# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1171 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1172 --- ## [Date part in index names were removed automatically and the logs inside also removed](https://discuss.elastic.co/t/date-part-in-index-names-were-removed-automatically-and-the-logs-inside-also-removed/253990)
**Author:** [@Ibrahim\_ozbek](https://discuss.elastic.co/u/Ibrahim_ozbek)\ **Replies:** 0\ **Last updated:** [November 2, 2020, 8:13am UTC](https://discuss.elastic.co/t/date-part-in-index-names-were-removed-automatically-and-the-logs-inside-also-removed/253990 "2020-11-02T08:13:11Z")
I started sending data to elasticsearch via filebeat and metricbeat. The corresponding indexes were created and I worked on dashboards. After two or three days, the filebeat and metricbeat index names changed from filebe… --- ## [Kibana 空白のスペースの選択と表示される](https://discuss.elastic.co/t/kibana/253968)
**Author:** [@mo-ri](https://discuss.elastic.co/u/mo-ri)\ **Replies:** 6\ **Last updated:** [November 2, 2020, 8:01am UTC](https://discuss.elastic.co/t/kibana/253968 "2020-11-02T08:01:55Z")
初めて投稿致します。 elasticsearch 、kibanaを使って数ヶ月しか使っていない素人です。 環境は、AWSのEC2上にelasticsearch7.9.2、kibana7.9.2をインストールしています。 先週まで Webにて/5601にてkibanaの画面が表示され、 AWSからのデータの投入も確認でき、visualizeやDashboardも作成しておりました。 平日は問題なく、kibanaのhome画面が表… --- ## [REST return Json object - How to push it to Logstash C#?](https://discuss.elastic.co/t/rest-return-json-object-how-to-push-it-to-logstash-c/253533)
**Author:** [@yaharin\_ben\_ayon](https://discuss.elastic.co/u/yaharin_ben_ayon)\ **Replies:** 3\ **Last updated:** [November 2, 2020, 5:35am UTC](https://discuss.elastic.co/t/rest-return-json-object-how-to-push-it-to-logstash-c/253533 "2020-11-02T05:35:28Z")
Hey I have a json object returning from a rest call - how can i push it to logstash? The code is in C#. Thanks! --- ## [Snapshot restore to test server](https://discuss.elastic.co/t/snapshot-restore-to-test-server/253975)
**Author:** [@bhuvaneshdct](https://discuss.elastic.co/u/bhuvaneshdct)\ **Replies:** 0\ **Last updated:** [November 2, 2020, 4:34am UTC](https://discuss.elastic.co/t/snapshot-restore-to-test-server/253975 "2020-11-02T04:34:40Z")
Im a bit confused about the ES restore process. I have a prod cluster and stage cluster. Prod cluster has daily snapshots enabled. The first time when I restored the snapshot from the prod backup it took a lot more ti… --- ## [Not able to start the elasticsearch service](https://discuss.elastic.co/t/not-able-to-start-the-elasticsearch-service/252722)
**Author:** [@narayask](https://discuss.elastic.co/u/narayask)\ **Replies:** 4\ **Last updated:** [November 2, 2020, 4:08am UTC](https://discuss.elastic.co/t/not-able-to-start-the-elasticsearch-service/252722 "2020-11-02T04:08:14Z")
Hi Team, Getting below error while starting the elastic service for version elasticsearch-7.8.1-amd64.deb elasticsearch-7.7.0-amd64.deb on ubuntu system and getting below error. Please do the needful. \[2020-10-20T1… --- ## [Transverse through multiple buckets](https://discuss.elastic.co/t/transverse-through-multiple-buckets/253974)
**Author:** [@gokul275](https://discuss.elastic.co/u/gokul275)\ **Replies:** 0\ **Last updated:** [November 2, 2020, 4:01am UTC](https://discuss.elastic.co/t/transverse-through-multiple-buckets/253974 "2020-11-02T04:01:37Z")
I am trying to achieve bucket script aggregation for value derived from multiple sub aggregation, how to transverse to the derived value My query looks like below POST /sales/\_search { "size": 0, "aggs": { "sales\_p… --- ## [Geoip filter](https://discuss.elastic.co/t/geoip-filter/253960)
