# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=826 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 827 --- ## [Es nodes configuration](https://discuss.elastic.co/t/es-nodes-configuration/284362)
**Author:** [@v\_kumar](https://discuss.elastic.co/u/v_kumar)\ **Replies:** 2\ **Last updated:** [September 16, 2021, 7:34am UTC](https://discuss.elastic.co/t/es-nodes-configuration/284362 "2021-09-16T07:34:58Z")
Hi Team, Currently, in our cluster, this is the configuration, Nodes - 7 nodes(3master, 4datanodes, write happens 1 month once, so mostly read cluster) ES - 6.4 Memory - 128 GB(ES - 32 GB) Cores - 16 Shards - 13… --- ## [Index UNASSIGNED CLUSTER\_RECOVERED](https://discuss.elastic.co/t/index-unassigned-cluster-recovered/284307)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 2\ **Last updated:** [September 16, 2021, 6:19am UTC](https://discuss.elastic.co/t/index-unassigned-cluster-recovered/284307 "2021-09-16T06:19:38Z")
I have a single node cluster with 1 replica on all my indices. Somehow however I have 2 indices unallocated bin-dev and ilm-history-1-000004. GET /\_cat/shards?h=index,shard,prirep,state,unassigned.reason ilm-history-1-0… --- ## [SQL Server data to Elasticsearch using LogStash](https://discuss.elastic.co/t/sql-server-data-to-elasticsearch-using-logstash/283879)
**Author:** [@Navlesh](https://discuss.elastic.co/u/Navlesh)\ **Replies:** 3\ **Last updated:** [September 16, 2021, 5:49am UTC](https://discuss.elastic.co/t/sql-server-data-to-elasticsearch-using-logstash/283879 "2021-09-16T05:49:40Z")
Hi input { jdbc { # SqlServer jdbc connection string to your database, productdb # "jdbc:sqlserver://HostName\\instanceName;database=DBName;user=UserName;password=Password" jdbc\_connection\_string =\> "jdbc:sqlserver:… --- ## [Is there any existing grok{} pattern for date format YYYY-MM-DD?](https://discuss.elastic.co/t/is-there-any-existing-grok-pattern-for-date-format-yyyy-mm-dd/284269)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 3\ **Last updated:** [September 16, 2021, 5:14am UTC](https://discuss.elastic.co/t/is-there-any-existing-grok-pattern-for-date-format-yyyy-mm-dd/284269 "2021-09-16T05:14:28Z")
\[Is there any existing grok{} pattern for date format YYYY-MM-DD? I get error when i use %{DATE:datefield}, tried %{CUSTOM\_DATE:datefield} also , that also resulted in failure --- ## [How to Autoreload kafka broker details in Logstash if any new broker added to the kafka cluster](https://discuss.elastic.co/t/how-to-autoreload-kafka-broker-details-in-logstash-if-any-new-broker-added-to-the-kafka-cluster/284350)
**Author:** [@suresh\_choudhary](https://discuss.elastic.co/u/suresh_choudhary)\ **Replies:** 0\ **Last updated:** [September 16, 2021, 3:42am UTC](https://discuss.elastic.co/t/how-to-autoreload-kafka-broker-details-in-logstash-if-any-new-broker-added-to-the-kafka-cluster/284350 "2021-09-16T03:42:46Z")
I am publishing data to Kafka using Logstash output. If the load increases, My Kafka cluster will add a new broker to the cluster. How to feed these changes(new broker IP and port) to Logstash without restarting it. Will… --- ## [Relación entre nodos cliente, master y data](https://discuss.elastic.co/t/relacion-entre-nodos-cliente-master-y-data/284163)
**Author:** [@Cristian1988](https://discuss.elastic.co/u/Cristian1988)\ **Replies:** 1\ **Last updated:** [September 16, 2021, 2:18am UTC](https://discuss.elastic.co/t/relacion-entre-nodos-cliente-master-y-data/284163 "2021-09-16T02:18:07Z")
Buenos días, Me preguntaba si hay alguna relación entre el número de nodos que tiene que tener en un clúster de Elasticsearch, entre nodos master, cliente y nodos data. Por ejemplo: Administramos en clúster de elastic… --- ## [Combine two fields in search](https://discuss.elastic.co/t/combine-two-fields-in-search/284277)
**Author:** [@markuso](https://discuss.elastic.co/u/markuso)\ **Replies:** 1\ **Last updated:** [September 15, 2021, 10:29pm UTC](https://discuss.elastic.co/t/combine-two-fields-in-search/284277 "2021-09-15T22:29:30Z")
Hey, I have the JSON data in elasticsearch as { "prefix": "+46", "number":"123456789" } So this is a phone number, together with the country code prefix. And searching for them as separate prefix: +46 number: 1… --- ## [APM Alert - Add filter to http codes](https://discuss.elastic.co/t/apm-alert-add-filter-to-http-codes/283092)
