# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=776 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 777 --- ## [Sort on multiple fields not working](https://discuss.elastic.co/t/sort-on-multiple-fields-not-working/289478)
**Author:** [@Karthikeyan\_Amaresan](https://discuss.elastic.co/u/Karthikeyan_Amaresan)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 3:56pm UTC](https://discuss.elastic.co/t/sort-on-multiple-fields-not-working/289478 "2021-11-17T15:56:22Z")
Query { "size": 20, "query": { "match\_all": {} }, "\_source": \["INBOUND\_CALL\_mod\_date", "OUTBOUND\_CALL\_mod\_date"\], "sort": \[ { "INBOUND\_CALL\_mod\_date": { "order": "desc" } }, … --- ## [Elastic Search Not Starting](https://discuss.elastic.co/t/elastic-search-not-starting/289422)
**Author:** [@gang\_giz](https://discuss.elastic.co/u/gang_giz)\ **Replies:** 9\ **Last updated:** [November 17, 2021, 1:37pm UTC](https://discuss.elastic.co/t/elastic-search-not-starting/289422 "2021-11-17T13:37:37Z")
Hi, We have to install Elasticsearch 7.9 to my Cpanel Server and we have done the install and started to Start the Elasticsearch it is failed when I check the log I see this. Im pasting the Entire log in multiple threds … --- ## [How to parse long numbers?](https://discuss.elastic.co/t/how-to-parse-long-numbers/288783)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 1\ **Last updated:** [November 17, 2021, 1:29pm UTC](https://discuss.elastic.co/t/how-to-parse-long-numbers/288783 "2021-11-17T13:29:46Z")
I have set up NUMBER type for item duration in the pattern of Logstash configuration as %{NUMBER:Duration} It can parse most of the numbers in the log files, like 9994568.872 , 20903.23, etc.. But it cannot parse the… --- ## [Logstash not sending data into kibana](https://discuss.elastic.co/t/logstash-not-sending-data-into-kibana/289004)
**Author:** [@sai92](https://discuss.elastic.co/u/sai92)\ **Replies:** 1\ **Last updated:** [November 17, 2021, 1:21pm UTC](https://discuss.elastic.co/t/logstash-not-sending-data-into-kibana/289004 "2021-11-17T13:21:19Z")
Hello everyone I use logstash to read the json file and ingest data into index in Elasticsearch. But it works fine when run the command of /bin/logstash -f /etc/logstash/conf.d/log.test. But when I start it as service wi… --- ## [Import only delta (differences) from csv into mysql](https://discuss.elastic.co/t/import-only-delta-differences-from-csv-into-mysql/289283)
**Author:** [@Mihai\_Stuparu](https://discuss.elastic.co/u/Mihai_Stuparu)\ **Replies:** 1\ **Last updated:** [November 17, 2021, 1:19pm UTC](https://discuss.elastic.co/t/import-only-delta-differences-from-csv-into-mysql/289283 "2021-11-17T13:19:45Z")
Hello, I am using logstash to call an API (input), save it as .csv (filter) and upload it into a mysql table (output). All is good. But I need to do it each day (or each night rather): call that API, get the .csv and u… --- ## [Logstash http\_poller input / http filter design question](https://discuss.elastic.co/t/logstash-http-poller-input-http-filter-design-question/289012)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 1\ **Last updated:** [November 17, 2021, 1:16pm UTC](https://discuss.elastic.co/t/logstash-http-poller-input-http-filter-design-question/289012 "2021-11-17T13:16:52Z")
Good Afternoon, I am starting to pull in AppDynamics metric information into our Elastic stack for persistence purposes. I have 5 metrics from each of 13 servers that I need to capture and my design in my Stage environ… --- ## [Parse one line as two lines](https://discuss.elastic.co/t/parse-one-line-as-two-lines/289073)
**Author:** [@Sjap1](https://discuss.elastic.co/u/Sjap1)\ **Replies:** 1\ **Last updated:** [November 17, 2021, 1:10pm UTC](https://discuss.elastic.co/t/parse-one-line-as-two-lines/289073 "2021-11-17T13:10:04Z")
Hello, I'm trying to parse multiple items in one line. My grok pattens match but logstash are outputting the data as arrays; How can i make the output look the where are two lines? input data: 2021-11-01 14:09:34 CET … --- ## [New field in Weblogic access\_log , Logstash and Kibana](https://discuss.elastic.co/t/new-field-in-weblogic-access-log-logstash-and-kibana/288810)
