# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1897

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1898

---

## [Enrich message](https://discuss.elastic.co/t/enrich-message/199514)

<div class="topic-metadata">

**Author:** [@sparmar](https://discuss.elastic.co/u/sparmar)\
**Replies:** 2\
**Last updated:** [September 15, 2019, 12:25pm UTC](https://discuss.elastic.co/t/enrich-message/199514 "2019-09-15T12:25:42Z")

</div>

I have a java application that is writing out message as follows for example: 00:00:13,950 INFO \[com.companyurl.application\] (bq-thread-pool-threads - 881) ABC response by ApplicationManager - received \<?xml version="1.…

---

## [Add a new filed in csv based on a value in colum and cal the time diff](https://discuss.elastic.co/t/add-a-new-filed-in-csv-based-on-a-value-in-colum-and-cal-the-time-diff/196117)

<div class="topic-metadata">

**Author:** [@kolli\_dilip](https://discuss.elastic.co/u/kolli_dilip)\
**Replies:** 6\
**Last updated:** [August 22, 2019, 3:12pm UTC](https://discuss.elastic.co/t/add-a-new-filed-in-csv-based-on-a-value-in-colum-and-cal-the-time-diff/196117 "2019-08-22T15:12:17Z")

</div>

Hi all I have a set of csv data as below i am interested in adding a new field 'status' based on the 'endtime' column value, i.e if its not 'null' then the status should be completed else open. also need to calculat…

---

## [Calculate time difference considering only office hours and ignoring the weekend in logstash](https://discuss.elastic.co/t/calculate-time-difference-considering-only-office-hours-and-ignoring-the-weekend-in-logstash/199527)

<div class="topic-metadata">

**Author:** [@kolli\_dilip](https://discuss.elastic.co/u/kolli_dilip)\
**Replies:** 0\
**Last updated:** [September 15, 2019, 9:56am UTC](https://discuss.elastic.co/t/calculate-time-difference-considering-only-office-hours-and-ignoring-the-weekend-in-logstash/199527 "2019-09-15T09:56:11Z")

</div>

can we calculate difference of time ignoring the weekdays... like i should not take the time during the weekend and the time beyond the office hours example consider the time between 08.00 to 18.00 ... And only weekdays…

---

## [Logstash not parser correctly with dissect](https://discuss.elastic.co/t/logstash-not-parser-correctly-with-dissect/199511)

<div class="topic-metadata">

**Author:** [@McFly](https://discuss.elastic.co/u/McFly)\
**Replies:** 1\
**Last updated:** [September 15, 2019, 9:43am UTC](https://discuss.elastic.co/t/logstash-not-parser-correctly-with-dissect/199511 "2019-09-15T09:43:05Z")

</div>

Hello everyone! how are they? I need to consult them. I am parsing the logs of a service, the following come this way: |@ TIMESTAMP || DATE1 || DATE2 || DATE3 || DATE4 || DATE5 || DATE6 @| Howeve…

---

## [Is it possible to download the entire current Elasticsearch Reference as a pdf?](https://discuss.elastic.co/t/is-it-possible-to-download-the-entire-current-elasticsearch-reference-as-a-pdf/199516)

<div class="topic-metadata">

**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\
**Replies:** 1\
**Last updated:** [September 15, 2019, 9:37am UTC](https://discuss.elastic.co/t/is-it-possible-to-download-the-entire-current-elasticsearch-reference-as-a-pdf/199516 "2019-09-15T09:37:43Z")

</div>

is it possible to download the entire Elasticsearch Reference as a pdf ? https://www.elastic.co/guide/en/elasticsearch/reference/current/index.html

---

## [Extra chars in kibana message field](https://discuss.elastic.co/t/extra-chars-in-kibana-message-field/199158)

<div class="topic-metadata">

**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\
**Replies:** 2\
**Last updated:** [September 15, 2019, 7:12am UTC](https://discuss.elastic.co/t/extra-chars-in-kibana-message-field/199158 "2019-09-15T07:12:15Z")

</div>

Hello, Do you know how to deal with these extra chars which don't allow to parse log entries properly? elasticsearch log format contains extra chars like \[0;39m, e\[33m : e\[2m2019-09-11 20:45:43.600e\[0;39m e\[33m WARNe…

