# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1448 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1449 --- ## [My Logstash is not parsing data properly](https://discuss.elastic.co/t/my-logstash-is-not-parsing-data-properly/231399)
**Author:** [@pjepsen](https://discuss.elastic.co/u/pjepsen)\ **Replies:** 21\ **Last updated:** [May 14, 2020, 9:50pm UTC](https://discuss.elastic.co/t/my-logstash-is-not-parsing-data-properly/231399 "2020-05-14T21:50:53Z")
I have been working on a project to upload VPN logs to a logstash instance that I created, and while I am able to see data being sent to the logstash, I am seeing a "\_dateparsefailure" error showing under \[tags\] in my ou… --- ## [Query with exclusion list](https://discuss.elastic.co/t/query-with-exclusion-list/232717)
**Author:** [@malinal](https://discuss.elastic.co/u/malinal)\ **Replies:** 0\ **Last updated:** [May 14, 2020, 9:33pm UTC](https://discuss.elastic.co/t/query-with-exclusion-list/232717 "2020-05-14T21:33:05Z")
I’m still a beginner and I’ve run into a task I don’t know how to solve. We have a small system that has one index only. We store simple objects with many properties Most data types are simple keyword (or date) because … --- ## [Object mapping \[categories\] can't be changed from nested to non-nested](https://discuss.elastic.co/t/object-mapping-categories-cant-be-changed-from-nested-to-non-nested/232591)
**Author:** [@andrey1](https://discuss.elastic.co/u/andrey1)\ **Replies:** 9\ **Last updated:** [May 14, 2020, 9:02pm UTC](https://discuss.elastic.co/t/object-mapping-categories-cant-be-changed-from-nested-to-non-nested/232591 "2020-05-14T21:02:08Z")
Hi, I've got a legacy a project with old version of Elasticsearch and trying to get it working with ES 7.6.2. And encountered an error which I can't understand what is wrong. There is big index definition so I quote onl… --- ## [Elasticsearch snapshot retention](https://discuss.elastic.co/t/elasticsearch-snapshot-retention/232706)
**Author:** [@cm-vdp](https://discuss.elastic.co/u/cm-vdp)\ **Replies:** 1\ **Last updated:** [May 14, 2020, 8:59pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-retention/232706 "2020-05-14T20:59:47Z")
Recently I am responsible for our ELK-environment (6.6). It has run for 2 years without any management. For me it's a black box but I'm learning. First thing I want to tackle is a correct backup solution. I know elast… --- ## [MetricBeats || Apache ActiveMq|| Origin null is not allowed](https://discuss.elastic.co/t/metricbeats-apache-activemq-origin-null-is-not-allowed/232191)
**Author:** [@faiz0210](https://discuss.elastic.co/u/faiz0210)\ **Replies:** 4\ **Last updated:** [May 14, 2020, 7:44pm UTC](https://discuss.elastic.co/t/metricbeats-apache-activemq-origin-null-is-not-allowed/232191 "2020-05-14T19:44:21Z")
Hi Team, Trying to setup metricbeat for ActiveMq, whole installation and configuration process went smooth, but couldn't see any data on Kibana. On further diagnosis, found below information in /var/log/messages. metr… --- ## [How to set include\_type\_name HLClient GetIndexTemplatesRequest() or GetIndexRequest()](https://discuss.elastic.co/t/how-to-set-include-type-name-hlclient-getindextemplatesrequest-or-getindexrequest/232498)
**Author:** [@Cat](https://discuss.elastic.co/u/Cat)\ **Replies:** 5\ **Last updated:** [May 14, 2020, 4:56pm UTC](https://discuss.elastic.co/t/how-to-set-include-type-name-hlclient-getindextemplatesrequest-or-getindexrequest/232498 "2020-05-14T16:56:12Z")
I've tried both GetIndexTemplatesRequest() and GetIndexRequest() to retrieve the version number. I keep on getting the following exception: \[299 Elasticsearch-6.8.7-c63e621 "\[types removal\] The parameter include\_type\_n… --- ## [Node doesn't join cluster](https://discuss.elastic.co/t/node-doesnt-join-cluster/232691)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 5\ **Last updated:** [May 14, 2020, 7:13pm UTC](https://discuss.elastic.co/t/node-doesnt-join-cluster/232691 "2020-05-14T19:13:14Z")
Is there a guide on how to add new nodes to a cluster? Cause this ain't it. The issue is both nodes are running, displaying no errors, but shards are not getting assigned. Nodes in the cluster (cluster.name: local) ha… --- ## [How to merge two document in logstash](https://discuss.elastic.co/t/how-to-merge-two-document-in-logstash/232531)
