# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1811 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1812 --- ## [Logstash 7.3.0 File Input Plugin not Reading Recreated Files](https://discuss.elastic.co/t/logstash-7-3-0-file-input-plugin-not-reading-recreated-files/205703)
**Author:** [@JesseDubs](https://discuss.elastic.co/u/JesseDubs)\ **Replies:** 4\ **Last updated:** [October 29, 2019, 5:05pm UTC](https://discuss.elastic.co/t/logstash-7-3-0-file-input-plugin-not-reading-recreated-files/205703 "2019-10-29T17:05:29Z")
Hi, I have a bunch of json files that I'm using logstash to read, then delete, and then those files will eventually be recreated (with either the same contents, or slightly different contents). I'd then like for logstas… --- ## [\[Elasticsearch\] Delete logs](https://discuss.elastic.co/t/elasticsearch-delete-logs/204631)
**Author:** [@thebeaoliveira](https://discuss.elastic.co/u/thebeaoliveira)\ **Replies:** 2\ **Last updated:** [October 29, 2019, 4:53pm UTC](https://discuss.elastic.co/t/elasticsearch-delete-logs/204631 "2019-10-29T16:53:54Z")
Hello! I would like to know if I can delete the logs below as I am trying to optimize disk space. files location: cd /var/log/elasricsearch elastic\_audit.json elastic-deprecation-1.json elastic-deprecation.json ela… --- ## [Kibana bug](https://discuss.elastic.co/t/kibana-bug/205643)
**Author:** [@Xuan\_Nam\_Dang](https://discuss.elastic.co/u/Xuan_Nam_Dang)\ **Replies:** 3\ **Last updated:** [October 29, 2019, 4:35pm UTC](https://discuss.elastic.co/t/kibana-bug/205643 "2019-10-29T16:35:50Z")
My Kibana is showing the percentage line in stacked mode even though the options are defined as normal. Is this part of some bug? --- ## [Multiples inputs and outputs jdbc](https://discuss.elastic.co/t/multiples-inputs-and-outputs-jdbc/205687)
**Author:** [@Rafael\_Almeida1](https://discuss.elastic.co/u/Rafael_Almeida1)\ **Replies:** 2\ **Last updated:** [October 29, 2019, 4:35pm UTC](https://discuss.elastic.co/t/multiples-inputs-and-outputs-jdbc/205687 "2019-10-29T16:35:37Z")
Hello, i'm trying to create a pipeline to fetch information from one table and insert / update into two other tables with only insert / update conditional on the second table if I successfully insert / update on the firs… --- ## [Method threw 'java.lang.NoSuchFieldError' exception. Cannot evaluate org.elasticsearch.action.index.IndexRequest.toString()](https://discuss.elastic.co/t/method-threw-java-lang-nosuchfielderror-exception-cannot-evaluate-org-elasticsearch-action-index-indexrequest-tostring/205328)
**Author:** [@Tadija\_Malic](https://discuss.elastic.co/u/Tadija_Malic)\ **Replies:** 2\ **Last updated:** [October 29, 2019, 4:31pm UTC](https://discuss.elastic.co/t/method-threw-java-lang-nosuchfielderror-exception-cannot-evaluate-org-elasticsearch-action-index-indexrequest-tostring/205328 "2019-10-29T16:31:53Z")
Describe the feature : Comparison between Elasticsearch, Solr and OOTB Lucene in Adobe Experience Manager Elasticsearch version : Tried 7.0.1 and 7.4.1 JVM version: 1.8.0\_191 OS version macOs - Darwin Kernel Version… --- ## [Kibana Visualize. Lower and Upper Standard deviation](https://discuss.elastic.co/t/kibana-visualize-lower-and-upper-standard-deviation/205623)