---

## [Aggergation with condition](https://discuss.elastic.co/t/aggergation-with-condition/199481)

<div class="topic-metadata">

**Author:** [@Yoav\_Ben\_Moha](https://discuss.elastic.co/u/Yoav_Ben_Moha)\
**Replies:** 3\
**Last updated:** [September 14, 2019, 9:57pm UTC](https://discuss.elastic.co/t/aggergation-with-condition/199481 "2019-09-14T21:57:28Z")

</div>

Hi, Assume that i have personal details (names / adderess / phones / age and etc) of city people I need to build Table Visualization in Kibana 7 based on those details. The visualization should display the following…

---

## [Path.conf is no longer a configurable setting - Installed X Pack](https://discuss.elastic.co/t/path-conf-is-no-longer-a-configurable-setting-installed-x-pack/198493)

<div class="topic-metadata">

**Author:** [@es\_robot](https://discuss.elastic.co/u/es_robot)\
**Replies:** 3\
**Last updated:** [September 14, 2019, 4:20pm UTC](https://discuss.elastic.co/t/path-conf-is-no-longer-a-configurable-setting-installed-x-pack/198493 "2019-09-14T16:20:14Z")

</div>

Hey I've installed X-Pack 5.6 on Elasticsearch & Kibana. Upon running Upgrade Assistant I've experienced an error and unable to proceed. The Error I'm getting is below. The Documentation doesn't provide any help either…

---

## [Completion Suggester with a Context and indexing field (mixte lowercase or uppercase ....)](https://discuss.elastic.co/t/completion-suggester-with-a-context-and-indexing-field-mixte-lowercase-or-uppercase/199499)

<div class="topic-metadata">

**Author:** [@fallphenix](https://discuss.elastic.co/u/fallphenix)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 12:02pm UTC](https://discuss.elastic.co/t/completion-suggester-with-a-context-and-indexing-field-mixte-lowercase-or-uppercase/199499 "2019-09-14T12:02:29Z")

</div>

Hi, When using Completion Suggester with a Context, i note it is not possible to context\_type field as an indexing field (lowercase or uppercase ....). To test, you can use the same example in doc : https://www.elast…

---

## [How many Documents can be managed at a 8GB RAM Server?](https://discuss.elastic.co/t/how-many-documents-can-be-managed-at-a-8gb-ram-server/199071)

<div class="topic-metadata">

**Author:** [@Isi](https://discuss.elastic.co/u/Isi)\
**Replies:** 2\
**Last updated:** [September 14, 2019, 10:51am UTC](https://discuss.elastic.co/t/how-many-documents-can-be-managed-at-a-8gb-ram-server/199071 "2019-09-14T10:51:10Z")

</div>

We want to integrate elasticsearch into a document management system. For the implementation, we need the hardware requirements when it comes to several thousand documents to be managed with elasticsearch.

---

## [After node replacement, rate of (re) initializing shards is decreasing](https://discuss.elastic.co/t/after-node-replacement-rate-of-re-initializing-shards-is-decreasing/199141)

<div class="topic-metadata">

**Author:** [@Philip\_Brown](https://discuss.elastic.co/u/Philip_Brown)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 10:35am UTC](https://discuss.elastic.co/t/after-node-replacement-rate-of-re-initializing-shards-is-decreasing/199141 "2019-09-14T10:35:39Z")

</div>

I started off replacing a node, and having 1200 unassigned shards. The cluster happily started reassigning 8 shards at a time. Then it hit somewhere under 1000 shards unassigned.. and suddenly, started to only do 4 sha…

---

## [How do I combine 2 index join data in elasticsearch?](https://discuss.elastic.co/t/how-do-i-combine-2-index-join-data-in-elasticsearch/199202)

<div class="topic-metadata">

**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 10:31am UTC](https://discuss.elastic.co/t/how-do-i-combine-2-index-join-data-in-elasticsearch/199202 "2019-09-14T10:31:21Z")

</div>

that's exactly what I want. My purpose was this. In elasticsearch, solve this with a code structure that does this

