# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=999 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1000 --- ## [Wish the search method for elasticsearch is working on rails](https://discuss.elastic.co/t/wish-the-search-method-for-elasticsearch-is-working-on-rails/268620)
**Author:** [@HeppokoNeet](https://discuss.elastic.co/u/HeppokoNeet)\ **Replies:** 0\ **Last updated:** [March 29, 2021, 1:56am UTC](https://discuss.elastic.co/t/wish-the-search-method-for-elasticsearch-is-working-on-rails/268620 "2021-03-29T01:56:46Z")
■The environment ・MacOS ・RailsServer ・Ruby 2.4.1 ・Ruby on Rails 5.1.7 ・MySQL ・Elasticsearch 7.10.2-SNAPSHOT ・kuromoji ・elasticsearch (7.4.0) ・elasticsearch-api (7.4.0) ・elasticsearch-model (7.1.0 80822d6) ・el… --- ## [Deleting Indexes From Kibana Not Freed Any Disk Space On Hosts](https://discuss.elastic.co/t/deleting-indexes-from-kibana-not-freed-any-disk-space-on-hosts/268610)
**Author:** [@sefacanacar](https://discuss.elastic.co/u/sefacanacar)\ **Replies:** 1\ **Last updated:** [March 29, 2021, 12:23am UTC](https://discuss.elastic.co/t/deleting-indexes-from-kibana-not-freed-any-disk-space-on-hosts/268610 "2021-03-29T00:23:24Z")
Hi, i deleted some big indexes from Kibana but no disk space is freed on my elasticsearch hosts. So i found this Elasticsearch index deletion and disk space reclamation here and tried this: curl -XPOST "https://:9200/\_… --- ## [Circuit\_breaking\_exception \[parent\] Data too large](https://discuss.elastic.co/t/circuit-breaking-exception-parent-data-too-large/268528)
**Author:** [@jfs1](https://discuss.elastic.co/u/jfs1)\ **Replies:** 1\ **Last updated:** [March 29, 2021, 12:10am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-parent-data-too-large/268528 "2021-03-29T00:10:57Z")
Got this dreadful circuit\_breaking\_exception The cause is known : I accidentally started creating one index per event. Bad idea ! I stopped the offending logstash instance, so my cluster is not under load anymore. Unfo… --- ## [This behavior is deprecated. Specify JAVA\_HOME](https://discuss.elastic.co/t/this-behavior-is-deprecated-specify-java-home/268544)
**Author:** [@jtvdw](https://discuss.elastic.co/u/jtvdw)\ **Replies:** 1\ **Last updated:** [March 29, 2021, 12:09am UTC](https://discuss.elastic.co/t/this-behavior-is-deprecated-specify-java-home/268544 "2021-03-29T00:09:46Z")
Hi, I ran into a error when I installed the latest version of ActiveCollab, it makes use of ES6 and not ES7, not sure why, I had ES7 installed but ActiveCollab confirmed I need to use ES6 for it to work. Here is the er… --- ## [Data depending on the logged in user](https://discuss.elastic.co/t/data-depending-on-the-logged-in-user/268501)
**Author:** [@xquest](https://discuss.elastic.co/u/xquest)\ **Replies:** 2\ **Last updated:** [March 29, 2021, 12:07am UTC](https://discuss.elastic.co/t/data-depending-on-the-logged-in-user/268501 "2021-03-29T00:07:15Z")
Hi! In our organization, we collect logs from 100 servers. We also have 100 developers for these servers. We would like to provide one dashboard for all developers, but so that each of them only sees their own data. W… --- ## [Cant index field with ingest pipeline](https://discuss.elastic.co/t/cant-index-field-with-ingest-pipeline/268586)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 2\ **Last updated:** [March 28, 2021, 6:25pm UTC](https://discuss.elastic.co/t/cant-index-field-with-ingest-pipeline/268586 "2021-03-28T18:25:05Z")
Hello, I am facing the following issue Steps: I am creating without problem the following ingest pipeline: PUT \_ingest/pipeline/alexpipeline { "description" : "calculate for the field http.request.body.origina… --- ## [See Who's changing signal detections](https://discuss.elastic.co/t/see-whos-changing-signal-detections/268545)
**Author:** [@Oliver2](https://discuss.elastic.co/u/Oliver2)\ **Replies:** 3\ **Last updated:** [March 28, 2021, 6:05pm UTC](https://discuss.elastic.co/t/see-whos-changing-signal-detections/268545 "2021-03-28T18:05:57Z")
Can you see which account have changed the signal.status field in elastic? if not can this be looked into I think it would be really useful to see which analyst is closing which detections --- ## [Find document position in query](https://discuss.elastic.co/t/find-document-position-in-query/268581)
