# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=861 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 862 --- ## [ElasticSearch/Kibana install on CENT/REHL](https://discuss.elastic.co/t/elasticsearch-kibana-install-on-cent-rehl/280583)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 11\ **Last updated:** [August 9, 2021, 2:03pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-install-on-cent-rehl/280583 "2021-08-09T14:03:55Z")
Good Afternoon; I have been working with ELK now for 3.5 months and as I am going to be deploying this in RHEL in the near future it was time to move away from the Windows deployment that I have been testing with. So I… --- ## [Yarn start error: Permission denied](https://discuss.elastic.co/t/yarn-start-error-permission-denied/280501)
**Author:** [@wenqi73](https://discuss.elastic.co/u/wenqi73)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 1:12pm UTC](https://discuss.elastic.co/t/yarn-start-error-permission-denied/280501 "2021-08-09T13:12:02Z")
I tried to develop kibana and run the commands in Getting started | Kibana Guide \[7.14\] | Elastic, when I run yarn start --run-examples the terminal threw an error: user/git/kibana/node\_modules/lmdb-store/index.js:77 … --- ## [Gsub doesn't replace the given char](https://discuss.elastic.co/t/gsub-doesnt-replace-the-given-char/280783)
**Author:** [@vaseemQA](https://discuss.elastic.co/u/vaseemQA)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 1:02pm UTC](https://discuss.elastic.co/t/gsub-doesnt-replace-the-given-char/280783 "2021-08-09T13:02:43Z")
Hi Team, I'm trying to replace a char with another char in a string field, but it doesn't looks like it is doing the job, please is there anyone to help me in correcting this. Here is an example of what I'm doing , "s… --- ## [Parsing data in Kibana](https://discuss.elastic.co/t/parsing-data-in-kibana/280791)
**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 12:33pm UTC](https://discuss.elastic.co/t/parsing-data-in-kibana/280791 "2021-08-09T12:33:55Z")
Hi all, i have data like this, How do i parsing this data? I need data id or data amount to have its own labels. --- ## [Inconsistent completion suggester results size](https://discuss.elastic.co/t/inconsistent-completion-suggester-results-size/280807)
**Author:** [@abido](https://discuss.elastic.co/u/abido)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 12:05pm UTC](https://discuss.elastic.co/t/inconsistent-completion-suggester-results-size/280807 "2021-08-09T12:05:09Z")
Hello, I am getting weird behaviour with the number of results returned by the Completion Suggester. I have the following request body for example: "suggest": { "title": { "prefix": "ja", "completion": { … --- ## [How to scrape a page with logstash](https://discuss.elastic.co/t/how-to-scrape-a-page-with-logstash/279892)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 3\ **Last updated:** [August 9, 2021, 11:26am UTC](https://discuss.elastic.co/t/how-to-scrape-a-page-with-logstash/279892 "2021-08-09T11:26:11Z")
We have an application that does not save to the database in real time, however it has a page that has some information in real time, I would like to access and scrape this information and put it inside elasticseach. ob… --- ## [Phrase\_prefix with cross\_fields](https://discuss.elastic.co/t/phrase-prefix-with-cross-fields/280792)
**Author:** [@Razvan\_Todea](https://discuss.elastic.co/u/Razvan_Todea)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 10:48am UTC](https://discuss.elastic.co/t/phrase-prefix-with-cross-fields/280792 "2021-08-09T10:48:02Z")
We want the following use case, if a record is saved in the database with the following fields. { "id": 1, "name": "Benefit", "address": "Supersonic" } Queries such as these should match: ben benefit super ben… --- ## [Incorrect shard allocation](https://discuss.elastic.co/t/incorrect-shard-allocation/280359)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 3\ **Last updated:** [August 9, 2021, 10:32am UTC](https://discuss.elastic.co/t/incorrect-shard-allocation/280359 "2021-08-09T10:32:19Z")
