# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=820 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 821 --- ## [Configure filebeat such that a log with variable length records can be uploaded to an index](https://discuss.elastic.co/t/configure-filebeat-such-that-a-log-with-variable-length-records-can-be-uploaded-to-an-index/284997)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 11:31am UTC](https://discuss.elastic.co/t/configure-filebeat-such-that-a-log-with-variable-length-records-can-be-uploaded-to-an-index/284997 "2021-09-23T11:31:08Z")
configure filebeat such that a log with variable length records can be uploaded to an index. The index is created by the upload a file feature provided by kibana regards shini --- ## [Analytics and clickthrough not available due to permission issues](https://discuss.elastic.co/t/analytics-and-clickthrough-not-available-due-to-permission-issues/283904)
**Author:** [@reka.gay](https://discuss.elastic.co/u/reka.gay)\ **Replies:** 5\ **Last updated:** [September 23, 2021, 11:01am UTC](https://discuss.elastic.co/t/analytics-and-clickthrough-not-available-due-to-permission-issues/283904 "2021-09-23T11:01:40Z")
I have enterprise-search running as a service - which means that I have changed ownership of its logs to the enterprise-search user (otherwise it crashes on startup) For some reason however, it doesn't show any query st… --- ## [Repurposing master node as data node](https://discuss.elastic.co/t/repurposing-master-node-as-data-node/284993)
**Author:** [@elastic-learner](https://discuss.elastic.co/u/elastic-learner)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 10:58am UTC](https://discuss.elastic.co/t/repurposing-master-node-as-data-node/284993 "2021-09-23T10:58:54Z")
I have a 3 node es cluster with all nodes having all roles. I want to convert these nodes to dedicated master nodes and add extra dedicated data nodes. For this the best approach is to evacuate all the shards from the no… --- ## [Migrate from standalone to cluster instances](https://discuss.elastic.co/t/migrate-from-standalone-to-cluster-instances/284991)
**Author:** [@supportth](https://discuss.elastic.co/u/supportth)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 10:48am UTC](https://discuss.elastic.co/t/migrate-from-standalone-to-cluster-instances/284991 "2021-09-23T10:48:59Z")
I have one node cluster of Elasticsearch With installed Elasticsearch, kibana, apm-server I have about 5 TB of indices my elk version is { "name" : "elk-old", "cluster\_name" : "elasticsearch", "cluster\_uuid" : … --- ## [Logstash SNMP input plugin: no data extracted](https://discuss.elastic.co/t/logstash-snmp-input-plugin-no-data-extracted/284982)
**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 9:31am UTC](https://discuss.elastic.co/t/logstash-snmp-input-plugin-no-data-extracted/284982 "2021-09-23T09:31:06Z")
Hi, I am using the SNMP input plugin with the following configurations: input { snmp { walk =\> \["1.3.6.1.2.1.1"\] hosts =\> \[{host =\> "udp:XXXXXXXX/161" community =\> "public" version =\> "2c" retries =\> 2 time… --- ## [Kibana Drilldown - URL auth](https://discuss.elastic.co/t/kibana-drilldown-url-auth/284950)
**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\ **Replies:** 1\ **Last updated:** [September 23, 2021, 9:23am UTC](https://discuss.elastic.co/t/kibana-drilldown-url-auth/284950 "2021-09-23T09:23:27Z")
Hi Kibana-brains, I am looking at using the URL drilldown in kibana to kick off some actions in an external site. I need to authenticate/authorise these calls in the external system and was wondering if, assuming we hav… --- ## [Upgrade from 7.9.2 to 7.13](https://discuss.elastic.co/t/upgrade-from-7-9-2-to-7-13/284976)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 9:22am UTC](https://discuss.elastic.co/t/upgrade-from-7-9-2-to-7-13/284976 "2021-09-23T09:22:55Z")
Is there anything we need to be aware of while upgrading from Elasticsearch 7.9.2 to 7.13? I do understand that minor version releases will not be having the breaking changes, and includes patches and bugfixes. --- ## [Logstash 7.13 and Elasticsearch 7.9.2 compatibility](https://discuss.elastic.co/t/logstash-7-13-and-elasticsearch-7-9-2-compatibility/284962)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [September 23, 2021, 9:15am UTC](https://discuss.elastic.co/t/logstash-7-13-and-elasticsearch-7-9-2-compatibility/284962 "2021-09-23T09:15:15Z")
