# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1904 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1905 --- ## [Logstash not starting when using "codec =\> multiline"](https://discuss.elastic.co/t/logstash-not-starting-when-using-codec-multiline/242441)
**Author:** [@saurabhc](https://discuss.elastic.co/u/saurabhc)\ **Replies:** 6\ **Last updated:** [July 27, 2020, 5:52pm UTC](https://discuss.elastic.co/t/logstash-not-starting-when-using-codec-multiline/242441 "2020-07-27T17:52:28Z")
My objective is to parse a multiline string. For that, I tried to use “codec =\> multiline”. But whenever I try to start logstash using “codec =\> multiline”, it fails to start. But it starts successfully without the “cod… --- ## [Hostname in kibana links](https://discuss.elastic.co/t/hostname-in-kibana-links/242746)
**Author:** [@daniel.velasco](https://discuss.elastic.co/u/daniel.velasco)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 4:53pm UTC](https://discuss.elastic.co/t/hostname-in-kibana-links/242746 "2020-07-27T16:53:10Z")
Hi everyone. I need set the current url header https://xxx/app/kibana# inside link in the index pattern as follow: {{hostname}}/dashboard/fb882ba0-27c4-11ea-b130-3f8b1295369d?\_a=(... query:...{{value}}...) But i… --- ## [Handshake error attaching report](https://discuss.elastic.co/t/handshake-error-attaching-report/242497)
**Author:** [@uxssmango](https://discuss.elastic.co/u/uxssmango)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 4:46pm UTC](https://discuss.elastic.co/t/handshake-error-attaching-report/242497 "2020-07-27T16:46:44Z")
Hello, We have a problem trying to attach a report file generated from Kibana. Our Kibana web is published through SSL with a wildcard certificate with a valid CA and the error reports: "actions" : \[ { … --- ## [Error fetching fields for index pattern auditbeat-\* Conflict](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-auditbeat-conflict/242674)
**Author:** [@DucretJe](https://discuss.elastic.co/u/DucretJe)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 4:45pm UTC](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-auditbeat-conflict/242674 "2020-07-27T16:45:41Z")
Hi there! I got an issue when I deploy beats agent set up to output on logstash, and using Kibana to view it. I have 2 monitored hosts on Windows and another on Linux. When I want to use a dashboard I have several erro… --- ## [How processing logs with different structure with logstash](https://discuss.elastic.co/t/how-processing-logs-with-different-structure-with-logstash/242401)
**Author:** [@Bilal2](https://discuss.elastic.co/u/Bilal2)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 4:44pm UTC](https://discuss.elastic.co/t/how-processing-logs-with-different-structure-with-logstash/242401 "2020-07-27T16:44:48Z")
Hi, I'm fairly new to logstash; and I want to ship the logs to elasticsearch but I have different structures of logs in my log file: such as: 00000078 1 57118 20200708040053402 6408 2 admin IP-AC1FF2CB.io rsession21.ex… --- ## [Kibana show only one dashboard](https://discuss.elastic.co/t/kibana-show-only-one-dashboard/242778)
**Author:** [@Bouraoui\_Kacem](https://discuss.elastic.co/u/Bouraoui_Kacem)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 4:39pm UTC](https://discuss.elastic.co/t/kibana-show-only-one-dashboard/242778 "2020-07-27T16:39:44Z")
Hi , i tried to add an user role to show only one dashboard and hide the other list but the result is that i have all the dashboards list and i can access to just one . So the question : how can I show only one dashboar… --- ## [Kibana dashboard to dashboard drill down with inherited filters and data from current dashboard](https://discuss.elastic.co/t/kibana-dashboard-to-dashboard-drill-down-with-inherited-filters-and-data-from-current-dashboard/242733)
**Author:** [@sugunan](https://discuss.elastic.co/u/sugunan)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 4:00pm UTC](https://discuss.elastic.co/t/kibana-dashboard-to-dashboard-drill-down-with-inherited-filters-and-data-from-current-dashboard/242733 "2020-07-27T16:00:36Z")
I have two kibana 7.8 dashboard call A and B. I made a markdown visualization with hyper link to dashboard "B". And I load the markdown on dashboard "A". Now I want to navigate to the dashboard "A" to "B" through this… --- ## [Outgoing tcp traffic (after opening Kibana in a browser)](https://discuss.elastic.co/t/outgoing-tcp-traffic-after-opening-kibana-in-a-browser/242772)
