# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1968 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1969 --- ## [Error: getaddrinfo failed](https://discuss.elastic.co/t/error-getaddrinfo-failed/194618)
**Author:** [@Ioana](https://discuss.elastic.co/u/Ioana)\ **Replies:** 0\ **Last updated:** [August 9, 2019, 1:08pm UTC](https://discuss.elastic.co/t/error-getaddrinfo-failed/194618 "2019-08-09T13:08:39Z")
Hello! I am new on working with ELK and when I run my code I get the following error : 2019-08-09 15:43:04,526 CRITICAL: N/A\: Failed to establish a new co… --- ## [Can not able to get search results Need some help with query](https://discuss.elastic.co/t/can-not-able-to-get-search-results-need-some-help-with-query/194614)
**Author:** [@vishwas\_jadav](https://discuss.elastic.co/u/vishwas_jadav)\ **Replies:** 0\ **Last updated:** [August 9, 2019, 12:58pm UTC](https://discuss.elastic.co/t/can-not-able-to-get-search-results-need-some-help-with-query/194614 "2019-08-09T12:58:26Z")
I have already created an index and I daily add some records and use in a site for searching. Now, I have created another index and in that I used Data types as I have used in my previous index. but I am not getting an… --- ## [Logstash JSON Parsing Error](https://discuss.elastic.co/t/logstash-json-parsing-error/194609)
**Author:** [@Tejas\_Shah](https://discuss.elastic.co/u/Tejas_Shah)\ **Replies:** 1\ **Last updated:** [August 9, 2019, 1:01pm UTC](https://discuss.elastic.co/t/logstash-json-parsing-error/194609 "2019-08-09T13:01:47Z")
Hi, I have sample json that I am pushing first into SQLite db and later to Logstash over TCP input. When I am using Logstash version 7.1.1 , everything is working fine. However, when I use Logstash 7.2.0 / 7.3.0 it thr… --- ## [Regexp in conditional](https://discuss.elastic.co/t/regexp-in-conditional/194223)
**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\ **Replies:** 9\ **Last updated:** [August 9, 2019, 12:59pm UTC](https://discuss.elastic.co/t/regexp-in-conditional/194223 "2019-08-09T12:59:22Z")
Hi, I'm trying to apply a tag based on the contents of a field. I've been trying it like this: if \[field.keyword\] =~ /^(TEST|test)-.\*$/ { mutate { add\_tag =\> \[ "TEST" \] } } } The above does not work, … --- ## [Active Directory - Parse Message Log and Username](https://discuss.elastic.co/t/active-directory-parse-message-log-and-username/194537)
**Author:** [@awataszko](https://discuss.elastic.co/u/awataszko)\ **Replies:** 1\ **Last updated:** [August 9, 2019, 12:54pm UTC](https://discuss.elastic.co/t/active-directory-parse-message-log-and-username/194537 "2019-08-09T12:54:08Z")
Hi, I am trying to build a simple report for something like AD group changes. Wondering if the "message" in the event ID can be parsed further?(ie have more fields) Also wondering if any regex can be applied. For exampl… --- ## [Failed to put template \[filebeat\]](https://discuss.elastic.co/t/failed-to-put-template-filebeat/194611)
**Author:** [@dm1987](https://discuss.elastic.co/u/dm1987)\ **Replies:** 0\ **Last updated:** [August 9, 2019, 12:45pm UTC](https://discuss.elastic.co/t/failed-to-put-template-filebeat/194611 "2019-08-09T12:45:59Z")
\[2019-08-09T15:42:33,107\]\[DEBUG\]\[o.e.a.a.i.t.p.TransportPutIndexTemplateAction\] failed to put template \[filebeat\] org.elasticsearch.index.mapper.MapperParsingException: Failed to parse mapping \[\_doc\]: Root mapping defi… --- ## [Date processor on ingest do not create a date type on elasticsearch](https://discuss.elastic.co/t/date-processor-on-ingest-do-not-create-a-date-type-on-elasticsearch/194459)
**Author:** [@thuck](https://discuss.elastic.co/u/thuck)\ **Replies:** 2\ **Last updated:** [August 9, 2019, 12:45pm UTC](https://discuss.elastic.co/t/date-processor-on-ingest-do-not-create-a-date-type-on-elasticsearch/194459 "2019-08-09T12:45:42Z")
When parsing a field on the ingest pipeline; I would expect that the field would be created as Date on elasticsearch, but what I see is that they are created as String. I tried two different ways of parsing, below the s… --- ## [Does removing field actually deletes data?](https://discuss.elastic.co/t/does-removing-field-actually-deletes-data/193511)
