# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=926 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 927 --- ## [Is there a way to rebalance data nodes by disk space and not shards?](https://discuss.elastic.co/t/is-there-a-way-to-rebalance-data-nodes-by-disk-space-and-not-shards/274799)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 4\ **Last updated:** [June 3, 2021, 9:39pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-rebalance-data-nodes-by-disk-space-and-not-shards/274799 "2021-06-03T21:39:47Z")
Is there a way to rebalance data nodes by disk space and not shards? I have a cluster that has a total of 846 indices but 273 of them have KBs of data while the rest have around 7GBs each since they rollover at 7GB. Thi… --- ## [Increase logstash performance](https://discuss.elastic.co/t/increase-logstash-performance/274923)
**Author:** [@Kfiro](https://discuss.elastic.co/u/Kfiro)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 8:57pm UTC](https://discuss.elastic.co/t/increase-logstash-performance/274923 "2021-06-03T20:57:38Z")
Hi, I'm sending events from my SIEM system to logstash. sending SYSLOG CEF over tcp 5000-10000 EPS (events per second) my logstash hardware: 16 Giga RAM 8 CPU 100 Giga SSD My logstash don't ingest all data and cra… --- ## [Reading Cluster Settings in Plugin](https://discuss.elastic.co/t/reading-cluster-settings-in-plugin/274920)
**Author:** [@jessebs](https://discuss.elastic.co/u/jessebs)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 8:32pm UTC](https://discuss.elastic.co/t/reading-cluster-settings-in-plugin/274920 "2021-06-03T20:32:12Z")
I am writing a plugin and would like to configure it through the cluster settings API. I found some examples of using a non-default plugin constructor which receives Settings, but these settings only seem to contain wha… --- ## [Occasional Index Management timeout](https://discuss.elastic.co/t/occasional-index-management-timeout/273969)
**Author:** [@ethompson](https://discuss.elastic.co/u/ethompson)\ **Replies:** 10\ **Last updated:** [June 3, 2021, 7:18pm UTC](https://discuss.elastic.co/t/occasional-index-management-timeout/273969 "2021-06-03T19:18:11Z")
Occasionally (generally at least once per day) when attempting to access data in Kibana, I'll get a strange series of timeouts. I generally first notice it because Discover view gets an error saying "Error: Could not loc… --- ## [Winlogbeat or Endpoint Security](https://discuss.elastic.co/t/winlogbeat-or-endpoint-security/274909)
**Author:** [@lepepa9493](https://discuss.elastic.co/u/lepepa9493)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 6:20pm UTC](https://discuss.elastic.co/t/winlogbeat-or-endpoint-security/274909 "2021-06-03T18:20:36Z")
hi! What is the difference between the data winlogbeat and endpoint security send? Do I need both? Thanks for your advice --- ## [RE: "File structure cannot be determined" - Visualize data from a log file](https://discuss.elastic.co/t/re-file-structure-cannot-be-determined-visualize-data-from-a-log-file/274671)
**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Replies:** 4\ **Last updated:** [June 3, 2021, 6:16pm UTC](https://discuss.elastic.co/t/re-file-structure-cannot-be-determined-visualize-data-from-a-log-file/274671 "2021-06-03T18:16:51Z")
Hello everyone, I keep on getting a "File structure cannot be determined" error message whenever I try to manually upload a JSON .txt and/or .csv wayy under 100MB (as pictured). Links to dataset: KDD Cup 1999 Data NSL-… --- ## [Logs de DEBUG: Removing ban for the parent](https://discuss.elastic.co/t/logs-de-debug-removing-ban-for-the-parent/274771)
**Author:** [@Cristian1988](https://discuss.elastic.co/u/Cristian1988)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 6:09pm UTC](https://discuss.elastic.co/t/logs-de-debug-removing-ban-for-the-parent/274771 "2021-06-03T18:09:52Z")
Buenas tardes, Desde ayer observamos que se producen unos logs en todos los nodos del cluster informando lo siguiente: {"type": "server", "timestamp": "2021-06-02T14:25:33,171Z", "level": "DEBUG", "component": "o.e.a.… --- ## [Dynamically creating a Kibana dashboard](https://discuss.elastic.co/t/dynamically-creating-a-kibana-dashboard/274903)
