# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=863 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 864 --- ## [Kibana on Arch Linux: "NetworkError when attempting to fetch resource."](https://discuss.elastic.co/t/kibana-on-arch-linux-networkerror-when-attempting-to-fetch-resource/280413)
**Author:** [@brian.rene](https://discuss.elastic.co/u/brian.rene)\ **Replies:** 4\ **Last updated:** [August 6, 2021, 8:07am UTC](https://discuss.elastic.co/t/kibana-on-arch-linux-networkerror-when-attempting-to-fetch-resource/280413 "2021-08-06T08:07:26Z")
Hello everyone, I have been tasked with setting up a self-hosted instance of ELK in a KVM environment using Arch Linux. The root filesystem is write-protected (at runtime) and any directories or files that services need… --- ## [How to query for a documents based on the type of a field?](https://discuss.elastic.co/t/how-to-query-for-a-documents-based-on-the-type-of-a-field/280620)
**Author:** [@k1b](https://discuss.elastic.co/u/k1b)\ **Replies:** 0\ **Last updated:** [August 6, 2021, 7:59am UTC](https://discuss.elastic.co/t/how-to-query-for-a-documents-based-on-the-type-of-a-field/280620 "2021-08-06T07:59:02Z")
I have a geoip.loc field, of type geo\_point. A few documents accidentally got added into the index with this field as (a pair of) float, which is now causing a mapping conflict. I'd like to query for these few document… --- ## [2 node elasticsearch cluster for production like environment](https://discuss.elastic.co/t/2-node-elasticsearch-cluster-for-production-like-environment/280595)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 4\ **Last updated:** [August 6, 2021, 7:26am UTC](https://discuss.elastic.co/t/2-node-elasticsearch-cluster-for-production-like-environment/280595 "2021-08-06T07:26:18Z")
Hi Team, From below document, I am trying to find if I can use 2 node cluster for production like environment. I know 3 node cluster is always better choice. link above says, if you create 2 node es cluster, then mak… --- ## [Setting up 2-Node cluster on local network](https://discuss.elastic.co/t/setting-up-2-node-cluster-on-local-network/280608)
**Author:** [@nyinyithann](https://discuss.elastic.co/u/nyinyithann)\ **Replies:** 1\ **Last updated:** [August 6, 2021, 5:48am UTC](https://discuss.elastic.co/t/setting-up-2-node-cluster-on-local-network/280608 "2021-08-06T05:48:39Z")
Hi, I am trying to setup 2-node cluster on local network - one node on mac and the other on ubuntu. I am able to connect the node on mac from ubuntu and vice versa. But I see only one node in cluster at all time. I w… --- ## [Kuromojiの区切り文字について](https://discuss.elastic.co/t/kuromoji/280179)
**Author:** [@ufuruya](https://discuss.elastic.co/u/ufuruya)\ **Replies:** 6\ **Last updated:** [August 6, 2021, 4:31am UTC](https://discuss.elastic.co/t/kuromoji/280179 "2021-08-06T04:31:59Z")
kuromoji\_tokenizer を利用して、形態素解析を行っています。 「山田 花子」で検索すると、「山田」・「花子」で検索してくれます。 「山田、花子」、「山田・花子」、「山田-花子」も同様です。 区切り文字は、スペースのみとし、他の記号はそのまま文字として扱いたいですが、可能でしょうか？ 「山田 花子」-\>「山田」・「花子」で検索 「山田、花子」-\>「山田、花子」で検索 「山田・花子」-\>「山田・花子」で検索 --- ## [Logstash and mongodb using JDBC is not working](https://discuss.elastic.co/t/logstash-and-mongodb-using-jdbc-is-not-working/280487)
**Author:** [@TranQuangHa307](https://discuss.elastic.co/u/TranQuangHa307)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 3:16am UTC](https://discuss.elastic.co/t/logstash-and-mongodb-using-jdbc-is-not-working/280487 "2021-08-05T03:16:27Z")
This is my configuration file gives output as \[2021-08-05T10:13:30,445\]\[ERROR\]\[logstash.inputs.jdbc \]\[main\]\[c5849bc82bc4f5a1e20e8bbd042d4783536556e6cc82bbb47534d1a4e0939319\] Unable to connect to database. Tried 1… --- ## [Elastic Agent Prometheus integration stopped working in 7.14](https://discuss.elastic.co/t/elastic-agent-prometheus-integration-stopped-working-in-7-14/280602)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 1\ **Last updated:** [August 6, 2021, 12:33am UTC](https://discuss.elastic.co/t/elastic-agent-prometheus-integration-stopped-working-in-7-14/280602 "2021-08-06T00:33:24Z")
Since v 7.14 my prometheus integration seems to have stopped working. I'm using the api/v1/query endpoint of Prometheus and can poll it using curl but the integration seems to have stopped working... This is in the logs… --- ## [Сбор syslog с помощью ELK](https://discuss.elastic.co/t/syslog-elk/279993)
