# Latest **URL:** https://discuss.elastic.co/latest.md?page=1000 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1001 --- ## [Initializing a new grok filter from ruby filter](https://discuss.elastic.co/t/initializing-a-new-grok-filter-from-ruby-filter/311722)
**Author:** [@who](https://discuss.elastic.co/u/who)\ **Replies:** 2\ **Last updated:** [August 21, 2022, 6:19am UTC](https://discuss.elastic.co/t/initializing-a-new-grok-filter-from-ruby-filter/311722 "2022-08-21T06:19:00Z")
I'm going to declare and call grok filter from inside a ruby filter like this: ruby { code =\> "@grok = LogStash::Filters::Grok @grok.new(event.get("message"), "\\d+") #call grok plugin for this pipleline " }… --- ## [Vega Pie doesn't show slices with scripted\_metric, only the values in the middle of the chart without a Pie](https://discuss.elastic.co/t/vega-pie-doesnt-show-slices-with-scripted-metric-only-the-values-in-the-middle-of-the-chart-without-a-pie/312265)
**Author:** [@DMinovski](https://discuss.elastic.co/u/DMinovski)\ **Replies:** 1\ **Last updated:** [August 21, 2022, 3:52am UTC](https://discuss.elastic.co/t/vega-pie-doesnt-show-slices-with-scripted-metric-only-the-values-in-the-middle-of-the-chart-without-a-pie/312265 "2022-08-21T03:52:55Z")
I'm using Vega to create a Pie visualization that gets its data from an Elasticsearch index. I used the code for the Radial Plot pie example: Radial Plot Example | Vega, but I changed it to use an index and scripted\_metr… --- ## [Jdbc\_streaming statement using a field from input?](https://discuss.elastic.co/t/jdbc-streaming-statement-using-a-field-from-input/312537)
**Author:** [@deep08](https://discuss.elastic.co/u/deep08)\ **Replies:** 0\ **Last updated:** [August 21, 2022, 2:55am UTC](https://discuss.elastic.co/t/jdbc-streaming-statement-using-a-field-from-input/312537 "2022-08-21T02:55:34Z")
Hello , I have a jdbc\_streaming filter and I want to pass statement as a field value from input . I tried different ways to inject field value in statement but always seeing "exception":"Java::JavaSql::SQLSyntaxErrorEx… --- ## [Options to Create/Add a New Field](https://discuss.elastic.co/t/options-to-create-add-a-new-field/312507)
**Author:** [@Yolanda.darricarrere](https://discuss.elastic.co/u/Yolanda.darricarrere)\ **Replies:** 1\ **Last updated:** [August 21, 2022, 1:53am UTC](https://discuss.elastic.co/t/options-to-create-add-a-new-field/312507 "2022-08-21T01:53:14Z")
Using the ecommerce data, I want to create a new field that is the total of products.taxful\_price minus products.discount\_amount (make it a double), then add the new field to a line graph using data from the past 7-days.… --- ## [Elasticsearch not coming up after restart](https://discuss.elastic.co/t/elasticsearch-not-coming-up-after-restart/310718)
**Author:** [@samee\_alam](https://discuss.elastic.co/u/samee_alam)\ **Replies:** 4\ **Last updated:** [August 20, 2022, 11:51pm UTC](https://discuss.elastic.co/t/elasticsearch-not-coming-up-after-restart/310718 "2022-08-20T23:51:34Z")
After deleting elasticsearch pod, it is not able to come up. (Ready state 0/1) Cluster health is yellow. fluentd is not able to connect to ES. elasticsearch@elasticsearch-master-0:~$ curl -XGET 'http://localhost:9200/… --- ## [How to append the nested fields in already created elasticsearch index using ES API](https://discuss.elastic.co/t/how-to-append-the-nested-fields-in-already-created-elasticsearch-index-using-es-api/312525)
