# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1920

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1921

---

## [Heatmap and Radio Signal strength value](https://discuss.elastic.co/t/heatmap-and-radio-signal-strength-value/196853)

<div class="topic-metadata">

**Author:** [@manunc](https://discuss.elastic.co/u/manunc)\
**Replies:** 4\
**Last updated:** [September 4, 2019, 10:26am UTC](https://discuss.elastic.co/t/heatmap-and-radio-signal-strength-value/196853 "2019-09-04T10:26:51Z")

</div>

Hello, I need advise to decide which is the best option in order to: create a geolocation heatmap displaying a radio signal strengh in dBm (from 0 to -140 dBm) I try to use MAPS functionnalities with grid aggregation …

---

## [Logstash - elastic Search connection refused](https://discuss.elastic.co/t/logstash-elastic-search-connection-refused/197975)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 4\
**Last updated:** [September 4, 2019, 10:01am UTC](https://discuss.elastic.co/t/logstash-elastic-search-connection-refused/197975 "2019-09-04T10:01:09Z")

</div>

Hi, I have 2 servers from the same domain where I have installed Elasticsearch 7.1.0 in one and Logstash 7.1.0 in another. I am trying to fetch data from DB(same as Logstash server) and push the data to my ES server. …

---

## [Elasticsearch output: LogStash::Error: timestamp field is missing](https://discuss.elastic.co/t/elasticsearch-output-logstash-timestamp-field-is-missing/197888)

<div class="topic-metadata">

**Author:** [@ouss](https://discuss.elastic.co/u/ouss)\
**Replies:** 2\
**Last updated:** [September 4, 2019, 10:00am UTC](https://discuss.elastic.co/t/elasticsearch-output-logstash-timestamp-field-is-missing/197888 "2019-09-04T10:00:02Z")

</div>

Hello, I have an elasticsearch output working without any problem elasticsearch { hosts =\> \[ "${LOGS\_ELASTICSEARCH\_CLUSTER}:443" \] ssl =\> true index =\> "cwl-%{+YYYY.MM.dd}" document\_type =\> "log" } I wanted to…

---

## [How to use ruby code to realize “i = i + 1" operation](https://discuss.elastic.co/t/how-to-use-ruby-code-to-realize-i-i-1-operation/197646)

<div class="topic-metadata">

**Author:** [@terrymu](https://discuss.elastic.co/u/terrymu)\
**Replies:** 6\
**Last updated:** [September 4, 2019, 9:19am UTC](https://discuss.elastic.co/t/how-to-use-ruby-code-to-realize-i-i-1-operation/197646 "2019-09-04T09:19:30Z")

</div>

Hi Experts, I' m using ruby code to parse my target log. Here is the source code: if "\_xmlparsefailure" not in \[tags\]{ ruby { code =\> ' res = \[\] …

---

## [Passing external variables to a painless script](https://discuss.elastic.co/t/passing-external-variables-to-a-painless-script/198014)

<div class="topic-metadata">

**Author:** [@manish\_kakoti](https://discuss.elastic.co/u/manish_kakoti)\
**Replies:** 0\
**Last updated:** [September 4, 2019, 9:09am UTC](https://discuss.elastic.co/t/passing-external-variables-to-a-painless-script/198014 "2019-09-04T09:09:00Z")

</div>

In painless script, i tried passing a variable which stringifies a json object, like this: let sourcedData = JSON.stringify(body) body: { lang: 'painless', script: 'if (ctx.\_source.files == null) { ctx.\_so…

---

## [Replace \<script\> tag on indexation](https://discuss.elastic.co/t/replace-script-tag-on-indexation/197866)

<div class="topic-metadata">

**Author:** [@Maxime\_Kuil](https://discuss.elastic.co/u/Maxime_Kuil)\
**Replies:** 4\
**Last updated:** [September 4, 2019, 8:49am UTC](https://discuss.elastic.co/t/replace-script-tag-on-indexation/197866 "2019-09-04T08:49:44Z")

</div>

Hello, i want to replace \<script\>....\</script\> on index time. I tried : POST \_analyze { "tokenizer" : "icu\_tokenizer", "filter": \[ { "type": "pattern\_replace", …

