# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=862

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 863

---

## [Unable to upload json file to elastic search](https://discuss.elastic.co/t/unable-to-upload-json-file-to-elastic-search/280712)

<div class="topic-metadata">

**Author:** [@cmunka](https://discuss.elastic.co/u/cmunka)\
**Replies:** 2\
**Last updated:** [August 8, 2021, 11:19pm UTC](https://discuss.elastic.co/t/unable-to-upload-json-file-to-elastic-search/280712 "2021-08-08T23:19:27Z")

</div>

I am trying to upload a jsonl file to elastic search via \_bulk api using Python. Below is my code.! Error: Data is having multiple json object: ##code## # -\*- coding: utf-8 -\*- import requests import json url …

---

## [Parse a CSV file with grok logstash](https://discuss.elastic.co/t/parse-a-csv-file-with-grok-logstash/280726)

<div class="topic-metadata">

**Author:** [@Hind](https://discuss.elastic.co/u/Hind)\
**Replies:** 3\
**Last updated:** [August 8, 2021, 10:32pm UTC](https://discuss.elastic.co/t/parse-a-csv-file-with-grok-logstash/280726 "2021-08-08T22:32:19Z")

</div>

Hello! How could I parse a string that is between double quotes with grok logstash. "Kaathadimattam, Balacola Post, NEAR Siva Tea Factory, Ooty, 643203 Ooty, India – Great location -",ooty,India,..... thank you.

---

## [Array of objects - LogStash Conf](https://discuss.elastic.co/t/array-of-objects-logstash-conf/280750)

<div class="topic-metadata">

**Author:** [@me.mohammed](https://discuss.elastic.co/u/me.mohammed)\
**Replies:** 1\
**Last updated:** [August 8, 2021, 10:08pm UTC](https://discuss.elastic.co/t/array-of-objects-logstash-conf/280750 "2021-08-08T22:08:31Z")

</div>

I'm currently working on fetching my data from MySQL and pushing it to ElasticSearch through LogStash, although I'm kind of having an issue with the logstash configuration I basically have Products and each of those pro…

---

## [Parsing a Raw JSON file "Invalid Setting for json filter"](https://discuss.elastic.co/t/parsing-a-raw-json-file-invalid-setting-for-json-filter/280735)

<div class="topic-metadata">

**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\
**Replies:** 4\
**Last updated:** [August 8, 2021, 7:38pm UTC](https://discuss.elastic.co/t/parsing-a-raw-json-file-invalid-setting-for-json-filter/280735 "2021-08-08T19:38:58Z")

</div>

Hi, I am trying to parse a simple raw JSON file but I am getting an error about invalid setting for JSON filter. I am wondering if its the way my filter is setup and the fact that its nested json? \[ERROR\] 2021-08-08 1…

---

## [Http\_poller skip SSL validation](https://discuss.elastic.co/t/http-poller-skip-ssl-validation/280713)

<div class="topic-metadata">

**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\
**Replies:** 3\
**Last updated:** [August 8, 2021, 6:41pm UTC](https://discuss.elastic.co/t/http-poller-skip-ssl-validation/280713 "2021-08-08T18:41:22Z")

</div>

Is there a way to skip SSL server certificate validation? I'm trying to hit a local server with a self-signed cert but i get errors of course. I saw for other plugins that this was added as an option but nothing for ht…

---

## [How can we populate from different index using reference id stored in main index as in Mongodb](https://discuss.elastic.co/t/how-can-we-populate-from-different-index-using-reference-id-stored-in-main-index-as-in-mongodb/279724)

<div class="topic-metadata">

**Author:** [@singhrohitdangi](https://discuss.elastic.co/u/singhrohitdangi)\
**Replies:** 5\
**Last updated:** [August 8, 2021, 6:30pm UTC](https://discuss.elastic.co/t/how-can-we-populate-from-different-index-using-reference-id-stored-in-main-index-as-in-mongodb/279724 "2021-08-08T18:30:32Z")

