# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1923 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1924 --- ## [Vega Sankey sorted (ordered composite aggs)](https://discuss.elastic.co/t/vega-sankey-sorted-ordered-composite-aggs/197715)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 1\ **Last updated:** [September 3, 2019, 7:49am UTC](https://discuss.elastic.co/t/vega-sankey-sorted-ordered-composite-aggs/197715 "2019-09-03T07:49:51Z")
Hi there. I'd like to create a Vega Sankey visualization correctly sorted. In fact, I was making such a visualization about traffic from\_ip -\> to\_ip. Problem is, the most frequent ips in the Sankey are not correct. Co… --- ## [Newest ES versions, Java 11 and heap memory size](https://discuss.elastic.co/t/newest-es-versions-java-11-and-heap-memory-size/197353)
**Author:** [@crs](https://discuss.elastic.co/u/crs)\ **Replies:** 4\ **Last updated:** [September 3, 2019, 7:38am UTC](https://discuss.elastic.co/t/newest-es-versions-java-11-and-heap-memory-size/197353 "2019-09-03T07:38:11Z")
Hi, Is there any change in recommenced settings for maximum heap size (\<32GB) since ES now supports Java 11 and G1GC ? I'd be really happy to try with more RAM allocated for heap. Also have question if anybody can poin… --- ## [\[Resolved\]\[ES7.0.1 + Anaconda(python3) + es.bulk API\] How to resolve error 'com.fasterxml.jackson.core.JsonParseException: Unrecognized token 'acknowledged': was expecting ('true', 'false' or 'null')](https://discuss.elastic.co/t/resolved-es7-0-1-anaconda-python3-es-bulk-api-how-to-resolve-error-com-fasterxml-jackson-core-jsonparseexception-unrecognized-token-acknowledged-was-expecting-true-false-or-null/197653)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 1\ **Last updated:** [September 3, 2019, 7:36am UTC](https://discuss.elastic.co/t/resolved-es7-0-1-anaconda-python3-es-bulk-api-how-to-resolve-error-com-fasterxml-jackson-core-jsonparseexception-unrecognized-token-acknowledged-was-expecting-true-false-or-null/197653 "2019-09-03T07:36:57Z")
Hi team, I have below code, but run with error 'com.fasterxml.jackson.core.JsonParseException: Unrecognized token 'acknowledged': was expecting ('true', 'false' or 'null')'. I can't figure out why this error happen? Ho… --- ## [How to parse SAP cfglog, errlog , pcm.log , pcmsrv.log using elasticsearch](https://discuss.elastic.co/t/how-to-parse-sap-cfglog-errlog-pcm-log-pcmsrv-log-using-elasticsearch/197774)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 7:28am UTC](https://discuss.elastic.co/t/how-to-parse-sap-cfglog-errlog-pcm-log-pcmsrv-log-using-elasticsearch/197774 "2019-09-03T07:28:22Z")
Hi, I want to parse cfglog, errlog , pcm.log and pcmsrv.log and store it in elasticsearch. Can you please help me how to parse such logs because i am unable to open such files in text editor also. I am unable to find sp… --- ## [How do i implement elasticsearch scripts in nodejs using elasticsearch npm](https://discuss.elastic.co/t/how-do-i-implement-elasticsearch-scripts-in-nodejs-using-elasticsearch-npm/197773)
**Author:** [@yash.tandon](https://discuss.elastic.co/u/yash.tandon)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 7:15am UTC](https://discuss.elastic.co/t/how-do-i-implement-elasticsearch-scripts-in-nodejs-using-elasticsearch-npm/197773 "2019-09-03T07:15:53Z")
I wanted to maintain a field in my ES doc that maintains the count of every time I make a request to that doc such as an update request. I am unable to make a syntax of a node query. Please help me with this. My query o… --- ## [Logstash container using AWS-S3-output-plugin not shipping logs](https://discuss.elastic.co/t/logstash-container-using-aws-s3-output-plugin-not-shipping-logs/197659)
