# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1695 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1696 --- ## [Why stdout output shows message =\> "?"](https://discuss.elastic.co/t/why-stdout-output-shows-message/214079)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 10\ **Last updated:** [January 8, 2020, 2:35pm UTC](https://discuss.elastic.co/t/why-stdout-output-shows-message/214079 "2020-01-08T14:35:04Z")
Hello all, i am very new to logstash. I am just testing some filters to extract content from txt files without any structure. Why is this happening? On Windows enviroment logstash config file input { file { p… --- ## [Logstash goes down || Solution](https://discuss.elastic.co/t/logstash-goes-down-solution/213887)
**Author:** [@rkcharlie](https://discuss.elastic.co/u/rkcharlie)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 1:44pm UTC](https://discuss.elastic.co/t/logstash-goes-down-solution/213887 "2020-01-08T13:44:28Z")
Hello Team, I am trying to push data from oracle to ES and I am able to do that as well. My problem when I am pushing those data and that time my ES goes down then I am not able to figure out that from where I need to p… --- ## [How much index size is allowed in free subscription?](https://discuss.elastic.co/t/how-much-index-size-is-allowed-in-free-subscription/214055)
**Author:** [@Rachit\_Gargava](https://discuss.elastic.co/u/Rachit_Gargava)\ **Replies:** 2\ **Last updated:** [January 8, 2020, 12:57pm UTC](https://discuss.elastic.co/t/how-much-index-size-is-allowed-in-free-subscription/214055 "2020-01-08T12:57:03Z")
Hi, I am new to ELK; I am using the free subscription to store, index and Visualize my data using Elastic Search, Logstash and Kibana. What is the maximum limit till that I can store the data in index for free tier sub… --- ## [Delete documents after sync](https://discuss.elastic.co/t/delete-documents-after-sync/214236)
**Author:** [@tushar\_chevulkar](https://discuss.elastic.co/u/tushar_chevulkar)\ **Replies:** 0\ **Last updated:** [January 8, 2020, 12:54pm UTC](https://discuss.elastic.co/t/delete-documents-after-sync/214236 "2020-01-08T12:54:07Z")
I have a logstash config where I am putting data from one to another input { elasticsearch { hosts =\> \[ "http://localhost:9200" \] index =\> "node\_2" docinfo =\> true } } output { elasticsearch { hos… --- ## [Making Dashboard read only](https://discuss.elastic.co/t/making-dashboard-read-only/213853)
**Author:** [@Praveen\_Yallala](https://discuss.elastic.co/u/Praveen_Yallala)\ **Replies:** 5\ **Last updated:** [January 8, 2020, 12:28pm UTC](https://discuss.elastic.co/t/making-dashboard-read-only/213853 "2020-01-08T12:28:34Z")
Hi, I have created a kibana Dashboard which our team will be using. As of now, everyone is able to view and edit the dashboards. Only I should be able to edit and rest of the team members should have read only access. … --- ## [Issue to connect AWS RDS mysql from Logstash](https://discuss.elastic.co/t/issue-to-connect-aws-rds-mysql-from-logstash/214233)
**Author:** [@vijoyem](https://discuss.elastic.co/u/vijoyem)\ **Replies:** 0\ **Last updated:** [January 8, 2020, 12:23pm UTC](https://discuss.elastic.co/t/issue-to-connect-aws-rds-mysql-from-logstash/214233 "2020-01-08T12:23:32Z")
Hello, I am setting up logstash conf file to fetch the logs from my AWS RDS MYSQL database. Please let me know what needs to be corrected. ELK is configured in the AWS ec2 single machine. All services are up and running… --- ## [Logstash parsing with combinedapachelog pattern for nginx](https://discuss.elastic.co/t/logstash-parsing-with-combinedapachelog-pattern-for-nginx/214232)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 0\ **Last updated:** [January 8, 2020, 12:23pm UTC](https://discuss.elastic.co/t/logstash-parsing-with-combinedapachelog-pattern-for-nginx/214232 "2020-01-08T12:23:12Z")
