# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1937

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1938

---

## [Problem ingesting PDF](https://discuss.elastic.co/t/problem-ingesting-pdf/196811)

<div class="topic-metadata">

**Author:** [@jtgajda](https://discuss.elastic.co/u/jtgajda)\
**Replies:** 0\
**Last updated:** [August 26, 2019, 4:40pm UTC](https://discuss.elastic.co/t/problem-ingesting-pdf/196811 "2019-08-26T16:40:15Z")

</div>

I have installed Elasticsearch 7.3 and am trying to index pdf files using the ingest-attachement plug-in and python to convert the pdf to base64 and the request library to load the data. I am able to successfully create …

---

## [S3 input with multiple log types](https://discuss.elastic.co/t/s3-input-with-multiple-log-types/196810)

<div class="topic-metadata">

**Author:** [@uma\_rengasamy](https://discuss.elastic.co/u/uma_rengasamy)\
**Replies:** 0\
**Last updated:** [August 26, 2019, 4:27pm UTC](https://discuss.elastic.co/t/s3-input-with-multiple-log-types/196810 "2019-08-26T16:27:55Z")

</div>

Does input supports multiple codec , since we have multiple log type in single s3 bucket and s3 prefix doesn't support regex , How can we add type for each logs ?

---

## [Performance optimisation for Time based indexes](https://discuss.elastic.co/t/performance-optimisation-for-time-based-indexes/196807)

<div class="topic-metadata">

**Author:** [@Vivek\_Vardhan](https://discuss.elastic.co/u/Vivek_Vardhan)\
**Replies:** 0\
**Last updated:** [August 26, 2019, 4:22pm UTC](https://discuss.elastic.co/t/performance-optimisation-for-time-based-indexes/196807 "2019-08-26T16:22:04Z")

</div>

Hi Team I am building an elastic search (6.6.1) cluster (deployed on Azure Kubernetes), with my current config is - Data Volume 25 GB per day (with 1 month of retention ) Search scenarios (dashboards only few aggregat…

---

## [ELK migration 6.8 to 7.3 lost daily index creation](https://discuss.elastic.co/t/elk-migration-6-8-to-7-3-lost-daily-index-creation/196784)

<div class="topic-metadata">

**Author:** [@tim](https://discuss.elastic.co/u/tim)\
**Replies:** 1\
**Last updated:** [August 26, 2019, 4:21pm UTC](https://discuss.elastic.co/t/elk-migration-6-8-to-7-3-lost-daily-index-creation/196784 "2019-08-26T16:21:19Z")

</div>

Prior to migration to 7.3, daily indexes were auto created. After migration to 7.3, my first week on 7.3 is in a single index. My logstash output file : output { elasticsearch { hosts =\> \["logstash-2.xxx.xxx:9200"\] …

---

## [Error from server (NotFound): services "quickstart-es-http" not found](https://discuss.elastic.co/t/error-from-server-notfound-services-quickstart-es-http-not-found/193658)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 18\
**Last updated:** [August 26, 2019, 4:01pm UTC](https://discuss.elastic.co/t/error-from-server-notfound-services-quickstart-es-http-not-found/193658 "2019-08-26T16:01:05Z")

</div>

Hello World! I'm trying to follow: #### Request Elasticsearch access yet, running into following error: $ kubectl get service quickstart-es-http Error from server (NotFound): services "quickstart-es-http" not found $ …

---

## [Logstash Configuration error - logstash shut down](https://discuss.elastic.co/t/logstash-configuration-error-logstash-shut-down/196801)

<div class="topic-metadata">

**Author:** [@deemanu](https://discuss.elastic.co/u/deemanu)\
**Replies:** 1\
**Last updated:** [August 26, 2019, 3:37pm UTC](https://discuss.elastic.co/t/logstash-configuration-error-logstash-shut-down/196801 "2019-08-26T15:37:15Z")

</div>

Hi , I am trying to parse a log line (log file customized by me ) but there is some error msg Sending Logstash logs to C:/Users/mau/Desktop/ELK/logstash-7.3.0/logs which is now configured via log4j2.properties \[2019-08…

