# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1504 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1505 --- ## [Pattern not applied](https://discuss.elastic.co/t/pattern-not-applied/228683)
**Author:** [@woro](https://discuss.elastic.co/u/woro)\ **Replies:** 0\ **Last updated:** [April 18, 2020, 9:53pm UTC](https://discuss.elastic.co/t/pattern-not-applied/228683 "2020-04-18T21:53:37Z")
Hi, I'm rather new to Elastic and now I'm running into a strange problem I do not understand and did not find the right pointer to fix it. I think everyone worked fine in the beginning but then I added a new input and … --- ## [ES: failed to execute bulk item (index) index {\[shakespeare\]](https://discuss.elastic.co/t/es-failed-to-execute-bulk-item-index-index-shakespeare/228614)
**Author:** [@Dejrgn](https://discuss.elastic.co/u/Dejrgn)\ **Replies:** 5\ **Last updated:** [April 18, 2020, 9:52pm UTC](https://discuss.elastic.co/t/es-failed-to-execute-bulk-item-index-index-shakespeare/228614 "2020-04-18T21:52:52Z")
(Edited: replaced pictures from outputs by formated outputs) Hi all, first of all: I greatly appreciate it that you want to take your time to see what is going wrong in my project. I'm new to Elasticsearch and Kibana … --- ## [Significant\_terms JLH scientific paper](https://discuss.elastic.co/t/significant-terms-jlh-scientific-paper/228655)
**Author:** [@crab86](https://discuss.elastic.co/u/crab86)\ **Replies:** 2\ **Last updated:** [April 18, 2020, 8:38pm UTC](https://discuss.elastic.co/t/significant-terms-jlh-scientific-paper/228655 "2020-04-18T20:38:58Z")
Does anybody know if there is a scientific paper describing JLH as a statistical significance method? I did not find any document describing what JLH actually does - although i looked it up in the source code already. I … --- ## [Cannot access Strigo webpage](https://discuss.elastic.co/t/cannot-access-strigo-webpage/228434)
**Author:** [@tushar.bansal](https://discuss.elastic.co/u/tushar.bansal)\ **Replies:** 3\ **Last updated:** [April 18, 2020, 8:37pm UTC](https://discuss.elastic.co/t/cannot-access-strigo-webpage/228434 "2020-04-18T20:37:28Z")
Hi, I am starting my training for Elasticsearch Engineer 1. When I try to access lab, it does not load. I tried on other computer, it opens but my DNS URl of amazonaws does not work. It times out. Any advise? --- ## [Logstash and journald](https://discuss.elastic.co/t/logstash-and-journald/228672)
**Author:** [@elastic\_user1](https://discuss.elastic.co/u/elastic_user1)\ **Replies:** 0\ **Last updated:** [April 18, 2020, 6:31pm UTC](https://discuss.elastic.co/t/logstash-and-journald/228672 "2020-04-18T18:31:33Z")
I noticed I could not see all Logstash logs in journalctl -f -u logstash. I have some pipelines with stdout (ruby debug). How can I get all my separate pipelines' logs into the files. I can see only the messages that Lo… --- ## [Match query with type phrase](https://discuss.elastic.co/t/match-query-with-type-phrase/228669)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 0\ **Last updated:** [April 18, 2020, 5:58pm UTC](https://discuss.elastic.co/t/match-query-with-type-phrase/228669 "2020-04-18T17:58:42Z")
Is the following query equvalent to "match phrase" type of query { "query": { "match": { "useragent.name.keyword": { "query": "Firefox", "type": "phrase" } } } } I didnt see any reference related to - " "type… --- ## [Load data from mysql to elasticsearch with logstash](https://discuss.elastic.co/t/load-data-from-mysql-to-elasticsearch-with-logstash/228665)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 0\ **Last updated:** [April 18, 2020, 5:43pm UTC](https://discuss.elastic.co/t/load-data-from-mysql-to-elasticsearch-with-logstash/228665 "2020-04-18T17:43:27Z")
Hi, I want to load data from mysql ( mysql wampserver ) into elasticsearch via logstash. After downloading elasticsearch ,kibana and logstash ,i installed "com.mysql.jdbc\_5.1.5" (JDBC). test.conf input { jdbc { jdb… --- ## [Logstash Add Tag if Message Starts With](https://discuss.elastic.co/t/logstash-add-tag-if-message-starts-with/228607)
