# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1730 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1731 --- ## [Time in IST for log-rotation - Logstash](https://discuss.elastic.co/t/time-in-ist-for-log-rotation-logstash/211612)
**Author:** [@singhankit.iem](https://discuss.elastic.co/u/singhankit.iem)\ **Replies:** 2\ **Last updated:** [December 12, 2019, 1:28pm UTC](https://discuss.elastic.co/t/time-in-ist-for-log-rotation-logstash/211612 "2019-12-12T13:28:44Z")
I have configured file-beat on all the App servers and Logstash in a centralized server for the log rotation. The config file in Log rotation is input { beats { port =\> 5044 } } filter{ mutate { remove\_field =\> \[… --- ## [Cross Cluster Replication on Google Kubernetes Engine(GKE)](https://discuss.elastic.co/t/cross-cluster-replication-on-google-kubernetes-engine-gke/211654)
**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\ **Replies:** 0\ **Last updated:** [December 12, 2019, 1:21pm UTC](https://discuss.elastic.co/t/cross-cluster-replication-on-google-kubernetes-engine-gke/211654 "2019-12-12T13:21:55Z")
Hi, We have one GKE cluster in US region with 3 nodes and one more GKE cluster with 3 nodes in Asia region. How to perform cross cluster replication ? In the doc they have given like below PUT /\_cluster/settings { "… --- ## [Configured logstash multiple pipelines but not working. Need help](https://discuss.elastic.co/t/configured-logstash-multiple-pipelines-but-not-working-need-help/211361)
**Author:** [@shylendran](https://discuss.elastic.co/u/shylendran)\ **Replies:** 4\ **Last updated:** [December 12, 2019, 1:10pm UTC](https://discuss.elastic.co/t/configured-logstash-multiple-pipelines-but-not-working-need-help/211361 "2019-12-12T13:10:15Z")
Hello, I am facing an issue with the Logstash. Tried different ways but no luck. Any help is really appreciated. The version that I am using is, 7.3 Already went thru https://www.elastic.co/guide/en/logstash/7.x/multip… --- ## [Upgrading from 6.6.8 to 7.5.0 having all sorts of problems - Please help](https://discuss.elastic.co/t/upgrading-from-6-6-8-to-7-5-0-having-all-sorts-of-problems-please-help/211407)
**Author:** [@happycampo](https://discuss.elastic.co/u/happycampo)\ **Replies:** 14\ **Last updated:** [December 12, 2019, 12:52pm UTC](https://discuss.elastic.co/t/upgrading-from-6-6-8-to-7-5-0-having-all-sorts-of-problems-please-help/211407 "2019-12-12T12:52:08Z")
Right now my PRODUCTION instance of this is down... Any help would be greatly appreciated. I'm running with docker containers on separate vms. I inherited it and I have upgraded it in the past from 5x to 6.6.1. I just… --- ## [Deleted indices manually](https://discuss.elastic.co/t/deleted-indices-manually/211641)
**Author:** [@Nurlan199206](https://discuss.elastic.co/u/Nurlan199206)\ **Replies:** 3\ **Last updated:** [December 12, 2019, 12:49pm UTC](https://discuss.elastic.co/t/deleted-indices-manually/211641 "2019-12-12T12:49:03Z")
disk space fill up on the server. i am manually deleted folders with indices from /var/lib/elasticsearch/nodes/0/indices.. and restarted kibana and elasticsearch, after this kibana web page showing "Kibana server is no… --- ## [How to define the mapping](https://discuss.elastic.co/t/how-to-define-the-mapping/211646)
