# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=790 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 791 --- ## [Elasticsearch CPU utilization problem with Logstash](https://discuss.elastic.co/t/elasticsearch-cpu-utilization-problem-with-logstash/287903)
**Author:** [@Hur](https://discuss.elastic.co/u/Hur)\ **Replies:** 2\ **Last updated:** [October 29, 2021, 2:34am UTC](https://discuss.elastic.co/t/elasticsearch-cpu-utilization-problem-with-logstash/287903 "2021-10-29T02:34:19Z")
I have trouble with using Elasticsearch with Logstash. When inserting data to ES through Logstash (not using Filebeat. Elasticsearch & Logstash only), CPU utilization of ES is over 90%. Also, I expected if I use multip… --- ## [Date型を文字列型に変換する方法について](https://discuss.elastic.co/t/date/287866)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [October 29, 2021, 1:26am UTC](https://discuss.elastic.co/t/date/287866 "2021-10-29T01:26:46Z")
とあるdate型のフィールドについて、date型のフィールドは保持しつつ、同じ値を文字列型のフィールドにも保持したいです。 ■logstashのconfファイル input { ～省略～ } filter { json { source =\> "message" } date { match =\> \["timestamp", "UNIX\_MS"\] target =\> "timestamp\_cloudwatch"… --- ## [What could cause this error following enterprise-search restart?](https://discuss.elastic.co/t/what-could-cause-this-error-following-enterprise-search-restart/287966)
**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\ **Replies:** 1\ **Last updated:** [October 29, 2021, 1:03am UTC](https://discuss.elastic.co/t/what-could-cause-this-error-following-enterprise-search-restart/287966 "2021-10-29T01:03:33Z")
I followed these steps for the installation. Copying and pasting these lines into Elasticsearch, kibana and enterprise-search yaml files Changed the permissions of var/log/enterprise-search folder and contents (see … --- ## [Geo Coordinate Mapping](https://discuss.elastic.co/t/geo-coordinate-mapping/287956)
**Author:** [@workenehg](https://discuss.elastic.co/u/workenehg)\ **Replies:** 1\ **Last updated:** [October 29, 2021, 1:02am UTC](https://discuss.elastic.co/t/geo-coordinate-mapping/287956 "2021-10-29T01:02:41Z")
Currently in the process of indexing data from Oracle and one of the properties is a "Coordinate" . we would like to be able to do a geo search on the field but since it is currently added as "long" as shown below , we … --- ## [Elasticsearch slowness and frequently nodes are restarting](https://discuss.elastic.co/t/elasticsearch-slowness-and-frequently-nodes-are-restarting/287909)
**Author:** [@muralikri](https://discuss.elastic.co/u/muralikri)\ **Replies:** 1\ **Last updated:** [October 29, 2021, 12:34am UTC](https://discuss.elastic.co/t/elasticsearch-slowness-and-frequently-nodes-are-restarting/287909 "2021-10-29T00:34:57Z")
Hi Team, We have recently upgraded Elasticsearch from 6.6.1 to 7.13.2 with platinum licence. After upgraded all looks fine and when 3-4 users try to search logs parallelly we getting 504 error and when i check cluster s… --- ## [Adding new documents to production cluster](https://discuss.elastic.co/t/adding-new-documents-to-production-cluster/287910)
**Author:** [@lacerated](https://discuss.elastic.co/u/lacerated)\ **Replies:** 1\ **Last updated:** [October 29, 2021, 12:34am UTC](https://discuss.elastic.co/t/adding-new-documents-to-production-cluster/287910 "2021-10-29T00:34:32Z")
I have constantly used Elasticsearch cluster with search queries. Once a week i get a batch of new documents i need to add to index. If i add them to index it will greatly slower search speeds while indexing and merging … --- ## [Startup script?](https://discuss.elastic.co/t/startup-script/287923)
**Author:** [@tamis-laan](https://discuss.elastic.co/u/tamis-laan)\ **Replies:** 1\ **Last updated:** [October 29, 2021, 12:32am UTC](https://discuss.elastic.co/t/startup-script/287923 "2021-10-29T00:32:18Z")
Is there some way to create startup scripts? I'm using monstache to connect mongodb and Elasticsearch and I need to add an index template before monstache starts syncing data. --- ## [Sudden High CPU with GC](https://discuss.elastic.co/t/sudden-high-cpu-with-gc/287908)
