# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1884 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1885 --- ## [Representing ratio between two indexes or visualization](https://discuss.elastic.co/t/representing-ratio-between-two-indexes-or-visualization/199422)
**Author:** [@Juan\_Francisco\_Verho](https://discuss.elastic.co/u/Juan_Francisco_Verho)\ **Replies:** 5\ **Last updated:** [September 20, 2019, 4:57pm UTC](https://discuss.elastic.co/t/representing-ratio-between-two-indexes-or-visualization/199422 "2019-09-20T16:57:53Z")
Let's suppose I have two indexes and one visualization for each one: IndexA with unique count of views per week IndexB with unique count of likes per week I would like to create a third visualization that is the ratio… --- ## [Elasticsearch Watcher - Publish notifications to Amazon SNS](https://discuss.elastic.co/t/elasticsearch-watcher-publish-notifications-to-amazon-sns/200297)
**Author:** [@chandra2037](https://discuss.elastic.co/u/chandra2037)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-watcher-publish-notifications-to-amazon-sns/200297 "2019-09-20T16:21:47Z")
Has anyone tried publishing notifications to Amazon SNS from Elasticsearch Advanced Watchers? Is it even possible? If it is possible, should we use webhook action? What are the things that need to be configured? Any he… --- ## [Elastic 7.1 weird index rate behavior](https://discuss.elastic.co/t/elastic-7-1-weird-index-rate-behavior/196498)
**Author:** [@Andrii](https://discuss.elastic.co/u/Andrii)\ **Replies:** 4\ **Last updated:** [September 20, 2019, 4:21pm UTC](https://discuss.elastic.co/t/elastic-7-1-weird-index-rate-behavior/196498 "2019-09-20T16:21:03Z")
I have a cluster configured in Kubernetes by Elastic Operator. all components of version 7.1. I'm sending logs from Kafka topic to Elastic with KafkaConnect And I faced with strange behavior. When I started KafkaConnect… --- ## [Few words in data stream rsults in data loss using logstash elastic search](https://discuss.elastic.co/t/few-words-in-data-stream-rsults-in-data-loss-using-logstash-elastic-search/200453)
**Author:** [@chintanvasani](https://discuss.elastic.co/u/chintanvasani)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 3:35pm UTC](https://discuss.elastic.co/t/few-words-in-data-stream-rsults-in-data-loss-using-logstash-elastic-search/200453 "2019-09-20T15:35:34Z")
Hi I am using logstash 5.5.0 and elastic search 5.5.0 for inserting the data from txt file. I have observed if there are few words like CONSOLIDATED,MANDATE,DATED,DATE,UPDATED,OUTDATED,UOI AS part of the field value th… --- ## [Netflow --setup to ES SSL not working](https://discuss.elastic.co/t/netflow-setup-to-es-ssl-not-working/200440)
**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 3:32pm UTC](https://discuss.elastic.co/t/netflow-setup-to-es-ssl-not-working/200440 "2019-09-20T15:32:20Z")
Here is my command line attempt to setup netflow in kibana: /usr/share/logstash/bin/logstash --modules netflow --setup -M "netflow.var.kibana.host=:5601" -M "netflow.var.kibana.username=elastic" -M "netflow.var.kibana.p… --- ## [Elastic cluster slow down](https://discuss.elastic.co/t/elastic-cluster-slow-down/200087)
**Author:** [@putharekulu](https://discuss.elastic.co/u/putharekulu)\ **Replies:** 5\ **Last updated:** [September 20, 2019, 3:21pm UTC](https://discuss.elastic.co/t/elastic-cluster-slow-down/200087 "2019-09-20T15:21:31Z")
Hi, I have a 6 node elastic cluster each with c5.4xlarge instances and writes to EBS volume with 5TB \[10000 IOPS\]. We only store 3 days worth of data and have a nightly job that terminates indexes older than 3 days.This… --- ## [Updating records and indices](https://discuss.elastic.co/t/updating-records-and-indices/200450)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 3:16pm UTC](https://discuss.elastic.co/t/updating-records-and-indices/200450 "2019-09-20T15:16:39Z")
Is there a way to update records in indices if they don't exist. Currently I've seen that values changed within an index get updated, however, if a record doesn't exist in a file, for example, the record is not removed. … --- ## [How to unhide redacted values using apm](https://discuss.elastic.co/t/how-to-unhide-redacted-values-using-apm/200438)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 7\ **Last updated:** [September 20, 2019, 3:14pm UTC](https://discuss.elastic.co/t/how-to-unhide-redacted-values-using-apm/200438 "2019-09-20T15:14:16Z")
