# Latest **URL:** https://discuss.elastic.co/latest.md?page=1024 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1025 --- ## [Reference to grok patterns that are in another field of event](https://discuss.elastic.co/t/reference-to-grok-patterns-that-are-in-another-field-of-event/311104)
**Author:** [@who](https://discuss.elastic.co/u/who)\ **Replies:** 0\ **Last updated:** [August 1, 2022, 10:46am UTC](https://discuss.elastic.co/t/reference-to-grok-patterns-that-are-in-another-field-of-event/311104 "2022-08-01T10:46:15Z")
There's a regexes array field in the event that contains some regexes: "regexes" =\> \[ \[0\] "regex1", \[1\] "regex2", \[2\] "regex3" \] As this field's content get filled dynamicall… --- ## [Beats on SUSE Linux Enterprise Server 11 (X86\_64)](https://discuss.elastic.co/t/beats-on-suse-linux-enterprise-server-11-x86-64/310885)
**Author:** [@aji.shinde7](https://discuss.elastic.co/u/aji.shinde7)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 10:40am UTC](https://discuss.elastic.co/t/beats-on-suse-linux-enterprise-server-11-x86-64/310885 "2022-08-01T10:40:20Z")
Hello Experts, I was have installed Metricbeat and Filebeat Version 7.16.3 on SUSE Linux Enterprise Server 11 (X86\_64) but its not working. No data is flowing in Elasticsearch Index. I have copied same Metricbeat and F… --- ## [Beats to Logstash pipeline - Self signed cert implementation](https://discuss.elastic.co/t/beats-to-logstash-pipeline-self-signed-cert-implementation/311090)
**Author:** [@sravan\_kaheti](https://discuss.elastic.co/u/sravan_kaheti)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 10:32am UTC](https://discuss.elastic.co/t/beats-to-logstash-pipeline-self-signed-cert-implementation/311090 "2022-08-01T10:32:45Z")
Hi There , I am using filebeat, metricbeat and passing output to my logstash pipeline (version 8.1). I have a requirement that need to implement self signed cert to secure communication between beats to our logstash. B… --- ## [Logstash Ruby concat & event](https://discuss.elastic.co/t/logstash-ruby-concat-event/308816)
**Author:** [@jsauvebois](https://discuss.elastic.co/u/jsauvebois)\ **Replies:** 3\ **Last updated:** [August 1, 2022, 9:42am UTC](https://discuss.elastic.co/t/logstash-ruby-concat-event/308816 "2022-08-01T09:42:24Z")
Hi, In a first time, I tested how to add a field via ruby code based on existing field duration and event ... ruby { code =\> " if event.get('duration').nil? event.set('duration\_time','') else duration\_time = ev… --- ## [Get exact complete phonetic match](https://discuss.elastic.co/t/get-exact-complete-phonetic-match/311095)
**Author:** [@mkoch1](https://discuss.elastic.co/u/mkoch1)\ **Replies:** 0\ **Last updated:** [August 1, 2022, 9:29am UTC](https://discuss.elastic.co/t/get-exact-complete-phonetic-match/311095 "2022-08-01T09:29:07Z")
I have a document with the field "familyname" with a phonetic analyzer. The content can be something like "von meier schmidt". Is there a possibility to only get a match, if I search for "von meyer schmidt" or "von meie… --- ## [Logstash: dynamic topic based on value of field](https://discuss.elastic.co/t/logstash-dynamic-topic-based-on-value-of-field/310976)
**Author:** [@jori-be](https://discuss.elastic.co/u/jori-be)\ **Replies:** 2\ **Last updated:** [August 1, 2022, 9:10am UTC](https://discuss.elastic.co/t/logstash-dynamic-topic-based-on-value-of-field/310976 "2022-08-01T09:10:27Z")
I'm trying to configure Logstash with Kafka output. Basically I want to put data in different Kafka topics based on a field. So in example below, I have a field name in the data. All documents should be posted to the to… --- ## [Filebeat sends logs with delay](https://discuss.elastic.co/t/filebeat-sends-logs-with-delay/311038)
