# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=710 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 711 --- ## [Logstash 7.16.3 failed to start: "cannot load Java class org.logstash.util.JavaVersion"](https://discuss.elastic.co/t/logstash-7-16-3-failed-to-start-cannot-load-java-class-org-logstash-util-javaversion/296590)
**Author:** [@pikopl](https://discuss.elastic.co/u/pikopl)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 12:10pm UTC](https://discuss.elastic.co/t/logstash-7-16-3-failed-to-start-cannot-load-java-class-org-logstash-util-javaversion/296590 "2022-02-08T12:10:56Z")
I installed Logstash OSS ver. 7.16.3 rpm: $ sudo rpm -ivh logstash-oss-7.16.3-x86\_64.rpm warning: logstash-oss-7.16.3-x86\_64.rpm: Header V4 RSA/SHA512 Signature, key ID d88e42b4: NOKEY Preparing... … --- ## [How to disable saving Kibana logs to /var/log/kibana](https://discuss.elastic.co/t/how-to-disable-saving-kibana-logs-to-var-log-kibana/296447)
**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 8:33am UTC](https://discuss.elastic.co/t/how-to-disable-saving-kibana-logs-to-var-log-kibana/296447 "2022-02-09T08:33:06Z")
Hello! How to totally disable saving Kibana logs to /var/log/kibana/kibana.log ? I'm using elastic stack version 7.16 and already trying to set in kibana.yml: logging.dest: "u01/data/logs/kibana.log" and logging: … --- ## [Multi line support to view full log message in kibana](https://discuss.elastic.co/t/multi-line-support-to-view-full-log-message-in-kibana/296586)
**Author:** [@thujitha\_p](https://discuss.elastic.co/u/thujitha_p)\ **Replies:** 3\ **Last updated:** [February 9, 2022, 7:33am UTC](https://discuss.elastic.co/t/multi-line-support-to-view-full-log-message-in-kibana/296586 "2022-02-09T07:33:53Z")
Hi there, I am new to this ELK stack. I have a problem with previewing log message in kibana. If a log message has too much characters, it is unable to view full message without expanding it. If it is large it is ended … --- ## [Some Error in nori tokenizer](https://discuss.elastic.co/t/some-error-in-nori-tokenizer/296686)
**Author:** [@jug1215](https://discuss.elastic.co/u/jug1215)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 7:08am UTC](https://discuss.elastic.co/t/some-error-in-nori-tokenizer/296686 "2022-02-09T07:08:52Z")
Hi I'm using Nori tokenizer in Elasticsearch(7.16.1) for analyzing korean comments and i think i found some errors in nori tokenizer. input : GET \_analyze { "tokenizer": "nori\_tokenizer", "explain": "true", "text"… --- ## [Is there a queue between filter and output in logstash?](https://discuss.elastic.co/t/is-there-a-queue-between-filter-and-output-in-logstash/296682)
**Author:** [@JohnPhilip](https://discuss.elastic.co/u/JohnPhilip)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 6:58am UTC](https://discuss.elastic.co/t/is-there-a-queue-between-filter-and-output-in-logstash/296682 "2022-02-09T06:58:09Z")
As the Execution Model mentioned, By default, Logstash uses in-memory bounded queues between pipeline stages (input → filter and filter → output) to buffer events. but there is another saying in Memory queue, By defau… --- ## [Kibana can't connect to elasticsearch using self signed certificates](https://discuss.elastic.co/t/kibana-cant-connect-to-elasticsearch-using-self-signed-certificates/294255)
**Author:** [@proxymoxy](https://discuss.elastic.co/u/proxymoxy)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 6:31am UTC](https://discuss.elastic.co/t/kibana-cant-connect-to-elasticsearch-using-self-signed-certificates/294255 "2022-02-09T06:31:40Z")
Hi, I have enabled TLS certificates for connection between Kibana and Elasticsearch as described here: Set up basic security for the Elastic Stack plus secured HTTPS traffic | Elasticsearch Guide \[7.16\] | Elastic I use … --- ## [How to embed existing dashboard in custom kibana plugin](https://discuss.elastic.co/t/how-to-embed-existing-dashboard-in-custom-kibana-plugin/296030)
**Author:** [@Shreeya\_Rajguru](https://discuss.elastic.co/u/Shreeya_Rajguru)\ **Replies:** 6\ **Last updated:** [February 9, 2022, 6:34am UTC](https://discuss.elastic.co/t/how-to-embed-existing-dashboard-in-custom-kibana-plugin/296030 "2022-02-09T06:34:07Z")
Hi, Is there a way to embed the existing kibana dashboards in custom plugin? I have referred the dashboard embeddable example plugin code - Embeddables plugin | Kibana Guide \[master\] | Elastic but this doesn't seem to… --- ## [How to print matches in Elasticsearch and Kibana or Elasticsearch-py?](https://discuss.elastic.co/t/how-to-print-matches-in-elasticsearch-and-kibana-or-elasticsearch-py/296329)
