# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=632 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 633 --- ## [Cannot create an index pattern](https://discuss.elastic.co/t/cannot-create-an-index-pattern/304779)
**Author:** [@lior\_doanis](https://discuss.elastic.co/u/lior_doanis)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 9:49am UTC](https://discuss.elastic.co/t/cannot-create-an-index-pattern/304779 "2022-05-16T09:49:19Z")
Hi, So I setup ELK on a single server and I try to send telemetry to him, what I did is create index template and pipeline, Now, I try to create index pattern, But I cannot create one all I have from the list is one… --- ## [Elastic search queries working for \_search endpoint are not working for query DSL filter in Kibana](https://discuss.elastic.co/t/elastic-search-queries-working-for-search-endpoint-are-not-working-for-query-dsl-filter-in-kibana/304569)
**Author:** [@Noman\_Saleem](https://discuss.elastic.co/u/Noman_Saleem)\ **Replies:** 4\ **Last updated:** [May 16, 2022, 8:33am UTC](https://discuss.elastic.co/t/elastic-search-queries-working-for-search-endpoint-are-not-working-for-query-dsl-filter-in-kibana/304569 "2022-05-16T08:33:46Z")
Hi, I am trying to run the query on query DSL Kibana but its not working but the same query is working for the \_search endpoint. Here is the query. { "size": 0, "query": { "range": { "timest… --- ## [Generic solution for masking PII data in JSON payload](https://discuss.elastic.co/t/generic-solution-for-masking-pii-data-in-json-payload/303464)
**Author:** [@Hammad\_Ali](https://discuss.elastic.co/u/Hammad_Ali)\ **Replies:** 5\ **Last updated:** [May 16, 2022, 8:05am UTC](https://discuss.elastic.co/t/generic-solution-for-masking-pii-data-in-json-payload/303464 "2022-05-16T08:05:55Z")
Hello! Is there any generic solution to mask PII data in JSON payload, I know about mutate gsub but that doesn't seem like a generic solution. I am looking for something that filters out all of the fields and masks any … --- ## [Getting error in logstash with no other informations](https://discuss.elastic.co/t/getting-error-in-logstash-with-no-other-informations/304782)
**Author:** [@perez.koh](https://discuss.elastic.co/u/perez.koh)\ **Replies:** 0\ **Last updated:** [May 16, 2022, 6:59am UTC](https://discuss.elastic.co/t/getting-error-in-logstash-with-no-other-informations/304782 "2022-05-16T06:59:59Z")
Hello Can anyone advice on the below error, I am trying to connect the logstash to Elasticsearch, but show the below error, there is no other information, and hard to troubleshoot sudo tail /var/log/logstash/logstash-p… --- ## [Integrating ELK 8.0 with Splunk](https://discuss.elastic.co/t/integrating-elk-8-0-with-splunk/303219)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 4:02am UTC](https://discuss.elastic.co/t/integrating-elk-8-0-with-splunk/303219 "2022-05-16T04:02:24Z")
We are planning to integrate ELK 8.0 with Splunk. can some one provide steps how to send elk data to splunk --- ## [How to uninstall Elastic search 8.0 version in windows](https://discuss.elastic.co/t/how-to-uninstall-elastic-search-8-0-version-in-windows/304721)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 6\ **Last updated:** [May 16, 2022, 4:01am UTC](https://discuss.elastic.co/t/how-to-uninstall-elastic-search-8-0-version-in-windows/304721 "2022-05-16T04:01:33Z")
I want to uninstall Elasticsearch 8.0 version in Windows . Is there a Command that i can use to have it uninstalled completely . Thnks --- ## [OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/304686)
**Author:** [@Onsrm](https://discuss.elastic.co/u/Onsrm)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 2:33am UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/304686 "2022-05-16T02:33:23Z")
hello when i use this command bin/logstash -f /etc/logstash/conf.d/apache.conf i get this error : OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed i… --- ## [Memory locking requested for elasticsearch process but memory is not locked](https://discuss.elastic.co/t/memory-locking-requested-for-elasticsearch-process-but-memory-is-not-locked/304655)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 1:53am UTC](https://discuss.elastic.co/t/memory-locking-requested-for-elasticsearch-process-but-memory-is-not-locked/304655 "2022-05-16T01:53:54Z")
