# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1969

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1970

---

## [Is it possible to show custom messages on dashboard?](https://discuss.elastic.co/t/is-it-possible-to-show-custom-messages-on-dashboard/238560)

<div class="topic-metadata">

**Author:** [@Jaishree\_Pal](https://discuss.elastic.co/u/Jaishree_Pal)\
**Replies:** 1\
**Last updated:** [June 26, 2020, 9:34am UTC](https://discuss.elastic.co/t/is-it-possible-to-show-custom-messages-on-dashboard/238560 "2020-06-26T09:34:26Z")

</div>

Hi guys, I'm actually facing one issue in my dashboard. Whenever I apply filters through controls visualization, if I select any item for which data is not present then visualizations just say 'no result found' or in cas…

---

## [Keyword issues in ELASTIC SEARCH](https://discuss.elastic.co/t/keyword-issues-in-elastic-search/236453)

<div class="topic-metadata">

**Author:** [@Sagar\_jain](https://discuss.elastic.co/u/Sagar_jain)\
**Replies:** 14\
**Last updated:** [June 26, 2020, 9:28am UTC](https://discuss.elastic.co/t/keyword-issues-in-elastic-search/236453 "2020-06-26T09:28:48Z")

</div>

KEYWORD ISSUE sanatizers Misspelled Keyword giving null results.

---

## [Heartbeat](https://discuss.elastic.co/t/heartbeat/238822)

<div class="topic-metadata">

**Author:** [@Downer](https://discuss.elastic.co/u/Downer)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 9:27am UTC](https://discuss.elastic.co/t/heartbeat/238822 "2020-06-26T09:27:06Z")

</div>

Hello, I'm using heartbeat in docker which ping an url using http method but my firewall DROP the response. What rule I need to add on it please ?

---

## [Error starting elastic search](https://discuss.elastic.co/t/error-starting-elastic-search/238821)

<div class="topic-metadata">

**Author:** [@dorcas](https://discuss.elastic.co/u/dorcas)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 9:27am UTC](https://discuss.elastic.co/t/error-starting-elastic-search/238821 "2020-06-26T09:27:02Z")

</div>

Commons Daemon procrun stderr initialized ERROR: the system property \[es.path.conf\] must be set can someone help with this error

---

## [Running multiple logstash.conf file in same machine](https://discuss.elastic.co/t/running-multiple-logstash-conf-file-in-same-machine/238819)

<div class="topic-metadata">

**Author:** [@TUSHAR\_Sinha](https://discuss.elastic.co/u/TUSHAR_Sinha)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 9:13am UTC](https://discuss.elastic.co/t/running-multiple-logstash-conf-file-in-same-machine/238819 "2020-06-26T09:13:35Z")

</div>

Hi, community, I have log files of different software running and the log pattern is different. I want to create two different logstash.conf file to filter them both and index into one elasticsearch server. How can I do…

---

## [Filebeat timestamp processor handle timezone abbreviation incorrectly](https://discuss.elastic.co/t/filebeat-timestamp-processor-handle-timezone-abbreviation-incorrectly/238729)

<div class="topic-metadata">

**Author:** [@hatifnatt](https://discuss.elastic.co/u/hatifnatt)\
**Replies:** 1\
**Last updated:** [June 26, 2020, 9:09am UTC](https://discuss.elastic.co/t/filebeat-timestamp-processor-handle-timezone-abbreviation-incorrectly/238729 "2020-06-26T09:09:48Z")

</div>

Hi. I have log with timestamp in format like this 2020-06-25 19:24:46.676 MSK 2020-06-25 19:24:46.676 MSK 2020-06-25 19:24:46.678 MSK 2020-06-25 19:24:46.712 MSK My filebeat config (part of it) filebeat.inputs: - ty…

---

## [Beginner - metricbeat system dashboard with basic logstash output set](https://discuss.elastic.co/t/beginner-metricbeat-system-dashboard-with-basic-logstash-output-set/238635)

