# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1839 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1840 --- ## [Hardware requirements for Elasticsearch](https://discuss.elastic.co/t/hardware-requirements-for-elasticsearch/203648)
**Author:** [@ganesh2](https://discuss.elastic.co/u/ganesh2)\ **Replies:** 1\ **Last updated:** [October 16, 2019, 4:35am UTC](https://discuss.elastic.co/t/hardware-requirements-for-elasticsearch/203648 "2019-10-16T04:35:26Z")
Dear Support Team, Are there any limitations that the Elasticsearch can monitor only these many servers? My understanding is, there are no limitations and it really depends on the Nodes configuration. Please let me kno… --- ## [LogStash encoding Issue from Filebeat IIS Access Logs 7.4.0 Stack](https://discuss.elastic.co/t/logstash-encoding-issue-from-filebeat-iis-access-logs-7-4-0-stack/203721)
**Author:** [@Nicholas\_Penning](https://discuss.elastic.co/u/Nicholas_Penning)\ **Replies:** 5\ **Last updated:** [October 16, 2019, 3:24am UTC](https://discuss.elastic.co/t/logstash-encoding-issue-from-filebeat-iis-access-logs-7-4-0-stack/203721 "2019-10-16T03:24:05Z")
I have tried many ways to get this warning message to go away in my LogStash pipeline but am failing to do so: \[2019-10-15T17:42:15,175\]\[WARN \]\[logstash.filters.urldecode\] Received an event that has a different characte… --- ## [Elastic Cloud上での不正ダウンロード検知について](https://discuss.elastic.co/t/elastic-cloud/203734)
**Author:** [@mukai](https://discuss.elastic.co/u/mukai)\ **Replies:** 0\ **Last updated:** [October 16, 2019, 3:10am UTC](https://discuss.elastic.co/t/elastic-cloud/203734 "2019-10-16T03:10:46Z")
Elastic Cloudには不正ダウンロードを検知する機能はありますか？ 【例】KibanaのDiscover画面で、利用者が大量にCSVデータをダウンロードした場合、管理者は(情報漏えいに)気づく事が出来ますか？ ご存じの方がいましたら教えて頂けないでしょうか。 (クラウドのサポート問い合わせ機能を使う事ができないため、こちらの掲示板で聞かせて頂いています。) --- ## [Multiple scripts within script\_score](https://discuss.elastic.co/t/multiple-scripts-within-script-score/203698)
**Author:** [@sgTextSearch](https://discuss.elastic.co/u/sgTextSearch)\ **Replies:** 1\ **Last updated:** [October 16, 2019, 2:33am UTC](https://discuss.elastic.co/t/multiple-scripts-within-script-score/203698 "2019-10-16T02:33:31Z")
How can I use multiple scripts within script\_score query in 7.4? I need to apply a filter on the result set and then define corresponding scripts. The function\_score query currently being used has the following format: … --- ## [Multiple csv files to multiple auto field in kibana](https://discuss.elastic.co/t/multiple-csv-files-to-multiple-auto-field-in-kibana/203731)
**Author:** [@Pandikannan\_Jeyaprak](https://discuss.elastic.co/u/Pandikannan_Jeyaprak)\ **Replies:** 0\ **Last updated:** [October 16, 2019, 2:32am UTC](https://discuss.elastic.co/t/multiple-csv-files-to-multiple-auto-field-in-kibana/203731 "2019-10-16T02:32:03Z")
i am having multiple csv files with different number of column. I have used csv filter on logstash. it is created autodetect column for first csv file only. For other csv files, column names are not detecting. is there a… --- ## [How to create multiple indexes from fields of JSON file from logstach](https://discuss.elastic.co/t/how-to-create-multiple-indexes-from-fields-of-json-file-from-logstach/203558)
**Author:** [@jaytran](https://discuss.elastic.co/u/jaytran)\ **Replies:** 3\ **Last updated:** [October 16, 2019, 2:02am UTC](https://discuss.elastic.co/t/how-to-create-multiple-indexes-from-fields-of-json-file-from-logstach/203558 "2019-10-16T02:02:10Z")
hi all, I'm a newone, I don't know how to create multiple index from fields in json. I have JSON File like this { "id": "135569", "name" : "jay", "year":2016 , "companies": \["IBM", "Google"\] } { "id": "135570", "name… --- ## [Kibana 7.2.0 source code import path problem](https://discuss.elastic.co/t/kibana-7-2-0-source-code-import-path-problem/203610)
**Author:** [@tony21177](https://discuss.elastic.co/u/tony21177)\ **Replies:** 2\ **Last updated:** [October 16, 2019, 1:29am UTC](https://discuss.elastic.co/t/kibana-7-2-0-source-code-import-path-problem/203610 "2019-10-16T01:29:13Z")
Hi, I am studying Kibana source code. I encounter a confusing problem about import path problem. the source file link is https://github.com/elastic/kibana/blob/7.2/src/legacy/core\_plugins/kibana/public/management/inde… --- ## [Aggregate Plugin push\_previous\_map\_as\_event](https://discuss.elastic.co/t/aggregate-plugin-push-previous-map-as-event/203701)
