# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1700

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1701

---

## [Aws S3 subfolder structure data pull](https://discuss.elastic.co/t/aws-s3-subfolder-structure-data-pull/213661)

<div class="topic-metadata">

**Author:** [@suraj\_kumar3](https://discuss.elastic.co/u/suraj_kumar3)\
**Replies:** 1\
**Last updated:** [January 6, 2020, 5:52am UTC](https://discuss.elastic.co/t/aws-s3-subfolder-structure-data-pull/213661 "2020-01-06T05:52:32Z")

</div>

Hi there, I want to pull data from aws bucket having multiple subfolders but wildcard entry is not working. please help me with this one. Regards, Suraj

---

## [Need help on solr to elastic converstion](https://discuss.elastic.co/t/need-help-on-solr-to-elastic-converstion/213322)

<div class="topic-metadata">

**Author:** [@santhosh\_kumar2](https://discuss.elastic.co/u/santhosh_kumar2)\
**Replies:** 2\
**Last updated:** [January 6, 2020, 5:52am UTC](https://discuss.elastic.co/t/need-help-on-solr-to-elastic-converstion/213322 "2020-01-06T05:52:05Z")

</div>

I want help on below solr function how to handle in elastic elastic. 1)group.field 2)group.sort=geodist() example: group.format=simple&sort=duration+asc&indent=on&group.limit=1&wt=json&rows=365&fl=airportname,id,Date…

---

## [Kibana Sql server](https://discuss.elastic.co/t/kibana-sql-server/213666)

<div class="topic-metadata">

**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Replies:** 3\
**Last updated:** [January 6, 2020, 5:15am UTC](https://discuss.elastic.co/t/kibana-sql-server/213666 "2020-01-06T05:15:42Z")

</div>

I have 2 records in my sql server and i have integrate the sql server with elk stack now when i run my logstash file it works fine. Can is this possible if i enter the third record in sql server the data will parse in ki…

---

## [Kibana7.5.1 yarn kbn bootstrap failed](https://discuss.elastic.co/t/kibana7-5-1-yarn-kbn-bootstrap-failed/213662)

<div class="topic-metadata">

**Author:** [@Todd](https://discuss.elastic.co/u/Todd)\
**Replies:** 2\
**Last updated:** [January 6, 2020, 4:31am UTC](https://discuss.elastic.co/t/kibana7-5-1-yarn-kbn-bootstrap-failed/213662 "2020-01-06T04:31:00Z")

</div>

hi, when I try to build kibana-7.5.1 source code, it failed my yarn and node version is: the error message is: Installs completed, linking package executables: \[kbn\_tp\_embeddable\_explorer\] plugin-helpers -\> ../../…

---

## [How to index only the newest version of the document](https://discuss.elastic.co/t/how-to-index-only-the-newest-version-of-the-document/213821)

<div class="topic-metadata">

**Author:** [@AdrianOverbury](https://discuss.elastic.co/u/AdrianOverbury)\
**Replies:** 1\
**Last updated:** [January 6, 2020, 4:28am UTC](https://discuss.elastic.co/t/how-to-index-only-the-newest-version-of-the-document/213821 "2020-01-06T04:28:52Z")

</div>

I'm trying to figure out if what I'm trying to do is even possible, or if I've gone totally off track. We have a series of timers we collect throughout a transaction lifecycle in a separate system, and we're trying to e…

---

## [How to update elasticsearch index?](https://discuss.elastic.co/t/how-to-update-elasticsearch-index/213547)

<div class="topic-metadata">

**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\
**Replies:** 7\
**Last updated:** [January 6, 2020, 4:01am UTC](https://discuss.elastic.co/t/how-to-update-elasticsearch-index/213547 "2020-01-06T04:01:50Z")

</div>

I have this output plugin in Logstash to create elastic search index. output { amazon\_es { hosts =\> \["https://xxxxxxxxxxxxxxxx.es.amazonaws.com/"\] region =\> "ap-southeast-1" index =\> "studentser…

---

## [Regular expression has redundant nested repeat operator](https://discuss.elastic.co/t/regular-expression-has-redundant-nested-repeat-operator/213540)

