# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=892

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 893

---

## [Route indexing requests to a specific node instead of a shard](https://discuss.elastic.co/t/route-indexing-requests-to-a-specific-node-instead-of-a-shard/277939)

<div class="topic-metadata">

**Author:** [@Joel4](https://discuss.elastic.co/u/Joel4)\
**Replies:** 8\
**Last updated:** [July 6, 2021, 1:09pm UTC](https://discuss.elastic.co/t/route-indexing-requests-to-a-specific-node-instead-of-a-shard/277939 "2021-07-06T13:09:00Z")

</div>

Hi, I searched through the docs but I could not find a way to route index requests to a specific node, instead of a specific shard. If routing to a specific node is not possible, then is it possible to create shard-node…

---

## [Send to different Logstash pipelines based on input](https://discuss.elastic.co/t/send-to-different-logstash-pipelines-based-on-input/277959)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 1\
**Last updated:** [July 6, 2021, 1:08pm UTC](https://discuss.elastic.co/t/send-to-different-logstash-pipelines-based-on-input/277959 "2021-07-06T13:08:57Z")

</div>

Hi i have two logstash pipelines in Pipelines.yml. I need to redirect events to appropriate pipelines based on input. If input is "abc", send to pipeline "pipeline 1", else send to "pipeline2". I cant handle this at sou…

---

## [Icons in Datatable](https://discuss.elastic.co/t/icons-in-datatable/277958)

<div class="topic-metadata">

**Author:** [@PradeepJ](https://discuss.elastic.co/u/PradeepJ)\
**Replies:** 1\
**Last updated:** [July 6, 2021, 1:05pm UTC](https://discuss.elastic.co/t/icons-in-datatable/277958 "2021-07-06T13:05:31Z")

</div>

Hi, I want to add icons in datatable. Can anyone help me with this?(It can be as part of a column value or a seperate column for icons)

---

## [Kibana dashboard having no index pattern issue](https://discuss.elastic.co/t/kibana-dashboard-having-no-index-pattern-issue/277954)

<div class="topic-metadata">

**Author:** [@Megalith\_Marlin](https://discuss.elastic.co/u/Megalith_Marlin)\
**Replies:** 1\
**Last updated:** [July 6, 2021, 12:15pm UTC](https://discuss.elastic.co/t/kibana-dashboard-having-no-index-pattern-issue/277954 "2021-07-06T12:15:29Z")

</div>

Hi i have created a dashboard with some visualization and add the dashboard to a new space.the i create a new user and give access only to that dashboard nut when i logged into the new account i see an error which says c…

---

## [Cannot start ES inside LXC using \_site\_ (error shows memory issue)](https://discuss.elastic.co/t/cannot-start-es-inside-lxc-using-site-error-shows-memory-issue/277735)

<div class="topic-metadata">

**Author:** [@johnmarkcausing](https://discuss.elastic.co/u/johnmarkcausing)\
**Replies:** 12\
**Last updated:** [July 6, 2021, 12:07pm UTC](https://discuss.elastic.co/t/cannot-start-es-inside-lxc-using-site-error-shows-memory-issue/277735 "2021-07-06T12:07:52Z")

</div>

Hi, I can't seem to start ES inside my Centos 7 container. I am using mac --\> multipass --\> LXD --\> LXC centos7. So I can start ES with no errors if I remove site in my yml config like this: network.host: \["\_local\_"\] B…

---

## [Http filter plugin adds \_jsonparsefailure in tag](https://discuss.elastic.co/t/http-filter-plugin-adds-jsonparsefailure-in-tag/277744)

<div class="topic-metadata">

**Author:** [@priyaankaa](https://discuss.elastic.co/u/priyaankaa)\
**Replies:** 4\
**Last updated:** [July 6, 2021, 9:47am UTC](https://discuss.elastic.co/t/http-filter-plugin-adds-jsonparsefailure-in-tag/277744 "2021-07-06T09:47:55Z")

</div>

My logstash pipeline - input { elasticsearch { hosts =\> "http://localhost:9200" index =\> "s1test-processcode-temp" user =\> "elastic" password =\> "elastic" schedule =\> "\*/10 \* \* \* \*" } } filter { j…