**Author:** [@evecitas89](https://discuss.elastic.co/u/evecitas89)\ **Replies:** 1\ **Last updated:** [October 29, 2019, 4:06pm UTC](https://discuss.elastic.co/t/kibana-visualize-lower-and-upper-standard-deviation/205623 "2019-10-29T16:06:44Z")
Hi all, I'm using kibana Data Table Visualization to visualize some information of a set of data. This is my table: My problem is with Standard Deviation. I've selected Standard Deviation as metric, but I'm interest… --- ## [Export Index Patterns with all mapping properties / fields](https://discuss.elastic.co/t/export-index-patterns-with-all-mapping-properties-fields/205609)
**Author:** [@thesprvzr](https://discuss.elastic.co/u/thesprvzr)\ **Replies:** 1\ **Last updated:** [October 29, 2019, 3:44pm UTC](https://discuss.elastic.co/t/export-index-patterns-with-all-mapping-properties-fields/205609 "2019-10-29T15:44:09Z")
Hey, I need to export all saved objects from my ES and Kibana environment and import them to a different instance of Kibana and ES. When I did that using the bulk get Objects API, the exported index patterns included on… --- ## [Geoip on custom field](https://discuss.elastic.co/t/geoip-on-custom-field/205672)
**Author:** [@hannibal](https://discuss.elastic.co/u/hannibal)\ **Replies:** 3\ **Last updated:** [October 29, 2019, 3:43pm UTC](https://discuss.elastic.co/t/geoip-on-custom-field/205672 "2019-10-29T15:43:43Z")
Hi everyone, I'm trying to use the geoIP filter on x\_forwarded\_for header. So my pipeline is quiet easy, I use an HTTP input, and try to use the field x\_forwarded\_for which are in headers parts for the geoip filtering. … --- ## [Field Limits and general tutorial](https://discuss.elastic.co/t/field-limits-and-general-tutorial/205552)
**Author:** [@pmatreides](https://discuss.elastic.co/u/pmatreides)\ **Replies:** 2\ **Last updated:** [October 29, 2019, 3:29pm UTC](https://discuss.elastic.co/t/field-limits-and-general-tutorial/205552 "2019-10-29T15:29:00Z")
I'm new to elasticsearch and I've managed to set up an instance using the ELK stack. It's tough to find definitive answers and examples a full tutorial and walkthrough would greatly help new users. I'm getting several … --- ## [ILM turn unstable the cluster. Heap Overflow](https://discuss.elastic.co/t/ilm-turn-unstable-the-cluster-heap-overflow/205242)
**Author:** [@Emiliano\_Baum](https://discuss.elastic.co/u/Emiliano_Baum)\ **Replies:** 1\ **Last updated:** [October 29, 2019, 2:28pm UTC](https://discuss.elastic.co/t/ilm-turn-unstable-the-cluster-heap-overflow/205242 "2019-10-29T14:28:21Z")
when i try to execute: curl -X POST "xx.xx.xxx.xx:9200/\_ilm/stop?pretty the result is: "type" : "process\_cluster\_event\_timeout\_exception" I think the ILM operation schedule generate an overflow heap error: \[2019-10-… --- ## [Remove the beginning of message then apply kv filter](https://discuss.elastic.co/t/remove-the-beginning-of-message-then-apply-kv-filter/205631)
**Author:** [@jameshanguyen](https://discuss.elastic.co/u/jameshanguyen)\ **Replies:** 6\ **Last updated:** [October 29, 2019, 3:22pm UTC](https://discuss.elastic.co/t/remove-the-beginning-of-message-then-apply-kv-filter/205631 "2019-10-29T15:22:35Z")
Hi, I have a message like this: \<30\>device="SFW" date=2019-10-29 time=16:50:28 timezone="+07" device\_name="XG230" device\_id=C88877XHUG2BUU8 log\_id=010101600001 log\_type="Firewall" log\_component="Firewall Rule" log\_subt… --- ## [Logstash eating memory and eventually gets oom-killed](https://discuss.elastic.co/t/logstash-eating-memory-and-eventually-gets-oom-killed/205701)