</div>

Hi, Actually, I am a beginner at elastic. I want to use elastic for a music app so we can assume all the possible entities of a music app i.e Spotify. I have a doubt that can we populate from the second index (assume=\> …

---

## [Logstash crashes when I run .bat file from powershell](https://discuss.elastic.co/t/logstash-crashes-when-i-run-bat-file-from-powershell/280245)

<div class="topic-metadata">

**Author:** [@realj4ke](https://discuss.elastic.co/u/realj4ke)\
**Replies:** 4\
**Last updated:** [August 8, 2021, 4:59pm UTC](https://discuss.elastic.co/t/logstash-crashes-when-i-run-bat-file-from-powershell/280245 "2021-08-08T16:59:05Z")

</div>

Below is the error that I get when I try to run logstash after downloading the .zip file from the official website. .\\logstash.bat -f logstash.conf Using JAVA\_HOME defined java: C:\\P…

---

## [Tokenizer works after Synonym (graph) token filter too?](https://discuss.elastic.co/t/tokenizer-works-after-synonym-graph-token-filter-too/280297)

<div class="topic-metadata">

**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\
**Replies:** 2\
**Last updated:** [August 8, 2021, 4:21pm UTC](https://discuss.elastic.co/t/tokenizer-works-after-synonym-graph-token-filter-too/280297 "2021-08-08T16:21:36Z")

</div>

I'm using Elasticsearch 7.7 on AWS Elasticsearch Service. I thought token filters works after tokenizers and tokenizers do nothing after token filters. (like Tokenizers = \> Token filters =\> END) But it seems tokenizer…

---

## [Can I install ELastic Search twice as a windows service?](https://discuss.elastic.co/t/can-i-install-elastic-search-twice-as-a-windows-service/280022)

<div class="topic-metadata">

**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\
**Replies:** 10\
**Last updated:** [August 8, 2021, 3:22pm UTC](https://discuss.elastic.co/t/can-i-install-elastic-search-twice-as-a-windows-service/280022 "2021-08-08T15:22:00Z")

</div>

For reasons that may be uninteresting to many, I find myself needing to run two instances of ElasticSearch on the same Windows machine. I have unzipped the 7.13.4 archive into two separate directories and set them up and…

---

## [Data nodes left cluster](https://discuss.elastic.co/t/data-nodes-left-cluster/280725)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [August 8, 2021, 3:01pm UTC](https://discuss.elastic.co/t/data-nodes-left-cluster/280725 "2021-08-08T15:01:38Z")

</div>

Today i noticed that two data nodes left the cluster although disk ,cpu,ram was fine but i can't find the reason in log Currently i am using latest version ELK 7.13.2.I am running 3 master nodes plus 6 data nodes and 2 …

---

## [Detection Rule: Alert when botnet website is accessed](https://discuss.elastic.co/t/detection-rule-alert-when-botnet-website-is-accessed/280733)

<div class="topic-metadata">

**Author:** [@xahmi](https://discuss.elastic.co/u/xahmi)\
**Replies:** 0\
**Last updated:** [August 8, 2021, 2:18pm UTC](https://discuss.elastic.co/t/detection-rule-alert-when-botnet-website-is-accessed/280733 "2021-08-08T14:18:17Z")

</div>

Hello, I added a botnet list to Elasticsearch with logstash. I would like to create now an alert when the destination.address = matchs to an entry from my index. How would you do that with detection rules? Kind regard…

---

## [Regexp containing double quotes](https://discuss.elastic.co/t/regexp-containing-double-quotes/280662)

<div class="topic-metadata">

**Author:** [@Olaph](https://discuss.elastic.co/u/Olaph)\
**Replies:** 2\
**Last updated:** [August 7, 2021, 7:12pm UTC](https://discuss.elastic.co/t/regexp-containing-double-quotes/280662 "2021-08-07T19:12:49Z")

</div>

Hello, I am trying to search values that contains numbers or numbers in a quotes (no other character types except whitespaces). I was not able to use double-quotes character in character class. I have tried both \\" and…