I do understand that we need to have the same version of components for elastic stack, but would like to know whether 7.13 version of logstash can run with 7.9.2 version of Elasticsearch. --- ## [CentOS 7: Metadata file does not match checksum during yum update](https://discuss.elastic.co/t/centos-7-metadata-file-does-not-match-checksum-during-yum-update/284913)
**Author:** [@Daniel\_S](https://discuss.elastic.co/u/Daniel_S)\ **Replies:** 21\ **Last updated:** [September 23, 2021, 9:10am UTC](https://discuss.elastic.co/t/centos-7-metadata-file-does-not-match-checksum-during-yum-update/284913 "2021-09-23T09:10:27Z")
Hi, I am getting an error message: elasticsearch-7.x/primary FAILED https://artifacts.elastic.co/packages/7.x/yum/repodata/primary.xml.gz: \[Errno -1\] Metadata file does no… --- ## [Save discover search results, view deleted documents](https://discuss.elastic.co/t/save-discover-search-results-view-deleted-documents/284973)
**Author:** [@Tadija](https://discuss.elastic.co/u/Tadija)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 8:41am UTC](https://discuss.elastic.co/t/save-discover-search-results-view-deleted-documents/284973 "2021-09-23T08:41:56Z")
We have setup ILM for our test environments so logs are deleted after 2 days. Our QA workflow includes testing stuff on test branches and creating tickets for issues they encounter. They sometime put a link to Kibana wh… --- ## [Sudden spike in CPU](https://discuss.elastic.co/t/sudden-spike-in-cpu/284972)
**Author:** [@kehers](https://discuss.elastic.co/u/kehers)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 8:41am UTC](https://discuss.elastic.co/t/sudden-spike-in-cpu/284972 "2021-09-23T08:41:24Z")
I noticed a sudden spike in CPU (then response times) in our Elasticsearch instance this morning. Surprisingly, the health was green through this. Is there a way to properly investigate what could be the cause? --- ## [Grok parsing and skipping lines](https://discuss.elastic.co/t/grok-parsing-and-skipping-lines/284864)
**Author:** [@Mira\_9](https://discuss.elastic.co/u/Mira_9)\ **Replies:** 2\ **Last updated:** [September 23, 2021, 8:38am UTC](https://discuss.elastic.co/t/grok-parsing-and-skipping-lines/284864 "2021-09-23T08:38:42Z")
Hey! i have to parse the output of a command linux,extract specific fields and skip some lines.I'm trying but its not working. SSID: "#SOMB-875-LY5C" Mode: Managed RSSI: 1 dBm SNR: 0 dB noise: -89 dBm Chann… --- ## [A markdown to show which filter is applied](https://discuss.elastic.co/t/a-markdown-to-show-which-filter-is-applied/284681)
**Author:** [@Anuj\_Zope](https://discuss.elastic.co/u/Anuj_Zope)\ **Replies:** 2\ **Last updated:** [September 23, 2021, 6:57am UTC](https://discuss.elastic.co/t/a-markdown-to-show-which-filter-is-applied/284681 "2021-09-23T06:57:59Z")
Hi! I am using Kibana 7.10. So on a SUMMARY Dashboard lets say I have a table of subjects. I have linked the Subject names as such that clicking it takes you to the Subject Dashboard and filters that dashboard for the … --- ## [Update Field Type](https://discuss.elastic.co/t/update-field-type/284875)
**Author:** [@Brintha](https://discuss.elastic.co/u/Brintha)\ **Replies:** 4\ **Last updated:** [September 23, 2021, 6:26am UTC](https://discuss.elastic.co/t/update-field-type/284875 "2021-09-23T06:26:49Z")
Hello , Can anyone please help me ,how to update field type in existing index .I have no option to reindex .i want to convert long to keyword --- ## [ECK - Alternative secrets storage using CSI Driver for KeyVault in Azure](https://discuss.elastic.co/t/eck-alternative-secrets-storage-using-csi-driver-for-keyvault-in-azure/284294)
**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\ **Replies:** 2\ **Last updated:** [September 23, 2021, 6:18am UTC](https://discuss.elastic.co/t/eck-alternative-secrets-storage-using-csi-driver-for-keyvault-in-azure/284294 "2021-09-23T06:18:01Z")
I have integrated my AKS cluster with Azure Keyvault CSI Driver for secrets storage. Link: GitHub - Azure/secrets-store-csi-driver-provider-azure: Azure Key Vault provider for Secret Store CSI driver allows you to get … --- ## [Is there a way to force a replica to become primary?](https://discuss.elastic.co/t/is-there-a-way-to-force-a-replica-to-become-primary/284958)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 5:25am UTC](https://discuss.elastic.co/t/is-there-a-way-to-force-a-replica-to-become-primary/284958 "2021-09-23T05:25:15Z")
