# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=634 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 635 --- ## [I am getting an error with sharding along with some exceptions](https://discuss.elastic.co/t/i-am-getting-an-error-with-sharding-along-with-some-exceptions/304618)
**Author:** [@Rayhan\_Shaik](https://discuss.elastic.co/u/Rayhan_Shaik)\ **Replies:** 7\ **Last updated:** [May 12, 2022, 6:58pm UTC](https://discuss.elastic.co/t/i-am-getting-an-error-with-sharding-along-with-some-exceptions/304618 "2022-05-12T18:58:29Z")
Hi guys, I am new to ELK stack, I am getting an error in the Elasticsearch, and I am not sure how to fix this issue. can someone help me. thanks, Rayhan. --- ## [WARN \]\[logstash.inputs.rabbitmq \] Error while setting up connection for rabbitmq input!](https://discuss.elastic.co/t/warn-logstash-inputs-rabbitmq-error-while-setting-up-connection-for-rabbitmq-input/304611)
**Author:** [@lopa](https://discuss.elastic.co/u/lopa)\ **Replies:** 5\ **Last updated:** [May 12, 2022, 6:42pm UTC](https://discuss.elastic.co/t/warn-logstash-inputs-rabbitmq-error-while-setting-up-connection-for-rabbitmq-input/304611 "2022-05-12T18:42:19Z")
Hi, I'm using Logstash6.8.23 and Logstash consumes RabbitMQ message as expected. But Logstash continuously flooding with many warnings as "\[logstash.inputs.rabbitmq \] Error while setting up connection for rabbitmq inp… --- ## [Logstach is broken when using syslog pipeline](https://discuss.elastic.co/t/logstach-is-broken-when-using-syslog-pipeline/304584)
**Author:** [@sbocquet](https://discuss.elastic.co/u/sbocquet)\ **Replies:** 5\ **Last updated:** [May 12, 2022, 4:39pm UTC](https://discuss.elastic.co/t/logstach-is-broken-when-using-syslog-pipeline/304584 "2022-05-12T16:39:13Z")
Hi, I've just installed a brand new ElacticSearch v8.2 with Logstach. Both a talking well together. Kibana is installed too. Background server are Debian 11 up to date. I try to send all the logs I collect with a syslo… --- ## [Update existing document](https://discuss.elastic.co/t/update-existing-document/304581)
**Author:** [@ChinigamiHunter](https://discuss.elastic.co/u/ChinigamiHunter)\ **Replies:** 2\ **Last updated:** [May 12, 2022, 4:24pm UTC](https://discuss.elastic.co/t/update-existing-document/304581 "2022-05-12T16:24:01Z")
I am facing the following issue with Elasticsearch and logstash. every day logstash create index with current date like : mydata\_2022.05.12 i have a index patterns name: mydata\_\* i get documents from api and index the… --- ## [Unique metric count status not showing correctly due to duplication of serverid within timerange](https://discuss.elastic.co/t/unique-metric-count-status-not-showing-correctly-due-to-duplication-of-serverid-within-timerange/304604)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 0\ **Last updated:** [May 12, 2022, 3:55pm UTC](https://discuss.elastic.co/t/unique-metric-count-status-not-showing-correctly-due-to-duplication-of-serverid-within-timerange/304604 "2022-05-12T15:55:32Z")
Hello All, I'm doing a use case where in I need to able to diaplay correct "unique count" of "idle" and "Active" session and server session count(IDLE+ACTIVE=Total Session).Here I'm unable to get unique count of "idle"… --- ## [Remove left whitespaces logstash](https://discuss.elastic.co/t/remove-left-whitespaces-logstash/304514)