Kibana version: 7.3.0 Elasticsearch version: 7.3.0 APM Server version: 7.3.0 APM Agent language and version: java 1.8.0 Browser version: safari 13.0.1 Original install method (e.g. download page, yum, deb, from sour… --- ## [Logstash 6.6.1: log showing “error:1e00007d:Cipher functions:OPENSSL\_internal:INVALID\_NONCE” on s390x](https://discuss.elastic.co/t/logstash-6-6-1-log-showing-errorcipher-functionsinvalid-nonce-on-s390x/200448)
**Author:** [@AnitaNayak](https://discuss.elastic.co/u/AnitaNayak)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 3:02pm UTC](https://discuss.elastic.co/t/logstash-6-6-1-log-showing-errorcipher-functionsinvalid-nonce-on-s390x/200448 "2019-09-20T15:02:57Z")
Hi, we are testing ELK 6.6.1 on s390x platform (Linux on Z). After starting the ELK 6.6.1 stack, everything seems working fine and we can see logs on Kibana UI, but logstash log has following entries from time to time: … --- ## [Elasticsearch es-spark too many request](https://discuss.elastic.co/t/elasticsearch-es-spark-too-many-request/199684)
**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\ **Replies:** 4\ **Last updated:** [September 20, 2019, 2:52pm UTC](https://discuss.elastic.co/t/elasticsearch-es-spark-too-many-request/199684 "2019-09-20T14:52:02Z")
I'm getting continuously org.apache.spark.SparkException: Job aborted due to stage failure: Task 0 in stage 109896.0 failed 4 times, most recent failure: Lost task 0.3 in stage 109896.0 (TID 248952, 10.244.8.28, executo… --- ## [\ what is wrong with my search?](https://discuss.elastic.co/t/what-is-wrong-with-my-search/200447)
**Author:** [@Mohammadamin\_gheibi](https://discuss.elastic.co/u/Mohammadamin_gheibi)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 2:40pm UTC](https://discuss.elastic.co/t/what-is-wrong-with-my-search/200447 "2019-09-20T14:40:17Z")
hello, everyone. I'm new in elastic search. I have a database with almost 100000 rows (each row is one product with name) I need to check if we have the same product in our database or not. I know that I indexed all row… --- ## [Kind of roll over index through index template?](https://discuss.elastic.co/t/kind-of-roll-over-index-through-index-template/200446)
**Author:** [@Uzo](https://discuss.elastic.co/u/Uzo)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 2:40pm UTC](https://discuss.elastic.co/t/kind-of-roll-over-index-through-index-template/200446 "2019-09-20T14:40:14Z")
Hello. I want to have some time based indices but with the particularity that some data could be indexed into the past. I don't see how to achieve this using roll over index. Would index template be a good solution ? I… --- ## [Can't yet decode flowset id error when collecting netflow](https://discuss.elastic.co/t/cant-yet-decode-flowset-id-error-when-collecting-netflow/200443)
**Author:** [@shazbot](https://discuss.elastic.co/u/shazbot)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 2:26pm UTC](https://discuss.elastic.co/t/cant-yet-decode-flowset-id-error-when-collecting-netflow/200443 "2019-09-20T14:26:08Z")
I am running netflow inputs with s3 and file outputs. my output is JSON. It's all working but I get these errors. I'm not sure how to handle this. There is a Catalyst 6807 with Sup2T and an ASA sending the flows. P… --- ## [\[WARN \]\[logstash.inputs.jdbc \] Exception when executing JDBC query {:exception=\>#\}](https://discuss.elastic.co/t/warn-logstash-inputs-jdbc-exception-when-executing-jdbc-query-exception-sequel-java-missing-converter-handling-for-full-class-name-org-postgresql-util-pgobject-simple-name-pgobject/200407)
**Author:** [@abu](https://discuss.elastic.co/u/abu)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 1:50pm UTC](https://discuss.elastic.co/t/warn-logstash-inputs-jdbc-exception-when-executing-jdbc-query-exception-sequel-java-missing-converter-handling-for-full-class-name-org-postgresql-util-pgobject-simple-name-pgobject/200407 "2019-09-20T13:50:23Z")
I want fetch data from postgresql DB that contain jsonb format input to logstash and output to elasticsearch but I get the warning message and didn't proceed next step --- ## [Persistent queue in Logstash 6.1 causes problems with cef parsing](https://discuss.elastic.co/t/persistent-queue-in-logstash-6-1-causes-problems-with-cef-parsing/200435)
