# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1731

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1732

---

## [Scroll parameter to get all the values from ES indices](https://discuss.elastic.co/t/scroll-parameter-to-get-all-the-values-from-es-indices/211135)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 3\
**Last updated:** [December 11, 2019, 9:43pm UTC](https://discuss.elastic.co/t/scroll-parameter-to-get-all-the-values-from-es-indices/211135 "2019-12-11T21:43:52Z")

</div>

Hi Folks, I am running this query to get the IP addresses from ES indices however I noticed that I am unable to get all the src\_ips and then found the scroll parameter. Can someone please confirm if scroll API will hel…

---

## [Use regex to search the text containing dash or minus sign](https://discuss.elastic.co/t/use-regex-to-search-the-text-containing-dash-or-minus-sign/211519)

<div class="topic-metadata">

**Author:** [@Mihir\_Kothari](https://discuss.elastic.co/u/Mihir_Kothari)\
**Replies:** 0\
**Last updated:** [December 11, 2019, 7:52pm UTC](https://discuss.elastic.co/t/use-regex-to-search-the-text-containing-dash-or-minus-sign/211519 "2019-12-11T19:52:33Z")

</div>

Hi, We have Elasticsearch 6.5. I am using it to search a index using regex and it is working for most of the case. { "query": { "bool": { "must": \[ { "match": { "field1:field2" : "Complete" } }, …

---

## [While inserting data from logstash to mongo, receieving socket error](https://discuss.elastic.co/t/while-inserting-data-from-logstash-to-mongo-receieving-socket-error/211505)

<div class="topic-metadata">

**Author:** [@psandhir](https://discuss.elastic.co/u/psandhir)\
**Replies:** 0\
**Last updated:** [December 11, 2019, 5:36pm UTC](https://discuss.elastic.co/t/while-inserting-data-from-logstash-to-mongo-receieving-socket-error/211505 "2019-12-11T17:36:13Z")

</div>

I am inserting logs to mongo using logstash & filebeat. Logs are received by logstash but while inserting to mongo, receiving below error on kubernetes. Can somebody please help on this. \[WARN \] 2019-12-11 14:55:32.772 …

---

## [Transaction.duration.us is in microseconds](https://discuss.elastic.co/t/transaction-duration-us-is-in-microseconds/211358)

<div class="topic-metadata">

**Author:** [@Kartheek\_Mannepalli](https://discuss.elastic.co/u/Kartheek_Mannepalli)\
**Replies:** 2\
**Last updated:** [December 11, 2019, 5:17pm UTC](https://discuss.elastic.co/t/transaction-duration-us-is-in-microseconds/211358 "2019-12-11T17:17:52Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.3…

---

## ["Spaces" missing in Kibana 6.6.2 after upgrade from 6.5.2](https://discuss.elastic.co/t/spaces-missing-in-kibana-6-6-2-after-upgrade-from-6-5-2/211363)

<div class="topic-metadata">

**Author:** [@Logan](https://discuss.elastic.co/u/Logan)\
**Replies:** 2\
**Last updated:** [December 11, 2019, 5:02pm UTC](https://discuss.elastic.co/t/spaces-missing-in-kibana-6-6-2-after-upgrade-from-6-5-2/211363 "2019-12-11T17:02:21Z")

</div>

I have 3 instances of Kibana (for redundancy) running against Elasticsearch 6.6.0 with the Basic License. I recently upgraded 1 of the Kibana instances from 6.5.2 to 6.6.2 in order to fix a visualization bug in the earli…

---

## [How to organize scripted fields in order](https://discuss.elastic.co/t/how-to-organize-scripted-fields-in-order/211216)

<div class="topic-metadata">

**Author:** [@jamesyone](https://discuss.elastic.co/u/jamesyone)\
**Replies:** 1\
**Last updated:** [December 11, 2019, 4:38pm UTC](https://discuss.elastic.co/t/how-to-organize-scripted-fields-in-order/211216 "2019-12-11T16:38:31Z")

</div>

Hi, currently I created a scripted field containing the days of week and explaining how much logs have come during that day. I am currently trying to organize the days into the week order (e.g. sunday, monday, tuesday, w…

