# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=948

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 949

---

## [Ruby filter](https://discuss.elastic.co/t/ruby-filter/273055)

<div class="topic-metadata">

**Author:** [@paulbrown4](https://discuss.elastic.co/u/paulbrown4)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 6:52pm UTC](https://discuss.elastic.co/t/ruby-filter/273055 "2021-05-14T18:52:40Z")

</div>

I am not very familiar with ruby, more so how it interacts with logstash, but I am trying to parse an array of CSVs. For whatever reason the ruby filter I am trying to use is not expanding the variables as a valid field …

---

## [Elastic Endpoint Security - Unkown Internet Connections](https://discuss.elastic.co/t/elastic-endpoint-security-unkown-internet-connections/272999)

<div class="topic-metadata">

**Author:** [@RafnexJr](https://discuss.elastic.co/u/RafnexJr)\
**Replies:** 1\
**Last updated:** [May 14, 2021, 6:00pm UTC](https://discuss.elastic.co/t/elastic-endpoint-security-unkown-internet-connections/272999 "2021-05-14T18:00:26Z")

</div>

Hi everyone, I deployed an Elastic Stack with Endpoint Security in my Lab and now I looked at the communication and some communication is clear to me, like: telemetry.elastic\[.\]co epr.elastic\[.\]co artifacts.security.…

---

## [Volume Expansion StatefulSet Recreation Logic](https://discuss.elastic.co/t/volume-expansion-statefulset-recreation-logic/273041)

<div class="topic-metadata">

**Author:** [@zpear](https://discuss.elastic.co/u/zpear)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 4:18pm UTC](https://discuss.elastic.co/t/volume-expansion-statefulset-recreation-logic/273041 "2021-05-14T16:18:27Z")

</div>

Hi, I've been looking into how the ECK operator upsizes the persistent volumes being used by the ES cluster. Looking at the PR that added this functionality and reading the comments I wanted to confirm my understanding …

---

## [Logstash Filter](https://discuss.elastic.co/t/logstash-filter/272734)

<div class="topic-metadata">

**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\
**Replies:** 6\
**Last updated:** [May 14, 2021, 4:15pm UTC](https://discuss.elastic.co/t/logstash-filter/272734 "2021-05-14T16:15:41Z")

</div>

\<166\>1 2021-05-11T17:50:40+0000 flowIdLog, applianceName=nameofsight, app=app1 How do i parse this, the KV section works but i dont know how to deal with this section " \<166\>1 2021-05-11T17:50:40+0000 flowIdLog " fil…

---

## [Avoiding Nested Types](https://discuss.elastic.co/t/avoiding-nested-types/272958)

<div class="topic-metadata">

**Author:** [@pcb](https://discuss.elastic.co/u/pcb)\
**Replies:** 4\
**Last updated:** [May 14, 2021, 4:07pm UTC](https://discuss.elastic.co/t/avoiding-nested-types/272958 "2021-05-14T16:07:00Z")

</div>

Hi ya, I'm moving data from Postgres to Elasticsearch to use primarily for filtering(faceted), text search over a few fields, sorting, and pagination. Unfortunately, the data is very relational and I'm having trouble co…

---

## [Elasticsearch not able to identify the time field defined in Fluentd](https://discuss.elastic.co/t/elasticsearch-not-able-to-identify-the-time-field-defined-in-fluentd/272594)

<div class="topic-metadata">

**Author:** [@saurabh122](https://discuss.elastic.co/u/saurabh122)\
**Replies:** 6\
**Last updated:** [May 14, 2021, 3:49pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-identify-the-time-field-defined-in-fluentd/272594 "2021-05-14T15:49:40Z")

</div>

Issue: I have the logs getting logged into my log file and each log entry has the time information. The time field in the log is not getting recognized in Elasticssearch and hence I am not able to select this time inform…

---

## [How to split all xml fields by default](https://discuss.elastic.co/t/how-to-split-all-xml-fields-by-default/272601)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 1\
**Last updated:** [May 14, 2021, 3:05pm UTC](https://discuss.elastic.co/t/how-to-split-all-xml-fields-by-default/272601 "2021-05-14T15:05:23Z")

</div>

Hello All, is there any way to split all xml fields by default without using split function.?

