# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=662 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 663 --- ## [Logstash pipeline to pipeline - send\_to field variable](https://discuss.elastic.co/t/logstash-pipeline-to-pipeline-send-to-field-variable/301625)
**Author:** [@ahmed\_charafouddine](https://discuss.elastic.co/u/ahmed_charafouddine)\ **Replies:** 2\ **Last updated:** [April 5, 2022, 2:10pm UTC](https://discuss.elastic.co/t/logstash-pipeline-to-pipeline-send-to-field-variable/301625 "2022-04-05T14:10:30Z")
Hello, I am working on the use of pipeline-to-pipeline. I wanted to value a variable and then use it in send\_to of the pipeline plugin. idea to avoid the use of several if..else conditions which surely have an impact o… --- ## [Continuous display of time difference](https://discuss.elastic.co/t/continuous-display-of-time-difference/301645)
**Author:** [@santy1](https://discuss.elastic.co/u/santy1)\ **Replies:** 0\ **Last updated:** [April 5, 2022, 1:48pm UTC](https://discuss.elastic.co/t/continuous-display-of-time-difference/301645 "2022-04-05T13:48:02Z")
Hello Team, I have 2 events , START and END, and using elapsed filter I am able to calculate the time difference and display it in Kibana using Metric chart. However, the END event occurs after 3 to 4 hours, and for th… --- ## [Integración en pagina web](https://discuss.elastic.co/t/integracion-en-pagina-web/301518)
**Author:** [@Jaime\_Alvarez\_Medina](https://discuss.elastic.co/u/Jaime_Alvarez_Medina)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 1:08pm UTC](https://discuss.elastic.co/t/integracion-en-pagina-web/301518 "2022-04-05T13:08:39Z")
Hola, necesito integrar una pagina web con Kibana en mi pagina web, pero no se como hacerlo con javascript o php, ¿alguien lo sabe?, todo lo que he encontrado es la transferencia de datos --- ## [How can I debug result score](https://discuss.elastic.co/t/how-can-i-debug-result-score/301637)
**Author:** [@Tyranwyn](https://discuss.elastic.co/u/Tyranwyn)\ **Replies:** 0\ **Last updated:** [April 5, 2022, 12:46pm UTC](https://discuss.elastic.co/t/how-can-i-debug-result-score/301637 "2022-04-05T12:46:14Z")
I would like to debug the query result score. I'm doing the query "24" in a meta engine consisting of 2 source engines. I'm getting results back that should be scored equally, but aren't and I can't tell how they would b… --- ## [MultiSearch Indexes different mapping](https://discuss.elastic.co/t/multisearch-indexes-different-mapping/301559)
**Author:** [@RabBit\_BR](https://discuss.elastic.co/u/RabBit_BR)\ **Replies:** 2\ **Last updated:** [April 5, 2022, 11:57am UTC](https://discuss.elastic.co/t/multisearch-indexes-different-mapping/301559 "2022-04-05T11:57:07Z")
Has anyone ever used a search strategy on more than one index? In my case I have different indexes, like a product index and a community index, both with different mappings. In tests using the same alias for both, sort… --- ## [How can I reduce the number of master candidate nodes from 3 to 1?](https://discuss.elastic.co/t/how-can-i-reduce-the-number-of-master-candidate-nodes-from-3-to-1/301612)
**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 11:31am UTC](https://discuss.elastic.co/t/how-can-i-reduce-the-number-of-master-candidate-nodes-from-3-to-1/301612 "2022-04-05T11:31:22Z")
There are a total of 4 nodes, of which 3 are master candidate nodes. I would like to specify one master candidate node for testing, but the operation does not proceed with the error below. "\[2019-06-19T20:16:12,366\]\[WA… --- ## [Thinking out loud, I have a large disk enclosure and want to use it for Elastic](https://discuss.elastic.co/t/thinking-out-loud-i-have-a-large-disk-enclosure-and-want-to-use-it-for-elastic/300681)
