# Latest **URL:** https://discuss.elastic.co/latest.md?page=1774 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1775 --- ## ["reason"=\>"failed to parse field \[Time\] of type \[date\] in document with id 'xxxxxxxxxxxxxxx'](https://discuss.elastic.co/t/reason-failed-to-parse-field-time-of-type-date-in-document-with-id-xxxxxxxxxxxxxxx/267473)
**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\ **Replies:** 2\ **Last updated:** [March 22, 2021, 12:26am UTC](https://discuss.elastic.co/t/reason-failed-to-parse-field-time-of-type-date-in-document-with-id-xxxxxxxxxxxxxxx/267473 "2021-03-22T00:26:35Z")
I set config of logstash, But happen warning message. Please, how to do resolve. I want to send below log to Elasticsearch. ////////////////// 2021-03-17 10:27:50.115 +0900 26240 main : INFO com.tableausoftware.acti… --- ## [Yum repos returning: Not Found](https://discuss.elastic.co/t/yum-repos-returning-not-found/267924)
**Author:** [@lachlan.simpson](https://discuss.elastic.co/u/lachlan.simpson)\ **Replies:** 3\ **Last updated:** [March 21, 2021, 11:50pm UTC](https://discuss.elastic.co/t/yum-repos-returning-not-found/267924 "2021-03-21T23:50:12Z")
Following the documentation for installation, I'm getting not found on the regular and oss repositories? I'm not the first to experience this in 2021. Has the OS installation method been deprecated but not removed from… --- ## [Elastic Search Null pointer exception in two different join types while fetching their parents](https://discuss.elastic.co/t/elastic-search-null-pointer-exception-in-two-different-join-types-while-fetching-their-parents/267922)
**Author:** [@Syed\_ali\_abbas\_shah](https://discuss.elastic.co/u/Syed_ali_abbas_shah)\ **Replies:** 0\ **Last updated:** [March 21, 2021, 11:00pm UTC](https://discuss.elastic.co/t/elastic-search-null-pointer-exception-in-two-different-join-types-while-fetching-their-parents/267922 "2021-03-21T23:00:58Z")
I have very simple mapping in Elastic Search 6.x version, and following is my mapping with two different types bookmarks user can also be bookmarked and post can also be bookmarked, { "properties": { "type": { … --- ## [Storing value and attaching it later](https://discuss.elastic.co/t/storing-value-and-attaching-it-later/267892)
**Author:** [@thaideval](https://discuss.elastic.co/u/thaideval)\ **Replies:** 2\ **Last updated:** [March 21, 2021, 4:10pm UTC](https://discuss.elastic.co/t/storing-value-and-attaching-it-later/267892 "2021-03-21T16:10:14Z")
Hello, so i have an event like this: A B С B С .. B С And i can parse it getting "A" value + making an array of "B" and "C". That's how i am handling it right now. But i got curious - if it's possible to store … --- ## [Best way to handle "circuit\_breaking\_exception"](https://discuss.elastic.co/t/best-way-to-handle-circuit-breaking-exception/267913)
**Author:** [@Leibo](https://discuss.elastic.co/u/Leibo)\ **Replies:** 0\ **Last updated:** [March 21, 2021, 4:13pm UTC](https://discuss.elastic.co/t/best-way-to-handle-circuit-breaking-exception/267913 "2021-03-21T16:13:50Z")
Hi, Our micro-service is written in Java. We are facing the "circuit\_breaking\_exception" exception occasionally while trying to index documents from multiple threads. How is the best way to handle it without changing … --- ## [Possiblities of bucket level subtraction](https://discuss.elastic.co/t/possiblities-of-bucket-level-subtraction/267911)
**Author:** [@venkat\_swaminathan](https://discuss.elastic.co/u/venkat_swaminathan)\ **Replies:** 0\ **Last updated:** [March 21, 2021, 3:46pm UTC](https://discuss.elastic.co/t/possiblities-of-bucket-level-subtraction/267911 "2021-03-21T15:46:36Z")
Good Day, I am collecting metric information from my provider and pushing them to ES through a python script. all I need to do is subtract "MetricName" , (i.e: Count - 5xx) with respect to time on total system availabi… --- ## [Kibana: show logs with a specifc field name value only](https://discuss.elastic.co/t/kibana-show-logs-with-a-specifc-field-name-value-only/267773)
**Author:** [@h\_q](https://discuss.elastic.co/u/h_q)\ **Replies:** 2\ **Last updated:** [March 21, 2021, 3:46pm UTC](https://discuss.elastic.co/t/kibana-show-logs-with-a-specifc-field-name-value-only/267773 "2021-03-21T15:46:36Z")
I started ingesting Kubernetes logs into ElasticSearch, using the Filebeat Input Container: Filebeat -\> Logstash -\> ElasticSearch My filebeat.yml looks like this: - type: container paths: - /var/lib/docker/conta… --- ## [Error in Lab 6.2 Engineer II?](https://discuss.elastic.co/t/error-in-lab-6-2-engineer-ii/267797)
