# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1890

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1891

---

## [\[ruby\] filter configuration is invalid](https://discuss.elastic.co/t/ruby-filter-configuration-is-invalid/199958)

<div class="topic-metadata">

**Author:** [@hdma](https://discuss.elastic.co/u/hdma)\
**Replies:** 2\
**Last updated:** [September 18, 2019, 3:09pm UTC](https://discuss.elastic.co/t/ruby-filter-configuration-is-invalid/199958 "2019-09-18T15:09:18Z")

</div>

Hello I tried to create a ruby's filter to permit logging messaage only when I have mounted a partition. This is the conf file: filter { ruby { code =\> 'if File.readlines("/proc/mounts").any?{ |line| line.split(' ')\[…

---

## [Migrating from "file input" to "beats input" ==\> filter/matching problem](https://discuss.elastic.co/t/migrating-from-file-input-to-beats-input-filter-matching-problem/200041)

<div class="topic-metadata">

**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 3:06pm UTC](https://discuss.elastic.co/t/migrating-from-file-input-to-beats-input-filter-matching-problem/200041 "2019-09-18T15:06:04Z")

</div>

Hello, I need to send my squid (modified) access.log to an Elasticsearch cluster. I've asked some log files from our system team and I used them as an input into my cluster (File =\> logstash =\> Elastic) in order to pre…

---

## [Can Elastic be used as Semantic layer for any BI Tool reporting](https://discuss.elastic.co/t/can-elastic-be-used-as-semantic-layer-for-any-bi-tool-reporting/200030)

<div class="topic-metadata">

**Author:** [@damanaulakh88](https://discuss.elastic.co/u/damanaulakh88)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 2:24pm UTC](https://discuss.elastic.co/t/can-elastic-be-used-as-semantic-layer-for-any-bi-tool-reporting/200030 "2019-09-18T14:24:33Z")

</div>

For Example like Data Lake -\> Elastic -\> BI Tool ?

---

## [\[Solved\] Canno't see geoip.location in visualization](https://discuss.elastic.co/t/solved-cannot-see-geoip-location-in-visualization/199927)

<div class="topic-metadata">

**Author:** [@Sylvaner](https://discuss.elastic.co/u/Sylvaner)\
**Replies:** 4\
**Last updated:** [September 18, 2019, 2:24pm UTC](https://discuss.elastic.co/t/solved-cannot-see-geoip-location-in-visualization/199927 "2019-09-18T14:24:29Z")

</div>

Hello, I have found a lot of topics about this problem but i didn't find any solution. Logstash add geoip data with this : geoip { add\_tag =\> \[ "GeoIP" \] source =\> "src\_ip" } Kibana mappings show it as a geo\_poin…

---

## [How to set logstash startup time?](https://discuss.elastic.co/t/how-to-set-logstash-startup-time/199579)

<div class="topic-metadata">

**Author:** [@hannkeat](https://discuss.elastic.co/u/hannkeat)\
**Replies:** 1\
**Last updated:** [September 18, 2019, 2:23pm UTC](https://discuss.elastic.co/t/how-to-set-logstash-startup-time/199579 "2019-09-18T14:23:49Z")

</div>

Hi Team, I have tried many method, however it still fail to change startup time for logstash. Please guide me . .thanks in advance

---

## [No rollover info found for \[filebeat-7.1.1\] with alias \[filebeat-alias\], the index has not yet rolled over with that alias](https://discuss.elastic.co/t/no-rollover-info-found-for-filebeat-7-1-1-with-alias-filebeat-alias-the-index-has-not-yet-rolled-over-with-that-alias/200029)

<div class="topic-metadata">

**Author:** [@krish2](https://discuss.elastic.co/u/krish2)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 2:23pm UTC](https://discuss.elastic.co/t/no-rollover-info-found-for-filebeat-7-1-1-with-alias-filebeat-alias-the-index-has-not-yet-rolled-over-with-that-alias/200029 "2019-09-18T14:23:33Z")

