# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=954 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 955 --- ## [Iterate through data in field logstash](https://discuss.elastic.co/t/iterate-through-data-in-field-logstash/272518)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 1\ **Last updated:** [May 9, 2021, 9:33pm UTC](https://discuss.elastic.co/t/iterate-through-data-in-field-logstash/272518 "2021-05-09T21:33:45Z")
Hi all I have a field like this field: 10, 20, 30, 40 now that i want to make each of the data in the field to be parse like this: field.1: 10 field.2: 20 ... and then use the translate plugin on each of these field… --- ## [Send all Syslog messages that don't match output to another index?](https://discuss.elastic.co/t/send-all-syslog-messages-that-dont-match-output-to-another-index/272418)
**Author:** [@jeromeat](https://discuss.elastic.co/u/jeromeat)\ **Replies:** 2\ **Last updated:** [May 9, 2021, 9:22pm UTC](https://discuss.elastic.co/t/send-all-syslog-messages-that-dont-match-output-to-another-index/272418 "2021-05-09T21:22:02Z")
Noob here, so don't judge too hard. :wink: However, I am wanting to find out if it's possible to have an output as such that's looking for specific tags and sending those messages to the windows\* index but if they don'… --- ## [Way to place new line space using Webhook request](https://discuss.elastic.co/t/way-to-place-new-line-space-using-webhook-request/272413)
**Author:** [@Suro](https://discuss.elastic.co/u/Suro)\ **Replies:** 1\ **Last updated:** [May 9, 2021, 8:38pm UTC](https://discuss.elastic.co/t/way-to-place-new-line-space-using-webhook-request/272413 "2021-05-09T20:38:43Z")
We are trying to call ServiceNow Webhook API calls via Elastic Security signal actions. For Eg, we are using the following body below - { "short\_description":"{{context.rule.name}}", "description":"""Rule Descri… --- ## [Elasticsearch node stats write threadpool](https://discuss.elastic.co/t/elasticsearch-node-stats-write-threadpool/272516)
**Author:** [@Praveen\_Atluri](https://discuss.elastic.co/u/Praveen_Atluri)\ **Replies:** 1\ **Last updated:** [May 9, 2021, 6:49pm UTC](https://discuss.elastic.co/t/elasticsearch-node-stats-write-threadpool/272516 "2021-05-09T18:49:55Z")
When I checked the node stats for some of my nodes, I see below for write thread pool. "write" : { "threads" : 8, "queue" : 13, "active" : 8, "rejected" : 19958, "large… --- ## [Goes through data in a field to parse](https://discuss.elastic.co/t/goes-through-data-in-a-field-to-parse/272429)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 2\ **Last updated:** [May 9, 2021, 1:31pm UTC](https://discuss.elastic.co/t/goes-through-data-in-a-field-to-parse/272429 "2021-05-09T13:31:53Z")
Hi all I have some problems with parse data in logstash i have a field with value like this: testValue: 1,2,3,4 and i have an yaml file to map data like this: 1: some1 2: some2 3: some3 i want to parse the data to … --- ## [Patterns, Best Practices.... for Ingesting large SQL multi-table/multi-relationship data into ES](https://discuss.elastic.co/t/patterns-best-practices-for-ingesting-large-sql-multi-table-multi-relationship-data-into-es/272498)
**Author:** [@lbi2000](https://discuss.elastic.co/u/lbi2000)\ **Replies:** 0\ **Last updated:** [May 9, 2021, 11:55am UTC](https://discuss.elastic.co/t/patterns-best-practices-for-ingesting-large-sql-multi-table-multi-relationship-data-into-es/272498 "2021-05-09T11:55:44Z")
Hi All. Great product. Keep up the great work please and continue to "push" into use cases not just for focus of log analysis...but please push the envelope for those like my project that have dumped SQL databases for … --- ## [Auditbeat system overview ECS](https://discuss.elastic.co/t/auditbeat-system-overview-ecs/272469)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 2\ **Last updated:** [May 9, 2021, 8:54am UTC](https://discuss.elastic.co/t/auditbeat-system-overview-ecs/272469 "2021-05-09T08:54:11Z")
Hi there, Running elasticsearch and kibana as a docker with version 7.12.1 and auditbeat on two hosts with also version 7.12.1 Everything is running fine. I just have found an issue in the Auditbeat System Overview Da… --- ## [LogStash update fields received](https://discuss.elastic.co/t/logstash-update-fields-received/272480)
