# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1801 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1802 --- ## [Error trying to update index setting "max\_ngram\_diff"](https://discuss.elastic.co/t/error-trying-to-update-index-setting-max-ngram-diff/206492)
**Author:** [@RomeoBravo](https://discuss.elastic.co/u/RomeoBravo)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 10:16pm UTC](https://discuss.elastic.co/t/error-trying-to-update-index-setting-max-ngram-diff/206492 "2019-11-04T22:16:11Z")
In an attempt to reset my index settings to use the default for max\_ngram\_diff, I used the PUT \/\_settings API to set this property to null, which successfully removed it from that index's explicit settings. Now… --- ## [File where dashboard names reside](https://discuss.elastic.co/t/file-where-dashboard-names-reside/206415)
**Author:** [@amanciao](https://discuss.elastic.co/u/amanciao)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 10:03pm UTC](https://discuss.elastic.co/t/file-where-dashboard-names-reside/206415 "2019-11-04T22:03:53Z")
I have a use case where I want to know that if a dashboard is created where is it stored in the source code. I want to get all the dashboard names created on top of kibana. Thanks in advance --- ## [Watcher for cluster JVM](https://discuss.elastic.co/t/watcher-for-cluster-jvm/206485)
**Author:** [@Pazoozoo](https://discuss.elastic.co/u/Pazoozoo)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 9:43pm UTC](https://discuss.elastic.co/t/watcher-for-cluster-jvm/206485 "2019-11-04T21:43:05Z")
Hello I'm trying to set up a script watcher but it won't trigger. Here's my watcher code { "trigger": { "schedule": { "interval": "5m" } }, "input": { "http": { "request": { "sche… --- ## [Logstash: File Input does not work](https://discuss.elastic.co/t/logstash-file-input-does-not-work/206476)
**Author:** [@kcb](https://discuss.elastic.co/u/kcb)\ **Replies:** 2\ **Last updated:** [November 4, 2019, 9:20pm UTC](https://discuss.elastic.co/t/logstash-file-input-does-not-work/206476 "2019-11-04T21:20:37Z")
We have written a logstash script to process a simple ASCII file and export contents to stdout{}. We have verified the script works when the input is specified as stdin{} However, we cannot get the script to work when w… --- ## [Is it possible to fetch multiple keyword value based on single value?](https://discuss.elastic.co/t/is-it-possible-to-fetch-multiple-keyword-value-based-on-single-value/206352)
**Author:** [@Thilak](https://discuss.elastic.co/u/Thilak)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 9:10pm UTC](https://discuss.elastic.co/t/is-it-possible-to-fetch-multiple-keyword-value-based-on-single-value/206352 "2019-11-04T21:10:28Z")
Our mapping type for accountNumber is Keyword and Text , We have not applied any tokenizer. But whenever client search for accountNumber they search with all country code \[12345, +2312345, + 3412345\] .Is it possible to… --- ## [JVM GC metrics increase](https://discuss.elastic.co/t/jvm-gc-metrics-increase/206396)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 12:17pm UTC](https://discuss.elastic.co/t/jvm-gc-metrics-increase/206396 "2019-11-04T12:17:57Z")
Hello, When monitoring jvm performance in our elastic cluster we get the following results shown in image1. As it can be detected from image 1 heap memory, non heap memory and thread count show probably a good performan… --- ## [How to enable store on keyword subfield in elasticsearch in case of dynamic mapping](https://discuss.elastic.co/t/how-to-enable-store-on-keyword-subfield-in-elasticsearch-in-case-of-dynamic-mapping/205982)
**Author:** [@prakhara](https://discuss.elastic.co/u/prakhara)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 8:41pm UTC](https://discuss.elastic.co/t/how-to-enable-store-on-keyword-subfield-in-elasticsearch-in-case-of-dynamic-mapping/205982 "2019-11-04T20:41:45Z")
how to enable store on keyword subfield in elasticsearch in case of dynamic mapping --- ## [Should non-nested queries on fields in nested documents work?](https://discuss.elastic.co/t/should-non-nested-queries-on-fields-in-nested-documents-work/206209)
