# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1906 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1907 --- ## [Stop logging all http reponse messages to syslog?](https://discuss.elastic.co/t/stop-logging-all-http-reponse-messages-to-syslog/198849)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 2\ **Last updated:** [September 10, 2019, 11:37pm UTC](https://discuss.elastic.co/t/stop-logging-all-http-reponse-messages-to-syslog/198849 "2019-09-10T23:37:21Z")
Hi, Kibana 7.2 I installed filebeat on the server that is running Kibana and with the syslog module enabled I noticed Kibana is generating a lot of messages like this: {"type":"response","@timestamp":"2019-09-10T08:19… --- ## [GCP Sydney Region is live on Elasticsearch Service](https://discuss.elastic.co/t/gcp-sydney-region-is-live-on-elasticsearch-service/198980)
**Author:** [@vidamon](https://discuss.elastic.co/u/vidamon)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 10:47pm UTC](https://discuss.elastic.co/t/gcp-sydney-region-is-live-on-elasticsearch-service/198980 "2019-09-10T22:47:55Z")
GCP Sydney Region is now live on Elasticsearch Service We're excited to bring the official Elasticsearch Service to the Sydney region on GCP. This will provide our growing set of customers in Australia with the immediat… --- ## [Aggregating, picking top value using ordering then ordering buckets by score](https://discuss.elastic.co/t/aggregating-picking-top-value-using-ordering-then-ordering-buckets-by-score/198975)
**Author:** [@lloydk](https://discuss.elastic.co/u/lloydk)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 10:36pm UTC](https://discuss.elastic.co/t/aggregating-picking-top-value-using-ordering-then-ordering-buckets-by-score/198975 "2019-09-10T22:36:10Z")
Imagine a packages repository like NuGet or NPM. Multiple packages with the same ID and many versions. These are entered individually as a document into the index. Now in a query I want to aggregate them by ID, sort th… --- ## [New to Logstash Filter Config file questions](https://discuss.elastic.co/t/new-to-logstash-filter-config-file-questions/198969)
**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 9:20pm UTC](https://discuss.elastic.co/t/new-to-logstash-filter-config-file-questions/198969 "2019-09-10T21:20:09Z")
I am new to ELK and trying to learn. I have setup a "Lab" that has my pfSense firewall sending logs to Logstash. The "how-tos" I followed for this had me create 4 different files, 01-inputs.conf, 10-syslog.conf, 11-pfsen… --- ## [Best practices to configure indexSet passwords for kibana and other users before elasticsearch starts (k8s)](https://discuss.elastic.co/t/best-practices-to-configure-indexset-passwords-for-kibana-and-other-users-before-elasticsearch-starts-k8s/198974)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 8:50pm UTC](https://discuss.elastic.co/t/best-practices-to-configure-indexset-passwords-for-kibana-and-other-users-before-elasticsearch-starts-k8s/198974 "2019-09-10T20:50:24Z")
Hello, Please let me know the preferred options to set passwords for elastic users (kibana user, etc) before elasticsearch starts? I noticed that we can use k8s secrets, what other options do we have? Do we have env va… --- ## [Unable to use loadBalancerIP with elastic/helm-chart](https://discuss.elastic.co/t/unable-to-use-loadbalancerip-with-elastic-helm-chart/198954)
**Author:** [@darenjacobs](https://discuss.elastic.co/u/darenjacobs)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 6:21pm UTC](https://discuss.elastic.co/t/unable-to-use-loadbalancerip-with-elastic-helm-chart/198954 "2019-09-10T18:21:44Z")
Hello, I am deploying ElasticSearch using helm charts here: elastic/helm-charts on GCP k8s version: 1.13.7-gke.8. providing loadBalancerIP: x.x.x.x is not working. I am using the provided values.yaml file except in th… --- ## [How Do You Serve Out Data From Elastic For End-user Use?](https://discuss.elastic.co/t/how-do-you-serve-out-data-from-elastic-for-end-user-use/198972)
**Author:** [@beezit](https://discuss.elastic.co/u/beezit)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 8:37pm UTC](https://discuss.elastic.co/t/how-do-you-serve-out-data-from-elastic-for-end-user-use/198972 "2019-09-10T20:37:41Z")
So assuming you got Elastic to work, loaded in your index and mappings are fine etc, how do you serve out the data that ES worked on to the end-users for use? Still trying to understand how all these tie together. Thank… --- ## [Jdbc for sqlserver](https://discuss.elastic.co/t/jdbc-for-sqlserver/198058)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 8:24pm UTC](https://discuss.elastic.co/t/jdbc-for-sqlserver/198058 "2019-09-10T20:24:17Z")