**Author:** [@behzad\_alipoor](https://discuss.elastic.co/u/behzad_alipoor)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 8:51am UTC](https://discuss.elastic.co/t/filebeat-sends-logs-with-delay/311038 "2022-08-01T08:51:00Z")
I send logs from filebeat to elasticsearch directly . the service that i use generates logs every second . most of the time it works properly but sometimes the logs reach to elastic after 15 minutes or later and I don'… --- ## [Unique count after aggregation "painless](https://discuss.elastic.co/t/unique-count-after-aggregation-painless/311088)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 0\ **Last updated:** [August 1, 2022, 7:26am UTC](https://discuss.elastic.co/t/unique-count-after-aggregation-painless/311088 "2022-08-01T07:26:14Z")
Hello everybody, Could someone please give me an example of a unique count after an aggregation of one field using the painless scripting ? Thanks in advance Best regards --- ## [Logstash 8 @timestamp field format was changed to microseconds percision](https://discuss.elastic.co/t/logstash-8-timestamp-field-format-was-changed-to-microseconds-percision/310852)
**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\ **Replies:** 7\ **Last updated:** [August 1, 2022, 7:23am UTC](https://discuss.elastic.co/t/logstash-8-timestamp-field-format-was-changed-to-microseconds-percision/310852 "2022-08-01T07:23:38Z")
Hi, I have been using Logstash for a while now and when upgrading to version 8 I can see the @timestamp field format was changed from milliseconds percision to microseconds percision (meaning instead of 2022-07-28T09:46… --- ## [Kibana visualization Interval change automatic issue](https://discuss.elastic.co/t/kibana-visualization-interval-change-automatic-issue/310882)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 4\ **Last updated:** [August 1, 2022, 6:36am UTC](https://discuss.elastic.co/t/kibana-visualization-interval-change-automatic-issue/310882 "2022-08-01T06:36:19Z")
Hello All, I've selected timerange as 90 days(quick select),then applied visualization interval as \>=15m but in visualization the interval is showing per "12 hours" automatically,Note:Everytime the quick select option … --- ## [Random exits every few weeks - Native controller process has stopped - no new native processes can be started](https://discuss.elastic.co/t/random-exits-every-few-weeks-native-controller-process-has-stopped-no-new-native-processes-can-be-started/311076)
**Author:** [@wintercounter](https://discuss.elastic.co/u/wintercounter)\ **Replies:** 0\ **Last updated:** [August 1, 2022, 5:54am UTC](https://discuss.elastic.co/t/random-exits-every-few-weeks-native-controller-process-has-stopped-no-new-native-processes-can-be-started/311076 "2022-08-01T05:54:37Z")
Hi all, I'm having a single node Docker instance which stops for some reason every few weeks. I'd like to find out the root cause and how to fix it. Last few logs: 2022-07-31T01:38:00.006473091Z {"@timestamp":"2022-07… --- ## [Finding the hostname inside the javascript processor script](https://discuss.elastic.co/t/finding-the-hostname-inside-the-javascript-processor-script/311054)