**Author:** [@vradder](https://discuss.elastic.co/u/vradder)\ **Replies:** 8\ **Last updated:** [March 28, 2021, 5:35pm UTC](https://discuss.elastic.co/t/find-document-position-in-query/268581 "2021-03-28T17:35:15Z")
Hi, I am using ES for log viewer.. logs are displayed in timestamp ascending order with some boolQuery filters.. initially 10,000 records are displayed in first page there could be around 10 pages of query results.. and … --- ## [Custom Logo in 7.12](https://discuss.elastic.co/t/custom-logo-in-7-12/268565)
**Author:** [@Jose\_Dacosta](https://discuss.elastic.co/u/Jose_Dacosta)\ **Replies:** 2\ **Last updated:** [March 28, 2021, 5:11pm UTC](https://discuss.elastic.co/t/custom-logo-in-7-12/268565 "2021-03-28T17:11:28Z")
Hello, I am a new ELK user and I ant to customize kibana Logo. Any help? --- ## [LogStash not sending data to ElasticSearch](https://discuss.elastic.co/t/logstash-not-sending-data-to-elasticsearch/268597)
**Author:** [@ritika3799](https://discuss.elastic.co/u/ritika3799)\ **Replies:** 4\ **Last updated:** [March 28, 2021, 4:46pm UTC](https://discuss.elastic.co/t/logstash-not-sending-data-to-elasticsearch/268597 "2021-03-28T16:46:02Z")
input { file{ path =\> "C:/elastic\_stack/\*.csv" start\_position =\> "beginning" sincedb\_path =\> "null" } } filter { csv { separator =\> "," columns =\> \["name","mfr","type","calori… --- ## [Error restoring state from URL - Kibana Dashboard](https://discuss.elastic.co/t/error-restoring-state-from-url-kibana-dashboard/268573)
**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\ **Replies:** 3\ **Last updated:** [March 28, 2021, 4:16pm UTC](https://discuss.elastic.co/t/error-restoring-state-from-url-kibana-dashboard/268573 "2021-03-28T16:16:08Z")
Unable to completely restore the URL, be sure to use the share functionality. Error: Unable to completely restore the URL, be sure to use the share functionality. at throwUnableToRestoreUrlError (https://####.kb.eastus2… --- ## [Store secrets in keystore using ansible](https://discuss.elastic.co/t/store-secrets-in-keystore-using-ansible/268595)
**Author:** [@cruggiero](https://discuss.elastic.co/u/cruggiero)\ **Replies:** 0\ **Last updated:** [March 28, 2021, 3:33pm UTC](https://discuss.elastic.co/t/store-secrets-in-keystore-using-ansible/268595 "2021-03-28T15:33:50Z")
Hello, I would like to store AWS credentials in the keystore. To deploy elasticsearch I used the official ansible playbook. Following the documentation I prepared this test node configuration: - hosts: 192.168.17… --- ## [Filtering by multiple rows](https://discuss.elastic.co/t/filtering-by-multiple-rows/268594)
**Author:** [@kevinevans](https://discuss.elastic.co/u/kevinevans)\ **Replies:** 0\ **Last updated:** [March 28, 2021, 3:31pm UTC](https://discuss.elastic.co/t/filtering-by-multiple-rows/268594 "2021-03-28T15:31:11Z")
I'm pretty new to ES, so this might be an obvious question. I have an index that contains rows of (field\_id, value, company\_id) where field\_id describes what kind of data value represents. I'd like to create a filtering… --- ## [Pipelines get event.duration from event.start and event.end](https://discuss.elastic.co/t/pipelines-get-event-duration-from-event-start-and-event-end/268561)
**Author:** [@Oliver2](https://discuss.elastic.co/u/Oliver2)\ **Replies:** 3\ **Last updated:** [March 28, 2021, 2:23pm UTC](https://discuss.elastic.co/t/pipelines-get-event-duration-from-event-start-and-event-end/268561 "2021-03-28T14:23:10Z")
what can i do in an elastic search pipeline to workout the event.duration from event.start and event.end --- ## [How to use logstash to collect docker logs cleanly](https://discuss.elastic.co/t/how-to-use-logstash-to-collect-docker-logs-cleanly/268548)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 6\ **Last updated:** [March 28, 2021, 2:10pm UTC](https://discuss.elastic.co/t/how-to-use-logstash-to-collect-docker-logs-cleanly/268548 "2021-03-28T14:10:19Z")
The default output of docker is in json format, which will contain many special characters (such as \\n \\r). The following log sample, I need to merge multiple lines and remove all \\n \\r. For "\\r \\n", should Line Feed a… --- ## [Find time difference between documents in search hits](https://discuss.elastic.co/t/find-time-difference-between-documents-in-search-hits/268580)
