# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1972 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1973 --- ## [Problem getting multiline json document into ES](https://discuss.elastic.co/t/problem-getting-multiline-json-document-into-es/194350)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 5\ **Last updated:** [August 8, 2019, 6:56am UTC](https://discuss.elastic.co/t/problem-getting-multiline-json-document-into-es/194350 "2019-08-08T06:56:04Z")
Hi, i am producing a valid json document from get-aduser username | convertto-json | out-file file.json I am then sending that file to ES using filebeat, however in ES it is ingesting the document, one document per line… --- ## [Adding search bar for my web application](https://discuss.elastic.co/t/adding-search-bar-for-my-web-application/192841)
**Author:** [@saurabhbora](https://discuss.elastic.co/u/saurabhbora)\ **Replies:** 8\ **Last updated:** [August 8, 2019, 6:23am UTC](https://discuss.elastic.co/t/adding-search-bar-for-my-web-application/192841 "2019-08-08T06:23:57Z")
My web application has all the data stored in the MySQL database. I want to develop a search bar using elastic search for retrieving results faster. How should I go about this? --- ## [Get the specific values from arrays elasticsearch](https://discuss.elastic.co/t/get-the-specific-values-from-arrays-elasticsearch/194358)
**Author:** [@elasticpatrick](https://discuss.elastic.co/u/elasticpatrick)\ **Replies:** 0\ **Last updated:** [August 8, 2019, 6:18am UTC](https://discuss.elastic.co/t/get-the-specific-values-from-arrays-elasticsearch/194358 "2019-08-08T06:18:53Z")
Hi, I have a field "user\_names" having list of users names in my "user" index. I want to query through the user\_names field and get only match values from the array and if possible can I get apply aggregation on the user… --- ## [Logstash failing with "ERROR::EMFILE- Too many open files"](https://discuss.elastic.co/t/logstash-failing-with-error-emfile-too-many-open-files/190715)
**Author:** [@Laddu\_ps](https://discuss.elastic.co/u/Laddu_ps)\ **Replies:** 15\ **Last updated:** [August 8, 2019, 5:39am UTC](https://discuss.elastic.co/t/logstash-failing-with-error-emfile-too-many-open-files/190715 "2019-08-08T05:39:31Z")
Hi. I'm having issues running logstash withi large sets of data. I'm trying to push data to Elasticsearch via Logstash Where both the applications are hosted on CENTOS servers. I'm trying to send 1000 files per minute (e… --- ## [Elasticsearch did not respond with license information](https://discuss.elastic.co/t/elasticsearch-did-not-respond-with-license-information/194192)
**Author:** [@Sohan\_J](https://discuss.elastic.co/u/Sohan_J)\ **Replies:** 4\ **Last updated:** [August 8, 2019, 5:26am UTC](https://discuss.elastic.co/t/elasticsearch-did-not-respond-with-license-information/194192 "2019-08-08T05:26:34Z")
My ES yml file: ---------------------------------- Cluster ----------------------------------- Use a descriptive name for your cluster: cluster.name: test-app-cluster ------------------------------------ Node ------… --- ## [How to duplicate every document in an index](https://discuss.elastic.co/t/how-to-duplicate-every-document-in-an-index/194328)
**Author:** [@TeraInferno](https://discuss.elastic.co/u/TeraInferno)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 5:13am UTC](https://discuss.elastic.co/t/how-to-duplicate-every-document-in-an-index/194328 "2019-08-08T05:13:44Z")
Hello. I would like to duplicate every document I have in my index, changing the value of a single field for each new duplicated document. How would I do this? --- ## [NEST issue backporting from v7.x to v5.x](https://discuss.elastic.co/t/nest-issue-backporting-from-v7-x-to-v5-x/193741)
**Author:** [@Wyzak](https://discuss.elastic.co/u/Wyzak)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 5:03am UTC](https://discuss.elastic.co/t/nest-issue-backporting-from-v7-x-to-v5-x/193741 "2019-08-08T05:03:55Z")
Hi all, I'm using the C# NEST client to query an ES server running v5.3.x. I successfully implemented a v7.x NEST client but started running into some unexpected exceptions and was told that I should downgrade to a v5.x… --- ## [Grok an IP address and username](https://discuss.elastic.co/t/grok-an-ip-address-and-username/194325)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 2\ **Last updated:** [August 8, 2019, 2:39am UTC](https://discuss.elastic.co/t/grok-an-ip-address-and-username/194325 "2019-08-08T02:39:01Z")
