# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1918 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1919 --- ## [Logstash-output-email Test](https://discuss.elastic.co/t/logstash-output-email-test/198133)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 1:25am UTC](https://discuss.elastic.co/t/logstash-output-email-test/198133 "2019-09-05T01:25:45Z")
We have an on-premises exchange server that I would like to use to send email notifications from logstash Does anyone have a sample config I could use? I know the ip of the exchange server, port 25 is open and if SMTP … --- ## [Elastic APM property elastic.apm.enable\_log\_correlation does not work](https://discuss.elastic.co/t/elastic-apm-property-elastic-apm-enable-log-correlation-does-not-work/198097)
**Author:** [@surenraju](https://discuss.elastic.co/u/surenraju)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 1:21am UTC](https://discuss.elastic.co/t/elastic-apm-property-elastic-apm-enable-log-correlation-does-not-work/198097 "2019-09-05T01:21:52Z")
Elastic Search Version: 7.3.1 APM Server Version: 7.3.1 APM Client Version: 1.9.0 I am running APM Client agent along with Spring Boot based microservices. APM Client is able to instrument and able to collect traces, … --- ## [Ok, Conf issue, i am missing something stupid](https://discuss.elastic.co/t/ok-conf-issue-i-am-missing-something-stupid/198127)
**Author:** [@Philip\_Thomson1](https://discuss.elastic.co/u/Philip_Thomson1)\ **Replies:** 7\ **Last updated:** [September 5, 2019, 12:37am UTC](https://discuss.elastic.co/t/ok-conf-issue-i-am-missing-something-stupid/198127 "2019-09-05T00:37:33Z")
What's wrong with this conf?: (free beer for anyone who can help, in Guelph Ontario) #Input from Log03 servers for bellMTS input { elasticsearch { host =\> "192.168.76.249" query =\> '{"query":{ "match": {"Web\_Host": … --- ## [Effect of cores on searching/indexing](https://discuss.elastic.co/t/effect-of-cores-on-searching-indexing/198020)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 5\ **Last updated:** [September 5, 2019, 12:35am UTC](https://discuss.elastic.co/t/effect-of-cores-on-searching-indexing/198020 "2019-09-05T00:35:40Z")
Need some inputs on searching and indexing on below concept w.r.t data nodes: Query: What is the difference between having 2 data nodes of 16cores each and 4 data nodes of 8cores each ? In both scenarios i have 32core… --- ## [Use variable in search query](https://discuss.elastic.co/t/use-variable-in-search-query/198129)
**Author:** [@JohnM](https://discuss.elastic.co/u/JohnM)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 12:30am UTC](https://discuss.elastic.co/t/use-variable-in-search-query/198129 "2019-09-05T00:30:11Z")
I am using python elasticsearch client to query. https://elasticsearch-py.readthedocs.io/en/master/ Everything works fine except using queries string as variable. Sorry if this is more python question. This works well… --- ## [Logstash se apaga después de estar ejecutándose unos segundos](https://discuss.elastic.co/t/logstash-se-apaga-despues-de-estar-ejecutandose-unos-segundos/197529)
**Author:** [@auzin](https://discuss.elastic.co/u/auzin)\ **Replies:** 7\ **Last updated:** [September 5, 2019, 12:19am UTC](https://discuss.elastic.co/t/logstash-se-apaga-despues-de-estar-ejecutandose-unos-segundos/197529 "2019-09-05T00:19:38Z")
Hi, Every time I try to run logstash with my config file, it shuts down a few seconds after de service is started. This is my config file: input{ file { path =\> "E:\\DATA\\test\\\*log" start\_position =\> "beginning"… --- ## [Does setup.template.append\_fields work for multifields?](https://discuss.elastic.co/t/does-setup-template-append-fields-work-for-multifields/198125)
**Author:** [@mbradsher](https://discuss.elastic.co/u/mbradsher)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 11:46pm UTC](https://discuss.elastic.co/t/does-setup-template-append-fields-work-for-multifields/198125 "2019-09-04T23:46:21Z")
Hello, I am attempting apply the experimental index template feature, setup.template.append\_fields, inside a filebeat config in order to set up a multifield datatype. This is an appealing feature because we don't want t… --- ## [Trying to get sort to work on items containing an optional field](https://discuss.elastic.co/t/trying-to-get-sort-to-work-on-items-containing-an-optional-field/198115)
