# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=962 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 963 --- ## [Error when running 7.12.1 on centos 7 in docker](https://discuss.elastic.co/t/error-when-running-7-12-1-on-centos-7-in-docker/271508)
**Author:** [@WiseOwl](https://discuss.elastic.co/u/WiseOwl)\ **Replies:** 3\ **Last updated:** [April 30, 2021, 8:40am UTC](https://discuss.elastic.co/t/error-when-running-7-12-1-on-centos-7-in-docker/271508 "2021-04-30T08:40:28Z")
Hi, Since the 7.12.1 update ES does not want to start in a docker container, running Centos 7. The systemd output is as such: systemd-entrypoint\[16341\]: \[0.001s\]\[warning\]\[os,container\] Duplicate cpuset controllers dete… --- ## [Kibana - can visualize a field that we multiply by a fixed value?](https://discuss.elastic.co/t/kibana-can-visualize-a-field-that-we-multiply-by-a-fixed-value/271742)
**Author:** [@felix180](https://discuss.elastic.co/u/felix180)\ **Replies:** 3\ **Last updated:** [April 30, 2021, 8:27am UTC](https://discuss.elastic.co/t/kibana-can-visualize-a-field-that-we-multiply-by-a-fixed-value/271742 "2021-04-30T08:27:05Z")
I did a visualization with a field but I would like to visualize it multiplied (or divised) by a fixed value. Is it possible ? Thanks for your help --- ## [How to completely reset forced shard allocation awareness?](https://discuss.elastic.co/t/how-to-completely-reset-forced-shard-allocation-awareness/271710)
**Author:** [@dschneiter](https://discuss.elastic.co/u/dschneiter)\ **Replies:** 3\ **Last updated:** [April 29, 2021, 9:21pm UTC](https://discuss.elastic.co/t/how-to-completely-reset-forced-shard-allocation-awareness/271710 "2021-04-29T21:21:27Z")
While teaching about shard allocation awareness and forced shard allocation awareness (Elasticsearch Engineer II course), one of the students made a typo in his request to configure forced shard allocation awareness whic… --- ## [ECS for syslog: why Filebeat does not follow ECS naming convention](https://discuss.elastic.co/t/ecs-for-syslog-why-filebeat-does-not-follow-ecs-naming-convention/271744)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 0\ **Last updated:** [April 30, 2021, 7:19am UTC](https://discuss.elastic.co/t/ecs-for-syslog-why-filebeat-does-not-follow-ecs-naming-convention/271744 "2021-04-30T07:19:30Z")
we're indexing syslogs data via Logstash (without Filebeat). Since it's not that clear, how Logstash manages ECS schema, I checked the Filebeat mapping and realized, that it uses different naming for Syslog: system.sysl… --- ## [How to remove a field from elastic search mapping?](https://discuss.elastic.co/t/how-to-remove-a-field-from-elastic-search-mapping/271691)
**Author:** [@vk98](https://discuss.elastic.co/u/vk98)\ **Replies:** 3\ **Last updated:** [April 30, 2021, 7:24am UTC](https://discuss.elastic.co/t/how-to-remove-a-field-from-elastic-search-mapping/271691 "2021-04-30T07:24:51Z")
I have added a field which is not actually required in elastic search. Now I want to get rid of it. Changing mapping or making a new one will reindex my whole data. Which is very huge and cant afford to do such thing. Ca… --- ## [Elasticseach failed shard allocation](https://discuss.elastic.co/t/elasticseach-failed-shard-allocation/271739)
**Author:** [@TheVintik](https://discuss.elastic.co/u/TheVintik)\ **Replies:** 7\ **Last updated:** [April 30, 2021, 7:23am UTC](https://discuss.elastic.co/t/elasticseach-failed-shard-allocation/271739 "2021-04-30T07:23:44Z")
My ES is in yellow state after another one node adding and restarting cluster. I have 4 unassigned shards (from 33), and here is response for one of unassigned shards: { "index" : "MY INDEX NAME", "shard" : 0, "pr… --- ## [Elasticsearch 7.12 High CPU usage](https://discuss.elastic.co/t/elasticsearch-7-12-high-cpu-usage/270757)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 7\ **Last updated:** [April 30, 2021, 6:51am UTC](https://discuss.elastic.co/t/elasticsearch-7-12-high-cpu-usage/270757 "2021-04-30T06:51:04Z")
Hi all, Last week in need to install a new cluster and I decided to use the 7.12 version. Initially I've configure a three node cluster (two data+master nodes, one master node). In this version elasticsearch automatic… --- ## [Drill down with Kibana 7.11.0](https://discuss.elastic.co/t/drill-down-with-kibana-7-11-0/271354)
