# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1357 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1358 --- ## [Upgraded to Elasticsearch 7.8.0 and now date fields are in fields key instead of \_source](https://discuss.elastic.co/t/upgraded-to-elasticsearch-7-8-0-and-now-date-fields-are-in-fields-key-instead-of-source/239137)
**Author:** [@Federico\_Foschini](https://discuss.elastic.co/u/Federico_Foschini)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 4:15pm UTC](https://discuss.elastic.co/t/upgraded-to-elasticsearch-7-8-0-and-now-date-fields-are-in-fields-key-instead-of-source/239137 "2020-06-30T16:15:30Z")
Hello, I've upgraded my cluster from 6.8.0 to 7.8.0. This is my template: { "index\_patterns": \[ "example-\*" \], "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 0, "… --- ## [Regex in Painless script](https://discuss.elastic.co/t/regex-in-painless-script/239344)
**Author:** [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 4:11pm UTC](https://discuss.elastic.co/t/regex-in-painless-script/239344 "2020-06-30T16:11:27Z")
Hi Team, Need help to regex below doc to find "ERR\_ADM\_MAKER\_NOT\_FOUND " "value": "{\\"errorCode\\":\\"ERR\_ADM\_MAKER\_NOT\_FOUND\\",\\"errorMessage\\":\\"Maker not found\\"}", Regards, Jalpesh --- ## [Kibana Alerting](https://discuss.elastic.co/t/kibana-alerting/235775)
**Author:** [@Reeker](https://discuss.elastic.co/u/Reeker)\ **Replies:** 4\ **Last updated:** [June 30, 2020, 4:08pm UTC](https://discuss.elastic.co/t/kibana-alerting/235775 "2020-06-30T16:08:57Z")
Hello Team, I am trying to get the Alerting to work in Kibana but i think i am missing something. I would like to set a log alerting for specific strings from the logs. Would that be possible? Also is Alerting and Ac… --- ## [Kibana not showing any results in Discover with custom timestamp](https://discuss.elastic.co/t/kibana-not-showing-any-results-in-discover-with-custom-timestamp/239273)
**Author:** [@Terizian](https://discuss.elastic.co/u/Terizian)\ **Replies:** 4\ **Last updated:** [June 30, 2020, 3:57pm UTC](https://discuss.elastic.co/t/kibana-not-showing-any-results-in-discover-with-custom-timestamp/239273 "2020-06-30T15:57:32Z")
Version: 7.7.1 I've pushed some data into Elasticsearch using the Python client library. Here is the mapping for my data that I got by running GET rss-test/\_mapping in the Dev Tools Console: { "rss-test" : { … --- ## [Not able to access kibana UI hosted on aws](https://discuss.elastic.co/t/not-able-to-access-kibana-ui-hosted-on-aws/238956)
**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\ **Replies:** 3\ **Last updated:** [June 30, 2020, 3:39pm UTC](https://discuss.elastic.co/t/not-able-to-access-kibana-ui-hosted-on-aws/238956 "2020-06-30T15:39:20Z")
kibana is running on a server on AWS (ELK is also on the same server) but i am not able to access it on UI. It's public DNS : ec2-13-126-209-194.ap-south-1.compute.amazonaws.com private IP: 172.31.4.164 i am trying h… --- ## [Zlib::GzipFile::Error: not in gzip format with input file codec =\> "gzip\_lines"](https://discuss.elastic.co/t/zlib-not-in-gzip-format-with-input-file-codec-gzip-lines/239334)
**Author:** [@jdelouche](https://discuss.elastic.co/u/jdelouche)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 3:14pm UTC](https://discuss.elastic.co/t/zlib-not-in-gzip-format-with-input-file-codec-gzip-lines/239334 "2020-06-30T15:14:46Z")
Hi, I am not able to use the logstash-codec-gzip\_lines plugin because it tells me that .gz files are not in gzip format, but if I check the file I find no specific issue: gunzip -tv sl\_trace.trace.gz sl\_trace.trace.gz:… --- ## [Need Help on Logstash filter If-Else Condition](https://discuss.elastic.co/t/need-help-on-logstash-filter-if-else-condition/239333)
**Author:** [@Kim\_Mendoza](https://discuss.elastic.co/u/Kim_Mendoza)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 3:12pm UTC](https://discuss.elastic.co/t/need-help-on-logstash-filter-if-else-condition/239333 "2020-06-30T15:12:32Z")
Please check my Logstash filter config. I cannot find my error logs cannot transfer to elasticsearch. filter { if \[fields\]\[logtype\] == "access.log" { grok { match =\> \[ "message", "%{WORD:host} %{WORD:host}\[ "%{NOTSP… --- ## [Kibana 7.7.0 Custom Label not present](https://discuss.elastic.co/t/kibana-7-7-0-custom-label-not-present/233754)
