# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1619 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1620 --- ## [Logs Sequence not in Order](https://discuss.elastic.co/t/logs-sequence-not-in-order/219982)
**Author:** [@Himanshu\_Yadav](https://discuss.elastic.co/u/Himanshu_Yadav)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 2:44pm UTC](https://discuss.elastic.co/t/logs-sequence-not-in-order/219982 "2020-02-19T14:44:23Z")
Hi Team, We are facing an issue where logs on Kibana dashboard are not coming in its original sequence, as seen in the file attached below: --- ## [Schedule cron job](https://discuss.elastic.co/t/schedule-cron-job/219977)
**Author:** [@akhilsharma.in](https://discuss.elastic.co/u/akhilsharma.in)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 2:33pm UTC](https://discuss.elastic.co/t/schedule-cron-job/219977 "2020-02-19T14:33:44Z")
Hi, I'm using http\_poller in input and running it with cron schedule. I have cron as \* 14 \* \* \* UTC. It is giving warning "warning: constant ::Fixnum is deprecated". Please suggest if this is expected and can be avoide… --- ## [Limit concurrent Elasticsearch shard relocations](https://discuss.elastic.co/t/limit-concurrent-elasticsearch-shard-relocations/219810)
**Author:** [@rsyne](https://discuss.elastic.co/u/rsyne)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 2:24pm UTC](https://discuss.elastic.co/t/limit-concurrent-elasticsearch-shard-relocations/219810 "2020-02-19T14:24:05Z")
Hello. I'm running Elasticsearch 7.5.2 with Curator 5.8. The cluster consists of some SSD hot-data nodes and some HDD warm-data nodes. Curator is configured to daily move older indices from hot-data nodes to the cold on… --- ## [Regex with query from string](https://discuss.elastic.co/t/regex-with-query-from-string/218312)
**Author:** [@ganchu](https://discuss.elastic.co/u/ganchu)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 10:25am UTC](https://discuss.elastic.co/t/regex-with-query-from-string/218312 "2020-02-07T10:25:03Z")
First query can find events included this string "registry\_key\_path" : """HKCR\\mscfile\\shell\\open\\command\\(Default)""" GET \_search { "query": { "query\_string": { "query": "(registry\_key\_path:/.\*mscfile.\*/)" } } }… --- ## [Beats - Define field type with add\_fields processor in \*beat.yml?](https://discuss.elastic.co/t/beats-define-field-type-with-add-fields-processor-in-beat-yml/219385)
**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 2:10pm UTC](https://discuss.elastic.co/t/beats-define-field-type-with-add-fields-processor-in-beat-yml/219385 "2020-02-19T14:10:13Z")
Looking at this documentation on adding fields, I see that filebeat can add any custom field by name and value that will be appended to every documented pushed to Elasticsearch by Filebeat. This is defined in filebeat.y… --- ## [Filebeat insert logs from multiple hosts in parallel](https://discuss.elastic.co/t/filebeat-insert-logs-from-multiple-hosts-in-parallel/219952)
**Author:** [@ice3man543](https://discuss.elastic.co/u/ice3man543)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 2:09pm UTC](https://discuss.elastic.co/t/filebeat-insert-logs-from-multiple-hosts-in-parallel/219952 "2020-02-19T14:09:15Z")
We use elasticsearch for storing logs in our infrastructure. The entire infrastructure is composed of multiple workers that write the logs to a central elasticsearch server. The number of workers can increase as the rate… --- ## [Search behavior when type is text or keyword in elasticsearch 5.0 and greater](https://discuss.elastic.co/t/search-behavior-when-type-is-text-or-keyword-in-elasticsearch-5-0-and-greater/219975)
**Author:** [@raghubhai](https://discuss.elastic.co/u/raghubhai)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 2:01pm UTC](https://discuss.elastic.co/t/search-behavior-when-type-is-text-or-keyword-in-elasticsearch-5-0-and-greater/219975 "2020-02-19T14:01:42Z")
Hi, How does elasticsearch differ in search when certain text are given. For eg: if name="Test@@" is escape sequence required for searching. If so then if name="Test @" behaves differently because it does not require… --- ## [Import data from MSSQL](https://discuss.elastic.co/t/import-data-from-mssql/219974)