**Author:** [@Sabaridass10](https://discuss.elastic.co/u/Sabaridass10)\ **Replies:** 0\ **Last updated:** [August 20, 2022, 7:51pm UTC](https://discuss.elastic.co/t/how-to-append-the-nested-fields-in-already-created-elasticsearch-index-using-es-api/312525 "2022-08-20T19:51:48Z")
I tried to append the nested field using below syntax but showing some error. Can anyone please help me on this? PUT url : es\_index/\_mappings { "properties": { "assignee": { "properties": { "components": { "proper… --- ## [Fiels does not contain any data after loading data using bulk](https://discuss.elastic.co/t/fiels-does-not-contain-any-data-after-loading-data-using-bulk/312510)
**Author:** [@SofiaContreras](https://discuss.elastic.co/u/SofiaContreras)\ **Replies:** 5\ **Last updated:** [August 20, 2022, 6:14pm UTC](https://discuss.elastic.co/t/fiels-does-not-contain-any-data-after-loading-data-using-bulk/312510 "2022-08-20T18:14:44Z")
I'm trying to make some visualizations using kibana, but the fields have any data. I thought that if I fill up an index in dev ops using bulk, then I would be able to interact with the data using kibana. Here is the cod… --- ## [Right structure for index](https://discuss.elastic.co/t/right-structure-for-index/312515)
**Author:** [@Kimblis](https://discuss.elastic.co/u/Kimblis)\ **Replies:** 3\ **Last updated:** [August 20, 2022, 3:28pm UTC](https://discuss.elastic.co/t/right-structure-for-index/312515 "2022-08-20T15:28:04Z")
Hello, in my application I have registered users (Users), unregistered users (Guests) and service providers (Providers). Provider can have clients, it's either Users or Guests. I want to have autosuggest and search for s… --- ## [Pourquoi les requêtes construites par Kibana dans discover n'utilisent-elles pas la requête must?](https://discuss.elastic.co/t/pourquoi-les-requetes-construites-par-kibana-dans-discover-nutilisent-elles-pas-la-requete-must/311438)
**Author:** [@Vincent92](https://discuss.elastic.co/u/Vincent92)\ **Replies:** 1\ **Last updated:** [August 20, 2022, 1:39pm UTC](https://discuss.elastic.co/t/pourquoi-les-requetes-construites-par-kibana-dans-discover-nutilisent-elles-pas-la-requete-must/311438 "2022-08-20T13:39:08Z")
Bonjour, Je développe une application web pour visualiser des données dans un elastic et je m'inspire des requêtes faites par Kibana dans l'application Discover en allant inspecter l'objet requête créé dans l'onglet Ins… --- ## [Is it possible to pass a large amount of parameters to painless script to perform sort?](https://discuss.elastic.co/t/is-it-possible-to-pass-a-large-amount-of-parameters-to-painless-script-to-perform-sort/312519)
**Author:** [@Lee\_JW](https://discuss.elastic.co/u/Lee_JW)\ **Replies:** 0\ **Last updated:** [August 20, 2022, 12:23pm UTC](https://discuss.elastic.co/t/is-it-possible-to-pass-a-large-amount-of-parameters-to-painless-script-to-perform-sort/312519 "2022-08-20T12:23:08Z")
Say there is a field that can be one of 200 distinct values (keyword). Every 2 different values are associated by a custom relevant score (it is a statistical data that cannot be mathematically calculted). For example, … --- ## [Indexation fulltext et organisation des données](https://discuss.elastic.co/t/indexation-fulltext-et-organisation-des-donnees/304227)
**Author:** [@lfourny](https://discuss.elastic.co/u/lfourny)\ **Replies:** 1\ **Last updated:** [August 20, 2022, 11:38am UTC](https://discuss.elastic.co/t/indexation-fulltext-et-organisation-des-donnees/304227 "2022-08-20T11:38:30Z")
Bonjour à tous, Je vais devoir très bientôt indexer un ensemble de documents en fulltext et plusieurs langues. Chaque document est repéré par un code et existe en plusieurs langues. Chaque document est lié à un produi… --- ## [Shard reroute and exchange Primary and Replica on a node](https://discuss.elastic.co/t/shard-reroute-and-exchange-primary-and-replica-on-a-node/312514)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 1\ **Last updated:** [August 20, 2022, 10:45am UTC](https://discuss.elastic.co/t/shard-reroute-and-exchange-primary-and-replica-on-a-node/312514 "2022-08-20T10:45:30Z")
