# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=874 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 875 --- ## [How to run multiple nodes with esplugin / testsClusters?](https://discuss.elastic.co/t/how-to-run-multiple-nodes-with-esplugin-testsclusters/279562)
**Author:** [@Dor\_Levi](https://discuss.elastic.co/u/Dor_Levi)\ **Replies:** 0\ **Last updated:** [July 25, 2021, 1:15pm UTC](https://discuss.elastic.co/t/how-to-run-multiple-nodes-with-esplugin-testsclusters/279562 "2021-07-25T13:15:13Z")
Hi, I'm working on a plugin for Elasticsearch, and want to try and test it in a multi-node cluster. I'm building it with gradle and the esplugin/testcluster plugins. Everything works great when it's just one node, but… --- ## [I forgot to index a field](https://discuss.elastic.co/t/i-forgot-to-index-a-field/279552)
**Author:** [@Zongxian\_Feng](https://discuss.elastic.co/u/Zongxian_Feng)\ **Replies:** 1\ **Last updated:** [July 25, 2021, 9:27am UTC](https://discuss.elastic.co/t/i-forgot-to-index-a-field/279552 "2021-07-25T09:27:53Z")
Hi. I forgot to index a field called "n\_citation" which is in type "integer". When mapping the dataset, I decide to map the necessary fields (like "title" and "abstract") only to save my time. Now, it turns out that th… --- ## [Logstash mixing up log entries despite multip. pipelines](https://discuss.elastic.co/t/logstash-mixing-up-log-entries-despite-multip-pipelines/279557)
**Author:** [@pdanjou](https://discuss.elastic.co/u/pdanjou)\ **Replies:** 1\ **Last updated:** [July 25, 2021, 12:56pm UTC](https://discuss.elastic.co/t/logstash-mixing-up-log-entries-despite-multip-pipelines/279557 "2021-07-25T12:56:39Z")
So I have the following. 2 conf files with different ports, machine A sends to port1 and machine B sends to port2. I have pipelines.yml: pipeline.id: nginx path.config: "/etc/logstash/conf.d/logstash-nginx-es.conf" p… --- ## [Is there any character limit on term filter?](https://discuss.elastic.co/t/is-there-any-character-limit-on-term-filter/279544)
**Author:** [@dotel](https://discuss.elastic.co/u/dotel)\ **Replies:** 4\ **Last updated:** [July 25, 2021, 5:47am UTC](https://discuss.elastic.co/t/is-there-any-character-limit-on-term-filter/279544 "2021-07-25T05:47:29Z")
I'm trying to check if a certain attachment is previously indexed or not to avoid reindexing that document. But the problem is, for longer text fields, the term filter isn't working. I didn't find any mention of this lim… --- ## [What's the difference between Id's query and Term Query when finding documents by “\_id”?](https://discuss.elastic.co/t/whats-the-difference-between-ids-query-and-term-query-when-finding-documents-by-id/279523)
**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\ **Replies:** 2\ **Last updated:** [July 24, 2021, 7:11am UTC](https://discuss.elastic.co/t/whats-the-difference-between-ids-query-and-term-query-when-finding-documents-by-id/279523 "2021-07-24T07:11:39Z")
I want to get document by "\_id", I have 3 choices: GET document by "\_id" GET order/\_doc/001 Use Id's Query, GET order/\_search { "query": { "ids" : { "values" : \["001"\] } } } Though Id's query takes array of Id's but I … --- ## [How to remove %3A and such hash in text while parsing?](https://discuss.elastic.co/t/how-to-remove-3a-and-such-hash-in-text-while-parsing/279421)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 5\ **Last updated:** [July 24, 2021, 5:54am UTC](https://discuss.elastic.co/t/how-to-remove-3a-and-such-hash-in-text-while-parsing/279421 "2021-07-24T05:54:44Z")
