# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1831 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1832 --- ## [Index template not being applied](https://discuss.elastic.co/t/index-template-not-being-applied/204277)
**Author:** [@John\_Doe3](https://discuss.elastic.co/u/John_Doe3)\ **Replies:** 6\ **Last updated:** [October 20, 2019, 12:13pm UTC](https://discuss.elastic.co/t/index-template-not-being-applied/204277 "2019-10-20T12:13:49Z")
To achieve my goal - map geo location data from nginx logs to a map - I added a index template to ES with command like this: PUT \_template/nginx-default { "template": "nginx-\*", "order": 0, "index\_patterns" : \[ "nginx… --- ## [Changing timezone](https://discuss.elastic.co/t/changing-timezone/204240)
**Author:** [@Necus](https://discuss.elastic.co/u/Necus)\ **Replies:** 2\ **Last updated:** [October 20, 2019, 11:21am UTC](https://discuss.elastic.co/t/changing-timezone/204240 "2019-10-20T11:21:31Z")
Hi, I'm trying to change timezone for time logs, but for some reason after configuration nothing has changed. What I have done: copying default date/time field: mutate { copy =\> {"time" =\> "new\_time"} } changin… --- ## [Deprecation warnings since the upgrade to 7.4.0](https://discuss.elastic.co/t/deprecation-warnings-since-the-upgrade-to-7-4-0/201917)
**Author:** [@Yakir\_Gibraltar](https://discuss.elastic.co/u/Yakir_Gibraltar)\ **Replies:** 7\ **Last updated:** [October 20, 2019, 9:59am UTC](https://discuss.elastic.co/t/deprecation-warnings-since-the-upgrade-to-7-4-0/201917 "2019-10-20T09:59:36Z")
Hi, since the upgrade from 7.3.2 to 7.4.0, i see many errors of: \[WARN \]\[o.e.d.t.TransportInfo \] \[es-data001.tab.com\] transport.publish\_address was printed as \[ip:port\] instead of \[hostname/ip:port\]. This format is d… --- ## [Aggregation sum for all keys within field](https://discuss.elastic.co/t/aggregation-sum-for-all-keys-within-field/204345)
**Author:** [@Hammad\_Ali\_Khan](https://discuss.elastic.co/u/Hammad_Ali_Khan)\ **Replies:** 0\ **Last updated:** [October 20, 2019, 9:53am UTC](https://discuss.elastic.co/t/aggregation-sum-for-all-keys-within-field/204345 "2019-10-20T09:53:39Z")
Hi there, Just curious if there is a better way for aggregation sum for a structure like this { "combiner\_energy" : { "INV1-CB1-kWh" : 121.15685325833331, "INV1-CB2-kWh" : 126.64289340000002, "INV1-CB3-kWh" : 111.2… --- ## [Kibana date\_nanos generate CSV - TypeError: FieldFormat is not a constructor](https://discuss.elastic.co/t/kibana-date-nanos-generate-csv-typeerror-fieldformat-is-not-a-constructor/200772)
**Author:** [@Alex-St](https://discuss.elastic.co/u/Alex-St)\ **Replies:** 3\ **Last updated:** [October 20, 2019, 6:37am UTC](https://discuss.elastic.co/t/kibana-date-nanos-generate-csv-typeerror-fieldformat-is-not-a-constructor/200772 "2019-10-20T06:37:17Z")
On Discover, click Share, CSV - getting "TypeError: FieldFormat is not a constructor" if one of the fields in kibana pattern is set to date\_nanos. resetting kibana field type to Date fixes the problem, but also trim digi… --- ## [Unable to read email from outlook](https://discuss.elastic.co/t/unable-to-read-email-from-outlook/204187)
**Author:** [@ashokchinna](https://discuss.elastic.co/u/ashokchinna)\ **Replies:** 1\ **Last updated:** [October 19, 2019, 10:00pm UTC](https://discuss.elastic.co/t/unable-to-read-email-from-outlook/204187 "2019-10-19T22:00:26Z")
I am trying to read the emails from the outlook. input { imap { host =\> "outlook.office365.com" password =\> "\*\*\*\*\*\*\*\*" user =\> "\*\*\*\*\*\*\*\*\*" port =\> 993 secure =\> true check\_interval =\> 10 folder =\> "XYZ" } } out… --- ## [Searching Sorting](https://discuss.elastic.co/t/searching-sorting/204286)
**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\ **Replies:** 4\ **Last updated:** [October 19, 2019, 9:50pm UTC](https://discuss.elastic.co/t/searching-sorting/204286 "2019-10-19T21:50:32Z")
1)When I search for iphone xs 256GB it finds it succesfully, but not finds nothing on this case iphone 256GB xs 2)When I search for ACTIV A151-02 Fresh Line 6000mAh (green) it only finds this ACTIV A151-02 Fresh L… --- ## [Move processed from one S3 bucket to other bucket](https://discuss.elastic.co/t/move-processed-from-one-s3-bucket-to-other-bucket/204199)
