# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1013 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1014 --- ## [Export and Import Index Patterns using elasticdump in ELK ver 7](https://discuss.elastic.co/t/export-and-import-index-patterns-using-elasticdump-in-elk-ver-7/267302)
**Author:** [@nguyenduyhung1979](https://discuss.elastic.co/u/nguyenduyhung1979)\ **Replies:** 13\ **Last updated:** [March 16, 2021, 3:16pm UTC](https://discuss.elastic.co/t/export-and-import-index-patterns-using-elasticdump-in-elk-ver-7/267302 "2021-03-16T15:16:26Z")
I try setup automation system which has the workflow: Have server where ELK stack has been installed and has basic configuration Import the index into ElasticSearch (ES), next Kibana can use that index for Visualize F… --- ## [ERROR reindex](https://discuss.elastic.co/t/error-reindex/267252)
**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\ **Replies:** 13\ **Last updated:** [March 16, 2021, 3:08pm UTC](https://discuss.elastic.co/t/error-reindex/267252 "2021-03-16T15:08:36Z")
Всем привет! В Index template поменял mapping поля на integer, соответственно после этого у меня нарисовались конфликты по типу поля. Хотел сделать reindex, но в процессе отработки вылетает ошибка. POST запрос в Dev To… --- ## [How you deal with ILM for kubernetes cluster applications?](https://discuss.elastic.co/t/how-you-deal-with-ilm-for-kubernetes-cluster-applications/267391)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 3:08pm UTC](https://discuss.elastic.co/t/how-you-deal-with-ilm-for-kubernetes-cluster-applications/267391 "2021-03-16T15:08:33Z")
Hi, I am collecting logs from kubernetes cluster using filebeat, which is deployed as daemonset I ship logs using logstash to my elasticsearch cluster in one index I am using ILM for controlling the retention time for … --- ## [Data Reports not working without change](https://discuss.elastic.co/t/data-reports-not-working-without-change/265976)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 2:10pm UTC](https://discuss.elastic.co/t/data-reports-not-working-without-change/265976 "2021-03-16T14:10:46Z")
One of the environments on 7.6 has stopped reporting total number of hosts on a fixed pattern without any change. It was working fine before the weekend The data for the index pattern is coming in fine and i am able t… --- ## [Plugin questions](https://discuss.elastic.co/t/plugin-questions/267378)
**Author:** [@nmalocic](https://discuss.elastic.co/u/nmalocic)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 1:37pm UTC](https://discuss.elastic.co/t/plugin-questions/267378 "2021-03-16T13:37:01Z")
Hi everyone, I have few questions related to plugins. Is it possible to log actions inside my processor plugin? What is the best way to ensure all existing documents are processed with new plugin and processor that us… --- ## [How to check if the data is coming in last 30 min](https://discuss.elastic.co/t/how-to-check-if-the-data-is-coming-in-last-30-min/267341)
**Author:** [@jyothsna](https://discuss.elastic.co/u/jyothsna)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 1:10pm UTC](https://discuss.elastic.co/t/how-to-check-if-the-data-is-coming-in-last-30-min/267341 "2021-03-16T13:10:26Z")
Hi, I am ingesting data from sql to elastic through logstash. Now I want to check whether the data is coming or not in last30 min .if not coming so that i can trap as missing data in elasticsearch. how to achieve this. … --- ## [Disable adding filter upon click on a bar chart](https://discuss.elastic.co/t/disable-adding-filter-upon-click-on-a-bar-chart/267350)
**Author:** [@kasun](https://discuss.elastic.co/u/kasun)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 12:47pm UTC](https://discuss.elastic.co/t/disable-adding-filter-upon-click-on-a-bar-chart/267350 "2021-03-16T12:47:40Z")
Hi all, In above chart when I click on bars it will automatically add a filter to the entire dashboard. As an example when I click on the first bar it will add a filter as in below. Is there a way to disable this … --- ## [Recommendation for upgrading kubernetes nodes managed by node group](https://discuss.elastic.co/t/recommendation-for-upgrading-kubernetes-nodes-managed-by-node-group/267143)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 11:51am UTC](https://discuss.elastic.co/t/recommendation-for-upgrading-kubernetes-nodes-managed-by-node-group/267143 "2021-03-16T11:51:48Z")