**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\ **Replies:** 1\ **Last updated:** [August 9, 2019, 12:39pm UTC](https://discuss.elastic.co/t/does-removing-field-actually-deletes-data/193511 "2019-08-09T12:39:18Z")
Hello. I want to free some space on HDD so I decided to remove unneeded field from my indices. I made a reindex with field deletion on some index. Then I compared sizes of old index and new index without some fields. An… --- ## [Log data join](https://discuss.elastic.co/t/log-data-join/194610)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 0\ **Last updated:** [August 9, 2019, 12:33pm UTC](https://discuss.elastic.co/t/log-data-join/194610 "2019-08-09T12:33:45Z")
Hi there, I’ve got a question, is it possible to “join” data in ELK, so we have such a use case: Application sends two types of logs: a. \, \ b. \, \ We need report (… --- ## [Requests and segments](https://discuss.elastic.co/t/requests-and-segments/194446)
**Author:** [@newbie1](https://discuss.elastic.co/u/newbie1)\ **Replies:** 4\ **Last updated:** [August 9, 2019, 12:25pm UTC](https://discuss.elastic.co/t/requests-and-segments/194446 "2019-08-09T12:25:51Z")
Hi, During the course "Elasticsearch Engineer II", it is said : "A search request is distributed to the shards and on each shard it is performed sequentially over the segments" Does that means that if tow requests ar… --- ## [Refresh & flush](https://discuss.elastic.co/t/refresh-flush/194444)
**Author:** [@newbie1](https://discuss.elastic.co/u/newbie1)\ **Replies:** 4\ **Last updated:** [August 9, 2019, 12:24pm UTC](https://discuss.elastic.co/t/refresh-flush/194444 "2019-08-09T12:24:57Z")
Hy, Is the answer to this post https://discuss.elastic.co/t/relationship-between-refresh-flush/51260 still valid ? id "Yes that is expected, a refresh calls a flush and writes files to the filesystem" --- ## [Reindexing Data](https://discuss.elastic.co/t/reindexing-data/193608)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [August 9, 2019, 12:22pm UTC](https://discuss.elastic.co/t/reindexing-data/193608 "2019-08-09T12:22:39Z")
I have about 300 indices of data, each of them consumining anywhere from a few hundred MBs to a couple tens of GBs. I'd like to reindex all of the data into rollup indices to reduce the number of indices mounted, which … --- ## [Grand access to specific fields](https://discuss.elastic.co/t/grand-access-to-specific-fields/194581)
**Author:** [@Noebas](https://discuss.elastic.co/u/Noebas)\ **Replies:** 1\ **Last updated:** [August 9, 2019, 12:15pm UTC](https://discuss.elastic.co/t/grand-access-to-specific-fields/194581 "2019-08-09T12:15:27Z")
I'am struggeling to get the filter working. This filter is working but i like to match mutliple tags and can not find how to do this. Can i use a OR in the bool filter? https://www.elastic.co/guide/en/elasticsearch/re… --- ## [8.0 Upgrade Assistant cannot reindex](https://discuss.elastic.co/t/8-0-upgrade-assistant-cannot-reindex/193947)
**Author:** [@Sommerdal](https://discuss.elastic.co/u/Sommerdal)\ **Replies:** 5\ **Last updated:** [August 9, 2019, 11:57am UTC](https://discuss.elastic.co/t/8-0-upgrade-assistant-cannot-reindex/193947 "2019-08-09T11:57:39Z")
After updating ES and Kibana to 7.3.0 I have been trying to reindex old indices (v6..3.0) to new format using the Upgrade Assistant. I succeded with a few and the I started at whole bunch (20) reindex processes. Unfort… --- ## [Kibana field has only timestamps](https://discuss.elastic.co/t/kibana-field-has-only-timestamps/194565)
**Author:** [@per\_82](https://discuss.elastic.co/u/per_82)\ **Replies:** 1\ **Last updated:** [August 9, 2019, 11:45am UTC](https://discuss.elastic.co/t/kibana-field-has-only-timestamps/194565 "2019-08-09T11:45:32Z")
There were many fields before the ELK stack was reinstalled, but only timestamp after the reinstallation. I need the message field, is there a workaround? --- ## [BulkProcessor never executing AfterBulk](https://discuss.elastic.co/t/bulkprocessor-never-executing-afterbulk/194575)
