# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1283 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1284 --- ## [Due to heavy load, Shards getting unassigned](https://discuss.elastic.co/t/due-to-heavy-load-shards-getting-unassigned/244433)
**Author:** [@het](https://discuss.elastic.co/u/het)\ **Replies:** 14\ **Last updated:** [August 14, 2020, 11:07am UTC](https://discuss.elastic.co/t/due-to-heavy-load-shards-getting-unassigned/244433 "2020-08-14T11:07:26Z")
Hi, I have a cluster contains 3 data nodes 31 GB of each, and 3 master nodes 8 GB of each. I have around a total of 252 shards. The total data size is approx. 65 GB. I am using 7.7.1 ElasticSearch When I run a load of… --- ## [Help Logstash XML Parsing to Xpath](https://discuss.elastic.co/t/help-logstash-xml-parsing-to-xpath/241051)
**Author:** [@akim](https://discuss.elastic.co/u/akim)\ **Replies:** 22\ **Last updated:** [August 14, 2020, 10:06am UTC](https://discuss.elastic.co/t/help-logstash-xml-parsing-to-xpath/241051 "2020-08-14T10:06:52Z")
Hello! I need help how to parse this kind of XML File: \ \ \ \ **Author:** [@Ankitha\_Sathya](https://discuss.elastic.co/u/Ankitha_Sathya)\ **Replies:** 1\ **Last updated:** [August 14, 2020, 9:22am UTC](https://discuss.elastic.co/t/what-is-the-minimum-number-of-servers-necessary-for-healthy-elastic-search-cluster/244977 "2020-08-14T09:22:30Z") Hi all, I am new to Elastic search and trying to understand what is the minimum requirement for a ES cluster keeping availability in mind. Note that I am considering all the nodes are master-eligible and data node and … --- ## [Passing Current time in Logstash input plugin 'exec' for executing API in curl](https://discuss.elastic.co/t/passing-current-time-in-logstash-input-plugin-exec-for-executing-api-in-curl/243933)
**Author:** [@Rebin](https://discuss.elastic.co/u/Rebin)\ **Replies:** 4\ **Last updated:** [August 14, 2020, 9:13am UTC](https://discuss.elastic.co/t/passing-current-time-in-logstash-input-plugin-exec-for-executing-api-in-curl/243933 "2020-08-14T09:13:55Z")
I want to execute API in Logstash & schedule it every 30 mins and store the data in elastic search. I'm using exec logstash plugin to do, In the curl command there is start and end query param where i need to specify epo… --- ## [Grok filter pattern for nginx to parse request body](https://discuss.elastic.co/t/grok-filter-pattern-for-nginx-to-parse-request-body/244898)
**Author:** [@Santu](https://discuss.elastic.co/u/Santu)\ **Replies:** 4\ **Last updated:** [August 14, 2020, 7:24am UTC](https://discuss.elastic.co/t/grok-filter-pattern-for-nginx-to-parse-request-body/244898 "2020-08-14T07:24:09Z")
Hi, i'm trying to parse the request body with logstash grok pattern for nginx generated logs. below is my grok pattern- "%{WORD:req\_body}" and i get the parsed field like below- "req\_body" : "req\_body", "@version"… --- ## [Convert all the fields to integer in csv filter](https://discuss.elastic.co/t/convert-all-the-fields-to-integer-in-csv-filter/244949)
**Author:** [@saipadu](https://discuss.elastic.co/u/saipadu)\ **Replies:** 2\ **Last updated:** [August 14, 2020, 7:02am UTC](https://discuss.elastic.co/t/convert-all-the-fields-to-integer-in-csv-filter/244949 "2020-08-14T07:02:01Z")
Hi, I'm parsing the csv output of a command to logstash which has a dynamic number of columns. All the column values are interger except one which is a time field. By default logstash takes them all as strings. How can … --- ## [Signal Webhooks send document fields](https://discuss.elastic.co/t/signal-webhooks-send-document-fields/242189)
