# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1986

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1987

---

## [SSL Alert Number 46 in Kibana.log](https://discuss.elastic.co/t/ssl-alert-number-46-in-kibana-log/186405)

<div class="topic-metadata">

**Author:** [@vsalunkhe](https://discuss.elastic.co/u/vsalunkhe)\
**Replies:** 4\
**Last updated:** [August 1, 2019, 1:58pm UTC](https://discuss.elastic.co/t/ssl-alert-number-46-in-kibana-log/186405 "2019-08-01T13:58:02Z")

</div>

Hi, I am seeing the below issue in kiabna.log {"type":"error","@timestamp":"2019-06-19T07:47:31Z","tags":\["connection","client","error"\],"pid":122332,"level":"error","error":{"message":"139992275834752:error:14094416:S…

---

## [ES won't start - where can I check logs?](https://discuss.elastic.co/t/es-wont-start-where-can-i-check-logs/192720)

<div class="topic-metadata">

**Author:** [@tryptych](https://discuss.elastic.co/u/tryptych)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 1:44pm UTC](https://discuss.elastic.co/t/es-wont-start-where-can-i-check-logs/192720 "2019-08-01T13:44:12Z")

</div>

I recently upgraded ES to 5.6 and it won't start now, and gives no clues as to why. Where are the log files for ES? I have a folder at /var/log/elasticsearch but it is empty. /var/log/messages only shows that it started …

---

## [Payload multi indices](https://discuss.elastic.co/t/payload-multi-indices/192847)

<div class="topic-metadata">

**Author:** [@nitingarg](https://discuss.elastic.co/u/nitingarg)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 1:39pm UTC](https://discuss.elastic.co/t/payload-multi-indices/192847 "2019-08-01T13:39:18Z")

</div>

I want to use first indices output m\_id as input second indices ind1,ind2/\_search { "query": { "bool": { "should": \[ { "term": { "linked\_m\_id": "11197" } }, { "term": { "m\_id": "ctx.payload.hits.hits.0.fiel…

---

## [No results match your search criteria - Scripted Fields](https://discuss.elastic.co/t/no-results-match-your-search-criteria-scripted-fields/192987)

<div class="topic-metadata">

**Author:** [@pedroamc](https://discuss.elastic.co/u/pedroamc)\
**Replies:** 4\
**Last updated:** [August 1, 2019, 1:36pm UTC](https://discuss.elastic.co/t/no-results-match-your-search-criteria-scripted-fields/192987 "2019-08-01T13:36:46Z")

</div>

Hi! I'm trying to use a scripted field to build some visualization at Kibana, but something is going wrong. When I am at Management -\> Index Pattern -\> Create Scripted Field and preview the results for my script, it re…

---

## [Lowercase-Processor is missing in Documentation](https://discuss.elastic.co/t/lowercase-processor-is-missing-in-documentation/192898)

<div class="topic-metadata">

**Author:** [@PeterPain](https://discuss.elastic.co/u/PeterPain)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 1:35pm UTC](https://discuss.elastic.co/t/lowercase-processor-is-missing-in-documentation/192898 "2019-08-01T13:35:38Z")

</div>

Hey dear Elastic-Team, I was looking through the documentation for ingest-pipelines and I've noticed that the documentation for the lowercase-processor is missing since version 6.2. i know this is not a big deal but w…

---

## [ES 2.4.1 fail on startup](https://discuss.elastic.co/t/es-2-4-1-fail-on-startup/193102)

<div class="topic-metadata">

**Author:** [@mhssm](https://discuss.elastic.co/u/mhssm)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 1:08pm UTC](https://discuss.elastic.co/t/es-2-4-1-fail-on-startup/193102 "2019-08-01T13:08:35Z")

</div>

I have trouble starting ES 2.4.1 on an Ubuntu 14.04 box. ES has been installed using apt-get and is invoked by init (running as default "elasticsearch" user): admin@LOG:/tmp$ sudo -i service elasticsearch start \* Start…

---

## [I installed elasticsearch 7 in google cloud instance its working fine with localhost, but i want to run it in my machine using browser](https://discuss.elastic.co/t/i-installed-elasticsearch-7-in-google-cloud-instance-its-working-fine-with-localhost-but-i-want-to-run-it-in-my-machine-using-browser/193327)

<div class="topic-metadata">

**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 1:08pm UTC](https://discuss.elastic.co/t/i-installed-elasticsearch-7-in-google-cloud-instance-its-working-fine-with-localhost-but-i-want-to-run-it-in-my-machine-using-browser/193327 "2019-08-01T13:08:21Z")

