# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1638 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1639 --- ## [Split Json, transform result](https://discuss.elastic.co/t/split-json-transform-result/259019)
**Author:** [@Jose92](https://discuss.elastic.co/u/Jose92)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 6:13pm UTC](https://discuss.elastic.co/t/split-json-transform-result/259019 "2020-12-17T18:13:27Z")
Bonjour, je me permets de vous contacter pour avoir de l'aide sur une configuration avec logstash. Je tourne en rond depuis plusieurs jours.... Mon json ressemble à ça : ... "inventaire": { "Applicatio… --- ## [Logstash to Ingest nodes](https://discuss.elastic.co/t/logstash-to-ingest-nodes/258925)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 7\ **Last updated:** [December 17, 2020, 6:02pm UTC](https://discuss.elastic.co/t/logstash-to-ingest-nodes/258925 "2020-12-17T18:02:33Z")
In Logstash under the pipeline directory there will be multiple .conf files that set specific grok filters. The format of the files are as follows: Input Grok Filter Output \[list of nodes\] For that Output section do … --- ## [Internals of array of strings vs. concatenated string](https://discuss.elastic.co/t/internals-of-array-of-strings-vs-concatenated-string/257640)
**Author:** [@mitar](https://discuss.elastic.co/u/mitar)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 5:59pm UTC](https://discuss.elastic.co/t/internals-of-array-of-strings-vs-concatenated-string/257640 "2020-12-17T17:59:42Z")
I am trying to better understand internals of ElasticSearch, so I would like to know if there are any differences in how ElasticSearch internally computes term statistics for the following two cases. The first case is w… --- ## [Esaggs \> field is a required parameter](https://discuss.elastic.co/t/esaggs-field-is-a-required-parameter/259016)
**Author:** [@firstpostcommenter](https://discuss.elastic.co/u/firstpostcommenter)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 5:44pm UTC](https://discuss.elastic.co/t/esaggs-field-is-a-required-parameter/259016 "2020-12-17T17:44:16Z")
Hi, In my Kibana dashboard I get the below error: \[esaggs\] \> "field" is a required parameter In my Dashboard there are around 11 panels/visualizations (panel0 to panel10) and I narrowed it down to panel7 which is caus… --- ## [Imap input plugin download attachment](https://discuss.elastic.co/t/imap-input-plugin-download-attachment/258966)
**Author:** [@Aditya\_Srivastava1](https://discuss.elastic.co/u/Aditya_Srivastava1)\ **Replies:** 8\ **Last updated:** [December 17, 2020, 5:30pm UTC](https://discuss.elastic.co/t/imap-input-plugin-download-attachment/258966 "2020-12-17T17:30:51Z")
Hi, I am using imap input plugin to fetch email along with attachments. Below configuration gets me multiple fields but does not get the attachment content. Can anyone help here how to download attachments while connec… --- ## [Dashboard / Canvas based on two indices](https://discuss.elastic.co/t/dashboard-canvas-based-on-two-indices/258729)
**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\ **Replies:** 6\ **Last updated:** [December 17, 2020, 5:04pm UTC](https://discuss.elastic.co/t/dashboard-canvas-based-on-two-indices/258729 "2020-12-17T17:04:35Z")
I have two indices: users & activities. Users index data looks like: { "email": "alice@gmail.com", "Name": "Alice A" }, { "email": "bob@gmail.com", "name": "Bob B" }, ... activity index data looks like… --- ## ["This Elastic installation has strict security requirements enabled that your current browser does not meet](https://discuss.elastic.co/t/this-elastic-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/259006)
**Author:** [@J\_Stan](https://discuss.elastic.co/u/J_Stan)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 5:03pm UTC](https://discuss.elastic.co/t/this-elastic-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/259006 "2020-12-17T17:03:30Z")
Hi All I am not able to access the Kibana UI . I am using Google Chrome (ver 87). The error I am getting is "This Elastic installation has strict security requirements enabled that your current browser does not meet.… --- ## [Populate geo\_shape values with ingest pipeline using lat/lon column values](https://discuss.elastic.co/t/populate-geo-shape-values-with-ingest-pipeline-using-lat-lon-column-values/258998)
