# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1633 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1634 --- ## [Logstash connection to Elasticsearch issue](https://discuss.elastic.co/t/logstash-connection-to-elasticsearch-issue/218911)
**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 7:17am UTC](https://discuss.elastic.co/t/logstash-connection-to-elasticsearch-issue/218911 "2020-02-12T07:17:23Z")
Hi All, I have a logstash on an external site and an ES within the local network. The ES can be reached from the site where the logstash is located via an HA-Proxy (https://myapp.mycompany.hu --\> http://myapp.mycompany… --- ## [After update to logstash 7.6.0, it won't start](https://discuss.elastic.co/t/after-update-to-logstash-7-6-0-it-wont-start/218861)
**Author:** [@andre22](https://discuss.elastic.co/u/andre22)\ **Replies:** 4\ **Last updated:** [February 12, 2020, 6:40am UTC](https://discuss.elastic.co/t/after-update-to-logstash-7-6-0-it-wont-start/218861 "2020-02-12T06:40:18Z")
Hi, I updated from 7.5.2 to 7.6.0 (debian stretch). The log gves me the following error, I struggle to see where this comes from: \[2020-02-11T21:30:28,078\]\[ERROR\]\[logstash.agent \] Failed to execute action {:a… --- ## [How can we use "filter" settings in logstash-input-journald plugin?](https://discuss.elastic.co/t/how-can-we-use-filter-settings-in-logstash-input-journald-plugin/217374)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 8\ **Last updated:** [February 12, 2020, 6:28am UTC](https://discuss.elastic.co/t/how-can-we-use-filter-settings-in-logstash-input-journald-plugin/217374 "2020-02-12T06:28:51Z")
Hi, Please let me know in detail how to use filter keyword in logstash input configuration of logstash input jouranld plugin? my aim to parse only some logs not all so how to do that. use of this ..... Filter on even… --- ## [Joining two indexes in elasticsearch](https://discuss.elastic.co/t/joining-two-indexes-in-elasticsearch/218729)
**Author:** [@sarvendras](https://discuss.elastic.co/u/sarvendras)\ **Replies:** 3\ **Last updated:** [February 12, 2020, 6:19am UTC](https://discuss.elastic.co/t/joining-two-indexes-in-elasticsearch/218729 "2020-02-12T06:19:03Z")
Hi All, I have one index having one column as primary key and some other fields while second index also have same primary key and some new column(which is not there in first index) How Can i create third index which ha… --- ## [Doc\_value for numeric field does not match the \_source field value](https://discuss.elastic.co/t/doc-value-for-numeric-field-does-not-match-the-source-field-value/218897)
**Author:** [@kabcampbell](https://discuss.elastic.co/u/kabcampbell)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 6:07am UTC](https://discuss.elastic.co/t/doc-value-for-numeric-field-does-not-match-the-source-field-value/218897 "2020-02-12T06:07:23Z")
Running Elasticsearch 6.8.0. I have a field of type float. Here is the mapping: "constructionCost" : { "type" : "float" } It is being populated from a SQL Server decimal(19,4) column. Here is my query: GET pro… --- ## [Index size is increased while deleting](https://discuss.elastic.co/t/index-size-is-increased-while-deleting/217804)
**Author:** [@nhatnam](https://discuss.elastic.co/u/nhatnam)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 6:03am UTC](https://discuss.elastic.co/t/index-size-is-increased-while-deleting/217804 "2020-02-12T06:03:19Z")
I've just upgraded my cluster from v5.3 to v7.5 and I see strange behaviour. I'm using Bulk API to delete and index docs to a newly created index. I'm sure that at the beginning my bulk requests only contain deletion of… --- ## [Elasticsearch Memory Consumption](https://discuss.elastic.co/t/elasticsearch-memory-consumption/218336)
**Author:** [@guruprasadb](https://discuss.elastic.co/u/guruprasadb)\ **Replies:** 8\ **Last updated:** [February 12, 2020, 5:55am UTC](https://discuss.elastic.co/t/elasticsearch-memory-consumption/218336 "2020-02-12T05:55:36Z")
Hello, In the current system we have 90 days of logs. However, most of the time, only 30 days of data is queried. So, I am thinking of following optimizations to manage old indices to reduce system memory utilization. … --- ## [Import data to kibana maping Geo\_point](https://discuss.elastic.co/t/import-data-to-kibana-maping-geo-point/218290)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 2\ **Last updated:** [February 12, 2020, 4:54am UTC](https://discuss.elastic.co/t/import-data-to-kibana-maping-geo-point/218290 "2020-02-12T04:54:59Z")