---

## [org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for \[indices:data/write/bulk\[s\]\[r\]\]](https://discuss.elastic.co/t/org-elasticsearch-common-breaker-circuitbreakingexception-parent-data-too-large-data-for-indices-data-write-bulk-s-r/275660)

<div class="topic-metadata">

**Author:** [@Vdm88](https://discuss.elastic.co/u/Vdm88)\
**Replies:** 13\
**Last updated:** [July 6, 2021, 10:14am UTC](https://discuss.elastic.co/t/org-elasticsearch-common-breaker-circuitbreakingexception-parent-data-too-large-data-for-indices-data-write-bulk-s-r/275660 "2021-07-06T10:14:55Z")

</div>

Cluster always get CircuitBreakingException after update to ES7.13. -Xms31g -Xmx31g 14-:-XX:+UseG1GC 14-:-XX:G1ReservePercent=25 14-:-XX:InitiatingHeapOccupancyPercent=30 We checked and we have no huge query execut…

---

## [Indices Creation](https://discuss.elastic.co/t/indices-creation/277949)

<div class="topic-metadata">

**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\
**Replies:** 0\
**Last updated:** [July 6, 2021, 10:46am UTC](https://discuss.elastic.co/t/indices-creation/277949 "2021-07-06T10:46:42Z")

</div>

I am trying to collect logs from linux, windows, network devices, firewall and Azure. How can I have separate index for each of these sources? what is the best practice? I have logstash configured but for now it is con…

---

## [What version a node is?](https://discuss.elastic.co/t/what-version-a-node-is/277821)

<div class="topic-metadata">

**Author:** [@Daniel\_Seixas](https://discuss.elastic.co/u/Daniel_Seixas)\
**Replies:** 4\
**Last updated:** [July 6, 2021, 10:01am UTC](https://discuss.elastic.co/t/what-version-a-node-is/277821 "2021-07-06T10:01:55Z")

</div>

Hi, Hope you can help me here. I did an upgrade of ES a few months ago to ES7.x . I was creating a new index but wanted to maintain the old one. The problem I have is that I cannot use the older index, not sure what we…

---

## [ECS for observability](https://discuss.elastic.co/t/ecs-for-observability/277940)

<div class="topic-metadata">

**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\
**Replies:** 0\
**Last updated:** [July 6, 2021, 9:17am UTC](https://discuss.elastic.co/t/ecs-for-observability/277940 "2021-07-06T09:17:10Z")

</div>

Hi, I have custom infrastructure metrics logs and wanted to display in inventory section in metrics tab. I have referred the below link for ecs mapping: https://www.elastic.co/guide/en/infrastructure/guide/7.4/infrast…

---

## [Uptime App Simple Status Alert](https://discuss.elastic.co/t/uptime-app-simple-status-alert/277881)

<div class="topic-metadata">

**Author:** [@ephemeric](https://discuss.elastic.co/u/ephemeric)\
**Replies:** 6\
**Last updated:** [July 6, 2021, 9:06am UTC](https://discuss.elastic.co/t/uptime-app-simple-status-alert/277881 "2021-07-06T09:06:09Z")

</div>

Hi, In the Uptime app if I enable a status alert (Simple status alert), it prompts me to configure a default connector under settings. I don't see an Email connector available? If I configure an Index connector as defa…

---

## [How to index percolator field via logstash and json\_encode filter?](https://discuss.elastic.co/t/how-to-index-percolator-field-via-logstash-and-json-encode-filter/277860)

<div class="topic-metadata">

**Author:** [@akb](https://discuss.elastic.co/u/akb)\
**Replies:** 1\
**Last updated:** [July 6, 2021, 8:26am UTC](https://discuss.elastic.co/t/how-to-index-percolator-field-via-logstash-and-json-encode-filter/277860 "2021-07-06T08:26:44Z")

</div>

I'm trying to index documents and populate a percolator field via logstash: Index definition PUT test\_percolate { "mappings": { "\_doc": { "properties": { "search\_name": { "type": "text" …

