# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=737 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 738 --- ## [Delete All and multiple bulk puts](https://discuss.elastic.co/t/delete-all-and-multiple-bulk-puts/293756)
**Author:** [@snoopy20](https://discuss.elastic.co/u/snoopy20)\ **Replies:** 2\ **Last updated:** [January 10, 2022, 8:59am UTC](https://discuss.elastic.co/t/delete-all-and-multiple-bulk-puts/293756 "2022-01-10T08:59:22Z")
Hi All, New user here and I've come across my first issue which the documentation doesn't seem to cater for. I have a need to index about 35,000 small records which I intend to do through /indexName/\_bulk. At first I t… --- ## [Delete menu items](https://discuss.elastic.co/t/delete-menu-items/293861)
**Author:** [@Osysh](https://discuss.elastic.co/u/Osysh)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 8:40am UTC](https://discuss.elastic.co/t/delete-menu-items/293861 "2022-01-10T08:40:14Z")
Hi, Is it possible to delete a menu item from the kibana menu (version 7.15) ? I try showOnly method but it accept just one item. Regards --- ## [Can a logstash filter error be forwarded to elastic?](https://discuss.elastic.co/t/can-a-logstash-filter-error-be-forwarded-to-elastic/293742)
**Author:** [@DavidMarcu](https://discuss.elastic.co/u/DavidMarcu)\ **Replies:** 4\ **Last updated:** [January 10, 2022, 8:15am UTC](https://discuss.elastic.co/t/can-a-logstash-filter-error-be-forwarded-to-elastic/293742 "2022-01-10T08:15:44Z")
I'm having these json parsing errors from time to time: 2022-01-07T12:15:19,872\]\[WARN \]\[logstash.filters.json \] Error parsing json {:source=\>"message", :raw=\>" { the invalid json }", :exception=\>#\ **Author:** [@Butovoboy](https://discuss.elastic.co/u/Butovoboy)\ **Replies:** 2\ **Last updated:** [January 10, 2022, 7:36am UTC](https://discuss.elastic.co/t/shard-is-not-working-due-to-source-field/293806 "2022-01-10T07:36:17Z") Hello, guys! I have a server with running ELK and other four servers with running filebeat on them. All these four filebeats send information directly to Elasticsearch on the first server. One shard is not working and… --- ## [The indices which match this index pattern don't contain any time fields](https://discuss.elastic.co/t/the-indices-which-match-this-index-pattern-dont-contain-any-time-fields/293403)
**Author:** [@damienhaynes](https://discuss.elastic.co/u/damienhaynes)\ **Replies:** 21\ **Last updated:** [January 10, 2022, 6:41am UTC](https://discuss.elastic.co/t/the-indices-which-match-this-index-pattern-dont-contain-any-time-fields/293403 "2022-01-10T06:41:07Z")
Hello, I need assistance in creating an index pattern so I can search logs in Kibana. I have the following logstash configuration: input { beats { port =\> 5044 host =\> "0.0.0.0" } } filter { json { … --- ## [Merging the index with lower max\_number\_segement causing increasing index size](https://discuss.elastic.co/t/merging-the-index-with-lower-max-number-segement-causing-increasing-index-size/293844)
**Author:** [@arvin495](https://discuss.elastic.co/u/arvin495)\ **Replies:** 8\ **Last updated:** [January 10, 2022, 6:01am UTC](https://discuss.elastic.co/t/merging-the-index-with-lower-max-number-segement-causing-increasing-index-size/293844 "2022-01-10T06:01:04Z")
Hello Team, We have performed force merging on one index size of 74GB with 2 shards (primary + replica) and 36 segments (primary + replica) to remove deleted docs. curl -s -X POST "https://elasticsearch.com/index/\_forc… --- ## [Convert YYYY-MM-DD-HH.MM.SS to date](https://discuss.elastic.co/t/convert-yyyy-mm-dd-hh-mm-ss-to-date/293820)
**Author:** [@Hooman24](https://discuss.elastic.co/u/Hooman24)\ **Replies:** 4\ **Last updated:** [January 10, 2022, 5:35am UTC](https://discuss.elastic.co/t/convert-yyyy-mm-dd-hh-mm-ss-to-date/293820 "2022-01-10T05:35:20Z")
Hi I have a dateTime field with the following format: yyyy-mm-dd-HH.mm.ss I want to use this field as a date time field in ELK. I don't know how to change 11th position of the string('-') to 'T' to convert this field … --- ## [Search multiple data streams and indices - Permissions](https://discuss.elastic.co/t/search-multiple-data-streams-and-indices-permissions/293678)
