# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=791 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 792 --- ## [JSON filter Invalid FieldReference for \[ \]](https://discuss.elastic.co/t/json-filter-invalid-fieldreference-for/287897)
**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 9:55am UTC](https://discuss.elastic.co/t/json-filter-invalid-fieldreference-for/287897 "2021-10-28T09:55:16Z")
Hello, I'm using JSON filter to parse JSON files, the field title contains characters \[ and \] I got this error: exception=\>#\ **Author:** [@keepcalm](https://discuss.elastic.co/u/keepcalm)\ **Replies:** 4\ **Last updated:** [October 28, 2021, 9:27am UTC](https://discuss.elastic.co/t/multiple-standalone-nodes/287837 "2021-10-28T09:27:48Z") hi, on version 6.6.1 we already have a single server deployed and i want to bring a new server online as a completely separate instance. How can i do this without the new server trying to form a cluster with the original… --- ## [Is update by query async operation or sync operation?](https://discuss.elastic.co/t/is-update-by-query-async-operation-or-sync-operation/287890)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 8:36am UTC](https://discuss.elastic.co/t/is-update-by-query-async-operation-or-sync-operation/287890 "2021-10-28T08:36:34Z")
And if so , how to know when update is done ? --- ## [Follow\_redirects not implemented in http output plugin for Logstash](https://discuss.elastic.co/t/follow-redirects-not-implemented-in-http-output-plugin-for-logstash/48824)
**Author:** [@Sergej-Popov](https://discuss.elastic.co/u/Sergej-Popov)\ **Replies:** 5\ **Last updated:** [October 28, 2021, 7:04am UTC](https://discuss.elastic.co/t/follow-redirects-not-implemented-in-http-output-plugin-for-logstash/48824 "2021-10-28T07:04:17Z")
I am having difficult time making logstash http output plugin to forward events to http endpoint which returns 307. (no control over that). Redirect needs to be followed to get to the right URL. Docs specify follow\_red… --- ## [Http Output 307 not being redirected](https://discuss.elastic.co/t/http-output-307-not-being-redirected/98493)
**Author:** [@insanityisnice](https://discuss.elastic.co/u/insanityisnice)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 7:03am UTC](https://discuss.elastic.co/t/http-output-307-not-being-redirected/98493 "2021-10-28T07:03:16Z")
I’m using an http output plugin to push events to EventStore. I am unable to get a successful POST and get an failure do to a 307 http status code. I’ve found several postings indicating that the http output plugin s… --- ## [Windowsログのパースについて](https://discuss.elastic.co/t/windows/287887)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 6:58am UTC](https://discuss.elastic.co/t/windows/287887 "2021-10-28T06:58:06Z")
以下のログ(windowsログの抜粋)を、logstashのKVフィルターを使用し、コロン区切りでフィールド名と値に分けてElasticsearchに取り込みたいです。 Subject: Security ID: S-1-5-18 Account Name: XXXXX Account Domain: XXXXX Logon ID: 0x3E7 Target Account: Security ID: S-1-0… --- ## [Does regex work on timestamp?](https://discuss.elastic.co/t/does-regex-work-on-timestamp/287794)
**Author:** [@MasonNorris](https://discuss.elastic.co/u/MasonNorris)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 6:36am UTC](https://discuss.elastic.co/t/does-regex-work-on-timestamp/287794 "2021-10-28T06:36:11Z")
I have created a regex to search for certain time periods in the data(ie search for all data out side of working hours). This regex should only return values from 00:00:00-07:59:59 or 16:00:00-23:59:59. It doesn't return… --- ## [Unique query id for slow log](https://discuss.elastic.co/t/unique-query-id-for-slow-log/287883)
**Author:** [@shawndu](https://discuss.elastic.co/u/shawndu)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 6:36am UTC](https://discuss.elastic.co/t/unique-query-id-for-slow-log/287883 "2021-10-28T06:36:01Z")
As I know, query log is per shard. If a index has 5 shards and slow query log is enabled. when issue a query, There will be 5 query logs. I am collecting these logs for analysis. I want to aggregate these 5 logs into a … --- ## [Curl\_rc 7 error when using nfs trident](https://discuss.elastic.co/t/curl-rc-7-error-when-using-nfs-trident/287882)
