# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=893 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 894 --- ## [Linking separate log records](https://discuss.elastic.co/t/linking-separate-log-records/276680)
**Author:** [@kibanaquery](https://discuss.elastic.co/u/kibanaquery)\ **Replies:** 2\ **Last updated:** [July 5, 2021, 6:16pm UTC](https://discuss.elastic.co/t/linking-separate-log-records/276680 "2021-07-05T18:16:21Z")
Hi, I was wondering if is possible to perform a basic link function (either in Discover or Visualise)? All my records have a common identifier, say "LinkID", but only some records have "Type" and only some have "Colour… --- ## [Deleting Index and Reclaiming Space](https://discuss.elastic.co/t/deleting-index-and-reclaiming-space/277858)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 2\ **Last updated:** [July 5, 2021, 5:03pm UTC](https://discuss.elastic.co/t/deleting-index-and-reclaiming-space/277858 "2021-07-05T17:03:53Z")
Good Day, I have an a couple pretty big indexes that I need to delete. I know I can delete an index by using DELETE myindex the question is by simplying using the DELETE myindex command, will that be enough to delete t… --- ## [Http poller plugin automatically splits json response](https://discuss.elastic.co/t/http-poller-plugin-automatically-splits-json-response/277859)
**Author:** [@pjohnson](https://discuss.elastic.co/u/pjohnson)\ **Replies:** 0\ **Last updated:** [July 5, 2021, 3:54pm UTC](https://discuss.elastic.co/t/http-poller-plugin-automatically-splits-json-response/277859 "2021-07-05T15:54:01Z")
I'm using the http\_poller plugin with an endpoint that returns a json array and then I'm processing the response in a ruby script. It seems like http\_poller is automatically splitting the body into separate events for ea… --- ## [HTML in Kibana email action](https://discuss.elastic.co/t/html-in-kibana-email-action/277093)
**Author:** [@sireesha\_m](https://discuss.elastic.co/u/sireesha_m)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 3:18pm UTC](https://discuss.elastic.co/t/html-in-kibana-email-action/277093 "2021-07-05T15:18:08Z")
I have Kibana email action being triggered as a web hook from my Elastic watcher. The doc says markdown is supported. I have added the following for email payload: \`\`"message": "New alert created for asset motor\_pump\_… --- ## [Main problem with garbage collector](https://discuss.elastic.co/t/main-problem-with-garbage-collector/277656)
**Author:** [@angelogabeira](https://discuss.elastic.co/u/angelogabeira)\ **Replies:** 8\ **Last updated:** [July 5, 2021, 3:17pm UTC](https://discuss.elastic.co/t/main-problem-with-garbage-collector/277656 "2021-07-05T15:17:02Z")
guys, I really need help. I've researched a lot on the internet but I couldn't help myself. I have an ELK stack with an elasticsearch 6.5 server, running for 3 years. lately i have had a lot of problem with ingesting da… --- ## [HTTP Filter - Unnest Array](https://discuss.elastic.co/t/http-filter-unnest-array/277778)
**Author:** [@RoteEdition](https://discuss.elastic.co/u/RoteEdition)\ **Replies:** 2\ **Last updated:** [July 5, 2021, 2:22pm UTC](https://discuss.elastic.co/t/http-filter-unnest-array/277778 "2021-07-05T14:22:17Z")
Hi there, I need to unnest an array (based on the workaround mentioned in this previous thread) into seperate documents. I am calling an API and getting in return an array of results. Each of these results should prefe… --- ## [Gauge element issue with SQL query data](https://discuss.elastic.co/t/gauge-element-issue-with-sql-query-data/275884)
**Author:** [@qlikq](https://discuss.elastic.co/u/qlikq)\ **Replies:** 3\ **Last updated:** [July 5, 2021, 2:21pm UTC](https://discuss.elastic.co/t/gauge-element-issue-with-sql-query-data/275884 "2021-07-05T14:21:47Z")
Hello all, i am just starting with ELK, and i am struggling with understanding this part. Could someone point to some documentation, or explain what i am doing wrong ? I have create a gauge element, in the Data portion … --- ## [Delete Documents Index](https://discuss.elastic.co/t/delete-documents-index/277777)