**Author:** [@KalleDania](https://discuss.elastic.co/u/KalleDania)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 6:30am UTC](https://discuss.elastic.co/t/logstash-container-using-aws-s3-output-plugin-not-shipping-logs/197659 "2019-09-03T06:30:51Z")
Hello all, i hope some friendly soul can help me debug why my setup is not working. First off, the goal: Syslogs --\> Container running Logstash --\> AWS S3 bucket I have the container up and running without errors, howe… --- ## [Encountered a retryable error. Will Retry with exponential backoff code=\>400](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400/197364)
**Author:** [@Thilak](https://discuss.elastic.co/u/Thilak)\ **Replies:** 4\ **Last updated:** [August 30, 2019, 4:39am UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400/197364 "2019-08-30T04:39:21Z")
Hello I was using logstash 7.0.1 while running the below config file i was continuously getting retry-able error (400) input { elasticsearch { hosts =\> \["https://ful-elastic.com:443/\_bulk"\] user =\> "username" passw… --- ## [Correct elasticsearch for google like query](https://discuss.elastic.co/t/correct-elasticsearch-for-google-like-query/197680)
**Author:** [@pd\_tester](https://discuss.elastic.co/u/pd_tester)\ **Replies:** 6\ **Last updated:** [September 3, 2019, 5:21am UTC](https://discuss.elastic.co/t/correct-elasticsearch-for-google-like-query/197680 "2019-09-03T05:21:50Z")
Hi, Can I ask your recommendation on what query should I use for google-like search on documents. Also I need support for special characters. Whenever we use or if special characters are included, our query doesn't retu… --- ## [Logstash config](https://discuss.elastic.co/t/logstash-config/196916)
**Author:** [@ntlong](https://discuss.elastic.co/u/ntlong)\ **Replies:** 7\ **Last updated:** [September 3, 2019, 5:13am UTC](https://discuss.elastic.co/t/logstash-config/196916 "2019-09-03T05:13:36Z")
Hi everyone, I am newbie to elk stack so it would be so kind if you guy could help me. I am able to send log directly to elasticsearch, but when I try to use logstash, i got below error when starting: logstash --path… --- ## [Can someone explain to me the principle of type:text multi-fields?](https://discuss.elastic.co/t/can-someone-explain-to-me-the-principle-of-type-text-multi-fields/197757)
**Author:** [@BainDragneel](https://discuss.elastic.co/u/BainDragneel)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 5:07am UTC](https://discuss.elastic.co/t/can-someone-explain-to-me-the-principle-of-type-text-multi-fields/197757 "2019-09-03T05:07:34Z")
I dynamically insert a new index and import a data (value is String) to it (eg:{"wahahaxixi":"stahd","wahahaxiha":"1235324"} ), but I got total\_index is 4。Why is the automatically generated keyword counted in it? --- ## [How to aggregate two events？](https://discuss.elastic.co/t/how-to-aggregate-two-events/197647)
**Author:** [@wzxmt\_l](https://discuss.elastic.co/u/wzxmt_l)\ **Replies:** 0\ **Last updated:** [September 2, 2019, 6:13am UTC](https://discuss.elastic.co/t/how-to-aggregate-two-events/197647 "2019-09-02T06:13:27Z")
hi ! I need your help?How to aggregate two different events together, they only have one associated field message\_id; I want to aggregate two events with the same message\_id, but I can't understand how to configure it! … --- ## [Where can I get 'Event Received Rate(/s)' data in .monitoring-logstash-\*?](https://discuss.elastic.co/t/where-can-i-get-event-received-rate-s-data-in-monitoring-logstash/197743)
