# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=990 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 991 --- ## [Elasticsearch - Forcemerge to merge several shards](https://discuss.elastic.co/t/elasticsearch-forcemerge-to-merge-several-shards/269310)
**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 3:40pm UTC](https://discuss.elastic.co/t/elasticsearch-forcemerge-to-merge-several-shards/269310 "2021-04-06T15:40:48Z")
I have indexes that are created weekly, associated to an allias. The indexes were configured for two shards, and one replica per shard. The shards are very low space, around 50 mb, so I think those could be converted to … --- ## [I am getting this error when running logstash configuration pipeline through logstash.yml file](https://discuss.elastic.co/t/i-am-getting-this-error-when-running-logstash-configuration-pipeline-through-logstash-yml-file/269318)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 3:40pm UTC](https://discuss.elastic.co/t/i-am-getting-this-error-when-running-logstash-configuration-pipeline-through-logstash-yml-file/269318 "2021-04-06T15:40:23Z")
I have written a logstash configuration pipeline that receive events from syslog and stores that events in elasticsearch.When I run this pipeline through command line everything works fine,but when I run this pipeline th… --- ## [Server Company and Developer Company keep passing the buck](https://discuss.elastic.co/t/server-company-and-developer-company-keep-passing-the-buck/269343)
**Author:** [@Joanchka](https://discuss.elastic.co/u/Joanchka)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 3:36pm UTC](https://discuss.elastic.co/t/server-company-and-developer-company-keep-passing-the-buck/269343 "2021-04-06T15:36:05Z")
I want to upgrade my Magento to 2.4.2. The Developer Company who is doing this upgrade asked me to ensure my server has ElasticSearch 7.9.2 The Server Company installed ElasticSearch 7.9.2 on my server (I can see this … --- ## [Grok works (no grok parse failure) but doesnt create the fields](https://discuss.elastic.co/t/grok-works-no-grok-parse-failure-but-doesnt-create-the-fields/269203)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 7\ **Last updated:** [April 6, 2021, 3:15pm UTC](https://discuss.elastic.co/t/grok-works-no-grok-parse-failure-but-doesnt-create-the-fields/269203 "2021-04-06T15:15:45Z")
Hi I have a field called "if\_speed\_in\_out", this field contains strings like this "100 Mbps:100 Mbps" i have tested the grok on kibana devs tools and works, but never create the fields defined in the grok, just get the o… --- ## [Fix for CVE-2021-22134 in 7.10.X version](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340)
**Author:** [@Ruslan\_Kovpey](https://discuss.elastic.co/u/Ruslan_Kovpey)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 2:53pm UTC](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340 "2021-04-06T14:53:55Z")
Hello, do exist any plans to create a security patch for CVE-2021-22134 NVD - CVE-2021-22134 in 7.10.x version, if yes then when? Thanks --- ## [Engineering II training - lab 3.4](https://discuss.elastic.co/t/engineering-ii-training-lab-3-4/269345)
**Author:** [@James\_Roberts](https://discuss.elastic.co/u/James_Roberts)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 3:00pm UTC](https://discuss.elastic.co/t/engineering-ii-training-lab-3-4/269345 "2021-04-06T15:00:25Z")
Is there a lab for lesson 3.4 (Server Configuration Best Practices) I can't seem to find it. --- ## [Logstash translate filter and converting integers to strings](https://discuss.elastic.co/t/logstash-translate-filter-and-converting-integers-to-strings/268803)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 2:48pm UTC](https://discuss.elastic.co/t/logstash-translate-filter-and-converting-integers-to-strings/268803 "2021-04-06T14:48:13Z")
I am on logstash 7.11. I need a translate from an integer code to real speed value. mutate { convert =\> { "ifspeed" =\> "string" } } translate { field =\> "\[ifspeed\]" destination =\> "\[inf\_speed\]" dictionary =\> … --- ## [PDF reporting option not available in free licensed version](https://discuss.elastic.co/t/pdf-reporting-option-not-available-in-free-licensed-version/269324)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 2:33pm UTC](https://discuss.elastic.co/t/pdf-reporting-option-not-available-in-free-licensed-version/269324 "2021-04-06T14:33:28Z")
