# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1922 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1923 --- ## [Logstash output to kafka server](https://discuss.elastic.co/t/logstash-output-to-kafka-server/197710)
**Author:** [@ELK\_CL](https://discuss.elastic.co/u/ELK_CL)\ **Replies:** 7\ **Last updated:** [September 3, 2019, 12:48pm UTC](https://discuss.elastic.co/t/logstash-output-to-kafka-server/197710 "2019-09-03T12:48:15Z")
Hello! I'm running Logstash 7.0.0. It is using a filebeat input to read logs from described files and output is going to kafka. I am getting my logs correctly for some time post starting logstash. Then i get below erro… --- ## [404 error for just /api calls. Nginx as proxy](https://discuss.elastic.co/t/404-error-for-just-api-calls-nginx-as-proxy/196958)
**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\ **Replies:** 9\ **Last updated:** [September 3, 2019, 12:47pm UTC](https://discuss.elastic.co/t/404-error-for-just-api-calls-nginx-as-proxy/196958 "2019-09-03T12:47:08Z")
I'm running Kibana 7.3 behind an Nginx proxy (in Kubernetes) and most things work but the /api calls don't seem to respect the basePath configuration. I set the basePath value and most calls prepend that and work, but … --- ## [Elasticsearch - return result if we have 80% overlap](https://discuss.elastic.co/t/elasticsearch-return-result-if-we-have-80-overlap/197857)
**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 12:37pm UTC](https://discuss.elastic.co/t/elasticsearch-return-result-if-we-have-80-overlap/197857 "2019-09-03T12:37:10Z")
Hello. I am trying to implement a data lookups using Logstash against some threat intelligence database from flowing proxy logs. Basically I am loading documents to ES containing malicious URLs. Then, during the log pr… --- ## [Rollover index API](https://discuss.elastic.co/t/rollover-index-api/197856)
**Author:** [@111204](https://discuss.elastic.co/u/111204)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 12:35pm UTC](https://discuss.elastic.co/t/rollover-index-api/197856 "2019-09-03T12:35:26Z")
I have configured the rollover index API for some indices. For example, the configuration of rollover conditions looks like this: { "conditions": { "max\_age": "7d", "max\_docs": 1000, "max\_size": "5gb" }… --- ## [Migrating from 5.2.2 to 7.3?](https://discuss.elastic.co/t/migrating-from-5-2-2-to-7-3/197815)
**Author:** [@mcdonnell-john](https://discuss.elastic.co/u/mcdonnell-john)\ **Replies:** 5\ **Last updated:** [September 3, 2019, 12:27pm UTC](https://discuss.elastic.co/t/migrating-from-5-2-2-to-7-3/197815 "2019-09-03T12:27:46Z")
Hi, I've been asked to investigate what I thought was an upgrade of ElasticSearch/Kibana solution(both running on Docker) from a 5.2.2 instance to a 7.3. I was looking at the upgrade instructions for ElasticSearch, and… --- ## [Find master ID](https://discuss.elastic.co/t/find-master-id/197844)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 1\ **Last updated:** [September 3, 2019, 12:17pm UTC](https://discuss.elastic.co/t/find-master-id/197844 "2019-09-03T12:17:25Z")
I am using elastic 7.2 and HighLevelRestClient in my JAVA project. How can I find the master node using the client? Something like \_cat/master in the Elastic REST API --- ## [(IOException while reading synonyms\_path\_path) synonym token filter configuration](https://discuss.elastic.co/t/ioexception-while-reading-synonyms-path-path-synonym-token-filter-configuration/197764)
**Author:** [@Meet\_Chaudhary](https://discuss.elastic.co/u/Meet_Chaudhary)\ **Replies:** 1\ **Last updated:** [September 3, 2019, 12:16pm UTC](https://discuss.elastic.co/t/ioexception-while-reading-synonyms-path-path-synonym-token-filter-configuration/197764 "2019-09-03T12:16:03Z")
I am using synonyms token filter with custom file installed elasticsearch 6.7 as a service on windows 10 machine my "synonyms.txt" is located at "C:\\ProgramData\\Elastic\\Elasticsearch\\config\\analysis\\synonyms.txt" here… --- ## ["No results match your search criteria" error while there is data](https://discuss.elastic.co/t/no-results-match-your-search-criteria-error-while-there-is-data/195753)
