# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1149 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1150 --- ## [Kibana REST API not working](https://discuss.elastic.co/t/kibana-rest-api-not-working/255704)
**Author:** [@Maria20](https://discuss.elastic.co/u/Maria20)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 2:31pm UTC](https://discuss.elastic.co/t/kibana-rest-api-not-working/255704 "2020-11-17T14:31:46Z")
Hi, I tried to check index-patterns using kibana rest api, but it is not working. curl -XGET http://localhost:5601/api/saved\_objects/index-pattern/$indx I am using kibana 7.3.2 Thanks --- ## [ElasticSearch usage for logs with big size of entries](https://discuss.elastic.co/t/elasticsearch-usage-for-logs-with-big-size-of-entries/255197)
**Author:** [@andsm](https://discuss.elastic.co/u/andsm)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 2:24pm UTC](https://discuss.elastic.co/t/elasticsearch-usage-for-logs-with-big-size-of-entries/255197 "2020-11-17T14:24:10Z")
Hello, I think about usage of ElasticSearch for logging. System generates about 5-10k log entries per second, average, total size is about 500 Mb per second. Most of log entries are small, but some log entries have siz… --- ## [To create a log-level depends on string](https://discuss.elastic.co/t/to-create-a-log-level-depends-on-string/255712)
**Author:** [@Guhan\_S](https://discuss.elastic.co/u/Guhan_S)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 2:09pm UTC](https://discuss.elastic.co/t/to-create-a-log-level-depends-on-string/255712 "2020-11-17T14:09:46Z")
message:{"level":30",hostname":"someserver.com","pid":1627," like this i am getting logs, i have filter accoding to level in message. level:30 means info level log, 20 means debug level log --- ## [Set kibana.autocompleteTerminateAfter via DevTools](https://discuss.elastic.co/t/set-kibana-autocompleteterminateafter-via-devtools/255685)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 8\ **Last updated:** [November 17, 2020, 2:08pm UTC](https://discuss.elastic.co/t/set-kibana-autocompleteterminateafter-via-devtools/255685 "2020-11-17T14:08:39Z")
Hi, Is there a way to set kibana.autocompleteTerminateAfter via DevTools or via curl command? Thank you in advance! BR Voula --- ## [Garbage collection old vs young](https://discuss.elastic.co/t/garbage-collection-old-vs-young/255361)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 2:07pm UTC](https://discuss.elastic.co/t/garbage-collection-old-vs-young/255361 "2020-11-17T14:07:35Z")
Hi, Question, On my nodes (7.9.3) I see the following graph's in stackmonitoring: What strikes me is the 0 for old . As far as I know, the default ratio is 2? So I would not expect 0 here, but about double of what y… --- ## [How can a replica recover from another replica but not the primary shard](https://discuss.elastic.co/t/how-can-a-replica-recover-from-another-replica-but-not-the-primary-shard/255703)
**Author:** [@chemboking](https://discuss.elastic.co/u/chemboking)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 2:03pm UTC](https://discuss.elastic.co/t/how-can-a-replica-recover-from-another-replica-but-not-the-primary-shard/255703 "2020-11-17T14:03:41Z")
Here is my scenario: create one index with 0 replica; merge this index to one segment; stop all the write operations and set the num of replica to 20; The question is that the replicas can only be recovere… --- ## [Kibana dashbord trading candle](https://discuss.elastic.co/t/kibana-dashbord-trading-candle/255600)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 8\ **Last updated:** [November 17, 2020, 1:58pm UTC](https://discuss.elastic.co/t/kibana-dashbord-trading-candle/255600 "2020-11-17T13:58:24Z")
Hello, giving this example data, Is It possible to make trading candle in kibana? Maybe using timelion? {'crypto.candle.close': '16746.10000000', 'crypto.candle.closeTime': '2020-11-16T22:59:59Z', 'crypto.candle.h… --- ## [Downgrade from 7.9 to 7.8](https://discuss.elastic.co/t/downgrade-from-7-9-to-7-8/255672)
**Author:** [@amralieg](https://discuss.elastic.co/u/amralieg)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 1:55pm UTC](https://discuss.elastic.co/t/downgrade-from-7-9-to-7-8/255672 "2020-11-17T13:55:57Z")
Hi All, need some thoughts on this. for some reasons I need to move from v7.9.3 to v7.8. I know I can not do a snapshot and restore. but what are my other options here? I thought for reindex from the old cluster to the … --- ## [Elasticsearch stopped allocating shards due to missing kuromoji\_part\_of\_speech filter](https://discuss.elastic.co/t/elasticsearch-stopped-allocating-shards-due-to-missing-kuromoji-part-of-speech-filter/254871)