**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 2:13pm UTC](https://discuss.elastic.co/t/delete-documents-index/277777 "2021-07-05T14:13:14Z")
Hi all!! I have read the documentation about the lifecicle but I have a simple question about it. Is possible delete the documents after X days? I don't want to keep the docs because they are only to debug. Thanks for… --- ## [Kibana running slowly](https://discuss.elastic.co/t/kibana-running-slowly/277796)
**Author:** [@Andrea\_Bozzano](https://discuss.elastic.co/u/Andrea_Bozzano)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 1:02pm UTC](https://discuss.elastic.co/t/kibana-running-slowly/277796 "2021-07-05T13:02:20Z")
Hi everyone, I'm experiencing something in my test environment (1 master and 2 data nodes Elasticsearch, and 1machine with Logstash and Kibana, with enough resources for each node, v7.12 of the stack). When I login int… --- ## [Logstash buff/cache high utilization linux](https://discuss.elastic.co/t/logstash-buff-cache-high-utilization-linux/277836)
**Author:** [@Adixon\_Diaz](https://discuss.elastic.co/u/Adixon_Diaz)\ **Replies:** 0\ **Last updated:** [July 5, 2021, 12:57pm UTC](https://discuss.elastic.co/t/logstash-buff-cache-high-utilization-linux/277836 "2021-07-05T12:57:17Z")
Hi comunity, I'm seeing the utilization resources on my S.O Linux that I only use for Logstash. I could see that the buff/cache is very high. In another hand i would like to know if i configured correctly the utiliz… --- ## [Systemctl failing to start elasticsearch](https://discuss.elastic.co/t/systemctl-failing-to-start-elasticsearch/277220)
**Author:** [@bnason](https://discuss.elastic.co/u/bnason)\ **Replies:** 4\ **Last updated:** [July 5, 2021, 12:18pm UTC](https://discuss.elastic.co/t/systemctl-failing-to-start-elasticsearch/277220 "2021-07-05T12:18:25Z")
After upgrading to 7.13.2 from 7.12.1, using systemctl to start elasticsearch fails. \[root@elastic elasticsearch\]# systemctl status elasticsearch -l ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/sy… --- ## [Enrich policy match using wildcard or fuzzy search](https://discuss.elastic.co/t/enrich-policy-match-using-wildcard-or-fuzzy-search/277374)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 11:45am UTC](https://discuss.elastic.co/t/enrich-policy-match-using-wildcard-or-fuzzy-search/277374 "2021-07-05T11:45:58Z")
I have an ingest pipeline with an enrich policy and separate index (index B) Index B has entries that have a url and a number For each document i ingest via the pipeline i want to match with an entry in index B and ret… --- ## [Microsoft DNS - parsing different length of domain name](https://discuss.elastic.co/t/microsoft-dns-parsing-different-length-of-domain-name/277430)
**Author:** [@gmaimbourg](https://discuss.elastic.co/u/gmaimbourg)\ **Replies:** 4\ **Last updated:** [July 5, 2021, 11:45am UTC](https://discuss.elastic.co/t/microsoft-dns-parsing-different-length-of-domain-name/277430 "2021-07-05T11:45:32Z")
Hello, I'am working on Microsoft DNS log parsing and i don't know how can i parse different lengh of domain name. Here is different examples of what i want to get : (2)ui(12)powerreviews(3)com(0) into ui.powerreviews.… --- ## [How bucket the count into per second](https://discuss.elastic.co/t/how-bucket-the-count-into-per-second/277774)
**Author:** [@missylearner](https://discuss.elastic.co/u/missylearner)\ **Replies:** 2\ **Last updated:** [July 5, 2021, 11:21am UTC](https://discuss.elastic.co/t/how-bucket-the-count-into-per-second/277774 "2021-07-05T11:21:43Z")
Anyone knows how to query in the script to bucket the counts into seconds. because in kibana if we filter timestamp of the count by seconds it will automatically scale to 5 seconds. --- ## [\[400\] Bad request - Parsing Error on /\_field\_caps](https://discuss.elastic.co/t/400-bad-request-parsing-error-on-field-caps/275303)
**Author:** [@bcros](https://discuss.elastic.co/u/bcros)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 11:04am UTC](https://discuss.elastic.co/t/400-bad-request-parsing-error-on-field-caps/275303 "2021-07-05T11:04:50Z")
Hello, After \_reindex, i have the HTTP 400 error with response below, when trying to call /\_field\_caps?fields=\* or /target/\_field\_caps?fields=\*, whatever target is. Anyone have an idea how to fix this ? Did i miss so… --- ## [How far ACID properties are supported](https://discuss.elastic.co/t/how-far-acid-properties-are-supported/277802)
