# Latest **URL:** https://discuss.elastic.co/latest.md?page=1564 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1565 --- ## [Logstash KV filter time field](https://discuss.elastic.co/t/logstash-kv-filter-time-field/279183)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 5\ **Last updated:** [July 20, 2021, 7:21pm UTC](https://discuss.elastic.co/t/logstash-kv-filter-time-field/279183 "2021-07-20T19:21:12Z")
hello guys, i'm using kv filter to filter syslogs in logstash to be sent to elasticsearch. but the kv is creating a field with time and data instead of being in value, how to fix this? is reaching the field limit becaus… --- ## [All output pipelines stop when one errors (using pipeline-to-pipeline)](https://discuss.elastic.co/t/all-output-pipelines-stop-when-one-errors-using-pipeline-to-pipeline/279155)
**Author:** [@mgeldert](https://discuss.elastic.co/u/mgeldert)\ **Replies:** 4\ **Last updated:** [July 20, 2021, 5:45pm UTC](https://discuss.elastic.co/t/all-output-pipelines-stop-when-one-errors-using-pipeline-to-pipeline/279155 "2021-07-20T17:45:39Z")
I'm running logstash 7.12.1 in a container based on the standard Docker image, with the New Relic output installed on top. Despite the fact I am using pipeline-to-pipeline, I am hitting a situation where, if one output … --- ## [Heartbeat : Panic error using SSL Verification\_mode None](https://discuss.elastic.co/t/heartbeat-panic-error-using-ssl-verification-mode-none/276396)
**Author:** [@tjussey](https://discuss.elastic.co/u/tjussey)\ **Replies:** 4\ **Last updated:** [July 20, 2021, 5:30pm UTC](https://discuss.elastic.co/t/heartbeat-panic-error-using-ssl-verification-mode-none/276396 "2021-07-20T17:30:31Z")
Hi everyone, I'm using Heartbeat 7.13.1 on Debian 9.13. I setup monitors like this one : heartbeat.monitors: - type: http enabled: true id: anId name: aName urls: \["https//private.fr:59862"\] schedule: '@ever… --- ## [Logstash xml filter ruby cleanup code help](https://discuss.elastic.co/t/logstash-xml-filter-ruby-cleanup-code-help/279099)
**Author:** [@grants](https://discuss.elastic.co/u/grants)\ **Replies:** 3\ **Last updated:** [July 20, 2021, 5:16pm UTC](https://discuss.elastic.co/t/logstash-xml-filter-ruby-cleanup-code-help/279099 "2021-07-20T17:16:48Z")
I'm using the xml logstash filter to parse xml values into json, but I'm having issues indexing them into Elasticsearch due to an issue where a null string gets parsed into an empty object. Source String Snip: \ **Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 22\ **Last updated:** [July 20, 2021, 3:29pm UTC](https://discuss.elastic.co/t/advice-on-scaling-writes/278518 "2021-07-20T15:29:13Z") Hi, Our systems are generating CSV files containing all events that happened during the past hour. There are about 15.000 CSV files generated every hour, containing thousand of events each. A quick estimate would mean… --- ## [How to limit data Print When I use ES as input](https://discuss.elastic.co/t/how-to-limit-data-print-when-i-use-es-as-input/279014)
**Author:** [@London\_Kim](https://discuss.elastic.co/u/London_Kim)\ **Replies:** 1\ **Last updated:** [July 20, 2021, 3:23pm UTC](https://discuss.elastic.co/t/how-to-limit-data-print-when-i-use-es-as-input/279014 "2021-07-20T15:23:39Z")
I am using ES as an input tool. I am trying to output data to stdout, but I want to see only about 5 data as a test. But until I stop logstash, logstash continues to load data. How can I control the data for as many cas… --- ## [Elastic Cloud Enterprise security update](https://discuss.elastic.co/t/elastic-cloud-enterprise-security-update/279180)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [July 20, 2021, 3:17pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-security-update/279180 "2021-07-20T15:17:20Z")
Elastic Cloud Enterprise security update (ESA-2021-17) Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters. While in the default setting the anonymous user has no perm… --- ## [Issue with metricbeat keystore integration](https://discuss.elastic.co/t/issue-with-metricbeat-keystore-integration/278889)
