# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1254 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1255 --- ## [Output when have multiple logstash servers in cluster](https://discuss.elastic.co/t/output-when-have-multiple-logstash-servers-in-cluster/247251)
**Author:** [@nnovaes](https://discuss.elastic.co/u/nnovaes)\ **Replies:** 0\ **Last updated:** [September 2, 2020, 2:47pm UTC](https://discuss.elastic.co/t/output-when-have-multiple-logstash-servers-in-cluster/247251 "2020-09-02T14:47:18Z")
If i have, let's say, 3 servers in a logstash cluster, can i coordinate them somehow so when i configure syslog output only one of those servers will actually send the syslog message? otherwise all 3 would send and the r… --- ## [When adding a script\_field to a result, it results in not being able to compile](https://discuss.elastic.co/t/when-adding-a-script-field-to-a-result-it-results-in-not-being-able-to-compile/247119)
**Author:** [@meadows.120](https://discuss.elastic.co/u/meadows.120)\ **Replies:** 2\ **Last updated:** [September 2, 2020, 2:23pm UTC](https://discuss.elastic.co/t/when-adding-a-script-field-to-a-result-it-results-in-not-being-able-to-compile/247119 "2020-09-02T14:23:43Z")
ES Version: 7.8 I am trying to use the following to check if a value is present in an array of strings, but I get a runtime error every time: { "script": { "source": "doc\['mediaDetails.tags'\].values.contains('Hig… --- ## [Need advice on shards for my index](https://discuss.elastic.co/t/need-advice-on-shards-for-my-index/247143)
**Author:** [@jcannell](https://discuss.elastic.co/u/jcannell)\ **Replies:** 14\ **Last updated:** [September 2, 2020, 1:29pm UTC](https://discuss.elastic.co/t/need-advice-on-shards-for-my-index/247143 "2020-09-02T13:29:27Z")
Hello all, Setting up an elasticsearch cluster for the first time here. I need some advice on creating my index. This index will store information about emails. The plan is to retain about 10 years worth of message dat… --- ## [Can we send logs to webhook URL?](https://discuss.elastic.co/t/can-we-send-logs-to-webhook-url/247100)
**Author:** [@Aishvarya\_Suryawansh](https://discuss.elastic.co/u/Aishvarya_Suryawansh)\ **Replies:** 2\ **Last updated:** [September 2, 2020, 12:59pm UTC](https://discuss.elastic.co/t/can-we-send-logs-to-webhook-url/247100 "2020-09-02T12:59:06Z")
Can we have webhook URL as destination URL in outputs need to send logstash data to Victorops eg: something like this output { webhook { hosts =\> \[""\] } } --- ## [Feedback: Cases](https://discuss.elastic.co/t/feedback-cases/247101)
**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\ **Replies:** 1\ **Last updated:** [September 2, 2020, 12:59pm UTC](https://discuss.elastic.co/t/feedback-cases/247101 "2020-09-02T12:59:59Z")
Hello, its me again, took a look at Cases, saw they are still in Beta, thought I'd share some feedback. No option to lock a case At the moment it is not possible to lock a case from other users. This can be helpful if… --- ## [New way in which java\_execution breaks the aggregate filter](https://discuss.elastic.co/t/new-way-in-which-java-execution-breaks-the-aggregate-filter/239377)
**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\ **Replies:** 4\ **Last updated:** [September 2, 2020, 12:47pm UTC](https://discuss.elastic.co/t/new-way-in-which-java-execution-breaks-the-aggregate-filter/239377 "2020-09-02T12:47:45Z")
When java\_execution is enabled, the periodic\_flush does not occur, so you cannot use a timeout to trigger flushing an event from an aggregate filter. I do not think the final flush occurs either. This is in 7.8.0, and I … --- ## [InitiatingHeapOccupancyPercent tuning parameter value modification ( 75 to 30 )from 7.0.1 version to 7.8.0 in G1GC for elasticsearch](https://discuss.elastic.co/t/initiatingheapoccupancypercent-tuning-parameter-value-modification-75-to-30-from-7-0-1-version-to-7-8-0-in-g1gc-for-elasticsearch/245760)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 2\ **Last updated:** [September 2, 2020, 12:22pm UTC](https://discuss.elastic.co/t/initiatingheapoccupancypercent-tuning-parameter-value-modification-75-to-30-from-7-0-1-version-to-7-8-0-in-g1gc-for-elasticsearch/245760 "2020-09-02T12:22:32Z")
