# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1464 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1465 --- ## [UNASSIGNED ALLOCATION\_FAILED](https://discuss.elastic.co/t/unassigned-allocation-failed/229642)
**Author:** [@rnappert](https://discuss.elastic.co/u/rnappert)\ **Replies:** 18\ **Last updated:** [May 7, 2020, 12:19pm UTC](https://discuss.elastic.co/t/unassigned-allocation-failed/229642 "2020-05-07T12:19:45Z")
I have a Elasticsearch 6.2.3 setup (single node). The system was running smoothly for a period of time. Needed to expand the hard-drive, since the disk space was about to run out. After the expansion, Elasticsearch came … --- ## [Filtering csv headers with different lengths](https://discuss.elastic.co/t/filtering-csv-headers-with-different-lengths/231526)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 11:47am UTC](https://discuss.elastic.co/t/filtering-csv-headers-with-different-lengths/231526 "2020-05-07T11:47:21Z")
I have two slightly different csv headers i would like to catch under a filter: ACTION,DISCRIMINATOR,CHECKPOINT\_ID,INSTALLATION\_ID,NUMERIC\_VALUE,STRING\_VALUE,COMPONENT\_NAME,TRANSACTION\_ID,STATISTIC\_DURATION,STATISTIC\_NA… --- ## [Platinum Licensed cluster using CCS against a Basic Licensed cluster](https://discuss.elastic.co/t/platinum-licensed-cluster-using-ccs-against-a-basic-licensed-cluster/231346)
**Author:** [@chris.murray](https://discuss.elastic.co/u/chris.murray)\ **Replies:** 5\ **Last updated:** [May 7, 2020, 11:21am UTC](https://discuss.elastic.co/t/platinum-licensed-cluster-using-ccs-against-a-basic-licensed-cluster/231346 "2020-05-07T11:21:42Z")
Not sure if this idea is going to be offensive or not, but hear me out. We have a pretty standard log searching setup internally, spread across 40 nodes. It's kind of a pet project for some of our analysts. This setup… --- ## [How to calculate combinating different index with different mapping in order to show a histogram in Kibana](https://discuss.elastic.co/t/how-to-calculate-combinating-different-index-with-different-mapping-in-order-to-show-a-histogram-in-kibana/230140)
**Author:** [@Juanjo\_Herrero\_Berme](https://discuss.elastic.co/u/Juanjo_Herrero_Berme)\ **Replies:** 2\ **Last updated:** [May 7, 2020, 11:43am UTC](https://discuss.elastic.co/t/how-to-calculate-combinating-different-index-with-different-mapping-in-order-to-show-a-histogram-in-kibana/230140 "2020-05-07T11:43:03Z")
Hi, I have a question about Kibana and how to do calculates combinating different index with different mapping. I want to create a graphic using TSVB or just a line chart that calculates a "Rate", but the problem is i … --- ## [Proofpoint sendmail/ syslog](https://discuss.elastic.co/t/proofpoint-sendmail-syslog/231522)
**Author:** [@jamesy281](https://discuss.elastic.co/u/jamesy281)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 11:38am UTC](https://discuss.elastic.co/t/proofpoint-sendmail-syslog/231522 "2020-05-07T11:38:29Z")
Hey there, I am currently ingesting Proofpoint mail/ filter/ security, etc logs into our Rapid7 SIEM. I found though that I am unable to do a simple log search for say messages from & to a user as proofpoint/ sendmail b… --- ## [Using logstash kafka plugin 10.2.0 with logstash 6.8.8](https://discuss.elastic.co/t/using-logstash-kafka-plugin-10-2-0-with-logstash-6-8-8/231521)
**Author:** [@ItamarBenjamin](https://discuss.elastic.co/u/ItamarBenjamin)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 11:31am UTC](https://discuss.elastic.co/t/using-logstash-kafka-plugin-10-2-0-with-logstash-6-8-8/231521 "2020-05-07T11:31:24Z")
Is it possible to use versions 10.2.0 of the kafka plugins (especially kafka input plugin) with logstash 6.8.8? when i run the upgrade command from the 6.8.8 docker this is what i get: bash-4.2$ logstash-plugin update … --- ## [Node IPs in the cluster does not changed when the host/system IPs already changed](https://discuss.elastic.co/t/node-ips-in-the-cluster-does-not-changed-when-the-host-system-ips-already-changed/228949)
**Author:** [@worapojc](https://discuss.elastic.co/u/worapojc)\ **Replies:** 4\ **Last updated:** [May 7, 2020, 11:20am UTC](https://discuss.elastic.co/t/node-ips-in-the-cluster-does-not-changed-when-the-host-system-ips-already-changed/228949 "2020-05-07T11:20:47Z")
Hello Elasticsearch team, I'm using Elasticsearch 1.7, here is the \_cat/nodes response. curl -s localhost:9200/\_cat/nodes data\_node\_1 10.255.70.31 14 54 1.98 d - data\_node\_1.instance.3 master\_node\_1 159.42.11.4… --- ## [Get added documents immedately](https://discuss.elastic.co/t/get-added-documents-immedately/231463)
