# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1323

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1324

---

## [How to search in full folder path?](https://discuss.elastic.co/t/how-to-search-in-full-folder-path/241811)

<div class="topic-metadata">

**Author:** [@jimw](https://discuss.elastic.co/u/jimw)\
**Replies:** 8\
**Last updated:** [July 20, 2020, 10:10am UTC](https://discuss.elastic.co/t/how-to-search-in-full-folder-path/241811 "2020-07-20T10:10:01Z")

</div>

I used ElasticSeaarch index filename with full path. for example, c:\\dir11\\dir12\\dir13\\dir14\\fn11.txt c:\\dir21\\dir22\\dir23\\dir24\\fn21.pdf c:\\dir31\\dir32\\dir33\\dir34\\fn31.doc c:\\dir41\\dir42\\dir43\\dir44\\fn41.ppt What …

---

## [Unable to access elastic search over network](https://discuss.elastic.co/t/unable-to-access-elastic-search-over-network/241265)

<div class="topic-metadata">

**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\
**Replies:** 10\
**Last updated:** [July 20, 2020, 9:57am UTC](https://discuss.elastic.co/t/unable-to-access-elastic-search-over-network/241265 "2020-07-20T09:57:41Z")

</div>

Hi, I am trying to update elasticsearch.yml file to access elasticsearch over network. but when ever i can configurations and restart services it gives an error. Here are my configuration in YML file network.host = lo…

---

## [Slow custom plugin](https://discuss.elastic.co/t/slow-custom-plugin/236481)

<div class="topic-metadata">

**Author:** [@p4paul](https://discuss.elastic.co/u/p4paul)\
**Replies:** 0\
**Last updated:** [June 10, 2020, 10:05am UTC](https://discuss.elastic.co/t/slow-custom-plugin/236481 "2020-06-10T10:05:23Z")

</div>

I have written a custom plugin implementing FilterScript and noticed on large data sets it is quite slow; so I changed the execute method to simply return 'true' and removed all other computation. Then removed and reinst…

---

## [Split array with key+value fields to key: value - Follow up](https://discuss.elastic.co/t/split-array-with-key-value-fields-to-key-value-follow-up/240469)

<div class="topic-metadata">

**Author:** [@Rudolf\_Reddy\_Macejka](https://discuss.elastic.co/u/Rudolf_Reddy_Macejka)\
**Replies:** 2\
**Last updated:** [July 20, 2020, 9:28am UTC](https://discuss.elastic.co/t/split-array-with-key-value-fields-to-key-value-follow-up/240469 "2020-07-20T09:28:47Z")

</div>

Hello, I am trying to convert this input { "request": { "time": "2020-04-30T07:32:13.997Z", "size": "0", "headers": \[ { "key": "Correlation-Id", "value": "124f4cdf-…

---

## [How does dataset density affect retrieval? Master thesis project](https://discuss.elastic.co/t/how-does-dataset-density-affect-retrieval-master-thesis-project/241856)

<div class="topic-metadata">

**Author:** [@DonIgnacio](https://discuss.elastic.co/u/DonIgnacio)\
**Replies:** 0\
**Last updated:** [July 20, 2020, 8:31am UTC](https://discuss.elastic.co/t/how-does-dataset-density-affect-retrieval-master-thesis-project/241856 "2020-07-20T08:31:53Z")

</div>

Hi, I am implementing a search engine using ES for my master thesis. The dataset contains email documents, with metadata or features about the email conversations but also the body of the email conversations as parent-…

---

## [Only a fraction of the data get indexed when executing logstash via service](https://discuss.elastic.co/t/only-a-fraction-of-the-data-get-indexed-when-executing-logstash-via-service/241853)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 0\
**Last updated:** [July 20, 2020, 8:03am UTC](https://discuss.elastic.co/t/only-a-fraction-of-the-data-get-indexed-when-executing-logstash-via-service/241853 "2020-07-20T08:03:13Z")

