# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=669 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 670 --- ## [Kibana 8.0.1: Can't set logAlias on the configuration file](https://discuss.elastic.co/t/kibana-8-0-1-cant-set-logalias-on-the-configuration-file/300541)
**Author:** [@panos-indev](https://discuss.elastic.co/u/panos-indev)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 8:50am UTC](https://discuss.elastic.co/t/kibana-8-0-1-cant-set-logalias-on-the-configuration-file/300541 "2022-03-29T08:50:45Z")
Hello, I've been trying to configure logAlias to my config file and I get the following message: \[xpack.infra\].sources.default.logAlias\]: definition for this key is missing I used the 2 below configurations on kibana.… --- ## [Elasticsearch date range query for range on a date-time field](https://discuss.elastic.co/t/elasticsearch-date-range-query-for-range-on-a-date-time-field/300759)
**Author:** [@Shaiwal\_Sharma](https://discuss.elastic.co/u/Shaiwal_Sharma)\ **Replies:** 4\ **Last updated:** [March 29, 2022, 8:29am UTC](https://discuss.elastic.co/t/elasticsearch-date-range-query-for-range-on-a-date-time-field/300759 "2022-03-29T08:29:28Z")
I have to get records (training) wherein I have a start\_date, and I have to get all records that have not yet ended. So I don't have an end\_date field, but just the start date, so end\_date is start\_date + 60 days. So wha… --- ## [AND in SQL query is translated to nested bool](https://discuss.elastic.co/t/and-in-sql-query-is-translated-to-nested-bool/300923)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 8:15am UTC](https://discuss.elastic.co/t/and-in-sql-query-is-translated-to-nested-bool/300923 "2022-03-29T08:15:35Z")
Hi, When I translate the following to DSL I see multiple nested bool instead one bool that contains all the conditions. Can I control it? GET \_sql/translate { "query": """ SELECT \* FROM "base" WHERE "Id" = '62… --- ## [Trying to include tensorflow library in my ES plugin and getting the following error](https://discuss.elastic.co/t/trying-to-include-tensorflow-library-in-my-es-plugin-and-getting-the-following-error/300735)
**Author:** [@ashwin91kumar](https://discuss.elastic.co/u/ashwin91kumar)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 8:13am UTC](https://discuss.elastic.co/t/trying-to-include-tensorflow-library-in-my-es-plugin-and-getting-the-following-error/300735 "2022-03-29T08:13:59Z")
\#8 6.878 -\> Rolled back file:///plugins/plugin.zip #8 6.878 Exception in thread "main" java.lang.IllegalStateException: codebase property already set: codebase.tensorflow-core-api -\> file:/usr/share/elasticsearch/plugins… --- ## [First time with grok](https://discuss.elastic.co/t/first-time-with-grok/300867)
**Author:** [@fabek.75](https://discuss.elastic.co/u/fabek.75)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 7:43am UTC](https://discuss.elastic.co/t/first-time-with-grok/300867 "2022-03-29T07:43:10Z")
Hi there. I'm trying to use grok for the first time to parse a line log like this: Mar 15 10:45:13 myapp.com myapp: \[Info\] \<99999999999999\> /path/path1: \[10.255.255.255:99999\] POST /our\_queue/worker/import? 204 In th… --- ## [How to Increase Kibana 8.1 Heap Size Limit?](https://discuss.elastic.co/t/how-to-increase-kibana-8-1-heap-size-limit/300908)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 6:31am UTC](https://discuss.elastic.co/t/how-to-increase-kibana-8-1-heap-size-limit/300908 "2022-03-29T06:31:34Z")
Hi, Any idea how to increase Kibana Heap Size Limit? Which Node.js configuration file should I change? My current default Kibana Heap Size is 2 GB only, plan to increase it to 4GB --- ## [Why Elasticsearch new version appending -000001 for index name](https://discuss.elastic.co/t/why-elasticsearch-new-version-appending-000001-for-index-name/300808)
**Author:** [@Prashant\_Kamble](https://discuss.elastic.co/u/Prashant_Kamble)\ **Replies:** 6\ **Last updated:** [March 29, 2022, 5:37am UTC](https://discuss.elastic.co/t/why-elasticsearch-new-version-appending-000001-for-index-name/300808 "2022-03-29T05:37:49Z")
We are getting index name appended with -000001 for index name. Just wanted to understand why Elasticsearch appending this value for index name in elastcsearch cluster 7.10? What is the significance of it? --- ## [ELK Product Upgrade](https://discuss.elastic.co/t/elk-product-upgrade/300905)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 4:46am UTC](https://discuss.elastic.co/t/elk-product-upgrade/300905 "2022-03-29T04:46:03Z")
