# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1185 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1186 --- ## [Weird logs pushed by logstash after going secure](https://discuss.elastic.co/t/weird-logs-pushed-by-logstash-after-going-secure/250179)
**Author:** [@Kwiskas](https://discuss.elastic.co/u/Kwiskas)\ **Replies:** 4\ **Last updated:** [October 21, 2020, 10:29am UTC](https://discuss.elastic.co/t/weird-logs-pushed-by-logstash-after-going-secure/250179 "2020-10-21T10:29:18Z")
Hello Our elk stack is on version 7.6.2 A few days ago we pushed on our team logstash as secure to enable x-pack we dit same for elastic nodes also kibana Since we did that logstash is sending weird logs and paramete… --- ## [Invalid initial heap size on ES7 for Windows](https://discuss.elastic.co/t/invalid-initial-heap-size-on-es7-for-windows/252781)
**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 9:38am UTC](https://discuss.elastic.co/t/invalid-initial-heap-size-on-es7-for-windows/252781 "2020-10-21T09:38:50Z")
We are trying to install ES7 as windows service with elasticsearch-service.bat install We are setting ES\_JAVA\_OPTS via environment variable with -Xms4g -Xmx4g But we are getting the following error: Error: Could n… --- ## [Logs are coming delayed/late in Kibana UI discover](https://discuss.elastic.co/t/logs-are-coming-delayed-late-in-kibana-ui-discover/252295)
**Author:** [@Sayontani\_Bose](https://discuss.elastic.co/u/Sayontani_Bose)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 9:24am UTC](https://discuss.elastic.co/t/logs-are-coming-delayed-late-in-kibana-ui-discover/252295 "2020-10-21T09:24:33Z")
Hi My wazuh manager timezone is -\> Asia/Kolkata (IST, +0530) My Elastic server timezone is -\> Asia/Kolkata (IST, +0530) In ossec log file logs are coming into this timezone . In kibana.yml it sets as UTC and in Kiba… --- ## [Cmd "Logstash-plugin list" raise unknown encoding error ms950](https://discuss.elastic.co/t/cmd-logstash-plugin-list-raise-unknown-encoding-error-ms950/252413)
**Author:** [@liu\_keli](https://discuss.elastic.co/u/liu_keli)\ **Replies:** 2\ **Last updated:** [October 21, 2020, 9:00am UTC](https://discuss.elastic.co/t/cmd-logstash-plugin-list-raise-unknown-encoding-error-ms950/252413 "2020-10-21T09:00:58Z")
Cmd "Logstash-plugin list" raise unknown encoding error ms950. I read alike topic, then try "chcp 65001" to correct it, but Cmd "Logstash-plugin list" still raise same error. Environment:Logstash v6.8.10 and win10 x64… --- ## [Problem with embed dashboards when using markdown links](https://discuss.elastic.co/t/problem-with-embed-dashboards-when-using-markdown-links/252335)
**Author:** [@gizem](https://discuss.elastic.co/u/gizem)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 8:42am UTC](https://discuss.elastic.co/t/problem-with-embed-dashboards-when-using-markdown-links/252335 "2020-10-21T08:42:38Z")
Hello; I am using kibana 7.9.2. I made a dashboard and I used markdown visualization for making a tab. Tab links another dashboards. Here is the markdown : \[Overview\](#dashboard/79de3590-b2a3-11e9-ac48-859d1fb44fa3) | … --- ## [Undefined fields ARE SHOWN in "Available fields" in Kibana](https://discuss.elastic.co/t/undefined-fields-are-shown-in-available-fields-in-kibana/252320)
**Author:** [@Rudolf\_Reddy\_Macejka](https://discuss.elastic.co/u/Rudolf_Reddy_Macejka)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 8:34am UTC](https://discuss.elastic.co/t/undefined-fields-are-shown-in-available-fields-in-kibana/252320 "2020-10-21T08:34:33Z")
Hello, I would like to try to understand and fix "cosmetic" issue in Discovery panel in Kibana. I have a mapping by which I wanted to allow store any field, but index only defined fields. Hence I have chosen dynamic:fa… --- ## [Using stored\_fields for retrieving a subset of the fields](https://discuss.elastic.co/t/using-stored-fields-for-retrieving-a-subset-of-the-fields/252619)
**Author:** [@Arjun\_Singri](https://discuss.elastic.co/u/Arjun_Singri)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 8:26am UTC](https://discuss.elastic.co/t/using-stored-fields-for-retrieving-a-subset-of-the-fields/252619 "2020-10-21T08:26:15Z")
The documentation and recommendation for using stored\_fields feature in ElasticSearch has been changing. In the latest version, stored\_fields is not recommended - https://www.elastic.co/guide/en/elasticsearch/reference/7… --- ## [How do you time search query while debugging?](https://discuss.elastic.co/t/how-do-you-time-search-query-while-debugging/252739)
