# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1964

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1965

---

## [You cannot use the Grok Debugger because license information is not available at this time](https://discuss.elastic.co/t/you-cannot-use-the-grok-debugger-because-license-information-is-not-available-at-this-time/193146)

<div class="topic-metadata">

**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 6:28pm UTC](https://discuss.elastic.co/t/you-cannot-use-the-grok-debugger-because-license-information-is-not-available-at-this-time/193146 "2019-08-12T18:28:23Z")

</div>

Getting this error when I try and test some Grok/regex patterns. It's intermittent; sometimes it throws, sometimes not. Is this truly a license issue, or is something else at work?

---

## [Logstash Persistent Variables](https://discuss.elastic.co/t/logstash-persistent-variables/194853)

<div class="topic-metadata">

**Author:** [@sho1](https://discuss.elastic.co/u/sho1)\
**Replies:** 9\
**Last updated:** [August 12, 2019, 6:07pm UTC](https://discuss.elastic.co/t/logstash-persistent-variables/194853 "2019-08-12T18:07:16Z")

</div>

I wanted to create a persistent boolean that I can change whenever a certain message appears. Based on this boolean I would change my output{ elastic search{ index file reference}}. E.g. log GET log dog Log PUT log …

---

## [How is the anonymous user of elastic used in kibana?](https://discuss.elastic.co/t/how-is-the-anonymous-user-of-elastic-used-in-kibana/193174)

<div class="topic-metadata">

**Author:** [@KIKON](https://discuss.elastic.co/u/KIKON)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 5:53pm UTC](https://discuss.elastic.co/t/how-is-the-anonymous-user-of-elastic-used-in-kibana/193174 "2019-08-12T17:53:07Z")

</div>

I created a anonymous user in elastic. If I request with curl a dashboard an Add -H 'Authorization: Basic', curl will return me the Dashboard's code. OK, I want link the dasboard in other application, I don't want the us…

---

## [Streamed Logs not loaded into Kibana](https://discuss.elastic.co/t/streamed-logs-not-loaded-into-kibana/194052)

<div class="topic-metadata">

**Author:** [@ben.sharp](https://discuss.elastic.co/u/ben.sharp)\
**Replies:** 15\
**Last updated:** [August 12, 2019, 5:29pm UTC](https://discuss.elastic.co/t/streamed-logs-not-loaded-into-kibana/194052 "2019-08-12T17:29:56Z")

</div>

Hi there, I am attempting to stream logs from AWS Lambda into Elasticsearch/Kibana. I am doing so via a POST to the Elasticsearch endpoint, + the index and document type (e.g. POST https://example-es-domain.com/alblogs…

---

## [Dynamic message addition in kibana](https://discuss.elastic.co/t/dynamic-message-addition-in-kibana/193261)

<div class="topic-metadata">

**Author:** [@Harshavardhan\_Reddy](https://discuss.elastic.co/u/Harshavardhan_Reddy)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 5:44pm UTC](https://discuss.elastic.co/t/dynamic-message-addition-in-kibana/193261 "2019-08-12T17:44:17Z")

</div>

my index name : info , having some kind of schema i applied by help of grok . timestamp,log level,class,message (this is schema of the index of info) so in kibana visualization i used table type , it retrieved timestam…

---

## [Boost relevance by numeric field (the greater the value, more relevant it is)](https://discuss.elastic.co/t/boost-relevance-by-numeric-field-the-greater-the-value-more-relevant-it-is/194896)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 5:42pm UTC](https://discuss.elastic.co/t/boost-relevance-by-numeric-field-the-greater-the-value-more-relevant-it-is/194896 "2019-08-12T17:42:55Z")

</div>

Hello I need to include a "should" clause to try to boost the relevance of a query by a numeric field. The greater the field value is, more relevant the document should be. I'm not sure how to approach this. At first I…

---

## [Return only 1 result for each term queried](https://discuss.elastic.co/t/return-only-1-result-for-each-term-queried/194851)