---

## [APM for Kibana](https://discuss.elastic.co/t/apm-for-kibana/277813)

<div class="topic-metadata">

**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\
**Replies:** 2\
**Last updated:** [July 6, 2021, 8:06am UTC](https://discuss.elastic.co/t/apm-for-kibana/277813 "2021-07-06T08:06:22Z")

</div>

Hi there, I wonder if it is possibile to use APM agent to monitor Kibana to use the user experience metrics for tuning the environment. Beacuse often the monitoring metric are not enough to do an analysis. Thank you ve…

---

## [Where does host.name come from?](https://discuss.elastic.co/t/where-does-host-name-come-from/277855)

<div class="topic-metadata">

**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\
**Replies:** 2\
**Last updated:** [July 6, 2021, 7:50am UTC](https://discuss.elastic.co/t/where-does-host-name-come-from/277855 "2021-07-06T07:50:23Z")

</div>

Hi! I have fileabeat and logstash to send Nginx data to elasticsearch. I do not have “host.name” field in my logs, but when I discover my index patterns, I see this field. Where does it come from? How does elasticsearch …

---

## [Crawling domains listed in an external file](https://discuss.elastic.co/t/crawling-domains-listed-in-an-external-file/277797)

<div class="topic-metadata">

**Author:** [@Kiran\_Shashi](https://discuss.elastic.co/u/Kiran_Shashi)\
**Replies:** 2\
**Last updated:** [July 6, 2021, 7:10am UTC](https://discuss.elastic.co/t/crawling-domains-listed-in-an-external-file/277797 "2021-07-06T07:10:29Z")

</div>

Hi Everyone, My project has all the domains listed in an external CSV file. Can elastic enterprise search engine load all the domains from this file and use it for crawling ?

---

## [How to get same ordered data from elasticsearch as it was indexed](https://discuss.elastic.co/t/how-to-get-same-ordered-data-from-elasticsearch-as-it-was-indexed/277843)

<div class="topic-metadata">

**Author:** [@user11](https://discuss.elastic.co/u/user11)\
**Replies:** 4\
**Last updated:** [July 6, 2021, 7:02am UTC](https://discuss.elastic.co/t/how-to-get-same-ordered-data-from-elasticsearch-as-it-was-indexed/277843 "2021-07-06T07:02:37Z")

</div>

I would like to retrieve documents from elasticsearch in the same order as it was indexed. Timestamp won't work because there will be collisions. Sequence number won't work because it is unique only per shard. Does ela…

---

## [Remove heading](https://discuss.elastic.co/t/remove-heading/277792)

<div class="topic-metadata">

**Author:** [@ANKITA\_SAHA](https://discuss.elastic.co/u/ANKITA_SAHA)\
**Replies:** 2\
**Last updated:** [July 6, 2021, 6:39am UTC](https://discuss.elastic.co/t/remove-heading/277792 "2021-07-06T06:39:19Z")

</div>

I want to remove the headings of columns that come under keyword when pushing dataset in kibana. For eg - I have column named 'Hour' with values as 1,2,3,4.... Now in 'Hour.keyword' values that i am getting are Hour,1…

---

## [Custom plug-in how to implement Map and Set types of Settings](https://discuss.elastic.co/t/custom-plug-in-how-to-implement-map-and-set-types-of-settings/277719)

<div class="topic-metadata">

**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\
**Replies:** 6\
**Last updated:** [July 6, 2021, 6:12am UTC](https://discuss.elastic.co/t/custom-plug-in-how-to-implement-map-and-set-types-of-settings/277719 "2021-07-06T06:12:54Z")

</div>

I want to develop a plugin that needs to use the Settings API to save some state across the cluster, these states are of Set type and Map type, but I can't find the relevant API to set, can anyone help me to see how to d…

---

## [Indicator matching rule recommendation](https://discuss.elastic.co/t/indicator-matching-rule-recommendation/277829)

<div class="topic-metadata">

**Author:** [@Ameer\_Mukadam](https://discuss.elastic.co/u/Ameer_Mukadam)\
**Replies:** 2\
**Last updated:** [July 6, 2021, 6:07am UTC](https://discuss.elastic.co/t/indicator-matching-rule-recommendation/277829 "2021-07-06T06:07:38Z")

