# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1891 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1892 --- ## [Change dynamically log file without re adding previous lines in elastic search and kibana](https://discuss.elastic.co/t/change-dynamically-log-file-without-re-adding-previous-lines-in-elastic-search-and-kibana/198696)
**Author:** [@theo1991](https://discuss.elastic.co/u/theo1991)\ **Replies:** 1\ **Last updated:** [September 18, 2019, 9:49am UTC](https://discuss.elastic.co/t/change-dynamically-log-file-without-re-adding-previous-lines-in-elastic-search-and-kibana/198696 "2019-09-18T09:49:19Z")
Hello, I have a log file which is generated by a script and exported on ELK machine, ingested by logstash. Every 1 or 2 months, I regenerate the file and the news logs are added to the initial file, and if there're new … --- ## [How to enable deprecation logging in Elasticsearch 6.8?](https://discuss.elastic.co/t/how-to-enable-deprecation-logging-in-elasticsearch-6-8/197550)
**Author:** [@dstromberg](https://discuss.elastic.co/u/dstromberg)\ **Replies:** 7\ **Last updated:** [September 18, 2019, 9:23am UTC](https://discuss.elastic.co/t/how-to-enable-deprecation-logging-in-elasticsearch-6-8/197550 "2019-09-18T09:23:44Z")
Ultimately, I want to upgrade a bunch of Python code that uses Elasticsearch 6.8 to use Elasticsearch 7.3. Toward that goal, I want to enable Elasticsearch 6.8 "deprecation logging". It seems likely to be the best place… --- ## [Why GET /\/\_ccr/stats returns empty result while GET /\/\_ccr/info returns follower indices](https://discuss.elastic.co/t/why-get-index-ccr-stats-returns-empty-result-while-get-index-ccr-info-returns-follower-indices/199962)
**Author:** [@jlp1](https://discuss.elastic.co/u/jlp1)\ **Replies:** 0\ **Last updated:** [September 18, 2019, 9:25am UTC](https://discuss.elastic.co/t/why-get-index-ccr-stats-returns-empty-result-while-get-index-ccr-info-returns-follower-indices/199962 "2019-09-18T09:25:39Z")
I set up CCR in Elasticsearch 6.8. I want to list all follower indices with GET my\_index/\_ccr/stats but it returns { "indices" : \[ \] } while GET my\_index/\_ccr/info returns { "follower\_indices" : \[ { "follower\_i… --- ## [Add additional data source to SIEM dashboard](https://discuss.elastic.co/t/add-additional-data-source-to-siem-dashboard/199712)
**Author:** [@Justin\_Doles](https://discuss.elastic.co/u/Justin_Doles)\ **Replies:** 3\ **Last updated:** [September 18, 2019, 8:46am UTC](https://discuss.elastic.co/t/add-additional-data-source-to-siem-dashboard/199712 "2019-09-18T08:46:35Z")
Is there a way to add additional data sources to the SIEM dashboard? I have an index, syslog-, that collects data from our network switches & firewalls. It does use the ECS conventions. The dashboard seems to only use… --- ## [Is store log file in elastic search is a best practice?](https://discuss.elastic.co/t/is-store-log-file-in-elastic-search-is-a-best-practice/199746)
**Author:** [@atline](https://discuss.elastic.co/u/atline)\ **Replies:** 1\ **Last updated:** [September 18, 2019, 8:42am UTC](https://discuss.elastic.co/t/is-store-log-file-in-elastic-search-is-a-best-practice/199746 "2019-09-18T08:42:28Z")
I have next scenario: One system will run a lots of application and generate logs. Everytime when one application finish, I will send the log to elasticsearch. There are 2 choice here: Every application first genera… --- ## [FATAL Error: Index .kibana belongs to a version of Kibana that cannot be automatically migrated. Reset it or use the X-Pack upgrade assistant](https://discuss.elastic.co/t/fatal-error-index-kibana-belongs-to-a-version-of-kibana-that-cannot-be-automatically-migrated-reset-it-or-use-the-x-pack-upgrade-assistant/199948)
