# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1641 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1642 --- ## [Snapshot is taking too long](https://discuss.elastic.co/t/snapshot-is-taking-too-long/218262)
**Author:** [@pinakinab](https://discuss.elastic.co/u/pinakinab)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 8:25am UTC](https://discuss.elastic.co/t/snapshot-is-taking-too-long/218262 "2020-02-07T08:25:28Z")
We are using Elasticsearch 7.2.0 We are trying to create a snapshot for one of our indices. The index size is 30 GB. It took around 1 hour to create this snapshot. There were no previously created snapshots. Our elastic… --- ## [My Logstash throws error stating JavaLang::illegal state exception. I have attached my config file below. can someone help me out?](https://discuss.elastic.co/t/my-logstash-throws-error-stating-javalang-illegal-state-exception-i-have-attached-my-config-file-below-can-someone-help-me-out/218143)
**Author:** [@Varun\_Saraf](https://discuss.elastic.co/u/Varun_Saraf)\ **Replies:** 3\ **Last updated:** [February 7, 2020, 8:01am UTC](https://discuss.elastic.co/t/my-logstash-throws-error-stating-javalang-illegal-state-exception-i-have-attached-my-config-file-below-can-someone-help-me-out/218143 "2020-02-07T08:01:37Z")
input { file { path =\> "/Applications/data/cars.csv" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { csv { seperator =\> "," columns =\> \[ "maker", "mode… --- ## [Scroll contexts are left open and they never get deleted or expired in Elasticsearch v7.3?](https://discuss.elastic.co/t/scroll-contexts-are-left-open-and-they-never-get-deleted-or-expired-in-elasticsearch-v7-3/218284)
**Author:** [@yash.tandon](https://discuss.elastic.co/u/yash.tandon)\ **Replies:** 0\ **Last updated:** [February 7, 2020, 7:43am UTC](https://discuss.elastic.co/t/scroll-contexts-are-left-open-and-they-never-get-deleted-or-expired-in-elasticsearch-v7-3/218284 "2020-02-07T07:43:40Z")
--- ## [Authentication to Kibana](https://discuss.elastic.co/t/authentication-to-kibana/217617)
**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\ **Replies:** 4\ **Last updated:** [February 7, 2020, 6:58am UTC](https://discuss.elastic.co/t/authentication-to-kibana/217617 "2020-02-07T06:58:53Z")
Hello All , We wanted to setup a basic authentication for Kibana which is installed on Windows, where by supplying User id and password , it should match with the user id and password provided in the configuration file … --- ## [Can logstash use syslog time as @timestamp](https://discuss.elastic.co/t/can-logstash-use-syslog-time-as-timestamp/218270)
**Author:** [@amhulli](https://discuss.elastic.co/u/amhulli)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 6:41am UTC](https://discuss.elastic.co/t/can-logstash-use-syslog-time-as-timestamp/218270 "2020-02-07T06:41:39Z")
We have a server that is currently not forwarding logs for ingesting into elasticsearch. We are about to change that but want to ingest an existing year's worth of logs first. So that we can run time based searches in … --- ## [Bulk Performance issue when having version Conflict in Elasticsearch-5.4.3](https://discuss.elastic.co/t/bulk-performance-issue-when-having-version-conflict-in-elasticsearch-5-4-3/218281)
**Author:** [@Sumit\_Jha](https://discuss.elastic.co/u/Sumit_Jha)\ **Replies:** 0\ **Last updated:** [February 7, 2020, 6:26am UTC](https://discuss.elastic.co/t/bulk-performance-issue-when-having-version-conflict-in-elasticsearch-5-4-3/218281 "2020-02-07T06:26:19Z")
Hi, We are having huge bulk performance issue when request comes for similar document at same timestamp in bulk . I was curious to know why version conflict would have significant impact . --- ## [Alerting thru Logstash](https://discuss.elastic.co/t/alerting-thru-logstash/218266)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 6\ **Last updated:** [February 7, 2020, 6:19am UTC](https://discuss.elastic.co/t/alerting-thru-logstash/218266 "2020-02-07T06:19:21Z")
Hi- I did installed metricbeats on a server, but for some reasons we stop the metricbeats service and start it back after some time. I would need an email alerting thru logstash only when its stopped and if the metricbe… --- ## [Calculate daily total value based on previous day values](https://discuss.elastic.co/t/calculate-daily-total-value-based-on-previous-day-values/217906)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 4\ **Last updated:** [February 7, 2020, 6:00am UTC](https://discuss.elastic.co/t/calculate-daily-total-value-based-on-previous-day-values/217906 "2020-02-07T06:00:51Z")
