# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1251 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1252 --- ## [Resolved - Logstash - CSV parse failure field thai language](https://discuss.elastic.co/t/resolved-logstash-csv-parse-failure-field-thai-language/247478)
**Author:** [@111207](https://discuss.elastic.co/u/111207)\ **Replies:** 0\ **Last updated:** [September 4, 2020, 4:25am UTC](https://discuss.elastic.co/t/resolved-logstash-csv-parse-failure-field-thai-language/247478 "2020-09-04T04:25:51Z")
This is my csv field example input 50001979,60004305,DHL Reseller Nakorn In,THLZ3EL29,01-08-20 8:37,01-08-20 19:07,ศรีสุดา เตียเจริญ,34/53 ม.4 แขวง/ลาดพร้าว,Lat Phrao,Bangkok,10230,897957585,นภวรรณ สวัสดิ์มงคลกุล,504/1 … --- ## [Es forcemerge question](https://discuss.elastic.co/t/es-forcemerge-question/247467)
**Author:** [@taidengpub](https://discuss.elastic.co/u/taidengpub)\ **Replies:** 4\ **Last updated:** [September 4, 2020, 2:29am UTC](https://discuss.elastic.co/t/es-forcemerge-question/247467 "2020-09-04T02:29:52Z")
i use ilm to run forcemerge with max\_num\_segments=5 and this index have 5shard a one replication,so it have 10 shards total "warm": { "min\_age": "25h", "actions": { … --- ## [Grok WinEvt log](https://discuss.elastic.co/t/grok-winevt-log/247466)
**Author:** [@Jose\_Campos](https://discuss.elastic.co/u/Jose_Campos)\ **Replies:** 0\ **Last updated:** [September 4, 2020, 1:33am UTC](https://discuss.elastic.co/t/grok-winevt-log/247466 "2020-09-04T01:33:10Z")
Hello I was trying to grok for this CSV line that I downloaded from my windows 10 logs, I see that it is separated by commas, but the last value comes lines like this, does anyone have any ideas? 8/26/2020,5:34:23 PM,S… --- ## [Disk space problem for ELK stack running in an azure VM](https://discuss.elastic.co/t/disk-space-problem-for-elk-stack-running-in-an-azure-vm/247330)
**Author:** [@Rowshan\_Sathi](https://discuss.elastic.co/u/Rowshan_Sathi)\ **Replies:** 1\ **Last updated:** [September 4, 2020, 12:50am UTC](https://discuss.elastic.co/t/disk-space-problem-for-elk-stack-running-in-an-azure-vm/247330 "2020-09-04T00:50:03Z")
Hi, I have installed ELK stack on Azure VM. The details of my system- Ubuntu 18.04 ELasticsearch- 7.8.1 I have configured curator script and runing it every morning and also I am clearing logs according to its size b… --- ## [\_cat/indices response explanation for replica shards](https://discuss.elastic.co/t/cat-indices-response-explanation-for-replica-shards/247447)
**Author:** [@sha1](https://discuss.elastic.co/u/sha1)\ **Replies:** 2\ **Last updated:** [September 4, 2020, 12:14am UTC](https://discuss.elastic.co/t/cat-indices-response-explanation-for-replica-shards/247447 "2020-09-04T00:14:00Z")
The \_cat/indices endpoint returns primary shard count and replica factor, e.g. health status index uuid pri rep docs.count docs.deleted store.size pri.store.size yellow open hioqq… --- ## [Entries Duplication](https://discuss.elastic.co/t/entries-duplication/247448)
**Author:** [@js7](https://discuss.elastic.co/u/js7)\ **Replies:** 3\ **Last updated:** [September 3, 2020, 11:18pm UTC](https://discuss.elastic.co/t/entries-duplication/247448 "2020-09-03T23:18:33Z")
Hi, when I have 2 pipelines active at the same time, the data from one is somehow duplicated/redirected to the other pipeline, when I'm not using pipeline-to-pipeline communication. The output host of both are the same… --- ## [EUIDataGrid fullscreen getting cut off in custom plugin](https://discuss.elastic.co/t/euidatagrid-fullscreen-getting-cut-off-in-custom-plugin/247401)
**Author:** [@npm\_install](https://discuss.elastic.co/u/npm_install)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 10:50pm UTC](https://discuss.elastic.co/t/euidatagrid-fullscreen-getting-cut-off-in-custom-plugin/247401 "2020-09-03T22:50:59Z")
Hi, so I am creating a custom plugin for Kibana on the new plugin platform (developing on the 7.6.2 version of Kibana), and I am utilizing the EuiDataGrid component, which has a fullscreen button. However, when I press t… --- ## [Adding new properties to kibana.yml](https://discuss.elastic.co/t/adding-new-properties-to-kibana-yml/247368)
