# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1727 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1728 --- ## [How to store a backup (snapshot) of my indexes to local storage using python in elasticsearch and then also be able to restore them?](https://discuss.elastic.co/t/how-to-store-a-backup-snapshot-of-my-indexes-to-local-storage-using-python-in-elasticsearch-and-then-also-be-able-to-restore-them/210940)
**Author:** [@hjiop\_oop](https://discuss.elastic.co/u/hjiop_oop)\ **Replies:** 5\ **Last updated:** [December 14, 2019, 7:13am UTC](https://discuss.elastic.co/t/how-to-store-a-backup-snapshot-of-my-indexes-to-local-storage-using-python-in-elasticsearch-and-then-also-be-able-to-restore-them/210940 "2019-12-14T07:13:50Z")
Hello, I know that I need to create a snapshot (?) for doing so, but can someone please tell me how? Say I have indexes: indexA and indexB How do I go about storing a snapshot (containing these indexes) to local stora… --- ## [Best practices to introduce a syslog server between log sources and elasticsearch](https://discuss.elastic.co/t/best-practices-to-introduce-a-syslog-server-between-log-sources-and-elasticsearch/211581)
**Author:** [@jawadak](https://discuss.elastic.co/u/jawadak)\ **Replies:** 4\ **Last updated:** [December 14, 2019, 5:54am UTC](https://discuss.elastic.co/t/best-practices-to-introduce-a-syslog-server-between-log-sources-and-elasticsearch/211581 "2019-12-14T05:54:03Z")
Hi, I have a requirement to store the raw logs collected from the endpoints. So I am planning to introduce a syslog server between endpoint and elasticsearch. The general deployment would be, Log sources -\> rsyslog/sysl… --- ## [Elastic search Node Failure](https://discuss.elastic.co/t/elastic-search-node-failure/211562)
**Author:** [@Gayathri.Srivathsan](https://discuss.elastic.co/u/Gayathri.Srivathsan)\ **Replies:** 3\ **Last updated:** [December 13, 2019, 11:46pm UTC](https://discuss.elastic.co/t/elastic-search-node-failure/211562 "2019-12-13T23:46:39Z")
HI, I am trying to start elasticsearch and it gives me the following error. \[2019-12-12T09:36:49,083\]\[WARN \]\[o.e.b.BootstrapChecks \] \[analytics-node\] the default discovery settings are unsuitable for production use;… --- ## [CPU 16 cores with 32 threads will create 32 shards for an index?](https://discuss.elastic.co/t/cpu-16-cores-with-32-threads-will-create-32-shards-for-an-index/211610)
**Author:** [@vuvantuancntt](https://discuss.elastic.co/u/vuvantuancntt)\ **Replies:** 1\ **Last updated:** [December 13, 2019, 11:24pm UTC](https://discuss.elastic.co/t/cpu-16-cores-with-32-threads-will-create-32-shards-for-an-index/211610 "2019-12-13T23:24:20Z")
Hi all, I am estimating number of shard for an index. I am focus on number of shards and CPU cores, threads only. Other things I have calculated already and I aware it. My server has a 16 cores CPU, thread number is 32. … --- ## [Kibana Lens](https://discuss.elastic.co/t/kibana-lens/211746)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 3\ **Last updated:** [December 13, 2019, 9:16pm UTC](https://discuss.elastic.co/t/kibana-lens/211746 "2019-12-13T21:16:02Z")
Hi Team, I was just want to know where the kibana lens will help me in my work, basically how will it help me. what possibly can we do with it . Thanks --- ## [Delay calculation between two send/receive events](https://discuss.elastic.co/t/delay-calculation-between-two-send-receive-events/211842)
**Author:** [@Sreekanth3](https://discuss.elastic.co/u/Sreekanth3)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 8:11pm UTC](https://discuss.elastic.co/t/delay-calculation-between-two-send-receive-events/211842 "2019-12-13T20:11:43Z")
The Delay on the server should be calculated on the actual server, if the duration between Receive EventID on Server A and Send EventID on Server b (the same server) is 24 minutes , it should shows it on that specific … --- ## [Elasticsearch rolling restart recovery is slow](https://discuss.elastic.co/t/elasticsearch-rolling-restart-recovery-is-slow/211740)
**Author:** [@nemtso](https://discuss.elastic.co/u/nemtso)\ **Replies:** 2\ **Last updated:** [December 13, 2019, 7:56pm UTC](https://discuss.elastic.co/t/elasticsearch-rolling-restart-recovery-is-slow/211740 "2019-12-13T19:56:20Z")
Hi, I am trying to improve rolling restart process of our Elasticsearch cluster and looking for advice. We have a 8 node cluster on version 5.6.3: 5 Data nodes 3 master nodes 1 Coordinator node (with Kibana on it) Th… --- ## [Sort on scripted metric fields](https://discuss.elastic.co/t/sort-on-scripted-metric-fields/211840)
