# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1560

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1561

---

## [ES Cluster behavior has abnormal](https://discuss.elastic.co/t/es-cluster-behavior-has-abnormal/224354)

<div class="topic-metadata">

**Author:** [@AshokBachchan](https://discuss.elastic.co/u/AshokBachchan)\
**Replies:** 18\
**Last updated:** [March 20, 2020, 4:36pm UTC](https://discuss.elastic.co/t/es-cluster-behavior-has-abnormal/224354 "2020-03-20T16:36:09Z")

</div>

Hello @Christian\_Dahlqvist Dear Christian, In our production cluster, some of the Indices looks abnormal, as if first it is showing GREEN state, then after sometimes it is showing RED state. How it is possible, ex. g…

---

## [Audit partage de fichier](https://discuss.elastic.co/t/audit-partage-de-fichier/224389)

<div class="topic-metadata">

**Author:** [@david\_oliver](https://discuss.elastic.co/u/david_oliver)\
**Replies:** 8\
**Last updated:** [March 20, 2020, 4:23pm UTC](https://discuss.elastic.co/t/audit-partage-de-fichier/224389 "2020-03-20T16:23:13Z")

</div>

Bonjour, J'ai un serveur de fichier j aimerai auditer qui a fais quoi : ajout, modification et suppression. j ai activé les audits file system et file share, je recois bien les log dans kibana avec winlogbeat et elasti…

---

## [ElasticSearch.NET - Overflow exception when using scrollAPI or search\_after](https://discuss.elastic.co/t/elasticsearch-net-overflow-exception-when-using-scrollapi-or-search-after/224449)

<div class="topic-metadata">

**Author:** [@salunkerahul](https://discuss.elastic.co/u/salunkerahul)\
**Replies:** 0\
**Last updated:** [March 20, 2020, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-net-overflow-exception-when-using-scrollapi-or-search-after/224449 "2020-03-20T16:21:15Z")

</div>

I'm attempting read all data from a particular index using the Scroll API(ElasticSearch.NET-7.4.2), but I end up with the following exception # FailureReason: Unrecoverable/Unexpected BadResponse while attempting P…

---

## [Cannot create deployments in ECE](https://discuss.elastic.co/t/cannot-create-deployments-in-ece/224184)

<div class="topic-metadata">

**Author:** [@akimbah](https://discuss.elastic.co/u/akimbah)\
**Replies:** 3\
**Last updated:** [March 20, 2020, 4:13pm UTC](https://discuss.elastic.co/t/cannot-create-deployments-in-ece/224184 "2020-03-20T16:13:05Z")

</div>

I'm unable to create deployments. When I go to create deployments I get a "fetching regions failed" error.

---

## [Forwarding logs to external network ELK cluster](https://discuss.elastic.co/t/forwarding-logs-to-external-network-elk-cluster/224432)

<div class="topic-metadata">

**Author:** [@huntingthreats](https://discuss.elastic.co/u/huntingthreats)\
**Replies:** 3\
**Last updated:** [March 20, 2020, 4:11pm UTC](https://discuss.elastic.co/t/forwarding-logs-to-external-network-elk-cluster/224432 "2020-03-20T16:11:14Z")

</div>

Hi everyone, I have a question about forwarding Beat data from a Customer's network to an offsite network. The idea is to get insight in the hosts data, retrieve those data with agents(Beats) and process them on a separ…

---

## [Stack Monitoring: Missing Logstash Pipeline Stats](https://discuss.elastic.co/t/stack-monitoring-missing-logstash-pipeline-stats/222958)

<div class="topic-metadata">

**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\
**Replies:** 7\
**Last updated:** [March 20, 2020, 3:34pm UTC](https://discuss.elastic.co/t/stack-monitoring-missing-logstash-pipeline-stats/222958 "2020-03-20T15:34:23Z")

</div>

We have a 10 Node Elasticsearch cluster and one single node "cluster" to store all metrics. Those metrics are collected by metricbeat. We ship data into this cluster mainly with logstash. Logstash stats are also gathered…