**Author:** [@Peter\_Holm](https://discuss.elastic.co/u/Peter_Holm)\ **Replies:** 1\ **Last updated:** [October 29, 2019, 3:21pm UTC](https://discuss.elastic.co/t/logstash-eating-memory-and-eventually-gets-oom-killed/205701 "2019-10-29T15:21:06Z")
I'm running logstash 7.2.0 on a Linux on z RHEL 7.4 64 bits. Everything works just fine, ie elasticsearch, logstash, kibana, for a about 1-1.5 day then logstash gets killed by the OS as a OOM. I have changed heap size in… --- ## [If there a way to be able to access and view maps via kibana locally?](https://discuss.elastic.co/t/if-there-a-way-to-be-able-to-access-and-view-maps-via-kibana-locally/205518)
**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\ **Replies:** 2\ **Last updated:** [October 29, 2019, 3:09pm UTC](https://discuss.elastic.co/t/if-there-a-way-to-be-able-to-access-and-view-maps-via-kibana-locally/205518 "2019-10-29T15:09:12Z")
hey, I am working my way through Kibana and when I come to the 'Maps' area on the console. There is a blank screen where I believe the imaged map should be. Am still able to edit/ ad parameters and am able to see the co… --- ## [Setting https for Kibana with NGINX and a FQDN](https://discuss.elastic.co/t/setting-https-for-kibana-with-nginx-and-a-fqdn/205010)
**Author:** [@basavyr](https://discuss.elastic.co/u/basavyr)\ **Replies:** 4\ **Last updated:** [October 29, 2019, 2:58pm UTC](https://discuss.elastic.co/t/setting-https-for-kibana-with-nginx-and-a-fqdn/205010 "2019-10-29T14:58:58Z")
I have a Droplet on Digital Ocean which runs CentOS 7 and I run an ELK stack on it. I've also successfully configured an NGINX web server with a FQDN (got one from namecheap.com ) and I also have an SSL certificate manag… --- ## [How to Run Elasticsearch from source code or IDE](https://discuss.elastic.co/t/how-to-run-elasticsearch-from-source-code-or-ide/205693)
**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\ **Replies:** 0\ **Last updated:** [October 29, 2019, 2:45pm UTC](https://discuss.elastic.co/t/how-to-run-elasticsearch-from-source-code-or-ide/205693 "2019-10-29T14:45:00Z")
Hi I am trying to run the Elasticsearch from the source code in Idea. I have gone through the below blog trying to do the same The problem with this is that I am unable to change any settings in the elasticsearch.yml… --- ## [Ingesting nanoseconds into elasticsearch](https://discuss.elastic.co/t/ingesting-nanoseconds-into-elasticsearch/202159)
**Author:** [@st3inbeiss](https://discuss.elastic.co/u/st3inbeiss)\ **Replies:** 1\ **Last updated:** [October 29, 2019, 2:40pm UTC](https://discuss.elastic.co/t/ingesting-nanoseconds-into-elasticsearch/202159 "2019-10-29T14:40:24Z")
I'm trying to get a long of nanoseconds since Unix Epoch through logstash into a date\_nanos field in elasticsearch. Since elasticsearch has this datatype, I assumed logstash does have it aswell. However, the date-filter… --- ## [Add numeric field](https://discuss.elastic.co/t/add-numeric-field/205685)
**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\ **Replies:** 2\ **Last updated:** [October 29, 2019, 2:35pm UTC](https://discuss.elastic.co/t/add-numeric-field/205685 "2019-10-29T14:35:43Z")
Hi, i simply want to create a new numeric field. But when using "add-field" command i get systematically a string ! My logstash filter code like : .... mutate { add\_field =\> { "launcher.%{company}" =\> "%{count\_comp}… --- ## [Изменить цвет точек на линии графика](https://discuss.elastic.co/t/topic/205669)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 7\ **Last updated:** [October 29, 2019, 2:34pm UTC](https://discuss.elastic.co/t/topic/205669 "2019-10-29T14:34:45Z")
Вопрос простой: как изменить цвет точек на линии графика, чтобы цвета точек и линии совпадали? Сейчас график выглядит так: А надо так: --- ## [How to subtract 2 metrics and show the value as 3rd metrics?](https://discuss.elastic.co/t/how-to-subtract-2-metrics-and-show-the-value-as-3rd-metrics/205136)
