# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1180 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1181 --- ## [Octagon Analytics - Native iOS App - Kibana](https://discuss.elastic.co/t/octagon-analytics-native-ios-app-kibana/250889)
**Author:** [@octagon.mobile](https://discuss.elastic.co/u/octagon.mobile)\ **Replies:** 1\ **Last updated:** [October 25, 2020, 4:00pm UTC](https://discuss.elastic.co/t/octagon-analytics-native-ios-app-kibana/250889 "2020-10-25T16:00:22Z")
Octagon Analytics - Kibana iOS App. Visualizer for Kibana Dashboards. Supported Features: Login Dashboards Canvas Timeline Video Officially Supported Kibana Version's: 7.3.2 6.5.4 Configuration: … --- ## [Logstash Ruby not handling float value correctly](https://discuss.elastic.co/t/logstash-ruby-not-handling-float-value-correctly/253150)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 6\ **Last updated:** [October 25, 2020, 3:31pm UTC](https://discuss.elastic.co/t/logstash-ruby-not-handling-float-value-correctly/253150 "2020-10-25T15:31:07Z")
I have Kafak \<\> Logstash (then Ruby) \<\> Elastic Kafak Input: {"customerid":"smit","last\_name":"shah","age":10,"height":10,"weight":100,"automated\_email":false, "header": { "endpoint":"/pay"}, "transaction": { "amount":… --- ## [ES 7.5 - Enhancing indexing process](https://discuss.elastic.co/t/es-7-5-enhancing-indexing-process/253238)
**Author:** [@Khalil\_Jomaa](https://discuss.elastic.co/u/Khalil_Jomaa)\ **Replies:** 2\ **Last updated:** [October 25, 2020, 2:25pm UTC](https://discuss.elastic.co/t/es-7-5-enhancing-indexing-process/253238 "2020-10-25T14:25:56Z")
Hello, We are working to enhance our indexing process using ES version 7.5.2 and looking to create a dedicated cluster for doing the test, we need some help and advise which parameters and changes we can test, for examp… --- ## [A working example of how to import a Wikipedia dump with Logstash using es\_bulk](https://discuss.elastic.co/t/a-working-example-of-how-to-import-a-wikipedia-dump-with-logstash-using-es-bulk/253228)
**Author:** [@Ola\_Gustafsson1](https://discuss.elastic.co/u/Ola_Gustafsson1)\ **Replies:** 0\ **Last updated:** [October 25, 2020, 9:46am UTC](https://discuss.elastic.co/t/a-working-example-of-how-to-import-a-wikipedia-dump-with-logstash-using-es-bulk/253228 "2020-10-25T09:46:19Z")
I'm writing a logstash configuration file for importing a Wikipedia dump, found on https://dumps.wikimedia.org/other/cirrussearch/current/ The dumps are in the es\_bulk format, ie one line for the action and id of the do… --- ## [Querying sysmon event](https://discuss.elastic.co/t/querying-sysmon-event/252700)
**Author:** [@Yotam\_Mazurik](https://discuss.elastic.co/u/Yotam_Mazurik)\ **Replies:** 1\ **Last updated:** [October 25, 2020, 9:29am UTC](https://discuss.elastic.co/t/querying-sysmon-event/252700 "2020-10-25T09:29:44Z")
Hi, I am new to elk and trying to understand what data modeling to use for my network. what I am trying to achieve is a central databse that will group sysmon data from hosts over my network and querying that dataset t… --- ## [Problem with master node](https://discuss.elastic.co/t/problem-with-master-node/253218)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [October 24, 2020, 8:39pm UTC](https://discuss.elastic.co/t/problem-with-master-node/253218 "2020-10-24T20:39:50Z")
I'd setup the 3 node master for node 1 the configuration was node.name: master1 nod.data: false node.master: true node.voting\_only: true for node 2 the configuration was node.name: master2 nod.data: false node.master… --- ## [How set IP address type on selected fields](https://discuss.elastic.co/t/how-set-ip-address-type-on-selected-fields/253220)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [October 24, 2020, 8:03pm UTC](https://discuss.elastic.co/t/how-set-ip-address-type-on-selected-fields/253220 "2020-10-24T20:03:14Z")
My data incoming in json and IP is always on few fields, how can I set on this fields IP address type to query this fields via CIDR notation etc? --- ## [Logstash elsticsearch output](https://discuss.elastic.co/t/logstash-elsticsearch-output/253219)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [October 24, 2020, 7:38pm UTC](https://discuss.elastic.co/t/logstash-elsticsearch-output/253219 "2020-10-24T19:38:17Z")