**Author:** [@Jaspreet\_Singh](https://discuss.elastic.co/u/Jaspreet_Singh)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 8:24am UTC](https://discuss.elastic.co/t/how-do-you-time-search-query-while-debugging/252739 "2020-10-21T08:24:19Z")
I'm currently debugging a slow query issue. As expected, the first time query execution is the slowest with subsequent hits way faster due to caching. As such, what is the best way to get consistent query times so I ca… --- ## [Hide/show children in Controls - option list](https://discuss.elastic.co/t/hide-show-children-in-controls-option-list/251242)
**Author:** [@sus](https://discuss.elastic.co/u/sus)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 7:05am UTC](https://discuss.elastic.co/t/hide-show-children-in-controls-option-list/251242 "2020-10-13T07:05:00Z")
Hi! So, Im having problems figuring out how do show/hide children as option lists. Im working in Kibana 7.8.1. Im working with documents which contains information about import/export of different foods in different co… --- ## [Logstash-7.8.1 - Couldn't connect MySQL jdbc on plugin logstash-integration-jdbc (5.0.5)](https://discuss.elastic.co/t/logstash-7-8-1-couldnt-connect-mysql-jdbc-on-plugin-logstash-integration-jdbc-5-0-5/252767)
**Author:** [@matthewdeepblue](https://discuss.elastic.co/u/matthewdeepblue)\ **Replies:** 2\ **Last updated:** [October 21, 2020, 7:57am UTC](https://discuss.elastic.co/t/logstash-7-8-1-couldnt-connect-mysql-jdbc-on-plugin-logstash-integration-jdbc-5-0-5/252767 "2020-10-21T07:57:13Z")
Hi guys. I got error message below when I tried to connect MySQL RDS through logstash plugin. please post here if you guys have any idea. Thanks. \[2020-10-21T04:27:23,538\]\[ERROR\]\[logstash.inputs.jdbc \] Unable to … --- ## [Elasticsearch "OR" condition query](https://discuss.elastic.co/t/elasticsearch-or-condition-query/252531)
**Author:** [@Yotam\_Mazurik](https://discuss.elastic.co/u/Yotam_Mazurik)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 7:49am UTC](https://discuss.elastic.co/t/elasticsearch-or-condition-query/252531 "2020-10-21T07:49:05Z")
Hi! I am trying to query an index with two different document fieldsets. to be more specific, I am trying to query all documents where field1 is equal to field2 but field1 and field2 will never exists in the same docum… --- ## [To push updated data from mongodb using logstash logstash-input-mongodb plugin](https://discuss.elastic.co/t/to-push-updated-data-from-mongodb-using-logstash-logstash-input-mongodb-plugin/252791)
**Author:** [@Durga\_AK](https://discuss.elastic.co/u/Durga_AK)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 7:46am UTC](https://discuss.elastic.co/t/to-push-updated-data-from-mongodb-using-logstash-logstash-input-mongodb-plugin/252791 "2020-10-21T07:46:01Z")
Im trying to sync updated data from mongodb using the logstash-input-mongodb plugin. New data inserted into mongodb is getting indexed in Elastic search. Already existing data and updated data is not moving to Elastic se… --- ## [No new daily indices after setup TLS/SSL](https://discuss.elastic.co/t/no-new-daily-indices-after-setup-tls-ssl/252786)
**Author:** [@LuWe](https://discuss.elastic.co/u/LuWe)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 7:19am UTC](https://discuss.elastic.co/t/no-new-daily-indices-after-setup-tls-ssl/252786 "2020-10-21T07:19:22Z")
I have a small elk cluster. 2 elastic nodes, 2 data nodes, one of the data node is also master vote only. One Kibana node, 2 logstash nodes. Every node is a single hyper-v VM. Everything worked nicely until i start conf… --- ## [Data Loss with HTTP Input Plugin](https://discuss.elastic.co/t/data-loss-with-http-input-plugin/252782)
**Author:** [@mbrill](https://discuss.elastic.co/u/mbrill)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 7:11am UTC](https://discuss.elastic.co/t/data-loss-with-http-input-plugin/252782 "2020-10-21T07:11:55Z")
Hi, i'm currently running into the following issue with the http input plugin for logstash: Whenever a request is sent to the pipeline while the pipeline is busy, this request is dropped. I have read about the blocking… --- ## [How to store & get data with different time interval](https://discuss.elastic.co/t/how-to-store-get-data-with-different-time-interval/252775)
