# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1919 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1920 --- ## [Preety print json in output](https://discuss.elastic.co/t/preety-print-json-in-output/198078)
**Author:** [@Ulka](https://discuss.elastic.co/u/Ulka)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 4:40pm UTC](https://discuss.elastic.co/t/preety-print-json-in-output/198078 "2019-09-04T16:40:27Z")
I am using filbeat as input and Elastic search as output. using json filter to parse json msgs. But I dont see output coming in proper json format (preety print) in Kibana . I tried with Ruby filter to print preety js… --- ## [Change \_id field generation strategy from UUID-strings to long (by means of ES)](https://discuss.elastic.co/t/change-id-field-generation-strategy-from-uuid-strings-to-long-by-means-of-es/198050)
**Author:** [@tworogue](https://discuss.elastic.co/u/tworogue)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 4:31pm UTC](https://discuss.elastic.co/t/change-id-field-generation-strategy-from-uuid-strings-to-long-by-means-of-es/198050 "2019-09-04T16:31:54Z")
Hello! I'm wondering if I can change the default behavior for '\_id' field generation. I'd like ES to generate ids, but, instead of Flake-based string UUIDs I would like to get long (incremental, sequential) numbers (re… --- ## [Removing the ability do make any changes to advanced settings](https://discuss.elastic.co/t/removing-the-ability-do-make-any-changes-to-advanced-settings/198076)
**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 4:20pm UTC](https://discuss.elastic.co/t/removing-the-ability-do-make-any-changes-to-advanced-settings/198076 "2019-09-04T16:20:47Z")
Hi there, I think I am going slightly mad. I have created what I thought is a read only role but the user has the ability to create/delete spaces. The permissions set using the kibana UI are: Cluster privileges : None … --- ## [Calculate overall score of the query using score of each term](https://discuss.elastic.co/t/calculate-overall-score-of-the-query-using-score-of-each-term/198073)
**Author:** [@nehacv](https://discuss.elastic.co/u/nehacv)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 4:06pm UTC](https://discuss.elastic.co/t/calculate-overall-score-of-the-query-using-score-of-each-term/198073 "2019-09-04T16:06:15Z")
I have a query which has 4-5 filters with each having score of its own filter A has score a and filter B has score b: { "boost\_factor": "3", "filter": {...} }, { "filter": {â.}, "script": "\_score \* doc\['my\_numeric… --- ## [Logstash RabbitMQ Input Plugin not recognize host and port](https://discuss.elastic.co/t/logstash-rabbitmq-input-plugin-not-recognize-host-and-port/198070)
**Author:** [@ThiagoBarradas](https://discuss.elastic.co/u/ThiagoBarradas)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 3:50pm UTC](https://discuss.elastic.co/t/logstash-rabbitmq-input-plugin-not-recognize-host-and-port/198070 "2019-09-04T15:50:31Z")
Hello Guys! I'm trying to use Logstash to receive messages from RabbitMQ but it not recognize my configuration, cosidering only localhost:5672 and failing when tries to connect. I have already tested the connection wit… --- ## [Kibana Code Application not making efficient use of resources](https://discuss.elastic.co/t/kibana-code-application-not-making-efficient-use-of-resources/196104)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 5\ **Last updated:** [September 4, 2019, 3:48pm UTC](https://discuss.elastic.co/t/kibana-code-application-not-making-efficient-use-of-resources/196104 "2019-09-04T15:48:39Z")
Hello, Trying out the new Kibana Code Application, and checking the indices created by the application made me realise the current (7.2.1 for me) version does not efficiently handle resources. For every respository inde… --- ## [Delete Indices action remove Index patterns from Kibana dashboard](https://discuss.elastic.co/t/delete-indices-action-remove-index-patterns-from-kibana-dashboard/197907)
**Author:** [@Ab\_Avramidis](https://discuss.elastic.co/u/Ab_Avramidis)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 3:47pm UTC](https://discuss.elastic.co/t/delete-indices-action-remove-index-patterns-from-kibana-dashboard/197907 "2019-09-04T15:47:30Z")
Hi, I delete my old indices from Elasticsearch and I noticed that this action also delete (remove) the index pattern that I had created on Kibana dashboard. Can anyone explain me how those actions connected and why tha… --- ## [Delete Indices Action removes also Index patterns from Kibana](https://discuss.elastic.co/t/delete-indices-action-removes-also-index-patterns-from-kibana/197802)