<div class="topic-metadata">

**Author:** [@NeitoFR](https://discuss.elastic.co/u/NeitoFR)\
**Replies:** 5\
**Last updated:** [June 26, 2020, 9:08am UTC](https://discuss.elastic.co/t/beginner-metricbeat-system-dashboard-with-basic-logstash-output-set/238635 "2020-06-26T09:08:29Z")

</div>

Hi everyone, I'm using ELK 7.5.2 with basic metricbeat modules (system, docker) I managed to load the Kibana dashboard to Kibana correctly. But now I'm making the logs pass through logstash (without any filter) and the …

---

## [Regarding path.real](https://discuss.elastic.co/t/regarding-path-real/236853)

<div class="topic-metadata">

**Author:** [@galvin1234](https://discuss.elastic.co/u/galvin1234)\
**Replies:** 10\
**Last updated:** [June 26, 2020, 8:59am UTC](https://discuss.elastic.co/t/regarding-path-real/236853 "2020-06-26T08:59:00Z")

</div>

Hi I am using ElasticSearch and FSCrawler together. I have indexed a document directory with default of FSCrawler settings, no template applied no filter applied. simple standard configuration only. I have a simple que…

---

## [Need help in sending Geo Ip data from beats through logstash](https://discuss.elastic.co/t/need-help-in-sending-geo-ip-data-from-beats-through-logstash/238817)

<div class="topic-metadata">

**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 8:52am UTC](https://discuss.elastic.co/t/need-help-in-sending-geo-ip-data-from-beats-through-logstash/238817 "2020-06-26T08:52:11Z")

</div>

Hi, I have a centralised logstash server and configured beats for sending data to elasticsearch through logstash. i have filebeat apache and iis module and auditbeat installed. Data is parsed properly and reflecting i…

---

## [Data loss in Elasticstack](https://discuss.elastic.co/t/data-loss-in-elasticstack/236005)

<div class="topic-metadata">

**Author:** [@manjunathpb](https://discuss.elastic.co/u/manjunathpb)\
**Replies:** 6\
**Last updated:** [June 26, 2020, 8:47am UTC](https://discuss.elastic.co/t/data-loss-in-elasticstack/236005 "2020-06-26T08:47:46Z")

</div>

Data used to get loaded to Elastic search without any issue but from last 4 weeks onward we can see reduction in Data when checked in Kibana Dashboard. Later to find out where the Data loss is happening we checked in Da…

---

## [Request timeout while taking snapshot of indices for backup](https://discuss.elastic.co/t/request-timeout-while-taking-snapshot-of-indices-for-backup/238815)

<div class="topic-metadata">

**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 8:45am UTC](https://discuss.elastic.co/t/request-timeout-while-taking-snapshot-of-indices-for-backup/238815 "2020-06-26T08:45:58Z")

</div>

Hi, I am trying to take backup of around 2TB in Elasticsearch(version 7.0.1) and the request timeouts exactly after 1 hr of processing. Please find the curl command for taking snapshot below: curl -s -X PUT "\<ELASTICS…

---

## [Invalid UTF-8 middle byte 0x22\\n](https://discuss.elastic.co/t/invalid-utf-8-middle-byte-0x22-n/236047)

<div class="topic-metadata">

**Author:** [@joaopedro](https://discuss.elastic.co/u/joaopedro)\
**Replies:** 3\
**Last updated:** [June 26, 2020, 8:44am UTC](https://discuss.elastic.co/t/invalid-utf-8-middle-byte-0x22-n/236047 "2020-06-26T08:44:55Z")

</div>

So, I am trying to create a flask api that gets the name of the field of search and the term that we are going to search, then, the script writes the info into a file and uses subprocess to run a search, see: file = op…

---

## [Unable to elect master nodes after hardware changes](https://discuss.elastic.co/t/unable-to-elect-master-nodes-after-hardware-changes/238813)

