# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1509 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1510 --- ## [Elastic search + workplace search implementation on linux server](https://discuss.elastic.co/t/elastic-search-workplace-search-implementation-on-linux-server/228308)
**Author:** [@anchal\_kalra](https://discuss.elastic.co/u/anchal_kalra)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 11:37am UTC](https://discuss.elastic.co/t/elastic-search-workplace-search-implementation-on-linux-server/228308 "2020-04-16T11:37:18Z")
We are trying to implement elastic workplace search on a linux server referring the link: https://www.elastic.co/downloads/enterprise-search The Red Hat linux server is a restricted one and we can't directly download a… --- ## [ECS common schema taxonomies for other sources](https://discuss.elastic.co/t/ecs-common-schema-taxonomies-for-other-sources/228220)
**Author:** [@rossw](https://discuss.elastic.co/u/rossw)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 11:20am UTC](https://discuss.elastic.co/t/ecs-common-schema-taxonomies-for-other-sources/228220 "2020-04-16T11:20:31Z")
Hi there We are looking at pushing events from a lot of our network and security devices into Elastic for storage, and utilising the SIEM functionality as well. We understand the requirement for ECS, and we have starte… --- ## [SOAR for elk](https://discuss.elastic.co/t/soar-for-elk/228133)
**Author:** [@oumy](https://discuss.elastic.co/u/oumy)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 11:03am UTC](https://discuss.elastic.co/t/soar-for-elk/228133 "2020-04-16T11:03:02Z")
Hello there, i was wondering if there is an open source SOAR that can be integrated with elk stack, and if so how to do so? and does any of you know how too integrate PatrOwl with elk stack? Thank you --- ## [Calculating percentage and alerting through email](https://discuss.elastic.co/t/calculating-percentage-and-alerting-through-email/227664)
**Author:** [@rcganesh](https://discuss.elastic.co/u/rcganesh)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 10:51am UTC](https://discuss.elastic.co/t/calculating-percentage-and-alerting-through-email/227664 "2020-04-16T10:51:08Z")
Hello, I need some inputs on how to achieve below points through Kibana. We are injecting data into Elasticsearch from MQ application. One of the fields in thedata is "Status". This field can be either "SUCCESS" or "FA… --- ## [How to parse/load JSON file or .TXT file containing JSON to logstash using GROK](https://discuss.elastic.co/t/how-to-parse-load-json-file-or-txt-file-containing-json-to-logstash-using-grok/228246)
**Author:** [@Dhruv\_Mevada](https://discuss.elastic.co/u/Dhruv_Mevada)\ **Replies:** 4\ **Last updated:** [April 16, 2020, 10:47am UTC](https://discuss.elastic.co/t/how-to-parse-load-json-file-or-txt-file-containing-json-to-logstash-using-grok/228246 "2020-04-16T10:47:44Z")
I'm new in ELK & I have logs in JSON format & I can save it to JSON file or txt file. Now, Which will be a better approach should I save logs to JSON file or txt file? How should I parse/load the logs to Logstash, what… --- ## [Question about prequery of DFS\_Query\_then\_Fetch](https://discuss.elastic.co/t/question-about-prequery-of-dfs-query-then-fetch/228287)
**Author:** [@Hyunsoo\_Shim](https://discuss.elastic.co/u/Hyunsoo_Shim)\ **Replies:** 3\ **Last updated:** [April 16, 2020, 10:38am UTC](https://discuss.elastic.co/t/question-about-prequery-of-dfs-query-then-fetch/228287 "2020-04-16T10:38:08Z")
Hello, I have a simple question about "prequery" step of "DFS\_Query\_then\_Fetch" search type. When we create an index of only 1 primary shard and make 4 replicas, is "prequery" excuted for all 5 shards(primary and repl… --- ## [Multi dynamic templates - issue](https://discuss.elastic.co/t/multi-dynamic-templates-issue/228296)
**Author:** [@adude946](https://discuss.elastic.co/u/adude946)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 10:19am UTC](https://discuss.elastic.co/t/multi-dynamic-templates-issue/228296 "2020-04-16T10:19:55Z")
I'm testing implementing multiple dynamic templates on 3 different fields but each time mapping is not getting created correctly. Only the first array object template is picked up. Any help would be great on what is wron… --- ## [I want to create grok pattern for custom log](https://discuss.elastic.co/t/i-want-to-create-grok-pattern-for-custom-log/227143)