**Author:** [@Ronnie\_Raraihuru](https://discuss.elastic.co/u/Ronnie_Raraihuru)\ **Replies:** 3\ **Last updated:** [November 2, 2020, 3:01am UTC](https://discuss.elastic.co/t/geoip-filter/253960 "2020-11-02T03:01:46Z")
My sample log contents #Fields: date-time,connector-id,session-id,sequence-number,local-endpoint,remote-endpoint,event,data,context 2020-10-22T23:59:53.533Z,SIG-EXCH13-01\\Default Frontend SIG-EXCH13-01,08D8724E3CB78EDF… --- ## [ElasticSearch Logs to Filebeat](https://discuss.elastic.co/t/elasticsearch-logs-to-filebeat/253944)
**Author:** [@Prasad\_Rajassekaran](https://discuss.elastic.co/u/Prasad_Rajassekaran)\ **Replies:** 2\ **Last updated:** [November 2, 2020, 1:41am UTC](https://discuss.elastic.co/t/elasticsearch-logs-to-filebeat/253944 "2020-11-02T01:41:52Z")
I am a novice to elasticsearch and filebeat. I wish to load all the elasticsearch logs to filebeat. Can you someone guide me please? --- ## [Pasar consulta de agregación geodistance a java](https://discuss.elastic.co/t/pasar-consulta-de-agregacion-geodistance-a-java/253946)
**Author:** [@hugofajardo1](https://discuss.elastic.co/u/hugofajardo1)\ **Replies:** 1\ **Last updated:** [November 1, 2020, 9:50pm UTC](https://discuss.elastic.co/t/pasar-consulta-de-agregacion-geodistance-a-java/253946 "2020-11-01T21:50:16Z")
Hola. Tengo una consulta funcionando desde Kibana y necesito pasarla a un proyecto Spring desde Java. Estoy hace varios días sin poder hacerla funcionar desde Java. Si pueden ayudarme esteré agradecido: GET accidentes/\_… --- ## [Two inputs Logstash](https://discuss.elastic.co/t/two-inputs-logstash/253958)
**Author:** [@yaharin\_ben\_ayon](https://discuss.elastic.co/u/yaharin_ben_ayon)\ **Replies:** 1\ **Last updated:** [November 1, 2020, 7:58pm UTC](https://discuss.elastic.co/t/two-inputs-logstash/253958 "2020-11-01T19:58:17Z")
Can i use two inputs in the config file? HTTP and File? --- ## [Score multiple phrases against single document](https://discuss.elastic.co/t/score-multiple-phrases-against-single-document/253948)
**Author:** [@JGor](https://discuss.elastic.co/u/JGor)\ **Replies:** 0\ **Last updated:** [November 1, 2020, 3:54pm UTC](https://discuss.elastic.co/t/score-multiple-phrases-against-single-document/253948 "2020-11-01T15:54:27Z")
Hi, I'm wondering how I could achieve the following: Let's say I have 100 search phrases (each search phrase contains multiple words), is it possible to construct a query that would check all of them against a text fiel… --- ## [Translate geodistance aggregation query to Java](https://discuss.elastic.co/t/translate-geodistance-aggregation-query-to-java/253947)
**Author:** [@hugofajardo1](https://discuss.elastic.co/u/hugofajardo1)\ **Replies:** 0\ **Last updated:** [November 1, 2020, 3:44pm UTC](https://discuss.elastic.co/t/translate-geodistance-aggregation-query-to-java/253947 "2020-11-01T15:44:08Z")
I need to translate a geodistance aggregation query to Java. This aggregation is working from Kibana, but I can't do it from Java: GET accidentes/\_search { "aggs": { "location": { "filter": { "geo\_distance": { "di… --- ## [\ Use StaticDate and Time for Dev Env and CurrentDateTime for Prod Env](https://discuss.elastic.co/t/ruby-use-staticdate-and-time-for-dev-env-and-currentdatetime-for-prod-env/253925)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 1\ **Last updated:** [November 1, 2020, 3:29pm UTC](https://discuss.elastic.co/t/ruby-use-staticdate-and-time-for-dev-env-and-currentdatetime-for-prod-env/253925 "2020-11-01T15:29:01Z")