</div>

Im consuming data from a DB, When I run the pipelines separately they get all the data, but when I run them via logstash service or with the command /usr/share/logstash/bin/logstash --path.settings /etc/logstash to execu…

---

## [Api call to calculate uptime in percentage over specific time](https://discuss.elastic.co/t/api-call-to-calculate-uptime-in-percentage-over-specific-time/241026)

<div class="topic-metadata">

**Author:** [@Sagar\_Dalvi](https://discuss.elastic.co/u/Sagar_Dalvi)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 7:17am UTC](https://discuss.elastic.co/t/api-call-to-calculate-uptime-in-percentage-over-specific-time/241026 "2020-07-20T07:17:40Z")

</div>

Hi All, I want to calculate Uptime in percentage over specific time. I am using Heartbeat and able to create below data table visualisation: But this percentage column is not showing in csv report nor in query when …

---

## [Index balance in the cluster](https://discuss.elastic.co/t/index-balance-in-the-cluster/241371)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 12\
**Last updated:** [July 20, 2020, 7:04am UTC](https://discuss.elastic.co/t/index-balance-in-the-cluster/241371 "2020-07-20T07:04:27Z")

</div>

Hello All, I have noticed that I have 1 server out of 5 in the cluster, that stores the majority of the data/indices. Also, one of the nodes holds a lower number of shards. How can I balance the indices across the nod…

---

## [Value is not determining](https://discuss.elastic.co/t/value-is-not-determining/241838)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 7:00am UTC](https://discuss.elastic.co/t/value-is-not-determining/241838 "2020-07-20T07:00:34Z")

</div>

i have a field and its type is ip but the problem is that i want to specify its type keyword and ip

---

## [About Bootstrap](https://discuss.elastic.co/t/about-bootstrap/240454)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 5\
**Last updated:** [July 20, 2020, 6:53am UTC](https://discuss.elastic.co/t/about-bootstrap/240454 "2020-07-20T06:53:52Z")

</div>

What is Bootstrap in elasticsearch and what it really does ?

---

## [One pipeline fail restarts Logstash, disrupting all other pipelines defined in pipelines.yml](https://discuss.elastic.co/t/one-pipeline-fail-restarts-logstash-disrupting-all-other-pipelines-defined-in-pipelines-yml/241845)

<div class="topic-metadata">

**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\
**Replies:** 0\
**Last updated:** [July 20, 2020, 6:46am UTC](https://discuss.elastic.co/t/one-pipeline-fail-restarts-logstash-disrupting-all-other-pipelines-defined-in-pipelines-yml/241845 "2020-07-20T06:46:50Z")

</div>

Hello, We have around 20 different pipelines defined in our pipelines.yml. One of them is outputing elastic query result to a file in a dedicated folder. Last weekend the owner of this folder changed to root, making Log…

---

## [Hide unused fields in Kibana Discover](https://discuss.elastic.co/t/hide-unused-fields-in-kibana-discover/239058)

<div class="topic-metadata">

**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\
**Replies:** 3\
**Last updated:** [July 20, 2020, 5:45am UTC](https://discuss.elastic.co/t/hide-unused-fields-in-kibana-discover/239058 "2020-07-20T05:45:32Z")

</div>

Hi, not sure if this is Kibana or something else, but when displaying the Filebeat index using Kibana Discover, all fields are shown, even empty fields with no value. It usually, only shows fields that have data. How d…

---

## [Regarding fo Elasticsearch 6](https://discuss.elastic.co/t/regarding-fo-elasticsearch-6/240274)

<div class="topic-metadata">

**Author:** [@Aarti\_Yadav](https://discuss.elastic.co/u/Aarti_Yadav)\
**Replies:** 4\
**Last updated:** [July 20, 2020, 5:38am UTC](https://discuss.elastic.co/t/regarding-fo-elasticsearch-6/240274 "2020-07-20T05:38:58Z")