**Author:** [@Saeed\_Ektesabi2](https://discuss.elastic.co/u/Saeed_Ektesabi2)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 2:36am UTC](https://discuss.elastic.co/t/finding-the-hostname-inside-the-javascript-processor-script/311054 "2022-08-01T02:36:54Z")
Hi all, I am trying to find the hostname inside the javascript script code. I tried to get it using the "os" module, but it seems that it is not available. Are there any other options to achieve this? Also, where can … --- ## [\[error\]\[savedobjects-service\] \[.kibana\_task\_manager\] Action failed with 'Request timed out'. \[savedobjects-service\] \[.kibana\_task\_manager\] REINDEX\_SOURCE\_TO\_TEMP\_INDEX\_BULK -\> REINDEX\_SOURCE\_TO\_TEMP\_INDEX\_BULK](https://discuss.elastic.co/t/error-savedobjects-service-kibana-task-manager-action-failed-with-request-timed-out-savedobjects-service-kibana-task-manager-reindex-source-to-temp-index-bulk-reindex-source-to-temp-index-bulk/311039)
**Author:** [@mujtabah](https://discuss.elastic.co/u/mujtabah)\ **Replies:** 8\ **Last updated:** [August 1, 2022, 12:25am UTC](https://discuss.elastic.co/t/error-savedobjects-service-kibana-task-manager-action-failed-with-request-timed-out-savedobjects-service-kibana-task-manager-reindex-source-to-temp-index-bulk-reindex-source-to-temp-index-bulk/311039 "2022-08-01T00:25:45Z")
Hi guys i have a running cluster with 5 nodes(3master and 2 data nodes). i have done rolling upgrade of elastic for all the 5 nodes from v7.10.0 to v7.16.2 and it was successfully upgraded and all the 5 nodes are in clu… --- ## [Fleet Server displaying as not Healthy](https://discuss.elastic.co/t/fleet-server-displaying-as-not-healthy/311064)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 0\ **Last updated:** [July 31, 2022, 10:17pm UTC](https://discuss.elastic.co/t/fleet-server-displaying-as-not-healthy/311064 "2022-07-31T22:17:12Z")
Hello there, Inside Kibana, my fleet server keeping show as not healthy and I´m trying to find out why but could not find a thing. The strange thing is that the same agent running the fleet server policy show as health… --- ## [Logstash stuck after Restart/Stop command](https://discuss.elastic.co/t/logstash-stuck-after-restart-stop-command/310797)
**Author:** [@Oriya](https://discuss.elastic.co/u/Oriya)\ **Replies:** 2\ **Last updated:** [July 31, 2022, 9:48pm UTC](https://discuss.elastic.co/t/logstash-stuck-after-restart-stop-command/310797 "2022-07-31T21:48:30Z")
Hi, i have a logstash server (8.1.3 version) with 3 pipelines. each pipeline configure with jdbc to collect data from sql server. everything works ok until i try to execute the : "systemctl restart logstash" and it'… --- ## [Errno::EACCES: Permission denied - NUL not fixed with enableADS](https://discuss.elastic.co/t/errno-permission-denied-nul-not-fixed-with-enableads/310846)
**Author:** [@Bert\_Van\_der\_Heyden](https://discuss.elastic.co/u/Bert_Van_der_Heyden)\ **Replies:** 3\ **Last updated:** [July 31, 2022, 9:03pm UTC](https://discuss.elastic.co/t/errno-permission-denied-nul-not-fixed-with-enableads/310846 "2022-07-31T21:03:35Z")
Running logstash (latest version 8.3.2) on Windows gives me: Errno::EACCES: Permission denied - NUL sysopen at org/jruby/RubyIO.java:1237 Found out that this is a known issue and fixed with -Djdk.io.File.enableADS=tru… --- ## [CPU:Memory ratio for a general-purpose cluster](https://discuss.elastic.co/t/cpu-memory-ratio-for-a-general-purpose-cluster/311060)
**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\ **Replies:** 1\ **Last updated:** [July 31, 2022, 7:51pm UTC](https://discuss.elastic.co/t/cpu-memory-ratio-for-a-general-purpose-cluster/311060 "2022-07-31T19:51:34Z")
How can we determine a good ratio of CPU/memory configuration for elasticsearch nodes for general purpose usage? I see 1:4 ratio in most places, I am not sure though, how that ratio is derived. --- ## [Workplace\_search\_ca](https://discuss.elastic.co/t/workplace-search-ca/310747)
