# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1963

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1964

---

## [JSON data split up (\_jsonparseerror) in logstash-7.2.0-1. Works fine in logstash-7.1.1-1](https://discuss.elastic.co/t/json-data-split-up-jsonparseerror-in-logstash-7-2-0-1-works-fine-in-logstash-7-1-1-1/190624)

<div class="topic-metadata">

**Author:** [@sjaganna](https://discuss.elastic.co/u/sjaganna)\
**Replies:** 5\
**Last updated:** [August 13, 2019, 7:22am UTC](https://discuss.elastic.co/t/json-data-split-up-jsonparseerror-in-logstash-7-2-0-1-works-fine-in-logstash-7-1-1-1/190624 "2019-08-13T07:22:33Z")

</div>

Hello! I've been in the midst of working with the ELK stack for the first time. I'm currently sending data from Metricbeat -\> Logstash -\> an external script (output sent over TCP) -\> Logstash -\> Elasticsearch. However, …

---

## [Logstash installation on AWS EC2 instance](https://discuss.elastic.co/t/logstash-installation-on-aws-ec2-instance/194961)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [August 13, 2019, 7:13am UTC](https://discuss.elastic.co/t/logstash-installation-on-aws-ec2-instance/194961 "2019-08-13T07:13:15Z")

</div>

Would like to know which type of AWS EC2 instance is suitable for installing the logstash.

---

## [Receiving java.lang.IllegalArgumentException: Failed to derive xcontent while using @Query annotiation](https://discuss.elastic.co/t/receiving-java-lang-illegalargumentexception-failed-to-derive-xcontent-while-using-query-annotiation/194965)

<div class="topic-metadata">

**Author:** [@kbsivacse](https://discuss.elastic.co/u/kbsivacse)\
**Replies:** 1\
**Last updated:** [August 13, 2019, 7:12am UTC](https://discuss.elastic.co/t/receiving-java-lang-illegalargumentexception-failed-to-derive-xcontent-while-using-query-annotiation/194965 "2019-08-13T07:12:00Z")

</div>

I'm using below library for my spring-boot app and I'm getting below error while running the query in my Spring repository, @Query(""\_source": {"includes": \["Id","appOwner","empId","status","salary","indicator","created…

---

## [Would like to know which type of AWS EC2 instance is suitable for elasticsearch data nodes](https://discuss.elastic.co/t/would-like-to-know-which-type-of-aws-ec2-instance-is-suitable-for-elasticsearch-data-nodes/194962)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 0\
**Last updated:** [August 13, 2019, 6:26am UTC](https://discuss.elastic.co/t/would-like-to-know-which-type-of-aws-ec2-instance-is-suitable-for-elasticsearch-data-nodes/194962 "2019-08-13T06:26:04Z")

</div>

Would like to know which type of AWS EC2 instance is suitable for installing the elasticsearch data node. I know that i3 instances are suitable as they support high IOPS with instance storage (SSD), in our case data volu…

---

## [Elasticsearch duplicates increase disk size](https://discuss.elastic.co/t/elasticsearch-duplicates-increase-disk-size/194842)

<div class="topic-metadata">

**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Replies:** 2\
**Last updated:** [August 13, 2019, 6:16am UTC](https://discuss.elastic.co/t/elasticsearch-duplicates-increase-disk-size/194842 "2019-08-13T06:16:41Z")

</div>

Hello. I have indexed to the elasticsearch 7 milion + documents using the collisions handling by updating the \_version value. What I have expected was that the "\_version" will be incremented every time the document wit…

---

## [Json\_errors in kibana 5.5](https://discuss.elastic.co/t/json-errors-in-kibana-5-5/193812)

<div class="topic-metadata">

**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\
**Replies:** 7\
**Last updated:** [August 13, 2019, 5:52am UTC](https://discuss.elastic.co/t/json-errors-in-kibana-5-5/193812 "2019-08-13T05:52:21Z")

