# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1954 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1955 --- ## [Elasticsearch 7.3 Heap Usage](https://discuss.elastic.co/t/elasticsearch-7-3-heap-usage/195543)
**Author:** [@Spock\_Tgai](https://discuss.elastic.co/u/Spock_Tgai)\ **Replies:** 3\ **Last updated:** [August 19, 2019, 1:42am UTC](https://discuss.elastic.co/t/elasticsearch-7-3-heap-usage/195543 "2019-08-19T01:42:55Z")
Hi, We are running the latest version of elasticsearch on 16GB box with 8GB allocated to the heap. Previously the same was running elasticsearch 6.5 The heap does not seem to be reducing this is the pattern we see over … --- ## [Beats and index naming](https://discuss.elastic.co/t/beats-and-index-naming/195073)
**Author:** [@Marcell0e](https://discuss.elastic.co/u/Marcell0e)\ **Replies:** 21\ **Last updated:** [August 19, 2019, 1:40am UTC](https://discuss.elastic.co/t/beats-and-index-naming/195073 "2019-08-19T01:40:56Z")
Here is an overview of what I am trying to do. I have my Logstash config file set up to index like this index =\> "%{\[@metadata\]\[beat\]}-%{+yyyy.ww}". When I try to load the winlogbeat beat template manually following th… --- ## [Making the best of an existing Syslog stream](https://discuss.elastic.co/t/making-the-best-of-an-existing-syslog-stream/195662)
**Author:** [@Brent\_Ashley](https://discuss.elastic.co/u/Brent_Ashley)\ **Replies:** 2\ **Last updated:** [August 18, 2019, 10:24pm UTC](https://discuss.elastic.co/t/making-the-best-of-an-existing-syslog-stream/195662 "2019-08-18T22:24:54Z")
My task is to introduce log analysis to an environment where I am a drop-in replacement for Syslog and I do not have the option of asking clients to use a different shipper. In this environment logs are forwarded to my … --- ## [Bulkload performance issue](https://discuss.elastic.co/t/bulkload-performance-issue/195595)
**Author:** [@hjj1000](https://discuss.elastic.co/u/hjj1000)\ **Replies:** 1\ **Last updated:** [August 17, 2019, 2:43pm UTC](https://discuss.elastic.co/t/bulkload-performance-issue/195595 "2019-08-17T14:43:24Z")
Now we used JAVA to bulk load documents to Elasticsearch. We planned to import 10m documents each document size is almost 8M. Now we only can import 400K documents each day/ 5 documents every second. Our ES infrastructur… --- ## [Update timestamp of logs already indexed into ES](https://discuss.elastic.co/t/update-timestamp-of-logs-already-indexed-into-es/195656)
**Author:** [@Anwar\_Ahmed\_Sayed](https://discuss.elastic.co/u/Anwar_Ahmed_Sayed)\ **Replies:** 2\ **Last updated:** [August 18, 2019, 5:56pm UTC](https://discuss.elastic.co/t/update-timestamp-of-logs-already-indexed-into-es/195656 "2019-08-18T17:56:07Z")
hi, wondering a best approach to update timestamp of logs already indexed into ES. the new value should be \_timestamp = field1.value + field3.value. @timestamp = August 18th 2019, 11:29:58.271 field1\_time = August 1… --- ## [Incorrect geo\_shape results in both es6.x and 7.x](https://discuss.elastic.co/t/incorrect-geo-shape-results-in-both-es6-x-and-7-x/195386)
**Author:** [@nickoneill](https://discuss.elastic.co/u/nickoneill)\ **Replies:** 14\ **Last updated:** [August 18, 2019, 5:47pm UTC](https://discuss.elastic.co/t/incorrect-geo-shape-results-in-both-es6-x-and-7-x/195386 "2019-08-18T17:47:22Z")
I'm still seeing the same incorrect shape query behavior that I saw back to ES 1.7 after starting fresh on es 6.7 and 7.x (hosted by elastic.co). Here is the relevant data: Documents with WKT shape data for NY and CT st… --- ## [Want to remove some field from GROK filter](https://discuss.elastic.co/t/want-to-remove-some-field-from-grok-filter/195555)
