# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1618 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1619 --- ## [What index(actual lucene inverted index) does a query request hit?](https://discuss.elastic.co/t/what-index-actual-lucene-inverted-index-does-a-query-request-hit/220072)
**Author:** [@addhawan](https://discuss.elastic.co/u/addhawan)\ **Replies:** 0\ **Last updated:** [February 20, 2020, 2:59am UTC](https://discuss.elastic.co/t/what-index-actual-lucene-inverted-index-does-a-query-request-hit/220072 "2020-02-20T02:59:39Z")
Hi, I want to understand how a query is executed and what all lucene indexes does it hit to find a match? Lets say I have a document like: { "id":"id\_1", "fName":"John", "lName":"DOe", "age":28, "email":"johndoe@… --- ## [Waiting for elected master node \[...\] to setup local exporter](https://discuss.elastic.co/t/waiting-for-elected-master-node-to-setup-local-exporter/220063)
**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\ **Replies:** 1\ **Last updated:** [February 20, 2020, 12:53am UTC](https://discuss.elastic.co/t/waiting-for-elected-master-node-to-setup-local-exporter/220063 "2020-02-20T00:53:06Z")
Elasticsearch version 6.5.4 All my nodes are emitting the message below, and make up the majority of my logs. What is the "local exporter"? how do I install it? how do I set it up? This has been a problem since I in… --- ## [An index called logstash](https://discuss.elastic.co/t/an-index-called-logstash/219894)
**Author:** [@martine](https://discuss.elastic.co/u/martine)\ **Replies:** 3\ **Last updated:** [February 19, 2020, 11:39pm UTC](https://discuss.elastic.co/t/an-index-called-logstash/219894 "2020-02-19T23:39:27Z")
I have noticed the since the upgrade from 6.x to 7.x that indexes had errors with their lifecycle policies. illegal\_argument\_exception: index.lifecycle.rollover\_alias \[logstash\] does not point to index \[logstash-2020.02… --- ## [Problems creating a single node cluster](https://discuss.elastic.co/t/problems-creating-a-single-node-cluster/219984)
**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\ **Replies:** 10\ **Last updated:** [February 19, 2020, 9:36pm UTC](https://discuss.elastic.co/t/problems-creating-a-single-node-cluster/219984 "2020-02-19T21:36:22Z")
Hi! I've managed to get Elastic 7.6 running on Ubuntu 18.04 LTS in AWS, I have access to it via a REST client using port tunnelling in a SSH connection, and while it is accessible (returning the standard "status" messag… --- ## [Got in over my head. Basic setup for large Elasticsearch cluster](https://discuss.elastic.co/t/got-in-over-my-head-basic-setup-for-large-elasticsearch-cluster/220061)
**Author:** [@pbryant](https://discuss.elastic.co/u/pbryant)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 9:34pm UTC](https://discuss.elastic.co/t/got-in-over-my-head-basic-setup-for-large-elasticsearch-cluster/220061 "2020-02-19T21:34:37Z")
I have gotten in a bit over my head on an elasticsearch project, and am seeking some very basic architectural information. I am trying to deliver a basic elasticsearch cluster for some researchers, who will put the clust… --- ## [Timestamps filter](https://discuss.elastic.co/t/timestamps-filter/219648)
**Author:** [@Archie\_Crawford](https://discuss.elastic.co/u/Archie_Crawford)\ **Replies:** 7\ **Last updated:** [February 19, 2020, 8:48pm UTC](https://discuss.elastic.co/t/timestamps-filter/219648 "2020-02-19T20:48:03Z")
I cant get the "Time" field to match the message log filter { mutate { replace =\> { "type" =\> "logs" } } grok { match =\> { "message" =\> "%{SYSLOGTIMESTAMP:timestamp}%{DATA}%{YEAR}\]%{DATA}%{SYSLOG5424SD:Alert}%{DATA}%… --- ## [Can I apply split processor on more than one field?](https://discuss.elastic.co/t/can-i-apply-split-processor-on-more-than-one-field/220040)
**Author:** [@JohanP](https://discuss.elastic.co/u/JohanP)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 8:43pm UTC](https://discuss.elastic.co/t/can-i-apply-split-processor-on-more-than-one-field/220040 "2020-02-19T20:43:55Z")
I have a number on fields that I want to perform the same operation on in a reindex task: split values in a string to an array field, I want to do the same thing on several source fields. Here is my reindex command P… --- ## [How to implement post action after data loaded to index?](https://discuss.elastic.co/t/how-to-implement-post-action-after-data-loaded-to-index/220058)
