# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1752

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1753

---

## [Awareness Allocation logic](https://discuss.elastic.co/t/awareness-allocation-logic/209914)

<div class="topic-metadata">

**Author:** [@robhuang](https://discuss.elastic.co/u/robhuang)\
**Replies:** 0\
**Last updated:** [November 29, 2019, 12:43am UTC](https://discuss.elastic.co/t/awareness-allocation-logic/209914 "2019-11-29T00:43:48Z")

</div>

I am reading the source code of AwarenessAllocationDecider.java, and try to understand the following piece of code (https://github.com/elastic/elasticsearch/blob/aef461b5b30b6b9ee248e8a5a2e2bb5ab39f6981/server/src/main/j…

---

## [Collect published data from my online websites](https://discuss.elastic.co/t/collect-published-data-from-my-online-websites/209906)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 2\
**Last updated:** [November 28, 2019, 10:46pm UTC](https://discuss.elastic.co/t/collect-published-data-from-my-online-websites/209906 "2019-11-28T22:46:04Z")

</div>

hi everyone, i published my 2 web site (one for wiki and other for e-commerce with product and description) and now i want to collect data that contains some words such as 'games' and 'win' that is published on my websit…

---

## [Cant get rid of error "elasticsearch - retrying failed action with response code: 403"](https://discuss.elastic.co/t/cant-get-rid-of-error-elasticsearch-retrying-failed-action-with-response-code-403/209910)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [November 28, 2019, 10:12pm UTC](https://discuss.elastic.co/t/cant-get-rid-of-error-elasticsearch-retrying-failed-action-with-response-code-403/209910 "2019-11-28T22:12:58Z")

</div>

Hi, Im triyng to get rid of the error thats appears when you have low space in the disk, I have deleted some files and now I have plenty of space, now I have to try to unlock the indexes, I have tried this two commands w…

---

## [How to take backup actual data from Linux Elasticseach path](https://discuss.elastic.co/t/how-to-take-backup-actual-data-from-linux-elasticseach-path/209872)

<div class="topic-metadata">

**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\
**Replies:** 3\
**Last updated:** [November 28, 2019, 8:29pm UTC](https://discuss.elastic.co/t/how-to-take-backup-actual-data-from-linux-elasticseach-path/209872 "2019-11-28T20:29:44Z")

</div>

Dear All. i having some issue while taking backup of all elasticsearch index from linux 18.04 VM Azure machine . i given data path for Linux is :- /var/lib/elasticsearch/\* file\>(elasticsearch.yml…

---

## [Kibana report export CSV file wrong date format](https://discuss.elastic.co/t/kibana-report-export-csv-file-wrong-date-format/209882)

<div class="topic-metadata">

**Author:** [@OrlandoEscalante](https://discuss.elastic.co/u/OrlandoEscalante)\
**Replies:** 2\
**Last updated:** [November 28, 2019, 7:10pm UTC](https://discuss.elastic.co/t/kibana-report-export-csv-file-wrong-date-format/209882 "2019-11-28T19:10:54Z")

</div>

Kibana/ES version 7.4.1 After a search in Kibana, the results are showed in the right format in Kibana, but after those results are exported as CSV file, they are showed all in the file as 1970-\* This is a similar issu…

---

## [PUT fail](https://discuss.elastic.co/t/put-fail/209875)

<div class="topic-metadata">

**Author:** [@emy.comin](https://discuss.elastic.co/u/emy.comin)\
**Replies:** 3\
**Last updated:** [November 28, 2019, 5:52pm UTC](https://discuss.elastic.co/t/put-fail/209875 "2019-11-28T17:52:43Z")

</div>

hi everyone, so I'm begginer in ELK and I saw in a video this input "PUT". PUT /produtos { "settings": { "index": { "number\_of\_shards": 3, "number\_of\_replicas": 0 } }, "mappings": { "v1": …