---

## [ES: reindexing exceptions](https://discuss.elastic.co/t/es-reindexing-exceptions/211497)

<div class="topic-metadata">

**Author:** [@mouli\_v](https://discuss.elastic.co/u/mouli_v)\
**Replies:** 0\
**Last updated:** [December 11, 2019, 4:29pm UTC](https://discuss.elastic.co/t/es-reindexing-exceptions/211497 "2019-12-11T16:29:33Z")

</div>

Hi There, I am trying to reindex from a remote cluster, I see below exceptions. Can someone help me in fixing it. "index" : "comments", "type" : "search\_by\_query", "id" : "AWZxGty-wYpUZq\_Q6kW1", …

---

## [ECE - Confusion about docker storage driver to use - overlay or overlay2?](https://discuss.elastic.co/t/ece-confusion-about-docker-storage-driver-to-use-overlay-or-overlay2/210927)

<div class="topic-metadata">

**Author:** [@ygirouard\_stm](https://discuss.elastic.co/u/ygirouard_stm)\
**Replies:** 2\
**Last updated:** [December 11, 2019, 3:59pm UTC](https://discuss.elastic.co/t/ece-confusion-about-docker-storage-driver-to-use-overlay-or-overlay2/210927 "2019-12-11T15:59:43Z")

</div>

Docker's documentation is clear: if possible and your kernel supports it, use overlay2 as the storage driver, as stated here: Use the OverlayFS storage driver | Docker Docs Note : If you use OverlayFS, use the overlay…

---

## [\`.keyword\`counting against maximum number of fields?](https://discuss.elastic.co/t/keyword-counting-against-maximum-number-of-fields/209304)

<div class="topic-metadata">

**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\
**Replies:** 1\
**Last updated:** [December 11, 2019, 4:05pm UTC](https://discuss.elastic.co/t/keyword-counting-against-maximum-number-of-fields/209304 "2019-12-11T16:05:47Z")

</div>

Hi, I just wanted to ask if the the double indexed versions of string fields (as text and as keyword) do they count as 2 fields against the maximum count of fields which defaults to 1000? So, if I just have events cont…

---

## [Настройка визуализаций в кибане](https://discuss.elastic.co/t/topic/211415)

<div class="topic-metadata">

**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\
**Replies:** 4\
**Last updated:** [December 11, 2019, 4:05pm UTC](https://discuss.elastic.co/t/topic/211415 "2019-12-11T16:05:26Z")

</div>

Всем привет! Подскажите пожалуйста, возможно ли настроить логическое отображение данных? Например, в эластик поступают данные двух видов, это сообщение открытии и закрытии сессии. В каждом сообщении есть идентификатор с…

---

## [Logstash retrying failed action ... "reason"=\>"action \[indices:admin/create\] is unauthorized for user logstash\_writer](https://discuss.elastic.co/t/logstash-retrying-failed-action-reason-action-indices-admin-create-is-unauthorized-for-user-logstash-writer/211469)

<div class="topic-metadata">

**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\
**Replies:** 0\
**Last updated:** [December 11, 2019, 1:22pm UTC](https://discuss.elastic.co/t/logstash-retrying-failed-action-reason-action-indices-admin-create-is-unauthorized-for-user-logstash-writer/211469 "2019-12-11T13:22:30Z")

</div>

Hi, I have the following lines in my logstash logs: Dec 11 14:09:01 EAGLEEYE-A3001 logstash: \[2019-12-11T14:09:01,149\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with response code: 403 ({"type"=\>"se…

---

## [Grab data from mysql using more than one tracking column](https://discuss.elastic.co/t/grab-data-from-mysql-using-more-than-one-tracking-column/211477)

<div class="topic-metadata">

**Author:** [@fim](https://discuss.elastic.co/u/fim)\
**Replies:** 1\
**Last updated:** [December 11, 2019, 3:44pm UTC](https://discuss.elastic.co/t/grab-data-from-mysql-using-more-than-one-tracking-column/211477 "2019-12-11T15:44:54Z")

</div>

Hi Community I grab data from a mysql database using logstash' on a regular basis. In the mysql database the primary key is based on three columns instead of a single id column as primary key. How can I set more than …