Hello, I have a field in my logs: "name+Of+the%3A%C2%AE+field" which sometimes can be like this: "%D9+%81+%D8+%B1+%D8+%A7+%D8" How can I remove extra expressions in logstash filters? The desired output for the first … --- ## [Logstash ConcurrentModificationException: null](https://discuss.elastic.co/t/logstash-concurrentmodificationexception-null/278759)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 10\ **Last updated:** [July 24, 2021, 5:53am UTC](https://discuss.elastic.co/t/logstash-concurrentmodificationexception-null/278759 "2021-07-24T05:53:22Z")
Hi, has anyone encountered this issue? Logstash instances keep restarting after a while with this error: \[2021-07-14T14:35:23,972\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>java.lang.Illeg… --- ## [Show custom geoip fields](https://discuss.elastic.co/t/show-custom-geoip-fields/279266)
**Author:** [@Velon](https://discuss.elastic.co/u/Velon)\ **Replies:** 4\ **Last updated:** [July 24, 2021, 2:19am UTC](https://discuss.elastic.co/t/show-custom-geoip-fields/279266 "2021-07-24T02:19:48Z")
I have add custom fields AcmeCorp.DeptName and AcmeCorp.DeptName whith maxmind\_mmdb, but I can't find it in the last result with logstash geoip plugins, so I'm asking some help ~ Thanks you~ --- ## [How to parse nginx error\_log in Kibana from file?](https://discuss.elastic.co/t/how-to-parse-nginx-error-log-in-kibana-from-file/279460)
**Author:** [@station72](https://discuss.elastic.co/u/station72)\ **Replies:** 1\ **Last updated:** [July 24, 2021, 12:53am UTC](https://discuss.elastic.co/t/how-to-parse-nginx-error-log-in-kibana-from-file/279460 "2021-07-24T00:53:39Z")
Hello! I have an error log file from nginx. I am trying to upload and parse my file with Data Visualizer in Kibana v 7.10.1 Example of my error log 2021/07/21 04:44:36 \[error\] 7#7: \*24864573 foo could not be resolved… --- ## [Position(or numeric ranking) of a item in an aggreagation](https://discuss.elastic.co/t/position-or-numeric-ranking-of-a-item-in-an-aggreagation/279479)
**Author:** [@Pablo\_Albertengo](https://discuss.elastic.co/u/Pablo_Albertengo)\ **Replies:** 1\ **Last updated:** [July 24, 2021, 12:24am UTC](https://discuss.elastic.co/t/position-or-numeric-ranking-of-a-item-in-an-aggreagation/279479 "2021-07-24T00:24:29Z")
Hi! I have this problem. Suppose I have an index to store products sales. And I want to define a visualization (potentially a table) with the following information: Product Name, ranking in number of units sold, rank… --- ## [Reflect changes made on one dashboard on one space to be reflected on the dashboard on another space](https://discuss.elastic.co/t/reflect-changes-made-on-one-dashboard-on-one-space-to-be-reflected-on-the-dashboard-on-another-space/279469)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 1\ **Last updated:** [July 24, 2021, 12:14am UTC](https://discuss.elastic.co/t/reflect-changes-made-on-one-dashboard-on-one-space-to-be-reflected-on-the-dashboard-on-another-space/279469 "2021-07-24T00:14:27Z")
Hello, I have two spaces on kibana, one for admin user and one for the rest of the users (with limited privileges) . I had a couple of dashboards on the admin space that were exported to the user space , and was wonderi… --- ## [Perfomance optimization for nested aggregations](https://discuss.elastic.co/t/perfomance-optimization-for-nested-aggregations/279518)
**Author:** [@treasures78](https://discuss.elastic.co/u/treasures78)\ **Replies:** 0\ **Last updated:** [July 23, 2021, 11:45pm UTC](https://discuss.elastic.co/t/perfomance-optimization-for-nested-aggregations/279518 "2021-07-23T23:45:41Z")
Hi, please help me figure out, is there any way to optimize this request? At the moment, the request is being executed for about 30-40 seconds. The index stores information about the call history. The query builds a re… --- ## [Observability Engineer Lab 3.3 - Empty Columns](https://discuss.elastic.co/t/observability-engineer-lab-3-3-empty-columns/279130)
