# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1669

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1670

---

## [Missing log lines filebeat to logstash](https://discuss.elastic.co/t/missing-log-lines-filebeat-to-logstash/216255)

<div class="topic-metadata">

**Author:** [@danielwind83](https://discuss.elastic.co/u/danielwind83)\
**Replies:** 0\
**Last updated:** [January 23, 2020, 1:46pm UTC](https://discuss.elastic.co/t/missing-log-lines-filebeat-to-logstash/216255 "2020-01-23T13:46:37Z")

</div>

Hi All, We are running: Kibana 7.4.0 Elastic 7.4.0 Logstash 7.4.0 Filebeat (33 instances) 6.8.3 We found out we were missing some log lines from two different filebeat clients at different times. After some searchi…

---

## [ILM problems](https://discuss.elastic.co/t/ilm-problems/216132)

<div class="topic-metadata">

**Author:** [@DWbank](https://discuss.elastic.co/u/DWbank)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 12:20pm UTC](https://discuss.elastic.co/t/ilm-problems/216132 "2020-01-23T12:20:08Z")

</div>

I have been spinning my wheels for a while on this. I can't figure out where I am missing something. Logstash output output { # \*\*\*\*\*\*\* this is for debuging what has been parsed # file { # pat…

---

## [ES/Kibana 5.6: why this request doesn't work?](https://discuss.elastic.co/t/es-kibana-5-6-why-this-request-doesnt-work/216224)

<div class="topic-metadata">

**Author:** [@nicolasduminil](https://discuss.elastic.co/u/nicolasduminil)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 1:15pm UTC](https://discuss.elastic.co/t/es-kibana-5-6-why-this-request-doesnt-work/216224 "2020-01-23T13:15:48Z")

</div>

Hello, In the Kibana 5.6 console, development tools, I'm doing the following request: PUT test/\_mapping { "properties" : { "id" : {"type" : "keyword"}, "date" : {"type" : "date"}, "customer\_id" : {"type" : "keywor…

---

## [Logstash : Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release](https://discuss.elastic.co/t/logstash-java-hotspot-tm-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/216060)

<div class="topic-metadata">

**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\
**Replies:** 5\
**Last updated:** [January 23, 2020, 12:51pm UTC](https://discuss.elastic.co/t/logstash-java-hotspot-tm-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/216060 "2020-01-23T12:51:53Z")

</div>

while shashing first log it show below warning: /usr/share/logstash# bin/logstash -e 'input { stdin { } } output { stdout {} }' Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in ver…

---

## [Curator on ECE 2.4.3](https://discuss.elastic.co/t/curator-on-ece-2-4-3/216117)

<div class="topic-metadata">

**Author:** [@balogan](https://discuss.elastic.co/u/balogan)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 12:18pm UTC](https://discuss.elastic.co/t/curator-on-ece-2-4-3/216117 "2020-01-23T12:18:27Z")

</div>

In our Elastic Stack environment we've been using Curator successfully, and we're planning on migrating to ECE which I've been building. I've been given direction to get Curator to work in ECE, but what I've been readin…

---

## [Kibana server is not ready yet - kibana 7.5](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-kibana-7-5/213923)

<div class="topic-metadata">

**Author:** [@talsantos](https://discuss.elastic.co/u/talsantos)\
**Replies:** 8\
**Last updated:** [January 23, 2020, 10:40am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-kibana-7-5/213923 "2020-01-23T10:40:05Z")

</div>

Hi, I upgrade elasticsearch and kibana from 7.1 to 7.5 version, keeping the previous settings. After restart the services both are running. Whem I call kibana on browser gives the message: "Kibana server is not ready…

---

## [Match only if query is found in a field found within a specific nested object, and nothing else](https://discuss.elastic.co/t/match-only-if-query-is-found-in-a-field-found-within-a-specific-nested-object-and-nothing-else/215539)

