# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1701 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1702 --- ## [error\_type=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=\>"Elasticsearch Unreachable](https://discuss.elastic.co/t/error-type-logstash-hostunreachableerror-error-elasticsearch-unreachable/213702)
**Author:** [@Punithraya](https://discuss.elastic.co/u/Punithraya)\ **Replies:** 1\ **Last updated:** [January 4, 2020, 1:37am UTC](https://discuss.elastic.co/t/error-type-logstash-hostunreachableerror-error-elasticsearch-unreachable/213702 "2020-01-04T01:37:55Z")
Hello Team, We are getting error in logstash file as below, Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"http://xx.xx.xx.xx:9200/", :error\_type=\>LogStash::Outputs::ElasticSearch::Htt… --- ## [Query search based on condition (Elasticsearch v6.84) - please advice](https://discuss.elastic.co/t/query-search-based-on-condition-elasticsearch-v6-84-please-advice/213611)
**Author:** [@Chetan\_Ramaiah](https://discuss.elastic.co/u/Chetan_Ramaiah)\ **Replies:** 3\ **Last updated:** [January 4, 2020, 1:33am UTC](https://discuss.elastic.co/t/query-search-based-on-condition-elasticsearch-v6-84-please-advice/213611 "2020-01-04T01:33:30Z")
Hi, Searching based on multiple fields such as name, country, company, 30days\_flag, 60days\_flag, 90days\_flag. I am trying to fetch all companies which took part in a survey from the last 30, 60 and 90 days from the spec… --- ## [Match\_all & update\_by\_query & script error!](https://discuss.elastic.co/t/match-all-update-by-query-script-error/213724)
**Author:** [@laoyang360](https://discuss.elastic.co/u/laoyang360)\ **Replies:** 2\ **Last updated:** [January 4, 2020, 12:45am UTC](https://discuss.elastic.co/t/match-all-update-by-query-script-error/213724 "2020-01-04T00:45:34Z")
\# running ok POST products/\_update\_by\_query { "script": { "source": "ctx.\_source.in\_stock++", "lang": "painless" }, "query": { "term": { "name": "LED TV" … --- ## [Get Data table csv file through API](https://discuss.elastic.co/t/get-data-table-csv-file-through-api/213746)
**Author:** [@Thedsk8](https://discuss.elastic.co/u/Thedsk8)\ **Replies:** 1\ **Last updated:** [January 4, 2020, 12:05am UTC](https://discuss.elastic.co/t/get-data-table-csv-file-through-api/213746 "2020-01-04T00:05:42Z")
Hi, I want to schedule downloading of csv file through data table visualization. Is there any way I can do this through API. --- ## [How to ACTUALLY install plugins locally?](https://discuss.elastic.co/t/how-to-actually-install-plugins-locally/213759)
**Author:** [@Philip\_Brown](https://discuss.elastic.co/u/Philip_Brown)\ **Replies:** 0\ **Last updated:** [January 3, 2020, 11:59pm UTC](https://discuss.elastic.co/t/how-to-actually-install-plugins-locally/213759 "2020-01-03T23:59:25Z")
I've done a bunch of googling on this... spent many HOURS trying to get this to work.. with no luck. I need to install a plugin on a no-internet machine. specifically, logstash-output-zabbix. the docs claim I can just… --- ## [Forbidden 403 while creating time field](https://discuss.elastic.co/t/forbidden-403-while-creating-time-field/213616)
**Author:** [@Muthu\_Raam](https://discuss.elastic.co/u/Muthu_Raam)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 11:53pm UTC](https://discuss.elastic.co/t/forbidden-403-while-creating-time-field/213616 "2020-01-03T23:53:21Z")
I am not getting any error, then i went into chrome console page and found below error. vendors.bundle.dll.js:417 POST http://localhost:5601/api/telemetry/report 403 (Forbidden) Pls help me :frowning: --- ## [Getting warning](https://discuss.elastic.co/t/getting-warning/213676)
**Author:** [@jsreddy79](https://discuss.elastic.co/u/jsreddy79)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 11:38pm UTC](https://discuss.elastic.co/t/getting-warning/213676 "2020-01-03T23:38:52Z")
jsreddy@JSs-MacBook-Air kibana % bin/kibana log \[07:50:51.657\] \[info\]\[plugins-system\] Setting up \[15\] plugins: \[security,code,licensing,timelion,features,spaces,translations,newsfeed,inspector,uiActions,embeddable,adv… --- ## [How to use visualization directive in kibana 7.5.1](https://discuss.elastic.co/t/how-to-use-visualization-directive-in-kibana-7-5-1/213694)
