# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1744 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1745 --- ## [7.5.0 Custom Space Avatar Image](https://discuss.elastic.co/t/7-5-0-custom-space-avatar-image/210439)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [December 4, 2019, 10:54am UTC](https://discuss.elastic.co/t/7-5-0-custom-space-avatar-image/210439 "2019-12-04T10:54:12Z")
What are the requirements here for the image? I tried uploading and image and it got cropped to hell. I inspected the space image and saw it was 40x40, resized my avatar image and tried uploading again, still cropped..… --- ## [Curator not able to delete indices](https://discuss.elastic.co/t/curator-not-able-to-delete-indices/210505)
**Author:** [@prawin84](https://discuss.elastic.co/u/prawin84)\ **Replies:** 0\ **Last updated:** [December 4, 2019, 10:30am UTC](https://discuss.elastic.co/t/curator-not-able-to-delete-indices/210505 "2019-12-04T10:30:53Z")
Hi Team, I have a kubernetes cluster environment running with multiple pods. configured EFK in k8 to get the logs. I can able to see the logs in kibana dashboard but the curator is not deleting the indices from elastic … --- ## [Value display in kibana from the document](https://discuss.elastic.co/t/value-display-in-kibana-from-the-document/210497)
**Author:** [@stongia](https://discuss.elastic.co/u/stongia)\ **Replies:** 0\ **Last updated:** [December 4, 2019, 9:45am UTC](https://discuss.elastic.co/t/value-display-in-kibana-from-the-document/210497 "2019-12-04T09:45:04Z")
I want to display some content from the specific document which is searched by the query. Is it possible to display one specific value from the document on the visualization? E.g - I want to print the last update date … --- ## [Logstash bug in arcsight module?](https://discuss.elastic.co/t/logstash-bug-in-arcsight-module/210498)
**Author:** [@m4rc0](https://discuss.elastic.co/u/m4rc0)\ **Replies:** 0\ **Last updated:** [December 4, 2019, 9:47am UTC](https://discuss.elastic.co/t/logstash-bug-in-arcsight-module/210498 "2019-12-04T09:47:27Z")
Hi Team, we recently encounter strange WARN messages from Logstash since we're using 7.3.0 \[2019-12-04T08:46:18,174\]\[WARN \]\[org.apache.kafka.clients.NetworkClient\] \[Consumer clientId=logstash-0, groupId=logstash\] Conn… --- ## [Update doc success, but can't search the doc in 6.8](https://discuss.elastic.co/t/update-doc-success-but-cant-search-the-doc-in-6-8/210489)
**Author:** [@NigelZHANG](https://discuss.elastic.co/u/NigelZHANG)\ **Replies:** 3\ **Last updated:** [December 4, 2019, 9:36am UTC](https://discuss.elastic.co/t/update-doc-success-but-cant-search-the-doc-in-6-8/210489 "2019-12-04T09:36:20Z")
I delete the doc and force merge the index, It show the result is updated when I put the doc again, but the doc can't search. I check the es doc that tell me the doc will not delete immediately, but why I can't search it… --- ## [Sincedb and ES unreachable](https://discuss.elastic.co/t/sincedb-and-es-unreachable/210491)
**Author:** [@boubakr](https://discuss.elastic.co/u/boubakr)\ **Replies:** 0\ **Last updated:** [December 4, 2019, 9:02am UTC](https://discuss.elastic.co/t/sincedb-and-es-unreachable/210491 "2019-12-04T09:02:13Z")
What happens to sincedb if I get this warning? \[WARN \]\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"http://localhost:9200/", :error\_type=\>LogStash::Ou… --- ## [Is it possible to filter multiple records of one index from another index in elasticsearch query?](https://discuss.elastic.co/t/is-it-possible-to-filter-multiple-records-of-one-index-from-another-index-in-elasticsearch-query/210464)
