# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=342 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 343 --- ## [How to integrate syslog input plugin](https://discuss.elastic.co/t/how-to-integrate-syslog-input-plugin/349025)
**Author:** [@Ravi\_Pattar](https://discuss.elastic.co/u/Ravi_Pattar)\ **Replies:** 41\ **Last updated:** [December 26, 2023, 12:24pm UTC](https://discuss.elastic.co/t/how-to-integrate-syslog-input-plugin/349025 "2023-12-26T12:24:13Z")
Hi, I have installed full stack ELK (version 7.17.13) and now I want to integrate syslog input plugin. Need some directions on the same on how to setup. Also when I tried with some changes in logstash.conf but I am fa… --- ## [Vega Force Directed Graph and Kibana: Use data from index not from a json](https://discuss.elastic.co/t/vega-force-directed-graph-and-kibana-use-data-from-index-not-from-a-json/349405)
**Author:** [@Ranger\_Rick](https://discuss.elastic.co/u/Ranger_Rick)\ **Replies:** 2\ **Last updated:** [December 30, 2023, 12:51pm UTC](https://discuss.elastic.co/t/vega-force-directed-graph-and-kibana-use-data-from-index-not-from-a-json/349405 "2023-12-30T12:51:41Z")
Good afternoon! I have two indexes with data in my instances and am trying to make a force directed graph to visualize relationships. There is an excellent example available Vega's github (Vega Github's Force Directed La… --- ## [Help parsing custom nginx logs using Filebeat and Ingest Pipelines](https://discuss.elastic.co/t/help-parsing-custom-nginx-logs-using-filebeat-and-ingest-pipelines/349974)
**Author:** [@BDeveloper](https://discuss.elastic.co/u/BDeveloper)\ **Replies:** 17\ **Last updated:** [December 29, 2023, 7:09pm UTC](https://discuss.elastic.co/t/help-parsing-custom-nginx-logs-using-filebeat-and-ingest-pipelines/349974 "2023-12-29T19:09:18Z")
Hi, I am new to using ELK stack. I have custom logs for my nginx access.log files and I am needing help parsing them by using filebeat and ingest pipeline (Log Files -\> Filebeat -\> (Parse with Ingest Pipeline Parse) Ela… --- ## [How to replace multiple new lines with one in Ingest Pipeline gsub](https://discuss.elastic.co/t/how-to-replace-multiple-new-lines-with-one-in-ingest-pipeline-gsub/350127)
**Author:** [@Bowfish](https://discuss.elastic.co/u/Bowfish)\ **Replies:** 3\ **Last updated:** [December 29, 2023, 4:57pm UTC](https://discuss.elastic.co/t/how-to-replace-multiple-new-lines-with-one-in-ingest-pipeline-gsub/350127 "2023-12-29T16:57:34Z")
I want to replace multiple new lines (\\n\\n+) with one single new line (\\n) with a gsub processor in the ingest pipeline. This is my gsub processor: { "gsub": { "field": "attachment.content\_processed", … --- ## [Are there any issues or topics on shrinking elastic-agent's install size?](https://discuss.elastic.co/t/are-there-any-issues-or-topics-on-shrinking-elastic-agents-install-size/350099)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 3\ **Last updated:** [December 29, 2023, 4:46pm UTC](https://discuss.elastic.co/t/are-there-any-issues-or-topics-on-shrinking-elastic-agents-install-size/350099 "2023-12-29T16:46:48Z")
Today I ran into issues trying to install, and ended up figuring out that you need at least 1.7G of disk for Agent. It had been a while since I last looked at the minimum requirements for Elastic Agent. Considering I re… --- ## [I need help](https://discuss.elastic.co/t/i-need-help/349630)
