# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1880 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1881 --- ## [Update nested object in ElasticSearch](https://discuss.elastic.co/t/update-nested-object-in-elasticsearch/200751)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 3\ **Last updated:** [September 23, 2019, 9:15pm UTC](https://discuss.elastic.co/t/update-nested-object-in-elasticsearch/200751 "2019-09-23T21:15:09Z")
In one of my pipelines I am using logstash with JSON input and output to Elasticsearch with action =\> "update". One of the document fields contains nested data type. If in input JSON I receive following: "nested\_field… --- ## [Where does Elasticsearch store logs?](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 6\ **Last updated:** [September 23, 2019, 8:56pm UTC](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466 "2019-09-23T20:56:01Z")
Hi I am using a VM to explore the X-pack. I want to send some logs from the production servers (Elasticsearch and Splunk) to that VM. Where are the logs stored in Elasticsearch? Is there a path (ex: /var/log/)? I woul… --- ## [Log pattern for AWS EMR logs](https://discuss.elastic.co/t/log-pattern-for-aws-emr-logs/200756)
**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 8:39pm UTC](https://discuss.elastic.co/t/log-pattern-for-aws-emr-logs/200756 "2019-09-23T20:39:14Z")
Can anyone please provide the example of log stash's AWS S3 configuration settings.? --- ## [Connecting Logstash to Elastic Master or Elastic Data](https://discuss.elastic.co/t/connecting-logstash-to-elastic-master-or-elastic-data/199259)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 8:10pm UTC](https://discuss.elastic.co/t/connecting-logstash-to-elastic-master-or-elastic-data/199259 "2019-09-23T20:10:42Z")
Hello, When having a Elastic Master servers and Elastic Data servers, should the Logstash consumer point to the Elastic Data for the output or the Elastic Master? What is the difference between the two connections/outpu… --- ## [NOTICE: Elasticsearch Service changes to handling of CORS requests, on September 22, 2019](https://discuss.elastic.co/t/notice-elasticsearch-service-changes-to-handling-of-cors-requests-on-september-22-2019/199403)
**Author:** [@Nicholas\_Thompson](https://discuss.elastic.co/u/Nicholas_Thompson)\ **Replies:** 1\ **Last updated:** [September 23, 2019, 8:01pm UTC](https://discuss.elastic.co/t/notice-elasticsearch-service-changes-to-handling-of-cors-requests-on-september-22-2019/199403 "2019-09-23T20:01:09Z")
Hi, We've been trying for a few weeks to address this notice that Elastic send out. All Elasticsearch Service clusters will default to http.cors settings after September 22 2019. Elasticsearch Service clusters provis… --- ## [Opaque Logstash error when setting up SSL](https://discuss.elastic.co/t/opaque-logstash-error-when-setting-up-ssl/200537)
**Author:** [@tao](https://discuss.elastic.co/u/tao)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 7:52pm UTC](https://discuss.elastic.co/t/opaque-logstash-error-when-setting-up-ssl/200537 "2019-09-23T19:52:53Z")
I'm attempting to set up Logstash to communicate with ES over SSL. It's failing with a very opaque error -- no error message; only a stack trace: \[2019-09-21T18:51:12,494\]\[INFO \]\[logstash.runner \] Starting Logs… --- ## [Discover view is including a must\_not match clause that excludes all results in the index](https://discuss.elastic.co/t/discover-view-is-including-a-must-not-match-clause-that-excludes-all-results-in-the-index/200298)
**Author:** [@lmills12](https://discuss.elastic.co/u/lmills12)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 7:50pm UTC](https://discuss.elastic.co/t/discover-view-is-including-a-must-not-match-clause-that-excludes-all-results-in-the-index/200298 "2019-09-23T19:50:17Z")
I'm trying to add an index for tracking metrics and have confirmed that documents are being added to the index using a simple match-all query. However, no results are showing up for the index in the discover page. Lookin… --- ## [Grok pattern does not work in logstash however it works in kibana](https://discuss.elastic.co/t/grok-pattern-does-not-work-in-logstash-however-it-works-in-kibana/200148)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 11\ **Last updated:** [September 23, 2019, 7:12pm UTC](https://discuss.elastic.co/t/grok-pattern-does-not-work-in-logstash-however-it-works-in-kibana/200148 "2019-09-23T19:12:56Z")