<div class="topic-metadata">

**Author:** [@adrianalfonso](https://discuss.elastic.co/u/adrianalfonso)\
**Replies:** 2\
**Last updated:** [January 6, 2020, 2:56am UTC](https://discuss.elastic.co/t/regular-expression-has-redundant-nested-repeat-operator/213540 "2020-01-06T02:56:54Z")

</div>

Can anyone describe what does this error mean? and how to resolve it. thank you. regular expression has redundant nested repeat operator \* /(?:(?:\\\[(?\<TIMESTAMP\_ISO8601:elasticsearch.server.timestamp\>(?:(?\>\\d\\d){1,2})-…

---

## [Updating dates in Painless](https://discuss.elastic.co/t/updating-dates-in-painless/213784)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 2\
**Last updated:** [January 5, 2020, 9:37pm UTC](https://discuss.elastic.co/t/updating-dates-in-painless/213784 "2020-01-05T21:37:31Z")

</div>

Hi there today I was a little bit confused with the documentation about the Painless language. My goal was to use the \_update\_by\_query API to correct the year of some date fields. I was happy to read that... Date field…

---

## [Received message from unsupported version: \[2.0.0\] minimal compatible version is: \[6.8.0\]](https://discuss.elastic.co/t/received-message-from-unsupported-version-2-0-0-minimal-compatible-version-is-6-8-0/211895)

<div class="topic-metadata">

**Author:** [@sg70](https://discuss.elastic.co/u/sg70)\
**Replies:** 8\
**Last updated:** [January 5, 2020, 7:55pm UTC](https://discuss.elastic.co/t/received-message-from-unsupported-version-2-0-0-minimal-compatible-version-is-6-8-0/211895 "2020-01-05T19:55:08Z")

</div>

Iam trying to integrate ElasticSearch with Microsoft SQL Server 2016 and I get this error : java.lang.IllegalStateException: Received message from unsupported version: \[2.0.0\] minimal compatible version is: \[6.8.0\] …

---

## [How to configure Logstash and Syslog ng to send and recieve logs?](https://discuss.elastic.co/t/how-to-configure-logstash-and-syslog-ng-to-send-and-recieve-logs/213773)

<div class="topic-metadata">

**Author:** [@Coder\_HK](https://discuss.elastic.co/u/Coder_HK)\
**Replies:** 5\
**Last updated:** [January 5, 2020, 7:20pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-and-syslog-ng-to-send-and-recieve-logs/213773 "2020-01-05T19:20:43Z")

</div>

I want to send syslog ng logs to logstash, I have installed security onion as a VM and want to send those logs to logstash which is on Ubuntu (another VM) kindly tell me how to configure both syslog-ng.log and logstash.c…

---

## [Bytes can be at most 32766 in length](https://discuss.elastic.co/t/bytes-can-be-at-most-32766-in-length/213650)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 8\
**Last updated:** [January 5, 2020, 6:31pm UTC](https://discuss.elastic.co/t/bytes-can-be-at-most-32766-in-length/213650 "2020-01-05T18:31:14Z")

</div>

Hello World! I'm trying to \_reindex one of my indices, yet I'm running into following issue: { "took": 9502, "timed\_out": false, "total": 114143, "updated": 0, "created": 2999, "deleted": 0, "batches": 3,…

---

## [Beats not parsed](https://discuss.elastic.co/t/beats-not-parsed/213815)

<div class="topic-metadata">

**Author:** [@omrip](https://discuss.elastic.co/u/omrip)\
**Replies:** 0\
**Last updated:** [January 5, 2020, 5:30pm UTC](https://discuss.elastic.co/t/beats-not-parsed/213815 "2020-01-05T17:30:37Z")

</div>

when using beats as input the data show constantly to the console and seems all scrambled, what can be the reason? input { beats { port =\> 5044 } } filter { if "beats\_input\_codec\_plain\_applied" in \[tags\] { mutate…

---

## [Parsing Pulling data from EventHub](https://discuss.elastic.co/t/parsing-pulling-data-from-eventhub/213814)

<div class="topic-metadata">

**Author:** [@omrip](https://discuss.elastic.co/u/omrip)\
**Replies:** 0\
**Last updated:** [January 5, 2020, 5:15pm UTC](https://discuss.elastic.co/t/parsing-pulling-data-from-eventhub/213814 "2020-01-05T17:15:09Z")

