# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=938 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 939 --- ## [Logstash configuration error](https://discuss.elastic.co/t/logstash-configuration-error/273652)
**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 2:59am UTC](https://discuss.elastic.co/t/logstash-configuration-error/273652 "2021-05-25T02:59:34Z")
hello, I have a problem when I try to configure the logstash here are the errors that appear Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs erro… --- ## [Maximum shards per node](https://discuss.elastic.co/t/maximum-shards-per-node/273830)
**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 2:17am UTC](https://discuss.elastic.co/t/maximum-shards-per-node/273830 "2021-05-25T02:17:54Z")
Is there any option to disable the max\_shard\_per\_node in cluster settings in Elastic 7.12 as in the older version 6.5 there is no such values. Elastic 7.12 "cluster" : { "max\_shards\_per\_node" : "1000" } --- ## [Make idices](https://discuss.elastic.co/t/make-idices/273868)
**Author:** [@majidbarz](https://discuss.elastic.co/u/majidbarz)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 2:07am UTC](https://discuss.elastic.co/t/make-idices/273868 "2021-05-25T02:07:05Z")
HI I use winlogbeats i want to get log from winlogbeats and send to logstash then logstash import to elasticsearch. default in /etc/logstash/conf.d doesnt exist winlogbeat and i use pipelines.yaml and make new file but … --- ## [Words vs Guids, what is faster?](https://discuss.elastic.co/t/words-vs-guids-what-is-faster/273819)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 1:53am UTC](https://discuss.elastic.co/t/words-vs-guids-what-is-faster/273819 "2021-05-25T01:53:48Z")
I'm in front of a design choice where I would need a bit of help to choose the most efficient way. I'm currently indexing data tagged with a string of comma separated Guids, for example: \\"e659959d-392f-44c5-83a5-fb959… --- ## [Handlebars syntax in TSVB Markdown panel with conditional output for multiple items?](https://discuss.elastic.co/t/handlebars-syntax-in-tsvb-markdown-panel-with-conditional-output-for-multiple-items/273797)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 1:43am UTC](https://discuss.elastic.co/t/handlebars-syntax-in-tsvb-markdown-panel-with-conditional-output-for-multiple-items/273797 "2021-05-25T01:43:07Z")
Background I have two dashboards: Dashboard A is designed to present information about multiple items. Dashboard B is designed to present information about one of those items. Visualizations in dashboard A drill-down … --- ## [How to plan/define needed clusters](https://discuss.elastic.co/t/how-to-plan-define-needed-clusters/273514)
**Author:** [@agKaspar](https://discuss.elastic.co/u/agKaspar)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 12:25am UTC](https://discuss.elastic.co/t/how-to-plan-define-needed-clusters/273514 "2021-05-25T00:25:16Z")
Hello, I'm working on setting up an elastic search environment within a kubernetes cluster (on MS Azure AKS), and am reading through the Elastic Cloud on Kubernetes \[1.5\] | Elastic documentation. It explains how to setu… --- ## [Can I delete some indices manually from elasticsearch to free up some space?](https://discuss.elastic.co/t/can-i-delete-some-indices-manually-from-elasticsearch-to-free-up-some-space/273480)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 9\ **Last updated:** [May 25, 2021, 12:19am UTC](https://discuss.elastic.co/t/can-i-delete-some-indices-manually-from-elasticsearch-to-free-up-some-space/273480 "2021-05-25T00:19:16Z")
Hi All, I have indices from 1st Feb in elasticsearch. Everyday there on average 4 indices. It has consumed 79 GB space out of 100GB. Can I delete few of them to release space without impacting to anything? Thanks, --- ## [Error No Available connections logstash a elastic](https://discuss.elastic.co/t/error-no-available-connections-logstash-a-elastic/273568)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 4:47pm UTC](https://discuss.elastic.co/t/error-no-available-connections-logstash-a-elastic/273568 "2021-05-20T16:47:47Z")
