# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1940 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1941 --- ## [Playback of Data](https://discuss.elastic.co/t/playback-of-data/240005)
**Author:** [@hbs128](https://discuss.elastic.co/u/hbs128)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 9:30pm UTC](https://discuss.elastic.co/t/playback-of-data/240005 "2020-07-09T21:30:32Z")
Is it possible to do a playback of data on a map, and have it update as if it was streaming in real time, but displaying historical data? Attached an example pic of a previous time range, and would want it to refresh eve… --- ## [Mount Shared Repository for Snapshot](https://discuss.elastic.co/t/mount-shared-repository-for-snapshot/240563)
**Author:** [@aducSG](https://discuss.elastic.co/u/aducSG)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 9:29pm UTC](https://discuss.elastic.co/t/mount-shared-repository-for-snapshot/240563 "2020-07-09T21:29:38Z")
Hello, I want to use the Snapshot module in order to make backups of my one and only index. I created manually the folder in this location C:\\ProgramData\\Elastic\\Elasticsearch\\Snapshots, and I gave the written and read… --- ## [Logstash data not reflecting in kibana](https://discuss.elastic.co/t/logstash-data-not-reflecting-in-kibana/240583)
**Author:** [@Sai\_Avinash\_Duddupud](https://discuss.elastic.co/u/Sai_Avinash_Duddupud)\ **Replies:** 3\ **Last updated:** [July 9, 2020, 8:56pm UTC](https://discuss.elastic.co/t/logstash-data-not-reflecting-in-kibana/240583 "2020-07-09T20:56:52Z")
I am new to ELK stack and trying to setup one. Filebeat is sending logs to logstash and logstash is successfully receiving it. Also, the index pattern nsa got reflected on kibana indices list( elk\_server\_ip:9200/\_cat/in… --- ## [Mysterious \_dateparsefailure on identical fields](https://discuss.elastic.co/t/mysterious-dateparsefailure-on-identical-fields/240597)
**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\ **Replies:** 6\ **Last updated:** [July 9, 2020, 8:53pm UTC](https://discuss.elastic.co/t/mysterious-dateparsefailure-on-identical-fields/240597 "2020-07-09T20:53:48Z")
I have included below 3 csv input lines that are virtually identical to one another. The date field in the first and last parse properly whereas I get a \_dateparsefailure on the middle line. The logstash date field is s… --- ## [Printing stdout {codec =\> rubydebug} only on error](https://discuss.elastic.co/t/printing-stdout-codec-rubydebug-only-on-error/240598)
**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 8:36pm UTC](https://discuss.elastic.co/t/printing-stdout-codec-rubydebug-only-on-error/240598 "2020-07-09T20:36:16Z")
How can I control the output section of a logstash config to only print the stdout {codec =\> rubydebug} on an error? for example , on a \_dateparsefailure. --- ## [Filebeat and Logstash without ingest pipelines](https://discuss.elastic.co/t/filebeat-and-logstash-without-ingest-pipelines/240595)
**Author:** [@sera](https://discuss.elastic.co/u/sera)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 8:02pm UTC](https://discuss.elastic.co/t/filebeat-and-logstash-without-ingest-pipelines/240595 "2020-07-09T20:02:23Z")
I am building an environment as follows: server1 = logstash & filebeat (with Cisco module enabled) server2 = kibana server3 = elasticsearch I want to use this to monitor Cisco ASA firewalls. The ASA's will send logs … --- ## [Can some one help How to add two columns in Kibana tabble visulisation](https://discuss.elastic.co/t/can-some-one-help-how-to-add-two-columns-in-kibana-tabble-visulisation/240412)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 6\ **Last updated:** [July 9, 2020, 8:00pm UTC](https://discuss.elastic.co/t/can-some-one-help-how-to-add-two-columns-in-kibana-tabble-visulisation/240412 "2020-07-09T20:00:12Z")
Hi I have use case to display multiple aggrgated columns in visulisation. i am using data table as visulisation. column 1 : sum of field 1 based on filteration in a given period column 2: count of calls based on filt… --- ## [Beats behavior when output host is unreachable](https://discuss.elastic.co/t/beats-behavior-when-output-host-is-unreachable/240481)