---

## [Kibana-6-4-0-showing-unexpected-page](https://discuss.elastic.co/t/kibana-6-4-0-showing-unexpected-page/196448)

<div class="topic-metadata">

**Author:** [@shiveshabhishek](https://discuss.elastic.co/u/shiveshabhishek)\
**Replies:** 3\
**Last updated:** [August 26, 2019, 3:24pm UTC](https://discuss.elastic.co/t/kibana-6-4-0-showing-unexpected-page/196448 "2019-08-26T15:24:50Z")

</div>

This is with reference to the existing issue I've posted earlier(https://discuss.elastic.co/t/kibana-6-4-0-showing-unexpected-page/179329). I did not get the solution yet so asking for the same. By any chance, can this s…

---

## [Elasticsearch index policy no effect](https://discuss.elastic.co/t/elasticsearch-index-policy-no-effect/196548)

<div class="topic-metadata">

**Author:** [@rdpusc](https://discuss.elastic.co/u/rdpusc)\
**Replies:** 2\
**Last updated:** [August 26, 2019, 3:23pm UTC](https://discuss.elastic.co/t/elasticsearch-index-policy-no-effect/196548 "2019-08-26T15:23:11Z")

</div>

Elasticsearch index policy no effect index is days old and 5m docs. I checked and it looks like the policy is assigned to the index and I restarted the elasticsearch service

---

## [Understanding field limit across index pattern and solution to mapping explosion](https://discuss.elastic.co/t/understanding-field-limit-across-index-pattern-and-solution-to-mapping-explosion/196262)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 4\
**Last updated:** [August 26, 2019, 3:22pm UTC](https://discuss.elastic.co/t/understanding-field-limit-across-index-pattern-and-solution-to-mapping-explosion/196262 "2019-08-26T15:22:20Z")

</div>

Hi, elasticsearch and kibana version: 7.0 We are experiencing mapping explosion with number of fields upto 4500 and increasing. Then the first thing which came to our mind was to implement nested fields to reduce the n…

---

## [Kibana: "No living connections"](https://discuss.elastic.co/t/kibana-no-living-connections/196567)

<div class="topic-metadata">

**Author:** [@jonaspreisler](https://discuss.elastic.co/u/jonaspreisler)\
**Replies:** 6\
**Last updated:** [August 26, 2019, 3:21pm UTC](https://discuss.elastic.co/t/kibana-no-living-connections/196567 "2019-08-26T15:21:32Z")

</div>

I added Elasticsearch locally and to my Ubuntu server. Now I downloaded Kibana and try to open it with 'bin/kibana'. I try to visit http://localhost:5601/ and get a huge list that keeps growing until I press 'ctrl + c'…

---

## [Elastic in kubernetes - how to gracefully shutdown](https://discuss.elastic.co/t/elastic-in-kubernetes-how-to-gracefully-shutdown/196373)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 3\
**Last updated:** [August 26, 2019, 3:20pm UTC](https://discuss.elastic.co/t/elastic-in-kubernetes-how-to-gracefully-shutdown/196373 "2019-08-26T15:20:56Z")

</div>

5 data nodes, 5 ingest nodes and a master (+ kibana) running in kubernetes. Looking for a way to tell elastic to close indexes and put away all of its stuff so I can work on k8. If I just kill it outright when it gets r…

---

## [Elastic search automatically stopped after](https://discuss.elastic.co/t/elastic-search-automatically-stopped-after/196797)

<div class="topic-metadata">

**Author:** [@Balaji\_Ramachandran](https://discuss.elastic.co/u/Balaji_Ramachandran)\
**Replies:** 2\
**Last updated:** [August 26, 2019, 3:05pm UTC](https://discuss.elastic.co/t/elastic-search-automatically-stopped-after/196797 "2019-08-26T15:05:44Z")

</div>

Hi, We are trying to enable elasticsearch 7.3 using ubuntu 16.04, but after 30 seconds, the service gets automatically stopped. This issue happens while setting up to a specific bind network address to 0.0.0.0. Here I h…