**Author:** [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\ **Replies:** 1\ **Last updated:** [September 18, 2019, 8:41am UTC](https://discuss.elastic.co/t/fatal-error-index-kibana-belongs-to-a-version-of-kibana-that-cannot-be-automatically-migrated-reset-it-or-use-the-x-pack-upgrade-assistant/199948 "2019-09-18T08:41:20Z")
I have installed elasticsearch cluster on a Linux server. Initially I installed Elasticsearch 7.x (but then changed the elasticsearch to 6.8). Elasticsearch is running fine. I did the same with Kibana on a Windows Serve… --- ## [키바나 대시보드 데이터 접근](https://discuss.elastic.co/t/topic/199597)
**Author:** [@111208](https://discuss.elastic.co/u/111208)\ **Replies:** 2\ **Last updated:** [September 18, 2019, 8:30am UTC](https://discuss.elastic.co/t/topic/199597 "2019-09-18T08:30:37Z")
키바나에 표시되는 각 카드별 데이터에 접근하는 방법이 있나요? 예를 들어, REST API가 있다면, 카드의 id 넘겨서 해당 카드에 표시되는 데이터 관련 테이블 및 컬럼 카드의 id 넘겨서 해당 카드에 표시되는 데이터 자체. 방법이 없다면, 카드 Inspector 의 Request Query 에 표시되는 정보라도 programmatic 하게 얻어오는 방법을 알고자 합니다. 키바나… --- ## [Index作成時のanalyzerの指定について](https://discuss.elastic.co/t/index-analyzer/199941)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 1\ **Last updated:** [September 18, 2019, 8:28am UTC](https://discuss.elastic.co/t/index-analyzer/199941 "2019-09-18T08:28:37Z")
node.jsのrequestモジュールからElasticsearch Service上のESインスタンスのエンドポイントURLへ以下のJsonをPUTした際に、400エラーになります。authの入れ方が悪いとかでしょうか？ request.put({ url: ${this.esUrl + '/' + indexName}, headers: { 'Content-type': 'application/json', }, … --- ## [\[KIBANA\] Export en CSV erreur](https://discuss.elastic.co/t/kibana-export-en-csv-erreur/199814)
**Author:** [@YoubaYT](https://discuss.elastic.co/u/YoubaYT)\ **Replies:** 2\ **Last updated:** [September 18, 2019, 7:55am UTC](https://discuss.elastic.co/t/kibana-export-en-csv-erreur/199814 "2019-09-18T07:55:15Z")
Bonjour à tous, Je dois prendre des données provenant de KIBANA afin de les exporter en format CSV, cependant en passant par le discover une erreur apparait : "Field format is not a constructor" j'ai donc fais des data … --- ## [How resilient is snapshot if one node fails and restarts?](https://discuss.elastic.co/t/how-resilient-is-snapshot-if-one-node-fails-and-restarts/199933)
**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\ **Replies:** 0\ **Last updated:** [September 18, 2019, 7:30am UTC](https://discuss.elastic.co/t/how-resilient-is-snapshot-if-one-node-fails-and-restarts/199933 "2019-09-18T07:30:33Z")
Hi guys, I want to know if Elasticsearch snapshot is resilient against one node failing and restarting. Or maybe the NFS mount lost connection for an hour. It happened to me and the snapshot seems to be still in progre… --- ## [QueryBuilders rangeQuery with null date or values](https://discuss.elastic.co/t/querybuilders-rangequery-with-null-date-or-values/199931)
**Author:** [@Daniel\_Rod](https://discuss.elastic.co/u/Daniel_Rod)\ **Replies:** 0\ **Last updated:** [September 18, 2019, 7:25am UTC](https://discuss.elastic.co/t/querybuilders-rangequery-with-null-date-or-values/199931 "2019-09-18T07:25:42Z")
Hello! trying to found a solution for range query using QueryBuilders.rangeQuery Problem: DateFrom can be null or higher than today DateTill can be null or smaller than today quantyti remaining can be null or value… --- ## [Logstash csv data output error](https://discuss.elastic.co/t/logstash-csv-data-output-error/199925)
