# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1817 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1818 --- ## [Error when run logstash .conf file](https://discuss.elastic.co/t/error-when-run-logstash-conf-file/205199)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 12:31pm UTC](https://discuss.elastic.co/t/error-when-run-logstash-conf-file/205199 "2019-10-25T12:31:27Z")
Hi guys when I run config file with sudo -u logstash /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/task.conf It gives me the following error \[INFO \] 2019-10-25 07:59:53.283 \[\[main\]\ **Author:** [@emilio](https://discuss.elastic.co/u/emilio)\ **Replies:** 3\ **Last updated:** [October 25, 2019, 12:24pm UTC](https://discuss.elastic.co/t/abnormally-cpu-utilization-by-logstash/203386 "2019-10-25T12:24:37Z") Dear all, I have just one grok filter in my logstash and it horrible utilizes CPU up to 1600% Could you, please help me to detect bottleneck in my filter and fix it? Thank you in advance. That's my filter: filter { … --- ## [Elastic / Logstash Paralelism](https://discuss.elastic.co/t/elastic-logstash-paralelism/205066)
**Author:** [@jmota](https://discuss.elastic.co/u/jmota)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 11:55am UTC](https://discuss.elastic.co/t/elastic-logstash-paralelism/205066 "2019-10-25T11:55:35Z")
Hi, i m trying to undestand how does parallelism works in ES ... Searched around and read several itens about it but cant find the right answer to my question. I find myself , probably, missing some concept or confiur… --- ## [Configuration elk stack](https://discuss.elastic.co/t/configuration-elk-stack/205249)
**Author:** [@Leks](https://discuss.elastic.co/u/Leks)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 11:53am UTC](https://discuss.elastic.co/t/configuration-elk-stack/205249 "2019-10-25T11:53:29Z")
Hi all, I try to solve my problem with Elasticsearch Unreachable: Connection refused, while loading data by using logstash. Elasticsearch.yml: network.host: 0.0.0.0 http:port: 9200 Kibana.yml: elasticsearch.host… --- ## [Fuzzy not matching with two substitutions (distance=2)](https://discuss.elastic.co/t/fuzzy-not-matching-with-two-substitutions-distance-2/204931)
**Author:** [@Benjamin\_Gathmann](https://discuss.elastic.co/u/Benjamin_Gathmann)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 11:47am UTC](https://discuss.elastic.co/t/fuzzy-not-matching-with-two-substitutions-distance-2/204931 "2019-10-25T11:47:51Z")
In ES 7.4, I have created a simple index with default mapping. There is a string field "authors". I have indexed a doc where "authors" is "Benjamin". Now I use this query: GET my\_index/\_search { "query": { "fuzz… --- ## [Unable to install the logstash 6.6.2](https://discuss.elastic.co/t/unable-to-install-the-logstash-6-6-2/205245)
**Author:** [@krishnakumar\_s](https://discuss.elastic.co/u/krishnakumar_s)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 11:37am UTC](https://discuss.elastic.co/t/unable-to-install-the-logstash-6-6-2/205245 "2019-10-25T11:37:14Z")
Hi Team I have logstash 6.6.2 version but when i ran the services getting "Logstash stopped processing because of an error:(Load Error) unsupported platform:x86\_64-windows" Kindly confirm the logstash 6.6.2 it suppor… --- ## [Filter Data With First Data in grok filter](https://discuss.elastic.co/t/filter-data-with-first-data-in-grok-filter/203426)
**Author:** [@kisuke](https://discuss.elastic.co/u/kisuke)\ **Replies:** 6\ **Last updated:** [October 25, 2019, 11:35am UTC](https://discuss.elastic.co/t/filter-data-with-first-data-in-grok-filter/203426 "2019-10-25T11:35:32Z")
All is in the title I want to filter with the first data in my grok filter to use an other grok filter --- ## [Add host to es.reindex.remote.whitelist via ES\_OPTS not working](https://discuss.elastic.co/t/add-host-to-es-reindex-remote-whitelist-via-es-opts-not-working/205243)
**Author:** [@jillesvangurp](https://discuss.elastic.co/u/jillesvangurp)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 11:27am UTC](https://discuss.elastic.co/t/add-host-to-es-reindex-remote-whitelist-via-es-opts-not-working/205243 "2019-10-25T11:27:54Z")
I'm trying to index from elastic cloud locally in a docker container (7.4.0) but having a hard time whitelisting the remote host. I've added this to the ES\_OPTS and can see this option being logged when ES starts: -Des… --- ## [How to Start or Stop elastic search with REST](https://discuss.elastic.co/t/how-to-start-or-stop-elastic-search-with-rest/205235)