**Author:** [@pami](https://discuss.elastic.co/u/pami)\ **Replies:** 3\ **Last updated:** [October 19, 2019, 7:20pm UTC](https://discuss.elastic.co/t/move-processed-from-one-s3-bucket-to-other-bucket/204199 "2019-10-19T19:20:59Z")
can anyone can suggest how to move the processed files from one bucket to other. scenario: Bucket 1 2019/10/ will S3 plugin move the processed files in the same structure ? --- ## [Keyword search using Elastic search](https://discuss.elastic.co/t/keyword-search-using-elastic-search/204271)
**Author:** [@dharmil25](https://discuss.elastic.co/u/dharmil25)\ **Replies:** 2\ **Last updated:** [October 19, 2019, 6:10pm UTC](https://discuss.elastic.co/t/keyword-search-using-elastic-search/204271 "2019-10-19T18:10:47Z")
Hi, I am new to Elasticsearch and I am trying to achieve a text search functionality using Elasticsearch. I have over 100 documents and every document has lines starting with timestamp notations. Eg. 00:00:00 - 00:01:… --- ## [Elastic search extracts text inside title attribute of anchor tags while adding pdf attachment](https://discuss.elastic.co/t/elastic-search-extracts-text-inside-title-attribute-of-anchor-tags-while-adding-pdf-attachment/204255)
**Author:** [@sandeepv](https://discuss.elastic.co/u/sandeepv)\ **Replies:** 3\ **Last updated:** [October 19, 2019, 1:59pm UTC](https://discuss.elastic.co/t/elastic-search-extracts-text-inside-title-attribute-of-anchor-tags-while-adding-pdf-attachment/204255 "2019-10-19T13:59:40Z")
I have added a base64 encoded pdf file with pipeline= attachment using kibana into Elasticsearch when i queried the pdf with highlights i got the below result dan@1abmedia.com https://www.globenewswire.com/Tracker?da… --- ## [One node now failing after successful upgrade 6.8-\>7.4 day before](https://discuss.elastic.co/t/one-node-now-failing-after-successful-upgrade-6-8-7-4-day-before/204307)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 1\ **Last updated:** [October 19, 2019, 1:17pm UTC](https://discuss.elastic.co/t/one-node-now-failing-after-successful-upgrade-6-8-7-4-day-before/204307 "2019-10-19T13:17:51Z")
Did an upgrade yesterday from 6.8 to 7.1.1 to 7.4 Today I find one node out of 27 data nodes failing like below and wonder who and why are sending so large message(s): \[2019-10-19T13:53:43,380\]\[DEBUG\]\[o.e.a.a.c.n.i.Tra… --- ## [JSON LInes to JSON ARRAY](https://discuss.elastic.co/t/json-lines-to-json-array/204300)
**Author:** [@Sanjay\_Agnani](https://discuss.elastic.co/u/Sanjay_Agnani)\ **Replies:** 1\ **Last updated:** [October 19, 2019, 1:07pm UTC](https://discuss.elastic.co/t/json-lines-to-json-array/204300 "2019-10-19T13:07:32Z")
Hi All, We receive json lines from logs. would need to aggregate this json lines to json Array Sample: { "source" : "Request" "target": "Request\_parsed" } { "source" : "Request1" "target": "Request\_parsed1" } … --- ## [Using regex in gsub raises CPU usage significantly](https://discuss.elastic.co/t/using-regex-in-gsub-raises-cpu-usage-significantly/202408)
**Author:** [@Ged](https://discuss.elastic.co/u/Ged)\ **Replies:** 5\ **Last updated:** [October 19, 2019, 12:55pm UTC](https://discuss.elastic.co/t/using-regex-in-gsub-raises-cpu-usage-significantly/202408 "2019-10-19T12:55:39Z")
Hi guys, I want to share my observations about using gsub with regex. I use gsub for extracting application instance name from log file path. Example path: /logs/pppas/logs\_tcc/app619\_pppas-prod1/payload.log where ap… --- ## [Replica shards are not involving while searching](https://discuss.elastic.co/t/replica-shards-are-not-involving-while-searching/203688)
**Author:** [@chanakagl](https://discuss.elastic.co/u/chanakagl)\ **Replies:** 6\ **Last updated:** [October 19, 2019, 12:48pm UTC](https://discuss.elastic.co/t/replica-shards-are-not-involving-while-searching/203688 "2019-10-19T12:48:07Z")
Hi, I have 3 node cluster with time series indices(per day). I have enabled allocation awareness and all nodes in AWS. Node2 is having Index1 all replica shards on it while primaries are assigned to other two nodes. wh… --- ## [Template inheritance: non-dynamic mappings](https://discuss.elastic.co/t/template-inheritance-non-dynamic-mappings/204306)
