# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1573 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1574 --- ## [Emailing in Logstash](https://discuss.elastic.co/t/emailing-in-logstash/223493)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 5:48pm UTC](https://discuss.elastic.co/t/emailing-in-logstash/223493 "2020-03-13T17:48:10Z")
Hi Team, How to send Email through logstash-output section ?? Thanks --- ## [Get distinct count on a field by grouping on another field and select all rows with a condition on that count](https://discuss.elastic.co/t/get-distinct-count-on-a-field-by-grouping-on-another-field-and-select-all-rows-with-a-condition-on-that-count/223549)
**Author:** [@elasticdata101](https://discuss.elastic.co/u/elasticdata101)\ **Replies:** 0\ **Last updated:** [March 13, 2020, 5:28pm UTC](https://discuss.elastic.co/t/get-distinct-count-on-a-field-by-grouping-on-another-field-and-select-all-rows-with-a-condition-on-that-count/223549 "2020-03-13T17:28:53Z")
Hi, I am very new to elastic search and I need to write a query in Elasticsearch which is equivalent to the following SQL query: SELECT \* FROM table WHERE field1 IN (SELECT field1 FROM table GROUP BY field1 HAVING COUNT… --- ## [7.6.0 still attempting plaintext http](https://discuss.elastic.co/t/7-6-0-still-attempting-plaintext-http/221830)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 4\ **Last updated:** [March 13, 2020, 5:25pm UTC](https://discuss.elastic.co/t/7-6-0-still-attempting-plaintext-http/221830 "2020-03-13T17:25:42Z")
Wondering about these log events on our elected master node: \[2020-03-03T08:46:57,125\]\[WARN \]\[o.e.x.s.t.n.SecurityNetty4HttpServerTransport\] \[es-mst2\] received plaintext http traffic on an https channel, closing connect… --- ## [Can we split message to multiple line in kibana](https://discuss.elastic.co/t/can-we-split-message-to-multiple-line-in-kibana/221411)
**Author:** [@maddog](https://discuss.elastic.co/u/maddog)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 5:05pm UTC](https://discuss.elastic.co/t/can-we-split-message-to-multiple-line-in-kibana/221411 "2020-03-13T17:05:55Z")
Dear all how to split message to multiple line in kibana ?? my dashboard has show the saveObjectsearch of discovery data. but i need to show messages of data like that. 2020.02.22 aaaaa bbbbb cccc dddd … --- ## [Kibana 7.6.0: UI Registry - Cannot Resolve VisTypes - Visualization Factory](https://discuss.elastic.co/t/kibana-7-6-0-ui-registry-cannot-resolve-vistypes-visualization-factory/222691)
**Author:** [@abidub](https://discuss.elastic.co/u/abidub)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 4:56pm UTC](https://discuss.elastic.co/t/kibana-7-6-0-ui-registry-cannot-resolve-vistypes-visualization-factory/222691 "2020-03-13T16:56:05Z")
I am trying to update a plugin (kbn sankey vis) so that it works with Kibana 7.6 https://github.com/uniberg/kbn\_sankey\_vis in order to try to create a sankey diagram in vega. I am having the same issue as in Can't reso… --- ## [Logstash date field problem](https://discuss.elastic.co/t/logstash-date-field-problem/223388)
**Author:** [@tomba2k](https://discuss.elastic.co/u/tomba2k)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 4:53pm UTC](https://discuss.elastic.co/t/logstash-date-field-problem/223388 "2020-03-13T16:53:14Z")
I cannot get logstash to format custom field to be suitable for sort in kibana. pipeline filter config is: filter { if (\[fields\]\[log\_type\] == "zira\_prod\_log") { grok { match =\> { "message" =\> "\[%{TIMESTAMP\_ISO8601:… --- ## [Drop messages to log](https://discuss.elastic.co/t/drop-messages-to-log/223378)
**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 4:40pm UTC](https://discuss.elastic.co/t/drop-messages-to-log/223378 "2020-03-13T16:40:10Z")
Hi! I have a lot of documents saved in each minute because of LB of Google, the messages are like that: 10.xx.xx.xx - - \[12/Mar/2020:16:08:20 +0000\] "GET / HTTP/1.1" 200 7487 "-" "GoogleHC/1.0" "-" After investigate t… --- ## [How to configure index to ignore unmapped fields](https://discuss.elastic.co/t/how-to-configure-index-to-ignore-unmapped-fields/223352)