**Author:** [@Tommie](https://discuss.elastic.co/u/Tommie)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 4:17pm UTC](https://discuss.elastic.co/t/outgoing-tcp-traffic-after-opening-kibana-in-a-browser/242772 "2020-07-27T16:17:46Z")
I'm running ELK in an isolated environment, no internet connection. The network guys in my company are complaining about network traffic generated by my ELK server. Can somebody explain me why there's a lot of outgoing… --- ## [Canvas name containing hyphen](https://discuss.elastic.co/t/canvas-name-containing-hyphen/242764)
**Author:** [@m4rk](https://discuss.elastic.co/u/m4rk)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 3:49pm UTC](https://discuss.elastic.co/t/canvas-name-containing-hyphen/242764 "2020-07-27T15:49:26Z")
Hi, I created 2 canvas: canvas1-test and canvas2-test. When I use the text field to search a canvas in the canvas page, with the text: canvas1-test, both canvas are found. Can someone explain me why the two canvas are … --- ## [Fuzzy search on Name having multiple words in it](https://discuss.elastic.co/t/fuzzy-search-on-name-having-multiple-words-in-it/242777)
**Author:** [@meena](https://discuss.elastic.co/u/meena)\ **Replies:** 0\ **Last updated:** [July 27, 2020, 3:40pm UTC](https://discuss.elastic.co/t/fuzzy-search-on-name-having-multiple-words-in-it/242777 "2020-07-27T15:40:54Z")
HI, Am trying to do a fuzzy search on the name field which has 2 words in it like name : Residentie Verdé search text : "Residentie Verd" when i do the search i get all the matches of Residentie and all the matches o… --- ## [Use case to use Elasticsearch](https://discuss.elastic.co/t/use-case-to-use-elasticsearch/242620)
**Author:** [@maconportter](https://discuss.elastic.co/u/maconportter)\ **Replies:** 4\ **Last updated:** [July 27, 2020, 3:29pm UTC](https://discuss.elastic.co/t/use-case-to-use-elasticsearch/242620 "2020-07-27T15:29:33Z")
I need to create a system where the user creates dynamic filters based on our customer's attributes. There are more or less 30 possible filters and 30 millions of customers, but the number of customer increase every day … --- ## [Filebeat module for SharePoint](https://discuss.elastic.co/t/filebeat-module-for-sharepoint/242766)
**Author:** [@vladtepes](https://discuss.elastic.co/u/vladtepes)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-module-for-sharepoint/242766 "2020-07-27T15:24:45Z")
Hi, There is now this new concept of using ingest pipelines instead of Logstash pipelines, but the Filebeat would be fantastic, if there was a module for SharePoint ULS logs. There a quite a few farms out there, which w… --- ## [SSL Handshake failure](https://discuss.elastic.co/t/ssl-handshake-failure/242771)
**Author:** [@Abdul\_Hameed](https://discuss.elastic.co/u/Abdul_Hameed)\ **Replies:** 0\ **Last updated:** [July 27, 2020, 3:04pm UTC](https://discuss.elastic.co/t/ssl-handshake-failure/242771 "2020-07-27T15:04:10Z")
Hi, I get an error in logstash \[logstash.inputs.tcp \] Error in Netty pipeline: io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: error:100000d7:SSL routines:OPENSSL\_internal:SSL\_HANDSHA… --- ## [Send email alert when filebeat cannot send out log](https://discuss.elastic.co/t/send-email-alert-when-filebeat-cannot-send-out-log/242718)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 2:28pm UTC](https://discuss.elastic.co/t/send-email-alert-when-filebeat-cannot-send-out-log/242718 "2020-07-27T14:28:00Z")
we have installed filebeat on aws machines around the world. Sometimes, some machines cannot send out log, is there any want to trigger an email alert when something like that happen? --- ## [How does aggregate with different task\_id in one filter part works](https://discuss.elastic.co/t/how-does-aggregate-with-different-task-id-in-one-filter-part-works/242066)
**Author:** [@Aberry](https://discuss.elastic.co/u/Aberry)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 2:34pm UTC](https://discuss.elastic.co/t/how-does-aggregate-with-different-task-id-in-one-filter-part-works/242066 "2020-07-27T14:34:56Z")
Could anyone help explain how the aggregate with different task\_id in one filter part works? Will the second aggregate walk through again on all existed events? Or any memory limit setting when perform the aggregate? Ta… --- ## [Elastic/logstash puppet forge module config\_dir not being set](https://discuss.elastic.co/t/elastic-logstash-puppet-forge-module-config-dir-not-being-set/242566)
