# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1258 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1259 --- ## [Cannot mount elasticsearch.yml in ECK CRD](https://discuss.elastic.co/t/cannot-mount-elasticsearch-yml-in-eck-crd/246834)
**Author:** [@amanjain](https://discuss.elastic.co/u/amanjain)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 7:47am UTC](https://discuss.elastic.co/t/cannot-mount-elasticsearch-yml-in-eck-crd/246834 "2020-08-31T07:47:32Z")
I am trying to mount elasticsearch.yml from my kubernetes configmap as follows but the elastic-internal-init-filesystem init container is throwing error. Error Starting init script Linking /mnt/elastic-internal/xpack-f… --- ## [Crashback loop off in ECK when using PVC elasticsearch-data](https://discuss.elastic.co/t/crashback-loop-off-in-eck-when-using-pvc-elasticsearch-data/246879)
**Author:** [@amanjain](https://discuss.elastic.co/u/amanjain)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 7:46am UTC](https://discuss.elastic.co/t/crashback-loop-off-in-eck-when-using-pvc-elasticsearch-data/246879 "2020-08-31T07:46:58Z")
Hello I am trying to use PVC as given in documentation here. But it seems to throw the below error. Error 2020-08-30 12:32:59,896 main ERROR No Log4j 2 configuration file found. Using default configuration (logging on… --- ## [Does ElasticSearch support GRPC or will support in near future?](https://discuss.elastic.co/t/does-elasticsearch-support-grpc-or-will-support-in-near-future/246916)
**Author:** [@isuhendro](https://discuss.elastic.co/u/isuhendro)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 7:40am UTC](https://discuss.elastic.co/t/does-elasticsearch-support-grpc-or-will-support-in-near-future/246916 "2020-08-31T07:40:17Z")
https://medium.com/@EmperorRXF/evaluating-performance-of-rest-vs-grpc-1b8bdf0b22da#:~:text=gRPC%20is%20roughly%207%20times,of%20HTTP%2F2%20by%20gRPC. The article above mentioned: gRPC is roughly 7 times faster than REST… --- ## [Sqlite와 logstash를 연결하는 데 오류가 발생합니다](https://discuss.elastic.co/t/sqlite-logstash/244597)
**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 7:33am UTC](https://discuss.elastic.co/t/sqlite-logstash/244597 "2020-08-31T07:33:03Z")
지난 번 로그스태시와 장고 간 연결 관련 질문을 드렸던 사람입니다. 알고보니 현재 장고 웹서버를 구축했고 모델을 설정하여 sqlite DB에 데이터를 쌓아놓은 상태라 기존의 logstash tcp input이 적절하지 않은 것 같다는 판단을 했습니다. 따라서 sqlite와 logstash를 연결하려고 했고 아래와 같이 설정했는데요. input { sqlite { pat… --- ## [Django 데이터를 logstash로 elasticsearch에 뿌리고 싶습니다](https://discuss.elastic.co/t/django-logstash-elasticsearch/244107)
**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 7:30am UTC](https://discuss.elastic.co/t/django-logstash-elasticsearch/244107 "2020-08-31T07:30:33Z")
현재 장고 웹서버를 구축했고 로그스태시를 연결하여 엘라스틱서치에 뿌리는 작업을 하고 있습니다. 로그스태시 인풋은 tcp를 사용했는데요. 아래처럼 django 파일의 settings.py를 설정해줬고요. LOGGING = { 'version': 1, 'disable\_existing\_loggers': False, 'formatters': { 'simple':… --- ## [An error into installing template](https://discuss.elastic.co/t/an-error-into-installing-template/246899)
**Author:** [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 7:09am UTC](https://discuss.elastic.co/t/an-error-into-installing-template/246899 "2020-08-31T07:09:22Z")
Hi I am using elastic stacks 7.8.1 and trying to write data in elastic cluster from logstash. this is my simple test pipeline input{ stdin{} } output{ elasticsearch{ hosts =\> "l… --- ## [Logstash JDBC Plugin](https://discuss.elastic.co/t/logstash-jdbc-plugin/246910)
**Author:** [@Rahul12](https://discuss.elastic.co/u/Rahul12)\ **Replies:** 0\ **Last updated:** [August 31, 2020, 6:34am UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin/246910 "2020-08-31T06:34:41Z")
Hi, I am querying MS SQL database to fetch some monitoring parameter. I am using JDBC plugin and firing below query which giving me error. Resultset doesn't return any result. I doubt that we can't use Create table que… --- ## [Unable to delete the document in the elasticserach using logstash action](https://discuss.elastic.co/t/unable-to-delete-the-document-in-the-elasticserach-using-logstash-action/246744)
