# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1087 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1088 --- ## [\[parsing date error\]: date\_time\_parse\_exception: Failed to parse with all enclosed parsers](https://discuss.elastic.co/t/parsing-date-error-date-time-parse-exception-failed-to-parse-with-all-enclosed-parsers/260804)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 2\ **Last updated:** [January 12, 2021, 11:13am UTC](https://discuss.elastic.co/t/parsing-date-error-date-time-parse-exception-failed-to-parse-with-all-enclosed-parsers/260804 "2021-01-12T11:13:51Z")
Hello, I am using elasticsearch, Kibana and Logstash all version 7.10.1 I would like to ingest data from URLhaus, so I have created a template like that: PUT \_template/urlhaus { "index\_patterns": \["urlhaus-\*"\], "… --- ## [Line chart with two date count lines for use with ServiceNow incident data](https://discuss.elastic.co/t/line-chart-with-two-date-count-lines-for-use-with-servicenow-incident-data/260735)
**Author:** [@ykara84](https://discuss.elastic.co/u/ykara84)\ **Replies:** 2\ **Last updated:** [January 12, 2021, 11:06am UTC](https://discuss.elastic.co/t/line-chart-with-two-date-count-lines-for-use-with-servicenow-incident-data/260735 "2021-01-12T11:06:00Z")
Hi, I have ServiceNow incident data in an index and I would like to visualise the the trend of opened and resolved tickets on a per day basis. I can do it in separate visualisations but I cant figure out how to combine i… --- ## [Understanding Unusual Logstash Traffic Flow Rates](https://discuss.elastic.co/t/understanding-unusual-logstash-traffic-flow-rates/260821)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 10:59am UTC](https://discuss.elastic.co/t/understanding-unusual-logstash-traffic-flow-rates/260821 "2021-01-12T10:59:28Z")
Hi, I'd like to understand some apparently odd behaviour we're seeing with traffic hitting our logstashes vs what is being ingested into elasticsearch and s3. Note that we're using the output isolator pattern to decoupl… --- ## [How configure logstash in Kubernetes to point to a specific directory that is mapped as emptydir or local](https://discuss.elastic.co/t/how-configure-logstash-in-kubernetes-to-point-to-a-specific-directory-that-is-mapped-as-emptydir-or-local/260814)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 10:16am UTC](https://discuss.elastic.co/t/how-configure-logstash-in-kubernetes-to-point-to-a-specific-directory-that-is-mapped-as-emptydir-or-local/260814 "2021-01-12T10:16:14Z")
hello all i need to configure logstash to listen to incoming logs in a directory. (which will be manually uploaded logs to ) And to process them and show them in kibana . i already have filebeat monitoring running the… --- ## [Error loading kibana on a web browser - 503 service unavailable](https://discuss.elastic.co/t/error-loading-kibana-on-a-web-browser-503-service-unavailable/260520)
**Author:** [@prajwal93](https://discuss.elastic.co/u/prajwal93)\ **Replies:** 5\ **Last updated:** [January 12, 2021, 10:03am UTC](https://discuss.elastic.co/t/error-loading-kibana-on-a-web-browser-503-service-unavailable/260520 "2021-01-12T10:03:34Z")
I have an ELK cluster running and I have trouble loading Kibana in my web browser. It was working fine until 3 days before I made a change to logstash configuration. I installed Logstash-amazon\_es plugin, used to load da… --- ## [Installing Elasticsearch plugins when ES is running as Kubernetes pod](https://discuss.elastic.co/t/installing-elasticsearch-plugins-when-es-is-running-as-kubernetes-pod/260799)
**Author:** [@sun24](https://discuss.elastic.co/u/sun24)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 8:47am UTC](https://discuss.elastic.co/t/installing-elasticsearch-plugins-when-es-is-running-as-kubernetes-pod/260799 "2021-01-12T08:47:33Z")
I understand that one method is to use the containers: command: Required command But this data is not retained once the pod restarts and the command is run again and again resulting in a crashloopbackoff. How to res… --- ## [Parsing Json from couchDb to ElasticSearch via Logstash](https://discuss.elastic.co/t/parsing-json-from-couchdb-to-elasticsearch-via-logstash/260797)