**Author:** [@omlett](https://discuss.elastic.co/u/omlett)\ **Replies:** 2\ **Last updated:** [December 29, 2023, 4:07pm UTC](https://discuss.elastic.co/t/i-need-help/349630 "2023-12-29T16:07:40Z")
i am trying to make a parsedmarc elasticsearch and Kibana docker container, everything is running fine except i dont see any data on Kibana and i dont know what im doing wrong, because with the same configs they were run… --- ## [Create visualization on kibana for one filed if the other filed is present in document](https://discuss.elastic.co/t/create-visualization-on-kibana-for-one-filed-if-the-other-filed-is-present-in-document/350116)
**Author:** [@RameshNagargoje](https://discuss.elastic.co/u/RameshNagargoje)\ **Replies:** 1\ **Last updated:** [December 29, 2023, 3:21pm UTC](https://discuss.elastic.co/t/create-visualization-on-kibana-for-one-filed-if-the-other-filed-is-present-in-document/350116 "2023-12-29T15:21:23Z")
I have use case is to create the pie chart for "name" present in documents when documents has a "status" field available. We have several documents in an index; for all documents, we have "name" available, but the "sta… --- ## [Logstash pipeline to filter rss document](https://discuss.elastic.co/t/logstash-pipeline-to-filter-rss-document/349800)
**Author:** [@ramiwashere](https://discuss.elastic.co/u/ramiwashere)\ **Replies:** 3\ **Last updated:** [December 29, 2023, 2:52pm UTC](https://discuss.elastic.co/t/logstash-pipeline-to-filter-rss-document/349800 "2023-12-29T14:52:53Z")
I've just created a logstash that will retrieve documents from a feed. I receive the documents in return but the fields I want to add are all on the same document. Here's an example: \ \ \… --- ## [Full Join Pattern](https://discuss.elastic.co/t/full-join-pattern/350101)
**Author:** [@AlanRocha](https://discuss.elastic.co/u/AlanRocha)\ **Replies:** 4\ **Last updated:** [December 29, 2023, 2:35pm UTC](https://discuss.elastic.co/t/full-join-pattern/350101 "2023-12-29T14:35:36Z")
Hello everyone, everything good? I need to do a full join with four different patterns ex: datalake-1-, tool-v1-, za-ho-, cmdb-grupos-. I'm filtering mine based on a dashboard I have in Power BI and I migrate all of th… --- ## [Rolling upgrade from 7.14.2 to 7.17.16 no working](https://discuss.elastic.co/t/rolling-upgrade-from-7-14-2-to-7-17-16-no-working/350106)
**Author:** [@fory](https://discuss.elastic.co/u/fory)\ **Replies:** 4\ **Last updated:** [December 29, 2023, 1:46pm UTC](https://discuss.elastic.co/t/rolling-upgrade-from-7-14-2-to-7-17-16-no-working/350106 "2023-12-29T13:46:01Z")
According to 7.17.16 documentation, upgrading from 7.14.2 to 7.17.16 can be done by rolling upgrade. I have a two node cluster both are master eligible. Following the rolling upgrade documentation, I upgraded one of the… --- ## [Need help with ScriptedMetricAggregation in Elasticsearch v8.7](https://discuss.elastic.co/t/need-help-with-scriptedmetricaggregation-in-elasticsearch-v8-7/350088)
**Author:** [@Chetan\_Ramaiah](https://discuss.elastic.co/u/Chetan_Ramaiah)\ **Replies:** 2\ **Last updated:** [December 29, 2023, 9:58am UTC](https://discuss.elastic.co/t/need-help-with-scriptedmetricaggregation-in-elasticsearch-v8-7/350088 "2023-12-29T09:58:38Z")
Hello, I am working on migrating ES 6.8 java code to ES 8.7.1 rest API java. But, I am unable to understand or find how to write script metric aggregation with ES 8.7.1. Could you please guide me using the below code fr… --- ## [Stuck on authentication URL and loose the entire connection why?](https://discuss.elastic.co/t/stuck-on-authentication-url-and-loose-the-entire-connection-why/350096)
**Author:** [@Praful\_Shrivastava](https://discuss.elastic.co/u/Praful_Shrivastava)\ **Replies:** 1\ **Last updated:** [December 28, 2023, 8:25pm UTC](https://discuss.elastic.co/t/stuck-on-authentication-url-and-loose-the-entire-connection-why/350096 "2023-12-28T20:25:10Z")
I just tried to sign up for an Elastic Cloud free account with Google, and after creating a deployment using Google Cloud as the base, whenever I try to open the deployment, it stuck on the authentication URL and lost th… --- ## [I have a requirement where in I have to move selected data from Elasticsearch INDEX to oracle Table {RDBMS}](https://discuss.elastic.co/t/i-have-a-requirement-where-in-i-have-to-move-selected-data-from-elasticsearch-index-to-oracle-table-rdbms/350083)