**Author:** [@Guanda\_Li](https://discuss.elastic.co/u/Guanda_Li)\ **Replies:** 4\ **Last updated:** [October 16, 2019, 1:18am UTC](https://discuss.elastic.co/t/aggregate-plugin-push-previous-map-as-event/203701 "2019-10-16T01:18:28Z")
I'm aggregating streaming connection log from nginx server. Usually there are several similar events coming with same id, then there are another bunch of similar events with another id coming. I'm trying to get the numbe… --- ## [Parsing array of json objects with logstash and injesting to elastic](https://discuss.elastic.co/t/parsing-array-of-json-objects-with-logstash-and-injesting-to-elastic/203197)
**Author:** [@Sidharth\_Sinha](https://discuss.elastic.co/u/Sidharth_Sinha)\ **Replies:** 8\ **Last updated:** [October 15, 2019, 11:49pm UTC](https://discuss.elastic.co/t/parsing-array-of-json-objects-with-logstash-and-injesting-to-elastic/203197 "2019-10-15T23:49:24Z")
Hi, I am trying to injest data from logstash to elastic, and have this array of json objects, such that each element in the array is a doc in elasticsearch, with the key name as the keys in the json. \[ {"name"… --- ## [Logstash - Filtering multiple date formats - date\_time\_parse\_exception](https://discuss.elastic.co/t/logstash-filtering-multiple-date-formats-date-time-parse-exception/203725)
**Author:** [@Sidharth\_Sinha](https://discuss.elastic.co/u/Sidharth_Sinha)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 11:48pm UTC](https://discuss.elastic.co/t/logstash-filtering-multiple-date-formats-date-time-parse-exception/203725 "2019-10-15T23:48:14Z")
I have a stream of json logs being sent into elastic via logstash. The input stream has inconsistent date formats, in one of the either formats: "YYYY-MM-dd'T'HH:mm:ssZ", or "YYYY-MM-dd HH:mm:ss" Example, some of them… --- ## [Synonym filterを使用していて TooManyClausesを回避するには](https://discuss.elastic.co/t/synonym-filter-toomanyclauses/203720)
**Author:** [@tomoko](https://discuss.elastic.co/u/tomoko)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 10:57pm UTC](https://discuss.elastic.co/t/synonym-filter-toomanyclauses/203720 "2019-10-15T22:57:59Z")
kuromoji tokenizerと synonym filterを使っている時、どのようにTooManyClausesを回避することができるでしょう？ 設定するべき適切なmax\_clause\_count 値を見つける算出方法はありますでしょうか？あるいは類義語辞書を使う場合、max\_clause\_count値を増やす以外に、この問題を起こさなくする手段がありますでしょうか？ 状況： Simple Query String がある… --- ## [Bucket\_selector aggregation and size. optimizations](https://discuss.elastic.co/t/bucket-selector-aggregation-and-size-optimizations/203719)
**Author:** [@andrx](https://discuss.elastic.co/u/andrx)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 10:53pm UTC](https://discuss.elastic.co/t/bucket-selector-aggregation-and-size-optimizations/203719 "2019-10-15T22:53:24Z")
I have question about bucket\_selector aggregation. (Environment tested: ES6.8 and ES7 basic on centos7) In my use case I need to drop documents if there are dupes by selected property. Index is not big about 2mln recor… --- ## [Dynamic alias creation via template](https://discuss.elastic.co/t/dynamic-alias-creation-via-template/203547)
**Author:** [@Ennui](https://discuss.elastic.co/u/Ennui)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 10:31pm UTC](https://discuss.elastic.co/t/dynamic-alias-creation-via-template/203547 "2019-10-15T22:31:45Z")
Hi, I have indices created by users, where the index name always matches the pattern "xyz.helloworld" (the variable part is xyz) Is there a way to use a template to automatically create an alias xyz for "xyz.helloworld… --- ## [Parsing multiline unstructured log..Please give grok for this below log\\](https://discuss.elastic.co/t/parsing-multiline-unstructured-log-please-give-grok-for-this-below-log/203224)
**Author:** [@smr](https://discuss.elastic.co/u/smr)\ **Replies:** 5\ **Last updated:** [October 15, 2019, 9:58pm UTC](https://discuss.elastic.co/t/parsing-multiline-unstructured-log-please-give-grok-for-this-below-log/203224 "2019-10-15T21:58:00Z")
INFO 2019-04-23 01:57:00,258 \[AsyncHttpClient-Callback\] org.mule.runtime.core.internal.util.queue.QueueXaResourceManager: Starting ResourceManager INFO 2019-04-23 01:57:00,258 \[AsyncHttpClient-Callback\] org.mule.runti… --- ## [Elasticsearch input plugin creates more documents than what is in the originating index](https://discuss.elastic.co/t/elasticsearch-input-plugin-creates-more-documents-than-what-is-in-the-originating-index/203374)