i have 15nodes cluster with various mix of datasources 8% is larger shards 10-30GB size. 30% is smaller shards 1-15GB. And majority is very small shards megabites 60%. The reason of having small shards is having lot of … --- ## [The ES index does not generate fields parsed by logstash](https://discuss.elastic.co/t/the-es-index-does-not-generate-fields-parsed-by-logstash/280786)
**Author:** [@ktpktr0](https://discuss.elastic.co/u/ktpktr0)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 9:55am UTC](https://discuss.elastic.co/t/the-es-index-does-not-generate-fields-parsed-by-logstash/280786 "2021-08-09T09:55:17Z")
I used logstash to parse the JSON log, but the ES index did not generate the corresponding fields logstash config: filter { if \[service\] == "roomtest" { grok { match =\> { "messag… --- ## [Load balancing data from Filebeat to Logstash using Nginx](https://discuss.elastic.co/t/load-balancing-data-from-filebeat-to-logstash-using-nginx/179473)
**Author:** [@Nikhil04](https://discuss.elastic.co/u/Nikhil04)\ **Replies:** 8\ **Last updated:** [August 9, 2021, 9:35am UTC](https://discuss.elastic.co/t/load-balancing-data-from-filebeat-to-logstash-using-nginx/179473 "2021-08-09T09:35:16Z")
Hello, I have ELK cluster with 3 nodes for elasticsearch(master+data) , 2 nodes for logstash(Active and Passive) and 2 for kibana.I have to utilize both the logstash nodes. I am using filebeat to parse logs and send da… --- ## [Cannot update field mapping with custom normalizer](https://discuss.elastic.co/t/cannot-update-field-mapping-with-custom-normalizer/280782)
**Author:** [@Rammi22](https://discuss.elastic.co/u/Rammi22)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 9:14am UTC](https://discuss.elastic.co/t/cannot-update-field-mapping-with-custom-normalizer/280782 "2021-08-09T09:14:25Z")
Trying to extends a field mapper returns exception... The field: ... "detail.data.myfield": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 … --- ## [Make Elasticsearch running as a service?](https://discuss.elastic.co/t/make-elasticsearch-running-as-a-service/280510)
**Author:** [@Veak](https://discuss.elastic.co/u/Veak)\ **Replies:** 2\ **Last updated:** [August 9, 2021, 9:11am UTC](https://discuss.elastic.co/t/make-elasticsearch-running-as-a-service/280510 "2021-08-09T09:11:16Z")
Hello, i've installed the elasticsearch 7.x on a raspberry PI 4B on ubuntu 20.04. I've installed it manually with the .tgz. It's working fine when i launch it manually with the command : ./elasticsearch -d (in the di… --- ## [Get the raw log which can't index to elastic search](https://discuss.elastic.co/t/get-the-raw-log-which-cant-index-to-elastic-search/280693)
**Author:** [@jamecollins](https://discuss.elastic.co/u/jamecollins)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 8:40am UTC](https://discuss.elastic.co/t/get-the-raw-log-which-cant-index-to-elastic-search/280693 "2021-08-09T08:40:21Z")
I have error on logstash: \[2021-08-07T00:24:08,330\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"logstash-2021.08.07", :\_type=\>"… --- ## [Setup logstash module netflow](https://discuss.elastic.co/t/setup-logstash-module-netflow/279528)
**Author:** [@Muhammed\_Ibrahim](https://discuss.elastic.co/u/Muhammed_Ibrahim)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 8:16am UTC](https://discuss.elastic.co/t/setup-logstash-module-netflow/279528 "2021-08-09T08:16:46Z")
Dears, I need to install netflow dashboard as it's shown in elastic guide by this command : sudo bin/logstash --modules netflow --setup --path.settings /etc/logstash/ but appears this error below : Using bundled JDK… --- ## [Synchronize whole files (mostly PDFs) to ES from directory and e-mails](https://discuss.elastic.co/t/synchronize-whole-files-mostly-pdfs-to-es-from-directory-and-e-mails/279962)
**Author:** [@jporzelt](https://discuss.elastic.co/u/jporzelt)\ **Replies:** 3\ **Last updated:** [August 9, 2021, 8:08am UTC](https://discuss.elastic.co/t/synchronize-whole-files-mostly-pdfs-to-es-from-directory-and-e-mails/279962 "2021-08-09T08:08:54Z")
Hi all, we would like to setup a document synchronization from a file directory and from a e-mail imap folder to elasticsearch. For the e-mails we are interested in the attachments. Here the imap input plugin looks pro… --- ## [Logstash stopped to treat the incoming logs](https://discuss.elastic.co/t/logstash-stopped-to-treat-the-incoming-logs/280402)
