# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=778

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 779

---

## [Is it ok to delete data (by query) on an index that was force merged to a single segment?](https://discuss.elastic.co/t/is-it-ok-to-delete-data-by-query-on-an-index-that-was-force-merged-to-a-single-segment/289221)

<div class="topic-metadata">

**Author:** [@kirk1](https://discuss.elastic.co/u/kirk1)\
**Replies:** 1\
**Last updated:** [November 15, 2021, 10:23pm UTC](https://discuss.elastic.co/t/is-it-ok-to-delete-data-by-query-on-an-index-that-was-force-merged-to-a-single-segment/289221 "2021-11-15T22:23:32Z")

</div>

When our indices are no longer receiving new documents we run a force-merge down to a single segment. We now find ourselves needing to delete a very small percentage of the docs in several of these these single-segment i…

---

## [Set geopoint field from string field correctly for map visualization](https://discuss.elastic.co/t/set-geopoint-field-from-string-field-correctly-for-map-visualization/288513)

<div class="topic-metadata">

**Author:** [@ccfc1986](https://discuss.elastic.co/u/ccfc1986)\
**Replies:** 10\
**Last updated:** [November 15, 2021, 10:01pm UTC](https://discuss.elastic.co/t/set-geopoint-field-from-string-field-correctly-for-map-visualization/288513 "2021-11-15T22:01:34Z")

</div>

I have the following field in my documents: "COORDINATES" : "-11.661306;-47.506833" I have created a update\_by\_query that takes this field, extracts the lat/lon and sets to my actual geopoint defined field 'GeoLocation…

---

## [Time series datastore altering](https://discuss.elastic.co/t/time-series-datastore-altering/288478)

<div class="topic-metadata">

**Author:** [@ailengcon](https://discuss.elastic.co/u/ailengcon)\
**Replies:** 5\
**Last updated:** [November 14, 2021, 9:15pm UTC](https://discuss.elastic.co/t/time-series-datastore-altering/288478 "2021-11-14T21:15:39Z")

</div>

I want to use Elasticsearch as a time series datastore. Where each event comes in with a timestamp and serial and all other data. I was told by @warkolm I can graph changes over time, either at an individual serial lev…

---

## [Custom analyzer with token replacement](https://discuss.elastic.co/t/custom-analyzer-with-token-replacement/289236)

<div class="topic-metadata">

**Author:** [@pistocop](https://discuss.elastic.co/u/pistocop)\
**Replies:** 0\
**Last updated:** [November 15, 2021, 9:33pm UTC](https://discuss.elastic.co/t/custom-analyzer-with-token-replacement/289236 "2021-11-15T21:33:23Z")

</div>

2021-11-14T23:00:00Z (UTC) Hi to everyone, I was playing with custom analyzers and I had trouble with the following example. Basically, I want to index a document with a field named "user\_opinion" in two ways: with…

---

## [Working with JSON array of objects via Ruby code block](https://discuss.elastic.co/t/working-with-json-array-of-objects-via-ruby-code-block/289009)

<div class="topic-metadata">

**Author:** [@Colin\_K](https://discuss.elastic.co/u/Colin_K)\
**Replies:** 10\
**Last updated:** [November 15, 2021, 9:14pm UTC](https://discuss.elastic.co/t/working-with-json-array-of-objects-via-ruby-code-block/289009 "2021-11-15T21:14:29Z")

</div>

I have a JSON array of nested objects. I wrote a filter json { source =\> \['body'\] target =\> "parsed" } ruby { code =\> "mapped = event.get('parsed').map{ |h| \[h\['k1'\], h\['k2'\],h\['k3'\],h\['k4'\]\] }; event.set(…

---

## [LogStash Error](https://discuss.elastic.co/t/logstash-error/288444)

<div class="topic-metadata">

**Author:** [@John\_snow](https://discuss.elastic.co/u/John_snow)\
**Replies:** 18\
**Last updated:** [November 15, 2021, 7:30pm UTC](https://discuss.elastic.co/t/logstash-error/288444 "2021-11-15T19:30:37Z")

