# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1286 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1287 --- ## [Value mapping GROK\\PIPELINE](https://discuss.elastic.co/t/value-mapping-grok-pipeline/244739)
**Author:** [@dmalchikov](https://discuss.elastic.co/u/dmalchikov)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 3:49pm UTC](https://discuss.elastic.co/t/value-mapping-grok-pipeline/244739 "2020-08-12T15:49:29Z")
Hi there, Could not find how to modify coded field from logs. For example in logs I have value 0 or 1 but I would like to see(store) in Kibana "OK" or "Alarm" I just use Zabbix and there "Value mapping" feature exists… --- ## [Getting access to filterManager in Kibana 7.8](https://discuss.elastic.co/t/getting-access-to-filtermanager-in-kibana-7-8/244722)
**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\ **Replies:** 5\ **Last updated:** [August 12, 2020, 3:45pm UTC](https://discuss.elastic.co/t/getting-access-to-filtermanager-in-kibana-7-8/244722 "2020-08-12T15:45:46Z")
I wrote a plugin for Kibana 7.5 and I'm porting it to Kibana 7.8. I need access to the filterManager from within my visualization file. Is there an example of how to do this in Kibana 7.8? In 7.5 I was able to do the fol… --- ## [Windows Event Viewer Logs Parsing without Winlogbeat](https://discuss.elastic.co/t/windows-event-viewer-logs-parsing-without-winlogbeat/244710)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 3:37pm UTC](https://discuss.elastic.co/t/windows-event-viewer-logs-parsing-without-winlogbeat/244710 "2020-08-12T15:37:53Z")
Constraint: logs are coming in collected by Splunk, forwarded, along with many other log sources, to logstash. So no winlogbeat, no logstash-input-eventlog plugin. We have to pick out the Windows events from the flood of… --- ## [How to combine Multiline events into Single Event](https://discuss.elastic.co/t/how-to-combine-multiline-events-into-single-event/244714)
**Author:** [@Pavani\_Reddy](https://discuss.elastic.co/u/Pavani_Reddy)\ **Replies:** 3\ **Last updated:** [August 12, 2020, 3:29pm UTC](https://discuss.elastic.co/t/how-to-combine-multiline-events-into-single-event/244714 "2020-08-12T15:29:44Z")
I am trying to index the sip logs (telephony) , but while indexing ,it took each line as separate event .Give me some suggestions to combine those events into one single event. Here I am giving log format \<135\>85748… --- ## [Add x-server header to kibana parsing](https://discuss.elastic.co/t/add-x-server-header-to-kibana-parsing/244346)
**Author:** [@sandikata](https://discuss.elastic.co/u/sandikata)\ **Replies:** 5\ **Last updated:** [August 12, 2020, 3:28pm UTC](https://discuss.elastic.co/t/add-x-server-header-to-kibana-parsing/244346 "2020-08-12T15:28:30Z")
Hello, i am trying to add http\_x\_server field/pattern to my installation, but without success i cannot even find any info about custom patterns or so. There's my current nginx pattern file. NGUSERNAME \[a-zA-Z\\.\\@\\-\\+\_… --- ## [Logstash sending same message 3 times to elasticsearch](https://discuss.elastic.co/t/logstash-sending-same-message-3-times-to-elasticsearch/244749)
**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\ **Replies:** 0\ **Last updated:** [August 12, 2020, 3:26pm UTC](https://discuss.elastic.co/t/logstash-sending-same-message-3-times-to-elasticsearch/244749 "2020-08-12T15:26:31Z")
We have Pivotal Cloud Foundry as a platform and we are sending logs to ELK. So our setup is like we have an F5 load balancer that sends logs to 3 Logstash servers and these 3 Logstash servers send logs to 3 Elastic serve… --- ## [Visualize Rolled Up Data and Filtering](https://discuss.elastic.co/t/visualize-rolled-up-data-and-filtering/244143)
**Author:** [@michaelpietzsch](https://discuss.elastic.co/u/michaelpietzsch)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 3:12pm UTC](https://discuss.elastic.co/t/visualize-rolled-up-data-and-filtering/244143 "2020-08-12T15:12:52Z")
Hello dear community, i'm trying to make some visualisations on a rolled up index, and having issues when adding an additional filter on the visualisations. I also have a ? on my index pattern and no date and time p… --- ## [Problems using ingest-geoip in elasticsearch](https://discuss.elastic.co/t/problems-using-ingest-geoip-in-elasticsearch/244744)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 0\ **Last updated:** [August 12, 2020, 2:58pm UTC](https://discuss.elastic.co/t/problems-using-ingest-geoip-in-elasticsearch/244744 "2020-08-12T14:58:04Z")
