# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1726 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1727 --- ## [Logstasth Filter and Plugins Elasticsearch to Search and Add New Tag](https://discuss.elastic.co/t/logstasth-filter-and-plugins-elasticsearch-to-search-and-add-new-tag/211931)
**Author:** [@carmezsa](https://discuss.elastic.co/u/carmezsa)\ **Replies:** 0\ **Last updated:** [December 15, 2019, 11:55pm UTC](https://discuss.elastic.co/t/logstasth-filter-and-plugins-elasticsearch-to-search-and-add-new-tag/211931 "2019-12-15T23:55:29Z")
I use Zeek Framework (BroIDS) to monitoring my lab network. I use filebeat to send data to ELK. The logs from Zeek are in json format and they are similar to that: {"ts":"2019-12-15T23:08:37.016852Z","uid":"CzKj6o2MOtx4… --- ## [Transport Error: Cannot get new connection from pool](https://discuss.elastic.co/t/transport-error-cannot-get-new-connection-from-pool/211930)
**Author:** [@gurodrigues](https://discuss.elastic.co/u/gurodrigues)\ **Replies:** 0\ **Last updated:** [December 15, 2019, 11:39pm UTC](https://discuss.elastic.co/t/transport-error-cannot-get-new-connection-from-pool/211930 "2019-12-15T23:39:48Z")
Hi folks, I am using Logstash 7.5.0 to reindex my index from ES 6.8.5 to ES 7.5.0. I also tried to use Logstash 6.8.5 to do the job, but i get the same error in both versions I saw some similar posts here, but anyone … --- ## [How to use traces with the intake API](https://discuss.elastic.co/t/how-to-use-traces-with-the-intake-api/211830)
**Author:** [@LordMathis](https://discuss.elastic.co/u/LordMathis)\ **Replies:** 1\ **Last updated:** [December 15, 2019, 10:56pm UTC](https://discuss.elastic.co/t/how-to-use-traces-with-the-intake-api/211830 "2019-12-15T22:56:25Z")
Kibana version: 7.3 Elasticsearch version: 7.3 APM Server version: 7.3 APM Agent language and version: New agent built for all versions of Delphi Original install method (e.g. download page, yum, deb, from source, et… --- ## [Logstash filter seems not working](https://discuss.elastic.co/t/logstash-filter-seems-not-working/211890)
**Author:** [@Pradana](https://discuss.elastic.co/u/Pradana)\ **Replies:** 1\ **Last updated:** [December 15, 2019, 9:13pm UTC](https://discuss.elastic.co/t/logstash-filter-seems-not-working/211890 "2019-12-15T21:13:51Z")
Hi, I hv below configuration with my logststash : input { beats { port =\> 5044 } } filter{ if \[fields\]\[sourcelog\]=="cdrlog" { grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:logdate:date} %{LOGLEVEL:debugty… --- ## [7.5.0 rolling update tried but getting java error in trace when bringing up nodes 2 and 3 in my cluster](https://discuss.elastic.co/t/7-5-0-rolling-update-tried-but-getting-java-error-in-trace-when-bringing-up-nodes-2-and-3-in-my-cluster/211876)
**Author:** [@Ed\_Lopez](https://discuss.elastic.co/u/Ed_Lopez)\ **Replies:** 7\ **Last updated:** [December 15, 2019, 8:26pm UTC](https://discuss.elastic.co/t/7-5-0-rolling-update-tried-but-getting-java-error-in-trace-when-bringing-up-nodes-2-and-3-in-my-cluster/211876 "2019-12-15T20:26:27Z")
I tried doing the rolling update from 7.3 to 7.5.0 The cluster went offline when I took one node down. I stopped all nodes. I upgraded node 1 and started no problem. I try to start nodes 2 and 3 and I get a java err… --- ## [Auditbeat fileintegrity module cannot detect file update from vi](https://discuss.elastic.co/t/auditbeat-fileintegrity-module-cannot-detect-file-update-from-vi/211920)
