# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=972 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 973 --- ## ["reason"=\>"failed to parse field \[host.name\] of type \[text\] in document with id](https://discuss.elastic.co/t/reason-failed-to-parse-field-host-name-of-type-text-in-document-with-id/270923)
**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\ **Replies:** 2\ **Last updated:** [April 22, 2021, 10:18am UTC](https://discuss.elastic.co/t/reason-failed-to-parse-field-host-name-of-type-text-in-document-with-id/270923 "2021-04-22T10:18:04Z")
Logstash outputs below error log. \[2021-04-22T15:00:43,643\]\[WARN \]\[logstash.outputs.elasticsearch\]\[＜pipeline id＞\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"＜index na… --- ## [Can't find terms that are not ".keyword" and the "something.keyword" terms are empty](https://discuss.elastic.co/t/cant-find-terms-that-are-not-keyword-and-the-something-keyword-terms-are-empty/269998)
**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\ **Replies:** 2\ **Last updated:** [April 22, 2021, 8:17am UTC](https://discuss.elastic.co/t/cant-find-terms-that-are-not-keyword-and-the-something-keyword-terms-are-empty/269998 "2021-04-22T08:17:13Z")
Hi, I've been playing a little bit with mappings and index templates lately, and that actually helped me make the SIEM work and see a lot of improvement. However, many of my visualizations just stopped working, mainly be… --- ## [Added multiple config files in a directory and edited pipelines.yml. yet only one of the config file is being processed](https://discuss.elastic.co/t/added-multiple-config-files-in-a-directory-and-edited-pipelines-yml-yet-only-one-of-the-config-file-is-being-processed/270607)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 2\ **Last updated:** [April 22, 2021, 8:09am UTC](https://discuss.elastic.co/t/added-multiple-config-files-in-a-directory-and-edited-pipelines-yml-yet-only-one-of-the-config-file-is-being-processed/270607 "2021-04-22T08:09:12Z")
I'm running logstash on a MAC , i got two config file, which run fine when executed on their own . However i moved them to a custom directory and added the path onto the pipelines.yml, while execution via "logstash -f /… --- ## [How to run more nodes in cluster as service in Centos](https://discuss.elastic.co/t/how-to-run-more-nodes-in-cluster-as-service-in-centos/270549)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 7\ **Last updated:** [April 22, 2021, 8:00am UTC](https://discuss.elastic.co/t/how-to-run-more-nodes-in-cluster-as-service-in-centos/270549 "2021-04-22T08:00:41Z")
I have downloaded elasticsearch tar.gz for every nodes. I have modified elasticsearch.yml for each node. I made a script for running each nodes. Script is like below : sh ../node1/bin/elasticsearch sh ../node2/bin/ela… --- ## [Plugin installation on local ElasticSearch](https://discuss.elastic.co/t/plugin-installation-on-local-elasticsearch/270729)
**Author:** [@Lukas\_Smilek](https://discuss.elastic.co/u/Lukas_Smilek)\ **Replies:** 10\ **Last updated:** [April 22, 2021, 7:55am UTC](https://discuss.elastic.co/t/plugin-installation-on-local-elasticsearch/270729 "2021-04-22T07:55:13Z")
Hello, I was able to successfully install ElasticSearch 7.12.0 on my Mac and also work with it (mapping and indexing first objects via non local network). I want to install a plugin, but I can't get pass this error: \*\*\*… --- ## [Discover view has changed - 7.12.0](https://discuss.elastic.co/t/discover-view-has-changed-7-12-0/270902)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [April 22, 2021, 7:32am UTC](https://discuss.elastic.co/t/discover-view-has-changed-7-12-0/270902 "2021-04-22T07:32:21Z")
"\_index": "test", "\_type": "\_doc", "\_id": "1", "\_version": 3, "\_score": 0, "fields": { "number": \[ 2 \], "statu": \[ "active" \], "word": \[ "test2" \], "word.keyword": … --- ## [Logstash KUSTOS output plugin](https://discuss.elastic.co/t/logstash-kustos-output-plugin/270922)
**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\ **Replies:** 0\ **Last updated:** [April 22, 2021, 6:15am UTC](https://discuss.elastic.co/t/logstash-kustos-output-plugin/270922 "2021-04-22T06:15:20Z")
Dear ELKan's Have ever tried kustos output plugin to ingest the data from Logstash to Azure Data explorer. I'm currently following Azure documentation for the same. If you can help me with additional information/refere… --- ## [How can I index the data in an array?](https://discuss.elastic.co/t/how-can-i-index-the-data-in-an-array/270664)