Hi, I'm using elasticsearch 7.4 and have some data indexed with ip in a field. Now i want to use a pipeline to reindex that data and generate geoip information with the ingest-geoip. I created an ingest and if i use it … --- ## [Logger.logstash.outputs.elasticsearch not printing enough logs](https://discuss.elastic.co/t/logger-logstash-outputs-elasticsearch-not-printing-enough-logs/243420)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 12\ **Last updated:** [August 12, 2020, 2:54pm UTC](https://discuss.elastic.co/t/logger-logstash-outputs-elasticsearch-not-printing-enough-logs/243420 "2020-08-12T14:54:50Z")
Hi I saw "logger.logstash.outputs.elasticsearch" : "DEBUG" is printing debug level logs only during logstash start/stop. But logstash not printing any logs when it parses an event and stores in elasticsearch My out… --- ## [Logstash aggregation filter](https://discuss.elastic.co/t/logstash-aggregation-filter/244730)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 6\ **Last updated:** [August 12, 2020, 2:54pm UTC](https://discuss.elastic.co/t/logstash-aggregation-filter/244730 "2020-08-12T14:54:12Z")
Hi all, I am trying to aggregate information of multi events to one event using aggregation filter of logstash. for example events are as following: name1=c1,name2=s1 name1=c1,name2=s1 name1=c1,name2=s1 name1=c1,name2=… --- ## [Subquery Factoring in Kibana](https://discuss.elastic.co/t/subquery-factoring-in-kibana/241660)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 3\ **Last updated:** [August 12, 2020, 2:45pm UTC](https://discuss.elastic.co/t/subquery-factoring-in-kibana/241660 "2020-08-12T14:45:27Z")
Hello, I have a technical issue with a report and wanted to get some help. I want to select the top10 products by sales ranking for the most recent week, and for that subset (say top 10 products). I would like to see h… --- ## ['sincedb\_path' for http\_poller not working](https://discuss.elastic.co/t/sincedb-path-for-http-poller-not-working/244734)
**Author:** [@AditiKhalatkar](https://discuss.elastic.co/u/AditiKhalatkar)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 2:28pm UTC](https://discuss.elastic.co/t/sincedb-path-for-http-poller-not-working/244734 "2020-08-12T14:28:05Z")
I am trying to ingest data from an API using http\_poller plugin in logstash. Tried using some methods, however was it is throwing error like this. Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC wa… --- ## [How to calculate timestamp difference in logstash config file?](https://discuss.elastic.co/t/how-to-calculate-timestamp-difference-in-logstash-config-file/244732)
**Author:** [@Rahul\_Chougule](https://discuss.elastic.co/u/Rahul_Chougule)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 2:25pm UTC](https://discuss.elastic.co/t/how-to-calculate-timestamp-difference-in-logstash-config-file/244732 "2020-08-12T14:25:10Z")
I have two timestamp fields: submit\_date("MM/dd/YYYY HH:mm") and completed date("MM/dd/YYYY HH:mm"). I want to calculate time difference between these two fields and wanted to add it as a new field while ingesting data … --- ## [Need Architecture Support](https://discuss.elastic.co/t/need-architecture-support/244457)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 2:21pm UTC](https://discuss.elastic.co/t/need-architecture-support/244457 "2020-08-12T14:21:24Z")
Hello, I want help to setup Server for ELK stack Client will send Logs on UDP port on logstash average EPS will be 2000 eps. I want help regarding How many Elastic and Logstash server will be needed, and what should b… --- ## [Unexpected token u in JSON at position 0](https://discuss.elastic.co/t/unexpected-token-u-in-json-at-position-0/243997)
**Author:** [@NagleZhang](https://discuss.elastic.co/u/NagleZhang)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 2:12pm UTC](https://discuss.elastic.co/t/unexpected-token-u-in-json-at-position-0/243997 "2020-08-12T14:12:10Z")
full stack error SyntaxError: Unexpected token u in JSON at position 0 at JSON.parse (\) at https://mydomain/bundles/commons.bundle.js:3:3397719 at https://mydomain/bundles/kbn-ui-shared-deps/kbn-ui… --- ## [Elasticsearch 6.8 returns date as long not string](https://discuss.elastic.co/t/elasticsearch-6-8-returns-date-as-long-not-string/244193)
