# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1673 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1674 --- ## [Logstash index naming pattern - use of an alternate tag if one is missing](https://discuss.elastic.co/t/logstash-index-naming-pattern-use-of-an-alternate-tag-if-one-is-missing/215767)
**Author:** [@jreid](https://discuss.elastic.co/u/jreid)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 11:15am UTC](https://discuss.elastic.co/t/logstash-index-naming-pattern-use-of-an-alternate-tag-if-one-is-missing/215767 "2020-01-21T11:15:43Z")
Data is sourced from filebeat and packetbeat with add\_kubernetes\_metadata and passed to logstash, using the logstash helm chart. In logstash, I want the logs to be output to an elasticsearch index, named based on a kube… --- ## [How to query for changes](https://discuss.elastic.co/t/how-to-query-for-changes/215812)
**Author:** [@uniquename](https://discuss.elastic.co/u/uniquename)\ **Replies:** 2\ **Last updated:** [January 21, 2020, 11:07am UTC](https://discuss.elastic.co/t/how-to-query-for-changes/215812 "2020-01-21T11:07:37Z")
Hi, I am looking for a way to query for changes in my elasticsearch documents. I have devices which periodically check in with their on/off status so my document will look something like this: @timestamp - January 21st… --- ## [How to compare two fields of same name on different doc\_type](https://discuss.elastic.co/t/how-to-compare-two-fields-of-same-name-on-different-doc-type/215860)
**Author:** [@vimal](https://discuss.elastic.co/u/vimal)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 10:57am UTC](https://discuss.elastic.co/t/how-to-compare-two-fields-of-same-name-on-different-doc-type/215860 "2020-01-21T10:57:53Z")
Hi, I have two oracle tables containing millions of rows in each table. I have index all records into elasticsearch using logstash jdbc plugin. The Idea is to compare difference between two tables using Elasticsearch i… --- ## [Backup of Elasticsearch cluster running in Kubernetes (GKE)](https://discuss.elastic.co/t/backup-of-elasticsearch-cluster-running-in-kubernetes-gke/215858)
**Author:** [@jagan1333](https://discuss.elastic.co/u/jagan1333)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 10:50am UTC](https://discuss.elastic.co/t/backup-of-elasticsearch-cluster-running-in-kubernetes-gke/215858 "2020-01-21T10:50:38Z")
Hi How can I take backup of Elasticsearch cluster running in Kubernetes as a statefulsets (Google Kubernetes Engine). Thanks in advance! --- ## [No parameter named configdir when using secrets on puppet module](https://discuss.elastic.co/t/no-parameter-named-configdir-when-using-secrets-on-puppet-module/215847)
**Author:** [@lofic](https://discuss.elastic.co/u/lofic)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 10:42am UTC](https://discuss.elastic.co/t/no-parameter-named-configdir-when-using-secrets-on-puppet-module/215847 "2020-01-21T10:42:25Z")
Hello, this is working : elasticsearch::instance { 'es-01': config =\> { 'network.host' =\> '0.0.0.0' }, } But as soon as I add some secrets secrets =\> ... I get : no parameter named 'configdir' on Ela… --- ## [Elasticsearch ingest pipeline - on failure field removal problem](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-on-failure-field-removal-problem/215861)
**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\ **Replies:** 0\ **Last updated:** [January 21, 2020, 10:39am UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-on-failure-field-removal-problem/215861 "2020-01-21T10:39:29Z")
Hello. I am trying to test if the field is a valid IP address. If not, I want to remove it. I also stick to the ECS convention. My ingest pipeline: PUT \_ingest/pipeline/ingestion\_pipeline\_geo { "description": "geoe… --- ## [Best option for persistent volume of an on-premise ECK](https://discuss.elastic.co/t/best-option-for-persistent-volume-of-an-on-premise-eck/215611)
**Author:** [@Ali\_Reza\_Haghighat](https://discuss.elastic.co/u/Ali_Reza_Haghighat)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 10:37am UTC](https://discuss.elastic.co/t/best-option-for-persistent-volume-of-an-on-premise-eck/215611 "2020-01-21T10:37:35Z")
We have a cluster with multiple elastic instances deployed on a few servers. We decided to use ECK to manage our cluster. We are looking for the best option for persistent volume for an ECK cluster. We have tried NFS an… --- ## [Kibana virtualization question - nested documents won't aggregate](https://discuss.elastic.co/t/kibana-virtualization-question-nested-documents-wont-aggregate/215801)
