# Latest **URL:** https://discuss.elastic.co/latest.md?page=1074 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1075 --- ## [Logstash filter for filtering out specific words from message](https://discuss.elastic.co/t/logstash-filter-for-filtering-out-specific-words-from-message/307853)
**Author:** [@Muhammed\_Danish](https://discuss.elastic.co/u/Muhammed_Danish)\ **Replies:** 6\ **Last updated:** [June 24, 2022, 3:42pm UTC](https://discuss.elastic.co/t/logstash-filter-for-filtering-out-specific-words-from-message/307853 "2022-06-24T15:42:10Z")
Hello team, I am looking for a filter to filter out based on the words in a log message. For example, Log messages - This is a test message from server hosted in AWS and This is a test message coming from server hoste… --- ## [Filebeat setup (error loading template: failed to put data stream. no matching index template found for data stream)](https://discuss.elastic.co/t/filebeat-setup-error-loading-template-failed-to-put-data-stream-no-matching-index-template-found-for-data-stream/307789)
**Author:** [@ulisses](https://discuss.elastic.co/u/ulisses)\ **Replies:** 5\ **Last updated:** [June 24, 2022, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-setup-error-loading-template-failed-to-put-data-stream-no-matching-index-template-found-for-data-stream/307789 "2022-06-24T15:24:31Z")
I'm running a dev environment to understand how i can use filebeat and elasticsearch to store our application logs but i can't make it work with custom configurations. I'm trying to change index name following this docu… --- ## [EFK stack performance with large data](https://discuss.elastic.co/t/efk-stack-performance-with-large-data/308101)
**Author:** [@Mohit.Sharma](https://discuss.elastic.co/u/Mohit.Sharma)\ **Replies:** 3\ **Last updated:** [June 24, 2022, 3:06pm UTC](https://discuss.elastic.co/t/efk-stack-performance-with-large-data/308101 "2022-06-24T15:06:10Z")
Hello Team, We are planning to store logs in ElasticSearch DB through Filebeat and then create dashboards on Kibana for graphical visualization(Lens, TSVB, Aggregations) using basic license. As we are expecting around 2… --- ## [Uploading sourcemaps from AIX webserver](https://discuss.elastic.co/t/uploading-sourcemaps-from-aix-webserver/303526)
**Author:** [@Hamunaptroid](https://discuss.elastic.co/u/Hamunaptroid)\ **Replies:** 17\ **Last updated:** [June 24, 2022, 2:41pm UTC](https://discuss.elastic.co/t/uploading-sourcemaps-from-aix-webserver/303526 "2022-06-24T14:41:46Z")
Hello, I can't figure out how to upload sourcemaps to kibana. \*\*Config for APM\*\* // using full condition instead of PROD variable (webpack will remove this code if syntax is like this) if (process.env.NODE\_ENV === 'pro… --- ## [Pie Chart Canvas - Show only pencertage as label to prevent overlapping](https://discuss.elastic.co/t/pie-chart-canvas-show-only-pencertage-as-label-to-prevent-overlapping/308103)
**Author:** [@Chiaaa](https://discuss.elastic.co/u/Chiaaa)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 2:00pm UTC](https://discuss.elastic.co/t/pie-chart-canvas-show-only-pencertage-as-label-to-prevent-overlapping/308103 "2022-06-24T14:00:27Z")
Hi, I want to create a pie chart in Canvas and I set the "Show Labels" property. The labels overlapping, so I would like to know if is possibile set css properties or something similar that allow me to show only the pe… --- ## [Grok filter some entries have additional fields](https://discuss.elastic.co/t/grok-filter-some-entries-have-additional-fields/308092)