Hello, I have a long used grok pattern match that stopped working since upgraded to ELK 7.3.0. grok { match =\> { "message" =\> \["%{MONTH:month} %{MONTHDAY:day}, %{YEAR:year} %{TIME:time} %{WORD:day\_period} %{NOTSPACE… --- ## [Shard failure notification](https://discuss.elastic.co/t/shard-failure-notification/200735)
**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 6:47pm UTC](https://discuss.elastic.co/t/shard-failure-notification/200735 "2019-09-23T18:47:53Z")
Hi, I'd like to get notified when there is a query with a shard failure. What is the best way to go about setting this up? Best, Justin --- ## [Missing data when using using fields and tags in uptime 7.3.0](https://discuss.elastic.co/t/missing-data-when-using-using-fields-and-tags-in-uptime-7-3-0/199460)
**Author:** [@Dannyb](https://discuss.elastic.co/u/Dannyb)\ **Replies:** 5\ **Last updated:** [September 23, 2019, 6:42pm UTC](https://discuss.elastic.co/t/missing-data-when-using-using-fields-and-tags-in-uptime-7-3-0/199460 "2019-09-23T18:42:31Z")
I’ve added some tags to my heartbeat monitor: fields: Environment: test SiteName: mysite fields\_under\_root: true ( although this doesn't make any different to the issue) Soon as I do this on the uptime board, the mo… --- ## [Update index pattern to only add fields](https://discuss.elastic.co/t/update-index-pattern-to-only-add-fields/200489)
**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 6:30pm UTC](https://discuss.elastic.co/t/update-index-pattern-to-only-add-fields/200489 "2019-09-23T18:30:39Z")
Hi, Is it possible to refresh an index pattern and only add fields? We retire old logs somewhat aggressively, so if we refresh during a period where there are no logs with a given field, it will get removed from the pat… --- ## [Try to add Visualization with Kibana API](https://discuss.elastic.co/t/try-to-add-visualization-with-kibana-api/198498)
**Author:** [@jsebrien](https://discuss.elastic.co/u/jsebrien)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 6:14pm UTC](https://discuss.elastic.co/t/try-to-add-visualization-with-kibana-api/198498 "2019-09-23T18:14:34Z")
Hello, I have some difficulties to add a new visualization with Kibana API. I have the following pie.json: { "attributes": { "title": "\[eCommerce\] Sales by Gender2", "visState": "{ "title":"\[eCommerce\] Sales by G… --- ## [Elasticsearch service on windows not starting when using path.repo](https://discuss.elastic.co/t/elasticsearch-service-on-windows-not-starting-when-using-path-repo/200730)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 5:41pm UTC](https://discuss.elastic.co/t/elasticsearch-service-on-windows-not-starting-when-using-path-repo/200730 "2019-09-23T17:41:59Z")
Hello, Playing around with elasticsearch on Windows, I ran into issues when trying to add path.repo configuration in elasticsearch.yml Configuration: path.repo: C:\\Users\\myuser\\Google Drive\\Backups\\Elastic\\FIREBASE E… --- ## [Problem with http output](https://discuss.elastic.co/t/problem-with-http-output/200396)
**Author:** [@ovie](https://discuss.elastic.co/u/ovie)\ **Replies:** 1\ **Last updated:** [September 23, 2019, 5:40pm UTC](https://discuss.elastic.co/t/problem-with-http-output/200396 "2019-09-23T17:40:43Z")
Hello, I'm facing a problem with sending Input from SQL server to Power BI input { jdbc { jdbc\_connection\_string =\> "jdbc:sqlserver://db.local:1433;database=test" jdbc\_user =\> "test" jdbc\_password =\> "t… --- ## [Unauthenticated HTTP GET request for load balancing](https://discuss.elastic.co/t/unauthenticated-http-get-request-for-load-balancing/199487)
**Author:** [@DaveyDevOps](https://discuss.elastic.co/u/DaveyDevOps)\ **Replies:** 3\ **Last updated:** [September 23, 2019, 5:17pm UTC](https://discuss.elastic.co/t/unauthenticated-http-get-request-for-load-balancing/199487 "2019-09-23T17:17:05Z")
We have Elasticsearch behind a load balancer that only supports HTTP GET health checks. Security is enabled Are there any existing (7.3.0+) API/paths that will respond to an unauthenticated HTTP GET request (while secu… --- ## [How can I get a notification of when my elasticsearch output fails to index an event?](https://discuss.elastic.co/t/how-can-i-get-a-notification-of-when-my-elasticsearch-output-fails-to-index-an-event/200727)