Hi We are using Out of the box Logstash, Elasticsearch and customized Kibana. All are in 7.10.2 . We are in process in upgrade. In case upgrade delayed till May 2022 which will be EOL for 7.10.2, do we have any function… --- ## [Changue Colors on Kibana 7.15](https://discuss.elastic.co/t/changue-colors-on-kibana-7-15/298652)
**Author:** [@mvasqueznr](https://discuss.elastic.co/u/mvasqueznr)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 4:30am UTC](https://discuss.elastic.co/t/changue-colors-on-kibana-7-15/298652 "2022-03-29T04:30:27Z")
Hi. I'm follow the guide to personalize kibana from ManuelF and with a some changes in the folder structure in 7.15.1 version. The changes are successful. But now, I'm trying to change the color on the header where is … --- ## [Form the syslog\_pri field](https://discuss.elastic.co/t/form-the-syslog-pri-field/300814)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 3:25am UTC](https://discuss.elastic.co/t/form-the-syslog-pri-field/300814 "2022-03-29T03:25:56Z")
I have the following syslog messages - Oct 18 16:11:54 1aen ai\_controller\[419\]: \[16:11:54.479933\] ERROR \[ntp\_client.cpp:113 fetch\_time()\] Can't get NTP response Oct 18 16:11:55 1aen ntpd\[442\]: bind(21) AF\_INET6 fe80… --- ## [Centralized management and monitoring of clusters](https://discuss.elastic.co/t/centralized-management-and-monitoring-of-clusters/300903)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 2:11am UTC](https://discuss.elastic.co/t/centralized-management-and-monitoring-of-clusters/300903 "2022-03-29T02:11:39Z")
Is there a way to manage and monitor various cluster across different Data centers in version 7.x ? Specific need is to manage x-pack users from one location across different clusters. --- ## [Pokémon - match\_phrase fails with edge\_ngram & asciifolding](https://discuss.elastic.co/t/pokemon-match-phrase-fails-with-edge-ngram-asciifolding/300901)
**Author:** [@omikron](https://discuss.elastic.co/u/omikron)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 1:40am UTC](https://discuss.elastic.co/t/pokemon-match-phrase-fails-with-edge-ngram-asciifolding/300901 "2022-03-29T01:40:34Z")
Hi, I am having an issue with the match\_phrase query against the field with the edge\_ngram tokenizer and asciifolding filter (Elasticsearch v7.7). The field is: "mainTitle": { "type": "text", "fields": { "autocomp… --- ## [Missing Events in Logstash input SNMP](https://discuss.elastic.co/t/missing-events-in-logstash-input-snmp/300900)
**Author:** [@Ygal\_Mizrachi](https://discuss.elastic.co/u/Ygal_Mizrachi)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 1:39am UTC](https://discuss.elastic.co/t/missing-events-in-logstash-input-snmp/300900 "2022-03-29T01:39:27Z")
Hello im trying to get snmp documents but some events are missing and i am looking for help. thanks in advance snmp2.conf input{ snmp { tables =\> \[{ "name" =\> "ifTable" "columns" =\> \[ "1.3.6.1.2.1.2.2.1.1", "1.3.… --- ## [Elasticsearch query](https://discuss.elastic.co/t/elasticsearch-query/300708)
**Author:** [@chrisml](https://discuss.elastic.co/u/chrisml)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 8:41pm UTC](https://discuss.elastic.co/t/elasticsearch-query/300708 "2022-03-28T20:41:24Z")
Could anyone shed any light on the nested bool should/musts here? Is it necessary or just poorly written? (the query is generated, depending on user-input) --- ## [How to build an Elasticsearch query that will take into account the distance between words?](https://discuss.elastic.co/t/how-to-build-an-elasticsearch-query-that-will-take-into-account-the-distance-between-words/300886)
**Author:** [@asil](https://discuss.elastic.co/u/asil)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 8:14pm UTC](https://discuss.elastic.co/t/how-to-build-an-elasticsearch-query-that-will-take-into-account-the-distance-between-words/300886 "2022-03-28T20:14:16Z")
I'm running with elasticsearch:7.6.2 I have an index with 4 simple documents: PUT demo\_idx/\_doc/1 { "content": "Distributed nature, simple REST APIs, speed, and scalability, Elasticsearch is the central c… --- ## [Load Balancers & deployment endpoints](https://discuss.elastic.co/t/load-balancers-deployment-endpoints/300893)
