# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=983 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 984 --- ## [Logstash 7.9 high CPU, RAM and hangs when a unicode message is received by syslog input](https://discuss.elastic.co/t/logstash-7-9-high-cpu-ram-and-hangs-when-a-unicode-message-is-received-by-syslog-input/269885)
**Author:** [@ivorthe3ngine](https://discuss.elastic.co/u/ivorthe3ngine)\ **Replies:** 0\ **Last updated:** [April 12, 2021, 1:36pm UTC](https://discuss.elastic.co/t/logstash-7-9-high-cpu-ram-and-hangs-when-a-unicode-message-is-received-by-syslog-input/269885 "2021-04-12T13:36:45Z")
Hi All, any assistance on this issue would be most appreciated. On receiving the following message, logstash stopped processing any further incoming messages and began consuming high CPU. Version: 7.9.0 Operating Syst… --- ## [Elasticsearch connection to kiabana](https://discuss.elastic.co/t/elasticsearch-connection-to-kiabana/269870)
**Author:** [@divakar\_maradana](https://discuss.elastic.co/u/divakar_maradana)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-connection-to-kiabana/269870 "2021-04-12T12:52:04Z")
HI team, I am having 2 instances, elasticsearch on 1 instance and kiabana on another instance. can u please help how to establish a connection between these es and kibana. \[image\] --- ## [Logstash](https://discuss.elastic.co/t/logstash/269583)
**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\ **Replies:** 2\ **Last updated:** [April 12, 2021, 12:03pm UTC](https://discuss.elastic.co/t/logstash/269583 "2021-04-12T12:03:12Z")
hi i hope this message finds you well , so how can configure High availibility between 2 logstash ? regards --- ## [Multiple pipelines](https://discuss.elastic.co/t/multiple-pipelines/269867)
**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\ **Replies:** 0\ **Last updated:** [April 12, 2021, 11:07am UTC](https://discuss.elastic.co/t/multiple-pipelines/269867 "2021-04-12T11:07:31Z")
hi, I have multiple inputs and I want to parse and enrich them by the project GitHub - Cargill/OpenSIEM-Logstash-Parsing: SIEM Logstash parsing for more than hundred technologies so how can I do that thanks --- ## [How to understand "Strings longer than the ignore\_above setting will not be indexed or stored."?](https://discuss.elastic.co/t/how-to-understand-strings-longer-than-the-ignore-above-setting-will-not-be-indexed-or-stored/269859)
**Author:** [@light\_chen](https://discuss.elastic.co/u/light_chen)\ **Replies:** 2\ **Last updated:** [April 12, 2021, 10:41am UTC](https://discuss.elastic.co/t/how-to-understand-strings-longer-than-the-ignore-above-setting-will-not-be-indexed-or-stored/269859 "2021-04-12T10:41:12Z")
I want to verify whether my understanding about the meaning that the glossary "not be indexed" and "not be stored" is right. I suppose "not be indexed" means that the terms analysed from the original field value will n… --- ## [Aggregation with java High Level Rest Client](https://discuss.elastic.co/t/aggregation-with-java-high-level-rest-client/269699)
**Author:** [@adelDz](https://discuss.elastic.co/u/adelDz)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 10:30am UTC](https://discuss.elastic.co/t/aggregation-with-java-high-level-rest-client/269699 "2021-04-12T10:30:38Z")
Hello, How to convert this Query Sql with java High Level Rest Client // select count(\*) from Customer group by Last\_Name, First\_Name, City Thank you in advance --- ## [REST calls from frontend](https://discuss.elastic.co/t/rest-calls-from-frontend/269788)
**Author:** [@elasticuser7](https://discuss.elastic.co/u/elasticuser7)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 10:09am UTC](https://discuss.elastic.co/t/rest-calls-from-frontend/269788 "2021-04-12T10:09:26Z")
Since ES provides a REST api, with all the powerful frontend frameworks out there, it will be tempting to make ES REST calls directly from the frontend. Would it be recommended to make such client-side ES calls especial… --- ## [Elastic search : Can query include kind of a subquery or subqueries using multiple indices?](https://discuss.elastic.co/t/elastic-search-can-query-include-kind-of-a-subquery-or-subqueries-using-multiple-indices/269443)