**Author:** [@Shashikala\_G](https://discuss.elastic.co/u/Shashikala_G)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 6:25am UTC](https://discuss.elastic.co/t/unable-to-delete-the-document-in-the-elasticserach-using-logstash-action/246744 "2020-08-31T06:25:11Z")
Hello there, I am using elasticsearch 7.6.2 version on a single node windows machine. i am trying to delete documents from elastic search using logstash. delete.csv: 272586 logstash configuration file: input{ stdin … --- ## [Не ищет слова меньше 4 символов](https://discuss.elastic.co/t/topic/246909)
**Author:** [@gvozdb](https://discuss.elastic.co/u/gvozdb)\ **Replies:** 0\ **Last updated:** [August 31, 2020, 6:14am UTC](https://discuss.elastic.co/t/topic/246909 "2020-08-31T06:14:23Z")
Привет! Почему-то Elasticsearch отказывается производить поиск по словам менее 4 символов. То есть, ищет от 4 символов включительно, 3 символа уже не ищет. Должен найти вот такой документ: \[pagetitle\] =\> Лувр в первый … --- ## [Kibana 필터에 표시되지 않는 항목](https://discuss.elastic.co/t/kibana/246690)
**Author:** [@skylover](https://discuss.elastic.co/u/skylover)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 6:12am UTC](https://discuss.elastic.co/t/kibana/246690 "2020-08-31T06:12:19Z")
Hospital 이라는 데이터가 있는데, 필터 자동완성에는 표시되지 않습니다. Visualizations - controls 뿐 아니라 Discover 쪽에서도 마찬가지로 표시되지 않습니다. 뭔가 관련 설정이 있는것인지 궁금합니다. --- ## [Job for elasticsearch.service failed because the control process exited with error code](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code/246853)
**Author:** [@hamzakarim](https://discuss.elastic.co/u/hamzakarim)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 5:03am UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code/246853 "2020-08-31T05:03:52Z")
I have newly installed the Elasticsearch-7.4.2-x86\_64.rpm with rmp from the link But when i start the service it gives the below error . sudo systemctl start elasticsearch.service Job for elasticsearch.service faile… --- ## [Use specific NIC for output](https://discuss.elastic.co/t/use-specific-nic-for-output/246906)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 4\ **Last updated:** [August 31, 2020, 4:58am UTC](https://discuss.elastic.co/t/use-specific-nic-for-output/246906 "2020-08-31T04:58:18Z")
Hi, I'm a complete Logstash newbie, so hopefully this isn't a difficult question to answer. I have 3 NICs on my Logstash servers. I will use one to receive inputs, one for management and one for outputs. I am unable … --- ## [How to index large text string data?](https://discuss.elastic.co/t/how-to-index-large-text-string-data/246848)
**Author:** [@sandeep\_rana](https://discuss.elastic.co/u/sandeep_rana)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 4:47am UTC](https://discuss.elastic.co/t/how-to-index-large-text-string-data/246848 "2020-08-31T04:47:58Z")
Why max\_bytes\_length\_exceeded\_exception while insert a doc with some large text field data.. ? --- ## [Blacklisting index pattern](https://discuss.elastic.co/t/blacklisting-index-pattern/246565)
**Author:** [@Kaustav\_Das](https://discuss.elastic.co/u/Kaustav_Das)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 4:44am UTC](https://discuss.elastic.co/t/blacklisting-index-pattern/246565 "2020-08-31T04:44:19Z")
We have few indices which starts with predetermined prefix. If we want other indices which are created by es, kibana, monitoring tools like (monitoring-kibana, ml-state etc) to go to specefic tenant nodes tagged with adm… --- ## [How to aggregate multiple Host from diffrent account in Elastic stack to support mutitenecey](https://discuss.elastic.co/t/how-to-aggregate-multiple-host-from-diffrent-account-in-elastic-stack-to-support-mutitenecey/246898)
**Author:** [@japarka2](https://discuss.elastic.co/u/japarka2)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 4:13am UTC](https://discuss.elastic.co/t/how-to-aggregate-multiple-host-from-diffrent-account-in-elastic-stack-to-support-mutitenecey/246898 "2020-08-31T04:13:35Z")
How to aggregate multiple Host from different account in Elastic stack to support mutitenecey! We have thousand of thousand system(linux and Windows) from multiple account for monitoring using Beat. How we can aggregat… --- ## [Elasticsearch stop working properly](https://discuss.elastic.co/t/elasticsearch-stop-working-properly/246729)
