# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1401 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1402 --- ## [Handling events after using split](https://discuss.elastic.co/t/handling-events-after-using-split/235929)
**Author:** [@pasno](https://discuss.elastic.co/u/pasno)\ **Replies:** 2\ **Last updated:** [June 8, 2020, 1:16pm UTC](https://discuss.elastic.co/t/handling-events-after-using-split/235929 "2020-06-08T13:16:33Z")
Hi, I'm trying to figure out how to use the split-filter in Logstash correctly. I've read forum-posts and the doc, but don't get to the bottom of this. I'm using the Azure Eventhub plugin to ingest stream of logs. The … --- ## [Sizing ECK on Azure](https://discuss.elastic.co/t/sizing-eck-on-azure/235993)
**Author:** [@guizaols](https://discuss.elastic.co/u/guizaols)\ **Replies:** 3\ **Last updated:** [June 8, 2020, 1:12pm UTC](https://discuss.elastic.co/t/sizing-eck-on-azure/235993 "2020-06-08T13:12:00Z")
Hello everybody. I'm planning to deploy ECK (using operator) in Azure with the following structure: Master: 3 Data: 3 Coordinator: 1 Ingest: 1 Is it a good start point? How much memory, CPU and disk should I allocat… --- ## [Logstash jdbc plugin internals](https://discuss.elastic.co/t/logstash-jdbc-plugin-internals/235743)
**Author:** [@luis\_g](https://discuss.elastic.co/u/luis_g)\ **Replies:** 4\ **Last updated:** [June 8, 2020, 1:07pm UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-internals/235743 "2020-06-08T13:07:30Z")
Hi, I have some questions regarding the internals of logstash when using the jdbc input plugin. I would like to mention that my current logstash configuration is working properly, but I want to know how the jdbc\_page\_s… --- ## [Ingest pipeline for kv split value](https://discuss.elastic.co/t/ingest-pipeline-for-kv-split-value/235215)
**Author:** [@inf2ravikumar](https://discuss.elastic.co/u/inf2ravikumar)\ **Replies:** 4\ **Last updated:** [June 8, 2020, 12:45pm UTC](https://discuss.elastic.co/t/ingest-pipeline-for-kv-split-value/235215 "2020-06-08T12:45:22Z")
Hi There I'm trying to create ingest pipeline for KV Ingest Processor splitting filed parsing not sure where I'm wrong any help would appreciate it POST /\_ingest/pipeline/\_simulate { "pipeline": { "description"… --- ## [Kibana readiness probe failed: Got HttP code 000](https://discuss.elastic.co/t/kibana-readiness-probe-failed-got-http-code-000/236100)
**Author:** [@Marcel27](https://discuss.elastic.co/u/Marcel27)\ **Replies:** 3\ **Last updated:** [June 8, 2020, 12:38pm UTC](https://discuss.elastic.co/t/kibana-readiness-probe-failed-got-http-code-000/236100 "2020-06-08T12:38:57Z")
installed helm charts for ElasticSearch and Kibana versus 7.7.1 on miniKube. After changing "green" the "yellow" (clusterHealthCheckParams) the ES-pod the readiness probe of ES pod is ok. Kibana does not get ready: Re… --- ## [Making kibana iframes faster](https://discuss.elastic.co/t/making-kibana-iframes-faster/234676)
**Author:** [@suryansh291195](https://discuss.elastic.co/u/suryansh291195)\ **Replies:** 2\ **Last updated:** [June 8, 2020, 12:31pm UTC](https://discuss.elastic.co/t/making-kibana-iframes-faster/234676 "2020-06-08T12:31:06Z")
HI I am using kibana dashboards as an iframe in angular application. I see that kibana is taking so long to load the page. It is taking \>1minute to load the page. It shows loading kibana untill the kibana dashboard load… --- ## [Eleasticsearch-service-x64 is stopped](https://discuss.elastic.co/t/eleasticsearch-service-x64-is-stopped/236169)
**Author:** [@alaa\_rekiba](https://discuss.elastic.co/u/alaa_rekiba)\ **Replies:** 0\ **Last updated:** [June 8, 2020, 12:30pm UTC](https://discuss.elastic.co/t/eleasticsearch-service-x64-is-stopped/236169 "2020-06-08T12:30:35Z")
i'm using software that is using elasticsearch 7.3.2 along with kibana in windows 10, after following the steps, i got elasticsearch service installed along with kibana but the elastic search service is stopped not lik… --- ## [Deploy ECK with local storage](https://discuss.elastic.co/t/deploy-eck-with-local-storage/234086)