</div>

Hello All, I am new in this community and I am looking to an online tutorial where I can learn this technology which is based on search and analytics engine and I want to use them in the application search point of view.…

---

## [Clustering of Kibana on Different Hosts](https://discuss.elastic.co/t/clustering-of-kibana-on-different-hosts/241611)

<div class="topic-metadata">

**Author:** [@ShashikanthKomandoor](https://discuss.elastic.co/u/ShashikanthKomandoor)\
**Replies:** 3\
**Last updated:** [July 20, 2020, 5:05am UTC](https://discuss.elastic.co/t/clustering-of-kibana-on-different-hosts/241611 "2020-07-20T05:05:53Z")

</div>

Hi Team, I have setup Elasticsearch with 7.8 version on 8 nodes with 3 master nodes and 5 data nodes and found that Elasticsearch is working if one Elasticsearch went down. Also, I am using Logstash as my log processor…

---

## [Pipeline.orderedがデフォルトの場合にエラーが発生](https://discuss.elastic.co/t/pipeline-ordered/240480)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 2\
**Last updated:** [July 20, 2020, 2:37am UTC](https://discuss.elastic.co/t/pipeline-ordered/240480 "2020-07-20T02:37:53Z")

</div>

logstash.ymlのpipeline.orderedがデフォルトの場合に以下のエラーが発生します。pipeline.orderedを「false」にすると発生しないようです。このエラーが発生する原因をご教示頂けないでしょうか Pipeline aborted due to error {:pipeline\_id=\>"correlation\_incident", :exception=\>#\<Errno::ENOENT: No su…

---

## [Really slow speed search ES 7.8](https://discuss.elastic.co/t/really-slow-speed-search-es-7-8/241191)

<div class="topic-metadata">

**Author:** [@Shryx\_Cetus](https://discuss.elastic.co/u/Shryx_Cetus)\
**Replies:** 9\
**Last updated:** [July 20, 2020, 2:22am UTC](https://discuss.elastic.co/t/really-slow-speed-search-es-7-8/241191 "2020-07-20T02:22:29Z")

</div>

hi guys, i just starting with ES 7.8 and i'm getting really slow search perfoming, i'm loading data from mysql to ES with this structure: https://paste.ofcode.org/pmYEUVmWGKGvwxr2FEJZvz and i'm trying to read it from p…

---

## [Logstash起動時にエラー](https://discuss.elastic.co/t/logstash/241820)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 0\
**Last updated:** [July 20, 2020, 12:01am UTC](https://discuss.elastic.co/t/logstash/241820 "2020-07-20T00:01:27Z")

</div>

logstash起動時に以下のエラーが発生します。原因と対処法をご教示頂けないでしょうか \[ERROR\]\[logstash.agent \] Failed to execute action {:id=\>:XXXXXX, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Cr…

---

## [Error connecting to Kibana: fail to get the Kibana version](https://discuss.elastic.co/t/error-connecting-to-kibana-fail-to-get-the-kibana-version/241775)

<div class="topic-metadata">

**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\
**Replies:** 1\
**Last updated:** [July 19, 2020, 11:38pm UTC](https://discuss.elastic.co/t/error-connecting-to-kibana-fail-to-get-the-kibana-version/241775 "2020-07-19T23:38:27Z")

</div>

I have elasticsearch and kibana setup in my kubernetes cluster using ECK. I'm also trying to get filebeat setup. Im having trouble with getting filebeat to connect to kibana. in the filebeat logs i can see the following …

---

## [Concatenate two fields](https://discuss.elastic.co/t/concatenate-two-fields/241817)

<div class="topic-metadata">

**Author:** [@Jasmin](https://discuss.elastic.co/u/Jasmin)\
**Replies:** 1\
**Last updated:** [July 19, 2020, 10:39pm UTC](https://discuss.elastic.co/t/concatenate-two-fields/241817 "2020-07-19T22:39:00Z")

