# Latest **URL:** https://discuss.elastic.co/latest.md?page=1680 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1681 --- ## [How to deal with brackets json input filter](https://discuss.elastic.co/t/how-to-deal-with-brackets-json-input-filter/272848)
**Author:** [@Magnuss](https://discuss.elastic.co/u/Magnuss)\ **Replies:** 8\ **Last updated:** [May 13, 2021, 11:02am UTC](https://discuss.elastic.co/t/how-to-deal-with-brackets-json-input-filter/272848 "2021-05-13T11:02:15Z")
Hi there, I'm trying to figure out how to deal with brackets in logstash. The code is as following: { "test1": "text", "images": \[ "https://test2.com/images/I/test.jpg", "https://test2.com/images/I/test.jpg", … --- ## [Error parsing logs Filebeat - APACHE module](https://discuss.elastic.co/t/error-parsing-logs-filebeat-apache-module/272889)
**Author:** [@marti1](https://discuss.elastic.co/u/marti1)\ **Replies:** 1\ **Last updated:** [May 13, 2021, 10:44am UTC](https://discuss.elastic.co/t/error-parsing-logs-filebeat-apache-module/272889 "2021-05-13T10:44:10Z")
Hi everyone, I have configured my Apache server with Filebeat apache module to load ACCESS and ERROR logs to Elasticsearch but is not working properly, all the logs are not parsed (are raw). This is my configuration: A… --- ## [Reindex data on old ES version using Logstash](https://discuss.elastic.co/t/reindex-data-on-old-es-version-using-logstash/272496)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [May 13, 2021, 9:48am UTC](https://discuss.elastic.co/t/reindex-data-on-old-es-version-using-logstash/272496 "2021-05-13T09:48:01Z")
Hey there, I am trying to reindex data from an old ES version to another old ES version using Logstash with elasticsearch input. Anyway I have some doubts. If I schedule the action, during the second execution it will … --- ## [Custom Icon for Kibana App Category](https://discuss.elastic.co/t/custom-icon-for-kibana-app-category/272847)
**Author:** [@amartin-layer3com](https://discuss.elastic.co/u/amartin-layer3com)\ **Replies:** 1\ **Last updated:** [May 13, 2021, 9:14am UTC](https://discuss.elastic.co/t/custom-icon-for-kibana-app-category/272847 "2021-05-13T09:14:34Z")
Our business uses a simple in-house kibana plugin to present dashboard links in the sidebar. Here is an image illustrating how this might look: To get this to work, we have an custom AppCategory in our plugin: c… --- ## [Children aggregation not returning results](https://discuss.elastic.co/t/children-aggregation-not-returning-results/272896)
**Author:** [@brjisc](https://discuss.elastic.co/u/brjisc)\ **Replies:** 0\ **Last updated:** [May 13, 2021, 9:14am UTC](https://discuss.elastic.co/t/children-aggregation-not-returning-results/272896 "2021-05-13T09:14:26Z")
Using a mapping with: "stats\_rel": { "type": "join", "relations": { "metadata": "stat" } }\`\`\` and sample data of: \`\`\`{ "\_index": "irustest", "\_type": "\_doc", "\_id": … --- ## [I add documents to elastic indexes but they don't refresh in Kibana](https://discuss.elastic.co/t/i-add-documents-to-elastic-indexes-but-they-dont-refresh-in-kibana/272892)
**Author:** [@Julio1974](https://discuss.elastic.co/u/Julio1974)\ **Replies:** 1\ **Last updated:** [May 13, 2021, 8:52am UTC](https://discuss.elastic.co/t/i-add-documents-to-elastic-indexes-but-they-dont-refresh-in-kibana/272892 "2021-05-13T08:52:02Z")
Hello I am adding data with a java application to several elasticsearch indexes, I see that the number of documents increases but they are not refreshed in my Kibana dashboard. I imagine that there is some problem in th… --- ## [How to make Timeseries TSVB is broken line to connecting line?](https://discuss.elastic.co/t/how-to-make-timeseries-tsvb-is-broken-line-to-connecting-line/272567)
**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\ **Replies:** 3\ **Last updated:** [May 13, 2021, 8:49am UTC](https://discuss.elastic.co/t/how-to-make-timeseries-tsvb-is-broken-line-to-connecting-line/272567 "2021-05-13T08:49:27Z")
Hi Team, Please refer attached screenshot, line graph is broken after group by with terms aggregation. . Before group by aggregation . Please help me to get continuous line in TSVB Timeseries even with group by … --- ## [Snapshot restore failing](https://discuss.elastic.co/t/snapshot-restore-failing/272117)