**Author:** [@Jozifo](https://discuss.elastic.co/u/Jozifo)\ **Replies:** 1\ **Last updated:** [August 9, 2019, 11:28am UTC](https://discuss.elastic.co/t/bulkprocessor-never-executing-afterbulk/194575 "2019-08-09T11:28:08Z")
Hello everyone, I'm trying to insert data into ElasticSearch using RestHighLevelClient and BulkProcessor. The code I'm using for the BulkProcessor is the following. BulkProcessor getBulkProcessor(RestHighLevelClien… --- ## [Elastic Search 2.2 Logging Configuration](https://discuss.elastic.co/t/elastic-search-2-2-logging-configuration/193730)
**Author:** [@iaskdoubt](https://discuss.elastic.co/u/iaskdoubt)\ **Replies:** 1\ **Last updated:** [August 9, 2019, 11:18am UTC](https://discuss.elastic.co/t/elastic-search-2-2-logging-configuration/193730 "2019-08-09T11:18:43Z")
Hi is it possible to share the logging configuration and log file rotation available in the elastic search 2.2 --- ## [Elasticsearch 2.4.0 stdout logging size restriction](https://discuss.elastic.co/t/elasticsearch-2-4-0-stdout-logging-size-restriction/194131)
**Author:** [@prabhurajreddy](https://discuss.elastic.co/u/prabhurajreddy)\ **Replies:** 1\ **Last updated:** [August 9, 2019, 11:04am UTC](https://discuss.elastic.co/t/elasticsearch-2-4-0-stdout-logging-size-restriction/194131 "2019-08-09T11:04:50Z")
We have elasticsearch 2.4 installation, sometimes stdout logs go over 100GB size. Though I have configured the log4j settings to file: type: rollingFile file: {path.logs}/{cluster.name}.log maxFileSize: 10MB maxBac… --- ## [Scripted fields throwing error](https://discuss.elastic.co/t/scripted-fields-throwing-error/194555)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 7\ **Last updated:** [August 9, 2019, 10:11am UTC](https://discuss.elastic.co/t/scripted-fields-throwing-error/194555 "2019-08-09T10:11:34Z")
I have few scripted fields which are causing error post migrations from 5x to 7.0.0. Then i noticed in breaking changes that i need to include a check like below to confirm if the fields exist: A document doesn't have … --- ## [How to set index.mapping.ignore\_malformed to true, when using bulk api](https://discuss.elastic.co/t/how-to-set-index-mapping-ignore-malformed-to-true-when-using-bulk-api/194583)
**Author:** [@Saurabh\_Sharma\_IIT](https://discuss.elastic.co/u/Saurabh_Sharma_IIT)\ **Replies:** 0\ **Last updated:** [August 9, 2019, 9:59am UTC](https://discuss.elastic.co/t/how-to-set-index-mapping-ignore-malformed-to-true-when-using-bulk-api/194583 "2019-08-09T09:59:55Z")
Hi, I am experimenting with bulk api, and want to set "index.mapping.ignore\_malformed": true for all new indexes created using bulk api. What is the best way to set ignore\_malformed to true when using bulk api. Thanks --- ## [A shard closed suddenly on indexing data](https://discuss.elastic.co/t/a-shard-closed-suddenly-on-indexing-data/194170)
**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\ **Replies:** 5\ **Last updated:** [August 9, 2019, 9:47am UTC](https://discuss.elastic.co/t/a-shard-closed-suddenly-on-indexing-data/194170 "2019-08-09T09:47:13Z")
Elasticsearch version bin/elasticsearch --version 7.1.1 Logstash version 7.1.1 Plugins installed bin/elasticsearch-plugin list analysis-ik JVM version java -version java version "1.8.0\_91" Java(TM) SE Runtime Env… --- ## [Compare a field with a csv file and add info from csv in a new field](https://discuss.elastic.co/t/compare-a-field-with-a-csv-file-and-add-info-from-csv-in-a-new-field/191973)
**Author:** [@theo1991](https://discuss.elastic.co/u/theo1991)\ **Replies:** 6\ **Last updated:** [August 9, 2019, 7:33am UTC](https://discuss.elastic.co/t/compare-a-field-with-a-csv-file-and-add-info-from-csv-in-a-new-field/191973 "2019-08-09T07:33:47Z")
Hello, I have a field named id in a grok filter, which I want to compare with a CSV file. For example : Index ELK : id=12 csv file : 11,home 12,garden 13,office ... How can I compare the id field with the first fi… --- ## [Kibana and Elasticsearch not communicating with each other](https://discuss.elastic.co/t/kibana-and-elasticsearch-not-communicating-with-each-other/194124)
**Author:** [@ljacobs7211](https://discuss.elastic.co/u/ljacobs7211)\ **Replies:** 7\ **Last updated:** [August 9, 2019, 9:19am UTC](https://discuss.elastic.co/t/kibana-and-elasticsearch-not-communicating-with-each-other/194124 "2019-08-09T09:19:58Z")
Elasticsearch and Kibana are running on different VMs. I have tried about every setting in each of them to get them to communicate. Each are version 7.3. When I test Kibana I get the message Kibana not ready yet. Not… --- ## [If statements within a visualisation](https://discuss.elastic.co/t/if-statements-within-a-visualisation/194570)
