# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1333

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1334

---

## [Priority On Data Nodes In Elastic Search](https://discuss.elastic.co/t/priority-on-data-nodes-in-elastic-search/239804)

<div class="topic-metadata">

**Author:** [@Kumar\_Ashish](https://discuss.elastic.co/u/Kumar_Ashish)\
**Replies:** 5\
**Last updated:** [July 14, 2020, 4:52am UTC](https://discuss.elastic.co/t/priority-on-data-nodes-in-elastic-search/239804 "2020-07-14T04:52:23Z")

</div>

We have a self-hosted cluster on Kubernetes (EKS) with 1 master node and 2 master-data nodes. To get the performance, we have used NVMe instances. But if both the data node dies, the cluster gets corrupt and we have a lo…

---

## [Filebeat7.8にアップデート時のデータ転送の挙動](https://discuss.elastic.co/t/filebeat7-8/238596)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 2\
**Last updated:** [July 14, 2020, 4:52am UTC](https://discuss.elastic.co/t/filebeat7-8/238596 "2020-07-14T04:52:23Z")

</div>

バージョン7.8のElasticsearchとfilebeatを使用しています。 filebeatからElasticCloudにデータを転送するのですが、その際にingestノードのパイプラインを呼び出して、データの中身に応じて登録先のインデックスを振り分けるという処理を行っています。 filebeat.ymlで呼び出すパイプラインを以下のように指定しています #-------------------------- Elastic…

---

## [ES 5.6 - Delete by query](https://discuss.elastic.co/t/es-5-6-delete-by-query/240745)

<div class="topic-metadata">

**Author:** [@natasha\_adewar](https://discuss.elastic.co/u/natasha_adewar)\
**Replies:** 7\
**Last updated:** [July 14, 2020, 4:29am UTC](https://discuss.elastic.co/t/es-5-6-delete-by-query/240745 "2020-07-14T04:29:47Z")

</div>

We have an index in ES 2.4 that holds 120 million plus documents with different ttl values on each of them and we do insert upto 700k documents every day into the same index. We are now migrating to ES 5.6 and are plann…

---

## [Requirements planning](https://discuss.elastic.co/t/requirements-planning/240856)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 7\
**Last updated:** [July 14, 2020, 4:12am UTC](https://discuss.elastic.co/t/requirements-planning/240856 "2020-07-14T04:12:19Z")

</div>

I am running Ubuntu server 20.04 LTS in a VM hosted on a NAS (Synology.) Configuration is: Compute: Intel Celeron J3455 (4 cores allocated to the VM.) 1.5 (base) / 2.3 (burst) GHz Memory: 4 GB DDR3. Storage: 7200 RPM d…

---

## [How to check client\_ip ipv4 or ipv6?](https://discuss.elastic.co/t/how-to-check-client-ip-ipv4-or-ipv6/240654)

<div class="topic-metadata">

**Author:** [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\
**Replies:** 7\
**Last updated:** [July 14, 2020, 3:30am UTC](https://discuss.elastic.co/t/how-to-check-client-ip-ipv4-or-ipv6/240654 "2020-07-14T03:30:59Z")

</div>

how to use mutate add\_field check client\_ip version v4 or v6? if \['client\_ip'\].length \>15 { mutate{ add\_field =\> { "ip\_type" =\> "ipv6" } } } else { mutate{ add\_field =\> { "ip\_type" =\> "ipv4" } }…

---

## [Internal server error when defining index pattern in kibana](https://discuss.elastic.co/t/internal-server-error-when-defining-index-pattern-in-kibana/240252)

<div class="topic-metadata">

**Author:** [@Evelyn233](https://discuss.elastic.co/u/Evelyn233)\
**Replies:** 9\
**Last updated:** [July 14, 2020, 2:36am UTC](https://discuss.elastic.co/t/internal-server-error-when-defining-index-pattern-in-kibana/240252 "2020-07-14T02:36:55Z")

</div>

when i trying to define a new index pattern in kibana, it doesn't word due to the internal server error. i don't know how to fix it. this is the display of kibana and this is the status of my index the system i use…

