# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1558 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1559 --- ## [Convert Field data type while re-indexing the Index In Elasticsearch](https://discuss.elastic.co/t/convert-field-data-type-while-re-indexing-the-index-in-elasticsearch/224378)
**Author:** [@avinash\_kumawat](https://discuss.elastic.co/u/avinash_kumawat)\ **Replies:** 8\ **Last updated:** [March 23, 2020, 10:07am UTC](https://discuss.elastic.co/t/convert-field-data-type-while-re-indexing-the-index-in-elasticsearch/224378 "2020-03-23T10:07:44Z")
Hello All, Is there any way to convert string data type into object type or nested type and vice-versa while re-indexing the Index using the POST \_reindex API in Elasticsearch? Regards, Avinash Kumawat --- ## [How to convert field date from String to Date?](https://discuss.elastic.co/t/how-to-convert-field-date-from-string-to-date/224467)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 12\ **Last updated:** [March 23, 2020, 9:57am UTC](https://discuss.elastic.co/t/how-to-convert-field-date-from-string-to-date/224467 "2020-03-23T09:57:42Z")
I want to convert the field of date from string to date, i try this code in my config file but it doesn't change in kibana..I don't know why! any help?? filter{ csv{ columns =\> \["car","date","dateEntree","dateSortie"\] … --- ## [Get surrounding documents via API](https://discuss.elastic.co/t/get-surrounding-documents-via-api/222656)
**Author:** [@elasticUser5](https://discuss.elastic.co/u/elasticUser5)\ **Replies:** 6\ **Last updated:** [March 23, 2020, 9:31am UTC](https://discuss.elastic.co/t/get-surrounding-documents-via-api/222656 "2020-03-23T09:31:04Z")
Hello! Is there any way to replicate "Surrounding Documents" function from Kibana but via API? I'm trying different ways, but none is working (span\_near, scroll API...). Any help is appreciated! --- ## [Adding copy\_to to type: geo\_point throws illegal\_state\_exception: "Can't get text on a END\_ARRAY" exception](https://discuss.elastic.co/t/adding-copy-to-to-type-geo-point-throws-illegal-state-exception-cant-get-text-on-a-end-array-exception/224072)
**Author:** [@shevah](https://discuss.elastic.co/u/shevah)\ **Replies:** 1\ **Last updated:** [March 23, 2020, 8:40am UTC](https://discuss.elastic.co/t/adding-copy-to-to-type-geo-point-throws-illegal-state-exception-cant-get-text-on-a-end-array-exception/224072 "2020-03-23T08:40:12Z")
Hi. I would like to replicate the behavior of \_all field of ES5. I am using copy\_to for that. But, adding copy\_to to a field of type: geo\_point throws illegal\_state\_exception: "Can't get text on a END\_ARRAY" exception. … --- ## [Remote Access kibana from windows vm hosted on Azure](https://discuss.elastic.co/t/remote-access-kibana-from-windows-vm-hosted-on-azure/224400)
**Author:** [@aman97](https://discuss.elastic.co/u/aman97)\ **Replies:** 3\ **Last updated:** [March 23, 2020, 8:17am UTC](https://discuss.elastic.co/t/remote-access-kibana-from-windows-vm-hosted-on-azure/224400 "2020-03-23T08:17:32Z")
Hi All, My Elasticsearch and kibana is installed on windows VM in Azure both are working fine but I want to access my kibana outside the VM, I have read documents mentioned that change server.host: "0.0.0.0" but when I… --- ## [Modifying index data for visual based of user entered values?](https://discuss.elastic.co/t/modifying-index-data-for-visual-based-of-user-entered-values/223629)
**Author:** [@Martin\_Farmer](https://discuss.elastic.co/u/Martin_Farmer)\ **Replies:** 2\ **Last updated:** [March 23, 2020, 8:14am UTC](https://discuss.elastic.co/t/modifying-index-data-for-visual-based-of-user-entered-values/223629 "2020-03-23T08:14:11Z")
I have some data I want to graph and display in a table. I want the user to be able to run scenarios where by they can add a "weight" multiplier to some of the values - I need to take the "raw" value and multiple it by t… --- ## [How to print/trace received xml message from IBMMQ in logstash logs or in file in format of XML](https://discuss.elastic.co/t/how-to-print-trace-received-xml-message-from-ibmmq-in-logstash-logs-or-in-file-in-format-of-xml/224613)