**Author:** [@vmanohar1](https://discuss.elastic.co/u/vmanohar1)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 4:51pm UTC](https://discuss.elastic.co/t/populate-geo-shape-values-with-ingest-pipeline-using-lat-lon-column-values/258998 "2020-12-17T16:51:34Z")
If input data has lat/lon columns, is it possible to populate geo\_shape value using lat/long columns with ingest pipeline? Imagine original index has only lat/lon column mappings and data is populated. Now using reind… --- ## [Logstash crash with FATAL error](https://discuss.elastic.co/t/logstash-crash-with-fatal-error/258919)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 7\ **Last updated:** [December 17, 2020, 4:50pm UTC](https://discuss.elastic.co/t/logstash-crash-with-fatal-error/258919 "2020-12-17T16:50:08Z")
something in either my data or my logstash is killing logstash with following error. I have try this multiple time but I can't figure out what record does it gets kill on. how do I do the debug on this one? I am runni… --- ## [Elastic-Agent deb package invalid init script](https://discuss.elastic.co/t/elastic-agent-deb-package-invalid-init-script/258994)
**Author:** [@matt\_t1](https://discuss.elastic.co/u/matt_t1)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 3:56pm UTC](https://discuss.elastic.co/t/elastic-agent-deb-package-invalid-init-script/258994 "2020-12-17T15:56:57Z")
The deb package for elastic-agent v7.10.1 creates /etc/init.d/elastic-agent which is not a valid init script and interferes with the proper systemd unit at /lib/systemd/system/elastic-agent.service. --- ## [Squid Module: Splitting multiple logs which are combined as a single message in Kibana](https://discuss.elastic.co/t/squid-module-splitting-multiple-logs-which-are-combined-as-a-single-message-in-kibana/258609)
**Author:** [@ron\_g](https://discuss.elastic.co/u/ron_g)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 3:24pm UTC](https://discuss.elastic.co/t/squid-module-splitting-multiple-logs-which-are-combined-as-a-single-message-in-kibana/258609 "2020-12-17T15:24:09Z")
We have the problem that all logs which are send from our Squid server over Filebeat with the Squid module are combined as single messages in Kibana. The message contains 5 up to 15 entrys which are in fact single log l… --- ## [Fleet AWS Integration Error - API keys not configured for metricbeat](https://discuss.elastic.co/t/fleet-aws-integration-error-api-keys-not-configured-for-metricbeat/258992)
**Author:** [@matt\_t1](https://discuss.elastic.co/u/matt_t1)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 2:39pm UTC](https://discuss.elastic.co/t/fleet-aws-integration-error-api-keys-not-configured-for-metricbeat/258992 "2020-12-17T14:39:14Z")
AWS integration version 0.3.12 allows Access and Secret keys to be specified, both for log and metric ingestion. This works for logs, but for metrics the values are not propagated to elastic-agent.yml. Configuring a sh… --- ## [Hide "Secure your data for free with Elastic" message programatically](https://discuss.elastic.co/t/hide-secure-your-data-for-free-with-elastic-message-programatically/258917)
**Author:** [@tlacuache](https://discuss.elastic.co/u/tlacuache)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 2:31pm UTC](https://discuss.elastic.co/t/hide-secure-your-data-for-free-with-elastic-message-programatically/258917 "2020-12-17T14:31:06Z")
When logging onto Kibana for the first time, I get a message "Your data is not secure. Don't lose one bit. Secure your data for free with Elastic." See PR 80344 and issue 80161. I'm maintaining a project that uses elas… --- ## [Parsing issue in Logstash grok](https://discuss.elastic.co/t/parsing-issue-in-logstash-grok/258717)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 2:27pm UTC](https://discuss.elastic.co/t/parsing-issue-in-logstash-grok/258717 "2020-12-17T14:27:06Z")
I am having a grok issue. I have a log like below Login Success \[user: jsaver\] \[Source: 10.110.20.58\] How can I parse the this log with grok filter ? --- ## [Can hour and minute be appended to index name?](https://discuss.elastic.co/t/can-hour-and-minute-be-appended-to-index-name/258830)
**Author:** [@danibe](https://discuss.elastic.co/u/danibe)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 2:16pm UTC](https://discuss.elastic.co/t/can-hour-and-minute-be-appended-to-index-name/258830 "2020-12-17T14:16:39Z")
I am trying to create index names with minute resolution since I am still experimenting with ELK and would like to see the effect of various changes in my logstash filter, without having to delete an existing filter (and… --- ## [Unable to revive connections error](https://discuss.elastic.co/t/unable-to-revive-connections-error/258928)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 2:08pm UTC](https://discuss.elastic.co/t/unable-to-revive-connections-error/258928 "2020-12-17T14:08:48Z")