<div class="topic-metadata">

**Author:** [@RedactedProfile](https://discuss.elastic.co/u/RedactedProfile)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 11:19am UTC](https://discuss.elastic.co/t/match-only-if-query-is-found-in-a-field-found-within-a-specific-nested-object-and-nothing-else/215539 "2020-01-23T11:19:12Z")

</div>

Let's assume my index's data looks something like this: \[ { "\_index": "doc\_pages", "\_type": "pages", "\_id": "264b406593732ffbd15a5ed4b4e3b5af", "\_score": 1, "\_source": { "record\_id": "264b406…

---

## [Getting continuous warning message (server load very high )](https://discuss.elastic.co/t/getting-continuous-warning-message-server-load-very-high/216226)

<div class="topic-metadata">

**Author:** [@ELK\_CL](https://discuss.elastic.co/u/ELK_CL)\
**Replies:** 0\
**Last updated:** [January 23, 2020, 11:25am UTC](https://discuss.elastic.co/t/getting-continuous-warning-message-server-load-very-high/216226 "2020-01-23T11:25:19Z")

</div>

Hi, I am getting following messages: \[2020-01-23T16:50:22,697\]\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[reporting-1\] \[gc\]\[3421\] overhead, spent \[2.3s\] collecting in the last \[2.5s\] \[2020-01-23T16:50:30,241\]\[WARN \]\[o.e.m.j…

---

## [KIbana 4.6.6: Where are Development tools?](https://discuss.elastic.co/t/kibana-4-6-6-where-are-development-tools/216084)

<div class="topic-metadata">

**Author:** [@nicolasduminil](https://discuss.elastic.co/u/nicolasduminil)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 11:12am UTC](https://discuss.elastic.co/t/kibana-4-6-6-where-are-development-tools/216084 "2020-01-23T11:12:46Z")

</div>

Greetings, I'm using Kibana 4.6.6. The documentation refers to the Development Tolls menu option, but I don't find any in the console. Where is it ? Many thanks in advance. Nicolas

---

## [How should I manage hyphen in my request](https://discuss.elastic.co/t/how-should-i-manage-hyphen-in-my-request/216178)

<div class="topic-metadata">

**Author:** [@ShreyaBhat](https://discuss.elastic.co/u/ShreyaBhat)\
**Replies:** 1\
**Last updated:** [January 23, 2020, 10:48am UTC](https://discuss.elastic.co/t/how-should-i-manage-hyphen-in-my-request/216178 "2020-01-23T10:48:12Z")

</div>

I have tried the following but it does not work if I have a hyphen in my id: http://localhost:9200/account/useraccounts/\_search?q=id:"\* CMRZ\*" when I send \<--\> then result is 1-CMRZ-121 \<--\> 1-CMRZ-121 1-CMRZ- \<--\> 1-…

---

## [Date parse error in template](https://discuss.elastic.co/t/date-parse-error-in-template/216101)

<div class="topic-metadata">

**Author:** [@vishnuvardhan](https://discuss.elastic.co/u/vishnuvardhan)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 10:42am UTC](https://discuss.elastic.co/t/date-parse-error-in-template/216101 "2020-01-23T10:42:52Z")

</div>

after creation of template i am getting error , "reason"=\>"failed to parse date field \[06-APR-18 12:58:13\] with format \[dd-MMM-yy HH:mm:ss\]", "caused\_by"=\>{"type"=\>"date\_time\_parse\_exception", "reason"=\>"Text '06-APR-1…

---

## [ELK with SSL, possible issues?](https://discuss.elastic.co/t/elk-with-ssl-possible-issues/216205)

<div class="topic-metadata">

**Author:** [@nick.ilarionov](https://discuss.elastic.co/u/nick.ilarionov)\
**Replies:** 3\
**Last updated:** [January 23, 2020, 10:39am UTC](https://discuss.elastic.co/t/elk-with-ssl-possible-issues/216205 "2020-01-23T10:39:00Z")

</div>

Hello all! I am fairly new to the ELK stack and am trying to run a Proof of Concept of it. Getting it up and running under http was fairly easy, following the guides. However, as I want to have SSL enabled on all commun…

