# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1792 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1793 --- ## [Elasticsearch with winlogbeat and geoip](https://discuss.elastic.co/t/elasticsearch-with-winlogbeat-and-geoip/207084)
**Author:** [@scout](https://discuss.elastic.co/u/scout)\ **Replies:** 0\ **Last updated:** [November 8, 2019, 9:59am UTC](https://discuss.elastic.co/t/elasticsearch-with-winlogbeat-and-geoip/207084 "2019-11-08T09:59:15Z")
Hi, I'm trying to enrich log data with geoip information from winlogbeat to elasticsearch but I cannot find how to enable/ enrich that data. I tried to look for document https://www.elastic.co/guide/en/elasticsearch/re… --- ## [Logstash not loading csv file to elasticsearch](https://discuss.elastic.co/t/logstash-not-loading-csv-file-to-elasticsearch/206651)
**Author:** [@Gowtham\_Gandham](https://discuss.elastic.co/u/Gowtham_Gandham)\ **Replies:** 2\ **Last updated:** [November 9, 2019, 5:17pm UTC](https://discuss.elastic.co/t/logstash-not-loading-csv-file-to-elasticsearch/206651 "2019-11-09T17:17:25Z")
input { file { path =\> "/home/sigma/Desktop/docker-elk/logstash/\*.csv" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } ## Add your filters / logstash plugins configuration here filter { csv { separ… --- ## [Remove Links codes or short links, in a TagCloud](https://discuss.elastic.co/t/remove-links-codes-or-short-links-in-a-tagcloud/207148)
**Author:** [@enyerqb](https://discuss.elastic.co/u/enyerqb)\ **Replies:** 1\ **Last updated:** [November 9, 2019, 5:03pm UTC](https://discuss.elastic.co/t/remove-links-codes-or-short-links-in-a-tagcloud/207148 "2019-11-09T17:03:59Z")
Hi guys, I hope you can help me in this awesome community, I have trouble visualizing a Wordcloud, I ingested the data and is indexed however I found short links pattern in the text that has 10 characters long in the Tag… --- ## [Losing documents while reindexing 4 million documents](https://discuss.elastic.co/t/losing-documents-while-reindexing-4-million-documents/206855)
**Author:** [@Vikas\_Kumar1](https://discuss.elastic.co/u/Vikas_Kumar1)\ **Replies:** 3\ **Last updated:** [November 9, 2019, 4:04pm UTC](https://discuss.elastic.co/t/losing-documents-while-reindexing-4-million-documents/206855 "2019-11-09T16:04:55Z")
I am re-indexing 4 million documents. When I create a new index without any mappings (default mappings) it works fine. Means every document get indexed into the new one from source index. But when I create new index wi… --- ## [Struggling to parse JSON data with logstash](https://discuss.elastic.co/t/struggling-to-parse-json-data-with-logstash/207186)
**Author:** [@Lee\_Quince](https://discuss.elastic.co/u/Lee_Quince)\ **Replies:** 4\ **Last updated:** [November 9, 2019, 3:21pm UTC](https://discuss.elastic.co/t/struggling-to-parse-json-data-with-logstash/207186 "2019-11-09T15:21:39Z")
So I have a basic http json post that is sent on the format of { "sq": 3, "ht": \[ { "si": "90:B6:86:42:2C:9F", "sm": "90B686", "bi": "00:00:00:00:00:00", "ap": 0, "ot": 1473246736, "ct": 1473246736, "sh": -90, … --- ## [Logstash json to multiple documents](https://discuss.elastic.co/t/logstash-json-to-multiple-documents/207007)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 8\ **Last updated:** [November 9, 2019, 2:18pm UTC](https://discuss.elastic.co/t/logstash-json-to-multiple-documents/207007 "2019-11-09T14:18:49Z")
I have an input in the below format: \\\1\\this is first event\\\\2\\this is second event\\\\3\\this is third event\>\\\\4\\<… --- ## [Parse JSON](https://discuss.elastic.co/t/parse-json/207104)
**Author:** [@Buzz](https://discuss.elastic.co/u/Buzz)\ **Replies:** 9\ **Last updated:** [November 9, 2019, 2:13pm UTC](https://discuss.elastic.co/t/parse-json/207104 "2019-11-09T14:13:58Z")
Hi All, I would like to ask you for a help with parsing data from JSON. I have a log file with huge JSON that contains non parsed parts: dataj.AffectedItems { "Attachments": "ATT00001.png (24733b); ATT00002.jpg (24684… --- ## [Batch size in logstash](https://discuss.elastic.co/t/batch-size-in-logstash/206919)