---

## [Student introduction for GSoC 2020](https://discuss.elastic.co/t/student-introduction-for-gsoc-2020/224352)

<div class="topic-metadata">

**Author:** [@amitsin6h](https://discuss.elastic.co/u/amitsin6h)\
**Replies:** 1\
**Last updated:** [March 20, 2020, 3:10pm UTC](https://discuss.elastic.co/t/student-introduction-for-gsoc-2020/224352 "2020-03-20T15:10:26Z")

</div>

Hello, I am Amit Kumar Singh, from Ranchi University. I am looking to work with Elastic for GSoC 2020. I am interested in working in the development of Project-2: Playground / Toggle System for Live Documentation. I …

---

## [How to parse XML using XPATH from SOAP API in Logstash](https://discuss.elastic.co/t/how-to-parse-xml-using-xpath-from-soap-api-in-logstash/223979)

<div class="topic-metadata">

**Author:** [@Enyer\_Quiroz](https://discuss.elastic.co/u/Enyer_Quiroz)\
**Replies:** 1\
**Last updated:** [March 20, 2020, 2:52pm UTC](https://discuss.elastic.co/t/how-to-parse-xml-using-xpath-from-soap-api-in-logstash/223979 "2020-03-20T14:52:25Z")

</div>

Hello Everyone, I hope you are good, I have this issue with logstash filter using Xpath, I Don't really know if the xpath I Pass is wrong the error I'm getting from cmd is kinda syntax error.... What I'm seeing is like…

---

## [Performance consider for parent child aggregration](https://discuss.elastic.co/t/performance-consider-for-parent-child-aggregration/224434)

<div class="topic-metadata">

**Author:** [@mitelastic](https://discuss.elastic.co/u/mitelastic)\
**Replies:** 0\
**Last updated:** [March 20, 2020, 2:39pm UTC](https://discuss.elastic.co/t/performance-consider-for-parent-child-aggregration/224434 "2020-03-20T14:39:42Z")

</div>

Hi, I am looking for some review on my below aggregate query, any feedback would be great as I am pretty new to Elastic Search. I have index like Email(parent) {senderIp:ipadd, RecieptCount:num, Join:{Campaign}} Campa…

---

## [Logstash secure connection with elastic cluster](https://discuss.elastic.co/t/logstash-secure-connection-with-elastic-cluster/224429)

<div class="topic-metadata">

**Author:** [@jaxvaj](https://discuss.elastic.co/u/jaxvaj)\
**Replies:** 0\
**Last updated:** [March 20, 2020, 2:18pm UTC](https://discuss.elastic.co/t/logstash-secure-connection-with-elastic-cluster/224429 "2020-03-20T14:18:51Z")

</div>

Hi everybody, I will start by saying that i am new to ELK, so i am trying to put up and ELK infrastructure with 2 Logstash servers, an elastic cluster with 2 nodes, and 1 kibana server. I have succeed in securing the …

---

## [Change field name during index](https://discuss.elastic.co/t/change-field-name-during-index/224193)

<div class="topic-metadata">

**Author:** [@Sukramolas](https://discuss.elastic.co/u/Sukramolas)\
**Replies:** 4\
**Last updated:** [March 19, 2020, 2:41pm UTC](https://discuss.elastic.co/t/change-field-name-during-index/224193 "2020-03-19T14:41:58Z")

</div>

It is possible to create a character map analyzer for fields that are indexed but is it possible to do the same for field names? Example field name would be "A|B" and the need would be to change the pipe to some other c…

---

## [Elasticsearch integration with IBM Websphere](https://discuss.elastic.co/t/elasticsearch-integration-with-ibm-websphere/224108)

<div class="topic-metadata">

**Author:** [@Amit\_Rajbhar](https://discuss.elastic.co/u/Amit_Rajbhar)\
**Replies:** 4\
**Last updated:** [March 20, 2020, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-integration-with-ibm-websphere/224108 "2020-03-20T13:42:19Z")

</div>

In my organisation searching portlet names in portal hosted on IBM websphere is implemented using elastic search.I want to know how elastic search can be integrated with IBM websphere? .Also, how to know the installed el…

---

## [Cannot match special characters in regular in ES 7.x](https://discuss.elastic.co/t/cannot-match-special-characters-in-regular-in-es-7-x/224369)