**Author:** [@Atul\_Gunjal](https://discuss.elastic.co/u/Atul_Gunjal)\ **Replies:** 6\ **Last updated:** [April 16, 2020, 10:19am UTC](https://discuss.elastic.co/t/i-want-to-create-grok-pattern-for-custom-log/227143 "2020-04-16T10:19:15Z")
Hi, Following is a log-pattern and I tried creating one but it didn't work. Log: 2020-04-07 00:00:02 Local0 Info 00:00:01:911 DMSTST-TBOX.DEV.cloud.companyname.com DEV\\DMSTST-TBOX$|17352|DICOM Service VMSDBD\_SVC\_DICOM… --- ## [Using sort with elastic request is not returning score in the response](https://discuss.elastic.co/t/using-sort-with-elastic-request-is-not-returning-score-in-the-response/227890)
**Author:** [@guruprasadkk](https://discuss.elastic.co/u/guruprasadkk)\ **Replies:** 4\ **Last updated:** [April 16, 2020, 10:17am UTC](https://discuss.elastic.co/t/using-sort-with-elastic-request-is-not-returning-score-in-the-response/227890 "2020-04-16T10:17:03Z")
I am using elasticsearch-rest-high-level-client 7.6.2 version to interact with elastic server from my java application. Now I am planning to use sorting capability in elastic. When I added the sort in the elastic reques… --- ## [Helm-chart and ExtraVolumes](https://discuss.elastic.co/t/helm-chart-and-extravolumes/227907)
**Author:** [@jgato](https://discuss.elastic.co/u/jgato)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 9:56am UTC](https://discuss.elastic.co/t/helm-chart-and-extravolumes/227907 "2020-04-16T09:56:49Z")
Hi there, I am deploying a cluster using your helm-chart package and everything goes ok. Now I would like to make something more advanced, like creating a backup repo, and export this directory as a volume. Trying some… --- ## [ES responding very slow after Rolling Restart](https://discuss.elastic.co/t/es-responding-very-slow-after-rolling-restart/228290)
**Author:** [@Vipul\_Sharma](https://discuss.elastic.co/u/Vipul_Sharma)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 9:48am UTC](https://discuss.elastic.co/t/es-responding-very-slow-after-rolling-restart/228290 "2020-04-16T09:48:18Z")
I have just restart my elasticsearch cluster only data-nodes increase the number of Core after the restart ES is responding very slow The query is taking almost around 3K ms while it uses to take 300ms at max Did we mi… --- ## [Metrics for replica sync - ES 7.0.1](https://discuss.elastic.co/t/metrics-for-replica-sync-es-7-0-1/227866)
**Author:** [@dinesh\_gnanasamy](https://discuss.elastic.co/u/dinesh_gnanasamy)\ **Replies:** 3\ **Last updated:** [April 16, 2020, 9:25am UTC](https://discuss.elastic.co/t/metrics-for-replica-sync-es-7-0-1/227866 "2020-04-16T09:25:50Z")
Are there any specific metrics which indicate if the replica shards are out of sync wrt primary shards. I checked something which appears relatively closer from \_cat/shards API seq\_no.global\_checkpoint , sqg , global… --- ## [Unable to start Elasticsearch in Windows10](https://discuss.elastic.co/t/unable-to-start-elasticsearch-in-windows10/227789)
**Author:** [@srivatsans](https://discuss.elastic.co/u/srivatsans)\ **Replies:** 14\ **Last updated:** [April 16, 2020, 8:56am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-in-windows10/227789 "2020-04-16T08:56:40Z")
I have downloaded 7.6.2 and 7.5.0 .zip versions of ES and unzipped them. When I run '.\\bin\\elasticsearch.bat', it throws error 'The system cannot open the device or file specified'. I have set the JAVA\_HOME to the JRE pa… --- ## [Cron jobs in http\_poller](https://discuss.elastic.co/t/cron-jobs-in-http-poller/227305)
**Author:** [@akhilsharma.in](https://discuss.elastic.co/u/akhilsharma.in)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 8:47am UTC](https://discuss.elastic.co/t/cron-jobs-in-http-poller/227305 "2020-04-16T08:47:43Z")
Hi, I'm using http\_poller in input and running it via cron job. I have scheduled it for everyday as per my understanding but it is running every 48 hours. Please assist. Cron job: cron =\> "0 5 1-31 \* \* UTC" Platform: … --- ## [Reponse from Kibana 7.6.0 UI is very slow in Firefox Web Browser](https://discuss.elastic.co/t/reponse-from-kibana-7-6-0-ui-is-very-slow-in-firefox-web-browser/227680)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 5\ **Last updated:** [April 16, 2020, 8:36am UTC](https://discuss.elastic.co/t/reponse-from-kibana-7-6-0-ui-is-very-slow-in-firefox-web-browser/227680 "2020-04-16T08:36:46Z")
