# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1143 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1144 --- ## [SearchTemplate issue Java API](https://discuss.elastic.co/t/searchtemplate-issue-java-api/256185)
**Author:** [@Mombasa](https://discuss.elastic.co/u/Mombasa)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 7:57pm UTC](https://discuss.elastic.co/t/searchtemplate-issue-java-api/256185 "2020-11-20T19:57:45Z")
I'm stuck with a SearchTemplate request, until now I've been able to write queries thru the QueryBuilder and execute them calling the "search" method of the RestHighLevelClient java client, but when I try to execute the … --- ## [\[Grok\] Array of patterns - only first pattern matched](https://discuss.elastic.co/t/grok-array-of-patterns-only-first-pattern-matched/256234)
**Author:** [@james64](https://discuss.elastic.co/u/james64)\ **Replies:** 2\ **Last updated:** [November 21, 2020, 5:19pm UTC](https://discuss.elastic.co/t/grok-array-of-patterns-only-first-pattern-matched/256234 "2020-11-21T17:19:21Z")
Hello, based on this documentation I am trying to use grok filter with this configuration: grok { match =\> { "message" =\> \[ ' volume\_path="%{UNIXPATH:csi\_volume\_path}', … --- ## [WARN#011\[elasticsearch\]#011elasticsearch/client.go:408#011Cannot index event publisher.Event](https://discuss.elastic.co/t/warn-011-elasticsearch-011elasticsearch-client-go-408-011cannot-index-event-publisher-event/254608)
**Author:** [@oicfar](https://discuss.elastic.co/u/oicfar)\ **Replies:** 2\ **Last updated:** [November 21, 2020, 4:52pm UTC](https://discuss.elastic.co/t/warn-011-elasticsearch-011elasticsearch-client-go-408-011cannot-index-event-publisher-event/254608 "2020-11-21T16:52:50Z")
Hi, ES is flooting syslog. Nov 7 13:57:04 nuc-mini-server filebeat\[757\]: 2020-11-07T13:57:04.044+0100#011WARN#011\[elasticsearch\]#011elasticsearch/client.go:408#011Cannot index event publisher.Event{Content:beat.Event{… --- ## [Alternative to running logstash from the command line](https://discuss.elastic.co/t/alternative-to-running-logstash-from-the-command-line/256231)
**Author:** [@jafri6](https://discuss.elastic.co/u/jafri6)\ **Replies:** 1\ **Last updated:** [November 21, 2020, 4:05pm UTC](https://discuss.elastic.co/t/alternative-to-running-logstash-from-the-command-line/256231 "2020-11-21T16:05:26Z")
I have a perfect working solution on ELK. The only issue that I am facing is that I want the logstash config to be run in the background as compared to running in the command line: /usr/share/logstash/bin/logstash --pat… --- ## [Parsing error Logstash with file as input](https://discuss.elastic.co/t/parsing-error-logstash-with-file-as-input/256227)
**Author:** [@Xor44](https://discuss.elastic.co/u/Xor44)\ **Replies:** 1\ **Last updated:** [November 21, 2020, 3:09pm UTC](https://discuss.elastic.co/t/parsing-error-logstash-with-file-as-input/256227 "2020-11-21T15:09:30Z")
Hi Folks , I'm new in ELK , i'm trying read and parse a file with logstash. But I get some errors during the parsing process Here is an example of logs // date="Nov 21 2020 14:36:00" AED="1.1.1.1" type=group\_location … --- ## [How does ES stores the geopoints or location of an entry?](https://discuss.elastic.co/t/how-does-es-stores-the-geopoints-or-location-of-an-entry/256230)
**Author:** [@HseinBitar](https://discuss.elastic.co/u/HseinBitar)\ **Replies:** 0\ **Last updated:** [November 21, 2020, 3:09pm UTC](https://discuss.elastic.co/t/how-does-es-stores-the-geopoints-or-location-of-an-entry/256230 "2020-11-21T15:09:14Z")
I need to return nearest 10 results with score above a threshold that I specify. I do have the location of every entry, as a geopoint with latitude and longitude. I doubt a geospatial index would be useful for such a … --- ## [Ruby exception occurred: undefined method \`\[\]' for #\ **Author:** [@sujeetjha](https://discuss.elastic.co/u/sujeetjha)\ **Replies:** 3\ **Last updated:** [November 21, 2020, 2:02pm UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-logstash/256131 "2020-11-21T14:02:51Z") filter { ## Ignore the comments that IIS will add to the start of the W3C logs # if \[message\] =~ "^#" { drop {} } grok { ## Very helpful site for building these statements: # http://grokdebug.her… --- ## [How to search text field for list of "terms" / "keywords"](https://discuss.elastic.co/t/how-to-search-text-field-for-list-of-terms-keywords/256218)
