# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1350 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1351 --- ## [Help for mapping a field based on a log file path location](https://discuss.elastic.co/t/help-for-mapping-a-field-based-on-a-log-file-path-location/276777)
**Author:** [@sakrayaami](https://discuss.elastic.co/u/sakrayaami)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 2:24pm UTC](https://discuss.elastic.co/t/help-for-mapping-a-field-based-on-a-log-file-path-location/276777 "2021-06-24T14:24:47Z")
Hello, I'm trying to do something very simple I think but I fail to understand how it can be done. So I ask for your help, my setup is the following: Filebeat sends IIS logs through Logstash towards Elastic. Having al… --- ## [Can I upload csv IPs to elastic, and then use it in Grafana](https://discuss.elastic.co/t/can-i-upload-csv-ips-to-elastic-and-then-use-it-in-grafana/276362)
**Author:** [@unico](https://discuss.elastic.co/u/unico)\ **Replies:** 5\ **Last updated:** [June 24, 2021, 12:54pm UTC](https://discuss.elastic.co/t/can-i-upload-csv-ips-to-elastic-and-then-use-it-in-grafana/276362 "2021-06-24T12:54:58Z")
Hello! I have CSV file with some datasets like that: PAIS; IP/PUERTO; CONEXIONES AT,Austria; 52.97.172.13:143; 6 AT,Austria; 52.97.174.21:143; 1 AT,Austria; 52.97.182.189:143; 7004 BR,Brazil; 179.151.1.251:143; 1 BR,Br… --- ## [Two ILM errors - does not point to a write index and does not point to index](https://discuss.elastic.co/t/two-ilm-errors-does-not-point-to-a-write-index-and-does-not-point-to-index/275461)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 2:01pm UTC](https://discuss.elastic.co/t/two-ilm-errors-does-not-point-to-a-write-index-and-does-not-point-to-index/275461 "2021-06-24T14:01:39Z")
I am having two ILM errors for different indexes. My primary error was (and is for the indices where I have not carried our steps mentioned below). illegal\_argument\_exception: index.lifecycle.rollover\_alias "indice nam… --- ## [Component Templates and Nested Components](https://discuss.elastic.co/t/component-templates-and-nested-components/274381)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 1:57pm UTC](https://discuss.elastic.co/t/component-templates-and-nested-components/274381 "2021-06-24T13:57:55Z")
I have been playing around with Component Templates, and I absolutely love it! Much easier to centrally manage components of an index template, rather than manually update all templates using the same components. Questi… --- ## [Elasticsearch index size difference after split in to multiple indexes](https://discuss.elastic.co/t/elasticsearch-index-size-difference-after-split-in-to-multiple-indexes/276936)
**Author:** [@Kareemulla\_Dudekula](https://discuss.elastic.co/u/Kareemulla_Dudekula)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 1:53pm UTC](https://discuss.elastic.co/t/elasticsearch-index-size-difference-after-split-in-to-multiple-indexes/276936 "2021-06-24T13:53:07Z")
Hi, I have an index with primary size 1.25 TB. I have divided/reindexed the same index into multiple(~15) indexes based on some condition. When I was sum the document count of all the indexes, the count was matching wit… --- ## [Mismatch cluster status between Kibana and Curl](https://discuss.elastic.co/t/mismatch-cluster-status-between-kibana-and-curl/276660)
**Author:** [@P.A\_Fuentes](https://discuss.elastic.co/u/P.A_Fuentes)\ **Replies:** 10\ **Last updated:** [June 24, 2021, 1:51pm UTC](https://discuss.elastic.co/t/mismatch-cluster-status-between-kibana-and-curl/276660 "2021-06-24T13:51:21Z")
Hello, I'm getting two different output of the same request "cluster status". Here the two outputs \:~ me$ curl -XGET es.mydomain.com:9200/\_cluster/health/status?pretty { "cluster\_name" : "my-es", "s… --- ## [16 Indices that I have not created](https://discuss.elastic.co/t/16-indices-that-i-have-not-created/276905)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 2\ **Last updated:** [June 24, 2021, 1:39pm UTC](https://discuss.elastic.co/t/16-indices-that-i-have-not-created/276905 "2021-06-24T13:39:52Z")
I have enabled monitoring and I see 16 indices, but I have not created any of them. Do I need them? How do I get rid of them? Below are the indices, .apm-agent-configuration .apm-custom-link .fleet-policies-7 .ki… --- ## [High number of simultaneous searches make the requests response time bigger](https://discuss.elastic.co/t/high-number-of-simultaneous-searches-make-the-requests-response-time-bigger/276927)
