# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1805 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1806 --- ## [Dynamic Prefix with s3 input plugin](https://discuss.elastic.co/t/dynamic-prefix-with-s3-input-plugin/206167)
**Author:** [@rhishi127](https://discuss.elastic.co/u/rhishi127)\ **Replies:** 0\ **Last updated:** [November 1, 2019, 1:04pm UTC](https://discuss.elastic.co/t/dynamic-prefix-with-s3-input-plugin/206167 "2019-11-01T13:04:54Z")
Hi, I am using logstash version 6.6.0 I want to pass current year value as variable in a prefix of s3 input plugin as we can pass in s3 output plugin prefix can anyone help --- ## [Ambiguous field reference for object field](https://discuss.elastic.co/t/ambiguous-field-reference-for-object-field/206166)
**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\ **Replies:** 0\ **Last updated:** [November 1, 2019, 1:01pm UTC](https://discuss.elastic.co/t/ambiguous-field-reference-for-object-field/206166 "2019-11-01T13:01:14Z")
Hi, I'm attempting to split a field which looks like: { "VERSION" : "version-uk-v2.1.0-global-v2.2.0" } into the following: { "host" : { "version" : { "uk" : "v2.1.0", "global" : "v2.2.0" } … --- ## [Ingest pipeline to parse basename from path](https://discuss.elastic.co/t/ingest-pipeline-to-parse-basename-from-path/205809)
**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\ **Replies:** 2\ **Last updated:** [November 1, 2019, 12:47pm UTC](https://discuss.elastic.co/t/ingest-pipeline-to-parse-basename-from-path/205809 "2019-11-01T12:47:26Z")
Hi, I can't quite figure out how to use dissect/grok in an ingest pipeline to obtain the basename from a UNIX path. Basically, I would like each of the following inputs to return { "name" : "ssh" }: ssh bin/ssh /usr/… --- ## [Snapshot settings interval](https://discuss.elastic.co/t/snapshot-settings-interval/206097)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 3\ **Last updated:** [November 1, 2019, 12:14pm UTC](https://discuss.elastic.co/t/snapshot-settings-interval/206097 "2019-11-01T12:14:23Z")
Am I missing something here or are the directions to change the Snapshot settings interval just that poor. The 3rd, 4h and 5th steps dont even seem to exist when I'm on the deployment that I want to snapshot. I don't n… --- ## [How to send application logs from a NodeJS app to the Elastic Stack hosted in Kubernetes?](https://discuss.elastic.co/t/how-to-send-application-logs-from-a-nodejs-app-to-the-elastic-stack-hosted-in-kubernetes/206161)
**Author:** [@THPubs](https://discuss.elastic.co/u/THPubs)\ **Replies:** 0\ **Last updated:** [November 1, 2019, 12:20pm UTC](https://discuss.elastic.co/t/how-to-send-application-logs-from-a-nodejs-app-to-the-elastic-stack-hosted-in-kubernetes/206161 "2019-11-01T12:20:46Z")
I'm building a NodeJS application and trying to use the Elastic Stack to collect the logs. The logs I want are: Error logs Application logs like, user logged in, user performed this task, system performed this task, et… --- ## [Multiple http\_poller configurations](https://discuss.elastic.co/t/multiple-http-poller-configurations/206154)
**Author:** [@akhilsharma.in](https://discuss.elastic.co/u/akhilsharma.in)\ **Replies:** 0\ **Last updated:** [November 1, 2019, 11:28am UTC](https://discuss.elastic.co/t/multiple-http-poller-configurations/206154 "2019-11-01T11:28:31Z")
Hi Logstash Team, I have 5 configuration files which use http\_poller and http plug-ins for REST calls. All of the 5 conf files work perfectly if I run them one by one. But if I give the path of conf files as \* (all) mea… --- ## [Logstash Insert or Update if exists](https://discuss.elastic.co/t/logstash-insert-or-update-if-exists/206083)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 3\ **Last updated:** [November 1, 2019, 11:15am UTC](https://discuss.elastic.co/t/logstash-insert-or-update-if-exists/206083 "2019-11-01T11:15:38Z")
hello guys , so lately i've trying to insert some data from txt file into elasticsearch index , but i'm having a problem in updating my index , when i run the logstach conf file it's not updating the data or inserting th… --- ## [On-going troubles with field expansion](https://discuss.elastic.co/t/on-going-troubles-with-field-expansion/206145)