**Author:** [@kommineni24](https://discuss.elastic.co/u/kommineni24)\ **Replies:** 4\ **Last updated:** [May 13, 2021, 8:31am UTC](https://discuss.elastic.co/t/snapshot-restore-failing/272117 "2021-05-13T08:31:02Z")
Hi Team, I am trying to migrate data from Cluster 1(Elasticsearch version-6.4) to Cluster-2(Elasticsearch version-7.12). Have taken the snapshot and trying to restore the snapshot and seeing the error shown in the atta… --- ## [Remote Client not able to connect to Elasticsearch Cluster via SSL in place](https://discuss.elastic.co/t/remote-client-not-able-to-connect-to-elasticsearch-cluster-via-ssl-in-place/272766)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 6\ **Last updated:** [May 13, 2021, 7:52am UTC](https://discuss.elastic.co/t/remote-client-not-able-to-connect-to-elasticsearch-cluster-via-ssl-in-place/272766 "2021-05-13T07:52:54Z")
Hello I am using Elasticsearch version 7.8.0 with 5 node cluster. This cluster has SSL enabled and user auth security enabled too. For inter-commmunication port used is 9300. I am using external client \[ Oracle Golden… --- ## [Link in Markdown panel to saved objects page for the current Kibana space?](https://discuss.elastic.co/t/link-in-markdown-panel-to-saved-objects-page-for-the-current-kibana-space/272596)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 2\ **Last updated:** [May 13, 2021, 6:57am UTC](https://discuss.elastic.co/t/link-in-markdown-panel-to-saved-objects-page-for-the-current-kibana-space/272596 "2021-05-13T06:57:33Z")
Can I specify a link in a Markdown panel that goes to the Saved Objects page: /s/space-name/app/management/kibana/objects for the current Kibana space (that is, without hardcoding the space name)? If so, how? #/manag… --- ## [Kafka to kibana](https://discuss.elastic.co/t/kafka-to-kibana/272883)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 0\ **Last updated:** [May 13, 2021, 6:34am UTC](https://discuss.elastic.co/t/kafka-to-kibana/272883 "2021-05-13T06:34:44Z")
hi, how to push to topic from kafka into logstash with two different index? can anyone suggest me that conf file? --- ## [Change .kibana index name](https://discuss.elastic.co/t/change-kibana-index-name/272812)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 2\ **Last updated:** [May 13, 2021, 6:02am UTC](https://discuss.elastic.co/t/change-kibana-index-name/272812 "2021-05-13T06:02:54Z")
hii to all, i need solution for, how to change default index name to custom name for .kibana? --- ## [Verifying Install of Proposed Setup](https://discuss.elastic.co/t/verifying-install-of-proposed-setup/272609)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 4\ **Last updated:** [May 13, 2021, 5:24am UTC](https://discuss.elastic.co/t/verifying-install-of-proposed-setup/272609 "2021-05-13T05:24:20Z")
Good Day, I've been working with many of you in the past few weeks and you all have been ULTRA HELPFUL. SO thanks for that. With that said, I'm finalizing my final setup / re-install and want to verify this works... I… --- ## [Query that return similar words](https://discuss.elastic.co/t/query-that-return-similar-words/272825)
**Author:** [@abdess](https://discuss.elastic.co/u/abdess)\ **Replies:** 3\ **Last updated:** [May 13, 2021, 5:16am UTC](https://discuss.elastic.co/t/query-that-return-similar-words/272825 "2021-05-13T05:16:43Z")
I have a document that contains "chnik" word in a field and i want to return it in the result if i search for "china" word. Query used: { "query": { "query\_string": { "query": "\*china\* \*chin\* … --- ## [Kibana converts any date and month to a specific date and month](https://discuss.elastic.co/t/kibana-converts-any-date-and-month-to-a-specific-date-and-month/272838)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 3\ **Last updated:** [May 13, 2021, 4:17am UTC](https://discuss.elastic.co/t/kibana-converts-any-date-and-month-to-a-specific-date-and-month/272838 "2021-05-13T04:17:41Z")
Hi All, I am facing issues in date format. I have dates in '2021-05-03 23:11:25.84' format. If I create mapping like: { "format": "YYYY-MM-DD HH:mm:ss.SSS||YYYY-MM-DD HH:mm: ss.SS ||YYYY-MM-DD HH:mm:ss.S", … --- ## [\[Question\] Use aggregation result to query documents in a single query to optimise calls to ES](https://discuss.elastic.co/t/question-use-aggregation-result-to-query-documents-in-a-single-query-to-optimise-calls-to-es/272775)
