# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1406 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1407 --- ## [Saving a specific array element in Logstash](https://discuss.elastic.co/t/saving-a-specific-array-element-in-logstash/273556)
**Author:** [@tumbledwyer](https://discuss.elastic.co/u/tumbledwyer)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 4:47pm UTC](https://discuss.elastic.co/t/saving-a-specific-array-element-in-logstash/273556 "2021-05-20T16:47:12Z")
Hi I am receiving a JSON object with an array property. I would like to search the array and save only the element that matches my criteria. My input looks like this: { "identifier": \[ { "system" : "Source1", "va… --- ## [Implementing Kibana map plugin into custom app](https://discuss.elastic.co/t/implementing-kibana-map-plugin-into-custom-app/273484)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 4:35pm UTC](https://discuss.elastic.co/t/implementing-kibana-map-plugin-into-custom-app/273484 "2021-05-20T16:35:42Z")
Hi team, i need to use map to display issues. Is it possible to implement map plugin from Kibana to my custom app? Kibana 7.10.0 --- ## [LogStash::ConvergeResult::FailedAction while tryting to use pipeline output](https://discuss.elastic.co/t/logstash-failedaction-while-tryting-to-use-pipeline-output/273564)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 4:30pm UTC](https://discuss.elastic.co/t/logstash-failedaction-while-tryting-to-use-pipeline-output/273564 "2021-05-20T16:30:00Z")
Hi folks, this is my test.conf: input { beats { port =\> 6150 } } output { if \[agent\]\[type\] == "metricbeat" { elasticsearch { ... } } else if \[fields\]\[log\_type\] == "audit" { elasticsearch { … --- ## [SLM: Only one snapshot can be taken at a time. To avoid snapshot failures, edit or delete the policies](https://discuss.elastic.co/t/slm-only-one-snapshot-can-be-taken-at-a-time-to-avoid-snapshot-failures-edit-or-delete-the-policies/273500)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 4\ **Last updated:** [May 20, 2021, 4:02pm UTC](https://discuss.elastic.co/t/slm-only-one-snapshot-can-be-taken-at-a-time-to-avoid-snapshot-failures-edit-or-delete-the-policies/273500 "2021-05-20T16:02:29Z")
Hi, Does it mean that if you do schedule multiple snapshots on the same time they: Will be queued, meaning that they might start later than scheduled but eventually they will execute and take a snapshot. Or does i… --- ## [There is insufficient memory for the Java Runtime Environment to continue while using --config.test\_and\_exit](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue-while-using-config-test-and-exit/273561)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 3:42pm UTC](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue-while-using-config-test-and-exit/273561 "2021-05-20T15:42:59Z")
When I try to test the config of my logstash pipeline I run into this error: \[bash\]$ logstash --config.test\_and\_exit -f /path/to/config.conf OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in … --- ## [Introduce data with more lenght than 255 characters in Data Table](https://discuss.elastic.co/t/introduce-data-with-more-lenght-than-255-characters-in-data-table/273545)
**Author:** [@pablixelastic](https://discuss.elastic.co/u/pablixelastic)\ **Replies:** 5\ **Last updated:** [May 20, 2021, 3:07pm UTC](https://discuss.elastic.co/t/introduce-data-with-more-lenght-than-255-characters-in-data-table/273545 "2021-05-20T15:07:56Z")
Hi! Is there any solution to watch data with more than 255 characters from MySQL in a Data Table placed inside a dashboard of Kibana? I have this response: Can someone help me with this? Thank you very much!! --- ## [Aggregation across multiple indices](https://discuss.elastic.co/t/aggregation-across-multiple-indices/271350)
**Author:** [@ice2021](https://discuss.elastic.co/u/ice2021)\ **Replies:** 8\ **Last updated:** [May 20, 2021, 3:07pm UTC](https://discuss.elastic.co/t/aggregation-across-multiple-indices/271350 "2021-05-20T15:07:36Z")
I have 2 indices and they store data of the same mappings on different dates - t1 and t2. I have a multi term aggregation below which works on a single index. How can I get elasticsearch to return the same aggregation a… --- ## [Is there a KQL API endpoint and/or a way to run KQL queries from CLI?](https://discuss.elastic.co/t/is-there-a-kql-api-endpoint-and-or-a-way-to-run-kql-queries-from-cli/273557)