**Author:** [@Seetha93](https://discuss.elastic.co/u/Seetha93)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 7:53pm UTC](https://discuss.elastic.co/t/sort-on-scripted-metric-fields/211840 "2019-12-13T19:53:45Z")
Is there way to sort on the scripted sub aggregations? --- ## [Need help with a dynamic mapping](https://discuss.elastic.co/t/need-help-with-a-dynamic-mapping/211639)
**Author:** [@matd](https://discuss.elastic.co/u/matd)\ **Replies:** 2\ **Last updated:** [December 13, 2019, 5:56pm UTC](https://discuss.elastic.co/t/need-help-with-a-dynamic-mapping/211639 "2019-12-13T17:56:13Z")
I'm struggling with dynamic mappings. My docs (coming from logs) include a parameters object with lots of nested properties, that I want to partially index. Especially, I have some fields that I want to dynamically map… --- ## [Remove top 15% and worst 25% of document from result](https://discuss.elastic.co/t/remove-top-15-and-worst-25-of-document-from-result/211827)
**Author:** [@bebeDobreRano](https://discuss.elastic.co/u/bebeDobreRano)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 5:44pm UTC](https://discuss.elastic.co/t/remove-top-15-and-worst-25-of-document-from-result/211827 "2019-12-13T17:44:00Z")
Hello, I have a query that finds documents matching selected values in filters, then the result is ordered by my numeric integer field, DESC. The harder part starts with the fact that I need to reduce the result by rem… --- ## [Issue indexing a field on elasticsearch 6.8](https://discuss.elastic.co/t/issue-indexing-a-field-on-elasticsearch-6-8/211140)
**Author:** [@mgaspereyra](https://discuss.elastic.co/u/mgaspereyra)\ **Replies:** 5\ **Last updated:** [December 13, 2019, 4:40pm UTC](https://discuss.elastic.co/t/issue-indexing-a-field-on-elasticsearch-6-8/211140 "2019-12-13T16:40:09Z")
Hi Everybody! I Apologize to post this issue, as I think it should be easy to solve, but I am not finding the way to solve it. My situation is as follows: I have a Kong server which pushes his logs to elasticsearch, t… --- ## [Elastic Stack Windows Server hardware requirements](https://discuss.elastic.co/t/elastic-stack-windows-server-hardware-requirements/211820)
**Author:** [@Elasticuser3](https://discuss.elastic.co/u/Elasticuser3)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 4:50pm UTC](https://discuss.elastic.co/t/elastic-stack-windows-server-hardware-requirements/211820 "2019-12-13T16:50:52Z")
Hello, We currently have Windows Server 2012/R2 and trying to start building the Beats, Logstash, Elasticsearch, and Kibana into our environment. What are the recommended hardware requirements (number of cores, RAM, ha… --- ## [\_grokparsefailure as soon as space in field](https://discuss.elastic.co/t/grokparsefailure-as-soon-as-space-in-field/211711)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 4\ **Last updated:** [December 13, 2019, 4:22pm UTC](https://discuss.elastic.co/t/grokparsefailure-as-soon-as-space-in-field/211711 "2019-12-13T16:22:20Z")
I am unable to match any field which has a space. Consider the log: "foo" "foo bar" "foobar" The middle line foo baralways results in \_grokparsefailure. Patterns I've tried to no avail: match =\> { "message" =\> "\\"(?\ **Author:** [@Ivan.fernandez](https://discuss.elastic.co/u/Ivan.fernandez)\ **Replies:** 2\ **Last updated:** [December 13, 2019, 4:06pm UTC](https://discuss.elastic.co/t/ilm-setting-are-not-honored/211797 "2019-12-13T16:06:48Z") Hi, We have configured our filebeat indices configure to make rollover when they reach 50G or every day. The 50G condition is never honored, the daily rollover is not done every day. There are no other changes in the de… --- ## [Results from ES index are null without error](https://discuss.elastic.co/t/results-from-es-index-are-null-without-error/211804)
**Author:** [@mbrimmer83](https://discuss.elastic.co/u/mbrimmer83)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 2:41pm UTC](https://discuss.elastic.co/t/results-from-es-index-are-null-without-error/211804 "2019-12-13T14:41:02Z")
On ES 7.2 and using Elasticsearch Client for Node JS. After I delete a document from my ES index, I sometimes have a brief period of time where future queries will return null results so they don't have a body or hits t… --- ## [How to find the number of roles and users defined in elastic search](https://discuss.elastic.co/t/how-to-find-the-number-of-roles-and-users-defined-in-elastic-search/211812)