**Author:** [@jbond](https://discuss.elastic.co/u/jbond)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 8:24pm UTC](https://discuss.elastic.co/t/how-to-implement-post-action-after-data-loaded-to-index/220058 "2020-02-19T20:24:13Z")
I am using logstash to load data from DB to ES index. Everything works. Now after the data loaded is completed, I want to run some post actions such as put the index in an alias, run some elastic search DSL query, get th… --- ## [SSL-enabled Beat ssl\_verify\_mode =\> "none" not working as expected](https://discuss.elastic.co/t/ssl-enabled-beat-ssl-verify-mode-none-not-working-as-expected/220023)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 8:05pm UTC](https://discuss.elastic.co/t/ssl-enabled-beat-ssl-verify-mode-none-not-working-as-expected/220023 "2020-02-19T20:05:17Z")
TL;DR Using ssl\_verify\_mode =\> "none" in input.beats not functioning as expected; should allow unverified SSL connections, but doesn't. The rest of the story... I'm using SSL-enabled input.beat in my logstash.conf, whic… --- ## [Configure Kibana for remote cluster search](https://discuss.elastic.co/t/configure-kibana-for-remote-cluster-search/220041)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 5\ **Last updated:** [February 19, 2020, 8:05pm UTC](https://discuss.elastic.co/t/configure-kibana-for-remote-cluster-search/220041 "2020-02-19T20:05:16Z")
Hi, I'm using Elastic stack 7.5 and have several data centers. Not all data centers have a good bandwitch, so setting up a cluster distributed between data centers is not a good option according to: So i was thinkin… --- ## [Not Getting data from Index pattern using SQL](https://discuss.elastic.co/t/not-getting-data-from-index-pattern-using-sql/218031)
**Author:** [@emad101](https://discuss.elastic.co/u/emad101)\ **Replies:** 13\ **Last updated:** [February 19, 2020, 7:25pm UTC](https://discuss.elastic.co/t/not-getting-data-from-index-pattern-using-sql/218031 "2020-02-19T19:25:44Z")
Hello, I am trying to fetch all data in a field to a canvas in the elastic index, but for some reason I am receiving a weird error here is the sql query I send SELECT app\_code FROM "devops\_et\*" But I receive this err… --- ## [Parsing postgresql logs](https://discuss.elastic.co/t/parsing-postgresql-logs/220017)
**Author:** [@Manoj\_kumar4](https://discuss.elastic.co/u/Manoj_kumar4)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 7:09pm UTC](https://discuss.elastic.co/t/parsing-postgresql-logs/220017 "2020-02-19T19:09:59Z")
Hi friends, Can you share grok pattern for Postgres logs (9.6+ version) 2020-02-18 12:33:21 UTC:10.32.75.210(32848):user@servicedb:\[24531\]:WARNING: there is no transaction in progress --- ## [Pipeline aborted due to error , Translation is missing](https://discuss.elastic.co/t/pipeline-aborted-due-to-error-translation-is-missing/220019)
**Author:** [@sagardhakate](https://discuss.elastic.co/u/sagardhakate)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 6:55pm UTC](https://discuss.elastic.co/t/pipeline-aborted-due-to-error-translation-is-missing/220019 "2020-02-19T18:55:12Z")
input { file { path =\> "C:/Users/sagar.dhakate/Sagar\_FTTC.csv" start\_position =\> "beginning" sincedb\_path =\> "NULL" ignore\_older =\> 0 } } filter { csv { separator =\> "," columns =\> \["Product", "Date", "To… --- ## [Will ElasticSearch high-level rest java client be always forward compatible?](https://discuss.elastic.co/t/will-elasticsearch-high-level-rest-java-client-be-always-forward-compatible/220038)
**Author:** [@Jerry\_Peng](https://discuss.elastic.co/u/Jerry_Peng)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 6:19pm UTC](https://discuss.elastic.co/t/will-elasticsearch-high-level-rest-java-client-be-always-forward-compatible/220038 "2020-02-19T18:19:46Z")
Just came across the following post: It mentions that 6.x high level rest java client will work with cluster running 7.x, as forward compatibility is guaranteed. However, I want to double confirm that if, for future r… --- ## [Mapping timestamp in Kibana](https://discuss.elastic.co/t/mapping-timestamp-in-kibana/219581)
**Author:** [@Ilija\_Angeloski](https://discuss.elastic.co/u/Ilija_Angeloski)\ **Replies:** 6\ **Last updated:** [February 19, 2020, 5:30pm UTC](https://discuss.elastic.co/t/mapping-timestamp-in-kibana/219581 "2020-02-19T17:30:02Z")
Hi, I have problem mapping timestamp field. I have field in my csv file timestamp that have values like 1545003901, 1543347920 etc... In kibana in dev tools i type "properties":{ "timestamp":{ "type" : "date" "format… --- ## [Mapping Data Type using time measures such as \`10ns\`](https://discuss.elastic.co/t/mapping-data-type-using-time-measures-such-as-10ns/220036)