**Author:** [@lhartzman](https://discuss.elastic.co/u/lhartzman)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 10:41pm UTC](https://discuss.elastic.co/t/trying-to-get-sort-to-work-on-items-containing-an-optional-field/198115 "2019-09-04T22:41:42Z")
I have records with an element that is an array of data. If one of the array elements has the 'role' element attached to it, the sort should apply to the data labeled with 'FranchiseCode'. Below is the mapping, sample da… --- ## [Shards not being allocated according to "box\_type" setting in designated nodes of same type](https://discuss.elastic.co/t/shards-not-being-allocated-according-to-box-type-setting-in-designated-nodes-of-same-type/197723)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 4\ **Last updated:** [September 2, 2019, 6:07pm UTC](https://discuss.elastic.co/t/shards-not-being-allocated-according-to-box-type-setting-in-designated-nodes-of-same-type/197723 "2019-09-02T18:07:19Z")
I have an index of around 4.1TB~ total size in a cluster of 12 nodes (9 DATA & INGEST, 3 DATA & MASTER) and all of them are set to "hot" category - we don't currently have any "warm" node in this cluster. The problem is… --- ## [Bootstrapping Elasticsearch 7.3 in AWS using Cloudformation](https://discuss.elastic.co/t/bootstrapping-elasticsearch-7-3-in-aws-using-cloudformation/198109)
**Author:** [@mlmurray](https://discuss.elastic.co/u/mlmurray)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 10:23pm UTC](https://discuss.elastic.co/t/bootstrapping-elasticsearch-7-3-in-aws-using-cloudformation/198109 "2019-09-04T22:23:55Z")
Hi all, I've seen a couple of people who have posted questions on how to bootstrap a cluster in 7.x.x using auto-scaling groups (and or auto-generated infrastructure using Cloudformation) but I haven't seen anyone actua… --- ## [Newbie questions on mapping](https://discuss.elastic.co/t/newbie-questions-on-mapping/197606)
**Author:** [@lhartzman](https://discuss.elastic.co/u/lhartzman)\ **Replies:** 3\ **Last updated:** [September 4, 2019, 9:57pm UTC](https://discuss.elastic.co/t/newbie-questions-on-mapping/197606 "2019-09-04T21:57:13Z")
I just started to investigate Elasticsearch since my company uses it. I took a section of a mapping and used it to create a new index on a new ES instance and don't understand what happened. The mapping has a dynamic te… --- ## [Lots of bulk requests being rejected by data node](https://discuss.elastic.co/t/lots-of-bulk-requests-being-rejected-by-data-node/198105)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 9:22pm UTC](https://discuss.elastic.co/t/lots-of-bulk-requests-being-rejected-by-data-node/198105 "2019-09-04T21:22:46Z")
Hi all, One of my data nodes is always running 4 "bulk" tasks, has a waiting queue of 500 (max queue limit in our settings) and millions of rejected requests. GET \_cat/thread\_pool?v If I check the tasks running th… --- ## [Infrastructure UI is empty](https://discuss.elastic.co/t/infrastructure-ui-is-empty/197933)
**Author:** [@luksi1](https://discuss.elastic.co/u/luksi1)\ **Replies:** 14\ **Last updated:** [September 4, 2019, 9:17pm UTC](https://discuss.elastic.co/t/infrastructure-ui-is-empty/197933 "2019-09-04T21:17:41Z")
Hello, I'm trying to diagnose why my Infrastructure UI is empty. The waffle map is empty, but the metrics explorer is populated. I can search the metricbeat-\* index without any problems. The problem arose when upgrading… --- ## [How to graph only the stack total?](https://discuss.elastic.co/t/how-to-graph-only-the-stack-total/197909)
**Author:** [@dpr](https://discuss.elastic.co/u/dpr)\ **Replies:** 2\ **Last updated:** [September 4, 2019, 9:14pm UTC](https://discuss.elastic.co/t/how-to-graph-only-the-stack-total/197909 "2019-09-04T21:14:38Z")
I've built a time-series line chart. It has just one metric: the latest value of one of the term "item.value" (top hit, item.value, sort on @timestamp, max) The primary bucket is a date histogram. It has a second bu… --- ## [API call - how to set @timestamp (or equivalent)](https://discuss.elastic.co/t/api-call-how-to-set-timestamp-or-equivalent/197742)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 8:42pm UTC](https://discuss.elastic.co/t/api-call-how-to-set-timestamp-or-equivalent/197742 "2019-09-04T20:42:23Z")
Im posting some timeseries data from an app. As it stands presently I can't see it in Kibana though I can get it via curl request. The posted data lacks a timestamp so Im wondering what the appropriate syntax is. Presen… --- ## [Use color for part of the field](https://discuss.elastic.co/t/use-color-for-part-of-the-field/198032)