**Author:** [@Ab\_Avramidis](https://discuss.elastic.co/u/Ab_Avramidis)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 3:43pm UTC](https://discuss.elastic.co/t/delete-indices-action-removes-also-index-patterns-from-kibana/197802 "2019-09-04T15:43:42Z")
Hi, I was wondering If anyone can explain to me why and how I can avoid that issue, when I execute through curator an action to delete my old indices, it also delete(removes) automatically the Index patterns from my Kib… --- ## [Update/rename nested field](https://discuss.elastic.co/t/update-rename-nested-field/198057)
**Author:** [@bvoros](https://discuss.elastic.co/u/bvoros)\ **Replies:** 3\ **Last updated:** [September 4, 2019, 3:08pm UTC](https://discuss.elastic.co/t/update-rename-nested-field/198057 "2019-09-04T15:08:14Z")
Hello All, What is the best way to rename a nested field? I would like to do the following: if \[filed\]\[subfield\] rename it to \[field\] Would it make sense to add a temporary field with the value of the original, drop… --- ## [Cannot access Kibana from machine on different network, getting ERR\_CONNECTION\_RESET](https://discuss.elastic.co/t/cannot-access-kibana-from-machine-on-different-network-getting-err-connection-reset/194726)
**Author:** [@cspRules](https://discuss.elastic.co/u/cspRules)\ **Replies:** 6\ **Last updated:** [September 4, 2019, 2:59pm UTC](https://discuss.elastic.co/t/cannot-access-kibana-from-machine-on-different-network-getting-err-connection-reset/194726 "2019-09-04T14:59:19Z")
HI, I have installed Kibana 7.2.1 and hooked it to a locally run Elasticsearch instance. I can see the default app "discovery" from another machine ' s browser when that machine is on the same network. But from my lap… --- ## [Kibana Discover tab issue](https://discuss.elastic.co/t/kibana-discover-tab-issue/197875)
**Author:** [@mugil1988](https://discuss.elastic.co/u/mugil1988)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 2:57pm UTC](https://discuss.elastic.co/t/kibana-discover-tab-issue/197875 "2019-09-04T14:57:37Z")
Hi team, Getting this error when searching logs in kibana discover tab "index has exceeded \[1000000\] - maximum allowed to be analyzed for highlighting. This maximum can be set by changing the \[index.highlight.max\_analy… --- ## [Unable to connect to kibana and elastic after enabling security](https://discuss.elastic.co/t/unable-to-connect-to-kibana-and-elastic-after-enabling-security/197954)
**Author:** [@megan\_b](https://discuss.elastic.co/u/megan_b)\ **Replies:** 2\ **Last updated:** [September 4, 2019, 2:10pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-kibana-and-elastic-after-enabling-security/197954 "2019-09-04T14:10:47Z")
We enabled security on our cluster and are able to connect to elastic and to kibana from the nodes inside the cluster, but when we attempt to connect from an 'outside' system the connection is reset by the server after b… --- ## [How to autoscale Logstash](https://discuss.elastic.co/t/how-to-autoscale-logstash/198061)
**Author:** [@bala2](https://discuss.elastic.co/u/bala2)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 2:05pm UTC](https://discuss.elastic.co/t/how-to-autoscale-logstash/198061 "2019-09-04T14:05:22Z")
Hi Team, I have a requirement, where i have a database pushing events to one Logstash. If one logstash is down another logstash should automatically start. Could you please help me with some reference link. Here i dont … --- ## [Default search timeout not applying on search and msearch calls](https://discuss.elastic.co/t/default-search-timeout-not-applying-on-search-and-msearch-calls/198060)
**Author:** [@o1o1o11o1](https://discuss.elastic.co/u/o1o1o11o1)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 2:03pm UTC](https://discuss.elastic.co/t/default-search-timeout-not-applying-on-search-and-msearch-calls/198060 "2019-09-04T14:03:09Z")
I've configured ES 7.1 with a default\_search\_timeout of 120s, however when I list all search or msearch tasks (\*search) I can still see long running tasks of more than 20,000 seconds. I can cancel them just fine, but was… --- ## [Importing Logstash configuration from another file](https://discuss.elastic.co/t/importing-logstash-configuration-from-another-file/198056)
