# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1674 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1675 --- ## [Index only collecting upto 215Kb data, then stops](https://discuss.elastic.co/t/index-only-collecting-upto-215kb-data-then-stops/215547)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 3\ **Last updated:** [January 21, 2020, 5:26am UTC](https://discuss.elastic.co/t/index-only-collecting-upto-215kb-data-then-stops/215547 "2020-01-21T05:26:20Z")
I have multiple indexes creating which gathers logs from different files. After collecting 215 Kb and 149kb worth of data, the index stops collecting more logs. Why is that? will it stop collecting when I have real time … --- ## [Getting throttled by \_msearch](https://discuss.elastic.co/t/getting-throttled-by-msearch/215752)
**Author:** [@doron](https://discuss.elastic.co/u/doron)\ **Replies:** 2\ **Last updated:** [January 21, 2020, 5:17am UTC](https://discuss.elastic.co/t/getting-throttled-by-msearch/215752 "2020-01-21T05:17:17Z")
My scenario is as follows: I want to run a very large number of queries and I want to fully utilize my cluster (40 data nodes X 16 CPUs). I am batching my queries (400 per batch) and sending them via \_msearch, however i… --- ## [How to run multiple esrally instances from same server](https://discuss.elastic.co/t/how-to-run-multiple-esrally-instances-from-same-server/215818)
**Author:** [@suvarna](https://discuss.elastic.co/u/suvarna)\ **Replies:** 0\ **Last updated:** [January 21, 2020, 4:43am UTC](https://discuss.elastic.co/t/how-to-run-multiple-esrally-instances-from-same-server/215818 "2020-01-21T04:43:09Z")
Hi currently we are not able to run two esrally instances from same system .. can you please let me know there its feasible or not ? If its feasible please let know about the configuration . I am using eventdata track… --- ## [How can I get access token of OIDC (Open ID Connect) provider?](https://discuss.elastic.co/t/how-can-i-get-access-token-of-oidc-open-id-connect-provider/215080)
**Author:** [@RaghibHuda](https://discuss.elastic.co/u/RaghibHuda)\ **Replies:** 3\ **Last updated:** [January 21, 2020, 4:43am UTC](https://discuss.elastic.co/t/how-can-i-get-access-token-of-oidc-open-id-connect-provider/215080 "2020-01-21T04:43:00Z")
Hi there, We are developing a custom plugin in Kibana. We integrate our authentication with OIDC. Now we want to make external API requests from our custom plugin. These requests need the access token of the same OIDC p… --- ## [How to logstash filter xml](https://discuss.elastic.co/t/how-to-logstash-filter-xml/215680)
**Author:** [@peacher](https://discuss.elastic.co/u/peacher)\ **Replies:** 8\ **Last updated:** [January 21, 2020, 2:44am UTC](https://discuss.elastic.co/t/how-to-logstash-filter-xml/215680 "2020-01-21T02:44:56Z")
Hi, i have logstash config input { file { path =\> \["/mnt/data/\*/\*.xml"\] start\_position =\> beginning #sincedb\_path =\> "/opt/logstash/sincedb-xml49" sincedb\_path =\> "/dev/null" … --- ## [Why does Painless Script doesn't work with message field?](https://discuss.elastic.co/t/why-does-painless-script-doesnt-work-with-message-field/215814)
**Author:** [@Daniel\_Gonzalez1](https://discuss.elastic.co/u/Daniel_Gonzalez1)\ **Replies:** 0\ **Last updated:** [January 21, 2020, 2:39am UTC](https://discuss.elastic.co/t/why-does-painless-script-doesnt-work-with-message-field/215814 "2020-01-21T02:39:05Z")
Hello Everyone! I want to do some basic stuff that I can do super easy with Splunk of extracting new fields from logs that are already indexed, and with the Painless Script in Kibana seems to be very difficult and almos… --- ## [Elasticsearch 6.8 does not support searches against \_all field still present in ES 5.6 created index](https://discuss.elastic.co/t/elasticsearch-6-8-does-not-support-searches-against-all-field-still-present-in-es-5-6-created-index/215806)
**Author:** [@blindwitness](https://discuss.elastic.co/u/blindwitness)\ **Replies:** 0\ **Last updated:** [January 20, 2020, 11:31pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-does-not-support-searches-against-all-field-still-present-in-es-5-6-created-index/215806 "2020-01-20T23:31:46Z")
Hello, In production, we use Elasticsearch to index our data for search related purposes. To interact with our current ES 5.6 cluster, we use the Java transport client. We are in the process of preparing for an upgrade … --- ## [Suggesters Sort for Weight?](https://discuss.elastic.co/t/suggesters-sort-for-weight/215798)
