# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1911 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1912 --- ## [Elasticsearch is multiplying data per \*.conf I have](https://discuss.elastic.co/t/elasticsearch-is-multiplying-data-per-conf-i-have/198383)
**Author:** [@HikariNTB](https://discuss.elastic.co/u/HikariNTB)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 8:56am UTC](https://discuss.elastic.co/t/elasticsearch-is-multiplying-data-per-conf-i-have/198383 "2019-09-09T08:56:16Z")
Hi, I'm setting my ELK system and I need to input 3 different \*.conf as to input the data from my logs. The problem is that for some reason, when I reboot Logstash, the logs goes to Elasticsearch correctly but it shows … --- ## [Making kibana into two repos like frontend and backend](https://discuss.elastic.co/t/making-kibana-into-two-repos-like-frontend-and-backend/198016)
**Author:** [@vvvprabhakar](https://discuss.elastic.co/u/vvvprabhakar)\ **Replies:** 4\ **Last updated:** [September 9, 2019, 8:51am UTC](https://discuss.elastic.co/t/making-kibana-into-two-repos-like-frontend-and-backend/198016 "2019-09-09T08:51:25Z")
Did any one try separating the kibana frontend and backend ? if so how to do it ?? any version of kibana it's ok . But separating is the urgent thing for me Any from Elastic team can help me out --- ## [Grok match and move all to subfield](https://discuss.elastic.co/t/grok-match-and-move-all-to-subfield/198633)
**Author:** [@vincentvm](https://discuss.elastic.co/u/vincentvm)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 8:45am UTC](https://discuss.elastic.co/t/grok-match-and-move-all-to-subfield/198633 "2019-09-09T08:45:14Z")
Is it possible to move all fields matched by grok to a subfield? if \[program\] == "nginx-error" { grok { match =\> \[ "message" , "%{NGINX\_ERROR}"\] add\_tag =\> \["nginx-error"\] } } I would like to move this for exam… --- ## [Elasticsearch 6.5 returns serch results with some shards reported as failed](https://discuss.elastic.co/t/elasticsearch-6-5-returns-serch-results-with-some-shards-reported-as-failed/198632)
**Author:** [@alexander\_bromberg](https://discuss.elastic.co/u/alexander_bromberg)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 8:33am UTC](https://discuss.elastic.co/t/elasticsearch-6-5-returns-serch-results-with-some-shards-reported-as-failed/198632 "2019-09-09T08:33:28Z")
Hi, Sometimes I get search results from elasticserch with OK status but there are some shards reported as failed. The logs look clean. Then I rerun the the query all shards reported as successful. I have 1 replica confi… --- ## [Finding time difference between two events with in a single batch of logstash](https://discuss.elastic.co/t/finding-time-difference-between-two-events-with-in-a-single-batch-of-logstash/196813)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 5\ **Last updated:** [September 9, 2019, 8:14am UTC](https://discuss.elastic.co/t/finding-time-difference-between-two-events-with-in-a-single-batch-of-logstash/196813 "2019-09-09T08:14:24Z")
Hi all... Here I am trying to calculate the time difference between two events with the help of input plugin file, filter plugin ruby and elasticsearch here is my configuration input { file{ path =\> "/root/message\_… --- ## [Is there a way to combine "script" and "doc" type updates in elasticsearch into a single query](https://discuss.elastic.co/t/is-there-a-way-to-combine-script-and-doc-type-updates-in-elasticsearch-into-a-single-query/198623)
**Author:** [@yash.tandon](https://discuss.elastic.co/u/yash.tandon)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 7:54am UTC](https://discuss.elastic.co/t/is-there-a-way-to-combine-script-and-doc-type-updates-in-elasticsearch-into-a-single-query/198623 "2019-09-09T07:54:01Z")
--- ## [How to control the memory for es](https://discuss.elastic.co/t/how-to-control-the-memory-for-es/198621)
**Author:** [@lurongjiang](https://discuss.elastic.co/u/lurongjiang)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 7:40am UTC](https://discuss.elastic.co/t/how-to-control-the-memory-for-es/198621 "2019-09-09T07:40:46Z")
I set the es jvm option with -Xmx8g -Xms8g,but it didn't seem to work,the memory of es is not expected.While running with spark job,the CPU raise to 700%.How can I controller the es? --- ## [S3 Snapshot Repository storage\_class settings: OneZone IA?](https://discuss.elastic.co/t/s3-snapshot-repository-storage-class-settings-onezone-ia/198384)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 7:17am UTC](https://discuss.elastic.co/t/s3-snapshot-repository-storage-class-settings-onezone-ia/198384 "2019-09-09T07:17:15Z")