**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\ **Replies:** 2\ **Last updated:** [August 14, 2020, 5:11am UTC](https://discuss.elastic.co/t/signal-webhooks-send-document-fields/242189 "2020-08-14T05:11:00Z")
Hi, I have set up a custom signal that is triggering within ELK as i want. I would like to use the Webhook function to trigger some ex ternal actions. In order to do this though i need to send some of the document fie… --- ## [How to plot correlation matrix data as heat map in kibana?](https://discuss.elastic.co/t/how-to-plot-correlation-matrix-data-as-heat-map-in-kibana/244471)
**Author:** [@apremgeorge](https://discuss.elastic.co/u/apremgeorge)\ **Replies:** 3\ **Last updated:** [August 14, 2020, 4:57am UTC](https://discuss.elastic.co/t/how-to-plot-correlation-matrix-data-as-heat-map-in-kibana/244471 "2020-08-14T04:57:56Z")
Hi, I have uploaded a correlation matrix data from python into kibana, Total 55 records, each "\_id" has 55 records Even i can view as GET atmodelleddata.cm\_v1/\_search { "aggs": { "statistics": { "matrix… --- ## [Why not recognize simple syslog text as SYSLOGLINE in Grok Debugger?](https://discuss.elastic.co/t/why-not-recognize-simple-syslog-text-as-syslogline-in-grok-debugger/244905)
**Author:** [@patsevanton](https://discuss.elastic.co/u/patsevanton)\ **Replies:** 2\ **Last updated:** [August 14, 2020, 3:30am UTC](https://discuss.elastic.co/t/why-not-recognize-simple-syslog-text-as-syslogline-in-grok-debugger/244905 "2020-08-14T03:30:12Z")
Hello! Source log: Mar 16 00:01:25 evita postfix/smtpd\[1713\]: connect from camomile.cloud9.net\[168.100.1.3\] Grok pattern - SYSLOGLINE Output - No Matches Screenshot: --- ## [Management thread taking too much cpu](https://discuss.elastic.co/t/management-thread-taking-too-much-cpu/244935)
**Author:** [@Geeks\_Insights](https://discuss.elastic.co/u/Geeks_Insights)\ **Replies:** 2\ **Last updated:** [August 14, 2020, 2:22am UTC](https://discuss.elastic.co/t/management-thread-taking-too-much-cpu/244935 "2020-08-14T02:22:51Z")
Hi we are observing too much cpu on cluster suddenly and the hot threads shows below only on management thread pool. hotthreads 99.8% (499ms out of 500ms) cpu usage by thread 'elasticsearch\[node1\]\[management\]\[T#2\]' … --- ## [Generic logstash config as onprem proxy for cloud](https://discuss.elastic.co/t/generic-logstash-config-as-onprem-proxy-for-cloud/244280)
**Author:** [@NightSpark](https://discuss.elastic.co/u/NightSpark)\ **Replies:** 1\ **Last updated:** [August 14, 2020, 12:15am UTC](https://discuss.elastic.co/t/generic-logstash-config-as-onprem-proxy-for-cloud/244280 "2020-08-14T00:15:37Z")
Hi, I am running 7.8.1 and hoping that someone can provide a logstash config that will allow me to have a central server that will take requests for inputs for on prem servers and send to a elastic search running on ela… --- ## [Dynamically change the index for Elasticsearch in Logstash output](https://discuss.elastic.co/t/dynamically-change-the-index-for-elasticsearch-in-logstash-output/244788)
**Author:** [@udesh](https://discuss.elastic.co/u/udesh)\ **Replies:** 5\ **Last updated:** [August 13, 2020, 11:47pm UTC](https://discuss.elastic.co/t/dynamically-change-the-index-for-elasticsearch-in-logstash-output/244788 "2020-08-13T23:47:31Z")
'Hi All, I'm trying to change the logstash.config file according to a log file. The log file consists three different types of log records which generated through my java application. logstash.config file is as follow… --- ## [Custom logos for Kibana 7.8.1](https://discuss.elastic.co/t/custom-logos-for-kibana-7-8-1/244097)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 18\ **Last updated:** [August 13, 2020, 9:42pm UTC](https://discuss.elastic.co/t/custom-logos-for-kibana-7-8-1/244097 "2020-08-13T21:42:11Z")