**Author:** [@ELK3855](https://discuss.elastic.co/u/ELK3855)\ **Replies:** 0\ **Last updated:** [March 23, 2020, 8:03am UTC](https://discuss.elastic.co/t/how-to-print-trace-received-xml-message-from-ibmmq-in-logstash-logs-or-in-file-in-format-of-xml/224613 "2020-03-23T08:03:35Z")
How to print/trace received xml message from IBMMQ in logstash logs or in file ? --- ## [Search exact keyword from ES](https://discuss.elastic.co/t/search-exact-keyword-from-es/224594)
**Author:** [@Sridhar](https://discuss.elastic.co/u/Sridhar)\ **Replies:** 3\ **Last updated:** [March 23, 2020, 7:36am UTC](https://discuss.elastic.co/t/search-exact-keyword-from-es/224594 "2020-03-23T07:36:39Z")
Hi, I'm using the below query to search and fetch the latest 1 record from ES GET indexname/\_search { "query": { "dis\_max": { "queries": \[ { "match": { "data.target.sampler.keyword": "CPU" }}, … --- ## [Shard on disk with multiple path configuration not balanced](https://discuss.elastic.co/t/shard-on-disk-with-multiple-path-configuration-not-balanced/224607)
**Author:** [@andrewjo](https://discuss.elastic.co/u/andrewjo)\ **Replies:** 0\ **Last updated:** [March 23, 2020, 7:29am UTC](https://discuss.elastic.co/t/shard-on-disk-with-multiple-path-configuration-not-balanced/224607 "2020-03-23T07:29:33Z")
Hi Guys, Any idea , how to balanced any shard on multiple path configuration in Elasticsearch? If path 1 already 95%, it cause failed in elasticsearch. No more ingestion on path 2. (Error : forbidden-12-index-read-only-a… --- ## [Customize "No Result Found" in visualization](https://discuss.elastic.co/t/customize-no-result-found-in-visualization/224388)
**Author:** [@NaveenR](https://discuss.elastic.co/u/NaveenR)\ **Replies:** 3\ **Last updated:** [March 23, 2020, 6:21am UTC](https://discuss.elastic.co/t/customize-no-result-found-in-visualization/224388 "2020-03-23T06:21:16Z")
Hi, I'm new to this technology and learning as I go along. I've been tasked to find out if the "No Result Found" text can be substituted by 0 or something else in a bar graph. I've searched and apparently this was fixed… --- ## [Beats can not connect to Logstash](https://discuss.elastic.co/t/beats-can-not-connect-to-logstash/224502)
**Author:** [@namesv](https://discuss.elastic.co/u/namesv)\ **Replies:** 3\ **Last updated:** [March 23, 2020, 5:53am UTC](https://discuss.elastic.co/t/beats-can-not-connect-to-logstash/224502 "2020-03-23T05:53:28Z")
Hi, I've been struggling to connect my filebeat to logstash in order to harvest the logs on node machines. Below is my error/ log from Logstash sudo /usr/share/logstash/bin/logstash -f ~/1phase2.conf --config.reload.a… --- ## [To display only selected fields in kibana](https://discuss.elastic.co/t/to-display-only-selected-fields-in-kibana/224410)
**Author:** [@amanpradhan07](https://discuss.elastic.co/u/amanpradhan07)\ **Replies:** 2\ **Last updated:** [March 23, 2020, 5:24am UTC](https://discuss.elastic.co/t/to-display-only-selected-fields-in-kibana/224410 "2020-03-23T05:24:44Z")
Hello everyone, I want to make pie chart of some fields in my visualization.but when i select a field.keyword it displays all the values.. For example i select biller.keyword- Then it displays all the billers in pie c… --- ## [Number of elastic API request](https://discuss.elastic.co/t/number-of-elastic-api-request/224580)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 1\ **Last updated:** [March 23, 2020, 4:42am UTC](https://discuss.elastic.co/t/number-of-elastic-api-request/224580 "2020-03-23T04:42:39Z")
HI, how I can know how many API request elastic search is getting? --- ## [Kibana dashboards are taking too long to load](https://discuss.elastic.co/t/kibana-dashboards-are-taking-too-long-to-load/224546)
**Author:** [@kavya12345](https://discuss.elastic.co/u/kavya12345)\ **Replies:** 1\ **Last updated:** [March 23, 2020, 4:27am UTC](https://discuss.elastic.co/t/kibana-dashboards-are-taking-too-long-to-load/224546 "2020-03-23T04:27:41Z")
HI I am using kibana as a iframe in angular application. I see that kibana is taking so long to load the page. It is taking 1minute to load the page. I shows loading kibana untill the kibana dashboard loads. Can you pl… --- ## [Recommended Elasticsearch Node requirements for monitoring 2000 nodes](https://discuss.elastic.co/t/recommended-elasticsearch-node-requirements-for-monitoring-2000-nodes/224057)
