# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1862

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1863

---

## [Where I install filebeat, if I want Cisco ASA log](https://discuss.elastic.co/t/where-i-install-filebeat-if-i-want-cisco-asa-log/201942)

<div class="topic-metadata">

**Author:** [@lokmanopt](https://discuss.elastic.co/u/lokmanopt)\
**Replies:** 1\
**Last updated:** [October 2, 2019, 12:40pm UTC](https://discuss.elastic.co/t/where-i-install-filebeat-if-i-want-cisco-asa-log/201942 "2019-10-02T12:40:09Z")

</div>

Dear Experts, I can't understand where I can install filebeat if I want to Cisco ASA log or Cisco router log. Please need help filebeat experts. Regards Lokman Hakim

---

## [Unable to ingest CSV files since Logstash 7.3](https://discuss.elastic.co/t/unable-to-ingest-csv-files-since-logstash-7-3/201895)

<div class="topic-metadata">

**Author:** [@vincent2mots](https://discuss.elastic.co/u/vincent2mots)\
**Replies:** 2\
**Last updated:** [October 2, 2019, 12:38pm UTC](https://discuss.elastic.co/t/unable-to-ingest-csv-files-since-logstash-7-3/201895 "2019-10-02T12:38:48Z")

</div>

Hi experts, I'm struggling with Logstash since the 7.3 release version. Here my logstash configuration file : input { file { path =\> \["C:\\samples\\sample.csv"\] start\_position =\> "beginning" sincedb\_path =\>…

---

## [Inomplete populate](https://discuss.elastic.co/t/inomplete-populate/201748)

<div class="topic-metadata">

**Author:** [@CHANGUEL\_Sami](https://discuss.elastic.co/u/CHANGUEL_Sami)\
**Replies:** 3\
**Last updated:** [October 2, 2019, 12:35pm UTC](https://discuss.elastic.co/t/inomplete-populate/201748 "2019-10-02T12:35:41Z")

</div>

Hi, I'am a beginner, I'm using ES 6.1.1 in a Symfony project (via fos\_elastica bundle) When I run populate command the progress bar stops at 75% : root@ce30fac77888/app# php bin/console fos:elastica:populate Resetting…

---

## [Create custom pattern](https://discuss.elastic.co/t/create-custom-pattern/201948)

<div class="topic-metadata">

**Author:** [@kisuke](https://discuss.elastic.co/u/kisuke)\
**Replies:** 0\
**Last updated:** [October 2, 2019, 12:09pm UTC](https://discuss.elastic.co/t/create-custom-pattern/201948 "2019-10-02T12:09:04Z")

</div>

Hello, I try to create a custom pattern to include theses caracters \[;\] But I don't understand how can I include it in one custom pattern. Can you help me ?

---

## [Json parse exception with status 500 post upgrade to 7.4.0](https://discuss.elastic.co/t/json-parse-exception-with-status-500-post-upgrade-to-7-4-0/201936)

<div class="topic-metadata">

**Author:** [@starrynight](https://discuss.elastic.co/u/starrynight)\
**Replies:** 2\
**Last updated:** [October 2, 2019, 12:05pm UTC](https://discuss.elastic.co/t/json-parse-exception-with-status-500-post-upgrade-to-7-4-0/201936 "2019-10-02T12:05:59Z")

</div>

I've upgraded from 7.3.2 to 7.4.0 and in attempting to follow the rolling upgrades document -- I've issued a: \[root@host elasticsearch\]# curl -X PUT -u elastic "ipaddy:9200/\_cluster/settings?pretty" -H 'Content-Type: ap…

---

## [Create multiple indexs with multiple input in logstash](https://discuss.elastic.co/t/create-multiple-indexs-with-multiple-input-in-logstash/201779)

<div class="topic-metadata">

**Author:** [@Asmaa\_Sarih](https://discuss.elastic.co/u/Asmaa_Sarih)\
**Replies:** 13\
**Last updated:** [October 2, 2019, 11:52am UTC](https://discuss.elastic.co/t/create-multiple-indexs-with-multiple-input-in-logstash/201779 "2019-10-02T11:52:33Z")

