# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=913 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 914 --- ## [Phrase Suggester Filter Docs](https://discuss.elastic.co/t/phrase-suggester-filter-docs/306479)
**Author:** [@Akka\_Tips](https://discuss.elastic.co/u/Akka_Tips)\ **Replies:** 0\ **Last updated:** [June 6, 2022, 4:03pm UTC](https://discuss.elastic.co/t/phrase-suggester-filter-docs/306479 "2022-06-06T16:03:48Z")
Hey, I'm trying to work out a way of filtering documents before the phrase suggester is fired. I have tried to use the collate functionality but this doesn't seem to achieve it as it only checks whether something is in t… --- ## [Unable to load software.log into elasticsearch](https://discuss.elastic.co/t/unable-to-load-software-log-into-elasticsearch/306309)
**Author:** [@Chandrapaul](https://discuss.elastic.co/u/Chandrapaul)\ **Replies:** 7\ **Last updated:** [June 6, 2022, 3:18pm UTC](https://discuss.elastic.co/t/unable-to-load-software-log-into-elasticsearch/306309 "2022-06-06T15:18:49Z")
I'm trying to load software logs from zeek into Elasticsearch. But if I run filebeat after adding software log path to zeek.yml in filebeat then I'm getting error : "Exiting: Failed to start crawler: creating module re… --- ## [How to decode html file in heartbeat/filebeat](https://discuss.elastic.co/t/how-to-decode-html-file-in-heartbeat-filebeat/306232)
**Author:** [@Anagha\_nambiar](https://discuss.elastic.co/u/Anagha_nambiar)\ **Replies:** 5\ **Last updated:** [June 2, 2022, 6:33pm UTC](https://discuss.elastic.co/t/how-to-decode-html-file-in-heartbeat-filebeat/306232 "2022-06-02T18:33:32Z")
Hi All, I have tried decoding XML file using decode\_xml processor in both heartbeat and filebeat and it worked as expected. Now I would like to decode html file. I didn't find a way to do that. Could you please sugges… --- ## [GeoSpatial Data for Maps](https://discuss.elastic.co/t/geospatial-data-for-maps/306441)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 1\ **Last updated:** [June 6, 2022, 2:59pm UTC](https://discuss.elastic.co/t/geospatial-data-for-maps/306441 "2022-06-06T14:59:51Z")
Hi, I have a flat file that has country and region. With this as a start point, how do I convert this data to geospatial fields for maps? When I use the current index pattern created from this file to create a map, it … --- ## [How can I move/migrate part of my data to a new cluster?](https://discuss.elastic.co/t/how-can-i-move-migrate-part-of-my-data-to-a-new-cluster/305289)
**Author:** [@Mary2022](https://discuss.elastic.co/u/Mary2022)\ **Replies:** 4\ **Last updated:** [June 6, 2022, 2:59pm UTC](https://discuss.elastic.co/t/how-can-i-move-migrate-part-of-my-data-to-a-new-cluster/305289 "2022-06-06T14:59:03Z")
Hi, I have an ES cluster that runs on version 6.8.23 and I have a new cluster that runs version 7.17.1. I want to migrate data not older than 1 year to my new cluster. Is this possible? How can I do it? --- ## [Pie visualization "Other" category misplaced](https://discuss.elastic.co/t/pie-visualization-other-category-misplaced/305815)
**Author:** [@dan3](https://discuss.elastic.co/u/dan3)\ **Replies:** 2\ **Last updated:** [June 6, 2022, 1:40pm UTC](https://discuss.elastic.co/t/pie-visualization-other-category-misplaced/305815 "2022-06-06T13:40:32Z")
Hi, I recently updated to Kibana 8.2.0 and I noticed that all my pie chart visualizations that have an "Other" category (when selecting "Group other values in separate bucket") started showing up in a different place - … --- ## [Remote Server is not ready to accept connections](https://discuss.elastic.co/t/remote-server-is-not-ready-to-accept-connections/305911)