**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 11:19am UTC](https://discuss.elastic.co/t/how-to-start-or-stop-elastic-search-with-rest/205235 "2019-10-25T11:19:59Z")
I am trying to start or stop my elastic search by using REST. Is there any REST API available. Or should I need to do any kind of setup? Now I am using NSSM in windows for creating service and start and stop service. P… --- ## [Hot/Warm/Cold index assignment](https://discuss.elastic.co/t/hot-warm-cold-index-assignment/203235)
**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\ **Replies:** 6\ **Last updated:** [October 25, 2019, 11:12am UTC](https://discuss.elastic.co/t/hot-warm-cold-index-assignment/203235 "2019-10-25T11:12:16Z")
Hi, I've set up a 3 node cluster for a testing stack. Each node is set up on Docker with the required: node.attr.data=hot / node.attr.data=warm / node.attr.data=cold respectivly. I have created a policy in Kibana as fo… --- ## [How to read ealsticsearch as input in logstash only once](https://discuss.elastic.co/t/how-to-read-ealsticsearch-as-input-in-logstash-only-once/205236)
**Author:** [@Sunil\_Murali](https://discuss.elastic.co/u/Sunil_Murali)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 10:36am UTC](https://discuss.elastic.co/t/how-to-read-ealsticsearch-as-input-in-logstash-only-once/205236 "2019-10-25T10:36:33Z")
Hi, Need to take the values from an elastic index\_1 through logstash then process it and insert it to another elastic index\_2. This is the process i am doing. But once the input read index\_1 and inserted to index\_2, th… --- ## [Shard cannot be allocated to the same node on which a copy of the shard already exists](https://discuss.elastic.co/t/shard-cannot-be-allocated-to-the-same-node-on-which-a-copy-of-the-shard-already-exists/205231)
**Author:** [@111168](https://discuss.elastic.co/u/111168)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 10:13am UTC](https://discuss.elastic.co/t/shard-cannot-be-allocated-to-the-same-node-on-which-a-copy-of-the-shard-already-exists/205231 "2019-10-25T10:13:01Z")
помогите плиз с kibana выдал 503 curl -XGET 10.128.0.5:9200/\_cluster/allocation/explain?pretty выдал cannot allocate because allocation is not permitted to any of the nodes и the shard cannot be allocated to the sam… --- ## [Logstash concurrency - managing multiple LS nodes that share the same pipeline configuration](https://discuss.elastic.co/t/logstash-concurrency-managing-multiple-ls-nodes-that-share-the-same-pipeline-configuration/204446)
**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 9:47am UTC](https://discuss.elastic.co/t/logstash-concurrency-managing-multiple-ls-nodes-that-share-the-same-pipeline-configuration/204446 "2019-10-25T09:47:56Z")
Hi all, I have a question regarding concurrency management in Logstash. My setup is the following. I have two Logstash nodes that run the same pipeline, i.e. they use the same pipeline configuration. They perform exac… --- ## [How to send data from my system to remote elasticsearch server](https://discuss.elastic.co/t/how-to-send-data-from-my-system-to-remote-elasticsearch-server/205224)
**Author:** [@bhushanudupa](https://discuss.elastic.co/u/bhushanudupa)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 9:46am UTC](https://discuss.elastic.co/t/how-to-send-data-from-my-system-to-remote-elasticsearch-server/205224 "2019-10-25T09:46:46Z")
Hi folks, I have installed and setup elasticsearch, kibana and logstash. Now I want to send some data(example: space available, last login etc..,) to elasticsearch with my own fields(Example: space\_available: 1GB and la… --- ## [Elasticsearch does not sort on double field](https://discuss.elastic.co/t/elasticsearch-does-not-sort-on-double-field/205222)
**Author:** [@May](https://discuss.elastic.co/u/May)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 9:44am UTC](https://discuss.elastic.co/t/elasticsearch-does-not-sort-on-double-field/205222 "2019-10-25T09:44:18Z")
I am querying index in ES using below code def cat\_results\_tmp(response,field): results=\[\] for hit in response\['hits'\]\['hits'\]: result\_tuple = ( hit\["\_source"\]\[field\] ) results.append(result\_tuple) re… --- ## [How to rotate elastic log files using logrotate instead of log4j](https://discuss.elastic.co/t/how-to-rotate-elastic-log-files-using-logrotate-instead-of-log4j/205210)