**Author:** [@jittinan](https://discuss.elastic.co/u/jittinan)\ **Replies:** 0\ **Last updated:** [December 15, 2019, 7:00pm UTC](https://discuss.elastic.co/t/auditbeat-fileintegrity-module-cannot-detect-file-update-from-vi/211920 "2019-12-15T19:00:57Z")
from auditbeat documents,file integrity module detect changes by using inotify events from os.it works correctly with created,deleted,moved events by sending a message for each event to elasticserch but when the monitor… --- ## [Bootstrapping faild](https://discuss.elastic.co/t/bootstrapping-faild/211914)
**Author:** [@Stefano\_Bossi](https://discuss.elastic.co/u/Stefano_Bossi)\ **Replies:** 1\ **Last updated:** [December 15, 2019, 5:25pm UTC](https://discuss.elastic.co/t/bootstrapping-faild/211914 "2019-12-15T17:25:32Z")
Dear elasticsearch team, I have tried all the possible solution but I can't installa e new cluster because no master node could be discovered. My cluster is made by 3 master and 3 data node. Here are the master config… --- ## ["component": "o.e.d.SeedHostsResolver" - "message": "failed to resolve host \[es-master-1\]", Elastic Search v. 7.5.0](https://discuss.elastic.co/t/component-o-e-d-seedhostsresolver-message-failed-to-resolve-host-es-master-1-elastic-search-v-7-5-0/211790)
**Author:** [@tmarinov](https://discuss.elastic.co/u/tmarinov)\ **Replies:** 1\ **Last updated:** [December 13, 2019, 3:14pm UTC](https://discuss.elastic.co/t/component-o-e-d-seedhostsresolver-message-failed-to-resolve-host-es-master-1-elastic-search-v-7-5-0/211790 "2019-12-13T15:14:23Z")
All, I started dealing with ES and kubernetes and currently trying to create two master nodes. I am sorry for the long post below, but couldn't find a way to attache the files with the error log message and my k8s yaml.… --- ## [Kibana 7.5 Can't Unpacking!](https://discuss.elastic.co/t/kibana-7-5-cant-unpacking/210486)
**Author:** [@Iceph](https://discuss.elastic.co/u/Iceph)\ **Replies:** 2\ **Last updated:** [December 15, 2019, 11:27am UTC](https://discuss.elastic.co/t/kibana-7-5-cant-unpacking/210486 "2019-12-15T11:27:32Z")
I will install kibana 7.5 on ubuntu by apt-get sudo apt-get update && sudo apt-get install kibana but when i install logs told me can't unpacking kibana. who has a best suggestion? --- ## [Dec 15th, 2019: \[EN\] Elasticsearch Snapshot Lifecycle Management (SLM) with Minio.io S3](https://discuss.elastic.co/t/dec-15th-2019-en-elasticsearch-snapshot-lifecycle-management-slm-with-minio-io-s3/210608)
**Author:** [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\ **Replies:** 0\ **Last updated:** [December 15, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-15th-2019-en-elasticsearch-snapshot-lifecycle-management-slm-with-minio-io-s3/210608 "2019-12-15T08:00:03Z")
Snapshot Lifecycle Management (SLM) is a way to schedule and define snapshot policies using the Elasticsearch API or the Kibana UI. It also allows to check the existing snapshots and restore them directly on Kibana. SLM… --- ## [Server config for cluster](https://discuss.elastic.co/t/server-config-for-cluster/211899)
**Author:** [@vonix](https://discuss.elastic.co/u/vonix)\ **Replies:** 1\ **Last updated:** [December 15, 2019, 6:53am UTC](https://discuss.elastic.co/t/server-config-for-cluster/211899 "2019-12-15T06:53:50Z")
Hi, I'm trying to figure out server config for an ES cluster design. My current config is 3 master nodes and 9 data nodes, each 2gb of ram. I want to index large amounts of data ~120gb. Currently when I do it in bulk … --- ## [Multi\_match with most\_fields option does not behave as documented](https://discuss.elastic.co/t/multi-match-with-most-fields-option-does-not-behave-as-documented/211897)