**Author:** [@Chris\_Belfield](https://discuss.elastic.co/u/Chris_Belfield)\ **Replies:** 5\ **Last updated:** [January 21, 2020, 10:29am UTC](https://discuss.elastic.co/t/kibana-virtualization-question-nested-documents-wont-aggregate/215801 "2020-01-21T10:29:09Z")
Why can't I aggregate studies in this data? I'm ommitting other data which seems find to aggregate, but something in this dict / list I can not aggregate. I can search through the data with kquery, but I can't create ch… --- ## [Sample data (kibana\_sample\_data\_ecommerce) Question](https://discuss.elastic.co/t/sample-data-kibana-sample-data-ecommerce-question/215411)
**Author:** [@sung\_il\_Kim](https://discuss.elastic.co/u/sung_il_Kim)\ **Replies:** 2\ **Last updated:** [January 21, 2020, 10:22am UTC](https://discuss.elastic.co/t/sample-data-kibana-sample-data-ecommerce-question/215411 "2020-01-21T10:22:13Z")
Hello everyone. I'm a newbie in Korea. I've some questions about nested objects. Oh, I already know that Kibana doesn't support nested objects yet. But I'm curious about sample data - 'kibana\_sample\_data\_ecommerce' o… --- ## [No new data in elasticsearch after upgrade from 6.8 to 7.1](https://discuss.elastic.co/t/no-new-data-in-elasticsearch-after-upgrade-from-6-8-to-7-1/215731)
**Author:** [@northy](https://discuss.elastic.co/u/northy)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 10:12am UTC](https://discuss.elastic.co/t/no-new-data-in-elasticsearch-after-upgrade-from-6-8-to-7-1/215731 "2020-01-21T10:12:31Z")
Hi all, I have recently upgraded my elasticsearch cluster from version 6.8 to 7.1. Initially it seemed like the upgrade went well. Data continued to be indexed into elasticsearch and was available on kibana for the rema… --- ## [\] \[data\_node\_1\] not enough master nodes discovered during pinging (found \[\[\]\], but needed \[1\]), pinging again](https://discuss.elastic.co/t/data-node-1-not-enough-master-nodes-discovered-during-pinging-found-but-needed-1-pinging-again/215291)
**Author:** [@nidhi1](https://discuss.elastic.co/u/nidhi1)\ **Replies:** 18\ **Last updated:** [January 21, 2020, 10:09am UTC](https://discuss.elastic.co/t/data-node-1-not-enough-master-nodes-discovered-during-pinging-found-but-needed-1-pinging-again/215291 "2020-01-21T10:09:53Z")
Hi I have two two node cluster on red hat Enterprise Linux server . Both nodes are running on different different server. when i run elastic search for the server having data node ,getting such error --- ## [Document Index error:- index \[....\] blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\]](https://discuss.elastic.co/t/document-index-error-index-blocked-by-forbidden-12-index-read-only-allow-delete-api/215833)
**Author:** [@krushnakantB](https://discuss.elastic.co/u/krushnakantB)\ **Replies:** 4\ **Last updated:** [January 21, 2020, 9:58am UTC](https://discuss.elastic.co/t/document-index-error-index-blocked-by-forbidden-12-index-read-only-allow-delete-api/215833 "2020-01-21T09:58:17Z")
Hi All, As I mentioned in the subject we got an error like blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\]. For this I have checked that it might be low disk space. But in our case we have free space of … --- ## [lGot an error - MongoDB Input threw an exception, restarting {:exception=\>#\' is an invalid ObjectId.\>}](https://discuss.elastic.co/t/lgot-an-error-mongodb-input-threw-an-exception-restarting-exception-bson-bson-0x25ae0d1c-is-an-invalid-objectid/214830)
**Author:** [@shubhamblackstratus](https://discuss.elastic.co/u/shubhamblackstratus)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 9:53am UTC](https://discuss.elastic.co/t/lgot-an-error-mongodb-input-threw-an-exception-restarting-exception-bson-bson-0x25ae0d1c-is-an-invalid-objectid/214830 "2020-01-21T09:53:58Z")
Hello Guys, While working with " \[logstash-input-mongodb\]" plugin, I got the below error in logstash logs,. \[WARN \]\[logstash.inputs.mongodb \] MongoDB Input threw an exception, restarting {:exception=\>#\ **Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 2\ **Last updated:** [January 21, 2020, 9:51am UTC](https://discuss.elastic.co/t/xml-filter-exception-in-pipelineworker-the-pipeline-stopped-processing-new-events-please-check-your-filter-configuration-and-restart-logstash-how-to-resume-logstash-or-skip-failed-event/215845 "2020-01-21T09:51:39Z") Hi, I have a Logstash pipeline that parses events from multiple filebeat sources. Those filebeats are sending multiline XML files. After a month or so, it received an event that stops logstash due to xml parsing error (… --- ## [Operating System Interoperability](https://discuss.elastic.co/t/operating-system-interoperability/215850)
