# Latest **URL:** https://discuss.elastic.co/latest.md?page=1505 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1506 --- ## [Logs not show on Kibana](https://discuss.elastic.co/t/logs-not-show-on-kibana/282689)
**Author:** [@fcoulibaly](https://discuss.elastic.co/u/fcoulibaly)\ **Replies:** 0\ **Last updated:** [August 27, 2021, 4:22pm UTC](https://discuss.elastic.co/t/logs-not-show-on-kibana/282689 "2021-08-27T16:22:23Z")
can someone help me to write correct grok filter for the pattern: 2021.08.27-17:15:02 INFO\[172\] - start running on dev2 i used this code below but this not show any logs on Kibana else if \[fields\]\[hostgroup\] == "sols\_… --- ## [Logstash Grok pattern match issue](https://discuss.elastic.co/t/logstash-grok-pattern-match-issue/282584)
**Author:** [@ericilavia](https://discuss.elastic.co/u/ericilavia)\ **Replies:** 3\ **Last updated:** [August 27, 2021, 3:44pm UTC](https://discuss.elastic.co/t/logstash-grok-pattern-match-issue/282584 "2021-08-27T15:44:28Z")
Hello, I am facing an issue with parsing data using Logstash using Grok filter, below is the use-case There are two types of logs I am trying to parse, //Grok patterns Type1: 04-16 07:16:35,359\[ INFO\]:Except:Process… --- ## [Joining multiple document within same index with joining the key](https://discuss.elastic.co/t/joining-multiple-document-within-same-index-with-joining-the-key/282680)
**Author:** [@Cap\_Ho](https://discuss.elastic.co/u/Cap_Ho)\ **Replies:** 4\ **Last updated:** [August 27, 2021, 3:40pm UTC](https://discuss.elastic.co/t/joining-multiple-document-within-same-index-with-joining-the-key/282680 "2021-08-27T15:40:17Z")
Just have an question on query to join multiple document together. For example , i have the following 6 document into same index: { "\_id" : 1, "studentId" : "a11", "class" : "1A", "classNumber" : 11 }, { "\_id" :… --- ## [Is there any way to set number of shards for an Index's replica?(default is 1)](https://discuss.elastic.co/t/is-there-any-way-to-set-number-of-shards-for-an-indexs-replica-default-is-1/282606)
**Author:** [@iti](https://discuss.elastic.co/u/iti)\ **Replies:** 10\ **Last updated:** [August 27, 2021, 3:24pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-set-number-of-shards-for-an-indexs-replica-default-is-1/282606 "2021-08-27T15:24:26Z")
I am setting the index's shard to something other than 1. (Say 5). I was expecting to have 5 primary shards and 5 replica shards. But what I got is 5 primary shards and 1 replica shard. Is there anyway to set the shard … --- ## [Error watcher with multiple terms and a metric](https://discuss.elastic.co/t/error-watcher-with-multiple-terms-and-a-metric/282604)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 10\ **Last updated:** [August 27, 2021, 3:03pm UTC](https://discuss.elastic.co/t/error-watcher-with-multiple-terms-and-a-metric/282604 "2021-08-27T15:03:19Z")
Hello, good people. I have a problem with an alert, I get the following error: { "watch\_id": "\_inlined\_", "node": "ELuSGxpSRICZb2ZHJp4paA", "state": "failed", "user": "elastic", "status": { "state": { … --- ## [Filebeat fingerprint doesn't understand columns from csv files](https://discuss.elastic.co/t/filebeat-fingerprint-doesnt-understand-columns-from-csv-files/282427)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 4\ **Last updated:** [August 27, 2021, 2:44pm UTC](https://discuss.elastic.co/t/filebeat-fingerprint-doesnt-understand-columns-from-csv-files/282427 "2021-08-27T14:44:35Z")