**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\ **Replies:** 0\ **Last updated:** [January 20, 2020, 9:31pm UTC](https://discuss.elastic.co/t/suggesters-sort-for-weight/215798 "2020-01-20T21:31:46Z")
Hi guys, can a query bring the result of my suggestion by weight? that is to say to weight I want to place the total of listings existing then suggesters would be ordered from the weight it contains? Ready PUT test { … --- ## [How to move all the json fields at root level to a sub json node?](https://discuss.elastic.co/t/how-to-move-all-the-json-fields-at-root-level-to-a-sub-json-node/215522)
**Author:** [@STAR\_DEVX](https://discuss.elastic.co/u/STAR_DEVX)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 9:55pm UTC](https://discuss.elastic.co/t/how-to-move-all-the-json-fields-at-root-level-to-a-sub-json-node/215522 "2020-01-20T21:55:32Z")
I want to move all the json node at the root level to a sub level jason node. What's the most efficient way to use filters to achieve that? root level { "a": 1, "b": "str", "c": {"key": "value"} } I want the resul… --- ## [How to index Dropbox documents?](https://discuss.elastic.co/t/how-to-index-dropbox-documents/215791)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 3\ **Last updated:** [January 20, 2020, 9:31pm UTC](https://discuss.elastic.co/t/how-to-index-dropbox-documents/215791 "2020-01-20T21:31:23Z")
Hi, I have been using FScrawler to index files from directories. But I have files (around 2GB) in Dropbox which I want to index and use them with elastic search. Is there anyway to use FScrawler for Dropbox? I saw the… --- ## [If I add a new field in to my Logstash.conf, my old index logs recognize it?](https://discuss.elastic.co/t/if-i-add-a-new-field-in-to-my-logstash-conf-my-old-index-logs-recognize-it/215788)
**Author:** [@Daniel\_Gonzalez1](https://discuss.elastic.co/u/Daniel_Gonzalez1)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 7:15pm UTC](https://discuss.elastic.co/t/if-i-add-a-new-field-in-to-my-logstash-conf-my-old-index-logs-recognize-it/215788 "2020-01-20T19:15:06Z")
Hello Everyone! Doing the endless comparasion and questions between Splunk and Elastic. With Splunk you can extract all the time new fields from the logs that are already indexed, this is very helpful because if you don… --- ## [Sysmon DNS Query missing Status codes](https://discuss.elastic.co/t/sysmon-dns-query-missing-status-codes/213396)
**Author:** [@Nicholas\_Penning](https://discuss.elastic.co/u/Nicholas_Penning)\ **Replies:** 3\ **Last updated:** [January 20, 2020, 6:44pm UTC](https://discuss.elastic.co/t/sysmon-dns-query-missing-status-codes/213396 "2020-01-20T18:44:05Z")
Hello, We are ingesting some SysMon (Version 10.41) DNS logs via WinLogbeat 7.4.0 and have found that some status codes are not either getting translated with the sysmon.js or are not in the list. I will focus on the ev… --- ## [ELK application running on my VM. Can I send a link to someone outside my network to access the localhost:5601 webpage?](https://discuss.elastic.co/t/elk-application-running-on-my-vm-can-i-send-a-link-to-someone-outside-my-network-to-access-the-localhost-5601-webpage/214681)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 19\ **Last updated:** [January 20, 2020, 6:24pm UTC](https://discuss.elastic.co/t/elk-application-running-on-my-vm-can-i-send-a-link-to-someone-outside-my-network-to-access-the-localhost-5601-webpage/214681 "2020-01-20T18:24:53Z")
I have ES, Logstasha nd Kibana running on my Virtual machine. I want to send a link accessible by someone outside my network to see the discover tab in Kibana I have running on localhost:5601. is it possible and how? In… --- ## [SysMon DNS Logs - dns.answers - Types](https://discuss.elastic.co/t/sysmon-dns-logs-dns-answers-types/213471)
**Author:** [@Nicholas\_Penning](https://discuss.elastic.co/u/Nicholas_Penning)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 6:17pm UTC](https://discuss.elastic.co/t/sysmon-dns-logs-dns-answers-types/213471 "2020-01-20T18:17:04Z")
Hello, We are currently leveraging SysMon DNS logs and would like to have the capability to search/aggregrate on the types from the dns.answers that WinLogBeat ships to Elastic. Currently, the dns.answers field contain… --- ## [Which nodes to install plugin](https://discuss.elastic.co/t/which-nodes-to-install-plugin/215783)
