# Top **URL:** https://discuss.elastic.co/top.md?page=828&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 829 --- ## [Fields not showing in Visualization graphs](https://discuss.elastic.co/t/fields-not-showing-in-visualization-graphs/184572)
**Author:** [@Tania\_Saez](https://discuss.elastic.co/u/Tania_Saez)\ **Replies:** 2\ **Last updated:** [June 7, 2019, 10:31am UTC](https://discuss.elastic.co/t/fields-not-showing-in-visualization-graphs/184572 "2019-06-07T10:31:45Z")
Hello, When building a new visualization graph, I cannot see the fields in the tab: But in fact, all of the fields I am ingesting are being shown in the logs: { "runscope" : { "aliases" : { }, "mappings" : { "… --- ## [Elasticsearch Constantly Reallocating Shards](https://discuss.elastic.co/t/elasticsearch-constantly-reallocating-shards/118276)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 2\ **Last updated:** [February 9, 2018, 6:58pm UTC](https://discuss.elastic.co/t/elasticsearch-constantly-reallocating-shards/118276 "2018-02-09T18:58:45Z")
ES Version 5.6.2 For the past few weeks, every time I check ES Monitoring, twenty shards are being reallocated: \[image\] This is defined as the max in my cluster settings. I have it set higher than default as many of t… --- ## [Easiest way to export query results for importing to an independent elasticsearch instance](https://discuss.elastic.co/t/easiest-way-to-export-query-results-for-importing-to-an-independent-elasticsearch-instance/196318)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 10:35pm UTC](https://discuss.elastic.co/t/easiest-way-to-export-query-results-for-importing-to-an-independent-elasticsearch-instance/196318 "2019-08-22T22:35:34Z")
Hi, Our customer is running our application on premise in his own datacenter. If there are any issues / bugs, we ask him for grepping information from logfiles and to deliver these snippets to us for analysis and bugfix… --- ## [Get a fixed random sample from all documents](https://discuss.elastic.co/t/get-a-fixed-random-sample-from-all-documents/23392)
**Author:** [@Sebastian\_Rickelt](https://discuss.elastic.co/u/Sebastian_Rickelt)\ **Replies:** 1\ **Last updated:** [October 16, 2015, 11:53am UTC](https://discuss.elastic.co/t/get-a-fixed-random-sample-from-all-documents/23392 "2015-10-16T11:53:04Z")
Hi, I want to fetch a fixed large number of documents randomly from Elasticsearch to compute some statistics (100,000 out of 10 M documents). The randomness has to be predictable so that I get the same documents w… --- ## [Elasticsearch not create heap dump file when outofmemory](https://discuss.elastic.co/t/elasticsearch-not-create-heap-dump-file-when-outofmemory/211226)
**Author:** [@saiergon](https://discuss.elastic.co/u/saiergon)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 6:14am UTC](https://discuss.elastic.co/t/elasticsearch-not-create-heap-dump-file-when-outofmemory/211226 "2019-12-10T06:14:56Z")
my elasticsearch encounterd outofmemory exception, but it not create heap dump file the log: \[2019-12-09T20:33:16,878\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[node-xxx\] fatal error in thread \[elasticsearch… --- ## [How to recover cluster when 2 master nodes have been lost](https://discuss.elastic.co/t/how-to-recover-cluster-when-2-master-nodes-have-been-lost/269472)
**Author:** [@russinholi](https://discuss.elastic.co/u/russinholi)\ **Replies:** 3\ **Last updated:** [April 7, 2021, 3:05pm UTC](https://discuss.elastic.co/t/how-to-recover-cluster-when-2-master-nodes-have-been-lost/269472 "2021-04-07T15:05:07Z")
Hi everyone, I have the following situation, my cluster is formed by 3 master nodes and 3 data nodes, unfortunately due to a hardware problem we lost 2 master nodes at same time and the left one was not able to assume a… --- ## [Failed to connect to localhost port 9200: Connection refused，----elasticsearch SETUP](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused-elasticsearch-setup/225092)