---

## [Logstash not appending date to ES indices](https://discuss.elastic.co/t/logstash-not-appending-date-to-es-indices/211349)

<div class="topic-metadata">

**Author:** [@scriner](https://discuss.elastic.co/u/scriner)\
**Replies:** 6\
**Last updated:** [December 11, 2019, 2:31pm UTC](https://discuss.elastic.co/t/logstash-not-appending-date-to-es-indices/211349 "2019-12-11T14:31:46Z")

</div>

Hello, I'm currently working through upgrading a 2.6 ELK setup to 7.5 on a new server using what I can from the old config. The goal is to send rsyslog data from clients to Logstash. Previously, this worked (mostly) fin…

---

## [View in Console not Working](https://discuss.elastic.co/t/view-in-console-not-working/211345)

<div class="topic-metadata">

**Author:** [@spottedmahn](https://discuss.elastic.co/u/spottedmahn)\
**Replies:** 7\
**Last updated:** [December 11, 2019, 2:29pm UTC](https://discuss.elastic.co/t/view-in-console-not-working/211345 "2019-12-11T14:29:57Z")

</div>

Where are we supposed to log feedback/issues about the doc pages? Example doc page. I would assume there is a category/tag(s) for this, no? When I click "View in Console" on any of the examples here, I get: Notic…

---

## [Kibana loading its js files very slowly](https://discuss.elastic.co/t/kibana-loading-its-js-files-very-slowly/211299)

<div class="topic-metadata">

**Author:** [@balu\_23](https://discuss.elastic.co/u/balu_23)\
**Replies:** 3\
**Last updated:** [December 11, 2019, 2:17pm UTC](https://discuss.elastic.co/t/kibana-loading-its-js-files-very-slowly/211299 "2019-12-11T14:17:18Z")

</div>

It takes long time to load a kibana js files . So the kibana UI takes more time for loading the dashboard . Is there is any alternative for this.

---

## [Question about the possibilities of Kibana and code development](https://discuss.elastic.co/t/question-about-the-possibilities-of-kibana-and-code-development/210693)

<div class="topic-metadata">

**Author:** [@ya-tmch](https://discuss.elastic.co/u/ya-tmch)\
**Replies:** 10\
**Last updated:** [December 11, 2019, 2:11pm UTC](https://discuss.elastic.co/t/question-about-the-possibilities-of-kibana-and-code-development/210693 "2019-12-11T14:11:39Z")

</div>

Hello! We have crm for our customers. In the kibana there is information about the orders of our customers. We want to display the embedded dashboard on a specific page in our crm so that each client sees the graphs o…

---

## [Convert String to date and replace @timestamp](https://discuss.elastic.co/t/convert-string-to-date-and-replace-timestamp/211455)

<div class="topic-metadata">

**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\
**Replies:** 2\
**Last updated:** [December 11, 2019, 1:27pm UTC](https://discuss.elastic.co/t/convert-string-to-date-and-replace-timestamp/211455 "2019-12-11T13:27:15Z")

</div>

Hi all I have a custom field msg.message.timestamp which have the date in the format yyyy-MM-ddThh:mm:ss.nnnZ format eg. 2019-12-11T10:17:54.961Z I would like to use this as @timestamp. I tied a couple of things wit…

---

## [Kibana Saved Objects in Docker](https://discuss.elastic.co/t/kibana-saved-objects-in-docker/210875)

<div class="topic-metadata">

**Author:** [@atahanceylan](https://discuss.elastic.co/u/atahanceylan)\
**Replies:** 4\
**Last updated:** [December 11, 2019, 1:03pm UTC](https://discuss.elastic.co/t/kibana-saved-objects-in-docker/210875 "2019-12-11T13:03:18Z")

</div>

Is there a proper way to keep saved index templates, saved searches, visualizations and dashboards when Elastic Stack working on docker environment?