**Author:** [@kguru08](https://discuss.elastic.co/u/kguru08)\ **Replies:** 0\ **Last updated:** [December 12, 2019, 12:27pm UTC](https://discuss.elastic.co/t/how-to-define-the-mapping/211646 "2019-12-12T12:27:53Z")
Hi, Please find the below structure of my JSON, { "book": "testing\_mine", "res\_info": { "en": { "author": "guru" }, "jp": { "author": "達人" }, "tamil": { "author": "குரு" } } } I need to create a mapping f… --- ## [I want to access the SIEM app without clicking the SIEM app](https://discuss.elastic.co/t/i-want-to-access-the-siem-app-without-clicking-the-siem-app/211122)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 2\ **Last updated:** [December 12, 2019, 12:04pm UTC](https://discuss.elastic.co/t/i-want-to-access-the-siem-app-without-clicking-the-siem-app/211122 "2019-12-12T12:04:29Z")
I have created a space , which has privileges for only SIEM app. Can I access the SIEM app directly without clicking the SIEM . I mean the SIEM app should automatically open --- ## [Cannot find document with id given in error message](https://discuss.elastic.co/t/cannot-find-document-with-id-given-in-error-message/211630)
**Author:** [@pgeurts](https://discuss.elastic.co/u/pgeurts)\ **Replies:** 0\ **Last updated:** [December 12, 2019, 11:08am UTC](https://discuss.elastic.co/t/cannot-find-document-with-id-given-in-error-message/211630 "2019-12-12T11:08:42Z")
Hello , I'm getting the following error: function score query returned an invalid score: -0.18613358 for doc: 142179 Searched everywhere for that document, but all my documents have an id starting with SUP. Anyone kn… --- ## [Generating extra-fields to my results based on query](https://discuss.elastic.co/t/generating-extra-fields-to-my-results-based-on-query/211491)
**Author:** [@ovinz](https://discuss.elastic.co/u/ovinz)\ **Replies:** 2\ **Last updated:** [December 12, 2019, 10:56am UTC](https://discuss.elastic.co/t/generating-extra-fields-to-my-results-based-on-query/211491 "2019-12-12T10:56:35Z")
Hi everyone, I’m discovering ElasticSearch and I really don’t know how to find this kind of feature in the ES documentation. My goal is to add extra-fields to the result of a query ; the extra-fields being themselves a… --- ## [Combining Two Aggregations](https://discuss.elastic.co/t/combining-two-aggregations/211624)
**Author:** [@Calvin-J-Scott](https://discuss.elastic.co/u/Calvin-J-Scott)\ **Replies:** 0\ **Last updated:** [December 12, 2019, 10:53am UTC](https://discuss.elastic.co/t/combining-two-aggregations/211624 "2019-12-12T10:53:21Z")
Problem I am currently trying to combine two aggregations into a single aggregation response either directly in ElasticSearch if it allows or In Java using the elastic aggregations as a map. Elastic Approach Mapping "… --- ## [Startup files location](https://discuss.elastic.co/t/startup-files-location/209073)
**Author:** [@julio.a.l](https://discuss.elastic.co/u/julio.a.l)\ **Replies:** 4\ **Last updated:** [December 12, 2019, 10:51am UTC](https://discuss.elastic.co/t/startup-files-location/209073 "2019-12-12T10:51:45Z")
Hi, I am developing an web application which has an embedded iframe with a dashboard from kiabana. As many others developers I nedd to bypass login of kibana and reverse proxy solution is not ok for me, so I cloned the… --- ## [Http\_poller error when building XML/SOAP request](https://discuss.elastic.co/t/http-poller-error-when-building-xml-soap-request/210698)
**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\ **Replies:** 6\ **Last updated:** [December 12, 2019, 10:30am UTC](https://discuss.elastic.co/t/http-poller-error-when-building-xml-soap-request/210698 "2019-12-12T10:30:44Z")
Hi there, I'm trying to use the http\_poller input to periodically generate an HTTP/XML/SOAP requests but I'm getting "Invalid URL post" back - Logstash doesn't even seem to be building the request: Pipeline aborted due… --- ## [Search API with elastic search in .Net core Micro-services](https://discuss.elastic.co/t/search-api-with-elastic-search-in-net-core-micro-services/211414)