We are experiencing an intermittent error with Kibana which shows as "Unable to revive connection" in our logs. We are running Kibana as a Docker container on the web server. It appears the Cluster continues to take in d… --- ## [Filebeat Cisco Umbrella](https://discuss.elastic.co/t/filebeat-cisco-umbrella/258779)
**Author:** [@nathanachey](https://discuss.elastic.co/u/nathanachey)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 2:01pm UTC](https://discuss.elastic.co/t/filebeat-cisco-umbrella/258779 "2020-12-17T14:01:26Z")
I'm trying to setup Filebeat to use the Cisco Umbrella module. We have the Cisco maintained bucket. The URL Cisco provides is s3://cisco-managed-us-west-1/2613934\_1b0f4f029c8f0b75a2f9a6d4e06a79d6cbbc41bb The error I'm… --- ## [Changing UTC to local time zone in a machine learning watcher](https://discuss.elastic.co/t/changing-utc-to-local-time-zone-in-a-machine-learning-watcher/258911)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 1:52pm UTC](https://discuss.elastic.co/t/changing-utc-to-local-time-zone-in-a-machine-learning-watcher/258911 "2020-12-17T13:52:40Z")
Im trying to get the time of the alert to local time, but when I add the transform to the watcher I get the mail and the date, but the results are gone, it seems that the transform alters the entire result, what can I do… --- ## [ELS Watcher script free disc space](https://discuss.elastic.co/t/els-watcher-script-free-disc-space/258997)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 0\ **Last updated:** [December 17, 2020, 1:12pm UTC](https://discuss.elastic.co/t/els-watcher-script-free-disc-space/258997 "2020-12-17T13:12:32Z")
Dear team, we have used a script from the els repository to set up a watcher for free disc space ratio, unfortunately script execution ends with errors but watcher interface show all is ok, we got an NPE: "script\_stack… --- ## [Embed kibana dashboard/visualizations on an external webpage as iFrame](https://discuss.elastic.co/t/embed-kibana-dashboard-visualizations-on-an-external-webpage-as-iframe/256279)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 14\ **Last updated:** [December 17, 2020, 12:38pm UTC](https://discuss.elastic.co/t/embed-kibana-dashboard-visualizations-on-an-external-webpage-as-iframe/256279 "2020-12-17T12:38:43Z")
I am doing these below mentioned steps Create a visualization, apply the filters, then save the visualization Click "Share" at the top Copy the iframe code Paste the iframe code into your external HTML. when i paste t… --- ## [Logstash translate doesn't work](https://discuss.elastic.co/t/logstash-translate-doesnt-work/258249)
**Author:** [@mihai.radulescu](https://discuss.elastic.co/u/mihai.radulescu)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 12:33pm UTC](https://discuss.elastic.co/t/logstash-translate-doesnt-work/258249 "2020-12-17T12:33:56Z")
Hello, I have the following code: input { file { path =\> "/home/path/files/\*.csv" start\_position =\> "beginning" } } filter { csv { columns =\> \[ "xx1","xx2","xx3","xx4","Response","TimeStamp",… --- ## [Relationship between hot-warm arch and node roles](https://discuss.elastic.co/t/relationship-between-hot-warm-arch-and-node-roles/258977)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 12:18pm UTC](https://discuss.elastic.co/t/relationship-between-hot-warm-arch-and-node-roles/258977 "2020-12-17T12:18:33Z")
when a node config as a hot node, then what should be the node role such as master, ingest, data? also when a node is warm what should be the node role? what is the relationship? between hot-warm arch and node roles? T… --- ## [Visualize 2 lines - 2 nodes with 1 parameter per time](https://discuss.elastic.co/t/visualize-2-lines-2-nodes-with-1-parameter-per-time/256240)