**Author:** [@ericbarnes](https://discuss.elastic.co/u/ericbarnes)\ **Replies:** 1\ **Last updated:** [April 18, 2020, 5:08pm UTC](https://discuss.elastic.co/t/logstash-add-tag-if-message-starts-with/228607 "2020-04-18T17:08:56Z")
We are using the Jenkins logstash plugin. So the logstash config is just an input and ouput. The plugin sends pre-formatted json, so not much to do besides collect and forward. We want to enrich based off the type of log… --- ## [How do I take multiple CSV files into a single Elasticsearch index using logstash?](https://discuss.elastic.co/t/how-do-i-take-multiple-csv-files-into-a-single-elasticsearch-index-using-logstash/228661)
**Author:** [@Drashti\_Shah](https://discuss.elastic.co/u/Drashti_Shah)\ **Replies:** 0\ **Last updated:** [April 18, 2020, 4:53pm UTC](https://discuss.elastic.co/t/how-do-i-take-multiple-csv-files-into-a-single-elasticsearch-index-using-logstash/228661 "2020-04-18T16:53:16Z")
I have two CSV files in which, CSV 1 (student\_master) has the following fields: Student ID, First Name, Gender, State and in CSV 2,(student\_marks\_data) I have Student ID, Date, Math, Physics, Chemistry, Total, Percenta… --- ## [Artifacts.elastic.co is very slow? Can't download analysis-icu plugin](https://discuss.elastic.co/t/artifacts-elastic-co-is-very-slow-cant-download-analysis-icu-plugin/228654)
**Author:** [@vorapoap](https://discuss.elastic.co/u/vorapoap)\ **Replies:** 1\ **Last updated:** [April 18, 2020, 4:17pm UTC](https://discuss.elastic.co/t/artifacts-elastic-co-is-very-slow-cant-download-analysis-icu-plugin/228654 "2020-04-18T16:17:39Z")
I have tried to download the analysis-icu plugin many times, but failed. Stuck at 1.1M, 1.4M 5.5M.. and halt.. Please help.. Why there is no mirror for aritifacts.elastic.co? wget https://artifacts.elastic.co/downloa… --- ## [How to show each minute data points in line charts](https://discuss.elastic.co/t/how-to-show-each-minute-data-points-in-line-charts/226628)
**Author:** [@lohit18](https://discuss.elastic.co/u/lohit18)\ **Replies:** 2\ **Last updated:** [April 18, 2020, 3:30pm UTC](https://discuss.elastic.co/t/how-to-show-each-minute-data-points-in-line-charts/226628 "2020-04-18T15:30:21Z")
Guys, anyone has idea how to show each minute data in line charts using timestamp. i am unable to drag data points --- ## [Do I need to manually copy over mappings before a reindex operation?](https://discuss.elastic.co/t/do-i-need-to-manually-copy-over-mappings-before-a-reindex-operation/226107)
**Author:** [@ishanjain](https://discuss.elastic.co/u/ishanjain)\ **Replies:** 4\ **Last updated:** [April 18, 2020, 3:17pm UTC](https://discuss.elastic.co/t/do-i-need-to-manually-copy-over-mappings-before-a-reindex-operation/226107 "2020-04-18T15:17:10Z")
Hi! I am trying to reindex multiple indexes into one. Right now, My code looks like this. Create the destination index with settings.number\_of\_replicas = 0. Iterate over source index one by one and reindex each index… --- ## [How the fixed\_interval time buckets were divided in date\_histogram aggregation?](https://discuss.elastic.co/t/how-the-fixed-interval-time-buckets-were-divided-in-date-histogram-aggregation/228646)
**Author:** [@STAR\_DEVX](https://discuss.elastic.co/u/STAR_DEVX)\ **Replies:** 0\ **Last updated:** [April 18, 2020, 1:21pm UTC](https://discuss.elastic.co/t/how-the-fixed-interval-time-buckets-were-divided-in-date-histogram-aggregation/228646 "2020-04-18T13:21:30Z")
Hi, I'm puzzled with the how the time buckets are divided with the fixed\_interval in date\_histogram aggregations. I have the following simple query: { "query": { "bool": { "filter": \[ {"range": {"sta… --- ## [Wrong zone used for query?](https://discuss.elastic.co/t/wrong-zone-used-for-query/228642)
**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\ **Replies:** 1\ **Last updated:** [April 18, 2020, 12:45pm UTC](https://discuss.elastic.co/t/wrong-zone-used-for-query/228642 "2020-04-18T12:45:03Z")
How do I ensure my queries are directed to nodes in the same zone? My queries are running slow, and I just learned about "profile": true,. In the profile I could see the slow \[node\]\[index\]\[shard\] that was causing the pr… --- ## [Loading performance - what should I expect?](https://discuss.elastic.co/t/loading-performance-what-should-i-expect/228621)
**Author:** [@shawmat](https://discuss.elastic.co/u/shawmat)\ **Replies:** 4\ **Last updated:** [April 18, 2020, 11:47am UTC](https://discuss.elastic.co/t/loading-performance-what-should-i-expect/228621 "2020-04-18T11:47:16Z")
This is Day 1 of me using elasticsearch so apologies for the basic question. Line-by-line loading seems really slow, but I've no idea what to expect. I have 80 character text strings (lines of English words from books) … --- ## [Multiline not working properly](https://discuss.elastic.co/t/multiline-not-working-properly/228636)