**Author:** [@alastairs](https://discuss.elastic.co/u/alastairs)\ **Replies:** 1\ **Last updated:** [November 1, 2019, 11:01am UTC](https://discuss.elastic.co/t/on-going-troubles-with-field-expansion/206145 "2019-11-01T11:01:34Z")
I'm running Elasticsearch 7.4.0 and Filebeat 7.4.0. It seems that, when I query over a period longer than the current filebeat index has been open, I receive the following message: elasticsearch field expansion matches … --- ## [ECK + Istio mTLS](https://discuss.elastic.co/t/eck-istio-mtls/205070)
**Author:** [@Spencer\_Gilbert](https://discuss.elastic.co/u/Spencer_Gilbert)\ **Replies:** 7\ **Last updated:** [November 1, 2019, 11:01am UTC](https://discuss.elastic.co/t/eck-istio-mtls/205070 "2019-11-01T11:01:06Z")
I saw on the release notes a mention of using ECK with Istio with disabling HTTP level TLS - I've been trying to use mTLS with Istio and ES and running into problems both with the transport layer (which I think I've reso… --- ## [Array search](https://discuss.elastic.co/t/array-search/205682)
**Author:** [@privatechen](https://discuss.elastic.co/u/privatechen)\ **Replies:** 1\ **Last updated:** [November 1, 2019, 10:46am UTC](https://discuss.elastic.co/t/array-search/205682 "2019-11-01T10:46:08Z")
for example, I got three items like: {"arr":\["a", "b", "c"\]}, {"arr":\["a", "b"\]}, {"arr":\["a", "c"\]} my search like this: "query":{ "bool":{ "must":\[ { "term":{ "arr":{ "value":"a" } } }, { "term":{ "ar… --- ## [Get nearby lines after query result](https://discuss.elastic.co/t/get-nearby-lines-after-query-result/206139)
**Author:** [@shah.ravi52](https://discuss.elastic.co/u/shah.ravi52)\ **Replies:** 0\ **Last updated:** [November 1, 2019, 10:01am UTC](https://discuss.elastic.co/t/get-nearby-lines-after-query-result/206139 "2019-11-01T10:01:44Z")
As per our requirement, I have to search a string in ES logs. And, print five lines before and after the result query. Is there any way to do that? --- ## [Ошибка парсинга в Timelion-запросе](https://discuss.elastic.co/t/timelion/205698)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 5\ **Last updated:** [November 1, 2019, 9:54am UTC](https://discuss.elastic.co/t/timelion/205698 "2019-11-01T09:54:21Z")
Задача: визуализировать и сравнить дневное количество уникальных игроков из двух разных индексов (session\_data and gameplay\_stat) при помощи timelion. Запрос по первому индексу выглядит так: .es(interval=1d, index=sess… --- ## [Logstash Filebeat incorrect SSL key](https://discuss.elastic.co/t/logstash-filebeat-incorrect-ssl-key/205849)
**Author:** [@Devopsio](https://discuss.elastic.co/u/Devopsio)\ **Replies:** 3\ **Last updated:** [November 1, 2019, 8:33am UTC](https://discuss.elastic.co/t/logstash-filebeat-incorrect-ssl-key/205849 "2019-11-01T08:33:51Z")
Hi. I can't establish an SSL connection between Logstash (containerized) and Filebeat. I'm using a self-signed certificate. Actions I performed: openssl req -newkey rsa:4096 -nodes -keyout logstash.key -subj "/CN=(hostn… --- ## [Upgrade](https://discuss.elastic.co/t/upgrade/206116)
**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\ **Replies:** 5\ **Last updated:** [November 1, 2019, 8:26am UTC](https://discuss.elastic.co/t/upgrade/206116 "2019-11-01T08:26:02Z")
Hi. I need to upgrade a simple Elasticsearch 6.5.4 cluster (3 master eligible+data servers) to 6.8.3. The upgrade guide says this can be done without any service interruption. Disabling shard replication and re-enabling … --- ## [Node shutdown due to OutOfMemoryError: Direct buffer memory](https://discuss.elastic.co/t/node-shutdown-due-to-outofmemoryerror-direct-buffer-memory/205994)
**Author:** [@Odd\_Erik\_Gronberg](https://discuss.elastic.co/u/Odd_Erik_Gronberg)\ **Replies:** 17\ **Last updated:** [November 1, 2019, 8:11am UTC](https://discuss.elastic.co/t/node-shutdown-due-to-outofmemoryerror-direct-buffer-memory/205994 "2019-11-01T08:11:52Z")
Hi, We are running a 5 node cluster with 3 data nodes (where 1 is master eligible) and 2 master (non-data eligible nodes) as windows services. Each of the data node has 6 GB allocated heap memory and runs on machines w… --- ## [Comparing two indices in elasticsearch](https://discuss.elastic.co/t/comparing-two-indices-in-elasticsearch/206038)
