# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1677 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1678 --- ## [Make Elasticsearch understand date/time field Nginx/apache logs](https://discuss.elastic.co/t/make-elasticsearch-understand-date-time-field-nginx-apache-logs/214968)
**Author:** [@spacecabbie](https://discuss.elastic.co/u/spacecabbie)\ **Replies:** 2\ **Last updated:** [January 19, 2020, 2:57pm UTC](https://discuss.elastic.co/t/make-elasticsearch-understand-date-time-field-nginx-apache-logs/214968 "2020-01-19T14:57:50Z")
I am sending my logs from apache and nginx to elasticsearch via rsyslog. Parsing to json: version=2 rule=:%remote\_addr:word% %ident:word% %auth:word% \[%@timestamp:char-to:\]%\] "%method:word% %request:word% HTTP/%httpver… --- ## [There is a reward for those who know how baseurl changed](https://discuss.elastic.co/t/there-is-a-reward-for-those-who-know-how-baseurl-changed/215616)
**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 4\ **Last updated:** [January 19, 2020, 2:54pm UTC](https://discuss.elastic.co/t/there-is-a-reward-for-those-who-know-how-baseurl-changed/215616 "2020-01-19T14:54:25Z")
app/kibana# instead app/test# thanks --- ## [Logstash timezone while creating index](https://discuss.elastic.co/t/logstash-timezone-while-creating-index/215623)
**Author:** [@bdn](https://discuss.elastic.co/u/bdn)\ **Replies:** 1\ **Last updated:** [January 19, 2020, 2:46pm UTC](https://discuss.elastic.co/t/logstash-timezone-while-creating-index/215623 "2020-01-19T14:46:08Z")
As I found logstash create an Index on UTC timezone. How can I create an index on the local timezone? I have set up an ES client that needs to query the index day-wise in local time. output { elasticsearch { hosts … --- ## [A performance issue about elasticsearch on k8s](https://discuss.elastic.co/t/a-performance-issue-about-elasticsearch-on-k8s/214692)
**Author:** [@ftyuuu](https://discuss.elastic.co/u/ftyuuu)\ **Replies:** 10\ **Last updated:** [January 19, 2020, 12:56pm UTC](https://discuss.elastic.co/t/a-performance-issue-about-elasticsearch-on-k8s/214692 "2020-01-19T12:56:38Z")
I'm experiencing an es on k8s performance issue that confuses me, and this is my test environment. First, I have a k8s cluster with 4 nodes, of which 1 master and 3 nodes: NAME STATUS ROLES AGE … --- ## [Logstash - Losing packets](https://discuss.elastic.co/t/logstash-losing-packets/215084)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 1\ **Last updated:** [January 19, 2020, 12:29pm UTC](https://discuss.elastic.co/t/logstash-losing-packets/215084 "2020-01-19T12:29:36Z")
HI all, I am ingesting syslogs through logstash and usually I have roughly 9k e/s. However, recently, I have seen it drop down to 5k e/s and fluctuate between 5k e/s - 9k e/s. Can someone help me diagnose why this is h… --- ## [How the python 2.6.8 to connect the Elasticsearch?](https://discuss.elastic.co/t/how-the-python-2-6-8-to-connect-the-elasticsearch/215561)
**Author:** [@sunnut](https://discuss.elastic.co/u/sunnut)\ **Replies:** 2\ **Last updated:** [January 19, 2020, 12:26pm UTC](https://discuss.elastic.co/t/how-the-python-2-6-8-to-connect-the-elasticsearch/215561 "2020-01-19T12:26:45Z")
The python version is 2.6.8 that ssl has not create\_default\_context. how can i skip the ssl or another method to tansport the ssl certificates besides above --- ## [Meeting a ConnectionError when python connect the elasticsearch?](https://discuss.elastic.co/t/meeting-a-connectionerror-when-python-connect-the-elasticsearch/215621)