**Author:** [@carlos.cilleruelo](https://discuss.elastic.co/u/carlos.cilleruelo)\ **Replies:** 1\ **Last updated:** [January 9, 2022, 11:11pm UTC](https://discuss.elastic.co/t/search-multiple-data-streams-and-indices-permissions/293678 "2022-01-09T23:11:43Z")
Hello, I am trying to perform some searches over multiple data streams and indices using a -\* pattern. Everything seems to be working when I search over a specific index, but if a tried the wildcard my client prompts an… --- ## [What is a classic and recommanded ElasticSearch architecture?](https://discuss.elastic.co/t/what-is-a-classic-and-recommanded-elasticsearch-architecture/293727)
**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\ **Replies:** 1\ **Last updated:** [January 9, 2022, 9:57pm UTC](https://discuss.elastic.co/t/what-is-a-classic-and-recommanded-elasticsearch-architecture/293727 "2022-01-09T21:57:25Z")
Our former cluster ES was made of 40 data nodes. 4 of them were coordinators as well 3 of them were electable as a master (for one node, it gathers data, coordinator and master-electable role) We aim to create a new c… --- ## [Spaces using roles](https://discuss.elastic.co/t/spaces-using-roles/293786)
**Author:** [@JACA](https://discuss.elastic.co/u/JACA)\ **Replies:** 1\ **Last updated:** [January 9, 2022, 9:13pm UTC](https://discuss.elastic.co/t/spaces-using-roles/293786 "2022-01-09T21:13:22Z")
I'm wanting to monitor by space groups. Perform the steps to create the spaces and when adding the agent, the line of space was placed: space.id: "name\_server" But when observing with the monitoring I enter the space a… --- ## [Aggregation numbers do not add up](https://discuss.elastic.co/t/aggregation-numbers-do-not-add-up/293825)
**Author:** [@Lark](https://discuss.elastic.co/u/Lark)\ **Replies:** 0\ **Last updated:** [January 9, 2022, 12:42pm UTC](https://discuss.elastic.co/t/aggregation-numbers-do-not-add-up/293825 "2022-01-09T12:42:01Z")
Hello friends! I'm trying to learn aggregations on Elastic for my company's backend. Our documents include a label field (which could be many different keywords), and I would like to aggregate and calculate certain thi… --- ## [Kibana dashboard creation issue](https://discuss.elastic.co/t/kibana-dashboard-creation-issue/293132)
**Author:** [@vipeen](https://discuss.elastic.co/u/vipeen)\ **Replies:** 19\ **Last updated:** [January 9, 2022, 12:38am UTC](https://discuss.elastic.co/t/kibana-dashboard-creation-issue/293132 "2022-01-09T00:38:50Z")
Hi, I am trying to move logs from a Gateway server to Syslog and then to Elasticsearch and finally build dashboards on Kibana. I am newbie and try to do my best to get this completed. I actually got this task from an ex-… --- ## [Output to different index based on field](https://discuss.elastic.co/t/output-to-different-index-based-on-field/293804)
**Author:** [@krsecurity](https://discuss.elastic.co/u/krsecurity)\ **Replies:** 11\ **Last updated:** [January 8, 2022, 11:01pm UTC](https://discuss.elastic.co/t/output-to-different-index-based-on-field/293804 "2022-01-08T23:01:30Z")
Hi there, I have a couple of use-cases where I want to ingest filebeat module data, send it through Logstash, and then put it into different indexes based on what filebeat module that it used. So for example, the two I… --- ## [Visualisation based of an aggregated search](https://discuss.elastic.co/t/visualisation-based-of-an-aggregated-search/293811)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [January 8, 2022, 8:32pm UTC](https://discuss.elastic.co/t/visualisation-based-of-an-aggregated-search/293811 "2022-01-08T20:32:08Z")
Is there a way to base a visualisation on the results of an aggregation? For example: I have data on logins to our wireless network. It is trivial to get a pie chart that shows the proportion of success & failures ho… --- ## [Search template condition on paramters](https://discuss.elastic.co/t/search-template-condition-on-paramters/293809)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 0\ **Last updated:** [January 8, 2022, 7:25pm UTC](https://discuss.elastic.co/t/search-template-condition-on-paramters/293809 "2022-01-08T19:25:37Z")
Hello Everybody, Happy new year 2022. I have a small use case that i want to implement using Elasticsearch search template The idea is to limit the parameter from so that it can't go more that a limit value. Do you ha… --- ## [Ignore log record if log does not contain specific string "jenkins\_build\_number"](https://discuss.elastic.co/t/ignore-log-record-if-log-does-not-contain-specific-string-jenkins-build-number/293800)
