# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=706 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 707 --- ## [X-pack logs index template](https://discuss.elastic.co/t/x-pack-logs-index-template/296916)
**Author:** [@icey7z](https://discuss.elastic.co/u/icey7z)\ **Replies:** 1\ **Last updated:** [February 12, 2022, 4:25pm UTC](https://discuss.elastic.co/t/x-pack-logs-index-template/296916 "2022-02-12T16:25:03Z")
I'm trying to get my cluster to work with x-pack, and my data is stored in indexes under the namespace logs-\*-\*. This is a problem because x-pack creates an index template named logs as { "index\_patterns": \[ … --- ## [Kibana 7.17.0 install on ubuntu 16.04 - Error - Index out of range](https://discuss.elastic.co/t/kibana-7-17-0-install-on-ubuntu-16-04-error-index-out-of-range/296437)
**Author:** [@VRaovic](https://discuss.elastic.co/u/VRaovic)\ **Replies:** 5\ **Last updated:** [February 12, 2022, 3:04pm UTC](https://discuss.elastic.co/t/kibana-7-17-0-install-on-ubuntu-16-04-error-index-out-of-range/296437 "2022-02-12T15:04:51Z")
Hi, We are having problem to install Kibana on Ubuntu 16.04 image which runs under OpenStack. Elasticsearch 7.17.0 is installed and runs, but we are having problem to install Kibana: Setting up kibana (7.17.0) ... n… --- ## [Logstash hosts](https://discuss.elastic.co/t/logstash-hosts/296952)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 1\ **Last updated:** [February 12, 2022, 2:02pm UTC](https://discuss.elastic.co/t/logstash-hosts/296952 "2022-02-12T14:02:43Z")
While transferring data with Logstash, there is an increase in write threads on the node that is not in the output host list that I specified. I do not want to transfer data over a single node. This causes me to experie… --- ## [Upload Large Log File](https://discuss.elastic.co/t/upload-large-log-file/297037)
**Author:** [@kmahyyg](https://discuss.elastic.co/u/kmahyyg)\ **Replies:** 1\ **Last updated:** [February 12, 2022, 1:44pm UTC](https://discuss.elastic.co/t/upload-large-log-file/297037 "2022-02-12T13:44:19Z")
Note: I've already Google-ed before I ask. I see this issue \[ML\] Uploading a file over 100MB via Kibana · Issue #61735 · elastic/kibana · GitHub which allowed to upload less than 1G files. As a dev, I know it would be … --- ## [Can exact match get higher score than modified by character filter?](https://discuss.elastic.co/t/can-exact-match-get-higher-score-than-modified-by-character-filter/296622)
**Author:** [@spotlight2001](https://discuss.elastic.co/u/spotlight2001)\ **Replies:** 2\ **Last updated:** [February 12, 2022, 1:33pm UTC](https://discuss.elastic.co/t/can-exact-match-get-higher-score-than-modified-by-character-filter/296622 "2022-02-12T13:33:27Z")
I have a custom analyzer which consists of several char\_filter When I have indexed "walter" and "walther" and search for "walther" I would expect to have "walther" result to be of higher score than "walter". But it has… --- ## [I need add field, and do value counter, how do it?](https://discuss.elastic.co/t/i-need-add-field-and-do-value-counter-how-do-it/297005)
**Author:** [@VK345](https://discuss.elastic.co/u/VK345)\ **Replies:** 7\ **Last updated:** [February 12, 2022, 12:57pm UTC](https://discuss.elastic.co/t/i-need-add-field-and-do-value-counter-how-do-it/297005 "2022-02-12T12:57:28Z")
My config is: ====================================== input { file{ path =\> "/home/elk/domains/rf\_domains\_test" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } }… --- ## [Aggregation mixed with query?](https://discuss.elastic.co/t/aggregation-mixed-with-query/297008)
**Author:** [@Karol\_Radomski](https://discuss.elastic.co/u/Karol_Radomski)\ **Replies:** 1\ **Last updated:** [February 12, 2022, 12:49pm UTC](https://discuss.elastic.co/t/aggregation-mixed-with-query/297008 "2022-02-12T12:49:01Z")
Hello, I don't know how to create such aggregation with query inside: for given documents: "hours": "4", "class": "yellow", "name": "andy", "mark": "A" } { "hours": "6", "class": "yellow", … --- ## [Missing transport-netty4-client for ES 8.0.0](https://discuss.elastic.co/t/missing-transport-netty4-client-for-es-8-0-0/297024)