**Author:** [@Mugen](https://discuss.elastic.co/u/Mugen)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 1:49pm UTC](https://discuss.elastic.co/t/persistent-queue-in-logstash-6-1-causes-problems-with-cef-parsing/200435 "2019-09-20T13:49:48Z")
After enabling the persistent queue some of our cef logs could no longer be parsed. The Logs semed to be split wrong. The config looks as follows: input { tcp { port =\> 5514 type =\> "forti\_log" codec… --- ## [Error parsing simple log](https://discuss.elastic.co/t/error-parsing-simple-log/200418)
**Author:** [@javisabalete](https://discuss.elastic.co/u/javisabalete)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 1:48pm UTC](https://discuss.elastic.co/t/error-parsing-simple-log/200418 "2019-09-20T13:48:06Z")
Hi! I'm working with logstash in order to parse auditd logs. I tested my patters in http://grokconstructor.appspot.com/do/match and https://grokdebug.herokuapp.com/ and seems working as expected. But.. it's not working… --- ## [How to create a consistent id, base on caseID string](https://discuss.elastic.co/t/how-to-create-a-consistent-id-base-on-caseid-string/200411)
**Author:** [@ErikWarming](https://discuss.elastic.co/u/ErikWarming)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 1:40pm UTC](https://discuss.elastic.co/t/how-to-create-a-consistent-id-base-on-caseid-string/200411 "2019-09-20T13:40:25Z")
I need advise: Everyday I create a log using logstash input-jdbc to run a SQL query on a readonly\_database. In the log I have a long alpha-numeric caseID and I need a human-friendly id number instead. And this id number… --- ## [What is the best and fatest way to insert json data into elasticsearch](https://discuss.elastic.co/t/what-is-the-best-and-fatest-way-to-insert-json-data-into-elasticsearch/200225)
**Author:** [@NAL](https://discuss.elastic.co/u/NAL)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 8:10am UTC](https://discuss.elastic.co/t/what-is-the-best-and-fatest-way-to-insert-json-data-into-elasticsearch/200225 "2019-09-20T08:10:05Z")
Hi, I have many json files (about 200 per day, each file contains more than 300 000 lines) that i need to insert into elasticsearch index. I'm looking for a way to say to elasticsearch to get each json file in a folder… --- ## [Azure snapshot missing required setting: azure.client.default.account](https://discuss.elastic.co/t/azure-snapshot-missing-required-setting-azure-client-default-account/200308)
**Author:** [@Marcus\_Simonsen](https://discuss.elastic.co/u/Marcus_Simonsen)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 1:28pm UTC](https://discuss.elastic.co/t/azure-snapshot-missing-required-setting-azure-client-default-account/200308 "2019-09-20T13:28:05Z")
Hello. I'm trying to provision azure snapshot repository as described here (not gcp as in example). https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-snapshot.html I have created the kubernetes secrets and veri… --- ## [JAVA Retrieve multimatch searchterm](https://discuss.elastic.co/t/java-retrieve-multimatch-searchterm/200425)
**Author:** [@NsrWissam](https://discuss.elastic.co/u/NsrWissam)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 1:04pm UTC](https://discuss.elastic.co/t/java-retrieve-multimatch-searchterm/200425 "2019-09-20T13:04:15Z")
Elasticsearch version: 7.3.0 Fresh install or upgraded from other version? Fresh Java Library: HighLevel I am trying to retrieve the original searchterm inside a complex query which is wrapped inside a MultiSearchRequ… --- ## [Index Joined sql data in Elasticsearch via logstash](https://discuss.elastic.co/t/index-joined-sql-data-in-elasticsearch-via-logstash/200421)
**Author:** [@sharko](https://discuss.elastic.co/u/sharko)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 12:49pm UTC](https://discuss.elastic.co/t/index-joined-sql-data-in-elasticsearch-via-logstash/200421 "2019-09-20T12:49:26Z")
Hello , I am trying to index already joined sql data into elastic search via logstash the data I read look like this {"family": "ABC", "person":{"name":"aaa","surname":"bbb"}} {"family": "ABC", "person":{"name":"ccc"… --- ## [Index not listed only when trying to add a map](https://discuss.elastic.co/t/index-not-listed-only-when-trying-to-add-a-map/200222)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 12:45pm UTC](https://discuss.elastic.co/t/index-not-listed-only-when-trying-to-add-a-map/200222 "2019-09-20T12:45:50Z")
Hello, Kibana has well identified my index (ims\_cyber\_logs). I can see the logs in Discover and build some classic visualization like bar, char, area.. But when I try to build a map, and specifically by selecting a so… --- ## [Connecting Elasticsearch from SQL Server](https://discuss.elastic.co/t/connecting-elasticsearch-from-sql-server/200286)
