# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=730 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 731 --- ## [After Upgrade Logstash is running but not sending logs to elasticsearch](https://discuss.elastic.co/t/after-upgrade-logstash-is-running-but-not-sending-logs-to-elasticsearch/294324)
**Author:** [@Othmane\_CHHAIBI](https://discuss.elastic.co/u/Othmane_CHHAIBI)\ **Replies:** 7\ **Last updated:** [January 17, 2022, 4:19pm UTC](https://discuss.elastic.co/t/after-upgrade-logstash-is-running-but-not-sending-logs-to-elasticsearch/294324 "2022-01-17T16:19:15Z")
hello everyone, After upgrading logstash from version 6.8 to 7.16.2, logstash is running but it didn't send logs to Elasticsearch. In the logfile of logstash server i have this error : "\[2022-01-03Tl3:50:23,910)\[FATAL)… --- ## [Error "Look-behind group does not have an obvious maximum length near index" in pattern\_capture](https://discuss.elastic.co/t/error-look-behind-group-does-not-have-an-obvious-maximum-length-near-index-in-pattern-capture/294594)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 4:08pm UTC](https://discuss.elastic.co/t/error-look-behind-group-does-not-have-an-obvious-maximum-length-near-index-in-pattern-capture/294594 "2022-01-17T16:08:08Z")
Hello I just want to index the word "Samsung" in the text below Text: Samsung a30 mobile phone I mean I want to separate the text above by space and just index the word I want (the word may change by location, for exa… --- ## [How to change "message" value in index](https://discuss.elastic.co/t/how-to-change-message-value-in-index/294548)
**Author:** [@mhzr](https://discuss.elastic.co/u/mhzr)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 3:38pm UTC](https://discuss.elastic.co/t/how-to-change-message-value-in-index/294548 "2022-01-17T15:38:45Z")
Hello, In logstash pipeline or indexpattern how to change the following part of CDN log in "message" field to seperate or extract some data then aggrigate them. original "message" value: \<40\> 2022-01-17T08:31:22Z logs… --- ## [ES issue with bulk items](https://discuss.elastic.co/t/es-issue-with-bulk-items/294598)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 3:35pm UTC](https://discuss.elastic.co/t/es-issue-with-bulk-items/294598 "2022-01-17T15:35:36Z")
Hello, I'm receiving below issues with bulk items, "stacktrace": \["org.elasticsearch.index.mapper.MapperParsingException: object mapping for \[rule\] tried to parse field \[rule\] as object, but found a concrete value", "a… --- ## [Separate Fields Now Displaying As One Object](https://discuss.elastic.co/t/separate-fields-now-displaying-as-one-object/293950)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 11\ **Last updated:** [January 17, 2022, 3:25pm UTC](https://discuss.elastic.co/t/separate-fields-now-displaying-as-one-object/293950 "2022-01-17T15:25:33Z")
I use Logstash to process our logs and organize relevant fields into objects so that they display together in Kibana. log.source log.format log.time However, after upgrading, I THINK to 7.16, they're now displaying as… --- ## [Assign colors to boolean pie chart](https://discuss.elastic.co/t/assign-colors-to-boolean-pie-chart/294486)
**Author:** [@kequach](https://discuss.elastic.co/u/kequach)\ **Replies:** 6\ **Last updated:** [January 17, 2022, 2:54pm UTC](https://discuss.elastic.co/t/assign-colors-to-boolean-pie-chart/294486 "2022-01-17T14:54:44Z")
I want to have fixed colors for true/false. At the moment, the color palette simply assigns the bigger value to the default color which makes it hard to tell in one glance if the piechart is mostly false or true: I al… --- ## [Brand New Installation of ElasticSearch and Kibana on Windows. Kibana is not able to connect to ElasticSearch](https://discuss.elastic.co/t/brand-new-installation-of-elasticsearch-and-kibana-on-windows-kibana-is-not-able-to-connect-to-elasticsearch/294490)
**Author:** [@webdada](https://discuss.elastic.co/u/webdada)\ **Replies:** 3\ **Last updated:** [January 17, 2022, 2:43pm UTC](https://discuss.elastic.co/t/brand-new-installation-of-elasticsearch-and-kibana-on-windows-kibana-is-not-able-to-connect-to-elasticsearch/294490 "2022-01-17T14:43:21Z")
Both are on latest 7.16.3 version. Elasticsearch-7.16.3 Elasticsearch starts fine, I was able to access http://localhost:9200/ Kibana command line start error: log \[20:15:25.611\] \[warning\]\[process\] Error \[Prod… --- ## [Date incorrectly parsed](https://discuss.elastic.co/t/date-incorrectly-parsed/294571)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 2:03pm UTC](https://discuss.elastic.co/t/date-incorrectly-parsed/294571 "2022-01-17T14:03:09Z")
