# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1917 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1918 --- ## [Elastic Search Startup Warnings](https://discuss.elastic.co/t/elastic-search-startup-warnings/198237)
**Author:** [@Artiiz](https://discuss.elastic.co/u/Artiiz)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 11:59am UTC](https://discuss.elastic.co/t/elastic-search-startup-warnings/198237 "2019-09-05T11:59:15Z")
Hi there all, We are running into a massive number of Warnings when starting up ElasticSearch, these are all in elasticsearch.log and are very strange as they seem to no inhibit start up at all. \[2019-09-05T13:12:18,79… --- ## [Is it possible to have different logstash parse patterns for diffrent logs files linked to the same index?](https://discuss.elastic.co/t/is-it-possible-to-have-different-logstash-parse-patterns-for-diffrent-logs-files-linked-to-the-same-index/198181)
**Author:** [@nick78](https://discuss.elastic.co/u/nick78)\ **Replies:** 3\ **Last updated:** [September 5, 2019, 11:35am UTC](https://discuss.elastic.co/t/is-it-possible-to-have-different-logstash-parse-patterns-for-diffrent-logs-files-linked-to-the-same-index/198181 "2019-09-05T11:35:46Z")
I would like to ask if it is possible to have different logstash parse patterns for different log files to the same index,? What i want to achieve is to have different parse patterns mapping to the same attributes and st… --- ## [Data frame transforms](https://discuss.elastic.co/t/data-frame-transforms/198231)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 11:30am UTC](https://discuss.elastic.co/t/data-frame-transforms/198231 "2019-09-05T11:30:26Z")
Hi guys, is there any option to have access to Data frame transforms in basic open-source Elastic Stack solution? I've heard that it is free and part of the default Elastic build. When I try easy sample to transform d… --- ## [ELK 7 Latest stable Version for production deployment](https://discuss.elastic.co/t/elk-7-latest-stable-version-for-production-deployment/198222)
**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\ **Replies:** 6\ **Last updated:** [September 5, 2019, 11:17am UTC](https://discuss.elastic.co/t/elk-7-latest-stable-version-for-production-deployment/198222 "2019-09-05T11:17:00Z")
Hi , Could you please let us know the latest stable version of ELK for production deployment? Regards, Vivek --- ## [Sort grouped search result by formula](https://discuss.elastic.co/t/sort-grouped-search-result-by-formula/198223)
**Author:** [@yuriiH](https://discuss.elastic.co/u/yuriiH)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 10:31am UTC](https://discuss.elastic.co/t/sort-grouped-search-result-by-formula/198223 "2019-09-05T10:31:17Z")
Hello. I am trying to implement query which will sort results by the formula. For example, we have the next entities: { "price":"1000", "zip":"77777", "field1":"1", "field2":"5" }, { "price":"2222", "zip":"777… --- ## [How to build Logstash cluster for DB inputs](https://discuss.elastic.co/t/how-to-build-logstash-cluster-for-db-inputs/198211)
**Author:** [@bala2](https://discuss.elastic.co/u/bala2)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 10:00am UTC](https://discuss.elastic.co/t/how-to-build-logstash-cluster-for-db-inputs/198211 "2019-09-05T10:00:23Z")
Currently we got a requirement, where two logstash with JDBC input plugin needs to be configured with same DB queries.One logstash will be active all time, if that logstash instance goes down another instance should star… --- ## [ElasticSearch container is not being created using Docker compose](https://discuss.elastic.co/t/elasticsearch-container-is-not-being-created-using-docker-compose/198214)
**Author:** [@kishore\_royal](https://discuss.elastic.co/u/kishore_royal)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 9:46am UTC](https://discuss.elastic.co/t/elasticsearch-container-is-not-being-created-using-docker-compose/198214 "2019-09-05T09:46:00Z")
Hi , I am trying to run ELK stack with filebeat on VM installed on windows machine. When I run the docker-compose up command , filebeat and kibana containers are getting created while elasticsearch container not being … --- ## [Monitoring not showing all nodes](https://discuss.elastic.co/t/monitoring-not-showing-all-nodes/197673)
