# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1901 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1902 --- ## [HOW TO logstash convert all fields to String](https://discuss.elastic.co/t/how-to-logstash-convert-all-fields-to-string/242844)
**Author:** [@thaopt](https://discuss.elastic.co/u/thaopt)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 4:12am UTC](https://discuss.elastic.co/t/how-to-logstash-convert-all-fields-to-string/242844 "2020-07-29T04:12:30Z")
Hello I am a foreign developer. My process is: Json \>\> Filebeat \>\> logstash \>\> Kibana So how can i convert all of fileds to String in Json via Logstash Filter config? P/s: I added this config to pipeline but not work… --- ## [Is My Date Range Format Correct?](https://discuss.elastic.co/t/is-my-date-range-format-correct/242866)
**Author:** [@Ethan777100](https://discuss.elastic.co/u/Ethan777100)\ **Replies:** 3\ **Last updated:** [July 29, 2020, 2:09am UTC](https://discuss.elastic.co/t/is-my-date-range-format-correct/242866 "2020-07-29T02:09:27Z")
I actually want to obtain 2 separate charts within the same visualisation, seperated base on date range? Is my Date Range Format Correct? coz i get a bad request error? E400 means i made a syntax error in the query… --- ## [Syntax error for XPath](https://discuss.elastic.co/t/syntax-error-for-xpath/242846)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 2:07am UTC](https://discuss.elastic.co/t/syntax-error-for-xpath/242846 "2020-07-29T02:07:18Z")
Hi All, Trying to get the xml-xpath working, but logstash is crashing out at a certain part of the config file. The error points to it being a syntax problem Jul 28 17:09:30 QPS-HPI-TESTELK1 logstash\[730767\]: \[2020-0… --- ## [Loading Oracle into Elastic with Logstash](https://discuss.elastic.co/t/loading-oracle-into-elastic-with-logstash/242957)
**Author:** [@Queyon](https://discuss.elastic.co/u/Queyon)\ **Replies:** 4\ **Last updated:** [July 29, 2020, 12:02am UTC](https://discuss.elastic.co/t/loading-oracle-into-elastic-with-logstash/242957 "2020-07-29T00:02:13Z")
I'm trying to load Oracle data into Elastic with Logstash. The query returns a number of rows, but it only loaded one record into Elastic. Is there anything wrong with my config file? input { jdbc { jdbc\_driver\_libr… --- ## [ES 7.8.0 Java RestHighLevelClient UpdateByQueryAsync throws SocketTimeoutException](https://discuss.elastic.co/t/es-7-8-0-java-resthighlevelclient-updatebyqueryasync-throws-sockettimeoutexception/242839)
**Author:** [@benatwork](https://discuss.elastic.co/u/benatwork)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 11:23pm UTC](https://discuss.elastic.co/t/es-7-8-0-java-resthighlevelclient-updatebyqueryasync-throws-sockettimeoutexception/242839 "2020-07-28T23:23:54Z")
Hi all, First post here so I should say, we love elasticsearch! Some big fans on our team. I'm looking into an issue we're seeing on ES 7.8.0 using the Java RestHighLevelClient, where an expensive UpdateByQuery is thro… --- ## [Kibana User not able to access Dashboard inside a Space](https://discuss.elastic.co/t/kibana-user-not-able-to-access-dashboard-inside-a-space/242897)
**Author:** [@Kavin](https://discuss.elastic.co/u/Kavin)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 11:23pm UTC](https://discuss.elastic.co/t/kibana-user-not-able-to-access-dashboard-inside-a-space/242897 "2020-07-28T23:23:34Z")
Hi, My requirement is to create 2 spaces (eg. Wipro and Coznizant) and 2 different users (Wipro\_User, Cognizant\_User). "Wipro\_User" should be able to see only "Wipro" space and the Cognizant\_User should be seeing only … --- ## [Filter synonym not working](https://discuss.elastic.co/t/filter-synonym-not-working/242868)
**Author:** [@ggiff](https://discuss.elastic.co/u/ggiff)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 9:19am UTC](https://discuss.elastic.co/t/filter-synonym-not-working/242868 "2020-07-28T09:19:15Z")
I am using ingest processor to ingest/index files like pdf, xls etc. This is my pipeline: curl -XPUT 'ES\_HOST:ES\_PORT/\_ingest/pipeline/attachment?pretty' -H 'Content-Type: application/json' -d '{ "description" : "Extr… --- ## [Java testing framework documents deleted?](https://discuss.elastic.co/t/java-testing-framework-documents-deleted/242977)
