# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=911 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 912 --- ## [My Elastic Stack Observability Wishlist](https://discuss.elastic.co/t/my-elastic-stack-observability-wishlist/276168)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 10:14am UTC](https://discuss.elastic.co/t/my-elastic-stack-observability-wishlist/276168 "2021-06-17T10:14:52Z")
(Note, these are my personal wishes, not my workplace's.) Since we started a trial at my workplace, I've been digging into everything the Elastic Stack has to offer. Mostly focused on Observability. Here are some ideas… --- ## [Парсинг поля "message"](https://discuss.elastic.co/t/message/275279)
**Author:** [@tonik](https://discuss.elastic.co/u/tonik)\ **Replies:** 2\ **Last updated:** [June 17, 2021, 9:57am UTC](https://discuss.elastic.co/t/message/275279 "2021-06-17T09:57:41Z")
Добрый день. Вопрос таков, имеется поле "message" которое изменяется по количеству содержащихся данных и мне при этом нужно выделять поле, которое периодически встречается. Думал сначала через grok но потом понял, что н… --- ## [Json format returned in search how to parse into fields?](https://discuss.elastic.co/t/json-format-returned-in-search-how-to-parse-into-fields/276201)
**Author:** [@KS\_123](https://discuss.elastic.co/u/KS_123)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 9:55am UTC](https://discuss.elastic.co/t/json-format-returned-in-search-how-to-parse-into-fields/276201 "2021-06-17T09:55:58Z")
excuse me if I don't havethe correct terms but, I have this format from a search I am doing in kibana: How do I turn the gateway, rssi,snr in metrics like the messageTime is in the same pic? Can this be done at thi… --- ## [Best practices for fine tuning performance when it comes to Elasticsearch, Logstash and Kibana?](https://discuss.elastic.co/t/best-practices-for-fine-tuning-performance-when-it-comes-to-elasticsearch-logstash-and-kibana/273913)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 21\ **Last updated:** [June 17, 2021, 8:22am UTC](https://discuss.elastic.co/t/best-practices-for-fine-tuning-performance-when-it-comes-to-elasticsearch-logstash-and-kibana/273913 "2021-06-17T08:22:01Z")
Hello We have a Elastic Stack setup. Our basic architecture is based on this: Beats/source/etc -\> Logstash -\> Elasticsearch. Meaning, all incoming data always passes thru Logstash first. We have created various Logst… --- ## [Configuration for master node in YAML](https://discuss.elastic.co/t/configuration-for-master-node-in-yaml/275975)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 5\ **Last updated:** [June 17, 2021, 8:15am UTC](https://discuss.elastic.co/t/configuration-for-master-node-in-yaml/275975 "2021-06-17T08:15:45Z")
Hi Team, I have configured big cluster in my production env. just wanted to confirm do we need to allocate half of memory in master node also. Suppose i have 16G node and do i need to allocate 8G in jvm options file wha… --- ## [Optimizing shard placement for indexing](https://discuss.elastic.co/t/optimizing-shard-placement-for-indexing/276227)
**Author:** [@Timur\_Makarchuk](https://discuss.elastic.co/u/Timur_Makarchuk)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 7:49am UTC](https://discuss.elastic.co/t/optimizing-shard-placement-for-indexing/276227 "2021-06-17T07:49:20Z")
Good day, everyone! I'm currently working on a tool that would spread indices in our cluster to spread indexing load more optimally, as inspired by this article (Optimal Shard Placement in a Petabyte Scale Elasticsearch… --- ## [Logstash How to read only name of the file](https://discuss.elastic.co/t/logstash-how-to-read-only-name-of-the-file/276096)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 2\ **Last updated:** [June 17, 2021, 6:27am UTC](https://discuss.elastic.co/t/logstash-how-to-read-only-name-of-the-file/276096 "2021-06-17T06:27:27Z")
Hi I'am new to elasticsearch. I wanted to know if there was a possible way to read only the names of the files and ignore the contents inside (I must ignore it to prevent error. I saw this posts but it didn't work for m… --- ## [Problem in connecting to Elasticsearch using Python script](https://discuss.elastic.co/t/problem-in-connecting-to-elasticsearch-using-python-script/276130)