<div class="topic-metadata">

**Author:** [@shubhamblackstratus](https://discuss.elastic.co/u/shubhamblackstratus)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 8:39am UTC](https://discuss.elastic.co/t/unable-to-elect-master-nodes-after-hardware-changes/238813 "2020-06-26T08:39:28Z")

</div>

I am having three nodes setup in AWS ec2 and it was working fine. Before couple of days, I had to replicate my nodes image to another instance to increase space. I changed IPs in yml file but while starting cluster, i g…

---

## [Want to format date](https://discuss.elastic.co/t/want-to-format-date/234312)

<div class="topic-metadata">

**Author:** [@shubhamblackstratus](https://discuss.elastic.co/u/shubhamblackstratus)\
**Replies:** 4\
**Last updated:** [June 26, 2020, 8:29am UTC](https://discuss.elastic.co/t/want-to-format-date/234312 "2020-06-26T08:29:11Z")

</div>

My current date format is "2019-11-11T05:59:12.000Z" and I want to modify this with day\_of\_the\_week. I tried to achieve it by utilising painless script but it forces me to use terms as an aggregation without mentioning …

---

## [Pipeline processor with IF condition](https://discuss.elastic.co/t/pipeline-processor-with-if-condition/238618)

<div class="topic-metadata">

**Author:** [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\
**Replies:** 5\
**Last updated:** [June 26, 2020, 8:06am UTC](https://discuss.elastic.co/t/pipeline-processor-with-if-condition/238618 "2020-06-26T08:06:37Z")

</div>

Hi Team, We want to use Conditional pipeline processor on basis of operationName in below JSON data IF "operationName": "/searchRIBCustomerInMDM | request/response", then pipeline should execute . { "\_index": "j…

---

## [Kibana :: Count if the id not exist for the event](https://discuss.elastic.co/t/kibana-count-if-the-id-not-exist-for-the-event/238609)

<div class="topic-metadata">

**Author:** [@Jai1](https://discuss.elastic.co/u/Jai1)\
**Replies:** 7\
**Last updated:** [June 26, 2020, 8:01am UTC](https://discuss.elastic.co/t/kibana-count-if-the-id-not-exist-for-the-event/238609 "2020-06-26T08:01:09Z")

</div>

hi, I have a data like this: id : 1,event: event1 id: 2,event:event1 id: 2,event:event2 id:3,event:event1 Need to count the ids having only event1 not in event2 expecting is 2 count

---

## [Kibana is not working, properly, it is very slow](https://discuss.elastic.co/t/kibana-is-not-working-properly-it-is-very-slow/238797)

<div class="topic-metadata">

**Author:** [@Sagar\_jain](https://discuss.elastic.co/u/Sagar_jain)\
**Replies:** 9\
**Last updated:** [June 26, 2020, 7:45am UTC](https://discuss.elastic.co/t/kibana-is-not-working-properly-it-is-very-slow/238797 "2020-06-26T07:45:51Z")

</div>

kibana is not working, properly, it is very slow Is there any cache stored, which makes it slow?

---

## [Grok Filter - alternative patterns for same field?](https://discuss.elastic.co/t/grok-filter-alternative-patterns-for-same-field/238418)

<div class="topic-metadata">

**Author:** [@Ben\_Bryzak](https://discuss.elastic.co/u/Ben_Bryzak)\
**Replies:** 2\
**Last updated:** [June 26, 2020, 7:34am UTC](https://discuss.elastic.co/t/grok-filter-alternative-patterns-for-same-field/238418 "2020-06-26T07:34:13Z")

</div>

Hi - I'm trying to create a grok pattern to match a field that contains one or more words and assign a field name to it. When the field contains multiple words, it is wrapped in quotes: eg. FieldValue or "Field Value…

---

## [Wrapping Multiline log on filebeat for the below logs](https://discuss.elastic.co/t/wrapping-multiline-log-on-filebeat-for-the-below-logs/238804)