Hi, I have the following text below that I'm trying to parse just the IP and username. I've tried adding all the text prior to the IP but still nothing. Even if I just put 1.1.1.1 into the Grok Debugger and %{IP} as the … --- ## [Watcher triggerを待たずに検知](https://discuss.elastic.co/t/watcher-trigger/194344)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 0\ **Last updated:** [August 8, 2019, 2:24am UTC](https://discuss.elastic.co/t/watcher-trigger/194344 "2019-08-08T02:24:34Z")
Watcherの定義について教えてください。 ①の定義を②に変更できますでしょうか？ ①ログの監視間隔を5分、条件に合致したインデックス件数が2件以上の場合に発報 Watcher設定値 { "trigger": { "schedule": { "interval": "5m" } } … "condition": { "compare": { "ctx.payload.hits.total": { "gt":… --- ## [Filebeat netflow events per second - losing data?](https://discuss.elastic.co/t/filebeat-netflow-events-per-second-losing-data/194279)
**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 12:16am UTC](https://discuss.elastic.co/t/filebeat-netflow-events-per-second-losing-data/194279 "2019-08-08T00:16:45Z")
Hi there, we are currently trying to use Logstash and Filebeat to process a large netflow stream. We are running filebeat and logstash in docker containers using the official elastic search container images. The server r… --- ## [Logstash plugin offline pack not persisted](https://discuss.elastic.co/t/logstash-plugin-offline-pack-not-persisted/194333)
**Author:** [@jfreeman](https://discuss.elastic.co/u/jfreeman)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 9:48pm UTC](https://discuss.elastic.co/t/logstash-plugin-offline-pack-not-persisted/194333 "2019-08-07T21:48:26Z")
I have created logstash-offline-plugins zip with all the plugins I want. I am able to install this pack using the command bin/logstash-plugin install file:///var/logstash\_offline/logstash-offline-plugins-6.7.0.zip Then… --- ## [Query for specific traits in a household](https://discuss.elastic.co/t/query-for-specific-traits-in-a-household/194332)
**Author:** [@marksparrish](https://discuss.elastic.co/u/marksparrish)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 9:42pm UTC](https://discuss.elastic.co/t/query-for-specific-traits-in-a-household/194332 "2019-08-07T21:42:02Z")
I am trying to retrieve all of the household that have only females in it. My document structure is - name\_first: keyword name\_middle: keyword name\_last: keyword physical\_address\_id: keyword gender: keyword Gender i… --- ## [Kibana Issues](https://discuss.elastic.co/t/kibana-issues/192482)
**Author:** [@pmatreides](https://discuss.elastic.co/u/pmatreides)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 9:35pm UTC](https://discuss.elastic.co/t/kibana-issues/192482 "2019-08-07T21:35:05Z")
I have a new install of ELK on a new server. All versions of 7.2. The browser will not connect to Kibana. The kibana service status is running/active. When I run curl localhost:5601 it returns an error "Kibana server n… --- ## [Showing availability in Kibana](https://discuss.elastic.co/t/showing-availability-in-kibana/194311)
**Author:** [@NewToThis](https://discuss.elastic.co/u/NewToThis)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 9:03pm UTC](https://discuss.elastic.co/t/showing-availability-in-kibana/194311 "2019-08-07T21:03:29Z")
Hey there, I am currently looking for a possibility to track the availability of three machines in Kibana. Short explanation: These machines are chained together and every machine logs a start and a stop event as soon… --- ## [RegEx in Logstash Conf File: loop through/retrieve all matches](https://discuss.elastic.co/t/regex-in-logstash-conf-file-loop-through-retrieve-all-matches/194020)
**Author:** [@dundundundun](https://discuss.elastic.co/u/dundundundun)\ **Replies:** 8\ **Last updated:** [August 7, 2019, 8:48pm UTC](https://discuss.elastic.co/t/regex-in-logstash-conf-file-loop-through-retrieve-all-matches/194020 "2019-08-07T20:48:34Z")
Let's suppose my log messages are as following: GroupName::Cars: mileage=19274 ~ year=2000 GroupName::school: students = 10000 ~ location = USA ~ classes = 50 ~ staff = 75 How can I pattern match both of these l… --- ## [Docker tls problem](https://discuss.elastic.co/t/docker-tls-problem/194321)
