# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1262 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1263 --- ## [Logstash Dynamic Template and ILM Creation](https://discuss.elastic.co/t/logstash-dynamic-template-and-ilm-creation/246653)
**Author:** [@Ramalakshmi](https://discuss.elastic.co/u/Ramalakshmi)\ **Replies:** 4\ **Last updated:** [August 27, 2020, 3:50pm UTC](https://discuss.elastic.co/t/logstash-dynamic-template-and-ilm-creation/246653 "2020-08-27T15:50:35Z")
Hi I am able to create the multiple index patterns dynamically using below configuration. output { stdout { codec =\> rubydebug } elasticsearch { hosts =\> \[ es\_host:9200" \] index =\> "lstas… --- ## [Thread leaks in logstash-output-s3 when wrong access keys are passed](https://discuss.elastic.co/t/thread-leaks-in-logstash-output-s3-when-wrong-access-keys-are-passed/246657)
**Author:** [@vinaykambam](https://discuss.elastic.co/u/vinaykambam)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 3:39pm UTC](https://discuss.elastic.co/t/thread-leaks-in-logstash-output-s3-when-wrong-access-keys-are-passed/246657 "2020-08-27T15:39:40Z")
Hi There, I've observed thread leaks (S3, Stale factory sweeper) from logstash-output-s3 plugin when wrong access keys are passed in s3 output configuration. I tried same with different versions of logstash but it is th… --- ## [Send delete request only when inserted documents have been persisted](https://discuss.elastic.co/t/send-delete-request-only-when-inserted-documents-have-been-persisted/246456)
**Author:** [@makons](https://discuss.elastic.co/u/makons)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 3:36pm UTC](https://discuss.elastic.co/t/send-delete-request-only-when-inserted-documents-have-been-persisted/246456 "2020-08-27T15:36:28Z")
I'm running upsert, and right after that delete by query, however, some of the documents upserted should be picked up by the following delete request. Is there a chance to send/execute the delete request only after the d… --- ## [New field base on the sum of other 3 fields not working](https://discuss.elastic.co/t/new-field-base-on-the-sum-of-other-3-fields-not-working/246612)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 3\ **Last updated:** [August 27, 2020, 3:17pm UTC](https://discuss.elastic.co/t/new-field-base-on-the-sum-of-other-3-fields-not-working/246612 "2020-08-27T15:17:46Z")
Hello all, i need some help, i can't get this working. I need to create a new file base on the sum of other three fields. field1, field2, field3 are defined as float fields ruby { code =\> "event\['new\_field'\] =''" } mu… --- ## [Create a new field (customdate) like yyyy-mm(2020-08) format from eventstamp(1597739955692) type Epoch](https://discuss.elastic.co/t/create-a-new-field-customdate-like-yyyy-mm-2020-08-format-from-eventstamp-1597739955692-type-epoch/246516)
**Author:** [@wishnu2016](https://discuss.elastic.co/u/wishnu2016)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 3:17pm UTC](https://discuss.elastic.co/t/create-a-new-field-customdate-like-yyyy-mm-2020-08-format-from-eventstamp-1597739955692-type-epoch/246516 "2020-08-27T15:17:23Z")
I want to create a new field with a year-month format (yyyy-mm, 2020-08) from the eventstamp field which I am receiving in Epoch format. I am new to logstash, I was able to add a new field but I don't know how to covert … --- ## [Troubles moving from Elasticsearch ingest pipeline to Logstash](https://discuss.elastic.co/t/troubles-moving-from-elasticsearch-ingest-pipeline-to-logstash/246490)
**Author:** [@Daniele\_Stefanucci](https://discuss.elastic.co/u/Daniele_Stefanucci)\ **Replies:** 3\ **Last updated:** [August 27, 2020, 3:14pm UTC](https://discuss.elastic.co/t/troubles-moving-from-elasticsearch-ingest-pipeline-to-logstash/246490 "2020-08-27T15:14:12Z")
Hi! I'm facing an issue while moving from elasticsearch ingest pipeline to logstash pipeline, I've correctly set up filebeat for IIS logs and configured the elasticsearch pipeline as per documentation (with logstash call… --- ## [Balancing disk usage on large clusters?](https://discuss.elastic.co/t/balancing-disk-usage-on-large-clusters/246477)
**Author:** [@akrzos](https://discuss.elastic.co/u/akrzos)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 2:56pm UTC](https://discuss.elastic.co/t/balancing-disk-usage-on-large-clusters/246477 "2020-08-27T14:56:41Z")
We have a relatively large cluster and one consistent issue we have seen from time to time is inconsistent disk usage balancing because ElasticSearch is balancing by shard count rather than shard resource consumption. B… --- ## [Ruby + replace from array lines](https://discuss.elastic.co/t/ruby-replace-from-array-lines/246647)