Hello everyone!! I ran into a problem with parsing my log messages with logstash. I have set ELK stack for geoip monitoring and my logstash config file looks like that: input { beats { port =\> 5044 } } filter… --- ## [Test the fault tolerant mechanism for ES cluster nodes](https://discuss.elastic.co/t/test-the-fault-tolerant-mechanism-for-es-cluster-nodes/214160)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 15\ **Last updated:** [January 8, 2020, 11:51am UTC](https://discuss.elastic.co/t/test-the-fault-tolerant-mechanism-for-es-cluster-nodes/214160 "2020-01-08T11:51:14Z")
Hello, I have configured 3 node ES cluster. All 3 nodes are master eligible. So if one goes down other should be eligible to elect itself as a master node and will form a 2 node cluster. How i can check this with my c… --- ## [Visualization is missing an index](https://discuss.elastic.co/t/visualization-is-missing-an-index/214105)
**Author:** [@Xuan\_Nam\_Dang](https://discuss.elastic.co/u/Xuan_Nam_Dang)\ **Replies:** 2\ **Last updated:** [January 8, 2020, 11:49am UTC](https://discuss.elastic.co/t/visualization-is-missing-an-index/214105 "2020-01-08T11:49:54Z")
I have removed an index replacing it with identical one with one field changed. I forgot that it's mapped to a visualization and the visualization is missing that index now. How do i change the reference settings in the … --- ## [Ingest attachment search with multi match query](https://discuss.elastic.co/t/ingest-attachment-search-with-multi-match-query/214208)
**Author:** [@ib3](https://discuss.elastic.co/u/ib3)\ **Replies:** 2\ **Last updated:** [January 8, 2020, 11:49am UTC](https://discuss.elastic.co/t/ingest-attachment-search-with-multi-match-query/214208 "2020-01-08T11:49:11Z")
Does it possible to use multi match query with attachment content? Content store as base64\_encode. When i use http://search-elastic.test:9200/elasticsearch\_attachments\_index/\_search?q=calford&pretty=true its working fin… --- ## [Incomplete reindexing](https://discuss.elastic.co/t/incomplete-reindexing/214207)
**Author:** [@reddihareesh](https://discuss.elastic.co/u/reddihareesh)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 11:45am UTC](https://discuss.elastic.co/t/incomplete-reindexing/214207 "2020-01-08T11:45:29Z")
I wanted to reindex an index called test\_dupes\_2year\_double to combine a date field and a time field to add new field datetime to a new index called datetime\_srldc. POST \_reindex { "source": { "index": "test\_dupes… --- ## [Create dynamic labels from a part of es request](https://discuss.elastic.co/t/create-dynamic-labels-from-a-part-of-es-request/212332)
**Author:** [@tofmonaute](https://discuss.elastic.co/u/tofmonaute)\ **Replies:** 4\ **Last updated:** [January 8, 2020, 11:38am UTC](https://discuss.elastic.co/t/create-dynamic-labels-from-a-part-of-es-request/212332 "2020-01-08T11:38:38Z")
Hi, I try to create a vizualisation with Timelion with dynamic labels ( extracted from request response ) For example: the following search in Discover tools :slight\_smile: message: "SQL ERROR" results in f… --- ## [Logstash jdbc string column value in sql. how to split individual field and value](https://discuss.elastic.co/t/logstash-jdbc-string-column-value-in-sql-how-to-split-individual-field-and-value/213890)
