# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1127 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1128 --- ## [Indexing error "Index -1 out of bounds for length 0"](https://discuss.elastic.co/t/indexing-error-index-1-out-of-bounds-for-length-0/257379)
**Author:** [@hKerma](https://discuss.elastic.co/u/hKerma)\ **Replies:** 9\ **Last updated:** [December 3, 2020, 5:51pm UTC](https://discuss.elastic.co/t/indexing-error-index-1-out-of-bounds-for-length-0/257379 "2020-12-03T17:51:55Z")
Hi everyone, I want to use ELK stack to analyze some Kubernetes audit logs. They're sent to the Logstash webhook as JSON. Here's my config file : input{ http { port =\> 8888 codec =\> "json" type =\> "json" } }… --- ## [Find the unique transactions between passed and failed logs](https://discuss.elastic.co/t/find-the-unique-transactions-between-passed-and-failed-logs/257556)
**Author:** [@kartikr9107](https://discuss.elastic.co/u/kartikr9107)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 5:44pm UTC](https://discuss.elastic.co/t/find-the-unique-transactions-between-passed-and-failed-logs/257556 "2020-12-03T17:44:04Z")
I've created a visualization to show metrics like Total requests, Unique Tests(unique count of test field), Tests failed (Sum bucket with filter for failed tests unique count), Test passed(Sum bucket with filter for pass… --- ## [Add value to blank field](https://discuss.elastic.co/t/add-value-to-blank-field/257286)
**Author:** [@errupeshmca](https://discuss.elastic.co/u/errupeshmca)\ **Replies:** 6\ **Last updated:** [December 3, 2020, 4:56pm UTC](https://discuss.elastic.co/t/add-value-to-blank-field/257286 "2020-12-03T16:56:44Z")
Hi, I am running with an issue, I have a shipment date column which is having a blank value until your order is not shipped, so if the order is not shipped (you can say it's pending now) i want to add a value to that f… --- ## [Cosine Similarity Script Search does not work](https://discuss.elastic.co/t/cosine-similarity-script-search-does-not-work/257550)
**Author:** [@gustav\_z](https://discuss.elastic.co/u/gustav_z)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 4:37pm UTC](https://discuss.elastic.co/t/cosine-similarity-script-search-does-not-work/257550 "2020-12-03T16:37:54Z")
Similar to these un-answered and closed topics: https://discuss.elastic.co/t/cosine-similarity-not-working-in-elastic-search/209702 https://discuss.elastic.co/t/elasticsearch-search-error/232784 I am seeing the same E… --- ## [Getting aws internal ip when using dns plugin i want to see actual dns name like abc.test.com](https://discuss.elastic.co/t/getting-aws-internal-ip-when-using-dns-plugin-i-want-to-see-actual-dns-name-like-abc-test-com/257455)
**Author:** [@sujeetjha](https://discuss.elastic.co/u/sujeetjha)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 4:35pm UTC](https://discuss.elastic.co/t/getting-aws-internal-ip-when-using-dns-plugin-i-want-to-see-actual-dns-name-like-abc-test-com/257455 "2020-12-03T16:35:46Z")
Getting AWS internal IP (ip-11-11-11-11-amazon.com) when using DNS plugin I want to see actual DNS name like abc.test.com.. what should I do plz suggest... here is my code below # Beats -\> Logstash -\> Elasticsearch pip… --- ## [How to change date format in logstash?](https://discuss.elastic.co/t/how-to-change-date-format-in-logstash/257532)
**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 4:16pm UTC](https://discuss.elastic.co/t/how-to-change-date-format-in-logstash/257532 "2020-12-03T16:16:29Z")
My raw data comes in epoch format e.g. 430201865. I can parse this to UNIX using the date filter in logstash like so date { match =\> \["time", "UNIX"\] target =\> "timestamp" remove\_field =\> \["time"\] } This produces… --- ## [How to make the "Discover" tab data to Table view](https://discuss.elastic.co/t/how-to-make-the-discover-tab-data-to-table-view/257001)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 12\ **Last updated:** [December 3, 2020, 4:14pm UTC](https://discuss.elastic.co/t/how-to-make-the-discover-tab-data-to-table-view/257001 "2020-12-03T16:14:43Z")
Hi, Right now the default looks of the discover mode is not in table view, just wondering is there a setting to change the documents show in a table view, instead of document per document ? --- ## [Logstash Input Plugin Development with File Input Plugin](https://discuss.elastic.co/t/logstash-input-plugin-development-with-file-input-plugin/257486)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 4:07pm UTC](https://discuss.elastic.co/t/logstash-input-plugin-development-with-file-input-plugin/257486 "2020-12-03T16:07:20Z")
