# Latest **URL:** https://discuss.elastic.co/latest.md?page=1562 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1563 --- ## [Logstash Filter incoming data](https://discuss.elastic.co/t/logstash-filter-incoming-data/279248)
**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\ **Replies:** 7\ **Last updated:** [July 21, 2021, 5:21pm UTC](https://discuss.elastic.co/t/logstash-filter-incoming-data/279248 "2021-07-21T17:21:27Z")
Hello Everyone, I hope you are all doing well. I am sorry to come here with this question but I could really use some experts help to solve an issue I am facing with Logstash. I will explain my situation as in detail a… --- ## [Elasticsearch Query Error : Unknown key for a START\_OBJECT in \[range\]](https://discuss.elastic.co/t/elasticsearch-query-error-unknown-key-for-a-start-object-in-range/279290)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 0\ **Last updated:** [July 21, 2021, 5:15pm UTC](https://discuss.elastic.co/t/elasticsearch-query-error-unknown-key-for-a-start-object-in-range/279290 "2021-07-21T17:15:05Z")
I am trying to fetch the last 24 hour data by the following query. while running this queries individually, it works perfect, but when combined it gives the following error : Query: { "size": 0, "aggs": { "perc… --- ## [Geogip data problem](https://discuss.elastic.co/t/geogip-data-problem/279280)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 2\ **Last updated:** [July 21, 2021, 4:56pm UTC](https://discuss.elastic.co/t/geogip-data-problem/279280 "2021-07-21T16:56:15Z")
Hi evreyone, I'am using the geoip filter to get the map value of an ip geoip {source =\> "NATDestinationIP" } It works, it create all type geoip (latitude and longitude.....) but when I look these value on kibana the… --- ## [\[FS-Repository\] Path is not accessible on master node](https://discuss.elastic.co/t/fs-repository-path-is-not-accessible-on-master-node/278219)
**Author:** [@Jonatha](https://discuss.elastic.co/u/Jonatha)\ **Replies:** 1\ **Last updated:** [July 9, 2021, 1:16am UTC](https://discuss.elastic.co/t/fs-repository-path-is-not-accessible-on-master-node/278219 "2021-07-09T01:16:26Z")
I tried to config a repository to save snapshot, but show this error: PUT \_snapshot/bkp-test { "type": "fs", "settings": { "location": "/media/test" } } { "error" : { "root\_cause" : \[ { "type" : "… --- ## [Import CSV data to Elastic search but \_source missing](https://discuss.elastic.co/t/import-csv-data-to-elastic-search-but-source-missing/279233)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 10\ **Last updated:** [July 21, 2021, 4:53pm UTC](https://discuss.elastic.co/t/import-csv-data-to-elastic-search-but-source-missing/279233 "2021-07-21T16:53:35Z")
Kibana version : 7.13 Elasticsearch version : 7.13 APM Server version : 7.13 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se… --- ## [Logstash for finding combination of numbers](https://discuss.elastic.co/t/logstash-for-finding-combination-of-numbers/279207)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 3\ **Last updated:** [July 21, 2021, 4:50pm UTC](https://discuss.elastic.co/t/logstash-for-finding-combination-of-numbers/279207 "2021-07-21T16:50:53Z")
Hello, I'm looking for a way to write logstash code for a combination of numbers for a project , example if the input is 5 , the output needs to say 1 + 4 , where 1 means "service stopped" and 4 says "inactive" . I … --- ## [Multiple Blocklists?](https://discuss.elastic.co/t/multiple-blocklists/279196)
**Author:** [@BionicSecurityMgr](https://discuss.elastic.co/u/BionicSecurityMgr)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 4:48pm UTC](https://discuss.elastic.co/t/multiple-blocklists/279196 "2021-07-21T16:48:06Z")
Is there any way to use multiple block lists? I'm thinking of a situation where we can have different Block Lists for different groups of assets without the need to use multiple Endpoint servers. We had a bad hash cause… --- ## [Configuration Comparison and Reporting options](https://discuss.elastic.co/t/configuration-comparison-and-reporting-options/279195)