**Author:** [@hemamalini](https://discuss.elastic.co/u/hemamalini)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 4:38pm UTC](https://discuss.elastic.co/t/how-to-configure-index-to-ignore-unmapped-fields/223352 "2020-03-13T16:38:51Z")
Hi All, I am using elastic search 5.6 for Apache Metron (They support 5.6). Is there any way to configure index to ignore unmapped fields for ES template and index --- ## [Aggregate through pages](https://discuss.elastic.co/t/aggregate-through-pages/223491)
**Author:** [@babayotakun](https://discuss.elastic.co/u/babayotakun)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 4:30pm UTC](https://discuss.elastic.co/t/aggregate-through-pages/223491 "2020-03-13T16:30:32Z")
We have a query which returns a large number of results, sorted alphabetically and we're using a pagination to iterate through these pages. I wonder: can we use aggregations to get the page, containing the element with … --- ## [Breaking change v6 to v7 to search date\_time\_parse\_exception 'hh:mm:ss a'](https://discuss.elastic.co/t/breaking-change-v6-to-v7-to-search-date-time-parse-exception-hhss-a/217444)
**Author:** [@akatz](https://discuss.elastic.co/u/akatz)\ **Replies:** 6\ **Last updated:** [March 13, 2020, 4:24pm UTC](https://discuss.elastic.co/t/breaking-change-v6-to-v7-to-search-date-time-parse-exception-hhss-a/217444 "2020-03-13T16:24:22Z")
I have tested that the following query works in versions of ES 6 (6.2.3, 6.8.2), but fails in versions of 7 (7.1.1, 7.3.1). The query is: { "query": { "bool": { "filter": \[ { "range": { … --- ## [Problem Using 'must\_not' to Exclude Matches](https://discuss.elastic.co/t/problem-using-must-not-to-exclude-matches/223531)
**Author:** [@stephencr](https://discuss.elastic.co/u/stephencr)\ **Replies:** 4\ **Last updated:** [March 13, 2020, 3:52pm UTC](https://discuss.elastic.co/t/problem-using-must-not-to-exclude-matches/223531 "2020-03-13T15:52:25Z")
I'm trying to add a feature to my search where I can exclude users that contain certain hashtags from the result . My code for including users that contain all of the given hashtags works, and is the same as the code be… --- ## [How can I recover passwords after running "elasticsearch-setup-passwords" in a Windows environment?](https://discuss.elastic.co/t/how-can-i-recover-passwords-after-running-elasticsearch-setup-passwords-in-a-windows-environment/223539)
**Author:** [@RJ45](https://discuss.elastic.co/u/RJ45)\ **Replies:** 0\ **Last updated:** [March 13, 2020, 3:41pm UTC](https://discuss.elastic.co/t/how-can-i-recover-passwords-after-running-elasticsearch-setup-passwords-in-a-windows-environment/223539 "2020-03-13T15:41:34Z")
How can I recover passwords after running "elasticsearch-setup-passwords" in a Windows environment? --- ## [Standard tokenizer punctuation symbols removed](https://discuss.elastic.co/t/standard-tokenizer-punctuation-symbols-removed/223426)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 3:38pm UTC](https://discuss.elastic.co/t/standard-tokenizer-punctuation-symbols-removed/223426 "2020-03-13T15:38:30Z")
The ES documentation here \[0\] states this about the standard tokenizer: The standard tokenizer divides text into terms on word boundaries, as defined by the Unicode Text Segmentation algorithm. It removes most punctu… --- ## [Which index is receiving data and where is that configured](https://discuss.elastic.co/t/which-index-is-receiving-data-and-where-is-that-configured/223483)
**Author:** [@Axl](https://discuss.elastic.co/u/Axl)\ **Replies:** 5\ **Last updated:** [March 13, 2020, 3:33pm UTC](https://discuss.elastic.co/t/which-index-is-receiving-data-and-where-is-that-configured/223483 "2020-03-13T15:33:54Z")
I am a newbie to ELK, and this is very probably a n00b question. I have set up ELK, and those are currently the indices that I have on my host: curl 'http://localhost:9200/\_cat/indices?v' health status index … --- ## [Kibana TSVB performance](https://discuss.elastic.co/t/kibana-tsvb-performance/222774)
**Author:** [@akrzos](https://discuss.elastic.co/u/akrzos)\ **Replies:** 8\ **Last updated:** [March 13, 2020, 3:24pm UTC](https://discuss.elastic.co/t/kibana-tsvb-performance/222774 "2020-03-13T15:24:21Z")
I am creating some visualizations with Kibana using the TSVB visualizations and find that the load time for the create page is very slow. During this time period it seems that the kibana instance handling the request i… --- ## [Horizontal barchart size](https://discuss.elastic.co/t/horizontal-barchart-size/223479)