**Author:** [@ttss15](https://discuss.elastic.co/u/ttss15)\ **Replies:** 1\ **Last updated:** [June 6, 2022, 1:23pm UTC](https://discuss.elastic.co/t/remote-server-is-not-ready-to-accept-connections/305911 "2022-06-06T13:23:47Z")
Hello, I am trying to set up fleet-managed agents on an air-gapped environment. The elastic package registry is up and running. Fleet server is also running and healthy. If I try to enroll an agent on a machine that is … --- ## [Multi Term aggregation on nested fields](https://discuss.elastic.co/t/multi-term-aggregation-on-nested-fields/306452)
**Author:** [@EL\_MOGHERBI\_MOHAMMED](https://discuss.elastic.co/u/EL_MOGHERBI_MOHAMMED)\ **Replies:** 0\ **Last updated:** [June 6, 2022, 1:05pm UTC](https://discuss.elastic.co/t/multi-term-aggregation-on-nested-fields/306452 "2022-06-06T13:05:27Z")
hello, i want to aggregate on a multiple nested fields is there any way to do it here is my mapping: { "mappings": { "\_data\_stream\_timestamp": { "enabled": true }, … --- ## [How to change the default size of MultiTermAggregation in Java](https://discuss.elastic.co/t/how-to-change-the-default-size-of-multitermaggregation-in-java/306424)
**Author:** [@good\_Royale](https://discuss.elastic.co/u/good_Royale)\ **Replies:** 2\ **Last updated:** [June 6, 2022, 1:04pm UTC](https://discuss.elastic.co/t/how-to-change-the-default-size-of-multitermaggregation-in-java/306424 "2022-06-06T13:04:55Z")
I was wondering if there is a way to change the default size in MultiTermAggregation in Java, I can change the default size in dev tools in kibana, but cannot change the size in java. Query look like this GET test\_in… --- ## [How to tag AWS loadbalancer for Kibana](https://discuss.elastic.co/t/how-to-tag-aws-loadbalancer-for-kibana/306446)
**Author:** [@Maksym\_Postument](https://discuss.elastic.co/u/Maksym_Postument)\ **Replies:** 1\ **Last updated:** [June 6, 2022, 12:57pm UTC](https://discuss.elastic.co/t/how-to-tag-aws-loadbalancer-for-kibana/306446 "2022-06-06T12:57:46Z")
Hello, i am trying to deploy Kibana using eck operator. And i want for loadbalancer which is created by eks to have tags. For regular service i would add tags with annotation like this annotations: service.beta.kub… --- ## [Problem with indexing event their time in timestamp beginning with no zero](https://discuss.elastic.co/t/problem-with-indexing-event-their-time-in-timestamp-beginning-with-no-zero/306341)
**Author:** [@ddoroshenko](https://discuss.elastic.co/u/ddoroshenko)\ **Replies:** 3\ **Last updated:** [June 6, 2022, 12:46pm UTC](https://discuss.elastic.co/t/problem-with-indexing-event-their-time-in-timestamp-beginning-with-no-zero/306341 "2022-06-06T12:46:13Z")
Hi, I have Oracle DB logs which have standard ISO8601 timestamp (yyyy-MM-ddTHH:mm:ss.SSSSSSZ). I have date filter filter { date { match =\> \[ "log\_timestamp", "ISO8601" \] } } But to the Elasticsearch are index… --- ## [Metricbeat dosen't show metrics on Kibana](https://discuss.elastic.co/t/metricbeat-dosent-show-metrics-on-kibana/306448)
**Author:** [@alexander2](https://discuss.elastic.co/u/alexander2)\ **Replies:** 0\ **Last updated:** [June 6, 2022, 12:37pm UTC](https://discuss.elastic.co/t/metricbeat-dosent-show-metrics-on-kibana/306448 "2022-06-06T12:37:33Z")
Hello everyone, i'm having trouble seeing the metrics on my kibana dashboard. I have ELK deployed on my kubernetes cluster and a remote virtual machine (centos 8) which i installed metricbeat. i changed the output to lo… --- ## [Send Weblogic data into Elasticsearch](https://discuss.elastic.co/t/send-weblogic-data-into-elasticsearch/306444)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 1\ **Last updated:** [June 6, 2022, 12:22pm UTC](https://discuss.elastic.co/t/send-weblogic-data-into-elasticsearch/306444 "2022-06-06T12:22:51Z")
