# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1590 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1591 --- ## [Ingest array of JSON objects](https://discuss.elastic.co/t/ingest-array-of-json-objects/222216)
**Author:** [@abregman](https://discuss.elastic.co/u/abregman)\ **Replies:** 4\ **Last updated:** [March 5, 2020, 12:35pm UTC](https://discuss.elastic.co/t/ingest-array-of-json-objects/222216 "2020-03-05T12:35:20Z")
Is it possible to import into elasticsearch an array of JSON objects? Something like this: \[{'a': 1}, {'b': 2}, ...\] Right now I get this error when trying to do so: "Malformed action/metadata line \[1\], expected START\_… --- ## [Can't remove allicator role from first host](https://discuss.elastic.co/t/cant-remove-allicator-role-from-first-host/221923)
**Author:** [@andrew.luke](https://discuss.elastic.co/u/andrew.luke)\ **Replies:** 7\ **Last updated:** [March 5, 2020, 12:24pm UTC](https://discuss.elastic.co/t/cant-remove-allicator-role-from-first-host/221923 "2020-03-05T12:24:58Z")
We've deployed a 2 AZ ECE enclave (for lack of a better term). The first host has all the roles enabled on it by default. We've added other hot/warm allocators in each AZ, and we're trying to move the running nodes/ins… --- ## [Logstash not parsing data properly](https://discuss.elastic.co/t/logstash-not-parsing-data-properly/221912)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 3\ **Last updated:** [March 5, 2020, 12:20pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-data-properly/221912 "2020-03-05T12:20:39Z")
My csv file contains ^M character ( ^ M ) characters are introduced when you use lines of text from a windows computer to Linux or Unix machine How should i get rid of ^M character in logstash --- ## [Change the regexes useragent filter plugin uses by default](https://discuss.elastic.co/t/change-the-regexes-useragent-filter-plugin-uses-by-default/222282)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 0\ **Last updated:** [March 5, 2020, 12:11pm UTC](https://discuss.elastic.co/t/change-the-regexes-useragent-filter-plugin-uses-by-default/222282 "2020-03-05T12:11:42Z")
This question is about version of Logstash 5.6 onwards as myself and colleagues are still working on moving away from 5 (yes we know it's EOL). At time of writing the Logstash useragent filter plugin identifies Chromium… --- ## [The index pattern access\* does not contain any of the following compatible field types: geo\_point](https://discuss.elastic.co/t/the-index-pattern-access-does-not-contain-any-of-the-following-compatible-field-types-geo-point/221989)
**Author:** [@vishal001](https://discuss.elastic.co/u/vishal001)\ **Replies:** 2\ **Last updated:** [March 5, 2020, 11:52am UTC](https://discuss.elastic.co/t/the-index-pattern-access-does-not-contain-any-of-the-following-compatible-field-types-geo-point/221989 "2020-03-05T11:52:53Z")
HI, I am facing the below error. any one have idea how to resolve the same. I almost try everything which is available on google but not sure where I am wrong. The index pattern access\* does not contain any of the foll… --- ## [\_source.excludes/includes makes query 2 times slower](https://discuss.elastic.co/t/source-excludes-includes-makes-query-2-times-slower/222227)
**Author:** [@backend](https://discuss.elastic.co/u/backend)\ **Replies:** 2\ **Last updated:** [March 5, 2020, 11:46am UTC](https://discuss.elastic.co/t/source-excludes-includes-makes-query-2-times-slower/222227 "2020-03-05T11:46:29Z")
ES: 7.4.1 I have a tiny little index (~100MB). The mapping is simple and naive - with no nested objects whatsoever. There's one field (an array of objects) which is kind of big, and sometimes I'd like to exclude that fr… --- ## [Multiline pattern for date is not working](https://discuss.elastic.co/t/multiline-pattern-for-date-is-not-working/222272)
**Author:** [@Sudheer\_T](https://discuss.elastic.co/u/Sudheer_T)\ **Replies:** 0\ **Last updated:** [March 5, 2020, 11:24am UTC](https://discuss.elastic.co/t/multiline-pattern-for-date-is-not-working/222272 "2020-03-05T11:24:08Z")
input { file { path =\> "C:/ELK/logs/\*.log" codec =\> multiline { pattern =\> "^%{TIMESTAMP\_ISO8601}" negate =\> true what =\> "previous" } } } --- ## [Kibana 7.0.1 does not work with centos 8 base image](https://discuss.elastic.co/t/kibana-7-0-1-does-not-work-with-centos-8-base-image/219603)
