# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1989 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1990 --- ## [Grok Data in curly braces](https://discuss.elastic.co/t/grok-data-in-curly-braces/237680)
**Author:** [@marco2005](https://discuss.elastic.co/u/marco2005)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 4:52pm UTC](https://discuss.elastic.co/t/grok-data-in-curly-braces/237680 "2020-06-18T16:52:46Z")
I have section in the log in curly braces Thu Jun 18 08:01:42 CEST 2020|{"timestamp":1592460102635,"caller":"test.customer@customer1","action":"LOGIN","message":"ID000066 User \[test.customer@customer1\] logged in success… --- ## [Compile OSS Beats](https://discuss.elastic.co/t/compile-oss-beats/237679)
**Author:** [@magneton](https://discuss.elastic.co/u/magneton)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 4:44pm UTC](https://discuss.elastic.co/t/compile-oss-beats/237679 "2020-06-18T16:44:08Z")
Dear Sirs, I have successfully compiled beats from https://github.com/elastic/beats on a Pine64 arm64 device. However, it will not connect to my elasticsearch. I think the verion produced is not the OSS version. Can s… --- ## [Kibana behind Apache Reverse Proxy](https://discuss.elastic.co/t/kibana-behind-apache-reverse-proxy/235501)
**Author:** [@Sarmad](https://discuss.elastic.co/u/Sarmad)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 4:31pm UTC](https://discuss.elastic.co/t/kibana-behind-apache-reverse-proxy/235501 "2020-06-18T16:31:43Z")
Hello, I am deploying Kibana behind Apache Reverse Proxy, getting all the help from the links from this forum. However I am stuck at this point. If I add server.basepath= "/kibana" in kibana.yml, kibana doesn't load a… --- ## [How to use regex function on kibana for Ordered Search / match multiple keyword(sentence)](https://discuss.elastic.co/t/how-to-use-regex-function-on-kibana-for-ordered-search-match-multiple-keyword-sentence/237452)
**Author:** [@nagmawan](https://discuss.elastic.co/u/nagmawan)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 4:43am UTC](https://discuss.elastic.co/t/how-to-use-regex-function-on-kibana-for-ordered-search-match-multiple-keyword-sentence/237452 "2020-06-18T04:43:28Z")
Hi, Sorry i'm beginner in kibana. I will ask something about search, and will this work on kibana? I want to use the regex function with the goal to order search / matching 2 sentences or maybe more in just 1 field. I … --- ## [Repository Error](https://discuss.elastic.co/t/repository-error/237236)
**Author:** [@Dev\_Chakraborty](https://discuss.elastic.co/u/Dev_Chakraborty)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 7:19am UTC](https://discuss.elastic.co/t/repository-error/237236 "2020-06-16T07:19:19Z")
Hello Team, I have snapshot scheduled from my Linux instance to S3 bucket and its happening perfectly fine, But I could see that in kibana it shows an error "Some repositories contain errors Snapshots might load slowly.… --- ## [Metricbeat & zabbix](https://discuss.elastic.co/t/metricbeat-zabbix/237515)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [June 18, 2020, 3:38pm UTC](https://discuss.elastic.co/t/metricbeat-zabbix/237515 "2020-06-18T15:38:43Z")
which one is better for large computer center (10,000+) linux system? we have zabbix running at this time with alerting and few more stuff with it. tested metricbeat with few system, just system level stuff and index b… --- ## [Logstash date field error](https://discuss.elastic.co/t/logstash-date-field-error/236463)
**Author:** [@bdn](https://discuss.elastic.co/u/bdn)\ **Replies:** 5\ **Last updated:** [June 18, 2020, 3:34pm UTC](https://discuss.elastic.co/t/logstash-date-field-error/236463 "2020-06-18T15:34:49Z")
I have log files from where I've to query documents through the date field. Here is the log date format. 2020-06-10 14:01:26 I've defined a grok pattern like below in Logstash for the log. filter { grok { … --- ## [Logstash Syntax :: Copy String from One Field into a New Field](https://discuss.elastic.co/t/logstash-syntax-copy-string-from-one-field-into-a-new-field/237661)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 3:29pm UTC](https://discuss.elastic.co/t/logstash-syntax-copy-string-from-one-field-into-a-new-field/237661 "2020-06-18T15:29:58Z")
