# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=858 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 859 --- ## [Aggregate error](https://discuss.elastic.co/t/aggregate-error/281080)
**Author:** [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\ **Replies:** 1\ **Last updated:** [August 11, 2021, 4:31pm UTC](https://discuss.elastic.co/t/aggregate-error/281080 "2021-08-11T16:31:34Z")
Hi, I am using the below filter to parse my log file. if \[mesg\] == "ERROR" { #This is prod tomcat log format grok { match =\> { "mesg" =\> \[ "^\\s?\[%{DATA:loglevel}\] %{TIMESTAMP\_ISO8601:logts} \[%{DATA:threadname}\] %{DA… --- ## [Communications link failure consistently after one hour with MySQL](https://discuss.elastic.co/t/communications-link-failure-consistently-after-one-hour-with-mysql/281031)
**Author:** [@Justin\_Morgan](https://discuss.elastic.co/u/Justin_Morgan)\ **Replies:** 1\ **Last updated:** [August 11, 2021, 4:25pm UTC](https://discuss.elastic.co/t/communications-link-failure-consistently-after-one-hour-with-mysql/281031 "2021-08-11T16:25:56Z")
I am using logstash with JDBC to import data from MySQL into Elasticsearch. This has worked before but now it is consistently failing after 1 hour with this exception: \`Exception when executing JDBC query {:exception=\>"… --- ## [Logstash is getting reset after 40 sec ,low uptime](https://discuss.elastic.co/t/logstash-is-getting-reset-after-40-sec-low-uptime/281029)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 2\ **Last updated:** [August 11, 2021, 4:15pm UTC](https://discuss.elastic.co/t/logstash-is-getting-reset-after-40-sec-low-uptime/281029 "2021-08-11T16:15:21Z")
Hi, I checked the logstash status, after every 40-sec logstash is getting started, Getting error message-How to solve this? Aug 11 09:38:38 learning-1 logstash\[4057\]: ERROR: Failed to parse YAML file "/etc/logstash/lo… --- ## [SOLVED - Logstash http output to Kafka REST Proxy](https://discuss.elastic.co/t/solved-logstash-http-output-to-kafka-rest-proxy/281098)
**Author:** [@stevetu21](https://discuss.elastic.co/u/stevetu21)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 4:02pm UTC](https://discuss.elastic.co/t/solved-logstash-http-output-to-kafka-rest-proxy/281098 "2021-08-11T16:02:44Z")
Wanted to share a solution that I found to Logstash http output to Kafka-REST-Proxy and Logstash to Confluent kafka rest proxy. Was running into the same issue trying to use the http output to write a confluent Kafka RES… --- ## [Indicator Match Detection Rule Error - indicators.map is not a function](https://discuss.elastic.co/t/indicator-match-detection-rule-error-indicators-map-is-not-a-function/280941)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 8\ **Last updated:** [August 11, 2021, 3:27pm UTC](https://discuss.elastic.co/t/indicator-match-detection-rule-error-indicators-map-is-not-a-function/280941 "2021-08-11T15:27:48Z")
I have not had any issues with this rule until just this morning, but when I click into an Indicator Match Detection Rule we have, the page seems to start loading just fine, but then it gives an error: Error: indicators… --- ## [Date range filter not returning match if doc\_values is false](https://discuss.elastic.co/t/date-range-filter-not-returning-match-if-doc-values-is-false/281089)
**Author:** [@AMAirfree](https://discuss.elastic.co/u/AMAirfree)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 2:30pm UTC](https://discuss.elastic.co/t/date-range-filter-not-returning-match-if-doc-values-is-false/281089 "2021-08-11T14:30:49Z")
Hello ! I've been confronted to a problem with one of my queries since upgrading my ElasticSearch version to 7.14. I'm filtering nested objects containing a date property, it used to work correctly but ever since the u… --- ## [Searches with two or more words?](https://discuss.elastic.co/t/searches-with-two-or-more-words/281088)
**Author:** [@Sebastian\_Marroquin](https://discuss.elastic.co/u/Sebastian_Marroquin)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 2:28pm UTC](https://discuss.elastic.co/t/searches-with-two-or-more-words/281088 "2021-08-11T14:28:14Z")
Hi Devs, I need help with something about elasticsearch. I have a database full of products related to electronics and computers. I'm using elasticsearch but when I want to do a search like "Dell Laptop" it doesn't ret… --- ## [Query to find if a field exists in last 7 hours](https://discuss.elastic.co/t/query-to-find-if-a-field-exists-in-last-7-hours/281056)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 8\ **Last updated:** [August 11, 2021, 2:20pm UTC](https://discuss.elastic.co/t/query-to-find-if-a-field-exists-in-last-7-hours/281056 "2021-08-11T14:20:44Z")
