# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1424

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1425

---

## [Elasticsearch can not retrieve Thai language](https://discuss.elastic.co/t/elasticsearch-can-not-retrieve-thai-language/234500)

<div class="topic-metadata">

**Author:** [@laifuchicago](https://discuss.elastic.co/u/laifuchicago)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 9:22am UTC](https://discuss.elastic.co/t/elasticsearch-can-not-retrieve-thai-language/234500 "2020-05-27T09:22:51Z")

</div>

To author: Currently, our team is trying to do the inference in Thai language. But in the retrieving part, Elasticsearch seems to have some limitations about Thai language. For example, we can only search Thai word. Can…

---

## [Warm phase timing](https://discuss.elastic.co/t/warm-phase-timing/234496)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 9:08am UTC](https://discuss.elastic.co/t/warm-phase-timing/234496 "2020-05-27T09:08:31Z")

</div>

Hello, I am implementing ILM policy for some indices(Hot, Warm, Delete). Why is there the option of timing, in warm phase? What is the benefit of having some delay before the index moves to the the warm phase(waiting …

---

## [Ingest pipeline version control and deployment](https://discuss.elastic.co/t/ingest-pipeline-version-control-and-deployment/234493)

<div class="topic-metadata">

**Author:** [@whatgeorgemade](https://discuss.elastic.co/u/whatgeorgemade)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 8:54am UTC](https://discuss.elastic.co/t/ingest-pipeline-version-control-and-deployment/234493 "2020-05-27T08:54:23Z")

</div>

I'm wondering how other people deal with managing their ingest pipelines in terms of version control and deployment to the cluster. I put pipeline definitions in Git so I can track the changes and, more importantly, the…

---

## [Parser avec grok](https://discuss.elastic.co/t/parser-avec-grok/234491)

<div class="topic-metadata">

**Author:** [@lgllrd](https://discuss.elastic.co/u/lgllrd)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 8:51am UTC](https://discuss.elastic.co/t/parser-avec-grok/234491 "2020-05-27T08:51:17Z")

</div>

Bonjour, J'essaye de parser le un champs de type message à l'aide de grok, j'en ai déjà fait par le passé mais ça ne fonctionne pas, pourtant j'ai essayé d'aller au plus simple avec des patterns par défaut. Si quelqu'…

---

## [Logstash: ERROR Manticore::ClientProtocolException](https://discuss.elastic.co/t/logstash-error-manticore-clientprotocolexception/234481)

<div class="topic-metadata">

**Author:** [@aannee](https://discuss.elastic.co/u/aannee)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 8:00am UTC](https://discuss.elastic.co/t/logstash-error-manticore-clientprotocolexception/234481 "2020-05-27T08:00:33Z")

</div>

Hi, I'm getting this error when I'm running my logstash pipeline. Is it because I have no valid ssl cert? Here's my conf filter { elasticsearch { ssl =\> false hosts =\> \["localhos…

---

## [What is the process to index the .txt using logsth and filebeat?](https://discuss.elastic.co/t/what-is-the-process-to-index-the-txt-using-logsth-and-filebeat/234379)

<div class="topic-metadata">

**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Replies:** 9\
**Last updated:** [May 27, 2020, 8:42am UTC](https://discuss.elastic.co/t/what-is-the-process-to-index-the-txt-using-logsth-and-filebeat/234379 "2020-05-27T08:42:02Z")

</div>

What is the process to index the .txt using logsth and filebeat ??

---

## [Grouped country wise channel id in first index the next index having each row in channel id i want to sum the next index record but i dont know how to use](https://discuss.elastic.co/t/grouped-country-wise-channel-id-in-first-index-the-next-index-having-each-row-in-channel-id-i-want-to-sum-the-next-index-record-but-i-dont-know-how-to-use/230282)

<div class="topic-metadata">

**Author:** [@Ramesh\_Kumar](https://discuss.elastic.co/u/Ramesh_Kumar)\
**Replies:** 0\
**Last updated:** [April 29, 2020, 1:53am UTC](https://discuss.elastic.co/t/grouped-country-wise-channel-id-in-first-index-the-next-index-having-each-row-in-channel-id-i-want-to-sum-the-next-index-record-but-i-dont-know-how-to-use/230282 "2020-04-29T01:53:56Z")

</div>

{ "aggs" : { "country\_groups" : { "terms" : { "field" : "country.keyword", "size":30000 }, "aggs": { "channel\_ids": { "terms": { "field" : "channel\_id.ke…

---

## [Logstash snmp output](https://discuss.elastic.co/t/logstash-snmp-output/233486)

<div class="topic-metadata">

**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\
**Replies:** 4\
**Last updated:** [May 27, 2020, 8:25am UTC](https://discuss.elastic.co/t/logstash-snmp-output/233486 "2020-05-27T08:25:10Z")