**Author:** [@AleNriG](https://discuss.elastic.co/u/AleNriG)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 8:16pm UTC](https://discuss.elastic.co/t/use-color-for-part-of-the-field/198032 "2019-09-04T20:16:36Z")
Hi! Sorry, if this kind of question is already here, but I don\`t find it. My question is this: Is there a way to color one field with different colors? For example, I have text field, containing something like this - … --- ## [Kibana down with Error saying out of memory](https://discuss.elastic.co/t/kibana-down-with-error-saying-out-of-memory/197921)
**Author:** [@jasmineL](https://discuss.elastic.co/u/jasmineL)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 8:05pm UTC](https://discuss.elastic.co/t/kibana-down-with-error-saying-out-of-memory/197921 "2019-09-04T20:05:09Z")
Hi, I build Kibana 6.8 package from source file with basic license of x-pack and deployed to our servers. But I always get Out of memory error after running like every 3 days or 4. FATAL ERROR: CALL\_AND\_RETRY\_LAST Allo… --- ## [Can't create index pattern if you have more than 100 indices](https://discuss.elastic.co/t/cant-create-index-pattern-if-you-have-more-than-100-indices/197919)
**Author:** [@alecrooney](https://discuss.elastic.co/u/alecrooney)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 8:02pm UTC](https://discuss.elastic.co/t/cant-create-index-pattern-if-you-have-more-than-100-indices/197919 "2019-09-04T20:02:41Z")
I have over 100 indices in my ES cluster and I am trying to create an index pattern, but only the first 100 indices alphabetically show up. Also the wizard does not let you continue i.e. hit next unless the pattern matc… --- ## [Pipeline Code Issue](https://discuss.elastic.co/t/pipeline-code-issue/197930)
**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\ **Replies:** 2\ **Last updated:** [September 4, 2019, 7:47pm UTC](https://discuss.elastic.co/t/pipeline-code-issue/197930 "2019-09-04T19:47:45Z")
Hello, I have some trouble with my Logstash Pipeline code. I just added the following to my pipeline filter section: if \[beat\]\[hostname\] == ”qa-exchg16” { mutate { replace =\> { "\[fields\]\[app\_id\]" =\> "exchangeqa"… --- ## [Query\_string query with fuzzy matching enabled without explicit \`~\` operators](https://discuss.elastic.co/t/query-string-query-with-fuzzy-matching-enabled-without-explicit-operators/198101)
**Author:** [@rocketraman](https://discuss.elastic.co/u/rocketraman)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 7:44pm UTC](https://discuss.elastic.co/t/query-string-query-with-fuzzy-matching-enabled-without-explicit-operators/198101 "2019-09-04T19:44:33Z")
With query\_string for queries, a user can use operators like AND and OR. However, if they are searching for the term bill and type in bil as a search term, they don't find anything (the field uses a standard analyzer). … --- ## [Store indices in separate locations](https://discuss.elastic.co/t/store-indices-in-separate-locations/197925)
**Author:** [@vini](https://discuss.elastic.co/u/vini)\ **Replies:** 4\ **Last updated:** [September 4, 2019, 7:39pm UTC](https://discuss.elastic.co/t/store-indices-in-separate-locations/197925 "2019-09-04T19:39:50Z")
Hi all, I know this wasn’t possible with older version of elastic but in the recent version I haven’t been able to confirm yet. Can I define multiple locations to store indexes and define what index type is placed where… --- ## [Best practices to delete / mark for delete specific documents in an index?](https://discuss.elastic.co/t/best-practices-to-delete-mark-for-delete-specific-documents-in-an-index/194385)
**Author:** [@Ariel\_B](https://discuss.elastic.co/u/Ariel_B)\ **Replies:** 8\ **Last updated:** [August 8, 2019, 2:12pm UTC](https://discuss.elastic.co/t/best-practices-to-delete-mark-for-delete-specific-documents-in-an-index/194385 "2019-08-08T14:12:20Z")
Hello, In my use cases i use a monthly indexes, which store large amount of documents. When user adds some kind of configuration, some of those documents need to be deleted. I understand that it's not efficient to keep… --- ## [Configure Logstash to Output Nagios Beats to NSCA - Nagios logs?](https://discuss.elastic.co/t/configure-logstash-to-output-nagios-beats-to-nsca-nagios-logs/197418)
