# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1798 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1799 --- ## [Stuck in Elasticsearch start in Ubuntu 18.04](https://discuss.elastic.co/t/stuck-in-elasticsearch-start-in-ubuntu-18-04/206367)
**Author:** [@Vignesh\_Raja\_M](https://discuss.elastic.co/u/Vignesh_Raja_M)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 8:54am UTC](https://discuss.elastic.co/t/stuck-in-elasticsearch-start-in-ubuntu-18-04/206367 "2019-11-06T08:54:59Z")
Hi all, i get this error msg when i start the elasticsearch service in my ubuntu looking for the proper solution am using stable version see below echo "deb https://artifacts.elastic.co/packages/7.x/apt stable main" |… --- ## [Filter nested field only in aggregation](https://discuss.elastic.co/t/filter-nested-field-only-in-aggregation/206741)
**Author:** [@Quang\_D\_Tr\_n](https://discuss.elastic.co/u/Quang_D_Tr_n)\ **Replies:** 1\ **Last updated:** [November 6, 2019, 8:46am UTC](https://discuss.elastic.co/t/filter-nested-field-only-in-aggregation/206741 "2019-11-06T08:46:16Z")
My index has a nested field, looking like this: "services": { "type": "nested", "properties": { "type": { "type": "ke… --- ## [Index with 5 shards, each shard has reached 50gb](https://discuss.elastic.co/t/index-with-5-shards-each-shard-has-reached-50gb/206530)
**Author:** [@dawood\_abdullah](https://discuss.elastic.co/u/dawood_abdullah)\ **Replies:** 2\ **Last updated:** [November 6, 2019, 8:44am UTC](https://discuss.elastic.co/t/index-with-5-shards-each-shard-has-reached-50gb/206530 "2019-11-06T08:44:10Z")
Hi, All my shards have reached 50gb, below are the details data\_v1 2 r STARTED 167362666 50.1gb 10.0.1.37 node-3 data\_v1 2 r STARTED 167362666 50.7gb 10.0.0.176 node-2 data\_v1 2 p STARTED 167362666 50.6gb 10.0… --- ## [Logstash startup error when GREP\_OPTIONS set?](https://discuss.elastic.co/t/logstash-startup-error-when-grep-options-set/206743)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 7:58am UTC](https://discuss.elastic.co/t/logstash-startup-error-when-grep-options-set/206743 "2019-11-06T07:58:06Z")
Noticed some strange behaviour today on our Redhat boxes that we run Logstash on. I was trying to start Logstash jobs that previously ran fine, and got the error: Error: Could not find or load main class -Xms5g After … --- ## [Changing field in Index pattern](https://discuss.elastic.co/t/changing-field-in-index-pattern/206619)
**Author:** [@Aileen](https://discuss.elastic.co/u/Aileen)\ **Replies:** 5\ **Last updated:** [November 6, 2019, 7:49am UTC](https://discuss.elastic.co/t/changing-field-in-index-pattern/206619 "2019-11-06T07:49:40Z")
Hi We have recently changed our field names to include a suffix of the type. I have run a refresh on my index pattern and can now see the new fields and the old, but my visualizations now need updating to handle both (… --- ## [Does Helm use official ECK under the hood?](https://discuss.elastic.co/t/does-helm-use-official-eck-under-the-hood/206067)
**Author:** [@LeFrancois](https://discuss.elastic.co/u/LeFrancois)\ **Replies:** 1\ **Last updated:** [November 6, 2019, 7:47am UTC](https://discuss.elastic.co/t/does-helm-use-official-eck-under-the-hood/206067 "2019-11-06T07:47:15Z")
Hello, After reading the doc of Helm charts I saw it was grounded on the Docker images of ElasticSearch. But under the hood it seem strange that the features / codebase is not shared with ECK. I would like to clarifiy… --- ## [Get number of days in a month to aggregate data](https://discuss.elastic.co/t/get-number-of-days-in-a-month-to-aggregate-data/206028)
**Author:** [@Quang\_D\_Tr\_n](https://discuss.elastic.co/u/Quang_D_Tr_n)\ **Replies:** 6\ **Last updated:** [November 6, 2019, 7:40am UTC](https://discuss.elastic.co/t/get-number-of-days-in-a-month-to-aggregate-data/206028 "2019-11-06T07:40:59Z")
I am trying to get the number of days of a month from a timestamp field, and then, divide the one numeric field by this number of days. Right now, my implementation is like this: { "query" : {...}, "script\_fiel… --- ## [\_source\_includes on a tree](https://discuss.elastic.co/t/source-includes-on-a-tree/206438)