**Author:** [@RapTvin](https://discuss.elastic.co/u/RapTvin)\ **Replies:** 4\ **Last updated:** [May 13, 2021, 3:42am UTC](https://discuss.elastic.co/t/question-use-aggregation-result-to-query-documents-in-a-single-query-to-optimise-calls-to-es/272775 "2021-05-13T03:42:35Z")
Aggregate a max for a field and then query only those documents which contain the field equal to that aggregated result. Can we perform this operation so that we get the queried results also rather than giving an aggreg… --- ## [How to differentiate data based on source log path](https://discuss.elastic.co/t/how-to-differentiate-data-based-on-source-log-path/272872)
**Author:** [@Michael\_M](https://discuss.elastic.co/u/Michael_M)\ **Replies:** 0\ **Last updated:** [May 13, 2021, 2:16am UTC](https://discuss.elastic.co/t/how-to-differentiate-data-based-on-source-log-path/272872 "2021-05-13T02:16:45Z")
I am new to elastic beats and would like to know if and how to configure file beat so that harvested data contains reference (e.g. full path) to the original log file? I have multiple applications and versions of the sa… --- ## [Daily Indexing (at Midnight)](https://discuss.elastic.co/t/daily-indexing-at-midnight/272867)
**Author:** [@inf](https://discuss.elastic.co/u/inf)\ **Replies:** 6\ **Last updated:** [May 13, 2021, 2:25am UTC](https://discuss.elastic.co/t/daily-indexing-at-midnight/272867 "2021-05-13T02:25:17Z")
Hi there, As I understand from this GitHub post and this Elastic Discuss post about having a new daily index (at midnight for my case), the solution to it is not Index Lifecycle Management. Instead, it should be using d… --- ## [How to check per day logs size?](https://discuss.elastic.co/t/how-to-check-per-day-logs-size/272638)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [May 13, 2021, 2:19am UTC](https://discuss.elastic.co/t/how-to-check-per-day-logs-size/272638 "2021-05-13T02:19:10Z")
I want to check per day log size.It was very easy earlier because logstash created index on daily basis,but now we are using ILM policy , so it create new index when an index reaches to specific gb or it create new index… --- ## [Remove single quotes from a string](https://discuss.elastic.co/t/remove-single-quotes-from-a-string/272863)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 5\ **Last updated:** [May 13, 2021, 1:48am UTC](https://discuss.elastic.co/t/remove-single-quotes-from-a-string/272863 "2021-05-13T01:48:37Z")
How do I remove single quotes from the message field using Logstash gsub filter? I've tried the syntax below, and it didn't work. mutate { gsub =\> \[ "\[message\]", "'", "" \] } mutate { gsub =\> \[ "\[message\]… --- ## [Open Source Projects That Use The ES Python API](https://discuss.elastic.co/t/open-source-projects-that-use-the-es-python-api/272866)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 0\ **Last updated:** [May 13, 2021, 12:37am UTC](https://discuss.elastic.co/t/open-source-projects-that-use-the-es-python-api/272866 "2021-05-13T00:37:16Z")
Can anyone recommend any well written open source projects that use the ES Python API? I've written a ES Class with a bunch of functions inside that create a connection to ES and execute various queries and deal with th… --- ## [ElasticCloud rollover](https://discuss.elastic.co/t/elasticcloud-rollover/271939)
**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\ **Replies:** 9\ **Last updated:** [May 12, 2021, 11:36pm UTC](https://discuss.elastic.co/t/elasticcloud-rollover/271939 "2021-05-12T23:36:56Z")
I have sat up lifecycle policy for index in order to delete the index if it gets over 50 gb. The index is called: myindex-000001 and when the policy applies, it creates the second index which calls it: myindex-000002 aut… --- ## [How do I get unique values from a field with a given search in kibana](https://discuss.elastic.co/t/how-do-i-get-unique-values-from-a-field-with-a-given-search-in-kibana/272621)