**Author:** [@EsequiasNeto](https://discuss.elastic.co/u/EsequiasNeto)\ **Replies:** 6\ **Last updated:** [June 30, 2020, 2:58pm UTC](https://discuss.elastic.co/t/kibana-7-7-0-custom-label-not-present/233754 "2020-06-30T14:58:39Z")
When I use bucket metric I can't find the "Custom Label". It happens in all visualizations! --- ## [Query for a new entry on a field](https://discuss.elastic.co/t/query-for-a-new-entry-on-a-field/239296)
**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\ **Replies:** 2\ **Last updated:** [June 30, 2020, 2:10pm UTC](https://discuss.elastic.co/t/query-for-a-new-entry-on-a-field/239296 "2020-06-30T14:10:28Z")
Hi I have an index which contains a field network\_device\_ID I want to alert whenever there a new entry coming into the Index. what is the best way to achieve this? Cheers, Ginu --- ## [ECK YAML examples for production-grade deployment](https://discuss.elastic.co/t/eck-yaml-examples-for-production-grade-deployment/238603)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 12:12pm UTC](https://discuss.elastic.co/t/eck-yaml-examples-for-production-grade-deployment/238603 "2020-06-30T12:12:52Z")
Hello, I have an on-prem setup that I want to move to the cloud. I want to run it on Kubernetes for portability. I have selected AWS EKS (since I have credits). I am able to follow the ECK document and get basic nodes up… --- ## [ELK : logstash with 3 different beats inputs on different ports with 3 different indexes](https://discuss.elastic.co/t/elk-logstash-with-3-different-beats-inputs-on-different-ports-with-3-different-indexes/239318)
**Author:** [@olivierdrueuil](https://discuss.elastic.co/u/olivierdrueuil)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 1:50pm UTC](https://discuss.elastic.co/t/elk-logstash-with-3-different-beats-inputs-on-different-ports-with-3-different-indexes/239318 "2020-06-30T13:50:11Z")
hello I have setup an ELK with 3 beats configurations for 3 different services : httpd,mysql,ibm MQ \<\[root@elktest20 conf.d\]# pwd /etc/logstash/conf.d \[root@elktest20 conf.d\]# ls 02-beats-mysql.conf 03.beats-mq.c… --- ## [Logstash sending duplicate \_bulk requests without any apparent reason](https://discuss.elastic.co/t/logstash-sending-duplicate-bulk-requests-without-any-apparent-reason/239311)
**Author:** [@bartier](https://discuss.elastic.co/u/bartier)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 1:11pm UTC](https://discuss.elastic.co/t/logstash-sending-duplicate-bulk-requests-without-any-apparent-reason/239311 "2020-06-30T13:11:37Z")
Hello, Today we have a setup like this: kafka cluster --\> (4 instances) logstash 5.6.8 --\> elasticsearch cluster Logstash instances consumes multiple topics from kafka and send \_bulk requests to elasticsearch cluster,… --- ## [Reindex not copying every document that exists on the source index](https://discuss.elastic.co/t/reindex-not-copying-every-document-that-exists-on-the-source-index/239313)
**Author:** [@egibrajshori](https://discuss.elastic.co/u/egibrajshori)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 1:27pm UTC](https://discuss.elastic.co/t/reindex-not-copying-every-document-that-exists-on-the-source-index/239313 "2020-06-30T13:27:32Z")
I have around 20 indexes to reindex after some mapping changes but on any index that has a high number of documents e.g 500.000 the reindexing process stops abruptly and only a random number of document is reindexed. Le… --- ## [Is ILM ia available in basic subscription of elasticsearch 7.8?](https://discuss.elastic.co/t/is-ilm-ia-available-in-basic-subscription-of-elasticsearch-7-8/239304)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 1:26pm UTC](https://discuss.elastic.co/t/is-ilm-ia-available-in-basic-subscription-of-elasticsearch-7-8/239304 "2020-06-30T13:26:26Z")
Hi Friends...! Hope everyone doing good. Please let me know ILM is available for free in elasticsearch 7.8. Currently I'm using the elastic version of 7.2.1. I want to create index for every 3 months. But the thing is… --- ## [Datatable Visualization how to add average vales for two different time range](https://discuss.elastic.co/t/datatable-visualization-how-to-add-average-vales-for-two-different-time-range/239309)