**Author:** [@sweb](https://discuss.elastic.co/u/sweb)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 8:24pm UTC](https://discuss.elastic.co/t/docker-tls-problem/194321 "2019-08-07T20:24:08Z")
I have tls that root ca sign by me, With normal http input everything work fine: input { http { port =\> 3389 # ssl =\> true # ssl\_certificate\_authorities =\> \["/opt/certs/ca.pem"\] # ssl\_certificate =\> "… --- ## [Cluster with 3 nodes - do I need kibana on 3 of them?](https://discuss.elastic.co/t/cluster-with-3-nodes-do-i-need-kibana-on-3-of-them/194310)
**Author:** [@manosmustang](https://discuss.elastic.co/u/manosmustang)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 7:41pm UTC](https://discuss.elastic.co/t/cluster-with-3-nodes-do-i-need-kibana-on-3-of-them/194310 "2019-08-07T19:41:21Z")
Hi, I have a cluster with 3 nodes. All three are master and data. I will add two more data nodes later. I need to know if in order to have a fault-tolerant cluster do I need to install kibana at all master nodes? Is it… --- ## [Elasticsearch DSL multi level nesting query not working](https://discuss.elastic.co/t/elasticsearch-dsl-multi-level-nesting-query-not-working/193595)
**Author:** [@prashant\_madaan](https://discuss.elastic.co/u/prashant_madaan)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 7:31pm UTC](https://discuss.elastic.co/t/elasticsearch-dsl-multi-level-nesting-query-not-working/193595 "2019-08-07T19:31:44Z")
Hi , I am trying to write a multi level nested query in Elastic Search DSL. I am running into an issue where it says cannot create query. This is a sample record: { "memory":123.989807, "disks":\[ { "total":5033, … --- ## [Default OR Search- do you override?](https://discuss.elastic.co/t/default-or-search-do-you-override/194057)
**Author:** [@Christie\_Morin](https://discuss.elastic.co/u/Christie_Morin)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 7:08pm UTC](https://discuss.elastic.co/t/default-or-search-do-you-override/194057 "2019-08-07T19:08:27Z")
Elastic Search uses OR by default and other search engines, like Google and MS, use AND for default. Training uses to reverse their logic for ES is challenging. Does anyone override the OR and use AND? I'm not a searc… --- ## [Grok Stops Reading at a Backslash?](https://discuss.elastic.co/t/grok-stops-reading-at-a-backslash/194085)
**Author:** [@jakecramer17](https://discuss.elastic.co/u/jakecramer17)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 6:28pm UTC](https://discuss.elastic.co/t/grok-stops-reading-at-a-backslash/194085 "2019-08-07T18:28:04Z")
This is an extension to a previously solved topic. I have this log here (as it appears in the console) 2019-08-05 08:55:15 - jcramer(Software Programmer) - Successfully updated profile that I've successfully been able… --- ## [Concatenate 2 values to make a geo\_point field](https://discuss.elastic.co/t/concatenate-2-values-to-make-a-geo-point-field/194175)
**Author:** [@Ragnar](https://discuss.elastic.co/u/Ragnar)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 6:42pm UTC](https://discuss.elastic.co/t/concatenate-2-values-to-make-a-geo-point-field/194175 "2019-08-07T18:42:14Z")
I have an index where from an ip field from the data source I have added the filter geoip to logstash that get the data. I got in my index a brand new bunch of field about latitude, longitude, city... but it's not usable… --- ## [Disk space alert from ElasticSearch or Logstash](https://discuss.elastic.co/t/disk-space-alert-from-elasticsearch-or-logstash/194262)
**Author:** [@bharatwaj](https://discuss.elastic.co/u/bharatwaj)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 5:43pm UTC](https://discuss.elastic.co/t/disk-space-alert-from-elasticsearch-or-logstash/194262 "2019-08-07T17:43:45Z")
I need to trigger a mail whenever logstash or elastic server is about to hit 95% of the disk space. Like i would like to trigger mail when the usage is almost 85%. Is this possible. --- ## [\*\*\* SOLVED \*\*\* Netflow module | Error in visualization](https://discuss.elastic.co/t/solved-netflow-module-error-in-visualization/192694)