**Author:** [@Aravinda\_Kolla](https://discuss.elastic.co/u/Aravinda_Kolla)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 11:33pm UTC](https://discuss.elastic.co/t/how-to-use-visualization-directive-in-kibana-7-5-1/213694 "2020-01-03T23:33:11Z")
Hi. I am using Kibana 7.5.1. I followed the steps on https://www.elastic.co/blog/developing-new-kibana-visualizations to create a tag cloud visualization with custom data in a plugin. But this visualization is not rende… --- ## [Filebeat/Heartbeat Indexes Not Available in Kibana Discover](https://discuss.elastic.co/t/filebeat-heartbeat-indexes-not-available-in-kibana-discover/213520)
**Author:** [@Drexilla](https://discuss.elastic.co/u/Drexilla)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 10:45pm UTC](https://discuss.elastic.co/t/filebeat-heartbeat-indexes-not-available-in-kibana-discover/213520 "2020-01-03T22:45:20Z")
Hi all, Fairly new to Elasticsearch and I'm working on discovering all it's features as I go along. I've finally got Metricbeat, Filebeat and Heartbeat data being shipped to my cloud instance of elastic search (in that… --- ## [Grok sssd messages, like "\[sssd\[krb5\_child\[7502\]\]\]"](https://discuss.elastic.co/t/grok-sssd-messages-like-sssd-krb5-child-7502/213751)
**Author:** [@Willl](https://discuss.elastic.co/u/Willl)\ **Replies:** 0\ **Last updated:** [January 3, 2020, 10:11pm UTC](https://discuss.elastic.co/t/grok-sssd-messages-like-sssd-krb5-child-7502/213751 "2020-01-03T22:11:58Z")
I'm testing a Grok pattern for sssd messages like this one: 2020-01-03T16:28:24.968540-05:00 ny2dev10 \[sssd\[krb5\_child\[7312\]\]\]: Preauthentication failed I ran Grok Debugger with the following pattern and it looks fin… --- ## [Nested repeating group](https://discuss.elastic.co/t/nested-repeating-group/213638)
**Author:** [@nad](https://discuss.elastic.co/u/nad)\ **Replies:** 2\ **Last updated:** [January 3, 2020, 8:48pm UTC](https://discuss.elastic.co/t/nested-repeating-group/213638 "2020-01-03T20:48:12Z")
Hi, I'm starting using filebeat-\>logstash-\>ES to ship logs data. Here is bellow a sample of the application logs: 2020-01-01 01:00:01.590556482 : TOTO \[AAA\] GroupX1 RED : 2225714 BLUE : 9119409 GREEN : 231229… --- ## [Query not returning document - mapping issue?](https://discuss.elastic.co/t/query-not-returning-document-mapping-issue/213696)
**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\ **Replies:** 3\ **Last updated:** [January 3, 2020, 7:49pm UTC](https://discuss.elastic.co/t/query-not-returning-document-mapping-issue/213696 "2020-01-03T19:49:06Z")
I'm having problems when querying for a document and my search is not working. It's probably something simple such as an issue with my mapping. The queries below were generated by Kibana but I've simplified below to tr… --- ## [Elasticsearch query for user data overrides](https://discuss.elastic.co/t/elasticsearch-query-for-user-data-overrides/213727)
**Author:** [@Eric\_Bowden](https://discuss.elastic.co/u/Eric_Bowden)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 7:43pm UTC](https://discuss.elastic.co/t/elasticsearch-query-for-user-data-overrides/213727 "2020-01-03T19:43:09Z")
I need to design a query which can support user specific document edits. The document below describes one way to store this data. The document below includes a root document Description property. The root document Des… --- ## [Getting grouped result collectly](https://discuss.elastic.co/t/getting-grouped-result-collectly/213722)
**Author:** [@yuri9163](https://discuss.elastic.co/u/yuri9163)\ **Replies:** 2\ **Last updated:** [January 3, 2020, 7:42pm UTC](https://discuss.elastic.co/t/getting-grouped-result-collectly/213722 "2020-01-03T19:42:33Z")
I have cardinality result 122, but group\_by 0 which supposed to group by same 'global\_fdid' returns only 9 result. I'm expecting 122 result. How can I get entire result? "visit\_count" : { "cardinality" : { … --- ## [Basic Configuration Questions](https://discuss.elastic.co/t/basic-configuration-questions/213731)
**Author:** [@JeezusJuice](https://discuss.elastic.co/u/JeezusJuice)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 6:50pm UTC](https://discuss.elastic.co/t/basic-configuration-questions/213731 "2020-01-03T18:50:42Z")
Hello, This is more broad than Elasticsearch, but I don't see a category for questions about the whole stack. I need to setup a central logging cluster in a relatively small environment. We have about 500 servers that … --- ## [Filebeat/Elastic/ECS source field conflict](https://discuss.elastic.co/t/filebeat-elastic-ecs-source-field-conflict/213634)