**Author:** [@coutoPL](https://discuss.elastic.co/u/coutoPL)\ **Replies:** 6\ **Last updated:** [February 12, 2022, 11:56am UTC](https://discuss.elastic.co/t/missing-transport-netty4-client-for-es-8-0-0/297024 "2022-02-12T11:56:49Z")
Hi Guys, There is ES 8.0.0 released, but I cannot find transport-netty4-client for 8.0.0: https://repo1.maven.org/maven2/org/elasticsearch/plugin/transport-netty4-client/ Is it an oversight or maybe, for some reason, … --- ## [How to avoid or ease terms aggregation for fields with high cardinality?](https://discuss.elastic.co/t/how-to-avoid-or-ease-terms-aggregation-for-fields-with-high-cardinality/296853)
**Author:** [@asupranovich](https://discuss.elastic.co/u/asupranovich)\ **Replies:** 3\ **Last updated:** [February 12, 2022, 11:34am UTC](https://discuss.elastic.co/t/how-to-avoid-or-ease-terms-aggregation-for-fields-with-high-cardinality/296853 "2022-02-12T11:34:22Z")
Hi community! My Elasticsearch version is 7.7.0. I'm facing a too many buckets issue for my aggregation query. Task description: Let's say we have a car index, car data model looks like below: { "vin": "08c00679-… --- ## [Issue while Restore the indexes from snapshot backup](https://discuss.elastic.co/t/issue-while-restore-the-indexes-from-snapshot-backup/297047)
**Author:** [@indrajit\_kal](https://discuss.elastic.co/u/indrajit_kal)\ **Replies:** 0\ **Last updated:** [February 12, 2022, 10:34am UTC](https://discuss.elastic.co/t/issue-while-restore-the-indexes-from-snapshot-backup/297047 "2022-02-12T10:34:38Z")
\[backup\_repo:test-snapshot-2022.02.11-kxyy8jd4sumangv5kozy3q/9uLE7UaUQamgAH9pYbKAAA\] cannot restore index \[.siem-signals-default-000001\] because an open index with same name already exists in the cluster. Either close or… --- ## [Elastic-Stack7.17 on ubuntu 20.4LTS, still not indexing](https://discuss.elastic.co/t/elastic-stack7-17-on-ubuntu-20-4lts-still-not-indexing/296378)
**Author:** [@Mohammad\_Ramadan\_Abd](https://discuss.elastic.co/u/Mohammad_Ramadan_Abd)\ **Replies:** 10\ **Last updated:** [February 12, 2022, 8:43am UTC](https://discuss.elastic.co/t/elastic-stack7-17-on-ubuntu-20-4lts-still-not-indexing/296378 "2022-02-12T08:43:28Z")
Hello Bro, I have followed up this link How To Install Elasticsearch, Logstash, and Kibana (Elastic Stack) on Ubuntu 20.04 | DigitalOcean to install my elc-stack, and everything went as document explains. But, It stil… --- ## [Update old data from csv python](https://discuss.elastic.co/t/update-old-data-from-csv-python/297034)
**Author:** [@aminedakhlii](https://discuss.elastic.co/u/aminedakhlii)\ **Replies:** 1\ **Last updated:** [February 12, 2022, 7:48am UTC](https://discuss.elastic.co/t/update-old-data-from-csv-python/297034 "2022-02-12T07:48:09Z")
I have a bunch of indices A,B,C,D containing large amounts of data per each let's say 50 million records per index and the record contains data as follows: user: amine, age: 22, state: Michigan and I want to create a … --- ## [Increase RAM on Kibana 7.6.2](https://discuss.elastic.co/t/increase-ram-on-kibana-7-6-2/296967)
**Author:** [@bard0x](https://discuss.elastic.co/u/bard0x)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 9:45pm UTC](https://discuss.elastic.co/t/increase-ram-on-kibana-7-6-2/296967 "2022-02-11T21:45:39Z")
Hi, It's possible to increase the RAM allocation in Kibana? Currently I'm using the v7.6.2. Thank you in advance. --- ## [Nginx Upgrade for vulnerability](https://discuss.elastic.co/t/nginx-upgrade-for-vulnerability/297021)
**Author:** [@jwilfreds](https://discuss.elastic.co/u/jwilfreds)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 9:39pm UTC](https://discuss.elastic.co/t/nginx-upgrade-for-vulnerability/297021 "2022-02-11T21:39:36Z")
We have nginx/1.16.1. We need to upgrade to 1.21.0, 1.20.1. Can you pls share any article that describes the upgrade process. I'm a complete newbie to Elastic / Kibana. The tech who installed the server, left the job. I… --- ## [Cant install es-termstat plugin](https://discuss.elastic.co/t/cant-install-es-termstat-plugin/297016)
**Author:** [@chbrown](https://discuss.elastic.co/u/chbrown)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 9:10pm UTC](https://discuss.elastic.co/t/cant-install-es-termstat-plugin/297016 "2022-02-11T21:10:27Z")
Hi there, Im trying to install this plugin but havent been able to so far. I've tried to download the archive and then run the install with the file path, and running the install with the github url. I get this error for… --- ## [Logstash document id string does not get evaluated](https://discuss.elastic.co/t/logstash-document-id-string-does-not-get-evaluated/297019)
