# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1449 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1450 --- ## [Conditions are not working properly. Seems to match documentation](https://discuss.elastic.co/t/conditions-are-not-working-properly-seems-to-match-documentation/270966)
**Author:** [@ARDiver86](https://discuss.elastic.co/u/ARDiver86)\ **Replies:** 9\ **Last updated:** [April 22, 2021, 5:14pm UTC](https://discuss.elastic.co/t/conditions-are-not-working-properly-seems-to-match-documentation/270966 "2021-04-22T17:14:52Z")
I am attempting to send documents to specific indexes so I can handle the lifecycle better with various types of documents. I just cannot get it to work when trying to involve multiple fields. For example this works: -… --- ## [Index Not Available in Kibana Maps](https://discuss.elastic.co/t/index-not-available-in-kibana-maps/270992)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 1\ **Last updated:** [April 22, 2021, 5:07pm UTC](https://discuss.elastic.co/t/index-not-available-in-kibana-maps/270992 "2021-04-22T17:07:40Z")
I am attempting to create a Map in Kibana, but my index is not available as an option. I have found several posts around this, but the common issue in those cases was that no geo\_point field is specified in the Index Tem… --- ## [Grok debugger parse problem](https://discuss.elastic.co/t/grok-debugger-parse-problem/270124)
**Author:** [@kenzi](https://discuss.elastic.co/u/kenzi)\ **Replies:** 1\ **Last updated:** [April 22, 2021, 4:55pm UTC](https://discuss.elastic.co/t/grok-debugger-parse-problem/270124 "2021-04-22T16:55:33Z")
Good day, I have some problem when I am trying to debug Grok pattern via Kibana For some reasons, it is not matching, but should. Fe from http://grokdebug.herokuapp.com/ I can parse it without problems: Can you … --- ## [How can I set heap memory for jruby in logstash 7.4?](https://discuss.elastic.co/t/how-can-i-set-heap-memory-for-jruby-in-logstash-7-4/270990)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 0\ **Last updated:** [April 22, 2021, 4:32pm UTC](https://discuss.elastic.co/t/how-can-i-set-heap-memory-for-jruby-in-logstash-7-4/270990 "2021-04-22T16:32:53Z")
Hi all, Please let me know how can I set jruby\_opts for controlling jruby memory which is default 500 mb, I need to control by setting it low and high. Thanks --- ## [Add time interval in between each document's timestamp](https://discuss.elastic.co/t/add-time-interval-in-between-each-documents-timestamp/270988)
**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\ **Replies:** 0\ **Last updated:** [April 22, 2021, 4:24pm UTC](https://discuss.elastic.co/t/add-time-interval-in-between-each-documents-timestamp/270988 "2021-04-22T16:24:45Z")
Hi Community! I hope you're doing great :slight\_smile: I'm struggling to give a 5 seconds window/interval of time between each document inserted to elasticsearch in the timestamp field. Actually, I have this pipeline: … --- ## [CORS multi-value response headers don't work in IE](https://discuss.elastic.co/t/cors-multi-value-response-headers-dont-work-in-ie/270618)
**Author:** [@JohT](https://discuss.elastic.co/u/JohT)\ **Replies:** 1\ **Last updated:** [April 22, 2021, 4:10pm UTC](https://discuss.elastic.co/t/cors-multi-value-response-headers-dont-work-in-ie/270618 "2021-04-22T16:10:50Z")
Hi, i've installed the latest version 7.12. of elasticsearch on windows. While trying out a multi search api call from my local live server with XHR i got the same problem that had already been reported here: GitHub I… --- ## [Elasticsearch service runs for 10s and then goes down](https://discuss.elastic.co/t/elasticsearch-service-runs-for-10s-and-then-goes-down/270975)
**Author:** [@Pawan\_Kumar](https://discuss.elastic.co/u/Pawan_Kumar)\ **Replies:** 2\ **Last updated:** [April 22, 2021, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-service-runs-for-10s-and-then-goes-down/270975 "2021-04-22T15:31:40Z")
OS: CentOS hostnamectl:- Virtualization: kvm Operating System: CentOS Linux 7 (AltArch) CPE OS Name: cpe:/o:centos:centos:7:server Kernel: Linux 3.10.0-1160.21.1.el7.ppc64le Architecture: ppc64-le Elasticsearch ve… --- ## [Auditbeat - can it monitor Apache logs](https://discuss.elastic.co/t/auditbeat-can-it-monitor-apache-logs/270811)
