# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1012 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1013 --- ## [Error 500 while creating s3 snapshot repo](https://discuss.elastic.co/t/error-500-while-creating-s3-snapshot-repo/267239)
**Author:** [@aditiparnami](https://discuss.elastic.co/u/aditiparnami)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 8:16am UTC](https://discuss.elastic.co/t/error-500-while-creating-s3-snapshot-repo/267239 "2021-03-17T08:16:59Z")
I'm getting HTTP 500 status whenever I try to create the snapshot repository on an AWS S3 bucket. I have updated the AWS access key, secret key, and session token into the elasticsearch-keystore and reloaded the secure … --- ## [Geo\_shape: linestring with data from csv](https://discuss.elastic.co/t/geo-shape-linestring-with-data-from-csv/266977)
**Author:** [@vincedt09](https://discuss.elastic.co/u/vincedt09)\ **Replies:** 3\ **Last updated:** [March 17, 2021, 7:33am UTC](https://discuss.elastic.co/t/geo-shape-linestring-with-data-from-csv/266977 "2021-03-17T07:33:14Z")
Hi! I am working on a project that involves drawing a line in kibana using data from a csv file. Csv file: latitude,longitude 44.453538,26.086064 44.455499,26.086069 44.457815,26.086090 44.459435,26.086106 Conf… --- ## [Logstash node name show '0.0.0.0' on kibana](https://discuss.elastic.co/t/logstash-node-name-show-0-0-0-0-on-kibana/267450)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 7:05am UTC](https://discuss.elastic.co/t/logstash-node-name-show-0-0-0-0-on-kibana/267450 "2021-03-17T07:05:13Z")
OS version: CentOS 6.9 kibana version: 6.3.0 logstash version: 6.3.0 Add two logstash nodes, one node is normal, and the other show '0.0.0.0' How does kibana get the hostname of the operation system? Thanks!!! --- ## [Heartbeat TCP monitor does not return a "connection refused" message](https://discuss.elastic.co/t/heartbeat-tcp-monitor-does-not-return-a-connection-refused-message/266687)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 8\ **Last updated:** [March 17, 2021, 6:44am UTC](https://discuss.elastic.co/t/heartbeat-tcp-monitor-does-not-return-a-connection-refused-message/266687 "2021-03-17T06:44:11Z")
Hi, we've moved the monitoring of an application from Nagios to Heartbeat. Now we noticed a difference, which is causing some trouble. A TCP check in Nagios for a specific port returns a "connection refused" as result,… --- ## [Questions about index.allocation.max\_retries?](https://discuss.elastic.co/t/questions-about-index-allocation-max-retries/267437)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 2\ **Last updated:** [March 17, 2021, 5:39am UTC](https://discuss.elastic.co/t/questions-about-index-allocation-max-retries/267437 "2021-03-17T05:39:15Z")
Yesterday we had a cluster node status that turned yellow with an unsuccessful allocation of a shard of an index, when a colleague found the following exception in the logs: \[2021-03-16T17:34:24,934\]\[WARN \]\[o.e.a.b.Tran… --- ## [data-error-message="Elastic did not load properly. Check the server output for more information. kbn\_legacy\_browser\_error](https://discuss.elastic.co/t/data-error-message-elastic-did-not-load-properly-check-the-server-output-for-more-information-kbn-legacy-browser-error/267337)
**Author:** [@Satyasree](https://discuss.elastic.co/u/Satyasree)\ **Replies:** 3\ **Last updated:** [March 17, 2021, 5:45am UTC](https://discuss.elastic.co/t/data-error-message-elastic-did-not-load-properly-check-the-server-output-for-more-information-kbn-legacy-browser-error/267337 "2021-03-17T05:45:01Z")
Hi All I have enabled Xpack security for Elasticsearch and Kibana which are hosted in IBM Cloud Kubernetes environment. Please find elasticsearch values.yml file clusterName: "elasticsearch" nodeGroup: "master" mast… --- ## [Could not index event to elasticsearch error](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/267379)
**Author:** [@atharvak](https://discuss.elastic.co/u/atharvak)\ **Replies:** 2\ **Last updated:** [March 17, 2021, 5:33am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/267379 "2021-03-17T05:33:48Z")
Hello guys, I am getting following error about my filter and I have no clue why it is happening. I have included details. Filter filter { if "cost\_management" in \[tags\] { fingerprint { source =\> "message" targe… --- ## [Resource not found exception in discovery](https://discuss.elastic.co/t/resource-not-found-exception-in-discovery/266613)