Hi dears I have a cluster with 2 nodes. one of them is master and another is replica Bellow is all shards in monitor-node-01 : As you see, all of shards in this node is "Primary" and all "Replica" shards are on m… --- ## [Logstash http input fails](https://discuss.elastic.co/t/logstash-http-input-fails/312268)
**Author:** [@cihady](https://discuss.elastic.co/u/cihady)\ **Replies:** 3\ **Last updated:** [August 20, 2022, 6:56am UTC](https://discuss.elastic.co/t/logstash-http-input-fails/312268 "2022-08-20T06:56:27Z")
I am trying to api call logstash by using http input but when I send request I got error below Here is my config file input { http { host=\>"0.0.0.0" port =\>"2020" } } output { elasticsearch { hosts =\> … --- ## [KIbana Status is Yellow and I the pods become unavailable](https://discuss.elastic.co/t/kibana-status-is-yellow-and-i-the-pods-become-unavailable/312512)
**Author:** [@Francisco\_Yanez](https://discuss.elastic.co/u/Francisco_Yanez)\ **Replies:** 0\ **Last updated:** [August 20, 2022, 5:03am UTC](https://discuss.elastic.co/t/kibana-status-is-yellow-and-i-the-pods-become-unavailable/312512 "2022-08-20T05:03:13Z")
Hello Everyone, I am running the Elastic stack on Kubernetes. Recently I starting having timeouts on my kibana pods, getting alerts and in the kibana dashboard a few of the instances become yellow. I have 4 pods (instan… --- ## [How to iterate through aggregation buckets and send mail corresponding to each bucket using watcher action](https://discuss.elastic.co/t/how-to-iterate-through-aggregation-buckets-and-send-mail-corresponding-to-each-bucket-using-watcher-action/312474)
**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\ **Replies:** 2\ **Last updated:** [August 19, 2022, 6:14pm UTC](https://discuss.elastic.co/t/how-to-iterate-through-aggregation-buckets-and-send-mail-corresponding-to-each-bucket-using-watcher-action/312474 "2022-08-19T18:14:12Z")
I am trying to iterate through the aggregation bucket results. The aggregation response is : "aggregations" : { "agg1" : { "doc\_count\_error\_upper\_bound" : 0, "sum\_other\_doc\_count" : 0, "buckets" : … --- ## [How to filter my hosts?](https://discuss.elastic.co/t/how-to-filter-my-hosts/312491)
**Author:** [@yyie](https://discuss.elastic.co/u/yyie)\ **Replies:** 3\ **Last updated:** [August 19, 2022, 9:53pm UTC](https://discuss.elastic.co/t/how-to-filter-my-hosts/312491 "2022-08-19T21:53:31Z")
Hi, i'm new in ELK and I'm planning to add several hosts to my SIEM. I have several hosts distributed in several company locations and I want to be able to analyze each location separately. I tried to add tags to the ag… --- ## [How to write a filter for a file containing a mix of xml and non xml messages](https://discuss.elastic.co/t/how-to-write-a-filter-for-a-file-containing-a-mix-of-xml-and-non-xml-messages/312503)
**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\ **Replies:** 2\ **Last updated:** [August 19, 2022, 9:46pm UTC](https://discuss.elastic.co/t/how-to-write-a-filter-for-a-file-containing-a-mix-of-xml-and-non-xml-messages/312503 "2022-08-19T21:46:15Z")
Hello, I have a log file which is a mix of xml and regular (non xml) lines. I need to apply grok filer + xml filter to the lines that has xml block and apply only grok filter to the regular lines. For that I need help i… --- ## [Search across different indices with consistent ranking](https://discuss.elastic.co/t/search-across-different-indices-with-consistent-ranking/311916)
**Author:** [@stelitz](https://discuss.elastic.co/u/stelitz)\ **Replies:** 5\ **Last updated:** [August 19, 2022, 8:21pm UTC](https://discuss.elastic.co/t/search-across-different-indices-with-consistent-ranking/311916 "2022-08-19T20:21:32Z")
Hi everyone, I just got started with Elasticsearch and it's really awesome! I am, however, struggling with implementing one specific use case. Let's say I have different logical entities like books and authors and I wan… --- ## [Using event.get to get variable initialized to string](https://discuss.elastic.co/t/using-event-get-to-get-variable-initialized-to-string/312360)