</div>

This is the log file : \[2019-08-01T12:57:48,617\]\[DEBUG\]\[o.e.a.ActionModule \] \[elastic-stage-vyakar\] Using REST wrapper from plugin org.elasticsearch.xpack.security.Security \[2019-08-01T12:57:49,307\]\[INFO \]\[o.e.d.D…

---

## [Is there an easy way that can search specify indices, if not, search all?](https://discuss.elastic.co/t/is-there-an-easy-way-that-can-search-specify-indices-if-not-search-all/193023)

<div class="topic-metadata">

**Author:** [@imqishi](https://discuss.elastic.co/u/imqishi)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:57pm UTC](https://discuss.elastic.co/t/is-there-an-easy-way-that-can-search-specify-indices-if-not-search-all/193023 "2019-08-01T12:57:33Z")

</div>

Now I have many data and indices, and search is slower, but most data can be searched in a year's indices(I split data by month), so I want to search latest 1 year first, if not get result, try to search all. I can do t…

---

## [Logstash to elasticsearch TCP connection limit](https://discuss.elastic.co/t/logstash-to-elasticsearch-tcp-connection-limit/193323)

<div class="topic-metadata">

**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 12:55pm UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-tcp-connection-limit/193323 "2019-08-01T12:55:59Z")

</div>

We are using elasticsearch output in logstash. What we are observing during the peak load is, from one logstash node it is able to establish only 400 TCP connections to elasticsearch nodes. Why it is not going beyond 400…

---

## [URI query help](https://discuss.elastic.co/t/uri-query-help/192431)

<div class="topic-metadata">

**Author:** [@JB\_Pollard](https://discuss.elastic.co/u/JB_Pollard)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:53pm UTC](https://discuss.elastic.co/t/uri-query-help/192431 "2019-08-01T12:53:31Z")

</div>

Trying to pull a query via the url without the index information just the data and querying the log file path. I've tried adding ?q=log.file.path:"\*TeamViewer11\_Logfile.log" and the full path to the url query with no luc…

---

## [Logstash problem for loading data](https://discuss.elastic.co/t/logstash-problem-for-loading-data/192936)

<div class="topic-metadata">

**Author:** [@Abdelmadjid](https://discuss.elastic.co/u/Abdelmadjid)\
**Replies:** 11\
**Last updated:** [August 1, 2019, 12:53pm UTC](https://discuss.elastic.co/t/logstash-problem-for-loading-data/192936 "2019-08-01T12:53:17Z")

</div>

hello i need help for loading data to elasticsearch with logstash on windows 10 when i try to load data to logstash with these config file input{ file{ path =\> "C:\\Users\\pc intervalle\\Downloads\\Compressed\\logstash-7…

---

## [ElastiSearch Supports GlusterFS and Rook Storage System?](https://discuss.elastic.co/t/elastisearch-supports-glusterfs-and-rook-storage-system/193319)

<div class="topic-metadata">

**Author:** [@Varun\_S](https://discuss.elastic.co/u/Varun_S)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:52pm UTC](https://discuss.elastic.co/t/elastisearch-supports-glusterfs-and-rook-storage-system/193319 "2019-08-01T12:52:38Z")

</div>

Hi, Does ElastiSearch Supports GlusterFS and Rook Storage System? Regards, Varun S

---

## [Assistance with a proper searching technique](https://discuss.elastic.co/t/assistance-with-a-proper-searching-technique/193198)

<div class="topic-metadata">

**Author:** [@Steven\_Garcia](https://discuss.elastic.co/u/Steven_Garcia)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 12:45pm UTC](https://discuss.elastic.co/t/assistance-with-a-proper-searching-technique/193198 "2019-08-01T12:45:09Z")

</div>

Hey everyone, Question: I tried looking around (my searching skills probably sucks) to see if there is an example of getting partial matches. Would anyone have any idea? So for example my list of search terms would be…

---

## [Index size increase after configuring patterns](https://discuss.elastic.co/t/index-size-increase-after-configuring-patterns/193321)

<div class="topic-metadata">

**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 12:42pm UTC](https://discuss.elastic.co/t/index-size-increase-after-configuring-patterns/193321 "2019-08-01T12:42:09Z")

</div>

I’ve been ingesting log files from a firewall for a few months now. The monthly reindex size would be a couple of gigabytes on average. Since I’ve introduced filter patterns which create separate fields my daily indexes…

---

## [Export data from hadoop to elastic using java](https://discuss.elastic.co/t/export-data-from-hadoop-to-elastic-using-java/193056)

<div class="topic-metadata">

**Author:** [@examin](https://discuss.elastic.co/u/examin)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:42pm UTC](https://discuss.elastic.co/t/export-data-from-hadoop-to-elastic-using-java/193056 "2019-08-01T12:42:08Z")

