# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1443 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1444 --- ## [Grok fails on a valid regex](https://discuss.elastic.co/t/grok-fails-on-a-valid-regex/231781)
**Author:** [@konart](https://discuss.elastic.co/u/konart)\ **Replies:** 1\ **Last updated:** [May 9, 2020, 4:50pm UTC](https://discuss.elastic.co/t/grok-fails-on-a-valid-regex/231781 "2020-05-09T16:50:57Z")
Log: \[logstash.javapipeline \]\[main\] Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\DBG|INF|WRN)(?(?=(?:.\*(?:X-Request-Id|CorrelationId)))… --- ## [ILM - Index node location](https://discuss.elastic.co/t/ilm-index-node-location/232982)
**Author:** [@vdelcampo](https://discuss.elastic.co/u/vdelcampo)\ **Replies:** 2\ **Last updated:** [May 18, 2020, 8:44am UTC](https://discuss.elastic.co/t/ilm-index-node-location/232982 "2020-05-18T08:44:30Z")
Hi. I´ve implemented a ILM policy to move all my indexes older than 1 day to warm nodes. How can i check which indexes are in warm nodes? I´ve checked the ilm policy with GET my\_index-\*/\_ilm/explain and the results show… --- ## [Nested Logstash Config files](https://discuss.elastic.co/t/nested-logstash-config-files/232657)
**Author:** [@karthik3](https://discuss.elastic.co/u/karthik3)\ **Replies:** 4\ **Last updated:** [May 18, 2020, 8:42am UTC](https://discuss.elastic.co/t/nested-logstash-config-files/232657 "2020-05-18T08:42:52Z")
Hi , I like to pass payload to another logstash config file and post the payload fields to ES once it successfully it will post other fields to ES. filter { if "START \[\[" in \[message\] { grok { match =\> { "message… --- ## [Sort based on timestamp from log](https://discuss.elastic.co/t/sort-based-on-timestamp-from-log/233065)
**Author:** [@Darshan\_Kamat](https://discuss.elastic.co/u/Darshan_Kamat)\ **Replies:** 0\ **Last updated:** [May 18, 2020, 8:32am UTC](https://discuss.elastic.co/t/sort-based-on-timestamp-from-log/233065 "2020-05-18T08:32:48Z")
I have setup Filebeat-\>ES\<-Kibana I am not using and do not wish to use Logstash. My log is as below \> 2020 May 15 02:21:03:573 GMT -0400 DEBUG but @timestamp has May 15, 2020 @ 06:21:04.343 I want t… --- ## [Querying hosts from a file](https://discuss.elastic.co/t/querying-hosts-from-a-file/233062)
**Author:** [@Claireshan](https://discuss.elastic.co/u/Claireshan)\ **Replies:** 1\ **Last updated:** [May 18, 2020, 8:26am UTC](https://discuss.elastic.co/t/querying-hosts-from-a-file/233062 "2020-05-18T08:26:31Z")
Hello am getting laser from devices using snmp and so far with one device am getting the data very well. I have many hosts and their ips are in a file, how can i query through the file pick ip by ip and for each ip i pic… --- ## [Sort results based on the number of highlights?](https://discuss.elastic.co/t/sort-results-based-on-the-number-of-highlights/233061)
**Author:** [@shAkur](https://discuss.elastic.co/u/shAkur)\ **Replies:** 0\ **Last updated:** [May 18, 2020, 8:21am UTC](https://discuss.elastic.co/t/sort-results-based-on-the-number-of-highlights/233061 "2020-05-18T08:21:07Z")
Is there a way to sort the search results based on the number of highlighted words per document? I'm using the highlight feature on a multi\_match search and I want to have the results with the most matching highlights o… --- ## [Parse a Null Pointer Exception Logs in Logstash](https://discuss.elastic.co/t/parse-a-null-pointer-exception-logs-in-logstash/233058)
**Author:** [@shiv97](https://discuss.elastic.co/u/shiv97)\ **Replies:** 0\ **Last updated:** [May 18, 2020, 8:06am UTC](https://discuss.elastic.co/t/parse-a-null-pointer-exception-logs-in-logstash/233058 "2020-05-18T08:06:54Z")
Hi Everyone, I am using One java application that throws null pointer exception and I want to parse the Java stack trace logs in logstash and I am got confused how to parse the logs generated by application. Here are t… --- ## [Kibana Data Analyst](https://discuss.elastic.co/t/kibana-data-analyst/232985)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 1\ **Last updated:** [May 18, 2020, 7:40am UTC](https://discuss.elastic.co/t/kibana-data-analyst/232985 "2020-05-18T07:40:52Z")