**Author:** [@ulas\_yuksel](https://discuss.elastic.co/u/ulas_yuksel)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 1:09pm UTC](https://discuss.elastic.co/t/datatable-visualization-how-to-add-average-vales-for-two-different-time-range/239309 "2020-06-30T13:09:16Z")
Hi, I've sample application server log and I've created simple "Uri, Count,Average" Datatable visualization. I need additional column which gives X (defined as one of 15min, 1 week, etc depend on the requirement) minute… --- ## [Enabling Pagination using spring-data-elasticsearch](https://discuss.elastic.co/t/enabling-pagination-using-spring-data-elasticsearch/239267)
**Author:** [@Punj\_Shah](https://discuss.elastic.co/u/Punj_Shah)\ **Replies:** 3\ **Last updated:** [June 30, 2020, 12:57pm UTC](https://discuss.elastic.co/t/enabling-pagination-using-spring-data-elasticsearch/239267 "2020-06-30T12:57:49Z")
Hello! I've integrated Spring-elastic-data into Spring Boot Project to achieve the Pagination functionality in ES. Previously I was using query and response into List as below, SearchResponse searchResponse = client.s… --- ## [Custom logs not appearing in visualization](https://discuss.elastic.co/t/custom-logs-not-appearing-in-visualization/239118)
**Author:** [@TheNmaptomyHeartBeat](https://discuss.elastic.co/u/TheNmaptomyHeartBeat)\ **Replies:** 2\ **Last updated:** [June 30, 2020, 12:56pm UTC](https://discuss.elastic.co/t/custom-logs-not-appearing-in-visualization/239118 "2020-06-30T12:56:43Z")
Hi all, I created custom logs in NGINX to log for http.response.time and http.response.upstream.time. I updated the grok filter on the NGINX module pipeline for Filebeat. I am receiving the data on the Filebeat-\* inde… --- ## [Beat for RDD files](https://discuss.elastic.co/t/beat-for-rdd-files/239299)
**Author:** [@anikajaninaelfie](https://discuss.elastic.co/u/anikajaninaelfie)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 12:42pm UTC](https://discuss.elastic.co/t/beat-for-rdd-files/239299 "2020-06-30T12:42:26Z")
Hello there! I want to read RDD Files and transfer them to Kibana. Unfortunately, Filebeat can't manage that. Is there any other solution than to develop a beat for that purpose. I fount this post from 2016: Any prog… --- ## [Obtaining a list of filtered document properties](https://discuss.elastic.co/t/obtaining-a-list-of-filtered-document-properties/238829)
**Author:** [@alcalin](https://discuss.elastic.co/u/alcalin)\ **Replies:** 5\ **Last updated:** [June 30, 2020, 9:02am UTC](https://discuss.elastic.co/t/obtaining-a-list-of-filtered-document-properties/238829 "2020-06-30T09:02:12Z")
Hello, I have the following index mappings: { "mappings": { "properties": { "library": { "type": "keyword" }, "books": { "properties": { … --- ## [Internal Server Error at Fetch.\_callee3$](https://discuss.elastic.co/t/internal-server-error-at-fetch-callee3/239298)
**Author:** [@Alvaro\_Sanz](https://discuss.elastic.co/u/Alvaro_Sanz)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 12:37pm UTC](https://discuss.elastic.co/t/internal-server-error-at-fetch-callee3/239298 "2020-06-30T12:37:06Z")
Hello, The following error keeps appearing and I dont know why it is happening. I am not cabable to find anything online that can help me with this issue: Error: Internal Server Error at Fetch.\_callee3$ (https://ki… --- ## [Remove 'field.keyword' from index](https://discuss.elastic.co/t/remove-field-keyword-from-index/239271)
**Author:** [@ajayraghuraj](https://discuss.elastic.co/u/ajayraghuraj)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 12:30pm UTC](https://discuss.elastic.co/t/remove-field-keyword-from-index/239271 "2020-06-30T12:30:26Z")
How do I remove 'field.keyword' from my index ? I should be able to see 'field' only here is my GET \_mapping output { "collectd-2020.06.29" : { "mappings" : { "doc" : { "properties" : { … --- ## [Hosts duplicated with and without fqdn](https://discuss.elastic.co/t/hosts-duplicated-with-and-without-fqdn/238546)
**Author:** [@Christian\_SANCHEZ](https://discuss.elastic.co/u/Christian_SANCHEZ)\ **Replies:** 6\ **Last updated:** [June 30, 2020, 12:28pm UTC](https://discuss.elastic.co/t/hosts-duplicated-with-and-without-fqdn/238546 "2020-06-30T12:28:47Z")
Hi I have 7.8 beats installed on Windows servers (audit, metric, file and winlog). They all push events directly to ES In the SIEM, i see my hosts duplicated : once with simple name, once with fqdn It seems winlogbea… --- ## [How to get unique count with a condition?](https://discuss.elastic.co/t/how-to-get-unique-count-with-a-condition/239168)
