# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=664 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 665 --- ## [Logstash pipeline running but not loading the data](https://discuss.elastic.co/t/logstash-pipeline-running-but-not-loading-the-data/301427)
**Author:** [@acozme](https://discuss.elastic.co/u/acozme)\ **Replies:** 2\ **Last updated:** [April 3, 2022, 3:02pm UTC](https://discuss.elastic.co/t/logstash-pipeline-running-but-not-loading-the-data/301427 "2022-04-03T15:02:27Z")
Hello! I'm starting to learn Elastick Stack. Right now I'm trying to load some data from a csv file from a tutorial. I think everything is ok, the pipeline is running but no data is loaded to Elastic. This is the conf f… --- ## [Elastic search complex query](https://discuss.elastic.co/t/elastic-search-complex-query/301399)
**Author:** [@Hassan\_Shaitou](https://discuss.elastic.co/u/Hassan_Shaitou)\ **Replies:** 5\ **Last updated:** [April 3, 2022, 2:15pm UTC](https://discuss.elastic.co/t/elastic-search-complex-query/301399 "2022-04-03T14:15:03Z")
So, let us say I have 2 indices users and products. Within users I have the following format: users: { uid:"00001", name:"Hash", country:"US" }, Within the products I have the following format: product: { prod… --- ## [Aliases and indices on demand](https://discuss.elastic.co/t/aliases-and-indices-on-demand/298625)
**Author:** [@Metheny](https://discuss.elastic.co/u/Metheny)\ **Replies:** 10\ **Last updated:** [April 3, 2022, 1:08pm UTC](https://discuss.elastic.co/t/aliases-and-indices-on-demand/298625 "2022-04-03T13:08:08Z")
We have many indices in our system, and we're following the general guideline to create indices only on demand. We're also starting to use aliases to allow for rollover and for background data migrations (using the inde… --- ## [Oracle vs elastic](https://discuss.elastic.co/t/oracle-vs-elastic/301256)
**Author:** [@dridk](https://discuss.elastic.co/u/dridk)\ **Replies:** 1\ **Last updated:** [April 3, 2022, 11:49am UTC](https://discuss.elastic.co/t/oracle-vs-elastic/301256 "2022-04-03T11:49:13Z")
Bonjour, Je decouvre un peu elastic et j'aimerai bien votre avis. Je dois réaliser une moteur de recherche, type google, sur des documents non structurés déjà présent dans une base de données oracle. Ce sont des donnée… --- ## [The new variable in the filter ruby event must be set() before it can be used?](https://discuss.elastic.co/t/the-new-variable-in-the-filter-ruby-event-must-be-set-before-it-can-be-used/301406)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [April 3, 2022, 4:08am UTC](https://discuss.elastic.co/t/the-new-variable-in-the-filter-ruby-event-must-be-set-before-it-can-be-used/301406 "2022-04-03T04:08:51Z")
ruby { code =\> " pubtime\_new = event.get('\[pubtime\]').to\_i \* 1000 event.set('pubtime\_new',pubtime\_new) \>\>\>\> If I don't register pubtime\_new then below can't get the value of pubtime\_new.… --- ## [How to Increase timeout for kibana file upload](https://discuss.elastic.co/t/how-to-increase-timeout-for-kibana-file-upload/301407)
**Author:** [@fawazahmed0](https://discuss.elastic.co/u/fawazahmed0)\ **Replies:** 1\ **Last updated:** [April 3, 2022, 1:45am UTC](https://discuss.elastic.co/t/how-to-increase-timeout-for-kibana-file-upload/301407 "2022-04-03T01:45:33Z")
Hi I am getting started with Elasticsearch and I would like to import a csv file into Elasticsearch index. The problem is that, it is getting timeout error (file size is around 8mb). How would I increase the timeout… --- ## [Assign Email Connector to Multiple Rules](https://discuss.elastic.co/t/assign-email-connector-to-multiple-rules/301148)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [April 2, 2022, 10:05pm UTC](https://discuss.elastic.co/t/assign-email-connector-to-multiple-rules/301148 "2022-04-02T22:05:35Z")
Is there a way to assign the Email connector to multiple detection rule actions at once? Or do you have to set these rule actions for each individual rule? The documentation seems to indicate the latter, but this doesn't… --- ## [Duplicate Tokens in elasticsearch uax\_url\_email tokenizer](https://discuss.elastic.co/t/duplicate-tokens-in-elasticsearch-uax-url-email-tokenizer/301398)