**Author:** [@cgutshal](https://discuss.elastic.co/u/cgutshal)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 2:33pm UTC](https://discuss.elastic.co/t/elastic-logstash-puppet-forge-module-config-dir-not-being-set/242566 "2020-07-27T14:33:18Z")
I am working with the following module in puppet forge: This is my current profile: https://gist.github.com/cgutshal/116d2cfd1bd21b9083088bfbacd1a804 The issue I am running into is that while my pipeline configs ar… --- ## [ES 7.5 - Custom plugin, only calling local shards](https://discuss.elastic.co/t/es-7-5-custom-plugin-only-calling-local-shards/242757)
**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\ **Replies:** 0\ **Last updated:** [July 27, 2020, 2:00pm UTC](https://discuss.elastic.co/t/es-7-5-custom-plugin-only-calling-local-shards/242757 "2020-07-27T14:00:08Z")
Hi I have written a custom plugin in ES 7.5.2. My problem is, when calling the plugin, it only looks in the local shards, and not in shards on other nodes. This means I have to have all shards on every node, to make i… --- ## [Visualize ISO2 Country Codes in maps](https://discuss.elastic.co/t/visualize-iso2-country-codes-in-maps/242726)
**Author:** [@magnalite](https://discuss.elastic.co/u/magnalite)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 1:59pm UTC](https://discuss.elastic.co/t/visualize-iso2-country-codes-in-maps/242726 "2020-07-27T13:59:58Z")
I'm trying to visualize a count of docs by country code (ie count per country on maps) however whenever I try to do this the maps visualization plugin says I don't have an index with a geospatial data field. Is there an … --- ## [Boosting search results based on the number of items in a nested object](https://discuss.elastic.co/t/boosting-search-results-based-on-the-number-of-items-in-a-nested-object/242357)
**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 1:33pm UTC](https://discuss.elastic.co/t/boosting-search-results-based-on-the-number-of-items-in-a-nested-object/242357 "2020-07-27T13:33:09Z")
Hi! I have an index that contains a nested object: "links\_to\_asset": { "type": "nested", "properties": { "note\_link\_id": { "type": "long" }, "user\_id": { "type": "long" }, "to\_asset": { "type": "in… --- ## [This Should be Easy - Percent of one Value of a Field](https://discuss.elastic.co/t/this-should-be-easy-percent-of-one-value-of-a-field/242128)
**Author:** [@dandcp](https://discuss.elastic.co/u/dandcp)\ **Replies:** 12\ **Last updated:** [July 27, 2020, 1:09pm UTC](https://discuss.elastic.co/t/this-should-be-easy-percent-of-one-value-of-a-field/242128 "2020-07-27T13:09:21Z")
So here’s the deal. I am a noob. I’ve been somewhat forced into this but it is what it is. Forgive me ahead of time for not knowing the syntax or this or that. I assure you I have read a ton, I’m just not as smart as you… --- ## [ES 6.5.1 Two nodes not connecting into cluster using ssl certificate](https://discuss.elastic.co/t/es-6-5-1-two-nodes-not-connecting-into-cluster-using-ssl-certificate/241997)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 5\ **Last updated:** [July 27, 2020, 1:06pm UTC](https://discuss.elastic.co/t/es-6-5-1-two-nodes-not-connecting-into-cluster-using-ssl-certificate/241997 "2020-07-27T13:06:27Z")
I am trying to configure 2 node cluster for Elasticsearch 6.5.1 on Debian 10 machines. For each cluster I installed Elasticsearch instance from apt-get. I also generated certificate keys using ca.crt and ca.key files I… --- ## [Upgrade of Kibana from 7.7.1 to 7.8.0](https://discuss.elastic.co/t/upgrade-of-kibana-from-7-7-1-to-7-8-0/238895)
**Author:** [@drewlander](https://discuss.elastic.co/u/drewlander)\ **Replies:** 7\ **Last updated:** [July 27, 2020, 12:56pm UTC](https://discuss.elastic.co/t/upgrade-of-kibana-from-7-7-1-to-7-8-0/238895 "2020-07-27T12:56:41Z")
I upgraded from Kibana 7.7.1 to 7.8.0 (the elastic search cluster is now running 7.8.0) When starting Kibana, I get the following error message: kibana: FATAL Error: Document contains at least one immense term in fiel… --- ## [Searching using NOT IN](https://discuss.elastic.co/t/searching-using-not-in/242403)