**Author:** [@Ankit\_Sawant](https://discuss.elastic.co/u/Ankit_Sawant)\ **Replies:** 7\ **Last updated:** [November 9, 2019, 7:57am UTC](https://discuss.elastic.co/t/batch-size-in-logstash/206919 "2019-11-09T07:57:34Z")
I have 4 events having unique Id and I am processing these event in aggregate filter but with batch size of 250. Logstash is processing these events out of order I am not getting exact result, with batch size of 2 the ev… --- ## [What is the alternative way of querying \_all?](https://discuss.elastic.co/t/what-is-the-alternative-way-of-querying-all/207201)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 0\ **Last updated:** [November 9, 2019, 3:16am UTC](https://discuss.elastic.co/t/what-is-the-alternative-way-of-querying-all/207201 "2019-11-09T03:16:07Z")
From elasticsearch 6.x \_all has been deprecated. I have a matchQuery like below QueryBuilders.boolQuery() .should(QueryBuilders.matchQuery("\_all", typeAndName.name)) .shou… --- ## [Jdbc connection](https://discuss.elastic.co/t/jdbc-connection/207118)
**Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\ **Replies:** 6\ **Last updated:** [November 9, 2019, 3:30am UTC](https://discuss.elastic.co/t/jdbc-connection/207118 "2019-11-09T03:30:44Z")
How do we know which jar version to use with a particular version of java and logstash? --- ## [Size is not working with composite aggregations](https://discuss.elastic.co/t/size-is-not-working-with-composite-aggregations/207191)
**Author:** [@Seetha93](https://discuss.elastic.co/u/Seetha93)\ **Replies:** 0\ **Last updated:** [November 9, 2019, 12:51am UTC](https://discuss.elastic.co/t/size-is-not-working-with-composite-aggregations/207191 "2019-11-09T00:51:36Z")
I have the following query: GET index\_name/\_search { "size": 0, "aggs": { "my\_buckets": { "composite": { "size": 100, "sources": \[ { "field1": { "terms"… --- ## [I need to Configure a Watcher that after of the alarm is triggered for first time, the interval de execution increase to 30 minutes](https://discuss.elastic.co/t/i-need-to-configure-a-watcher-that-after-of-the-alarm-is-triggered-for-first-time-the-interval-de-execution-increase-to-30-minutes/207175)
**Author:** [@andres\_fever](https://discuss.elastic.co/u/andres_fever)\ **Replies:** 1\ **Last updated:** [November 9, 2019, 12:06am UTC](https://discuss.elastic.co/t/i-need-to-configure-a-watcher-that-after-of-the-alarm-is-triggered-for-first-time-the-interval-de-execution-increase-to-30-minutes/207175 "2019-11-09T00:06:11Z")
Hello, I have an alarm developed in a wacther in kibana and the interval from execution is 1 minute so when the condition is true a long time, this alarm activates all time. I need that after of the alarm is triggered f… --- ## [Upgrading elasticsearch from 5.6.5 to 7.4.0](https://discuss.elastic.co/t/upgrading-elasticsearch-from-5-6-5-to-7-4-0/206599)
**Author:** [@Rajanikanta](https://discuss.elastic.co/u/Rajanikanta)\ **Replies:** 1\ **Last updated:** [November 8, 2019, 11:53pm UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-from-5-6-5-to-7-4-0/206599 "2019-11-08T23:53:28Z")
I have upgraded the rest high level client from 5.6.5 to 7.4.0 , seeing the below exceptions: Caused by: org.apache.openejb.OpenEJBException: Unable to create annotation scanner for web module oi: null at org.apache.op… --- ## [License installation problems with x-pack on Elasticsearch 5.6.10](https://discuss.elastic.co/t/license-installation-problems-with-x-pack-on-elasticsearch-5-6-10/207181)
**Author:** [@jhshen](https://discuss.elastic.co/u/jhshen)\ **Replies:** 1\ **Last updated:** [November 8, 2019, 10:53pm UTC](https://discuss.elastic.co/t/license-installation-problems-with-x-pack-on-elasticsearch-5-6-10/207181 "2019-11-08T22:53:08Z")
On Elasticsearch 5.6.10 complex, I recently installed x-pack and I've subscribed to Elastic licenses which has been downloaded. I've generated certificates for both the client machine and the CA Root certificate, and I'v… --- ## [ES 6.8 vs 7.4 memory issues](https://discuss.elastic.co/t/es-6-8-vs-7-4-memory-issues/202849)
**Author:** [@andrx](https://discuss.elastic.co/u/andrx)\ **Replies:** 11\ **Last updated:** [November 8, 2019, 9:36pm UTC](https://discuss.elastic.co/t/es-6-8-vs-7-4-memory-issues/202849 "2019-11-08T21:36:25Z")
The following is not a part of aws elasticsearch managed service. I have ES6.8 cluster on m4.2xlarge (32GB RAM) centos7 machines on aws. GET \_cat/nodes?v&s=name ip heap.percent ram.percent cpu load\_1m load\_5m … --- ## [How to tell if tags is empty or does not exists?](https://discuss.elastic.co/t/how-to-tell-if-tags-is-empty-or-does-not-exists/207168)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 9:18pm UTC](https://discuss.elastic.co/t/how-to-tell-if-tags-is-empty-or-does-not-exists/207168 "2019-11-08T21:18:32Z")
