# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=865 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 866 --- ## [Logstash exec plugin error directory not found](https://discuss.elastic.co/t/logstash-exec-plugin-error-directory-not-found/280444)
**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\ **Replies:** 0\ **Last updated:** [August 4, 2021, 2:19pm UTC](https://discuss.elastic.co/t/logstash-exec-plugin-error-directory-not-found/280444 "2021-08-04T14:19:49Z")
I am working with logstash for syslog processing. Right now, I have logstash and elastic search for data processing and grafana for visualisation. Those data that I am receiving, I am saving them to local disk as csv an… --- ## [Logstash logging problem](https://discuss.elastic.co/t/logstash-logging-problem/280329)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 1:50pm UTC](https://discuss.elastic.co/t/logstash-logging-problem/280329 "2021-08-04T13:50:53Z")
using 7.13.4 having problem with logstash logging. I need two thing I want is to keep my log at my location . second I don't want all stdout message that comes out from conf file when it runs via pipeline. starting … --- ## [Elastic Entreprise SIEM question](https://discuss.elastic.co/t/elastic-entreprise-siem-question/280392)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 11:58am UTC](https://discuss.elastic.co/t/elastic-entreprise-siem-question/280392 "2021-08-04T11:58:33Z")
Hello, So in my company we want to make one SIEM for our clients, and we want to make them all in one cluster as they are small comapnies and don't generate a lot of logs / day. I would like to know if there is a poss… --- ## [Start a plugin action on elasticsearch start](https://discuss.elastic.co/t/start-a-plugin-action-on-elasticsearch-start/280398)
**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\ **Replies:** 3\ **Last updated:** [August 4, 2021, 11:31am UTC](https://discuss.elastic.co/t/start-a-plugin-action-on-elasticsearch-start/280398 "2021-08-04T11:31:47Z")
I am trying to create a new ActionPlugin. On ES starting, I want to create a NodeClient and do some work with it. How can I do that? --- ## [How to find all parents where child property exist](https://discuss.elastic.co/t/how-to-find-all-parents-where-child-property-exist/280136)
**Author:** [@ANKIT\_BHARTI](https://discuss.elastic.co/u/ANKIT_BHARTI)\ **Replies:** 3\ **Last updated:** [August 4, 2021, 11:30am UTC](https://discuss.elastic.co/t/how-to-find-all-parents-where-child-property-exist/280136 "2021-08-04T11:30:50Z")
Hi All , I am trying to solve a reverse query problem and reaching out to find the best possible way. I have an existing index which contains A : \[1,2,3,4\] B : \[2,3\] C : \[3,5,6\] ..... 10000 entries Parent is A , B ,… --- ## [Hyperlinked values](https://discuss.elastic.co/t/hyperlinked-values/280396)
**Author:** [@ranimsaidi](https://discuss.elastic.co/u/ranimsaidi)\ **Replies:** 5\ **Last updated:** [August 4, 2021, 11:28am UTC](https://discuss.elastic.co/t/hyperlinked-values/280396 "2021-08-04T11:28:40Z")
Hello , I am having some key value documents where the value are hyperlinked to external URLs , Is there a way to keep those hyperlinks active when bulked into elasticsearch? Thank you --- ## [Logstash - Nested aggregation](https://discuss.elastic.co/t/logstash-nested-aggregation/280308)
**Author:** [@MattQDev](https://discuss.elastic.co/u/MattQDev)\ **Replies:** 0\ **Last updated:** [August 3, 2021, 12:23pm UTC](https://discuss.elastic.co/t/logstash-nested-aggregation/280308 "2021-08-03T12:23:28Z")
Hey, I am trying to aggregate some data from a SQL DB with Logstash. The data that I am trying to import has the following structure: Category Type Product Where each category can have multiple types, and… --- ## [TCC Information Request](https://discuss.elastic.co/t/tcc-information-request/280416)
**Author:** [@Praful\_Kulkarni](https://discuss.elastic.co/u/Praful_Kulkarni)\ **Replies:** 0\ **Last updated:** [August 4, 2021, 10:45am UTC](https://discuss.elastic.co/t/tcc-information-request/280416 "2021-08-04T10:45:54Z")
Hi, We need the following Trade & Customs Compliance information for Elasticsearch. Please provide the following. What is the ECCN Does a license exception apply? (e.g. ENC) If reporting is required – do you perform … --- ## [Number of document of all indices with a single request](https://discuss.elastic.co/t/number-of-document-of-all-indices-with-a-single-request/280405)
