# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1800

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1801

---

## [Kibanaclient - Error when executing Kibana client request -nagios](https://discuss.elastic.co/t/kibanaclient-error-when-executing-kibana-client-request-nagios/206577)

<div class="topic-metadata">

**Author:** [@anusree\_arun](https://discuss.elastic.co/u/anusree_arun)\
**Replies:** 0\
**Last updated:** [November 5, 2019, 9:48am UTC](https://discuss.elastic.co/t/kibanaclient-error-when-executing-kibana-client-request-nagios/206577 "2019-11-05T09:48:06Z")

</div>

i am now using nagios module in my logstash . when i run the command /usr/share/logstash/bin/logstash --modules nagios --setup ---i got an error like as below Thread.exclusive is deprecated, use Thread::Mutex WARNIN…

---

## [MySQL log analysis with Filebeat Logstash and Elasticsearch](https://discuss.elastic.co/t/mysql-log-analysis-with-filebeat-logstash-and-elasticsearch/206576)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 0\
**Last updated:** [November 5, 2019, 9:47am UTC](https://discuss.elastic.co/t/mysql-log-analysis-with-filebeat-logstash-and-elasticsearch/206576 "2019-11-05T09:47:34Z")

</div>

Hello everyone, I'm trying to analyze MySQL and wanted to ask what is the best way to do it? :smiley: I'm trying to ship logs by using Filebeat but have some problems with GROK Patterns to parsing mysql-slow-logs in a …

---

## [Rollup job - remote\_transport\_exception - ELK-7.4.1](https://discuss.elastic.co/t/rollup-job-remote-transport-exception-elk-7-4-1/206575)

<div class="topic-metadata">

**Author:** [@Vinothkumar\_Ganeshan](https://discuss.elastic.co/u/Vinothkumar_Ganeshan)\
**Replies:** 0\
**Last updated:** [November 5, 2019, 9:45am UTC](https://discuss.elastic.co/t/rollup-job-remote-transport-exception-elk-7-4-1/206575 "2019-11-05T09:45:22Z")

</div>

Hello, ELK Version - 7.4.1. I'm using Kibana GUI to create rollup index I am creating a rollup job based on the index pattern, but I need the specific range. For example: I have index on based on everyday as click-…

---

## [Best way to export elastic index to json / local file format](https://discuss.elastic.co/t/best-way-to-export-elastic-index-to-json-local-file-format/206560)

<div class="topic-metadata">

**Author:** [@tom\_es](https://discuss.elastic.co/u/tom_es)\
**Replies:** 1\
**Last updated:** [November 5, 2019, 9:43am UTC](https://discuss.elastic.co/t/best-way-to-export-elastic-index-to-json-local-file-format/206560 "2019-11-05T09:43:42Z")

</div>

Hi, we would like to export elastic index into local file (or by rest), to some kind of format (for example, json). our index contains million of documents (~1 GB size). is there a recommended way for doing this using…

---

## [File input JSON with multiline codec plugin](https://discuss.elastic.co/t/file-input-json-with-multiline-codec-plugin/204669)

<div class="topic-metadata">

**Author:** [@Krypton8](https://discuss.elastic.co/u/Krypton8)\
**Replies:** 6\
**Last updated:** [November 5, 2019, 9:38am UTC](https://discuss.elastic.co/t/file-input-json-with-multiline-codec-plugin/204669 "2019-11-05T09:38:07Z")

</div>

Hello, I'm simply trying to parse my JSON fileds into events. The JSON file look like this: \[ { "field1": "value1", "field2": "value2", "field3": "value3", "field4": "value4", "field5": "value5", "field6"…

---

## [Mongo Dashboard Error - Could not locate that index-pattern](https://discuss.elastic.co/t/mongo-dashboard-error-could-not-locate-that-index-pattern/205870)

<div class="topic-metadata">

**Author:** [@Felipe\_Cabral\_Jeroni](https://discuss.elastic.co/u/Felipe_Cabral_Jeroni)\
**Replies:** 2\
**Last updated:** [November 4, 2019, 1:12pm UTC](https://discuss.elastic.co/t/mongo-dashboard-error-could-not-locate-that-index-pattern/205870 "2019-11-04T13:12:32Z")