**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 9:37am UTC](https://discuss.elastic.co/t/monitoring-not-showing-all-nodes/197673 "2019-09-05T09:37:47Z")
Hi, This is a followup question for Monitoring -\> Elasticsearch -\> Nodes - no data nodes(. I have 15 nodes in my cluster, but the Monitoring -\> Elasticsearch -\> Nodes is only showing master nodes. The strange thing is… --- ## [How to parse data in message into separate fields](https://discuss.elastic.co/t/how-to-parse-data-in-message-into-separate-fields/198209)
**Author:** [@Nurbek](https://discuss.elastic.co/u/Nurbek)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 9:29am UTC](https://discuss.elastic.co/t/how-to-parse-data-in-message-into-separate-fields/198209 "2019-09-05T09:29:21Z")
This is my data in KIbana input { http\_poller { urls =\> { soap\_request =\> { method =\> post url =\> "URL deleted" headers =\> { "Content-Type" =\> "text/xml; charset=utf-8" "SOAPAction" =\>… --- ## [Automatically download csv or json to local storgae](https://discuss.elastic.co/t/automatically-download-csv-or-json-to-local-storgae/198197)
**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 3\ **Last updated:** [September 5, 2019, 9:11am UTC](https://discuss.elastic.co/t/automatically-download-csv-or-json-to-local-storgae/198197 "2019-09-05T09:11:44Z")
Hiiii Is there any mechanism/script through which I can automatically download csv files from kibana visualization? --- ## [\[Resolved\]\[ES7.0.1\] Exception \[o.e.d.SeedHostsResolver \] \[node-1\] failed to resolve host \[node-1\] when starting es](https://discuss.elastic.co/t/resolved-es7-0-1-exception-o-e-d-seedhostsresolver-node-1-failed-to-resolve-host-node-1-when-starting-es/197960)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 6\ **Last updated:** [September 5, 2019, 8:51am UTC](https://discuss.elastic.co/t/resolved-es7-0-1-exception-o-e-d-seedhostsresolver-node-1-failed-to-resolve-host-node-1-when-starting-es/197960 "2019-09-05T08:51:56Z")
Hi team, I got below error when starting es7.0.1, how to correct the yml configuration file to resolve it? \[2019-09-04T08:40:22,339\]\[INFO \]\[o.e.h.AbstractHttpServerTransport\] \[node-1\] publish\_address {10.59.181.210:9… --- ## [Logstash ERROR: Unable to retrieve license information from license server {:message=\>"Unrecognized SSL message, plaintext connection?"}](https://discuss.elastic.co/t/logstash-error-unable-to-retrieve-license-information-from-license-server-message-unrecognized-ssl-message-plaintext-connection/195219)
**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 8:50am UTC](https://discuss.elastic.co/t/logstash-error-unable-to-retrieve-license-information-from-license-server-message-unrecognized-ssl-message-plaintext-connection/195219 "2019-09-05T08:50:22Z")
Hi, I have a cluster consisting of 3 nodes and an installation of kibana and logstash, all to version 6.8.1. I followed the procedure to configure SSL, TLS and HTTPS certificates: The Elasticsearch nodes are workin… --- ## [Am facing a problem](https://discuss.elastic.co/t/am-facing-a-problem/198168)
**Author:** [@Chandunadh](https://discuss.elastic.co/u/Chandunadh)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 8:32am UTC](https://discuss.elastic.co/t/am-facing-a-problem/198168 "2019-09-05T08:32:57Z")
Microsoft Windows \[Version 10.0.17763.615\] (c) 2018 Microsoft Corporation. All rights reserved. C:\\chandu ibm\\softwares\\logstash-6.4.2\\bin\>logstash -f logstash-sample.conf Error: Could not find or load main class ibm\\… --- ## [Possible to run with EBS instead of instance store?](https://discuss.elastic.co/t/possible-to-run-with-ebs-instead-of-instance-store/196569)
**Author:** [@VBDave](https://discuss.elastic.co/u/VBDave)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 8:31am UTC](https://discuss.elastic.co/t/possible-to-run-with-ebs-instead-of-instance-store/196569 "2019-09-05T08:31:57Z")
Hi there, We're currently running an elastic cluster for an ELK backend, on i3.2xlarge EC2 instances in AWS and using the local Instance Store to store the data partition on, which is generally what is recommended in th… --- ## [Parsing JSON? output from web service](https://discuss.elastic.co/t/parsing-json-output-from-web-service/198170)
