# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1905 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1906 --- ## [Missing index issue](https://discuss.elastic.co/t/missing-index-issue/199060)
**Author:** [@msk\_76](https://discuss.elastic.co/u/msk_76)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 10:32am UTC](https://discuss.elastic.co/t/missing-index-issue/199060 "2019-09-11T10:32:33Z")
I have a java based application which reads an index sys\_username\_mapping. This index gets update once every day. My steps are : initially load the index sys\_username\_mapping using filebeat+logstash for first time with… --- ## [Unable to create elasticsearch indices for json file](https://discuss.elastic.co/t/unable-to-create-elasticsearch-indices-for-json-file/199057)
**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 10:15am UTC](https://discuss.elastic.co/t/unable-to-create-elasticsearch-indices-for-json-file/199057 "2019-09-11T10:15:53Z")
I am having this json file for which I am using .conf file to parse it into elasticsearch indices but I am getting error. My .conf file is : input { file { codec =\> json path =\> \["/home/2017.09.04.json"\] start\_posi… --- ## [Slow cluster operations (\_cat/nodes time out)](https://discuss.elastic.co/t/slow-cluster-operations-cat-nodes-time-out/197224)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 10:14am UTC](https://discuss.elastic.co/t/slow-cluster-operations-cat-nodes-time-out/197224 "2019-09-11T10:14:01Z")
Hey all, This is a fairly complex problem I'm facing for two days now. SYMPTOMS The main symptom from the admin perspective is the time out of the \_cat APIs, e.g. \_cat/nodes and slow user logins in Kibana. Sometime a… --- ## [Use index-pattern by name and not by ID](https://discuss.elastic.co/t/use-index-pattern-by-name-and-not-by-id/198733)
**Author:** [@smerzlyakov](https://discuss.elastic.co/u/smerzlyakov)\ **Replies:** 8\ **Last updated:** [September 11, 2019, 9:46am UTC](https://discuss.elastic.co/t/use-index-pattern-by-name-and-not-by-id/198733 "2019-09-11T09:46:04Z")
Using index-pattern ID is not clear at all. For example i have a problem - i have dasboards, that use "winlogbeat-\*" index-pattern and than i delete it (during trying fixing a problem). And that create it again. Now all… --- ## [Reformatting index timeout exception](https://discuss.elastic.co/t/reformatting-index-timeout-exception/199051)
**Author:** [@acidserg](https://discuss.elastic.co/u/acidserg)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 9:29am UTC](https://discuss.elastic.co/t/reformatting-index-timeout-exception/199051 "2019-09-11T09:29:01Z")
Hi all! I'm trying to reindex my structure in the next way. I have a lot of indexes like "index1"..."indexN". I want to create next structure - I have one index with "indexes" name, and a lot of alias to every document… --- ## [Архитектура кластера ElasticSearch](https://discuss.elastic.co/t/elasticsearch/198019)
**Author:** [@Lebedev](https://discuss.elastic.co/u/Lebedev)\ **Replies:** 10\ **Last updated:** [September 11, 2019, 9:22am UTC](https://discuss.elastic.co/t/elasticsearch/198019 "2019-09-11T09:22:57Z")
Здравствуйте, коллеги. Проконсультируйте, пожалуйста. В настоящий момент я собираю кластер ElasticSearch. Получается следующая схема (HA): Площадка 1(основная): 1хMaster node 3хData node(hot) Площадка 2(резервная … --- ## [Getting watch history automatically](https://discuss.elastic.co/t/getting-watch-history-automatically/199047)
**Author:** [@PortableInk](https://discuss.elastic.co/u/PortableInk)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 9:10am UTC](https://discuss.elastic.co/t/getting-watch-history-automatically/199047 "2019-09-11T09:10:48Z")
Hi, I was looking at creating a watch that watches the other watches, indexing the last status of the watch (last triggered and last fired etc.) and sending out an email should a watch not fire when it should have. Kib… --- ## [How about Force change cluster's elected master node](https://discuss.elastic.co/t/how-about-force-change-clusters-elected-master-node/198648)
