# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1960 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1961 --- ## [Logstash fingerprint with concatenate\_all\_fields validation](https://discuss.elastic.co/t/logstash-fingerprint-with-concatenate-all-fields-validation/195193)
**Author:** [@PA3mEP](https://discuss.elastic.co/u/PA3mEP)\ **Replies:** 1\ **Last updated:** [August 14, 2019, 12:40pm UTC](https://discuss.elastic.co/t/logstash-fingerprint-with-concatenate-all-fields-validation/195193 "2019-08-14T12:40:49Z")
Hi, I need some help with the fingerprint validation that was produced using fingerprint logstash filter. at the moment pipeline config looks like this: input { jdbc { jdbc\_driver\_library =\> "/usr/share/logstash/log… --- ## [Time series of various processing numbers](https://discuss.elastic.co/t/time-series-of-various-processing-numbers/195069)
**Author:** [@JGT](https://discuss.elastic.co/u/JGT)\ **Replies:** 2\ **Last updated:** [August 14, 2019, 12:40pm UTC](https://discuss.elastic.co/t/time-series-of-various-processing-numbers/195069 "2019-08-14T12:40:46Z")
I have several logs that have periodic messages with performance data. I want to graph the metrics over time. Things like number of users logged in, virtual memory used, pages in and out, etc. Each record/message has … --- ## [Count on no of log lines per month](https://discuss.elastic.co/t/count-on-no-of-log-lines-per-month/195200)
**Author:** [@Eva](https://discuss.elastic.co/u/Eva)\ **Replies:** 0\ **Last updated:** [August 14, 2019, 12:21pm UTC](https://discuss.elastic.co/t/count-on-no-of-log-lines-per-month/195200 "2019-08-14T12:21:25Z")
Hello Are there better ways to find number of log lines that are getting accumulated in elk on monthly basis? Thanks --- ## [Azure event hub failing with 'undefined method \`getEventHubPath' error](https://discuss.elastic.co/t/azure-event-hub-failing-with-undefined-method-geteventhubpath-error/195198)
**Author:** [@asad\_ali](https://discuss.elastic.co/u/asad_ali)\ **Replies:** 0\ **Last updated:** [August 14, 2019, 12:15pm UTC](https://discuss.elastic.co/t/azure-event-hub-failing-with-undefined-method-geteventhubpath-error/195198 "2019-08-14T12:15:18Z")
Hi, My logstash config looks like input { azure\_event\_hubs { config\_mode =\> "basic" event\_hub\_connections =\> \["Endpoint=sb://audit-ops-logs.servicebus.windows.net/;SharedAccessKeyName=azure-ls;SharedAccessKey=xxxxx… --- ## [ES 6.4 s3 feature with endpoint as hostname](https://discuss.elastic.co/t/es-6-4-s3-feature-with-endpoint-as-hostname/194372)
**Author:** [@sai\_bharanisrikanth](https://discuss.elastic.co/u/sai_bharanisrikanth)\ **Replies:** 6\ **Last updated:** [August 14, 2019, 11:58am UTC](https://discuss.elastic.co/t/es-6-4-s3-feature-with-endpoint-as-hostname/194372 "2019-08-14T11:58:20Z")
Hello Team, I am using ES 6.4 version along with S3 plugin v 6.4.3 installed in the cluster, and have configured end point to be minio service host name which is internal to the cluster. Configuration: s3.client.defa… --- ## [Highlight stopwords in hits](https://discuss.elastic.co/t/highlight-stopwords-in-hits/194636)
**Author:** [@fedoroko](https://discuss.elastic.co/u/fedoroko)\ **Replies:** 3\ **Last updated:** [August 14, 2019, 10:48am UTC](https://discuss.elastic.co/t/highlight-stopwords-in-hits/194636 "2019-08-14T10:48:49Z")
Hey, what is the best way to skip stopwords in query but highlight them in hits? Current settings: 'settings': { 'analysis': { 'analyzer':{ my\_analyzer:{ 'tokenizer':'standard', … --- ## [Query returns non matching records](https://discuss.elastic.co/t/query-returns-non-matching-records/195184)