**Author:** [@tartaarsap](https://discuss.elastic.co/u/tartaarsap)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 1:55pm UTC](https://discuss.elastic.co/t/grok-filter-some-entries-have-additional-fields/308092 "2022-06-24T13:55:46Z")
I have the following dataset: 1613766382 FILE %computerName% MACB \[4096\] c:/$MFTMirr 1613766382 FILE %computerName% MACB \[4096\] c:/$MFTMirr ($FILE\_NAME) I am trying to build a GROK filter to match on both lines. Howe… --- ## [How to run FS Crawler in background on Ubuntu 20.04](https://discuss.elastic.co/t/how-to-run-fs-crawler-in-background-on-ubuntu-20-04/308072)
**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 1:42pm UTC](https://discuss.elastic.co/t/how-to-run-fs-crawler-in-background-on-ubuntu-20-04/308072 "2022-06-24T13:42:38Z")
I tried to run FS Crawler in background on Ubuntu 20.04, and I changed the last line of file bin/fscrawler as following: exec "nohup $JAVA" ${JAVA\_OPTS} -cp "$FS\_CLASSPATH" "fr.pilato.elasticsearch.crawler.fs.cli.FsCraw… --- ## [Backport of a Lucene bugfix (Lucene 9.0/ES 8.0)?](https://discuss.elastic.co/t/backport-of-a-lucene-bugfix-lucene-9-0-es-8-0/308093)
**Author:** [@mhugo](https://discuss.elastic.co/u/mhugo)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 1:23pm UTC](https://discuss.elastic.co/t/backport-of-a-lucene-bugfix-lucene-9-0-es-8-0/308093 "2022-06-24T13:23:37Z")
Hi, We are migrating from ES 6.8 to ES 7.17 and encountered a bug during indexing for some complex shapes. It turns out the issue is a tessellation bug in Lucene that has been fixed in Lucene 9.0 (see \[LUCENE-9580\] Tess… --- ## [Why query ignores slop value?](https://discuss.elastic.co/t/why-query-ignores-slop-value/307953)
**Author:** [@asil](https://discuss.elastic.co/u/asil)\ **Replies:** 3\ **Last updated:** [June 24, 2022, 12:47pm UTC](https://discuss.elastic.co/t/why-query-ignores-slop-value/307953 "2022-06-24T12:47:59Z")
I'm using elastic search 7.6.2 I have index with the following mapping: "mappings": { "properties": { "content": {"type": "text"}, } } with 3 documents: Distri… --- ## [Issues with clustering on Docker](https://discuss.elastic.co/t/issues-with-clustering-on-docker/308104)
**Author:** [@Wrighty11](https://discuss.elastic.co/u/Wrighty11)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 12:37pm UTC](https://discuss.elastic.co/t/issues-with-clustering-on-docker/308104 "2022-06-24T12:37:51Z")
Hi everyone, having an issue with setting up an elasticsearch cluster over talking over 2 centos machines. Here are my compse files: VM 1 - version: '2.2' services: es-8.2.2: image: docker.elastic.co/elasticsear… --- ## [How to sort month/day properly in Canvas](https://discuss.elastic.co/t/how-to-sort-month-day-properly-in-canvas/307529)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 3\ **Last updated:** [June 24, 2022, 11:51am UTC](https://discuss.elastic.co/t/how-to-sort-month-day-properly-in-canvas/307529 "2022-06-24T11:51:38Z")
Hello everyone, got a problem working with the canvas. The date isn't showing properly (organized by month then day) and I was wondering if theres anything I could use to have it fixed. Here is how the chart is looking … --- ## [Logstash JSON File input](https://discuss.elastic.co/t/logstash-json-file-input/308108)
**Author:** [@priyankamondalhcl](https://discuss.elastic.co/u/priyankamondalhcl)\ **Replies:** 0\ **Last updated:** [June 24, 2022, 11:39am UTC](https://discuss.elastic.co/t/logstash-json-file-input/308108 "2022-06-24T11:39:47Z")
Hi Team, Please help me to set logstash config from nested json input file. My json file look like below: \[ { "billing\_account\_id": "loma", "InvoiceMonth": "123456", "credits": \[ { "name": "abc", "amount": ,0.0… --- ## [Unable to multi\_match in php library](https://discuss.elastic.co/t/unable-to-multi-match-in-php-library/308107)
