# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1854 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1855 --- ## [1 Node gets stuck with high load and 0% disk idle](https://discuss.elastic.co/t/1-node-gets-stuck-with-high-load-and-0-disk-idle/202458)
**Author:** [@sanktanglia](https://discuss.elastic.co/u/sanktanglia)\ **Replies:** 2\ **Last updated:** [October 7, 2019, 5:35pm UTC](https://discuss.elastic.co/t/1-node-gets-stuck-with-high-load-and-0-disk-idle/202458 "2019-10-07T17:35:25Z")
Im running a 3 node cluster of ES 6.5.4 in AWS on c5.xlarge nodes with 700 GB drives with 3000 provisioned iops. Our cluster holds almost 1 billion documents and can handle alot of search and index most of the time. Some… --- ## [Replace special characters in csv header](https://discuss.elastic.co/t/replace-special-characters-in-csv-header/202571)
**Author:** [@jarvis5181](https://discuss.elastic.co/u/jarvis5181)\ **Replies:** 1\ **Last updated:** [October 7, 2019, 5:05pm UTC](https://discuss.elastic.co/t/replace-special-characters-in-csv-header/202571 "2019-10-07T17:05:19Z")
Hello, I have a csv file with a header row which contains the special characters "\[" and "\]" in few of the column names. Logstash issues the exception "#\ **Author:** [@kilianten](https://discuss.elastic.co/u/kilianten)\ **Replies:** 3\ **Last updated:** [October 7, 2019, 4:25pm UTC](https://discuss.elastic.co/t/width-and-height-of-multi-view-displays-in-vega-lite-to-resize-automatically-in-dashboard/199046 "2019-10-07T16:25:20Z") So I have created my vega-lite visualization (bar chart). It is mutli-view and all is working as should. But when I add the visualization to a dashboard its not longer re-sizable, I went through the code and the line tha… --- ## [Why No Replies](https://discuss.elastic.co/t/why-no-replies/201285)
**Author:** [@carlsoane](https://discuss.elastic.co/u/carlsoane)\ **Replies:** 4\ **Last updated:** [October 7, 2019, 4:18pm UTC](https://discuss.elastic.co/t/why-no-replies/201285 "2019-10-07T16:18:02Z")
I've posted twice in the forums: https://discuss.elastic.co/t/k8s-node-level-logging-as-non-root-user/193603 and https://discuss.elastic.co/t/filebeat-is-not-cleaning-old-kubernetes-log-files-that-were-autodiscove… --- ## [Parsing nested XML with logstash](https://discuss.elastic.co/t/parsing-nested-xml-with-logstash/202530)
**Author:** [@jsj](https://discuss.elastic.co/u/jsj)\ **Replies:** 3\ **Last updated:** [October 7, 2019, 4:12pm UTC](https://discuss.elastic.co/t/parsing-nested-xml-with-logstash/202530 "2019-10-07T16:12:19Z")
Hi, I'm parsing xml-data from endpoint system with logstash and i'm not sure how parse nested data from xml; Here's the sample data & logstash config \ \2… --- ## [No longer seeing nginx log indexes after ILM deployed](https://discuss.elastic.co/t/no-longer-seeing-nginx-log-indexes-after-ilm-deployed/202564)
**Author:** [@maxhyjal](https://discuss.elastic.co/u/maxhyjal)\ **Replies:** 0\ **Last updated:** [October 7, 2019, 4:02pm UTC](https://discuss.elastic.co/t/no-longer-seeing-nginx-log-indexes-after-ilm-deployed/202564 "2019-10-07T16:02:43Z")
Hey all, after I set up the index lifecycle management system in ELK stack, I can no longer see the nginx indexes generated in Kibana, can anyone point out what I might have done wrong? My setting on filebeat: setup.il… --- ## [Update By Query & Version Conflicts](https://discuss.elastic.co/t/update-by-query-version-conflicts/202054)
