# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=959 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 960 --- ## [Control over writing data to a specific drive](https://discuss.elastic.co/t/control-over-writing-data-to-a-specific-drive/271695)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 6\ **Last updated:** [May 3, 2021, 7:52pm UTC](https://discuss.elastic.co/t/control-over-writing-data-to-a-specific-drive/271695 "2021-05-03T19:52:36Z")
We are planning to use single node Elasticsearch cluster. The node may contain multiple locations for writing indexing data. I would like to know, if it is possible to write the data to a specific indexing location only… --- ## [Auto\_flush\_interval with ordered pipeline](https://discuss.elastic.co/t/auto-flush-interval-with-ordered-pipeline/271924)
**Author:** [@roua.B](https://discuss.elastic.co/u/roua.B)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 7:41pm UTC](https://discuss.elastic.co/t/auto-flush-interval-with-ordered-pipeline/271924 "2021-05-03T19:41:34Z")
Hello, So I was facing an issue with logstash not parsing the last line of my xml log file. I found that the answer would be to add auto\_flush\_interval =\> 1 to my multiline codec. I would like my pipeline to be ordered … --- ## [Logstash mongodb output plugin fails to authenticate](https://discuss.elastic.co/t/logstash-mongodb-output-plugin-fails-to-authenticate/272014)
**Author:** [@aaron-dsouza](https://discuss.elastic.co/u/aaron-dsouza)\ **Replies:** 0\ **Last updated:** [May 3, 2021, 6:09pm UTC](https://discuss.elastic.co/t/logstash-mongodb-output-plugin-fails-to-authenticate/272014 "2021-05-03T18:09:43Z")
I'm using the logstash mongodb output plugin to write documents to Azure cosmos DB. I am facing the exact same issue as reported here Logstash MongoDB Output Plugin - command insert requires authentication Here is my co… --- ## [Disk threshold](https://discuss.elastic.co/t/disk-threshold/271414)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 6\ **Last updated:** [May 3, 2021, 5:57pm UTC](https://discuss.elastic.co/t/disk-threshold/271414 "2021-05-03T17:57:35Z")
We are trying to implement single node cluster of Elasticsearch per installation of our application. Our application is on-prem. I was looking at the indexing data location parameters in the Elastic documentation. I came… --- ## [IP based failover in Logstash](https://discuss.elastic.co/t/ip-based-failover-in-logstash/271978)
**Author:** [@Debarati\_Goswami](https://discuss.elastic.co/u/Debarati_Goswami)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 5:49pm UTC](https://discuss.elastic.co/t/ip-based-failover-in-logstash/271978 "2021-05-03T17:49:29Z")
Hi All , I have a requirement to collect logs from various sources into Logstash cluster (of 6 nodes) of which 4 nodes are for 4 different types of logs (rsyslog , IPFIX , SFTP and FluentD) and the last two nodes would … --- ## [Kibana not loading completely](https://discuss.elastic.co/t/kibana-not-loading-completely/271923)
**Author:** [@soberCoder](https://discuss.elastic.co/u/soberCoder)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 5:03pm UTC](https://discuss.elastic.co/t/kibana-not-loading-completely/271923 "2021-05-03T17:03:26Z")
Hi, Kibana is loading half of the calls and only a blank screen is visible to the user(after the loading logo, nothing loads). I am working with ELK Stack version = 7.10.2 I am trying to share dashboards with reverse… --- ## [Change mapping of a list of indices (rollover)](https://discuss.elastic.co/t/change-mapping-of-a-list-of-indices-rollover/271614)
**Author:** [@samia](https://discuss.elastic.co/u/samia)\ **Replies:** 7\ **Last updated:** [May 3, 2021, 4:36pm UTC](https://discuss.elastic.co/t/change-mapping-of-a-list-of-indices-rollover/271614 "2021-05-03T16:36:13Z")
Hi, I'm using Elastic 7.11 I have a series of indices (not DataStreams) which rollover through an ILM policy. There's a legacy index template which refer to them. I would like to change the mapping of the future ind… --- ## [Cluster is frequently lost with no master and data nodes removed after upgrade from 7.2.1 to 7.10.2](https://discuss.elastic.co/t/cluster-is-frequently-lost-with-no-master-and-data-nodes-removed-after-upgrade-from-7-2-1-to-7-10-2/271907)