**Author:** [@KS\_123](https://discuss.elastic.co/u/KS_123)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 10:27pm UTC](https://discuss.elastic.co/t/how-do-i-get-unique-values-from-a-field-with-a-given-search-in-kibana/272621 "2021-05-12T22:27:14Z")
If I have a given search: eventType:DeviceRequestResponseEvent AND (exists:payload.cattle.name) AND DoorId:1bf35dbc-ce2b-4a2c-b126-7cd531aa84ad AND payload.deviceRequestResponseEvent.payloadType:COMMAND\_REQUEST\_TYPE … --- ## [Duplicate file entries in registry file on system with RAID 5](https://discuss.elastic.co/t/duplicate-file-entries-in-registry-file-on-system-with-raid-5/272856)
**Author:** [@Misha\_Diordienko](https://discuss.elastic.co/u/Misha_Diordienko)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 9:55pm UTC](https://discuss.elastic.co/t/duplicate-file-entries-in-registry-file-on-system-with-raid-5/272856 "2021-05-12T21:55:54Z")
Hi, Debian 10 linux with software raid 5, 3 ssd disks: ARRAY /dev/md1 level=raid1 num-devices=3 metadata=0.90 UUID=6a96a1c6:818e4a81:5ca9666b:e9209fa3 ARRAY /dev/md2 level=raid1 num-devices=3 metadata=0.90 UUID… --- ## [Error: Exiting: error creating reader for journal: failed to open journal file](https://discuss.elastic.co/t/error-exiting-error-creating-reader-for-journal-failed-to-open-journal-file/218318)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 9:50pm UTC](https://discuss.elastic.co/t/error-exiting-error-creating-reader-for-journal-failed-to-open-journal-file/218318 "2021-05-12T21:50:03Z")
Hi, i am using Elasticstack of version 7.1.1 with x-pack installed. I am trying to run journaldbeat 7.1.1 on my system but its showing the following error 2020-02-07T15:42:10.886+0530 INFO instance/beat.go:280 Setup B… --- ## [Cannot install elk version 7.11.0](https://discuss.elastic.co/t/cannot-install-elk-version-7-11-0/272736)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 9:41pm UTC](https://discuss.elastic.co/t/cannot-install-elk-version-7-11-0/272736 "2021-05-12T21:41:37Z")
i cannot install elastisearch 7.11.0 and kibana 7.11.0.. please any suggestion about why it is not possible to install elk on my windows wm. thanks you --- ## [Mount permission denied for snapshots](https://discuss.elastic.co/t/mount-permission-denied-for-snapshots/272312)
**Author:** [@guthurti](https://discuss.elastic.co/u/guthurti)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 9:40pm UTC](https://discuss.elastic.co/t/mount-permission-denied-for-snapshots/272312 "2021-05-12T21:40:02Z")
Team, I have an 11 node cluster and trying NFS mounting for Snapshots in Data and Master nodes. It's throwing mount permission denied. The entire cluster was deployed Mesos Container framework. Can someone help me with … --- ## [ElasticSearch not starting after configuring ip address ov VM](https://discuss.elastic.co/t/elasticsearch-not-starting-after-configuring-ip-address-ov-vm/272701)
**Author:** [@ps1304](https://discuss.elastic.co/u/ps1304)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 9:37pm UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-configuring-ip-address-ov-vm/272701 "2021-05-12T21:37:54Z")
Hi folks, just started my experence with ES - one challenge I now have: Elasticsearch working on localhost - when editing elasticsearch.yml and adding my ip address of the vm (VirtualBox) - elasticsearch is not starting… --- ## [Tail -f /var/log/kibana](https://discuss.elastic.co/t/tail-f-var-log-kibana/272830)
**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 9:27pm UTC](https://discuss.elastic.co/t/tail-f-var-log-kibana/272830 "2021-05-12T21:27:07Z")
root@elk-1:~# root@elk-1:~# root@elk-1:~# tail -f /var/log/kibana tail: error reading '/var/log/kibana': Is a directory tail: /var/log/kibana: cannot follow end of this type of file; giving up on this name tail: no … --- ## [Fortinet Module Dashboard](https://discuss.elastic.co/t/fortinet-module-dashboard/272747)
**Author:** [@demonsquatch](https://discuss.elastic.co/u/demonsquatch)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 9:18pm UTC](https://discuss.elastic.co/t/fortinet-module-dashboard/272747 "2021-05-12T21:18:14Z")
Hello All, As there is not currently a premade dashboard for Fortinet, does anyone have go to visualizations they use when creating dashboards to view Fortinet logs? Just getting started with this and looking for ideas… [Previous page](https://discuss.elastic.co/latest.md?page=1679) [Next page](https://discuss.elastic.co/latest.md?page=1681)