**Author:** [@lokeshv1989](https://discuss.elastic.co/u/lokeshv1989)\ **Replies:** 2\ **Last updated:** [July 20, 2021, 3:13pm UTC](https://discuss.elastic.co/t/issue-with-metricbeat-keystore-integration/278889 "2021-07-20T15:13:21Z")
Hi there, we are trying to use keystore in metricbeats to protect a password value but looks like the ${pwd} which we use in the metricbeat.yml is not able to reference the pwd value i have set in keystore basically lo… --- ## [Kibana Bar chart - Replacing alldocs name in x-axis](https://discuss.elastic.co/t/kibana-bar-chart-replacing-alldocs-name-in-x-axis/279076)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 3\ **Last updated:** [July 20, 2021, 3:07pm UTC](https://discuss.elastic.co/t/kibana-bar-chart-replacing-alldocs-name-in-x-axis/279076 "2021-07-20T15:07:31Z")
Hi all, I'm creating a bar chart with split series option instead of x-axis because i want to show all values with different colours. However, I'm unable to change "\_all All docs" name. I want it according to my name … --- ## [How to integrate the "metrics" and "trace" data](https://discuss.elastic.co/t/how-to-integrate-the-metrics-and-trace-data/278841)
**Author:** [@tttoad](https://discuss.elastic.co/u/tttoad)\ **Replies:** 5\ **Last updated:** [July 20, 2021, 2:42pm UTC](https://discuss.elastic.co/t/how-to-integrate-the-metrics-and-trace-data/278841 "2021-07-20T14:42:44Z")
I want to integrate the "metrics" and "trace" data, the "metrics" data is grabbed by "prometheus". Now I use "openTelemetry" "receivers.prometheus\_simple" to collect the data and send it to "APM The data is sent to "APM"… --- ## [Missing events while using Filebeat multiline.flush\_pattern](https://discuss.elastic.co/t/missing-events-while-using-filebeat-multiline-flush-pattern/279175)
**Author:** [@bhavaniprasad\_reddy](https://discuss.elastic.co/u/bhavaniprasad_reddy)\ **Replies:** 0\ **Last updated:** [July 20, 2021, 2:39pm UTC](https://discuss.elastic.co/t/missing-events-while-using-filebeat-multiline-flush-pattern/279175 "2021-07-20T14:39:27Z")
Filebeat "multiline.flush\_pattern" is flushing the multiline line event starting with "multiline.pattern" and ending with "multiline.flush\_pattern". I am facing 2 issues with multiline.flush\_pattern, The lines after "… --- ## [ELK SQL query](https://discuss.elastic.co/t/elk-sql-query/278934)
**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\ **Replies:** 1\ **Last updated:** [July 20, 2021, 2:17pm UTC](https://discuss.elastic.co/t/elk-sql-query/278934 "2021-07-20T14:17:12Z")
Hello Team, I want to Execute SQL query on my Index data , where i have 6 records of same transaction id in Index. In each record there is timestamp , so i need to calculate timestamp diff between 1st , 6th and 2dn ,3… --- ## [Observability Engineer Lab 4.2 - Unreadable Events](https://discuss.elastic.co/t/observability-engineer-lab-4-2-unreadable-events/279157)
**Author:** [@TonyY](https://discuss.elastic.co/u/TonyY)\ **Replies:** 1\ **Last updated:** [July 20, 2021, 2:02pm UTC](https://discuss.elastic.co/t/observability-engineer-lab-4-2-unreadable-events/279157 "2021-07-20T14:02:59Z")
Hi, settings up the nginx input for lab 4.2 results in a large number of unreadable events like \[20/Jul/2021:11:50:04 +0000\] "\\xB5\\x96Wix\\xC3l\\xD0Aj\\x17WV\<\\x08\\x9B\\x10\\xAEi\\x099I\\x14o \\x90\\xD2\\xBE\\xDA\\xEDcC\\xA4\\x9Bt\\xD… --- ## [Edge N-gram at word level](https://discuss.elastic.co/t/edge-n-gram-at-word-level/279166)
**Author:** [@mmoreram](https://discuss.elastic.co/u/mmoreram)\ **Replies:** 2\ **Last updated:** [July 20, 2021, 1:47pm UTC](https://discuss.elastic.co/t/edge-n-gram-at-word-level/279166 "2021-07-20T13:47:38Z")
In Elasticsearch, edge n-gram divides a word into progressive tokens, starting from the begining, and adding a new letter per each token. Is there a way to add the same logic at word level? "This is a sentence" \["T… --- ## [Direct link to doc & get index pattern ID of \*](https://discuss.elastic.co/t/direct-link-to-doc-get-index-pattern-id-of/278663)
**Author:** [@amit.haim](https://discuss.elastic.co/u/amit.haim)\ **Replies:** 2\ **Last updated:** [July 20, 2021, 1:46pm UTC](https://discuss.elastic.co/t/direct-link-to-doc-get-index-pattern-id-of/278663 "2021-07-20T13:46:22Z")
Hi everyone, I didn't found any solution online yet: Is it possible to get a direct link to elastic doc by the \_id arg? Is it possible to get the index pattern ID of \*? thank you all --- ## [How to Upload Old logs (Which are deleted/missed)](https://discuss.elastic.co/t/how-to-upload-old-logs-which-are-deleted-missed/279163)