**Author:** [@shamorai](https://discuss.elastic.co/u/shamorai)\ **Replies:** 5\ **Last updated:** [July 31, 2022, 5:59pm UTC](https://discuss.elastic.co/t/workplace-search-ca/310747 "2022-07-31T17:59:38Z")
When tying to add confluence server/jira server I keep getting ssl verification error, problem is I can't find any setting in the documentation for a truststore, or certificate\_authorities. I have looked at: Configurati… --- ## [Return (emit) @timestamp date value in runtime field](https://discuss.elastic.co/t/return-emit-timestamp-date-value-in-runtime-field/311001)
**Author:** [@nilei](https://discuss.elastic.co/u/nilei)\ **Replies:** 15\ **Last updated:** [July 31, 2022, 11:59am UTC](https://discuss.elastic.co/t/return-emit-timestamp-date-value-in-runtime-field/311001 "2022-07-31T11:59:12Z")
Dear all, I am trying to output the value of @timestamp in a runtime field (configured in Kibana 7.13.3). My goal is then to get only the month as display value with a modified format 'MMM'. Unfortunately, I have been u… --- ## [Composite aggregation query with bucket\_sort does not work properly](https://discuss.elastic.co/t/composite-aggregation-query-with-bucket-sort-does-not-work-properly/311055)
**Author:** [@fabiobozzo](https://discuss.elastic.co/u/fabiobozzo)\ **Replies:** 0\ **Last updated:** [July 31, 2022, 10:51am UTC](https://discuss.elastic.co/t/composite-aggregation-query-with-bucket-sort-does-not-work-properly/311055 "2022-07-31T10:51:07Z")
I have an index to store financial transactions: { "mappings": { "\_doc": { "properties": { "amount": { "type": "long" }, "currencyCode": { "type": "keyword" … --- ## [Elastic APM JMS transaction grouping](https://discuss.elastic.co/t/elastic-apm-jms-transaction-grouping/310913)
**Author:** [@aravind0910](https://discuss.elastic.co/u/aravind0910)\ **Replies:** 1\ **Last updated:** [July 31, 2022, 9:18am UTC](https://discuss.elastic.co/t/elastic-apm-jms-transaction-grouping/310913 "2022-07-31T09:18:46Z")
Kibana version: 7.16.3 Elasticsearch version: 7.16.3 APM Server version: 7.16.3 APM Agent language and version: Java, version: 1.33.0 Fresh install or upgraded from other version? Fresh Install Description of the pr… --- ## [Kibana Dashboard](https://discuss.elastic.co/t/kibana-dashboard/311047)
**Author:** [@Sahil\_Bindra](https://discuss.elastic.co/u/Sahil_Bindra)\ **Replies:** 2\ **Last updated:** [July 31, 2022, 6:01am UTC](https://discuss.elastic.co/t/kibana-dashboard/311047 "2022-07-31T06:01:59Z")
Hi, I have a log like this: User content\_id ankur 879fdd7979 mohak 4345grg66 havel 1224asa34 ankur 98089rtf6 sonam 2134ssded245 tunnu 843juy566 ankur 225cc865 havel 09744qqw67 sonam 234mmk566 I want the visua… --- ## [Elasticsearch Linux User](https://discuss.elastic.co/t/elasticsearch-linux-user/311031)
**Author:** [@lucian1094](https://discuss.elastic.co/u/lucian1094)\ **Replies:** 5\ **Last updated:** [July 30, 2022, 6:04pm UTC](https://discuss.elastic.co/t/elasticsearch-linux-user/311031 "2022-07-30T18:04:33Z")
I installed an Elasticsearch on CentOS using rpm file. After install, elaticsearch user and group is created, user which can't be used to manage (start/stop/restart) elasticsearch (nologin, nonexistent). I don't want to … --- ## [Logstash not starting; error reason : Your settings are invalid](https://discuss.elastic.co/t/logstash-not-starting-error-reason-your-settings-are-invalid/310440)
