# Latest **URL:** https://discuss.elastic.co/latest.md?page=1660 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1661 --- ## [Kibana does not display the result/data of a time field (converted from UNIX time)](https://discuss.elastic.co/t/kibana-does-not-display-the-result-data-of-a-time-field-converted-from-unix-time/271662)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 8:24pm UTC](https://discuss.elastic.co/t/kibana-does-not-display-the-result-data-of-a-time-field-converted-from-unix-time/271662 "2021-05-25T20:24:27Z")
I was successfully able to convert UNIX time to Human readable format ,However kibana fails to load data from the below field . Is it because the format is missing ? as seen in the mapping ? "Fwd\_Time" : { … --- ## [Kibana Rollups - naive question](https://discuss.elastic.co/t/kibana-rollups-naive-question/273941)
**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\ **Replies:** 3\ **Last updated:** [May 25, 2021, 8:16pm UTC](https://discuss.elastic.co/t/kibana-rollups-naive-question/273941 "2021-05-25T20:16:52Z")
I know we can have an alias on a rolled up and raw index (which logically does not make sense), but I created one anyway. so I have a dashboard sourcing from an alias comprising of raw and rolled-up indices. but I have … --- ## [Does an elastic watcher action remain in ackable/acked state during its throttle window?](https://discuss.elastic.co/t/does-an-elastic-watcher-action-remain-in-ackable-acked-state-during-its-throttle-window/273985)
**Author:** [@pranayparmar](https://discuss.elastic.co/u/pranayparmar)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 7:05pm UTC](https://discuss.elastic.co/t/does-an-elastic-watcher-action-remain-in-ackable-acked-state-during-its-throttle-window/273985 "2021-05-25T19:05:53Z")
The Elasticsearch documentation does not specify this but would an action remain in the ackable/acked state if it is throttling until its throttle period end? I have an action with a 30m throttle period and looking at i… --- ## [Jdbc logstash module pulling IP in decimal format](https://discuss.elastic.co/t/jdbc-logstash-module-pulling-ip-in-decimal-format/273948)
**Author:** [@tushar.bansal](https://discuss.elastic.co/u/tushar.bansal)\ **Replies:** 4\ **Last updated:** [May 25, 2021, 6:44pm UTC](https://discuss.elastic.co/t/jdbc-logstash-module-pulling-ip-in-decimal-format/273948 "2021-05-25T18:44:22Z")
Hi, I am pulling events from sqlserver using jdbc module in logstash. I get all events I queried for, but IP is coming in different format. I think it is decimal format. I want them in regular IP notation a.b.c.d forma… --- ## [Getting version\_conflict\_eng (409) while updating in the existing Index](https://discuss.elastic.co/t/getting-version-conflict-eng-409-while-updating-in-the-existing-index/273543)
**Author:** [@Suraj\_Anand](https://discuss.elastic.co/u/Suraj_Anand)\ **Replies:** 3\ **Last updated:** [May 25, 2021, 6:42pm UTC](https://discuss.elastic.co/t/getting-version-conflict-eng-409-while-updating-in-the-existing-index/273543 "2021-05-25T18:42:31Z")
I am trying to update some data in an Elastic Search Index, I am trying to update using this method: Update Method: $params = \[ 'index' =\> 'my\_index', 'id' =\> 'my\_id', 'body' =\> \[… --- ## [Extract field's from a message field](https://discuss.elastic.co/t/extract-fields-from-a-message-field/273978)
**Author:** [@Denilson-Semedo](https://discuss.elastic.co/u/Denilson-Semedo)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 5:41pm UTC](https://discuss.elastic.co/t/extract-fields-from-a-message-field/273978 "2021-05-25T17:41:10Z")
I'm colleting logs from a file .log: {"type":"audit\_entry","created":"5/20/2021, 11:12:42 PM","colaborador\_id":"cf7dc62b-dde9-4980-89d8-96eb5707876e","request\_method":"PUT","ajax":false,"route":"/stock/artigos/8c443bfe-… --- ## [Create alert when free Disc Space is less than certain GB](https://discuss.elastic.co/t/create-alert-when-free-disc-space-is-less-than-certain-gb/273883)
**Author:** [@musku](https://discuss.elastic.co/u/musku)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 5:21pm UTC](https://discuss.elastic.co/t/create-alert-when-free-disc-space-is-less-than-certain-gb/273883 "2021-05-25T17:21:40Z")
Trying to create a basic alert (advanced) when for certain node free disc space is less than certain GB. Could someone provide information . --- ## [Построение отказоустойчивой\\катастрофоустойчивой конфигурации ELK + Gafana](https://discuss.elastic.co/t/elk-gafana/273957)