**Author:** [@Chris\_White](https://discuss.elastic.co/u/Chris_White)\ **Replies:** 1\ **Last updated:** [October 7, 2019, 3:59pm UTC](https://discuss.elastic.co/t/update-by-query-version-conflicts/202054 "2019-10-07T15:59:46Z")
I've just been stung by running an update-by-query where the Java Client API (High Level REST) has a query build method of setMaxRetries - but in fact update-by-query does not support retries - it's up to the developer t… --- ## [Failed to get Json parse failure count, stats, pipeline, plugin](https://discuss.elastic.co/t/failed-to-get-json-parse-failure-count-stats-pipeline-plugin/200166)
**Author:** [@sunfriendli](https://discuss.elastic.co/u/sunfriendli)\ **Replies:** 1\ **Last updated:** [October 7, 2019, 3:50pm UTC](https://discuss.elastic.co/t/failed-to-get-json-parse-failure-count-stats-pipeline-plugin/200166 "2019-10-07T15:50:36Z")
Version: 7.3.2 Operating System: Ubuntu 18.04.2 LTS Hi all, I have a problem with failed to get json parse failure count in stats/pipelines. In my env, input comes from filebeat, when json parsing data failed due to i… --- ## [Logstash doesn't want to split my CEF events](https://discuss.elastic.co/t/logstash-doesnt-want-to-split-my-cef-events/202562)
**Author:** [@nico88](https://discuss.elastic.co/u/nico88)\ **Replies:** 0\ **Last updated:** [October 7, 2019, 3:50pm UTC](https://discuss.elastic.co/t/logstash-doesnt-want-to-split-my-cef-events/202562 "2019-10-07T15:50:05Z")
Hello, I try to parse a CEF event with logstash with this mutate: mutate { split =\> {"message" =\> "|"} add\_field =\> { "cef\_sig\_name" =\> "%{message\[5\]}" } add\_field =\> { "cef\_extension" =\> "%{message\[7\]}"} } I get … --- ## [Longitude and latitude in different rows](https://discuss.elastic.co/t/longitude-and-latitude-in-different-rows/202544)
**Author:** [@Alisa\_Faingold](https://discuss.elastic.co/u/Alisa_Faingold)\ **Replies:** 1\ **Last updated:** [October 7, 2019, 3:48pm UTC](https://discuss.elastic.co/t/longitude-and-latitude-in-different-rows/202544 "2019-10-07T15:48:34Z")
Hi, I have log with location info and I want to turn it to geo point. However, this info is in different rows: 10-17 18:59:10.997 2361 2361 D CAP:Location: latitude: 45.08371837 10-17 18:59:10.997 2361 2361 D CAP:… --- ## [CAN'T CONNECT TO 127.0.0.1:9200](https://discuss.elastic.co/t/cant-connect-to-127-0-0-1-9200/201627)
**Author:** [@Shodipo\_Samuel](https://discuss.elastic.co/u/Shodipo_Samuel)\ **Replies:** 6\ **Last updated:** [October 7, 2019, 2:58pm UTC](https://discuss.elastic.co/t/cant-connect-to-127-0-0-1-9200/201627 "2019-10-07T14:58:21Z")
Sep 30 12:49:00 elasticsearch elasticsearch\[3281\]: 2019-09-30 12:49:00,460 main ERROR Null object returned for RollingFile in Appenders. Sep 30 12:49:00 elasticsearch elasticsearch\[3281\]: 2019-09-30 12:49:00,461 main ER… --- ## [Complicated aggregation query in period interval](https://discuss.elastic.co/t/complicated-aggregation-query-in-period-interval/202450)
**Author:** [@sevatal](https://discuss.elastic.co/u/sevatal)\ **Replies:** 2\ **Last updated:** [October 7, 2019, 2:26pm UTC](https://discuss.elastic.co/t/complicated-aggregation-query-in-period-interval/202450 "2019-10-07T14:26:29Z")
We want to save historical information on a specific entity-type that our system creates and modify. This data will be used to run analytics and show charts about statistics over time. For simplicity let’s say it’s a Us… --- ## [Change Kibana UI language from English to German](https://discuss.elastic.co/t/change-kibana-ui-language-from-english-to-german/202520)