**Author:** [@chenqi0805](https://discuss.elastic.co/u/chenqi0805)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 10:33pm UTC](https://discuss.elastic.co/t/java-testing-framework-documents-deleted/242977 "2020-07-28T22:33:25Z")
https://www.elastic.co/guide/en/elasticsearch/reference/current/testing-framework.html What is the latest practice? Also, is there example on how to set up es cluster for integration test in gradle? --- ## [Logstash stops forwarding to elasticsearch after short run](https://discuss.elastic.co/t/logstash-stops-forwarding-to-elasticsearch-after-short-run/242841)
**Author:** [@amhulli](https://discuss.elastic.co/u/amhulli)\ **Replies:** 3\ **Last updated:** [July 28, 2020, 10:27pm UTC](https://discuss.elastic.co/t/logstash-stops-forwarding-to-elasticsearch-after-short-run/242841 "2020-07-28T22:27:13Z")
i notice that my issue is similar to https://discuss.elastic.co/t/logstash-runs-as-service-but-stops-sending-logs-over-http-after-some-time/102938 but also note there was no resolution at that time. I'm hoping someone … --- ## [Semantic Search using ML capabilities](https://discuss.elastic.co/t/semantic-search-using-ml-capabilities/242860)
**Author:** [@Shubham\_Mittal](https://discuss.elastic.co/u/Shubham_Mittal)\ **Replies:** 3\ **Last updated:** [July 28, 2020, 10:19pm UTC](https://discuss.elastic.co/t/semantic-search-using-ml-capabilities/242860 "2020-07-28T22:19:40Z")
Hi Team, Could you please tell if elastic search currently supports semantic search using machine learning features? --- ## [Dynamic queue sizes](https://discuss.elastic.co/t/dynamic-queue-sizes/242418)
**Author:** [@Ankit\_Malpani](https://discuss.elastic.co/u/Ankit_Malpani)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 9:49pm UTC](https://discuss.elastic.co/t/dynamic-queue-sizes/242418 "2020-07-28T21:49:35Z")
I wanted to hear thoughts on adding an API to make queues dynamic. I understand this is an advanced setting and there can be drawbacks to raising queue sizes etc. but a queue does help during bursty behaviors and even th… --- ## [Logs from Cisco SFR (IPS) to Elasticsearch](https://discuss.elastic.co/t/logs-from-cisco-sfr-ips-to-elasticsearch/242909)
**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 1:03pm UTC](https://discuss.elastic.co/t/logs-from-cisco-sfr-ips-to-elasticsearch/242909 "2020-07-28T13:03:48Z")
Dear all, I have an ELK 7.8.0 server with Filebeat. I've enabled cisco module from Filebeat and I have these different syslog listeners: syslog configured from filebeat.yml file: logging of Linux hosts asa fileset con… --- ## [Getting additional fields without \_source](https://discuss.elastic.co/t/getting-additional-fields-without-source/242955)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 6\ **Last updated:** [July 28, 2020, 9:42pm UTC](https://discuss.elastic.co/t/getting-additional-fields-without-source/242955 "2020-07-28T21:42:08Z")
Hi, I was looking for options to improve indexing performance and reduce disk space usage on our ES cluster. When I checked the documentation for the \_source field, I saw the warnings mentioned there. However, it occurr… --- ## [Elasticsearh query tuning](https://discuss.elastic.co/t/elasticsearh-query-tuning/242817)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 8:16pm UTC](https://discuss.elastic.co/t/elasticsearh-query-tuning/242817 "2020-07-28T20:16:08Z")
Hi All, Is there any tool for elasticsearch query optimation or any manual way to optimize query running time? --- ## [Table visualization not showing accurate amounts](https://discuss.elastic.co/t/table-visualization-not-showing-accurate-amounts/242962)
**Author:** [@jvictorbr](https://discuss.elastic.co/u/jvictorbr)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 7:42pm UTC](https://discuss.elastic.co/t/table-visualization-not-showing-accurate-amounts/242962 "2020-07-28T19:42:41Z")
Hi, I have configured a table visualization that should display the actual values of a time series. To achieve that I configured the metrics as per the screenshot below: The problem is that the information displayed… --- ## [Logs de las búsquedas en ElasticSearch](https://discuss.elastic.co/t/logs-de-las-busquedas-en-elasticsearch/242179)
**Author:** [@Jesus2121](https://discuss.elastic.co/u/Jesus2121)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 6:12pm UTC](https://discuss.elastic.co/t/logs-de-las-busquedas-en-elasticsearch/242179 "2020-07-28T18:12:08Z")
Buenas. Estoy intentando auditar las búsquedas que se realizan en elasticsearch ( las realizo desde python con la libreria elasticsearch o desde rest en cerebro). ¿Donde se guardan estos datos? Hasta ahora solo consig… --- ## [Why the same logs ingested over multiple index](https://discuss.elastic.co/t/why-the-same-logs-ingested-over-multiple-index/242901)