**Author:** [@vspies](https://discuss.elastic.co/u/vspies)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 8:29am UTC](https://discuss.elastic.co/t/parsing-json-output-from-web-service/198170 "2019-09-05T08:29:47Z")
We are polling a security web service to get the scanning and detection logs. This is what I get when I poll the service with logstash: { "current\_link" =\> "https://xxx/v1/siem/security\_events?service=… --- ## [Bin/elasticsearch](https://discuss.elastic.co/t/bin-elasticsearch/198194)
**Author:** [@tonic\_Zun](https://discuss.elastic.co/u/tonic_Zun)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 8:27am UTC](https://discuss.elastic.co/t/bin-elasticsearch/198194 "2019-09-05T08:27:44Z")
The installation method used by the existing 6.x version cannot be installed with the latest 7.3.1. OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in… --- ## [How to set the value of "total\_fields" by using curl?](https://discuss.elastic.co/t/how-to-set-the-value-of-total-fields-by-using-curl/198196)
**Author:** [@terrymu](https://discuss.elastic.co/u/terrymu)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 8:26am UTC](https://discuss.elastic.co/t/how-to-set-the-value-of-total-fields-by-using-curl/198196 "2019-09-05T08:26:02Z")
Hi Experts, I'm parsing my source logs then meeting an issue such like this: \[2019-09-05T15:56:34,215\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {… --- ## [Identifying Pipeline Bottlenecks (Lost Events)](https://discuss.elastic.co/t/identifying-pipeline-bottlenecks-lost-events/198036)
**Author:** [@tobydickinson](https://discuss.elastic.co/u/tobydickinson)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 8:18am UTC](https://discuss.elastic.co/t/identifying-pipeline-bottlenecks-lost-events/198036 "2019-09-05T08:18:51Z")
First time poster, long time lurker. I am using the Elastic stack to process and analyze XML documents which are sent to me over the HTTP protocol. I currently have the following pipeline set up to realise this behaviou… --- ## [Is there a way to delete unassigned replica and recover using primary shard for a index?](https://discuss.elastic.co/t/is-there-a-way-to-delete-unassigned-replica-and-recover-using-primary-shard-for-a-index/198160)
**Author:** [@senthilp](https://discuss.elastic.co/u/senthilp)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 8:15am UTC](https://discuss.elastic.co/t/is-there-a-way-to-delete-unassigned-replica-and-recover-using-primary-shard-for-a-index/198160 "2019-09-05T08:15:00Z")
One of my replica is failed to recover due to file system issue and Primary shard is fine. Is there a way we can delete only the failed replica for that shard and recover using the Primary shard. --- ## [Explanation for index.force\_memory\_term\_dictionary](https://discuss.elastic.co/t/explanation-for-index-force-memory-term-dictionary/198193)
**Author:** [@internet-media](https://discuss.elastic.co/u/internet-media)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 8:05am UTC](https://discuss.elastic.co/t/explanation-for-index-force-memory-term-dictionary/198193 "2019-09-05T08:05:25Z")
Hi there Elastic Support Team and Community, I'm wondering what the index setting "force\_memory\_term\_dictionary" ist doing. I can't find an explanation in the documentation. What I found was an in-code comment that exp… --- ## [How to make a set of filters permanently attached to a visualisation, regardless of dashboard?](https://discuss.elastic.co/t/how-to-make-a-set-of-filters-permanently-attached-to-a-visualisation-regardless-of-dashboard/197686)
**Author:** [@chris2](https://discuss.elastic.co/u/chris2)\ **Replies:** 5\ **Last updated:** [September 5, 2019, 7:54am UTC](https://discuss.elastic.co/t/how-to-make-a-set-of-filters-permanently-attached-to-a-visualisation-regardless-of-dashboard/197686 "2019-09-05T07:54:54Z")
I have 3 different visualisations that require different types of filters, and i want to put these 3 visualisations in the same dashboard. but when i pin the filters, the filters overwrite unto the other visualisations!… --- ## [MUST\_NOT query not working](https://discuss.elastic.co/t/must-not-query-not-working/198189)
**Author:** [@rajneesh](https://discuss.elastic.co/u/rajneesh)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 7:47am UTC](https://discuss.elastic.co/t/must-not-query-not-working/198189 "2019-09-05T07:47:36Z")
Hi, I have a query in which i want add a must\_not clause to discard all records that have blank data for a particular field. I tried so many ways to do it but none worked. when i issue the same query with few other fiel… --- ## [I want to show in kibana today's index YYYY-MM-DD by default](https://discuss.elastic.co/t/i-want-to-show-in-kibana-todays-index-yyyy-mm-dd-by-default/198065)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 7:05am UTC](https://discuss.elastic.co/t/i-want-to-show-in-kibana-todays-index-yyyy-mm-dd-by-default/198065 "2019-09-05T07:05:29Z")
