# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1460 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1461 --- ## [Dateparse failure problem](https://discuss.elastic.co/t/dateparse-failure-problem/231828)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 2\ **Last updated:** [May 9, 2020, 1:31pm UTC](https://discuss.elastic.co/t/dateparse-failure-problem/231828 "2020-05-09T13:31:17Z")
I use logsth and filebeat for ingestion in elastic I have ingestion is OK but i have \_dateparsefailure input { beats { port =\> "5044" } } filter { csv { separator =\> ";" colu… --- ## [After enabling xpack in ES how do i login in Kibana](https://discuss.elastic.co/t/after-enabling-xpack-in-es-how-do-i-login-in-kibana/231530)
**Author:** [@persepherone](https://discuss.elastic.co/u/persepherone)\ **Replies:** 6\ **Last updated:** [May 9, 2020, 1:04pm UTC](https://discuss.elastic.co/t/after-enabling-xpack-in-es-how-do-i-login-in-kibana/231530 "2020-05-09T13:04:32Z")
I have version 7.6 of the ELK stack After enabling Xpack in ES and providing passwords to the elasticsearch-setup-passwords.bat file . Now i added one of the passwords to the kibana.yml file(to connect to ES). Now, kiba… --- ## [Not sure how to enable painless regex](https://discuss.elastic.co/t/not-sure-how-to-enable-painless-regex/231806)
**Author:** [@skazan](https://discuss.elastic.co/u/skazan)\ **Replies:** 2\ **Last updated:** [May 9, 2020, 12:00pm UTC](https://discuss.elastic.co/t/not-sure-how-to-enable-painless-regex/231806 "2020-05-09T12:00:33Z")
Hi, I want to enable regex for painless script as it is not enabled by default and hence my scripted field is failing to create. I added "script.painless.regex.enabled" under env section of elasticsearch.yaml file (plea… --- ## [Kibana warning on control visualization: "Terms list might be incomplete ..."](https://discuss.elastic.co/t/kibana-warning-on-control-visualization-terms-list-might-be-incomplete/228338)
**Author:** [@tomj](https://discuss.elastic.co/u/tomj)\ **Replies:** 5\ **Last updated:** [May 9, 2020, 11:47am UTC](https://discuss.elastic.co/t/kibana-warning-on-control-visualization-terms-list-might-be-incomplete/228338 "2020-05-09T11:47:23Z")
Using Elastic Cloud with 7.6.2 and Kibana 7.6.2. When opening any control visualization or a dashboard which uses the control visualization, I get the warning below. The example cited here has exactly two terms, not do… --- ## [Can be elasticsearch use to storage permanet data?](https://discuss.elastic.co/t/can-be-elasticsearch-use-to-storage-permanet-data/231821)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 2\ **Last updated:** [May 9, 2020, 11:30am UTC](https://discuss.elastic.co/t/can-be-elasticsearch-use-to-storage-permanet-data/231821 "2020-05-09T11:30:51Z")
Hello all, i am wondering if elasticsearch can be use to register data for ever (basic version), i mean i have several python processes that get data from different API and generate a custom document that then is indexe… --- ## [Unable to run ElasticMR job](https://discuss.elastic.co/t/unable-to-run-elasticmr-job/231830)
**Author:** [@vkg0312](https://discuss.elastic.co/u/vkg0312)\ **Replies:** 0\ **Last updated:** [May 9, 2020, 10:31am UTC](https://discuss.elastic.co/t/unable-to-run-elasticmr-job/231830 "2020-05-09T10:31:57Z")
While running a elastic mr job facing HttpConnectionManger not found: Got the below error Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/commons/httpclient/HttpConnectionManager at org.elasticsea… --- ## [Terms list is incomplete because the request is taking too long in controls visualization](https://discuss.elastic.co/t/terms-list-is-incomplete-because-the-request-is-taking-too-long-in-controls-visualization/231282)
**Author:** [@Jaishree\_Pal](https://discuss.elastic.co/u/Jaishree_Pal)\ **Replies:** 8\ **Last updated:** [May 9, 2020, 8:54am UTC](https://discuss.elastic.co/t/terms-list-is-incomplete-because-the-request-is-taking-too-long-in-controls-visualization/231282 "2020-05-09T08:54:49Z")
I was trying to use controls for my visualizations, but it does not load all the values from the selected field. The list doesn't even show half of them. I've tried increasing the kibana.autocompleteTerminateAfter and k… --- ## [Curl: (6) Could not resolve host: quickstart-es-http” error](https://discuss.elastic.co/t/curl-6-could-not-resolve-host-quickstart-es-http-error/229328)