---

## [Unable to access VM from Host Machine](https://discuss.elastic.co/t/unable-to-access-vm-from-host-machine/240980)

<div class="topic-metadata">

**Author:** [@Mystic\_Wayfarer](https://discuss.elastic.co/u/Mystic_Wayfarer)\
**Replies:** 1\
**Last updated:** [July 14, 2020, 2:21am UTC](https://discuss.elastic.co/t/unable-to-access-vm-from-host-machine/240980 "2020-07-14T02:21:35Z")

</div>

Dears, I am new to elastic search so bear with me for basic questions. I installed Elastic Search on Ubuntu20.4, everything works on localhost. When I try to access this from my host machine by giving the IP of VM it g…

---

## [Filebeat not receiving logs and error in logstash](https://discuss.elastic.co/t/filebeat-not-receiving-logs-and-error-in-logstash/240653)

<div class="topic-metadata">

**Author:** [@Sai\_Avinash\_Duddupud](https://discuss.elastic.co/u/Sai_Avinash_Duddupud)\
**Replies:** 12\
**Last updated:** [July 12, 2020, 4:07pm UTC](https://discuss.elastic.co/t/filebeat-not-receiving-logs-and-error-in-logstash/240653 "2020-07-12T16:07:52Z")

</div>

I am trying to setup filebeat and logstash on my server1 and send data to elasticsearch located on server2 and visualize it using kibana. Following are filebeat logs and when i run filebeat test output it showed the res…

---

## [Need clarity on how to use multiple indices for creating an index-pattern](https://discuss.elastic.co/t/need-clarity-on-how-to-use-multiple-indices-for-creating-an-index-pattern/240608)

<div class="topic-metadata">

**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\
**Replies:** 7\
**Last updated:** [July 14, 2020, 1:49am UTC](https://discuss.elastic.co/t/need-clarity-on-how-to-use-multiple-indices-for-creating-an-index-pattern/240608 "2020-07-14T01:49:16Z")

</div>

Hi all INDEX 1 = sid\_agent\_276043\_tsfm\_idx (docs = 18842) { "sid\_agent\_276043\_tsfm\_idx": { "mappings": { "\_meta": { "created\_by": "transform", "\_transform": { …

---

## [Logstash csv output plugin problem](https://discuss.elastic.co/t/logstash-csv-output-plugin-problem/240691)

<div class="topic-metadata">

**Author:** [@kase](https://discuss.elastic.co/u/kase)\
**Replies:** 8\
**Last updated:** [July 14, 2020, 12:39am UTC](https://discuss.elastic.co/t/logstash-csv-output-plugin-problem/240691 "2020-07-14T00:39:51Z")

</div>

Hi there, I want to output elasticsearch documents to csv file with using logstash, but faced some problems... tail -f /var/log/logstash/logstash-plain.log \[2020-07-10T11:11:02,561\]\[ERROR\]\[logstash.javapipeline \]\[e…

---

## [Reindexing Logstash indices to use new index template](https://discuss.elastic.co/t/reindexing-logstash-indices-to-use-new-index-template/238917)

<div class="topic-metadata">

**Author:** [@vanessa](https://discuss.elastic.co/u/vanessa)\
**Replies:** 3\
**Last updated:** [July 13, 2020, 11:26pm UTC](https://discuss.elastic.co/t/reindexing-logstash-indices-to-use-new-index-template/238917 "2020-07-13T23:26:09Z")

</div>

Hi. We have some existing logstash logs in our elasticsearch cluster. Their pattern is logstash-imu-logs-\*. We have a template for that pattern, but unfortunately it was missing the mapping for one of our fields. As the …

---

## [Average age](https://discuss.elastic.co/t/average-age/240796)

<div class="topic-metadata">

**Author:** [@joaopedro](https://discuss.elastic.co/u/joaopedro)\
**Replies:** 2\
**Last updated:** [July 13, 2020, 9:42pm UTC](https://discuss.elastic.co/t/average-age/240796 "2020-07-13T21:42:26Z")

</div>

So, I have a database whith personal information where we calculate the age of the people using the birthdate, the problem is that I want to calculate the average age of the population, but I have a problems: scalability…