</div>

Hi, I have observed few logs are not updating properly and its showing a new fleid json\_error in document details . This never happend before and i have no clue why? whats the reason behind it. Please help me solve i…

---

## [Unable to update index-pattern](https://discuss.elastic.co/t/unable-to-update-index-pattern/194728)

<div class="topic-metadata">

**Author:** [@kakano.1](https://discuss.elastic.co/u/kakano.1)\
**Replies:** 3\
**Last updated:** [August 13, 2019, 1:44am UTC](https://discuss.elastic.co/t/unable-to-update-index-pattern/194728 "2019-08-13T01:44:35Z")

</div>

es: v7.2 kibana: v7.2

---

## [Elaticsearch script, is it possible to pass in field names as paramter?](https://discuss.elastic.co/t/elaticsearch-script-is-it-possible-to-pass-in-field-names-as-paramter/194922)

<div class="topic-metadata">

**Author:** [@qiang\_gui](https://discuss.elastic.co/u/qiang_gui)\
**Replies:** 1\
**Last updated:** [August 13, 2019, 3:19am UTC](https://discuss.elastic.co/t/elaticsearch-script-is-it-possible-to-pass-in-field-names-as-paramter/194922 "2019-08-13T03:19:19Z")

</div>

Hi, We had requirement that based on doc field and doc value, we want to hide/show return field for other column. for example, doc 1 name: mac, category : hardware, active=true, manager=Sam doc 2: name: windows, ca…

---

## [\_dateparseerror](https://discuss.elastic.co/t/dateparseerror/194889)

<div class="topic-metadata">

**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\
**Replies:** 5\
**Last updated:** [August 13, 2019, 3:06am UTC](https://discuss.elastic.co/t/dateparseerror/194889 "2019-08-13T03:06:48Z")

</div>

How to parse 2019-08-12T03:09:13.142635Z ?

---

## [List installed plugins from within plugin](https://discuss.elastic.co/t/list-installed-plugins-from-within-plugin/194933)

<div class="topic-metadata">

**Author:** [@jiboxiv](https://discuss.elastic.co/u/jiboxiv)\
**Replies:** 1\
**Last updated:** [August 13, 2019, 3:06am UTC](https://discuss.elastic.co/t/list-installed-plugins-from-within-plugin/194933 "2019-08-13T03:06:15Z")

</div>

Hi all, I am currently creating a plugin, but need to know if there is another plugin installed before indexing some documents. I know there is the \_cat/plugins API, but is there any way to get the list of currently in…

---

## [Find consecutive field values in sorted collection of documents](https://discuss.elastic.co/t/find-consecutive-field-values-in-sorted-collection-of-documents/194943)

<div class="topic-metadata">

**Author:** [@zqd](https://discuss.elastic.co/u/zqd)\
**Replies:** 0\
**Last updated:** [August 13, 2019, 2:54am UTC](https://discuss.elastic.co/t/find-consecutive-field-values-in-sorted-collection-of-documents/194943 "2019-08-13T02:54:59Z")

</div>

I have documents such as the following that I can sorted by id (sequence number) or dateRecorded. Was sold is boolean. Using elasticsearch aggregations, how do I compute the longest consecutive wasSold = true or wasSold…

---

## [Running elasticsearch in Eclipse](https://discuss.elastic.co/t/running-elasticsearch-in-eclipse/194942)

<div class="topic-metadata">

**Author:** [@keithag](https://discuss.elastic.co/u/keithag)\
**Replies:** 0\
**Last updated:** [August 13, 2019, 2:36am UTC](https://discuss.elastic.co/t/running-elasticsearch-in-eclipse/194942 "2019-08-13T02:36:50Z")

</div>

Hello, I'm trying to build Elasticsearch and get it to run in Eclipse. I'm following the directions in the CONFIGURATION.MD file. This is my setup: macOS Mojave java 12.0.2 OpenJDK Eclipse Photon 4.9.0 Elasticsearch …