"InitiatingHeapOccupancyPercent" parameter is set to 75 for elasticsearch 7.0.1, which is now updated to 30. Please state the reason why was it changed and what effect did it have. 7.0.1 version's jvm.options snippet: #… --- ## [How can I get old archive of : analysis-icu-linux-x86\_64-6.8.12.zip](https://discuss.elastic.co/t/how-can-i-get-old-archive-of-analysis-icu-linux-x86-64-6-8-12-zip/247216)
**Author:** [@narutobaka1](https://discuss.elastic.co/u/narutobaka1)\ **Replies:** 1\ **Last updated:** [September 2, 2020, 11:37am UTC](https://discuss.elastic.co/t/how-can-i-get-old-archive-of-analysis-icu-linux-x86-64-6-8-12-zip/247216 "2020-09-02T11:37:04Z")
Hi I'm installing an old version of Elasticsearch : Blockquote \[root@pod2 elasticsearch\]# /usr/share/elasticsearch/bin/elasticsearch --version Version: 6.8.12, Build: default/rpm/7a15d2a/2020-08-12T07:27:20.804867Z, … --- ## [Deleting Snapshots very slow after update](https://discuss.elastic.co/t/deleting-snapshots-very-slow-after-update/247025)
**Author:** [@Andrew\_DS](https://discuss.elastic.co/u/Andrew_DS)\ **Replies:** 6\ **Last updated:** [September 2, 2020, 11:13am UTC](https://discuss.elastic.co/t/deleting-snapshots-very-slow-after-update/247025 "2020-09-02T11:13:27Z")
Has anyone else had any issues deleting snapshots after upgrading? I upgraded from 7.5.1 -\> 7.9.0, and now REST calls to DELETE /snapshot/repo-name/snapshot-name take exactly 3 minutes to return. If I call GET /snapsh… --- ## [Lost data on docker](https://discuss.elastic.co/t/lost-data-on-docker/246924)
**Author:** [@alireza\_Rahmani\_khal](https://discuss.elastic.co/u/alireza_Rahmani_khal)\ **Replies:** 7\ **Last updated:** [September 2, 2020, 10:07am UTC](https://discuss.elastic.co/t/lost-data-on-docker/246924 "2020-09-02T10:07:47Z")
hello this my docker-compose : search: image: docker.elastic.co/elasticsearch/elasticsearch:7.8.1 environment: - container\_name:es01 - bootstrap.memory\_lock:true - "ES\_JAVA\_OPTS=-Xms2g -Xmx2… --- ## [Error Messages handling In Kibana UI](https://discuss.elastic.co/t/error-messages-handling-in-kibana-ui/247187)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 2\ **Last updated:** [September 2, 2020, 10:05am UTC](https://discuss.elastic.co/t/error-messages-handling-in-kibana-ui/247187 "2020-09-02T10:05:21Z")
Hi, When unauthenticated user logs in to view the indices, Kibana prompt the Message saying No Permission. After that the correct index selected, still the error message visible. We have to click explicitly 'ok' to can… --- ## [Would like to create a visulization that show ERROR, WARN and INFO](https://discuss.elastic.co/t/would-like-to-create-a-visulization-that-show-error-warn-and-info/247189)
**Author:** [@111363](https://discuss.elastic.co/u/111363)\ **Replies:** 5\ **Last updated:** [September 2, 2020, 10:04am UTC](https://discuss.elastic.co/t/would-like-to-create-a-visulization-that-show-error-warn-and-info/247189 "2020-09-02T10:04:28Z")
Hi, I am trying to create visualization that show per specific log the count of ERROR, WARN & INFO messages. I have tried to create the json input for getting all to message filed that contains \[ERROR\] but it did not … --- ## [Dashboards through logstash](https://discuss.elastic.co/t/dashboards-through-logstash/247207)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 0\ **Last updated:** [September 2, 2020, 9:55am UTC](https://discuss.elastic.co/t/dashboards-through-logstash/247207 "2020-09-02T09:55:43Z")
I'm directing my beats (auditbeat & filebeat) output directly to logstash. In both beats' configs I have dashboards enabled. The problem is that the dashboards data doesn't seem to end up in kibana if I output to logsta… --- ## [Reindexing elastic search does not return all documents](https://discuss.elastic.co/t/reindexing-elastic-search-does-not-return-all-documents/246687)
**Author:** [@byc-art](https://discuss.elastic.co/u/byc-art)\ **Replies:** 1\ **Last updated:** [September 2, 2020, 9:44am UTC](https://discuss.elastic.co/t/reindexing-elastic-search-does-not-return-all-documents/246687 "2020-09-02T09:44:01Z")
0 I have about 1.5 million documents in my elastic search. I'm hoping to reindex them so that each index filters documents containing certain keywords, and one ( null index ) that do not contain any of the keywords I sp… --- ## [Dynamic Grouping](https://discuss.elastic.co/t/dynamic-grouping/247074)