</div>

I've installed metricbeat in the Mongo server and I'm able to see the logs shipped to logstash and elastic into the kibana discovery, however when I open the dasboard I get the error " Could not locate that index-pattern…

---

## [Bool Query: Order of Execution?](https://discuss.elastic.co/t/bool-query-order-of-execution/206403)

<div class="topic-metadata">

**Author:** [@st3inbeiss](https://discuss.elastic.co/u/st3inbeiss)\
**Replies:** 1\
**Last updated:** [November 5, 2019, 9:21am UTC](https://discuss.elastic.co/t/bool-query-order-of-execution/206403 "2019-11-05T09:21:36Z")

</div>

Hello! I have an elasticsearch cluster with daily indexes for some history functions. For another function, I only need the data for the last hour. My query for this looks something like this: { "query": { "bool": …

---

## [Elasticsearch to csv through logstash - basic question](https://discuss.elastic.co/t/elasticsearch-to-csv-through-logstash-basic-question/206528)

<div class="topic-metadata">

**Author:** [@TomasGreif](https://discuss.elastic.co/u/TomasGreif)\
**Replies:** 1\
**Last updated:** [November 5, 2019, 9:07am UTC](https://discuss.elastic.co/t/elasticsearch-to-csv-through-logstash-basic-question/206528 "2019-11-05T09:07:36Z")

</div>

I want to use logstash to process data stored in elasticsearch and write output to csv. Do I need to install logstash on the server where elastic runs or I can install it locally only and connect to the server? Or I can …

---

## [ElasticSearch 5.6 License Renewal](https://discuss.elastic.co/t/elasticsearch-5-6-license-renewal/206420)

<div class="topic-metadata">

**Author:** [@PascalFCS](https://discuss.elastic.co/u/PascalFCS)\
**Replies:** 2\
**Last updated:** [November 5, 2019, 8:46am UTC](https://discuss.elastic.co/t/elasticsearch-5-6-license-renewal/206420 "2019-11-05T08:46:35Z")

</div>

Hi, I am using the basic license, which should not expire, but it did. I noticed, when my filebeat nodes couldn't connect to Elasticsearch anymore. GET /\_xpack/license gives me: { "license": { "status": "expired", …

---

## [Repository-s3 not uploading snapshot to s3](https://discuss.elastic.co/t/repository-s3-not-uploading-snapshot-to-s3/206532)

<div class="topic-metadata">

**Author:** [@suratpyari](https://discuss.elastic.co/u/suratpyari)\
**Replies:** 3\
**Last updated:** [November 5, 2019, 8:25am UTC](https://discuss.elastic.co/t/repository-s3-not-uploading-snapshot-to-s3/206532 "2019-11-05T08:25:31Z")

</div>

Hi, I am running Elasticsearch on eks cluster. for backup to s3 I have added repository-s3 plugin. When I run following command, curl -X PUT "localhost:9200/\_snapshot/my\_s3\_repository?pretty" -H 'Content-Type: applicat…

---

## [Machinebeat MQTT module: SSL connection to broker fails](https://discuss.elastic.co/t/machinebeat-mqtt-module-ssl-connection-to-broker-fails/206369)

<div class="topic-metadata">

**Author:** [@gmackers](https://discuss.elastic.co/u/gmackers)\
**Replies:** 1\
**Last updated:** [November 5, 2019, 8:16am UTC](https://discuss.elastic.co/t/machinebeat-mqtt-module-ssl-connection-to-broker-fails/206369 "2019-11-05T08:16:19Z")

</div>

Hi, I'm trying out the MQTT module of the machinebeat beta after reading about it here: \[https://www.elastic.co/blog/industrial-internet-of-things-iiot-with-the-elastic-stack\] and I'm having a problem connecting to an M…

---

## [Using cross\_field matching with different analysers](https://discuss.elastic.co/t/using-cross-field-matching-with-different-analysers/206539)

<div class="topic-metadata">

**Author:** [@fen99](https://discuss.elastic.co/u/fen99)\
**Replies:** 0\
**Last updated:** [November 5, 2019, 7:51am UTC](https://discuss.elastic.co/t/using-cross-field-matching-with-different-analysers/206539 "2019-11-05T07:51:15Z")