</div>

Hi Team, I'm getting exception=\>#\<RuntimeError: Invalid FieldReference: whenever i have any value like below in my event. 'some.value\[1\]' My Conf filw looks like input { sqs { access\_key\_id =\> …

---

## [Elastic Security Deployment for an MSSP](https://discuss.elastic.co/t/elastic-security-deployment-for-an-mssp/289085)

<div class="topic-metadata">

**Author:** [@afarley](https://discuss.elastic.co/u/afarley)\
**Replies:** 6\
**Last updated:** [November 15, 2021, 6:29pm UTC](https://discuss.elastic.co/t/elastic-security-deployment-for-an-mssp/289085 "2021-11-15T18:29:40Z")

</div>

Hello all, I am a security engineer for an MSSP and am currently having issues understanding how to best deploy Elastic Security for our multi-tenant environment. I've heard talk of isolating indexes by client and using…

---

## [Cannot access environment variables](https://discuss.elastic.co/t/cannot-access-environment-variables/288928)

<div class="topic-metadata">

**Author:** [@tofubeats](https://discuss.elastic.co/u/tofubeats)\
**Replies:** 7\
**Last updated:** [November 15, 2021, 6:15pm UTC](https://discuss.elastic.co/t/cannot-access-environment-variables/288928 "2021-11-15T18:15:16Z")

</div>

Hi, My config is really simple, I'm just trying to get a simple envornment variable to be accessed and used by a Logstash pipeline. It looks like this: input{ file { path =\> "${test}" } } filter {} output {…

---

## [Logstash Date Parse failure](https://discuss.elastic.co/t/logstash-date-parse-failure/289185)

<div class="topic-metadata">

**Author:** [@Stephy\_Jacob](https://discuss.elastic.co/u/Stephy_Jacob)\
**Replies:** 4\
**Last updated:** [November 15, 2021, 5:18pm UTC](https://discuss.elastic.co/t/logstash-date-parse-failure/289185 "2021-11-15T17:18:41Z")

</div>

Hello, I am banging my head for quite sometime to understand why am I getting dateparsefailure after trying multiple match combinations. Logstash Version = 7.9.2 sudo echo '2021-11-15T11:17:56.831Z' | /usr/share/logst…

---

## [Kibana Canvas SQL LEFT JOIN WHERE](https://discuss.elastic.co/t/kibana-canvas-sql-left-join-where/288474)

<div class="topic-metadata">

**Author:** [@timka23](https://discuss.elastic.co/u/timka23)\
**Replies:** 1\
**Last updated:** [November 15, 2021, 4:04pm UTC](https://discuss.elastic.co/t/kibana-canvas-sql-left-join-where/288474 "2021-11-15T16:04:17Z")

</div>

I want to insert the data in the Kibana Canvas table, but I do not work query. How to get data using such a request? SELECT \* FROM A LEFT JOIN B ON A.key = B.key My SQL: SELECT a.id as idn, COUNT(\*) as count, b.title…

---

## [Elasticsearch is recreating indexes after they were deleted](https://discuss.elastic.co/t/elasticsearch-is-recreating-indexes-after-they-were-deleted/288039)

<div class="topic-metadata">

**Author:** [@kamillacrozara](https://discuss.elastic.co/u/kamillacrozara)\
**Replies:** 5\
**Last updated:** [November 15, 2021, 2:27pm UTC](https://discuss.elastic.co/t/elasticsearch-is-recreating-indexes-after-they-were-deleted/288039 "2021-11-15T14:27:34Z")

</div>

I am trying to sync relational data with Elasticsearch using Logstash. To do that I have crated a pipeline to Logstash like this: input { jdbc { tags =\> \["vehicles"\] jdbc\_driver\_library =\> "/usr/share/logstash…

---

## [Master not discovered yet, this node has not previously joined a bootstrapped](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped/289075)

<div class="topic-metadata">

**Author:** [@Maks\_7v](https://discuss.elastic.co/u/Maks_7v)\
**Replies:** 15\
**Last updated:** [November 15, 2021, 2:29pm UTC](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped/289075 "2021-11-15T14:29:59Z")