**Author:** [@larryrodrigues](https://discuss.elastic.co/u/larryrodrigues)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 2:05pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-returns-date-as-long-not-string/244193 "2020-08-12T14:05:42Z")
FYI. The data is being indexed to elasticsearch from Spark dataframe. Putting date data directly in Kibana, and querying, return date as String. Elasticsearch 6.8/Kibana date field query always returns long value, not … --- ## [Manage synonyms using Kibana](https://discuss.elastic.co/t/manage-synonyms-using-kibana/244513)
**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 2:00pm UTC](https://discuss.elastic.co/t/manage-synonyms-using-kibana/244513 "2020-08-12T14:00:28Z")
Is it possible to manage the synonyms from file using Kibana? I can not find it in the UI. --- ## [How use Input json in METRICS?](https://discuss.elastic.co/t/how-use-input-json-in-metrics/244685)
**Author:** [@Salman\_Kari](https://discuss.elastic.co/u/Salman_Kari)\ **Replies:** 0\ **Last updated:** [August 12, 2020, 9:11am UTC](https://discuss.elastic.co/t/how-use-input-json-in-metrics/244685 "2020-08-12T09:11:19Z")
Bonjour , je demande de l'aide concernant un problème quand j'essaie de créer un barchart pour un id , je récupère le même résultat dans ma visualisation Pour information j'utilise un filtre sur un id et le field sur l… --- ## [Changing which elements are hidden in embed mode?](https://discuss.elastic.co/t/changing-which-elements-are-hidden-in-embed-mode/244534)
**Author:** [@MarcoRocco](https://discuss.elastic.co/u/MarcoRocco)\ **Replies:** 3\ **Last updated:** [August 12, 2020, 1:51pm UTC](https://discuss.elastic.co/t/changing-which-elements-are-hidden-in-embed-mode/244534 "2020-08-12T13:51:48Z")
Hey y'all, I have a custom build of kibana running with quite a few source code changes, one thing I'm kind of stuck on is modifying which elements of a dashboard are hidden/displayed when embed=true. I'd like to show p… --- ## [Can some one help please: sum of the field by filtering in transforms not working](https://discuss.elastic.co/t/can-some-one-help-please-sum-of-the-field-by-filtering-in-transforms-not-working/244301)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 0\ **Last updated:** [August 9, 2020, 11:16am UTC](https://discuss.elastic.co/t/can-some-one-help-please-sum-of-the-field-by-filtering-in-transforms-not-working/244301 "2020-08-09T11:16:47Z")
Hi, I am trying to create transform with the scenario, grouping by every 15 mins and aggregation should be like as below. Getting the count of the records for each filter. but not able to perform Sum or max on the fil… --- ## [How to remove the specific Icingabeat field names sent to elasticsearch?](https://discuss.elastic.co/t/how-to-remove-the-specific-icingabeat-field-names-sent-to-elasticsearch/244304)
**Author:** [@Pankaj\_Navneet](https://discuss.elastic.co/u/Pankaj_Navneet)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 1:44pm UTC](https://discuss.elastic.co/t/how-to-remove-the-specific-icingabeat-field-names-sent-to-elasticsearch/244304 "2020-08-12T13:44:58Z")
Hi Team, I have integrated Icinga to my ELK cluster using Icingabeat. Everything is working as expected, but now I don't want to include some of the available fields that are sent to Elasticsearch from Icingabeat. Reas… --- ## [Intercept specific Request/Response](https://discuss.elastic.co/t/intercept-specific-request-response/243829)
**Author:** [@koyassan](https://discuss.elastic.co/u/koyassan)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 1:44pm UTC](https://discuss.elastic.co/t/intercept-specific-request-response/243829 "2020-08-12T13:44:20Z")
Hi guys, I'm trying to develop a plugin that intercept some specific requests, such as /some/api/request. My main goal is intercept the payload and the response of that request. I'm thinking about add these script in so… --- ## [Kibana 7.6.0 - Unable to generate report. Error: Failed to decrypt report job data](https://discuss.elastic.co/t/kibana-7-6-0-unable-to-generate-report-error-failed-to-decrypt-report-job-data/244721)