Hi, I want to be able to check if tags field is empty or if it does not exists in order to send the logstash output to different indexes. I'm using logstash 7.3 output { stdout { codec =\> rubydebug } if \[tags\] == \[… --- ## [APM PHP Agent Setup](https://discuss.elastic.co/t/apm-php-agent-setup/207172)
**Author:** [@Ghaith\_Haddad](https://discuss.elastic.co/u/Ghaith_Haddad)\ **Replies:** 0\ **Last updated:** [November 8, 2019, 8:54pm UTC](https://discuss.elastic.co/t/apm-php-agent-setup/207172 "2019-11-08T20:54:12Z")
Im having a really hard time setting up my APM PHP Agent on a test EC2 server, can anyone please show me how to configure it properly to send log data to my ELK Server. I tried asking this question on the Git repo but th… --- ## [Logstash Hangs when installing amazon\_es plugin on Windows](https://discuss.elastic.co/t/logstash-hangs-when-installing-amazon-es-plugin-on-windows/207169)
**Author:** [@kcb](https://discuss.elastic.co/u/kcb)\ **Replies:** 0\ **Last updated:** [November 8, 2019, 8:34pm UTC](https://discuss.elastic.co/t/logstash-hangs-when-installing-amazon-es-plugin-on-windows/207169 "2019-11-08T20:34:00Z")
We have downloaded logstash-output-amazon\_es for Windows from GitHub. We have ran a gem build on the downloaded gemspec file to create a gem file. We are then try to install the plugin from the gem file via: ".\\bin\\logst… --- ## [Filter on scripted field not working](https://discuss.elastic.co/t/filter-on-scripted-field-not-working/206573)
**Author:** [@Arnab](https://discuss.elastic.co/u/Arnab)\ **Replies:** 1\ **Last updated:** [November 8, 2019, 8:28pm UTC](https://discuss.elastic.co/t/filter-on-scripted-field-not-working/206573 "2019-11-08T20:28:40Z")
Hi, I have created two scripted fields - Field1 - which uses doc\['transactionData'\].value Field2 - which uses params\['\_source'\]\['transactionData'\] Now, when I filter based on the Field1, it is working as expected. Ho… --- ## [Logstash to logstash communication](https://discuss.elastic.co/t/logstash-to-logstash-communication/207164)
**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\ **Replies:** 0\ **Last updated:** [November 8, 2019, 7:51pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-communication/207164 "2019-11-08T19:51:39Z")
Hi, I am sending logs from one logstash to another through TCP or UDP. Earlier I tried with TCP i got error which posted at https://discuss.elastic.co/t/eoferror-end-of-file-reached/204933 so switched to UDP but now I a… --- ## [Percolate query alternative for given use case](https://discuss.elastic.co/t/percolate-query-alternative-for-given-use-case/207165)
**Author:** [@aaronloes](https://discuss.elastic.co/u/aaronloes)\ **Replies:** 0\ **Last updated:** [November 8, 2019, 7:52pm UTC](https://discuss.elastic.co/t/percolate-query-alternative-for-given-use-case/207165 "2019-11-08T19:52:49Z")
I'm checking to see if there is a better way to achieve the same goal that the percolate query does for me but with less overhead. I have an index where each document is a product (say Acme Anvils). I want to determine … --- ## [Index management and rollover](https://discuss.elastic.co/t/index-management-and-rollover/202226)
**Author:** [@Marcell0e](https://discuss.elastic.co/u/Marcell0e)\ **Replies:** 34\ **Last updated:** [November 8, 2019, 7:37pm UTC](https://discuss.elastic.co/t/index-management-and-rollover/202226 "2019-11-08T19:37:53Z")
I have setup ILM and everything was going good until the index didn't roll over like I thought it would. I have it set to 30Gbs or 60 days. My first question is do both requirements have to be met before it will roll o… --- ## [Error Scheduling Telemetry task](https://discuss.elastic.co/t/error-scheduling-telemetry-task/207002)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 8:01pm UTC](https://discuss.elastic.co/t/error-scheduling-telemetry-task/207002 "2019-11-07T20:01:31Z")
I am not able to find the issue with this error and how to understand whats happening! Please help. log \[19:35:49.863\] \[info\]\[listening\] Server running at http://localhost:5601 log \[19:35:49.878\] \[info\]\[server\]\[Ki… --- ## [Discovery ec2 for elasticsearch 7.4.2](https://discuss.elastic.co/t/discovery-ec2-for-elasticsearch-7-4-2/207159)