**Author:** [@haneefh](https://discuss.elastic.co/u/haneefh)\ **Replies:** 0\ **Last updated:** [April 18, 2020, 11:35am UTC](https://discuss.elastic.co/t/multiline-not-working-properly/228636 "2020-04-18T11:35:11Z")
I am using filebeats to send Atlassian catalina Logs. Below is a snippet filebeat configuration - /opt/atlassian/jira/logs/catalina.out fields: log\_type: catalina log\_application: atlassian\_jira multiline.pattern: '… --- ## [Slow Query, where to start? (v6.5.4)](https://discuss.elastic.co/t/slow-query-where-to-start-v6-5-4/228404)
**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\ **Replies:** 4\ **Last updated:** [April 18, 2020, 10:55am UTC](https://discuss.elastic.co/t/slow-query-where-to-start-v6-5-4/228404 "2020-04-18T10:55:04Z")
I am wondering if there is a solution to a slow-query problem I am having. Can it be a single, slow node? How do I find out? Maybe the query node is the bottleneck? It does not look busy, how to find out? The shards a… --- ## [Perform recovery twice when the full cluster restarts](https://discuss.elastic.co/t/perform-recovery-twice-when-the-full-cluster-restarts/228633)
**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\ **Replies:** 0\ **Last updated:** [April 18, 2020, 10:01am UTC](https://discuss.elastic.co/t/perform-recovery-twice-when-the-full-cluster-restarts/228633 "2020-04-18T10:01:57Z")
Elasticsearch version：7.6.0 When I perform a full cluster restart, when active\_shards\_percent\_as\_number\> 90%, a new recovery is triggered.Why did it recover twice？ I find the log as follows: recovered \[582\] indices i… --- ## [Returning Multiple Events from Ruby Plugin](https://discuss.elastic.co/t/returning-multiple-events-from-ruby-plugin/227577)
**Author:** [@mdt](https://discuss.elastic.co/u/mdt)\ **Replies:** 1\ **Last updated:** [April 18, 2020, 9:48am UTC](https://discuss.elastic.co/t/returning-multiple-events-from-ruby-plugin/227577 "2020-04-18T09:48:28Z")
I need to parse some incoming messages where for network reasons, one event as seen by Logstash is really a concatenation of multiple events. To do that I'm trying to use the ruby plugin, breaking the initial message int… --- ## [How can I get the bucket script result unconditionally even when the value is 0?](https://discuss.elastic.co/t/how-can-i-get-the-bucket-script-result-unconditionally-even-when-the-value-is-0/228631)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 0\ **Last updated:** [April 18, 2020, 9:40am UTC](https://discuss.elastic.co/t/how-can-i-get-the-bucket-script-result-unconditionally-even-when-the-value-is-0/228631 "2020-04-18T09:40:52Z")
1.Calculate the total time using sum aggs. 2. Calculate the number of users using cardinality aggs. 3. Count the total time/number of users using a bucket script to get the average time. However, if the total time is … --- ## [Store, render and search different types of semi-structured data in elasticsearch](https://discuss.elastic.co/t/store-render-and-search-different-types-of-semi-structured-data-in-elasticsearch/228511)
**Author:** [@jgeek](https://discuss.elastic.co/u/jgeek)\ **Replies:** 4\ **Last updated:** [April 18, 2020, 8:41am UTC](https://discuss.elastic.co/t/store-render-and-search-different-types-of-semi-structured-data-in-elasticsearch/228511 "2020-04-18T08:41:47Z")
We have a couple of different features in our application both of which have different types of semi-structured data sets. One of them has a json data set (rest api responses) while other has html files that includes aud… --- ## [Convert $0.50 to float converts it to 0.00](https://discuss.elastic.co/t/convert-0-50-to-float-converts-it-to-0-00/228561)
**Author:** [@Yaniv\_Nuriel](https://discuss.elastic.co/u/Yaniv_Nuriel)\ **Replies:** 4\ **Last updated:** [April 18, 2020, 7:15am UTC](https://discuss.elastic.co/t/convert-0-50-to-float-converts-it-to-0-00/228561 "2020-04-18T07:15:22Z")
Hey all, Here are my load file: Spend,Bbb $0.55,100 $0.80,200 The conf.file is: input { file { path =\> "/Users/yanivnuriel/logstash/data/ads/searchterms/us/one-line-15.txt" start\_posit… --- ## [GROK strange issue](https://discuss.elastic.co/t/grok-strange-issue/228618)
