# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=898 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 899 --- ## [Regular expression query](https://discuss.elastic.co/t/regular-expression-query/307252)
**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 10:19pm UTC](https://discuss.elastic.co/t/regular-expression-query/307252 "2022-06-17T22:19:02Z")
I have a text like this "10-year-old", how can i search this using regular expression query. How can we search over special characters in Elasticsearch. I am using the below query, it is not returning the output. GET … --- ## [Publish kibana](https://discuss.elastic.co/t/publish-kibana/307322)
**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 9:57pm UTC](https://discuss.elastic.co/t/publish-kibana/307322 "2022-06-17T21:57:08Z")
Hi, I have a question if possible: (I work with GKE) this it my kibana: apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: quickstart spec: version: 7.6.2 count: 1 elasticsearchRef: name: c… --- ## [Instead of Beats 7.17.3v in kibana 8v index templates are showing](https://discuss.elastic.co/t/instead-of-beats-7-17-3v-in-kibana-8v-index-templates-are-showing/307217)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 0\ **Last updated:** [June 15, 2022, 5:37am UTC](https://discuss.elastic.co/t/instead-of-beats-7-17-3v-in-kibana-8v-index-templates-are-showing/307217 "2022-06-15T05:37:43Z")
Hi , I have downgraded elk and beats of 8v to 7.17.3v. And all 8v were uninstalled and deleted but beats(metric,packet,winlog) of 8v index templates & Data stream is only coming up in kibana 7.17.3v. It's not showing 7… --- ## [Kibana not ready yet after xpack.security.enabled: false](https://discuss.elastic.co/t/kibana-not-ready-yet-after-xpack-security-enabled-false/307294)
**Author:** [@Babli\_Sahu](https://discuss.elastic.co/u/Babli_Sahu)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 9:24pm UTC](https://discuss.elastic.co/t/kibana-not-ready-yet-after-xpack-security-enabled-false/307294 "2022-06-17T21:24:41Z")
Hello, I don't need any authentication for Elasticsearch and kibana, so I put false for xpack.security.enabled . This removes the login dialog box on Elasticsearch, but kibana is not accessible afterwards. It shows kiba… --- ## [JDBC Streaming with list parameter](https://discuss.elastic.co/t/jdbc-streaming-with-list-parameter/307546)
**Author:** [@gaurav\_vivek](https://discuss.elastic.co/u/gaurav_vivek)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 8:43pm UTC](https://discuss.elastic.co/t/jdbc-streaming-with-list-parameter/307546 "2022-06-17T20:43:44Z")
I have to pass a list in JDBC steaming query for Oracle, since the list can have more than 1000 record so i cannot use in query .i.e. select name from table where id in (..) I tried two option use tuple : Create tup… --- ## [Beats 7.17.3v agents are running properly but no data showing 7.17.3v in data stream](https://discuss.elastic.co/t/beats-7-17-3v-agents-are-running-properly-but-no-data-showing-7-17-3v-in-data-stream/307345)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 6:19am UTC](https://discuss.elastic.co/t/beats-7-17-3v-agents-are-running-properly-but-no-data-showing-7-17-3v-in-data-stream/307345 "2022-06-16T06:19:46Z")
Hi, Beats 7.17.3v agents are running properly and data is coming but not showing 7.17.3v in data stream instead its showing 8v data stream --- ## [I have problem with the address of the kibana](https://discuss.elastic.co/t/i-have-problem-with-the-address-of-the-kibana/307376)
**Author:** [@Mish6](https://discuss.elastic.co/u/Mish6)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 7:20pm UTC](https://discuss.elastic.co/t/i-have-problem-with-the-address-of-the-kibana/307376 "2022-06-17T19:20:23Z")
Hi, I have a question about ingress: this is my kibana: apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: quickstart spec: version: 7.6.2 count: 1 elasticsearchRef: name: cdbridgerpayelasti… --- ## [Content-Security-Policy for embedded kibana dashboards](https://discuss.elastic.co/t/content-security-policy-for-embedded-kibana-dashboards/305466)
**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 7:18pm UTC](https://discuss.elastic.co/t/content-security-policy-for-embedded-kibana-dashboards/305466 "2022-06-17T19:18:59Z")
I'm having an application with kibana dashboards embedded in iframe. The application is proxied by Nginx, with an additional Apache front-end. My goal is to come up with a CSP without unsafe-hashes, unsafe-inline, unsaf… --- ## [Pipeline aggregation | Cumulative sum aggregation on a nested field](https://discuss.elastic.co/t/pipeline-aggregation-cumulative-sum-aggregation-on-a-nested-field/307539)
