# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1336 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1337 --- ## [Boostrapping: master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster](https://discuss.elastic.co/t/boostrapping-master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster/238758)
**Author:** [@code\_share](https://discuss.elastic.co/u/code_share)\ **Replies:** 1\ **Last updated:** [July 13, 2020, 12:32am UTC](https://discuss.elastic.co/t/boostrapping-master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster/238758 "2020-07-13T00:32:41Z")
I am trying to bootstrap a 3 node cluster based on this guide: https://www.elastic.co/guide/en/elasticsearch/reference/master/modules-discovery-bootstrap-cluster.html node1 (master) node.name: node01 discovery.zen.pin… --- ## [Debian Elasticsearch - "Unknown analyzer type \[nori\]"](https://discuss.elastic.co/t/debian-elasticsearch-unknown-analyzer-type-nori/240807)
**Author:** [@Ubeta](https://discuss.elastic.co/u/Ubeta)\ **Replies:** 1\ **Last updated:** [July 13, 2020, 12:31am UTC](https://discuss.elastic.co/t/debian-elasticsearch-unknown-analyzer-type-nori/240807 "2020-07-13T00:31:59Z")
Ubuntu에 Elasticsearch 설치 후 nori 분석기를 살치 후 인댁스를 생성 할려고 하는데, nori 분석기를 못 찼는라는 오류 메시지가 뜹니다. 오류 HTTP/1.1 400 Bad Request content-encoding: gzip content-length: 140 content-type: application/json; charset=UTF-8 { "erro… --- ## [RSS Documentation Update](https://discuss.elastic.co/t/rss-documentation-update/240868)
**Author:** [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\ **Replies:** 3\ **Last updated:** [July 13, 2020, 12:14am UTC](https://discuss.elastic.co/t/rss-documentation-update/240868 "2020-07-13T00:14:18Z")
The description is for "exec" plugin and not RSS. --- ## [Additional field for syslog message](https://discuss.elastic.co/t/additional-field-for-syslog-message/237678)
**Author:** [@dghosh](https://discuss.elastic.co/u/dghosh)\ **Replies:** 1\ **Last updated:** [July 12, 2020, 11:38pm UTC](https://discuss.elastic.co/t/additional-field-for-syslog-message/237678 "2020-07-12T23:38:25Z")
can some one help me to create field for below syslog logs urgent. logs below :--- "Thu Jun 18 10:54:37 2020","pro pull / Jurong Singapore","HTTP","go.microsoft.com/fwlink/?LinkID=252669&clcid=0x409","Allowed","General … --- ## [Beats, APM & Logstash auth with aouth or oidc](https://discuss.elastic.co/t/beats-apm-logstash-auth-with-aouth-or-oidc/236588)
**Author:** [@SomeHowChris](https://discuss.elastic.co/u/SomeHowChris)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 10:18pm UTC](https://discuss.elastic.co/t/beats-apm-logstash-auth-with-aouth-or-oidc/236588 "2020-06-10T22:18:47Z")
Greetings all, We are moving towards OAuth on all our applications and so we would like to do the same with logstash, the beats, and apm. Not only to secure compute but also to gain metadata at the service consuming the… --- ## [Setting up a "lab-as-prod": Beats roles, permissions and tutorial!](https://discuss.elastic.co/t/setting-up-a-lab-as-prod-beats-roles-permissions-and-tutorial/236624)
**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\ **Replies:** 0\ **Last updated:** [June 11, 2020, 6:29am UTC](https://discuss.elastic.co/t/setting-up-a-lab-as-prod-beats-roles-permissions-and-tutorial/236624 "2020-06-11T06:29:39Z")
(backtracking after all is done, I'd like to start apologizing for the sheer size of this post, and ask that you bear with me) So, not only I'm trying to build it, but I'm trying to document step-by-step how to do it. … --- ## [Ensuring GDPR compliance](https://discuss.elastic.co/t/ensuring-gdpr-compliance/236912)
**Author:** [@magnalite](https://discuss.elastic.co/u/magnalite)\ **Replies:** 0\ **Last updated:** [June 12, 2020, 2:18pm UTC](https://discuss.elastic.co/t/ensuring-gdpr-compliance/236912 "2020-06-12T14:18:13Z")
We are looking to how to ensure we are GDPR compliant with the handling of our data however this is posing a real issue for us. We collect data of users from another (third party) service and can identify them via their … --- ## [Duplicate everything to syslog](https://discuss.elastic.co/t/duplicate-everything-to-syslog/236926)