Hello, I would like to ask, if its possible to pass file input plugin output in a new\_input\_plugin. I mean like output of the file input plugin, will be the input of another input plugin. As an example, Read logs from… --- ## [How to create visualisation in kibana for stickiness(Ratio of DAU/MAU)](https://discuss.elastic.co/t/how-to-create-visualisation-in-kibana-for-stickiness-ratio-of-dau-mau/257340)
**Author:** [@dharanesh](https://discuss.elastic.co/u/dharanesh)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 3:59pm UTC](https://discuss.elastic.co/t/how-to-create-visualisation-in-kibana-for-stickiness-ratio-of-dau-mau/257340 "2020-12-03T15:59:34Z")
Hi, i am new to kibana, i created separate visualisation for DAU and MAU now i want to create another chats which shows Ratio of DAU and MAU, how to do this in kibana , is it possible to create charts for this in kibana. … --- ## [Kibana preserve custom time from dasboard to Discover](https://discuss.elastic.co/t/kibana-preserve-custom-time-from-dasboard-to-discover/257284)
**Author:** [@Rnx](https://discuss.elastic.co/u/Rnx)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 3:55pm UTC](https://discuss.elastic.co/t/kibana-preserve-custom-time-from-dasboard-to-discover/257284 "2020-12-03T15:55:28Z")
How to preserve chosen time in Kibana Dashboard by clicking on link to Discover panel? I need to view documents from specific time according to peaks in graphs in Dashboard. Therefore my chosen time is within 3-4 min ti… --- ## [Logstah reading from elastic daily based index name](https://discuss.elastic.co/t/logstah-reading-from-elastic-daily-based-index-name/257278)
**Author:** [@lecko](https://discuss.elastic.co/u/lecko)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 3:45pm UTC](https://discuss.elastic.co/t/logstah-reading-from-elastic-daily-based-index-name/257278 "2020-12-03T15:45:47Z")
Hello, I am new to logstash.I I want to get data out of elasticsearch and filter it and send it to some third party sw. With help of examples and docs the first draft seems to work. But the elasticsearch index name i… --- ## [Kibana requesting too many doc values](https://discuss.elastic.co/t/kibana-requesting-too-many-doc-values/147760)
**Author:** [@mightyguava](https://discuss.elastic.co/u/mightyguava)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 3:40pm UTC](https://discuss.elastic.co/t/kibana-requesting-too-many-doc-values/147760 "2020-12-03T15:40:07Z")
We have an elasticsearch cluster that indexes some events that flow through our system for debugging use. These events have pretty widely varying formats, so they end up generating a lot of different fields. Kibana maps … --- ## [Logstash with multiple input and output](https://discuss.elastic.co/t/logstash-with-multiple-input-and-output/257524)
**Author:** [@ck\_7](https://discuss.elastic.co/u/ck_7)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 3:18pm UTC](https://discuss.elastic.co/t/logstash-with-multiple-input-and-output/257524 "2020-12-03T15:18:56Z")
Help me to understand the below logstash config. Trying to configure multiples input and output but index shows only one. Here my config: There is no Error: logstash runs but no index name for the storage. only network… --- ## [Is it possible to combine two datatable from multiple essql filters](https://discuss.elastic.co/t/is-it-possible-to-combine-two-datatable-from-multiple-essql-filters/257290)
**Author:** [@tangkalo](https://discuss.elastic.co/u/tangkalo)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 3:23pm UTC](https://discuss.elastic.co/t/is-it-possible-to-combine-two-datatable-from-multiple-essql-filters/257290 "2020-12-03T15:23:32Z")
Hi, I have a data source like below: - TYPE VALUE A 123 A 234 B 890 A 789 B 085 I need to pull the latest record for each type i.e. there will be two rows in the resu… --- ## [Snapshot and restore : communication entre deux cluster](https://discuss.elastic.co/t/snapshot-and-restore-communication-entre-deux-cluster/257380)