</div>

Are there any recommendations regarding the use of indicator matching rules? I have ingesting threat intel data using the threat intel module from filebeat. Whenever I enable a rule to match logs to IOC the performance…

---

## [Processor network\_direction in filebeat](https://discuss.elastic.co/t/processor-network-direction-in-filebeat/277900)

<div class="topic-metadata">

**Author:** [@sureshboiina](https://discuss.elastic.co/u/sureshboiina)\
**Replies:** 0\
**Last updated:** [July 6, 2021, 5:16am UTC](https://discuss.elastic.co/t/processor-network-direction-in-filebeat/277900 "2021-07-06T05:16:46Z")

</div>

Hi, Actually we want to implement the network\_direction in filebeat processor for that we added below lines # ================================= Processors ================================= processors: - add\_host\_meta…

---

## [ES terminated without any error message](https://discuss.elastic.co/t/es-terminated-without-any-error-message/277771)

<div class="topic-metadata">

**Author:** [@Jennny06](https://discuss.elastic.co/u/Jennny06)\
**Replies:** 2\
**Last updated:** [July 6, 2021, 3:25am UTC](https://discuss.elastic.co/t/es-terminated-without-any-error-message/277771 "2021-07-06T03:25:58Z")

</div>

Hi, I am using version 7.13.2. I am setting up ES on remote server. ES worked for me last week, however, today when I tried to start it, it won't open anymore. It always shows Terminated or stop right after it shows JVM …

---

## [ElasticSearch username as Null](https://discuss.elastic.co/t/elasticsearch-username-as-null/277081)

<div class="topic-metadata">

**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\
**Replies:** 6\
**Last updated:** [July 6, 2021, 2:58am UTC](https://discuss.elastic.co/t/elasticsearch-username-as-null/277081 "2021-07-06T02:58:48Z")

</div>

Hi, We configured ElasticSearch with Oracle CMS(WCC 12c) for a Single Node Elasticsearch on Linux. and migrated ~4 Million contents to this newer CMS. The configurations seems correct and username is set however noticed …

---

## [Ingest data via Modbus and BACnet communication protocols to Elastic](https://discuss.elastic.co/t/ingest-data-via-modbus-and-bacnet-communication-protocols-to-elastic/277598)

<div class="topic-metadata">

**Author:** [@Valdos116](https://discuss.elastic.co/u/Valdos116)\
**Replies:** 0\
**Last updated:** [July 1, 2021, 8:56pm UTC](https://discuss.elastic.co/t/ingest-data-via-modbus-and-bacnet-communication-protocols-to-elastic/277598 "2021-07-01T20:56:08Z")

</div>

Hi Team, I'm trying to ingest data from field devices that talk Modbus TCP and BACnet IP to Elastic Logstash. Any help would be appreciated. Thanks

---

## [Disk usage threshold](https://discuss.elastic.co/t/disk-usage-threshold/277328)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 5\
**Last updated:** [July 6, 2021, 1:35am UTC](https://discuss.elastic.co/t/disk-usage-threshold/277328 "2021-07-06T01:35:29Z")

</div>

I'm planning integrate Elasticsearch as a single node cluster per application server. Application server is getting hosted in customer environment. For disk threshold, I'm planning to use only disk flood\_stage configura…

---

## [반복문을 사용한 csv 데이터 insert 방법](https://discuss.elastic.co/t/csv-insert/277883)

<div class="topic-metadata">

**Author:** [@111488](https://discuss.elastic.co/u/111488)\
**Replies:** 1\
**Last updated:** [July 6, 2021, 1:09am UTC](https://discuss.elastic.co/t/csv-insert/277883 "2021-07-06T01:09:40Z")

</div>

안녕하세요 엘라스틱 서치를 사용해서 대용량 csv 파일을 실시간 데이터인 것처럼 활용하려고 합니다. datetime 형식의 타임 인덱스를 기반으로 100개 미만의 컬럼을 갖은 데이터 셋을 1초(또는 1분)마다 한줄씩 append를 하려고 합니다. 대량의 데이터를 한번에 삽입하는 것이 아닌, 인덱스를 기준으로 특정 주기마다 한 줄씩 삽입하는 방법을 알고 싶습니다.