**Author:** [@chandu.2035](https://discuss.elastic.co/u/chandu.2035)\ **Replies:** 2\ **Last updated:** [January 8, 2022, 4:10pm UTC](https://discuss.elastic.co/t/ignore-log-record-if-log-does-not-contain-specific-string-jenkins-build-number/293800 "2022-01-08T16:10:51Z")
Hi there, I would like to ignore inserting entry in Elasticsearch index if the parsed log pattern does not contain the specific string jenkins\_build\_number Here is my filebeat and logstash configs. filebeat.yml #=====… --- ## [In memory Indices on ES 7.x](https://discuss.elastic.co/t/in-memory-indices-on-es-7-x/293778)
**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\ **Replies:** 2\ **Last updated:** [January 8, 2022, 12:06am UTC](https://discuss.elastic.co/t/in-memory-indices-on-es-7-x/293778 "2022-01-08T00:06:22Z")
We are planning to implement an indices on ES 7.x. Is there a way we can keep the indices on memory instead of disk? The total size of the indices will be 150 GB and shared across multiple data nodes. --- ## [Deleting Index kibana](https://discuss.elastic.co/t/deleting-index-kibana/293773)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [January 7, 2022, 8:09pm UTC](https://discuss.elastic.co/t/deleting-index-kibana/293773 "2022-01-07T20:09:46Z")
Hello there, Following log entry is appearing in kibana logs. I understand this is because of previous kibana versions. can I delete these indexes? Will deleting this affect my cluster? log \[15:17:55.850\] \[error\]\[eve… --- ## [Set length limit and bottom scroll bar in Exceptions table](https://discuss.elastic.co/t/set-length-limit-and-bottom-scroll-bar-in-exceptions-table/292713)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 1\ **Last updated:** [January 7, 2022, 7:36pm UTC](https://discuss.elastic.co/t/set-length-limit-and-bottom-scroll-bar-in-exceptions-table/292713 "2022-01-07T19:36:41Z")
Version: Elasticsearch 7.16.2 & Kibana 7.16.2 Hi, everyone In the case of creating a rule with a long name may hinder exceptions workflow. For instance, if I create a rule with the name: Lorem Ipsum is simply dummy … --- ## [Threshold Rule type - not able to send more than three field values in email action](https://discuss.elastic.co/t/threshold-rule-type-not-able-to-send-more-than-three-field-values-in-email-action/292870)
**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\ **Replies:** 1\ **Last updated:** [January 7, 2022, 7:25pm UTC](https://discuss.elastic.co/t/threshold-rule-type-not-able-to-send-more-than-three-field-values-in-email-action/292870 "2022-01-07T19:25:45Z")
Continuing the discussion from Threshold Rule type - not able to send more than three field values in email action: --- ## [Exact match](https://discuss.elastic.co/t/exact-match/293761)
**Author:** [@shafouz](https://discuss.elastic.co/u/shafouz)\ **Replies:** 3\ **Last updated:** [January 7, 2022, 7:19pm UTC](https://discuss.elastic.co/t/exact-match/293761 "2022-01-07T19:19:19Z")
Hi, I need to search in a big text field for a exact match. I tried with different analyzers but in a lot of them i run on the lucerne size limit and i haven't found any that exact matches. Are there any way to do that… --- ## [Request body is required when updating an index template using the Dev console](https://discuss.elastic.co/t/request-body-is-required-when-updating-an-index-template-using-the-dev-console/293775)
**Author:** [@dev9](https://discuss.elastic.co/u/dev9)\ **Replies:** 5\ **Last updated:** [January 7, 2022, 6:49pm UTC](https://discuss.elastic.co/t/request-body-is-required-when-updating-an-index-template-using-the-dev-console/293775 "2022-01-07T18:49:41Z")
Hi, How do I update an index template using the Dev Console? when I tried the below, I got a parse exception request body is required. I am using the latest version of elastic PUT \_index\_template/test/ { "… --- ## [Wazuh SIEM + Winlogbeat](https://discuss.elastic.co/t/wazuh-siem-winlogbeat/292490)
**Author:** [@IvanYboa](https://discuss.elastic.co/u/IvanYboa)\ **Replies:** 2\ **Last updated:** [January 7, 2022, 6:21pm UTC](https://discuss.elastic.co/t/wazuh-siem-winlogbeat/292490 "2022-01-07T18:21:08Z")
Hi! I'm new at Elasticsearch and I'm implementing the SIEM Wazuh. The team of wazuh has their own agent to collect the logs, but in the company where I'm working want that some machines run the Wazuh agents and other ma… --- ## [Discover stream in dashboard](https://discuss.elastic.co/t/discover-stream-in-dashboard/293772)
