# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=720 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 721 --- ## [Logstash Cisco ASA logs "grokparsefailure" in logs tag](https://discuss.elastic.co/t/logstash-cisco-asa-logs-grokparsefailure-in-logs-tag/295571)
**Author:** [@zahid4](https://discuss.elastic.co/u/zahid4)\ **Replies:** 0\ **Last updated:** [January 27, 2022, 11:14am UTC](https://discuss.elastic.co/t/logstash-cisco-asa-logs-grokparsefailure-in-logs-tag/295571 "2022-01-27T11:14:36Z")
Im using the following configuration in the logstash to parse cisco logs and send to ELK: Im getting "grokparsefailure" in logs tag of cisco ASA logs although the format is correct. --- ## [DateFormat in ingest pipeline](https://discuss.elastic.co/t/dateformat-in-ingest-pipeline/295567)
**Author:** [@Mukesh\_Rawat](https://discuss.elastic.co/u/Mukesh_Rawat)\ **Replies:** 1\ **Last updated:** [January 27, 2022, 11:04am UTC](https://discuss.elastic.co/t/dateformat-in-ingest-pipeline/295567 "2022-01-27T11:04:58Z")
Hi i have created ingest pipeline to fetch custom logs, my pipeline with processor looks like below \[ { "grok": { "field": "message", "patterns": \[ "\\\\\[%{TIMESTAMP\_ISO8601:timestamp}\\\\\] %{DATA:… --- ## [Forcing Specific Mapping](https://discuss.elastic.co/t/forcing-specific-mapping/295177)
**Author:** [@Morphus1](https://discuss.elastic.co/u/Morphus1)\ **Replies:** 2\ **Last updated:** [January 27, 2022, 9:48am UTC](https://discuss.elastic.co/t/forcing-specific-mapping/295177 "2022-01-27T09:48:29Z")
I'm trying to link my elastic index to a piece of text annotation software called INCEpTION. It asks for some specific mapping. In order to set up a connection to an Elasticsearch repository, the following informatio… --- ## [Plugin development: custom distribution for yamlRestTest ? (7.16)](https://discuss.elastic.co/t/plugin-development-custom-distribution-for-yamlresttest-7-16/295368)
**Author:** [@mhugo](https://discuss.elastic.co/u/mhugo)\ **Replies:** 3\ **Last updated:** [January 27, 2022, 9:43am UTC](https://discuss.elastic.co/t/plugin-development-custom-distribution-for-yamlresttest-7-16/295368 "2022-01-27T09:43:44Z")
Hi, I'm migrating a plugin to the last 7.16.3 version and have trouble figuring out how to make yaml REST tests pass. The ES distribution that is used to run these tests does not seem to include everything needed to run… --- ## [We are trying to move Elasticsearch Data from Docker Container to Kubernetes Pod , the default Data path for ES pod is /usr/share/elasticsearch/data/nodes/0/](https://discuss.elastic.co/t/we-are-trying-to-move-elasticsearch-data-from-docker-container-to-kubernetes-pod-the-default-data-path-for-es-pod-is-usr-share-elasticsearch-data-nodes-0/295553)
**Author:** [@AnushaK](https://discuss.elastic.co/u/AnushaK)\ **Replies:** 3\ **Last updated:** [January 27, 2022, 9:36am UTC](https://discuss.elastic.co/t/we-are-trying-to-move-elasticsearch-data-from-docker-container-to-kubernetes-pod-the-default-data-path-for-es-pod-is-usr-share-elasticsearch-data-nodes-0/295553 "2022-01-27T09:36:30Z")
Hi , I am trying to copy the indices from the source Elasticsearch to the target Elasticsearch under /usr/share/Elasticsearch/data/nodes/0/indices/. Source and target path is same /usr/share/Elasticsearch/data/nodes/0/i… --- ## [Shards failed on a specific index after reducing number of primary shards](https://discuss.elastic.co/t/shards-failed-on-a-specific-index-after-reducing-number-of-primary-shards/295207)
