# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1207 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1208 --- ## [Unable to install elasticsearch in RHEL 7 due to polkit error](https://discuss.elastic.co/t/unable-to-install-elasticsearch-in-rhel-7-due-to-polkit-error/249845)
**Author:** [@aknraj](https://discuss.elastic.co/u/aknraj)\ **Replies:** 12\ **Last updated:** [October 6, 2020, 4:26pm UTC](https://discuss.elastic.co/t/unable-to-install-elasticsearch-in-rhel-7-due-to-polkit-error/249845 "2020-10-06T16:26:21Z")
Trying to install elasticsearch in RHEL 7, but it has been failed with polkit error (please refer below for the detailed error) - I tried to reinstall and also with full permissions on the file as recommended in other to… --- ## [Where do I find proper syntax for configuring logstash?](https://discuss.elastic.co/t/where-do-i-find-proper-syntax-for-configuring-logstash/251160)
**Author:** [@csheridan](https://discuss.elastic.co/u/csheridan)\ **Replies:** 0\ **Last updated:** [October 6, 2020, 4:03pm UTC](https://discuss.elastic.co/t/where-do-i-find-proper-syntax-for-configuring-logstash/251160 "2020-10-06T16:03:19Z")
I have a server setup with ElasticSearch and Logstash. My plan is to have many remote servers with Filebeat installed and configured to send to this server. Currently, I am trying to get a single node setup so I know how… --- ## [Tracking user analytics on ELK Cloud](https://discuss.elastic.co/t/tracking-user-analytics-on-elk-cloud/251151)
**Author:** [@hsn752](https://discuss.elastic.co/u/hsn752)\ **Replies:** 1\ **Last updated:** [October 6, 2020, 3:07pm UTC](https://discuss.elastic.co/t/tracking-user-analytics-on-elk-cloud/251151 "2020-10-06T15:07:45Z")
How can we get the user metrics and their usage? I would like to know how many users are accessing/hitting my dashboards on the elk cloud. I'm using the Platinum package on the elastic cloud. Please advise --- ## [How to implement forked path pattern pipeline](https://discuss.elastic.co/t/how-to-implement-forked-path-pattern-pipeline/251154)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 0\ **Last updated:** [October 6, 2020, 3:04pm UTC](https://discuss.elastic.co/t/how-to-implement-forked-path-pattern-pipeline/251154 "2020-10-06T15:04:21Z")
Hi, I need some guidance understanding how to implement a forked path pattern pipeline as described here. I'm running Logstash in a Kubernetes environment and have the following configured in my logstash.yml file: xpa… --- ## [JSON file -\> Filebeat -\> Logstash](https://discuss.elastic.co/t/json-file-filebeat-logstash/250636)
**Author:** [@AnthonyS4](https://discuss.elastic.co/u/AnthonyS4)\ **Replies:** 6\ **Last updated:** [October 6, 2020, 2:59pm UTC](https://discuss.elastic.co/t/json-file-filebeat-logstash/250636 "2020-10-06T14:59:51Z")
Hi, I'm trying to parse a JSON file with Filebeat and then send it to Logstash, Logstash is not receiving data then there is no an output file, these are my configs.yml: filebeat.yml filebeat.inputs: - type: log … --- ## [If Else in logstash filter](https://discuss.elastic.co/t/if-else-in-logstash-filter/251019)
**Author:** [@Rahul\_Ravichandran](https://discuss.elastic.co/u/Rahul_Ravichandran)\ **Replies:** 6\ **Last updated:** [October 6, 2020, 2:53pm UTC](https://discuss.elastic.co/t/if-else-in-logstash-filter/251019 "2020-10-06T14:53:38Z")
hey Guys, kindly help me to solve this There are two types of messages that i am trying to parse 1. {"Code":"BOSIIF902","Message":"Backup stopped. Error during the backup :: SOAP-ERROR: P","time":1583470627,"userId"… --- ## [Unrecognized VM option 'UseConcMarkSweepGC'](https://discuss.elastic.co/t/unrecognized-vm-option-useconcmarksweepgc/251109)
**Author:** [@dewell](https://discuss.elastic.co/u/dewell)\ **Replies:** 1\ **Last updated:** [October 6, 2020, 2:30pm UTC](https://discuss.elastic.co/t/unrecognized-vm-option-useconcmarksweepgc/251109 "2020-10-06T14:30:07Z")
Hello, in my work I got access to a virtual machine with elasticsearch. It used to be running so I didn't have to change something myself. For some reason it stopped and when I try to restart it I get the following erro… --- ## [Logstash imap input unable to read attachment](https://discuss.elastic.co/t/logstash-imap-input-unable-to-read-attachment/251143)
