# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1347 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1348 --- ## [DHCP audit using ELK stack](https://discuss.elastic.co/t/dhcp-audit-using-elk-stack/239962)
**Author:** [@zkhanfur](https://discuss.elastic.co/u/zkhanfur)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 7:35am UTC](https://discuss.elastic.co/t/dhcp-audit-using-elk-stack/239962 "2020-07-07T07:35:37Z")
We were interested in monitoring DHCP leases in our environment using ELK stack. As we do currently not have Beats, we are forced to use Windows logs and either forward these or copy these. We found a very good blog desc… --- ## [Searching on " for inches](https://discuss.elastic.co/t/searching-on-for-inches/240100)
**Author:** [@DaveG](https://discuss.elastic.co/u/DaveG)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 6:49am UTC](https://discuss.elastic.co/t/searching-on-for-inches/240100 "2020-07-07T06:49:24Z")
Hi All, I wish to be able to search on: 10 " 10 inches etc where " is a synonym for inches. I saw post : Synonym analyzer issue in elastic search but no reply. I do not know what a good strategy for this is given … --- ## [TVSB visualization filter parameter does not take effect](https://discuss.elastic.co/t/tvsb-visualization-filter-parameter-does-not-take-effect/240101)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 6:59am UTC](https://discuss.elastic.co/t/tvsb-visualization-filter-parameter-does-not-take-effect/240101 "2020-07-07T06:59:10Z")
Condition k8s\_container\_name: osc-ali-prd filters out all information, leaving only the information containing osc.xxxx.cn is correct, but the filter is not successful. --- ## [Searching text with reserved characters with fuzzy](https://discuss.elastic.co/t/searching-text-with-reserved-characters-with-fuzzy/240099)
**Author:** [@DaveG](https://discuss.elastic.co/u/DaveG)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 6:39am UTC](https://discuss.elastic.co/t/searching-text-with-reserved-characters-with-fuzzy/240099 "2020-07-07T06:39:34Z")
Hi All, I have queries where I want to allow searching on part numbers/help ticket numbers and the like with reserved characters in them. For example: SR-1234 SR/1234 The fields are analyzed with the standard analyz… --- ## [Ilm-history system index does not start with a dot](https://discuss.elastic.co/t/ilm-history-system-index-does-not-start-with-a-dot/239335)
**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 6:30am UTC](https://discuss.elastic.co/t/ilm-history-system-index-does-not-start-with-a-dot/239335 "2020-07-07T06:30:16Z")
Hi Here are the typical system indices found when using the Elastic Stack 7.6 (ES and Kibana are relevant here): GET \_cat/indices?h=i&s=i .apm-agent-configuration .kibana\_1 .kibana\_task\_manager\_1 .monitoring-alerts-7 .… --- ## [Два хоста filebeat +ELK](https://discuss.elastic.co/t/filebeat-elk/239596)
**Author:** [@Ivan\_Bykov](https://discuss.elastic.co/u/Ivan_Bykov)\ **Replies:** 9\ **Last updated:** [July 7, 2020, 6:27am UTC](https://discuss.elastic.co/t/filebeat-elk/239596 "2020-07-07T06:27:54Z")
Добрый день. У меня настроен ELK 7.8.0 и filebeat 7.8.0 который читает лог1 и отдает с индексом лог1 в logstash. Собственно возникла потребность подключить еще один хост filbeat с лог2 и индексом лог2 для logstash. На… --- ## [Elasticsearch 7.7.0v에서 default 격인 Index Template를 추가하고 싶습니다.](https://discuss.elastic.co/t/elasticsearch-7-7-0v-default-index-template/240089)
**Author:** [@mcat](https://discuss.elastic.co/u/mcat)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 6:01am UTC](https://discuss.elastic.co/t/elasticsearch-7-7-0v-default-index-template/240089 "2020-07-07T06:01:59Z")
안녕하세요? 7.8 버전에서부터는 priority 설정이 추가되어, 그 설정을 이용해 default격 Index template를 생성 하면 됐지만. 7.7은 priority 설정이 없는것으로 압니다. 이미 입력된 Template의 Index\_patterns에 해당되는 Index 외에 다른 Index에 적용될 Template 설정 방법이 있을까요? --- ## [\[indices:data/write/bulk\[s\]\] is unauthorized for user \[loader-user\]"})](https://discuss.elastic.co/t/indices-data-write-bulk-s-is-unauthorized-for-user-loader-user/239169)