---

## [Grokking works in debugger but differs in Logstash](https://discuss.elastic.co/t/grokking-works-in-debugger-but-differs-in-logstash/196793)

<div class="topic-metadata">

**Author:** [@naveenrt23](https://discuss.elastic.co/u/naveenrt23)\
**Replies:** 2\
**Last updated:** [August 26, 2019, 2:48pm UTC](https://discuss.elastic.co/t/grokking-works-in-debugger-but-differs-in-logstash/196793 "2019-08-26T14:48:11Z")

</div>

Hello, I'm using a regex which would remove the first word and parse the rest. grok { match =\> { "resource" =\> "/\[^/\]+(/|)(?\<repo\>\[^/\]+)?(/%{GREEDYDATA:resource\_path})?" } } Test Messages: /list/Lighter-t…

---

## [What happens if primary shard fail during publication?](https://discuss.elastic.co/t/what-happens-if-primary-shard-fail-during-publication/195599)

<div class="topic-metadata">

**Author:** [@lotabout](https://discuss.elastic.co/u/lotabout)\
**Replies:** 3\
**Last updated:** [August 26, 2019, 2:47pm UTC](https://discuss.elastic.co/t/what-happens-if-primary-shard-fail-during-publication/195599 "2019-08-26T14:47:17Z")

</div>

As I understand ES's synchronization is kind of like 2 Phase Commit(2PC) and the problem of 2PC is when the "master" node fails during commit. Quote from Github Reply: An indexing request goes through the following pr…

---

## [Kibana 7.3.0 fails on import of objects exported with 7.2.1](https://discuss.elastic.co/t/kibana-7-3-0-fails-on-import-of-objects-exported-with-7-2-1/196114)

<div class="topic-metadata">

**Author:** [@micha\_m](https://discuss.elastic.co/u/micha_m)\
**Replies:** 2\
**Last updated:** [August 26, 2019, 2:37pm UTC](https://discuss.elastic.co/t/kibana-7-3-0-fails-on-import-of-objects-exported-with-7-2-1/196114 "2019-08-26T14:37:12Z")

</div>

I exported some objects (index patterns and visualisations) with all dependencies in Kibana 7.2.1 in ndjson format. Trying to import these files as saved objects in Kibana 7.3.0 failed with message "Sorry, there was an e…

---

## [Need help to parse xml file with logstash](https://discuss.elastic.co/t/need-help-to-parse-xml-file-with-logstash/196464)

<div class="topic-metadata">

**Author:** [@ROok](https://discuss.elastic.co/u/ROok)\
**Replies:** 11\
**Last updated:** [August 26, 2019, 2:30pm UTC](https://discuss.elastic.co/t/need-help-to-parse-xml-file-with-logstash/196464 "2019-08-26T14:30:10Z")

</div>

Hi All, I need help for parsing my xml file My xml file look like this: \<UserList\> \<User statefile='10'\> \<UserAt atName='NUMBER'\>3312348555\</UserAt\> \<UserAt atName='ID'\>308014204145695\</UserAt\> …

---

## [Non-Integer Data Types in my Data... How to make a Visualization?](https://discuss.elastic.co/t/non-integer-data-types-in-my-data-how-to-make-a-visualization/196375)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 11\
**Last updated:** [August 26, 2019, 2:20pm UTC](https://discuss.elastic.co/t/non-integer-data-types-in-my-data-how-to-make-a-visualization/196375 "2019-08-26T14:20:39Z")

</div>

Hi Kibana Gurus, I’m a hardcore network guy trying to learn Kibana from scratch, and I’m having a tough time. In my Elasticsearch, I have a repository of network data. When in Kibana, I can see the data and all the in…

---

## [Optimize server performance](https://discuss.elastic.co/t/optimize-server-performance/195657)

<div class="topic-metadata">

**Author:** [@jgimenez](https://discuss.elastic.co/u/jgimenez)\
**Replies:** 2\
**Last updated:** [August 26, 2019, 2:18pm UTC](https://discuss.elastic.co/t/optimize-server-performance/195657 "2019-08-26T14:18:44Z")

