# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1495 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1496 --- ## [Time format 30.12.2019 14:06:00 GMT+00:00](https://discuss.elastic.co/t/time-format-30-12-2019-1400-gmt-00-00/229256)
**Author:** [@Yaniv\_Nuriel](https://discuss.elastic.co/u/Yaniv_Nuriel)\ **Replies:** 3\ **Last updated:** [April 22, 2020, 4:42pm UTC](https://discuss.elastic.co/t/time-format-30-12-2019-1400-gmt-00-00/229256 "2020-04-22T16:42:36Z")
Dear all, Any idea how to match the following date format? 30.12.2019 14:06:00 GMT+00:100 This is not working dd.MM.yyy HH:mm:ss zzz --- ## [Calculate time difference between 2 lines in log file if there are multiple sets](https://discuss.elastic.co/t/calculate-time-difference-between-2-lines-in-log-file-if-there-are-multiple-sets/228856)
**Author:** [@airan](https://discuss.elastic.co/u/airan)\ **Replies:** 3\ **Last updated:** [April 22, 2020, 4:38pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-2-lines-in-log-file-if-there-are-multiple-sets/228856 "2020-04-22T16:38:56Z")
Hi everyone, I retrieved a log file that look like this : 2019-03-07 04:35:57.421 19EC | INFO TIMEDATA.DLL: Capacity allocated: Hashtable entries 20648881, Heap mem 805306368 2019-03-07 04:35:57.421 … --- ## [Watcher Alerts to multiple users](https://discuss.elastic.co/t/watcher-alerts-to-multiple-users/229241)
**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\ **Replies:** 3\ **Last updated:** [April 22, 2020, 4:14pm UTC](https://discuss.elastic.co/t/watcher-alerts-to-multiple-users/229241 "2020-04-22T16:14:27Z")
Hi, Is it possible to configure watcher alerts to email users based on a role? If not, I dont have a distribution list so would like to be able to added and remove users form all watcher alerts without having to go thr… --- ## [How can I send logs to Logstash with no authentication?](https://discuss.elastic.co/t/how-can-i-send-logs-to-logstash-with-no-authentication/229297)
**Author:** [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 4:13pm UTC](https://discuss.elastic.co/t/how-can-i-send-logs-to-logstash-with-no-authentication/229297 "2020-04-22T16:13:22Z")
Hello All, Need to know how I can send logs to Logstash with no authentication? Is this possible and if so, what is process? Any help appreciated. Thanks, FREDDIE2020 --- ## [X-Axis Time Shifts Between Kibana and Elasticsearch](https://discuss.elastic.co/t/x-axis-time-shifts-between-kibana-and-elasticsearch/229306)
**Author:** [@gtdkibana](https://discuss.elastic.co/u/gtdkibana)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 3:56pm UTC](https://discuss.elastic.co/t/x-axis-time-shifts-between-kibana-and-elasticsearch/229306 "2020-04-22T15:56:34Z")
Hello. Below is the results of an elasticsearch. Note the query, and the time range. The bars come in roughly 4 clusters. Note also the x-axis and the @timestamps per 5 minutes. Now, for values in the elastic sear… --- ## [Logstash grok ignore field if unavailable](https://discuss.elastic.co/t/logstash-grok-ignore-field-if-unavailable/229159)
**Author:** [@Chandra12](https://discuss.elastic.co/u/Chandra12)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 3:38pm UTC](https://discuss.elastic.co/t/logstash-grok-ignore-field-if-unavailable/229159 "2020-04-22T15:38:37Z")
Hi, I'm trying to skip field if any of below field is missing I couldn't to parse VD=73,IP=10.4.1.1,M1=1586,M2=158,TB=Mobile, Grok expression for above VD=%{NUMBER:VD},IP=%{IPV4:ipaddress},M1=%{NUMBER:m1},M2=%{NUMBE… --- ## [Logstash conf](https://discuss.elastic.co/t/logstash-conf/228972)
**Author:** [@Cheruku125](https://discuss.elastic.co/u/Cheruku125)\ **Replies:** 5\ **Last updated:** [April 22, 2020, 3:36pm UTC](https://discuss.elastic.co/t/logstash-conf/228972 "2020-04-22T15:36:53Z")
Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, {, } at line 8, column 97 (byte 388) after input {\\n jdbc {… --- ## [Is it possible to impose order for the input files?](https://discuss.elastic.co/t/is-it-possible-to-impose-order-for-the-input-files/229255)
**Author:** [@mnrdammu](https://discuss.elastic.co/u/mnrdammu)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 3:33pm UTC](https://discuss.elastic.co/t/is-it-possible-to-impose-order-for-the-input-files/229255 "2020-04-22T15:33:44Z")
Hi All, I have a usecase, where I have to read two files (csv and txt) , using two file inputs. Then in the filter section, I need to do some filtering on the contents of csv file, based on the field derived from txt fi… --- ## [Nested path with inner\_hits and complex logical operations](https://discuss.elastic.co/t/nested-path-with-inner-hits-and-complex-logical-operations/229300)