**Author:** [@pbroek](https://discuss.elastic.co/u/pbroek)\ **Replies:** 2\ **Last updated:** [March 21, 2021, 3:31pm UTC](https://discuss.elastic.co/t/error-in-lab-6-2-engineer-ii/267797 "2021-03-21T15:31:54Z")
Hello, While working on Lab 6.2 I read the following question: In the same request, remove logs\_server1 from the access\_logs alias and update the same alias to write to logs\_server5 instead of logs\_server4 But in the… --- ## [Extracting a field further after its been parsed by Grok Filter](https://discuss.elastic.co/t/extracting-a-field-further-after-its-been-parsed-by-grok-filter/267883)
**Author:** [@rmoss25](https://discuss.elastic.co/u/rmoss25)\ **Replies:** 3\ **Last updated:** [March 21, 2021, 12:44pm UTC](https://discuss.elastic.co/t/extracting-a-field-further-after-its-been-parsed-by-grok-filter/267883 "2021-03-21T12:44:48Z")
HI, Is there a way to parse a field further after its already been parsed by grok? So after I parse out DN from the main message, I now want to parse DN further as it contains a username. So I want to parse out test.T… --- ## [List of supported JDBC drivers](https://discuss.elastic.co/t/list-of-supported-jdbc-drivers/267865)
**Author:** [@ben-kletzine-by](https://discuss.elastic.co/u/ben-kletzine-by)\ **Replies:** 1\ **Last updated:** [March 21, 2021, 11:15am UTC](https://discuss.elastic.co/t/list-of-supported-jdbc-drivers/267865 "2021-03-21T11:15:48Z")
I have a java application working with the apm agent. I have two datasources configured, one of SqlServer dialect, the other being Snowflake https://www.snowflake.com/ I see transactions reported for the sql server quer… --- ## [Elastic node js client point in time syntax](https://discuss.elastic.co/t/elastic-node-js-client-point-in-time-syntax/267903)
**Author:** [@111452](https://discuss.elastic.co/u/111452)\ **Replies:** 0\ **Last updated:** [March 21, 2021, 10:13am UTC](https://discuss.elastic.co/t/elastic-node-js-client-point-in-time-syntax/267903 "2021-03-21T10:13:58Z")
Can someone show me the right syntax for using point in time in elastic search on node js client. I'm trying like this: const body = { query: { geo\_shape: { geometry: { relation: 'wit… --- ## [Create Custom Visualization for Kibana](https://discuss.elastic.co/t/create-custom-visualization-for-kibana/267837)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 10\ **Last updated:** [March 21, 2021, 9:51am UTC](https://discuss.elastic.co/t/create-custom-visualization-for-kibana/267837 "2021-03-21T09:51:29Z")
I have a requirement to create a visualisation that replicates one of the legacy system. In the below screenshot it shows the expected and what i have so far... I could create a frontend, but was hoping if there is a w… --- ## [Data stream](https://discuss.elastic.co/t/data-stream/267901)
**Author:** [@dziri63](https://discuss.elastic.co/u/dziri63)\ **Replies:** 0\ **Last updated:** [March 21, 2021, 9:31am UTC](https://discuss.elastic.co/t/data-stream/267901 "2021-03-21T09:31:35Z")
Hello Can I use data stream indices without fleet ? For example i have a tcp input on a port ( logstash or filebeat doesnt matter) i want index it in a datastream index how can i do that ? thanks in advance --- ## [Using Nest, queries returning with 0 hits](https://discuss.elastic.co/t/using-nest-queries-returning-with-0-hits/267037)
**Author:** [@asimsek99](https://discuss.elastic.co/u/asimsek99)\ **Replies:** 4\ **Last updated:** [March 21, 2021, 9:22am UTC](https://discuss.elastic.co/t/using-nest-queries-returning-with-0-hits/267037 "2021-03-21T09:22:30Z")
Hey hey, Env: .net Core, Nest, Elasticsearch I had my queries running with using Logstash and Elastic with AWS. Decided to not use logstash and move to cloud.elastic.co. Trying to migrate the current queries to cloud.… --- ## [Unable to parse TIMESTAMP\_ISO8601 timestamp in logstash conf](https://discuss.elastic.co/t/unable-to-parse-timestamp-iso8601-timestamp-in-logstash-conf/267886)
