# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1931 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1932 --- ## [Is it safe for read-only indices to have zero replicas?](https://discuss.elastic.co/t/is-it-safe-for-read-only-indices-to-have-zero-replicas/197237)
**Author:** [@walid](https://discuss.elastic.co/u/walid)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 4:22am UTC](https://discuss.elastic.co/t/is-it-safe-for-read-only-indices-to-have-zero-replicas/197237 "2019-08-29T04:22:12Z")
We have date-partitioned indices (by month), previous months indices are only used for searching, but still hold important data. Would it be safe to remove the replicas for those old indices in terms of data integrity? … --- ## [Modifying response](https://discuss.elastic.co/t/modifying-response/197215)
**Author:** [@haroutk](https://discuss.elastic.co/u/haroutk)\ **Replies:** 7\ **Last updated:** [August 29, 2019, 5:34am UTC](https://discuss.elastic.co/t/modifying-response/197215 "2019-08-29T05:34:13Z")
We have a need to modify the response document(s) from a query before returning it to the user. For example, we might need to rename a document field to a more user-friendly name. I understand that elasticsearch has ex… --- ## [Search query without specifying the field](https://discuss.elastic.co/t/search-query-without-specifying-the-field/197254)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 5:04am UTC](https://discuss.elastic.co/t/search-query-without-specifying-the-field/197254 "2019-08-29T05:04:29Z")
Hi, How do you perform search query without specifying the field, basically to perform search on all fields. I realize that \_all is removed in elasticsearch 7. I tried query\_string with out fields but i get query\_sha… --- ## [Synonym Token Filter questions](https://discuss.elastic.co/t/synonym-token-filter-questions/196705)
**Author:** [@jjarthur](https://discuss.elastic.co/u/jjarthur)\ **Replies:** 9\ **Last updated:** [August 29, 2019, 5:04am UTC](https://discuss.elastic.co/t/synonym-token-filter-questions/196705 "2019-08-29T05:04:43Z")
I am attempting to implement synonyms into my search and ran into a couple of questions. Firstly, I have a synonyms.txt file with the following mappings: foo, bar, baz When "baz" is queried in elasticsearch, it corr… --- ## [Elaasticsearch query to compare a filed value of 2 documents in same index](https://discuss.elastic.co/t/elaasticsearch-query-to-compare-a-filed-value-of-2-documents-in-same-index/197258)
**Author:** [@Harish\_Malu](https://discuss.elastic.co/u/Harish_Malu)\ **Replies:** 0\ **Last updated:** [August 29, 2019, 4:47am UTC](https://discuss.elastic.co/t/elaasticsearch-query-to-compare-a-filed-value-of-2-documents-in-same-index/197258 "2019-08-29T04:47:53Z")
I have written below query to fetch latest two document to get few fields like #processor, allocated\_memory for a particular server. I want to extend the query to compare these fields i.e. #processor, allocated\_memory… --- ## [Regular expression search](https://discuss.elastic.co/t/regular-expression-search/197181)
**Author:** [@elasticg](https://discuss.elastic.co/u/elasticg)\ **Replies:** 2\ **Last updated:** [August 29, 2019, 4:24am UTC](https://discuss.elastic.co/t/regular-expression-search/197181 "2019-08-29T04:24:35Z")
I'm trying to search for a request with search query - request:/api/user//\[0-9a-z\]{24}//status/summary example request: /api/user/\<24CharID\>/status/summary The search result shows any combination of the result. ex: /ap… --- ## [Available ports on a data node?](https://discuss.elastic.co/t/available-ports-on-a-data-node/197238)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 2\ **Last updated:** [August 29, 2019, 4:11am UTC](https://discuss.elastic.co/t/available-ports-on-a-data-node/197238 "2019-08-29T04:11:39Z")
What ports / access need to be open on a data node for it to join a cluster? Im attempting to join a data node to a master but am getting timeouts. From the data node I can get the 'all is well' curl response from port … --- ## [Logstash error Failed to execute action](https://discuss.elastic.co/t/logstash-error-failed-to-execute-action/197234)