**Author:** [@CambridgeLv](https://discuss.elastic.co/u/CambridgeLv)\ **Replies:** 1\ **Last updated:** [May 14, 2020, 7:01pm UTC](https://discuss.elastic.co/t/how-to-merge-two-document-in-logstash/232531 "2020-05-14T19:01:48Z")
Hi, I am using ELK to visualize the data in logs. Is it possible to merge two documents into one? As I know, each line from filebeat will make one doc output to elasticsearch(or with multi-lines input, then multi-lines w… --- ## [Unable to setup dashboard on Kibana from Beats](https://discuss.elastic.co/t/unable-to-setup-dashboard-on-kibana-from-beats/232605)
**Author:** [@Atul\_Gunjal](https://discuss.elastic.co/u/Atul_Gunjal)\ **Replies:** 1\ **Last updated:** [May 14, 2020, 7:00pm UTC](https://discuss.elastic.co/t/unable-to-setup-dashboard-on-kibana-from-beats/232605 "2020-05-14T19:00:17Z")
Showing error while loading dashboard to kibana using .\\metricbeat.exe setup --dashboards Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to https://7147ccb65b60479190c4a7918017a4a… --- ## [Parsing log](https://discuss.elastic.co/t/parsing-log/232289)
**Author:** [@Luiss\_Anggel\_Carbone](https://discuss.elastic.co/u/Luiss_Anggel_Carbone)\ **Replies:** 3\ **Last updated:** [May 14, 2020, 6:40pm UTC](https://discuss.elastic.co/t/parsing-log/232289 "2020-05-14T18:40:14Z")
Hello greetings I made the configuration to integrate FileBeat, Logstash, and Elastic. I need to create a filter every time I find an ERROR in the log. Any solution for this? Where can I find documentation on this, I … --- ## [How to visualize enums?](https://discuss.elastic.co/t/how-to-visualize-enums/232478)
**Author:** [@gthang](https://discuss.elastic.co/u/gthang)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 6:36pm UTC](https://discuss.elastic.co/t/how-to-visualize-enums/232478 "2020-05-14T18:36:42Z")
Hello, We currently index certain system states as name value pairs along with other metrics(also name value pairs) once a second, every second for about 3000 discrete applications. One of these system state values loo… --- ## [Kibana Spaces: Only show certain Indices](https://discuss.elastic.co/t/kibana-spaces-only-show-certain-indices/231437)
**Author:** [@N\_P](https://discuss.elastic.co/u/N_P)\ **Replies:** 4\ **Last updated:** [May 14, 2020, 5:19pm UTC](https://discuss.elastic.co/t/kibana-spaces-only-show-certain-indices/231437 "2020-05-14T17:19:46Z")
Hi everyone, Does anyone know if it is possible to only show certain indices for a particular kibana space? Currently I have multiple spaces and data is able to be seen from different spaces. Thanks, Neil --- ## [Having Issues With JSON Input](https://discuss.elastic.co/t/having-issues-with-json-input/232548)
**Author:** [@astuffedtiger](https://discuss.elastic.co/u/astuffedtiger)\ **Replies:** 4\ **Last updated:** [May 14, 2020, 5:16pm UTC](https://discuss.elastic.co/t/having-issues-with-json-input/232548 "2020-05-14T17:16:40Z")
Hello all, I've looked up and down StackOverflow and these forums along with the Logstash docs, and I can't for the life of me get this working. I am simply trying to use the message field as my source so that the items… --- ## [Adding Field from one index to another index / Merging two Index](https://discuss.elastic.co/t/adding-field-from-one-index-to-another-index-merging-two-index/232518)
**Author:** [@shubham184](https://discuss.elastic.co/u/shubham184)\ **Replies:** 4\ **Last updated:** [May 14, 2020, 4:56pm UTC](https://discuss.elastic.co/t/adding-field-from-one-index-to-another-index-merging-two-index/232518 "2020-05-14T16:56:57Z")
Hello, I have 2 tables coming in as CouchDb changes in logstash, which get converted into two separate indexes. Problem statement: I want to either merge the two indexes or add the fields in one of the indexes, I was th… --- ## [Pipeline to pipeline communication](https://discuss.elastic.co/t/pipeline-to-pipeline-communication/232541)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 3\ **Last updated:** [May 14, 2020, 4:54pm UTC](https://discuss.elastic.co/t/pipeline-to-pipeline-communication/232541 "2020-05-14T16:54:56Z")