**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\ **Replies:** 7\ **Last updated:** [March 5, 2020, 11:20am UTC](https://discuss.elastic.co/t/kibana-7-0-1-does-not-work-with-centos-8-base-image/219603 "2020-03-05T11:20:51Z")
Hi, I was using kibana-oss 7.0.1 with centos 7 as base image which was working fine. Now we are migrating to centos 8 and I am able to build kibana image with centos 8. I am facing problem while runnnig this newly buil… --- ## [Elastic best practise - architecture](https://discuss.elastic.co/t/elastic-best-practise-architecture/222269)
**Author:** [@carmine.fabrizio](https://discuss.elastic.co/u/carmine.fabrizio)\ **Replies:** 0\ **Last updated:** [March 5, 2020, 11:12am UTC](https://discuss.elastic.co/t/elastic-best-practise-architecture/222269 "2020-03-05T11:12:28Z")
Hi everyone, need to understand what is the best configuration to implement, like number of nodes lifecycle policies timing shards I have more or less 15 indexes and an average between 300GB each per day, totally I h… --- ## [Huge Performance impact when indexing large payloads](https://discuss.elastic.co/t/huge-performance-impact-when-indexing-large-payloads/222205)
**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\ **Replies:** 7\ **Last updated:** [March 5, 2020, 11:00am UTC](https://discuss.elastic.co/t/huge-performance-impact-when-indexing-large-payloads/222205 "2020-03-05T11:00:41Z")
We are doing few performance run to measure the product performance. We were trying ~100 single ingests/sec and ~300 search/sec. the data we are ingesting is of size ~1KB (i mean a record size which we insert). Every thi… --- ## [S3 Repository plugin PKIX failed](https://discuss.elastic.co/t/s3-repository-plugin-pkix-failed/222183)
**Author:** [@ivanavi](https://discuss.elastic.co/u/ivanavi)\ **Replies:** 1\ **Last updated:** [March 5, 2020, 10:59am UTC](https://discuss.elastic.co/t/s3-repository-plugin-pkix-failed/222183 "2020-03-05T10:59:36Z")
Hi all, I have 1 cluster (Ubuntu 18.04) with 3 ES 7.4.2 nodes with Offline install 7.4.2 S3 Repository plugin. I installed plugin than I did restart of every node. I added keys on every node and did restart bin/elast… --- ## [In which elastic stack version the watcher is introduced?](https://discuss.elastic.co/t/in-which-elastic-stack-version-the-watcher-is-introduced/222267)
**Author:** [@Pradeep\_Sanjeewa](https://discuss.elastic.co/u/Pradeep_Sanjeewa)\ **Replies:** 1\ **Last updated:** [March 5, 2020, 10:53am UTC](https://discuss.elastic.co/t/in-which-elastic-stack-version-the-watcher-is-introduced/222267 "2020-03-05T10:53:31Z")
I have Elastic stack (6.8.0) free version. But I cannot use watcher features there as mentioned in the following link. https://www.elastic.co/guide/en/kibana/7.6/watcher-ui.html Simply I don't have a section " Manageme… --- ## [Snapshot backup](https://discuss.elastic.co/t/snapshot-backup/218775)
**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\ **Replies:** 6\ **Last updated:** [March 5, 2020, 10:46am UTC](https://discuss.elastic.co/t/snapshot-backup/218775 "2020-03-05T10:46:37Z")
is there any option to backup elasticsearch direct to tape as shared file system will require equal to all index size ? --- ## [Spurious Skew](https://discuss.elastic.co/t/spurious-skew/220660)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 4\ **Last updated:** [March 5, 2020, 10:19am UTC](https://discuss.elastic.co/t/spurious-skew/220660 "2020-03-05T10:19:23Z")
I have a visualization of system.network.in.bytes and since 7.6.0 the visualization occasionally gets wrecked by a falsely large value. I have to either refresh or more often than not change the timeframe and it is getti… --- ## [Call to saved\_objects API fails with "illegal\_argument\_exception"](https://discuss.elastic.co/t/call-to-saved-objects-api-fails-with-illegal-argument-exception/222086)
**Author:** [@silentsurfer](https://discuss.elastic.co/u/silentsurfer)\ **Replies:** 2\ **Last updated:** [March 5, 2020, 10:13am UTC](https://discuss.elastic.co/t/call-to-saved-objects-api-fails-with-illegal-argument-exception/222086 "2020-03-05T10:13:57Z")
I'm on Elastic stack v 7.6 and trying to get the JSON representation of a Kibana index pattern via the saved\_objects API as explained here. I tried issuing a GET request via Postman to: https://mydomain/api/saved\_objec… --- ## [Getting Memory Leak Errors in Logstatsh 7.4.0](https://discuss.elastic.co/t/getting-memory-leak-errors-in-logstatsh-7-4-0/222255)