**Author:** [@UPPERCASE](https://discuss.elastic.co/u/UPPERCASE)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 11:26am UTC](https://discuss.elastic.co/t/thinking-out-loud-i-have-a-large-disk-enclosure-and-want-to-use-it-for-elastic/300681 "2022-04-05T11:26:24Z")
I've got a 84x 16Tb in a disk enclosure that can be attached with SAS, all details can be read here. This is not a disk array, so it doesn't have its own cache, hardware RAID controller or ways to export the data via e.g… --- ## [Http.max\_content\_length update on cluster](https://discuss.elastic.co/t/http-max-content-length-update-on-cluster/301476)
**Author:** [@gerasimysys](https://discuss.elastic.co/u/gerasimysys)\ **Replies:** 4\ **Last updated:** [April 5, 2022, 11:19am UTC](https://discuss.elastic.co/t/http-max-content-length-update-on-cluster/301476 "2022-04-05T11:19:24Z")
Hello. On the logstash, have error \[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[4662344eb1eeab4baf336e2996a14ddadf8c61b8943c6e31c68cb582d77f72de\] Encountered a retryable error (will retry with exponential ba ckoff) {:… --- ## [Persistent queue back pressure](https://discuss.elastic.co/t/persistent-queue-back-pressure/301570)
**Author:** [@Ahmad\_Manzoor](https://discuss.elastic.co/u/Ahmad_Manzoor)\ **Replies:** 0\ **Last updated:** [April 5, 2022, 12:26am UTC](https://discuss.elastic.co/t/persistent-queue-back-pressure/301570 "2022-04-05T00:26:50Z")
I am using logstash with jdbc input plugin and elastic app search output plugin. I have around 9,600,000 records. Out of which around 8,700,000 records are successfully uploaded to app search but remaining are pending si… --- ## [Update a variable in a scripted field definition](https://discuss.elastic.co/t/update-a-variable-in-a-scripted-field-definition/301350)
**Author:** [@uncleAlbert](https://discuss.elastic.co/u/uncleAlbert)\ **Replies:** 5\ **Last updated:** [April 5, 2022, 10:57am UTC](https://discuss.elastic.co/t/update-a-variable-in-a-scripted-field-definition/301350 "2022-04-05T10:57:10Z")
Is there a way to update a variable within a scripted field in Kibana? Say I had the following scripted field. MAP car \["bob":"toyota"\]; if (car.containsKey(doc\["owner"\].value)){ return car.get(doc\["owner"\].value); … --- ## [Elasticsearch-service.bat start (from GUI) fails](https://discuss.elastic.co/t/elasticsearch-service-bat-start-from-gui-fails/301521)
**Author:** [@Foggie](https://discuss.elastic.co/u/Foggie)\ **Replies:** 3\ **Last updated:** [April 5, 2022, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-service-bat-start-from-gui-fails/301521 "2022-04-05T10:49:06Z")
Trying to use Elasticsearch 7.17.1 as a service on a Windows Server 2016. I run Elasticsearch-service manager and press Start from the GUI. After a short while it stops. here is the debug log: \< \[2022-04-04 14:17:33\]… --- ## [Elasticsearch search document with nested document with optional fields](https://discuss.elastic.co/t/elasticsearch-search-document-with-nested-document-with-optional-fields/301604)
**Author:** [@kemot90](https://discuss.elastic.co/u/kemot90)\ **Replies:** 2\ **Last updated:** [April 5, 2022, 10:21am UTC](https://discuss.elastic.co/t/elasticsearch-search-document-with-nested-document-with-optional-fields/301604 "2022-04-05T10:21:03Z")
I try to create query for nested object that contains year and month. Both of them are optional. If some field not exists we treat them as hit. I found one solution but it causes combinatorial explosion of terms so I'm t… --- ## [Extract number from a text in kibana](https://discuss.elastic.co/t/extract-number-from-a-text-in-kibana/301605)