**Author:** [@nitzan.karni](https://discuss.elastic.co/u/nitzan.karni)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 7:28pm UTC](https://discuss.elastic.co/t/beats-behavior-when-output-host-is-unreachable/240481 "2020-07-09T19:28:01Z")
Hi, I Wanted to know the filebeat and metricbeat behavior when all hosts specified on ouput.logstash / output.elastic are unreachable. Does the beat saves data it collected over the course of time the hosts were unreac… --- ## [Ignore\_older is not pushing the latest logs](https://discuss.elastic.co/t/ignore-older-is-not-pushing-the-latest-logs/239632)
**Author:** [@aolvikash](https://discuss.elastic.co/u/aolvikash)\ **Replies:** 5\ **Last updated:** [July 9, 2020, 6:51pm UTC](https://discuss.elastic.co/t/ignore-older-is-not-pushing-the-latest-logs/239632 "2020-07-09T18:51:30Z")
Hi All, I have configured ignore\_older into filebeat \[version 6.6\] so that only new logs should push into ELK, here is the ignore\_older and other related configs: ignore\_older: 1h close\_older: 24h close\_inactive: 30… --- ## [Question about logstash and kafka](https://discuss.elastic.co/t/question-about-logstash-and-kafka/240553)
**Author:** [@Maurizio\_Tarducci](https://discuss.elastic.co/u/Maurizio_Tarducci)\ **Replies:** 12\ **Last updated:** [July 9, 2020, 6:26pm UTC](https://discuss.elastic.co/t/question-about-logstash-and-kafka/240553 "2020-07-09T18:26:23Z")
Hi i would like to configure logstash with kafka in a way that based on the content of the message that logstash collect send to kafka in a different topic : for example if the message contains the string XXX i want send… --- ## [Problem in SSL between logstash and filebeat](https://discuss.elastic.co/t/problem-in-ssl-between-logstash-and-filebeat/240579)
**Author:** [@azteker](https://discuss.elastic.co/u/azteker)\ **Replies:** 1\ **Last updated:** [July 9, 2020, 5:47pm UTC](https://discuss.elastic.co/t/problem-in-ssl-between-logstash-and-filebeat/240579 "2020-07-09T17:47:46Z")
Here is the logstash's error log: Jul 09 17:34:26 elk.novalocal logstash\[15657\]: Caused by: java.security.cert.CertificateException: could not find certificate file: /etc/logstash/certs/logstash.crt Jul 09 17:34:26 elk… --- ## [Receiving remote logs in logstash](https://discuss.elastic.co/t/receiving-remote-logs-in-logstash/240234)
**Author:** [@orlapa](https://discuss.elastic.co/u/orlapa)\ **Replies:** 4\ **Last updated:** [July 9, 2020, 5:36pm UTC](https://discuss.elastic.co/t/receiving-remote-logs-in-logstash/240234 "2020-07-09T17:36:23Z")
I have configured a HSM to send lodgs via TCP to logstash listening in pot 5004, but nothing arrive. I did a test with Rsyslog in port 514 and the logs arrive. Where should I focus the serach for error, the services are … --- ## [Referencing multiple pipelines using env var](https://discuss.elastic.co/t/referencing-multiple-pipelines-using-env-var/240578)
**Author:** [@earl\_potter](https://discuss.elastic.co/u/earl_potter)\ **Replies:** 0\ **Last updated:** [July 9, 2020, 5:36pm UTC](https://discuss.elastic.co/t/referencing-multiple-pipelines-using-env-var/240578 "2020-07-09T17:36:14Z")
Using CPM and I'm currently referencing my pipeline w/the env var XPACK\_MANAGEMENT\_PIPELINE\_ID. Can I reference multiple pipelines by separating them with a comma? export XPACK\_MANAGEMENT\_PIPELINE\_ID=mypipeline01,mypip… --- ## [Kibana - Avg Table visualization for two different dates](https://discuss.elastic.co/t/kibana-avg-table-visualization-for-two-different-dates/236945)
**Author:** [@nareshnakka](https://discuss.elastic.co/u/nareshnakka)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 5:36pm UTC](https://discuss.elastic.co/t/kibana-avg-table-visualization-for-two-different-dates/236945 "2020-07-09T17:36:00Z")
Hello experts, I am trying to visualize some date into Kibana table. But unable to generate comparative table of two different dates like below. I can visualize it as a graph but , I want it as a table. Sample Data in … --- ## [Is Elasticsearch as a primary database better than Oracle?](https://discuss.elastic.co/t/is-elasticsearch-as-a-primary-database-better-than-oracle/236970)
**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\ **Replies:** 12\ **Last updated:** [July 9, 2020, 5:25pm UTC](https://discuss.elastic.co/t/is-elasticsearch-as-a-primary-database-better-than-oracle/236970 "2020-07-09T17:25:04Z")
Hi, I am a student and my project is about Elastic Stack. the company I work for is currently using oracle for managing its data. they want assess Elasticsearch as a replacement. according to my project success they … --- ## [Data node won't start due to name duplication](https://discuss.elastic.co/t/data-node-wont-start-due-to-name-duplication/240576)