**Author:** [@TheGreatBaldOne](https://discuss.elastic.co/u/TheGreatBaldOne)\ **Replies:** 0\ **Last updated:** [April 2, 2022, 7:02pm UTC](https://discuss.elastic.co/t/duplicate-tokens-in-elasticsearch-uax-url-email-tokenizer/301398 "2022-04-02T19:02:48Z")
I have created a test index here { "settings" : { "analysis" : { "filter" : { "emailcustom" : { … --- ## [Sending Data from Metricbeat to Logstash not working](https://discuss.elastic.co/t/sending-data-from-metricbeat-to-logstash-not-working/301320)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 3\ **Last updated:** [April 2, 2022, 4:27pm UTC](https://discuss.elastic.co/t/sending-data-from-metricbeat-to-logstash-not-working/301320 "2022-04-02T16:27:15Z")
Hello All, In current implementation the data is going well from metricbeat to elastic but now while changing it from metricbeat-\>logstash-\>elastic it dosent works,data is not received by logstash.Can someone help wher… --- ## [Mutate replace using if](https://discuss.elastic.co/t/mutate-replace-using-if/301393)
**Author:** [@travlest](https://discuss.elastic.co/u/travlest)\ **Replies:** 0\ **Last updated:** [April 2, 2022, 3:09pm UTC](https://discuss.elastic.co/t/mutate-replace-using-if/301393 "2022-04-02T15:09:05Z")
Hi, I have a question regarding updating and removing logstash. My situation is, that I am collecting logs using API, for the first time data is being shipped into logstash, the "GeoIP" is empty space, but it will have u… --- ## [The query speed of sentence vector in elasticsearch8 is slow](https://discuss.elastic.co/t/the-query-speed-of-sentence-vector-in-elasticsearch8-is-slow/301380)
**Author:** [@qili](https://discuss.elastic.co/u/qili)\ **Replies:** 0\ **Last updated:** [April 2, 2022, 6:24am UTC](https://discuss.elastic.co/t/the-query-speed-of-sentence-vector-in-elasticsearch8-is-slow/301380 "2022-04-02T06:24:40Z")
The es7.16.2 version inserts 3 million 768-dimensional sentence vectors, and the query results in 2-3 seconds. After the es8.1.1 version is used, the query time reaches 5 or 6 minutes. Is there any special configuration … --- ## [Проблемы с отображением гео-кластеров на карты](https://discuss.elastic.co/t/topic/301385)
**Author:** [@Fess](https://discuss.elastic.co/u/Fess)\ **Replies:** 1\ **Last updated:** [April 2, 2022, 9:38am UTC](https://discuss.elastic.co/t/topic/301385 "2022-04-02T09:38:47Z")
Добрый день, рзвёрнут кластер Elasticsearch 7.1.2 в закрытой сети без доступа к интернету. Отображение иочек на карте работает, но при включения режима отображать кластера при количестве более 10000 отображение не происх… --- ## [How to set up filebeat](https://discuss.elastic.co/t/how-to-set-up-filebeat/301382)
**Author:** [@mick463](https://discuss.elastic.co/u/mick463)\ **Replies:** 0\ **Last updated:** [April 2, 2022, 7:38am UTC](https://discuss.elastic.co/t/how-to-set-up-filebeat/301382 "2022-04-02T07:38:29Z")
Hi I am trying to set up filebeat to learn how to use it and Elastic ( I am new to this) I have set up winlogbeat and metric beat and they are working. When i set up filebeat i get No matching indices found: No indice… --- ## [Will allocation settings work on closed indexes?](https://discuss.elastic.co/t/will-allocation-settings-work-on-closed-indexes/301190)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 4\ **Last updated:** [April 2, 2022, 2:15am UTC](https://discuss.elastic.co/t/will-allocation-settings-work-on-closed-indexes/301190 "2022-04-02T02:15:26Z")
When I set the cluster settings as follows： "cluster.routing.allocation.exclude.\_ip" : "10.1.1.1" It's means that All indices will be removed from this node（10.1.1.1） My question is ：Will the closed index be moved？ --- ## [Slow cosine similarity script](https://discuss.elastic.co/t/slow-cosine-similarity-script/299496)
**Author:** [@adibaba](https://discuss.elastic.co/u/adibaba)\ **Replies:** 4\ **Last updated:** [April 1, 2022, 11:02pm UTC](https://discuss.elastic.co/t/slow-cosine-similarity-script/299496 "2022-04-01T23:02:22Z")
Hi, in a query, I am executing a cosine similarity script. It takes multiple seconds, but the top command shows CPU and memory usage of nearly zero. It looks like a configuration issue to me, but I can not figure out th… --- ## [Adding component templates to existing index templates](https://discuss.elastic.co/t/adding-component-templates-to-existing-index-templates/301368)
