# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=699 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 700 --- ## [How to access the system indices like .kibana\* indices in the elasticsearch](https://discuss.elastic.co/t/how-to-access-the-system-indices-like-kibana-indices-in-the-elasticsearch/297779)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 4\ **Last updated:** [February 22, 2022, 2:08am UTC](https://discuss.elastic.co/t/how-to-access-the-system-indices-like-kibana-indices-in-the-elasticsearch/297779 "2022-02-22T02:08:09Z")
In our project, we have a service that takes the backup of different system indices like .kibana\* indices. When I access them using the rest API, I am getting the following deprecation warning {"type": "deprecation.elas… --- ## [Can't install logstash-output-mongodb](https://discuss.elastic.co/t/cant-install-logstash-output-mongodb/297822)
**Author:** [@tamina](https://discuss.elastic.co/u/tamina)\ **Replies:** 0\ **Last updated:** [February 22, 2022, 1:29am UTC](https://discuss.elastic.co/t/cant-install-logstash-output-mongodb/297822 "2022-02-22T01:29:50Z")
I'm using windows server 2016. I'm using logstash ver 7.17. I'm using install command "bin/logstash-plugin install logstash-output-mongodb". When I try to install logstash-output-mongodb ,I get response only "Using … --- ## [How to create my index to not tokenize on slash "/"?](https://discuss.elastic.co/t/how-to-create-my-index-to-not-tokenize-on-slash/297793)
**Author:** [@rakotomandimby](https://discuss.elastic.co/u/rakotomandimby)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 1:23am UTC](https://discuss.elastic.co/t/how-to-create-my-index-to-not-tokenize-on-slash/297793 "2022-02-22T01:23:30Z")
Hello, The default behaviour of ES to tokenize on slash does not suit me, because my data is really full of slashes. Tokenizing on space is more relevent in my case, but how to copy the index with the good tokinizing s… --- ## [ES 7.9.2 Installation failed to upgrade](https://discuss.elastic.co/t/es-7-9-2-installation-failed-to-upgrade/297642)
**Author:** [@Juan\_2022](https://discuss.elastic.co/u/Juan_2022)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 12:23am UTC](https://discuss.elastic.co/t/es-7-9-2-installation-failed-to-upgrade/297642 "2022-02-22T00:23:39Z")
Hi All, I'm using ES 6.8.4 version and wanted to upgrade to 7.9.2 and after running ES installer it fails, the error message is "An error occurred during upgrade!" I appreciate if someone can help me to troubleshoot. … --- ## [Logs are not showing in Kibana only for one application log path](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-only-for-one-application-log-path/297691)
**Author:** [@rajneesh134](https://discuss.elastic.co/u/rajneesh134)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 12:23am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-only-for-one-application-log-path/297691 "2022-02-22T00:23:01Z")
Hi Team, We have done setup for ELK and can see logs for all the applications, But one application logs are not reflecting in Kibana. If we send top command output in same log file , we can see in Kibana. But not sure… --- ## [BulkIndexError: ('2 document(s) failed to index.') Elasticsearch](https://discuss.elastic.co/t/bulkindexerror-2-document-s-failed-to-index-elasticsearch/297682)
**Author:** [@anarchy1923](https://discuss.elastic.co/u/anarchy1923)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 12:22am UTC](https://discuss.elastic.co/t/bulkindexerror-2-document-s-failed-to-index-elasticsearch/297682 "2022-02-22T00:22:08Z")
At first I found some null values in my preprocessed data, so removed those. (Here's my Data Cleaning Code - and the respective outputs enclosed in '''Comments''') Cleaning and Preprocessing df\_merged\[df\_merged.abstrac… --- ## [Starting to plan indexes for many filebeats](https://discuss.elastic.co/t/starting-to-plan-indexes-for-many-filebeats/297820)
**Author:** [@pavvelj](https://discuss.elastic.co/u/pavvelj)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 11:49pm UTC](https://discuss.elastic.co/t/starting-to-plan-indexes-for-many-filebeats/297820 "2022-02-21T23:49:19Z")
Hi, Im planning the way to organizing my data collection in terms of indexing and organizing flows in some way. Im goin to collect large amounts of data of 3 main sorts - system logs, application/proxy/loadbalncer logs a… --- ## [Too\_many\_clauses error in Elasticsearch 6.6.1](https://discuss.elastic.co/t/too-many-clauses-error-in-elasticsearch-6-6-1/297748)