**Author:** [@Roberto\_Mejri](https://discuss.elastic.co/u/Roberto_Mejri)\ **Replies:** 5\ **Last updated:** [April 5, 2022, 9:47am UTC](https://discuss.elastic.co/t/extract-number-from-a-text-in-kibana/301605 "2022-04-05T09:47:57Z")
Hi, I need to extract a number from these text and then get the result if the value is greater than 1 or lesser than 1, can somebody knows how to do that? I show in the picture whitch filters I use to get the message, I… --- ## [Kibana Table - Number of Hosts per Average CPU Load - Columns per CPU Load Range (0-50 / 50-80 / 80+ )](https://discuss.elastic.co/t/kibana-table-number-of-hosts-per-average-cpu-load-columns-per-cpu-load-range-0-50-50-80-80/301189)
**Author:** [@mazoutte](https://discuss.elastic.co/u/mazoutte)\ **Replies:** 5\ **Last updated:** [April 5, 2022, 8:53am UTC](https://discuss.elastic.co/t/kibana-table-number-of-hosts-per-average-cpu-load-columns-per-cpu-load-range-0-50-50-80-80/301189 "2022-04-05T08:53:27Z")
Hello everybody, ELK Stack : 7.17.1 I have metricbeat agents installed on a bunched of Windows Domain Controllers, which are spread accross multiple AD Domains/forest. (50+) I have a field with the FDQN AD domain popu… --- ## [ELK+Filebeat errors - multiline\_codec\_max\_lines\_reached, \_xmlparsefailure, \_split\_type\_failure - Large XML Files - pushing Child nodes as separate events](https://discuss.elastic.co/t/elk-filebeat-errors-multiline-codec-max-lines-reached-xmlparsefailure-split-type-failure-large-xml-files-pushing-child-nodes-as-separate-events/301538)
**Author:** [@rubberband](https://discuss.elastic.co/u/rubberband)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 3:38pm UTC](https://discuss.elastic.co/t/elk-filebeat-errors-multiline-codec-max-lines-reached-xmlparsefailure-split-type-failure-large-xml-files-pushing-child-nodes-as-separate-events/301538 "2022-04-04T15:38:24Z")
Dear Team, Requesting your guidance to solve this problem. Big Problem: There's a set of old, HUGE XML files (100+ MB per file, not pretty-formatted, and over 100 million characters) with logs that I have been trying t… --- ## [Need help with Pattern Capture Token Filter](https://discuss.elastic.co/t/need-help-with-pattern-capture-token-filter/301469)
**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 8:17am UTC](https://discuss.elastic.co/t/need-help-with-pattern-capture-token-filter/301469 "2022-04-04T08:17:11Z")
I am currently using the Pattern Capture Group Token Filter inside an Elasticsearch plugin. Currently, the plugin is working absolutely fine and is emitting the tokens also. But, the issue is that the pattern which I am … --- ## [Logstash does not execute config file](https://discuss.elastic.co/t/logstash-does-not-execute-config-file/301594)
**Author:** [@Niya](https://discuss.elastic.co/u/Niya)\ **Replies:** 0\ **Last updated:** [April 5, 2022, 6:46am UTC](https://discuss.elastic.co/t/logstash-does-not-execute-config-file/301594 "2022-04-05T06:46:55Z")
I want some data in a postgresql database to be indexed to an Elasticsearch index. To do so I decided to use Logstash. I installed Logstash and JDBC. I perform the following config: jdbc { jdbc\_connection\_s… --- ## [Logstash aborted when run in multipipeline](https://discuss.elastic.co/t/logstash-aborted-when-run-in-multipipeline/301459)
