# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1895 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1896 --- ## [Hosts tab in SIEM and WEF](https://discuss.elastic.co/t/hosts-tab-in-siem-and-wef/190162)
**Author:** [@smerzlyakov](https://discuss.elastic.co/u/smerzlyakov)\ **Replies:** 16\ **Last updated:** [September 16, 2019, 2:25pm UTC](https://discuss.elastic.co/t/hosts-tab-in-siem-and-wef/190162 "2019-09-16T14:25:58Z")
There is Hosts tab in SIEM. I think nobody in Enterprise uses Winlogbeat on every Windows hosts. It is standard to use collector for logs and send Logs using Windows Event Forwarding on it. So, in field Host it will be n… --- ## [How to change beat output timestamp include timezone info](https://discuss.elastic.co/t/how-to-change-beat-output-timestamp-include-timezone-info/199645)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 3\ **Last updated:** [September 16, 2019, 2:20pm UTC](https://discuss.elastic.co/t/how-to-change-beat-output-timestamp-include-timezone-info/199645 "2019-09-16T14:20:02Z")
I think by default beat timestamp output is UTC time. Is there a way to change time to local time in all the beats ? I tried add\_locale, but it didn't work --- ## [Ingest processor vs token filter & char filter](https://discuss.elastic.co/t/ingest-processor-vs-token-filter-char-filter/199594)
**Author:** [@skowron-line](https://discuss.elastic.co/u/skowron-line)\ **Replies:** 1\ **Last updated:** [September 16, 2019, 1:48pm UTC](https://discuss.elastic.co/t/ingest-processor-vs-token-filter-char-filter/199594 "2019-09-16T13:48:38Z")
Hi I want to ask about difference of token filter and ingest processor for lowercase and char filter html strip and ingest processor html strip, any example when use which. --- ## [Updating date fields not working](https://discuss.elastic.co/t/updating-date-fields-not-working/199492)
**Author:** [@ebdavison](https://discuss.elastic.co/u/ebdavison)\ **Replies:** 3\ **Last updated:** [September 16, 2019, 1:40pm UTC](https://discuss.elastic.co/t/updating-date-fields-not-working/199492 "2019-09-16T13:40:19Z")
I have a document that I am trying to update and it contains a date. If the source gets updated (in a RDBMS) then I am trying to update the document in elasticsearch. The document, ID 1, is like this: { '@… --- ## [Logstash update my existing Elasticsearch index data](https://discuss.elastic.co/t/logstash-update-my-existing-elasticsearch-index-data/199649)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 0\ **Last updated:** [September 16, 2019, 11:31am UTC](https://discuss.elastic.co/t/logstash-update-my-existing-elasticsearch-index-data/199649 "2019-09-16T11:31:04Z")
I am trying to update an existing data in my Elasticsearch Index. Im using the below Logstash configuration: input { jdbc { jdbc\_connection\_string =\> "jdbc:sqlserver://DB01:1433;databasename=mydb;integratedS… --- ## [Looking for guidance setting up elastic search with Invision Community](https://discuss.elastic.co/t/looking-for-guidance-setting-up-elastic-search-with-invision-community/197929)
**Author:** [@makeswithit](https://discuss.elastic.co/u/makeswithit)\ **Replies:** 3\ **Last updated:** [September 16, 2019, 1:26pm UTC](https://discuss.elastic.co/t/looking-for-guidance-setting-up-elastic-search-with-invision-community/197929 "2019-09-16T13:26:25Z")
Has anyone set up the cloud elastic search with Invision Community? If so, I don't understand what to add in the "Elasticsearch Server" field. Can someone clarify that for me? --- ## [Issues with JMeter and Elasticsearch+Kibana](https://discuss.elastic.co/t/issues-with-jmeter-and-elasticsearch-kibana/199667)
**Author:** [@DarthRKO89](https://discuss.elastic.co/u/DarthRKO89)\ **Replies:** 0\ **Last updated:** [September 16, 2019, 1:13pm UTC](https://discuss.elastic.co/t/issues-with-jmeter-and-elasticsearch-kibana/199667 "2019-09-16T13:13:05Z")
Hello there guys, I began to work with elastic stack since last week and I encountered a lot of problems but that's probably because I'm a newbie with those kind of tools. I need to configure ElasticSearch and Kibana t… --- ## [Filtering data based on date using data frames](https://discuss.elastic.co/t/filtering-data-based-on-date-using-data-frames/199665)