---

## [Invalid NEST response built from a successful (404) low level call](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-successful-404-low-level-call/273038)

<div class="topic-metadata">

**Author:** [@lbrowne2](https://discuss.elastic.co/u/lbrowne2)\
**Replies:** 0\
**Last updated:** [May 14, 2021, 3:30pm UTC](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-successful-404-low-level-call/273038 "2021-05-14T15:30:17Z")

</div>

I am using .Nest version 7.x and I am trying to post information to a remote elasticsearch log bridge. Using the following code: var object\_test= new Dummy\_Object{ Dummy\_String = "dummy\_…

---

## [Disk sizing Snapshot Repository](https://discuss.elastic.co/t/disk-sizing-snapshot-repository/272953)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 4\
**Last updated:** [May 14, 2021, 2:18pm UTC](https://discuss.elastic.co/t/disk-sizing-snapshot-repository/272953 "2021-05-14T14:18:59Z")

</div>

Hello Team, I would need to know, what should be the disk sizing for Snapshot repository w.r.t path.data?

---

## [Wildcard search and trim normalizer behaving strangley together](https://discuss.elastic.co/t/wildcard-search-and-trim-normalizer-behaving-strangley-together/273025)

<div class="topic-metadata">

**Author:** [@alexcassells](https://discuss.elastic.co/u/alexcassells)\
**Replies:** 0\
**Last updated:** [May 14, 2021, 1:43pm UTC](https://discuss.elastic.co/t/wildcard-search-and-trim-normalizer-behaving-strangley-together/273025 "2021-05-14T13:43:51Z")

</div>

If a have an index with a trim normalizer and try and use a wildcard search with it, I am seeing behaviour that I would not expect to see // create an index and populate it with a document PUT /test-normalizer-index…

---

## [ES 7.7.1 -\> ES 7.12.0 WAND Performance Issue](https://discuss.elastic.co/t/es-7-7-1-es-7-12-0-wand-performance-issue/272854)

<div class="topic-metadata">

**Author:** [@mattweber](https://discuss.elastic.co/u/mattweber)\
**Replies:** 3\
**Last updated:** [May 14, 2021, 1:39pm UTC](https://discuss.elastic.co/t/es-7-7-1-es-7-12-0-wand-performance-issue/272854 "2021-05-14T13:39:54Z")

</div>

Hello, I am upgrading an existing cluster from ES 7.7.1 (lucene 8.5.1) to ES 7.12.0 (lucene 8.8.0) and have hit a massive performance regression in basic match queries utilizing minimum should match. I believe this is…

---

## [Connection among my ECS infrastructure and my Elastic Cloud](https://discuss.elastic.co/t/connection-among-my-ecs-infrastructure-and-my-elastic-cloud/270684)

<div class="topic-metadata">

**Author:** [@mmoreram](https://discuss.elastic.co/u/mmoreram)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 1:36pm UTC](https://discuss.elastic.co/t/connection-among-my-ecs-infrastructure-and-my-elastic-cloud/270684 "2021-05-14T13:36:43Z")

</div>

Hi there! I setup my infrastructure on top of ECS, but I placed the Elasticsearch cloud in the Elastic Cloud service. I'm having connection between both, so that's great, but I'm having a huge ping from one to the other…

---

## [Logstash started failing after making elasticsearch secure](https://discuss.elastic.co/t/logstash-started-failing-after-making-elasticsearch-secure/273020)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 0\
**Last updated:** [May 14, 2021, 1:18pm UTC](https://discuss.elastic.co/t/logstash-started-failing-after-making-elasticsearch-secure/273020 "2021-05-14T13:18:25Z")

</div>

Hi All , My elk cluster of one node was working fine. I tried to make it secure then elasticsearch and kibana are working fine , however logstash is not able to connect with elasticsearch. I have done below changes in …

---

## [Rename filed value with pattern](https://discuss.elastic.co/t/rename-filed-value-with-pattern/273015)

<div class="topic-metadata">

**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\
**Replies:** 3\
**Last updated:** [May 14, 2021, 1:08pm UTC](https://discuss.elastic.co/t/rename-filed-value-with-pattern/273015 "2021-05-14T13:08:46Z")

</div>

I hear I can rename the value in index pattern, but I cannot find this. I can only change the type. eg. from number to string. Now I need to change value itself. eg. product\_shoes --\> shoes ..and so on

---

## [Yarn kbn bootstrap failing for dev local environment](https://discuss.elastic.co/t/yarn-kbn-bootstrap-failing-for-dev-local-environment/272983)

<div class="topic-metadata">

**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\
**Replies:** 5\
**Last updated:** [May 14, 2021, 12:11pm UTC](https://discuss.elastic.co/t/yarn-kbn-bootstrap-failing-for-dev-local-environment/272983 "2021-05-14T12:11:52Z")

</div>

Hi Team, I am trying to run localhost:5600 (kibana) in the development environment. Node version: v10.23.1 Kibana Version: 7.10.2 Windows: 10 (64) Steps followed: Downloaded kibana zip file from GitHub Extracted z…

---

## [Probleme de datafeed sur le ML avec des indices wildcard](https://discuss.elastic.co/t/probleme-de-datafeed-sur-le-ml-avec-des-indices-wildcard/273010)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 0\
**Last updated:** [May 14, 2021, 11:21am UTC](https://discuss.elastic.co/t/probleme-de-datafeed-sur-le-ml-avec-des-indices-wildcard/273010 "2021-05-14T11:21:01Z")

</div>

Y a t-il une solution de contournement pour cela: \[ML\] Checking privileges for datafeed source index patterns with wildcards may fail · Issue #56698 · elastic/elasticsearch · GitHub ?