**Author:** [@vmanohar1](https://discuss.elastic.co/u/vmanohar1)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 10:01am UTC](https://discuss.elastic.co/t/elastic-search-can-query-include-kind-of-a-subquery-or-subqueries-using-multiple-indices/269443 "2021-04-12T10:01:21Z")
I have index1 with geo-point data, index2 with polygons. Index2 has multiple polygon rows for given say id value. I would like to find all geo-points from index1 that are inside any of the polygons from index2 having sa… --- ## [Dynamic sync between Mongo to Elastic search with Kafka and Logstash spring application](https://discuss.elastic.co/t/dynamic-sync-between-mongo-to-elastic-search-with-kafka-and-logstash-spring-application/269799)
**Author:** [@mikaell](https://discuss.elastic.co/u/mikaell)\ **Replies:** 2\ **Last updated:** [April 12, 2021, 9:24am UTC](https://discuss.elastic.co/t/dynamic-sync-between-mongo-to-elastic-search-with-kafka-and-logstash-spring-application/269799 "2021-04-12T09:24:37Z")
Greetings! in this sequence we want to talk about Data base Connectivity especially the dynamic sync between mongo and elastic search with the aid of Apache Kafka and Logstash for ingesting document beside that we want … --- ## [디스크 최고 활성 시간 수집 방법 문의](https://discuss.elastic.co/t/topic/269854)
**Author:** [@jongpyo.lee](https://discuss.elastic.co/u/jongpyo.lee)\ **Replies:** 0\ **Last updated:** [April 12, 2021, 8:56am UTC](https://discuss.elastic.co/t/topic/269854 "2021-04-12T08:56:24Z")
안녕하세요. Metricbeat 에서 디스크 최고 활성 시간을 수집하려고 합니다. Windows 성능 모니터의 속성에서 PhysicalDisk(\_Total)% Disk Time 카운터를 추가하여 데이터를 확인해보려고 했습니다. 하지만 Kibana 에서 값을 출력해보니 원하는 데이터 값이 출력 되지 않습니다. 현재 저희가 사용하고자 하는 필드가 최고 활성시간을 수집하기 위한 … --- ## [Space consumption after reindex](https://discuss.elastic.co/t/space-consumption-after-reindex/269618)
**Author:** [@speechkey](https://discuss.elastic.co/u/speechkey)\ **Replies:** 3\ **Last updated:** [April 12, 2021, 7:25am UTC](https://discuss.elastic.co/t/space-consumption-after-reindex/269618 "2021-04-12T07:25:27Z")
Hi folks we are trying to migrate from 5.5.1 to 7.10.2. After upgrade to 6.8 I'm trying to reindex indices which were created on 5.5.1. curl -sq -X POST "http://elasticsearch:9200/\_reindex?pretty" -H 'Content-Type: app… --- ## [Hiding Multi-Field Display In Discover](https://discuss.elastic.co/t/hiding-multi-field-display-in-discover/269720)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 7:24am UTC](https://discuss.elastic.co/t/hiding-multi-field-display-in-discover/269720 "2021-04-12T07:24:46Z")
Is it possible to hide the display of multi-fields in Discover for Kibana 7.12? I like the capability, but it really clutters up the display of data for regular users. --- ## [Golang logstash?](https://discuss.elastic.co/t/golang-logstash/269610)
**Author:** [@wshek](https://discuss.elastic.co/u/wshek)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 2:51pm UTC](https://discuss.elastic.co/t/golang-logstash/269610 "2021-04-08T14:51:45Z")
Enable golang for your logstash pipe This is not a rewrite its an extensible idea. Has anyone come across this type idea before? I have used Elasticstack for quite some time now. I can tell you unequivocally that th… --- ## [What will happen if I install ELK stack with the unsupported version?](https://discuss.elastic.co/t/what-will-happen-if-i-install-elk-stack-with-the-unsupported-version/269659)
**Author:** [@BTH.S3](https://discuss.elastic.co/u/BTH.S3)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 1:32am UTC](https://discuss.elastic.co/t/what-will-happen-if-i-install-elk-stack-with-the-unsupported-version/269659 "2021-04-12T01:32:49Z")
I've noticed that installed Elasticsearch cluster and Kibana was installed on Ubuntu 20.04 LTS. (By one of my colleague) with unsupported version 6.2.4 (from the Elastic Support Matrix | Elasticsearch). But he said the … --- ## [java.nio.channels.OverlappingFileLockException: null](https://discuss.elastic.co/t/java-nio-channels-overlappingfilelockexception-null/269676)
**Author:** [@yangyong](https://discuss.elastic.co/u/yangyong)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 1:30am UTC](https://discuss.elastic.co/t/java-nio-channels-overlappingfilelockexception-null/269676 "2021-04-12T01:30:26Z")
some problems happened when i install es on my mac. es version: 7.12.0 what should i do? reboot machine? but it seems no effect~~! :sweat\_smile: \[2021-04-09T15:46:17,351\]\[INFO \]\[o.e.x.s.a.s.FileRolesStore\] \[MacdeMa… --- ## [Stale data until elasticsearch is restarted](https://discuss.elastic.co/t/stale-data-until-elasticsearch-is-restarted/269480)