I am trying to connect to microsoft sqlserver but no luck I can connect to this db using microsoft sqlserver management studio. What am I missing here? input { jdbc { jdbc\_validate\_connection =\> … --- ## [Elasticsearch Snapshot repository size estimates](https://discuss.elastic.co/t/elasticsearch-snapshot-repository-size-estimates/198774)
**Author:** [@awhelan](https://discuss.elastic.co/u/awhelan)\ **Replies:** 3\ **Last updated:** [September 10, 2019, 8:10pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repository-size-estimates/198774 "2019-09-10T20:10:37Z")
Hello, I have a size question concerning the Elasticsearch \[Snapshot/Restore\] API capabilities Let’s, say I am only backing up one index. An example call to the snapshot API is shown below for an index called myindex. … --- ## [Kibana timeout during discover. Elasticsearch error: collector \[node\_stats\] timed out when collecting data](https://discuss.elastic.co/t/kibana-timeout-during-discover-elasticsearch-error-collector-node-stats-timed-out-when-collecting-data/198666)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 2\ **Last updated:** [September 10, 2019, 8:01pm UTC](https://discuss.elastic.co/t/kibana-timeout-during-discover-elasticsearch-error-collector-node-stats-timed-out-when-collecting-data/198666 "2019-09-10T20:01:09Z")
Hello, I have problems ( errors below) to discover indexes in kibana, some indexes loads after 2nd attempt like dev.k8s-2019.09.09 (900Mb) , some indexes are more problematic with discovering in kibana like dev.k8s.app… --- ## [Changing Timezone in Elasticsearch query response](https://discuss.elastic.co/t/changing-timezone-in-elasticsearch-query-response/198967)
**Author:** [@Daniel\_Merege](https://discuss.elastic.co/u/Daniel_Merege)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 7:38pm UTC](https://discuss.elastic.co/t/changing-timezone-in-elasticsearch-query-response/198967 "2019-09-10T19:38:11Z")
I'd like to know how I can make Elasticsearch change the timezone of timestamps in query's response JSON by using any parameter, instead of using script fields. Is it possible? I could make it consider the timezone in t… --- ## [Javapipeline unrecoverable error - Logstash](https://discuss.elastic.co/t/javapipeline-unrecoverable-error-logstash/198957)
**Author:** [@Matthew\_Graville](https://discuss.elastic.co/u/Matthew_Graville)\ **Replies:** 2\ **Last updated:** [September 10, 2019, 7:31pm UTC](https://discuss.elastic.co/t/javapipeline-unrecoverable-error-logstash/198957 "2019-09-10T19:31:18Z")
I am unsure what I am doing wrong. Any help is much appreciated: Logstash cmd: \[root@logstash bin\]# ./logstash -f /etc/logstash/conf.d/rsyslog.conf --config.reload.automatic Logstash Error1: \[ERROR\] 2019-09-10 13:48:… --- ## [Logstash Servers are runs with high CPU consumption](https://discuss.elastic.co/t/logstash-servers-are-runs-with-high-cpu-consumption/198952)
**Author:** [@vsubrama](https://discuss.elastic.co/u/vsubrama)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 7:18pm UTC](https://discuss.elastic.co/t/logstash-servers-are-runs-with-high-cpu-consumption/198952 "2019-09-10T19:18:30Z")
We are using 6.7.1 of Elastic stack. Our Logstash is running at high CPU (90+%) always. What do need need to look for to understand the high CPU consumption. We are using AWS machine M5.large for Logstash. Here is one… --- ## [CIDR filter reports IP6 addresses as invalid](https://discuss.elastic.co/t/cidr-filter-reports-ip6-addresses-as-invalid/198959)
**Author:** [@daniel.dayley](https://discuss.elastic.co/u/daniel.dayley)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 7:15pm UTC](https://discuss.elastic.co/t/cidr-filter-reports-ip6-addresses-as-invalid/198959 "2019-09-10T19:15:56Z")
Hey guys, I'm hoping this is an issue on my end rather than an issue with the CIDR filter, but I'm seeing a lot of logstash errors in my CIDR filter relating to certain IP addresses: \[WARN \]\[logstash.filters.cidr \] I… --- ## [How to keep one exec plugin waiting for another?](https://discuss.elastic.co/t/how-to-keep-one-exec-plugin-waiting-for-another/198960)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 2\ **Last updated:** [September 10, 2019, 7:09pm UTC](https://discuss.elastic.co/t/how-to-keep-one-exec-plugin-waiting-for-another/198960 "2019-09-10T19:09:59Z")
Given the following configuration: input { exec { command =\> "python3 ${LOGSTASH\_HOME}/script/firmware/backend/download\_script.py" schedule =\> "${SCHEDULER}" type =\> "Backend" } exec { command =\> "… --- ## [Recommendations for ingesting XML stream](https://discuss.elastic.co/t/recommendations-for-ingesting-xml-stream/198807)
