearch) to deploy to Kubernetes cluster. It fails to come up properly. I think it is due to the health check (via h… --- ## [Duplicate documents found in ES after indexing](https://discuss.elastic.co/t/duplicate-documents-found-in-es-after-indexing/209647)
**Author:** [@bibin](https://discuss.elastic.co/u/bibin)\ **Replies:** 12\ **Last updated:** [December 16, 2019, 4:17pm UTC](https://discuss.elastic.co/t/duplicate-documents-found-in-es-after-indexing/209647 "2019-12-16T16:17:22Z")
Hi friends, I am facing a serious issue of duplicate documents found in ES after indexing... log format // 10.8.1.90,23-11-2019 00:00:07,CURRENT,Broadband,Idea/Vodafone,Failure 10.8.1.90,23-11-2019 01:30:08,CURRENT,… --- ## [Rollover says it's successful but I can't access new index](https://discuss.elastic.co/t/rollover-says-its-successful-but-i-cant-access-new-index/211852)
**Author:** [@patrickbot1](https://discuss.elastic.co/u/patrickbot1)\ **Replies:** 2\ **Last updated:** [December 16, 2019, 2:33pm UTC](https://discuss.elastic.co/t/rollover-says-its-successful-but-i-cant-access-new-index/211852 "2019-12-16T14:33:10Z")
I use the logstash plugin that's part of Cloudbees Jenkins. It sends all of the logs into one single logstash\* index. I'd like to be able to perform a rollover on that index to where it won't have more than 1 month of da… --- ## [Configuring logstash to run as a service-](https://discuss.elastic.co/t/configuring-logstash-to-run-as-a-service/212029)
**Author:** [@Neeraj\_Rajagopalan\_I](https://discuss.elastic.co/u/Neeraj_Rajagopalan_I)\ **Replies:** 0\ **Last updated:** [December 16, 2019, 3:45pm UTC](https://discuss.elastic.co/t/configuring-logstash-to-run-as-a-service/212029 "2019-12-16T15:45:46Z")
I am getting a file path issue for all the commands. It is related to some path which is incorrect. Do i need to correct some config file to resolve this issue. Any help would be appreciated. --- ## [Parsing nested JSON arrays](https://discuss.elastic.co/t/parsing-nested-json-arrays/211938)
**Author:** [@sera123k](https://discuss.elastic.co/u/sera123k)\ **Replies:** 2\ **Last updated:** [December 16, 2019, 3:41pm UTC](https://discuss.elastic.co/t/parsing-nested-json-arrays/211938 "2019-12-16T15:41:02Z")
Hello, I am trying to parse a message from Office 365 that contains a nested array with some values in each item. I'm not 100% sure how to tackle it, the array i'm working with looks like this: "targetResources" =\> \[ \[… --- ## [Gz log files deleted by logstash when it crashed](https://discuss.elastic.co/t/gz-log-files-deleted-by-logstash-when-it-crashed/211985)
**Author:** [@lzx5033](https://discuss.elastic.co/u/lzx5033)\ **Replies:** 2\ **Last updated:** [December 16, 2019, 3:30pm UTC](https://discuss.elastic.co/t/gz-log-files-deleted-by-logstash-when-it-crashed/211985 "2019-12-16T15:30:53Z")
logstash version: 6.4.1 I was sending gz logs to elasticsearch by logstash. The elasticsearch's disk was full but i leave it, so that the logstash reported many 403 errors. But some day after that, the logstash crashed… --- ## [Elastic 7.5 S3 plugin install warning message](https://discuss.elastic.co/t/elastic-7-5-s3-plugin-install-warning-message/211875)
**Author:** [@sfgroups1](https://discuss.elastic.co/u/sfgroups1)\ **Replies:** 2\ **Last updated:** [December 16, 2019, 3:15pm UTC](https://discuss.elastic.co/t/elastic-7-5-s3-plugin-install-warning-message/211875 "2019-12-16T15:15:18Z")
on my 7.5 cluster when install s3 plugin its giving below warning. Any idea what permission needed for java # bin/elasticsearch-plugin install repository-s3 -\> Downloading repository-s3 from elastic \[==================… --- ## [Dec 13th, 2019: \[EN\]\[APM\] How to diagnose web app flu](https://discuss.elastic.co/t/dec-13th-2019-en-apm-how-to-diagnose-web-app-flu/211408)