**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\ **Replies:** 0\ **Last updated:** [May 8, 2021, 10:14pm UTC](https://discuss.elastic.co/t/logstash-update-fields-received/272480 "2021-05-08T22:14:48Z")
Hello guys. I hope everyone is doing well. I am a bit confused about ELK, specifically about LogStash and I hope you can help me to clarify this issue. A couple of weeks ago, one of our clients started forwarding syslo… --- ## [Dynamically add keyword field to text field](https://discuss.elastic.co/t/dynamically-add-keyword-field-to-text-field/272427)
**Author:** [@peterol](https://discuss.elastic.co/u/peterol)\ **Replies:** 1\ **Last updated:** [May 8, 2021, 6:47pm UTC](https://discuss.elastic.co/t/dynamically-add-keyword-field-to-text-field/272427 "2021-05-08T18:47:47Z")
Hello everyone, I have various fields i want to index as text and keyword from Logstash. I'm using an index template with static mappings to define data types and analyzers for my fields that look like these: "field.n… --- ## [Importing csv met date format error](https://discuss.elastic.co/t/importing-csv-met-date-format-error/272457)
**Author:** [@Jeff-Tian](https://discuss.elastic.co/u/Jeff-Tian)\ **Replies:** 3\ **Last updated:** [May 8, 2021, 2:38pm UTC](https://discuss.elastic.co/t/importing-csv-met-date-format-error/272457 "2021-05-08T14:38:26Z")
I'm quite new on kibana and I met the following error when importing csv file: File could not be read \[illegal\_argument\_exception\] failed to parse date field \[3/3/2021 21:40:25.76\] with format \[d/M/… --- ## [Filter out better results](https://discuss.elastic.co/t/filter-out-better-results/272471)
**Author:** [@lq-0519](https://discuss.elastic.co/u/lq-0519)\ **Replies:** 2\ **Last updated:** [May 8, 2021, 12:36pm UTC](https://discuss.elastic.co/t/filter-out-better-results/272471 "2021-05-08T12:36:28Z")
Everyone, I have a small problem. Now there is a situation. There are more than 100000 documents in my index. When I use 'match' to search, there may be thousands of results. But maybe I just need the first few of these … --- ## [How to assign each word's weight in a query?](https://discuss.elastic.co/t/how-to-assign-each-words-weight-in-a-query/272430)
**Author:** [@xiaoma](https://discuss.elastic.co/u/xiaoma)\ **Replies:** 2\ **Last updated:** [May 8, 2021, 11:53am UTC](https://discuss.elastic.co/t/how-to-assign-each-words-weight-in-a-query/272430 "2021-05-08T11:53:22Z")
hello guys, I want to assign different weight for each words in a query (i have an important word set) For example: Query : "the elastic guide book" , the word "elastic " is supposed to an important word, which weig… --- ## [Impact of enabling \`eager\_global\_ordinals\` on production traffic](https://discuss.elastic.co/t/impact-of-enabling-eager-global-ordinals-on-production-traffic/272411)
**Author:** [@rchougule](https://discuss.elastic.co/u/rchougule)\ **Replies:** 3\ **Last updated:** [May 8, 2021, 9:34am UTC](https://discuss.elastic.co/t/impact-of-enabling-eager-global-ordinals-on-production-traffic/272411 "2021-05-08T09:34:11Z")
Hello, I was wondering regarding the impact eager\_global\_ordinals: true would have as soon as I enable it on prod. As in, will it impact the ongoing production traffic? If yes, any idea how can I gauge this before enab… --- ## [Continuing a discussion,\_component\_template API got error, very anxious](https://discuss.elastic.co/t/continuing-a-discussion-component-template-api-got-error-very-anxious/272464)
**Author:** [@carpeDiem](https://discuss.elastic.co/u/carpeDiem)\ **Replies:** 1\ **Last updated:** [May 8, 2021, 8:34am UTC](https://discuss.elastic.co/t/continuing-a-discussion-component-template-api-got-error-very-anxious/272464 "2021-05-08T08:34:53Z")
Continuing the discussion from \_component\_template API got error: --- ## [\_component\_template API got error](https://discuss.elastic.co/t/component-template-api-got-error/272353)
**Author:** [@carpeDiem](https://discuss.elastic.co/u/carpeDiem)\ **Replies:** 1\ **Last updated:** [May 8, 2021, 8:33am UTC](https://discuss.elastic.co/t/component-template-api-got-error/272353 "2021-05-08T08:33:54Z")
Continuing the discussion from \_component\_template APT got error: --- ## [Multiple fields wild card bool query](https://discuss.elastic.co/t/multiple-fields-wild-card-bool-query/272460)