**Author:** [@cvaibh92](https://discuss.elastic.co/u/cvaibh92)\ **Replies:** 0\ **Last updated:** [September 16, 2019, 1:07pm UTC](https://discuss.elastic.co/t/filtering-data-based-on-date-using-data-frames/199665 "2019-09-16T13:07:07Z")
Hi, We have a use case where we need to support sorting and pagination on aggregated data and it should be exact(not approximate).We tried different approaches but could not achieve what we wanted. "Collapse" helped i… --- ## [Logstash not working if I provide http.host as IP address of my system](https://discuss.elastic.co/t/logstash-not-working-if-i-provide-http-host-as-ip-address-of-my-system/199663)
**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\ **Replies:** 0\ **Last updated:** [September 16, 2019, 12:54pm UTC](https://discuss.elastic.co/t/logstash-not-working-if-i-provide-http-host-as-ip-address-of-my-system/199663 "2019-09-16T12:54:20Z")
Hi All, Logstash is not working if I provide http.host as my system IP address in logstash.yml file. Logstash is working well if I provide my system name in logstash.yml file. What changes I need to do to make logstas… --- ## [Where do I put my search template file?](https://discuss.elastic.co/t/where-do-i-put-my-search-template-file/199659)
**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\ **Replies:** 0\ **Last updated:** [September 16, 2019, 12:26pm UTC](https://discuss.elastic.co/t/where-do-i-put-my-search-template-file/199659 "2019-09-16T12:26:33Z")
I am trying to connect my elasticsearch cluster from react front end. where do I store the search template. and how would it be read. Thanks --- ## [Elasticsearch node fails after kibana startup .action.search.SearchPhaseExecutionException: all shards failed](https://discuss.elastic.co/t/elasticsearch-node-fails-after-kibana-startup-action-search-searchphaseexecutionexception-all-shards-failed/199658)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 0\ **Last updated:** [September 16, 2019, 12:26pm UTC](https://discuss.elastic.co/t/elasticsearch-node-fails-after-kibana-startup-action-search-searchphaseexecutionexception-all-shards-failed/199658 "2019-09-16T12:26:33Z")
I have 2 nodes { "cluster\_name" : "elasticsearch", "status" : "green", "timed\_out" : false, "number\_of\_nodes" : 2, "number\_of\_data\_nodes" : 2, "active\_primary\_shards" : 3, "active\_shards" : 6, "relocatin… --- ## [How do I connect ELK stack to Sentilo platform](https://discuss.elastic.co/t/how-do-i-connect-elk-stack-to-sentilo-platform/199651)
**Author:** [@Jarlies](https://discuss.elastic.co/u/Jarlies)\ **Replies:** 0\ **Last updated:** [September 16, 2019, 11:53am UTC](https://discuss.elastic.co/t/how-do-i-connect-elk-stack-to-sentilo-platform/199651 "2019-09-16T11:53:40Z")
Greetings, I am currently connecting sentilo to elk stack and documentation on sentilo site does not cover the elk stack side of configuration, modification etc. --- ## [ES Cluster Capacity Planning - Storage Limit](https://discuss.elastic.co/t/es-cluster-capacity-planning-storage-limit/198915)
**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\ **Replies:** 2\ **Last updated:** [September 16, 2019, 11:11am UTC](https://discuss.elastic.co/t/es-cluster-capacity-planning-storage-limit/198915 "2019-09-16T11:11:55Z")
In elasticsearch documentation for capacity planning, I read Per GB Heap will handle the 20 shards, with avg shard size of 20 - 40 GB. In ES Cluster it has 10 data nodes with the following config, 64 GB Heap (30 GB hea… --- ## [Is it possible to disable alias wildcarding for specific index?](https://discuss.elastic.co/t/is-it-possible-to-disable-alias-wildcarding-for-specific-index/199638)
**Author:** [@Illidan](https://discuss.elastic.co/u/Illidan)\ **Replies:** 0\ **Last updated:** [September 16, 2019, 10:58am UTC](https://discuss.elastic.co/t/is-it-possible-to-disable-alias-wildcarding-for-specific-index/199638 "2019-09-16T10:58:46Z")
Our multitenancy model based on index aliases (e.g. one index for all, alias per tenant). We noticed that using \* as alias retrieves data from whole index (e.g. effectively ignoring tenant boundaries). Is it possible, … --- ## [Not able to index content of images](https://discuss.elastic.co/t/not-able-to-index-content-of-images/199575)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 6\ **Last updated:** [September 16, 2019, 10:53am UTC](https://discuss.elastic.co/t/not-able-to-index-content-of-images/199575 "2019-09-16T10:53:29Z")
Hello @dadoonet, When i am trying to run FSCrawler job for Images, It is showing me below error: 07:05:40,428 DEBUG \[f.p.e.c.f.t.TikaInstance\] OCR is activated. 07:05:40,428 DEBUG \[f.p.e.c.f.t.TikaInstance\] But Tessera… --- ## [How to change ElasticSearch response to Nested Values](https://discuss.elastic.co/t/how-to-change-elasticsearch-response-to-nested-values/199633)
