# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=804 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 805 --- ## [Rsyslog, Logstash parse Error when incoming log is too big](https://discuss.elastic.co/t/rsyslog-logstash-parse-error-when-incoming-log-is-too-big/286513)
**Author:** [@Sequa](https://discuss.elastic.co/u/Sequa)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 2:01pm UTC](https://discuss.elastic.co/t/rsyslog-logstash-parse-error-when-incoming-log-is-too-big/286513 "2021-10-12T14:01:30Z")
Hello, I have build a syslog server with web gui for this is use the ELK-Stack and configured Rsyslog. Everything is good and it works but when clients send log files that are more than 7999 characters long, I get the fo… --- ## [Grok pattern](https://discuss.elastic.co/t/grok-pattern/286575)
**Author:** [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\ **Replies:** 2\ **Last updated:** [October 13, 2021, 8:54am UTC](https://discuss.elastic.co/t/grok-pattern/286575 "2021-10-13T08:54:36Z")
I have to parse this log- 05-10-21T13:17:20.457741775|lapideployment-547944bff7-4f2qr|1|iuser|20|0|25.090g|1.378g|68160|S|0.0|1.1|116:20.87|java|265 I am using pattern-%{TIMESTAMP\_ISO8601:timestamp}|%{DATA:pod}| It is… --- ## [Configuration parameter details \[cluster.initial\_master\_nodes\]](https://discuss.elastic.co/t/configuration-parameter-details-cluster-initial-master-nodes/286541)
**Author:** [@mrchile](https://discuss.elastic.co/u/mrchile)\ **Replies:** 2\ **Last updated:** [October 13, 2021, 8:49am UTC](https://discuss.elastic.co/t/configuration-parameter-details-cluster-initial-master-nodes/286541 "2021-10-13T08:49:50Z")
This is an excerpt from the official documentation and I would like to know. By cluster, I mean a combination of virtual machines on which one instance of elastic is installed. Node is a new instance of a virtual machine… --- ## [Date histogram data precalculation](https://discuss.elastic.co/t/date-histogram-data-precalculation/286574)
**Author:** [@scorona85](https://discuss.elastic.co/u/scorona85)\ **Replies:** 1\ **Last updated:** [October 13, 2021, 6:58am UTC](https://discuss.elastic.co/t/date-histogram-data-precalculation/286574 "2021-10-13T06:58:24Z")
Hi, is there a way to perform operations on the data before creating the aggregation? In my example the aggregation is created and then the aggregate data is multiplied \* 10. I have to multiply the data and than aggrega… --- ## [Logstash plugin install error](https://discuss.elastic.co/t/logstash-plugin-install-error/286571)
**Author:** [@nigel.wadsworth](https://discuss.elastic.co/u/nigel.wadsworth)\ **Replies:** 0\ **Last updated:** [October 13, 2021, 6:19am UTC](https://discuss.elastic.co/t/logstash-plugin-install-error/286571 "2021-10-13T06:19:18Z")
Hi there. I have an on-prem Elastic stack implementation that needed the logstash github plugin. This isn't installed by default, and my stack is in an OT zone so is locked from the internet. To get round this, I foll… --- ## [Date histogram filter different math operations](https://discuss.elastic.co/t/date-histogram-filter-different-math-operations/286569)
**Author:** [@scorona85](https://discuss.elastic.co/u/scorona85)\ **Replies:** 0\ **Last updated:** [October 13, 2021, 6:10am UTC](https://discuss.elastic.co/t/date-histogram-filter-different-math-operations/286569 "2021-10-13T06:10:57Z")
Hi, how can I create a date histogram where I have this source datas: { "\_index" : "test-data-2021-6-24", "\_type" : "\_doc", "\_id" : "wB0PDnwBqyyjw7qp6Ih\_", "\_score" : 1.0, "\_… --- ## [Logstash Process](https://discuss.elastic.co/t/logstash-process/285886)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 2\ **Last updated:** [October 13, 2021, 5:32am UTC](https://discuss.elastic.co/t/logstash-process/285886 "2021-10-13T05:32:26Z")
Hello Team, Just wanted to understand from logstash processes point , if I configure multiple pipelines on a single node(machine) will all the pipelines run under the single process (my understanding is it will run on s… --- ## [Getting timestamp inside timestamp](https://discuss.elastic.co/t/getting-timestamp-inside-timestamp/286511)