</div>

Hi Team, Can anyone help me in confugiring multiple indexes from multiple input with logstash, I am unable to create multiple index in elastic (with multiple if conditions) . One index is getting created but not both, …

---

## [How to get more hosts in SIEM (Auditbeat)](https://discuss.elastic.co/t/how-to-get-more-hosts-in-siem-auditbeat/201904)

<div class="topic-metadata">

**Author:** [@pbona](https://discuss.elastic.co/u/pbona)\
**Replies:** 1\
**Last updated:** [October 2, 2019, 11:45am UTC](https://discuss.elastic.co/t/how-to-get-more-hosts-in-siem-auditbeat/201904 "2019-10-02T11:45:39Z")

</div>

---

## [HTTP500 on logging into Kibana](https://discuss.elastic.co/t/http500-on-logging-into-kibana/201933)

<div class="topic-metadata">

**Author:** [@ben.west](https://discuss.elastic.co/u/ben.west)\
**Replies:** 1\
**Last updated:** [October 2, 2019, 10:39am UTC](https://discuss.elastic.co/t/http500-on-logging-into-kibana/201933 "2019-10-02T10:39:48Z")

</div>

Hello all, I have just come up against an issue with logging into Kibana following a rebuild of our new PoC 7.2.0 stack. I have done some basic investigation but the errors in the logs do not appear to be very helpful …

---

## [Syslog Cisco "illegal\_argument\_exception"](https://discuss.elastic.co/t/syslog-cisco-illegal-argument-exception/201939)

<div class="topic-metadata">

**Author:** [@DorianL](https://discuss.elastic.co/u/DorianL)\
**Replies:** 0\
**Last updated:** [October 2, 2019, 10:33am UTC](https://discuss.elastic.co/t/syslog-cisco-illegal-argument-exception/201939 "2019-10-02T10:33:08Z")

</div>

Hello, I want to export logs from my cisco router via logstash. Here is the filter that I put in place and which brings out the logs correctly: the filter ########################### filter { grok { patterns\_d…

---

## [Limit access to Dashboard with Basic license](https://discuss.elastic.co/t/limit-access-to-dashboard-with-basic-license/201937)

<div class="topic-metadata">

**Author:** [@andarius40](https://discuss.elastic.co/u/andarius40)\
**Replies:** 1\
**Last updated:** [October 2, 2019, 10:28am UTC](https://discuss.elastic.co/t/limit-access-to-dashboard-with-basic-license/201937 "2019-10-02T10:28:46Z")

</div>

Good afternoon, I have create 2 Dashboard. For some Dashboard I want limit access with a password, that's possible with a basic license ? Thank you for your help. Best Regards Best regards

---

## [How to migrate index into other machine](https://discuss.elastic.co/t/how-to-migrate-index-into-other-machine/201922)

<div class="topic-metadata">

**Author:** [@daniel.velasco](https://discuss.elastic.co/u/daniel.velasco)\
**Replies:** 1\
**Last updated:** [October 2, 2019, 10:16am UTC](https://discuss.elastic.co/t/how-to-migrate-index-into-other-machine/201922 "2019-10-02T10:16:51Z")

</div>

Hi. I have two machines, in the first I have indexes that I want migrate them to the second machine, but in the second machine I have some indexes that I don't want lose them. I had proved to copy the indices folder bu…

---

## [Logstash exec input on cluster](https://discuss.elastic.co/t/logstash-exec-input-on-cluster/201935)

<div class="topic-metadata">

**Author:** [@Vijayakumar\_Kannan](https://discuss.elastic.co/u/Vijayakumar_Kannan)\
**Replies:** 0\
**Last updated:** [October 2, 2019, 10:02am UTC](https://discuss.elastic.co/t/logstash-exec-input-on-cluster/201935 "2019-10-02T10:02:18Z")

</div>

Hi, I want to run command "ssh ip -c ls" every 1 hour in logstash exec input plugin. If i have 3 logstash nodes in cluster every logstash nodes will execute this ? if yes how do i set only one logstash node execute the …