**Author:** [@snowboardcto](https://discuss.elastic.co/u/snowboardcto)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 9:41pm UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-creates-more-documents-than-what-is-in-the-originating-index/203374 "2019-10-15T21:41:28Z")
The elasticsearch Logstash input filter seems to output more documents than the index it is set to input from. Below is the filter I'm using. What do I need to do to ensure it only inputs each record in the originating… --- ## [Ingesting a separate text file in addition to the log files that are already being ingested](https://discuss.elastic.co/t/ingesting-a-separate-text-file-in-addition-to-the-log-files-that-are-already-being-ingested/203710)
**Author:** [@druffner](https://discuss.elastic.co/u/druffner)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 9:30pm UTC](https://discuss.elastic.co/t/ingesting-a-separate-text-file-in-addition-to-the-log-files-that-are-already-being-ingested/203710 "2019-10-15T21:30:39Z")
Hey Everyone, Please forgive me as I am still very new to the ELK stack. I currently have an on-premises ELK setup that is ingesting snort logs. Running on the same server, I have a separate script that outputs results … --- ## [Parse customer name](https://discuss.elastic.co/t/parse-customer-name/203556)
**Author:** [@sud0](https://discuss.elastic.co/u/sud0)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 9:26pm UTC](https://discuss.elastic.co/t/parse-customer-name/203556 "2019-10-15T21:26:59Z")
Hi. I need to parse the customer name, but there are cases when the customer name has one, two or even three words. Example 1: Customer name with 3 words INFO 2019-10-15 16:34:41,964 transaction.TransactionDocumentPer… --- ## [Node configuration of elasticsesarch cluster](https://discuss.elastic.co/t/node-configuration-of-elasticsesarch-cluster/203707)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 8:51pm UTC](https://discuss.elastic.co/t/node-configuration-of-elasticsesarch-cluster/203707 "2019-10-15T20:51:25Z")
Hi, i'm starting getting into elasticsearch cluster, and i have read many time the recomendation to have 3 master eligible nodes to have high availability. I've also read that if you have dedicated master nodes should … --- ## [Auto importing dangled indices](https://discuss.elastic.co/t/auto-importing-dangled-indices/203684)
**Author:** [@J\_Warner](https://discuss.elastic.co/u/J_Warner)\ **Replies:** 9\ **Last updated:** [October 15, 2019, 8:43pm UTC](https://discuss.elastic.co/t/auto-importing-dangled-indices/203684 "2019-10-15T20:43:33Z")
Hey hoping I could get some more insight on the issue. I'm currently running ELK stack inside GKE client/master/data I've recently updated the cluster from version 1.13.X.X to 1.14.X.X during the upgrade my process ELK c… --- ## [Logstash RabbitMQ Input - Send ack after event processed](https://discuss.elastic.co/t/logstash-rabbitmq-input-send-ack-after-event-processed/203709)
**Author:** [@ThiagoBarradas](https://discuss.elastic.co/u/ThiagoBarradas)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 8:03pm UTC](https://discuss.elastic.co/t/logstash-rabbitmq-input-send-ack-after-event-processed/203709 "2019-10-15T20:03:14Z")
Hello guys! I need to send rabbitmq ack after event processed. I tried set ack =\> true but acknowledges are sent before then event processing. How can I do this? input { rabbit { # my rabbit config … --- ## [Listening for a webhook](https://discuss.elastic.co/t/listening-for-a-webhook/203038)
**Author:** [@druffner](https://discuss.elastic.co/u/druffner)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 7:47pm UTC](https://discuss.elastic.co/t/listening-for-a-webhook/203038 "2019-10-15T19:47:33Z")
Hey forum, I am currently working on a project with Kibana, and I was wondering if Kibana has the ability to listen for a webhook. I understand that you can send a webhook from Kibana, and I did some research into watch… --- ## [Installation on Elastic Search](https://discuss.elastic.co/t/installation-on-elastic-search/203700)