**Author:** [@tarekilani](https://discuss.elastic.co/u/tarekilani)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 7:59am UTC](https://discuss.elastic.co/t/logstash-stopped-to-treat-the-incoming-logs/280402 "2021-08-09T07:59:15Z")
Hello, I'm using ELK stack to correlate logs of network devices. The stack was perfectly working for a long period of time. But today logstash stopped treating the incoming logs. When i did an investigation i found thi… --- ## [Watcher action index](https://discuss.elastic.co/t/watcher-action-index/280078)
**Author:** [@bilel\_meddeb](https://discuss.elastic.co/u/bilel_meddeb)\ **Replies:** 3\ **Last updated:** [August 9, 2021, 7:54am UTC](https://discuss.elastic.co/t/watcher-action-index/280078 "2021-08-09T07:54:34Z")
hello i create a watcher with this action i want to store the result in index --- ## [Logstash geoip databasemanager with outgoing proxy](https://discuss.elastic.co/t/logstash-geoip-databasemanager-with-outgoing-proxy/280751)
**Author:** [@cknz](https://discuss.elastic.co/u/cknz)\ **Replies:** 2\ **Last updated:** [August 9, 2021, 7:47am UTC](https://discuss.elastic.co/t/logstash-geoip-databasemanager-with-outgoing-proxy/280751 "2021-08-09T07:47:32Z")
Hi all, I've upgraded to Logstash 7.14 from 7.11, and now I'm having to deal with the geoip databasemanager. My servers do not have direct database access and need to go out via proxy. Current observed behaviour is that… --- ## [How logstash uses add\_field to add a JSON array](https://discuss.elastic.co/t/how-logstash-uses-add-field-to-add-a-json-array/280640)
**Author:** [@ktpktr0](https://discuss.elastic.co/u/ktpktr0)\ **Replies:** 2\ **Last updated:** [August 9, 2021, 7:27am UTC](https://discuss.elastic.co/t/how-logstash-uses-add-field-to-add-a-json-array/280640 "2021-08-09T07:27:11Z")
The raw data are as follows "money快照" =\> \[ \[0\] "money:14683689,value:15105589,time:2021-07-27 23:50:54", \[1\] "money:14683689,value:15105589,time:2021-07-27 23:50:56" \], The confi… --- ## [Script field .. shards failed](https://discuss.elastic.co/t/script-field-shards-failed/280290)
**Author:** [@djikon](https://discuss.elastic.co/u/djikon)\ **Replies:** 6\ **Last updated:** [August 9, 2021, 7:26am UTC](https://discuss.elastic.co/t/script-field-shards-failed/280290 "2021-08-09T07:26:24Z")
Hi, I create a script field and i have a lot of shards failed. my script field is just : doc\['evenement.@timestamp'\].value.getMillis() - doc\['debutSejour'\].value.getMillis() shards failed exist too fort : if(doc\['ev… --- ## [When ES updated from 7.3.1 to 7.10.2, search slow 2x in fetch phase](https://discuss.elastic.co/t/when-es-updated-from-7-3-1-to-7-10-2-search-slow-2x-in-fetch-phase/280765)
**Author:** [@jiangnanxue21](https://discuss.elastic.co/u/jiangnanxue21)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 6:46am UTC](https://discuss.elastic.co/t/when-es-updated-from-7-3-1-to-7-10-2-search-slow-2x-in-fetch-phase/280765 "2021-08-09T06:46:30Z")
Our product environment had updated es from 7.3.1 to 7.10.2, the index mapping and search sentence has not changed anymore. We specify include and exclude fileds by using that sourceBuilder.fetchSource(getIncludeFe… --- ## [Elasticsearch search\_phase\_execution\_exception in Python](https://discuss.elastic.co/t/elasticsearch-search-phase-execution-exception-in-python/280763)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 6:35am UTC](https://discuss.elastic.co/t/elasticsearch-search-phase-execution-exception-in-python/280763 "2021-08-09T06:35:42Z")
I fetch all my Elasticsearch documents via using scroll api with below code in Python. size = 100 data = es.search( index=index, scroll='25m', size=size, body=body … --- ## [Can I set default sorting for queries?](https://discuss.elastic.co/t/can-i-set-default-sorting-for-queries/280074)
**Author:** [@reka.gay](https://discuss.elastic.co/u/reka.gay)\ **Replies:** 4\ **Last updated:** [August 9, 2021, 6:04am UTC](https://discuss.elastic.co/t/can-i-set-default-sorting-for-queries/280074 "2021-08-09T06:04:34Z")
I know that sorting is based on relevance if no other sorting is defined - and that's how I would like to have it. However, when my search is facet-only, the score of each result is 1 and I'm not quite sure how the resu… --- ## [Discover: Request Timeout after 30000ms](https://discuss.elastic.co/t/discover-request-timeout-after-30000ms/280593)