AWS have, for a while now, offered another storage class called OneZone Infrequent Access. This doesn't appear to be an option on the S3 Repository storage\_class settings. Are there plans to make this option available?… --- ## ["invalid\_shape\_exception: Y values \[127.03280083907562 to 127.0164930082651\] not in boundary Rect(minX=-180.0,maxX=180.0,minY=-90.0,maxY=90.0)"](https://discuss.elastic.co/t/invalid-shape-exception-y-values-127-03280083907562-to-127-0164930082651-not-in-boundary-rect-minx-180-0-maxx-180-0-miny-90-0-maxy-90-0/198612)
**Author:** [@ohoroyoi](https://discuss.elastic.co/u/ohoroyoi)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 7:09am UTC](https://discuss.elastic.co/t/invalid-shape-exception-y-values-127-03280083907562-to-127-0164930082651-not-in-boundary-rect-minx-180-0-maxx-180-0-miny-90-0-maxy-90-0/198612 "2019-09-09T07:09:44Z")
I want to gather regions within specific area. curl -X GET "https://atlas-search.test.com/regions\_19090403/\_search?pretty" -H 'Content-Type: application/json' -d' { "query":{ "bool": { "must": { "match\_all": {} }, … --- ## [What's the difference for score theory and sort principle between elasticsearch6.8.0 and elasticsearch5.4.3?](https://discuss.elastic.co/t/whats-the-difference-for-score-theory-and-sort-principle-between-elasticsearch6-8-0-and-elasticsearch5-4-3/198145)
**Author:** [@sunweiconfidence](https://discuss.elastic.co/u/sunweiconfidence)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 7:08am UTC](https://discuss.elastic.co/t/whats-the-difference-for-score-theory-and-sort-principle-between-elasticsearch6-8-0-and-elasticsearch5-4-3/198145 "2019-09-09T07:08:56Z")
hi, i want to know what's the difference for score theory and sort principle between elasticsearch6.8.0 and elasticsearch5.4.3? i use match clause and \_all in elasticsearch5.4.3 as below: { "query" : { "match" : { … --- ## [Elasticsearch stops in minutes when restarted](https://discuss.elastic.co/t/elasticsearch-stops-in-minutes-when-restarted/198221)
**Author:** [@lmqnam](https://discuss.elastic.co/u/lmqnam)\ **Replies:** 17\ **Last updated:** [September 9, 2019, 6:56am UTC](https://discuss.elastic.co/t/elasticsearch-stops-in-minutes-when-restarted/198221 "2019-09-09T06:56:07Z")
When I restart Elasticsearch, it stops more than 10 minutes at "logger":"o.e.g.GatewayService", "log":"recovered \[0\] indices into cluster\_state" I don't know the root cause. Please help me. Thanks for your time! {"type… --- ## [Logstash-plugin command fail](https://discuss.elastic.co/t/logstash-plugin-command-fail/198615)
**Author:** [@111203](https://discuss.elastic.co/u/111203)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 6:49am UTC](https://discuss.elastic.co/t/logstash-plugin-command-fail/198615 "2019-09-09T06:49:51Z")
I ran the two command about logstash-plugin , but all fail, both return following errors, My logstash version is 6.8.1, OS is Win 10 . Does someone knows how to fix it? Plz help, thank you. --- ## [issue：No default index pattern. You must select or create one to continue](https://discuss.elastic.co/t/issue-no-default-index-pattern-you-must-select-or-create-one-to-continue/198610)
**Author:** [@zero2](https://discuss.elastic.co/u/zero2)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 6:47am UTC](https://discuss.elastic.co/t/issue-no-default-index-pattern-you-must-select-or-create-one-to-continue/198610 "2019-09-09T06:47:01Z")
Hi,all. I am a beginner in Elastic .After i installed the kibana 5.2.2, when i starting kibana ,got the following issue, see the image, and i also search the official doc, but it looks like didn't match my issue, i can n… --- ## [Elasticsearch starts and stops automatically if i change network host](https://discuss.elastic.co/t/elasticsearch-starts-and-stops-automatically-if-i-change-network-host/198025)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 4\ **Last updated:** [September 9, 2019, 6:38am UTC](https://discuss.elastic.co/t/elasticsearch-starts-and-stops-automatically-if-i-change-network-host/198025 "2019-09-09T06:38:06Z")
In my elasticsearch yml (version 7.1.0), when i change my network host to the IP or simply 0.0.0.0, once i restart the service, the service runs for a few seconds and stops automatically. Please help me with this. --- ## [Rolling Upgrade from 6.8.0 to 7.3.1 Failed to Join the Cluster](https://discuss.elastic.co/t/rolling-upgrade-from-6-8-0-to-7-3-1-failed-to-join-the-cluster/198604)