---

## [How to add characters to field containing the value to be compared for a match in translate pluging](https://discuss.elastic.co/t/how-to-add-characters-to-field-containing-the-value-to-be-compared-for-a-match-in-translate-pluging/201927)

<div class="topic-metadata">

**Author:** [@namali](https://discuss.elastic.co/u/namali)\
**Replies:** 0\
**Last updated:** [October 2, 2019, 9:43am UTC](https://discuss.elastic.co/t/how-to-add-characters-to-field-containing-the-value-to-be-compared-for-a-match-in-translate-pluging/201927 "2019-10-02T09:43:09Z")

</div>

common filed of csv1 and csv2 is citycode, but citycode in csv2 file has additional character 'CV' in this scenario how to read csv2 from translate pluging. and also read csv3 to get out put index. input csv files csv1 …

---

## [Elasticsearch version values](https://discuss.elastic.co/t/elasticsearch-version-values/201899)

<div class="topic-metadata">

**Author:** [@tomas321](https://discuss.elastic.co/u/tomas321)\
**Replies:** 1\
**Last updated:** [October 2, 2019, 9:06am UTC](https://discuss.elastic.co/t/elasticsearch-version-values/201899 "2019-10-02T09:06:59Z")

</div>

Hi, I'm familiar with minimum\_index\_compatibility\_version and hope it indicates the minimum version required for index compatibility (e.g. reindex). But I'm not sure what minimum\_wire\_compatibility\_version means.

---

## [Search for a parent or child](https://discuss.elastic.co/t/search-for-a-parent-or-child/201914)

<div class="topic-metadata">

**Author:** [@NEkman](https://discuss.elastic.co/u/NEkman)\
**Replies:** 0\
**Last updated:** [October 2, 2019, 8:58am UTC](https://discuss.elastic.co/t/search-for-a-parent-or-child/201914 "2019-10-02T08:58:28Z")

</div>

We are investigating splitting nested documents up into parent/child documents. I'm wondering, how can we query/search for a document of a specific type? E.g. we index questions and answers, and want to be able to effic…

---

## [How to remove decommissioned node from kibana](https://discuss.elastic.co/t/how-to-remove-decommissioned-node-from-kibana/201910)

<div class="topic-metadata">

**Author:** [@chanakagl](https://discuss.elastic.co/u/chanakagl)\
**Replies:** 0\
**Last updated:** [October 2, 2019, 8:49am UTC](https://discuss.elastic.co/t/how-to-remove-decommissioned-node-from-kibana/201910 "2019-10-02T08:49:50Z")

</div>

Hi, I have removed bad coordinator node from our cluster but it's still appearing in Kibana monitoring dashboard. This is a AWS EC2 instance which i have already stopped. Do I need to deleted the node from monitoring in…

---

## [Where can I find all release note from version to version?](https://discuss.elastic.co/t/where-can-i-find-all-release-note-from-version-to-version/201887)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 1\
**Last updated:** [October 2, 2019, 8:49am UTC](https://discuss.elastic.co/t/where-can-i-find-all-release-note-from-version-to-version/201887 "2019-10-02T08:49:15Z")

</div>

Hello all, My ELK stack is currently 6.5.4, I would like to see the changes from 6.5.4 all the way to 7.4.0 Where can I find the full details of the updates? I would like to do the updates after reading the changes. …

---

## [Move documents from one index to another](https://discuss.elastic.co/t/move-documents-from-one-index-to-another/201172)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 5\
**Last updated:** [October 2, 2019, 8:43am UTC](https://discuss.elastic.co/t/move-documents-from-one-index-to-another/201172 "2019-10-02T08:43:37Z")

</div>

Hi guys, I have the index where I store data. My question is whether I can restore the data that meet some conditions to a new index by using script reindexing so I can visualize the data properly. Basically I'm thinki…

---

## [Setting a default value for missing fields during indexing or reindexing](https://discuss.elastic.co/t/setting-a-default-value-for-missing-fields-during-indexing-or-reindexing/201908)