**Author:** [@luyuncheng](https://discuss.elastic.co/u/luyuncheng)\ **Replies:** 6\ **Last updated:** [September 11, 2019, 8:58am UTC](https://discuss.elastic.co/t/how-about-force-change-clusters-elected-master-node/198648 "2019-09-11T08:58:55Z")
When i see the issues: When talk about force change cluster's elected master node, if there is a master leave but cluster settings not changed, what if changed the cluster block level into METADATA\_WRITE? not BLOC… --- ## [Multiline grepping](https://discuss.elastic.co/t/multiline-grepping/199027)
**Author:** [@satyam2593](https://discuss.elastic.co/u/satyam2593)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 7:25am UTC](https://discuss.elastic.co/t/multiline-grepping/199027 "2019-09-11T07:25:47Z")
i want to grep the multilines from the logs. and am using multiline codec in my config file.. Below are the sample pattern and config file sample logs: -------------------------------------- 17 Jul 2019 00:15:00,403 … --- ## [Limiting aggregation input size](https://discuss.elastic.co/t/limiting-aggregation-input-size/199019)
**Author:** [@Yonatan\_Omer](https://discuss.elastic.co/u/Yonatan_Omer)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 8:25am UTC](https://discuss.elastic.co/t/limiting-aggregation-input-size/199019 "2019-09-11T08:25:39Z")
Is it possible to limit the number of documents to aggregate? I wish to optimize the number of script executions specified in the "include" field. POST /stats/\_search { "size":0, "query": { "bool" : { … --- ## [How to restrict field to add data in copy\_to method](https://discuss.elastic.co/t/how-to-restrict-field-to-add-data-in-copy-to-method/195706)
**Author:** [@Debashis\_Mondal](https://discuss.elastic.co/u/Debashis_Mondal)\ **Replies:** 2\ **Last updated:** [September 11, 2019, 7:28am UTC](https://discuss.elastic.co/t/how-to-restrict-field-to-add-data-in-copy-to-method/195706 "2019-09-11T07:28:50Z")
Hi, I am using copy\_to method where I am trying to allow first\_name and last\_name to add data and full\_name will be read-only. The data will be added into the full\_name field automatically. PUT my\_index { "mappings":… --- ## [Tag the first line in the log](https://discuss.elastic.co/t/tag-the-first-line-in-the-log/199016)
**Author:** [@Alisa\_Faingold](https://discuss.elastic.co/u/Alisa_Faingold)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 6:45am UTC](https://discuss.elastic.co/t/tag-the-first-line-in-the-log/199016 "2019-09-11T06:45:12Z")
Hi, I try to calculate times of all kinds of device actions through the log. I would also like to calculate the time from the beginning of the log to a certain line appearance, and from a certain line appearance to the … --- ## [Missing security options after enabling security in 7.3 ELK Stack](https://discuss.elastic.co/t/missing-security-options-after-enabling-security-in-7-3-elk-stack/198655)
**Author:** [@KervyN](https://discuss.elastic.co/u/KervyN)\ **Replies:** 4\ **Last updated:** [September 11, 2019, 7:12am UTC](https://discuss.elastic.co/t/missing-security-options-after-enabling-security-in-7-3-elk-stack/198655 "2019-09-11T07:12:25Z")
So, after reading that the security features came to ES for free I tried to set it up. I went through the how to here: https://www.elastic.co/guide/en/elastic-stack-overview/current/security-getting-started.html But it… --- ## [Problem with the code. Only parsing one grok pattern and not overwriting message field](https://discuss.elastic.co/t/problem-with-the-code-only-parsing-one-grok-pattern-and-not-overwriting-message-field/198625)
**Author:** [@rajdeep101](https://discuss.elastic.co/u/rajdeep101)\ **Replies:** 16\ **Last updated:** [September 11, 2019, 6:42am UTC](https://discuss.elastic.co/t/problem-with-the-code-only-parsing-one-grok-pattern-and-not-overwriting-message-field/198625 "2019-09-11T06:42:55Z")
Hi all, i am trying to parse certain log lines and fetch only required information. I am using if else statements to differentiate according to which my lines should parse. But all log line are parsing using first grok p… --- ## [Upgrade order](https://discuss.elastic.co/t/upgrade-order/198627)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 15\ **Last updated:** [September 11, 2019, 6:40am UTC](https://discuss.elastic.co/t/upgrade-order/198627 "2019-09-11T06:40:42Z")
When upgrading from any version to a higher version that is supported by Elastic, what is the order of upgrade for node types: master, index-only, coordination-only ? --- ## [How can i find all similar results as groups?](https://discuss.elastic.co/t/how-can-i-find-all-similar-results-as-groups/199011)