**Author:** [@Jennifer](https://discuss.elastic.co/u/Jennifer)\ **Replies:** 3\ **Last updated:** [March 26, 2020, 7:17am UTC](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused-elasticsearch-setup/225092 "2020-03-26T07:17:21Z")
oot@ubuntu1804:/usr/local/elasticsearch-7.6.1# /etc/init.d/elasticsearch start No passwd entry for user 'elsearch' elasticsearch is started root@ubuntu1804:/usr/local/elasticsearch-7.6.1# /usr/local/elasticsearch-7.6.… --- ## [ML node memory configuration](https://discuss.elastic.co/t/ml-node-memory-configuration/219064)
**Author:** [@danielyahn](https://discuss.elastic.co/u/danielyahn)\ **Replies:** 3\ **Last updated:** [February 12, 2020, 9:01pm UTC](https://discuss.elastic.co/t/ml-node-memory-configuration/219064 "2020-02-12T21:01:06Z")
From Sizing for Machine Learning with Elasticsearch | Elastic Blog We recommend that ML nodes have at least 4 Cores and 64GB RAM. Assign 24GB of memory to the JVM Heap, reserving 40GB for ML processing. Is it possibl… --- ## [Filebeat Fails after Power Failure](https://discuss.elastic.co/t/filebeat-fails-after-power-failure/73967)
**Author:** [@andynz2017](https://discuss.elastic.co/u/andynz2017)\ **Replies:** 3\ **Last updated:** [February 7, 2017, 3:54pm UTC](https://discuss.elastic.co/t/filebeat-fails-after-power-failure/73967 "2017-02-07T15:54:24Z")
Hey All, very weird issue. Hoping for some guidance/assistance here. Issue: Filebeat running on CentOS Linux release 7.3.1611 (Core), filebeat 5.1. Server suffers power failure due to host failing. Ungraceful shutdown,… --- ## [Long time on loaded plugins from java client](https://discuss.elastic.co/t/long-time-on-loaded-plugins-from-java-client/68036)
**Author:** [@nugusbayevkk](https://discuss.elastic.co/u/nugusbayevkk)\ **Replies:** 3\ **Last updated:** [December 5, 2016, 12:45pm UTC](https://discuss.elastic.co/t/long-time-on-loaded-plugins-from-java-client/68036 "2016-12-05T12:45:30Z")
Hi guys, i have problem or is it normal? in this example after run i see that a lot of time spended on LOADED PLUGINS. Is it correct? It took about 600msec. 311 318 no modules loaded loaded plugin \[org.elasticsearch.… --- ## [Best Practice for building new version of an index and replacing existing using LogStash](https://discuss.elastic.co/t/best-practice-for-building-new-version-of-an-index-and-replacing-existing-using-logstash/69819)
**Author:** [@Airn5475](https://discuss.elastic.co/u/Airn5475)\ **Replies:** 4\ **Last updated:** [December 27, 2016, 8:04pm UTC](https://discuss.elastic.co/t/best-practice-for-building-new-version-of-an-index-and-replacing-existing-using-logstash/69819 "2016-12-27T20:04:58Z")
I am pulling entities out of a database and serializing them to .json using a C# console app. The .json files are then read by Filebeat which sends the data to LogStash, which pushes into Elasticsearch. Every 5 minutes… --- ## [File input yields no stdout output](https://discuss.elastic.co/t/file-input-yields-no-stdout-output/39156)
**Author:** [@CamJN](https://discuss.elastic.co/u/CamJN)\ **Replies:** 4\ **Last updated:** [January 15, 2016, 3:24pm UTC](https://discuss.elastic.co/t/file-input-yields-no-stdout-output/39156 "2016-01-15T15:24:51Z")
Continuing the discussion from New to logstash: file input and stdout output not working: I have the same problem except that deleting the sincedb file, and setting the sincedb\_path to /dev/null and rerunning still doe… --- ## [Filebeat: Exiting: error loading config file: yaml: line 107: could not find expect ':'](https://discuss.elastic.co/t/filebeat-exiting-error-loading-config-file-yaml-line-107-could-not-find-expect/271276)