**Author:** [@SRALK](https://discuss.elastic.co/u/SRALK)\ **Replies:** 4\ **Last updated:** [November 6, 2019, 7:24am UTC](https://discuss.elastic.co/t/source-includes-on-a-tree/206438 "2019-11-06T07:24:51Z")
Hello, I have a document which contains a tree (of unknown depth) with a lot of information and i want to get only a subset of the data of each node (ex: only the key hello in the following example). { "id": 42, … --- ## [Is there any way to pass start and end index of file in s3 input plugin](https://discuss.elastic.co/t/is-there-any-way-to-pass-start-and-end-index-of-file-in-s3-input-plugin/206738)
**Author:** [@Adarsh\_Kumar1](https://discuss.elastic.co/u/Adarsh_Kumar1)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 7:16am UTC](https://discuss.elastic.co/t/is-there-any-way-to-pass-start-and-end-index-of-file-in-s3-input-plugin/206738 "2019-11-06T07:16:32Z")
I want to read filename and start\_index and end\_index from aws SQS queue (with sqs input plugin ) and pass this information to s3 input plugin that will read the particular file from start\_index and end\_index of file. I… --- ## [Tutorial on using the full ELK Stack](https://discuss.elastic.co/t/tutorial-on-using-the-full-elk-stack/206731)
**Author:** [@Tunin](https://discuss.elastic.co/u/Tunin)\ **Replies:** 2\ **Last updated:** [November 6, 2019, 7:04am UTC](https://discuss.elastic.co/t/tutorial-on-using-the-full-elk-stack/206731 "2019-11-06T07:04:05Z")
Hi, do you have any tutorial on how I can start using the elastic stack - elk? I need to do a POC and would like to briefly explain the advantages of ELK. if you have any idea on a quick and dirty doc, please let me k… --- ## [Kibana 7.3.0 rpm is not having opt and config folder](https://discuss.elastic.co/t/kibana-7-3-0-rpm-is-not-having-opt-and-config-folder/205725)
**Author:** [@Shradha\_Bharti](https://discuss.elastic.co/u/Shradha_Bharti)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 6:59am UTC](https://discuss.elastic.co/t/kibana-7-3-0-rpm-is-not-having-opt-and-config-folder/205725 "2019-11-06T06:59:23Z")
HI we are using centos where we have deployed our ELK 2.4.6 ,recently there is a need to upgrade the ELK to 7.3.0 but when i have downloaded kibana-7.3.0-1.x86\_64.rpm , there is one command which was failing ,after deb… --- ## [Log stash error](https://discuss.elastic.co/t/log-stash-error/206141)
**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\ **Replies:** 21\ **Last updated:** [November 6, 2019, 6:53am UTC](https://discuss.elastic.co/t/log-stash-error/206141 "2019-11-06T06:53:32Z")
below is the error i get while running logstash Sending Logstash logs to C:/busapps/rrsb/gbl1/logstash/7.0.0/logs which is now configured via log4j2.properties \[2019-11-01T10:04:00,538\]\[WARN \]\[logstash.config.source.m… --- ## [How to store reference data in Elasticsearch](https://discuss.elastic.co/t/how-to-store-reference-data-in-elasticsearch/206730)
**Author:** [@SunilSMenon](https://discuss.elastic.co/u/SunilSMenon)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 5:58am UTC](https://discuss.elastic.co/t/how-to-store-reference-data-in-elasticsearch/206730 "2019-11-06T05:58:43Z")
Hi, We are using ELK for application logs, we want the elasticsearch to refer the application master data which is stored in another system. Objective being the Kibana user can see their applications in their visualiza… --- ## [Search across multiple indices for the same field](https://discuss.elastic.co/t/search-across-multiple-indices-for-the-same-field/206349)
**Author:** [@Ashish1](https://discuss.elastic.co/u/Ashish1)\ **Replies:** 8\ **Last updated:** [November 6, 2019, 5:53am UTC](https://discuss.elastic.co/t/search-across-multiple-indices-for-the-same-field/206349 "2019-11-06T05:53:58Z")
Hello all, I am working on an event based dataset where let's say there is a central customer index and multiple indexes for different events types, say index event\_1, event\_2, event\_3. I want to search across all the … --- ## [Packebeat 7.1 mysql select duration](https://discuss.elastic.co/t/packebeat-7-1-mysql-select-duration/206728)
**Author:** [@meng\_liu](https://discuss.elastic.co/u/meng_liu)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 5:43am UTC](https://discuss.elastic.co/t/packebeat-7-1-mysql-select-duration/206728 "2019-11-06T05:43:33Z")
I use beats 7.1 to minitor mysql, when the method is select, we found the event not have the duration, and that the start and end is reverse. "@timestamp":"2019-11-06T04:40:21.168Z", "@metadata":{ "beat"… --- ## [Calculate elapsed time for multiple end events](https://discuss.elastic.co/t/calculate-elapsed-time-for-multiple-end-events/205319)