**Author:** [@dannie-ml](https://discuss.elastic.co/u/dannie-ml)\ **Replies:** 7\ **Last updated:** [May 12, 2022, 4:01pm UTC](https://discuss.elastic.co/t/remove-left-whitespaces-logstash/304514 "2022-05-12T16:01:15Z")
Hi i have the following fields: "delivery\_quantity" : " \\s\\s\\s\\s4", "numerator" : "\\s\\s\\s1", "denominator" : "\\s\\s\\s1" I've tried to use mutate split and gsub but didnt work. I've seen that split works when you ha… --- ## [ILM Error while deleting ES index](https://discuss.elastic.co/t/ilm-error-while-deleting-es-index/304320)
**Author:** [@Aman\_Gupta1](https://discuss.elastic.co/u/Aman_Gupta1)\ **Replies:** 1\ **Last updated:** [May 12, 2022, 3:53pm UTC](https://discuss.elastic.co/t/ilm-error-while-deleting-es-index/304320 "2022-05-12T15:53:20Z")
Hi Team, I'm facing issue while deleteing index via ILM. description: i have index with name $webservicelogs\* ( where $webservice is name of actual services and after rotation it becomes webservicelogs2022.05.10 simila… --- ## [Mappings types](https://discuss.elastic.co/t/mappings-types/304477)
**Author:** [@hebph001](https://discuss.elastic.co/u/hebph001)\ **Replies:** 10\ **Last updated:** [May 12, 2022, 3:30pm UTC](https://discuss.elastic.co/t/mappings-types/304477 "2022-05-12T15:30:56Z")
Hi Elastic community, I'm having a hard time figuring out what is wrong with my index template configuration, but Kibana shows me a message of "mapping types for this template uses types, which have been removed". I don… --- ## [Search template can not parser data in geoshape search](https://discuss.elastic.co/t/search-template-can-not-parser-data-in-geoshape-search/304446)
**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\ **Replies:** 7\ **Last updated:** [May 12, 2022, 2:42pm UTC](https://discuss.elastic.co/t/search-template-can-not-parser-data-in-geoshape-search/304446 "2022-05-12T14:42:51Z")
Hi everyone. I just set a search template like: POST \_scripts/geoshape\_search { "script": { "lang": "mustache", "source": { "query": { "geo\_shape": { "geo\_json": { "shape": { "type": "point", "coordinates": … --- ## [Escaping commas in \_routing search impossible](https://discuss.elastic.co/t/escaping-commas-in-routing-search-impossible/304578)
**Author:** [@mhamb](https://discuss.elastic.co/u/mhamb)\ **Replies:** 0\ **Last updated:** [May 12, 2022, 1:15pm UTC](https://discuss.elastic.co/t/escaping-commas-in-routing-search-impossible/304578 "2022-05-12T13:15:21Z")
Hi! I'm running an Elasticsearch production environment with a custom routing field. This has helped search performance significantly, but we just noticed that some routing fields are unsearchable as they were indexed w… --- ## [This site is inaccsessible kibana](https://discuss.elastic.co/t/this-site-is-inaccsessible-kibana/303163)
**Author:** [@Abderraouf\_ZAYEN](https://discuss.elastic.co/u/Abderraouf_ZAYEN)\ **Replies:** 10\ **Last updated:** [May 12, 2022, 11:02am UTC](https://discuss.elastic.co/t/this-site-is-inaccsessible-kibana/303163 "2022-05-12T11:02:29Z")
Hi, systemctl status kibana & systemctl status Elasticsearch & systemctl status logstash & systemctl status filebeat all active (running) . my problem in browser localhost:9200 it works but localhost:5601 didn't work (… --- ## [How to build grok filter](https://discuss.elastic.co/t/how-to-build-grok-filter/304537)
**Author:** [@smam](https://discuss.elastic.co/u/smam)\ **Replies:** 10\ **Last updated:** [May 12, 2022, 10:31am UTC](https://discuss.elastic.co/t/how-to-build-grok-filter/304537 "2022-05-12T10:31:42Z")
Hello, I want to understand how to build grok filter since other posts did not make it clear enough for me. Here are example lines I want to send: 30,05/10/22,07:30:27,DNS Update Request,\,\,,,0,6,,,,,,,,,0 11… --- ## [How to install sigma rule elk version 8](https://discuss.elastic.co/t/how-to-install-sigma-rule-elk-version-8/304237)