**Author:** [@Michou\_Robert](https://discuss.elastic.co/u/Michou_Robert)\ **Replies:** 6\ **Last updated:** [January 27, 2022, 9:23am UTC](https://discuss.elastic.co/t/shards-failed-on-a-specific-index-after-reducing-number-of-primary-shards/295207 "2022-01-27T09:23:59Z")
I have a 4 nodes ES cluster running on Elasticsearch 6.8.4. We recently had some issues with ELK restarting and having too many shards on them resulting in our nodes going crazy everytime it restarted. (Which happen pret… --- ## [Elastic search show more than one snippet of a document](https://discuss.elastic.co/t/elastic-search-show-more-than-one-snippet-of-a-document/295411)
**Author:** [@bountyhat](https://discuss.elastic.co/u/bountyhat)\ **Replies:** 1\ **Last updated:** [January 27, 2022, 9:04am UTC](https://discuss.elastic.co/t/elastic-search-show-more-than-one-snippet-of-a-document/295411 "2022-01-27T09:04:39Z")
Hi, the default setting is one snippet per document. Can I show more than one snippets of a document? --- ## [Troubles starting kibana.service after the upgrade from 6.8.22 to 7.14.2](https://discuss.elastic.co/t/troubles-starting-kibana-service-after-the-upgrade-from-6-8-22-to-7-14-2/294919)
**Author:** [@Penchev](https://discuss.elastic.co/u/Penchev)\ **Replies:** 3\ **Last updated:** [January 27, 2022, 7:52am UTC](https://discuss.elastic.co/t/troubles-starting-kibana-service-after-the-upgrade-from-6-8-22-to-7-14-2/294919 "2022-01-27T07:52:32Z")
Hi, I have the following errors when starting Kibana: Jan 20 03:22:59 myserver kibana\[30701\]: Cannot update parameter \[index\] from \[true\] to \[false\], Jan 20 03:22:59 myserver kibana\[30701\]: FATAL Error: Unable to comp… --- ## [Tracking searched JSON documents](https://discuss.elastic.co/t/tracking-searched-json-documents/295554)
**Author:** [@Mohan\_Radhakrishnan](https://discuss.elastic.co/u/Mohan_Radhakrishnan)\ **Replies:** 0\ **Last updated:** [January 27, 2022, 7:51am UTC](https://discuss.elastic.co/t/tracking-searched-json-documents/295554 "2022-01-27T07:51:20Z")
Hello, We are evaluating based on our requirements and not sure how to handle these. We have decided to sink our events as JSON using Kafka Elasticsearch Sink Connector. The source is the DB. Now our primary document s… --- ## [Set kibanaConfig via Helm in Terraform](https://discuss.elastic.co/t/set-kibanaconfig-via-helm-in-terraform/295547)
**Author:** [@florian.besser](https://discuss.elastic.co/u/florian.besser)\ **Replies:** 1\ **Last updated:** [January 27, 2022, 7:23am UTC](https://discuss.elastic.co/t/set-kibanaconfig-via-helm-in-terraform/295547 "2022-01-27T07:23:42Z")
I'm using terraform to deploy Kibana using helm: resource "helm\_release" "kibana" { name = "kibana" namespace = "elastic" create\_namespace = true repository = "https://helm.elastic.co" char… --- ## [Elasticsearch memory issue?](https://discuss.elastic.co/t/elasticsearch-memory-issue/295449)
**Author:** [@catadetest](https://discuss.elastic.co/u/catadetest)\ **Replies:** 2\ **Last updated:** [January 27, 2022, 7:13am UTC](https://discuss.elastic.co/t/elasticsearch-memory-issue/295449 "2022-01-27T07:13:41Z")
Hi everyone, As my manager told me we should expect more traffic in the following days, I would like to be prepared with the Elasticsearch servers performance. So I did the following investigation: Verified my load /… --- ## [Enquiry on performance issue using Virtual Data Optimizer (VDO) to save storage space](https://discuss.elastic.co/t/enquiry-on-performance-issue-using-virtual-data-optimizer-vdo-to-save-storage-space/295550)
**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 0\ **Last updated:** [January 27, 2022, 7:06am UTC](https://discuss.elastic.co/t/enquiry-on-performance-issue-using-virtual-data-optimizer-vdo-to-save-storage-space/295550 "2022-01-27T07:06:02Z")
Hi I came across this RedHat Virtual Data Optimizer (VDO) storage software that can be used as an additional storage layer on top of my physical volume to perform compression & deduplication. This can significantly save… --- ## [Настройка поиска по раскладке и подстроке](https://discuss.elastic.co/t/topic/294941)