<div class="topic-metadata">

**Author:** [@shekharkhatri](https://discuss.elastic.co/u/shekharkhatri)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 7:30am UTC](https://discuss.elastic.co/t/wrapping-multiline-log-on-filebeat-for-the-below-logs/238804 "2020-06-26T07:30:39Z")

</div>

Hello everyone! I am trying to ingest a log that looks something like this: \*144\*04:30:19 SOME EVENT 06:17:52 -\> TRANSACTION START 06:17:52 .... LOG DATA 06:18:49 \<- TRANSACTION END 06:17:52 -\> TRANSACTION START 06:17:…

---

## [Kibana 7.8.0 URL problem Metrics Logstash](https://discuss.elastic.co/t/kibana-7-8-0-url-problem-metrics-logstash/237790)

<div class="topic-metadata">

**Author:** [@edumartinDC](https://discuss.elastic.co/u/edumartinDC)\
**Replies:** 3\
**Last updated:** [June 26, 2020, 7:24am UTC](https://discuss.elastic.co/t/kibana-7-8-0-url-problem-metrics-logstash/237790 "2020-06-26T07:24:44Z")

</div>

Good morning: After upgrading to version 7.8.0, when I access the logstash node through the stack's metrics, it shows error 404. As far as I could see it is a problem in the redirection of the url. This is the one sho…

---

## [How to extract specific keyword from Logs in logstash](https://discuss.elastic.co/t/how-to-extract-specific-keyword-from-logs-in-logstash/238802)

<div class="topic-metadata">

**Author:** [@Magesh](https://discuss.elastic.co/u/Magesh)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 7:14am UTC](https://discuss.elastic.co/t/how-to-extract-specific-keyword-from-logs-in-logstash/238802 "2020-06-26T07:14:52Z")

</div>

Hi I would like to extract specific keyword from Logs and store it in another variable using logstash pls find below the logs 6/26 00:33:04 -INFOS- {1:2} Decision PASSED\_WITH\_RESV applied on 1 message(s) api.service#…

---

## [Does the javascript elasticsearch client have health checks?](https://discuss.elastic.co/t/does-the-javascript-elasticsearch-client-have-health-checks/237265)

<div class="topic-metadata">

**Author:** [@Aurel\_Drejta](https://discuss.elastic.co/u/Aurel_Drejta)\
**Replies:** 2\
**Last updated:** [June 26, 2020, 7:11am UTC](https://discuss.elastic.co/t/does-the-javascript-elasticsearch-client-have-health-checks/237265 "2020-06-26T07:11:59Z")

</div>

Hi everyone, I've set up 3 elasticsearch nodes that are booth master and data nodes. I have a node js application that points to these nodes with this configuration var ESDB = function () { this.client = new elast…

---

## [Master not discovered ,unable to form a cluster](https://discuss.elastic.co/t/master-not-discovered-unable-to-form-a-cluster/238801)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 7:11am UTC](https://discuss.elastic.co/t/master-not-discovered-unable-to-form-a-cluster/238801 "2020-06-26T07:11:35Z")

</div>

Hello Team, I am trying to form a cluster with 2 nodes in DEV environment, please find the below details and help me to resolve the issue. node1 configuration cluster.name: my-app node.name: node1 network.host: 158.15…

---

## [Pq: SSL is not enabled on the server in Metricbeat log](https://discuss.elastic.co/t/pq-ssl-is-not-enabled-on-the-server-in-metricbeat-log/238785)

<div class="topic-metadata">

**Author:** [@himalc](https://discuss.elastic.co/u/himalc)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 5:27am UTC](https://discuss.elastic.co/t/pq-ssl-is-not-enabled-on-the-server-in-metricbeat-log/238785 "2020-06-26T05:27:40Z")

</div>

Hi, I have below issue when connecting to the postgresql database from Metricbeat postgres module. 2020-06-24T05:25:33 INFO module/wrapper.go:252 Error fetching data for metricset postgresql.activity: error in QuerySta…

---

## [Handling exception: org.logstash.beats.InvalidFrameProtocolException: Invalid version of beats protocol: 71](https://discuss.elastic.co/t/handling-exception-org-logstash-beats-invalidframeprotocolexception-invalid-version-of-beats-protocol-71/238604)