**Author:** [@xo1534](https://discuss.elastic.co/u/xo1534)\ **Replies:** 2\ **Last updated:** [April 20, 2021, 7:27am UTC](https://discuss.elastic.co/t/how-can-i-index-the-data-in-an-array/270664 "2021-04-20T07:27:44Z")
biz\_tag data is A,B,C,D,E i want result data.... biz\_tag: \[ A, B, C, D, E \] but... Actual Results biz\_tag: A What's the problem??? Thank you... --- ## [Is this the exact information for \_nodes/stats response](https://discuss.elastic.co/t/is-this-the-exact-information-for-nodes-stats-response/270037)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 5\ **Last updated:** [April 22, 2021, 5:46am UTC](https://discuss.elastic.co/t/is-this-the-exact-information-for-nodes-stats-response/270037 "2021-04-22T05:46:39Z")
I had deployed eck-1.3.0 and elasticsearch 7.9.0 in GKE with 2 data-ingest and 3 master pods. Below is the one when I do get pods: kubectl -n \ get po NAME READY STATU… --- ## [Kibana Data Table Pagination](https://discuss.elastic.co/t/kibana-data-table-pagination/270819)
**Author:** [@Noobmaster](https://discuss.elastic.co/u/Noobmaster)\ **Replies:** 6\ **Last updated:** [April 22, 2021, 4:50am UTC](https://discuss.elastic.co/t/kibana-data-table-pagination/270819 "2021-04-22T04:50:23Z")
Hi there, I am new to elk and kibana. I have created this data table using 'kibana sample ecommerce data' by going through these steps 1. Dashboards-\> 2.Create Panel-\>3.Aggregation based-\>4. Data Tables. And I dragged … --- ## [Question regarding question 4 of the Observability practice exam](https://discuss.elastic.co/t/question-regarding-question-4-of-the-observability-practice-exam/269388)
**Author:** [@EvanKara](https://discuss.elastic.co/u/EvanKara)\ **Replies:** 8\ **Last updated:** [April 22, 2021, 1:45am UTC](https://discuss.elastic.co/t/question-regarding-question-4-of-the-observability-practice-exam/269388 "2021-04-22T01:45:39Z")
Hi All, I am attempting question 4 of the practice exam, and am stuck on how to use the dissect processor to escape the "\\t" character: The Input sample pipeline document is as follows: { "\_source": { "message": "2020… --- ## [Cannot start ElasticSearch service](https://discuss.elastic.co/t/cannot-start-elasticsearch-service/270873)
**Author:** [@Egdar\_Navvasardyan](https://discuss.elastic.co/u/Egdar_Navvasardyan)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 11:17pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-service/270873 "2021-04-21T23:17:20Z")
I am trying to run Elasticsearch doing the following: sudo su systemctl start elasticsearch My .yml file looks like this: cluster.name: petlon-app node.name: my-app-node path.data: /var/lib/elasticsearch path.logs: /… --- ## [How to use multiple filter files in logstash-filter-verifier command](https://discuss.elastic.co/t/how-to-use-multiple-filter-files-in-logstash-filter-verifier-command/270908)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 10:33pm UTC](https://discuss.elastic.co/t/how-to-use-multiple-filter-files-in-logstash-filter-verifier-command/270908 "2021-04-21T22:33:09Z")
I am using logstash-filter-verifier to execute my test cases for testing various logstash pipelines. From the git documentation I can see the command that will be used to run those test cases $ path/to/logstash-filter-v… --- ## [Replicating Logstash Fingerprint in elasticsearch\_dsl\_py](https://discuss.elastic.co/t/replicating-logstash-fingerprint-in-elasticsearch-dsl-py/270905)
**Author:** [@Mark\_Parrish](https://discuss.elastic.co/u/Mark_Parrish)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 10:46pm UTC](https://discuss.elastic.co/t/replicating-logstash-fingerprint-in-elasticsearch-dsl-py/270905 "2021-04-21T22:46:25Z")
I am trying replicate this piece of code in the python. ruby { code =\> ' physical = \[ event.get("address1").to\_s, event.get("address2").to\_s, event.get("city").to\_s, event.get… --- ## [F5 load balancer attributes/configuration with Elasticsearch cluster](https://discuss.elastic.co/t/f5-load-balancer-attributes-configuration-with-elasticsearch-cluster/270904)
**Author:** [@fletches](https://discuss.elastic.co/u/fletches)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 10:30pm UTC](https://discuss.elastic.co/t/f5-load-balancer-attributes-configuration-with-elasticsearch-cluster/270904 "2021-04-21T22:30:49Z")
We will be configuring an F5 load balancer for our Elasticsearch cluster. This question is not about the use of a load balancer vs coordinator role. That discussion is elsewhere in many places. The decision has been made… --- ## [Too many requests disk usage exceeded flood stage water mark](https://discuss.elastic.co/t/too-many-requests-disk-usage-exceeded-flood-stage-water-mark/270676)