**Author:** [@Manjula\_Piyumal](https://discuss.elastic.co/u/Manjula_Piyumal)\ **Replies:** 4\ **Last updated:** [April 30, 2021, 5:49am UTC](https://discuss.elastic.co/t/drill-down-with-kibana-7-11-0/271354 "2021-04-30T05:49:36Z")
Hi, I'm trying to implement a drill down from one visualization to another dashboard. I have create a TSVB Metric visualization and added another dashboard as a drill down dashboard. I can see that my parent visualizat… --- ## [Logstash If statement and grok not working](https://discuss.elastic.co/t/logstash-if-statement-and-grok-not-working/271717)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 3\ **Last updated:** [April 30, 2021, 4:52am UTC](https://discuss.elastic.co/t/logstash-if-statement-and-grok-not-working/271717 "2021-04-30T04:52:30Z")
I am using following if statement, not sure what is wrong here, it is giving me \_mutate\_error. Does the / cause this error? if \[operationName\] == "MICROSOFT.RESOURCES/SUBSCRIPTIONS/RESOURCEGROUPS/DELETE" { … --- ## [Need help calculating weekly averages using either TSVB tables or Scripted fields](https://discuss.elastic.co/t/need-help-calculating-weekly-averages-using-either-tsvb-tables-or-scripted-fields/271472)
**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\ **Replies:** 9\ **Last updated:** [April 30, 2021, 4:29am UTC](https://discuss.elastic.co/t/need-help-calculating-weekly-averages-using-either-tsvb-tables-or-scripted-fields/271472 "2021-04-30T04:29:35Z")
I have an index with the following structure - @timestamp the format is Apr 25, 2021 @ 05:30:00.000, all of the documents have this same time however the dates vary eg. Apr 26, 2021 @ 05:30:00.000 The next field is a … --- ## [Issue](https://discuss.elastic.co/t/issue/271690)
**Author:** [@sakshi13](https://discuss.elastic.co/u/sakshi13)\ **Replies:** 1\ **Last updated:** [April 30, 2021, 4:21am UTC](https://discuss.elastic.co/t/issue/271690 "2021-04-30T04:21:52Z")
I opened Kibana support for help but, I'm not able to send it because there aren't any option available in Deployment you need help block kindly solve my issue. Thank you --- ## [Metrics dashboards not working as it should](https://discuss.elastic.co/t/metrics-dashboards-not-working-as-it-should/271555)
**Author:** [@Francisco\_Gomez1](https://discuss.elastic.co/u/Francisco_Gomez1)\ **Replies:** 7\ **Last updated:** [April 30, 2021, 4:21am UTC](https://discuss.elastic.co/t/metrics-dashboards-not-working-as-it-should/271555 "2021-04-30T04:21:26Z")
Hi there. Im using elastic agent to load all my system metrics in the dashboards given by kibana, the problem is that when i use the default metrics recollection time (10 seconds) it works well, giving me a perfect view… --- ## [Schedule job for creating new indexes](https://discuss.elastic.co/t/schedule-job-for-creating-new-indexes/271728)
**Author:** [@arctica82](https://discuss.elastic.co/u/arctica82)\ **Replies:** 1\ **Last updated:** [April 30, 2021, 3:38am UTC](https://discuss.elastic.co/t/schedule-job-for-creating-new-indexes/271728 "2021-04-30T03:38:30Z")
Hi Everyone, I am new in Elastic search and I would appreciate if someone help me on below issue.We are trying to create new indexes on quarterly bases(Example :Data\_Q12021,Data\_Q22021,Data\_Q32021,...) and this way part… --- ## [Not to able to create new node](https://discuss.elastic.co/t/not-to-able-to-create-new-node/271537)
**Author:** [@hussshe](https://discuss.elastic.co/u/hussshe)\ **Replies:** 5\ **Last updated:** [April 30, 2021, 2:38am UTC](https://discuss.elastic.co/t/not-to-able-to-create-new-node/271537 "2021-04-30T02:38:13Z")
Hello Elastic Members, ES Version: 7.12.0 OS: Windows 10 I am following an udemy course on ES. The trainer has given a task to add an additional node to the cluster(contains only 1 node) that runs on a same machine. S… --- ## [FSCrawler2.6 : failed to create elasticsearch client, disabling crawler](https://discuss.elastic.co/t/fscrawler2-6-failed-to-create-elasticsearch-client-disabling-crawler/271701)
**Author:** [@joseph-l.amalraj](https://discuss.elastic.co/u/joseph-l.amalraj)\ **Replies:** 6\ **Last updated:** [April 30, 2021, 2:16am UTC](https://discuss.elastic.co/t/fscrawler2-6-failed-to-create-elasticsearch-client-disabling-crawler/271701 "2021-04-30T02:16:06Z")
Hi, Can you please share your suggestions for this issue.. I am using FSCrawler v2.6 and my ELK v6.8.14.. when i tried to ingest pdf files, getting below errors.. FYI.. with the same settings.json and data, i was able… --- ## [How to search over all fields and return every document containing that search in elasticsearch?](https://discuss.elastic.co/t/how-to-search-over-all-fields-and-return-every-document-containing-that-search-in-elasticsearch/271533)