**Author:** [@mathieu.bauge](https://discuss.elastic.co/u/mathieu.bauge)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 1:40pm UTC](https://discuss.elastic.co/t/import-data-from-mssql/219974 "2020-02-19T13:40:55Z")
Hi everyone, I am new to ElasticSearch and I struggle to achieve some stuff. Can you please help me, I have this case : MSSQL servers, a windows server running the servers and logstash continuously, ElasticSearch and … --- ## [First Time Upgrade](https://discuss.elastic.co/t/first-time-upgrade/219552)
**Author:** [@devin](https://discuss.elastic.co/u/devin)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 1:40pm UTC](https://discuss.elastic.co/t/first-time-upgrade/219552 "2020-02-19T13:40:43Z")
Hello, i am using ES 2.2.0 and i have to upgrade it to 6.5, i read that first i would need to upgrade to 5.x and then from there i will need to upgrade to 6.5. But my problem is that i am totally new user to Elasticsearc… --- ## [About logstash monitoring api, need in 7.4](https://discuss.elastic.co/t/about-logstash-monitoring-api-need-in-7-4/219968)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 1:15pm UTC](https://discuss.elastic.co/t/about-logstash-monitoring-api-need-in-7-4/219968 "2020-02-19T13:15:23Z")
please let me know logstash monitoring api for pipeline? like we have it in logstash 5.0 curl -XGET localhost:9600/\_node/stats/pipeline,reload?pretty --- ## [Not able to sort date(dd-MMM-YYYY) column using elastic search java api](https://discuss.elastic.co/t/not-able-to-sort-date-dd-mmm-yyyy-column-using-elastic-search-java-api/219964)
**Author:** [@Dev2](https://discuss.elastic.co/u/Dev2)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 1:07pm UTC](https://discuss.elastic.co/t/not-able-to-sort-date-dd-mmm-yyyy-column-using-elastic-search-java-api/219964 "2020-02-19T13:07:20Z")
Not able to sort date(dd-MMM-YYYY) column using elastic search java api.Please help me. --- ## [Issue with parsing csv file via logstash with headers containing " \\\\headername \[abcd\]"](https://discuss.elastic.co/t/issue-with-parsing-csv-file-via-logstash-with-headers-containing-headername-abcd/219965)
**Author:** [@pratik322](https://discuss.elastic.co/u/pratik322)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 12:40pm UTC](https://discuss.elastic.co/t/issue-with-parsing-csv-file-via-logstash-with-headers-containing-headername-abcd/219965 "2020-02-19T12:40:53Z")
\[2020-02-19T18:12:34,475\]\[WARN \]\[logstash.filters.csv \]\[main\] Error parsing csv {:field=\>"message", :source=\>""85.266189861681553"\\r", :exception=\>#\ **Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 11:22am UTC](https://discuss.elastic.co/t/how-to-use-pipeline-java-execution-settings-in-logstash-7-4/219949 "2020-02-19T11:22:07Z") Is their any other setting apart from pipeline.java\_execution? Please let me know in detail what logstash does when we set false for pipeline.java\_execution. --- ## [Fscrawler for ES clustering](https://discuss.elastic.co/t/fscrawler-for-es-clustering/216939)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 40\ **Last updated:** [February 19, 2020, 11:07am UTC](https://discuss.elastic.co/t/fscrawler-for-es-clustering/216939 "2020-02-19T11:07:40Z")
Hello, I have configured ES cluster with 3 nodes. I want to index files using fscrawler. Is there any setting i need to do to mention all 3 nodes in fscrawler config file? Thanks, Priyanka --- ## [Reading es by spark SQL is too slow](https://discuss.elastic.co/t/reading-es-by-spark-sql-is-too-slow/219945)
**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 11:05am UTC](https://discuss.elastic.co/t/reading-es-by-spark-sql-is-too-slow/219945 "2020-02-19T11:05:53Z")
Hello, i have a question about spark - es. I write code like below # Initializing PySpark from pyspark import SparkContext, SparkConf, SQLContext # Spark Config conf = SparkConf().setAppName("es\_app") sc = SparkConte… --- ## [Logstash and MQTT](https://discuss.elastic.co/t/logstash-and-mqtt/219932)