<div class="topic-metadata">

**Author:** [@SparkHex](https://discuss.elastic.co/u/SparkHex)\
**Replies:** 2\
**Last updated:** [March 20, 2020, 1:41pm UTC](https://discuss.elastic.co/t/cannot-match-special-characters-in-regular-in-es-7-x/224369 "2020-03-20T13:41:47Z")

</div>

Trying to use regexp matching a value like xxx.php，i write the following code.And I also found many ways for me to escape with double backslashes, but it doesn't work either.I guess it should be a version issue. GET /l…

---

## [Cannot initialize SSL - Invalid keystore format](https://discuss.elastic.co/t/cannot-initialize-ssl-invalid-keystore-format/223615)

<div class="topic-metadata">

**Author:** [@YaSe](https://discuss.elastic.co/u/YaSe)\
**Replies:** 2\
**Last updated:** [March 20, 2020, 1:30pm UTC](https://discuss.elastic.co/t/cannot-initialize-ssl-invalid-keystore-format/223615 "2020-03-20T13:30:33Z")

</div>

Hello all, I have installed an Elasticsearch cluster (ECK) in my Kubernetes cluster (GKE) by using this tutorial. I retrived the CA certificat tls.crt created by my ECK. Then, I used the following command to create a t…

---

## [Chain or relate results of one response to another in msearch](https://discuss.elastic.co/t/chain-or-relate-results-of-one-response-to-another-in-msearch/224397)

<div class="topic-metadata">

**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\
**Replies:** 1\
**Last updated:** [March 20, 2020, 1:29pm UTC](https://discuss.elastic.co/t/chain-or-relate-results-of-one-response-to-another-in-msearch/224397 "2020-03-20T13:29:46Z")

</div>

Hello and good day! With the pandemic COVID19 lurking around, hope all of you guys are fine Just a quick question, with the past year, I've been tasked with certain endpoints that require Elasticsearch queries. I'm now …

---

## [Parsing Collectd logstash file and pushing metrics to graphite](https://discuss.elastic.co/t/parsing-collectd-logstash-file-and-pushing-metrics-to-graphite/223737)

<div class="topic-metadata">

**Author:** [@Narayana](https://discuss.elastic.co/u/Narayana)\
**Replies:** 13\
**Last updated:** [March 20, 2020, 1:28pm UTC](https://discuss.elastic.co/t/parsing-collectd-logstash-file-and-pushing-metrics-to-graphite/223737 "2020-03-20T13:28:20Z")

</div>

Hi All, Can you please help me with the query. My requirement is : i have to collect the metrics using Collectd .Metrics like (cpu,memory and process) After getting this metrics in collectd.json.log (collected genera…

---

## [Elasticsearch docvalue\_fields trims precision value](https://discuss.elastic.co/t/elasticsearch-docvalue-fields-trims-precision-value/224421)

<div class="topic-metadata">

**Author:** [@nisham](https://discuss.elastic.co/u/nisham)\
**Replies:** 0\
**Last updated:** [March 20, 2020, 1:08pm UTC](https://discuss.elastic.co/t/elasticsearch-docvalue-fields-trims-precision-value/224421 "2020-03-20T13:08:55Z")

</div>

Hello, I have a scaled float field in my document, say "data\_rate" : 342.43215678 . When I use docvalue\_fields in query on this data\_rate field, I'm getting the result as "data\_rate" : 342.4321 and rest of the value is …

---

## [Dynamic variable for http poller input plugin](https://discuss.elastic.co/t/dynamic-variable-for-http-poller-input-plugin/223912)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 4\
**Last updated:** [March 20, 2020, 1:08pm UTC](https://discuss.elastic.co/t/dynamic-variable-for-http-poller-input-plugin/223912 "2020-03-20T13:08:15Z")

</div>

I want to download and parse a list of csv with yearly weather data with logstash. "YEAR" would be my variable and I need to increase from 1998 to 2019. I tried to use this simple conf file but not even works. input {…