**Author:** [@blackberrySherbet](https://discuss.elastic.co/u/blackberrySherbet)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 6:00pm UTC](https://discuss.elastic.co/t/dynamically-creating-a-kibana-dashboard/274903 "2021-06-03T18:00:00Z")
I want my users to run a script (bash or python or anything) with some data as input and that script should create a new Kibana dashboard for the user to visualize the data they gave the script as input. How can I do thi… --- ## [Discover is not working for range between \ - "now "](https://discuss.elastic.co/t/discover-is-not-working-for-range-between-date-now/274641)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 4:52pm UTC](https://discuss.elastic.co/t/discover-is-not-working-for-range-between-date-now/274641 "2021-06-03T16:52:22Z")
I have a strange problem. In discovery tab, if I specify time between lets say Jun 1, 2021@ 07:56:46 -\> now I get no results However if I search Jun 1, 2021@ 07:56:46 -\>Jun 1, 2021@ 10:00:46 everyth… --- ## [Problem with detection \[rules\]](https://discuss.elastic.co/t/problem-with-detection-rules/274443)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 4:51pm UTC](https://discuss.elastic.co/t/problem-with-detection-rules/274443 "2021-06-03T16:51:55Z")
I have successfully transferred logs from winlog to logstash on prem to elastic/kibana cloud. I have created index pattern and discovered data. In order to test if everything works fine I went have created a new user on … --- ## [Kibana - FATAL ERROR: Zone Allocation failed - process out of memory](https://discuss.elastic.co/t/kibana-fatal-error-zone-allocation-failed-process-out-of-memory/274893)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 4:34pm UTC](https://discuss.elastic.co/t/kibana-fatal-error-zone-allocation-failed-process-out-of-memory/274893 "2021-06-03T16:34:04Z")
Hello all, Hope you are doing well! I have been struggling with starting Kibana server from yesterday. so after starting Elasticsearch cluster, when i start Kibana, it takes hours and gives me the following errors. can … --- ## [🎉 Elastic Stack 7.13 released](https://discuss.elastic.co/t/elastic-stack-7-13-released/274899)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 4:23pm UTC](https://discuss.elastic.co/t/elastic-stack-7-13-released/274899 "2021-06-03T16:23:09Z")
New in Elastic 7.13 Search massive amounts of data cost-effectively with searchable snapshots and the new frozen tier. Plus, find and deploy Elastic directly from the Microsoft Azure console and natively integrate data f… --- ## [Logstash date filter](https://discuss.elastic.co/t/logstash-date-filter/274864)
**Author:** [@Kamikaze\_K](https://discuss.elastic.co/u/Kamikaze_K)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 3:49pm UTC](https://discuss.elastic.co/t/logstash-date-filter/274864 "2021-06-03T15:49:40Z")
I have logs that I am parsing and the date does not contain the year which should be default current year. The field that I get after grok etc is 06/25 11:33:19.9 PM and 06/25 11:33:19.9 PM etc I am trying to use the d… --- ## [Elasticsearch](https://discuss.elastic.co/t/elasticsearch/274889)
**Author:** [@Roshaan\_Zafar](https://discuss.elastic.co/u/Roshaan_Zafar)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 2:48pm UTC](https://discuss.elastic.co/t/elasticsearch/274889 "2021-06-03T14:48:54Z")
Hi I just wanted to know that is elasticsearch platinum only cloud based not locally? Actually I am asking because I need to connect odbc elastic with power bi and it supports elasticsearch platinum only while I wanted… --- ## [Parsing json logs using logstash](https://discuss.elastic.co/t/parsing-json-logs-using-logstash/274240)
**Author:** [@learningelk](https://discuss.elastic.co/u/learningelk)\ **Replies:** 10\ **Last updated:** [June 3, 2021, 2:15pm UTC](https://discuss.elastic.co/t/parsing-json-logs-using-logstash/274240 "2021-06-03T14:15:03Z")
Hi I want to parse the json logs using logstash and send them to elastic .There are multiple nested fields in my logs but I want very specific fields for eg , here is my log format : { "\_index": "ekslogs-2021.05.27", … --- ## [Logstash data not visible in Kibana](https://discuss.elastic.co/t/logstash-data-not-visible-in-kibana/274880)
