# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1042 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1043 --- ## [Unable to index a json string (array of json objects) to elastic search](https://discuss.elastic.co/t/unable-to-index-a-json-string-array-of-json-objects-to-elastic-search/264851)
**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\ **Replies:** 7\ **Last updated:** [February 19, 2021, 5:47pm UTC](https://discuss.elastic.co/t/unable-to-index-a-json-string-array-of-json-objects-to-elastic-search/264851 "2021-02-19T17:47:10Z")
I have an array of objects in the form of a single json string something like "\[{"id": 1, "name":"test"}, {"id": 2, "name":"test2"}\]" I want to be able to bulk index this json string directly to elastic search without … --- ## [How to map list of values correctly to show them in Grafana?](https://discuss.elastic.co/t/how-to-map-list-of-values-correctly-to-show-them-in-grafana/264895)
**Author:** [@dewell](https://discuss.elastic.co/u/dewell)\ **Replies:** 0\ **Last updated:** [February 19, 2021, 5:34pm UTC](https://discuss.elastic.co/t/how-to-map-list-of-values-correctly-to-show-them-in-grafana/264895 "2021-02-19T17:34:44Z")
Hello, I try to keep it simple. I receive a variable number of float values embedded in a communication protocol via logstash and created a mapping for an elasticsearch index. Via Grafana I connect to the index and I get… --- ## [Logstash 7.9.1 file input plugin is not able to read json file](https://discuss.elastic.co/t/logstash-7-9-1-file-input-plugin-is-not-able-to-read-json-file/264548)
**Author:** [@sagarpatel](https://discuss.elastic.co/u/sagarpatel)\ **Replies:** 6\ **Last updated:** [February 19, 2021, 3:25pm UTC](https://discuss.elastic.co/t/logstash-7-9-1-file-input-plugin-is-not-able-to-read-json-file/264548 "2021-02-19T15:25:40Z")
I have created sample.conf file for reading json file but it is not showing any output. below is my sample.cong file input { file { path =\> "C:\\Users\\Sagar\\sample.json" start\_position =\> "beginning" codec =\> "js… --- ## [DSL Query, Multiple conditions for must\_not, 'or, and'](https://discuss.elastic.co/t/dsl-query-multiple-conditions-for-must-not-or-and/264876)
**Author:** [@gneves](https://discuss.elastic.co/u/gneves)\ **Replies:** 0\ **Last updated:** [February 19, 2021, 3:31pm UTC](https://discuss.elastic.co/t/dsl-query-multiple-conditions-for-must-not-or-and/264876 "2021-02-19T15:31:25Z")
Hello guys im having some trouble to create multiple conditions. Ill give some pseudo examples in order to show my idea. "must\_not": \[ { "match": { … --- ## [Elastic Endpoint shipping application and service logs](https://discuss.elastic.co/t/elastic-endpoint-shipping-application-and-service-logs/264693)
**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\ **Replies:** 5\ **Last updated:** [February 19, 2021, 3:32pm UTC](https://discuss.elastic.co/t/elastic-endpoint-shipping-application-and-service-logs/264693 "2021-02-19T15:32:40Z")
Hi All, Currently I can not see a way to configure the endpoint agent to collect logs from sub categories of "Applications and Services". Is this something I am missing or a feature that will come in the future ? Thank… --- ## [Exchange logs](https://discuss.elastic.co/t/exchange-logs/261413)
**Author:** [@baddack](https://discuss.elastic.co/u/baddack)\ **Replies:** 4\ **Last updated:** [February 19, 2021, 3:29pm UTC](https://discuss.elastic.co/t/exchange-logs/261413 "2021-02-19T15:29:06Z")
Hello everyone ! I create this new topic today beacause I have an issue with message tracking in Exchange logs. Indeed I want to make a top10 senders for example but when I am looking to Exchange's logs there are many e… --- ## [Logstash grok multiple pattern , multi-line](https://discuss.elastic.co/t/logstash-grok-multiple-pattern-multi-line/264860)
**Author:** [@Daniel\_Jankech](https://discuss.elastic.co/u/Daniel_Jankech)\ **Replies:** 1\ **Last updated:** [February 19, 2021, 1:30pm UTC](https://discuss.elastic.co/t/logstash-grok-multiple-pattern-multi-line/264860 "2021-02-19T13:30:01Z")
Hello everyone , Im using grok to parse log file consisting of multiple pattern lines , these multiple lines represent one task being done in the system. My question is how should I do this if I need to add fields to the… --- ## [Jdbc connection to MS-SQL server with windows credentials](https://discuss.elastic.co/t/jdbc-connection-to-ms-sql-server-with-windows-credentials/264542)