<div class="topic-metadata">

**Author:** [@mrncgirc](https://discuss.elastic.co/u/mrncgirc)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 5:42pm UTC](https://discuss.elastic.co/t/return-only-1-result-for-each-term-queried/194851 "2019-08-12T17:42:42Z")

</div>

Hi, I am having an es database of products (tires and rims) in my ecommerce solution. All my tires are marked with a quality such as good, great, best. The reason why tires are marked with this term is to bundle rims wi…

---

## [Logstash invalid byte sequence in UTF-8 jdbc input](https://discuss.elastic.co/t/logstash-invalid-byte-sequence-in-utf-8-jdbc-input/194876)

<div class="topic-metadata">

**Author:** [@nick36](https://discuss.elastic.co/u/nick36)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 5:30pm UTC](https://discuss.elastic.co/t/logstash-invalid-byte-sequence-in-utf-8-jdbc-input/194876 "2019-08-12T17:30:50Z")

</div>

Hi, I have a problem with an error invalid byte sequence in UTF-8. Logstash 7.3.0. conf below: input{ jdbc{ jdbc\_driver\_library =\> "C:\\sqljdbc42.jar" jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServerDriv…

---

## [Could not send logs to a UDP server (AccessControlException)](https://discuss.elastic.co/t/could-not-send-logs-to-a-udp-server-accesscontrolexception/194881)

<div class="topic-metadata">

**Author:** [@jazz](https://discuss.elastic.co/u/jazz)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 5:25pm UTC](https://discuss.elastic.co/t/could-not-send-logs-to-a-udp-server-accesscontrolexception/194881 "2019-08-12T17:25:18Z")

</div>

I'm trying to configure Elasticsearch to output logs to an UDP server, but it fails with the AccessControlException. Here is the log: main ERROR An exception occurred processing Appender logstash java.security.AccessCon…

---

## [I'm not seeing any geoip data from my zeek logs in my SIEM map](https://discuss.elastic.co/t/im-not-seeing-any-geoip-data-from-my-zeek-logs-in-my-siem-map/194677)

<div class="topic-metadata">

**Author:** [@dpangallo](https://discuss.elastic.co/u/dpangallo)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 5:09pm UTC](https://discuss.elastic.co/t/im-not-seeing-any-geoip-data-from-my-zeek-logs-in-my-siem-map/194677 "2019-08-12T17:09:08Z")

</div>

I'm using Filebeats 7.3.0 to ingest Zeek network logs into Elasticsearch 7.3.0, but I'm not seeing any geoip fields created in my indexes. The Zeek ingest module automatically created pipelines for each of the different…

---

## [Grok Debugger Link grayed out](https://discuss.elastic.co/t/grok-debugger-link-grayed-out/193119)

<div class="topic-metadata">

**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 5:05pm UTC](https://discuss.elastic.co/t/grok-debugger-link-grayed-out/193119 "2019-08-12T17:05:40Z")

</div>

In the Dev Tools screen, the Grok Debugger link is grayed out. Yesterday I saw some licensing and other errors momentarily flash across the screen. Could this be part of the issue?

---

## [Firehose input with LogStash? Some confusion](https://discuss.elastic.co/t/firehose-input-with-logstash-some-confusion/194891)

<div class="topic-metadata">

**Author:** [@Neje](https://discuss.elastic.co/u/Neje)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 4:53pm UTC](https://discuss.elastic.co/t/firehose-input-with-logstash-some-confusion/194891 "2019-08-12T16:53:46Z")

</div>

All, I'm a little confused and looking for clarification about the Logstash Kinesis input plug-in. As I read it, and from some cursory discussion here and other places on the web, it appears that it is possible to send…

---

## [Discover: internal server error](https://discuss.elastic.co/t/discover-internal-server-error/193661)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 15\
**Last updated:** [August 12, 2019, 4:24pm UTC](https://discuss.elastic.co/t/discover-internal-server-error/193661 "2019-08-12T16:24:47Z")

