# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=727 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 728 --- ## [How can we convert POD CPU usage to percentage when pod has 2 containers with different cpu limits](https://discuss.elastic.co/t/how-can-we-convert-pod-cpu-usage-to-percentage-when-pod-has-2-containers-with-different-cpu-limits/294937)
**Author:** [@Soundarya\_Peddakotla](https://discuss.elastic.co/u/Soundarya_Peddakotla)\ **Replies:** 0\ **Last updated:** [January 20, 2022, 10:55am UTC](https://discuss.elastic.co/t/how-can-we-convert-pod-cpu-usage-to-percentage-when-pod-has-2-containers-with-different-cpu-limits/294937 "2022-01-20T10:55:37Z")
With single container we can convert cpu usage to percentage by using cpu limits. But how can we convert cpu usage to percentage when 2 containers with different cpu limits are there --- ## [Dropdown and Time filters stopped working](https://discuss.elastic.co/t/dropdown-and-time-filters-stopped-working/294913)
**Author:** [@lynchpin82](https://discuss.elastic.co/u/lynchpin82)\ **Replies:** 1\ **Last updated:** [January 20, 2022, 10:02am UTC](https://discuss.elastic.co/t/dropdown-and-time-filters-stopped-working/294913 "2022-01-20T10:02:59Z")
Hi, I'm using Kibana 7.3.2 and had a canvas page using time and dropdown filters. Since last week these have stopped working and I can't understand why. This includes using the demo test data available. Time filter exa… --- ## [Elastic search not starting](https://discuss.elastic.co/t/elastic-search-not-starting/294789)
**Author:** [@rohit45](https://discuss.elastic.co/u/rohit45)\ **Replies:** 12\ **Last updated:** [January 20, 2022, 9:49am UTC](https://discuss.elastic.co/t/elastic-search-not-starting/294789 "2022-01-20T09:49:53Z")
at org.elasticsearch.bootstrap.Bootstrap$5.\(Bootstrap.java:234) ~\[elasticsearch-7.16.3.jar:7.16.3\] at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:234) ~\[elasticsearch-7.16.3.jar:7.16… --- ## [Irrelevant field search results](https://discuss.elastic.co/t/irrelevant-field-search-results/293188)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 10\ **Last updated:** [January 20, 2022, 9:12am UTC](https://discuss.elastic.co/t/irrelevant-field-search-results/293188 "2022-01-20T09:12:58Z")
Hi, I've made this Lucene query in Kibana to search if Nginx access logs contain a URL with the word "malware": source.as.organization.name: (/.\*\[Mm\]\[Aa\]\[Ll\]\[Ww\]\[Aa\]\[Rr\]\[Ee\].\*/) But in Kibana I'm getting the results … --- ## [No cipher suites in common for tcp input](https://discuss.elastic.co/t/no-cipher-suites-in-common-for-tcp-input/52764)
**Author:** [@Jason\_Woodrich](https://discuss.elastic.co/u/Jason_Woodrich)\ **Replies:** 1\ **Last updated:** [January 20, 2022, 9:12am UTC](https://discuss.elastic.co/t/no-cipher-suites-in-common-for-tcp-input/52764 "2022-01-20T09:12:17Z")
I'm trying to configure a tcp syslog input with SSL support and running into some problems. I've installed logstash 2.3.2 using the RPM from the Elastic site. Below is my configuration: input { tcp { port =\> 54… --- ## [ES 7.16.0 and 7.16.1 Upgrade single node health yellow](https://discuss.elastic.co/t/es-7-16-0-and-7-16-1-upgrade-single-node-health-yellow/291875)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 1\ **Last updated:** [January 20, 2022, 8:26am UTC](https://discuss.elastic.co/t/es-7-16-0-and-7-16-1-upgrade-single-node-health-yellow/291875 "2022-01-20T08:26:01Z")
Hello boys and girls I have a single ES node which has one index turn yellow curl -XGET localhost:9200/\_cat/health 1639519203 22:00:03 ndelastic yellow 1 1 317 317 0 0 1 0 - 99.7% curl -XGET localhost:9200/\_cluster/a… --- ## [Upgrade of elastic, name of indices and data streams](https://discuss.elastic.co/t/upgrade-of-elastic-name-of-indices-and-data-streams/294850)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 6\ **Last updated:** [January 20, 2022, 7:27am UTC](https://discuss.elastic.co/t/upgrade-of-elastic-name-of-indices-and-data-streams/294850 "2022-01-20T07:27:05Z")
Hi, we have installed version 7.5 of the stack and we want to upgrade to the latest version, but our custom indexes are already called: metrics-\ example : metrics-interfaces . what problems could ari… --- ## [Metricbeat for ActiveMQ](https://discuss.elastic.co/t/metricbeat-for-activemq/294359)