**Author:** [@msunilreddy](https://discuss.elastic.co/u/msunilreddy)\ **Replies:** 0\ **Last updated:** [March 5, 2020, 9:58am UTC](https://discuss.elastic.co/t/getting-memory-leak-errors-in-logstatsh-7-4-0/222255 "2020-03-05T09:58:27Z")
Hi Team, I am using logstash 7.4.0 version and getting memory leak errors while staring of logstash but logs are successfully sending to ES and able to view them in Kibana. I am getting memory leak errors only on Prod … --- ## [error":"Content-Type header \[application/x-www-form-urlencoded\] is not supported"](https://discuss.elastic.co/t/error-content-type-header-application-x-www-form-urlencoded-is-not-supported/221569)
**Author:** [@kaushalshriyan](https://discuss.elastic.co/u/kaushalshriyan)\ **Replies:** 3\ **Last updated:** [March 5, 2020, 10:02am UTC](https://discuss.elastic.co/t/error-content-type-header-application-x-www-form-urlencoded-is-not-supported/221569 "2020-03-05T10:02:19Z")
Hi I am running a 7.6.0 version of ELK on CentOS Linux release 7.7.1908 (Core). I have downloaded beats-dashboards-1.3.1.zip using wget https://download.elastic.co/beats/dashboards/beats-dashboards-1.3.1.zip cd /root/… --- ## [Update vs Index](https://discuss.elastic.co/t/update-vs-index/222243)
**Author:** [@Samyak\_Jain](https://discuss.elastic.co/u/Samyak_Jain)\ **Replies:** 1\ **Last updated:** [March 5, 2020, 9:33am UTC](https://discuss.elastic.co/t/update-vs-index/222243 "2020-03-05T09:33:12Z")
Hi, I wanted to know that what is the performance difference between using update api and Index api. Currently in our existing implementation we fetch the document from elasticsearch and update the fields using Reflecti… --- ## [Filter conditions, config](https://discuss.elastic.co/t/filter-conditions-config/222221)
**Author:** [@111291](https://discuss.elastic.co/u/111291)\ **Replies:** 1\ **Last updated:** [March 5, 2020, 9:30am UTC](https://discuss.elastic.co/t/filter-conditions-config/222221 "2020-03-05T09:30:01Z")
We have three servers. Each sends logs of one format. I am trying to make conditions for filtering logs from these servers using tags. But that does not work. input { beats { port =\> 5044 type =\> beats } u… --- ## [How to increase elastic pod volume](https://discuss.elastic.co/t/how-to-increase-elastic-pod-volume/222217)
**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\ **Replies:** 1\ **Last updated:** [March 5, 2020, 9:29am UTC](https://discuss.elastic.co/t/how-to-increase-elastic-pod-volume/222217 "2020-03-05T09:29:09Z")
My cluster is in yellow state as it does not have enough space to allow shard. I initially tried to increase EBS volume size, but elastic node does not seem to recognize the added storage by querying /\_cat/allocation?… --- ## [Grok filter not being applied but logstash logs being collected](https://discuss.elastic.co/t/grok-filter-not-being-applied-but-logstash-logs-being-collected/221112)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 9\ **Last updated:** [March 5, 2020, 9:24am UTC](https://discuss.elastic.co/t/grok-filter-not-being-applied-but-logstash-logs-being-collected/221112 "2020-03-05T09:24:10Z")
I am passing logs from server to Elasticsearch and they are indexed properly but the grok filter I have applied in not extracting the information. The grok pattern works perfectly when i use it in grok debugger against t… --- ## [CORS request did not succeed](https://discuss.elastic.co/t/cors-request-did-not-succeed/222239)
**Author:** [@Muhammad\_Ariful\_Isla](https://discuss.elastic.co/u/Muhammad_Ariful_Isla)\ **Replies:** 1\ **Last updated:** [March 5, 2020, 9:16am UTC](https://discuss.elastic.co/t/cors-request-did-not-succeed/222239 "2020-03-05T09:16:29Z")
At first, I tried to access Elasticsearch via a React Application. I was successful at first. But when I try the same app from another machine, Application doesn't show any data. I am getting this following error at t… --- ## [Exclude node from cluster routing allocation](https://discuss.elastic.co/t/exclude-node-from-cluster-routing-allocation/222242)
**Author:** [@qiratnahraf](https://discuss.elastic.co/u/qiratnahraf)\ **Replies:** 0\ **Last updated:** [March 5, 2020, 9:13am UTC](https://discuss.elastic.co/t/exclude-node-from-cluster-routing-allocation/222242 "2020-03-05T09:13:54Z")
Hi , for a maintenance activity we exclude a node from cluster routing allocation. When a node get back UP, we were not sure how to remove it from exclusion so we simply include it by using following command PUT /\_clus… --- ## [How to revive the index user\_messages for the labs of Kibana Data Analyst](https://discuss.elastic.co/t/how-to-revive-the-index-user-messages-for-the-labs-of-kibana-data-analyst/222184)