**Author:** [@Savai](https://discuss.elastic.co/u/Savai)\ **Replies:** 12\ **Last updated:** [August 5, 2021, 10:50pm UTC](https://discuss.elastic.co/t/syslog-elk/279993 "2021-08-05T22:50:27Z")
Здравствуйте. Не подскажете, в чем может быть проблема? Запускаю ELK стек через docker-compose и пытаюсь получить syslog через logstash, однако индекс в elastic не создается и при запуске logstash выдается предупреждени… --- ## [What is the meaning of "hits.total" in an aggregate search query?](https://discuss.elastic.co/t/what-is-the-meaning-of-hits-total-in-an-aggregate-search-query/280600)
**Author:** [@chrisan](https://discuss.elastic.co/u/chrisan)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 9:42pm UTC](https://discuss.elastic.co/t/what-is-the-meaning-of-hits-total-in-an-aggregate-search-query/280600 "2021-08-05T21:42:45Z")
I found this Is hits.total limited by max\_results\_window? - #3 which says hits shouldnt be limited However, I have the following query # POST /assets/\_search { "size": 0, "query": { "bool": { "must": \[ … --- ## [Daily index not created](https://discuss.elastic.co/t/daily-index-not-created/280315)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 8\ **Last updated:** [August 5, 2021, 9:42pm UTC](https://discuss.elastic.co/t/daily-index-not-created/280315 "2021-08-05T21:42:31Z")
Hi Team, On my single test server with 8G of RAM (1955m to JVM) having es v 7.4, I have 12 application indices + few system indices like (.monitoring-es-7-2021.08.02, .monitoring-logstash-7-2021.08.02, .monitoring-kiba… --- ## [Installing a custom local plugin](https://discuss.elastic.co/t/installing-a-custom-local-plugin/280574)
**Author:** [@gusDuarte](https://discuss.elastic.co/u/gusDuarte)\ **Replies:** 2\ **Last updated:** [August 5, 2021, 8:43pm UTC](https://discuss.elastic.co/t/installing-a-custom-local-plugin/280574 "2021-08-05T20:43:27Z")
Hi all, I want to make a bit modification to http input plugin, so to start with this task, i following steps: Install logstash 7.14 downloading logstash-7.14.0-darwin-x86\_64.tar.gz, and test if installation is ok bi… --- ## [Snapshot does not exist during migration](https://discuss.elastic.co/t/snapshot-does-not-exist-during-migration/280596)
**Author:** [@iceman](https://discuss.elastic.co/u/iceman)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 8:19pm UTC](https://discuss.elastic.co/t/snapshot-does-not-exist-during-migration/280596 "2021-08-05T20:19:45Z")
hi all, I want to migrate all the data from one k8s cluster to another , ES ver 7.10.1. So first I created successful snapshot on the first cluster: \[elasticsearch@es backup\]$ curl -X PUT "localhost:9200/\_snapshot/bac… --- ## [Subtract @timestamp between two events in Visualize on kibana](https://discuss.elastic.co/t/subtract-timestamp-between-two-events-in-visualize-on-kibana/280479)
**Author:** [@Adixon\_Diaz](https://discuss.elastic.co/u/Adixon_Diaz)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 7:44pm UTC](https://discuss.elastic.co/t/subtract-timestamp-between-two-events-in-visualize-on-kibana/280479 "2021-08-05T19:44:26Z")
Hi Elastic Team, I want to be able to subtract the field @timestamp for two events. For exmample, i recieve 1 event by second, so, i would like to subtract the last event to arrive against the penultimate event to arriv… --- ## [Elastic Stack 7.14.0 Security Update](https://discuss.elastic.co/t/elastic-stack-7-14-0-security-update/280344)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [August 3, 2021, 3:44pm UTC](https://discuss.elastic.co/t/elastic-stack-7-14-0-security-update/280344 "2021-08-03T15:44:59Z")
Elasticsearch Document/Field Level Security issue (ESA-2021-18) A flaw was discovered in Elasticsearch where document and field level security was not applied to searchable snapshots. This could lead to an authenticated… --- ## [Find Out empty field](https://discuss.elastic.co/t/find-out-empty-field/280576)
**Author:** [@YASH\_SHARMA7766](https://discuss.elastic.co/u/YASH_SHARMA7766)\ **Replies:** 2\ **Last updated:** [August 5, 2021, 7:09pm UTC](https://discuss.elastic.co/t/find-out-empty-field/280576 "2021-08-05T19:09:09Z")
I have a data set of 4-5 fields.I want to check if any data field is empty , Iogstash add a field name incomplete data and add value of field name in that.Sample data and code is attached below. As shown in image,ser… --- ## [Query latency increase when upgrading from 7.10.2](https://discuss.elastic.co/t/query-latency-increase-when-upgrading-from-7-10-2/280585)