</div>

i am successfully SNMP polling the network device. But fields in output are OID. how do i get proper fields. Below is example output. ++++++++++++++++++++++++++++++++++++++++ "host" =\> "x.x.x.x", "iso.org.dod.internet…

---

## [Insert multiple jdbc rows into the same ES document under nested field](https://discuss.elastic.co/t/insert-multiple-jdbc-rows-into-the-same-es-document-under-nested-field/234486)

<div class="topic-metadata">

**Author:** [@Xophis](https://discuss.elastic.co/u/Xophis)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 8:21am UTC](https://discuss.elastic.co/t/insert-multiple-jdbc-rows-into-the-same-es-document-under-nested-field/234486 "2020-05-27T08:21:33Z")

</div>

Hi, I would like to insert in the same elasticsearch document, all jdbc rows with the same ID into a nested field called "logs". Can someone explain me how to convert jdbc input rows of logs into the following JSON str…

---

## [Is it possible to combine two different fields of same object to filter the document?](https://discuss.elastic.co/t/is-it-possible-to-combine-two-different-fields-of-same-object-to-filter-the-document/234483)

<div class="topic-metadata">

**Author:** [@MirunaliniSridharan](https://discuss.elastic.co/u/MirunaliniSridharan)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 8:09am UTC](https://discuss.elastic.co/t/is-it-possible-to-combine-two-different-fields-of-same-object-to-filter-the-document/234483 "2020-05-27T08:09:27Z")

</div>

I need to filter the document only if two fields of same object has the filtered value. My data is like this: { "cust\_data": { "products": \[ { "item": "watch", "qty": \[ "10" \] }, { "item": "purse", "qty": \[ …

---

## [Issue with vertical bar visualizations](https://discuss.elastic.co/t/issue-with-vertical-bar-visualizations/234438)

<div class="topic-metadata">

**Author:** [@balee](https://discuss.elastic.co/u/balee)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 7:29am UTC](https://discuss.elastic.co/t/issue-with-vertical-bar-visualizations/234438 "2020-05-27T07:29:20Z")

</div>

this is only a simple vertical bar graph that uses a field and timestamp. however the field selection forces you to choose your field with the first letter in capital. but this gives the wrong result, and if you inspect…

---

## [Dedicated Ingest Node ES](https://discuss.elastic.co/t/dedicated-ingest-node-es/234479)

<div class="topic-metadata">

**Author:** [@kirankumar](https://discuss.elastic.co/u/kirankumar)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 7:52am UTC](https://discuss.elastic.co/t/dedicated-ingest-node-es/234479 "2020-05-27T07:52:28Z")

</div>

Hey my environment betas -\> logstash -\> ES ( 1 node ) I am planning to use the filebeat module to do some parsing betas -\> ES( 1node ) I am handling about max 1.5 TB(MAX) of logs with 10 diff index created on a dail…

---

## [Live reloading filebeat is not working](https://discuss.elastic.co/t/live-reloading-filebeat-is-not-working/232485)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 7:48am UTC](https://discuss.elastic.co/t/live-reloading-filebeat-is-not-working/232485 "2020-05-27T07:48:45Z")

</div>

Hi i have given the below file beat configuration for live reloading filebeat.config.inputs: enabled: true path: config/\*.yml reload.enabled: true reload.period: 10s under config folder i have created test.yml fi…

---

## [Require help: custom realm](https://discuss.elastic.co/t/require-help-custom-realm/234477)

<div class="topic-metadata">

**Author:** [@gbalix](https://discuss.elastic.co/u/gbalix)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 7:44am UTC](https://discuss.elastic.co/t/require-help-custom-realm/234477 "2020-05-27T07:44:25Z")

</div>

Hi, I trying write a custom realm (elasticsearch version: 7.7.0) and leverage existing user auth and lookup system (similar to LDAP). Search in Elasticsearch documentation take me to https://www.elastic.co/guide/en/ela…

---

## [Dynamic Template convert JSON object to Text](https://discuss.elastic.co/t/dynamic-template-convert-json-object-to-text/234450)

<div class="topic-metadata">

**Author:** [@psteh](https://discuss.elastic.co/u/psteh)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 6:31am UTC](https://discuss.elastic.co/t/dynamic-template-convert-json-object-to-text/234450 "2020-05-27T06:31:28Z")

</div>

Is it possible to convert JSON object to Text using Dynamic Template? My aim is to have all fields in this object property to be Text I am not using Logstash, this is from AWS Cloudwatch log to AWS Elasticsearch Servic…