**Author:** [@shri\_palchuri](https://discuss.elastic.co/u/shri_palchuri)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 3:31pm UTC](https://discuss.elastic.co/t/how-to-find-the-number-of-roles-and-users-defined-in-elastic-search/211812 "2019-12-13T15:31:20Z")
I can use /\_security/role/ to get the details of a specific role, is there any syntax to get the number of roles defined? --- ## [Balancing cluster by segments memory usage](https://discuss.elastic.co/t/balancing-cluster-by-segments-memory-usage/211809)
**Author:** [@crs](https://discuss.elastic.co/u/crs)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 3:12pm UTC](https://discuss.elastic.co/t/balancing-cluster-by-segments-memory-usage/211809 "2019-12-13T15:12:51Z")
Hi, I have cluster running on 8 nodes with many indices. Each node holds 1300-1400 segments but they differ v.much in terms of segments memory usage. Minimum is 12,9GB - max 17.9GB. Average memory usage is ~15GB per nod… --- ## [How to access and sort many documents using scripting fields?](https://discuss.elastic.co/t/how-to-access-and-sort-many-documents-using-scripting-fields/210310)
**Author:** [@white\_rabbit](https://discuss.elastic.co/u/white_rabbit)\ **Replies:** 3\ **Last updated:** [December 13, 2019, 3:05pm UTC](https://discuss.elastic.co/t/how-to-access-and-sort-many-documents-using-scripting-fields/210310 "2019-12-13T15:05:55Z")
In my Elasticsearch index I store multiple documents with fields like date, sequence etc. It looks like shown below. My goal is to find reordering. It means that I should sort all documents by date and check whether all … --- ## [Need advice - what's the difference between mapping and index pattern?](https://discuss.elastic.co/t/need-advice-whats-the-difference-between-mapping-and-index-pattern/211802)
**Author:** [@Skeeve](https://discuss.elastic.co/u/Skeeve)\ **Replies:** 1\ **Last updated:** [December 13, 2019, 2:44pm UTC](https://discuss.elastic.co/t/need-advice-whats-the-difference-between-mapping-and-index-pattern/211802 "2019-12-13T14:44:52Z")
I think I'm a bit lost here. I created an index with a mapping: PUT /ip-owner { "mappings" : { "properties" : { "ip\_addr": { "type": "ip" }, "customer\_number" : { "type" : "text"… --- ## [Add the field value to each new filed after json filter processing in Logstash](https://discuss.elastic.co/t/add-the-field-value-to-each-new-filed-after-json-filter-processing-in-logstash/211766)
**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\ **Replies:** 1\ **Last updated:** [December 13, 2019, 2:11pm UTC](https://discuss.elastic.co/t/add-the-field-value-to-each-new-filed-after-json-filter-processing-in-logstash/211766 "2019-12-13T14:11:38Z")
Hi There, I am trying to configure my logstash to add the parent field name to all the fileds of the child (to make it understand where the filed actually came from) Ex: I am having the below as the incoming data in a … --- ## [Logstash-filter-elapsed don\`t generate elapsed\_expired\_error](https://discuss.elastic.co/t/logstash-filter-elapsed-don-t-generate-elapsed-expired-error/211799)
**Author:** [@111229](https://discuss.elastic.co/u/111229)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 2:10pm UTC](https://discuss.elastic.co/t/logstash-filter-elapsed-don-t-generate-elapsed-expired-error/211799 "2019-12-13T14:10:20Z")
Hi, all! Could you help me. I have configuration from logstash-filter-elapsed elapsed { start\_tag =\> "start" end\_tag =\> "stop" unique\_id\_field =\> "ibso\_id" timeout =\> 15 } but after… --- ## [Indexes with different shards, diffent responce time for same query](https://discuss.elastic.co/t/indexes-with-different-shards-diffent-responce-time-for-same-query/211798)
**Author:** [@giannisapi](https://discuss.elastic.co/u/giannisapi)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 2:00pm UTC](https://discuss.elastic.co/t/indexes-with-different-shards-diffent-responce-time-for-same-query/211798 "2019-12-13T14:00:03Z")
Hi Guys, First of all thanks for taking the time to read my topic. I have create two indexex: First one: has 7 shards and the second has 4. Basically I did a reindex from test\_2 to test\_3 so they contain the same doc… --- ## [Dreded date with timezone :)](https://discuss.elastic.co/t/dreded-date-with-timezone/211718)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 2\ **Last updated:** [December 13, 2019, 1:57pm UTC](https://discuss.elastic.co/t/dreded-date-with-timezone/211718 "2019-12-13T13:57:44Z")