**Author:** [@sumansaha](https://discuss.elastic.co/u/sumansaha)\ **Replies:** 4\ **Last updated:** [August 18, 2019, 11:37am UTC](https://discuss.elastic.co/t/want-to-remove-some-field-from-grok-filter/195555 "2019-08-18T11:37:25Z")
I've this log format: QID: 13636 from: 127.0.0.1 qtype: A qclass: IN qname: acep.top. rcode: NXDOMAIN rrcount: 0 policy: 'dns-name.host.sum' I've used this GROK filter : %{WORD:qid}: %{NUMBER:id} %{WORD:from}: %{IP:cl… --- ## [Elasticsearch not reachable](https://discuss.elastic.co/t/elasticsearch-not-reachable/195419)
**Author:** [@muzamil47](https://discuss.elastic.co/u/muzamil47)\ **Replies:** 8\ **Last updated:** [August 18, 2019, 11:29am UTC](https://discuss.elastic.co/t/elasticsearch-not-reachable/195419 "2019-08-18T11:29:20Z")
I am trying to load CSV data into Elasticsearch using Logstash and visualize the data in Kibana, but when I run logstash config file, I am getting Elasticseach not reachable error, though my elasticsearch server is runni… --- ## [Setting up ES multiple Instances on Windows Platform](https://discuss.elastic.co/t/setting-up-es-multiple-instances-on-windows-platform/195627)
**Author:** [@AmarjeetSingh](https://discuss.elastic.co/u/AmarjeetSingh)\ **Replies:** 0\ **Last updated:** [August 18, 2019, 3:27am UTC](https://discuss.elastic.co/t/setting-up-es-multiple-instances-on-windows-platform/195627 "2019-08-18T03:27:41Z")
I am not able to run multiple ES instances on one windows server I want to run multiple ES instances through multiple ES services. I know on paper that you need to config different settings for Path & Data & have dif… --- ## [Why is it so hard to just grab a file and upload to Elasticsearch?](https://discuss.elastic.co/t/why-is-it-so-hard-to-just-grab-a-file-and-upload-to-elasticsearch/195392)
**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\ **Replies:** 6\ **Last updated:** [August 18, 2019, 3:12am UTC](https://discuss.elastic.co/t/why-is-it-so-hard-to-just-grab-a-file-and-upload-to-elasticsearch/195392 "2019-08-18T03:12:13Z")
so, I was wondering this today: why is it so hard to just grab a log file and punch it into Elasticsearch? I understand when you need to setup Filebeat listeners, other beats, some Logstash pipelines and such... but what… --- ## [Create Grok Filter for multiple log entries](https://discuss.elastic.co/t/create-grok-filter-for-multiple-log-entries/195625)
**Author:** [@rakeshthakur](https://discuss.elastic.co/u/rakeshthakur)\ **Replies:** 0\ **Last updated:** [August 18, 2019, 2:55am UTC](https://discuss.elastic.co/t/create-grok-filter-for-multiple-log-entries/195625 "2019-08-18T02:55:48Z")
Hi I am newbie here and i am stuck on one issue here to generate GROK pattern here. i want to configure Hardware Logs which is in multiple line format. i already got GROK pattern but not able to combine in one file. … --- ## [Reading a file with file input](https://discuss.elastic.co/t/reading-a-file-with-file-input/195604)
**Author:** [@Lavinia\_Maties](https://discuss.elastic.co/u/Lavinia_Maties)\ **Replies:** 6\ **Last updated:** [August 17, 2019, 7:50pm UTC](https://discuss.elastic.co/t/reading-a-file-with-file-input/195604 "2019-08-17T19:50:23Z")
Hi everyone, I have a problem parsing my file using Logstash on windows 10. this is my .conf file : input { file { path =\> "C:\\ProgramData\\ELK\\Logs\\CBS\\CBS.log" } } filter { grok { match =\> { "message" =\> "%{DAT… --- ## [Elasticsearch support for ceph storage](https://discuss.elastic.co/t/elasticsearch-support-for-ceph-storage/195551)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 1\ **Last updated:** [August 17, 2019, 7:20pm UTC](https://discuss.elastic.co/t/elasticsearch-support-for-ceph-storage/195551 "2019-08-17T19:20:04Z")