**Author:** [@ELJIE](https://discuss.elastic.co/u/ELJIE)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 10:00am UTC](https://discuss.elastic.co/t/number-of-document-of-all-indices-with-a-single-request/280405 "2021-08-04T10:00:06Z")
Hello, I'm trying to find a tip to retrieve the document count of each index in elastic with a single request Ex: in elastic there is: Index1 with 10 document, Index2 with 20 document, Index3 with 30 document, Ind… --- ## [Metricbeat Apache module fields scoreboard documentation](https://discuss.elastic.co/t/metricbeat-apache-module-fields-scoreboard-documentation/280280)
**Author:** [@VinodKumarPotta](https://discuss.elastic.co/u/VinodKumarPotta)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 9:40am UTC](https://discuss.elastic.co/t/metricbeat-apache-module-fields-scoreboard-documentation/280280 "2021-08-04T09:40:47Z")
Hi Team, We have recently enabled Metricbeat apache module and started creating Kibana dashboards. Here, I will need detailed documentation related scoreboard fields. I have referred to the documentation of Apache exp… --- ## [\[LogStash::Runner\] runner - Logstash shut down](https://discuss.elastic.co/t/logstash-runner-runner-logstash-shut-down/280406)
**Author:** [@travlest](https://discuss.elastic.co/u/travlest)\ **Replies:** 0\ **Last updated:** [August 4, 2021, 9:29am UTC](https://discuss.elastic.co/t/logstash-runner-runner-logstash-shut-down/280406 "2021-08-04T09:29:16Z")
I am trying to configure http\_poller for logstash. But I've encountered this error. location : /etc/logstash/conf.d/logstash\_http\_poller input { http\_poller { urls =\> {\* urlname =\> "https://randomu… --- ## [\[7.10.2\] Querying for "fields" produces HTML entities despite use of "html\_strip"](https://discuss.elastic.co/t/7-10-2-querying-for-fields-produces-html-entities-despite-use-of-html-strip/280348)
**Author:** [@jamesjenkins](https://discuss.elastic.co/u/jamesjenkins)\ **Replies:** 1\ **Last updated:** [August 4, 2021, 9:08am UTC](https://discuss.elastic.co/t/7-10-2-querying-for-fields-produces-html-entities-despite-use-of-html-strip/280348 "2021-08-04T09:08:35Z")
We are currently indexing using this analyzer for our text fields: lowercase\_keyword: { type: 'custom', char\_filter: \['html\_strip'\], tokenizer: 'keyword', filter: \['asciifolding',… --- ## [Differences between light\_spanish and spanish stemmers](https://discuss.elastic.co/t/differences-between-light-spanish-and-spanish-stemmers/280366)
**Author:** [@Daniel\_Rojas](https://discuss.elastic.co/u/Daniel_Rojas)\ **Replies:** 1\ **Last updated:** [August 4, 2021, 9:07am UTC](https://discuss.elastic.co/t/differences-between-light-spanish-and-spanish-stemmers/280366 "2021-08-04T09:07:08Z")
We're using the light\_spanish stemmer, but we've had some issues with some specific words, for example, if I search "papa", it doesn't show results that contain "papas". So, I tested the spanish stemmer, and it solves th… --- ## [Find removed IPs from list in new data](https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067)
**Author:** [@YASH\_SHARMA7766](https://discuss.elastic.co/u/YASH_SHARMA7766)\ **Replies:** 3\ **Last updated:** [August 4, 2021, 8:54am UTC](https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067 "2021-08-04T08:54:07Z")
I have a file containing list of IPs and i want to check in the new data if there is any missing IP. --- ## [Kibana install and run](https://discuss.elastic.co/t/kibana-install-and-run/279534)
**Author:** [@eeeun23](https://discuss.elastic.co/u/eeeun23)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 8:46am UTC](https://discuss.elastic.co/t/kibana-install-and-run/279534 "2021-08-04T08:46:39Z")
After Elasticsearch runs well, an error message appears when running Kibana. "Cannot delete files/directories outside the current working directory. Can be overridden with the force option." So I entered the code. bi… --- ## [What is the version map memory?](https://discuss.elastic.co/t/what-is-the-version-map-memory/280332)