**Author:** [@mistrhanky](https://discuss.elastic.co/u/mistrhanky)\ **Replies:** 6\ **Last updated:** [January 3, 2020, 6:16pm UTC](https://discuss.elastic.co/t/filebeat-elastic-ecs-source-field-conflict/213634 "2020-01-03T18:16:19Z")
I am having an issue that seems it may be configurable, but I am not sure where to look next. I have filebeat setup up and most of my traffic is standard syslog stuff. I have one feed that is using a non-typical path tho… --- ## [Historical values in the same visualization as new values for comparison](https://discuss.elastic.co/t/historical-values-in-the-same-visualization-as-new-values-for-comparison/212336)
**Author:** [@Norway](https://discuss.elastic.co/u/Norway)\ **Replies:** 5\ **Last updated:** [January 3, 2020, 5:54pm UTC](https://discuss.elastic.co/t/historical-values-in-the-same-visualization-as-new-values-for-comparison/212336 "2020-01-03T17:54:03Z")
For example you have an index with sales numbers for 2018 and 2019. (Showing the number of sales for each date throughout the year.) I want to compare the numbers for 2018 and 2019 in the same visualization, so the use… --- ## [Searching with Dense Vector](https://discuss.elastic.co/t/searching-with-dense-vector/213374)
**Author:** [@Dipanjan\_Nag](https://discuss.elastic.co/u/Dipanjan_Nag)\ **Replies:** 3\ **Last updated:** [January 3, 2020, 5:45pm UTC](https://discuss.elastic.co/t/searching-with-dense-vector/213374 "2020-01-03T17:45:10Z")
Is there a way to apply a query directly to DenseVector e.g. Nearest Neighbors. I understand that a vector field (i.e. Dense or Sparse) is accessible via scoring. But I'm rather curious about true sense vector search lik… --- ## [Setting log4j settings; dynamic setting works, setting in log4j.properties causes malfunction](https://discuss.elastic.co/t/setting-log4j-settings-dynamic-setting-works-setting-in-log4j-properties-causes-malfunction/213594)
**Author:** [@tomj](https://discuss.elastic.co/u/tomj)\ **Replies:** 2\ **Last updated:** [January 3, 2020, 5:36pm UTC](https://discuss.elastic.co/t/setting-log4j-settings-dynamic-setting-works-setting-in-log4j-properties-causes-malfunction/213594 "2020-01-03T17:36:53Z")
Logstash 7.1.1 running on Amazon Linux 2 jdbc\_static filter plugin version 1.0.6 Elasticsearch 7.1.1 I have a test stream that produces about 125-150 messages per second, which I enrich using the jdbc\_static filter pl… --- ## [Sum of document fields with same timestamp](https://discuss.elastic.co/t/sum-of-document-fields-with-same-timestamp/213717)
**Author:** [@irfancnk](https://discuss.elastic.co/u/irfancnk)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 5:16pm UTC](https://discuss.elastic.co/t/sum-of-document-fields-with-same-timestamp/213717 "2020-01-03T17:16:53Z")
Hi, I have a bunch of network throughput document looking exactly like the following. {timestamp: 1578038384.011689, ip1: 192.168.56.1, port1: 5353, ip2: 224.0.0.251, port2: 5353, recv: 14.0, sent: 0.2, total: 14.2} {… --- ## [Grok debugger says good but logstash doesn't match](https://discuss.elastic.co/t/grok-debugger-says-good-but-logstash-doesnt-match/213620)
**Author:** [@Willl](https://discuss.elastic.co/u/Willl)\ **Replies:** 2\ **Last updated:** [January 3, 2020, 4:33pm UTC](https://discuss.elastic.co/t/grok-debugger-says-good-but-logstash-doesnt-match/213620 "2020-01-03T16:33:02Z")
Hi, Running filebeat with system module on /var/log/message. I tested the following in Kibana Grok Debugger, Log: Jan 2 14:42:52 dev10 sudo: pam\_unix(sudo:session): session opened for user root by root(uid=0) wit… --- ## [Logstash node not sending to elasticsearch node](https://discuss.elastic.co/t/logstash-node-not-sending-to-elasticsearch-node/213489)
**Author:** [@smaxxx](https://discuss.elastic.co/u/smaxxx)\ **Replies:** 5\ **Last updated:** [January 3, 2020, 4:30pm UTC](https://discuss.elastic.co/t/logstash-node-not-sending-to-elasticsearch-node/213489 "2020-01-03T16:30:45Z")
Hello, so after performance problems. we decided to split logstash and elasticsearch up in separate nodes. However, the logstash node isn't sending anything to the elasticsearch node. Here are my findings so far: Can t… --- ## [Cluster recovery inside K8s](https://discuss.elastic.co/t/cluster-recovery-inside-k8s/213641)