**Author:** [@Ugon](https://discuss.elastic.co/u/Ugon)\ **Replies:** 0\ **Last updated:** [July 9, 2020, 5:21pm UTC](https://discuss.elastic.co/t/data-node-wont-start-due-to-name-duplication/240576 "2020-07-09T17:21:52Z")
Hello, I'm experiencing an error where my elasticsearch (6.7) data nodes won't start due to name duplication. Caused by: java.lang.IllegalStateException: index and alias names need to be unique, but the following d… --- ## [How to replace Logstash timestamp with URL request timestamp in Elasticsearch?](https://discuss.elastic.co/t/how-to-replace-logstash-timestamp-with-url-request-timestamp-in-elasticsearch/240525)
**Author:** [@Rahul\_Chougule](https://discuss.elastic.co/u/Rahul_Chougule)\ **Replies:** 1\ **Last updated:** [July 9, 2020, 5:01pm UTC](https://discuss.elastic.co/t/how-to-replace-logstash-timestamp-with-url-request-timestamp-in-elasticsearch/240525 "2020-07-09T17:01:56Z")
I have created .conf file where I am ingesting HTTP endpoints output data in Elasticsearch with the help of http\_poller plugin. I want to replace timestamp which is provided by Logstash with the timestamp of at which act… --- ## [Looks like you don't have any metrics indices](https://discuss.elastic.co/t/looks-like-you-dont-have-any-metrics-indices/239933)
**Author:** [@DucretJe](https://discuss.elastic.co/u/DucretJe)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 4:57pm UTC](https://discuss.elastic.co/t/looks-like-you-dont-have-any-metrics-indices/239933 "2020-07-09T16:57:50Z")
Hi there, I'm trying to set up a monitoring system with ELK. I deploy Beats on my infra Beats output to Logstash server Logstash server output to Elasticsearch Server And I want to visualize my data with Kibana. On… --- ## [Timelion interface traffic query](https://discuss.elastic.co/t/timelion-interface-traffic-query/240031)
**Author:** [@kbrown](https://discuss.elastic.co/u/kbrown)\ **Replies:** 1\ **Last updated:** [July 9, 2020, 4:48pm UTC](https://discuss.elastic.co/t/timelion-interface-traffic-query/240031 "2020-07-09T16:48:29Z")
Hi, I'm trying to fix a timelion query for interface traffic via snmp with ifHCInOctets and ifHCOutOctets. I've tried it in a few ways, trying to follow examples from this forum and also from https://berrynetworks.word… --- ## [Unable to connect to database. The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption](https://discuss.elastic.co/t/unable-to-connect-to-database-the-driver-could-not-establish-a-secure-connection-to-sql-server-by-using-secure-sockets-layer-ssl-encryption/240562)
**Author:** [@Andrew\_Foxis](https://discuss.elastic.co/u/Andrew_Foxis)\ **Replies:** 1\ **Last updated:** [July 9, 2020, 4:41pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-database-the-driver-could-not-establish-a-secure-connection-to-sql-server-by-using-secure-sockets-layer-ssl-encryption/240562 "2020-07-09T16:41:34Z")
Hi all! I configure connect to database jdbc and get error( \[2020-07-09T19:07:06,569\]\[ERROR\]\[logstash.inputs.jdbc \] Unable to connect to database. Tried 1 times {:error\_message=\>"Java::ComMicrosoftSqlserverJdbc::SQ… --- ## [An election requires a node with id\[-zQWNDqiRVe\_EHGtFKi6Zw\], have discovered \[...\] which is not a quorum](https://discuss.elastic.co/t/an-election-requires-a-node-with-id-zqwndqirve-ehgtfki6zw-have-discovered-which-is-not-a-quorum/240537)
**Author:** [@MartiM](https://discuss.elastic.co/u/MartiM)\ **Replies:** 3\ **Last updated:** [July 9, 2020, 4:40pm UTC](https://discuss.elastic.co/t/an-election-requires-a-node-with-id-zqwndqirve-ehgtfki6zw-have-discovered-which-is-not-a-quorum/240537 "2020-07-09T16:40:20Z")
Hi Everybody, We use 2 have to nodes of elasticsearch on the cluster. One of them deleted by a human error. Now we are trying to recover the cluster from one elastic node and trying to add 2 news nodes. Finally the cl… --- ## [S3 Filebeat Input Cloudfront Logs - handleSQSMessage failed: json unmarshal sqs message body failed](https://discuss.elastic.co/t/s3-filebeat-input-cloudfront-logs-handlesqsmessage-failed-json-unmarshal-sqs-message-body-failed/239716)
**Author:** [@AddChickpeas](https://discuss.elastic.co/u/AddChickpeas)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 4:24pm UTC](https://discuss.elastic.co/t/s3-filebeat-input-cloudfront-logs-handlesqsmessage-failed-json-unmarshal-sqs-message-body-failed/239716 "2020-07-09T16:24:18Z")
Hello, I'm trying to get the S3 input configured to ingest Cloudfront logs. Problem is, regardless of what settings I use, it runs into a log in can't process and gives me: handleSQSMessage failed: json unmarshal sqs m… --- ## [Calculate % in TSVB](https://discuss.elastic.co/t/calculate-in-tsvb/239932)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 4\ **Last updated:** [July 9, 2020, 4:23pm UTC](https://discuss.elastic.co/t/calculate-in-tsvb/239932 "2020-07-09T16:23:36Z")