**Author:** [@avovana](https://discuss.elastic.co/u/avovana)\ **Replies:** 16\ **Last updated:** [December 17, 2020, 12:17pm UTC](https://discuss.elastic.co/t/visualize-2-lines-2-nodes-with-1-parameter-per-time/256240 "2020-12-17T12:17:47Z")
Good morning! After intensive search It seems to me that it is impossible. Anyway, maybe someone have an idea to implement it(with Kibana, or, maybe Zabbix + prometheus)... The case is I have a system consists of many … --- ## [Underlying file changed by an external force](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/258648)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 12:13pm UTC](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/258648 "2020-12-17T12:13:10Z")
Hi Team, Of late, I've started seeing these errors in ES 6.8.6 cluster. I have this cluster since March but these errors started appearing only recently: \[2020-12-14T00:00:04,122\]\[WARN \]\[o.e.c.r.a.AllocationService\] \[n… --- ## [Geo\_shape, geo\_point - Can they be added on the fly?](https://discuss.elastic.co/t/geo-shape-geo-point-can-they-be-added-on-the-fly/258910)
**Author:** [@vmanohar1](https://discuss.elastic.co/u/vmanohar1)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 11:32am UTC](https://discuss.elastic.co/t/geo-shape-geo-point-can-they-be-added-on-the-fly/258910 "2020-12-17T11:32:54Z")
If the original index has just lat/lon values, is it possible to create additional columns of type geo\_shape and geo\_point using values from lat/lon column in the elastic query itself? I am curious to know.. Thanks. --- ## [Problem login dashboards after copying the iframe address in the html](https://discuss.elastic.co/t/problem-login-dashboards-after-copying-the-iframe-address-in-the-html/258693)
**Author:** [@Sarahabbasi](https://discuss.elastic.co/u/Sarahabbasi)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 11:29am UTC](https://discuss.elastic.co/t/problem-login-dashboards-after-copying-the-iframe-address-in-the-html/258693 "2020-12-17T11:29:52Z")
Hello Masters : I will copy the iframe in the HTML tags on a html page, but Elastic login page not working and i got this error in browser console : Refused to execute inline script because it violates the following … --- ## [Image Cloud in Kibana](https://discuss.elastic.co/t/image-cloud-in-kibana/258370)
**Author:** [@Abhishek5](https://discuss.elastic.co/u/Abhishek5)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 11:29am UTC](https://discuss.elastic.co/t/image-cloud-in-kibana/258370 "2020-12-17T11:29:27Z")
Hello All, I am thinking to create a image cloud (similar to tag cloud, using images instead) in Kibana. I could not find any visualization in Kibana 7.0. I am exploring markdowns to display static images for now, is the… --- ## [Kibana is not allowing to select data of more than 35 days, for Predictions using Machine Learning](https://discuss.elastic.co/t/kibana-is-not-allowing-to-select-data-of-more-than-35-days-for-predictions-using-machine-learning/258951)
**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 11:11am UTC](https://discuss.elastic.co/t/kibana-is-not-allowing-to-select-data-of-more-than-35-days-for-predictions-using-machine-learning/258951 "2020-12-17T11:11:29Z")
Hello all whenever I select more than 35 days of data in Machine Learning feature for the predictions then it is not allowing me to do this? I want to ask that why is this so? Is this the restriction of ML model of Kiban… --- ## [Error elasticsearch/client.go:407](https://discuss.elastic.co/t/error-elasticsearch-client-go-407/258825)
**Author:** [@nuut](https://discuss.elastic.co/u/nuut)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 11:08am UTC](https://discuss.elastic.co/t/error-elasticsearch-client-go-407/258825 "2020-12-17T11:08:48Z")
hi team i ge error like this Dec 16 14:25:16 localhost filebeat\[33713\]: 2020-12-16T14:25:15.598+0700 WARN \[elasticsearch\] elasticsearch/client.go:407 Cannot index event publisher.Event can y… --- ## [Not able to access my Kibana dashboard URL from angular with x-pack security turned on](https://discuss.elastic.co/t/not-able-to-access-my-kibana-dashboard-url-from-angular-with-x-pack-security-turned-on/258390)
**Author:** [@sam189](https://discuss.elastic.co/u/sam189)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 10:55am UTC](https://discuss.elastic.co/t/not-able-to-access-my-kibana-dashboard-url-from-angular-with-x-pack-security-turned-on/258390 "2020-12-17T10:55:45Z")
Disabling x-pack security in kibana alllows me to access the kibana dashboard in my angular application but when i enable xpack i cannot access the kibana dashboard in my angular iframe. I am passing username and passwo… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1637) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1639)