Hi everyone, I know this is probably a long shot but I wonder if it somehow is possible to calculate values like this. Example: Every day I'm ingesting a new value that is the total value of X for month to date. 01/02… --- ## [Moving Average Visualization](https://discuss.elastic.co/t/moving-average-visualization/217793)
**Author:** [@Rizin\_Hussain](https://discuss.elastic.co/u/Rizin_Hussain)\ **Replies:** 6\ **Last updated:** [February 7, 2020, 5:20am UTC](https://discuss.elastic.co/t/moving-average-visualization/217793 "2020-02-07T05:20:14Z")
Hi, I have been working in Elasticsearch and Kibana since few months, I got a requirement to build a Moving Average visualization with Time data. when I had tried create the same, facing some difficulties, I need to … --- ## [Setting keystore for Slack, cannot see what I am typing?](https://discuss.elastic.co/t/setting-keystore-for-slack-cannot-see-what-i-am-typing/218176)
**Author:** [@JimP](https://discuss.elastic.co/u/JimP)\ **Replies:** 2\ **Last updated:** [February 7, 2020, 5:14am UTC](https://discuss.elastic.co/t/setting-keystore-for-slack-cannot-see-what-i-am-typing/218176 "2020-02-07T05:14:27Z")
I am unable to see what I am typing to enter the value for ...secure\_url: Is this by design? bin/elasticsearch-keystore add xpack.notification.slack.account.monitoring.secure\_url Enter value for xpack.notification.slac… --- ## [ElasticSearch Query with Powershell Invoke-RestMethod](https://discuss.elastic.co/t/elasticsearch-query-with-powershell-invoke-restmethod/218228)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 5\ **Last updated:** [February 7, 2020, 5:02am UTC](https://discuss.elastic.co/t/elasticsearch-query-with-powershell-invoke-restmethod/218228 "2020-02-07T05:02:34Z")
Hi- I have a Elastic Search Rest API to query along with range condition, which would need to be executed thru Powershell using Invoke-RestMethod command, but it fails. It works alright using Curl. Curl command: curl … --- ## [TSVBとMetricのnull値の取り扱いの差](https://discuss.elastic.co/t/tsvb-metric-null/215248)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 4\ **Last updated:** [February 7, 2020, 4:55am UTC](https://discuss.elastic.co/t/tsvb-metric-null/215248 "2020-02-07T04:55:47Z")
お世話になります。 TSVBとMetricのnull値の取り扱いの差について教えてください。 たとえば以下のようなデータの場合で、testdate を Time field としてソートした場合に、value の Top Hit ( Size=1 , ORDER BY DESC ) をとると、以下のとおり差があります。 TSVB \_id=1のnullが無視され、\_id=2の10が取得(表示)される Metric \_id=… --- ## [How to Ingest data from MongoDB database into ElasticSearch using Logstash](https://discuss.elastic.co/t/how-to-ingest-data-from-mongodb-database-into-elasticsearch-using-logstash/216245)
**Author:** [@jskishor](https://discuss.elastic.co/u/jskishor)\ **Replies:** 7\ **Last updated:** [February 7, 2020, 4:49am UTC](https://discuss.elastic.co/t/how-to-ingest-data-from-mongodb-database-into-elasticsearch-using-logstash/216245 "2020-02-07T04:49:14Z")
Hello Logstash/ES Gurus, I am new to ES and logstash, I need help on ingesting a user collection data from a mongo database into elastic search. I have used logstash-input-mongodb plugin and started the logstash and i… --- ## [Ruby filter "LogStash::ConfigurationError"](https://discuss.elastic.co/t/ruby-filter-logstash-configurationerror/218180)
**Author:** [@dishma237](https://discuss.elastic.co/u/dishma237)\ **Replies:** 6\ **Last updated:** [February 7, 2020, 4:19am UTC](https://discuss.elastic.co/t/ruby-filter-logstash-configurationerror/218180 "2020-02-07T04:19:33Z")
Hi Guys, got a config setup as below to receive snmp walks result and I a script to clean the data. However it fails to run because of an error on the ruby filter. I have tried my script on the output on irb and the scr… --- ## [Text match scoring on multiple indexes](https://discuss.elastic.co/t/text-match-scoring-on-multiple-indexes/218271)
**Author:** [@Avhirup\_Chakraborty](https://discuss.elastic.co/u/Avhirup_Chakraborty)\ **Replies:** 0\ **Last updated:** [February 7, 2020, 3:56am UTC](https://discuss.elastic.co/t/text-match-scoring-on-multiple-indexes/218271 "2020-02-07T03:56:41Z")
Hi all, I had a doubt regarding the score when we fire a multi-index query. Does the scoring happen by default happen on per index tf-idf statistics or global tf-idf statistics? For example: GET test\_1,test\_2/\_search?… --- ## [Cannot search doc with key field start with "\_"](https://discuss.elastic.co/t/cannot-search-doc-with-key-field-start-with/218268)