Hello, i can't get this date parsed correctly 20220113T21:00:18.965901 date { match =\> \["fill\_date", "yyyMMdd'T'HH:mm:ss.SSSSSS"\] target =\> "@timestamp" } Best --- ## [Calculate ratio beetwin count and unique count](https://discuss.elastic.co/t/calculate-ratio-beetwin-count-and-unique-count/294588)
**Author:** [@Fred59](https://discuss.elastic.co/u/Fred59)\ **Replies:** 8\ **Last updated:** [January 17, 2022, 1:51pm UTC](https://discuss.elastic.co/t/calculate-ratio-beetwin-count-and-unique-count/294588 "2022-01-17T13:51:48Z")
Hello, I have a list of tickets for a computeur support. I would have in a tab the ratio beetwin the count of exchange and the unique count of ticket number, for different typologies, like that: Is it possible in a … --- ## [Elastic agent - configuration for "custom logs" integration?](https://discuss.elastic.co/t/elastic-agent-configuration-for-custom-logs-integration/293886)
**Author:** [@mybyte](https://discuss.elastic.co/u/mybyte)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 12:30pm UTC](https://discuss.elastic.co/t/elastic-agent-configuration-for-custom-logs-integration/293886 "2022-01-17T12:30:30Z")
Where can I find any sort of reference for the available parameters for the "Custom logs" integration? --- ## [Browser was closed unexpectedly!](https://discuss.elastic.co/t/browser-was-closed-unexpectedly/294581)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 12:21pm UTC](https://discuss.elastic.co/t/browser-was-closed-unexpectedly/294581 "2022-01-17T12:21:19Z")
Hi, I am trying to print a PDF of my dashboard but all I keep getting is this error: "Browser was closed unexpectedly! Check the server logs for more info." What does this mean? Can you please try and help me with this?… --- ## [Logstash parse strings before a valid json](https://discuss.elastic.co/t/logstash-parse-strings-before-a-valid-json/294578)
**Author:** [@Calin\_Tatar](https://discuss.elastic.co/u/Calin_Tatar)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 11:59am UTC](https://discuss.elastic.co/t/logstash-parse-strings-before-a-valid-json/294578 "2022-01-17T11:59:58Z")
Hello, i have the following log : Received stock info for v2, payload: {'id': '1234dads', 'sku': '1QA0QWQ-1JFQQQ'} and i would like to add a new field with phase before json ,i tried the following config but is now worki… --- ## [Kibana page goes unresponsive everytime i select sum buckets in Kibana 7.6.3](https://discuss.elastic.co/t/kibana-page-goes-unresponsive-everytime-i-select-sum-buckets-in-kibana-7-6-3/294573)
**Author:** [@emohan](https://discuss.elastic.co/u/emohan)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 11:45am UTC](https://discuss.elastic.co/t/kibana-page-goes-unresponsive-everytime-i-select-sum-buckets-in-kibana-7-6-3/294573 "2022-01-17T11:45:06Z")
I want to sum count based on common bucket and so i try sum bucket aggregation which results in page going unresponsive. I am on Kibana 7.6.3 version. This is similar to previous post: Is this bug still existing? --- ## [Mean aggregation over cadinality aggregation, over previous composite aggregation](https://discuss.elastic.co/t/mean-aggregation-over-cadinality-aggregation-over-previous-composite-aggregation/294374)
**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\ **Replies:** 3\ **Last updated:** [January 17, 2022, 10:52am UTC](https://discuss.elastic.co/t/mean-aggregation-over-cadinality-aggregation-over-previous-composite-aggregation/294374 "2022-01-17T10:52:21Z")
My use case require to obtain an average over previous cardinality aggregation, this aggregations works over the buckets generated by a composite aggregation "calendar histogram" that breaks the timeline in calendar days… --- ## [Ingest strategy](https://discuss.elastic.co/t/ingest-strategy/294561)
**Author:** [@mark8](https://discuss.elastic.co/u/mark8)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 9:56am UTC](https://discuss.elastic.co/t/ingest-strategy/294561 "2022-01-17T09:56:56Z")
Hi there, as a (broader) follow up on this topic, I am creating this new one about ingest strategy, as I am utterly running out of ideas. My use case has many client machines, each logging various metrics (pretty common… --- ## [How to index a certain number of words from each text?](https://discuss.elastic.co/t/how-to-index-a-certain-number-of-words-from-each-text/294506)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 6\ **Last updated:** [January 17, 2022, 9:54am UTC](https://discuss.elastic.co/t/how-to-index-a-certain-number-of-words-from-each-text/294506 "2022-01-17T09:54:13Z")