Hello team, We are using below code to send data to Elasticsearch from weblogic as per mentioned in below URL, but we are not getting any data. Elasticsearch URL: https://localhost:9200 username: elastic password: el… --- ## [Kbn-monaco find method not found](https://discuss.elastic.co/t/kbn-monaco-find-method-not-found/306443)
**Author:** [@Osysh](https://discuss.elastic.co/u/Osysh)\ **Replies:** 0\ **Last updated:** [June 6, 2022, 11:41am UTC](https://discuss.elastic.co/t/kbn-monaco-find-method-not-found/306443 "2022-06-06T11:41:17Z")
Hello everyone, It seems that the version of monaco offered by Kibana 7.16.3 doesn't have "actions.find" when executing editor.getSupportedActions(). Is there any method to trigger the actions.find ? Thanks --- ## [Not able to fetch data from oracle database using jdbc plugin](https://discuss.elastic.co/t/not-able-to-fetch-data-from-oracle-database-using-jdbc-plugin/306442)
**Author:** [@Kishan3176](https://discuss.elastic.co/u/Kishan3176)\ **Replies:** 1\ **Last updated:** [June 6, 2022, 11:26am UTC](https://discuss.elastic.co/t/not-able-to-fetch-data-from-oracle-database-using-jdbc-plugin/306442 "2022-06-06T11:26:03Z")
Hi All, I am new to logstash. There was a requirement where client want to monitor few database servers using logstash and sentinel. I am able to connect to Sentinel but I am not able to fetch data from oracle databas… --- ## [TSVB Annotations -](https://discuss.elastic.co/t/tsvb-annotations/306050)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 5\ **Last updated:** [June 6, 2022, 11:19am UTC](https://discuss.elastic.co/t/tsvb-annotations/306050 "2022-06-06T11:19:52Z")
Hi, Under annotations in a TSVB graph, the query field allows a scripted field to be used. However the 'row template required' box does not allow a scripted field. Hence the values on the graph are showing incorrect num… --- ## [Magento2: Elasticsearch failed to start: problem with java](https://discuss.elastic.co/t/magento2-elasticsearch-failed-to-start-problem-with-java/306321)
**Author:** [@Konstantina\_Gerou](https://discuss.elastic.co/u/Konstantina_Gerou)\ **Replies:** 11\ **Last updated:** [June 6, 2022, 11:19am UTC](https://discuss.elastic.co/t/magento2-elasticsearch-failed-to-start-problem-with-java/306321 "2022-06-06T11:19:07Z")
Hello, I've installed Magento2.4.4 in ubuntu20.04 VM. When i did the installation everything was fine. Now I am facing a failure . I tried almost everything to fix it, but nothing. Here is the output: Also in the E… --- ## [Creating Visualization with Aggregation](https://discuss.elastic.co/t/creating-visualization-with-aggregation/306069)
**Author:** [@coolUser445](https://discuss.elastic.co/u/coolUser445)\ **Replies:** 1\ **Last updated:** [June 6, 2022, 10:24am UTC](https://discuss.elastic.co/t/creating-visualization-with-aggregation/306069 "2022-06-06T10:24:00Z")
Hello, I have data of the following form: Person : Products Ordered Bob : \["Apples", "Oranges"\] Alice : \["Mangos", "Milk", "Tomatoes"\] Bob : \["Apples", "Bananas",… --- ## [How to copy only mapping not data](https://discuss.elastic.co/t/how-to-copy-only-mapping-not-data/306415)