so i m trying to parse XML and ingest . Here is my XML ReceivedTimestamp and DeliveredTimestamp are in CST (Chicago) \ 2019-12-12T02:10:032019-12-12T02:20:03 Here… --- ## [Возможности аналитики в Elasticsearch](https://discuss.elastic.co/t/elasticsearch/211714)
**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\ **Replies:** 5\ **Last updated:** [December 13, 2019, 1:34pm UTC](https://discuss.elastic.co/t/elasticsearch/211714 "2019-12-13T13:34:21Z")
Добрый вечер! Прежде чем поднять вопрос перед шефом о приобретении соответствующего (не очень дешёвого..) железа для ES кластера, хотел бы знать предназначен ли ES для решения следующих типичных аналитических задач: … --- ## [Error during setup es cluster with docker on different vm 7.5](https://discuss.elastic.co/t/error-during-setup-es-cluster-with-docker-on-different-vm-7-5/211791)
**Author:** [@kmacew](https://discuss.elastic.co/u/kmacew)\ **Replies:** 1\ **Last updated:** [December 13, 2019, 1:10pm UTC](https://discuss.elastic.co/t/error-during-setup-es-cluster-with-docker-on-different-vm-7-5/211791 "2019-12-13T13:10:51Z")
Hi, I try to setup es cluster with two nodes on different machines. That's my master elasticsearch.yml file: cluster.name: "xyz" network.host: 0.0.0.0 discovery.seed\_hosts: \["10.8.11.86", "192.168.207.206"\] node.ma… --- ## [Custom field type?](https://discuss.elastic.co/t/custom-field-type/211751)
**Author:** [@beginner99](https://discuss.elastic.co/u/beginner99)\ **Replies:** 1\ **Last updated:** [December 13, 2019, 12:55pm UTC](https://discuss.elastic.co/t/custom-field-type/211751 "2019-12-13T12:55:55Z")
Is it possible to create a custom field type via plugin or any other means? The idea would be to make the calling applications far easier: In my use-case the passed in data would be "interpreted" by a 3rd party library … --- ## [Scripted fields vs real fields](https://discuss.elastic.co/t/scripted-fields-vs-real-fields/211710)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 2\ **Last updated:** [December 13, 2019, 12:35pm UTC](https://discuss.elastic.co/t/scripted-fields-vs-real-fields/211710 "2019-12-13T12:35:13Z")
Hi i've defind some scripted fields for my index patterns, but have some doubts: When you define them you get a warning message "Scripted fields can be used to display and aggregate calculated values. As such, they ca… --- ## [Logstash conditonals issue](https://discuss.elastic.co/t/logstash-conditonals-issue/211785)
**Author:** [@kamandohl](https://discuss.elastic.co/u/kamandohl)\ **Replies:** 2\ **Last updated:** [December 13, 2019, 12:34pm UTC](https://discuss.elastic.co/t/logstash-conditonals-issue/211785 "2019-12-13T12:34:09Z")
Issue: Unable to get conditionals to work Description: I have 6 logs that are from IIS. The formats are different on 3 of the logs from IIS. The grok I am using works. But I am unable to get the conditionals to work. I … --- ## [Grok filter pattern not working](https://discuss.elastic.co/t/grok-filter-pattern-not-working/211780)
**Author:** [@BeMoore](https://discuss.elastic.co/u/BeMoore)\ **Replies:** 8\ **Last updated:** [December 13, 2019, 12:32pm UTC](https://discuss.elastic.co/t/grok-filter-pattern-not-working/211780 "2019-12-13T12:32:28Z")
I must be going mad today, i can't get this filter to work. I extracted a single log line from an azure activity log, so i parse it through grok debugger both in kibana and herokuapp and i can't get it to work. so i spl… --- ## [Insertting fields to other index](https://discuss.elastic.co/t/insertting-fields-to-other-index/211787)
**Author:** [@namali](https://discuss.elastic.co/u/namali)\ **Replies:** 0\ **Last updated:** [December 13, 2019, 12:02pm UTC](https://discuss.elastic.co/t/insertting-fields-to-other-index/211787 "2019-12-13T12:02:23Z")
two configs run in logstash server. both pushing data to same structured indexes. column names are same. 1st config is s3 input and 2nd one elasticsearch input, get data from 1st config index. when 2nd config triggerin… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1726) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1728)