**Author:** [@May](https://discuss.elastic.co/u/May)\ **Replies:** 0\ **Last updated:** [September 16, 2019, 10:33am UTC](https://discuss.elastic.co/t/how-to-change-elasticsearch-response-to-nested-values/199633 "2019-09-16T10:33:33Z")
Hi there, I am using ES as the backend data warehouse for my web app. I want to have a dropdown list that updated based on what is previously selected like this : http://benalexkeen.com/auto-updating-dropdown-fields-in-j… --- ## [Duplicate value in a fileds](https://discuss.elastic.co/t/duplicate-value-in-a-fileds/198936)
**Author:** [@Reb](https://discuss.elastic.co/u/Reb)\ **Replies:** 7\ **Last updated:** [September 16, 2019, 10:30am UTC](https://discuss.elastic.co/t/duplicate-value-in-a-fileds/198936 "2019-09-16T10:30:09Z")
due to a bad log treatment, the value of some fields is duplicated like : fields\_duration : 373, 373. How can i use query (update\_by\_query) to keep just the first value ? Thank you --- ## [Documents missing in index | Elastic 2.3](https://discuss.elastic.co/t/documents-missing-in-index-elastic-2-3/199264)
**Author:** [@Ravi\_Manik](https://discuss.elastic.co/u/Ravi_Manik)\ **Replies:** 2\ **Last updated:** [September 16, 2019, 9:58am UTC](https://discuss.elastic.co/t/documents-missing-in-index-elastic-2-3/199264 "2019-09-16T09:58:18Z")
Hi, I'm trying to find the root cause of an issue in my elasticsearch cluster. Recently my Elasticsearch went Red and from that day onwards I see that there are around 100M records missing from the index. I don't find a… --- ## [A question about search threadpool size](https://discuss.elastic.co/t/a-question-about-search-threadpool-size/197745)
**Author:** [@rpgmakervx](https://discuss.elastic.co/u/rpgmakervx)\ **Replies:** 10\ **Last updated:** [September 16, 2019, 9:52am UTC](https://discuss.elastic.co/t/a-question-about-search-threadpool-size/197745 "2019-09-16T09:52:12Z")
As org.elasticsearch.threadpool. ExecutorBuilder#applyHardSizeLimit method shown that write threadpool holds a controllable core thread count, default could not over 32. but search will return an unlimit max size … --- ## [How to find the filesize of a file via logstash](https://discuss.elastic.co/t/how-to-find-the-filesize-of-a-file-via-logstash/199613)
**Author:** [@basha5](https://discuss.elastic.co/u/basha5)\ **Replies:** 1\ **Last updated:** [September 16, 2019, 9:40am UTC](https://discuss.elastic.co/t/how-to-find-the-filesize-of-a-file-via-logstash/199613 "2019-09-16T09:40:17Z")
Suppose we are loading a file via logstash, how can we display the size of the file using a command in the config file itself? Thanks in advance. --- ## [Elasticsearch 6.7.0 not working on windows 2008](https://discuss.elastic.co/t/elasticsearch-6-7-0-not-working-on-windows-2008/198616)
**Author:** [@amol\_sonawane1](https://discuss.elastic.co/u/amol_sonawane1)\ **Replies:** 7\ **Last updated:** [September 16, 2019, 9:21am UTC](https://discuss.elastic.co/t/elasticsearch-6-7-0-not-working-on-windows-2008/198616 "2019-09-16T09:21:00Z")
Hi, I have upgraded Elasticsearch from 5.2.2 to 6.7.0 version. After upgrading successfully, I am not able to start Elasticsearch on W2008 box. Giving below error. Caused by: java.io.IOException: Cannot run program "\\?… --- ## [Issue With Kibana Line Chart](https://discuss.elastic.co/t/issue-with-kibana-line-chart/198011)
**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\ **Replies:** 1\ **Last updated:** [September 16, 2019, 9:10am UTC](https://discuss.elastic.co/t/issue-with-kibana-line-chart/198011 "2019-09-16T09:10:07Z")
Hi Team, I am facing issue with my Kibana line chart: My log fields looks like in the below image: And My line Chart looks like in the below image: My Unique Count on y-axis using the value of fields is 31305 a… --- ## [Error: File paths must be absolute - never happened before! Pls advice](https://discuss.elastic.co/t/error-file-paths-must-be-absolute-never-happened-before-pls-advice/199443)
**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\ **Replies:** 2\ **Last updated:** [September 16, 2019, 8:54am UTC](https://discuss.elastic.co/t/error-file-paths-must-be-absolute-never-happened-before-pls-advice/199443 "2019-09-16T08:54:41Z")
Hi, With Logstash 7.3.1 I just tried to add a few csv Demo Samples through logstash but now logstash is rejecting the File Path.. What ? This Never happened before... \[2019-09-13T15:24:59,168\]\[DEBUG\]\[logstash.javapip… --- ## [Dashboard: filter over multiple index patterns](https://discuss.elastic.co/t/dashboard-filter-over-multiple-index-patterns/198423)
