# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1841 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1842 --- ## [Can path of file in input plugins set to D drive/disk path on Windows OS?](https://discuss.elastic.co/t/can-path-of-file-in-input-plugins-set-to-d-drive-disk-path-on-windows-os/202416)
**Author:** [@zxc654951](https://discuss.elastic.co/u/zxc654951)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 5:55am UTC](https://discuss.elastic.co/t/can-path-of-file-in-input-plugins-set-to-d-drive-disk-path-on-windows-os/202416 "2019-10-15T05:55:59Z")
Hello. I can run logstash.bat on Windows normally with path to c drive. I want to change path to d drive, but it won't work. Turn the debug on, and report like: \[2019-10-05T14:49:18,537\]\[DEBUG\]\[logstash.instrument.peri… --- ## [Custom format isn't supported cannot open any dashboards](https://discuss.elastic.co/t/custom-format-isnt-supported-cannot-open-any-dashboards/203551)
**Author:** [@Trevorp](https://discuss.elastic.co/u/Trevorp)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 2:53am UTC](https://discuss.elastic.co/t/custom-format-isnt-supported-cannot-open-any-dashboards/203551 "2019-10-15T02:53:49Z")
This has been working fin up until this week Now i get the above error when i try to open a dashboard. And this is what is showing in Elastic search \[2019-10-15 10:13:20,066\]\[WARN \]\[rest.suppressed \] path: /log… --- ## [Help tip for visualizations in Kibana](https://discuss.elastic.co/t/help-tip-for-visualizations-in-kibana/203441)
**Author:** [@naveenbangalore](https://discuss.elastic.co/u/naveenbangalore)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 5:18am UTC](https://discuss.elastic.co/t/help-tip-for-visualizations-in-kibana/203441 "2019-10-15T05:18:36Z")
I am trying to add "help tip" to the visualizations in a dashboard. These tips would briefly explain about a visualization while hovering the mouse pointer over them. Is there a way to achieve this? Does this feature ev… --- ## [Question for Loadbalancing with logstash](https://discuss.elastic.co/t/question-for-loadbalancing-with-logstash/203560)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 4:26am UTC](https://discuss.elastic.co/t/question-for-loadbalancing-with-logstash/203560 "2019-10-15T04:26:33Z")
Hello everyone so i have this kind of setup i have one elastic cluster and 4 logstash, 2 of them are for collecting log from filebeat, and two of them are for processing the log, between the logstash processing and the … --- ## [Delete S3 snapshots through API to minimize the size of s3 bucket](https://discuss.elastic.co/t/delete-s3-snapshots-through-api-to-minimize-the-size-of-s3-bucket/202751)
**Author:** [@areddy7021](https://discuss.elastic.co/u/areddy7021)\ **Replies:** 14\ **Last updated:** [October 15, 2019, 4:08am UTC](https://discuss.elastic.co/t/delete-s3-snapshots-through-api-to-minimize-the-size-of-s3-bucket/202751 "2019-10-15T04:08:38Z")
Hello Everyone , I am currently having issues in managing the old snapshots in s3 as the bucket size is getting increased if i have to store old snapshots. We have tried the option of s3 lifecycle policies and that is n… --- ## [I would like to ask a question about the multi-value field taking the previous one according to the matching degree](https://discuss.elastic.co/t/i-would-like-to-ask-a-question-about-the-multi-value-field-taking-the-previous-one-according-to-the-matching-degree/203555)
**Author:** [@yanglingqiang](https://discuss.elastic.co/u/yanglingqiang)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 3:32am UTC](https://discuss.elastic.co/t/i-would-like-to-ask-a-question-about-the-multi-value-field-taking-the-previous-one-according-to-the-matching-degree/203555 "2019-10-15T03:32:02Z")
The field "descript" as shown is a multi-value. Then type "led light" to query, then what I want is that the data in the "descript" field in the returned result has only one of the most matching data; as shown in the f… --- ## [Add new filter questions](https://discuss.elastic.co/t/add-new-filter-questions/203533)
**Author:** [@sud0](https://discuss.elastic.co/u/sud0)\ **Replies:** 4\ **Last updated:** [October 15, 2019, 3:16am UTC](https://discuss.elastic.co/t/add-new-filter-questions/203533 "2019-10-15T03:16:41Z")
Hi. I'm trying to parse the id filed in my message column so that I can group by id to have a number of unique transactions in my dashboard. Currently, the filter is: if \[type\] == "web\_industry\_log" { muta… --- ## [All dashboard visualisations in 'stalled' state for 30s to 1m](https://discuss.elastic.co/t/all-dashboard-visualisations-in-stalled-state-for-30s-to-1m/202627)