</div>

hi , i am using mutate add\_field to concatenate two fileds to make them a unique id , but ouptut give me this : { "\_index" : "sql", "\_type" : "\_doc", "\_id" : " %{GL\_ETABLISSEMENT} %{GL\_NUMERO} ", "\_score" : 1.0, …

---

## [High load of cpu when highlight](https://discuss.elastic.co/t/high-load-of-cpu-when-highlight/241818)

<div class="topic-metadata">

**Author:** [@pilo](https://discuss.elastic.co/u/pilo)\
**Replies:** 0\
**Last updated:** [July 19, 2020, 10:06pm UTC](https://discuss.elastic.co/t/high-load-of-cpu-when-highlight/241818 "2020-07-19T22:06:32Z")

</div>

Hello everyone, I'm having an issue when i use highlight in query. Currently, we are using elasticsearch for full text search on 1 index, around 10gb of documents. This index is running on a single node. Its technical …

---

## [Logstash and elasticsearch mismatch](https://discuss.elastic.co/t/logstash-and-elasticsearch-mismatch/241758)

<div class="topic-metadata">

**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\
**Replies:** 5\
**Last updated:** [July 19, 2020, 6:17pm UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-mismatch/241758 "2020-07-19T18:17:50Z")

</div>

I'm trying to ship logs from a server with filebeat to another server that hosts logstash and elasticsearch. Everything is latest and greatest (7.8.0). Problem is, I'm getting an error from logstash. This is the error I…

---

## [Error in system log filter](https://discuss.elastic.co/t/error-in-system-log-filter/241788)

<div class="topic-metadata">

**Author:** [@MikyTVA](https://discuss.elastic.co/u/MikyTVA)\
**Replies:** 1\
**Last updated:** [July 19, 2020, 6:09pm UTC](https://discuss.elastic.co/t/error-in-system-log-filter/241788 "2020-07-19T18:09:47Z")

</div>

I'm creating the ELK stack and I'm new to ELK stack. I'm using Logstash 6.8.10 on CentOS 7. I want process system logs and I'm realized that it doesn't work. Seeing the log I found that error \[ERROR\]\[logstash.agent …

---

## [Getiing this error 403 forbidden erro in "logstash-plain.log](https://discuss.elastic.co/t/getiing-this-error-403-forbidden-erro-in-logstash-plain-log/241796)

<div class="topic-metadata">

**Author:** [@rama543](https://discuss.elastic.co/u/rama543)\
**Replies:** 1\
**Last updated:** [July 19, 2020, 6:04pm UTC](https://discuss.elastic.co/t/getiing-this-error-403-forbidden-erro-in-logstash-plain-log/241796 "2020-07-19T18:04:09Z")

</div>

Getting below Error message in logstash-plain. log I am using AWS managed ElasticSearch ,Kibana . Logstash i have installed in amazon ec2 instance . Please help to get resolve the issue Attempted to resurrect connect…

---

## ["\_msearch" still does not accept same parameters supported by "\_search"](https://discuss.elastic.co/t/msearch-still-does-not-accept-same-parameters-supported-by-search/241803)

<div class="topic-metadata">

**Author:** [@SoroushTaheri](https://discuss.elastic.co/u/SoroushTaheri)\
**Replies:** 0\
**Last updated:** [July 19, 2020, 3:14pm UTC](https://discuss.elastic.co/t/msearch-still-does-not-accept-same-parameters-supported-by-search/241803 "2020-07-19T15:14:13Z")

</div>

As many of you may know, the fact that "\_msearch" does not support the same headers as "\_search" command has been a thing for a long time and I personally have wanted this issue to be fixed asap. Today I read a couple o…

---

## [Issue with multi range queries in elastic search](https://discuss.elastic.co/t/issue-with-multi-range-queries-in-elastic-search/241581)