**Author:** [@Hoang\_Nguyen2](https://discuss.elastic.co/u/Hoang_Nguyen2)\ **Replies:** 0\ **Last updated:** [February 7, 2020, 3:00am UTC](https://discuss.elastic.co/t/cannot-search-doc-with-key-field-start-with/218268 "2020-02-07T03:00:38Z")
cannot search doc with key field start with "\_" I have below doc, when I search doc by url: http://localhost:9200/indexName/\_search?q=hanoi It return empty doc { "company": "software", "\_quantity":500, "company\_loc… --- ## [Ingestnodeのエラー処理について](https://discuss.elastic.co/t/ingestnode/214924)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [February 7, 2020, 12:27am UTC](https://discuss.elastic.co/t/ingestnode/214924 "2020-02-07T00:27:35Z")
お世話になっております。 Ingest node Pipelineのon\_failureの設定方法について質問させて頂きます。 下記のようにPipelineAからPipelineB、PipelineBからPipelineCを呼び出す処理を検討しています。 PUT /\_ingest/pipeline/PipelineA { "processors": \[ { "pipeline": { "if… --- ## [インデックステンプレートのMappingについて](https://discuss.elastic.co/t/mapping/215066)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [February 7, 2020, 12:25am UTC](https://discuss.elastic.co/t/mapping/215066 "2020-02-07T00:25:31Z")
お世話になっております。 ElasticsearchにてインデックステンプレートでのMapping設定無で、 インデックス登録を行う上で、Kibanaの操作などで起こりうる懸念点についてご教示をお願い致します。 例： 数値が文字列で登録されている場合、Discover、Dashboard等で正しくソートされない場合がある --- ## [Kibana 7.5.2 under container FATAL Error: Optimizations failure. 5818 modules](https://discuss.elastic.co/t/kibana-7-5-2-under-container-fatal-error-optimizations-failure-5818-modules/217694)
**Author:** [@elemus](https://discuss.elastic.co/u/elemus)\ **Replies:** 5\ **Last updated:** [February 6, 2020, 11:06pm UTC](https://discuss.elastic.co/t/kibana-7-5-2-under-container-fatal-error-optimizations-failure-5818-modules/217694 "2020-02-06T23:06:30Z")
Hi, I'm working on Kibana 7.5.2 docker container trying to connect to elasticsearch cluster using docker-compose but can't initialize, I tried several solutions of another versions, like disable xpack.reporting or xpack.… --- ## [Zeek input only creating index templates and system indices](https://discuss.elastic.co/t/zeek-input-only-creating-index-templates-and-system-indices/218253)
**Author:** [@Junebee](https://discuss.elastic.co/u/Junebee)\ **Replies:** 0\ **Last updated:** [February 6, 2020, 11:02pm UTC](https://discuss.elastic.co/t/zeek-input-only-creating-index-templates-and-system-indices/218253 "2020-02-06T23:02:51Z")
I am trying to ingest data from a Zeek sensor directly into Elasticsearch and when I do ES creates index templates and system indices for each Zeek log but no usable indices. This is from a clean instance but this result… --- ## [Percentage repeats year over year](https://discuss.elastic.co/t/percentage-repeats-year-over-year/217680)
**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\ **Replies:** 9\ **Last updated:** [February 6, 2020, 9:54pm UTC](https://discuss.elastic.co/t/percentage-repeats-year-over-year/217680 "2020-02-06T21:54:26Z")
I am relatively new to ELK. Unfortunately I'm a sysadmin and definitely not an analytics person. This means that while I've been able to setup the ELK stack and even injest and work with data, I am pretty novice at doi… --- ## [Getting \_source fields with bulk api](https://discuss.elastic.co/t/getting-source-fields-with-bulk-api/218235)
**Author:** [@danoli](https://discuss.elastic.co/u/danoli)\ **Replies:** 1\ **Last updated:** [February 6, 2020, 9:44pm UTC](https://discuss.elastic.co/t/getting-source-fields-with-bulk-api/218235 "2020-02-06T21:44:11Z")
The Bulk API docs mention the query parameter \_source, however, when I add the parameter to the request, no source fields are included. For example: curl -X POST "localhost:9200/\_bulk?\_source=field1" -H 'Content-Type: … --- ## [Rollback configuration change after faillure in ECE 2.4](https://discuss.elastic.co/t/rollback-configuration-change-after-faillure-in-ece-2-4/217832)