Hi, I have a filebeat instance that sends event from CSV files to an ES cluster. The ingest pipeline has the relevant mappings and everything works fine. I'm trying to improve the pipeline for deduplication of event b… --- ## [How to run beats/machinebeat as a service](https://discuss.elastic.co/t/how-to-run-beats-machinebeat-as-a-service/282678)
**Author:** [@Valdos116](https://discuss.elastic.co/u/Valdos116)\ **Replies:** 0\ **Last updated:** [August 27, 2021, 2:30pm UTC](https://discuss.elastic.co/t/how-to-run-beats-machinebeat-as-a-service/282678 "2021-08-27T14:30:14Z")
I've machinebeat set up and running and I'm looking for a way to run it as a service. Any helps will be appreciated. Thanks, --- ## [Python parallel\_bulk, info says no errors, but nothing in index](https://discuss.elastic.co/t/python-parallel-bulk-info-says-no-errors-but-nothing-in-index/282611)
**Author:** [@dreic](https://discuss.elastic.co/u/dreic)\ **Replies:** 1\ **Last updated:** [August 27, 2021, 2:27pm UTC](https://discuss.elastic.co/t/python-parallel-bulk-info-says-no-errors-but-nothing-in-index/282611 "2021-08-27T14:27:11Z")
Here is the part of my python code. Took me a while to get this working without any errors as I didn't know what was the input structure function was accepting... Anyway here it is: docs = \[ { "Cr… --- ## [Filebeat unable to output logs to kafka](https://discuss.elastic.co/t/filebeat-unable-to-output-logs-to-kafka/278359)
**Author:** [@itsec](https://discuss.elastic.co/u/itsec)\ **Replies:** 5\ **Last updated:** [August 27, 2021, 2:00pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-output-logs-to-kafka/278359 "2021-08-27T14:00:24Z")
I had setup a 3 node clusters and my kafka / zookeeper are running i can create a topic and insert msg to the topic and read its output filebeat version 7.12.0 (amd64), libbeat 7.12.0 kafka 2.13-2.7.0 zookeeper 3.5.8 … --- ## [FileBeat loses 10 seconds of logs on rotation](https://discuss.elastic.co/t/filebeat-loses-10-seconds-of-logs-on-rotation/282227)
**Author:** [@jj12341](https://discuss.elastic.co/u/jj12341)\ **Replies:** 9\ **Last updated:** [August 27, 2021, 1:56pm UTC](https://discuss.elastic.co/t/filebeat-loses-10-seconds-of-logs-on-rotation/282227 "2021-08-27T13:56:52Z")
Hi! My FileBeat is losing 10 seconds of approximately logs. Obviously the problem is in the rotation of the files, but I can not find the correct option so that these logs are not lost. The Rotation of Logs performs Lo… --- ## [Stop words if present in query\_string query behaving different in elastic 6.2 and 7.5](https://discuss.elastic.co/t/stop-words-if-present-in-query-string-query-behaving-different-in-elastic-6-2-and-7-5/282675)
**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\ **Replies:** 0\ **Last updated:** [August 27, 2021, 1:39pm UTC](https://discuss.elastic.co/t/stop-words-if-present-in-query-string-query-behaving-different-in-elastic-6-2-and-7-5/282675 "2021-08-27T13:39:57Z")
I'm unable to understand why the below query is behaving differently in the two versions. { "query": { "bool": { "must": \[ { "query\_string": { "query": "(field1:\\"best\\"^300 AND… --- ## [Using Kibana Console API does not show more than 10 Entries](https://discuss.elastic.co/t/using-kibana-console-api-does-not-show-more-than-10-entries/282672)
**Author:** [@aeimbeck](https://discuss.elastic.co/u/aeimbeck)\ **Replies:** 0\ **Last updated:** [August 27, 2021, 1:29pm UTC](https://discuss.elastic.co/t/using-kibana-console-api-does-not-show-more-than-10-entries/282672 "2021-08-27T13:29:55Z")
Hello, I am trying to figure out how to increase the amount of entries the Kibana API returns when I am querying Elasticsearch via the API (I cannot access the Elastic from outside, so I need to use the Kibana API). I … --- ## [Term aggregation on all document](https://discuss.elastic.co/t/term-aggregation-on-all-document/282665)