**Author:** [@ravi-shanker](https://discuss.elastic.co/u/ravi-shanker)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 6:17am UTC](https://discuss.elastic.co/t/problem-in-connecting-to-elasticsearch-using-python-script/276130 "2021-06-17T06:17:42Z")
Hello All, I have a 3 node elastic cluster setup on EC2. I am trying to connect to my cluster and index some sample data using python script. Below is my python script: - from elasticsearch import Elasticsearch es=Ela… --- ## [Elasticsearch 7.13 2 nodes cluster](https://discuss.elastic.co/t/elasticsearch-7-13-2-nodes-cluster/276079)
**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\ **Replies:** 6\ **Last updated:** [June 17, 2021, 5:29am UTC](https://discuss.elastic.co/t/elasticsearch-7-13-2-nodes-cluster/276079 "2021-06-17T05:29:37Z")
Hi I have two nodes(xnode1, xnode2) cluster on elasticsearch 7.13. I made cluster succesfully, it showing 2 nodes in cluster. For testing i stop xnode2, it showing 1 node cluster. but when stop xnode1 , then try curl w… --- ## [Wrong fields are comimg](https://discuss.elastic.co/t/wrong-fields-are-comimg/276136)
**Author:** [@stark](https://discuss.elastic.co/u/stark)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 4:50am UTC](https://discuss.elastic.co/t/wrong-fields-are-comimg/276136 "2021-06-17T04:50:18Z")
boosting terms have higher precedence than keyword i search for eg if i search keyword 'index" top fields contain this word in description and lower fields contain keyword in title but i boost title field why this issue … --- ## [Master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster version 7.13.2](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-version-7-13-2/276211)
**Author:** [@Senshuken\_GG](https://discuss.elastic.co/u/Senshuken_GG)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 3:00am UTC](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-version-7-13-2/276211 "2021-06-17T03:00:49Z")
Node 1 172.24.10.103 Node 1 172.24.10.101 Description: 1.Elasticsearch version 7.13 Elasticsearch cluster 2 Node issue is master\_not\_discovered\_exception Node 1 Config elasticsearch.yml cluster.name: POWER-CLUS… --- ## [High CPU usage because lucene merge thread](https://discuss.elastic.co/t/high-cpu-usage-because-lucene-merge-thread/276209)
**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\ **Replies:** 5\ **Last updated:** [June 17, 2021, 3:01am UTC](https://discuss.elastic.co/t/high-cpu-usage-because-lucene-merge-thread/276209 "2021-06-17T03:01:36Z")
My operation process is as follows: At 3 am everyday, program try to index data to ES, that usually takes 3 hours. During the indexing process, I will set the number\_of\_replicas parameter to 0, and when data indexing is… --- ## [Can Elastic send the api to jp1 customer the alert and recovery like servicenow?](https://discuss.elastic.co/t/can-elastic-send-the-api-to-jp1-customer-the-alert-and-recovery-like-servicenow/276102)
**Author:** [@T1330](https://discuss.elastic.co/u/T1330)\ **Replies:** 3\ **Last updated:** [June 17, 2021, 2:02am UTC](https://discuss.elastic.co/t/can-elastic-send-the-api-to-jp1-customer-the-alert-and-recovery-like-servicenow/276102 "2021-06-17T02:02:38Z")
Elastic obtain the alert and updated alert by ServiceNow api. Is it also available to have jp1 customer updated alert like ServiceNow in elastic. Please let's us know if you have any customer jp1 using elastic. I ap… --- ## [Split field in elastic](https://discuss.elastic.co/t/split-field-in-elastic/276069)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 6\ **Last updated:** [June 17, 2021, 1:46am UTC](https://discuss.elastic.co/t/split-field-in-elastic/276069 "2021-06-17T01:46:50Z")
Hi all, I have a little problems that needed solving. I have a field dns domain dns.question.name has value like this: a.b.c.d Now i want to split this domain into many other domain like tld, sld ..... dynamically wit… --- ## [How can send large json file (62.5 GO) to elasticsearch using Api?](https://discuss.elastic.co/t/how-can-send-large-json-file-62-5-go-to-elasticsearch-using-api/276111)
**Author:** [@hana\_sk](https://discuss.elastic.co/u/hana_sk)\ **Replies:** 3\ **Last updated:** [June 17, 2021, 1:15am UTC](https://discuss.elastic.co/t/how-can-send-large-json-file-62-5-go-to-elasticsearch-using-api/276111 "2021-06-17T01:15:09Z")
i'm stuck. how can send large json file (62.5 GO) to elasticsearch using Api? --- ## [Threadpool.bulk.size key ignored](https://discuss.elastic.co/t/threadpool-bulk-size-key-ignored/276124)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 1:14am UTC](https://discuss.elastic.co/t/threadpool-bulk-size-key-ignored/276124 "2021-06-17T01:14:34Z")