**Author:** [@sarthaksahu](https://discuss.elastic.co/u/sarthaksahu)\ **Replies:** 3\ **Last updated:** [July 5, 2021, 10:08am UTC](https://discuss.elastic.co/t/how-far-acid-properties-are-supported/277802 "2021-07-05T10:08:57Z")
How far ACID properties are supported by Elastic Search. --- ## [Kibana not upgrading from 7.12.0 to 7.13.2](https://discuss.elastic.co/t/kibana-not-upgrading-from-7-12-0-to-7-13-2/277649)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 2\ **Last updated:** [July 5, 2021, 10:02am UTC](https://discuss.elastic.co/t/kibana-not-upgrading-from-7-12-0-to-7-13-2/277649 "2021-07-05T10:02:00Z")
What did you do? I tried upgrading from 7.12.0 to 7.13.2 What did you expect to see? I expected the version to go to 7.13.2 What did you see instead? Under which circumstances? There was no change running kubectl ge… --- ## [\_update\_by\_query can't fill subfields in some documents](https://discuss.elastic.co/t/update-by-query-cant-fill-subfields-in-some-documents/277804)
**Author:** [@\_anton](https://discuss.elastic.co/u/_anton)\ **Replies:** 0\ **Last updated:** [July 5, 2021, 9:46am UTC](https://discuss.elastic.co/t/update-by-query-cant-fill-subfields-in-some-documents/277804 "2021-07-05T09:46:19Z")
After dinamically updating index mapping (I added new subfield with a lowercase normaliizer), I ran an \_update\_by\_query task to fill subfield with normalized values. However the task doesn't create subfield for several d… --- ## [Performance regression when using fast vector highlighting](https://discuss.elastic.co/t/performance-regression-when-using-fast-vector-highlighting/277788)
**Author:** [@rmchugh](https://discuss.elastic.co/u/rmchugh)\ **Replies:** 0\ **Last updated:** [July 5, 2021, 8:24am UTC](https://discuss.elastic.co/t/performance-regression-when-using-fast-vector-highlighting/277788 "2021-07-05T08:24:02Z")
Hiya, We are currently using the unified highlighter but have noticed some edge cases whereby the unified highlighter takes too long to return results in extremely large documents with lots of matches for a specific sea… --- ## [Error when trying to insert into the elastic index from java program](https://discuss.elastic.co/t/error-when-trying-to-insert-into-the-elastic-index-from-java-program/277787)
**Author:** [@karim.zahar](https://discuss.elastic.co/u/karim.zahar)\ **Replies:** 0\ **Last updated:** [July 5, 2021, 8:17am UTC](https://discuss.elastic.co/t/error-when-trying-to-insert-into-the-elastic-index-from-java-program/277787 "2021-07-05T08:17:50Z")
hello, I am getting the error bellow when trying to insert new rows into the elastic index, from a java program, the error is random: org.elasticsearch.client.transport.NoNodeAvailableException: None of the configured … --- ## [Error connecting to sql database](https://discuss.elastic.co/t/error-connecting-to-sql-database/277226)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 3\ **Last updated:** [July 5, 2021, 8:10am UTC](https://discuss.elastic.co/t/error-connecting-to-sql-database/277226 "2021-07-05T08:10:59Z")
I need help to connect to the sql server database. I downloaded a connector and already put n specific folder, but it's giving an error with the following. Note; I can already connect to mysql database but sql server w… --- ## [Elastic crash while import](https://discuss.elastic.co/t/elastic-crash-while-import/277593)
**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\ **Replies:** 2\ **Last updated:** [July 5, 2021, 8:10am UTC](https://discuss.elastic.co/t/elastic-crash-while-import/277593 "2021-07-05T08:10:03Z")
I have Elasticsearch installed so I am playing with it. I made a bash script which generates simple documents with name, title, perex and text fields (text is 100 sentences of lorem ipsum) and send it via \_bulk api to E… --- ## [Long search time with mget](https://discuss.elastic.co/t/long-search-time-with-mget/277062)
**Author:** [@TheWorkingDeveloper](https://discuss.elastic.co/u/TheWorkingDeveloper)\ **Replies:** 2\ **Last updated:** [July 5, 2021, 8:07am UTC](https://discuss.elastic.co/t/long-search-time-with-mget/277062 "2021-07-05T08:07:54Z")
I currently have a single node with SSD running an elastic cluster. 4B records split over 25 primary shards in a single index (no replication). The ID of every record has been manually set as it is unique and known bef… --- ## [Window event Log correlate with AD user info enquiry](https://discuss.elastic.co/t/window-event-log-correlate-with-ad-user-info-enquiry/277618)