**Author:** [@raultada](https://discuss.elastic.co/u/raultada)\ **Replies:** 1\ **Last updated:** [November 17, 2021, 1:02pm UTC](https://discuss.elastic.co/t/new-field-in-weblogic-access-log-logstash-and-kibana/288810 "2021-11-17T13:02:57Z")
Hello everyone, I´m new in ELK and there is a request to insert a new information came from weblogic access log ==\> "database name" This is the current weblogic log format (logging/tab http/advanced/Extended Logging Fo… --- ## [Trying to fetch documents from Mongodb using jdbc input plugin in logstash but getting this error messages](https://discuss.elastic.co/t/trying-to-fetch-documents-from-mongodb-using-jdbc-input-plugin-in-logstash-but-getting-this-error-messages/289133)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 11:36am UTC](https://discuss.elastic.co/t/trying-to-fetch-documents-from-mongodb-using-jdbc-input-plugin-in-logstash-but-getting-this-error-messages/289133 "2021-11-17T11:36:58Z")
Hi All.There are documents in my Mongodb which I am trying to fetch out using logstash input jdbc plugin.I am using mongodb version 4.2.15 and logstash version is 7.10.1.When I run the logstash configuration pipeline I g… --- ## [Why aren't "flattened" fields usable via SQL?](https://discuss.elastic.co/t/why-arent-flattened-fields-usable-via-sql/288520)
**Author:** [@Jamshid](https://discuss.elastic.co/u/Jamshid)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 10:31am UTC](https://discuss.elastic.co/t/why-arent-flattened-fields-usable-via-sql/288520 "2021-11-17T10:31:06Z")
Are flattened type fields really not usable with SQL queries? They're not mentioned in: I have an index with these fields: ... "mappings" : { "properties" : { "name" : { "type" : "keyword"… --- ## [How to run logstash on WSL (Ubuntu 20.04.3 LTS)](https://discuss.elastic.co/t/how-to-run-logstash-on-wsl-ubuntu-20-04-3-lts/289414)
**Author:** [@Stephy\_Jacob](https://discuss.elastic.co/u/Stephy_Jacob)\ **Replies:** 1\ **Last updated:** [November 17, 2021, 9:43am UTC](https://discuss.elastic.co/t/how-to-run-logstash-on-wsl-ubuntu-20-04-3-lts/289414 "2021-11-17T09:43:39Z")
Hi, Could you please help with running logstash as a service in WSL (Ubuntu 20.04.3 LTS) As of now I get below error message sudo systemctl start logstash.service System has not been booted with systemd as init system… --- ## ["ignore\_missing": true from geoip processor is not working](https://discuss.elastic.co/t/ignore-missing-true-from-geoip-processor-is-not-working/289420)
**Author:** [@f4d0](https://discuss.elastic.co/u/f4d0)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 9:24am UTC](https://discuss.elastic.co/t/ignore-missing-true-from-geoip-processor-is-not-working/289420 "2021-11-17T09:24:06Z")
Hi Everyone, I am using Elasticsearch 7.15, and python to ingest data into Elasticsearch. Before I start the ingestion, I define a pipeline and a mapping. Everything works very smoothly without the geoip processor. Wh… --- ## [Elasticsearch reached the limit of ongoing initial primary recoveries](https://discuss.elastic.co/t/elasticsearch-reached-the-limit-of-ongoing-initial-primary-recoveries/289390)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 8\ **Last updated:** [November 17, 2021, 8:58am UTC](https://discuss.elastic.co/t/elasticsearch-reached-the-limit-of-ongoing-initial-primary-recoveries/289390 "2021-11-17T08:58:40Z")
Hello, I've been monitoring my cluster performance and I found my cluster health turned into red when I check with GET \_cluster/allocation/explain?pretty I got this result "node\_allocation\_decisions" : \[ { "n… --- ## [Dashboard \[Filebeat Apache\] Access and error logs ECS](https://discuss.elastic.co/t/dashboard-filebeat-apache-access-and-error-logs-ecs/288993)
**Author:** [@Alphonse\_Kambo](https://discuss.elastic.co/u/Alphonse_Kambo)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 8:28am UTC](https://discuss.elastic.co/t/dashboard-filebeat-apache-access-and-error-logs-ecs/288993 "2021-11-17T08:28:06Z")
Hi Everyone, Can you please tell me the meaning of the unique count of source.address range in this dashboard? --- ## [Call recursively an API](https://discuss.elastic.co/t/call-recursively-an-api/289284)