**Author:** [@Pascal\_Rapicault](https://discuss.elastic.co/u/Pascal_Rapicault)\ **Replies:** 0\ **Last updated:** [December 15, 2019, 4:33am UTC](https://discuss.elastic.co/t/multi-match-with-most-fields-option-does-not-behave-as-documented/211897 "2019-12-15T04:33:16Z")
Hello, The documentation on multi\_match query \[1\] with most\_fields specified, does not behave as documented. The documentation says "The score from each match clause is added together, then divided by the number of m… --- ## [Unable to see Location names on the visualization](https://discuss.elastic.co/t/unable-to-see-location-names-on-the-visualization/211365)
**Author:** [@Shyamcharan](https://discuss.elastic.co/u/Shyamcharan)\ **Replies:** 2\ **Last updated:** [December 15, 2019, 1:48am UTC](https://discuss.elastic.co/t/unable-to-see-location-names-on-the-visualization/211365 "2019-12-15T01:48:53Z")
Hi, I am new user to kibana 7.0.I wanted to create coordinate maps showing count of id's and county names. I have geo coordinate field as county names and mapped all the county with their respective latitudes and longi… --- ## [Comparar dos campos de dos indices para generar una Alarma](https://discuss.elastic.co/t/comparar-dos-campos-de-dos-indices-para-generar-una-alarma/211888)
**Author:** [@carmezsa](https://discuss.elastic.co/u/carmezsa)\ **Replies:** 0\ **Last updated:** [December 15, 2019, 12:28am UTC](https://discuss.elastic.co/t/comparar-dos-campos-de-dos-indices-para-generar-una-alarma/211888 "2019-12-15T00:28:16Z")
Hola, estoy tratando de crear una alarma con el objetivo de notificar cuando se está accediendo a una ip supuestamente maliciosa pero no consigo dar con la solución. Descripcion del escenario: Tengo un indice (index\_… --- ## [Twitter API do not show the "lang" field](https://discuss.elastic.co/t/twitter-api-do-not-show-the-lang-field/211879)
**Author:** [@orejasdetrapo](https://discuss.elastic.co/u/orejasdetrapo)\ **Replies:** 0\ **Last updated:** [December 14, 2019, 7:13pm UTC](https://discuss.elastic.co/t/twitter-api-do-not-show-the-lang-field/211879 "2019-12-14T19:13:49Z")
Hi, I make a test for get the language of the tweets and not find the 'lang' field. Its necessary the activation inside the API? Thanks! --- ## [Logstash file input not reparsing file](https://discuss.elastic.co/t/logstash-file-input-not-reparsing-file/211854)
**Author:** [@konan\_pustolov](https://discuss.elastic.co/u/konan_pustolov)\ **Replies:** 3\ **Last updated:** [December 14, 2019, 7:10pm UTC](https://discuss.elastic.co/t/logstash-file-input-not-reparsing-file/211854 "2019-12-14T19:10:54Z")
I have the following problem, I need logstash to reparse already parsed files: Scenario that doesn't work but should: upload file to watched folder logstash processes it, saves to elastic, removes it (file\_complet… --- ## [Elasticsearch: Couldn't connect to any of the configured Elasticsearch hosts - connection refused\]](https://discuss.elastic.co/t/elasticsearch-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-connection-refused/211860)
**Author:** [@carmezsa](https://discuss.elastic.co/u/carmezsa)\ **Replies:** 5\ **Last updated:** [December 14, 2019, 6:33pm UTC](https://discuss.elastic.co/t/elasticsearch-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-connection-refused/211860 "2019-12-14T18:33:13Z")
Hello, I have to virtualmachine with ubunu 19.10 in my local lab. Host A: 192.168.29.90 /etc/filebeat/filebeat.yml filebeat.inputs: - type: log paths: - /opt/zeek/logs/current/\*.log filebeat.config.modules: … --- ## [Unable to load data HELP!](https://discuss.elastic.co/t/unable-to-load-data-help/211849)