i am enabling bootstrap.memory\_lock: true on kubrnetes deployment of elastic multi node cluster. getting below error. Tried with this one #Set memlock limit - name: memlock-limit image: busybox im… --- ## [Data tier between two cluster](https://discuss.elastic.co/t/data-tier-between-two-cluster/304428)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 12:37am UTC](https://discuss.elastic.co/t/data-tier-between-two-cluster/304428 "2022-05-16T00:37:34Z")
maybe you know a method (is it even possible) to merge clusters? so that from the first data center it transfers data to the second cluster as data\_cold? --- ## [Why is the response of the \_analyze API not consistent?](https://discuss.elastic.co/t/why-is-the-response-of-the-analyze-api-not-consistent/304464)
**Author:** [@sandragergawi](https://discuss.elastic.co/u/sandragergawi)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 12:31pm UTC](https://discuss.elastic.co/t/why-is-the-response-of-the-analyze-api-not-consistent/304464 "2022-05-11T12:31:14Z")
Hi! We are using Elasticsearch 7.10.2 and we noticed that the response received when the {indexName}/\_analyze API is called repetitively with the same request, is sometimes different. For instance, given the following … --- ## [Removed support fields on body for POST request for field\_caps API](https://discuss.elastic.co/t/removed-support-fields-on-body-for-post-request-for-field-caps-api/304765)
**Author:** [@Oleksandr\_Priadko](https://discuss.elastic.co/u/Oleksandr_Priadko)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 12:33am UTC](https://discuss.elastic.co/t/removed-support-fields-on-body-for-post-request-for-field-caps-api/304765 "2022-05-16T00:33:07Z")
On ES v 6.4 API like that { "fields" : \["rating"\] } was deprecated and removed on v 7.x Now I have to use only URI fields request GET /\/\_field\_caps?fields=\ POST /\/\_field\_caps?fields=\ **Author:** [@Nishad\_Angre](https://discuss.elastic.co/u/Nishad_Angre)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:32am UTC](https://discuss.elastic.co/t/split-index-api-issues/304551 "2022-05-16T00:32:27Z") Hi, I have done a split index query on one of the filebeat indices. What I observe is, as the documentation mentions (Split index API | Elasticsearch Guide \[8.2\] | Elastic) once the documents are copied into another s… --- ## [Data is imported into ES in batches, and it can be queried after four minutes](https://discuss.elastic.co/t/data-is-imported-into-es-in-batches-and-it-can-be-queried-after-four-minutes/304664)
**Author:** [@halfbook](https://discuss.elastic.co/u/halfbook)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:27am UTC](https://discuss.elastic.co/t/data-is-imported-into-es-in-batches-and-it-can-be-queried-after-four-minutes/304664 "2022-05-16T00:27:24Z")
I'm currently maintaining a project for my company. The project uses a python script to import data into ES every minute. The response of importing data is returned successfully, but the data that is four minutes ago can… --- ## [If I search for more than 30days data getting the below error. Please advise where to change the "Search.max\_buckets" value?](https://discuss.elastic.co/t/if-i-search-for-more-than-30days-data-getting-the-below-error-please-advise-where-to-change-the-search-max-buckets-value/304694)
**Author:** [@ARAVINTH](https://discuss.elastic.co/u/ARAVINTH)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 12:26am UTC](https://discuss.elastic.co/t/if-i-search-for-more-than-30days-data-getting-the-below-error-please-advise-where-to-change-the-search-max-buckets-value/304694 "2022-05-16T00:26:02Z")
{ "request": {}, "response": {}, "body": { "statusCode": 503, "error": "Service Unavailable", "message": "search\_phase\_execution\_exception", "attributes": { "error": { "root\_cause": , "type": "search\_phase\_exec… --- ## [Updating from 6.8 to 7.10](https://discuss.elastic.co/t/updating-from-6-8-to-7-10/304702)