**Author:** [@Prasang-Biyani](https://discuss.elastic.co/u/Prasang-Biyani)\ **Replies:** 12\ **Last updated:** [October 13, 2021, 5:28am UTC](https://discuss.elastic.co/t/getting-timestamp-inside-timestamp/286511 "2021-10-13T05:28:05Z")
Hi Everyone, I am new to the Logstash, so please forgive me for asking silly question. I am trying to convert timestamp from the log file into @timestamp. Here is my logstash conf file. input { udp { port… --- ## [Kibana: Readiness probe failed: HTTP probe failed with statuscode: 503](https://discuss.elastic.co/t/kibana-readiness-probe-failed-http-probe-failed-with-statuscode-503/286493)
**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\ **Replies:** 1\ **Last updated:** [October 13, 2021, 5:19am UTC](https://discuss.elastic.co/t/kibana-readiness-probe-failed-http-probe-failed-with-statuscode-503/286493 "2021-10-13T05:19:29Z")
Hi All, I have created Elasticsearch/kibana using eck operator. Although kibana pod is running, I see that readiness probe is failed i.e Readiness probe failed: HTTP probe failed with statuscode: 503. What could be reas… --- ## [Possible values for "Phase" field for elasticSearch resource](https://discuss.elastic.co/t/possible-values-for-phase-field-for-elasticsearch-resource/286455)
**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\ **Replies:** 1\ **Last updated:** [October 13, 2021, 5:01am UTC](https://discuss.elastic.co/t/possible-values-for-phase-field-for-elasticsearch-resource/286455 "2021-10-13T05:01:21Z")
After an Elasticsearch instance is created, I do a kubectl get Elasticsearch to get the status and I get the following output: NAME HEALTH NODES VERSION PHASE AGE quickstart green 3 7.11.2 Ready… --- ## [Elasticsearch ram size](https://discuss.elastic.co/t/elasticsearch-ram-size/286449)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 11\ **Last updated:** [October 13, 2021, 4:47am UTC](https://discuss.elastic.co/t/elasticsearch-ram-size/286449 "2021-10-13T04:47:28Z")
Hi Team, I have installed Elasticsearch on windows 2016 server for the first time with hardware configuration of 16GB ram, 64 - bit OS, 8 core. Now I want set the heap size of the elastic cluster. What heap size shoul… --- ## [Persistent queue corruption](https://discuss.elastic.co/t/persistent-queue-corruption/286412)
**Author:** [@franck.lefebure](https://discuss.elastic.co/u/franck.lefebure)\ **Replies:** 1\ **Last updated:** [October 13, 2021, 3:59am UTC](https://discuss.elastic.co/t/persistent-queue-corruption/286412 "2021-10-13T03:59:32Z")
Hi, I had a disk saturation on a logstash 5.6.8 installation I got to remove the "checkpoint.head" (0 bytes size) file to restart the pipeline Now I have theses files in queue dir : -rw-r--r-- 1 logstash logstash 262… --- ## [Elasticsearch giving creating index, cause \[auto(bulk api)\]](https://discuss.elastic.co/t/elasticsearch-giving-creating-index-cause-auto-bulk-api/286560)
**Author:** [@Aashish\_Goyal](https://discuss.elastic.co/u/Aashish_Goyal)\ **Replies:** 9\ **Last updated:** [October 13, 2021, 2:57am UTC](https://discuss.elastic.co/t/elasticsearch-giving-creating-index-cause-auto-bulk-api/286560 "2021-10-13T02:57:05Z")
I am facing issues that old indices are getting created automatically, as I am using fluentd as a log shipper to Elasticsearch. I am facing this issue since 2 days, dig very much for this but no result till now. I delete… --- ## [The best way to export specific data to lucene file like snapshot file](https://discuss.elastic.co/t/the-best-way-to-export-specific-data-to-lucene-file-like-snapshot-file/286557)
**Author:** [@lec\_ssmi](https://discuss.elastic.co/u/lec_ssmi)\ **Replies:** 2\ **Last updated:** [October 13, 2021, 2:18am UTC](https://discuss.elastic.co/t/the-best-way-to-export-specific-data-to-lucene-file-like-snapshot-file/286557 "2021-10-13T02:18:08Z")
I want to export some data according to specific condititons. But the rest api has a bad performance. In order to export the file as soon as possible, I can use snapshot. But snapshot can only be exported incrementally,… --- ## [Search query duration record](https://discuss.elastic.co/t/search-query-duration-record/286271)
**Author:** [@KiddoATOM](https://discuss.elastic.co/u/KiddoATOM)\ **Replies:** 1\ **Last updated:** [October 13, 2021, 1:12am UTC](https://discuss.elastic.co/t/search-query-duration-record/286271 "2021-10-13T01:12:32Z")
Hi. I have a problem in an ES cluster, where due to heavy search queries the cluster stops responding. I want to adjust the global search timeout and we wanted to know if there was a way to obtain the duration of each se… --- ## [Elasticsearch: Duplicate Documents](https://discuss.elastic.co/t/elasticsearch-duplicate-documents/286478)