**Author:** [@pgw5540](https://discuss.elastic.co/u/pgw5540)\ **Replies:** 0\ **Last updated:** [September 18, 2019, 7:12am UTC](https://discuss.elastic.co/t/logstash-csv-data-output-error/199925 "2019-09-18T07:12:54Z")
Output csv data to elasticserach through logstash. However, sometimes certain problems occur. For example, the data of column B is outputed in column A. Therefore, the following error occurs because data of another fi… --- ## [Trying to work out the best memory setup for my cluster](https://discuss.elastic.co/t/trying-to-work-out-the-best-memory-setup-for-my-cluster/199907)
**Author:** [@matthew.whill](https://discuss.elastic.co/u/matthew.whill)\ **Replies:** 4\ **Last updated:** [September 18, 2019, 7:08am UTC](https://discuss.elastic.co/t/trying-to-work-out-the-best-memory-setup-for-my-cluster/199907 "2019-09-18T07:08:06Z")
Hi All, BACKGROUND I have a 6 node cluster setup (3 x data nodes and 3 x master nodes). The cluster is running 6.8.0 on each node with x-pack enabled for SSL communication and security. Each node is running on Ubunt… --- ## [Cannot bootstrap a new cluster: master not discovered or elected yet](https://discuss.elastic.co/t/cannot-bootstrap-a-new-cluster-master-not-discovered-or-elected-yet/199861)
**Author:** [@decibel83](https://discuss.elastic.co/u/decibel83)\ **Replies:** 3\ **Last updated:** [September 18, 2019, 7:07am UTC](https://discuss.elastic.co/t/cannot-bootstrap-a-new-cluster-master-not-discovered-or-elected-yet/199861 "2019-09-18T07:07:12Z")
Hi, after having some problems on another test cluster (I asked help on this post) I'm trying to setup a new cluster from scratch to understand what's happening. I'm stuck because this it the third time I'm trying to r… --- ## [Is there any out of box use elastic search ui?](https://discuss.elastic.co/t/is-there-any-out-of-box-use-elastic-search-ui/199915)
**Author:** [@atline](https://discuss.elastic.co/u/atline)\ **Replies:** 1\ **Last updated:** [September 18, 2019, 7:00am UTC](https://discuss.elastic.co/t/is-there-any-out-of-box-use-elastic-search-ui/199915 "2019-09-18T07:00:31Z")
See this topic: Which web ui is mostly used for ElasticSearch? For user-facing applications people tend to develop their own. For logs people tend to use Kibana directly What I need is some out of box use user-facing… --- ## [Enable SNI in logstash tcp output module](https://discuss.elastic.co/t/enable-sni-in-logstash-tcp-output-module/199919)
**Author:** [@funduraghu](https://discuss.elastic.co/u/funduraghu)\ **Replies:** 0\ **Last updated:** [September 18, 2019, 6:59am UTC](https://discuss.elastic.co/t/enable-sni-in-logstash-tcp-output-module/199919 "2019-09-18T06:59:01Z")
I use ssl over tcp to secure my communication with remote server. My remote server serves multiple domains and needs clients to send SNI so that it can serve correct certificates. I observed that logstash tcp output modu… --- ## [Aggregating by a given item in array](https://discuss.elastic.co/t/aggregating-by-a-given-item-in-array/197995)
**Author:** [@Yonatan\_Omer](https://discuss.elastic.co/u/Yonatan_Omer)\ **Replies:** 4\ **Last updated:** [September 18, 2019, 6:54am UTC](https://discuss.elastic.co/t/aggregating-by-a-given-item-in-array/197995 "2019-09-18T06:54:43Z")
My big documents contain arrays of objects, for example: \_doc : { countries: { \[ {"country":"czechia", "name":"novak", ...}, {"country":"england", "name":"jonson", ...} \] }, ... } In my query, I specif… --- ## [Could not index event to Elasticsearch. {:status=\>400](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-status-400/199916)
