# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1487 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1488 --- ## [Connect to load balancer from high level rest client](https://discuss.elastic.co/t/connect-to-load-balancer-from-high-level-rest-client/229935)
**Author:** [@AshishUser](https://discuss.elastic.co/u/AshishUser)\ **Replies:** 0\ **Last updated:** [April 27, 2020, 9:43am UTC](https://discuss.elastic.co/t/connect-to-load-balancer-from-high-level-rest-client/229935 "2020-04-27T09:43:59Z")
Hi I am trying to connect to elastic search LB URL using high level rest client but getting following error: Caused by: java.net.UnknownHostException: I was able to communicate to individual nodes do we need to do som… --- ## [Cluster update failure message (Data size issue?)](https://discuss.elastic.co/t/cluster-update-failure-message-data-size-issue/229588)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 14\ **Last updated:** [April 27, 2020, 9:32am UTC](https://discuss.elastic.co/t/cluster-update-failure-message-data-size-issue/229588 "2020-04-27T09:32:33Z")
Hello, I have a 3 nodes cluster and yesterday was time for updating them. During the end of the 1st node update procedure when my cluster was at the following state: I received that message when i tried to start k… --- ## [2 question about logstash config](https://discuss.elastic.co/t/2-question-about-logstash-config/229922)
**Author:** [@sowter](https://discuss.elastic.co/u/sowter)\ **Replies:** 1\ **Last updated:** [April 27, 2020, 8:40am UTC](https://discuss.elastic.co/t/2-question-about-logstash-config/229922 "2020-04-27T08:40:49Z")
How to write to the specified space in kibana in my space Put data (index) into 'read' space use bin / logstash -f import csv data How to close the program automatically after writing the data complete I m… --- ## [Visualize specific string from field](https://discuss.elastic.co/t/visualize-specific-string-from-field/229012)
**Author:** [@Jose\_H](https://discuss.elastic.co/u/Jose_H)\ **Replies:** 6\ **Last updated:** [April 27, 2020, 7:48am UTC](https://discuss.elastic.co/t/visualize-specific-string-from-field/229012 "2020-04-27T07:48:45Z")
Hi all. We are trying to visualize the count of users connected to our VPN from the event.original field (Cisco FirePower syslogs collected through filebeat) but are unsure how to strip and only show users instead of the… --- ## [Optional fields in custom index template](https://discuss.elastic.co/t/optional-fields-in-custom-index-template/229869)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [April 27, 2020, 2:10am UTC](https://discuss.elastic.co/t/optional-fields-in-custom-index-template/229869 "2020-04-27T02:10:55Z")
Hi, Im consuming events from logstash to elastic, I have created an index template for it, Every document will have ONE of this three fields, so if a document has "uptime\_seconds" the other fields will be empty, So I was… --- ## [Getting exception while starting the elastic search node](https://discuss.elastic.co/t/getting-exception-while-starting-the-elastic-search-node/229263)
**Author:** [@DENMODSupport](https://discuss.elastic.co/u/DENMODSupport)\ **Replies:** 5\ **Last updated:** [April 27, 2020, 7:58am UTC](https://discuss.elastic.co/t/getting-exception-while-starting-the-elastic-search-node/229263 "2020-04-27T07:58:36Z")
We are getting below exception while starting one of the elastic search nodes. \[2020-04-20T15:22:16,743\]\[ERROR\]\[o.e.g.GatewayMetaState \] \[elk-denmod-web-2\] failed to read local state, exiting... \*\*java.lang.IllegalSta… --- ## [Running gradlew with two plugins](https://discuss.elastic.co/t/running-gradlew-with-two-plugins/229915)
**Author:** [@Amos\_Gutman](https://discuss.elastic.co/u/Amos_Gutman)\ **Replies:** 0\ **Last updated:** [April 27, 2020, 6:59am UTC](https://discuss.elastic.co/t/running-gradlew-with-two-plugins/229915 "2020-04-27T06:59:53Z")
HI, I want to run elastic debugging with two of my plugins. I can attach the IDE to the JAVA process with --debug-jvm. But, when running a gradle with a :plugins:\:run I cant pass two plugins to make it to… --- ## [Quartiles in heatmaps](https://discuss.elastic.co/t/quartiles-in-heatmaps/229022)