</div>

Hi there. I'm trying to deploy 3 masters, 2 data, and 2 ingest nodes to GCP k8s. There is a problem that masters struggle to discover each other. Here are the logs I get: "master not discovered yet, this node has not…

---

## [JDBC input/output with additional data transforming](https://discuss.elastic.co/t/jdbc-input-output-with-additional-data-transforming/289194)

<div class="topic-metadata">

**Author:** [@Stateros](https://discuss.elastic.co/u/Stateros)\
**Replies:** 2\
**Last updated:** [November 15, 2021, 2:16pm UTC](https://discuss.elastic.co/t/jdbc-input-output-with-additional-data-transforming/289194 "2021-11-15T14:16:55Z")

</div>

Hello folks. I am pretty new in logstash. I have a task reload lot of data 5B records from mysql to another mysql with some aggregation. I need to load all fields param1, date group them and take count rows in main table…

---

## [Strange Issue : Logs not getting indexed and error shows nothing](https://discuss.elastic.co/t/strange-issue-logs-not-getting-indexed-and-error-shows-nothing/289166)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 2\
**Last updated:** [November 15, 2021, 2:11pm UTC](https://discuss.elastic.co/t/strange-issue-logs-not-getting-indexed-and-error-shows-nothing/289166 "2021-11-15T14:11:22Z")

</div>

Facing a strange issue, I am using filebeat module to fetch AWS and Azure logs. Since few days I saw some logs are getting indexed properly and some are not. I saw error logs of Elasticsearch and logstash both but nothin…

---

## [How to view elasticsearch debug logs?](https://discuss.elastic.co/t/how-to-view-elasticsearch-debug-logs/288922)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 1\
**Last updated:** [November 15, 2021, 1:40pm UTC](https://discuss.elastic.co/t/how-to-view-elasticsearch-debug-logs/288922 "2021-11-15T13:40:51Z")

</div>

I need to see some logs about every http request that's coming in to Elasticsearch. I am using the ECK operator 1.8.0 I configured the log level to be trace for Elasticsearch but the logs from the -es-default- still do…

---

## [Using redis read replica in logstash input configuration](https://discuss.elastic.co/t/using-redis-read-replica-in-logstash-input-configuration/289182)

<div class="topic-metadata">

**Author:** [@vdere1](https://discuss.elastic.co/u/vdere1)\
**Replies:** 0\
**Last updated:** [November 15, 2021, 10:28am UTC](https://discuss.elastic.co/t/using-redis-read-replica-in-logstash-input-configuration/289182 "2021-11-15T10:28:38Z")

</div>

Hello, I am having a throttling issue on redis which could be due to the usage of just the primary endpoint to collect the logs from redis using logstash input configuration. Is it possible to use the redis read replic…

---

## [Unable to find index from logstash config in kibana while creating a new index pattern](https://discuss.elastic.co/t/unable-to-find-index-from-logstash-config-in-kibana-while-creating-a-new-index-pattern/289159)

<div class="topic-metadata">

**Author:** [@Aryan\_Saxena](https://discuss.elastic.co/u/Aryan_Saxena)\
**Replies:** 1\
**Last updated:** [November 15, 2021, 10:12am UTC](https://discuss.elastic.co/t/unable-to-find-index-from-logstash-config-in-kibana-while-creating-a-new-index-pattern/289159 "2021-11-15T10:12:11Z")

</div>

---

## [Kibana: Can it automatically adjust the dashboard time window to fit real-time data so I don't have to?](https://discuss.elastic.co/t/kibana-can-it-automatically-adjust-the-dashboard-time-window-to-fit-real-time-data-so-i-dont-have-to/288944)

<div class="topic-metadata">

**Author:** [@GPartenza](https://discuss.elastic.co/u/GPartenza)\
**Replies:** 3\
**Last updated:** [November 15, 2021, 9:28am UTC](https://discuss.elastic.co/t/kibana-can-it-automatically-adjust-the-dashboard-time-window-to-fit-real-time-data-so-i-dont-have-to/288944 "2021-11-15T09:28:49Z")