**Author:** [@Jeroen2](https://discuss.elastic.co/u/Jeroen2)\ **Replies:** 0\ **Last updated:** [June 24, 2022, 11:32am UTC](https://discuss.elastic.co/t/unable-to-multi-match-in-php-library/308107 "2022-06-24T11:32:07Z")
I'm trying to use a filter to search multiple fields and query between dates. The PHP looks like this: $params = \[ 'index' =\> $this-\>index . '\*', 'size' =\> self::HITS\_SIZE, 'from' =\> … --- ## [Logstash pipeline currently forwarding logs to elasticsearch](https://discuss.elastic.co/t/logstash-pipeline-currently-forwarding-logs-to-elasticsearch/307197)
**Author:** [@lhmzhou](https://discuss.elastic.co/u/lhmzhou)\ **Replies:** 5\ **Last updated:** [June 24, 2022, 11:28am UTC](https://discuss.elastic.co/t/logstash-pipeline-currently-forwarding-logs-to-elasticsearch/307197 "2022-06-24T11:28:50Z")
Hi, Currently, I have a logstash pipeline that is forwarding logs to Elasticsearch. I am planning to send logfiles to S3 as a batch using the aws s3 cli. What are some drawbacks to this approach? Is it possible to accou… --- ## [How to add a Runtime Field for doc ingest time?](https://discuss.elastic.co/t/how-to-add-a-runtime-field-for-doc-ingest-time/305793)
**Author:** [@ykara84](https://discuss.elastic.co/u/ykara84)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 11:15am UTC](https://discuss.elastic.co/t/how-to-add-a-runtime-field-for-doc-ingest-time/305793 "2022-06-24T11:15:08Z")
Hi, i'm trying to add a Runtime Field to an index-pattern which will add a new field to each doc as it arrives into the index, the new field is to contain the date/time the doc was added to the index, a field called some… --- ## [Disable incremental searching on Kibana dashboard visualize](https://discuss.elastic.co/t/disable-incremental-searching-on-kibana-dashboard-visualize/308089)
**Author:** [@rogerlee](https://discuss.elastic.co/u/rogerlee)\ **Replies:** 1\ **Last updated:** [June 24, 2022, 11:04am UTC](https://discuss.elastic.co/t/disable-incremental-searching-on-kibana-dashboard-visualize/308089 "2022-06-24T11:04:31Z")
Hi Experts, I am creating a dashboard for our customer. I found if we click a visualize, a filtering will be triggered automatically for all dashboards. Can I disable the click to filtering feature on visualize? Because… --- ## [Canvas - Error in populate dynamic variable/parameter](https://discuss.elastic.co/t/canvas-error-in-populate-dynamic-variable-parameter/307131)
**Author:** [@Chiaaa](https://discuss.elastic.co/u/Chiaaa)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 10:49am UTC](https://discuss.elastic.co/t/canvas-error-in-populate-dynamic-variable-parameter/307131 "2022-06-24T10:49:12Z")
Hi ! I'm trying to create a Data Table in canvas. I would like to add 3 columns in my table: Asset Volumes (as a count of record) % On Total (as Asset Volumes/Total Volumes) I create the follow script in espression … --- ## [Time taken by ELK stack to create indices](https://discuss.elastic.co/t/time-taken-by-elk-stack-to-create-indices/307836)
**Author:** [@Divyank\_Garg](https://discuss.elastic.co/u/Divyank_Garg)\ **Replies:** 7\ **Last updated:** [June 24, 2022, 10:36am UTC](https://discuss.elastic.co/t/time-taken-by-elk-stack-to-create-indices/307836 "2022-06-24T10:36:13Z")
How much time does it take to create indices using ELK services via docker-compose file? We process total 450 files of total size of 4.6GB to create 450 indices. All these files are basically the log files. It takes aro… --- ## [Mutate - Geopoint - Copy Field](https://discuss.elastic.co/t/mutate-geopoint-copy-field/308095)