**Author:** [@PangolinCyber](https://discuss.elastic.co/u/PangolinCyber)\ **Replies:** 0\ **Last updated:** [June 12, 2020, 5:13pm UTC](https://discuss.elastic.co/t/duplicate-everything-to-syslog/236926 "2020-06-12T17:13:37Z")
I'm trying to put together a system which is intended to tee everything arriving at an ELK system from all input types to an evidence store syslog platform. i.e everything processed by ELK also goes to a syslog in the ra… --- ## [ELK Sizing recommendations for Log monitoring?](https://discuss.elastic.co/t/elk-sizing-recommendations-for-log-monitoring/237020)
**Author:** [@vikas\_mahajan](https://discuss.elastic.co/u/vikas_mahajan)\ **Replies:** 0\ **Last updated:** [June 14, 2020, 11:32am UTC](https://discuss.elastic.co/t/elk-sizing-recommendations-for-log-monitoring/237020 "2020-06-14T11:32:19Z")
Calling out ELK experts to review my design. Do you recommend doubling the no. of shards from 4 to 8 for each index ? One dedicated master node (having 2TB, 256 GB and 16 CPU) will suffice the purpose for managing … --- ## [Best budget minipc for ELK lab](https://discuss.elastic.co/t/best-budget-minipc-for-elk-lab/237636)
**Author:** [@Marat](https://discuss.elastic.co/u/Marat)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 12:46pm UTC](https://discuss.elastic.co/t/best-budget-minipc-for-elk-lab/237636 "2020-06-18T12:46:39Z")
I want to purchase two minipcs like odyssey x86 for setting up Elastic Stack Cluster, would you recommend these machines or there is a better options? Thank you in advance! --- ## [NetMon Freemium et elasticstack](https://discuss.elastic.co/t/netmon-freemium-et-elasticstack/237672)
**Author:** [@oumy](https://discuss.elastic.co/u/oumy)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 4:00pm UTC](https://discuss.elastic.co/t/netmon-freemium-et-elasticstack/237672 "2020-06-18T16:00:37Z")
Hello i was wondering if there is a way to send netmon data to elasticsearch? and how so? thank you --- ## [Synthetic Monitoring](https://discuss.elastic.co/t/synthetic-monitoring/238851)
**Author:** [@ksaha](https://discuss.elastic.co/u/ksaha)\ **Replies:** 0\ **Last updated:** [June 26, 2020, 11:56am UTC](https://discuss.elastic.co/t/synthetic-monitoring/238851 "2020-06-26T11:56:54Z")
Can we do synthetic monitoring using ELK stack? Can anybody please explain, is there any difference between Monitoring using APM in ELK and Synthetic Monitoring? --- ## [GROK pattern not work with OPTIONS Request Method](https://discuss.elastic.co/t/grok-pattern-not-work-with-options-request-method/238867)
**Author:** [@muthucse](https://discuss.elastic.co/u/muthucse)\ **Replies:** 0\ **Last updated:** [June 26, 2020, 1:41pm UTC](https://discuss.elastic.co/t/grok-pattern-not-work-with-options-request-method/238867 "2020-06-26T13:41:49Z")
Grok pattern for OPTIONS http method is not working. Pattern: %{TIMESTAMP\_ISO8601:iis.access.time} %{WORD:iis.access.site\_name} %{WORD:http.request.method} %{URIPATH:url.path} Sample Log: 2020-06-16 14:03:12 API OPTI… --- ## [ELK stack - @timestamp issue](https://discuss.elastic.co/t/elk-stack-timestamp-issue/240620)
**Author:** [@jang](https://discuss.elastic.co/u/jang)\ **Replies:** 1\ **Last updated:** [July 12, 2020, 11:00pm UTC](https://discuss.elastic.co/t/elk-stack-timestamp-issue/240620 "2020-07-12T23:00:59Z")
hello, I am using Filebeat, Logstash, Elasticsearch, and Kibana. I found a problem while checking the data through Kibana. @timestamp data is 9hours slower than local time. Of course, I know that i can change the t… --- ## [Logstash snmp input module gets stuck](https://discuss.elastic.co/t/logstash-snmp-input-module-gets-stuck/240533)
**Author:** [@motox73](https://discuss.elastic.co/u/motox73)\ **Replies:** 0\ **Last updated:** [July 9, 2020, 1:25pm UTC](https://discuss.elastic.co/t/logstash-snmp-input-module-gets-stuck/240533 "2020-07-09T13:25:32Z")
Hello, I'm trying to poll SNMP counters ( from Meraki ) using logstash SNMP input module. Sometimes the input plugin gets stuck for no apparent reason. Eventually the logs show logstash attempting a shutdown, but it nev… --- ## [Index name changed after upgrade to 7.8](https://discuss.elastic.co/t/index-name-changed-after-upgrade-to-7-8/240626)
**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\ **Replies:** 2\ **Last updated:** [July 12, 2020, 10:54pm UTC](https://discuss.elastic.co/t/index-name-changed-after-upgrade-to-7-8/240626 "2020-07-12T22:54:27Z")
I recently upgraded a cluster from 6.8 to 7.8. I had to use the kibana upgrade assistant to reindex all four of my indexes. Well now those indexes have a different name. It was tc\_employees but now it is reindexed-v6-tc\_… --- ## [How to configure elasticsearch (in a PC) to receive connections from a devboard?](https://discuss.elastic.co/t/how-to-configure-elasticsearch-in-a-pc-to-receive-connections-from-a-devboard/240567)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 0\ **Last updated:** [July 9, 2020, 4:33pm UTC](https://discuss.elastic.co/t/how-to-configure-elasticsearch-in-a-pc-to-receive-connections-from-a-devboard/240567 "2020-07-09T16:33:28Z")