Hi, I recently moved to ELK stack 7.8.1. It was hard for me to customize previous version 6.8.9, but after make a cocktail of workarounds, I was finally able to add own logo, colors and texts. There is an old thread to… --- ## [How to updateState in Kibana 7.8](https://discuss.elastic.co/t/how-to-updatestate-in-kibana-7-8/244936)
**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\ **Replies:** 1\ **Last updated:** [August 13, 2020, 9:36pm UTC](https://discuss.elastic.co/t/how-to-updatestate-in-kibana-7-8/244936 "2020-08-13T21:36:04Z")
I'm migrating a plugin from Kibana 7.5 to 7.8 and using the new plugin/platform. In 7.5 I could call this.props.vis.updateState() from within my Editor to update the state of the visualization. I see that this cannot be… --- ## [Multi\_match bool\_prefix с фонетическим анализатором не работает как ожидается](https://discuss.elastic.co/t/multi-match-bool-prefix/244731)
**Author:** [@111375](https://discuss.elastic.co/u/111375)\ **Replies:** 4\ **Last updated:** [August 13, 2020, 9:11pm UTC](https://discuss.elastic.co/t/multi-match-bool-prefix/244731 "2020-08-13T21:11:02Z")
Здравствуйте. У меня есть конфигурация индекса: { "settings": { "analysis": { "filter": { "translit\_english": { "type": "phonetic", "encoder": "beider\_morse", … --- ## [I have added a custom analyzer to my index settings, but not getting results](https://discuss.elastic.co/t/i-have-added-a-custom-analyzer-to-my-index-settings-but-not-getting-results/244771)
**Author:** [@Saumya\_Mishra](https://discuss.elastic.co/u/Saumya_Mishra)\ **Replies:** 9\ **Last updated:** [August 13, 2020, 8:56pm UTC](https://discuss.elastic.co/t/i-have-added-a-custom-analyzer-to-my-index-settings-but-not-getting-results/244771 "2020-08-13T20:56:59Z")
// This the setting of my index { "hw\_transcriptionlogindex" : { "settings" : { "index" : { "number\_of\_shards" : "1", "provided\_name" : "hw\_t… --- ## [Kibana sees only one logstash node](https://discuss.elastic.co/t/kibana-sees-only-one-logstash-node/244876)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 4\ **Last updated:** [August 13, 2020, 8:36pm UTC](https://discuss.elastic.co/t/kibana-sees-only-one-logstash-node/244876 "2020-08-13T20:36:58Z")
I see only one logstash node in kibana (it changes one time the first node and then the second ), I already deleted the uuid file and restarted the node but unfortunately it didn't create the new one . Version 6.3.0 P… --- ## [Can't see logstash monitoring window in kibana](https://discuss.elastic.co/t/cant-see-logstash-monitoring-window-in-kibana/244858)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 4\ **Last updated:** [August 13, 2020, 8:16pm UTC](https://discuss.elastic.co/t/cant-see-logstash-monitoring-window-in-kibana/244858 "2020-08-13T20:16:37Z")
Hi , I'm trying to configure logstash monitoring but can't see it in kibana , I see the index is created and have no related errors :slight\_smile: GET /\_cluster/settings { "persistent": { "xpack": { "monito… --- ## [Verify TLS enablement?](https://discuss.elastic.co/t/verify-tls-enablement/244944)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 0\ **Last updated:** [August 13, 2020, 8:13pm UTC](https://discuss.elastic.co/t/verify-tls-enablement/244944 "2020-08-13T20:13:42Z")