I am running the elasticsearch cluster of 6 node 3 master 2 data 1 coordinate.I am also running logstash in other node for testing purpose which request should go to which node i made pipeline file output { elastics… --- ## [Running a elasticsearch 7.9 cluster of two (or several) nodes on same (windows) machine](https://discuss.elastic.co/t/running-a-elasticsearch-7-9-cluster-of-two-or-several-nodes-on-same-windows-machine/253162)
**Author:** [@dror](https://discuss.elastic.co/u/dror)\ **Replies:** 4\ **Last updated:** [October 24, 2020, 5:56pm UTC](https://discuss.elastic.co/t/running-a-elasticsearch-7-9-cluster-of-two-or-several-nodes-on-same-windows-machine/253162 "2020-10-24T17:56:41Z")
Hi ! i'm trying to run a cluster of two (or several) nodes on same (windows) machine. Each node is pointing to the other node in the "discovery.seed\_hosts" node 1 configuration is (the only rows that changed from … --- ## [Decode JSON hex field before push to ES](https://discuss.elastic.co/t/decode-json-hex-field-before-push-to-es/253126)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 9\ **Last updated:** [October 24, 2020, 5:37pm UTC](https://discuss.elastic.co/t/decode-json-hex-field-before-push-to-es/253126 "2020-10-24T17:37:17Z")
Hi, I have input data such as: { "timestamp": "1603363180424", "layers": { \[.. some data ..\] }, "aaa": { \[.. some data ..\] }, "bbb": { \[.. so… --- ## [ILM hot-\>warm resource usage question](https://discuss.elastic.co/t/ilm-hot-warm-resource-usage-question/253213)
**Author:** [@basdfa23](https://discuss.elastic.co/u/basdfa23)\ **Replies:** 0\ **Last updated:** [October 24, 2020, 4:38pm UTC](https://discuss.elastic.co/t/ilm-hot-warm-resource-usage-question/253213 "2020-10-24T16:38:21Z")
Both force merge and best\_compression are resource intensive. If you set the ILM hot-\>warm rollover for the following actions: force merge change compression to best\_compression change replica from 0 to 1 On which n… --- ## [Elasticsearch RPM installation conflicts old Elasticsearch](https://discuss.elastic.co/t/elasticsearch-rpm-installation-conflicts-old-elasticsearch/252419)
**Author:** [@H0bbit](https://discuss.elastic.co/u/H0bbit)\ **Replies:** 2\ **Last updated:** [October 24, 2020, 4:15pm UTC](https://discuss.elastic.co/t/elasticsearch-rpm-installation-conflicts-old-elasticsearch/252419 "2020-10-24T16:15:13Z")
Hi there, I'm pretty new to Elasticsearch. I have been trying to install it on my Centos 7 server. I have been following a tutorial for installing elasticsearch-oss. Because I was playing with it, I have uninstalled it … --- ## [Return all top level fields with nested filter ES 7.9](https://discuss.elastic.co/t/return-all-top-level-fields-with-nested-filter-es-7-9/253211)
**Author:** [@bnarang](https://discuss.elastic.co/u/bnarang)\ **Replies:** 0\ **Last updated:** [October 24, 2020, 3:21pm UTC](https://discuss.elastic.co/t/return-all-top-level-fields-with-nested-filter-es-7-9/253211 "2020-10-24T15:21:17Z")
I have a usecase where I need to return all top level fields and filtered results from the nested objects. Consider the example: { "jobID": 940230, "jobTitle": "front-end", "jobDetails": \[ { "hours":… --- ## [Mapping unique geo\_point locations](https://discuss.elastic.co/t/mapping-unique-geo-point-locations/253178)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 1\ **Last updated:** [October 24, 2020, 2:12pm UTC](https://discuss.elastic.co/t/mapping-unique-geo-point-locations/253178 "2020-10-24T14:12:41Z")
I have a bunch of documents on business. One of their properties is the location as a geo\_point. If companies are in the same building, they have the same geo\_point for location. Is there a way in maps to only plot un… --- ## [Elasticsearch query without date range](https://discuss.elastic.co/t/elasticsearch-query-without-date-range/253165)
**Author:** [@gizem](https://discuss.elastic.co/u/gizem)\ **Replies:** 6\ **Last updated:** [October 24, 2020, 1:59pm UTC](https://discuss.elastic.co/t/elasticsearch-query-without-date-range/253165 "2020-10-24T13:59:28Z")
Hello, I wonder how does an elasticsearch query work without a date range? Is there a default size of the result? For example, what if I just only use lte for the range. Does query result include all the records from … --- ## [Create index for filebeat with idicated host or log path](https://discuss.elastic.co/t/create-index-for-filebeat-with-idicated-host-or-log-path/252840)