**Author:** [@saravana\_hariharan](https://discuss.elastic.co/u/saravana_hariharan)\ **Replies:** 4\ **Last updated:** [January 8, 2020, 10:52am UTC](https://discuss.elastic.co/t/logstash-jdbc-string-column-value-in-sql-how-to-split-individual-field-and-value/213890 "2020-01-08T10:52:45Z")
sql column value concatenated in {"ID":"P0001","Name":"sam","Createdby:124","Createdtime":"157312334321"} In the above line is my sample data in one clolumn value of sql table how to split this column to individual f… --- ## [How to determine "index.mapping.total\_fields.limit" in an Index in ES 6.3](https://discuss.elastic.co/t/how-to-determine-index-mapping-total-fields-limit-in-an-index-in-es-6-3/213978)
**Author:** [@Harshraj\_Shinde](https://discuss.elastic.co/u/Harshraj_Shinde)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 10:52am UTC](https://discuss.elastic.co/t/how-to-determine-index-mapping-total-fields-limit-in-an-index-in-es-6-3/213978 "2020-01-08T10:52:16Z")
Hello, PUT test1 { "mappings": { "\_doc": { "properties": { "field1":{ "type":"text" }, "field2":{ "type":"text" }, "field3":{ "type":"text" } } } }, "settings": { "analysis": { "normalizer": { "Expo… --- ## [Constant Score - Multiple matches](https://discuss.elastic.co/t/constant-score-multiple-matches/214085)
**Author:** [@Ben\_Gabb](https://discuss.elastic.co/u/Ben_Gabb)\ **Replies:** 2\ **Last updated:** [January 8, 2020, 10:32am UTC](https://discuss.elastic.co/t/constant-score-multiple-matches/214085 "2020-01-08T10:32:48Z")
I have a constant score which looks into a nested field: { "from": 0, "size": 30, "query": { "constant\_score": { "boost": 100, "filter": { "nested": { "query": { "term… --- ## [How to hide count in Data Table?](https://discuss.elastic.co/t/how-to-hide-count-in-data-table/213274)
**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\ **Replies:** 18\ **Last updated:** [January 8, 2020, 10:31am UTC](https://discuss.elastic.co/t/how-to-hide-count-in-data-table/213274 "2020-01-08T10:31:17Z")
I'm displaying a Data Table. I dont want to display default Count metric. How to hide it ? looking for an easy fix ? --- ## [How do I get k nearest neighbors from a numerical vector based index?](https://discuss.elastic.co/t/how-do-i-get-k-nearest-neighbors-from-a-numerical-vector-based-index/214110)
**Author:** [@hjiop\_oop](https://discuss.elastic.co/u/hjiop_oop)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 10:22am UTC](https://discuss.elastic.co/t/how-do-i-get-k-nearest-neighbors-from-a-numerical-vector-based-index/214110 "2020-01-08T10:22:45Z")
Say I indexed something like this: { {'l1':\[1,2,3,4\],'l2':\[5,6,7,7\]} {'l1':\[1,2,6,6\],'l2':\[4,3,2,7\]} ... .. {'l1':\[1,2,3,24\],'l2':\[5,6,37,1\]} } And I have a dictionary as {'l1':\[2,3,4,5\]} and I want to find k values … --- ## [Failed to start Elasticsearch on centos 7](https://discuss.elastic.co/t/failed-to-start-elasticsearch-on-centos-7/214158)
**Author:** [@steven.l](https://discuss.elastic.co/u/steven.l)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 10:19am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-on-centos-7/214158 "2020-01-08T10:19:09Z")
OS: Centos 7 My installation step of elasticsearch was following the command from the website (Install Elasticsearch with RPM | Elasticsearch Guide \[7.5\] | Elastic): \> wget https://artifacts.elastic.co/downloads/elast… --- ## [The msearch request must be terminated by a newline \[\\n\] error](https://discuss.elastic.co/t/the-msearch-request-must-be-terminated-by-a-newline-n-error/211846)