**Author:** [@sgarg7](https://discuss.elastic.co/u/sgarg7)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 8:34pm UTC](https://discuss.elastic.co/t/should-non-nested-queries-on-fields-in-nested-documents-work/206209 "2019-11-04T20:34:58Z")
I have defined a nested document in my mapping. If I query a field in the nested document as if it was any other field, I get no results. If I include the nested path in my query, I get results. Is this the expected beha… --- ## [Delete index before creating it](https://discuss.elastic.co/t/delete-index-before-creating-it/206185)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 8:32pm UTC](https://discuss.elastic.co/t/delete-index-before-creating-it/206185 "2019-11-04T20:32:41Z")
I have data that are coming daily. 90% of the data are same as previous day. 5% are new and 5% are gone. there is no way I can find out what is gone and what is new. this are list of dirs from one of our busy system whe… --- ## [Update Timezone](https://discuss.elastic.co/t/update-timezone/206475)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 8:20pm UTC](https://discuss.elastic.co/t/update-timezone/206475 "2019-11-04T20:20:52Z")
Hello! I have a @timestamp field that is created from two other fields. That works fine. Kibana also updates the timezone automatically (from what I read). That also works fine. I have a new field HOUR that has been c… --- ## [Logstash: ingest only message on elasticsearch](https://discuss.elastic.co/t/logstash-ingest-only-message-on-elasticsearch/206474)
**Author:** [@brianferrol](https://discuss.elastic.co/u/brianferrol)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 8:28pm UTC](https://discuss.elastic.co/t/logstash-ingest-only-message-on-elasticsearch/206474 "2019-11-04T20:28:11Z")
Hi there! I'm trying to ingest a json file from AWS s3 to ElasticSearch. I've created an index with the mapping I need, but Logstash adds @timestamp , @version and puts the whole json file into message. How can I get o… --- ## [Separated conf file duplicates search](https://discuss.elastic.co/t/separated-conf-file-duplicates-search/206468)
**Author:** [@sud0](https://discuss.elastic.co/u/sud0)\ **Replies:** 2\ **Last updated:** [November 4, 2019, 7:47pm UTC](https://discuss.elastic.co/t/separated-conf-file-duplicates-search/206468 "2019-11-04T19:47:30Z")
Hi. I've created two conf files under /etc/logstash/conf.d. Because I have two businesses in two different countries, I want them to be displayed in two separately indexes. Index name nz-\* Index name au-\* However, … --- ## [Logstashs event parsing](https://discuss.elastic.co/t/logstashs-event-parsing/206206)
**Author:** [@funlearning321](https://discuss.elastic.co/u/funlearning321)\ **Replies:** 3\ **Last updated:** [November 4, 2019, 7:40pm UTC](https://discuss.elastic.co/t/logstashs-event-parsing/206206 "2019-11-04T19:40:01Z")
Hello, i am new to ELK. when i onboarded the below log file, it is going to "dead letter queue" in logstash because logstash couldn't able to process the events. I am not sure which type of plugin to use whether KV plu… --- ## [Collect tabular Jmx data?](https://discuss.elastic.co/t/collect-tabular-jmx-data/206463)
**Author:** [@Visuelastic](https://discuss.elastic.co/u/Visuelastic)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 7:05pm UTC](https://discuss.elastic.co/t/collect-tabular-jmx-data/206463 "2019-11-04T19:05:59Z")
Does somebody know how to collect MBean data from a tabular typed attribute and visualize it into Kibana? --- ## [Basic Math in Logstash](https://discuss.elastic.co/t/basic-math-in-logstash/206452)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 3\ **Last updated:** [November 4, 2019, 6:52pm UTC](https://discuss.elastic.co/t/basic-math-in-logstash/206452 "2019-11-04T18:52:55Z")
All I want to do it subtract 6 from the "hour\_of\_day" field, because it's six hours ahead. Which from my understanding, it shouldn't be ahead b/c I used ruby. But whatever the case, it's wrong. Here's my code: ruby { … --- ## [Index Management Increase total fields limit](https://discuss.elastic.co/t/index-management-increase-total-fields-limit/204920)