**Author:** [@Isekai](https://discuss.elastic.co/u/Isekai)\ **Replies:** 1\ **Last updated:** [October 13, 2021, 1:10am UTC](https://discuss.elastic.co/t/elasticsearch-duplicate-documents/286478 "2021-10-13T01:10:38Z")
Hi everyone, I have an occasional problem that sometimes there are several duplicate documents generated. This is part of our CI and it should upload data to elastic with details about our build failure. After analysi… --- ## [How to find Mapping conflict?](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 5\ **Last updated:** [October 13, 2021, 12:54am UTC](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497 "2021-10-13T00:54:17Z")
We upgraded cluster from 7.12 to 7.15 new index created metricbeat-7.15.0 but now in index pattern it says I have mapping conflict in older version there was a field type=conflict but no longer. how do I find which fi… --- ## [Is Elastic search filter in log stash work in synchronous or asynchronous mode?](https://discuss.elastic.co/t/is-elastic-search-filter-in-log-stash-work-in-synchronous-or-asynchronous-mode/286472)
**Author:** [@Sandeep\_Thakur](https://discuss.elastic.co/u/Sandeep_Thakur)\ **Replies:** 1\ **Last updated:** [October 13, 2021, 12:49am UTC](https://discuss.elastic.co/t/is-elastic-search-filter-in-log-stash-work-in-synchronous-or-asynchronous-mode/286472 "2021-10-13T00:49:57Z")
I am facing one issue in ELK when I continuous log and tried to update some fields in log stash configuration file using Elasticsearch filter plugin its updating logs sometimes but sometimes not working, so is there and … --- ## [Kibana server is not ready](https://discuss.elastic.co/t/kibana-server-is-not-ready/286186)
**Author:** [@PELK](https://discuss.elastic.co/u/PELK)\ **Replies:** 2\ **Last updated:** [October 13, 2021, 12:30am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready/286186 "2021-10-13T00:30:43Z")
Salut a tous, après l'installation de Elasticsearch et de kibana tout fonctionne nickel mais après la mise en place d'HTTPS SSL et TLS plus rien ne marche je suis sur ubuntu 21.04 voila les fichier log de kibana {"type… --- ## [Wazuh alerts not received in Kibana](https://discuss.elastic.co/t/wazuh-alerts-not-received-in-kibana/286524)
**Author:** [@Hocine\_Zaidi](https://discuss.elastic.co/u/Hocine_Zaidi)\ **Replies:** 1\ **Last updated:** [October 13, 2021, 12:19am UTC](https://discuss.elastic.co/t/wazuh-alerts-not-received-in-kibana/286524 "2021-10-13T00:19:46Z")
Gents, i receive Wazuh monitoring and statistics but not Alertes , i suspect certificates error if someone help me --- ## [Finding number of files in latest batch using aggregations](https://discuss.elastic.co/t/finding-number-of-files-in-latest-batch-using-aggregations/286553)
**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 10:35pm UTC](https://discuss.elastic.co/t/finding-number-of-files-in-latest-batch-using-aggregations/286553 "2021-10-12T22:35:58Z")
Hello, Here is the scenario: I have an index that contains documents representing files uploaded to a file store. These documents are uploaded in batches and each doc is tagged with a batch\_id field as well as the time… --- ## [Custom TopDocsCollector in plugin?](https://discuss.elastic.co/t/custom-topdocscollector-in-plugin/286546)
**Author:** [@larry\_benchling](https://discuss.elastic.co/u/larry_benchling)\ **Replies:** 2\ **Last updated:** [October 12, 2021, 10:18pm UTC](https://discuss.elastic.co/t/custom-topdocscollector-in-plugin/286546 "2021-10-12T22:18:50Z")
Hello! I'm working on a plugin to add some cheminformatics features to our Elasticsearch cluster. Several of these involve steps where there is an inverted index based screening stage (which fits well as a Lucene query)… --- ## [Finding data with logstash 7.13.4](https://discuss.elastic.co/t/finding-data-with-logstash-7-13-4/286135)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 6\ **Last updated:** [October 12, 2021, 8:44pm UTC](https://discuss.elastic.co/t/finding-data-with-logstash-7-13-4/286135 "2021-10-12T20:44:15Z")
I have my installation of the ELK stack up and running. All three aspects are running on separate servers but they all communicate and can talk to one another. I have not yet installed any Beats or Security on the inst… --- ## [What is best way for saving URL on Elasticsearch, only "keyword" type mapping?](https://discuss.elastic.co/t/what-is-best-way-for-saving-url-on-elasticsearch-only-keyword-type-mapping/286477)