**Author:** [@ARDiver86](https://discuss.elastic.co/u/ARDiver86)\ **Replies:** 0\ **Last updated:** [April 1, 2022, 7:09pm UTC](https://discuss.elastic.co/t/adding-component-templates-to-existing-index-templates/301368 "2022-04-01T19:09:56Z")
How can I apply a new component template to all existing index templates that I have? I know you can supply the "composed\_of" field, but that looks like all of the component templates that should be on the index template… --- ## [Can the Facet Name be configured](https://discuss.elastic.co/t/can-the-facet-name-be-configured/300988)
**Author:** [@John\_Agricola](https://discuss.elastic.co/u/John_Agricola)\ **Replies:** 4\ **Last updated:** [April 1, 2022, 6:21pm UTC](https://discuss.elastic.co/t/can-the-facet-name-be-configured/300988 "2022-04-01T18:21:29Z")
Hi everyone, we are using Elastic Enterprise search with Search UI. As we all know, the key can only be lowercases and numbers with no whitespaces. This is OK when converting the name of our keys, but looks really bad … --- ## [Comparative study for ELK VS SolarWind](https://discuss.elastic.co/t/comparative-study-for-elk-vs-solarwind/301357)
**Author:** [@gbiswas](https://discuss.elastic.co/u/gbiswas)\ **Replies:** 0\ **Last updated:** [April 1, 2022, 5:10pm UTC](https://discuss.elastic.co/t/comparative-study-for-elk-vs-solarwind/301357 "2022-04-01T17:10:01Z")
Looking for some comparative study on why ELK would be a better choice than SolarWind for application monitoring and Management --- ## [Elastic Endpoint 8.1 - File locking issues](https://discuss.elastic.co/t/elastic-endpoint-8-1-file-locking-issues/299253)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 19\ **Last updated:** [April 1, 2022, 4:35pm UTC](https://discuss.elastic.co/t/elastic-endpoint-8-1-file-locking-issues/299253 "2022-04-01T16:35:48Z")
Recently updated to 8.1 being it's only been out for a day... Endpoint is locking certain files which is stalling applications causing huge problems! This forces applications to crash and corrupt databases files. Only w… --- ## [Logstash to Elasticsearch resilience](https://discuss.elastic.co/t/logstash-to-elasticsearch-resilience/301346)
**Author:** [@gneves](https://discuss.elastic.co/u/gneves)\ **Replies:** 4\ **Last updated:** [April 1, 2022, 4:33pm UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-resilience/301346 "2022-04-01T16:33:02Z")
Hello everyone, Im having a little bit of trouble finding a way to approach resilience on my Elasticsearch cluster. Currently i have 2 Logstash nodes for resilience. Each one of them are pointing to my 4 Elasticsearch… --- ## [How to improve Logstash configuration for outputs](https://discuss.elastic.co/t/how-to-improve-logstash-configuration-for-outputs/301332)
**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\ **Replies:** 1\ **Last updated:** [April 1, 2022, 4:25pm UTC](https://discuss.elastic.co/t/how-to-improve-logstash-configuration-for-outputs/301332 "2022-04-01T16:25:27Z")
Dear team, can you advise on how to improve my configuration for outputs from Logstash? In our environment, the only output is Elasticsearch, and we have around 30 sources which are sent to Elasticsearch from logstash … --- ## [Parse nested json - Logstash v16.2 on Windows 10](https://discuss.elastic.co/t/parse-nested-json-logstash-v16-2-on-windows-10/301296)
**Author:** [@Ely\_96](https://discuss.elastic.co/u/Ely_96)\ **Replies:** 1\ **Last updated:** [April 1, 2022, 4:15pm UTC](https://discuss.elastic.co/t/parse-nested-json-logstash-v16-2-on-windows-10/301296 "2022-04-01T16:15:36Z")
Hi guys, I'm trying to import a nested json into Elasticsearch v7.16, but I haven't been successful so far. I managed successfully to import a "normal" (not nested) json, but for the nested one I'm in trouble. Could you … --- ## [Logstash pipeline development tool 2022](https://discuss.elastic.co/t/logstash-pipeline-development-tool-2022/301325)