**Author:** [@Toontje](https://discuss.elastic.co/u/Toontje)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 9:41am UTC](https://discuss.elastic.co/t/logstash-and-mqtt/219932 "2020-02-19T09:41:38Z")
I have been looking for a way to get data from an MQTT broker into ES. The only thing i found were 2+ years old posts which didn't get me anywhere. This makes me wonder: Is there a specific reason why MQTT is not suppor… --- ## [Custom legend with for Vertical Bar Chart](https://discuss.elastic.co/t/custom-legend-with-for-vertical-bar-chart/219671)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 9:36am UTC](https://discuss.elastic.co/t/custom-legend-with-for-vertical-bar-chart/219671 "2020-02-19T09:36:06Z")
Hello, Some thing I always disliked about Vertical Bar charts legends in kibana is the fact that the legend is half of the time not customizable and has always the same width. The result is that in a lot of graphs, all … --- ## [How can we showcase multiple hosts metrics in single dashboard](https://discuss.elastic.co/t/how-can-we-showcase-multiple-hosts-metrics-in-single-dashboard/214676)
**Author:** [@mohitmehral](https://discuss.elastic.co/u/mohitmehral)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 9:31am UTC](https://discuss.elastic.co/t/how-can-we-showcase-multiple-hosts-metrics-in-single-dashboard/214676 "2020-02-19T09:31:40Z")
I have multiple hosts enable on metricbeat. I want to show case hostname wise metrics in single dashboard. as example i attached I use selection bar to distingush multiple users however it wont work while i change valu… --- ## [Limit query results while paginating them](https://discuss.elastic.co/t/limit-query-results-while-paginating-them/219739)
**Author:** [@ovinz](https://discuss.elastic.co/u/ovinz)\ **Replies:** 5\ **Last updated:** [February 19, 2020, 9:17am UTC](https://discuss.elastic.co/t/limit-query-results-while-paginating-them/219739 "2020-02-19T09:17:19Z")
Hello, I'd like to limit my query results to the first 500 documents and use the pagination (for instance from=0&size=30). My use case : I want to hide the total of documents I don't use yet any relevancy aggs (scorin… --- ## [Unable to connect](https://discuss.elastic.co/t/unable-to-connect/219597)
**Author:** [@rwr](https://discuss.elastic.co/u/rwr)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 9:09am UTC](https://discuss.elastic.co/t/unable-to-connect/219597 "2020-02-19T09:09:02Z")
how i fix this issue ? can somebody help ? thanks before --- ## [Error: Not Found at http://localhost:5601/bundles/commons.bundle.js:3:1376093](https://discuss.elastic.co/t/error-not-found-at-http-localhost-5601-bundles-commons-bundle-js1376093/218720)
**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\ **Replies:** 4\ **Last updated:** [February 19, 2020, 9:07am UTC](https://discuss.elastic.co/t/error-not-found-at-http-localhost-5601-bundles-commons-bundle-js1376093/218720 "2020-02-19T09:07:51Z")
Hello folks, When i click on Discover in kibana i get ther below error, Error: Not Found at http://localhost:5601/bundles/commons.bundle.js:3:1376093. I'm new to kibana and puzzled out trying to figure this out. Lo… --- ## [Search by multiple match step by step fields](https://discuss.elastic.co/t/search-by-multiple-match-step-by-step-fields/219928)
**Author:** [@Mehrdad.dev](https://discuss.elastic.co/u/Mehrdad.dev)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 9:02am UTC](https://discuss.elastic.co/t/search-by-multiple-match-step-by-step-fields/219928 "2020-02-19T09:02:38Z")
Hi . I have this query for search people in : { "multi\_match" : { "fields" : \["full\_name^3", "user\_name", "title", "first\_name", "last\_name"\], "query" : "%v" } } I need : but i want a better than search query … --- ## [Understanding Logstash queues/pipelines](https://discuss.elastic.co/t/understanding-logstash-queues-pipelines/219927)
**Author:** [@277295c5e5a0848b93f5](https://discuss.elastic.co/u/277295c5e5a0848b93f5)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 8:59am UTC](https://discuss.elastic.co/t/understanding-logstash-queues-pipelines/219927 "2020-02-19T08:59:59Z")
Hi Team, I am using Logstash to ship logs to ES . There are a lot of wrong mapping/mapping violations in my logstash logs. We cannot correct these violation errors immediately in our ELK setup. Do these violations impa… --- ## [Share data directory between exclusively running instances](https://discuss.elastic.co/t/share-data-directory-between-exclusively-running-instances/219763)