**Author:** [@Mor\_Y](https://discuss.elastic.co/u/Mor_Y)\ **Replies:** 2\ **Last updated:** [August 19, 2022, 6:32pm UTC](https://discuss.elastic.co/t/using-event-get-to-get-variable-initialized-to-string/312360 "2022-08-19T18:32:18Z")
Hi, I want to add some fields that will have the same values of others but with different names: for Example the input json: {"Environment" : "x", "Name" : "y"} The output will be: {"Environment" : "x", "Name" : "y",… --- ## [I'm using "match-Boolean-prefix query but I can't get the exact match of the query](https://discuss.elastic.co/t/im-using-match-boolean-prefix-query-but-i-cant-get-the-exact-match-of-the-query/312492)
**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\ **Replies:** 0\ **Last updated:** [August 19, 2022, 6:18pm UTC](https://discuss.elastic.co/t/im-using-match-boolean-prefix-query-but-i-cant-get-the-exact-match-of-the-query/312492 "2022-08-19T18:18:57Z")
I'm using "match-Boolean-prefix query but I can't get the exact match of the query.I can't use prefix queries because I also need "not exact match" results and I also need the fuzziness and word completion.I get every th… --- ## [How can I generate lat long fields into geo point in elasticsearch](https://discuss.elastic.co/t/how-can-i-generate-lat-long-fields-into-geo-point-in-elasticsearch/312329)
**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\ **Replies:** 4\ **Last updated:** [August 19, 2022, 6:06pm UTC](https://discuss.elastic.co/t/how-can-i-generate-lat-long-fields-into-geo-point-in-elasticsearch/312329 "2022-08-19T18:06:56Z")
0 I've ingested CSV data via pgsync from postgres RDS to elasticsearch.my index contains "lat" and "lng" "lat" : { "type" : "float" }, "lng" : { "type" : "float" How would I convert this into an ac… --- ## [SSL issue Logstash sending logs to a Kafka instance](https://discuss.elastic.co/t/ssl-issue-logstash-sending-logs-to-a-kafka-instance/312489)
**Author:** [@shanem](https://discuss.elastic.co/u/shanem)\ **Replies:** 0\ **Last updated:** [August 19, 2022, 5:33pm UTC](https://discuss.elastic.co/t/ssl-issue-logstash-sending-logs-to-a-kafka-instance/312489 "2022-08-19T17:33:27Z")
We are getting a SSL error sending to Kafka from Logstash. We generated a csr, which was signed by the Kafka's CA. Then we took the pub and private key and converted them to a pkcs12 format with openssl with something … --- ## [Rule status is always pending](https://discuss.elastic.co/t/rule-status-is-always-pending/312424)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 6\ **Last updated:** [August 19, 2022, 4:11pm UTC](https://discuss.elastic.co/t/rule-status-is-always-pending/312424 "2022-08-19T16:11:51Z")
Hello World! Via Kibana -\> Management -\> Alerts and Insights -\> Rules and Connectors - all of my rules status is always Pending. per Get Alerting framework health API | Kibana Guide \[7.17\] | Elastic GET /api/alerting… --- ## [Proper maintenance of the Elastic Stack](https://discuss.elastic.co/t/proper-maintenance-of-the-elastic-stack/312030)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 3\ **Last updated:** [August 19, 2022, 4:53pm UTC](https://discuss.elastic.co/t/proper-maintenance-of-the-elastic-stack/312030 "2022-08-19T16:53:45Z")
Good Afternoon Elasticsearch Guru's I have been running my ELK SIEM for a few months now, almost a year actually and my syslogs stopped being shown. I have them coming in again now, but I need to clean up my indices so… --- ## [Line graph with split by chart is not drawing all data points](https://discuss.elastic.co/t/line-graph-with-split-by-chart-is-not-drawing-all-data-points/312484)