**Author:** [@el\_tedward](https://discuss.elastic.co/u/el_tedward)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 2:49pm UTC](https://discuss.elastic.co/t/is-there-a-kql-api-endpoint-and-or-a-way-to-run-kql-queries-from-cli/273557 "2021-05-20T14:49:20Z")
In older versions of Kibana, you could get the full Kibana query syntax by just running query\_string queries with a few options that Kibana sets by default, though it doesn't appear you can do that any longer (in a fully… --- ## [Elasticsearch cluster data migration](https://discuss.elastic.co/t/elasticsearch-cluster-data-migration/273538)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 2:36pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-data-migration/273538 "2021-05-20T14:36:10Z")
I have 10 nodes in one cluster(in a server). I want to dump all documents from this cluster. After that, import these docs to new cluster. The new cluster will be have only one node. I have followed this tutorial After … --- ## [When will vega-lite version 5 be supported?](https://discuss.elastic.co/t/when-will-vega-lite-version-5-be-supported/273551)
**Author:** [@jlvrhee](https://discuss.elastic.co/u/jlvrhee)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 2:30pm UTC](https://discuss.elastic.co/t/when-will-vega-lite-version-5-be-supported/273551 "2021-05-20T14:30:17Z")
From beginning of this year vega-lite 5 has been released. https://github.com/vega/vega-lite/releases When will this new version be supported in Kibana? --- ## [Error initializing beat: error loading config file: stat filebeat.yml: no such file or directory](https://discuss.elastic.co/t/error-initializing-beat-error-loading-config-file-stat-filebeat-yml-no-such-file-or-directory/273415)
**Author:** [@Marc\_Aurnold](https://discuss.elastic.co/u/Marc_Aurnold)\ **Replies:** 3\ **Last updated:** [May 20, 2021, 2:28pm UTC](https://discuss.elastic.co/t/error-initializing-beat-error-loading-config-file-stat-filebeat-yml-no-such-file-or-directory/273415 "2021-05-20T14:28:31Z")
Hey Teams Elasticsearch, When I am running this command: ./filebeat -e -c filebeat.yml output: -bash: ./filebeat: cannot execute binary file: Exec format error I would like to know which advise can help me to solve … --- ## [How can I setup Alert and Actions privileges for a specific user role?](https://discuss.elastic.co/t/how-can-i-setup-alert-and-actions-privileges-for-a-specific-user-role/271121)
**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 2:22pm UTC](https://discuss.elastic.co/t/how-can-i-setup-alert-and-actions-privileges-for-a-specific-user-role/271121 "2021-05-20T14:22:23Z")
I am trying to setup roles in elasticsearch so that the user can create and setup alers in Alerts and Actions tab. I am getting "No permissions to create alerts" message in Alerts Tab. Any idea how I can setup these acce… --- ## [Kibana Local Set Up - Permissions Issue](https://discuss.elastic.co/t/kibana-local-set-up-permissions-issue/272681)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 2:11pm UTC](https://discuss.elastic.co/t/kibana-local-set-up-permissions-issue/272681 "2021-05-20T14:11:03Z")
I have setup kibana as per the guide and I have checked out version as well. But while running bootstrap cmd, I have been presented with below error info If you think this is a bug, please open a bug report with the inf… --- ## [Filebeat not writing to index](https://discuss.elastic.co/t/filebeat-not-writing-to-index/273422)
**Author:** [@aidenosi](https://discuss.elastic.co/u/aidenosi)\ **Replies:** 3\ **Last updated:** [May 20, 2021, 1:35pm UTC](https://discuss.elastic.co/t/filebeat-not-writing-to-index/273422 "2021-05-20T13:35:53Z")
Hello, I've been trying to set up Filebeat (6.8.0) on our Linux machines for a few days now but keep running into this issue where it seems that Filebeat stops communicating/writing to Elastic. Config below: filebeat:… --- ## [Multiple Logstash outputs vs pipeline-to-pipeline communcations](https://discuss.elastic.co/t/multiple-logstash-outputs-vs-pipeline-to-pipeline-communcations/273546)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 1:24pm UTC](https://discuss.elastic.co/t/multiple-logstash-outputs-vs-pipeline-to-pipeline-communcations/273546 "2021-05-20T13:24:25Z")