**Author:** [@mehtaanshul](https://discuss.elastic.co/u/mehtaanshul)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 7:13pm UTC](https://discuss.elastic.co/t/pipeline-aggregation-cumulative-sum-aggregation-on-a-nested-field/307539 "2022-06-17T19:13:08Z")
My Elasticsearch index mappings - { "mappings": { "properties": { "timestamp": { "type": "date" }, "detail": { "type": "nested", … --- ## [Mapping conflict field host.ip Filebeat](https://discuss.elastic.co/t/mapping-conflict-field-host-ip-filebeat/307535)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 6:19pm UTC](https://discuss.elastic.co/t/mapping-conflict-field-host-ip-filebeat/307535 "2022-06-17T18:19:34Z")
Hello there, I got this cluster setup and apparently is working fine apart from that I got some mapping conflicts under the hood. After added Custom Windows Event Logs integrations using fleet, I checked if logs was co… --- ## [Pie chart with extracting major from JRE version in Kibana](https://discuss.elastic.co/t/pie-chart-with-extracting-major-from-jre-version-in-kibana/307522)
**Author:** [@vmassol](https://discuss.elastic.co/u/vmassol)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 5:53pm UTC](https://discuss.elastic.co/t/pie-chart-with-extracting-major-from-jre-version-in-kibana/307522 "2022-06-17T17:53:51Z")
Hi there, In my index I have documents with a java.version field representing java versions (e.g. 11.0.13, 11.0.14.1, etc). I'm trying to extract the major version (e.g. 11) and display that in a pie chart in Kibana. W… --- ## [How to split a single line message, into parts](https://discuss.elastic.co/t/how-to-split-a-single-line-message-into-parts/306982)
**Author:** [@Zerra\_Triani](https://discuss.elastic.co/u/Zerra_Triani)\ **Replies:** 8\ **Last updated:** [June 17, 2022, 5:36pm UTC](https://discuss.elastic.co/t/how-to-split-a-single-line-message-into-parts/306982 "2022-06-17T17:36:32Z")
Hi, I've created a logstash to filter a log and output a single message. Then I want to split that message into several fields. What filter plugin should I use? I try to use split filter and it doesn't work The example… --- ## [Logstash parse mixed json text](https://discuss.elastic.co/t/logstash-parse-mixed-json-text/307362)
**Author:** [@Saathvi](https://discuss.elastic.co/u/Saathvi)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 5:21pm UTC](https://discuss.elastic.co/t/logstash-parse-mixed-json-text/307362 "2022-06-17T17:21:31Z")
please can any one help me to parse below mixed json txt from below logentry. need to extract request json fields & response json fields 2020-01-06 01:02:10.869 +01:00 \[Information\] WIN HTTP Response at 2020-01-06T01:0… --- ## [Elasticsearch mapping - Different types of data in same field](https://discuss.elastic.co/t/elasticsearch-mapping-different-types-of-data-in-same-field/307526)
**Author:** [@Elie](https://discuss.elastic.co/u/Elie)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping-different-types-of-data-in-same-field/307526 "2022-06-17T16:21:45Z")
I am trying to create a mapping for my Elasticsearch that would make me insert both an array and a string into my field "value". The following shows the data I want inserted: { "Data": \[{ "key": "keyNa… --- ## [Kibana doesn’t recognize keyword fields](https://discuss.elastic.co/t/kibana-doesn-t-recognize-keyword-fields/307464)
**Author:** [@AscentisKelvinGo](https://discuss.elastic.co/u/AscentisKelvinGo)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 2:23pm UTC](https://discuss.elastic.co/t/kibana-doesn-t-recognize-keyword-fields/307464 "2022-06-17T14:23:39Z")
Hi, I'm using Elastic Cloud Stack Kibana but I found out that the dashboard couldn't recognize the 'keyword' fields type. The 'exception.ClassName.raw' is keyword type and aggregatable. However I can't create a vis… --- ## [Unable to join the node in a cluster, elasticsearch 8.2](https://discuss.elastic.co/t/unable-to-join-the-node-in-a-cluster-elasticsearch-8-2/307222)