**Author:** [@mfwstchas](https://discuss.elastic.co/u/mfwstchas)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 12:44pm UTC](https://discuss.elastic.co/t/searching-using-not-in/242403 "2020-07-27T12:44:19Z")
I'm using the below post in Akana and it returns all records with a paymentReasonCode of 426 or 427. "companyCode": \["10"\], "customerNumber":\["52526"\], "searchString":\["IN paymentReasonCode.keyword :426,427"\] Is ther… --- ## [Filter bar of enhanced table not working from a dashboard](https://discuss.elastic.co/t/filter-bar-of-enhanced-table-not-working-from-a-dashboard/242171)
**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\ **Replies:** 4\ **Last updated:** [July 27, 2020, 12:40pm UTC](https://discuss.elastic.co/t/filter-bar-of-enhanced-table-not-working-from-a-dashboard/242171 "2020-07-27T12:40:56Z")
Hello everyone! I am using kibana 7.6.2 locally and I have added enhanced table plugin. The features like computed columns are working fine, but when I add this visualization on a dashboard, the filter bar does not work… --- ## [All the names of fields, containing a specific value](https://discuss.elastic.co/t/all-the-names-of-fields-containing-a-specific-value/242745)
**Author:** [@Florent\_Fauvin](https://discuss.elastic.co/u/Florent_Fauvin)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 12:30pm UTC](https://discuss.elastic.co/t/all-the-names-of-fields-containing-a-specific-value/242745 "2020-07-27T12:30:56Z")
Hello, I would like to know which Elastic query can give me all the names of fields, containing a specific value ? (I don't want the value of the fields, just their name) Thank you very much, Florent --- ## [Empty field filled with \_source](https://discuss.elastic.co/t/empty-field-filled-with-source/242480)
**Author:** [@Celiken](https://discuss.elastic.co/u/Celiken)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 11:31am UTC](https://discuss.elastic.co/t/empty-field-filled-with-source/242480 "2020-07-27T11:31:08Z")
Hi, I'm having some trouble importing data I exported as CSV in elastic/kibana 7.8.0 The data looks like that timestamp,AL\_code,AL\_type,type,target,sgbIndex,rack\_validBatteryCount,rack\_rackId,rack\_invalidBatteryCount,… --- ## [Rollup Jobs and Limitations / Data Types](https://discuss.elastic.co/t/rollup-jobs-and-limitations-data-types/242728)
**Author:** [@michaelpietzsch](https://discuss.elastic.co/u/michaelpietzsch)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 11:18am UTC](https://discuss.elastic.co/t/rollup-jobs-and-limitations-data-types/242728 "2020-07-27T11:18:23Z")
Hi Guys, I'm new to rollup jobs and I wanted to ask your opinion on some of the issues I'm encountering. Question One: How to handle different data types such as IP Here's my way of seeing it: Rollup jobs have to mai… --- ## [Http-poller plugin](https://discuss.elastic.co/t/http-poller-plugin/242736)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 0\ **Last updated:** [July 27, 2020, 10:54am UTC](https://discuss.elastic.co/t/http-poller-plugin/242736 "2020-07-27T10:54:01Z")
Hi, I use ELK 7.7.0 I would like to use logstash's http-poller input to consume a webservice returning an array of json documents to load data into elasticsearch. the result return the first page, and the response inc… --- ## [Elasticsearch: adding a second node to the cluster - \[node-1\] master not discovered yet: have discovered \[{node-1}](https://discuss.elastic.co/t/elasticsearch-adding-a-second-node-to-the-cluster-node-1-master-not-discovered-yet-have-discovered-node-1/242529)
**Author:** [@pauleccm](https://discuss.elastic.co/u/pauleccm)\ **Replies:** 7\ **Last updated:** [July 27, 2020, 10:37am UTC](https://discuss.elastic.co/t/elasticsearch-adding-a-second-node-to-the-cluster-node-1-master-not-discovered-yet-have-discovered-node-1/242529 "2020-07-27T10:37:44Z")
I am trying to obtain a two nodes cluster. First node, master (master-1): cluster.name: "admin\_system\_elk" network.host: 0.0.0.0 node.name: "master-1" discovery.seed\_hosts: "localhost:9300" cluster.initial\_master\_nodes… --- ## [Send out email alert when some index do not receive data anymore](https://discuss.elastic.co/t/send-out-email-alert-when-some-index-do-not-receive-data-anymore/242719)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 10:24am UTC](https://discuss.elastic.co/t/send-out-email-alert-when-some-index-do-not-receive-data-anymore/242719 "2020-07-27T10:24:15Z")
Sometimes, some index in my ELK stop receiving data for some reasons, is there any way to notify me by email if something like that happen? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1903) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1905)