**Author:** [@rodentskie](https://discuss.elastic.co/u/rodentskie)\ **Replies:** 10\ **Last updated:** [January 20, 2022, 7:18am UTC](https://discuss.elastic.co/t/metricbeat-for-activemq/294359 "2022-01-20T07:18:45Z")
Hi, I'm currently working on getting metrics from AWS activemq, but I can't get it on how to install jolokia module. Any idea? We are using a cloud Elasticsearch instance, and we apply our metricbeat using kubernetes ya… --- ## [Max between two fields in last X days Kibana(lens)](https://discuss.elastic.co/t/max-between-two-fields-in-last-x-days-kibana-lens/294765)
**Author:** [@dash5000](https://discuss.elastic.co/u/dash5000)\ **Replies:** 16\ **Last updated:** [January 20, 2022, 4:05am UTC](https://discuss.elastic.co/t/max-between-two-fields-in-last-x-days-kibana-lens/294765 "2022-01-20T04:05:03Z")
Hello, I am stuck at a problem, where i have to get the maximum between two fields in a document in last X days. I am using the table format with lens. For example document has: name=test description=test description … --- ## [Need help to understand how standard tokenizer works](https://discuss.elastic.co/t/need-help-to-understand-how-standard-tokenizer-works/294860)
**Author:** [@jsjs2](https://discuss.elastic.co/u/jsjs2)\ **Replies:** 1\ **Last updated:** [January 20, 2022, 1:12am UTC](https://discuss.elastic.co/t/need-help-to-understand-how-standard-tokenizer-works/294860 "2022-01-20T01:12:42Z")
In the following two examples, I had hard time to understand why the outputs are different: POST \_analyze { "tokenizer": "standard", "text": "mark.cuban" } terms produced: \["mark.cuban"\] POST \_analyze { "tokeniz… --- ## [QueryCacheMemorySize increased to 9.2EB then dropped to 0. How to debug QueryCache issues?](https://discuss.elastic.co/t/querycachememorysize-increased-to-9-2eb-then-dropped-to-0-how-to-debug-querycache-issues/294885)
**Author:** [@ztesky](https://discuss.elastic.co/u/ztesky)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 11:41pm UTC](https://discuss.elastic.co/t/querycachememorysize-increased-to-9-2eb-then-dropped-to-0-how-to-debug-querycache-issues/294885 "2022-01-19T23:41:57Z")
I'm using Elasticsearch version 6.3 in production. We have a shard with size \> 200GB in a data node. Recently, we did a "cluster reroute" wherein we moved this shard from node A (which had QueryCacheMemorySize = 3GB) to … --- ## [Control Visualization, metricbeat field , values not showing. v7.13](https://discuss.elastic.co/t/control-visualization-metricbeat-field-values-not-showing-v7-13/294876)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 9:53pm UTC](https://discuss.elastic.co/t/control-visualization-metricbeat-field-values-not-showing-v7-13/294876 "2022-01-19T21:53:57Z")
Hi, Im having problems to display values in the control visualization, the field that I need to use is created by metricbeat. in discovery I can see the values, and the field exist In index patterns there is a field… --- ## [Match data from two arrays](https://discuss.elastic.co/t/match-data-from-two-arrays/294488)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 11\ **Last updated:** [January 19, 2022, 9:33pm UTC](https://discuss.elastic.co/t/match-data-from-two-arrays/294488 "2022-01-19T21:33:45Z")
Hi Can You help me for make a method for merge data between two arrays and match this into one document. pattern- \> name of fields \[a-b-c-d-e\] //we have a 3 events separated by the | value\_field = 5-7-10-12-9|5-7-9… --- ## [Error index management Filebeat to Logstash](https://discuss.elastic.co/t/error-index-management-filebeat-to-logstash/294872)
**Author:** [@Adrpan83](https://discuss.elastic.co/u/Adrpan83)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 7:32pm UTC](https://discuss.elastic.co/t/error-index-management-filebeat-to-logstash/294872 "2022-01-19T19:32:16Z")
Hi, I have the following configuration: Filebeat 7.10.1 and Logstash 7.10.1. ERROR instance/beat.go:956 Exiting: Index management requested but the Elasticsearch output is not configured/enabled Exiting: Index man… --- ## [Obtain Jenkins pipelines and parameters from Kibana](https://discuss.elastic.co/t/obtain-jenkins-pipelines-and-parameters-from-kibana/294871)