---

## [Links status based on sysloghost and message](https://discuss.elastic.co/t/links-status-based-on-sysloghost-and-message/215544)

<div class="topic-metadata">

**Author:** [@mushfiq](https://discuss.elastic.co/u/mushfiq)\
**Replies:** 10\
**Last updated:** [January 23, 2020, 10:36am UTC](https://discuss.elastic.co/t/links-status-based-on-sysloghost-and-message/215544 "2020-01-23T10:36:12Z")

</div>

Hi, I am new ELK stack & started testing it from last week. I must say, I just love it. What I Have Basic SOHO dual WAN routers, first link leased line and second link broadband (no static IP) These routers support s…

---

## [Search for non indexed fields is not working Please help](https://discuss.elastic.co/t/search-for-non-indexed-fields-is-not-working-please-help/215996)

<div class="topic-metadata">

**Author:** [@srivatsalya](https://discuss.elastic.co/u/srivatsalya)\
**Replies:** 3\
**Last updated:** [January 23, 2020, 10:12am UTC](https://discuss.elastic.co/t/search-for-non-indexed-fields-is-not-working-please-help/215996 "2020-01-23T10:12:30Z")

</div>

Hello, I want to filter the search results using non indexed field. { "\_index" : "shipmentdata\_v1", "\_type" : "\_doc", "\_id" : "128Q711U", "\_score" : 1.0, "\_source" : { "bundleId" : 13663, "customerId" : 101456 …

---

## [Logstash input plugin for Azure event Hub](https://discuss.elastic.co/t/logstash-input-plugin-for-azure-event-hub/216206)

<div class="topic-metadata">

**Author:** [@nujojo](https://discuss.elastic.co/u/nujojo)\
**Replies:** 0\
**Last updated:** [January 23, 2020, 9:41am UTC](https://discuss.elastic.co/t/logstash-input-plugin-for-azure-event-hub/216206 "2020-01-23T09:41:26Z")

</div>

Hi, I am looking into collecting VM logs from Azure event Hub with logstash. I was looking around, but was not able to find proper answer. I am looking plugin for Event Hub which is similar like AWS plugin: Do we …

---

## [Unable to load image into my dashboard](https://discuss.elastic.co/t/unable-to-load-image-into-my-dashboard/215886)

<div class="topic-metadata">

**Author:** [@prasannarajan](https://discuss.elastic.co/u/prasannarajan)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 9:25am UTC](https://discuss.elastic.co/t/unable-to-load-image-into-my-dashboard/215886 "2020-01-23T09:25:02Z")

</div>

Hi, im trying to use markdown in kibana to load image from my local drive. This is the syntax im using. Im uable to load .Why?

---

## [Github suggest reviewer option](https://discuss.elastic.co/t/github-suggest-reviewer-option/216198)

<div class="topic-metadata">

**Author:** [@benoitdupont](https://discuss.elastic.co/u/benoitdupont)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 9:14am UTC](https://discuss.elastic.co/t/github-suggest-reviewer-option/216198 "2020-01-23T09:14:47Z")

</div>

Hello, quick question: I proposed a PR on the logstash GitHub and I see that Github 'suggest' reviewers, with a request button. Is this the common way to do or the PR will be dealt with in a triage phase ? Cheers, Ben

---

## [Plugin that can intersect an automaton with the completion suggester FSTs](https://discuss.elastic.co/t/plugin-that-can-intersect-an-automaton-with-the-completion-suggester-fsts/215908)

<div class="topic-metadata">

**Author:** [@luk.morbee](https://discuss.elastic.co/u/luk.morbee)\
**Replies:** 1\
**Last updated:** [January 23, 2020, 8:54am UTC](https://discuss.elastic.co/t/plugin-that-can-intersect-an-automaton-with-the-completion-suggester-fsts/215908 "2020-01-23T08:54:33Z")

</div>

If I understood it correctly an FST is created per segment for every completion suggester. Suppose we would want to write an Elasticsearch plugin that would allow us to intersect a given automaton (i.e. search logic you…