**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\ **Replies:** 4\ **Last updated:** [March 13, 2020, 3:16pm UTC](https://discuss.elastic.co/t/horizontal-barchart-size/223479 "2020-03-13T15:16:22Z")
When choosing a size for a horizontal stacked bar chart I ran into a problem. It seems it is showing my chosen size \* the buckets I have chosen. Is there some extra field I need to check to be sure to always see the sam… --- ## [Help with aggregation performance improvement for nested aggregations](https://discuss.elastic.co/t/help-with-aggregation-performance-improvement-for-nested-aggregations/223524)
**Author:** [@frankkoornstra](https://discuss.elastic.co/u/frankkoornstra)\ **Replies:** 0\ **Last updated:** [March 13, 2020, 2:28pm UTC](https://discuss.elastic.co/t/help-with-aggregation-performance-improvement-for-nested-aggregations/223524 "2020-03-13T14:28:19Z")
I'm trying to find out what the underlying problem for some of my searches' and aggregations' performance is but I can't seem to find any documentation on what the terms in the profiling breakdown mean and what I can do … --- ## [Font size on a Kibana Data Table](https://discuss.elastic.co/t/font-size-on-a-kibana-data-table/223516)
**Author:** [@LJB999](https://discuss.elastic.co/u/LJB999)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 2:55pm UTC](https://discuss.elastic.co/t/font-size-on-a-kibana-data-table/223516 "2020-03-13T14:55:57Z")
Hi is there any way to edit the font size on a Kibana Data Table? I can resize the actual data table when I edit the dashboard to make the whole table bigger or smaller but the text of the items in the table don't resiz… --- ## [Indexed document has an unknown field](https://discuss.elastic.co/t/indexed-document-has-an-unknown-field/223356)
**Author:** [@ethranes](https://discuss.elastic.co/u/ethranes)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 2:37pm UTC](https://discuss.elastic.co/t/indexed-document-has-an-unknown-field/223356 "2020-03-13T14:37:22Z")
Hi, I've made an index using dynamic mapping. The document that I've used when creating it looks like this; { "graph":{ "id":601, "name":"Graph", "labels":\[ { "user":"\*B", "id":16, … --- ## [APM No services found](https://discuss.elastic.co/t/apm-no-services-found/161100)
**Author:** [@MishMick](https://discuss.elastic.co/u/MishMick)\ **Replies:** 6\ **Last updated:** [March 13, 2020, 2:27pm UTC](https://discuss.elastic.co/t/apm-no-services-found/161100 "2020-03-13T14:27:48Z")
I have correctly set up the APM agent and APM server is up and running. However, I can only see the APM Onboarding logs and no APM transaction logs are visible on the Discover tab. My APM server and APM-agent are deploye… --- ## [Filters Not Working At All](https://discuss.elastic.co/t/filters-not-working-at-all/222150)
**Author:** [@ck\_montco](https://discuss.elastic.co/u/ck_montco)\ **Replies:** 10\ **Last updated:** [March 13, 2020, 1:55pm UTC](https://discuss.elastic.co/t/filters-not-working-at-all/222150 "2020-03-13T13:55:16Z")
I have the following filter set up to drop certain logs and add tags to syslog events from my Sophos XG550 firewalls: input { tcp { port =\> 6000 type =\> syslog } udp { port =\> 6000 type =\> syslog … --- ## [Host not showing up despite events being present](https://discuss.elastic.co/t/host-not-showing-up-despite-events-being-present/223105)
**Author:** [@norup](https://discuss.elastic.co/u/norup)\ **Replies:** 8\ **Last updated:** [March 13, 2020, 1:49pm UTC](https://discuss.elastic.co/t/host-not-showing-up-despite-events-being-present/223105 "2020-03-13T13:49:05Z")
I am running the elk stack on 1 ubuntu device along with filebeat, and metricbeat and this device is showing up fine with syslog data and as a host. Im running winlogbeat on another device, and shipping the logs through … --- ## [Need HELP with mapping from log output](https://discuss.elastic.co/t/need-help-with-mapping-from-log-output/223420)