Like my title suggested. Is it possible? My cluster has a rebalancing error where 1 primary shard is stuck in relocating state and I can't recover it. I'm hoping to force the replica to become the primary and configur… --- ## [How to read each array item into a map of key value pair?](https://discuss.elastic.co/t/how-to-read-each-array-item-into-a-map-of-key-value-pair/284769)
**Author:** [@Indigo\_Star](https://discuss.elastic.co/u/Indigo_Star)\ **Replies:** 7\ **Last updated:** [September 23, 2021, 3:34am UTC](https://discuss.elastic.co/t/how-to-read-each-array-item-into-a-map-of-key-value-pair/284769 "2021-09-23T03:34:45Z")
I have a multiline message field, msg= "CPU=9% TotalMem=12288 MB FreeMem=3895 MB AMQMemoryPercentUsage=0% n0-kkk size=0 inFlight=0 enqRate=0 deqRate=0 n1-xxx size=1 inFlight=1 enqRate=13 deqRate=2 n2-yyyy-oo si… --- ## [Connecting Enterprise Search and Kibana with ECK](https://discuss.elastic.co/t/connecting-enterprise-search-and-kibana-with-eck/284219)
**Author:** [@lgoolsby](https://discuss.elastic.co/u/lgoolsby)\ **Replies:** 1\ **Last updated:** [September 23, 2021, 2:48am UTC](https://discuss.elastic.co/t/connecting-enterprise-search-and-kibana-with-eck/284219 "2021-09-23T02:48:25Z")
When connecting Kibana and Enterprise Search, the docs say to use the host name. However, using the external DNS name that I configured for our k8s cluster does not work. I can change the host name to the internal IP add… --- ## [Index pattern for all ccs deployments](https://discuss.elastic.co/t/index-pattern-for-all-ccs-deployments/284810)
**Author:** [@pbroek](https://discuss.elastic.co/u/pbroek)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 7:14am UTC](https://discuss.elastic.co/t/index-pattern-for-all-ccs-deployments/284810 "2021-09-22T07:14:13Z")
Hi, Within ECE we have multiple deployments. Most of them acting as backend deployments without kibana instances. And one deployment acts as frontend where we use all kibana features. On ECE I setup CCS to all the back… --- ## [Unindexed geo\_point field. What am I missing?](https://discuss.elastic.co/t/unindexed-geo-point-field-what-am-i-missing/284482)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 3\ **Last updated:** [September 23, 2021, 12:13am UTC](https://discuss.elastic.co/t/unindexed-geo-point-field-what-am-i-missing/284482 "2021-09-23T00:13:48Z")
I have an elastic db which takes in netflow data and enriches them. I have two fields that are defined as below, in the template. (can verify that the template exists from Kibana \> index management \> mappings) "dstGeoLo… --- ## [Kibana in ARM64 TypeError: Cannot read properties of null (reading 'message')](https://discuss.elastic.co/t/kibana-in-arm64-typeerror-cannot-read-properties-of-null-reading-message/284814)
**Author:** [@lql2019](https://discuss.elastic.co/u/lql2019)\ **Replies:** 3\ **Last updated:** [September 23, 2021, 12:09am UTC](https://discuss.elastic.co/t/kibana-in-arm64-typeerror-cannot-read-properties-of-null-reading-message/284814 "2021-09-23T00:09:42Z")
I'm using kibana 6.0 to create index-pattern in arm64 linux system, but I often get error message: TypeError: Cannot read properties of null (reading 'message') at http://10.24.37.240:5601/bundles/kibana.bundle.js?v=16… --- ## [Calculations for APM Visualizations](https://discuss.elastic.co/t/calculations-for-apm-visualizations/284386)
**Author:** [@Christina01](https://discuss.elastic.co/u/Christina01)\ **Replies:** 8\ **Last updated:** [September 22, 2021, 9:31pm UTC](https://discuss.elastic.co/t/calculations-for-apm-visualizations/284386 "2021-09-22T21:31:37Z")
How can I calculate the difference between one span start time and child transaction start time and in another way - child transaction end time substract span end time on any chart --- ## [ELK SIZING](https://discuss.elastic.co/t/elk-sizing/284945)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 9:52pm UTC](https://discuss.elastic.co/t/elk-sizing/284945 "2021-09-22T21:52:41Z")