**Author:** [@Vikrant1](https://discuss.elastic.co/u/Vikrant1)\ **Replies:** 2\ **Last updated:** [April 5, 2022, 6:23am UTC](https://discuss.elastic.co/t/logstash-aborted-when-run-in-multipipeline/301459 "2022-04-05T06:23:49Z")
Hi All, When am trying to run multi-pipeline one - two logstash pipe-line getting abort by error - Errno::ENOENT: No such file or directory - /home/user/.logstash\_jdbc\_last\_run\> am not able to find this mentioned file … --- ## [Prioritise health checks in ES cluster to prevent nodes falling out](https://discuss.elastic.co/t/prioritise-health-checks-in-es-cluster-to-prevent-nodes-falling-out/301578)
**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 4:04am UTC](https://discuss.elastic.co/t/prioritise-health-checks-in-es-cluster-to-prevent-nodes-falling-out/301578 "2022-04-05T04:04:58Z")
Hi I have a 30 node cluster. Occasionally, I encounter searches that spams the cluster, causing health checks to fail. I see errors like "SERVICE\_UNAVAILABLE/2/no master\]" and my coordinating node falls out of the clust… --- ## [Incorrect HTTP method for URI](https://discuss.elastic.co/t/incorrect-http-method-for-uri/301440)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 4\ **Last updated:** [April 5, 2022, 3:38am UTC](https://discuss.elastic.co/t/incorrect-http-method-for-uri/301440 "2022-04-05T03:38:06Z")
Hi guys, PUT /\ PUT /%3Cmy-index-%7Bnow%2Fd%7D%3E I'm getting this error when I run the command above. { "error" : "Incorrect HTTP method for uri \[/%3Cmy-index-%7Bnow/d%7D%3E?pretty=true\] and method… --- ## [Data stopped coming after DST change (Logstash JDBC input)](https://discuss.elastic.co/t/data-stopped-coming-after-dst-change-logstash-jdbc-input/301562)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 4\ **Last updated:** [April 5, 2022, 2:25am UTC](https://discuss.elastic.co/t/data-stopped-coming-after-dst-change-logstash-jdbc-input/301562 "2022-04-05T02:25:25Z")
Hi, We had the DST change in Australia. \[ It ends at 2am (which is 3am Daylight Saving Time) on the first Sunday in April , when clocks are put back one hour.\] The data came in till 1:59 AM in night (April 3rd, 2022) … --- ## [Query in ElasticSearch comparing properties in a document](https://discuss.elastic.co/t/query-in-elasticsearch-comparing-properties-in-a-document/301246)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 4\ **Last updated:** [April 5, 2022, 1:37am UTC](https://discuss.elastic.co/t/query-in-elasticsearch-comparing-properties-in-a-document/301246 "2022-04-05T01:37:46Z")
Is it possible in Elasticsearch to search for documents that have two equal/different properties or a property in the document root is equal/different to a property in a nested property? For example, I have a document t… --- ## [Забивается RAM](https://discuss.elastic.co/t/ram/299927)
**Author:** [@Uporaba](https://discuss.elastic.co/u/Uporaba)\ **Replies:** 0\ **Last updated:** [March 17, 2022, 9:37am UTC](https://discuss.elastic.co/t/ram/299927 "2022-03-17T09:37:41Z")
Добрый день. Есть кластер из 3 машин 16 ядер 32 гига оперативки. Последние 2 недели появилась проблема, что из 32 гигов становиться заполненным 28-29 ГБ. Грешил на кеш, чистил его, но память не уходила. Перезагрузка само… --- ## [Logstash is not sending data to the output](https://discuss.elastic.co/t/logstash-is-not-sending-data-to-the-output/301432)
**Author:** [@Bkumar](https://discuss.elastic.co/u/Bkumar)\ **Replies:** 6\ **Last updated:** [April 4, 2022, 6:34pm UTC](https://discuss.elastic.co/t/logstash-is-not-sending-data-to-the-output/301432 "2022-04-04T18:34:19Z")
Hi, This is the message source is sending to the logstash \<132\>Mar 13 23:50:32 k8s-93f066ee-9b76 {\\"projectid\\":\\"JHAR\_BV\\",\\"\_kmd\\":{\\"lmt\\":\\"2022-03-13T23:50:26:388Z\\",\\"ecf\\":\\"2022-03-13T23:50:26:388Z\\"},\\type\\":\\… --- ## [Reference Tables in Elastic](https://discuss.elastic.co/t/reference-tables-in-elastic/301369)