---

## [Cannot import json template for cloudfront logs to cluster](https://discuss.elastic.co/t/cannot-import-json-template-for-cloudfront-logs-to-cluster/240958)

<div class="topic-metadata">

**Author:** [@gadg3ts](https://discuss.elastic.co/u/gadg3ts)\
**Replies:** 6\
**Last updated:** [July 13, 2020, 9:10pm UTC](https://discuss.elastic.co/t/cannot-import-json-template-for-cloudfront-logs-to-cluster/240958 "2020-07-13T21:10:28Z")

</div>

Hi, I'm attempting to get my cloudfront logs into a local elasticsearch cluster (7.8.0) and am having a bit of trouble. The template I'm attempting to import is from here https://aws.amazon.com/premiumsupport/knowledg…

---

## [Doubt about dm\_crypt](https://discuss.elastic.co/t/doubt-about-dm-crypt/240999)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 1\
**Last updated:** [July 13, 2020, 8:50pm UTC](https://discuss.elastic.co/t/doubt-about-dm-crypt/240999 "2020-07-13T20:50:52Z")

</div>

Hi everybody, I know that we can use dm\_crypt with a basic license even if we will be out of support. I would like just to know: where dm\_crypt will perform the encryption? I mean, directly on the filesystem? who will …

---

## [Date Filter Mapping](https://discuss.elastic.co/t/date-filter-mapping/240918)

<div class="topic-metadata">

**Author:** [@PRACHI\_GUPTA](https://discuss.elastic.co/u/PRACHI_GUPTA)\
**Replies:** 1\
**Last updated:** [July 13, 2020, 8:39pm UTC](https://discuss.elastic.co/t/date-filter-mapping/240918 "2020-07-13T20:39:34Z")

</div>

In my index, I do not have timestamp field I have reading\_date field. How to configure my dashboard's date filter to use reading\_date instead of timestamp field?

---

## [Kibana API: How to specify fields to be fetched in a GET call from saved\_objects?](https://discuss.elastic.co/t/kibana-api-how-to-specify-fields-to-be-fetched-in-a-get-call-from-saved-objects/240790)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 4\
**Last updated:** [July 13, 2020, 7:47pm UTC](https://discuss.elastic.co/t/kibana-api-how-to-specify-fields-to-be-fetched-in-a-get-call-from-saved-objects/240790 "2020-07-13T19:47:06Z")

</div>

I'm trying to get list of Dashboards via API http://localhost:5601/api/saved\_objects/\_find?type=dashboard&fields=id&fields=title But this gives quite other fields (like references & type of visualizations etc), though …

---

## [Ruby help with array of json objects](https://discuss.elastic.co/t/ruby-help-with-array-of-json-objects/241022)

<div class="topic-metadata">

**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\
**Replies:** 14\
**Last updated:** [July 13, 2020, 7:42pm UTC](https://discuss.elastic.co/t/ruby-help-with-array-of-json-objects/241022 "2020-07-13T19:42:52Z")

</div>

hi sorry if its repeat question. In my document there are few fields which are array of json objects. I want to extract one of json array object's value and assign it to my new field. So for that i m using ruby code t…

---

## [Ingest Pipeline for Transformations](https://discuss.elastic.co/t/ingest-pipeline-for-transformations/240736)

<div class="topic-metadata">

**Author:** [@AV25242](https://discuss.elastic.co/u/AV25242)\
**Replies:** 6\
**Last updated:** [July 13, 2020, 7:11pm UTC](https://discuss.elastic.co/t/ingest-pipeline-for-transformations/240736 "2020-07-13T19:11:27Z")

</div>

I am very new to elastic search, I have downloaded Elastic search on MacOs and have also installed Kibana for visualization. I am working with a connector which allows me to provide a pipeline name. However I dont know h…

---

## [Logstash - Trying to assign an existing key to a new key's value](https://discuss.elastic.co/t/logstash-trying-to-assign-an-existing-key-to-a-new-keys-value/241017)

<div class="topic-metadata">

**Author:** [@Acomra](https://discuss.elastic.co/u/Acomra)\
**Replies:** 3\
**Last updated:** [July 13, 2020, 6:05pm UTC](https://discuss.elastic.co/t/logstash-trying-to-assign-an-existing-key-to-a-new-keys-value/241017 "2020-07-13T18:05:58Z")