**Author:** [@phoerious](https://discuss.elastic.co/u/phoerious)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 1:49pm UTC](https://discuss.elastic.co/t/elasticsearch-stopped-allocating-shards-due-to-missing-kuromoji-part-of-speech-filter/254871 "2020-11-17T13:49:28Z")
Hi, We have a web index containing Japanese documents, which are using analyzers from the analysis-icu and analysis-kuromoji plugins. Our Elasticsearch cluster is deployed via ECK and pulls the plugins inside the init c… --- ## [Logstash shut down after pipeline terminated](https://discuss.elastic.co/t/logstash-shut-down-after-pipeline-terminated/255478)
**Author:** [@Amir\_Almian](https://discuss.elastic.co/u/Amir_Almian)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 1:24pm UTC](https://discuss.elastic.co/t/logstash-shut-down-after-pipeline-terminated/255478 "2020-11-17T13:24:27Z")
i,m running elastic stack on docker and with ssl security enable. this is my logstash.yml file http.host: "0.0.0.0" xpack.monitoring.elasticsearch.hosts: \[ "https://elasticsearch:9200" \] xpack.monitoring.enabled: true … --- ## [Ingest node pipeline error](https://discuss.elastic.co/t/ingest-node-pipeline-error/255694)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 12:42pm UTC](https://discuss.elastic.co/t/ingest-node-pipeline-error/255694 "2020-11-17T12:42:46Z")
I want to set up an ingest node pipeline that will add new field based on host.hostname that is all lower cased. I made something like this But I got this error that I don't understand. 2020-11-17T13:31:41.473+0100 … --- ## [Logstash config to ingest data by filtering the data that is already present in another index in ES](https://discuss.elastic.co/t/logstash-config-to-ingest-data-by-filtering-the-data-that-is-already-present-in-another-index-in-es/255692)
**Author:** [@Sivajanani](https://discuss.elastic.co/u/Sivajanani)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 12:29pm UTC](https://discuss.elastic.co/t/logstash-config-to-ingest-data-by-filtering-the-data-that-is-already-present-in-another-index-in-es/255692 "2020-11-17T12:29:46Z")
Hello All, I have a requirement to ingest only the data which already exists in another index. For example I have a index in ES like index1 =\[source=a,time=b,value=c,id=d\] and data set to be ingested like sample=\[value=… --- ## [Logstash docker error -\> exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"input\\", \\"filter\\", \\"output\\" at line 1, column 1 (byte 1)"](https://discuss.elastic.co/t/logstash-docker-error-exception-logstash-configurationerror-message-expected-one-of-t-r-n-input-filter-output-at-line-1-column-1-byte-1/255210)
**Author:** [@s0umen](https://discuss.elastic.co/u/s0umen)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 11:55am UTC](https://discuss.elastic.co/t/logstash-docker-error-exception-logstash-configurationerror-message-expected-one-of-t-r-n-input-filter-output-at-line-1-column-1-byte-1/255210 "2020-11-17T11:55:59Z")
Hi, I am facing a peculiar issue. I have seen the error faced by many before me, but the solution (only a few of them said resolved by fresh creation by typing the logstash.conf file) is not working for me. Please help… --- ## [Per user data retention](https://discuss.elastic.co/t/per-user-data-retention/255552)
**Author:** [@10aRK](https://discuss.elastic.co/u/10aRK)\ **Replies:** 4\ **Last updated:** [November 17, 2020, 11:25am UTC](https://discuss.elastic.co/t/per-user-data-retention/255552 "2020-11-17T11:25:45Z")
Hi I've been looking into how best to model data whilst accounting for customisable data retention periods at a user / document level vs the whole index. ILM seems perfect when reasoning about the whole index, old vers… --- ## [TimeSeries Graph with a factor to multiple for Count Value](https://discuss.elastic.co/t/timeseries-graph-with-a-factor-to-multiple-for-count-value/255645)
