# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1226 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1227 --- ## [Elasticsearch input on logstash duplicating documents](https://discuss.elastic.co/t/elasticsearch-input-on-logstash-duplicating-documents/249544)
**Author:** [@Matthew\_Field](https://discuss.elastic.co/u/Matthew_Field)\ **Replies:** 0\ **Last updated:** [September 22, 2020, 3:10pm UTC](https://discuss.elastic.co/t/elasticsearch-input-on-logstash-duplicating-documents/249544 "2020-09-22T15:10:25Z")
According to the docs, if i don't set a schedule, the logstash input plugin should run once and only once. However i find logstash keeps adding new duplicate/triplicate etc documents to my output for the longer i run. … --- ## [UDP Input - Get host - how?](https://discuss.elastic.co/t/udp-input-get-host-how/249458)
**Author:** [@diecode](https://discuss.elastic.co/u/diecode)\ **Replies:** 1\ **Last updated:** [September 22, 2020, 2:50pm UTC](https://discuss.elastic.co/t/udp-input-get-host-how/249458 "2020-09-22T14:50:11Z")
Hey, How can I get the sender IP in UDP Input? I would like create an if expression for set type. I tried this, but it is not working: input { udp { port =\> 1514 if \[host\] == "1.1.1.1" {… --- ## [Splitting the data in logstash](https://discuss.elastic.co/t/splitting-the-data-in-logstash/249404)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 3\ **Last updated:** [September 22, 2020, 2:46pm UTC](https://discuss.elastic.co/t/splitting-the-data-in-logstash/249404 "2020-09-22T14:46:03Z")
I have a field 'brief' in the below format. "brief": \[ {rx-usage: 0.0, tx-stats: {tx-errors: 0, tx-bytes: 3597278194, tx-bps: 1808, tx-pps: 3, tx-packets: 8620093}, name: vni-0/0, host-inf: eth1, if-oper-status: up, … --- ## [Substracting event fields in partitioned data](https://discuss.elastic.co/t/substracting-event-fields-in-partitioned-data/249119)
**Author:** [@JorritvdLaan](https://discuss.elastic.co/u/JorritvdLaan)\ **Replies:** 3\ **Last updated:** [September 22, 2020, 2:40pm UTC](https://discuss.elastic.co/t/substracting-event-fields-in-partitioned-data/249119 "2020-09-22T14:40:32Z")
Hello, I am working with a set of devices that pushes data to my database every 5 minutes. The data contains a field with the device's id and a field with a float value. Now, for every device I would like to substract … --- ## [UnsupportedOperationException causes snapshots to fail](https://discuss.elastic.co/t/unsupportedoperationexception-causes-snapshots-to-fail/249181)
**Author:** [@OliviaTrewin](https://discuss.elastic.co/u/OliviaTrewin)\ **Replies:** 3\ **Last updated:** [September 22, 2020, 2:25pm UTC](https://discuss.elastic.co/t/unsupportedoperationexception-causes-snapshots-to-fail/249181 "2020-09-22T14:25:58Z")
We have an Elasticsearch 7.9.1 cluster that suddenly started to fail snapshotting with a strange exception. Here's the details for one of the machines in the cluster: $ uname -a Linux \[REDACTED\] 4.4.0-1095-aws #106-Ubun… --- ## [Watchguard firewall on ingestion manager](https://discuss.elastic.co/t/watchguard-firewall-on-ingestion-manager/249482)
**Author:** [@JLT](https://discuss.elastic.co/u/JLT)\ **Replies:** 2\ **Last updated:** [September 22, 2020, 1:49pm UTC](https://discuss.elastic.co/t/watchguard-firewall-on-ingestion-manager/249482 "2020-09-22T13:49:05Z")
The ingestion manager was long due and i am quite pleased with what i see. For this client there is a request to on-board watchguard devices, can i contribute to an effort of creating an ingestion profile for watchguard… --- ## [ElasticSearch. Select by date range in array of dates and sort by matching dates](https://discuss.elastic.co/t/elasticsearch-select-by-date-range-in-array-of-dates-and-sort-by-matching-dates/249509)