Hello Logstash Zen Masters, In my data, I have a field named FieldA which contains a string. Later in my filter{} section, I need to access and copy that string into a newly-created field. I've tried a lot of variatio… --- ## [Hyphen(-) is not matching using elasticsearch query](https://discuss.elastic.co/t/hyphen-is-not-matching-using-elasticsearch-query/237668)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 3:29pm UTC](https://discuss.elastic.co/t/hyphen-is-not-matching-using-elasticsearch-query/237668 "2020-06-18T15:29:05Z")
Hi Team, Am trying to fetch data "/This is/my-query" am not able to fetch my-query. Hyphen is not matching . Can you please provide elasticsearch regex patterns Below is my query { "query": { "regexp": { "reques… --- ## [Payload content length greater than maximum allowed: 3000000](https://discuss.elastic.co/t/payload-content-length-greater-than-maximum-allowed-3000000/236780)
**Author:** [@davehatma](https://discuss.elastic.co/u/davehatma)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 3:26pm UTC](https://discuss.elastic.co/t/payload-content-length-greater-than-maximum-allowed-3000000/236780 "2020-06-18T15:26:35Z")
I have an index pattern that will not retrieve documents in Kibana. I have researched and know about the server.maxPayloadBytes. I have used the Elasticsearch API to query the documents in the index pattern and examine… --- ## [Reindex fails in Kibana DevTools Console, but succeeds on command line using curl](https://discuss.elastic.co/t/reindex-fails-in-kibana-devtools-console-but-succeeds-on-command-line-using-curl/237266)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 3\ **Last updated:** [June 18, 2020, 3:18pm UTC](https://discuss.elastic.co/t/reindex-fails-in-kibana-devtools-console-but-succeeds-on-command-line-using-curl/237266 "2020-06-18T15:18:06Z")
Hi, I want to reindex a couple of indices into a single one. This fails in Kibana DevTools Console, but succeeds using cURL on the command line. Kibana DevTools Console returns: "error" : { "root\_cause" : \[ … --- ## [Mage build from x-pack/metricbeat fails](https://discuss.elastic.co/t/mage-build-from-x-pack-metricbeat-fails/237664)
**Author:** [@RaoulDuke-Esq](https://discuss.elastic.co/u/RaoulDuke-Esq)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 3:17pm UTC](https://discuss.elastic.co/t/mage-build-from-x-pack-metricbeat-fails/237664 "2020-06-18T15:17:06Z")
Building from beats/metricbeat works just fine but building from x-pack/metricbeat fails go version go1.14.3 darwin/amd64 in ....../beats/x-pack/metricbeat GOOS=linux GOARCH=arm mage build \>\> build: Building metricbe… --- ## [Logstash filter pipeline Dynamic if on fields](https://discuss.elastic.co/t/logstash-filter-pipeline-dynamic-if-on-fields/237581)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 3:15pm UTC](https://discuss.elastic.co/t/logstash-filter-pipeline-dynamic-if-on-fields/237581 "2020-06-18T15:15:28Z")
Hello, is there any way how to match any field while constructing if in filter pipeline, for example: Tried but it seems it matches half of the fields, and half it does not.. if \[coad\]\[queueStatus\]\[queueByTypes\]\[\*… --- ## [ELK without logstash](https://discuss.elastic.co/t/elk-without-logstash/237119)
**Author:** [@YanisALBIK](https://discuss.elastic.co/u/YanisALBIK)\ **Replies:** 6\ **Last updated:** [June 18, 2020, 2:59pm UTC](https://discuss.elastic.co/t/elk-without-logstash/237119 "2020-06-18T14:59:41Z")
Hi, My team and me are currenlty working on a project to allow our client to view some dashboards in Kibana and we would like to get some elements to validate the architecture we define. We would like to know at which … --- ## [Logstash Syntax :: Check Boolian Value within a Field?](https://discuss.elastic.co/t/logstash-syntax-check-boolian-value-within-a-field/237530)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 3\ **Last updated:** [June 18, 2020, 2:57pm UTC](https://discuss.elastic.co/t/logstash-syntax-check-boolian-value-within-a-field/237530 "2020-06-18T14:57:19Z")
Hi Logstash Ninjas, In my filter{} section, I think I am creating a field with a Boolean value in it: if SOME CONDITION { mutate { add\_field =\> { "MyFlag" =\> 'true' } convert =\> { "MyFlag" =\> "boolean" } } … --- ## [After windows update Filebeat service stops immediately](https://discuss.elastic.co/t/after-windows-update-filebeat-service-stops-immediately/233331)