**Author:** [@jdcohen220](https://discuss.elastic.co/u/jdcohen220)\ **Replies:** 0\ **Last updated:** [January 20, 2020, 5:42pm UTC](https://discuss.elastic.co/t/which-nodes-to-install-plugin/215783 "2020-01-20T17:42:42Z")
Do plugins need to be installed on all nodes, or only data nodes? --- ## [Query\_shard\_exception failed to execute query on datetime field](https://discuss.elastic.co/t/query-shard-exception-failed-to-execute-query-on-datetime-field/215355)
**Author:** [@Giovanni\_Gasola](https://discuss.elastic.co/u/Giovanni_Gasola)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 5:04pm UTC](https://discuss.elastic.co/t/query-shard-exception-failed-to-execute-query-on-datetime-field/215355 "2020-01-20T17:04:38Z")
Hi guys, I have this node: { "\_index" : "impasti", "\_type" : "impasti", "\_id" : "2019-01-02T15:25:20", "\_score" : 1.9806902, "\_source" : { "sensor" : "Temperature", "mac\_address" : "", "time" : "2019-01-02T14:25:… --- ## [Kibana login can't access to spaces](https://discuss.elastic.co/t/kibana-login-cant-access-to-spaces/215496)
**Author:** [@talsantos](https://discuss.elastic.co/u/talsantos)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 4:57pm UTC](https://discuss.elastic.co/t/kibana-login-cant-access-to-spaces/215496 "2020-01-20T16:57:54Z")
Hi all, After upgrade kibana to 7.5, when I login with a specific user that access to only one space, says that i don't have any space configured to user: This is the configuration: --- ## [Need optimization suggestions](https://discuss.elastic.co/t/need-optimization-suggestions/215681)
**Author:** [@Abhishek\_Tiwari](https://discuss.elastic.co/u/Abhishek_Tiwari)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 4:57pm UTC](https://discuss.elastic.co/t/need-optimization-suggestions/215681 "2020-01-20T16:57:21Z")
Hi, My cluster shows us randome behaviour and load varies randomly with normal traffic Please suggest how should i debug it . Regards, Abhishek Tiwari --- ## [Update mappings takes 30 hours for 9M documents](https://discuss.elastic.co/t/update-mappings-takes-30-hours-for-9m-documents/215694)
**Author:** [@orenco](https://discuss.elastic.co/u/orenco)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 4:50pm UTC](https://discuss.elastic.co/t/update-mappings-takes-30-hours-for-9m-documents/215694 "2020-01-20T16:50:31Z")
I'm using Elastic 2.4 . I'm trying to update mappings, but it takes 30 hours for Elastic with 9M documents. I'm running on a machine with 360 GB RAM, and Elastic is running with 30 GB. Is there a quick option to run … --- ## [Index per organization or one index for all organizations to scale](https://discuss.elastic.co/t/index-per-organization-or-one-index-for-all-organizations-to-scale/215302)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 4:43pm UTC](https://discuss.elastic.co/t/index-per-organization-or-one-index-for-all-organizations-to-scale/215302 "2020-01-20T16:43:11Z")
I have one multitenant application that is storing lof of data like events in elasticsearch, each organization will search events only from their organization. My question is about query/search perfomance and speed to s… --- ## [Aggregate/visualize based on substring or regex query](https://discuss.elastic.co/t/aggregate-visualize-based-on-substring-or-regex-query/215524)
**Author:** [@sdberts](https://discuss.elastic.co/u/sdberts)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 4:41pm UTC](https://discuss.elastic.co/t/aggregate-visualize-based-on-substring-or-regex-query/215524 "2020-01-20T16:41:55Z")
Hey all - I have a use case where I need to query for a substring or regex pattern from a field, then visualize it in Kibana. I have a field called "description" in an index, in which various data is stored. The data … --- ## [statusCode:429 - High fielddata memory usage](https://discuss.elastic.co/t/statuscode-429-high-fielddata-memory-usage/215774)
**Author:** [@Djaswan](https://discuss.elastic.co/u/Djaswan)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 4:35pm UTC](https://discuss.elastic.co/t/statuscode-429-high-fielddata-memory-usage/215774 "2020-01-20T16:35:59Z")
Hi, We experienced some strange behavior from Kibana, while opening Kibana we got the following error: Error: {"statusCode":429,"error":"Too Many Requests","message":"\[circuit\_breaking\_exception\] \[parent\] Data… --- ## [Field issue in visualization](https://discuss.elastic.co/t/field-issue-in-visualization/215595)