**Author:** [@Bingu\_Shim](https://discuss.elastic.co/u/Bingu_Shim)\ **Replies:** 3\ **Last updated:** [March 21, 2020, 2:56am UTC](https://discuss.elastic.co/t/recommended-elasticsearch-node-requirements-for-monitoring-2000-nodes/224057 "2020-03-21T02:56:15Z")
Hello, I'm starting to research Metricbeat + Kibana Inventory to monitor system resources. The total number machine that we are planning to monitor is about 2,000. Currently I was able to deploy metricbeat to 79 hosts… --- ## [Space id parameter for the savedObjects api](https://discuss.elastic.co/t/space-id-parameter-for-the-savedobjects-api/224548)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 1\ **Last updated:** [March 23, 2020, 2:50am UTC](https://discuss.elastic.co/t/space-id-parameter-for-the-savedobjects-api/224548 "2020-03-23T02:50:50Z")
hi guys, does anyone know the estimated release date for the space id parameter for the savedObjects apis? --- ## [IN usage for multiple key word in IF condition](https://discuss.elastic.co/t/in-usage-for-multiple-key-word-in-if-condition/224563)
**Author:** [@Sridhar](https://discuss.elastic.co/u/Sridhar)\ **Replies:** 2\ **Last updated:** [March 23, 2020, 1:59am UTC](https://discuss.elastic.co/t/in-usage-for-multiple-key-word-in-if-condition/224563 "2020-03-23T01:59:45Z")
Hi, Below is the logstash code.. its not working.. it works with == "1 Key" but not with multiple key words using in Please help output { if \[data\]\[data1\]\[data3\] in "key", "key-2", "key-3", "Key-4", "aaKEY" { el… --- ## [ELK stack specs recomendations](https://discuss.elastic.co/t/elk-stack-specs-recomendations/224583)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [March 23, 2020, 12:03am UTC](https://discuss.elastic.co/t/elk-stack-specs-recomendations/224583 "2020-03-23T00:03:16Z")
Grettings, what will be your recomended specs for Logstash, Elastic and kibana machines based on the folowing: I will consume about 1.000.000 documents daily The size of those documents, daily, will be about 1.5 GB 3 … --- ## [Mistake in DFI's documentation](https://discuss.elastic.co/t/mistake-in-dfis-documentation/223823)
**Author:** [@Ahmet\_Arslan](https://discuss.elastic.co/u/Ahmet_Arslan)\ **Replies:** 2\ **Last updated:** [March 22, 2020, 10:31pm UTC](https://discuss.elastic.co/t/mistake-in-dfis-documentation/223823 "2020-03-22T22:31:16Z")
Hi, There is a mistake in the documentation of the DFI Similarity \[1\]. It currently says " it is highly recommended to remove stop words" but it should be the opposite: " it is highly recommended not to remove stop word… --- ## [Drop empty message with character NULL \\x00](https://discuss.elastic.co/t/drop-empty-message-with-character-null-x00/224331)
**Author:** [@quangnguyen](https://discuss.elastic.co/u/quangnguyen)\ **Replies:** 3\ **Last updated:** [March 22, 2020, 9:54pm UTC](https://discuss.elastic.co/t/drop-empty-message-with-character-null-x00/224331 "2020-03-22T21:54:30Z")
Hello Community, i'm getting following log message what makes no sense to forward it in to output. The message contains only null character inside two qoutes "\\x00". How could i drop it with logstash filter? \[2020-03-2… --- ## [\[ANNOUNCEMENT\] - Elasticsearch Beyonder 7.5 released](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-7-5-released/215202)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [January 15, 2020, 8:36pm UTC](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-7-5-released/215202 "2020-01-15T20:36:00Z")
The Elasticsearch Beyonder team is pleased to announce the elasticsearch-beyonder-7.5 release! Elasticsearch Beyonder Elasticsearch beyonder provides automatic index, mapping, alias or template creation when an elastic… --- ## [Elasticsearch result: Array to CSV](https://discuss.elastic.co/t/elasticsearch-result-array-to-csv/224473)
**Author:** [@Sineos](https://discuss.elastic.co/u/Sineos)\ **Replies:** 2\ **Last updated:** [March 22, 2020, 8:34pm UTC](https://discuss.elastic.co/t/elasticsearch-result-array-to-csv/224473 "2020-03-22T20:34:43Z")
I'm reading from a file and search the file's content in ES. The output of ES should go into a CSV. Conf file: input { file { path =\> "d:/uae.txt" start\_position =\> "beginning" sincedb… --- ## [Ruby Iteration in Logstash help](https://discuss.elastic.co/t/ruby-iteration-in-logstash-help/224054)