**Author:** [@itsec](https://discuss.elastic.co/u/itsec)\ **Replies:** 5\ **Last updated:** [May 3, 2021, 4:19am UTC](https://discuss.elastic.co/t/filebeat-exiting-error-loading-config-file-yaml-line-107-could-not-find-expect/271276 "2021-05-03T04:19:52Z")
Hi, i'm new to filebeat and kafka and i'm trying to learn how to send server logs to kafka. filebeat.inputs: '- type: log Change to true to enable this input configuration. enabled: true Paths that should be crawled … --- ## [Displaying numbers as 1M,1B,1K in kibana](https://discuss.elastic.co/t/displaying-numbers-as-1m-1b-1k-in-kibana/259227)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 6\ **Last updated:** [December 22, 2020, 12:12pm UTC](https://discuss.elastic.co/t/displaying-numbers-as-1m-1b-1k-in-kibana/259227 "2020-12-22T12:12:37Z")
Hi Team, I'm are using Visual builder to show some metrices over the time, as these number are very big I have customized the format as "0.0a" It shows the number in proper format ,but the issue is with the abbreviati… --- ## [Sort a prefix query in compound queries in java](https://discuss.elastic.co/t/sort-a-prefix-query-in-compound-queries-in-java/94138)
**Author:** [@jth1](https://discuss.elastic.co/u/jth1)\ **Replies:** 6\ **Last updated:** [July 26, 2017, 1:47am UTC](https://discuss.elastic.co/t/sort-a-prefix-query-in-compound-queries-in-java/94138 "2017-07-26T01:47:57Z")
prefix query, returns results with constant score. How to sort results alphabetically by a field in ascending in JAVA? --- ## [Snapshots to s3; file TTL](https://discuss.elastic.co/t/snapshots-to-s3-file-ttl/49492)
**Author:** [@sirkubax\_1](https://discuss.elastic.co/u/sirkubax_1)\ **Replies:** 6\ **Last updated:** [May 9, 2016, 10:09pm UTC](https://discuss.elastic.co/t/snapshots-to-s3-file-ttl/49492 "2016-05-09T22:09:59Z")
Hi I'm creating snapshot to S3 In my bucket I set TTL to 365 days, so the old files would be removed after 1 year. via The index snapshot process is incremental. In the process of making the index snapshot Elastics… --- ## [Next.js and dynamic routes](https://discuss.elastic.co/t/next-js-and-dynamic-routes/321302)
**Author:** [@Aarhus](https://discuss.elastic.co/u/Aarhus)\ **Replies:** 7\ **Last updated:** [December 19, 2022, 7:47am UTC](https://discuss.elastic.co/t/next-js-and-dynamic-routes/321302 "2022-12-19T07:47:55Z")
I have setup our Next.js app with Elastic amp and it works fine out of the box. The only thing is that I have a catch all route which handles all dynamic routes and send the url back to the CMS to retrieve the correct c… --- ## [Analyzing SpanNearQuery](https://discuss.elastic.co/t/analyzing-spannearquery/4731)
**Author:** [@Niko](https://discuss.elastic.co/u/Niko)\ **Replies:** 8\ **Last updated:** [December 30, 2016, 8:40pm UTC](https://discuss.elastic.co/t/analyzing-spannearquery/4731 "2016-12-30T20:40:39Z")
Hi everyone, I have a question regarding SpanNearQueries. As I saw Term Queries were not analyzed before search, but are SpanNearQueries? Is there a way to analyze the SpanTermQueries inside of SpanNearQueries usin… --- ## [Kafka input not working - no messages processed but offsets are updated to end](https://discuss.elastic.co/t/kafka-input-not-working-no-messages-processed-but-offsets-are-updated-to-end/168088)