**Author:** [@astrobalaji](https://discuss.elastic.co/u/astrobalaji)\ **Replies:** 1\ **Last updated:** [October 7, 2019, 2:21pm UTC](https://discuss.elastic.co/t/change-kibana-ui-language-from-english-to-german/202520 "2019-10-07T14:21:46Z")
Hey guys, I recently had a request from my colleague if we can change the UI language of Kibana from English to German or any other language. Is it possible? Thanks in advance. Cheers, Balaji --- ## [Prevent removal of cookies by kibana server](https://discuss.elastic.co/t/prevent-removal-of-cookies-by-kibana-server/201018)
**Author:** [@kev12](https://discuss.elastic.co/u/kev12)\ **Replies:** 8\ **Last updated:** [October 7, 2019, 2:17pm UTC](https://discuss.elastic.co/t/prevent-removal-of-cookies-by-kibana-server/201018 "2019-10-07T14:17:23Z")
(KIBANA 5.6) I am trying to track a user sessions by utilizing cookies sent from a proxy/middleware server, but i notice that the kibana server is stripping these cookies for almost all requests except /elasticsearch/\_ms… --- ## [IF less than value is not working](https://discuss.elastic.co/t/if-less-than-value-is-not-working/202381)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 7\ **Last updated:** [October 7, 2019, 1:52pm UTC](https://discuss.elastic.co/t/if-less-than-value-is-not-working/202381 "2019-10-07T13:52:10Z")
Hello, I am trying to check if the YEAR value is less than 100 other the value in YEAR is for example 2012 otherwise it'll be 12 or so on for different year. However, it is throwing an error. I can't seem to compare and … --- ## [Ship logs from remote machine](https://discuss.elastic.co/t/ship-logs-from-remote-machine/201921)
**Author:** [@Asmaa\_Sarih](https://discuss.elastic.co/u/Asmaa_Sarih)\ **Replies:** 0\ **Last updated:** [October 2, 2019, 9:23am UTC](https://discuss.elastic.co/t/ship-logs-from-remote-machine/201921 "2019-10-02T09:23:01Z")
Hello, How to get logs from remote machine ? --- ## [Getting task details from the RestHighLevelClient](https://discuss.elastic.co/t/getting-task-details-from-the-resthighlevelclient/202543)
**Author:** [@Tristan\_Larouanne](https://discuss.elastic.co/u/Tristan_Larouanne)\ **Replies:** 0\ **Last updated:** [October 7, 2019, 1:36pm UTC](https://discuss.elastic.co/t/getting-task-details-from-the-resthighlevelclient/202543 "2019-10-07T13:36:14Z")
Context: I want to reindex a (remote) index, with the JAVA client (RestHighLevelClient, right ?) using the client version 7.2.1 (but I can probably upgrade if needed). Also, I want to use a wait\_for\_completion=false to… --- ## [Elasticsearch Filter query log](https://discuss.elastic.co/t/elasticsearch-filter-query-log/200690)
**Author:** [@thiraj89](https://discuss.elastic.co/u/thiraj89)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 12:20pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-query-log/200690 "2019-09-23T12:20:06Z")
Is it possible to log the filter query from Kibana in Elasticsearch? --- ## [Self type join in elasticsearch](https://discuss.elastic.co/t/self-type-join-in-elasticsearch/202487)
**Author:** [@ducanh2110](https://discuss.elastic.co/u/ducanh2110)\ **Replies:** 4\ **Last updated:** [October 7, 2019, 1:30pm UTC](https://discuss.elastic.co/t/self-type-join-in-elasticsearch/202487 "2019-10-07T13:30:25Z")
Hi, I have a question about child-parent join in Elasticsearch, I have a real model like Category and Product. "categoryRelations": { "type": "join", "eager\_global\_ordinals": true, "relations": { "category": \[ "pro… --- ## [XML Plugin and xpath usage](https://discuss.elastic.co/t/xml-plugin-and-xpath-usage/202541)