**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\ **Replies:** 1\ **Last updated:** [April 22, 2021, 3:18pm UTC](https://discuss.elastic.co/t/auditbeat-can-it-monitor-apache-logs/270811 "2021-04-22T15:18:30Z")
hi, please can somebody helps me to know if there is a method to collect apache server logs by auditbeat regards --- ## [How to trigger mail in watcher if date&time difference more than 2 sec](https://discuss.elastic.co/t/how-to-trigger-mail-in-watcher-if-date-time-difference-more-than-2-sec/270980)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 0\ **Last updated:** [April 22, 2021, 3:16pm UTC](https://discuss.elastic.co/t/how-to-trigger-mail-in-watcher-if-date-time-difference-more-than-2-sec/270980 "2021-04-22T15:16:36Z")
Hello all, How I can trigger mail in watcher if date&time difference more than 2 sec . I have 2 different log line. First log line contain date & time for sent at and second log line contain date & time for received at… --- ## [Please Help to understand performance problem](https://discuss.elastic.co/t/please-help-to-understand-performance-problem/270862)
**Author:** [@evgeniy777](https://discuss.elastic.co/u/evgeniy777)\ **Replies:** 2\ **Last updated:** [April 22, 2021, 3:13pm UTC](https://discuss.elastic.co/t/please-help-to-understand-performance-problem/270862 "2021-04-22T15:13:49Z")
We just started to use Elastic Cloud solution. When swithced a part of our services to it - we started to have performance degradation. My deployment have 2 data nodes HOT, and 2 nodes for WARM storage. Instance #0 … --- ## [Update of the Geolite database](https://discuss.elastic.co/t/update-of-the-geolite-database/270801)
**Author:** [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Replies:** 12\ **Last updated:** [April 22, 2021, 10:32am UTC](https://discuss.elastic.co/t/update-of-the-geolite-database/270801 "2021-04-22T10:32:58Z")
I configured the Geoip and the Geolite database in logstash. How often do you update the Geolite database? Regards, --- ## [Problem with logstash input kinesis plugin while reading data from the stream](https://discuss.elastic.co/t/problem-with-logstash-input-kinesis-plugin-while-reading-data-from-the-stream/270969)
**Author:** [@dbElastic](https://discuss.elastic.co/u/dbElastic)\ **Replies:** 0\ **Last updated:** [April 22, 2021, 1:58pm UTC](https://discuss.elastic.co/t/problem-with-logstash-input-kinesis-plugin-while-reading-data-from-the-stream/270969 "2021-04-22T13:58:23Z")
Caught exception while sync'ing Kinesis shards and leases com.amazonaws.services.kinesis.model.ResourceNotFoundException: Stream aws-xxx-xxx-xxxx-kinesis-xxxxxx under account xxxxxxxxxx not found. (Service: AmazonKinesi… --- ## [Patching Reprots](https://discuss.elastic.co/t/patching-reprots/270952)
**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\ **Replies:** 2\ **Last updated:** [April 22, 2021, 3:03pm UTC](https://discuss.elastic.co/t/patching-reprots/270952 "2021-04-22T15:03:42Z")
Hi, Im interested to see if anyone has implemented a visual that reports on server patching status. Im running through the options of pulling in data from yum.log and other to command outputs to display the patching sta… --- ## [Too many dynamic script compilations](https://discuss.elastic.co/t/too-many-dynamic-script-compilations/270932)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 1\ **Last updated:** [April 22, 2021, 2:59pm UTC](https://discuss.elastic.co/t/too-many-dynamic-script-compilations/270932 "2021-04-22T14:59:04Z")
Elasticsearch and Kibana version: 7.3.1 Number of nodes: 5 In our documents we have a nested fields and since we wanted to create visualizations using those nested fields, we created scripted fields in Kibana managemen… --- ## [OS upgrade removed my ES Install](https://discuss.elastic.co/t/os-upgrade-removed-my-es-install/270397)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 4\ **Last updated:** [April 22, 2021, 2:58pm UTC](https://discuss.elastic.co/t/os-upgrade-removed-my-es-install/270397 "2021-04-22T14:58:41Z")
Good Day, We currently run ES 5.x ( we are in the process of upgrading ) but we were running our install on an Ubuntu 16.04 server. So the team went and upgraded the OS of the server to 18.04 and when it was said and d… --- ## [Logstash run pipeline but not send data to output](https://discuss.elastic.co/t/logstash-run-pipeline-but-not-send-data-to-output/270960)