**Author:** [@eemtzc](https://discuss.elastic.co/u/eemtzc)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 5:55am UTC](https://discuss.elastic.co/t/indices-data-write-bulk-s-is-unauthorized-for-user-loader-user/239169 "2020-07-07T05:55:46Z")
Hello, I am starting a new pipeline on one of my logstash servers, but when I start the service I get this error. Jun 29 10:50:00 mryt2ls02 logstash: \[2020-06-29T10:50:00,449\]\[INFO \]\[logstash.outputs.elasticsearch\]\[Tre… --- ## [Unable to install Elastic Search on Windows](https://discuss.elastic.co/t/unable-to-install-elastic-search-on-windows/240091)
**Author:** [@Ram\_Vashista](https://discuss.elastic.co/u/Ram_Vashista)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 5:42am UTC](https://discuss.elastic.co/t/unable-to-install-elastic-search-on-windows/240091 "2020-07-07T05:42:05Z")
Hi there, I am in the need to create elastic search server to save my UiPath robots logs. I followed below installation guide from UiPath https://docs.uipath.com/orchestrator/v2018.2/docs/prerequisites-for-installation#… --- ## [CANVAS timelion의 Label을 조건에 따라 변경하는 방법](https://discuss.elastic.co/t/canvas-timelion-label/239956)
**Author:** [@dutkadutka26](https://discuss.elastic.co/u/dutkadutka26)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 4:26am UTC](https://discuss.elastic.co/t/canvas-timelion-label/239956 "2020-07-07T04:26:52Z")
CANVAS에서 timelion을 DataSource로 해서 Line Chart를 구현했습니다. 그런데 주식회사 캔버스, (주)캔버스, 캔버스가 별도의 Line 으로 나와서, 이들을 하나로 합치고 싶은데요. 예를 들어 CASE WHEN label like '%캔버스' THEN '캔버스'처럼 조건을 걸고 싶습니다. expression editor에서 case와 switch를 쓰면 될… --- ## [데시보드의 전체 필터에 대해서](https://discuss.elastic.co/t/topic/239963)
**Author:** [@j\_lim](https://discuss.elastic.co/u/j_lim)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 4:22am UTC](https://discuss.elastic.co/t/topic/239963 "2020-07-07T04:22:20Z")
키바나 데시보드에 전체 필터를 걸고 해당 데시보드를 iframe으로 사용하고있습니다. 데시보드를 로드하는 순서에 대해서, 전체필터가 있는경우 어떤식으로 동작하는지 궁금합니다. 전체 doc 에 대해서 그래프를 로드한 후, "전체 필터"에 대해서 재 요청을 하는지 "전체 필터"로 걸러진 doc에 대해서 그래프를 로드하는건지 "전체 필터"를 사용하는 경우와 아닌 경우 데이터양이 많을… --- ## [Error: Port 5601 is already in use. Another instance of Kibana may be running!](https://discuss.elastic.co/t/error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/240070)
**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\ **Replies:** 5\ **Last updated:** [July 7, 2020, 1:44am UTC](https://discuss.elastic.co/t/error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/240070 "2020-07-07T01:44:06Z")
bin kibana log \[22:25:12.491\] \[warning\]\[plugins-discovery\] Expect plugin "id" in camelCase, but found: apm\_oss log \[22:25:12.504\] \[warning\]\[plugins-discovery\] Expect plugin "id" in camelCase, but found: triggers\_a… --- ## [Network traffic between Elastic Cloud and my infrastructure](https://discuss.elastic.co/t/network-traffic-between-elastic-cloud-and-my-infrastructure/236319)
**Author:** [@bg\_aad](https://discuss.elastic.co/u/bg_aad)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 1:30am UTC](https://discuss.elastic.co/t/network-traffic-between-elastic-cloud-and-my-infrastructure/236319 "2020-07-07T01:30:32Z")
Good morning, I would like to know if the network traffic generate sending logs between my infrastructure in GCP and Elastic Cloud it will be internal (VPC Peering) or external (Internet). In my case, this will mean a… --- ## [Upgrade elasticsearch from 6.8 to 7.8 date format](https://discuss.elastic.co/t/upgrade-elasticsearch-from-6-8-to-7-8-date-format/240072)
**Author:** [@krishm](https://discuss.elastic.co/u/krishm)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 1:18am UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-from-6-8-to-7-8-date-format/240072 "2020-07-07T01:18:25Z")
Hello There, I am working on elasticsearch upgrade from 6.8 to 7.x. i have a date field using format below and i understand that i need to change the mapping to "uuuu-MM-dd HH:mm:ss" before upgrading to elasticsearch 7.… --- ## [Using other than comma as separator in csv filter](https://discuss.elastic.co/t/using-other-than-comma-as-separator-in-csv-filter/240067)