**Author:** [@shubham184](https://discuss.elastic.co/u/shubham184)\ **Replies:** 0\ **Last updated:** [June 24, 2022, 9:37am UTC](https://discuss.elastic.co/t/mutate-geopoint-copy-field/308095 "2022-06-24T09:37:21Z")
I need to convert 2 Fields (doc.geoLat and doc.geoLong) to geopoint datatype. I tried the following but it dosen't work Could you please show me where I might be making a mistake if \[type\] == \\"xxxxx\\" { … --- ## [Need-Help-On-elasticsearch in complex scenario](https://discuss.elastic.co/t/need-help-on-elasticsearch-in-complex-scenario/308074)
**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 8:54am UTC](https://discuss.elastic.co/t/need-help-on-elasticsearch-in-complex-scenario/308074 "2022-06-24T08:54:48Z")
Hi team, I need your help with a very complex scenario. We have a user management system, which has a user index, which stores various attributes of user, and a user action log index, which records what the user has don… --- ## [Is there away to get a random word/words from a document?](https://discuss.elastic.co/t/is-there-away-to-get-a-random-word-words-from-a-document/307470)
**Author:** [@Tasdiq\_Shaikh](https://discuss.elastic.co/u/Tasdiq_Shaikh)\ **Replies:** 3\ **Last updated:** [June 24, 2022, 8:37am UTC](https://discuss.elastic.co/t/is-there-away-to-get-a-random-word-words-from-a-document/307470 "2022-06-24T08:37:27Z")
I want to display some random words on the screen which are present in the document. I'm using Elasticsearch 7.12. --- ## [Elastic Stack 7.17.4 and 8.2.1 Security Update](https://discuss.elastic.co/t/elastic-stack-7-17-4-and-8-2-1-security-update/305530)
**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 4:55pm UTC](https://discuss.elastic.co/t/elastic-stack-7-17-4-and-8-2-1-security-update/305530 "2022-05-24T16:55:27Z")
Elastic Stack update for CVE-2022-21449 Java vulnerability in Elliptic Curve Digital Signature Algorithm (ECDSA) (ESA-2022-06) A vulnerability (CVE-2022-21449) affecting the implementation of Elliptic Curve Digital Sign… --- ## [Elastic Search Index Refresh Interval elastic.yaml file in Kubernetes](https://discuss.elastic.co/t/elastic-search-index-refresh-interval-elastic-yaml-file-in-kubernetes/308041)
**Author:** [@krishnav1](https://discuss.elastic.co/u/krishnav1)\ **Replies:** 1\ **Last updated:** [June 24, 2022, 7:58am UTC](https://discuss.elastic.co/t/elastic-search-index-refresh-interval-elastic-yaml-file-in-kubernetes/308041 "2022-06-24T07:58:43Z")
I am new to Elasticsearch. I have a 3 data node and 3 master node elastic cluster deployed in Kubernetes. It was working well until recently there is a large intake of data. Now, I am in a stage where I need to apply ind… --- ## [Where can I add actions to Auditbeat or Filebeat?](https://discuss.elastic.co/t/where-can-i-add-actions-to-auditbeat-or-filebeat/308081)
**Author:** [@Shadow\_CHN](https://discuss.elastic.co/u/Shadow_CHN)\ **Replies:** 0\ **Last updated:** [June 24, 2022, 6:52am UTC](https://discuss.elastic.co/t/where-can-i-add-actions-to-auditbeat-or-filebeat/308081 "2022-06-24T06:52:19Z")
If the contents of event.action that Auditbeat already provided me doesn't enough, or I want to add a field which means event.action for the logs Filebeat collected. How can I make this happen? Also I want to know how m… --- ## [Elasticsearch stopwords at query time](https://discuss.elastic.co/t/elasticsearch-stopwords-at-query-time/308084)