**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 11:23pm UTC](https://discuss.elastic.co/t/too-many-clauses-error-in-elasticsearch-6-6-1/297748 "2022-02-21T23:23:43Z")
Hi, I am using ES 6.6.1. Getting below error too\_many\_clauses: maxClauseCount is set to 1024 From Search Settings | Elasticsearch Guide \[6.6\] | Elastic , In case you consider to increase this setting, make sure you … --- ## [Elastic search backup](https://discuss.elastic.co/t/elastic-search-backup/297718)
**Author:** [@Arpita11](https://discuss.elastic.co/u/Arpita11)\ **Replies:** 4\ **Last updated:** [February 21, 2022, 11:18pm UTC](https://discuss.elastic.co/t/elastic-search-backup/297718 "2022-02-21T23:18:27Z")
Elasticsearch for my project is hosted on AWS EC2 machine. AMI backups are taken for EC2. If the Elasticsearch server goes down, can I restore it from AMI backup and get it working? --- ## [Elasticsearch dashboard not showing results](https://discuss.elastic.co/t/elasticsearch-dashboard-not-showing-results/297757)
**Author:** [@hapkoek](https://discuss.elastic.co/u/hapkoek)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 11:17pm UTC](https://discuss.elastic.co/t/elasticsearch-dashboard-not-showing-results/297757 "2022-02-21T23:17:56Z")
Hi all, Some time ago I created a dashboard with kibana and Elasticsearch importing DMARC mails with parsedmarc. I had some issues with kibana and nginx but those seem to be solved now. But when I open the dashboard, I… --- ## [Histogram range aggragation keys](https://discuss.elastic.co/t/histogram-range-aggragation-keys/297453)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 6\ **Last updated:** [February 21, 2022, 9:01pm UTC](https://discuss.elastic.co/t/histogram-range-aggragation-keys/297453 "2022-02-21T21:01:48Z")
Hi, after update to latest ES version, my range aggregation query started to work weird way. I need histogram with predefine range values. My query looks like: "aggs" : { "agg" : { … --- ## [Too many shards?](https://discuss.elastic.co/t/too-many-shards/297226)
**Author:** [@Samir\_Sabri](https://discuss.elastic.co/u/Samir_Sabri)\ **Replies:** 7\ **Last updated:** [February 21, 2022, 8:25pm UTC](https://discuss.elastic.co/t/too-many-shards/297226 "2022-02-21T20:25:15Z")
Hello We are having unhealthy deployment, I tried to check the shards state, it seems we have too many shards ?? /\_cat/shards?h=index,shard,prirep,state,unassigned.reason The head size we have: "jvm": { "mem":… --- ## [Node Auto Configuration](https://discuss.elastic.co/t/node-auto-configuration/297543)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 8\ **Last updated:** [February 21, 2022, 7:42pm UTC](https://discuss.elastic.co/t/node-auto-configuration/297543 "2022-02-21T19:42:28Z")
Hi there, I´m trying to deploy a new cluster using Elasticsearch 8 but it seens that is not working the way I expected. 4 Servers: 3 Elasticsearch 1 kibana All in the same network. I´m following the steps using the … --- ## [Search Query Parameter Preference Custom-ID](https://discuss.elastic.co/t/search-query-parameter-preference-custom-id/297807)
**Author:** [@RabBit\_BR](https://discuss.elastic.co/u/RabBit_BR)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 6:53pm UTC](https://discuss.elastic.co/t/search-query-parameter-preference-custom-id/297807 "2022-02-21T18:53:09Z")
I have the same problem as the stackoverflow guy. I'm using the custom-session-id preference so that after executing the same query several times, keep the same score in each execution but this strategy is not working. … --- ## [Logstash - org.jruby.exceptions.SystemExit: (SystemExit) exit](https://discuss.elastic.co/t/logstash-org-jruby-exceptions-systemexit-systemexit-exit/297801)
**Author:** [@dontusk1980](https://discuss.elastic.co/u/dontusk1980)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 6:16pm UTC](https://discuss.elastic.co/t/logstash-org-jruby-exceptions-systemexit-systemexit-exit/297801 "2022-02-21T18:16:02Z")
Hi Team, tried to create one logstash instance from the existing ( with same user data like the other one) but weird message when starting the logstash, details are as below, Could you please help me out with the fix … --- ## [Logstash - REGEX to change a field](https://discuss.elastic.co/t/logstash-regex-to-change-a-field/297769)