**Author:** [@rwxr\_xr\_x](https://discuss.elastic.co/u/rwxr_xr_x)\ **Replies:** 3\ **Last updated:** [April 12, 2021, 12:24am UTC](https://discuss.elastic.co/t/stale-data-until-elasticsearch-is-restarted/269480 "2021-04-12T00:24:16Z")
Hello, I can't seem to find any posts about this. I have a cluster with one node, with "cluster health: yellow (60 of 115)". I'm using ES 7.10.2 From an application I send: POST http://ESURL/ALIAS\_NAME/\_doc/OBJECT\_ID … --- ## [Logstash Grok Filter Error Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \[A-Za-z0-9\_-\], '\\"', \\"'\\", \[A-Za-z\_\], \\"-\\", \[0-9\], \\"\[\\", \\"{\\"](https://discuss.elastic.co/t/logstash-grok-filter-error-expected-one-of-t-r-n-a-za-z0-9-a-za-z-0-9/269808)
**Author:** [@baklavadeseni](https://discuss.elastic.co/u/baklavadeseni)\ **Replies:** 3\ **Last updated:** [April 11, 2021, 11:42pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-error-expected-one-of-t-r-n-a-za-z0-9-a-za-z-0-9/269808 "2021-04-11T23:42:26Z")
Hello Logstash Community, I am trying to parse text below. I was able to filter it in grokdebug site. But however i can't filter in logstash. It throws this. "LogStash::ConfigurationError", :message=\>"Expected one of \[… --- ## [Mapping Conflict Issue](https://discuss.elastic.co/t/mapping-conflict-issue/269719)
**Author:** [@Shivani92](https://discuss.elastic.co/u/Shivani92)\ **Replies:** 1\ **Last updated:** [April 11, 2021, 6:23pm UTC](https://discuss.elastic.co/t/mapping-conflict-issue/269719 "2021-04-11T18:23:10Z")
If data type of field is changed in logstash configuration then is it required to create new index every time to get the changes apply? Ex. Field "pauseTime" is extracted using KV filter. Data type of the field is chang… --- ## [Whether multiple shard refresh is atomic state](https://discuss.elastic.co/t/whether-multiple-shard-refresh-is-atomic-state/269811)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 1\ **Last updated:** [April 11, 2021, 5:28pm UTC](https://discuss.elastic.co/t/whether-multiple-shard-refresh-is-atomic-state/269811 "2021-04-11T17:28:45Z")
Suppose I have 3 data nodes, in the process of refreshing, if a search occurs, will there be an intermediate state, for example, node A can search for the latest content, but nodes B and C see the same old content --- ## [Getting Case insensitive Response in Hits](https://discuss.elastic.co/t/getting-case-insensitive-response-in-hits/269776)
**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\ **Replies:** 8\ **Last updated:** [April 11, 2021, 2:05pm UTC](https://discuss.elastic.co/t/getting-case-insensitive-response-in-hits/269776 "2021-04-11T14:05:37Z")
Hi all I am getting case Insensitive Data in Hits(SearchResponse ) even I am having Case Sensitive Data in Elasticsearch index like index contains { customerName :"David", departmentName:"IT", applicantName:"Raju"} b… --- ## [Get xml node name](https://discuss.elastic.co/t/get-xml-node-name/269775)
**Author:** [@Petr\_Vancl\_Hochberge](https://discuss.elastic.co/u/Petr_Vancl_Hochberge)\ **Replies:** 3\ **Last updated:** [April 11, 2021, 2:35pm UTC](https://discuss.elastic.co/t/get-xml-node-name/269775 "2021-04-11T14:35:51Z")
Hello, I am little lost with one problem when parsing xml files to ES with Logstash. Due to unfortunate xml structure which I can't change, I need to get string name of specific nodes. Example of xml structure: \… --- ## [Kibana export issues (xpack.reporting.encryptionKey, timeout and data too large)](https://discuss.elastic.co/t/kibana-export-issues-xpack-reporting-encryptionkey-timeout-and-data-too-large/267408)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 4\ **Last updated:** [April 11, 2021, 2:30pm UTC](https://discuss.elastic.co/t/kibana-export-issues-xpack-reporting-encryptionkey-timeout-and-data-too-large/267408 "2021-04-11T14:30:07Z")
I have a three node cluster running in my homelab. It is a virtualised environment (ESXi) with Ubuntu server OS (LTS) & two nodes being data nodes & the third one being a voting only node. Both the data nodes run a Kiban… --- ## [Elasticsearch syntax for e-commerce type project](https://discuss.elastic.co/t/elasticsearch-syntax-for-e-commerce-type-project/269793)