**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\ **Replies:** 3\ **Last updated:** [October 29, 2021, 12:31am UTC](https://discuss.elastic.co/t/sudden-high-cpu-with-gc/287908 "2021-10-29T00:31:42Z")
Hi Team Please refer to the screenshot and we observe high CPU spikes with the GC. Please help us resolve this. ELS v 7.5.2 RAM: Total 32 GB, 16GB allocated to ES It's a 7 node cluster --- ## [Killing pending tasks](https://discuss.elastic.co/t/killing-pending-tasks/287795)
**Author:** [@lucien.guillermin](https://discuss.elastic.co/u/lucien.guillermin)\ **Replies:** 3\ **Last updated:** [October 29, 2021, 12:29am UTC](https://discuss.elastic.co/t/killing-pending-tasks/287795 "2021-10-29T00:29:33Z")
Hi everyone, We work on an Elasticsearch cluster which seems locked. We found out that we have critical tasks we launched a few days ago : curl -X GET 10.129.28.194:9200/\_cluster/pending\_tasks?pretty { "tasks" : \[ … --- ## [Additing Conditions to API Results](https://discuss.elastic.co/t/additing-conditions-to-api-results/287594)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 3\ **Last updated:** [October 29, 2021, 12:28am UTC](https://discuss.elastic.co/t/additing-conditions-to-api-results/287594 "2021-10-29T00:28:15Z")
I was wondering if there is any way to filter API results in Dev Tools to show conditions. For example, instead of this: GET \_cat/shards?v=true&h=index,shard,prirep,state,docs,store,node,segments.count,unassigned.detail… --- ## [ADVICE For loadbalance](https://discuss.elastic.co/t/advice-for-loadbalance/287957)
**Author:** [@Tombal](https://discuss.elastic.co/u/Tombal)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 10:24pm UTC](https://discuss.elastic.co/t/advice-for-loadbalance/287957 "2021-10-28T22:24:35Z")
Hello there , I will get syslog messages from firewall devices and send them to kafka as a producer. Because there may be several consumers which will consume events so they may be on different offsets. Now my questio… --- ## [Update the value of a field in index based on its value in another index](https://discuss.elastic.co/t/update-the-value-of-a-field-in-index-based-on-its-value-in-another-index/287952)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 2\ **Last updated:** [October 28, 2021, 9:38pm UTC](https://discuss.elastic.co/t/update-the-value-of-a-field-in-index-based-on-its-value-in-another-index/287952 "2021-10-28T21:38:57Z")
There's an index\_A that contains say about 10K docs. It has many fields like field\_1, field\_2, ...field\_n and one of the fields is product\_name. Then there's another index\_B that contains about 10 docs only and is a mas… --- ## [Create a preview with a media between events](https://discuss.elastic.co/t/create-a-preview-with-a-media-between-events/287013)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 2\ **Last updated:** [October 28, 2021, 7:04pm UTC](https://discuss.elastic.co/t/create-a-preview-with-a-media-between-events/287013 "2021-10-28T19:04:08Z")
Good afternoon, I would like to know how to create an average between the events, below is an example: event 1 time =\> 1:00:00 id=\> 1 event 2 time =\> 1:10:00 id=\> 2 event 3 =\> 1:30:00 id=\> 3 event 3 =\> 1:33:00 … --- ## [How to get Log Patterns similar to what Logz.io does?](https://discuss.elastic.co/t/how-to-get-log-patterns-similar-to-what-logz-io-does/287449)
**Author:** [@Urbano\_Freitas](https://discuss.elastic.co/u/Urbano_Freitas)\ **Replies:** 3\ **Last updated:** [October 28, 2021, 6:56pm UTC](https://discuss.elastic.co/t/how-to-get-log-patterns-similar-to-what-logz-io-does/287449 "2021-10-28T18:56:08Z")
Hi everyone, One thing I really would love to have in Elastic is a easy way to find patterns in logs like Logz.io does: https://logz.io/platform/features/log-patterns/ I have been playing with Elastic Machine Learning … --- ## [Numeral Formatting](https://discuss.elastic.co/t/numeral-formatting/287358)
**Author:** [@marcos.freitas](https://discuss.elastic.co/u/marcos.freitas)\ **Replies:** 3\ **Last updated:** [October 28, 2021, 4:55pm UTC](https://discuss.elastic.co/t/numeral-formatting/287358 "2021-10-28T16:55:17Z")
how to add prefix and change separators, example: BRL 10,192.25 / USD 10,000 / BRL 1,000, etc. --- ## [Metric Text Graph to show Graph contents](https://discuss.elastic.co/t/metric-text-graph-to-show-graph-contents/287698)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 6\ **Last updated:** [October 28, 2021, 4:50pm UTC](https://discuss.elastic.co/t/metric-text-graph-to-show-graph-contents/287698 "2021-10-28T16:50:31Z")