**Author:** [@sanzcans](https://discuss.elastic.co/u/sanzcans)\ **Replies:** 4\ **Last updated:** [April 27, 2020, 6:53am UTC](https://discuss.elastic.co/t/quartiles-in-heatmaps/229022 "2020-04-27T06:53:16Z")
Hello everybody! I am trying to create three heatmaps in Kibana 6.8.7 using a different percentile in each graph: 50, 75 and 90. For the first one I can use the "Median" aggregation but, what about the other two measure… --- ## [Lose Windows Events By Logstash](https://discuss.elastic.co/t/lose-windows-events-by-logstash/229911)
**Author:** [@alah64](https://discuss.elastic.co/u/alah64)\ **Replies:** 0\ **Last updated:** [April 27, 2020, 6:43am UTC](https://discuss.elastic.co/t/lose-windows-events-by-logstash/229911 "2020-04-27T06:43:35Z")
Hello I have Logstash 6.3.0 and helk pipeline configs to parse windows logs . i dont know why events drop and are not indexed into elasticsearch? here is discover for 10 days : --- ## [Logstash beat force\_peer authentication doesn't check hostname info](https://discuss.elastic.co/t/logstash-beat-force-peer-authentication-doesnt-check-hostname-info/229683)
**Author:** [@iorfix](https://discuss.elastic.co/u/iorfix)\ **Replies:** 2\ **Last updated:** [April 27, 2020, 6:10am UTC](https://discuss.elastic.co/t/logstash-beat-force-peer-authentication-doesnt-check-hostname-info/229683 "2020-04-27T06:10:09Z")
Hi there, I'm trying to force mutual authentication between Beats and Logstash. However, while beats correctly check logstash hostname before sending data, looking at subject or at dns list, the same doesn't happen on … --- ## [Parsing the filebeat logs](https://discuss.elastic.co/t/parsing-the-filebeat-logs/229876)
**Author:** [@priyanka\_j](https://discuss.elastic.co/u/priyanka_j)\ **Replies:** 1\ **Last updated:** [April 27, 2020, 4:16am UTC](https://discuss.elastic.co/t/parsing-the-filebeat-logs/229876 "2020-04-27T04:16:13Z")
Hi , I am using the filebeat to ship all my logs to the kibana using elasticsearch.I want to parse the log and create some fields from the logs .How can i do that. Thanks --- ## [Nested Aggregation in a Transforms Script and collect value](https://discuss.elastic.co/t/nested-aggregation-in-a-transforms-script-and-collect-value/229888)
**Author:** [@aviman](https://discuss.elastic.co/u/aviman)\ **Replies:** 0\ **Last updated:** [April 27, 2020, 3:37am UTC](https://discuss.elastic.co/t/nested-aggregation-in-a-transforms-script-and-collect-value/229888 "2020-04-27T03:37:58Z")
What is the syntax for loop through all the buckets inside the map statement Below is my aggregation code: "aggs": { "account\_agg" : { "terms": { "field": "client"}, "aggs" … --- ## [検索条件を含むDataTableの作成](https://discuss.elastic.co/t/datatable/229402)
**Author:** [@hashimoto](https://discuss.elastic.co/u/hashimoto)\ **Replies:** 4\ **Last updated:** [April 27, 2020, 2:22am UTC](https://discuss.elastic.co/t/datatable/229402 "2020-04-27T02:22:04Z")
DatatableのVisualizationにおいて、特定条件のCountを並べることは可能でしょうか？ Split Rowsで特定フィールドのTermsで行を分け、列の値があるフィールドのそれぞれの値のCountとなる表をイメージしています。 Kibana 6.8.2です。 --- ## [Security with ldap](https://discuss.elastic.co/t/security-with-ldap/228779)
**Author:** [@rwr](https://discuss.elastic.co/u/rwr)\ **Replies:** 2\ **Last updated:** [April 27, 2020, 2:10am UTC](https://discuss.elastic.co/t/security-with-ldap/228779 "2020-04-27T02:10:40Z")
can LDAP used for Elasticsearch in Free license ? thanks --- ## [Error : installing plugin in logstash](https://discuss.elastic.co/t/error-installing-plugin-in-logstash/229884)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 0\ **Last updated:** [April 27, 2020, 1:40am UTC](https://discuss.elastic.co/t/error-installing-plugin-in-logstash/229884 "2020-04-27T01:40:27Z")
I am trying to install plugin in logstash -7.6.0 It shows below error: I am download plugin from github : logstash-codec-gzip\_lines-master.zip root@DRTEST03:/usr/share/logstash/bin# ./logstash-plugin install file:///ro… --- ## [Delete assign replica shards](https://discuss.elastic.co/t/delete-assign-replica-shards/229741)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 7\ **Last updated:** [April 27, 2020, 1:35am UTC](https://discuss.elastic.co/t/delete-assign-replica-shards/229741 "2020-04-27T01:35:26Z")