**Author:** [@udbv](https://discuss.elastic.co/u/udbv)\ **Replies:** 3\ **Last updated:** [June 18, 2020, 2:56pm UTC](https://discuss.elastic.co/t/after-windows-update-filebeat-service-stops-immediately/233331 "2020-06-18T14:56:19Z")
Hello Situation - After applying May updates on windows filebeat service is stopped after 1-second execution. There are no errors in logs and the same trouble with version 7.7. I couldn't find any useful info in system… --- ## [How to parse nested json through logstash](https://discuss.elastic.co/t/how-to-parse-nested-json-through-logstash/237290)
**Author:** [@Rahul\_rr](https://discuss.elastic.co/u/Rahul_rr)\ **Replies:** 7\ **Last updated:** [June 18, 2020, 2:55pm UTC](https://discuss.elastic.co/t/how-to-parse-nested-json-through-logstash/237290 "2020-06-18T14:55:39Z")
I'm getting the data from sqs queue as a nested json and parsing through logstash. i tried some approaches but it didn't work. Below is my sample nested json. { "service\_event": { "id": 166175, "equipment": { "id": … --- ## [How do I publish my Kibana to access other machines?](https://discuss.elastic.co/t/how-do-i-publish-my-kibana-to-access-other-machines/237320)
**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\ **Replies:** 11\ **Last updated:** [June 18, 2020, 2:50pm UTC](https://discuss.elastic.co/t/how-do-i-publish-my-kibana-to-access-other-machines/237320 "2020-06-18T14:50:17Z")
I am wanting to publish my Kibana for access to other machines via Browser, I have not yet entered a password and my license is basic ELK --- ## [Can we read a variable in Kibana](https://discuss.elastic.co/t/can-we-read-a-variable-in-kibana/237271)
**Author:** [@Dhandeep\_Kumar](https://discuss.elastic.co/u/Dhandeep_Kumar)\ **Replies:** 5\ **Last updated:** [June 18, 2020, 2:49pm UTC](https://discuss.elastic.co/t/can-we-read-a-variable-in-kibana/237271 "2020-06-18T14:49:11Z")
Hi There, is this possible to read a variable in Kibana and that variable contains some expression for eg: vTotalSales = sum(sales) thanks, Dhandeep --- ## [Security settings make my ES not start](https://discuss.elastic.co/t/security-settings-make-my-es-not-start/237522)
**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\ **Replies:** 15\ **Last updated:** [June 18, 2020, 2:44pm UTC](https://discuss.elastic.co/t/security-settings-make-my-es-not-start/237522 "2020-06-18T14:44:00Z")
I made the security settings and added the following to the yml file: xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate xpack.security.tr… --- ## [Elasticsearch and Kibana On Prem standalone subscription](https://discuss.elastic.co/t/elasticsearch-and-kibana-on-prem-standalone-subscription/237654)
**Author:** [@Muhammad\_Umair\_Baig](https://discuss.elastic.co/u/Muhammad_Umair_Baig)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 2:29pm UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-on-prem-standalone-subscription/237654 "2020-06-18T14:29:59Z")
If you help me sharing the cost of on-prem (Standalone) licensed versions of elasticsearch and kibana 7.6.2 Gold Platinum Enterprise is it one time subscription or yearly? How many licenses do we need to purchase if … --- ## [Nested search in multiIndex approach](https://discuss.elastic.co/t/nested-search-in-multiindex-approach/234707)
**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 2:27pm UTC](https://discuss.elastic.co/t/nested-search-in-multiindex-approach/234707 "2020-06-18T14:27:45Z")
Hi, i am trying to get the nested value in multi indices approach. used below query but didn't help. please advise. GET \_all,/\_search { "query": { "bool": { "should": \[ { "nested": { "path": "\_index.student\_obj… --- ## [HDD Alerts and Actions](https://discuss.elastic.co/t/hdd-alerts-and-actions/234742)
**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 2:13pm UTC](https://discuss.elastic.co/t/hdd-alerts-and-actions/234742 "2020-06-18T14:13:06Z")
Hi, I have a setup a Alert and Action for capturing HDD usage over 80%, this all works well and alerts individually based on the agent.hostname. What I would like to do is also include the system.filesystem.mount\_point… --- ## [Better French and German stemming?](https://discuss.elastic.co/t/better-french-and-german-stemming/236283)