---

## [Elasticsearch 7.14 fails to start on Ubuntu 20.04](https://discuss.elastic.co/t/elasticsearch-7-14-fails-to-start-on-ubuntu-20-04/280705)

<div class="topic-metadata">

**Author:** [@theonlycharithperera](https://discuss.elastic.co/u/theonlycharithperera)\
**Replies:** 2\
**Last updated:** [August 7, 2021, 11:56am UTC](https://discuss.elastic.co/t/elasticsearch-7-14-fails-to-start-on-ubuntu-20-04/280705 "2021-08-07T11:56:53Z")

</div>

When I first installed it using apt-get everything went smoothly and I was able to start it as a service and verified it was working by using curl: Later I noticed that it was using a lot of memory (2GB), so I stopped t…

---

## [Kibana startup Fatal error](https://discuss.elastic.co/t/kibana-startup-fatal-error/280669)

<div class="topic-metadata">

**Author:** [@AmirHossein\_Sohrabi](https://discuss.elastic.co/u/AmirHossein_Sohrabi)\
**Replies:** 3\
**Last updated:** [August 7, 2021, 4:40am UTC](https://discuss.elastic.co/t/kibana-startup-fatal-error/280669 "2021-08-07T04:40:37Z")

</div>

I'm using an ubuntu 16.04 server on a VM. and installed elasticsearch and kibana both version 7.14. elasticsearch works properly. but when I start the kibana service first it logs running on "systemctl status kibana" …

---

## [How to give hidden file path in input.conf for file input plugin](https://discuss.elastic.co/t/how-to-give-hidden-file-path-in-input-conf-for-file-input-plugin/280617)

<div class="topic-metadata">

**Author:** [@priyankab](https://discuss.elastic.co/u/priyankab)\
**Replies:** 2\
**Last updated:** [August 7, 2021, 3:02am UTC](https://discuss.elastic.co/t/how-to-give-hidden-file-path-in-input-conf-for-file-input-plugin/280617 "2021-08-07T03:02:00Z")

</div>

input{ file { exclude =\> "\*.gz" path =\> "/home/abc/work/.productLogs/.auditLogs/.auditLog" type =\> "audit" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" stat\_interval =\> 5 ignore\_older =\> 0 } }

---

## [Mapping: How to do your own calculations](https://discuss.elastic.co/t/mapping-how-to-do-your-own-calculations/280641)

<div class="topic-metadata">

**Author:** [@NoobUser404](https://discuss.elastic.co/u/NoobUser404)\
**Replies:** 2\
**Last updated:** [August 6, 2021, 9:59pm UTC](https://discuss.elastic.co/t/mapping-how-to-do-your-own-calculations/280641 "2021-08-06T21:59:45Z")

</div>

How can we do our own calculations through mappings? I've try this configuration but I get an error: PUT nameIndex/\_mapping { "runtime": { "cpuIndex": { "type": "long", "script": { "source": "e…

---

## [Attach a label to ES query so that to distinguish between the multiple responses](https://discuss.elastic.co/t/attach-a-label-to-es-query-so-that-to-distinguish-between-the-multiple-responses/280683)

<div class="topic-metadata">

**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\
**Replies:** 2\
**Last updated:** [August 6, 2021, 8:42pm UTC](https://discuss.elastic.co/t/attach-a-label-to-es-query-so-that-to-distinguish-between-the-multiple-responses/280683 "2021-08-06T20:42:51Z")

</div>

Hi, I am issuing multiple queries (MultiSearch in python Elasticsearch DSL) for ES index and I need a way to set a label 'type' (which could be one of several values) for each query, so that it would be present in the r…

---

## [How to enrich a set of linked documents with a field value from one document?](https://discuss.elastic.co/t/how-to-enrich-a-set-of-linked-documents-with-a-field-value-from-one-document/280673)

<div class="topic-metadata">

**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\
**Replies:** 0\
**Last updated:** [August 6, 2021, 5:12pm UTC](https://discuss.elastic.co/t/how-to-enrich-a-set-of-linked-documents-with-a-field-value-from-one-document/280673 "2021-08-06T17:12:06Z")