**Author:** [@BionicSecurityMgr](https://discuss.elastic.co/u/BionicSecurityMgr)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 4:41pm UTC](https://discuss.elastic.co/t/configuration-comparison-and-reporting-options/279195 "2021-07-21T16:41:20Z")
New to EndGame aka Elastic Endpoint Security (EES). Inherited an on-premise stack. Question - does EES include a policy comparison or export function? My intention is to quickly compare policies by comparing the options… --- ## [Shards per node, Heap, 100% CPU....help please](https://discuss.elastic.co/t/shards-per-node-heap-100-cpu-help-please/279109)
**Author:** [@kk123](https://discuss.elastic.co/u/kk123)\ **Replies:** 4\ **Last updated:** [July 21, 2021, 4:24pm UTC](https://discuss.elastic.co/t/shards-per-node-heap-100-cpu-help-please/279109 "2021-07-21T16:24:06Z")
Hi, I have a 2 node cluster with 1500 indices. Indices persist over time. This was set up by a third party... but now I am having the problem that the master node becomes unresponsive (100% CPU) and the only way to reco… --- ## [Where to see all the executed queries ran against my ES](https://discuss.elastic.co/t/where-to-see-all-the-executed-queries-ran-against-my-es/279235)
**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\ **Replies:** 3\ **Last updated:** [July 21, 2021, 3:58pm UTC](https://discuss.elastic.co/t/where-to-see-all-the-executed-queries-ran-against-my-es/279235 "2021-07-21T15:58:01Z")
Hello all, Where can I see all the queries ran against my elastic search cluster. Thanks --- ## [No Uptime Monitors found](https://discuss.elastic.co/t/no-uptime-monitors-found/279046)
**Author:** [@Sam\_Sak1](https://discuss.elastic.co/u/Sam_Sak1)\ **Replies:** 8\ **Last updated:** [July 21, 2021, 3:44pm UTC](https://discuss.elastic.co/t/no-uptime-monitors-found/279046 "2021-07-21T15:44:14Z")
Hello! After installing a heartbeat-elastic, I'm not able to see endpoints under "Monitors" in Uptime page. The everything what it show is "No Uptime Monitors found", even though it shows data in "Pings over time" and i… --- ## [Filter to include if value is null or doesn't exist](https://discuss.elastic.co/t/filter-to-include-if-value-is-null-or-doesnt-exist/279203)
**Author:** [@mbrimmer83](https://discuss.elastic.co/u/mbrimmer83)\ **Replies:** 2\ **Last updated:** [July 21, 2021, 3:21pm UTC](https://discuss.elastic.co/t/filter-to-include-if-value-is-null-or-doesnt-exist/279203 "2021-07-21T15:21:53Z")
I want to filter the document if the field is null or empty. I haven't found a way to do this in AppSearch and don't see it mentioned in the docs. Is there a way to accomplish this? Does AppSearch use the Elastic null\_va… --- ## [Import CSV with json data](https://discuss.elastic.co/t/import-csv-with-json-data/279226)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 3\ **Last updated:** [July 21, 2021, 3:13pm UTC](https://discuss.elastic.co/t/import-csv-with-json-data/279226 "2021-07-21T15:13:37Z")
Kibana version : 7.13 Elasticsearch version : 7.13 APM Server version : 7.13 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se… --- ## [Issues creating Index patterns in Kibana](https://discuss.elastic.co/t/issues-creating-index-patterns-in-kibana/278725)
**Author:** [@mikeg123](https://discuss.elastic.co/u/mikeg123)\ **Replies:** 11\ **Last updated:** [July 21, 2021, 3:13pm UTC](https://discuss.elastic.co/t/issues-creating-index-patterns-in-kibana/278725 "2021-07-21T15:13:29Z")
Hello, I've created a new index and index pattern in filebeat.yml file and send data to Elastic search running in aws container. when I go to Kibana I can see the new index getting created under 'Index Management', but… --- ## [Fail to enroll: fail to execute request to Kibana: Status code: 404, Kibana returned an error: Not Found, message: Not Found](https://discuss.elastic.co/t/fail-to-enroll-fail-to-execute-request-to-kibana-status-code-404-kibana-returned-an-error-not-found-message-not-found/278720)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 4\ **Last updated:** [July 21, 2021, 3:05pm UTC](https://discuss.elastic.co/t/fail-to-enroll-fail-to-execute-request-to-kibana-status-code-404-kibana-returned-an-error-not-found-message-not-found/278720 "2021-07-21T15:05:51Z")
when i execute " .\\elastic-agent.exe install -f --url=https://xx.xx.xxx.xxx:5601 --enrollment-token=Q0REZW9Ib...== --insecure" this message appears 2021-07-14T18:47:12.757-0300 DEBUG kibana/client.go:170 Re… --- ## [Connecting UiPath to Elastic](https://discuss.elastic.co/t/connecting-uipath-to-elastic/278288)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 3:03pm UTC](https://discuss.elastic.co/t/connecting-uipath-to-elastic/278288 "2021-07-21T15:03:22Z")