**Author:** [@zahar](https://discuss.elastic.co/u/zahar)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 6:34am UTC](https://discuss.elastic.co/t/curl-rc-7-error-when-using-nfs-trident/287882 "2021-10-28T06:34:41Z")
hello, i installed Elasticsearch 7.15.0 on openshift 4.6, our openshift is running on vmware vms. we have 2 storage classes: the vmware datastore that provides storage for pods with iscsi. the trident that connects to… --- ## [Accessing images into elasticsearch](https://discuss.elastic.co/t/accessing-images-into-elasticsearch/287844)
**Author:** [@Salman\_Ali](https://discuss.elastic.co/u/Salman_Ali)\ **Replies:** 6\ **Last updated:** [October 28, 2021, 6:21am UTC](https://discuss.elastic.co/t/accessing-images-into-elasticsearch/287844 "2021-10-28T06:21:01Z")
Hey I have screenshots of different sites stored on my local machine. I want to store it in Elasticsearch. So I can view each screenshot against the relevant domain in kibana. But I don't have any clue how to do this. … --- ## [How to distinguish ”true“ from true（they are all Booleans）](https://discuss.elastic.co/t/how-to-distinguish-true-from-true-they-are-all-booleans/287676)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 5\ **Last updated:** [October 28, 2021, 5:16am UTC](https://discuss.elastic.co/t/how-to-distinguish-true-from-true-they-are-all-booleans/287676 "2021-10-28T05:16:33Z")
v: 7.10.2 There are some docs in index such as {"tag":"true"} {"tag":true}，the tag is boolean type ...... i want to find out docs with tag==”true“，i tried script query use instanceof but it didn't work --- ## [Need to improve my ruby code to convert the data in right format](https://discuss.elastic.co/t/need-to-improve-my-ruby-code-to-convert-the-data-in-right-format/287801)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 2\ **Last updated:** [October 28, 2021, 4:08am UTC](https://discuss.elastic.co/t/need-to-improve-my-ruby-code-to-convert-the-data-in-right-format/287801 "2021-10-28T04:08:19Z")
Hi, I am using XPATH in XML filter to extract some values. I am getting three arrays. Something on these lines: ArrayOfId = \["SamplingRate","Humidity","DateOfCalibration","ProductFamily"\] ArrayOfType = \["Number","Numb… --- ## [Elasticsearch reduce latency with allow\_partial\_search\_results](https://discuss.elastic.co/t/elasticsearch-reduce-latency-with-allow-partial-search-results/287865)
**Author:** [@niketpatel2525](https://discuss.elastic.co/u/niketpatel2525)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 2:33am UTC](https://discuss.elastic.co/t/elasticsearch-reduce-latency-with-allow-partial-search-results/287865 "2021-10-28T02:33:37Z")
I have an index with 60 shards. I am trying to get total counts which match my Elasticsearch query. I am using the "allow\_partial\_search\_results" query param to get total results. Without this query param, some of the s… --- ## [Looking for ElasticSearch Cluster Server Specifications Documentation](https://discuss.elastic.co/t/looking-for-elasticsearch-cluster-server-specifications-documentation/287857)
**Author:** [@TonyLuc](https://discuss.elastic.co/u/TonyLuc)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 9:34pm UTC](https://discuss.elastic.co/t/looking-for-elasticsearch-cluster-server-specifications-documentation/287857 "2021-10-27T21:34:04Z")
Looking for Elasticsearch Cluster Server Specifications Documentation Could someone point me to any documentations or whitepapers on the topics of the Elasticsearch Cluster Servers Specifications? I could not find what … --- ## [Lab 6.3: Beats Dashboard Question 10.c irelevant answer](https://discuss.elastic.co/t/lab-6-3-beats-dashboard-question-10-c-irelevant-answer/287812)
**Author:** [@Pierre\_Rabreau](https://discuss.elastic.co/u/Pierre_Rabreau)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 3:14pm UTC](https://discuss.elastic.co/t/lab-6-3-beats-dashboard-question-10-c-irelevant-answer/287812 "2021-10-27T15:14:31Z")
Question 10.c : How many processes are running on the mysql server? Answer : Look for the Disk used gauge on the mysql host metrics page. Bad copy/past in a doc certainly :wink: better watch the : Number of process… --- ## [What are the ways to make a field of an index , not indexed but stored?](https://discuss.elastic.co/t/what-are-the-ways-to-make-a-field-of-an-index-not-indexed-but-stored/287808)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 9:26pm UTC](https://discuss.elastic.co/t/what-are-the-ways-to-make-a-field-of-an-index-not-indexed-but-stored/287808 "2021-10-27T21:26:02Z")