**Author:** [@ManuMP](https://discuss.elastic.co/u/ManuMP)\ **Replies:** 1\ **Last updated:** [August 14, 2019, 10:27am UTC](https://discuss.elastic.co/t/query-returns-non-matching-records/195184 "2019-08-14T10:27:17Z")
Hi , I am using the following query to identify log entries having the message "DeviceStatus changed to Idle" within a period. But the query also returns the following messages "Module State is changed to idle Module… --- ## [How to get selected log from filebeat index by python](https://discuss.elastic.co/t/how-to-get-selected-log-from-filebeat-index-by-python/194466)
**Author:** [@Fosiul\_Alam](https://discuss.elastic.co/u/Fosiul_Alam)\ **Replies:** 9\ **Last updated:** [August 14, 2019, 10:06am UTC](https://discuss.elastic.co/t/how-to-get-selected-log-from-filebeat-index-by-python/194466 "2019-08-14T10:06:23Z")
i am using python elasticsearch module to search filebeat log by using using keyword. same as i do in "Kibana Discover" but my search does not return anything. # make sure ES is up and running import requests res = requ… --- ## [Missing container fields](https://discuss.elastic.co/t/missing-container-fields/195179)
**Author:** [@shalvah.deimos](https://discuss.elastic.co/u/shalvah.deimos)\ **Replies:** 0\ **Last updated:** [August 14, 2019, 9:53am UTC](https://discuss.elastic.co/t/missing-container-fields/195179 "2019-08-14T09:53:20Z")
I'm running Filebeat 7.3 on Kubernetes with this configuration: processors: - add\_cloud\_metadata: - add\_kubernetes\_metadata: in\_cluster: true filebeat.autodiscover: providers: - type:… --- ## [Host name incorrect for logstash monitoring in Kibana](https://discuss.elastic.co/t/host-name-incorrect-for-logstash-monitoring-in-kibana/194957)
**Author:** [@Gokul\_Raj](https://discuss.elastic.co/u/Gokul_Raj)\ **Replies:** 1\ **Last updated:** [August 14, 2019, 9:46am UTC](https://discuss.elastic.co/t/host-name-incorrect-for-logstash-monitoring-in-kibana/194957 "2019-08-14T09:46:34Z")
I was able to configure logstash 6.7.1 to enable monitoring and it's successfully showing up in Kibana. However the host name is incorrect, it defaults to 127.0.0.1:9600 and 127.0.0.1:9601 for all 3 nodes in my cluster.… --- ## [Index blocks write operation when it moved to warm phase by ILM](https://discuss.elastic.co/t/index-blocks-write-operation-when-it-moved-to-warm-phase-by-ilm/194552)
**Author:** [@worapojc](https://discuss.elastic.co/u/worapojc)\ **Replies:** 6\ **Last updated:** [August 14, 2019, 9:45am UTC](https://discuss.elastic.co/t/index-blocks-write-operation-when-it-moved-to-warm-phase-by-ilm/194552 "2019-08-14T09:45:32Z")
Hi Elasticsearch team, Index blocks write operation when it moved to the warm phase by ILM. { "indices" : { "nxlog-2019.08.06" : { "index" : "nxlog-2019.08.06", "managed" : true, "policy" : "com… --- ## [Is it possible to set up snapshot repo without restarting anything?](https://discuss.elastic.co/t/is-it-possible-to-set-up-snapshot-repo-without-restarting-anything/195140)
**Author:** [@iwinux](https://discuss.elastic.co/u/iwinux)\ **Replies:** 2\ **Last updated:** [August 14, 2019, 8:55am UTC](https://discuss.elastic.co/t/is-it-possible-to-set-up-snapshot-repo-without-restarting-anything/195140 "2019-08-14T08:55:09Z")
Hi, I'm trying to export data to our internal Ceph KV store (S3 protocol) from an old cluster (6.3.0) with 21 nodes. It's really frustrating that all these steps require restarting the cluster over and over. What I've … --- ## [Génération de PDF](https://discuss.elastic.co/t/generation-de-pdf/191247)