</div>

Hello, I’m pulling aggregated events from Opentsdb and I have a key/value where the key is the epoch event time and value is the agg count. Example: "dps" =\> { "1594657920" =\> 12.0 }, I’m trying to find a way to …

---

## [Geo-query: Filter Geo-shapes/polygons using Geo-Points](https://discuss.elastic.co/t/geo-query-filter-geo-shapes-polygons-using-geo-points/240908)

<div class="topic-metadata">

**Author:** [@edbautista](https://discuss.elastic.co/u/edbautista)\
**Replies:** 1\
**Last updated:** [July 13, 2020, 4:06pm UTC](https://discuss.elastic.co/t/geo-query-filter-geo-shapes-polygons-using-geo-points/240908 "2020-07-13T16:06:15Z")

</div>

Hi! Kibana: 7.6.2 Is it possible to filter pre indexed geoshapes using a geopoint? Specifically, we want to know if we can use the geopoints produced from our device to get the geoshapes it went to. Thanks.

---

## [Create graph showing duration between log lines](https://discuss.elastic.co/t/create-graph-showing-duration-between-log-lines/240987)

<div class="topic-metadata">

**Author:** [@scuba\_fly](https://discuss.elastic.co/u/scuba_fly)\
**Replies:** 1\
**Last updated:** [July 13, 2020, 4:02pm UTC](https://discuss.elastic.co/t/create-graph-showing-duration-between-log-lines/240987 "2020-07-13T16:02:23Z")

</div>

Having log lines like: id: 123 message: start processing @timestamp: Jul 7, 2020 @ 02:10:02.866 id: 123 message: finished processing @timestamp: Jul 7, 2020 @ 02:12:02.866 So I want to make a graph where I display the…

---

## [Date Format - Elastic index mapping - Please help](https://discuss.elastic.co/t/date-format-elastic-index-mapping-please-help/241008)

<div class="topic-metadata">

**Author:** [@Bhavani\_Prasad](https://discuss.elastic.co/u/Bhavani_Prasad)\
**Replies:** 0\
**Last updated:** [July 13, 2020, 4:01pm UTC](https://discuss.elastic.co/t/date-format-elastic-index-mapping-please-help/241008 "2020-07-13T16:01:27Z")

</div>

Hi, In my log, i have date value for a date field as : "dateOfTravel":"2020-07-14 11:49" What should be the date format for the "dateofTravel" DataType when I set the mappings in the index. I have used below "dateOfTra…

---

## [ES 5.x - delete by query](https://discuss.elastic.co/t/es-5-x-delete-by-query/241006)

<div class="topic-metadata">

**Author:** [@natasha\_adewar](https://discuss.elastic.co/u/natasha_adewar)\
**Replies:** 0\
**Last updated:** [July 13, 2020, 3:48pm UTC](https://discuss.elastic.co/t/es-5-x-delete-by-query/241006 "2020-07-13T15:48:23Z")

</div>

Is anyone running delete by-query cron on large live indexes where insert and update of documents is happening at the same time for ES 5.x? How to optimize the performance of this cron ? How often should we run these c…

---

## [Vega Integration in Kibana Dashboard](https://discuss.elastic.co/t/vega-integration-in-kibana-dashboard/240906)

<div class="topic-metadata">

**Author:** [@PRACHI\_GUPTA](https://discuss.elastic.co/u/PRACHI_GUPTA)\
**Replies:** 1\
**Last updated:** [July 13, 2020, 3:08pm UTC](https://discuss.elastic.co/t/vega-integration-in-kibana-dashboard/240906 "2020-07-13T15:08:49Z")

</div>

hi, My requirement was to create a bar graph like But as this post suggests this is possible using Vega only. I created my bar graph using Vega but i have other visuals in my dashboard as well. Now I am not getting ho…

---

## [Upper limits on replication and recovery heap usage](https://discuss.elastic.co/t/upper-limits-on-replication-and-recovery-heap-usage/240985)