**Author:** [@sameer\_khamkar](https://discuss.elastic.co/u/sameer_khamkar)\ **Replies:** 6\ **Last updated:** [June 6, 2022, 9:55am UTC](https://discuss.elastic.co/t/how-to-copy-only-mapping-not-data/306415 "2022-06-06T09:55:25Z")
Hello There, I am new to ES, and I want to know if we have any way to copy only mappings not data, Or any way to create new index with old mappings, without data Regards, Sam --- ## [Kibana certificate issues in ES 7.7 - unable to verify the first certificate](https://discuss.elastic.co/t/kibana-certificate-issues-in-es-7-7-unable-to-verify-the-first-certificate/306265)
**Author:** [@morariu](https://discuss.elastic.co/u/morariu)\ **Replies:** 2\ **Last updated:** [June 6, 2022, 9:39am UTC](https://discuss.elastic.co/t/kibana-certificate-issues-in-es-7-7-unable-to-verify-the-first-certificate/306265 "2022-06-06T09:39:48Z")
Hi all. I know this has been discussed but I still can't figure it out. Getting the "unable to verify the first certificate" in the logs when starting Kibana. Here are the logs, the part where the errors start showing, … --- ## [Restoring to a different cluster](https://discuss.elastic.co/t/restoring-to-a-different-cluster/306421)
**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\ **Replies:** 6\ **Last updated:** [June 6, 2022, 9:25am UTC](https://discuss.elastic.co/t/restoring-to-a-different-cluster/306421 "2022-06-06T09:25:45Z")
Hi all , Can someone list down all the settings needed to restore a snapshot to different cluster . Assuming the new cluster has no configuration at all . Some basic questions : How many nodes do we need to assign t… --- ## [Logstash update elastic search when any update in a table](https://discuss.elastic.co/t/logstash-update-elastic-search-when-any-update-in-a-table/306133)
**Author:** [@ABHISHEK\_KUMAR\_SINGH](https://discuss.elastic.co/u/ABHISHEK_KUMAR_SINGH)\ **Replies:** 15\ **Last updated:** [June 6, 2022, 9:23am UTC](https://discuss.elastic.co/t/logstash-update-elastic-search-when-any-update-in-a-table/306133 "2022-06-06T09:23:45Z")
Hello, I have a Users table in my DB and I have successfully synced my logstash to update new records. But I want a way to update the existing records on Elasticsearch. I don't have any timestamp column in the table to … --- ## [Filebeat stopping randomly - Any way to send an email when logs are incomplete?](https://discuss.elastic.co/t/filebeat-stopping-randomly-any-way-to-send-an-email-when-logs-are-incomplete/306436)
**Author:** [@LionsELK](https://discuss.elastic.co/u/LionsELK)\ **Replies:** 0\ **Last updated:** [June 6, 2022, 9:20am UTC](https://discuss.elastic.co/t/filebeat-stopping-randomly-any-way-to-send-an-email-when-logs-are-incomplete/306436 "2022-06-06T09:20:09Z")
Hi all, Filebeat randomly stops running and we need to restart it with the filebeat command to check and pull any necessary records but is there a way I can set up ELK to notify me via email if there's any gaps in the r… --- ## [How to receive logs from multiple filebeats running on different machine(ec2) to one logstash instance?](https://discuss.elastic.co/t/how-to-receive-logs-from-multiple-filebeats-running-on-different-machine-ec2-to-one-logstash-instance/306314)
**Author:** [@Krishna\_Prasad](https://discuss.elastic.co/u/Krishna_Prasad)\ **Replies:** 4\ **Last updated:** [June 6, 2022, 8:55am UTC](https://discuss.elastic.co/t/how-to-receive-logs-from-multiple-filebeats-running-on-different-machine-ec2-to-one-logstash-instance/306314 "2022-06-06T08:55:24Z")
i have 2 filebeats running on different machine(Ex: A & B) and I have also specified the logstash machine IP in filebeat.yaml so i have written 2 logstash .conf file . My conf file looks like this -\> A.conf input{ bea… --- ## [Split single line log into multiple line log using filebeat](https://discuss.elastic.co/t/split-single-line-log-into-multiple-line-log-using-filebeat/306021)