</div>

Hi, I'm running an Elasticsearch cluster and I'm not sure we're maximizing the usage of server resources. When bulk-indexing at maximum speed, CPU, disk I/O and garbage collection seem all pretty low, yet Elasticsearch r…

---

## [Duplicate IDs across rollover indices](https://discuss.elastic.co/t/duplicate-ids-across-rollover-indices/196388)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 5\
**Last updated:** [August 26, 2019, 2:18pm UTC](https://discuss.elastic.co/t/duplicate-ids-across-rollover-indices/196388 "2019-08-26T14:18:15Z")

</div>

I am ingesting data into a rollover index. The data comes from an API and gives updates on previously ingested events. Each event has a field that is unique and I am using this as the document ID. However, I've come a…

---

## [Unable to connect to elasticsearch after upgrading to 7.3.0](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-after-upgrading-to-7-3-0/193611)

<div class="topic-metadata">

**Author:** [@jxz](https://discuss.elastic.co/u/jxz)\
**Replies:** 4\
**Last updated:** [August 26, 2019, 2:13pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-after-upgrading-to-7-3-0/193611 "2019-08-26T14:13:53Z")

</div>

I upgraded to elastisearch 7.3.0 on Windows and the service is running. With the default elasticsearch.yml, I am able to connect to localhost:9200 but I cannot connect to it with IpAddress:9200 on the local machine or fr…

---

## [Can we use another database with same table after sync is completed in Elasticsearch using Logstash](https://discuss.elastic.co/t/can-we-use-another-database-with-same-table-after-sync-is-completed-in-elasticsearch-using-logstash/196790)

<div class="topic-metadata">

**Author:** [@subhashpurohit](https://discuss.elastic.co/u/subhashpurohit)\
**Replies:** 0\
**Last updated:** [August 26, 2019, 2:12pm UTC](https://discuss.elastic.co/t/can-we-use-another-database-with-same-table-after-sync-is-completed-in-elasticsearch-using-logstash/196790 "2019-08-26T14:12:21Z")

</div>

I have imported all the data from a table in postgres master database to Elasticsearch using Logstash JDBC plugin. Now I want to use one of my slave database which have only read permission. I am not sure if I will chan…

---

## [Slow date\_histogram after upgrading to 7.3.0 on "dense" indexes](https://discuss.elastic.co/t/slow-date-histogram-after-upgrading-to-7-3-0-on-dense-indexes/196475)

<div class="topic-metadata">

**Author:** [@Bertrand](https://discuss.elastic.co/u/Bertrand)\
**Replies:** 7\
**Last updated:** [August 26, 2019, 2:09pm UTC](https://discuss.elastic.co/t/slow-date-histogram-after-upgrading-to-7-3-0-on-dense-indexes/196475 "2019-08-26T14:09:28Z")

</div>

Hi there, We noticed a serious performance degradation of date\_histogram aggregations on our cluster after migrating from ES 6.8.2 to 7.3.0. Queries are at least 2 times slower with 7.3.0. We managed to reproduce the i…

---

## [Assistance with grokparsefailure](https://discuss.elastic.co/t/assistance-with-grokparsefailure/196720)

<div class="topic-metadata">

**Author:** [@unknown\_user](https://discuss.elastic.co/u/unknown_user)\
**Replies:** 2\
**Last updated:** [August 26, 2019, 2:06pm UTC](https://discuss.elastic.co/t/assistance-with-grokparsefailure/196720 "2019-08-26T14:06:54Z")

</div>

Hi All, Very new to using logstash, so would appreciate any help. Would would be the best way to parse this file? I'm still getting some grokparsefailures but it is picking up everything except besides the "cpu" which …

---

## [Some confusion about translog](https://discuss.elastic.co/t/some-confusion-about-translog/195592)

<div class="topic-metadata">

**Author:** [@KellyK313](https://discuss.elastic.co/u/KellyK313)\
**Replies:** 5\
**Last updated:** [August 26, 2019, 2:05pm UTC](https://discuss.elastic.co/t/some-confusion-about-translog/195592 "2019-08-26T14:05:32Z")

