# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=628 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 629 --- ## [Stopping watch service, reason \[shutdown initiated\]](https://discuss.elastic.co/t/stopping-watch-service-reason-shutdown-initiated/304902)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 4\ **Last updated:** [May 21, 2022, 1:01am UTC](https://discuss.elastic.co/t/stopping-watch-service-reason-shutdown-initiated/304902 "2022-05-21T01:01:25Z")
{"@timestamp":"2022-05-17T07:20:24.445Z", "log.level": "INFO", "message":"license mode is \[basic\], currently licensed security realms are \[reserved/reserved,file/default\_file,native/default\_native\]", "ecs.version": "1.2.… --- ## [Rename Field with \[\]](https://discuss.elastic.co/t/rename-field-with/305117)
**Author:** [@cris](https://discuss.elastic.co/u/cris)\ **Replies:** 8\ **Last updated:** [May 20, 2022, 6:04pm UTC](https://discuss.elastic.co/t/rename-field-with/305117 "2022-05-20T18:04:37Z")
Hello I want to rename some field without affect the other data. I tried with. input { elasticsearch { hosts =\> "localhost:9200" index =\> "services" size =\> 1 docinfo =\> true } } filter { … --- ## [Configuring Kibana Logging](https://discuss.elastic.co/t/configuring-kibana-logging/305112)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [May 20, 2022, 7:16pm UTC](https://discuss.elastic.co/t/configuring-kibana-logging/305112 "2022-05-20T19:16:44Z")
I don't know why this is so hard, but I can't figure out the new way of configuring logging in Kibana. I am trying to output kibana logs to a file, below is what I have. It doesn't throw errors, but it also doesn't log… --- ## [Setting Index.max\_result\_window to less than default value](https://discuss.elastic.co/t/setting-index-max-result-window-to-less-than-default-value/305305)
**Author:** [@Kishore\_Pothireddy](https://discuss.elastic.co/u/Kishore_Pothireddy)\ **Replies:** 0\ **Last updated:** [May 20, 2022, 5:25pm UTC](https://discuss.elastic.co/t/setting-index-max-result-window-to-less-than-default-value/305305 "2022-05-20T17:25:53Z")
Hi, I would like to know if there will be any performance improvement if we set the Index.max\_result\_window to 5000 upfront and adverse effects if any in doing so. Can someone pls explain? Thank you. --- ## [Logstash elasticsearch-filter module return the wrong document](https://discuss.elastic.co/t/logstash-elasticsearch-filter-module-return-the-wrong-document/305304)
**Author:** [@CyaTo](https://discuss.elastic.co/u/CyaTo)\ **Replies:** 0\ **Last updated:** [May 20, 2022, 5:05pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-module-return-the-wrong-document/305304 "2022-05-20T17:05:47Z")
Hi, I'm trying to run a logstash ingestion pipeline that is able to enrich an event by querying an Elasticsearch node But so far I can't get it to work 100%, here is what I did: My logstash pipeline look like that : i… --- ## [\]\[FATAL\]\[org.logstash.Logstash \] Logstash stopped processing because of an error: (SystemExit) exit org.jruby.exceptions.SystemExit: (SystemExit) exit](https://discuss.elastic.co/t/fatal-org-logstash-logstash-logstash-stopped-processing-because-of-an-error-systemexit-exit-org-jruby-exceptions-systemexit-systemexit-exit/305283)
**Author:** [@MOUNA1](https://discuss.elastic.co/u/MOUNA1)\ **Replies:** 5\ **Last updated:** [May 20, 2022, 11:18am UTC](https://discuss.elastic.co/t/fatal-org-logstash-logstash-logstash-stopped-processing-because-of-an-error-systemexit-exit-org-jruby-exceptions-systemexit-systemexit-exit/305283 "2022-05-20T11:18:20Z")
I want to configure logstash to receive logs from pfsense but i have an error when i tested the configuration via : /usr/share/logstash/bin/logstash --config.test\_and\_exit --log.level=debug -f /etc/logstash/conf.d/ --pa… --- ## [Select only one element inside an object](https://discuss.elastic.co/t/select-only-one-element-inside-an-object/305296)
**Author:** [@mmoreram](https://discuss.elastic.co/u/mmoreram)\ **Replies:** 3\ **Last updated:** [May 20, 2022, 3:09pm UTC](https://discuss.elastic.co/t/select-only-one-element-inside-an-object/305296 "2022-05-20T15:09:43Z")
Let's say I have an object with N fields, and I only want to return one of them. How can I do that? Can I exclude the whole object and then include one of their childs? Thanks. --- ## [If condition for text field](https://discuss.elastic.co/t/if-condition-for-text-field/305291)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 1\ **Last updated:** [May 20, 2022, 12:59pm UTC](https://discuss.elastic.co/t/if-condition-for-text-field/305291 "2022-05-20T12:59:26Z")