---

## [Problem with logstash-plain.log](https://discuss.elastic.co/t/problem-with-logstash-plain-log/223795)

<div class="topic-metadata">

**Author:** [@Pablo95](https://discuss.elastic.co/u/Pablo95)\
**Replies:** 16\
**Last updated:** [March 20, 2020, 12:51pm UTC](https://discuss.elastic.co/t/problem-with-logstash-plain-log/223795 "2020-03-20T12:51:07Z")

</div>

Hi, i'm having problems with my logstash-plain.log file. When I execute the "less" command, this is the code that i receive: \[2020-03-06T11:35:43,304\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.ym…

---

## [Compressing RabbitMQ](https://discuss.elastic.co/t/compressing-rabbitmq/224419)

<div class="topic-metadata">

**Author:** [@KevSex](https://discuss.elastic.co/u/KevSex)\
**Replies:** 0\
**Last updated:** [March 20, 2020, 12:48pm UTC](https://discuss.elastic.co/t/compressing-rabbitmq/224419 "2020-03-20T12:48:44Z")

</div>

Is there any documentation or examples anyone can provide on how to gzip documents before sending to a rabbitmq-output? (can't see any configuration options for compressing documents on the logstash-rabbitmq-output) In …

---

## [Can we use "/" (forward slash) inside the ID](https://discuss.elastic.co/t/can-we-use-forward-slash-inside-the-id/224404)

<div class="topic-metadata">

**Author:** [@arjun\_kumar](https://discuss.elastic.co/u/arjun_kumar)\
**Replies:** 2\
**Last updated:** [March 20, 2020, 12:43pm UTC](https://discuss.elastic.co/t/can-we-use-forward-slash-inside-the-id/224404 "2020-03-20T12:43:39Z")

</div>

can we use "/" (forward slash) inside the ID PUT test/\_doc/GD+GGAct+-+Avg+FIN201-02-01115ce07a-e5e7-4ba3-9117-4a7a49c3df01+N/A+03202020 { "foo": "bar" }

---

## [Mapping of dest index overwritten upon reindexing](https://discuss.elastic.co/t/mapping-of-dest-index-overwritten-upon-reindexing/224291)

<div class="topic-metadata">

**Author:** [@ETspielberg](https://discuss.elastic.co/u/ETspielberg)\
**Replies:** 5\
**Last updated:** [March 20, 2020, 12:42pm UTC](https://discuss.elastic.co/t/mapping-of-dest-index-overwritten-upon-reindexing/224291 "2020-03-20T12:42:59Z")

</div>

Hi, I am using elasticsearch 7.6.1 and I have indexed a number of documents with a type, which was generated automatically. For example I have timestamps, which are currently indexed as text. In addition, I need to adju…

---

## [It seems that Kibana starts up without problems, but it just can't be accessed](https://discuss.elastic.co/t/it-seems-that-kibana-starts-up-without-problems-but-it-just-cant-be-accessed/224141)

<div class="topic-metadata">

**Author:** [@liu78778](https://discuss.elastic.co/u/liu78778)\
**Replies:** 10\
**Last updated:** [March 20, 2020, 12:27pm UTC](https://discuss.elastic.co/t/it-seems-that-kibana-starts-up-without-problems-but-it-just-cant-be-accessed/224141 "2020-03-20T12:27:16Z")

</div>

Kibana version : 7.4.2 Elasticsearch version : 7.4.2 Server OS version : CentOS Linux release 7.4.1708 (Core) Browser version : Chrome 80.0.3987.132 Browser OS version : Windows 10.0.18363 Original install method (e…

---

## [How to create Keystore and Truststore from CA Certificates](https://discuss.elastic.co/t/how-to-create-keystore-and-truststore-from-ca-certificates/224156)

<div class="topic-metadata">

**Author:** [@YaSe](https://discuss.elastic.co/u/YaSe)\
**Replies:** 4\
**Last updated:** [March 20, 2020, 12:25pm UTC](https://discuss.elastic.co/t/how-to-create-keystore-and-truststore-from-ca-certificates/224156 "2020-03-20T12:25:50Z")

</div>

Hello folks, I installed ECK on GKE. I retrieved certificate tls.crt with the following command kubectl get secret "hulk-es-http-certs-public" -o go-template='{{index .data "tls.crt" | base64decode }}' \> tls.crt I gen…