</div>

Hi, when i do a query on 'Discover' tab of kibana, i get a following error: Discover: Internal Server Error Less Info OK SearchError: Internal Server Error at http://my-elk:5601/bundles/kibana.bundle.js:2:520531 …

---

## [Logstash - undefined method 'to\_msgpack' for 0.2e2:BigDecimal](https://discuss.elastic.co/t/logstash-undefined-method-to-msgpack-for-0-2e2-bigdecimal/194887)

<div class="topic-metadata">

**Author:** [@dhammond22222](https://discuss.elastic.co/u/dhammond22222)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 4:15pm UTC](https://discuss.elastic.co/t/logstash-undefined-method-to-msgpack-for-0-2e2-bigdecimal/194887 "2019-08-12T16:15:53Z")

</div>

Hey all, Recently have been doing some JSON parsing of messages and it appears that every once in awhile, we come across a message that just breaks logstash and crashes it with a fatal error. I am using the s3-sns-sqs …

---

## [\[6.8.2\] Unusual Server Load](https://discuss.elastic.co/t/6-8-2-unusual-server-load/194153)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 6\
**Last updated:** [August 12, 2019, 4:14pm UTC](https://discuss.elastic.co/t/6-8-2-unusual-server-load/194153 "2019-08-12T16:14:56Z")

</div>

Hi, I'm having trouble with dealing an odd pattern of load distribution on one of our clusters. I inadvertently posted in the wrong forum. Link is here: FYI we have 18 data nodes, 1250 shards and a limit of 3 index s…

---

## [FScrawler - Duplicate Files](https://discuss.elastic.co/t/fscrawler-duplicate-files/194322)

<div class="topic-metadata">

**Author:** [@Bowriverstudio](https://discuss.elastic.co/u/Bowriverstudio)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 4:03pm UTC](https://discuss.elastic.co/t/fscrawler-duplicate-files/194322 "2019-08-12T16:03:14Z")

</div>

Hello All, I am a newbie to elastic search. I am interested in using FScrawler to index all my files, then Elasticsearch find duplicates. I'm thinking of using the md5 function to hash all the files: https://fscrawler…

---

## [Synonym analyzer issue in elastic search](https://discuss.elastic.co/t/synonym-analyzer-issue-in-elastic-search/194880)

<div class="topic-metadata">

**Author:** [@Harry\_US11](https://discuss.elastic.co/u/Harry_US11)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 3:52pm UTC](https://discuss.elastic.co/t/synonym-analyzer-issue-in-elastic-search/194880 "2019-08-12T15:52:28Z")

</div>

I have multiple products in elastic index with width as like 10", 10 inch, 10 inches. While searching for 10" laptop, search query was providing me all results with 10" but including 10 as well (as i am using tokenizer a…

---

## [Why Elasticsearch still complains about bootstrap checks failed](https://discuss.elastic.co/t/why-elasticsearch-still-complains-about-bootstrap-checks-failed/194690)

<div class="topic-metadata">

**Author:** [@hobby](https://discuss.elastic.co/u/hobby)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 3:39pm UTC](https://discuss.elastic.co/t/why-elasticsearch-still-complains-about-bootstrap-checks-failed/194690 "2019-08-12T15:39:11Z")

</div>

Installed ES 7.3.0 on Ubuntu 18.04. Was able to start it in development mode. Now I want to connect to ES remotely from another machine, so I changed the configuration in elasticsearch.yml and tried to start it in produc…

---

## [Terms Aggregation excluding last vowels using Spanish analyze - Elasticsearch 6.4](https://discuss.elastic.co/t/terms-aggregation-excluding-last-vowels-using-spanish-analyze-elasticsearch-6-4/194136)