I have a requirement where I need to use specific date/time for a testing at Ruby scripts and not at Logstash level. Is there a way i could stub those value? Currently I am using the enviorment variable to check if it i… --- ## [Elasticsearch ignoring serviceAccountName setting](https://discuss.elastic.co/t/elasticsearch-ignoring-serviceaccountname-setting/253942)
**Author:** [@larslevie](https://discuss.elastic.co/u/larslevie)\ **Replies:** 1\ **Last updated:** [November 1, 2020, 3:05pm UTC](https://discuss.elastic.co/t/elasticsearch-ignoring-serviceaccountname-setting/253942 "2020-11-01T15:05:24Z")
I have an Elasticsearch cluster created by the ECK operator. But the operator is not adding the Kube service account name to the pod templates. Here is the Elasticsearch config (truncated for brevity): apiVersion: elas… --- ## [Elasticsearch Slowlog methodology clarification](https://discuss.elastic.co/t/elasticsearch-slowlog-methodology-clarification/253940)
**Author:** [@wittydavid](https://discuss.elastic.co/u/wittydavid)\ **Replies:** 0\ **Last updated:** [November 1, 2020, 2:35pm UTC](https://discuss.elastic.co/t/elasticsearch-slowlog-methodology-clarification/253940 "2020-11-01T14:35:14Z")
Hi all, I've read through several sources on slowlogs and I can't get my head around how should I configure it. To my understanding the granularity of the elasticsearch logging levels are from low to high: WARN, INFO, … --- ## [Failing the date epoch\_second query](https://discuss.elastic.co/t/failing-the-date-epoch-second-query/253129)
**Author:** [@chintushah46](https://discuss.elastic.co/u/chintushah46)\ **Replies:** 1\ **Last updated:** [November 1, 2020, 12:54pm UTC](https://discuss.elastic.co/t/failing-the-date-epoch-second-query/253129 "2020-11-01T12:54:27Z")
Hi, Mapping of the field, "date": { "type": "date", "format": "epoch\_second" }, Query, {"query": {"range": {"date": {"lt": 1602785608.0}}}} The same query was working fine with Elasticsearch v6.3, but as soon as I u… --- ## [Navigation to kibana discover logs from grafana fails](https://discuss.elastic.co/t/navigation-to-kibana-discover-logs-from-grafana-fails/253854)
**Author:** [@Sadish\_Kumar](https://discuss.elastic.co/u/Sadish_Kumar)\ **Replies:** 3\ **Last updated:** [November 1, 2020, 12:32pm UTC](https://discuss.elastic.co/t/navigation-to-kibana-discover-logs-from-grafana-fails/253854 "2020-11-01T12:32:20Z")
HI team, I have a grafana dashboard with line graph. i want to navigate to kibana logs with corresponding time range provided by grafana. But kibana does nt show the logs on discover. it fails due to time value. This o… --- ## [No DevTools menu in Kibana 7.9.2](https://discuss.elastic.co/t/no-devtools-menu-in-kibana-7-9-2/253930)
**Author:** [@aLuViAn](https://discuss.elastic.co/u/aLuViAn)\ **Replies:** 2\ **Last updated:** [November 1, 2020, 9:45am UTC](https://discuss.elastic.co/t/no-devtools-menu-in-kibana-7-9-2/253930 "2020-11-01T09:45:01Z")
Installed ELK stack latest version (elastic,logstash,kibana) to do some testing with nginx log analyze that is being forwarded to syslog. After installation and preliminary configuration, I ran into some issues with the … --- ## [What are the essential ecs items in elastic siem?](https://discuss.elastic.co/t/what-are-the-essential-ecs-items-in-elastic-siem/253509)