Hi there, I want to show in kibana today's index YYYY-MM-DD as default. Meaning, each day default index will be as of today date. Please let me know what is the proper way to do this Thank you, OK --- ## [Custom Plugin To Call An External API End Point](https://discuss.elastic.co/t/custom-plugin-to-call-an-external-api-end-point/198173)
**Author:** [@Pritish\_Mohapatra](https://discuss.elastic.co/u/Pritish_Mohapatra)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 6:54am UTC](https://discuss.elastic.co/t/custom-plugin-to-call-an-external-api-end-point/198173 "2019-09-05T06:54:13Z")
Hi, I have developed a dashboard in Kibana which displays all the errors logged from my application via elastic search. For all the failed records I want to create a button and on the click of it I want to reprocess the… --- ## [Question about Throughput Sizing](https://discuss.elastic.co/t/question-about-throughput-sizing/198137)
**Author:** [@zidane28](https://discuss.elastic.co/u/zidane28)\ **Replies:** 4\ **Last updated:** [September 5, 2019, 6:15am UTC](https://discuss.elastic.co/t/question-about-throughput-sizing/198137 "2019-09-05T06:15:07Z")
I found out that one of the method for cluster planning is though Throughput Sizing , in which it uses number of search per second, search response time, physical cores etc etc. to calculate how many nodes needed. Below… --- ## [Best approach to creating mapping in elasticsearch/logstash](https://discuss.elastic.co/t/best-approach-to-creating-mapping-in-elasticsearch-logstash/198156)
**Author:** [@mdhl](https://discuss.elastic.co/u/mdhl)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 5:58am UTC](https://discuss.elastic.co/t/best-approach-to-creating-mapping-in-elasticsearch-logstash/198156 "2019-09-05T05:58:08Z")
Hello everyone, I am new to ELK stack. Currently in the processing of deploying POC for migrating our small splunk deployment to ELK. One of the problem I am having is trying to create mapping in elasticsearch. Current… --- ## [Does ES support to add a new item into the nested field of existing document?](https://discuss.elastic.co/t/does-es-support-to-add-a-new-item-into-the-nested-field-of-existing-document/198154)
**Author:** [@yash.tandon](https://discuss.elastic.co/u/yash.tandon)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 5:49am UTC](https://discuss.elastic.co/t/does-es-support-to-add-a-new-item-into-the-nested-field-of-existing-document/198154 "2019-09-05T05:49:13Z")
--- ## [Custom applog filtering using logtash](https://discuss.elastic.co/t/custom-applog-filtering-using-logtash/197972)
**Author:** [@ravi\_varma](https://discuss.elastic.co/u/ravi_varma)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 3:33am UTC](https://discuss.elastic.co/t/custom-applog-filtering-using-logtash/197972 "2019-09-05T03:33:46Z")
I am quite new to elk stack, and need your kind help on how can we do format the below log using logstash filters 2019-08-06 09:13:39,921BUYER-AR : FPX Info FPXTRANSID:1908060 - m\_sNewFPXXml in verifyFPXCheckSum: \ **Author:** [@hyun\_wen](https://discuss.elastic.co/u/hyun_wen)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 3:18am UTC](https://discuss.elastic.co/t/es/198142 "2019-09-05T03:18:45Z") 集群里有6台机子 (1 主节点 + 1 负载均衡 + 4 数据节点) 一水的dell r510 Xeon 5500 32G ssd（系统）+机械（数据） 之前纯索引数据的时候 4亿5千万多文档（1 Primary+ 1 Replica） ID是手动指定的 refresh = -1 总索引速度在8000/s左右 主分片在4000/s左右 虽然不是很快 但是还能接受 索引完成之后 1T data， 292 shards（主分… --- ## [Elasticsearch update by query using NEST](https://discuss.elastic.co/t/elasticsearch-update-by-query-using-nest/198083)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 2:25am UTC](https://discuss.elastic.co/t/elasticsearch-update-by-query-using-nest/198083 "2019-09-05T02:25:09Z")
Can anyone help how to pass paramter dynamically in update by query using nest c# . var test= highLevelClient.UpdateByQuery(u =\> u .Index("test") .Type("doc") .Query(q =\> q .Term("\_id", id) ) .Script(("ctx.\_sourc… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1916) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1918)