**Author:** [@JavaDeveloper](https://discuss.elastic.co/u/JavaDeveloper)\ **Replies:** 12\ **Last updated:** [May 7, 2020, 11:04am UTC](https://discuss.elastic.co/t/get-added-documents-immedately/231463 "2020-05-07T11:04:34Z")
Hi everyone. I have an application that stores documents to the elasticsearch. Also, I have another web application and I want to show added documents to the elasticsearch immediately in a page (similar to a socket bet… --- ## [Output to indexes based on \[agent.type\] (or any conditionals) not working](https://discuss.elastic.co/t/output-to-indexes-based-on-agent-type-or-any-conditionals-not-working/231363)
**Author:** [@SteveParker](https://discuss.elastic.co/u/SteveParker)\ **Replies:** 5\ **Last updated:** [May 7, 2020, 10:57am UTC](https://discuss.elastic.co/t/output-to-indexes-based-on-agent-type-or-any-conditionals-not-working/231363 "2020-05-07T10:57:26Z")
Sorry to ask this, I have searched long for an answer but not found anything. My winlogbeat, packetbeat and metricbeat are all sent to logstash on 5044. I want logstash to output them to dedicated indexes. I am using th… --- ## [Older Queries Slowed after new indices created](https://discuss.elastic.co/t/older-queries-slowed-after-new-indices-created/229951)
**Author:** [@gsahu25](https://discuss.elastic.co/u/gsahu25)\ **Replies:** 1\ **Last updated:** [May 7, 2020, 10:40am UTC](https://discuss.elastic.co/t/older-queries-slowed-after-new-indices-created/229951 "2020-05-07T10:40:52Z")
Hi, I had few queries running fine on a set of indices. I loaded new indices which are big(total size 500GB). Now the queries have become slow. New indices are not queried. Can shard imbalance cause this? Any clue how… --- ## [Hot/Warm - unassigned replica](https://discuss.elastic.co/t/hot-warm-unassigned-replica/231491)
**Author:** [@KubaChrzan](https://discuss.elastic.co/u/KubaChrzan)\ **Replies:** 2\ **Last updated:** [May 7, 2020, 10:29am UTC](https://discuss.elastic.co/t/hot-warm-unassigned-replica/231491 "2020-05-07T10:29:14Z")
Hello Elastic Team. Fresh and new elasticsearch-7.4.0-1 cluster (3 data nodes data\_type: warm + 3 master/data nodes data\_type: hot). What i am trying to implement is hot/warm architecture today index kept on HOT (loc… --- ## [Date value not received](https://discuss.elastic.co/t/date-value-not-received/231489)
**Author:** [@andrejK](https://discuss.elastic.co/u/andrejK)\ **Replies:** 1\ **Last updated:** [May 7, 2020, 10:09am UTC](https://discuss.elastic.co/t/date-value-not-received/231489 "2020-05-07T10:09:44Z")
Hi everyone, not sure if this is the correct forum, but I will try. I have C# console application where I use NEST to index data and search in ElasticSearch. Versions: ElasticSearch 7.5.2 .NET 4.7.2 NEST 7.6.1 When … --- ## [Multiple elasticsearch-data Volumes](https://discuss.elastic.co/t/multiple-elasticsearch-data-volumes/230972)
**Author:** [@taseer94](https://discuss.elastic.co/u/taseer94)\ **Replies:** 2\ **Last updated:** [May 7, 2020, 9:57am UTC](https://discuss.elastic.co/t/multiple-elasticsearch-data-volumes/230972 "2020-05-07T09:57:47Z")
Hi everyone, I have 3 azure disks which I would like to have the cluster store data to. I want to have a 3 node cluster, each attached to a separate disk. My current config is as follows. However, all the 3 volumes get … --- ## [Logstash cannot support postgres geometry type](https://discuss.elastic.co/t/logstash-cannot-support-postgres-geometry-type/231492)
**Author:** [@ohoroyoi](https://discuss.elastic.co/u/ohoroyoi)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 9:01am UTC](https://discuss.elastic.co/t/logstash-cannot-support-postgres-geometry-type/231492 "2020-05-07T09:01:23Z")
There is a column of geometry type in the postgres table. I checked that the rest of the columns worked fine postgres-\> logstash-\> elasticsearch. However, I am not sure how to cast the geometry type. Please help me. Can… --- ## [Is it possible to disable Customize time range in visualizations of a dashboard?](https://discuss.elastic.co/t/is-it-possible-to-disable-customize-time-range-in-visualizations-of-a-dashboard/230521)
