# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1575 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1576 --- ## [フィールドにドット「.」が含まれる場合のWatcherでの値の取得](https://discuss.elastic.co/t/watcher/223436)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 5:03am UTC](https://discuss.elastic.co/t/watcher/223436 "2020-03-13T05:03:04Z")
Watcherにて、インプット情報の項目に設定された値を、メール通知の本文に使用しようとしております。 ・watcherのInput情報(抜粋) "\_source": { "log": { "file.path": "https://xxxxx.txt", "offset": 24 } } ・WatcherのOutputのメール本文設定部分 "body": {"text": "対象ファイル：{{\_source.log.… --- ## [Elasticsearch cluster design for heavy ingestion](https://discuss.elastic.co/t/elasticsearch-cluster-design-for-heavy-ingestion/223446)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 0\ **Last updated:** [March 13, 2020, 4:33am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-design-for-heavy-ingestion/223446 "2020-03-13T04:33:42Z")
We have setup a 13 node elasticsearch cluster (3 master, 10 data nodes) such that 7 of the data node have an attribute A=1 and 3 nodes have an attribute A=2 This is because we want to ingest a lot of data into the clust… --- ## [Parsing Problem \\""](https://discuss.elastic.co/t/parsing-problem/223445)
**Author:** [@pariksh](https://discuss.elastic.co/u/pariksh)\ **Replies:** 0\ **Last updated:** [March 13, 2020, 4:33am UTC](https://discuss.elastic.co/t/parsing-problem/223445 "2020-03-13T04:33:02Z")
The output of key\_pairs look like "key\_pairs" =\> "\\"lastName\\":\\"\\",\\"address\\":null,\\"relativeIds\\":\\"135,\\",\\"gender\\":\\"Male\\",\\"city\\":433,\\"userId\\":4265,\\"firstName\\":\\"Shiv\\",\\"mrTrendingTags\\":\\"#निरोगी जिवन\\\\t… --- ## [Pipelines + Redis = Persistent queue not growing despite Redis buffer full](https://discuss.elastic.co/t/pipelines-redis-persistent-queue-not-growing-despite-redis-buffer-full/223444)
**Author:** [@TomHome](https://discuss.elastic.co/u/TomHome)\ **Replies:** 0\ **Last updated:** [March 13, 2020, 4:20am UTC](https://discuss.elastic.co/t/pipelines-redis-persistent-queue-not-growing-despite-redis-buffer-full/223444 "2020-03-13T04:20:03Z")
Hi, Our workflow is filebeat --\> redis --\> logstash --\> ES Our problem : when there is a big influx of logs from the filebeats it fills up redis but logstash doesn't seem to work harder nor use its persistent queues. O… --- ## [Cyclic drill down groups](https://discuss.elastic.co/t/cyclic-drill-down-groups/223301)
**Author:** [@balaji\_18](https://discuss.elastic.co/u/balaji_18)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 5:06pm UTC](https://discuss.elastic.co/t/cyclic-drill-down-groups/223301 "2020-03-12T17:06:08Z")
Is there any way to drill down the field in data.. For eg: By using only one data table, i need to see the sales information for country wise, state wise, city wise , region wise.. Please help me out.. Thank you! --- ## [Applying filters in Kibana](https://discuss.elastic.co/t/applying-filters-in-kibana/222586)
**Author:** [@cravinder489](https://discuss.elastic.co/u/cravinder489)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 4:06am UTC](https://discuss.elastic.co/t/applying-filters-in-kibana/222586 "2020-03-13T04:06:06Z")
I have an index :idxquesanswer, in which i have a body field: "body" : { "type" : "text", "analyzer" : "synonym\_analyzer" } synonym\_analyzer is: "filter" : { "synonym\_filter" : { "type" … --- ## [Applying filters in ElasticSearch](https://discuss.elastic.co/t/applying-filters-in-elasticsearch/223442)
