# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1463 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1464 --- ## [Analyzer to every n characters](https://discuss.elastic.co/t/analyzer-to-every-n-characters/231618)
**Author:** [@ben-charles](https://discuss.elastic.co/u/ben-charles)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 8:39pm UTC](https://discuss.elastic.co/t/analyzer-to-every-n-characters/231618 "2020-05-07T20:39:44Z")
I currently have an analyzer using the regular expression \\\\W|\_. This splits by non-word chars and underscore. How will this handle other special characters from other languages? Furthermore, is there a way to configure… --- ## [How to avoid pod use all memory limits](https://discuss.elastic.co/t/how-to-avoid-pod-use-all-memory-limits/230642)
**Author:** [@levitative](https://discuss.elastic.co/u/levitative)\ **Replies:** 3\ **Last updated:** [May 7, 2020, 8:35pm UTC](https://discuss.elastic.co/t/how-to-avoid-pod-use-all-memory-limits/230642 "2020-05-07T20:35:18Z")
Elastic search always use all memory that I specify as limit to it, no mater how much I increase the limit and downgrade the mix/max heap size. The actual heap is using less than half of the max heap (2GB). The pod keep… --- ## [Kibana server is not ready yet \[7.6.2\]](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-7-6-2/231398)
**Author:** [@alwaysastudent](https://discuss.elastic.co/u/alwaysastudent)\ **Replies:** 3\ **Last updated:** [May 7, 2020, 8:30pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-7-6-2/231398 "2020-05-07T20:30:03Z")
I have brought up the "elastic:7.6.2" and "kibana:7.6.2" (1 count each) using the latest kubernetes operator version 1.1. I deployed the elastic first, waited for the pod to turn green, and then more just to make sure t… --- ## [Last IP from possible comma separated list of IPs](https://discuss.elastic.co/t/last-ip-from-possible-comma-separated-list-of-ips/231583)
**Author:** [@clarkritchie](https://discuss.elastic.co/u/clarkritchie)\ **Replies:** 2\ **Last updated:** [May 7, 2020, 7:43pm UTC](https://discuss.elastic.co/t/last-ip-from-possible-comma-separated-list-of-ips/231583 "2020-05-07T19:43:17Z")
I'm struggling to match the last IP in pattern which may contain a comma separated list of IPs. e.g. both of these appear in my logs: foo\\t102.35.174.94\\tbar 102.35.174.94 is my desired match foo\\t102.35.174.94,66.… --- ## [Using Mutate filter not able to convert string to integer](https://discuss.elastic.co/t/using-mutate-filter-not-able-to-convert-string-to-integer/231613)
**Author:** [@souravatta](https://discuss.elastic.co/u/souravatta)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 7:19pm UTC](https://discuss.elastic.co/t/using-mutate-filter-not-able-to-convert-string-to-integer/231613 "2020-05-07T19:19:40Z")
--- ## [Lumberjack plugin](https://discuss.elastic.co/t/lumberjack-plugin/230809)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 2\ **Last updated:** [May 7, 2020, 7:18pm UTC](https://discuss.elastic.co/t/lumberjack-plugin/230809 "2020-05-07T19:18:32Z")
I am trying to send Metricbeat ----\> Logstash-1 -------\> Logstash-2 -------\> Elasticsearch. I tried both tcp and Lumberjack protocols. Successfully start both logstshes but not found data in elasticsearch. \`\`\`\`\`\`\`\`\`\`lO… --- ## [Journalbeat and Filebeat store the same messages, how should that be handled?](https://discuss.elastic.co/t/journalbeat-and-filebeat-store-the-same-messages-how-should-that-be-handled/230436)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 1\ **Last updated:** [May 7, 2020, 7:15pm UTC](https://discuss.elastic.co/t/journalbeat-and-filebeat-store-the-same-messages-how-should-that-be-handled/230436 "2020-05-07T19:15:10Z")
Journald and syslog can contain the exact same data at times. For example, running ansible generates lots of "echo BECOME-SUCCESS-\< random string \>" messages. I can find the exact same messages in both my journalbeat-\* … --- ## [Elasticsearch v7.6.2 Failed to Start, Killed by SIGABRT on RHEL 7.7 - \[URGENT\]](https://discuss.elastic.co/t/elasticsearch-v7-6-2-failed-to-start-killed-by-sigabrt-on-rhel-7-7-urgent/231039)
**Author:** [@Black-Hat](https://discuss.elastic.co/u/Black-Hat)\ **Replies:** 12\ **Last updated:** [May 7, 2020, 6:48pm UTC](https://discuss.elastic.co/t/elasticsearch-v7-6-2-failed-to-start-killed-by-sigabrt-on-rhel-7-7-urgent/231039 "2020-05-07T18:48:39Z")
Hi All, I'm having issue to start elastic services with error of: Job for elasticsearch.service failed because a fatal signal was delivered to the control process. This is a completely new setup and I tried to con… --- ## [Exact match to string](https://discuss.elastic.co/t/exact-match-to-string/231606)
