# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=975 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 976 --- ## [Search in wrong Index](https://discuss.elastic.co/t/search-in-wrong-index/270369)
**Author:** [@Gioking](https://discuss.elastic.co/u/Gioking)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 11:33pm UTC](https://discuss.elastic.co/t/search-in-wrong-index/270369 "2021-04-19T23:33:23Z")
Hi all, I'm new to Elasticsearch, I had to add a couple of field in mssql, the same fields must be created in elasticsearch. To add new fields I follow this procedure: 1 Copy the index mapping from the original index … --- ## [Correlation analysis in elasticsearch](https://discuss.elastic.co/t/correlation-analysis-in-elasticsearch/270346)
**Author:** [@111387](https://discuss.elastic.co/u/111387)\ **Replies:** 0\ **Last updated:** [April 16, 2021, 8:14am UTC](https://discuss.elastic.co/t/correlation-analysis-in-elasticsearch/270346 "2021-04-16T08:14:22Z")
I am collecting suricata events with elasticsearch. I want to create an alert through correlation analysis for suricata event. For example, when the following events are saved { rule.event: "event a" src.ip: "… --- ## [Missing logs randomly on kibana](https://discuss.elastic.co/t/missing-logs-randomly-on-kibana/270329)
**Author:** [@danushkalakmina](https://discuss.elastic.co/u/danushkalakmina)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 11:32pm UTC](https://discuss.elastic.co/t/missing-logs-randomly-on-kibana/270329 "2021-04-19T23:32:37Z")
Hi My Kibana logs are missing randomly from every log bulk. But the raw log is in the original log location on the application server. --- ## [Stackmonitor production cluster on a different monitoring cluster](https://discuss.elastic.co/t/stackmonitor-production-cluster-on-a-different-monitoring-cluster/270277)
**Author:** [@Pooja](https://discuss.elastic.co/u/Pooja)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 11:29pm UTC](https://discuss.elastic.co/t/stackmonitor-production-cluster-on-a-different-monitoring-cluster/270277 "2021-04-19T23:29:25Z")
I would like to get help on monitoring production cluster on a separate monitoring cluster using metricbeat. As of now I am finding issues sending the data across clusters. I have the metricbeat setup on poduction clus… --- ## [Index\_closed\_exception on open index](https://discuss.elastic.co/t/index-closed-exception-on-open-index/270273)
**Author:** [@maigel](https://discuss.elastic.co/u/maigel)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 11:28pm UTC](https://discuss.elastic.co/t/index-closed-exception-on-open-index/270273 "2021-04-19T23:28:57Z")
Hi, We currently have a cluster with a lot of network security (Zeek) logs. I have a script written with elasticsearch-py which periodically searches all data for known IOCs (bad IPs, bad domains, etc.) Every once in a… --- ## [Many process](https://discuss.elastic.co/t/many-process/270257)
**Author:** [@gh\_darvishani](https://discuss.elastic.co/u/gh_darvishani)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 11:27pm UTC](https://discuss.elastic.co/t/many-process/270257 "2021-04-19T23:27:34Z")
i use magento as my cms and ES as the search engine. my server (apache) after a while created. i check the log and process and i saw many processes for ES how i can set a limit for processes or threads --- ## [Index created with too many fields, automatic creation](https://discuss.elastic.co/t/index-created-with-too-many-fields-automatic-creation/270245)
**Author:** [@PSTech](https://discuss.elastic.co/u/PSTech)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 11:26pm UTC](https://discuss.elastic.co/t/index-created-with-too-many-fields-automatic-creation/270245 "2021-04-19T23:26:51Z")
hi, I've been trying to setup apache module Filebeat, with automatic index creation. after my index was created I wasn't able to create an index pattern in my Kibana UI with the error code 413 Request Entity Too Large","… --- ## [ECE add extra storage disk and not seen by the instance](https://discuss.elastic.co/t/ece-add-extra-storage-disk-and-not-seen-by-the-instance/270118)
