# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1902

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1903

---

## [Java to connect elastic search](https://discuss.elastic.co/t/java-to-connect-elastic-search/199013)

<div class="topic-metadata">

**Author:** [@Velliyangiri](https://discuss.elastic.co/u/Velliyangiri)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 12:52pm UTC](https://discuss.elastic.co/t/java-to-connect-elastic-search/199013 "2019-09-12T12:52:53Z")

</div>

Is there any way to connect our java program to elastic search without using maven dependencies and any other third party libraries?.Please give me the solution.

---

## [Error on cluster downsizing if the master node is stopped](https://discuss.elastic.co/t/error-on-cluster-downsizing-if-the-master-node-is-stopped/195766)

<div class="topic-metadata">

**Author:** [@gboanea](https://discuss.elastic.co/u/gboanea)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 12:51pm UTC](https://discuss.elastic.co/t/error-on-cluster-downsizing-if-the-master-node-is-stopped/195766 "2019-09-12T12:51:25Z")

</div>

Hi, I am using the quickstart steps from: https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-quickstart.html. I am using EKS 1.13. If I upgrade to 3 nodes and then go back to 2 nodes, if the node that is shut do…

---

## [\[Index management\] Only hot nodes : Does it makes sense?](https://discuss.elastic.co/t/index-management-only-hot-nodes-does-it-makes-sense/198872)

<div class="topic-metadata">

**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 12:37pm UTC](https://discuss.elastic.co/t/index-management-only-hot-nodes-does-it-makes-sense/198872 "2019-09-12T12:37:08Z")

</div>

Hello, I'm asking what is the better way to rotate my index. I heard about ILM policy. I did some test but as I have only 3 data nodes, and as I want one replica, I can't have a Hot/Warm/Cold architecture because this …

---

## [Metricbeat Failed to parse JSON response: invalid character '\<' looking for beginning of value error](https://discuss.elastic.co/t/metricbeat-failed-to-parse-json-response-invalid-character-looking-for-beginning-of-value-error/199248)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 0\
**Last updated:** [September 12, 2019, 12:23pm UTC](https://discuss.elastic.co/t/metricbeat-failed-to-parse-json-response-invalid-character-looking-for-beginning-of-value-error/199248 "2019-09-12T12:23:23Z")

</div>

ECE 2.3 Metricbeat-oss-7.0 Started getting a "Failed to parse JSON response: invalid character '\<' looking for beginning of value" error in the metricbeat logs when sending data to a regular Elastic cluster and an ECE …

---

## [Need help regarding the timestamps of logs pushed into ElasticSearch through instance of Logstash](https://discuss.elastic.co/t/need-help-regarding-the-timestamps-of-logs-pushed-into-elasticsearch-through-instance-of-logstash/199021)

<div class="topic-metadata">

**Author:** [@abdulrafay](https://discuss.elastic.co/u/abdulrafay)\
**Replies:** 9\
**Last updated:** [September 12, 2019, 12:15pm UTC](https://discuss.elastic.co/t/need-help-regarding-the-timestamps-of-logs-pushed-into-elasticsearch-through-instance-of-logstash/199021 "2019-09-12T12:15:24Z")

</div>

Hello! The issue that I am facing is that I need to manually push some application logs into ES, through Logstash. I am using a separate instance of Logstash to do so, but the place where I am stuck is related to the ti…

---

## [Error parsing json with Logstash](https://discuss.elastic.co/t/error-parsing-json-with-logstash/198749)

<div class="topic-metadata">

**Author:** [@aleksei.saiko](https://discuss.elastic.co/u/aleksei.saiko)\
**Replies:** 14\
**Last updated:** [September 12, 2019, 11:32am UTC](https://discuss.elastic.co/t/error-parsing-json-with-logstash/198749 "2019-09-12T11:32:10Z")

</div>

Hi there, I'm using ELK 7.3.1 And getting Error parsing json for "message" This is how message looks like in origin (Exacmple)- message {"time\_date": "2019-02-14T14:00:39+00:00","client": "10.xxx.xxx.xxx", "h…