**Author:** [@adarshzphin](https://discuss.elastic.co/u/adarshzphin)\ **Replies:** 1\ **Last updated:** [December 4, 2019, 8:36am UTC](https://discuss.elastic.co/t/is-it-possible-to-filter-multiple-records-of-one-index-from-another-index-in-elasticsearch-query/210464 "2019-12-04T08:36:47Z")
Lets say I have 100 records in index1 and 10 records in index2. And I want to get like this: select \* from index1 where id not in (select id from index2) Can we have the same above query in elasticsearch or is it even … --- ## [Getting recent searched result](https://discuss.elastic.co/t/getting-recent-searched-result/210482)
**Author:** [@afiq](https://discuss.elastic.co/u/afiq)\ **Replies:** 1\ **Last updated:** [December 4, 2019, 8:32am UTC](https://discuss.elastic.co/t/getting-recent-searched-result/210482 "2019-12-04T08:32:11Z")
Hi guys. I'm pretty new with elasticsearch. How do I write a query to get results of most recent searched documents and sorted. For example if I used to search that specific document, when I come back and search it agai… --- ## [Produce report on latest timestamp summarised by hostname](https://discuss.elastic.co/t/produce-report-on-latest-timestamp-summarised-by-hostname/210123)
**Author:** [@fredden68](https://discuss.elastic.co/u/fredden68)\ **Replies:** 3\ **Last updated:** [December 4, 2019, 8:28am UTC](https://discuss.elastic.co/t/produce-report-on-latest-timestamp-summarised-by-hostname/210123 "2019-12-04T08:28:54Z")
I had this working under Kibana 6.x, reporting on all nodes with the latest timestamp older than a set period (like 15 mins). But I reinstalled with 7.x and no longer can generate the queries / visuals for this. How do … --- ## [Logstash 7.5.0 configuration error](https://discuss.elastic.co/t/logstash-7-5-0-configuration-error/210385)
**Author:** [@Jeffreyshoptrader](https://discuss.elastic.co/u/Jeffreyshoptrader)\ **Replies:** 2\ **Last updated:** [December 4, 2019, 8:25am UTC](https://discuss.elastic.co/t/logstash-7-5-0-configuration-error/210385 "2019-12-04T08:25:43Z")
Hi I'm new to ELK and I want to connect Logstash to Elasticsearch, but my data doesn't go to Elasticsearch. Everytime I try to run Logstash I get an error. \[2019-12-03T16:14:10,102\]\[INFO \]\[logstash.runner \] Sta… --- ## [Using Application join](https://discuss.elastic.co/t/using-application-join/210451)
**Author:** [@Haneul\_Kim](https://discuss.elastic.co/u/Haneul_Kim)\ **Replies:** 5\ **Last updated:** [December 4, 2019, 8:12am UTC](https://discuss.elastic.co/t/using-application-join/210451 "2019-12-04T08:12:50Z")
by reading https://www.elastic.co/guide/en/elasticsearch/guide/current/application-joins.html#application-joins Now I understand I can get list of values then use them as a filter. Since version 5.0 "filtered" query has… --- ## [Timeout issue when using reindex API](https://discuss.elastic.co/t/timeout-issue-when-using-reindex-api/210484)
**Author:** [@ymin1103](https://discuss.elastic.co/u/ymin1103)\ **Replies:** 0\ **Last updated:** [December 4, 2019, 7:44am UTC](https://discuss.elastic.co/t/timeout-issue-when-using-reindex-api/210484 "2019-12-04T07:44:49Z")
Hello. I am using elasticsearch and kibana with version 7.5.0 now. My cluster consists of 1 master node, 2 data nodes and 1 coordi node. I tried to reindex an index with about 200k documents to a new index within the c… --- ## [Specify known password for the elasticsearch user](https://discuss.elastic.co/t/specify-known-password-for-the-elasticsearch-user/210239)
