# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=631 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 632 --- ## [New to ELK and need some help with existing environment](https://discuss.elastic.co/t/new-to-elk-and-need-some-help-with-existing-environment/304885)
**Author:** [@Jason2](https://discuss.elastic.co/u/Jason2)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 3:53pm UTC](https://discuss.elastic.co/t/new-to-elk-and-need-some-help-with-existing-environment/304885 "2022-05-17T15:53:16Z")
My company uses ELK on kubernetes to monitor CICD infrastructure. We have an index that gathers a massive amount of data every day. We recently stopped showing data in the discover section. All data before two weeks ago … --- ## [Use file values as variable or iterate over values](https://discuss.elastic.co/t/use-file-values-as-variable-or-iterate-over-values/304947)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 1\ **Last updated:** [May 17, 2022, 3:42pm UTC](https://discuss.elastic.co/t/use-file-values-as-variable-or-iterate-over-values/304947 "2022-05-17T15:42:22Z")
Hello! Right now I have a pipeline that creates a field using a ruby scanner. When this scanner detects one of the values entered in the regular expression, it creates a field with that value. For example: if \[x\] { … --- ## [Get initial log from Logstash warning](https://discuss.elastic.co/t/get-initial-log-from-logstash-warning/304796)
**Author:** [@arazdolski](https://discuss.elastic.co/u/arazdolski)\ **Replies:** 9\ **Last updated:** [May 17, 2022, 3:37pm UTC](https://discuss.elastic.co/t/get-initial-log-from-logstash-warning/304796 "2022-05-17T15:37:05Z")
Hi, I have a rsyslog -\> logstash -\> Elasticsearch setup and noticed a lot of warnings with tried to parse field \[v\] as an object, but found a concrete value in Logstash logs, but I cannot find the initial syslog which L… --- ## [Removing transient settings from cluster](https://discuss.elastic.co/t/removing-transient-settings-from-cluster/304958)
**Author:** [@yquirion](https://discuss.elastic.co/u/yquirion)\ **Replies:** 1\ **Last updated:** [May 17, 2022, 3:16pm UTC](https://discuss.elastic.co/t/removing-transient-settings-from-cluster/304958 "2022-05-17T15:16:24Z")
Hello, I've set the following settings into my cluster for a temporatry moment: PUT \_cluster/settings { "transient": { "cluster.routing.allocation.disk.watermark.low": "90%", "cluster.routing.allocation.d… --- ## [How to change index pattern](https://discuss.elastic.co/t/how-to-change-index-pattern/304925)
**Author:** [@wagnar](https://discuss.elastic.co/u/wagnar)\ **Replies:** 3\ **Last updated:** [May 17, 2022, 1:59pm UTC](https://discuss.elastic.co/t/how-to-change-index-pattern/304925 "2022-05-17T13:59:02Z")
I have two different index in Elasticsearch prod and dev. I developed everything in dev pattern and after the export I changed the ID for index pattern in ndjson file. after import it is throwing error and I am not able … --- ## [How to get index contents of a website](https://discuss.elastic.co/t/how-to-get-index-contents-of-a-website/304944)
**Author:** [@Tasdiq\_Shaikh](https://discuss.elastic.co/u/Tasdiq_Shaikh)\ **Replies:** 1\ **Last updated:** [May 17, 2022, 1:39pm UTC](https://discuss.elastic.co/t/how-to-get-index-contents-of-a-website/304944 "2022-05-17T13:39:15Z")
How can I index and perform search operations on the contents of a website of a given web link like discuss.elastic.co using Java 1.8 and Elasticsearch 7.12.0? --- ## [Is Elasticsearch webcrawler an open source feature or it is paid?](https://discuss.elastic.co/t/is-elasticsearch-webcrawler-an-open-source-feature-or-it-is-paid/304789)
**Author:** [@Tasdiq\_Shaikh](https://discuss.elastic.co/u/Tasdiq_Shaikh)\ **Replies:** 6\ **Last updated:** [May 17, 2022, 1:12pm UTC](https://discuss.elastic.co/t/is-elasticsearch-webcrawler-an-open-source-feature-or-it-is-paid/304789 "2022-05-17T13:12:19Z")
What is the roadmap to implement webcrawler in my ES application using Java 1.8 and Elasticsearch version 7.12.0 --- ## [Logstash bulk request to ElasticSearch error - may be due to old indexes](https://discuss.elastic.co/t/logstash-bulk-request-to-elasticsearch-error-may-be-due-to-old-indexes/304943)