---

## [Situation after updating Mapping of Elastic](https://discuss.elastic.co/t/situation-after-updating-mapping-of-elastic/216175)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 1\
**Last updated:** [January 23, 2020, 8:28am UTC](https://discuss.elastic.co/t/situation-after-updating-mapping-of-elastic/216175 "2020-01-23T08:28:28Z")

</div>

Hi all, I will explain a situation, please suggest all possible solutions. Lets say, I create a static mapping(dynamic= false) for two attributes "name" , "surname" and add one million documents(with additional fields …

---

## [Problem](https://discuss.elastic.co/t/problem/216190)

<div class="topic-metadata">

**Author:** [@alxfernando](https://discuss.elastic.co/u/alxfernando)\
**Replies:** 1\
**Last updated:** [January 23, 2020, 8:23am UTC](https://discuss.elastic.co/t/problem/216190 "2020-01-23T08:23:41Z")

</div>

Hi I have a doubt, I want to analyze some logs that are not formatted, plain text with timestamp and ip addresses, among many other data, I have used logstash to load the data to elastisearch, but I found that logstash …

---

## [Failed to query elasticsearch for previous event - no such index](https://discuss.elastic.co/t/failed-to-query-elasticsearch-for-previous-event-no-such-index/216185)

<div class="topic-metadata">

**Author:** [@mullan](https://discuss.elastic.co/u/mullan)\
**Replies:** 1\
**Last updated:** [January 23, 2020, 8:21am UTC](https://discuss.elastic.co/t/failed-to-query-elasticsearch-for-previous-event-no-such-index/216185 "2020-01-23T08:21:03Z")

</div>

Hi , My conf file look like this . input { jdbc { ..... statement =\> "Select userId as id,UserID as userid,firstName as firstname, lastName as lastname,countryCode as countrycode,countryName as countryname,bid as bi…

---

## [Azure- hosted elasticsearch in my vNet](https://discuss.elastic.co/t/azure-hosted-elasticsearch-in-my-vnet/216100)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 6:56am UTC](https://discuss.elastic.co/t/azure-hosted-elasticsearch-in-my-vnet/216100 "2020-01-23T06:56:01Z")

</div>

hello , is it possible to use hosted elastic (cloud.elastic.co), but to configure it to run in the same azure vNet? that will reduce data transfer, and will give logstash access to sql server thanks!

---

## [Change String to Hours - date filters](https://discuss.elastic.co/t/change-string-to-hours-date-filters/215834)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 9\
**Last updated:** [January 23, 2020, 6:34am UTC](https://discuss.elastic.co/t/change-string-to-hours-date-filters/215834 "2020-01-23T06:34:18Z")

</div>

Hello everyone, I have a column like this: business\_time\_left 3 Hours 24 Minutes 59 Minutes 4 Days 23 Hours 58 Minutes 0 Seconds 1 Hour and so on.. What I want to do in Logstash is to convert this entirely into h…

---

## [Logstash Jdbc input Plugin configuration with SSL cert information](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-configuration-with-ssl-cert-information/215639)

<div class="topic-metadata">

**Author:** [@mullan](https://discuss.elastic.co/u/mullan)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 6:25am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-configuration-with-ssl-cert-information/215639 "2020-01-23T06:25:28Z")

</div>

Hi, Iam new to Logstash. My project requires to configure logstash with jdbc input plugin.Below is the conf file I had used. input { jdbc { jdbc\_driver\_library =\> "lib\\jars\\mongodb\_unityjdbc\_full.jar" jdbc\_driver\_cl…

---

## [Gettiing "circuit\_breaking\_exception" while performing \_reindex on multiple indices. Indices sizes are in mb's](https://discuss.elastic.co/t/gettiing-circuit-breaking-exception-while-performing-reindex-on-multiple-indices-indices-sizes-are-in-mbs/216184)