**Author:** [@msta](https://discuss.elastic.co/u/msta)\ **Replies:** 0\ **Last updated:** [November 21, 2020, 11:50am UTC](https://discuss.elastic.co/t/how-to-search-text-field-for-list-of-terms-keywords/256218 "2020-11-21T11:50:29Z")
Hi ES Community, We have a set of text-documents indexed, and their primary field is an analyzed version of their text (stored in a text field). We want to exact or partial match any of a long list of keywords in the te… --- ## [Unable to load an index with more than 2.1 B documents](https://discuss.elastic.co/t/unable-to-load-an-index-with-more-than-2-1-b-documents/256211)
**Author:** [@amir\_veyseh](https://discuss.elastic.co/u/amir_veyseh)\ **Replies:** 10\ **Last updated:** [November 21, 2020, 10:43am UTC](https://discuss.elastic.co/t/unable-to-load-an-index-with-more-than-2-1-b-documents/256211 "2020-11-21T10:43:54Z")
I stopped the elasticSearch service and restarted it. Now, one of the indices cannot be loaded. Here's the status of the indeices: yellow open test-index \_taPEhm3ReSwCYjb1Y5hQA 1 1 3 0 7.5kb … --- ## [Filebeat-\* index pattern (Can´t find it!)](https://discuss.elastic.co/t/filebeat-index-pattern-can-t-find-it/256208)
**Author:** [@771M771](https://discuss.elastic.co/u/771M771)\ **Replies:** 3\ **Last updated:** [November 21, 2020, 4:43am UTC](https://discuss.elastic.co/t/filebeat-index-pattern-can-t-find-it/256208 "2020-11-21T04:43:24Z")
I´ve installed and configured ELK (elasticsearch, logstash, kibana, and filebeat) and they are up and running on localhost:ports. But when I try to create an index pattern in Kibana after uploading my .json it can´t find… --- ## [How to migrate elastic version 5.6.5?](https://discuss.elastic.co/t/how-to-migrate-elastic-version-5-6-5/255313)
**Author:** [@balainit](https://discuss.elastic.co/u/balainit)\ **Replies:** 6\ **Last updated:** [November 21, 2020, 4:14am UTC](https://discuss.elastic.co/t/how-to-migrate-elastic-version-5-6-5/255313 "2020-11-21T04:14:20Z")
Hi everyone, how to migrate 57 nodes and 58 nodes to the new one, the data volume is 1T, thank you all --- ## [GROK Date/time filter not working](https://discuss.elastic.co/t/grok-date-time-filter-not-working/256201)
**Author:** [@earlsanchez](https://discuss.elastic.co/u/earlsanchez)\ **Replies:** 2\ **Last updated:** [November 21, 2020, 2:26am UTC](https://discuss.elastic.co/t/grok-date-time-filter-not-working/256201 "2020-11-21T02:26:20Z")
Getting logstash failure when parsing the date/time stamp from my log. This seems to work in the GROK Debugger but fails when logstash filters it. Can someone please help to filter the date/time stamp into "date"? In GR… --- ## [How to handle gaps in date histogram (missing values) in Kibana and Elastic Search?](https://discuss.elastic.co/t/how-to-handle-gaps-in-date-histogram-missing-values-in-kibana-and-elastic-search/255430)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 4\ **Last updated:** [November 20, 2020, 11:07pm UTC](https://discuss.elastic.co/t/how-to-handle-gaps-in-date-histogram-missing-values-in-kibana-and-elastic-search/255430 "2020-11-20T23:07:30Z")
Our indices have missing values from time to time, and when that happens, what I’d like to see in date histogram plots is to simply ignore missing values and connect the lines before and after. Please see this example pl… --- ## [ES 7.10 ignores analyzer in "as\_you\_type" fields](https://discuss.elastic.co/t/es-7-10-ignores-analyzer-in-as-you-type-fields/256113)
**Author:** [@\_ZN3val](https://discuss.elastic.co/u/_ZN3val)\ **Replies:** 4\ **Last updated:** [November 20, 2020, 10:06pm UTC](https://discuss.elastic.co/t/es-7-10-ignores-analyzer-in-as-you-type-fields/256113 "2020-11-20T22:06:14Z")
Hello, Since an upgrade from 7.9 to 7.10, ES tokenizes "as\_you\_type" fields with a "simple" analyzer differently, causing less results to be returned. While this analyzer should split on any non-letter, it stopped split… --- ## [Group by and sum](https://discuss.elastic.co/t/group-by-and-sum/256190)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 9:20pm UTC](https://discuss.elastic.co/t/group-by-and-sum/256190 "2020-11-20T21:20:16Z")
hi all and sorry for my poor english I tried with no success to create an aggregation query that group hits by a field "category" and get a sum of field "eventCount". Please help --- ## [QueueResizingEsThreadPoolExecutor exception](https://discuss.elastic.co/t/queueresizingesthreadpoolexecutor-exception/256189)