Hi, I am trying to search a text field for a particular value and perform an operation on the result. E.g. say, the text field is Region with values DA, DP, DE, RA, RP, RE. The condition I require is "if Region is DA, … --- ## [Corrupt indexes](https://discuss.elastic.co/t/corrupt-indexes/305277)
**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\ **Replies:** 0\ **Last updated:** [May 20, 2022, 10:27am UTC](https://discuss.elastic.co/t/corrupt-indexes/305277 "2022-05-20T10:27:17Z")
The NFS server that stores ES indices got disconnected from my server while my provider was doing some maintenance. This corrupted two indices: .kibana\_task\_manager\_7.12.1\_001 and a custom one called applications. The fo… --- ## [Elastic Performance is slow](https://discuss.elastic.co/t/elastic-performance-is-slow/304927)
**Author:** [@nagrgk](https://discuss.elastic.co/u/nagrgk)\ **Replies:** 15\ **Last updated:** [May 20, 2022, 10:22am UTC](https://discuss.elastic.co/t/elastic-performance-is-slow/304927 "2022-05-20T10:22:06Z")
Hi Team I have custom cluster built with 3 nodes and all of them are master and data nodes. (at any point only one can master) we have seen very quick data pull and push with response time is around 150ms to 250ms, but… --- ## [Elastic Alerts](https://discuss.elastic.co/t/elastic-alerts/302823)
**Author:** [@Chihi\_Imen](https://discuss.elastic.co/u/Chihi_Imen)\ **Replies:** 2\ **Last updated:** [May 20, 2022, 9:53am UTC](https://discuss.elastic.co/t/elastic-alerts/302823 "2022-05-20T09:53:15Z")
The alert does not match, please fix the problem Thanks --- ## [Error downloading GeoIP behind proxy in Elasticsearch](https://discuss.elastic.co/t/error-downloading-geoip-behind-proxy-in-elasticsearch/297152)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 1\ **Last updated:** [May 20, 2022, 9:49am UTC](https://discuss.elastic.co/t/error-downloading-geoip-behind-proxy-in-elasticsearch/297152 "2022-05-20T09:49:50Z")
Hi, everyone I have just installed Elasticsearch 7.16.3 in Red Hat 7.9. This virtual machine is behind a proxy. Looking over Elasticsearch's log, I have found an error related to GeoIP: \[2022-02-14T15:14:29,056\]\[ERROR\]… --- ## [Multiple Kibana instances on elasticsearch cluster](https://discuss.elastic.co/t/multiple-kibana-instances-on-elasticsearch-cluster/305205)
**Author:** [@George\_Dimitropoulos](https://discuss.elastic.co/u/George_Dimitropoulos)\ **Replies:** 3\ **Last updated:** [May 20, 2022, 8:40am UTC](https://discuss.elastic.co/t/multiple-kibana-instances-on-elasticsearch-cluster/305205 "2022-05-20T08:40:33Z")
I have two kibana instances on version 8.1.2 . I installed the first one with rpm and for the second one I followed kibana dev guide and built an localized kibana in order to translate the UI to greek. I used to have… --- ## [Filtered Logstash for desired part](https://discuss.elastic.co/t/filtered-logstash-for-desired-part/305142)
**Author:** [@Zerra\_Triani](https://discuss.elastic.co/u/Zerra_Triani)\ **Replies:** 2\ **Last updated:** [May 20, 2022, 7:55am UTC](https://discuss.elastic.co/t/filtered-logstash-for-desired-part/305142 "2022-05-20T07:55:24Z")
0 I have a log, and I only want to retrieve the ones I have marked in red boxes. I've tried putting it in Elasticsearch but it inserts it every row in that log. How do you take the data that I have marked and combine it… --- ## [Logstash with 'ecs-compatibility' unable to accept particular CEF Extension field](https://discuss.elastic.co/t/logstash-with-ecs-compatibility-unable-to-accept-particular-cef-extension-field/305246)