**Author:** [@SooMan\_Kim](https://discuss.elastic.co/u/SooMan_Kim)\ **Replies:** 3\ **Last updated:** [March 5, 2020, 9:07am UTC](https://discuss.elastic.co/t/how-to-revive-the-index-user-messages-for-the-labs-of-kibana-data-analyst/222184 "2020-03-05T09:07:20Z")
Hi, I am in the subscription training of "Kibana Data Analyst" and I accidentally deleted the index "user\_messages" (not the index pattern "user\_messages"). It seems to be the main index for the rest of the labs; I am s… --- ## [Complex calculations and table view format](https://discuss.elastic.co/t/complex-calculations-and-table-view-format/219045)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 6\ **Last updated:** [March 5, 2020, 8:57am UTC](https://discuss.elastic.co/t/complex-calculations-and-table-view-format/219045 "2020-03-05T08:57:09Z")
Hello all, i would like to know if this kind of tables can be done with kibana and add it to a dasboard. What is the best approach to achieve this? Index structure { "gain\_loss" =\> " 1,011.53", "@tim… --- ## [I am not able to make my scripted field work. Can someone help me to understand what am I doing wrong here](https://discuss.elastic.co/t/i-am-not-able-to-make-my-scripted-field-work-can-someone-help-me-to-understand-what-am-i-doing-wrong-here/222174)
**Author:** [@preyansh\_shah](https://discuss.elastic.co/u/preyansh_shah)\ **Replies:** 1\ **Last updated:** [March 5, 2020, 8:46am UTC](https://discuss.elastic.co/t/i-am-not-able-to-make-my-scripted-field-work-can-someone-help-me-to-understand-what-am-i-doing-wrong-here/222174 "2020-03-05T08:46:31Z")
Kibana Version: 7.5.0 management I wrote a scripted field to find the difference between two field in a document: if (doc\['page\_details.Compliance.ui'\].size() == 0) { return ''; } else { return doc\['page\_details.Compli… --- ## [Kibana and ElasticSearch X-Opaque-ID header](https://discuss.elastic.co/t/kibana-and-elasticsearch-x-opaque-id-header/222080)
**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\ **Replies:** 2\ **Last updated:** [March 5, 2020, 8:29am UTC](https://discuss.elastic.co/t/kibana-and-elasticsearch-x-opaque-id-header/222080 "2020-03-05T08:29:46Z")
Hello ! ElasticSearch slow log search and tasks management use the X-Opaque-ID header to identify tasks running in the cluster. Is there a way to set the X-Opaque-ID header with the current Kibana user name ? Thank you… --- ## [How to use transforms for Serial Differencing Aggregation](https://discuss.elastic.co/t/how-to-use-transforms-for-serial-differencing-aggregation/222135)
**Author:** [@tusharumbarkar](https://discuss.elastic.co/u/tusharumbarkar)\ **Replies:** 1\ **Last updated:** [March 5, 2020, 8:15am UTC](https://discuss.elastic.co/t/how-to-use-transforms-for-serial-differencing-aggregation/222135 "2020-03-05T08:15:27Z")
I am trying to create new index using transforms (with the Serial Differencing Aggregation) Got below error - { "statusCode": 400, "error": "Bad Request", "message": "\[status\_exception\] Unsupported aggregation type … --- ## [Remove a specific field from the log and overwrite the message field](https://discuss.elastic.co/t/remove-a-specific-field-from-the-log-and-overwrite-the-message-field/221820)
**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\ **Replies:** 7\ **Last updated:** [March 5, 2020, 8:07am UTC](https://discuss.elastic.co/t/remove-a-specific-field-from-the-log-and-overwrite-the-message-field/221820 "2020-03-05T08:07:14Z")
trying to parse the following log using the KV filter ; but there are some fields "message", "type" and "index" in the log message, which is overwriting the original "message", "type", "index" fields dropping the entire … --- ## [Search a keyword with insensitive word](https://discuss.elastic.co/t/search-a-keyword-with-insensitive-word/222059)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 5\ **Last updated:** [March 5, 2020, 7:43am UTC](https://discuss.elastic.co/t/search-a-keyword-with-insensitive-word/222059 "2020-03-05T07:43:51Z")
I had case in my elasticsearch. i want to find the field with value "Aku & Kamu . Co". i using Keyword and i get the field, but problem come when i find with "aku & kamu". how can i slove this? is that the keyword suppor… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1589) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1591)