---

## [Parse syslog-ng log to elasticsearch](https://discuss.elastic.co/t/parse-syslog-ng-log-to-elasticsearch/197830)

<div class="topic-metadata">

**Author:** [@ravipemmasani](https://discuss.elastic.co/u/ravipemmasani)\
**Replies:** 2\
**Last updated:** [September 4, 2019, 8:48am UTC](https://discuss.elastic.co/t/parse-syslog-ng-log-to-elasticsearch/197830 "2019-09-04T08:48:52Z")

</div>

Hi All, Iam glad to join this group. Basically i'm in the midst of setting up POC for centralize log collection and analyse the log. Following is my setup on RHEL 7.6. Syslog-ng-collect log from remote clients Elast…

---

## [Session Expired immediately after login](https://discuss.elastic.co/t/session-expired-immediately-after-login/198010)

<div class="topic-metadata">

**Author:** [@esther4](https://discuss.elastic.co/u/esther4)\
**Replies:** 0\
**Last updated:** [September 4, 2019, 8:43am UTC](https://discuss.elastic.co/t/session-expired-immediately-after-login/198010 "2019-09-04T08:43:13Z")

</div>

Hi, I am using Elasticsearch 7.1 and Kibana 7.1 along with XPack. I have also configured a Apache HTTPD to do reverse proxy to Kibana UI. whenever I login (using the BASIC), I will immediately got kick out with a SESSION…

---

## [What's scoring theory for elasticsearch6.8.0](https://discuss.elastic.co/t/whats-scoring-theory-for-elasticsearch6-8-0/198008)

<div class="topic-metadata">

**Author:** [@sunweiconfidence](https://discuss.elastic.co/u/sunweiconfidence)\
**Replies:** 0\
**Last updated:** [September 4, 2019, 8:38am UTC](https://discuss.elastic.co/t/whats-scoring-theory-for-elasticsearch6-8-0/198008 "2019-09-04T08:38:20Z")

</div>

hi, i want to find a scoring theory for elasticsearch latest scoring theory, previously in old elasticsearch i find a article to introduce it, but new version i don't find it, please tell me the link if have, thanks. ol…

---

## [Elasticseach maximum tested write speed](https://discuss.elastic.co/t/elasticseach-maximum-tested-write-speed/197828)

<div class="topic-metadata">

**Author:** [@Prashant\_Kumar2](https://discuss.elastic.co/u/Prashant_Kumar2)\
**Replies:** 2\
**Last updated:** [September 4, 2019, 8:30am UTC](https://discuss.elastic.co/t/elasticseach-maximum-tested-write-speed/197828 "2019-09-04T08:30:31Z")

</div>

Hi Team, I would like to know the maximum tested write per second speed. I have a use case of 15 million documents events generated per second where each document size is approx 3.5kb.

---

## [Kibana Nested Contols issue](https://discuss.elastic.co/t/kibana-nested-contols-issue/197591)

<div class="topic-metadata">

**Author:** [@dharani](https://discuss.elastic.co/u/dharani)\
**Replies:** 1\
**Last updated:** [September 4, 2019, 8:20am UTC](https://discuss.elastic.co/t/kibana-nested-contols-issue/197591 "2019-09-04T08:20:25Z")

</div>

Hello Team, I have been doing Nested Controls on Region and Depot in which i choose "Region" it should should show "Depots" containing "Regions". I tried all options in kibana 7.1 need your help. Thank you, dhara…

---

## [java.io.StreamCorruptedException](https://discuss.elastic.co/t/java-io-streamcorruptedexception/197485)

<div class="topic-metadata">

**Author:** [@Prafull](https://discuss.elastic.co/u/Prafull)\
**Replies:** 7\
**Last updated:** [September 4, 2019, 8:13am UTC](https://discuss.elastic.co/t/java-io-streamcorruptedexception/197485 "2019-09-04T08:13:30Z")

</div>

Hi , When I am trying to connect DataNode with Master Node Getting error below as written below: {"type": "server", "timestamp": "2019-08-30T12:08:21,959+0000", "level": "WARN", "component": "o.e.c.c.ClusterFormationFa…