**Author:** [@Igor\_Golebiowski](https://discuss.elastic.co/u/Igor_Golebiowski)\ **Replies:** 0\ **Last updated:** [November 8, 2019, 7:29pm UTC](https://discuss.elastic.co/t/discovery-ec2-for-elasticsearch-7-4-2/207159 "2019-11-08T19:29:53Z")
Hi, I'm trying to setup elasticsearch cluster on ECS on AWS. I'm able to start 3 elasticsearch nodes, each on separate host but I'm not able to connect those instances to one cluster. I've checked https://medium.com/@de… --- ## [Mutate rename filter not working on nested fields](https://discuss.elastic.co/t/mutate-rename-filter-not-working-on-nested-fields/207146)
**Author:** [@Justin\_Doles](https://discuss.elastic.co/u/Justin_Doles)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 7:16pm UTC](https://discuss.elastic.co/t/mutate-rename-filter-not-working-on-nested-fields/207146 "2019-11-08T19:16:28Z")
I'm likely missing something simple, but I cannot seem to get the rename filter to work with my data. The field I'm attempting to rename is nested. It doesn't error, but it also doesn't do anything. I am able to renam… --- ## [Unassigned shards and Elasticsearch health turns RED](https://discuss.elastic.co/t/unassigned-shards-and-elasticsearch-health-turns-red/207065)
**Author:** [@Sundaramoorthy\_Anand](https://discuss.elastic.co/u/Sundaramoorthy_Anand)\ **Replies:** 12\ **Last updated:** [November 8, 2019, 7:03pm UTC](https://discuss.elastic.co/t/unassigned-shards-and-elasticsearch-health-turns-red/207065 "2019-11-08T19:03:16Z")
Hi, I'm having a single node cluster architecture where my ELK is in a server (say servA) and Filebeat is in remote server. there are 2 remote servers say filebeat-A(fA) in serverB(sB) and filebeat-B(fB) in serverC(sC) … --- ## [The bulk request must be terminated by a newline \[\\\\n\]](https://discuss.elastic.co/t/the-bulk-request-must-be-terminated-by-a-newline-n/207155)
**Author:** [@PrabhuRajendran](https://discuss.elastic.co/u/PrabhuRajendran)\ **Replies:** 1\ **Last updated:** [November 8, 2019, 6:03pm UTC](https://discuss.elastic.co/t/the-bulk-request-must-be-terminated-by-a-newline-n/207155 "2019-11-08T18:03:30Z")
Hi, I am trying to add bulk request via cURL http client, when i try pass json file am getting "The bulk request must be terminated by a newline \[\\n\]" Could some one help why am getting even if added newline at end of … --- ## [Difference between Meraki dashboard and netflow graph](https://discuss.elastic.co/t/difference-between-meraki-dashboard-and-netflow-graph/205152)
**Author:** [@jquintard](https://discuss.elastic.co/u/jquintard)\ **Replies:** 10\ **Last updated:** [November 8, 2019, 5:54pm UTC](https://discuss.elastic.co/t/difference-between-meraki-dashboard-and-netflow-graph/205152 "2019-11-08T17:54:32Z")
I need to understand why I have difference between my Meraki dashboard and Kibana graph. This graph, from the Meraki dashboard, is related to one client. The max usage is 1,2Mbit/s : The same graph from Kibana : T… --- ## [Stashing Event Store logs](https://discuss.elastic.co/t/stashing-event-store-logs/207149)
**Author:** [@dj0b](https://discuss.elastic.co/u/dj0b)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 5:05pm UTC](https://discuss.elastic.co/t/stashing-event-store-logs/207149 "2019-11-08T17:05:30Z")
Good Afternoon, I am wondering if anyone has any information on the best approach for stashing Event Store logs? Particularly, I am interested in the construction of the Message within the Event Store log, and how best … --- ## [How do I create an ElasticSearch filter on two nested objects so that the results only includes documents that match both conditions](https://discuss.elastic.co/t/how-do-i-create-an-elasticsearch-filter-on-two-nested-objects-so-that-the-results-only-includes-documents-that-match-both-conditions/206656)
**Author:** [@fitterweb](https://discuss.elastic.co/u/fitterweb)\ **Replies:** 5\ **Last updated:** [November 8, 2019, 4:34pm UTC](https://discuss.elastic.co/t/how-do-i-create-an-elasticsearch-filter-on-two-nested-objects-so-that-the-results-only-includes-documents-that-match-both-conditions/206656 "2019-11-08T16:34:07Z")
How do I create an ElasticSearch filter query on nested objects so that the results match both? I have documents that include nested objects like the following: { "objectNumber": "1", "nestedObjects": \[ { … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1791) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1793)