HI, I got about 15 pipelines, getting data from a DB, and I was thinking to point all those pipelines to another pipeline that will filter and index the data and various questions arise in my mind: 1-Will this create a… --- ## [Unwanted fields in indice](https://discuss.elastic.co/t/unwanted-fields-in-indice/232679)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 5\ **Last updated:** [May 14, 2020, 4:50pm UTC](https://discuss.elastic.co/t/unwanted-fields-in-indice/232679 "2020-05-14T16:50:34Z")
One of my indice has some field which are nowhere in my logstash config. yes that fields are from other config file. but both config files are separate pipeline. both has different document\_id how come they appear in t… --- ## [Logstash - Json file input question](https://discuss.elastic.co/t/logstash-json-file-input-question/232484)
**Author:** [@Yawn](https://discuss.elastic.co/u/Yawn)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 4:39pm UTC](https://discuss.elastic.co/t/logstash-json-file-input-question/232484 "2020-05-14T16:39:16Z")
Hello, I am trying to load the following from a json file, and I had a couple of questions.. \[ { "\_index": "index-001", "\_type": "xxx", "\_id": "m2p2A3EBY37dRdt4jKyq", "\_score": 1.0, "\_source": … --- ## [Query related to cluster.routing.allocation.enable](https://discuss.elastic.co/t/query-related-to-cluster-routing-allocation-enable/232684)
**Author:** [@NairitiSharma](https://discuss.elastic.co/u/NairitiSharma)\ **Replies:** 0\ **Last updated:** [May 14, 2020, 4:25pm UTC](https://discuss.elastic.co/t/query-related-to-cluster-routing-allocation-enable/232684 "2020-05-14T16:25:32Z")
I have ES 6.8 based pod that has 3 data nodes. I dont have cluster.routing.allocation.enable explicitly defined in my elasticsearch.yml or as a persistent / transient setting. While creating indexes, will shard allocati… --- ## [Help with visualization](https://discuss.elastic.co/t/help-with-visualization/232255)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 5\ **Last updated:** [May 13, 2020, 9:52pm UTC](https://discuss.elastic.co/t/help-with-visualization/232255 "2020-05-13T21:52:20Z")
Hi, \*Current version ELK 6.8.8 I am using ELK + Suricata. I am trying to build a visualization in Kibana to filter the alerts received from index "logstash-alert-\*". All alerts are received, but I would like to have a … --- ## [Duplicate entries in kibana from logstash](https://discuss.elastic.co/t/duplicate-entries-in-kibana-from-logstash/232470)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 9\ **Last updated:** [May 14, 2020, 3:35pm UTC](https://discuss.elastic.co/t/duplicate-entries-in-kibana-from-logstash/232470 "2020-05-14T15:35:03Z")
Hello there, Today I just realized that all my cisco vpn entries are duplicated. I double checked the code and could not find any reason. Can someone help me? Follow the pics: Really appreciate for the attention… --- ## [How to check multiple values using if else condition in field and create a new scripted field?](https://discuss.elastic.co/t/how-to-check-multiple-values-using-if-else-condition-in-field-and-create-a-new-scripted-field/231967)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 15\ **Last updated:** [May 14, 2020, 2:51pm UTC](https://discuss.elastic.co/t/how-to-check-multiple-values-using-if-else-condition-in-field-and-create-a-new-scripted-field/231967 "2020-05-14T14:51:42Z")
Hi, i want to use this code or transform it in kibana in scripted field ?how can i do that, any help please? Blockquote filter { if \[Duration\] \>= 360 { mutate { add\_field =\> { "MT" =\> "50" } } } else if \[Duratio… --- ## [Average week in TSVB](https://discuss.elastic.co/t/average-week-in-tsvb/232516)
**Author:** [@obones](https://discuss.elastic.co/u/obones)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 2:45pm UTC](https://discuss.elastic.co/t/average-week-in-tsvb/232516 "2020-05-14T14:45:30Z")
Hello, I have an index where each timestamp is associated with an indicator. Inside TSVB, I can represent the maximum value for this indicator over the last seven days just fine and this gives me a line series with one… --- ## [Merge field message and msg](https://discuss.elastic.co/t/merge-field-message-and-msg/232644)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 3\ **Last updated:** [May 14, 2020, 2:37pm UTC](https://discuss.elastic.co/t/merge-field-message-and-msg/232644 "2020-05-14T14:37:53Z")