**Author:** [@Patrick\_Gell](https://discuss.elastic.co/u/Patrick_Gell)\ **Replies:** 2\ **Last updated:** [November 6, 2019, 4:50am UTC](https://discuss.elastic.co/t/calculate-elapsed-time-for-multiple-end-events/205319 "2019-11-06T04:50:32Z")
Hello, I have a message driven system where one message is sent to multiple receiver. Now I wanted to track the time it takes for every receiver until the message arrives. The structure of my log entries looks like: T… --- ## [Error: no repository definition for http://helm.elastic.co/](https://discuss.elastic.co/t/error-no-repository-definition-for-http-helm-elastic-co/206220)
**Author:** [@pedro.pacm](https://discuss.elastic.co/u/pedro.pacm)\ **Replies:** 1\ **Last updated:** [November 6, 2019, 4:42am UTC](https://discuss.elastic.co/t/error-no-repository-definition-for-http-helm-elastic-co/206220 "2019-11-06T04:42:16Z")
Hi, I have a kubernetes cluster managed by a default Gitlab account. All services are deployed through Gitlabs's CI/CD, so I'm not able to hand Helm directly. I created a custom Helm chart and added the Elasticsearch c… --- ## [Update record if present otherwise insert](https://discuss.elastic.co/t/update-record-if-present-otherwise-insert/206310)
**Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\ **Replies:** 11\ **Last updated:** [November 6, 2019, 2:14am UTC](https://discuss.elastic.co/t/update-record-if-present-otherwise-insert/206310 "2019-11-06T02:14:07Z")
Here is my logstash configuration input { file { path =\> "/etc/logstash/fish/10gFresh.csv" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { csv { … --- ## [一部のDashboardでPDF Reportが失敗する](https://discuss.elastic.co/t/dashboard-pdf-report/205972)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 2:04am UTC](https://discuss.elastic.co/t/dashboard-pdf-report/205972 "2019-11-06T02:04:16Z")
お世話になります。 一部のDashboardでPDF Reportが失敗します。 成功するDashboardもあるので基本的な設定ができていないわけではないと思っています。 エラーメッセージとして、ERR\_CONNECTION\_TIMED\_OUT が表示されていました。 この解決策として、xpack.reporting.queue.timeout の設定を600000に設定してみたのですが、 設定が効いていないように見えます。 … --- ## [Authentication issue with elastic user](https://discuss.elastic.co/t/authentication-issue-with-elastic-user/206702)
**Author:** [@learnelastic](https://discuss.elastic.co/u/learnelastic)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 1:31am UTC](https://discuss.elastic.co/t/authentication-issue-with-elastic-user/206702 "2019-11-06T01:31:37Z")
Hello, I successfully changed the password using - elasticsearch-7.4.2/bin/elasticsearch-setup-passwords interactive but not able to use the changed password. Authentication is failing. { "error" : { "root\_cause" :… --- ## [Is ES smart enough to identify a node in a cluster if its IP has been changed?](https://discuss.elastic.co/t/is-es-smart-enough-to-identify-a-node-in-a-cluster-if-its-ip-has-been-changed/206701)
**Author:** [@yash.tandon](https://discuss.elastic.co/u/yash.tandon)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 1:30am UTC](https://discuss.elastic.co/t/is-es-smart-enough-to-identify-a-node-in-a-cluster-if-its-ip-has-been-changed/206701 "2019-11-06T01:30:31Z")
--- ## [Filters not working on Dashboard](https://discuss.elastic.co/t/filters-not-working-on-dashboard/206675)
**Author:** [@dhruv477](https://discuss.elastic.co/u/dhruv477)\ **Replies:** 3\ **Last updated:** [November 5, 2019, 11:27pm UTC](https://discuss.elastic.co/t/filters-not-working-on-dashboard/206675 "2019-11-05T23:27:35Z")
In my current version of Kibana(6.6.0), the '+' '-' widgets above the color option on visualizations are not available, making it harder to add filters. Is there a fix around this? --- ## [Shard Allocation \_name takes bogus name](https://discuss.elastic.co/t/shard-allocation-name-takes-bogus-name/206681)
**Author:** [@naoko](https://discuss.elastic.co/u/naoko)\ **Replies:** 0\ **Last updated:** [November 5, 2019, 10:27pm UTC](https://discuss.elastic.co/t/shard-allocation-name-takes-bogus-name/206681 "2019-11-05T22:27:48Z")
I want to send a certain index to a set of nodes. I see shard allocation filtering seems to be what I need so that different apps (different index) impact set of nodes. I put settings with "index.routing.allocation.inc… --- ## [Message text size Kibana](https://discuss.elastic.co/t/message-text-size-kibana/204932)