**Author:** [@chris.murray](https://discuss.elastic.co/u/chris.murray)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 1:41pm UTC](https://discuss.elastic.co/t/kibana-7-6-0-unable-to-generate-report-error-failed-to-decrypt-report-job-data/244721 "2020-08-12T13:41:54Z")
I've been googling around for a solution for this, and all the answers seem to be pretty much the exact same. But they don't seem to be my problem. Generating a report by any used results in the following error: Unabl… --- ## [Prometheus irate function in kibana](https://discuss.elastic.co/t/prometheus-irate-function-in-kibana/244543)
**Author:** [@panwarsagar](https://discuss.elastic.co/u/panwarsagar)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 1:39pm UTC](https://discuss.elastic.co/t/prometheus-irate-function-in-kibana/244543 "2020-08-12T13:39:26Z")
Hi, I am moving some metrics from Prometheus to Kibana. In one of the visualization Prometheus is using irate function. (avg by (job) (irate(process\_cpu\_seconds\_total\[5m\])) \* 100) Could you please help me to implemen… --- ## [Study On Rejected Refactorings](https://discuss.elastic.co/t/study-on-rejected-refactorings/244725)
**Author:** [@jpantiuchina](https://discuss.elastic.co/u/jpantiuchina)\ **Replies:** 0\ **Last updated:** [August 12, 2020, 1:33pm UTC](https://discuss.elastic.co/t/study-on-rejected-refactorings/244725 "2020-08-12T13:33:52Z")
Dear developers, As part of a research team from Università della Svizzera italiana (Switzerland) and University of Sannio (Italy), we have analyzed refactoring pull requests in elastic/elasticsearch repository and are … --- ## [Slow date\_histogram after upgrading to 7.8.0](https://discuss.elastic.co/t/slow-date-histogram-after-upgrading-to-7-8-0/244404)
**Author:** [@Chan\_Terence](https://discuss.elastic.co/u/Chan_Terence)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 1:33pm UTC](https://discuss.elastic.co/t/slow-date-histogram-after-upgrading-to-7-8-0/244404 "2020-08-12T13:33:51Z")
Hi there, We noticed a serious performance degradation of date\_histogram aggregations on our cluster after upgrading to 7.8.0. We have two indexes with 1.2billion documents and use only date\_histogram, but this query n… --- ## [Logstash plugin missing for google pub sub](https://discuss.elastic.co/t/logstash-plugin-missing-for-google-pub-sub/244724)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 0\ **Last updated:** [August 12, 2020, 1:33pm UTC](https://discuss.elastic.co/t/logstash-plugin-missing-for-google-pub-sub/244724 "2020-08-12T13:33:23Z")
Hi Team, I ahve deployed Logstash in Kubernetes of version 6.3.2 and truying to get the input from google pub sub. Reecived error: Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, … --- ## [Delete and re-create an index pattern](https://discuss.elastic.co/t/delete-and-re-create-an-index-pattern/244689)
**Author:** [@leo.hamon](https://discuss.elastic.co/u/leo.hamon)\ **Replies:** 7\ **Last updated:** [August 12, 2020, 1:31pm UTC](https://discuss.elastic.co/t/delete-and-re-create-an-index-pattern/244689 "2020-08-12T13:31:42Z")
Hi everyone, I have an issue with my dashboards. They are built on an index pattern, I wanted to know if I can delete the index safely and re-create another one with the same name ? Will I keep my dashboards safe, or wi… --- ## [Kibana error after DNS entry](https://discuss.elastic.co/t/kibana-error-after-dns-entry/244616)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 1:11pm UTC](https://discuss.elastic.co/t/kibana-error-after-dns-entry/244616 "2020-08-12T13:11:01Z")
Hi All, WE have configured elastic stack by mentioning the IP address in all the config files and we have done OKta integration also. Now we have done a DNS entry for the IP address used, after this change we are not ab… --- ## [Using elastic search for user journey tracking](https://discuss.elastic.co/t/using-elastic-search-for-user-journey-tracking/244703)
**Author:** [@Dheeraj\_Joshi](https://discuss.elastic.co/u/Dheeraj_Joshi)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 12:35pm UTC](https://discuss.elastic.co/t/using-elastic-search-for-user-journey-tracking/244703 "2020-08-12T12:35:20Z")
An external system generated many phases of customer journey. Phases like Anonymous, Registered, Subscriber etc. These are sent as events from a third party system who provides user management capabilities. Events would… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1285) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1287)