**Author:** [@anilreddyd](https://discuss.elastic.co/u/anilreddyd)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 9:23pm UTC](https://discuss.elastic.co/t/adding-new-properties-to-kibana-yml/247368 "2020-09-03T21:23:27Z")
Hi, I want to add new properties to kibana.yml file. When I add new properties to the file, I get an error while running "yarn kbn bootstrap" saying those properties are not valid. I would like to know what all places … --- ## [Not able to use console.log() in plugin components in kibana 7.8 OSS version](https://discuss.elastic.co/t/not-able-to-use-console-log-in-plugin-components-in-kibana-7-8-oss-version/247331)
**Author:** [@Jayanth\_Mogadampalli](https://discuss.elastic.co/u/Jayanth_Mogadampalli)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 9:04pm UTC](https://discuss.elastic.co/t/not-able-to-use-console-log-in-plugin-components-in-kibana-7-8-oss-version/247331 "2020-09-03T21:04:23Z")
I am developing a plugin for authentication in Kibana 7.8 oss version In that plugin, showing error while using console.log() statement For resolving the error, I tried to declare console variable first and gave it Con… --- ## [How to hide plugin in sidebar menu plugin list in 7.8 kibana OSS version](https://discuss.elastic.co/t/how-to-hide-plugin-in-sidebar-menu-plugin-list-in-7-8-kibana-oss-version/247426)
**Author:** [@Jayanth\_Mogadampalli](https://discuss.elastic.co/u/Jayanth_Mogadampalli)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 8:57pm UTC](https://discuss.elastic.co/t/how-to-hide-plugin-in-sidebar-menu-plugin-list-in-7-8-kibana-oss-version/247426 "2020-09-03T20:57:35Z")
Need to hide plugin in sidebar but still plugin should be enabled I tried doing my\_plugin.enabled : false in kibana.yml file but it is disabling my plugin completely from working it in background So, Please tell how t… --- ## [Elasticsearch to get the content length](https://discuss.elastic.co/t/elasticsearch-to-get-the-content-length/247417)
**Author:** [@EvelynC](https://discuss.elastic.co/u/EvelynC)\ **Replies:** 0\ **Last updated:** [September 3, 2020, 3:27pm UTC](https://discuss.elastic.co/t/elasticsearch-to-get-the-content-length/247417 "2020-09-03T15:27:05Z")
Hi all, I was getting back the error saying "content length is too long for configured buffer limit (104857600)" in production environment. But when I try to reproduce the issue, it is not reproducible in lower environ… --- ## [Logstash process stops abruptly](https://discuss.elastic.co/t/logstash-process-stops-abruptly/245895)
**Author:** [@tarund](https://discuss.elastic.co/u/tarund)\ **Replies:** 4\ **Last updated:** [September 3, 2020, 7:37pm UTC](https://discuss.elastic.co/t/logstash-process-stops-abruptly/245895 "2020-09-03T19:37:09Z")
I am using Logstash version 7.7.1 to parse some log files located on the same server. Using file input filter, grok filter & Elasticsearch output The process stops abruptly after some time, with nothing in the logs, ev… --- ## [ECE 2.6.1 released](https://discuss.elastic.co/t/ece-2-6-1-released/247437)
**Author:** [@Olivier\_Bierlaire](https://discuss.elastic.co/u/Olivier_Bierlaire)\ **Replies:** 0\ **Last updated:** [September 3, 2020, 6:47pm UTC](https://discuss.elastic.co/t/ece-2-6-1-released/247437 "2020-09-03T18:47:37Z")
We are pleased to announce that ECE 2.6.1 has been released today. This is a bug fix release. Release notes is available : https://www.elastic.co/guide/en/cloud-enterprise/current/ece-release-notes-2.6.1.html --- ## [Optimization of Elasticsearch Based on different Parameters and Techniques](https://discuss.elastic.co/t/optimization-of-elasticsearch-based-on-different-parameters-and-techniques/247432)
**Author:** [@Yashasvi\_Raj\_Pant](https://discuss.elastic.co/u/Yashasvi_Raj_Pant)\ **Replies:** 0\ **Last updated:** [September 3, 2020, 6:21pm UTC](https://discuss.elastic.co/t/optimization-of-elasticsearch-based-on-different-parameters-and-techniques/247432 "2020-09-03T18:21:55Z")
I am planning to pursue my master thesis researching about different parameters and techniques that can affect the Elasticsearch performance. Can somebody guide me to the quality research materials/papers I can refer to… --- ## [Kibana - TypeError: Failed to fetch](https://discuss.elastic.co/t/kibana-typeerror-failed-to-fetch/246960)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 5\ **Last updated:** [September 3, 2020, 5:07pm UTC](https://discuss.elastic.co/t/kibana-typeerror-failed-to-fetch/246960 "2020-09-03T17:07:43Z")