**Author:** [@Virajsl](https://discuss.elastic.co/u/Virajsl)\ **Replies:** 4\ **Last updated:** [June 8, 2020, 12:16pm UTC](https://discuss.elastic.co/t/deploy-eck-with-local-storage/234086 "2020-06-08T12:16:30Z")
I am trying to deploy eck. My storage is in local disk. I wanted to create 3 master node cluster to begin with. My problem is do I need to create persistent volume and persistent volume claim for each master ? This is … --- ## [Elastic-Search Index not deleted but received ack. true](https://discuss.elastic.co/t/elastic-search-index-not-deleted-but-received-ack-true/233111)
**Author:** [@het](https://discuss.elastic.co/u/het)\ **Replies:** 7\ **Last updated:** [June 8, 2020, 12:02pm UTC](https://discuss.elastic.co/t/elastic-search-index-not-deleted-but-received-ack-true/233111 "2020-06-08T12:02:13Z")
Delete index API of elastic has responded with acknowledgment = true but the actual index is not deleted. We are using ES 5.3 Java TCP Client. We have 4 data nodes and 3 master nodes. In the elastic-search logs, we coul… --- ## [Change Image in Canvas](https://discuss.elastic.co/t/change-image-in-canvas/235487)
**Author:** [@rwr](https://discuss.elastic.co/u/rwr)\ **Replies:** 2\ **Last updated:** [June 8, 2020, 11:19am UTC](https://discuss.elastic.co/t/change-image-in-canvas/235487 "2020-06-08T11:19:46Z")
I want to change this image to another image (green) when followers is greater than 50. how to change it in kibana canvas? thanks all --- ## [Elastic Search text field aggregations](https://discuss.elastic.co/t/elastic-search-text-field-aggregations/234244)
**Author:** [@Naveena1](https://discuss.elastic.co/u/Naveena1)\ **Replies:** 7\ **Last updated:** [June 8, 2020, 11:03am UTC](https://discuss.elastic.co/t/elastic-search-text-field-aggregations/234244 "2020-06-08T11:03:10Z")
Is there anyway possible to find min or max aggregation on text fields when we group by some fields --- ## [One doc for each array item](https://discuss.elastic.co/t/one-doc-for-each-array-item/235936)
**Author:** [@genehunter29009](https://discuss.elastic.co/u/genehunter29009)\ **Replies:** 9\ **Last updated:** [June 8, 2020, 10:24am UTC](https://discuss.elastic.co/t/one-doc-for-each-array-item/235936 "2020-06-08T10:24:58Z")
I have documents with several arrays. one array I have gotten to work with help here. Thank you very much Badger. I have a 3 arrays I want to be able to visualize , but one is most important. It is useractions array. It… --- ## [Logstash pipeline blocks every write if one index isn't available](https://discuss.elastic.co/t/logstash-pipeline-blocks-every-write-if-one-index-isnt-available/236151)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 0\ **Last updated:** [June 8, 2020, 10:02am UTC](https://discuss.elastic.co/t/logstash-pipeline-blocks-every-write-if-one-index-isnt-available/236151 "2020-06-08T10:02:13Z")
Hi, My issue is that when I receive an event with a timestamp that's in the past, which would be written to the previous date-based index, it'll be blocked due to frozen state. However, that prevents every other event (… --- ## [Kibana 7.7.1 is not reflecting geo\_point data from my index pattern](https://discuss.elastic.co/t/kibana-7-7-1-is-not-reflecting-geo-point-data-from-my-index-pattern/236149)
**Author:** [@Rushabh\_Doshi](https://discuss.elastic.co/u/Rushabh_Doshi)\ **Replies:** 0\ **Last updated:** [June 8, 2020, 9:53am UTC](https://discuss.elastic.co/t/kibana-7-7-1-is-not-reflecting-geo-point-data-from-my-index-pattern/236149 "2020-06-08T09:53:52Z")
I have kibana 7.7.1 Trying to generate map visualization with my geo point data but its not coming Here is my logstash snippet, as i see the data in logs/discover tab geoip{ source =\> "IP" target =\> "geo.location" … --- ## [Use regex query in must](https://discuss.elastic.co/t/use-regex-query-in-must/236142)
**Author:** [@gauravuser](https://discuss.elastic.co/u/gauravuser)\ **Replies:** 1\ **Last updated:** [June 8, 2020, 9:36am UTC](https://discuss.elastic.co/t/use-regex-query-in-must/236142 "2020-06-08T09:36:36Z")
I am new to ES, i am having query as GET 2020-06-03/\_search { "query": { "bool": { "must": \[ { "term": { "Email": "u125@tester.com" … --- ## [How to force update the field format of kibana index pattern](https://discuss.elastic.co/t/how-to-force-update-the-field-format-of-kibana-index-pattern/233482)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 8\ **Last updated:** [June 8, 2020, 8:36am UTC](https://discuss.elastic.co/t/how-to-force-update-the-field-format-of-kibana-index-pattern/233482 "2020-06-08T08:36:44Z")