**Author:** [@ashok9177](https://discuss.elastic.co/u/ashok9177)\ **Replies:** 0\ **Last updated:** [September 18, 2019, 6:29am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-status-400/199916 "2019-09-18T06:29:49Z")
Hi There, i am using ELK-6.5.1 version and trying to create geo\_point indexes for kibana visualization, I have updated below template in kibana dev-tools and getting below error can anyone help me on this ? PUT \_templa… --- ## [Mysql aggregation does not find task\_id](https://discuss.elastic.co/t/mysql-aggregation-does-not-find-task-id/199800)
**Author:** [@NewToThis](https://discuss.elastic.co/u/NewToThis)\ **Replies:** 1\ **Last updated:** [September 18, 2019, 6:29am UTC](https://discuss.elastic.co/t/mysql-aggregation-does-not-find-task-id/199800 "2019-09-18T06:29:24Z")
Hi there, Being scratching my head for a while now on the following problem: I am doing an aggregration on a specific task\_id which for some reason works when the input is from a csv log file but not when using a mysql… --- ## [Geo\_point problems with multiple indexes and Logstash](https://discuss.elastic.co/t/geo-point-problems-with-multiple-indexes-and-logstash/197121)
**Author:** [@jjfbcn](https://discuss.elastic.co/u/jjfbcn)\ **Replies:** 15\ **Last updated:** [September 18, 2019, 6:01am UTC](https://discuss.elastic.co/t/geo-point-problems-with-multiple-indexes-and-logstash/197121 "2019-09-18T06:01:18Z")
Hi, We have a problem loading geo\_point data, the index template, after some tests, now is configured as: location..........conflict location.lat.....number location.lon....number So, when I try to create a map vis… --- ## [How to parse out logs based on a hostname](https://discuss.elastic.co/t/how-to-parse-out-logs-based-on-a-hostname/199841)
**Author:** [@habi](https://discuss.elastic.co/u/habi)\ **Replies:** 1\ **Last updated:** [September 18, 2019, 5:44am UTC](https://discuss.elastic.co/t/how-to-parse-out-logs-based-on-a-hostname/199841 "2019-09-18T05:44:10Z")
hi i am trying to parse out nginx logs based on a specific hostname and applygrep to those logs and send the output to a seperate file and i was thinking of using bash scripting for this. I would like to know how can i … --- ## [Search timeout through tribe node occasionally when add a specific cluser](https://discuss.elastic.co/t/search-timeout-through-tribe-node-occasionally-when-add-a-specific-cluser/199906)
**Author:** [@shjdwxy](https://discuss.elastic.co/u/shjdwxy)\ **Replies:** 0\ **Last updated:** [September 18, 2019, 3:31am UTC](https://discuss.elastic.co/t/search-timeout-through-tribe-node-occasionally-when-add-a-specific-cluser/199906 "2019-09-18T03:31:00Z")
Es version: 5.4.3 Problem: We use tribe node as proxy to search cross multi clusters (6 cluster now). When add one specific cluster to the tribe node, we occasionally meet search failure (timeout) when the index b… --- ## [Displaying String (Text) Value in TSVB](https://discuss.elastic.co/t/displaying-string-text-value-in-tsvb/199223)
**Author:** [@arnim](https://discuss.elastic.co/u/arnim)\ **Replies:** 2\ **Last updated:** [September 18, 2019, 2:58am UTC](https://discuss.elastic.co/t/displaying-string-text-value-in-tsvb/199223 "2019-09-18T02:58:34Z")
Hi, I would like to create a markdown in TSVB that display the top hit of following data: query\_id \[string\] longest\_duration \[int\] highest\_concurrent\_transaction \[int\] I would like to display all of them in a single… --- ## [Cannot execute scripts using \[field\] context](https://discuss.elastic.co/t/cannot-execute-scripts-using-field-context/198165)
**Author:** [@shadow\_air](https://discuss.elastic.co/u/shadow_air)\ **Replies:** 5\ **Last updated:** [September 18, 2019, 2:47am UTC](https://discuss.elastic.co/t/cannot-execute-scripts-using-field-context/198165 "2019-09-18T02:47:20Z")
Dear Team When i want to add a new script field by kibana management menu, i got a error, i find the request is looks like this: path: elasticsearch/\_msearch request payload: {"index":"myIndex","ignore\_unavaila… --- ## [How should I store favorited posts?](https://discuss.elastic.co/t/how-should-i-store-favorited-posts/199892)