**Author:** [@nicolai](https://discuss.elastic.co/u/nicolai)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 8:49am UTC](https://discuss.elastic.co/t/how-to-rotate-elastic-log-files-using-logrotate-instead-of-log4j/205210 "2019-10-25T08:49:19Z")
Hi, This is to answer a question I've been working on this morning and found no good answers for using google. We put our logs into a cloud log solution. We're using a collection agent (fluentd) to slurp all files matc… --- ## [Geo\_shape: Circle query not supported](https://discuss.elastic.co/t/geo-shape-circle-query-not-supported/203436)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 9:00am UTC](https://discuss.elastic.co/t/geo-shape-circle-query-not-supported/203436 "2019-10-25T09:00:27Z")
I have a field indexed using below: "geometry": { "type": "geo\_shape" } Above geometry is a LineString. I want to see if my spatial query i.e. a circle query intersects this line for given radius. "filter": { … --- ## [Noob trying to process a file](https://discuss.elastic.co/t/noob-trying-to-process-a-file/204215)
**Author:** [@tronty](https://discuss.elastic.co/u/tronty)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 8:56am UTC](https://discuss.elastic.co/t/noob-trying-to-process-a-file/204215 "2019-10-25T08:56:32Z")
Hi all, So I'm trying to do something that I'm guessing is pretty basic but I am stuck and cannot find the answer. Problems are with config file :frowning: I've got an input file (postfix logs) that I want to parse w… --- ## [Indexes were missing after ES upgrade from 6.3 to 6.8](https://discuss.elastic.co/t/indexes-were-missing-after-es-upgrade-from-6-3-to-6-8/205203)
**Author:** [@Rosales\_Joebert](https://discuss.elastic.co/u/Rosales_Joebert)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 8:09am UTC](https://discuss.elastic.co/t/indexes-were-missing-after-es-upgrade-from-6-3-to-6-8/205203 "2019-10-25T08:09:41Z")
i am currently upgrading my elasticsearch helm deployment from 6.3 to 6.8. After changing the image, all of my indices were gone, but if I return it to 6.3, the nodes are back there. Any help would be very much appreciat… --- ## [Kibana 6.8 add filter to particular visualization](https://discuss.elastic.co/t/kibana-6-8-add-filter-to-particular-visualization/204976)
**Author:** [@zhangjinzhou](https://discuss.elastic.co/u/zhangjinzhou)\ **Replies:** 3\ **Last updated:** [October 25, 2019, 7:36am UTC](https://discuss.elastic.co/t/kibana-6-8-add-filter-to-particular-visualization/204976 "2019-10-25T07:36:38Z")
I am new to kibana. I created my first visualization and realized the time range and filter on the top is always applied to the visualization. But I need different filters for different visualization. Is there a way to s… --- ## [Grokparsefailure when filtering a multiline json value](https://discuss.elastic.co/t/grokparsefailure-when-filtering-a-multiline-json-value/204803)
**Author:** [@Cluster](https://discuss.elastic.co/u/Cluster)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 7:32am UTC](https://discuss.elastic.co/t/grokparsefailure-when-filtering-a-multiline-json-value/204803 "2019-10-25T07:32:11Z")
Due to memory limitation I cannot deploy Beats on my device. Therefore I pull metric data with a remote Http\_poller into Logstash. The response data of the poll-request looks like this: { "memory": { "raw": " … --- ## [Get value from message and put it into new field](https://discuss.elastic.co/t/get-value-from-message-and-put-it-into-new-field/205045)
**Author:** [@AstroSlazak](https://discuss.elastic.co/u/AstroSlazak)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 4:16am UTC](https://discuss.elastic.co/t/get-value-from-message-and-put-it-into-new-field/205045 "2019-10-25T04:16:34Z")
Hi, I have a problem i want to get Longitude and Latitude from log: "2019-10-24 12:01:06,110 \[33\] INFO XUDP\_Endpoint.UdpEnpoint \[(null)\] - Data received: AS:17907,NW:77,RD:3003,DT24.10.2019 10.01.05, Longitude:10,457… --- ## [How to Group Spans, Metadata and Transactions Together for Visualization, Part 2](https://discuss.elastic.co/t/how-to-group-spans-metadata-and-transactions-together-for-visualization-part-2/204527)