**Author:** [@cravinder489](https://discuss.elastic.co/u/cravinder489)\ **Replies:** 0\ **Last updated:** [March 13, 2020, 4:04am UTC](https://discuss.elastic.co/t/applying-filters-in-elasticsearch/223442 "2020-03-13T04:04:06Z")
I have an index :idxquesanswer, in which i have a body field: "body" : { "type" : "text", "analyzer" : "synonym\_analyzer" } synonym\_analyzer is: "filter" : { "synonym\_filter" : { "type" … --- ## [Logstash elasticsearch communication fails in ssl](https://discuss.elastic.co/t/logstash-elasticsearch-communication-fails-in-ssl/223438)
**Author:** [@ajit519](https://discuss.elastic.co/u/ajit519)\ **Replies:** 0\ **Last updated:** [March 13, 2020, 3:15am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-communication-fails-in-ssl/223438 "2020-03-13T03:15:08Z")
Hi all, I am running Elasticsearch(6.8.0) and Logstash(6.8.0) in SSL. I followed the steps as mentioned in docs. instead of generating certificate from elasticsearch utility i generated from openssl, this self signed c… --- ## [Can branch 6 and 7 work somehow?](https://discuss.elastic.co/t/can-branch-6-and-7-work-somehow/223366)
**Author:** [@margus](https://discuss.elastic.co/u/margus)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 2:31am UTC](https://discuss.elastic.co/t/can-branch-6-and-7-work-somehow/223366 "2020-03-13T02:31:18Z")
Hello, I have tried to search for this but em unable to find a correct answer, or not sure how. But can for example ElasticSearch 7 work with Logstash 6 or Fillebeat 6 --- ## [Ingest node 複数項目の突合せについて](https://discuss.elastic.co/t/ingest-node/223435)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 0\ **Last updated:** [March 13, 2020, 2:30am UTC](https://discuss.elastic.co/t/ingest-node/223435 "2020-03-13T02:30:02Z")
お世話になります。 ▼実現したいこと 取り込むログと予め用意したリスト(下記参照)とを突き合わせて、突合せ結果をindexに登録 例) ID,IP 100,10.169.1.1 ,10.169.1.2 ▼取り込むログとの突合せ条件 1行目…IDが"100"かつIPが"10.169.1.1"であれば真 2行目…ソースIPが"10.169.1.2"であれば真 2行目の条件(1項目の突合せ)はenrich processo… --- ## [How to sign kibana requests to elasticsearch with AWS Credentials](https://discuss.elastic.co/t/how-to-sign-kibana-requests-to-elasticsearch-with-aws-credentials/220108)
**Author:** [@wiouser](https://discuss.elastic.co/u/wiouser)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 2:08am UTC](https://discuss.elastic.co/t/how-to-sign-kibana-requests-to-elasticsearch-with-aws-credentials/220108 "2020-03-13T02:08:51Z")
Hi, I am trying to install an external kibana to talk to AWS Elasticsearch. Is there a way to sign the HTTP requests using the aws sdk for node. I looked at an example here. https://docs.aws.amazon.com/elasticsearch-… --- ## [How to set initial login using OpenID Connect](https://discuss.elastic.co/t/how-to-set-initial-login-using-openid-connect/220291)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 1:58am UTC](https://discuss.elastic.co/t/how-to-set-initial-login-using-openid-connect/220291 "2020-03-13T01:58:23Z")
i want to set SSO using OpenID Connect(google). So I added the setting to elasticsearch and added the relevant setting to Kibana. my kibana.yml xpack.security.authc.providers: \[oidc, basic\] xpack.security.authc.oidc.… --- ## [Default UTC timzone of @timestamp writing new data to older monthly index](https://discuss.elastic.co/t/default-utc-timzone-of-timestamp-writing-new-data-to-older-monthly-index/221611)
**Author:** [@fr3eze](https://discuss.elastic.co/u/fr3eze)\ **Replies:** 7\ **Last updated:** [March 13, 2020, 1:38am UTC](https://discuss.elastic.co/t/default-utc-timzone-of-timestamp-writing-new-data-to-older-monthly-index/221611 "2020-03-13T01:38:59Z")
I have a logstash configuration parsing a set of files (which are being updated daily) and overwriting same "iccid" on the monthly index. The expected behaviour from Kibana perspective, is to see a latest output every ti… --- ## [Help required with logstash filter](https://discuss.elastic.co/t/help-required-with-logstash-filter/223395)