</div>

Hello community, I'm currently doing a project using the cross-field match type, but search fields with different analysers. Example: brand with German Default and categories with German Stemmed analysers. However, this…

---

## [Kafka output plugin timeout exceptions](https://discuss.elastic.co/t/kafka-output-plugin-timeout-exceptions/206536)

<div class="topic-metadata">

**Author:** [@emilg02](https://discuss.elastic.co/u/emilg02)\
**Replies:** 0\
**Last updated:** [November 5, 2019, 7:28am UTC](https://discuss.elastic.co/t/kafka-output-plugin-timeout-exceptions/206536 "2019-11-05T07:28:50Z")

</div>

Hi all, I am using a Logstash instance to mirror data between two Kafkas, below is the current configuration I have: Logstash pipeline: input { kafka { id =\> "kafka-reader" boo…

---

## [ERROR: A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/error-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/206515)

<div class="topic-metadata">

**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\
**Replies:** 2\
**Last updated:** [November 5, 2019, 7:21am UTC](https://discuss.elastic.co/t/error-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/206515 "2019-11-05T07:21:27Z")

</div>

Hi sagar this side. I have installed all three Elastic search, kibana and logstash in my redhat, for practice purposes. I'm try to connect to oracle database in my network, and have used ojdbc7.jar for that, all my ser…

---

## [Search field fail after increase the numbers of limited field](https://discuss.elastic.co/t/search-field-fail-after-increase-the-numbers-of-limited-field/206534)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 0\
**Last updated:** [November 5, 2019, 7:15am UTC](https://discuss.elastic.co/t/search-field-fail-after-increase-the-numbers-of-limited-field/206534 "2019-11-05T07:15:42Z")

</div>

Dear all After my co worker increase the numbers of limit field when i needed to add more field to an index "settings" : { "index.mapping.total\_fields.limit": 2000 }, now everytime i search something on that spe…

---

## [Elasticsearch malformed query, expected \[END\_OBJECT\] but found \[FIELD\_NAME\]](https://discuss.elastic.co/t/elasticsearch-malformed-query-expected-end-object-but-found-field-name/206050)

<div class="topic-metadata">

**Author:** [@111230](https://discuss.elastic.co/u/111230)\
**Replies:** 2\
**Last updated:** [November 5, 2019, 7:09am UTC](https://discuss.elastic.co/t/elasticsearch-malformed-query-expected-end-object-but-found-field-name/206050 "2019-11-05T07:09:36Z")

</div>

My query looks like this { "query": { "bool": { "must": \[ { "has\_parent": { "parent\_type": "doc", "query": { "bool": { "must": \[ { "terms": { "id": \[ 713 \]}}, { "range": { "created": { "lte": "now/d" …

---

## [How to monitor APIs (SOAP, Rest Full )](https://discuss.elastic.co/t/how-to-monitor-apis-soap-rest-full/206506)

<div class="topic-metadata">

**Author:** [@jam\_mahmoudi](https://discuss.elastic.co/u/jam_mahmoudi)\
**Replies:** 2\
**Last updated:** [November 5, 2019, 6:19am UTC](https://discuss.elastic.co/t/how-to-monitor-apis-soap-rest-full/206506 "2019-11-05T06:19:26Z")

</div>

hi guys I Want see all APIs and monitor APIs (SOAP, Rest Full ) and also see and check state ( Run, up, performance, security ) please guide me

---

## [Match and term in bool's should](https://discuss.elastic.co/t/match-and-term-in-bools-should/206522)

<div class="topic-metadata">

**Author:** [@Ecenma](https://discuss.elastic.co/u/Ecenma)\
**Replies:** 0\
**Last updated:** [November 5, 2019, 5:40am UTC](https://discuss.elastic.co/t/match-and-term-in-bools-should/206522 "2019-11-05T05:40:33Z")

</div>

I'd like to search items that either have firstField (mapped as text) similar to a query string or secondField (mapped as an integer) equal to, say, 1. After reading the docs, I understand the OR I am trying to impl…