<div class="topic-metadata">

**Author:** [@Magesh](https://discuss.elastic.co/u/Magesh)\
**Replies:** 2\
**Last updated:** [June 26, 2020, 7:08am UTC](https://discuss.elastic.co/t/handling-exception-org-logstash-beats-invalidframeprotocolexception-invalid-version-of-beats-protocol-71/238604 "2020-06-26T07:08:27Z")

</div>

Hi, I'm Using Filebeat 8.0/Logstash8.0/Elasticsearch8.0 version in windows 10 environment and i'm trying to send the logs from filebeat--\>logstash--\>elasticsearch. post start of filebeat / logstash/elasticsearch, i'm g…

---

## [Parsing email data with regex in scripted field](https://discuss.elastic.co/t/parsing-email-data-with-regex-in-scripted-field/238593)

<div class="topic-metadata">

**Author:** [@whyptrap](https://discuss.elastic.co/u/whyptrap)\
**Replies:** 5\
**Last updated:** [June 26, 2020, 7:08am UTC](https://discuss.elastic.co/t/parsing-email-data-with-regex-in-scripted-field/238593 "2020-06-26T07:08:22Z")

</div>

Hello, i am newbie in ELK stack. I want to create new field using scripted field in kibana. The new field contain parsed email data from exist field that contain email data too. I just want to get string before @ charact…

---

## [Customer Interest Related Keyword search in Elastic Search](https://discuss.elastic.co/t/customer-interest-related-keyword-search-in-elastic-search/235116)

<div class="topic-metadata">

**Author:** [@Sagar\_jain](https://discuss.elastic.co/u/Sagar_jain)\
**Replies:** 40\
**Last updated:** [June 26, 2020, 6:34am UTC](https://discuss.elastic.co/t/customer-interest-related-keyword-search-in-elastic-search/235116 "2020-06-26T06:34:16Z")

</div>

How to create Customer Interest Related Keyword search in Elastic Search? Like "Laptop" keyword Then Laptops should display first, not Laptop Bags first, not laptop stand, and other, these should display in last

---

## [Deleting documents from ElasticSearch when rows are deleted from CSV file](https://discuss.elastic.co/t/deleting-documents-from-elasticsearch-when-rows-are-deleted-from-csv-file/238794)

<div class="topic-metadata">

**Author:** [@damian.bulak](https://discuss.elastic.co/u/damian.bulak)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 6:30am UTC](https://discuss.elastic.co/t/deleting-documents-from-elasticsearch-when-rows-are-deleted-from-csv-file/238794 "2020-06-26T06:30:29Z")

</div>

I have a CSV file which contains data like this: 111;Some description 112;Different description I run Logstash as a Linux service and it loaded the data to ElasticSearch correctly. When I add new lines to the CSV file…

---

## [Dynamically choice in second option list](https://discuss.elastic.co/t/dynamically-choice-in-second-option-list/238513)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 4\
**Last updated:** [June 26, 2020, 6:15am UTC](https://discuss.elastic.co/t/dynamically-choice-in-second-option-list/238513 "2020-06-26T06:15:18Z")

</div>

Hi, I made a dashboard that contains a control visualization with two option lists (A and B, A is parent of B ). Is there any way for the second option list to be filled "automatically" when I have choosen something in…

---

## [Draw date histogram after with applying filter](https://discuss.elastic.co/t/draw-date-histogram-after-with-applying-filter/238511)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 2\
**Last updated:** [June 26, 2020, 6:13am UTC](https://discuss.elastic.co/t/draw-date-histogram-after-with-applying-filter/238511 "2020-06-26T06:13:09Z")

</div>

Hi, I made a dashboard that contains a control visualization with two option lists (A and B, A is parent of B ) and a Date histogram. Is there any way for the histogram to "draw" the lines after I have choosen somethin…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1968)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1970)