**Author:** [@aasoft](https://discuss.elastic.co/u/aasoft)\ **Replies:** 5\ **Last updated:** [January 8, 2020, 10:10am UTC](https://discuss.elastic.co/t/the-msearch-request-must-be-terminated-by-a-newline-n-error/211846 "2020-01-08T10:10:56Z")
I am trying to use the curl command and hit my index. I am using the following command curl -XPOST 'https://myurl/myindex/\_msearch?' -H 'Content-Type: application/x-ndjson' -d'{"preference":"ResultList01"} {"query": {"… --- ## [Embed highlighter](https://discuss.elastic.co/t/embed-highlighter/212566)
**Author:** [@fabio.vianello](https://discuss.elastic.co/u/fabio.vianello)\ **Replies:** 6\ **Last updated:** [January 8, 2020, 10:09am UTC](https://discuss.elastic.co/t/embed-highlighter/212566 "2020-01-08T10:09:53Z")
Hi everyone, I need help. I have to incorporate the highlighter is this my code on node.jd thanks app.get('/search', function (req, res) { let body = { size: 100, from: 0, query: { bool: { \_id: , must: \[ … --- ## [\[query\_shard\_exception\]Failed to parse query](https://discuss.elastic.co/t/query-shard-exception-failed-to-parse-query/212648)
**Author:** [@Addepalli\_Venkata\_Ma](https://discuss.elastic.co/u/Addepalli_Venkata_Ma)\ **Replies:** 3\ **Last updated:** [January 8, 2020, 10:06am UTC](https://discuss.elastic.co/t/query-shard-exception-failed-to-parse-query/212648 "2020-01-08T10:06:58Z")
I was trying to run a search query on the twitter data, i inserted in to elasticsearch. This is the error i am getting in kibana but not on from terminal where i have used curl version of the same query. From curl i am … --- ## [Unable to perform insert or delete action in elasticsearch](https://discuss.elastic.co/t/unable-to-perform-insert-or-delete-action-in-elasticsearch/214024)
**Author:** [@swati\_dupare](https://discuss.elastic.co/u/swati_dupare)\ **Replies:** 6\ **Last updated:** [January 8, 2020, 9:44am UTC](https://discuss.elastic.co/t/unable-to-perform-insert-or-delete-action-in-elasticsearch/214024 "2020-01-08T09:44:28Z")
Hi, I am getting below error when I am trying to insert or delete data from elasticsearch : index \[index\_name\] blocked by: \[FORBIDDEN/12/index read-only / allow delete (api) Thanks --- ## [Elasticsearch in K8s cannot restart because of recovery failure (multiple alias write indexes)](https://discuss.elastic.co/t/elasticsearch-in-k8s-cannot-restart-because-of-recovery-failure-multiple-alias-write-indexes/214100)
**Author:** [@MF57](https://discuss.elastic.co/u/MF57)\ **Replies:** 3\ **Last updated:** [January 8, 2020, 9:41am UTC](https://discuss.elastic.co/t/elasticsearch-in-k8s-cannot-restart-because-of-recovery-failure-multiple-alias-write-indexes/214100 "2020-01-08T09:41:26Z")
Hello, I have an elastic search cluster deployed in the k8s cluster: "version" : { "number" : "6.7.1", "build\_flavor" : "default", "build\_type" : "docker", "build\_hash" : "2f32220", "build\_date" : "2019-04-02T15:59:27.… --- ## [Read-Only On Replica](https://discuss.elastic.co/t/read-only-on-replica/214200)
**Author:** [@cigarl](https://discuss.elastic.co/u/cigarl)\ **Replies:** 0\ **Last updated:** [January 8, 2020, 9:38am UTC](https://discuss.elastic.co/t/read-only-on-replica/214200 "2020-01-08T09:38:35Z")
If the primary shard and the replica share the same data files, and make the copy read-only. What is the best way to use ？ I found that the engine was initialized based on the index level when the node started. Whether … --- ## [Nested filter in aggregation query](https://discuss.elastic.co/t/nested-filter-in-aggregation-query/214196)