**Author:** [@Victor2](https://discuss.elastic.co/u/Victor2)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 5:01pm UTC](https://discuss.elastic.co/t/elk-gafana/273957 "2021-05-25T17:01:32Z")
добрый день! подскажите, как построить отказоустойчивую\\катастрофоустойчивую конфигурации ELK + Gafana с использованием Logstash forwarder. есть 2 ЦОД. на каждом ЦОД есть выделенный VLAN. в каждом выделенном VLAN сто… --- ## [Need update on tiebreaker fields for Kibana logs (event.sequence ?)](https://discuss.elastic.co/t/need-update-on-tiebreaker-fields-for-kibana-logs-event-sequence/273295)
**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 4:23pm UTC](https://discuss.elastic.co/t/need-update-on-tiebreaker-fields-for-kibana-logs-event-sequence/273295 "2021-05-25T16:23:51Z")
Good morning, Following up from another post I made a while ago, I want to know if in version 7.10.0 of Kibana, the event.sequence field is used automatically by the Kibana Logs application to sort the events that have … --- ## [Automatically start Logstash when Windows reboot](https://discuss.elastic.co/t/automatically-start-logstash-when-windows-reboot/273839)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 3\ **Last updated:** [May 25, 2021, 4:12pm UTC](https://discuss.elastic.co/t/automatically-start-logstash-when-windows-reboot/273839 "2021-05-25T16:12:37Z")
I am using Windows OS as a source in which Logstash is installed and run Logstash using the following command on PowerShell: logstash -f logstash.conf Now as I am working in an industrial setting, manually running this… --- ## [FileBeat HTTPJSON input split.type of list?](https://discuss.elastic.co/t/filebeat-httpjson-input-split-type-of-list/273965)
**Author:** [@PhilipWhiteside](https://discuss.elastic.co/u/PhilipWhiteside)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 3:18pm UTC](https://discuss.elastic.co/t/filebeat-httpjson-input-split-type-of-list/273965 "2021-05-25T15:18:44Z")
Hello, I'm struggling to perform a subsplit with a type of list. It appears only array, map, and string is supported. Am I not understanding something? Or is there a way to make this work? config response: split:… --- ## [Data ingestion got stuck though the Logstash pipelines are running](https://discuss.elastic.co/t/data-ingestion-got-stuck-though-the-logstash-pipelines-are-running/273970)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 3:41pm UTC](https://discuss.elastic.co/t/data-ingestion-got-stuck-though-the-logstash-pipelines-are-running/273970 "2021-05-25T15:41:53Z")
We have deployed 10 logstash config files last year. We started all the config files at once by using the folder where we have kept all the config files(as service). Yesterday we found that, few of them are not pushing d… --- ## [Procedure to Instrument APM agent for ASP.Net based application](https://discuss.elastic.co/t/procedure-to-instrument-apm-agent-for-asp-net-based-application/273959)
**Author:** [@mdamera](https://discuss.elastic.co/u/mdamera)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 3:38pm UTC](https://discuss.elastic.co/t/procedure-to-instrument-apm-agent-for-asp-net-based-application/273959 "2021-05-25T15:38:16Z")
Team, For the first time I am trying to instrument APM for ASP.NET application, would like to understand the Process to do this, from ELK documentation I could see we need to download the package from (https://nuget.or… --- ## [Reading from specific Kafka partitions](https://discuss.elastic.co/t/reading-from-specific-kafka-partitions/273549)
**Author:** [@wkuijsters](https://discuss.elastic.co/u/wkuijsters)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 3:38pm UTC](https://discuss.elastic.co/t/reading-from-specific-kafka-partitions/273549 "2021-05-25T15:38:03Z")
Hi, I'm trying to consume Kafka data hosted on an on-prem Kafka bus using Logstash in a cloud-hosted environment. There is a single massive topic with about 100 partitions, the messages I need are all located in a singl… --- ## [Elastic Stack 7.13.0 and 6.8.16 Security Update](https://discuss.elastic.co/t/elastic-stack-7-13-0-and-6-8-16-security-update/273964)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 3:17pm UTC](https://discuss.elastic.co/t/elastic-stack-7-13-0-and-6-8-16-security-update/273964 "2021-05-25T15:17:07Z")