**Author:** [@pvi](https://discuss.elastic.co/u/pvi)\ **Replies:** 2\ **Last updated:** [February 13, 2019, 10:26am UTC](https://discuss.elastic.co/t/kafka-input-not-working-no-messages-processed-but-offsets-are-updated-to-end/168088 "2019-02-13T10:26:44Z")
I'm running logstash 6.6.0 with kafka input in a docker image. However it is not processing any events while the consumer group offsets are updated to the latest in kafka. Even when I manually reset the offsets to the be… --- ## [Mapper\_parsing\_exception on Date](https://discuss.elastic.co/t/mapper-parsing-exception-on-date/183068)
**Author:** [@broly21](https://discuss.elastic.co/u/broly21)\ **Replies:** 4\ **Last updated:** [May 28, 2019, 12:45pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-on-date/183068 "2019-05-28T12:45:40Z")
hello everyone, I have an error when I insert my data, because of my bad mapping. the format is 31/12/2018 for exemple Here is the error { "error": { "root\_cause": \[ { "type": "mapper\_parsing\_exception", "reason"… --- ## [Kibana full text search problem](https://discuss.elastic.co/t/kibana-full-text-search-problem/95793)
**Author:** [@sockaddr\_in](https://discuss.elastic.co/u/sockaddr_in)\ **Replies:** 4\ **Last updated:** [August 18, 2017, 11:26am UTC](https://discuss.elastic.co/t/kibana-full-text-search-problem/95793 "2017-08-18T11:26:35Z")
Continuing the discussion from Kibana full text search: I have the same question as above. So can anyone tell me how to full text search ？thx! --- ## [Employee Hierarchy Usecase](https://discuss.elastic.co/t/employee-hierarchy-usecase/29859)
**Author:** [@sgandhirajan](https://discuss.elastic.co/u/sgandhirajan)\ **Replies:** 4\ **Last updated:** [September 30, 2015, 11:27pm UTC](https://discuss.elastic.co/t/employee-hierarchy-usecase/29859 "2015-09-30T23:27:15Z")
Whether Elastic Search supports to store the entire employee hierarchy. The lowest employee may have n number of supervisor. The manager of lowest employee may have n-1 number of supervisor. Oracle support parent child … --- ## [Elastic Transform Error](https://discuss.elastic.co/t/elastic-transform-error/279199)
**Author:** [@IWannaDance](https://discuss.elastic.co/u/IWannaDance)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 6:35pm UTC](https://discuss.elastic.co/t/elastic-transform-error/279199 "2021-07-21T18:35:38Z")
\[ERROR\]\[o.e.x.t.t.TransformPersistentTasksExecutor\] \[node-1\] Failed to start task \[endpoint.metadata\_current-default-0.19.1\] in node operation org.elasticsearch.ElasticsearchStatusException: Unable to start transform \[en… --- ## [Sending Auditbeat data to Logstash](https://discuss.elastic.co/t/sending-auditbeat-data-to-logstash/110420)
**Author:** [@ramzey1981](https://discuss.elastic.co/u/ramzey1981)\ **Replies:** 2\ **Last updated:** [December 8, 2017, 3:56pm UTC](https://discuss.elastic.co/t/sending-auditbeat-data-to-logstash/110420 "2017-12-08T15:56:23Z")
hello folks Is it possible to send auditbeats data directly to logstash for ingesting rather than directly to elasticsearch. I am doing something similar in filebeats and wanted to know if i can use logastash as an ing… --- ## [Need help retrieving username and/or computer name into Kibana using Winlogbeat](https://discuss.elastic.co/t/need-help-retrieving-username-and-or-computer-name-into-kibana-using-winlogbeat/81590)
**Author:** [@BMV](https://discuss.elastic.co/u/BMV)\ **Replies:** 2\ **Last updated:** [April 11, 2017, 10:28am UTC](https://discuss.elastic.co/t/need-help-retrieving-username-and-or-computer-name-into-kibana-using-winlogbeat/81590 "2017-04-11T10:28:46Z")
Hi Elastic community, I have just started using Elastic with Kibana on the front end and Winlogbeat. I am currently working on a project for work that revolves around analysing the Windows event log files of around 100… --- ## [Two Kibana Instances on Single Server](https://discuss.elastic.co/t/two-kibana-instances-on-single-server/29160)
