# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1783 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1784 --- ## [Wildcard query on complex text/json column](https://discuss.elastic.co/t/wildcard-query-on-complex-text-json-column/207815)
**Author:** [@salihklc](https://discuss.elastic.co/u/salihklc)\ **Replies:** 4\ **Last updated:** [November 14, 2019, 8:09am UTC](https://discuss.elastic.co/t/wildcard-query-on-complex-text-json-column/207815 "2019-11-14T08:09:47Z")
Hello everyone, I'm trying to search a text in the Request,ResponseJSon column with wildcard method ,but It's look like search on only first 10 chars. All the other fields works like as excepted but I really dont get th… --- ## [Do i need to close client everytime I finish querying?](https://discuss.elastic.co/t/do-i-need-to-close-client-everytime-i-finish-querying/207832)
**Author:** [@cjsjyh](https://discuss.elastic.co/u/cjsjyh)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 7:59am UTC](https://discuss.elastic.co/t/do-i-need-to-close-client-everytime-i-finish-querying/207832 "2019-11-14T07:59:31Z")
Do I need to close connection that I made with const elasticClient = new Client(parameters)? or does elasticsearch handle by itself? --- ## [\[ANNOUNCEMENT\] Logstash H3 filter plugin released](https://discuss.elastic.co/t/announcement-logstash-h3-filter-plugin-released/207830)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 7:54am UTC](https://discuss.elastic.co/t/announcement-logstash-h3-filter-plugin-released/207830 "2019-11-14T07:54:35Z")
Following up on the release of the ingest-h3 ingest processor a few weeks ago, I'm happy to announce that a Logstash h3 filter is now also available for generating Uber H3 indexes from a given geolocation point at specif… --- ## [Configuring filebeat to transport csv](https://discuss.elastic.co/t/configuring-filebeat-to-transport-csv/207655)
**Author:** [@Charles\_Yuliansen](https://discuss.elastic.co/u/Charles_Yuliansen)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 7:49am UTC](https://discuss.elastic.co/t/configuring-filebeat-to-transport-csv/207655 "2019-11-14T07:49:23Z")
Im trying to learn using elastic, for my first case case im trying to push csv data to elasticsearch so i can read it in kibana. elasticsearch has been installed on the serverside. Im trying to push it with filebeat f… --- ## [Run logstah pipeline continously in Amazon EC2(Amazon Linux 2 AMI)](https://discuss.elastic.co/t/run-logstah-pipeline-continously-in-amazon-ec2-amazon-linux-2-ami/207823)
**Author:** [@Sunil\_Murali](https://discuss.elastic.co/u/Sunil_Murali)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 6:58am UTC](https://discuss.elastic.co/t/run-logstah-pipeline-continously-in-amazon-ec2-amazon-linux-2-ami/207823 "2019-11-14T06:58:10Z")
Hi All, I have installed logstash in Amazon EC2(Amazon Linux 2 AMI). I am able to execute the filename.conf file by running the following command sudo /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/filename.… --- ## [Bulk request is throwing rejected execution exception](https://discuss.elastic.co/t/bulk-request-is-throwing-rejected-execution-exception/207821)
**Author:** [@Balu\_P](https://discuss.elastic.co/u/Balu_P)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 6:53am UTC](https://discuss.elastic.co/t/bulk-request-is-throwing-rejected-execution-exception/207821 "2019-11-14T06:53:31Z")
{"reason":"rejected execution of processing of \[6013644\]\[indices:data/write/bulk\[s\]\[p\]\]: request: BulkShardRequest \[\[index-test24\]\[3\]\] containing \[52\] requests, target allocation id: HwDviwdxRRexbw-sT7B8WQ, primary term:… --- ## [Using Logstash to upload to S3 log line by line](https://discuss.elastic.co/t/using-logstash-to-upload-to-s3-log-line-by-line/207807)
**Author:** [@Ranika\_Madurawe](https://discuss.elastic.co/u/Ranika_Madurawe)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 5:12am UTC](https://discuss.elastic.co/t/using-logstash-to-upload-to-s3-log-line-by-line/207807 "2019-11-14T05:12:47Z")
I am using LogStash to upload log files in a Volatile K8S system currently running on GCP. I am aiming to upload log files to an AWS s3 bucket using LogStash s3 output plugin. As I understand from the documentation the … --- ## [How to configure Kibana.yml to create custom region maps?](https://discuss.elastic.co/t/how-to-configure-kibana-yml-to-create-custom-region-maps/206778)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 6\ **Last updated:** [November 14, 2019, 6:19am UTC](https://discuss.elastic.co/t/how-to-configure-kibana-yml-to-create-custom-region-maps/206778 "2019-11-14T06:19:18Z")