</div>

GET filebeat-7.1.1/\_ilm/explain Output: { "indices" : { "filebeat-7.1.1" : { "index" : "filebeat-7.1.1", "managed" : true, "policy" : "new\_policy\_1", "lifecycle\_date\_millis" : 1566224013121, "phase" : "hot", "pha…

---

## [Is it better to connect elastic search to Hadoop or Hive directly? Will Any library or plugin help?](https://discuss.elastic.co/t/is-it-better-to-connect-elastic-search-to-hadoop-or-hive-directly-will-any-library-or-plugin-help/200026)

<div class="topic-metadata">

**Author:** [@damanaulakh88](https://discuss.elastic.co/u/damanaulakh88)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 2:21pm UTC](https://discuss.elastic.co/t/is-it-better-to-connect-elastic-search-to-hadoop-or-hive-directly-will-any-library-or-plugin-help/200026 "2019-09-18T14:21:21Z")

</div>

Is it better to connect elastic search to Hadoop or Hive directly? Any library or plug ins will help?

---

## [Kibana dashboard or visualization exporting in pdf](https://discuss.elastic.co/t/kibana-dashboard-or-visualization-exporting-in-pdf/200020)

<div class="topic-metadata">

**Author:** [@theo1991](https://discuss.elastic.co/u/theo1991)\
**Replies:** 1\
**Last updated:** [September 18, 2019, 2:02pm UTC](https://discuss.elastic.co/t/kibana-dashboard-or-visualization-exporting-in-pdf/200020 "2019-09-18T14:02:23Z")

</div>

Hello, There are different saying about the reporting in Kibana for the dashboard or visualization export. Some says it's a commercial feature, some not. I have ELK stack 7.2, can you tell me if I can export in PDF a …

---

## [Update multiple documents in Elastic search using java](https://discuss.elastic.co/t/update-multiple-documents-in-elastic-search-using-java/200018)

<div class="topic-metadata">

**Author:** [@Velliyangiri](https://discuss.elastic.co/u/Velliyangiri)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 1:46pm UTC](https://discuss.elastic.co/t/update-multiple-documents-in-elastic-search-using-java/200018 "2019-09-18T13:46:07Z")

</div>

In java which querybuilder to use update all the documents in this specified range.!..This is my java code. Code ----\> UpdateByQueryRequest requested = new UpdateByQueryRequest(arr\[1\]); requested.setConflicts("proceed…

---

## [Kibana Dashboard Table](https://discuss.elastic.co/t/kibana-dashboard-table/199956)

<div class="topic-metadata">

**Author:** [@ssardana08](https://discuss.elastic.co/u/ssardana08)\
**Replies:** 1\
**Last updated:** [September 18, 2019, 1:34pm UTC](https://discuss.elastic.co/t/kibana-dashboard-table/199956 "2019-09-18T13:34:11Z")

</div>

Hi all, I'm trying to create a Visualisation using Data Table in Kibana. But for long strings it creates a new entry in the next row. Is there Any way I can restrict this behaviour? What I want is even if long string …

---

## [Logstash s3 input plugin](https://discuss.elastic.co/t/logstash-s3-input-plugin/200016)

<div class="topic-metadata">

**Author:** [@Jagadeesh\_Babu](https://discuss.elastic.co/u/Jagadeesh_Babu)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 1:28pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin/200016 "2019-09-18T13:28:28Z")

</div>

Hi, I tried to create a folder in S3 and using the path of the S3 as input for in logstash file. I'm getting an error to remove the forward slash in the input. input { s3 { bucket =\> "o2-folder-bucket/…

---

## [Uptime app dashboards for other datasources](https://discuss.elastic.co/t/uptime-app-dashboards-for-other-datasources/199930)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 2\
**Last updated:** [September 18, 2019, 1:14pm UTC](https://discuss.elastic.co/t/uptime-app-dashboards-for-other-datasources/199930 "2019-09-18T13:14:41Z")

</div>

Hi All, Is there a way where we can use "Uptime app" in kibana for other datasources? "Uptime app" dashboards are automatically loaded once we install and run the setup of heartbeat. Can we use those dashboards for th…