**Author:** [@TonyY](https://discuss.elastic.co/u/TonyY)\ **Replies:** 2\ **Last updated:** [July 23, 2021, 11:51pm UTC](https://discuss.elastic.co/t/observability-engineer-lab-3-3-empty-columns/279130 "2021-07-23T23:51:51Z")
Hi, I'm working on the Oberservability Engineer lab. In Task 3.3 the lab document shows a column "event.dataset" which is filled with "mysql.error". In my environment this column is empty. In the next step I'm asked to… --- ## [Can Kibana Visualise Data in Cold/Frozen Tier?](https://discuss.elastic.co/t/can-kibana-visualise-data-in-cold-frozen-tier/279453)
**Author:** [@peteryann](https://discuss.elastic.co/u/peteryann)\ **Replies:** 1\ **Last updated:** [July 23, 2021, 11:40pm UTC](https://discuss.elastic.co/t/can-kibana-visualise-data-in-cold-frozen-tier/279453 "2021-07-23T23:40:02Z")
I understand data in the cold/frozen tiers are still searchable by Elasticsearch. Can Kibana visualisations visualise data that span indices across multiple tiers (e.g. warm/cold/frozen)? Is this transparent to the Kiban… --- ## [\[error\]\[data\]\[elasticsearch\] \[version\_conflict\_engine\_exception\]: \[search-telemetry:search-telemetry\]: version conflict, required seqNo \[14477\], primary term \[48\]. current document has seqNo \[14478\] and primary term \[48\]](https://discuss.elastic.co/t/error-data-elasticsearch-version-conflict-engine-exception-search-telemetry-search-telemetry-version-conflict-required-seqno-14477-primary-term-48-current-document-has-seqno-14478-and-primary-term-48/279447)
**Author:** [@hardik.rapidops](https://discuss.elastic.co/u/hardik.rapidops)\ **Replies:** 1\ **Last updated:** [July 23, 2021, 11:29pm UTC](https://discuss.elastic.co/t/error-data-elasticsearch-version-conflict-engine-exception-search-telemetry-search-telemetry-version-conflict-required-seqno-14477-primary-term-48-current-document-has-seqno-14478-and-primary-term-48/279447 "2021-07-23T23:29:30Z")
I am using kibana 7.10.2 and I can see the following error in logs. Is there any way to fix it? server log \[06:30:40.197\] \[error\]\[data\]\[elasticsearch\] \[version\_conflict\_engine\_exception\]: \[search-telemetry:search-t… --- ## [How to set auto-generated \_id to json field(csv column) in logstash file](https://discuss.elastic.co/t/how-to-set-auto-generated-id-to-json-field-csv-column-in-logstash-file/279482)
**Author:** [@Ashutosh2808](https://discuss.elastic.co/u/Ashutosh2808)\ **Replies:** 3\ **Last updated:** [July 23, 2021, 10:19pm UTC](https://discuss.elastic.co/t/how-to-set-auto-generated-id-to-json-field-csv-column-in-logstash-file/279482 "2021-07-23T22:19:51Z")
I've csv columns as below in logstash conf file: filter{ csv { columns =\> \["ResolutionId","IssueId"\] separator =\> "," skip\_header =\> "true" } mu… --- ## [Logstash Grok - Extract field if field exists & deleting character](https://discuss.elastic.co/t/logstash-grok-extract-field-if-field-exists-deleting-character/279492)
**Author:** [@gringorion](https://discuss.elastic.co/u/gringorion)\ **Replies:** 2\ **Last updated:** [July 23, 2021, 7:13pm UTC](https://discuss.elastic.co/t/logstash-grok-extract-field-if-field-exists-deleting-character/279492 "2021-07-23T19:13:38Z")
Hello Guys, My case is simple, but can't find the perfect response. I need to extract the field: user@domain into 2 fields. This step is OK: %{WORD:user}%{NOTSPACE:domain}? gives: { "user": "user", "domain": "@… --- ## [How to load json data into another json data structure](https://discuss.elastic.co/t/how-to-load-json-data-into-another-json-data-structure/279512)
**Author:** [@venkataraman](https://discuss.elastic.co/u/venkataraman)\ **Replies:** 1\ **Last updated:** [July 23, 2021, 6:33pm UTC](https://discuss.elastic.co/t/how-to-load-json-data-into-another-json-data-structure/279512 "2021-07-23T18:33:00Z")
Hello Everyone, I just need a help in loading data in a nested json format. I have a output something like this in the below format { "product" : "IPS" "Product\_Country" : "EMEA" "Tracking\_ID": "2335454523" "Start… --- ## [Logstash aggregate field and increase count](https://discuss.elastic.co/t/logstash-aggregate-field-and-increase-count/279454)