---

## [Is there a way to query all child and grandchild documents by using the parent/grandparentID?](https://discuss.elastic.co/t/is-there-a-way-to-query-all-child-and-grandchild-documents-by-using-the-parent-grandparentid/199240)

<div class="topic-metadata">

**Author:** [@Prasanth\_Rajendran](https://discuss.elastic.co/u/Prasanth_Rajendran)\
**Replies:** 0\
**Last updated:** [September 12, 2019, 11:09am UTC](https://discuss.elastic.co/t/is-there-a-way-to-query-all-child-and-grandchild-documents-by-using-the-parent-grandparentid/199240 "2019-09-12T11:09:48Z")

</div>

I have a below scenario: I am creating index called company where I am creating multilevel relationship company | |---------------| department supplier | employee I have created below…

---

## [How to create query to match child collection attributes using NEST .net client library for ElasticSearch?](https://discuss.elastic.co/t/how-to-create-query-to-match-child-collection-attributes-using-nest-net-client-library-for-elasticsearch/199236)

<div class="topic-metadata">

**Author:** [@vinodres](https://discuss.elastic.co/u/vinodres)\
**Replies:** 0\
**Last updated:** [September 12, 2019, 11:01am UTC](https://discuss.elastic.co/t/how-to-create-query-to-match-child-collection-attributes-using-nest-net-client-library-for-elasticsearch/199236 "2019-09-12T11:01:44Z")

</div>

I have following 4 documents located at http://xyzserver:9200/mydocs/brands in ElasticSearch 7.3 Each document represents some details of a Brand. A brand can be associated with multiple Groups and can be active for 0 o…

---

## [How much memory must my server have to manage 50000 documents?](https://discuss.elastic.co/t/how-much-memory-must-my-server-have-to-manage-50000-documents/199216)

<div class="topic-metadata">

**Author:** [@Isi](https://discuss.elastic.co/u/Isi)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 10:49am UTC](https://discuss.elastic.co/t/how-much-memory-must-my-server-have-to-manage-50000-documents/199216 "2019-09-12T10:49:55Z")

</div>

What about cpu storage and network? Thanks for helping.

---

## [Вопрос по работе SIEM](https://discuss.elastic.co/t/siem/199077)

<div class="topic-metadata">

**Author:** [@Igor\_Belyakov](https://discuss.elastic.co/u/Igor_Belyakov)\
**Replies:** 2\
**Last updated:** [September 12, 2019, 10:41am UTC](https://discuss.elastic.co/t/siem/199077 "2019-09-12T10:41:21Z")

</div>

Добрый день. Пытаюсь освоить работу с SIEM. С первого запуска все заработало нормально. Но после пересоздания индексов auditbeat в elastic и kibana некоторые дашборды перестали работать: При просмотре конкретной виз…

---

## [Http\_poller Web post request](https://discuss.elastic.co/t/http-poller-web-post-request/199232)

<div class="topic-metadata">

**Author:** [@akhilsharma.in](https://discuss.elastic.co/u/akhilsharma.in)\
**Replies:** 0\
**Last updated:** [September 12, 2019, 10:37am UTC](https://discuss.elastic.co/t/http-poller-web-post-request/199232 "2019-09-12T10:37:07Z")

</div>

I'm using http\_poller to use POST request. It is giving error with the body. I added body as below: body =\> '{ "grant\_type":"client\_credentials","scope":"domain" }' Error I'm seeing after running it as Bad request: 40…

---

## [Logstash: Update a string value in message filed using filters](https://discuss.elastic.co/t/logstash-update-a-string-value-in-message-filed-using-filters/199213)

<div class="topic-metadata">

**Author:** [@chimbu3306](https://discuss.elastic.co/u/chimbu3306)\
**Replies:** 0\
**Last updated:** [September 12, 2019, 9:27am UTC](https://discuss.elastic.co/t/logstash-update-a-string-value-in-message-filed-using-filters/199213 "2019-09-12T09:27:41Z")