**Author:** [@EVOTYS](https://discuss.elastic.co/u/EVOTYS)\ **Replies:** 9\ **Last updated:** [August 14, 2019, 8:52am UTC](https://discuss.elastic.co/t/generation-de-pdf/191247 "2019-08-14T08:52:06Z")
Bonjour, Je me permet un message en Français ce qui sera beaucoup plus simple pour moi. Nous avons une config en P.O.C avec 2 serveurs elastic 7.2.0 (64Go de RAM - 1T de disque) 1 serveur Kibana (64G RAM - 120 Go disq… --- ## [Filebeat stops sending logs when load balancing is enabled and second node unavailable](https://discuss.elastic.co/t/filebeat-stops-sending-logs-when-load-balancing-is-enabled-and-second-node-unavailable/195163)
**Author:** [@Hawchik\_Pupkur](https://discuss.elastic.co/u/Hawchik_Pupkur)\ **Replies:** 0\ **Last updated:** [August 14, 2019, 8:39am UTC](https://discuss.elastic.co/t/filebeat-stops-sending-logs-when-load-balancing-is-enabled-and-second-node-unavailable/195163 "2019-08-14T08:39:46Z")
Hello I have two nodes. If one of them becomes unavailable the filebeat stops sending logs to both nodes. This looks like a bug https://github.com/elastic/beats/issues/1829 but it\`s already fixed(in which version?) My… --- ## [Display the visualization For listing the message based on timestamp in ascending order](https://discuss.elastic.co/t/display-the-visualization-for-listing-the-message-based-on-timestamp-in-ascending-order/194960)
**Author:** [@swathi\_elastic](https://discuss.elastic.co/u/swathi_elastic)\ **Replies:** 2\ **Last updated:** [August 14, 2019, 8:31am UTC](https://discuss.elastic.co/t/display-the-visualization-for-listing-the-message-based-on-timestamp-in-ascending-order/194960 "2019-08-14T08:31:34Z")
How to display the visualization For listing the message based on timestamp in ascending order --- ## [Index exist using wildcard](https://discuss.elastic.co/t/index-exist-using-wildcard/195067)
**Author:** [@mamadly](https://discuss.elastic.co/u/mamadly)\ **Replies:** 1\ **Last updated:** [August 14, 2019, 8:26am UTC](https://discuss.elastic.co/t/index-exist-using-wildcard/195067 "2019-08-14T08:26:21Z")
I am getting weird behavior when I use a wildcard, when checking if index exist or not using \ pattern. Regardless whether an index with this prefix exist or not a match is … --- ## [Compound sub-files must have a valid codec header and footer: file is too small (0 bytes)](https://discuss.elastic.co/t/compound-sub-files-must-have-a-valid-codec-header-and-footer-file-is-too-small-0-bytes/194936)
**Author:** [@liulinisgood](https://discuss.elastic.co/u/liulinisgood)\ **Replies:** 2\ **Last updated:** [August 14, 2019, 8:13am UTC](https://discuss.elastic.co/t/compound-sub-files-must-have-a-valid-codec-header-and-footer-file-is-too-small-0-bytes/194936 "2019-08-14T08:13:38Z")
I met a error for a long time, it occurs at 23:10 every day , I am very puzzled. I don't find any period run task . ES version: 5.5.3 os: centos7 3.10.0-327.el7.x86\_64 disk: ssd jdk8, g1 \[2019-08-11T23:08:20,178\]\[WA… --- ## [Retry reindexing starting from a certain point](https://discuss.elastic.co/t/retry-reindexing-starting-from-a-certain-point/195160)
**Author:** [@nico127](https://discuss.elastic.co/u/nico127)\ **Replies:** 0\ **Last updated:** [August 14, 2019, 8:09am UTC](https://discuss.elastic.co/t/retry-reindexing-starting-from-a-certain-point/195160 "2019-08-14T08:09:09Z")
Hello. It sometimes happen that reindexing fails, for one reason or another (mostly elastic thread pool's task queue full). I'm working on improving performance in some ways, to run into the issue less often; but I don't… --- ## [Char\_filter and lowercase not working for search\_analyzer](https://discuss.elastic.co/t/char-filter-and-lowercase-not-working-for-search-analyzer/195074)