**Author:** [@eyecan](https://discuss.elastic.co/u/eyecan)\ **Replies:** 4\ **Last updated:** [August 4, 2021, 8:46am UTC](https://discuss.elastic.co/t/what-is-the-version-map-memory/280332 "2021-08-04T08:46:36Z")
Hello, In the cluster or node stats API there is a field version\_map\_memory. What is the version map? Thanks! --- ## [Table](https://discuss.elastic.co/t/table/280299)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 3\ **Last updated:** [August 4, 2021, 8:34am UTC](https://discuss.elastic.co/t/table/280299 "2021-08-04T08:34:38Z")
I would like to remove the value "0" or null from the table. In the table, I have implemented serial difference aggregation but it shows all the value which includes 0 and null. I would like to exclude this. Thank … --- ## [Calculate a new field into new index](https://discuss.elastic.co/t/calculate-a-new-field-into-new-index/280266)
**Author:** [@shifenglim](https://discuss.elastic.co/u/shifenglim)\ **Replies:** 3\ **Last updated:** [August 4, 2021, 8:12am UTC](https://discuss.elastic.co/t/calculate-a-new-field-into-new-index/280266 "2021-08-04T08:12:43Z")
I am displaying my data in grafana using elasticseach as a datasource and using a plugin there called metaqueries to help do a calculation on elasticsearch's field like: A: queryA B: queryB C: queryC D: (A+B) / C I … --- ## [Edit the max sub buckets in aggregation based | query on multiple indexes](https://discuss.elastic.co/t/edit-the-max-sub-buckets-in-aggregation-based-query-on-multiple-indexes/280285)
**Author:** [@Aviel\_Bashari](https://discuss.elastic.co/u/Aviel_Bashari)\ **Replies:** 6\ **Last updated:** [August 4, 2021, 7:53am UTC](https://discuss.elastic.co/t/edit-the-max-sub-buckets-in-aggregation-based-query-on-multiple-indexes/280285 "2021-08-04T07:53:39Z")
Hi, I having 2 questions: 1. I'm trying to create a graph and want more than 3 subbuckets,my steps are as follow: using 'aggregation based ' --\> 'line' --\> choose my index then i choose the X and Y axis and want mor… --- ## [Cloudtrail to Logstash automatic roll over on prefix date](https://discuss.elastic.co/t/cloudtrail-to-logstash-automatic-roll-over-on-prefix-date/280376)
**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\ **Replies:** 0\ **Last updated:** [August 4, 2021, 2:19am UTC](https://discuss.elastic.co/t/cloudtrail-to-logstash-automatic-roll-over-on-prefix-date/280376 "2021-08-04T02:19:09Z")
Hi, I am trying to ingest cloudtrail logs to logstash to detect a certain event. I have installed logstash-codec-cloudtrail plugin and was able to ingest cloudtrail logs if i point to a specific folder. Currently i am … --- ## [Refresh in pipeline: output and/or filter](https://discuss.elastic.co/t/refresh-in-pipeline-output-and-or-filter/278044)
**Author:** [@itokai](https://discuss.elastic.co/u/itokai)\ **Replies:** 6\ **Last updated:** [August 4, 2021, 6:54am UTC](https://discuss.elastic.co/t/refresh-in-pipeline-output-and-or-filter/278044 "2021-08-04T06:54:33Z")
Hi, in logstash pipeline consecutive documents are consumed from RabbitMQ. Sometimes need to perform lookup on already imported documents via filter-\>elasticsearch-\>query\_template. However, lookup doesn't query the lat… --- ## [Pass 2 values for Kibana drilldown](https://discuss.elastic.co/t/pass-2-values-for-kibana-drilldown/280360)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 2\ **Last updated:** [August 4, 2021, 4:44am UTC](https://discuss.elastic.co/t/pass-2-values-for-kibana-drilldown/280360 "2021-08-04T04:44:08Z")
Hi all, I'm having a dashboard where for Drilldown, i need to pass 2 field values i.e company id and computer id to drill down into computer of a particular company. But Kibana drilldown only supports 1 value, I'm unab… --- ## [Index files from a folder in GCS bucket using logstash GCS plugin](https://discuss.elastic.co/t/index-files-from-a-folder-in-gcs-bucket-using-logstash-gcs-plugin/280384)