Fields including 'pathname' are generated dynamically by apmserver. "transaction.custom.pathname" is already a keyword field in the mapping, I keep creating new index patterns, "transaction.custom.pathname" is always … --- ## [APM Labels: best practices](https://discuss.elastic.co/t/apm-labels-best-practices/234924)
**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\ **Replies:** 3\ **Last updated:** [June 8, 2020, 8:31am UTC](https://discuss.elastic.co/t/apm-labels-best-practices/234924 "2020-06-08T08:31:14Z")
Hi! I'm using Elastic Stack for Application Performance Management (APM). Many applications will send metrics and transactions to a centralised solution of APM. I have some doubts about custom "labels", which is a dyn… --- ## [Error in connecting Filebeat oss 7.7.0 to S3](https://discuss.elastic.co/t/error-in-connecting-filebeat-oss-7-7-0-to-s3/235901)
**Author:** [@AbhilashPurohit](https://discuss.elastic.co/u/AbhilashPurohit)\ **Replies:** 11\ **Last updated:** [June 8, 2020, 8:08am UTC](https://discuss.elastic.co/t/error-in-connecting-filebeat-oss-7-7-0-to-s3/235901 "2020-06-08T08:08:22Z")
Hi All, I am having a big issue on configuring filebeat with S3 logs as type. Let me explain our Flow. I am not using Logstash. I am using Filebeat oss-7.x version in elastic.repo ( 7.7.0 version is installed) Elast… --- ## [Mapping timestamp in epoch\_second format](https://discuss.elastic.co/t/mapping-timestamp-in-epoch-second-format/235380)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 1\ **Last updated:** [June 8, 2020, 7:50am UTC](https://discuss.elastic.co/t/mapping-timestamp-in-epoch-second-format/235380 "2020-06-08T07:50:38Z")
Hi, I run into this blog post regarding storing timestamps. If I let Elasticsearch map the @timestamp field (as date) and there aren't milliseconds (always 000) in the logs, I'd assume that explicitly mapping that date… --- ## [Show sum of all metrics in a split series area graph](https://discuss.elastic.co/t/show-sum-of-all-metrics-in-a-split-series-area-graph/236135)
**Author:** [@tonyc](https://discuss.elastic.co/u/tonyc)\ **Replies:** 0\ **Last updated:** [June 8, 2020, 7:41am UTC](https://discuss.elastic.co/t/show-sum-of-all-metrics-in-a-split-series-area-graph/236135 "2020-06-08T07:41:42Z")
Is it possible to somehow show a total when splitting an area graph and stacking it like this? I can roughly estimate the total just by looking at the legend for the y-axis, but it would be nice to see a grand total s… --- ## [Missing secure\_url setting for Jira integration](https://discuss.elastic.co/t/missing-secure-url-setting-for-jira-integration/236129)
**Author:** [@Jaishree\_Pal](https://discuss.elastic.co/u/Jaishree_Pal)\ **Replies:** 0\ **Last updated:** [June 8, 2020, 7:11am UTC](https://discuss.elastic.co/t/missing-secure-url-setting-for-jira-integration/236129 "2020-06-08T07:11:08Z")
Hi guys, I was trying to integrate Jira account to raise issues from Kibana, but I'm getting this error. { "error" : { "root\_cause" : \[ { "type" : "settings\_exception", "reason" : "invalid j… --- ## [Index name with date and time of day](https://discuss.elastic.co/t/index-name-with-date-and-time-of-day/236124)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 4\ **Last updated:** [June 8, 2020, 7:02am UTC](https://discuss.elastic.co/t/index-name-with-date-and-time-of-day/236124 "2020-06-08T07:02:18Z")
Hello, is it possible to have the index name with date and time of day for example logstash-2020.06.08.08: 13??? --- ## [Update nested document java api](https://discuss.elastic.co/t/update-nested-document-java-api/236126)
**Author:** [@rohit.singh3](https://discuss.elastic.co/u/rohit.singh3)\ **Replies:** 0\ **Last updated:** [June 8, 2020, 6:58am UTC](https://discuss.elastic.co/t/update-nested-document-java-api/236126 "2020-06-08T06:58:57Z")
i have below document structure: { "\_index" : "products", "\_type" : "\_doc", "\_id" : "1f119af3-3b37-42bf-bd74-14266ad0487b", "\_score" : 1.0, "\_source" : { "id" : "1f119af… --- ## [Parse logfiles (haproxy/nginx/apache) and send to APM \[continued\]](https://discuss.elastic.co/t/parse-logfiles-haproxy-nginx-apache-and-send-to-apm-continued/235931)