**Author:** [@Charakterny](https://discuss.elastic.co/u/Charakterny)\ **Replies:** 11\ **Last updated:** [October 24, 2020, 10:19am UTC](https://discuss.elastic.co/t/create-index-for-filebeat-with-idicated-host-or-log-path/252840 "2020-10-24T10:19:21Z")
Hi, I'm new in ELK and my main goal is to share logs for created users from different hosts. So at this moment I have two hosts A and B where I installed and configured filebeat. I need to create index for filebeat, b… --- ## [Use ES as a backed for a dash Application](https://discuss.elastic.co/t/use-es-as-a-backed-for-a-dash-application/252872)
**Author:** [@yasvanth](https://discuss.elastic.co/u/yasvanth)\ **Replies:** 1\ **Last updated:** [October 24, 2020, 10:06am UTC](https://discuss.elastic.co/t/use-es-as-a-backed-for-a-dash-application/252872 "2020-10-24T10:06:02Z")
Hi Team, ES Version: 6.5.4 Python Version : 3 I am writing a dash app to generate reports that uses elasticsearch as a backend/data source, to connect my app to elasticsearch I use elasticsearch-dsl python module. Whe… --- ## [Http input plugin is throwing errors](https://discuss.elastic.co/t/http-input-plugin-is-throwing-errors/252970)
**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\ **Replies:** 3\ **Last updated:** [October 24, 2020, 9:53am UTC](https://discuss.elastic.co/t/http-input-plugin-is-throwing-errors/252970 "2020-10-24T09:53:05Z")
Still in the initial steps of learning Logstash. I have written the following pipeline in a configuration file: input { stdin { codec =\> json } http { } } output { stdout{ codec =\> rubydebug } } When I run logs… --- ## [Testing Ruby For Logstash Event Object](https://discuss.elastic.co/t/testing-ruby-for-logstash-event-object/253196)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 0\ **Last updated:** [October 24, 2020, 6:35am UTC](https://discuss.elastic.co/t/testing-ruby-for-logstash-event-object/253196 "2020-10-24T06:35:12Z")
I am planning on writing some unit test for a ruby code i have written. Here is the snippet: require 'minitest/autorun' describe "Test Event Object" do before do @event = new Event() end it "sho… --- ## [Is there a K8s Container min for Logstash?](https://discuss.elastic.co/t/is-there-a-k8s-container-min-for-logstash/253195)
**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\ **Replies:** 0\ **Last updated:** [October 24, 2020, 5:50am UTC](https://discuss.elastic.co/t/is-there-a-k8s-container-min-for-logstash/253195 "2020-10-24T05:50:16Z")
I was using k8s and was fiddling with the idea of a logstash container. Without putting any requests or limits in place though, Logstash, as well as Elasticsearch and Kibana can be a bit greedy when it comes to some res… --- ## [Search unmapped fields](https://discuss.elastic.co/t/search-unmapped-fields/253188)
**Author:** [@anantvir](https://discuss.elastic.co/u/anantvir)\ **Replies:** 0\ **Last updated:** [October 24, 2020, 2:00am UTC](https://discuss.elastic.co/t/search-unmapped-fields/253188 "2020-10-24T02:00:56Z")
Hello Everyone, I want to add a new field mapping in existing index. The new field called 'transactions' is supposed to be an array of objects. Below is the sample 'transactions' field I want to store. TRANSACTIONS… --- ## [Multiple logstash](https://discuss.elastic.co/t/multiple-logstash/253009)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [October 24, 2020, 1:32am UTC](https://discuss.elastic.co/t/multiple-logstash/253009 "2020-10-24T01:32:30Z")
I want to add 2 logstash in my application for scalability.From availablity point... I have a question does 2 logstash works simultaneously or they works as a active-passive (one stop other takes) or they automatically m… --- ## [How expensive is Composite Aggregation?](https://discuss.elastic.co/t/how-expensive-is-composite-aggregation/253184)