**Author:** [@ravnen.flyver](https://discuss.elastic.co/u/ravnen.flyver)\ **Replies:** 1\ **Last updated:** [February 19, 2021, 1:10pm UTC](https://discuss.elastic.co/t/jdbc-connection-to-ms-sql-server-with-windows-credentials/264542 "2021-02-19T13:10:29Z")
I am sitting on a WindownServer(2019) where I connect to a Windown sql 2016 server. On my WindownServer I can connect to the SQL server through MS SQL Management Studio, so firewall and all that is ok. And my Windown AD… --- ## [Elasticsearch 7.3.1 - Help on three nodes cluster - Master not discovered yet](https://discuss.elastic.co/t/elasticsearch-7-3-1-help-on-three-nodes-cluster-master-not-discovered-yet/264706)
**Author:** [@dcenaculo](https://discuss.elastic.co/u/dcenaculo)\ **Replies:** 3\ **Last updated:** [February 19, 2021, 12:57pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-1-help-on-three-nodes-cluster-master-not-discovered-yet/264706 "2021-02-19T12:57:55Z")
Hi, I had Elasticsearch working well on the PORSCHE node. Then I tried to add two more nodes, OPEL and MORRIS. All on the same subnet. PORSCHE: 10.146.114.66 MORRIS: 10.146.114.89 OPEL: 10.146.114.88 This … --- ## [D365 cloud based solution](https://discuss.elastic.co/t/d365-cloud-based-solution/264664)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 1\ **Last updated:** [February 19, 2021, 12:02pm UTC](https://discuss.elastic.co/t/d365-cloud-based-solution/264664 "2021-02-19T12:02:43Z")
Hi There, Is it possible to extract the Dynamics 365 logs via filebeat? like Office 365 Hello, we're looking to better secure our Dynamics 365 instance, and we're wondering what were good options for logging admin e… --- ## [Possible to have KQL in Elastic?](https://discuss.elastic.co/t/possible-to-have-kql-in-elastic/264842)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 1\ **Last updated:** [February 19, 2021, 11:21am UTC](https://discuss.elastic.co/t/possible-to-have-kql-in-elastic/264842 "2021-02-19T11:21:05Z")
Dear all =) Is it possible to "execute" KQL in Elasticsearch? If not, does there exist a script/translator, so KQL can be converted to Lucene? Hugs, Sandra =) --- ## [Delete old rollover index](https://discuss.elastic.co/t/delete-old-rollover-index/263365)
**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\ **Replies:** 1\ **Last updated:** [February 19, 2021, 10:54am UTC](https://discuss.elastic.co/t/delete-old-rollover-index/263365 "2021-02-19T10:54:55Z")
Dear all I implemented a ILM policy { "metricbeat-7.10.2" : { "version" : 1, "modified\_date" : "2021-02-04T15:52:42.289Z", "policy" : { "phases" : { "hot" : { "min\_age" : "0ms", … --- ## [Should we need SSl to enable Alerts in kibana(watcher)? and please share query for alerts](https://discuss.elastic.co/t/should-we-need-ssl-to-enable-alerts-in-kibana-watcher-and-please-share-query-for-alerts/262593)
**Author:** [@Srikanth\_Kesireddy](https://discuss.elastic.co/u/Srikanth_Kesireddy)\ **Replies:** 1\ **Last updated:** [February 1, 2021, 12:49am UTC](https://discuss.elastic.co/t/should-we-need-ssl-to-enable-alerts-in-kibana-watcher-and-please-share-query-for-alerts/262593 "2021-02-01T00:49:54Z")
for enabling Xpack security and alerts should we need ssl ? --- ## [How to create multiple indexs with multiple input in logstash](https://discuss.elastic.co/t/how-to-create-multiple-indexs-with-multiple-input-in-logstash/264416)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 7\ **Last updated:** [February 19, 2021, 9:06am UTC](https://discuss.elastic.co/t/how-to-create-multiple-indexs-with-multiple-input-in-logstash/264416 "2021-02-19T09:06:02Z")
I would like to have some help to configure multiple indexes from multiple entries with logstash. Is my configuration below correct? input { tcp { port =\> "5140" codec =\> json type =\> "syslog" } tcp { port =\> "5… --- ## [Enlarge Cluster with new nodes](https://discuss.elastic.co/t/enlarge-cluster-with-new-nodes/263974)