**Author:** [@Charles\_Ferguson](https://discuss.elastic.co/u/Charles_Ferguson)\ **Replies:** 2\ **Last updated:** [March 17, 2021, 4:38am UTC](https://discuss.elastic.co/t/resource-not-found-exception-in-discovery/266613 "2021-03-17T04:38:03Z")
Hello, We are starting to get lots of reports of random resource not found errors when searching in discovery. It looks like the issue goes back to a version conflict for the search on elasticsearch. I am little bit of… --- ## [Fortinet.tmp.\*](https://discuss.elastic.co/t/fortinet-tmp/267213)
**Author:** [@michaelv](https://discuss.elastic.co/u/michaelv)\ **Replies:** 8\ **Last updated:** [March 17, 2021, 4:28am UTC](https://discuss.elastic.co/t/fortinet-tmp/267213 "2021-03-17T04:28:17Z")
Hi, I'm trying out fortinet filebeat plugin. Running ELK with 7.10.1 and filebeat 7.10.1 However, I'm getting a strange input values into the documents (in the filebeat-\* index) This is my config - module: fortin… --- ## [I want to process bellow log format with the help of gork filter](https://discuss.elastic.co/t/i-want-to-process-bellow-log-format-with-the-help-of-gork-filter/267396)
**Author:** [@onkarborade](https://discuss.elastic.co/u/onkarborade)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 4:01pm UTC](https://discuss.elastic.co/t/i-want-to-process-bellow-log-format-with-the-help-of-gork-filter/267396 "2021-03-16T16:01:55Z")
I have below log format want to gork it, any help will be appreciated. \[0916/131436.858:ERROR:process\_reader\_win.cc(127)\] NtOpenThread: {Access Denied} A process has requested access to an object, but has not been grant… --- ## [Logstash timeout execution grok prevent data to be indexing](https://discuss.elastic.co/t/logstash-timeout-execution-grok-prevent-data-to-be-indexing/267440)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 0\ **Last updated:** [March 17, 2021, 3:37am UTC](https://discuss.elastic.co/t/logstash-timeout-execution-grok-prevent-data-to-be-indexing/267440 "2021-03-17T03:37:38Z")
Hi all I have an weird situation on logstash. A while a go when i parse the log, some of the log that i got sometime have grok time out and that log got indexed fine, but a few days ago, the log stop indexing at all, n… --- ## [First time seen value](https://discuss.elastic.co/t/first-time-seen-value/267420)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 3\ **Last updated:** [March 17, 2021, 1:54am UTC](https://discuss.elastic.co/t/first-time-seen-value/267420 "2021-03-17T01:54:36Z")
Hi, is this possible to somehow find first time seen value, or new value for field etc? I would like to find on my dashboard only unknow values for specific field (but sometimes I have like 200 values so building query I… --- ## [Elastic Mail Watcher escape html in logs](https://discuss.elastic.co/t/elastic-mail-watcher-escape-html-in-logs/266374)
**Author:** [@rLenhard](https://discuss.elastic.co/u/rLenhard)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 1:35am UTC](https://discuss.elastic.co/t/elastic-mail-watcher-escape-html-in-logs/266374 "2021-03-17T01:35:40Z")
Hi, I created an email watcher witch html-body. Some of the logs I am returning with ctx.payload.hits.hits have html tags in their value: Is there a way to escape the return so the tags in the value are displayed as ta… --- ## [What can I include in a webhook body/playload?](https://discuss.elastic.co/t/what-can-i-include-in-a-webhook-body-playload/267430)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 0\ **Last updated:** [March 17, 2021, 12:26am UTC](https://discuss.elastic.co/t/what-can-i-include-in-a-webhook-body-playload/267430 "2021-03-17T00:26:09Z")
Dear all =) When setting up an Elastic watcher that triggers a webhook, how do I know what info I can include in the body/payload? Does there exist a list of all info I can include? Hugs, Sandra =) --- ## [How to exclude fields from being indexed in ElasticSearch?](https://discuss.elastic.co/t/how-to-exclude-fields-from-being-indexed-in-elasticsearch/267427)