**Author:** [@skr007](https://discuss.elastic.co/u/skr007)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 8:35am UTC](https://discuss.elastic.co/t/parsing-json-from-couchdb-to-elasticsearch-via-logstash/260797 "2021-01-12T08:35:42Z")
Can anyone please help me with this issue? --- ## [High CPU usage 100%](https://discuss.elastic.co/t/high-cpu-usage-100/260750)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 4\ **Last updated:** [January 12, 2021, 8:12am UTC](https://discuss.elastic.co/t/high-cpu-usage-100/260750 "2021-01-12T08:12:22Z")
Hello, I am using ELasticsearch and Kibana version 7.10.1 Since 3 days, I am noticing that my data nodes are using high CPU, 100% in my cluster I have: 3 master nodes ( 2 CPU, 4 Go RAM, 100 Go HDD) node.roles: \[ mas… --- ## [Index mapping at startup](https://discuss.elastic.co/t/index-mapping-at-startup/260741)
**Author:** [@hyunsoo](https://discuss.elastic.co/u/hyunsoo)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 7:22am UTC](https://discuss.elastic.co/t/index-mapping-at-startup/260741 "2021-01-12T07:22:25Z")
Hi all, This question is about launching elasticsearch with kubernetes. If I run k8s like below, ... containers: - name: elasticsearch image: docker.elastic.co/elasticsearch/elasticsearch:7.10.1 … --- ## [Elasticsearch Cluster version 7.7 is not stable](https://discuss.elastic.co/t/elasticsearch-cluster-version-7-7-is-not-stable/259565)
**Author:** [@dat\_le](https://discuss.elastic.co/u/dat_le)\ **Replies:** 8\ **Last updated:** [January 12, 2021, 6:54am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-version-7-7-is-not-stable/259565 "2021-01-12T06:54:28Z")
Hello guys, Can anyone help me on this problem? My Cluster: I have a ES cluster with 3 nodes version 7.7. Every node have 2 vCPU and 16GB Ram. I have 2 index: Index 1: 121 MB (1.9M Doc, 2 Primary Shards, 1 Replica Sh… --- ## [Elasticsearch bulk index request failing with error “if \_id is specified it must not be empty”](https://discuss.elastic.co/t/elasticsearch-bulk-index-request-failing-with-error-if-id-is-specified-it-must-not-be-empty/260778)
**Author:** [@surenraju](https://discuss.elastic.co/u/surenraju)\ **Replies:** 3\ **Last updated:** [January 12, 2021, 6:29am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-index-request-failing-with-error-if-id-is-specified-it-must-not-be-empty/260778 "2021-01-12T06:29:47Z")
I am trying to bulk insert records to index asset\_inventory\_dev index. Elastic search is returning error saying “if \_id is specified it must not be empty”. Following is the request i tried from Kibana dev tools. I can… --- ## [Google pubsub plugin not working as expected](https://discuss.elastic.co/t/google-pubsub-plugin-not-working-as-expected/260786)
**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 5:34am UTC](https://discuss.elastic.co/t/google-pubsub-plugin-not-working-as-expected/260786 "2021-01-12T05:34:18Z")
I am using the google pub-sub input plugin. the following is my input configuration google\_pubsub { project\_id =\> "krail-proj-kgov-rai-doc-92zx4" topic =\> "rail\_logs" subscription =\> "rail… --- ## [Can you query for elements between multiple children in a parent-child join?](https://discuss.elastic.co/t/can-you-query-for-elements-between-multiple-children-in-a-parent-child-join/260775)
**Author:** [@Aidan\_Tan](https://discuss.elastic.co/u/Aidan_Tan)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 2:44am UTC](https://discuss.elastic.co/t/can-you-query-for-elements-between-multiple-children-in-a-parent-child-join/260775 "2021-01-12T02:44:28Z")
Is it possible to query among the elements of children and return the parent. So if one child has a gender of male and age of 17 and another has a gender of female and age of 21. Is it possible to return the parents if a… --- ## [How do we find the number unique dates that a field appears?](https://discuss.elastic.co/t/how-do-we-find-the-number-unique-dates-that-a-field-appears/260616)
**Author:** [@kenneth\_wang](https://discuss.elastic.co/u/kenneth_wang)\ **Replies:** 4\ **Last updated:** [January 12, 2021, 2:14am UTC](https://discuss.elastic.co/t/how-do-we-find-the-number-unique-dates-that-a-field-appears/260616 "2021-01-12T02:14:20Z")
Hello, For each log entry, I have "user identifier" and "date" fields. I would like to find out the number of unique dates that a "user identifier" appears in. Eg. For a given user identifier "1234567", if it appeared … --- ## [Canvasで指定した値をもつフィールドのみをリスト化したい](https://discuss.elastic.co/t/canvas/259541)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 2\ **Last updated:** [January 12, 2021, 12:31am UTC](https://discuss.elastic.co/t/canvas/259541 "2021-01-12T00:31:53Z")