**Author:** [@Mihai\_Stuparu](https://discuss.elastic.co/u/Mihai_Stuparu)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 7:47am UTC](https://discuss.elastic.co/t/call-recursively-an-api/289284 "2021-11-17T07:47:30Z")
Hello, Using below basic http\_poller request I will obtain a .json file that contains an attribute called "id". For each "id" I need to call other APIs, having the "id" value in the url: https://..../id. How can I ach… --- ## [Elastic Search does not get logs from fluentbit](https://discuss.elastic.co/t/elastic-search-does-not-get-logs-from-fluentbit/289276)
**Author:** [@merveyil](https://discuss.elastic.co/u/merveyil)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 7:11am UTC](https://discuss.elastic.co/t/elastic-search-does-not-get-logs-from-fluentbit/289276 "2021-11-17T07:11:58Z")
Hi, i am newbie on Elasticsearch. I installed Elasticsearch and tried to send logs from fluentbit to elastic. I have script that generates 60 mb logs per minute. I read these logs with fluentbit and try to send them to e… --- ## [Wordnet Korean Dictionary for synonym](https://discuss.elastic.co/t/wordnet-korean-dictionary-for-synonym/289397)
**Author:** [@user\_el](https://discuss.elastic.co/u/user_el)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 6:59am UTC](https://discuss.elastic.co/t/wordnet-korean-dictionary-for-synonym/289397 "2021-11-17T06:59:10Z")
Hi I want to use synonyms for the Korean language in wordnet format. I am not able to find any dictionary. If anyone knows where can I get one. Please help. --- ## [Install watcher plugin](https://discuss.elastic.co/t/install-watcher-plugin/289320)
**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 3:46am UTC](https://discuss.elastic.co/t/install-watcher-plugin/289320 "2021-11-17T03:46:38Z")
Hello, hello I tried to install the watcher plugin on my centos server, but the package was not found, is there another way to install it. And this report error No package license available. Error: Nothing to do No … --- ## [Doesn't a field support multiple types?](https://discuss.elastic.co/t/doesnt-a-field-support-multiple-types/289271)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 4\ **Last updated:** [November 17, 2021, 2:23am UTC](https://discuss.elastic.co/t/doesnt-a-field-support-multiple-types/289271 "2021-11-17T02:23:52Z")
org.elasticsearch.index.mapper.MapperParsingException: object mapping for \[http.request.body.original\] tried to parse field \[original\] as object, but found a concrete value I plan to convert the http.request.body.orig… --- ## [Add buttons at Kibana Dashboard](https://discuss.elastic.co/t/add-buttons-at-kibana-dashboard/289154)
**Author:** [@111505](https://discuss.elastic.co/u/111505)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 12:17am UTC](https://discuss.elastic.co/t/add-buttons-at-kibana-dashboard/289154 "2021-11-17T00:17:08Z")
Hello. I would like to add buttons to Kibana Dashboard. This button is to request an API to the server that I developed. Is this possible? --- ## [Node roles distribution](https://discuss.elastic.co/t/node-roles-distribution/289373)
**Author:** [@gutierrezfj](https://discuss.elastic.co/u/gutierrezfj)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 11:47pm UTC](https://discuss.elastic.co/t/node-roles-distribution/289373 "2021-11-16T23:47:27Z")
Hi community, I have 4 hosts to dedicate to Elasticsearch, what is the best distribution of master and data nodes as well as primary shards and replicas? thanks --- ## [Elasticsearch per request circuit breakers and real memory](https://discuss.elastic.co/t/elasticsearch-per-request-circuit-breakers-and-real-memory/289295)
**Author:** [@zvonimir](https://discuss.elastic.co/u/zvonimir)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 10:59pm UTC](https://discuss.elastic.co/t/elasticsearch-per-request-circuit-breakers-and-real-memory/289295 "2021-11-16T22:59:41Z")
Hi. After upgrading to version 7.13.1 with new circuit breakers that use real memory we are having issues with heavy aggregates on Elasticsearch cluster. Per request circuit breakers are not being tripped and nodes (58GB… --- ## [Using Elasticsearch for storing logs in microservice-based architecture](https://discuss.elastic.co/t/using-elasticsearch-for-storing-logs-in-microservice-based-architecture/289288)