<div class="topic-metadata">

**Author:** [@Rahul\_Choudhury](https://discuss.elastic.co/u/Rahul_Choudhury)\
**Replies:** 0\
**Last updated:** [October 2, 2019, 8:43am UTC](https://discuss.elastic.co/t/setting-a-default-value-for-missing-fields-during-indexing-or-reindexing/201908 "2019-10-02T08:43:34Z")

</div>

I am trying to create an elastic search mapping where during indexing of data if a field is missing it should add some default value. PUT my\_index { "mappings": { "\_doc": { "properties": { "status\_c…

---

## [Visualizing the percentages of each count range](https://discuss.elastic.co/t/visualizing-the-percentages-of-each-count-range/201036)

<div class="topic-metadata">

**Author:** [@WishTripES](https://discuss.elastic.co/u/WishTripES)\
**Replies:** 3\
**Last updated:** [October 2, 2019, 8:25am UTC](https://discuss.elastic.co/t/visualizing-the-percentages-of-each-count-range/201036 "2019-10-02T08:25:51Z")

</div>

Hi We have an index with the following fields: UserID message Date/time of message What we want is to answer the question "what percentage of users posted only 1 message, 2-5 messages, 6-10 messages, 11-100 messages …

---

## [New opensource tool for preventing misconfiguration in Logstash](https://discuss.elastic.co/t/new-opensource-tool-for-preventing-misconfiguration-in-logstash/201902)

<div class="topic-metadata">

**Author:** [@Mickeyempow](https://discuss.elastic.co/u/Mickeyempow)\
**Replies:** 0\
**Last updated:** [October 2, 2019, 7:11am UTC](https://discuss.elastic.co/t/new-opensource-tool-for-preventing-misconfiguration-in-logstash/201902 "2019-10-02T07:11:32Z")

</div>

Hi All - we at empow developed a new opensource tool to prevent misconfiguration in Logstash - here's an article on how to use is: https://blog.empow.co/preventing-logstash-misconfiguration And here's the link to the Gi…

---

## [Setting Heapsize for Java](https://discuss.elastic.co/t/setting-heapsize-for-java/201898)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 2\
**Last updated:** [October 2, 2019, 7:40am UTC](https://discuss.elastic.co/t/setting-heapsize-for-java/201898 "2019-10-02T07:40:01Z")

</div>

Hi all, I have encounter this issue "Error occurred during initialization of VM, Initial heap size set to a larger value than the maximum heap size". With the InitialHeapSize to be so huge, does that means I have to se…

---

## [Logstash configuration issue(message=\>"Could not execute action)](https://discuss.elastic.co/t/logstash-configuration-issue-message-could-not-execute-action/201900)

<div class="topic-metadata">

**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\
**Replies:** 0\
**Last updated:** [October 2, 2019, 7:04am UTC](https://discuss.elastic.co/t/logstash-configuration-issue-message-could-not-execute-action/201900 "2019-10-02T07:04:50Z")

</div>

Logstash: 7.3.0 Elastic: 7.3.0 filebeat: 7.3.0 i am configuring logstash on one of the Redhat machine to forward nginx logs, getting below issue, can someone please suggest me, Thanks. nginx.conf input { beats { …

---

## [Scripted fields performace](https://discuss.elastic.co/t/scripted-fields-performace/201528)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 2\
**Last updated:** [October 2, 2019, 6:56am UTC](https://discuss.elastic.co/t/scripted-fields-performace/201528 "2019-10-02T06:56:13Z")

</div>

Hi, We had lot of fields in our elasticsearch documets due to which we had mapping explosion. To solve this recently we implemented flattened object which helped us to reduce the number of fields drastically. post this…

---

## [\_field\_caps API takes long time (more than a minute) to return results causing kibana to not be able to refresh index pattern](https://discuss.elastic.co/t/field-caps-api-takes-long-time-more-than-a-minute-to-return-results-causing-kibana-to-not-be-able-to-refresh-index-pattern/198933)