**Author:** [@rpremnath](https://discuss.elastic.co/u/rpremnath)\ **Replies:** 5\ **Last updated:** [May 3, 2021, 4:46pm UTC](https://discuss.elastic.co/t/cluster-is-frequently-lost-with-no-master-and-data-nodes-removed-after-upgrade-from-7-2-1-to-7-10-2/271907 "2021-05-03T16:46:13Z")
we are testing upgrade of Elasticsearch from 7.2.1 to 7.10.2 and we have developed custom Rollup and Alias management plugin using NodeClient. In our 3 node set up, all nodes are master, data, ingest nodes. We did not ha… --- ## [Looking for a way to autocreate visualizations on kibana](https://discuss.elastic.co/t/looking-for-a-way-to-autocreate-visualizations-on-kibana/271839)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 4:17pm UTC](https://discuss.elastic.co/t/looking-for-a-way-to-autocreate-visualizations-on-kibana/271839 "2021-05-03T16:17:16Z")
Is there a way to autocreate visualizations on Kibana .? I have a considerable amount of logs from different machines that follow the same pattern and logstash is able to parse them successfully . However is there a wa… --- ## [MongoDB Input threw an exception, restarting {:exception=\>#\}](https://discuss.elastic.co/t/mongodb-input-threw-an-exception-restarting-exception-bson-2221275031010008292cainvoicecceprimary-is-an-invalid-objectid/271932)
**Author:** [@BASHEER\_DS](https://discuss.elastic.co/u/BASHEER_DS)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 4:10pm UTC](https://discuss.elastic.co/t/mongodb-input-threw-an-exception-restarting-exception-bson-2221275031010008292cainvoicecceprimary-is-an-invalid-objectid/271932 "2021-05-03T16:10:41Z")
Hi, I am getting below error while creating pipeline. please help in resolving this error. MongoDB Input threw an exception, restarting {:exception=\>#\ **Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 1\ **Last updated:** [May 3, 2021, 3:10pm UTC](https://discuss.elastic.co/t/how-to-modified-configure-logstash-add-geo-point-and-load-data-with-logstash-to-elasticsearch/271984 "2021-05-03T15:10:03Z") I have a column device.latlong where the longtitude and latitude values ​​become one column, how to add a geo\_point file to the logstash configuration, and display it in the kibana visualization and this my configure ap… --- ## [Change color of some field based on a value of another field in the same document](https://discuss.elastic.co/t/change-color-of-some-field-based-on-a-value-of-another-field-in-the-same-document/271315)
**Author:** [@Manjula\_Piyumal](https://discuss.elastic.co/u/Manjula_Piyumal)\ **Replies:** 4\ **Last updated:** [May 3, 2021, 2:51pm UTC](https://discuss.elastic.co/t/change-color-of-some-field-based-on-a-value-of-another-field-in-the-same-document/271315 "2021-05-03T14:51:49Z")
Hi, In Kibana, is it possible to change the color of a numeric field based on a value in another filed in the same document? My document contains below two fields, I want to change the color of "count", based on the fi… --- ## [Can we have multiple HTTP input plugin configured into single logstash.conf file like below](https://discuss.elastic.co/t/can-we-have-multiple-http-input-plugin-configured-into-single-logstash-conf-file-like-below/271950)
**Author:** [@Learn\_Mulesoft\_With](https://discuss.elastic.co/u/Learn_Mulesoft_With)\ **Replies:** 1\ **Last updated:** [May 3, 2021, 2:50pm UTC](https://discuss.elastic.co/t/can-we-have-multiple-http-input-plugin-configured-into-single-logstash-conf-file-like-below/271950 "2021-05-03T14:50:50Z")
input { http { host =\> "localhost" port =\> "5044" response\_code =\> 201 } http { host =\> "localhost" port =\> "5045" response\_code =\> 201 } http { host =\> "localhost" port =\> "5046" response\_code =\> 201 } } … --- ## [Kibana crashes](https://discuss.elastic.co/t/kibana-crashes/271900)
**Author:** [@jordan\_sumitomo](https://discuss.elastic.co/u/jordan_sumitomo)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 2:41pm UTC](https://discuss.elastic.co/t/kibana-crashes/271900 "2021-05-03T14:41:05Z")
I've recently started trying out elasticsearch and kibana but kibana crashes Here's my kibana log log \[17:39:57.905\] \[info\]\[plugins-service\] Plugin "osquery" is disabled. log \[17:39:58.029\] \[warning\]\[config\]\[d… --- ## [Disable Saved Search's Result Expand](https://discuss.elastic.co/t/disable-saved-searchs-result-expand/271887)