**Author:** [@dan\_kim](https://discuss.elastic.co/u/dan_kim)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 8:31pm UTC](https://discuss.elastic.co/t/what-is-best-way-for-saving-url-on-elasticsearch-only-keyword-type-mapping/286477 "2021-10-12T20:31:03Z")
Hello ~ Our team is going to save our product data in Elasticsearch and I got question when i type mapping schema. The url of "product image", or "product payment" is quite big compared to other attribute in Elasticse… --- ## [Comparing two fields between two different index and output result into a third index](https://discuss.elastic.co/t/comparing-two-fields-between-two-different-index-and-output-result-into-a-third-index/286535)
**Author:** [@test\_tester](https://discuss.elastic.co/u/test_tester)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 7:10pm UTC](https://discuss.elastic.co/t/comparing-two-fields-between-two-different-index-and-output-result-into-a-third-index/286535 "2021-10-12T19:10:00Z")
Hello! I got a requirement whereby I am required to match two fields from two different files and output the result into a csv file. Prior to this train of thought, i did a simple python script to do the matching logic… --- ## [Questions about handling delete operations on a latest-data-only index](https://discuss.elastic.co/t/questions-about-handling-delete-operations-on-a-latest-data-only-index/286227)
**Author:** [@nivo](https://discuss.elastic.co/u/nivo)\ **Replies:** 5\ **Last updated:** [October 12, 2021, 6:54pm UTC](https://discuss.elastic.co/t/questions-about-handling-delete-operations-on-a-latest-data-only-index/286227 "2021-10-12T18:54:46Z")
Hi everyone, I have a question regarding our use case following this topic - In our case we use a single index per customer (without rolling it) and keeping its data up to date by indexing or deleting documents when t… --- ## [Highlighting of not indexed text](https://discuss.elastic.co/t/highlighting-of-not-indexed-text/286530)
**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 5:50pm UTC](https://discuss.elastic.co/t/highlighting-of-not-indexed-text/286530 "2021-10-12T17:50:17Z")
Hello, I use Elasticsearch 7.9.3, is there any way to highlight a not indexed text, with expressions highlighted by a phrase query, and synonyms of these expressions? As our text are often updated, if we index them, th… --- ## [App Search not chasing HTTP 302s when validating URLs?](https://discuss.elastic.co/t/app-search-not-chasing-http-302s-when-validating-urls/284213)
**Author:** [@lgoolsby](https://discuss.elastic.co/u/lgoolsby)\ **Replies:** 2\ **Last updated:** [October 12, 2021, 5:46pm UTC](https://discuss.elastic.co/t/app-search-not-chasing-http-302s-when-validating-urls/284213 "2021-10-12T17:46:29Z")
When adding a new URL to the web crawler the validation fails with this error: When we fetched the web page at \[my domain\], it returned data that was not HTML. If I curl -I \[my domain\] from the pod's shell I see that t… --- ## [Values for alert variables are not coming in Uptime recovered email alert](https://discuss.elastic.co/t/values-for-alert-variables-are-not-coming-in-uptime-recovered-email-alert/285501)
**Author:** [@dyadav](https://discuss.elastic.co/u/dyadav)\ **Replies:** 2\ **Last updated:** [October 12, 2021, 4:32pm UTC](https://discuss.elastic.co/t/values-for-alert-variables-are-not-coming-in-uptime-recovered-email-alert/285501 "2021-10-12T16:32:07Z")
I have set up email alerts for uptime down and recover status. But with recovered status, values for alert variables like state.monitorName, state.monitorUrl are not coming. Version is 7.12.1 --- ## [Obtain doc\_count values from terms aggregation in bucket](https://discuss.elastic.co/t/obtain-doc-count-values-from-terms-aggregation-in-bucket/286527)
**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 4:30pm UTC](https://discuss.elastic.co/t/obtain-doc-count-values-from-terms-aggregation-in-bucket/286527 "2021-10-12T16:30:15Z")
Hello Community! I am having a problem formulating a query in Elasticseach. I want to create a watcher to alert me on slack, the top hits that exceed the 4% of all the documents in a time interval. So in the query of th… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=803) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=805)