**Author:** [@corramatteo](https://discuss.elastic.co/u/corramatteo)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 1:47pm UTC](https://discuss.elastic.co/t/importing-logstash-configuration-from-another-file/198056 "2019-09-04T13:47:54Z")
Hi guys, I was wondering if it is possible to include a Logstash configuration from a file to another one. And if it is possible, what is the best way? Below I will make an example about what I want to achieve. In a … --- ## [Output writing wrong event data](https://discuss.elastic.co/t/output-writing-wrong-event-data/198002)
**Author:** [@Pablo\_Gutierrez](https://discuss.elastic.co/u/Pablo_Gutierrez)\ **Replies:** 2\ **Last updated:** [September 4, 2019, 1:36pm UTC](https://discuss.elastic.co/t/output-writing-wrong-event-data/198002 "2019-09-04T13:36:15Z")
Heyy! I'm newbie with Logstash so I need some help here with a filter done in .rb file. Situation: I'm reading from csv file a code, for example 1500. Then, in filter I use a ruby file to look for that 1500 as a ke… --- ## [Syslog input character adjustment](https://discuss.elastic.co/t/syslog-input-character-adjustment/197988)
**Author:** [@shenshensinian](https://discuss.elastic.co/u/shenshensinian)\ **Replies:** 3\ **Last updated:** [September 4, 2019, 1:31pm UTC](https://discuss.elastic.co/t/syslog-input-character-adjustment/197988 "2019-09-04T13:31:28Z")
In the case of push logs using syslog, how do I adjust only the character encoding of individual IPs in the input phase. --- ## [Grok to extract info from non KV formatted data?](https://discuss.elastic.co/t/grok-to-extract-info-from-non-kv-formatted-data/197901)
**Author:** [@SigmazGFX](https://discuss.elastic.co/u/SigmazGFX)\ **Replies:** 6\ **Last updated:** [September 4, 2019, 1:23pm UTC](https://discuss.elastic.co/t/grok-to-extract-info-from-non-kv-formatted-data/197901 "2019-09-04T13:23:53Z")
Ok.. I'm back with another head scratcher.. I'm so damn new... but I'm learning.:smiley: I'm sending my entire message through kv{} to have it break out the KV pairs for me.. but I need to make a KV pair for items lis… --- ## [Logstash not process large XML with multiple xpath](https://discuss.elastic.co/t/logstash-not-process-large-xml-with-multiple-xpath/197758)
**Author:** [@Rodrigo\_Tornis](https://discuss.elastic.co/u/Rodrigo_Tornis)\ **Replies:** 3\ **Last updated:** [September 4, 2019, 1:14pm UTC](https://discuss.elastic.co/t/logstash-not-process-large-xml-with-multiple-xpath/197758 "2019-09-04T13:14:06Z")
Hello people! I have the following problem: 1 - I have an XMLs with estimated size 69MB and my configuration is as follows: input { file { path =\> "/tmp/ACOR\_2019.XML" start\_position =\> "beginning" sincedb\_pa… --- ## [Can not elect master when restarting cluster from 7.3 upgrade](https://discuss.elastic.co/t/can-not-elect-master-when-restarting-cluster-from-7-3-upgrade/197846)
**Author:** [@elastic\_paul](https://discuss.elastic.co/u/elastic_paul)\ **Replies:** 18\ **Last updated:** [September 4, 2019, 12:17pm UTC](https://discuss.elastic.co/t/can-not-elect-master-when-restarting-cluster-from-7-3-upgrade/197846 "2019-09-04T12:17:43Z")
Hi team, I have an 8 node ES cluster in dev. I shut it all down, upgraded to 7.3.1 Restarted, and no I can not get a master elected :frowning: Here is a sample of the log entry (similar appear on all nodes) \[2019-0… --- ## [Custom Multiline Parsing](https://discuss.elastic.co/t/custom-multiline-parsing/197946)
**Author:** [@Naveesh\_Doolhur](https://discuss.elastic.co/u/Naveesh_Doolhur)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 12:02pm UTC](https://discuss.elastic.co/t/custom-multiline-parsing/197946 "2019-09-04T12:02:26Z")
I have a Log file as follows: ===================================== REQUEST 03-09-2019 01:12:25.808599 REF:5001462 ========================================= \ \ **Author:** [@poitevinpm](https://discuss.elastic.co/u/poitevinpm)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 11:58am UTC](https://discuss.elastic.co/t/searchscript-score-for-nested-docs/198039 "2019-09-04T11:58:31Z") Hi! I am trying to implement a SearchScript to have a custom scoring algo. Some of the queries I use have filters on nested fields. So I have a few questions I didn't find answers on the documentation. Also I am using … --- ## [APM index failing ILM rollover](https://discuss.elastic.co/t/apm-index-failing-ilm-rollover/197823)