**Author:** [@Antonio\_Ponce](https://discuss.elastic.co/u/Antonio_Ponce)\ **Replies:** 4\ **Last updated:** [December 14, 2019, 3:38pm UTC](https://discuss.elastic.co/t/unable-to-load-data-help/211849 "2019-12-14T15:38:34Z")
hi guys, im attempting to run the following but received the error below not sure what is wrong, can someone shed some light? input { file { path =\> "c:\\users\\administrator\\downloads\\chicago-food-inspection\\food-insp… --- ## [Kibana 7.0.1 does not work on IPv6](https://discuss.elastic.co/t/kibana-7-0-1-does-not-work-on-ipv6/207937)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 4\ **Last updated:** [December 14, 2019, 3:07pm UTC](https://discuss.elastic.co/t/kibana-7-0-1-does-not-work-on-ipv6/207937 "2019-12-14T15:07:47Z")
Hi, I am using kibana-oss (version - 7.0.1) in kubernetes environment with IPv6 environment. My kibana.yaml looks like this: server.name: kibana server.host: "\[::0\]" server.port: 5601 elasticsearch.hosts: "http://elas… --- ## [Logstash 503](https://discuss.elastic.co/t/logstash-503/211439)
**Author:** [@typzea](https://discuss.elastic.co/u/typzea)\ **Replies:** 10\ **Last updated:** [December 14, 2019, 12:50pm UTC](https://discuss.elastic.co/t/logstash-503/211439 "2019-12-14T12:50:10Z")
Bonjour à tous, J'ai besoin d'aide car depuis quelques jours j'ai le souci suivant : Dec 11 08:54:12 s-log-p-i02-fr logstash\[1011\]: \[2019-12-11T08:54:12,757\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\] retrying failed… --- ## [Elastic search intervals query](https://discuss.elastic.co/t/elastic-search-intervals-query/211833)
**Author:** [@vamsi\_yadav](https://discuss.elastic.co/u/vamsi_yadav)\ **Replies:** 6\ **Last updated:** [December 14, 2019, 12:38pm UTC](https://discuss.elastic.co/t/elastic-search-intervals-query/211833 "2019-12-14T12:38:46Z")
TEXT : A simple sentence contains only one independent clause I want the query to return proximity search. Simple w/3 one -\> I need to return the above text documents. --- ## [Strict Dynamic Mappings With Dynamic Templates](https://discuss.elastic.co/t/strict-dynamic-mappings-with-dynamic-templates/211629)
**Author:** [@phivos](https://discuss.elastic.co/u/phivos)\ **Replies:** 1\ **Last updated:** [December 14, 2019, 12:37pm UTC](https://discuss.elastic.co/t/strict-dynamic-mappings-with-dynamic-templates/211629 "2019-12-14T12:37:15Z")
Hi Is it possible to apply strict dynamic mappings using dynamic templates with patterns? The goal is to allow structured strict dynamic mappings. Example: PUT \_template/test-template { "index\_patterns": \[ … --- ## [Count values in terms based on the starting character](https://discuss.elastic.co/t/count-values-in-terms-based-on-the-starting-character/211658)
**Author:** [@Vinothkumar\_Ganeshan](https://discuss.elastic.co/u/Vinothkumar_Ganeshan)\ **Replies:** 1\ **Last updated:** [December 14, 2019, 12:32pm UTC](https://discuss.elastic.co/t/count-values-in-terms-based-on-the-starting-character/211658 "2019-12-14T12:32:03Z")
Hello, I have an index seach-2019-08\* and it has term site. I want to count the terms based on the starting character of the site. GET search-2019-08\*/\_count { "query": { "bool": { "must": \[ { "term": { "s… --- ## [Single field with multiple date types (date and date\_nanos)](https://discuss.elastic.co/t/single-field-with-multiple-date-types-date-and-date-nanos/211726)