**Author:** [@Micheal25](https://discuss.elastic.co/u/Micheal25)\ **Replies:** 2\ **Last updated:** [March 20, 2021, 7:52pm UTC](https://discuss.elastic.co/t/unable-to-parse-timestamp-iso8601-timestamp-in-logstash-conf/267886 "2021-03-20T19:52:59Z")
Hi Team, I am having parsing the "TIMESTAMP\_ISO8601" in logstash grok. The only differnce i see in the log message is extra space after the hours : in timestamp Eg: 2021-03-21T13:(\\s) 01:54.402+0000 this is occuring … --- ## [Multiline and csv filter](https://discuss.elastic.co/t/multiline-and-csv-filter/267888)
**Author:** [@vincedt09](https://discuss.elastic.co/u/vincedt09)\ **Replies:** 0\ **Last updated:** [March 20, 2021, 1:54pm UTC](https://discuss.elastic.co/t/multiline-and-csv-filter/267888 "2021-03-20T13:54:53Z")
Hi! I want to visualize in kibana map geo points with specific information(ex: latitude, longitude) csv { separator =\> "," skip\_empty\_rows =\> true columns =\> \[ "latitude","longitude" \] }… --- ## [Support matrix: luberjack plugin](https://discuss.elastic.co/t/support-matrix-luberjack-plugin/267875)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [March 20, 2021, 4:25pm UTC](https://discuss.elastic.co/t/support-matrix-luberjack-plugin/267875 "2021-03-20T16:25:47Z")
Dear elasic colleagues, what I do not understand: You provide a support matrix for the logstash plugins In this matrix I do not find the lumberjack output plugin. This means for me: this plugin is not supported anym… --- ## [Logstash does not read rewritable csv file well](https://discuss.elastic.co/t/logstash-does-not-read-rewritable-csv-file-well/267880)
**Author:** [@Andrew\_Foxis](https://discuss.elastic.co/u/Andrew_Foxis)\ **Replies:** 1\ **Last updated:** [March 20, 2021, 4:20pm UTC](https://discuss.elastic.co/t/logstash-does-not-read-rewritable-csv-file-well/267880 "2021-03-20T16:20:59Z")
Hi all. I have csv file: addr;peer;port;name;datetime (headers) 172.12.10.1; 34.15.67.43; 1123; peter; 2021-03-15 00:02:34 ( value rows (100-200 rows)) This file rewritable every 5 minutes. I want to get the full con… --- ## [Parse JSON in "message" field](https://discuss.elastic.co/t/parse-json-in-message-field/267854)
**Author:** [@surprised\_ferret](https://discuss.elastic.co/u/surprised_ferret)\ **Replies:** 1\ **Last updated:** [March 20, 2021, 2:18pm UTC](https://discuss.elastic.co/t/parse-json-in-message-field/267854 "2021-03-20T14:18:42Z")
Elastic version 7.11.1 How do I parse a JSON structure (nested, one field has an array) out into separate fields of their own? I'm running filebeat on my k8 instance, this is what my "filebeat.yml" value looks like, i… --- ## [Anonymous access on iframe but sign in otherwise](https://discuss.elastic.co/t/anonymous-access-on-iframe-but-sign-in-otherwise/267724)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 2\ **Last updated:** [March 20, 2021, 2:15pm UTC](https://discuss.elastic.co/t/anonymous-access-on-iframe-but-sign-in-otherwise/267724 "2021-03-20T14:15:43Z")
I am creating a web app that has kibana iframes embedded that I would like to not require sign in for them. I have read all of the elastic forums and githubs but I still can't figure out how to allow this. When I use th… --- ## [Performance implications for elasticsearch when specifying fields that won't be in the indexed documents?](https://discuss.elastic.co/t/performance-implications-for-elasticsearch-when-specifying-fields-that-wont-be-in-the-indexed-documents/267858)
**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 8:18pm UTC](https://discuss.elastic.co/t/performance-implications-for-elasticsearch-when-specifying-fields-that-wont-be-in-the-indexed-documents/267858 "2021-03-19T20:18:03Z")
I'm working on switching to using the ECS toolchain for our indices (mostly logs). The usage notes for the generator say: If your indices will never populate particular ECS fields, there's no need to include those fie… --- ## [Storing without Indexing?](https://discuss.elastic.co/t/storing-without-indexing/267795)
**Author:** [@Philipp\_Loew-Albrech](https://discuss.elastic.co/u/Philipp_Loew-Albrech)\ **Replies:** 5\ **Last updated:** [March 20, 2021, 2:02pm UTC](https://discuss.elastic.co/t/storing-without-indexing/267795 "2021-03-20T14:02:19Z")
We would like to have some fields which are only stored (some data is only used for displaying stuff in the frontend and doesn't need to be searched in). I couldn't find a way in the schema to tell that a field should o… --- ## [Doublon logstash](https://discuss.elastic.co/t/doublon-logstash/267867)