**Author:** [@Evgeny\_Kolonchuk](https://discuss.elastic.co/u/Evgeny_Kolonchuk)\ **Replies:** 2\ **Last updated:** [January 27, 2022, 5:10am UTC](https://discuss.elastic.co/t/topic/294941 "2022-01-27T05:10:38Z")
Доброго времени суток всем. Возникла задача хранения данных товаров и поиска по ним. Собственно помощь нужна в том как хранить и как сделать запрос. Пример такой: есть поле у товара search, оно набивается различным конт… --- ## [Search in two indexes](https://discuss.elastic.co/t/search-in-two-indexes/295506)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 2\ **Last updated:** [January 27, 2022, 4:50am UTC](https://discuss.elastic.co/t/search-in-two-indexes/295506 "2022-01-27T04:50:00Z")
I have two indices. Customer: List of all customers, their internal identifier (id) and their name (name); Order: List of all purchases made, with purchase date (order\_date), customer id (customer.id) and name (custo… --- ## [Split a doc to multiple docs](https://discuss.elastic.co/t/split-a-doc-to-multiple-docs/295531)
**Author:** [@cris](https://discuss.elastic.co/u/cris)\ **Replies:** 6\ **Last updated:** [January 27, 2022, 4:41am UTC](https://discuss.elastic.co/t/split-a-doc-to-multiple-docs/295531 "2022-01-27T04:41:44Z")
Hello friends. I am trying to reindex some data to another index but with a little differences. In the first index I have this kind of hit: { "ENVA": { "Login": { "status": "passed" } }, "ENVB": { … --- ## [No Sort Options on Kibana Lens Table](https://discuss.elastic.co/t/no-sort-options-on-kibana-lens-table/295436)
**Author:** [@Johanes\_Mistrialdo](https://discuss.elastic.co/u/Johanes_Mistrialdo)\ **Replies:** 3\ **Last updated:** [January 27, 2022, 3:22am UTC](https://discuss.elastic.co/t/no-sort-options-on-kibana-lens-table/295436 "2022-01-27T03:22:04Z")
Hi All, I am new to kibana and doesn't know why there is no options to sort by columns... discussion on Sorting in Kibana Data Table Visualization shows that i can sort the table by columns, but i cannot do the same… --- ## [ES Best Practices for collecting public distributed logs](https://discuss.elastic.co/t/es-best-practices-for-collecting-public-distributed-logs/295336)
**Author:** [@Alberto\_Manzano](https://discuss.elastic.co/u/Alberto_Manzano)\ **Replies:** 1\ **Last updated:** [January 27, 2022, 2:43am UTC](https://discuss.elastic.co/t/es-best-practices-for-collecting-public-distributed-logs/295336 "2022-01-27T02:43:43Z")
Hello everyone, I've been using ES Stack for quite a while but I'm still struggling to figure out what's the best architecture to ingest logs for a given use case. I've developed an application customers have to instal… --- ## [Why am I getting warning about "Number of open shards exceeds cluster soft limit"?](https://discuss.elastic.co/t/why-am-i-getting-warning-about-number-of-open-shards-exceeds-cluster-soft-limit/295356)
**Author:** [@willdennis](https://discuss.elastic.co/u/willdennis)\ **Replies:** 8\ **Last updated:** [January 27, 2022, 2:14am UTC](https://discuss.elastic.co/t/why-am-i-getting-warning-about-number-of-open-shards-exceeds-cluster-soft-limit/295356 "2022-01-27T02:14:53Z")
I have a single-node ES 6.8 cluster with ~5500 shards. I have set the cluster.max\_shards\_per\_node to '10000' in /etc/elasticsearch/elasticsearch.yml as per this article: But even after restarting ES, I get the "Number … --- ## [ERROR COMPILING LOGSTASH CODEBASE TO GENERATE THE .JAR FILE CONTAINING THE JAVA PLUGIN API](https://discuss.elastic.co/t/error-compiling-logstash-codebase-to-generate-the-jar-file-containing-the-java-plugin-api/295528)