**Author:** [@theju0805](https://discuss.elastic.co/u/theju0805)\ **Replies:** 1\ **Last updated:** [June 24, 2022, 7:03am UTC](https://discuss.elastic.co/t/elasticsearch-stopwords-at-query-time/308084 "2022-06-24T07:03:59Z")
Hi , We are using Elasticsearch 7.10 which is an opensearch and we are trying to enable stopwords at search time, when the file gets updated. There is a stopword file in AWS s3 bucket and when stopword file has been mo… --- ## [Parse json in the filed message](https://discuss.elastic.co/t/parse-json-in-the-filed-message/308079)
**Author:** [@Rustam\_Kulnazarov](https://discuss.elastic.co/u/Rustam_Kulnazarov)\ **Replies:** 0\ **Last updated:** [June 24, 2022, 6:44am UTC](https://discuss.elastic.co/t/parse-json-in-the-filed-message/308079 "2022-06-24T06:44:24Z")
Hello everyone! Tell me please, how can I parse json in the field message, if the message has: 2022-06-24 12:35:53 # {json structure}\\n text text\\n text --- ## [FATAL Error: Unable to complete saved object migrations for the \[.kibana-7.17.1-ssl\] index: Unable to complete the UPDATE\_TARGET\_MAPPINGS\_WAIT\_FOR\_TASK step after 15 attempts, terminating](https://discuss.elastic.co/t/fatal-error-unable-to-complete-saved-object-migrations-for-the-kibana-7-17-1-ssl-index-unable-to-complete-the-update-target-mappings-wait-for-task-step-after-15-attempts-terminating/308076)
**Author:** [@nghia\_huynh](https://discuss.elastic.co/u/nghia_huynh)\ **Replies:** 0\ **Last updated:** [June 24, 2022, 5:24am UTC](https://discuss.elastic.co/t/fatal-error-unable-to-complete-saved-object-migrations-for-the-kibana-7-17-1-ssl-index-unable-to-complete-the-update-target-mappings-wait-for-task-step-after-15-attempts-terminating/308076 "2022-06-24T05:24:31Z")
Dear Team, I have an issue relative to restarting Kibana. Every time I have this issue, I have to delete the .kibana\* index and start again, but I don't want to delete the .kibana\* index because of data loss. Also, I d… --- ## [Fixed interval in date histogram error](https://discuss.elastic.co/t/fixed-interval-in-date-histogram-error/308071)
**Author:** [@yeylatte](https://discuss.elastic.co/u/yeylatte)\ **Replies:** 0\ **Last updated:** [June 24, 2022, 3:21am UTC](https://discuss.elastic.co/t/fixed-interval-in-date-histogram-error/308071 "2022-06-24T03:21:51Z")
Elasticsearch Version 7.17.4 Java Version 1.8.0 OS Version Linux Problem Description I use date\_histogram aggregation from Elasticsearch with fixed\_interval of 7d in time range from 2022-06-18 to 2022-07-01(14days… --- ## [Slow speed of ANN dense vector search using \_knn\_search](https://discuss.elastic.co/t/slow-speed-of-ann-dense-vector-search-using-knn-search/307448)
**Author:** [@jalustig](https://discuss.elastic.co/u/jalustig)\ **Replies:** 7\ **Last updated:** [June 24, 2022, 2:40am UTC](https://discuss.elastic.co/t/slow-speed-of-ann-dense-vector-search-using-knn-search/307448 "2022-06-24T02:40:03Z")
I'm building out a vector search application with 384 dimensional vectors. So far I have about 3 million documents in my Elasticsearch database using with a dense\_vector field. There are currently 8 shards (I am expectin… --- ## [Installing ece 2.13 1](https://discuss.elastic.co/t/installing-ece-2-13-1/308010)
**Author:** [@lcarr](https://discuss.elastic.co/u/lcarr)\ **Replies:** 3\ **Last updated:** [June 24, 2022, 1:58am UTC](https://discuss.elastic.co/t/installing-ece-2-13-1/308010 "2022-06-24T01:58:44Z")
Need to determine the required version of the srack for the standards deployments. Logging and Metrics etc [Previous page](https://discuss.elastic.co/latest.md?page=1073) [Next page](https://discuss.elastic.co/latest.md?page=1075)