**Author:** [@Renzo\_Joseph\_Arenaza](https://discuss.elastic.co/u/Renzo_Joseph_Arenaza)\ **Replies:** 4\ **Last updated:** [September 15, 2021, 9:24pm UTC](https://discuss.elastic.co/t/apm-alert-add-filter-to-http-codes/283092 "2021-09-15T21:24:14Z")
Hi, we are creating alerts under the APM Errors Interface, but we want to just filter the errors with http code 500 or more. The interface doesn´t have that option. Do you know any workaround to do this? Thanks for y… --- ## [Logstash tags \_dateparsefailure - How to separate pasted fields or fields together?](https://discuss.elastic.co/t/logstash-tags-dateparsefailure-how-to-separate-pasted-fields-or-fields-together/284318)
**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 9:15pm UTC](https://discuss.elastic.co/t/logstash-tags-dateparsefailure-how-to-separate-pasted-fields-or-fields-together/284318 "2021-09-15T21:15:05Z")
Hi! I have logs that have fields together or fields pasted together, and I don't know how to separate them. Here's a screenshot of how it looks in Kibana and another how it looks in Logstash. I need help with this as I… --- ## [Error loading kibana iframe](https://discuss.elastic.co/t/error-loading-kibana-iframe/284317)
**Author:** [@Nanelastic](https://discuss.elastic.co/u/Nanelastic)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 7:17pm UTC](https://discuss.elastic.co/t/error-loading-kibana-iframe/284317 "2021-09-15T19:17:20Z")
I am trying to load kibana visualizations using iframe . I copied iframe code using share option in kibana. I put the copied links in a html code to load two iframes sided by side. When i try to load the html page in c… --- ## [Caching Elasticsearch vs Redis](https://discuss.elastic.co/t/caching-elasticsearch-vs-redis/284289)
**Author:** [@Clayton\_D](https://discuss.elastic.co/u/Clayton_D)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 4:59pm UTC](https://discuss.elastic.co/t/caching-elasticsearch-vs-redis/284289 "2021-09-15T16:59:39Z")
Architecture to support 2D GeoQuery As a background, I’m attempting to test a database to power backend of an app that matches users with other users based on time and coordinates (with preference for geoproximity but a… --- ## [How to do a multi match that sorts all matches of one field before another field?](https://discuss.elastic.co/t/how-to-do-a-multi-match-that-sorts-all-matches-of-one-field-before-another-field/284313)
**Author:** [@maurienvy](https://discuss.elastic.co/u/maurienvy)\ **Replies:** 0\ **Last updated:** [September 15, 2021, 4:52pm UTC](https://discuss.elastic.co/t/how-to-do-a-multi-match-that-sorts-all-matches-of-one-field-before-another-field/284313 "2021-09-15T16:52:56Z")
Hello everyone! I am trying to build a search query for an e commerce, I have two requests that I will explain to detail: A) I want to sort results depending on if a search term is on one field or another. The use case… --- ## [Logstash filter plugin development](https://discuss.elastic.co/t/logstash-filter-plugin-development/284306)
**Author:** [@wssnetwork](https://discuss.elastic.co/u/wssnetwork)\ **Replies:** 0\ **Last updated:** [September 15, 2021, 3:44pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-development/284306 "2021-09-15T15:44:30Z")
Hello team. I would like to develop Logstash filter plugin. During build the gem file I got error as below: FAILURE: Build failed with an exception. \* Where: Script '/home/kali/github/logstash/rubyUtils.gradle' line: 2… --- ## [Is removing cluster.initial\_master\_nodes still necessary?](https://discuss.elastic.co/t/is-removing-cluster-initial-master-nodes-still-necessary/284298)
**Author:** [@MSN](https://discuss.elastic.co/u/MSN)\ **Replies:** 2\ **Last updated:** [September 15, 2021, 3:00pm UTC](https://discuss.elastic.co/t/is-removing-cluster-initial-master-nodes-still-necessary/284298 "2021-09-15T15:00:27Z")
Hi, The documentation for elasticsearch 7.14 states, that the configuration setting cluster.initial\_master\_nodes has to be removed from the configuration file after a cluster has formed sucessfully and should be absent … --- ## [Passing location (geopoint) to stored scripts from java](https://discuss.elastic.co/t/passing-location-geopoint-to-stored-scripts-from-java/284297)