**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 11:09am UTC](https://discuss.elastic.co/t/timeseries-graph-with-a-factor-to-multiple-for-count-value/255645 "2020-11-17T11:09:39Z")
Hi I have a requirement where I need to multiple a time-series count value with a factor n any idea how to achieve this? --- ## [We can't find products matching the selection](https://discuss.elastic.co/t/we-cant-find-products-matching-the-selection/255653)
**Author:** [@AndrewsG](https://discuss.elastic.co/u/AndrewsG)\ **Replies:** 3\ **Last updated:** [November 17, 2020, 10:34am UTC](https://discuss.elastic.co/t/we-cant-find-products-matching-the-selection/255653 "2020-11-17T10:34:34Z")
Hi, I have installed Elasticsearch onto a Magento 2.4 site. I keep receiving the error "We can't find products matching the selection" after a period of time of the Elasticsearch working. Please can anyone advise? --- ## [How to filter a list of word with kibana](https://discuss.elastic.co/t/how-to-filter-a-list-of-word-with-kibana/255515)
**Author:** [@slim-hmidi](https://discuss.elastic.co/u/slim-hmidi)\ **Replies:** 9\ **Last updated:** [November 17, 2020, 10:32am UTC](https://discuss.elastic.co/t/how-to-filter-a-list-of-word-with-kibana/255515 "2020-11-17T10:32:23Z")
I tried to fetch some word using regexp in the filter but does not work: { "query": { "regexp": { "message": { "value": "\*.word1.word2.word3.\*" } } } } I want to fetch messages that contai… --- ## [Threat Intel and SIEM](https://discuss.elastic.co/t/threat-intel-and-siem/255404)
**Author:** [@randomguy](https://discuss.elastic.co/u/randomguy)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 10:27am UTC](https://discuss.elastic.co/t/threat-intel-and-siem/255404 "2020-11-17T10:27:10Z")
Hi, I'm looking for a SIEM solution for our company. At the moment I'm trying to do it with ELK. My goal is: I would like to create fancy dashboards, alerts with events correlated from Threat Intel. I would like to u… --- ## [Converting value in field](https://discuss.elastic.co/t/converting-value-in-field/255527)
**Author:** [@Lokesh\_Mayan](https://discuss.elastic.co/u/Lokesh_Mayan)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 9:57am UTC](https://discuss.elastic.co/t/converting-value-in-field/255527 "2020-11-17T09:57:17Z")
Hi i am having a log list like this \<#\> 20200924 15:14:44.552 000000997 FD.WRN \[ MVINB-LSL2.T1G1\_ATMTH\_SL main.main ConfigService.ConfigService \] Unable to get CommonParamConfig of \[DAC\_TEST\_WHILE\_IDLE… --- ## [Elasticsearch cannot find a non-existing file](https://discuss.elastic.co/t/elasticsearch-cannot-find-a-non-existing-file/255636)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 5\ **Last updated:** [November 17, 2020, 9:54am UTC](https://discuss.elastic.co/t/elasticsearch-cannot-find-a-non-existing-file/255636 "2020-11-17T09:54:43Z")
Hello, after enabling and configuring ES to use s3 repository plugin when we restart each node we got a following error right after restarting nodes and only. When I enter the directory the file is missing. Els process … --- ## [Kibana Fundamentals instructions](https://discuss.elastic.co/t/kibana-fundamentals-instructions/255574)
**Author:** [@ADeLay333](https://discuss.elastic.co/u/ADeLay333)\ **Replies:** 3\ **Last updated:** [November 17, 2020, 9:53am UTC](https://discuss.elastic.co/t/kibana-fundamentals-instructions/255574 "2020-11-17T09:53:02Z")
The instructions are not aligning with the environment - can't get past step 13 Edit/Enable Machine Learning doesn't exist - it's not as cut and cry as that, the work around take awhile to figure out "this file" downlo… --- ## [Does logstash continue getting log from Kafka if it cannot send log to ELS?](https://discuss.elastic.co/t/does-logstash-continue-getting-log-from-kafka-if-it-cannot-send-log-to-els/255648)
**Author:** [@AkatsukiPain](https://discuss.elastic.co/u/AkatsukiPain)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 9:40am UTC](https://discuss.elastic.co/t/does-logstash-continue-getting-log-from-kafka-if-it-cannot-send-log-to-els/255648 "2020-11-17T09:40:43Z")
I want to build a topology like this, but I don't know the behavior of logstash when elasticsearch dies ( Logstash cannot send the log to Elasticsearch). There are 2 situations that I'm thinking Logstash will stop get… --- ## [Elasticsearch and dynamic mappings](https://discuss.elastic.co/t/elasticsearch-and-dynamic-mappings/255643)