Hi, I want to create custom Region map for all the cities in UK. I tried the United Kingdom Subdivisions in the vector map dropdown, but it won't show all the drop down. I followed this link: https://www.elastic.co/blog… --- ## [Is there any best way to update existing index without re-indexing and creating alias of index?](https://discuss.elastic.co/t/is-there-any-best-way-to-update-existing-index-without-re-indexing-and-creating-alias-of-index/207622)
**Author:** [@Devang\_Prajapati](https://discuss.elastic.co/u/Devang_Prajapati)\ **Replies:** 10\ **Last updated:** [November 14, 2019, 6:17am UTC](https://discuss.elastic.co/t/is-there-any-best-way-to-update-existing-index-without-re-indexing-and-creating-alias-of-index/207622 "2019-11-14T06:17:59Z")
I've to re-index the data if there is little change in the existing index. I've already done reindexing with creating an alias of the index but in that , I've to wait while reindexing the data from one index to another.… --- ## [How to combine two numerical fields](https://discuss.elastic.co/t/how-to-combine-two-numerical-fields/207817)
**Author:** [@mastinder](https://discuss.elastic.co/u/mastinder)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 6:06am UTC](https://discuss.elastic.co/t/how-to-combine-two-numerical-fields/207817 "2019-11-14T06:06:41Z")
I want to combine these two fields | (?\(-|%{INT})) | (?\(-|%{INT})) | and want one field like tota\_bytes=byte\_read+byte\_written , can someone guide me how to do it. %{IP:client-ip}+ | %{WORD:p… --- ## [Need to reduce Kibana loading time](https://discuss.elastic.co/t/need-to-reduce-kibana-loading-time/207628)
**Author:** [@Akhil\_Kaithoju](https://discuss.elastic.co/u/Akhil_Kaithoju)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 5:53am UTC](https://discuss.elastic.co/t/need-to-reduce-kibana-loading-time/207628 "2019-11-14T05:53:10Z")
Is there any way to reduce the kibana loading ? #Clicking on any plugin takes 4-5 seconds to load Thanks --- ## [Change the logfilepath for internal logstash files](https://discuss.elastic.co/t/change-the-logfilepath-for-internal-logstash-files/207809)
**Author:** [@Kamesh\_M](https://discuss.elastic.co/u/Kamesh_M)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 5:36am UTC](https://discuss.elastic.co/t/change-the-logfilepath-for-internal-logstash-files/207809 "2019-11-14T05:36:52Z")
Need to change the logpath for the below internal logstash files logstash.err logstash.log logstash.stdout Currently, its writing in /var/log/logstash and this needs to be changed to different path. Version : logsta… --- ## [Nested内のオブジェクト数で絞り込みする方法について](https://discuss.elastic.co/t/nested/207430)
**Author:** [@onorioriori](https://discuss.elastic.co/u/onorioriori)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 4:55am UTC](https://discuss.elastic.co/t/nested/207430 "2019-11-14T04:55:18Z")
お世話になっております。 以前質問させて頂いた「Nested内のオブジェクト数でソートする方法について」の延長上にあるのですが、 以下のようなnestedフィールドのインデックスを作成し、 PUT my\_index { "mappings": { "properties": { "user": { "type": "nested" } } } } nested内… --- ## [JVM Heap size too large?](https://discuss.elastic.co/t/jvm-heap-size-too-large/207312)
**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\ **Replies:** 4\ **Last updated:** [November 14, 2019, 4:42am UTC](https://discuss.elastic.co/t/jvm-heap-size-too-large/207312 "2019-11-14T04:42:33Z")
Hi, The heap size on all our nodes is set to 30GB, but having read A Heap of Trouble, and looking at the graphs in the Kibana Stack Monitoring application, I believe our heap size is likely too large: The graphs for … --- ## [X-Pack Monitoring send\_email\_to\_admin](https://discuss.elastic.co/t/x-pack-monitoring-send-email-to-admin/207637)
**Author:** [@insanity13](https://discuss.elastic.co/u/insanity13)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 3:51am UTC](https://discuss.elastic.co/t/x-pack-monitoring-send-email-to-admin/207637 "2019-11-14T03:51:53Z")
ElasticCloud, Got X-Pack Watchers with action send\_email\_to\_admin What address is used to send the message? Letters from these watchers do not come, only from those that are created manually with an email. --- ## [Progress on APM for Java 8 based ERP](https://discuss.elastic.co/t/progress-on-apm-for-java-8-based-erp/207699)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 3\ **Last updated:** [November 14, 2019, 3:38am UTC](https://discuss.elastic.co/t/progress-on-apm-for-java-8-based-erp/207699 "2019-11-14T03:38:21Z")