I am using a free version of Kibana and wondering whether it is allowed to generate PDF reports from dashboard or not? I do not get any option for PDF report when I click on Share on my dashboard. --- ## [Logstash workers dying randomly](https://discuss.elastic.co/t/logstash-workers-dying-randomly/269342)
**Author:** [@Fran\_Raknic](https://discuss.elastic.co/u/Fran_Raknic)\ **Replies:** 0\ **Last updated:** [April 6, 2021, 2:20pm UTC](https://discuss.elastic.co/t/logstash-workers-dying-randomly/269342 "2021-04-06T14:20:33Z")
Hello, we use Logstash to collect syslog messages from network devices. The instance has one pipeline listening on UDP port 7514 with 16 workers, the filter part consists of a couple of grok patterns, mutate fileds, DNS… --- ## [Failed to load indices and failed to load cluster](https://discuss.elastic.co/t/failed-to-load-indices-and-failed-to-load-cluster/269124)
**Author:** [@FOMihai](https://discuss.elastic.co/u/FOMihai)\ **Replies:** 4\ **Last updated:** [April 6, 2021, 2:00pm UTC](https://discuss.elastic.co/t/failed-to-load-indices-and-failed-to-load-cluster/269124 "2021-04-06T14:00:10Z")
Hello, I have ELK stack installed with: Elasticsearch version 7.11 and Kibana 7.8.1 with RoR free version for security. I plan also to upgrade Kibana to a version more appropriate to elastic search 7.11. I have the… --- ## [Alerting throws "node \[es-client1\] does not have the \[remote\_cluster\_client\] role"](https://discuss.elastic.co/t/alerting-throws-node-es-client1-does-not-have-the-remote-cluster-client-role/267073)
**Author:** [@hrak](https://discuss.elastic.co/u/hrak)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 1:15pm UTC](https://discuss.elastic.co/t/alerting-throws-node-es-client1-does-not-have-the-remote-cluster-client-role/267073 "2021-04-06T13:15:34Z")
Hi all, My cluster consists of the following nodes: 2x coordinating node (empty node.roles) 3x master (node.roles = \['master'\]) 5x data (node.roles = \['data', 'ingest', 'ml', 'transform'\]) I have recently upgraded f… --- ## [Initial JDBC input for a tracking column type of timestamp](https://discuss.elastic.co/t/initial-jdbc-input-for-a-tracking-column-type-of-timestamp/269163)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 12:25pm UTC](https://discuss.elastic.co/t/initial-jdbc-input-for-a-tracking-column-type-of-timestamp/269163 "2021-04-06T12:25:11Z")
I am trying to pull data from an MS SQL Server database. The data is refreshed on the hour and I want to pull at 15 minutes after the top of the hour. The input looks like this: input { jdbc { jdbc\_driver\_library … --- ## [Grok filter](https://discuss.elastic.co/t/grok-filter/269194)
**Author:** [@Dinesh\_Sharma](https://discuss.elastic.co/u/Dinesh_Sharma)\ **Replies:** 10\ **Last updated:** [April 6, 2021, 10:54am UTC](https://discuss.elastic.co/t/grok-filter/269194 "2021-04-06T10:54:51Z")
Hi, I have a csv file which has currently three rows in it which are as follow: name,age,ip A,12,10.11.1.12 B,13,10.11.1 Now I want to check during the data ingestion via this csv that whether the IP is in proper fo… --- ## [Export all records from 12M index](https://discuss.elastic.co/t/export-all-records-from-12m-index/269221)
**Author:** [@YaronB](https://discuss.elastic.co/u/YaronB)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 10:44am UTC](https://discuss.elastic.co/t/export-all-records-from-12m-index/269221 "2021-04-06T10:44:18Z")
the problem is with the index.max\_result\_window, we have an index of 12M records , how can we query/get all data using a script? (logstash not relevant) --- ## [How to configure logstash file to make nested object inside another nested filed from sql query?](https://discuss.elastic.co/t/how-to-configure-logstash-file-to-make-nested-object-inside-another-nested-filed-from-sql-query/268077)
**Author:** [@My-project-repositor](https://discuss.elastic.co/u/My-project-repositor)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 10:28am UTC](https://discuss.elastic.co/t/how-to-configure-logstash-file-to-make-nested-object-inside-another-nested-filed-from-sql-query/268077 "2021-04-06T10:28:12Z")
I am new in Elasticsearch and logstash and I have an issue with nested objects. So what I want to ask is how can I create index with multiple nested fields inside another nested fields. How can I build the data inside l… --- ## [Nested fields ElasticSearch and Logstash](https://discuss.elastic.co/t/nested-fields-elasticsearch-and-logstash/269306)