**Author:** [@BS1](https://discuss.elastic.co/u/BS1)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 7:02pm UTC](https://discuss.elastic.co/t/query-latency-increase-when-upgrading-from-7-10-2/280585 "2021-08-05T19:02:21Z")
We have been running Elasticsearch 7.10.2 for a while in a production setting now, serving thousands of requests per second across 10 separate clusters. Our clusters are all in AWS on ec2 hosts. A coupe of months back we… --- ## [Suggestion for wildcard field type](https://discuss.elastic.co/t/suggestion-for-wildcard-field-type/280553)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 5\ **Last updated:** [August 5, 2021, 6:14pm UTC](https://discuss.elastic.co/t/suggestion-for-wildcard-field-type/280553 "2021-08-05T18:14:22Z")
Hello, We need to do a lot of (front) wildcard queries on certain fields. One such field is url.original. Currently this is mapped in ECS as keyword. I'm wondering if this could be changed to wildcard field type? For e… --- ## [Enhanced Table Plugin Installation Error](https://discuss.elastic.co/t/enhanced-table-plugin-installation-error/280481)
**Author:** [@marija.timovska.iw](https://discuss.elastic.co/u/marija.timovska.iw)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 6:03pm UTC](https://discuss.elastic.co/t/enhanced-table-plugin-installation-error/280481 "2021-08-05T18:03:10Z")
@fbaligand Hello I am in need of your assistance regarding the run of enhanced-table plugin in development mode. When I use the to yarn kbn bootstrap command I get this error. --- ## [Making nested , flattened fields searchable](https://discuss.elastic.co/t/making-nested-flattened-fields-searchable/280570)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 5:21pm UTC](https://discuss.elastic.co/t/making-nested-flattened-fields-searchable/280570 "2021-08-05T17:21:54Z")
Kibana version : 7.13 Elasticsearch version : 7.13 APM Server version : 7.13 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se… --- ## [Getting Issue while query Elasticsearch having kstem with edge gram in filter](https://discuss.elastic.co/t/getting-issue-while-query-elasticsearch-having-kstem-with-edge-gram-in-filter/280555)
**Author:** [@rai](https://discuss.elastic.co/u/rai)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 4:04pm UTC](https://discuss.elastic.co/t/getting-issue-while-query-elasticsearch-having-kstem-with-edge-gram-in-filter/280555 "2021-08-05T16:04:43Z")
Pass complete addressline1 as input with match query unable to find the record because of kstem. We have kstem, lower, edge gram and synonym filter applied on addressline1 field, While creating the index. for an exampl… --- ## [Can you put Logstash behind Nginx proxy?](https://discuss.elastic.co/t/can-you-put-logstash-behind-nginx-proxy/279665)
**Author:** [@droplet](https://discuss.elastic.co/u/droplet)\ **Replies:** 12\ **Last updated:** [August 5, 2021, 3:51pm UTC](https://discuss.elastic.co/t/can-you-put-logstash-behind-nginx-proxy/279665 "2021-08-05T15:51:25Z")
Hello, Can you put Logstash behind Nginx proxy the same way you put Kibana behind an nginx proxy to use a custom domain with SSL? All this while also using HTTP Basic authentication with Nginx? ElasticSearch, Kibana, a… --- ## [How to create Hyperlinked visualization in kibana](https://discuss.elastic.co/t/how-to-create-hyperlinked-visualization-in-kibana/279053)
**Author:** [@Rana\_M\_Zubair](https://discuss.elastic.co/u/Rana_M_Zubair)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 3:31pm UTC](https://discuss.elastic.co/t/how-to-create-hyperlinked-visualization-in-kibana/279053 "2021-08-05T15:31:50Z")
I want to create a type of drilled down dashboard. Like a main dashboard in which I want to create hyperlinked visualization, the link of which will take me to the more detailed dashboard. My Findings: There is a markd… --- ## [Processors in Endpoint/Elastic-Agent](https://discuss.elastic.co/t/processors-in-endpoint-elastic-agent/279889)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 2\ **Last updated:** [August 5, 2021, 3:28pm UTC](https://discuss.elastic.co/t/processors-in-endpoint-elastic-agent/279889 "2021-08-05T15:28:52Z")