**Author:** [@ranganathan8929](https://discuss.elastic.co/u/ranganathan8929)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 6:00pm UTC](https://discuss.elastic.co/t/installation-on-elastic-search/203700 "2019-10-15T18:00:42Z")
Hi , After installation on elastic search, we are able to find the below error message . help us to resolve the issue "type": "server", "timestamp": "2019-10-14T12:53:47,728-07:00", "level": "WARN", "component": "o.e.b… --- ## [X/Y Axiis Using Only Field Data](https://discuss.elastic.co/t/x-y-axiis-using-only-field-data/202232)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 7\ **Last updated:** [October 15, 2019, 5:51pm UTC](https://discuss.elastic.co/t/x-y-axiis-using-only-field-data/202232 "2019-10-15T17:51:48Z")
I have a record that comes into elk every minute. It's a snapshot of job delay data on a mainframe. What I am trying to do is build a chart that shows each Job associated with its 'delay %'. The record is in XML format… --- ## [Ignore all files in s3 and read only current files from S3](https://discuss.elastic.co/t/ignore-all-files-in-s3-and-read-only-current-files-from-s3/202223)
**Author:** [@user2416](https://discuss.elastic.co/u/user2416)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 5:45pm UTC](https://discuss.elastic.co/t/ignore-all-files-in-s3-and-read-only-current-files-from-s3/202223 "2019-10-15T17:45:54Z")
how to ignore old files and push only latest log files from S3 using logstash. We are using logstash to push cloudtaril logs from s3 to elasticsearch. Cloudtrail logs are in below format /AWSLogs/CloudTrail/xxxAccount N… --- ## [Scripted Fields with multiple fields](https://discuss.elastic.co/t/scripted-fields-with-multiple-fields/203570)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 4:54pm UTC](https://discuss.elastic.co/t/scripted-fields-with-multiple-fields/203570 "2019-10-15T16:54:10Z")
Hi everyone! I have the following dataframe grouped by field num1: I'm trying to create a Scripted Field which can tell me which num1 has both suffices dn and mt. Is that possible? I mean can I work with two differe… --- ## [Reason to keep message field?](https://discuss.elastic.co/t/reason-to-keep-message-field/203665)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 4:51pm UTC](https://discuss.elastic.co/t/reason-to-keep-message-field/203665 "2019-10-15T16:51:39Z")
Collecting windows logs via winlogbeats, removing the message field via logstash before the output phase, so far my daily beats shards are 80% smaller. With all of the fields parsed and indexed correctly are there any r… --- ## [Embedded Kibana auto login](https://discuss.elastic.co/t/embedded-kibana-auto-login/203656)
**Author:** [@nickgregz](https://discuss.elastic.co/u/nickgregz)\ **Replies:** 4\ **Last updated:** [October 15, 2019, 4:43pm UTC](https://discuss.elastic.co/t/embedded-kibana-auto-login/203656 "2019-10-15T16:43:02Z")
There have been multiple threads on this topic but most of them seem to circle around the same answers with contradicting official statements. I want to auto-login users to a Kibana dashboard from a web app. I have enab… --- ## [Can Visualization Run Dev Tools Code](https://discuss.elastic.co/t/can-visualization-run-dev-tools-code/203248)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 3:49pm UTC](https://discuss.elastic.co/t/can-visualization-run-dev-tools-code/203248 "2019-10-15T15:49:35Z")
Hi, I have a dashboard that shows various counts and other metrics from many of our indexes that we use to transfer to a spreadsheet. We also want to include the size of the indexes in this dashboard for convenience so t… --- ## [Display username at homepage](https://discuss.elastic.co/t/display-username-at-homepage/203397)
**Author:** [@amanciao](https://discuss.elastic.co/u/amanciao)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 3:37pm UTC](https://discuss.elastic.co/t/display-username-at-homepage/203397 "2019-10-15T15:37:28Z")
How can I retreive the username using sentry in kibana 6.8.1 and display it on the home page. --- ## [Is refresh in Elasticsearch atomic?](https://discuss.elastic.co/t/is-refresh-in-elasticsearch-atomic/203647)
**Author:** [@drd](https://discuss.elastic.co/u/drd)\ **Replies:** 5\ **Last updated:** [October 15, 2019, 3:11pm UTC](https://discuss.elastic.co/t/is-refresh-in-elasticsearch-atomic/203647 "2019-10-15T15:11:43Z")
Scenario: I have my index refresh interval set to -1 (no automatic refresh). I add 20 documents to index using bulk with refresh=true. Are all documents visible at same time? The question is are Elasticsearch refreshes a… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1838) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1840)