# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1587 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1588 --- ## [Index template and index matching algorithms](https://discuss.elastic.co/t/index-template-and-index-matching-algorithms/222510)
**Author:** [@larryzhu](https://discuss.elastic.co/u/larryzhu)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 8:35pm UTC](https://discuss.elastic.co/t/index-template-and-index-matching-algorithms/222510 "2020-03-06T20:35:03Z")
Given an existing index, is there a way to find out which index template was used and applied to this index when the index was created? This question makes as we have multiple index templates with different priority ord… --- ## [Как посчитать какие ресурсы нужны для coordination node](https://discuss.elastic.co/t/coordination-node/222486)
**Author:** [@111229](https://discuss.elastic.co/u/111229)\ **Replies:** 5\ **Last updated:** [March 6, 2020, 7:48pm UTC](https://discuss.elastic.co/t/coordination-node/222486 "2020-03-06T19:48:33Z")
Коллеги, добрый день! У нас кластер из 10-дата нод, 3 мастера. Нагрузка порядка 5-30 тыс.записей в секунду. Мы хотим ввести координэйшен-ноду поскольку не хотим более нагружать напрямую дата-ноды пользовательскими запр… --- ## [Nest ingest a list of attachments](https://discuss.elastic.co/t/nest-ingest-a-list-of-attachments/222360)
**Author:** [@gutospinelli](https://discuss.elastic.co/u/gutospinelli)\ **Replies:** 4\ **Last updated:** [March 6, 2020, 7:37pm UTC](https://discuss.elastic.co/t/nest-ingest-a-list-of-attachments/222360 "2020-03-06T19:37:14Z")
Hi everyone! I am trying to index an object called "News" who has a list of "NewsFiles" using NEST/C# The simplified code for my news class follows: public class News { (...) public List\ Files { get; set; }… --- ## [Logstash with docker](https://discuss.elastic.co/t/logstash-with-docker/222501)
**Author:** [@alxfernando](https://discuss.elastic.co/u/alxfernando)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 6:44pm UTC](https://discuss.elastic.co/t/logstash-with-docker/222501 "2020-03-06T18:44:01Z")
This error appears when I run the kibana docker-compose, elastisearch, logstash logstash | \[2020-03-06T18:41:21,278\]\[WARN \]\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance, … --- ## [Hitting some sort of field type mismatch after upgrading filebeat to 7.x](https://discuss.elastic.co/t/hitting-some-sort-of-field-type-mismatch-after-upgrading-filebeat-to-7-x/221951)
**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\ **Replies:** 5\ **Last updated:** [March 6, 2020, 6:31pm UTC](https://discuss.elastic.co/t/hitting-some-sort-of-field-type-mismatch-after-upgrading-filebeat-to-7-x/221951 "2020-03-06T18:31:41Z")
Our setup looks like: filebeat -\> logstash -\> elasticsearch After upgrading some of our servers from filebeat 5.x to filebeat to 7.x we seem to be hitting some sort of field type mismatch. We use daily indexes using … --- ## [Aggregation with java High Level Rest Client](https://discuss.elastic.co/t/aggregation-with-java-high-level-rest-client/222447)
**Author:** [@Jonixo](https://discuss.elastic.co/u/Jonixo)\ **Replies:** 3\ **Last updated:** [March 6, 2020, 6:07pm UTC](https://discuss.elastic.co/t/aggregation-with-java-high-level-rest-client/222447 "2020-03-06T18:07:22Z")
I manage to create a working query but I'm having hard time converting it to java. Working query: GET edgedevicedata/\_search { "size": 0, "aggs": { "by\_days": { "date\_histogram": { "field": "@t… --- ## [Hide columns in Data table in kibana 7.6](https://discuss.elastic.co/t/hide-columns-in-data-table-in-kibana-7-6/222400)
**Author:** [@Sahana1](https://discuss.elastic.co/u/Sahana1)\ **Replies:** 9\ **Last updated:** [March 6, 2020, 5:59pm UTC](https://discuss.elastic.co/t/hide-columns-in-data-table-in-kibana-7-6/222400 "2020-03-06T17:59:22Z")
1.When we create a data table visualization Count column is added automatically as uploaded in picture below. 2.I dont want to show the Count column in by kibana dashboard as uploaded in the below picture Please help… --- ## [Logstash-output-tcp fails to connect to ssl enabled flume endpoint](https://discuss.elastic.co/t/logstash-output-tcp-fails-to-connect-to-ssl-enabled-flume-endpoint/222497)
