# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1910 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1911 --- ## [Documentation for connecting Vega to Elasticsearch](https://discuss.elastic.co/t/documentation-for-connecting-vega-to-elasticsearch/198477)
**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 3:13pm UTC](https://discuss.elastic.co/t/documentation-for-connecting-vega-to-elasticsearch/198477 "2019-09-09T15:13:27Z")
Greetings, Is there any documentation for connecting Vega to ES? I have searched https://vega.github.io/vega/docs/ and https://vega.github.io/vega/examples/ but have not found any examples. The existing examples all u… --- ## [How to optimize a reindex operation to perform really fast on big source index](https://discuss.elastic.co/t/how-to-optimize-a-reindex-operation-to-perform-really-fast-on-big-source-index/198721)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 3:11pm UTC](https://discuss.elastic.co/t/how-to-optimize-a-reindex-operation-to-perform-really-fast-on-big-source-index/198721 "2019-09-09T15:11:01Z")
Hi everyone, I need to reindex a 4.1TB index that was created with very little amount of shards originally (no capacity planning & growth forecast was done) Nothing is being written currently in the source index and it… --- ## [Re-index operation fails due to search context no longer found](https://discuss.elastic.co/t/re-index-operation-fails-due-to-search-context-no-longer-found/198717)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 2:58pm UTC](https://discuss.elastic.co/t/re-index-operation-fails-due-to-search-context-no-longer-found/198717 "2019-09-09T14:58:59Z")
Hello everyone, I'm executing the following reindex task from a 4.1TB~ source index (quite big) POST \_reindex?wait\_for\_completion=false&slices=20 { "source": { "index": "puma.compilation.pipeline.96f19f5b-bc84-4d… --- ## [Problem with logstash DNS resolver plugin](https://discuss.elastic.co/t/problem-with-logstash-dns-resolver-plugin/198447)
**Author:** [@BeMoore](https://discuss.elastic.co/u/BeMoore)\ **Replies:** 10\ **Last updated:** [September 9, 2019, 2:42pm UTC](https://discuss.elastic.co/t/problem-with-logstash-dns-resolver-plugin/198447 "2019-09-09T14:42:26Z")
So i'm trying out ELK to see if it can compare to an existing product we're using internally and i've hit a problem i can't get around. I have a bunch of IP addresses that i've gotten from a csv file and stripped out ev… --- ## [Logstash not listening on port 5044](https://discuss.elastic.co/t/logstash-not-listening-on-port-5044/198475)
**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 1:53pm UTC](https://discuss.elastic.co/t/logstash-not-listening-on-port-5044/198475 "2019-09-09T13:53:51Z")
I have setup a ELK node that I want to send some logs to via WinLogBeats. Using Ubuntu 18 server. I can ping the node by the ip address and the FQDN, but when I do a Test-NetConnection via powershell it fails. When I do … --- ## [Update by query performance in single index vs multiple indices](https://discuss.elastic.co/t/update-by-query-performance-in-single-index-vs-multiple-indices/198711)
**Author:** [@kowsik](https://discuss.elastic.co/u/kowsik)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 2:35pm UTC](https://discuss.elastic.co/t/update-by-query-performance-in-single-index-vs-multiple-indices/198711 "2019-09-09T14:35:52Z")
I used update by query to update two fields in approximately 10 million documents in a single index and it took around 21-22 minutes to get updated. I want to know if there will be a significant difference in time taken… --- ## [Documentation search button](https://discuss.elastic.co/t/documentation-search-button/198661)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 2:11pm UTC](https://discuss.elastic.co/t/documentation-search-button/198661 "2019-09-09T14:11:51Z")
Hi, I don't know if I'm at the right place to say this, but there seems to be a problem with the search button in the documentation ( https://www.elastic.co/guide/index.html# ) : it doesn't work at all for me today on … --- ## [Where to place ssl\_certificate\_verification?](https://discuss.elastic.co/t/where-to-place-ssl-certificate-verification/198700)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 2:03pm UTC](https://discuss.elastic.co/t/where-to-place-ssl-certificate-verification/198700 "2019-09-09T14:03:24Z")