**Author:** [@CodeRed](https://discuss.elastic.co/u/CodeRed)\ **Replies:** 2\ **Last updated:** [May 12, 2022, 10:09am UTC](https://discuss.elastic.co/t/how-to-install-sigma-rule-elk-version-8/304237 "2022-05-12T10:09:56Z")
I am trying to install sigma rule on kibana I followed the instructions but it failed The document of sigma rule has instructions for me to execute the command: /usr/share/kibana/bin/./kibana-plugin install file:///PAT… --- ## [How to increase the performance of the kafka input in indexer](https://discuss.elastic.co/t/how-to-increase-the-performance-of-the-kafka-input-in-indexer/304549)
**Author:** [@Marco\_Bonardo](https://discuss.elastic.co/u/Marco_Bonardo)\ **Replies:** 0\ **Last updated:** [May 12, 2022, 9:42am UTC](https://discuss.elastic.co/t/how-to-increase-the-performance-of-the-kafka-input-in-indexer/304549 "2022-05-12T09:42:39Z")
Hello everyone, I have a problem I've been working on for days and I can't find a compatible solution. I need to consume about 150k messages per second via a kafka input / topic / groupid. I have 8 logstash on separate m… --- ## [\_source 50% bigger after reindex](https://discuss.elastic.co/t/source-50-bigger-after-reindex/303805)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 17\ **Last updated:** [May 12, 2022, 9:36am UTC](https://discuss.elastic.co/t/source-50-bigger-after-reindex/303805 "2022-05-12T09:36:30Z")
Hello. Context: I reindexed a 7.15 index into 7.16 one and suddenly it is taking about +50% space. By Analyze index disk usage API | Elasticsearch Guide \[7.16\] | Elastic I found that \_source field alone is now taking … --- ## [Event.original not searchable](https://discuss.elastic.co/t/event-original-not-searchable/304490)
**Author:** [@grover](https://discuss.elastic.co/u/grover)\ **Replies:** 2\ **Last updated:** [May 12, 2022, 8:40am UTC](https://discuss.elastic.co/t/event-original-not-searchable/304490 "2022-05-12T08:40:58Z")
Hi I'm new to Elasticsearch and I am trying to get information from a Juniper SRX firewall. The logs are being ingested but the information I would like to search is in event.original which is not indexed or searchable.… --- ## [哪位兄弟知道，怎么在 filebeat 的 json 模板里使用自定义的 analyzer](https://discuss.elastic.co/t/filebeat-json-analyzer/304444)
**Author:** [@fanybook](https://discuss.elastic.co/u/fanybook)\ **Replies:** 4\ **Last updated:** [May 12, 2022, 7:31am UTC](https://discuss.elastic.co/t/filebeat-json-analyzer/304444 "2022-05-12T07:31:35Z")
filebeat version: 7.17.3 json 模板是这样的 { "index\_patterns": \["test\_logs\*"\], "template": { "settings": { "number\_of\_shards": 1 }, "mappings": { "properties": { "message123": { … --- ## [Grok issue in Logstash input - data from Kafka logs using Filebeat Kafka module](https://discuss.elastic.co/t/grok-issue-in-logstash-input-data-from-kafka-logs-using-filebeat-kafka-module/303801)
**Author:** [@Sharon\_Hacham](https://discuss.elastic.co/u/Sharon_Hacham)\ **Replies:** 4\ **Last updated:** [May 12, 2022, 4:57am UTC](https://discuss.elastic.co/t/grok-issue-in-logstash-input-data-from-kafka-logs-using-filebeat-kafka-module/303801 "2022-05-12T04:57:44Z")
Hi , we are ingesting Kafka logs from on-premise servers running Kafka Connect and Kafka Rest-Proxy , We have 3 Logstash Windows servers ... we're using the built-in Dashboard you supply with the Filebeat Kafka module… --- ## [Http input and output google bigquery](https://discuss.elastic.co/t/http-input-and-output-google-bigquery/304323)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 4\ **Last updated:** [May 12, 2022, 4:27am UTC](https://discuss.elastic.co/t/http-input-and-output-google-bigquery/304323 "2022-05-12T04:27:22Z")