**Author:** [@lmariselvam](https://discuss.elastic.co/u/lmariselvam)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 12:43pm UTC](https://discuss.elastic.co/t/connecting-elasticsearch-from-sql-server/200286 "2019-09-20T12:43:09Z")
I would like to connect my Elasticsearch instance from Microsoft SQL Server to query the JSON data present in an index and process the queried data with Native JSON functions available in SQL Server. Is there any option… --- ## [Logstash: Как заменить значение полей на основании содержимого](https://discuss.elastic.co/t/logstash/200204)
**Author:** [@Igor\_Belyakov](https://discuss.elastic.co/u/Igor_Belyakov)\ **Replies:** 3\ **Last updated:** [September 20, 2019, 11:56am UTC](https://discuss.elastic.co/t/logstash/200204 "2019-09-20T11:56:55Z")
Добрый день. Столкнулся с такой проблемой. У меня в логах вместо источников событий указываются индексы этих источников. Так как перечень источников конечен, то нет большой проблемы составить таблицу сопоставлений индек… --- ## [I have java8 in my server which version of elk supported by java as current version is not supported by java8](https://discuss.elastic.co/t/i-have-java8-in-my-server-which-version-of-elk-supported-by-java-as-current-version-is-not-supported-by-java8/200404)
**Author:** [@Niladri\_Dey](https://discuss.elastic.co/u/Niladri_Dey)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 11:38am UTC](https://discuss.elastic.co/t/i-have-java8-in-my-server-which-version-of-elk-supported-by-java-as-current-version-is-not-supported-by-java8/200404 "2019-09-20T11:38:39Z")
I have java8 in my server which version of elk supported by java as current version is not supported by java8 --- ## [About elasticsearch returned innerhits for a query](https://discuss.elastic.co/t/about-elasticsearch-returned-innerhits-for-a-query/199636)
**Author:** [@jyothsna](https://discuss.elastic.co/u/jyothsna)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 10:47am UTC](https://discuss.elastic.co/t/about-elasticsearch-returned-innerhits-for-a-query/199636 "2019-09-20T10:47:18Z")
I have a query which has 2 nested fields.After applying this query for an index documents the 2 fields are matched for a document and ES returned that document along with innerhits. But the innerhits contains only one fi… --- ## [Issue When Upgrading Elasticsearch 5.4.0 to 5.6.16](https://discuss.elastic.co/t/issue-when-upgrading-elasticsearch-5-4-0-to-5-6-16/200398)
**Author:** [@Fin4l](https://discuss.elastic.co/u/Fin4l)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 10:31am UTC](https://discuss.elastic.co/t/issue-when-upgrading-elasticsearch-5-4-0-to-5-6-16/200398 "2019-09-20T10:31:37Z")
Hi all, I am trying to upgrade Elasticsearch from 5.4.0 to 5.6.16 and after that upgrade to 6.x and 7.x Currently i have problem in the start pf upgrade Stop elasticsearch node 1/5 and i have Preparing... … --- ## [Cluster with 2 nodes changing shard type](https://discuss.elastic.co/t/cluster-with-2-nodes-changing-shard-type/200263)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 11\ **Last updated:** [September 20, 2019, 10:30am UTC](https://discuss.elastic.co/t/cluster-with-2-nodes-changing-shard-type/200263 "2019-09-20T10:30:12Z")
Hi, currently I have a cluster with just 2 nodes. every index is divided just in 1 shard (indices are very very small) and 1 replica. I know that a cluster with 2 nodes has several limits but this is the state of art. … --- ## [How to use AND operator inside Match](https://discuss.elastic.co/t/how-to-use-and-operator-inside-match/199507)
**Author:** [@Fosiul\_Alam](https://discuss.elastic.co/u/Fosiul_Alam)\ **Replies:** 8\ **Last updated:** [September 20, 2019, 10:07am UTC](https://discuss.elastic.co/t/how-to-use-and-operator-inside-match/199507 "2019-09-20T10:07:57Z")
Hi I am using dev Tools , Bellow Query works fine in Kibana Discover log.file.path:\*MY.log\* AND "\[COMMAND:HEARTBEAT\]" AND "\[CHARGING:0\]" but when i am doing the same in Dev tools, its only taking the HEARTBEAT bu… --- ## [Pdf export kibana](https://discuss.elastic.co/t/pdf-export-kibana/200385)
**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 9:52am UTC](https://discuss.elastic.co/t/pdf-export-kibana/200385 "2019-09-20T09:52:18Z")
Is there a way to export pdf in basic license ? [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1883) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1885)