---

## [Elasticsearch index size less then dataset disk space](https://discuss.elastic.co/t/elasticsearch-index-size-less-then-dataset-disk-space/277872)

<div class="topic-metadata">

**Author:** [@Fradi](https://discuss.elastic.co/u/Fradi)\
**Replies:** 1\
**Last updated:** [July 5, 2021, 11:28pm UTC](https://discuss.elastic.co/t/elasticsearch-index-size-less-then-dataset-disk-space/277872 "2021-07-05T23:28:29Z")

</div>

Hello there, I have elasticsearch version 7.10.1, I work on the file from MeDAL Dataset | Kaggle full\_data.csv 14.12 GB I divided it into 179 csv files containing 300,000 lines each and loaded them into elasticsearch. H…

---

## [Install Elasticsearch on Ubuntu Core](https://discuss.elastic.co/t/install-elasticsearch-on-ubuntu-core/277559)

<div class="topic-metadata">

**Author:** [@vadd98](https://discuss.elastic.co/u/vadd98)\
**Replies:** 3\
**Last updated:** [July 5, 2021, 11:23pm UTC](https://discuss.elastic.co/t/install-elasticsearch-on-ubuntu-core/277559 "2021-07-05T23:23:42Z")

</div>

Hi there, I'm working on a project using a Raspberry Pi 4 and Ubuntu Core. I need to use Elasticsearch for my project, but I'm being blocked by the need to install Elasticsearch using Snap. I can't find any Elasticsear…

---

## [Elastic.console unable to connect](https://discuss.elastic.co/t/elastic-console-unable-to-connect/277865)

<div class="topic-metadata">

**Author:** [@Sahithi\_V](https://discuss.elastic.co/u/Sahithi_V)\
**Replies:** 0\
**Last updated:** [July 5, 2021, 4:22pm UTC](https://discuss.elastic.co/t/elastic-console-unable-to-connect/277865 "2021-07-05T16:22:34Z")

</div>

Continuing the discussion from ElasticSearch Query with Powershell Invoke-RestMethod: hi @forloop/ Paul, I tried the same module ie elastic.console to invoke web request using PS \> es http://172.44.222.44:5601/\_cat/in…

---

## [Kibana Discover view is very slow after upgrade - not compressing HTTP responses](https://discuss.elastic.co/t/kibana-discover-view-is-very-slow-after-upgrade-not-compressing-http-responses/276991)

<div class="topic-metadata">

**Author:** [@salvoj](https://discuss.elastic.co/u/salvoj)\
**Replies:** 9\
**Last updated:** [July 5, 2021, 8:28pm UTC](https://discuss.elastic.co/t/kibana-discover-view-is-very-slow-after-upgrade-not-compressing-http-responses/276991 "2021-07-05T20:28:34Z")

</div>

We have updated from 7.4.0 to 7.13.2 a few days ago. Performance in Discover view has greatly deteriorated. Query times are still good. Problem seems to be the long time it takes to render page: Query time: 1.3 sec T…

---

## [Gzip compression results to uncompressable package](https://discuss.elastic.co/t/gzip-compression-results-to-uncompressable-package/277867)

<div class="topic-metadata">

**Author:** [@yodog](https://discuss.elastic.co/u/yodog)\
**Replies:** 1\
**Last updated:** [July 5, 2021, 6:49pm UTC](https://discuss.elastic.co/t/gzip-compression-results-to-uncompressable-package/277867 "2021-07-05T18:49:41Z")

</div>

so, after a few years, any way to work around this problem? same problem on logstash 7.13.1 zgrep '2021' zimbra.log.2021-01-30-1613154813.gz gzip: zimbra.log.2021-01-30-1613154813.gz: invalid compressed data--forma…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=891)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=893)