---

## [Ingestion of multiple csv files in python](https://discuss.elastic.co/t/ingestion-of-multiple-csv-files-in-python/234468)

<div class="topic-metadata">

**Author:** [@richylyq](https://discuss.elastic.co/u/richylyq)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 7:12am UTC](https://discuss.elastic.co/t/ingestion-of-multiple-csv-files-in-python/234468 "2020-05-27T07:12:06Z")

</div>

If i have multiple csv files with recurring dates, and i am planning to bulk ingest them with a python script, will the data be automatically ingested per date or the data will be duplicated as per the amount of recurrin…

---

## [Cannot choose Elasticsearch index alias as a Kibana index patter](https://discuss.elastic.co/t/cannot-choose-elasticsearch-index-alias-as-a-kibana-index-patter/234250)

<div class="topic-metadata">

**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\
**Replies:** 2\
**Last updated:** [May 27, 2020, 7:07am UTC](https://discuss.elastic.co/t/cannot-choose-elasticsearch-index-alias-as-a-kibana-index-patter/234250 "2020-05-27T07:07:24Z")

</div>

In this use case to search 2 Elasticseach indices are searched. I have added a common alias to the indices and a query i Kibana dev tools like GET indexalias/\_search { "query": ... } works as expected. The alias combi…

---

## [FScrawler issue while crawling through a remote host](https://discuss.elastic.co/t/fscrawler-issue-while-crawling-through-a-remote-host/234456)

<div class="topic-metadata">

**Author:** [@Umesh\_S\_Bhimani](https://discuss.elastic.co/u/Umesh_S_Bhimani)\
**Replies:** 2\
**Last updated:** [May 27, 2020, 6:50am UTC](https://discuss.elastic.co/t/fscrawler-issue-while-crawling-through-a-remote-host/234456 "2020-05-27T06:50:30Z")

</div>

Hi, There is an issue while crawling through files from remote host. Please see the code snippet below --- name: "new\_attachment" server: hostname: "\*\*\*\*\*\*\*\*\*\*\*\*\*\*" port: 22 username: "\*\*\*\*\*\*\*\*\*\*" password: "\*\*…

---

## [Time of the log is 10 hours ahead in Kibana](https://discuss.elastic.co/t/time-of-the-log-is-10-hours-ahead-in-kibana/234464)

<div class="topic-metadata">

**Author:** [@shadid](https://discuss.elastic.co/u/shadid)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 6:20am UTC](https://discuss.elastic.co/t/time-of-the-log-is-10-hours-ahead-in-kibana/234464 "2020-05-27T06:20:02Z")

</div>

Hi, I have created a logstash filter to parse palo alto syslog. Below is the configuration. filter { if \[fields\]\[node\_type\] == "firewall" { if \[message\] =~ /-- MARK --/ { drop {}} if \[message\] =~ /last messag…

---

## [Calculate daily new users (never seen before) to a website](https://discuss.elastic.co/t/calculate-daily-new-users-never-seen-before-to-a-website/234404)

<div class="topic-metadata">

**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\
**Replies:** 5\
**Last updated:** [May 27, 2020, 5:32am UTC](https://discuss.elastic.co/t/calculate-daily-new-users-never-seen-before-to-a-website/234404 "2020-05-27T05:32:51Z")

</div>

I referred the above link but cannot understand how to build a visualization in Kibana for daily unique new users (that we have never seen before. The following is a simplified look at our mappings in Elastic search {…

---

## [How to enable infoStream](https://discuss.elastic.co/t/how-to-enable-infostream/234457)

<div class="topic-metadata">

**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 5:13am UTC](https://discuss.elastic.co/t/how-to-enable-infostream/234457 "2020-05-27T05:13:12Z")

</div>

How to enable info stream for various operations in elasticsearch?

---

## [Indexes automatically re open after closed](https://discuss.elastic.co/t/indexes-automatically-re-open-after-closed/234393)

<div class="topic-metadata">

**Author:** [@Carlos\_Lopez](https://discuss.elastic.co/u/Carlos_Lopez)\
**Replies:** 4\
**Last updated:** [May 27, 2020, 5:08am UTC](https://discuss.elastic.co/t/indexes-automatically-re-open-after-closed/234393 "2020-05-27T05:08:17Z")

</div>

I have a cluster with multiple indexes with the same format where the name changes month after month. index\_name\_\* I am closing indexes 3 months after they are created to save resources since the data is no longer need…

---

## [Problem with csv filter](https://discuss.elastic.co/t/problem-with-csv-filter/233880)

<div class="topic-metadata">

**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\
**Replies:** 6\
**Last updated:** [May 27, 2020, 5:02am UTC](https://discuss.elastic.co/t/problem-with-csv-filter/233880 "2020-05-27T05:02:03Z")