This question is related to this other one: I installed a elasticsearch python client in Google Coral devboard (Python Elasticsearch Client — Elasticsearch 8.0.0 documentation) I want to establish the communication be… --- ## [Getting error while installing elastic search on windows](https://discuss.elastic.co/t/getting-error-while-installing-elastic-search-on-windows/240785)
**Author:** [@vedantmehra18](https://discuss.elastic.co/u/vedantmehra18)\ **Replies:** 0\ **Last updated:** [July 11, 2020, 6:53am UTC](https://discuss.elastic.co/t/getting-error-while-installing-elastic-search-on-windows/240785 "2020-07-11T06:53:48Z")
C:\\Elastic\_Stack\\elasticsearch-7.8.0-windows-x86\_64\\elasticsearch-7.8.0\\bin\>elasticsearch.bat future versions of Elasticsearch will require Java 11; your Java version from \[C:\\Program Files\\Java\\jdk1.8.0\_144\\jre\] does n… --- ## [There are continuous failures due to Http:500 internal server error, http:503 service unavailable and timeouts](https://discuss.elastic.co/t/there-are-continuous-failures-due-to-http-500-internal-server-error-http-503-service-unavailable-and-timeouts/240678)
**Author:** [@sasvmware](https://discuss.elastic.co/u/sasvmware)\ **Replies:** 4\ **Last updated:** [July 12, 2020, 10:37pm UTC](https://discuss.elastic.co/t/there-are-continuous-failures-due-to-http-500-internal-server-error-http-503-service-unavailable-and-timeouts/240678 "2020-07-12T22:37:29Z")
There are continuous failures while running 5x load test due to Http:500 internal server error, http:503 service unavailable and timeouts in rest api In logs, we do not find any issue. 3 nodes Memory: 16 GB vCpu : 4 --- ## [AuthorizationException with python API to remote server](https://discuss.elastic.co/t/authorizationexception-with-python-api-to-remote-server/238514)
**Author:** [@yuv\_c](https://discuss.elastic.co/u/yuv_c)\ **Replies:** 5\ **Last updated:** [July 12, 2020, 10:16pm UTC](https://discuss.elastic.co/t/authorizationexception-with-python-api-to-remote-server/238514 "2020-07-12T22:16:07Z")
I am trying to use the elasticsearch python API but I get an AuthorizationException every time I run the query. Here is the code: host = "https:/foo.com/es" client = Elasticsearch(host, api\_key='...MY\_API\_KEY...) re… --- ## ['preserve\_existing' documentation update](https://discuss.elastic.co/t/preserve-existing-documentation-update/240836)
**Author:** [@tworogue](https://discuss.elastic.co/u/tworogue)\ **Replies:** 3\ **Last updated:** [July 12, 2020, 8:00pm UTC](https://discuss.elastic.co/t/preserve-existing-documentation-update/240836 "2020-07-12T20:00:31Z")
Hello. Topic: I have a proposal regarding one piece of documentation: Please check my PR: Update update-settings.asciidoc by tworogue · Pull Request #1 · tworogue/elasticsearch · GitHub Do you agree with it? Some m… --- ## [How to combine/pair multiple events into single event (consider as a single transaction) based on a rule](https://discuss.elastic.co/t/how-to-combine-pair-multiple-events-into-single-event-consider-as-a-single-transaction-based-on-a-rule/240862)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 0\ **Last updated:** [July 12, 2020, 7:56pm UTC](https://discuss.elastic.co/t/how-to-combine-pair-multiple-events-into-single-event-consider-as-a-single-transaction-based-on-a-rule/240862 "2020-07-12T19:56:06Z")
Let's consider below sample events, \_index:windows\_security empId:12345 action:create time:0900 \_index:windows\_security empId:12345 action:delete time:0910 \_index:windows\_security empId:12345 action:created time:150… --- ## [Efficient document structure](https://discuss.elastic.co/t/efficient-document-structure/240760)