**Author:** [@ubiquitousdude](https://discuss.elastic.co/u/ubiquitousdude)\ **Replies:** 1\ **Last updated:** [May 9, 2020, 8:47am UTC](https://discuss.elastic.co/t/curl-6-could-not-resolve-host-quickstart-es-http-error/229328 "2020-05-09T08:47:39Z")
Hi, I'm trying to follow the article here for deploying Elastic Cloud on Kubernetes: https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-quickstart.html But I get an error when requesting ElasticSearch endpoint i… --- ## [I've setup transport and http layer security but my two nodes can't detect eachother?](https://discuss.elastic.co/t/ive-setup-transport-and-http-layer-security-but-my-two-nodes-cant-detect-eachother/231808)
**Author:** [@syost](https://discuss.elastic.co/u/syost)\ **Replies:** 5\ **Last updated:** [May 9, 2020, 8:40am UTC](https://discuss.elastic.co/t/ive-setup-transport-and-http-layer-security-but-my-two-nodes-cant-detect-eachother/231808 "2020-05-09T08:40:16Z")
I'm trying to secure my cluster through the tutorial in the docs. I have two EC2 instances running. I have installed elasticsearch on both of them. I've setup transport layer and http layer security. I have started the e… --- ## [Unique index for each user](https://discuss.elastic.co/t/unique-index-for-each-user/231820)
**Author:** [@JavaDeveloper](https://discuss.elastic.co/u/JavaDeveloper)\ **Replies:** 4\ **Last updated:** [May 9, 2020, 8:12am UTC](https://discuss.elastic.co/t/unique-index-for-each-user/231820 "2020-05-09T08:12:29Z")
Hi everyone. I'm sending my application's logs to logstash as json and I want to save them in elasticsearch by different indices. In fact, I want to save logs of each user in a unique index that is equal to user key in… --- ## [Macro for Beats version?](https://discuss.elastic.co/t/macro-for-beats-version/231822)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 0\ **Last updated:** [May 9, 2020, 7:47am UTC](https://discuss.elastic.co/t/macro-for-beats-version/231822 "2020-05-09T07:47:37Z")
Hello, As I'm putting some stuff, such as dashboards in directories containing the version, it would be useful if I could use some sort of macro for this. For this a Beat would need to be aware of it's own version. The… --- ## [How to set the property on POCO for ElasticSearch NEST API to serialize it correctly](https://discuss.elastic.co/t/how-to-set-the-property-on-poco-for-elasticsearch-nest-api-to-serialize-it-correctly/231745)
**Author:** [@itsbalur](https://discuss.elastic.co/u/itsbalur)\ **Replies:** 2\ **Last updated:** [May 9, 2020, 5:32am UTC](https://discuss.elastic.co/t/how-to-set-the-property-on-poco-for-elasticsearch-nest-api-to-serialize-it-correctly/231745 "2020-05-09T05:32:40Z")
I have the below POCO for ElasticSearch response public PublicationInfo PublicationInfo { get; } where the PublicationInfo is defined as below public class PublicationInfo { public string Issn { get; } … --- ## [VMWare Horizon Syslog](https://discuss.elastic.co/t/vmware-horizon-syslog/231752)
**Author:** [@ntwrk80](https://discuss.elastic.co/u/ntwrk80)\ **Replies:** 3\ **Last updated:** [May 9, 2020, 5:03am UTC](https://discuss.elastic.co/t/vmware-horizon-syslog/231752 "2020-05-09T05:03:30Z")
I'm new to logstash and of course one of the first log sources I try to bring in is a weird one. The server is a VMWare Horizon ID server and it's sending some very weird timestamps. 2020.05.129 12:05:360 \[hc\] INFO: pas… --- ## [Index restoration from snapshot is taking a lot of time in 7.2.0 ES](https://discuss.elastic.co/t/index-restoration-from-snapshot-is-taking-a-lot-of-time-in-7-2-0-es/227184)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 19\ **Last updated:** [May 8, 2020, 8:32am UTC](https://discuss.elastic.co/t/index-restoration-from-snapshot-is-taking-a-lot-of-time-in-7-2-0-es/227184 "2020-05-08T08:32:34Z")
Elasticsearch version ( bin/elasticsearch --version ): 7.2.0 Plugins installed : JVM version ( java -version ): JDK 12 (bundled) OS version ( uname -a if on a Unix-like system): Ubuntu 14.04.5 LTS This is in ref… --- ## [FieldData or Nested optimization - Discuss](https://discuss.elastic.co/t/fielddata-or-nested-optimization-discuss/231768)
**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\ **Replies:** 1\ **Last updated:** [May 9, 2020, 3:44am UTC](https://discuss.elastic.co/t/fielddata-or-nested-optimization-discuss/231768 "2020-05-09T03:44:06Z")
Hi guys, I find myself making some changes to an old scrits and I have the doubt that it would be more optimal if I continue using ' fielddata ' or ' nested ' that is to say the scripts do the searches or aggregations fr… --- ## [When indexing a repository of files (using fsCrawler or genearlly) what happens under the hood?](https://discuss.elastic.co/t/when-indexing-a-repository-of-files-using-fscrawler-or-genearlly-what-happens-under-the-hood/230885)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 3\ **Last updated:** [May 9, 2020, 3:35am UTC](https://discuss.elastic.co/t/when-indexing-a-repository-of-files-using-fscrawler-or-genearlly-what-happens-under-the-hood/230885 "2020-05-09T03:35:32Z")