**Author:** [@vradder](https://discuss.elastic.co/u/vradder)\ **Replies:** 0\ **Last updated:** [March 28, 2021, 10:16am UTC](https://discuss.elastic.co/t/find-time-difference-between-documents-in-search-hits/268580 "2021-03-28T10:16:22Z")
Hi, I am using ES for log viewer application, how can i add new script filed(hasTimeDifference) in search hits if the time difference between current and previous log is more than specified seconds(for ex: 10 seconds).. … --- ## [Logstash multiline codec not working](https://discuss.elastic.co/t/logstash-multiline-codec-not-working/268174)
**Author:** [@111435](https://discuss.elastic.co/u/111435)\ **Replies:** 1\ **Last updated:** [March 28, 2021, 9:34am UTC](https://discuss.elastic.co/t/logstash-multiline-codec-not-working/268174 "2021-03-28T09:34:53Z")
Hello, I have multilines logs: Trace file /gh/app Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production With the Partitioning option ORACLE\_HOME System name: SunOS Node name: kz-cdb Release:… --- ## [Logstash not reading the environment variable properly](https://discuss.elastic.co/t/logstash-not-reading-the-environment-variable-properly/268574)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 0\ **Last updated:** [March 28, 2021, 4:43am UTC](https://discuss.elastic.co/t/logstash-not-reading-the-environment-variable-properly/268574 "2021-03-28T04:43:39Z")
As we are connecting to a secure elasticsearch via logstash, I have decided to have the password of the elasticsearch configured as a env variable for example ${ELASTIC\_SEARCH\_PASSWORD} but it doesnt work as expected wh… --- ## [Unsupported symbol \[-\] in geohash](https://discuss.elastic.co/t/unsupported-symbol-in-geohash/268563)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [March 28, 2021, 3:06am UTC](https://discuss.elastic.co/t/unsupported-symbol-in-geohash/268563 "2021-03-28T03:06:57Z")
I am facing some issue while defining mapping for an index \[2021-03-27T23:27:36,733\]\[WARN \]\[logstash.outputs.elasticsearch\]\[packetbeat\]\[7bb6e349f13f74fc053ef83bdac5d84b4de038193ed7d008068e4432f88bd27d\] Could not index e… --- ## [How to include custom key/value in webhook?](https://discuss.elastic.co/t/how-to-include-custom-key-value-in-webhook/268570)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 1\ **Last updated:** [March 28, 2021, 12:09am UTC](https://discuss.elastic.co/t/how-to-include-custom-key-value-in-webhook/268570 "2021-03-28T00:09:47Z")
Dear all =) Does anyone know how to include a custom key/value in a webhook? E.g. "ExampleKey": "ExampleValue" My current webhook json encodes the payload, so the custom key/value would have to be part of the json bl… --- ## [Delete field mapping is impossible, but what is the technical restriction to add this feature?](https://discuss.elastic.co/t/delete-field-mapping-is-impossible-but-what-is-the-technical-restriction-to-add-this-feature/268572)
**Author:** [@timotta](https://discuss.elastic.co/u/timotta)\ **Replies:** 1\ **Last updated:** [March 27, 2021, 11:47pm UTC](https://discuss.elastic.co/t/delete-field-mapping-is-impossible-but-what-is-the-technical-restriction-to-add-this-feature/268572 "2021-03-27T23:47:47Z")
I have no knowledge yet in Elastic Search source code, so I don't know if i'm too much naive thinking that if we had a feature to delete a field mapping, the only think to do would be to delete the inverted index for thi… --- ## [Logstash not starting properly](https://discuss.elastic.co/t/logstash-not-starting-properly/268549)
**Author:** [@snobysmake](https://discuss.elastic.co/u/snobysmake)\ **Replies:** 2\ **Last updated:** [March 27, 2021, 4:34pm UTC](https://discuss.elastic.co/t/logstash-not-starting-properly/268549 "2021-03-27T16:34:49Z")
For some strange reason, starting logstash manually seems to work like, bin/logstash -f proj.conf It doesn't start if I run, systemctl start logstash Nothing on the logs since the 25th as shown below, \[2021-03-25T20… --- ## [Kibana dashboard not updating when panels are edited](https://discuss.elastic.co/t/kibana-dashboard-not-updating-when-panels-are-edited/267020)
**Author:** [@BoomBoomPow](https://discuss.elastic.co/u/BoomBoomPow)\ **Replies:** 2\ **Last updated:** [March 27, 2021, 3:54pm UTC](https://discuss.elastic.co/t/kibana-dashboard-not-updating-when-panels-are-edited/267020 "2021-03-27T15:54:39Z")
I already have my Kibana dashboard set up for some time now. Just recently, I had to update a panel and add a couple visualization. Then after saving the dashboard, everything seems normal. But when I access the dashb… --- ## [New Settings for Cluster Replication on Multiple VMs](https://discuss.elastic.co/t/new-settings-for-cluster-replication-on-multiple-vms/268335)