**Author:** [@anirbandas](https://discuss.elastic.co/u/anirbandas)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 5:23pm UTC](https://discuss.elastic.co/t/why-the-same-logs-ingested-over-multiple-index/242901 "2020-07-28T17:23:28Z")
Hi , Recently we have configured the ELK cluster but when i start the collecting logs through logstash from three log sources like firewall, cisco router and windows server, i can see that that firewall logs ingested to… --- ## [Automatic Reporting Feature](https://discuss.elastic.co/t/automatic-reporting-feature/241655)
**Author:** [@srajus](https://discuss.elastic.co/u/srajus)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 5:21pm UTC](https://discuss.elastic.co/t/automatic-reporting-feature/241655 "2020-07-28T17:21:20Z")
HI All, In my Organization we are currently running Kiabna 6.8. We do not support watcher and we are planning to get that feature by mid of next year. I want to send email notifications to business users on report stat… --- ## [Upgrading 200+ document types in single index from ES 1.4 to ES 7.4](https://discuss.elastic.co/t/upgrading-200-document-types-in-single-index-from-es-1-4-to-es-7-4/242910)
**Author:** [@pavanpatel20](https://discuss.elastic.co/u/pavanpatel20)\ **Replies:** 7\ **Last updated:** [July 28, 2020, 3:59pm UTC](https://discuss.elastic.co/t/upgrading-200-document-types-in-single-index-from-es-1-4-to-es-7-4/242910 "2020-07-28T15:59:19Z")
In my project we are using ES 1.4 and one of our index has around 200 document types. We are now upgrading ES to 7.4 and one of the major problem is removal of document types. We are on single node, so creating 200 indic… --- ## [Different Query Returns for Kibana and FME HTTP Caller](https://discuss.elastic.co/t/different-query-returns-for-kibana-and-fme-http-caller/242926)
**Author:** [@jattoe](https://discuss.elastic.co/u/jattoe)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 3:26pm UTC](https://discuss.elastic.co/t/different-query-returns-for-kibana-and-fme-http-caller/242926 "2020-07-28T15:26:20Z")
I have been using the dev tools console on Kibana to write my queries and make sure everything is working as I would like. You can see an example of the return I get below. I then take this query and put it into an h… --- ## [Connect to ElasticSearch with HTTPS](https://discuss.elastic.co/t/connect-to-elasticsearch-with-https/242923)
**Author:** [@julianksanchez](https://discuss.elastic.co/u/julianksanchez)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 3:26pm UTC](https://discuss.elastic.co/t/connect-to-elasticsearch-with-https/242923 "2020-07-28T15:26:07Z")
Hello guys, We are using HTTPS for connection to Elasticsearch. However We are trying to configurate metricbeat in Windows10 and we cant connect to elastic. We have the next configuracion en metricbeat.yml: ==========… --- ## [Unable to Process VPC Flow Logs using filebeat 7.8.0](https://discuss.elastic.co/t/unable-to-process-vpc-flow-logs-using-filebeat-7-8-0/242229)
**Author:** [@nikhilv](https://discuss.elastic.co/u/nikhilv)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 3:08pm UTC](https://discuss.elastic.co/t/unable-to-process-vpc-flow-logs-using-filebeat-7-8-0/242229 "2020-07-28T15:08:44Z")
Hello Team, I'm using filebeat 8.0 and deployed on AWS EKS to ship aws logs to ECK for analysis. I'm using AWS module in filebeat and i didn't face any issues with cloudtrail&elb logs but only facing issues with vpc flo… --- ## [Kibana 7.8 ZIP for Windows - extraction fail](https://discuss.elastic.co/t/kibana-7-8-zip-for-windows-extraction-fail/242657)
**Author:** [@Gnintz](https://discuss.elastic.co/u/Gnintz)\ **Replies:** 5\ **Last updated:** [July 28, 2020, 2:36pm UTC](https://discuss.elastic.co/t/kibana-7-8-zip-for-windows-extraction-fail/242657 "2020-07-28T14:36:14Z")
On my W 10 1903 system, even the attempt to view the downloaded Kibana 7.8 zipped package does crash the explorer - unzipping it kills the whole system. There are 2 options - something is severely wrong with my machine,… --- ## [Kibana Index - Splitting Index Values and Adding to New Field](https://discuss.elastic.co/t/kibana-index-splitting-index-values-and-adding-to-new-field/242896)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 13\ **Last updated:** [July 28, 2020, 1:49pm UTC](https://discuss.elastic.co/t/kibana-index-splitting-index-values-and-adding-to-new-field/242896 "2020-07-28T13:49:44Z")