**Author:** [@Travel\_Time](https://discuss.elastic.co/u/Travel_Time)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 5:43am UTC](https://discuss.elastic.co/t/how-to-print-matches-in-elasticsearch-and-kibana-or-elasticsearch-py/296329 "2022-02-09T05:43:54Z")
I have 2 example patterns, with the same column names. pattern1\* (index-1,index-2,index-3) col1 col2 col3 col4 pattern2\* (index-5, index-6, index-7, index-8) col1 col2 col5 I want to automatically compare pattern1\* an… --- ## [Kibanaのマルチテナント運用におけるユーザ管理について](https://discuss.elastic.co/t/kibana/296353)
**Author:** [@Yuji1](https://discuss.elastic.co/u/Yuji1)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 3:06am UTC](https://discuss.elastic.co/t/kibana/296353 "2022-02-09T03:06:45Z")
Kibana 7.16.2でダッシュボード機能をマルチテナント化し、組織内に展開しようと考えています。 下記サイトを参考にし、ユーザ毎に利用できる情報を制御することでマルチテナント運用を実現したいと考えています。 https://acro-engineer.hatenablog.com/entry/2018/04/12/120000 ここで課題となっているのがユーザ管理についてです。 組織A、組織Bに対してそれぞれAdminの… --- ## [Date Histogram - Date Format Change](https://discuss.elastic.co/t/date-histogram-date-format-change/296228)
**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 1:06am UTC](https://discuss.elastic.co/t/date-histogram-date-format-change/296228 "2022-02-09T01:06:00Z")
I am currently using a date histogram for my visualization. Unfortunately, the date format seems to default to "yyyy-MM-dd". I would like to Modify it to "MMM-yyyy". I've applied that change on the field but I think whil… --- ## [Do term vectors accelerate phrase queries?](https://discuss.elastic.co/t/do-term-vectors-accelerate-phrase-queries/296674)
**Author:** [@conwaytext](https://discuss.elastic.co/u/conwaytext)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 12:53am UTC](https://discuss.elastic.co/t/do-term-vectors-accelerate-phrase-queries/296674 "2022-02-09T00:53:23Z")
If a field's term vectors are stored, will phrase queries against it be faster? For example, if a field has "term\_vector": "with\_positions", will "match\_phrase" queries take advantage of those, and execute faster than i… --- ## [How to export an entire Elastic Search index to a csv file](https://discuss.elastic.co/t/how-to-export-an-entire-elastic-search-index-to-a-csv-file/296655)
**Author:** [@mwalk](https://discuss.elastic.co/u/mwalk)\ **Replies:** 3\ **Last updated:** [February 8, 2022, 10:51pm UTC](https://discuss.elastic.co/t/how-to-export-an-entire-elastic-search-index-to-a-csv-file/296655 "2022-02-08T22:51:22Z")
Hello, We have an Elasticsearch index that has approximately 1 million records in it. We'd like to export only two fields from it, and ID (int) and a Value (string) for auditing purposes. We've tried using es2csv, but… --- ## [Unable to locate data ingestion logs to debug GCP Dataflow errors](https://discuss.elastic.co/t/unable-to-locate-data-ingestion-logs-to-debug-gcp-dataflow-errors/296667)
**Author:** [@reza1](https://discuss.elastic.co/u/reza1)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 10:36pm UTC](https://discuss.elastic.co/t/unable-to-locate-data-ingestion-logs-to-debug-gcp-dataflow-errors/296667 "2022-02-08T22:36:28Z")
Hello, I'm trying to debug an issue with a GCP Dataflow job which inserts documents into an index. I get the following errors from GCP Dataflow: java.io.IOException: Error writing to Elasticsearch, some elements could … --- ## [Max\_bytes\_length\_exceeded\_exception Reason](https://discuss.elastic.co/t/max-bytes-length-exceeded-exception-reason/296640)
**Author:** [@Ahmed\_El\_bendary](https://discuss.elastic.co/u/Ahmed_El_bendary)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 5:03pm UTC](https://discuss.elastic.co/t/max-bytes-length-exceeded-exception-reason/296640 "2022-02-08T17:03:36Z")
error =\> index returned 400 \_index: \_doc \_id: 20142 \_version: 0 error: Type: illegal\_argument\_exception Reason: "Document contains at least one immense term in field="form" (whose UTF8 encoding is longer than the max l… --- ## [JAVA\_HOME and ES\_JAVA\_HOME](https://discuss.elastic.co/t/java-home-and-es-java-home/296651)