**Author:** [@wosc](https://discuss.elastic.co/u/wosc)\ **Replies:** 2\ **Last updated:** [June 8, 2020, 6:43am UTC](https://discuss.elastic.co/t/parse-logfiles-haproxy-nginx-apache-and-send-to-apm-continued/235931 "2020-06-08T06:43:05Z")
\[This continues the topic https://discuss.elastic.co/t/parse-logfiles-haproxy-nginx-apache-and-send-to-apm/232418 which unfortunately does not allow me to reply anymore.\] Hi @axw, thanks again for your pointers! I fina… --- ## [Create ECS S3 Repository](https://discuss.elastic.co/t/create-ecs-s3-repository/235916)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 15\ **Last updated:** [June 8, 2020, 6:39am UTC](https://discuss.elastic.co/t/create-ecs-s3-repository/235916 "2020-06-08T06:39:44Z")
Hi Team I am using below Code to Register S3 ECS Repository with my ES Cluster. curl -XPUT "localhost:9200/\_snapshot/es\_s3\_repo?pretty" -H 'Content-Type: application/json' -d' { "type": "s3", "settings": { "bucket"… --- ## [How do i know where is the bottleneck in ELK](https://discuss.elastic.co/t/how-do-i-know-where-is-the-bottleneck-in-elk/236115)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 3\ **Last updated:** [June 8, 2020, 6:32am UTC](https://discuss.elastic.co/t/how-do-i-know-where-is-the-bottleneck-in-elk/236115 "2020-06-08T06:32:42Z")
I am new in ELK. I have setup a kibana, logstash and elasticsearch on a server and it receives data from a series of VM on aws with filebeat. I have configured a few prospectors on filebeat on each VM to collect log fro… --- ## [Elastic not creating index daily based on date](https://discuss.elastic.co/t/elastic-not-creating-index-daily-based-on-date/235753)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 12\ **Last updated:** [June 8, 2020, 6:17am UTC](https://discuss.elastic.co/t/elastic-not-creating-index-daily-based-on-date/235753 "2020-06-08T06:17:02Z")
I use Logstash for ingestion in elastic but my index not creating index daily based on date my config logstsh input { beats { port =\> "5044" } } filter { csv { separator =\> "," skip\_header =\> "true" columns =\> \[… --- ## [Metricbeat (7.7) --\> SSL conexion --\> Logstash (7.7)](https://discuss.elastic.co/t/metricbeat-7-7-ssl-conexion-logstash-7-7/236123)
**Author:** [@NoobUser404](https://discuss.elastic.co/u/NoobUser404)\ **Replies:** 0\ **Last updated:** [June 8, 2020, 5:55am UTC](https://discuss.elastic.co/t/metricbeat-7-7-ssl-conexion-logstash-7-7/236123 "2020-06-08T05:55:57Z")
I'm trying to send secure data to logstash from metricbeat, inside my own computer. I followed the tutorial (https://www.elastic.co/es/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash#… --- ## [In Logstash output elastisearch plugin is there a way to get response code from elastic after insert?](https://discuss.elastic.co/t/in-logstash-output-elastisearch-plugin-is-there-a-way-to-get-response-code-from-elastic-after-insert/236049)
**Author:** [@Ullas7](https://discuss.elastic.co/u/Ullas7)\ **Replies:** 2\ **Last updated:** [June 8, 2020, 5:50am UTC](https://discuss.elastic.co/t/in-logstash-output-elastisearch-plugin-is-there-a-way-to-get-response-code-from-elastic-after-insert/236049 "2020-06-08T05:50:48Z")
I trying to insert a document in elasticDB using the following logstash output config elasticsearch{ hosts =\> "localhost:9200" index =\> "indexname" document\_id =\> "%{conversationId}" # action =\> "create" … --- ## [Kibana 6.8.2 compatibility with Elasticsearch 7.6.2](https://discuss.elastic.co/t/kibana-6-8-2-compatibility-with-elasticsearch-7-6-2/233691)
**Author:** [@maadhav](https://discuss.elastic.co/u/maadhav)\ **Replies:** 5\ **Last updated:** [June 8, 2020, 5:35am UTC](https://discuss.elastic.co/t/kibana-6-8-2-compatibility-with-elasticsearch-7-6-2/233691 "2020-06-08T05:35:48Z")
Hi Team Just wonder that if Kibana 6.8.2 is compatible with ES 7.6.2. We have dockerized ELK setup where currently we are using version 6.8.2 for Elasticsearch/Kibana/Logstash and planning Rolling upgrade to version 7.… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1400) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1402)