---

## [Fielddata is disabled](https://discuss.elastic.co/t/fielddata-is-disabled/206816)

<div class="topic-metadata">

**Author:** [@Manoel](https://discuss.elastic.co/u/Manoel)\
**Replies:** 6\
**Last updated:** [November 28, 2019, 5:51pm UTC](https://discuss.elastic.co/t/fielddata-is-disabled/206816 "2019-11-28T17:51:20Z")

</div>

Hello. I upgraded from Elastic Stack version 6.8 to 7.4. I installed AudioBeat on all my servers, with the configuration below. auditbeat.modules: - module: auditd audit\_rule\_files: \[ '${path.config}/audit.rules.d/\*…

---

## [Bulk scripted update on Nested Fields vs cluster refresh rate: Are my nested fields not being updated to the latest version?](https://discuss.elastic.co/t/bulk-scripted-update-on-nested-fields-vs-cluster-refresh-rate-are-my-nested-fields-not-being-updated-to-the-latest-version/209893)

<div class="topic-metadata">

**Author:** [@ClaudioDavi](https://discuss.elastic.co/u/ClaudioDavi)\
**Replies:** 1\
**Last updated:** [November 28, 2019, 5:39pm UTC](https://discuss.elastic.co/t/bulk-scripted-update-on-nested-fields-vs-cluster-refresh-rate-are-my-nested-fields-not-being-updated-to-the-latest-version/209893 "2019-11-28T17:39:00Z")

</div>

Sorry folks, this is a tough one to put into words, even worse because English is my second language, but bear with me please. I have the following situation in hand and am not sure if it will work as expected: The obj…

---

## [Non timeseries beat indexes](https://discuss.elastic.co/t/non-timeseries-beat-indexes/209725)

<div class="topic-metadata">

**Author:** [@Blake\_Wills](https://discuss.elastic.co/u/Blake_Wills)\
**Replies:** 1\
**Last updated:** [November 28, 2019, 4:04pm UTC](https://discuss.elastic.co/t/non-timeseries-beat-indexes/209725 "2019-11-28T16:04:04Z")

</div>

Is it possible to setup beats (auditbeat / metricbeat / winlogbeat) to not use timeseries indexes? I've orderridden the index name in the respective config files but the template (via \[beat\].exe setup - manual loading) …

---

## [Called with an invalid endpoint: sql.query](https://discuss.elastic.co/t/called-with-an-invalid-endpoint-sql-query/209586)

<div class="topic-metadata">

**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\
**Replies:** 1\
**Last updated:** [November 28, 2019, 3:54pm UTC](https://discuss.elastic.co/t/called-with-an-invalid-endpoint-sql-query/209586 "2019-11-28T15:54:58Z")

</div>

I'm trying to develop a kibana plugin (Elasticsearch & Kibana both Ver 7.4.1). In order to get started i have used the known plugin analyse\_api as an example and starting point. I'm trying to invoke the Elasticsearch AP…

---

## [Logstash filtering on filebeat's successfully multilined event](https://discuss.elastic.co/t/logstash-filtering-on-filebeats-successfully-multilined-event/209110)

<div class="topic-metadata">

**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\
**Replies:** 3\
**Last updated:** [November 28, 2019, 3:34pm UTC](https://discuss.elastic.co/t/logstash-filtering-on-filebeats-successfully-multilined-event/209110 "2019-11-28T15:34:48Z")

</div>

I have correctly configured filebeat to deal with a multiline event generated by ISC's kea software. I want to parse that event into various fields, but none of my grok statements are matching. I think it may have to do…

---

## [Old files ignored? or indexed again with new Ids?](https://discuss.elastic.co/t/old-files-ignored-or-indexed-again-with-new-ids/209868)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 5\
**Last updated:** [November 28, 2019, 3:24pm UTC](https://discuss.elastic.co/t/old-files-ignored-or-indexed-again-with-new-ids/209868 "2019-11-28T15:24:37Z")