**Author:** [@Diana\_Dragoiu](https://discuss.elastic.co/u/Diana_Dragoiu)\ **Replies:** 0\ **Last updated:** [April 14, 2021, 1:34pm UTC](https://discuss.elastic.co/t/ece-add-extra-storage-disk-and-not-seen-by-the-instance/270118 "2021-04-14T13:34:20Z")
Hello there, I created a hot node with 30 GB and I need extra storage(100GB). I added(mounted) a disk but the ECE instance can not see the new extra storage. \[user@xxx~\]$ df -h Filesystem Size Used Avail Use% Mo… --- ## [Looking for updated geoip database](https://discuss.elastic.co/t/looking-for-updated-geoip-database/270450)
**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 11:14pm UTC](https://discuss.elastic.co/t/looking-for-updated-geoip-database/270450 "2021-04-19T23:14:41Z")
hi if somebody can help me to find a free database GeoIP updated thanks. --- ## [Logstash setting field to date without any options set](https://discuss.elastic.co/t/logstash-setting-field-to-date-without-any-options-set/270621)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 3\ **Last updated:** [April 19, 2021, 10:17pm UTC](https://discuss.elastic.co/t/logstash-setting-field-to-date-without-any-options-set/270621 "2021-04-19T22:17:56Z")
I am ingesting a csv file. The only options set in the filter are a gsub meant to remove double quotes; a csv filter which skips the header, the separator and the column/field names set; and a mutate to add one field an… --- ## [Dynamic Mapping for Nested Objects](https://discuss.elastic.co/t/dynamic-mapping-for-nested-objects/270628)
**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\ **Replies:** 0\ **Last updated:** [April 19, 2021, 9:27pm UTC](https://discuss.elastic.co/t/dynamic-mapping-for-nested-objects/270628 "2021-04-19T21:27:24Z")
Is it possible to have dynamic mapping for a nested object like the following - employee { "id":"1", "name":"manager", "assistants":\[ { "id":"2", "name":"assistant1" }, { "id":"3… --- ## [Conversion of hexadecimal to integer](https://discuss.elastic.co/t/conversion-of-hexadecimal-to-integer/270615)
**Author:** [@Sruthi1](https://discuss.elastic.co/u/Sruthi1)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 9:14pm UTC](https://discuss.elastic.co/t/conversion-of-hexadecimal-to-integer/270615 "2021-04-19T21:14:01Z")
Hiiii I am using kibana 7.2.0. I have used the function Integer.parseInt() to convert the hexadecimal to integer value, but it is throwing runtime error. if(doc\['hex\_value'\]!=null){return Integer.parseInt(doc\['hex\_valu… --- ## [Ruby exception occurred: undefined method \`size' for nil:NilClass](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-size-for-nil-nilclass/270409)
**Author:** [@Eduard\_Abril](https://discuss.elastic.co/u/Eduard_Abril)\ **Replies:** 2\ **Last updated:** [April 19, 2021, 8:24pm UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-size-for-nil-nilclass/270409 "2021-04-19T20:24:00Z")
Hi guys, I have the next error on a ruby filter. I'd really appreciate any suggest \[2021-04-16T11:28:06,202\]\[ERROR\]\[logstash.filters.ruby \]\[main-postilion-pipeline\]\[87afa373e1d0191b4f869238d2908162c237ad31fe6074ec0a… --- ## [Ingest JSON data into elasticsearch using logstash](https://discuss.elastic.co/t/ingest-json-data-into-elasticsearch-using-logstash/270558)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 4\ **Last updated:** [April 19, 2021, 6:33pm UTC](https://discuss.elastic.co/t/ingest-json-data-into-elasticsearch-using-logstash/270558 "2021-04-19T18:33:59Z")
HI All, I have a complicated json data to ingest into elasticsearch, need your suggestion to achieve this. Here is my data format, \ \ \/api/device/13766\ \ **Author:** [@souravsahoo](https://discuss.elastic.co/u/souravsahoo)\ **Replies:** 2\ **Last updated:** [April 19, 2021, 5:37pm UTC](https://discuss.elastic.co/t/lucene-merge-thread-causing-high-cpu-usage/270599 "2021-04-19T17:37:06Z") Hi all, I have been facing issue with elasticsearch consuming a very high CPU i.e., 80-100% when a heavy data load is ingested. Below are few inputs:- Elasticsearch is running on. 7.10.2 version We have data tier arc… --- ## [How to make it work?!](https://discuss.elastic.co/t/how-to-make-it-work/270534)