**Author:** [@AkshayP21296](https://discuss.elastic.co/u/AkshayP21296)\ **Replies:** 2\ **Last updated:** [December 28, 2023, 8:16pm UTC](https://discuss.elastic.co/t/i-have-a-requirement-where-in-i-have-to-move-selected-data-from-elasticsearch-index-to-oracle-table-rdbms/350083 "2023-12-28T20:16:45Z")
I have a requirement where in I have to move selected data from Elasticsearch INDEX to oracle Table {RDBMS} --- ## [TVSB - Top N Filtering](https://discuss.elastic.co/t/tvsb-top-n-filtering/350089)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 4\ **Last updated:** [December 28, 2023, 5:21pm UTC](https://discuss.elastic.co/t/tvsb-top-n-filtering/350089 "2023-12-28T17:21:46Z")
Hello, I created this TVSB - Top N visualization, and I was wondering how I can have it be "filterable". Normally with a lens, I can click on the visualization, and it would apply the filter based on the selection. But … --- ## [Need help on aggregation and sub aggregation with ES 8.7 rest api](https://discuss.elastic.co/t/need-help-on-aggregation-and-sub-aggregation-with-es-8-7-rest-api/350093)
**Author:** [@Chetan\_Ramaiah](https://discuss.elastic.co/u/Chetan_Ramaiah)\ **Replies:** 0\ **Last updated:** [December 28, 2023, 4:59pm UTC](https://discuss.elastic.co/t/need-help-on-aggregation-and-sub-aggregation-with-es-8-7-rest-api/350093 "2023-12-28T16:59:01Z")
Hello, I am working on migrating ES 6.8 java code to ES 8.7 rest api java. While working on aggregation, I am able to construct aggregation layer but not as per the required format. ----- \*\*expected result\*\* ----- "a… --- ## [Integrations empty](https://discuss.elastic.co/t/integrations-empty/349934)
**Author:** [@jevonsnotes](https://discuss.elastic.co/u/jevonsnotes)\ **Replies:** 9\ **Last updated:** [December 28, 2023, 2:30pm UTC](https://discuss.elastic.co/t/integrations-empty/349934 "2023-12-28T14:30:04Z")
version 8.11.3 running elk in closed network,the Integrations have nothing --- ## [Assign kibana alert running on a specific instance](https://discuss.elastic.co/t/assign-kibana-alert-running-on-a-specific-instance/348704)
**Author:** [@JT\_IGS](https://discuss.elastic.co/u/JT_IGS)\ **Replies:** 3\ **Last updated:** [December 28, 2023, 1:29pm UTC](https://discuss.elastic.co/t/assign-kibana-alert-running-on-a-specific-instance/348704 "2023-12-28T13:29:16Z")
There are multiple kibana instances connecting to same ES cluster: kibana1 -\> elasticsearch \<- kibana2 After setting kibana alerts, found that kibana alerts run on random instance (1/2). While i have a need to run rul… --- ## [Error in running Kibana 8.10.4 functional test](https://discuss.elastic.co/t/error-in-running-kibana-8-10-4-functional-test/348956)
**Author:** [@mzm1370](https://discuss.elastic.co/u/mzm1370)\ **Replies:** 1\ **Last updated:** [December 28, 2023, 12:28pm UTC](https://discuss.elastic.co/t/error-in-running-kibana-8-10-4-functional-test/348956 "2023-12-28T12:28:35Z")
Hi, I am getting an error about (KbnI18n) while running the test, please help me --- ## [SearchPhaseExecutionException with no message or reason](https://discuss.elastic.co/t/searchphaseexecutionexception-with-no-message-or-reason/350076)