<div class="topic-metadata">

**Author:** [@nikhil-bhat](https://discuss.elastic.co/u/nikhil-bhat)\
**Replies:** 5\
**Last updated:** [September 30, 2019, 4:44pm UTC](https://discuss.elastic.co/t/field-caps-api-takes-long-time-more-than-a-minute-to-return-results-causing-kibana-to-not-be-able-to-refresh-index-pattern/198933 "2019-09-30T16:44:13Z")

</div>

Elasticsearch version 6.7.2 JVM version Java HotSpot(TM) 64-Bit Server VM (1.8.0\_172): OS version Linux field\_caps API takes long time (more than a minute) to return results : Steps to reproduce : 1.) Index patte…

---

## [Filebeat перестаёт отправлять логи](https://discuss.elastic.co/t/filebeat/200967)

<div class="topic-metadata">

**Author:** [@Axizdkr](https://discuss.elastic.co/u/Axizdkr)\
**Replies:** 28\
**Last updated:** [October 2, 2019, 5:15am UTC](https://discuss.elastic.co/t/filebeat/200967 "2019-10-02T05:15:12Z")

</div>

День добрый. попробую сначала на русском. У меня есть папка в которой хранится большое количетсов фалйов (минимум 300 тысяч). Для этих файлов я сделал отдельный модуль, все записи через этот модуль отправляются на пря…

---

## [Search after in spring](https://discuss.elastic.co/t/search-after-in-spring/201767)

<div class="topic-metadata">

**Author:** [@luongky06](https://discuss.elastic.co/u/luongky06)\
**Replies:** 2\
**Last updated:** [October 2, 2019, 4:44am UTC](https://discuss.elastic.co/t/search-after-in-spring/201767 "2019-10-02T04:44:25Z")

</div>

Hi all, I'm try to search in ES via spring boot, and I have a stuck with search after . So I have a search api look like below: GET /domain/\_search { "size": 1000, "query": { "bool": { "must": \[ {"match": { "location"…

---

## [Kibana server not ready -https connection](https://discuss.elastic.co/t/kibana-server-not-ready-https-connection/201781)

<div class="topic-metadata">

**Author:** [@Vikas\_Yadav](https://discuss.elastic.co/u/Vikas_Yadav)\
**Replies:** 1\
**Last updated:** [October 2, 2019, 4:11am UTC](https://discuss.elastic.co/t/kibana-server-not-ready-https-connection/201781 "2019-10-02T04:11:17Z")

</div>

changed my kibana.yml file as server.ssl.enabled: true server.ssl.certificate: /usr/share/kibana/kibana-server/kibana-server.crt server.ssl.key: /usr/share/kibana/kibana-server/kibana-server.key for https connection …

---

## [statusCode":429](https://discuss.elastic.co/t/statuscode-429/201764)

<div class="topic-metadata">

**Author:** [@rizkan\_abadi](https://discuss.elastic.co/u/rizkan_abadi)\
**Replies:** 1\
**Last updated:** [October 2, 2019, 3:42am UTC](https://discuss.elastic.co/t/statuscode-429/201764 "2019-10-02T03:42:45Z")

</div>

hi, how fix this error {"statusCode":429,"error":"Too Many Requests","message":"\[circuit\_breaking\_exception\] \[parent\] Data too large, data for \[\<http\_request\>\] would be \[4157637528/3.8gb\], which is larger than the limit…

---

## [Aggregate filter not catching up: input start\_position = "beginning"](https://discuss.elastic.co/t/aggregate-filter-not-catching-up-input-start-position-beginning/201428)

<div class="topic-metadata">

**Author:** [@Paul\_Ainslie](https://discuss.elastic.co/u/Paul_Ainslie)\
**Replies:** 5\
**Last updated:** [October 2, 2019, 3:14am UTC](https://discuss.elastic.co/t/aggregate-filter-not-catching-up-input-start-position-beginning/201428 "2019-10-02T03:14:38Z")

</div>

One of the things I love about logstash is the "sincedb" database which tracks current position and — if interrupted — remembers the location of where it left off. So, if Logstash is down for, say 4 hours, once restarte…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1861)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1863)