**Author:** [@Croos](https://discuss.elastic.co/u/Croos)\ **Replies:** 4\ **Last updated:** [December 12, 2019, 9:49am UTC](https://discuss.elastic.co/t/search-api-with-elastic-search-in-net-core-micro-services/211414 "2019-12-12T09:49:46Z")
I'm developing a microservice solution for an E-commerce application. I like to use the Elasticsearch for searching the items in different databases like the product from MongoDB, Vendors from SqlDB. I need a clear idea … --- ## [Help with terminate\_after returns more results than must](https://discuss.elastic.co/t/help-with-terminate-after-returns-more-results-than-must/211595)
**Author:** [@AndriyImp](https://discuss.elastic.co/u/AndriyImp)\ **Replies:** 4\ **Last updated:** [December 12, 2019, 9:16am UTC](https://discuss.elastic.co/t/help-with-terminate-after-returns-more-results-than-must/211595 "2019-12-12T09:16:26Z")
Hi All! I have strange result when make my query request - on local all ok and works like expected, but on AWS haves issue - i set terminate\_after but it not works like expected, see attached screen. data = response\[… --- ## [How to organize elasticsearch indexes?](https://discuss.elastic.co/t/how-to-organize-elasticsearch-indexes/211598)
**Author:** [@tortillla](https://discuss.elastic.co/u/tortillla)\ **Replies:** 1\ **Last updated:** [December 12, 2019, 9:04am UTC](https://discuss.elastic.co/t/how-to-organize-elasticsearch-indexes/211598 "2019-12-12T09:04:45Z")
I have data coming from many identical devices (the data is generated in the same way, follows the same schema, etc.). Each device has a special ID. I want to see my data in Elasticsearch/Kibana per each device. Am I und… --- ## [Logstash Error - causing shutdown and restart](https://discuss.elastic.co/t/logstash-error-causing-shutdown-and-restart/209232)
**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\ **Replies:** 19\ **Last updated:** [December 12, 2019, 8:51am UTC](https://discuss.elastic.co/t/logstash-error-causing-shutdown-and-restart/209232 "2019-12-12T08:51:47Z")
Hi may I know how to resolve this? I am unable to identify which file is causing this error. --- ## [Elasticsearch Avg Aggregation Discrepancy](https://discuss.elastic.co/t/elasticsearch-avg-aggregation-discrepancy/211594)
**Author:** [@Ruby\_Shrestha](https://discuss.elastic.co/u/Ruby_Shrestha)\ **Replies:** 0\ **Last updated:** [December 12, 2019, 8:29am UTC](https://discuss.elastic.co/t/elasticsearch-avg-aggregation-discrepancy/211594 "2019-12-12T08:29:12Z")
Elasticsearch average metric aggregation sometimes shows multiple decimal places while it sometimes shows accurate decimal places. For these 4 values: 1.57, 15.73, 23.22 and 2.42. Average should be 10.735. But, ES Aver… --- ## [After turn-off circuit-break option , and then happens traffic error!](https://discuss.elastic.co/t/after-turn-off-circuit-break-option-and-then-happens-traffic-error/211590)
**Author:** [@HYO-SOON\_KIM](https://discuss.elastic.co/u/HYO-SOON_KIM)\ **Replies:** 0\ **Last updated:** [December 12, 2019, 8:15am UTC](https://discuss.elastic.co/t/after-turn-off-circuit-break-option-and-then-happens-traffic-error/211590 "2019-12-12T08:15:34Z")
Hi. We met the below erros ! { "error": "Too Many Requests", "message": "\[circuit\_breaking\_exception\] \[parent\] Data too large, data for \[\\] would be \[6032703456/5.6gb\], which is larger than the limit of … --- ## [Dec 12th, 2019 \[EN\] \[Elasticsearch\] Data Transforms: More Than Meets the Eye](https://discuss.elastic.co/t/dec-12th-2019-en-elasticsearch-data-transforms-more-than-meets-the-eye/210991)