</div>

I have a folder with multiple files with a name date format: "foo\_2019\_11\_23" I have already created indexes with those files with the folowing command bin/logstash -f /etc/logstash/conf.d/foo.conf now there are new f…

---

## [Migration stack ELK 6.5.4 vers 7.0.1](https://discuss.elastic.co/t/migration-stack-elk-6-5-4-vers-7-0-1/209847)

<div class="topic-metadata">

**Author:** [@MrBenett](https://discuss.elastic.co/u/MrBenett)\
**Replies:** 2\
**Last updated:** [November 28, 2019, 3:22pm UTC](https://discuss.elastic.co/t/migration-stack-elk-6-5-4-vers-7-0-1/209847 "2019-11-28T15:22:11Z")

</div>

Bonjour à tous, Je compte migrer l'ensemble des éléments d'une stack d'environnement de test en version 6.5.4 vers une 7.0.1 (qui correspond à notre production). J'ai consulté le webinar "Conseils d’experts pour migrer…

---

## [Beat can receiver data from kibana or not?](https://discuss.elastic.co/t/beat-can-receiver-data-from-kibana-or-not/209264)

<div class="topic-metadata">

**Author:** [@Fent](https://discuss.elastic.co/u/Fent)\
**Replies:** 1\
**Last updated:** [November 28, 2019, 3:12pm UTC](https://discuss.elastic.co/t/beat-can-receiver-data-from-kibana-or-not/209264 "2019-11-28T15:12:20Z")

</div>

I want to add some button on kibana to send command to beat(like filebeat) ,to control the beat to start to collect log or stop collect , I want to know if there have some API to handle communication between kibana a…

---

## [Issues with converting parsed Logstash logs to Kibana - 6.8.2](https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708)

<div class="topic-metadata">

**Author:** [@JPetrucka](https://discuss.elastic.co/u/JPetrucka)\
**Replies:** 7\
**Last updated:** [November 28, 2019, 3:04pm UTC](https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708 "2019-11-28T15:04:11Z")

</div>

Hey everyone, We are having issues taking the parsed logs from Logstash and ingesting them into Kibana to produce tags and graphs. The error states "No cached mapping for this field. Refresh list from Management \> Index…

---

## [How to index even on failed pipelines](https://discuss.elastic.co/t/how-to-index-even-on-failed-pipelines/209122)

<div class="topic-metadata">

**Author:** [@micas](https://discuss.elastic.co/u/micas)\
**Replies:** 4\
**Last updated:** [November 28, 2019, 12:41pm UTC](https://discuss.elastic.co/t/how-to-index-even-on-failed-pipelines/209122 "2019-11-28T12:41:48Z")

</div>

I have an ingest pipeline "filebeat-7.2.0-apache-access-default" and others, however when my document doesnt match something it doesnt get indexed. Is there any way that i can define that even if any pipeline fails index…

---

## [Will Logstash be a part of elastic cloud?](https://discuss.elastic.co/t/will-logstash-be-a-part-of-elastic-cloud/209870)

<div class="topic-metadata">

**Author:** [@mviegas](https://discuss.elastic.co/u/mviegas)\
**Replies:** 0\
**Last updated:** [November 28, 2019, 2:10pm UTC](https://discuss.elastic.co/t/will-logstash-be-a-part-of-elastic-cloud/209870 "2019-11-28T14:10:26Z")

</div>

I'm on some research into migrating an on-premises ELK server to the cloud, alongside with our application. However, as far as my research went, there is no logstash provided on the elastic cloud yet, right? The topic be…

---

## [Logstash Central management datas](https://discuss.elastic.co/t/logstash-central-management-datas/209717)

<div class="topic-metadata">

**Author:** [@coute](https://discuss.elastic.co/u/coute)\
**Replies:** 1\
**Last updated:** [November 28, 2019, 2:05pm UTC](https://discuss.elastic.co/t/logstash-central-management-datas/209717 "2019-11-28T14:05:47Z")

</div>

Hello, Could you please tell me the name of the elasticsearch index or kibana object where datas from pipeline central management are stored (pipelines configuration) Thanks.