Hi, Does elasticsearch support ceph storage? Are there any tests of elasticsearch conducted on ceph wrt functionality, performance? Thanks, Shivani --- ## [Data Relocation](https://discuss.elastic.co/t/data-relocation/195615)
**Author:** [@Diego\_Jota](https://discuss.elastic.co/u/Diego_Jota)\ **Replies:** 1\ **Last updated:** [August 17, 2019, 7:13pm UTC](https://discuss.elastic.co/t/data-relocation/195615 "2019-08-17T19:13:48Z")
Hello, I am storing my data on a disk, for example, in C. When this disk reaches 90%, I want the new data entered to be allocated on disk D. Is there any way to configure this setting? --- ## [Winlogbeat & Metricbeat 7.3 ignore yml Kibana host settings unless debug logging enabled](https://discuss.elastic.co/t/winlogbeat-metricbeat-7-3-ignore-yml-kibana-host-settings-unless-debug-logging-enabled/195612)
**Author:** [@Mr.Shaky](https://discuss.elastic.co/u/Mr.Shaky)\ **Replies:** 0\ **Last updated:** [August 17, 2019, 6:22pm UTC](https://discuss.elastic.co/t/winlogbeat-metricbeat-7-3-ignore-yml-kibana-host-settings-unless-debug-logging-enabled/195612 "2019-08-17T18:22:20Z")
Background info: new Ubuntu18 vm, ip addr: 192.168.1.42 hostname: Aramaki (patches up-to-date. static host entered in local dns service) \[ESXi 6.7u2 host ip addr: 192.168.1.40 \] Win10 1903 workstation, ip addr: 192.16… --- ## [7.2.0: Unknown setting 'ssl' for redis -\> canot connect to redis via TLS](https://discuss.elastic.co/t/7-2-0-unknown-setting-ssl-for-redis-canot-connect-to-redis-via-tls/190184)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [August 17, 2019, 4:55pm UTC](https://discuss.elastic.co/t/7-2-0-unknown-setting-ssl-for-redis-canot-connect-to-redis-via-tls/190184 "2019-08-17T16:55:34Z")
Hi, I am using redis behind stunnel to gain TLS encryption for redis. Filebeat is running fine, ships it's data sucessfully to redis database. Now I want to establish secured connection from logstash to redis. I updat… --- ## [If expression confusion](https://discuss.elastic.co/t/if-expression-confusion/195409)
**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\ **Replies:** 3\ **Last updated:** [August 17, 2019, 4:27pm UTC](https://discuss.elastic.co/t/if-expression-confusion/195409 "2019-08-17T16:27:59Z")
Hi, in trying to create an conditional if expression, I started with: if \[tags\] == "blah" or \[tags\] == "blah2" or \[tags\] == "blah3" { blah } but event data wasn't being "caught" by this expression. I then changed the … --- ## [New sysmon event\_id 22, DNS Query](https://discuss.elastic.co/t/new-sysmon-event-id-22-dns-query/194635)
**Author:** [@Ian\_Boje](https://discuss.elastic.co/u/Ian_Boje)\ **Replies:** 3\ **Last updated:** [August 17, 2019, 4:24pm UTC](https://discuss.elastic.co/t/new-sysmon-event-id-22-dns-query/194635 "2019-08-17T16:24:52Z")
Hi Everybody I'm not much of a programmer, but I'm tempted to try to learn to submit some changes to winlogbeat, but would be interested in finding out if I'm doing this right. Newer versions of sysmon added event\_id 2… --- ## [Logstash only binding to IPv6 in Docker](https://discuss.elastic.co/t/logstash-only-binding-to-ipv6-in-docker/195608)