**Author:** [@kcm](https://discuss.elastic.co/u/kcm)\ **Replies:** 0\ **Last updated:** [December 12, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-12th-2019-en-elasticsearch-data-transforms-more-than-meets-the-eye/210991 "2019-12-12T08:00:06Z")
With great power comes great responsibility You're running at scale, with petabytes of proxy logs, desktop event streams, and endpoint security alerts at your fingertips. The thing is, human beings don't think about log … --- ## [Fields not working in Syslog output](https://discuss.elastic.co/t/fields-not-working-in-syslog-output/211389)
**Author:** [@grimshad](https://discuss.elastic.co/u/grimshad)\ **Replies:** 5\ **Last updated:** [December 12, 2019, 7:52am UTC](https://discuss.elastic.co/t/fields-not-working-in-syslog-output/211389 "2019-12-12T07:52:09Z")
I'm attempting to convert netflow data from the netflow codec into syslog data using the syslog output plugin. The issue i'm having is that no matter what I set the syslog plugin "message" to, it only ever outputs the d… --- ## [Issue with path.repo while starting Elasticsearch as a service](https://discuss.elastic.co/t/issue-with-path-repo-while-starting-elasticsearch-as-a-service/211572)
**Author:** [@vishuk619](https://discuss.elastic.co/u/vishuk619)\ **Replies:** 0\ **Last updated:** [December 12, 2019, 6:37am UTC](https://discuss.elastic.co/t/issue-with-path-repo-while-starting-elasticsearch-as-a-service/211572 "2019-12-12T06:37:34Z")
Describe the feature : Elasticsearch service doesn't get started if path.repo contains a repository path that needs credentials. Elasticsearch version ( bin/elasticsearch --version ): 6.5.4 Plugins installed : \[Search… --- ## [Input-jdbc transform row with all columns to json](https://discuss.elastic.co/t/input-jdbc-transform-row-with-all-columns-to-json/211553)
**Author:** [@Ashutosh\_Pandey](https://discuss.elastic.co/u/Ashutosh_Pandey)\ **Replies:** 0\ **Last updated:** [December 12, 2019, 3:13am UTC](https://discuss.elastic.co/t/input-jdbc-transform-row-with-all-columns-to-json/211553 "2019-12-12T03:13:09Z")
I have a jdbc input plugin. My intention is to read a row and transform all the data into a kafka payload object and send it to kafka. { .... "payload" : " All the data from one row of jdbc input should come here" "t… --- ## [Timestampにログ日付を設定するが時刻がずれる](https://discuss.elastic.co/t/timestamp/210452)
**Author:** [@keikei12](https://discuss.elastic.co/u/keikei12)\ **Replies:** 2\ **Last updated:** [December 12, 2019, 2:21am UTC](https://discuss.elastic.co/t/timestamp/210452 "2019-12-12T02:21:14Z")
logstashのフィルターで下記の設定をしております。 grokで「TIMESTAMP\_ISO8601:timestamp」でログ内の日付を取得 下記で@timestampにログ内の日付を設定 date { match =\> \[ "timestamp", "ISO8601" \] } 上記のように設定したところ、以下の日付ファイルが取り込まれた時に 時刻がずれていました。 ログの日付 201… --- ## [Watcherのwebhookのbodyの設定方法について](https://discuss.elastic.co/t/watcher-webhook-body/211064)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 5\ **Last updated:** [December 12, 2019, 2:16am UTC](https://discuss.elastic.co/t/watcher-webhook-body/211064 "2019-12-12T02:16:30Z")
お世話になっております。 Watcherについて、質問させて頂きます。 ご質問 ①bodyの項目名(下記例だと"resion")について、以下エラーが発生します。 \[x\_content\_parse\_exception\] \[1:587\] \[script\] unknown field \[resion\], parser not found 項目名は自由に指定できる認識ですが、違うのでしょうか。 エラーの解決策についてご教示をお願い… --- ## [Reset the version value of a document](https://discuss.elastic.co/t/reset-the-version-value-of-a-document/211404)