**Author:** [@luciana](https://discuss.elastic.co/u/luciana)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:23am UTC](https://discuss.elastic.co/t/updating-from-6-8-to-7-10/304702 "2022-05-16T00:23:37Z")
I'm about to upgrade my elastic stack from 6.8 to 7.10 and I have a question for which I can't find the answer to online. Should I check all the breaking changes from all the minor versions between these two, or should I… --- ## [Failed to determine the health of the cluster running](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster-running/304748)
**Author:** [@111273](https://discuss.elastic.co/u/111273)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:19am UTC](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster-running/304748 "2022-05-16T00:19:27Z")
Hi I have error master\_discovery\_exception and change password bundle user. Please have solution this case. Elasticsearch.yml cluster.name: rpa-Elasticsearch-test http.port: 9200 node.data: true node.master: true … --- ## [Getaddrinfo EAI\_AGAIN elasticsearch](https://discuss.elastic.co/t/getaddrinfo-eai-again-elasticsearch/304757)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [May 15, 2022, 9:39pm UTC](https://discuss.elastic.co/t/getaddrinfo-eai-again-elasticsearch/304757 "2022-05-15T21:39:12Z")
I have following problem with Kibana, which just installed with whole ELK stack on fresh system Ubuntu 20.04.4 LTS: Kibana server is not ready yet. Error in logs: {"ecs":{"version":"8.0.0"},"@timestamp":"2022-05-15T15… --- ## [Terms query vs lot of term queries](https://discuss.elastic.co/t/terms-query-vs-lot-of-term-queries/304762)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 0\ **Last updated:** [May 15, 2022, 9:27pm UTC](https://discuss.elastic.co/t/terms-query-vs-lot-of-term-queries/304762 "2022-05-15T21:27:54Z")
Does a terms query with n terms ORd together takes less computational resource than n separate term query? Or does ES / Lucene? internally rewrites the ORd terms to n term query? Ty! --- ## [How to uninstall logstash service in windows?](https://discuss.elastic.co/t/how-to-uninstall-logstash-service-in-windows/304740)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 2\ **Last updated:** [May 15, 2022, 6:31am UTC](https://discuss.elastic.co/t/how-to-uninstall-logstash-service-in-windows/304740 "2022-05-15T06:31:42Z")
I want to know how to uninstall Logstash in the windows server? someone please help me with the appropriate command. --- ## [Getting error on logstash server](https://discuss.elastic.co/t/getting-error-on-logstash-server/304742)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 0\ **Last updated:** [May 15, 2022, 5:57am UTC](https://discuss.elastic.co/t/getting-error-on-logstash-server/304742 "2022-05-15T05:57:32Z")
Hello team, I am getting below error on logstash. Can you please help me on this. How to handle this in logstash "log"=\>"{\\"timestamp\\":\\"2022-05-15 09:50:00,012+0400\\",\\"nodeId\\":\\"E9EBC60D-F4BD50A1-E285711E-EFEABBB0-… --- ## [Insufficient memory to run logstash-keystore](https://discuss.elastic.co/t/insufficient-memory-to-run-logstash-keystore/304734)
**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\ **Replies:** 2\ **Last updated:** [May 14, 2022, 10:16pm UTC](https://discuss.elastic.co/t/insufficient-memory-to-run-logstash-keystore/304734 "2022-05-14T22:16:17Z")
Hi all, Running logstash 7.17.3 on a 8 GB RHEL 8.5 with -Xms4g -Xmx4g. Until now I was able to run "bin/logstash-keystore --path.settings ${LOGSTASH\_CONF} list" command but now I get the following error: OpenJDK 64-Bi… --- ## [Elasticsearch query on specific key](https://discuss.elastic.co/t/elasticsearch-query-on-specific-key/304731)
**Author:** [@mostafaelsayed](https://discuss.elastic.co/u/mostafaelsayed)\ **Replies:** 7\ **Last updated:** [May 14, 2022, 5:44pm UTC](https://discuss.elastic.co/t/elasticsearch-query-on-specific-key/304731 "2022-05-14T17:44:25Z")
Suppose I have these 3 docs in Elasticsearch { id: "1", eventName: "ShipmentLoaded" }, { id: "1", eventName: "ShipmentPlanned" }, { id: "2", eventName: "ShipmentLoaded" } I want to retrieve the … --- ## [Match query](https://discuss.elastic.co/t/match-query/304310)
