# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1031 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1032 --- ## [Newly inserted document not visible in searches](https://discuss.elastic.co/t/newly-inserted-document-not-visible-in-searches/265734)
**Author:** [@Cesidio\_DiBenedetto](https://discuss.elastic.co/u/Cesidio_DiBenedetto)\ **Replies:** 2\ **Last updated:** [February 28, 2021, 7:23pm UTC](https://discuss.elastic.co/t/newly-inserted-document-not-visible-in-searches/265734 "2021-02-28T19:23:20Z")
PUT https://elasticsearch-url/index-name/\_doc/customID?refresh { my data object } This is the response I get: { "\_index": "index-name", "\_type": "\_doc", "\_id": "customID", "\_version": 1, "result": "created",… --- ## [Parse "message" field on Syslog](https://discuss.elastic.co/t/parse-message-field-on-syslog/265729)
**Author:** [@Santiago\_Fernandez](https://discuss.elastic.co/u/Santiago_Fernandez)\ **Replies:** 3\ **Last updated:** [February 28, 2021, 6:53pm UTC](https://discuss.elastic.co/t/parse-message-field-on-syslog/265729 "2021-02-28T18:53:17Z")
Hi Guys! I m new in ELK. have managed to get the Stack up and send my syslogs from my API Manager. I would like to be able to transform a Syslog field into JSON. The "message" field. This is my logstash.conf input { … --- ## ['Cannot read ENT\_SEARCH\_CONFIG\_PATH file' error in Enterprise Search](https://discuss.elastic.co/t/cannot-read-ent-search-config-path-file-error-in-enterprise-search/265588)
**Author:** [@basan4ik](https://discuss.elastic.co/u/basan4ik)\ **Replies:** 4\ **Last updated:** [February 28, 2021, 5:57pm UTC](https://discuss.elastic.co/t/cannot-read-ent-search-config-path-file-error-in-enterprise-search/265588 "2021-02-28T17:57:39Z")
I'm trying to log in Elastic Enterpirse Search: ENT\_SEARCH\_DEFAULT\_PASSWORD=somepassword bin/enterprise-search but get this Error: Found java executable in PATH Java version detected: 11.0.10 (major version: 11) Canno… --- ## [Does Elasticsearch fit my project?](https://discuss.elastic.co/t/does-elasticsearch-fit-my-project/265721)
**Author:** [@duck](https://discuss.elastic.co/u/duck)\ **Replies:** 3\ **Last updated:** [February 28, 2021, 3:12pm UTC](https://discuss.elastic.co/t/does-elasticsearch-fit-my-project/265721 "2021-02-28T15:12:42Z")
Hi, I've been working on a project for a while. Recently, we've decided to build a system for logging and analyzing. About Project It's an online game project and type is MMORPG. Since it's a MMORPG, there'd be billion… --- ## [Elasticsearch voter\_only instance is taking 50% memory usage](https://discuss.elastic.co/t/elasticsearch-voter-only-instance-is-taking-50-memory-usage/265715)
**Author:** [@MCRBEm](https://discuss.elastic.co/u/MCRBEm)\ **Replies:** 2\ **Last updated:** [February 28, 2021, 1:41pm UTC](https://discuss.elastic.co/t/elasticsearch-voter-only-instance-is-taking-50-memory-usage/265715 "2021-02-28T13:41:42Z")
Hello everyone. Need some help to understand high memory issue we have and possibly fixed/improve our elastic stack setup (without adding new server). We were given only 2 servers to install elasticsearch and we must se… --- ## [Virtualization Error](https://discuss.elastic.co/t/virtualization-error/265455)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 2\ **Last updated:** [February 28, 2021, 12:21pm UTC](https://discuss.elastic.co/t/virtualization-error/265455 "2021-02-28T12:21:15Z")
Hi Unfortunately, when I want to visual some dashboards I face with the error bellow multiple times (See this error by every time I refresh the page) Do you have any idea?!? --- ## [Pipeline aggregation on average aggregation](https://discuss.elastic.co/t/pipeline-aggregation-on-average-aggregation/265718)
**Author:** [@zagmon](https://discuss.elastic.co/u/zagmon)\ **Replies:** 0\ **Last updated:** [February 28, 2021, 11:35am UTC](https://discuss.elastic.co/t/pipeline-aggregation-on-average-aggregation/265718 "2021-02-28T11:35:05Z")
Hello, Having index contain these fields: user\_id and score (integer between 0-100). Need to do the following: 1. Calculate average score per user. 2. Create 4 buckets with the count of users score: Bucket 1: users wi… --- ## [How to check if the response time is correct?](https://discuss.elastic.co/t/how-to-check-if-the-response-time-is-correct/265497)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [February 28, 2021, 7:39am UTC](https://discuss.elastic.co/t/how-to-check-if-the-response-time-is-correct/265497 "2021-02-28T07:39:04Z")
