# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1172 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1173 --- ## [Мониторинг изменения значения поля с течением времени](https://discuss.elastic.co/t/topic/253796)
**Author:** [@nikita\_zubrinovich](https://discuss.elastic.co/u/nikita_zubrinovich)\ **Replies:** 5\ **Last updated:** [October 31, 2020, 12:20am UTC](https://discuss.elastic.co/t/topic/253796 "2020-10-31T00:20:40Z")
Добрый день, у меня есть индекс с примерно такой структурой: { "timestamp": "ts1", "Status": "Available", "serviceId": "1" }, { "timestamp": "ts2", "Status": "Unavailable", "serviceId… --- ## [Custom the logstash java-Filter meet problem(cannot create task "gem")](https://discuss.elastic.co/t/custom-the-logstash-java-filter-meet-problem-cannot-create-task-gem/253774)
**Author:** [@xiaoping1993](https://discuss.elastic.co/u/xiaoping1993)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 11:45pm UTC](https://discuss.elastic.co/t/custom-the-logstash-java-filter-meet-problem-cannot-create-task-gem/253774 "2020-10-30T23:45:56Z")
I want to custom the logstash java-Filter follow the url:https://www.elastic.co/guide/en/logstash/7.6/java-filter-plugin.html but I meet a problem when I run "gradlew gem" the error is below --- ## [Snapshot completed with success but archive creation failed](https://discuss.elastic.co/t/snapshot-completed-with-success-but-archive-creation-failed/253866)
**Author:** [@alita](https://discuss.elastic.co/u/alita)\ **Replies:** 0\ **Last updated:** [October 30, 2020, 9:15pm UTC](https://discuss.elastic.co/t/snapshot-completed-with-success-but-archive-creation-failed/253866 "2020-10-30T21:15:20Z")
Hi folks, I created a snapshot using the following curl command: curl -X PUT "localhost:9200/\_snapshot/my\_backup/snapshot\_1?wait\_for\_completion=true&pretty" After the snapshot completed with success, I execute a simp… --- ## [Setting up Okta instegration for Cloud Elastic](https://discuss.elastic.co/t/setting-up-okta-instegration-for-cloud-elastic/253734)
**Author:** [@Beefstew](https://discuss.elastic.co/u/Beefstew)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 8:10pm UTC](https://discuss.elastic.co/t/setting-up-okta-instegration-for-cloud-elastic/253734 "2020-10-30T20:10:56Z")
Hi there, could anyone please provide some intuitive doco explaining the steps to Integrate Azure Elastic authentication to Okta using SAML Thank you --- ## [Проблема с выводом данных geo\_point в ELK](https://discuss.elastic.co/t/geo-point-elk/253822)
**Author:** [@Mihail982012](https://discuss.elastic.co/u/Mihail982012)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 8:07pm UTC](https://discuss.elastic.co/t/geo-point-elk/253822 "2020-10-30T20:07:13Z")
Добрый день! У меня есть необходимость обработать собственные данные некоторых логов Пример: 86.250.174.21 65507 191.96.36.126 30494 ExploitAttempt 6 Данные поступают в Logstash, его конфиг: filter { grok { … --- ## [Kibana primeiros passos](https://discuss.elastic.co/t/kibana-primeiros-passos/239860)
**Author:** [@dicto](https://discuss.elastic.co/u/dicto)\ **Replies:** 4\ **Last updated:** [October 30, 2020, 7:48pm UTC](https://discuss.elastic.co/t/kibana-primeiros-passos/239860 "2020-10-30T19:48:48Z")
Olá pessoal! Consegui finalmente carregar dados em meu Elasticsearch cloud. Porém preciso agora executar os primeiros passos para visualizar estes dados no Kibana. Existe algum material resumido para estes primeiros p… --- ## [Error when updating an array element object using java rest client api](https://discuss.elastic.co/t/error-when-updating-an-array-element-object-using-java-rest-client-api/253835)
**Author:** [@gtoor](https://discuss.elastic.co/u/gtoor)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 7:44pm UTC](https://discuss.elastic.co/t/error-when-updating-an-array-element-object-using-java-rest-client-api/253835 "2020-10-30T19:44:51Z")
I am trying to update an array element in the document. The update should replace an existing element. This is what the document looks like "first" : "johnny", "last" : "gaudreau", "elements" : \[ { … --- ## [Can not decode Citrix Netscaler IPFIX messages](https://discuss.elastic.co/t/can-not-decode-citrix-netscaler-ipfix-messages/244654)