**Author:** [@tennaen](https://discuss.elastic.co/u/tennaen)\ **Replies:** 2\ **Last updated:** [April 19, 2021, 2:58pm UTC](https://discuss.elastic.co/t/how-to-make-it-work/270534 "2021-04-19T14:58:43Z")
Dears, i have a problem and i cannot deal with it. In my pipeline configuration i have this code: if "%{\[process\]\[thread\]\[id\]}" =~ "\[a-z0-9\]+/\[a-z0-9\]+" { mutate { split =\> { "\[process\]\[thr… --- ## [Kibana with routing awareness](https://discuss.elastic.co/t/kibana-with-routing-awareness/270582)
**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\ **Replies:** 4\ **Last updated:** [April 19, 2021, 2:38pm UTC](https://discuss.elastic.co/t/kibana-with-routing-awareness/270582 "2021-04-19T14:38:51Z")
Hello everyone, I just saw that ElasticSearch is able to route requests according to the attributes attached to the cluster nodes (Cluster-level shard allocation and routing settings | Elasticsearch Guide \[7.7\] | Elastic)… --- ## [Performance Issue with Elasticsearch 7.11.1 Cluster](https://discuss.elastic.co/t/performance-issue-with-elasticsearch-7-11-1-cluster/270592)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 0\ **Last updated:** [April 19, 2021, 2:03pm UTC](https://discuss.elastic.co/t/performance-issue-with-elasticsearch-7-11-1-cluster/270592 "2021-04-19T14:03:55Z")
Hi, We've had an issue show itself in recent days with one of our clusters. High level behaviour is as follows: Ingestion Rate has collapsed 504 errors reported by logstash One node showing exceptionally high load ave… --- ## [%{\[Logs\]\[NET\] meaning](https://discuss.elastic.co/t/logs-net-meaning/270569)
**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 1:26pm UTC](https://discuss.elastic.co/t/logs-net-meaning/270569 "2021-04-19T13:26:51Z")
what is the meaning of index =\> "%{\[Logs\]\[NET\]-%{+YYYY.MM.dd}}" thanks --- ## [Addition and removal of URL in heartbeat.yml](https://discuss.elastic.co/t/addition-and-removal-of-url-in-heartbeat-yml/270572)
**Author:** [@Sujithra\_S](https://discuss.elastic.co/u/Sujithra_S)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 12:12pm UTC](https://discuss.elastic.co/t/addition-and-removal-of-url-in-heartbeat-yml/270572 "2021-04-19T12:12:05Z")
Hello I have more than 200 url's to add into the heartbeat.yml, So that it will take more manual efforts. Is there any easiest way for adding and removing an url, Please help me to sort out this --- ## [Kibana Reports PDF export](https://discuss.elastic.co/t/kibana-reports-pdf-export/270477)
**Author:** [@prajganesh](https://discuss.elastic.co/u/prajganesh)\ **Replies:** 3\ **Last updated:** [April 19, 2021, 12:04pm UTC](https://discuss.elastic.co/t/kibana-reports-pdf-export/270477 "2021-04-19T12:04:22Z")
I'm having a basic Kibana for research purposes. How can I export Kibana dashboards to PDF? Is there any basic subscription for PDF export. I need it for On-prem and used only for personal development. Thanks for the he… --- ## [How to graph collapse search results?](https://discuss.elastic.co/t/how-to-graph-collapse-search-results/270349)
**Author:** [@Glen\_Ogilvie](https://discuss.elastic.co/u/Glen_Ogilvie)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 11:59am UTC](https://discuss.elastic.co/t/how-to-graph-collapse-search-results/270349 "2021-04-19T11:59:47Z")
I've written a search that uses collapse: To get the latest records from a time series, that I would then like to graph. I can't however find a reasonable way in Kibana to do this, with the best I've found is the top\_… --- ## [How to delete a mapping field of an index?](https://discuss.elastic.co/t/how-to-delete-a-mapping-field-of-an-index/270371)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 2\ **Last updated:** [April 19, 2021, 11:12am UTC](https://discuss.elastic.co/t/how-to-delete-a-mapping-field-of-an-index/270371 "2021-04-19T11:12:34Z")