**Author:** [@lali](https://discuss.elastic.co/u/lali)\ **Replies:** 7\ **Last updated:** [March 20, 2021, 1:35pm UTC](https://discuss.elastic.co/t/doublon-logstash/267867 "2021-03-20T13:35:26Z")
Bonjour, Dans mon output je met ca comme variable : document\_id =\> "%{\_id}" Mais comment le mettre dans le output kafka ? Merci d'avance --- ## [Filebeat 7.10 fails to collect events from multiple kubernetes pods](https://discuss.elastic.co/t/filebeat-7-10-fails-to-collect-events-from-multiple-kubernetes-pods/267406)
**Author:** [@bhavaniprasad\_reddy](https://discuss.elastic.co/u/bhavaniprasad_reddy)\ **Replies:** 6\ **Last updated:** [March 20, 2021, 1:31pm UTC](https://discuss.elastic.co/t/filebeat-7-10-fails-to-collect-events-from-multiple-kubernetes-pods/267406 "2021-03-20T13:31:55Z")
Filebeat is configured to collect events from multiple kubernetes pods using or condition. Events from a specific pod are continuously collected but events from another pod are collected very slowly and no events are col… --- ## [Kubernetes - Multiple cluster on same Elastic installation](https://discuss.elastic.co/t/kubernetes-multiple-cluster-on-same-elastic-installation/265423)
**Author:** [@dekim](https://discuss.elastic.co/u/dekim)\ **Replies:** 2\ **Last updated:** [March 20, 2021, 1:25pm UTC](https://discuss.elastic.co/t/kubernetes-multiple-cluster-on-same-elastic-installation/265423 "2021-03-20T13:25:49Z")
Hello guys! We are currently using Elastic to monitor our stack. We do have multiple GKE (Google Kubernetes Engine) cluster, and I would like to have their logs sent to the same Elastic Instance. Is there a recommende… --- ## [Filter with scripted field](https://discuss.elastic.co/t/filter-with-scripted-field/267673)
**Author:** [@Mahibul](https://discuss.elastic.co/u/Mahibul)\ **Replies:** 2\ **Last updated:** [March 20, 2021, 12:58pm UTC](https://discuss.elastic.co/t/filter-with-scripted-field/267673 "2021-03-20T12:58:29Z")
Hi, I have created a scripted field test and the script is if (params\['\_source'\]\['additional'\] == null) { return -1 } return params\['\_source'\]\['additional'\].length() The type of the field is number. This works fin… --- ## [Index settings in logstash pipeline](https://discuss.elastic.co/t/index-settings-in-logstash-pipeline/267882)
**Author:** [@Automation\_Scripts](https://discuss.elastic.co/u/Automation_Scripts)\ **Replies:** 0\ **Last updated:** [March 20, 2021, 11:01am UTC](https://discuss.elastic.co/t/index-settings-in-logstash-pipeline/267882 "2021-03-20T11:01:13Z")
Hi guys, I have a logstash pipeline and i want to be able to set the number of replicas to 0 directly from my logstash.conf file. How can I do this? I have seen some docs with template, but is not working. The one from … --- ## [Voice alarm when fire a watch](https://discuss.elastic.co/t/voice-alarm-when-fire-a-watch/267855)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 1\ **Last updated:** [March 20, 2021, 7:23am UTC](https://discuss.elastic.co/t/voice-alarm-when-fire-a-watch/267855 "2021-03-20T07:23:16Z")
Hi, is there any way to play a voice or sound when firing a watch in kibana 7.10 ? --- ## [How to delete a data node](https://discuss.elastic.co/t/how-to-delete-a-data-node/267511)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [March 20, 2021, 6:46am UTC](https://discuss.elastic.co/t/how-to-delete-a-data-node/267511 "2021-03-20T06:46:03Z")
Hi there, I would like to delete one of many data nodes in production. There is stille plenty of space and the data node has only this role. Life can be so simple: stop the service and delte the machine. Is this all,… --- ## [Metric Beat AWS Billing](https://discuss.elastic.co/t/metric-beat-aws-billing/265654)
**Author:** [@vinay9](https://discuss.elastic.co/u/vinay9)\ **Replies:** 2\ **Last updated:** [March 20, 2021, 5:18am UTC](https://discuss.elastic.co/t/metric-beat-aws-billing/265654 "2021-03-20T05:18:19Z")
Any help on this is appreciated, I am using metricbeat to get the data from aws cloud watch and cost explorer, from Elasticsearch and to kibana dashboard i was able successfully get the all metrics for ec2 from aws. But … [Previous page](https://discuss.elastic.co/latest.md?page=1773) [Next page](https://discuss.elastic.co/latest.md?page=1775)