How can only the first two words of each text be indexed ?? --- ## [I deleted index like files into OS when I had a diskspace problem and now have to fix it](https://discuss.elastic.co/t/i-deleted-index-like-files-into-os-when-i-had-a-diskspace-problem-and-now-have-to-fix-it/294558)
**Author:** [@marlybyliganget](https://discuss.elastic.co/u/marlybyliganget)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 9:31am UTC](https://discuss.elastic.co/t/i-deleted-index-like-files-into-os-when-i-had-a-diskspace-problem-and-now-have-to-fix-it/294558 "2022-01-17T09:31:10Z")
Hi guys I have a problem with Elasticsearch cluster I deleted index like files into OS, when I had a diskspace problem I deleted index through this command find ./data/nodes/0/indices -type d -mtime +30 -exec rm -rf … --- ## [Create TermAggregation with the wildcard field in Java code](https://discuss.elastic.co/t/create-termaggregation-with-the-wildcard-field-in-java-code/294424)
**Author:** [@Tiffany](https://discuss.elastic.co/u/Tiffany)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 7:50am UTC](https://discuss.elastic.co/t/create-termaggregation-with-the-wildcard-field-in-java-code/294424 "2022-01-17T07:50:39Z")
Hi, I want to create a termAggregation query with wildcard in Java API. It works in Elasticsearch console, but not in Java code. Would you mind shedding some lights? Thank you! Below query works in console { "aggrega… --- ## [Authentication Options for Scroll API Call](https://discuss.elastic.co/t/authentication-options-for-scroll-api-call/294543)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 7:58am UTC](https://discuss.elastic.co/t/authentication-options-for-scroll-api-call/294543 "2022-01-17T07:58:22Z")
Hi Elastic Experts, I am hoping you can help me. I am building Power BI templates for my clients using the Scroll API method where they want to retrieve results in excess of 10,000 records. I have built the templates u… --- ## [NOT ABLE TO PARSE SPECIFIC CHUNK OF LOG USING GROK](https://discuss.elastic.co/t/not-able-to-parse-specific-chunk-of-log-using-grok/294541)
**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 7:49am UTC](https://discuss.elastic.co/t/not-able-to-parse-specific-chunk-of-log-using-grok/294541 "2022-01-17T07:49:21Z")
Hi, I have a sample log from a switch. I am trying to parse it in to fields but some how I dont know why it is not allowing me to parse capital letters like let me show you Now this is when I worte PROG then it takes… --- ## [How to create filed / how can i find distribute field](https://discuss.elastic.co/t/how-to-create-filed-how-can-i-find-distribute-field/294530)
**Author:** [@JWKim1](https://discuss.elastic.co/u/JWKim1)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 7:40am UTC](https://discuss.elastic.co/t/how-to-create-filed-how-can-i-find-distribute-field/294530 "2022-01-17T07:40:07Z")
my field with im & serial is not distributed it have to distributed with "&" but it is not working in "im" field how can i find distribute setting? --- ## [Elasticsearch Kibana "Discover" returns no results, but exact same query in "Dev Tools" returns results](https://discuss.elastic.co/t/elasticsearch-kibana-discover-returns-no-results-but-exact-same-query-in-dev-tools-returns-results/294479)
**Author:** [@wishfulwatermelon](https://discuss.elastic.co/u/wishfulwatermelon)\ **Replies:** 2\ **Last updated:** [January 17, 2022, 7:28am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-discover-returns-no-results-but-exact-same-query-in-dev-tools-returns-results/294479 "2022-01-17T07:28:18Z")
I was trying to look for data on my index pattern in "Discover". However, it returns no results. I then looked for data on the same index pattern in "Dev Tools" and copied/pasted over the same Request, which returned to… --- ## [How to keep an ES cluster happy during a K8s(!) node update](https://discuss.elastic.co/t/how-to-keep-an-es-cluster-happy-during-a-k8s-node-update/293736)
**Author:** [@jugosag](https://discuss.elastic.co/u/jugosag)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 5:17am UTC](https://discuss.elastic.co/t/how-to-keep-an-es-cluster-happy-during-a-k8s-node-update/293736 "2022-01-17T05:17:43Z")
Hi all, I am looking for general guidance on how to keep an Elasticsearch cluster on K8s happy while doing a K8s node update. Motivation We are running an HA microservice-based SaaS application on Kubernetes, we have i… --- ## [Need to map ip address from logs to map with corresponding hostname](https://discuss.elastic.co/t/need-to-map-ip-address-from-logs-to-map-with-corresponding-hostname/294499)