**Author:** [@holobolo0815](https://discuss.elastic.co/u/holobolo0815)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 9:46pm UTC](https://discuss.elastic.co/t/java-home-and-es-java-home/296651 "2022-02-08T21:46:08Z")
Hello, As I understand JAVA\_HOME should not be set, and ES\_JAVA\_HOME should only be set if I want to use another JDK than the bundled one. Alright, so my system just sets JAVA\_HOME for generic use and I don't care, and… --- ## [Split message logstash elasticsearch](https://discuss.elastic.co/t/split-message-logstash-elasticsearch/296291)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 7:28pm UTC](https://discuss.elastic.co/t/split-message-logstash-elasticsearch/296291 "2022-02-08T19:28:33Z")
Hi, my message it looks like : i want to add field when found the "|" it means to split it with "|" i did it but it looks with a wrong method : imagine that we have a lot of data in one message and in the same f… --- ## [Logstash Ruby error when trying to rename a field the has a hyphen "-" in the value](https://discuss.elastic.co/t/logstash-ruby-error-when-trying-to-rename-a-field-the-has-a-hyphen-in-the-value/296618)
**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\ **Replies:** 4\ **Last updated:** [February 8, 2022, 6:51pm UTC](https://discuss.elastic.co/t/logstash-ruby-error-when-trying-to-rename-a-field-the-has-a-hyphen-in-the-value/296618 "2022-02-08T18:51:14Z")
I have events with nested fields and am trying and am trying the reduce the depth of some nested fields to match ecs and discarding the fields I don't need. Renaning of all other fields word except for one which causes a… --- ## [Removing non-numeric characters from a field not working in logstash](https://discuss.elastic.co/t/removing-non-numeric-characters-from-a-field-not-working-in-logstash/296648)
**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 6:49pm UTC](https://discuss.elastic.co/t/removing-non-numeric-characters-from-a-field-not-working-in-logstash/296648 "2022-02-08T18:49:42Z")
need an urgent help.I am getting this error \[2022-02-08T18:25:01,995\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>"xjmdwt2/wbqlYsoFmJO31K… --- ## [Extracting some JSON fields from the message](https://discuss.elastic.co/t/extracting-some-json-fields-from-the-message/296479)
**Author:** [@hs\_shaikh](https://discuss.elastic.co/u/hs_shaikh)\ **Replies:** 6\ **Last updated:** [February 8, 2022, 5:37pm UTC](https://discuss.elastic.co/t/extracting-some-json-fields-from-the-message/296479 "2022-02-08T17:37:21Z")
Hello there, I want to extract "applicationOwner" and "proxyResponseCode" JSON fields from my message My message filed look like this: message": "TID: \[-1234\] \[2022-02-07 18:59:15,667\] INFO {org.wso2.am.analytics.pub… --- ## [How to filter single line json?](https://discuss.elastic.co/t/how-to-filter-single-line-json/296242)
**Author:** [@jeromeat](https://discuss.elastic.co/u/jeromeat)\ **Replies:** 4\ **Last updated:** [February 8, 2022, 5:21pm UTC](https://discuss.elastic.co/t/how-to-filter-single-line-json/296242 "2022-02-08T17:21:28Z")
I am trying to figure out how to filter this single line of json data I have been able to pull via http\_poller. I've obfuscated the data, but this is the format it's coming in as. I've never utilized a filter before, so… --- ## [Server Requirements](https://discuss.elastic.co/t/server-requirements/296341)
**Author:** [@mstarkie](https://discuss.elastic.co/u/mstarkie)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 3:33pm UTC](https://discuss.elastic.co/t/server-requirements/296341 "2022-02-08T15:33:31Z")
Hi, I am new to Elasticsearch and we are planning on using it to capture all of our order flow for analytics purposes. I anticipate a data rate of about 2.1 to 3 mb/seconds with a total of 5 to 7 gb/day of data. I wan… --- ## [Filter documents that contain array with empty string](https://discuss.elastic.co/t/filter-documents-that-contain-array-with-empty-string/296562)
**Author:** [@Muhammad\_Ahmad](https://discuss.elastic.co/u/Muhammad_Ahmad)\ **Replies:** 5\ **Last updated:** [February 8, 2022, 3:54pm UTC](https://discuss.elastic.co/t/filter-documents-that-contain-array-with-empty-string/296562 "2022-02-08T15:54:14Z")
I've documents in Elasticsearch and I want to filter out the documents that contain an array of only empty strings or have nothing / empty array. #doc 1 { "\_index": "my-index-000001", "\_type": "\_doc", "\_id": "0", … --- ## [Chart data disappears or shows up very differently when setting smaller timeframe](https://discuss.elastic.co/t/chart-data-disappears-or-shows-up-very-differently-when-setting-smaller-timeframe/296412)