<div class="topic-metadata">

**Author:** [@mnehav25](https://discuss.elastic.co/u/mnehav25)\
**Replies:** 0\
**Last updated:** [January 23, 2020, 6:16am UTC](https://discuss.elastic.co/t/gettiing-circuit-breaking-exception-while-performing-reindex-on-multiple-indices-indices-sizes-are-in-mbs/216184 "2020-01-23T06:16:32Z")

</div>

{ "took" : 49704, "timed\_out" : false, "total" : 8745492, "updated" : 0, "created" : 276000, "deleted" : 0, "batches" : 276, "version\_conflicts" : 0, "noops" : 0, "retries" : { "bulk" : 0, "search" : 0 }, "…

---

## [Could some one help me](https://discuss.elastic.co/t/could-some-one-help-me/216124)

<div class="topic-metadata">

**Author:** [@pmohan](https://discuss.elastic.co/u/pmohan)\
**Replies:** 1\
**Last updated:** [January 23, 2020, 5:43am UTC](https://discuss.elastic.co/t/could-some-one-help-me/216124 "2020-01-23T05:43:46Z")

</div>

I'm trying to PUT a cloudlfare template on to a ELK 7.5 and its failing to create a template. Below is the error { "error": { "root\_cause": \[ { "type": "mapper\_parsing\_exception", "reason": "Root mapping definitio…

---

## [Wildcard search with space in the text](https://discuss.elastic.co/t/wildcard-search-with-space-in-the-text/215797)

<div class="topic-metadata">

**Author:** [@jwlee](https://discuss.elastic.co/u/jwlee)\
**Replies:** 10\
**Last updated:** [January 23, 2020, 4:56am UTC](https://discuss.elastic.co/t/wildcard-search-with-space-in-the-text/215797 "2020-01-23T04:56:34Z")

</div>

Wildcard search seems not working if a value contains space. For example, if a value is "hello world" and if you do search hel\* it does not return anything. Below is the query that I used: { "query": { "bool": …

---

## [Configure disk spool using filebeat](https://discuss.elastic.co/t/configure-disk-spool-using-filebeat/216161)

<div class="topic-metadata">

**Author:** [@kaushalshriyan](https://discuss.elastic.co/u/kaushalshriyan)\
**Replies:** 1\
**Last updated:** [January 23, 2020, 3:20am UTC](https://discuss.elastic.co/t/configure-disk-spool-using-filebeat/216161 "2020-01-23T03:20:32Z")

</div>

Hi Is there a way to use configure disk spool using filebeat? If the remote host is down, messages are spooled to disk on the client host and sent when it is up again. For example as per the below settings in rsyslog \> …

---

## [MIB OID Translation](https://discuss.elastic.co/t/mib-oid-translation/29710)

<div class="topic-metadata">

**Author:** [@tom\_jonge](https://discuss.elastic.co/u/tom_jonge)\
**Replies:** 32\
**Last updated:** [January 22, 2020, 3:13am UTC](https://discuss.elastic.co/t/mib-oid-translation/29710 "2020-01-22T03:13:37Z")

</div>

Dear logstash, /opt/logstash/vendor/bundle/jruby/1.9/gems/snmp-1.2.0/data/ruby/snmp/mibs containts a venerable treasure trove of pre-converted YAML MIBs. However I have run into an issue: From Kibana: RFC1155-SMI::…

---

## [Pi 4+ 4gb seems to give me a Cyclic Heap error preventing ingestion](https://discuss.elastic.co/t/pi-4-4gb-seems-to-give-me-a-cyclic-heap-error-preventing-ingestion/216143)

<div class="topic-metadata">

**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\
**Replies:** 0\
**Last updated:** [January 22, 2020, 9:43pm UTC](https://discuss.elastic.co/t/pi-4-4gb-seems-to-give-me-a-cyclic-heap-error-preventing-ingestion/216143 "2020-01-22T21:43:20Z")

</div>

Hey All, First post. I put this on stack overflow ( https://stackoverflow.com/questions/59740792/monitoring-indexing-stats-gives-me-a-current-indexing-set-to-0-i-think-somethin ), but i wanted to generally summarize it…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1668)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1670)