Hello, I am trying to figure out how to split the value of an index field and add that to a new field. Basically what I have on Kibana is as shown: This is the json document output of the index fields: I am trying… --- ## [Search query total hits not adding up when using multiple queries](https://discuss.elastic.co/t/search-query-total-hits-not-adding-up-when-using-multiple-queries/242676)
**Author:** [@antonsamper](https://discuss.elastic.co/u/antonsamper)\ **Replies:** 9\ **Last updated:** [July 28, 2020, 1:13pm UTC](https://discuss.elastic.co/t/search-query-total-hits-not-adding-up-when-using-multiple-queries/242676 "2020-07-28T13:13:50Z")
I have encountered a strange problem whereby the total hits don't seem to be adding up when I use multiple filters. I have an index with around 40 million documents. A typical document looks like something like this: {… --- ## [Why update\_by\_query/delete\_by\_query are taking almost same time with Automatic Slicing & Without Slicing?](https://discuss.elastic.co/t/why-update-by-query-delete-by-query-are-taking-almost-same-time-with-automatic-slicing-without-slicing/242911)
**Author:** [@dillibabu.mekala](https://discuss.elastic.co/u/dillibabu.mekala)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 1:06pm UTC](https://discuss.elastic.co/t/why-update-by-query-delete-by-query-are-taking-almost-same-time-with-automatic-slicing-without-slicing/242911 "2020-07-28T13:06:57Z")
Hi Team, I have gone through the elastic search docx and tried to implement the slicing concept in 2-ways for update\_by\_query/delete\_by\_query. Manual Slicing (https://www.elastic.co/guide/en/elasticsearch/reference/cu… --- ## [Combine fields in Elasticsearch from logs with same ID](https://discuss.elastic.co/t/combine-fields-in-elasticsearch-from-logs-with-same-id/242880)
**Author:** [@egray](https://discuss.elastic.co/u/egray)\ **Replies:** 6\ **Last updated:** [July 28, 2020, 1:06pm UTC](https://discuss.elastic.co/t/combine-fields-in-elasticsearch-from-logs-with-same-id/242880 "2020-07-28T13:06:03Z")
I am working on a log aggregation solution for my company's web requests, using Logstash and Elasticsearch. There are several logs produced for each web request containing slightly different information, and they would l… --- ## [Logstash Unvailable When Syncing with Elastic's Yum Repository](https://discuss.elastic.co/t/logstash-unvailable-when-syncing-with-elastics-yum-repository/242904)
**Author:** [@alpo](https://discuss.elastic.co/u/alpo)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 1:01pm UTC](https://discuss.elastic.co/t/logstash-unvailable-when-syncing-with-elastics-yum-repository/242904 "2020-07-28T13:01:56Z")
All, Looks like when we attempt to sync with Elastic's yum repository, the logstash rpm is not downloaded. Here is our full reposync command: /usr/bin/dnf reposync \\ --repoid=elastic-7.x \\ --arch=x86\_64 \\ --down… --- ## [How to Merge 2-index data in to One of the two Self Indexes without Re-Indexing to Third Index?](https://discuss.elastic.co/t/how-to-merge-2-index-data-in-to-one-of-the-two-self-indexes-without-re-indexing-to-third-index/242359)
**Author:** [@dillibabu.mekala](https://discuss.elastic.co/u/dillibabu.mekala)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 12:57pm UTC](https://discuss.elastic.co/t/how-to-merge-2-index-data-in-to-one-of-the-two-self-indexes-without-re-indexing-to-third-index/242359 "2020-07-28T12:57:33Z")
Assume i have indices with names carssdata\_original, carssdata\_stage The data in the carsspark\_original is given below. { "\_index": "carssdata\_original", "\_type": "doc", "\_score": 1, "\_source": { "carid": "1", "c… --- ## [Secure elasticstack](https://discuss.elastic.co/t/secure-elasticstack/242752)
**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\ **Replies:** 10\ **Last updated:** [July 28, 2020, 12:10pm UTC](https://discuss.elastic.co/t/secure-elasticstack/242752 "2020-07-28T12:10:23Z")
I have a small cluster that sits on one machine which pulls data from about 5 servers. Now, I was asked to secure the connection and set up a user for when entering Kibana. I read the latest documentation and it seems … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1900) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1902)