**Author:** [@My-project-repositor](https://discuss.elastic.co/u/My-project-repositor)\ **Replies:** 0\ **Last updated:** [April 6, 2021, 9:04am UTC](https://discuss.elastic.co/t/nested-fields-elasticsearch-and-logstash/269306 "2021-04-06T09:04:39Z")
Hello, I am new in ES and logstash so I need some help I need to perform an indexation of data from postgres in ES My problem is that there are many relationships in the database, and I don't know how to perform many n… --- ## [Time filter not getting persisted across dashboard navigation in ELK 7.10.2](https://discuss.elastic.co/t/time-filter-not-getting-persisted-across-dashboard-navigation-in-elk-7-10-2/268181)
**Author:** [@Bhavya\_Bansal](https://discuss.elastic.co/u/Bhavya_Bansal)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 9:02am UTC](https://discuss.elastic.co/t/time-filter-not-getting-persisted-across-dashboard-navigation-in-elk-7-10-2/268181 "2021-04-06T09:02:58Z")
Continuing the discussion from Time filter not getting persisted across dashboard navigation: Hi, I upgraded to v7.10.2 and I am still facing this issue. Can someone please tell me if this is an outstanding bug? Shoul… --- ## [1 Hour Difference on showing Logs in ELK/Kibana](https://discuss.elastic.co/t/1-hour-difference-on-showing-logs-in-elk-kibana/268744)
**Author:** [@radu990](https://discuss.elastic.co/u/radu990)\ **Replies:** 11\ **Last updated:** [April 6, 2021, 8:24am UTC](https://discuss.elastic.co/t/1-hour-difference-on-showing-logs-in-elk-kibana/268744 "2021-04-06T08:24:14Z")
Hello, I have set a Filebeat agent on a server for Apache logs (using apache module), and observed that the logs are appearing on Kibana/ELK with 1 hour delay. Any idea what can be the problem? The time/timezone settin… --- ## [Count matched words](https://discuss.elastic.co/t/count-matched-words/269294)
**Author:** [@ndkmath1](https://discuss.elastic.co/u/ndkmath1)\ **Replies:** 0\ **Last updated:** [April 6, 2021, 7:51am UTC](https://discuss.elastic.co/t/count-matched-words/269294 "2021-04-06T07:51:33Z")
I'm doing something with ES Learning to rank. I want to count how many words in a query matched with a document and take it as a feature (number\_of\_matched\_words) for LTR. Ex: q = "iphone 11", d = "iphone 11 64gb". In t… --- ## [Logstash email output using linux sendmail](https://discuss.elastic.co/t/logstash-email-output-using-linux-sendmail/269295)
**Author:** [@crazy\_coder](https://discuss.elastic.co/u/crazy_coder)\ **Replies:** 0\ **Last updated:** [April 6, 2021, 7:53am UTC](https://discuss.elastic.co/t/logstash-email-output-using-linux-sendmail/269295 "2021-04-06T07:53:02Z")
Hi i want to use Linux sendmail service to send email using Logstash email output plugin. how can i do it. email { to =\> "crazy@noreply.com" codec =\> "plain" body =\> "hi how are you" via =\> "sendmail" } Is these… --- ## [Kibana Search Error - Service Unavailable](https://discuss.elastic.co/t/kibana-search-error-service-unavailable/268634)
**Author:** [@mpavelka](https://discuss.elastic.co/u/mpavelka)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 7:43am UTC](https://discuss.elastic.co/t/kibana-search-error-service-unavailable/268634 "2021-04-06T07:43:30Z")
Hello, cluster setup: 3 master data nodes, 1 coordinator. versions of ES and Kibana: 7.10.1, status green. I am trying to create a table visualization and I am getting for the particular index pattern Search Error - S… --- ## [Creating multiple indexes or just one?](https://discuss.elastic.co/t/creating-multiple-indexes-or-just-one/268346)
**Author:** [@Andrea92](https://discuss.elastic.co/u/Andrea92)\ **Replies:** 4\ **Last updated:** [April 6, 2021, 7:18am UTC](https://discuss.elastic.co/t/creating-multiple-indexes-or-just-one/268346 "2021-04-06T07:18:40Z")
Good morning everyone, I have a question about the creation of a single index or multiple indexes. I am dealing with computer vulnerabilities, so I save the information of the files in a single index and then I compare… --- ## [Starting kibana failed](https://discuss.elastic.co/t/starting-kibana-failed/269282)
**Author:** [@lxia](https://discuss.elastic.co/u/lxia)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 4:32am UTC](https://discuss.elastic.co/t/starting-kibana-failed/269282 "2021-04-06T04:32:17Z")
Hello, after power-off, I get problems with kibana start. elasticsearch plus kibana. I use version 7.12.0 for both. I have no problem with elasticsearch. The log showing: -sh-4.2$ log \[19:00:06.537\] \[info\]\[plug… --- ## [I dont see the records which has few missing values](https://discuss.elastic.co/t/i-dont-see-the-records-which-has-few-missing-values/269248)