**Author:** [@Sylvain\_Renard](https://discuss.elastic.co/u/Sylvain_Renard)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 5:00pm UTC](https://discuss.elastic.co/t/logstash-regex-to-change-a-field/297769 "2022-02-21T17:00:42Z")
Hello, I'm receiving snmptraps from an equipement with a sequence ID at the end. The sequence ID increase at every new trap. This is normaly considered as a new field and after a while the max of field is reached and I … --- ## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/297790)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 4:35pm UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/297790 "2022-02-21T16:35:33Z")
Hello all, I am using ELK version 7.16.2 and my Elasticsearch cluster is healthy. when I tried to ingest data through Logstash, it gave me the following error. Am I missing any bundles from setup? "Using bundled JDK: … --- ## [Elasticsearch service not running after downgrade from 7.16.2 to old version 6.4.2](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666)
**Author:** [@rahulbansal](https://discuss.elastic.co/u/rahulbansal)\ **Replies:** 14\ **Last updated:** [February 21, 2022, 4:34pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666 "2022-02-21T16:34:05Z")
Hi Everyone, We were trying to upgrade our Elasticsearch from the 6.4.2 version to 7.16.2 due to log4j vulnerability but after the upgrade directly from 6.4.2 to 7.16.2 the Elasticsearch service was not running so we tr… --- ## [Logstash Running Error](https://discuss.elastic.co/t/logstash-running-error/297601)
**Author:** [@Simone1](https://discuss.elastic.co/u/Simone1)\ **Replies:** 4\ **Last updated:** [February 21, 2022, 4:29pm UTC](https://discuss.elastic.co/t/logstash-running-error/297601 "2022-02-21T16:29:28Z")
I'm trying to run logstash with a new .conf file and i riceve this error: \[ERROR\] 2022-02-18 12:40:51.495 \[Converge PipelineAction::Create\] agent - Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeR… --- ## [Different results in Discover and Dev Console](https://discuss.elastic.co/t/different-results-in-discover-and-dev-console/297784)
**Author:** [@bitnapper](https://discuss.elastic.co/u/bitnapper)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 4:15pm UTC](https://discuss.elastic.co/t/different-results-in-discover-and-dev-console/297784 "2022-02-21T16:15:01Z")
Hi, I'm still confused when elaticsearch is the right tool to use. As a exercise I imported editions from the OpenLibrary and tried to do some searches. I wrote a mapping and tried to filter out any prvious unicode issu… --- ## [Logstash JDBC input using wrong timezone](https://discuss.elastic.co/t/logstash-jdbc-input-using-wrong-timezone/297621)
**Author:** [@ELK\_ftw](https://discuss.elastic.co/u/ELK_ftw)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 4:11pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-using-wrong-timezone/297621 "2022-02-21T16:11:32Z")
Hi all, At the client we have a setup lets say elk\_server\_DEV (elk version 7.16.2), here we have a logstash config that uses the jdbc input plugin. We noticed that the lastValues are always in UTC, so one hour of for w… --- ## [Calculate timestamp duration to next document](https://discuss.elastic.co/t/calculate-timestamp-duration-to-next-document/297244)
**Author:** [@jannik.b](https://discuss.elastic.co/u/jannik.b)\ **Replies:** 21\ **Last updated:** [February 21, 2022, 4:08pm UTC](https://discuss.elastic.co/t/calculate-timestamp-duration-to-next-document/297244 "2022-02-21T16:08:39Z")
Hi, this is my expected result: A new field "time\_taken" which in best case calculates in "ms" the used time between the timestamp in the documents. I would like to sort them later in a table so that I can analyze w… --- ## [Add\_field with value from message](https://discuss.elastic.co/t/add-field-with-value-from-message/297777)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 3:37pm UTC](https://discuss.elastic.co/t/add-field-with-value-from-message/297777 "2022-02-21T15:37:36Z")