**Author:** [@stLalo](https://discuss.elastic.co/u/stLalo)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 5:22pm UTC](https://discuss.elastic.co/t/mapping-data-type-using-time-measures-such-as-10ns/220036 "2020-02-19T17:22:55Z")
Kibana version: 7.5.0 Elasticsearch version: 7.5.0 Browser version: Brave latest version Howdy, y'all! Description: I implemented an ETL pipeline service and a forecasting service using Clojure base on OpenJDK8. … --- ## [Error 400](https://discuss.elastic.co/t/error-400/219936)
**Author:** [@Bruno1](https://discuss.elastic.co/u/Bruno1)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 4:33pm UTC](https://discuss.elastic.co/t/error-400/219936 "2020-02-19T16:33:51Z")
Hello I want create a mapping but I have the following error : \[ERROR\]\[logstash.outputs.elasticsearch\]\[main\] Failed to install template. {:message=\>"Got response code '400' contacting Elasticsearch at URL 'http://127.0… --- ## [Logstash on Kubernetes pipeline terminated if resources.limits.cpu/memory is set](https://discuss.elastic.co/t/logstash-on-kubernetes-pipeline-terminated-if-resources-limits-cpu-memory-is-set/220026)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 4:24pm UTC](https://discuss.elastic.co/t/logstash-on-kubernetes-pipeline-terminated-if-resources-limits-cpu-memory-is-set/220026 "2020-02-19T16:24:53Z")
When running Logstash (as a statefulset) on EKS with resources.limits.cpu/memory set, the pods tend to exit with the pipeline terminated message resulting in CrashLoopBackoffs. The input is a kafka stream. When I do a ku… --- ## [Kibana.crt, no such file or directory](https://discuss.elastic.co/t/kibana-crt-no-such-file-or-directory/219913)
**Author:** [@Prashant\_Kumar3](https://discuss.elastic.co/u/Prashant_Kumar3)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 4:22pm UTC](https://discuss.elastic.co/t/kibana-crt-no-such-file-or-directory/219913 "2020-02-19T16:22:22Z")
I have existing cert in config/certs/kibana.crt and I have also mentioned it into kibana.yml as server.ssl.certificate : config/certs/kibana.crt. Still I am not able to start my Kibana instance. Getting Error like log … --- ## [SIEM Hosts / Networks and Data Not Showing Up](https://discuss.elastic.co/t/siem-hosts-networks-and-data-not-showing-up/219848)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 4\ **Last updated:** [February 19, 2020, 4:16pm UTC](https://discuss.elastic.co/t/siem-hosts-networks-and-data-not-showing-up/219848 "2020-02-19T16:16:10Z")
New to SIEM. Confused about functionality or my settings. I have Fortinet and Sonicwall logs going to ES, via syslog to Logstash, then to ES. When I go to Elastic SIEM, under either Hosts or Network pages, I see nothin… --- ## [How aggregatable fields are defined in Kibana](https://discuss.elastic.co/t/how-aggregatable-fields-are-defined-in-kibana/219957)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 4:00pm UTC](https://discuss.elastic.co/t/how-aggregatable-fields-are-defined-in-kibana/219957 "2020-02-19T16:00:52Z")
Hello i created an index and i saw that even some string or boolean fields are aggregatable. That helped a lot because i created aggs during alert creation even on those string and boolean fields. My question is the … --- ## [Create conditional field based on aggregation in table view](https://discuss.elastic.co/t/create-conditional-field-based-on-aggregation-in-table-view/219962)
**Author:** [@Dani\_Ruse](https://discuss.elastic.co/u/Dani_Ruse)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 3:55pm UTC](https://discuss.elastic.co/t/create-conditional-field-based-on-aggregation-in-table-view/219962 "2020-02-19T15:55:45Z")
Hello all, I want to create a table with an "Error" column which will be populated with the values "YES" or "NO", depending on whether a sum aggregation has the value lower or greater than 0. My metric looks as such: … --- ## [Logstash découpage avec split et ingestion ne fonctionne pas](https://discuss.elastic.co/t/logstash-decoupage-avec-split-et-ingestion-ne-fonctionne-pas/219180)