**Author:** [@AHeavyObject](https://discuss.elastic.co/u/AHeavyObject)\ **Replies:** 1\ **Last updated:** [September 22, 2020, 1:38pm UTC](https://discuss.elastic.co/t/elasticsearch-select-by-date-range-in-array-of-dates-and-sort-by-matching-dates/249509 "2020-09-22T13:38:36Z")
Every document has several dates. I want to select documents withing a date range (any of dates fits the range - the document matches). This part works. And I want to sort the selected document by date, but sorting inc… --- ## [How to match documents that don't have a specific nested object](https://discuss.elastic.co/t/how-to-match-documents-that-dont-have-a-specific-nested-object/249514)
**Author:** [@thomashiron](https://discuss.elastic.co/u/thomashiron)\ **Replies:** 1\ **Last updated:** [September 22, 2020, 1:34pm UTC](https://discuss.elastic.co/t/how-to-match-documents-that-dont-have-a-specific-nested-object/249514 "2020-09-22T13:34:20Z")
Hi! I'd like to find documents with nested objects that don't match a specific query. For example, I want to match documents that don't have an Alice user. If I follow the documentation, and execute the query below, I… --- ## [Creating multiple tabs in kibana](https://discuss.elastic.co/t/creating-multiple-tabs-in-kibana/249310)
**Author:** [@antony\_kavin](https://discuss.elastic.co/u/antony_kavin)\ **Replies:** 3\ **Last updated:** [September 22, 2020, 1:23pm UTC](https://discuss.elastic.co/t/creating-multiple-tabs-in-kibana/249310 "2020-09-22T13:23:58Z")
Hi team, In the dashboard, I want to create a Navigation pane and create tab names like demand,supply,etc.And when the user clicks on any tab name, it should navigate to the correspoding dashboard(or view). Essentially… --- ## [Logstash how to solve the problem about jackson-databind CVE-2020-9548](https://discuss.elastic.co/t/logstash-how-to-solve-the-problem-about-jackson-databind-cve-2020-9548/249526)
**Author:** [@geraintj](https://discuss.elastic.co/u/geraintj)\ **Replies:** 0\ **Last updated:** [September 22, 2020, 1:13pm UTC](https://discuss.elastic.co/t/logstash-how-to-solve-the-problem-about-jackson-databind-cve-2020-9548/249526 "2020-09-22T13:13:21Z")
Hi. We're using Logstash 6.8.6, which has a dependency on jackson-databind 2.9.9.3. Our scans are flagging it as vulnerable to CVE-2020-9548: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction b… --- ## [Export data from elasticsearch index to a file](https://discuss.elastic.co/t/export-data-from-elasticsearch-index-to-a-file/249525)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 0\ **Last updated:** [September 22, 2020, 1:10pm UTC](https://discuss.elastic.co/t/export-data-from-elasticsearch-index-to-a-file/249525 "2020-09-22T13:10:59Z")
Hello, I'd like to get all data that I have in index to a file (text or json) or use logstash to fetch the data and transport the data directly to another database (InfluxDB in particular) by using elasticsearch input a… --- ## [Why does the replacement @timestamp fail？](https://discuss.elastic.co/t/why-does-the-replacement-timestamp-fail/249210)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 5\ **Last updated:** [September 22, 2020, 1:09pm UTC](https://discuss.elastic.co/t/why-does-the-replacement-timestamp-fail/249210 "2020-09-22T13:09:15Z")
The index pattern was created without any timestamp. filter { date { match =\> \["\[CreationTime\]","yyyy-MM-dd HH:mm:ss.SSS"\] timezone =\> "Asia/Shanghai" target =\> "@timestamp" } } mutate { … --- ## [Is there any way not to use Elasticsearch's Clustering system? (in docker)](https://discuss.elastic.co/t/is-there-any-way-not-to-use-elasticsearchs-clustering-system-in-docker/249505)