</div>

when pulling data from event hub the data is all mixed up is there a built parser for the events? can i have some assistance with parsing the events? 0981Z", "userDisplayName": "bb king", "userPrincipa…

---

## [Logstash pull data from Event Hub And output to several LogAnalytics](https://discuss.elastic.co/t/logstash-pull-data-from-event-hub-and-output-to-several-loganalytics/213813)

<div class="topic-metadata">

**Author:** [@omrip](https://discuss.elastic.co/u/omrip)\
**Replies:** 0\
**Last updated:** [January 5, 2020, 5:10pm UTC](https://discuss.elastic.co/t/logstash-pull-data-from-event-hub-and-output-to-several-loganalytics/213813 "2020-01-05T17:10:13Z")

</div>

Hi, i am trying to send data from 2 pipelines inputs of Eventhub and forward the data to 2Log Analytics instances. there are 2 configuration file to read data from each event hub. the output of the data is send to 2 L…

---

## [Java Rest Client time cost confusion](https://discuss.elastic.co/t/java-rest-client-time-cost-confusion/213806)

<div class="topic-metadata">

**Author:** [@xyzmonday](https://discuss.elastic.co/u/xyzmonday)\
**Replies:** 0\
**Last updated:** [January 5, 2020, 3:00pm UTC](https://discuss.elastic.co/t/java-rest-client-time-cost-confusion/213806 "2020-01-05T15:00:25Z")

</div>

Hi,I have been confused by time cost of Java Rest Client . I use Java Rest Client （6.6.0 vesion）to send requst to ES. Here is my basic config for REST Client: private static final int CONNECT\_TIMEOUT = 10000; private s…

---

## [Elasticsearch 5.6.2 (x-pack) secured cluster with custom plugin : action \[indices:data/read/search\] is unauthorized for user \[\_system\]](https://discuss.elastic.co/t/elasticsearch-5-6-2-x-pack-secured-cluster-with-custom-plugin-action-indices-data-read-search-is-unauthorized-for-user-system/213801)

<div class="topic-metadata">

**Author:** [@cohavisi](https://discuss.elastic.co/u/cohavisi)\
**Replies:** 0\
**Last updated:** [January 5, 2020, 1:45pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-2-x-pack-secured-cluster-with-custom-plugin-action-indices-data-read-search-is-unauthorized-for-user-system/213801 "2020-01-05T13:45:37Z")

</div>

Continuing the discussion from How to get a NodeClient inside a X-Pack plugin?: Hi All, I get the following exception when executing specific operation on my custom plugin. the elasticsearch cluster (5.6.2) is using x…

---

## [Map elasticsearch field to different field](https://discuss.elastic.co/t/map-elasticsearch-field-to-different-field/213799)

<div class="topic-metadata">

**Author:** [@jlevym](https://discuss.elastic.co/u/jlevym)\
**Replies:** 0\
**Last updated:** [January 5, 2020, 12:13pm UTC](https://discuss.elastic.co/t/map-elasticsearch-field-to-different-field/213799 "2020-01-05T12:13:55Z")

</div>

I am using two indexes.The first, called lessons1 has a userId field: userId : \< id number\> The second is called users1 and has a userName field: userName: \<user name\> and a userId field, userId: \<id number\> …

---

## [Pipline with convert processor](https://discuss.elastic.co/t/pipline-with-convert-processor/213718)

<div class="topic-metadata">

**Author:** [@Janga](https://discuss.elastic.co/u/Janga)\
**Replies:** 3\
**Last updated:** [January 5, 2020, 10:24am UTC](https://discuss.elastic.co/t/pipline-with-convert-processor/213718 "2020-01-05T10:24:35Z")

</div>

Hi, New to the stuck... I have a relatively nested JSON flowing into elastic. I'm using kibana for visualisation and reports. Some of the fields are number by originating system and nature, but as they converted and …

---

## [How to connect SQL data to elasticsearch without using logstash but something else like apache kafka,and spark](https://discuss.elastic.co/t/how-to-connect-sql-data-to-elasticsearch-without-using-logstash-but-something-else-like-apache-kafka-and-spark/213795)