---

## [How to use if condition in logstash](https://discuss.elastic.co/t/how-to-use-if-condition-in-logstash/209794)

<div class="topic-metadata">

**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\
**Replies:** 1\
**Last updated:** [November 28, 2019, 1:51pm UTC](https://discuss.elastic.co/t/how-to-use-if-condition-in-logstash/209794 "2019-11-28T13:51:29Z")

</div>

Hi, I want to use if statement in my logstasg config file to get some particular data from a file. but i don't know how exactly we use if statements in its config file. any one can please share me the syntax here. Th…

---

## [Create Dashboard for indices of different servers with different prefix](https://discuss.elastic.co/t/create-dashboard-for-indices-of-different-servers-with-different-prefix/209846)

<div class="topic-metadata">

**Author:** [@JayshreeR](https://discuss.elastic.co/u/JayshreeR)\
**Replies:** 1\
**Last updated:** [November 28, 2019, 1:48pm UTC](https://discuss.elastic.co/t/create-dashboard-for-indices-of-different-servers-with-different-prefix/209846 "2019-11-28T13:48:47Z")

</div>

I have two indices, one for zipkin and one for logstash. And there is common field in both i.e. traceId. I want to create a Kibana dashboard where I can collect different fields from both indices together(using common f…

---

## [Indices management from multiple logstash instances](https://discuss.elastic.co/t/indices-management-from-multiple-logstash-instances/209833)

<div class="topic-metadata">

**Author:** [@manfred](https://discuss.elastic.co/u/manfred)\
**Replies:** 0\
**Last updated:** [November 28, 2019, 10:40am UTC](https://discuss.elastic.co/t/indices-management-from-multiple-logstash-instances/209833 "2019-11-28T10:40:00Z")

</div>

Hi, I'm testing ELK currently. I have the following architecture: Logstash has three instances running in three different data centers logx01 logx02 logx03 Elasticsearch cluster with 4 nodes: es01 / data node, hot …

---

## [Different sorted result on same shard on different nodes](https://discuss.elastic.co/t/different-sorted-result-on-same-shard-on-different-nodes/208783)

<div class="topic-metadata">

**Author:** [@francesco1](https://discuss.elastic.co/u/francesco1)\
**Replies:** 2\
**Last updated:** [November 28, 2019, 1:22pm UTC](https://discuss.elastic.co/t/different-sorted-result-on-same-shard-on-different-nodes/208783 "2019-11-28T13:22:43Z")

</div>

I have a cluster with 2 data nodes, each node has one shard. When I make a query, I sort by a date field but I get inconsistent result if I perform the same query twice. This is because (I think) ES hits the nodes in ro…

---

## [Format dates in response field in elastic search](https://discuss.elastic.co/t/format-dates-in-response-field-in-elastic-search/209836)

<div class="topic-metadata">

**Author:** [@SRI\_SUSHMA\_Karra](https://discuss.elastic.co/u/SRI_SUSHMA_Karra)\
**Replies:** 1\
**Last updated:** [November 28, 2019, 1:05pm UTC](https://discuss.elastic.co/t/format-dates-in-response-field-in-elastic-search/209836 "2019-11-28T13:05:54Z")

</div>

My server on which the application runs (uses ES) and ES are in central american time and I am accessing it from my server which is in IST. I want some charts and data for today(Say Jan 3) so I send from date as today…

---

## [Plugin development for dashboard](https://discuss.elastic.co/t/plugin-development-for-dashboard/209698)

<div class="topic-metadata">

**Author:** [@ultimatezio](https://discuss.elastic.co/u/ultimatezio)\
**Replies:** 2\
**Last updated:** [November 28, 2019, 1:05pm UTC](https://discuss.elastic.co/t/plugin-development-for-dashboard/209698 "2019-11-28T13:05:12Z")

</div>

Hi all, I'm trying to develop a kibana's plugin. My goal is that every time a user access a dashboard, the kibana's server log a users credential (username only) and the dashboard name. I have an idea of what to make…