**Author:** [@Gaurav\_kr](https://discuss.elastic.co/u/Gaurav_kr)\ **Replies:** 2\ **Last updated:** [June 6, 2022, 8:56am UTC](https://discuss.elastic.co/t/split-single-line-log-into-multiple-line-log-using-filebeat/306021 "2022-06-06T08:56:13Z")
Hi All, I have a single long line and i wanted to split the single log line into multiple line. Example Here I want to skip the log whenever E2ETRACEEVENT comes So the output should be like: Let me know if we … --- ## [Reports that output in different languages?](https://discuss.elastic.co/t/reports-that-output-in-different-languages/304346)
**Author:** [@ianturner01](https://discuss.elastic.co/u/ianturner01)\ **Replies:** 5\ **Last updated:** [June 6, 2022, 8:30am UTC](https://discuss.elastic.co/t/reports-that-output-in-different-languages/304346 "2022-06-06T08:30:36Z")
Hi, I'm new to Kibana so apologies if this is a really dumb question. I've had a quick search for similar topics before but maybe wasn't searching for the correct thing. I wondered if its possible to translate my repor… --- ## [Merging ES Clusters](https://discuss.elastic.co/t/merging-es-clusters/306419)
**Author:** [@Moe\_Hmaidan](https://discuss.elastic.co/u/Moe_Hmaidan)\ **Replies:** 3\ **Last updated:** [June 6, 2022, 5:27am UTC](https://discuss.elastic.co/t/merging-es-clusters/306419 "2022-06-06T05:27:09Z")
Hi All, We have two clusters:- Cluster A we have 5 new nodes running ES v7.17 (All data nodes out of which two are master) Cluster A Contains no data what so ever it was meant to be a backup cluster but now they w… --- ## [Logstash fields from aggregation to csv](https://discuss.elastic.co/t/logstash-fields-from-aggregation-to-csv/306376)
**Author:** [@ddcro](https://discuss.elastic.co/u/ddcro)\ **Replies:** 2\ **Last updated:** [June 6, 2022, 7:02am UTC](https://discuss.elastic.co/t/logstash-fields-from-aggregation-to-csv/306376 "2022-06-06T07:02:40Z")
Hi guys, I'm trying to export data from elastic to csv. The conf from logstash is something like: input { elasticsearch { hosts =\> "127.0.0.1:9200" index =\> "log" ... query… --- ## [Json parse - logstash VB.net](https://discuss.elastic.co/t/json-parse-logstash-vb-net/306427)
**Author:** [@Filip\_Caha](https://discuss.elastic.co/u/Filip_Caha)\ **Replies:** 0\ **Last updated:** [June 6, 2022, 6:48am UTC](https://discuss.elastic.co/t/json-parse-logstash-vb-net/306427 "2022-06-06T06:48:07Z")
Hi, I have a problem with parsing JSON data. My source code: \> Dim xPoslatUmo As String = ConfigurationManager.AppSettings.Item("UMOPoslat") \> If xPoslatUmo = "Ano" Then \> Dim request … --- ## [Elastic common schema for Cisco ASA](https://discuss.elastic.co/t/elastic-common-schema-for-cisco-asa/305730)
**Author:** [@Elie\_Sbat](https://discuss.elastic.co/u/Elie_Sbat)\ **Replies:** 3\ **Last updated:** [June 6, 2022, 6:47am UTC](https://discuss.elastic.co/t/elastic-common-schema-for-cisco-asa/305730 "2022-06-06T06:47:54Z")
Hello Gents, I am using ELK stack v8 and I am integrating Cisco ASA syslog directly to logstash and then Elasticsearch database. I have noticed from the data view that I miss some field type (i.e: geo\_point). how can i … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=912) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=914)