**Author:** [@thaideval](https://discuss.elastic.co/u/thaideval)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 2:53pm UTC](https://discuss.elastic.co/t/ruby-replace-from-array-lines/246647 "2020-08-27T14:53:00Z")
Hello there. First of all i am not even sure if its possible, but figured - should still ask. so.. i have two fields. String with text: {field1} = "Some text from blah X.KEY1 Some more text X.KEY2 and text here... " … --- ## [Can't find shared folder for backup in Lab 4.1 of the Elastic Engineer 2 course](https://discuss.elastic.co/t/cant-find-shared-folder-for-backup-in-lab-4-1-of-the-elastic-engineer-2-course/246359)
**Author:** [@Adam\_Burr](https://discuss.elastic.co/u/Adam_Burr)\ **Replies:** 3\ **Last updated:** [August 27, 2020, 2:26pm UTC](https://discuss.elastic.co/t/cant-find-shared-folder-for-backup-in-lab-4-1-of-the-elastic-engineer-2-course/246359 "2020-08-27T14:26:08Z")
I am studying the Elastic Engineer 2 course but I can't follow the instructions in Lab 4.1 "Cluster Backup" because I can't find the shared folder that it says should exist. In step 2 of the lab it says "Notice there is… --- ## [Could not index event to Elasticsearch..cluster currently has \[1000\]/\[1000\] maximum shards open](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-cluster-currently-has-1000-1000-maximum-shards-open/246620)
**Author:** [@ksaha](https://discuss.elastic.co/u/ksaha)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 1:16pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-cluster-currently-has-1000-1000-maximum-shards-open/246620 "2020-08-27T13:16:21Z")
Hi, I have an Elasticsearch cluster with single node. Metricbeat and Filebeat are creating daily new index. The ELK Stack have been working properly from last few months. But from today I am getting the below error: \[2… --- ## [Elasticsearch 7.8 does not stat Java problem](https://discuss.elastic.co/t/elasticsearch-7-8-does-not-stat-java-problem/245902)
**Author:** [@aurimas](https://discuss.elastic.co/u/aurimas)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 12:18pm UTC](https://discuss.elastic.co/t/elasticsearch-7-8-does-not-stat-java-problem/245902 "2020-08-27T12:18:49Z")
Hi, I am trying to fresh install and launch Elasticsearch 7.8 on RHEL 7.8 but I am getting into some kind of Java problems. I want it to run standalone. Tried various ways I found on internet to fix it. But none helpe… --- ## [Modifying a CSV file - Logstash](https://discuss.elastic.co/t/modifying-a-csv-file-logstash/246333)
**Author:** [@Aniket\_Valsangkar](https://discuss.elastic.co/u/Aniket_Valsangkar)\ **Replies:** 3\ **Last updated:** [August 27, 2020, 11:48am UTC](https://discuss.elastic.co/t/modifying-a-csv-file-logstash/246333 "2020-08-27T11:48:26Z")
Hi Team, I have a CSV file which gets updated (delete, add, change in the data in fields) regularly. The columns stay constant only the data changes. I want to write a code in logstash, which should be able to capture t… --- ## [Visualization filter DSL query](https://discuss.elastic.co/t/visualization-filter-dsl-query/246210)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 1\ **Last updated:** [August 27, 2020, 11:36am UTC](https://discuss.elastic.co/t/visualization-filter-dsl-query/246210 "2020-08-27T11:36:46Z")
Hi, in an index I have fields for interface and host, a host has many interfaces: HOST-01 : interface01, interface02 HOST-02 : interface01, interface02 and I want to filter a specific interface for a es… --- ## [Videos mobile](https://discuss.elastic.co/t/videos-mobile/246604)
**Author:** [@bering](https://discuss.elastic.co/u/bering)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 11:12am UTC](https://discuss.elastic.co/t/videos-mobile/246604 "2020-08-27T11:12:50Z")
When I travel I would like to watch videos from https://www.elastic.co/videos/ but very often my iphone safari browser stops and for minutes shows a running circle. Watching videos from youtube works fine. Can I cache th… --- ## [Logstash cannot send data to elasticsearch](https://discuss.elastic.co/t/logstash-cannot-send-data-to-elasticsearch/246391)