**Author:** [@Sander\_Marx](https://discuss.elastic.co/u/Sander_Marx)\ **Replies:** 2\ **Last updated:** [April 30, 2021, 1:01am UTC](https://discuss.elastic.co/t/how-to-search-over-all-fields-and-return-every-document-containing-that-search-in-elasticsearch/271533 "2021-04-30T01:01:55Z")
I have a problem regarding searching in elasticsearch. I have a index with multiple documents with several fields. I want to be able to search over all the fields running a query and want it to return all the documents … --- ## [Export CSV data from Elasticsearch using Logstash](https://discuss.elastic.co/t/export-csv-data-from-elasticsearch-using-logstash/271702)
**Author:** [@ice2021](https://discuss.elastic.co/u/ice2021)\ **Replies:** 2\ **Last updated:** [April 29, 2021, 9:47pm UTC](https://discuss.elastic.co/t/export-csv-data-from-elasticsearch-using-logstash/271702 "2021-04-29T21:47:55Z")
Hi, I am trying to extract pivoted data from ES using Logstash. It works on Kibana but not on Logstash. \`Error: \[400\] {"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"Unknown key for a VALUE\_STRING in \[qu… --- ## [Use kibana for clickhouse rather than elasticsearch](https://discuss.elastic.co/t/use-kibana-for-clickhouse-rather-than-elasticsearch/271356)
**Author:** [@DrissiReda](https://discuss.elastic.co/u/DrissiReda)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 9:04pm UTC](https://discuss.elastic.co/t/use-kibana-for-clickhouse-rather-than-elasticsearch/271356 "2021-04-29T21:04:45Z")
Hello, I'm trying to add support for clickhouse for kibana. And to do so I need to know what kind of request kibana sends to elasticsearch (especially aggregations). What parts of the source code should I look for? Can … --- ## [Can't start Kibana with nssm.exe Service Paused](https://discuss.elastic.co/t/cant-start-kibana-with-nssm-exe-service-paused/271384)
**Author:** [@ayyoub](https://discuss.elastic.co/u/ayyoub)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 8:48pm UTC](https://discuss.elastic.co/t/cant-start-kibana-with-nssm-exe-service-paused/271384 "2021-04-29T20:48:50Z")
Hi People I tried to start Kibana manually (Kibana-bat) and it worked fine. However as I tried to start Kibana as a service using nssm.exe it couldn't get started as a service and the service turned to "Paused" any Id… --- ## [\[LOGSTASH\] How to pars logs with SSH](https://discuss.elastic.co/t/logstash-how-to-pars-logs-with-ssh/270513)
**Author:** [@Adhara](https://discuss.elastic.co/u/Adhara)\ **Replies:** 2\ **Last updated:** [April 29, 2021, 8:40pm UTC](https://discuss.elastic.co/t/logstash-how-to-pars-logs-with-ssh/270513 "2021-04-29T20:40:48Z")
Hello, I'm new in ELK and i don't understand one thing. I installed ELK with basic options. I did some small tests locally with the "File" input and it worked fine. Now, I wanted to parse the logs for a remote machine… --- ## [Elastic Stack Architecture Upgrade](https://discuss.elastic.co/t/elastic-stack-architecture-upgrade/271708)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 8:30pm UTC](https://discuss.elastic.co/t/elastic-stack-architecture-upgrade/271708 "2021-04-29T20:30:01Z")
I have been tasked by my director with coming up with a 'right size' for our corporate Elastic Stack and I have the following question. We are using AWS Cloud and we're growing but we're not what you would call an extre… --- ## [Missing prepareSearch() method in RestHighLevelClient](https://discuss.elastic.co/t/missing-preparesearch-method-in-resthighlevelclient/271631)
**Author:** [@cmpich](https://discuss.elastic.co/u/cmpich)\ **Replies:** 3\ **Last updated:** [April 29, 2021, 6:13pm UTC](https://discuss.elastic.co/t/missing-preparesearch-method-in-resthighlevelclient/271631 "2021-04-29T18:13:05Z")
I am trying to use Aggregation API and for that documentation tells me to use SearchResponse sr = node.client().prepareSearch() .setQuery( /\* your query \*/ ) .addAggregation( /\* add an aggregation \*/ ) … --- ## [Conversion of timeformat](https://discuss.elastic.co/t/conversion-of-timeformat/270961)