**Author:** [@Brian\_Fernandez](https://discuss.elastic.co/u/Brian_Fernandez)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 7:20pm UTC](https://discuss.elastic.co/t/obtain-jenkins-pipelines-and-parameters-from-kibana/294871 "2022-01-19T19:20:40Z")
Good afternoon. How can I show in Kibana, the total list of Jenkins pipelines and the parameters that each one has configured? Thanks! --- ## [Make the Time Range on a map dynamic](https://discuss.elastic.co/t/make-the-time-range-on-a-map-dynamic/294810)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 1\ **Last updated:** [January 19, 2022, 6:43pm UTC](https://discuss.elastic.co/t/make-the-time-range-on-a-map-dynamic/294810 "2022-01-19T18:43:13Z")
Hi, How would you make a time range dynamic on a map in a canvas? (i.e. it automatically changes over time like 11:59am today to 12:15pm). --- ## [Getting timestamp field from XML attribute](https://discuss.elastic.co/t/getting-timestamp-field-from-xml-attribute/294625)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 10\ **Last updated:** [January 19, 2022, 6:41pm UTC](https://discuss.elastic.co/t/getting-timestamp-field-from-xml-attribute/294625 "2022-01-19T18:41:09Z")
I'm using the xml filter plugin in Logstash to parse a XML document, and am having success with the exception of the @timestamp value, which is found as an attribute value. Here is a snippet of the XML file: \ **Author:** [@dmarshall](https://discuss.elastic.co/u/dmarshall)\ **Replies:** 2\ **Last updated:** [January 19, 2022, 6:28pm UTC](https://discuss.elastic.co/t/using-logstash-to-denomalize-data/294858 "2022-01-19T18:28:43Z") I have data coming in with field names like this: "field\_1" =\> "10" "field\_2" =\> "20" and I'm trying to figure out how to convert it to something more like this: "field" =\> \[ {"num" =\> "1", "val" =\> "10"}, {"num" =\> … --- ## [Dashboard POST URL too long unless re-saving](https://discuss.elastic.co/t/dashboard-post-url-too-long-unless-re-saving/294859)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 6:02pm UTC](https://discuss.elastic.co/t/dashboard-post-url-too-long-unless-re-saving/294859 "2022-01-19T18:02:46Z")
7.16.2 stack I'm running into an issue where it's saying my Dashboard POST URL is too long The odd thing is, if I edit the dashboard and re-save it, the POST URL is fine. I'm stuck on what is causing the dashboard… --- ## [Create Different "Index Management" and "Index Pattern" For Different Firewall Devices](https://discuss.elastic.co/t/create-different-index-management-and-index-pattern-for-different-firewall-devices/294678)
**Author:** [@Xenial](https://discuss.elastic.co/u/Xenial)\ **Replies:** 1\ **Last updated:** [January 19, 2022, 5:31pm UTC](https://discuss.elastic.co/t/create-different-index-management-and-index-pattern-for-different-firewall-devices/294678 "2022-01-19T17:31:10Z")
Hello Team, I want to create Dashboarding system (SIEM) For two different firewall device (Panorama Palo Alto, Fortianalyzer Fortinet). I want to use Filebeat Modules PANW and FORTINET. How i create 2 Index Management a… --- ## [Combined\_fields + dfs\_query\_then\_fetch causes error](https://discuss.elastic.co/t/combined-fields-dfs-query-then-fetch-causes-error/294410)
**Author:** [@cyradin](https://discuss.elastic.co/u/cyradin)\ **Replies:** 2\ **Last updated:** [January 19, 2022, 5:04pm UTC](https://discuss.elastic.co/t/combined-fields-dfs-query-then-fetch-causes-error/294410 "2022-01-19T17:04:46Z")
Using combined\_fields query with dfs\_query\_then\_fetch causes "docCount must not exceed maxDoc" error if the request goes to multiple shards. Quick example to reproduce the issue (Elasticsearch v7.13.4, v7.15.0) PUT /my… --- ## [Cannot read property 'aliases' of undefined](https://discuss.elastic.co/t/cannot-read-property-aliases-of-undefined/293079)
**Author:** [@andrerca12](https://discuss.elastic.co/u/andrerca12)\ **Replies:** 10\ **Last updated:** [January 19, 2022, 4:43pm UTC](https://discuss.elastic.co/t/cannot-read-property-aliases-of-undefined/293079 "2022-01-19T16:43:35Z")
Hello, After i updated my Elasticsearch to version 7.16, Kibana can’t load Index Management page, with error Cannot read property ‘aliases’ of undefined. Everything else is working fine, my applications are streaming … --- ## [Winlogbeat Manual EVTX Upload - Performance](https://discuss.elastic.co/t/winlogbeat-manual-evtx-upload-performance/294840)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 3:16pm UTC](https://discuss.elastic.co/t/winlogbeat-manual-evtx-upload-performance/294840 "2022-01-19T15:16:35Z")