**Author:** [@ahodges22](https://discuss.elastic.co/u/ahodges22)\ **Replies:** 2\ **Last updated:** [September 12, 2015, 5:32am UTC](https://discuss.elastic.co/t/two-kibana-instances-on-single-server/29160 "2015-09-12T05:32:30Z")
We have two different Elasticsearch clusters in our environment, and each cluster has a separate server that runs Kibana. I want to combine the two UI servers running Kibana into one. Is there a simple way of running two… --- ## [Performance of Hive queries](https://discuss.elastic.co/t/performance-of-hive-queries/908)
**Author:** [@rmoff](https://discuss.elastic.co/u/rmoff)\ **Replies:** 2\ **Last updated:** [May 21, 2015, 9:00am UTC](https://discuss.elastic.co/t/performance-of-hive-queries/908 "2015-05-21T09:00:42Z")
Hi, I'm seeing a huge difference in time when running queries against a very small Elasticsearch index, I wondered if anyone could shed light on it (and suggest how to improve it). I have a single document in Elast… --- ## [Set op\_type to "index" filebeat / elastic-agent](https://discuss.elastic.co/t/set-op-type-to-index-filebeat-elastic-agent/321562)
**Author:** [@beijo](https://discuss.elastic.co/u/beijo)\ **Replies:** 7\ **Last updated:** [December 19, 2022, 5:06pm UTC](https://discuss.elastic.co/t/set-op-type-to-index-filebeat-elastic-agent/321562 "2022-12-19T17:06:52Z")
Hi All, I'm ingesting documents into an index (not a data stream). As I need to update specific documents, I created an ingest pipline which sets the \_id field. However I can not see my documents being updated and I sus… --- ## [Getting logs from azure blog storage and pushing to ES through Logstash?](https://discuss.elastic.co/t/getting-logs-from-azure-blog-storage-and-pushing-to-es-through-logstash/93393)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 1\ **Last updated:** [July 21, 2017, 4:08pm UTC](https://discuss.elastic.co/t/getting-logs-from-azure-blog-storage-and-pushing-to-es-through-logstash/93393 "2017-07-21T16:08:48Z")
Hi Team, I am sending my txt file which is stored in azureblobstorage to ES directly with the help of logstash with this plugin. My config is like this: input { azureblob { storage\_account\_name =\> "… --- ## [Default number of replicas for Elastic Search index](https://discuss.elastic.co/t/default-number-of-replicas-for-elastic-search-index/77369)
**Author:** [@gkraan](https://discuss.elastic.co/u/gkraan)\ **Replies:** 1\ **Last updated:** [March 3, 2017, 11:41pm UTC](https://discuss.elastic.co/t/default-number-of-replicas-for-elastic-search-index/77369 "2017-03-03T23:41:44Z")
Hi, be default when an index gets created in E.S. it will always have at least one replica. In a simple one node environment, I do not have a need for replicas at all. I know how to change the number of replica's to 0 … --- ## [Deleting indices 30 days older](https://discuss.elastic.co/t/deleting-indices-30-days-older/89686)
**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\ **Replies:** 3\ **Last updated:** [June 16, 2017, 12:45pm UTC](https://discuss.elastic.co/t/deleting-indices-30-days-older/89686 "2017-06-16T12:45:54Z")
Hi am using Curator V 4.3.1 to delete the indices in my ES V 2.2.0 My action.yml looks like this actions: 1: action: delete\_indices description: \>- Delete indices older than 28 days (based on index nam… --- ## [\_grokparsefailure - "message": "\\u00002\\u00000](https://discuss.elastic.co/t/-grokparsefailure-message-u00002-u00000/45962)