**Author:** [@epacke](https://discuss.elastic.co/u/epacke)\ **Replies:** 0\ **Last updated:** [April 1, 2022, 1:16pm UTC](https://discuss.elastic.co/t/logstash-pipeline-development-tool-2022/301325 "2022-04-01T13:16:31Z")
Hi there! It's time for the yearly release. :slight\_smile: For those that have not seen it it's a tool to help with the development of logstash filters. You simply enter raw log lines into an input field, choose which … --- ## [1 of 21 shards failed](https://discuss.elastic.co/t/1-of-21-shards-failed/301259)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 4\ **Last updated:** [April 1, 2022, 12:42pm UTC](https://discuss.elastic.co/t/1-of-21-shards-failed/301259 "2022-04-01T12:42:55Z")
Hello, today I went to my dashboard and saw such an error "1 of 21 shards failed", looking at the details I saw the following Request: { "aggs": { "2": { "terms": { "field": "agent.name", "or… --- ## [Huge aggregation triggers CircuitBreaker in loop](https://discuss.elastic.co/t/huge-aggregation-triggers-circuitbreaker-in-loop/299637)
**Author:** [@elephant](https://discuss.elastic.co/u/elephant)\ **Replies:** 4\ **Last updated:** [April 1, 2022, 11:15am UTC](https://discuss.elastic.co/t/huge-aggregation-triggers-circuitbreaker-in-loop/299637 "2022-04-01T11:15:20Z")
Hi, I was trying to make aggregations on a very huge index. The search triggered the circuit breaker which was expected given the size of the index (billion of documents): elastic1\_1 | "Caused by: org.elastics… --- ## [Shard relocation progress, 2022](https://discuss.elastic.co/t/shard-relocation-progress-2022/301314)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 1\ **Last updated:** [April 1, 2022, 10:53am UTC](https://discuss.elastic.co/t/shard-relocation-progress-2022/301314 "2022-04-01T10:53:40Z")
What's the best way to monitor shard relocation progress? This is follow-up to Shard relocation progress --- ## [Enrichment via Elasticsearch Lookup](https://discuss.elastic.co/t/enrichment-via-elasticsearch-lookup/301295)
**Author:** [@shinobu](https://discuss.elastic.co/u/shinobu)\ **Replies:** 1\ **Last updated:** [April 1, 2022, 10:37am UTC](https://discuss.elastic.co/t/enrichment-via-elasticsearch-lookup/301295 "2022-04-01T10:37:05Z")
Hello, I tried to enrich alerting information with data from a logindex. In Logstash I configured the following as a filter: elasticsearch { hosts =\> \["http://localhost:9200"\] index =\> "logfile" query =\> … --- ## [No Write Index in Elasticsearch](https://discuss.elastic.co/t/no-write-index-in-elasticsearch/301306)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 1\ **Last updated:** [April 1, 2022, 10:23am UTC](https://discuss.elastic.co/t/no-write-index-in-elasticsearch/301306 "2022-04-01T10:23:55Z")
Hi, I accidently deleted the active logstash-xxxxx indices. Now my logs cannot index. I check the logstash logs, below is the warning. \[2022-04-01T18:11:02,900\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[bd7d93f8f… --- ## [Is logstash 7.16.2 effected with CVE-2022-22965.A remote code execution vulnerability](https://discuss.elastic.co/t/is-logstash-7-16-2-effected-with-cve-2022-22965-a-remote-code-execution-vulnerability/301305)
**Author:** [@rama543](https://discuss.elastic.co/u/rama543)\ **Replies:** 0\ **Last updated:** [April 1, 2022, 10:09am UTC](https://discuss.elastic.co/t/is-logstash-7-16-2-effected-with-cve-2022-22965-a-remote-code-execution-vulnerability/301305 "2022-04-01T10:09:54Z")
We deployed Logstash 7.16.2 version in amazon EC2 instances . Is logstash imacted with this new vulnerability CVE-2022-22965(Spring4shell) A remote code execution vulnerability Thanks --- ## [Environment variable to configure elasticsearch.customHeaders for Kibana](https://discuss.elastic.co/t/environment-variable-to-configure-elasticsearch-customheaders-for-kibana/301304)
**Author:** [@duarnad](https://discuss.elastic.co/u/duarnad)\ **Replies:** 0\ **Last updated:** [April 1, 2022, 10:06am UTC](https://discuss.elastic.co/t/environment-variable-to-configure-elasticsearch-customheaders-for-kibana/301304 "2022-04-01T10:06:49Z")
Hello, My goal is to configure elastic.customHeaders for basic auth from an environment variable. I have tried several combinations but it seems that I can't find the right one, and I wonder at what step in the parsing… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=663) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=665)