<div class="topic-metadata">

**Author:** [@CDu2020](https://discuss.elastic.co/u/CDu2020)\
**Replies:** 1\
**Last updated:** [July 19, 2020, 2:21pm UTC](https://discuss.elastic.co/t/issue-with-multi-range-queries-in-elastic-search/241581 "2020-07-19T14:21:40Z")

</div>

I am trying to boost query for the most recent posts on my classified website. When I add this code there were no results, I am not sure why. //boost recent posts $date0 = new \\DateTime("NOW"); $date1 = new \\DateTime("…

---

## [Kibana Vega bubble chart not working](https://discuss.elastic.co/t/kibana-vega-bubble-chart-not-working/241786)

<div class="topic-metadata">

**Author:** [@BayMax\_07](https://discuss.elastic.co/u/BayMax_07)\
**Replies:** 2\
**Last updated:** [July 19, 2020, 11:55am UTC](https://discuss.elastic.co/t/kibana-vega-bubble-chart-not-working/241786 "2020-07-19T11:55:25Z")

</div>

I have field in index and trying to make a scatter chart out of it. But it's showing only axis. { $schema: https://vega.github.io/schema/vega-lite/v2.json mark: point data: { url: { %context%: true %timefield%: @t…

---

## [Unable to use kafka input with SASL\_SSL](https://discuss.elastic.co/t/unable-to-use-kafka-input-with-sasl-ssl/241785)

<div class="topic-metadata">

**Author:** [@madhu72](https://discuss.elastic.co/u/madhu72)\
**Replies:** 0\
**Last updated:** [July 19, 2020, 11:52am UTC](https://discuss.elastic.co/t/unable-to-use-kafka-input-with-sasl-ssl/241785 "2020-07-19T11:52:50Z")

</div>

I dont see any incoming data from Kafka to Kibana thru Logstash. I configured everything, and noticed that, it have security.protocol = PLAINTEXT even I configured SASL\_SSL. input { kafka { sasl\_mechanism =\> "SCRAM-S…

---

## [Kibana 7.8 won't start](https://discuss.elastic.co/t/kibana-7-8-wont-start/241336)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 4\
**Last updated:** [July 19, 2020, 11:49am UTC](https://discuss.elastic.co/t/kibana-7-8-wont-start/241336 "2020-07-19T11:49:43Z")

</div>

Hello, I seen similar issues to mine on this forum and other sites (i.e. stack overflow), but no concrete solution. I thought I would post it again and see if someone has a solution now. I am unable to start Kibana: A…

---

## [Metricbeat beat module works for metricbeat but not for filebeat](https://discuss.elastic.co/t/metricbeat-beat-module-works-for-metricbeat-but-not-for-filebeat/239376)

<div class="topic-metadata">

**Author:** [@eyesmoker](https://discuss.elastic.co/u/eyesmoker)\
**Replies:** 1\
**Last updated:** [July 19, 2020, 7:16am UTC](https://discuss.elastic.co/t/metricbeat-beat-module-works-for-metricbeat-but-not-for-filebeat/239376 "2020-07-19T07:16:11Z")

</div>

I have this configuration for metricbeat beat module. It shows up absolutely fine on the kibana. metricbeat.autodiscover: providers: - type: kubernetes templates: - condition: …

---

## [Salvage data from a single node that once belonged to a cluster](https://discuss.elastic.co/t/salvage-data-from-a-single-node-that-once-belonged-to-a-cluster/241738)

<div class="topic-metadata">

**Author:** [@yk928](https://discuss.elastic.co/u/yk928)\
**Replies:** 9\
**Last updated:** [July 18, 2020, 1:19pm UTC](https://discuss.elastic.co/t/salvage-data-from-a-single-node-that-once-belonged-to-a-cluster/241738 "2020-07-18T13:19:35Z")

</div>

I had an ES cluster of several nodes (let's say es1, es2, ...), and I have a disk snapshot from a certain point in the past, of the disk of a single ES node (i.e. es1). I'd like to dump all the data from this es1's back…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1322)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1324)