</div>

I have a json message from the lambda logstream where the application is already producing @timestamp value but its not in the expected format. So if i use json filter to parse the message filed its producing the error m…

---

## [From dev tools to Kibanna search](https://discuss.elastic.co/t/from-dev-tools-to-kibanna-search/199052)

<div class="topic-metadata">

**Author:** [@science162](https://discuss.elastic.co/u/science162)\
**Replies:** 1\
**Last updated:** [September 11, 2019, 9:29pm UTC](https://discuss.elastic.co/t/from-dev-tools-to-kibanna-search/199052 "2019-09-11T21:29:39Z")

</div>

Request GET /jmetrer\_test\_exec-\*/\_search?size=0 { "aggs" : { "sales\_over\_time" : { "date\_histogram" : { "field" : "@timestamp", "format":"yyyy-MM-dd HH:mm:ss", …

---

## [Logstah geoIp filter for kibana Map](https://discuss.elastic.co/t/logstah-geoip-filter-for-kibana-map/199226)

<div class="topic-metadata">

**Author:** [@ashok9177](https://discuss.elastic.co/u/ashok9177)\
**Replies:** 0\
**Last updated:** [September 12, 2019, 10:08am UTC](https://discuss.elastic.co/t/logstah-geoip-filter-for-kibana-map/199226 "2019-09-12T10:08:55Z")

</div>

Hi can some one help me on Logstash GeoIP filter ? below is my sample log message 2019-09-10 13:47:45.678 \[INFO\] from application in pool-1-thread-21 - SegmentName : ID Verified Longitude : 39.954752, Latitude : 39.95…

---

## [Logstash load error no such file to load -- bundler](https://discuss.elastic.co/t/logstash-load-error-no-such-file-to-load-bundler/198356)

<div class="topic-metadata">

**Author:** [@goncalobsantos](https://discuss.elastic.co/u/goncalobsantos)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 9:43am UTC](https://discuss.elastic.co/t/logstash-load-error-no-such-file-to-load-bundler/198356 "2019-09-12T09:43:56Z")

</div>

Hi, I'm new to the ELK and am having trouble using Logstash to load my data to Elastic. After I type: C:\\Users\\GBS\\Downloads\\logstash\\bin\>logstash -f ../config/filename.conf I get the following error message: \[ERROR…

---

## [Grok filter by file path](https://discuss.elastic.co/t/grok-filter-by-file-path/199097)

<div class="topic-metadata">

**Author:** [@BenP](https://discuss.elastic.co/u/BenP)\
**Replies:** 2\
**Last updated:** [September 12, 2019, 9:43am UTC](https://discuss.elastic.co/t/grok-filter-by-file-path/199097 "2019-09-12T09:43:05Z")

</div>

Hello, I'm currently banging my head against the wall trying to make my filters works. My grok patterns are OK but I can't make my conditions to work. The documents are added but there aren't transformed (I can confir…

---

## [Limit query to field](https://discuss.elastic.co/t/limit-query-to-field/199204)

<div class="topic-metadata">

**Author:** [@Escalus](https://discuss.elastic.co/u/Escalus)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 9:24am UTC](https://discuss.elastic.co/t/limit-query-to-field/199204 "2019-09-12T09:24:18Z")

</div>

Hello, I have an index with document and organizations who published this documents. One document can have multiple organizations. "organization" : \[ "Carnegie Mellon Univ, Dept Mat Sci & Engn", "US Steel Corp, US St…

---

## [Logstash: Fetch the end string using grok or other filters](https://discuss.elastic.co/t/logstash-fetch-the-end-string-using-grok-or-other-filters/198448)

<div class="topic-metadata">

**Author:** [@chimbu3306](https://discuss.elastic.co/u/chimbu3306)\
**Replies:** 2\
**Last updated:** [September 12, 2019, 9:16am UTC](https://discuss.elastic.co/t/logstash-fetch-the-end-string-using-grok-or-other-filters/198448 "2019-09-12T09:16:45Z")

</div>

I have a field in my message where I only need the last part of the string but the message length varies for different environments. I tried using grok to fetch the last part of the message but unable to get the expecte…