**Author:** [@shreedhan](https://discuss.elastic.co/u/shreedhan)\ **Replies:** 1\ **Last updated:** [October 23, 2020, 10:53pm UTC](https://discuss.elastic.co/t/how-expensive-is-composite-aggregation/253184 "2020-10-23T22:53:19Z")
I'm planning to use Composite Aggregation in one of my projects and wanted to know how expensive these operations are. Specifically, I wanted to see how does the compute and memory cost increase along with following valu… --- ## [How to optimize regexp filter](https://discuss.elastic.co/t/how-to-optimize-regexp-filter/252903)
**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\ **Replies:** 5\ **Last updated:** [October 23, 2020, 9:09pm UTC](https://discuss.elastic.co/t/how-to-optimize-regexp-filter/252903 "2020-10-23T21:09:58Z")
The following is one of our slow queries, I got from our slow query log. I tried run it locally which takes 38 seconds and return 6 records, but if I removed the "regexp" filter, it only takes like 8 miliseconds to finis… --- ## [\[Roll up index\] Roll up index stopped processing documents](https://discuss.elastic.co/t/roll-up-index-roll-up-index-stopped-processing-documents/252434)
**Author:** [@zaratustra689](https://discuss.elastic.co/u/zaratustra689)\ **Replies:** 1\ **Last updated:** [October 23, 2020, 8:41pm UTC](https://discuss.elastic.co/t/roll-up-index-roll-up-index-stopped-processing-documents/252434 "2020-10-23T20:41:58Z")
Hello, I have running now 3 different jobs for their respective index. In one of them, docs are being processed but on the other 2, they are not. The thing is that they 3 have the exactly same configuration for the rol… --- ## [Securing ELK](https://discuss.elastic.co/t/securing-elk/253175)
**Author:** [@jcor](https://discuss.elastic.co/u/jcor)\ **Replies:** 1\ **Last updated:** [October 23, 2020, 7:50pm UTC](https://discuss.elastic.co/t/securing-elk/253175 "2020-10-23T19:50:50Z")
Hi all, I'm working on securing my lab elk stack and running into a roadblock. I've been following this guide very closely https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-… --- ## [Ingest data from salesforce to elasticsearch using Logstash](https://discuss.elastic.co/t/ingest-data-from-salesforce-to-elasticsearch-using-logstash/252921)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 6\ **Last updated:** [October 23, 2020, 7:45pm UTC](https://discuss.elastic.co/t/ingest-data-from-salesforce-to-elasticsearch-using-logstash/252921 "2020-10-23T19:45:12Z")
Hi, I am trying to ingest data from salesforce to elasticsearch using logstash in Macbook Pro (macOS Mojave Version 10.14.2). But it's not working and gives the below error in my terminal: \*\[2020-10-22T08:37:06,130\]\[IN… --- ## [Events coming into Log Stream but not Kibana Discover](https://discuss.elastic.co/t/events-coming-into-log-stream-but-not-kibana-discover/253082)
**Author:** [@allieg](https://discuss.elastic.co/u/allieg)\ **Replies:** 2\ **Last updated:** [October 23, 2020, 5:50pm UTC](https://discuss.elastic.co/t/events-coming-into-log-stream-but-not-kibana-discover/253082 "2020-10-23T17:50:52Z")
Hi, Basically what the title of this post says. I can see various events coming into the Log under the Observability tab: However, when I go to the Discover tab, nothing is showing up: Since we can assume Filebe… --- ## [Hidden indicies wrongly matching with template with wildcard pattern](https://discuss.elastic.co/t/hidden-indicies-wrongly-matching-with-template-with-wildcard-pattern/252184)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 2\ **Last updated:** [October 23, 2020, 4:31pm UTC](https://discuss.elastic.co/t/hidden-indicies-wrongly-matching-with-template-with-wildcard-pattern/252184 "2020-10-23T16:31:11Z")
Hi elastic-team, I am currently a bit confused. We do have a template that looks like this: PUT \_template/denic-index-template?include\_type\_name { "order": 100, "index\_patterns": \[ "\*" \], "settings": { … --- ## [Parsing underscore](https://discuss.elastic.co/t/parsing-underscore/253104)
**Author:** [@rbeg](https://discuss.elastic.co/u/rbeg)\ **Replies:** 2\ **Last updated:** [October 23, 2020, 1:58pm UTC](https://discuss.elastic.co/t/parsing-underscore/253104 "2020-10-23T13:58:48Z")
Hello, Can you help me please? I need to parse this field in logstash filter : word1\_word2\_word3\_word4 And I want to put word3 into a new field named my\_field. How to do this please? I try with grok and regular exp… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1179) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1181)