**Author:** [@jay2021](https://discuss.elastic.co/u/jay2021)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 11:54pm UTC](https://discuss.elastic.co/t/how-to-exclude-fields-from-being-indexed-in-elasticsearch/267427 "2021-03-16T23:54:50Z")
I am trying to utilize ElasticSearch to store large sets of data. Most of the data will be searchable, however, there are some field that will be there just so the data is stored and returned upon request. Here is my ma… --- ## [ECK responds empty via curl](https://discuss.elastic.co/t/eck-responds-empty-via-curl/266893)
**Author:** [@Tomonori-YOSHIKAWA](https://discuss.elastic.co/u/Tomonori-YOSHIKAWA)\ **Replies:** 4\ **Last updated:** [March 16, 2021, 11:51pm UTC](https://discuss.elastic.co/t/eck-responds-empty-via-curl/266893 "2021-03-16T23:51:29Z")
I have deployed ECK and BANZAI logging on AKS, then trying sent logs to elasticsearch via fluentd. No index have found on the Kibana discovery, I deployed a CentOS pod and verified its HTTP connectivity. But empty resp… --- ## [Range query through custom window time](https://discuss.elastic.co/t/range-query-through-custom-window-time/267428)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 11:48pm UTC](https://discuss.elastic.co/t/range-query-through-custom-window-time/267428 "2021-03-16T23:48:14Z")
I have this query in Dev Tools that I do when my boss asks that counts how many cards were used in 90 days window: GET transactions/\_search { "size": 0, "query": { "range": { "timestamp": { "gte": "now-90d/d",… --- ## [Visualization using one field as term but label with another field](https://discuss.elastic.co/t/visualization-using-one-field-as-term-but-label-with-another-field/267429)
**Author:** [@gnumoksha](https://discuss.elastic.co/u/gnumoksha)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 11:23pm UTC](https://discuss.elastic.co/t/visualization-using-one-field-as-term-but-label-with-another-field/267429 "2021-03-16T23:23:17Z")
Hello. Like in here I want to use a different display label for the X-axis. How can I do that? --- ## [Elasticsearch service stops right after running](https://discuss.elastic.co/t/elasticsearch-service-stops-right-after-running/267219)
**Author:** [@liorh](https://discuss.elastic.co/u/liorh)\ **Replies:** 4\ **Last updated:** [March 16, 2021, 11:10pm UTC](https://discuss.elastic.co/t/elasticsearch-service-stops-right-after-running/267219 "2021-03-16T23:10:00Z")
Hi all Elastic is very new to me. I've installed elastic 7.11.1. Once I start the service, it seem to be running but another refresh and it's not :confused: Could you help me solve it? Thank you very much Lior --- ## [Automatic IP reputation check](https://discuss.elastic.co/t/automatic-ip-reputation-check/265215)
**Author:** [@sbathla](https://discuss.elastic.co/u/sbathla)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 8:45pm UTC](https://discuss.elastic.co/t/automatic-ip-reputation-check/265215 "2021-03-16T20:45:12Z")
Hi All, Is there any way to do ip reputation check automatically with logstash or elasticsearch without manually effort for checking reputation against each ip? --- ## [Elastic Endgame Lab issue](https://discuss.elastic.co/t/elastic-endgame-lab-issue/267412)
**Author:** [@shutzi25](https://discuss.elastic.co/u/shutzi25)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 7:11pm UTC](https://discuss.elastic.co/t/elastic-endgame-lab-issue/267412 "2021-03-16T19:11:47Z")
Hi, In the Elastic Endgame free training, Strigo Lab: http://ec2-3-64-54-139.eu-central-1.compute.amazonaws.com/instructions/labs.html#\_lab\_1\_elastic\_endgame\_sensor\_deployment In the very first part when you Copy to … --- ## [Parsing repeated tags in XML](https://discuss.elastic.co/t/parsing-repeated-tags-in-xml/267405)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 6:13pm UTC](https://discuss.elastic.co/t/parsing-repeated-tags-in-xml/267405 "2021-03-16T18:13:58Z")
Hello Team, I have XML data where there are repeated tags, as per the documentation it is converting it to an array, but I want to implement it like break on first match or convert array to single value. Could you plea… --- ## [Kibana 7.11.2 fails to start post upgrade](https://discuss.elastic.co/t/kibana-7-11-2-fails-to-start-post-upgrade/266926)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 6\ **Last updated:** [March 16, 2021, 5:55pm UTC](https://discuss.elastic.co/t/kibana-7-11-2-fails-to-start-post-upgrade/266926 "2021-03-16T17:55:11Z")