**Author:** [@ichirou](https://discuss.elastic.co/u/ichirou)\ **Replies:** 2\ **Last updated:** [May 7, 2020, 9:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-disable-customize-time-range-in-visualizations-of-a-dashboard/230521 "2020-05-07T09:29:35Z")
I'm using Kibana ver 7.6. I'd like to disable Customize time range in visualizations of a dashboard. Is it possible to do that? --- ## [Using KQL to query for number using regex](https://discuss.elastic.co/t/using-kql-to-query-for-number-using-regex/231499)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 9:21am UTC](https://discuss.elastic.co/t/using-kql-to-query-for-number-using-regex/231499 "2020-05-07T09:21:24Z")
Hi all I notices something when i try some query using KQL, For example: i have 2 data like this 123.abc.deh and dhdk.abc.deh then when i write query for that like this test: \*.abc.deh then the only result return is d… --- ## [Update/Upsert based on new and old doc values](https://discuss.elastic.co/t/update-upsert-based-on-new-and-old-doc-values/231496)
**Author:** [@mabr3](https://discuss.elastic.co/u/mabr3)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 9:16am UTC](https://discuss.elastic.co/t/update-upsert-based-on-new-and-old-doc-values/231496 "2020-05-07T09:16:48Z")
Hello, I'm wondering if there's anyway to update a document based on the comparison of a value on the original version of the doc and on the new version. An example: Suppose you have document with id:A with field "fie… --- ## [How to use custom grok pattern for syslog input](https://discuss.elastic.co/t/how-to-use-custom-grok-pattern-for-syslog-input/231494)
**Author:** [@Hari\_Krishna](https://discuss.elastic.co/u/Hari_Krishna)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 9:06am UTC](https://discuss.elastic.co/t/how-to-use-custom-grok-pattern-for-syslog-input/231494 "2020-05-07T09:06:05Z")
Hi, I listening to the port 31230 to get syslogs from a router. The logs are coming in but it doesnt use my grok filter. Kibana uses some default index pattern for syslogs. input { syslog { type =\> "syslog"… --- ## [Can I have my account deleted](https://discuss.elastic.co/t/can-i-have-my-account-deleted/231483)
**Author:** [@anon73256657](https://discuss.elastic.co/u/anon73256657)\ **Replies:** 3\ **Last updated:** [May 7, 2020, 9:04am UTC](https://discuss.elastic.co/t/can-i-have-my-account-deleted/231483 "2020-05-07T09:04:50Z")
Hello I would like to have my account deleted as I dont' use it anymore How can I do it? Please help --- ## [Logstash Aggregate map working only for few rows while merging two data sources](https://discuss.elastic.co/t/logstash-aggregate-map-working-only-for-few-rows-while-merging-two-data-sources/231293)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 1\ **Last updated:** [May 7, 2020, 9:02am UTC](https://discuss.elastic.co/t/logstash-aggregate-map-working-only-for-few-rows-while-merging-two-data-sources/231293 "2020-05-07T09:02:55Z")
I am using the latest version of logstash(7.6.2). I am trying to merge rows from two different files using a common ID. Find below the samples of the two data sources. Also, find below my desired output. Sample Data 1 w… --- ## [Want to open kibana on ip:port/app](https://discuss.elastic.co/t/want-to-open-kibana-on-ip-port-app/231487)
**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\ **Replies:** 3\ **Last updated:** [May 7, 2020, 8:49am UTC](https://discuss.elastic.co/t/want-to-open-kibana-on-ip-port-app/231487 "2020-05-07T08:49:40Z")
currently when i enter ip:nodeport the kibana opens and redirect to login page but my requirement is to restrict kibana to open on ip:nodeport/app --- ## [I'm using Elasticsearch 7.5 I want calculate percentage in each buckets](https://discuss.elastic.co/t/im-using-elasticsearch-7-5-i-want-calculate-percentage-in-each-buckets/231484)
**Author:** [@Ramesh\_Kumar](https://discuss.elastic.co/u/Ramesh_Kumar)\ **Replies:** 1\ **Last updated:** [May 7, 2020, 8:28am UTC](https://discuss.elastic.co/t/im-using-elasticsearch-7-5-i-want-calculate-percentage-in-each-buckets/231484 "2020-05-07T08:28:57Z")
{ "aggs":{ "country":{ "terms":{ "field":"country.keyword", "size":10000 }, "aggs":{ "videocount":{ "avg":{ "field":"video\_count" } }, "viewcount":{ "avg":{ "field":"view\_count" } } } } } } --- ## [Max\_result\_window value not reflect in result set.. it show only 10k records only](https://discuss.elastic.co/t/max-result-window-value-not-reflect-in-result-set-it-show-only-10k-records-only/231465)