**Author:** [@mcarthcat](https://discuss.elastic.co/u/mcarthcat)\ **Replies:** 2\ **Last updated:** [September 22, 2020, 12:40pm UTC](https://discuss.elastic.co/t/is-there-any-way-not-to-use-elasticsearchs-clustering-system-in-docker/249505 "2020-09-22T12:40:19Z")
first.. I'm not good at english. execuse me.. Hello. I don't want to manage Cluster(nods or shards). Please tell me how to set Docker-compose? (or any way in Docker) Thanks... --- ## [Querying and sorting using painless script and nested fields](https://discuss.elastic.co/t/querying-and-sorting-using-painless-script-and-nested-fields/249408)
**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\ **Replies:** 2\ **Last updated:** [September 22, 2020, 12:26pm UTC](https://discuss.elastic.co/t/querying-and-sorting-using-painless-script-and-nested-fields/249408 "2020-09-22T12:26:10Z")
Hi, I am querying an index in my ES cluster 7.9.1: { "query": { "multi\_match": { "query": "Ciudad Boli", "fields": \[ "name.\*.single" \], "type": "phrase\_prefix" … --- ## [Handling TB's of data in Elasticsearch](https://discuss.elastic.co/t/handling-tbs-of-data-in-elasticsearch/249455)
**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\ **Replies:** 3\ **Last updated:** [September 22, 2020, 12:19pm UTC](https://discuss.elastic.co/t/handling-tbs-of-data-in-elasticsearch/249455 "2020-09-22T12:19:57Z")
Hi all, In my case, I need to handle 3TB of data in elaticsearch, We have a job to rotate the index daily once. Each day a new index will be created, which is of size 100 GB. For 30 days we have 30 indices( 30 \* 100GB =… --- ## [Coordinator node failed to join the cluster](https://discuss.elastic.co/t/coordinator-node-failed-to-join-the-cluster/249517)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 0\ **Last updated:** [September 22, 2020, 12:14pm UTC](https://discuss.elastic.co/t/coordinator-node-failed-to-join-the-cluster/249517 "2020-09-22T12:14:27Z")
Hello, I am trying to add a coordinator node to my cluster, but I am facing this error when I run it : \[2020-09-22T14:03:00,808\]\[INFO \]\[o.e.c.c.JoinHelper \] \[coordinator-node\] failed to join {VSELK-MASTER-02}{7ZS… --- ## [Which Spring Data design when the total\_fields limit is reached?](https://discuss.elastic.co/t/which-spring-data-design-when-the-total-fields-limit-is-reached/248315)
**Author:** [@juherr](https://discuss.elastic.co/u/juherr)\ **Replies:** 1\ **Last updated:** [September 22, 2020, 12:09pm UTC](https://discuss.elastic.co/t/which-spring-data-design-when-the-total-fields-limit-is-reached/248315 "2020-09-22T12:09:58Z")
Hi, We are using Elasticsearch through Spring Data and we reached the default "index.mapping.total\_fields.limit". We are indexing 5 different types of documents (via Java types, not index types). Each document has many… --- ## [Elasticsearch eat 100% of cpu](https://discuss.elastic.co/t/elasticsearch-eat-100-of-cpu/249076)
**Author:** [@vodka\_pivo](https://discuss.elastic.co/u/vodka_pivo)\ **Replies:** 5\ **Last updated:** [September 22, 2020, 12:02pm UTC](https://discuss.elastic.co/t/elasticsearch-eat-100-of-cpu/249076 "2020-09-22T12:02:12Z")
I have 3 node Elasticsearch cluster (7 verion) on this HW vCPU: 8 RAM 16 ( 8GB HEAP) disk SSD 300gb OS CentOS 7 so totally in my cluster i have 24 vCPU, 48 RAM, and 1,2 TB i have 70 indices (all of indices has 3 primar… --- ## [Deoptimised the styling of pitch\_presentation.js as it exceeds the max of 500KB](https://discuss.elastic.co/t/deoptimised-the-styling-of-pitch-presentation-js-as-it-exceeds-the-max-of-500kb/249473)