what are the ways to make a field of an index , not indexed but stored?. \*Is it by not defining the filed and type explicitly and then defining dynamic : runtime ? \*Are there any other methods? Is it possible to to … --- ## [Some application logs are not getting indexed](https://discuss.elastic.co/t/some-application-logs-are-not-getting-indexed/287740)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 5\ **Last updated:** [October 27, 2021, 9:20pm UTC](https://discuss.elastic.co/t/some-application-logs-are-not-getting-indexed/287740 "2021-10-27T21:20:44Z")
Hi All, Some of the application logs are not getting indexed. below are the error log about then in logstash logs. below logs has error like, ....:response=\>{"index"=\>{"\_index"=\>"filebeat-7.14.0-2021.10", "\_type"=\>"\_d… --- ## [Kibana - Shorten URL API With Workspace URL's](https://discuss.elastic.co/t/kibana-shorten-url-api-with-workspace-urls/287687)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 2\ **Last updated:** [October 27, 2021, 8:42pm UTC](https://discuss.elastic.co/t/kibana-shorten-url-api-with-workspace-urls/287687 "2021-10-27T20:42:09Z")
Currently for my project I create a lot of dashboards with really long links because they apply filters such as time range etc. The Kibana shorten URL is great for this. I'm not moving my dashboards into different work… --- ## [Logstash is delayed by 20mins reading from an S3 bucket](https://discuss.elastic.co/t/logstash-is-delayed-by-20mins-reading-from-an-s3-bucket/287833)
**Author:** [@Michael\_Day1](https://discuss.elastic.co/u/Michael_Day1)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 4:54pm UTC](https://discuss.elastic.co/t/logstash-is-delayed-by-20mins-reading-from-an-s3-bucket/287833 "2021-10-27T16:54:01Z")
I've set up a couple of logstashen running in ECS on AWS. They pull the ALB logs from the S3 buckets they dump then in to and one pokes them in to ES and the other pokes them in to Loki. Both end up being around 20-30mi… --- ## [FsCrawler is throwing Algorithm negotiation fail](https://discuss.elastic.co/t/fscrawler-is-throwing-algorithm-negotiation-fail/287748)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 4\ **Last updated:** [October 27, 2021, 6:18pm UTC](https://discuss.elastic.co/t/fscrawler-is-throwing-algorithm-negotiation-fail/287748 "2021-10-27T18:18:54Z")
Hi, I have Elasticsearch and fs crawler running on same server. The crawler used to index remote files until today it started showing errors while creating the index. I was not able to index the files when i ran with --… --- ## [Date range values of urltemplate throws rison error](https://discuss.elastic.co/t/date-range-values-of-urltemplate-throws-rison-error/286573)
**Author:** [@Prathibha\_Y](https://discuss.elastic.co/u/Prathibha_Y)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 5:47pm UTC](https://discuss.elastic.co/t/date-range-values-of-urltemplate-throws-rison-error/286573 "2021-10-27T17:47:16Z")
Hi trying to use urltemplate variables for date range but getting rison decode error, am I doing it right ? This is the error rison decoder error: missing ':' version Kibana 7.10.0 - oss This is the url app/dashboa… --- ## [Highlights not generated for certain Fuzzy & Wildcard Phrase match queries using Span](https://discuss.elastic.co/t/highlights-not-generated-for-certain-fuzzy-wildcard-phrase-match-queries-using-span/287815)
**Author:** [@maurice](https://discuss.elastic.co/u/maurice)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 5:46pm UTC](https://discuss.elastic.co/t/highlights-not-generated-for-certain-fuzzy-wildcard-phrase-match-queries-using-span/287815 "2021-10-27T17:46:39Z")
Hey everybody, I'm running into an issue with highlights not being generated for certain phrase match queries using wildcards or fuzzy matching with spans. Included below are steps for test replication from Kibana. Ela… --- ## [Completion suggester returning non-deterministic results?](https://discuss.elastic.co/t/completion-suggester-returning-non-deterministic-results/287834)
**Author:** [@tallison](https://discuss.elastic.co/u/tallison)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 5:02pm UTC](https://discuss.elastic.co/t/completion-suggester-returning-non-deterministic-results/287834 "2021-10-27T17:02:20Z")
When I run a completion suggester I'm getting different results each time I send the same query over the same static data. I realize that this may be an optimization for search...because users don't always need all the … --- ## [Kibana : Unable to authenticate user \[\] for REST request after deleting logs](https://discuss.elastic.co/t/kibana-unable-to-authenticate-user-for-rest-request-after-deleting-logs/287781)