Hello Team, I am planning to opt for below certification. Elastic Certified Analyst Could you please help me with the preparation details,like documentation, examples etc. Thank you, Aditya --- ## [Deleting an event](https://discuss.elastic.co/t/deleting-an-event/232923)
**Author:** [@Claireshan](https://discuss.elastic.co/u/Claireshan)\ **Replies:** 2\ **Last updated:** [May 18, 2020, 7:59am UTC](https://discuss.elastic.co/t/deleting-an-event/232923 "2020-05-18T07:59:16Z")
hello am trying to delete an every event with jnxDomCurrentRxLaserPower == 0. but i keep getting the same output. Now my router has 8 interfaces with only one port active and the others are not enabled but their jnxDomCu… --- ## [Kibana - Multiple Dashboards of single Index with different timestamp field](https://discuss.elastic.co/t/kibana-multiple-dashboards-of-single-index-with-different-timestamp-field/232186)
**Author:** [@charlz](https://discuss.elastic.co/u/charlz)\ **Replies:** 2\ **Last updated:** [May 18, 2020, 6:46am UTC](https://discuss.elastic.co/t/kibana-multiple-dashboards-of-single-index-with-different-timestamp-field/232186 "2020-05-18T06:46:54Z")
Is it possible to have different Dashboard of an Index with each different time field? --- ## [JMS Plug In stop](https://discuss.elastic.co/t/jms-plug-in-stop/233053)
**Author:** [@Loris](https://discuss.elastic.co/u/Loris)\ **Replies:** 0\ **Last updated:** [May 18, 2020, 7:45am UTC](https://discuss.elastic.co/t/jms-plug-in-stop/233053 "2020-05-18T07:45:10Z")
Hi, I implemented a Logstash (7.5.2) pipeline with the following configration: input { jms { include\_header =\> true include\_properties =\> true include\_body =\> true … --- ## [Context Suggester is very slow for large context set](https://discuss.elastic.co/t/context-suggester-is-very-slow-for-large-context-set/233048)
**Author:** [@raychow](https://discuss.elastic.co/u/raychow)\ **Replies:** 0\ **Last updated:** [May 18, 2020, 7:24am UTC](https://discuss.elastic.co/t/context-suggester-is-very-slow-for-large-context-set/233048 "2020-05-18T07:24:08Z")
Hi, I'm considering to use context suggester to auto complete user input, and the context is used as permission scope: PUT localhost:9200/multi\_conditions\_2?pretty Content-Type: application/json { "mappings": { … --- ## [pipelineでScriptException発生](https://discuss.elastic.co/t/pipeline-scriptexception/231454)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [May 18, 2020, 7:20am UTC](https://discuss.elastic.co/t/pipeline-scriptexception/231454 "2020-05-18T07:20:04Z")
Elastic Cloudのコンソールログにて、以下のWARNが継続して発生しております。データ登録等の動作は問題ないように見えます。 原因をご教示頂けないでしょうか。 \[instance-0000000024\] failure parsing pipeline config \[ddi\] org.elasticsearch.script.ScriptException: compile error at org.elasticse… --- ## [Singel Node Opens Too Many Connections](https://discuss.elastic.co/t/singel-node-opens-too-many-connections/233040)
**Author:** [@chen-wu](https://discuss.elastic.co/u/chen-wu)\ **Replies:** 4\ **Last updated:** [May 18, 2020, 7:15am UTC](https://discuss.elastic.co/t/singel-node-opens-too-many-connections/233040 "2020-05-18T07:15:21Z")
Hello. We have an instance running in single node running on Windows. I saw that it opens a lot of connections to itself. Like: TCP 127.0.0.1:9200 127.0.0.1:52540 ESTABLISHED 21936 TCP 127.0.0… --- ## [Filebeat 7.6.x deb安装启动后不写运行日志到文件，发现是自动加了-e参数](https://discuss.elastic.co/t/filebeat-7-6-x-deb-e/233045)
**Author:** [@ttynet](https://discuss.elastic.co/u/ttynet)\ **Replies:** 0\ **Last updated:** [May 18, 2020, 6:56am UTC](https://discuss.elastic.co/t/filebeat-7-6-x-deb-e/233045 "2020-05-18T06:56:24Z")
filebeat7.6.1和7.6.2两个版本，deb包安装启动后不写运行日志到文件，通ps -ef 看filebeat的命令，发现里面有个-e参数，然后看了看/etc/init.d/filebeat还不知道怎么改能把-e去掉，不知道官方何时能修复这个bug，另外有没有临时解决方案 --- ## [Multi index "\_search" endpoint , how many indices can we search at a time is there any limit?](https://discuss.elastic.co/t/multi-index-search-endpoint-how-many-indices-can-we-search-at-a-time-is-there-any-limit/233035)