**Author:** [@robbav](https://discuss.elastic.co/u/robbav)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 2:00am UTC](https://discuss.elastic.co/t/all-dashboard-visualisations-in-stalled-state-for-30s-to-1m/202627 "2019-10-15T02:00:11Z")
First post here, hoping to get some assistance with this issue, or tell me if this is normal behavior. Background: We have a cluster of 3 nodes with 32Gb each running on VM / docker. Each node has 16Gb allocated to Ja… --- ## [Question about time addition by Ruby filter](https://discuss.elastic.co/t/question-about-time-addition-by-ruby-filter/203136)
**Author:** [@smash](https://discuss.elastic.co/u/smash)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 1:55am UTC](https://discuss.elastic.co/t/question-about-time-addition-by-ruby-filter/203136 "2019-10-15T01:55:45Z")
The following was correctly output to the "date\_time\_1" field after adding 9 hours to the date and time of "Timestamp".The following is the source ruby { code =\> "event.set('tt',event.get('\[@timestamp\]').time.lo… --- ## [Elasticsearch is not using memory resources available](https://discuss.elastic.co/t/elasticsearch-is-not-using-memory-resources-available/200215)
**Author:** [@Luis\_Alejandro\_Galan](https://discuss.elastic.co/u/Luis_Alejandro_Galan)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 11:11pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-using-memory-resources-available/200215 "2019-10-14T23:11:52Z")
hello! I am trying to troubleshoot elasticsearch, we noticed that it was having memory issues and crashing. We have added 4gbs of memory onto the server but notice that it is not using the additional resources, is there … --- ## [NPE ES 7.4 Script score](https://discuss.elastic.co/t/npe-es-7-4-script-score/203525)
**Author:** [@sgTextSearch](https://discuss.elastic.co/u/sgTextSearch)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 9:24pm UTC](https://discuss.elastic.co/t/npe-es-7-4-script-score/203525 "2019-10-14T21:24:23Z")
NPE when using script scores query across multiple indices. When a range clause is written on a field that exists in just one index, the other indices throw NPE. org.elasticsearch.transport.RemoteTransportException: \[M… --- ## [Logstash ver 7.4.0 in Docker :: Set AutoConfig Refresh?](https://discuss.elastic.co/t/logstash-ver-7-4-0-in-docker-set-autoconfig-refresh/203515)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 9:53pm UTC](https://discuss.elastic.co/t/logstash-ver-7-4-0-in-docker-set-autoconfig-refresh/203515 "2019-10-14T21:53:22Z")
Hi ELK Wise Ones… I recently spun up Logstash 7.4.0 as a Docker container. My host machine is a Ubuntu 16.04.4, and my Docker is 17.09.0-ce, build afdb6d4. I was following the procedure to set automatic config reloadin… --- ## [Filter is not working while using @log\_group in AWS](https://discuss.elastic.co/t/filter-is-not-working-while-using-log-group-in-aws/203510)
**Author:** [@mfolivas](https://discuss.elastic.co/u/mfolivas)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 9:41pm UTC](https://discuss.elastic.co/t/filter-is-not-working-while-using-log-group-in-aws/203510 "2019-10-14T21:41:47Z")
I need to be able to do a filter on the @log\_group but I get zero hits when doing it. When I do it with the filter, I do get hits. I figured that I am probably not this in this correct. The @log\_group is set to be: "@… --- ## [Having unindexed fields](https://discuss.elastic.co/t/having-unindexed-fields/203526)
**Author:** [@Joyce](https://discuss.elastic.co/u/Joyce)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 9:35pm UTC](https://discuss.elastic.co/t/having-unindexed-fields/203526 "2019-10-14T21:35:48Z")
Hello, I have index file send from UiPath server with Robot logs. There are certain fields only appear in some log entries. In Kibana dev tool they are showing as unindexed. When check on the mapping on the index those … --- ## [Kibana will not load](https://discuss.elastic.co/t/kibana-will-not-load/203131)