</div>

I have to do some pre-processing( denormalization) of hadoop tables before inserting it to ElasticSearch. My plan is to use java to do this task. Could you please guide me how to do this, Or please share some doc link et…

---

## [Could not install Analysis Plugin that I created](https://discuss.elastic.co/t/could-not-install-analysis-plugin-that-i-created/193070)

<div class="topic-metadata">

**Author:** [@naughie](https://discuss.elastic.co/u/naughie)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:40pm UTC](https://discuss.elastic.co/t/could-not-install-analysis-plugin-that-i-created/193070 "2019-08-01T12:40:51Z")

</div>

I have created a new analysis plugin with mvn, but installation bin/elasticsearch-plugin install failed. Env CentOS 7 elasticsearch 7.2.0 java 1.8 Files pom.xml src/main/assemblies/plugin.xml src/main/resources/plugi…

---

## [Ruby filter to convert date](https://discuss.elastic.co/t/ruby-filter-to-convert-date/193295)

<div class="topic-metadata">

**Author:** [@HFolly](https://discuss.elastic.co/u/HFolly)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 12:38pm UTC](https://discuss.elastic.co/t/ruby-filter-to-convert-date/193295 "2019-08-01T12:38:01Z")

</div>

Hi there. In my Logstash configuration I need a Ruby filter to convert date from a given collection of strings. My collection uses an structure with 3 values containing a field name, it's value and it's data type: "C…

---

## [Legal character set for field names](https://discuss.elastic.co/t/legal-character-set-for-field-names/190796)

<div class="topic-metadata">

**Author:** [@iamredlus](https://discuss.elastic.co/u/iamredlus)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 12:31pm UTC](https://discuss.elastic.co/t/legal-character-set-for-field-names/190796 "2019-08-01T12:31:40Z")

</div>

Hey, I'd like to add some validation on my side for field names before indexing documents into elsaticsearch. However, I cannot find any documentation describing what is an invalid field name. The only thing I found was…

---

## [ElasticSearch loosing data](https://discuss.elastic.co/t/elasticsearch-loosing-data/192873)

<div class="topic-metadata">

**Author:** [@Aymen\_Ben\_Moussa](https://discuss.elastic.co/u/Aymen_Ben_Moussa)\
**Replies:** 5\
**Last updated:** [August 1, 2019, 12:31pm UTC](https://discuss.elastic.co/t/elasticsearch-loosing-data/192873 "2019-08-01T12:31:35Z")

</div>

My architecture consists of Kafka logstash elasticsearch, i wrote a ruby code to calculate a KPI in logstash, everything was working fine but some days pass by and that KPI i made has been reset to 0 and only that KPI, i…

---

## [Unable to parse json logs](https://discuss.elastic.co/t/unable-to-parse-json-logs/193143)

<div class="topic-metadata">

**Author:** [@Raghav\_Agrawal](https://discuss.elastic.co/u/Raghav_Agrawal)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:28pm UTC](https://discuss.elastic.co/t/unable-to-parse-json-logs/193143 "2019-08-01T12:28:33Z")

</div>

2019-07-31T14:29:12.644Z DEBUG \[elasticsearch\] elasticsearch/client.go:507 Bulk item insert failed (i=12, status=500): {"type":"exception","reason":"java.lang.IllegalArgumentException: java.lang.IllegalArgumentException:…

---

## [Incompatible Low Version](https://discuss.elastic.co/t/incompatible-low-version/193233)

<div class="topic-metadata">

**Author:** [@laijianbin](https://discuss.elastic.co/u/laijianbin)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:26pm UTC](https://discuss.elastic.co/t/incompatible-low-version/193233 "2019-08-01T12:26:54Z")

</div>

when java client jar use Elasticsearch 6.8.0,Elastic Server use 6.6.1 Is there any soluation to resolve this problem?

---

## [How to send all the alerts in one mail using logstash](https://discuss.elastic.co/t/how-to-send-all-the-alerts-in-one-mail-using-logstash/187589)

<div class="topic-metadata">

**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 12:22pm UTC](https://discuss.elastic.co/t/how-to-send-all-the-alerts-in-one-mail-using-logstash/187589 "2019-08-01T12:22:36Z")

</div>

HI , I will get around 100 alerts in a day and all those come in different emails . So , is there any way i can get all the alerts only in one mail on a particular time everyday using logstash. Please help me solve it…

---

## [Dependecy injection error when runnung custom plugin](https://discuss.elastic.co/t/dependecy-injection-error-when-runnung-custom-plugin/193310)