This might seem silly, but What happens when I index files in a repository? just want to elaborate my question here.. I have around 20GB of files, when I indexed them using fsCrawler it created an index of size 56mb. … --- ## [How to avoid logstash elasticsearch output ilm\_rollover\_alias overwriting the index prefix](https://discuss.elastic.co/t/how-to-avoid-logstash-elasticsearch-output-ilm-rollover-alias-overwriting-the-index-prefix/231444)
**Author:** [@Louis\_Zhang](https://discuss.elastic.co/u/Louis_Zhang)\ **Replies:** 4\ **Last updated:** [May 9, 2020, 1:09am UTC](https://discuss.elastic.co/t/how-to-avoid-logstash-elasticsearch-output-ilm-rollover-alias-overwriting-the-index-prefix/231444 "2020-05-09T01:09:34Z")
I expecting to get index mobile-2020.05.06-000001 with alias 'streamdata-alias', but the logstash creates index streamdata-alias-2020.05.06-000001, is the a bug? Alias and index name are 2 tings, why they have to be sam… --- ## [Fuzziness with best\_fields query not working as expected](https://discuss.elastic.co/t/fuzziness-with-best-fields-query-not-working-as-expected/231803)
**Author:** [@gideongrossman](https://discuss.elastic.co/u/gideongrossman)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 9:25pm UTC](https://discuss.elastic.co/t/fuzziness-with-best-fields-query-not-working-as-expected/231803 "2020-05-08T21:25:20Z")
I am running a multimatch best\_fields query and the fuzziness parameter is not operating as I expect. I am using a very small simple index to test. The index contains two documents. { "\_index": "contacts\_4", "\_… --- ## [How to get top distinct users that reply to a specific user?](https://discuss.elastic.co/t/how-to-get-top-distinct-users-that-reply-to-a-specific-user/229726)
**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\ **Replies:** 3\ **Last updated:** [May 8, 2020, 8:52pm UTC](https://discuss.elastic.co/t/how-to-get-top-distinct-users-that-reply-to-a-specific-user/229726 "2020-05-08T20:52:57Z")
I'm curious what combination of aggregations would be best for the following use-case. I would like to see the top users (percentage) that have replied to a collection of original tweets made by a user. For example, the… --- ## [Enriching Data In SQL (Citrix Monitor Logs)](https://discuss.elastic.co/t/enriching-data-in-sql-citrix-monitor-logs/231780)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [May 8, 2020, 8:50pm UTC](https://discuss.elastic.co/t/enriching-data-in-sql-citrix-monitor-logs/231780 "2020-05-08T20:50:55Z")
I was tasked with pulling logs from Citrix's XenDesktops monitor API. The monitor API seems to be a middleman that converts requests into SQL queries. For example, hitting the API endpoint sessions, gives me everything… --- ## [Was the icu\_tokenizer renamed?](https://discuss.elastic.co/t/was-the-icu-tokenizer-renamed/231798)
**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\ **Replies:** 1\ **Last updated:** [May 8, 2020, 8:40pm UTC](https://discuss.elastic.co/t/was-the-icu-tokenizer-renamed/231798 "2020-05-08T20:40:25Z")
I'm getting the following error after performing: (I have installed the analyzer-icu plugin under ES 7.6.x) curl -H "content-type: application/json" -XPUT localhost:9200/icu\_sample -d @icu\_tokenizer icu\_tokenizer file: … --- ## [How to specify mapping with both dynamic template and \_size enabled](https://discuss.elastic.co/t/how-to-specify-mapping-with-both-dynamic-template-and-size-enabled/231443)
**Author:** [@plm](https://discuss.elastic.co/u/plm)\ **Replies:** 2\ **Last updated:** [May 8, 2020, 8:20pm UTC](https://discuss.elastic.co/t/how-to-specify-mapping-with-both-dynamic-template-and-size-enabled/231443 "2020-05-08T20:20:09Z")
Hi, I am trying to create an index template that includes both dynamic templates as well as enabling the \_size field. Here is what I am passing to the High Level Rest API PutIndexTemplateRequest templateIndexRequest =… --- ## [Search term with default field](https://discuss.elastic.co/t/search-term-with-default-field/231790)