Hi, I was comparing the response time that elastic APM shows, and the one that new relics APM shows, and there is a diference of 300 ms, is there a way to make shure that the values in response time that APM is giving a… --- ## [Using my own time field instead of the @timestamp automatically added by Filebeat](https://discuss.elastic.co/t/using-my-own-time-field-instead-of-the-timestamp-automatically-added-by-filebeat/265709)
**Author:** [@snowfrogdev](https://discuss.elastic.co/u/snowfrogdev)\ **Replies:** 1\ **Last updated:** [February 28, 2021, 3:52am UTC](https://discuss.elastic.co/t/using-my-own-time-field-instead-of-the-timestamp-automatically-added-by-filebeat/265709 "2021-02-28T03:52:02Z")
I'm using the http\_endpoint input with Filebeat. I wanna use the timestamp field from my JSON payload instead of the @timestamp that Filebeat seems to add automatically. filebeat.inputs: - type: http\_endpoint ena… --- ## [Getting CLA not signed error on my PR, when I have signed it](https://discuss.elastic.co/t/getting-cla-not-signed-error-on-my-pr-when-i-have-signed-it/256973)
**Author:** [@baba\_yaga](https://discuss.elastic.co/u/baba_yaga)\ **Replies:** 6\ **Last updated:** [February 28, 2021, 2:26am UTC](https://discuss.elastic.co/t/getting-cla-not-signed-error-on-my-pr-when-i-have-signed-it/256973 "2021-02-28T02:26:56Z")
Hi, I submitted a pull request for adding a feature requested in the issue.I have signed the CLA for Elastic already but the bot still hasn't detected that and it prevents me from requesting a review and get my pull req… --- ## [Count of not unique term's](https://discuss.elastic.co/t/count-of-not-unique-terms/265246)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 8\ **Last updated:** [February 28, 2021, 2:41am UTC](https://discuss.elastic.co/t/count-of-not-unique-terms/265246 "2021-02-28T02:41:51Z")
There is my sample dataset: I can get a list of not unique text's in the table: source{ "aggs": { "2": { "terms": { "field": "text.keyword", … --- ## [Filebeat http endpoint message doesn't show up in Log](https://discuss.elastic.co/t/filebeat-http-endpoint-message-doesnt-show-up-in-log/265704)
**Author:** [@snowfrogdev](https://discuss.elastic.co/u/snowfrogdev)\ **Replies:** 1\ **Last updated:** [February 28, 2021, 12:40am UTC](https://discuss.elastic.co/t/filebeat-http-endpoint-message-doesnt-show-up-in-log/265704 "2021-02-28T00:40:33Z")
This is what I get: This is my request: This is my config file: filebeat.inputs: - type: http\_endpoint enabled: true listen\_address: filebeat listen\_port: 8088 response\_code: 200 output.elastics… --- ## [How much disk and memory is my Elasticsearch using and occupying?](https://discuss.elastic.co/t/how-much-disk-and-memory-is-my-elasticsearch-using-and-occupying/263926)
**Author:** [@mahalabobis](https://discuss.elastic.co/u/mahalabobis)\ **Replies:** 3\ **Last updated:** [February 28, 2021, 12:59am UTC](https://discuss.elastic.co/t/how-much-disk-and-memory-is-my-elasticsearch-using-and-occupying/263926 "2021-02-28T00:59:27Z")
I'm trying to determine my hardware needs. So I want to find exactly how much memory and disk space am I using and occupying. What are the commands to use? --- ## [Configure metricbeat to use logstash--tutorial error?](https://discuss.elastic.co/t/configure-metricbeat-to-use-logstash-tutorial-error/265143)
**Author:** [@John\_McDonnell](https://discuss.elastic.co/u/John_McDonnell)\ **Replies:** 3\ **Last updated:** [February 27, 2021, 11:59pm UTC](https://discuss.elastic.co/t/configure-metricbeat-to-use-logstash-tutorial-error/265143 "2021-02-27T23:59:39Z")
I've set up a 7.11 Kibana-Elastisearch-Logstash-Beats stack more-or-less successfully, but I am unable to configure metricbeat to use logstash. (I am able to see metricbeat data sending it directly to elastisearch.) F… --- ## [Updating Elasticsearch Document](https://discuss.elastic.co/t/updating-elasticsearch-document/265705)
**Author:** [@vstevenson](https://discuss.elastic.co/u/vstevenson)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 10:46pm UTC](https://discuss.elastic.co/t/updating-elasticsearch-document/265705 "2021-02-27T22:46:43Z")
I am running into trouble when I try to update a field within my document. Here's my JSON call: POST vs-users/\_update/bwMNiyZZMg4jZVMdueaZ6m { "name": "abc" } I get this error: { "error" :… --- ## [Indices are not allocate in hot nodes](https://discuss.elastic.co/t/indices-are-not-allocate-in-hot-nodes/265609)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 3\ **Last updated:** [February 27, 2021, 9:21pm UTC](https://discuss.elastic.co/t/indices-are-not-allocate-in-hot-nodes/265609 "2021-02-27T21:21:11Z")