**Author:** [@Sanjaygpatel](https://discuss.elastic.co/u/Sanjaygpatel)\ **Replies:** 3\ **Last updated:** [May 7, 2020, 8:16am UTC](https://discuss.elastic.co/t/max-result-window-value-not-reflect-in-result-set-it-show-only-10k-records-only/231465 "2020-05-07T08:16:24Z")
Hello , i have set property of max\_result\_window : "1000000" in settings at index level but while search result for larger data set then only result 10k so it mean not taking effect index setting. is there anything i h… --- ## [Kibana json Error](https://discuss.elastic.co/t/kibana-json-error/231433)
**Author:** [@me009](https://discuss.elastic.co/u/me009)\ **Replies:** 2\ **Last updated:** [May 7, 2020, 8:02am UTC](https://discuss.elastic.co/t/kibana-json-error/231433 "2020-05-07T08:02:22Z")
Hi All, after setting up the application and using Winlogbeat to ship windows logs to elastic search . Here is a screenshot of the error message.. When I run GET /winlogbeat-\*/\_search.. I get the details below.. I… --- ## [Kibana stuck creating index pattern](https://discuss.elastic.co/t/kibana-stuck-creating-index-pattern/231356)
**Author:** [@ashokpatidar](https://discuss.elastic.co/u/ashokpatidar)\ **Replies:** 2\ **Last updated:** [May 7, 2020, 7:57am UTC](https://discuss.elastic.co/t/kibana-stuck-creating-index-pattern/231356 "2020-05-07T07:57:22Z")
Hello, I am new here, i want to fetch Kubernetes pods log, and by google i got that i need to setup index pattern log, but when i am trying to create index pattern after clicking on index creation button, it's not able… --- ## [Kibana url not starting but service is running](https://discuss.elastic.co/t/kibana-url-not-starting-but-service-is-running/231474)
**Author:** [@gefela](https://discuss.elastic.co/u/gefela)\ **Replies:** 1\ **Last updated:** [May 7, 2020, 7:46am UTC](https://discuss.elastic.co/t/kibana-url-not-starting-but-service-is-running/231474 "2020-05-07T07:46:33Z")
Hi Both elasticsearch and logstash and kibana are running as a service but the url is still at kibana server is not ready yet .. What should I be looking at ? --- ## [Rally 2.0.0 released](https://discuss.elastic.co/t/rally-2-0-0-released/231477)
**Author:** [@dliappis](https://discuss.elastic.co/u/dliappis)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 7:44am UTC](https://discuss.elastic.co/t/rally-2-0-0-released/231477 "2020-05-07T07:44:46Z")
Almost two years after the release of Rally 1.0.0 we are excited to announce Rally 2.0.0 today as a collaboration from 40 contributors. Many thanks to all our community contributors for the numerous discussions, bug repo… --- ## [Permission denied error while collecting logs from external ip](https://discuss.elastic.co/t/permission-denied-error-while-collecting-logs-from-external-ip/231112)
**Author:** [@Hari\_Krishna](https://discuss.elastic.co/u/Hari_Krishna)\ **Replies:** 9\ **Last updated:** [May 7, 2020, 7:35am UTC](https://discuss.elastic.co/t/permission-denied-error-while-collecting-logs-from-external-ip/231112 "2020-05-07T07:35:24Z")
Hi, I am trying to collect syslogs from a juniper router. I have configured the router to send logs to the IP where Logstash is running. I have written the input config for Logstash as: input { syslog { … --- ## [How to pass in an artificial document to a MLT Query when searching for similar phrases?](https://discuss.elastic.co/t/how-to-pass-in-an-artificial-document-to-a-mlt-query-when-searching-for-similar-phrases/231473)
**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 7:25am UTC](https://discuss.elastic.co/t/how-to-pass-in-an-artificial-document-to-a-mlt-query-when-searching-for-similar-phrases/231473 "2020-05-07T07:25:35Z")
Hi, I am using the following MLT query GET /\_search { "query": { "more\_like\_this" : { "fields" : \["title", "content.standard"\], "like" : "Housing rents", "min\_term\_freq" … --- ## [Is it possible to define a node Hot and warm?](https://discuss.elastic.co/t/is-it-possible-to-define-a-node-hot-and-warm/231171)
**Author:** [@Kwiskas](https://discuss.elastic.co/u/Kwiskas)\ **Replies:** 6\ **Last updated:** [May 7, 2020, 7:19am UTC](https://discuss.elastic.co/t/is-it-possible-to-define-a-node-hot-and-warm/231171 "2020-05-07T07:19:55Z")
Hello On my company we have 3 data nodes connected on a master node I need to define a lifecycle policy But to do so I need to define which node is hot, warm, and cold my question: can I define a node with several ty… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1463) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1465)