**Author:** [@sunnut](https://discuss.elastic.co/u/sunnut)\ **Replies:** 0\ **Last updated:** [January 19, 2020, 12:06pm UTC](https://discuss.elastic.co/t/meeting-a-connectionerror-when-python-connect-the-elasticsearch/215621 "2020-01-19T12:06:14Z")
Code: from elasticsearch import Elasticsearch from ssl import create\_default\_context context = create\_default\_context(cafile="XXX.pem") es = Elasticsearch("https://IP:9200", ssl\_context=context, http\_auth=('username'… --- ## [Slow Ingestion](https://discuss.elastic.co/t/slow-ingestion/215601)
**Author:** [@Kaarthick](https://discuss.elastic.co/u/Kaarthick)\ **Replies:** 2\ **Last updated:** [January 19, 2020, 11:34am UTC](https://discuss.elastic.co/t/slow-ingestion/215601 "2020-01-19T11:34:14Z")
Hi Team, We added a data node in current elasticsearch cluster , currently the shards are getting relocated, i want know because of this whether the ingestion process gets slow thanks in advance --- ## [JavaApi Json representation differs from http Json representation](https://discuss.elastic.co/t/javaapi-json-representation-differs-from-http-json-representation/215618)
**Author:** [@MarcoAbi](https://discuss.elastic.co/u/MarcoAbi)\ **Replies:** 0\ **Last updated:** [January 19, 2020, 11:28am UTC](https://discuss.elastic.co/t/javaapi-json-representation-differs-from-http-json-representation/215618 "2020-01-19T11:28:57Z")
Hi all, I'm using a little BE proxy in nodeJs to redirect FE search request to ES the results I'm getting are like a direct call to http ES endpoint. The result looks like this: where aggregations have names like "2"… --- ## [java.lang.String cannot be cast to java.util.Map while starting kibana 7.5.1](https://discuss.elastic.co/t/java-lang-string-cannot-be-cast-to-java-util-map-while-starting-kibana-7-5-1/213543)
**Author:** [@Arunan\_Ramanathan](https://discuss.elastic.co/u/Arunan_Ramanathan)\ **Replies:** 6\ **Last updated:** [January 19, 2020, 11:26am UTC](https://discuss.elastic.co/t/java-lang-string-cannot-be-cast-to-java-util-map-while-starting-kibana-7-5-1/213543 "2020-01-19T11:26:09Z")
I enabled xpack security in Elasticsearch and it is working fine, I can able to do CRUD in elasticsearch using username/password. Now I downloaded kibana and enabled the following, Blockquote elasticsearch.hosts: \["ht… --- ## [Sending SMS, Push Notifications, emails to the real time users of the product from Kibana Dashboard](https://discuss.elastic.co/t/sending-sms-push-notifications-emails-to-the-real-time-users-of-the-product-from-kibana-dashboard/215597)
**Author:** [@Abhi12](https://discuss.elastic.co/u/Abhi12)\ **Replies:** 1\ **Last updated:** [January 19, 2020, 11:15am UTC](https://discuss.elastic.co/t/sending-sms-push-notifications-emails-to-the-real-time-users-of-the-product-from-kibana-dashboard/215597 "2020-01-19T11:15:51Z")
How can we send emails, SMS, push notifications to all the users(real time) directly from the kibana dashboard??Like all marketing companies send bulk mail to their users. I want to send mail and SMS to the all users of… --- ## [Cluster Optiomization](https://discuss.elastic.co/t/cluster-optiomization/215610)
**Author:** [@ragian](https://discuss.elastic.co/u/ragian)\ **Replies:** 2\ **Last updated:** [January 19, 2020, 10:21am UTC](https://discuss.elastic.co/t/cluster-optiomization/215610 "2020-01-19T10:21:26Z")
I need to optimize my elasticsearch cluster to have better performance on all kind of queries. The current configuration of the cluster is: Elastic 6.4.0 3 nodes (master, data, ingest) 4 core 16 GB ram (heap 8GB) 1 … --- ## [Wildcard uses](https://discuss.elastic.co/t/wildcard-uses/215613)