Hey there, using an old ES version (2.x) I was trying to use a custom configuration regarding threadpool. currently, nodes have 8 processors. This value is correctly recognized by ES but when I try to increase it, noth… --- ## [Improvement of Average Response time](https://discuss.elastic.co/t/improvement-of-average-response-time/276163)
**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 1:08am UTC](https://discuss.elastic.co/t/improvement-of-average-response-time/276163 "2021-06-17T01:08:25Z")
Hi All, I have setup elasticsearch on k8s using eck operator. Throughput is fine but response time(average response time) is little high. How can I improve it? by allocating more cpu/ram to data nodes will improve it? K… --- ## [Isolate parallel requests to Elasticsearch](https://discuss.elastic.co/t/isolate-parallel-requests-to-elasticsearch/275996)
**Author:** [@daksh0225](https://discuss.elastic.co/u/daksh0225)\ **Replies:** 3\ **Last updated:** [June 17, 2021, 12:51am UTC](https://discuss.elastic.co/t/isolate-parallel-requests-to-elasticsearch/275996 "2021-06-17T00:51:38Z")
Hi all, I want to run a set of test classes for my application in parallel. Inside each of the test class, the functions make calls to elasticsearch. Currently the problem I am facing in running the tests in parallel is… --- ## [Large cluster on vm vs bare metal](https://discuss.elastic.co/t/large-cluster-on-vm-vs-bare-metal/276017)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [June 17, 2021, 12:50am UTC](https://discuss.elastic.co/t/large-cluster-on-vm-vs-bare-metal/276017 "2021-06-17T00:50:44Z")
What would be better run on vm or on bare metal? metricbeat getting large set of data, about billion document a day, 100+ gig data, data will be feed by three logstash spec I was making was 8 data node, three master a… --- ## [JDBC Input last value overlap](https://discuss.elastic.co/t/jdbc-input-last-value-overlap/276188)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [June 16, 2021, 9:23pm UTC](https://discuss.elastic.co/t/jdbc-input-last-value-overlap/276188 "2021-06-16T21:23:24Z")
Is it possible to set the sql\_last\_value parameter to go back a set amount of time. So something like :sql\_last\_value(-10s) or something like that. I'm querying a db and getting anything that's been updated since the l… --- ## [Top Hit doesnt work in TSVB table](https://discuss.elastic.co/t/top-hit-doesnt-work-in-tsvb-table/275169)
**Author:** [@Harsha\_Mudundi](https://discuss.elastic.co/u/Harsha_Mudundi)\ **Replies:** 3\ **Last updated:** [June 16, 2021, 9:20pm UTC](https://discuss.elastic.co/t/top-hit-doesnt-work-in-tsvb-table/275169 "2021-06-16T21:20:40Z")
Hi, In TSVB table im not able to display any string type data using top hit. In the image below I have 1 user for every job id. --- ## [Cannot download csv file from kibana dashboard](https://discuss.elastic.co/t/cannot-download-csv-file-from-kibana-dashboard/275336)
**Author:** [@Moni\_Kherajani](https://discuss.elastic.co/u/Moni_Kherajani)\ **Replies:** 11\ **Last updated:** [June 16, 2021, 9:17pm UTC](https://discuss.elastic.co/t/cannot-download-csv-file-from-kibana-dashboard/275336 "2021-06-16T21:17:58Z")
I use 7.8.0 version and while downloading csv report from kibana dashboard it says cannot download your report at this moment. I have the proper user and user roles. Any reason!!? --- ## [Scroll or sliced scroll with sorted results](https://discuss.elastic.co/t/scroll-or-sliced-scroll-with-sorted-results/276199)
**Author:** [@jratliff](https://discuss.elastic.co/u/jratliff)\ **Replies:** 0\ **Last updated:** [June 16, 2021, 9:04pm UTC](https://discuss.elastic.co/t/scroll-or-sliced-scroll-with-sorted-results/276199 "2021-06-16T21:04:26Z")
I'm trying to pull results from elasticsearch with a sort. There are millions of records within each time period I'm looking at. It's taking a very long time to fetch all of the results. I'm looking for ways to improve t… --- ## [How to parse dir command output from txt file and append filenames to directory](https://discuss.elastic.co/t/how-to-parse-dir-command-output-from-txt-file-and-append-filenames-to-directory/276185)