**Author:** [@romainfoulono](https://discuss.elastic.co/u/romainfoulono)\ **Replies:** 3\ **Last updated:** [February 19, 2020, 3:51pm UTC](https://discuss.elastic.co/t/logstash-decoupage-avec-split-et-ingestion-ne-fonctionne-pas/219180 "2020-02-19T15:51:22Z")
Bonjour tout le monde, Je souhaite ingérer dans Elasticsearch via Logstash des CSV et des textes. Sauf que Logstash envoie un champs unique "message" avec la ligne de texte à l'intérieur. J'aimerai découper cette ligne … --- ## [Flat text to json object](https://discuss.elastic.co/t/flat-text-to-json-object/219969)
**Author:** [@AdamJade](https://discuss.elastic.co/u/AdamJade)\ **Replies:** 3\ **Last updated:** [February 19, 2020, 3:48pm UTC](https://discuss.elastic.co/t/flat-text-to-json-object/219969 "2020-02-19T15:48:57Z")
Hi there I have a problem to transform this line form a log file line to a json object. The line is like this \[2020-02-14 14:33:08.882\] \[VALUE1\] \[VALUE2\] \[VALUE3\] \[VALUE4\] \[VALUE5\] \[VALUE6\] \[VALUE7\] \[VALUE8\] # Other t… --- ## [Array : sum of to request in one line](https://discuss.elastic.co/t/array-sum-of-to-request-in-one-line/219809)
**Author:** [@Bruno1](https://discuss.elastic.co/u/Bruno1)\ **Replies:** 4\ **Last updated:** [February 19, 2020, 3:37pm UTC](https://discuss.elastic.co/t/array-sum-of-to-request-in-one-line/219809 "2020-02-19T15:37:18Z")
Hello, I want add a variable on timelion request like $myvar=1,.es(index="filebeat-\*",q='netflow.egress\_interface:'+$myvar ,metric="\[...\] What is the correct syntax please ? --- ## [API response time visualization](https://discuss.elastic.co/t/api-response-time-visualization/219981)
**Author:** [@Madhu19](https://discuss.elastic.co/u/Madhu19)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 3:09pm UTC](https://discuss.elastic.co/t/api-response-time-visualization/219981 "2020-02-19T15:09:55Z")
Hi, Is it possible to visualize response time V/s API calls graph in Kibana --- ## [Significant terms buggy due to wrong bg\_count](https://discuss.elastic.co/t/significant-terms-buggy-due-to-wrong-bg-count/219637)
**Author:** [@Yonatan\_Omer](https://discuss.elastic.co/u/Yonatan_Omer)\ **Replies:** 7\ **Last updated:** [February 19, 2020, 3:03pm UTC](https://discuss.elastic.co/t/significant-terms-buggy-due-to-wrong-bg-count/219637 "2020-02-19T15:03:18Z")
We use significant terms to find services related to specified group of users. each user is a document, having a field 'services' which is an array of strings. The query bellow returns false report of anomalies due to … --- ## [Elastuc search with Informatica MDM failing with out of Java out of memroy error](https://discuss.elastic.co/t/elastuc-search-with-informatica-mdm-failing-with-out-of-java-out-of-memroy-error/219991)
**Author:** [@himel\_sen](https://discuss.elastic.co/u/himel_sen)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 3:03pm UTC](https://discuss.elastic.co/t/elastuc-search-with-informatica-mdm-failing-with-out-of-java-out-of-memroy-error/219991 "2020-02-19T15:03:14Z")
Can you please help me with the issue \[algsascs3655008\] \[4d5354312e375053-organization\]\[0\] already closed by tragic event on the index writer java.lang.OutOfMemoryError: Java heap space at java.util.Arrays.copyOf(Arr… --- ## [Date\_histogram returning wrong number of buckets](https://discuss.elastic.co/t/date-histogram-returning-wrong-number-of-buckets/219702)
**Author:** [@kpiyush](https://discuss.elastic.co/u/kpiyush)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 2:59pm UTC](https://discuss.elastic.co/t/date-histogram-returning-wrong-number-of-buckets/219702 "2020-02-19T14:59:13Z")
Hi, I am using following query to get the aggs based on date on per day interval with extended\_bounds /index1 { "size": 0, "query":{"bool":{"must":\[{"range":{"CreatedDate":{"lte":"2020-02-13T23:59:59"}}}\]}}, … --- ## [Increase score for unique words matched](https://discuss.elastic.co/t/increase-score-for-unique-words-matched/219868)
**Author:** [@emarthinsen](https://discuss.elastic.co/u/emarthinsen)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 2:51pm UTC](https://discuss.elastic.co/t/increase-score-for-unique-words-matched/219868 "2020-02-19T14:51:38Z")
This one is a little tricky to explain, but here goes. I have an index with mappings that look like this: { "mappings":{ "properties":{ "manufacturer":{ "type":"text", "anal… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1617) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1619)