i have data like : { "lon": 106.733924, "lat": -6.161368 } and i want to import this data to Kibana With type "geo\_point" "geopoint1": { "type": "geo\_point" }, but i alway get error "failed to parse field \[geop… --- ## [CAN LOGSTASH OUTPUT TO A DATABASE](https://discuss.elastic.co/t/can-logstash-output-to-a-database/218485)
**Author:** [@Adam\_Songambele](https://discuss.elastic.co/u/Adam_Songambele)\ **Replies:** 4\ **Last updated:** [February 12, 2020, 4:08am UTC](https://discuss.elastic.co/t/can-logstash-output-to-a-database/218485 "2020-02-12T04:08:00Z")
hi, i am new to the ELK stack and i have a few question, I have case study that consist in collecting logs that can be saved in a database which could then be pulled down by a bot connect to a user to perform several t… --- ## [Haproxy log parsed with grok](https://discuss.elastic.co/t/haproxy-log-parsed-with-grok/218889)
**Author:** [@julian6709](https://discuss.elastic.co/u/julian6709)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 3:44am UTC](https://discuss.elastic.co/t/haproxy-log-parsed-with-grok/218889 "2020-02-12T03:44:17Z")
Can some one please help on creating the proper grok parse for that haproxy string below? I am new in this magical logstash world :wink: "\<134\>Jan 30 20:25:51 haproxy\[8265\]: 192.168.1.10:57176 \[30/Jan/2020:20:25:50.490… --- ## [How to protect against accidental exposure like Microsoft posted on Jan 22](https://discuss.elastic.co/t/how-to-protect-against-accidental-exposure-like-microsoft-posted-on-jan-22/218880)
**Author:** [@ArtKhanna](https://discuss.elastic.co/u/ArtKhanna)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 3:16am UTC](https://discuss.elastic.co/t/how-to-protect-against-accidental-exposure-like-microsoft-posted-on-jan-22/218880 "2020-02-12T03:16:15Z")
Accidental exposure seems to be happening often. Has anybody found this to be a compliance issue? --- ## [Failed to publish events caused by: i/o timeout while sending logs to logstash](https://discuss.elastic.co/t/failed-to-publish-events-caused-by-i-o-timeout-while-sending-logs-to-logstash/218885)
**Author:** [@zhang\_you](https://discuss.elastic.co/u/zhang_you)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 3:12am UTC](https://discuss.elastic.co/t/failed-to-publish-events-caused-by-i-o-timeout-while-sending-logs-to-logstash/218885 "2020-02-12T03:12:05Z")
my filebeat and logstash are both version 7.5.2. my filebeat.yml is and my logstash.conf is .and other config file are default.When i run this,the error is "Failed to publish events caused by: read tcp 127.0.0.1:64356-\>… --- ## [Add field if the input file comes from a certain path](https://discuss.elastic.co/t/add-field-if-the-input-file-comes-from-a-certain-path/218859)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 4\ **Last updated:** [February 12, 2020, 2:44am UTC](https://discuss.elastic.co/t/add-field-if-the-input-file-comes-from-a-certain-path/218859 "2020-02-12T02:44:14Z")
Hi I want to add a field depending on the path of the input log file, something like this: input { file { path =\> "some\_path/uptime\*" path =\> "some\_other\_path/uptime\*" … --- ## [機械学習の外れ値検知について](https://discuss.elastic.co/t/topic/218294)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [February 12, 2020, 2:38am UTC](https://discuss.elastic.co/t/topic/218294 "2020-02-12T02:38:39Z")
機械学習について質問させてください。 文字列データを機械学習にて学習させたいです。例えば、 過去データは"A","B","C"・・・・・"Y"のデータしか来ていないことを学習させ、"Z"という未知のデータが来た時に検知させるようにしたいです。 こういったことは機械学習の設定で実現可能でしょうか？ --- ## [Any benefit using a node with 32GB heap & 96GB for OS+filesystem cache?](https://discuss.elastic.co/t/any-benefit-using-a-node-with-32gb-heap-96gb-for-os-filesystem-cache/218881)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 2:15am UTC](https://discuss.elastic.co/t/any-benefit-using-a-node-with-32gb-heap-96gb-for-os-filesystem-cache/218881 "2020-02-12T02:15:31Z")
I assume this type of node setting would benefit querying the same data over and over. But is there any down side to this in term of GC? Has anybody deploy nodes with much more RAM for FS than JVM? Anybody sharing his… --- ## [Could not create SSL/TLS secure channel](https://discuss.elastic.co/t/could-not-create-ssl-tls-secure-channel/218668)