---

## [Not releasing disk space after (failed?) shard allocations](https://discuss.elastic.co/t/not-releasing-disk-space-after-failed-shard-allocations/199967)

<div class="topic-metadata">

**Author:** [@cdekker](https://discuss.elastic.co/u/cdekker)\
**Replies:** 2\
**Last updated:** [September 18, 2019, 1:13pm UTC](https://discuss.elastic.co/t/not-releasing-disk-space-after-failed-shard-allocations/199967 "2019-09-18T13:13:12Z")

</div>

We have a fairly small cluster of 3 nodes with ~40GB disks each and about 12 monthly indices with 1 replica. Date should be around 8GB of primaries, so 16GB with 1 replica. We run ES 6.2 We recently had a runaway proces…

---

## [Filter issue within Visualization](https://discuss.elastic.co/t/filter-issue-within-visualization/198428)

<div class="topic-metadata">

**Author:** [@Alexandre.Bernier](https://discuss.elastic.co/u/Alexandre.Bernier)\
**Replies:** 3\
**Last updated:** [September 18, 2019, 1:13pm UTC](https://discuss.elastic.co/t/filter-issue-within-visualization/198428 "2019-09-18T13:13:12Z")

</div>

Hello there, I don't really know how to describe my issue but when I create a visualization and I add a first filter, it works but as soon as I add a second filter, the filter start to move. It seems like Kibana doesn't…

---

## [Multiple Indices - Index Documents with same ID - Treat as single document when aggregating](https://discuss.elastic.co/t/multiple-indices-index-documents-with-same-id-treat-as-single-document-when-aggregating/196754)

<div class="topic-metadata">

**Author:** [@gnukev](https://discuss.elastic.co/u/gnukev)\
**Replies:** 8\
**Last updated:** [September 18, 2019, 1:08pm UTC](https://discuss.elastic.co/t/multiple-indices-index-documents-with-same-id-treat-as-single-document-when-aggregating/196754 "2019-09-18T13:08:46Z")

</div>

Would the following be a possibility? Index A - Document A { \_id: 123456789, name: XXXX, address: XXXX } Index B - Document A { \_id: 123456789, biography: XXXXXyyyXXXXyyyyXXXXyyyyXXXX } And then I do a terms ag…

---

## [If statement in logstash output](https://discuss.elastic.co/t/if-statement-in-logstash-output/199885)

<div class="topic-metadata">

**Author:** [@Brian\_DiCola](https://discuss.elastic.co/u/Brian_DiCola)\
**Replies:** 2\
**Last updated:** [September 18, 2019, 1:03pm UTC](https://discuss.elastic.co/t/if-statement-in-logstash-output/199885 "2019-09-18T13:03:19Z")

</div>

Here is my filebeats config processors: add\_tags: tags: \[web, dev\] target: "environment" #=========================== Filebeat inputs ============================= filebeat.inputs: type: log enabled: true pat…

---

## [Date Problem In kibana VIsualization](https://discuss.elastic.co/t/date-problem-in-kibana-visualization/199427)

<div class="topic-metadata">

**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Replies:** 7\
**Last updated:** [September 18, 2019, 1:02pm UTC](https://discuss.elastic.co/t/date-problem-in-kibana-visualization/199427 "2019-09-18T13:02:48Z")

</div>

I have converted date format into date and it changes into date format but when i try to visualize the date it does not show time only show date My record start on this date 2019-08-01 00:00:04, and end with this date …

---

## [How to update if document\_id is not unique](https://discuss.elastic.co/t/how-to-update-if-document-id-is-not-unique/200010)

<div class="topic-metadata">

**Author:** [@Maria\_Efimova](https://discuss.elastic.co/u/Maria_Efimova)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 1:00pm UTC](https://discuss.elastic.co/t/how-to-update-if-document-id-is-not-unique/200010 "2019-09-18T13:00:08Z")

</div>

My output is elasticsearch. All documents with a field A="some\_value" has to be updated. The field A is not unique. The unique \_id=AB where A is the field I am compare to and B is another field. How it can be done in lo…