**Author:** [@ZoosterCo](https://discuss.elastic.co/u/ZoosterCo)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 1:16pm UTC](https://discuss.elastic.co/t/high-number-of-simultaneous-searches-make-the-requests-response-time-bigger/276927 "2021-06-24T13:16:54Z")
Hello! We have 3 warm zones with 27 indices, each with 2 shards. Each zone has up to 2.2vCPU and 8 GB RAM. Those contain billions of documents and each index has approximately 50 GB of data. We use default AWS on the ES… --- ## [Kibana server is not ready yet ubuntu](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-ubuntu/276866)
**Author:** [@Nur\_Amin\_Sifat](https://discuss.elastic.co/u/Nur_Amin_Sifat)\ **Replies:** 3\ **Last updated:** [June 24, 2021, 1:33pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-ubuntu/276866 "2021-06-24T13:33:28Z")
Browser show this kibana server is not ready yet ubuntu --- ## [Fetch data from multiple indices in near realtime](https://discuss.elastic.co/t/fetch-data-from-multiple-indices-in-near-realtime/276903)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 1:33pm UTC](https://discuss.elastic.co/t/fetch-data-from-multiple-indices-in-near-realtime/276903 "2021-06-24T13:33:24Z")
Hi, I have multiple indices for an application. eg. infra logs in infra-\*, apache logs in filebeat-\*, uptime in heartbeat-\* , applicaion in apm-\* etc. So want to create a dashboard that will have boxes for each applic… --- ## [Unokowns characters](https://discuss.elastic.co/t/unokowns-characters/276932)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 1:29pm UTC](https://discuss.elastic.co/t/unokowns-characters/276932 "2021-06-24T13:29:54Z")
Hi everyone. The file I'm reading with filebeat has special character that create problem with logstash Here an example (I know that the image are annoying but is the only way to show you the problem) There is a wa… --- ## [ML Job not working with Live data](https://discuss.elastic.co/t/ml-job-not-working-with-live-data/276790)
**Author:** [@swarali\_vartak](https://discuss.elastic.co/u/swarali_vartak)\ **Replies:** 3\ **Last updated:** [June 24, 2021, 1:03pm UTC](https://discuss.elastic.co/t/ml-job-not-working-with-live-data/276790 "2021-06-24T13:03:26Z")
Hi, I have standalone setup of elk stack (7.12.1) and I have huge amount of data pushing into elasticsearch. I created a job in ML with live data but job is not running in real time even though while creating job I hav… --- ## [Can I get the datepicker parameters to use in a KQL query in Kibana](https://discuss.elastic.co/t/can-i-get-the-datepicker-parameters-to-use-in-a-kql-query-in-kibana/276756)
**Author:** [@tumbledwyer](https://discuss.elastic.co/u/tumbledwyer)\ **Replies:** 2\ **Last updated:** [June 24, 2021, 1:01pm UTC](https://discuss.elastic.co/t/can-i-get-the-datepicker-parameters-to-use-in-a-kql-query-in-kibana/276756 "2021-06-24T13:01:26Z")
My data has multiple date fields so I would like to get the start and end dates from the datepicker to use in a KQL query to further filter my data in a Kibana visualisation. So let's say I have a document like this: {… --- ## [Winlogbeat - Not enough storage is available to complete this operation](https://discuss.elastic.co/t/winlogbeat-not-enough-storage-is-available-to-complete-this-operation/275060)
**Author:** [@ELK7](https://discuss.elastic.co/u/ELK7)\ **Replies:** 9\ **Last updated:** [June 24, 2021, 1:01pm UTC](https://discuss.elastic.co/t/winlogbeat-not-enough-storage-is-available-to-complete-this-operation/275060 "2021-06-24T13:01:06Z")
Hi, I'm running Winlogbeat to send out windows enent-logs to elastic. version 7.12.1 windows 2012R2, 138GB memory, and 300GB free space on C. for some reason , i see we're missing event logs from the security sectio… --- ## [Can't filter by date range when in updated stack](https://discuss.elastic.co/t/cant-filter-by-date-range-when-in-updated-stack/276301)
**Author:** [@caraboy](https://discuss.elastic.co/u/caraboy)\ **Replies:** 2\ **Last updated:** [June 24, 2021, 12:52pm UTC](https://discuss.elastic.co/t/cant-filter-by-date-range-when-in-updated-stack/276301 "2021-06-24T12:52:06Z")
Hi everyone, I'm new to elastic and I'm trying to migrate the ELK 5.8 to 7.11, but I'm having trouble on making the queries (also migrated) to work. I've made some changes in the Indices (doping \_type when mapping for … --- ## [Strange High CPU usage related to licensing](https://discuss.elastic.co/t/strange-high-cpu-usage-related-to-licensing/276676)