**Author:** [@tkuronen](https://discuss.elastic.co/u/tkuronen)\ **Replies:** 7\ **Last updated:** [October 30, 2020, 7:17pm UTC](https://discuss.elastic.co/t/can-not-decode-citrix-netscaler-ipfix-messages/244654 "2020-10-30T19:17:17Z")
Is anyone here successfully decoded a IPFIX data send by Citrix Netscaler ? Version: Logstash (7.7.1) / logstash-codec-netflow (4.2.1) Operating System: RHEL 7.8 Logstash Input config: input { udp { id =\> … --- ## [TLS config issues?](https://discuss.elastic.co/t/tls-config-issues/253602)
**Author:** [@jcor](https://discuss.elastic.co/u/jcor)\ **Replies:** 10\ **Last updated:** [October 30, 2020, 5:41pm UTC](https://discuss.elastic.co/t/tls-config-issues/253602 "2020-10-30T17:41:03Z")
I'm trying to setup tls on ELK. I have tls and https working between elastic and kibana but no luck with logstash. Below are the logstash configs. I've followed this guide almost to the T till step 7 besides swapping dns… --- ## [Low performance while searching](https://discuss.elastic.co/t/low-performance-while-searching/253746)
**Author:** [@Phandora](https://discuss.elastic.co/u/Phandora)\ **Replies:** 4\ **Last updated:** [October 30, 2020, 4:15pm UTC](https://discuss.elastic.co/t/low-performance-while-searching/253746 "2020-10-30T16:15:17Z")
Hi, We are experiencing a low searching performance in our Kubernetes ES cluster. We have a 5 node ES cluster with the following specifications per node: ES\_JAVA\_OPTS: -Xms4096m -Xmx4096m Cpu request: 500m Cpu limi… --- ## [Pipeline-to-Pipeline Configuration Does Not Work with TLS Cluster](https://discuss.elastic.co/t/pipeline-to-pipeline-configuration-does-not-work-with-tls-cluster/253692)
**Author:** [@sivanov](https://discuss.elastic.co/u/sivanov)\ **Replies:** 3\ **Last updated:** [October 30, 2020, 4:19pm UTC](https://discuss.elastic.co/t/pipeline-to-pipeline-configuration-does-not-work-with-tls-cluster/253692 "2020-10-30T16:19:25Z")
Hi guys, I have an ECK cluster that receives logs from Logstash. Logstash is deployed and running as a k8s /deployment/ pod next to that cluster. Filebeat (deployed elsewhere) is used to read logs and ship them to Logst… --- ## [TSVB Table view not picking up multi-field mapping properly](https://discuss.elastic.co/t/tsvb-table-view-not-picking-up-multi-field-mapping-properly/253799)
**Author:** [@benji87](https://discuss.elastic.co/u/benji87)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 3:20pm UTC](https://discuss.elastic.co/t/tsvb-table-view-not-picking-up-multi-field-mapping-properly/253799 "2020-10-30T15:20:20Z")
Hi all, I have a date field that uses the standard format of MMM D, YYYY @ HH:mm:ss.SSS I also wanted a simplified version of this field that only includes the date and drops the time, so I created a new multi-field ma… --- ## [Linking A Space to a Graph](https://discuss.elastic.co/t/linking-a-space-to-a-graph/253604)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 3:18pm UTC](https://discuss.elastic.co/t/linking-a-space-to-a-graph/253604 "2020-10-30T15:18:07Z")
Hi, I have created Spaces dedicated to specific groups. When they log in they see only the Dashboards allocated to that Space. There is, however, one link that points to a Graph but when clicked, I get: |statusCode|40… --- ## [Illegal\_argument\_exception](https://discuss.elastic.co/t/illegal-argument-exception/253827)
**Author:** [@fredrick.bb](https://discuss.elastic.co/u/fredrick.bb)\ **Replies:** 3\ **Last updated:** [October 30, 2020, 2:43pm UTC](https://discuss.elastic.co/t/illegal-argument-exception/253827 "2020-10-30T14:43:09Z")
Hi, I had created index and constructed Visualization every thing was working perfectly. But today when I search in kibana, I got a popup saying that 1 of 33 shards failed, with below exception Text fields are not opt… --- ## [Cron job for CSV filter](https://discuss.elastic.co/t/cron-job-for-csv-filter/253744)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 3\ **Last updated:** [October 30, 2020, 2:41pm UTC](https://discuss.elastic.co/t/cron-job-for-csv-filter/253744 "2020-10-30T14:41:04Z")
Hi All, I am using logstash to upload data into Elastic, we have been using csv filter to upload the data, i need to run this csv file on a every 15 minute frequency. csv filter doesnot allow "schedule" , how do i set… --- ## [Creating new scripted field to showing time difference between 2 log lines](https://discuss.elastic.co/t/creating-new-scripted-field-to-showing-time-difference-between-2-log-lines/253112)