**Author:** [@James\_Liu](https://discuss.elastic.co/u/James_Liu)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 6:04am UTC](https://discuss.elastic.co/t/how-to-store-get-data-with-different-time-interval/252775 "2020-10-21T06:04:30Z")
Our team are currently focusing on log datas and visualizing them. We are building a platform analyzing every audit log by log4j in our java project: log -\> filebeat -\> logstash -\> elasticsearch -\> our platform CURREN… --- ## [Adding sorting feature to Kibana fields](https://discuss.elastic.co/t/adding-sorting-feature-to-kibana-fields/252157)
**Author:** [@rdkgn](https://discuss.elastic.co/u/rdkgn)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 5:54am UTC](https://discuss.elastic.co/t/adding-sorting-feature-to-kibana-fields/252157 "2020-10-21T05:54:12Z")
Hello, I am unable to add SORTING (Arrows for ascending and descending sort) to my custom fields added to Kibana. My present GROK pattern is as below. I want to add sorting for TIME , Please help \*\*match =\> { "message… --- ## [Kibana alerts](https://discuss.elastic.co/t/kibana-alerts/252445)
**Author:** [@igorid70](https://discuss.elastic.co/u/igorid70)\ **Replies:** 2\ **Last updated:** [October 21, 2020, 5:04am UTC](https://discuss.elastic.co/t/kibana-alerts/252445 "2020-10-21T05:04:04Z")
Hi I implemented Kibana alerts (Kibana v7.9.1) with log connector, so all alerts are logged in Kibana log. There are 2 problematic points I noticed when I define an alert with trigger type ' Uptime monitor status' : T… --- ## [SSL options not working in logstash-output-mongodb (LS v7.9.0)](https://discuss.elastic.co/t/ssl-options-not-working-in-logstash-output-mongodb-ls-v7-9-0/252481)
**Author:** [@ksathya](https://discuss.elastic.co/u/ksathya)\ **Replies:** 4\ **Last updated:** [October 21, 2020, 5:01am UTC](https://discuss.elastic.co/t/ssl-options-not-working-in-logstash-output-mongodb-ls-v7-9-0/252481 "2020-10-21T05:01:33Z")
I am using logstash v7.9.0 for Windows. I am using logstash-output-mongodb plugin v 3.1.5. My output code is as below: mongodb { collection =\> "TestColection" database =\> "TestDB" … --- ## [Elasticsearch timeout issue](https://discuss.elastic.co/t/elasticsearch-timeout-issue/252698)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 5:00am UTC](https://discuss.elastic.co/t/elasticsearch-timeout-issue/252698 "2020-10-21T05:00:59Z")
Once I have enabled clustering, at times, I see elasticsearch takes few mins to comes up. That time I saw a timeout error in OS. I saw only TimeoutStopSec in elasticsearch.service. So should I create timeout conf file in… --- ## [Grok filter by source](https://discuss.elastic.co/t/grok-filter-by-source/252623)
**Author:** [@andi](https://discuss.elastic.co/u/andi)\ **Replies:** 4\ **Last updated:** [October 21, 2020, 4:49am UTC](https://discuss.elastic.co/t/grok-filter-by-source/252623 "2020-10-21T04:49:48Z")
Hi All, Sorry i'm new on ELK, currently i'm use ELK 6.8.10, it's working properly, with filter by tags, this is my grok. filter { if "nameservice-out-staging" in \[tags\] { grok { match =\> { "message" =\> … --- ## [Search phase execution error missing error](https://discuss.elastic.co/t/search-phase-execution-error-missing-error/252624)
**Author:** [@BigSugar](https://discuss.elastic.co/u/BigSugar)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 2:25am UTC](https://discuss.elastic.co/t/search-phase-execution-error-missing-error/252624 "2020-10-21T02:25:20Z")
Need help with this one: Error loading data search\_phase\_execution\_exception all shards failed Error at Fetch.\_callee3$ (https://5e. . . No error type listed in the peach banner or after Error (there is no "Bad Req… --- ## [Problem with parsing json in syslog format](https://discuss.elastic.co/t/problem-with-parsing-json-in-syslog-format/252042)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 4\ **Last updated:** [October 21, 2020, 1:16am UTC](https://discuss.elastic.co/t/problem-with-parsing-json-in-syslog-format/252042 "2020-10-21T01:16:34Z")
Hi, can you please help me with logstash config? input { #tcp { # port =\> 5014 # type =\> syslog #} udp { port =\> 5014 type =\> syslog } } filter { … --- ## [Cannot filter data in elastic SIEM](https://discuss.elastic.co/t/cannot-filter-data-in-elastic-siem/252124)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 5\ **Last updated:** [October 20, 2020, 10:47pm UTC](https://discuss.elastic.co/t/cannot-filter-data-in-elastic-siem/252124 "2020-10-20T22:47:29Z")