**Author:** [@thedraketaylor](https://discuss.elastic.co/u/thedraketaylor)\ **Replies:** 0\ **Last updated:** [August 17, 2019, 4:20pm UTC](https://discuss.elastic.co/t/logstash-only-binding-to-ipv6-in-docker/195608 "2019-08-17T16:20:50Z")
I've been working with logstash for the past week and so far it's been great. Yesterday I decided to switch from using it in a vagrant box to docker, so I downloaded the official docker image from docker.elastic.co/logst… --- ## [Elasticsearch downloadable documentation](https://discuss.elastic.co/t/elasticsearch-downloadable-documentation/195602)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 1\ **Last updated:** [August 17, 2019, 4:07pm UTC](https://discuss.elastic.co/t/elasticsearch-downloadable-documentation/195602 "2019-08-17T16:07:35Z")
Does anyone know if is there a way to get a downloadable version of elasticsearch documentation ? This has been asked in stackoverflow also. Just posting it here if anyone is aware of anything. --- ## [FreeBSD - Updated Beats Pkg](https://discuss.elastic.co/t/freebsd-updated-beats-pkg/195605)
**Author:** [@SteveP](https://discuss.elastic.co/u/SteveP)\ **Replies:** 0\ **Last updated:** [August 17, 2019, 3:59pm UTC](https://discuss.elastic.co/t/freebsd-updated-beats-pkg/195605 "2019-08-17T15:59:41Z")
Hello all, On the FreeBSD Ports section the most current install pkg for Beats is 6.7.1. Is there a 7.3 pkg available and will it be updated on the Ports page? Thanks, Steve --- ## [Unexpected search response for nested objects](https://discuss.elastic.co/t/unexpected-search-response-for-nested-objects/195388)
**Author:** [@bterhorst](https://discuss.elastic.co/u/bterhorst)\ **Replies:** 2\ **Last updated:** [August 17, 2019, 12:22pm UTC](https://discuss.elastic.co/t/unexpected-search-response-for-nested-objects/195388 "2019-08-17T12:22:32Z")
Step 1: Create mapping nested document: curl -XPUT --header 'Content-Type: application/json' http://es:9200/search -d '{"mappings" : { "hometable" : { "properties":{ "recipes":{ "type":"nested", "properties":{… --- ## [Milliseconds in timestamp for Curator](https://discuss.elastic.co/t/milliseconds-in-timestamp-for-curator/195433)
**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\ **Replies:** 2\ **Last updated:** [August 17, 2019, 11:10am UTC](https://discuss.elastic.co/t/milliseconds-in-timestamp-for-curator/195433 "2019-08-17T11:10:44Z")
Based on this doc, I composed a timestring based on the timestamp I send to Elasticsearch. I've gotten this far: %Y-%m-%WT%H:%M:%S.469436 469436 are milliseconds. How do I tell Curator about those? Or should I use rege… --- ## [Performance issues with \_search query](https://discuss.elastic.co/t/performance-issues-with-search-query/195577)
**Author:** [@hrastogi](https://discuss.elastic.co/u/hrastogi)\ **Replies:** 1\ **Last updated:** [August 17, 2019, 11:01am UTC](https://discuss.elastic.co/t/performance-issues-with-search-query/195577 "2019-08-17T11:01:27Z")
Hi, We are running ES 6.5 cluster with 10 data node and 3 front node on i3.2xlarge. We have daily indices with records-2019-08-10, records-2019-08-11 etc Each index has 50 million records with 20GB daily data size. t… --- ## [Data ingestion into elasticsearch without using logstash](https://discuss.elastic.co/t/data-ingestion-into-elasticsearch-without-using-logstash/195591)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 1\ **Last updated:** [August 17, 2019, 10:28am UTC](https://discuss.elastic.co/t/data-ingestion-into-elasticsearch-without-using-logstash/195591 "2019-08-17T10:28:50Z")