**Author:** [@panditb](https://discuss.elastic.co/u/panditb)\ **Replies:** 4\ **Last updated:** [May 18, 2020, 6:49am UTC](https://discuss.elastic.co/t/multi-index-search-endpoint-how-many-indices-can-we-search-at-a-time-is-there-any-limit/233035 "2020-05-18T06:49:06Z")
Hello Team, I am using multi index \_search api, which is like below, i want to know what is the limit or how many indices we can search multiple GET : http://localhost:9200/20200515,20200514,20200517/\_search As we k… --- ## [Failed to parse date field in ELK stack 7.0](https://discuss.elastic.co/t/failed-to-parse-date-field-in-elk-stack-7-0/232984)
**Author:** [@janmichae.reyes4](https://discuss.elastic.co/u/janmichae.reyes4)\ **Replies:** 2\ **Last updated:** [May 18, 2020, 6:45am UTC](https://discuss.elastic.co/t/failed-to-parse-date-field-in-elk-stack-7-0/232984 "2020-05-18T06:45:26Z")
hi, Seeking your help on the issue that i've encountered. see logstash logs \[2020-05-17T18:08:04,561\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[7a2e4f1adfc06df81621c72c479da896bcfd3869a4bb01f7a4d4115bed9c9c96\] Could… --- ## [Elastic account vs personal account](https://discuss.elastic.co/t/elastic-account-vs-personal-account/232847)
**Author:** [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\ **Replies:** 4\ **Last updated:** [May 18, 2020, 6:42am UTC](https://discuss.elastic.co/t/elastic-account-vs-personal-account/232847 "2020-05-18T06:42:19Z")
On the cloud (cloud.elastic.co) we have logged in using the elastic account. Now it doesn't seem to work anymore. We can only log in using a personal account based upon an email address. Can anyone explain this, please? --- ## [Kibana services Unable start completely](https://discuss.elastic.co/t/kibana-services-unable-start-completely/232980)
**Author:** [@georgeokey](https://discuss.elastic.co/u/georgeokey)\ **Replies:** 1\ **Last updated:** [May 18, 2020, 5:35am UTC](https://discuss.elastic.co/t/kibana-services-unable-start-completely/232980 "2020-05-18T05:35:54Z")
My Kibana refuses to start after running --- ## [Logstash gzip\_pattern matching](https://discuss.elastic.co/t/logstash-gzip-pattern-matching/233026)
**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\ **Replies:** 0\ **Last updated:** [May 18, 2020, 3:29am UTC](https://discuss.elastic.co/t/logstash-gzip-pattern-matching/233026 "2020-05-18T03:29:51Z")
Hi there, I'm using ELK 7.7. I need to ingest s3 objects with description exactly like this We are using S3 input plugin to pull data from S3, we are using kinesis firehose to push data to S3, which does not adds 'g… --- ## [I can't access kibana - Select your space](https://discuss.elastic.co/t/i-cant-access-kibana-select-your-space/233023)
**Author:** [@jjums](https://discuss.elastic.co/u/jjums)\ **Replies:** 7\ **Last updated:** [May 18, 2020, 2:36am UTC](https://discuss.elastic.co/t/i-cant-access-kibana-select-your-space/233023 "2020-05-18T02:36:50Z")
Hello, I made my dashboard site using kibana 2 weeks ago, last week I can't access my kibana space. (elasticsearch & kibana version 7.6.2) I attached the image file, I can see only this msg " Select your space. You ca… --- ## [Search on hostname with special chars not giving results](https://discuss.elastic.co/t/search-on-hostname-with-special-chars-not-giving-results/233022)
**Author:** [@Amine\_Maalfi](https://discuss.elastic.co/u/Amine_Maalfi)\ **Replies:** 0\ **Last updated:** [May 18, 2020, 12:44am UTC](https://discuss.elastic.co/t/search-on-hostname-with-special-chars-not-giving-results/233022 "2020-05-18T00:44:03Z")
Hi everyone, i'm trying to find results based on the hostname, my hostname for test purposes is "----" and i can't filter results using it, doesn't elasticsearch accept hostnames to be like this? or do i have to change s… --- ## [Parse and extract json fields using logstash](https://discuss.elastic.co/t/parse-and-extract-json-fields-using-logstash/233017)
**Author:** [@jawadak](https://discuss.elastic.co/u/jawadak)\ **Replies:** 2\ **Last updated:** [May 17, 2020, 11:13pm UTC](https://discuss.elastic.co/t/parse-and-extract-json-fields-using-logstash/233017 "2020-05-17T23:13:09Z")
Hi, I have the below log after using the JSON filter. I need to take all the fields out of the JSON field "log". For example: instead of all the fields like log.user or log.allow, I need just user or allow. I need to tak… --- ## [Grokparsefailure! wtf?](https://discuss.elastic.co/t/grokparsefailure-wtf/232938)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 7\ **Last updated:** [May 17, 2020, 10:30pm UTC](https://discuss.elastic.co/t/grokparsefailure-wtf/232938 "2020-05-17T22:30:18Z")