**Author:** [@aksadvance](https://discuss.elastic.co/u/aksadvance)\ **Replies:** 1\ **Last updated:** [September 22, 2020, 11:14am UTC](https://discuss.elastic.co/t/deoptimised-the-styling-of-pitch-presentation-js-as-it-exceeds-the-max-of-500kb/249473 "2020-09-22T11:14:57Z")
Hi, I am getting below issue on starting kibana 7.9.1 on ubuntu(8GB RAM) machine and its stuck at this point. \[BABEL\] Note: The code generator has deoptimised the styling of /export/home1/Elk\_Setup/kibana-7.9.1-linux-x… --- ## [TSVB, Value is 0 when time filter set to "Today" and "Data time range mode" set to"Last Value"](https://discuss.elastic.co/t/tsvb-value-is-0-when-time-filter-set-to-today-and-data-time-range-mode-set-to-last-value/246719)
**Author:** [@mcarthcat](https://discuss.elastic.co/u/mcarthcat)\ **Replies:** 5\ **Last updated:** [September 22, 2020, 11:00am UTC](https://discuss.elastic.co/t/tsvb-value-is-0-when-time-filter-set-to-today-and-data-time-range-mode-set-to-last-value/246719 "2020-09-22T11:00:59Z")
first.. i\`m not good at english. Excuse me.. scenario kibana v7.8.0 metricbeat (cpu) is running Time Filter : Today visulize : \[ TSVB / Gauge \] Data Metric Aggregation : Average Field: system. memory.used.pct G… --- ## [Search Query Help](https://discuss.elastic.co/t/search-query-help/249469)
**Author:** [@tolar](https://discuss.elastic.co/u/tolar)\ **Replies:** 3\ **Last updated:** [September 22, 2020, 10:33am UTC](https://discuss.elastic.co/t/search-query-help/249469 "2020-09-22T10:33:54Z")
I inserted records with below commands: POST dnmindex1/doc/ { "matches": \[ { "XURI": "xcp:4.1:a:abcv12:abcp12:6.0:\*:\*:\*:\*:\*:\*:\*" }, { … --- ## [Kibana \> Lens Vis. \> Share](https://discuss.elastic.co/t/kibana-lens-vis-share/249456)
**Author:** [@Er.Sid](https://discuss.elastic.co/u/Er.Sid)\ **Replies:** 4\ **Last updated:** [September 22, 2020, 9:22am UTC](https://discuss.elastic.co/t/kibana-lens-vis-share/249456 "2020-09-22T09:22:55Z")
Hello All, I have created a Data Table in Kibana - Visualization - lens - Data Table I wish to export or Share this table to PDF or any other format. Normally ,,SHARE" button is available on every Visualisation, Ho… --- ## [ElasticSearch 7.4 taking 100% cpu usage](https://discuss.elastic.co/t/elasticsearch-7-4-taking-100-cpu-usage/249241)
**Author:** [@Pavan\_Kalyan\_Ladi](https://discuss.elastic.co/u/Pavan_Kalyan_Ladi)\ **Replies:** 4\ **Last updated:** [September 22, 2020, 8:39am UTC](https://discuss.elastic.co/t/elasticsearch-7-4-taking-100-cpu-usage/249241 "2020-09-22T08:39:07Z")
Recently we migrated from ES-5.1 to ES7.4 and the CPU usage too high in ES7.4 compared to ES5.1 With a given load the max. cpu usage of 5.1 is in between 0% to 10%. However the performance and max. cpu usage of 7.4 is … --- ## [Object mapping for \[Data\] tried to parse field \[Data\] as object, but found a concrete value](https://discuss.elastic.co/t/object-mapping-for-data-tried-to-parse-field-data-as-object-but-found-a-concrete-value/249476)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 0\ **Last updated:** [September 22, 2020, 8:29am UTC](https://discuss.elastic.co/t/object-mapping-for-data-tried-to-parse-field-data-as-object-but-found-a-concrete-value/249476 "2020-09-22T08:29:25Z")
elasticsearch - Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"mall\_log-2020.09", :routing=\>nil, :\_type=\>"\_doc"}, #LogStash::Event:0x52c34e1a\], :response=\>{"index"=\>{"\_in… --- ## [Can I predict how much memory do I need?](https://discuss.elastic.co/t/can-i-predict-how-much-memory-do-i-need/249431)