Continuing the discussion from Is APM perfromance like this because of Java version 1.7 at the Application side: Hi All, A small update I was able to setup APM for my Adempiere which is using Java 8, in the APM I am … --- ## [Loading Index Template](https://discuss.elastic.co/t/loading-index-template/207793)
**Author:** [@msauter](https://discuss.elastic.co/u/msauter)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 3:15am UTC](https://discuss.elastic.co/t/loading-index-template/207793 "2019-11-14T03:15:03Z")
Hello. Completely new to Elastic as well as this form. Initially working with auditbeat. Using 7.4. I am planning to send all of the captured audit information directly to Logstash first. Since I’ll use Logstash to … --- ## [Kibana interfaces took lots of time, restart the instance verything works fine](https://discuss.elastic.co/t/kibana-interfaces-took-lots-of-time-restart-the-instance-verything-works-fine/206713)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 3:14am UTC](https://discuss.elastic.co/t/kibana-interfaces-took-lots-of-time-restart-the-instance-verything-works-fine/206713 "2019-11-14T03:14:43Z")
Hi All, My elasticsearch environment is apt list elasticsearch kibana filebeat auditbeat metricbeat Listing... Done auditbeat/stable,now 7.4.2 amd64 \[installed\] elasticsearch/stable,now 7.4.2 amd64 \[installed\] fi… --- ## [Http minimum compression size](https://discuss.elastic.co/t/http-minimum-compression-size/207800)
**Author:** [@Jason\_Wee](https://discuss.elastic.co/u/Jason_Wee)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 3:01am UTC](https://discuss.elastic.co/t/http-minimum-compression-size/207800 "2019-11-14T03:01:44Z")
Hi, when configuration http.compression set to true, but with another configuration to specify for instance, http.compression.min\_size = 2048 where elasticsearch will only apply compression if the filesize is greater th… --- ## [Warning message seen at the logs "InvalidFrameProtocolException: Invalid version of beats protocol: 71"](https://discuss.elastic.co/t/warning-message-seen-at-the-logs-invalidframeprotocolexception-invalid-version-of-beats-protocol-71/205789)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 1:49am UTC](https://discuss.elastic.co/t/warning-message-seen-at-the-logs-invalidframeprotocolexception-invalid-version-of-beats-protocol-71/205789 "2019-11-14T01:49:00Z")
Hi All, Good morning at the logstash logs I can see some warning message, since it is warning nothing wrong , but I am posting the message here for giving the feedback 8.3.13:21374\] Handling exception: org.logstash.b… --- ## [CPU temp and Deployment status](https://discuss.elastic.co/t/cpu-temp-and-deployment-status/206659)
**Author:** [@RayKishev](https://discuss.elastic.co/u/RayKishev)\ **Replies:** 8\ **Last updated:** [November 14, 2019, 12:51am UTC](https://discuss.elastic.co/t/cpu-temp-and-deployment-status/206659 "2019-11-14T00:51:08Z")
Hello Elastic Team, I would to build my own Dashboard in Kibana with specific data. Will i be able to capture the CPU temperature, ingest status and Deployment status data in Elasticsearch and create a Dashboard with th… --- ## [Indexing date field in elasticsearch](https://discuss.elastic.co/t/indexing-date-field-in-elasticsearch/207383)
**Author:** [@RITZ\_VERMA](https://discuss.elastic.co/u/RITZ_VERMA)\ **Replies:** 5\ **Last updated:** [November 14, 2019, 12:15am UTC](https://discuss.elastic.co/t/indexing-date-field-in-elasticsearch/207383 "2019-11-14T00:15:11Z")
i have applied following mapping in my index PUT prince2/ { "mappings": { "properties": { "account\_id": { "type": "long" }, "created\_at": { "type": "date" }, "email": { "type": "text", "fields": { "keyword"… --- ## [Default sort all score 0](https://discuss.elastic.co/t/default-sort-all-score-0/207787)