Hi, After upgrading to kibana 7.9, I begun getting an error that I cannot find referenced anywhere. I was wondering if anyone has come across this? TypeError: Failed to fetch at Fetch.\_callee3$ (https://10.23.45.78… --- ## [Separate data stream per customer?](https://discuss.elastic.co/t/separate-data-stream-per-customer/247300)
**Author:** [@Adam\_Wilson](https://discuss.elastic.co/u/Adam_Wilson)\ **Replies:** 10\ **Last updated:** [September 3, 2020, 4:36pm UTC](https://discuss.elastic.co/t/separate-data-stream-per-customer/247300 "2020-09-03T16:36:08Z")
Hello! I'm evaluating whether to use Elasticsearch as an OLAP backend for our Reports+Dashboards feature We have timeseries data that's ingested for different customers The data between these customers is 100% independ… --- ## [Create arrays based on certain text in a field](https://discuss.elastic.co/t/create-arrays-based-on-certain-text-in-a-field/246811)
**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\ **Replies:** 11\ **Last updated:** [September 3, 2020, 4:29pm UTC](https://discuss.elastic.co/t/create-arrays-based-on-certain-text-in-a-field/246811 "2020-09-03T16:29:51Z")
I am parsing chat messages and I want to create three arrays for tag cloud purposes. One for normal chat words, one for user tags, and one for chat emotes. For example, take this chat message: WE LOVE YOU @CHANDLER, Y… --- ## [Will replica shards in single node cluster consume jvm heap memory](https://discuss.elastic.co/t/will-replica-shards-in-single-node-cluster-consume-jvm-heap-memory/246940)
**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\ **Replies:** 7\ **Last updated:** [September 3, 2020, 4:14pm UTC](https://discuss.elastic.co/t/will-replica-shards-in-single-node-cluster-consume-jvm-heap-memory/246940 "2020-09-03T16:14:31Z")
Hi, I am using single node with 8 GB JVM (half of total 16 GB). Total shards = 1951 I know ES will refuse to allocate both the primary shard and a replica shard on the same machine.but is this replica shards consuming… --- ## [Plugin startup fails in V7.9 but works in 7.3](https://discuss.elastic.co/t/plugin-startup-fails-in-v7-9-but-works-in-7-3/246800)
**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\ **Replies:** 6\ **Last updated:** [September 3, 2020, 4:10pm UTC](https://discuss.elastic.co/t/plugin-startup-fails-in-v7-9-but-works-in-7-3/246800 "2020-09-03T16:10:25Z")
My cbsa plugin fails on startup. It fails at xpackMainPlugin.registerFeature in init.js with the following message " FATAL Error: Feature cbsa specifies app entries which are not granted to any privileges: cbsa,kibana".… --- ## [How to handle rotated logs](https://discuss.elastic.co/t/how-to-handle-rotated-logs/247341)
**Author:** [@msk\_76](https://discuss.elastic.co/u/msk_76)\ **Replies:** 3\ **Last updated:** [September 3, 2020, 4:07pm UTC](https://discuss.elastic.co/t/how-to-handle-rotated-logs/247341 "2020-09-03T16:07:38Z")
I am analyzing logs using logstash that are getting updated realtime from an application. The application has an inbuilt log rotation process like this. My application always writes to fsl.stream and once this fsl.stream… --- ## [Clarification towards logstash batch\_size and memory usage](https://discuss.elastic.co/t/clarification-towards-logstash-batch-size-and-memory-usage/247073)
**Author:** [@vaishno.avi](https://discuss.elastic.co/u/vaishno.avi)\ **Replies:** 4\ **Last updated:** [September 3, 2020, 3:37pm UTC](https://discuss.elastic.co/t/clarification-towards-logstash-batch-size-and-memory-usage/247073 "2020-09-03T15:37:02Z")
Hello All, I have two concerns I have a pipeline.yml where I am explicitly setting batch size as 100, but when I start logstash it shows me 125, is this an expected behavior ? config - pipeline.id: filebeat path.c… --- ## [Explain Periodic\_flush in logsatsh common fields](https://discuss.elastic.co/t/explain-periodic-flush-in-logsatsh-common-fields/247328)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 3:35pm UTC](https://discuss.elastic.co/t/explain-periodic-flush-in-logsatsh-common-fields/247328 "2020-09-03T15:35:29Z")
Hi, Under Logstash common fields, I see a field names Periodic\_flush. Could you please explain whats is used for and also give an example with respect to translate plugin https://www.elastic.co/guide/en/logstash/curren… --- ## [Sort result by distance ranges](https://discuss.elastic.co/t/sort-result-by-distance-ranges/247286)