**Author:** [@jesus\_1](https://discuss.elastic.co/u/jesus_1)\ **Replies:** 2\ **Last updated:** [October 19, 2019, 12:15pm UTC](https://discuss.elastic.co/t/template-inheritance-non-dynamic-mappings/204306 "2019-10-19T12:15:14Z")
Hi, Using ES 7.0.0. I've been looking for docs/posts about this, but most info is very old or not clear, and after playing around with it I don't understand how it should work. I have different indexes that have a comm… --- ## [Time series visualization of logs -HELP](https://discuss.elastic.co/t/time-series-visualization-of-logs-help/204301)
**Author:** [@anusree\_arun](https://discuss.elastic.co/u/anusree_arun)\ **Replies:** 0\ **Last updated:** [October 19, 2019, 9:31am UTC](https://discuss.elastic.co/t/time-series-visualization-of-logs-help/204301 "2019-10-19T09:31:54Z")
how to perform time series visualization of logs / data using ML and the same has to be added in dashboard also. Any steps or docs available. --- ## [Spark-es too many request error - 429 error code](https://discuss.elastic.co/t/spark-es-too-many-request-error-429-error-code/204298)
**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\ **Replies:** 1\ **Last updated:** [October 19, 2019, 8:23am UTC](https://discuss.elastic.co/t/spark-es-too-many-request-error-429-error-code/204298 "2019-10-19T08:23:48Z")
Node Hot thread api gives following input ::: {appsec-es-master-0}{AAw21yu1Q1e5ZWMoBe2ZPA}{4IRnxBeST3ODTCHlLq\_FqA}{10.244.3.48}{10.244.3.48:9300}{ml.machine\_memory=2147483648, xpack.installed=true, ml.max\_open\_jobs=20} … --- ## [How to change Index.mapping.depth.limit](https://discuss.elastic.co/t/how-to-change-index-mapping-depth-limit/204233)
**Author:** [@planetracer](https://discuss.elastic.co/u/planetracer)\ **Replies:** 1\ **Last updated:** [October 19, 2019, 8:16am UTC](https://discuss.elastic.co/t/how-to-change-index-mapping-depth-limit/204233 "2019-10-19T08:16:16Z")
How would you set the index.mapping.depth.limit field? I have been getting this error: "status" : 400, "error" : { "type" : "illegal\_argument\_exception", "reason" : "Limit of mapping depth \[20\] in index \[durations2\] … --- ## [How to use includes in Logstash conf files](https://discuss.elastic.co/t/how-to-use-includes-in-logstash-conf-files/204283)
**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\ **Replies:** 1\ **Last updated:** [October 19, 2019, 8:09am UTC](https://discuss.elastic.co/t/how-to-use-includes-in-logstash-conf-files/204283 "2019-10-19T08:09:01Z")
Can includes be used in logstash config files? Minimal, Complete, and Verifiable Example Can I replace this... file: beats.conf input { beats { port =\> 5044 } } filter { date { match =\> \["myTimest… --- ## [Optimising Elasticsearch for timeseries data with high search query QPS](https://discuss.elastic.co/t/optimising-elasticsearch-for-timeseries-data-with-high-search-query-qps/200715)
**Author:** [@viswanathk243](https://discuss.elastic.co/u/viswanathk243)\ **Replies:** 1\ **Last updated:** [October 19, 2019, 7:59am UTC](https://discuss.elastic.co/t/optimising-elasticsearch-for-timeseries-data-with-high-search-query-qps/200715 "2019-10-19T07:59:09Z")
Hey, We are using ElasticSearch 2.2.0 with an expected search QPS of 80K with an expected p99 of 180ms. Current cluster is of 40 nodes with 12 cores, 24 GB memory (12 GB heap size). Data is 150K documents, one shard wi… --- ## [SIEM not detecting ASA success failure logins](https://discuss.elastic.co/t/siem-not-detecting-asa-success-failure-logins/203754)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 5\ **Last updated:** [October 19, 2019, 5:31am UTC](https://discuss.elastic.co/t/siem-not-detecting-asa-success-failure-logins/203754 "2019-10-19T05:31:59Z")
SIEM not detecting success and failure logins from ASA syslog messages. and also it detect filebeat hostname as the host in SIEM app. What can i do? ASA Syslog message parsing could be better from filebeat 7.4 to popula… --- ## [Kibana short url](https://discuss.elastic.co/t/kibana-short-url/203997)
**Author:** [@ZMMWMY](https://discuss.elastic.co/u/ZMMWMY)\ **Replies:** 4\ **Last updated:** [October 19, 2019, 4:18am UTC](https://discuss.elastic.co/t/kibana-short-url/203997 "2019-10-19T04:18:52Z")
Can short links be generated only by superuser? --- ## [How to restore the snapshot in Docker?](https://discuss.elastic.co/t/how-to-restore-the-snapshot-in-docker/204220)
