# Latest **URL:** https://discuss.elastic.co/latest.md?page=1484 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1485 --- ## [Logstash filter plugin](https://discuss.elastic.co/t/logstash-filter-plugin/283847)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 1\ **Last updated:** [September 10, 2021, 2:12pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin/283847 "2021-09-10T14:12:20Z")
I am using Logstash version 7.14.0. I would like to parse message to the top level of message. So this is my configuration: json { skip\_on\_invalid\_json =\> true source =\> "message" t… --- ## [Manipulating kibana url to display data in kibana](https://discuss.elastic.co/t/manipulating-kibana-url-to-display-data-in-kibana/283810)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 1\ **Last updated:** [September 10, 2021, 2:01pm UTC](https://discuss.elastic.co/t/manipulating-kibana-url-to-display-data-in-kibana/283810 "2021-09-10T14:01:19Z")
Hello, I'm working on a project that utilizes kibana , we have users that would be parsing logs at different times of different machines. I wanted to know if there's an efficient way to know that a data viz belongs to… --- ## [Error restoring state from URL when Opening Dashboard in a new tab](https://discuss.elastic.co/t/error-restoring-state-from-url-when-opening-dashboard-in-a-new-tab/283812)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [September 10, 2021, 1:24pm UTC](https://discuss.elastic.co/t/error-restoring-state-from-url-when-opening-dashboard-in-a-new-tab/283812 "2021-09-10T13:24:00Z")
Hello, Since I updated to 7.14.1, i often get an error "Error restoring state from URL" when Opening Dashboard in a new tab. Go to Dashboards, right-click one and select "Open link in a new tab" Is this a known issu… --- ## [Multi tenancy drawbacks](https://discuss.elastic.co/t/multi-tenancy-drawbacks/283766)
**Author:** [@BentoumiTech](https://discuss.elastic.co/u/BentoumiTech)\ **Replies:** 2\ **Last updated:** [September 10, 2021, 1:12pm UTC](https://discuss.elastic.co/t/multi-tenancy-drawbacks/283766 "2021-09-10T13:12:02Z")
Hello, I'm currently using ElasticSearch and storing all the data in one index for all my users. The data sent by each user is by nature different for each user which makes my index fields number growing rapidly and ex… --- ## [\[rally\] Could not connect to your Elasticsearch metrics store](https://discuss.elastic.co/t/rally-could-not-connect-to-your-elasticsearch-metrics-store/283762)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 8\ **Last updated:** [September 10, 2021, 12:43pm UTC](https://discuss.elastic.co/t/rally-could-not-connect-to-your-elasticsearch-metrics-store/283762 "2021-09-10T12:43:39Z")
In long: Hey, I am trying to do a benchmark test against a cluster. The cluster in question contains 3 nodes in virtualbox, with no ssl restriction or authentication (fully for test). Then I have another cluster hosted … --- ## [\["error","savedobjects-service"\],"pid":1214,"message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 192.168.208.2:9200"}](https://discuss.elastic.co/t/error-savedobjects-service-pid-1214-message-unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-192-168-208-2-9200/283867)
**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\ **Replies:** 0\ **Last updated:** [September 10, 2021, 11:51am UTC](https://discuss.elastic.co/t/error-savedobjects-service-pid-1214-message-unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-192-168-208-2-9200/283867 "2021-09-10T11:51:32Z")
Error in log: \["error","savedobjects-service"\],"pid":1214,"message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 192.168.208.2:9200"} {"type":"log","@timestamp":"2021-09-10T11:5… --- ## [Lerna output json](https://discuss.elastic.co/t/lerna-output-json/283854)
**Author:** [@cskiwi](https://discuss.elastic.co/u/cskiwi)\ **Replies:** 2\ **Last updated:** [September 10, 2021, 9:41am UTC](https://discuss.elastic.co/t/lerna-output-json/283854 "2021-09-10T09:41:11Z")
Hi, I'm trying to setup my logging, for my application, but this is running via lerna. Which means it outputs first the package name and then the log Which makes the output look like this: info cli using local versio… --- ## [Filebeat 7.9+ Registry Format](https://discuss.elastic.co/t/filebeat-7-9-registry-format/283843)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 2\ **Last updated:** [September 10, 2021, 11:23am UTC](https://discuss.elastic.co/t/filebeat-7-9-registry-format/283843 "2021-09-10T11:23:24Z")