**Author:** [@whitecoffee](https://discuss.elastic.co/u/whitecoffee)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 6:00pm UTC](https://discuss.elastic.co/t/index-management-increase-total-fields-limit/204920 "2019-11-04T18:00:33Z")
I am trying to import a jsonl file through the elastic cloud and kibana interface. ( Machine Learning -\> data visualizer) I ran into the error 'Limit of total fields \[1000\] in index \[my\_index\] has been exceeded', so in… --- ## [Logstash stopping without any error](https://discuss.elastic.co/t/logstash-stopping-without-any-error/203602)
**Author:** [@Ayden](https://discuss.elastic.co/u/Ayden)\ **Replies:** 3\ **Last updated:** [November 4, 2019, 5:32pm UTC](https://discuss.elastic.co/t/logstash-stopping-without-any-error/203602 "2019-11-04T17:32:02Z")
Hello, I have two logstash pipelines (in docker containers) running with a jdbc input and elastic output. Both pipelines are set to run with a schedule every 1 minute. My problem is that sometimes the pipelines suddenl… --- ## [ES 6.4.2 clients Out of Memory Java Heap Space](https://discuss.elastic.co/t/es-6-4-2-clients-out-of-memory-java-heap-space/206226)
**Author:** [@nishantagarwal1990](https://discuss.elastic.co/u/nishantagarwal1990)\ **Replies:** 2\ **Last updated:** [November 4, 2019, 5:22pm UTC](https://discuss.elastic.co/t/es-6-4-2-clients-out-of-memory-java-heap-space/206226 "2019-11-04T17:22:14Z")
\[2019-11-02T01:09:15,188\]\[WARN \]\[i.n.c.AbstractChannelHandlerContext\] An exception 'java.lang.OutOfMemoryError: Java heap space' \[enable DEBUG level for full stacktrace\] was thrown by a user handler's exceptionCaught() m… --- ## [Do match\_phrase\_prefix queries support the zero\_terms\_query parameter?](https://discuss.elastic.co/t/do-match-phrase-prefix-queries-support-the-zero-terms-query-parameter/206442)
**Author:** [@fheathrenn](https://discuss.elastic.co/u/fheathrenn)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 4:43pm UTC](https://discuss.elastic.co/t/do-match-phrase-prefix-queries-support-the-zero-terms-query-parameter/206442 "2019-11-04T16:43:03Z")
According to the current documentation, match phrase prefix queries support the zero\_terms\_query parameter. However, if I attempt to set this parameter to "all" in a query, I get an error of type parsing\_exception with r… --- ## [Date range value for data table](https://discuss.elastic.co/t/date-range-value-for-data-table/206111)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 5\ **Last updated:** [November 4, 2019, 3:29pm UTC](https://discuss.elastic.co/t/date-range-value-for-data-table/206111 "2019-11-04T15:29:44Z")
Is there a way to obtain the value of the date range in terms of start and end times, last x mins, etc... I would like to put this value into a data table. i.e. Animal Number Date range Average … --- ## [C# sending a get request with a body to ElasticSearch](https://discuss.elastic.co/t/c-sending-a-get-request-with-a-body-to-elasticsearch/205758)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 4\ **Last updated:** [November 4, 2019, 3:18pm UTC](https://discuss.elastic.co/t/c-sending-a-get-request-with-a-body-to-elasticsearch/205758 "2019-11-04T15:18:08Z")
I'm trying to return the data from an existing visualization, called from an external source (written in C#). This can be done in Postman using a GET with a body request (this body copied from the request found when "In… --- ## [Elastic Search Unknown eployment](https://discuss.elastic.co/t/elastic-search-unknown-eployment/206427)
**Author:** [@darking360](https://discuss.elastic.co/u/darking360)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 3:17pm UTC](https://discuss.elastic.co/t/elastic-search-unknown-eployment/206427 "2019-11-04T15:17:00Z")
Greetings everyone. I have an Elastic Search service hosted with Elastic.co, and when creating new documents from a Python app everything works as expected, but in 4 opportunities I got this message from Elastic Search: … --- ## [NFS issues](https://discuss.elastic.co/t/nfs-issues/206425)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 2:59pm UTC](https://discuss.elastic.co/t/nfs-issues/206425 "2019-11-04T14:59:29Z")
My database team are exporting some documents couple of times per day and I read them as soon as possible and put them in Elasticsearch. Files (CSV) are mounted by NFS and I can see them on my local drive. Logstash is ru… --- ## [Broken JSON (Rsyslog -\> Logstash) - Message breaking in wrong place](https://discuss.elastic.co/t/broken-json-rsyslog-logstash-message-breaking-in-wrong-place/206424)