**Author:** [@bsmith](https://discuss.elastic.co/u/bsmith)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 2:26pm UTC](https://discuss.elastic.co/t/disable-saved-searchs-result-expand/271887 "2021-05-03T14:26:37Z")
Don't want to have to rely on data tables due to performance, but don't want users to be able to see every single field by expanding the row in the saved search on their dashboard. Any way around this? --- ## [Geo point for new ECS mapped Geo fields using JDBC](https://discuss.elastic.co/t/geo-point-for-new-ecs-mapped-geo-fields-using-jdbc/271846)
**Author:** [@metalshanked](https://discuss.elastic.co/u/metalshanked)\ **Replies:** 6\ **Last updated:** [May 3, 2021, 2:07pm UTC](https://discuss.elastic.co/t/geo-point-for-new-ecs-mapped-geo-fields-using-jdbc/271846 "2021-05-03T14:07:33Z")
Hello, I am trying to map Geo Lat and Long for internal IPs to ECS geo fields such as \[source\]\[geo\]\[location\] using logstash. The standard geoip filter works well for external ips and i see it nicely mapped to the ecs … --- ## [Logstash / Protobuf plugin, removing oneOf fields that aren't set (are null)](https://discuss.elastic.co/t/logstash-protobuf-plugin-removing-oneof-fields-that-arent-set-are-null/271994)
**Author:** [@SCollins](https://discuss.elastic.co/u/SCollins)\ **Replies:** 0\ **Last updated:** [May 3, 2021, 1:48pm UTC](https://discuss.elastic.co/t/logstash-protobuf-plugin-removing-oneof-fields-that-arent-set-are-null/271994 "2021-05-03T13:48:43Z")
I'm using the logstash protobuf plugin as a mechanism to read protobuf from kafka, convert it from protobuf and write it to elasticsearch. The problem we are having is, the oneOf fields, despite being null/not set in the… --- ## [Unable to paginate a PIT search without a sort clause](https://discuss.elastic.co/t/unable-to-paginate-a-pit-search-without-a-sort-clause/271793)
**Author:** [@yfful](https://discuss.elastic.co/u/yfful)\ **Replies:** 3\ **Last updated:** [May 3, 2021, 1:34pm UTC](https://discuss.elastic.co/t/unable-to-paginate-a-pit-search-without-a-sort-clause/271793 "2021-05-03T13:34:01Z")
Hello, I am trying to paginate a search but I am unable to do so because results don't include the sort field to search after. However, from what I understand reading the search\_after documentation Paginate search resul… --- ## [How to a emit a value for a runtime field of type geo\_point?](https://discuss.elastic.co/t/how-to-a-emit-a-value-for-a-runtime-field-of-type-geo-point/271889)
**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\ **Replies:** 8\ **Last updated:** [May 3, 2021, 12:50pm UTC](https://discuss.elastic.co/t/how-to-a-emit-a-value-for-a-runtime-field-of-type-geo-point/271889 "2021-05-03T12:50:00Z")
I am trying to execute a query for a geo\_point value with a runtime mapping, which according to the docs should work, but it is failing. keywords and long values work fine. For example... Where src.city.name is a keywor… --- ## [기본 analyzer 확장 방법?](https://discuss.elastic.co/t/analyzer/271969)
**Author:** [@jongpyo.lee](https://discuss.elastic.co/u/jongpyo.lee)\ **Replies:** 0\ **Last updated:** [May 3, 2021, 11:18am UTC](https://discuss.elastic.co/t/analyzer/271969 "2021-05-03T11:18:28Z")
예제 데이터 입니다. POST coding/\_bulk {"index":{"\_id":"1"}} {"language":"xyz\_foo@abc"} 기본 analyzer는 @은 구분하지만 \_기호는 구분하지 않는 것을 \_termvectors을 통해 확인하였습니다. GET coding/\_termvectors/1?fields=language { "\_index" : "coding", ... … --- ## [The JSON filter can extract empty field names, which are then unusable by Logstash](https://discuss.elastic.co/t/the-json-filter-can-extract-empty-field-names-which-are-then-unusable-by-logstash/271963)
**Author:** [@nico127](https://discuss.elastic.co/u/nico127)\ **Replies:** 0\ **Last updated:** [May 3, 2021, 10:45am UTC](https://discuss.elastic.co/t/the-json-filter-can-extract-empty-field-names-which-are-then-unusable-by-logstash/271963 "2021-05-03T10:45:00Z")
Hi, I've found a situation where the JSON filter and valid JSON can cause unusable Logstash events. It comes from 2 facts: An empty string is a valid JSON key, as explained for example in this stackoverflow answer. It … --- ## [Kibana Observability Metrics - Issue](https://discuss.elastic.co/t/kibana-observability-metrics-issue/271901)
**Author:** [@Ravi342883](https://discuss.elastic.co/u/Ravi342883)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 10:18am UTC](https://discuss.elastic.co/t/kibana-observability-metrics-issue/271901 "2021-05-03T10:18:30Z")
Hello Elastic Community Members, Currently, I'm facing issue in loading the metrics (auto populated graphs) over the metricbeat data. I tried 2 scenarios here to figure out this issue, let me brief that in detail. Sce… --- ## [Sharepoint OnPremise](https://discuss.elastic.co/t/sharepoint-onpremise/271956)