**Author:** [@Omar1](https://discuss.elastic.co/u/Omar1)\ **Replies:** 2\ **Last updated:** [April 22, 2021, 2:57pm UTC](https://discuss.elastic.co/t/logstash-run-pipeline-but-not-send-data-to-output/270960 "2021-04-22T14:57:30Z")
I'm trying to use logstash Jdbc plugin to synchronize data from a Postgres database to some ouput (elastic, rabbitMq). The problem is that logstash is running well every hour (I configured the cronJob like that). Logst… --- ## [Redundancy for syslog](https://discuss.elastic.co/t/redundancy-for-syslog/270943)
**Author:** [@debrt](https://discuss.elastic.co/u/debrt)\ **Replies:** 1\ **Last updated:** [April 22, 2021, 2:56pm UTC](https://discuss.elastic.co/t/redundancy-for-syslog/270943 "2021-04-22T14:56:38Z")
Hello, I am trying to deploy a redundant solution where I have end devices logging over syslog to my logstash server. I already have a single logstash server running. Is is possible to send the syslog logs to multiple … --- ## [Multi Line Pattern](https://discuss.elastic.co/t/multi-line-pattern/270976)
**Author:** [@Anthony\_Azzopardi](https://discuss.elastic.co/u/Anthony_Azzopardi)\ **Replies:** 0\ **Last updated:** [April 22, 2021, 2:51pm UTC](https://discuss.elastic.co/t/multi-line-pattern/270976 "2021-04-22T14:51:01Z")
I am currently having a hard time trying to parse a customized log to logstash using filebeat. My servers are windows servers, using the latest version of filebeat 7.0.12. the sample log Received XML Message: SECURITYLO… --- ## [Multi Line Pattern](https://discuss.elastic.co/t/multi-line-pattern/270972)
**Author:** [@Anthony\_Azzopardi](https://discuss.elastic.co/u/Anthony_Azzopardi)\ **Replies:** 1\ **Last updated:** [April 22, 2021, 2:46pm UTC](https://discuss.elastic.co/t/multi-line-pattern/270972 "2021-04-22T14:46:08Z")
Hello everyone, I am currently having a hard time trying to parse a customized log to logstash using filebeat. My servers are windows servers, using the latest version of filebeat 7.0.12. the sample log Received XML Me… --- ## [I'm lost to why beats isn't passing logs to logstash](https://discuss.elastic.co/t/im-lost-to-why-beats-isnt-passing-logs-to-logstash/270626)
**Author:** [@rodrigoross](https://discuss.elastic.co/u/rodrigoross)\ **Replies:** 11\ **Last updated:** [April 22, 2021, 2:42pm UTC](https://discuss.elastic.co/t/im-lost-to-why-beats-isnt-passing-logs-to-logstash/270626 "2021-04-22T14:42:01Z")
I really didn't want to open a new topic, but I can't seem to understand why my logstash don't receive logs from filebeat. I'm new and used a ELK docker to setup the enviroment. After editing the logstash.conf, I ran th… --- ## [Kibana \\n charecter](https://discuss.elastic.co/t/kibana-n-charecter/270703)
**Author:** [@ghaithTK](https://discuss.elastic.co/u/ghaithTK)\ **Replies:** 6\ **Last updated:** [April 22, 2021, 2:28pm UTC](https://discuss.elastic.co/t/kibana-n-charecter/270703 "2021-04-22T14:28:01Z")
hi I have problem in kibana. I upgraded ELK stack from 7.5.1 to 7.12.0 and I faced problem in kibana where it not working with \\n....Note in JSON i have \\n character --- ## [Winlogbeat : read log files](https://discuss.elastic.co/t/winlogbeat-read-log-files/270973)
**Author:** [@Nybble](https://discuss.elastic.co/u/Nybble)\ **Replies:** 0\ **Last updated:** [April 22, 2021, 2:23pm UTC](https://discuss.elastic.co/t/winlogbeat-read-log-files/270973 "2021-04-22T14:23:00Z")
Hello, My question is simple but I can't really find a clear answer. Is it possible to read a log files with Winlogbeat directly ? My company have some Windows Server with multiple services (AD, DNS, DHCP, ...) and we … --- ## [INSPIRE compatible dataset - WMS layer on a map](https://discuss.elastic.co/t/inspire-compatible-dataset-wms-layer-on-a-map/270929)
**Author:** [@heihieta](https://discuss.elastic.co/u/heihieta)\ **Replies:** 3\ **Last updated:** [April 22, 2021, 2:19pm UTC](https://discuss.elastic.co/t/inspire-compatible-dataset-wms-layer-on-a-map/270929 "2021-04-22T14:19:28Z")
Hi, I try to add WMS layer to a map in Kibana, but I get an error "Unable to load service metadata" if I use INSPIRE compatible url. Example url: http://paikkatieto.ymparisto.fi/ArcGIS/services/INSPIRE/SYKE\_Hydrografi… --- ## [Splitting Data](https://discuss.elastic.co/t/splitting-data/270965)