**Author:** [@Ugnius\_V](https://discuss.elastic.co/u/Ugnius_V)\ **Replies:** 2\ **Last updated:** [April 11, 2021, 1:04pm UTC](https://discuss.elastic.co/t/elasticsearch-syntax-for-e-commerce-type-project/269793 "2021-04-11T13:04:26Z")
Hello! First of all, I'm a beginner Elasticsearch. Now we are creating a web system that requires a search feature (yah, first time, earlier we created static content systems :grinning\_face\_with\_smiling\_eyes: ), so we ch… --- ## [Kubernetes pods stdout logs](https://discuss.elastic.co/t/kubernetes-pods-stdout-logs/269802)
**Author:** [@dogan](https://discuss.elastic.co/u/dogan)\ **Replies:** 0\ **Last updated:** [April 11, 2021, 11:03am UTC](https://discuss.elastic.co/t/kubernetes-pods-stdout-logs/269802 "2021-04-11T11:03:26Z")
Hello, I installed a kubernetes cluster. I want the stdout logs of these cluster pots to be sent to elasticsearch. how can I do it --- ## [Elastic search is not using data path setting](https://discuss.elastic.co/t/elastic-search-is-not-using-data-path-setting/269796)
**Author:** [@Selva\_kumar2](https://discuss.elastic.co/u/Selva_kumar2)\ **Replies:** 5\ **Last updated:** [April 11, 2021, 10:45am UTC](https://discuss.elastic.co/t/elastic-search-is-not-using-data-path-setting/269796 "2021-04-11T10:45:57Z")
I am trying to run 2 elastic search instances in single VM machine with the below configuration. Both are started successfully. But both are using same data store I have given the different path in data store but its n… --- ## [Ignore gobal filter not found](https://discuss.elastic.co/t/ignore-gobal-filter-not-found/269769)
**Author:** [@Lorenzo\_Allori](https://discuss.elastic.co/u/Lorenzo_Allori)\ **Replies:** 2\ **Last updated:** [April 11, 2021, 9:22am UTC](https://discuss.elastic.co/t/ignore-gobal-filter-not-found/269769 "2021-04-11T09:22:37Z")
Hi guys, I would like to have a dashboard with two maps (identical) on which I can indipendently slect filters from the + sign in one tooltip and have them filtered indipendently to compare visually what happens. Is it… --- ## [Elastic Search Single Node Cluster not working](https://discuss.elastic.co/t/elastic-search-single-node-cluster-not-working/269785)
**Author:** [@Selva\_kumar2](https://discuss.elastic.co/u/Selva_kumar2)\ **Replies:** 1\ **Last updated:** [April 10, 2021, 7:44pm UTC](https://discuss.elastic.co/t/elastic-search-single-node-cluster-not-working/269785 "2021-04-10T19:44:06Z")
I am trying to set up single node elastic search. But master node is not at all discovering. If I start with cluster.initial\_master\_nodes as one node. Master is elected but cluster formation is not happening and RemoteT… --- ## [ElasticSearch stops working after sometime](https://discuss.elastic.co/t/elasticsearch-stops-working-after-sometime/269373)
**Author:** [@Devendra\_Deshmukh](https://discuss.elastic.co/u/Devendra_Deshmukh)\ **Replies:** 9\ **Last updated:** [April 10, 2021, 3:30pm UTC](https://discuss.elastic.co/t/elasticsearch-stops-working-after-sometime/269373 "2021-04-10T15:30:55Z")
My ElasticSearch server works fine for a few hours or a day and suddenly stops working. It has 1 shard and 1 replica on a single node installed on VPS along with the application server and has only 1 index with 30,000 do… --- ## [Case insensitive search on keyword](https://discuss.elastic.co/t/case-insensitive-search-on-keyword/269773)
**Author:** [@Tam2](https://discuss.elastic.co/u/Tam2)\ **Replies:** 3\ **Last updated:** [April 10, 2021, 3:24pm UTC](https://discuss.elastic.co/t/case-insensitive-search-on-keyword/269773 "2021-04-10T15:24:46Z")
My index looks something like this: { "mappings": { "properties": { "id": { "type": "integer" }, "clientId": { "type": "integer"}, "status": { "type": "keyword" }, "r… --- ## [How to print out %{host.ip} using line codec?](https://discuss.elastic.co/t/how-to-print-out-host-ip-using-line-codec/269750)
**Author:** [@hmiti](https://discuss.elastic.co/u/hmiti)\ **Replies:** 6\ **Last updated:** [April 10, 2021, 3:09pm UTC](https://discuss.elastic.co/t/how-to-print-out-host-ip-using-line-codec/269750 "2021-04-10T15:09:32Z")
I am using the line codec to output the logs into a text file. Requested to include only the IP and log entry itself. Tried different combination of %{host}.{ip} like this, nothing works so far. output { file { p… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=982) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=984)