**Author:** [@prince\_yadav](https://discuss.elastic.co/u/prince_yadav)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 6:38pm UTC](https://discuss.elastic.co/t/exact-match-to-string/231606 "2020-05-07T18:38:08Z")
I have a name field which has string value like Blue Latest Product (NKK-1294) Pink Black Product (NKK-1233) Black Pink Stone (SKK-129) If I search { "query": { "bool": { "must": \[ { "bool": { "should": \[ { … --- ## [Date format with timezone offset](https://discuss.elastic.co/t/date-format-with-timezone-offset/231576)
**Author:** [@Xavier\_Romero](https://discuss.elastic.co/u/Xavier_Romero)\ **Replies:** 3\ **Last updated:** [May 7, 2020, 6:07pm UTC](https://discuss.elastic.co/t/date-format-with-timezone-offset/231576 "2020-05-07T18:07:41Z")
Hi there, Having a hard time to parse a date with zone offset. I need to parse dates like this: "2020-05-07 13:16:44+00:00" So far, I've tried: PUT /\_template/test { "index\_patterns": \["test"\], "mappings": { "p… --- ## [Logstash SQS output failing makes pipeline stop working entirely](https://discuss.elastic.co/t/logstash-sqs-output-failing-makes-pipeline-stop-working-entirely/231425)
**Author:** [@robertknutzen](https://discuss.elastic.co/u/robertknutzen)\ **Replies:** 4\ **Last updated:** [May 7, 2020, 6:04pm UTC](https://discuss.elastic.co/t/logstash-sqs-output-failing-makes-pipeline-stop-working-entirely/231425 "2020-05-07T18:04:07Z")
I have a logstash pipeline that uses an SQS output. I'm seeing errors where logstash will just stop working if it cannot connect to SQS. The logs seem to indicate that logstash attempts to restart, fails and then just do… --- ## [Problem with setting up ES 7.6.2 instance on Docker](https://discuss.elastic.co/t/problem-with-setting-up-es-7-6-2-instance-on-docker/231600)
**Author:** [@Arkasian](https://discuss.elastic.co/u/Arkasian)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 5:54pm UTC](https://discuss.elastic.co/t/problem-with-setting-up-es-7-6-2-instance-on-docker/231600 "2020-05-07T17:54:10Z")
Dear Experts and Community, I have the following problem. I pull a ES image from Docker Hub, then I configure it to bind ports to host: 9200,9300. I add the following env var: cluster.initial\_master\_nodes = elasticsear… --- ## [Keyword subfield of a text field which has high cardinality](https://discuss.elastic.co/t/keyword-subfield-of-a-text-field-which-has-high-cardinality/231599)
**Author:** [@lloadingll](https://discuss.elastic.co/u/lloadingll)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 5:42pm UTC](https://discuss.elastic.co/t/keyword-subfield-of-a-text-field-which-has-high-cardinality/231599 "2020-05-07T17:42:41Z")
Hi all, we have a large amount of data, one of its fields is 'email subject' which is 'text' type. Recently I want to do aggregation by this field on a small subset of the data (assume after the query filter there are … --- ## [Error in ES keystore when elasticsearch.yml references custom variables in /etc/default/elasticsearch](https://discuss.elastic.co/t/error-in-es-keystore-when-elasticsearch-yml-references-custom-variables-in-etc-default-elasticsearch/230592)
**Author:** [@gchiartosini](https://discuss.elastic.co/u/gchiartosini)\ **Replies:** 3\ **Last updated:** [May 7, 2020, 5:28pm UTC](https://discuss.elastic.co/t/error-in-es-keystore-when-elasticsearch-yml-references-custom-variables-in-etc-default-elasticsearch/230592 "2020-05-07T17:28:55Z")
Hello, can anyone help with this weird problem, please? I have defined custom variables in /etc/default/elasticsearch file, and referenced them in the elasticsearch.yml; ES works with them properly, but I get an error … --- ## [Time (y-axis) vs Date (x-axis ) Visualize](https://discuss.elastic.co/t/time-y-axis-vs-date-x-axis-visualize/231413)
**Author:** [@srajus](https://discuss.elastic.co/u/srajus)\ **Replies:** 4\ **Last updated:** [May 7, 2020, 5:23pm UTC](https://discuss.elastic.co/t/time-y-axis-vs-date-x-axis-visualize/231413 "2020-05-07T17:23:09Z")
Hi All , I am planning to create a Dashboard for report monitoring . i need to compare the completion date vs completion time for certain period. i have tried using all the options there is no option gives Time (for E… --- ## [Elastic cloud one 58 GB node vs AWS ES 4 nodes with 8 GB of memory each performance](https://discuss.elastic.co/t/elastic-cloud-one-58-gb-node-vs-aws-es-4-nodes-with-8-gb-of-memory-each-performance/231532)