**Author:** [@Shipper01](https://discuss.elastic.co/u/Shipper01)\ **Replies:** 4\ **Last updated:** [July 7, 2020, 12:53am UTC](https://discuss.elastic.co/t/using-other-than-comma-as-separator-in-csv-filter/240067 "2020-07-07T00:53:01Z")
I have files that has either a semi-colon or pipe as separator. The values within the fields can have commas, so I can't use a commas as separator. I have tried using the csv filter and altering the separator. My conf… --- ## [Kibana: How to get raw data and aggregate in KQL in a serial fashion?](https://discuss.elastic.co/t/kibana-how-to-get-raw-data-and-aggregate-in-kql-in-a-serial-fashion/239930)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 12:23am UTC](https://discuss.elastic.co/t/kibana-how-to-get-raw-data-and-aggregate-in-kql-in-a-serial-fashion/239930 "2020-07-07T00:23:12Z")
I was looking for equivalent of splunk query (i.e. get raw data , then do aggregation on top of that) index=some\_data | stats count by hostname The above will aggregate all the data by hostname and shows the data in n… --- ## [Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms another client :)](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms-another-client/240022)
**Author:** [@sd99](https://discuss.elastic.co/u/sd99)\ **Replies:** 3\ **Last updated:** [July 6, 2020, 11:58pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms-another-client/240022 "2020-07-06T23:58:00Z")
Hi, I have installed Elasticsearch in my server and now I am installing Kibana, and there is an error appear with me. ( Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms) I'm also trying to alte… --- ## [Customized document to term scoring](https://discuss.elastic.co/t/customized-document-to-term-scoring/239559)
**Author:** [@snakeztc](https://discuss.elastic.co/u/snakeztc)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 12:49am UTC](https://discuss.elastic.co/t/customized-document-to-term-scoring/239559 "2020-07-02T00:49:22Z")
Hi, I am using ES to do research for my learning to rank algorithm. Essentially instead of using TF-IDF or BM25, my scoring function looks like: TF(D, t) = model(D, t) where t is each term in the document. Instead of j… --- ## [Elk API , scheduled task, Empty Response from search](https://discuss.elastic.co/t/elk-api-scheduled-task-empty-response-from-search/239588)
**Author:** [@itamar\_medyoni](https://discuss.elastic.co/u/itamar_medyoni)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 11:19pm UTC](https://discuss.elastic.co/t/elk-api-scheduled-task-empty-response-from-search/239588 "2020-07-06T23:19:23Z")
Hello all, I have created a python script, which receives data from our cluster, calculates it and labels documents. I use the search , and update by query functions in the script. The script runs well, and the functi… --- ## [Snapshot and Restore 6.8.8 - Null Pointer Exception after Upgrade from 6.2.4 to 6.8.8](https://discuss.elastic.co/t/snapshot-and-restore-6-8-8-null-pointer-exception-after-upgrade-from-6-2-4-to-6-8-8/239628)
**Author:** [@Neha\_Wagholikar](https://discuss.elastic.co/u/Neha_Wagholikar)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 12:07pm UTC](https://discuss.elastic.co/t/snapshot-and-restore-6-8-8-null-pointer-exception-after-upgrade-from-6-2-4-to-6-8-8/239628 "2020-07-02T12:07:25Z")
Hi, I have upgraded my ELK from 6.2.4 to 6.8.8. Used Azure plugin for Snapshot Before Upgrade, my backup was working fine on both Public and Azure Stack. After Upgrade ,On public I am able to take backup but on Azure… --- ## [Recomendations to an offline instalation of ElasticStack](https://discuss.elastic.co/t/recomendations-to-an-offline-instalation-of-elasticstack/239722)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 5\ **Last updated:** [July 6, 2020, 11:11pm UTC](https://discuss.elastic.co/t/recomendations-to-an-offline-instalation-of-elasticstack/239722 "2020-07-06T23:11:38Z")
Hi, Im going to try to install the ElasticStack in an enviroment with no internet access, do you have any recomendation or things to have in mind before the instalation? Thanks. --- ## [GeoIP resolve query in O365 logs](https://discuss.elastic.co/t/geoip-resolve-query-in-o365-logs/239754)
**Author:** [@Ravy](https://discuss.elastic.co/u/Ravy)\ **Replies:** 0\ **Last updated:** [July 3, 2020, 8:27am UTC](https://discuss.elastic.co/t/geoip-resolve-query-in-o365-logs/239754 "2020-07-03T08:27:43Z")
How to fix GeoIP resolve query in O365 logs Error o365, beats\_input\_raw\_event, \_geoip\_lookup\_failure --- ## [How to make elasticsearch turn on automatically](https://discuss.elastic.co/t/how-to-make-elasticsearch-turn-on-automatically/240048)