**Author:** [@brandoncordell](https://discuss.elastic.co/u/brandoncordell)\ **Replies:** 1\ **Last updated:** [September 23, 2019, 4:34pm UTC](https://discuss.elastic.co/t/how-can-i-get-a-notification-of-when-my-elasticsearch-output-fails-to-index-an-event/200727 "2019-09-23T16:34:30Z")
We have some external data that we do not control that gets compiled and inserted into a SQL Server table. I wrote a logstash pipeline to query that table and process the data for insertion into our ElasticSearch index. … --- ## [S3 input plugin: since\_db doesn't work properly: high CPU usage of logstash when more files in folder](https://discuss.elastic.co/t/s3-input-plugin-since-db-doesnt-work-properly-high-cpu-usage-of-logstash-when-more-files-in-folder/200717)
**Author:** [@Pista](https://discuss.elastic.co/u/Pista)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 3:19pm UTC](https://discuss.elastic.co/t/s3-input-plugin-since-db-doesnt-work-properly-high-cpu-usage-of-logstash-when-more-files-in-folder/200717 "2019-09-23T15:19:22Z")
Issue: CPU Usage too high when thousands of files in AWS S3 log folder (s3 input plugin in use) ELK/Logstash setup AWS S3 bucket is scanned by S3 input plugin and it sends data to Logstash Issue description: Seems t… --- ## [Elasticsearch cluster , one node failing](https://discuss.elastic.co/t/elasticsearch-cluster-one-node-failing/200726)
**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-one-node-failing/200726 "2019-09-23T16:13:05Z")
My one of the pod (es ) in the cluster is failing and its not coming its. It's helm chart . Please find the attached cluster status and node status json file. --- ## [How does elasticsearch route reads?](https://discuss.elastic.co/t/how-does-elasticsearch-route-reads/200700)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 3\ **Last updated:** [September 23, 2019, 4:09pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-route-reads/200700 "2019-09-23T16:09:30Z")
I have an index in which I am using auto expand replicas to 0-all. This means every node has every replica So when a search request comes to ES, will it be processed by only one node? I am using 7.2 and the search reque… --- ## [Errors in logstash 7.3.2](https://discuss.elastic.co/t/errors-in-logstash-7-3-2/200609)
**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 4:07pm UTC](https://discuss.elastic.co/t/errors-in-logstash-7-3-2/200609 "2019-09-23T16:07:31Z")
\[2019-09-23T00:02:55,264\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retrieve license information from license server {:message=\>"No Available connections"} \[2019-09-23T00:02:57,038\]\[WARN \]\[logstash.outputs… --- ## [Endpoints on Elastic Cloud](https://discuss.elastic.co/t/endpoints-on-elastic-cloud/200672)
**Author:** [@AndresL](https://discuss.elastic.co/u/AndresL)\ **Replies:** 7\ **Last updated:** [September 23, 2019, 4:02pm UTC](https://discuss.elastic.co/t/endpoints-on-elastic-cloud/200672 "2019-09-23T16:02:04Z")
HI, i just deployed a cluster in ECE. Im trying to edit the settings for and endpoint following this instructions: https://www.elastic.co/guide/en/cloud-enterprise/current/ece-administering-endpoints.html But i cant se… --- ## [Issue reading text file with grok](https://discuss.elastic.co/t/issue-reading-text-file-with-grok/200707)
**Author:** [@Hyperion0](https://discuss.elastic.co/u/Hyperion0)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 2:33pm UTC](https://discuss.elastic.co/t/issue-reading-text-file-with-grok/200707 "2019-09-23T14:33:16Z")
I'm very new to logstash and even newer to the idea of grok statements. I have a config file that I've written to use a grok statement to read in a text file. I'm using custom statements which I tested using the grok deb… --- ## [What is the path to the home page for kibana 6.8? I want to add navbar without using iframe. Is that event possible?](https://discuss.elastic.co/t/what-is-the-path-to-the-home-page-for-kibana-6-8-i-want-to-add-navbar-without-using-iframe-is-that-event-possible/199441)
**Author:** [@amanciao](https://discuss.elastic.co/u/amanciao)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 3:50pm UTC](https://discuss.elastic.co/t/what-is-the-path-to-the-home-page-for-kibana-6-8-i-want-to-add-navbar-without-using-iframe-is-that-event-possible/199441 "2019-09-23T15:50:47Z")
I am trying to create navbar on kibana 6.8 I have already done it using iframe with the help of node. I want to edit the source code and add the nav bar. Thanks --- ## [Group Values with Aggregation](https://discuss.elastic.co/t/group-values-with-aggregation/200255)