Hi, I am using security module to encrypt transport between es-nodes and to rest api. In logstash I get the following warning: \[2019-09-09T13:56:45,737\]\[WARN \]\[logstash.outputs.elasticsearch\] \*\* WARNING \*\* Detected UN… --- ## [Data Format in csv reports generated in Kibana](https://discuss.elastic.co/t/data-format-in-csv-reports-generated-in-kibana/197523)
**Author:** [@BastianC](https://discuss.elastic.co/u/BastianC)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 1:41pm UTC](https://discuss.elastic.co/t/data-format-in-csv-reports-generated-in-kibana/197523 "2019-09-09T13:41:04Z")
Hi, I would like to export data as csv for further analysis outside the elastic stack. When doing this from the Discover page in Kibana, I noticed that all values in the generated csv are formatted as strings, i.e. numbe… --- ## [Pushing logs from Qradar to ELK Platform](https://discuss.elastic.co/t/pushing-logs-from-qradar-to-elk-platform/198687)
**Author:** [@sabyasachi](https://discuss.elastic.co/u/sabyasachi)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 1:21pm UTC](https://discuss.elastic.co/t/pushing-logs-from-qradar-to-elk-platform/198687 "2019-09-09T13:21:05Z")
How can we forwards logs collected in QRADAR to Elasticsearch? --- ## [Rolling restart Elasticsearch 5.5 (multi instance on node)](https://discuss.elastic.co/t/rolling-restart-elasticsearch-5-5-multi-instance-on-node/198685)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 12:57pm UTC](https://discuss.elastic.co/t/rolling-restart-elasticsearch-5-5-multi-instance-on-node/198685 "2019-09-09T12:57:56Z")
Hey All, I'm in trouble. I want perform rolling restart (so any service break) on our Elasticsearch Cluster (v 5.5). Particularity : One node contains four java instance of Elasticsearch. It's ok this procedure : D… --- ## [Logstash json-filter - Wildchar to fetch fields](https://discuss.elastic.co/t/logstash-json-filter-wildchar-to-fetch-fields/198597)
**Author:** [@nilesh1](https://discuss.elastic.co/u/nilesh1)\ **Replies:** 4\ **Last updated:** [September 9, 2019, 12:14pm UTC](https://discuss.elastic.co/t/logstash-json-filter-wildchar-to-fetch-fields/198597 "2019-09-09T12:14:08Z")
New to Logstash, I am using logstash JSON filter plugin. JSON payloads look like \[each line new log entry\] { "RequestOne": { "Header": { "MessageID": "41019e6b-e2da-4303-88df-859765d0fbe3","CreationDateTime": "2019-01-… --- ## [Deade letter queue setting create some log files which are not meaningful](https://discuss.elastic.co/t/deade-letter-queue-setting-create-some-log-files-which-are-not-meaningful/198675)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 12:09pm UTC](https://discuss.elastic.co/t/deade-letter-queue-setting-create-some-log-files-which-are-not-meaningful/198675 "2019-09-09T12:09:18Z")
Hi, I am using LS-6.3.1. I enabled dead\_letter\_queue. ###logstash.yml---- path.data: /MyHome/logstash-6.3.1/data Pipelines.yml pipeline name is: my\_pipe After I restart my logstash, it creates files as below. /M… --- ## [I was writing data to influxDB. but... happend problem... Help me please](https://discuss.elastic.co/t/i-was-writing-data-to-influxdb-but-happend-problem-help-me-please/198674)
**Author:** [@ki\_mu](https://discuss.elastic.co/u/ki_mu)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 11:52am UTC](https://discuss.elastic.co/t/i-was-writing-data-to-influxdb-but-happend-problem-help-me-please/198674 "2019-09-09T11:52:28Z")
i insert data to influxDB through logstash. logstash read the log file(json form), insert data to influxDB. i successed so far. but.. after i confirm DB, It happen problem... plz see the picture... i think time tag … --- ## [Сортировка не дает ожидаемый результат](https://discuss.elastic.co/t/topic/198669)
**Author:** [@MaWr](https://discuss.elastic.co/u/MaWr)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 11:36am UTC](https://discuss.elastic.co/t/topic/198669 "2019-09-09T11:36:12Z")
Есть такая проблема: Делаю поисковый запрос в ES. Находятся документы из разных шардов с одинаковыми с точки зрения запроса параметрами. Так как количество документов в разных шардах разное, то скор у надйденных докуме… --- ## [Elasticsearch conditional filter](https://discuss.elastic.co/t/elasticsearch-conditional-filter/198398)