**Author:** [@BenBell](https://discuss.elastic.co/u/BenBell)\ **Replies:** 0\ **Last updated:** [January 21, 2020, 9:39am UTC](https://discuss.elastic.co/t/operating-system-interoperability/215850 "2020-01-21T09:39:25Z")
Hi, Does Elastic Search support multiple operating systems? I am in a position where I want to spin up an ES cluster - preferably on Linux. We do not yet have a corporate image for Linux (although one is being develop… --- ## [Logstash is unable to connect to ES for Monitoring due to bad certificate](https://discuss.elastic.co/t/logstash-is-unable-to-connect-to-es-for-monitoring-due-to-bad-certificate/215841)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 9:38am UTC](https://discuss.elastic.co/t/logstash-is-unable-to-connect-to-es-for-monitoring-due-to-bad-certificate/215841 "2020-01-21T09:38:52Z")
Hi guys, I cannot see my logstash node in Kibana because it cannot connect to elasticsearch due to bad certificate: \[2020-01-21T08:26:01,246\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retrieve license inf… --- ## [Kibana Query - match and not eixsts on same field in a single query](https://discuss.elastic.co/t/kibana-query-match-and-not-eixsts-on-same-field-in-a-single-query/215765)
**Author:** [@suren-raymond](https://discuss.elastic.co/u/suren-raymond)\ **Replies:** 8\ **Last updated:** [January 21, 2020, 9:28am UTC](https://discuss.elastic.co/t/kibana-query-match-and-not-eixsts-on-same-field-in-a-single-query/215765 "2020-01-21T09:28:12Z")
i've a index document field called "historicalData". Usually it has a value set \[true,false\]. But few documents of an index are not having the above said field "historicalData" at all. Wanted to query the documents with … --- ## [Filtering on nested fields](https://discuss.elastic.co/t/filtering-on-nested-fields/215758)
**Author:** [@rgj](https://discuss.elastic.co/u/rgj)\ **Replies:** 2\ **Last updated:** [January 21, 2020, 8:56am UTC](https://discuss.elastic.co/t/filtering-on-nested-fields/215758 "2020-01-21T08:56:19Z")
I have a nested field called 'metadata' in my index with various fields inside. For some reason filtering in Kibana does not work. I have tried various data types but even 'exists' doesn't work correctly. Things show … --- ## [Will EOL Logstash's "logstash-plugin update" keep getting updates even when they are not supported?](https://discuss.elastic.co/t/will-eol-logstashs-logstash-plugin-update-keep-getting-updates-even-when-they-are-not-supported/215842)
**Author:** [@denisnovac](https://discuss.elastic.co/u/denisnovac)\ **Replies:** 0\ **Last updated:** [January 21, 2020, 8:49am UTC](https://discuss.elastic.co/t/will-eol-logstashs-logstash-plugin-update-keep-getting-updates-even-when-they-are-not-supported/215842 "2020-01-21T08:49:01Z")
There is no plugin versions support matrix on the documentation, but it says that "The plugins listed below are maintained and supported by Elastic. Plugin versions that are installable on an Elastic supported Logstash r… --- ## [Conditional statement not working in filter](https://discuss.elastic.co/t/conditional-statement-not-working-in-filter/215817)
**Author:** [@Charles\_Yuliansen](https://discuss.elastic.co/u/Charles_Yuliansen)\ **Replies:** 3\ **Last updated:** [January 21, 2020, 8:33am UTC](https://discuss.elastic.co/t/conditional-statement-not-working-in-filter/215817 "2020-01-21T08:33:05Z")
Im trying to learn conditional filtering, the grok outside expression successfully parsed, but not with grok inside conditional expression. target \[2020-01-09 08:32:46\] VERBOSE\[18962\]\[C-0000ceae\] pbx.c: Executing \[s@ma… --- ## [Update using Elasticsearch restlevel client 7.5.1 is failing on Elasticsearch 6.8 AWS cluster](https://discuss.elastic.co/t/update-using-elasticsearch-restlevel-client-7-5-1-is-failing-on-elasticsearch-6-8-aws-cluster/214231)
**Author:** [@Aishwarya\_Gopikrishn](https://discuss.elastic.co/u/Aishwarya_Gopikrishn)\ **Replies:** 6\ **Last updated:** [January 21, 2020, 8:19am UTC](https://discuss.elastic.co/t/update-using-elasticsearch-restlevel-client-7-5-1-is-failing-on-elasticsearch-6-8-aws-cluster/214231 "2020-01-21T08:19:54Z")
Hi Team, We do own 2 AWS Elasticsearch clusters, out of which one got upgraded to 7.1 version while the latter is still on 6.8 version. We did scala code changes to accommodate this upgradation(as our existing jobs wer… --- ## [Please ask when APM Server supports PHP agent?](https://discuss.elastic.co/t/please-ask-when-apm-server-supports-php-agent/215674)