**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\ **Replies:** 1\ **Last updated:** [December 14, 2019, 12:27pm UTC](https://discuss.elastic.co/t/single-field-with-multiple-date-types-date-and-date-nanos/211726 "2019-12-14T12:27:56Z")
Is it possible to have a single field have multiple date types (date and date\_nanos)? I need date\_nanos for the precision but certain tools, such as Kibana streaming logs, only support regular date. So i'd like to inde… --- ## [Percolation exact match](https://discuss.elastic.co/t/percolation-exact-match/211759)
**Author:** [@jtryan](https://discuss.elastic.co/u/jtryan)\ **Replies:** 1\ **Last updated:** [December 14, 2019, 12:14pm UTC](https://discuss.elastic.co/t/percolation-exact-match/211759 "2019-12-14T12:14:23Z")
I've been following the guide linked below: https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-percolate-query.html In these examples bonsai or tree will match any documents as illustrated in the… --- ## [Unable to load data from logstash to elasticsearch](https://discuss.elastic.co/t/unable-to-load-data-from-logstash-to-elasticsearch/211826)
**Author:** [@ronics](https://discuss.elastic.co/u/ronics)\ **Replies:** 3\ **Last updated:** [December 14, 2019, 11:56am UTC](https://discuss.elastic.co/t/unable-to-load-data-from-logstash-to-elasticsearch/211826 "2019-12-14T11:56:50Z")
I have recently activated xpack monitoring in elasticsearh, kibana and logstash. I tried to push 101MB csv file but I am getting error. My configuratio in logstash.yml is xpack.monitoring.enabled: true xpack.monitoring… --- ## [Object Object?](https://discuss.elastic.co/t/object-object/211834)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [December 14, 2019, 10:42am UTC](https://discuss.elastic.co/t/object-object/211834 "2019-12-14T10:42:11Z")
7.5.0: When excluding --- ## [Group by terms and get count of nested array property?](https://discuss.elastic.co/t/group-by-terms-and-get-count-of-nested-array-property/211823)
**Author:** [@tzn01](https://discuss.elastic.co/u/tzn01)\ **Replies:** 2\ **Last updated:** [December 14, 2019, 10:37am UTC](https://discuss.elastic.co/t/group-by-terms-and-get-count-of-nested-array-property/211823 "2019-12-14T10:37:02Z")
I would like to get the count from a document series where an array item matches some value. I have documents like these: { "Name": "jason", "Todos": \[{ "State": "COMPLETED" "Timer": 10 … --- ## [Elasticsearch not starting on boot](https://discuss.elastic.co/t/elasticsearch-not-starting-on-boot/211779)
**Author:** [@NogNeetMachinaal](https://discuss.elastic.co/u/NogNeetMachinaal)\ **Replies:** 1\ **Last updated:** [December 14, 2019, 10:32am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-on-boot/211779 "2019-12-14T10:32:55Z")
Team, More often then not, ElasticSearch is not starting after reboot. It is added to systemd =\> at least an attempt is made. But I need to do a manual service eleasticsearch restart to get it up. When researching th… --- ## [Show time with millisecond](https://discuss.elastic.co/t/show-time-with-millisecond/211863)
**Author:** [@Yoav\_Ben\_Moha](https://discuss.elastic.co/u/Yoav_Ben_Moha)\ **Replies:** 3\ **Last updated:** [December 14, 2019, 8:36am UTC](https://discuss.elastic.co/t/show-time-with-millisecond/211863 "2019-12-14T08:36:54Z")
Hi, On Elastic search version 7.4 , I need to have a column that keep time results which include milliseconds as well. For example: Name result A 32.45 B 2.12.67 (32.45 m… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1725) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1727)