**Author:** [@madhanbaskar](https://discuss.elastic.co/u/madhanbaskar)\ **Replies:** 0\ **Last updated:** [August 4, 2021, 5:12am UTC](https://discuss.elastic.co/t/index-files-from-a-folder-in-gcs-bucket-using-logstash-gcs-plugin/280384 "2021-08-04T05:12:42Z")
Hi, I have a scenario where in the gcs bucket has multiple folders like dev and qa. Now by using logstash GCS plugin I have to read only the files from dev folder and not from qa. How is this possible? The below config… --- ## [Number of CPU cores and Number of nodes relationship](https://discuss.elastic.co/t/number-of-cpu-cores-and-number-of-nodes-relationship/280323)
**Author:** [@sourabhsuman](https://discuss.elastic.co/u/sourabhsuman)\ **Replies:** 3\ **Last updated:** [August 4, 2021, 4:42am UTC](https://discuss.elastic.co/t/number-of-cpu-cores-and-number-of-nodes-relationship/280323 "2021-08-04T04:42:21Z")
What is the relation between the number of CPU cores, threads, and node sizing. What is the impact in these two cases allocator HOT of 64 CPU and 512 RAM vs 32 CPU & 256 RAM. The allocator HOT nod count changed from 6 to… --- ## [Records not indexed with Logstash](https://discuss.elastic.co/t/records-not-indexed-with-logstash/280124)
**Author:** [@deadloss](https://discuss.elastic.co/u/deadloss)\ **Replies:** 8\ **Last updated:** [August 4, 2021, 4:41am UTC](https://discuss.elastic.co/t/records-not-indexed-with-logstash/280124 "2021-08-04T04:41:36Z")
I am facing this issue, the number of events out by elasticsearch output plugin(using logstash monitoring api) is equal to records in csv this means all records in csv are sent to ES but unfortunately the records are alw… --- ## [Description Failed to start elasticSearch source code compiling on Windows](https://discuss.elastic.co/t/description-failed-to-start-elasticsearch-source-code-compiling-on-windows/280177)
**Author:** [@liuliugang](https://discuss.elastic.co/u/liuliugang)\ **Replies:** 8\ **Last updated:** [August 4, 2021, 3:27am UTC](https://discuss.elastic.co/t/description-failed-to-start-elasticsearch-source-code-compiling-on-windows/280177 "2021-08-04T03:27:37Z")
How do I set es.path.conf? Is there a file explaining the setting method of this parameter in the project? Please advise. Thank you IntelliJ IDEA version:2021.1 Elasticsearch version:7.10.0 Jdk version:14.0.2 Gra… --- ## [Kibana can't find the index](https://discuss.elastic.co/t/kibana-cant-find-the-index/280076)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 4\ **Last updated:** [August 4, 2021, 1:12am UTC](https://discuss.elastic.co/t/kibana-cant-find-the-index/280076 "2021-08-04T01:12:54Z")
I have registered the following index in elasticsearch. # curl --user {usr}:{pw} -X GET http://localhost:9200/\_cat/indices/test-\*?v health status index uuid pri rep docs.count docs.deleted st… --- ## [ILM Questions](https://discuss.elastic.co/t/ilm-questions/205298)
**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\ **Replies:** 1\ **Last updated:** [August 3, 2021, 11:29pm UTC](https://discuss.elastic.co/t/ilm-questions/205298 "2021-08-03T23:29:52Z")
Hi Elastic Team, I know there is a lot of questions on ILM which encompasses both the Elasticsearch aspects as well as Kibana. Background: We use Fluentd for our log ingestion framework developed by our DevOps teams t… --- ## [ILM Error](https://discuss.elastic.co/t/ilm-error/192773)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 10\ **Last updated:** [August 3, 2021, 11:22pm UTC](https://discuss.elastic.co/t/ilm-error/192773 "2021-08-03T23:22:50Z")
Started getting the following error for multiple indices a few days ago, not just Winlogbeat indices. I'm running Elastic Stack 7.2.0, how do I resolve this? illegal\_argument\_exception: index.lifecycle.rollover\_alias \[… --- ## [IllegalStateException: alias has more than one write index](https://discuss.elastic.co/t/illegalstateexception-alias-has-more-than-one-write-index/254065)
**Author:** [@exper0](https://discuss.elastic.co/u/exper0)\ **Replies:** 1\ **Last updated:** [August 3, 2021, 11:08pm UTC](https://discuss.elastic.co/t/illegalstateexception-alias-has-more-than-one-write-index/254065 "2021-08-03T23:08:39Z")
Hello, I'm getting the same error on all ES data nodes saying that alias has more than one write index so none of data nodes can actually start, cluster is dead. Is there any way to fix the problem without deleting all … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=864) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=866)