**Author:** [@vpayala](https://discuss.elastic.co/u/vpayala)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 5:40pm UTC](https://discuss.elastic.co/t/logstash-output-tcp-fails-to-connect-to-ssl-enabled-flume-endpoint/222497 "2020-03-06T17:40:53Z")
Hello, I am new to Logstash and I am trying to setup Logstash output to stream raw application logs over to a Flume endpoint that is SSL enabled. I am hoping to achieve this using the logstash tcp output plugin. Here's … --- ## [ElasticSearch Rest High Level Client remapping wrong](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-remapping-wrong/222495)
**Author:** [@EterNaL\_SC2](https://discuss.elastic.co/u/EterNaL_SC2)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 5:14pm UTC](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-remapping-wrong/222495 "2020-03-06T17:14:10Z")
I'm trying to create a class which will write automatically to ElasticSearch through the Rest High Level Client with the operations (create, createBatch, remove, removeBatch, update, updateBatch) and those operations all… --- ## [Running a Kibana plugin for local development is very slow](https://discuss.elastic.co/t/running-a-kibana-plugin-for-local-development-is-very-slow/220501)
**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\ **Replies:** 8\ **Last updated:** [March 6, 2020, 5:05pm UTC](https://discuss.elastic.co/t/running-a-kibana-plugin-for-local-development-is-very-slow/220501 "2020-03-06T17:05:10Z")
Currently running yarn kbn bootstrap requires about half an hour on a modern computer. A lot of time is spent in the yarn linking process, which involves Kibana dev/testing dependencies like "storybook", etc. This refle… --- ## [Logstash Helm Chart sync elastic with database](https://discuss.elastic.co/t/logstash-helm-chart-sync-elastic-with-database/218812)
**Author:** [@m-garin](https://discuss.elastic.co/u/m-garin)\ **Replies:** 1\ **Last updated:** [March 6, 2020, 4:56pm UTC](https://discuss.elastic.co/t/logstash-helm-chart-sync-elastic-with-database/218812 "2020-03-06T16:56:27Z")
Hi! Anybody have .yalm sample file for sync elasticsearch with postgres using logstash? I cant install logstash-input-jdbc plugin. --- ## [Data not showing in SIEM, Fielddata is disabled on text fields by default](https://discuss.elastic.co/t/data-not-showing-in-siem-fielddata-is-disabled-on-text-fields-by-default/222485)
**Author:** [@eturner](https://discuss.elastic.co/u/eturner)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 4:07pm UTC](https://discuss.elastic.co/t/data-not-showing-in-siem-fielddata-is-disabled-on-text-fields-by-default/222485 "2020-03-06T16:07:05Z")
Hi all I've been playing around with ELK at work for viewing our windows logs but not all the data is showing up in the SIEM module. It seems to be having an issue grabbing it with a "Fielddata is disabled on text fiel… --- ## [New guy needs help visualizing lab active usage](https://discuss.elastic.co/t/new-guy-needs-help-visualizing-lab-active-usage/221445)
**Author:** [@kernsb](https://discuss.elastic.co/u/kernsb)\ **Replies:** 5\ **Last updated:** [March 6, 2020, 3:51pm UTC](https://discuss.elastic.co/t/new-guy-needs-help-visualizing-lab-active-usage/221445 "2020-03-06T15:51:24Z")
So, I'm new to Kibana, and data visualization in general, but we are in need of being able to track and visualize usage/utilization in our computer labs. I have records being collected that indicate, for each computer, … --- ## [Create Grok filter date](https://discuss.elastic.co/t/create-grok-filter-date/222285)
**Author:** [@dbviz](https://discuss.elastic.co/u/dbviz)\ **Replies:** 4\ **Last updated:** [March 6, 2020, 3:46pm UTC](https://discuss.elastic.co/t/create-grok-filter-date/222285 "2020-03-06T15:46:17Z")
Hi everyone, I tried to parse date from this line Wed Nov 27 07:31:40 CET 2019;User123;NEWPORT.WEBSERVICE.EXAMPLE like that in grok filter grok { match =\> {"message" =\> \["%{GREEDYDATA:date};%{USER:user};%{GRE… --- ## [Search a substring in a field](https://discuss.elastic.co/t/search-a-substring-in-a-field/222452)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 1\ **Last updated:** [March 6, 2020, 3:46pm UTC](https://discuss.elastic.co/t/search-a-substring-in-a-field/222452 "2020-03-06T15:46:05Z")
Hi, I'd like to search for a substring in the message field of my document, but I can't get it done. The substring is "Error while initializing socket". I'd like to get it via curl. I already search a lot in the docume… --- ## [Openldap и оповещения в telegram](https://discuss.elastic.co/t/openldap-telegram/222445)