I run a script that checks the status of processing by comparing the file offset in the registry log.json to the byte size on the OS. The offset is generally saved in two places: log.json -\> multiple lines /d/d/d/d/d/… --- ## [Kibana elasticsearch monitoring not showing indices](https://discuss.elastic.co/t/kibana-elasticsearch-monitoring-not-showing-indices/282718)
**Author:** [@Moadh](https://discuss.elastic.co/u/Moadh)\ **Replies:** 1\ **Last updated:** [September 10, 2021, 10:29am UTC](https://discuss.elastic.co/t/kibana-elasticsearch-monitoring-not-showing-indices/282718 "2021-09-10T10:29:13Z")
Hi, I have a Kibana instance (7.9.2) configured on a cluster dedicated to monitoring and logs data. I also have a second elasticsearch cluster for data on version 7.9.2 and all the monitoring and logs data are configur… --- ## [Make Data Table Field with URL Clickable](https://discuss.elastic.co/t/make-data-table-field-with-url-clickable/283861)
**Author:** [@Gosborne](https://discuss.elastic.co/u/Gosborne)\ **Replies:** 1\ **Last updated:** [September 10, 2021, 10:24am UTC](https://discuss.elastic.co/t/make-data-table-field-with-url-clickable/283861 "2021-09-10T10:24:00Z")
Good Morning, I have a field in my data that is a URL and I'm trying to get it so that in my Dashboard i can click on the URL field in a data table and have it go to that page. I have found some posts about formatting … --- ## [How to do source to "multi target" translate in logstash?](https://discuss.elastic.co/t/how-to-do-source-to-multi-target-translate-in-logstash/283623)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [September 10, 2021, 10:23am UTC](https://discuss.elastic.co/t/how-to-do-source-to-multi-target-translate-in-logstash/283623 "2021-09-10T10:23:10Z")
We have got a CSV lookup as follows EmpID,EmpName,EmpSalary,EmpDepartment 1001,Bob,10000,XX 1002,Joe,20000,YY 1003,Foo,30000,ZZ and in Logstash, we need to translate the EmpID to both EmpName & EmpSalary at the same ti… --- ## [Logstash + Telegraf](https://discuss.elastic.co/t/logstash-telegraf/283860)
**Author:** [@hassen\_k](https://discuss.elastic.co/u/hassen_k)\ **Replies:** 0\ **Last updated:** [September 10, 2021, 10:10am UTC](https://discuss.elastic.co/t/logstash-telegraf/283860 "2021-09-10T10:10:23Z")
Hi, I use Logstash to read a Kafka topic and to send the events to Influxdb. The events in the Kafka topic are sent by Telegraf. Here are a example of events received from Kafka : { "message" =\> "disk,all\_serve… --- ## [Creating an array of values via ruby on logstash config](https://discuss.elastic.co/t/creating-an-array-of-values-via-ruby-on-logstash-config/283649)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 4\ **Last updated:** [September 10, 2021, 9:51am UTC](https://discuss.elastic.co/t/creating-an-array-of-values-via-ruby-on-logstash-config/283649 "2021-09-10T09:51:04Z")
Hello, Im trying to get the cpu core values in a single array on my logstash config . I'm not familiar with ruby code, however based on my very limited understanding i was able to do this . It has the cpu core values , … --- ## [Multilevel aggregation does not show correct results as compare to total hits](https://discuss.elastic.co/t/multilevel-aggregation-does-not-show-correct-results-as-compare-to-total-hits/283760)
**Author:** [@Khurram\_Fraz](https://discuss.elastic.co/u/Khurram_Fraz)\ **Replies:** 7\ **Last updated:** [September 10, 2021, 9:27am UTC](https://discuss.elastic.co/t/multilevel-aggregation-does-not-show-correct-results-as-compare-to-total-hits/283760 "2021-09-10T09:27:56Z")
Hi I am facing issue in aggregation withing aggregation as results count does not match with total hits, but when I search aggregation on single record without second level aggregation then shows correct counts. I have… --- ## [Metricbeat - filesystem How does metricbeat decide what filesystems to monitor?](https://discuss.elastic.co/t/metricbeat-filesystem-how-does-metricbeat-decide-what-filesystems-to-monitor/283828)
**Author:** [@Newbie2019](https://discuss.elastic.co/u/Newbie2019)\ **Replies:** 1\ **Last updated:** [September 10, 2021, 9:27am UTC](https://discuss.elastic.co/t/metricbeat-filesystem-how-does-metricbeat-decide-what-filesystems-to-monitor/283828 "2021-09-10T09:27:53Z")
I have a question, how does metricbeat decide what filesystems it will monitor? I configured the system module, made sure that metricsets filesystem was added, made sure no FS were being ignored, but I still could not s… --- ## [Generate CSV log file automatically from kibana -\> discover -\>share](https://discuss.elastic.co/t/generate-csv-log-file-automatically-from-kibana-discover-share/283160)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 1\ **Last updated:** [September 10, 2021, 8:16am UTC](https://discuss.elastic.co/t/generate-csv-log-file-automatically-from-kibana-discover-share/283160 "2021-09-10T08:16:00Z")