**Author:** [@Dominique\_Lechaudel](https://discuss.elastic.co/u/Dominique_Lechaudel)\ **Replies:** 7\ **Last updated:** [December 3, 2020, 2:51pm UTC](https://discuss.elastic.co/t/snapshot-and-restore-communication-entre-deux-cluster/257380 "2020-12-03T14:51:06Z")
Bonjour, Je cherche à paramétrer la fonctionnalité snapshot/restore et utiliser un repository de type read-only URL pour utiliser le snapshot d'un autre cluster (communications prod/pre-prod) Les cluster sont protégés … --- ## [Receive Authorization Header Logstash Http Input Plugin](https://discuss.elastic.co/t/receive-authorization-header-logstash-http-input-plugin/257407)
**Author:** [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 2:18pm UTC](https://discuss.elastic.co/t/receive-authorization-header-logstash-http-input-plugin/257407 "2020-12-03T14:18:43Z")
Hi, I am using the HTTP input plugin to receive data from the postman with Basic Auth enabled, "Authorization" header is available in the postman response but when I print the data in logstash I don't see the Authorizat… --- ## [How to use context.panel.filters for drill down dashboard](https://discuss.elastic.co/t/how-to-use-context-panel-filters-for-drill-down-dashboard/256611)
**Author:** [@Atul\_Gunjal](https://discuss.elastic.co/u/Atul_Gunjal)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 2:13pm UTC](https://discuss.elastic.co/t/how-to-use-context-panel-filters-for-drill-down-dashboard/256611 "2020-12-03T14:13:28Z")
How to use context.panel.filters for drill-down dashboard from one to another so that filters applied in the first dashboard will be applied in second and dashboard will be opened in new tab using Url drill-down. --- ## [Failed to get my heatbeat.yml to be used](https://discuss.elastic.co/t/failed-to-get-my-heatbeat-yml-to-be-used/255827)
**Author:** [@Fredrik\_Cronholm](https://discuss.elastic.co/u/Fredrik_Cronholm)\ **Replies:** 9\ **Last updated:** [December 3, 2020, 2:05pm UTC](https://discuss.elastic.co/t/failed-to-get-my-heatbeat-yml-to-be-used/255827 "2020-12-03T14:05:55Z")
Hi! Tried it, but the pings (actually received to my clud instance) were to the default heartbeat.yml (2 http 2 icmp) inside the container (I believe that is what happened). In examples\\docker\\heartbeat.docker.yml: h… --- ## [Search without field name](https://discuss.elastic.co/t/search-without-field-name/257495)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 1:57pm UTC](https://discuss.elastic.co/t/search-without-field-name/257495 "2020-12-03T13:57:54Z")
Hi, I'm with Kibana 7.10, and in discover, I try to just search without the field name. It seems to me for some fields, this works, for others, not. For example, I have a string field fields.log\_type: "log-type" In Ki… --- ## [Logstash: error when use date filter](https://discuss.elastic.co/t/logstash-error-when-use-date-filter/257517)
**Author:** [@raistlin2912](https://discuss.elastic.co/u/raistlin2912)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 1:46pm UTC](https://discuss.elastic.co/t/logstash-error-when-use-date-filter/257517 "2020-12-03T13:46:01Z")
Hi, I'm setting up an ELK Stack to process some logs that are sent to us from AKAMAI. An example line: 2020-11-18 14:58:27 2.17.200.11 - - - - GET /unaurl.es/N3X3QDOPYNHGPO5R6ZYCEOWCNM.png - 200 1 36513 848 1 80 HTTP/1… --- ## [Elasticsearch dead but subsys locked](https://discuss.elastic.co/t/elasticsearch-dead-but-subsys-locked/257066)
**Author:** [@ItsMee](https://discuss.elastic.co/u/ItsMee)\ **Replies:** 5\ **Last updated:** [December 3, 2020, 1:33pm UTC](https://discuss.elastic.co/t/elasticsearch-dead-but-subsys-locked/257066 "2020-12-03T13:33:22Z")
Dear All, I have tried to restart the elasticsearch but getting 'elasticsearch dead but subsys locked' after start. I have removed the lock the file(elasticsearch) under /var/lock/subsys/ multiple times but no luck. Co… --- ## [How to relate elasticsearc event error to input log line?](https://discuss.elastic.co/t/how-to-relate-elasticsearc-event-error-to-input-log-line/257375)
**Author:** [@Bootta](https://discuss.elastic.co/u/Bootta)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 12:54pm UTC](https://discuss.elastic.co/t/how-to-relate-elasticsearc-event-error-to-input-log-line/257375 "2020-12-03T12:54:06Z")
Is there any way that I can link Elasticsearch error with my input logline so I can fix it? I'm trying to fix Elasticsearch event errors from large log file(500MB), so testing line by line is impossible. Here is Eleasti… --- ## [Unable to login when disk is full](https://discuss.elastic.co/t/unable-to-login-when-disk-is-full/257314)