**Author:** [@Madhu\_Dasa](https://discuss.elastic.co/u/Madhu_Dasa)\ **Replies:** 0\ **Last updated:** [September 15, 2021, 2:39pm UTC](https://discuss.elastic.co/t/passing-location-geopoint-to-stored-scripts-from-java/284297 "2021-09-15T14:39:59Z")
I have a field "location : {"type":"geopoint"} in ES mapping. I wrote a script to get documents based on location. But how do I pass values to this field from Java? I used below way, but seems not working GeoPoint loca… --- ## [Threat intel integration](https://discuss.elastic.co/t/threat-intel-integration/282663)
**Author:** [@tejas.tech](https://discuss.elastic.co/u/tejas.tech)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 1:05pm UTC](https://discuss.elastic.co/t/threat-intel-integration/282663 "2021-09-15T13:05:38Z")
Team, I have installed Filebeat 7.14.X agent and have enabled the threatintel module but unable to get feeds from all the threat intel. Could you please help us out on this? --- ## [Canvas Kibana metric background color formating](https://discuss.elastic.co/t/canvas-kibana-metric-background-color-formating/283070)
**Author:** [@MTV](https://discuss.elastic.co/u/MTV)\ **Replies:** 6\ **Last updated:** [September 15, 2021, 12:54pm UTC](https://discuss.elastic.co/t/canvas-kibana-metric-background-color-formating/283070 "2021-09-15T12:54:09Z")
Hi, I am using canvas where I am trying to color format a metric background : color1 if value=0, color2 if value between 0 and 7, and color3 if value \>7 . I looked into several answers here (and also looked at the docs)… --- ## [While generating TSVB Viz, Index pattern ID is showing different](https://discuss.elastic.co/t/while-generating-tsvb-viz-index-pattern-id-is-showing-different/284276)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 1\ **Last updated:** [September 15, 2021, 12:26pm UTC](https://discuss.elastic.co/t/while-generating-tsvb-viz-index-pattern-id-is-showing-different/284276 "2021-09-15T12:26:57Z")
Hi, While I am trying to create TSVB viz for index pattern name-"xyz", it is showing me a different index pattern id. id:'61ca57f2-469d-11e7-af02-69e470af7417',index\_pattern:' While I am trying to create other viz … --- ## [GROK pattern for syslogs](https://discuss.elastic.co/t/grok-pattern-for-syslogs/284174)
**Author:** [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 12:02pm UTC](https://discuss.elastic.co/t/grok-pattern-for-syslogs/284174 "2021-09-15T12:02:36Z")
"Hello. I have several sources of syslogs that I want to filter with logstash grok, have some issue and questions about this syslog event and how to use grok. {"@version":"1","message":"\<44\> Sep 14 09:01:09 172.24.4.202… --- ## [Logs to investigate constant shard initialization](https://discuss.elastic.co/t/logs-to-investigate-constant-shard-initialization/283310)
**Author:** [@Maycon\_Santos](https://discuss.elastic.co/u/Maycon_Santos)\ **Replies:** 4\ **Last updated:** [September 15, 2021, 11:59am UTC](https://discuss.elastic.co/t/logs-to-investigate-constant-shard-initialization/283310 "2021-09-15T11:59:17Z")
Hello, I would like to enable more verbose logs to help investigate what is causing constant shard initialization tasks in my cluster. I've set the following without any luck: org.elasticsearch.cluster.routing: TRACE … --- ## [Node communication](https://discuss.elastic.co/t/node-communication/284199)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 4\ **Last updated:** [September 15, 2021, 11:20am UTC](https://discuss.elastic.co/t/node-communication/284199 "2021-09-15T11:20:30Z")
I have 3 elastic nodes, I am trying to establish connection between 3 nodes, but not able to establish communication between nodes. Below is the elasticsearch.yml file, please let me what am I doing wrong. # ===========… --- ## [Highlight not working with script\_score query?](https://discuss.elastic.co/t/highlight-not-working-with-script-score-query/282189)
**Author:** [@Ejaz\_Ahmed](https://discuss.elastic.co/u/Ejaz_Ahmed)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 10:29am UTC](https://discuss.elastic.co/t/highlight-not-working-with-script-score-query/282189 "2021-09-15T10:29:56Z")
Highlights are not working script\_score query in elasticsearch version 7.13. Please suggest --- ## [Pattern matching issues in Logstash](https://discuss.elastic.co/t/pattern-matching-issues-in-logstash/284255)