**Author:** [@Aman\_Kasot](https://discuss.elastic.co/u/Aman_Kasot)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 3:25pm UTC](https://discuss.elastic.co/t/unable-to-join-the-node-in-a-cluster-elasticsearch-8-2/307222 "2022-06-17T15:25:35Z")
closing connection Netty4TcpChannel{localAddress=/xx.xx.xx.xx:9300, remoteAddress=/xx.xx.xx.xx:port, profile=default} \[2022-06-15T11:51:04,468\]\[WARN \]\[o.e.x.c.s.t.n.SecurityNetty4Transport\] \[es-master-1\] client did not … --- ## [Make a chart field clickable + action](https://discuss.elastic.co/t/make-a-chart-field-clickable-action/307178)
**Author:** [@Marouene\_dakhlaoui](https://discuss.elastic.co/u/Marouene_dakhlaoui)\ **Replies:** 14\ **Last updated:** [June 17, 2022, 3:11pm UTC](https://discuss.elastic.co/t/make-a-chart-field-clickable-action/307178 "2022-06-17T15:11:29Z")
Hello, I currently have this simple table visualization created on Kibana.\* I would like to make it so that when I click on a path it opens up a popup to my local PC accessing the image in the path. As I am a new us… --- ## [Datastream speed](https://discuss.elastic.co/t/datastream-speed/306969)
**Author:** [@dmitry.chanturiya](https://discuss.elastic.co/u/dmitry.chanturiya)\ **Replies:** 5\ **Last updated:** [June 17, 2022, 2:47pm UTC](https://discuss.elastic.co/t/datastream-speed/306969 "2022-06-17T14:47:15Z")
Hello. Can U help me to understand why datastream search are slower then index search. I have one Index: size: 572 GB shards: 30 primary shards There are stored some data by one mounth. I have create datastream wit… --- ## [Edge n-gram token filter : why "side" parameter is Deprecated?](https://discuss.elastic.co/t/edge-n-gram-token-filter-why-side-parameter-is-deprecated/307519)
**Author:** [@fraf](https://discuss.elastic.co/u/fraf)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 2:19pm UTC](https://discuss.elastic.co/t/edge-n-gram-token-filter-why-side-parameter-is-deprecated/307519 "2022-06-17T14:19:34Z")
Hi, I read in documentation, that for Edge n-gram token filter the side parameter is Deprecated. Why ? What is the equivalent then ? Thanks. --- ## [Invalid Field Reference Logstash Grok](https://discuss.elastic.co/t/invalid-field-reference-logstash-grok/307512)
**Author:** [@Micah\_Barsness](https://discuss.elastic.co/u/Micah_Barsness)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 2:08pm UTC](https://discuss.elastic.co/t/invalid-field-reference-logstash-grok/307512 "2022-06-17T14:08:25Z")
I'm receiving the error below but it doesn't offer a lot of information that I am able to tell. Anyone seen this before? 2022-06-17T07:45:19,655\]\[WARN \]\[logstash.filters.grok \]\[Cisco\_ASA\]\[694b9ac8fb3e2aae9d4c91962e71… --- ## [Kibana Broken unless run using “/usr/share/kibana/bin/kibana --allow-root” command](https://discuss.elastic.co/t/kibana-broken-unless-run-using-usr-share-kibana-bin-kibana-allow-root-command/307513)
**Author:** [@Micah\_Barsness](https://discuss.elastic.co/u/Micah_Barsness)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 2:06pm UTC](https://discuss.elastic.co/t/kibana-broken-unless-run-using-usr-share-kibana-bin-kibana-allow-root-command/307513 "2022-06-17T14:06:08Z")
Pre upgrade to 8.2.3 I was able to start kibana with 'systemctl start kibana' but it just fails over and over again after the upgrade. I found I am able to run Kibana using /usr/share/kibana/bin/kibana --allow-root It… --- ## [Elastic Agent AWS Integration - no option for ingesting EKS control plane logs](https://discuss.elastic.co/t/elastic-agent-aws-integration-no-option-for-ingesting-eks-control-plane-logs/307518)
**Author:** [@nugroho-expereo](https://discuss.elastic.co/u/nugroho-expereo)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 1:50pm UTC](https://discuss.elastic.co/t/elastic-agent-aws-integration-no-option-for-ingesting-eks-control-plane-logs/307518 "2022-06-17T13:50:19Z")
Hi, We have AWS EKS and we want to ingest control plane log such as K8s audit Log (Amazon EKS control plane logging - Amazon EKS). Currently we use Kubernetes integration but it seems the current integration only suppo… --- ## [Passing Array and a Variable from Json output to a http request in Ruby](https://discuss.elastic.co/t/passing-array-and-a-variable-from-json-output-to-a-http-request-in-ruby/307515)