</div>

Hi I have a csv file, in order to index it in elasticsearch I am using logstash. I am using CSV filter and my conf file is: '''input { file { sincedb\_path =\> "/null" path =\> "/home/kagamee/Downloads/time\_logs.csv" s…

---

## [FSCrawler giving File does not exist issue](https://discuss.elastic.co/t/fscrawler-giving-file-does-not-exist-issue/234377)

<div class="topic-metadata">

**Author:** [@Umesh\_S\_Bhimani](https://discuss.elastic.co/u/Umesh_S_Bhimani)\
**Replies:** 5\
**Last updated:** [May 27, 2020, 4:47am UTC](https://discuss.elastic.co/t/fscrawler-giving-file-does-not-exist-issue/234377 "2020-05-27T04:47:25Z")

</div>

Hi, I am trying to work on indexing attachments through fscrwaler using SSH (22). I have elastic search installed on one machine & trying to read through data from other machine in the same network, but getting a file …

---

## [Array of objects in pipeline](https://discuss.elastic.co/t/array-of-objects-in-pipeline/234356)

<div class="topic-metadata">

**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 3:39am UTC](https://discuss.elastic.co/t/array-of-objects-in-pipeline/234356 "2020-05-27T03:39:37Z")

</div>

Hi i m trying to write a pipeline to find a missing field in an array of objects. So this is what i wrote. PUT \_ingest/pipeline/header-missing { "description": "header missing", "version": 1, "processors" : \[ {…

---

## [\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError",](https://discuss.elastic.co/t/logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror/233802)

<div class="topic-metadata">

**Author:** [@Hanneu](https://discuss.elastic.co/u/Hanneu)\
**Replies:** 4\
**Last updated:** [May 27, 2020, 2:37am UTC](https://discuss.elastic.co/t/logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror/233802 "2020-05-27T02:37:37Z")

</div>

Hello experts, Getting below error on logstash (LS) logs for all of the nodes. \[2020-05-21T12:08:42,231\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id…

---

## [Ingest with FSCrawler and open the file from path.real value](https://discuss.elastic.co/t/ingest-with-fscrawler-and-open-the-file-from-path-real-value/234227)

<div class="topic-metadata">

**Author:** [@richylyq](https://discuss.elastic.co/u/richylyq)\
**Replies:** 10\
**Last updated:** [May 27, 2020, 2:23am UTC](https://discuss.elastic.co/t/ingest-with-fscrawler-and-open-the-file-from-path-real-value/234227 "2020-05-27T02:23:58Z")

</div>

Hi @dadoonet, i think i will direct the question to you since this is on FSCrawler. Am i able to set anything in the settings of FSCrawler to enable myself to be able to open the file that i ingested from the path.real …

---

## [Can logstash be debug through in tool (eclipse or idea)?](https://discuss.elastic.co/t/can-logstash-be-debug-through-in-tool-eclipse-or-idea/234283)

<div class="topic-metadata">

**Author:** [@shengl](https://discuss.elastic.co/u/shengl)\
**Replies:** 3\
**Last updated:** [May 27, 2020, 1:56am UTC](https://discuss.elastic.co/t/can-logstash-be-debug-through-in-tool-eclipse-or-idea/234283 "2020-05-27T01:56:55Z")

</div>

I hope I can debug source code of logstash, I should how to do it.

---

## [Navigation menu in kibana 7.4.0 with html plugin](https://discuss.elastic.co/t/navigation-menu-in-kibana-7-4-0-with-html-plugin/232236)

<div class="topic-metadata">

**Author:** [@suibgui](https://discuss.elastic.co/u/suibgui)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 12:29am UTC](https://discuss.elastic.co/t/navigation-menu-in-kibana-7-4-0-with-html-plugin/232236 "2020-05-27T00:29:04Z")

</div>

Hello, I have create a navigation menu in kibana 7.4.0 using html plugin (to navaigate between dashborads) , now i have a problem to add sub menu !!!!!! , any solution ?? thank you

---

## [How have some of you visualized CloudWatch logs in Kibana?](https://discuss.elastic.co/t/how-have-some-of-you-visualized-cloudwatch-logs-in-kibana/232722)

<div class="topic-metadata">

**Author:** [@syost](https://discuss.elastic.co/u/syost)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 12:26am UTC](https://discuss.elastic.co/t/how-have-some-of-you-visualized-cloudwatch-logs-in-kibana/232722 "2020-05-27T00:26:02Z")

</div>

Are there any prebuilt Kibana visualizations/dashboards for functionbeat when monitoring AWS CloudWatch logs? It would be helpful/interesting to hear how some of you have visualized these logs and how you went about cre…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1423)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1425)