**Author:** [@mgvarley](https://discuss.elastic.co/u/mgvarley)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 11:28am UTC](https://discuss.elastic.co/t/elasticsearch-conditional-filter/198398 "2019-09-09T11:28:00Z")
We have a use case where around 65% of our documents can be uniquely identified by a single field however we cannot guarantee that this will match, in which case we want to fall back to a complex full text search query u… --- ## [Exception from packetbeat ILM](https://discuss.elastic.co/t/exception-from-packetbeat-ilm/198671)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 11:20am UTC](https://discuss.elastic.co/t/exception-from-packetbeat-ilm/198671 "2019-09-09T11:20:13Z")
Im attempting to use packetbeat though am having issues as the ILM doesn't seem to want to execute properly. I installed it via packetbeat setup but changed it as follows: "phase\_definition" : { "min\_age" : "0… --- ## [The following method did not exist: org.elasticsearch.common.settings.Settings$Builder.put(\[Ljava/lang/Object;)Lorg/elasticsearch/common/settings/Settings$Builder](https://discuss.elastic.co/t/the-following-method-did-not-exist-org-elasticsearch-common-settings-settings-builder-put-ljava-lang-object-lorg-elasticsearch-common-settings-settings-builder/198668)
**Author:** [@praffuln](https://discuss.elastic.co/u/praffuln)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 11:11am UTC](https://discuss.elastic.co/t/the-following-method-did-not-exist-org-elasticsearch-common-settings-settings-builder-put-ljava-lang-object-lorg-elasticsearch-common-settings-settings-builder/198668 "2019-09-09T11:11:10Z")
We are getting below error, both error and mvn tree as below. jo.a.c.loader.WebappClassLoaderBase : The web application \[#v1\] appears to have started a thread named \[springCache\] but has failed to stop it. This is… --- ## [Logstash does not create logstash-\* indices in ES](https://discuss.elastic.co/t/logstash-does-not-create-logstash-indices-in-es/198667)
**Author:** [@ehsank777](https://discuss.elastic.co/u/ehsank777)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 11:07am UTC](https://discuss.elastic.co/t/logstash-does-not-create-logstash-indices-in-es/198667 "2019-09-09T11:07:41Z")
Hi, Since we upgraded ELK to the version 7.2 , we faced a problem. logstash is creating indices with other names except logstash-yyyy.mm.dd format . In other words within logstash.conf we have output { if "foo" in … --- ## [Calculate percentages bases on elapsed duration](https://discuss.elastic.co/t/calculate-percentages-bases-on-elapsed-duration/198665)
**Author:** [@Alisa\_Faingold](https://discuss.elastic.co/u/Alisa_Faingold)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 11:01am UTC](https://discuss.elastic.co/t/calculate-percentages-bases-on-elapsed-duration/198665 "2019-09-09T11:01:28Z")
Hi, I have logs from a phone device, and I would like to calculate how long from the time the device was operating, the wifi was active ( I use the elapsed filter to calculate the activity times (there are a start log … --- ## [NEW to ELK: using conditionals in filter](https://discuss.elastic.co/t/new-to-elk-using-conditionals-in-filter/198601)
**Author:** [@hAh0L13](https://discuss.elastic.co/u/hAh0L13)\ **Replies:** 6\ **Last updated:** [September 9, 2019, 10:52am UTC](https://discuss.elastic.co/t/new-to-elk-using-conditionals-in-filter/198601 "2019-09-09T10:52:01Z")
Hello. Stuck in configuring pipeline. My filebeat agent send apache\_access logs with "fields.type = apache\_access" option: filebeat.inputs: - type: log enabled: true paths: - D:\\log\\apache\\access-\*.log … --- ## [Stats os.cpu.percent is -1](https://discuss.elastic.co/t/stats-os-cpu-percent-is-1/198605)
**Author:** [@Jasper\_Nygaard](https://discuss.elastic.co/u/Jasper_Nygaard)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 10:35am UTC](https://discuss.elastic.co/t/stats-os-cpu-percent-is-1/198605 "2019-09-09T10:35:01Z")
Hi Just added another node to my cluster and for some reason I cannot get it to show the CPU Usage (os.cpu.percent) in Kibana - It just says -1. Looking directly in the stats endpoint, it also says -1. Facts: I have 3… --- ## [Is it possible to run dynamic sql query in elastic search](https://discuss.elastic.co/t/is-it-possible-to-run-dynamic-sql-query-in-elastic-search/198276)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 9\ **Last updated:** [September 9, 2019, 9:40am UTC](https://discuss.elastic.co/t/is-it-possible-to-run-dynamic-sql-query-in-elastic-search/198276 "2019-09-09T09:40:30Z")