**Author:** [@slauth](https://discuss.elastic.co/u/slauth)\ **Replies:** 3\ **Last updated:** [September 16, 2019, 8:53am UTC](https://discuss.elastic.co/t/dashboard-filter-over-multiple-index-patterns/198423 "2019-09-16T08:53:32Z")
Hi, I have two index patterns, both containing a field "stage". Now in a simple dashboard I'm combining visualizations based on both index patterns. What I would like to achieve now is being able to define a filter for … --- ## [Kibana: Range based on count](https://discuss.elastic.co/t/kibana-range-based-on-count/199431)
**Author:** [@megakoresh](https://discuss.elastic.co/u/megakoresh)\ **Replies:** 3\ **Last updated:** [September 16, 2019, 8:27am UTC](https://discuss.elastic.co/t/kibana-range-based-on-count/199431 "2019-09-16T08:27:04Z")
Hey. We have some host vulnerability data that we'd like to visualize and I am not sure how to do that. The data is in following format: { "id": "5e7473a8-1eda-4a4e-a640-650db8f3c129", "timestamp": "2019-09-13T1… --- ## [Can Fscrawler access Elasticsearch cluster behind load balancer](https://discuss.elastic.co/t/can-fscrawler-access-elasticsearch-cluster-behind-load-balancer/199591)
**Author:** [@rkmohapatra](https://discuss.elastic.co/u/rkmohapatra)\ **Replies:** 2\ **Last updated:** [September 16, 2019, 7:48am UTC](https://discuss.elastic.co/t/can-fscrawler-access-elasticsearch-cluster-behind-load-balancer/199591 "2019-09-16T07:48:39Z")
We have Elasticsearch cluster setup on Kubernetes in cloud environment. We also have kubernetes ingress controller setup to access the cluster using the loadbalancer external IP. e.g. http://LB\_IP\_ADDRESS//ES\_SERVICE I… --- ## [HIgh CPU usage without processing any data](https://discuss.elastic.co/t/high-cpu-usage-without-processing-any-data/199147)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 2\ **Last updated:** [September 13, 2019, 8:56pm UTC](https://discuss.elastic.co/t/high-cpu-usage-without-processing-any-data/199147 "2019-09-13T20:56:30Z")
Trying to config a new logstash instance to handle syslog input, so prepared input, output and a dummy working filter as a starting template from another running instance, but not sending any data to input yet. Even so l… --- ## [How can we implement painless query search condition for multi fields](https://discuss.elastic.co/t/how-can-we-implement-painless-query-search-condition-for-multi-fields/198883)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 3\ **Last updated:** [September 16, 2019, 7:31am UTC](https://discuss.elastic.co/t/how-can-we-implement-painless-query-search-condition-for-multi-fields/198883 "2019-09-16T07:31:46Z")
Dear All . I have 8-fields in index and we want to search all fields but condition here is : some time we want to search only 3,4 fields only but result should be come based on accurate match fields : value . but pain… --- ## [Perform some logic for query](https://discuss.elastic.co/t/perform-some-logic-for-query/196466)
**Author:** [@kvtang](https://discuss.elastic.co/u/kvtang)\ **Replies:** 3\ **Last updated:** [September 16, 2019, 7:28am UTC](https://discuss.elastic.co/t/perform-some-logic-for-query/196466 "2019-09-16T07:28:47Z")
Hi everyone, I would like to ask that is it possible to query the data like one attribute MUST contain two different element. I can't find a better way to describe this so I'm going to give a simple example. Let's say … --- ## [How to get parent with child data in single query in elastic search(C#)](https://discuss.elastic.co/t/how-to-get-parent-with-child-data-in-single-query-in-elastic-search-c/199587)
**Author:** [@navnathkharat](https://discuss.elastic.co/u/navnathkharat)\ **Replies:** 0\ **Last updated:** [September 16, 2019, 7:09am UTC](https://discuss.elastic.co/t/how-to-get-parent-with-child-data-in-single-query-in-elastic-search-c/199587 "2019-09-16T07:09:29Z")
public abstract class MyDocument { public int Id { get; set; } public JoinField MyJoinField { get; set; } } public class MyParent : MyDocument { \[Text\] public string Name{ get; set; } public DateTime DOB { get; … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1894) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1896)