I have defined, data\_hot, data\_warm roles in the elastic cluster nodes as below. node1, node2c- node.roles: \[ "data\_content", "ingest", "data\_hot" \] node3, node4 - node.roles: \[ "data\_content", "data\_hot" \] node5, nod… --- ## [Log stash schema less input fields](https://discuss.elastic.co/t/log-stash-schema-less-input-fields/265681)
**Author:** [@ali\_ghorbani](https://discuss.elastic.co/u/ali_ghorbani)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 4:41pm UTC](https://discuss.elastic.co/t/log-stash-schema-less-input-fields/265681 "2021-02-27T16:41:49Z")
Hi, I'm new in log-stash what I trying to do is to store my request and response JSON of my web app into the elastic search using log-stash with no change in their JSON format. the problem is a field named start\_time i… --- ## [Filebeat logstash loadbalance to kafka](https://discuss.elastic.co/t/filebeat-logstash-loadbalance-to-kafka/265695)
**Author:** [@cool](https://discuss.elastic.co/u/cool)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 4:14pm UTC](https://discuss.elastic.co/t/filebeat-logstash-loadbalance-to-kafka/265695 "2021-02-27T16:14:22Z")
How to send logs from filebeat/logstash to kafak to multiple datacenters if one datacenter is down logs to be sent to another datacenter. --- ## [Detection not finding anything but same query finds them](https://discuss.elastic.co/t/detection-not-finding-anything-but-same-query-finds-them/265535)
**Author:** [@plaroche0](https://discuss.elastic.co/u/plaroche0)\ **Replies:** 5\ **Last updated:** [February 27, 2021, 1:57pm UTC](https://discuss.elastic.co/t/detection-not-finding-anything-but-same-query-finds-them/265535 "2021-02-27T13:57:39Z")
I made a detection from a saved query that shows what I want to detect but the detection is not detecting anything. Detection does not show any failures. Any suggestions? --- ## [Logstash split message by \\n into multiple message inputs](https://discuss.elastic.co/t/logstash-split-message-by-n-into-multiple-message-inputs/265620)
**Author:** [@Daniel\_Jankech](https://discuss.elastic.co/u/Daniel_Jankech)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 1:08pm UTC](https://discuss.elastic.co/t/logstash-split-message-by-n-into-multiple-message-inputs/265620 "2021-02-27T13:08:40Z")
Hi , what im trying to do is pretty simple and straight forward but cant figure out why its not working. When I was using logstash with file input it parsed my logs correctly meaning that it separated my log file by \\n i… --- ## [How to execute a stored script in a search query](https://discuss.elastic.co/t/how-to-execute-a-stored-script-in-a-search-query/265514)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 3\ **Last updated:** [February 27, 2021, 12:48pm UTC](https://discuss.elastic.co/t/how-to-execute-a-stored-script-in-a-search-query/265514 "2021-02-27T12:48:41Z")
hey there, I created a stored script that should add a new field to all the docs into an index. POST \_scripts/set\_new\_field { "script": { "lang": "painless", "source": """ if (ctx.\_source.speaker == "TED… --- ## [Elasticsearch - Timestamp based document Upsert](https://discuss.elastic.co/t/elasticsearch-timestamp-based-document-upsert/265688)
**Author:** [@tag\_v](https://discuss.elastic.co/u/tag_v)\ **Replies:** 0\ **Last updated:** [February 27, 2021, 11:34am UTC](https://discuss.elastic.co/t/elasticsearch-timestamp-based-document-upsert/265688 "2021-02-27T11:34:45Z")
I am looking for more efficient and performance way to implement below use case: Every input JSON contains event\_timestamp and document\_id field. document\_id is '\_id' for the index. If a document with document\_id alre… --- ## [Cannot create index from news Data showcased in https://www.youtube.com/watch?v=CCTgroOcyfM&t=1315s](https://discuss.elastic.co/t/cannot-create-index-from-news-data-showcased-in-https-www-youtube-com-watch-v-cctgroocyfm-t-1315s/265687)