**Author:** [@rajuk](https://discuss.elastic.co/u/rajuk)\ **Replies:** 1\ **Last updated:** [July 20, 2021, 1:29pm UTC](https://discuss.elastic.co/t/how-to-upload-old-logs-which-are-deleted-missed/279163 "2021-07-20T13:29:45Z")
Hello, I am using an AWS ES, logstash, and Filebeat. Recently we lost/missed the one-week data due to the logstash down. Can someone suggest how to upload the old deleted/missed data. Appreciate Your suggestions. Th… --- ## [Greater Than/Less Than filters on facets](https://discuss.elastic.co/t/greater-than-less-than-filters-on-facets/278911)
**Author:** [@eric\_m1](https://discuss.elastic.co/u/eric_m1)\ **Replies:** 3\ **Last updated:** [July 16, 2021, 6:49pm UTC](https://discuss.elastic.co/t/greater-than-less-than-filters-on-facets/278911 "2021-07-16T18:49:19Z")
Is there a way to filter results where a facet value is \>= or \<= a given value? --- ## [Filter with regex to select lines that contain a certain word type](https://discuss.elastic.co/t/filter-with-regex-to-select-lines-that-contain-a-certain-word-type/279162)
**Author:** [@boubou](https://discuss.elastic.co/u/boubou)\ **Replies:** 2\ **Last updated:** [July 20, 2021, 1:27pm UTC](https://discuss.elastic.co/t/filter-with-regex-to-select-lines-that-contain-a-certain-word-type/279162 "2021-07-20T13:27:00Z")
Hello, I would like to know if it is possible to make a filter, in kibana, which contain the word "error". Indeed, I have in a log field (named "message") lines similar to these : message: ANS2832E Incremental snapsh… --- ## [Wildcard search only returns partial results](https://discuss.elastic.co/t/wildcard-search-only-returns-partial-results/279069)
**Author:** [@muns](https://discuss.elastic.co/u/muns)\ **Replies:** 4\ **Last updated:** [July 20, 2021, 12:54pm UTC](https://discuss.elastic.co/t/wildcard-search-only-returns-partial-results/279069 "2021-07-20T12:54:03Z")
Hello, i have the following NEST query and my issue is that the wildcard search is only performed on the last field, "title". It ignores the author and subject fields, even though it should be returning data because ther… --- ## [IO Reactor errors closing connection](https://discuss.elastic.co/t/io-reactor-errors-closing-connection/279148)
**Author:** [@Mariusz\_Pala](https://discuss.elastic.co/u/Mariusz_Pala)\ **Replies:** 11\ **Last updated:** [July 20, 2021, 12:18pm UTC](https://discuss.elastic.co/t/io-reactor-errors-closing-connection/279148 "2021-07-20T12:18:22Z")
Hi, I asked ES about the IOReactor connection issues(Request cannot be executed; I/O reactor status: STOPPED) and as per an answer in my ticket RestHighLevelClient disconnection issues · Issue #75364 · elastic/elasticse… --- ## [Time control panel in dashboard](https://discuss.elastic.co/t/time-control-panel-in-dashboard/278948)
**Author:** [@Jihed\_BACCOUCHE](https://discuss.elastic.co/u/Jihed_BACCOUCHE)\ **Replies:** 1\ **Last updated:** [July 20, 2021, 12:02pm UTC](https://discuss.elastic.co/t/time-control-panel-in-dashboard/278948 "2021-07-20T12:02:14Z")
hiii, please I want to add a control panel in my dashboard according to a date field in my data which is of type timestamp i want an option that give me the Opportunity to select a date from a calendar o something saim… --- ## [Date Time parsing problems](https://discuss.elastic.co/t/date-time-parsing-problems/279088)
**Author:** [@cibernicola](https://discuss.elastic.co/u/cibernicola)\ **Replies:** 6\ **Last updated:** [July 20, 2021, 11:38am UTC](https://discuss.elastic.co/t/date-time-parsing-problems/279088 "2021-07-20T11:38:09Z")
Hello I have a bunch of dates to sort, this is the format I have: 2018-05-12 00:00pm GMT (always 00:00pm) 2021-04-01 1:17am GMT If I try to ingest with no template, elasticsearch detects them as a string, but if I map… --- ## [I want to Filter the Visualization only with one controller](https://discuss.elastic.co/t/i-want-to-filter-the-visualization-only-with-one-controller/278171)