**Author:** [@steevegldev](https://discuss.elastic.co/u/steevegldev)\ **Replies:** 4\ **Last updated:** [February 12, 2020, 12:33am UTC](https://discuss.elastic.co/t/could-not-create-ssl-tls-secure-channel/218668 "2020-02-12T00:33:07Z")
I'm trying to post index by using ApiKey and .NET library, but I got an error. Dim auth = New ApiKeyAuthenticationCredentials("ApiKeyID", "ApiKey" ) Dim settings = New ConnectionConfiguration("CloudID", auth) Dim client… --- ## [Elasticsearch cluster UUID: \_na\_](https://discuss.elastic.co/t/elasticsearch-cluster-uuid-na/218707)
**Author:** [@AndyGarcia](https://discuss.elastic.co/u/AndyGarcia)\ **Replies:** 2\ **Last updated:** [February 11, 2020, 4:59pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-uuid-na/218707 "2020-02-11T16:59:19Z")
I have multiple elasticsearch nodes, all on seperate machines. For some reason they can't join the cluster. My first node: { "name" : "myNode\_1", "cluster\_name" : "SRT411", "cluster\_uuid" : "7lao\_UsP… --- ## [Beat output.logstash to reverse proxy](https://discuss.elastic.co/t/beat-output-logstash-to-reverse-proxy/218868)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [February 11, 2020, 9:55pm UTC](https://discuss.elastic.co/t/beat-output-logstash-to-reverse-proxy/218868 "2020-02-11T21:55:08Z")
My beats ingest for my logstash instance sits behind a reverse proxy, located at: logstash:443/beats When I use the following configuration in my filebeat.yml (or any \*beat.yml file): output.logstash.hosts: \["logstash:… --- ## [Uptime Monitoring without external pings](https://discuss.elastic.co/t/uptime-monitoring-without-external-pings/218840)
**Author:** [@Nico\_Duldhardt](https://discuss.elastic.co/u/Nico_Duldhardt)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 8:03pm UTC](https://discuss.elastic.co/t/uptime-monitoring-without-external-pings/218840 "2020-02-11T20:03:49Z")
Hello everybody, is there another solution to monitor the uptime of several (\> 100) machines when I cannot externally ping them? I assume heartbeat won't work then? I tried to count the logs of each machine. However, th… --- ## [Terms\_set within a nested query](https://discuss.elastic.co/t/terms-set-within-a-nested-query/218852)
**Author:** [@edragom](https://discuss.elastic.co/u/edragom)\ **Replies:** 0\ **Last updated:** [February 11, 2020, 7:28pm UTC](https://discuss.elastic.co/t/terms-set-within-a-nested-query/218852 "2020-02-11T19:28:44Z")
Is it possible to use a terms\_set within a nested query? I haven't be able to find any examples or documentation. Various testing attempts have failed. Most recently it has looked like... Mappings as... { "mappings":… --- ## [Custom Security Extension and Realm Work for Kibana Login](https://discuss.elastic.co/t/custom-security-extension-and-realm-work-for-kibana-login/216116)
**Author:** [@YanbangLiuUiPath](https://discuss.elastic.co/u/YanbangLiuUiPath)\ **Replies:** 3\ **Last updated:** [February 11, 2020, 7:12pm UTC](https://discuss.elastic.co/t/custom-security-extension-and-realm-work-for-kibana-login/216116 "2020-02-11T19:12:21Z")
I created my custom security plugin following this post. It is working for elasticsearch and I can use the custom headers to authenticate using localhost:9200/\_security/\_authenticate Now, what if I want to sign-in to Ki… --- ## [🎉 Elastic Stack 7.6.0 released](https://discuss.elastic.co/t/elastic-stack-7-6-0-released/218847)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [February 11, 2020, 7:07pm UTC](https://discuss.elastic.co/t/elastic-stack-7-6-0-released/218847 "2020-02-11T19:07:21Z")
:tada:Elastic Stack 7.6.0 released We are excited to announce the general availability of version 7.6 of the Elastic Stack. This release streamlines automated threat detection with the launch of a new SIEM detection eng… --- ## [Sparse vector vs rank features. Which one?](https://discuss.elastic.co/t/sparse-vector-vs-rank-features-which-one/214772)