Hello, I am working with 6.3.2 Elastic stack components. I created new Log Management based on Elastic Stack 7.6.0 and Kibana is very slow with comparison 6.3.2 version. Server settings On ES nodes isn't any load. Data… --- ## [Parse and query K8S HAproxy logs by Logstash pipeline filter, filebeat and Kibana](https://discuss.elastic.co/t/parse-and-query-k8s-haproxy-logs-by-logstash-pipeline-filter-filebeat-and-kibana/228276)
**Author:** [@lsambolino](https://discuss.elastic.co/u/lsambolino)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 8:24am UTC](https://discuss.elastic.co/t/parse-and-query-k8s-haproxy-logs-by-logstash-pipeline-filter-filebeat-and-kibana/228276 "2020-04-16T08:24:21Z")
Hi, I am relatively new to ELK. I am trying to parse the K8S HAproxy containers logs via GROK inside the filter config in Logstash. My goal is to query haproxy logs fields easily. On the Kubernetes side, I've deployed… --- ## [ElasticsearchのDisk-based shard allocation機能について](https://discuss.elastic.co/t/elasticsearch-disk-based-shard-allocation/228270)
**Author:** [@YousukeFukuta](https://discuss.elastic.co/u/YousukeFukuta)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 8:02am UTC](https://discuss.elastic.co/t/elasticsearch-disk-based-shard-allocation/228270 "2020-04-16T08:02:50Z")
現在Elasticsearchを使用しているディスクの容量が不足してきたため、新しいディスクを用意して、そちらに移行することを検討しています。 Elasticsearchは、Disk-based shard allocation機能によりディスクの使用量 or 使用率を監視しており、デフォルトであればディスク使用率が95%を超過するとindexがread-onlyになる、と認識しています。 なお、使用しているElasticsearc… --- ## [Hide legends in vertical bar chart in Kibana 7.4.2](https://discuss.elastic.co/t/hide-legends-in-vertical-bar-chart-in-kibana-7-4-2/227843)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 5\ **Last updated:** [April 16, 2020, 7:54am UTC](https://discuss.elastic.co/t/hide-legends-in-vertical-bar-chart-in-kibana-7-4-2/227843 "2020-04-16T07:54:26Z")
I wish to hide the legend in vertical bar chart. It looks odd if number of entries goes beyond 10/15 in x axis Can someone please help --- ## [Does es have the Incremental change function like mysql‘s binlog](https://discuss.elastic.co/t/does-es-have-the-incremental-change-function-like-mysql-s-binlog/228259)
**Author:** [@q6413260](https://discuss.elastic.co/u/q6413260)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 7:52am UTC](https://discuss.elastic.co/t/does-es-have-the-incremental-change-function-like-mysql-s-binlog/228259 "2020-04-16T07:52:42Z")
I want to subscribe es’s Incremental change(some write events like mysql binlog) to trigger some business check event. How can I achieve this goal？Thank you --- ## [How Logstash or filebeat determins the type of logs?](https://discuss.elastic.co/t/how-logstash-or-filebeat-determins-the-type-of-logs/227779)
**Author:** [@gauravbhutani30](https://discuss.elastic.co/u/gauravbhutani30)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 7:33am UTC](https://discuss.elastic.co/t/how-logstash-or-filebeat-determins-the-type-of-logs/227779 "2020-04-16T07:33:33Z")
How does the logstash or the filebeat determine the type of logs, we just provide "type = syslogs" or any other. I want to parse a custom log file, which has text in it. Please help! --- ## [Winlog.computer\_name](https://discuss.elastic.co/t/winlog-computer-name/228190)
**Author:** [@bca](https://discuss.elastic.co/u/bca)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 7:17am UTC](https://discuss.elastic.co/t/winlog-computer-name/228190 "2020-04-16T07:17:40Z")
I'm relatively new to this field and looking for information on what I should look for when troubleshooting specific winlog.\_ or event.\_ data. Where would be the best place to look? I've already gone through the Export F… --- ## [Missing event while report to elastic search](https://discuss.elastic.co/t/missing-event-while-report-to-elastic-search/228262)
**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 7:06am UTC](https://discuss.elastic.co/t/missing-event-while-report-to-elastic-search/228262 "2020-04-16T07:06:21Z")
Hi All, i could see some events are missing while reporting logs to elastic search. Take an example i am sending 5 logs event only 4 or 3 are reporting. Basically i am using logstash 7.4 to read my log messages and sto… --- ## [How to set index as interface ip dynamically in elasticsearch](https://discuss.elastic.co/t/how-to-set-index-as-interface-ip-dynamically-in-elasticsearch/228114)