**Author:** [@iget-master](https://discuss.elastic.co/u/iget-master)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 2:59pm UTC](https://discuss.elastic.co/t/broken-json-rsyslog-logstash-message-breaking-in-wrong-place/206424 "2019-11-04T14:59:21Z")
Hi guys, I have a setup where my rsyslog log messages are sent to Logstash in JSON format. My template in rsyslog is this: template(name="json-template" type="list") { constant(value="{") constant(value="\\… --- ## [Failed to parse date](https://discuss.elastic.co/t/failed-to-parse-date/206081)
**Author:** [@imaad](https://discuss.elastic.co/u/imaad)\ **Replies:** 4\ **Last updated:** [November 4, 2019, 2:58pm UTC](https://discuss.elastic.co/t/failed-to-parse-date/206081 "2019-11-04T14:58:48Z")
Hello guys, I failed to parse this date 31/Oct/2019:10:52:48 +0100 using the date plugin : date { match =\> \["date", "dd/MMM/YYYY:HH:mm:ss Z"\] } This is the error I got :slight\_smile: Oct 31 12:08:42 centos7 logs… --- ## [scala.MatchError: null - ElasticSearch Nested mapping - Migrate from ES 5.6.3 to 6.8.3](https://discuss.elastic.co/t/scala-matcherror-null-elasticsearch-nested-mapping-migrate-from-es-5-6-3-to-6-8-3/206419)
**Author:** [@visu0307](https://discuss.elastic.co/u/visu0307)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 2:24pm UTC](https://discuss.elastic.co/t/scala-matcherror-null-elasticsearch-nested-mapping-migrate-from-es-5-6-3-to-6-8-3/206419 "2019-11-04T14:24:22Z")
Hi All, Need some help. I am using PySpark ( Spark 2.2.0, Scala 2.11.8, AWS EMR emr-5.8.0) and trying to migrate from Elasticsearch 5.6.3 to 6.8.3. The following jar i have been using so far: elasticsearch-spark-20\_2… --- ## [Kibana logs out after opening SIEM page](https://discuss.elastic.co/t/kibana-logs-out-after-opening-siem-page/205663)
**Author:** [@Kerwood](https://discuss.elastic.co/u/Kerwood)\ **Replies:** 4\ **Last updated:** [November 4, 2019, 2:13pm UTC](https://discuss.elastic.co/t/kibana-logs-out-after-opening-siem-page/205663 "2019-11-04T14:13:29Z")
Upgrade from 6.x to 7.3.2. Everything works except the SIEM tab. When ever I go to the SIEM tab, I get logged out and redirected to the login page. I'm not using and proxy in front, so thats not the problem. Elasticsear… --- ## [CircuitBreakingException on my ES cluster](https://discuss.elastic.co/t/circuitbreakingexception-on-my-es-cluster/205114)
**Author:** [@SJH](https://discuss.elastic.co/u/SJH)\ **Replies:** 4\ **Last updated:** [November 4, 2019, 1:31pm UTC](https://discuss.elastic.co/t/circuitbreakingexception-on-my-es-cluster/205114 "2019-11-04T13:31:15Z")
Hello all, I keep encountering a CircuitBreakingException on my ES cluster The following stack trace seems to suggest that the CircuitBreakingException is taking place during a seemingly lightweight call (cluster:monit… --- ## [Parse json file with 100k/1 million records?](https://discuss.elastic.co/t/parse-json-file-with-100k-1-million-records/205659)
**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\ **Replies:** 7\ **Last updated:** [November 4, 2019, 1:27pm UTC](https://discuss.elastic.co/t/parse-json-file-with-100k-1-million-records/205659 "2019-11-04T13:27:50Z")
i am trying to parse big json file , here is the sample 5 records in the file with the orignial file containing 100k {"dgdocs": \[{"doc id": "0", "docowner": "0", "documentType": "cte1\_0", "docver": "1", "ogsys": "fc", … --- ## [Problem in my conf file](https://discuss.elastic.co/t/problem-in-my-conf-file/206412)
**Author:** [@lgllrd](https://discuss.elastic.co/u/lgllrd)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 1:20pm UTC](https://discuss.elastic.co/t/problem-in-my-conf-file/206412 "2019-11-04T13:20:41Z")
Hi, I'm trying to start my logstash pipe configuration file but it tell me "command not found" : ''' /home/logstash/test.conf: ligne 3: \[/home/logstash/testdata.log\]: Aucun fichier ou dossier de ce type /home/logstash/… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1800) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1802)