**Author:** [@ArchitG358](https://discuss.elastic.co/u/ArchitG358)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 1:52am UTC](https://discuss.elastic.co/t/need-to-map-ip-address-from-logs-to-map-with-corresponding-hostname/294499 "2022-01-17T01:52:33Z")
I have logs that includes IP address I want to map IP address to its hostname (eg, AWS ec2) or its organisation. Just like whatsmyipaddress does. Need suggestions or plugins that can help do this. I am open to get any … --- ## [Date filter in logstash](https://discuss.elastic.co/t/date-filter-in-logstash/294431)
**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\ **Replies:** 6\ **Last updated:** [January 16, 2022, 7:16pm UTC](https://discuss.elastic.co/t/date-filter-in-logstash/294431 "2022-01-16T19:16:06Z")
Hi, I am trying to use Date filter of the logstash to create a timestamp on my data stored in Elasticsearch. The timestamp in my data is in Linux format and I want to change it to some standard format like as "dd MMM yy… --- ## [Cluster load while updating mappings of live production indexes](https://discuss.elastic.co/t/cluster-load-while-updating-mappings-of-live-production-indexes/293718)
**Author:** [@ginopino](https://discuss.elastic.co/u/ginopino)\ **Replies:** 4\ **Last updated:** [January 16, 2022, 6:14pm UTC](https://discuss.elastic.co/t/cluster-load-while-updating-mappings-of-live-production-indexes/293718 "2022-01-16T18:14:38Z")
Hello! I need to add a couple of new keyword fields to a significant quantity of production indexes which are using a mapping with dynamic: strict I was hoping to be able to use a wildcard with the update mapping API, … --- ## [Getting log graph using python](https://discuss.elastic.co/t/getting-log-graph-using-python/294505)
**Author:** [@Raz\_Maabari](https://discuss.elastic.co/u/Raz_Maabari)\ **Replies:** 0\ **Last updated:** [January 16, 2022, 3:55pm UTC](https://discuss.elastic.co/t/getting-log-graph-using-python/294505 "2022-01-16T15:55:22Z")
Hi, I would like to embed a kibana graph in a web application (react). what would be the best way to do so? --- ## [I want to get the same results if the words have empty space or no space](https://discuss.elastic.co/t/i-want-to-get-the-same-results-if-the-words-have-empty-space-or-no-space/294492)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 3\ **Last updated:** [January 16, 2022, 12:46pm UTC](https://discuss.elastic.co/t/i-want-to-get-the-same-results-if-the-words-have-empty-space-or-no-space/294492 "2022-01-16T12:46:18Z")
Hi everyone I want to get the same results if the words have empty space or no space. For example, we have a product called "washing mach ine" and I want the washing machine to return if the user searches for the word … --- ## [Is there a query that makes the word searched closer to the beginning of the text get more points?](https://discuss.elastic.co/t/is-there-a-query-that-makes-the-word-searched-closer-to-the-beginning-of-the-text-get-more-points/294483)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 3\ **Last updated:** [January 16, 2022, 12:44pm UTC](https://discuss.elastic.co/t/is-there-a-query-that-makes-the-word-searched-closer-to-the-beginning-of-the-text-get-more-points/294483 "2022-01-16T12:44:44Z")
hello Is there a query that makes the word searched closer to the beginning of the text get more points ?? For example, if we have two texts as follows Samsung mobile phone cover TypeC charger with fast charging capa… --- ## [How to denormalize array with huge number of values Elasticsearch?](https://discuss.elastic.co/t/how-to-denormalize-array-with-huge-number-of-values-elasticsearch/293870)
**Author:** [@aldm](https://discuss.elastic.co/u/aldm)\ **Replies:** 2\ **Last updated:** [January 16, 2022, 9:03am UTC](https://discuss.elastic.co/t/how-to-denormalize-array-with-huge-number-of-values-elasticsearch/293870 "2022-01-16T09:03:26Z")
Hi, We're building an app which is using Elasticsearch. For each user there will be followers (array of longs - ids of user who follow this user). With time, number of followers might increase to hundreds of thousands, … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=729) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=731)