**Author:** [@mmk](https://discuss.elastic.co/u/mmk)\ **Replies:** 0\ **Last updated:** [April 15, 2020, 12:22pm UTC](https://discuss.elastic.co/t/how-to-set-index-as-interface-ip-dynamically-in-elasticsearch/228114 "2020-04-15T12:22:33Z")
I am using below config to create index (IP and date), actually i will be running logstash in different host and i want to differentiate each host logs with index value. so i have decided to use interface ip and host na… --- ## [Visualizations broken for metricbeat rds](https://discuss.elastic.co/t/visualizations-broken-for-metricbeat-rds/226752)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 5\ **Last updated:** [April 16, 2020, 7:04am UTC](https://discuss.elastic.co/t/visualizations-broken-for-metricbeat-rds/226752 "2020-04-16T07:04:33Z")
Hello, I just setup a way to import data from aws rds in elasticsearch so that I can get some nice dashboards but the visualisations are completely broken. I had to edit most of te visualizations and add the fields which… --- ## [What do "total\_stopped\_time/total\_throttled\_time/total\_auto\_throttle“ mean in index merge stats api?](https://discuss.elastic.co/t/what-do-total-stopped-time-total-throttled-time-total-auto-throttle-mean-in-index-merge-stats-api/228258)
**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 6:39am UTC](https://discuss.elastic.co/t/what-do-total-stopped-time-total-throttled-time-total-auto-throttle-mean-in-index-merge-stats-api/228258 "2020-04-16T06:39:37Z")
I found these metric are slightly large { "current": 30, "current\_docs": 564106582, "current\_size": "385.7gb", "current\_size\_in\_bytes": 414198867561, "total": 33588, "total\_time": "2.9d", "total\_time\_in\_m… --- ## [Logstash syslog plugin SSL](https://discuss.elastic.co/t/logstash-syslog-plugin-ssl/228256)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 6:30am UTC](https://discuss.elastic.co/t/logstash-syslog-plugin-ssl/228256 "2020-04-16T06:30:39Z")
Can I implement basic SSL security between my source and logstash Syslog plugin without any third party tools? --- ## [Splitting a string into chunks of a certain size](https://discuss.elastic.co/t/splitting-a-string-into-chunks-of-a-certain-size/228252)
**Author:** [@Sakthi\_Svm](https://discuss.elastic.co/u/Sakthi_Svm)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 6:05am UTC](https://discuss.elastic.co/t/splitting-a-string-into-chunks-of-a-certain-size/228252 "2020-04-16T06:05:06Z")
Hi, I'm in need to split a string in to multiple sub-string of same size. Is it possible to split by same or min length using ruby code? Pasted my message below, {"Name1 True N… --- ## [Function\_score multi field filters together](https://discuss.elastic.co/t/function-score-multi-field-filters-together/228250)
**Author:** [@Mahdi\_Bahari](https://discuss.elastic.co/u/Mahdi_Bahari)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 5:52am UTC](https://discuss.elastic.co/t/function-score-multi-field-filters-together/228250 "2020-04-16T05:52:33Z")
this is sample collection that's I want to sort result per custom score in elastic search in so try to read documents so founded function score do it for me https://www.elastic.co/guide/en/elasticsearch/reference/curren… --- ## [Input blocking when output is unavailable](https://discuss.elastic.co/t/input-blocking-when-output-is-unavailable/227661)
**Author:** [@orweinberger](https://discuss.elastic.co/u/orweinberger)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 5:25am UTC](https://discuss.elastic.co/t/input-blocking-when-output-is-unavailable/227661 "2020-04-16T05:25:26Z")
I have a TCP input that receives messages, a few filters and a single Elasticsearch output. I'm running a small script that sends messages to the LS TCP port every X miliseconds. After experimenting a bit, I have a few … --- ## [Increasing 'index.mapping.nested\_objects.limit' setting's value has no effect](https://discuss.elastic.co/t/increasing-index-mapping-nested-objects-limit-settings-value-has-no-effect/228242)
**Author:** [@elastic2](https://discuss.elastic.co/u/elastic2)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 5:00am UTC](https://discuss.elastic.co/t/increasing-index-mapping-nested-objects-limit-settings-value-has-no-effect/228242 "2020-04-16T05:00:51Z")
Hello, I am facing an issue, where i get the exception: { "type": "mapper\_parsing\_exception", "reason": "The number of nested documents has exceeded the allowed limit of \[10000\]. This li… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1508) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1510)