**Author:** [@DenSeb](https://discuss.elastic.co/u/DenSeb)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 12:26pm UTC](https://discuss.elastic.co/t/logstash-bulk-request-to-elasticsearch-error-may-be-due-to-old-indexes/304943 "2022-05-17T12:26:23Z")
If you get these errors in LogStash : Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_message=\>"Elasticsearch Unreachable: \[http://localhost:9200/\]\[Mantico… --- ## [Grok pattern Syslog auth](https://discuss.elastic.co/t/grok-pattern-syslog-auth/304911)
**Author:** [@CemG](https://discuss.elastic.co/u/CemG)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 11:47am UTC](https://discuss.elastic.co/t/grok-pattern-syslog-auth/304911 "2022-05-17T11:47:51Z")
Hello, I have to grok my syslog auth logs from Linux, I have a pattern, but it still nonmatch with the logs, can someone help me to see if there is an error in my gros pattern ? My filter filter { json { … --- ## [Update by Query insert new child document](https://discuss.elastic.co/t/update-by-query-insert-new-child-document/304928)
**Author:** [@Daniel\_Debray](https://discuss.elastic.co/u/Daniel_Debray)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 11:39am UTC](https://discuss.elastic.co/t/update-by-query-insert-new-child-document/304928 "2022-05-17T11:39:30Z")
Hi, i would like to know whether its possible to insert a new child document during a Update by Query task. Our situation (simplified): A product has n attributes modeled using a join field. Index template: { "m… --- ## [Match financial transactions and merchants](https://discuss.elastic.co/t/match-financial-transactions-and-merchants/304588)
**Author:** [@fabiobozzo](https://discuss.elastic.co/u/fabiobozzo)\ **Replies:** 0\ **Last updated:** [May 12, 2022, 2:35pm UTC](https://discuss.elastic.co/t/match-financial-transactions-and-merchants/304588 "2022-05-12T14:35:58Z")
I have an Elastic index with billions of transactions. An example tx: { "id": "54bfa9af-009a-437d-bd21-caaf651f7218", "amount": 100.0, "currency": "EUR", "type": "expense", ... "note": "CARD PAYMENT … --- ## [Map MySQL columns into nested fields Elastic using Logstash](https://discuss.elastic.co/t/map-mysql-columns-into-nested-fields-elastic-using-logstash/304820)
**Author:** [@Alrote](https://discuss.elastic.co/u/Alrote)\ **Replies:** 4\ **Last updated:** [May 17, 2022, 11:20am UTC](https://discuss.elastic.co/t/map-mysql-columns-into-nested-fields-elastic-using-logstash/304820 "2022-05-17T11:20:03Z")
Hello, I am struggling getting done some filtering to get in Elastic the information in the format I want. First, I have a MySQL table that I process in the input (no problem in that part). I want some of the columns t… --- ## [Action \[indices:admin/auto\_create\] is unauthorized for API key id \[AJJWM4ABcxc0XhdJgk1e\] of user \[elastic\], this action is granted by the index privileges \[auto\_configure,create\_index,manage,all\]](https://discuss.elastic.co/t/action-indices-admin-auto-create-is-unauthorized-for-api-key-id-ajjwm4abcxc0xhdjgk1e-of-user-elastic-this-action-is-granted-by-the-index-privileges-auto-configure-create-index-manage-all/302633)
**Author:** [@Mehakdeep\_singh](https://discuss.elastic.co/u/Mehakdeep_singh)\ **Replies:** 1\ **Last updated:** [May 17, 2022, 10:29am UTC](https://discuss.elastic.co/t/action-indices-admin-auto-create-is-unauthorized-for-api-key-id-ajjwm4abcxc0xhdjgk1e-of-user-elastic-this-action-is-granted-by-the-index-privileges-auto-configure-create-index-manage-all/302633 "2022-05-17T10:29:14Z")
Hi guys, I am using metricbeat to ship my AWS EC2 metrics to Elasticsearch. On running metricbeat I'm getting the below error as shown in screenshot: Please guide me to resolve this issue, as I'm new to Elasticsearc… --- ## [Querying for length of document](https://discuss.elastic.co/t/querying-for-length-of-document/304833)
**Author:** [@TomZa](https://discuss.elastic.co/u/TomZa)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 9:12am UTC](https://discuss.elastic.co/t/querying-for-length-of-document/304833 "2022-05-17T09:12:14Z")
Hi, I have documents indexed like this: "words": "Yellow dogs are barking" The example above has four tokens. While querying now via matchPhrase, is it possible to set a minimum of tokens which should be in the docu… --- ## [Where I set the variable ELASTIC\_CLIENT\_APIVERSIONING?](https://discuss.elastic.co/t/where-i-set-the-variable-elastic-client-apiversioning/304901)