<div class="topic-metadata">

**Author:** [@hcanales](https://discuss.elastic.co/u/hcanales)\
**Replies:** 4\
**Last updated:** [August 12, 2019, 3:31pm UTC](https://discuss.elastic.co/t/terms-aggregation-excluding-last-vowels-using-spanish-analyze-elasticsearch-6-4/194136 "2019-08-12T15:31:20Z")

</div>

I am trying to get keywords from a bunch of tweets in Spanish language. The thing is that when I get the results the last vowel in most words in the response is removed. Any idea of why is this happening? Here is the qu…

---

## [The CPU is not scaling with high search load in Elasticsearch7.3.0](https://discuss.elastic.co/t/the-cpu-is-not-scaling-with-high-search-load-in-elasticsearch7-3-0/194873)

<div class="topic-metadata">

**Author:** [@suvarna](https://discuss.elastic.co/u/suvarna)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 3:27pm UTC](https://discuss.elastic.co/t/the-cpu-is-not-scaling-with-high-search-load-in-elasticsearch7-3-0/194873 "2019-08-12T15:27:22Z")

</div>

Hi We have numa enabled server with 2 sockets, each socket with 28 cores and its one node cluster with 10 indies , 5 shards each. Under the same workload(with high search operation load): Scenario 1 when we run ES7.3…

---

## [Kibana fails to start on new environment](https://discuss.elastic.co/t/kibana-fails-to-start-on-new-environment/194841)

<div class="topic-metadata">

**Author:** [@mkajdos](https://discuss.elastic.co/u/mkajdos)\
**Replies:** 3\
**Last updated:** [August 12, 2019, 3:24pm UTC](https://discuss.elastic.co/t/kibana-fails-to-start-on-new-environment/194841 "2019-08-12T15:24:53Z")

</div>

I have Elasticsearch 7.2.0 downloaded, installed, and running with no configuration changes after download. The database of Elastic search is empty - no data added I have Kibana 7.3.0 dowloaded, installed with no confi…

---

## [TypeError: can't convert Hash into String](https://discuss.elastic.co/t/typeerror-cant-convert-hash-into-string/194869)

<div class="topic-metadata">

**Author:** [@YanivT](https://discuss.elastic.co/u/YanivT)\
**Replies:** 5\
**Last updated:** [August 12, 2019, 3:17pm UTC](https://discuss.elastic.co/t/typeerror-cant-convert-hash-into-string/194869 "2019-08-12T15:17:40Z")

</div>

\[2019-08-12T10:57:09,072\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>#\<TypeError: can't convert Hash into String\>, :backtrace=\>\["org/jruby/RubyString.java:4462:in include?'", "(eval):6774:ini…

---

## [Field formatter: add link of discover to the field](https://discuss.elastic.co/t/field-formatter-add-link-of-discover-to-the-field/193485)

<div class="topic-metadata">

**Author:** [@Kwiskas](https://discuss.elastic.co/u/Kwiskas)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 3:01pm UTC](https://discuss.elastic.co/t/field-formatter-add-link-of-discover-to-the-field/193485 "2019-08-12T15:01:02Z")

</div>

Hello there I am trying to do the following: On my visualise item i have created a data table where i split rows by buckets to list my applications with errors on it. Its like: application1 200 application2 15 app…

---

## [Elastic Search: Machine learning based on the search results data](https://discuss.elastic.co/t/elastic-search-machine-learning-based-on-the-search-results-data/194868)

<div class="topic-metadata">

**Author:** [@parthiban\_Manickam](https://discuss.elastic.co/u/parthiban_Manickam)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 2:56pm UTC](https://discuss.elastic.co/t/elastic-search-machine-learning-based-on-the-search-results-data/194868 "2019-08-12T14:56:50Z")

</div>

I have a usecase of city Locations data, where a user searches for Lon, Many results would turn up for example,. London Ontorio, London Greater London, London Ohio, Londres, but based the search result chosen frequency L…

---

## [Elasticsearch indexes](https://discuss.elastic.co/t/elasticsearch-indexes/194856)

<div class="topic-metadata">

**Author:** [@sirichandana](https://discuss.elastic.co/u/sirichandana)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 2:44pm UTC](https://discuss.elastic.co/t/elasticsearch-indexes/194856 "2019-08-12T14:44:26Z")

</div>

Hi, how can we combine two indexes under same elastic search cluster?