When the kubernetes ASG is manually managed, we manually stopping pods to draining nodes into nodes update. We want to use self managed node groups, but planning the migration, we think that the migration nodes data, an… --- ## [Rollup: Deleted index but cannot stop/delete job](https://discuss.elastic.co/t/rollup-deleted-index-but-cannot-stop-delete-job/265930)
**Author:** [@tg295](https://discuss.elastic.co/u/tg295)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 10:48am UTC](https://discuss.elastic.co/t/rollup-deleted-index-but-cannot-stop-delete-job/265930 "2021-03-16T10:48:06Z")
I have a rollup job in state "Indexing". I cannot stop nor delete the job - stopping is not an option and deleting brings up the following error: 400: Bad Request. Could not delete job \[index-blah\] because indexer state… --- ## [Filter in Kibana Visualization on values with spaces in it](https://discuss.elastic.co/t/filter-in-kibana-visualization-on-values-with-spaces-in-it/267288)
**Author:** [@Philbert](https://discuss.elastic.co/u/Philbert)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 10:36am UTC](https://discuss.elastic.co/t/filter-in-kibana-visualization-on-values-with-spaces-in-it/267288 "2021-03-16T10:36:59Z")
We use Kibana to analyse the HTTP logs of on our CDN. One important field is the user agent. From the user agent I can see which device was requesting an HTTP request from the CDN. I would like to gather statistics on … --- ## [Logstash](https://discuss.elastic.co/t/logstash/267348)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 10:35am UTC](https://discuss.elastic.co/t/logstash/267348 "2021-03-16T10:35:52Z")
why my logstash don't send log to elastic? I have made a logstash's ip and elasticsearch's ip at /etc/hosts in logstash's server and i made a "output-elasticsearch.conf" at /etc/logstash/conf.d in logstash's server w… --- ## [Elasticsearch security use ldap how to config role](https://discuss.elastic.co/t/elasticsearch-security-use-ldap-how-to-config-role/267347)
**Author:** [@taoyantu](https://discuss.elastic.co/u/taoyantu)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 10:30am UTC](https://discuss.elastic.co/t/elasticsearch-security-use-ldap-how-to-config-role/267347 "2021-03-16T10:30:18Z")
hello master ,please help me ,i use the elasticsearch realms ldap ,the elasticsearch.yml like realms: ldap: ldap1: follow\_referrals:false order: 10 url: "xxxxx" bind\_dn: "xxxx" bind\_pasword: "xxxx" user\_search: … --- ## [Edit field "action"](https://discuss.elastic.co/t/edit-field-action/267291)
**Author:** [@lele15](https://discuss.elastic.co/u/lele15)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 8:33am UTC](https://discuss.elastic.co/t/edit-field-action/267291 "2021-03-16T08:33:08Z")
Hi, i'm new on ES and i have a problem with csv ingestion. I want to edit data on ES when a field has a specific value. Like: Id,Name,Operation 1,Jack,Edit 2,,Delete I want something like this in my Logstash config… --- ## [Why does an enrich policy get executed on the master node?](https://discuss.elastic.co/t/why-does-an-enrich-policy-get-executed-on-the-master-node/263241)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 29\ **Last updated:** [March 16, 2021, 7:56am UTC](https://discuss.elastic.co/t/why-does-an-enrich-policy-get-executed-on-the-master-node/263241 "2021-03-16T07:56:36Z")
I'm trying to create a geo\_match enrich policy based on a not-so-big source index (10GB). The match field is a geo\_shape and there are about half a dozen single-term enrich fields. So nothing extraordinary. When the ind… --- ## [Elasticsearch : Return the value of a field in the latest document created each day for the last one month](https://discuss.elastic.co/t/elasticsearch-return-the-value-of-a-field-in-the-latest-document-created-each-day-for-the-last-one-month/267327)
**Author:** [@Bengagi\_Foued](https://discuss.elastic.co/u/Bengagi_Foued)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 7:51am UTC](https://discuss.elastic.co/t/elasticsearch-return-the-value-of-a-field-in-the-latest-document-created-each-day-for-the-last-one-month/267327 "2021-03-16T07:51:10Z")
I have a collection with documents updating everyday. Can someone provide me some suggestion for returning the value of a field in the latest document for each day for the last one month my document is like the one bello… --- ## [Could'nt set case\_insensitive option in Nest](https://discuss.elastic.co/t/couldnt-set-case-insensitive-option-in-nest/267227)