**Author:** [@maxheyer](https://discuss.elastic.co/u/maxheyer)\ **Replies:** 3\ **Last updated:** [July 12, 2020, 7:11pm UTC](https://discuss.elastic.co/t/efficient-document-structure/240760 "2020-07-12T19:11:19Z")
Hello, we want to use elastic search for e-commerce statistics. In our web view we have the possibility to filter products by sales, attributes like colors, categories, full text search etc. The result is a table of pr… --- ## [Convert multiline csv data to a single line csv in filter](https://discuss.elastic.co/t/convert-multiline-csv-data-to-a-single-line-csv-in-filter/240741)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 6\ **Last updated:** [July 12, 2020, 4:16pm UTC](https://discuss.elastic.co/t/convert-multiline-csv-data-to-a-single-line-csv-in-filter/240741 "2020-07-12T16:16:24Z")
Hi All I have a csv file, which gives me response in multiline csv, i need convert that in a single line csv, Here is the data "header1","header2","header3" "col1row1","col2row1","col3row1" "col1row2","col2row2","col3… --- ## [Custom Scripted Field Requirement](https://discuss.elastic.co/t/custom-scripted-field-requirement/240841)
**Author:** [@Rebin](https://discuss.elastic.co/u/Rebin)\ **Replies:** 0\ **Last updated:** [July 12, 2020, 1:37pm UTC](https://discuss.elastic.co/t/custom-scripted-field-requirement/240841 "2020-07-12T13:37:27Z")
Dear Team, I have a requirement to capture hourly count. Basically i'm pulling the data from database through logstash and storing in elastic search and want to prepare dashboard in Kibana. The count is pulled in such … --- ## [Logstash manipulate json object before indexing to ES](https://discuss.elastic.co/t/logstash-manipulate-json-object-before-indexing-to-es/240721)
**Author:** [@davehatma](https://discuss.elastic.co/u/davehatma)\ **Replies:** 2\ **Last updated:** [July 12, 2020, 8:46am UTC](https://discuss.elastic.co/t/logstash-manipulate-json-object-before-indexing-to-es/240721 "2020-07-12T08:46:10Z")
A Kafka input plugin is getting messages in json format and being parsed by the json filter. One of the root keys -- transaction\_details -- can contain a very large number of fields that we don't want to flatten into d… --- ## [Master election - got Failed To Commit Cluster State Exception](https://discuss.elastic.co/t/master-election-got-failed-to-commit-cluster-state-exception/240821)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 5\ **Last updated:** [July 12, 2020, 8:22am UTC](https://discuss.elastic.co/t/master-election-got-failed-to-commit-cluster-state-exception/240821 "2020-07-12T08:22:20Z")
We are working with Elastic 7.2.1. Elastic master (node-2) had a long GC pause. \[2020-06-30T07:30:11.778+0000\]\[3665\]\[gc \] GC(248) Pause Young (Allocation Failure) 222M-\>86M(494M) 32547.255ms \[2020-06-30T07:30:11.778+00… --- ## [Failed installing 'elasticsearch-service-x64' service on brand new installation](https://discuss.elastic.co/t/failed-installing-elasticsearch-service-x64-service-on-brand-new-installation/240679)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 1\ **Last updated:** [July 12, 2020, 7:48am UTC](https://discuss.elastic.co/t/failed-installing-elasticsearch-service-x64-service-on-brand-new-installation/240679 "2020-07-12T07:48:04Z")
Hi, I am trying to install elastic as a service. Situation: 3 Nodes. 3 New installations of Elasticsearch 7.7.1. YMLcluster.name: ServiceTest node.name: node1 node.master: true network.host: IPofNode1 http.host: 0.0… --- ## [Run logstash as service giving error](https://discuss.elastic.co/t/run-logstash-as-service-giving-error/240461)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 5\ **Last updated:** [July 12, 2020, 6:17am UTC](https://discuss.elastic.co/t/run-logstash-as-service-giving-error/240461 "2020-07-12T06:17:42Z")
Hi All, I am able to run logstash as command line , but when I try to run it as a services . It is getting restarted after every 6 seconds and no data is getting loaded to elasticsearch I have placed my conf file in et… --- ## [S3 Repository plugin works on Mac/brew but not Ubuntu/apt-get](https://discuss.elastic.co/t/s3-repository-plugin-works-on-mac-brew-but-not-ubuntu-apt-get/240766)
**Author:** [@mooreniemi](https://discuss.elastic.co/u/mooreniemi)\ **Replies:** 3\ **Last updated:** [July 12, 2020, 2:12am UTC](https://discuss.elastic.co/t/s3-repository-plugin-works-on-mac-brew-but-not-ubuntu-apt-get/240766 "2020-07-12T02:12:41Z")
I'm using ES 6.8. I have a snapshot in an S3 bucket. On Mac, using brew installed ES, I was able to successfully restore the snapshot onto my local machine. But I am not able to do the same on Ubuntu. Additionally, the e… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1335) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1337)