**Author:** [@Patrick\_Grasseels](https://discuss.elastic.co/u/Patrick_Grasseels)\ **Replies:** 4\ **Last updated:** [September 2, 2020, 9:35am UTC](https://discuss.elastic.co/t/dynamic-grouping/247074 "2020-09-02T09:35:19Z")
Hi ! We have a big index, with lot of informations, Informations sample : 2020-09-01T04:25:18.357Z|LogLevel=Info |MyBusiness.MyLogger|CorrelationId="0000000000000000000"|10.10.10.10| POST test/order 1001|InputParamet… --- ## [Bar Chart axis label not in center of bar](https://discuss.elastic.co/t/bar-chart-axis-label-not-in-center-of-bar/247039)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 2\ **Last updated:** [September 2, 2020, 9:30am UTC](https://discuss.elastic.co/t/bar-chart-axis-label-not-in-center-of-bar/247039 "2020-09-02T09:30:10Z")
I had issue, the label on x axis not in center of bar, its cause the first bar ( Jan) didnt have label, can we make it to center of bar? thanks before --- ## [Logstash dateparsefailure](https://discuss.elastic.co/t/logstash-dateparsefailure/247191)
**Author:** [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\ **Replies:** 1\ **Last updated:** [September 2, 2020, 9:24am UTC](https://discuss.elastic.co/t/logstash-dateparsefailure/247191 "2020-09-02T09:24:17Z")
Hi. My log timestamp has a format Sep 2, 2020 @ 11:14:00.000 When I'm trying to parse it in logstash config I'm getting an error \_dateparsefailure date { target =\> "@timestamp" match =\> \[ "timestamp",… --- ## [How can I disable x-pack on ECK](https://discuss.elastic.co/t/how-can-i-disable-x-pack-on-eck/247186)
**Author:** [@packy](https://discuss.elastic.co/u/packy)\ **Replies:** 4\ **Last updated:** [September 2, 2020, 9:06am UTC](https://discuss.elastic.co/t/how-can-i-disable-x-pack-on-eck/247186 "2020-09-02T09:06:33Z")
Hi , I am using ECK on mips64el platform. However the x-pack does not support mips64el. How can I disable x-pack module ? --- ## [How to snyc mongo data into ES](https://discuss.elastic.co/t/how-to-snyc-mongo-data-into-es/247199)
**Author:** [@Milan\_Suthar](https://discuss.elastic.co/u/Milan_Suthar)\ **Replies:** 0\ **Last updated:** [September 2, 2020, 8:52am UTC](https://discuss.elastic.co/t/how-to-snyc-mongo-data-into-es/247199 "2020-09-02T08:52:59Z")
as im new to ES i want to replicate my mongodb collections to ES how to snyc mongo(v3.4 ) data into ES ( version can be anyone lastest ), version is not an issue, --- ## [Editor for FieldFormat-plugin in new platform](https://discuss.elastic.co/t/editor-for-fieldformat-plugin-in-new-platform/247124)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 1\ **Last updated:** [September 2, 2020, 8:39am UTC](https://discuss.elastic.co/t/editor-for-fieldformat-plugin-in-new-platform/247124 "2020-09-02T08:39:15Z")
I have created a simple plugin based on the truncated string plugin, now I am trying to add parameters for the plugin. I would prefer to do that using an editor, much like the base plugin for truncated strings has, but I… --- ## [Elasticsearch fuzzy search not working properly with simpleQueryStringQuery](https://discuss.elastic.co/t/elasticsearch-fuzzy-search-not-working-properly-with-simplequerystringquery/247182)
**Author:** [@vaibhavind](https://discuss.elastic.co/u/vaibhavind)\ **Replies:** 1\ **Last updated:** [September 2, 2020, 8:14am UTC](https://discuss.elastic.co/t/elasticsearch-fuzzy-search-not-working-properly-with-simplequerystringquery/247182 "2020-09-02T08:14:58Z")
I am using ES 7.8 with dependency 7.1.1 in pom.xml with JDK 1.8. I am trying to perform the search on the whole document rather than on specific fields. So I am not using QueryBuilders.matchQuery or QueryBuilders.multiMa… --- ## [Is this a bug?](https://discuss.elastic.co/t/is-this-a-bug/247159)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [September 2, 2020, 7:26am UTC](https://discuss.elastic.co/t/is-this-a-bug/247159 "2020-09-02T07:26:54Z")
I kept clicking, but the data didn't change and the number exceeded the actual number kibana：8.0 --- ## [Settings Log traceId](https://discuss.elastic.co/t/settings-log-traceid/246665)
**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\ **Replies:** 4\ **Last updated:** [September 2, 2020, 6:50am UTC](https://discuss.elastic.co/t/settings-log-traceid/246665 "2020-09-02T06:50:21Z")
Good morning, I don't know if it is a bug but I would like confirm it. I have a configuration of Logs where I added one pattern more. With this change I can see all the logs, but if i want see the trace of a transact… --- ## [Weird Date Histogram two weeks error](https://discuss.elastic.co/t/weird-date-histogram-two-weeks-error/247093)