---

## [How to create a dynamic property such that we can change the value of the property without starting the server](https://discuss.elastic.co/t/how-to-create-a-dynamic-property-such-that-we-can-change-the-value-of-the-property-without-starting-the-server/194831)

<div class="topic-metadata">

**Author:** [@Arun1709](https://discuss.elastic.co/u/Arun1709)\
**Replies:** 4\
**Last updated:** [August 12, 2019, 2:09pm UTC](https://discuss.elastic.co/t/how-to-create-a-dynamic-property-such-that-we-can-change-the-value-of-the-property-without-starting-the-server/194831 "2019-08-12T14:09:45Z")

</div>

Can any one help me in marking a property as a dynamic so that we can change the value without re starting the server . I have heard about the transient block. But how do I get my applications property under the transien…

---

## [Extend file output plugin](https://discuss.elastic.co/t/extend-file-output-plugin/194861)

<div class="topic-metadata">

**Author:** [@Nitin\_Gupta3](https://discuss.elastic.co/u/Nitin_Gupta3)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 2:24pm UTC](https://discuss.elastic.co/t/extend-file-output-plugin/194861 "2019-08-12T14:24:00Z")

</div>

Hi, I want to customise file output plugin such that it sorts the chunks according to a field before writing them. I'm looking for extending the existing file plugin rather than duplicating its code, but facing issues i…

---

## ["no results found" in Kibana Dashboard with filebeat & elastic search](https://discuss.elastic.co/t/no-results-found-in-kibana-dashboard-with-filebeat-elastic-search/192714)

<div class="topic-metadata">

**Author:** [@anarchipur](https://discuss.elastic.co/u/anarchipur)\
**Replies:** 6\
**Last updated:** [August 12, 2019, 1:57pm UTC](https://discuss.elastic.co/t/no-results-found-in-kibana-dashboard-with-filebeat-elastic-search/192714 "2019-08-12T13:57:13Z")

</div>

Hi I am absolutely new to elastic stack. I just installed and configured filebeat, elastic search and Kibana for Apache logging. I went through the steps as described in "Getting Started with Filebeat" and reached "Step…

---

## [Filebeat injest does not show up in logstash logs](https://discuss.elastic.co/t/filebeat-injest-does-not-show-up-in-logstash-logs/194849)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 1:33pm UTC](https://discuss.elastic.co/t/filebeat-injest-does-not-show-up-in-logstash-logs/194849 "2019-08-12T13:33:07Z")

</div>

Hello, I am injesting some java logs via filebeat. I see the logs being sent to logstash however on the stdout filter I don't see anything being processed by the logstash. But logstash does not throw any errors either. …

---

## [While overriding the @timestamp with log date , i am getting the time variation](https://discuss.elastic.co/t/while-overriding-the-timestamp-with-log-date-i-am-getting-the-time-variation/194753)

<div class="topic-metadata">

**Author:** [@satyam2593](https://discuss.elastic.co/u/satyam2593)\
**Replies:** 4\
**Last updated:** [August 12, 2019, 1:26pm UTC](https://discuss.elastic.co/t/while-overriding-the-timestamp-with-log-date-i-am-getting-the-time-variation/194753 "2019-08-12T13:26:38Z")

</div>

Why i am getting the time variation while overriding the @timestamp with logdate My input: INFO | jvm 1 | 2019/05/06 23:39:05.254 | FileName:xxxx\_20190506 File Size:4096 File Collection time:2019-05-06 23:39:05.181 …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1963)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1965)