---

## [Parse Single Line XML In Logstash](https://discuss.elastic.co/t/parse-single-line-xml-in-logstash/199884)

<div class="topic-metadata">

**Author:** [@babaturk](https://discuss.elastic.co/u/babaturk)\
**Replies:** 2\
**Last updated:** [September 18, 2019, 12:58pm UTC](https://discuss.elastic.co/t/parse-single-line-xml-in-logstash/199884 "2019-09-18T12:58:41Z")

</div>

I am trying to output from Logstash to Elasticsearch the "result" (pass) in my xml file that consists of this single line: \<test\_results\>\<test\_result result="pass" title="Name\_Of\_Test"\>\</test\_result\>\</test\_results\> He…

---

## [Grok debugger in dev tools parses correctly, fails running logstash](https://discuss.elastic.co/t/grok-debugger-in-dev-tools-parses-correctly-fails-running-logstash/199087)

<div class="topic-metadata">

**Author:** [@starrynight](https://discuss.elastic.co/u/starrynight)\
**Replies:** 5\
**Last updated:** [September 18, 2019, 12:53pm UTC](https://discuss.elastic.co/t/grok-debugger-in-dev-tools-parses-correctly-fails-running-logstash/199087 "2019-09-18T12:53:09Z")

</div>

I was attempting to parse an atlassian bitbucket log here -- with the log example being this: 10.10.10.2,10.11.1.2 | https | i@5EB8GFx642x581467x0 | - | 2019-08-27 10:42:28,325 | "GET /security\_logout HTTP/1.1" | "" "Za…

---

## [Logstash & KIbana timestamp indexing](https://discuss.elastic.co/t/logstash-kibana-timestamp-indexing/199929)

<div class="topic-metadata">

**Author:** [@ALLAHshukur\_Ahmadzad](https://discuss.elastic.co/u/ALLAHshukur_Ahmadzad)\
**Replies:** 1\
**Last updated:** [September 18, 2019, 12:44pm UTC](https://discuss.elastic.co/t/logstash-kibana-timestamp-indexing/199929 "2019-09-18T12:44:39Z")

</div>

Hi dear community.I am having problems with the index naming of logs that belongs to the one day but indexed as previous.Now the logs are like following: Log: 09-09-2019 00:00:08 - log..... Logstash output: output { …

---

## [Empty date is not getting detected!](https://discuss.elastic.co/t/empty-date-is-not-getting-detected/200003)

<div class="topic-metadata">

**Author:** [@adarshzphin](https://discuss.elastic.co/u/adarshzphin)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 12:35pm UTC](https://discuss.elastic.co/t/empty-date-is-not-getting-detected/200003 "2019-09-18T12:35:39Z")

</div>

I have below dynamic mapping for index "my\_index" PUT my\_index { "mappings": { "dynamic\_templates": \[ { "objects": { "match\_mapping\_type": "object", "mapping": { "type": "nested" } } } \], "dynamic\_date\_form…

---

## [Kibana build version 7.2.x-SNAPSHOT](https://discuss.elastic.co/t/kibana-build-version-7-2-x-snapshot/199429)

<div class="topic-metadata">

**Author:** [@saroj\_shrestha](https://discuss.elastic.co/u/saroj_shrestha)\
**Replies:** 2\
**Last updated:** [September 18, 2019, 12:31pm UTC](https://discuss.elastic.co/t/kibana-build-version-7-2-x-snapshot/199429 "2019-09-18T12:31:58Z")

</div>

Hey guys, I am building a Kibana from the repo. When builds completes, i get version as: "version: 7.2.2-SNAPSHOT". Is there a way to get the version to "7.2.0"?