**Author:** [@Mithoon](https://discuss.elastic.co/u/Mithoon)\ **Replies:** 0\ **Last updated:** [May 8, 2021, 5:43am UTC](https://discuss.elastic.co/t/multiple-fields-wild-card-bool-query/272460 "2021-05-08T05:43:46Z")
Currently using below bool query which searches for a combination of all input words or either one of input word on the field "Name". How to query on multiple fields using wild cards? POST inventory\_dev/\_search { "fro… --- ## [ELK Kafka integration](https://discuss.elastic.co/t/elk-kafka-integration/272435)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 4\ **Last updated:** [May 7, 2021, 8:28pm UTC](https://discuss.elastic.co/t/elk-kafka-integration/272435 "2021-05-07T20:28:28Z")
Hi All, Does ELK 7.6.2 support reading data directly from Kafka? --- ## [Is globbing not supported in S3 input plugin prefix?](https://discuss.elastic.co/t/is-globbing-not-supported-in-s3-input-plugin-prefix/272443)
**Author:** [@meatwad](https://discuss.elastic.co/u/meatwad)\ **Replies:** 1\ **Last updated:** [May 7, 2021, 8:26pm UTC](https://discuss.elastic.co/t/is-globbing-not-supported-in-s3-input-plugin-prefix/272443 "2021-05-07T20:26:35Z")
I've seen some mention of globbing not being supported in the S3 input plugin's prefix setting in threads from years ago but I just wanted to check in and see if that's still the case. At least it seems to be based on m… --- ## [File Storage being swallowed up](https://discuss.elastic.co/t/file-storage-being-swallowed-up/271325)
**Author:** [@insurin](https://discuss.elastic.co/u/insurin)\ **Replies:** 7\ **Last updated:** [May 7, 2021, 6:08pm UTC](https://discuss.elastic.co/t/file-storage-being-swallowed-up/271325 "2021-05-07T18:08:17Z")
I have 1 agent running that has the 'Endpoint Security' and the 'System Integration'. This is running on a Windows file server and reporting into ELK which is running on Ubuntu. This one server is consuming 8gb data a da… --- ## [Metricbeat setup for multiple hosts](https://discuss.elastic.co/t/metricbeat-setup-for-multiple-hosts/272345)
**Author:** [@vharabor](https://discuss.elastic.co/u/vharabor)\ **Replies:** 2\ **Last updated:** [May 7, 2021, 4:47pm UTC](https://discuss.elastic.co/t/metricbeat-setup-for-multiple-hosts/272345 "2021-05-07T16:47:24Z")
I have an Elastic deployment and it was very straightforward to setup metricbeat and get a dashboard for our docker containers. I'm looking to do the same for another Elastic deployment that is shared for two environmen… --- ## [How to use nested object in Elasticsearch filter script](https://discuss.elastic.co/t/how-to-use-nested-object-in-elasticsearch-filter-script/272437)
**Author:** [@giovdb94](https://discuss.elastic.co/u/giovdb94)\ **Replies:** 0\ **Last updated:** [May 7, 2021, 4:03pm UTC](https://discuss.elastic.co/t/how-to-use-nested-object-in-elasticsearch-filter-script/272437 "2021-05-07T16:03:46Z")
I need some help. I have an index in ElasticSearch with the following mapping where I define two field for each document indexed: properties: { #field representing a document text "document\_text": … --- ## [Visualize difference in growth between two time series](https://discuss.elastic.co/t/visualize-difference-in-growth-between-two-time-series/272143)
**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\ **Replies:** 9\ **Last updated:** [May 7, 2021, 2:57pm UTC](https://discuss.elastic.co/t/visualize-difference-in-growth-between-two-time-series/272143 "2021-05-07T14:57:24Z")
Hello, I have an index where each document in the index provides the number of open items and the number of closed items. I'd like to build a visualization that shows if the team is catching up closing issues or, if at … --- ## [Unable to use Let's Encrypt with ECK](https://discuss.elastic.co/t/unable-to-use-lets-encrypt-with-eck/272267)
**Author:** [@timvol](https://discuss.elastic.co/u/timvol)\ **Replies:** 3\ **Last updated:** [May 7, 2021, 1:28pm UTC](https://discuss.elastic.co/t/unable-to-use-lets-encrypt-with-eck/272267 "2021-05-07T13:28:49Z")
Hi every1, I want use the cert-manager to generate a Let's Encrypt certificate for my ECK. I followed the instructions on Custom HTTP certificate | Elastic Cloud on Kubernetes \[1.5\] | Elastic and modified the issuer to … --- ## [How can we differentiate logs of master and data-ingest nodes](https://discuss.elastic.co/t/how-can-we-differentiate-logs-of-master-and-data-ingest-nodes/272416)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 1\ **Last updated:** [May 7, 2021, 1:13pm UTC](https://discuss.elastic.co/t/how-can-we-differentiate-logs-of-master-and-data-ingest-nodes/272416 "2021-05-07T13:13:19Z")