**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\ **Replies:** 7\ **Last updated:** [September 23, 2019, 3:48pm UTC](https://discuss.elastic.co/t/group-values-with-aggregation/200255 "2019-09-23T15:48:00Z")
I am trying to write an aggregation query but not sure what I am missing here. I have the following structure across multiple documents. Some of the field names may not be present in documents. { "CaptureData": \[{ … --- ## [Unable to start pipeline after SSL implementation](https://discuss.elastic.co/t/unable-to-start-pipeline-after-ssl-implementation/200724)
**Author:** [@gdamico](https://discuss.elastic.co/u/gdamico)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 3:47pm UTC](https://discuss.elastic.co/t/unable-to-start-pipeline-after-ssl-implementation/200724 "2019-09-23T15:47:09Z")
Hi, I'm trying to enable SSL on my demo logstash installation, but after applying the documented settings the demo pipeline is unable to start, because of an certificate format error (that´s what log says). I already r… --- ## [How to Group Spans, Metadata and Transactions Together for Visualization](https://discuss.elastic.co/t/how-to-group-spans-metadata-and-transactions-together-for-visualization/200227)
**Author:** [@LordMathis](https://discuss.elastic.co/u/LordMathis)\ **Replies:** 3\ **Last updated:** [September 23, 2019, 2:07pm UTC](https://discuss.elastic.co/t/how-to-group-spans-metadata-and-transactions-together-for-visualization/200227 "2019-09-23T14:07:35Z")
Kibana version: 7.3 Elasticsearch version: 7.3 APM Server version: 7.3 APM Agent language and version: Intake API (Building new agent) Hello, I am looking for a way to link spans, transactions and metadata all toget… --- ## [With a Basic license, is it possible to do GeoIP and use the SIEM?](https://discuss.elastic.co/t/with-a-basic-license-is-it-possible-to-do-geoip-and-use-the-siem/200258)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 3\ **Last updated:** [September 23, 2019, 2:29pm UTC](https://discuss.elastic.co/t/with-a-basic-license-is-it-possible-to-do-geoip-and-use-the-siem/200258 "2019-09-23T14:29:14Z")
Hi With a Basic license, is it possible to do GeoIP and test the SIEM? In the web page says YES to SIEM! But I do not see the "lock" . in Capture|251x500 Thank you --- ## [How to handle only one same document in multiple indices (indices are based on everyday)](https://discuss.elastic.co/t/how-to-handle-only-one-same-document-in-multiple-indices-indices-are-based-on-everyday/200694)
**Author:** [@milankamboya](https://discuss.elastic.co/u/milankamboya)\ **Replies:** 1\ **Last updated:** [September 23, 2019, 2:20pm UTC](https://discuss.elastic.co/t/how-to-handle-only-one-same-document-in-multiple-indices-indices-are-based-on-everyday/200694 "2019-09-23T14:20:09Z")
In my project, I am fetching records from database and keeping document id as primary key id. I have created indices based on date. So everyday new index has been created. like, test-2019.09.23, test-2019.09.22 This … --- ## [How can i setup tie breaker in aws ec2 instance](https://discuss.elastic.co/t/how-can-i-setup-tie-breaker-in-aws-ec2-instance/200146)
**Author:** [@naveena.lm](https://discuss.elastic.co/u/naveena.lm)\ **Replies:** 0\ **Last updated:** [September 19, 2019, 8:08am UTC](https://discuss.elastic.co/t/how-can-i-setup-tie-breaker-in-aws-ec2-instance/200146 "2019-09-19T08:08:04Z")
Configure tie breaker in aws ec2 instance --- ## [Agregar capas de mapas personalizadas](https://discuss.elastic.co/t/agregar-capas-de-mapas-personalizadas/200261)
**Author:** [@joseba.r](https://discuss.elastic.co/u/joseba.r)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 2:08pm UTC](https://discuss.elastic.co/t/agregar-capas-de-mapas-personalizadas/200261 "2019-09-23T14:08:53Z")
Buen Dia Quisiera saber si puedo agregar una capa personalizada de mapa. Kibana viene con el de las provincias de Argentina, sin embargo deseo agregar el de las localidades (municipios). Tengo un archivo GeoJSON con los… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1879) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1881)