</div>

Hello everyone，I have known that "index.translog.durability" make the data from page cache fsync to translog file,but what is the mechanism about fsync the data from page cache to segment file?Is it controlled by OS not …

---

## [Elasticsearch failed immediately](https://discuss.elastic.co/t/elasticsearch-failed-immediately/196777)

<div class="topic-metadata">

**Author:** [@rvb\_n](https://discuss.elastic.co/u/rvb_n)\
**Replies:** 1\
**Last updated:** [August 26, 2019, 2:02pm UTC](https://discuss.elastic.co/t/elasticsearch-failed-immediately/196777 "2019-08-26T14:02:19Z")

</div>

\[6:49 PM\] Keerthi B R org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: cannot downgrade a node from version \[7.3.1\] to version \[7.3.0\] at org.elasticsearch.bootstrap.Elasticsearch.init(Ela…

---

## [Convert array with 2 equal values to single value](https://discuss.elastic.co/t/convert-array-with-2-equal-values-to-single-value/196763)

<div class="topic-metadata">

**Author:** [@programagor](https://discuss.elastic.co/u/programagor)\
**Replies:** 3\
**Last updated:** [August 26, 2019, 2:02pm UTC](https://discuss.elastic.co/t/convert-array-with-2-equal-values-to-single-value/196763 "2019-08-26T14:02:05Z")

</div>

Greetings My events sometimes have a field "foo" equal to a single value, sometimes an array of multiple distinct values, and sometimes an array of exactly two equal values. I would like to convert the last case to the…

---

## [How to create visualization in kibana](https://discuss.elastic.co/t/how-to-create-visualization-in-kibana/196768)

<div class="topic-metadata">

**Author:** [@sagar.it01](https://discuss.elastic.co/u/sagar.it01)\
**Replies:** 1\
**Last updated:** [August 26, 2019, 2:01pm UTC](https://discuss.elastic.co/t/how-to-create-visualization-in-kibana/196768 "2019-08-26T14:01:49Z")

</div>

I am using kibana first time need some help regarding how to select visualization and create it for particular data. I have following json data and I want to create visualization chart. "serverconfig" : { "properties"…

---

## [Data table issue](https://discuss.elastic.co/t/data-table-issue/196762)

<div class="topic-metadata">

**Author:** [@dharani](https://discuss.elastic.co/u/dharani)\
**Replies:** 1\
**Last updated:** [August 26, 2019, 2:01pm UTC](https://discuss.elastic.co/t/data-table-issue/196762 "2019-08-26T14:01:35Z")

</div>

Continuing the discussion from Kibana data table issue: how to resolve this without using TDSV any other solution to this. Thanks, Dharanidhar

---

## [Logstash 7.3. ruby undefined method split](https://discuss.elastic.co/t/logstash-7-3-ruby-undefined-method-split/196778)

<div class="topic-metadata">

**Author:** [@jimmyvalmer19](https://discuss.elastic.co/u/jimmyvalmer19)\
**Replies:** 4\
**Last updated:** [August 26, 2019, 2:00pm UTC](https://discuss.elastic.co/t/logstash-7-3-ruby-undefined-method-split/196778 "2019-08-26T14:00:08Z")

</div>

Hi, I don't know how to use the filebeat fields listed here: https://www.elastic.co/guide/en/beats/filebeat/current/exported-fields-log.html In logstash. I need to extract the application name from "log.file.path" fi…

---

## [Nodes are not joining cluster](https://discuss.elastic.co/t/nodes-are-not-joining-cluster/195248)

<div class="topic-metadata">

**Author:** [@David04](https://discuss.elastic.co/u/David04)\
**Replies:** 2\
**Last updated:** [August 26, 2019, 1:59pm UTC](https://discuss.elastic.co/t/nodes-are-not-joining-cluster/195248 "2019-08-26T13:59:32Z")

</div>

Hello, I am trying to build a 3-node Elasticsearch cluster. I am using Elasticsearch 7.3. When I check the health of the cluster, it tells me the number of nodes = 1. Here are the node settings for all three: Start …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1936)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1938)