**Author:** [@Marcell0e](https://discuss.elastic.co/u/Marcell0e)\ **Replies:** 2\ **Last updated:** [August 29, 2019, 2:15am UTC](https://discuss.elastic.co/t/logstash-error-failed-to-execute-action/197234 "2019-08-29T02:15:57Z")
Hello: I get the following error message when starting logstash. My setup is as follows. Logstash isn't communicating to the Elasticsearch servers because it can't create a pipeline or something. Not sure what I setu… --- ## [Multiple different outputs](https://discuss.elastic.co/t/multiple-different-outputs/197033)
**Author:** [@JohnM](https://discuss.elastic.co/u/JohnM)\ **Replies:** 2\ **Last updated:** [August 28, 2019, 11:58pm UTC](https://discuss.elastic.co/t/multiple-different-outputs/197033 "2019-08-28T23:58:50Z")
We are running logstash to collect syslog and forwarding to ES cluster now which is working fine. /etc/logstash/conf.d/5-listen.conf input { udp { port =\> 514 type =\> syslog } tcp { … --- ## [Watcher report where the range in the report is dynamic](https://discuss.elastic.co/t/watcher-report-where-the-range-in-the-report-is-dynamic/196992)
**Author:** [@ardy561](https://discuss.elastic.co/u/ardy561)\ **Replies:** 9\ **Last updated:** [August 28, 2019, 11:34pm UTC](https://discuss.elastic.co/t/watcher-report-where-the-range-in-the-report-is-dynamic/196992 "2019-08-28T23:34:34Z")
Created a query from a specific index and did the copy url to paste in to a watcher. Everything works except the report returns the same record set. I need to create the report with the previous weeks activity. I've put … --- ## [Convert timestamp format using date filter](https://discuss.elastic.co/t/convert-timestamp-format-using-date-filter/197073)
**Author:** [@Suhee\_Kim](https://discuss.elastic.co/u/Suhee_Kim)\ **Replies:** 2\ **Last updated:** [August 28, 2019, 11:06pm UTC](https://discuss.elastic.co/t/convert-timestamp-format-using-date-filter/197073 "2019-08-28T23:06:25Z")
Hi, I have the following timestamp format Aug 28, 2019 @ 17:51:45.501 and this is the format i want to convert 2019-08-28 08:52:07 how can I convert it? Thank you --- ## [Sorting stacked lines](https://discuss.elastic.co/t/sorting-stacked-lines/196809)
**Author:** [@aquarellian](https://discuss.elastic.co/u/aquarellian)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 10:32pm UTC](https://discuss.elastic.co/t/sorting-stacked-lines/196809 "2019-08-28T22:32:09Z")
I am trying to set up a timelion chart to display latency and I have latency of 2 types: queued and executed - to be stacked up to show total latency. My script has: .es(q="type.keyword:Queued or Executed").lines(width=… --- ## [Why are non shrunk indices smaller than shrunk indices?](https://discuss.elastic.co/t/why-are-non-shrunk-indices-smaller-than-shrunk-indices/197233)
**Author:** [@jmartori](https://discuss.elastic.co/u/jmartori)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 9:50pm UTC](https://discuss.elastic.co/t/why-are-non-shrunk-indices-smaller-than-shrunk-indices/197233 "2019-08-28T21:50:32Z")
Hi everyone, I have been shrinking old indices to reduce the amount of shards in our cluster, and I've noticed that the size of the indices before and after shrinking is not the same. The index size seems to have increa… --- ## [Kibana start problem issue](https://discuss.elastic.co/t/kibana-start-problem-issue/197147)
**Author:** [@akatla](https://discuss.elastic.co/u/akatla)\ **Replies:** 6\ **Last updated:** [August 28, 2019, 9:43pm UTC](https://discuss.elastic.co/t/kibana-start-problem-issue/197147 "2019-08-28T21:43:25Z")
Getting this error when Kibana is started and it won't start - Elasticsearch -OSS and Kibana - OSS version 7.2 FATAL \[index\_not\_found\_exception\] no such index \[.kibana\], with { resource.type="index\_or\_alias" & resour… --- ## [Elasticsearch 7.2 java client SSL configuration failing: bad\_certificate](https://discuss.elastic.co/t/elasticsearch-7-2-java-client-ssl-configuration-failing-bad-certificate/192766)
**Author:** [@Lucas\_montenegro\_car](https://discuss.elastic.co/u/Lucas_montenegro_car)\ **Replies:** 2\ **Last updated:** [August 28, 2019, 9:34pm UTC](https://discuss.elastic.co/t/elasticsearch-7-2-java-client-ssl-configuration-failing-bad-certificate/192766 "2019-08-28T21:34:15Z")
After updating my elasticsearch to 7.2 and updating kibana, and after enabling security and therefore SSL, my java (spring) application lost connection to it. Spring JPA still doesn't support ES 7 and security+SSL was a … --- ## [Getting "Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]"](https://discuss.elastic.co/t/getting-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/197230)