**Author:** [@elnapo](https://discuss.elastic.co/u/elnapo)\ **Replies:** 6\ **Last updated:** [June 24, 2021, 12:44pm UTC](https://discuss.elastic.co/t/strange-high-cpu-usage-related-to-licensing/276676 "2021-06-24T12:44:04Z")
Encountered a strange Cluster behavior on a central logging cluster where about 50 filebeats are ingesting data. It seems that most of the CPU is used for security operations. Here is what GET \_nodes/hot\_threads is say… --- ## [ELK Heartbeat x509: certificate signed by unknown authority for Sectigo CA](https://discuss.elastic.co/t/elk-heartbeat-x509-certificate-signed-by-unknown-authority-for-sectigo-ca/276871)
**Author:** [@ezramiller](https://discuss.elastic.co/u/ezramiller)\ **Replies:** 5\ **Last updated:** [June 24, 2021, 12:36pm UTC](https://discuss.elastic.co/t/elk-heartbeat-x509-certificate-signed-by-unknown-authority-for-sectigo-ca/276871 "2021-06-24T12:36:46Z")
Hello everyone. I am monitoring some websites and a lot of these websites using Sectigo SSL Certificates. Heartbeat showing these websites with Sectigo certificates as x509: certificate signed by unknown authority. Why i… --- ## [Filebeat configuration without kibana setup is not working](https://discuss.elastic.co/t/filebeat-configuration-without-kibana-setup-is-not-working/276864)
**Author:** [@Mahesh\_Gadagi](https://discuss.elastic.co/u/Mahesh_Gadagi)\ **Replies:** 2\ **Last updated:** [June 24, 2021, 12:15pm UTC](https://discuss.elastic.co/t/filebeat-configuration-without-kibana-setup-is-not-working/276864 "2021-06-24T12:15:36Z")
Hello, Currently, I have filebeat version 7.9.1 and trying to use it with Elasticsearch 7.9.1, I don't want to load any dashboards to Kibana as I just want to push the data to specific index of Elastic search, I have us… --- ## [Disptached index, is it possible to filter across indexes by another index value?](https://discuss.elastic.co/t/disptached-index-is-it-possible-to-filter-across-indexes-by-another-index-value/276920)
**Author:** [@Hugo\_Martin](https://discuss.elastic.co/u/Hugo_Martin)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 11:24am UTC](https://discuss.elastic.co/t/disptached-index-is-it-possible-to-filter-across-indexes-by-another-index-value/276920 "2021-06-24T11:24:46Z")
Hi everyone, I'm pretty new to ELK and I have few questions about indexes relations. Some context: we use MongoDB as database to interract with microservices, and use monstache to sync Mongo and ES, it works perfectly.… --- ## [Nesting some other path in a subaggregation inside another nested path](https://discuss.elastic.co/t/nesting-some-other-path-in-a-subaggregation-inside-another-nested-path/276883)
**Author:** [@broy](https://discuss.elastic.co/u/broy)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 6:54am UTC](https://discuss.elastic.co/t/nesting-some-other-path-in-a-subaggregation-inside-another-nested-path/276883 "2021-06-24T06:54:14Z")
Minimal schema { "mappings": { "\_doc": { "dynamic": "false", "\_source": { "includes": \[ \] }, "properties": { "\_\_collection": { "type": "keyword"… --- ## [Unique count number of deviations from average score in Kibana Maps](https://discuss.elastic.co/t/unique-count-number-of-deviations-from-average-score-in-kibana-maps/276906)
**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 11:13am UTC](https://discuss.elastic.co/t/unique-count-number-of-deviations-from-average-score-in-kibana-maps/276906 "2021-06-24T11:13:23Z")
Hey, I'm trying to build a map (using the 'Maps' feature) which will represent the number of unique device type that are deviating in a certain measurement from the average of this measurement in a certain area. If the… --- ## [Is it possible to different time filters for different bucket in a TSVB visualization](https://discuss.elastic.co/t/is-it-possible-to-different-time-filters-for-different-bucket-in-a-tsvb-visualization/276913)
**Author:** [@Alesora](https://discuss.elastic.co/u/Alesora)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 10:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-different-time-filters-for-different-bucket-in-a-tsvb-visualization/276913 "2021-06-24T10:29:02Z")
Hi, I would like to have a gauge in kibana with the turnover increasing over the month, and the middle of the gauge has to be the average turnover. Here is what I've done, it only shows the ratio, not the real values b… --- ## [Trouble with creating index using kibana plugins](https://discuss.elastic.co/t/trouble-with-creating-index-using-kibana-plugins/275974)