**Author:** [@LordMathis](https://discuss.elastic.co/u/LordMathis)\ **Replies:** 3\ **Last updated:** [October 25, 2019, 7:07am UTC](https://discuss.elastic.co/t/how-to-group-spans-metadata-and-transactions-together-for-visualization-part-2/204527 "2019-10-25T07:07:13Z")
Kibana version: 7.3 Elasticsearch version: 7.3 APM Server version: 7.3 APM Agent language and version: Self created agent for Delphi 5 and above Hello, I have proposed this question before but the answer I got back … --- ## [Viewing Pinned Timeline Events](https://discuss.elastic.co/t/viewing-pinned-timeline-events/205132)
**Author:** [@MrTrav](https://discuss.elastic.co/u/MrTrav)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 6:57am UTC](https://discuss.elastic.co/t/viewing-pinned-timeline-events/205132 "2019-10-25T06:57:53Z")
Is it possible to only view events which have been pinned (marked as persisted with the timeline)? --- ## ["Unable to find driver class" when use jdbc\_driver\_library =\> "/home/ubuntu/ojdbc6.jar" after upgrade to Logstash 6.8.4](https://discuss.elastic.co/t/unable-to-find-driver-class-when-use-jdbc-driver-library-home-ubuntu-ojdbc6-jar-after-upgrade-to-logstash-6-8-4/205182)
**Author:** [@Jersey\_Zhang](https://discuss.elastic.co/u/Jersey_Zhang)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 5:00am UTC](https://discuss.elastic.co/t/unable-to-find-driver-class-when-use-jdbc-driver-library-home-ubuntu-ojdbc6-jar-after-upgrade-to-logstash-6-8-4/205182 "2019-10-25T05:00:46Z")
The latest release of Logstash 6.8.4 with jdbc-input-plugin 4.3.16 give us following error in syslog Oct 24 21:02:00 ip-10-40-0-99 logstash\[15520\]: 2172 job: Oct 24 21:02:00 ip-10-40-0-99 logstash\[15520\]: 2172 … --- ## [ELK/Logstash in Swarm](https://discuss.elastic.co/t/elk-logstash-in-swarm/205189)
**Author:** [@stinkfly](https://discuss.elastic.co/u/stinkfly)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 6:16am UTC](https://discuss.elastic.co/t/elk-logstash-in-swarm/205189 "2019-10-25T06:16:24Z")
Hi there, I've deployed sebp/elk (https://hub.docker.com/r/sebp/elk/) in a 3 node swarm. It comes up fine. If I point winlogbeat to Elasticsearch, it works fine. However, I find that if I set Logstash as the target f… --- ## [Elasticsearch master node having high memory pressure](https://discuss.elastic.co/t/elasticsearch-master-node-having-high-memory-pressure/205079)
**Author:** [@Komal\_Agarwal](https://discuss.elastic.co/u/Komal_Agarwal)\ **Replies:** 4\ **Last updated:** [October 25, 2019, 6:16am UTC](https://discuss.elastic.co/t/elasticsearch-master-node-having-high-memory-pressure/205079 "2019-10-25T06:16:17Z")
We have our elastic cluster set up in 3 zones right now. The current setup is: 6 data nodes - 2 in each zone - having 58GB RAM each 3 master nodes - 1 in each zone - having 8GB RAM each We are noticing that a master n… --- ## [Failed with result 'exit-code'](https://discuss.elastic.co/t/failed-with-result-exit-code/204957)
**Author:** [@Pulko](https://discuss.elastic.co/u/Pulko)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 6:11am UTC](https://discuss.elastic.co/t/failed-with-result-exit-code/204957 "2019-10-25T06:11:39Z")
Hi guys, Thx for having me here. I'm a newbie :slight\_smile: I need your help : My company would like to use ActiveCollab as a project management tool. AC requires ElasticSearch (but not supporting the 7.x version ye… --- ## [Elasticsearch sort works on and off](https://discuss.elastic.co/t/elasticsearch-sort-works-on-and-off/205188)
**Author:** [@May](https://discuss.elastic.co/u/May)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 6:03am UTC](https://discuss.elastic.co/t/elasticsearch-sort-works-on-and-off/205188 "2019-10-25T06:03:31Z")
I am querying index in ES using below code def cat\_results\_tmp(response): results=\[\] for hit in response\['hits'\]\['hits'\]: result\_tuple = (hit\["\_source"\]\["fieldA"\],hit\["\_source"\]\["fieldB"\] ) results.append(re… --- ## [Maximum shards open 3000；es 7.3.0](https://discuss.elastic.co/t/maximum-shards-open-3000-es-7-3-0/205167)
**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 6:03am UTC](https://discuss.elastic.co/t/maximum-shards-open-3000-es-7-3-0/205167 "2019-10-25T06:03:15Z")
today，my cluster has a warning ：maximum shards open 3000； How should I do？ [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1816) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1818)