# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1431 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1432 --- ## [Template mapping not working](https://discuss.elastic.co/t/template-mapping-not-working/234015)
**Author:** [@psteh](https://discuss.elastic.co/u/psteh)\ **Replies:** 8\ **Last updated:** [May 24, 2020, 3:12am UTC](https://discuss.elastic.co/t/template-mapping-not-working/234015 "2020-05-24T03:12:53Z")
I am streaming logs from AWS CloudWatch to AWS Elasticsearch Service Currently I have template with mappings set as below:- PUT \_template/template { "index\_patterns": \["cwl\*"\], "order" : 0, "settings": { "num… --- ## [Take (length of the aliases field) out of score calculation](https://discuss.elastic.co/t/take-length-of-the-aliases-field-out-of-score-calculation/233250)
**Author:** [@Muhammad\_Vakili](https://discuss.elastic.co/u/Muhammad_Vakili)\ **Replies:** 1\ **Last updated:** [May 23, 2020, 9:46pm UTC](https://discuss.elastic.co/t/take-length-of-the-aliases-field-out-of-score-calculation/233250 "2020-05-23T21:46:29Z")
Suppose we have a documents of people with their name and array of aliases like this: { name: "Christian", aliases: \["נוצרי", "کریستیان" \] } Suppose I have a document with 10 aliases and another one with 2 aliase… --- ## [Unable to install elastic search using zip for windows](https://discuss.elastic.co/t/unable-to-install-elastic-search-using-zip-for-windows/233656)
**Author:** [@saranyagupta05](https://discuss.elastic.co/u/saranyagupta05)\ **Replies:** 2\ **Last updated:** [May 23, 2020, 9:26pm UTC](https://discuss.elastic.co/t/unable-to-install-elastic-search-using-zip-for-windows/233656 "2020-05-23T21:26:45Z")
I am getting the error-\> Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. Error: Could not find or load main class AppDa… --- ## [Security Option for Kibana](https://discuss.elastic.co/t/security-option-for-kibana/233874)
**Author:** [@Devops2](https://discuss.elastic.co/u/Devops2)\ **Replies:** 1\ **Last updated:** [May 23, 2020, 9:16pm UTC](https://discuss.elastic.co/t/security-option-for-kibana/233874 "2020-05-23T21:16:47Z")
I'm using the free version of ELK stack. Is it necessary for ELK stack to be paid version to enable the authentication for Kibana dashboard. --- ## [I cannot change kibana to port 443](https://discuss.elastic.co/t/i-cannot-change-kibana-to-port-443/234013)
**Author:** [@wspoon](https://discuss.elastic.co/u/wspoon)\ **Replies:** 3\ **Last updated:** [May 23, 2020, 9:10pm UTC](https://discuss.elastic.co/t/i-cannot-change-kibana-to-port-443/234013 "2020-05-23T21:10:22Z")
I am trying to have kibana on port 443 so I can use a domain name to access from the internet. Whenever the port is 5601 kibana starts correctly, but when I change the port to 443 the kibana process fails with the follo… --- ## [Start 1 node on only 3 node cluster](https://discuss.elastic.co/t/start-1-node-on-only-3-node-cluster/233947)
**Author:** [@Vinicius.Moreno](https://discuss.elastic.co/u/Vinicius.Moreno)\ **Replies:** 1\ **Last updated:** [May 23, 2020, 8:33pm UTC](https://discuss.elastic.co/t/start-1-node-on-only-3-node-cluster/233947 "2020-05-23T20:33:39Z")
I have 3 node master cluster, but 2 was lost (hardware failure). How I can bring up the last node forcing be a master? I have that message: master not discovered or elected yet, an election requires at least 2 nodes. b… --- ## [Combining Data in Multiple CSVs to Single Index](https://discuss.elastic.co/t/combining-data-in-multiple-csvs-to-single-index/233999)