---

## [Logstash timestamp appearing as text in Elasticsearch](https://discuss.elastic.co/t/logstash-timestamp-appearing-as-text-in-elasticsearch/199239)

<div class="topic-metadata">

**Author:** [@khat33b](https://discuss.elastic.co/u/khat33b)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 10:29am UTC](https://discuss.elastic.co/t/logstash-timestamp-appearing-as-text-in-elasticsearch/199239 "2019-09-14T10:29:14Z")

</div>

I am using Elasticsearch 7.3.1 and Logstash 7.3.1. I am trying to make a field of mine as the Elasticsearch timestamp using the date filter. The data is being inserted properly but the type of @timestamp is coming text. …

---

## [None of Configured nodes are available](https://discuss.elastic.co/t/none-of-configured-nodes-are-available/199278)

<div class="topic-metadata">

**Author:** [@vijayaraj](https://discuss.elastic.co/u/vijayaraj)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 10:24am UTC](https://discuss.elastic.co/t/none-of-configured-nodes-are-available/199278 "2019-09-14T10:24:05Z")

</div>

org.elasticsearch.client.transport.NoNodeAvailableException: None of the configured nodes are available: \[{#transport#-1} The elastic search works fine most of the time, This error persisted for almost a minute and all …

---

## [Hi All, Please help to resolve this issue. Due to line break after "Command Line : test" in the log data is not coming to single object](https://discuss.elastic.co/t/hi-all-please-help-to-resolve-this-issue-due-to-line-break-after-command-line-test-in-the-log-data-is-not-coming-to-single-object/199293)

<div class="topic-metadata">

**Author:** [@praveena77](https://discuss.elastic.co/u/praveena77)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 10:22am UTC](https://discuss.elastic.co/t/hi-all-please-help-to-resolve-this-issue-due-to-line-break-after-command-line-test-in-the-log-data-is-not-coming-to-single-object/199293 "2019-09-14T10:22:37Z")

</div>

log data Job Id : 181202632 Job Name : yutrw Batch Id : 181202632 Command Line : test Execution User : WINNTDOM Execution Queue : General output { Job Nam…

---

## [Elasticsearch|Grafana|Variable Templates](https://discuss.elastic.co/t/elasticsearch-grafana-variable-templates/199323)

<div class="topic-metadata">

**Author:** [@chinmay.parkar](https://discuss.elastic.co/u/chinmay.parkar)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-grafana-variable-templates/199323 "2019-09-14T10:19:43Z")

</div>

How can I make a Grafana template with a variable reference another variable using Elasticsearch as a datasource? I have a Grafana dashboard with template variables for fields and terms . When I select a field how ca…

---

## [Customized posting format elasticsearch 6.x 7.x](https://discuss.elastic.co/t/customized-posting-format-elasticsearch-6-x-7-x/199332)

<div class="topic-metadata">

**Author:** [@marb](https://discuss.elastic.co/u/marb)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 10:18am UTC](https://discuss.elastic.co/t/customized-posting-format-elasticsearch-6-x-7-x/199332 "2019-09-14T10:18:56Z")

</div>

Hi, I was looking for a way to introduce my own posting format. It looks like tht was something possible in 0.9 by using the codec module and the posting\_format syntax in the mapping file. Has it been removed in the n…

---

## [Shards count issue between logstash and elasticsearch](https://discuss.elastic.co/t/shards-count-issue-between-logstash-and-elasticsearch/199393)

<div class="topic-metadata">

**Author:** [@nithintechy](https://discuss.elastic.co/u/nithintechy)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 9:46am UTC](https://discuss.elastic.co/t/shards-count-issue-between-logstash-and-elasticsearch/199393 "2019-09-14T09:46:40Z")

</div>

Hi, I am trying to write server log files to elasticsearch using logstash. We have 8 servers with logstash running and one single node elasticsearch cluster. All were working well till one week. Currently, logstash is …

---

## [Dynamic alias remapping for newly created index](https://discuss.elastic.co/t/dynamic-alias-remapping-for-newly-created-index/199389)