**Author:** [@Arraying](https://discuss.elastic.co/u/Arraying)\ **Replies:** 0\ **Last updated:** [December 28, 2023, 12:24pm UTC](https://discuss.elastic.co/t/searchphaseexecutionexception-with-no-message-or-reason/350076 "2023-12-28T12:24:41Z")
Hi, I'm running Elasticsearch in Docker and I'm running into an org.elasticsearch.action.search.SearchPhaseExecutionException which does not provide me with an error message. Prior to this, my cluster health changes from… --- ## [Kibana is not starting: Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/kibana-is-not-starting-unable-to-retrieve-version-information-from-elasticsearch-nodes/350071)
**Author:** [@Kunal\_Rastogi](https://discuss.elastic.co/u/Kunal_Rastogi)\ **Replies:** 1\ **Last updated:** [December 28, 2023, 12:19pm UTC](https://discuss.elastic.co/t/kibana-is-not-starting-unable-to-retrieve-version-information-from-elasticsearch-nodes/350071 "2023-12-28T12:19:54Z")
\[2023-12-28T16:45:31.743+05:30\]\[INFO \]\[plugins.taskManager\] TaskManager is identified by the Kibana UUID: 40011819-3390-4e5d-a0bc-5b2571fd083c \[2023-12-28T16:45:31.767+05:30\]\[INFO \]\[custom-branding-service\] CustomBrandin… --- ## [Getting access to custom headers in kibana client](https://discuss.elastic.co/t/getting-access-to-custom-headers-in-kibana-client/349885)
**Author:** [@mojtaba\_mosalman](https://discuss.elastic.co/u/mojtaba_mosalman)\ **Replies:** 1\ **Last updated:** [December 28, 2023, 9:47am UTC](https://discuss.elastic.co/t/getting-access-to-custom-headers-in-kibana-client/349885 "2023-12-28T09:47:21Z")
Hi. I'm trying to get value of custom header set in response of our server in kibana react client using axios but it seems that it's not accessiable even though it's showing in browser console (Access-Control-Expose-Head… --- ## [Create Alert from query](https://discuss.elastic.co/t/create-alert-from-query/350065)
**Author:** [@cperzrt10](https://discuss.elastic.co/u/cperzrt10)\ **Replies:** 0\ **Last updated:** [December 28, 2023, 9:45am UTC](https://discuss.elastic.co/t/create-alert-from-query/350065 "2023-12-28T09:45:54Z")
Hi, I'm trying to create an alert from a query that returns theese data. The query GET data/\_search { "aggs": { "0": { "terms": { "field": "uuid.keyword", "order": { "\_key": "desc"… --- ## [Elasticsearch basic license limitation on the number of nodes](https://discuss.elastic.co/t/elasticsearch-basic-license-limitation-on-the-number-of-nodes/350058)
**Author:** [@basiltitus](https://discuss.elastic.co/u/basiltitus)\ **Replies:** 1\ **Last updated:** [December 28, 2023, 9:05am UTC](https://discuss.elastic.co/t/elasticsearch-basic-license-limitation-on-the-number-of-nodes/350058 "2023-12-28T09:05:04Z")
Hi, We are using ELK as a single node cluster with Kibana and I'd been searching if there any limitation on the number of nodes for Elasticsearch free version. But i am unable to find information on these. Does ES fre… --- ## [Put kibanaFilter while redirecting to other dashboard using Vega](https://discuss.elastic.co/t/put-kibanafilter-while-redirecting-to-other-dashboard-using-vega/349663)
**Author:** [@Fiza](https://discuss.elastic.co/u/Fiza)\ **Replies:** 3\ **Last updated:** [December 28, 2023, 8:37am UTC](https://discuss.elastic.co/t/put-kibanafilter-while-redirecting-to-other-dashboard-using-vega/349663 "2023-12-28T08:37:50Z")
Hi, I have created a pie chart using Vega. When you click on a part of pie chart, it should redirect you to another dashboard in Kibana based on the part that was clicked. So, I believe I'll have to add filters to the … --- ## [Elasticsearch ヒープメモリ使用量増加に関する質問](https://discuss.elastic.co/t/elasticsearch/350055)