**Author:** [@jo\_dev](https://discuss.elastic.co/u/jo_dev)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 3:20pm UTC](https://discuss.elastic.co/t/nested-path-with-inner-hits-and-complex-logical-operations/229300 "2020-04-22T15:20:50Z")
I have document with following nested mapping -\> A -\> B -\> C While querying with following expression with inner\_hits to get matching part of the document -\> ((A.B.field1 == 1) AND (A.B.C.field2 == "Foo")) OR ((A.B.f… --- ## [Logstash filter based on first line as identifier](https://discuss.elastic.co/t/logstash-filter-based-on-first-line-as-identifier/229282)
**Author:** [@prkd](https://discuss.elastic.co/u/prkd)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 3:16pm UTC](https://discuss.elastic.co/t/logstash-filter-based-on-first-line-as-identifier/229282 "2020-04-22T15:16:37Z")
I am using a light weight python based forwarder (github) instead of filebeat due to an old Solaris version dependency on the server sending the files. I am unable to add fields like we can do in filebeat using this forw… --- ## [Sparkline chart](https://discuss.elastic.co/t/sparkline-chart/229162)
**Author:** [@dataplatform12345](https://discuss.elastic.co/u/dataplatform12345)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 3:16pm UTC](https://discuss.elastic.co/t/sparkline-chart/229162 "2020-04-22T15:16:22Z")
Hi, In Kibana visualization, is it possible to create a result with sparkline chart as one of the columns in the result? Ideally to combine the trend line in one column and aggregated values in all other columns in the … --- ## [Auditbeat file integrity doesn't scans shares nor mount points](https://discuss.elastic.co/t/auditbeat-file-integrity-doesnt-scans-shares-nor-mount-points/229291)
**Author:** [@ormaman](https://discuss.elastic.co/u/ormaman)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 3:01pm UTC](https://discuss.elastic.co/t/auditbeat-file-integrity-doesnt-scans-shares-nor-mount-points/229291 "2020-04-22T15:01:54Z")
auditbeat file integrity doesn't scans shares nor mount points I tried to mount windows share to a windows machine with a auditbeat on it mapped to Z: The auditbeat does not recognizing changes there moreover i tried… --- ## [Can't hit API on non-loopback IP](https://discuss.elastic.co/t/cant-hit-api-on-non-loopback-ip/229048)
**Author:** [@hmcguire](https://discuss.elastic.co/u/hmcguire)\ **Replies:** 20\ **Last updated:** [April 22, 2020, 2:59pm UTC](https://discuss.elastic.co/t/cant-hit-api-on-non-loopback-ip/229048 "2020-04-22T14:59:55Z")
I have just setup a new dev 7.6.2 single-node cluster via rpm on centos 7 and am unable to curl the API on the non-loopback address. Curl to localhost works fine and I can also telnet to the default port of 9200 of the n… --- ## [Kibana SIEM display problem just spinning no error](https://discuss.elastic.co/t/kibana-siem-display-problem-just-spinning-no-error/228488)
**Author:** [@Bartekk](https://discuss.elastic.co/u/Bartekk)\ **Replies:** 7\ **Last updated:** [April 22, 2020, 2:18pm UTC](https://discuss.elastic.co/t/kibana-siem-display-problem-just-spinning-no-error/228488 "2020-04-22T14:18:48Z")
Hi i've problem in SIEM/NETWORK/Flows i've just spinning ring and nothing displays , before update everything was fine. and log https://pastebin.pl/view/88c362e3 i dont see nothing special here ;/ No idea how to fix … --- ## [Query multi index using Java API](https://discuss.elastic.co/t/query-multi-index-using-java-api/229278)
**Author:** [@Khanh\_Nguy\_n1](https://discuss.elastic.co/u/Khanh_Nguy_n1)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 2:17pm UTC](https://discuss.elastic.co/t/query-multi-index-using-java-api/229278 "2020-04-22T14:17:44Z")
Hi, I am trying to query on multiple indices using Java API. The wildcard expression is passed to the request like this String\[\] indices = client.indices().get(new GetIndexRequest().indices("prefix\_\*"), RequestOptions… --- ## [Is there any configuration I can change to force Kibana to show all values received on a Vertical Bar graph?](https://discuss.elastic.co/t/is-there-any-configuration-i-can-change-to-force-kibana-to-show-all-values-received-on-a-vertical-bar-graph/228579)