**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\ **Replies:** 3\ **Last updated:** [July 23, 2021, 6:10pm UTC](https://discuss.elastic.co/t/logstash-aggregate-field-and-increase-count/279454 "2021-07-23T18:10:49Z")
Hello everyone. I am again here. I would like to start thanking every single one one of you for this amazing community. Those days I was testing elasticsearch and logstash and I am just falling in love with how many th… --- ## [Change Timezone for a particular field "calldate"](https://discuss.elastic.co/t/change-timezone-for-a-particular-field-calldate/279493)
**Author:** [@rmartinez.rv](https://discuss.elastic.co/u/rmartinez.rv)\ **Replies:** 3\ **Last updated:** [July 23, 2021, 5:58pm UTC](https://discuss.elastic.co/t/change-timezone-for-a-particular-field-calldate/279493 "2021-07-23T17:58:38Z")
Hi. I'm using logstash jdbc to pull data from a mysql database. So far so good. This is part of the configuration file: input { jdbc { jdbc\_driver\_library =\> "/usr/share/java/mysql-connector-j… --- ## [Are the shingles in the search-as-you-type field type \*words\* or \*letters\*?](https://discuss.elastic.co/t/are-the-shingles-in-the-search-as-you-type-field-type-words-or-letters/279463)
**Author:** [@Markus\_Jevring](https://discuss.elastic.co/u/Markus_Jevring)\ **Replies:** 2\ **Last updated:** [July 23, 2021, 12:24pm UTC](https://discuss.elastic.co/t/are-the-shingles-in-the-search-as-you-type-field-type-words-or-letters/279463 "2021-07-23T12:24:03Z")
I assumed they were letters, but I can't get the field to behave the way I want (which is to have it support infix searches, like searching for "ethylpre" should match "methylprednisolone"). --- ## [Logstash URL parameter as tags](https://discuss.elastic.co/t/logstash-url-parameter-as-tags/279285)
**Author:** [@juanmav](https://discuss.elastic.co/u/juanmav)\ **Replies:** 7\ **Last updated:** [July 23, 2021, 9:22am UTC](https://discuss.elastic.co/t/logstash-url-parameter-as-tags/279285 "2021-07-23T09:22:28Z")
Hi all, I have this working configuration that receives logs from heroku and process then using grok and add a couple of tags from enviroments vars. input { http { port =\> "${PORT}" tags =\> \["${TAG}… --- ## [Failure load balance](https://discuss.elastic.co/t/failure-load-balance/279373)
**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\ **Replies:** 4\ **Last updated:** [July 23, 2021, 9:16am UTC](https://discuss.elastic.co/t/failure-load-balance/279373 "2021-07-23T09:16:10Z")
Hi all, New, RHEL based, 5-node elasticsearch cluster installed here (ver 7.13.3). Elasticsearch clients are Logstash and some In-house applications. My main concern is node failure. I know that logstash would load b… --- ## [How to lower the score of documents that match a specific field and value using ElasticSearch DSL C#](https://discuss.elastic.co/t/how-to-lower-the-score-of-documents-that-match-a-specific-field-and-value-using-elasticsearch-dsl-c/279459)
**Author:** [@Jay2](https://discuss.elastic.co/u/Jay2)\ **Replies:** 0\ **Last updated:** [July 23, 2021, 8:48am UTC](https://discuss.elastic.co/t/how-to-lower-the-score-of-documents-that-match-a-specific-field-and-value-using-elasticsearch-dsl-c/279459 "2021-07-23T08:48:41Z")
When I carry out a search I look for documents with a lang code of 'en' and 'gen', im trying to ensure that the 'en' ones appear before the 'gen' ones do. So after looking around, I found this Boosting that might fit the… --- ## [Problem after upgrade to 7.13.3 "source primary is allocated on another node" and CLONE\_TEMP\_TO\_TARGET -\> CLONE\_TEMP\_TO\_TARGET](https://discuss.elastic.co/t/problem-after-upgrade-to-7-13-3-source-primary-is-allocated-on-another-node-and-clone-temp-to-target-clone-temp-to-target/279404)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 1\ **Last updated:** [July 23, 2021, 8:48am UTC](https://discuss.elastic.co/t/problem-after-upgrade-to-7-13-3-source-primary-is-allocated-on-another-node-and-clone-temp-to-target-clone-temp-to-target/279404 "2021-07-23T08:48:23Z")