**Author:** [@Cross](https://discuss.elastic.co/u/Cross)\ **Replies:** 3\ **Last updated:** [April 4, 2016, 1:38pm UTC](https://discuss.elastic.co/t/-grokparsefailure-message-u00002-u00000/45962 "2016-04-04T13:38:57Z")
My log data is like, 2016-03-31 18:04:04,124 - \[Messages\_Router - FN7SVCT2\] - \[590\] DEBUG Ifn.Messages.Router.MessageHandlerFactory \[(null)\] - ProcessQueue: ProcessingW2DocumentRouterMessage 2016-03-31 18:04:04,124 - \[Me… --- ## [High Value of total\_opened http connection in node stats when ES Cluster is idle](https://discuss.elastic.co/t/high-value-of-total-opened-http-connection-in-node-stats-when-es-cluster-is-idle/27968)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 3\ **Last updated:** [August 25, 2015, 7:47am UTC](https://discuss.elastic.co/t/high-value-of-total-opened-http-connection-in-node-stats-when-es-cluster-is-idle/27968 "2015-08-25T07:47:40Z")
I have a simple ELK deployment in which logstash is pushing log events to elasticsearch cluster. The elasticsearch cluster has 4 nodes out of which there are 3 master + data nodes and one client node. The logstash confi… --- ## [How to create array data type from CSV](https://discuss.elastic.co/t/how-to-create-array-data-type-from-csv/139179)
**Author:** [@eviatenne](https://discuss.elastic.co/u/eviatenne)\ **Replies:** 2\ **Last updated:** [July 9, 2018, 7:27pm UTC](https://discuss.elastic.co/t/how-to-create-array-data-type-from-csv/139179 "2018-07-09T19:27:16Z")
Hey, let's assume I have the following CSV and I would like to populate it into world\_cup\_2018 index csv: groups.csv Group A|Uruguay,Russia,Saudi Arabia,Egypt Group B|Spain,Portugal,Iran,Morocco .... I would like to… --- ## [How to handle multiple syslog inputs with Logstash to different indices](https://discuss.elastic.co/t/how-to-handle-multiple-syslog-inputs-with-logstash-to-different-indices/181414)
**Author:** [@colix](https://discuss.elastic.co/u/colix)\ **Replies:** 4\ **Last updated:** [May 17, 2019, 8:23am UTC](https://discuss.elastic.co/t/how-to-handle-multiple-syslog-inputs-with-logstash-to-different-indices/181414 "2019-05-17T08:23:58Z")
Hi, in input I use 2 ports by 2 project, I want handle them to different indices. But now all input go to prd.rnis-\* index. Can you help? input { syslog { port =\> 5001 tags =\> \["p… --- ## [KNN-style percolator](https://discuss.elastic.co/t/knn-style-percolator/53756)
**Author:** [@heino1986](https://discuss.elastic.co/u/heino1986)\ **Replies:** 4\ **Last updated:** [June 23, 2016, 12:22pm UTC](https://discuss.elastic.co/t/knn-style-percolator/53756 "2016-06-23T12:22:22Z")
Is it possible to create a percolator type procedure that passes documents from index A and conducts a full-text similarity query against documents in index B, whereby only k number of nearest-neighbour documents are ret… --- ## [Kibana and Shield: user read-only access to his index](https://discuss.elastic.co/t/kibana-and-shield-user-read-only-access-to-his-index/48909)
**Author:** [@vando](https://discuss.elastic.co/u/vando)\ **Replies:** 4\ **Last updated:** [May 3, 2016, 2:19pm UTC](https://discuss.elastic.co/t/kibana-and-shield-user-read-only-access-to-his-index/48909 "2016-05-03T14:19:12Z")
I'm using Kibana with Shield and I want to create read-only users that they can see only his respective index. I created this role for foo user: foo: indices: - names: 'foo-\*' privileges: - indic… --- ## [Find doucment with blank nested field](https://discuss.elastic.co/t/find-doucment-with-blank-nested-field/33219)