**Author:** [@Automation\_Scripts](https://discuss.elastic.co/u/Automation_Scripts)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 1:01pm UTC](https://discuss.elastic.co/t/new-settings-for-cluster-replication-on-multiple-vms/268335 "2021-03-25T13:01:00Z")
Guys, Can you please provide an updated post with regards on how can I set 3 ES VMs that can communicate with one another? I found on the web or here some old settings that do not work. With the new files some settings… --- ## [Reset, Reinitialize Enterprise Search](https://discuss.elastic.co/t/reset-reinitialize-enterprise-search/268551)
**Author:** [@roman.huesler](https://discuss.elastic.co/u/roman.huesler)\ **Replies:** 1\ **Last updated:** [March 27, 2021, 1:08pm UTC](https://discuss.elastic.co/t/reset-reinitialize-enterprise-search/268551 "2021-03-27T13:08:44Z")
I use an on premise deployment of elastic search 7.10.2. Recently I have migrated all my indices to another onpremise cluster and everything is working fine so far. Cluster State green, all indices green. But my enterpri… --- ## [Select columns in a Date Histogram visualization chart](https://discuss.elastic.co/t/select-columns-in-a-date-histogram-visualization-chart/267149)
**Author:** [@Arieh\_Tal](https://discuss.elastic.co/u/Arieh_Tal)\ **Replies:** 11\ **Last updated:** [March 27, 2021, 1:05pm UTC](https://discuss.elastic.co/t/select-columns-in-a-date-histogram-visualization-chart/267149 "2021-03-27T13:05:53Z")
I want to select some columns of the following date histogram based on date range e.g 18:00 daily Added: The columns represent the sum of documents per 6 hour interval See required result below Thanks, Arieh Tal … --- ## [Es docker 10.2 version is upgraded to 12.0, log "SearchPhaseExecutionException: all shards failed"](https://discuss.elastic.co/t/es-docker-10-2-version-is-upgraded-to-12-0-log-searchphaseexecutionexception-all-shards-failed/268547)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [March 27, 2021, 5:37am UTC](https://discuss.elastic.co/t/es-docker-10-2-version-is-upgraded-to-12-0-log-searchphaseexecutionexception-all-shards-failed/268547 "2021-03-27T05:37:37Z")
{"type": "server", "timestamp": "2021-03-27T00:33:09,519Z", "level": "WARN", "component": "r.suppressed", "cluster.name": "es-single-node", "node.name": "es-docker", "message": "path: /elastalert\_status\_test/\_search, pa… --- ## [How to create SLA breach graph](https://discuss.elastic.co/t/how-to-create-sla-breach-graph/268525)
**Author:** [@Flavio\_Cadete](https://discuss.elastic.co/u/Flavio_Cadete)\ **Replies:** 2\ **Last updated:** [March 27, 2021, 5:21am UTC](https://discuss.elastic.co/t/how-to-create-sla-breach-graph/268525 "2021-03-27T05:21:59Z")
Product Team requires a graph in Kibana for find SLA breaches. In each document of our index we have 2 dates: created, modified There are 2 scenarios that we want to detect: Pending Checks (documents) where Created \> … --- ## [Filebeat - Logstash SSL not working](https://discuss.elastic.co/t/filebeat-logstash-ssl-not-working/268476)
**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\ **Replies:** 1\ **Last updated:** [March 27, 2021, 5:06am UTC](https://discuss.elastic.co/t/filebeat-logstash-ssl-not-working/268476 "2021-03-27T05:06:08Z")
Problem Statement - Unable to transfer filebeat logs to logstash when SSL is enabled. Logstash keeps on complaining about incorrect OpenSSL version number PS - Filebeat works fine when SSL is disabled & able to transfer… --- ## [Elasticsearch API for Updating multiple fields for multiple documents that belongs to an index in Elasticsearch](https://discuss.elastic.co/t/elasticsearch-api-for-updating-multiple-fields-for-multiple-documents-that-belongs-to-an-index-in-elasticsearch/268515)
**Author:** [@Srikanth\_Choppara](https://discuss.elastic.co/u/Srikanth_Choppara)\ **Replies:** 2\ **Last updated:** [March 27, 2021, 2:05am UTC](https://discuss.elastic.co/t/elasticsearch-api-for-updating-multiple-fields-for-multiple-documents-that-belongs-to-an-index-in-elasticsearch/268515 "2021-03-27T02:05:19Z")
I have a requirement to update fields of all the documents that were fetched based on come criteria or filter. There is one particular field which should be updated as appending to the existing content. Is there any w… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=998) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1000)