**Author:** [@kibanaPluginDev](https://discuss.elastic.co/u/kibanaPluginDev)\ **Replies:** 4\ **Last updated:** [June 24, 2021, 10:27am UTC](https://discuss.elastic.co/t/trouble-with-creating-index-using-kibana-plugins/275974 "2021-06-24T10:27:33Z")
I wanted to use the create index and add documents in elasticsearch using the kibana plugin. Is there an API to do the same or if there is an existing implementation for it ? --- ## [Graph logs values and not syntetic metrics about logs](https://discuss.elastic.co/t/graph-logs-values-and-not-syntetic-metrics-about-logs/276910)
**Author:** [@PatrikM](https://discuss.elastic.co/u/PatrikM)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 10:22am UTC](https://discuss.elastic.co/t/graph-logs-values-and-not-syntetic-metrics-about-logs/276910 "2021-06-24T10:22:00Z")
I have a database that has some metrics I would like to chart in elasticsearch. I managed to send those metrics to elasticsearch and I'm able to view them in the kibana discover as logs. I'm looking on how I could be … --- ## [Rollback Pipeline changes in kibana](https://discuss.elastic.co/t/rollback-pipeline-changes-in-kibana/276897)
**Author:** [@Changra](https://discuss.elastic.co/u/Changra)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 9:04am UTC](https://discuss.elastic.co/t/rollback-pipeline-changes-in-kibana/276897 "2021-06-24T09:04:56Z")
Hi Team, I need a small help can anyone help me if I made any changes in a pipeline in kibana and saved it but now if i want to revert those changes back is there any way out. Regards, Neha Changra --- ## [Kibana/Elasticsearch Alert](https://discuss.elastic.co/t/kibana-elasticsearch-alert/276891)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 8:40am UTC](https://discuss.elastic.co/t/kibana-elasticsearch-alert/276891 "2021-06-24T08:40:12Z")
Hello Expert, I have realtime data like data of stock market.. I want to create an alert when the price increase/decrease to 10%, but i have just field of price in my database. for example... I have done in Timelion bu… --- ## [Logstash-plugin-s3 Error: Net::OpenTimeout](https://discuss.elastic.co/t/logstash-plugin-s3-error-net-opentimeout/276890)
**Author:** [@xiaoloutingfengyu](https://discuss.elastic.co/u/xiaoloutingfengyu)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 8:27am UTC](https://discuss.elastic.co/t/logstash-plugin-s3-error-net-opentimeout/276890 "2021-06-24T08:27:23Z")
\[2021-05-26T10:19:43,686\]\[ERROR\]\[logstash.javapipeline \]\[main\]\[9a2225c4d3e20a639cd009e56ba032fdbc47fc0df0134b087544ef4ed11a3aea\] A plugin had an unrecoverable error. Will restart this plugin. Pipeline\_id:main Plugin… --- ## [Logstash problem with images](https://discuss.elastic.co/t/logstash-problem-with-images/276011)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 11\ **Last updated:** [June 24, 2021, 7:29am UTC](https://discuss.elastic.co/t/logstash-problem-with-images/276011 "2021-06-24T07:29:30Z")
Hi evrey one, I'am new with elasticsearch and logstash. The problem: I want to use logstash to obtain all image of a file system structure, (I don't need the immage i only need the informetion (Like: path, name)) but w… --- ## [Insert GeoIP processor code in Logstash Filtering](https://discuss.elastic.co/t/insert-geoip-processor-code-in-logstash-filtering/276884)
**Author:** [@valhalla](https://discuss.elastic.co/u/valhalla)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 7:14am UTC](https://discuss.elastic.co/t/insert-geoip-processor-code-in-logstash-filtering/276884 "2021-06-24T07:14:30Z")
Hi team, How can I add this geoip processor within Logstash's filtering? I.e Filter { Mutate{ ... }} In general you need first to mannualy add this pipeline to Kibana, I want to skip this mannualy adding … --- ## [Elasticsearch mapping with nested objects](https://discuss.elastic.co/t/elasticsearch-mapping-with-nested-objects/276888)
**Author:** [@mskocabay](https://discuss.elastic.co/u/mskocabay)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 7:30am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-with-nested-objects/276888 "2021-06-24T07:30:18Z")
It is my mapping. product\_base is nested object also manufacturer is child of product\_base and nested object. When i create my doc, if product\_base count more than 1 , seems product\_base.0, product\_base.1 . However i co… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1349) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1351)