**Author:** [@noelzubinvictor](https://discuss.elastic.co/u/noelzubinvictor)\ **Replies:** 10\ **Last updated:** [February 19, 2020, 8:46am UTC](https://discuss.elastic.co/t/share-data-directory-between-exclusively-running-instances/219763 "2020-02-19T08:46:13Z")
Problem: The ES instance require lot of memory for quick bulk updates. Otherwise its underutilized. Can i create 2 ES instances with the same shared data directory. Say one with 4Gb(searching) and the other with 32Gb(in… --- ## [New Cryptocli release with Elasticsearch support](https://discuss.elastic.co/t/new-cryptocli-release-with-elasticsearch-support/185970)
**Author:** [@tehmoon](https://discuss.elastic.co/u/tehmoon)\ **Replies:** 2\ **Last updated:** [June 17, 2019, 11:07am UTC](https://discuss.elastic.co/t/new-cryptocli-release-with-elasticsearch-support/185970 "2019-06-17T11:07:07Z")
Hello! 2 years ago, I build a project which gives the possibility to build a data pipeline really easily by chaining modules together. Since I love Elasticsearch so much and needed some features to manipulate/hydrate d… --- ## [Grok pattern for the time which has some character attached to it](https://discuss.elastic.co/t/grok-pattern-for-the-time-which-has-some-character-attached-to-it/219898)
**Author:** [@Harish\_Kumar2](https://discuss.elastic.co/u/Harish_Kumar2)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 8:29am UTC](https://discuss.elastic.co/t/grok-pattern-for-the-time-which-has-some-character-attached-to-it/219898 "2020-02-19T08:29:05Z")
i have log beginning with time and time format is like :slight\_smile: 09:16:07.080\_M\_I\_ \[10:06\] SO(000000000463f2a8 1629 2) i tried grok pattern grok { match =\> {"message" =\> "%{WORD:Timestamp}%{SPACE}%{GREEDYDATA:Lo… --- ## [Updating field value issue](https://discuss.elastic.co/t/updating-field-value-issue/219896)
**Author:** [@Muhammad\_Ariful\_Isla](https://discuss.elastic.co/u/Muhammad_Ariful_Isla)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 7:17am UTC](https://discuss.elastic.co/t/updating-field-value-issue/219896 "2020-02-19T07:17:46Z")
I am trying to work with update\_by\_query but cannot make it work. Following is a simple query, curl -X GET "172.17.0.3:9200/useripvsuserid/\_search?pretty" -H 'Content-Type: application/json' -d' { "\_source":"userid",… --- ## [SYSLOG, convert string message to JSON format](https://discuss.elastic.co/t/syslog-convert-string-message-to-json-format/219490)
**Author:** [@jakemeandi](https://discuss.elastic.co/u/jakemeandi)\ **Replies:** 8\ **Last updated:** [February 19, 2020, 7:01am UTC](https://discuss.elastic.co/t/syslog-convert-string-message-to-json-format/219490 "2020-02-19T07:01:02Z")
Hello all, Please allow me to declare that I am a newbie into logstash filtering (and in coding in general). I am a systems / networks engineer trying to learn something new. That being said, I have set up a 3node ELK… --- ## [What's the most up to date resource on sizing and configuring an ES cluster?](https://discuss.elastic.co/t/whats-the-most-up-to-date-resource-on-sizing-and-configuring-an-es-cluster/219899)
**Author:** [@raahuls](https://discuss.elastic.co/u/raahuls)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 6:56am UTC](https://discuss.elastic.co/t/whats-the-most-up-to-date-resource-on-sizing-and-configuring-an-es-cluster/219899 "2020-02-19T06:56:53Z")
I know that I'm asking a rather generic question that can't be answered without understanding my specific use case. However, I'm looking for some lower bounds. What's the minimum number of nodes, size of the node (in ter… --- ## [Elasticsearch complete sentence highlighting in span query](https://discuss.elastic.co/t/elasticsearch-complete-sentence-highlighting-in-span-query/219904)
**Author:** [@kartik\_puri](https://discuss.elastic.co/u/kartik_puri)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 6:41am UTC](https://discuss.elastic.co/t/elasticsearch-complete-sentence-highlighting-in-span-query/219904 "2020-02-19T06:41:09Z")
We have a situation where we are building a proximity search using the span queries to get the search results. Since we are using the span query we would like to highlight the complete sentence rather than search keyword… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1618) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1620)