---

## [Filter with exists and value: null](https://discuss.elastic.co/t/filter-with-exists-and-value-null/272990)

<div class="topic-metadata">

**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 9:46am UTC](https://discuss.elastic.co/t/filter-with-exists-and-value-null/272990 "2021-05-14T09:46:05Z")

</div>

I am trying to make a filter in Lens field: exists does not take in count fields that have value null ie. I am trying to only check for the key How can I achieve this?

---

## [Style guide for Kibana: text (e.g. capitalization) and graphical (e.g. layout)?](https://discuss.elastic.co/t/style-guide-for-kibana-text-e-g-capitalization-and-graphical-e-g-layout/272985)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 1\
**Last updated:** [May 14, 2021, 9:23am UTC](https://discuss.elastic.co/t/style-guide-for-kibana-text-e-g-capitalization-and-graphical-e-g-layout/272985 "2021-05-14T09:23:22Z")

</div>

Does Elastic have its own in-house style guide for Kibana dashboards? For example, for saved object names, panel titles, axis labels, series names (e.g. capitalization)? And/or recommendations for users? I develop docum…

---

## [Logstash import date](https://discuss.elastic.co/t/logstash-import-date/272992)

<div class="topic-metadata">

**Author:** [@nikssssss](https://discuss.elastic.co/u/nikssssss)\
**Replies:** 0\
**Last updated:** [May 14, 2021, 8:30am UTC](https://discuss.elastic.co/t/logstash-import-date/272992 "2021-05-14T08:30:02Z")

</div>

hello, i want to pass a field ("datetime") as date with this format 1/19/21 12:00 so i add in the conf file the following : date { match =\> \["datetime", "MM/dd/yy HH:mm"\] target =\> "Dateread" …

---

## [Is dynamic volume expansion supported by the operator?](https://discuss.elastic.co/t/is-dynamic-volume-expansion-supported-by-the-operator/272957)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 7:46am UTC](https://discuss.elastic.co/t/is-dynamic-volume-expansion-supported-by-the-operator/272957 "2021-05-14T07:46:40Z")

</div>

Although there is a merged PR dedicated to volume expansion, the documentation writes that this is not supported: You can add and modify most elements of the original cluster specification provided that they translate …

---

## [Sonarqube code coverage for custom plugins](https://discuss.elastic.co/t/sonarqube-code-coverage-for-custom-plugins/272624)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 3\
**Last updated:** [May 14, 2021, 7:31am UTC](https://discuss.elastic.co/t/sonarqube-code-coverage-for-custom-plugins/272624 "2021-05-14T07:31:52Z")

</div>

Hello Team, I am trying to understand if we can use sonarqube like tools for code coverage of the custom kibana plugins. Are there is suggested frameworks or tools for Kibana. Thanks for your help and support. Aditya

---

## [Clean up dashboard](https://discuss.elastic.co/t/clean-up-dashboard/272805)

<div class="topic-metadata">

**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 7:15am UTC](https://discuss.elastic.co/t/clean-up-dashboard/272805 "2021-05-14T07:15:51Z")

</div>

I created read only user role, where I try restrict as much access as possible. However, even if there is no access to adding data, the links are still there. Also "news" from Elastic cloud and other extra highly disturb…

---

## [GlobalCheckpoint syncer only syncs translog when the translog durability is REQUEST](https://discuss.elastic.co/t/globalcheckpoint-syncer-only-syncs-translog-when-the-translog-durability-is-request/272468)

<div class="topic-metadata">

**Author:** [@asce0705](https://discuss.elastic.co/u/asce0705)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 6:44am UTC](https://discuss.elastic.co/t/globalcheckpoint-syncer-only-syncs-translog-when-the-translog-durability-is-request/272468 "2021-05-14T06:44:15Z")

</div>

Elasticsearch version: 7.10 Currently, IndexShard.maybeSyncGlobalCheckpoint is called in two places: In the AsyncGlobalCheckpointTask of IndexService; In the TransportReplicationAction after a write action. In IndexS…