**Author:** [@MyeongJiShin](https://discuss.elastic.co/u/MyeongJiShin)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 12:46am UTC](https://discuss.elastic.co/t/where-can-i-get-event-received-rate-s-data-in-monitoring-logstash/197743 "2019-09-03T00:46:52Z")
Hi, I have a question. I wanna get event data like these from elasticsearch api.(Event Received Rate, Events Emitted Rate, Event Latency) So, I think these datas are right things about in the previous picture. But, … --- ## [Elasticsearch not allowing POST requests](https://discuss.elastic.co/t/elasticsearch-not-allowing-post-requests/197731)
**Author:** [@Keith\_Sanks](https://discuss.elastic.co/u/Keith_Sanks)\ **Replies:** 3\ **Last updated:** [September 3, 2019, 12:22am UTC](https://discuss.elastic.co/t/elasticsearch-not-allowing-post-requests/197731 "2019-09-03T00:22:46Z")
I've run into an issue that Elasticsearch is not allowing POST requests using Postman, even after adding the following: http.cors.enabled: true http.cors.allow-origin: "\*" http.cors.allow-methods: OPTIONS, HEAD, POST,… --- ## [Time format of output](https://discuss.elastic.co/t/time-format-of-output/197643)
**Author:** [@JohnM](https://discuss.elastic.co/u/JohnM)\ **Replies:** 2\ **Last updated:** [September 2, 2019, 11:44pm UTC](https://discuss.elastic.co/t/time-format-of-output/197643 "2019-09-02T23:44:32Z")
In the logstash (ver 7) output I have index =\> "logstash-asterisk-%{+YYYY.MM.dd.HH}" and I was expecting ES (ver 7) makes index something like logstash-asterisk-2019.09.02.15 for 3pm. but when I look at kibana hour s… --- ## [I really need ypur help to my thesis. More\_like\_this and fields](https://discuss.elastic.co/t/i-really-need-ypur-help-to-my-thesis-more-like-this-and-fields/197726)
**Author:** [@eisklat](https://discuss.elastic.co/u/eisklat)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 11:32pm UTC](https://discuss.elastic.co/t/i-really-need-ypur-help-to-my-thesis-more-like-this-and-fields/197726 "2019-09-02T23:32:59Z")
I am using the More\_like\_this query for getting the similarity between medical reports and then put them in a matrix for a university work. The problem is that somehow it is only giving me 10 results instead of all of th… --- ## [Max Date Agg on The same Document for Multiple Fields](https://discuss.elastic.co/t/max-date-agg-on-the-same-document-for-multiple-fields/197737)
**Author:** [@Lucas\_Rezende](https://discuss.elastic.co/u/Lucas_Rezende)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 11:20pm UTC](https://discuss.elastic.co/t/max-date-agg-on-the-same-document-for-multiple-fields/197737 "2019-09-02T23:20:31Z")
Hi there. I have millions of documents with a block like this one: { "useraccountid": 123456, "purchases\_history" : { "last\_updated" : "Sat Apr 27 13:41:46 UTC 2019", "purchases" : \[ { "purchas… --- ## [Kibana 7 screen layout wastes space](https://discuss.elastic.co/t/kibana-7-screen-layout-wastes-space/197720)
**Author:** [@holobolo0815](https://discuss.elastic.co/u/holobolo0815)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 7:21pm UTC](https://discuss.elastic.co/t/kibana-7-screen-layout-wastes-space/197720 "2019-09-02T19:21:36Z")
Nowadays, vertical space on screens is limited anyway since everything is wide-screen. IMHO There is too much space going to waste on the Kibana 7.x Discovery screen. Notice how large parts of the upper right corner (th… --- ## [Translog recovery stuck\[ES 6.0\]](https://discuss.elastic.co/t/translog-recovery-stuck-es-6-0/196658)
**Author:** [@Bukhtawar\_Khan](https://discuss.elastic.co/u/Bukhtawar_Khan)\ **Replies:** 4\ **Last updated:** [September 2, 2019, 6:46pm UTC](https://discuss.elastic.co/t/translog-recovery-stuck-es-6-0/196658 "2019-09-02T18:46:50Z")
It seems that the shard recovery for replica is stuck in translog recovery loop. The recovery stage for index goes through but the translog stage gets stuck at 100% with no activity for 30m causing a shard-failed and the… --- ## [Elasticsearch 7.1x + Java 11: Possible GC misconfiguration](https://discuss.elastic.co/t/elasticsearch-7-1x-java-11-possible-gc-misconfiguration/197709)