Hi All, I have pretty huge data in one of the couchbase database, i tried using JDBC plugin and was not able to find out supported "jdbc\_driver\_library" is there any other way through which i can achieve this? please … --- ## [STOPING elasticsearch.bat -NODE JS](https://discuss.elastic.co/t/stoping-elasticsearch-bat-node-js/195589)
**Author:** [@aiswarya](https://discuss.elastic.co/u/aiswarya)\ **Replies:** 0\ **Last updated:** [August 17, 2019, 8:48am UTC](https://discuss.elastic.co/t/stoping-elasticsearch-bat-node-js/195589 "2019-08-17T08:48:28Z")
i'm using node js child\_process module to run the elasticsearch.bat as follows start:async()=\>{ const { spawn } = require('child\_process'); var bat = require.resolve('C:/elasticsearch-7.0.1/bin/elasticsearch.bat'… --- ## [Nosql data ingestion using logstash](https://discuss.elastic.co/t/nosql-data-ingestion-using-logstash/195486)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 2\ **Last updated:** [August 17, 2019, 8:09am UTC](https://discuss.elastic.co/t/nosql-data-ingestion-using-logstash/195486 "2019-08-17T08:09:37Z")
Hi All, Anybody have ever tried data ingestion using logstash from a "nosql couchbase" database? I'm unable to find out exact driver for this, can someone advice on how to proceed in this. Thanks Gauti --- ## [I have the date time in the first log line.. I am trying to add this date to all following events after it has been matched once, making it act like a global variable in some ways](https://discuss.elastic.co/t/i-have-the-date-time-in-the-first-log-line-i-am-trying-to-add-this-date-to-all-following-events-after-it-has-been-matched-once-making-it-act-like-a-global-variable-in-some-ways/195584)
**Author:** [@satyam2593](https://discuss.elastic.co/u/satyam2593)\ **Replies:** 0\ **Last updated:** [August 17, 2019, 4:41am UTC](https://discuss.elastic.co/t/i-have-the-date-time-in-the-first-log-line-i-am-trying-to-add-this-date-to-all-following-events-after-it-has-been-matched-once-making-it-act-like-a-global-variable-in-some-ways/195584 "2019-08-17T04:41:52Z")
Here is the sample log lines START the log printing 08/08/19 09:10:06 343 7066|DestroyJavaVM|0.0|11.3 7072|Reference Handler|0.0|11.3 31204|qtp1459076321-3197|0.0|11.3 There is no unique values to use the aggregat… --- ## [Can I enrich lookup source(nested) with jdbc\_static filter?](https://discuss.elastic.co/t/can-i-enrich-lookup-source-nested-with-jdbc-static-filter/194783)
**Author:** [@sung-sang\_kang](https://discuss.elastic.co/u/sung-sang_kang)\ **Replies:** 6\ **Last updated:** [August 17, 2019, 2:49am UTC](https://discuss.elastic.co/t/can-i-enrich-lookup-source-nested-with-jdbc-static-filter/194783 "2019-08-17T02:49:23Z")
I some have source with generator Here generator { lines =\> \[ '{ "macAddr": "d880397a3b0f", "sensors": \[ {"sensor-id": "s01", "sensor-val": 31}, {"sensor-id": "s02", "se… --- ## [ElasticSearch-Spring bean creation Issue while building java code using Gradle](https://discuss.elastic.co/t/elasticsearch-spring-bean-creation-issue-while-building-java-code-using-gradle/195568)
**Author:** [@ajay\_yeruva](https://discuss.elastic.co/u/ajay_yeruva)\ **Replies:** 1\ **Last updated:** [August 17, 2019, 1:14am UTC](https://discuss.elastic.co/t/elasticsearch-spring-bean-creation-issue-while-building-java-code-using-gradle/195568 "2019-08-17T01:14:31Z")
Hi Folks, I am facing below issue while executing Gradle build. Can you please let me know your thoughts to fix below issue. 2019-08-16 21:41:29.874 ERROR 37147 --- \[ost-startStop-1\] o.s.b.web.embedded.tomcat.TomcatSt… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1953) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1955)