**Author:** [@glefloch](https://discuss.elastic.co/u/glefloch)\ **Replies:** 0\ **Last updated:** [August 27, 2021, 12:23pm UTC](https://discuss.elastic.co/t/term-aggregation-on-all-document/282665 "2021-08-27T12:23:52Z")
Hi, I'm working with Elasticsearch and I would like to be able to do something like: Grouping documents into a bucket depending on a field Computing on an other field Using a percentile\_bucket aggregation to get the r… --- ## [Kibana vega lite concat views](https://discuss.elastic.co/t/kibana-vega-lite-concat-views/280282)
**Author:** [@MTV](https://discuss.elastic.co/u/MTV)\ **Replies:** 2\ **Last updated:** [August 24, 2021, 9:18am UTC](https://discuss.elastic.co/t/kibana-vega-lite-concat-views/280282 "2021-08-24T09:18:03Z")
Hi, I am starting to learn vega lite for building visualizations in kibana, and I need to use hconcat for displaying plots horizontally, however I am having issues with the autosize. If i set the autosize to 'none', the… --- ## [Logstash output http add param](https://discuss.elastic.co/t/logstash-output-http-add-param/282660)
**Author:** [@zhyp](https://discuss.elastic.co/u/zhyp)\ **Replies:** 0\ **Last updated:** [August 27, 2021, 10:36am UTC](https://discuss.elastic.co/t/logstash-output-http-add-param/282660 "2021-08-27T10:36:36Z")
Hi The following is my configuration. I want to add parameters, but there will be errors. output { stdout { codec =\> json } if(\[@metadata\]\[\_index\] == "need\_before\_load\_forecast") { http { url =\> "http://localhost… --- ## [Grok pattern - string parsed as original log format](https://discuss.elastic.co/t/grok-pattern-string-parsed-as-original-log-format/282656)
**Author:** [@Paintras](https://discuss.elastic.co/u/Paintras)\ **Replies:** 0\ **Last updated:** [August 27, 2021, 9:56am UTC](https://discuss.elastic.co/t/grok-pattern-string-parsed-as-original-log-format/282656 "2021-08-27T09:56:42Z")
Good day, So I have my log message field parsed as separe fields via ingest pipeline and grok processor, but only one of these field is parsed in log logstash format. Better explain it with specific example. This is my… --- ## [Trouble setting up kibana basic authentication](https://discuss.elastic.co/t/trouble-setting-up-kibana-basic-authentication/282578)
**Author:** [@PeterH32](https://discuss.elastic.co/u/PeterH32)\ **Replies:** 4\ **Last updated:** [August 27, 2021, 9:45am UTC](https://discuss.elastic.co/t/trouble-setting-up-kibana-basic-authentication/282578 "2021-08-27T09:45:01Z")
I'm trying to setup a simple elastic stack. I have kibana running and two elasticsearch nodes, which seems to be working fine. The elasticsearch nodes are setup with basic auth, however, I can't get the kibana part of i… --- ## [Logstash Monitoring](https://discuss.elastic.co/t/logstash-monitoring/282641)
**Author:** [@bpandit](https://discuss.elastic.co/u/bpandit)\ **Replies:** 0\ **Last updated:** [August 27, 2021, 8:32am UTC](https://discuss.elastic.co/t/logstash-monitoring/282641 "2021-08-27T08:32:40Z")
There are no index formed for while trying to monitor logstash using legacy settings, please help, below are the logs of logstash. \[2021-08-27T15:04:57,444\]\[INFO \]\[logstash.runner \] Log4j configuration path use… --- ## [Daisy chained logstash not recieving using TCP](https://discuss.elastic.co/t/daisy-chained-logstash-not-recieving-using-tcp/282599)