Hi Guys, I am using winlogbeat on a regular basis to upload multiple evtx files to elastic(with powershell). The problem is that sometimes it takes a very long time for the upload to complete(hours). Is there a way to… --- ## [How to decrypt data who are encrypted in postgres and pass them to elastic before indexing them](https://discuss.elastic.co/t/how-to-decrypt-data-who-are-encrypted-in-postgres-and-pass-them-to-elastic-before-indexing-them/294852)
**Author:** [@Albi\_Zeqollari](https://discuss.elastic.co/u/Albi_Zeqollari)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 4:19pm UTC](https://discuss.elastic.co/t/how-to-decrypt-data-who-are-encrypted-in-postgres-and-pass-them-to-elastic-before-indexing-them/294852 "2022-01-19T16:19:16Z")
Some examples pls! --- ## [Automate Logstash Pipelines, Parsing](https://discuss.elastic.co/t/automate-logstash-pipelines-parsing/294845)
**Author:** [@harry\_cook](https://discuss.elastic.co/u/harry_cook)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 3:50pm UTC](https://discuss.elastic.co/t/automate-logstash-pipelines-parsing/294845 "2022-01-19T15:50:57Z")
Hi Folks, Is there a way to automatically generate logstash pipelines based on certain inputs ? Has anyone worked on such use cases ? --- ## [Is there any way to get more than one field from an aggregation?](https://discuss.elastic.co/t/is-there-any-way-to-get-more-than-one-field-from-an-aggregation/294741)
**Author:** [@Maxi\_Donadio](https://discuss.elastic.co/u/Maxi_Donadio)\ **Replies:** 4\ **Last updated:** [January 19, 2022, 2:56pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-get-more-than-one-field-from-an-aggregation/294741 "2022-01-19T14:56:01Z")
Hi! I need to know if it's possible to get more than one value from an aggregation. If I were to write my desired query as SQL it'd be something like: SELECT value1, value2, value3 FROM table WHERE condition. I'd like t… --- ## [Deleted logstash-plain.log - it's not coming back!](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821)
**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\ **Replies:** 6\ **Last updated:** [January 19, 2022, 2:12pm UTC](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821 "2022-01-19T14:12:31Z")
Hi All, Help, in a process of trying to debug i deleted logstash-plain.log from /var/log/logstash. but its not come back! Any ideas how i get it back please? --- ## [Could not find or load main class org.elasticsearch.bootstrap.Elasticsearch Caused by: java.lang.ClassNotFoundException: org.elasticsearch.bootstrap.Elasticsearch](https://discuss.elastic.co/t/could-not-find-or-load-main-class-org-elasticsearch-bootstrap-elasticsearch-caused-by-java-lang-classnotfoundexception-org-elasticsearch-bootstrap-elasticsearch/293451)
**Author:** [@Vivek\_Paralikar](https://discuss.elastic.co/u/Vivek_Paralikar)\ **Replies:** 2\ **Last updated:** [January 19, 2022, 1:44pm UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class-org-elasticsearch-bootstrap-elasticsearch-caused-by-java-lang-classnotfoundexception-org-elasticsearch-bootstrap-elasticsearch/293451 "2022-01-19T13:44:57Z")
Starting Elasticsearch Server Error: Could not find or load main class org.… --- ## [Preserve logs original creation sequence when timestamp is identical](https://discuss.elastic.co/t/preserve-logs-original-creation-sequence-when-timestamp-is-identical/294818)
**Author:** [@alon\_carmelly](https://discuss.elastic.co/u/alon_carmelly)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 1:30pm UTC](https://discuss.elastic.co/t/preserve-logs-original-creation-sequence-when-timestamp-is-identical/294818 "2022-01-19T13:30:20Z")
Hi, I have logs with similar timestamp out of order: I understand logstash does not preserve creation order. I read that using dissect filter together with grok could solve the issue but can't find any examples. This i… --- ## [Upgrading ECK operator from 1.0.0-beta1 to latest version](https://discuss.elastic.co/t/upgrading-eck-operator-from-1-0-0-beta1-to-latest-version/293347)
**Author:** [@radw](https://discuss.elastic.co/u/radw)\ **Replies:** 2\ **Last updated:** [January 19, 2022, 12:23pm UTC](https://discuss.elastic.co/t/upgrading-eck-operator-from-1-0-0-beta1-to-latest-version/293347 "2022-01-19T12:23:36Z")
Hey all. I'm having a little bit of a hard time understanding how to upgrade my eck operator and elastic stack version. Currently I'm on eck 1.0.0-beta1 which is compatible with the latest operator as per this guide Up… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=726) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=728)