**Author:** [@Nassera](https://discuss.elastic.co/u/Nassera)\ **Replies:** 1\ **Last updated:** [May 3, 2021, 10:17am UTC](https://discuss.elastic.co/t/sharepoint-onpremise/271956 "2021-05-03T10:17:23Z")
Bonjour Je suis actuellement en train d'étudier l'éventualité d'utiliser la suite ELK pour la recherche sur notre infra sharepoint onPremise 2013 et sur le NAS. Mais avant de réaliser un POC, nous souhaiterions obtenir … --- ## [Index data on disk between versions](https://discuss.elastic.co/t/index-data-on-disk-between-versions/271857)
**Author:** [@zissop](https://discuss.elastic.co/u/zissop)\ **Replies:** 6\ **Last updated:** [May 3, 2021, 9:12am UTC](https://discuss.elastic.co/t/index-data-on-disk-between-versions/271857 "2021-05-03T09:12:40Z")
Hello I have setup 2 different elasticsearch instances on 2 different servers. The first is elasticsearch v 7.10 and the other v 7.12 I create the same exact index and use the same exact data for indexing, both are 100… --- ## [What is the recommend memory size to run logstash?](https://discuss.elastic.co/t/what-is-the-recommend-memory-size-to-run-logstash/271083)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 13\ **Last updated:** [May 3, 2021, 8:47am UTC](https://discuss.elastic.co/t/what-is-the-recommend-memory-size-to-run-logstash/271083 "2021-05-03T08:47:46Z")
Hi all, Please explain What is the recommend memory size to run logstash. Thanks --- ## [Missing results using query\_string wildcard query with rewrite top\_terms\_n](https://discuss.elastic.co/t/missing-results-using-query-string-wildcard-query-with-rewrite-top-terms-n/269680)
**Author:** [@carantunes](https://discuss.elastic.co/u/carantunes)\ **Replies:** 1\ **Last updated:** [May 3, 2021, 8:40am UTC](https://discuss.elastic.co/t/missing-results-using-query-string-wildcard-query-with-rewrite-top-terms-n/269680 "2021-05-03T08:40:25Z")
I'm using Elasticsearch version 7.1.1. I'm experiencing a weird behaviour. When using top\_terms\_n in order to obtain a score in wildcard query\_string queries almost all results are missing. Without top\_terms\_n I obtain… --- ## [A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/271946)
**Author:** [@Safir](https://discuss.elastic.co/u/Safir)\ **Replies:** 0\ **Last updated:** [May 3, 2021, 8:37am UTC](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/271946 "2021-05-03T08:37:09Z")
/Users/lab/Desktop/logstash/logstash-core/lib/logstash/java\_pipeline.rb:396:in block in start\_input' \[2021-05-03T11:31:51,605\]\[ERROR\]\[logstash.javapipeline \]\[main\]\[6a3d8ecc5c72c85e305635d46ccbd177399eb255a591231ec278b… --- ## [Kibana dashboard dynamic labeling](https://discuss.elastic.co/t/kibana-dashboard-dynamic-labeling/271852)
**Author:** [@Rachitha](https://discuss.elastic.co/u/Rachitha)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 8:14am UTC](https://discuss.elastic.co/t/kibana-dashboard-dynamic-labeling/271852 "2021-05-03T08:14:09Z")
We can just add the single data column and the contents be visible in the drop down of Control Visualization. Is there any way so that we get the all the data column as the dropdown list? --- ## [Could not index event to Elasticsearch](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/271929)
**Author:** [@BASHEER\_DS](https://discuss.elastic.co/u/BASHEER_DS)\ **Replies:** 1\ **Last updated:** [May 3, 2021, 7:15am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/271929 "2021-05-03T07:15:44Z")
Hi, I am trying to index my data into Elasticsearch from logstash but I keep getting this type of errors for all indices. Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"… --- ## [Setup X-pack](https://discuss.elastic.co/t/setup-x-pack/271497)
**Author:** [@Stefan\_Stopka](https://discuss.elastic.co/u/Stefan_Stopka)\ **Replies:** 2\ **Last updated:** [May 3, 2021, 6:48am UTC](https://discuss.elastic.co/t/setup-x-pack/271497 "2021-05-03T06:48:15Z")
Have a nice day, I want to ask someone who would be able to help me at how to run the X-pack set so that I used it exclusively within the scope of the free license does not exceed the limit of the free license and also … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=958) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=960)