Hi I have a metric text graph to show unique user count. I wanted to know who are those unique users. Is it possible? Regards Ram --- ## [Javascript and index templates](https://discuss.elastic.co/t/javascript-and-index-templates/287940)
**Author:** [@tamis-laan](https://discuss.elastic.co/u/tamis-laan)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 4:28pm UTC](https://discuss.elastic.co/t/javascript-and-index-templates/287940 "2021-10-28T16:28:27Z")
I'm trying to create an index template as followed: client.indices.putTemplate({name:"loctmplt", body: { index\_patterns: \['\*'\], template: { mappings: { properties: { location: { propertie… --- ## [Using where filter with multi values field on data table](https://discuss.elastic.co/t/using-where-filter-with-multi-values-field-on-data-table/285498)
**Author:** [@ishu](https://discuss.elastic.co/u/ishu)\ **Replies:** 3\ **Last updated:** [October 28, 2021, 2:32pm UTC](https://discuss.elastic.co/t/using-where-filter-with-multi-values-field-on-data-table/285498 "2021-10-28T14:32:29Z")
Hello, I used to work on Splunk and working with multi values field, and it's easy break multivalue fields using "stats x by xx" command and perform a where filter after. We considered this log with multi values field … --- ## [Best solution for this case](https://discuss.elastic.co/t/best-solution-for-this-case/287900)
**Author:** [@auto\_reply\_007](https://discuss.elastic.co/u/auto_reply_007)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 2:31pm UTC](https://discuss.elastic.co/t/best-solution-for-this-case/287900 "2021-10-28T14:31:12Z")
I have a cluster consisting of 4 data and 1 master node each node has: cpu: 4 ram: 16 and we have 1 largest index of 215 gigabytes (1 primary and 1 replica shard) on peak days, this index is very heavily loaded (we … --- ## [Kibana Data Table Exclude](https://discuss.elastic.co/t/kibana-data-table-exclude/287721)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 3\ **Last updated:** [October 28, 2021, 1:58pm UTC](https://discuss.elastic.co/t/kibana-data-table-exclude/287721 "2021-10-28T13:58:04Z")
Hi, I am trying to exclude all the items which contain /abr\_live/amlst\* from Kibana data table. It does not work. How can I use wildcard in the Buckets -\> Advanced -\> Exclude? Thanks, --- ## [Cannot log into Kibana using standard UN and PW](https://discuss.elastic.co/t/cannot-log-into-kibana-using-standard-un-and-pw/287921)
**Author:** [@Mark3](https://discuss.elastic.co/u/Mark3)\ **Replies:** 3\ **Last updated:** [October 28, 2021, 1:56pm UTC](https://discuss.elastic.co/t/cannot-log-into-kibana-using-standard-un-and-pw/287921 "2021-10-28T13:56:39Z")
As stated in Header, have tried both my "Elastic Training" E-mail Add and PW and the standard "training" UN and PW, still not getting access. Any help appreciated, Mark --- ## [Not all logs are being sent on ES, requests are timing out](https://discuss.elastic.co/t/not-all-logs-are-being-sent-on-es-requests-are-timing-out/287924)
**Author:** [@anis-eze](https://discuss.elastic.co/u/anis-eze)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 1:51pm UTC](https://discuss.elastic.co/t/not-all-logs-are-being-sent-on-es-requests-are-timing-out/287924 "2021-10-28T13:51:30Z")
Hi All, We have been having issues with there being gaps in Metricbeats being sent to Kibana. When checking the Metricbeat logs, the following errors are displayed: \[2021-10-28T11:42:53,422\]\[INFO \]\[o.e.x.s.a.Authoriza… --- ## [TIMESTAMP behavior is not good](https://discuss.elastic.co/t/timestamp-behavior-is-not-good/287920)
**Author:** [@dasish](https://discuss.elastic.co/u/dasish)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 1:23pm UTC](https://discuss.elastic.co/t/timestamp-behavior-is-not-good/287920 "2021-10-28T13:23:47Z")
logstash is shipping the data for the below query as expected cast(systimestamp at time zone 'UTC' as timestamp ) however cast( CREATION\_TIMESTAMP at time zone 'UTC' as timestamp) is providing additional 2 hour (if yo… --- ## [\[esaggs\] \> error in data table visulisation](https://discuss.elastic.co/t/esaggs-error-in-data-table-visulisation/287917)