**Author:** [@divakar\_maradana](https://discuss.elastic.co/u/divakar_maradana)\ **Replies:** 3\ **Last updated:** [April 21, 2021, 10:30pm UTC](https://discuss.elastic.co/t/too-many-requests-disk-usage-exceeded-flood-stage-water-mark/270676 "2021-04-21T22:30:13Z")
HI Team, We are using highend i3.2xlarge instance for elasticsearch(trail version) and m5d.large instance for kibana(trail version) , we can able to see logs on kibana from beats. But here is the -- issue index \[.asyn… --- ## [Elasticsearch bulk Ingestion](https://discuss.elastic.co/t/elasticsearch-bulk-ingestion/270754)
**Author:** [@Rokshan\_Jahan](https://discuss.elastic.co/u/Rokshan_Jahan)\ **Replies:** 3\ **Last updated:** [April 21, 2021, 10:29pm UTC](https://discuss.elastic.co/t/elasticsearch-bulk-ingestion/270754 "2021-04-21T22:29:52Z")
Hi, I have 7 TB ( 32 billion records) to ingest in elastic search. What would be the best elastic search configuration we can use to load these data quickly. --- ## [Reproduce 206 Partial result](https://discuss.elastic.co/t/reproduce-206-partial-result/270875)
**Author:** [@theredcat](https://discuss.elastic.co/u/theredcat)\ **Replies:** 3\ **Last updated:** [April 21, 2021, 7:08pm UTC](https://discuss.elastic.co/t/reproduce-206-partial-result/270875 "2021-04-21T19:08:08Z")
Hi, I had a problem in production that seems related to a 206 partial response being returned when I restarted one of my node for maintenance. I'm trying to reproduce this but I had no luck for now. Is there any proced… --- ## [Date field mapping error with type \[date\] to \[long\]](https://discuss.elastic.co/t/date-field-mapping-error-with-type-date-to-long/270766)
**Author:** [@Lorenzo\_Zuluaga](https://discuss.elastic.co/u/Lorenzo_Zuluaga)\ **Replies:** 12\ **Last updated:** [April 21, 2021, 1:45am UTC](https://discuss.elastic.co/t/date-field-mapping-error-with-type-date-to-long/270766 "2021-04-21T01:45:10Z")
Hi, I'm currently having a strange issue and I can't find anything related to it. I have an elasticsearch cluster for my production environment with 3 nodes. Recently I created a single-node cluster for my staging enviro… --- ## [Kibana visualization built with context of other logs](https://discuss.elastic.co/t/kibana-visualization-built-with-context-of-other-logs/268696)
**Author:** [@mbrad](https://discuss.elastic.co/u/mbrad)\ **Replies:** 3\ **Last updated:** [April 21, 2021, 4:49pm UTC](https://discuss.elastic.co/t/kibana-visualization-built-with-context-of-other-logs/268696 "2021-04-21T16:49:56Z")
Hello - My team is using ElasticSearch/Kibana for security metric related things and we are having trouble with a specific use case: When a finding is open, a document is created with alerts.status:open associated to t… --- ## [Best approach to create visualizations/dashboard via API calls?](https://discuss.elastic.co/t/best-approach-to-create-visualizations-dashboard-via-api-calls/270603)
**Author:** [@rmartinez.rv](https://discuss.elastic.co/u/rmartinez.rv)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 4:44pm UTC](https://discuss.elastic.co/t/best-approach-to-create-visualizations-dashboard-via-api-calls/270603 "2021-04-21T16:44:43Z")
Hi. I'm trying to create a visualization in Kibana via API calls. So far i'm a little bit confused on how to do this. Please try to follow me.. and correct me if i'm wrong... So far i discovered two types of API call… --- ## [Filebeat with Suricata module](https://discuss.elastic.co/t/filebeat-with-suricata-module/270863)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 3:13pm UTC](https://discuss.elastic.co/t/filebeat-with-suricata-module/270863 "2021-04-21T15:13:46Z")
Hi there! Here is my question. I have Filebeat sending Suricata logs directly to Elasticsearch (via Suricata module). My Suricata log files are divided by types of events (eve-alerts, eve-dns, eve-events). In Kibana is… --- ## [Seeking advice on parsing Nagios logs using pre-built pattern files from herokuapp.com](https://discuss.elastic.co/t/seeking-advice-on-parsing-nagios-logs-using-pre-built-pattern-files-from-herokuapp-com/270850)