**Author:** [@jagdish\_nasit](https://discuss.elastic.co/u/jagdish_nasit)\ **Replies:** 4\ **Last updated:** [October 30, 2015, 11:04am UTC](https://discuss.elastic.co/t/find-doucment-with-blank-nested-field/33219 "2015-10-30T11:04:44Z")
Hi, I have nested property in my index document. I want to find all documents where nested field is blank. example: I am indexing below document, how can I search for document where contact is not available ? {"Name":… --- ## [Parse a comma separate value that contains a comma in it](https://discuss.elastic.co/t/parse-a-comma-separate-value-that-contains-a-comma-in-it/268026)
**Author:** [@d-ring](https://discuss.elastic.co/u/d-ring)\ **Replies:** 5\ **Last updated:** [March 23, 2021, 4:52pm UTC](https://discuss.elastic.co/t/parse-a-comma-separate-value-that-contains-a-comma-in-it/268026 "2021-03-23T16:52:53Z")
Evening All, I am trying to parse out a log entry that is comma separated, but if the SOMEUSER field exists will have a comma in it as well that should be ignored. The fields that exist in some fashion are SOMEUSER, SO… --- ## [Messages escaped in Filebeat](https://discuss.elastic.co/t/messages-escaped-in-filebeat/237125)
**Author:** [@JeanN](https://discuss.elastic.co/u/JeanN)\ **Replies:** 5\ **Last updated:** [June 22, 2020, 8:45pm UTC](https://discuss.elastic.co/t/messages-escaped-in-filebeat/237125 "2020-06-22T20:45:30Z")
Hi, I have an issue with Filebeat, I have escaping characters that I can't remove from the message value, or I don't know how. I know there already are some topics on that matter but none solved my issue, that's why I'm… --- ## [Logstash를 통해 Elastic Cloud로 데이터를 전송하는 방법](https://discuss.elastic.co/t/logstash-elastic-cloud/228429)
**Author:** [@111317](https://discuss.elastic.co/u/111317)\ **Replies:** 5\ **Last updated:** [April 29, 2020, 12:07am UTC](https://discuss.elastic.co/t/logstash-elastic-cloud/228429 "2020-04-29T00:07:07Z")
input { file { path =\> "/path/path/\*.json" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { json { source =\> "message" } } output { elasticsearch{ index =\>"indexname" hosts =\>\[… --- ## [Synonym token filter and edge\_ngram tokenizer conflicts](https://discuss.elastic.co/t/synonym-token-filter-and-edge-ngram-tokenizer-conflicts/198328)
**Author:** [@jjarthur](https://discuss.elastic.co/u/jjarthur)\ **Replies:** 5\ **Last updated:** [September 9, 2019, 10:21pm UTC](https://discuss.elastic.co/t/synonym-token-filter-and-edge-ngram-tokenizer-conflicts/198328 "2019-09-09T22:21:00Z")
Hello, I'm facing a small issue with my implementation of the synonym token filter combined with an edge\_ngram tokenizer. For example, I have a synonym mapping for sa =\> south\_australia and an entry with a field of san… --- ## [Support for configuration-for-3-node-cluster](https://discuss.elastic.co/t/support-for-configuration-for-3-node-cluster/131550)
**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\ **Replies:** 5\ **Last updated:** [May 12, 2018, 4:23am UTC](https://discuss.elastic.co/t/support-for-configuration-for-3-node-cluster/131550 "2018-05-12T04:23:38Z")
Hi, I have want to configure 3 node elasticsearch Cuter . I want to know what would be the best configuration of elasticsearch. Elastic01 172.24.32.209 ( Elasticsearch, Kibana, Logstash installed) Elastic02 172.24.3… --- ## [Logstash kafka input problem(Unable to create Kafka consumer from given configuration )](https://discuss.elastic.co/t/logstash-kafka-input-problem-unable-to-create-kafka-consumer-from-given-configuration/178373)
**Author:** [@ahmetkumas1](https://discuss.elastic.co/u/ahmetkumas1)\ **Replies:** 1\ **Last updated:** [April 30, 2019, 11:38am UTC](https://discuss.elastic.co/t/logstash-kafka-input-problem-unable-to-create-kafka-consumer-from-given-configuration/178373 "2019-04-30T11:38:03Z")
Hello everyone, I'm having trouble with logstash when I want to use logstash to log kafka topics here is the full output. \[2019-04-25T09:21:18,836\]\[WARN \]\[org.apache.kafka.clients.ClientUtils\] Couldn't resolve server l… --- ## [\[ANN\] Vietnamese Analysis Plugin](https://discuss.elastic.co/t/ann-vietnamese-analysis-plugin/20326)