**Author:** [@sushicodee](https://discuss.elastic.co/u/sushicodee)\ **Replies:** 0\ **Last updated:** [February 27, 2021, 11:10am UTC](https://discuss.elastic.co/t/cannot-create-index-from-news-data-showcased-in-https-www-youtube-com-watch-v-cctgroocyfm-t-1315s/265687 "2021-02-27T11:10:49Z")
the error which i get from kibana is Error creating index \[mapper\_parsing\_exception\] No type specified for field \[properties\] More {"error":{"root\_cause":\[{"type":"mapper\_parsing\_exception","reason":"No type specifie… --- ## [Trying to find saved dashboard](https://discuss.elastic.co/t/trying-to-find-saved-dashboard/265651)
**Author:** [@nicks1993](https://discuss.elastic.co/u/nicks1993)\ **Replies:** 10\ **Last updated:** [February 27, 2021, 1:35am UTC](https://discuss.elastic.co/t/trying-to-find-saved-dashboard/265651 "2021-02-27T01:35:11Z")
I was under the impression that saved objects would be saved in a .kibana/ directory or index found here /usr/share/elasticsearch/data/nodes/0/indices But that is not the case, my kibana.yml is found here, I run kibana… --- ## [How to manage multitenant ELK Cluster](https://discuss.elastic.co/t/how-to-manage-multitenant-elk-cluster/265606)
**Author:** [@verdienansein](https://discuss.elastic.co/u/verdienansein)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 12:18am UTC](https://discuss.elastic.co/t/how-to-manage-multitenant-elk-cluster/265606 "2021-02-27T00:18:52Z")
Hi, in our project we are using a multitenant cluster where several applications are logging to it with weekly log indices. We are facing now a problem because some of these applications are creating very big indices o… --- ## [Directory ELK Stack](https://discuss.elastic.co/t/directory-elk-stack/265576)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 9:00pm UTC](https://discuss.elastic.co/t/directory-elk-stack/265576 "2021-02-26T21:00:22Z")
guys, where is the default log's directory in server elasticsearch? because there are several policies in my company, please help me what directories should be accessible on this ELK stack? thanks --- ## [Archiving Elasticsearch Data](https://discuss.elastic.co/t/archiving-elasticsearch-data/265575)
**Author:** [@roh689](https://discuss.elastic.co/u/roh689)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 8:59pm UTC](https://discuss.elastic.co/t/archiving-elasticsearch-data/265575 "2021-02-26T20:59:23Z")
I would like to know how we can do Archiving of Elasticsearch data. We want to move all logs older that 30 days to Azure Blob Storage and retrieve it as when require to show in Kibana. We want to reduce the size of Data… --- ## [Get count of lines in a multiline message field](https://discuss.elastic.co/t/get-count-of-lines-in-a-multiline-message-field/265649)
**Author:** [@Pavani\_Reddy](https://discuss.elastic.co/u/Pavani_Reddy)\ **Replies:** 2\ **Last updated:** [February 26, 2021, 8:58pm UTC](https://discuss.elastic.co/t/get-count-of-lines-in-a-multiline-message-field/265649 "2021-02-26T20:58:16Z")
Hi Team, I have a message field with multiline i.e Exception in thread "main" java.lang.IllegalStateException: A book has a null property\\n\\tat com.example.myproject.Author.getBookIds(Author.java:38) \\n\\tat com.exampl… --- ## [Index repeatedly gets "stuck" with high index writer memory usage](https://discuss.elastic.co/t/index-repeatedly-gets-stuck-with-high-index-writer-memory-usage/265526)
**Author:** [@shr](https://discuss.elastic.co/u/shr)\ **Replies:** 3\ **Last updated:** [February 26, 2021, 8:54pm UTC](https://discuss.elastic.co/t/index-repeatedly-gets-stuck-with-high-index-writer-memory-usage/265526 "2021-02-26T20:54:56Z")
Running ES 7.11.0 on Google Kubernetes Engine via ECK 1.4.0. Three-node cluster with each VM having 4 vCPUs, 16GB RAM, 3TB persistent disk. I am loading data into several time-based indices. Most of them are fine, but o… --- ## [Sometimes index template change after node reboot](https://discuss.elastic.co/t/sometimes-index-template-change-after-node-reboot/265239)
**Author:** [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)\ **Replies:** 5\ **Last updated:** [February 26, 2021, 8:53pm UTC](https://discuss.elastic.co/t/sometimes-index-template-change-after-node-reboot/265239 "2021-02-26T20:53:37Z")
Hi everyone, regarding to my needs i defined a index template with PUT \_template API in kibana! on that template i set index pattern and specific index rollover alias.i send my logs from filebeat to logstash,,in logstas… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1030) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1032)