**Author:** [@Sangeetha-Murugesan](https://discuss.elastic.co/u/Sangeetha-Murugesan)\ **Replies:** 0\ **Last updated:** [March 15, 2021, 8:00am UTC](https://discuss.elastic.co/t/couldnt-set-case-insensitive-option-in-nest/267227 "2021-03-15T08:00:25Z")
Hi, I am using ElasticSearch version 7.11. My TermQuery only returns case-sensitive matching results,to avoid that I set case\_insensitive as true in DSL term query like below and it returns data as expected. { "qu… --- ## [Rally in kubernetes with docker image](https://discuss.elastic.co/t/rally-in-kubernetes-with-docker-image/267234)
**Author:** [@Vineeth\_varma](https://discuss.elastic.co/u/Vineeth_varma)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 6:02am UTC](https://discuss.elastic.co/t/rally-in-kubernetes-with-docker-image/267234 "2021-03-16T06:02:06Z")
Hi Elastic Team, I would like to perform benchmark Testing for Elasticsearch, I have few questions regarding this: Can we use rally as a Kubernetes Deployment. https://github.com/elastic/rally/tree/master/docker - I… --- ## [Logstash Json Parse Error](https://discuss.elastic.co/t/logstash-json-parse-error/267058)
**Author:** [@Anu6006](https://discuss.elastic.co/u/Anu6006)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 4:30am UTC](https://discuss.elastic.co/t/logstash-json-parse-error/267058 "2021-03-16T04:30:36Z")
Hi Team, I'm trying to get NSG Flow logs through Azure Blob Storage plugin version: logstash-input-azureblob (0.9.13). logstash-codec-json (3.0.5) I am trying to save my Logstash output in JSON format. But it is sho… --- ## [\[Highlight\] Highlight query doesn't work properly in should query](https://discuss.elastic.co/t/highlight-highlight-query-doesnt-work-properly-in-should-query/267314)
**Author:** [@kwang\_hee\_Han](https://discuss.elastic.co/u/kwang_hee_Han)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 2:34am UTC](https://discuss.elastic.co/t/highlight-highlight-query-doesnt-work-properly-in-should-query/267314 "2021-03-16T02:34:52Z")
GET naver\_article/\_search { "size": 100, "query" : { "function\_score": { "functions": \[ { "weight": 1.8, "gauss": { "format\_date": { "scale": "1d" … --- ## [Artifacts.elastic.co intermittently fails (404, "no longer has a Release file.")](https://discuss.elastic.co/t/artifacts-elastic-co-intermittently-fails-404-no-longer-has-a-release-file/266151)
**Author:** [@tedder](https://discuss.elastic.co/u/tedder)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 1:32am UTC](https://discuss.elastic.co/t/artifacts-elastic-co-intermittently-fails-404-no-longer-has-a-release-file/266151 "2021-03-16T01:32:18Z")
It seems that there are transient failures with artifacts.elastic.co, perhaps servers that are out of sync. We sometimes see this when running apt-get -q update: bad $ sudo apt-get -q update ... Ign:5 https://artifacts… --- ## [How can I check event.field value from a file?](https://discuss.elastic.co/t/how-can-i-check-event-field-value-from-a-file/267292)
**Author:** [@Ishaan](https://discuss.elastic.co/u/Ishaan)\ **Replies:** 4\ **Last updated:** [March 16, 2021, 1:27am UTC](https://discuss.elastic.co/t/how-can-i-check-event-field-value-from-a-file/267292 "2021-03-16T01:27:19Z")
How can I check if the event.field\_name value is present in the file? If yes, drop the event otherwise send the event to elasticsearch. Note: The field\_name could have multiple values in that file, and I want to check i… --- ## [How to stop Elastic Endpoint](https://discuss.elastic.co/t/how-to-stop-elastic-endpoint/267283)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 5\ **Last updated:** [March 15, 2021, 11:40pm UTC](https://discuss.elastic.co/t/how-to-stop-elastic-endpoint/267283 "2021-03-15T23:40:05Z")
Hello, I am testing elastic Endpoint, I have installed it in a windows server machine, and when I try to install a malware in my machine it blocks it as expected so it works perfectly, The only problem is that I am not … --- ## [Elasticsearch to Google sheets](https://discuss.elastic.co/t/elasticsearch-to-google-sheets/267173)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 1\ **Last updated:** [March 15, 2021, 10:10pm UTC](https://discuss.elastic.co/t/elasticsearch-to-google-sheets/267173 "2021-03-15T22:10:26Z")