**Author:** [@GreinerA](https://discuss.elastic.co/u/GreinerA)\ **Replies:** 3\ **Last updated:** [March 22, 2020, 6:56pm UTC](https://discuss.elastic.co/t/ruby-iteration-in-logstash-help/224054 "2020-03-22T18:56:19Z")
i have a parsed xml data that looks like this: "ObjLdn\_Value" =\> \[ \[0\] "PoolType=necc, PoolId=0, PoolMember=0, Machine=XXXXXX1, UUID=ABCDABCD1", \[1\] "PoolType=necc, PoolId=0, PoolMember=1, Machine=XXXXXX2, UUID=… --- ## [Amazon\_es output plugin routing](https://discuss.elastic.co/t/amazon-es-output-plugin-routing/224572)
**Author:** [@rohit\_rohan](https://discuss.elastic.co/u/rohit_rohan)\ **Replies:** 0\ **Last updated:** [March 22, 2020, 6:46pm UTC](https://discuss.elastic.co/t/amazon-es-output-plugin-routing/224572 "2020-03-22T18:46:02Z")
\`\`\`I am using amazon\_ws output to send data, it works perfectly without \`routing\` defined but throws an error \`illegal\_argument\_exception\\",\\"reason\\":\\"Action/metadata line \[1\] contains an unknown parameter \[\_routing\]\\"… --- ## [Field value not populating in kibana dashboard](https://discuss.elastic.co/t/field-value-not-populating-in-kibana-dashboard/224281)
**Author:** [@Vinay\_Kumar2](https://discuss.elastic.co/u/Vinay_Kumar2)\ **Replies:** 3\ **Last updated:** [March 22, 2020, 6:29pm UTC](https://discuss.elastic.co/t/field-value-not-populating-in-kibana-dashboard/224281 "2020-03-22T18:29:47Z")
Hi I am trying to create a visualization using data table in kibana 7.6. Able to see the field value in Discover tab. But not able to create visualization for the one field iws message2. Below is my logstash configurati… --- ## [Integrate Events into Elastic SIEM](https://discuss.elastic.co/t/integrate-events-into-elastic-siem/224091)
**Author:** [@david-vazquez](https://discuss.elastic.co/u/david-vazquez)\ **Replies:** 4\ **Last updated:** [March 22, 2020, 6:27pm UTC](https://discuss.elastic.co/t/integrate-events-into-elastic-siem/224091 "2020-03-22T18:27:09Z")
Hello guys, I´m new using ELK Stack. I have been parsing log data from Palo Alto Firewall and Cisco Umbrella by using Logstash to index it into Elasticsearch. It was a difficult task, because I have no experience doing… --- ## [Logstash filter logs config](https://discuss.elastic.co/t/logstash-filter-logs-config/224505)
**Author:** [@anmohamed](https://discuss.elastic.co/u/anmohamed)\ **Replies:** 1\ **Last updated:** [March 22, 2020, 5:24pm UTC](https://discuss.elastic.co/t/logstash-filter-logs-config/224505 "2020-03-22T17:24:32Z")
I have config ELK and i tried setup the logs for servers logstash config is not working properly this is my log format, can we help me to setup a conf file. (filter) W, \[2020-03-17T09:51:25.615545 #20973\] WARN -- : \[c… --- ## [Cisco ASA parse failure](https://discuss.elastic.co/t/cisco-asa-parse-failure/224259)
**Author:** [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)\ **Replies:** 2\ **Last updated:** [March 22, 2020, 4:39pm UTC](https://discuss.elastic.co/t/cisco-asa-parse-failure/224259 "2020-03-22T16:39:31Z")
Hello, I get below error when trying to parse cisco messages. \[2020-03-19T12:21:34,554\]\[ERROR\]\[logstash.pipeline \] Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\ **Author:** [@sayyadsays](https://discuss.elastic.co/u/sayyadsays)\ **Replies:** 1\ **Last updated:** [March 22, 2020, 4:32pm UTC](https://discuss.elastic.co/t/windows-log-text-file-data-is-not-parsing-logstash/224345 "2020-03-22T16:32:21Z") Can you please check and help: Find the below Logs need to monitor: Timestamp: 12/24/2019 5:42:04 AM Message: Task timed out - SKKW is not responding in timely manner Category: Error Priority: -1 EventId: 1 Severit… --- ## [Please help - if statement for match rules](https://discuss.elastic.co/t/please-help-if-statement-for-match-rules/224271)
**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\ **Replies:** 1\ **Last updated:** [March 22, 2020, 4:25pm UTC](https://discuss.elastic.co/t/please-help-if-statement-for-match-rules/224271 "2020-03-22T16:25:28Z")
I would like to match two items with the rule below. How can I make this with an if statement? date { match =\> \[ "fgt\_timestamp", "yyyyMMdd HHmmss", "yyyy-MM-dd HH:mm:ss" \] target =\> "std\_timestamp" t… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1557) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1559)