**Author:** [@Oleksii88](https://discuss.elastic.co/u/Oleksii88)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 10:30pm UTC](https://discuss.elastic.co/t/using-elasticsearch-for-storing-logs-in-microservice-based-architecture/289288 "2021-11-16T22:30:48Z")
Hi, I am writing a new microservice-based system and considering Elasticsearch for logging data storage. What are the best practices of using ElastiSearch for logging? For now, I have 2 questions? but if anybody has id… --- ## [User authentication problem](https://discuss.elastic.co/t/user-authentication-problem/289202)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 6\ **Last updated:** [November 16, 2021, 9:53pm UTC](https://discuss.elastic.co/t/user-authentication-problem/289202 "2021-11-16T21:53:51Z")
Hi, we have a problem with Kibana and XPack. We send out a URL to a specific dashboard to one of our users. When he authenticate with his credentials, he gets a server error. After refreshing the page, he gets onto the … --- ## [Convert my sql to elasticsearch without logstash](https://discuss.elastic.co/t/convert-my-sql-to-elasticsearch-without-logstash/289291)
**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 7:45pm UTC](https://discuss.elastic.co/t/convert-my-sql-to-elasticsearch-without-logstash/289291 "2021-11-16T19:45:03Z")
is there a way other than using logstash to convert mysql to Elasticsearch. I just got a new task, to create a generic processor to convert mysql to Elasticsearch --- ## [Logging not happening on elastic Kubernetes Environment](https://discuss.elastic.co/t/logging-not-happening-on-elastic-kubernetes-environment/289107)
**Author:** [@Prabakar](https://discuss.elastic.co/u/Prabakar)\ **Replies:** 7\ **Last updated:** [November 16, 2021, 7:34pm UTC](https://discuss.elastic.co/t/logging-not-happening-on-elastic-kubernetes-environment/289107 "2021-11-16T19:34:48Z")
We are using Elastic on Kubernetes (ECK) Enterprise edition, we could not able to see the index creation, search request logs. In general logs will get generated inside /logs/logfile. But log files are not available for … --- ## [Logstash - XML parsing including nested objects](https://discuss.elastic.co/t/logstash-xml-parsing-including-nested-objects/289323)
**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 6:10pm UTC](https://discuss.elastic.co/t/logstash-xml-parsing-including-nested-objects/289323 "2021-11-16T18:10:46Z")
Problem - Unable to convert object fields to flat fields upon parsing the XML Input - Dynamic Soap xml Example - \ **Author:** [@kyats5000](https://discuss.elastic.co/u/kyats5000)\ **Replies:** 1\ **Last updated:** [November 16, 2021, 6:02pm UTC](https://discuss.elastic.co/t/using-mutate-rename-source-and-destination-json-plugin-question-for-filter/289337 "2021-11-16T18:02:21Z") HI there I am trying to find out what the syntax is for renaming fields from an incoming json message. We dropped the message at first to remove metadata but it is unclear to me in subsequent segments of the pipeline co… --- ## [Log parsing issue](https://discuss.elastic.co/t/log-parsing-issue/289306)
**Author:** [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\ **Replies:** 5\ **Last updated:** [November 16, 2021, 6:00pm UTC](https://discuss.elastic.co/t/log-parsing-issue/289306 "2021-11-16T18:00:33Z")
I am having a log in the following format:- {"@timestamp":"2021-08-04T09:57:25.141Z","@metadata":{"beat":"filebeat","type":"\_doc","version":"7.6.3"},"log":{"offset":10413931,"file":{"path":"api/api.log"}},"message":"\[ER… --- ## [Logstahs Filter](https://discuss.elastic.co/t/logstahs-filter/289078)
**Author:** [@John\_snow](https://discuss.elastic.co/u/John_snow)\ **Replies:** 9\ **Last updated:** [November 16, 2021, 5:57pm UTC](https://discuss.elastic.co/t/logstahs-filter/289078 "2021-11-16T17:57:46Z")
Can we apply 2 filter in 1 logstash conf file. I wanted to parse 1 log twice and send the message to multiple outputs. e-g 1 filter to remove some fields and send the message to output 2nd filter doing another check an… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=775) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=777)