---

## [Cross cluster replication link is displayed in basic version](https://discuss.elastic.co/t/cross-cluster-replication-link-is-displayed-in-basic-version/197468)

<div class="topic-metadata">

**Author:** [@abka](https://discuss.elastic.co/u/abka)\
**Replies:** 2\
**Last updated:** [September 4, 2019, 8:10am UTC](https://discuss.elastic.co/t/cross-cluster-replication-link-is-displayed-in-basic-version/197468 "2019-09-04T08:10:44Z")

</div>

Hello, I created a request in April 26 (https://discuss.elastic.co/t/cross-cluster-replication-is-dispayed-in-kibana-in-basic-version/178593) where warned that a message is displayed in Kibana when using the basic versi…

---

## [Using Scripted Conditionals](https://discuss.elastic.co/t/using-scripted-conditionals/197861)

<div class="topic-metadata">

**Author:** [@spupapi](https://discuss.elastic.co/u/spupapi)\
**Replies:** 3\
**Last updated:** [September 4, 2019, 7:49am UTC](https://discuss.elastic.co/t/using-scripted-conditionals/197861 "2019-09-04T07:49:51Z")

</div>

Hello, so I've got an index called Hamlet. And in Hamlet there is a field "Speaker" with value of the name of the speaker. So it looks like this: { "speaker": "Hamlet" } Now I want to make script which will: Create a…

---

## [New OpenSource Project on Elastic](https://discuss.elastic.co/t/new-opensource-project-on-elastic/197991)

<div class="topic-metadata">

**Author:** [@AndyS](https://discuss.elastic.co/u/AndyS)\
**Replies:** 2\
**Last updated:** [September 4, 2019, 7:48am UTC](https://discuss.elastic.co/t/new-opensource-project-on-elastic/197991 "2019-09-04T07:48:32Z")

</div>

I wrote an OpenSource project that sits on top of Elastic, am I allowed to mention it here? Project is on GitHub right now, would love to see people use it, give feedback, etc Thanks Andy

---

## [Replace cluster with agent hostname which already indexed 150 GB of data](https://discuss.elastic.co/t/replace-cluster-with-agent-hostname-which-already-indexed-150-gb-of-data/197990)

<div class="topic-metadata">

**Author:** [@yestoprince](https://discuss.elastic.co/u/yestoprince)\
**Replies:** 0\
**Last updated:** [September 4, 2019, 7:13am UTC](https://discuss.elastic.co/t/replace-cluster-with-agent-hostname-which-already-indexed-150-gb-of-data/197990 "2019-09-04T07:13:57Z")

</div>

Can any one help ? What could be the steps to achieve

---

## [Can't delete certain Indicies](https://discuss.elastic.co/t/cant-delete-certain-indicies/197986)

<div class="topic-metadata">

**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\
**Replies:** 0\
**Last updated:** [September 4, 2019, 7:01am UTC](https://discuss.elastic.co/t/cant-delete-certain-indicies/197986 "2019-09-04T07:01:27Z")

</div>

Hello, so we had a crash on our elk cluster while i was on holiday. They rebooted it, and shit went crazy. The services could not bind to certain ports etc. etc. I Fixed all Issues now, but one is left which i just cann…

---

## ["index\_options"="docs" option and its relation with disk space](https://discuss.elastic.co/t/index-options-docs-option-and-its-relation-with-disk-space/197566)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 1\
**Last updated:** [September 4, 2019, 6:37am UTC](https://discuss.elastic.co/t/index-options-docs-option-and-its-relation-with-disk-space/197566 "2019-09-04T06:37:05Z")

</div>

Inside Tuning for Disk Space i have read something about index\_options parameter. For my use case i currently have the default set. I have tried setting this parameter to "docs", which is not supposed to generate term f…

---

## [Difference between enabled and index parameters](https://discuss.elastic.co/t/difference-between-enabled-and-index-parameters/197564)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 1\
**Last updated:** [September 4, 2019, 6:36am UTC](https://discuss.elastic.co/t/difference-between-enabled-and-index-parameters/197564 "2019-09-04T06:36:30Z")

</div>

I wanted to know some differences between the working of enabled and index parameters. Ver: 7.1.1 Case A: "myfield": { "enabled": false, "properties": { "value": { "type": "keyword" }, "ke…