**Author:** [@georz](https://discuss.elastic.co/u/georz)\ **Replies:** 0\ **Last updated:** [January 19, 2020, 10:15am UTC](https://discuss.elastic.co/t/wildcard-uses/215613 "2020-01-19T10:15:39Z")
I am using ElasticSearch 5.6.3 I am using text fields, and wants to use wildcard query on that field for every words, i am typing also it should be case insensitive. Lets say i have "Sales & Management", I am typing a… --- ## [Query index in Elasticsearch cluster](https://discuss.elastic.co/t/query-index-in-elasticsearch-cluster/215603)
**Author:** [@bdn](https://discuss.elastic.co/u/bdn)\ **Replies:** 2\ **Last updated:** [January 19, 2020, 9:50am UTC](https://discuss.elastic.co/t/query-index-in-elasticsearch-cluster/215603 "2020-01-19T09:50:20Z")
I've configured an Elasticsearch Cluster of 3 nodes. Now I'm planning to write a bash script which will query for the index from the curl command without mentioning the ES node name as this cluster setup allows up to 1 … --- ## [How to show Pie chart?](https://discuss.elastic.co/t/how-to-show-pie-chart/215562)
**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\ **Replies:** 4\ **Last updated:** [January 19, 2020, 4:34am UTC](https://discuss.elastic.co/t/how-to-show-pie-chart/215562 "2020-01-19T04:34:22Z")
I have a search query which shows records as Slow-Speed High-Speed High-Speed High-Speed High-Speed Slow-Speed Slow-Speed I want to create a pie chart Slow-Speed vs High-Speed. How to do this? I tried this wa… --- ## [Exception in executing the jdbc query](https://discuss.elastic.co/t/exception-in-executing-the-jdbc-query/215564)
**Author:** [@jagan](https://discuss.elastic.co/u/jagan)\ **Replies:** 3\ **Last updated:** [January 19, 2020, 2:20am UTC](https://discuss.elastic.co/t/exception-in-executing-the-jdbc-query/215564 "2020-01-19T02:20:26Z")
Hi guru's, Please help me to solve the issue the as i am facing the exception in executing the jdbc query: The error is as follows: \[WARN \]\[logstash.inputs.jdbc \] Exception when executing JDBC query {:exception=\>#\ **Author:** [@Newtoelastic](https://discuss.elastic.co/u/Newtoelastic)\ **Replies:** 1\ **Last updated:** [January 19, 2020, 2:14am UTC](https://discuss.elastic.co/t/kibana-split-json-field-shows-as-one-long-string/215514 "2020-01-19T02:14:13Z") Hey there, as the name suggests I am new to elastic search and I am having kind of an odd problem. I have a list of links I am trying to have displayed (later on I need to use these links for alerting) and split in the f… --- ## [Installing Elasticsearch on Ubuntu Server on AWS](https://discuss.elastic.co/t/installing-elasticsearch-on-ubuntu-server-on-aws/215585)
**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\ **Replies:** 0\ **Last updated:** [January 19, 2020, 12:56am UTC](https://discuss.elastic.co/t/installing-elasticsearch-on-ubuntu-server-on-aws/215585 "2020-01-19T00:56:34Z")
I am trying to Install Elasticsearch on Ubuntu Server 16. When I run this command: sudo apt-get install elasticsearch, it fails, saying "could not find java; set JAVA\_HOME". An echo of that variable returns "/opt/jdk-1… --- ## [Logstash Installation on AWS Ubuntu Instance](https://discuss.elastic.co/t/logstash-installation-on-aws-ubuntu-instance/213761)