**Author:** [@rukmalf](https://discuss.elastic.co/u/rukmalf)\ **Replies:** 1\ **Last updated:** [May 23, 2020, 8:14pm UTC](https://discuss.elastic.co/t/combining-data-in-multiple-csvs-to-single-index/233999 "2020-05-23T20:14:51Z")
Hi, I have 3 CSVs which I use to create 3 indexes. But the problem is the 1st and 3rd Indexes are connected via the 2nd Index (refer to the image) End of the day I need to get a search result like A1, A2, A3,B1,B2,B3.… --- ## [\[2020-05-22T09:04:47,691\]\[WARN \]\[logstash.outputs.amazonelasticsearch\] Could not index event to Elasticsearch](https://discuss.elastic.co/t/2020-05-22t0947-691-warn-logstash-outputs-amazonelasticsearch-could-not-index-event-to-elasticsearch/234011)
**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\ **Replies:** 1\ **Last updated:** [May 23, 2020, 7:45pm UTC](https://discuss.elastic.co/t/2020-05-22t0947-691-warn-logstash-outputs-amazonelasticsearch-could-not-index-event-to-elasticsearch/234011 "2020-05-23T19:45:49Z")
\[2020-05-22T09:04:47,691\]\[WARN \]\[logstash.outputs.amazonelasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\> \["index", {:\_id=\>nil, :\_index=\>"\*\*\*\*-2020.05.22", :\_type=\>"\_doc", :\_routing=\>nil}… --- ## [How to configure different indexes in logstash](https://discuss.elastic.co/t/how-to-configure-different-indexes-in-logstash/58665)
**Author:** [@rocky4bmw](https://discuss.elastic.co/u/rocky4bmw)\ **Replies:** 37\ **Last updated:** [May 23, 2020, 3:07pm UTC](https://discuss.elastic.co/t/how-to-configure-different-indexes-in-logstash/58665 "2020-05-23T15:07:11Z")
Hi Team, Can anyone help me in confugiring multiple indexes so that logs are shipped to different indices based on the environment type(PROD,SIT & DEV). Currently my stepup is working with default filebeat-\* index L… --- ## [Getting Results Referencing Multiple Indexs at Once](https://discuss.elastic.co/t/getting-results-referencing-multiple-indexs-at-once/233981)
**Author:** [@rukmalf](https://discuss.elastic.co/u/rukmalf)\ **Replies:** 3\ **Last updated:** [May 23, 2020, 1:46pm UTC](https://discuss.elastic.co/t/getting-results-referencing-multiple-indexs-at-once/233981 "2020-05-23T13:46:42Z")
Hi, I have 3 CSVs which I use to create 3 indexes. But the problem is the 1st and 3rd Indexes are connected via the 2nd Index (refer to the image) . My final result should be A1, A2, A3,B1,B2,B3. How can I get this thi… --- ## [Es query slow with simple filter, and profile didn't show it](https://discuss.elastic.co/t/es-query-slow-with-simple-filter-and-profile-didnt-show-it/231950)
**Author:** [@weiwang\_zhang](https://discuss.elastic.co/u/weiwang_zhang)\ **Replies:** 6\ **Last updated:** [May 23, 2020, 2:01am UTC](https://discuss.elastic.co/t/es-query-slow-with-simple-filter-and-profile-didnt-show-it/231950 "2020-05-23T02:01:42Z")
An ES version of 7.6.0, with 1 million docs , 1.76Gi on size. I found a query slow with only a simple term filter in it. (about 2s to excute) The query body is just as below { "query": { "bool": { "filter… --- ## [Metrics UI integration for custom indices](https://discuss.elastic.co/t/metrics-ui-integration-for-custom-indices/233044)
**Author:** [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\ **Replies:** 5\ **Last updated:** [May 23, 2020, 2:36am UTC](https://discuss.elastic.co/t/metrics-ui-integration-for-custom-indices/233044 "2020-05-23T02:36:22Z")
Hi, Is there a documentation about which ECS fields that I will need to populate in order to integrate with the Kibana Metrics UI to be shown in the same way as metrics coming from Metricbeat? I need to integrate the m… --- ## [ES 7.7 Scripted metric stopped working when cross cluster search is used](https://discuss.elastic.co/t/es-7-7-scripted-metric-stopped-working-when-cross-cluster-search-is-used/233972)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 0\ **Last updated:** [May 23, 2020, 1:35am UTC](https://discuss.elastic.co/t/es-7-7-scripted-metric-stopped-working-when-cross-cluster-search-is-used/233972 "2020-05-23T01:35:10Z")