**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 1\ **Last updated:** [November 1, 2019, 7:39am UTC](https://discuss.elastic.co/t/comparing-two-indices-in-elasticsearch/206038 "2019-11-01T07:39:55Z")
Hey Is it possible in elasticsearch to compare fields from two documents???? --- ## [Any possible way to re-index the current index, just like a copy of current index with associated data in it](https://discuss.elastic.co/t/any-possible-way-to-re-index-the-current-index-just-like-a-copy-of-current-index-with-associated-data-in-it/206121)
**Author:** [@Joseph\_Raj](https://discuss.elastic.co/u/Joseph_Raj)\ **Replies:** 1\ **Last updated:** [November 1, 2019, 7:33am UTC](https://discuss.elastic.co/t/any-possible-way-to-re-index-the-current-index-just-like-a-copy-of-current-index-with-associated-data-in-it/206121 "2019-11-01T07:33:46Z")
I want to re-index the existing index because the current index shows in red status so i want to make it green. If i create a copy of existing index with the same data linked to it. ill delete the old index that is in r… --- ## [Partial word highlighting doesn't work properly](https://discuss.elastic.co/t/partial-word-highlighting-doesnt-work-properly/205797)
**Author:** [@Ilamparithi\_Karthike](https://discuss.elastic.co/u/Ilamparithi_Karthike)\ **Replies:** 1\ **Last updated:** [November 1, 2019, 7:14am UTC](https://discuss.elastic.co/t/partial-word-highlighting-doesnt-work-properly/205797 "2019-11-01T07:14:52Z")
I am using highlighting(fvh) in the elasticsearch to highlight the keyword. When I do a search with keyword 5-2011, it produces the result with the keyword 005-2011 but it doesn't highlight the keyword. My query to hig… --- ## [Set up Users](https://discuss.elastic.co/t/set-up-users/205967)
**Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\ **Replies:** 3\ **Last updated:** [November 1, 2019, 6:02am UTC](https://discuss.elastic.co/t/set-up-users/205967 "2019-11-01T06:02:20Z")
I want to set up users to log into the kibana dashboard so that they can see different dashboards, etc. I know starting in 6.3 or 6.4 the security option for this I thought was part of but when I set up my 6.8 stack no d… --- ## [Indexing performance - Choppy graphs - FreeBSD ZFS](https://discuss.elastic.co/t/indexing-performance-choppy-graphs-freebsd-zfs/206088)
**Author:** [@LogBabel](https://discuss.elastic.co/u/LogBabel)\ **Replies:** 9\ **Last updated:** [November 1, 2019, 5:09am UTC](https://discuss.elastic.co/t/indexing-performance-choppy-graphs-freebsd-zfs/206088 "2019-11-01T05:09:37Z")
Hello all. Seeking some ideas to help diagnose our cluster performance. I'll start with the specs: Data nodes: 5x 64-core 64GB RAM. Oracle Java 8. FreeBSD. ZFS RAID10 36TB. Search/ingest nodes: 2x with same spec… --- ## [Exclude Significant Term Aggregation With Different Field](https://discuss.elastic.co/t/exclude-significant-term-aggregation-with-different-field/204759)
**Author:** [@rakaziwi](https://discuss.elastic.co/u/rakaziwi)\ **Replies:** 1\ **Last updated:** [November 1, 2019, 3:58am UTC](https://discuss.elastic.co/t/exclude-significant-term-aggregation-with-different-field/204759 "2019-11-01T03:58:41Z")
Hello, Is it possible to filter the bucket list result of significant term aggregations using multiple fields to be filtered? I am trying to create a recommendation feature using ES based on this article at medium htt… --- ## [Everyone faced this issue?](https://discuss.elastic.co/t/everyone-faced-this-issue/205576)
**Author:** [@pbona](https://discuss.elastic.co/u/pbona)\ **Replies:** 34\ **Last updated:** [November 1, 2019, 2:13am UTC](https://discuss.elastic.co/t/everyone-faced-this-issue/205576 "2019-11-01T02:13:25Z")
\[2019-10-28T01:43:36,493\]\[INFO \]\[logstash.agent \] Successfully started Logstash API endpoint {:port=\>9600} \[2019-10-28T01:43:41,249\]\[INFO \]\[logstash.runner \] Logstash shut down. \[2019-10-28T01:44:13,… --- ## [Dynamic Timestamp Pattern Failure for Date Filter](https://discuss.elastic.co/t/dynamic-timestamp-pattern-failure-for-date-filter/206105)