**Author:** [@111387](https://discuss.elastic.co/u/111387)\ **Replies:** 10\ **Last updated:** [November 1, 2020, 4:52am UTC](https://discuss.elastic.co/t/what-are-the-essential-ecs-items-in-elastic-siem/253509 "2020-11-01T04:52:22Z")
I collected syslogs of security devices (WAF, IPS, IDS (suricata), anti-DDoS) by filebeat, delivered to logstash, and stacked them in elastisearch. I know that using filebeat, it automatically makes it into ecs format, … --- ## [Elasticsearch appears to be unreachable or down](https://discuss.elastic.co/t/elasticsearch-appears-to-be-unreachable-or-down/253751)
**Author:** [@rgovinda](https://discuss.elastic.co/u/rgovinda)\ **Replies:** 3\ **Last updated:** [October 31, 2020, 1:44pm UTC](https://discuss.elastic.co/t/elasticsearch-appears-to-be-unreachable-or-down/253751 "2020-10-31T13:44:41Z")
We suddenly started seeing a huge increase ( from single digits to hundreds) in the error "Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down!}" This is causing signi… --- ## [No 'Access-Control-Allow-Origin' header is present on requested resource](https://discuss.elastic.co/t/no-access-control-allow-origin-header-is-present-on-requested-resource/253914)
**Author:** [@aideveloper](https://discuss.elastic.co/u/aideveloper)\ **Replies:** 0\ **Last updated:** [October 31, 2020, 10:02pm UTC](https://discuss.elastic.co/t/no-access-control-allow-origin-header-is-present-on-requested-resource/253914 "2020-10-31T22:02:50Z")
Our elasticsearch setup has the following cors settings in elasticsearch.yml: http.cors.enabled: true http.cors.allow-credentials: true http.cors.allow-origin: "\*" http.cors.allow-methods: OPTIONS,HEAD,GET,POST,PUT,DELE… --- ## [Documents deleted from all indices](https://discuss.elastic.co/t/documents-deleted-from-all-indices/253900)
**Author:** [@venku](https://discuss.elastic.co/u/venku)\ **Replies:** 6\ **Last updated:** [October 31, 2020, 4:22pm UTC](https://discuss.elastic.co/t/documents-deleted-from-all-indices/253900 "2020-10-31T16:22:55Z")
I am running a single ElasticSearch node for past week and half and my ILM policy was to delete the index if it is 10 days old after the rollover. I have a day or 5GB limit to move from hot to delete phase. However when … --- ## [Kibana Visualizations Doubt](https://discuss.elastic.co/t/kibana-visualizations-doubt/253130)
**Author:** [@Jose\_Angel\_Morena\_Si](https://discuss.elastic.co/u/Jose_Angel_Morena_Si)\ **Replies:** 2\ **Last updated:** [October 31, 2020, 2:06pm UTC](https://discuss.elastic.co/t/kibana-visualizations-doubt/253130 "2020-10-31T14:06:02Z")
Hello there, I am using metricbeat, filebeat and auditbeat, default dashboards, they are great! The problem is that I am only interested in a few from the hundreds of visualizations they provide. Is there a quick/aut… --- ## [How to show the JSON spring boot logs as a seperate fields out of the messages in the table format](https://discuss.elastic.co/t/how-to-show-the-json-spring-boot-logs-as-a-seperate-fields-out-of-the-messages-in-the-table-format/253424)