<div class="topic-metadata">

**Author:** [@joseph\_muchoki](https://discuss.elastic.co/u/joseph_muchoki)\
**Replies:** 2\
**Last updated:** [January 5, 2020, 9:44am UTC](https://discuss.elastic.co/t/how-to-connect-sql-data-to-elasticsearch-without-using-logstash-but-something-else-like-apache-kafka-and-spark/213795 "2020-01-05T09:44:54Z")

</div>

i want to connect mysql (relational database) data into elasticsearch without using logstash but instead use message brokers like apache kafka and spark. What is the procedure? am checking most tutorials,they are broken.…

---

## [Delete documents loaded in the index in elastic via logstash](https://discuss.elastic.co/t/delete-documents-loaded-in-the-index-in-elastic-via-logstash/213624)

<div class="topic-metadata">

**Author:** [@Elvis\_Goncalves](https://discuss.elastic.co/u/Elvis_Goncalves)\
**Replies:** 1\
**Last updated:** [January 5, 2020, 4:39am UTC](https://discuss.elastic.co/t/delete-documents-loaded-in-the-index-in-elastic-via-logstash/213624 "2020-01-05T04:39:27Z")

</div>

I am using the following configuration file, but it does not delete the CUITS numbers that I get from my SQL database in the elasticsearch index. This is the code in the file input { jdbc { jdbc\_connection\_string =\> …

---

## [How to view the XML in Kibana](https://discuss.elastic.co/t/how-to-view-the-xml-in-kibana/213680)

<div class="topic-metadata">

**Author:** [@Chandan1989](https://discuss.elastic.co/u/Chandan1989)\
**Replies:** 1\
**Last updated:** [January 5, 2020, 4:30am UTC](https://discuss.elastic.co/t/how-to-view-the-xml-in-kibana/213680 "2020-01-05T04:30:05Z")

</div>

Hi, I want to see the the whole XML which I am trying to send from Cloud Foundry as input and the output is also converted into XML. Any suggestions to view the both XML. Regards, Chandan

---

## [Provided Grok patterns do not match data in the input](https://discuss.elastic.co/t/provided-grok-patterns-do-not-match-data-in-the-input/213601)

<div class="topic-metadata">

**Author:** [@Yasso](https://discuss.elastic.co/u/Yasso)\
**Replies:** 4\
**Last updated:** [January 5, 2020, 4:27am UTC](https://discuss.elastic.co/t/provided-grok-patterns-do-not-match-data-in-the-input/213601 "2020-01-05T04:27:38Z")

</div>

hello guys i want to parse that log : 55.3.244.1 GET /index.html 10024 0.043 \[2012-01-31 07:19:54 \] when i'm using this patters : %{IP:client} %{WORD:method} %{URIPATHPARAM:request} %{NUMBER:bytes} %{NUMBER:duration} …

---

## [Elasticsearch memory-bound tasks](https://discuss.elastic.co/t/elasticsearch-memory-bound-tasks/213781)

<div class="topic-metadata">

**Author:** [@aliabbasifard](https://discuss.elastic.co/u/aliabbasifard)\
**Replies:** 1\
**Last updated:** [January 4, 2020, 11:28pm UTC](https://discuss.elastic.co/t/elasticsearch-memory-bound-tasks/213781 "2020-01-04T23:28:37Z")

</div>

Hi. I am reading a book about elastic stack 6. This sentence was in the book and i don't understand it. "Elasticsearch primarily has memory-bound tasks which rely on the inverted index. The more data that it can f…

---

## [Logstash HTTP POST : Filter or Output (which would be better) also not wait for response?](https://discuss.elastic.co/t/logstash-http-post-filter-or-output-which-would-be-better-also-not-wait-for-response/213776)

<div class="topic-metadata">

**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\
**Replies:** 0\
**Last updated:** [January 4, 2020, 3:48pm UTC](https://discuss.elastic.co/t/logstash-http-post-filter-or-output-which-would-be-better-also-not-wait-for-response/213776 "2020-01-04T15:48:35Z")

</div>

hi, i'm working on an interesting project. I have a honeypot (tpot19 https://github.com/dtag-dev-sec/tpotce) that gathers threat intelligence info. Its back end is ELK. i need to send this info to another platform that …