input { http { host =\> "0.0.0.0" # default: 0.0.0.0 port =\> 0000 # default: 8080 } } filter { urldecode { all\_fields =\> true } } filter { mutate { gsub =\> \[ "message", "\\\]", "}", "message", "\\\[", "{" \] } … --- ## [ES有request时间99分位监控吗?](https://discuss.elastic.co/t/es-request-99/302700)
**Author:** [@gaojiabao1991](https://discuss.elastic.co/u/gaojiabao1991)\ **Replies:** 1\ **Last updated:** [May 12, 2022, 2:58am UTC](https://discuss.elastic.co/t/es-request-99/302700 "2022-05-12T02:58:40Z")
Hello大家好, 我是最近刚开始接触ES, 之前用过Lucene和Solr, 最近在把公司的Solr替换为ES. 我们现在的监控是用prometheus社区提供的elasticsearch-exporter将ES的admin/metrics接口提供的系统运行信息记录到prometheus里. 然后我发现貌似ES的admin/metrics接口并没有提供查询的99分位时间信息. 之所以问这个问题是因为我知道Solr是有这个指标的. … --- ## [Elasticsearch-analysis-icu是否有词库热刷新机制？](https://discuss.elastic.co/t/elasticsearch-analysis-icu/304230)
**Author:** [@YanoDorian](https://discuss.elastic.co/u/YanoDorian)\ **Replies:** 1\ **Last updated:** [May 12, 2022, 2:55am UTC](https://discuss.elastic.co/t/elasticsearch-analysis-icu/304230 "2022-05-12T02:55:01Z")
你好，Elasticsearch-analysis-icu分词器是否支持类似IK分词器词库热刷新机制？ --- ## [Is elasticsearch, logstash impacted by opendJDK Vulnerability](https://discuss.elastic.co/t/is-elasticsearch-logstash-impacted-by-opendjdk-vulnerability/304423)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 11:30pm UTC](https://discuss.elastic.co/t/is-elasticsearch-logstash-impacted-by-opendjdk-vulnerability/304423 "2022-05-11T23:30:06Z")
is Elasticsearch and logstash got impacted by opendJDK vulnerability? CVE's The versions impacted are: OpenJDK 7 \<= 7u331 OpenJDK 8 \<= 8u322 OpenJDK 11.0.0 \<= 11.0.14 OpenJDK 13.0.0 \<= 13.0.10 OpenJDK 15.0.0 \<= … --- ## [Kibana Error - \`/app/management/data/index\_management/indices\`](https://discuss.elastic.co/t/kibana-error-app-management-data-index-management-indices/304475)
**Author:** [@JGreene](https://discuss.elastic.co/u/JGreene)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 2:20pm UTC](https://discuss.elastic.co/t/kibana-error-app-management-data-index-management-indices/304475 "2022-05-11T14:20:32Z")
Elastic version; 7.16.2 When attempting to load indices under /app/management/data/index\_management/indices, we receive the following error: Kibana error logs: {"type":"error","@timestamp":"2022-05-11T07:16:42-07:0… --- ## [Queue Size and Threadpools](https://discuss.elastic.co/t/queue-size-and-threadpools/304414)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 3\ **Last updated:** [May 11, 2022, 10:21pm UTC](https://discuss.elastic.co/t/queue-size-and-threadpools/304414 "2022-05-11T22:21:51Z")
Hello, I was wondering something about the relation between queue sizes and threadpool sizes. For example, as of the most recent version I think write thread pool has 10000 default queue. Is this queue size for each al… --- ## [Lost all Fleet agent policies and Security Rules after upgrade to 8.2](https://discuss.elastic.co/t/lost-all-fleet-agent-policies-and-security-rules-after-upgrade-to-8-2/304389)