I am trying to find documents containing opsgenieAction:create in the last 7 hours. I constructed the following query but somehow the result is not as expected. can someone help to find what is wrong here? Query : GET… --- ## [Requesting help with synonym's combined with a query string](https://discuss.elastic.co/t/requesting-help-with-synonyms-combined-with-a-query-string/281066)
**Author:** [@BramFr](https://discuss.elastic.co/u/BramFr)\ **Replies:** 4\ **Last updated:** [August 11, 2021, 1:57pm UTC](https://discuss.elastic.co/t/requesting-help-with-synonyms-combined-with-a-query-string/281066 "2021-08-11T13:57:19Z")
Hi everybody, Just stepping in to the world of ES so I'm sorry if I am a bit of a newbie. Currently I'm stuck at a point in ES and I can't seem to find an awser online, perhaps one of you could be of assistance. What … --- ## [How to select or return specific part from Split ingest pipeline](https://discuss.elastic.co/t/how-to-select-or-return-specific-part-from-split-ingest-pipeline/280146)
**Author:** [@Mojahid\_Ahmad](https://discuss.elastic.co/u/Mojahid_Ahmad)\ **Replies:** 7\ **Last updated:** [August 11, 2021, 1:52pm UTC](https://discuss.elastic.co/t/how-to-select-or-return-specific-part-from-split-ingest-pipeline/280146 "2021-08-11T13:52:19Z")
I have created one split ingest pipeline, it is working fine. But I want to return only the first part of the text. GET \_ingest/pipeline/\_simulate { "pipeline":{ "processors":\[ { "split":{ "fi… --- ## ["Should" is not working in DSL](https://discuss.elastic.co/t/should-is-not-working-in-dsl/281063)
**Author:** [@tarekilani](https://discuss.elastic.co/u/tarekilani)\ **Replies:** 7\ **Last updated:** [August 11, 2021, 1:46pm UTC](https://discuss.elastic.co/t/should-is-not-working-in-dsl/281063 "2021-08-11T13:46:16Z")
Hello, I'm querying elasticsearch using DSL in "dev tools". I have the following code : "query": { "bool" : { "must": \[ {"range": { "@timestamp": { "gte": "now-10m/… --- ## [Unable to configure security in Stack 7.14.0](https://discuss.elastic.co/t/unable-to-configure-security-in-stack-7-14-0/281074)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 1:26pm UTC](https://discuss.elastic.co/t/unable-to-configure-security-in-stack-7-14-0/281074 "2021-08-11T13:26:02Z")
I have been able to get 7.14.0 installed and running in my test environment. I have ElasticSearch, Kibana and Logstash installed. If I do not make any changes to the yml files I can start and access Kibana, although I … --- ## [Vulnerability - HTTP DELETE Method Enabled](https://discuss.elastic.co/t/vulnerability-http-delete-method-enabled/281057)
**Author:** [@sujivisva](https://discuss.elastic.co/u/sujivisva)\ **Replies:** 1\ **Last updated:** [August 11, 2021, 1:21pm UTC](https://discuss.elastic.co/t/vulnerability-http-delete-method-enabled/281057 "2021-08-11T13:21:41Z")
We are using ElasticSearch software for our application in our Project. But we are getting the following vulnerabilities from the security team HTTP DELETE Method Enabled The Web server contains a flaw that may allow a… --- ## [CEPH Storage For Elasticsearch](https://discuss.elastic.co/t/ceph-storage-for-elasticsearch/280775)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 4\ **Last updated:** [August 11, 2021, 11:59am UTC](https://discuss.elastic.co/t/ceph-storage-for-elasticsearch/280775 "2021-08-11T11:59:09Z")
We are planning to create an Elasticsearch cluster over Kubernetes, and for this CEPH distributed file system would be used as Storage, I understand that elastic recommends using local storage, however are there any know… --- ## [How to Map dynamic columns of a class in Elastic](https://discuss.elastic.co/t/how-to-map-dynamic-columns-of-a-class-in-elastic/281042)
**Author:** [@SUSANTA\_PRADHAN](https://discuss.elastic.co/u/SUSANTA_PRADHAN)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 11:02am UTC](https://discuss.elastic.co/t/how-to-map-dynamic-columns-of-a-class-in-elastic/281042 "2021-08-11T11:02:11Z")
I have a class say Employee having two columns like Key and Value. I get response from one api response like (the response has key value pairs like key1: value1 and the response is dynamic in nature) { "notes":\[ "title… --- ## [Parsing query part from Apache log](https://discuss.elastic.co/t/parsing-query-part-from-apache-log/281048)