**Author:** [@KrisMeister](https://discuss.elastic.co/u/KrisMeister)\ **Replies:** 2\ **Last updated:** [August 14, 2019, 7:49am UTC](https://discuss.elastic.co/t/char-filter-and-lowercase-not-working-for-search-analyzer/195074 "2019-08-14T07:49:36Z")
I've been experimenting with many different iterations of the below but haven't been able to match all the cases I'd like to. My objective is to match the following cases: "7-eleven" or "7eleven" to the text "7-Eleven… --- ## [Long range not working](https://discuss.elastic.co/t/long-range-not-working/195096)
**Author:** [@Lucas\_Rezende](https://discuss.elastic.co/u/Lucas_Rezende)\ **Replies:** 1\ **Last updated:** [August 14, 2019, 7:41am UTC](https://discuss.elastic.co/t/long-range-not-working/195096 "2019-08-14T07:41:58Z")
Hi there. I am trying range filter based on a long attribute but it seems not to be working. This is the que query I am using: GET my\_index/\_search { "query": { "bool": { "must\_not": \[ { "… --- ## [What is my error?](https://discuss.elastic.co/t/what-is-my-error/193502)
**Author:** [@JANGGILYONG](https://discuss.elastic.co/u/JANGGILYONG)\ **Replies:** 5\ **Last updated:** [August 14, 2019, 7:41am UTC](https://discuss.elastic.co/t/what-is-my-error/193502 "2019-08-14T07:41:48Z")
Sorry, It is my second notebook for testing the server. So I couldn't copy the scripts. --- ## [Getting all documents without duplicate values in Field](https://discuss.elastic.co/t/getting-all-documents-without-duplicate-values-in-field/195110)
**Author:** [@misiakj](https://discuss.elastic.co/u/misiakj)\ **Replies:** 1\ **Last updated:** [August 14, 2019, 7:37am UTC](https://discuss.elastic.co/t/getting-all-documents-without-duplicate-values-in-field/195110 "2019-08-14T07:37:28Z")
I have an index that looks similar to the below (it really has a number of additional fields that aren't relevant for this post) case\_id: int group: string unique\_id: case\_id + group value: int for any one case\_id v… --- ## [I want to visualize the overall heap details in kibana](https://discuss.elastic.co/t/i-want-to-visualize-the-overall-heap-details-in-kibana/194994)
**Author:** [@satyam2593](https://discuss.elastic.co/u/satyam2593)\ **Replies:** 3\ **Last updated:** [August 14, 2019, 7:02am UTC](https://discuss.elastic.co/t/i-want-to-visualize-the-overall-heap-details-in-kibana/194994 "2019-08-14T07:02:01Z")
My document looks like @timestamp May 13, 2019 @ 23:50:01.997 t @version 1 t \_id wZQyimwBB5Sy5b-Oj-\_G t \_index overalljvmheap # \_score - t \_type \_doc t host xxxxxxxxxx \*\*t jvmheap … --- ## [Filtering by fIeld not suggesting/showing any values](https://discuss.elastic.co/t/filtering-by-field-not-suggesting-showing-any-values/194033)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 5\ **Last updated:** [August 14, 2019, 6:00am UTC](https://discuss.elastic.co/t/filtering-by-field-not-suggesting-showing-any-values/194033 "2019-08-14T06:00:41Z")
Hi, I am using ELK stack version 5.5.0 . I am not able to see suggestions or autocomplete values in filter by filed section of kibana. I tried even with fileld .keyword but its not suggesting any values. Please help … --- ## [LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError: Got response code '403' contacting Elasticsearch at URL 'http://localhost:9200/logstash'](https://discuss.elastic.co/t/logstash-got-response-code-403-contacting-elasticsearch-at-url-http-localhost-9200-logstash/194951)