Hi, filebeat.yml: multiline.type: pattern multiline.pattern: '^\\d{4}-\\d{2}-\\d{2}\\s\\d{2}:\\d{2}:\\d{2}\\s{3}-\\sStarting' multiline.negate: true multiline.match: after multiline.max\_lines: 140 So in my message fi… --- ## [Elastic integration to CRM Dynamics 365](https://discuss.elastic.co/t/elastic-integration-to-crm-dynamics-365/297775)
**Author:** [@ZiMonty](https://discuss.elastic.co/u/ZiMonty)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 3:05pm UTC](https://discuss.elastic.co/t/elastic-integration-to-crm-dynamics-365/297775 "2022-02-21T15:05:42Z")
Hi there. I am trying to integrate one of the CRM Dynamics 365 dashboards with Elastic but I see no option for it. Has anyone done this before? Is it possible to do? Looking forward to your feedback. Thanks --- ## [Trying to get a fuzziness example to work](https://discuss.elastic.co/t/trying-to-get-a-fuzziness-example-to-work/297402)
**Author:** [@MrFantastic2022](https://discuss.elastic.co/u/MrFantastic2022)\ **Replies:** 4\ **Last updated:** [February 21, 2022, 2:40pm UTC](https://discuss.elastic.co/t/trying-to-get-a-fuzziness-example-to-work/297402 "2022-02-21T14:40:33Z")
Hi, I'm trying to follow the example for fuzziness given here against the sample bank index. Here's the query: GET /bank/\_search?q=employer:Qu~ It returns nothing, but I expect to get 2 records, at least, from what I… --- ## [7.16.2 =\> Error loading map features in Security \> Network dashboard](https://discuss.elastic.co/t/7-16-2-error-loading-map-features-in-security-network-dashboard/293732)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 5\ **Last updated:** [February 21, 2022, 2:35pm UTC](https://discuss.elastic.co/t/7-16-2-error-loading-map-features-in-security-network-dashboard/293732 "2022-02-21T14:35:01Z")
Hello, Just noticed I'm getting "Error loading map features" errors in the Security Network Dashboard.. Found another (unaswered) thread about this =\> SIEM network map states "Error loading map features" at all end … --- ## [Use ECK cluster as Remote from Cloud Hosted](https://discuss.elastic.co/t/use-eck-cluster-as-remote-from-cloud-hosted/297767)
**Author:** [@tems](https://discuss.elastic.co/u/tems)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 2:31pm UTC](https://discuss.elastic.co/t/use-eck-cluster-as-remote-from-cloud-hosted/297767 "2022-02-21T14:31:51Z")
I've ECK managed cluster and want to create CCR between ECK and Cloud Hosted cluster. All data placed on ECK, so follower index should be placed on Cloud Hosted. The main issue is ECK transport uses self-signed certifi… --- ## [Parent child boost not working consistently](https://discuss.elastic.co/t/parent-child-boost-not-working-consistently/294808)
**Author:** [@askids](https://discuss.elastic.co/u/askids)\ **Replies:** 9\ **Last updated:** [February 21, 2022, 2:23pm UTC](https://discuss.elastic.co/t/parent-child-boost-not-working-consistently/294808 "2022-02-21T14:23:28Z")
hi, We are using ES 7.10.2 on Windows 2012 R2, using inbuilt OpenJDK packaged with the MSI. We are seeing issues happening randomly with ES query being run on index using parent child relationship. We overwrite the rec… --- ## [S3 output plugin](https://discuss.elastic.co/t/s3-output-plugin/297675)
**Author:** [@brunoof1](https://discuss.elastic.co/u/brunoof1)\ **Replies:** 3\ **Last updated:** [February 21, 2022, 12:59pm UTC](https://discuss.elastic.co/t/s3-output-plugin/297675 "2022-02-21T12:59:28Z")
Hello everyone, everything good ? I have 2 doubts. What are all the file formats supported by the s3 output plugin? I'm using Oracle, kafka and file input and writing to s3 with s3 output. I would like to create Parqu… --- ## [HTTP Filter Assistance](https://discuss.elastic.co/t/http-filter-assistance/297655)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 2:21pm UTC](https://discuss.elastic.co/t/http-filter-assistance/297655 "2022-02-21T14:21:06Z")
Hello, I have a situation where an API I'm trying to leverage which requires multiple API HTTP calls to generate the right document. I have the following document with multiple "id" in an array which I get from a http\_… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=698) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=700)