This is how my data which is compile over time. every five min sample, one record is as below, I have hundreds of systems. system name: sys1, total cpus = integer used cpus = integer free cpus = integer would like … --- ## [Check boxes in kibana](https://discuss.elastic.co/t/check-boxes-in-kibana/240420)
**Author:** [@phani2](https://discuss.elastic.co/u/phani2)\ **Replies:** 5\ **Last updated:** [July 9, 2020, 4:22pm UTC](https://discuss.elastic.co/t/check-boxes-in-kibana/240420 "2020-07-09T16:22:31Z")
is it possible to create checkboxes in kibana? --- ## [Logstash csv loading broken duplicate of last row](https://discuss.elastic.co/t/logstash-csv-loading-broken-duplicate-of-last-row/238295)
**Author:** [@noamc](https://discuss.elastic.co/u/noamc)\ **Replies:** 5\ **Last updated:** [July 9, 2020, 4:18pm UTC](https://discuss.elastic.co/t/logstash-csv-loading-broken-duplicate-of-last-row/238295 "2020-07-09T16:18:34Z")
Hello hello, Quite new to Elastic Stack, and I'm encountering a problem which also experienced colleagues can't figure our the reason for this event happening. Bottom line - my data loads fine, except that almost every… --- ## [Split field values in logstash](https://discuss.elastic.co/t/split-field-values-in-logstash/240285)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 7\ **Last updated:** [July 9, 2020, 3:54pm UTC](https://discuss.elastic.co/t/split-field-values-in-logstash/240285 "2020-07-09T15:54:56Z")
Hi All, I'm ingesting data into elasticsearch using logstash http\_poller plugin. WE have a value which contains the location field like city, country e.g: Location : Chennai, India Is there a possible way to split th… --- ## [Synonym graph on shingles gives error; works with lenient=true](https://discuss.elastic.co/t/synonym-graph-on-shingles-gives-error-works-with-lenient-true/240558)
**Author:** [@chari](https://discuss.elastic.co/u/chari)\ **Replies:** 0\ **Last updated:** [July 9, 2020, 3:53pm UTC](https://discuss.elastic.co/t/synonym-graph-on-shingles-gives-error-works-with-lenient-true/240558 "2020-07-09T15:53:17Z")
I get an error :- RequestError(400, 'illegal\_argument\_exception', 'failed to build synonyms') with the following analyzer, but it works if I set lenient=true. Any insight into why I get an error and if there is any dow… --- ## [Problem with parse json in strings](https://discuss.elastic.co/t/problem-with-parse-json-in-strings/240435)
**Author:** [@Vladimir\_Martyshin](https://discuss.elastic.co/u/Vladimir_Martyshin)\ **Replies:** 1\ **Last updated:** [July 9, 2020, 3:51pm UTC](https://discuss.elastic.co/t/problem-with-parse-json-in-strings/240435 "2020-07-09T15:51:29Z")
Hello! I am trying to parse logs. The log have field "message". When I have message: Connection lost after 18 seconds all ok. But, when I get the log with message: CMD: exit. I get the following error in logstash: o… --- ## [Filebeat with ssl error on windows server 2008](https://discuss.elastic.co/t/filebeat-with-ssl-error-on-windows-server-2008/240555)
**Author:** [@mibfb23](https://discuss.elastic.co/u/mibfb23)\ **Replies:** 0\ **Last updated:** [July 9, 2020, 3:34pm UTC](https://discuss.elastic.co/t/filebeat-with-ssl-error-on-windows-server-2008/240555 "2020-07-09T15:34:01Z")
Hello, I installed filebeat 7.7.0 on a windows 2008 server with the following settings: ###################### Filebeat Configuration Example ######################### # This file is an example configuration file hig… --- ## [Match keywords across multiple fields with fuzzy matching](https://discuss.elastic.co/t/match-keywords-across-multiple-fields-with-fuzzy-matching/240551)
**Author:** [@duncRed](https://discuss.elastic.co/u/duncRed)\ **Replies:** 0\ **Last updated:** [July 9, 2020, 3:24pm UTC](https://discuss.elastic.co/t/match-keywords-across-multiple-fields-with-fuzzy-matching/240551 "2020-07-09T15:24:20Z")
We are looking to match keywords across multiple fields so to do this we looked at the multi\_match query and configuring it with a type of "cross\_fields". This of course works when the search term keywords are spelt cor… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1939) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1941)