**Author:** [@bogdan\_dd](https://discuss.elastic.co/u/bogdan_dd)\ **Replies:** 5\ **Last updated:** [May 7, 2020, 4:43pm UTC](https://discuss.elastic.co/t/elastic-cloud-one-58-gb-node-vs-aws-es-4-nodes-with-8-gb-of-memory-each-performance/231532 "2020-05-07T16:43:41Z")
Hi, I'm planning to use an elastic cloud for my project but I have some confusion about what is the right way to configure my elasticsearch architecture, according to price calculator https://cloud.elastic.co/pricing in … --- ## [Parsing Failure with Elasticsearch Index Mapping](https://discuss.elastic.co/t/parsing-failure-with-elasticsearch-index-mapping/231586)
**Author:** [@zsanford](https://discuss.elastic.co/u/zsanford)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 4:31pm UTC](https://discuss.elastic.co/t/parsing-failure-with-elasticsearch-index-mapping/231586 "2020-05-07T16:31:15Z")
I have a Graylog server setup with Elasticsearch and every so often when it creates a new index, I start getting indexer failure messages in Graylog. The error message type is “mapper\_parsing\_exception” and it is always … --- ## [Difference in time between timestamp and @timestamp](https://discuss.elastic.co/t/difference-in-time-between-timestamp-and-timestamp/231456)
**Author:** [@Hari\_Krishna](https://discuss.elastic.co/u/Hari_Krishna)\ **Replies:** 4\ **Last updated:** [May 7, 2020, 4:04pm UTC](https://discuss.elastic.co/t/difference-in-time-between-timestamp-and-timestamp/231456 "2020-05-07T16:04:33Z")
I have written the date filter as follows date { match =\> \["timestamp","yyyy-MM-dd HH:mm:ss.SSSSSSSSS"\] target =\> "@timestamp" timezone =\> "Asia/Kolkata" } timestamp : 2020-04-17 12:10:15.… --- ## [How can I use %{+yyyy.mm.dd} in input?](https://discuss.elastic.co/t/how-can-i-use-yyyy-mm-dd-in-input/231535)
**Author:** [@jinjinbari](https://discuss.elastic.co/u/jinjinbari)\ **Replies:** 1\ **Last updated:** [May 7, 2020, 3:55pm UTC](https://discuss.elastic.co/t/how-can-i-use-yyyy-mm-dd-in-input/231535 "2020-05-07T15:55:20Z")
Hello. I want to use date variable in input, like below input { elasticsearch{ hosts =\> \["localhost"\] index =\> "test-%{+yyyy-MM-dd}" codec =\> "json" } } but it occur error like this. Error: \[404\] {"err… --- ## [Problem with Ruby Filter](https://discuss.elastic.co/t/problem-with-ruby-filter/231408)
**Author:** [@rildo](https://discuss.elastic.co/u/rildo)\ **Replies:** 6\ **Last updated:** [May 7, 2020, 3:23pm UTC](https://discuss.elastic.co/t/problem-with-ruby-filter/231408 "2020-05-07T15:23:40Z")
Hello People, I would like a help with my problem. Currently I have a database with postgresql and I have some queries in logstash to extract some information and send it to elasticsearch.One query return a list of da… --- ## [Scripted bulk upserting issue](https://discuss.elastic.co/t/scripted-bulk-upserting-issue/231351)
**Author:** [@matija\_str](https://discuss.elastic.co/u/matija_str)\ **Replies:** 1\ **Last updated:** [May 7, 2020, 3:20pm UTC](https://discuss.elastic.co/t/scripted-bulk-upserting-issue/231351 "2020-05-07T15:20:35Z")
Hi everyone. A few days ago we noticed a strange behavior in our indexing pipeline. We are using painless scripts in combination with bulk API to perform 1:N relationship document merge-operations. We noticed that when… --- ## [How to apply time filter for the time fields in the index](https://discuss.elastic.co/t/how-to-apply-time-filter-for-the-time-fields-in-the-index/231564)
**Author:** [@Jayasri\_Cimba](https://discuss.elastic.co/u/Jayasri_Cimba)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 2:45pm UTC](https://discuss.elastic.co/t/how-to-apply-time-filter-for-the-time-fields-in-the-index/231564 "2020-05-07T14:45:26Z")
I have 3 time fields in my index , I know to create a timestamp for one time field, wondering if there is a possibility to apply the time filter two other fields which to apply time filter to it as well ! Time\_stamp … --- ## [Logstash log level change requires restart?](https://discuss.elastic.co/t/logstash-log-level-change-requires-restart/231568)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 3:01pm UTC](https://discuss.elastic.co/t/logstash-log-level-change-requires-restart/231568 "2020-05-07T15:01:53Z")