**Author:** [@dpr](https://discuss.elastic.co/u/dpr)\ **Replies:** 3\ **Last updated:** [September 10, 2019, 6:51pm UTC](https://discuss.elastic.co/t/recommendations-for-ingesting-xml-stream/198807 "2019-09-10T18:51:12Z")
Hey guys, I'd like to ingest events that are continually streaming on a TCP port. The stream format is XML, although it's not one event per line: the opening tag and closing tag are often on different lines. Here's a … --- ## [How do nodes and shards work in this scenario?](https://discuss.elastic.co/t/how-do-nodes-and-shards-work-in-this-scenario/198947)
**Author:** [@orokusaki](https://discuss.elastic.co/u/orokusaki)\ **Replies:** 4\ **Last updated:** [September 10, 2019, 6:30pm UTC](https://discuss.elastic.co/t/how-do-nodes-and-shards-work-in-this-scenario/198947 "2019-09-10T18:30:40Z")
If we set up an Elasticsearch cluster with 2 nodes, and an index configured for 4 shards with 1 replica, and then we begin indexing data, I understand our data will be placed into shards based on the hash of the routing … --- ## [S3 Input plugin overwrites the files written to directory](https://discuss.elastic.co/t/s3-input-plugin-overwrites-the-files-written-to-directory/197209)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 6:37pm UTC](https://discuss.elastic.co/t/s3-input-plugin-overwrites-the-files-written-to-directory/197209 "2019-09-10T18:37:46Z")
When I pull data from S3, the tar file gets overwritten every time. Is there any way to save each file without having them be overwritten in S3 temporary directory? Logstash configuration: input{ s3 { acces… --- ## [For read/search performance, 6 small nodes vs 3 large nodes?](https://discuss.elastic.co/t/for-read-search-performance-6-small-nodes-vs-3-large-nodes/198955)
**Author:** [@orokusaki](https://discuss.elastic.co/u/orokusaki)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 6:24pm UTC](https://discuss.elastic.co/t/for-read-search-performance-6-small-nodes-vs-3-large-nodes/198955 "2019-09-10T18:24:18Z")
For some background, our usage of Elasticsearch is for an index of real estate transactions. Each transaction is added once and then updated 3-4 times (as agents are added and a few other specific actions that trigger a … --- ## [How can I control the size of the elasticsearch stdout file](https://discuss.elastic.co/t/how-can-i-control-the-size-of-the-elasticsearch-stdout-file/198953)
**Author:** [@tom\_hogan](https://discuss.elastic.co/u/tom_hogan)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 6:04pm UTC](https://discuss.elastic.co/t/how-can-i-control-the-size-of-the-elasticsearch-stdout-file/198953 "2019-09-10T18:04:04Z")
The elasticsearch process is throwing errors. The errors need to be addressed, but they don't prevent the application from working. The errors are also being written to the log file. But in the meantime, how can I preve… --- ## [Check the top\_hits aggregation results to see if every top hit has a field with a specific value](https://discuss.elastic.co/t/check-the-top-hits-aggregation-results-to-see-if-every-top-hit-has-a-field-with-a-specific-value/197904)
**Author:** [@awatkins](https://discuss.elastic.co/u/awatkins)\ **Replies:** 5\ **Last updated:** [September 10, 2019, 5:49pm UTC](https://discuss.elastic.co/t/check-the-top-hits-aggregation-results-to-see-if-every-top-hit-has-a-field-with-a-specific-value/197904 "2019-09-10T17:49:11Z")
I am trying to accomplish what seems like it should be super easy and obviously possible but hitting a hard brick wall instead. aggregate all elastic documents in a specific index from the last 60 days into buckets by… --- ## [Publish Address vs Bind Address](https://discuss.elastic.co/t/publish-address-vs-bind-address/198948)
**Author:** [@SteveP](https://discuss.elastic.co/u/SteveP)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 5:41pm UTC](https://discuss.elastic.co/t/publish-address-vs-bind-address/198948 "2019-09-10T17:41:48Z")
Right now I show my bind address as 192.168.1.242:9200, which is what I expected. What I did not expect was to see a publish address of 192.168.1.242:9300. What is the publish address used for and why is the port differ… --- ## [Java Heap Space error OutOfMemoryError](https://discuss.elastic.co/t/java-heap-space-error-outofmemoryerror/198761)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 9\ **Last updated:** [September 10, 2019, 5:41pm UTC](https://discuss.elastic.co/t/java-heap-space-error-outofmemoryerror/198761 "2019-09-10T17:41:14Z")