**Author:** [@Leo\_Baby\_Jacob](https://discuss.elastic.co/u/Leo_Baby_Jacob)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 7:05pm UTC](https://discuss.elastic.co/t/logstash-document-id-string-does-not-get-evaluated/297019 "2022-02-11T19:05:27Z")
To prevent data duplication while injesting data from logstash I am adding a document\_id string for logstash conf with a peopleRowId column. However it does not get evaluated. So in my case I am trying to set document id… --- ## [Curl -x put content-type: application/json throwing error](https://discuss.elastic.co/t/curl-x-put-content-type-application-json-throwing-error/296868)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 7\ **Last updated:** [February 11, 2022, 4:39pm UTC](https://discuss.elastic.co/t/curl-x-put-content-type-application-json-throwing-error/296868 "2022-02-11T16:39:02Z")
I have an Elasticsearch instance that has reached it's default max shards of 1000 and now I'm trying to increase that number using curl but am running into an issue with the -h content-type declaration. Here is my curl … --- ## [Load balancer for logstash question](https://discuss.elastic.co/t/load-balancer-for-logstash-question/296993)
**Author:** [@RajuParipelly](https://discuss.elastic.co/u/RajuParipelly)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 4:33pm UTC](https://discuss.elastic.co/t/load-balancer-for-logstash-question/296993 "2022-02-11T16:33:27Z")
We have 3 logstash instances running and we are trying to create a load balancer for logstash using Big IP f5. This load balancer should distribute the logs that it receives from network devices to the 3 logstash instanc… --- ## [Compare message if it's similar to others](https://discuss.elastic.co/t/compare-message-if-its-similar-to-others/296826)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 9\ **Last updated:** [February 11, 2022, 4:08pm UTC](https://discuss.elastic.co/t/compare-message-if-its-similar-to-others/296826 "2022-02-11T16:08:42Z")
Hi, filebeat.yml configuration: multiline.pattern: \\d\\d/\\d\\d/\\d\\d\\d\\d\\s\\d\\d:\\d\\d:\\d\\d\\s\\d\\d\\d-\\sMAIN\\sEXCEPTION\\b multiline.negate: true multiline.match: after multiline.max\_lines: 7 Logstash configuration: input { … --- ## [Issue in Offset Rounding in case Offset leads to change in the DST state](https://discuss.elastic.co/t/issue-in-offset-rounding-in-case-offset-leads-to-change-in-the-dst-state/296986)
**Author:** [@PRIYANSHU\_KUSHWAHA](https://discuss.elastic.co/u/PRIYANSHU_KUSHWAHA)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 2:33pm UTC](https://discuss.elastic.co/t/issue-in-offset-rounding-in-case-offset-leads-to-change-in-the-dst-state/296986 "2022-02-11T14:33:35Z")
I am using ES version 7.11. { "size": 0, "query": { "constant\_score": { "filter": { "bool": { "must": \[ { "terms": { "deleted": \[ … --- ## [Multiple paths logstash output](https://discuss.elastic.co/t/multiple-paths-logstash-output/296831)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 10:51am UTC](https://discuss.elastic.co/t/multiple-paths-logstash-output/296831 "2022-02-10T10:51:22Z")
Hi, filebeat config: filebeat.inputs: - type: log enabled: true paths: - D:\\elastic\_stack\\testLog\\\* - D:\\elastic\_stack\\LogWal\\\* So in logstash i want for the first path did the split of the message and add fie… --- ## [How to find docs that contain the exact specified terms](https://discuss.elastic.co/t/how-to-find-docs-that-contain-the-exact-specified-terms/295758)
**Author:** [@Cholley\_Alexandre](https://discuss.elastic.co/u/Cholley_Alexandre)\ **Replies:** 14\ **Last updated:** [February 11, 2022, 2:29pm UTC](https://discuss.elastic.co/t/how-to-find-docs-that-contain-the-exact-specified-terms/295758 "2022-02-11T14:29:10Z")
Hi, I'm trying to get docs that contain the exact specified terms. Terms query doesn't match because it also returns docs with additional terms. Create index : PUT my-index { "mappings": { "properties": { … --- ## [Two index Pattern with same name after importation](https://discuss.elastic.co/t/two-index-pattern-with-same-name-after-importation/296155)