**Author:** [@sanuboy](https://discuss.elastic.co/u/sanuboy)\ **Replies:** 7\ **Last updated:** [July 30, 2022, 5:36pm UTC](https://discuss.elastic.co/t/logstash-not-starting-error-reason-your-settings-are-invalid/310440 "2022-07-30T17:36:38Z")
Hi, This is the first time i am trying to setup ELK stack to read my application log files and i have been struggling to get through this issue for about two days and finally resorted to asking for help. I have illustrat… --- ## [Trying to make logstash work with multiline logs on a SIEM platform](https://discuss.elastic.co/t/trying-to-make-logstash-work-with-multiline-logs-on-a-siem-platform/310951)
**Author:** [@currybread](https://discuss.elastic.co/u/currybread)\ **Replies:** 1\ **Last updated:** [July 30, 2022, 12:49pm UTC](https://discuss.elastic.co/t/trying-to-make-logstash-work-with-multiline-logs-on-a-siem-platform/310951 "2022-07-30T12:49:23Z")
Situation: Multiline logs collected are sent to a SIEM event collector via Logstash but having issues test.log: \[5/8/22 7:31:23:546 SGT\] FFDC Exception:java.io.FileNotFoundException SourceId:com.ibm.ws.webcontaine… --- ## [How to count matched phrases with slop](https://discuss.elastic.co/t/how-to-count-matched-phrases-with-slop/311036)
**Author:** [@Daniil](https://discuss.elastic.co/u/Daniil)\ **Replies:** 0\ **Last updated:** [July 30, 2022, 9:56am UTC](https://discuss.elastic.co/t/how-to-count-matched-phrases-with-slop/311036 "2022-07-30T09:56:16Z")
Now I am using scripted similarity to count phrases in matched documents. "similarity": { "my\_scripted\_formula": { "type": "scripted", "script": {"source": "double tf = doc.freq; return query.boost \*… --- ## [Can elasticsearch-1.13.3 work with kibana-1.13.3](https://discuss.elastic.co/t/can-elasticsearch-1-13-3-work-with-kibana-1-13-3/311003)
**Author:** [@Rain\_Water](https://discuss.elastic.co/u/Rain_Water)\ **Replies:** 3\ **Last updated:** [July 30, 2022, 7:03am UTC](https://discuss.elastic.co/t/can-elasticsearch-1-13-3-work-with-kibana-1-13-3/311003 "2022-07-30T07:03:02Z")
Is kibana version 1.13.2 compatible with elasticsearch 1.13.3 can both work together with different version? --- ## [Docker Heap Dump](https://discuss.elastic.co/t/docker-heap-dump/309240)
**Author:** [@Stef\_Nestor](https://discuss.elastic.co/u/Stef_Nestor)\ **Replies:** 1\ **Last updated:** [July 30, 2022, 2:12am UTC](https://discuss.elastic.co/t/docker-heap-dump/309240 "2022-07-30T02:12:56Z")
:wave:, howdy! How do you grab an ES Docker heap dump? From basic setup: $ docker run -it -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" docker.elastic.co/elasticsearch/elasticsearch:7.17.0 $ docker exec -it… --- ## [Filebeat not logging hints.enabled container logs](https://discuss.elastic.co/t/filebeat-not-logging-hints-enabled-container-logs/310574)
**Author:** [@dev4elasticapm](https://discuss.elastic.co/u/dev4elasticapm)\ **Replies:** 3\ **Last updated:** [July 30, 2022, 1:19am UTC](https://discuss.elastic.co/t/filebeat-not-logging-hints-enabled-container-logs/310574 "2022-07-30T01:19:06Z")
Hi, I am using ECK, I have configured filebeat with two options hints.enabled: true, which looks for all the containers with co.elastic.logs/enabled: "true" Checks the container containing name ingress. #2 is workin… --- ## [Where is the elastic community team?](https://discuss.elastic.co/t/where-is-the-elastic-community-team/311022)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 1\ **Last updated:** [July 29, 2022, 11:25pm UTC](https://discuss.elastic.co/t/where-is-the-elastic-community-team/311022 "2022-07-29T23:25:21Z")
where is the elastic comunity team ?I asked a question and any response .... [Previous page](https://discuss.elastic.co/latest.md?page=1023) [Next page](https://discuss.elastic.co/latest.md?page=1025)