**Author:** [@esther4](https://discuss.elastic.co/u/esther4)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 3:51am UTC](https://discuss.elastic.co/t/elasticsearch-stop-working-properly/246729 "2020-08-31T03:51:25Z")
One of the Elasticsearch logs shown the following warning messages after start the ES service \[2020-07-06T08:58:21,968\]Failed to update node information for ClusterInfoUpdateJob within 15s timeout \[2020-07-06T08:58:21,9… --- ## [Audit log file does not appear in the node](https://discuss.elastic.co/t/audit-log-file-does-not-appear-in-the-node/246684)
**Author:** [@kasscharal](https://discuss.elastic.co/u/kasscharal)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 3:43am UTC](https://discuss.elastic.co/t/audit-log-file-does-not-appear-in-the-node/246684 "2020-08-31T03:43:11Z")
In my Elasticsearch cluster (version 7.6.2 - installed using the elasticsearch.k8s.elastic.co/v1 resource) I have set xpack.security.audit.enabled to true under my nodeSets: GET /\_xpack/usage ... "audit" : { "… --- ## [Eorror "entity content is too long \[\] for the configured buffer limit \[104857600\]"](https://discuss.elastic.co/t/eorror-entity-content-is-too-long-for-the-configured-buffer-limit-104857600/246715)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 3:41am UTC](https://discuss.elastic.co/t/eorror-entity-content-is-too-long-for-the-configured-buffer-limit-104857600/246715 "2020-08-31T03:41:45Z")
When searching for large data, a log of entity content is too long \[\] for the configured buffer limit \[104857600\] occurs. I looked up and said that I can put http.max\_content\_length, but it doesn't work. I saw some art… --- ## [Feature request / query templates reusable](https://discuss.elastic.co/t/feature-request-query-templates-reusable/246771)
**Author:** [@joropito](https://discuss.elastic.co/u/joropito)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 3:37am UTC](https://discuss.elastic.co/t/feature-request-query-templates-reusable/246771 "2020-08-31T03:37:38Z")
Hi all! Please I would like to see query teamplates to be reusable on any query like this { "template\_search": { "params": { ....... these params will be used by defaults, child params supercedes this ones ..... … --- ## [Getting 504 on using aggs](https://discuss.elastic.co/t/getting-504-on-using-aggs/246807)
**Author:** [@rishav\_agarwal](https://discuss.elastic.co/u/rishav_agarwal)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 3:36am UTC](https://discuss.elastic.co/t/getting-504-on-using-aggs/246807 "2020-08-31T03:36:54Z")
Hi, I am a new ES user, I type the following query, I get back results: POST /test\_index/\_search { "query": { "bool": { "filter": \[ { "term": { "id": "123456" } … --- ## [Always loading Elastic when i open the kibana](https://discuss.elastic.co/t/always-loading-elastic-when-i-open-the-kibana/245857)
**Author:** [@Yomike](https://discuss.elastic.co/u/Yomike)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 2:10am UTC](https://discuss.elastic.co/t/always-loading-elastic-when-i-open-the-kibana/245857 "2020-08-31T02:10:57Z")
I was setting up my ELK environment first time yesterday on Windows system,but when i open the Kibana, it said Loading Elastic all the time and cannot see the dashboard .See screen shot: --- ## [Find updated documents](https://discuss.elastic.co/t/find-updated-documents/246789)
**Author:** [@mohdidriskj](https://discuss.elastic.co/u/mohdidriskj)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 2:10am UTC](https://discuss.elastic.co/t/find-updated-documents/246789 "2020-08-31T02:10:36Z")
Hi, Is there a way in elastic search to trigger an alert or the entire document, whenever INSERT/UPDATE is performed on the document? --- ## [Merge multiple indexes into one index and visualize it](https://discuss.elastic.co/t/merge-multiple-indexes-into-one-index-and-visualize-it/246841)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 2:06am UTC](https://discuss.elastic.co/t/merge-multiple-indexes-into-one-index-and-visualize-it/246841 "2020-08-31T02:06:26Z")