**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\ **Replies:** 7\ **Last updated:** [October 29, 2019, 2:26pm UTC](https://discuss.elastic.co/t/how-to-subtract-2-metrics-and-show-the-value-as-3rd-metrics/205136 "2019-10-29T14:26:10Z")
I have 2 metrics showing my application disconnects. 1 is the total disconnects of my application and the 2nd is manual disconnects performed by users. The difference between the 2 is expected to be "System/Unknown Disco… --- ## [How to nest all fields in an event under a new field in logstash?](https://discuss.elastic.co/t/how-to-nest-all-fields-in-an-event-under-a-new-field-in-logstash/205688)
**Author:** [@Yuval\_Khalifa](https://discuss.elastic.co/u/Yuval_Khalifa)\ **Replies:** 1\ **Last updated:** [October 29, 2019, 2:21pm UTC](https://discuss.elastic.co/t/how-to-nest-all-fields-in-an-event-under-a-new-field-in-logstash/205688 "2019-10-29T14:21:34Z")
Hi all, How can use logstash to convert an event like this: { "@timestamp": "2019-10-29T13:33:46.378Z", "message": "p\_name=yuval;p\_surname=khalifa;p\_age=41", "host": "yuvalk", "p\_age": "41", "@version": "1", "p\_s… --- ## [ES container restart continously \[ error reading control group stats\]](https://discuss.elastic.co/t/es-container-restart-continously-error-reading-control-group-stats/205684)
**Author:** [@mauog](https://discuss.elastic.co/u/mauog)\ **Replies:** 0\ **Last updated:** [October 29, 2019, 1:46pm UTC](https://discuss.elastic.co/t/es-container-restart-continously-error-reading-control-group-stats/205684 "2019-10-29T13:46:39Z")
Hello, I got an error running a docker container on a Centos Atomic with the image: elasticsearch:7.4.0 the error is: elasticsearch | 13:30:42.549 \[main\] INFO org.elasticsearch.plugins.PluginsService - no plugins … --- ## [If conditional not working](https://discuss.elastic.co/t/if-conditional-not-working/205547)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 5\ **Last updated:** [October 29, 2019, 1:32pm UTC](https://discuss.elastic.co/t/if-conditional-not-working/205547 "2019-10-29T13:32:28Z")
I have a basic conf file that I'm trying to eventually drop dns traffic but for some reason I can't get the if conditionals to work anymore. Below is all that is in this conf file. I've also tried changing the if stateme… --- ## [Kibana7.4.1が302リダイレクトを返し応答しない](https://discuss.elastic.co/t/kibana7-4-1-302/205639)
**Author:** [@y\_kurita](https://discuss.elastic.co/u/y_kurita)\ **Replies:** 1\ **Last updated:** [October 29, 2019, 1:20pm UTC](https://discuss.elastic.co/t/kibana7-4-1-302/205639 "2019-10-29T13:20:14Z")
GCEインスタンスでCentOS7.7上にElasticsearch7.4.1の環境を構築しました。 Kibanaサービスを起動しCloud Load Balancingからのヘルスチェックを受けるよう 設定しましたがリクエスト応答が302となりヘルスチェックが通りません。 Elasticsearchはインスタンスローカルからのcurlコマンドに応答しており、kibanaの 初回起動時の.kibanaインデックス等の作成はされて… --- ## [Another High CPU usage with Logstash](https://discuss.elastic.co/t/another-high-cpu-usage-with-logstash/202836)
**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\ **Replies:** 16\ **Last updated:** [October 29, 2019, 1:15pm UTC](https://discuss.elastic.co/t/another-high-cpu-usage-with-logstash/202836 "2019-10-29T13:15:12Z")
1st: fairly new to ElasticStack configuration I've looked at the other topics on High CPU, but I do not believe they are helping me I have an Ubuntu box with 8 cores and 8 G of Ram This machine is running Logstash, El… --- ## [7.3.2 и потеря мастера](https://discuss.elastic.co/t/7-3-2/201228)