**Author:** [@Ankur\_Agarwal2](https://discuss.elastic.co/u/Ankur_Agarwal2)\ **Replies:** 0\ **Last updated:** [January 8, 2020, 9:24am UTC](https://discuss.elastic.co/t/nested-filter-in-aggregation-query/214196 "2020-01-08T09:24:57Z")
Hi Team, I have running following aggregation query with nested filter GET /\_search { "aggs": { "NAME": { "nested": { "path": "crm.LeadStatusHistory" }, "aggs": { "agg\_filter": { "filter": { "bool": { "must"… --- ## [Top left logo change in Kibana 7.4](https://discuss.elastic.co/t/top-left-logo-change-in-kibana-7-4/214188)
**Author:** [@Purushoth\_Kumar](https://discuss.elastic.co/u/Purushoth_Kumar)\ **Replies:** 4\ **Last updated:** [January 8, 2020, 9:14am UTC](https://discuss.elastic.co/t/top-left-logo-change-in-kibana-7-4/214188 "2020-01-08T09:14:30Z")
Hi I'm trying to change the kibana logo at top left ... I have tried searching through all possible post in elastic discuss regarding logo change. But couldn't find any usefull procedure for 7.4 version. Can someone who… --- ## [Search using "OR" condition on keyword field that contains spaces](https://discuss.elastic.co/t/search-using-or-condition-on-keyword-field-that-contains-spaces/213976)
**Author:** [@dedicatedmanagers](https://discuss.elastic.co/u/dedicatedmanagers)\ **Replies:** 8\ **Last updated:** [January 8, 2020, 9:01am UTC](https://discuss.elastic.co/t/search-using-or-condition-on-keyword-field-that-contains-spaces/213976 "2020-01-08T09:01:03Z")
My data "keywords" contain spaces. So "X AAA" is one "keyword". And "B AAA" is another keyword. My data will only have one of these in the actual field. So the data field will never look like a combination of the tw… --- ## [Logstash throws config error, even though 'input' is listed as the first parameter on config file](https://discuss.elastic.co/t/logstash-throws-config-error-even-though-input-is-listed-as-the-first-parameter-on-config-file/214154)
**Author:** [@sg\_shreyas](https://discuss.elastic.co/u/sg_shreyas)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 8:59am UTC](https://discuss.elastic.co/t/logstash-throws-config-error-even-though-input-is-listed-as-the-first-parameter-on-config-file/214154 "2020-01-08T08:59:59Z")
I am getting config error while launching Logstash. I am using 7.5.1 version. Same config file worked earlier. I had to setup ELK stash on another VM since older VM was decommissioned, and I am facing this error here. I… --- ## [Limit on alias indexes](https://discuss.elastic.co/t/limit-on-alias-indexes/214007)
**Author:** [@apiras](https://discuss.elastic.co/u/apiras)\ **Replies:** 2\ **Last updated:** [January 8, 2020, 8:35am UTC](https://discuss.elastic.co/t/limit-on-alias-indexes/214007 "2020-01-08T08:35:57Z")
Hi all, I found the topic https://discuss.elastic.co/t/is-there-limit-for-alias-indexes/53537 on the same issue of 3 years ago. Is still fine? Any changes in last versions of ES? Thanks in advance --- ## [ES msearch responses 404 when using GET while it reponses 200 when using POST](https://discuss.elastic.co/t/es-msearch-responses-404-when-using-get-while-it-reponses-200-when-using-post/213902)
**Author:** [@Zeng\_Sharp](https://discuss.elastic.co/u/Zeng_Sharp)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 8:25am UTC](https://discuss.elastic.co/t/es-msearch-responses-404-when-using-get-while-it-reponses-200-when-using-post/213902 "2020-01-08T08:25:55Z")
Could you help explain why the behavior is different between GET and POST? And advise how to make it work when using GET? Thanks in advance. curl --location --request GET 'http://kibana.xxx.xxx.xx:5601/elasticsearch/\_ms… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1694) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1696)