How can I delete replica shards without harming the primary shards? I have to delete the only replica shards I am using elasticsearch version-7.6.2 Please, help me here? Thanks in advance --- ## [Converting epoch date to human date](https://discuss.elastic.co/t/converting-epoch-date-to-human-date/229749)
**Author:** [@josete242](https://discuss.elastic.co/u/josete242)\ **Replies:** 0\ **Last updated:** [April 25, 2020, 9:54am UTC](https://discuss.elastic.co/t/converting-epoch-date-to-human-date/229749 "2020-04-25T09:54:57Z")
Hi. I'm new to ELK and I'm still starting to get to know the entire stack. I am working with an index that has a field (events.startTime) is type number. i think it's epoch in milliseconds How can I convert that timest… --- ## [Cleanup after windows .msi installation](https://discuss.elastic.co/t/cleanup-after-windows-msi-installation/229791)
**Author:** [@glushkov](https://discuss.elastic.co/u/glushkov)\ **Replies:** 1\ **Last updated:** [April 26, 2020, 11:51pm UTC](https://discuss.elastic.co/t/cleanup-after-windows-msi-installation/229791 "2020-04-26T23:51:15Z")
Dear experts, I had installed ES 7.6.0 via the .msi package. I have removed it using "Add/remove programs". Now I am left with all setting left in C:\\ProgramData\\Elastic\\Elasticsearch and two dynamic environmental varia… --- ## [Max ES Query](https://discuss.elastic.co/t/max-es-query/229785)
**Author:** [@Stefano\_Bossi](https://discuss.elastic.co/u/Stefano_Bossi)\ **Replies:** 2\ **Last updated:** [April 26, 2020, 10:22pm UTC](https://discuss.elastic.co/t/max-es-query/229785 "2020-04-26T22:22:45Z")
Dear Forum, I need some help to design a query I have some difficulties. I need the maximum value of two fields (i.e. numerical ones). I have figured out by myself the max of one value with this query: { "si… --- ## [ES 7.4 GC keeps reclaiming less memory on each pass](https://discuss.elastic.co/t/es-7-4-gc-keeps-reclaiming-less-memory-on-each-pass/229547)
**Author:** [@tyler-3](https://discuss.elastic.co/u/tyler-3)\ **Replies:** 8\ **Last updated:** [April 26, 2020, 10:07pm UTC](https://discuss.elastic.co/t/es-7-4-gc-keeps-reclaiming-less-memory-on-each-pass/229547 "2020-04-26T22:07:14Z")
Hello, I recently upgraded 7.4 and I'm having a problem where the sawtooth pattern's reclaimed heap keeps shrinking (EG: Initially GC goes from 75% to 20%... but the node goes to 30%... then 40% with each additional recl… --- ## [Page file size is too small to hold elements](https://discuss.elastic.co/t/page-file-size-is-too-small-to-hold-elements/229860)
**Author:** [@Louis\_Zhang](https://discuss.elastic.co/u/Louis_Zhang)\ **Replies:** 0\ **Last updated:** [April 26, 2020, 5:47pm UTC](https://discuss.elastic.co/t/page-file-size-is-too-small-to-hold-elements/229860 "2020-04-26T17:47:48Z")
logstash version 7.6.2, using persistence queue, not sure if this is a known bug? what shoud I do to work around? \[2020-04-26T17:44:41,554\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.version"=\>"7.6.2… --- ## [How to get matched values from array without getting all the values in it, using a dynamic template without type nested?](https://discuss.elastic.co/t/how-to-get-matched-values-from-array-without-getting-all-the-values-in-it-using-a-dynamic-template-without-type-nested/229823)
**Author:** [@rkarthikraj](https://discuss.elastic.co/u/rkarthikraj)\ **Replies:** 4\ **Last updated:** [April 26, 2020, 4:41pm UTC](https://discuss.elastic.co/t/how-to-get-matched-values-from-array-without-getting-all-the-values-in-it-using-a-dynamic-template-without-type-nested/229823 "2020-04-26T16:41:10Z")
I tried to search inside array of object using match query but I got all the values inside the array, because the array is not of type nested. I am using dynamic template to create index. Is there any way to search si… --- ## [How to compare the cost of Search Request](https://discuss.elastic.co/t/how-to-compare-the-cost-of-search-request/228881)