**Author:** [@Joshua\_Reback](https://discuss.elastic.co/u/Joshua_Reback)\ **Replies:** 7\ **Last updated:** [October 14, 2019, 8:57pm UTC](https://discuss.elastic.co/t/kibana-will-not-load/203131 "2019-10-14T20:57:55Z")
Hi, I'm taking the "Understanding and Controlling Relevance" course remotely, and I cannot access kibana. When I click the kibana link shown on the page here: http://ec2-18-196-225-250.eu-central-1.compute.amazonaws.com/… --- ## [Help me modify this query so that it can find out the matches which contain N terms in a specific order as opposed to all matches possible which contain the N terms](https://discuss.elastic.co/t/help-me-modify-this-query-so-that-it-can-find-out-the-matches-which-contain-n-terms-in-a-specific-order-as-opposed-to-all-matches-possible-which-contain-the-n-terms/203507)
**Author:** [@hjiop\_oop](https://discuss.elastic.co/u/hjiop_oop)\ **Replies:** 8\ **Last updated:** [October 14, 2019, 8:28pm UTC](https://discuss.elastic.co/t/help-me-modify-this-query-so-that-it-can-find-out-the-matches-which-contain-n-terms-in-a-specific-order-as-opposed-to-all-matches-possible-which-contain-the-n-terms/203507 "2019-10-14T20:28:57Z")
This is what I had, this can query for phrases but they will always be in any order {'query': {'bool': {'should': \[{'bool': {'must': \[{'match\_phrase': {'data': 'word1'}}, {'match\_phrase': {'data': 'word2'}}\]}}\]}}, 'from… --- ## [Script Score](https://discuss.elastic.co/t/script-score/203517)
**Author:** [@sgTextSearch](https://discuss.elastic.co/u/sgTextSearch)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 8:25pm UTC](https://discuss.elastic.co/t/script-score/203517 "2019-10-14T20:25:02Z")
Script Score in place of function score queries. I have been using function score queries to write custom boost scripts. I am trying to replace them with script score queries in 7.4. Is there a way to achieve score\_mode… --- ## [Runaway memory usage](https://discuss.elastic.co/t/runaway-memory-usage/203483)
**Author:** [@JoeyLemur](https://discuss.elastic.co/u/JoeyLemur)\ **Replies:** 4\ **Last updated:** [October 14, 2019, 7:11pm UTC](https://discuss.elastic.co/t/runaway-memory-usage/203483 "2019-10-14T19:11:00Z")
I am deploying Elastic 7.4.0 in my cluster, specifying -Xms4096M -Xmx4096M for the nodes, but I continue to run into pods getting evicted for memory pressure. Examples: The node was low on resource: memory. Container e… --- ## [Branding/customization in Elasticsearch Service (SaaS)](https://discuss.elastic.co/t/branding-customization-in-elasticsearch-service-saas/203512)
**Author:** [@Craig\_Boman](https://discuss.elastic.co/u/Craig_Boman)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 7:05pm UTC](https://discuss.elastic.co/t/branding-customization-in-elasticsearch-service-saas/203512 "2019-10-14T19:05:12Z")
We are getting conflicting support information about the level of branding or customization available in the hosted Elasticsearch Service (Saas) in the Elastic Cloud. Has anyone been able to change the logos and overall … --- ## [Can we incorporate Curator in ILM](https://discuss.elastic.co/t/can-we-incorporate-curator-in-ilm/203234)
**Author:** [@Anikesh\_Paul](https://discuss.elastic.co/u/Anikesh_Paul)\ **Replies:** 5\ **Last updated:** [October 14, 2019, 6:53pm UTC](https://discuss.elastic.co/t/can-we-incorporate-curator-in-ilm/203234 "2019-10-14T18:53:28Z")
Hi, I want to know how can we incorporate curator in ILM so that I can take a backup of an index when it's rolled over. --- ## [Any grok pattern to extract only uppercase from a string?](https://discuss.elastic.co/t/any-grok-pattern-to-extract-only-uppercase-from-a-string/203504)
**Author:** [@ashadp](https://discuss.elastic.co/u/ashadp)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 6:04pm UTC](https://discuss.elastic.co/t/any-grok-pattern-to-extract-only-uppercase-from-a-string/203504 "2019-10-14T18:04:56Z")
For example, I would like to get only ERROR, HINT, and STATEMENT from below strings postgresERROR postgresHINT postgresSTATEMENT If use "%{WORD:log\_type}", then I get full string as below, but I am interested in only… --- ## [SQL INTERVAL question](https://discuss.elastic.co/t/sql-interval-question/203485)
**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 5:58pm UTC](https://discuss.elastic.co/t/sql-interval-question/203485 "2019-10-14T17:58:03Z")
I'm trying to write a simple Elastic SQL that polls the temperature value in the last 3 minutes but i'm not able to select such a small timeframe. It should be as simple as NOW() - INTERVAL 3 MINUTES but that returns not… --- ## [How can I fix error: ConfigurationError: Missing node(s) option for winston-elasticsearch?](https://discuss.elastic.co/t/how-can-i-fix-error-configurationerror-missing-node-s-option-for-winston-elasticsearch/203478)