**Author:** [@Leviath](https://discuss.elastic.co/u/Leviath)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 4:37pm UTC](https://discuss.elastic.co/t/kibana-unable-to-authenticate-user-for-rest-request-after-deleting-logs/287781 "2021-10-27T16:37:42Z")
Hello everyone, I'm new to elastic and I can't connect Kibana to Elasticsearch anymore. Whenever I try to connect, i get "kibana is not ready yet" and : {"type":"log","@timestamp":"2021-10-27T11:06:16+02:00","tags":\["… --- ## [Postfix Dashboards visualization](https://discuss.elastic.co/t/postfix-dashboards-visualization/287731)
**Author:** [@pi314](https://discuss.elastic.co/u/pi314)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 4:36pm UTC](https://discuss.elastic.co/t/postfix-dashboards-visualization/287731 "2021-10-27T16:36:03Z")
Hello everyone! i'm newie with ELK, my question is from a dummy person and I need some compassion :sweat\_smile: I install in a virtual machine with Ubuntu 20.04, Postfix, Logstash, Kibana and Elastic. I follow the next… --- ## [Aggregation: unique count grouped by combination of field value](https://discuss.elastic.co/t/aggregation-unique-count-grouped-by-combination-of-field-value/287431)
**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\ **Replies:** 2\ **Last updated:** [October 27, 2021, 4:30pm UTC](https://discuss.elastic.co/t/aggregation-unique-count-grouped-by-combination-of-field-value/287431 "2021-10-27T16:30:32Z")
Given following documents (simplified) in an index: { "vehicle": "A", "source": "foo" } { "vehicle": "A", "source": "bar" } { "vehicle": "A", "source": "foo" } { "vehicle": "B", "source": "foo" } { "ve… --- ## [Problem with word wrapping in Expanded document](https://discuss.elastic.co/t/problem-with-word-wrapping-in-expanded-document/287648)
**Author:** [@mirekchk](https://discuss.elastic.co/u/mirekchk)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 4:21pm UTC](https://discuss.elastic.co/t/problem-with-word-wrapping-in-expanded-document/287648 "2021-10-27T16:21:44Z")
I have problem with word wrapping in Expanded document (viz image) in Kibana v 7.15.0 (in 7.14.1 it is OK). Field name is wrapping and user have problems in investigation. Is any solution for this pls? --- ## [No config files found in path {:path=\>"C:/logstash-7.15.1/bin/logstash.conf"}](https://discuss.elastic.co/t/no-config-files-found-in-path-path-c-logstash-7-15-1-bin-logstash-conf/287770)
**Author:** [@lalatenduswain](https://discuss.elastic.co/u/lalatenduswain)\ **Replies:** 2\ **Last updated:** [October 27, 2021, 4:15pm UTC](https://discuss.elastic.co/t/no-config-files-found-in-path-path-c-logstash-7-15-1-bin-logstash-conf/287770 "2021-10-27T16:15:35Z")
\[2021-10-27T11:13:19,509\]\[INFO \]\[logstash.config.source.local.configpathloader\] No config files found in path {:path=\>"C:/logstash-7.15.1/bin/logstash.conf"} \[2021-10-27T11:13:19,521\]\[DEBUG\]\[logstash.api.service \] \[… --- ## [Logstash to Splunk](https://discuss.elastic.co/t/logstash-to-splunk/287825)
**Author:** [@pbernard](https://discuss.elastic.co/u/pbernard)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 4:10pm UTC](https://discuss.elastic.co/t/logstash-to-splunk/287825 "2021-10-27T16:10:06Z")
I'm seeing the following error when using "output http" plugin with Logstash V 7.9.1 \[ERROR\]\[logstash.outputs.http \]\[main\]\[fd6763aa601b7a0319bbdad4f501b0901a4f4da752d9fcbf8f841e9fbf9e676c\] \[HTTP Output Failure\] Could… --- ## [How to target City Name as GEOIP Location?](https://discuss.elastic.co/t/how-to-target-city-name-as-geoip-location/287752)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 4:09pm UTC](https://discuss.elastic.co/t/how-to-target-city-name-as-geoip-location/287752 "2021-10-27T16:09:51Z")
I have a city name field and I want to visualize it on the map. I am wondering How I can achieve this because the GEOIP filter takes IP but I don't have an IP address. geoip{ source =\> "\[NotifyEventAdvanceRequestMo… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=790) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=792)