お世話になります。 ある1つのドキュメントにおいて、Canvasで指定した値をもつフィールドのみをリスト化したいのですが、今一つアイデアが浮かびません。 何か良い方法があればご教示いただけませんでしょうか。 やりたいこと たとえば下記のデータにおいて、checkX における値が”OK”のフィールドのみを取り出したいです。 POST test\_index/\_bulk {"index":{"\_id":"1"}} {"title":"… --- ## [Stop Logstash with a Filter or Ruby-Code](https://discuss.elastic.co/t/stop-logstash-with-a-filter-or-ruby-code/259000)
**Author:** [@cwiechmann](https://discuss.elastic.co/u/cwiechmann)\ **Replies:** 3\ **Last updated:** [January 11, 2021, 10:59pm UTC](https://discuss.elastic.co/t/stop-logstash-with-a-filter-or-ruby-code/259000 "2021-01-11T22:59:09Z")
Hi All, I'm using Logstash to prepare/enrich documents before they are send to Elasticsearch. The enrichment is not really optional and will have an impact later, when the data is queried. Therefore, I need to make sure… --- ## [Client write error, trying connect {:e=\>#\ **Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 3\ **Last updated:** [January 11, 2021, 9:08pm UTC](https://discuss.elastic.co/t/client-write-error-trying-connect-e-ioerror-connection-reset-by-peer/260571 "2021-01-11T21:08:47Z") After restarting logstash, after few hours, beats data is not sending to elasticsearch. Beats ---\> Logstash ----\> logstash ---\> Elasticsearch. I have 2 logstash servers in the site, I am getting below error on one logst… --- ## [Query to return only doc with max value of one field, grouped by another field](https://discuss.elastic.co/t/query-to-return-only-doc-with-max-value-of-one-field-grouped-by-another-field/260764)
**Author:** [@aidanoc15](https://discuss.elastic.co/u/aidanoc15)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 8:25pm UTC](https://discuss.elastic.co/t/query-to-return-only-doc-with-max-value-of-one-field-grouped-by-another-field/260764 "2021-01-11T20:25:10Z")
So to be specific with what we are trying to accomplish, we are using Elastic Security's detections and have a few rules set up. We then have a logstash pipeline that queries the index our detections go into every minute… --- ## [Unable to start ElasticSearch after install on CENTOS 8](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-8/259650)
**Author:** [@Shariq\_Tejar](https://discuss.elastic.co/u/Shariq_Tejar)\ **Replies:** 4\ **Last updated:** [January 11, 2021, 8:23pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-8/259650 "2021-01-11T20:23:36Z")
elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Sat 2020-12-26 01:45:20 PKT; 10s ago … --- ## [Millions of closed indices?](https://discuss.elastic.co/t/millions-of-closed-indices/260758)
**Author:** [@cjbottaro](https://discuss.elastic.co/u/cjbottaro)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 8:02pm UTC](https://discuss.elastic.co/t/millions-of-closed-indices/260758 "2021-01-11T20:02:26Z")
Hello. We're toying with the idea of using Es for some type of "cold storage". Basically archival of our clients' data. The data grows indefinitely over time. The idea is to have an index for each piece of archived data… --- ## [Launch Logstash Pipeline through API](https://discuss.elastic.co/t/launch-logstash-pipeline-through-api/260761)
**Author:** [@ctan](https://discuss.elastic.co/u/ctan)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 8:00pm UTC](https://discuss.elastic.co/t/launch-logstash-pipeline-through-api/260761 "2021-01-11T20:00:36Z")
I would like to find a way to launch a Logstash pipeline through the API. The use case is that an application is going to write directly to Elasticsearch, and when it is done we want Logstash to kick-off and do it's thin… --- ## [Mixed storage within a cluster question](https://discuss.elastic.co/t/mixed-storage-within-a-cluster-question/260757)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 7:05pm UTC](https://discuss.elastic.co/t/mixed-storage-within-a-cluster-question/260757 "2021-01-11T19:05:55Z")
I have a cluster of ES nodes on AWS. Let's say 20 nodes using EBS and 3 using i3en (local disks). I am testing with i3en nodes to improve IO. But I am still seeing slow indexing and search logs showing up (up to tens … --- ## [Logstash, jdbc and .logstash\_jdbc\_last\_run](https://discuss.elastic.co/t/logstash-jdbc-and-logstash-jdbc-last-run/260654)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [January 11, 2021, 6:56pm UTC](https://discuss.elastic.co/t/logstash-jdbc-and-logstash-jdbc-last-run/260654 "2021-01-11T18:56:04Z")