**Author:** [@wii](https://discuss.elastic.co/u/wii)\ **Replies:** 2\ **Last updated:** [May 20, 2022, 7:38am UTC](https://discuss.elastic.co/t/logstash-with-ecs-compatibility-unable-to-accept-particular-cef-extension-field/305246 "2022-05-20T07:38:57Z")
Hi, I am still new with Elastic Stack. I have a problem with Logstash configuration which I have found no answer to for days. I have two Logstash configuration, 'ecs.conf' and 'cef.conf'. These two configs are created fo… --- ## [Rules and Connectors: Include Original Event](https://discuss.elastic.co/t/rules-and-connectors-include-original-event/305189)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 0\ **Last updated:** [May 19, 2022, 12:52pm UTC](https://discuss.elastic.co/t/rules-and-connectors-include-original-event/305189 "2022-05-19T12:52:58Z")
I'm playing around with Kibana alert rules in combination with an index connector. I've successfully created an alert based on a search query which indexes an event to a defined index "Elasticsearch-alerting" if a resul… --- ## [Negative time shift for moving average?](https://discuss.elastic.co/t/negative-time-shift-for-moving-average/305073)
**Author:** [@rusLukasRath](https://discuss.elastic.co/u/rusLukasRath)\ **Replies:** 3\ **Last updated:** [May 20, 2022, 7:07am UTC](https://discuss.elastic.co/t/negative-time-shift-for-moving-average/305073 "2022-05-20T07:07:04Z")
Hello together, I'm having a little problem with one of the panels I have created. On this panel I am showing a line with an daily availability percentage (green line). Additionally I have created an moving average (bl… --- ## [Plug in kibana](https://discuss.elastic.co/t/plug-in-kibana/304808)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 3\ **Last updated:** [May 20, 2022, 7:05am UTC](https://discuss.elastic.co/t/plug-in-kibana/304808 "2022-05-20T07:05:28Z")
Hello everyone ! I need help, I would like someone to explain to me step by step how to install a plugin for sankey visualization Thank you to the future person who will help me! --- ## [Unassigned shards/indexes](https://discuss.elastic.co/t/unassigned-shards-indexes/305159)
**Author:** [@Jan\_Engelbrecht](https://discuss.elastic.co/u/Jan_Engelbrecht)\ **Replies:** 3\ **Last updated:** [May 20, 2022, 6:55am UTC](https://discuss.elastic.co/t/unassigned-shards-indexes/305159 "2022-05-20T06:55:43Z")
Hi, I'm quite new to Elastic, we're running 7.15.1 (Centos 7)on our production servers. We have 3 nodes currently and the following happened when I added a 4th one. After the 4th Node joined the cluster replication st… --- ## [Create ssl certs and place them inside elasticsearch yml](https://discuss.elastic.co/t/create-ssl-certs-and-place-them-inside-elasticsearch-yml/305204)
**Author:** [@Nikos\_Kostis](https://discuss.elastic.co/u/Nikos_Kostis)\ **Replies:** 0\ **Last updated:** [May 19, 2022, 2:50pm UTC](https://discuss.elastic.co/t/create-ssl-certs-and-place-them-inside-elasticsearch-yml/305204 "2022-05-19T14:50:52Z")
Hi I have created an es cluster inside an existing k8s cluster. Cluster is up but when i try login initially to the page of kibana it asks for the "enrolment token" that i have to create with ... --scope kibana. For t… --- ## [Help needed with ingesting custom log data](https://discuss.elastic.co/t/help-needed-with-ingesting-custom-log-data/305075)
**Author:** [@Sakis](https://discuss.elastic.co/u/Sakis)\ **Replies:** 1\ **Last updated:** [May 20, 2022, 5:15am UTC](https://discuss.elastic.co/t/help-needed-with-ingesting-custom-log-data/305075 "2022-05-20T05:15:14Z")
Hey there! I'm new to Elastic Stack (currently using the 14-day cloud trial) and I have a few questions about parsing log data. I work at an web development company and we provide customers with shop systems from Shopwa… --- ## [Elasticsearch - nested field with geo\_point type returns unsupported symbol in search](https://discuss.elastic.co/t/elasticsearch-nested-field-with-geo-point-type-returns-unsupported-symbol-in-search/304415)
**Author:** [@Pazhaniyappan](https://discuss.elastic.co/u/Pazhaniyappan)\ **Replies:** 7\ **Last updated:** [May 20, 2022, 5:14am UTC](https://discuss.elastic.co/t/elasticsearch-nested-field-with-geo-point-type-returns-unsupported-symbol-in-search/304415 "2022-05-20T05:14:13Z")
Mapping for the index: PUT /my\_locations { "mappings": { "properties": { "pin": { "type":"nested", "properties": { "location": { "type": "geo\_point" } … --- ## [I want to send this log in json without logstash](https://discuss.elastic.co/t/i-want-to-send-this-log-in-json-without-logstash/305188)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 5\ **Last updated:** [May 20, 2022, 4:27am UTC](https://discuss.elastic.co/t/i-want-to-send-this-log-in-json-without-logstash/305188 "2022-05-20T04:27:59Z")