**Author:** [@Greg\_R](https://discuss.elastic.co/u/Greg_R)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 11:22am UTC](https://discuss.elastic.co/t/parsing-query-part-from-apache-log/281048 "2021-08-11T11:22:14Z")
Greetings I'm completly new to Elastic ; I've set up Apache to send logs to ElasticSearch through FileBeat (I'm not using LogStash). I can see the logs entries in Kibana. Now I'd like to use the parameters from the que… --- ## [Kafka-Elastic search sink connector showing high CPU usage](https://discuss.elastic.co/t/kafka-elastic-search-sink-connector-showing-high-cpu-usage/281043)
**Author:** [@kushaq\_flier](https://discuss.elastic.co/u/kushaq_flier)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 11:06am UTC](https://discuss.elastic.co/t/kafka-elastic-search-sink-connector-showing-high-cpu-usage/281043 "2021-08-11T11:06:20Z")
I am using elastic search sink connector in distributed mode(2 instance). With task of 8 and about 20 to 25 topics to be sink’ed to elastic search. Even when there are no records to sink, the worker java process is show… --- ## [Logstash SSL configuration invalid SecretKeyFactory not available](https://discuss.elastic.co/t/logstash-ssl-configuration-invalid-secretkeyfactory-not-available/280939)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 2\ **Last updated:** [August 11, 2021, 11:02am UTC](https://discuss.elastic.co/t/logstash-ssl-configuration-invalid-secretkeyfactory-not-available/280939 "2021-08-11T11:02:46Z")
Hi folks, I am facing following error and I am out of options to fix it: \[2021-08-10T14:43:44,743\]\[ERROR\]\[logstash.inputs.beats \]\[test\_pipeline\] SSL configuration invalid {:exception=\>Java::JavaLang::IllegalArgument… --- ## [Query\_string not match with Should Condions](https://discuss.elastic.co/t/query-string-not-match-with-should-condions/281038)
**Author:** [@enrico.bellanti](https://discuss.elastic.co/u/enrico.bellanti)\ **Replies:** 1\ **Last updated:** [August 11, 2021, 11:00am UTC](https://discuss.elastic.co/t/query-string-not-match-with-should-condions/281038 "2021-08-11T11:00:43Z")
My intention is to find a word in all documents which have this condions: ("type" =\> "Faq") OR ("type" =\> "NormativeDoc") OR ("type" =\> "Document" AND "profile\_id\_document" =\> X). I tried this but it doesn't work: $pa… --- ## [Counting Files in Folders](https://discuss.elastic.co/t/counting-files-in-folders/281023)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 2\ **Last updated:** [August 11, 2021, 10:51am UTC](https://discuss.elastic.co/t/counting-files-in-folders/281023 "2021-08-11T10:51:38Z")
Hi, Is there a way to capture the number of files that exist in a folder where the file has not been modified for a period of time? I have a requirement to capture this information, and then build alarms of the back of… --- ## [Bar chart Visualisation](https://discuss.elastic.co/t/bar-chart-visualisation/280799)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 2\ **Last updated:** [August 11, 2021, 10:25am UTC](https://discuss.elastic.co/t/bar-chart-visualisation/280799 "2021-08-11T10:25:30Z")
{ "aggs": { "3": { "terms": { "field": "Client.keyword", "order": { "\_key": "asc" }, "size": 2000 }, "aggs": { "2": { "date\_histogram": … --- ## [Filtering for wildcard domains](https://discuss.elastic.co/t/filtering-for-wildcard-domains/280834)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 3\ **Last updated:** [August 11, 2021, 10:08am UTC](https://discuss.elastic.co/t/filtering-for-wildcard-domains/280834 "2021-08-11T10:08:38Z")
Hi there, I have to write a query that has to find documents where one of the fields (type: text, also available: keyword) matches a list of wildcard domains. I know that it's sub-optimal but that's what I have to work … --- ## [8.x prerelease, yum error](https://discuss.elastic.co/t/8-x-prerelease-yum-error/281016)