**Author:** [@frankmehlhop](https://discuss.elastic.co/u/frankmehlhop)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 8:29am UTC](https://discuss.elastic.co/t/where-i-set-the-variable-elastic-client-apiversioning/304901 "2022-05-17T08:29:46Z")
At the elastic documentation I read, that I should set the variable ELASTIC\_CLIENT\_APIVERSIONING on true. But where I should set the variable? At my device / Windows 11 as environment variable? Or in which configuration … --- ## [Why query\_string not worked when used in highlight\_query？](https://discuss.elastic.co/t/why-query-string-not-worked-when-used-in-highlight-query/304897)
**Author:** [@slightKB](https://discuss.elastic.co/u/slightKB)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 7:39am UTC](https://discuss.elastic.co/t/why-query-string-not-worked-when-used-in-highlight-query/304897 "2022-05-17T07:39:11Z")
field "regAggress" is Text type "regContactAddress" : { "type" : "text", "analyzer" : "aliws" } query example: { "\_source": \["regContactAddress","\_id","entName"\], "highlight": { "fields": {… --- ## [Higher search rate when added final data node to cluster](https://discuss.elastic.co/t/higher-search-rate-when-added-final-data-node-to-cluster/302912)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 10\ **Last updated:** [May 17, 2022, 7:32am UTC](https://discuss.elastic.co/t/higher-search-rate-when-added-final-data-node-to-cluster/302912 "2022-05-17T07:32:39Z")
We've got a 5 data node v.6.8.23 cluster in production, that seems to increase search rate and cpu usage when the fifth node (exrhel0212) has joined the cluster, running on four nodes cluster is much calmer. Hints on ho… --- ## [Default TimeZone](https://discuss.elastic.co/t/default-timezone/304729)
**Author:** [@M.Naim](https://discuss.elastic.co/u/M.Naim)\ **Replies:** 12\ **Last updated:** [May 17, 2022, 5:18am UTC](https://discuss.elastic.co/t/default-timezone/304729 "2022-05-17T05:18:19Z")
Hi, I am getting issue in Timezone while Querying data on stored index. Issue: We have Dates stored like "2021-10-04T11:11:27-07:00" on server "GMT" but while pulling Data using Aggr it gets converted to "2021-10-04T18… --- ## [How to switch from Kibana dashboard to Elastic dashboard](https://discuss.elastic.co/t/how-to-switch-from-kibana-dashboard-to-elastic-dashboard/304876)
**Author:** [@amenbs](https://discuss.elastic.co/u/amenbs)\ **Replies:** 6\ **Last updated:** [May 17, 2022, 1:04am UTC](https://discuss.elastic.co/t/how-to-switch-from-kibana-dashboard-to-elastic-dashboard/304876 "2022-05-17T01:04:11Z")
I have Elasticsearch , Logstash and Kibana version 6.8 on centos 7 VM and i want to access to elastic dashboard but every time i go to ip:5601 Kibana dashboard opens. what should i do to access this dashboard : this … --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/303491)
**Author:** [@MAD\_MIkE](https://discuss.elastic.co/u/MAD_MIkE)\ **Replies:** 6\ **Last updated:** [May 16, 2022, 7:32pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/303491 "2022-05-16T19:32:11Z")
In order to install ELK in offline mode. I download all three rm package of Elasticsearch, kibana, logstash version 8.1.3 Elasticsearchsearch is installed successefully and service is running. Kibana is installed eithe… --- ## [Rename logstash.yml](https://discuss.elastic.co/t/rename-logstash-yml/304850)
**Author:** [@Marc\_Jacques](https://discuss.elastic.co/u/Marc_Jacques)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 7:26pm UTC](https://discuss.elastic.co/t/rename-logstash-yml/304850 "2022-05-16T19:26:54Z")
Hello Elastic, is this possible to rename logstash.yml? I would like to have something like logstash-name-name.yml I haven't found anything on the doc or web. There is a setting directory in startup.options, but no v… --- ## [Task cancelled warning message on elastic master node](https://discuss.elastic.co/t/task-cancelled-warning-message-on-elastic-master-node/304838)
**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\ **Replies:** 6\ **Last updated:** [May 16, 2022, 6:59pm UTC](https://discuss.elastic.co/t/task-cancelled-warning-message-on-elastic-master-node/304838 "2022-05-16T18:59:00Z")
Hello guys, My master node is printing the following warning message quite frequently: \[2022-05-16T16:03:39,712\]\[WARN \]\[r.suppressed \] \[loganshrdb03s\] path: /\_xpack/usage, params: {} java.util.concurrent.Ca… --- ## [JSON Filter works but filter refresh doesn't fix cache mapping error](https://discuss.elastic.co/t/json-filter-works-but-filter-refresh-doesnt-fix-cache-mapping-error/304708)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 10\ **Last updated:** [May 16, 2022, 3:44pm UTC](https://discuss.elastic.co/t/json-filter-works-but-filter-refresh-doesnt-fix-cache-mapping-error/304708 "2022-05-16T15:44:48Z")