**Author:** [@rafael\_muynarsk](https://discuss.elastic.co/u/rafael_muynarsk)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 1:42pm UTC](https://discuss.elastic.co/t/is-there-any-configuration-i-can-change-to-force-kibana-to-show-all-values-received-on-a-vertical-bar-graph/228579 "2020-04-22T13:42:03Z")
I've a working dashboard with Kibana that's automatically receiving values and distributing the sum of the data daily like the following: The problem here is that Kibana is not showing all the values that it has recei… --- ## [Segment merging on old indices](https://discuss.elastic.co/t/segment-merging-on-old-indices/229272)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 1:37pm UTC](https://discuss.elastic.co/t/segment-merging-on-old-indices/229272 "2020-04-22T13:37:02Z")
Hi, I've got a lot of daily indices and I'm not sure if Elasticsearch will perform any write actions on indices that aren't getting any new documents or updates, does it do anything like that? Thanks! --- ## [Logstash connecting to ES instance on localhost instead of physical IP](https://discuss.elastic.co/t/logstash-connecting-to-es-instance-on-localhost-instead-of-physical-ip/229232)
**Author:** [@cnvramana](https://discuss.elastic.co/u/cnvramana)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 12:44pm UTC](https://discuss.elastic.co/t/logstash-connecting-to-es-instance-on-localhost-instead-of-physical-ip/229232 "2020-04-22T12:44:19Z")
I have installed ELK stack 7.6 on a single server. This is on a trial run I set up ElasticSearch, Logstash, and Kibana to run on physical IP instead of locahost. I am able to reach all three components with the IP add… --- ## [Kibana "Logs" application Tiebreaker field grayed out](https://discuss.elastic.co/t/kibana-logs-application-tiebreaker-field-grayed-out/228375)
**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\ **Replies:** 4\ **Last updated:** [April 22, 2020, 12:54pm UTC](https://discuss.elastic.co/t/kibana-logs-application-tiebreaker-field-grayed-out/228375 "2020-04-22T12:54:08Z")
Hello, I am trying to set up a tiebreaker field in the the Kibana "Logs" application, but it is grayed out. There is a banner showing "Deprecation Notice". I am unsure how to set that tiebreaker field now that it's depr… --- ## [Reusing scripted field in another scripted field as a parameter in painless](https://discuss.elastic.co/t/reusing-scripted-field-in-another-scripted-field-as-a-parameter-in-painless/229258)
**Author:** [@anoymous\_cooper](https://discuss.elastic.co/u/anoymous_cooper)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 12:40pm UTC](https://discuss.elastic.co/t/reusing-scripted-field-in-another-scripted-field-as-a-parameter-in-painless/229258 "2020-04-22T12:40:08Z")
I am trying to use a scripted field as a parameter in another scripted field but it seems to give wrong result in es7.4.2,It was working fine in es5.0.1 "script\_fields": { "a": { "script": { "source": "return 1", "l… --- ## [Creating a beat based on metric beat](https://discuss.elastic.co/t/creating-a-beat-based-on-metric-beat/229253)
**Author:** [@nabeel\_ahmed](https://discuss.elastic.co/u/nabeel_ahmed)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 12:05pm UTC](https://discuss.elastic.co/t/creating-a-beat-based-on-metric-beat/229253 "2020-04-22T12:05:31Z")
Hi, i am creating a beat based on metric and follow this documentation https://www.elastic.co/guide/en/beats/devguide/current/creating-beat-from-metricbeat.html But it gave me Kibana dashboards error: vendor/githu… --- ## [Visualize based on grouped documents using element value](https://discuss.elastic.co/t/visualize-based-on-grouped-documents-using-element-value/229237)
**Author:** [@abregman](https://discuss.elastic.co/u/abregman)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 11:57am UTC](https://discuss.elastic.co/t/visualize-based-on-grouped-documents-using-element-value/229237 "2020-04-22T11:57:43Z")
Hey, assuming I have the following documents that represent passengers: {‘name’: ‘Mario’, preferable\_seats: \[2,3,4\], car: 2} {‘name’: ‘Luigi’, preferable\_seats: \[1,4,5\], car: 1, } {‘name’: ‘Toad’, preferable\_seats: \[1, … --- ## [Can't get nested value on script](https://discuss.elastic.co/t/cant-get-nested-value-on-script/229251)