**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\ **Replies:** 3\ **Last updated:** [October 28, 2021, 1:23pm UTC](https://discuss.elastic.co/t/esaggs-error-in-data-table-visulisation/287917 "2021-10-28T13:23:36Z")
Hi, We have an index with a large amount of data coming through and have created a data table to visualize the data. The data table contains 1 metric and 5 buckets and the size for each bucket has been set to 50,000 to … --- ## [Performance upgrade in server logs, but degrade in full text search](https://discuss.elastic.co/t/performance-upgrade-in-server-logs-but-degrade-in-full-text-search/287257)
**Author:** [@vsop\_479](https://discuss.elastic.co/u/vsop_479)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 12:45pm UTC](https://discuss.elastic.co/t/performance-upgrade-in-server-logs-but-degrade-in-full-text-search/287257 "2021-10-28T12:45:45Z")
According to Elasticsearch benchmarks, ES 7.15.0 became slower than ES 6.8.14 in term, pharse, mothly\_agg queris in pmc track, but faster in most of queries (except hourly\_agg) in http logs track. So, which changes of E… --- ## [How do I get rid of the message "Unexpected character ('\]' (code 93)): expected a value"](https://discuss.elastic.co/t/how-do-i-get-rid-of-the-message-unexpected-character-code-93-expected-a-value/287911)
**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 12:33pm UTC](https://discuss.elastic.co/t/how-do-i-get-rid-of-the-message-unexpected-character-code-93-expected-a-value/287911 "2021-10-28T12:33:06Z")
I can see the error reappearing all the time. Is there a way I can fix this without loosing the indexes? elasticsearch | \[2021-10-28T12:18:59,524\]\[WARN \]\[r.suppressed \] \[es01\] path: /winlog\*/\_search, pa… --- ## [API call to elasticsearch](https://discuss.elastic.co/t/api-call-to-elasticsearch/286980)
**Author:** [@AlexM566](https://discuss.elastic.co/u/AlexM566)\ **Replies:** 4\ **Last updated:** [October 28, 2021, 12:07pm UTC](https://discuss.elastic.co/t/api-call-to-elasticsearch/286980 "2021-10-28T12:07:40Z")
Hello everyone, I am thinking to something and I am not sure if it is possible and i was thinking you can guide or say if it is possible or not So I want to query directly the Elasticsearch, get the output in csv or w… --- ## [How to index files?](https://discuss.elastic.co/t/how-to-index-files/287804)
**Author:** [@alorenc](https://discuss.elastic.co/u/alorenc)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 10:28am UTC](https://discuss.elastic.co/t/how-to-index-files/287804 "2021-10-28T10:28:49Z")
I have added some pages to AppSearch. The documentation shows that Crawler does not analyze the documents (pdf / docx) inside the page. I am interested in whether the links to these documents are stored somewhere (I co… --- ## [Search with multiple filters involved all the time](https://discuss.elastic.co/t/search-with-multiple-filters-involved-all-the-time/287702)
**Author:** [@itokai](https://discuss.elastic.co/u/itokai)\ **Replies:** 3\ **Last updated:** [October 28, 2021, 10:27am UTC](https://discuss.elastic.co/t/search-with-multiple-filters-involved-all-the-time/287702 "2021-10-28T10:27:11Z")
Hello, Specific use-case is to optimize querying that includes many (approximately 50) constant search filters. These filters might change 1-2x per year. How to involve those filters optimally, is it just by appending… --- ## [How to generate a logstash event within a custom java filter plugin after timeout?](https://discuss.elastic.co/t/how-to-generate-a-logstash-event-within-a-custom-java-filter-plugin-after-timeout/287901)
**Author:** [@Olli](https://discuss.elastic.co/u/Olli)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 10:26am UTC](https://discuss.elastic.co/t/how-to-generate-a-logstash-event-within-a-custom-java-filter-plugin-after-timeout/287901 "2021-10-28T10:26:32Z")
I want to correlate messages sending to logstash within a filter and send them to the next filter of logstash inside the pipeline. However I have successfully setup a custom logstash filter plugin according to elastic d… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=789) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=791)