**Author:** [@Peter\_Ch](https://discuss.elastic.co/u/Peter_Ch)\ **Replies:** 4\ **Last updated:** [July 5, 2021, 7:59am UTC](https://discuss.elastic.co/t/window-event-log-correlate-with-ad-user-info-enquiry/277618 "2021-07-05T07:59:56Z")
Dear All, I'm new to Elasticsearch. I am finding a solution that can help to perform log correlation. Here's my situation. I have a application using window event as log. In the window event log, it includes user name … --- ## [Oracle BLOB column with jdbc input to base64](https://discuss.elastic.co/t/oracle-blob-column-with-jdbc-input-to-base64/276830)
**Author:** [@alexanders](https://discuss.elastic.co/u/alexanders)\ **Replies:** 3\ **Last updated:** [July 5, 2021, 7:54am UTC](https://discuss.elastic.co/t/oracle-blob-column-with-jdbc-input-to-base64/276830 "2021-07-05T07:54:03Z")
When fetching an Oracle BLOB column with logstash's jdbc input, I try to convert it to base64 using the following filter: ruby { code =\> 'event.set("b64", Base64.strict\_encode64(event.get("blob\_column")))' } wh… --- ## [All in one on ubuntu64 OS Raspberry Pi 4 4G fails at elastic-operator](https://discuss.elastic.co/t/all-in-one-on-ubuntu64-os-raspberry-pi-4-4g-fails-at-elastic-operator/255733)
**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\ **Replies:** 11\ **Last updated:** [July 5, 2021, 7:48am UTC](https://discuss.elastic.co/t/all-in-one-on-ubuntu64-os-raspberry-pi-4-4g-fails-at-elastic-operator/255733 "2021-07-05T07:48:41Z")
I have been looking into this for some time. I created ELK which worked quite well on my Macbook Pro. It was using the Docker for Desktop installed kubernetes instance. After I add the all-in-one yaml and launch my fi… --- ## [Elasticsearch and Fluentd optimisation for log cluster](https://discuss.elastic.co/t/elasticsearch-and-fluentd-optimisation-for-log-cluster/277674)
**Author:** [@chitender](https://discuss.elastic.co/u/chitender)\ **Replies:** 3\ **Last updated:** [July 5, 2021, 7:14am UTC](https://discuss.elastic.co/t/elasticsearch-and-fluentd-optimisation-for-log-cluster/277674 "2021-07-05T07:14:55Z")
we are using Elasticsearch and Fluentd for Central logging platform. below is our Config details: Elasticsearch Cluster: Master Nodes: 64Gb Ram, 8 CPU, 9 instances Data Nodes: 64Gb Ram, 8 CPU, 40 instances Coordinator N… --- ## [Recover data from Inactive Cluster](https://discuss.elastic.co/t/recover-data-from-inactive-cluster/277731)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 5\ **Last updated:** [July 5, 2021, 6:35am UTC](https://discuss.elastic.co/t/recover-data-from-inactive-cluster/277731 "2021-07-05T06:35:19Z")
All my nodes in cluster except one went down. If I run \_cat/nodes in active node , its showing master\_not\_discovered exception. Im not even able to take backup. Backup fails with same error. Can I recover the data someh… --- ## [Http\_poller - URL from another field](https://discuss.elastic.co/t/http-poller-url-from-another-field/277722)
**Author:** [@RoteEdition](https://discuss.elastic.co/u/RoteEdition)\ **Replies:** 2\ **Last updated:** [July 5, 2021, 6:33am UTC](https://discuss.elastic.co/t/http-poller-url-from-another-field/277722 "2021-07-05T06:33:48Z")
Hi there, I am trying to get some data (regarding incoming calls) from an API. I am using http\_poller and everything seems to work. The Problem: The URL has a date parameter in it. I dont want to update the URL everyda… --- ## [What are the built-in index templates for log-\* & metrics-\* indices?](https://discuss.elastic.co/t/what-are-the-built-in-index-templates-for-log-metrics-indices/277766)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 2\ **Last updated:** [July 5, 2021, 5:58am UTC](https://discuss.elastic.co/t/what-are-the-built-in-index-templates-for-log-metrics-indices/277766 "2021-07-05T05:58:55Z")
Hi, I use elasticsearch-oss:7.8.0 and planning to upgrade to v7.10.2. Going through the breaking changes in newer versions, found that in 7.9, elasticsearch added built-in index templates for the metrics-\*-\* and logs-\*… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=892) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=894)