**Author:** [@aswanth\_jabba](https://discuss.elastic.co/u/aswanth_jabba)\ **Replies:** 1\ **Last updated:** [July 20, 2021, 11:35am UTC](https://discuss.elastic.co/t/i-want-to-filter-the-visualization-only-with-one-controller/278171 "2021-07-20T11:35:55Z")
I am using TSVB for Visualization. I want the visualization should be filtered only based of the Agile Release Train and ignore remaining Filters (Program Increment, Iteration). Ignore Global Filter wouldn't work be… --- ## [How do I change text size canvas kibana filter time](https://discuss.elastic.co/t/how-do-i-change-text-size-canvas-kibana-filter-time/278828)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 1\ **Last updated:** [July 20, 2021, 11:24am UTC](https://discuss.elastic.co/t/how-do-i-change-text-size-canvas-kibana-filter-time/278828 "2021-07-20T11:24:42Z")
How do I change text size canvas kibana filter time --- ## [Does donut chart available with ranking?](https://discuss.elastic.co/t/does-donut-chart-available-with-ranking/278608)
**Author:** [@paigekim](https://discuss.elastic.co/u/paigekim)\ **Replies:** 1\ **Last updated:** [July 20, 2021, 11:12am UTC](https://discuss.elastic.co/t/does-donut-chart-available-with-ranking/278608 "2021-07-20T11:12:57Z")
Hello, I am currently drawing the top 50 revenue. I am just wondering whether I can add a ranking next to each title of legend so that it would be easier to recognize the ranking of each portion. Current legend shows it… --- ## [What happens with my message field if I use decode\_json\_fields processor?](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279036)
**Author:** [@testisnullus](https://discuss.elastic.co/u/testisnullus)\ **Replies:** 2\ **Last updated:** [July 20, 2021, 11:07am UTC](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279036 "2021-07-20T11:07:26Z")
Hi all! I have the next message field: message: {"app":"rbac","args":\[\],"commandTag":null,"fields.time":353859,"file":"adapter.go","func":"Log","level":"info","msg":"Exec","pid":28700,"sql":";","time":"2021-07-20T07:59… --- ## [Visualize - How to visualize on a field using fuzzy logic](https://discuss.elastic.co/t/visualize-how-to-visualize-on-a-field-using-fuzzy-logic/279072)
**Author:** [@MWLonKso](https://discuss.elastic.co/u/MWLonKso)\ **Replies:** 5\ **Last updated:** [July 20, 2021, 11:06am UTC](https://discuss.elastic.co/t/visualize-how-to-visualize-on-a-field-using-fuzzy-logic/279072 "2021-07-20T11:06:57Z")
Hi All This might be a bit of a strange question and hopefully someone can just point me straight at some documentation. I want to visualize on a text field where I know that part of the message will contain a fixed str… --- ## [What happens with my message field if I use decode\_json\_fields processor?](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279139)
**Author:** [@testisnullus](https://discuss.elastic.co/u/testisnullus)\ **Replies:** 1\ **Last updated:** [July 20, 2021, 11:02am UTC](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279139 "2021-07-20T11:02:51Z")
Greatings all! I have the next message field: message: {"app":"rbac","args":\[\],"commandTag":null,"fields.time":353859,"file":"adapter.go","func":"Log","level":"info","msg":"Exec","pid":28700,"sql":";","time":"2021-07-2… --- ## [What is the use of enterprise search client](https://discuss.elastic.co/t/what-is-the-use-of-enterprise-search-client/279143)
**Author:** [@anon33720113](https://discuss.elastic.co/u/anon33720113)\ **Replies:** 1\ **Last updated:** [July 20, 2021, 10:22am UTC](https://discuss.elastic.co/t/what-is-the-use-of-enterprise-search-client/279143 "2021-07-20T10:22:18Z")
Hey, just a quick question : What is the actual difference between elastic enterprise search (Elastic Enterprise Search Documentation \[7.13\] | Elastic) and elastic enterprise search client (Enterprise Search Clients | El… --- ## [ES 2.4 GC time % unmanageable. Any tip?](https://discuss.elastic.co/t/es-2-4-gc-time-unmanageable-any-tip/279124)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 4\ **Last updated:** [July 20, 2021, 9:37am UTC](https://discuss.elastic.co/t/es-2-4-gc-time-unmanageable-any-tip/279124 "2021-07-20T09:37:04Z")
Hey there, I am trying to find the sweet spot for my application. I got these results: DATA nodes 8cpu-32gb ram with 16gb heap size and 8gb young heap size GC time % is generally around 5% (this is in case the limit) … [Previous page](https://discuss.elastic.co/latest.md?page=1563) [Next page](https://discuss.elastic.co/latest.md?page=1565)