---

## [Insert and Update records in Elasticsearch](https://discuss.elastic.co/t/insert-and-update-records-in-elasticsearch/271459)

<div class="topic-metadata">

**Author:** [@Thamini\_NellaiKumar](https://discuss.elastic.co/u/Thamini_NellaiKumar)\
**Replies:** 6\
**Last updated:** [May 14, 2021, 2:12am UTC](https://discuss.elastic.co/t/insert-and-update-records-in-elasticsearch/271459 "2021-05-14T02:12:22Z")

</div>

Hi, I am looping through each record in elasticsearch and inserting the new records and updating the existing records. Say for example, i have a csv file which has 5000 records, only few are updated in the index and the…

---

## [None of the configured nodes are available](https://discuss.elastic.co/t/none-of-the-configured-nodes-are-available/272935)

<div class="topic-metadata">

**Author:** [@111474](https://discuss.elastic.co/u/111474)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 1:39am UTC](https://discuss.elastic.co/t/none-of-the-configured-nodes-are-available/272935 "2021-05-14T01:39:01Z")

</div>

I launch spring boot app that should connect with elasticsearch 5.6.1 on macos catalina with globally installed java 14 . Elasticsearch 5.6.1 run as docker container via next command : docker run -d --rm --name elastic…

---

## [How to get variable names in nested JSON format](https://discuss.elastic.co/t/how-to-get-variable-names-in-nested-json-format/272768)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 4\
**Last updated:** [May 14, 2021, 1:31am UTC](https://discuss.elastic.co/t/how-to-get-variable-names-in-nested-json-format/272768 "2021-05-14T01:31:48Z")

</div>

I am using a JSON plugin to parse logs in JSON format. Eventually, the nested variable names are retrieved along with their parent names. How can I simply get just the variable names? target log: ... snip ... {... sn…

---

## [Search-ui components using Angular](https://discuss.elastic.co/t/search-ui-components-using-angular/272965)

<div class="topic-metadata">

**Author:** [@ksuren](https://discuss.elastic.co/u/ksuren)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 10:27pm UTC](https://discuss.elastic.co/t/search-ui-components-using-angular/272965 "2021-05-13T22:27:41Z")

</div>

How can we build a elastic-ui components using Angular? The docs Libraries for developing modern search experiences | Elastic mention: The underlying library powering Search UI can be used with any JavaScript framework…

---

## [Custom Plugin fails yarn start with addition of package.json in v7.9.3](https://discuss.elastic.co/t/custom-plugin-fails-yarn-start-with-addition-of-package-json-in-v7-9-3/271421)

<div class="topic-metadata">

**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\
**Replies:** 3\
**Last updated:** [May 13, 2021, 9:33pm UTC](https://discuss.elastic.co/t/custom-plugin-fails-yarn-start-with-addition-of-package-json-in-v7-9-3/271421 "2021-05-13T21:33:48Z")

</div>

Hi, I have a custom plugin that I modeled after "node scripts/generate\_plugin". I am trying to add a package.json file so I can build the plugin and the dependencies. But before I even get to the build, I get this error…

---

## [Высокая утилизация ресурсов при сообщениях в логе: moving index и update\_mapping](https://discuss.elastic.co/t/moving-index-update-mapping/270293)

<div class="topic-metadata">

**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\
**Replies:** 2\
**Last updated:** [May 13, 2021, 9:20pm UTC](https://discuss.elastic.co/t/moving-index-update-mapping/270293 "2021-05-13T21:20:15Z")

</div>

Добрый день! Иногда в течение дня наблюдается очень высокая утилизация ресурсов - при 40 ядрах CPU утилизация становится с обычной 50%-60% в 99% и LA - 70-90 при обычном LA - в 18-25 в логах в это время массово идут с…

---

## [Setting up a multi-nodes cluster on a single machine ( 1 elasticsearch.yml file )](https://discuss.elastic.co/t/setting-up-a-multi-nodes-cluster-on-a-single-machine-1-elasticsearch-yml-file/272286)

<div class="topic-metadata">

**Author:** [@Catalin](https://discuss.elastic.co/u/Catalin)\
**Replies:** 15\
**Last updated:** [May 13, 2021, 9:02pm UTC](https://discuss.elastic.co/t/setting-up-a-multi-nodes-cluster-on-a-single-machine-1-elasticsearch-yml-file/272286 "2021-05-13T21:02:04Z")

</div>

I have been using elasticsearch for development on my local machine and managed to setup a 3 nodes cluster by starting each node with the following command: elasticsearch -Epath.data=data1 -Epath.logs=log1 -Enode.name=n…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=947)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=949)