Hello, I have JSON messages coming to logstash and they are getting parsed properly, however, I get the error message "no cache mapping, refresh index field list". I have done this multiple times but the error does not g… --- ## [Elasticsearch cluster](https://discuss.elastic.co/t/elasticsearch-cluster/304760)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 3:06pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster/304760 "2022-05-16T15:06:33Z")
Hi, a little confused reading the documentation on creating a cluster https://www.elastic.co/guide/en/elasticsearch/reference/7.17/high-availability-cluster-small-clusters.html#high-availability-cluster-design-two-nodes … --- ## [Ruby filter logstash (.length)](https://discuss.elastic.co/t/ruby-filter-logstash-length/304832)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 2:32pm UTC](https://discuss.elastic.co/t/ruby-filter-logstash-length/304832 "2022-05-16T14:32:12Z")
Hi, I would like to fix the length of message logstash.conf: filter { mutate { split =\> {"message" =\> "|"} ruby { code =\> "event.set('number\_of\_elements', event.get('message').length) " } … --- ## [How are Index Limits Reached?](https://discuss.elastic.co/t/how-are-index-limits-reached/304489)
**Author:** [@ezekiel.buck](https://discuss.elastic.co/u/ezekiel.buck)\ **Replies:** 4\ **Last updated:** [May 16, 2022, 2:08pm UTC](https://discuss.elastic.co/t/how-are-index-limits-reached/304489 "2022-05-16T14:08:11Z")
I'm attempting to estimate a reasonable limit to the index mappings variable and I'm in dire need of knowledge regarding what all contributes to the limit (I've read field/object mappings and field aliases go toward this… --- ## [Some Lessons in Elastic Observability could't open](https://discuss.elastic.co/t/some-lessons-in-elastic-observability-couldt-open/304513)
**Author:** [@jongpil.won](https://discuss.elastic.co/u/jongpil.won)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 2:07pm UTC](https://discuss.elastic.co/t/some-lessons-in-elastic-observability-couldt-open/304513 "2022-05-16T14:07:36Z")
I recently logged on to review Observability Fundamentlas (1 year access) There are four sessions in total, but two sessions are not connected. Lesson 1 and 2 is not opened. The page shows only "Your course is loading"… --- ## [Logstash how to keep only last elements of an array?](https://discuss.elastic.co/t/logstash-how-to-keep-only-last-elements-of-an-array/304366)
**Author:** [@zid57](https://discuss.elastic.co/u/zid57)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 2:01pm UTC](https://discuss.elastic.co/t/logstash-how-to-keep-only-last-elements-of-an-array/304366 "2022-05-16T14:01:28Z")
Hello all, I have a field which is an array and I would like to keep only the last element and put it into a new field. "data": { "path": \[ 1111, 2222, 3333 \] I tried to copy da… --- ## [Kibana rules and group by](https://discuss.elastic.co/t/kibana-rules-and-group-by/304572)
**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:30pm UTC](https://discuss.elastic.co/t/kibana-rules-and-group-by/304572 "2022-05-16T12:30:53Z")
Hi all, I am trying to create a rule/alert. The rule is working as inteded, but the mail notification is causing my troubles. Hopefully someone smarter than me can point me in the right direction. I am using the UI t… --- ## [Exists field not working on a newly added field](https://discuss.elastic.co/t/exists-field-not-working-on-a-newly-added-field/304812)
**Author:** [@askids](https://discuss.elastic.co/u/askids)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:14pm UTC](https://discuss.elastic.co/t/exists-field-not-working-on-a-newly-added-field/304812 "2022-05-16T12:14:00Z")
hi, I am using 7.16.3 ES on windows 2012. I added a new date field to existing index. I then ran \_bulk update to add the field on some existing documents. Now, when I when query the individual document, I can see the ne… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=630) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=632)