**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\ **Replies:** 1\ **Last updated:** [October 19, 2019, 3:47am UTC](https://discuss.elastic.co/t/how-to-restore-the-snapshot-in-docker/204220 "2019-10-19T03:47:01Z")
I have setup a cluster on the docker, and after completed taking the snapshot successfully, I am trying to simulate the scenario to restore the snapshot. What are the steps to do so? I can't find the instructions from t… --- ## [Sorting data](https://discuss.elastic.co/t/sorting-data/204290)
**Author:** [@agus](https://discuss.elastic.co/u/agus)\ **Replies:** 1\ **Last updated:** [October 19, 2019, 12:28am UTC](https://discuss.elastic.co/t/sorting-data/204290 "2019-10-19T00:28:03Z")
can elasticsearch sorting handle full text like "microsoft office" --- ## [Reindexing from Remote Cluster Fails](https://discuss.elastic.co/t/reindexing-from-remote-cluster-fails/202219)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 2\ **Last updated:** [October 18, 2019, 11:41pm UTC](https://discuss.elastic.co/t/reindexing-from-remote-cluster-fails/202219 "2019-10-18T23:41:08Z")
I have two clusters running Elasticsearch & Kibana 7.3. I've been able to reindex documents to the same cluster without issue in the past, however when attempting to Reindex from Remote, it's been reindexing much more sl… --- ## [Restore 6.1.1 to 7.3.1 bug?](https://discuss.elastic.co/t/restore-6-1-1-to-7-3-1-bug/204288)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 1\ **Last updated:** [October 18, 2019, 11:34pm UTC](https://discuss.elastic.co/t/restore-6-1-1-to-7-3-1-bug/204288 "2019-10-18T23:34:46Z")
Is this a known issue? I was running 7.3.0 and restored ran fine. But now upgraded to 7.3.1, I'm getting unassigned shards. --- ## [Could not locate that index-pattern (id: filebeat-\*), click here to re-create it](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-filebeat-click-here-to-re-create-it/204108)
**Author:** [@jmoran8888](https://discuss.elastic.co/u/jmoran8888)\ **Replies:** 2\ **Last updated:** [October 18, 2019, 10:26pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-filebeat-click-here-to-re-create-it/204108 "2019-10-18T22:26:02Z")
I was running ELK perfectly fine v7.3.0. I wanted to add user management and enabled xpack.security.enabled: true - fixed all the authentication errors that caused - created a couple of dashboard only users. However now… --- ## [Closed/Frozen indices behavior on cluster restart](https://discuss.elastic.co/t/closed-frozen-indices-behavior-on-cluster-restart/204272)
**Author:** [@lschmid](https://discuss.elastic.co/u/lschmid)\ **Replies:** 1\ **Last updated:** [October 18, 2019, 10:11pm UTC](https://discuss.elastic.co/t/closed-frozen-indices-behavior-on-cluster-restart/204272 "2019-10-18T22:11:56Z")
Hi, Say we have 3 frozen indices and 2 closed indices in a cluster. When the cluster restarts, will the frozen indices be unfrozen and the closed indices reopened? Thanks --- ## [ELK stack and topology map](https://discuss.elastic.co/t/elk-stack-and-topology-map/204284)
**Author:** [@Christopher\_Smith1](https://discuss.elastic.co/u/Christopher_Smith1)\ **Replies:** 0\ **Last updated:** [October 18, 2019, 9:58pm UTC](https://discuss.elastic.co/t/elk-stack-and-topology-map/204284 "2019-10-18T21:58:23Z")
Any dev work on frequently collecting SNMP/CDP/LLDP to automatically refresh topology map? Keen to connect, spin up, etc --- ## [Remove/restrict items in Kibana Visualize field picker](https://discuss.elastic.co/t/remove-restrict-items-in-kibana-visualize-field-picker/203530)
**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\ **Replies:** 3\ **Last updated:** [October 18, 2019, 8:20pm UTC](https://discuss.elastic.co/t/remove-restrict-items-in-kibana-visualize-field-picker/203530 "2019-10-18T20:20:39Z")
Hi, In the Kibana Visualize field picker, I'm seeing hundreds of metricbeat fields that we have never used. We only use the system module and yet we see fields from every single metricbeat module. Is there any way to li… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1830) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1832)