**Author:** [@jonjonjon](https://discuss.elastic.co/u/jonjonjon)\ **Replies:** 3\ **Last updated:** [September 18, 2019, 12:40am UTC](https://discuss.elastic.co/t/how-should-i-store-favorited-posts/199892 "2019-09-18T00:40:13Z")
I have a simple website that allows users "like" posts that other users have submitted. As a user, I want to be able to search the posts that I have liked. How should I structure my data, assuming my data looks like th… --- ## [Elasticsearch 7.3 logging hierarchies and levels](https://discuss.elastic.co/t/elasticsearch-7-3-logging-hierarchies-and-levels/199483)
**Author:** [@gdamico](https://discuss.elastic.co/u/gdamico)\ **Replies:** 2\ **Last updated:** [September 17, 2019, 9:49pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-logging-hierarchies-and-levels/199483 "2019-09-17T21:49:07Z")
Hi, I'd like to get a greater detail on discovery process when a node starts. I found this: ES 7.3 Logging configuration So, I think this is the best approach: ./bin/elasticsearch -E \=\… --- ## [Resync runner doesn't appear to do anything](https://discuss.elastic.co/t/resync-runner-doesnt-appear-to-do-anything/199883)
**Author:** [@ClydeM](https://discuss.elastic.co/u/ClydeM)\ **Replies:** 0\ **Last updated:** [September 17, 2019, 8:59pm UTC](https://discuss.elastic.co/t/resync-runner-doesnt-appear-to-do-anything/199883 "2019-09-17T20:59:55Z")
Continuing the discussion from ECE Cloud UI shows incorrect info of node roles: I ran into this issue. I tried running a resync on the runner and it doesn't help any. Add/remove a role didn't help either --- ## [Plotting data from Elasticsearch using Vega](https://discuss.elastic.co/t/plotting-data-from-elasticsearch-using-vega/198976)
**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\ **Replies:** 3\ **Last updated:** [September 17, 2019, 8:45pm UTC](https://discuss.elastic.co/t/plotting-data-from-elasticsearch-using-vega/198976 "2019-09-17T20:45:12Z")
Greetings, I bet this problem will be easy for someone out there - but I can't see what I'm doing wrong. I have data in an Elasticsearch index called "plotting\_test" that I'd like to plot with Vega. I'm looking at the… --- ## [ILM Support for beat-logstash-elastic](https://discuss.elastic.co/t/ilm-support-for-beat-logstash-elastic/199875)
**Author:** [@Andres\_Man](https://discuss.elastic.co/u/Andres_Man)\ **Replies:** 0\ **Last updated:** [September 17, 2019, 7:22pm UTC](https://discuss.elastic.co/t/ilm-support-for-beat-logstash-elastic/199875 "2019-09-17T19:22:24Z")
Is there a way to configure ILM in the beat -\> LS-\> ES configuration? I can configure ILM with little trouble directly from beat to ES, but there is no documentation on the beat-LS-ES configuration of ILM. Is it even pos… --- ## [Visualize real data](https://discuss.elastic.co/t/visualize-real-data/199742)
**Author:** [@davidcsc2002](https://discuss.elastic.co/u/davidcsc2002)\ **Replies:** 1\ **Last updated:** [September 17, 2019, 6:30pm UTC](https://discuss.elastic.co/t/visualize-real-data/199742 "2019-09-17T18:30:30Z")
Hi, I'm new in ELK, I get telemetry data from cisco switch and send to elasticsearch, these datas include real transport bytes, packets... based on time. so I want reveal the real transport bytes, packets as metrics i… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1890) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1892)