Hi team, I have a simple cross cluster search query using scripted metric aggregation that used to work in version 6.8. After upgrading all the clusters from 6.8 to 7.7, the cross cluster query does not error out but r… --- ## [Types removal warning](https://discuss.elastic.co/t/types-removal-warning/233916)
**Author:** [@irishwill2008](https://discuss.elastic.co/u/irishwill2008)\ **Replies:** 9\ **Last updated:** [May 22, 2020, 9:14pm UTC](https://discuss.elastic.co/t/types-removal-warning/233916 "2020-05-22T21:14:51Z")
Hey guys, Inside "elasticsearch\_deprecation.log" i see the odd warning stating: \[types removal\] Specifying types in bulk requests is deprecated.. I want to remove this, i am running my Elastic Stack on v7.7. I looked o… --- ## [Indexing using FsCrawler - remote windows server](https://discuss.elastic.co/t/indexing-using-fscrawler-remote-windows-server/233948)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 1\ **Last updated:** [May 22, 2020, 7:59pm UTC](https://discuss.elastic.co/t/indexing-using-fscrawler-remote-windows-server/233948 "2020-05-22T19:59:45Z")
Hi, I have remote windows server with files, and I want to run FSCrawler from my Elasticsearch server. if it is linux server, in settings file we would usually give the credentials and protocol as ssh under server. but… --- ## [Geo\_point type error in visualization](https://discuss.elastic.co/t/geo-point-type-error-in-visualization/233273)
**Author:** [@Ramalakshmi](https://discuss.elastic.co/u/Ramalakshmi)\ **Replies:** 6\ **Last updated:** [May 22, 2020, 7:43pm UTC](https://discuss.elastic.co/t/geo-point-type-error-in-visualization/233273 "2020-05-22T19:43:35Z")
Hi, I am getting error for geo\_point type in kibana visualization because after every roll over of the index the destination.geo.location field changed to text type.(example roll over index name is my\_index -000005) PU… --- ## [Geoip.location.lat and geoip.location.lon showing as number, cannot convert to geoip type](https://discuss.elastic.co/t/geoip-location-lat-and-geoip-location-lon-showing-as-number-cannot-convert-to-geoip-type/233475)
**Author:** [@mostafa\_kamal](https://discuss.elastic.co/u/mostafa_kamal)\ **Replies:** 10\ **Last updated:** [May 22, 2020, 6:22pm UTC](https://discuss.elastic.co/t/geoip-location-lat-and-geoip-location-lon-showing-as-number-cannot-convert-to-geoip-type/233475 "2020-05-22T18:22:10Z")
I actually want to make a user-location based map in kibana, but I cannot do that because geoip.location.lat and geoip.location.lon showing as number, I cannot convert to geoip type. this is my logstash conf filter { … --- ## [Kibana TLS/SSL fails on Docker Swarm](https://discuss.elastic.co/t/kibana-tls-ssl-fails-on-docker-swarm/233938)
**Author:** [@msaik3](https://discuss.elastic.co/u/msaik3)\ **Replies:** 0\ **Last updated:** [May 22, 2020, 5:40pm UTC](https://discuss.elastic.co/t/kibana-tls-ssl-fails-on-docker-swarm/233938 "2020-05-22T17:40:07Z")
Hi, I have deployed 3 node Elastic & Kibana on a 3 Node Docker Swarm. I could see the Cluster is up & running with 3 node elastic & 1 Kibana. Now, I'm trying to Provide Elasticsearch & Kibana with TLS/SSL authenticati… --- ## [Unassigned replica](https://discuss.elastic.co/t/unassigned-replica/233794)