<div class="topic-metadata">

**Author:** [@Pradyumna\_Achar](https://discuss.elastic.co/u/Pradyumna_Achar)\
**Replies:** 1\
**Last updated:** [July 13, 2020, 3:06pm UTC](https://discuss.elastic.co/t/upper-limits-on-replication-and-recovery-heap-usage/240985 "2020-07-13T15:06:34Z")

</div>

Hello, I'm running into a strange situation with elasticsearch. I would like to estimate the Xmx needed for running elasticsearch data nodes while accounting for the heap needed during recovery. All my documents are sm…

---

## [Kibana import visualization fails - 7.8 to 7.7](https://discuss.elastic.co/t/kibana-import-visualization-fails-7-8-to-7-7/240806)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 6\
**Last updated:** [July 13, 2020, 2:55pm UTC](https://discuss.elastic.co/t/kibana-import-visualization-fails-7-8-to-7-7/240806 "2020-07-13T14:55:33Z")

</div>

is there a bug. I am trying to export import via UI from kibana output is from 7.8 and import is gone a happen to 7.7. it fails with error the "file could not be processed" and when I try same exact ndjson file impo…

---

## [Playlist option in kibana](https://discuss.elastic.co/t/playlist-option-in-kibana/240524)

<div class="topic-metadata">

**Author:** [@muthucse](https://discuss.elastic.co/u/muthucse)\
**Replies:** 5\
**Last updated:** [July 13, 2020, 2:52pm UTC](https://discuss.elastic.co/t/playlist-option-in-kibana/240524 "2020-07-13T14:52:10Z")

</div>

I am looking for a playlist option in Kibana where i can select multiple dashboards to be viewed in big screen with a specified time interval. Is it possible in Kibana ?

---

## [Filebeat system module: multiline events not merged?](https://discuss.elastic.co/t/filebeat-system-module-multiline-events-not-merged/240998)

<div class="topic-metadata">

**Author:** [@pauleccm](https://discuss.elastic.co/u/pauleccm)\
**Replies:** 0\
**Last updated:** [July 13, 2020, 2:30pm UTC](https://discuss.elastic.co/t/filebeat-system-module-multiline-events-not-merged/240998 "2020-07-13T14:30:49Z")

</div>

I have enabled the system module and loaded the ingest pipeline using the filebeat setup command. The resulting events se\]eem a bit odd to me and I wonder if this is current normal behaviour of the module, or abnormal b…

---

## [Kibana showing a missing index pattern (for an index that exists), Index Pattern fails at looking up field mappings](https://discuss.elastic.co/t/kibana-showing-a-missing-index-pattern-for-an-index-that-exists-index-pattern-fails-at-looking-up-field-mappings/240748)

<div class="topic-metadata">

**Author:** [@Mercwri](https://discuss.elastic.co/u/Mercwri)\
**Replies:** 2\
**Last updated:** [July 13, 2020, 2:23pm UTC](https://discuss.elastic.co/t/kibana-showing-a-missing-index-pattern-for-an-index-that-exists-index-pattern-fails-at-looking-up-field-mappings/240748 "2020-07-13T14:23:40Z")

</div>

Running Kibana 7.8.0 on Elasticsearch Service, I have/had an existing filebeat index pattern, today when loading a dashboard that references it I got the following error. Error fetching fields for index pattern filebeat…

---

## [Security.Permissions Exceptions in Elastic.Net.ConnectionConfiguration in wcf dot net applications](https://discuss.elastic.co/t/security-permissions-exceptions-in-elastic-net-connectionconfiguration-in-wcf-dot-net-applications/240990)

<div class="topic-metadata">

**Author:** [@ajvenkatesh4228](https://discuss.elastic.co/u/ajvenkatesh4228)\
**Replies:** 0\
**Last updated:** [July 13, 2020, 2:08pm UTC](https://discuss.elastic.co/t/security-permissions-exceptions-in-elastic-net-connectionconfiguration-in-wcf-dot-net-applications/240990 "2020-07-13T14:08:14Z")

</div>

Hi Folks, Hope, anyone helps on this to get an answer for this : I am working in a wcf dot net applications - I am logging in elastic search, it works in my local windows 10 machine, when hosting the wcf application in …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1332)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1334)