**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\ **Replies:** 22\ **Last updated:** [February 8, 2022, 3:12pm UTC](https://discuss.elastic.co/t/chart-data-disappears-or-shows-up-very-differently-when-setting-smaller-timeframe/296412 "2022-02-08T15:12:09Z")
Hi, I'm using Kibana 7.17.0. it seems like the chart area in Kibana disappears when setting timeframe around 5 minutes (2nd screenshot). When I set it slightly longer than that (3rd screenshot), it doesn't seem to show t… --- ## [HA/redundancy on Logstash when pulling data](https://discuss.elastic.co/t/ha-redundancy-on-logstash-when-pulling-data/295754)
**Author:** [@jdswifty](https://discuss.elastic.co/u/jdswifty)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 2:17pm UTC](https://discuss.elastic.co/t/ha-redundancy-on-logstash-when-pulling-data/295754 "2022-02-08T14:17:17Z")
Looking to see how others might have approached this topic in the past. For examples sake I have 2 logstash nodes running in a hot/cold standby mode that run the exact same (centrally managed) pipelines that pull data f… --- ## [Use Case : Records are more than 10000 with pagination](https://discuss.elastic.co/t/use-case-records-are-more-than-10000-with-pagination/296207)
**Author:** [@Swapnil\_Javal](https://discuss.elastic.co/u/Swapnil_Javal)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 2:03pm UTC](https://discuss.elastic.co/t/use-case-records-are-more-than-10000-with-pagination/296207 "2022-02-08T14:03:28Z")
In My use case, We are implementing pagination with Elasticsearch. If the user clicks on any page number then he will get that set of records on UI. e.g. there is page size is 10 and we click on Page number 2 then 11 to… --- ## [Index Frequency & Rollover](https://discuss.elastic.co/t/index-frequency-rollover/296598)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 1:17pm UTC](https://discuss.elastic.co/t/index-frequency-rollover/296598 "2022-02-08T13:17:33Z")
If you have an ILM policy set to the default rollover settings (30 days or 50 GB), how should you configure your indexing in the LogStash output to align with that? Here's what I mean... if you have the following output … --- ## [Aggregating object keys to achieve a sum](https://discuss.elastic.co/t/aggregating-object-keys-to-achieve-a-sum/296193)
**Author:** [@hugomeloo](https://discuss.elastic.co/u/hugomeloo)\ **Replies:** 5\ **Last updated:** [February 8, 2022, 1:10pm UTC](https://discuss.elastic.co/t/aggregating-object-keys-to-achieve-a-sum/296193 "2022-02-08T13:10:32Z")
I am trying to make an aggregation in which I can sum a number from a specific key of an object. As an example: curl -XPUT "localhost:9200/products/\_mapping" -H 'Content-Type: application/json' -d' { "properties": { … --- ## [Elastic ITSM Connector shows CORS error](https://discuss.elastic.co/t/elastic-itsm-connector-shows-cors-error/296230)
**Author:** [@pindropviolence](https://discuss.elastic.co/u/pindropviolence)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 1:08pm UTC](https://discuss.elastic.co/t/elastic-itsm-connector-shows-cors-error/296230 "2022-02-08T13:08:03Z")
Hello Folks, I have tried to configured Elastic ITSM connector in Kb instance, i get CORS error when i try to create a new connection or add a connection to a rule. When I disabled CORS on browser level , I was able to … --- ## [Kibana - maximum amount of values in the DSL terms search](https://discuss.elastic.co/t/kibana-maximum-amount-of-values-in-the-dsl-terms-search/296585)
**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 12:45pm UTC](https://discuss.elastic.co/t/kibana-maximum-amount-of-values-in-the-dsl-terms-search/296585 "2022-02-08T12:45:55Z")
Hi! I'm trying to do a DSL filter in Kibana, in order to filter by a large amount of values on a specific field. For this, I'm using this syntax: { "query": { "bool": { "filter": { "terms": { … --- ## [The latch in BulkRequestHandler.execute is unnecessary](https://discuss.elastic.co/t/the-latch-in-bulkrequesthandler-execute-is-unnecessary/296570)
**Author:** [@asce0705](https://discuss.elastic.co/u/asce0705)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 9:45am UTC](https://discuss.elastic.co/t/the-latch-in-bulkrequesthandler-execute-is-unnecessary/296570 "2022-02-08T09:45:15Z")
The latch in BulkRequestHandler is added before to ensure that the new handler executes a bulk request and awaits for the completion if the BulkProcessor was configured with a concurrentRequests setting of 0. The related… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=709) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=711)