Hello, We are testing Elastic-Agent and found that the streams configuration we can add "processors" that take care of adding custom fields for things like Filebeats/Metricbeats. This is a useful feature but we cannot f… --- ## [Debugging elasticsearch plugins](https://discuss.elastic.co/t/debugging-elasticsearch-plugins/280550)
**Author:** [@alinux](https://discuss.elastic.co/u/alinux)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 3:23pm UTC](https://discuss.elastic.co/t/debugging-elasticsearch-plugins/280550 "2021-08-05T15:23:16Z")
Hi, i need to made some custom changes on repository-s3 plugin. In Intellij I started elasticsearch in debug mode with gradle command ./gradlew run --debug-jvm after elasticsearch is runnig there no plugins are loaded… --- ## [LOGSTASH - MULTILINE XML IN LOG](https://discuss.elastic.co/t/logstash-multiline-xml-in-log/280528)
**Author:** [@Daniel\_Lopez](https://discuss.elastic.co/u/Daniel_Lopez)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 11:37am UTC](https://discuss.elastic.co/t/logstash-multiline-xml-in-log/280528 "2021-08-05T11:37:32Z")
Hi to all I'm trying to parse xml info that it is in a log file, I tried with different configs, without luck, the actual one is this, but I tried with TIMESTAMP too, and join lines without sense codec =\> multiline{ c… --- ## [\[ANNOUNCEMENT\] - FSCrawler 2.7 released](https://discuss.elastic.co/t/announcement-fscrawler-2-7-released/280525)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 11:16am UTC](https://discuss.elastic.co/t/announcement-fscrawler-2-7-released/280525 "2021-08-05T11:16:24Z")
The FSCrawler team is pleased to announce the FSCrawler 2.7 release! FSCrawler FS Crawler offers a simple way to index binary files into elasticsearch. Usage Download FSCrawler 2.7: wget https://repo1.maven.org/maven2… --- ## [How to connect Neo4j from logstash using JDBC](https://discuss.elastic.co/t/how-to-connect-neo4j-from-logstash-using-jdbc/280524)
**Author:** [@vivek\_Jagadeesan](https://discuss.elastic.co/u/vivek_Jagadeesan)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 11:11am UTC](https://discuss.elastic.co/t/how-to-connect-neo4j-from-logstash-using-jdbc/280524 "2021-08-05T11:11:53Z")
Hi All, Could anyone help me on how to connect the neo4j from logstash using JDBC? My sample config: input { jdbc { jdbc\_driver\_library =\> "/usr/share/java/neo4j-jdbc-driver-4.0.2.jar" jdbc\_driver\_class =\> "org.neo4… --- ## [Slow/Not Indexing in Elasticsearch via Logstash](https://discuss.elastic.co/t/slow-not-indexing-in-elasticsearch-via-logstash/280523)
**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 11:10am UTC](https://discuss.elastic.co/t/slow-not-indexing-in-elasticsearch-via-logstash/280523 "2021-08-05T11:10:16Z")
We have Elasticsearch 7.11.1 and Logstash 7.11.2. We have a scenario of indexing data from Logstash to ES. We use a java application that does some data processing and posts data to the Logstash HTTP endpoint. Normally e… --- ## [Kibana unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes/278184)
**Author:** [@Trueman](https://discuss.elastic.co/u/Trueman)\ **Replies:** 2\ **Last updated:** [August 5, 2021, 10:12am UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes/278184 "2021-08-05T10:12:24Z")
Hello! Continuing the topic Failed to establish trust communication between es01, es02 and kibana I set just the intermediate certificate in kibana part of the configuration: ELASTICSEARCH\_SSL\_CERTIFICATEAUTHORITIES: $C… --- ## [Can Logstash Base64 decode then parse json from a cloudfront log?](https://discuss.elastic.co/t/can-logstash-base64-decode-then-parse-json-from-a-cloudfront-log/280367)
**Author:** [@chrisan](https://discuss.elastic.co/u/chrisan)\ **Replies:** 2\ **Last updated:** [August 5, 2021, 9:06am UTC](https://discuss.elastic.co/t/can-logstash-base64-decode-then-parse-json-from-a-cloudfront-log/280367 "2021-08-05T09:06:05Z")
Hello, we are using AWS's image resizer Serverless Image Handler | Implementations | AWS Solutions To get an image, you need to base64 encode a json object such as {"bucket":"my-s3-bucket","key":"path/to/your/image.jpg… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=862) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=864)