**Author:** [@electrical1](https://discuss.elastic.co/u/electrical1)\ **Replies:** 15\ **Last updated:** [September 3, 2019, 11:51am UTC](https://discuss.elastic.co/t/no-results-match-your-search-criteria-error-while-there-is-data/195753 "2019-09-03T11:51:54Z")
Hi, Not sure if its completely a Kibana issue but for some reason its not showing any data using the "discover" part. In the "index patterns" the index has been setup with a specific date field to be used for any time … --- ## [解壓縮kibana-7.2.0-windows-x86\_64失敗](https://discuss.elastic.co/t/kibana-7-2-0-windows-x86-64/197842)
**Author:** [@111203](https://discuss.elastic.co/u/111203)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 11:49am UTC](https://discuss.elastic.co/t/kibana-7-2-0-windows-x86-64/197842 "2019-09-03T11:49:23Z")
解壓縮kibana-7.2.0-windows-x86\_64發生以下失敗畫面 似乎是防毒Symantec不允許.mirco結尾的folder， 想請問有人也遇過此問題嗎? 我把防毒關閉了，也還是不行。 --- ## [PoC - Use ELK to aggregate multiple LogInsight Systems into one SOC](https://discuss.elastic.co/t/poc-use-elk-to-aggregate-multiple-loginsight-systems-into-one-soc/196615)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 11:45am UTC](https://discuss.elastic.co/t/poc-use-elk-to-aggregate-multiple-loginsight-systems-into-one-soc/196615 "2019-09-03T11:45:16Z")
I've personally in the last 3-4 years been using Grafana+ELK for Log&Metric monitoring in running a large application platform, but have now changed internally to a position in Security & Operation Automation and are her… --- ## [Unable to start Elasticsearch instance. It says Out of Memory error](https://discuss.elastic.co/t/unable-to-start-elasticsearch-instance-it-says-out-of-memory-error/197754)
**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\ **Replies:** 4\ **Last updated:** [September 3, 2019, 10:25am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-instance-it-says-out-of-memory-error/197754 "2019-09-03T10:25:57Z")
Hi All, I am facing a serious error in my elasticsearch instance. Before I start explaining what is the error. I want to give a short info about current ecosystem i am playing with. So we have a test server(LINUX) with… --- ## [Can't reach Kibana on localhost](https://discuss.elastic.co/t/cant-reach-kibana-on-localhost/197811)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 11:09am UTC](https://discuss.elastic.co/t/cant-reach-kibana-on-localhost/197811 "2019-09-03T11:09:24Z")
Hey there, I took the Eng I and II courses and now wanted to go through the labs on my local machine again to prepare for the certification. I set up a VM with an ubuntu server on VMware in NAT mode (but bridged doesn'… --- ## [Why this range query on nested object returns uncorrect data?](https://discuss.elastic.co/t/why-this-range-query-on-nested-object-returns-uncorrect-data/197015)
**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\ **Replies:** 20\ **Last updated:** [August 28, 2019, 9:07pm UTC](https://discuss.elastic.co/t/why-this-range-query-on-nested-object-returns-uncorrect-data/197015 "2019-08-28T21:07:38Z")
GET bliad7/\_search { "query": {"range": { "prices.price": { "gte": 500, "lte": 600 } }} } mapping "Price" : { "type" : "nested", "properties" : { "Price" : { "type" : "double" } } }, --- ## [Cat indices API get 0 doc count index](https://discuss.elastic.co/t/cat-indices-api-get-0-doc-count-index/197769)
**Author:** [@pd\_tester](https://discuss.elastic.co/u/pd_tester)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 11:02am UTC](https://discuss.elastic.co/t/cat-indices-api-get-0-doc-count-index/197769 "2019-09-03T11:02:25Z")
Hi everyone, Is it possible to have one ES call for retrieving indices with zero doc count? Scenario is we want to delete all indices with zero doc count. Is this possible in one go? Thank you --- ## [Separating the log file fields using grok debugger](https://discuss.elastic.co/t/separating-the-log-file-fields-using-grok-debugger/197826)
**Author:** [@gr1sha](https://discuss.elastic.co/u/gr1sha)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 10:56am UTC](https://discuss.elastic.co/t/separating-the-log-file-fields-using-grok-debugger/197826 "2019-09-03T10:56:45Z")
Hi there! I have logs being fed to elasticsearch index and one of the fields I have is a "message" field which contains information about particular event in live fashion. What I am trying to do is dissect this message i… --- ## [Custom analyzer to handle the aliases so that string can be searched](https://discuss.elastic.co/t/custom-analyzer-to-handle-the-aliases-so-that-string-can-be-searched/197822)