**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 9:32pm UTC](https://discuss.elastic.co/t/dynamic-timestamp-pattern-failure-for-date-filter/206105 "2019-10-31T21:32:02Z")
I'm trying to parse a date with a dynamic timestamp pattern provided by the client, but Logstash fails and won't start when accessing the timestamp\_pattern variable in the date filter. Here is an example that reproduces … --- ## [Table Aggregating On Text Field](https://discuss.elastic.co/t/table-aggregating-on-text-field/202588)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 3\ **Last updated:** [October 31, 2019, 9:30pm UTC](https://discuss.elastic.co/t/table-aggregating-on-text-field/202588 "2019-10-31T21:30:10Z")
Ive got two tables of URLs, one of them counts the number of visits for the root path of a URL and the other is a list of all URLs visited. The field, url.path, is indexed as both a text and keyword field. I would like… --- ## [Datatable/Discover Drilldown to child elements](https://discuss.elastic.co/t/datatable-discover-drilldown-to-child-elements/205816)
**Author:** [@j\_a\_griffiths](https://discuss.elastic.co/u/j_a_griffiths)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 9:20pm UTC](https://discuss.elastic.co/t/datatable-discover-drilldown-to-child-elements/205816 "2019-10-31T21:20:16Z")
I have some data in an index similar to below Name - This is a string id - This is an integer childid - This is a csv list of integers stored in a string So I may have "Jon", 1, "2,3" "James", 2, "" "Lisa", 3, "" … --- ## [Giant Data File](https://discuss.elastic.co/t/giant-data-file/206107)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 0\ **Last updated:** [October 31, 2019, 9:15pm UTC](https://discuss.elastic.co/t/giant-data-file/206107 "2019-10-31T21:15:41Z")
Just finished upgrading from 7.2 to 7.4.1 and was cleaning up the 7.2 installations when something caught my eye. In the root of my 7.2 elasticsearch folder, I have a file named data that is about 18GB in size, what is … --- ## [Logstash Extractnumbers plugin usage](https://discuss.elastic.co/t/logstash-extractnumbers-plugin-usage/205876)
**Author:** [@angryninja](https://discuss.elastic.co/u/angryninja)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 8:50pm UTC](https://discuss.elastic.co/t/logstash-extractnumbers-plugin-usage/205876 "2019-10-31T20:50:02Z")
Hi there, I have started using Logstash just recently. How do I make use of Extractnumbers plugin with Logstash ? I can find its usage with options but don't seem to find the simplest example of a basic use case of ext… --- ## [IP-Filtering API not showing rulesets](https://discuss.elastic.co/t/ip-filtering-api-not-showing-rulesets/205644)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 6\ **Last updated:** [October 31, 2019, 7:26pm UTC](https://discuss.elastic.co/t/ip-filtering-api-not-showing-rulesets/205644 "2019-10-31T19:26:11Z")
Hi there, I am currently trying to script a few things for our ECE. Right now I am hurdling with the API for IP-filtering. curl -k -X GET -H "Authorization: Bearer mytoken" https://localhost:12443/api/v1/deployments/… --- ## [Check if vehicle is driving on water](https://discuss.elastic.co/t/check-if-vehicle-is-driving-on-water/205862)
**Author:** [@AstroSlazak](https://discuss.elastic.co/u/AstroSlazak)\ **Replies:** 3\ **Last updated:** [October 31, 2019, 7:13pm UTC](https://discuss.elastic.co/t/check-if-vehicle-is-driving-on-water/205862 "2019-10-31T19:13:25Z")
Hi, I have map with vehicles, some times i have an error with position data and i want to check if some of vehicle is not driving on water, if yes get an alert. How can i do it ? --- ## [Filtering in a Nested Sort appears to break sort](https://discuss.elastic.co/t/filtering-in-a-nested-sort-appears-to-break-sort/204118)
**Author:** [@wittjosiah](https://discuss.elastic.co/u/wittjosiah)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 6:59pm UTC](https://discuss.elastic.co/t/filtering-in-a-nested-sort-appears-to-break-sort/204118 "2019-10-31T18:59:12Z")
I've run into a weird issue with nested sorts. When specifying a sort as such: "sort": \[ { "variations.price.regular": { "mode": "min", "order": "asc", "nested": { "path": "va… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1804) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1806)