**Author:** [@kgeil](https://discuss.elastic.co/u/kgeil)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 2:48pm UTC](https://discuss.elastic.co/t/seeking-advice-on-parsing-nagios-logs-using-pre-built-pattern-files-from-herokuapp-com/270850 "2021-04-21T14:48:09Z")
Good morning everyone. I'm early in the Elastic Stack learning curve, and I'm working on parsing some nagios logs this morning. I Have nagios logging to syslog, and can use the pattern file located on the herokuapp gro… --- ## [Kibana Discover not working as expected](https://discuss.elastic.co/t/kibana-discover-not-working-as-expected/262101)
**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 2:44pm UTC](https://discuss.elastic.co/t/kibana-discover-not-working-as-expected/262101 "2021-04-21T14:44:33Z")
I have setup a Kibana and ElasticSearch on my own GKE cluster. Following the guide -\> https://www.digitalocean.com/community/tutorials/how-to-set-up-an-elasticsearch-fluentd-and-kibana-efk-logging-stack-on-kubernetes H… --- ## [( Kibana visualize ) A value greater than "Max axis extents" is not displayed with on Line chart](https://discuss.elastic.co/t/kibana-visualize-a-value-greater-than-max-axis-extents-is-not-displayed-with-on-line-chart/269202)
**Author:** [@kash203](https://discuss.elastic.co/u/kash203)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 2:18pm UTC](https://discuss.elastic.co/t/kibana-visualize-a-value-greater-than-max-axis-extents-is-not-displayed-with-on-line-chart/269202 "2021-04-21T14:18:16Z")
When we update version of kibana from 7.11 to 7.12, a value greater than "Max axis extents(Y-axes)" is not displayed on Line chart of visualize. On prior to 7.11, When the value of the data exceeded "Max axis extents"… --- ## [Logstash json parsing](https://discuss.elastic.co/t/logstash-json-parsing/270851)
**Author:** [@Andrey\_RF](https://discuss.elastic.co/u/Andrey_RF)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 2:01pm UTC](https://discuss.elastic.co/t/logstash-json-parsing/270851 "2021-04-21T14:01:52Z")
Hello. I have incoming JSON log. It has nested JSON. I want to parse main JSON and nested. Example: { "value": "123", "nested": { "value-two": "555" } } . I have a filter like this json { source =\> "messag… --- ## [Uploading csv file: Failed to parse date field dd/MM/yyyy HH:mm](https://discuss.elastic.co/t/uploading-csv-file-failed-to-parse-date-field-dd-mm-yyyy-hh-mm/270813)
**Author:** [@MARCO\_RAMBALDI](https://discuss.elastic.co/u/MARCO_RAMBALDI)\ **Replies:** 23\ **Last updated:** [April 21, 2021, 1:46pm UTC](https://discuss.elastic.co/t/uploading-csv-file-failed-to-parse-date-field-dd-mm-yyyy-hh-mm/270813 "2021-04-21T13:46:16Z")
Hi, I'm uploading a csv file (; as separator). I identified one of the columns as Machine Time. The format on excel is "customized" as seen in the image below: To parse the date as a date type on Elastic I used the … --- ## [Input controls don't work in embed or iframe mode](https://discuss.elastic.co/t/input-controls-dont-work-in-embed-or-iframe-mode/270848)
**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 1:36pm UTC](https://discuss.elastic.co/t/input-controls-dont-work-in-embed-or-iframe-mode/270848 "2021-04-21T13:36:02Z")
Hello, I recently upgraded Kibana from 7.8.1 to 7.12.0 version. I'm seeing this issue in the 7.12.0 version. When I try to use input controls on embedded dashboard, the controls don't work as expected.. Steps I follow… --- ## [Elasticsearch readiness probe failures](https://discuss.elastic.co/t/elasticsearch-readiness-probe-failures/270581)
**Author:** [@Janos\_Csorvasi](https://discuss.elastic.co/u/Janos_Csorvasi)\ **Replies:** 4\ **Last updated:** [April 21, 2021, 12:58pm UTC](https://discuss.elastic.co/t/elasticsearch-readiness-probe-failures/270581 "2021-04-21T12:58:18Z")
Hi, tl;dr: Elasticsearch ingest nodes are exhibiting frequent readiness probe failures e.g. {"timestamp": "2021-04-19T09:58:01+00:00", "message": "readiness probe failed", "curl\_rc": "28"}. We would like to understand w… --- ## [Create instance of elasticsearch](https://discuss.elastic.co/t/create-instance-of-elasticsearch/270831)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 6\ **Last updated:** [April 21, 2021, 12:14pm UTC](https://discuss.elastic.co/t/create-instance-of-elasticsearch/270831 "2021-04-21T12:14:49Z")
Hi I have a cluster with 4 nodes of Elasticsearch. 2 of them are in datacenter A and the other 2 are in datacenter B Here is my concern: I want to run an instance of each node in another datacenter. For example node1 … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=971) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=973)