**Author:** [@ajojohnk](https://discuss.elastic.co/u/ajojohnk)\ **Replies:** 0\ **Last updated:** [October 7, 2019, 1:23pm UTC](https://discuss.elastic.co/t/xml-plugin-and-xpath-usage/202541 "2019-10-07T13:23:20Z")
On XML filter How is the event been decided by the logstash for its processing ? In my following input xml, how should I flatten this xml using xpath to ingest json to ES My case data: … --- ## [Integrate Okta with Logstash](https://discuss.elastic.co/t/integrate-okta-with-logstash/202537)
**Author:** [@NADEERA\_DASUN](https://discuss.elastic.co/u/NADEERA_DASUN)\ **Replies:** 0\ **Last updated:** [October 7, 2019, 1:16pm UTC](https://discuss.elastic.co/t/integrate-okta-with-logstash/202537 "2019-10-07T13:16:30Z")
I'm trying to obtain data from Okta through logstash and display them in Kibana. Please suggest a correct way to fulfill this manner. Thanks in advance Nadeera --- ## [Simple way for users to enter alter or delete entries in elasticsearch?](https://discuss.elastic.co/t/simple-way-for-users-to-enter-alter-or-delete-entries-in-elasticsearch/202533)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 0\ **Last updated:** [October 7, 2019, 12:58pm UTC](https://discuss.elastic.co/t/simple-way-for-users-to-enter-alter-or-delete-entries-in-elasticsearch/202533 "2019-10-07T12:58:25Z")
Hello, I am looking for a simple way that my users can alter, delete and add entries in Elasticsearch. I have tried Conveyor and Dejavu but none of them are what my users would be able to use to do what they need. I'm … --- ## [Create multiple document depending on conditions](https://discuss.elastic.co/t/create-multiple-document-depending-on-conditions/202534)
**Author:** [@JjOon](https://discuss.elastic.co/u/JjOon)\ **Replies:** 0\ **Last updated:** [October 7, 2019, 1:00pm UTC](https://discuss.elastic.co/t/create-multiple-document-depending-on-conditions/202534 "2019-10-07T13:00:58Z")
Hi there ! I am quite new with Elastic. I would like to know if there is a functionnality allowing to create multiple index depending on a condition ? (like an update\_by\_query can do) My problem is the following one : … --- ## [java.lang.NoClassDefFoundError: org/elasticsearch/action/GenericAction](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-org-elasticsearch-action-genericaction/202475)
**Author:** [@Milind\_Kaklij](https://discuss.elastic.co/u/Milind_Kaklij)\ **Replies:** 5\ **Last updated:** [October 7, 2019, 12:58pm UTC](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-org-elasticsearch-action-genericaction/202475 "2019-10-07T12:58:56Z")
Hello Experts, I am getting "java.lang.NoClassDefFoundError: org/elasticsearch/action/GenericAction" while creating index via JAVA API with all 7.0+ ES versions . I decompiled its library but dont see GenericAction… --- ## [\[interval\] on \[date\_histogram\] is deprecated, use \[fixed\_interval\] or \[calendar\_interval\] in the future](https://discuss.elastic.co/t/interval-on-date-histogram-is-deprecated-use-fixed-interval-or-calendar-interval-in-the-future/202372)