Good morning, I have encountered the following error, and I do not know how to solve this problem in definitive; we have tried connections and everything is correct, we have tried telnetting to elastic and everything is … --- ## [How to send Elasticsearch 6.8 logs to syslog?](https://discuss.elastic.co/t/how-to-send-elasticsearch-6-8-logs-to-syslog/273621)
**Author:** [@sviscapi](https://discuss.elastic.co/u/sviscapi)\ **Replies:** 0\ **Last updated:** [May 21, 2021, 6:38am UTC](https://discuss.elastic.co/t/how-to-send-elasticsearch-6-8-logs-to-syslog/273621 "2021-05-21T06:38:58Z")
Dear all, First post on these boards :slight\_smile: I've been tasked to configure some Elasticsearch 6.8 server to send its logs to syslog. Based on the official documentation, I came up with the following in /etc/elas… --- ## [Reindexing of the same document](https://discuss.elastic.co/t/reindexing-of-the-same-document/273629)
**Author:** [@Renat\_Zamaletdinov](https://discuss.elastic.co/u/Renat_Zamaletdinov)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 12:06am UTC](https://discuss.elastic.co/t/reindexing-of-the-same-document/273629 "2021-05-25T00:06:54Z")
What will happen if we upsert an existing document with the same content and the same id? Will it trigger reindexing? Or it will detect that nothing is changed and will do nothing? --- ## [Logstash data is tripled](https://discuss.elastic.co/t/logstash-data-is-tripled/273671)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 0\ **Last updated:** [May 21, 2021, 2:08pm UTC](https://discuss.elastic.co/t/logstash-data-is-tripled/273671 "2021-05-21T14:08:44Z")
Hello, I am monitoring several computers in different configurations in logstash, they are for 1 minute that I send data from logstash to kibana, but I have seen in discover that the data are appearing tripled and I have… --- ## [Way to easily compare two custom time/dates](https://discuss.elastic.co/t/way-to-easily-compare-two-custom-time-dates/273867)
**Author:** [@Tydorius](https://discuss.elastic.co/u/Tydorius)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 12:00am UTC](https://discuss.elastic.co/t/way-to-easily-compare-two-custom-time-dates/273867 "2021-05-25T00:00:16Z")
I am working to monitor network performance during a series of experiments. I'll be running identical experiments on various network configurations and would like to compare them. Is there an easy way to configure a das… --- ## [Search all fields for a string](https://discuss.elastic.co/t/search-all-fields-for-a-string/273846)
**Author:** [@vinholla](https://discuss.elastic.co/u/vinholla)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 11:57pm UTC](https://discuss.elastic.co/t/search-all-fields-for-a-string/273846 "2021-05-24T23:57:27Z")
I am unable to get any results GET /earnings\_transcripts/\_search { "query": { "bool": { "must": \[ { "match\_phrase": { "presentationContent.componentText": "inflation" } } \] } } } my index data looks "\_ind… --- ## [Ruby code works in an online IDE but not in logstash pipeline](https://discuss.elastic.co/t/ruby-code-works-in-an-online-ide-but-not-in-logstash-pipeline/273874)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 10:47pm UTC](https://discuss.elastic.co/t/ruby-code-works-in-an-online-ide-but-not-in-logstash-pipeline/273874 "2021-05-24T22:47:41Z")
\`Hi, Im using ruby scan method to get the values of some metrics in a line examples: 73% virtual memory used,4442MB virtual memory free,0.10955 pages-sec\` 0% swap space used,6125MB swap space free,0 pages-sec; 88% phys… --- ## [Automatic restart of logstash](https://discuss.elastic.co/t/automatic-restart-of-logstash/273860)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 6\ **Last updated:** [May 24, 2021, 9:00pm UTC](https://discuss.elastic.co/t/automatic-restart-of-logstash/273860 "2021-05-24T21:00:31Z")
I would like the logstash service to restart automatically every Tuesday at 8:00 p.m. What type of configuration can you offer me? --- ## [Failed to deploy Endpoint on Windows Server 2008 R2 Standard](https://discuss.elastic.co/t/failed-to-deploy-endpoint-on-windows-server-2008-r2-standard/273704)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 7\ **Last updated:** [May 24, 2021, 8:14pm UTC](https://discuss.elastic.co/t/failed-to-deploy-endpoint-on-windows-server-2008-r2-standard/273704 "2021-05-24T20:14:13Z")