---

## [Logstash output to elasticsearch - SSL](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-ssl/211305)

<div class="topic-metadata">

**Author:** [@RichardH](https://discuss.elastic.co/u/RichardH)\
**Replies:** 1\
**Last updated:** [December 11, 2019, 12:27pm UTC](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-ssl/211305 "2019-12-11T12:27:07Z")

</div>

Hello, I am trying to get a Logstash output to Elasticsearch going. My output conf looks like this: output { elasticsearch { hosts =\> "https://mdbxd1veel1pr..net:9200" ssl =\> true ssl\_certificate\_verification =\> fa…

---

## [File input not reading last line (Logstash)](https://discuss.elastic.co/t/file-input-not-reading-last-line-logstash/211464)

<div class="topic-metadata">

**Author:** [@Ganesh999](https://discuss.elastic.co/u/Ganesh999)\
**Replies:** 0\
**Last updated:** [December 11, 2019, 12:17pm UTC](https://discuss.elastic.co/t/file-input-not-reading-last-line-logstash/211464 "2019-12-11T12:17:41Z")

</div>

Hi , I have been facing issue in parsing log file. As the documentation says a new line will be needed for logstash/filebeat to read the last line. i have added a new line but still it is not reading the last line. Als…

---

## [Cat API stuck if some data nodes are overloaded](https://discuss.elastic.co/t/cat-api-stuck-if-some-data-nodes-are-overloaded/209986)

<div class="topic-metadata">

**Author:** [@entrop](https://discuss.elastic.co/u/entrop)\
**Replies:** 5\
**Last updated:** [December 11, 2019, 12:17pm UTC](https://discuss.elastic.co/t/cat-api-stuck-if-some-data-nodes-are-overloaded/209986 "2019-12-11T12:17:35Z")

</div>

Hi! I am driving a very huge elasticsearch cluster (jdk13, elasticsearch 6.8.5) with ~200tb of data and a lot of nodes spread over several DC. We index about logs ~6-7 tb daily. To be short: curl -X GET "master.elasti…

---

## [Inserting JArray data into Elastic in C#](https://discuss.elastic.co/t/inserting-jarray-data-into-elastic-in-c/211463)

<div class="topic-metadata">

**Author:** [@Ayyappa\_P](https://discuss.elastic.co/u/Ayyappa_P)\
**Replies:** 0\
**Last updated:** [December 11, 2019, 12:16pm UTC](https://discuss.elastic.co/t/inserting-jarray-data-into-elastic-in-c/211463 "2019-12-11T12:16:58Z")

</div>

Hi, I have different JSON Array types, which have Unique JObject types. The structure is like the following. "Fruit": \[ { "Name": "Mango", "Color": "Yellow", "Size": "Large" }, …

---

## [Apache log with grok](https://discuss.elastic.co/t/apache-log-with-grok/211460)

<div class="topic-metadata">

**Author:** [@onelaseth](https://discuss.elastic.co/u/onelaseth)\
**Replies:** 0\
**Last updated:** [December 11, 2019, 12:03pm UTC](https://discuss.elastic.co/t/apache-log-with-grok/211460 "2019-12-11T12:03:27Z")

</div>

Hi, I was wondering how i can structure my apache log file with grok? an example of my log file is: 93.114.45.13 - - \[17/May/2015:10:05:04 +0000\] "GET /reset.css HTTP/1.1" 200 1015 "http://www.semicomplete.com/article…

---

## [React visualization plugin Error: "Circular reference to "registry"](https://discuss.elastic.co/t/react-visualization-plugin-error-circular-reference-to-registry/211394)

<div class="topic-metadata">

**Author:** [@elmaghraoui](https://discuss.elastic.co/u/elmaghraoui)\
**Replies:** 1\
**Last updated:** [December 11, 2019, 11:30am UTC](https://discuss.elastic.co/t/react-visualization-plugin-error-circular-reference-to-registry/211394 "2019-12-11T11:30:33Z")

</div>

I'm trying to develop my first Kibana plugin using ReactJS.I have followed the official doc https://www.elastic.co/guide/en/kibana/current/development-visualization-factory.html. But i'am facing an error when trying to …

---

## [Sending logs to Elastic cloud using C# Logger](https://discuss.elastic.co/t/sending-logs-to-elastic-cloud-using-c-logger/211438)