**Author:** [@carmine.fabrizio](https://discuss.elastic.co/u/carmine.fabrizio)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 1:47pm UTC](https://discuss.elastic.co/t/need-help-with-mapping-from-log-output/223420 "2020-03-13T13:47:04Z")
Hi, I am trying to understand how to define some static mapping, this is the log message that I have Mar 12 17:27:16 dev-jenkins filebeat: 2020-03-12T17:27:16.768-0400#011INFO#011\[monitoring\]#011log/log.go:145#011Non-z… --- ## [Need HELP with mapping referring to log output](https://discuss.elastic.co/t/need-help-with-mapping-referring-to-log-output/223520)
**Author:** [@carmine.fabrizio](https://discuss.elastic.co/u/carmine.fabrizio)\ **Replies:** 0\ **Last updated:** [March 13, 2020, 1:46pm UTC](https://discuss.elastic.co/t/need-help-with-mapping-referring-to-log-output/223520 "2020-03-13T13:46:43Z")
Hi, I am trying to understand how to define some static mapping, this is the log message that I have Mar 12 17:27:16 dev-jenkins filebeat: 2020-03-12T17:27:16.768-0400#011INFO#011\[monitoring\]#011log/log.go:145#011Non-z… --- ## [Visual Builder & Controls - Link to Saved Search?](https://discuss.elastic.co/t/visual-builder-controls-link-to-saved-search/223511)
**Author:** [@gardanni](https://discuss.elastic.co/u/gardanni)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 1:31pm UTC](https://discuss.elastic.co/t/visual-builder-controls-link-to-saved-search/223511 "2020-03-13T13:31:44Z")
I defined a bunch of SAVED SEARCHES that are very useful for various data table and chart visualizations. However, I find that I can't assign a saved search to VISUAL BUILDER or CONTROLS visualizations (and possibly othe… --- ## [Failed to excute logstash](https://discuss.elastic.co/t/failed-to-excute-logstash/223341)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 6\ **Last updated:** [March 13, 2020, 1:27pm UTC](https://discuss.elastic.co/t/failed-to-excute-logstash/223341 "2020-03-13T13:27:56Z")
Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::PluginLoadingError", :message=\>"Couldn't find any input plugin named 'filebeat'. Are you sure this is corr… --- ## [Index name is not read from my logstash configuration \[SOLVED\]](https://discuss.elastic.co/t/index-name-is-not-read-from-my-logstash-configuration-solved/223512)
**Author:** [@Axl](https://discuss.elastic.co/u/Axl)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 1:25pm UTC](https://discuss.elastic.co/t/index-name-is-not-read-from-my-logstash-configuration-solved/223512 "2020-03-13T13:25:02Z")
I am a newbie to ELK, and this is very probably a n00b question. I have set up ELK, and those are currently the indices that I have on my host: curl 'http://localhost:9200/\_cat/indices?v' health status index … --- ## [Kibana Filters/Controls can you change size?](https://discuss.elastic.co/t/kibana-filters-controls-can-you-change-size/223510)
**Author:** [@LJB999](https://discuss.elastic.co/u/LJB999)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 1:24pm UTC](https://discuss.elastic.co/t/kibana-filters-controls-can-you-change-size/223510 "2020-03-13T13:24:20Z")
Hi is there any way to edit the size of the dropdown box or the clear form/apply changes buttons on a Kibana Control (Filters) ? The space they take up is massive compared to the text of the item being filtered and it… --- ## [Does elasticsearch learn new synonyms and misspellings?](https://discuss.elastic.co/t/does-elasticsearch-learn-new-synonyms-and-misspellings/223509)
**Author:** [@alberto56](https://discuss.elastic.co/u/alberto56)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 1:20pm UTC](https://discuss.elastic.co/t/does-elasticsearch-learn-new-synonyms-and-misspellings/223509 "2020-03-13T13:20:52Z")
Hi, I am new to Elasticsearch and I'm looking for a product which will do the following: Let's say people search for "physisian" and end up with no results, then try again with "physician" and click on a result, a would… --- ## [Installation of Watcher on Windows fails](https://discuss.elastic.co/t/installation-of-watcher-on-windows-fails/223241)
**Author:** [@aviman](https://discuss.elastic.co/u/aviman)\ **Replies:** 12\ **Last updated:** [March 13, 2020, 1:12pm UTC](https://discuss.elastic.co/t/installation-of-watcher-on-windows-fails/223241 "2020-03-13T13:12:24Z")
Hi, I am trying to install Watcher on Windows. But the commands fails. Images below Please help debugging the issue. Thanks [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1572) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1574)