<div class="topic-metadata">

**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 9:42am UTC](https://discuss.elastic.co/t/dynamic-alias-remapping-for-newly-created-index/199389 "2019-09-14T09:42:45Z")

</div>

When I create the following alias, it maps currently available indexes like apps-2019.09.11, apps-2019.09.12 curl -XPOST 'localhost:9200/\_aliases' -H 'Content-Type: application/json' -d' { "actions" : \[ { …

---

## [KIBANA - Elastic search PLUGIN IS RED, UI SETTINGS PLUGN IS RED](https://discuss.elastic.co/t/kibana-elastic-search-plugin-is-red-ui-settings-plugn-is-red/199438)

<div class="topic-metadata">

**Author:** [@nirish](https://discuss.elastic.co/u/nirish)\
**Replies:** 7\
**Last updated:** [September 14, 2019, 9:28am UTC](https://discuss.elastic.co/t/kibana-elastic-search-plugin-is-red-ui-settings-plugn-is-red/199438 "2019-09-14T09:28:21Z")

</div>

LOGS FROM data ingestion server failed to execute pipeline for a bulk request org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution of org.elasticsearch.ingest.PipelineExecu tionS…

---

## [Wazuh-Kibana API is too slow and wrong protocol being used to connect to the Wazuh API (after few days)](https://discuss.elastic.co/t/wazuh-kibana-api-is-too-slow-and-wrong-protocol-being-used-to-connect-to-the-wazuh-api-after-few-days/199497)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 9:07am UTC](https://discuss.elastic.co/t/wazuh-kibana-api-is-too-slow-and-wrong-protocol-being-used-to-connect-to-the-wazuh-api-after-few-days/199497 "2019-09-14T09:07:50Z")

</div>

Hello Community, we have recently upgraded the ELK stack from 6.5.2 to 6.8.1 (Wazuh version 3.9.3) and everything seems working fine except Kibana-Wazuh API, it is extremely slow and some times getting wazuh not ready y…

---

## [Where should I use the nodejs client library?](https://discuss.elastic.co/t/where-should-i-use-the-nodejs-client-library/199496)

<div class="topic-metadata">

**Author:** [@Ahsath](https://discuss.elastic.co/u/Ahsath)\
**Replies:** 0\
**Last updated:** [September 14, 2019, 6:54am UTC](https://discuss.elastic.co/t/where-should-i-use-the-nodejs-client-library/199496 "2019-09-14T06:54:51Z")

</div>

This may be an stupid question, but if I wanted to integrate a search box in my website, where should I use the nodejs client library for elasticsearch? https://www.elastic.co/guide/en/elasticsearch/client/javascript-ap…

---

## [The index pattern syslog-pfsense-\* does not contain any of the following compatible field types: geo\_point](https://discuss.elastic.co/t/the-index-pattern-syslog-pfsense-does-not-contain-any-of-the-following-compatible-field-types-geo-point/199491)

<div class="topic-metadata">

**Author:** [@nghia\_huynh](https://discuss.elastic.co/u/nghia_huynh)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 5:25am UTC](https://discuss.elastic.co/t/the-index-pattern-syslog-pfsense-does-not-contain-any-of-the-following-compatible-field-types-geo-point/199491 "2019-09-14T05:25:49Z")

</div>

Dear ELK Team, Today I have an issue when I try to create Coordinate Map. This error is described in below. And then, I checked parsing rule config like that: Please help me to fix this error in other to create ma…

---

## [How can merge logs based on the multi parameters](https://discuss.elastic.co/t/how-can-merge-logs-based-on-the-multi-parameters/198494)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 4\
**Last updated:** [September 14, 2019, 4:19am UTC](https://discuss.elastic.co/t/how-can-merge-logs-based-on-the-multi-parameters/198494 "2019-09-14T04:19:43Z")

</div>

hi all I have a question, how can merge multi lines of logs based on the multi parameters into one event?. for example, log is as following: IT=1 AC=12345 p1=12345 IW=1 AC=12345 A1=check1 IW=1 E1=0 IW=2 AC=12345 A1=c…

---

## [Logstash 6.8 or 7x comaptibility with Kafka 0.9](https://discuss.elastic.co/t/logstash-6-8-or-7x-comaptibility-with-kafka-0-9/199482)