**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\ **Replies:** 2\ **Last updated:** [December 4, 2019, 7:21am UTC](https://discuss.elastic.co/t/specify-known-password-for-the-elasticsearch-user/210239 "2019-12-04T07:21:33Z")
As far as I understand, ECK will generate a password and place it in a secrets file. This doesn't suit our workflow, we want to provide known values for all things upfront, including the elastic user password. Is there a… --- ## [How to fetch all records from elasticsearch?](https://discuss.elastic.co/t/how-to-fetch-all-records-from-elasticsearch/210294)
**Author:** [@navdeepk](https://discuss.elastic.co/u/navdeepk)\ **Replies:** 2\ **Last updated:** [December 4, 2019, 6:59am UTC](https://discuss.elastic.co/t/how-to-fetch-all-records-from-elasticsearch/210294 "2019-12-04T06:59:57Z")
I am working on Log analyzer tool.....Using Angular 6 on front end and node js on back end. By using filebeat tool to parse access logs, I have successfully insert logs in elasticsearch... Now am getting problem by fetc… --- ## [ELK7.4.2版本多节点集群可以配置免费的Xpack吗](https://discuss.elastic.co/t/elk7-4-2-xpack/210469)
**Author:** [@wsy](https://discuss.elastic.co/u/wsy)\ **Replies:** 2\ **Last updated:** [December 4, 2019, 6:58am UTC](https://discuss.elastic.co/t/elk7-4-2-xpack/210469 "2019-12-04T06:58:51Z")
已有 : 我在CentOS上配置了版本号7.4.2的3个节点的elasticsearch 在节点master上配置了kibana 关闭安全验证时 服务是正常的 这两个web页面是可以正常访问的 目标 : 现在想给我的elasticsearch和kibana配置X-pack安全验证(登录web页面时设置成需要用户名密码才可访问 并且配置TLS验证) 操作 : 我按照https://www.elastic.co/guide/en/ela… --- ## [Logstash Configure](https://discuss.elastic.co/t/logstash-configure/210471)
**Author:** [@Vo\_Phan\_Hong\_Dung](https://discuss.elastic.co/u/Vo_Phan_Hong_Dung)\ **Replies:** 0\ **Last updated:** [December 4, 2019, 6:44am UTC](https://discuss.elastic.co/t/logstash-configure/210471 "2019-12-04T06:44:35Z")
Hello guys, Please help me create a config logstash to sync data from sql server to elastic-search. Thanks --- ## [GC Collection (OLD) on Data Node brings node offline](https://discuss.elastic.co/t/gc-collection-old-on-data-node-brings-node-offline/209230)
**Author:** [@Newbie2019](https://discuss.elastic.co/u/Newbie2019)\ **Replies:** 6\ **Last updated:** [December 4, 2019, 1:41am UTC](https://discuss.elastic.co/t/gc-collection-old-on-data-node-brings-node-offline/209230 "2019-12-04T01:41:57Z")
Hi all, I am a newbie to elasticsearch, and I have an issue with my ES cluster.d). “Something” triggers one of the data nodes to do an extensive old GC which lasts for a few minutes. During this GC’ing the master node … --- ## [Passing missing\_bucket argument in TermsValuesSourceBuilder java api](https://discuss.elastic.co/t/passing-missing-bucket-argument-in-termsvaluessourcebuilder-java-api/210440)
**Author:** [@Seetha93](https://discuss.elastic.co/u/Seetha93)\ **Replies:** 0\ **Last updated:** [December 3, 2019, 11:59pm UTC](https://discuss.elastic.co/t/passing-missing-bucket-argument-in-termsvaluessourcebuilder-java-api/210440 "2019-12-03T23:59:49Z")
While creating CompositeAggregation using CompositeAggregationBuilder and TermsValuesSourceBuilder, is it possible to pass missing\_ bucket? I mean is the following constructor exists ? TermsValuesSourceBuilder(name, … --- ## [How to handle type conflicts emerging from json logs?](https://discuss.elastic.co/t/how-to-handle-type-conflicts-emerging-from-json-logs/210350)