**Author:** [@Namrata\_Khobragade](https://discuss.elastic.co/u/Namrata_Khobragade)\ **Replies:** 4\ **Last updated:** [September 9, 2019, 6:31am UTC](https://discuss.elastic.co/t/rolling-upgrade-from-6-8-0-to-7-3-1-failed-to-join-the-cluster/198604 "2019-09-09T06:31:06Z")
Hello all, I am currently having an Elasticsearch 6.8 Cluster with one master and one slave node. I need to upgrade this Elasticsearch to current version 7.3.1. I am following the Rolling Upgrade Steps given in https… --- ## [Failed to flush export bulks \[default\_local\]](https://discuss.elastic.co/t/failed-to-flush-export-bulks-default-local/198606)
**Author:** [@Sumit\_Kumar1](https://discuss.elastic.co/u/Sumit_Kumar1)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 6:18am UTC](https://discuss.elastic.co/t/failed-to-flush-export-bulks-default-local/198606 "2019-09-09T06:18:19Z")
Caused by: org.elasticsearch.xpack.monitoring.exporter.ExportException: failed to flush export bulk \[default\_local\] monitoring execution failed org.elasticsearch.xpack.monitoring.exporter.ExportException: failed to flu… --- ## [How to combine multiple AND with OR in a query?](https://discuss.elastic.co/t/how-to-combine-multiple-and-with-or-in-a-query/198364)
**Author:** [@porunov](https://discuss.elastic.co/u/porunov)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 6:17am UTC](https://discuss.elastic.co/t/how-to-combine-multiple-and-with-or-in-a-query/198364 "2019-09-09T06:17:25Z")
I am trying to figure out if it is possible to combine multiple AND with OR in a single request. The query I am trying to make is: field1 == 1 && field2 == 2 && field3!=3 && ( field4==4 || field5==5 || field6!=6 ). I d… --- ## [Elastic search for time series](https://discuss.elastic.co/t/elastic-search-for-time-series/198600)
**Author:** [@Mansoor\_Ali](https://discuss.elastic.co/u/Mansoor_Ali)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 5:54am UTC](https://discuss.elastic.co/t/elastic-search-for-time-series/198600 "2019-09-09T05:54:39Z")
Hi All, I am new to Nosql and Elastic Search world. I am evaluating Database for keeping 5 years of time series data for multiple clients, the data changes from client to client that’s why I am looking for NoSql Datab… --- ## [Elasticsearch FAILED](https://discuss.elastic.co/t/elasticsearch-failed/198592)
**Author:** [@TheSun](https://discuss.elastic.co/u/TheSun)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 5:43am UTC](https://discuss.elastic.co/t/elasticsearch-failed/198592 "2019-09-09T05:43:24Z")
Hi, I am trying to install ELK on Ubuntu server 18.04 but when starting, elasticsearch service failed. Please!! Help me!!. Thank you!!. Java verison : openjdk version "1.8.0\_222" OpenJDK Runtime Environment (build 1… --- ## [Grok or Dissect?](https://discuss.elastic.co/t/grok-or-dissect/198520)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 5:29am UTC](https://discuss.elastic.co/t/grok-or-dissect/198520 "2019-09-09T05:29:37Z")
In my (many, many) filters I use both grok and dissect but I wonder what's recommended? is one faster then the other? --- ## [Standalone license model](https://discuss.elastic.co/t/standalone-license-model/198550)
**Author:** [@Vijayakumar\_Kannan](https://discuss.elastic.co/u/Vijayakumar_Kannan)\ **Replies:** 1\ **Last updated:** [September 8, 2019, 2:23pm UTC](https://discuss.elastic.co/t/standalone-license-model/198550 "2019-09-08T14:23:00Z")
Dear All, I want to understand enterprise version license model. if i have 3 \* ES nodes , 3 \* Logstash nodes and 2 \* kibana nodes . Then how many number of elasticstack single node standalone license requrired? 3 or … --- ## [Using script instead of a regex in aggs term filter include configuration](https://discuss.elastic.co/t/using-script-instead-of-a-regex-in-aggs-term-filter-include-configuration/198580)
**Author:** [@tblsoft](https://discuss.elastic.co/u/tblsoft)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 4:57am UTC](https://discuss.elastic.co/t/using-script-instead-of-a-regex-in-aggs-term-filter-include-configuration/198580 "2019-09-09T04:57:57Z")
Hello, in the term aggregation it is possible to use the "include" to filter values with a regex. https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-terms-aggregation.html#\_filte… --- ## [We couldn’t activate monitoring - No monitoring data found](https://discuss.elastic.co/t/we-couldn-t-activate-monitoring-no-monitoring-data-found/198590)