Hello Team, How to automatically download CSV report from Kibana -\> discover -\> share -\> CSV reports -\> Geerate csv (either shell script or any automation script) Regards, Suresh --- ## [Kibana filter window](https://discuss.elastic.co/t/kibana-filter-window/283522)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 12\ **Last updated:** [September 10, 2021, 7:48am UTC](https://discuss.elastic.co/t/kibana-filter-window/283522 "2021-09-10T07:48:32Z")
Hi, In kibana (currently 7.14.1) we often use the filter window when working on the 'discover' pages. One chooses the concerning field, the operator and then in the past in the past the value field had a dropdown whi… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/283826)
**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\ **Replies:** 4\ **Last updated:** [September 10, 2021, 7:34am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/283826 "2021-09-10T07:34:44Z")
I use this script for generating kibana and elastic with docker version: "2" services: zookeeper: image: wurstmeister/zookeeper:3.4.6 ports: - "2181:2181" kafka: image: wurstmeister/kafka … --- ## [Action \[indices:admin/auto\_create\] is unauthorized for API key id \[####\] of user \[elastic/fleet-server\] on indices \[metricbeat-7.14.1-2021.09.08\], this action is granted by the index privileges \[auto\_configure,create\_index,manage,all\]](https://discuss.elastic.co/t/action-indices-admin-auto-create-is-unauthorized-for-api-key-id-of-user-elastic-fleet-server-on-indices-metricbeat-7-14-1-2021-09-08-this-action-is-granted-by-the-index-privileges-auto-configure-create-index-manage-all/283608)
**Author:** [@hamiland](https://discuss.elastic.co/u/hamiland)\ **Replies:** 29\ **Last updated:** [September 10, 2021, 7:16am UTC](https://discuss.elastic.co/t/action-indices-admin-auto-create-is-unauthorized-for-api-key-id-of-user-elastic-fleet-server-on-indices-metricbeat-7-14-1-2021-09-08-this-action-is-granted-by-the-index-privileges-auto-configure-create-index-manage-all/283608 "2021-09-10T07:16:16Z")
Hi All, I'm a bit green in the Elastic world so please bear with me. I have Fleet agents deployed to our Windows hosts, however I am having issues when Either "Collect Windows perfmon and service metrics" in the Window… --- ## [Logstash 7.11 ruby filter error](https://discuss.elastic.co/t/logstash-7-11-ruby-filter-error/283844)
**Author:** [@shharukh](https://discuss.elastic.co/u/shharukh)\ **Replies:** 0\ **Last updated:** [September 10, 2021, 7:09am UTC](https://discuss.elastic.co/t/logstash-7-11-ruby-filter-error/283844 "2021-09-10T07:09:51Z")
Hello World, I wanted to add 5 hours in my datetime through logstash. have found a way in logstash 6.4. ruby { code =\> 'event.set("@timestamp", LogStash::Timestamp.new(Time.at(event.get("@timestamp").to\_f+86400)))' … --- ## [Running up Cluster in Docker with TLS on a Mac - Issues](https://discuss.elastic.co/t/running-up-cluster-in-docker-with-tls-on-a-mac-issues/283748)
**Author:** [@neil6323](https://discuss.elastic.co/u/neil6323)\ **Replies:** 1\ **Last updated:** [September 10, 2021, 6:27am UTC](https://discuss.elastic.co/t/running-up-cluster-in-docker-with-tls-on-a-mac-issues/283748 "2021-09-10T06:27:03Z")
I'm trying to run up an ES cluster which has TLS using Docker on a Mac. I'm using the instructions given in https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html Versions are all latest available. … --- ## [Kibana showing "invalid Zlib data" after upgrading to 7.14](https://discuss.elastic.co/t/kibana-showing-invalid-zlib-data-after-upgrading-to-7-14/282699)
**Author:** [@lorax](https://discuss.elastic.co/u/lorax)\ **Replies:** 3\ **Last updated:** [September 10, 2021, 5:46am UTC](https://discuss.elastic.co/t/kibana-showing-invalid-zlib-data-after-upgrading-to-7-14/282699 "2021-09-10T05:46:12Z")
I have an elastic server as. an "all-in-one" with filebeat-\>Logstash-\>Elastic flow. I use Cerebro to check status. The data was visible and working well prior to upgrading to 7.14, but afterward I see Elastic is working… --- ## [Kibana slowness and random errors](https://discuss.elastic.co/t/kibana-slowness-and-random-errors/283444)