suppose we deployed elasticsearch cluster in GKE with 2 data-ingest and 2 master pods. When I check the kubectl logs , I am able to see similar logs for both master and data-ingest. Is console logs will be similar for b… --- ## [Master election takes minutes](https://discuss.elastic.co/t/master-election-takes-minutes/272303)
**Author:** [@jacknl](https://discuss.elastic.co/u/jacknl)\ **Replies:** 3\ **Last updated:** [May 7, 2021, 1:10pm UTC](https://discuss.elastic.co/t/master-election-takes-minutes/272303 "2021-05-07T13:10:15Z")
Recently I upgraded my 3 master-eligible nodes from Ubuntu 16.04 to 18.04. The master changed twice during this procedure. I noticed that these two master elections took about 1 minute and 4 minutes, respectively. This i… --- ## [\[ES v7.9.1\] Nested terms query runs forever and consumes massive memory](https://discuss.elastic.co/t/es-v7-9-1-nested-terms-query-runs-forever-and-consumes-massive-memory/272421)
**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\ **Replies:** 0\ **Last updated:** [May 7, 2021, 1:05pm UTC](https://discuss.elastic.co/t/es-v7-9-1-nested-terms-query-runs-forever-and-consumes-massive-memory/272421 "2021-05-07T13:05:25Z")
Hi, I'm facing an issue with a nested terms query. We have documents with nested documents within and use multiple nested terms aggregations in our queries. The cardinality of each text field is also quite high. In o… --- ## [Count number of occurrence of specific keyword from specific field in all docs](https://discuss.elastic.co/t/count-number-of-occurrence-of-specific-keyword-from-specific-field-in-all-docs/272415)
**Author:** [@vradder](https://discuss.elastic.co/u/vradder)\ **Replies:** 0\ **Last updated:** [May 7, 2021, 12:07pm UTC](https://discuss.elastic.co/t/count-number-of-occurrence-of-specific-keyword-from-specific-field-in-all-docs/272415 "2021-05-07T12:07:43Z")
Hello ES Team, I am looking for query in aggregation to find total number of occurrence of specific keyword from specific field in all doc. Example: doc1 - {logEntry: 'allow\_edit\_gos=true, allow\_gos\_edit=false'} doc… --- ## [Azure event hub input](https://discuss.elastic.co/t/azure-event-hub-input/271415)
**Author:** [@BeMoore](https://discuss.elastic.co/u/BeMoore)\ **Replies:** 2\ **Last updated:** [May 7, 2021, 12:03pm UTC](https://discuss.elastic.co/t/azure-event-hub-input/271415 "2021-05-07T12:03:53Z")
I have an azure event hub i want to use the azure event input plugin to grab the data....I’ve gotten Logstash to connect in to the hub.. but im getting a strange error when the conf is running.... hoping someone has an i… --- ## [Unstable indexing rate using S3 input plugin](https://discuss.elastic.co/t/unstable-indexing-rate-using-s3-input-plugin/272410)
**Author:** [@hrochefort](https://discuss.elastic.co/u/hrochefort)\ **Replies:** 0\ **Last updated:** [May 7, 2021, 11:09am UTC](https://discuss.elastic.co/t/unstable-indexing-rate-using-s3-input-plugin/272410 "2021-05-07T11:09:18Z")
Hi, I am using logstash to ingest json files from s3 to elasticsearch and our current indexing speed does not match my needs. I noticed that the indexing rate dips regularly to 0. Sometimes for up to 5 minutes. And thi… --- ## [Kibana not connecting after https setup](https://discuss.elastic.co/t/kibana-not-connecting-after-https-setup/272311)
**Author:** [@andcur](https://discuss.elastic.co/u/andcur)\ **Replies:** 6\ **Last updated:** [May 7, 2021, 10:26am UTC](https://discuss.elastic.co/t/kibana-not-connecting-after-https-setup/272311 "2021-05-07T10:26:14Z")
I have enabled https on elastic search and now kibana cannot connect. log \[15:28:25.571\] \[error\]\[elasticsearch\] Request error, retrying GET https://ukee-exp004:9200/\_xpack?accept\_enterprise=true =\> connect E… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=953) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=955)