**Author:** [@Chuck\_Reynolds](https://discuss.elastic.co/u/Chuck_Reynolds)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 8:13pm UTC](https://discuss.elastic.co/t/load-balancers-deployment-endpoints/300893 "2022-03-28T20:13:51Z")
I'm currently doing a POC of ECE for a group in my company but I can't seem to get past how one configures a load balancer to talk to the Elasticsearch deplyment endpoint. I've create one load balancer that points the t… --- ## [Kibana site can't be reached](https://discuss.elastic.co/t/kibana-site-cant-be-reached/300607)
**Author:** [@spo](https://discuss.elastic.co/u/spo)\ **Replies:** 6\ **Last updated:** [March 28, 2022, 8:03pm UTC](https://discuss.elastic.co/t/kibana-site-cant-be-reached/300607 "2022-03-28T20:03:13Z")
I have not made any changes to the elk stack .It was working fine till yesterday, today at the beginning it did not let me login to the kibana portal.I cleared browser history restarted Elasticsearch and kibana and tried… --- ## [Is it possible to auto increment documents as they are indexed?](https://discuss.elastic.co/t/is-it-possible-to-auto-increment-documents-as-they-are-indexed/300887)
**Author:** [@Matthew\_Dominic\_Ramp](https://discuss.elastic.co/u/Matthew_Dominic_Ramp)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 7:56pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auto-increment-documents-as-they-are-indexed/300887 "2022-03-28T19:56:48Z")
Context: I am using the bulk API to index several documents into an index I would like to auto increment a field, 'y', present in the documents, which would tally the order in which documents are indexed. (I know i… --- ## [Elastic-security listening port](https://discuss.elastic.co/t/elastic-security-listening-port/300569)
**Author:** [@Guncixx](https://discuss.elastic.co/u/Guncixx)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 7:09pm UTC](https://discuss.elastic.co/t/elastic-security-listening-port/300569 "2022-03-28T19:09:02Z")
Is it possible to change the port elastic-security service is listening on the localhost? Found that elastic is listening on 6788 and 6789 ports locally but those are reserved for other things on couple of our hosts and… --- ## [Kibana excluding Meta fields in Index Pattern](https://discuss.elastic.co/t/kibana-excluding-meta-fields-in-index-pattern/300787)
**Author:** [@sof](https://discuss.elastic.co/u/sof)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 5:22pm UTC](https://discuss.elastic.co/t/kibana-excluding-meta-fields-in-index-pattern/300787 "2022-03-28T17:22:41Z")
Hello. I created an index pattern in Kibana. I wish to remove \_index, \_type and similar Meta fields which were auto created by Kibana using Field Filtering from the Management -\> Index Patterns -\> Field Filters wish wo… --- ## [How do you figure out what endpoint to query for a given API reference definition?](https://discuss.elastic.co/t/how-do-you-figure-out-what-endpoint-to-query-for-a-given-api-reference-definition/300627)
**Author:** [@Apprentice](https://discuss.elastic.co/u/Apprentice)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 4:46pm UTC](https://discuss.elastic.co/t/how-do-you-figure-out-what-endpoint-to-query-for-a-given-api-reference-definition/300627 "2022-03-28T16:46:45Z")
I want to monitor allocators and move instances using those features of the API. how do I go about figuring our what endpoints to query? Could someone point me to how I would go about querying/setting those particular v… --- ## [Saved field "logdate" of data view "app\*" is invalid for use with the "Date Histogram" aggregation](https://discuss.elastic.co/t/saved-field-logdate-of-data-view-app-is-invalid-for-use-with-the-date-histogram-aggregation/300868)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 3:48pm UTC](https://discuss.elastic.co/t/saved-field-logdate-of-data-view-app-is-invalid-for-use-with-the-date-histogram-aggregation/300868 "2022-03-28T15:48:20Z")
Recently, we upgraded our production machine which meant I would have to re-deploy Filebeat on this new server. All the log paths and log formats are the same, however, for whatever reason, it is having an issue with log… --- ## [Wildcard conflicting](https://discuss.elastic.co/t/wildcard-conflicting/300870)
**Author:** [@OlivierC](https://discuss.elastic.co/u/OlivierC)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 3:44pm UTC](https://discuss.elastic.co/t/wildcard-conflicting/300870 "2022-03-28T15:44:50Z")
Hello, I try to find a query for something looking easy for a human, but I can't create it with ES. Let's imagine we have an index named words with a few data: PUT words/\_doc/1 { "name": "elastic" } PUT words/\_doc/2… --- ## [Elasticsearch not able to search string contains special character](https://discuss.elastic.co/t/elasticsearch-not-able-to-search-string-contains-special-character/300866)