Dear All. i have use case in elastic search that is matching with below sql query:- DECLARE @EmpID AS SMALLINT DECLARE @SQLQuery AS NVARCHAR(500) DECLARE @ParameterDefinition AS NVARCHAR(100) SET @EmpID = 1001 SET @SQ… --- ## [Increase snapshot time interval](https://discuss.elastic.co/t/increase-snapshot-time-interval/198654)
**Author:** [@karim\_soliman](https://discuss.elastic.co/u/karim_soliman)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 9:55am UTC](https://discuss.elastic.co/t/increase-snapshot-time-interval/198654 "2019-09-09T09:55:32Z")
Hello, I want to increase snapshots time interval of my deployment on elastic cloud, the available intervals are 30 minutes, 4 hours and 1 day, but I want to increase it to be more than one day (e.g 7 days), how can I do… --- ## [Run Filebeats as Non-Root User](https://discuss.elastic.co/t/run-filebeats-as-non-root-user/198374)
**Author:** [@thps](https://discuss.elastic.co/u/thps)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 9:40am UTC](https://discuss.elastic.co/t/run-filebeats-as-non-root-user/198374 "2019-09-09T09:40:44Z")
Hi folks, i´m trying to run Filebeat as a non root user on RHEL 7.5. What have i done: chown for /etc/filebeat , /var/log/filebeat ,/usr/share/filebeat and /var/lib/filebeat. The user is now owner of this directo… --- ## [ILM config for beats](https://discuss.elastic.co/t/ilm-config-for-beats/198629)
**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 9:39am UTC](https://discuss.elastic.co/t/ilm-config-for-beats/198629 "2019-09-09T09:39:27Z")
Hi, I was wondering if the index logic for beats was changed due to ILM settings. In the logs of filebeat, I see Set output.elasticsearch.index to 'filebeat-7.3.1' as ILM is enabled.. This is different from the base co… --- ## [I want to create an elastic query for following response](https://discuss.elastic.co/t/i-want-to-create-an-elastic-query-for-following-response/198643)
**Author:** [@lakmina\_chathurya](https://discuss.elastic.co/u/lakmina_chathurya)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 9:19am UTC](https://discuss.elastic.co/t/i-want-to-create-an-elastic-query-for-following-response/198643 "2019-09-09T09:19:50Z")
{ "items": \[ { "data": "a", "status": "#FF0000", "level": "0", "children": \[ { "data": "b", "status": "#FF0000", "level": "1" }, { "data": "c", "status": "#FF0000", … --- ## [Trying to configure Master and Data nodes on the same system](https://discuss.elastic.co/t/trying-to-configure-master-and-data-nodes-on-the-same-system/198522)
**Author:** [@revglen](https://discuss.elastic.co/u/revglen)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 9:20am UTC](https://discuss.elastic.co/t/trying-to-configure-master-and-data-nodes-on-the-same-system/198522 "2019-09-09T09:20:58Z")
Hello All, I am trying to get an understanding of the Elasticsearch cluster system. Hence, I have set up the Elasticsearch.yml file in the following. I have created 2 folders - one for Master and the other is Data. Ho… --- ## [Should Logstash crashe due to Invalid FieldReference](https://discuss.elastic.co/t/should-logstash-crashe-due-to-invalid-fieldreference/198642)
**Author:** [@JohanRask](https://discuss.elastic.co/u/JohanRask)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 9:17am UTC](https://discuss.elastic.co/t/should-logstash-crashe-due-to-invalid-fieldreference/198642 "2019-09-09T09:17:32Z")
Hi, We are using logstash 7.1.1 in production with multiple pipelines. In one of our pipelines we use kv filter to convert headers to key value pairs and one of these keys contained an invalid value (invalid value was … --- ## [Read Nifi CSV file in logstash](https://discuss.elastic.co/t/read-nifi-csv-file-in-logstash/198637)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 9:05am UTC](https://discuss.elastic.co/t/read-nifi-csv-file-in-logstash/198637 "2019-09-09T09:05:52Z")
Hi, I have used Nifi to generate the csv file . When I open File generated in nifi in sublime text I could clearly see the data as in new line . But when same file gets input to logstash I cannot recognize the new lin… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1909) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1911)