**Author:** [@Reszel](https://discuss.elastic.co/u/Reszel)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 2:05pm UTC](https://discuss.elastic.co/t/logstash-data-not-visible-in-kibana/274880 "2021-06-03T14:05:38Z")
Hello guys, I'm newbie to ELK and i was trying to connect Logstash to Kibana/Elastic with my own configuration. Logstash seems to be running, but Kibana can't see any data, when i try to create index pattern. Here is my … --- ## [Metrcbeat withlogstach](https://discuss.elastic.co/t/metrcbeat-withlogstach/274877)
**Author:** [@mohamed\_el\_mannouti](https://discuss.elastic.co/u/mohamed_el_mannouti)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 1:45pm UTC](https://discuss.elastic.co/t/metrcbeat-withlogstach/274877 "2021-06-03T13:45:33Z")
logs not found to kibana --- ## [Scheduler Java Input plugin Logstash](https://discuss.elastic.co/t/scheduler-java-input-plugin-logstash/274876)
**Author:** [@aalagia](https://discuss.elastic.co/u/aalagia)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 1:37pm UTC](https://discuss.elastic.co/t/scheduler-java-input-plugin-logstash/274876 "2021-06-03T13:37:17Z")
Hi, I try to write a java plugin for Logstash, i need to schedule my program with a parameter passed in the configuration file. I tried to use the Java Timer for this but doesn't work. The pipeline execute the code but … --- ## [Xml filter Xpath not Working](https://discuss.elastic.co/t/xml-filter-xpath-not-working/274847)
**Author:** [@venmaniselvan](https://discuss.elastic.co/u/venmaniselvan)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 12:21pm UTC](https://discuss.elastic.co/t/xml-filter-xpath-not-working/274847 "2021-06-03T12:21:20Z")
Hello, I have the following below XML: \ \CUSTINQ2104001\ \MOB\ \abcfinance:referenceNumConsumer\ \ **Author:** [@schawla](https://discuss.elastic.co/u/schawla)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 11:27am UTC](https://discuss.elastic.co/t/pagination-with-field-collapse/274863 "2021-06-03T11:27:01Z") How is it possible to implement pagination in elastic search when we are field collapsing and returning top 5 results from each index. GET /my-index-000001/\_search { "query": { "match": { "message": "GET /se… --- ## [Logstash - beats input - NullPointerException](https://discuss.elastic.co/t/logstash-beats-input-nullpointerexception/274862)
**Author:** [@George\_Kossionis](https://discuss.elastic.co/u/George_Kossionis)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 11:19am UTC](https://discuss.elastic.co/t/logstash-beats-input-nullpointerexception/274862 "2021-06-03T11:19:28Z")
Using the following filebeat config in OCP: filebeat.autodiscover: providers: - type: kubernetes node: ${NODE\_NAME} templates: - condition: equals: … --- ## [Elasticsearch-rest-high-level-client-6.8.13 vs Elastic server 7.5.2](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-6-8-13-vs-elastic-server-7-5-2/274707)
**Author:** [@Prabaharan\_Kathiresa](https://discuss.elastic.co/u/Prabaharan_Kathiresa)\ **Replies:** 1\ **Last updated:** [June 3, 2021, 10:33am UTC](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-6-8-13-vs-elastic-server-7-5-2/274707 "2021-06-03T10:33:16Z")
Hi Team We are trying to upgrade elastic server from 6.8.5 to 7.5.2. Now our micro services are using elasticsearch-rest-high-level-client version 6.8.13. We don't see any problems in communication between elastic serv… --- ## [Automatic indexing data from MySQL to Kibana](https://discuss.elastic.co/t/automatic-indexing-data-from-mysql-to-kibana/274849)
**Author:** [@pablixelastic](https://discuss.elastic.co/u/pablixelastic)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 10:18am UTC](https://discuss.elastic.co/t/automatic-indexing-data-from-mysql-to-kibana/274849 "2021-06-03T10:18:26Z")
Hi there, I want to know which tool do i have to use to automatically index data from my MySQL table (where i also do changes in the existing data) to my index in Kibana. I've been trying modifying the mysql.conf and t… --- ## [Create dynamically type](https://discuss.elastic.co/t/create-dynamically-type/274788)