**Author:** [@sha\_man](https://discuss.elastic.co/u/sha_man)\ **Replies:** 2\ **Last updated:** [August 9, 2021, 5:48am UTC](https://discuss.elastic.co/t/discover-request-timeout-after-30000ms/280593 "2021-08-09T05:48:13Z")
Hi, we are using Kibana 6.7.1 and Elasticsearch version 6.7 in our org. when I run a query to get the data i get timeout error as "Discover: Request Timeout after 30000ms". We have deployed kibana using helm charts in … --- ## [Find Correlation between fields in different indices](https://discuss.elastic.co/t/find-correlation-between-fields-in-different-indices/280498)
**Author:** [@WJ\_Y](https://discuss.elastic.co/u/WJ_Y)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 5:24am UTC](https://discuss.elastic.co/t/find-correlation-between-fields-in-different-indices/280498 "2021-08-09T05:24:45Z")
Using Elasticsearch version 7.14.0, I want to find correlations betweet fields in different indices. An index named "A" has "name", "a-1", "a-2" fields. An index named "B" has "name", "b-1", "b-2" fields. The "name" f… --- ## [Strange behaviour Index Pattern](https://discuss.elastic.co/t/strange-behaviour-index-pattern/280532)
**Author:** [@Jose\_Manuel\_Tirado](https://discuss.elastic.co/u/Jose_Manuel_Tirado)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 5:03am UTC](https://discuss.elastic.co/t/strange-behaviour-index-pattern/280532 "2021-08-09T05:03:42Z")
HI! when I access index pattern I see these strange fields and I can't do anything with them What are they and how can I eliminate them? Are they occupying my memory? Thank you --- ## [Logstash not listening on beats input port](https://discuss.elastic.co/t/logstash-not-listening-on-beats-input-port/280559)
**Author:** [@r.saigiridhar](https://discuss.elastic.co/u/r.saigiridhar)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 5:02am UTC](https://discuss.elastic.co/t/logstash-not-listening-on-beats-input-port/280559 "2021-08-09T05:02:27Z")
Logstash server is not listening on the beats input port specified. I have installed beats input plugin in logstash server, created a conf file with input port specified and pipelines file that has an entry for the conf. … --- ## [Handle Multiline logs, where number of lines are not sure?](https://discuss.elastic.co/t/handle-multiline-logs-where-number-of-lines-are-not-sure/280757)
**Author:** [@bpandit](https://discuss.elastic.co/u/bpandit)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 3:47am UTC](https://discuss.elastic.co/t/handle-multiline-logs-where-number-of-lines-are-not-sure/280757 "2021-08-09T03:47:57Z")
I need a way to handle multi line logs, where number of lines are not sure, below is the log data, where start \[29-Apr-2018 16:46:32\] \[pool int-mobileapp\] pid 30064 script\_filename = /var/www/html/int-mobileapp/index.p… --- ## [Remove index mappings in version 7.4](https://discuss.elastic.co/t/remove-index-mappings-in-version-7-4/280636)
**Author:** [@aldm](https://discuss.elastic.co/u/aldm)\ **Replies:** 3\ **Last updated:** [August 8, 2021, 11:26pm UTC](https://discuss.elastic.co/t/remove-index-mappings-in-version-7-4/280636 "2021-08-08T23:26:40Z")
Hi, We made a mistake to store details\_per\_category in this way { cat1: object, cat2: object, . .. } Now there are thousands of categories, which generated thousands of new fields in out index. We corrected it b… --- ## [FATAL UnableToReadKeystore: unable to read keystore](https://discuss.elastic.co/t/fatal-unabletoreadkeystore-unable-to-read-keystore/280710)
**Author:** [@AmirHossein\_Sohrabi](https://discuss.elastic.co/u/AmirHossein_Sohrabi)\ **Replies:** 2\ **Last updated:** [August 8, 2021, 11:25pm UTC](https://discuss.elastic.co/t/fatal-unabletoreadkeystore-unable-to-read-keystore/280710 "2021-08-08T23:25:54Z")
I'm using an ubuntu 16.04 server on a VM. and installed elasticsearch and kibana both version 7.14. elasticsearch works properly. but when I start the kibana service first it logs running on "systemctl status kibana" … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=860) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=862)