**Author:** [@beren43](https://discuss.elastic.co/u/beren43)\ **Replies:** 1\ **Last updated:** [March 6, 2020, 3:30pm UTC](https://discuss.elastic.co/t/openldap-telegram/222445 "2020-03-06T15:30:32Z")
Добрый день. Как реализовать оповещения в телеграмм, если в логах openldap появится такая запись ? Feb 20 17:06:38 ldap1 slapd\[4611\]: do\_syncrep2: rid=001 (-1) Can't contact LDAP server То есть если недоступен сервер… --- ## [Outcome want in euros notation](https://discuss.elastic.co/t/outcome-want-in-euros-notation/222426)
**Author:** [@jancitooso](https://discuss.elastic.co/u/jancitooso)\ **Replies:** 1\ **Last updated:** [March 6, 2020, 3:27pm UTC](https://discuss.elastic.co/t/outcome-want-in-euros-notation/222426 "2020-03-06T15:27:34Z")
{ "took": 51, "timed\_out": false, "\_shards": { "total": 2, "successful": 2, "skipped": 0, "failed": 0 }, "hits": { "total": 768, "max\_score": 0, "hits": }, "aggregations": { "1": { "value": 1193082 } }… --- ## [Sort within a sort - ElasticSearch (DSL / DRF)](https://discuss.elastic.co/t/sort-within-a-sort-elasticsearch-dsl-drf/222479)
**Author:** [@Julian\_Camilleri](https://discuss.elastic.co/u/Julian_Camilleri)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 3:09pm UTC](https://discuss.elastic.co/t/sort-within-a-sort-elasticsearch-dsl-drf/222479 "2020-03-06T15:09:52Z")
Context: Imagine having 10 records, 5 of which are featured. - You want to firstly bring the featured to the top of the list (not sure if it's the best way but done easily via .sort('-featured')) , then you want to sort… --- ## [Ansible-Elasticsearch custom CA certificate validation failures](https://discuss.elastic.co/t/ansible-elasticsearch-custom-ca-certificate-validation-failures/216843)
**Author:** [@bernhard.fluehmann](https://discuss.elastic.co/u/bernhard.fluehmann)\ **Replies:** 1\ **Last updated:** [March 6, 2020, 3:08pm UTC](https://discuss.elastic.co/t/ansible-elasticsearch-custom-ca-certificate-validation-failures/216843 "2020-03-06T15:08:09Z")
If Elasticsearch is installed with Ansible and a custom CA is used, the installation fails when es\_validate\_certs is true. The reason is that Ansible just copies the CA from the Ansible host to the nodes certificate dire… --- ## [Take snapshot every day of Mysql datatbase in ElasticSearch](https://discuss.elastic.co/t/take-snapshot-every-day-of-mysql-datatbase-in-elasticsearch/220609)
**Author:** [@anujeet](https://discuss.elastic.co/u/anujeet)\ **Replies:** 1\ **Last updated:** [March 6, 2020, 2:55pm UTC](https://discuss.elastic.co/t/take-snapshot-every-day-of-mysql-datatbase-in-elasticsearch/220609 "2020-03-06T14:55:56Z")
Hello. I have a Mysql application. But we want to do some analysis on the data that is being stored. In the Mysql database, the data is being overriden everyday. But we want to store everyday's dump in ElasticSearch so … --- ## [Elasticsearch Partial Snapshot](https://discuss.elastic.co/t/elasticsearch-partial-snapshot/222289)
**Author:** [@Bkelly](https://discuss.elastic.co/u/Bkelly)\ **Replies:** 2\ **Last updated:** [March 6, 2020, 2:07pm UTC](https://discuss.elastic.co/t/elasticsearch-partial-snapshot/222289 "2020-03-06T14:07:17Z")
Hi Im running into an issue with snapshotting one of my elasticsearch clusters. I have snapshot the cluster weekly , however I got a PARTIAL snapshot last time . 199/200 indices passed. one of the indices failed with… --- ## [Timestamp fails for filebeat haproxy @SSL handshake failure loglines its displayed one houre in the future in kibana](https://discuss.elastic.co/t/timestamp-fails-for-filebeat-haproxy-ssl-handshake-failure-loglines-its-displayed-one-houre-in-the-future-in-kibana/222470)
**Author:** [@seb0](https://discuss.elastic.co/u/seb0)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 1:55pm UTC](https://discuss.elastic.co/t/timestamp-fails-for-filebeat-haproxy-ssl-handshake-failure-loglines-its-displayed-one-houre-in-the-future-in-kibana/222470 "2020-03-06T13:55:13Z")
Hello, i have a problem with filebeat haproxy module. All logs are parsed directly from filebeat 7.5.0 to elk 7.5.0 but the Lines with SSL handshakre failure are displayed on hour in the future. Here my json output: {… --- ## [Securing Elasticsearch communication in Docker Swarm](https://discuss.elastic.co/t/securing-elasticsearch-communication-in-docker-swarm/222469)