Hi All, Is there any direct way to export data from the Elasticsearch index to Googlesheets (not from google sheets to elasticsearch) based on a defined iterval without using any ETL tool or script? Something like G-conn… --- ## [Detecting date from string input](https://discuss.elastic.co/t/detecting-date-from-string-input/267305)
**Author:** [@macctown](https://discuss.elastic.co/u/macctown)\ **Replies:** 0\ **Last updated:** [March 15, 2021, 7:58pm UTC](https://discuss.elastic.co/t/detecting-date-from-string-input/267305 "2021-03-15T19:58:10Z")
Hi I'm trying to find a way to get possible "date" information from user input string. Input - a string that may contain date information, for example: "UK basketball", "US sports 2019", "sports 2019/12/23" After sendi… --- ## [Log viewing Elastic stack](https://discuss.elastic.co/t/log-viewing-elastic-stack/266598)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 5\ **Last updated:** [March 15, 2021, 7:53pm UTC](https://discuss.elastic.co/t/log-viewing-elastic-stack/266598 "2021-03-15T19:53:07Z")
Hello there, I would like to explore the possibility of log viewing through Elastic stack. I understand that I can use filebeat in order to do that but I already have logs that I would like to view in kibana dashboard … --- ## [Field added by Logstash Grok can't be used in Kibana filters](https://discuss.elastic.co/t/field-added-by-logstash-grok-cant-be-used-in-kibana-filters/267122)
**Author:** [@b133](https://discuss.elastic.co/u/b133)\ **Replies:** 4\ **Last updated:** [March 15, 2021, 7:46pm UTC](https://discuss.elastic.co/t/field-added-by-logstash-grok-cant-be-used-in-kibana-filters/267122 "2021-03-15T19:46:48Z")
I added a hostname field to my index using Logstash Grok: grok { match =\> { "originsicname" =\> "CN=%{HOSTNAME:hostname}," } ... For some reason I cannot use this hostname field as a filter on my dashboards. … --- ## [Elasticsearch indexing strategy for searching multiple entities](https://discuss.elastic.co/t/elasticsearch-indexing-strategy-for-searching-multiple-entities/267300)
**Author:** [@Pravesh\_Jain](https://discuss.elastic.co/u/Pravesh_Jain)\ **Replies:** 0\ **Last updated:** [March 15, 2021, 7:25pm UTC](https://discuss.elastic.co/t/elasticsearch-indexing-strategy-for-searching-multiple-entities/267300 "2021-03-15T19:25:33Z")
My application deals with multiple entities, each having different fields. New entities can be added. New fields may be added in existing entities. I want to search over all of these entities, together, using elasticsea… --- ## [How to upload ".toml" rules from github to Kibana](https://discuss.elastic.co/t/how-to-upload-toml-rules-from-github-to-kibana/267274)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 1\ **Last updated:** [March 15, 2021, 7:24pm UTC](https://discuss.elastic.co/t/how-to-upload-toml-rules-from-github-to-kibana/267274 "2021-03-15T19:24:39Z")
Hello, I would like to upload this rule: https://github.com/elastic/detection-rules/blob/a0e86e20d6ad039dfe4446b28f3c29642b50385c/rules/windows/credential\_access\_cmdline\_dump\_tool.toml to my Cluster The problem is in K… --- ## [After changing the server ip address , Kibana does not work](https://discuss.elastic.co/t/after-changing-the-server-ip-address-kibana-does-not-work/265840)
**Author:** [@John\_biryon](https://discuss.elastic.co/u/John_biryon)\ **Replies:** 9\ **Last updated:** [March 15, 2021, 7:15pm UTC](https://discuss.elastic.co/t/after-changing-the-server-ip-address-kibana-does-not-work/265840 "2021-03-15T19:15:47Z")
Where do i go about to update the Kibana for the new IP address ? the ip address of the server had to be changed . Microsoft Windows 2012 r2, was working nicly before the change. many thanks John --- ## [Nested fields in syslog output plugin](https://discuss.elastic.co/t/nested-fields-in-syslog-output-plugin/267268)
**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\ **Replies:** 2\ **Last updated:** [March 15, 2021, 4:54pm UTC](https://discuss.elastic.co/t/nested-fields-in-syslog-output-plugin/267268 "2021-03-15T16:54:33Z")
Hey guys, i'm not able to send a nested field in the syslog output plugin. syslog { host =\> "1.7.3.9" rfc =\> "rfc5424" codec =\> cef … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1012) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1014)