**Author:** [@snakeztc](https://discuss.elastic.co/u/snakeztc)\ **Replies:** 12\ **Last updated:** [February 11, 2020, 7:02pm UTC](https://discuss.elastic.co/t/sparse-vector-vs-rank-features-which-one/214772 "2020-02-11T19:02:04Z")
I am trying to implement a customized search function that will rank documents based on sparse features. Concretely, each document will have a list of sparse features, e.g. doc\_1 -\> {a: 1.1, b: 0.2} doc\_2 -\> {a: 0.2, z… --- ## [Elastic Logstash Helm Chart Doesn't Pass Readiness Probe](https://discuss.elastic.co/t/elastic-logstash-helm-chart-doesnt-pass-readiness-probe/218835)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 6:53pm UTC](https://discuss.elastic.co/t/elastic-logstash-helm-chart-doesnt-pass-readiness-probe/218835 "2020-02-11T18:53:00Z")
I have multiple logstash pods deployed, segregated by function. I am experiencing an issue where, when I have xpack.monitoring configured, the helm chart readiness and liveness probes don't ever show that the pod is read… --- ## [Fetch all documents from index having max(field) \<= today's date](https://discuss.elastic.co/t/fetch-all-documents-from-index-having-max-field-todays-date/218844)
**Author:** [@priteshshah17](https://discuss.elastic.co/u/priteshshah17)\ **Replies:** 0\ **Last updated:** [February 11, 2020, 6:49pm UTC](https://discuss.elastic.co/t/fetch-all-documents-from-index-having-max-field-todays-date/218844 "2020-02-11T18:49:40Z")
I have a SQL query as below which is very simple when its SQL however I am not getting how to convert it to elastic query, Select \* from user A where A.field = (select max(C.field) from user C where C.table = A.table a… --- ## [Node Discovery Issue](https://discuss.elastic.co/t/node-discovery-issue/218833)
**Author:** [@damasu](https://discuss.elastic.co/u/damasu)\ **Replies:** 6\ **Last updated:** [February 11, 2020, 5:49pm UTC](https://discuss.elastic.co/t/node-discovery-issue/218833 "2020-02-11T17:49:55Z")
Hi, I have created two AWS EC2 instances the first is using the following docker-compose configuration elasticsearch: build: context: ./docker/elasticsearch/ dockerfile: Dockerfile args: … --- ## [Setting max\_concurrent\_shard\_requests with Java client](https://discuss.elastic.co/t/setting-max-concurrent-shard-requests-with-java-client/218831)
**Author:** [@Brent\_Farrell](https://discuss.elastic.co/u/Brent_Farrell)\ **Replies:** 0\ **Last updated:** [February 11, 2020, 5:15pm UTC](https://discuss.elastic.co/t/setting-max-concurrent-shard-requests-with-java-client/218831 "2020-02-11T17:15:26Z")
Hello, I am using the high-level REST client to invoke the multi-search and multi-template search APIs. I see that I can set max\_concurrent\_searches with the method maxConcurrentSearchRequests(int) but I do not see a m… --- ## [How can I write Effective Painless script?](https://discuss.elastic.co/t/how-can-i-write-effective-painless-script/218819)
**Author:** [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 4:30pm UTC](https://discuss.elastic.co/t/how-can-i-write-effective-painless-script/218819 "2020-02-11T16:30:05Z")
Yes; You have really great script lang but one day, I will be cancer because of poor documentation and knowledge of painless so it makes painless ghost language there is no great full example. I got stuck with below code… --- ## [Cron in elastic.co to exec a Node.js script?](https://discuss.elastic.co/t/cron-in-elastic-co-to-exec-a-node-js-script/218815)
**Author:** [@Zoomi4he](https://discuss.elastic.co/u/Zoomi4he)\ **Replies:** 0\ **Last updated:** [February 11, 2020, 4:05pm UTC](https://discuss.elastic.co/t/cron-in-elastic-co-to-exec-a-node-js-script/218815 "2020-02-11T16:05:55Z")
Using my elastic,co deployment, how can I run a node.js script every minute and collect the execution time for the script? I'd like to collect time series data on the scripts execution time and get alerts when it takes l… --- ## [New logstash output plugin not getting config value correctly](https://discuss.elastic.co/t/new-logstash-output-plugin-not-getting-config-value-correctly/218786)
**Author:** [@fostec82](https://discuss.elastic.co/u/fostec82)\ **Replies:** 3\ **Last updated:** [February 11, 2020, 3:52pm UTC](https://discuss.elastic.co/t/new-logstash-output-plugin-not-getting-config-value-correctly/218786 "2020-02-11T15:52:19Z")
I am attempting to create a new output plugin. The conf is pretty simple input { stdin{} } filter { mutate { add\_field =\> { "\[some\_new\_field\]" =\> "some\_new\_field\_value" } } } output { mynewpl… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1632) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1634)