**Author:** [@nikedadi](https://discuss.elastic.co/u/nikedadi)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 6:04am UTC](https://discuss.elastic.co/t/how-can-i-find-all-similar-results-as-groups/199011 "2019-09-11T06:04:16Z")
I have index with documents with titles like this: The best movie! THE BEST, MOVIE. My film The "Best mowie" MY FILM! First i want to get all titles analyzed by next rules: a) Lowercase b) Strip \[.,"'-\_\] etc. c) Ch… --- ## [Logstash grok pattern issue](https://discuss.elastic.co/t/logstash-grok-pattern-issue/198950)
**Author:** [@mugil1988](https://discuss.elastic.co/u/mugil1988)\ **Replies:** 2\ **Last updated:** [September 11, 2019, 5:45am UTC](https://discuss.elastic.co/t/logstash-grok-pattern-issue/198950 "2019-09-11T05:45:24Z")
Hi All, I am trying to configure grok patter to parse my application logs. Part of the logs is not getting displayed in kibana. Sample logs : 2019-09-10T23:04:21,584 | INFO | ://dedupresquest | \_route1 … --- ## [Unable To Split Json Array in Elasticsearch Query Response](https://discuss.elastic.co/t/unable-to-split-json-array-in-elasticsearch-query-response/199009)
**Author:** [@rameshkokare1](https://discuss.elastic.co/u/rameshkokare1)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 5:29am UTC](https://discuss.elastic.co/t/unable-to-split-json-array-in-elasticsearch-query-response/199009 "2019-09-11T05:29:32Z")
Hi, Not able to parse brand filed from below response. Logstash taking requests on port 31315 via http input plugin json to be parsed: { "took": 2, "timed\_out": false, "\_shards": { "total": 1, "successful": 1, … --- ## [To change kibana logo in 7.2.0](https://discuss.elastic.co/t/to-change-kibana-logo-in-7-2-0/199007)
**Author:** [@anshi8](https://discuss.elastic.co/u/anshi8)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 5:20am UTC](https://discuss.elastic.co/t/to-change-kibana-logo-in-7-2-0/199007 "2019-09-11T05:20:22Z")
Hi, I am a beginner and I want to change the logo on the left side bar . I couldn't find how to change it. I am using kibana 7.2.0 Can anyone help me? Thank You --- ## [Kibana : Design Document for any version above 6.1](https://discuss.elastic.co/t/kibana-design-document-for-any-version-above-6-1/198609)
**Author:** [@vvvprabhakar](https://discuss.elastic.co/u/vvvprabhakar)\ **Replies:** 7\ **Last updated:** [September 11, 2019, 5:20am UTC](https://discuss.elastic.co/t/kibana-design-document-for-any-version-above-6-1/198609 "2019-09-11T05:20:05Z")
To Understand Kibana : Any reference documentations are present to understand the source code of kibana Any version above 6.1 design document is fine for me --- ## [Upgraded to v7.1.1 and now getting eror "Data might be incomplete because your request timed out"](https://discuss.elastic.co/t/upgraded-to-v7-1-1-and-now-getting-eror-data-might-be-incomplete-because-your-request-timed-out/198740)
**Author:** [@scurtis](https://discuss.elastic.co/u/scurtis)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 4:40am UTC](https://discuss.elastic.co/t/upgraded-to-v7-1-1-and-now-getting-eror-data-might-be-incomplete-because-your-request-timed-out/198740 "2019-09-11T04:40:37Z")
We have upgraded our log server from v6.3.1 to 7.1.1. Now when I do a search for a specific date range it failed due to the following error "Data might be incomplete because your request timed out" Has anyone encount… --- ## [Failed to start filebeat.service: Unit filebeat.service not found](https://discuss.elastic.co/t/failed-to-start-filebeat-service-unit-filebeat-service-not-found/198877)
**Author:** [@Tje](https://discuss.elastic.co/u/Tje)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 4:17am UTC](https://discuss.elastic.co/t/failed-to-start-filebeat-service-unit-filebeat-service-not-found/198877 "2019-09-11T04:17:57Z")
I'm trying to enable filebeat in logstash.below is my filebeat.yml output.elasticsearch: # Array of hosts to connect to. hosts: \["localhost:9200"\] username: "elastic" password: "elastic" setup.kibana: host: … --- ## [Unable to load CSV file into Elasticsearch](https://discuss.elastic.co/t/unable-to-load-csv-file-into-elasticsearch/198826)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 5\ **Last updated:** [September 11, 2019, 4:10am UTC](https://discuss.elastic.co/t/unable-to-load-csv-file-into-elasticsearch/198826 "2019-09-11T04:10:53Z")