**Author:** [@pranayv66](https://discuss.elastic.co/u/pranayv66)\ **Replies:** 16\ **Last updated:** [August 26, 2020, 11:34am UTC](https://discuss.elastic.co/t/logstash-cannot-send-data-to-elasticsearch/246391 "2020-08-26T11:34:36Z")
Hi Community, I'm trying to push some data from a data directory from filebeat to logstash and then elasticsearch. The server runs on Centos7 with the installations of all 4 components. I've pasted below the config file… --- ## [Logstash with filebeat and batching](https://discuss.elastic.co/t/logstash-with-filebeat-and-batching/246597)
**Author:** [@Carlos\_Magalhaes](https://discuss.elastic.co/u/Carlos_Magalhaes)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 10:30am UTC](https://discuss.elastic.co/t/logstash-with-filebeat-and-batching/246597 "2020-08-27T10:30:04Z")
Hi all, I know Logstash isn't made to be a batch processing tool i.e. only process logs at a certain period or time? Scenario - I have large amounts of logs coming from a firewall via filebeat to a logstash server. It … --- ## [Elasticsearch Indices not showing on Kibana](https://discuss.elastic.co/t/elasticsearch-indices-not-showing-on-kibana/246532)
**Author:** [@PaulMess](https://discuss.elastic.co/u/PaulMess)\ **Replies:** 3\ **Last updated:** [August 27, 2020, 10:25am UTC](https://discuss.elastic.co/t/elasticsearch-indices-not-showing-on-kibana/246532 "2020-08-27T10:25:37Z")
Hello, I created a index in Elastisearch and look good (creen) But do not appears in Kibana what are the possible reasons for this? --- ## [Large CSV export issue](https://discuss.elastic.co/t/large-csv-export-issue/245976)
**Author:** [@adnanahmed](https://discuss.elastic.co/u/adnanahmed)\ **Replies:** 4\ **Last updated:** [August 27, 2020, 10:09am UTC](https://discuss.elastic.co/t/large-csv-export-issue/245976 "2020-08-27T10:09:45Z")
Hi Friends, we are using ELK 7.9 version. We are having problem with CSV export of "Saved search" through our Dashboard, it got hanged if size of CSV gets more than 150 MB nevertheless we are able to export c… --- ## [First query is slow after every short period of time](https://discuss.elastic.co/t/first-query-is-slow-after-every-short-period-of-time/246591)
**Author:** [@Abhishek\_Chauhan](https://discuss.elastic.co/u/Abhishek_Chauhan)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 9:32am UTC](https://discuss.elastic.co/t/first-query-is-slow-after-every-short-period-of-time/246591 "2020-08-27T09:32:35Z")
Hi, I am using Elasticsearch version 7.6.2 inside a docker container and i use logstash to index data to my ES Node but when i query the ES indexes after a short amount of time, it takes a significant time to return sea… --- ## [How to rebuld Kibana for UI changes](https://discuss.elastic.co/t/how-to-rebuld-kibana-for-ui-changes/246507)
**Author:** [@User4](https://discuss.elastic.co/u/User4)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 9:40am UTC](https://discuss.elastic.co/t/how-to-rebuld-kibana-for-ui-changes/246507 "2020-08-27T09:40:41Z")
Hi, I need to change the appearance of Kibana - hide the top bar with the .euiHeader class, I make changes to the css file node\_modules \\ @kbn \\ ui-shared-deps \\ target \\ kbn-ui-shared-deps.light.css, but the changes are… --- ## [Any endpoint could update synonyms files for es cluster](https://discuss.elastic.co/t/any-endpoint-could-update-synonyms-files-for-es-cluster/246590)
**Author:** [@cindy](https://discuss.elastic.co/u/cindy)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 9:28am UTC](https://discuss.elastic.co/t/any-endpoint-could-update-synonyms-files-for-es-cluster/246590 "2020-08-27T09:28:03Z")
Is there any API in es for updating synonyms files or any plan to provide such API interface? API caller only provide synonyms content list, API could update synonyms file on each ES cluster nodes and return update resu… --- ## [Kibana 7.8 is it possible to use JSON input to filter the aggregated column in data table?](https://discuss.elastic.co/t/kibana-7-8-is-it-possible-to-use-json-input-to-filter-the-aggregated-column-in-data-table/246262)
**Author:** [@JasonYangJY](https://discuss.elastic.co/u/JasonYangJY)\ **Replies:** 1\ **Last updated:** [August 27, 2020, 9:12am UTC](https://discuss.elastic.co/t/kibana-7-8-is-it-possible-to-use-json-input-to-filter-the-aggregated-column-in-data-table/246262 "2020-08-27T09:12:18Z")
Update: I have used the enhanced table plugin to solve this.Thank you very much! I am using kibana 7.8,and try to do some log analyzing.I try to create a data table like bellow and I only want the rows that "access\_cou… --- ## [Picking up document which contains first recorded timestamp](https://discuss.elastic.co/t/picking-up-document-which-contains-first-recorded-timestamp/246518)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 8:56am UTC](https://discuss.elastic.co/t/picking-up-document-which-contains-first-recorded-timestamp/246518 "2020-08-27T08:56:45Z")