**Author:** [@vinayak](https://discuss.elastic.co/u/vinayak)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 10:37am UTC](https://discuss.elastic.co/t/custom-analyzer-to-handle-the-aliases-so-that-string-can-be-searched/197822 "2019-09-03T10:37:16Z")
{ "type" : "File", "scope" : "Business", "item" : "NAV", "object1" : "VCS\_FA\_NAV", "object2" : "VCS\_TRADE\_TRANSCATION", "query" : "LEFT OUTER JOIN VCS\_TRADE\_TRA… --- ## [Update format for an existing field of date type](https://discuss.elastic.co/t/update-format-for-an-existing-field-of-date-type/197787)
**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\ **Replies:** 3\ **Last updated:** [September 3, 2019, 10:31am UTC](https://discuss.elastic.co/t/update-format-for-an-existing-field-of-date-type/197787 "2019-09-03T10:31:53Z")
I currently use ElasticSearch 7.2.0. I followed the instructions here to update the format of an existing field of date type: { "mappings": { "properties": { "TimeStamp": { "type": "date", … --- ## [Create a service now ticket whenever an anomaly is detected in the logs](https://discuss.elastic.co/t/create-a-service-now-ticket-whenever-an-anomaly-is-detected-in-the-logs/197819)
**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 10:27am UTC](https://discuss.elastic.co/t/create-a-service-now-ticket-whenever-an-anomaly-is-detected-in-the-logs/197819 "2019-09-03T10:27:49Z")
Hi There, I am using ELK setup to monitor syslogs and application logs for anomaly detection in logs so I want to create a service now ticket whenever an anomaly is detected, so I was wondering if I can use watcher, ela… --- ## [Data \[All message fields \] are not visible on kibana 7 to drill down on pie chart](https://discuss.elastic.co/t/data-all-message-fields-are-not-visible-on-kibana-7-to-drill-down-on-pie-chart/197708)
**Author:** [@Milind\_Kaklij](https://discuss.elastic.co/u/Milind_Kaklij)\ **Replies:** 3\ **Last updated:** [September 3, 2019, 10:21am UTC](https://discuss.elastic.co/t/data-all-message-fields-are-not-visible-on-kibana-7-to-drill-down-on-pie-chart/197708 "2019-09-03T10:21:09Z")
Hi Experts, I am using kibana-7.3.1 .My custom JSON gets stored in elastic search inside 'message' field, and I want to draw pie chart based on these fields .but issue is I can't see those custom JSON fields on KIBANA … --- ## [What does 'IllegalStateException \[unexpected byte' error on transport client denotes?](https://discuss.elastic.co/t/what-does-illegalstateexception-unexpected-byte-error-on-transport-client-denotes/197396)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 9:55am UTC](https://discuss.elastic.co/t/what-does-illegalstateexception-unexpected-byte-error-on-transport-client-denotes/197396 "2019-09-03T09:55:06Z")
I am trying to upgrade elasticsearch from 2.3.1. I have a custom search plugin which I have rewritten. I have installed the plugin in elasticsearch and all my queries are running fine with the node client (for testing).… --- ## [Can integer types be effectively used for routing fields?](https://discuss.elastic.co/t/can-integer-types-be-effectively-used-for-routing-fields/197705)
**Author:** [@IanRC72](https://discuss.elastic.co/u/IanRC72)\ **Replies:** 4\ **Last updated:** [September 3, 2019, 9:50am UTC](https://discuss.elastic.co/t/can-integer-types-be-effectively-used-for-routing-fields/197705 "2019-09-03T09:50:59Z")
I have searched the docs and Googled, but have not found a definitive answer. My questions: Can an integer field be used for routing? If yes, does the integer size have much significance on the distribution (this is a… --- ## [Is their any way using which i can restrict the number of children doc in my parent-child mapping in elasticsearch?](https://discuss.elastic.co/t/is-their-any-way-using-which-i-can-restrict-the-number-of-children-doc-in-my-parent-child-mapping-in-elasticsearch/197805)
**Author:** [@yash.tandon](https://discuss.elastic.co/u/yash.tandon)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 9:44am UTC](https://discuss.elastic.co/t/is-their-any-way-using-which-i-can-restrict-the-number-of-children-doc-in-my-parent-child-mapping-in-elasticsearch/197805 "2019-09-03T09:44:35Z")
Please help me solve this scenario. --- ## [Cannot list index created by fluentd](https://discuss.elastic.co/t/cannot-list-index-created-by-fluentd/197789)