**Author:** [@mansa](https://discuss.elastic.co/u/mansa)\ **Replies:** 5\ **Last updated:** [April 29, 2021, 5:58pm UTC](https://discuss.elastic.co/t/conversion-of-timeformat/270961 "2021-04-29T17:58:53Z")
Hi Folks we have few logs which comes into time format "2021-04-05 08:04:24+07:00" and i want to convert this time into format "Sep 15 18:58:48" because i am sending logs to different SIEM which reads only syslog time st… --- ## [Drop fields with key that contain string and value \<1](https://discuss.elastic.co/t/drop-fields-with-key-that-contain-string-and-value-1/271672)
**Author:** [@Mike\_Clarke](https://discuss.elastic.co/u/Mike_Clarke)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 5:53pm UTC](https://discuss.elastic.co/t/drop-fields-with-key-that-contain-string-and-value-1/271672 "2021-04-29T17:53:02Z")
I have a document that contains multiple fields with name metrics.time.\*. I would like to be able to drop all fields from the event that have key =\> metrics.time\* and value \< 1. Can this be accomplished? I tried doin… --- ## [Does Elasticsearch support double bytes characters in path.data?](https://discuss.elastic.co/t/does-elasticsearch-support-double-bytes-characters-in-path-data/271650)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 5:06pm UTC](https://discuss.elastic.co/t/does-elasticsearch-support-double-bytes-characters-in-path-data/271650 "2021-04-29T17:06:55Z")
Does Elasticsearch support double bytes characters like Chinese, Japanese, Korean in path.data? --- ## [Для чего нужен параметр \_tier\_preference: data\_content?](https://discuss.elastic.co/t/tier-preference-data-content/271652)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 3\ **Last updated:** [April 29, 2021, 5:03pm UTC](https://discuss.elastic.co/t/tier-preference-data-content/271652 "2021-04-29T17:03:29Z")
Добрый день! Заметил, что при обновлении до версий 7.11 или 7.12 в новых индексах, в настройках индекса появился параметр, которого я нигде не указывал ни в одном темплейте индекса ранее: "index.routing.allocation.inclu… --- ## [7.9.3 plugin icon not showing on navigation bar](https://discuss.elastic.co/t/7-9-3-plugin-icon-not-showing-on-navigation-bar/271659)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 4:48pm UTC](https://discuss.elastic.co/t/7-9-3-plugin-icon-not-showing-on-navigation-bar/271659 "2021-04-29T16:48:24Z")
Hi, I have upgraded my plugin from 7.6.0 to 7.9.3. My custom icon no longer renders in the navigation bar core.application.register({ id: 'wind', title: PLUGIN\_NAME, order: -5000, icon: 'plu… --- ## [Do we have data loss when logstash is unable to send logs to haproxy as haproxy server is unavailable](https://discuss.elastic.co/t/do-we-have-data-loss-when-logstash-is-unable-to-send-logs-to-haproxy-as-haproxy-server-is-unavailable/269216)
**Author:** [@muralikrishna](https://discuss.elastic.co/u/muralikrishna)\ **Replies:** 6\ **Last updated:** [April 29, 2021, 4:03pm UTC](https://discuss.elastic.co/t/do-we-have-data-loss-when-logstash-is-unable-to-send-logs-to-haproxy-as-haproxy-server-is-unavailable/269216 "2021-04-29T16:03:09Z")
Hi All, I am looking for some information on data/log loss incase of my below situation. I have centralized management cluster to which my logstash will be connected with and i have logs coming from beat agents and sys… --- ## [Kibana is not accessible from external browser](https://discuss.elastic.co/t/kibana-is-not-accessible-from-external-browser/271636)
**Author:** [@almotasim90](https://discuss.elastic.co/u/almotasim90)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 3:37pm UTC](https://discuss.elastic.co/t/kibana-is-not-accessible-from-external-browser/271636 "2021-04-29T15:37:04Z")
Hello, I am trying to install Elasticsearch and Kibana on Debian 10. they both work and active in the current machine. I want to access Kibana through different machine's browser, but it cannot be reached. I have chan… --- ## [Pattern Replace Character Filter In a Normalizer](https://discuss.elastic.co/t/pattern-replace-character-filter-in-a-normalizer/271669)
**Author:** [@MilanGatyas](https://discuss.elastic.co/u/MilanGatyas)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 2:58pm UTC](https://discuss.elastic.co/t/pattern-replace-character-filter-in-a-normalizer/271669 "2021-04-29T14:58:46Z")
My goal is to have a same pattern replace character filter on both my custom analyzer and normalizer. Seems like I can use the filter on the analyzer without issues, however facing error when trying to attach the filter … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=961) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=963)