**Author:** [@niudaye123](https://discuss.elastic.co/u/niudaye123)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 9:31pm UTC](https://discuss.elastic.co/t/getting-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/197230 "2019-08-28T21:31:22Z")
Hi, I am keep getting the above error in log of one of my master nodes. But I can run the following health check with no issue. \[root@awselsprdlap01 awselsprdlap01.est1933.com-esnode01\]# curl -u elastic -XGET 'http://a… --- ## [Terminlogy used in Standard deviation in timeseries builder in kibana 7.1.1](https://discuss.elastic.co/t/terminlogy-used-in-standard-deviation-in-timeseries-builder-in-kibana-7-1-1/196865)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 9:04pm UTC](https://discuss.elastic.co/t/terminlogy-used-in-standard-deviation-in-timeseries-builder-in-kibana-7-1-1/196865 "2019-08-28T21:04:28Z")
Hello. I see 4 settings related to standard deviation in timeseries builder. Extended aggregation also returns 4 results. Variance , std\_deviation, std\_deviation\_bounds (upper and lower) GET validation\_result/\_se… --- ## [File format/type for S3 output plugin](https://discuss.elastic.co/t/file-format-type-for-s3-output-plugin/197217)
**Author:** [@Cloud\_enthu](https://discuss.elastic.co/u/Cloud_enthu)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 7:52pm UTC](https://discuss.elastic.co/t/file-format-type-for-s3-output-plugin/197217 "2019-08-28T19:52:34Z")
Can we change the file format/type to JSON or Avro when using the Logstash Amazon S3 output plugin? --- ## [Entire File as "one line"](https://discuss.elastic.co/t/entire-file-as-one-line/197192)
**Author:** [@paiz1556](https://discuss.elastic.co/u/paiz1556)\ **Replies:** 2\ **Last updated:** [August 28, 2019, 7:47pm UTC](https://discuss.elastic.co/t/entire-file-as-one-line/197192 "2019-08-28T19:47:58Z")
Is there a good strategy to read an entire file as the "message" value you would send to ElasticSearch? I see "read" mode as part of file input plugin but that wants me to write the input to a different file. I want… --- ## [Cannot install logstash-input-salesforce](https://discuss.elastic.co/t/cannot-install-logstash-input-salesforce/197210)
**Author:** [@trent.dierking](https://discuss.elastic.co/u/trent.dierking)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 7:47pm UTC](https://discuss.elastic.co/t/cannot-install-logstash-input-salesforce/197210 "2019-08-28T19:47:06Z")
After a fresh install of logstash # /usr/share/logstash/bin/logstash-plugin install --version 3.0.5 --no-verify logstash-input-salesforce Installing logstash-input-salesforce Plugin version conflict, aborting ERROR: Ins… --- ## [Filters continually swap/refresh, hiding mouseover](https://discuss.elastic.co/t/filters-continually-swap-refresh-hiding-mouseover/197187)
**Author:** [@Presto](https://discuss.elastic.co/u/Presto)\ **Replies:** 3\ **Last updated:** [August 28, 2019, 7:42pm UTC](https://discuss.elastic.co/t/filters-continually-swap-refresh-hiding-mouseover/197187 "2019-08-28T19:42:02Z")
Since upgrading to Kibana 7 when I implement 2 or more filters on a dashboard they continually swap order in the filter bar. Each time they do, it seems to refresh the page thus hiding the mouseover tooltip too quickly … --- ## [Get more facets, disregarding the max\_buckets setting?](https://discuss.elastic.co/t/get-more-facets-disregarding-the-max-buckets-setting/197190)
**Author:** [@uprise10](https://discuss.elastic.co/u/uprise10)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 7:35pm UTC](https://discuss.elastic.co/t/get-more-facets-disregarding-the-max-buckets-setting/197190 "2019-08-28T19:35:18Z")
For a price facet (represented by a histogram slider) I'd like to retrieve all my prices of the shop in an aggregated search. However, there is a max of the amount of buckets by the search.max\_buckets setting (10.000 by … --- ## [Does increasing index.highlight.max\_analyzed\_offset to a larger number hurt query performance? If so, how much, and why?](https://discuss.elastic.co/t/does-increasing-index-highlight-max-analyzed-offset-to-a-larger-number-hurt-query-performance-if-so-how-much-and-why/197202)