**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\ **Replies:** 8\ **Last updated:** [May 22, 2020, 5:16pm UTC](https://discuss.elastic.co/t/unassigned-replica/233794 "2020-05-22T17:16:56Z")
Hi, I have unassigned replicas in my cluster. I try allocating them manually but I can't: POST \_cluster/reroute?pretty { "commands": \[ { "allocate\_replica": { "index": "apm-7.6.2-transaction-2020.05.… --- ## [Extracting data from multiline error message](https://discuss.elastic.co/t/extracting-data-from-multiline-error-message/233935)
**Author:** [@guas5](https://discuss.elastic.co/u/guas5)\ **Replies:** 0\ **Last updated:** [May 22, 2020, 4:59pm UTC](https://discuss.elastic.co/t/extracting-data-from-multiline-error-message/233935 "2020-05-22T16:59:22Z")
Hello everyone, would be very gratefull for a hint. I have a multiline message and I need to extract some info from multiline error (Producer.scala:77): one column Producer.scala and the next one is number of error (77)… --- ## [¿Como puedo extraer información de un windows server a un ubuntu server?](https://discuss.elastic.co/t/como-puedo-extraer-informacion-de-un-windows-server-a-un-ubuntu-server/232881)
**Author:** [@Serge2020](https://discuss.elastic.co/u/Serge2020)\ **Replies:** 4\ **Last updated:** [May 22, 2020, 4:53pm UTC](https://discuss.elastic.co/t/como-puedo-extraer-informacion-de-un-windows-server-a-un-ubuntu-server/232881 "2020-05-22T16:53:37Z")
Hola a todos! Hace un mes que me he introducido a este gran mudo de elasticsearch y por supuesto estoy en pañales con el tema, pero sin duda me esta gustando muchísimo. El caso es que tengo un problema el cual no he pod… --- ## [Pie chart: display filtered value only if threshold is reached](https://discuss.elastic.co/t/pie-chart-display-filtered-value-only-if-threshold-is-reached/233924)
**Author:** [@hag](https://discuss.elastic.co/u/hag)\ **Replies:** 0\ **Last updated:** [May 22, 2020, 3:36pm UTC](https://discuss.elastic.co/t/pie-chart-display-filtered-value-only-if-threshold-is-reached/233924 "2020-05-22T15:36:57Z")
Hi, I would like to have filtered values in a pie chart that are only displayed when a minimum counter is reached. Something like display only if something always bad: minimumcount=1 something normally bad: minimumco… --- ## [Using XPath to Create Field Names](https://discuss.elastic.co/t/using-xpath-to-create-field-names/233892)
**Author:** [@Jordan\_Muncaster](https://discuss.elastic.co/u/Jordan_Muncaster)\ **Replies:** 4\ **Last updated:** [May 22, 2020, 3:28pm UTC](https://discuss.elastic.co/t/using-xpath-to-create-field-names/233892 "2020-05-22T15:28:05Z")
Trying to use xpath to create the field name in a filter. filter { xml { source =\> "message" store\_xml =\> false xpath =\> \[ "//XmlTag/text()", "//XmlTag/@name" … --- ## [RHEL Installation fails: No such file or directory: '/elastic\_cloud\_apps/bootstrap-initiator/bootstrap\_initiator/prerequisite/tmp](https://discuss.elastic.co/t/rhel-installation-fails-no-such-file-or-directory-elastic-cloud-apps-bootstrap-initiator-bootstrap-initiator-prerequisite-tmp/231011)