---

## [Dashboard with graph per day - relative dates but fixed time](https://discuss.elastic.co/t/dashboard-with-graph-per-day-relative-dates-but-fixed-time/224417)

<div class="topic-metadata">

**Author:** [@Tommie](https://discuss.elastic.co/u/Tommie)\
**Replies:** 0\
**Last updated:** [March 20, 2020, 12:24pm UTC](https://discuss.elastic.co/t/dashboard-with-graph-per-day-relative-dates-but-fixed-time/224417 "2020-03-20T12:24:58Z")

</div>

I want to create a dashboard with multiple views of the same graph on it. One graph per (working) day so there's an overview of the last five days. The time range (on the x-ax) should be from 7:00 AM to 6:00 PM and the…

---

## [How to expand on special characters?](https://discuss.elastic.co/t/how-to-expand-on-special-characters/224413)

<div class="topic-metadata">

**Author:** [@lukecaptaincode](https://discuss.elastic.co/u/lukecaptaincode)\
**Replies:** 2\
**Last updated:** [March 20, 2020, 12:11pm UTC](https://discuss.elastic.co/t/how-to-expand-on-special-characters/224413 "2020-03-20T12:11:19Z")

</div>

I have an index full of brand names and some of them contain special characters (E.L.F, L'oreal) and they show up when searched for exactly but how do I set queries to essentially ignore the special character when search…

---

## [How to post filter aggregation?](https://discuss.elastic.co/t/how-to-post-filter-aggregation/224409)

<div class="topic-metadata">

**Author:** [@mynkow](https://discuss.elastic.co/u/mynkow)\
**Replies:** 0\
**Last updated:** [March 20, 2020, 11:42am UTC](https://discuss.elastic.co/t/how-to-post-filter-aggregation/224409 "2020-03-20T11:42:20Z")

</div>

Hello, I am trying to do a simple filter for two days now and I guess I am missing something obvious. CONTEXT: We have a commerce data in ES index where every purchased order item is a document. I am trying to find al…

---

## [Kibana 7.6.0 With ECK has high cpu usage](https://discuss.elastic.co/t/kibana-7-6-0-with-eck-has-high-cpu-usage/224398)

<div class="topic-metadata">

**Author:** [@Mugen](https://discuss.elastic.co/u/Mugen)\
**Replies:** 1\
**Last updated:** [March 20, 2020, 11:11am UTC](https://discuss.elastic.co/t/kibana-7-6-0-with-eck-has-high-cpu-usage/224398 "2020-03-20T11:11:03Z")

</div>

We used to run Kibnana 6.2 with the offical Docker-Image and had a systemload of about 0.2 for the two containers we used. Recently we switched to ECK and Kibana 7.6 and the load of the container is between 0.5 and 2.3. …

---

## [What 24 horus starting from now and not round off](https://discuss.elastic.co/t/what-24-horus-starting-from-now-and-not-round-off/224262)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 2\
**Last updated:** [March 20, 2020, 10:43am UTC](https://discuss.elastic.co/t/what-24-horus-starting-from-now-and-not-round-off/224262 "2020-03-20T10:43:56Z")

</div>

Hi team, Can someone suggest; since I am using below with my search API, will it search the IP addresses starting from now - 24 hrs yesterday or will it take last 24 horus? I need search IP addresses starting from now …

---

## [AutoCompletion for Hindi (Indian Language)](https://discuss.elastic.co/t/autocompletion-for-hindi-indian-language/224247)

<div class="topic-metadata">

**Author:** [@chivas](https://discuss.elastic.co/u/chivas)\
**Replies:** 2\
**Last updated:** [March 20, 2020, 9:54am UTC](https://discuss.elastic.co/t/autocompletion-for-hindi-indian-language/224247 "2020-03-20T09:54:04Z")

</div>

Hello, I am trying to use the Edge Ngram Tokeniser for auto complete search. Below is my index definition: PUT hindi\_test { "settings": { "analysis": { "filter": { "hindi\_stop": { "t…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1559)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1561)