**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\ **Replies:** 4\ **Last updated:** [January 19, 2020, 12:29am UTC](https://discuss.elastic.co/t/logstash-installation-on-aws-ubuntu-instance/213761 "2020-01-19T00:29:50Z")
I am trying to get ElasticSearch setup on my Ubuntu server 18 on AWS. logstash seems to be installed: "logstash/stable,now 1:7.5.1-1 all \[installed\]" But when I check the config of logstash, it seems like logstash is n… --- ## [Config template "processors" section shadows custom processors in custom beats](https://discuss.elastic.co/t/config-template-processors-section-shadows-custom-processors-in-custom-beats/215578)
**Author:** [@chris-counteractive](https://discuss.elastic.co/u/chris-counteractive)\ **Replies:** 0\ **Last updated:** [January 18, 2020, 10:30pm UTC](https://discuss.elastic.co/t/config-template-processors-section-shadows-custom-processors-in-custom-beats/215578 "2020-01-18T22:30:53Z")
When you build a custom beat, the build process creates your config file by concatenating your custom \_meta/beat.yml and libbeat's \_meta/config.yml.tmpl. When it does this, any custom processors you've defined in \_meta… --- ## [Field\_value\_factor wrong depending on index](https://discuss.elastic.co/t/field-value-factor-wrong-depending-on-index/215567)
**Author:** [@nicolas-t](https://discuss.elastic.co/u/nicolas-t)\ **Replies:** 1\ **Last updated:** [January 18, 2020, 9:53pm UTC](https://discuss.elastic.co/t/field-value-factor-wrong-depending-on-index/215567 "2020-01-18T21:53:28Z")
Hello, I have two similar documents in two different indices. My score is correct in only one of them. This is my document : { "id": 1, "colors": { "colorA": { "hue": 50, "population": 0.5 }, … --- ## [Index writer memory Continue to rise](https://discuss.elastic.co/t/index-writer-memory-continue-to-rise/213514)
**Author:** [@ITzhangqiang](https://discuss.elastic.co/u/ITzhangqiang)\ **Replies:** 21\ **Last updated:** [January 15, 2020, 4:08pm UTC](https://discuss.elastic.co/t/index-writer-memory-continue-to-rise/213514 "2020-01-15T16:08:11Z")
hi，all： I have a question that has puzzled me for a long time。 One node in the cluster has too much index writer memory (other node is fline), and it keeps going up,and it lead to index throttling . And then I adju… --- ## [Elasticsearch-keystore reference in kibana.yml](https://discuss.elastic.co/t/elasticsearch-keystore-reference-in-kibana-yml/215572)
**Author:** [@kiyapedia](https://discuss.elastic.co/u/kiyapedia)\ **Replies:** 0\ **Last updated:** [January 18, 2020, 6:38pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore-reference-in-kibana-yml/215572 "2020-01-18T18:38:22Z")
Hello — I've got Elasticsearch and Kibana running with docker-compose with no issues. In my kibana.yml file, my password is exposed as such: server.name: kibana server.host: "0" elasticsearch.hosts: \[ "http://elasticse… --- ## [Error- Geo Distance Sorting](https://discuss.elastic.co/t/error-geo-distance-sorting/215329)
**Author:** [@Wa\_ed\_AL-Sawarieh](https://discuss.elastic.co/u/Wa_ed_AL-Sawarieh)\ **Replies:** 1\ **Last updated:** [January 18, 2020, 6:04pm UTC](https://discuss.elastic.co/t/error-geo-distance-sorting/215329 "2020-01-18T18:04:19Z")
Hello , let body = { "query": { "bool": { "should": \[ { "match": { } }, { "geo\_distance": { "distance": targetDistance+"km", "location": { "lat": location.lat, "lon": location.lon } } } \] } }, "sort"… --- ## [Logstash Output wrong - Error in visualization \[esaggs\] \> "field" is a required parameter](https://discuss.elastic.co/t/logstash-output-wrong-error-in-visualization-esaggs-field-is-a-required-parameter/215412)