I followed this page: Update mapping API | Elasticsearch Guide \[master\] | Elastic It seems ES does not support delete a mapping field directly? --- ## [How to reflect the DELETE operations in ES logs](https://discuss.elastic.co/t/how-to-reflect-the-delete-operations-in-es-logs/270564)
**Author:** [@yuriy.kasterin](https://discuss.elastic.co/u/yuriy.kasterin)\ **Replies:** 0\ **Last updated:** [April 19, 2021, 10:35am UTC](https://discuss.elastic.co/t/how-to-reflect-the-delete-operations-in-es-logs/270564 "2021-04-19T10:35:03Z")
Hello. I have an issue on ES server that an old records are constantly disappear from the server after 15 days. I have checked all the relevant logs related to an application that indexes a new records into ES server a… --- ## [Elasticsearch deletes my index out of nowhere](https://discuss.elastic.co/t/elasticsearch-deletes-my-index-out-of-nowhere/270551)
**Author:** [@Nikolaj\_Karpov](https://discuss.elastic.co/u/Nikolaj_Karpov)\ **Replies:** 5\ **Last updated:** [April 19, 2021, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-deletes-my-index-out-of-nowhere/270551 "2021-04-19T10:27:18Z")
I have Elasticsearch server on AWS . And every now and then my Elasticsearch index is being somehow deleted without me doing anything. Below are the logs from my Elasticsearch server. \[2021-04-19T01:30:00,001\]\[INFO… --- ## [Find all documents containing array object field of size 0 or more](https://discuss.elastic.co/t/find-all-documents-containing-array-object-field-of-size-0-or-more/270562)
**Author:** [@dheeru4elastic](https://discuss.elastic.co/u/dheeru4elastic)\ **Replies:** 0\ **Last updated:** [April 19, 2021, 9:53am UTC](https://discuss.elastic.co/t/find-all-documents-containing-array-object-field-of-size-0-or-more/270562 "2021-04-19T09:53:14Z")
Please find below the sample documents that I have in my elasticsearch 7.7.0. How can i build a optimize query to fetch all the documents that contains the array field problemInvestigations . As you can see some document… --- ## [Snmp mib yamlmibdir](https://discuss.elastic.co/t/snmp-mib-yamlmibdir/270554)
**Author:** [@elastic\_study](https://discuss.elastic.co/u/elastic_study)\ **Replies:** 0\ **Last updated:** [April 19, 2021, 9:02am UTC](https://discuss.elastic.co/t/snmp-mib-yamlmibdir/270554 "2021-04-19T09:02:07Z")
How to convert a vendor mib file to an yaml mib ？ Is there any other tool？ --- ## [Detection rule CLI error](https://discuss.elastic.co/t/detection-rule-cli-error/270333)
**Author:** [@Nil\_Battey\_Sannata](https://discuss.elastic.co/u/Nil_Battey_Sannata)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 7:59am UTC](https://discuss.elastic.co/t/detection-rule-cli-error/270333 "2021-04-19T07:59:31Z")
Hi, I am trying to import Detection RUles with CLI but facing errors as per attached snapshot. I am using self signed cert. --- ## [Why elasticsearch mapping conflicts?](https://discuss.elastic.co/t/why-elasticsearch-mapping-conflicts/270544)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [April 19, 2021, 7:49am UTC](https://discuss.elastic.co/t/why-elasticsearch-mapping-conflicts/270544 "2021-04-19T07:49:31Z")
I am facing some issues in elasticsearch mapping.Although i have check the forum the solution is reindexing but why? GET \_template/winlogbeat\_sysmon { "winlogbeat\_sysmon" : { "order" : 0, "index\_patterns" : \[ … --- ## [Could not index event to elasticsearch maximum shards open](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-maximum-shards-open/270524)
**Author:** [@TrAMT](https://discuss.elastic.co/u/TrAMT)\ **Replies:** 3\ **Last updated:** [April 19, 2021, 7:47am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-maximum-shards-open/270524 "2021-04-19T07:47:06Z")
Hi I have problem with Elasticsearch and Logstash. Here is the detail of log: Apr 16 13:01:24 elastic7-logstash logstash\[980\]: \[2021-04-16T13:01:24,828\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to E… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=974) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=976)