Kibana url redirection flaw (ESA-2021-12) An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could result in Kibana redirecting the user… --- ## [Aggregate TopHit based on filter](https://discuss.elastic.co/t/aggregate-tophit-based-on-filter/273634)
**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 3:04pm UTC](https://discuss.elastic.co/t/aggregate-tophit-based-on-filter/273634 "2021-05-25T15:04:01Z")
I am working on a index that stores statistics about issue tracking. Each document is a snapshot of the state of a given project (number of open issues, etc). Each document is categorized by an organization, a project na… --- ## [How to configure Filebeat to ingest logs from nested workflow directories created after Filebeat starts](https://discuss.elastic.co/t/how-to-configure-filebeat-to-ingest-logs-from-nested-workflow-directories-created-after-filebeat-starts/273336)
**Author:** [@1steve](https://discuss.elastic.co/u/1steve)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 2:55pm UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-to-ingest-logs-from-nested-workflow-directories-created-after-filebeat-starts/273336 "2021-05-25T14:55:51Z")
Similar to the question here, we need to ingest log files from a nested directory structure. However, different from that question and many other use cases, we are not ingesting logs from a static, persistent service or … --- ## [Watcher to track specific Drive space](https://discuss.elastic.co/t/watcher-to-track-specific-drive-space/273960)
**Author:** [@mralladin](https://discuss.elastic.co/u/mralladin)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 2:52pm UTC](https://discuss.elastic.co/t/watcher-to-track-specific-drive-space/273960 "2021-05-25T14:52:46Z")
Hello I wanted to create a watcher to track my space on a specific drive (D:/) or even machine later. I am not really experienced with them and I read the documentation and followed some examples but it is not working we… --- ## [Kibana control visual](https://discuss.elastic.co/t/kibana-control-visual/273885)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 2:51pm UTC](https://discuss.elastic.co/t/kibana-control-visual/273885 "2021-05-25T14:51:27Z")
I am creating a simple dropdown using Control visual in Kibana, but it is not listing me all the distinct values for that particular field. Below is the screenshot for the same. This "Source system" field contains man… --- ## [Unable to write grok filter for access.log](https://discuss.elastic.co/t/unable-to-write-grok-filter-for-access-log/273730)
**Author:** [@Ipsidash](https://discuss.elastic.co/u/Ipsidash)\ **Replies:** 7\ **Last updated:** [May 25, 2021, 2:46pm UTC](https://discuss.elastic.co/t/unable-to-write-grok-filter-for-access-log/273730 "2021-05-25T14:46:38Z")
Hi, I have an access.log for which i need grok filter to ingest logs to logstash. I have passing the grok filter in logstash.conf. Access.log: 144.70.113.111 - - \[16/May/2021:23:40:32 -0400\] \[https-jsse-nio-8443-exe-4… --- ## [MariaDB audit](https://discuss.elastic.co/t/mariadb-audit/273934)
**Author:** [@Juju-fr34](https://discuss.elastic.co/u/Juju-fr34)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 2:26pm UTC](https://discuss.elastic.co/t/mariadb-audit/273934 "2021-05-25T14:26:42Z")
Hi everyone. I'm trying to index my mariadb servers audit logs but I'm facing a problem. 90% off my logs are correctly indexed but some of them don't. It is like the produced csv is incorrect and message filed is empty. … --- ## [Coordination Node Client request stats](https://discuss.elastic.co/t/coordination-node-client-request-stats/272807)
**Author:** [@mani1](https://discuss.elastic.co/u/mani1)\ **Replies:** 6\ **Last updated:** [May 25, 2021, 2:25pm UTC](https://discuss.elastic.co/t/coordination-node-client-request-stats/272807 "2021-05-25T14:25:32Z")
Hi, In our Elasticsearch cluster, there are three coordinatin nodes (dedicated) which are forwarding client search requests to Hot Nodes. There is no load balancer before Coord Nodes. They are receiving client request d… --- ## [Logstash Java plugin development, faster testing w/o rebuilding ruby gem?](https://discuss.elastic.co/t/logstash-java-plugin-development-faster-testing-w-o-rebuilding-ruby-gem/273954)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 2:12pm UTC](https://discuss.elastic.co/t/logstash-java-plugin-development-faster-testing-w-o-rebuilding-ruby-gem/273954 "2021-05-25T14:12:10Z")