**Author:** [@Koushik\_Chatterjee](https://discuss.elastic.co/u/Koushik_Chatterjee)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 3:35pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-search-string-contains-special-character/300866 "2022-03-28T15:35:01Z")
I am developing an web application where I'm using Elasticsearch. I'm trying to search strings contains - or @ eg. email address koushik@testmail.com, but it's not working. Other fields like first name, last name etc. wo… --- ## [I create user login system with file uploading , and user can upload unlimited textfiles and search word, how to create and mapping index this case?](https://discuss.elastic.co/t/i-create-user-login-system-with-file-uploading-and-user-can-upload-unlimited-textfiles-and-search-word-how-to-create-and-mapping-index-this-case/300835)
**Author:** [@AJITH](https://discuss.elastic.co/u/AJITH)\ **Replies:** 13\ **Last updated:** [March 28, 2022, 3:15pm UTC](https://discuss.elastic.co/t/i-create-user-login-system-with-file-uploading-and-user-can-upload-unlimited-textfiles-and-search-word-how-to-create-and-mapping-index-this-case/300835 "2022-03-28T15:15:05Z")
--- ## [How to upload textfile to ESdatabase and make it searchable?](https://discuss.elastic.co/t/how-to-upload-textfile-to-esdatabase-and-make-it-searchable/300855)
**Author:** [@AJITH](https://discuss.elastic.co/u/AJITH)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 3:13pm UTC](https://discuss.elastic.co/t/how-to-upload-textfile-to-esdatabase-and-make-it-searchable/300855 "2022-03-28T15:13:51Z")
i try to upload textfile to ES database, i try convert textfile to String formate and then store. i dont know is it proper way? or any other way is available in ES for store textfiles and make it searchable? --- ## [How to parse apache error.log](https://discuss.elastic.co/t/how-to-parse-apache-error-log/300822)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 2:48pm UTC](https://discuss.elastic.co/t/how-to-parse-apache-error-log/300822 "2022-03-28T14:48:27Z")
Hi, help! i can't parse this timestamp: \[Mon Mar 28 09:02:28.627528 2022\] \[mpm\_winnt:notice\] \[pid 0000:tid 000\] 0000000: Apache/00.00.0.0 (Win00) OpenSSL/0.0.0h configured -- resuming normal operations suggestions? T… --- ## [Elastic Detection Actions - any way to add fields?](https://discuss.elastic.co/t/elastic-detection-actions-any-way-to-add-fields/300764)
**Author:** [@kossde](https://discuss.elastic.co/u/kossde)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 2:08pm UTC](https://discuss.elastic.co/t/elastic-detection-actions-any-way-to-add-fields/300764 "2022-03-28T14:08:22Z")
We are creating numerous threshold detections for a specific client. This client is asking the threshold detections to email them when the alert is triggered, but they are asking us to include details about the original… --- ## [Logstash cannot connect to Elasticsearch on kubernetes](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch-on-kubernetes/300496)
**Author:** [@skander\_khalfet](https://discuss.elastic.co/u/skander_khalfet)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 1:59pm UTC](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch-on-kubernetes/300496 "2022-03-28T13:59:52Z")
Hi everyone, i'm having trouble concerning Logstash. So i installed ELK stack on kubernetes using helm. every pod is is running and ready. Elasticsearch and kibana are perfectly fine. the problem is with logstash as yo… --- ## [Connection timed out when remote cluster re-indexing](https://discuss.elastic.co/t/connection-timed-out-when-remote-cluster-re-indexing/300694)
**Author:** [@Prashant\_Kamble](https://discuss.elastic.co/u/Prashant_Kamble)\ **Replies:** 13\ **Last updated:** [March 28, 2022, 1:02pm UTC](https://discuss.elastic.co/t/connection-timed-out-when-remote-cluster-re-indexing/300694 "2022-03-28T13:02:46Z")
Getting Connection timed out error while re-indexing data from old cluster to new cluster. curl: (28) Failed to connect to elasticsearchurl port 9200: Connection timed out We are using curl command like this curl -… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=668) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=670)