**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\ **Replies:** 0\ **Last updated:** [October 6, 2020, 2:27pm UTC](https://discuss.elastic.co/t/logstash-imap-input-unable-to-read-attachment/251143 "2020-10-06T14:27:05Z")
I tried to parse e-mail attachment using IMAP input plugin in Logstash, but it keeps on returning error as: \[ERROR\] 2020-10-06 21:33:40.789 \[\[main\]\"Can not decode… --- ## [How to fix the sql\_last\_value time?](https://discuss.elastic.co/t/how-to-fix-the-sql-last-value-time/251120)
**Author:** [@gabriel137](https://discuss.elastic.co/u/gabriel137)\ **Replies:** 1\ **Last updated:** [October 6, 2020, 2:25pm UTC](https://discuss.elastic.co/t/how-to-fix-the-sql-last-value-time/251120 "2020-10-06T14:25:05Z")
How do I adjust the logstash time to match my database time? When I try to synchronize with my column update, the logstash seems to be well ahead of the bank's current time --- ## [Java High Level Rest Client to Elasicsearch](https://discuss.elastic.co/t/java-high-level-rest-client-to-elasicsearch/250929)
**Author:** [@pathfinder225](https://discuss.elastic.co/u/pathfinder225)\ **Replies:** 4\ **Last updated:** [October 6, 2020, 2:17pm UTC](https://discuss.elastic.co/t/java-high-level-rest-client-to-elasicsearch/250929 "2020-10-06T14:17:18Z")
Hi I am using Java High Level Rest client on Spring boot to perform Search API operations. Our Elasticsearch is protected with https and basic(user/pwd) authentication. I'm receiving below exception , javax.net.ssl.S… --- ## [Elasticsearch use case and implementation approach](https://discuss.elastic.co/t/elasticsearch-use-case-and-implementation-approach/251082)
**Author:** [@ocmvin](https://discuss.elastic.co/u/ocmvin)\ **Replies:** 0\ **Last updated:** [October 6, 2020, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-use-case-and-implementation-approach/251082 "2020-10-06T07:57:12Z")
Problem Statement : Relational DB schema as below Employee 1 ---\> Many --Contact (e.g. Mobile Phone number,email id ,Office Phone number,Home Phone Number) Contact Description 1 -\>Many Contact (Contact Description Mas… --- ## [ElasticSearch Query Range with timezone is not working](https://discuss.elastic.co/t/elasticsearch-query-range-with-timezone-is-not-working/250877)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 9\ **Last updated:** [October 6, 2020, 2:07pm UTC](https://discuss.elastic.co/t/elasticsearch-query-range-with-timezone-is-not-working/250877 "2020-10-06T14:07:46Z")
Hi, I am currently facing a weird issue, when I am include timezone, the elastic search is returning zero hits: { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped"… --- ## [Error: Unsupported script sort type: date at castSortType](https://discuss.elastic.co/t/error-unsupported-script-sort-type-date-at-castsorttype/250531)
**Author:** [@balamelangi](https://discuss.elastic.co/u/balamelangi)\ **Replies:** 7\ **Last updated:** [October 6, 2020, 2:02pm UTC](https://discuss.elastic.co/t/error-unsupported-script-sort-type-date-at-castsorttype/250531 "2020-10-06T14:02:42Z")
@here I added my scripted field in kibana. SimpleDateFormat f = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss Z"); f.setTimeZone(TimeZone.getTimeZone("America/Chicago")); f.parse(doc\['starttime.keyword'\].value); Even Adde… --- ## [Flatten the index json data](https://discuss.elastic.co/t/flatten-the-index-json-data/251076)
**Author:** [@Abhi6](https://discuss.elastic.co/u/Abhi6)\ **Replies:** 1\ **Last updated:** [October 6, 2020, 1:37pm UTC](https://discuss.elastic.co/t/flatten-the-index-json-data/251076 "2020-10-06T13:37:42Z")
\[ "code" { 1 }, "foo"{ "bar" }, "foo1" { "number": 1, "type": "In progrss", "submit\_time": "2020-10-04 "id\_type": 2153707, "order\_id": 1601849877, "foo2": \[ "xyz", "qwe", "yty" \], "order\_date": 19/09/… --- ## [Get email notifications on new entries](https://discuss.elastic.co/t/get-email-notifications-on-new-entries/250672)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 2\ **Last updated:** [October 6, 2020, 1:07pm UTC](https://discuss.elastic.co/t/get-email-notifications-on-new-entries/250672 "2020-10-06T13:07:20Z")
I have set up a honeypot in one of our segments. When someone logs into it, it logs the credentials into a log file. Using filebeat, I ship the new entries from the log to the elastic stack which looks like that on the d… --- ## [Visualization by STATUS field which changes his state](https://discuss.elastic.co/t/visualization-by-status-field-which-changes-his-state/251071)