**Author:** [@steinko](https://discuss.elastic.co/u/steinko)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 5:51pm UTC](https://discuss.elastic.co/t/how-can-i-fix-error-configurationerror-missing-node-s-option-for-winston-elasticsearch/203478 "2019-10-14T17:51:59Z")
How do I fix an error ConfigurationError: Missing node(s) option . Se the discripton here https://stackoverflow.com/q/58371284/8236354 --- ## ["Find all entries that don't contain values from an array"](https://discuss.elastic.co/t/find-all-entries-that-dont-contain-values-from-an-array/203500)
**Author:** [@BonesyWonesy](https://discuss.elastic.co/u/BonesyWonesy)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 5:41pm UTC](https://discuss.elastic.co/t/find-all-entries-that-dont-contain-values-from-an-array/203500 "2019-10-14T17:41:19Z")
I have a list of magazines for sale and each of them has a unique 'magazineId'. I also have an array of ids like \[ 123, 456, 789 \] representing which ids for magazines a user has already purchased. Is there a way to qu… --- ## [Adding a new field to \_source using scripts](https://discuss.elastic.co/t/adding-a-new-field-to-source-using-scripts/203311)
**Author:** [@460](https://discuss.elastic.co/u/460)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 5:38pm UTC](https://discuss.elastic.co/t/adding-a-new-field-to-source-using-scripts/203311 "2019-10-14T17:38:31Z")
HI, I am trying to add a new field while reindexing the data if a particular condition is satisfied. Can anyone solve this problem. Thanks and Regards, Likhith --- ## [Announcing Elastic Cloud on Kubernetes (ECK) 1.0.0 Beta](https://discuss.elastic.co/t/announcing-elastic-cloud-on-kubernetes-eck-1-0-0-beta/203494)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 5:05pm UTC](https://discuss.elastic.co/t/announcing-elastic-cloud-on-kubernetes-eck-1-0-0-beta/203494 "2019-10-14T17:05:22Z")
Announcing Elastic Cloud on Kubernetes (ECK) 1.0.0 Beta Introducing the beta version of Elastic Cloud on Kubernetes (ECK), now with StatefulSets for rapid rolling upgrades and configuration changes. Plus, ECK includes s… --- ## [Elasticsearch as a Logstash input](https://discuss.elastic.co/t/elasticsearch-as-a-logstash-input/203493)
**Author:** [@Ankit\_Nahata](https://discuss.elastic.co/u/Ankit_Nahata)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 4:53pm UTC](https://discuss.elastic.co/t/elasticsearch-as-a-logstash-input/203493 "2019-10-14T16:53:12Z")
Hi, Thanks for looking into this.! My problem: I need to get the count of documents in an elastic index every hour and store that back in another elastic index. Same I have to do for oracle and get the counts and store… --- ## [Beats - fatal error: concurrent map iteration and map write](https://discuss.elastic.co/t/beats-fatal-error-concurrent-map-iteration-and-map-write/203489)
**Author:** [@vishnug](https://discuss.elastic.co/u/vishnug)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 4:12pm UTC](https://discuss.elastic.co/t/beats-fatal-error-concurrent-map-iteration-and-map-write/203489 "2019-10-14T16:12:54Z")
Hi I was following this doc to create a custom beat. I was able to build and run the beat.I encountered an error while running it fatal error: concurrent map iteration and map write goroutine 1 \[running\]: runtime.thr… --- ## [Ingest node json to array](https://discuss.elastic.co/t/ingest-node-json-to-array/203434)
**Author:** [@Lebedev](https://discuss.elastic.co/u/Lebedev)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 3:48pm UTC](https://discuss.elastic.co/t/ingest-node-json-to-array/203434 "2019-10-14T15:48:41Z")
Коллеги, еще раз всем привет. Помогите решить проблему: На входе поступают данные в большом количестве, следующего вида: "\_type": "\_doc", "\_id": "yQ", "\_version": 1, "\_score": null, "\_source": { "@timestamp": "2019-10… --- ## [Java 11 Support in ES Rest High level client](https://discuss.elastic.co/t/java-11-support-in-es-rest-high-level-client/203350)
**Author:** [@premreddy](https://discuss.elastic.co/u/premreddy)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 3:09pm UTC](https://discuss.elastic.co/t/java-11-support-in-es-rest-high-level-client/203350 "2019-10-14T15:09:56Z")
Hi, Can you please let us know if Java 11 can be used to communicate with ES (V7.2) using Rest High level client. As per documentation it's not clear if Java 8 is the only version supported by Rest High level Client. h… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1840) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1842)