I just upgraded my stack to 7.11.2 and kibana is not starting. My elasticsearch status is green. I have rebooted the host and the problem persists. Mar 11 09:59:01 hostname systemd\[1\]: kibana.service: State 'stop-sigter… --- ## [Analyse events under detection is not working](https://discuss.elastic.co/t/analyse-events-under-detection-is-not-working/266444)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 5:53pm UTC](https://discuss.elastic.co/t/analyse-events-under-detection-is-not-working/266444 "2021-03-16T17:53:22Z")
Hello, Prior to updating to 7.11.1, analyse events as part of detection alerts was showing chain of events and allowing for quick analysis. However, post the upgrade; I see an "error loading data" whenever I click on an… --- ## [How can I bulk insert data?](https://discuss.elastic.co/t/how-can-i-bulk-insert-data/267311)
**Author:** [@jay2021](https://discuss.elastic.co/u/jay2021)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 5:50pm UTC](https://discuss.elastic.co/t/how-can-i-bulk-insert-data/267311 "2021-03-16T17:50:18Z")
Hello, I have the following json data that I like to post to the server using the \_bulk API. { "price": 274000.00, "original\_price": 277900.00, "summary": "WHAT A FANTASTIC PROPERTY!! GREAT LOCATION IN DESE… --- ## [Retry Logstash connection to a DB after failed attempt](https://discuss.elastic.co/t/retry-logstash-connection-to-a-db-after-failed-attempt/266441)
**Author:** [@d.malacrida](https://discuss.elastic.co/u/d.malacrida)\ **Replies:** 4\ **Last updated:** [March 16, 2021, 4:30pm UTC](https://discuss.elastic.co/t/retry-logstash-connection-to-a-db-after-failed-attempt/266441 "2021-03-16T16:30:09Z")
Hello everyone, We have set up a Logstash connector to gather data from a DB every day at a fixed time (7 a.m.). Now, we have included the following parameters in the input.conf file (some parameters are masked for obvi… --- ## [LOGSTASH : output pipe](https://discuss.elastic.co/t/logstash-output-pipe/267390)
**Author:** [@Alex\_Lum](https://discuss.elastic.co/u/Alex_Lum)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 4:24pm UTC](https://discuss.elastic.co/t/logstash-output-pipe/267390 "2021-03-16T16:24:10Z")
Hello there, I have a winlogbeat which send datas on logstash. On logstash : input beat, some filters and output to elasticSearch. But i want to output SOME fields on a named pipe (mkfifo) to insert them on a MariaDB. … --- ## [Delete or update document without document\_id](https://discuss.elastic.co/t/delete-or-update-document-without-document-id/267375)
**Author:** [@lele15](https://discuss.elastic.co/u/lele15)\ **Replies:** 5\ **Last updated:** [March 16, 2021, 4:18pm UTC](https://discuss.elastic.co/t/delete-or-update-document-without-document-id/267375 "2021-03-16T16:18:25Z")
Hi, i'm new on ES, i'am using logstash and csv to update or delete values into ES. I want to delete or update document based on different field not only with document\_id like this: input { stdin{} } filter { csv … --- ## [How to create periodic check in logstash](https://discuss.elastic.co/t/how-to-create-periodic-check-in-logstash/267342)
**Author:** [@anupts](https://discuss.elastic.co/u/anupts)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 3:59pm UTC](https://discuss.elastic.co/t/how-to-create-periodic-check-in-logstash/267342 "2021-03-16T15:59:45Z")
Hello, We have requirement , where we need to monitor for user activity on periodic basis. We will have this information in our log file . FOr example: User has accessed some page in the application. This will be log… --- ## [Primary store size showing wrong info while using \_cat/indices](https://discuss.elastic.co/t/primary-store-size-showing-wrong-info-while-using-cat-indices/267361)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 6\ **Last updated:** [March 16, 2021, 3:41pm UTC](https://discuss.elastic.co/t/primary-store-size-showing-wrong-info-while-using-cat-indices/267361 "2021-03-16T15:41:02Z")
I somehow doubt \_cat/indices is showing me wrong information regarding store size. I have two indices - giitran\_with\_message and giitran\_without\_message. Now both have have almost the same document. Each one has 1000 … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1011) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1013)