**Author:** [@joel.ortin](https://discuss.elastic.co/u/joel.ortin)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 11:56am UTC](https://discuss.elastic.co/t/cant-get-nested-value-on-script/229251 "2020-04-22T11:56:38Z")
Hi, I'm trying to do some sorting functionality (like multiply a calculated distance by a number). I have a nested relation where i have multiple objects with a geopoint, and I want to get the closest one and sort the r… --- ## [co.elastic.apm.agent.impl.async.SpanInScopeRunnableWrapper.run(SpanInScopeRunnableWrapper.java:64)](https://discuss.elastic.co/t/co-elastic-apm-agent-impl-async-spaninscoperunnablewrapper-run-spaninscoperunnablewrapper-java-64/229248)
**Author:** [@raja\_shekar](https://discuss.elastic.co/u/raja_shekar)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 11:43am UTC](https://discuss.elastic.co/t/co-elastic-apm-agent-impl-async-spaninscoperunnablewrapper-run-spaninscoperunnablewrapper-java-64/229248 "2020-04-22T11:43:57Z")
Hi All, At what cases are we get the "co.elastic.apm.agent.impl.async.SpanInScopeRunnableWrapper.run(SpanInScopeRunnableWrapper.java:64)" exception: An error has occurred during your search. Please log out, log back i… --- ## [Kibana dashboard - how to change the syslog message format](https://discuss.elastic.co/t/kibana-dashboard-how-to-change-the-syslog-message-format/228123)
**Author:** [@Rico](https://discuss.elastic.co/u/Rico)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 11:43am UTC](https://discuss.elastic.co/t/kibana-dashboard-how-to-change-the-syslog-message-format/228123 "2020-04-22T11:43:15Z")
Hello everybody, a customer is using the Kibana Dashboard and determined that port numbers has a "," (e.g. "29,842") in all syslog messages. Is it possible to change the format so it is displaying "29842" instead as po… --- ## [Error: Could not index event to Elasticsearch](https://discuss.elastic.co/t/error-could-not-index-event-to-elasticsearch/229240)
**Author:** [@thywoe](https://discuss.elastic.co/u/thywoe)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 11:34am UTC](https://discuss.elastic.co/t/error-could-not-index-event-to-elasticsearch/229240 "2020-04-22T11:34:24Z")
Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"rencore-2020.04.22", :routing=\>nil, :\_type=\>"\_doc"}, #\\], :response=\>{"index"=\>{"\_index"=\>"rencor… --- ## [Kibana Drill-Down not working as expected](https://discuss.elastic.co/t/kibana-drill-down-not-working-as-expected/228934)
**Author:** [@Paul\_Gege](https://discuss.elastic.co/u/Paul_Gege)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 11:25am UTC](https://discuss.elastic.co/t/kibana-drill-down-not-working-as-expected/228934 "2020-04-22T11:25:33Z")
Hi all, I have been playing around with making drill-downs however when I change the format for a field within my index to a URL, it directs me to the appropriate visualization but the query does not actually take place. … --- ## [Bulk delete in elasticsearch](https://discuss.elastic.co/t/bulk-delete-in-elasticsearch/228826)
**Author:** [@A\_google\_user](https://discuss.elastic.co/u/A_google_user)\ **Replies:** 10\ **Last updated:** [April 22, 2020, 11:19am UTC](https://discuss.elastic.co/t/bulk-delete-in-elasticsearch/228826 "2020-04-22T11:19:21Z")
If I have a list of ids can I bulk delete those documents with ids? --- ## [Reload\_search\_analyzers](https://discuss.elastic.co/t/reload-search-analyzers/228002)
**Author:** [@chari](https://discuss.elastic.co/u/chari)\ **Replies:** 7\ **Last updated:** [April 22, 2020, 11:15am UTC](https://discuss.elastic.co/t/reload-search-analyzers/228002 "2020-04-22T11:15:23Z")
i have the following sequence of python api calls to ES. from elasticsearch import Elasticsearch es=Elasticsearch(\[{'host':'127.0.0.1','port':9200}\]) es.indices.reload\_search\_analyzers(index="myindex") but I see an err… --- ## [Stop all nodes while stopping master node](https://discuss.elastic.co/t/stop-all-nodes-while-stopping-master-node/229218)
**Author:** [@abhishek1](https://discuss.elastic.co/u/abhishek1)\ **Replies:** 7\ **Last updated:** [April 22, 2020, 11:08am UTC](https://discuss.elastic.co/t/stop-all-nodes-while-stopping-master-node/229218 "2020-04-22T11:08:55Z")
Hi, I have configured my elasticsearch cluster configuration like below Node 1 : Master Node only Node 2: Master/data Node 3: data node only I have configured master eligible node Node1 and node2 When i stopped nod… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1494) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1496)