**Author:** [@singyim817](https://discuss.elastic.co/u/singyim817)\ **Replies:** 3\ **Last updated:** [October 30, 2020, 2:28pm UTC](https://discuss.elastic.co/t/creating-new-scripted-field-to-showing-time-difference-between-2-log-lines/253112 "2020-10-30T14:28:49Z")
Hi there, I got a similar situation like this. I have assigned a unique ID for each pair of lines, then I need to calculate the transaction time in second between the datetime value in these lines, finally display on … --- ## [Seemingly can't connect to endpointBase from AWS Server](https://discuss.elastic.co/t/seemingly-cant-connect-to-endpointbase-from-aws-server/250235)
**Author:** [@spadel](https://discuss.elastic.co/u/spadel)\ **Replies:** 19\ **Last updated:** [October 30, 2020, 2:20pm UTC](https://discuss.elastic.co/t/seemingly-cant-connect-to-endpointbase-from-aws-server/250235 "2020-10-30T14:20:54Z")
I am trying to host an Elasticsearch Application on an AWS Server. For this purpose I am using Elastic Enterprise Search. I configured the API connector as follows: const connector = new AppSearchAPIConnector({ search… --- ## [How to format aggregation output in kibana visualization](https://discuss.elastic.co/t/how-to-format-aggregation-output-in-kibana-visualization/253769)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 7\ **Last updated:** [October 30, 2020, 1:44pm UTC](https://discuss.elastic.co/t/how-to-format-aggregation-output-in-kibana-visualization/253769 "2020-10-30T13:44:04Z")
I want to format output in Overall Average of Average system.cpu.total.norm.pct to percentage I red that I can use painless script in kibana vizulization creator. I could now found the proper syntax. How can I… --- ## [Kibana Watcher Advanced query is not working as expected](https://discuss.elastic.co/t/kibana-watcher-advanced-query-is-not-working-as-expected/253617)
**Author:** [@fredrick.bb](https://discuss.elastic.co/u/fredrick.bb)\ **Replies:** 4\ **Last updated:** [October 30, 2020, 1:42pm UTC](https://discuss.elastic.co/t/kibana-watcher-advanced-query-is-not-working-as-expected/253617 "2020-10-30T13:42:23Z")
Hello I'm finding hard time to have working query to execute Kibana Watcher. I feel my condition and query is correct but it didn't execute as per the condition. Could you confirm what is wrong in this? { "trigger": … --- ## [How can I pattern match a sequence of events?](https://discuss.elastic.co/t/how-can-i-pattern-match-a-sequence-of-events/253246)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 5\ **Last updated:** [October 30, 2020, 1:36pm UTC](https://discuss.elastic.co/t/how-can-i-pattern-match-a-sequence-of-events/253246 "2020-10-30T13:36:47Z")
Hi guys, I'am having a steep learning curve with the syntax. I have a sequence of transactions with timestamps, and when a transaction comes with some values in certain fields, I need to check if in the next 30 seconds … --- ## [What does this "Attention" banner mean on my Kibana site?](https://discuss.elastic.co/t/what-does-this-attention-banner-mean-on-my-kibana-site/253328)
**Author:** [@sdtbone](https://discuss.elastic.co/u/sdtbone)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 1:26pm UTC](https://discuss.elastic.co/t/what-does-this-attention-banner-mean-on-my-kibana-site/253328 "2020-10-30T13:26:17Z")
I'm not finding anything in the logs. Everything seems to be working fine. What does this mean? --- ## [ES 6.5.3 : having two separate logstash configuration files (and separate indexes) is causing fields from one index to bleed into the other](https://discuss.elastic.co/t/es-6-5-3-having-two-separate-logstash-configuration-files-and-separate-indexes-is-causing-fields-from-one-index-to-bleed-into-the-other/253736)
**Author:** [@terry433iid](https://discuss.elastic.co/u/terry433iid)\ **Replies:** 3\ **Last updated:** [October 30, 2020, 1:23pm UTC](https://discuss.elastic.co/t/es-6-5-3-having-two-separate-logstash-configuration-files-and-separate-indexes-is-causing-fields-from-one-index-to-bleed-into-the-other/253736 "2020-10-30T13:23:41Z")
I have two logstash configuration files - when I run logstash it is creating a bizarre situation where one of the indexes from config1 has fields from the other index in config2 See below for steps :- Create an index … --- ## [Embed visualization via iframe without menus, options, editor, etc](https://discuss.elastic.co/t/embed-visualization-via-iframe-without-menus-options-editor-etc/253712)