Hi, We recently enabled TLS on version 5.6.16 and it wasn't clear to us if there is any indication (even just a logging statement) that TLS enablement has kicked in. Is there anything we could look at for validation? T… --- ## [Pinned Filters](https://discuss.elastic.co/t/pinned-filters/244929)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 2\ **Last updated:** [August 13, 2020, 7:56pm UTC](https://discuss.elastic.co/t/pinned-filters/244929 "2020-08-13T19:56:33Z")
I have a dashboard that I call from a URL passing some \_q filters to it. This dashboard also has links to go other pages. however the filter wont stay. I understand that this filter is not pinned and may have something t… --- ## [Add multiple data values to Elasticsearch index using java REST API](https://discuss.elastic.co/t/add-multiple-data-values-to-elasticsearch-index-using-java-rest-api/244938)
**Author:** [@Venkat\_Raj](https://discuss.elastic.co/u/Venkat_Raj)\ **Replies:** 0\ **Last updated:** [August 13, 2020, 7:10pm UTC](https://discuss.elastic.co/t/add-multiple-data-values-to-elasticsearch-index-using-java-rest-api/244938 "2020-08-13T19:10:29Z")
Hi All, I am using JAVA REST API to create index and add data to the index. Below is the code I am using: Map\ dataMap = new HashMap\(); dataMap.put("appname", app); dataMap.put("version… --- ## [Update the Configuration File for Deployment](https://discuss.elastic.co/t/update-the-configuration-file-for-deployment/243828)
**Author:** [@Edmond\_Legaspi](https://discuss.elastic.co/u/Edmond_Legaspi)\ **Replies:** 1\ **Last updated:** [August 13, 2020, 6:28pm UTC](https://discuss.elastic.co/t/update-the-configuration-file-for-deployment/243828 "2020-08-13T18:28:09Z")
Hi, We would like to know if it is possible to add some configuration to kibana.yml files and setup\_connection.js prior to deployment. Sample is: Addin cors: { additionalHeaders: \['kbn-version','cookie'\], origin: \['\*'… --- ## [Find Exact same sentence from Document](https://discuss.elastic.co/t/find-exact-same-sentence-from-document/244663)
**Author:** [@aninda\_halder](https://discuss.elastic.co/u/aninda_halder)\ **Replies:** 4\ **Last updated:** [August 13, 2020, 6:07pm UTC](https://discuss.elastic.co/t/find-exact-same-sentence-from-document/244663 "2020-08-13T18:07:26Z")
Suppose i'm 3 documents . Abul hassan was a actor hassan was a actor abul was a actor if i want to search for abul hassan ,search query will return all of the 3 document , but i want to get only 1st document as this … --- ## [Multiple data nodes with different storage size](https://discuss.elastic.co/t/multiple-data-nodes-with-different-storage-size/244885)
**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\ **Replies:** 2\ **Last updated:** [August 13, 2020, 5:01pm UTC](https://discuss.elastic.co/t/multiple-data-nodes-with-different-storage-size/244885 "2020-08-13T17:01:32Z")
Hi, I will reach soon my maximum cluster data size. I would like to add a temporary data node until I received a new one. This node has less storage than others but I wonder what will happened if I add it into my clus… --- ## [Cannot deploy elastic-stack into Kubernetes cluster. Error: found in Chart.yaml](https://discuss.elastic.co/t/cannot-deploy-elastic-stack-into-kubernetes-cluster-error-found-in-chart-yaml/244919)
**Author:** [@melissajenner22](https://discuss.elastic.co/u/melissajenner22)\ **Replies:** 0\ **Last updated:** [August 13, 2020, 4:37pm UTC](https://discuss.elastic.co/t/cannot-deploy-elastic-stack-into-kubernetes-cluster-error-found-in-chart-yaml/244919 "2020-08-13T16:37:49Z")
I would like to deploy elastic-stack into Kubernetes cluster. I git clone the chart, use default settings. But, I got errors. 1. git clone https://github.com/helm/charts 2. Create namespace kubectl create namespac… --- ## [Problem accessing file from base URL in Kibana 7.8](https://discuss.elastic.co/t/problem-accessing-file-from-base-url-in-kibana-7-8/244784)