I'm putting together a Logstash Java plugin, and it's working well, but it takes a bit of time to package to a gem and install in logstash every time we want to test it. Is it possible to use something like path.plugins … --- ## [Lowercase field value](https://discuss.elastic.co/t/lowercase-field-value/273869)
**Author:** [@prosens](https://discuss.elastic.co/u/prosens)\ **Replies:** 4\ **Last updated:** [May 25, 2021, 2:08pm UTC](https://discuss.elastic.co/t/lowercase-field-value/273869 "2021-05-25T14:08:44Z")
We are using 2.4.1. We have a string field that might contain both uppercase and lowercase values. Is there a way to return it as lowercase always without reindexing the data? --- ## [Dfs\_query\_then\_fetch returns the same scores as query\_then\_fetch](https://discuss.elastic.co/t/dfs-query-then-fetch-returns-the-same-scores-as-query-then-fetch/273024)
**Author:** [@Drept](https://discuss.elastic.co/u/Drept)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 2:02pm UTC](https://discuss.elastic.co/t/dfs-query-then-fetch-returns-the-same-scores-as-query-then-fetch/273024 "2021-05-25T14:02:58Z")
I have multiple indices in Elasticsearch (and the corresponding documents in Django created using django-elasticsearch-dsl). All of the indices have these settings: settings = {'number\_of\_shards': 1, … --- ## [Integer is not recognized](https://discuss.elastic.co/t/integer-is-not-recognized/273920)
**Author:** [@dinesh5](https://discuss.elastic.co/u/dinesh5)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 10:57am UTC](https://discuss.elastic.co/t/integer-is-not-recognized/273920 "2021-05-25T10:57:12Z")
Hi Here is my sample data Madhya Pradesh;22.9734;78.6569;57766;764338;7558 Maharashtra;19.7515;75.7139;351005;5579897;88620 Manipur;24.6637;93.9063;6534;44089;688 Logstash considered the text and float but it doesn'… --- ## [Where is the index pattern stored?](https://discuss.elastic.co/t/where-is-the-index-pattern-stored/273926)
**Author:** [@FreshMike](https://discuss.elastic.co/u/FreshMike)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 1:46pm UTC](https://discuss.elastic.co/t/where-is-the-index-pattern-stored/273926 "2021-05-25T13:46:48Z")
We are running Elastic and Kibana on our K8s cluster. I see a storageClass setting for the Elastic chart but not kibana. Where are for example all the settings or index pattern from Kibana saved ? --- ## [Sort with aggregation with another aggregation in Java REST API](https://discuss.elastic.co/t/sort-with-aggregation-with-another-aggregation-in-java-rest-api/273520)
**Author:** [@Nick\_M](https://discuss.elastic.co/u/Nick_M)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 1:33pm UTC](https://discuss.elastic.co/t/sort-with-aggregation-with-another-aggregation-in-java-rest-api/273520 "2021-05-25T13:33:59Z")
I created the query below and I want to execute it with the Java Client provided but I can't really find a way. GET asset-records-latest/\_search { "size": 0, "aggs": { "agg1": { "terms": { "field":… --- ## [How get data from snowflake to elastic search in elastic cloud](https://discuss.elastic.co/t/how-get-data-from-snowflake-to-elastic-search-in-elastic-cloud/273944)
**Author:** [@Ahmed\_Sadek](https://discuss.elastic.co/u/Ahmed_Sadek)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 1:30pm UTC](https://discuss.elastic.co/t/how-get-data-from-snowflake-to-elastic-search-in-elastic-cloud/273944 "2021-05-25T13:30:57Z")
Hi, 1- I am using elastic cloud 2- In kibana, under stack management there is option to configure logstash pipeline 3- In documentation there is a plugin to get data from snowflake to elastic using jdbc 4- can someon… --- ## [How get data from google storage to elastic search in elastic cloud](https://discuss.elastic.co/t/how-get-data-from-google-storage-to-elastic-search-in-elastic-cloud/273942)
**Author:** [@Ahmed\_Sadek](https://discuss.elastic.co/u/Ahmed_Sadek)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 1:28pm UTC](https://discuss.elastic.co/t/how-get-data-from-google-storage-to-elastic-search-in-elastic-cloud/273942 "2021-05-25T13:28:37Z")
Hi, 1- I am using elastic cloud 2- Under stack management there is option to configure logstash pipeline 3- in documentation there is a plugin to get data from google storage to elastic 4- can someone provide a usabl… [Previous page](https://discuss.elastic.co/latest.md?page=1659) [Next page](https://discuss.elastic.co/latest.md?page=1661)