**Author:** [@Bruno\_Andrade](https://discuss.elastic.co/u/Bruno_Andrade)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 5:52pm UTC](https://discuss.elastic.co/t/elasticsearch-7-1x-java-11-possible-gc-misconfiguration/197709 "2019-09-02T17:52:28Z")
Hey guys, We're facing some problems with instances going down from time to time with "exiting java.lang.OutOfMemoryError: Java heap space". Currently: Elasticsearch 7.1.1 Java 11 G1GC and default jvm.options config… --- ## [\[ES Gradle Tasks\] Could not find method nebula() for arguments](https://discuss.elastic.co/t/es-gradle-tasks-could-not-find-method-nebula-for-arguments/197719)
**Author:** [@varundbest](https://discuss.elastic.co/u/varundbest)\ **Replies:** 0\ **Last updated:** [September 2, 2019, 4:50pm UTC](https://discuss.elastic.co/t/es-gradle-tasks-could-not-find-method-nebula-for-arguments/197719 "2019-09-02T16:50:54Z")
./gradlew -version ------------------------------------------------------------ Gradle 5.5 ------------------------------------------------------------ Build time: 2019-06-28 17:36:05 UTC Revision: 83820928f3ada1… --- ## [Logstash logs to "logstash" index instead of "logstash-\" after update](https://discuss.elastic.co/t/logstash-logs-to-logstash-index-instead-of-logstash-date-after-update/197717)
**Author:** [@holobolo0815](https://discuss.elastic.co/u/holobolo0815)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 4:48pm UTC](https://discuss.elastic.co/t/logstash-logs-to-logstash-index-instead-of-logstash-date-after-update/197717 "2019-09-02T16:48:55Z")
Hello, I've upgraded without too much hassle from ELK 5.5 across 6.8 to 7.3. Arriving at 7.3 I notice that the index in ES that LS seems to use is "logstash". Why? Why won't it continue writing to the existing logstash… --- ## [How can an unique value of field can be shown in Y-axis](https://discuss.elastic.co/t/how-can-an-unique-value-of-field-can-be-shown-in-y-axis/197530)
**Author:** [@bharath.krishn2](https://discuss.elastic.co/u/bharath.krishn2)\ **Replies:** 2\ **Last updated:** [September 2, 2019, 4:30pm UTC](https://discuss.elastic.co/t/how-can-an-unique-value-of-field-can-be-shown-in-y-axis/197530 "2019-09-02T16:30:02Z")
I'm tracking down the response times of each API call. I'm pushing the response time as a field into an ES index. I need to create a visualization of each API with the date histogram on X-axis and processing time (not … --- ## [Filebeat -\> logstash -\> rabbitmq -\> logstash -\> elasticsearch](https://discuss.elastic.co/t/filebeat-logstash-rabbitmq-logstash-elasticsearch/197695)
**Author:** [@bvoros](https://discuss.elastic.co/u/bvoros)\ **Replies:** 8\ **Last updated:** [September 2, 2019, 4:06pm UTC](https://discuss.elastic.co/t/filebeat-logstash-rabbitmq-logstash-elasticsearch/197695 "2019-09-02T16:06:55Z")
Hello All, I have a configuration described in the subject line and also here. Logs are shipped by filebeat to a logstash which then outputs it to a rabbitmq. All is well with this part, I can intercept messages in ra… --- ## [Parse syslog-ng to elasticsearch and analyze with kibana](https://discuss.elastic.co/t/parse-syslog-ng-to-elasticsearch-and-analyze-with-kibana/197714)
**Author:** [@ravipemmasani](https://discuss.elastic.co/u/ravipemmasani)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 4:00pm UTC](https://discuss.elastic.co/t/parse-syslog-ng-to-elasticsearch-and-analyze-with-kibana/197714 "2019-09-02T16:00:22Z")
Hi, Following is our POC setup. Syslog-ng 3.21-log collector Elasticsearch-7.3-store logs Kibana 7.3-Analyse logs. Syslog-ng collects remote logs fine,but when i Create index pattern,i keep getting Couldn't find any… --- ## [Remove the last character of a string field](https://discuss.elastic.co/t/remove-the-last-character-of-a-string-field/197691)