**Author:** [@tazikm](https://discuss.elastic.co/u/tazikm)\ **Replies:** 2\ **Last updated:** [February 6, 2020, 9:24pm UTC](https://discuss.elastic.co/t/rollback-configuration-change-after-faillure-in-ece-2-4/217832 "2020-02-06T21:24:19Z")
Hi, I have a deployement in 2 zones, with an instance tiebreaker,instance data master,instance data master eligible and a kibana instance , my deployment was facing Memory issues so to add more memory on it, I used Clo… --- ## [Pulling day of week from a date field then writing a query to return records for a specific day of the week](https://discuss.elastic.co/t/pulling-day-of-week-from-a-date-field-then-writing-a-query-to-return-records-for-a-specific-day-of-the-week/217042)
**Author:** [@dleota](https://discuss.elastic.co/u/dleota)\ **Replies:** 4\ **Last updated:** [February 6, 2020, 9:02pm UTC](https://discuss.elastic.co/t/pulling-day-of-week-from-a-date-field-then-writing-a-query-to-return-records-for-a-specific-day-of-the-week/217042 "2020-02-06T21:02:10Z")
Hi New to Kibana. How would I use Lucene or Custom DSL Query in the Kibana environment to a) change a date type to day of the week , then b) return only certain days of the week say Saturday for example. In the query… --- ## [Logs in duplicate](https://discuss.elastic.co/t/logs-in-duplicate/217762)
**Author:** [@Robin\_Coda](https://discuss.elastic.co/u/Robin_Coda)\ **Replies:** 5\ **Last updated:** [February 6, 2020, 8:44pm UTC](https://discuss.elastic.co/t/logs-in-duplicate/217762 "2020-02-06T20:44:36Z")
Hello, In Kibana i see different logs in duplicate, I don't know for what. Can you explain me this please. Thank's --- ## [Please, I need help with grok patterns](https://discuss.elastic.co/t/please-i-need-help-with-grok-patterns/218246)
**Author:** [@Fern148](https://discuss.elastic.co/u/Fern148)\ **Replies:** 1\ **Last updated:** [February 6, 2020, 8:24pm UTC](https://discuss.elastic.co/t/please-i-need-help-with-grok-patterns/218246 "2020-02-06T20:24:08Z")
Hello! All right? Please, I need help with grok patterns. When I test with Dev Tools -\> Grok Debugger it works perfectly, but when I include it in the logstash filter it returns \_grokparsefailure. Is there a way to ca… --- ## [Host data wont populate in dashboards when upgrading beats from 7.0 to 7.3 and using Logstash](https://discuss.elastic.co/t/host-data-wont-populate-in-dashboards-when-upgrading-beats-from-7-0-to-7-3-and-using-logstash/215344)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 7\ **Last updated:** [February 4, 2020, 7:06pm UTC](https://discuss.elastic.co/t/host-data-wont-populate-in-dashboards-when-upgrading-beats-from-7-0-to-7-3-and-using-logstash/215344 "2020-02-04T19:06:34Z")
ECE - Elasticsearch 7.3 Kibana -7 .3 Our metricbeat system overview dashboard will not display a Beat thats running 7.3 after upgrading from 7.0 if we run the beat through Logstash. The beat will populate in the dashb… --- ## [NEST Brings down the whole Webserver](https://discuss.elastic.co/t/nest-brings-down-the-whole-webserver/217693)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 38\ **Last updated:** [February 6, 2020, 7:55pm UTC](https://discuss.elastic.co/t/nest-brings-down-the-whole-webserver/217693 "2020-02-06T19:55:45Z")
Does anyone realize that the NEST Library brings down a whole web server? Does anyone even care about such a Humongous bug! Gone Warkolm - Close this thread to save EMBARRASSMENT(as you unusually do) instead of acknowl… --- ## ['mage' is not recognized as an internal or external command](https://discuss.elastic.co/t/mage-is-not-recognized-as-an-internal-or-external-command/217082)
**Author:** [@Yiw](https://discuss.elastic.co/u/Yiw)\ **Replies:** 23\ **Last updated:** [February 6, 2020, 7:54pm UTC](https://discuss.elastic.co/t/mage-is-not-recognized-as-an-internal-or-external-command/217082 "2020-02-06T19:54:23Z")
Hi all, I am having an issue and hoping you have seen this previously. #Using Windows 10# I cloned the beats source code according to https://www.elastic.co/guide/en/beats/devguide/current/beats-contributing.html Whe… --- ## [Визуализация запросов](https://discuss.elastic.co/t/topic/218017)
**Author:** [@dranovskiydima](https://discuss.elastic.co/u/dranovskiydima)\ **Replies:** 3\ **Last updated:** [February 6, 2020, 7:11pm UTC](https://discuss.elastic.co/t/topic/218017 "2020-02-06T19:11:40Z")
Добрый день, подскажите как визуализировать сохраненные запросы в кибане в виде одного чарта к примеру ? Вопрос стоит в постоянном мониторинге именно этих запросов. Если тема уже поднималась или есть гайд построения… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1640) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1642)