**Author:** [@yuma\_n](https://discuss.elastic.co/u/yuma_n)\ **Replies:** 0\ **Last updated:** [December 28, 2023, 8:27am UTC](https://discuss.elastic.co/t/elasticsearch/350055 "2023-12-28T08:27:23Z")
私がElasticsearchを使用している環境では、1日ごとにシャードが増加します。Logstashのoutput設定で以下のようにindexを作成しているからだと思われます。 output { elasticsearch { hosts =\> \["\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*"\] cacert =\> '\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*' user =\> "\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*" pas… --- ## [Is it possible to use custom interval using ilm on downsample](https://discuss.elastic.co/t/is-it-possible-to-use-custom-interval-using-ilm-on-downsample/350052)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 0\ **Last updated:** [December 28, 2023, 7:32am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-custom-interval-using-ilm-on-downsample/350052 "2023-12-28T07:32:09Z")
i see in the documentation that said rollups are deprecated and will be removed in a future version. and as a replacement, I can use downsampling instead. but I think the downsample didn't fulfill my use case. i have cre… --- ## [The date field in Kibana does not match the field properly in the doucment of a index](https://discuss.elastic.co/t/the-date-field-in-kibana-does-not-match-the-field-properly-in-the-doucment-of-a-index/350044)
**Author:** [@LongKang\_Fan](https://discuss.elastic.co/u/LongKang_Fan)\ **Replies:** 5\ **Last updated:** [December 28, 2023, 6:44am UTC](https://discuss.elastic.co/t/the-date-field-in-kibana-does-not-match-the-field-properly-in-the-doucment-of-a-index/350044 "2023-12-28T06:44:49Z")
Hi, community, I hope this message finds you well. I'm seeking assistance with a logging issue in my setup, and I apologize if I've included an excess of logs or configurations in this post. My current logging pipeline… --- ## [Elasticsearch JAVA API Client version 8 upsert Request](https://discuss.elastic.co/t/elasticsearch-java-api-client-version-8-upsert-request/350047)
**Author:** [@durgesh\_dp](https://discuss.elastic.co/u/durgesh_dp)\ **Replies:** 1\ **Last updated:** [December 28, 2023, 6:01am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-client-version-8-upsert-request/350047 "2023-12-28T06:01:40Z")
I am doing a migration from version 7 which is deprecated to version 8 java api client , but there is no documentation regarding upsert in version 8 , i have to write a updateRequest to update a document if it exists and… --- ## ["Failed to load indices" and "Failed to load remote clusters" when create index pattern in kibana](https://discuss.elastic.co/t/failed-to-load-indices-and-failed-to-load-remote-clusters-when-create-index-pattern-in-kibana/350018)
**Author:** [@jeremyLiu1](https://discuss.elastic.co/u/jeremyLiu1)\ **Replies:** 2\ **Last updated:** [December 28, 2023, 3:54am UTC](https://discuss.elastic.co/t/failed-to-load-indices-and-failed-to-load-remote-clusters-when-create-index-pattern-in-kibana/350018 "2023-12-28T03:54:56Z")
Hey all, Recently, when using Kibana 6.8.22 version, when I clicked on Management -\>Index patterns, two errors were displayed on the web: "Failed to load indices" and "Failed to load remote clusters" .the console in web … --- ## [Chunking large documents using HTML during ingest?](https://discuss.elastic.co/t/chunking-large-documents-using-html-during-ingest/350039)
**Author:** [@mmaccou](https://discuss.elastic.co/u/mmaccou)\ **Replies:** 0\ **Last updated:** [December 28, 2023, 1:51am UTC](https://discuss.elastic.co/t/chunking-large-documents-using-html-during-ingest/350039 "2023-12-28T01:51:02Z")
I recently game across this article that talks about a strategy to chunk large documents by breaking it up at the sentence level. Is it possible to create a script using HTML so chunking can occur first at the header lev… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=341) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=343)