**Author:** [@Abdoul\_Kande](https://discuss.elastic.co/u/Abdoul_Kande)\ **Replies:** 5\ **Last updated:** [June 3, 2021, 10:12am UTC](https://discuss.elastic.co/t/create-dynamically-type/274788 "2021-06-03T10:12:00Z")
How can i create dynamically type in index ? Or in \_doc, create multiple \_type --- ## [Automatic indexing data from MySQL to Kibana](https://discuss.elastic.co/t/automatic-indexing-data-from-mysql-to-kibana/274760)
**Author:** [@pablixelastic](https://discuss.elastic.co/u/pablixelastic)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 10:11am UTC](https://discuss.elastic.co/t/automatic-indexing-data-from-mysql-to-kibana/274760 "2021-06-03T10:11:01Z")
Hi there, I want to know which tool do i have to use to automatically index data from my MySQL table (where i also do changes in the existing data) to my index in Kibana. I've been trying modifying the mysql.conf and t… --- ## [Problème de communication entre elasticsearch et nuxeo : Erreur lors de la lecture de \[aggregates\]](https://discuss.elastic.co/t/probleme-de-communication-entre-elasticsearch-et-nuxeo-erreur-lors-de-la-lecture-de-aggregates/274835)
**Author:** [@EAmel](https://discuss.elastic.co/u/EAmel)\ **Replies:** 2\ **Last updated:** [June 3, 2021, 10:07am UTC](https://discuss.elastic.co/t/probleme-de-communication-entre-elasticsearch-et-nuxeo-erreur-lors-de-la-lecture-de-aggregates/274835 "2021-06-03T10:07:09Z")
Bonjour, J'ai un problème de communication entre ES et nuxeo; depuis la plateforme nuxeo quand je clique sur l'onglet “Recherche” ou l'onglet “Elasticsearch” dans le menu “Admin” ça bug et j'ai eu le message d'erreur qu… --- ## [Multi phase deduplication on query-time](https://discuss.elastic.co/t/multi-phase-deduplication-on-query-time/274846)
**Author:** [@osmanmesutozcan](https://discuss.elastic.co/u/osmanmesutozcan)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 9:40am UTC](https://discuss.elastic.co/t/multi-phase-deduplication-on-query-time/274846 "2021-06-03T09:40:42Z")
Alright so I think I have a somewhat interesting query problem to solve. Any help is appreciated. I need to do a multi phase deduplication on query time. To elaborate more, my data is shared between multiple tenants and… --- ## [Aggregation fails silently when ran on huge data, instead of error returns the default response of 10 docs and hits](https://discuss.elastic.co/t/aggregation-fails-silently-when-ran-on-huge-data-instead-of-error-returns-the-default-response-of-10-docs-and-hits/273412)
**Author:** [@rohit.shisode](https://discuss.elastic.co/u/rohit.shisode)\ **Replies:** 5\ **Last updated:** [June 3, 2021, 9:38am UTC](https://discuss.elastic.co/t/aggregation-fails-silently-when-ran-on-huge-data-instead-of-error-returns-the-default-response-of-10-docs-and-hits/273412 "2021-06-03T09:38:22Z")
Stack details - ES version - 7.10.1 Kibana version - 7.10.1 Java high level client version - 7.2.0 I have a production cluster of 4 nodes where huge amounts of data is stored in one of the index (approx 30M+ docs, ea… --- ## [\[ANNOUNCEMENT\] - Elasticsearch Beyonder 7.13 released](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-7-13-released/274837)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 8:56am UTC](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-7-13-released/274837 "2021-06-03T08:56:21Z")
The Elasticsearch Beyonder team is pleased to announce the elasticsearch-beyonder-7.13 release! Elasticsearch Beyonder Elasticsearch beyonder provides automatic index, mapping, alias or template creation when an elasti… --- ## [Elasticsearch Split Processor preserve\_trailing value](https://discuss.elastic.co/t/elasticsearch-split-processor-preserve-trailing-value/274836)
**Author:** [@jeje232](https://discuss.elastic.co/u/jeje232)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 8:41am UTC](https://discuss.elastic.co/t/elasticsearch-split-processor-preserve-trailing-value/274836 "2021-06-03T08:41:26Z")
Hi, I have the follwing message and try to to split values and remove at the same time the empty value with preserve\_trailing: Members\[ xxx.xxx.xxx.xxx:xxxx … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=925) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=927)