**Author:** [@Naseem](https://discuss.elastic.co/u/Naseem)\ **Replies:** 1\ **Last updated:** [December 3, 2019, 11:17pm UTC](https://discuss.elastic.co/t/how-to-handle-type-conflicts-emerging-from-json-logs/210350 "2019-12-03T23:17:45Z")
Hello, we prefer structured logs as it helps us perform filtered searches in ES, however there are oftentimes conflicts for certain fields, for example ts, timestamp or time depending on the app may be of type date or of… --- ## [Can I use 7.x elasticsearch client library "org.elasticsearch.client:elasticsearch-rest-client" with 6.x elasticsearch server](https://discuss.elastic.co/t/can-i-use-7-x-elasticsearch-client-library-org-elasticsearch-client-elasticsearch-rest-client-with-6-x-elasticsearch-server/210368)
**Author:** [@Dmitry\_Sysolyatin](https://discuss.elastic.co/u/Dmitry_Sysolyatin)\ **Replies:** 1\ **Last updated:** [December 3, 2019, 11:14pm UTC](https://discuss.elastic.co/t/can-i-use-7-x-elasticsearch-client-library-org-elasticsearch-client-elasticsearch-rest-client-with-6-x-elasticsearch-server/210368 "2019-12-03T23:14:26Z")
Hi, Can I use 7.x elasticsearch client library "org.elasticsearch.client:elasticsearch-rest-client" with 6.x elasticsearch server. Is there backward compatibility in client library ? --- ## [Grok filter for the logs coming from Nagios](https://discuss.elastic.co/t/grok-filter-for-the-logs-coming-from-nagios/210435)
**Author:** [@Morymogh](https://discuss.elastic.co/u/Morymogh)\ **Replies:** 1\ **Last updated:** [December 3, 2019, 11:07pm UTC](https://discuss.elastic.co/t/grok-filter-for-the-logs-coming-from-nagios/210435 "2019-12-03T23:07:46Z")
Can someone please assist to write a grok filter for the below raw data captured by tcpdump? The logs are tagged as "siem" to be forwarded from a Nagios server to our elasticsearch, basically \["siem"\] shows end of the e… --- ## [Establish a user with limited ability to change dashboard filtering](https://discuss.elastic.co/t/establish-a-user-with-limited-ability-to-change-dashboard-filtering/210215)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 3\ **Last updated:** [December 3, 2019, 9:37pm UTC](https://discuss.elastic.co/t/establish-a-user-with-limited-ability-to-change-dashboard-filtering/210215 "2019-12-03T21:37:42Z")
Hi! In visualizations, I made two option lists , option list A and option list B, in order to filter my data and i added this in a dashboard. Option list A is "parent" of option list B and has as options option1 and opt… --- ## [Highlighting two fields while query one field](https://discuss.elastic.co/t/highlighting-two-fields-while-query-one-field/210223)
**Author:** [@shani\_angarkadu](https://discuss.elastic.co/u/shani_angarkadu)\ **Replies:** 2\ **Last updated:** [December 3, 2019, 9:26pm UTC](https://discuss.elastic.co/t/highlighting-two-fields-while-query-one-field/210223 "2019-12-03T21:26:45Z")
I am trying to highlight the match words on two fields while the query searches on 1 filed. for example, if I search for cancer in terms, I want the highlight in both terms and another filed pref\_terms. { "highlight"… --- ## [Output of \`logstash -e 'input { stdin { } } output { stdout {} }'\`](https://discuss.elastic.co/t/output-of-logstash-e-input-stdin-output-stdout/210244)
**Author:** [@Willl](https://discuss.elastic.co/u/Willl)\ **Replies:** 2\ **Last updated:** [December 3, 2019, 9:24pm UTC](https://discuss.elastic.co/t/output-of-logstash-e-input-stdin-output-stdout/210244 "2019-12-03T21:24:08Z")
Hi Testing a new 7.5.0 setup. Brand new. Logstash doc says test it with logstash -e 'input { stdin { } } output { stdout {} }' and then enter "hello world" after logstash says "pipeline is started" and I should se… --- ## [\[ERROR\] Elastic 7.4.2 connection errors in AWS failing to join cluster](https://discuss.elastic.co/t/error-elastic-7-4-2-connection-errors-in-aws-failing-to-join-cluster/210422)