**Author:** [@stsm](https://discuss.elastic.co/u/stsm)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 8:40am UTC](https://discuss.elastic.co/t/8-x-prerelease-yum-error/281016 "2021-08-11T08:40:22Z")
https://artifacts.elastic.co/packages/8.x-prerelease/yum/repodata/repomd.xml: \[E rrno 14\] HTTPS Error 404 - Not Found .repo file content \[kibana-8.x\] … --- ## [Logstash Ruby Script - Access Fields While Avoiding Concurrency Issues](https://discuss.elastic.co/t/logstash-ruby-script-access-fields-while-avoiding-concurrency-issues/280956)
**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\ **Replies:** 4\ **Last updated:** [August 11, 2021, 9:43am UTC](https://discuss.elastic.co/t/logstash-ruby-script-access-fields-while-avoiding-concurrency-issues/280956 "2021-08-11T09:43:27Z")
I have a CSV file and what im trying to do is after filtering a bit the data, to output them in a another csv file but i have to check that im not writing SAME info. So i have a Ruby script to check for if a KEY is alrea… --- ## [Match entities where field with specific value does not exists](https://discuss.elastic.co/t/match-entities-where-field-with-specific-value-does-not-exists/280902)
**Author:** [@farkasaba](https://discuss.elastic.co/u/farkasaba)\ **Replies:** 7\ **Last updated:** [August 11, 2021, 9:18am UTC](https://discuss.elastic.co/t/match-entities-where-field-with-specific-value-does-not-exists/280902 "2021-08-11T09:18:44Z")
Hello there, I have my documents indexed in the following format: { ... "special\_id"=1, "phase"="create" }, { ... "special\_id"=1, "phase"="update" }, { ... "special\_id"=2, "phase"="update" }, { ... "special\_id"=3, "pha… --- ## [How to get all closed indicies?](https://discuss.elastic.co/t/how-to-get-all-closed-indicies/281004)
**Author:** [@grrkaan](https://discuss.elastic.co/u/grrkaan)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 7:20am UTC](https://discuss.elastic.co/t/how-to-get-all-closed-indicies/281004 "2021-08-11T07:20:11Z")
I have a cluseter and a few open and closed indexes inside.I want to get only closed indexes. GET \_cat/indices?v&s=status this query getting all indicies. I need a GET \_cat/indices?v&s=status:'close' like this query. I… --- ## [Enriching data from nested field query](https://discuss.elastic.co/t/enriching-data-from-nested-field-query/280993)
**Author:** [@amamdouh](https://discuss.elastic.co/u/amamdouh)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 6:39am UTC](https://discuss.elastic.co/t/enriching-data-from-nested-field-query/280993 "2021-08-11T06:39:35Z")
Hi there.., I'm trying to setup an enrich policy that matches a nested field and then returns the parent object, but couldn't find a way so far.. My index mapping looks like this: { "lkp\_persons": { "mappings… --- ## [Logstash jdbc plugin for windows authentication using kerberos in linux](https://discuss.elastic.co/t/logstash-jdbc-plugin-for-windows-authentication-using-kerberos-in-linux/280991)
**Author:** [@akshaybhuradia](https://discuss.elastic.co/u/akshaybhuradia)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 6:23am UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-for-windows-authentication-using-kerberos-in-linux/280991 "2021-08-11T06:23:55Z")
For kerberos authentication username and password is not required. But plugin make username as required parameter. I have tried diiferent ways but not able to connect to MS Sql Server OS Version : RHEL 8.3 with x64 L… --- ## [Monitoring the logstash postfix queue](https://discuss.elastic.co/t/monitoring-the-logstash-postfix-queue/280986)
**Author:** [@KaPBaJIOJI](https://discuss.elastic.co/u/KaPBaJIOJI)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 5:16am UTC](https://discuss.elastic.co/t/monitoring-the-logstash-postfix-queue/280986 "2021-08-11T05:16:30Z")
Hi all, mb its stupid idei, but i want monitoring postfix queue . I write in file "data", "hostname", "count", how can I transfer this data to elastic? at the moment, i am parse postfix logs, thanks to GitHub - whyscre… --- ## [Upgrade elk from 6.3.2 to 7.14](https://discuss.elastic.co/t/upgrade-elk-from-6-3-2-to-7-14/280982)
**Author:** [@praseeb\_kdas](https://discuss.elastic.co/u/praseeb_kdas)\ **Replies:** 3\ **Last updated:** [August 11, 2021, 5:27am UTC](https://discuss.elastic.co/t/upgrade-elk-from-6-3-2-to-7-14/280982 "2021-08-11T05:27:41Z")
We are planning to upgrade our ELK 6.3.2 to 7.14,can we know the steps which we need to perform so there wont any data loss for us. [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=857) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=859)