Hi, Logstash uploads the data into Kibana once and sometimes it doesn't even though I use the same same config file. I use the same config file to load the same data again after deleting the index it created in Kibana … --- ## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/195393)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 5\ **Last updated:** [September 11, 2019, 4:07am UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/195393 "2019-09-11T04:07:10Z")
Hello World! I'm Running Logstash on Docker | Logstash Reference \[6.8\] | Elastic and getting following error: logstash | Sending Logstash logs to /usr/share/logstash/logs which is now configured via log4j2.propertie… --- ## [Logstash time formate grok filter required for 5/16/2019 3:04:16 AM](https://discuss.elastic.co/t/logstash-time-formate-grok-filter-required-for-5-16-2019-316-am/198998)
**Author:** [@uday\_kumar1](https://discuss.elastic.co/u/uday_kumar1)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 4:04am UTC](https://discuss.elastic.co/t/logstash-time-formate-grok-filter-required-for-5-16-2019-316-am/198998 "2019-09-11T04:04:38Z")
Hello there, In my log date time format example "5/16/2019 3:04:16 AM". I am looking for grok pattern for this timestamp can some one help me to get it. and also I tried to separate in date and time which is taking st… --- ## [Books on Logstash](https://discuss.elastic.co/t/books-on-logstash/198986)
**Author:** [@SteveP](https://discuss.elastic.co/u/SteveP)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 4:04am UTC](https://discuss.elastic.co/t/books-on-logstash/198986 "2019-09-11T04:04:37Z")
Hello all, Is there any good books or articles that explain Logstash and how I can get up and running with it? Thanks, Steve --- ## [Kibana URL Formatting](https://discuss.elastic.co/t/kibana-url-formatting/198670)
**Author:** [@ashish\_kumar1490](https://discuss.elastic.co/u/ashish_kumar1490)\ **Replies:** 4\ **Last updated:** [September 11, 2019, 3:52am UTC](https://discuss.elastic.co/t/kibana-url-formatting/198670 "2019-09-11T03:52:23Z")
I am working on URL Formatting of filed for Dashboard - #/dashboard/564a56f0-3502-11e9-b608-1b55d134c69d?\_g=(refreshInterval:(pause:!f,value:30000),time:(from:now-7d,mode:quick,to:now))&\_a=(description:'',filters:!(('$s… --- ## [Tips :- Finding the version of Elaasticsearch, Kibana and others , try this one line command](https://discuss.elastic.co/t/tips-finding-the-version-of-elaasticsearch-kibana-and-others-try-this-one-line-command/198996)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 3:14am UTC](https://discuss.elastic.co/t/tips-finding-the-version-of-elaasticsearch-kibana-and-others-try-this-one-line-command/198996 "2019-09-11T03:14:08Z")
Hi All, Like to introduce me, Joseph John a open source user and lobbyist. Trying to see how I could make use of APM for Adempiere and Odoo. Like to share here for Linux new comers, to check your elaticsearch, and a… --- ## [Logstash Setup with GeoIP](https://discuss.elastic.co/t/logstash-setup-with-geoip/195231)
**Author:** [@Marcell0e](https://discuss.elastic.co/u/Marcell0e)\ **Replies:** 17\ **Last updated:** [September 11, 2019, 2:58am UTC](https://discuss.elastic.co/t/logstash-setup-with-geoip/195231 "2019-09-11T02:58:02Z")
I am attempting to setup geoip on Logstash 7.3.0. I have seen an old post on how to set it up, but I want to make sure I'm doing it right. In the logstash config file I add the below code. Is this correct? filter { g… --- ## [NEST date deserialization challenges](https://discuss.elastic.co/t/nest-date-deserialization-challenges/198994)
**Author:** [@rpatrick00](https://discuss.elastic.co/u/rpatrick00)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 2:49am UTC](https://discuss.elastic.co/t/nest-date-deserialization-challenges/198994 "2019-09-11T02:49:52Z")
I have an Index in Elasticsearch 7.2.0 with mappings that look like the following: { "settings": { "analysis": { "normalizer": { "lowercase\_normalizer": { "type": "custom", "char\_filter": , "filter": \["lowercase… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1904) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1906)