---

## [Unable to parse nested json using logstash json filter](https://discuss.elastic.co/t/unable-to-parse-nested-json-using-logstash-json-filter/199888)

<div class="topic-metadata">

**Author:** [@vj\_patnana](https://discuss.elastic.co/u/vj_patnana)\
**Replies:** 5\
**Last updated:** [September 18, 2019, 12:24pm UTC](https://discuss.elastic.co/t/unable-to-parse-nested-json-using-logstash-json-filter/199888 "2019-09-18T12:24:30Z")

</div>

Hello All, I am trying to parse logs which are in json format. I am trying to parse the message json field in the logs. I have tried using json plugin filter but it is not working as expected. Here is the log - { …

---

## [Elasticsearch 7.1.1 doesnot start](https://discuss.elastic.co/t/elasticsearch-7-1-1-doesnot-start/199947)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 1\
**Last updated:** [September 18, 2019, 12:19pm UTC](https://discuss.elastic.co/t/elasticsearch-7-1-1-doesnot-start/199947 "2019-09-18T12:19:36Z")

</div>

Hello I installed elasticsearch 7.1.1. and when i am running it without changing the network.host then its running fine but when i change network.host to 0.0.0.0 or site it doesnot start any leads

---

## [Fetching and updating records from Oracle table to monitor status of each entry](https://discuss.elastic.co/t/fetching-and-updating-records-from-oracle-table-to-monitor-status-of-each-entry/199997)

<div class="topic-metadata">

**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 11:56am UTC](https://discuss.elastic.co/t/fetching-and-updating-records-from-oracle-table-to-monitor-status-of-each-entry/199997 "2019-09-18T11:56:27Z")

</div>

Hello, I have an use case where we're are suppose to establish status monitoring for certain entities. Business case looks like this: There is a table containing two columns: ID along with their Status. Status can be on…

---

## [Mocking CountResponse in NEST 7.2.0](https://discuss.elastic.co/t/mocking-countresponse-in-nest-7-2-0/199995)

<div class="topic-metadata">

**Author:** [@mktd](https://discuss.elastic.co/u/mktd)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 11:54am UTC](https://discuss.elastic.co/t/mocking-countresponse-in-nest-7-2-0/199995 "2019-09-18T11:54:46Z")

</div>

Hi! Our company are currently upgrading from NEST 6.4.2 to 7.2.0, and we've come across some breaking changes. We are using the Count-method, and in earlier versions this was virtual and possible to mock. Now, this meth…

---

## [Два узла не соединяются в кластер ES 7.3.1](https://discuss.elastic.co/t/es-7-3-1/199529)

<div class="topic-metadata">

**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\
**Replies:** 6\
**Last updated:** [September 18, 2019, 11:26am UTC](https://discuss.elastic.co/t/es-7-3-1/199529 "2019-09-18T11:26:01Z")

</div>

Доброго времени суток! На двух ПК (Windows Server 2012 и Windows7) поставил Elasticsearch 7.3.1 с msi как сервис. Хочу эти две машины соединить в двухнодовый кластер, для чего каждый из узлов конфигурирую следующим о…

---

## [Need help to build visualisation in kibana](https://discuss.elastic.co/t/need-help-to-build-visualisation-in-kibana/199944)

<div class="topic-metadata">

**Author:** [@Vikas\_Thakur](https://discuss.elastic.co/u/Vikas_Thakur)\
**Replies:** 3\
**Last updated:** [September 18, 2019, 9:55am UTC](https://discuss.elastic.co/t/need-help-to-build-visualisation-in-kibana/199944 "2019-09-18T09:55:50Z")

</div>

Hi Team, I am new to ELK stack. Need help to build visualisation in kibana. Example of logs:- \[13.09.19 12:56:09:824 CEST\] 0000005c SystemOut 12:56:09.824 \[Default Executor-thread-31\] INFO AdapterImpl - { "type" :…

---

## [How many shard should i have for index size 450gb](https://discuss.elastic.co/t/how-many-shard-should-i-have-for-index-size-450gb/199392)

<div class="topic-metadata">

**Author:** [@Jeetu19](https://discuss.elastic.co/u/Jeetu19)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 9:53am UTC](https://discuss.elastic.co/t/how-many-shard-should-i-have-for-index-size-450gb/199392 "2019-09-13T09:53:51Z")

</div>

Hi Currently we have one index with following cofiguration. No of primary shard = 10 no of replica shard = 1 size of index = 450 apporox no of doc count = 1 billion rotation of index = weekly Cluster info:- no o…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1889)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1891)