**Author:** [@monit\_pakubuwono](https://discuss.elastic.co/u/monit_pakubuwono)\ **Replies:** 1\ **Last updated:** [September 22, 2020, 7:56am UTC](https://discuss.elastic.co/t/can-i-predict-how-much-memory-do-i-need/249431 "2020-09-22T07:56:30Z")
Hi, I am sorry if my question is silly, I am actually a chemical engineer that want to use Elastic Search on my own mobile app. I want to make deployment using Elastic Cloud. there are storage and memory, I can predict… --- ## [Could not locate that index-pattern (id: filebeat-\*)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-filebeat/249447)
**Author:** [@Mobin](https://discuss.elastic.co/u/Mobin)\ **Replies:** 1\ **Last updated:** [September 22, 2020, 7:34am UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-filebeat/249447 "2020-09-22T07:34:56Z")
Dear Team, I am new to Elastic stack and recently I created a elastic stack setup using file beat. My intention is to monitor the Linux server logs, So I installed Elasticsearch, Logstash,filebeat, and Kibana on server … --- ## [Indicies turn yellow from specific date - only 1% of Data is shown in Kibana](https://discuss.elastic.co/t/indicies-turn-yellow-from-specific-date-only-1-of-data-is-shown-in-kibana/249364)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 3\ **Last updated:** [September 22, 2020, 7:21am UTC](https://discuss.elastic.co/t/indicies-turn-yellow-from-specific-date-only-1-of-data-is-shown-in-kibana/249364 "2020-09-22T07:21:31Z")
Hello Community first of all - some infos about the cluster i'm using: 3 Nodes - 1 Master - 2 Data Nodes (All of them running CentOS 7) Kibana Version 7.8 Elasticsearch Version 7.8 Logstash Version 7.8 Filebeat Vers… --- ## [Rollup Jobs extremly high CPU USage](https://discuss.elastic.co/t/rollup-jobs-extremly-high-cpu-usage/249359)
**Author:** [@michaelpietzsch](https://discuss.elastic.co/u/michaelpietzsch)\ **Replies:** 2\ **Last updated:** [September 22, 2020, 7:20am UTC](https://discuss.elastic.co/t/rollup-jobs-extremly-high-cpu-usage/249359 "2020-09-22T07:20:35Z")
Hi Guys and Gals, i've got a rollup job running on my cluster. Once its active CPU Spikes extremely. The cluster consists of 6 Dedicated data nodes. How can this happen? Regards Michael --- ## [Sending logs to elsatic-stack from another eks application cluster via filebeat](https://discuss.elastic.co/t/sending-logs-to-elsatic-stack-from-another-eks-application-cluster-via-filebeat/248520)
**Author:** [@Raman\_Sawhney](https://discuss.elastic.co/u/Raman_Sawhney)\ **Replies:** 2\ **Last updated:** [September 22, 2020, 7:03am UTC](https://discuss.elastic.co/t/sending-logs-to-elsatic-stack-from-another-eks-application-cluster-via-filebeat/248520 "2020-09-22T07:03:24Z")
Hello Team, just wanted to check on one thing may be it sound silly but i am asking. Here is the scenerio that we have one eks cluster where we have installed elastic-stack all the pods and everything. If i want to sen… --- ## [Records more than 10,000 with pagination](https://discuss.elastic.co/t/records-more-than-10-000-with-pagination/249398)
**Author:** [@Pankaj\_Jadhav](https://discuss.elastic.co/u/Pankaj_Jadhav)\ **Replies:** 4\ **Last updated:** [September 22, 2020, 6:58am UTC](https://discuss.elastic.co/t/records-more-than-10-000-with-pagination/249398 "2020-09-22T06:58:10Z")
Hi Team, Am having more than 10,000 + records under elastic. Now my requirement is i've to show records to user with pagination. Am able to show records upto 10,000 with back end logic like elastic query { "from" : … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1225) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1227)