---

## [Unable to perform offline upgrade of logstash plugins 2](https://discuss.elastic.co/t/unable-to-perform-offline-upgrade-of-logstash-plugins-2/194938)

<div class="topic-metadata">

**Author:** [@johncollaros](https://discuss.elastic.co/u/johncollaros)\
**Replies:** 0\
**Last updated:** [August 13, 2019, 12:43am UTC](https://discuss.elastic.co/t/unable-to-perform-offline-upgrade-of-logstash-plugins-2/194938 "2019-08-13T00:43:42Z")

</div>

This topic was closed, but the issue still exists. I have only been able to get offline-install to work once, when a minor upgrade of a logstash-input-beats was done. Where it is a big jump and lots of dependencies i…

---

## [Use api to get and set the minimum number of masters](https://discuss.elastic.co/t/use-api-to-get-and-set-the-minimum-number-of-masters/194927)

<div class="topic-metadata">

**Author:** [@lwwalker](https://discuss.elastic.co/u/lwwalker)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 10:40pm UTC](https://discuss.elastic.co/t/use-api-to-get-and-set-the-minimum-number-of-masters/194927 "2019-08-12T22:40:14Z")

</div>

discovery.zen.minimum\_master\_nodes is the config file setting, but I can't find how to get the current value, or set a new value via the API.

---

## [Unable to connect to hosted elastic cloud aws endpoint for 1-2 hours yesterday](https://discuss.elastic.co/t/unable-to-connect-to-hosted-elastic-cloud-aws-endpoint-for-1-2-hours-yesterday/194914)

<div class="topic-metadata">

**Author:** [@jfall](https://discuss.elastic.co/u/jfall)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 10:34pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-hosted-elastic-cloud-aws-endpoint-for-1-2-hours-yesterday/194914 "2019-08-12T22:34:23Z")

</div>

I have a hosted elastic cloud AWS deployment setup using the aws.data.highio.i3 tier with 2-zone fault tolerance in aws us east. My end point is https://xxxxxxxxxxx.us-east-1.aws.found.io:9243 Our web servers reverse p…

---

## [Import CSV file to Logstash on windows10](https://discuss.elastic.co/t/import-csv-file-to-logstash-on-windows10/194770)

<div class="topic-metadata">

**Author:** [@aahtysh2525](https://discuss.elastic.co/u/aahtysh2525)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 10:29pm UTC](https://discuss.elastic.co/t/import-csv-file-to-logstash-on-windows10/194770 "2019-08-12T22:29:27Z")

</div>

Hi, I am trying to import a CSV file to elasticsearch using logstash, but with no success. Windows 10 Logstash 7.3.0/Elasticsearch 7.3.0/Kibana 7.3.0 // Config File is as below input { file { path =\> \["E:\\Softwa…

---

## [Canvas time filter \< 24 hours](https://discuss.elastic.co/t/canvas-time-filter-24-hours/194643)

<div class="topic-metadata">

**Author:** [@cbmurphy87](https://discuss.elastic.co/u/cbmurphy87)\
**Replies:** 3\
**Last updated:** [August 12, 2019, 10:04pm UTC](https://discuss.elastic.co/t/canvas-time-filter-24-hours/194643 "2019-08-12T22:04:27Z")

</div>

Is it possible to configure the time filter element to filter on a shorter period than 24 hours? Say, for example, 1 minute, or 15 minutes?

---

## [Geo search returns no results in es6.7](https://discuss.elastic.co/t/geo-search-returns-no-results-in-es6-7/194769)

<div class="topic-metadata">

**Author:** [@nickoneill](https://discuss.elastic.co/u/nickoneill)\
**Replies:** 4\
**Last updated:** [August 12, 2019, 10:00pm UTC](https://discuss.elastic.co/t/geo-search-returns-no-results-in-es6-7/194769 "2019-08-12T22:00:05Z")

</div>

I'm mapping congressional districts in elasticsearch but my efforts are returning no results when trying to query by geo shape. Here's some relevant data: The mapping: "mappings":{ "house":{ "properties":{ "stat…