**Author:** [@HerveSavard](https://discuss.elastic.co/u/HerveSavard)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 1:58pm UTC](https://discuss.elastic.co/t/two-index-pattern-with-same-name-after-importation/296155 "2022-02-11T13:58:50Z")
Hello, I have two index pattern with the same name. I have some visualization on the second index pattern but i need move the visualization to the first Index Pattern. and delete the second index pattern after. Do yo… --- ## [Master not discovered exception](https://discuss.elastic.co/t/master-not-discovered-exception/296977)
**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 1:26pm UTC](https://discuss.elastic.co/t/master-not-discovered-exception/296977 "2022-02-11T13:26:15Z")
Hello, I build a 11 node Elastic cluster (3M, 5D, 3 Ingest nodes), using ansible playbook. Which is working perfectly fine with out SSL & TLS. But when i enable SSL & TLS, i'am getting the below error message in master… --- ## [Custom component template](https://discuss.elastic.co/t/custom-component-template/296974)
**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 1:05pm UTC](https://discuss.elastic.co/t/custom-component-template/296974 "2022-02-11T13:05:21Z")
Hello, Can see now after upgrading to 7.16.2 that we have a new component template as part of logs-system.application index template. What this component template logs-system.application@custom should be used for? Sho… --- ## [\[status\_exception\] error while executing search in Kibana](https://discuss.elastic.co/t/status-exception-error-while-executing-search-in-kibana/296942)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 12:03pm UTC](https://discuss.elastic.co/t/status-exception-error-while-executing-search-in-kibana/296942 "2022-02-11T12:03:45Z")
Hi, I'm getting this error in discover and dashboards. \[status\_exception\] error while executing search Though it seems to be working for different time periods... It gives this error when i select for a particular ti… --- ## [Getting class not found exception when invoking logstash http input with queue type as persisted](https://discuss.elastic.co/t/getting-class-not-found-exception-when-invoking-logstash-http-input-with-queue-type-as-persisted/296970)
**Author:** [@Sivakumar\_Lakshminar](https://discuss.elastic.co/u/Sivakumar_Lakshminar)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 11:40am UTC](https://discuss.elastic.co/t/getting-class-not-found-exception-when-invoking-logstash-http-input-with-queue-type-as-persisted/296970 "2022-02-11T11:40:02Z")
Hello All, I am trying to setup ELK for internal event monitoring for our platform. Need help with the below, Using logstash-7.10.2 with bundled jdk. with setting as per below snippets. It is working fine when trying … --- ## [How to create a timeline](https://discuss.elastic.co/t/how-to-create-a-timeline/296969)
**Author:** [@Celal\_Celik](https://discuss.elastic.co/u/Celal_Celik)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 11:34am UTC](https://discuss.elastic.co/t/how-to-create-a-timeline/296969 "2022-02-11T11:34:46Z")
Hello Community, I have a question regarding updating data. I wrote a script in Python to create a random csv file. The CSV file contains: \_id, name, status and date. Now here is my Question: If I have a lane e.g. id;… --- ## [Index in elastic](https://discuss.elastic.co/t/index-in-elastic/296909)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 9\ **Last updated:** [February 11, 2022, 11:16am UTC](https://discuss.elastic.co/t/index-in-elastic/296909 "2022-02-11T11:16:05Z")
Hello, I'm new to elastic, tell me if it's possible to do such a thing, create an index pattern, for example “index-\*” without adding %{+YYYY.MM.dd} , but so that an index like this is automatically created on the onset … --- ## [Pipelines for each device source](https://discuss.elastic.co/t/pipelines-for-each-device-source/296962)
**Author:** [@jokem48](https://discuss.elastic.co/u/jokem48)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 10:47am UTC](https://discuss.elastic.co/t/pipelines-for-each-device-source/296962 "2022-02-11T10:47:20Z")
Hi, new to the ELK setup. We are exploring to use ELK as our SIEM. Right now we have a log forwarder collecting syslog from various network sources, like cisco, fortinet and even juniper /f5? In order to break down thos… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=705) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=707)