**Author:** [@Marcos\_Suarez](https://discuss.elastic.co/u/Marcos_Suarez)\ **Replies:** 2\ **Last updated:** [June 30, 2020, 12:15pm UTC](https://discuss.elastic.co/t/how-to-get-unique-count-with-a-condition/239168 "2020-06-30T12:15:16Z")
Hello, I am new in kibana and would like to know how can I do a unique count applying a condition? For example: Unique customers (customerid field) count where sales(sales field) are greater than $100 Can i create th… --- ## [Calculate increase in queue size](https://discuss.elastic.co/t/calculate-increase-in-queue-size/239291)
**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 12:08pm UTC](https://discuss.elastic.co/t/calculate-increase-in-queue-size/239291 "2020-06-30T12:08:33Z")
Hi, Im monitoring activemq queue data, I would like to have a graph to show may many messages were enqueued since the last check. I can capture the enqueued number which will always be increasing , but is it possible t… --- ## [Замедление индексирования документов в связи с ошибками в Logstash](https://discuss.elastic.co/t/logstash/239096)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 7\ **Last updated:** [June 30, 2020, 12:05pm UTC](https://discuss.elastic.co/t/logstash/239096 "2020-06-30T12:05:23Z")
Добрый день! Имею связку filebeat -\> kafka \<- logstash -\> elasticsearch Появилась проблема связанная с изменением типа поля, что вызывало такую запись в логе Logstash и отбрасывание документа: "status"=\>400, "error"=\>{… --- ## [Winlogbeat not sending logs via logstash on port 5044](https://discuss.elastic.co/t/winlogbeat-not-sending-logs-via-logstash-on-port-5044/237327)
**Author:** [@proxx](https://discuss.elastic.co/u/proxx)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 11:46am UTC](https://discuss.elastic.co/t/winlogbeat-not-sending-logs-via-logstash-on-port-5044/237327 "2020-06-30T11:46:56Z")
My Logstash is running on port 5044, however when i started my Winlogbeat service on my windows server, which it show running, checking my Kibana i couldn't find the indices to index Here is my Logstash result \[root@o… --- ## [Filebeat and Logstash are running but no output on logstash](https://discuss.elastic.co/t/filebeat-and-logstash-are-running-but-no-output-on-logstash/239255)
**Author:** [@falconpurple](https://discuss.elastic.co/u/falconpurple)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 11:42am UTC](https://discuss.elastic.co/t/filebeat-and-logstash-are-running-but-no-output-on-logstash/239255 "2020-06-30T11:42:31Z")
I have configured elk stack with filebeat. I am standing logs from filebeat to logstash but it's not running. The configuration in filebeat.yml : filebeat.inputs: - type: log enabled: true -C:/Users/mohnadik/… --- ## [Index pattern created not visible until Kibana restart](https://discuss.elastic.co/t/index-pattern-created-not-visible-until-kibana-restart/239282)
**Author:** [@LievenMerckx](https://discuss.elastic.co/u/LievenMerckx)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 11:27am UTC](https://discuss.elastic.co/t/index-pattern-created-not-visible-until-kibana-restart/239282 "2020-06-30T11:27:38Z")
See https://discuss.elastic.co/t/problems-to-create-an-index-pattern/179787 I got the same behaviour as the above issue. You create an index pattern but when switching to Discovery , it's not there. Also in the "Index … --- ## [Newline characters in syslog output](https://discuss.elastic.co/t/newline-characters-in-syslog-output/239279)
**Author:** [@brandonstark](https://discuss.elastic.co/u/brandonstark)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 11:18am UTC](https://discuss.elastic.co/t/newline-characters-in-syslog-output/239279 "2020-06-30T11:18:41Z")
My incoming syslog has newline characters. In Kibana I see the messages as multiline text. The outgoing syslog messages change the newlines to literal "\\n". For example, the incoming message: incoming message app… --- ## [How to plot (raw) data, Using Vega](https://discuss.elastic.co/t/how-to-plot-raw-data-using-vega/238259)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 22\ **Last updated:** [June 30, 2020, 11:14am UTC](https://discuss.elastic.co/t/how-to-plot-raw-data-using-vega/238259 "2020-06-30T11:14:29Z")
Hi, I want to plot my raw time series data. As far as I know this is not possible with normal visualizations. This is why I am currently looking into Vega-Lite. The data structure looks like this: { "\_index": "index\_… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1356) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1358)