Hello Everyone I have following log sample data I want send this log as json in Elasticsearch without using logstash any one having Idea ? sample logs "TableName": "CouponProducts","SchemaName": "dbo","RowCounts": … --- ## [Why should I add integrations in Kibana when there are indices in the relative Elastic search](https://discuss.elastic.co/t/why-should-i-add-integrations-in-kibana-when-there-are-indices-in-the-relative-elastic-search/304231)
**Author:** [@phantomsee](https://discuss.elastic.co/u/phantomsee)\ **Replies:** 2\ **Last updated:** [May 20, 2022, 2:39am UTC](https://discuss.elastic.co/t/why-should-i-add-integrations-in-kibana-when-there-are-indices-in-the-relative-elastic-search/304231 "2022-05-20T02:39:12Z")
I've already have some java log data in my Elasticsearch. But when I open Kibana, it tells me to add integrations first. I'm confused. --- ## [\_update\_by\_query for non-refreshed documents](https://discuss.elastic.co/t/update-by-query-for-non-refreshed-documents/305210)
**Author:** [@grzyboo](https://discuss.elastic.co/u/grzyboo)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 11:49pm UTC](https://discuss.elastic.co/t/update-by-query-for-non-refreshed-documents/305210 "2022-05-19T23:49:38Z")
Hi! I have an index products. What I need is to update categoryDisplayName for all products with given categoryName. Whenever my application gets an event to update categoryName the app saves it and fills it into newly … --- ## [Support case submission broken?](https://discuss.elastic.co/t/support-case-submission-broken/305184)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 2\ **Last updated:** [May 19, 2022, 11:17pm UTC](https://discuss.elastic.co/t/support-case-submission-broken/305184 "2022-05-19T23:17:47Z")
Our Gold license just renewed last month and I've been on vacation, so this is my first attempt to open a support case. There is a new field "Subscription", which can't be left empty but won't populate. I checked my su… --- ## [Elastic Maximum Amount of Date Fields in an Index](https://discuss.elastic.co/t/elastic-maximum-amount-of-date-fields-in-an-index/305181)
**Author:** [@rmarchman](https://discuss.elastic.co/u/rmarchman)\ **Replies:** 2\ **Last updated:** [May 19, 2022, 10:52pm UTC](https://discuss.elastic.co/t/elastic-maximum-amount-of-date-fields-in-an-index/305181 "2022-05-19T22:52:31Z")
Hi, I am looking for assistance regarding date fields in Elastic. I have a CSV file with 5 separate date columns, all formatted as ISO 8601 dates. After importing the file into Kibana, only the first 2 date columns were… --- ## [Parsing date in logstsh](https://discuss.elastic.co/t/parsing-date-in-logstsh/305118)
**Author:** [@jaikunwar](https://discuss.elastic.co/u/jaikunwar)\ **Replies:** 3\ **Last updated:** [May 19, 2022, 7:40pm UTC](https://discuss.elastic.co/t/parsing-date-in-logstsh/305118 "2022-05-19T19:40:39Z")
Hi team, I havee csv file with following data: name,age,gender,country,logtime John,34,male,China,2019-05-12 08:10 Basil,43,male,Taiwan,2020-05-13 8:10 Bella,25,female,USA,2018-05-14 8:10 I am using date parser as: … --- ## [Logstash error](https://discuss.elastic.co/t/logstash-error/305217)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 6:52pm UTC](https://discuss.elastic.co/t/logstash-error/305217 "2022-05-19T18:52:34Z")
I am getting below error, while loading data into old index. \[2022-05-19T23:38:51,354\]\[ERROR\]\[logstash.filters.ruby \]\[main\]\[0c9121c6ce91a23303b26f6c1387d90c28a872d644b33037968422ec670a60c1\] Ruby exception occurred: u… --- ## [How to store huge amount of unstructured data](https://discuss.elastic.co/t/how-to-store-huge-amount-of-unstructured-data/304530)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 2\ **Last updated:** [May 19, 2022, 6:18pm UTC](https://discuss.elastic.co/t/how-to-store-huge-amount-of-unstructured-data/304530 "2022-05-19T18:18:18Z")
How can i store huge amount of unstructured data for example social media chat, email, website data Please help me with storing below sample email and ideas on storing social media chat. Hi John. Thank you so much fo… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=627) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=629)