Hi, Notes: Running ELK 7.11.2 Standalone OS Windows Server 2008 R2 Standard I am deploying the Elastic Endpoint on several servers. On servers running OS Windows Server 2012 R2 Datacenter and Windows Server 2019 Data… --- ## [Best way to aggregate terms from a text field with type text](https://discuss.elastic.co/t/best-way-to-aggregate-terms-from-a-text-field-with-type-text/273864)
**Author:** [@thedraketaylor](https://discuss.elastic.co/u/thedraketaylor)\ **Replies:** 0\ **Last updated:** [May 24, 2021, 8:09pm UTC](https://discuss.elastic.co/t/best-way-to-aggregate-terms-from-a-text-field-with-type-text/273864 "2021-05-24T20:09:28Z")
I'm using Elasticsearch to hold descriptions of products I get from scraping sites. I have a description field in my index to hold the data and it's of type "text" because I want to search in those fields. Now, I find my… --- ## [URGENT , please help with creating a new engine](https://discuss.elastic.co/t/urgent-please-help-with-creating-a-new-engine/273660)
**Author:** [@Jan\_Orange](https://discuss.elastic.co/u/Jan_Orange)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 6:13pm UTC](https://discuss.elastic.co/t/urgent-please-help-with-creating-a-new-engine/273660 "2021-05-24T18:13:40Z")
Hello I deleted an engine by accident, is there a way to restore it again ? And if not , how can i recreate an engine with the same name ? because it refuses , it says : Name cannot be reused , i really needed Thanks… --- ## [Automatically index from an Elasticsearch index](https://discuss.elastic.co/t/automatically-index-from-an-elasticsearch-index/273666)
**Author:** [@EricPSU](https://discuss.elastic.co/u/EricPSU)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 5:33pm UTC](https://discuss.elastic.co/t/automatically-index-from-an-elasticsearch-index/273666 "2021-05-24T17:33:02Z")
I realize there is no way to use an Elasticsearch index as a source for Enterprise Search (App or Workplace). That's unfortunate and hopefully that changes in the future. Is there an "easy" way to re-index an existing … --- ## [Better search result with relevant data with prioritization](https://discuss.elastic.co/t/better-search-result-with-relevant-data-with-prioritization/273849)
**Author:** [@Gopal\_Chauhan](https://discuss.elastic.co/u/Gopal_Chauhan)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 4:32pm UTC](https://discuss.elastic.co/t/better-search-result-with-relevant-data-with-prioritization/273849 "2021-05-24T16:32:21Z")
Hi , I am trying to improve relevant search. I have list of fields (around 21) with priority order(total fields in document arnd 120). Those fields need to get more priority as compare to others during search. I am usi… --- ## [Kibana print to PDF issues after upgrading to 7.11.1](https://discuss.elastic.co/t/kibana-print-to-pdf-issues-after-upgrading-to-7-11-1/273070)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 5\ **Last updated:** [May 24, 2021, 4:02pm UTC](https://discuss.elastic.co/t/kibana-print-to-pdf-issues-after-upgrading-to-7-11-1/273070 "2021-05-24T16:02:12Z")
Hi team, I've upgraded my environment from 7.9.2 to 7.11.1 and I'm seeing some error while trying to print to PDF my Canvas projects. {"type":"log","@timestamp":"2021-05-14T22:23:20+00:00","tags":\["error","plugins","re… --- ## [Has anyone tried to load edifact or x12 messages](https://discuss.elastic.co/t/has-anyone-tried-to-load-edifact-or-x12-messages/273689)
**Author:** [@Bugsbee](https://discuss.elastic.co/u/Bugsbee)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 3:56pm UTC](https://discuss.elastic.co/t/has-anyone-tried-to-load-edifact-or-x12-messages/273689 "2021-05-24T15:56:37Z")
hello all , has anyone tried to load x12 or edifact message using logstash/kibana. basically my requirement is simple.. I have the x12 or edifact messaged saved in a directory. i just need to pull that file and load t… --- ## [Joining JSON Array Values](https://discuss.elastic.co/t/joining-json-array-values/273702)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 3:16pm UTC](https://discuss.elastic.co/t/joining-json-array-values/273702 "2021-05-24T15:16:14Z")