**Author:** [@kiran2](https://discuss.elastic.co/u/kiran2)\ **Replies:** 3\ **Last updated:** [November 5, 2019, 9:51pm UTC](https://discuss.elastic.co/t/message-text-size-kibana/204932 "2019-11-05T21:51:49Z")
Team, My query is increasing the message text (number of lines) up to 1000 line in a single document. Note:- When searing for an error I am missing related error above and below lines In kibana 6.7.0 when logs are in… --- ## [How to auto select the appropriate index dynamically in the kibana through discover url](https://discuss.elastic.co/t/how-to-auto-select-the-appropriate-index-dynamically-in-the-kibana-through-discover-url/206210)
**Author:** [@rockyadi](https://discuss.elastic.co/u/rockyadi)\ **Replies:** 2\ **Last updated:** [November 5, 2019, 9:48pm UTC](https://discuss.elastic.co/t/how-to-auto-select-the-appropriate-index-dynamically-in-the-kibana-through-discover-url/206210 "2019-11-05T21:48:53Z")
We create a dynamic kibana url to the user http://localhost:5601/app/kibana#/discover?\_g=(refreshInterval:(pause:!t,value:0),time:(from:'2019-10-16T06:00',to:'2019-10-18T06:00'))&\_a=(columns:!(\_source),index:'logstash-\*… --- ## [Unable to access underlaying indexed log messages from Kibana Heatmap using a Search filter](https://discuss.elastic.co/t/unable-to-access-underlaying-indexed-log-messages-from-kibana-heatmap-using-a-search-filter/206450)
**Author:** [@rade95](https://discuss.elastic.co/u/rade95)\ **Replies:** 1\ **Last updated:** [November 5, 2019, 9:08pm UTC](https://discuss.elastic.co/t/unable-to-access-underlaying-indexed-log-messages-from-kibana-heatmap-using-a-search-filter/206450 "2019-11-05T21:08:15Z")
Hello, I have older Kibana v5.6.4 running as a log aggregator, part of a custom ELK implementation. I have indexed log database and I can Search my logs based on my criteria. I can visualize my messages using that same … --- ## [Output with condition](https://discuss.elastic.co/t/output-with-condition/206505)
**Author:** [@sud0](https://discuss.elastic.co/u/sud0)\ **Replies:** 4\ **Last updated:** [November 5, 2019, 8:56pm UTC](https://discuss.elastic.co/t/output-with-condition/206505 "2019-11-05T20:56:48Z")
HI. I have two businesses that must be separated in two different indexes. I'm trying to separate them on the output: output { if \[region\] == "au" { elasticsearch { hosts =\> \["localhost:9200"\] … --- ## [Filebeat Error: "Write: connection reset by peer"](https://discuss.elastic.co/t/filebeat-error-write-connection-reset-by-peer/206667)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [November 5, 2019, 8:09pm UTC](https://discuss.elastic.co/t/filebeat-error-write-connection-reset-by-peer/206667 "2019-11-05T20:09:55Z")
TL;DR Filebeat 7.4.2 fails write to logstash multiple times per day with write: connection reset by peer Longer version Filebeat version is 7.4.2 for Linux. I see this issue periodically across our environment. Ordinar… --- ## [Failed to get API Group-Resources](https://discuss.elastic.co/t/failed-to-get-api-group-resources/206482)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [November 5, 2019, 8:27pm UTC](https://discuss.elastic.co/t/failed-to-get-api-group-resources/206482 "2019-11-05T20:27:05Z")
Hello World! I'm trying to Deploy ECK in your Kubernetes cluster, yet running into following issue: $ microk8s.kubectl apply -f https://download.elastic.co/downloads/eck/1.0.0-beta1/all-in-one.yaml customresourcedefini… --- ## [Your distribution is broken](https://discuss.elastic.co/t/your-distribution-is-broken/206638)
**Author:** [@pditommaso](https://discuss.elastic.co/u/pditommaso)\ **Replies:** 2\ **Last updated:** [November 5, 2019, 7:55pm UTC](https://discuss.elastic.co/t/your-distribution-is-broken/206638 "2019-11-05T19:55:50Z")
Running Elasticsearch with the following command docker run -d --name elasticsearch --rm --name es -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:6.8.4 I'm getting the following error on a basi… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1797) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1799)