After we upgraded Elastic from 7.9 to 7.13.3 (on VM Centos7) all elasticsearch nodes has started but we couldnt start kibana the reason was it tries to migrate .kibana which si blocked by error "source primary is all… --- ## [ElasticSearch doesn't support date math for alias when create index template yet?](https://discuss.elastic.co/t/elasticsearch-doesnt-support-date-math-for-alias-when-create-index-template-yet/279368)
**Author:** [@JohnPhilip](https://discuss.elastic.co/u/JohnPhilip)\ **Replies:** 3\ **Last updated:** [July 23, 2021, 8:27am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-support-date-math-for-alias-when-create-index-template-yet/279368 "2021-07-23T08:27:19Z")
It seems that date math support index alias names in 7.13, but using date math when creating index template is still wrong, here is the curl cmd and result I get when create template with date math alias #cmd curl -XPUT… --- ## [Error handling geopoint values](https://discuss.elastic.co/t/error-handling-geopoint-values/279337)
**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 3\ **Last updated:** [July 23, 2021, 7:53am UTC](https://discuss.elastic.co/t/error-handling-geopoint-values/279337 "2021-07-23T07:53:06Z")
Hi all For geopoint fields, is ignore\_malformed option the proper way to keep non-geopoint formats not indexed? My concern is whether there is any performance impact if my data has a lot of null and out of range latl… --- ## [LOGSTASH - GSUB - DOESN'T MATCH](https://discuss.elastic.co/t/logstash-gsub-doesnt-match/279227)
**Author:** [@Daniel\_Lopez](https://discuss.elastic.co/u/Daniel_Lopez)\ **Replies:** 13\ **Last updated:** [July 23, 2021, 7:18am UTC](https://discuss.elastic.co/t/logstash-gsub-doesnt-match/279227 "2021-07-23T07:18:27Z")
Hi I tried to change a value in a field for use it like id but i couldn't modify the field value with gsub The data i have in the field is like this: rId = ABC0\_L123456\_789012 and only data i want is 123456 from rId, t… --- ## [TSVB Tophits aggregation for strings doesn't work](https://discuss.elastic.co/t/tsvb-tophits-aggregation-for-strings-doesnt-work/278802)
**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\ **Replies:** 5\ **Last updated:** [July 23, 2021, 6:31am UTC](https://discuss.elastic.co/t/tsvb-tophits-aggregation-for-strings-doesnt-work/278802 "2021-07-23T06:31:34Z")
Hello, I'm using Kibana 7.13.2. This is my data - POST tsvb/\_bulk?refresh {"index":{}} { "date":"2021-07-14T00:03:13.679+02:00","words":\["rain", "thunder"\],"type":"monsoon"} {"index":{}} {"date":"2021-07-14T00:03:13.… --- ## [Parse springboot logs using logstash](https://discuss.elastic.co/t/parse-springboot-logs-using-logstash/279422)
**Author:** [@Nikparab](https://discuss.elastic.co/u/Nikparab)\ **Replies:** 8\ **Last updated:** [July 23, 2021, 5:44am UTC](https://discuss.elastic.co/t/parse-springboot-logs-using-logstash/279422 "2021-07-23T05:44:25Z")
Hi Team, I need to parse below logs using logstash. I used grok but it is giving parsingerror. Grok- filter { grok { match =\> {"message" =\> "%{TIMESTAMP\_ISO8601:timestamp} %{LOGLEVEL:loglevel} %{JAVACLASS:logclass} … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=873) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=875)