</div>

I have several log sources (files) that are being ingested by filebeat. There will be several (say, 5-20) log lines that are all linked by a single field (I'll call it the transaction id). In just one of the many logs th…

---

## [Can I pass an array into a plugin through a field](https://discuss.elastic.co/t/can-i-pass-an-array-into-a-plugin-through-a-field/280672)

<div class="topic-metadata">

**Author:** [@R.L](https://discuss.elastic.co/u/R.L)\
**Replies:** 0\
**Last updated:** [August 6, 2021, 4:50pm UTC](https://discuss.elastic.co/t/can-i-pass-an-array-into-a-plugin-through-a-field/280672 "2021-08-06T16:50:48Z")

</div>

I am currently writing a custom java plugin for Logstash. One of the input settings is an array. This array might be set in another field within the logstash event. so basically I want to be able to do this: #array\_f…

---

## [Trying to Get Grok Pattern for Error.log](https://discuss.elastic.co/t/trying-to-get-grok-pattern-for-error-log/280670)

<div class="topic-metadata">

**Author:** [@shailesh](https://discuss.elastic.co/u/shailesh)\
**Replies:** 0\
**Last updated:** [August 6, 2021, 4:37pm UTC](https://discuss.elastic.co/t/trying-to-get-grok-pattern-for-error-log/280670 "2021-08-06T16:37:33Z")

</div>

Hello Guts - i am trying to write a Grok Pattern for the below log file 20210621.00h02m29s RESPONSE: sent 127.0.0.1 status 502 (Tunnel Connection Failed) for 'xxxx.com:443/ for the above log line i am trying to parse …

---

## [Performance of Elasticsearch for number of documents vs number of properties in a document](https://discuss.elastic.co/t/performance-of-elasticsearch-for-number-of-documents-vs-number-of-properties-in-a-document/280497)

<div class="topic-metadata">

**Author:** [@firabby](https://discuss.elastic.co/u/firabby)\
**Replies:** 3\
**Last updated:** [August 6, 2021, 3:55pm UTC](https://discuss.elastic.co/t/performance-of-elasticsearch-for-number-of-documents-vs-number-of-properties-in-a-document/280497 "2021-08-06T15:55:50Z")

</div>

I want to store timeseries data in elasticsearch. But I am not sure how I should model the document. Let's say, the document looks like this. { "timestamp": "iso 8601 date time", "common\_property1": "value", "common\_pr…

---

## [Kibana not starting up after enabling https (Single node) , seems to be missing credentials?](https://discuss.elastic.co/t/kibana-not-starting-up-after-enabling-https-single-node-seems-to-be-missing-credentials/280659)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 4\
**Last updated:** [August 6, 2021, 3:48pm UTC](https://discuss.elastic.co/t/kibana-not-starting-up-after-enabling-https-single-node-seems-to-be-missing-credentials/280659 "2021-08-06T15:48:32Z")

</div>

Hello, I'm using Kibana 7.14 and had enabled https recently . All the services logstash and elasticsearch start up successfully while kibana fails . I had been looking at the kibana logs and they show this {"type":"log…

---

## [Elastic rejected execution of coordinating operation](https://discuss.elastic.co/t/elastic-rejected-execution-of-coordinating-operation/280656)

<div class="topic-metadata">

**Author:** [@mug3n451](https://discuss.elastic.co/u/mug3n451)\
**Replies:** 0\
**Last updated:** [August 6, 2021, 2:39pm UTC](https://discuss.elastic.co/t/elastic-rejected-execution-of-coordinating-operation/280656 "2021-08-06T14:39:29Z")

</div>

Hi, i have a problem with elasticsearch on kubernetes. here the problem: "current\_state" : "unassigned", "unassigned\_info" : { "reason" : "ALLOCATION\_FAILED", "at" : "2021-08-06T14:28:31.995Z", "failed\_al…