**Author:** [@Vajb12](https://discuss.elastic.co/u/Vajb12)\ **Replies:** 1\ **Last updated:** [September 15, 2021, 10:27am UTC](https://discuss.elastic.co/t/pattern-matching-issues-in-logstash/284255 "2021-09-15T10:27:13Z")
I'm having issues with Pattern matching with Logstash. Sample log pattern \[DEBUG\] 2021-09-13T23:58:24.361 \[http-nio-8080-exec-1\] \[FB-3D\] localhost - \[i.i.i.a.f.AuthFilter\] :: doFilter :: formName B-3D Grok Pattern th… --- ## [How to add all field values in a single field?](https://discuss.elastic.co/t/how-to-add-all-field-values-in-a-single-field/284068)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 2\ **Last updated:** [September 15, 2021, 10:16am UTC](https://discuss.elastic.co/t/how-to-add-all-field-values-in-a-single-field/284068 "2021-09-15T10:16:36Z")
Hii.I am trying to create a new\_field called "log\_data" and I want to add each value in "log\_data" field present in the message field.I want only one field with multiple values.How can I achieve this? This are the docu… --- ## [Wrong timestamp in kibana index](https://discuss.elastic.co/t/wrong-timestamp-in-kibana-index/284181)
**Author:** [@Tejas\_Bhosale](https://discuss.elastic.co/u/Tejas_Bhosale)\ **Replies:** 2\ **Last updated:** [September 15, 2021, 10:13am UTC](https://discuss.elastic.co/t/wrong-timestamp-in-kibana-index/284181 "2021-09-15T10:13:26Z")
I get worng time data in my index in kibana there is around lot of difference in @timestamp and log\_timestamp field. grok filter which i am using grok { match =\> \[ "message" , '%{IP:remote\_addr} -… --- ## [Reindex data from local to Server?](https://discuss.elastic.co/t/reindex-data-from-local-to-server/284262)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 1\ **Last updated:** [September 15, 2021, 10:13am UTC](https://discuss.elastic.co/t/reindex-data-from-local-to-server/284262 "2021-09-15T10:13:10Z")
I am trying to send index npb\_bro to my server. But I am getting error. Below is my query POST \_reindex { "source": { "remote": { "host": "http://192.168.216.192:1992", "username": "xxxx", "passw… --- ## [How to change index pattern id?](https://discuss.elastic.co/t/how-to-change-index-pattern-id/284263)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 1\ **Last updated:** [September 15, 2021, 10:08am UTC](https://discuss.elastic.co/t/how-to-change-index-pattern-id/284263 "2021-09-15T10:08:26Z")
I want to change id 6ac6d870-85ea-11eb-81eb-fb2732b01c07 and I want to set another Id. It is possible to change this ID. --- ## [Injecting a namespace into helm template](https://discuss.elastic.co/t/injecting-a-namespace-into-helm-template/284230)
**Author:** [@AndreyL](https://discuss.elastic.co/u/AndreyL)\ **Replies:** 1\ **Last updated:** [September 15, 2021, 9:42am UTC](https://discuss.elastic.co/t/injecting-a-namespace-into-helm-template/284230 "2021-09-15T09:42:19Z")
Our Kubernetes environment is managed by Nirmata, which uses gitops for application deployments. It pulls a yaml file and creates the objects. I use the official Elasticsearch helm chart (https://github.com/elastic/helm… --- ## [Visualize two time series with nested objects](https://discuss.elastic.co/t/visualize-two-time-series-with-nested-objects/284171)
**Author:** [@maccn](https://discuss.elastic.co/u/maccn)\ **Replies:** 6\ **Last updated:** [September 15, 2021, 9:18am UTC](https://discuss.elastic.co/t/visualize-two-time-series-with-nested-objects/284171 "2021-09-15T09:18:40Z")
Hello everyone, I am trying to visualize two time series in Kibana reading the data from Elasticsearch. The structure of my document is the following: { "sensorName": "Sensor1", "values": \[ { "feature": … --- ## [Search timeouts during indexing](https://discuss.elastic.co/t/search-timeouts-during-indexing/284153)
**Author:** [@Drept](https://discuss.elastic.co/u/Drept)\ **Replies:** 10\ **Last updated:** [September 15, 2021, 8:49am UTC](https://discuss.elastic.co/t/search-timeouts-during-indexing/284153 "2021-09-15T08:49:06Z")
I have an index of around 90 million documents in Elasticsearch. I manage it via django-elasticsearch-dsl. The settings are the following: number\_of\_shards: 1 number\_of\_replicas: 0 The mapping is: { "series" : { … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=825) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=827)