**Author:** [@brunus0475](https://discuss.elastic.co/u/brunus0475)\ **Replies:** 0\ **Last updated:** [April 18, 2020, 5:27am UTC](https://discuss.elastic.co/t/grok-strange-issue/228618 "2020-04-18T05:27:44Z")
Hi All, where is my configuration error, we've only moved the timestamp field at the start of the message: ## GROK NOT WORK POST /\_ingest/pipeline/\_simulate { "pipeline": { "processors": \[ … --- ## [Filter (RANGE) on different fields in elasticsearch](https://discuss.elastic.co/t/filter-range-on-different-fields-in-elasticsearch/228613)
**Author:** [@jeanpjm](https://discuss.elastic.co/u/jeanpjm)\ **Replies:** 0\ **Last updated:** [April 18, 2020, 4:52am UTC](https://discuss.elastic.co/t/filter-range-on-different-fields-in-elasticsearch/228613 "2020-04-18T04:52:07Z")
Hello people, I'm a beginner in elasticsarch and I wanted this query below to work with two RANGE filters in different fields, but only the first RANGE is working. This filter below is working normally: "range" : {"pg… --- ## [Help in Parsing JSON Log File](https://discuss.elastic.co/t/help-in-parsing-json-log-file/228600)
**Author:** [@Osama\_Samaan](https://discuss.elastic.co/u/Osama_Samaan)\ **Replies:** 1\ **Last updated:** [April 18, 2020, 2:33am UTC](https://discuss.elastic.co/t/help-in-parsing-json-log-file/228600 "2020-04-18T02:33:46Z")
Hi, Please need your help to parse log file contains entries with JSON formated entries , each has the same format as below example : { "Buffer": { "timestamp": "2017-11-03 13:32:55.840817", "pcapfile": "file.pcap", … --- ## [Ruby exception occurred: undefined method \`\[\]' for #\ **Author:** [@Jaikumar\_Ganesan](https://discuss.elastic.co/u/Jaikumar_Ganesan)\ **Replies:** 6\ **Last updated:** [April 18, 2020, 2:25am UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-logstash-0x1f8ee438/228521 "2020-04-18T02:25:10Z") I'm using logstash 7.5.1. I would like to parse through all fields of my logstash and convert field starting with the word "time" to float. Please find below my configuration: filter { # Parse Search Logs grok { … --- ## [Index and lifecycle error and failed to rotate to warm phrase by ILM](https://discuss.elastic.co/t/index-and-lifecycle-error-and-failed-to-rotate-to-warm-phrase-by-ilm/227570)
**Author:** [@chunan](https://discuss.elastic.co/u/chunan)\ **Replies:** 13\ **Last updated:** [April 17, 2020, 11:13pm UTC](https://discuss.elastic.co/t/index-and-lifecycle-error-and-failed-to-rotate-to-warm-phrase-by-ilm/227570 "2020-04-17T23:13:57Z")
vector-diags-000005 failed to rotate. As you can see, 000004 was automatically rotated to 000005. But 000005 continued on to grow in size until it errors out. vector-diags-000005 3 P STARTED 1745886 262.8mb 192.16… --- ## [Unable to install logstash plugin](https://discuss.elastic.co/t/unable-to-install-logstash-plugin/228565)
**Author:** [@dranga](https://discuss.elastic.co/u/dranga)\ **Replies:** 0\ **Last updated:** [April 17, 2020, 7:33pm UTC](https://discuss.elastic.co/t/unable-to-install-logstash-plugin/228565 "2020-04-17T19:33:20Z")
Hi, I am new to JRuby and Logstash. I am trying to setup Logstash locally and install some custom plugins. I added my custom plugins to the Gemfile and tried running bin/logstash-plugin the following way: ~/logstash-6… --- ## [Elasticsearch avg aggregation is taking ages to return in 7.2](https://discuss.elastic.co/t/elasticsearch-avg-aggregation-is-taking-ages-to-return-in-7-2/228493)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 0\ **Last updated:** [April 17, 2020, 10:38am UTC](https://discuss.elastic.co/t/elasticsearch-avg-aggregation-is-taking-ages-to-return-in-7-2/228493 "2020-04-17T10:38:18Z")
We recently moved from 1.7 to 7.2 and I was running some aggregations to verify a few statistics { "size": 0, "aggs": { "avgcsat": { "avg": { "field": "csat" } } } } The csat field is … --- ## [Rollup job lost some data](https://discuss.elastic.co/t/rollup-job-lost-some-data/228593)
**Author:** [@Jason\_Du](https://discuss.elastic.co/u/Jason_Du)\ **Replies:** 0\ **Last updated:** [April 17, 2020, 10:13pm UTC](https://discuss.elastic.co/t/rollup-job-lost-some-data/228593 "2020-04-17T22:13:46Z")
I have a rollup job, it does daily aggregations. But for unknown reason, some data not included in the rollup index. The job was created at the beginning of each month and was running in the started state until the end o… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1503) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1505)