**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\ **Replies:** 1\ **Last updated:** [September 3, 2019, 9:41am UTC](https://discuss.elastic.co/t/cannot-list-index-created-by-fluentd/197789 "2019-09-03T09:41:59Z")
Hi, I am using fluentd HTTP adapter to receive json data and dump it in elasticsearch. I can see packets are reaching elastic in n/w sniffer and there is no error in fluentd and elasticsearch log. But still I am unable… --- ## [How fields can be converted](https://discuss.elastic.co/t/how-fields-can-be-converted/197803)
**Author:** [@shenshensinian](https://discuss.elastic.co/u/shenshensinian)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 9:34am UTC](https://discuss.elastic.co/t/how-fields-can-be-converted/197803 "2019-09-03T09:34:03Z")
How to convert grok into time in the format below? date=2016-02-18 time=16:59:42 log\_id=20000 Like what：2016-02-18 16:59:42 --- ## [Updating a document with elasticsearchjs using typescript throws error](https://discuss.elastic.co/t/updating-a-document-with-elasticsearchjs-using-typescript-throws-error/197798)
**Author:** [@manish\_kakoti](https://discuss.elastic.co/u/manish_kakoti)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 8:59am UTC](https://discuss.elastic.co/t/updating-a-document-with-elasticsearchjs-using-typescript-throws-error/197798 "2019-09-03T08:59:51Z")
I tried updating a document using elasticsearchjs, using: export async function esUpdate (index, id, body) { return es.update({ body: JSON.stringify(body), id, index, refresh: true, type: DocTyp… --- ## [What visualization you would use?](https://discuss.elastic.co/t/what-visualization-you-would-use/197176)
**Author:** [@ea1987](https://discuss.elastic.co/u/ea1987)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 8:41am UTC](https://discuss.elastic.co/t/what-visualization-you-would-use/197176 "2019-09-03T08:41:40Z")
Hi guys, I would like to create a chart which would help user to identify correlation, over time, between these 2 different data types: system load average of web service response ti Since they works on different dat… --- ## [Index template update overrides mapping](https://discuss.elastic.co/t/index-template-update-overrides-mapping/197784)
**Author:** [@somi](https://discuss.elastic.co/u/somi)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 8:30am UTC](https://discuss.elastic.co/t/index-template-update-overrides-mapping/197784 "2019-09-03T08:30:53Z")
Hello all, I am trying to update default apm index template's settings field by sending PUT request to the \_template endpoint. My problem is that the request overrides the mappings field as well, hence, I loose the defa… --- ## [Timestamp shifting problem](https://discuss.elastic.co/t/timestamp-shifting-problem/197657)
**Author:** [@tunigas](https://discuss.elastic.co/u/tunigas)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 8:22am UTC](https://discuss.elastic.co/t/timestamp-shifting-problem/197657 "2019-09-03T08:22:25Z")
Hello, I'm using these lines in my logstash.conf to configure the timestamp. grok { match =\> { "message" =\>"%{TIMESTAMP\_ISO8601:timestamp}\\s ..." } } date { match =\> \[ "timestamp", "YYYY-mm-dd HH:MM:… --- ## [APM index not refreshing](https://discuss.elastic.co/t/apm-index-not-refreshing/195884)
**Author:** [@philippkahr](https://discuss.elastic.co/u/philippkahr)\ **Replies:** 8\ **Last updated:** [September 3, 2019, 8:18am UTC](https://discuss.elastic.co/t/apm-index-not-refreshing/195884 "2019-09-03T08:18:18Z")
Hello, I am having troubles with using visualizations for data that does not have any index mapping. I am not able to refresh the index in Kibana. If I hit the refresh page it just stays at 370 fields. I even deleted t… --- ## [MariaDB Slow log Query not retrieve in Kibana](https://discuss.elastic.co/t/mariadb-slow-log-query-not-retrieve-in-kibana/197779)
**Author:** [@Ritesh\_Pradhan](https://discuss.elastic.co/u/Ritesh_Pradhan)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 7:59am UTC](https://discuss.elastic.co/t/mariadb-slow-log-query-not-retrieve-in-kibana/197779 "2019-09-03T07:59:21Z")
Hi Elasticsearch Team, I install kibana in a custom path to ubuntu 16.04 in /opt/test/ folder and we are getting all error but slow log query does not retrieve to kibana UI Dashboard and Discover. [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1921) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1923)