Hi, I've been struggling for a while now trying to connect UiPath/Orchestrator to Elastic. On their documentation they explicitly say that it's possible to output logs to Elastic. Unfortunately i still did not managed … --- ## [Compile Errors - Using Painless](https://discuss.elastic.co/t/compile-errors-using-painless/279265)
**Author:** [@dshonubi](https://discuss.elastic.co/u/dshonubi)\ **Replies:** 2\ **Last updated:** [July 21, 2021, 3:03pm UTC](https://discuss.elastic.co/t/compile-errors-using-painless/279265 "2021-07-21T15:03:18Z")
I keep getting this error of a script exception, but I'm not sure what the root cause is. \[script\_exception\] compile error, with { script\_stack={ 0="... tx.payload.aggregations.4XXerror.buckets.size(); i ..." & 1=" ^---… --- ## [Lock certain dashboard and saved searches](https://discuss.elastic.co/t/lock-certain-dashboard-and-saved-searches/279276)
**Author:** [@Saeed\_Ektesabi1](https://discuss.elastic.co/u/Saeed_Ektesabi1)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 2:40pm UTC](https://discuss.elastic.co/t/lock-certain-dashboard-and-saved-searches/279276 "2021-07-21T14:40:54Z")
Hello, I have a Kibana environment in which I have created several dashboards and saved searches. My Kibana also has several users which they can create their own dashboards or saved search. Is there a way for me to "… --- ## [Filebeat exclude\_lines](https://discuss.elastic.co/t/filebeat-exclude-lines/276892)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 3\ **Last updated:** [July 21, 2021, 2:37pm UTC](https://discuss.elastic.co/t/filebeat-exclude-lines/276892 "2021-07-21T14:37:45Z")
Hi evreyone, I wanted to use exclude\_lines to exlude all line of a file exept the first one. (I want only the name of the file and his path i don't need his message). filebeat.inputs: - type: log enabled: true #clo… --- ## [Forcing an index to rolleout to warm phase](https://discuss.elastic.co/t/forcing-an-index-to-rolleout-to-warm-phase/279258)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 4\ **Last updated:** [July 21, 2021, 2:23pm UTC](https://discuss.elastic.co/t/forcing-an-index-to-rolleout-to-warm-phase/279258 "2021-07-21T14:23:21Z")
Hello, I have an index which is 4.2GB large and at the moment I have upgraded the filebeat a new index was created. Now the ILM rolleout settings is for 10G therefore this index will never meet the threshold required for… --- ## [How to strip events from message field? Logstash syslog](https://discuss.elastic.co/t/how-to-strip-events-from-message-field-logstash-syslog/279110)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 7\ **Last updated:** [July 21, 2021, 2:21pm UTC](https://discuss.elastic.co/t/how-to-strip-events-from-message-field-logstash-syslog/279110 "2021-07-21T14:21:08Z")
hello guys, i'm trying to send logs from a syslog-ng server to logstash and logstash to elasticsearch, but all events are coming in the message field. Is it possible to separate these events to create a new field for eac… --- ## [Filtering, sorting and paginate nested object list](https://discuss.elastic.co/t/filtering-sorting-and-paginate-nested-object-list/279078)
**Author:** [@nickcigna](https://discuss.elastic.co/u/nickcigna)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 2:20pm UTC](https://discuss.elastic.co/t/filtering-sorting-and-paginate-nested-object-list/279078 "2021-07-21T14:20:02Z")
Hello everybody, I have an index that contains documents with the following structure. ///SHOWS INDEX { "\_id", "artists":\[ -----\> NESTED OBJECT LIST { "id": "1", "name": "text" }, { "id": "2", "… --- ## [How to create a text box in a visualization in kibana vega](https://discuss.elastic.co/t/how-to-create-a-text-box-in-a-visualization-in-kibana-vega/277256)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 2\ **Last updated:** [July 21, 2021, 2:10pm UTC](https://discuss.elastic.co/t/how-to-create-a-text-box-in-a-visualization-in-kibana-vega/277256 "2021-07-21T14:10:07Z")
Hello, I have a visualization in kibana - vega, I already made a graph, but now I want to add a text below the "Estado" bar, I do not know if there is the possibility of putting some text there already having a graph, I … --- ## [Multiple field names into single field name in elasticsearch](https://discuss.elastic.co/t/multiple-field-names-into-single-field-name-in-elasticsearch/279237)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 2:05pm UTC](https://discuss.elastic.co/t/multiple-field-names-into-single-field-name-in-elasticsearch/279237 "2021-07-21T14:05:29Z")