**Author:** [@ahmadsayeed3](https://discuss.elastic.co/u/ahmadsayeed3)\ **Replies:** 3\ **Last updated:** [October 6, 2020, 12:31pm UTC](https://discuss.elastic.co/t/visualization-by-status-field-which-changes-his-state/251071 "2020-10-06T12:31:33Z")
Hi, I recently started working on Kibana visualization so I know very less about it. Allow me to explain my use case. I have a STATUS field which has 4 states. In-Queue, In-Progress, Completed and Purged. In parallel… --- ## [Logstash multiple configuration](https://discuss.elastic.co/t/logstash-multiple-configuration/251065)
**Author:** [@peretz\_shlomi](https://discuss.elastic.co/u/peretz_shlomi)\ **Replies:** 7\ **Last updated:** [October 6, 2020, 12:16pm UTC](https://discuss.elastic.co/t/logstash-multiple-configuration/251065 "2020-10-06T12:16:30Z")
Hello everyone I'm trying to install the logstash system with multipel I have a error to run ths system. error: D:\\logstash\\bin\>logstash --path.settings d:/logstash/config Java HotSpot(TM) 64-Bit Server VM warning: … --- ## [Discovery the Logstash service](https://discuss.elastic.co/t/discovery-the-logstash-service/251108)
**Author:** [@DenProg](https://discuss.elastic.co/u/DenProg)\ **Replies:** 0\ **Last updated:** [October 6, 2020, 11:15am UTC](https://discuss.elastic.co/t/discovery-the-logstash-service/251108 "2020-10-06T11:15:14Z")
Our applications connect to Logstash and send logs there. The Logstash service may be located on any ip on the net. I'd like not to write ip of Logstash to a config of a client app, but find it somehow on the net. Is it … --- ## [Configuration of ELK using iscsi LUNs instead of NFS](https://discuss.elastic.co/t/configuration-of-elk-using-iscsi-luns-instead-of-nfs/251112)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 0\ **Last updated:** [October 6, 2020, 11:46am UTC](https://discuss.elastic.co/t/configuration-of-elk-using-iscsi-luns-instead-of-nfs/251112 "2020-10-06T11:46:59Z")
We have a running ELK setup on NFS storage (3 ELS share the same NFS mount) and due to space crunch we need to migrate to iscsi mounts (LUN with unique initiator name), that will be specific to ELS server(s) Also, we wi… --- ## [Mapper\_parsing\_exception when migrating index from 5.6 to 7.9](https://discuss.elastic.co/t/mapper-parsing-exception-when-migrating-index-from-5-6-to-7-9/249116)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 2\ **Last updated:** [October 6, 2020, 11:43am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-when-migrating-index-from-5-6-to-7-9/249116 "2020-10-06T11:43:12Z")
I am trying to migrate the index from version 5.6 to 7.9 and seeing the below error reason" : "failed to parse field \[fields\] of type \[text\] in document with id 'AXQd0YETZkyCPebFFOUB'. Preview of field's value: '{servic… --- ## [Exiting: 2 errors: metricset 'system/load' not found; error connecting to dbus: dial tcp 127.0.0.1:12434: connectex: No connection could be made because the target machine actively refused it](https://discuss.elastic.co/t/exiting-2-errors-metricset-system-load-not-found-error-connecting-to-dbus-dial-tcp-127-0-0-1-connectex-no-connection-could-be-made-because-the-target-machine-actively-refused-it/248781)
**Author:** [@Shriram\_Wasule](https://discuss.elastic.co/u/Shriram_Wasule)\ **Replies:** 3\ **Last updated:** [October 6, 2020, 11:24am UTC](https://discuss.elastic.co/t/exiting-2-errors-metricset-system-load-not-found-error-connecting-to-dbus-dial-tcp-127-0-0-1-connectex-no-connection-could-be-made-because-the-target-machine-actively-refused-it/248781 "2020-10-06T11:24:43Z")
I am getting above error when i am trying to start metricbeat. please help to resolve this issue --- ## [Export Dashboard on PDF](https://discuss.elastic.co/t/export-dashboard-on-pdf/251100)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 1\ **Last updated:** [October 6, 2020, 10:26am UTC](https://discuss.elastic.co/t/export-dashboard-on-pdf/251100 "2020-10-06T10:26:46Z")
Hi team, I use ELK 7.9.0 i try to export dashbord into PDF format , but i don't find how can i do this. Any help please ! Hiba. --- ## [How to return only the matched object in a nested field, instead of the whole object?](https://discuss.elastic.co/t/how-to-return-only-the-matched-object-in-a-nested-field-instead-of-the-whole-object/251073)