Hi folks, I have following use case: I want to create one index for each kubernetes namespace (and its own lifecycle policy) and I want to use the ILM. As far as I understand I have two approaches: I have one pipelin… --- ## [From SQL Server Management Studio to Elastic Search: config file](https://discuss.elastic.co/t/from-sql-server-management-studio-to-elastic-search-config-file/273544)
**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 1:09pm UTC](https://discuss.elastic.co/t/from-sql-server-management-studio-to-elastic-search-config-file/273544 "2021-05-20T13:09:03Z")
Good Evening. I'm new on the ELK stack and for the first time I'm trying to import some data from SQL Server Manamenet Studio database to the ElasticSearch. I know there is the necessity to download a driver to use the… --- ## [Painless Script - Unexpected characters](https://discuss.elastic.co/t/painless-script-unexpected-characters/273502)
**Author:** [@Leuteris](https://discuss.elastic.co/u/Leuteris)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 1:08pm UTC](https://discuss.elastic.co/t/painless-script-unexpected-characters/273502 "2021-05-20T13:08:03Z")
I am trying to update a doc using painless scripts. My document contain fields like "a4ayc/8" (the field name contains the character /). Document sample: { "\_index" : "user\_profile", "\_type" : "\_doc", "\_id"… --- ## [Search for text in a string](https://discuss.elastic.co/t/search-for-text-in-a-string/273457)
**Author:** [@cyberguy2891](https://discuss.elastic.co/u/cyberguy2891)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 1:06pm UTC](https://discuss.elastic.co/t/search-for-text-in-a-string/273457 "2021-05-20T13:06:15Z")
Hi, Im fairly new to elastic search and Ive been stuck on these for 8 hrs now. I have a log field like this: Retry Exhausted Error Get segment: GET request failed after 1 attempts to record the segment (final status co… --- ## [Painless Reindex Script saving long as integer](https://discuss.elastic.co/t/painless-reindex-script-saving-long-as-integer/273445)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 12:44pm UTC](https://discuss.elastic.co/t/painless-reindex-script-saving-long-as-integer/273445 "2021-05-20T12:44:12Z")
Hi all, I am trying to use a painless script as part of a reindex to multiply a long by a number, and then save it as the source field. However, when the new value is saved it is saved as an integer instead of a long re… --- ## [Error WATCHER smtp.host](https://discuss.elastic.co/t/error-watcher-smtp-host/273516)
**Author:** [@milasi99](https://discuss.elastic.co/u/milasi99)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 12:31pm UTC](https://discuss.elastic.co/t/error-watcher-smtp-host/273516 "2021-05-20T12:31:43Z")
Hi, i have the elasticsearch version 7.12, and im trying do a Watcher. I have that error: Summary{ "watch\_id": "prueba", "node": "RWT064xBSfu5wmGh9bksrA", "state"… --- ## [How Kibana Transforms work?](https://discuss.elastic.co/t/how-kibana-transforms-work/273370)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 5\ **Last updated:** [May 20, 2021, 12:19pm UTC](https://discuss.elastic.co/t/how-kibana-transforms-work/273370 "2021-05-20T12:19:41Z")
Hi, My question is Can we make Kibana Transforms do the same work as Rollup job does? As per I analyzed, Transforms is grouping and doing aggregations on events and putting them in another index. But I want to keep nu… --- ## [Logstash pipeline problem (logstash not appearing in kibana)](https://discuss.elastic.co/t/logstash-pipeline-problem-logstash-not-appearing-in-kibana/273429)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 5\ **Last updated:** [May 20, 2021, 11:59am UTC](https://discuss.elastic.co/t/logstash-pipeline-problem-logstash-not-appearing-in-kibana/273429 "2021-05-20T11:59:38Z")
Hi guys, thank you for having me on this forum. I am trying to set up ELK for the first time. I have followed installation instructions from elastic.co with numbers of videos on yt and I have finally installed ELK. The… --- ## [How to chain synonyms in Elasticsearch](https://discuss.elastic.co/t/how-to-chain-synonyms-in-elasticsearch/273522)