I am getting an error Logstash - java.lang.OutOfMemoryError: Java heap space. However, I have changed the heap memory in the jvm.options file from 1g to 2g to 8g to 10g. I am still getting the same errors though. How can… --- ## [Simple config does not work: file input](https://discuss.elastic.co/t/simple-config-does-not-work-file-input/198941)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 4\ **Last updated:** [September 10, 2019, 5:37pm UTC](https://discuss.elastic.co/t/simple-config-does-not-work-file-input/198941 "2019-09-10T17:37:57Z")
I apologize for a stupid question, but I got stuck: the following simple config does not parse the input log-file (LS v.7.3.1): input { file { path =\> \["C:\\temp\\solr.log.3"\] #start\_position =\> "beginning" sinced… --- ## [Provisioning cluster to only allow "test" index to be visible by master node](https://discuss.elastic.co/t/provisioning-cluster-to-only-allow-test-index-to-be-visible-by-master-node/198937)
**Author:** [@eharm007](https://discuss.elastic.co/u/eharm007)\ **Replies:** 4\ **Last updated:** [September 10, 2019, 5:32pm UTC](https://discuss.elastic.co/t/provisioning-cluster-to-only-allow-test-index-to-be-visible-by-master-node/198937 "2019-09-10T17:32:37Z")
Hey All, Title pretty much summarizes what I am trying to do but I can't find any information on this subject. Basically, I have a single cluster with different nodes across different subnets. I have set my firewall rul… --- ## [Missing documentation for ECK stack in non-default namespace](https://discuss.elastic.co/t/missing-documentation-for-eck-stack-in-non-default-namespace/198802)
**Author:** [@sarjeet](https://discuss.elastic.co/u/sarjeet)\ **Replies:** 4\ **Last updated:** [September 10, 2019, 5:30pm UTC](https://discuss.elastic.co/t/missing-documentation-for-eck-stack-in-non-default-namespace/198802 "2019-09-10T17:30:16Z")
I haven't found any documentation that states on how to run ECK stack on k8s with non-default namespace. Currently, Elasticsearch and kibana samples also provided with default namespace. I tried to run ECK stack with no… --- ## [Create Index Pattern/ Visualization Programmatically](https://discuss.elastic.co/t/create-index-pattern-visualization-programmatically/198943)
**Author:** [@csholic](https://discuss.elastic.co/u/csholic)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 5:11pm UTC](https://discuss.elastic.co/t/create-index-pattern-visualization-programmatically/198943 "2019-09-10T17:11:36Z")
I know how to create or delete index in a python program using: es.indices.delete(index = fname, ignore = \[400, 404\]) helpers.bulk(es, json.load(f), index = indexname, doc\_type = 'my-type') But is there a way that I c… --- ## [Generating reports for a remote index](https://discuss.elastic.co/t/generating-reports-for-a-remote-index/198938)
**Author:** [@o1o1o11o1](https://discuss.elastic.co/u/o1o1o11o1)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 4:56pm UTC](https://discuss.elastic.co/t/generating-reports-for-a-remote-index/198938 "2019-09-10T16:56:40Z")
Hello, We have 3 ES clusters 7.1 running in a remote-cluster setup. All works well, except generating reports from Kibana on a remote index e.g. \*:remoteindex-\*. The user has the kibana\_user and reporting\_user roles, tr… --- ## [Seeing slower bulk indexing performance after upgrade from ES5.2 to ES7.1](https://discuss.elastic.co/t/seeing-slower-bulk-indexing-performance-after-upgrade-from-es5-2-to-es7-1/198769)
**Author:** [@suanmeiguo](https://discuss.elastic.co/u/suanmeiguo)\ **Replies:** 6\ **Last updated:** [September 10, 2019, 4:55pm UTC](https://discuss.elastic.co/t/seeing-slower-bulk-indexing-performance-after-upgrade-from-es5-2-to-es7-1/198769 "2019-09-10T16:55:17Z")
Hi, We're seeing a much slower bulk indexing performance when upgrade from ES5.2 to ES7.1 I already went through the release note on 6 and 7 but couldn't find anything obvious that could impact this performance. I'm won… --- ## [Query in hdfs files from elasticsearch](https://discuss.elastic.co/t/query-in-hdfs-files-from-elasticsearch/198922)
**Author:** [@Lusine\_Hayrapetyan](https://discuss.elastic.co/u/Lusine_Hayrapetyan)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 4:47pm UTC](https://discuss.elastic.co/t/query-in-hdfs-files-from-elasticsearch/198922 "2019-09-10T16:47:09Z")
Hi, I have json files in hdfs. And I have elastic search, also installed elasticsearch-hadoop-7.3.1.jar and added it to classpath. Now I want do interactive quires with elasticsearch in json files which are in hdfs. H… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1905) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1907)