**Author:** [@thirty2](https://discuss.elastic.co/u/thirty2)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 5:48pm UTC](https://discuss.elastic.co/t/solved-netflow-module-error-in-visualization/192694 "2019-08-07T17:48:06Z")
Hi, i mange to run Netflow module in ELK. I can see new Dashboard in Kibana. But when i click do display on the Dashboard i am getting this error in Kibana: Error in visualization \[esaggs\] \> Request to Elasticsearch … --- ## [Need advices about my stack](https://discuss.elastic.co/t/need-advices-about-my-stack/194296)
**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 5:27pm UTC](https://discuss.elastic.co/t/need-advices-about-my-stack/194296 "2019-08-07T17:27:01Z")
Hello I'm looking for some advices about my elk stack before upgrade to 6.8, then to version 7. I'm in 6.7.1 version, I use ELK to agregate windows logs from differents server (DC, DNS, software logs etc...). Few linux… --- ## [No Metric Aggregations Unavailable](https://discuss.elastic.co/t/no-metric-aggregations-unavailable/194266)
**Author:** [@npan1990](https://discuss.elastic.co/u/npan1990)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 5:18pm UTC](https://discuss.elastic.co/t/no-metric-aggregations-unavailable/194266 "2019-08-07T17:18:00Z")
I am using Kibana 6.8.1 with Elastic Search 6.8.1. I would like to create a serial difference aggregation but it seems that only metric aggregations are available (see figure). All the other aggregations are gray. --- ## [Replica Shard Allocation to Nodes with a Specific Attribute](https://discuss.elastic.co/t/replica-shard-allocation-to-nodes-with-a-specific-attribute/193414)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 3\ **Last updated:** [August 7, 2019, 4:48pm UTC](https://discuss.elastic.co/t/replica-shard-allocation-to-nodes-with-a-specific-attribute/193414 "2019-08-07T16:48:34Z")
I am trying to allocate shard replicas to nodes in a different region than where my primaries live. I'm looking for a way to specify in the index mapping template that replicas must live in a different region. I'm able t… --- ## [Body object contents in "Elasticsearch Node.js Client" API return values](https://discuss.elastic.co/t/body-object-contents-in-elasticsearch-node-js-client-api-return-values/194286)
**Author:** [@n2nelastic](https://discuss.elastic.co/u/n2nelastic)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 4:19pm UTC](https://discuss.elastic.co/t/body-object-contents-in-elasticsearch-node-js-client-api-return-values/194286 "2019-08-07T16:19:33Z")
The documentation forElasticsearch Node.js Client says that "The returned value of every API call is formed as follows": { body: object | boolean statusCode: number headers: object warnings: \[string\], meta: ob… --- ## [Filebeat for Sophos XG Firewall](https://discuss.elastic.co/t/filebeat-for-sophos-xg-firewall/192952)
**Author:** [@kal1s](https://discuss.elastic.co/u/kal1s)\ **Replies:** 8\ **Last updated:** [August 7, 2019, 4:15pm UTC](https://discuss.elastic.co/t/filebeat-for-sophos-xg-firewall/192952 "2019-08-07T16:15:41Z")
Hi, Will be possible to have Filebeat for Sophos XG FIrewall and integrated with Elastic SIEM like Filebeat Cisco? Best Regards, Ricardo Calimanis --- ## [Elastic X-Pack vs Splunk MLTK](https://discuss.elastic.co/t/elastic-x-pack-vs-splunk-mltk/194284)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 4:14pm UTC](https://discuss.elastic.co/t/elastic-x-pack-vs-splunk-mltk/194284 "2019-08-07T16:14:19Z")
Hello all! I am a Data Scientist but I am new to Elastic. As I have some databases in Elastic and others in Splunk and it would be very interesting to correlate data, I was wondering if it would be better to ingest Ela… --- ## [NGram search troubles(Is it possible to match entire string)](https://discuss.elastic.co/t/ngram-search-troubles-is-it-possible-to-match-entire-string/194111)
**Author:** [@N\_Antech](https://discuss.elastic.co/u/N_Antech)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 4:03pm UTC](https://discuss.elastic.co/t/ngram-search-troubles-is-it-possible-to-match-entire-string/194111 "2019-08-07T16:03:52Z")
I am almost positive that this is a simple misunderstanding on my part as I'm very new to Elasticsearch. I am trying to implement a substring matching search using ngrams. I've got it set as max\_ngram\_diff of 10. My se… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1971) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1973)