**Author:** [@safehouse](https://discuss.elastic.co/u/safehouse)\ **Replies:** 4\ **Last updated:** [September 4, 2019, 7:26pm UTC](https://discuss.elastic.co/t/configure-logstash-to-output-nagios-beats-to-nsca-nagios-logs/197418 "2019-09-04T19:26:12Z")
In this post https://discuss.elastic.co/t/questions-about-self-monitoring-systems-blog-post/43542 there is mention of pushing data to Nagios using beats, which is very interesting. I have tested the checknagiosbeat plug… --- ## [There is no data to display after upgrading from 7.3 to 7.3.1](https://discuss.elastic.co/t/there-is-no-data-to-display-after-upgrading-from-7-3-to-7-3-1/197942)
**Author:** [@Smoky](https://discuss.elastic.co/u/Smoky)\ **Replies:** 6\ **Last updated:** [September 4, 2019, 7:02pm UTC](https://discuss.elastic.co/t/there-is-no-data-to-display-after-upgrading-from-7-3-to-7-3-1/197942 "2019-09-04T19:02:39Z")
HI. After upgrading from 7.3 to 7.3.1, the infrastructure page comes up saying "There is no data to display." The logs are still there when I go to Logs or Discover. Anyone have any idea why? Terry --- ## [Kibana tutorial](https://discuss.elastic.co/t/kibana-tutorial/198089)
**Author:** [@drjenk](https://discuss.elastic.co/u/drjenk)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 6:59pm UTC](https://discuss.elastic.co/t/kibana-tutorial/198089 "2019-09-04T18:59:52Z")
https://www.elastic.co/webinars/getting-started-kibana has a registeration field in which my email address is entered, so that I can watch an instructional video. However I recieve a message every time I hit submit: "S… --- ## [Unexpected end-of-input within/between Object entries](https://discuss.elastic.co/t/unexpected-end-of-input-within-between-object-entries/198077)
**Author:** [@S\_Chase](https://discuss.elastic.co/u/S_Chase)\ **Replies:** 4\ **Last updated:** [September 4, 2019, 6:50pm UTC](https://discuss.elastic.co/t/unexpected-end-of-input-within-between-object-entries/198077 "2019-09-04T18:50:30Z")
This is the message i'm getting in the logstash log. JSON parse error, original data now in message field {:error=\>#\ **Author:** [@SteveSmith](https://discuss.elastic.co/u/SteveSmith)\ **Replies:** 5\ **Last updated:** [September 4, 2019, 6:17pm UTC](https://discuss.elastic.co/t/geo-point-and-logstash/198066 "2019-09-04T18:17:51Z") Hi Everyone, I am having a hard time lately understanding how the Geo\_Point type is created. I found that when I create the pipeline (using this link: https://www.elastic.co/guide/en/beats/packetbeat/current/packetbeat-… --- ## [Applying My First Index Template](https://discuss.elastic.co/t/applying-my-first-index-template/196967)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 4\ **Last updated:** [September 4, 2019, 5:49pm UTC](https://discuss.elastic.co/t/applying-my-first-index-template/196967 "2019-09-04T17:49:33Z")
Hi everyone, I’m trying to apply my first ElasticSearch Index Template, and am having some issues. I think I’m both a little confused about the process of wedding a Template to an Index, and about the exact syntax of t… --- ## [X-pack seems to be creating a logstash index template automatically](https://discuss.elastic.co/t/x-pack-seems-to-be-creating-a-logstash-index-template-automatically/197009)
**Author:** [@jwalls](https://discuss.elastic.co/u/jwalls)\ **Replies:** 6\ **Last updated:** [September 4, 2019, 5:11pm UTC](https://discuss.elastic.co/t/x-pack-seems-to-be-creating-a-logstash-index-template-automatically/197009 "2019-09-04T17:11:31Z")
I have an issue with conflicting logstash index templates, and when deleting the one I don't need, it gets immediately recreated. considering it's called logstash-index-template this follows the similar naming convention… --- ## [Sort does not work properly with from size parameter on elastic 7.2](https://discuss.elastic.co/t/sort-does-not-work-properly-with-from-size-parameter-on-elastic-7-2/198084)
**Author:** [@Enes\_Acikoglu](https://discuss.elastic.co/u/Enes_Acikoglu)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 4:56pm UTC](https://discuss.elastic.co/t/sort-does-not-work-properly-with-from-size-parameter-on-elastic-7-2/198084 "2019-09-04T16:56:31Z")
Hello All, We are using elastic 7.2 via rest high-level client on kotlin app. When we try to use below query sort return as false.It seems like sorting string instead of number like 1000-\>101-\>102 it looks third digit f… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1917) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1919)