---

## [Setting up a map visualization with a custom WMS server](https://discuss.elastic.co/t/setting-up-a-map-visualization-with-a-custom-wms-server/194904)

<div class="topic-metadata">

**Author:** [@Lmaheo](https://discuss.elastic.co/u/Lmaheo)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 9:54pm UTC](https://discuss.elastic.co/t/setting-up-a-map-visualization-with-a-custom-wms-server/194904 "2019-08-12T21:54:31Z")

</div>

I have been trying to setup a Coordinate Map visualization on Kibana OSS with a custom WMS server. The problem is that the settings in kibana.yml only allow to use a fully qualified tile URL with placeholders in {x} {y}…

---

## [Kubernetes element(s) not showing in available fields](https://discuss.elastic.co/t/kubernetes-element-s-not-showing-in-available-fields/193160)

<div class="topic-metadata">

**Author:** [@warnerrj79](https://discuss.elastic.co/u/warnerrj79)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 9:52pm UTC](https://discuss.elastic.co/t/kubernetes-element-s-not-showing-in-available-fields/193160 "2019-08-12T21:52:47Z")

</div>

Hi all I am currently attempting to create saved search in Kibana - based upon Kubernetes logs. i am trying to display the "kubernetes.node.cpu.usage.core.ns" value in the Available Fields section - however it is not a…

---

## [Issue with KV Filter when value ends with escape character](https://discuss.elastic.co/t/issue-with-kv-filter-when-value-ends-with-escape-character/190618)

<div class="topic-metadata">

**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\
**Replies:** 4\
**Last updated:** [August 12, 2019, 9:39pm UTC](https://discuss.elastic.co/t/issue-with-kv-filter-when-value-ends-with-escape-character/190618 "2019-08-12T21:39:18Z")

</div>

I am having an issue parsing some logs, and I would appreciate if someone could assist. I have logs coming in that are primarily handled with a KV Filter. This works fine on about 99% of the messages, but one message ty…

---

## [Logstash enriching data with lookup](https://discuss.elastic.co/t/logstash-enriching-data-with-lookup/194909)

<div class="topic-metadata">

**Author:** [@philippkahr](https://discuss.elastic.co/u/philippkahr)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 8:28pm UTC](https://discuss.elastic.co/t/logstash-enriching-data-with-lookup/194909 "2019-08-12T20:28:31Z")

</div>

Hi guys, I currently struggeling in understanding how this can be done within the elastic stack properly. I take netflow data as an input source in netflow. Specifically, I use elastiflow https://github.com/robcowart/el…

---

## [Performance issues with search](https://discuss.elastic.co/t/performance-issues-with-search/194919)

<div class="topic-metadata">

**Author:** [@B\_K](https://discuss.elastic.co/u/B_K)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 8:26pm UTC](https://discuss.elastic.co/t/performance-issues-with-search/194919 "2019-08-12T20:26:18Z")

</div>

I have a 2.4 ES cluster. Short story is that it's been humming along fine but lately I have an issue. 500 Nodes 100 Shards with 1 replica. Sometimes the query time goes up to 250ms - it's usually around 15ms. Proc…

---

## [Setting timezone on date\_histogram slow down the query](https://discuss.elastic.co/t/setting-timezone-on-date-histogram-slow-down-the-query/194918)

<div class="topic-metadata">

**Author:** [@Bertrand](https://discuss.elastic.co/u/Bertrand)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 8:26pm UTC](https://discuss.elastic.co/t/setting-timezone-on-date-histogram-slow-down-the-query/194918 "2019-08-12T20:26:00Z")

</div>

Hi there, It seems that setting the timezone option to a date\_histogram has a negative effect on the query performance. Suppose the following query: { "size": 0, "aggs": { "2": { "date\_histogram": { …

---

## ["this field is present in your elasticsearch mapping" on \_source field](https://discuss.elastic.co/t/this-field-is-present-in-your-elasticsearch-mapping-on-source-field/190308)