**Author:** [@uday22](https://discuss.elastic.co/u/uday22)\ **Replies:** 0\ **Last updated:** [January 27, 2022, 12:34am UTC](https://discuss.elastic.co/t/error-compiling-logstash-codebase-to-generate-the-jar-file-containing-the-java-plugin-api/295528 "2022-01-27T00:34:13Z")
Error compiling logstash codebase to generate the java plugin API to develop logstash java plugin. running gradlew.bat assemble from root directory of logstash codebase getting below error. Exception in thread "main" … --- ## [Unable to seeing any lines (Host & Destination )on the Network tab in Elastic Security](https://discuss.elastic.co/t/unable-to-seeing-any-lines-host-destination-on-the-network-tab-in-elastic-security/295444)
**Author:** [@Rizwan\_Balouch](https://discuss.elastic.co/u/Rizwan_Balouch)\ **Replies:** 0\ **Last updated:** [January 26, 2022, 10:12am UTC](https://discuss.elastic.co/t/unable-to-seeing-any-lines-host-destination-on-the-network-tab-in-elastic-security/295444 "2022-01-26T10:12:31Z")
i am following the elastic blog " Collecting and analyzing Zeek data with Elastic Security" everything is working except I am not able to seeing any of the “pew pew” lines on the Network tab in Elastic Security. i ha… --- ## [Reducing the number of replicas will release disk space an each node of the cluster?](https://discuss.elastic.co/t/reducing-the-number-of-replicas-will-release-disk-space-an-each-node-of-the-cluster/295526)
**Author:** [@Guillermo\_Garcia1](https://discuss.elastic.co/u/Guillermo_Garcia1)\ **Replies:** 2\ **Last updated:** [January 27, 2022, 12:01am UTC](https://discuss.elastic.co/t/reducing-the-number-of-replicas-will-release-disk-space-an-each-node-of-the-cluster/295526 "2022-01-27T00:01:11Z")
Hello there, We have a problem with shard allocation due to disk space usage in several indices (yellow status). We have 2 replicas for each primary shard. We want to update the index settings to 1 replica instead of 2… --- ## [After upgrading ES version, new node cannot join to the cluster](https://discuss.elastic.co/t/after-upgrading-es-version-new-node-cannot-join-to-the-cluster/295520)
**Author:** [@judy\_gao](https://discuss.elastic.co/u/judy_gao)\ **Replies:** 0\ **Last updated:** [January 26, 2022, 11:03pm UTC](https://discuss.elastic.co/t/after-upgrading-es-version-new-node-cannot-join-to-the-cluster/295520 "2022-01-26T23:03:45Z")
After upgrading one node to ES 7.16.3, the new node cannot join the cluster, error from log : \[2022-01-26T22:33:34,365\]\[DEBUG\]\[o.e.d.PeerFinder \] \[ip-10-68-41-201.ec2.internal\] address \[\[::1\]:9304\], node \[null\],… --- ## [Insure rebalance data between data node](https://discuss.elastic.co/t/insure-rebalance-data-between-data-node/295503)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 2\ **Last updated:** [January 26, 2022, 10:05pm UTC](https://discuss.elastic.co/t/insure-rebalance-data-between-data-node/295503 "2022-01-26T22:05:11Z")
Hi I'm wondering why it was occurred, from the beginning I used the schema of rebalance date through shards (7shards per index). I have 7 data node and one of additional as coordinator. But one of them is going to reach… --- ## [Name or Service Error](https://discuss.elastic.co/t/name-or-service-error/295429)