**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\ **Replies:** 5\ **Last updated:** [July 6, 2020, 9:56pm UTC](https://discuss.elastic.co/t/how-to-make-elasticsearch-turn-on-automatically/240048 "2020-07-06T21:56:42Z")
Hi All, I have a prob with elasticsearch, I believe it is installed properly on my mac when I shut down and turn on the laptop it won't turn on again I did installation few time same issues, how u are guys handling this… --- ## [How to change logstash locale](https://discuss.elastic.co/t/how-to-change-logstash-locale/239729)
**Author:** [@jang](https://discuss.elastic.co/u/jang)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 9:47pm UTC](https://discuss.elastic.co/t/how-to-change-logstash-locale/239729 "2020-07-06T21:47:45Z")
hi. I'm using elastic stack. i want to logstash locale. The default location is 9 hours slower than the area I live in. my logstash.conf index =\> "%{\[@metadata\]\[beat\]}-%{+YYYY.MM.dd}" run it with the above settings… --- ## [Complicated Nested Query](https://discuss.elastic.co/t/complicated-nested-query/239925)
**Author:** [@jacksonpv](https://discuss.elastic.co/u/jacksonpv)\ **Replies:** 0\ **Last updated:** [July 5, 2020, 1:33pm UTC](https://discuss.elastic.co/t/complicated-nested-query/239925 "2020-07-05T13:33:10Z")
Hi Guys Please suggest a query or approach for this problem below Here I have two records in my type called "journey" Record 1 { "journeyid":1, "journeyname":"test1", "journeydetail:\[ { "pickupcode":"Banglore", "… --- ## [Rescorer plugin. How to parse inner hits with original scores](https://discuss.elastic.co/t/rescorer-plugin-how-to-parse-inner-hits-with-original-scores/239976)
**Author:** [@tarmo](https://discuss.elastic.co/u/tarmo)\ **Replies:** 0\ **Last updated:** [July 6, 2020, 8:41am UTC](https://discuss.elastic.co/t/rescorer-plugin-how-to-parse-inner-hits-with-original-scores/239976 "2020-07-06T08:41:14Z")
I create a query to ES: GET my-index/\_search { "query": { "nested": { "inner\_hits": {}, "score\_mode": "max", "path": "my\_nested\_field", "query": { "bool"… --- ## [Log Ingestion from Splunk](https://discuss.elastic.co/t/log-ingestion-from-splunk/240059)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 0\ **Last updated:** [July 6, 2020, 8:31pm UTC](https://discuss.elastic.co/t/log-ingestion-from-splunk/240059 "2020-07-06T20:31:57Z")
I am trying to get logs from Splunk to Logstash. I first tried straight up syslog output from Splunk heavy forwarders to logstash, but that wrote each Windows Event Viewer line to a separate syslog event. I don't want to… --- ## [Error in Kibana :(](https://discuss.elastic.co/t/error-in-kibana/240033)
**Author:** [@sd99](https://discuss.elastic.co/u/sd99)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 7:34pm UTC](https://discuss.elastic.co/t/error-in-kibana/240033 "2020-07-06T19:34:13Z")
I have a problem with Kibana, can anyone help me here :frowning: --- ## [Disk used space is higher than the indices used space](https://discuss.elastic.co/t/disk-used-space-is-higher-than-the-indices-used-space/240025)
**Author:** [@Oxygen\_13](https://discuss.elastic.co/u/Oxygen_13)\ **Replies:** 5\ **Last updated:** [July 6, 2020, 6:34pm UTC](https://discuss.elastic.co/t/disk-used-space-is-higher-than-the-indices-used-space/240025 "2020-07-06T18:34:51Z")
My elk server is having 1000 GB space. When I check the available space showing 96% utilized. however indices used only 160 GB. Could you please help me how can I clear/delete used space, so that I will have more space. … --- ## [Logstash : jdbc - Unable to connect to database](https://discuss.elastic.co/t/logstash-jdbc-unable-to-connect-to-database/239898)
**Author:** [@Amine\_Aloui](https://discuss.elastic.co/u/Amine_Aloui)\ **Replies:** 2\ **Last updated:** [July 6, 2020, 6:18pm UTC](https://discuss.elastic.co/t/logstash-jdbc-unable-to-connect-to-database/239898 "2020-07-06T18:18:23Z")
this is my file : contact.conf input { jdbc { jdbc\_driver\_library =\> "/tmp/postgresql-42.2.12.jar" jdbc\_driver\_class =\> "org.postgresql.Driver" jdbc\_connection\_st… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1346) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1348)