<div class="topic-metadata">

**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\
**Replies:** 5\
**Last updated:** [August 12, 2019, 8:12pm UTC](https://discuss.elastic.co/t/this-field-is-present-in-your-elasticsearch-mapping-on-source-field/190308 "2019-08-12T20:12:46Z")

</div>

Upgraded my ELK stack to 6.8 finally. Beats are on 6.4 still. Zero issues all last week and all this week. Today I noticed one of my filters for one of my beats was experiencing some parsing errors on certain log entr…

---

## [How to Handle Exceptions?](https://discuss.elastic.co/t/how-to-handle-exceptions/194900)

<div class="topic-metadata">

**Author:** [@cd-agutierrez](https://discuss.elastic.co/u/cd-agutierrez)\
**Replies:** 4\
**Last updated:** [August 12, 2019, 7:58pm UTC](https://discuss.elastic.co/t/how-to-handle-exceptions/194900 "2019-08-12T19:58:06Z")

</div>

It seems that if logstash encounters an exception in the elasticsearch output pipeline it will completely halt processing of any further entries. \[2019-08-08T22:14:44,075\]\[WARN \]\[io.netty.channel.DefaultChannelPipeline\]…

---

## [VEGA visualization using Kibana](https://discuss.elastic.co/t/vega-visualization-using-kibana/193892)

<div class="topic-metadata">

**Author:** [@aaditya\_alekar](https://discuss.elastic.co/u/aaditya_alekar)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 7:19pm UTC](https://discuss.elastic.co/t/vega-visualization-using-kibana/193892 "2019-08-12T19:19:12Z")

</div>

2h { $schema: https://vega.github.io/schema/vega/v3.0.json config: { kibana: { type: "map" latitude: 37.0902 longitude: 95.7129 zoom: 4 } } data: \[ { "name": "cities", "values": \[ {"city": "Boston", "lon":…

---

## [3d visualizations and dashboards](https://discuss.elastic.co/t/3d-visualizations-and-dashboards/193983)

<div class="topic-metadata">

**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 7:16pm UTC](https://discuss.elastic.co/t/3d-visualizations-and-dashboards/193983 "2019-08-12T19:16:28Z")

</div>

Hi all I'd be keen to get some 3d visualizations / graphs into my Kibana but on your current 'Known plugins' Kibana page : https://www.elastic.co/guide/en/kibana/current/known-plugins.html I can see only links pointing …

---

## [Pipeline Output Filter not accepting existing fields from an event as parameter](https://discuss.elastic.co/t/pipeline-output-filter-not-accepting-existing-fields-from-an-event-as-parameter/194899)

<div class="topic-metadata">

**Author:** [@perryparktung](https://discuss.elastic.co/u/perryparktung)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 7:14pm UTC](https://discuss.elastic.co/t/pipeline-output-filter-not-accepting-existing-fields-from-an-event-as-parameter/194899 "2019-08-12T19:14:42Z")

</div>

Hi, Im trying out pipeline-to-pipeline connections (https://www.elastic.co/guide/en/logstash/current/pipeline-to-pipeline.html), and apparently the output filter does not recognize existing fields of an event as a param…

---

## [DNS lookup how to drop log filed if not resolved?](https://discuss.elastic.co/t/dns-lookup-how-to-drop-log-filed-if-not-resolved/194878)

<div class="topic-metadata">

**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\
**Replies:** 6\
**Last updated:** [August 12, 2019, 7:02pm UTC](https://discuss.elastic.co/t/dns-lookup-how-to-drop-log-filed-if-not-resolved/194878 "2019-08-12T19:02:02Z")

</div>

Hello, I am running logstash 6.8 I am taking all Src\_Ip addresses and doing a reverse DNS lookup through the DNS plugin in logstash. Logstash YML if \[src\_ip\] { mutate { add\_field =\> {"DNS…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1962)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1964)