**Author:** [@Spencer\_Hazell](https://discuss.elastic.co/u/Spencer_Hazell)\ **Replies:** 3\ **Last updated:** [August 27, 2021, 7:29am UTC](https://discuss.elastic.co/t/daisy-chained-logstash-not-recieving-using-tcp/282599 "2021-08-27T07:29:53Z")
Hi there I have 3 logstash servers, daisy chained. First one has 2 outputs, 1 for ES and the other for 2nd Logstash. A tcpdump shows the 2nd Logstash is receiving data. The 2nd Logstash connects to the 3rd Logstash o… --- ## [Error in using EXEC filter for curl](https://discuss.elastic.co/t/error-in-using-exec-filter-for-curl/282459)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 5\ **Last updated:** [August 27, 2021, 7:27am UTC](https://discuss.elastic.co/t/error-in-using-exec-filter-for-curl/282459 "2021-08-27T07:27:35Z")
Hi All, We have a scenario where through curl we are getting some output, when tried the curl command directly we are getting the output. curl --location --request POST 'https://demo.cloud.ie/api/v2/analytics/conversat… --- ## [The rebalance tasks keeps going and not stop](https://discuss.elastic.co/t/the-rebalance-tasks-keeps-going-and-not-stop/282619)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 8\ **Last updated:** [August 27, 2021, 6:56am UTC](https://discuss.elastic.co/t/the-rebalance-tasks-keeps-going-and-not-stop/282619 "2021-08-27T06:56:20Z")
version ：7.10.2 i add a dataNode to cluster，and then the rebalance tasks started... but a week has passed，rebalance keeps going now and not only for new dataNode。 i found this situation exists for GET \_cat/recovery?v … --- ## [Парсинг поля “message” windows print](https://discuss.elastic.co/t/message-windows-print/282018)
**Author:** [@zhsv](https://discuss.elastic.co/u/zhsv)\ **Replies:** 4\ **Last updated:** [August 27, 2021, 6:16am UTC](https://discuss.elastic.co/t/message-windows-print/282018 "2021-08-27T06:16:24Z")
Добрый день! Прошу помочь разобрать лог печати из windows. За ранее извиняюсь, т.к. дуб дубом в grok \[2021-08-19T23:14:41,726\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[7a22c627e1accad82d7e582d6ff4b94f3fb25a00d65131… --- ## [Add a user to role-mapping](https://discuss.elastic.co/t/add-a-user-to-role-mapping/282552)
**Author:** [@lokeshv1989](https://discuss.elastic.co/u/lokeshv1989)\ **Replies:** 2\ **Last updated:** [August 27, 2021, 5:16am UTC](https://discuss.elastic.co/t/add-a-user-to-role-mapping/282552 "2021-08-27T05:16:53Z")
Hi All, We are trying to create user-role mapping using the open-distro api's. PATCH \_opendistro/\_security/api/rolesmapping/\ \[ { "op": "add", "path": "/users", "value": \["myuser"\] } \] But we are getting … --- ## [Logstash keystore value not detected in configuration processing](https://discuss.elastic.co/t/logstash-keystore-value-not-detected-in-configuration-processing/281904)
**Author:** [@ramilbermejo](https://discuss.elastic.co/u/ramilbermejo)\ **Replies:** 5\ **Last updated:** [August 27, 2021, 3:47am UTC](https://discuss.elastic.co/t/logstash-keystore-value-not-detected-in-configuration-processing/281904 "2021-08-27T03:47:29Z")
Hello Everyone, I'm trying keystore to store the password for elasticsearch but for some reason I've encountered this error during configuration test. # /usr/share/logstash/bin/logstash --path.settings /etc/logstash -t… --- ## [How to start with API's](https://discuss.elastic.co/t/how-to-start-with-apis/282511)