**Author:** [@ethranes](https://discuss.elastic.co/u/ethranes)\ **Replies:** 5\ **Last updated:** [September 4, 2019, 11:51am UTC](https://discuss.elastic.co/t/apm-index-failing-ilm-rollover/197823 "2019-09-04T11:51:05Z")
Hi, I have my APM setup, and I thought I setit up correctly for ILM, it rolled over once from 0000001 to 0000002 but now the index won't rollover, I get the following error illegal\_argument\_exception: setting \[index.lif… --- ## [Error: failed to authenticate user](https://discuss.elastic.co/t/error-failed-to-authenticate-user/198038)
**Author:** [@rajatrj16](https://discuss.elastic.co/u/rajatrj16)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 11:38am UTC](https://discuss.elastic.co/t/error-failed-to-authenticate-user/198038 "2019-09-04T11:38:26Z")
when I am restarting elasticsearch ./bin/elasticsearch. It gives error: \[2019-09-04T16:53:35,773\]\[INFO \]\[o.e.x.s.a.AuthenticationService\] \[elk\] Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to… --- ## [Data node constantly dropping out of the cluster](https://discuss.elastic.co/t/data-node-constantly-dropping-out-of-the-cluster/194216)
**Author:** [@Jorge\_Betancourt](https://discuss.elastic.co/u/Jorge_Betancourt)\ **Replies:** 18\ **Last updated:** [September 4, 2019, 11:36am UTC](https://discuss.elastic.co/t/data-node-constantly-dropping-out-of-the-cluster/194216 "2019-09-04T11:36:43Z")
We had a situation after migrating to Elasticsearch 7.3. We run 3 dedicated masters and 4 data nodes. Each data node has 24 vCPUs and 30GB of RAM, used primarily for ingesting logs. One of our data nodes was constantly b… --- ## [Accidentally deleted Index- Error: failed to find metadata for existing index](https://discuss.elastic.co/t/accidentally-deleted-index-error-failed-to-find-metadata-for-existing-index/197983)
**Author:** [@rajatrj16](https://discuss.elastic.co/u/rajatrj16)\ **Replies:** 9\ **Last updated:** [September 4, 2019, 11:33am UTC](https://discuss.elastic.co/t/accidentally-deleted-index-error-failed-to-find-metadata-for-existing-index/197983 "2019-09-04T11:33:07Z")
I have accidentally deleted 2-3 indexes form path: elasticsearch/data/nodes/0 And now I can't able to restart the elastic search. It gives me the error: Caused by: java.io.IOException: failed to find metadata for exis… --- ## [Parse syslog message](https://discuss.elastic.co/t/parse-syslog-message/198034)
**Author:** [@fernando974](https://discuss.elastic.co/u/fernando974)\ **Replies:** 0\ **Last updated:** [September 4, 2019, 11:17am UTC](https://discuss.elastic.co/t/parse-syslog-message/198034 "2019-09-04T11:17:48Z")
Hello, I know i'm using EFK and not ELK but i'm still trying maybe someone know how to do it with fluentd on this forum I have the following syslog message : "54:07+04:00 test-ls100.pi.com - - - - 1,2019/09/04 09:54:0… --- ## [\_update\_by\_query doesn't return a list of affected IDs and Indices](https://discuss.elastic.co/t/update-by-query-doesnt-return-a-list-of-affected-ids-and-indices/197820)
**Author:** [@markb](https://discuss.elastic.co/u/markb)\ **Replies:** 4\ **Last updated:** [September 4, 2019, 11:07am UTC](https://discuss.elastic.co/t/update-by-query-doesnt-return-a-list-of-affected-ids-and-indices/197820 "2019-09-04T11:07:28Z")
I want to update records by running "\_update\_by\_query" and after that receive the list of affected ID's and indices like it happens when creating new record. It would be also nice to have returning the selected fields f… --- ## [Trying to calculate time difference using scripted fields](https://discuss.elastic.co/t/trying-to-calculate-time-difference-using-scripted-fields/197674)
**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 5\ **Last updated:** [September 4, 2019, 10:57am UTC](https://discuss.elastic.co/t/trying-to-calculate-time-difference-using-scripted-fields/197674 "2019-09-04T10:57:00Z")
Hi i am trying to calculate time difference between two fields: netflow.first\_switched Sep 2, 2019 @ 16:25:51.000 netflow.last\_switched Sep 2, 2019 @ 16:25:52.182 I am using: doc\['netflow.last\_switched'\].value-doc\[… --- ## [Delete by query limitation](https://discuss.elastic.co/t/delete-by-query-limitation/198028)
**Author:** [@tom\_es](https://discuss.elastic.co/u/tom_es)\ **Replies:** 1\ **Last updated:** [September 4, 2019, 10:47am UTC](https://discuss.elastic.co/t/delete-by-query-limitation/198028 "2019-09-04T10:47:13Z")
Hi, we have an index with 50 Million docs, and from time to time we would like to purge some of it's data. in order to do that, we would like to use "delete by" query. I was trying to understand what are the limitatio… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1918) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1920)