**Author:** [@hazcod](https://discuss.elastic.co/u/hazcod)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 12:40pm UTC](https://discuss.elastic.co/t/unable-to-login-when-disk-is-full/257314 "2020-12-03T12:40:10Z")
Hi, I am unable to login into Kibana when my elasticsearch cluster is getting full. The log will contain: org.elasticsearch.xpack.monitoring.exporter.ExportException: CLusterBlockException: blocked by: \[TOO\_MANY\_REQUE… --- ## [Visualizations based on values](https://discuss.elastic.co/t/visualizations-based-on-values/257466)
**Author:** [@Niranjan\_Acharya](https://discuss.elastic.co/u/Niranjan_Acharya)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 11:14am UTC](https://discuss.elastic.co/t/visualizations-based-on-values/257466 "2020-12-03T11:14:53Z")
Hello all I am trying to create a visualization based on AWS logs, where I want to count the number of hits on a specific host. the host information is within the json as below. I tried all possible ways, but I cannot … --- ## [Kibana markdown hyperlink](https://discuss.elastic.co/t/kibana-markdown-hyperlink/257488)
**Author:** [@Tlm\_Konstantinos](https://discuss.elastic.co/u/Tlm_Konstantinos)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 11:04am UTC](https://discuss.elastic.co/t/kibana-markdown-hyperlink/257488 "2020-12-03T11:04:54Z")
Hi community I'm having the following issue. I have installed wazuh through docker on a machine and created a hyperlink in a markdown to a visualization(the hyperlink looks like localhost/../../). Im accessing the kiban… --- ## [LogLevel DEBUG and INFO not required](https://discuss.elastic.co/t/loglevel-debug-and-info-not-required/257484)
**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 10:07am UTC](https://discuss.elastic.co/t/loglevel-debug-and-info-not-required/257484 "2020-12-03T10:07:27Z")
We do not need DEBUG and INFO logs coming into ELK but only for one or more components e.g. hostname and index name. From below link add exclude\_lines for DEBUG and INFO - Exclude\_lines: \[‘^DEBUG’, ‘^INFO’\] but to inclu… --- ## [Logstash mutate error for hostname](https://discuss.elastic.co/t/logstash-mutate-error-for-hostname/257474)
**Author:** [@aaron111com](https://discuss.elastic.co/u/aaron111com)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 10:02am UTC](https://discuss.elastic.co/t/logstash-mutate-error-for-hostname/257474 "2020-12-03T10:02:15Z")
hi I meet a weird problem, I want to parse my hostname is "alexworkstation-alex", I wanna get the string "alexworkstation" , so I split the hostname by "-" . but I can't add\_field . this is follow with official do… --- ## [Mapping Issues](https://discuss.elastic.co/t/mapping-issues/257461)
**Author:** [@muaz761](https://discuss.elastic.co/u/muaz761)\ **Replies:** 9\ **Last updated:** [December 3, 2020, 9:56am UTC](https://discuss.elastic.co/t/mapping-issues/257461 "2020-12-03T09:56:10Z")
Hey, I am facing a problem with elastic search mapping. currently, my elastic search version is 1.7.2. When I index my data in a cluster it workes perfectly. But when I want to map it for search purposes it gives me an … --- ## [Logstash is not indexing data to elasticsearch](https://discuss.elastic.co/t/logstash-is-not-indexing-data-to-elasticsearch/257470)
**Author:** [@Aryaman\_Gupta](https://discuss.elastic.co/u/Aryaman_Gupta)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 9:52am UTC](https://discuss.elastic.co/t/logstash-is-not-indexing-data-to-elasticsearch/257470 "2020-12-03T09:52:58Z")
I am not able index data from logstash to elasticsearch, hence I am not able to view the data index at the kibana UI. This issue I saw only when, running the logstash command from the php file, I guess it's www-data use… --- ## [ElasticSearch running, problems connecting (ipTables problem)](https://discuss.elastic.co/t/elasticsearch-running-problems-connecting-iptables-problem/257468)
**Author:** [@Mikel\_U](https://discuss.elastic.co/u/Mikel_U)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 9:35am UTC](https://discuss.elastic.co/t/elasticsearch-running-problems-connecting-iptables-problem/257468 "2020-12-03T09:35:20Z")
Hi, I want to create 3 nodes of ES and Kibana in production network. I would like to see ES in local network (site) and Kibana from Internet. My first (master) node is running. If I put network.host: 0.0.0.0: I can c… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1126) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1128)