Hi guys, I noticed today that for some pods log messages are available in the message field, while for others they in the msg field. Is there some way to merge this field or make them all available over a pointer that l… --- ## [Drop milliseconds from timestamp](https://discuss.elastic.co/t/drop-milliseconds-from-timestamp/232264)
**Author:** [@alberto1](https://discuss.elastic.co/u/alberto1)\ **Replies:** 7\ **Last updated:** [May 14, 2020, 2:35pm UTC](https://discuss.elastic.co/t/drop-milliseconds-from-timestamp/232264 "2020-05-14T14:35:23Z")
Hi, I am trying to drop the 4 miliseconds from the timestamp but i cannot make it work and it's given me an error of \_dateparsefailure the bit where I have the error is: grok { match =\> \[ "message", "%{TIMESTAMP\_ISO… --- ## [Customize ECK Elastic Search for Active Directory Realms?](https://discuss.elastic.co/t/customize-eck-elastic-search-for-active-directory-realms/232110)
**Author:** [@Adam\_Fink](https://discuss.elastic.co/u/Adam_Fink)\ **Replies:** 4\ **Last updated:** [May 14, 2020, 2:21pm UTC](https://discuss.elastic.co/t/customize-eck-elastic-search-for-active-directory-realms/232110 "2020-05-14T14:21:37Z")
Hi Team, I have a new Elastic Search ECK installation (Running ECK 1.1 and Elastic 7.6.2 ) and need to implement AD Realm security. Is this possible? I see where ECK supports Native and File Security Realms https://ww… --- ## [Mutate filter specific word](https://discuss.elastic.co/t/mutate-filter-specific-word/231946)
**Author:** [@Jeffreyshoptrader](https://discuss.elastic.co/u/Jeffreyshoptrader)\ **Replies:** 5\ **Last updated:** [May 14, 2020, 1:59pm UTC](https://discuss.elastic.co/t/mutate-filter-specific-word/231946 "2020-05-14T13:59:38Z")
Hi guys, I'm receiving information from specific webservers. I wish to filter out lines with errors from my log files. To start I want to add a field for PHP fatal errors. Right now, I have this: input { bea… --- ## [Retrieve Fields from the String](https://discuss.elastic.co/t/retrieve-fields-from-the-string/231450)
**Author:** [@karthik3](https://discuss.elastic.co/u/karthik3)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 1:36pm UTC](https://discuss.elastic.co/t/retrieve-fields-from-the-string/231450 "2020-05-14T13:36:39Z")
Hi, How we can get the value from the string in logstash. Sample Log: 2020-04-27 00:44:30,445 INFO START \[\[Thread1\]\]logger - { "sourcetype":"MachineA", "event":{"timestamp":"2020-04-29T00:00:00.000","logLevel": "Deb… --- ## [Logstash http input response](https://discuss.elastic.co/t/logstash-http-input-response/232650)
**Author:** [@nitzan.karni](https://discuss.elastic.co/u/nitzan.karni)\ **Replies:** 0\ **Last updated:** [May 14, 2020, 1:16pm UTC](https://discuss.elastic.co/t/logstash-http-input-response/232650 "2020-05-14T13:16:05Z")
Hi there, I have set up a http input plugin on my logstash with certain port. As expected when I refer to the correct url the event is recieved in the logstash pipeline and I get "ok" message. What I would like to do … --- ## [Cant resolve hotst for Elastic search service](https://discuss.elastic.co/t/cant-resolve-hotst-for-elastic-search-service/232627)
**Author:** [@AndresL](https://discuss.elastic.co/u/AndresL)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 12:52pm UTC](https://discuss.elastic.co/t/cant-resolve-hotst-for-elastic-search-service/232627 "2020-05-14T12:52:01Z")
HI, from a VM on Azure running logstash, i cant resolve the hostname for ESS adminuser@dazlog101:~$ wget https://xxxx.westeurope.azure.elastic-cloud --2020-05-14 11:34:28-- https://xxxx.westeurope.azure.elastic-clou… --- ## [Rollup - Store statistics (just a number)](https://discuss.elastic.co/t/rollup-store-statistics-just-a-number/232214)
**Author:** [@vdelcampo](https://discuss.elastic.co/u/vdelcampo)\ **Replies:** 9\ **Last updated:** [May 14, 2020, 12:48pm UTC](https://discuss.elastic.co/t/rollup-store-statistics-just-a-number/232214 "2020-05-14T12:48:56Z")
Hi. I need to store historical data from my indexes, exactly the number of request per minute that my webservices has along time. Its possible to store only this information? If i create a rollup job using only the file… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1447) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1449)