---

## [Create new document from extracted fields](https://discuss.elastic.co/t/create-new-document-from-extracted-fields/206517)

<div class="topic-metadata">

**Author:** [@earthpatipon](https://discuss.elastic.co/u/earthpatipon)\
**Replies:** 1\
**Last updated:** [November 5, 2019, 5:25am UTC](https://discuss.elastic.co/t/create-new-document-from-extracted-fields/206517 "2019-11-05T05:25:28Z")

</div>

Hi there, Here is my log structure that comes directly from a service. PUT my\_index/\_doc/1 { "user": \[ { "firstName": "Tim", "lastName": "Cook" }, { "firstName": "Bill", "lastNam…

---

## [Cannot write to a field alias Error URGENT](https://discuss.elastic.co/t/cannot-write-to-a-field-alias-error-urgent/202825)

<div class="topic-metadata">

**Author:** [@khergner](https://discuss.elastic.co/u/khergner)\
**Replies:** 0\
**Last updated:** [October 9, 2019, 12:04pm UTC](https://discuss.elastic.co/t/cannot-write-to-a-field-alias-error-urgent/202825 "2019-10-09T12:04:27Z")

</div>

Hi everyone, I get the following error in logstash but ı don't understand why ı got an error. Can you help me for solution to problem? Elk & logstash & filebeat version 7.3.0 I use shared to below filebeat template …

---

## [How to increase the number of shard in an exsisting index](https://discuss.elastic.co/t/how-to-increase-the-number-of-shard-in-an-exsisting-index/206320)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 6\
**Last updated:** [November 5, 2019, 4:44am UTC](https://discuss.elastic.co/t/how-to-increase-the-number-of-shard-in-an-exsisting-index/206320 "2019-11-05T04:44:19Z")

</div>

Dear all, i have an elastic to collect log when i read the document they say that the default number of shard per index are 5 but when i create the index there are only one index, so how can i increate the number of sh…

---

## [LogstashがElasticsearchにつながらない](https://discuss.elastic.co/t/logstash-elasticsearch/206159)

<div class="topic-metadata">

**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\
**Replies:** 2\
**Last updated:** [November 5, 2019, 4:30am UTC](https://discuss.elastic.co/t/logstash-elasticsearch/206159 "2019-11-05T04:30:09Z")

</div>

以下のdockerfileとdocker-compose、logstash.ymlの設定でdocker-compose upをしたところ、 "Elasticsearch Unreachable: \[http://elasticsearch:9200/\]\[Manticore::ResolutionFailure\] elasticsearch: Name or service not known" でエラーになります。logstash.…

---

## [Logstashでindexを作成する際のmapping](https://discuss.elastic.co/t/logstash-index-mapping/206134)

<div class="topic-metadata">

**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\
**Replies:** 2\
**Last updated:** [November 5, 2019, 4:28am UTC](https://discuss.elastic.co/t/logstash-index-mapping/206134 "2019-11-05T04:28:58Z")

</div>

logstashでindexを作成する際のmappingの設定はlogstash.yml内に記載するのでしょうか？

---

## [Node crashes due to max number of docs exceeded, but ILM should've not let it happen](https://discuss.elastic.co/t/node-crashes-due-to-max-number-of-docs-exceeded-but-ilm-shouldve-not-let-it-happen/201499)

<div class="topic-metadata">

**Author:** [@anishm](https://discuss.elastic.co/u/anishm)\
**Replies:** 6\
**Last updated:** [November 5, 2019, 4:15am UTC](https://discuss.elastic.co/t/node-crashes-due-to-max-number-of-docs-exceeded-but-ilm-shouldve-not-let-it-happen/201499 "2019-11-05T04:15:06Z")

</div>

Elasticsearch Version: 7.3.0 Index: metricbeat-7.3.0 (mentioning to note that the data rates have been consistent for the past month) It is noticed that two out of three Elasticsearch nodes (m4.4xlarge) crashed. When …

---

## [Failed to flush outgoing items to AWS ES](https://discuss.elastic.co/t/failed-to-flush-outgoing-items-to-aws-es/206510)