**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\ **Replies:** 1\ **Last updated:** [April 22, 2021, 2:17pm UTC](https://discuss.elastic.co/t/splitting-data/270965 "2021-04-22T14:17:48Z")
Hi, I'm consuming yum.log with filebeat, this is great but I want to be able to manipulate the data as it comes in to allow me to filter better and visulise the data. At the moment a message looks like this "message":… --- ## [Validation schedule for \[xpack,fleet\] was already registered](https://discuss.elastic.co/t/validation-schedule-for-xpack-fleet-was-already-registered/270135)
**Author:** [@mof\_cmsmith](https://discuss.elastic.co/u/mof_cmsmith)\ **Replies:** 5\ **Last updated:** [April 22, 2021, 2:17pm UTC](https://discuss.elastic.co/t/validation-schedule-for-xpack-fleet-was-already-registered/270135 "2021-04-22T14:17:08Z")
Morning all, while upgrading Elasticsearch, Logstash, and Kibana this morning to 7.12 from 7.10.1 on Windows Server, I received this error in Kibana. As a result, I am unable to start Kibana. Elasticsearch and logstash … --- ## [Logstash shows parsing error for json files](https://discuss.elastic.co/t/logstash-shows-parsing-error-for-json-files/270890)
**Author:** [@pratyush\_elastic](https://discuss.elastic.co/u/pratyush_elastic)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 5:54pm UTC](https://discuss.elastic.co/t/logstash-shows-parsing-error-for-json-files/270890 "2021-04-21T17:54:08Z")
Hi, I am getting json parsing error with logstash intermittently while it tries to read and load to Elastic. Below are the details. Any lead would really be helpful. I tried isolating the file and it works fine Error: … --- ## [Kibana setting timepicker:timeDefaults via API is failing in 7.12](https://discuss.elastic.co/t/kibana-setting-timepicker-timedefaults-via-api-is-failing-in-7-12/270770)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 2\ **Last updated:** [April 22, 2021, 2:06pm UTC](https://discuss.elastic.co/t/kibana-setting-timepicker-timedefaults-via-api-is-failing-in-7-12/270770 "2021-04-22T14:06:54Z")
The following request reports bad request on upgrading to 7.12 api/kibana/settings/timepicker:timeDefaults { "value": { "from": "now-24h", "to": "now", "mode": "quick" } } Error: { "statusCode": 400, … --- ## [Getting "FATAL Error: Unable to write Kibana UUID file, please check the uuid.server configuration value in kibana.yml" when running kibana container with a different user](https://discuss.elastic.co/t/getting-fatal-error-unable-to-write-kibana-uuid-file-please-check-the-uuid-server-configuration-value-in-kibana-yml-when-running-kibana-container-with-a-different-user/270874)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 1\ **Last updated:** [April 22, 2021, 2:05pm UTC](https://discuss.elastic.co/t/getting-fatal-error-unable-to-write-kibana-uuid-file-please-check-the-uuid-server-configuration-value-in-kibana-yml-when-running-kibana-container-with-a-different-user/270874 "2021-04-22T14:05:02Z")
I have build the kibana docker image with a user and ran container with a different user. I am facing "FATAL Error: Unable to write Kibana UUID file, please check the uuid.server configuration value in kibana.yml and e… --- ## [How to show 0 instead of blank in docs count in kibana](https://discuss.elastic.co/t/how-to-show-0-instead-of-blank-in-docs-count-in-kibana/270866)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [April 22, 2021, 2:03pm UTC](https://discuss.elastic.co/t/how-to-show-0-instead-of-blank-in-docs-count-in-kibana/270866 "2021-04-22T14:03:26Z")
Hi all, I'm trying to visualize a data table in kibana as in pic below. I'm trying to show number of documents for fields. I'm also trying to show 0 for no documents returned. Can you all please help me how to go a… --- ## [TSVB Data Formatter : Access data other than value](https://discuss.elastic.co/t/tsvb-data-formatter-access-data-other-than-value/270352)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 4\ **Last updated:** [April 22, 2021, 2:01pm UTC](https://discuss.elastic.co/t/tsvb-data-formatter-access-data-other-than-value/270352 "2021-04-22T14:01:55Z")
Hi, I made a visualisation that allow me to see a per process Memory usage (see here) I've been able to reproduce kind of the same visualisation without using Lens but by using TSVB and it's looking like that : In … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1448) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1450)