**Author:** [@bkazez](https://discuss.elastic.co/u/bkazez)\ **Replies:** 3\ **Last updated:** [June 18, 2020, 2:12pm UTC](https://discuss.elastic.co/t/better-french-and-german-stemming/236283 "2020-06-18T14:12:32Z")
Hello, I'm using cloud.elastic.co to index metadata about German and French baroque vocal music. I need to treat inflected and uninflected forms as equivalent, so someone can search "schlummer" and find the lovely Bach … --- ## [How to change inbuilt modules index name with the same fields?](https://discuss.elastic.co/t/how-to-change-inbuilt-modules-index-name-with-the-same-fields/237444)
**Author:** [@sana1](https://discuss.elastic.co/u/sana1)\ **Replies:** 6\ **Last updated:** [June 18, 2020, 2:02pm UTC](https://discuss.elastic.co/t/how-to-change-inbuilt-modules-index-name-with-the-same-fields/237444 "2020-06-18T14:02:19Z")
I want to change default filebeat-\* index name to zeek-\* with the same fields as configured in the zeek.yml, Until now I have changed ''' hosts: \["localhost:9200"\] protocol: "http" index: "zeek-%{+yyyy.MM.dd}" setup… --- ## [Big uncommitted segments to disk reported by GET /myIndex/\_segments API (ES version 6.3)](https://discuss.elastic.co/t/big-uncommitted-segments-to-disk-reported-by-get-myindex-segments-api-es-version-6-3/237648)
**Author:** [@Spico\_Florin](https://discuss.elastic.co/u/Spico_Florin)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 1:32pm UTC](https://discuss.elastic.co/t/big-uncommitted-segments-to-disk-reported-by-get-myindex-segments-api-es-version-6-3/237648 "2020-06-18T13:32:48Z")
Hello! WE are using ElasticSearch version 6.3. We have one situation were the GET /myIndex/\_segments API reported some big size files that are uncommitted to disk (the committed field of the mentioned API is false, see … --- ## [Error in script fields](https://discuss.elastic.co/t/error-in-script-fields/237645)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 1:22pm UTC](https://discuss.elastic.co/t/error-in-script-fields/237645 "2020-06-18T13:22:57Z")
Hi , why i can't get the result of the script : GET /test\_bookings\_v2/\_search?size=0 { "script\_fields": { "avg\_price": { "script": { "lang": "expression", "source": "doc\['price'\].avg()" } } } } i use ELK :… --- ## [How to build a custom Kibana plugin similar to discover saved search without aggregation](https://discuss.elastic.co/t/how-to-build-a-custom-kibana-plugin-similar-to-discover-saved-search-without-aggregation/237635)
**Author:** [@Tejashree\_kate](https://discuss.elastic.co/u/Tejashree_kate)\ **Replies:** 3\ **Last updated:** [June 18, 2020, 1:17pm UTC](https://discuss.elastic.co/t/how-to-build-a-custom-kibana-plugin-similar-to-discover-saved-search-without-aggregation/237635 "2020-06-18T13:17:29Z")
Hi Team, I am trying to build a custom Kibana plugin of type visualisation. I want to display similar to discover saved search without any aggregation. How can I achieve this? What schema should be definied inside edi… --- ## [Help with Logstash plug-in development](https://discuss.elastic.co/t/help-with-logstash-plug-in-development/236937)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 1:15pm UTC](https://discuss.elastic.co/t/help-with-logstash-plug-in-development/236937 "2020-06-18T13:15:24Z")
I am trying to develop a new logstash plugin in my development Elasticsearch stack environment. I am new to this so this is all a learning experience for me. I will try to be as clear and concise as I can be including as… --- ## [FScrawler: perform OCR selectively only on PDF files that do not have text](https://discuss.elastic.co/t/fscrawler-perform-ocr-selectively-only-on-pdf-files-that-do-not-have-text/236016)
**Author:** [@equj](https://discuss.elastic.co/u/equj)\ **Replies:** 5\ **Last updated:** [June 18, 2020, 1:14pm UTC](https://discuss.elastic.co/t/fscrawler-perform-ocr-selectively-only-on-pdf-files-that-do-not-have-text/236016 "2020-06-18T13:14:36Z")
Hello, I'm using FScrawler (2.7) to load text from PDFs into Elasticsearch (7.6.x). Most of PDF files have text, but some of PDF files contain images of scanned text and need to be OCRed. Is there a way to configure FSc… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1988) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1990)