**Author:** [@Igor\_Domshchikov](https://discuss.elastic.co/u/Igor_Domshchikov)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 9:04pm UTC](https://discuss.elastic.co/t/queueresizingesthreadpoolexecutor-exception/256189 "2020-11-20T21:04:28Z")
At some point during 35k endurance load test of my java web app which fetches static data from Elasticsearch, I am start getting following elasticsearch exception: Caused by: org.elasticsearch.common.util.concurrent.EsR… --- ## [Using custom JVM options files in jvm.options.d/ shows duplicate JVM args](https://discuss.elastic.co/t/using-custom-jvm-options-files-in-jvm-options-d-shows-duplicate-jvm-args/256188)
**Author:** [@ben-charles](https://discuss.elastic.co/u/ben-charles)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 8:43pm UTC](https://discuss.elastic.co/t/using-custom-jvm-options-files-in-jvm-options-d-shows-duplicate-jvm-args/256188 "2020-11-20T20:43:42Z")
I have a custom.options file in my config/jvm.options.d/ directory with the following contents: -Xms2g -Xmx2g When looking at the running Elasticsearch process, I see that there are two sets of command line parameters … --- ## [Logstash not sending data to elastic](https://discuss.elastic.co/t/logstash-not-sending-data-to-elastic/256176)
**Author:** [@DedSec](https://discuss.elastic.co/u/DedSec)\ **Replies:** 5\ **Last updated:** [November 20, 2020, 6:50pm UTC](https://discuss.elastic.co/t/logstash-not-sending-data-to-elastic/256176 "2020-11-20T18:50:15Z")
Hello, I have a logstash file and when I am running the command sudo logstash -f bug.conf logstash starts but there is no data in ELK This is my bug.conf file: input { file { path =\> "/Users/siddharth/Desktop/program… --- ## [Filter with criteria before sum aggregation](https://discuss.elastic.co/t/filter-with-criteria-before-sum-aggregation/256051)
**Author:** [@erv](https://discuss.elastic.co/u/erv)\ **Replies:** 0\ **Last updated:** [November 19, 2020, 11:17pm UTC](https://discuss.elastic.co/t/filter-with-criteria-before-sum-aggregation/256051 "2020-11-19T23:17:35Z")
Hey everyone! I'm having a hard time with the following issue. Suppose I have the following three documents: { "entity\_id": "A", "stringField1": "SF1A", "stringField2": "SF2", "numericField": 10, … --- ## [Get a link to single document page in Discover section in Kibana](https://discuss.elastic.co/t/get-a-link-to-single-document-page-in-discover-section-in-kibana/256126)
**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 6:25pm UTC](https://discuss.elastic.co/t/get-a-link-to-single-document-page-in-discover-section-in-kibana/256126 "2020-11-20T18:25:33Z")
I am building a search page for a web application that is backed with Elasticsearch. In that web app I want to let the user search and filter the data and the result of the search should show some fields of the documents… --- ## [Date Joda parse does not work](https://discuss.elastic.co/t/date-joda-parse-does-not-work/256163)
**Author:** [@Jan\_Kabelka](https://discuss.elastic.co/u/Jan_Kabelka)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 5:58pm UTC](https://discuss.elastic.co/t/date-joda-parse-does-not-work/256163 "2020-11-20T17:58:53Z")
Hi, I am trying to parse date to field @timestamp. My timestamp looks like below: "Timestamp" : "11/20/2020 3:32:01 PM" I tried: date { match =\> \[ "Timestamp", "MM/dd/yyyy HH:mm:ss a" \] remove\_field =\> \["Timestamp"\] … --- ## [Unable to do Cross Cluster Searching in AWS with Instances in Separate Regions](https://discuss.elastic.co/t/unable-to-do-cross-cluster-searching-in-aws-with-instances-in-separate-regions/252707)
**Author:** [@jim1](https://discuss.elastic.co/u/jim1)\ **Replies:** 5\ **Last updated:** [November 20, 2020, 5:53pm UTC](https://discuss.elastic.co/t/unable-to-do-cross-cluster-searching-in-aws-with-instances-in-separate-regions/252707 "2020-11-20T17:53:08Z")
Hello, I have two clusters installed on EC2 instances in separate regions in AWS. I am trying to use the cross cluster search feature in order to query both clusters from one central location. When I try to connect to t… --- ## [Setting up Enterprise Search with cloudflare SSL](https://discuss.elastic.co/t/setting-up-enterprise-search-with-cloudflare-ssl/256119)