hello, I created several indexes in kibana and each each index has its own visualizations and dahsboard, the indexes have similar fields (type and meaning, I want to know it's possible to create a merge of these indexes … --- ## [Elastic search failed to start](https://discuss.elastic.co/t/elastic-search-failed-to-start/246845)
**Author:** [@cosmin\_purcarea](https://discuss.elastic.co/u/cosmin_purcarea)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 2:05am UTC](https://discuss.elastic.co/t/elastic-search-failed-to-start/246845 "2020-08-31T02:05:05Z")
Hi I just try to install elasticsearch on my server but not start. ' yum info elasticsearch Loaded plugins: fastestmirror, universal-hooks Loading mirror speeds from cached hostfile \* EA4: 208.74.123.61 \* cpanel-ad… --- ## [Automatically delete month old indices every month](https://discuss.elastic.co/t/automatically-delete-month-old-indices-every-month/246535)
**Author:** [@mark.santos](https://discuss.elastic.co/u/mark.santos)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 1:44am UTC](https://discuss.elastic.co/t/automatically-delete-month-old-indices-every-month/246535 "2020-08-31T01:44:35Z")
Hi everyone, I am new to Elasticsearch. I received an email notification that says " Your cluster is near its limit for storage space.". Btw, I am using function beat to transport logs from AWS Cloudwatch to Kibana. I wa… --- ## [Incomprehensible Elasticsearch behaviour](https://discuss.elastic.co/t/incomprehensible-elasticsearch-behaviour/246397)
**Author:** [@Hristo\_Angelov](https://discuss.elastic.co/u/Hristo_Angelov)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 1:43am UTC](https://discuss.elastic.co/t/incomprehensible-elasticsearch-behaviour/246397 "2020-08-31T01:43:33Z")
I'm running a two nodes elasticsearch cluster(v. 5.6.10) which I monitor and I notice some interesting graphs which I can't understand. The first one is a graph of merge operations over time: As far as I can see it's … --- ## [【ingest node】enrich processorに関して](https://discuss.elastic.co/t/ingest-node-enrich-processor/246571)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 1:37am UTC](https://discuss.elastic.co/t/ingest-node-enrich-processor/246571 "2020-08-31T01:37:40Z")
お世話になります。 ingest nodeのenrich processorに関して、質問させて頂きます。 （下記問い合わせに関連したご質問になります。） ▼実現したいこと A indexの投入データの「A\_id」が"1111"の場合 ①C index 「A\_id」の値を条件に、「B\_id」の値(複数有)を取得 C index \_id A\_id B\_id 1 1111 aaaa 2 1111 b… --- ## [Kibana Alerts - Log threshold keyword](https://discuss.elastic.co/t/kibana-alerts-log-threshold-keyword/246709)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 1:31am UTC](https://discuss.elastic.co/t/kibana-alerts-log-threshold-keyword/246709 "2020-08-31T01:31:05Z")
Hi All, Trying to configure a 'Log Threshold Alert' in Kibana but running into a problem when doing a conditional statement to a field In the following image, I am trying to alert when message\_code.keyword equal XXXX. … --- ## [Minimum\_should\_match ignored when match only produces 1 term?](https://discuss.elastic.co/t/minimum-should-match-ignored-when-match-only-produces-1-term/246313)
**Author:** [@Altiano\_Gerung](https://discuss.elastic.co/u/Altiano_Gerung)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 1:18am UTC](https://discuss.elastic.co/t/minimum-should-match-ignored-when-match-only-produces-1-term/246313 "2020-08-31T01:18:42Z")
"match": { "product.name.full": { "query": "chicken", "minimum\_should\_match": 3 } } will always match, but if I provide it with input that can produce \>2 terms like this: "match": { "product.name.full": … --- ## [Elastic is\_write\_index vs index\_routing in alias](https://discuss.elastic.co/t/elastic-is-write-index-vs-index-routing-in-alias/246017)
**Author:** [@Altiano\_Gerung](https://discuss.elastic.co/u/Altiano_Gerung)\ **Replies:** 5\ **Last updated:** [August 31, 2020, 1:17am UTC](https://discuss.elastic.co/t/elastic-is-write-index-vs-index-routing-in-alias/246017 "2020-08-31T01:17:55Z")
It seems like alias has the same feature with two different names, What is the different between this two actually? When to use one over the other? [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1257) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1259)