**Author:** [@jesserwright](https://discuss.elastic.co/u/jesserwright)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 7:33pm UTC](https://discuss.elastic.co/t/does-increasing-index-highlight-max-analyzed-offset-to-a-larger-number-hurt-query-performance-if-so-how-much-and-why/197202 "2019-08-28T19:33:14Z")
When I do a query for to my index, I am getting the following error: "The length of \[field\_21\] field of \[82213\] doc of \[jobs\] index has exceeded \[10000\] - maximum allowed to be analyzed for highlighting. This maximum ca… --- ## [How to load a log file and apply grok filters without using Filebeat](https://discuss.elastic.co/t/how-to-load-a-log-file-and-apply-grok-filters-without-using-filebeat/197185)
**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 7:24pm UTC](https://discuss.elastic.co/t/how-to-load-a-log-file-and-apply-grok-filters-without-using-filebeat/197185 "2019-08-28T19:24:26Z")
How can a log file be loaded, and grok filters in our .conf file applied without using filebeat? In other words, and I manually load a log into logstash and apply our grok filters (as we would in Filebeat)? Thx, Keith :… --- ## [Is elastic free version enough to get logs from different k8s clusters?](https://discuss.elastic.co/t/is-elastic-free-version-enough-to-get-logs-from-different-k8s-clusters/196951)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 5\ **Last updated:** [August 28, 2019, 6:37pm UTC](https://discuss.elastic.co/t/is-elastic-free-version-enough-to-get-logs-from-different-k8s-clusters/196951 "2019-08-28T18:37:43Z")
Hello, We would like to receive logs from several k8s clusters, but I wonder whether this would be possible with free elastic stack version. Please suggest Thanks and regards --- ## [Is it possible to create two index for the same day using logstash templete](https://discuss.elastic.co/t/is-it-possible-to-create-two-index-for-the-same-day-using-logstash-templete/197022)
**Author:** [@RITZ\_VERMA](https://discuss.elastic.co/u/RITZ_VERMA)\ **Replies:** 7\ **Last updated:** [August 28, 2019, 6:14pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-two-index-for-the-same-day-using-logstash-templete/197022 "2019-08-28T18:14:49Z")
I am using logstash to send data elasticsearch on daily basis but the size of the indexes created is too large .that is why i want ot create two index for the same day.is it possible using logstash --- ## [EKS internal load balancer for kibana](https://discuss.elastic.co/t/eks-internal-load-balancer-for-kibana/195955)
**Author:** [@mario-mazo](https://discuss.elastic.co/u/mario-mazo)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 6:03pm UTC](https://discuss.elastic.co/t/eks-internal-load-balancer-for-kibana/195955 "2019-08-28T18:03:33Z")
Hello we are trying to use serviceType LoadBalancer for kibana but it create a public ELB which is not an option for us. How could we add the annotations required like service.beta.kubernetes.io/aws-load-balancer-inte… --- ## [Standard deviation problem](https://discuss.elastic.co/t/standard-deviation-problem/197174)
**Author:** [@Alan\_Home](https://discuss.elastic.co/u/Alan_Home)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 5:49pm UTC](https://discuss.elastic.co/t/standard-deviation-problem/197174 "2019-08-28T17:49:02Z")
I was trying to find something to replace Sumologic's Outlier detection. I thought Standard Deviation might be the answer, but it doesn't look like it's doing what I would expect. I am trying to find if something has a… --- ## [Kubernetes and plugins](https://discuss.elastic.co/t/kubernetes-and-plugins/196935)
**Author:** [@tomma100](https://discuss.elastic.co/u/tomma100)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 5:40pm UTC](https://discuss.elastic.co/t/kubernetes-and-plugins/196935 "2019-08-28T17:40:46Z")
We are a team quite new to Kubernetes. Recently we have created an ECK installation running on Google Kubernetes Engine using the recommended deployment instructions (https://www.elastic.co/elasticsearch-kubernetes). So … --- ## [Difficulties to make a request with elasticsearch](https://discuss.elastic.co/t/difficulties-to-make-a-request-with-elasticsearch/197159)
**Author:** [@JeromeS](https://discuss.elastic.co/u/JeromeS)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 5:32pm UTC](https://discuss.elastic.co/t/difficulties-to-make-a-request-with-elasticsearch/197159 "2019-08-28T17:32:38Z")
Hello, I encounter difficulties to make the request i would like. You will probably need the mapping of my index to understand what i want to do : { "camtest": { "aliases": {}, "mappings": { "propert… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1930) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1932)