**Author:** [@nate.goodwin](https://discuss.elastic.co/u/nate.goodwin)\ **Replies:** 6\ **Last updated:** [October 30, 2020, 12:11pm UTC](https://discuss.elastic.co/t/embed-visualization-via-iframe-without-menus-options-editor-etc/253712 "2020-10-30T12:11:59Z")
I want to embed a visualization in an iframe, but I want just the part inside the red rectangle, how can I do this? --- ## [Parsing query with @timestamp range](https://discuss.elastic.co/t/parsing-query-with-timestamp-range/253399)
**Author:** [@TKul6](https://discuss.elastic.co/u/TKul6)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 11:54am UTC](https://discuss.elastic.co/t/parsing-query-with-timestamp-range/253399 "2020-10-30T11:54:42Z")
Hi, Assuming I have the following Lucene query defined in Kibana: activity\_id = '68e99866-d9e7-4e2e-abb9-b13702b13f72' AND @timestamp:\[ 2020-10-20T08:09:13.503Z TO 2020-10-20T08:09:23.503Z\] I've noticed that I have to… --- ## [Index pattern not created on saved objects import](https://discuss.elastic.co/t/index-pattern-not-created-on-saved-objects-import/253808)
**Author:** [@atharvak](https://discuss.elastic.co/u/atharvak)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 11:47am UTC](https://discuss.elastic.co/t/index-pattern-not-created-on-saved-objects-import/253808 "2020-10-30T11:47:29Z")
Hello people, I am trying to import an already created dashboard into a space. I am using the visual import method for this. I want to import same dashboard in the same space multiple times. That is why I need to change… --- ## [How to subtract TimeSpan in ticks from datetime in any type of query range or script](https://discuss.elastic.co/t/how-to-subtract-timespan-in-ticks-from-datetime-in-any-type-of-query-range-or-script/253807)
**Author:** [@sameer\_sawant](https://discuss.elastic.co/u/sameer_sawant)\ **Replies:** 0\ **Last updated:** [October 30, 2020, 11:29am UTC](https://discuss.elastic.co/t/how-to-subtract-timespan-in-ticks-from-datetime-in-any-type-of-query-range-or-script/253807 "2020-10-30T11:29:49Z")
I want to achive something like this endDateUtc.Subtract(timespan) \<= DateTime.Now in elastic query . both fields ( enddateutc and timespan ) available in document. i want to do something like doc\["enddateutc"\].value - … --- ## [Start Kibana](https://discuss.elastic.co/t/start-kibana/251116)
**Author:** [@acastaldi84](https://discuss.elastic.co/u/acastaldi84)\ **Replies:** 12\ **Last updated:** [October 30, 2020, 11:09am UTC](https://discuss.elastic.co/t/start-kibana/251116 "2020-10-30T11:09:50Z")
Hello, i installed Kibana on Centos 7 but i have this error when i start it! kibana error|690x430 how can i understand what it depends on? Thank you --- ## [Group By Elk Stack?](https://discuss.elastic.co/t/group-by-elk-stack/253543)
**Author:** [@juuuhuuu](https://discuss.elastic.co/u/juuuhuuu)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 10:37am UTC](https://discuss.elastic.co/t/group-by-elk-stack/253543 "2020-10-30T10:37:49Z")
Hello Community, we are using elk Stack. I was wondering where is the best way to use aggregation- in Logstash or in elasticsearch? Or is it possible do it this in Kibana ? --- ## [Filtering- Delete a field to save storage space](https://discuss.elastic.co/t/filtering-delete-a-field-to-save-storage-space/253593)
**Author:** [@ASRLO](https://discuss.elastic.co/u/ASRLO)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 10:29am UTC](https://discuss.elastic.co/t/filtering-delete-a-field-to-save-storage-space/253593 "2020-10-30T10:29:36Z")
Hello , I am a beginner on the ELK solution, I would like to know if by deleting fields and their contents from my logs I can gain storage space. If so, how to do this task? This is what I tried to do: ' if \[event\]… --- ## [How to synchronize current thread with SubmitAsyncSearchRequest?](https://discuss.elastic.co/t/how-to-synchronize-current-thread-with-submitasyncsearchrequest/253795)
**Author:** [@Woniok](https://discuss.elastic.co/u/Woniok)\ **Replies:** 0\ **Last updated:** [October 30, 2020, 10:18am UTC](https://discuss.elastic.co/t/how-to-synchronize-current-thread-with-submitasyncsearchrequest/253795 "2020-10-30T10:18:19Z")
Hi, guys. Thank you for building such wonderful tools. :grinning: While I was coding with the guidance of the \[SubmitAsyncSearchRequest document\](https://www.elastic.co/guide/en/elasticsearch/client/java-rest/current/ja… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1171) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1173)