**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\ **Replies:** 1\ **Last updated:** [October 7, 2019, 12:56pm UTC](https://discuss.elastic.co/t/interval-on-date-histogram-is-deprecated-use-fixed-interval-or-calendar-interval-in-the-future/202372 "2019-10-07T12:56:48Z")
We Updated a QA ELK stack to ES 7.3.2 and since then then this message is all over the ES logs. \[interval\] on \[date\_histogram\] is deprecated, use \[fixed\_interval\] or \[calendar\_interval\] in the future. According to this… --- ## [Trouble defining the dynamic mapping for the structured json document](https://discuss.elastic.co/t/trouble-defining-the-dynamic-mapping-for-the-structured-json-document/202384)
**Author:** [@Balu\_P](https://discuss.elastic.co/u/Balu_P)\ **Replies:** 1\ **Last updated:** [October 7, 2019, 12:54pm UTC](https://discuss.elastic.co/t/trouble-defining-the-dynamic-mapping-for-the-structured-json-document/202384 "2019-10-07T12:54:16Z")
this is my mapping file defined { "dynamic": false, "dynamic\_templates": \[ { "product\_core\_attributes": { "path\_match": "product\_attributes.\*.values", "path\_unmatch": "product\_attributes.\*… --- ## [filebeatのモジュールをLogstashで使用する方法](https://discuss.elastic.co/t/filebeat-logstash/202493)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [October 7, 2019, 12:41pm UTC](https://discuss.elastic.co/t/filebeat-logstash/202493 "2019-10-07T12:41:33Z")
filebeatのapacheモジュールを、logstashで使用できるように設定したいです。 以下のマニュアルを参考に、translateを実施するように設定してみたのですが、 期待通りtranslateされませんでした。 モジュールをLogstashで使用する場合、filebeat側にも何か設定する必要はありますでしょうか。 https://www.elastic.co/guide/en/logstash/current/l… --- ## [Indexing Aggregate Results](https://discuss.elastic.co/t/indexing-aggregate-results/202528)
**Author:** [@Artisanal](https://discuss.elastic.co/u/Artisanal)\ **Replies:** 0\ **Last updated:** [October 7, 2019, 12:35pm UTC](https://discuss.elastic.co/t/indexing-aggregate-results/202528 "2019-10-07T12:35:03Z")
Hi all, I'm attempting to use the Logstash elasticsearch input to perform an aggregating query against the auditbeat index, add some metadata to the results, then send them back to Elasticsearch using the elasticsearch … --- ## [Initial data load / full reindexing from MySQL to Elasticsearch](https://discuss.elastic.co/t/initial-data-load-full-reindexing-from-mysql-to-elasticsearch/200942)
**Author:** [@Priya\_Gupta](https://discuss.elastic.co/u/Priya_Gupta)\ **Replies:** 5\ **Last updated:** [October 7, 2019, 12:20pm UTC](https://discuss.elastic.co/t/initial-data-load-full-reindexing-from-mysql-to-elasticsearch/200942 "2019-10-07T12:20:48Z")
Hello, I am trying to design an initial data load and full reindexing (in the event of document schema change) solution for my Elasticsearch service. Source of truth for all data is MySQL, search related data will be st… --- ## [Dramatic performance degradation on range queries after upgrade ES from 2.4 to 7.1](https://discuss.elastic.co/t/dramatic-performance-degradation-on-range-queries-after-upgrade-es-from-2-4-to-7-1/201132)
**Author:** [@einfoman](https://discuss.elastic.co/u/einfoman)\ **Replies:** 18\ **Last updated:** [October 7, 2019, 12:06pm UTC](https://discuss.elastic.co/t/dramatic-performance-degradation-on-range-queries-after-upgrade-es-from-2-4-to-7-1/201132 "2019-10-07T12:06:43Z")
Hi, I have an elasticsearch cluster of version 2.4 (lucene version 5.5.4). Near I installed a new cluster of version 7.1 (lucene version 8.1.0) and indexed all data (~2.7 billion documents). Both of cluster use Java 1.8… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1853) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1855)