<div class="topic-metadata">

**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Replies:** 1\
**Last updated:** [November 5, 2019, 3:21am UTC](https://discuss.elastic.co/t/failed-to-flush-outgoing-items-to-aws-es/206510 "2019-11-05T03:21:06Z")

</div>

Hi community I use Logstash and AWS Elasticsearch to centralized the logs. It usually works but I got this problem when we do load test. error\_message=\>"\[413\] {\\"Message\\":\\"Request size exceeded 10485760 bytes\\"}" e…

---

## [Filebeat write: connection reset by peer](https://discuss.elastic.co/t/filebeat-write-connection-reset-by-peer/206511)

<div class="topic-metadata">

**Author:** [@CainGao](https://discuss.elastic.co/u/CainGao)\
**Replies:** 0\
**Last updated:** [November 5, 2019, 2:55am UTC](https://discuss.elastic.co/t/filebeat-write-connection-reset-by-peer/206511 "2019-11-05T02:55:01Z")

</div>

Hello, I use filebeat 5.5.2 send data to logstash , Sometimes, I get it; write tcp Filebeat:32890-\>LOGSTASH\_IP:6044: write: connection reset by peer But other filebet is working...

---

## [Timeout executing grok and timeout\_millis not work](https://discuss.elastic.co/t/timeout-executing-grok-and-timeout-millis-not-work/206449)

<div class="topic-metadata">

**Author:** [@Luis\_Enrique\_Gastelu](https://discuss.elastic.co/u/Luis_Enrique_Gastelu)\
**Replies:** 4\
**Last updated:** [November 5, 2019, 12:56am UTC](https://discuss.elastic.co/t/timeout-executing-grok-and-timeout-millis-not-work/206449 "2019-11-05T00:56:04Z")

</div>

Hi i try to execute a grok but return text Timeout executing grok '\\\[(?\<STUCK\>STUCK)\\\] %{DATA:STUCKMESSAGE}(\\n)\\\[\\n(%{DATA:Method} %{DATA:url} %{DATA:Protocol}\\n)(?\<headers-list\>(.|\\n)\*)\\\]\\", (\\n|\\r|.)\*' against field …

---

## [Snapshot the most recent indexes only](https://discuss.elastic.co/t/snapshot-the-most-recent-indexes-only/206472)

<div class="topic-metadata">

**Author:** [@KeninHouston](https://discuss.elastic.co/u/KeninHouston)\
**Replies:** 1\
**Last updated:** [November 5, 2019, 12:26am UTC](https://discuss.elastic.co/t/snapshot-the-most-recent-indexes-only/206472 "2019-11-05T00:26:27Z")

</div>

Hi, I want to snapshot the most recent created indexes based on a pattern assuming I have the following indexes in the cluster: index1\_20191104 index1\_20191103 index2\_20191104 index2\_20191101 I only want the snaps…

---

## [Elasticsearch Process getting killed](https://discuss.elastic.co/t/elasticsearch-process-getting-killed/205691)

<div class="topic-metadata">

**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\
**Replies:** 7\
**Last updated:** [November 4, 2019, 11:57pm UTC](https://discuss.elastic.co/t/elasticsearch-process-getting-killed/205691 "2019-11-04T23:57:33Z")

</div>

Recently we have started seeing that our elastic-search process is getting killed. We are using 5-5-1 version of elasticsearch. Any idea what could be the cause? ● elasticsearch.service - Elasticsearch Loaded: loade…

---

## [Jmeter Dates are not showing correctly in ELS](https://discuss.elastic.co/t/jmeter-dates-are-not-showing-correctly-in-els/206311)

<div class="topic-metadata">

**Author:** [@Trevorp](https://discuss.elastic.co/u/Trevorp)\
**Replies:** 2\
**Last updated:** [November 4, 2019, 10:49pm UTC](https://discuss.elastic.co/t/jmeter-dates-are-not-showing-correctly-in-els/206311 "2019-11-04T22:49:15Z")

</div>

I am putting Jmeter CSV file into ELK for reporting and analysis. How ever the dates I need to use are not being put in correctly This is the data in ELK the time should be 2019/10/29 10:00:00 , that is in the message, …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1799)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1801)