**Author:** [@mikecui](https://discuss.elastic.co/u/mikecui)\ **Replies:** 3\ **Last updated:** [January 21, 2020, 7:55am UTC](https://discuss.elastic.co/t/please-ask-when-apm-server-supports-php-agent/215674 "2020-01-21T07:55:48Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.5.… --- ## [Dashboard repository?](https://discuss.elastic.co/t/dashboard-repository/215625)
**Author:** [@spacecabbie](https://discuss.elastic.co/u/spacecabbie)\ **Replies:** 3\ **Last updated:** [January 21, 2020, 7:45am UTC](https://discuss.elastic.co/t/dashboard-repository/215625 "2020-01-21T07:45:55Z")
Are there any atm ? I saw a post from 2014 but that repo is dead. If not are there any services that make them ? --- ## [Discarding unnecessary data](https://discuss.elastic.co/t/discarding-unnecessary-data/215677)
**Author:** [@RichardH](https://discuss.elastic.co/u/RichardH)\ **Replies:** 2\ **Last updated:** [January 21, 2020, 7:34am UTC](https://discuss.elastic.co/t/discarding-unnecessary-data/215677 "2020-01-21T07:34:23Z")
Hello, I am just starting with logstash and writing filters, and trying to better understand how it works. We want to push all syslog messages to logstash but I want to ensure that events are only sent to elastic if the… --- ## [Using logstash on Elastic (GCP) hosted instance](https://discuss.elastic.co/t/using-logstash-on-elastic-gcp-hosted-instance/215698)
**Author:** [@prettysimpl](https://discuss.elastic.co/u/prettysimpl)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 7:14am UTC](https://discuss.elastic.co/t/using-logstash-on-elastic-gcp-hosted-instance/215698 "2020-01-21T07:14:09Z")
Hello All, We have a new elastic hosted instance (on gcp) running and would like to use logstash on there. I could not find any documentation on this and the only recent topic on the forum on something similar has not … --- ## [Security is enabled by default when debug](https://discuss.elastic.co/t/security-is-enabled-by-default-when-debug/215811)
**Author:** [@Yanchun](https://discuss.elastic.co/u/Yanchun)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 6:53am UTC](https://discuss.elastic.co/t/security-is-enabled-by-default-when-debug/215811 "2020-01-21T06:53:50Z")
Hi, I compiled es 6.8.5 from source code with the command ./gradlew run --debug-jvm , and I want to debug with IDEA, but the xpack.security.enabled is default true, it's so inconvenient for debug. I ever compiled 6.4, … --- ## [How to take indexes backup node wise in cluster](https://discuss.elastic.co/t/how-to-take-indexes-backup-node-wise-in-cluster/215742)
**Author:** [@vishnuvardhan](https://discuss.elastic.co/u/vishnuvardhan)\ **Replies:** 10\ **Last updated:** [January 21, 2020, 6:39am UTC](https://discuss.elastic.co/t/how-to-take-indexes-backup-node-wise-in-cluster/215742 "2020-01-21T06:39:36Z")
We need to take indexes backup node wise or there would be cluster . how to take the backup please help me . --- ## [Features in XPACK opensource 6.8](https://discuss.elastic.co/t/features-in-xpack-opensource-6-8/215787)
**Author:** [@nirav.gshah](https://discuss.elastic.co/u/nirav.gshah)\ **Replies:** 3\ **Last updated:** [January 21, 2020, 6:39am UTC](https://discuss.elastic.co/t/features-in-xpack-opensource-6-8/215787 "2020-01-21T06:39:33Z")
hi some can confirm which all features of XpACK are available in 6.8 ELK stack. --- ## [Wildcard in the field name in suggest pharse query](https://discuss.elastic.co/t/wildcard-in-the-field-name-in-suggest-pharse-query/215824)
**Author:** [@avinash\_kumawat](https://discuss.elastic.co/u/avinash_kumawat)\ **Replies:** 0\ **Last updated:** [January 21, 2020, 6:31am UTC](https://discuss.elastic.co/t/wildcard-in-the-field-name-in-suggest-pharse-query/215824 "2020-01-21T06:31:41Z")
Hello All, I am trying to implement did you mean functionality using elasticsearch, I wanted to search the text in all the fields using wildcard without knowing the field name. Is there any way to do that I know query s… --- ## [Filter issue](https://discuss.elastic.co/t/filter-issue/215707)
**Author:** [@prasannarajan](https://discuss.elastic.co/u/prasannarajan)\ **Replies:** 3\ **Last updated:** [January 21, 2020, 6:08am UTC](https://discuss.elastic.co/t/filter-issue/215707 "2020-01-21T06:08:56Z")
When i select my pie sector , it isnt getting filtered but when editing it gets filtered. When i put in the dashboard it doesnt get filtered... Any help pls. [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1672) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1674)