**Author:** [@Daniel6](https://discuss.elastic.co/u/Daniel6)\ **Replies:** 0\ **Last updated:** [August 13, 2019, 4:11am UTC](https://discuss.elastic.co/t/logstash-got-response-code-403-contacting-elasticsearch-at-url-http-localhost-9200-logstash/194951 "2019-08-13T04:11:47Z")
Hi, I recently set security to elasticsearch. I configure elasticsearch by this doc And configure logstash by this doc Here is my logstash.yml: xpack.monitoring.enabled: true xpack.monitoring.elasticsearch.username… --- ## [Discover: unknown error, SearchError: unknown error](https://discuss.elastic.co/t/discover-unknown-error-searcherror-unknown-error/194989)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 3\ **Last updated:** [August 14, 2019, 4:20am UTC](https://discuss.elastic.co/t/discover-unknown-error-searcherror-unknown-error/194989 "2019-08-14T04:20:36Z")
Hi, Kibana is throwing this error for all queries: SearchError: unknown error at http://my-dev-elk:5601/bundles/kibana.bundle.js:2:520531 at processQueue (http://my-dev-elk:5601/built\_assets/dlls/vendors.bundle… --- ## [Kibana is not ready yet](https://discuss.elastic.co/t/kibana-is-not-ready-yet/194403)
**Author:** [@Pierrelaurent](https://discuss.elastic.co/u/Pierrelaurent)\ **Replies:** 9\ **Last updated:** [August 14, 2019, 3:58am UTC](https://discuss.elastic.co/t/kibana-is-not-ready-yet/194403 "2019-08-14T03:58:11Z")
Hi There, I got the error when trying to start Kibana that there is a fatal error qserver.host setting was not applied? Can you guys tell me what that means? --- ## [Elastic exits with network.host set](https://discuss.elastic.co/t/elastic-exits-with-network-host-set/195118)
**Author:** [@Mezoloth](https://discuss.elastic.co/u/Mezoloth)\ **Replies:** 1\ **Last updated:** [August 14, 2019, 2:11am UTC](https://discuss.elastic.co/t/elastic-exits-with-network-host-set/195118 "2019-08-14T02:11:43Z")
I have installed Elastic on the latest ubuntu server. I cannot connect to Elastic from other hosts. I can connect to the server using SSH and I can see in netstat that 9200 is bound to 127.0.0.1. I can curl to Elastic … --- ## [Logstash crashed down the elasticsearch](https://discuss.elastic.co/t/logstash-crashed-down-the-elasticsearch/194935)
**Author:** [@Tianji\_Zhao](https://discuss.elastic.co/u/Tianji_Zhao)\ **Replies:** 4\ **Last updated:** [August 14, 2019, 12:40am UTC](https://discuss.elastic.co/t/logstash-crashed-down-the-elasticsearch/194935 "2019-08-14T00:40:02Z")
I use a logstash to fetching the data from the elasticsearch. The logstash works well when I use an empty filter. But it crashes the remote elastic when I add a json filter. The logstash.cong is as follow: input{ ela… --- ## [Add script for Kibana aggregations](https://discuss.elastic.co/t/add-script-for-kibana-aggregations/195004)
**Author:** [@HauVan](https://discuss.elastic.co/u/HauVan)\ **Replies:** 2\ **Last updated:** [August 14, 2019, 12:22am UTC](https://discuss.elastic.co/t/add-script-for-kibana-aggregations/195004 "2019-08-14T00:22:14Z")
Hi guys, i have a datatable like below What im trying to do is create scripting for my third column, the rule will look like this. -We have know the ORDER\_WAITING\_FOR\_PLANNING is 102 so we call this total\_order, the… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1959) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1961)