**Author:** [@wambozi](https://discuss.elastic.co/u/wambozi)\ **Replies:** 2\ **Last updated:** [December 3, 2019, 8:58pm UTC](https://discuss.elastic.co/t/error-elastic-7-4-2-connection-errors-in-aws-failing-to-join-cluster/210422 "2019-12-03T20:58:08Z")
I'm trying to build a new, 6 node cluster in AWS (not the managed service, just the servers) and I'm getting errors around the nodes not being able to connect to each other. All instances are in the same subnet, in the … --- ## [Kibana no longer working](https://discuss.elastic.co/t/kibana-no-longer-working/208399)
**Author:** [@getorca](https://discuss.elastic.co/u/getorca)\ **Replies:** 13\ **Last updated:** [December 3, 2019, 8:09pm UTC](https://discuss.elastic.co/t/kibana-no-longer-working/208399 "2019-12-03T20:09:40Z")
As of a few hours ago, Kibana is no longer working. it crashed suddenly and no the pod for Kibana is failing to achieve a Ready state. The ES pods are still working fine. The most obvious errors from the kibana pods see… --- ## [FSCrawler - Ingest pipeline error](https://discuss.elastic.co/t/fscrawler-ingest-pipeline-error/210275)
**Author:** [@c95mbq](https://discuss.elastic.co/u/c95mbq)\ **Replies:** 2\ **Last updated:** [December 3, 2019, 8:21pm UTC](https://discuss.elastic.co/t/fscrawler-ingest-pipeline-error/210275 "2019-12-03T20:21:44Z")
Hi, I'm using FSCrawler 2.7 and Elasticsearch and Kibana 7.1.1. I have a single document where I want to extract and add two separate fields from said document. I have the following POST \_ingest/pipeline/\_simulate {… --- ## [Kibana Connecting To Elasticsearch Behind ALB](https://discuss.elastic.co/t/kibana-connecting-to-elasticsearch-behind-alb/209759)
**Author:** [@immolation](https://discuss.elastic.co/u/immolation)\ **Replies:** 4\ **Last updated:** [December 3, 2019, 8:06pm UTC](https://discuss.elastic.co/t/kibana-connecting-to-elasticsearch-behind-alb/209759 "2019-12-03T20:06:53Z")
Hello! I have my EFK stack running on Kubernetes, and with the ELASTICSEARCH\_URL set to http://elasticsearch.logging.svc.cluster.local:9200 it works just fine. I need Kibana to connect to an Elasticsearch running in each… --- ## [Job for elasticsearch.service failed because the control process exited with error code- VPS CentOs 7 Linux](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code-vps-centos-7-linux/210056)
**Author:** [@balu\_thomas](https://discuss.elastic.co/u/balu_thomas)\ **Replies:** 3\ **Last updated:** [December 3, 2019, 7:24pm UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code-vps-centos-7-linux/210056 "2019-12-03T19:24:55Z")
\[root@--217-28 Packages\]# systemctl status elasticsearch.service -l ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: fail… --- ## [Winlogbeat ILM and logstash](https://discuss.elastic.co/t/winlogbeat-ilm-and-logstash/210404)
**Author:** [@tomrade](https://discuss.elastic.co/u/tomrade)\ **Replies:** 2\ **Last updated:** [December 3, 2019, 6:25pm UTC](https://discuss.elastic.co/t/winlogbeat-ilm-and-logstash/210404 "2019-12-03T18:25:07Z")
Hey everyone ive been having issues getting ILM to work with winlogbeat and logstash I don't have ES access for winlogbeat and I dont want to create a seperate windows vm (in my container lab) just to setup ILM First … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1743) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1745)