<div class="topic-metadata">

**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:19pm UTC](https://discuss.elastic.co/t/dependecy-injection-error-when-runnung-custom-plugin/193310 "2019-08-01T12:19:48Z")

</div>

Hello, I used Kibana plugin generator to create a new App plugin. When running the plugin inside kibana, i got this error in Chrome console. The plugin is working with no issue, just want to understand how i can fix t…

---

## [Ruby filter to execute code only once](https://discuss.elastic.co/t/ruby-filter-to-execute-code-only-once/193243)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:14pm UTC](https://discuss.elastic.co/t/ruby-filter-to-execute-code-only-once/193243 "2019-08-01T12:14:06Z")

</div>

Hi All I have a scenario where I am using Ruby filter and I want to execute the code only once after reading the input. Basically after executing this code it should come out to output and should not process further I …

---

## [Invalid format: "2019-05-16" is too short](https://discuss.elastic.co/t/invalid-format-2019-05-16-is-too-short/191988)

<div class="topic-metadata">

**Author:** [@zxyyxzzxy001](https://discuss.elastic.co/u/zxyyxzzxy001)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:01pm UTC](https://discuss.elastic.co/t/invalid-format-2019-05-16-is-too-short/191988 "2019-08-01T12:01:59Z")

</div>

I use logstash transfer data from mysql to elasticsearch.When logstash output data to elasticsearch,it throw an exception : Invalid format: "2019-05-16" is too short. the column start\_date in mysql data type is date.…

---

## [Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError"](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror/193247)

<div class="topic-metadata">

**Author:** [@hitesh\_kumar](https://discuss.elastic.co/u/hitesh_kumar)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 11:47am UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror/193247 "2019-08-01T11:47:22Z")

</div>

Hi I'm using logstash-7.0.1, my configuration file is: input { stdout{} } output { elasticsearch { hosts =\> {"localhost:9200"} } stdout { codec =\> rubydebug …

---

## [Multiline Codec logstash for log level](https://discuss.elastic.co/t/multiline-codec-logstash-for-log-level/193094)

<div class="topic-metadata">

**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\
**Replies:** 5\
**Last updated:** [August 1, 2019, 11:23am UTC](https://discuss.elastic.co/t/multiline-codec-logstash-for-log-level/193094 "2019-08-01T11:23:48Z")

</div>

Hi I have a log entry sample as below. every line starts with i.e., log level. Few log entries would be on the same line but few would be in multiple lines. Can you please suggest the logstash file input multiline cod…

---

## [All shards failed for phase: \[query\] on Elasticsearch 7.2.0](https://discuss.elastic.co/t/all-shards-failed-for-phase-query-on-elasticsearch-7-2-0/193270)

<div class="topic-metadata">

**Author:** [@Extinguo](https://discuss.elastic.co/u/Extinguo)\
**Replies:** 4\
**Last updated:** [August 1, 2019, 11:23am UTC](https://discuss.elastic.co/t/all-shards-failed-for-phase-query-on-elasticsearch-7-2-0/193270 "2019-08-01T11:23:47Z")

</div>

Hey guys, I'm running Elastic 7.2.0 on a single machine in docker containers. It works fine except for some problems with the shards. I let Elastic run for a few days and looked at the logs today. The look fine, except…

---

## [Shards vs Indexes: which when for chunkable data?](https://discuss.elastic.co/t/shards-vs-indexes-which-when-for-chunkable-data/193213)

<div class="topic-metadata">

**Author:** [@IanRC72](https://discuss.elastic.co/u/IanRC72)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 11:02am UTC](https://discuss.elastic.co/t/shards-vs-indexes-which-when-for-chunkable-data/193213 "2019-08-01T11:02:07Z")

</div>

Hopefully a different take on an old question... I'm wondering if there's a known formula for choosing when to have many indexes with, say, one shard each vs. one index with many shards, or some point in between, for th…

---

## [ElasticSearch Timeout Error during heavy write load](https://discuss.elastic.co/t/elasticsearch-timeout-error-during-heavy-write-load/193305)

<div class="topic-metadata">

**Author:** [@vishnu-team8](https://discuss.elastic.co/u/vishnu-team8)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 11:01am UTC](https://discuss.elastic.co/t/elasticsearch-timeout-error-during-heavy-write-load/193305 "2019-08-01T11:01:03Z")

</div>

Error: Update taking more than 60 seconds. WARNING:elasticsearch:POST http://elasticsearch.es:9200/profiles/doc/x\_DeumMBCUnYUtZ/\_update?refresh=false&version=9 \[status:N/A request:60.059s\] Also getting Caused by: or…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1985)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1987)