Hi all I have a problems in the elastic siem. The filter function for me when i tried to filter for some field in the rule that i have created. those field seems to be not recognized by elastic so they do not allow me … --- ## [SIEM error unexpected token \ **Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 5\ **Last updated:** [October 20, 2020, 10:44pm UTC](https://discuss.elastic.co/t/siem-error-unexpected-token-in-json-at-position-0/252327 "2020-10-20T22:44:59Z") Hi all I currently have a very anoying problems Everytime i went to SIEM app, they load for sometime and then the system popup a error unexpected token \ **Author:** [@chandramouli\_sriniva](https://discuss.elastic.co/u/chandramouli_sriniva)\ **Replies:** 14\ **Last updated:** [October 20, 2020, 9:29pm UTC](https://discuss.elastic.co/t/multiple-entries-for-single-file-in-sincedb/252438 "2020-10-20T21:29:21Z") Hi, I read a single file from server(C:/Users/xx.log - its a rotating log file daily) and route to kafka. In a single sincedb file, we see multiple entries like below. Is this valid. we see dupes on Kafka topic. Is it … --- ## [Using LB for discovery.zen.ping.unicast.hosts no longer works?](https://discuss.elastic.co/t/using-lb-for-discovery-zen-ping-unicast-hosts-no-longer-works/252740)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 9:19pm UTC](https://discuss.elastic.co/t/using-lb-for-discovery-zen-ping-unicast-hosts-no-longer-works/252740 "2020-10-20T21:19:01Z")
Hi, For a long time I've been able to use a load balancer IP for the discovery.zen.ping.unicast.hosts property in elasticsearch.yml. But I just upgraded from 5.6 to 6.8 and after upgrading ES is no longer able to detec… --- ## [Known Issue Logstash 7.7.1-7.9.1: Logstash Keystore may fail when used with multiple pipelines](https://discuss.elastic.co/t/known-issue-logstash-7-7-1-7-9-1-logstash-keystore-may-fail-when-used-with-multiple-pipelines/252711)
**Author:** [@RobBavey](https://discuss.elastic.co/u/RobBavey)\ **Replies:** 3\ **Last updated:** [October 20, 2020, 7:51pm UTC](https://discuss.elastic.co/t/known-issue-logstash-7-7-1-7-9-1-logstash-keystore-may-fail-when-used-with-multiple-pipelines/252711 "2020-10-20T19:51:44Z")
A performance related change made in Logstash 7.7.1 may cause Logstash configurations with multiple pipelines to fail with the following error: "Unable to configure plugins: (ConfigurationError) Cannot evaluate \`${varia… --- ## [Ansible uri post after upgrade to 7.9.2](https://discuss.elastic.co/t/ansible-uri-post-after-upgrade-to-7-9-2/252724)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 6:00pm UTC](https://discuss.elastic.co/t/ansible-uri-post-after-upgrade-to-7-9-2/252724 "2020-10-20T18:00:57Z")
I have been using ansible to manage templates and role mappings using the uri method similar to this: - name: Post to elastic uri: url: "{{ cluster\_uri }}/\_template/{{ obj }}?pretty" method: POST … --- ## [Shards issue when trying to add a filter](https://discuss.elastic.co/t/shards-issue-when-trying-to-add-a-filter/252585)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 2\ **Last updated:** [October 20, 2020, 5:24pm UTC](https://discuss.elastic.co/t/shards-issue-when-trying-to-add-a-filter/252585 "2020-10-20T17:24:55Z")
Hi guys. My elk platform was working very nice. I was running filebeat with netflow module. I also created default dashboard for kibana. Everything was ok , until tryed to add a filter. After adding a filter on the… --- ## [Autocomplete - Hierarchical Data](https://discuss.elastic.co/t/autocomplete-hierarchical-data/252696)
**Author:** [@sumanthmitra](https://discuss.elastic.co/u/sumanthmitra)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 1:56pm UTC](https://discuss.elastic.co/t/autocomplete-hierarchical-data/252696 "2020-10-20T13:56:46Z")
Hello, I am looking for autocomplete functionality for the hierarchical data and was wondering if it's possible to achieve this functionality with elasticsearch. As an example, consider the below data. "phrase1" / "w… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1184) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1186)