**Author:** [@lachlann562](https://discuss.elastic.co/u/lachlann562)\ **Replies:** 0\ **Last updated:** [August 19, 2022, 3:50pm UTC](https://discuss.elastic.co/t/line-graph-with-split-by-chart-is-not-drawing-all-data-points/312484 "2022-08-19T15:50:46Z")
I have created a line graph that shows the response time of our webservice in categories of 2-4 sec, 4-8, 8-16,16-32,32-64, 64+ seconds. We have set the visualization to split the chart by server so its easy to see which… --- ## [How to send email alert to groups based on condition success using Kibana Rules](https://discuss.elastic.co/t/how-to-send-email-alert-to-groups-based-on-condition-success-using-kibana-rules/312198)
**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\ **Replies:** 0\ **Last updated:** [August 16, 2022, 2:53pm UTC](https://discuss.elastic.co/t/how-to-send-email-alert-to-groups-based-on-condition-success-using-kibana-rules/312198 "2022-08-16T14:53:49Z")
I have created a rule using Kibana rules, by following the below steps: Created a new rule by selecting "Rule" under the "Security" section Then selected the rule type as "Event Correlation", wherein I added the index … --- ## [Threat Intel MISP](https://discuss.elastic.co/t/threat-intel-misp/312292)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 3\ **Last updated:** [August 19, 2022, 2:36pm UTC](https://discuss.elastic.co/t/threat-intel-misp/312292 "2022-08-19T14:36:19Z")
I'm trying to use Threat Intel MISP on filebeat and when i start the filebeat i have this error Aug 17 14:11:20 ubuntuserver filebeat\[18895\]: {"log.level":"error","@timestamp":"2022-08-17T14:11:20.550Z","log.logger":"in… --- ## [Elasticsearch better settings, mapping and queries to match with regular and nested fields](https://discuss.elastic.co/t/elasticsearch-better-settings-mapping-and-queries-to-match-with-regular-and-nested-fields/312475)
**Author:** [@babuzrb](https://discuss.elastic.co/u/babuzrb)\ **Replies:** 0\ **Last updated:** [August 19, 2022, 2:28pm UTC](https://discuss.elastic.co/t/elasticsearch-better-settings-mapping-and-queries-to-match-with-regular-and-nested-fields/312475 "2022-08-19T14:28:25Z")
I have multi level nested list of objects along with regular fields to index in elasticsearch. For example here is a document: { "main\_field\_1" : { "level\_1" : \[ "inner\_level\_1\_field\_1": "test-2", … --- ## [Kibana \<---\> Elasticsearch integration with SSL enable](https://discuss.elastic.co/t/kibana-elasticsearch-integration-with-ssl-enable/312298)
**Author:** [@Diego\_Lopes\_Penna](https://discuss.elastic.co/u/Diego_Lopes_Penna)\ **Replies:** 5\ **Last updated:** [August 19, 2022, 2:07pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-integration-with-ssl-enable/312298 "2022-08-19T14:07:00Z")
Hello, I've tried to find a solution for this on this forum but I was not able to find a solution that solves the problem. I'm trying to configure a Kibana/Elasticsearch integration. Each one of them is running on its … --- ## [Scoring issue with copy\_to](https://discuss.elastic.co/t/scoring-issue-with-copy-to/312472)
**Author:** [@lucie-wartelle](https://discuss.elastic.co/u/lucie-wartelle)\ **Replies:** 0\ **Last updated:** [August 19, 2022, 2:06pm UTC](https://discuss.elastic.co/t/scoring-issue-with-copy-to/312472 "2022-08-19T14:06:40Z")
Hello ! I'm facing an issue with elasticsearch 8. I have an index that contains companies and I use a copy\_to parameters to group searchable fields of these companies. However, some fields can be null, and some can cont… [Previous page](https://discuss.elastic.co/latest.md?page=999) [Next page](https://discuss.elastic.co/latest.md?page=1001)