Hi there, After using grokdebug and make sure the grok filter as working, just find out that was not enough to avoid the tag \_grokparsefailure!! arggggggg!!! Follow my conf: ###################################### INPU… --- ## [How to parse sub-aggregation JSON fragment of the search response?](https://discuss.elastic.co/t/how-to-parse-sub-aggregation-json-fragment-of-the-search-response/233013)
**Author:** [@mmu](https://discuss.elastic.co/u/mmu)\ **Replies:** 0\ **Last updated:** [May 17, 2020, 8:54pm UTC](https://discuss.elastic.co/t/how-to-parse-sub-aggregation-json-fragment-of-the-search-response/233013 "2020-05-17T20:54:47Z")
I have a custom parser that fails early (i.e. aborts parsing immediatey) if some elements of the response contents do not meet expected values. Failing early means that some of the responses elements are evaluated/checke… --- ## [Question on how to get sorting working in Elasticsearch index, so fields in Kibana-\>Discover can be sortable](https://discuss.elastic.co/t/question-on-how-to-get-sorting-working-in-elasticsearch-index-so-fields-in-kibana-discover-can-be-sortable/233012)
**Author:** [@terry433iid](https://discuss.elastic.co/u/terry433iid)\ **Replies:** 0\ **Last updated:** [May 17, 2020, 8:02pm UTC](https://discuss.elastic.co/t/question-on-how-to-get-sorting-working-in-elasticsearch-index-so-fields-in-kibana-discover-can-be-sortable/233012 "2020-05-17T20:02:55Z")
I am running Elasticsearch 6.5.3 and using logstash/beats to read a query from mysql database, and add to an Elasticsearch index. The mysql fields are a mix of strings and numbers e.g. \*| Subject ID | Category | Descri… --- ## [Unable to configure elasticsearch security](https://discuss.elastic.co/t/unable-to-configure-elasticsearch-security/228752)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 1\ **Last updated:** [May 17, 2020, 7:03pm UTC](https://discuss.elastic.co/t/unable-to-configure-elasticsearch-security/228752 "2020-05-17T19:03:28Z")
Hi Folks, I am trying to build security between elasticsearch and kibana to make SIEM detection work. However been struggling for so long. I followed lot of tutorials and generated p12 file. Here is my config file #act… --- ## [General Guidance on Updating ELK with minimum Fuss](https://discuss.elastic.co/t/general-guidance-on-updating-elk-with-minimum-fuss/232828)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 5\ **Last updated:** [May 17, 2020, 7:02pm UTC](https://discuss.elastic.co/t/general-guidance-on-updating-elk-with-minimum-fuss/232828 "2020-05-17T19:02:43Z")
I might be missing something but ELK updates (even minor versions like 7.6.2 to 7.7) can be a real pain with much downtime. Is there a guide which explains how to upgrade? We generally download the latest version, copy d… --- ## [Alerts and Actions - TLS warning even though TLS is configured](https://discuss.elastic.co/t/alerts-and-actions-tls-warning-even-though-tls-is-configured/232783)
**Author:** [@Sketchy](https://discuss.elastic.co/u/Sketchy)\ **Replies:** 1\ **Last updated:** [May 17, 2020, 5:14pm UTC](https://discuss.elastic.co/t/alerts-and-actions-tls-warning-even-though-tls-is-configured/232783 "2020-05-17T17:14:10Z")
I have setup my elastic stack with TLS a while back and thought everything was configured correctly. Today with updating to 7.7.0 I get a banner in the new Alerts UI stating that "You must enable Transport Layer Securit… --- ## [Deleted the indexes but the data is still there](https://discuss.elastic.co/t/deleted-the-indexes-but-the-data-is-still-there/232343)
**Author:** [@GGUERRA](https://discuss.elastic.co/u/GGUERRA)\ **Replies:** 5\ **Last updated:** [May 17, 2020, 4:21pm UTC](https://discuss.elastic.co/t/deleted-the-indexes-but-the-data-is-still-there/232343 "2020-05-17T16:21:29Z")
Hello everyone, I have the following question. Through Kibana, in the management section, specifically in Index Management, I deleted indexes. However, in the monitoring section, the indexes keep appearing and the disk s… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1442) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1444)