In all my cases I do not want to use .logstash\_jdbc\_last\_run how do I avoid using it. I uses following option but it still try to use .logstash\_jdbc\_last\_run and fails sometime when two or more jdbc trying to use that. … --- ## [Master not discovered or elected yet, an election requires two nodes with ids](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-two-nodes-with-ids/260755)
**Author:** [@Sean\_Tisdale](https://discuss.elastic.co/u/Sean_Tisdale)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 5:43pm UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-two-nodes-with-ids/260755 "2021-01-11T17:43:02Z")
I'm am currently trying to set up a cluster with 3 nodes in total. 1 master node and 2 data nodes. I am currently just trying to get the the first two nodes to connect. My master node runs fine when I start it but my dat… --- ## [Kibana with basePath login redirect loop on GCP](https://discuss.elastic.co/t/kibana-with-basepath-login-redirect-loop-on-gcp/260115)
**Author:** [@uncl3mar1k](https://discuss.elastic.co/u/uncl3mar1k)\ **Replies:** 2\ **Last updated:** [January 11, 2021, 5:30pm UTC](https://discuss.elastic.co/t/kibana-with-basepath-login-redirect-loop-on-gcp/260115 "2021-01-11T17:30:41Z")
On a regular GKE private cluster I Installed ECK (kubectl apply -f https://download.elastic.co/downloads/eck/1.3.1/all-in-one.yaml) Installed Elasticsearch and Kibana: apiVersion: v1 kind: Namespace meta… --- ## [Inconsistent results for the same query on an index with 0 replicas](https://discuss.elastic.co/t/inconsistent-results-for-the-same-query-on-an-index-with-0-replicas/258715)
**Author:** [@Marten](https://discuss.elastic.co/u/Marten)\ **Replies:** 6\ **Last updated:** [January 11, 2021, 4:28pm UTC](https://discuss.elastic.co/t/inconsistent-results-for-the-same-query-on-an-index-with-0-replicas/258715 "2021-01-11T16:28:00Z")
Hi there, I have a problem with inconsistent ranking of the results when submitting the same query multiple times. I'm using ES 5.6.8 on an index with 5 primary shards. I have set the number of replicas from 1 to 0 to… --- ## [Fresh Install if ELK 7.10 floods deprecation log](https://discuss.elastic.co/t/fresh-install-if-elk-7-10-floods-deprecation-log/259972)
**Author:** [@JSylvia007](https://discuss.elastic.co/u/JSylvia007)\ **Replies:** 2\ **Last updated:** [January 11, 2021, 4:20pm UTC](https://discuss.elastic.co/t/fresh-install-if-elk-7-10-floods-deprecation-log/259972 "2021-01-11T16:20:11Z")
Originally posted here: Fresh Install if ELK 7.10 floods deprecation log and at the recommendation of @DavidTurner creating a new post here... A fresh install of ELK 7.10 fills the deprecation log once Kibana is install… --- ## [Convert key value pair into hash](https://discuss.elastic.co/t/convert-key-value-pair-into-hash/260691)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 3:41pm UTC](https://discuss.elastic.co/t/convert-key-value-pair-into-hash/260691 "2021-01-11T15:41:22Z")
I have a field p1 with the value as partition=root,size=23.28GB,free=15.76GB p1 : partition=root,size=23.28GB,free=15.76GB I want to store this in an array field and the values in a hash, like below. \[partition\]\[root… --- ## [Vega: Collecting data from a visualization data table](https://discuss.elastic.co/t/vega-collecting-data-from-a-visualization-data-table/260724)
**Author:** [@nikita\_zaliven](https://discuss.elastic.co/u/nikita_zaliven)\ **Replies:** 18\ **Last updated:** [January 11, 2021, 3:37pm UTC](https://discuss.elastic.co/t/vega-collecting-data-from-a-visualization-data-table/260724 "2021-01-11T15:37:05Z")
Hello, Using a dashboard, I have one visualization which is a data table. I am trying to figure out if and how it is possible with Vega to load a specific column from the data table in order to use it with another data… --- ## [Issue in import csv functionality with timestamp field contains spaces and kommas](https://discuss.elastic.co/t/issue-in-import-csv-functionality-with-timestamp-field-contains-spaces-and-kommas/260584)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 3\ **Last updated:** [January 11, 2021, 3:33pm UTC](https://discuss.elastic.co/t/issue-in-import-csv-functionality-with-timestamp-field-contains-spaces-and-kommas/260584 "2021-01-11T15:33:41Z")
Hello, Kibana 7.10.1. Tried to use the import csv functionality and for some reason is the first colomn header replaced by a value with a front and end space.. Seem like a bug? The csv was exported from Excel. Als… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1086) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1088)