---

## [Calculate duration with ruby code](https://discuss.elastic.co/t/calculate-duration-with-ruby-code/197654)

<div class="topic-metadata">

**Author:** [@Alisa\_Faingold](https://discuss.elastic.co/u/Alisa_Faingold)\
**Replies:** 8\
**Last updated:** [September 4, 2019, 6:04am UTC](https://discuss.elastic.co/t/calculate-duration-with-ruby-code/197654 "2019-09-04T06:04:56Z")

</div>

Hi all, After several attempts to work with the "elapsed" filter to calculate the duration between events, I try to do so using Ruby code. I can't quite figure out how I can get the time of a particular event based on …

---

## [@TimeStamp of logstash](https://discuss.elastic.co/t/timestamp-of-logstash/197980)

<div class="topic-metadata">

**Author:** [@Goom\_Singh](https://discuss.elastic.co/u/Goom_Singh)\
**Replies:** 1\
**Last updated:** [September 4, 2019, 6:02am UTC](https://discuss.elastic.co/t/timestamp-of-logstash/197980 "2019-09-04T06:02:18Z")

</div>

My logstash output @timestamp is showing current date in UTC zone. While my logs are of old date and logs pattern date is 07/Aug/2019:11:23:33.024.Why both are not coming same.While i have used date filter date { match…

---

## [Two different log files at different location](https://discuss.elastic.co/t/two-different-log-files-at-different-location/197456)

<div class="topic-metadata">

**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\
**Replies:** 2\
**Last updated:** [September 4, 2019, 5:08am UTC](https://discuss.elastic.co/t/two-different-log-files-at-different-location/197456 "2019-09-04T05:08:04Z")

</div>

Hello Techies, Please help me since i am new to ELK stack. I have two kinds of log files with different names on the different folders. I am trying to Pull the data to Logstash and providing two Grok filters match for …

---

## [Logstash output index names are coming out incorrectly: %{\[@metadata\]\[beat\]}-%{\[@metadata\]\[version\]}-%{+YYYY.MM.dd}](https://discuss.elastic.co/t/logstash-output-index-names-are-coming-out-incorrectly-metadata-beat-metadata-version-yyyy-mm-dd/197974)

<div class="topic-metadata">

**Author:** [@bpnet](https://discuss.elastic.co/u/bpnet)\
**Replies:** 0\
**Last updated:** [September 4, 2019, 4:31am UTC](https://discuss.elastic.co/t/logstash-output-index-names-are-coming-out-incorrectly-metadata-beat-metadata-version-yyyy-mm-dd/197974 "2019-09-04T04:31:59Z")

</div>

ELK stack was on version 6.3 prior to upgrading to 6.8 and then 7.2. Just to preface, I'm not very good with using ELK (I took over a previous sysadmin who set this up), so I can't tell whether there's anything wrong wit…

---

## [Fielddata error preventing Authentications tab populating](https://discuss.elastic.co/t/fielddata-error-preventing-authentications-tab-populating/197337)

<div class="topic-metadata">

**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\
**Replies:** 3\
**Last updated:** [September 4, 2019, 3:41am UTC](https://discuss.elastic.co/t/fielddata-error-preventing-authentications-tab-populating/197337 "2019-09-04T03:41:04Z")

</div>

Hi all, I'm using Filebeat 7.3.1 with Elastic Cloud 7.3.0 and the Authentications pane (in SIEM app) is empty (despite being able to view them in Discover / filebeat index. When I inspect the response in the SIEM app I…

---

## [Cannot reconnect to new broker ID from kafka cluster if Leader Kafka fail](https://discuss.elastic.co/t/cannot-reconnect-to-new-broker-id-from-kafka-cluster-if-leader-kafka-fail/196606)

<div class="topic-metadata">

**Author:** [@vidocq](https://discuss.elastic.co/u/vidocq)\
**Replies:** 2\
**Last updated:** [September 4, 2019, 3:09am UTC](https://discuss.elastic.co/t/cannot-reconnect-to-new-broker-id-from-kafka-cluster-if-leader-kafka-fail/196606 "2019-09-04T03:09:18Z")