**Author:** [@saisimo02](https://discuss.elastic.co/u/saisimo02)\ **Replies:** 2\ **Last updated:** [September 2, 2019, 3:11pm UTC](https://discuss.elastic.co/t/remove-the-last-character-of-a-string-field/197691 "2019-09-02T15:11:47Z")
Hello, I have a string field named hostname, when the user have multiple instances I am getting an index in this field. For example hostname looks like: toto1940,toto1941,toto1942. I would like to remove the last elem… --- ## [Facing Issue - Elasticsearch Cluster Setting - 7.2](https://discuss.elastic.co/t/facing-issue-elasticsearch-cluster-setting-7-2/197682)
**Author:** [@amitmjadav](https://discuss.elastic.co/u/amitmjadav)\ **Replies:** 3\ **Last updated:** [September 2, 2019, 2:46pm UTC](https://discuss.elastic.co/t/facing-issue-elasticsearch-cluster-setting-7-2/197682 "2019-09-02T14:46:50Z")
Hi... I have configured 5 node of elasticsearch 7.2.0 Now not able to connect them... They are not discovering them selves.. I have done following setting on each node configuration file. discovery\_hosts : \[node1,nod… --- ## [Can we have 1 master only node and 2 data only node in a 3 nodes cluster](https://discuss.elastic.co/t/can-we-have-1-master-only-node-and-2-data-only-node-in-a-3-nodes-cluster/197662)
**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\ **Replies:** 2\ **Last updated:** [September 2, 2019, 2:46pm UTC](https://discuss.elastic.co/t/can-we-have-1-master-only-node-and-2-data-only-node-in-a-3-nodes-cluster/197662 "2019-09-02T14:46:35Z")
I am using elasticsearch 7.3, I have 3 node in total, i try to have to 1 master only node and 2 data only nodes. But this configuration is not working, but when i also configure other node as master node then it start wo… --- ## [Doc2vec для более релевантного поиска в elastic search](https://discuss.elastic.co/t/doc2vec-elastic-search/194668)
**Author:** [@alexpython](https://discuss.elastic.co/u/alexpython)\ **Replies:** 3\ **Last updated:** [September 2, 2019, 2:18pm UTC](https://discuss.elastic.co/t/doc2vec-elastic-search/194668 "2019-09-02T14:18:46Z")
Доброго времени суток! Уже год настраиваем поиск в ES. Проблема с релевантностью выдачи. У нас есть база с нормативными документами. Одно и тоже слово может означать диаметрально противоположные значения. Например, отпу… --- ## [DATEDIFF EQUIVALENT](https://discuss.elastic.co/t/datediff-equivalent/197701)
**Author:** [@charlinhos](https://discuss.elastic.co/u/charlinhos)\ **Replies:** 0\ **Last updated:** [September 2, 2019, 2:13pm UTC](https://discuss.elastic.co/t/datediff-equivalent/197701 "2019-09-02T14:13:49Z")
I’ve been using elasticsearch to store data and kibana to create dashboards. I want to visualize in the dashboard the date difference between different rows. In the panel above, there is an example of what rows are ret… --- ## [Kibanaに接続するESnodeについて](https://discuss.elastic.co/t/kibana-esnode/197652)
**Author:** [@kapibara824](https://discuss.elastic.co/u/kapibara824)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 2:05pm UTC](https://discuss.elastic.co/t/kibana-esnode/197652 "2019-09-02T14:05:38Z")
現在master3,coordinator1,data5の構成でESクラスタを構築し、実際にクラスタの状態が確認できています。 そこでkibanaを別サーバで立ち上げてelasticsearch.hostsにmaster node3つを入力しましたが、Unable to revive connection: http://localhost:9200/"とでてfailしてしまいます。 kibanaが立ち上がっているサーバではESは動… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1922) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1924)