**Author:** [@pbecot01](https://discuss.elastic.co/u/pbecot01)\ **Replies:** 5\ **Last updated:** [January 3, 2020, 4:06pm UTC](https://discuss.elastic.co/t/cluster-recovery-inside-k8s/213641 "2020-01-03T16:06:47Z")
Hi all! Spent the last month or so playing with elastic stack for my side project site. Its just a flask/react app with virtually 0 traffic, so nothing particularly fancy, but I like playing with new tech. So am deployin… --- ## [Change Index retention period](https://discuss.elastic.co/t/change-index-retention-period/213468)
**Author:** [@kumar6](https://discuss.elastic.co/u/kumar6)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 4:03pm UTC](https://discuss.elastic.co/t/change-index-retention-period/213468 "2020-01-03T16:03:10Z")
Hi, Currently my indices are stored for 21 days and would like to change it to 7 days. I am not able to find out where to change it. Can you please let me know the steps to change it. I am using AWS managed elastic s… --- ## [Grok help with cisco firepower 2130](https://discuss.elastic.co/t/grok-help-with-cisco-firepower-2130/211465)
**Author:** [@Aashish\_Arora](https://discuss.elastic.co/u/Aashish_Arora)\ **Replies:** 3\ **Last updated:** [January 3, 2020, 3:41pm UTC](https://discuss.elastic.co/t/grok-help-with-cisco-firepower-2130/211465 "2020-01-03T15:41:40Z")
Hello, I'm new to grok i want to put cisco fire power 2130 logs to elasticsearch I'm getting 6 types of different log lines so how do i write grok filter I'd created 6 different grok filter and checked by grok debugge… --- ## [Kibana 6.8 Controls visualization- Option list](https://discuss.elastic.co/t/kibana-6-8-controls-visualization-option-list/212394)
**Author:** [@Neeraj\_Rajagopalan\_I](https://discuss.elastic.co/u/Neeraj_Rajagopalan_I)\ **Replies:** 3\ **Last updated:** [January 3, 2020, 3:28pm UTC](https://discuss.elastic.co/t/kibana-6-8-controls-visualization-option-list/212394 "2020-01-03T15:28:28Z")
Hi, I have created an option list using controls visualization and i see that i cannot sort the numbers. the numbers display 0,1,100,1000... I want to display it as 0,1,2,3,4... can any one help me out. --- ## [Config: Error 404 Not Found: \[doc\] is missing](https://discuss.elastic.co/t/config-error-404-not-found-doc-is-missing/213719)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 3:23pm UTC](https://discuss.elastic.co/t/config-error-404-not-found-doc-is-missing/213719 "2020-01-03T15:23:10Z")
Hello, When i log in Kibana with appuser1, kibana create a .kibana\_35242323\_appuser1. But directly after, error message appears on top of Kibana : Config: Error 404 Not Found: \[doc\]\[config:5.6.14\]: document missing: \[… --- ## [Autoscaling ES 7](https://discuss.elastic.co/t/autoscaling-es-7/213575)
**Author:** [@PabloDominico](https://discuss.elastic.co/u/PabloDominico)\ **Replies:** 2\ **Last updated:** [January 3, 2020, 2:56pm UTC](https://discuss.elastic.co/t/autoscaling-es-7/213575 "2020-01-03T14:56:38Z")
Hi, Im looking for a solution to store data for years and ES is prefered for logging indexing searching etc. However i setup a nice cluster but the search is beaing slow, thinking on autoscaling this when the resource … --- ## [Two indexes, one on encrypted fs, one on regular fs](https://discuss.elastic.co/t/two-indexes-one-on-encrypted-fs-one-on-regular-fs/213708)
**Author:** [@justroll](https://discuss.elastic.co/u/justroll)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 1:33pm UTC](https://discuss.elastic.co/t/two-indexes-one-on-encrypted-fs-one-on-regular-fs/213708 "2020-01-03T13:33:59Z")
I'm tring to setup elastisearch for two different purposes, keeping general data that doesn't need encryption, and user sensitive data that needs to be stored in encrypted filesystem. Can you please confirm/correct my c… --- ## [Index Templates tracing](https://discuss.elastic.co/t/index-templates-tracing/213413)
**Author:** [@Ayala](https://discuss.elastic.co/u/Ayala)\ **Replies:** 3\ **Last updated:** [January 3, 2020, 1:29pm UTC](https://discuss.elastic.co/t/index-templates-tracing/213413 "2020-01-03T13:29:43Z")
Is there a way to track which index templates were used/applied for the creation of an index? [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1700) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1702)