**Author:** [@gobi\_s](https://discuss.elastic.co/u/gobi_s)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 5:28am UTC](https://discuss.elastic.co/t/i-dont-see-the-records-which-has-few-missing-values/269248 "2021-04-06T05:28:27Z")
Hi Team, I have created data table, I could able to see the results only when the object has the value of all the column. If any of hte object does not have value of the column, then those records are not qualified for … --- ## [Kibana visualize metric I'm not able to subtract with \_value](https://discuss.elastic.co/t/kibana-visualize-metric-im-not-able-to-subtract-with-value/269259)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 4:10am UTC](https://discuss.elastic.co/t/kibana-visualize-metric-im-not-able-to-subtract-with-value/269259 "2021-04-06T04:10:48Z")
I'm trying to do a simple calculation but the value is different: { "script": "\_value" } { "script": "\_value - 10" } Let me explain what the purpose is: this metrics returns me the time that some asset was … --- ## [Doing periodic searches via API](https://discuss.elastic.co/t/doing-periodic-searches-via-api/269268)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 6\ **Last updated:** [April 6, 2021, 4:04am UTC](https://discuss.elastic.co/t/doing-periodic-searches-via-api/269268 "2021-04-06T04:04:31Z")
I have an application where I need to run searches on an index periodically picking up "new" entries from the index and I am wondering the best way of doing this. I assume that \_id is serial and simply saving the \_id of… --- ## [Slow search and tiny segments memory\_in\_bytes after upgrade \>= es7.9](https://discuss.elastic.co/t/slow-search-and-tiny-segments-memory-in-bytes-after-upgrade-es7-9/269174)
**Author:** [@MihaylovNikitos](https://discuss.elastic.co/u/MihaylovNikitos)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 3:57am UTC](https://discuss.elastic.co/t/slow-search-and-tiny-segments-memory-in-bytes-after-upgrade-es7-9/269174 "2021-04-06T03:57:11Z")
Hi After upgrading from ES 7.8.x to ES \>=7.9, I noticed that segments \*\_memory\_in\_bytes became very small and search is very slow It is seen by stats: ES 7.8.1 /\_nodes/stats segments: { count: 7, memory\_in\_bytes: 2… --- ## [ECE On premise 7.12 Fleet failure to Enroll, windows 10 system](https://discuss.elastic.co/t/ece-on-premise-7-12-fleet-failure-to-enroll-windows-10-system/268929)
**Author:** [@Nicholas\_Rowe](https://discuss.elastic.co/u/Nicholas_Rowe)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 3:00am UTC](https://discuss.elastic.co/t/ece-on-premise-7-12-fleet-failure-to-enroll-windows-10-system/268929 "2021-04-06T03:00:09Z")
I just setup an ECE instance using 7.9 (which I believe is the latest) and spun up a cluster for security using version 7.12. I setup a new agent and tried to enroll a windows 10 target workstation as outlined, but an ge… --- ## [I need help to access http.request.headers.X-Client-Name](https://discuss.elastic.co/t/i-need-help-to-access-http-request-headers-x-client-name/269244)
**Author:** [@Eduardo\_Bubniak](https://discuss.elastic.co/u/Eduardo_Bubniak)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 2:01am UTC](https://discuss.elastic.co/t/i-need-help-to-access-http-request-headers-x-client-name/269244 "2021-04-06T02:01:38Z")
Hi, i need build a report about only one client, through the metadata i can found http.request.headers.X-Client-Name, but in visualization i can´t take this value, how i can resolve this --- ## [How to update the dashboard automatically](https://discuss.elastic.co/t/how-to-update-the-dashboard-automatically/269188)
**Author:** [@pooja1](https://discuss.elastic.co/u/pooja1)\ **Replies:** 7\ **Last updated:** [April 6, 2021, 1:25am UTC](https://discuss.elastic.co/t/how-to-update-the-dashboard-automatically/269188 "2021-04-06T01:25:03Z")
I want my dashboard to get updated automatically. Whenever I insert data in my csv file and as soon as I press the refresh button it should get updated. I know there is a time filter on the top and I tried using that, b… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=989) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=991)