I have data coming in as JSON structured like below. The JSON is parsed and the data under Charlie is displayed as an array of JSON. I'd like to concatenate all the values in URL to a single field, but can't seem to fi… --- ## [Logstash Error - RuntimeError: entity expansion has grown too large](https://discuss.elastic.co/t/logstash-error-runtimeerror-entity-expansion-has-grown-too-large/273808)
**Author:** [@Rosanna\_Staiano](https://discuss.elastic.co/u/Rosanna_Staiano)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 3:06pm UTC](https://discuss.elastic.co/t/logstash-error-runtimeerror-entity-expansion-has-grown-too-large/273808 "2021-05-24T15:06:07Z")
Hello, I've a lot of xml-file containing log events and some of them are pretty large. I'm trying to parse them with Logstash, but when the xml is too large, I get an xmlparsefailure and I got this error: RuntimeError… --- ## [Compostable index templates](https://discuss.elastic.co/t/compostable-index-templates/273841)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [May 24, 2021, 3:05pm UTC](https://discuss.elastic.co/t/compostable-index-templates/273841 "2021-05-24T15:05:57Z")
Is there a 10,000 foot description of the new template changes somewhere? --- ## [GROUP BY BASED ON MULTIPLE FIELDS](https://discuss.elastic.co/t/group-by-based-on-multiple-fields/273620)
**Author:** [@Keerthika](https://discuss.elastic.co/u/Keerthika)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 3:05pm UTC](https://discuss.elastic.co/t/group-by-based-on-multiple-fields/273620 "2021-05-24T15:05:17Z")
Hi.. We need to load the data from Kafka to elastic search using logstash configuration. And also need to group by based on multiple fields (Last 1 hour data only(Millions of data) ) in logstash configuration. Kindly … --- ## [How can i overcome this error](https://discuss.elastic.co/t/how-can-i-overcome-this-error/273836)
**Author:** [@Saishantan\_goli](https://discuss.elastic.co/u/Saishantan_goli)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 2:44pm UTC](https://discuss.elastic.co/t/how-can-i-overcome-this-error/273836 "2021-05-24T14:44:01Z")
Hi, I am having issues with the error attached in the thread. I did try many solutions, but nothing worked. Can you please share the steps or changes I need to do to overcome this error --- ## [Import Saved Object API Issue](https://discuss.elastic.co/t/import-saved-object-api-issue/273695)
**Author:** [@Rini\_Singh](https://discuss.elastic.co/u/Rini_Singh)\ **Replies:** 4\ **Last updated:** [May 24, 2021, 2:31pm UTC](https://discuss.elastic.co/t/import-saved-object-api-issue/273695 "2021-05-24T14:31:15Z")
I am trying to use API - curl -X POST "localhost:5601/api/saved\_objects/\_import?createNewCopies=true -H "kbn-xsrf: true" --form file=@file.ndjson" -H 'kbn-xsrf: true' But i am getting error {"statusCode":400,"error":"Ba… --- ## [Shard size issue in elastic](https://discuss.elastic.co/t/shard-size-issue-in-elastic/273760)
**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 1:51pm UTC](https://discuss.elastic.co/t/shard-size-issue-in-elastic/273760 "2021-05-24T13:51:11Z")
How to configure the optimal shard size in elastic search? I've gone through multiple posts in this forum and I'm not able to find an exact way to calculate the optimal value for cluster.max\_shards\_per\_node Increasing … --- ## [Are the aggregations in the response of an aggs search query ordered?](https://discuss.elastic.co/t/are-the-aggregations-in-the-response-of-an-aggs-search-query-ordered/273816)
**Author:** [@ashwinbhaskar](https://discuss.elastic.co/u/ashwinbhaskar)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 11:48am UTC](https://discuss.elastic.co/t/are-the-aggregations-in-the-response-of-an-aggs-search-query-ordered/273816 "2021-05-24T11:48:14Z")
I could not find any explicit statement in the documentation of data range aggregation that talks about the ordering of the elements inside the aggregations field. But I noticed that the results are always reverse of th… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=937) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=939)