If I change log level in logstash.yaml, it seems restart is required. Will it take effect without restart? --- ## [Is it possible to relate a data table to a vertical bar graph?](https://discuss.elastic.co/t/is-it-possible-to-relate-a-data-table-to-a-vertical-bar-graph/231529)
**Author:** [@Jaishree\_Pal](https://discuss.elastic.co/u/Jaishree_Pal)\ **Replies:** 4\ **Last updated:** [May 7, 2020, 2:13pm UTC](https://discuss.elastic.co/t/is-it-possible-to-relate-a-data-table-to-a-vertical-bar-graph/231529 "2020-05-07T14:13:09Z")
Hi guys, I want to relate a data table to a vertical bar graph in Kibana. I want that whenever a user clicks on a specific stack or the value on the x-axis, it takes him to a data table containing all the information for… --- ## [Is there an API call to select dark mode for a named space?](https://discuss.elastic.co/t/is-there-an-api-call-to-select-dark-mode-for-a-named-space/229778)
**Author:** [@drjan](https://discuss.elastic.co/u/drjan)\ **Replies:** 4\ **Last updated:** [May 7, 2020, 2:12pm UTC](https://discuss.elastic.co/t/is-there-an-api-call-to-select-dark-mode-for-a-named-space/229778 "2020-05-07T14:12:09Z")
I'd like to set the dark mode theme on a non-default Kibana Space using a curl command. Is this possible? For the default space, I can use the command below, but I can't find anything for specific spaces. curl -XPUT "… --- ## [Error while running logstash: org.logstash.instrument.metrics.gauge.LazyDelegatingGauge](https://discuss.elastic.co/t/error-while-running-logstash-org-logstash-instrument-metrics-gauge-lazydelegatinggauge/231552)
**Author:** [@elen](https://discuss.elastic.co/u/elen)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 1:43pm UTC](https://discuss.elastic.co/t/error-while-running-logstash-org-logstash-instrument-metrics-gauge-lazydelegatinggauge/231552 "2020-05-07T13:43:31Z")
Hello, Trying to send data Logstash -\> Elasticsearch ( both are running in docker, configs are tested and are ok) and I'm experiencing issue that actual data is not sent (this is the only warning I get while running log… --- ## [Unexpected end-of-input: expected close marker for Array](https://discuss.elastic.co/t/unexpected-end-of-input-expected-close-marker-for-array/231555)
**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 1:51pm UTC](https://discuss.elastic.co/t/unexpected-end-of-input-expected-close-marker-for-array/231555 "2020-05-07T13:51:55Z")
Hi I am getting following error Unexpected end-of-input: expected close marker for Array (start marker at \[Source: org.elasticsearch.transport.netty4.ByteBufStreamInput@21e2dfc9; line: 19, column: 27\])\\n at \[Source: org… --- ## [How can filter diiferent logs with different index generated by logstash in kibana](https://discuss.elastic.co/t/how-can-filter-diiferent-logs-with-different-index-generated-by-logstash-in-kibana/231066)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 9\ **Last updated:** [May 7, 2020, 1:40pm UTC](https://discuss.elastic.co/t/how-can-filter-diiferent-logs-with-different-index-generated-by-logstash-in-kibana/231066 "2020-05-07T13:40:19Z")
Hi I take log file from different paths and make different config files according to it. Then for output all indexes are created as given in config file but while in kibana it filter with different index it show all lo… --- ## [Synonym token graphs and Shingles don't play well together](https://discuss.elastic.co/t/synonym-token-graphs-and-shingles-dont-play-well-together/230713)
**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\ **Replies:** 1\ **Last updated:** [May 7, 2020, 12:41pm UTC](https://discuss.elastic.co/t/synonym-token-graphs-and-shingles-dont-play-well-together/230713 "2020-05-07T12:41:34Z")
Hi I know I'm not the first one to touch on this issue, but no solution seems to have been provided. Expected behavior: With the synonym \[world,earth\] and the phrase "hello world", sending them through a shingle filte… --- ## [Delete Duplicate Documents with Elasticsearch and Ruby](https://discuss.elastic.co/t/delete-duplicate-documents-with-elasticsearch-and-ruby/231479)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 4\ **Last updated:** [May 7, 2020, 12:34pm UTC](https://discuss.elastic.co/t/delete-duplicate-documents-with-elasticsearch-and-ruby/231479 "2020-05-07T12:34:46Z")
I use a script ruby for duplicate Document input { beats { port =\> "5044" } } filter { csv { separator =\> "," columns =\> \["chaine", "job", "date\_plan", "statut", "date\_debut"… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1462) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1464)