**Author:** [@Alifost](https://discuss.elastic.co/u/Alifost)\ **Replies:** 0\ **Last updated:** [November 13, 2019, 10:20pm UTC](https://discuss.elastic.co/t/default-sort-all-score-0/207787 "2019-11-13T22:20:54Z")
Hello, I just transferred a site from elasticsearch 2.3 to version 6.8.4 . With simple query(filter) , all scores are 0 (same with version 2.3) however, the order of the elements returned is not the same Would the de… --- ## [Best way to update all documents in an index](https://discuss.elastic.co/t/best-way-to-update-all-documents-in-an-index/207785)
**Author:** [@Nox](https://discuss.elastic.co/u/Nox)\ **Replies:** 0\ **Last updated:** [November 13, 2019, 10:03pm UTC](https://discuss.elastic.co/t/best-way-to-update-all-documents-in-an-index/207785 "2019-11-13T22:03:50Z")
Hi, I added two new properties (type = double) to a mapping. What is the best way to update all the documents in an index with that mapping in Elasticsearch 6.3. Thanks, --- ## [Max Size of query result for bool queries](https://discuss.elastic.co/t/max-size-of-query-result-for-bool-queries/207725)
**Author:** [@DRoeming](https://discuss.elastic.co/u/DRoeming)\ **Replies:** 1\ **Last updated:** [November 13, 2019, 9:34pm UTC](https://discuss.elastic.co/t/max-size-of-query-result-for-bool-queries/207725 "2019-11-13T21:34:39Z")
Hi, we use nest and we want to display the count of query result. But unfortunatelly the max size for bool query is 10000. How can I increase the number of max results for bool queries. Otherwise is there another way to… --- ## [Having issues with more than 1 instance](https://discuss.elastic.co/t/having-issues-with-more-than-1-instance/207154)
**Author:** [@booboothefool](https://discuss.elastic.co/u/booboothefool)\ **Replies:** 2\ **Last updated:** [November 13, 2019, 9:30pm UTC](https://discuss.elastic.co/t/having-issues-with-more-than-1-instance/207154 "2019-11-13T21:30:05Z")
Hi there so I've gotten the single instance configuration to work. And Kibana is able to connect to it. apiVersion: elasticsearch.k8s.elastic.co/v1beta1 kind: Elasticsearch metadata: name: elastic spec: version: 7.4… --- ## [Cannot set password for new user Kibana ECK 7.4.2](https://discuss.elastic.co/t/cannot-set-password-for-new-user-kibana-eck-7-4-2/207437)
**Author:** [@oaaraya](https://discuss.elastic.co/u/oaaraya)\ **Replies:** 10\ **Last updated:** [November 13, 2019, 9:13pm UTC](https://discuss.elastic.co/t/cannot-set-password-for-new-user-kibana-eck-7-4-2/207437 "2019-11-13T21:13:49Z")
Brand new cluster running on kubernetes ECK 7.4.2, open up Kibana log in as elastic user, create a new user, log out and cannot log in with wrong password. I've tried the obvious, deleted the user, changed the password … --- ## [In Ubuntu 18.04 auditbeat logs goes to syslog than /var/log/auditbeat](https://discuss.elastic.co/t/in-ubuntu-18-04-auditbeat-logs-goes-to-syslog-than-var-log-auditbeat/206269)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 3\ **Last updated:** [November 13, 2019, 9:03pm UTC](https://discuss.elastic.co/t/in-ubuntu-18-04-auditbeat-logs-goes-to-syslog-than-var-log-auditbeat/206269 "2019-11-13T21:03:29Z")
Hi All, Good morning I am using Ubuntu 18.04 I have auditbeat installed and running on my system, in the auditbeat.yml files I have given the following logging.level: info path.logs: /var/log/auditbeat When I chec… --- ## [Compare Pf\_sense rule logs with a list](https://discuss.elastic.co/t/compare-pf-sense-rule-logs-with-a-list/207777)
**Author:** [@athos\_camargo](https://discuss.elastic.co/u/athos_camargo)\ **Replies:** 0\ **Last updated:** [November 13, 2019, 8:56pm UTC](https://discuss.elastic.co/t/compare-pf-sense-rule-logs-with-a-list/207777 "2019-11-13T20:56:05Z")
I am trying to do a specific dashboard based on PFSENSE rules logs, follow stack that I am using: Pfsense send logs via syslog, the log server have a fluent.d receiving that logs, then send to elastic. What I am alread… --- ## [Persist data between log lines with ruby filter](https://discuss.elastic.co/t/persist-data-between-log-lines-with-ruby-filter/206068)
**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\ **Replies:** 4\ **Last updated:** [November 13, 2019, 7:16pm UTC](https://discuss.elastic.co/t/persist-data-between-log-lines-with-ruby-filter/206068 "2019-11-13T19:16:19Z")
What is the best way to persist data between two messages using the ruby filter? For example to include the previous message parsed I can use global variables like this: input { generator { lines =\> \[ "line… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1782) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1784)