**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 4:31pm UTC](https://discuss.elastic.co/t/field-issue-in-visualization/215595 "2020-01-20T16:31:46Z")
Why I don't find field in visualization? I see field.keyword only. What to do to see the field in visualization? --- ## [\[search engine\] Indexing multimedia files with elk](https://discuss.elastic.co/t/search-engine-indexing-multimedia-files-with-elk/215779)
**Author:** [@Jassem\_Torkhani](https://discuss.elastic.co/u/Jassem_Torkhani)\ **Replies:** 0\ **Last updated:** [January 20, 2020, 4:19pm UTC](https://discuss.elastic.co/t/search-engine-indexing-multimedia-files-with-elk/215779 "2020-01-20T16:19:40Z")
Hello everyone, Am working on a search engine project and am new experiencing with the ELK stack , so after installing and configuring it , I am now called to pass csv files which came originally from parsed output v… --- ## [Analyzer in ingest node](https://discuss.elastic.co/t/analyzer-in-ingest-node/214619)
**Author:** [@rvanegmond](https://discuss.elastic.co/u/rvanegmond)\ **Replies:** 3\ **Last updated:** [January 20, 2020, 4:10pm UTC](https://discuss.elastic.co/t/analyzer-in-ingest-node/214619 "2020-01-20T16:10:46Z")
I'm looking for a way to use the (for example path\_hierarchy) tokenizer(s) in a ingest pipeline. Is there anyway of doing this? --- ## [Date formatting for import](https://discuss.elastic.co/t/date-formatting-for-import/215063)
**Author:** [@dedicatedmanagers](https://discuss.elastic.co/u/dedicatedmanagers)\ **Replies:** 3\ **Last updated:** [January 20, 2020, 4:02pm UTC](https://discuss.elastic.co/t/date-formatting-for-import/215063 "2020-01-20T16:02:55Z")
I have a date field that is in the following format: 01-JAN-20 When I map the field to dd-MMM-yy it won't accept the date above but it will accept the following: 01-Jan-20 Is there a way to get Elasticsearch to accep… --- ## [Dynamic JSON parsing](https://discuss.elastic.co/t/dynamic-json-parsing/215644)
**Author:** [@richard\_N](https://discuss.elastic.co/u/richard_N)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 3:38pm UTC](https://discuss.elastic.co/t/dynamic-json-parsing/215644 "2020-01-20T15:38:34Z")
I'm trying to change a document from this. Is this possible? { "zenoss01.hostname": { "issued\_to": null, "cert\_sans": "", "valid\_till": "2021-01-17", "valid\_from": "2016-01-18", "issuer\_ou": null, "days\_left": 36… --- ## [Do sharding & flush hot threads indicate slow indexing?](https://discuss.elastic.co/t/do-sharding-flush-hot-threads-indicate-slow-indexing/214663)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 3\ **Last updated:** [January 20, 2020, 3:37pm UTC](https://discuss.elastic.co/t/do-sharding-flush-hot-threads-indicate-slow-indexing/214663 "2020-01-20T15:37:42Z")
Hello everyone, I notice in my hot threads that it's spending a lot of time in write related sections of code. Also, I'm experiencing slower indexing rate than usual (45% decrease) Here's the output: https://gist.githu… --- ## [Can Output file-plugin point to /dev/null?](https://discuss.elastic.co/t/can-output-file-plugin-point-to-dev-null/215645)
**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 3:23pm UTC](https://discuss.elastic.co/t/can-output-file-plugin-point-to-dev-null/215645 "2020-01-20T15:23:15Z")
Hi Forum. I'm just discovering how the new ELK+x-pack pieces work together, and, since I've realiced that I've got to create a parallel monitoring cluster to fully learn the current ELK potential, I'm thinking in advanc… --- ## [Pagination 10000 document total limit](https://discuss.elastic.co/t/pagination-10000-document-total-limit/214897)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 4\ **Last updated:** [January 20, 2020, 3:16pm UTC](https://discuss.elastic.co/t/pagination-10000-document-total-limit/214897 "2020-01-20T15:16:20Z")
I am using pagination from my .net app with nest client to just get 50 docs on each page of the grid and that works fine but the response to the search response.HitsMetadata.Total.Value is always 10000 event there are mo… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1673) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1675)