**Author:** [@uk642](https://discuss.elastic.co/u/uk642)\ **Replies:** 3\ **Last updated:** [August 27, 2021, 1:16am UTC](https://discuss.elastic.co/t/how-to-start-with-apis/282511 "2021-08-27T01:16:24Z")
I have installed Elastic search, logstash and kibana on localhost. I have uploaded sample data using logstash using a configuration file and I can view the data in Kibana dashboard. I want to create a search engine. How… --- ## [Error when trying to install fleet server (self-managed)](https://discuss.elastic.co/t/error-when-trying-to-install-fleet-server-self-managed/281370)
**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\ **Replies:** 2\ **Last updated:** [August 26, 2021, 6:58pm UTC](https://discuss.elastic.co/t/error-when-trying-to-install-fleet-server-self-managed/281370 "2021-08-26T18:58:28Z")
I'm having this error when trying to install the fleet server on a machine, I didn't find anything about the forums and troubleshooting guide, could someone help me? error: 'missing enrolllment api key' root@xxxx:/hom… --- ## [CSV Export for Kibana failing in case of non indexed fields](https://discuss.elastic.co/t/csv-export-for-kibana-failing-in-case-of-non-indexed-fields/281800)
**Author:** [@MitParekh](https://discuss.elastic.co/u/MitParekh)\ **Replies:** 3\ **Last updated:** [August 26, 2021, 6:20pm UTC](https://discuss.elastic.co/t/csv-export-for-kibana-failing-in-case-of-non-indexed-fields/281800 "2021-08-26T18:20:14Z")
Hi, I am trying to export a csv from kibana discover. It successfully gives me all the data in the csv when the fields selected are indexed. For the fields which are not indexed (i.e. enabled: false), it fails to genera… --- ## [Unable to login via anonymous](https://discuss.elastic.co/t/unable-to-login-via-anonymous/282587)
**Author:** [@selin](https://discuss.elastic.co/u/selin)\ **Replies:** 1\ **Last updated:** [August 26, 2021, 5:52pm UTC](https://discuss.elastic.co/t/unable-to-login-via-anonymous/282587 "2021-08-26T17:52:18Z")
I unable to login via anonymous. I am expecting to able view dashboard without login but admin should able to login. How can it be done? xpack.security.authc.providers: anonymous.anonymous1: order: 0 credentia… --- ## [Is it possible to have a visualization show up/populate only after a parameter in the controls panel is selected?](https://discuss.elastic.co/t/is-it-possible-to-have-a-visualization-show-up-populate-only-after-a-parameter-in-the-controls-panel-is-selected/282600)
**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\ **Replies:** 1\ **Last updated:** [August 26, 2021, 5:41pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-a-visualization-show-up-populate-only-after-a-parameter-in-the-controls-panel-is-selected/282600 "2021-08-26T17:41:03Z")
Is it possible to have a visualization show up/populate only after a parameter in the controls panel is selected? Can we make that parameter a required parameter? Thank you! --- ## [Kibana maps geo "Point to Point" lines arrow not show on maps](https://discuss.elastic.co/t/kibana-maps-geo-point-to-point-lines-arrow-not-show-on-maps/282514)
**Author:** [@Bo\_Pham\_Nguyen](https://discuss.elastic.co/u/Bo_Pham_Nguyen)\ **Replies:** 2\ **Last updated:** [August 26, 2021, 4:44pm UTC](https://discuss.elastic.co/t/kibana-maps-geo-point-to-point-lines-arrow-not-show-on-maps/282514 "2021-08-26T16:44:44Z")
Hi team, I have an index having source and destination IP fields as geo\_point. I can use Maps on Kibana with Document, but Point to Point line/arrows not show on Maps. I can see the response and geo\_point field works wel… [Previous page](https://discuss.elastic.co/latest.md?page=1504) [Next page](https://discuss.elastic.co/latest.md?page=1506)