**Author:** [@BBQigniter](https://discuss.elastic.co/u/BBQigniter)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 9:04am UTC](https://discuss.elastic.co/t/elasticsearch-and-dynamic-mappings/255643 "2020-11-17T09:04:30Z")
I have two questions about dynamic mappings. I have set up a component template which looks like this: PUT \_component\_template/syslog-mappings-dynamic { "version": 1, "template": { "mappings": { "\_source"… --- ## [Parse the json \[{},{},{}\]\[{},{},{}\] with logstash](https://discuss.elastic.co/t/parse-the-json-with-logstash/255642)
**Author:** [@thibd](https://discuss.elastic.co/u/thibd)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 8:48am UTC](https://discuss.elastic.co/t/parse-the-json-with-logstash/255642 "2020-11-17T08:48:48Z")
Hello, I have a json from scrapy with this format: \[{"website1":"myurl1","importdate":"X"},{"website2":"myurl2","importdate":"X"}\] \[{"website1":"myurl1","importdate":"Y"},{"website3":"myurl3","importdate":"Y"}\] So a n… --- ## [Logstash - Json appearing in Message field](https://discuss.elastic.co/t/logstash-json-appearing-in-message-field/255641)
**Author:** [@weiyentan](https://discuss.elastic.co/u/weiyentan)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 8:46am UTC](https://discuss.elastic.co/t/logstash-json-appearing-in-message-field/255641 "2020-11-17T08:46:21Z")
Hi, I am kind of new to the elasticsearch family so thought I would try to create some use cases. One of those is to upload system information into logstash from json documents gathered by ansible . Ansible then reads … --- ## [Elasticsearch cluster across different Geo Datacenters](https://discuss.elastic.co/t/elasticsearch-cluster-across-different-geo-datacenters/255639)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 8:44am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-across-different-geo-datacenters/255639 "2020-11-17T08:44:40Z")
We are in the process of setting up Elasticsearch as a Search Engine to consume customer data. The Elasticsearch nodes are across 5 VMs in 2 different Datacenters (3:2), and all of them are Master-Data and active nodes. … --- ## [Averaging dense\_vectors within ES](https://discuss.elastic.co/t/averaging-dense-vectors-within-es/255637)
**Author:** [@fpug](https://discuss.elastic.co/u/fpug)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 8:27am UTC](https://discuss.elastic.co/t/averaging-dense-vectors-within-es/255637 "2020-11-17T08:27:20Z")
Hi! I'm designing a clustering algorithm, which leverages ES as a backend to retrieve close matches, using the recently introduced dense\_vector type and the cosineSimilarity function. So far so good, aside from the fac… --- ## [Aggregation not working in visualization](https://discuss.elastic.co/t/aggregation-not-working-in-visualization/254250)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 5\ **Last updated:** [November 17, 2020, 8:25am UTC](https://discuss.elastic.co/t/aggregation-not-working-in-visualization/254250 "2020-11-17T08:25:18Z")
Hi Team, Greetings..! Hope you are doing good. In dev tools tab, when I execute the terms aggs query for a certain field I can retrieve the result based on the values in that field, but when I do the same terms aggrega… --- ## [How to reindex data from cluster to another](https://discuss.elastic.co/t/how-to-reindex-data-from-cluster-to-another/255634)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 8:07am UTC](https://discuss.elastic.co/t/how-to-reindex-data-from-cluster-to-another/255634 "2020-11-17T08:07:12Z")
Hi Team, Greetings..! Hope you are safe and good in health. I want to reindex data of index 'A', from cluster 'X' to cluster 'Y'. I have whitelisted the 'X' cluster host in cluster 'Y' using reindex.remote.whitelist: i… --- ## [Terms aggregation doesn't return all hits](https://discuss.elastic.co/t/terms-aggregation-doesnt-return-all-hits/255353)
**Author:** [@Zining](https://discuss.elastic.co/u/Zining)\ **Replies:** 9\ **Last updated:** [November 17, 2020, 8:04am UTC](https://discuss.elastic.co/t/terms-aggregation-doesnt-return-all-hits/255353 "2020-11-17T08:04:39Z")
Hi, We are using Elasticsearch 5.6 to store track events. Recently we run Terms aggregation on one index to find out duplicated events which have same event type, device id, and event time. Then we remove the duplicated… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1148) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1150)