<div class="topic-metadata">

**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\
**Replies:** 0\
**Last updated:** [September 13, 2019, 9:31pm UTC](https://discuss.elastic.co/t/logstash-6-8-or-7x-comaptibility-with-kafka-0-9/199482 "2019-09-13T21:31:06Z")

</div>

Hello, Has anyone tried to read topics in Kafka 0.9 using these logstash versions? I am currently using Logstash 7.3.2 which supposedly connects to it, but I am not seeing any consumers in kafka manager being connected…

---

## [Need to skip some docs in Kibana visualization](https://discuss.elastic.co/t/need-to-skip-some-docs-in-kibana-visualization/198725)

<div class="topic-metadata">

**Author:** [@santiago\_lator](https://discuss.elastic.co/u/santiago_lator)\
**Replies:** 3\
**Last updated:** [September 13, 2019, 8:30pm UTC](https://discuss.elastic.co/t/need-to-skip-some-docs-in-kibana-visualization/198725 "2019-09-13T20:30:10Z")

</div>

Hi all! I'm starting to use Kibana (currently using 6.7.2) and I came upon this difficulty. I have a pie chart that shows which users used which IP: And I need to show those results that show more than one IP ocurren…

---

## [Custom labels on the Right side panel](https://discuss.elastic.co/t/custom-labels-on-the-right-side-panel/199288)

<div class="topic-metadata">

**Author:** [@eemtzc](https://discuss.elastic.co/u/eemtzc)\
**Replies:** 5\
**Last updated:** [September 13, 2019, 8:29pm UTC](https://discuss.elastic.co/t/custom-labels-on-the-right-side-panel/199288 "2019-09-13T20:29:21Z")

</div>

Hello everyone, I am trying to custom the labels on the right-side panel in Kibana in order to have a custom name instead of the IP address, that way its easier to get an exact location instead of memorizing all the IP …

---

## [Cannot connect my Kibana instance to AWS Elastic Search service {Kibana server is not ready yet}](https://discuss.elastic.co/t/cannot-connect-my-kibana-instance-to-aws-elastic-search-service-kibana-server-is-not-ready-yet/199475)

<div class="topic-metadata">

**Author:** [@sshrivastava](https://discuss.elastic.co/u/sshrivastava)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 8:04pm UTC](https://discuss.elastic.co/t/cannot-connect-my-kibana-instance-to-aws-elastic-search-service-kibana-server-is-not-ready-yet/199475 "2019-09-13T20:04:18Z")

</div>

Hi all, I'm trying to setup wazuh cluster in aws with AWS ES instead of regular elastic search service. The problem i'm facing is after making changes in /etc/kibana/kibana.yml: kibana.index: ".kibana" elasticsearch.…

---

## [Kibana service uninstall windows 10](https://discuss.elastic.co/t/kibana-service-uninstall-windows-10/198327)

<div class="topic-metadata">

**Author:** [@sunny1](https://discuss.elastic.co/u/sunny1)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 7:52pm UTC](https://discuss.elastic.co/t/kibana-service-uninstall-windows-10/198327 "2019-09-13T19:52:29Z")

</div>

Hello Team, I wanted to uninstall kibana 6.5 service i had installed on windows 10. I tried using cmd with admin previlages and i am not able to do so. When i do sc delete service name, i get openservie failed access de…

---

## [CreateProcess error=193, %1 is not a valid Win32 application](https://discuss.elastic.co/t/createprocess-error-193-1-is-not-a-valid-win32-application/199473)

<div class="topic-metadata">

**Author:** [@Yamini](https://discuss.elastic.co/u/Yamini)\
**Replies:** 0\
**Last updated:** [September 13, 2019, 6:57pm UTC](https://discuss.elastic.co/t/createprocess-error-193-1-is-not-a-valid-win32-application/199473 "2019-09-13T18:57:39Z")

</div>

I am new to installing elastic search. I am encountering the below error when trying to start the service. Not sure what's causing this. My machine is Windows 2008 64 Bit. uncaught exception in thread \[main\] org.elasti…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1896)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1898)