</div>

Hi all, I am using the Elastic Stack to visualize data in real time for video games. In my experience, Kibana works great for visualizing real time data, however, I have come across a strange use-case where I am having …

---

## [Create automatic indexes per client per day automatically](https://discuss.elastic.co/t/create-automatic-indexes-per-client-per-day-automatically/289148)

<div class="topic-metadata">

**Author:** [@stasya](https://discuss.elastic.co/u/stasya)\
**Replies:** 4\
**Last updated:** [November 15, 2021, 5:14am UTC](https://discuss.elastic.co/t/create-automatic-indexes-per-client-per-day-automatically/289148 "2021-11-15T05:14:38Z")

</div>

Hi All, I am writing the following documents structure into my Elasticsearch: { "date":"2021-11-03", "clientId":"123", ... \<some other fields\> } What I would like to happen, is that whenever a document is written to E…

---

## [Kibana6.4 browser oom](https://discuss.elastic.co/t/kibana6-4-browser-oom/289140)

<div class="topic-metadata">

**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\
**Replies:** 2\
**Last updated:** [November 15, 2021, 1:39am UTC](https://discuss.elastic.co/t/kibana6-4-browser-oom/289140 "2021-11-15T01:39:32Z")

</div>

when I used the kibana6.4.0 to search my index,the chrome appear out of memory；the url is http://myaddress:5601/app/kibana#/discover?\_g=()&\_a=(columns:!(msg),filters:!(),index:program\_2021-11-11\_18,interval:auto,query:(…

---

## [Elactic Injection .Data injection to particular node by index name](https://discuss.elastic.co/t/elactic-injection-data-injection-to-particular-node-by-index-name/289051)

<div class="topic-metadata">

**Author:** [@akshay\_dindure1994](https://discuss.elastic.co/u/akshay_dindure1994)\
**Replies:** 1\
**Last updated:** [November 14, 2021, 9:16pm UTC](https://discuss.elastic.co/t/elactic-injection-data-injection-to-particular-node-by-index-name/289051 "2021-11-14T21:16:38Z")

</div>

Hello Team, I have 3 node setup. 1 is master and 2 are data node. i am storing data in 2 data node. But i have one requirement to store data name wise to node. For e.g elastic-kibana-index-2021.01.\* -- \> node 1 a…

---

## [Displaying the most recent data in graph](https://discuss.elastic.co/t/displaying-the-most-recent-data-in-graph/289067)

<div class="topic-metadata">

**Author:** [@Ben\_Newton](https://discuss.elastic.co/u/Ben_Newton)\
**Replies:** 2\
**Last updated:** [November 14, 2021, 5:19pm UTC](https://discuss.elastic.co/t/displaying-the-most-recent-data-in-graph/289067 "2021-11-14T17:19:32Z")

</div>

Our product publishes posts to social media (Facebook, Twitter etc) and I'm trying to produce some graphs to analyse our data. What I'd like to show some graphs on how many posts publishes successfully vs how many fail t…

---

## [Some logs aren't being received by ElasticSearch / showing in Kibana](https://discuss.elastic.co/t/some-logs-arent-being-received-by-elasticsearch-showing-in-kibana/288139)

<div class="topic-metadata">

**Author:** [@nwright](https://discuss.elastic.co/u/nwright)\
**Replies:** 6\
**Last updated:** [November 14, 2021, 9:08pm UTC](https://discuss.elastic.co/t/some-logs-arent-being-received-by-elasticsearch-showing-in-kibana/288139 "2021-11-14T21:08:13Z")

</div>

I'm using Elasticsearch primarily to record log messages from a .NET API hosted on an AWS lambda. Whenever there are two or more API requests sent to this API, only the logs from one call are sent to Elasticsearch where…

---

## [What is the method to create Index Pattern in Python](https://discuss.elastic.co/t/what-is-the-method-to-create-index-pattern-in-python/289121)

<div class="topic-metadata">

**Author:** [@ElnurHello](https://discuss.elastic.co/u/ElnurHello)\
**Replies:** 4\
**Last updated:** [November 14, 2021, 4:14pm UTC](https://discuss.elastic.co/t/what-is-the-method-to-create-index-pattern-in-python/289121 "2021-11-14T16:14:20Z")

</div>

Hello, All In Python, I use let say "es.indices.put\_index\_template()" method to create Index Template, "es.indices.create()" to create index but what method should be used to create Index Pattern ?