**Author:** [@z.nader](https://discuss.elastic.co/u/z.nader)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 2:16pm UTC](https://discuss.elastic.co/t/setting-up-enterprise-search-with-cloudflare-ssl/256119 "2020-11-20T14:16:22Z")
Hello everyone, I am trying to setup enterprise search on a Ubuntu 18.04 with Apache2 the domain is proxied using cloudflare and so is the SSL certification. I am using a PEM certificate. I have tried to tell entrepri… --- ## [Logstash add @version which is not in the original document](https://discuss.elastic.co/t/logstash-add-version-which-is-not-in-the-original-document/256144)
**Author:** [@amralieg](https://discuss.elastic.co/u/amralieg)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 4:23pm UTC](https://discuss.elastic.co/t/logstash-add-version-which-is-not-in-the-original-document/256144 "2020-11-20T16:23:04Z")
Hi, I have this logstash config that moves data between 2 elasticsearch, when I run it I get this error, any idea how to solve this? input { elasticsearch { hosts =\> \["\"\] user =\> "\*\*" … --- ## [Logstash imap plugin read a lot of Duplication email](https://discuss.elastic.co/t/logstash-imap-plugin-read-a-lot-of-duplication-email/256150)
**Author:** [@shawn\_sun](https://discuss.elastic.co/u/shawn_sun)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 3:59pm UTC](https://discuss.elastic.co/t/logstash-imap-plugin-read-a-lot-of-duplication-email/256150 "2020-11-20T15:59:28Z")
version： logstash7.8.0 and elasticsearch7.8.0 When I use Logstash imap input plugin to read email from IMAP server，The elasticsearch recive many repeat email this is logstash.conf input { imap { host =\> "imap.ma… --- ## [Dashboard Creation Restrictions](https://discuss.elastic.co/t/dashboard-creation-restrictions/255849)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 3:58pm UTC](https://discuss.elastic.co/t/dashboard-creation-restrictions/255849 "2020-11-20T15:58:51Z")
Hi, I am wanting to create two groups of users. Can create Dashboards but not delete any Can use others Dashboards but not create/delete any Both groups should only see the dashboards created by for them by admin or … --- ## [Match single keyword search term against multiple index keywords](https://discuss.elastic.co/t/match-single-keyword-search-term-against-multiple-index-keywords/256145)
**Author:** [@duncRed](https://discuss.elastic.co/u/duncRed)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 3:41pm UTC](https://discuss.elastic.co/t/match-single-keyword-search-term-against-multiple-index-keywords/256145 "2020-11-20T15:41:06Z")
We are looking to match a search term keyword against multiple keywords in the index. For example if someone searches on "1780pixel" the intention would be that this matches both the keywords "1780" and "pixel" in the i… --- ## [How to find problematic search which contributes to high load and CPU usages?](https://discuss.elastic.co/t/how-to-find-problematic-search-which-contributes-to-high-load-and-cpu-usages/254091)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 10\ **Last updated:** [November 20, 2020, 3:21pm UTC](https://discuss.elastic.co/t/how-to-find-problematic-search-which-contributes-to-high-load-and-cpu-usages/254091 "2020-11-20T15:21:51Z")
Recently our cluster has seen spikes of high load on some nodes. My hunch is that it has to do with some specific searches, but how do you determine which searches are causing it? I have seen some posts here saying that… --- ## [JSON data won't upload](https://discuss.elastic.co/t/json-data-wont-upload/256041)
**Author:** [@codewriterguy](https://discuss.elastic.co/u/codewriterguy)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 3:00pm UTC](https://discuss.elastic.co/t/json-data-wont-upload/256041 "2020-11-20T15:00:42Z")
Hi, First time user here so apologies if I'm not doing things correctly. I am trying to upload a JSON file, which consists of an array of JSON elements, the longest being \< 3100 characters. For whatever reason, the Data… --- ## [Scripted field for same month data](https://discuss.elastic.co/t/scripted-field-for-same-month-data/256121)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 2:57pm UTC](https://discuss.elastic.co/t/scripted-field-for-same-month-data/256121 "2020-11-20T14:57:34Z")
Hi All, We are trying to build a dashboard for a new scenario,like we are ingesting data from servicenow using logstash, the data has ticket information like opened and closed, we want to build a dashboard for monthly… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1142) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1144)