**Author:** [@adam.gantt\_va](https://discuss.elastic.co/u/adam.gantt_va)\ **Replies:** 7\ **Last updated:** [May 22, 2020, 3:14pm UTC](https://discuss.elastic.co/t/rhel-installation-fails-no-such-file-or-directory-elastic-cloud-apps-bootstrap-initiator-bootstrap-initiator-prerequisite-tmp/231011 "2020-05-22T15:14:27Z")
Configured RHEL and installed Docker following the steps from https://www.elastic.co/guide/en/cloud-enterprise/current/ece-configure-hosts-rhel-centos.html Performed steps for installing offline https://www.elastic.co/g… --- ## [Convert multiline csv data to single line during filter](https://discuss.elastic.co/t/convert-multiline-csv-data-to-single-line-during-filter/233741)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 2\ **Last updated:** [May 22, 2020, 2:07pm UTC](https://discuss.elastic.co/t/convert-multiline-csv-data-to-single-line-during-filter/233741 "2020-05-22T14:07:12Z")
HI All Currently after input i get data in this format { "csvdata" : "col1","col2","col3" } { "csvdata" : "col1row1","col2row1","col3row1" } { "csvdata" : "col1row2","col2row2","col3row2" } How should i club this muti… --- ## [Transport.publish\_address warning](https://discuss.elastic.co/t/transport-publish-address-warning/233914)
**Author:** [@irishwill2008](https://discuss.elastic.co/u/irishwill2008)\ **Replies:** 0\ **Last updated:** [May 22, 2020, 2:12pm UTC](https://discuss.elastic.co/t/transport-publish-address-warning/233914 "2020-05-22T14:12:49Z")
Hey lads, I am looking through ElasticSearch Logs and inside: elasticsearch\_deprecation.log i see loads of records populating with the following warning: transport.publish\_address was printed as \[ip:port\] instead of \[h… --- ## [How JDBC input get data without schedule?](https://discuss.elastic.co/t/how-jdbc-input-get-data-without-schedule/233790)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [May 22, 2020, 2:12pm UTC](https://discuss.elastic.co/t/how-jdbc-input-get-data-without-schedule/233790 "2020-05-22T14:12:17Z")
A coworker told me that you can ommit the schedule in the JDBC input, and still will get data, if this is true, how and when the SQL query get triggered? does logtash check for changes in the DB periodically? --- ## [How to edit logrotate for logstash?](https://discuss.elastic.co/t/how-to-edit-logrotate-for-logstash/233905)
**Author:** [@aerodynamic](https://discuss.elastic.co/u/aerodynamic)\ **Replies:** 0\ **Last updated:** [May 22, 2020, 1:27pm UTC](https://discuss.elastic.co/t/how-to-edit-logrotate-for-logstash/233905 "2020-05-22T13:27:41Z")
Hello, I'm trying to increase the log retention for logstashs logs. I'm unsure where I'm supposed to edit these settings. Is it it the log4j2 file? Or is it somewhere in /etc/logrotate? --- ## [GROK Pattern not working with IIS Logs](https://discuss.elastic.co/t/grok-pattern-not-working-with-iis-logs/233851)
**Author:** [@muthucse](https://discuss.elastic.co/u/muthucse)\ **Replies:** 1\ **Last updated:** [May 22, 2020, 12:32pm UTC](https://discuss.elastic.co/t/grok-pattern-not-working-with-iis-logs/233851 "2020-05-22T12:32:43Z")
Hi , Applying the below grok pattern is throwing error. How to parse the \[object+object\] at end of the url ? Sample Pattern: %{TIMESTAMP\_ISO8601:iis.access.time} %{WORD:iis.access.site\_name} %{WORD:http.request.method… --- ## [Multiple SNMP Inputs or Pipelines](https://discuss.elastic.co/t/multiple-snmp-inputs-or-pipelines/233858)
**Author:** [@Offi83](https://discuss.elastic.co/u/Offi83)\ **Replies:** 1\ **Last updated:** [May 22, 2020, 12:20pm UTC](https://discuss.elastic.co/t/multiple-snmp-inputs-or-pipelines/233858 "2020-05-22T12:20:03Z")
Hi, I need to use multiple SNMP Inputs but always running into the same problem. Whether I use one pipeline with two inputs or two pipelines with one input - I always get an error for one input like: \[2020-05-22T08:12:… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1430) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1432)