**Author:** [@mitesh.gangaramani](https://discuss.elastic.co/u/mitesh.gangaramani)\ **Replies:** 5\ **Last updated:** [September 10, 2021, 5:15am UTC](https://discuss.elastic.co/t/kibana-slowness-and-random-errors/283444 "2021-09-10T05:15:01Z")
Hello Experts, Kibana becomes too slow sometimes and keep loading. Also, I want to know if the current elasticsearch setup is correct or not as sometimes it shows spikes in CPU and RAM and stop logs from some nodes. Se… --- ## [Warm data nodes receiving documents without warm data ILM](https://discuss.elastic.co/t/warm-data-nodes-receiving-documents-without-warm-data-ilm/283486)
**Author:** [@Derick\_Jansen](https://discuss.elastic.co/u/Derick_Jansen)\ **Replies:** 9\ **Last updated:** [September 10, 2021, 4:38am UTC](https://discuss.elastic.co/t/warm-data-nodes-receiving-documents-without-warm-data-ilm/283486 "2021-09-10T04:38:58Z")
Today I added 2 warm data nodes to our 3 node cluster. This is the first time we are using anything besides hot nodes so I have some observations and questions. The 3 hot data nodes have roles as below "roles" : \[… --- ## [Почему Эластик не выводит документы, в которых другой падеж](https://discuss.elastic.co/t/topic/283759)
**Author:** [@SkaaRJ](https://discuss.elastic.co/u/SkaaRJ)\ **Replies:** 2\ **Last updated:** [September 10, 2021, 3:47am UTC](https://discuss.elastic.co/t/topic/283759 "2021-09-10T03:47:48Z")
У меня на интересующие поля привязан плагин русской морфологии. Маппинги на индекс выглядят следующим образом: PUT reg-document { "settings" : { "index" : { "analysis" : { "filter" : { … --- ## [Create alert for notification if using free version](https://discuss.elastic.co/t/create-alert-for-notification-if-using-free-version/283764)
**Author:** [@afan](https://discuss.elastic.co/u/afan)\ **Replies:** 4\ **Last updated:** [September 10, 2021, 2:12am UTC](https://discuss.elastic.co/t/create-alert-for-notification-if-using-free-version/283764 "2021-09-10T02:12:47Z")
Just wondering if we could setup alerts for mail notification if using FREE VERSION please? When I am trying to setup such alerts under Metrics from Observability, looks like it has been restricted to do such action as … --- ## [Unable to install composable template from the logstash.outputs.elasticsearch plugin](https://discuss.elastic.co/t/unable-to-install-composable-template-from-the-logstash-outputs-elasticsearch-plugin/283835)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 0\ **Last updated:** [September 10, 2021, 1:39am UTC](https://discuss.elastic.co/t/unable-to-install-composable-template-from-the-logstash-outputs-elasticsearch-plugin/283835 "2021-09-10T01:39:45Z")
When I try to load a composable template from the logstash into the elasticsearch using the logstash output elasticsearch plugin, I get the error Failed to install template. {:message=\>"Got response code '400' contactin… --- ## [关于多层nested 嵌套查询(多规格商品查询),数据查询要怎么做](https://discuss.elastic.co/t/nested/281930)
**Author:** [@XuShall](https://discuss.elastic.co/u/XuShall)\ **Replies:** 4\ **Last updated:** [September 10, 2021, 1:07am UTC](https://discuss.elastic.co/t/nested/281930 "2021-09-10T01:07:30Z")
关于多层nested 嵌套查询(多规格商品查询),数据查询要怎么做 结构 PUT goods { "mappings": { "properties": { "spu\_id": { "type": "integer" }, "title": { "type": "text", "analyzer": "ik\_smart" }, "sub\_title": { "typ… --- ## [Working with key:value arrays](https://discuss.elastic.co/t/working-with-key-value-arrays/283772)
**Author:** [@awer1967](https://discuss.elastic.co/u/awer1967)\ **Replies:** 4\ **Last updated:** [September 10, 2021, 1:06am UTC](https://discuss.elastic.co/t/working-with-key-value-arrays/283772 "2021-09-10T01:06:04Z")
Good day ! Accordingly to my logstash configuration I get a message with an array consists of key:value pairs. I have to mutate it on a very special way adding two fields and put there the key and the value . For examp… --- ## [Miscellaneous Questions on the back of Ricardo's all you want too know about filebeat](https://discuss.elastic.co/t/miscellaneous-questions-on-the-back-of-ricardos-all-you-want-too-know-about-filebeat/283528)
**Author:** [@George\_Leonard](https://discuss.elastic.co/u/George_Leonard)\ **Replies:** 7\ **Last updated:** [September 10, 2021, 12:44am UTC](https://discuss.elastic.co/t/miscellaneous-questions-on-the-back-of-ricardos-all-you-want-too-know-about-filebeat/283528 "2021-09-10T00:44:15Z")
As I was working through Ricardo's Youtube video I ended with the below below question, I posted them in the Video comment section but thinking might get more traction reposting here. I'm a total noob wrt EK still, and … [Previous page](https://discuss.elastic.co/latest.md?page=1483) [Next page](https://discuss.elastic.co/latest.md?page=1485)