**Author:** [@Attila816](https://discuss.elastic.co/u/Attila816)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 7:49pm UTC](https://discuss.elastic.co/t/search-term-with-default-field/231790 "2020-05-08T19:49:34Z")
Hi, I would like to set a default field for my index, so that when I would like to search for a term I don't need to specify the field in which I don't know how can I specify programmatically the "default field" to sear… --- ## [Calculated fields](https://discuss.elastic.co/t/calculated-fields/231773)
**Author:** [@derekmizak](https://discuss.elastic.co/u/derekmizak)\ **Replies:** 2\ **Last updated:** [May 8, 2020, 7:18pm UTC](https://discuss.elastic.co/t/calculated-fields/231773 "2020-05-08T19:18:08Z")
Hi, I have a log which looks more less like this: 23/03/2020 8:15, mary, pc1154, SessionStarted, SessionID 1, Tools3 23/03/2020 9:00, john, pc2345, SessionStarted, SessionID 2, Apps1 23/03/2020 9:10, SessionID 1, Sessi… --- ## [Logstash http output user password](https://discuss.elastic.co/t/logstash-http-output-user-password/231525)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 9\ **Last updated:** [May 8, 2020, 7:11pm UTC](https://discuss.elastic.co/t/logstash-http-output-user-password/231525 "2020-05-08T19:11:53Z")
I am receiving log data from TCP and sending it to a https url as json using logstash. Here is my configuration input { tcp { port =\> 8443 codec =\> json\_lines { charset =\> CP1252 } } } output { http { format=\>… --- ## [Copy fields from latest doc in Transforms](https://discuss.elastic.co/t/copy-fields-from-latest-doc-in-transforms/231784)
**Author:** [@xbeumala](https://discuss.elastic.co/u/xbeumala)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 7:04pm UTC](https://discuss.elastic.co/t/copy-fields-from-latest-doc-in-transforms/231784 "2020-05-08T19:04:37Z")
Hi all, I have an analytics system and for every user action I log an event. The event contains event specific but also session level data. I've created a transform to create a user centric entity. on the transform I w… --- ## [Как понять видит ли filebeat логи docker](https://discuss.elastic.co/t/filebeat-docker/231704)
**Author:** [@111333](https://discuss.elastic.co/u/111333)\ **Replies:** 20\ **Last updated:** [May 8, 2020, 6:51pm UTC](https://discuss.elastic.co/t/filebeat-docker/231704 "2020-05-08T18:51:17Z")
Пытаюсь запустить связку filebeat - logstash - elasticsearch -kibana в докер-контейнерах через docker-compose. Само по себе вроде все запускается и работает, но логи не доходят. Такое ощущение, что уже на первом этапе fi… --- ## [Transport client keeps disconnecting with general node connection failure](https://discuss.elastic.co/t/transport-client-keeps-disconnecting-with-general-node-connection-failure/231774)
**Author:** [@kayshu](https://discuss.elastic.co/u/kayshu)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 4:37pm UTC](https://discuss.elastic.co/t/transport-client-keeps-disconnecting-with-general-node-connection-failure/231774 "2020-05-08T16:37:49Z")
Hi, In my internal single node setup, It works fine but often I am seeing transport client getting disconnected from the ES Node with general node connection failure\]; nested: IllegalStateException\[handshake failed\]; n… --- ## [Kibana enhanced-table add plugin error "EACCES: permission denied"](https://discuss.elastic.co/t/kibana-enhanced-table-add-plugin-error-eacces-permission-denied/231778)
**Author:** [@anilpraneeth](https://discuss.elastic.co/u/anilpraneeth)\ **Replies:** 1\ **Last updated:** [May 8, 2020, 6:33pm UTC](https://discuss.elastic.co/t/kibana-enhanced-table-add-plugin-error-eacces-permission-denied/231778 "2020-05-08T18:33:22Z")
ubuntu@elasticsearch:~ /usr/share/kibana/bin/kibana-plugin install file:///home/ubuntu/enhanced-table-1.8.0\_7.6.2.zip Found previous install attempt. Deleting... Babel could not write cache to file: /usr/share/kibana/opt… --- ## [Detect terms values occurring in different buckets](https://discuss.elastic.co/t/detect-terms-values-occurring-in-different-buckets/231779)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 6:12pm UTC](https://discuss.elastic.co/t/detect-terms-values-occurring-in-different-buckets/231779 "2020-05-08T18:12:14Z")
Hi, I need to solve the following problem. I have an index with some operations performed by users. I need to detect the users that performs two or more update operations on a same element (value) but only if those ope… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1459) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1461)