**Author:** [@nik0219](https://discuss.elastic.co/u/nik0219)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 12:02pm UTC](https://discuss.elastic.co/t/how-to-chain-synonyms-in-elasticsearch/273522 "2021-05-20T12:02:39Z")
In my Application I want to create the following hierarchy: hobby -\> sport -\> football When looking for the word hobby, I want to check for the words sport and football as well, when looking for the word sport I also w… --- ## [Are there any size limits snapshot in Elasticsearch](https://discuss.elastic.co/t/are-there-any-size-limits-snapshot-in-elasticsearch/273517)
**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 11:48am UTC](https://discuss.elastic.co/t/are-there-any-size-limits-snapshot-in-elasticsearch/273517 "2021-05-20T11:48:52Z")
I would like to understand if there are any size limitations when save/restore snapshots? Are there such? --- ## [Mapping two string values or create kv pair](https://discuss.elastic.co/t/mapping-two-string-values-or-create-kv-pair/273518)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 11:38am UTC](https://discuss.elastic.co/t/mapping-two-string-values-or-create-kv-pair/273518 "2021-05-20T11:38:28Z")
my current pipeline in logstash after running on input log data is producing below output , i need to map it one to one..or create kv such as .. pl-3: 361 pl-4: 366 etc.... "header" =\> "Parameter … --- ## [Inline script for round off float field is not working](https://discuss.elastic.co/t/inline-script-for-round-off-float-field-is-not-working/273454)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 11:08am UTC](https://discuss.elastic.co/t/inline-script-for-round-off-float-field-is-not-working/273454 "2021-05-20T11:08:17Z")
Hi all, I'm trying to display average of a field in visualization bucket. But when i use below code in inline text of advanced JSON for an integer value, I dont get. I dont want decimal values. { "script": { "inlin… --- ## [MongoDB Module - Memory / Connection issues over time](https://discuss.elastic.co/t/mongodb-module-memory-connection-issues-over-time/273512)
**Author:** [@Nessworthy](https://discuss.elastic.co/u/Nessworthy)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 11:03am UTC](https://discuss.elastic.co/t/mongodb-module-memory-connection-issues-over-time/273512 "2021-05-20T11:03:17Z")
Agent OS: Amazon Linux 2 AMI 2.0.20210326.0 x86\_64 HVM gp2 Type: t3.medium (v)CPUs: 2 Memory: 4GB MongoDB Version: 4.0.19 Metricbeat Version: 6.6.0 I have the following configuration for the module: - hosts: \[… --- ## [Grok and curly brackets](https://discuss.elastic.co/t/grok-and-curly-brackets/273491)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 10:36am UTC](https://discuss.elastic.co/t/grok-and-curly-brackets/273491 "2021-05-20T10:36:25Z")
Dear team, I have a grok filter which needs to parse following part of line from the Haproxy logs: {\*/\*||en-US|10.12.132.200:30012||||1997-04-09-17.02.03.246664|pclient\_us} Now how do I remove the brackets from beginn… --- ## [Reindex version conflict](https://discuss.elastic.co/t/reindex-version-conflict/273352)
**Author:** [@alexs1](https://discuss.elastic.co/u/alexs1)\ **Replies:** 4\ **Last updated:** [May 20, 2021, 10:35am UTC](https://discuss.elastic.co/t/reindex-version-conflict/273352 "2021-05-20T10:35:19Z")
Hello, What is exactly a version conflict ? An example will be appreciated. Thank you --- ## [Export to csv/excel from kibana](https://discuss.elastic.co/t/export-to-csv-excel-from-kibana/39237)
**Author:** [@jsp08](https://discuss.elastic.co/u/jsp08)\ **Replies:** 15\ **Last updated:** [May 20, 2021, 9:58am UTC](https://discuss.elastic.co/t/export-to-csv-excel-from-kibana/39237 "2021-05-20T09:58:46Z")
I have the dashboard with the graphs working without any issue. One of the requirements for my project is the ability to download the file(csv/excel). In kibana the only option i saw for downloading the file is by click… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1405) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1407)