**Author:** [@baileys20055](https://discuss.elastic.co/u/baileys20055)\ **Replies:** 4\ **Last updated:** [June 16, 2021, 8:33pm UTC](https://discuss.elastic.co/t/how-to-parse-dir-command-output-from-txt-file-and-append-filenames-to-directory/276185 "2021-06-16T20:33:46Z")
Hello, I am trying to parse dir command txt files that are formatted as follows: Directory of C:\\Windows\\addins 09/15/2018 02:33 AM \ . 09/15/2018 02:33 AM \ .. 09/15/2018 02:29 AM… --- ## [{{#context.alerts}} not showing up in markdown](https://discuss.elastic.co/t/context-alerts-not-showing-up-in-markdown/276177)
**Author:** [@EvanGertis](https://discuss.elastic.co/u/EvanGertis)\ **Replies:** 2\ **Last updated:** [June 16, 2021, 8:11pm UTC](https://discuss.elastic.co/t/context-alerts-not-showing-up-in-markdown/276177 "2021-06-16T20:11:24Z")
I am trying to create a simple notification based off of the post described here: {{#context.alerts}} - \*Beat Name\*: {noformat}{{beat.name}}{noformat} {{/context.alerts}} However, the context.alerts block is not get… --- ## [How to update index in Elasticsearch](https://discuss.elastic.co/t/how-to-update-index-in-elasticsearch/275773)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 6\ **Last updated:** [June 16, 2021, 7:14pm UTC](https://discuss.elastic.co/t/how-to-update-index-in-elasticsearch/275773 "2021-06-16T19:14:37Z")
Hi All, I have an ELK 7.6.2 stack running in the environment. In my setup logstash is set to ingest file as an input and performs certain operations on it and creates an index in ES. First few lines of the logstash co… --- ## [Kibana Scripted Field URL Template](https://discuss.elastic.co/t/kibana-scripted-field-url-template/275417)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 1\ **Last updated:** [June 16, 2021, 6:56pm UTC](https://discuss.elastic.co/t/kibana-scripted-field-url-template/275417 "2021-06-16T18:56:05Z")
I was using KIbana 7.4.2. At that time I use to fetch scripted field images as below /bundles/src/legacy/ui/public/field\_editor/components/field\_format\_editor/editors/url/icons/{{value}}.png"}. Now we upgraded Kibana t… --- ## [Bootstrap Error w/ Adding Runner to ECE Platform (v2.6.2) in ECE install script env "HOST\_STORAGE\_DEVICE\_PATH" when using AWS EFS (NFS4) as argument for "--host-storage-path"](https://discuss.elastic.co/t/bootstrap-error-w-adding-runner-to-ece-platform-v2-6-2-in-ece-install-script-env-host-storage-device-path-when-using-aws-efs-nfs4-as-argument-for-host-storage-path/275493)
**Author:** [@zedtran](https://discuss.elastic.co/u/zedtran)\ **Replies:** 1\ **Last updated:** [June 16, 2021, 6:27pm UTC](https://discuss.elastic.co/t/bootstrap-error-w-adding-runner-to-ece-platform-v2-6-2-in-ece-install-script-env-host-storage-device-path-when-using-aws-efs-nfs4-as-argument-for-host-storage-path/275493 "2021-06-16T18:27:08Z")
Hello, first post here. I tried to lookup existing topics, but found none that fit the description I was having. I manually downloaded the ECE script to my runner host and attempted to run the install script to add my ru… --- ## [Jest server API testing](https://discuss.elastic.co/t/jest-server-api-testing/275943)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 1\ **Last updated:** [June 16, 2021, 5:56pm UTC](https://discuss.elastic.co/t/jest-server-api-testing/275943 "2021-06-16T17:56:47Z")
Hello Team, I am new to the Javascript and Kibana. Based on the discussion on Sonarqube topic, i am trying to write a test case for basic hello-world plugin (generated by plugin generator) I want to achieve something … --- ## [Index variable substitution not working](https://discuss.elastic.co/t/index-variable-substitution-not-working/276169)
**Author:** [@devopscanada](https://discuss.elastic.co/u/devopscanada)\ **Replies:** 0\ **Last updated:** [June 16, 2021, 4:51pm UTC](https://discuss.elastic.co/t/index-variable-substitution-not-working/276169 "2021-06-16T16:51:13Z")
I'm trying in Logstash to write different indices (see documentation) but Logtash wont' substitute the variables. My Logstash configuraiton: output { elasticsearch { hosts =\> \["http://elasticsearch-ma… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=910) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=912)