**Author:** [@cadirol](https://discuss.elastic.co/u/cadirol)\ **Replies:** 9\ **Last updated:** [February 19, 2021, 8:57am UTC](https://discuss.elastic.co/t/enlarge-cluster-with-new-nodes/263974 "2021-02-19T08:57:32Z")
Hi all We are planing to enlarge our cluster with 16 nodes in the end. the first 16 nodes are 4 years old, but still healthy and good enough! But as you can imagine, 4 years ago, we added 4TB Disk space in each node. … --- ## [Query issue, dot in field value returning 0 hits](https://discuss.elastic.co/t/query-issue-dot-in-field-value-returning-0-hits/264819)
**Author:** [@Sampson\_Light](https://discuss.elastic.co/u/Sampson_Light)\ **Replies:** 0\ **Last updated:** [February 19, 2021, 8:43am UTC](https://discuss.elastic.co/t/query-issue-dot-in-field-value-returning-0-hits/264819 "2021-02-19T08:43:38Z")
Hello, There's an issue with the use of . in my field value. The sample below is a 'valid' query that returns some hits { "query": { "bool": { "must": \[ { "wildcard": { "Addre… --- ## [Why term query, keyword is faster than number](https://discuss.elastic.co/t/why-term-query-keyword-is-faster-than-number/264812)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 1\ **Last updated:** [February 19, 2021, 8:26am UTC](https://discuss.elastic.co/t/why-term-query-keyword-is-faster-than-number/264812 "2021-02-19T08:26:00Z")
I saw in https://www.elastic.co/guide/en/elasticsearch/reference/current/tune-for-search-speed.html#map-ids-as-keyword, in term query, keyword query The speed is faster than the digital type, but I am not sure what the r… --- ## [Kibana: export pre-configured dashboard as pdf/png](https://discuss.elastic.co/t/kibana-export-pre-configured-dashboard-as-pdf-png/264391)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 5\ **Last updated:** [February 19, 2021, 8:08am UTC](https://discuss.elastic.co/t/kibana-export-pre-configured-dashboard-as-pdf-png/264391 "2021-02-19T08:08:19Z")
We have the following use cases for working with Kibana: Use Case 1 We run automated performance tests using a Jenkins pipeline. We would like to be able to import a pre-configured dashboard at the start of the test, r… --- ## [All shards failed](https://discuss.elastic.co/t/all-shards-failed/264777)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [February 19, 2021, 8:08am UTC](https://discuss.elastic.co/t/all-shards-failed/264777 "2021-02-19T08:08:00Z")
I have been having a series of issues since the backup filled up the disks and ES ground to a halt. Cluster is now yellow and most indexes appear to be fine others have missing shards which I am working on. Searches ar… --- ## [Comparisons with empty strings](https://discuss.elastic.co/t/comparisons-with-empty-strings/264808)
**Author:** [@sultanao](https://discuss.elastic.co/u/sultanao)\ **Replies:** 0\ **Last updated:** [February 19, 2021, 7:41am UTC](https://discuss.elastic.co/t/comparisons-with-empty-strings/264808 "2021-02-19T07:41:56Z")
Hi, I am using Elasticsearch 6.6.0 and I noticed that this query: { "query": { "range": { "my\_alphanumeric\_field": { "from": "", "to": null, "include\_lower… --- ## [Cannot create Index Patterns of remote clusters - Kibana 7.10.0](https://discuss.elastic.co/t/cannot-create-index-patterns-of-remote-clusters-kibana-7-10-0/262206)
**Author:** [@Phandora](https://discuss.elastic.co/u/Phandora)\ **Replies:** 5\ **Last updated:** [February 19, 2021, 6:48am UTC](https://discuss.elastic.co/t/cannot-create-index-patterns-of-remote-clusters-kibana-7-10-0/262206 "2021-02-19T06:48:35Z")
Hi, we are facing some problems creating index patterns in the 7.10.0 version. When trying to create the index pattern of a remote cluster we got the error No matching indices found. However, the indexes do exist (the i… --- ## [Logstash adding unwanted "" & \\\\n to json input](https://discuss.elastic.co/t/logstash-adding-unwanted-n-to-json-input/264786)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 0\ **Last updated:** [February 19, 2021, 4:48am UTC](https://discuss.elastic.co/t/logstash-adding-unwanted-n-to-json-input/264786 "2021-02-19T04:48:39Z")
Hi, I have a log that I converted from plain text to json with JQ. I want to ingest this file into Elasticsearch as is. If I copy the text below add send it to Elasticsearch manually it shows up properly formatted etc. … --- ## [An assigned shards -- max retries exceeded](https://discuss.elastic.co/t/an-assigned-shards-max-retries-exceeded/264779)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [February 19, 2021, 3:10am UTC](https://discuss.elastic.co/t/an-assigned-shards-max-retries-exceeded/264779 "2021-02-19T03:10:40Z")