<div class="topic-metadata">

**Author:** [@Mohamad-Sobhie](https://discuss.elastic.co/u/Mohamad-Sobhie)\
**Replies:** 0\
**Last updated:** [December 11, 2019, 9:21am UTC](https://discuss.elastic.co/t/sending-logs-to-elastic-cloud-using-c-logger/211438 "2019-12-11T09:21:33Z")

</div>

I am using this library https://github.com/serilog/serilog-sinks-elasticsearch to send logs to my Elastic cloud node. I am trying to include the authentication in my code but it's not working. var logger = n…

---

## [ELASCITSEARCH PROCESS DIES](https://discuss.elastic.co/t/elascitsearch-process-dies/211136)

<div class="topic-metadata">

**Author:** [@Anderson\_Oliveira](https://discuss.elastic.co/u/Anderson_Oliveira)\
**Replies:** 6\
**Last updated:** [December 11, 2019, 11:26am UTC](https://discuss.elastic.co/t/elascitsearch-process-dies/211136 "2019-12-11T11:26:23Z")

</div>

I have an cluster with 5 nodes of elasticsearch, all nodes with same RAM 8GB, but elasticsearch process only stay up when i set heap with -Xms1g -Xmx1g, if i set -Xms4g -Xmx4g after some time elasticsearch dies, w…

---

## [Multiple pipelines: Failed to read pipelines yaml file](https://discuss.elastic.co/t/multiple-pipelines-failed-to-read-pipelines-yaml-file/210589)

<div class="topic-metadata">

**Author:** [@WalterLeff](https://discuss.elastic.co/u/WalterLeff)\
**Replies:** 11\
**Last updated:** [December 11, 2019, 11:00am UTC](https://discuss.elastic.co/t/multiple-pipelines-failed-to-read-pipelines-yaml-file/210589 "2019-12-11T11:00:25Z")

</div>

Hi, i've managed to run elastic search with kibana and logstash with JDBC mssql driver for ingesting data. Now i'm trying to run multiple pipelines but i keep getting an error. ELK : 7.4.0 version pipeline.yml : # L…

---

## [Not receiving State\_\* metrics in Azure/Kubernetes](https://discuss.elastic.co/t/not-receiving-state-metrics-in-azure-kubernetes/210490)

<div class="topic-metadata">

**Author:** [@Christiaan](https://discuss.elastic.co/u/Christiaan)\
**Replies:** 1\
**Last updated:** [December 11, 2019, 10:36am UTC](https://discuss.elastic.co/t/not-receiving-state-metrics-in-azure-kubernetes/210490 "2019-12-11T10:36:24Z")

</div>

Hi all, I'm in the middle of setting up an ECK for a Kubernetes cluster on Azure, and I've hit a small snag on Metricbeat. Hoping someone can push me in the right direction. The setup I've got Elastic and related depl…

---

## [How to overcome missing language analyzers?](https://discuss.elastic.co/t/how-to-overcome-missing-language-analyzers/211437)

<div class="topic-metadata">

**Author:** [@ssklavos](https://discuss.elastic.co/u/ssklavos)\
**Replies:** 0\
**Last updated:** [December 11, 2019, 9:08am UTC](https://discuss.elastic.co/t/how-to-overcome-missing-language-analyzers/211437 "2019-12-11T09:08:46Z")

</div>

What is the general approach/best practice when an analyzer is missing? We need to provide support for functionalities like stemming and there is a range of languages missing. I suppose this should be a common issue and…

---

## [Dissector mapping, field not found](https://discuss.elastic.co/t/dissector-mapping-field-not-found/211427)

<div class="topic-metadata">

**Author:** [@Chunbo\_Liao](https://discuss.elastic.co/u/Chunbo_Liao)\
**Replies:** 1\
**Last updated:** [December 11, 2019, 10:22am UTC](https://discuss.elastic.co/t/dissector-mapping-field-not-found/211427 "2019-12-11T10:22:13Z")

</div>

my input file as: file{ path =\> \["/home/11thone/caselog/logmonster///IPDU\*/GtpSnapshot\*.log", "/home/11thone/caselog/logmonster///IPDU\*/mmeDiameter\*.log", "/home/11thone/caselog/logmonster///IPDU\*/s1snapshot\*.log"\] …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1730)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1732)