---

## [Refresh interval guarantee](https://discuss.elastic.co/t/refresh-interval-guarantee/289125)

<div class="topic-metadata">

**Author:** [@krezno](https://discuss.elastic.co/u/krezno)\
**Replies:** 2\
**Last updated:** [November 14, 2021, 12:40pm UTC](https://discuss.elastic.co/t/refresh-interval-guarantee/289125 "2021-11-14T12:40:19Z")

</div>

The documentation on refreshes says: By default, Elasticsearch periodically refreshes indices every second, but only on indices that have received one search request or more in the last 30 seconds. What happens if th…

---

## [Shard waiting for node even though the node is back](https://discuss.elastic.co/t/shard-waiting-for-node-even-though-the-node-is-back/289108)

<div class="topic-metadata">

**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\
**Replies:** 3\
**Last updated:** [November 14, 2021, 9:35am UTC](https://discuss.elastic.co/t/shard-waiting-for-node-even-though-the-node-is-back/289108 "2021-11-14T09:35:44Z")

</div>

We have a patching run that is hitting our servers. I don't want relocation to happen during the patching, so I set the delay to a window longer than the patching takes. This generally works as the node goes down, then a…

---

## [Filter messages that contains some specific text](https://discuss.elastic.co/t/filter-messages-that-contains-some-specific-text/288853)

<div class="topic-metadata">

**Author:** [@dardar4](https://discuss.elastic.co/u/dardar4)\
**Replies:** 4\
**Last updated:** [November 14, 2021, 7:51am UTC](https://discuss.elastic.co/t/filter-messages-that-contains-some-specific-text/288853 "2021-11-14T07:51:47Z")

</div>

Hi all we got a lot of logs that look like that: "Health check took 00:00:00.0057867 and resulted with status: Healthy" "Health check took 00:00:00.0035042 and resulted with status: Healthy" Is there a way to tell ki…

---

## [ES Cluster status with no data nodes](https://discuss.elastic.co/t/es-cluster-status-with-no-data-nodes/289089)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 13\
**Last updated:** [November 13, 2021, 7:31am UTC](https://discuss.elastic.co/t/es-cluster-status-with-no-data-nodes/289089 "2021-11-13T07:31:23Z")

</div>

Hey there, if I start a cluster with 3 nodes from scratch without any DATA nodes, is there a way to mark immediately it with YELLOW status?

---

## [Is there a way to determine the timestamp of index consistency](https://discuss.elastic.co/t/is-there-a-way-to-determine-the-timestamp-of-index-consistency/289025)

<div class="topic-metadata">

**Author:** [@Richard\_Ney](https://discuss.elastic.co/u/Richard_Ney)\
**Replies:** 5\
**Last updated:** [November 12, 2021, 10:21pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-determine-the-timestamp-of-index-consistency/289025 "2021-11-12T22:21:37Z")

</div>

We're designing a system where we are indexing a large number of document and we want the ability to determine a time watermark where we can claim all documents in an index inserted/update before a certain timestamp are …

---

## [How to use different indices for a single dashboard](https://discuss.elastic.co/t/how-to-use-different-indices-for-a-single-dashboard/289081)

<div class="topic-metadata">

**Author:** [@Sergio\_Ferreyra](https://discuss.elastic.co/u/Sergio_Ferreyra)\
**Replies:** 1\
**Last updated:** [November 12, 2021, 8:42pm UTC](https://discuss.elastic.co/t/how-to-use-different-indices-for-a-single-dashboard/289081 "2021-11-12T20:42:15Z")

</div>

Hey team, I need a particular doubt or issue about how to create different visualizations from different indices. I mean, we have a dashboard to monitor our application, Into that dashboard, we have different visualizati…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=777)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=779)