**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\ **Replies:** 10\ **Last updated:** [May 14, 2022, 4:07pm UTC](https://discuss.elastic.co/t/match-query/304310 "2022-05-14T16:07:30Z")
Can we add fields to match query like multi\_match , I can't add fuzziness to multi\_match with type phrase. I need to know how to add fields in match , if it can I can easily add fuzziness to fields in match query. --- ## [Limit logstash 7.5 memory usage](https://discuss.elastic.co/t/limit-logstash-7-5-memory-usage/304556)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 10\ **Last updated:** [May 14, 2022, 12:26pm UTC](https://discuss.elastic.co/t/limit-logstash-7-5-memory-usage/304556 "2022-05-14T12:26:38Z")
Hi there, is there a way to limit memory consumption of logstash 7.5? In our case logstash 'eats up' all the memory so that Elasticsearch itself gets killed on the same host (OOM killer). From 7.8 onwards a possibility… --- ## [Autocomplete address search](https://discuss.elastic.co/t/autocomplete-address-search/304715)
**Author:** [@foobar2022](https://discuss.elastic.co/u/foobar2022)\ **Replies:** 6\ **Last updated:** [May 14, 2022, 5:42am UTC](https://discuss.elastic.co/t/autocomplete-address-search/304715 "2022-05-14T05:42:59Z")
Hi, I'm trying to build an index & query for address search autocomplete for City, State & Country. I have a structured data fields: City, State Country Full (a complete field that concatenates City State & Country, … --- ## [Quotas per Index?](https://discuss.elastic.co/t/quotas-per-index/304718)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [May 14, 2022, 5:27am UTC](https://discuss.elastic.co/t/quotas-per-index/304718 "2022-05-14T05:27:08Z")
Dear community, I have a general question regarding Elasticsearch. We have a big centrl environment with many projects. Each project has its own Kibana space and index. So far so good. But some projects are much bigger … --- ## [Running logstash(pipeline.conf) through terminal by passing environment variables](https://discuss.elastic.co/t/running-logstash-pipeline-conf-through-terminal-by-passing-environment-variables/304649)
**Author:** [@vaseemQA](https://discuss.elastic.co/u/vaseemQA)\ **Replies:** 5\ **Last updated:** [May 13, 2022, 8:56pm UTC](https://discuss.elastic.co/t/running-logstash-pipeline-conf-through-terminal-by-passing-environment-variables/304649 "2022-05-13T20:56:01Z")
Hi Team, I need some help in running my Logstash project files. I've a list of .conf files in a project called pilotProject, currently I test them from my local by running following command ./logstash -f ~/pilotProjec… --- ## [Kibana - Nginx 502 Bad Gateway](https://discuss.elastic.co/t/kibana-nginx-502-bad-gateway/304709)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 1\ **Last updated:** [May 13, 2022, 7:54pm UTC](https://discuss.elastic.co/t/kibana-nginx-502-bad-gateway/304709 "2022-05-13T19:54:33Z")
I tried logging into Kibana and was greeted with a 502 Bad Gateway error. Our setup is a single server hosting elastic, logstash and kibana. On the server, I got a 302 redirect when running curl -i http://localhost:5601.… --- ## [Substring logstash](https://discuss.elastic.co/t/substring-logstash/304710)
**Author:** [@mvasqueznr](https://discuss.elastic.co/u/mvasqueznr)\ **Replies:** 1\ **Last updated:** [May 13, 2022, 6:53pm UTC](https://discuss.elastic.co/t/substring-logstash/304710 "2022-05-13T18:53:52Z")
Hi. Im use grok patterns to extract info from Palo Alto log. But im try to extract a substring on description field like this authenticated for user 'newUser'. auth profile 'D', server profile 'LTY', server address … --- ## [How do I transfer certificate from one cluster to another?](https://discuss.elastic.co/t/how-do-i-transfer-certificate-from-one-cluster-to-another/304703)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 1\ **Last updated:** [May 13, 2022, 6:21pm UTC](https://discuss.elastic.co/t/how-do-i-transfer-certificate-from-one-cluster-to-another/304703 "2022-05-13T18:21:57Z")
Hi Team, I need to move data from my single node cluster to another. I have around 80 Windows servers which are connected to Elasticsearch through elastic agent and this communication I believe happens through certifica… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=631) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=633)