**Author:** [@santhoshi.p](https://discuss.elastic.co/u/santhoshi.p)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 1:32pm UTC](https://discuss.elastic.co/t/passing-array-and-a-variable-from-json-output-to-a-http-request-in-ruby/307515 "2022-06-17T13:32:43Z")
Hi, I have above output coming from one API and I need to pass this to another API where URL will have variable componets of datasource array and nodeID. And I need to store this data an ingest it to elastic as document… --- ## [Display inflection point of area visualizaion in kibana](https://discuss.elastic.co/t/display-inflection-point-of-area-visualizaion-in-kibana/307424)
**Author:** [@safaeaz](https://discuss.elastic.co/u/safaeaz)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 1:10pm UTC](https://discuss.elastic.co/t/display-inflection-point-of-area-visualizaion-in-kibana/307424 "2022-06-17T13:10:22Z")
is it possible to display inflection point of area visualizaion in kibana i"m using kibana 7.17.0 --- ## [Logstash-output-syslog-3.0.5 not sending UDP over IPv6](https://discuss.elastic.co/t/logstash-output-syslog-3-0-5-not-sending-udp-over-ipv6/307279)
**Author:** [@ben2015](https://discuss.elastic.co/u/ben2015)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 12:25pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-3-0-5-not-sending-udp-over-ipv6/307279 "2022-06-17T12:25:56Z")
I'm trying to use logstash-output-syslog-3.0.5 with protocol UDP and an IPv6 address. It fails in connect, at line 209 of logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-syslog-3.0.5/lib/logstash/outputs/syslog.… --- ## [Deduplicate data](https://discuss.elastic.co/t/deduplicate-data/307372)
**Author:** [@Worlock](https://discuss.elastic.co/u/Worlock)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 12:08pm UTC](https://discuss.elastic.co/t/deduplicate-data/307372 "2022-06-17T12:08:37Z")
So I have data that is getting exported to a JSON file, that's being uploaded to Elastic using FIlebeat. One of the fields can change, and when that happens, I would like the record being updated in Elastic instead of u… --- ## [Building filebeat with journald support for arm](https://discuss.elastic.co/t/building-filebeat-with-journald-support-for-arm/307490)
**Author:** [@Marko\_Todoric](https://discuss.elastic.co/u/Marko_Todoric)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 11:24am UTC](https://discuss.elastic.co/t/building-filebeat-with-journald-support-for-arm/307490 "2022-06-17T11:24:41Z")
Hello everyone, I've been struggling to figure out how to compile filebeat with support for journald for arm platform. I know it seems to not be officially supported (since there are no arm packages available to downl… --- ## [Ruby code to generate fields dynamically based on csv](https://discuss.elastic.co/t/ruby-code-to-generate-fields-dynamically-based-on-csv/307276)
**Author:** [@SreelekhaKovuri](https://discuss.elastic.co/u/SreelekhaKovuri)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 11:12am UTC](https://discuss.elastic.co/t/ruby-code-to-generate-fields-dynamically-based-on-csv/307276 "2022-06-17T11:12:19Z")
I need dynamically generated fields based on the CSV in the logs. In this case my csv format can be in any of the following ways: CSV = CSV = 0 CSV = 1111;2222;3333;4444444;5555 CSV = 1;2;3;4;5;6;7;8;9;10 So, I wan… --- ## [Whether anyone configured filebeats and metricbeats for Azure HDinsight \[Apache kafka\]?](https://discuss.elastic.co/t/whether-anyone-configured-filebeats-and-metricbeats-for-azure-hdinsight-apache-kafka/307400)
**Author:** [@BERIN\_C\_DHAS](https://discuss.elastic.co/u/BERIN_C_DHAS)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 11:05am UTC](https://discuss.elastic.co/t/whether-anyone-configured-filebeats-and-metricbeats-for-azure-hdinsight-apache-kafka/307400 "2022-06-17T11:05:48Z")
whether anyone configured filebeats and metricbeats for Monitoring Azure HDinsight \[Apache kafka\]? --- ## [Elasticsearch machine learning datafeed configuration error](https://discuss.elastic.co/t/elasticsearch-machine-learning-datafeed-configuration-error/305484)
**Author:** [@zerojin63](https://discuss.elastic.co/u/zerojin63)\ **Replies:** 6\ **Last updated:** [June 17, 2022, 10:35am UTC](https://discuss.elastic.co/t/elasticsearch-machine-learning-datafeed-configuration-error/305484 "2022-06-17T10:35:31Z")
I'm trying to alter datafeed for ml jobs but the same errror keep occurs. What I want to do is alter data like 'abc/def/ghi' into 'abc' so based on this i wrote script as follows "runtime\_mappings": { "my\_runtime… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=897) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=899)