**Author:** [@ted\_ye](https://discuss.elastic.co/u/ted_ye)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 2:56am UTC](https://discuss.elastic.co/t/we-couldn-t-activate-monitoring-no-monitoring-data-found/198590 "2019-09-09T02:56:21Z")
hello ，I've met a problem when I open stack monitoring on kibana----We couldn’t activate monitoring - No monitoring data found. And then I use GET \_license to check my license, it returned { }. where is my license??? … --- ## [Regarding to add a header " -H 'Content-Type: application/json' "](https://discuss.elastic.co/t/regarding-to-add-a-header-h-content-type-application-json/198363)
**Author:** [@terrymu](https://discuss.elastic.co/u/terrymu)\ **Replies:** 4\ **Last updated:** [September 9, 2019, 2:56am UTC](https://discuss.elastic.co/t/regarding-to-add-a-header-h-content-type-application-json/198363 "2019-09-09T02:56:12Z")
Hi Experts, I met an issue during modify a parameter from template. I want to modify a value of parameter which named "total\_fields" in template such like this: I use curl to input several commands to modify it, but… --- ## [Issues during index where field is null after upgrade to 7.x](https://discuss.elastic.co/t/issues-during-index-where-field-is-null-after-upgrade-to-7-x/198262)
**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\ **Replies:** 4\ **Last updated:** [September 8, 2019, 9:26pm UTC](https://discuss.elastic.co/t/issues-during-index-where-field-is-null-after-upgrade-to-7-x/198262 "2019-09-08T21:26:58Z")
In previous versions of ES I have been able to send data in from SQL Server with fields that have null values. I know I needed to make some changes to the mapping to deal with the move from 5.x-6.x-7.x and I never had an… --- ## [Winlogbeat default paths](https://discuss.elastic.co/t/winlogbeat-default-paths/198581)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 1\ **Last updated:** [September 8, 2019, 9:18pm UTC](https://discuss.elastic.co/t/winlogbeat-default-paths/198581 "2019-09-08T21:18:32Z")
The default Winlogbeat path.data is ${path.home}/data, documented here https://www.elastic.co/guide/en/beats/winlogbeat/current/directory-layout.html. However, the default service installer install-service-winlogbeat.ps… --- ## [Basic HA/Failover Setup](https://discuss.elastic.co/t/basic-ha-failover-setup/198567)
**Author:** [@revglen](https://discuss.elastic.co/u/revglen)\ **Replies:** 5\ **Last updated:** [September 8, 2019, 8:58pm UTC](https://discuss.elastic.co/t/basic-ha-failover-setup/198567 "2019-09-08T20:58:46Z")
Hi All, I am looking for the basic configuration for HA/Failover. I have 2 clusters. The first cluster consists of separate coordinating and master/data nodes running in 2 processes in one system while in the 2nd cluste… --- ## [I don't generate reporting pdf in kibana 6.3.0 dashboard. How do I activate it?](https://discuss.elastic.co/t/i-dont-generate-reporting-pdf-in-kibana-6-3-0-dashboard-how-do-i-activate-it/198559)
**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 10\ **Last updated:** [September 8, 2019, 8:54pm UTC](https://discuss.elastic.co/t/i-dont-generate-reporting-pdf-in-kibana-6-3-0-dashboard-how-do-i-activate-it/198559 "2019-09-08T20:54:03Z")
I don't generate reporting pdf in kibana 6.3.0 dashboard. How do I activate it? --- ## [Query and receive response in alphabetic order](https://discuss.elastic.co/t/query-and-receive-response-in-alphabetic-order/198297)
**Author:** [@matheusribeirogarcia](https://discuss.elastic.co/u/matheusribeirogarcia)\ **Replies:** 1\ **Last updated:** [September 8, 2019, 5:26pm UTC](https://discuss.elastic.co/t/query-and-receive-response-in-alphabetic-order/198297 "2019-09-08T17:26:45Z")
Hello everyone, i'm doing a query like this: query : { match\_all: {}}, \_source: 'titulo'}; And what I receive as response in hits.hits is: \[{"\_index":"xtrorigem","\_type":"empresas\_publicas","\_id":"licencas\_ambientais\_… --- ## [I am updated index template but i am getting error](https://discuss.elastic.co/t/i-am-updated-index-template-but-i-am-getting-error/198571)
**Author:** [@Gnanendra](https://discuss.elastic.co/u/Gnanendra)\ **Replies:** 0\ **Last updated:** [September 8, 2019, 5:25pm UTC](https://discuss.elastic.co/t/i-am-updated-index-template-but-i-am-getting-error/198571 "2019-09-08T17:25:04Z")
Hi, i am updated elasticsearch7.3.0 and update index template but i am getting below error. Error : \[2019-09-08 11:55:34,692\] ERROR WorkerSinkTask{id=elasticSearch-sink-3} Task threw an uncaught and unrecoverable excep… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1910) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1912)