Running on 7.10 I have several indexes which have unassigned replica shards (although) the primaries are OK. For example: { "index" : "authm-000005", "shard" : 1, "primary" : false, "current\_state" : "unassign… --- ## [Logstash error on Raspberry Pi 4 running Ubuntu Server 20.04.2](https://discuss.elastic.co/t/logstash-error-on-raspberry-pi-4-running-ubuntu-server-20-04-2/264202)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 2\ **Last updated:** [February 19, 2021, 2:46am UTC](https://discuss.elastic.co/t/logstash-error-on-raspberry-pi-4-running-ubuntu-server-20-04-2/264202 "2021-02-19T02:46:40Z")
Hello, I'm running 64-bit version of Ubuntu Server 20.04.2 on a Raspberry Pi 4 (4 GB RAM, hardware revision 1.1) I've installed logstash using apt. Configuration being used on this Raspberry Pi work on a different boar… --- ## [TVSB add 12 month line to existing visualisation](https://discuss.elastic.co/t/tvsb-add-12-month-line-to-existing-visualisation/264776)
**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\ **Replies:** 1\ **Last updated:** [February 19, 2021, 1:44am UTC](https://discuss.elastic.co/t/tvsb-add-12-month-line-to-existing-visualisation/264776 "2021-02-19T01:44:56Z")
Hi All I have an existing suite of visualizations (TSVB) that show metrics over the past week. I would like to add a line to this TSVB visualization showing the same metric over the last 12 months so current weekly ups… --- ## [Map runtime field](https://discuss.elastic.co/t/map-runtime-field/263902)
**Author:** [@paasi6666](https://discuss.elastic.co/u/paasi6666)\ **Replies:** 1\ **Last updated:** [February 19, 2021, 12:50am UTC](https://discuss.elastic.co/t/map-runtime-field/263902 "2021-02-19T00:50:47Z")
I got following query which should create a new field: PUT filebeat\* { "mappings": { "runtime": { "sophos.utm.to.domain": { "type": "keyword", "script": { "source": "emit(def m = /@… --- ## [Elasticsearchでの１ホスト複数ノード設定](https://discuss.elastic.co/t/elasticsearch/263218)
**Author:** [@vavan](https://discuss.elastic.co/u/vavan)\ **Replies:** 2\ **Last updated:** [February 18, 2021, 11:55pm UTC](https://discuss.elastic.co/t/elasticsearch/263218 "2021-02-18T23:55:51Z")
現在、 elasticsearch 7.8.1でサービスを構築していますが、訳あって１インスタンスしかサーバが用意できず、その中でも対障害性を高める設定ができないか考えています。 せめてストレージの故障を回避するために、１ホスト、１クラスタ でも同一ホスト上に複数ノードを作成する前提で下記を考えています。 (1) 各ノードの data.pathを分ける (2) replica ＝1( 1 以上）にする １ホスト、１ク… --- ## [SIEM Detection alerts - Additional field adding in notification placeholders](https://discuss.elastic.co/t/siem-detection-alerts-additional-field-adding-in-notification-placeholders/264247)
**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\ **Replies:** 3\ **Last updated:** [February 18, 2021, 10:48pm UTC](https://discuss.elastic.co/t/siem-detection-alerts-additional-field-adding-in-notification-placeholders/264247 "2021-02-18T22:48:15Z")
Hi, How can i add additional fields in alert email action body in detection rules. I am using ELK 7.10. For eg: Need to include user.name and source.ip field in the rule alert in the body of alert email action. Rule L… --- ## [Collapse is not working Discover-Kibana](https://discuss.elastic.co/t/collapse-is-not-working-discover-kibana/264747)
**Author:** [@ssarnava](https://discuss.elastic.co/u/ssarnava)\ **Replies:** 2\ **Last updated:** [February 18, 2021, 10:21pm UTC](https://discuss.elastic.co/t/collapse-is-not-working-discover-kibana/264747 "2021-02-18T22:21:19Z")
My Requirement : Display latest entry (createdAt field) corresponding to a "trade.execID" in Kibana Discover. When I trigger this query from dev tools, getting expected result (single record) but when trying to use same … --- ## [Powershell alternative command for curl](https://discuss.elastic.co/t/powershell-alternative-command-for-curl/264679)
**Author:** [@Usman](https://discuss.elastic.co/u/Usman)\ **Replies:** 0\ **Last updated:** [February 18, 2021, 10:01am UTC](https://discuss.elastic.co/t/powershell-alternative-command-for-curl/264679 "2021-02-18T10:01:38Z")
Hi, I need the alternative for below command in windows power shell or .bat. curl --insecure -u user:password -X POST "https://hostname:443/\_reindex?pretty" -H 'Content-Type: application/json' -d' { "source": { "ind… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1041) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1043)