---

## [Indices got deleted suddenly](https://discuss.elastic.co/t/indices-got-deleted-suddenly/213767)

<div class="topic-metadata">

**Author:** [@Revanth](https://discuss.elastic.co/u/Revanth)\
**Replies:** 8\
**Last updated:** [January 4, 2020, 9:47am UTC](https://discuss.elastic.co/t/indices-got-deleted-suddenly/213767 "2020-01-04T09:47:46Z")

</div>

We have an AWS Managed ES Cluster, and 4 indices in them. Our data was there in all the indices till 31st December, 2019. However, when we returned on 2nd Jan, 2020. We saw all the indices were deleted! This is really te…

---

## [Failed to execute on node \[E1irYLdQQtG6fr91UvCTBQ\] org.elasticsearch.transport.RemoteTransportException:](https://discuss.elastic.co/t/failed-to-execute-on-node-e1iryldqqtg6fr91uvctbq-org-elasticsearch-transport-remotetransportexception/213771)

<div class="topic-metadata">

**Author:** [@abhi\_12](https://discuss.elastic.co/u/abhi_12)\
**Replies:** 0\
**Last updated:** [January 4, 2020, 8:47am UTC](https://discuss.elastic.co/t/failed-to-execute-on-node-e1iryldqqtg6fr91uvctbq-org-elasticsearch-transport-remotetransportexception/213771 "2020-01-04T08:47:11Z")

</div>

Please help me out for fix this issue. Getting error on each node. elasticsearch 3 node cluster version: 7.3.2 \[2020-01-04T08:17:28,651\]\[DEBUG\]\[o.e.a.a.c.n.i.TransportNodesInfoAction\] \[hostname\] failed to execute on no…

---

## [Update data in elasticsearch through Kibana Interface(Table)](https://discuss.elastic.co/t/update-data-in-elasticsearch-through-kibana-interface-table/213681)

<div class="topic-metadata">

**Author:** [@SHUBHAM\_KADAM](https://discuss.elastic.co/u/SHUBHAM_KADAM)\
**Replies:** 2\
**Last updated:** [January 4, 2020, 7:25am UTC](https://discuss.elastic.co/t/update-data-in-elasticsearch-through-kibana-interface-table/213681 "2020-01-04T07:25:46Z")

</div>

Hi, I am trying to replicate a table (which is build with javascript) to Kibana table (build using discovery feature). The older table version has checkbox in it and on checking/selecting the checkbox the table was able…

---

## [Failure mechanism in logstash](https://discuss.elastic.co/t/failure-mechanism-in-logstash/213733)

<div class="topic-metadata">

**Author:** [@Pramod\_Thakur](https://discuss.elastic.co/u/Pramod_Thakur)\
**Replies:** 0\
**Last updated:** [January 3, 2020, 5:35pm UTC](https://discuss.elastic.co/t/failure-mechanism-in-logstash/213733 "2020-01-03T17:35:55Z")

</div>

Hi Folks, I am trying to push data from oracle to ES or rabbitmq and I am able to do that as well. My problem when I am pushing those data and that time my ES or rabbitmq goes down then I am not able to figure out that …

---

## [Index update](https://discuss.elastic.co/t/index-update/213559)

<div class="topic-metadata">

**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\
**Replies:** 1\
**Last updated:** [January 4, 2020, 1:44am UTC](https://discuss.elastic.co/t/index-update/213559 "2020-01-04T01:44:19Z")

</div>

I have this output plugin in Logstash to create elastic search index. output { amazon\_es { hosts =\> \["https://xxxxxxxxxxxxxxxx.es.amazonaws.com/"\] region =\> "ap-southeast-1" index =\> "studentser…

---

## [Issue in new fields](https://discuss.elastic.co/t/issue-in-new-fields/213693)

<div class="topic-metadata">

**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\
**Replies:** 1\
**Last updated:** [January 4, 2020, 1:42am UTC](https://discuss.elastic.co/t/issue-in-new-fields/213693 "2020-01-04T01:42:18Z")

</div>

I have added new fields in logstash.conf file by the mutate filter But these new fields are not visible in Kibana index pattern. I have already refreshed Kibana index pattern but still it is not visible. what to look at…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1699)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1701)