**Author:** [@jeffzhao](https://discuss.elastic.co/u/jeffzhao)\ **Replies:** 2\ **Last updated:** [April 26, 2020, 4:19pm UTC](https://discuss.elastic.co/t/how-to-compare-the-cost-of-search-request/228881 "2020-04-26T16:19:57Z")
Hi, I want to optimize index settings, for example, customized \_routing parameter, to see if it can improve search performance. The problem is Elasticsearch always cache the query result, so when I run the search for th… --- ## [Connect flask application to logstash](https://discuss.elastic.co/t/connect-flask-application-to-logstash/229844)
**Author:** [@souma](https://discuss.elastic.co/u/souma)\ **Replies:** 0\ **Last updated:** [April 26, 2020, 12:43pm UTC](https://discuss.elastic.co/t/connect-flask-application-to-logstash/229844 "2020-04-26T12:43:10Z")
Hi everyone! I'm developing a web application using Flask and i want to run logstash from my app. What i want precisely is each time i enter a file name and then pass the name to logstash config file and by clicking … --- ## [Searchable S3 Snapshots - availability?](https://discuss.elastic.co/t/searchable-s3-snapshots-availability/229527)
**Author:** [@cks](https://discuss.elastic.co/u/cks)\ **Replies:** 3\ **Last updated:** [April 26, 2020, 12:08pm UTC](https://discuss.elastic.co/t/searchable-s3-snapshots-availability/229527 "2020-04-26T12:08:59Z")
Earlier today during Elasticon East Q&A, there was discussion on object storage for storing snapshots such as in S3. Going forward there was plan to make it searchable on S3 based snapshots (new "Frozen" data tier). Is t… --- ## [Sort Based on text Position from multiple fields](https://discuss.elastic.co/t/sort-based-on-text-position-from-multiple-fields/229830)
**Author:** [@psramkumar](https://discuss.elastic.co/u/psramkumar)\ **Replies:** 0\ **Last updated:** [April 26, 2020, 9:29am UTC](https://discuss.elastic.co/t/sort-based-on-text-position-from-multiple-fields/229830 "2020-04-26T09:29:34Z")
{ "size": 100, "\_source": { "includes": \[ "id", "name", "type", "acc\_names" \] }, "query": { "match\_phrase\_prefix": { "na… --- ## [Nested query and exists query](https://discuss.elastic.co/t/nested-query-and-exists-query/229827)
**Author:** [@HaijieChen](https://discuss.elastic.co/u/HaijieChen)\ **Replies:** 0\ **Last updated:** [April 26, 2020, 9:13am UTC](https://discuss.elastic.co/t/nested-query-and-exists-query/229827 "2020-04-26T09:13:16Z")
i think first image is same as second image code , but fist can hit the target ,the second not. --- ## [Jdbc input, its really necessary to order the results ascending?](https://discuss.elastic.co/t/jdbc-input-its-really-necessary-to-order-the-results-ascending/229820)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [April 26, 2020, 7:53am UTC](https://discuss.elastic.co/t/jdbc-input-its-really-necessary-to-order-the-results-ascending/229820 "2020-04-26T07:53:49Z")
hi, im getting data from a postgregs db, the tracking column that im using is unix epoch called clock this is part of my conf: input{ "...other parameters... … --- ## [Swarm of shard search requests cause Elasticsearch transport worker blocked on ClosableThreadLocal](https://discuss.elastic.co/t/swarm-of-shard-search-requests-cause-elasticsearch-transport-worker-blocked-on-closablethreadlocal/229803)
**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\ **Replies:** 1\ **Last updated:** [April 26, 2020, 6:47am UTC](https://discuss.elastic.co/t/swarm-of-shard-search-requests-cause-elasticsearch-transport-worker-blocked-on-closablethreadlocal/229803 "2020-04-26T06:47:11Z")
Hi, version: 7.5.1 shard size: 10 we do a load test of search for a Elasticsearch cluster. we found the thread dumps indicates that many threads of transport\_worker blocked on InboundHandler.messageReceived() -\> Inbou… --- ## [Manually delete old logs/indices in ELK 7.3.0](https://discuss.elastic.co/t/manually-delete-old-logs-indices-in-elk-7-3-0/227981)
**Author:** [@mohamed.samir](https://discuss.elastic.co/u/mohamed.samir)\ **Replies:** 5\ **Last updated:** [April 26, 2020, 6:46am UTC](https://discuss.elastic.co/t/manually-delete-old-logs-indices-in-elk-7-3-0/227981 "2020-04-26T06:46:12Z")
please, how to delete old logs/indices or in ELK 7.3 before i used to use curl -GET http://localhost:9200/\_cat/indices to see old indices and delete it manually using curl -XDELETE http://localhost:9200/logstash-2020… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1486) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1488)