**Author:** [@areller](https://discuss.elastic.co/u/areller)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 1:53pm UTC](https://discuss.elastic.co/t/securing-elasticsearch-communication-in-docker-swarm/222469 "2020-03-06T13:53:18Z")
I am running an Elastic stack in Docker swarm. I want to setup authentication in Kibana (username + password atleast), but to do that I need to set security in Elasticsearch first. What is the best approach to do it in… --- ## [Modifying an arrays value by index](https://discuss.elastic.co/t/modifying-an-arrays-value-by-index/221045)
**Author:** [@Viktor\_Zsolnai](https://discuss.elastic.co/u/Viktor_Zsolnai)\ **Replies:** 4\ **Last updated:** [March 6, 2020, 1:39pm UTC](https://discuss.elastic.co/t/modifying-an-arrays-value-by-index/221045 "2020-03-06T13:39:12Z")
Hello, I'm pretty new to logstash, and I need to replace a value in an array, using a kv filter's value, but when I want to use the index variable nothing happens, if I use a simple integer instead, it works fine, here… --- ## [Logstash if message is empty, drop the entire row](https://discuss.elastic.co/t/logstash-if-message-is-empty-drop-the-entire-row/221986)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 9\ **Last updated:** [March 6, 2020, 1:38pm UTC](https://discuss.elastic.co/t/logstash-if-message-is-empty-drop-the-entire-row/221986 "2020-03-06T13:38:40Z")
Hello, I have a scenario where my Log messages are empty in a few cases: So what I want to do is, If message is empty, then drop the whole row. I tried filter { if \[Message\] == "" { drop { } … --- ## [Blocks.write = true, won't work](https://discuss.elastic.co/t/blocks-write-true-wont-work/222464)
**Author:** [@aliservetdonmez](https://discuss.elastic.co/u/aliservetdonmez)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 1:30pm UTC](https://discuss.elastic.co/t/blocks-write-true-wont-work/222464 "2020-03-06T13:30:18Z")
Hi, I am running an ES (version 6.3.1) cluster on AWS's managed-ES service, and have a script (written in Python) that is running every so often to check for index sizes, and if any index exceeds a given threshold, I wi… --- ## [Jdbc\_static local\_lookup not working with Azure data](https://discuss.elastic.co/t/jdbc-static-local-lookup-not-working-with-azure-data/222303)
**Author:** [@spate](https://discuss.elastic.co/u/spate)\ **Replies:** 1\ **Last updated:** [March 6, 2020, 1:17pm UTC](https://discuss.elastic.co/t/jdbc-static-local-lookup-not-working-with-azure-data/222303 "2020-03-06T13:17:30Z")
Hi, I'm working with Azure data being piped into ELK, and I want to add the subscription name to the event. Currently it only has the subscription ID. We have an external postgreql DB with subscription name and ID (as … --- ## [How to set G1GC in docker](https://discuss.elastic.co/t/how-to-set-g1gc-in-docker/222457)
**Author:** [@roflmao](https://discuss.elastic.co/u/roflmao)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 12:34pm UTC](https://discuss.elastic.co/t/how-to-set-g1gc-in-docker/222457 "2020-03-06T12:34:36Z")
Running elasticsearch 7.6.1 in docker Setting ES\_JAVA\_OPTS env: -XX:+UseG1GC -Xms16g -Xmx16g -XX:-UseConcMarkSweepGC -XX:UseCMSInitiatingOccupancyOnly -XX:InitiatingHeapOccupancyPercent=75 elasticsearch doesnt star… --- ## [Repeated cluster failures in multi-node cluster](https://discuss.elastic.co/t/repeated-cluster-failures-in-multi-node-cluster/221919)
**Author:** [@Carv](https://discuss.elastic.co/u/Carv)\ **Replies:** 19\ **Last updated:** [March 6, 2020, 12:16pm UTC](https://discuss.elastic.co/t/repeated-cluster-failures-in-multi-node-cluster/221919 "2020-03-06T12:16:44Z")
Hi All, Long time reader, very few posts over the years... I've recently implemented a new multi-node cluster of the following topology, all on Ubuntu 18.04 LTS servers running v7.5.2 ES/LS/Kibana etc.: ES-Node01 = El… --- ## [Can't get text on a START\_OBJECT at 1:1111 when using the \_reindex API](https://discuss.elastic.co/t/cant-get-text-on-a-start-object-at-1-1111-when-using-the-reindex-api/222448)
**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 11:43am UTC](https://discuss.elastic.co/t/cant-get-text-on-a-start-object-at-1-1111-when-using-the-reindex-api/222448 "2020-03-06T11:43:57Z")
Hello, I am using the \_reindex API to merge daily indexes into monthly indexes but get this error: { "index": "sentry-2019.01", "type": "\_doc", "id": "NtBfKWgBAZO4MSmwwzvg", "cause": { "type": "mapper\_parsing\_exception… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1586) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1588)