Hi All, We are pulling data from servicenow, where all the incident records are been pulled and there are duplicate incidents as well, and all the incidents are tagged with different different created time. We need to … --- ## [Logstash parsing timestamp incorrectly](https://discuss.elastic.co/t/logstash-parsing-timestamp-incorrectly/244773)
**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 8:47am UTC](https://discuss.elastic.co/t/logstash-parsing-timestamp-incorrectly/244773 "2020-08-27T08:47:05Z")
Problem Statement - Filebeat streaming logs via logstash into elasticsearch (7.5) Logstash applies the filter on epoch time & update @timestamp field during data ingestion Logstash is incorrectly ingesting the timesta… --- ## [Logstash-keystore failed with error "ArgumentError: invalid byte sequence in CP949"](https://discuss.elastic.co/t/logstash-keystore-failed-with-error-argumenterror-invalid-byte-sequence-in-cp949/246582)
**Author:** [@jaykim](https://discuss.elastic.co/u/jaykim)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 8:33am UTC](https://discuss.elastic.co/t/logstash-keystore-failed-with-error-argumenterror-invalid-byte-sequence-in-cp949/246582 "2020-08-27T08:33:32Z")
Hello team, I'm working to secure configuration on ELK stack. While creating keystore in logstash, there was an error : 'ArgumentError: invalid byte sequence in CP949' It also occured in v7.8.0, don't know what happens… --- ## [How to connect elastic from public address](https://discuss.elastic.co/t/how-to-connect-elastic-from-public-address/245918)
**Author:** [@mmax](https://discuss.elastic.co/u/mmax)\ **Replies:** 6\ **Last updated:** [August 27, 2020, 8:22am UTC](https://discuss.elastic.co/t/how-to-connect-elastic-from-public-address/245918 "2020-08-27T08:22:16Z")
Hi, I have an infrastructure of 20 servers , standalones, no lan, only public ip behind firewall. I would like monitoring them with elk using metricbeats & winlogsbeats My cluster is ok, i tested metricbeats from a vm… --- ## [How to select data from multiple indicess](https://discuss.elastic.co/t/how-to-select-data-from-multiple-indicess/245772)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 7\ **Last updated:** [August 27, 2020, 8:04am UTC](https://discuss.elastic.co/t/how-to-select-data-from-multiple-indicess/245772 "2020-08-27T08:04:40Z")
Hi Everyone, I am new to ELK stack, and I am facing an issue with searching data from multiple indices in single query. I am able to do this from Dev tool but not from Discover or visualization. Can anyone please help … --- ## [Read only access](https://discuss.elastic.co/t/read-only-access/246555)
**Author:** [@akhil\_mogaram](https://discuss.elastic.co/u/akhil_mogaram)\ **Replies:** 1\ **Last updated:** [August 27, 2020, 7:59am UTC](https://discuss.elastic.co/t/read-only-access/246555 "2020-08-27T07:59:49Z")
Hello Team, I have Kibana 7.7.0 14 days trial version. How do i give read only access to other users without login credentials. Can you help me with it Thanks and Regards, Akhil --- ## [NPE for Average based on Scripted Field with missing values](https://discuss.elastic.co/t/npe-for-average-based-on-scripted-field-with-missing-values/246572)
**Author:** [@weand](https://discuss.elastic.co/u/weand)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 7:50am UTC](https://discuss.elastic.co/t/npe-for-average-based-on-scripted-field-with-missing-values/246572 "2020-08-27T07:50:15Z")
Hi, in a kibana data table, we want add an 'average' metric, based on a scripted field. As we want to calculate the average only for a part of the dataset, we tried to rely on the default of the missing field behavior f… --- ## [\[circuit\_breaking\_exception\] \[parent\] Data too large](https://discuss.elastic.co/t/circuit-breaking-exception-parent-data-too-large/246512)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 13\ **Last updated:** [August 27, 2020, 7:06am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-parent-data-too-large/246512 "2020-08-27T07:06:48Z")
Hi all, since this morning I am getting the following errors from time to time in my ECK elasticsearch 7.9.0 cluster. Version: 7.9.0 Build: 33813 Error at Fetch.\_callee3$ (https://kibana.problem.cluster/33813/bundl… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1261) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1263)