**Author:** [@Bart\_de\_Man](https://discuss.elastic.co/u/Bart_de_Man)\ **Replies:** 2\ **Last updated:** [October 6, 2020, 10:16am UTC](https://discuss.elastic.co/t/how-to-return-only-the-matched-object-in-a-nested-field-instead-of-the-whole-object/251073 "2020-10-06T10:16:59Z")
Elasticsearch version ( bin/elasticsearch --version ): 5.6.11 Plugins installed : JVM version ( java -version ): openjdk version "1.8.0\_222" OpenJDK Runtime Environment (build 1.8.0\_222-8u222-b10-1ubuntu1~16.04.1-b1… --- ## [Ingest Manager requires superuser privileges](https://discuss.elastic.co/t/ingest-manager-requires-superuser-privileges/251086)
**Author:** [@LukaszBis](https://discuss.elastic.co/u/LukaszBis)\ **Replies:** 3\ **Last updated:** [October 6, 2020, 10:09am UTC](https://discuss.elastic.co/t/ingest-manager-requires-superuser-privileges/251086 "2020-10-06T10:09:24Z")
Hi, I can't open the tab Ingest Manager. Message appears what could be causing this behavior? --- ## [Searchquery using timestamp in "and" condition issue](https://discuss.elastic.co/t/searchquery-using-timestamp-in-and-condition-issue/251094)
**Author:** [@tomaszde](https://discuss.elastic.co/u/tomaszde)\ **Replies:** 1\ **Last updated:** [October 6, 2020, 9:49am UTC](https://discuss.elastic.co/t/searchquery-using-timestamp-in-and-condition-issue/251094 "2020-10-06T09:49:31Z")
hi, I'm getting more hits with more exclusive search using "and" with timestamp. is it a bug or the query syntax is wrong ? query1 GET /myindex-\*/\_search?\_source=true&track\_total\_hits=true { "query": { … --- ## [Aggregation returning contradictory results](https://discuss.elastic.co/t/aggregation-returning-contradictory-results/249058)
**Author:** [@Xavier\_Marti\_Bofill](https://discuss.elastic.co/u/Xavier_Marti_Bofill)\ **Replies:** 2\ **Last updated:** [October 6, 2020, 9:43am UTC](https://discuss.elastic.co/t/aggregation-returning-contradictory-results/249058 "2020-10-06T09:43:43Z")
Our elasticsearch cluster is returning is contradictory results. We execute the following query, searching for values below 480 (that would mean we have a problem): { "aggs": { "2": { "terms": { "fie… --- ## [Unable to run Logstash](https://discuss.elastic.co/t/unable-to-run-logstash/250989)
**Author:** [@Javier\_Stauffenberg](https://discuss.elastic.co/u/Javier_Stauffenberg)\ **Replies:** 12\ **Last updated:** [October 6, 2020, 9:22am UTC](https://discuss.elastic.co/t/unable-to-run-logstash/250989 "2020-10-06T09:22:52Z")
Hi everyone, I am completely new to the ELK stack and have been following several tutorials to set up log stash and create an index from my csv file. Even following every step, and using the uploaded config files, I get… --- ## [Elastic Cloud On kubernetes](https://discuss.elastic.co/t/elastic-cloud-on-kubernetes/247484)
**Author:** [@Vineeth\_varma](https://discuss.elastic.co/u/Vineeth_varma)\ **Replies:** 8\ **Last updated:** [October 6, 2020, 9:19am UTC](https://discuss.elastic.co/t/elastic-cloud-on-kubernetes/247484 "2020-10-06T09:19:15Z")
Hi .., I am giving a try on Elastic cloud on Kubernetes, I have deployed the operator, Elasticsearch and Kibana. Everything is up and running fine. Now I want to implement openid connect to kibana using Keycloak, On do… --- ## [How to do a cohort analysis using a heatmap](https://discuss.elastic.co/t/how-to-do-a-cohort-analysis-using-a-heatmap/251091)
**Author:** [@Max\_Handle](https://discuss.elastic.co/u/Max_Handle)\ **Replies:** 4\ **Last updated:** [October 6, 2020, 9:18am UTC](https://discuss.elastic.co/t/how-to-do-a-cohort-analysis-using-a-heatmap/251091 "2020-10-06T09:18:19Z")
Hi, I tried to find a solution online, but I haven't found any answer yet. I am trying to do a cohort/ customer retention analysis. The picture shows my take on this. What I want: I want to see whether customers that w… --- ## [Error occur after enable elasticsearch security feature](https://discuss.elastic.co/t/error-occur-after-enable-elasticsearch-security-feature/251089)
**Author:** [@P\_ng\_Chun\_Sein](https://discuss.elastic.co/u/P_ng_Chun_Sein)\ **Replies:** 0\ **Last updated:** [October 6, 2020, 9:04am UTC](https://discuss.elastic.co/t/error-occur-after-enable-elasticsearch-security-feature/251089 "2020-10-06T09:04:53Z")
Hi all, I follow the this link \[https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elastic-stack-on-centos-7\] to setup my elasticsearch in my RH linux server. Everything i… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1206) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1208)