**Author:** [@Harshavardhan\_Reddy1](https://discuss.elastic.co/u/Harshavardhan_Reddy1)\ **Replies:** 7\ **Last updated:** [January 26, 2022, 8:45pm UTC](https://discuss.elastic.co/t/name-or-service-error/295429 "2022-01-26T20:45:38Z")
I'm facing an issue in my windows laptop, and the issue is that Elasticsearch: Service start error MySql: Service start error, Petclinic -Server and Client: Service start error. --- ## [Discover on dashboard changes Add filter source of filter](https://discuss.elastic.co/t/discover-on-dashboard-changes-add-filter-source-of-filter/295380)
**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\ **Replies:** 4\ **Last updated:** [January 26, 2022, 7:44pm UTC](https://discuss.elastic.co/t/discover-on-dashboard-changes-add-filter-source-of-filter/295380 "2022-01-26T19:44:08Z")
Hi, I have dashboard which has multiple visualizations from one index "index1". Add filter offers fields from this index. When I add discover list from "index2" to dashboard, it suddenly changes the options in Add filte… --- ## [JDBC input, kafka output, syntax error, unexpected end-of-file Java:: after pipeline starts](https://discuss.elastic.co/t/jdbc-input-kafka-output-syntax-error-unexpected-end-of-file-java-after-pipeline-starts/294452)
**Author:** [@rschmerb](https://discuss.elastic.co/u/rschmerb)\ **Replies:** 6\ **Last updated:** [January 26, 2022, 7:09pm UTC](https://discuss.elastic.co/t/jdbc-input-kafka-output-syntax-error-unexpected-end-of-file-java-after-pipeline-starts/294452 "2022-01-26T19:09:32Z")
We are seeing the following error messages after starting our pipeline: \[2022-01-13T19:48:06,009\]\[FATAL\]\[org.logstash.Logstash \] Logstash stopped processing because of an error: (SyntaxError) (eval):1: syntax error, un… --- ## [Visualization of the most frequent words](https://discuss.elastic.co/t/visualization-of-the-most-frequent-words/295494)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 3\ **Last updated:** [January 26, 2022, 6:54pm UTC](https://discuss.elastic.co/t/visualization-of-the-most-frequent-words/295494 "2022-01-26T18:54:13Z")
Hello ! i am new to kibana and elastic My need is to display the most used words in a text type field on several documents. Is it possible to do this with kibana and elastic? If so, how is this possible? With scripted … --- ## [Logstash http poller](https://discuss.elastic.co/t/logstash-http-poller/295441)
**Author:** [@Ingram\_Gultom](https://discuss.elastic.co/u/Ingram_Gultom)\ **Replies:** 3\ **Last updated:** [January 26, 2022, 6:03pm UTC](https://discuss.elastic.co/t/logstash-http-poller/295441 "2022-01-26T18:03:04Z")
Hi, I am using logstash 7.13.4 and I want to use http poller for this url http://10.10.10.10:8080/dbonequerydata/?username=user/password=password/encrypted=false/conversion=true/DT=csv -H "Content-Type: application/xml… --- ## [Remove or Hide Kibana and Signal fields in Elastic Security](https://discuss.elastic.co/t/remove-or-hide-kibana-and-signal-fields-in-elastic-security/294804)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 8\ **Last updated:** [January 26, 2022, 6:44pm UTC](https://discuss.elastic.co/t/remove-or-hide-kibana-and-signal-fields-in-elastic-security/294804 "2022-01-26T18:44:45Z")
Version: 7.16.3 Hi, everyone I would like to know whether it is possible to remove or hide Kibana and Signal fields in Elastic Security. When an alert is triggered, you can look over it, here you are a screenshot: I… --- ## [Replicate HOT node](https://discuss.elastic.co/t/replicate-hot-node/295493)
**Author:** [@ima](https://discuss.elastic.co/u/ima)\ **Replies:** 1\ **Last updated:** [January 26, 2022, 5:47pm UTC](https://discuss.elastic.co/t/replicate-hot-node/295493 "2022-01-26T17:47:56Z")
Hello everyone, Is there a way to replicate a data hot node to another node to maitain high availability (HA). Thank you [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=719) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=721)