**Author:** [@Gforce](https://discuss.elastic.co/u/Gforce)\ **Replies:** 1\ **Last updated:** [January 7, 2022, 5:55pm UTC](https://discuss.elastic.co/t/discover-stream-in-dashboard/293772 "2022-01-07T17:55:31Z")
How can I get a "Discover-like" stream into a Dashboard? The Log Stream widget does not behave the same. The stream visible in the Discover section adds new items to the top and it does not completely blank-out during r… --- ## [Create Alert using connector Index](https://discuss.elastic.co/t/create-alert-using-connector-index/293324)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 1\ **Last updated:** [January 7, 2022, 5:44pm UTC](https://discuss.elastic.co/t/create-alert-using-connector-index/293324 "2022-01-07T17:44:08Z")
hello everyone, i wanna create alert ssh bruteforce but using "index" connector. because i dunno what index i will use and i dunno how to test it. --- ## [Updating Elasticstack from 7.16.1 to 7.16.2](https://discuss.elastic.co/t/updating-elasticstack-from-7-16-1-to-7-16-2/293586)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 1\ **Last updated:** [January 6, 2022, 2:41pm UTC](https://discuss.elastic.co/t/updating-elasticstack-from-7-16-1-to-7-16-2/293586 "2022-01-06T14:41:23Z")
Hello all, I am updating my elasticstack to 7.16.2. Elasticsearch cluster started fine but I see following in Kibana logs. These events are constantly appearing in Kibana logs. GET /\_nodes?filter\_path=nodes.\*.version%2… --- ## [Hardware server requirements for a fast ElasticSearch experience on one website with 900k entries](https://discuss.elastic.co/t/hardware-server-requirements-for-a-fast-elasticsearch-experience-on-one-website-with-900k-entries/293768)
**Author:** [@nbadmin](https://discuss.elastic.co/u/nbadmin)\ **Replies:** 1\ **Last updated:** [January 7, 2022, 5:12pm UTC](https://discuss.elastic.co/t/hardware-server-requirements-for-a-fast-elasticsearch-experience-on-one-website-with-900k-entries/293768 "2022-01-07T17:12:00Z")
Hello guys, I want to set up a dedicated vServer on which I want to run a single website. My question is what hardware server requirements do I need to implement a really fast Elasticsearch search and manage it with K… --- ## [Elastic Agent No upgrade option Available](https://discuss.elastic.co/t/elastic-agent-no-upgrade-option-available/293738)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 1\ **Last updated:** [January 7, 2022, 5:09pm UTC](https://discuss.elastic.co/t/elastic-agent-no-upgrade-option-available/293738 "2022-01-07T17:09:26Z")
Hi all, I have a problem with some agents. I'm in version 7.16.1, I was able to upgrade most of my agents, but for some I have no option to upgrade.. The target systems (were the agents are installed) are redhat linux … --- ## [Elasticsearch issue: nested: NumberFormatException\[For input string:](https://discuss.elastic.co/t/elasticsearch-issue-nested-numberformatexception-for-input-string/293730)
**Author:** [@Kiran\_Chauhan](https://discuss.elastic.co/u/Kiran_Chauhan)\ **Replies:** 1\ **Last updated:** [January 7, 2022, 4:53pm UTC](https://discuss.elastic.co/t/elasticsearch-issue-nested-numberformatexception-for-input-string/293730 "2022-01-07T16:53:48Z")
Hello @all, I am new here and hope this is the right place to discuss the issue. Sorry if I am violating any community rule. I have Elasticsearch with open-edx. Currently, I am facing an issue with Elasticsearch. wh… --- ## [How to ingest access\_log with x-forwarded-for from oracle http server in elasticsearch](https://discuss.elastic.co/t/how-to-ingest-access-log-with-x-forwarded-for-from-oracle-http-server-in-elasticsearch/293770)
**Author:** [@Agarwal](https://discuss.elastic.co/u/Agarwal)\ **Replies:** 0\ **Last updated:** [January 7, 2022, 4:51pm UTC](https://discuss.elastic.co/t/how-to-ingest-access-log-with-x-forwarded-for-from-oracle-http-server-in-elasticsearch/293770 "2022-01-07T16:51:31Z")
I am new to Elastic and wanting to ingest Oracle http server access\_log in elastic. i used apache ingestion, it considers entry as error.message. i used filebeat it does the same. i dont understand how to format it for i… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=736) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=738)