---

## [While mapping stop words analyzer, index is not creating?](https://discuss.elastic.co/t/while-mapping-stop-words-analyzer-index-is-not-creating/199207)

<div class="topic-metadata">

**Author:** [@Ramkumar\_Kaalisetti](https://discuss.elastic.co/u/Ramkumar_Kaalisetti)\
**Replies:** 0\
**Last updated:** [September 12, 2019, 8:54am UTC](https://discuss.elastic.co/t/while-mapping-stop-words-analyzer-index-is-not-creating/199207 "2019-09-12T08:54:43Z")

</div>

localhost:9200/my\_index { "settings":{ "analysis":{ "analyzer":{ "my\_analyzer":{ "type":"custom", "tokenizer":"standard", "filter":\[ "lowercase" \] }, "my\_stop\_analyzer":{ "type":"custom", "tokenizer":"stand…

---

## [\[Kibana Network graph\] No results](https://discuss.elastic.co/t/kibana-network-graph-no-results/199101)

<div class="topic-metadata">

**Author:** [@chaymaa](https://discuss.elastic.co/u/chaymaa)\
**Replies:** 2\
**Last updated:** [September 12, 2019, 8:29am UTC](https://discuss.elastic.co/t/kibana-network-graph-no-results/199101 "2019-09-12T08:29:37Z")

</div>

Hi All, I want to presente my data on a kibana network graph, i have choose a field as a node but no results are remonted on the graph, and when i inspect the data are here. can one help me please? Thanks in advance …

---

## [Regarding Persistent Queueing](https://discuss.elastic.co/t/regarding-persistent-queueing/198636)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 8:23am UTC](https://discuss.elastic.co/t/regarding-persistent-queueing/198636 "2019-09-12T08:23:59Z")

</div>

Hi, Is it possible to identify and tag events which have been persisted to disk and for how long? I'd like to be able to track when events get persisted et al. Regards D

---

## [Exception in thread "main" java.nio.file.AccessDeniedException while run ./bin/elasticsearch](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-accessdeniedexception-while-run-bin-elasticsearch/199177)

<div class="topic-metadata">

**Author:** [@Tje](https://discuss.elastic.co/u/Tje)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 8:19am UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-accessdeniedexception-while-run-bin-elasticsearch/199177 "2019-09-12T08:19:20Z")

</div>

I'm trying to install ElasticSearch in to my server.When i run ./bin/elasticsearch got bellow error Exception in thread "main" java.nio.file.AccessDeniedException: /var/www/elasticsearch-7.3.1/config/jvm.options at jav…

---

## [Beats apache module. Multiline to join PHP Stack trace](https://discuss.elastic.co/t/beats-apache-module-multiline-to-join-php-stack-trace/199190)

<div class="topic-metadata">

**Author:** [@Martin\_Ostlund](https://discuss.elastic.co/u/Martin_Ostlund)\
**Replies:** 0\
**Last updated:** [September 12, 2019, 7:46am UTC](https://discuss.elastic.co/t/beats-apache-module-multiline-to-join-php-stack-trace/199190 "2019-09-12T07:46:49Z")

</div>

Filebeat version: 7.3.1 OS: Ubuntu 18.04 LTS Filebeat module: Apache Filebeat Output: Elastichost:9200 Problem description: Our Apache error log contains PHP Stacktraces that spans many lines. Question 1: Is it poss…

---

## [Path Hierarchy Tokenizer with doc values](https://discuss.elastic.co/t/path-hierarchy-tokenizer-with-doc-values/199186)

<div class="topic-metadata">

**Author:** [@robmartin11](https://discuss.elastic.co/u/robmartin11)\
**Replies:** 0\
**Last updated:** [September 12, 2019, 7:20am UTC](https://discuss.elastic.co/t/path-hierarchy-tokenizer-with-doc-values/199186 "2019-09-12T07:20:47Z")