**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\ **Replies:** 2\ **Last updated:** [December 12, 2019, 1:19am UTC](https://discuss.elastic.co/t/reset-the-version-value-of-a-document/211404 "2019-12-12T01:19:01Z")
Hi, I want to reset the version value of a document I read about in this blog on how to: and at this end it's written: For most practical use cases, 60 second is enough for the system to catch up and for delayed req… --- ## ["message" is empty or non-existent](https://discuss.elastic.co/t/message-is-empty-or-non-existent/211535)
**Author:** [@grimshad](https://discuss.elastic.co/u/grimshad)\ **Replies:** 5\ **Last updated:** [December 11, 2019, 11:19pm UTC](https://discuss.elastic.co/t/message-is-empty-or-non-existent/211535 "2019-12-11T23:19:02Z")
using this input: input { udp { port =\> 2055 codec =\> netflow } } and stdout: "@timestamp" =\> 2019-12-10T11:48:02.921Z, "netflow" =\> { "input\_snmp" =\> 0, "ipv4\_dst\_addr" =\> "77.12.190.94", "output\_… --- ## [URL from lab Info is not working](https://discuss.elastic.co/t/url-from-lab-info-is-not-working/211480)
**Author:** [@tmuon](https://discuss.elastic.co/u/tmuon)\ **Replies:** 4\ **Last updated:** [December 11, 2019, 11:46pm UTC](https://discuss.elastic.co/t/url-from-lab-info-is-not-working/211480 "2019-12-11T23:46:36Z")
Hi I'm trying to access my lab guide for 'Analyzing WIndows Host Data' using the current AWS URL displayed in the lab Info popup but i get connection refused. It worked OK for Lab 1 last night but since the lab pause th… --- ## [How to enrich static data in metricbeat events](https://discuss.elastic.co/t/how-to-enrich-static-data-in-metricbeat-events/211421)
**Author:** [@SunilSMenon](https://discuss.elastic.co/u/SunilSMenon)\ **Replies:** 1\ **Last updated:** [December 11, 2019, 10:59pm UTC](https://discuss.elastic.co/t/how-to-enrich-static-data-in-metricbeat-events/211421 "2019-12-11T22:59:51Z")
Hi, We have metricbeat installed and it provides the metric events, we would like to enrich the metricbeat events with information which is available in MSSQL DB, can you kindly guide me how to achieve this. I understan… --- ## [Datetime from MySQL via JDBC --\> @timestamp assignment fails with \_dateparsefailure](https://discuss.elastic.co/t/datetime-from-mysql-via-jdbc-timestamp-assignment-fails-with-dateparsefailure/211531)
**Author:** [@Chris1234](https://discuss.elastic.co/u/Chris1234)\ **Replies:** 2\ **Last updated:** [December 11, 2019, 10:37pm UTC](https://discuss.elastic.co/t/datetime-from-mysql-via-jdbc-timestamp-assignment-fails-with-dateparsefailure/211531 "2019-12-11T22:37:28Z")
I'm using the jdbc plugin to grab table data from a MySQL database. One of the fields in the MySQL database ("created\_at") is of type DATETIME which I need to assign to the @timestamp. Here's part of my logstash.conf: … --- ## [Logstash code 503](https://discuss.elastic.co/t/logstash-code-503/211436)
**Author:** [@typzea](https://discuss.elastic.co/u/typzea)\ **Replies:** 1\ **Last updated:** [December 11, 2019, 9:58pm UTC](https://discuss.elastic.co/t/logstash-code-503/211436 "2019-12-11T21:58:42Z")
Bonjour à tous, J'ai besoin d'aide car depuis quelques jours j'ai le souci suivant : Dec 11 08:54:12 s-log-p-i02-fr logstash\[1011\]: \[2019-12-11T08:54:12,757\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\] retrying failed… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1729) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1731)