---

## [Analyze Request - Local parameter](https://discuss.elastic.co/t/analyze-request-local-parameter/209532)

<div class="topic-metadata">

**Author:** [@gri](https://discuss.elastic.co/u/gri)\
**Replies:** 3\
**Last updated:** [November 28, 2019, 1:04pm UTC](https://discuss.elastic.co/t/analyze-request-local-parameter/209532 "2019-11-28T13:04:44Z")

</div>

The Analyze endpoint does not seem to have a "local" parameter to specify the preference. Is it just missing or is that on purpose and I am missing something? I noticed it was possible in the 0.\* and 1.\* versions of ES…

---

## [Filebeatの再起動を伴わずにinput定義を追加したい](https://discuss.elastic.co/t/filebeat-input/209611)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 5\
**Last updated:** [November 28, 2019, 12:57pm UTC](https://discuss.elastic.co/t/filebeat-input/209611 "2019-11-28T12:57:51Z")

</div>

filebeatで再起動を伴わずにinput定義を追加する方法があるかどうかご教示ください。 ＜やりたいこと＞ ログAをinputとして起動して、運用中に新しくログBを追加する際、サービス停止(filebeatの再起動)を伴わずに定義を追加したい。 下記のymlの設定でいうと、もともとログAの定義のみ設定されている状態で、filebeat再起動無しでログBの設定を追加したいです。 filebeat.inputs: - type…

---

## [Loop through array and create new field values](https://discuss.elastic.co/t/loop-through-array-and-create-new-field-values/209826)

<div class="topic-metadata">

**Author:** [@karlm](https://discuss.elastic.co/u/karlm)\
**Replies:** 1\
**Last updated:** [November 28, 2019, 12:52pm UTC](https://discuss.elastic.co/t/loop-through-array-and-create-new-field-values/209826 "2019-11-28T12:52:41Z")

</div>

I have an xml filter creating two arrays from an xml sql column, there could be any amount of values in the arrays. xml { source =\> "event\_xml" remove\_namespaces =\> true store\_xml =\> fa…

---

## [Kibana and index patterns performance](https://discuss.elastic.co/t/kibana-and-index-patterns-performance/209564)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 3\
**Last updated:** [November 28, 2019, 12:27pm UTC](https://discuss.elastic.co/t/kibana-and-index-patterns-performance/209564 "2019-11-28T12:27:45Z")

</div>

Hi all, I'm collecting information with filebeat, procesing it with logstash and storing in elasticsearch. I have different types and sub-types of information, and indexing the information with something similar to %{\[…

---

## [ElasticSearch Snapshot\_backup](https://discuss.elastic.co/t/elasticsearch-snapshot-backup/209857)

<div class="topic-metadata">

**Author:** [@Ceitcon\_consulting](https://discuss.elastic.co/u/Ceitcon_consulting)\
**Replies:** 0\
**Last updated:** [November 28, 2019, 12:44pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-backup/209857 "2019-11-28T12:44:06Z")

</div>

HI I want to take the backup of my elastic cluster using snapshot api end point and then i want to delete the indexes to have new data in it. my question is that while taking the snapshot backup will the logs still comi…

---

## [Someone has better approach for array handling than nested objects?](https://discuss.elastic.co/t/someone-has-better-approach-for-array-handling-than-nested-objects/209372)

<div class="topic-metadata">

**Author:** [@matiasr](https://discuss.elastic.co/u/matiasr)\
**Replies:** 3\
**Last updated:** [November 28, 2019, 12:38pm UTC](https://discuss.elastic.co/t/someone-has-better-approach-for-array-handling-than-nested-objects/209372 "2019-11-28T12:38:29Z")

</div>

I've been a while playing with elastic search and(I think) I got a non-satisfied result from my queries. I would like to get all documents that must have four conditions puts inside but because an unknown reason I receiv…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1751)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1753)