**Author:** [@Aathithiyan](https://discuss.elastic.co/u/Aathithiyan)\ **Replies:** 2\ **Last updated:** [October 31, 2020, 2:02pm UTC](https://discuss.elastic.co/t/how-to-show-the-json-spring-boot-logs-as-a-seperate-fields-out-of-the-messages-in-the-table-format/253424 "2020-10-31T14:02:43Z")
Hi, I have a task that i need to view the spring boot JSON logs in the table format. It should not dump into the message field of kibana. It has to view as a seperate field in the table format. Eg: EmployeeId 123 Emp… --- ## [Graph of Simultaneous user numbers](https://discuss.elastic.co/t/graph-of-simultaneous-user-numbers/253763)
**Author:** [@elkrocks](https://discuss.elastic.co/u/elkrocks)\ **Replies:** 1\ **Last updated:** [October 31, 2020, 1:41pm UTC](https://discuss.elastic.co/t/graph-of-simultaneous-user-numbers/253763 "2020-10-31T13:41:03Z")
Hi, How can I show a graph of simultaneous user numbers accessing my site? Thanks --- ## [Usuário read-only](https://discuss.elastic.co/t/usuario-read-only/253859)
**Author:** [@dicto](https://discuss.elastic.co/u/dicto)\ **Replies:** 1\ **Last updated:** [October 31, 2020, 11:59am UTC](https://discuss.elastic.co/t/usuario-read-only/253859 "2020-10-31T11:59:08Z")
Olá! Deixe me explicar o que está acontecendo: Tenho um Dashboard Kibana 100% operacional, tudo OK. Conforme a documentação do Elastic para que eu possa dar acesso read-only a este dashboard eu devo criar uma Role e u… --- ## [Externalization of hosts settings in output](https://discuss.elastic.co/t/externalization-of-hosts-settings-in-output/253680)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 5\ **Last updated:** [October 31, 2020, 6:33am UTC](https://discuss.elastic.co/t/externalization-of-hosts-settings-in-output/253680 "2020-10-31T06:33:28Z")
Hi, I have a logstash indexing to 3 elasticsearch nodes. The output filter is as below: elasticsearch { hosts =\> \[ "https://myHost9a.vsi.uat.dbs.com:9202", "https://myHost10a.vsi.uat.dbs.com:9202", "https://myHost11… --- ## [Upgrade from 7.9.0 to 7.9.3](https://discuss.elastic.co/t/upgrade-from-7-9-0-to-7-9-3/253779)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 2\ **Last updated:** [October 31, 2020, 2:06am UTC](https://discuss.elastic.co/t/upgrade-from-7-9-0-to-7-9-3/253779 "2020-10-31T02:06:59Z")
Hi all, I have issue when I'm trying to upgrde from 7.9.0 to 7.9.3, the elasticsearch can't start. After several minutes to investigate, I think it related to the jvm.options, because I have several times upgrading ela… --- ## [How to aggregate (nested) product attributes](https://discuss.elastic.co/t/how-to-aggregate-nested-product-attributes/253882)
**Author:** [@itscaiquearaujo](https://discuss.elastic.co/u/itscaiquearaujo)\ **Replies:** 0\ **Last updated:** [October 31, 2020, 1:19am UTC](https://discuss.elastic.co/t/how-to-aggregate-nested-product-attributes/253882 "2020-10-31T01:19:30Z")
I have a really simple index with the following mapping: PUT /localindex-products { "mappings": { "properties": { "name": { "type": "text" }, "sku": { "type": "keyword" }, "description": { "type"… --- ## [Мониторинг изменения значения поля с течением времени](https://discuss.elastic.co/t/topic/253796)
**Author:** [@nikita\_zubrinovich](https://discuss.elastic.co/u/nikita_zubrinovich)\ **Replies:** 5\ **Last updated:** [October 31, 2020, 12:20am UTC](https://discuss.elastic.co/t/topic/253796 "2020-10-31T00:20:40Z")
Добрый день, у меня есть индекс с примерно такой структурой: { "timestamp": "ts1", "Status": "Available", "serviceId": "1" }, { "timestamp": "ts2", "Status": "Unavailable", "serviceId… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1170) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1172)