</div>

Dear everyone! I have a logstash get log from 3 instances apache kafka and zookeeper cluster. When I test turn off the Leader zookeeper from cluster. Logstash still connect to OLD broker ID of OLD Leader, And traffic c…

---

## [Need help logstash stop indexing to elasitc search](https://discuss.elastic.co/t/need-help-logstash-stop-indexing-to-elasitc-search/197964)

<div class="topic-metadata">

**Author:** [@callmejon](https://discuss.elastic.co/u/callmejon)\
**Replies:** 5\
**Last updated:** [September 4, 2019, 3:00am UTC](https://discuss.elastic.co/t/need-help-logstash-stop-indexing-to-elasitc-search/197964 "2019-09-04T03:00:34Z")

</div>

hi we have been using elastic search for call manger CDR record for few yrs now. been working great. its stoped working on 12aug2019 for unknow reason. i see log file stay in the FTP directory not clearning up. and no…

---

## [Must\_not usage](https://discuss.elastic.co/t/must-not-usage/197883)

<div class="topic-metadata">

**Author:** [@dbonnin](https://discuss.elastic.co/u/dbonnin)\
**Replies:** 1\
**Last updated:** [September 4, 2019, 1:54am UTC](https://discuss.elastic.co/t/must-not-usage/197883 "2019-09-04T01:54:29Z")

</div>

I have this query: { "query": { "bool" : { "filter" : { "term" : { "status" : "404" } }, "must\_not":{ "term": {"url": "/server-status?auto="} } } } } I want to retrieve all documents with status = 404, but n…

---

## [Storage full possible to reset data](https://discuss.elastic.co/t/storage-full-possible-to-reset-data/197965)

<div class="topic-metadata">

**Author:** [@Abel\_Chun\_Qhai](https://discuss.elastic.co/u/Abel_Chun_Qhai)\
**Replies:** 0\
**Last updated:** [September 4, 2019, 1:35am UTC](https://discuss.elastic.co/t/storage-full-possible-to-reset-data/197965 "2019-09-04T01:35:14Z")

</div>

Hi, I'm having issue on ElasticSearch storage. My total index store size was 140mb, I had used almost 48GB, left 1GB. Used 47GB/48GB on my index. I had 28k rows. How can I free up the size with 28k row updated informat…

---

## [Question on Compile Elasticsearch into a JAR like how it was done in the Maven repository](https://discuss.elastic.co/t/question-on-compile-elasticsearch-into-a-jar-like-how-it-was-done-in-the-maven-repository/196439)

<div class="topic-metadata">

**Author:** [@Extended\_Range](https://discuss.elastic.co/u/Extended_Range)\
**Replies:** 3\
**Last updated:** [September 4, 2019, 1:04am UTC](https://discuss.elastic.co/t/question-on-compile-elasticsearch-into-a-jar-like-how-it-was-done-in-the-maven-repository/196439 "2019-09-04T01:04:23Z")

</div>

Greetings there I have a Maven project where I have utilized a lot of functionalities from Elasticsearch. More specifically, it was imported in this way: \<dependency\> \<groupId\>org.elasticsearch\</gro…

---

## [\[Resolved\]\[ES7.0.1\]\[WARN \]\[o.e.d.FileBasedSeedHostsProvider\] \[node-1\] expected, but did not find, a dynamic hosts list at](https://discuss.elastic.co/t/resolved-es7-0-1-warn-o-e-d-filebasedseedhostsprovider-node-1-expected-but-did-not-find-a-dynamic-hosts-list-at/197747)

<div class="topic-metadata">

**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\
**Replies:** 2\
**Last updated:** [September 4, 2019, 12:42am UTC](https://discuss.elastic.co/t/resolved-es7-0-1-warn-o-e-d-filebasedseedhostsprovider-node-1-expected-but-did-not-find-a-dynamic-hosts-list-at/197747 "2019-09-04T00:42:05Z")

</div>

Hi team, When I starting elasticsearch7.0.1 today, I got below warning, what does it mean and how to correct it? I can't find file unicast\_hosts.txt in the directory the waning message gives me. \[2019-09-03T09:42:22,…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1919)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1921)