**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\ **Replies:** 72\ **Last updated:** [October 29, 2019, 1:07pm UTC](https://discuss.elastic.co/t/7-3-2/201228 "2019-10-29T13:07:53Z")
Наконец-то обновились до 7.3.2 с 6.8.2 Индексы поднялись и при минимальной нагрузке одна нода теряет выбранный мастер и соответственно вылетела из кластера через пару минут присоединившись При этом проблем с железом и … --- ## [Rankfeature method not working c#](https://discuss.elastic.co/t/rankfeature-method-not-working-c/205670)
**Author:** [@gurjit\_buck](https://discuss.elastic.co/u/gurjit_buck)\ **Replies:** 0\ **Last updated:** [October 29, 2019, 12:59pm UTC](https://discuss.elastic.co/t/rankfeature-method-not-working-c/205670 "2019-10-29T12:59:21Z")
.Query(q=\>q.Bool ( bb=\> bb.Must(m =\> m.Match(x=\>x.Name("named\_query").Field( p =\> p.Content).Query(data.SearchText))) .Should(s =\> s.RankFeature(r =\>r.Name("named\_query").Boost(1.1) .F… --- ## [How to write put mapping api using php code](https://discuss.elastic.co/t/how-to-write-put-mapping-api-using-php-code/205666)
**Author:** [@arunkvinam](https://discuss.elastic.co/u/arunkvinam)\ **Replies:** 0\ **Last updated:** [October 29, 2019, 12:40pm UTC](https://discuss.elastic.co/t/how-to-write-put-mapping-api-using-php-code/205666 "2019-10-29T12:40:57Z")
how to write put mapping api using php code. currently iam using curl command curl -X PUT "localhost:9200/new-index/\_mapping" -H 'Content-Type: application/json' -d' {"properties": { "new-email": {"type": "keyword"}}}' … --- ## [Shards Failed | Most of the recent indexes are unassigned](https://discuss.elastic.co/t/shards-failed-most-of-the-recent-indexes-are-unassigned/203994)
**Author:** [@Sundaramoorthy\_Anand](https://discuss.elastic.co/u/Sundaramoorthy_Anand)\ **Replies:** 13\ **Last updated:** [October 29, 2019, 12:07pm UTC](https://discuss.elastic.co/t/shards-failed-most-of-the-recent-indexes-are-unassigned/203994 "2019-10-29T12:07:10Z")
I have a server with ELK along with heartbeat installed. (all are v6.4.2) Heartbeat is monitoring two other servers' elasticsearch and logstash with its pipeline in same domainfrom current server. It is creating index … --- ## [Broad beginner question - making a matching engine](https://discuss.elastic.co/t/broad-beginner-question-making-a-matching-engine/205658)
**Author:** [@Christopher\_Shelley](https://discuss.elastic.co/u/Christopher_Shelley)\ **Replies:** 0\ **Last updated:** [October 29, 2019, 11:54am UTC](https://discuss.elastic.co/t/broad-beginner-question-making-a-matching-engine/205658 "2019-10-29T11:54:21Z")
I'm trying to plan out a "matching engine" - any time a user joins the service, or updates their profile they are checked against everybody who might potentially match with them (same interests, languages etc.) Is there … --- ## [ElasticSearch Service: 2 of 15 shards failed](https://discuss.elastic.co/t/elasticsearch-service-2-of-15-shards-failed/205505)
**Author:** [@AndresL](https://discuss.elastic.co/u/AndresL)\ **Replies:** 2\ **Last updated:** [October 29, 2019, 11:48am UTC](https://discuss.elastic.co/t/elasticsearch-service-2-of-15-shards-failed/205505 "2019-10-29T11:48:04Z")
Hi, In a ESS cluster, from kibana dashboard i can see the error " 2 of 15 shards failed how can i debuig this problem? i have been checking in system logs like .monitoring or .kibana, and i cant find the reason. Vers… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1810) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1812)