**Author:** [@r3vile](https://discuss.elastic.co/u/r3vile)\ **Replies:** 4\ **Last updated:** [September 3, 2020, 3:05pm UTC](https://discuss.elastic.co/t/sort-result-by-distance-ranges/247286 "2020-09-03T15:05:32Z")
I have a document with many restaurants including their location. Is it possible to get all of them in a 100km range and group them into 3 ranges. So I will first see all which are at max 10km away from my location, sor… --- ## [Cannot parse numeric values in a search template](https://discuss.elastic.co/t/cannot-parse-numeric-values-in-a-search-template/247088)
**Author:** [@mekanix](https://discuss.elastic.co/u/mekanix)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 2:59pm UTC](https://discuss.elastic.co/t/cannot-parse-numeric-values-in-a-search-template/247088 "2020-09-03T14:59:31Z")
Fx. if I take the example from Elasticsearch Reference \[7.9\] » REST APIs » Search APIs » Search Template and render it I get POST \_render/template { "source" : { "query": { "match" : { "{{my\_field}}" : "{{my\_value… --- ## [Rally for ECK](https://discuss.elastic.co/t/rally-for-eck/246912)
**Author:** [@Kailas](https://discuss.elastic.co/u/Kailas)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 2:58pm UTC](https://discuss.elastic.co/t/rally-for-eck/246912 "2020-09-03T14:58:43Z")
Hi, Can anyone please help me the Rally yaml files ? Need to run some benchmark on my existing ECK cluster. Also, please guide for any documentation of Rally on ECK. Thanks in advance. Kailas --- ## [Filebeat harvester not starting](https://discuss.elastic.co/t/filebeat-harvester-not-starting/244838)
**Author:** [@koos](https://discuss.elastic.co/u/koos)\ **Replies:** 6\ **Last updated:** [September 3, 2020, 2:50pm UTC](https://discuss.elastic.co/t/filebeat-harvester-not-starting/244838 "2020-09-03T14:50:52Z")
Hi, I'm running Filebeat 7.8.1 on ECK, however, it seems that the harvester is not starting. I'm not getting any logs in Elasticsearch. After some investigation, I found that the /usr/share/filebeat/data/registry/fileb… --- ## [Logstash WMI Input Plugin donot work](https://discuss.elastic.co/t/logstash-wmi-input-plugin-donot-work/247404)
**Author:** [@souravtyson](https://discuss.elastic.co/u/souravtyson)\ **Replies:** 0\ **Last updated:** [September 3, 2020, 2:26pm UTC](https://discuss.elastic.co/t/logstash-wmi-input-plugin-donot-work/247404 "2020-09-03T14:26:06Z")
I am new to logstash and i want to gather the performance metrics of the windows system. I have been trying to run the WMI input plugin of logstash in my local setup to gather data, but it is not getting executed .This i… --- ## [Rename fields using a dictionary](https://discuss.elastic.co/t/rename-fields-using-a-dictionary/246413)
**Author:** [@frank\_esg](https://discuss.elastic.co/u/frank_esg)\ **Replies:** 2\ **Last updated:** [September 3, 2020, 2:20pm UTC](https://discuss.elastic.co/t/rename-fields-using-a-dictionary/246413 "2020-09-03T14:20:05Z")
Hi Folks, is it possible in Logstash to rename fields (received as json) based on a dictionary File? Basically the same function like the translate filter does, but not for values but for field names. Background: At th… --- ## [Syslog source ip](https://discuss.elastic.co/t/syslog-source-ip/247363)
**Author:** [@mutt13y](https://discuss.elastic.co/u/mutt13y)\ **Replies:** 3\ **Last updated:** [September 3, 2020, 1:26pm UTC](https://discuss.elastic.co/t/syslog-source-ip/247363 "2020-09-03T13:26:40Z")
Hi, The syslog input plugin is creating a field based on the source IP of the syslog message. However for some hosts this is put into \[host\] and for other hosts it is going into \[host\]\[ip\] I cant figure out why this is… --- ## [Logstash - Simple Log Ingest](https://discuss.elastic.co/t/logstash-simple-log-ingest/247383)
**Author:** [@slash665](https://discuss.elastic.co/u/slash665)\ **Replies:** 1\ **Last updated:** [September 3, 2020, 1:22pm UTC](https://discuss.elastic.co/t/logstash-simple-log-ingest/247383 "2020-09-03T13:22:12Z")
Hello there, I'm a total newb to ELK, so at this point I am just trying to ingest a log file from a specific path using a logstash configuration file in conf.d . it's just not working, however... This is what my conf f… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1250) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1252)