**Author:** [@GilKor](https://discuss.elastic.co/u/GilKor)\ **Replies:** 4\ **Last updated:** [September 2, 2020, 6:33am UTC](https://discuss.elastic.co/t/weird-date-histogram-two-weeks-error/247093 "2020-09-02T06:33:51Z")
Hi, I have a weird thing where when i pick date histogram and i want to write 2w it doenst allow my, also i cant pick 14d. 13d and 15d - no problem, but 14d not working. when I wriet 20160m which is two weeks again I ca… --- ## [Fliebeat netflow vs elastiflow](https://discuss.elastic.co/t/fliebeat-netflow-vs-elastiflow/247114)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 1\ **Last updated:** [September 2, 2020, 4:22am UTC](https://discuss.elastic.co/t/fliebeat-netflow-vs-elastiflow/247114 "2020-09-02T04:22:52Z")
Hello , here im, trying to find a nice solution for netflow analisis. After reading elastiflow at https://github.com/robcowart/elastiflow And testing my recently working filebeat netflow module can not find more than … --- ## [Enriching MMDB files with your own data using Go](https://discuss.elastic.co/t/enriching-mmdb-files-with-your-own-data-using-go/247158)
**Author:** [@nchelluri](https://discuss.elastic.co/u/nchelluri)\ **Replies:** 1\ **Last updated:** [September 2, 2020, 2:49am UTC](https://discuss.elastic.co/t/enriching-mmdb-files-with-your-own-data-using-go/247158 "2020-09-02T02:49:14Z")
I work for MaxMind and it was pointed out to me that a popular blog post of ours around here was this post from 2015 showing how to build an MMDB using Perl. Well, it's 2020 now and we've got a post showing how to enric… --- ## [I'm still able to define a document type in 7.9. Is this a bug?](https://discuss.elastic.co/t/im-still-able-to-define-a-document-type-in-7-9-is-this-a-bug/247125)
**Author:** [@Vitaly\_il](https://discuss.elastic.co/u/Vitaly_il)\ **Replies:** 1\ **Last updated:** [September 2, 2020, 1:48am UTC](https://discuss.elastic.co/t/im-still-able-to-define-a-document-type-in-7-9-is-this-a-bug/247125 "2020-09-02T01:48:27Z")
By adding a new document this way curl --location --request PUT 'http://localhost:9200/example1/product/1' \\ --header 'Content-Type: application/json' \\ --data-raw '{ "title": "example title", "a… --- ## [Kibana inline script](https://discuss.elastic.co/t/kibana-inline-script/245331)
**Author:** [@kinlee](https://discuss.elastic.co/u/kinlee)\ **Replies:** 6\ **Last updated:** [September 2, 2020, 1:00am UTC](https://discuss.elastic.co/t/kibana-inline-script/245331 "2020-09-02T01:00:09Z")
As per docu, it says "If you use Kibana, set script.allowed\_types to both or inline . Some Kibana features rely on inline scripts and do not function as expected if Elasticsearch does not allow inline scripts." wha… --- ## [Ingesting .doc .txt .csv .sql and some others](https://discuss.elastic.co/t/ingesting-doc-txt-csv-sql-and-some-others/246861)
**Author:** [@OpSecMonkey](https://discuss.elastic.co/u/OpSecMonkey)\ **Replies:** 7\ **Last updated:** [September 1, 2020, 8:48pm UTC](https://discuss.elastic.co/t/ingesting-doc-txt-csv-sql-and-some-others/246861 "2020-09-01T20:48:07Z")
Hi everyone, I have a question. What would be the fastest way to ingest data? I have a folder that contains a variety of file formats including .doc, .txt, .csv and .sql. I have roughly 30 gigs of files like this that I… --- ## [How to ingest old logs into slow storage and newer logs into fast storage](https://discuss.elastic.co/t/how-to-ingest-old-logs-into-slow-storage-and-newer-logs-into-fast-storage/247009)
**Author:** [@ManjaroBlack](https://discuss.elastic.co/u/ManjaroBlack)\ **Replies:** 4\ **Last updated:** [September 1, 2020, 8:23pm UTC](https://discuss.elastic.co/t/how-to-ingest-old-logs-into-slow-storage-and-newer-logs-into-fast-storage/247009 "2020-09-01T20:23:16Z")
I am experimenting with the Elastic Stack on my laptop. I need to ingest a bunch of logs dating back a few years up to current time. I am using logstash to process the logs and send them to elasticsearch. I have limited … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1253) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1255)