**Author:** [@Darren\_Whitfield](https://discuss.elastic.co/u/Darren_Whitfield)\ **Replies:** 1\ **Last updated:** [August 9, 2019, 9:13am UTC](https://discuss.elastic.co/t/if-statements-within-a-visualisation/194570 "2019-08-09T09:13:18Z")
Hi, Im pretty new to kibana and wanting some advice on a visualisation i am creating. I am creating a basic Pie chard with a count of a field in my data structure (whitepaperNameParent). I want to add some extra comple… --- ## [Monitor Tomcat services using Beats](https://discuss.elastic.co/t/monitor-tomcat-services-using-beats/194222)
**Author:** [@Tinkerbell](https://discuss.elastic.co/u/Tinkerbell)\ **Replies:** 9\ **Last updated:** [August 9, 2019, 9:11am UTC](https://discuss.elastic.co/t/monitor-tomcat-services-using-beats/194222 "2019-08-09T09:11:18Z")
I am using Beats-\>ElasticSearch-\>Kibana for viewing the metrics. Now I need to monitor the webapplications that are deployed on a tomcat server. How can we achieve this? Please help. --- ## [ES goes to red when node restarts](https://discuss.elastic.co/t/es-goes-to-red-when-node-restarts/193716)
**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\ **Replies:** 9\ **Last updated:** [August 9, 2019, 9:04am UTC](https://discuss.elastic.co/t/es-goes-to-red-when-node-restarts/193716 "2019-08-09T09:04:42Z")
Hi I am using ES 6.4 version. And I have 3 machines, Each of them have one instance of ES master and ES data node running as separate processes. totally 6 nodes, 3 master and 3 data nodes. Replication Factor is being se… --- ## [Invisible Elastic UI Expression](https://discuss.elastic.co/t/invisible-elastic-ui-expression/194235)
**Author:** [@dkelsen](https://discuss.elastic.co/u/dkelsen)\ **Replies:** 2\ **Last updated:** [August 9, 2019, 9:04am UTC](https://discuss.elastic.co/t/invisible-elastic-ui-expression/194235 "2019-08-09T09:04:23Z")
Hi there, I was creating a plugin for Kibana 7.0.1 and now have to make it compatible with 6.5.4 (in the development environment). Strangely enough, the EuiExpression components from Elastic UI are invisible. However, … --- ## [How many users can be created in kibana? do you have limit?](https://discuss.elastic.co/t/how-many-users-can-be-created-in-kibana-do-you-have-limit/194435)
**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\ **Replies:** 3\ **Last updated:** [August 9, 2019, 8:59am UTC](https://discuss.elastic.co/t/how-many-users-can-be-created-in-kibana-do-you-have-limit/194435 "2019-08-09T08:59:05Z")
Hi There, How many users can be created in kibana? do you have limit? if so what s the ideal number which does not hit dashboard performance. Thank you!!! --- ## [How to get applied filters](https://discuss.elastic.co/t/how-to-get-applied-filters/194002)
**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\ **Replies:** 2\ **Last updated:** [August 9, 2019, 8:45am UTC](https://discuss.elastic.co/t/how-to-get-applied-filters/194002 "2019-08-09T08:45:54Z")
Hello, currently running on 6.7 (x-pack license type: basic). I wish it could be possible to know which are current filters applied to an embedded dashbord (same question as in: get filters and events ). The underly… --- ## [What must I do with the "type" feature that not available anymore when Migrating 5.6.2 to Latest Stable](https://discuss.elastic.co/t/what-must-i-do-with-the-type-feature-that-not-available-anymore-when-migrating-5-6-2-to-latest-stable/193811)
**Author:** [@emir](https://discuss.elastic.co/u/emir)\ **Replies:** 2\ **Last updated:** [August 9, 2019, 8:22am UTC](https://discuss.elastic.co/t/what-must-i-do-with-the-type-feature-that-not-available-anymore-when-migrating-5-6-2-to-latest-stable/193811 "2019-08-09T08:22:40Z")
Hi, We have a multi-tenant Elasticsearch index which works on 5.6.2 version. We have used the "type" feature that not available anymore. Now we want to migrate to the newest version but I think, we need some changes be… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1967) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1969)