---

## [Logstash cannot compile the .conf file](https://discuss.elastic.co/t/logstash-cannot-compile-the-conf-file/279735)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 7\
**Last updated:** [August 6, 2021, 2:21pm UTC](https://discuss.elastic.co/t/logstash-cannot-compile-the-conf-file/279735 "2021-08-06T14:21:52Z")

</div>

Hello, so I have this weird situation that all my logstash config files just stopped working. I have noticed it started probably like a few weeks ago after something happened. Only one thing I recognize I have done that…

---

## [Wazuh manager failed to start](https://discuss.elastic.co/t/wazuh-manager-failed-to-start/280626)

<div class="topic-metadata">

**Author:** [@Jedrick](https://discuss.elastic.co/u/Jedrick)\
**Replies:** 2\
**Last updated:** [August 6, 2021, 1:57pm UTC](https://discuss.elastic.co/t/wazuh-manager-failed-to-start/280626 "2021-08-06T13:57:26Z")

</div>

For your kind assistance regarding my kibana that is not working. I already tried to restart all services. kibana, filebeat, elasticsearch, wazuh-manager. There status are all ok and active running. But once a access …

---

## [Update by query for each field with value by sql query](https://discuss.elastic.co/t/update-by-query-for-each-field-with-value-by-sql-query/280192)

<div class="topic-metadata">

**Author:** [@Rammi22](https://discuss.elastic.co/u/Rammi22)\
**Replies:** 5\
**Last updated:** [August 6, 2021, 11:14am UTC](https://discuss.elastic.co/t/update-by-query-for-each-field-with-value-by-sql-query/280192 "2021-08-06T11:14:17Z")

</div>

Hello, following task: get each document one by one from elasticserach server add field to document with value stored in a database (MariaDB) The \_id of the document is the reference to its record in the database: I…

---

## [Index vs Update](https://discuss.elastic.co/t/index-vs-update/280637)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 2\
**Last updated:** [August 6, 2021, 10:27am UTC](https://discuss.elastic.co/t/index-vs-update/280637 "2021-08-06T10:27:08Z")

</div>

Hello I'd like to ask the same question again raised here: What's the benefit of the Update API (POST /\_update) vs Index (PUT /\_doc). As far as I can see Update (with doc\_as\_upsert: true) is identical in effect to Inde…

---

## [Finding Duplicates from an index with nested field](https://discuss.elastic.co/t/finding-duplicates-from-an-index-with-nested-field/280634)

<div class="topic-metadata">

**Author:** [@fastkt](https://discuss.elastic.co/u/fastkt)\
**Replies:** 0\
**Last updated:** [August 6, 2021, 9:37am UTC](https://discuss.elastic.co/t/finding-duplicates-from-an-index-with-nested-field/280634 "2021-08-06T09:37:33Z")

</div>

Hi I am fairly new to ES and need some help. I have an index { "shop\_index": { "properties": { "shop\_key": { "type": "nested", "properties": { "shop\_id": "keyword", "shop…

---

## [Unused visualizations](https://discuss.elastic.co/t/unused-visualizations/280624)

<div class="topic-metadata">

**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\
**Replies:** 0\
**Last updated:** [August 6, 2021, 8:37am UTC](https://discuss.elastic.co/t/unused-visualizations/280624 "2021-08-06T08:37:20Z")

</div>

I want to remove all visualizations that are not used on dashboards. How can I get a list of all such visualizations through api or in some other way? Example Used visualization has dashboard parent: Unused visual…

---

## [JDBC streaming plugin, variable statement](https://discuss.elastic.co/t/jdbc-streaming-plugin-variable-statement/280630)

<div class="topic-metadata">

**Author:** [@JFO\_90](https://discuss.elastic.co/u/JFO_90)\
**Replies:** 0\
**Last updated:** [August 6, 2021, 9:06am UTC](https://discuss.elastic.co/t/jdbc-streaming-plugin-variable-statement/280630 "2021-08-06T09:06:18Z")

</div>

Hi, Im using elasticsearch input plugin to obtain info from elastic, with this extracted info i use the JDBC streaming plugin to get information from BD with some fields that i extracted from elastic. The problem that …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=861)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=863)