</div>

Im splitting a category field using the Path Hierarchy Tokenizer which I want to use for aggregations. Since the field must be text so that the content is analyzed (using the Path Hierarchy Tokenizer), I cannot use doc v…

---

## [How many workers to parallel bulk indexing in cluster?](https://discuss.elastic.co/t/how-many-workers-to-parallel-bulk-indexing-in-cluster/199139)

<div class="topic-metadata">

**Author:** [@misam](https://discuss.elastic.co/u/misam)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 7:08am UTC](https://discuss.elastic.co/t/how-many-workers-to-parallel-bulk-indexing-in-cluster/199139 "2019-09-12T07:08:43Z")

</div>

I have a cluster with 8 nodes. I want to index a lot of docs. For the best performance, how many workers (to parallel bulk indexing) must run on each node?

---

## [Filebeat-processor-parse data- save in another column](https://discuss.elastic.co/t/filebeat-processor-parse-data-save-in-another-column/199184)

<div class="topic-metadata">

**Author:** [@abhishek\_kumar3](https://discuss.elastic.co/u/abhishek_kumar3)\
**Replies:** 0\
**Last updated:** [September 12, 2019, 6:55am UTC](https://discuss.elastic.co/t/filebeat-processor-parse-data-save-in-another-column/199184 "2019-09-12T06:55:17Z")

</div>

Hi, I have tried all the processors but I am unable to get my use case which is as below: -\>write a PROCESSOR and filter the message field with a regular expression and store it in another "target".

---

## [Tasks accumulating in management thread pool](https://discuss.elastic.co/t/tasks-accumulating-in-management-thread-pool/199093)

<div class="topic-metadata">

**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 6:51am UTC](https://discuss.elastic.co/t/tasks-accumulating-in-management-thread-pool/199093 "2019-09-12T06:51:04Z")

</div>

I have a data node that has its management thread pool filled up (like 5 active and hundreds or even thousands of queued jobs). The other nodes are fine (0 active, 0 in queue.) What kind of tasks get in to this pool? Ho…

---

## [java.lang.StackOverflowError After Successfully Starting API Endpoint](https://discuss.elastic.co/t/java-lang-stackoverflowerror-after-successfully-starting-api-endpoint/199168)

<div class="topic-metadata">

**Author:** [@indoctrine](https://discuss.elastic.co/u/indoctrine)\
**Replies:** 2\
**Last updated:** [September 12, 2019, 6:04am UTC](https://discuss.elastic.co/t/java-lang-stackoverflowerror-after-successfully-starting-api-endpoint/199168 "2019-09-12T06:04:26Z")

</div>

Hello, I am getting a java.lang.StackOverflowError after the Logstash API endpoint successfully starts. I cannot see any errors on the Elasticsearch side. I am running Logstash, Elasticsearch, and Kibana, all on versio…

---

## [Elasticsearch Yml configuration](https://discuss.elastic.co/t/elasticsearch-yml-configuration/198506)

<div class="topic-metadata">

**Author:** [@das\_santosh](https://discuss.elastic.co/u/das_santosh)\
**Replies:** 16\
**Last updated:** [September 12, 2019, 6:01am UTC](https://discuss.elastic.co/t/elasticsearch-yml-configuration/198506 "2019-09-12T06:01:08Z")

</div>

Hi , I am doing a 6 node elasticsearch cluster setup where 4 nodes i am taking as a master and 2 as a data node , but my cluster is not working as expected. can somebody please help me with complete cluster setup (ela…

---

## [Sorting not working properly](https://discuss.elastic.co/t/sorting-not-working-properly/199174)

<div class="topic-metadata">

**Author:** [@lucabes](https://discuss.elastic.co/u/lucabes)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 6:01am UTC](https://discuss.elastic.co/t/sorting-not-working-properly/199174 "2019-09-12T06:01:06Z")

</div>

Hi I have problem with sorting imn ELK 7.3. My query: https://pastebin.com/uK4Ywrec for mapping: https://pastebin.com/fZ4eyhtm and index settings https://pastebin.com/X4SiecP8 For this query and mapping uI'm getting…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1901)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1903)