**Author:** [@Emanuil](https://discuss.elastic.co/u/Emanuil)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 7:59am UTC](https://discuss.elastic.co/t/dec-13th-2019-en-apm-how-to-diagnose-web-app-flu/211408 "2019-12-13T07:59:59Z")
'Tis the season for festivities, overindulgence and occasional illness. We could suggest season-appropriate decoration (at least if your app is hosted in the Northern hemisphere). However, today we will focus on apps whi… --- ## [Talk to server... ERROR Connection marked as failed because the onConnect callback failed: invalid license found, requires a basic or a valid trial l icense and received Open sour](https://discuss.elastic.co/t/talk-to-server-error-connection-marked-as-failed-because-the-onconnect-callback-failed-invalid-license-found-requires-a-basic-or-a-valid-trial-l-icense-and-received-open-sour/210910)
**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\ **Replies:** 24\ **Last updated:** [December 16, 2019, 3:09pm UTC](https://discuss.elastic.co/t/talk-to-server-error-connection-marked-as-failed-because-the-onconnect-callback-failed-invalid-license-found-requires-a-basic-or-a-valid-trial-l-icense-and-received-open-sour/210910 "2019-12-16T15:09:45Z")
Hi, I am still facing this license problem to one of my ELK nodes. elasticsearch: http://itkvmxh01.emea.nsn-net.net:9200... parse url... OK connection... parse host... OK dns lookup... OK addresses: 151… --- ## [Cant monitor windows perfmon counter](https://discuss.elastic.co/t/cant-monitor-windows-perfmon-counter/210726)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 2\ **Last updated:** [December 16, 2019, 2:28pm UTC](https://discuss.elastic.co/t/cant-monitor-windows-perfmon-counter/210726 "2019-12-16T14:28:38Z")
Hello, I have the following perfmon counter names (Bytes IN) and (Bytes IN/sec) that i want to monitor as the following image show: My modules configuration in my windows.yml file is the following: Module: windows D… --- ## [Large \_snapshot directories on disk](https://discuss.elastic.co/t/large-snapshot-directories-on-disk/211988)
**Author:** [@rick1933](https://discuss.elastic.co/u/rick1933)\ **Replies:** 2\ **Last updated:** [December 16, 2019, 2:19pm UTC](https://discuss.elastic.co/t/large-snapshot-directories-on-disk/211988 "2019-12-16T14:19:31Z")
Hello, A month ago i tested the source only snapshot (S3 repo with ES 7.4.1). At the end i decided not to use it but now i have large \_snapshot directories on my disk. They use about 25% of my disk space. \[root@es01 0\]… --- ## [Wildcard Analysis in simple\_query\_string Query](https://discuss.elastic.co/t/wildcard-analysis-in-simple-query-string-query/211953)
**Author:** [@burakyuksel](https://discuss.elastic.co/u/burakyuksel)\ **Replies:** 4\ **Last updated:** [December 16, 2019, 2:16pm UTC](https://discuss.elastic.co/t/wildcard-analysis-in-simple-query-string-query/211953 "2019-12-16T14:16:42Z")
Hello, I wonder how ES analyzes wildcard in simple\_query\_string queries. Specifically, what happens when query string includes a stop word and asterisk (\*). In my case, My index has a custom analyzer with a bunch of f… --- ## [Search/Query with OR over separate lines for same ID](https://discuss.elastic.co/t/search-query-with-or-over-separate-lines-for-same-id/211922)
**Author:** [@codak7](https://discuss.elastic.co/u/codak7)\ **Replies:** 3\ **Last updated:** [December 16, 2019, 1:43pm UTC](https://discuss.elastic.co/t/search-query-with-or-over-separate-lines-for-same-id/211922 "2019-12-16T13:43:34Z")
Hi, I have have data structured in the example of the table below ("-" = null): transaction-id field-1 field-2 trans-1 44 - trans-1 - 12 trans-1 - 5 … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1723) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1725)