**Author:** [@Duy\_Do](https://discuss.elastic.co/u/Duy_Do)\ **Replies:** 0\ **Last updated:** [October 20, 2014, 1:35am UTC](https://discuss.elastic.co/t/ann-vietnamese-analysis-plugin/20326 "2014-10-20T01:35:25Z")
I'm very pleased to announce that the first version of Vietnamese analysis plugin has been released https://github.com/duydo/elasticsearch-analysis-vietnamese This is my first elasticsearch plugin, it's not easy to … --- ## [Filebeat windows service is not starting](https://discuss.elastic.co/t/filebeat-windows-service-is-not-starting/157776)
**Author:** [@kommineni24](https://discuss.elastic.co/u/kommineni24)\ **Replies:** 3\ **Last updated:** [December 3, 2018, 5:17pm UTC](https://discuss.elastic.co/t/filebeat-windows-service-is-not-starting/157776 "2018-12-03T17:17:41Z")
Hi, Am using filebeat to read log files and stash it in logstash. But am not able to start the service of filebeat. As am new to ELK, I followed the instructions given in the guide and it says the below command to be e… --- ## [Query without a constant\_score and with constant\_score](https://discuss.elastic.co/t/query-without-a-constant-score-and-with-constant-score/115413)
**Author:** [@sibh8](https://discuss.elastic.co/u/sibh8)\ **Replies:** 3\ **Last updated:** [January 13, 2018, 11:52pm UTC](https://discuss.elastic.co/t/query-without-a-constant-score-and-with-constant-score/115413 "2018-01-13T23:52:09Z")
Hello, I have the following data set. POST /my\_store/products/\_bulk { "index": { "\_id": 1 }} { "price" : 10, "productID" : "XHDK-A-1293-#fJ3" } { "index": { "\_id": 2 }} { "price" : 20, "productID" : "KDKE-B-9947-#kL5" … --- ## [How to checkout the Discovery Zen settings?](https://discuss.elastic.co/t/how-to-checkout-the-discovery-zen-settings/57087)
**Author:** [@drjz](https://discuss.elastic.co/u/drjz)\ **Replies:** 6\ **Last updated:** [August 3, 2016, 10:48am UTC](https://discuss.elastic.co/t/how-to-checkout-the-discovery-zen-settings/57087 "2016-08-03T10:48:46Z")
I've update the Discovery Zen settings to increase the ping\_timeout as explained here: https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery-zen.html \_cluster/settings { "persistent" : … --- ## [Xpack License uploading Error](https://discuss.elastic.co/t/xpack-license-uploading-error/158897)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 2\ **Last updated:** [December 13, 2018, 1:43am UTC](https://discuss.elastic.co/t/xpack-license-uploading-error/158897 "2018-12-13T01:43:12Z")
Hi All , When I am enabling x-pack license , showing this error. Error encountered uploading license: Cannot install a \[PLATINUM\] license unless TLS is configured or security is disabled I am enabled xpack security an… --- ## [Delay in indexing the data](https://discuss.elastic.co/t/delay-in-indexing-the-data/213045)
**Author:** [@Ozil](https://discuss.elastic.co/u/Ozil)\ **Replies:** 7\ **Last updated:** [January 1, 2020, 7:18am UTC](https://discuss.elastic.co/t/delay-in-indexing-the-data/213045 "2020-01-01T07:18:18Z")
Hi All I am currently using 9 nodes Elasticsearch cluster in that while indexing the data.their is 5 to 10 minutes of time delay is happening. Input data EPS is about 2000 and there is no data is within the queue. How c… [Previous page](https://discuss.elastic.co/top.md?page=827&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=829&per_page=50&period=all)