Hi all, I'm working on a project where we need to a field to read multiple field names as same field name. Is there a way where we can configure multiple field names into one field using some method? For example, we h… --- ## [Elasticsearch ingest pipeline - not extract data passed from filebeat](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-not-extract-data-passed-from-filebeat/279039)
**Author:** [@samiusan](https://discuss.elastic.co/u/samiusan)\ **Replies:** 12\ **Last updated:** [July 21, 2021, 1:55pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-not-extract-data-passed-from-filebeat/279039 "2021-07-21T13:55:19Z")
Hi, I'm slowly teaching myself the Elastic stack. Current project is attempting to ingest and modelling alerts from snort3 against the elastic common schema. I've run into an issue where an ingest pipeline is not correc… --- ## [Filebeat send log to kafka with haproxy module](https://discuss.elastic.co/t/filebeat-send-log-to-kafka-with-haproxy-module/279141)
**Author:** [@Andrey4ik85](https://discuss.elastic.co/u/Andrey4ik85)\ **Replies:** 6\ **Last updated:** [July 21, 2021, 1:49pm UTC](https://discuss.elastic.co/t/filebeat-send-log-to-kafka-with-haproxy-module/279141 "2021-07-21T13:49:13Z")
Hello! I am currently experiencing a problem to load haproxy module to parse logs and send it to my kafka servers. The system module has been enabled and verified using "filebeat modules list" filebeat version 7.13.3 … --- ## [Auditbeat ERROR instance/beat.go:971 Exiting: one or more modules must be configured](https://discuss.elastic.co/t/auditbeat-error-instance-beat-go-971-exiting-one-or-more-modules-must-be-configured/279272)
**Author:** [@amardeep.mahato](https://discuss.elastic.co/u/amardeep.mahato)\ **Replies:** 0\ **Last updated:** [July 21, 2021, 1:31pm UTC](https://discuss.elastic.co/t/auditbeat-error-instance-beat-go-971-exiting-one-or-more-modules-must-be-configured/279272 "2021-07-21T13:31:07Z")
Getting below error while installing auditbeat 7.12.1 on EKS cluster: auditbeat ERROR instance/beat.go:971 Exiting: one or more modules must be configured Could you please help? --- ## [Filter to select lines that contain a certain word which begins with "ANS" and which can end with a series of numbers or letters](https://discuss.elastic.co/t/filter-to-select-lines-that-contain-a-certain-word-which-begins-with-ans-and-which-can-end-with-a-series-of-numbers-or-letters/279259)
**Author:** [@boubou](https://discuss.elastic.co/u/boubou)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 1:31pm UTC](https://discuss.elastic.co/t/filter-to-select-lines-that-contain-a-certain-word-which-begins-with-ans-and-which-can-end-with-a-series-of-numbers-or-letters/279259 "2021-07-21T13:31:02Z")
Hello everybody, I would like to create a filter who select lines that contain a certain word which begins with "ANS" and which can end with a series of numbers or letters. For example, I have a Tag who contains these … --- ## [ElasticSIEM unable to find \[logs-endpoint.alerts](https://discuss.elastic.co/t/elasticsiem-unable-to-find-logs-endpoint-alerts/277681)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 11\ **Last updated:** [July 21, 2021, 1:20pm UTC](https://discuss.elastic.co/t/elasticsiem-unable-to-find-logs-endpoint-alerts/277681 "2021-07-21T13:20:49Z")
I have been able to start using the elastic SIEM recently, and am having the following message show up in my Kibana, both in the UI as well as in the command line when I start the service. \ log \[15:02:19.220\] \[erro… --- ## [Install specific version of ES on homebrew](https://discuss.elastic.co/t/install-specific-version-of-es-on-homebrew/279234)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 1:15pm UTC](https://discuss.elastic.co/t/install-specific-version-of-es-on-homebrew/279234 "2021-07-21T13:15:11Z")
Hi all, I'm working in a project where we are using previous version of Elasticsearch i.e 7.11.1 . I'm supposed to use same version. When I try to download Elasticsearch on my MAC using homebrew services, I download la… [Previous page](https://discuss.elastic.co/latest.md?page=1561) [Next page](https://discuss.elastic.co/latest.md?page=1563)