**Author:** [@robhep](https://discuss.elastic.co/u/robhep)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 9:00pm UTC](https://discuss.elastic.co/t/lost-all-fleet-agent-policies-and-security-rules-after-upgrade-to-8-2/304389 "2022-05-11T21:00:45Z")
I have a cluster running in a lab that I use to test out things before we do them in production. This cluster started out on version 7.14.x roughly. Fleet and agents have been installed and upgraded several times, thro… --- ## [Monitoring people watching dashboards](https://discuss.elastic.co/t/monitoring-people-watching-dashboards/304499)
**Author:** [@ldibello](https://discuss.elastic.co/u/ldibello)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 7:41pm UTC](https://discuss.elastic.co/t/monitoring-people-watching-dashboards/304499 "2022-05-11T19:41:00Z")
Hi, in our company we have several users consuming different dashboards, is there a way, plugin, GTM or other solution, that I can watch how many users are watching dashboards? Hope I was clear... --- ## [Anyone out there keeping a fork of ansible-elasticsearch alive?](https://discuss.elastic.co/t/anyone-out-there-keeping-a-fork-of-ansible-elasticsearch-alive/304498)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 6:54pm UTC](https://discuss.elastic.co/t/anyone-out-there-keeping-a-fork-of-ansible-elasticsearch-alive/304498 "2022-05-11T18:54:56Z")
I just got back from a leave of absence and found that Elastic is no longer supporting GitHub - elastic/ansible-elasticsearch: Ansible playbook for Elasticsearch. Since I rely on that role for upgrades I thought I'd ask … --- ## [It would be awesome if we could integrate Jupyter Notebooks with Kibana (more seamlessly, like a dashboard)](https://discuss.elastic.co/t/it-would-be-awesome-if-we-could-integrate-jupyter-notebooks-with-kibana-more-seamlessly-like-a-dashboard/304494)
**Author:** [@J\_Todd](https://discuss.elastic.co/u/J_Todd)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 6:18pm UTC](https://discuss.elastic.co/t/it-would-be-awesome-if-we-could-integrate-jupyter-notebooks-with-kibana-more-seamlessly-like-a-dashboard/304494 "2022-05-11T18:18:22Z")
TlDr: We think, since Kibana is, after all, a web app, that it might be feasible to have Kibana support Jupyter Notebooks and use via Voila to host them as a kind of Dashboard like Canvas. Eland is proof that Elastic un… --- ## [ECE Fundamentals : Lesson 4 (Features) Proxy issue](https://discuss.elastic.co/t/ece-fundamentals-lesson-4-features-proxy-issue/303430)
**Author:** [@alombard](https://discuss.elastic.co/u/alombard)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 4:41pm UTC](https://discuss.elastic.co/t/ece-fundamentals-lesson-4-features-proxy-issue/303430 "2022-05-11T16:41:17Z")
Hello, I'm currently training through Elasticsearch learning center but I'm having trouble at the Lesson 4's lab. I was required to update my cluster from v7.17.1 to v8.1.0, this part went fine, but after that, everytim… --- ## [How to remove additional comma in part of message](https://discuss.elastic.co/t/how-to-remove-additional-comma-in-part-of-message/304472)
**Author:** [@royalE](https://discuss.elastic.co/u/royalE)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 3:36pm UTC](https://discuss.elastic.co/t/how-to-remove-additional-comma-in-part-of-message/304472 "2022-05-11T15:36:38Z")
I have string between quotation marks that is separated by comma example :"hello ,world" logstash separate them in different column which is not the output that I want I would like to remove the quotation and remove t… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=633) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=635)