Hello Evry body, I want to deploy an ELK with the architecture: Server for master node (kibana) Server for Elasticsearch hot Server fot Elasticsearch WARM Server logstash With 23 GB data by day and the re… --- ## [How to write multiline codec for python stacktrace](https://discuss.elastic.co/t/how-to-write-multiline-codec-for-python-stacktrace/284936)
**Author:** [@Chandrakant\_Naik](https://discuss.elastic.co/u/Chandrakant_Naik)\ **Replies:** 3\ **Last updated:** [September 22, 2021, 8:50pm UTC](https://discuss.elastic.co/t/how-to-write-multiline-codec-for-python-stacktrace/284936 "2021-09-22T20:50:11Z")
below is how my log is captured \[2021-09-17 14:24:16,527\] \[ERROR\] \[app\]\[MainThread\] \[5d9b63a9-dc4d-4756-af87-eba4fb275584\] \[log\_exception:1440\] : Exception on /download\_request\_data \[GET\] Traceback (most recent call las… --- ## [Elasticsearch missing results and incorrect sorting](https://discuss.elastic.co/t/elasticsearch-missing-results-and-incorrect-sorting/284930)
**Author:** [@Mike\_Miller](https://discuss.elastic.co/u/Mike_Miller)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 8:30pm UTC](https://discuss.elastic.co/t/elasticsearch-missing-results-and-incorrect-sorting/284930 "2021-09-22T20:30:12Z")
I have Elasticsearch setup for searching book content. It works for the most part, however it frequently misses single search terms, especially in the 'entryTitle'. An example is in one book there is a Section title call… --- ## [How to use .conut to exclude a character from the .length count?](https://discuss.elastic.co/t/how-to-use-conut-to-exclude-a-character-from-the-length-count/284938)
**Author:** [@Rauly\_Koto](https://discuss.elastic.co/u/Rauly_Koto)\ **Replies:** 1\ **Last updated:** [September 22, 2021, 8:21pm UTC](https://discuss.elastic.co/t/how-to-use-conut-to-exclude-a-character-from-the-length-count/284938 "2021-09-22T20:21:24Z")
Currently it does the account but does not delete the "/". ruby { code =\> ' event.set("execution\_length\_input", event.get("\[execution\]\[input\]").to\_s.length - ("\[execution\]\[input\]… --- ## [🎉 Elastic Stack 7.15 released](https://discuss.elastic.co/t/elastic-stack-7-15-released/284939)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [September 22, 2021, 8:18pm UTC](https://discuss.elastic.co/t/elastic-stack-7-15-released/284939 "2021-09-22T20:18:24Z")
New in Elastic 7.15 With Elastic 7.15 comes the general availability of the Elastic App Search web crawler and tighter integrations with Google Cloud — enabling our customers and community to more quickly create powerful… --- ## [Elastic search will not bind to port 80 (no web server is running)](https://discuss.elastic.co/t/elastic-search-will-not-bind-to-port-80-no-web-server-is-running/284658)
**Author:** [@lsnwebmaster](https://discuss.elastic.co/u/lsnwebmaster)\ **Replies:** 6\ **Last updated:** [September 22, 2021, 7:30pm UTC](https://discuss.elastic.co/t/elastic-search-will-not-bind-to-port-80-no-web-server-is-running/284658 "2021-09-22T19:30:55Z")
I am trying elasticsearch as a standalone search for WordPress. I created a new server on Ubuntu 20.04 LTS with nothing but elasticsearch. I did nothing to the config file, accepting all defaults. It started fine on port… --- ## [APT repository failing](https://discuss.elastic.co/t/apt-repository-failing/284915)
**Author:** [@armov](https://discuss.elastic.co/u/armov)\ **Replies:** 3\ **Last updated:** [September 22, 2021, 6:55pm UTC](https://discuss.elastic.co/t/apt-repository-failing/284915 "2021-09-22T18:55:45Z")
Elasticsearch repository in a Ubuntu focal 20.04 throws the following error while attempting to update apt: E: Failed to fetch https://artifacts.elastic.co/packages/7.x/apt/dists/stable/main/binary-amd64/Packages.bz2 F… --- ## [Extracting string from log path](https://discuss.elastic.co/t/extracting-string-from-log-path/284748)
**Author:** [@Bkumar](https://discuss.elastic.co/u/Bkumar)\ **Replies:** 9\ **Last updated:** [September 22, 2021, 6:30pm UTC](https://discuss.elastic.co/t/extracting-string-from-log-path/284748 "2021-09-22T18:30:59Z")
Hi, As per requirement, i can't put the tag to filebeat to filter log path at logstash end. So only option left with me to filter the log path on the basis of string. Here is the sample log path- /opt/tomcat/instances… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=819) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=821)