**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\ **Replies:** 5\ **Last updated:** [August 13, 2020, 4:28pm UTC](https://discuss.elastic.co/t/problem-accessing-file-from-base-url-in-kibana-7-8/244784 "2020-08-13T16:28:28Z")
I'm converting a plugin from Kibana 7.5 to 7.8. In my code I grab an .xlsx file that is stored in a data directory in the public folder of my plugin. This works in 7.5 but does not work in 7.8. I'm grabbing this file: /… --- ## [Wrong logstash input filter invoked: csv filter is being invoked rather than http](https://discuss.elastic.co/t/wrong-logstash-input-filter-invoked-csv-filter-is-being-invoked-rather-than-http/244798)
**Author:** [@david6](https://discuss.elastic.co/u/david6)\ **Replies:** 2\ **Last updated:** [August 13, 2020, 3:11pm UTC](https://discuss.elastic.co/t/wrong-logstash-input-filter-invoked-csv-filter-is-being-invoked-rather-than-http/244798 "2020-08-13T15:11:13Z")
When I PUT a json body to the configured http input url, the CSV filter is being invoked instead of http. What am I missing? PUT: curl --header "Content-Type: application/json" \\ --request PUT \\ --data '{"field1": "ma… --- ## [How to change timestamp adding by logstash while sending logs to output plugin](https://discuss.elastic.co/t/how-to-change-timestamp-adding-by-logstash-while-sending-logs-to-output-plugin/244799)
**Author:** [@aksshm](https://discuss.elastic.co/u/aksshm)\ **Replies:** 5\ **Last updated:** [August 13, 2020, 3:04pm UTC](https://discuss.elastic.co/t/how-to-change-timestamp-adding-by-logstash-while-sending-logs-to-output-plugin/244799 "2020-08-13T15:04:16Z")
Hi, I'm running logstash with kafka as input plugin and syslog as output plugin. For kafka , all the messages are with local timezone/required timezone but while sending to syslog logstash is adding a timestamp in fron… --- ## [Copy nested fields to new nested fields via Reindex or Update API](https://discuss.elastic.co/t/copy-nested-fields-to-new-nested-fields-via-reindex-or-update-api/244897)
**Author:** [@g30](https://discuss.elastic.co/u/g30)\ **Replies:** 0\ **Last updated:** [August 13, 2020, 2:16pm UTC](https://discuss.elastic.co/t/copy-nested-fields-to-new-nested-fields-via-reindex-or-update-api/244897 "2020-08-13T14:16:31Z")
Hi, We have the following data stored in our existing index. { "id": "83c55df4-dd6d-11ea-87d0-0242ac130003", "name": "test", "customData": { "id\_int": 16934, "year": "2020", "number": "0001", "anotherField":… --- ## [How to apply parse failure tag only when message fails BOTH filters instead of just one?](https://discuss.elastic.co/t/how-to-apply-parse-failure-tag-only-when-message-fails-both-filters-instead-of-just-one/244833)
**Author:** [@drjosephliu](https://discuss.elastic.co/u/drjosephliu)\ **Replies:** 1\ **Last updated:** [August 13, 2020, 2:28pm UTC](https://discuss.elastic.co/t/how-to-apply-parse-failure-tag-only-when-message-fails-both-filters-instead-of-just-one/244833 "2020-08-13T14:28:45Z")
My logtash config has two filters: 1) parses a log message and 2) parses a JSON message: filter { grok { match =\> { "message" =\> "\\\[%{TIMESTAMP\_ISO8601:log\_time}\\\]\\\[%{LOGLEVEL:log\_level}(?\\\s\*)\\\]\\\[%{DATA… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1282) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1284)