**Author:** [@Matthew\_Dominic\_Ramp](https://discuss.elastic.co/u/Matthew_Dominic_Ramp)\ **Replies:** 7\ **Last updated:** [April 4, 2022, 6:24pm UTC](https://discuss.elastic.co/t/reference-tables-in-elastic/301369 "2022-04-04T18:24:12Z")
Scenario: I have a multi-field index which stores documents, 'index a', which has a field "id" whose value is a hexadecimal number i have another index 'b' which stores a list of id's and their corresponding string nam… --- ## [Log ingestion to Elastic Cloud not working with ECS Fargate](https://discuss.elastic.co/t/log-ingestion-to-elastic-cloud-not-working-with-ecs-fargate/300762)
**Author:** [@Gabriel\_Carvalho](https://discuss.elastic.co/u/Gabriel_Carvalho)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 6:23pm UTC](https://discuss.elastic.co/t/log-ingestion-to-elastic-cloud-not-working-with-ecs-fargate/300762 "2022-04-04T18:23:48Z")
Hi everyone! I am trying to send logs of my apps running on an ECS Fargate Cluster to Elastic Cloud. I am using aws firelens logging driver and fluentbit as log router, I followed Elastic Cloud's documentation and every… --- ## [Elastic Training CTF password reset](https://discuss.elastic.co/t/elastic-training-ctf-password-reset/301550)
**Author:** [@karlaugust.j.smith](https://discuss.elastic.co/u/karlaugust.j.smith)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 6:12pm UTC](https://discuss.elastic.co/t/elastic-training-ctf-password-reset/301550 "2022-04-04T18:12:19Z")
Unable to log into CTF for Protocol Analysis course. Training Operations referred me to the Discuss Forum. Does anyone know who to contact for a password reset? Thanks --- ## [Is it possible to exclude the geo\_shape match field in a geo\_match enrich policy?](https://discuss.elastic.co/t/is-it-possible-to-exclude-the-geo-shape-match-field-in-a-geo-match-enrich-policy/301007)
**Author:** [@Joseph\_Parish](https://discuss.elastic.co/u/Joseph_Parish)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 6:00pm UTC](https://discuss.elastic.co/t/is-it-possible-to-exclude-the-geo-shape-match-field-in-a-geo-match-enrich-policy/301007 "2022-04-04T18:00:23Z")
I am following this example and excluded the match\_field from the enrich\_fields (the example includes the match\_field in the array) but the match\_field still shows up in the target\_field. The reason for exclusion is that… --- ## [Unable to send data from metricbeat to logstash](https://discuss.elastic.co/t/unable-to-send-data-from-metricbeat-to-logstash/301523)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 5:46pm UTC](https://discuss.elastic.co/t/unable-to-send-data-from-metricbeat-to-logstash/301523 "2022-04-04T17:46:53Z")
Hello , Can someone help in this,I'm unable to send data from metricbeat to logstash. Below are the configurations: metricbeat.config.modules: path: ${path.config}/modules.d/\*.yml reload.enabled: false setup.kiban… --- ## [Logstash kv plugin is not working](https://discuss.elastic.co/t/logstash-kv-plugin-is-not-working/300548)
**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\ **Replies:** 10\ **Last updated:** [April 4, 2022, 3:36pm UTC](https://discuss.elastic.co/t/logstash-kv-plugin-is-not-working/300548 "2022-04-04T15:36:42Z")
I am using ELK 7.6.2 The problem is when I remove the kv plugin, there is log loaded to Elasticsearch, when I add kv plugin, there is zero data can be loaded to Elasticsearch. Moreover, there is no error is logged in t… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=661) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=663)