**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\ **Replies:** 3\ **Last updated:** [January 18, 2020, 2:56pm UTC](https://discuss.elastic.co/t/logstash-output-wrong-error-in-visualization-esaggs-field-is-a-required-parameter/215412 "2020-01-18T14:56:48Z")
Hi, I recieve in Kibana the following error: "\[esaggs\] \> Saved "field" parameter is now invalid. Please select a new field." In logstash log i see also: \[2020-01-17T06:10:41,665\]\[WARN \]\[logstash.outputs.elasticsearc… --- ## [Kibana Keystore No Such Directory Error](https://discuss.elastic.co/t/kibana-keystore-no-such-directory-error/215549)
**Author:** [@kiyapedia](https://discuss.elastic.co/u/kiyapedia)\ **Replies:** 2\ **Last updated:** [January 18, 2020, 2:04pm UTC](https://discuss.elastic.co/t/kibana-keystore-no-such-directory-error/215549 "2020-01-18T14:04:21Z")
Hello — I've got Elasticsearch and Kibana running with docker-compose with no issues. In my kibana.yml file, my password is exposed as such: server.name: kibana server.host: "0" elasticsearch.hosts: \[ "http://elasticse… --- ## [Jvm.option file issue](https://discuss.elastic.co/t/jvm-option-file-issue/215553)
**Author:** [@Sergey\_Mucha](https://discuss.elastic.co/u/Sergey_Mucha)\ **Replies:** 2\ **Last updated:** [January 18, 2020, 1:28pm UTC](https://discuss.elastic.co/t/jvm-option-file-issue/215553 "2020-01-18T13:28:25Z")
Hi Elastic 7.5.1 was installed from tar.gz Config is : export ES\_HOME=/var/vcap/jobs/elasticsearch export ES\_PATH\_CONF=${ES\_HOME}/config I have following issue Exception in thread "main" java.nio.file.NoSuchFileExc… --- ## [Json data parsed from logstash http poller plugin cannot be queried in kibana maps](https://discuss.elastic.co/t/json-data-parsed-from-logstash-http-poller-plugin-cannot-be-queried-in-kibana-maps/215559)
**Author:** [@durgesh](https://discuss.elastic.co/u/durgesh)\ **Replies:** 0\ **Last updated:** [January 18, 2020, 12:35pm UTC](https://discuss.elastic.co/t/json-data-parsed-from-logstash-http-poller-plugin-cannot-be-queried-in-kibana-maps/215559 "2020-01-18T12:35:33Z")
input { http\_poller { urls =\> { test =\> { url =\> "http://myurl:80/test" headers =\> { Accept =\> "application/json" } } } schedule =\> { cron =\> "\* \* \* \* \* UTC"} codec =\> "json" } } filter { split { field =\> … --- ## [Calculating metric based on certain buckets in a histogram aggregation](https://discuss.elastic.co/t/calculating-metric-based-on-certain-buckets-in-a-histogram-aggregation/215554)
**Author:** [@leewadhams](https://discuss.elastic.co/u/leewadhams)\ **Replies:** 0\ **Last updated:** [January 18, 2020, 9:40am UTC](https://discuss.elastic.co/t/calculating-metric-based-on-certain-buckets-in-a-histogram-aggregation/215554 "2020-01-18T09:40:18Z")
A simplified version of our price index is as follows: PUT price-example { "mappings": { "properties": { "skuId": { "type": "keyword" }, "supplierId": { "type": "keyword" … --- ## [Display data as metric percentage of document count](https://discuss.elastic.co/t/display-data-as-metric-percentage-of-document-count/215508)
**Author:** [@mattiacareddu](https://discuss.elastic.co/u/mattiacareddu)\ **Replies:** 8\ **Last updated:** [January 18, 2020, 8:40am UTC](https://discuss.elastic.co/t/display-data-as-metric-percentage-of-document-count/215508 "2020-01-18T08:40:19Z")
Hi, I want to display the increment between the counts of document in the same index with, of course, different period. So for example I want to calculate the increment between the total count of the last month and the … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1676) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1678)