**Author:** [@argupta23](https://discuss.elastic.co/u/argupta23)\ **Replies:** 0\ **Last updated:** [March 12, 2020, 6:46pm UTC](https://discuss.elastic.co/t/help-required-with-logstash-filter/223395 "2020-03-12T18:46:04Z")
Deleted by --- ## [Kibana filter with math functions](https://discuss.elastic.co/t/kibana-filter-with-math-functions/223410)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 12:43am UTC](https://discuss.elastic.co/t/kibana-filter-with-math-functions/223410 "2020-03-13T00:43:53Z")
HI, Is there any way to write a filter in Lucene with math functions? in my documments i have filed max\_value and actual\_value, and i would like to filter all documents where max\_value\*0.95\ **Author:** [@deepak643](https://discuss.elastic.co/u/deepak643)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 11:34pm UTC](https://discuss.elastic.co/t/not-working-must-query-between-array-of-records-in-nested-type/223222 "2020-03-12T23:34:05Z") I have the below record: { "objectId": "ea5f9b14e0ca03990591de06a433a220", "annotations": \[ { "itemDetails": { "value": "US1", "confide… --- ## [When using 'nori' and synonym\_filter, token postagging is null](https://discuss.elastic.co/t/when-using-nori-and-synonym-filter-token-postagging-is-null/222829)
**Author:** [@innze](https://discuss.elastic.co/u/innze)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 10:30pm UTC](https://discuss.elastic.co/t/when-using-nori-and-synonym-filter-token-postagging-is-null/222829 "2020-03-12T22:30:01Z")
In ES 7.6.0 I setting index below PUT test\_index { "settings" : { "index" : { "analysis" : { "filter" : { "ko\_synonyms" : { "type" : "synonym", "synon… --- ## [Client unable to trust server certificate](https://discuss.elastic.co/t/client-unable-to-trust-server-certificate/223404)
**Author:** [@brb44](https://discuss.elastic.co/u/brb44)\ **Replies:** 4\ **Last updated:** [March 12, 2020, 10:05pm UTC](https://discuss.elastic.co/t/client-unable-to-trust-server-certificate/223404 "2020-03-12T22:05:01Z")
Hi, I'm getting below error when I tried to enabling transport ssl. Caused by: sun.security.validator.ValidatorException: Extended key usage does not permit use for TLS client authentication at sun.security.val… --- ## [Elasticsearch thread pool rejected](https://discuss.elastic.co/t/elasticsearch-thread-pool-rejected/223142)
**Author:** [@Guylot](https://discuss.elastic.co/u/Guylot)\ **Replies:** 5\ **Last updated:** [March 12, 2020, 9:32pm UTC](https://discuss.elastic.co/t/elasticsearch-thread-pool-rejected/223142 "2020-03-12T21:32:38Z")
Hi, We are using Elasticsearch 5.6 (Next week we will upgrade to 7.6) for our application, we are using elasticsearch mostly for bulk indexing and much fewer for querying the data. Our cluster contains 8 nodes. 1 Data … --- ## [Не работает api logstash](https://discuss.elastic.co/t/api-logstash/223405)
**Author:** [@Ilya\_Moskalev](https://discuss.elastic.co/u/Ilya_Moskalev)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 8:18pm UTC](https://discuss.elastic.co/t/api-logstash/223405 "2020-03-12T20:18:58Z")
Всем привет! подскажите плиз запустил logstash-oss по порту 9600 делаю запрос curl -XGET 'localhost:9600/?pretty' и получаю ответ, думал, что проблема в версии логстеша опенсорсной и не опенсорсной но оказалось, что н… --- ## [KIBANA 7.6.0 - FATAL TypeError: Cannot read property 'length' of undefined](https://discuss.elastic.co/t/kibana-7-6-0-fatal-typeerror-cannot-read-property-length-of-undefined/220910)
**Author:** [@jessicalh](https://discuss.elastic.co/u/jessicalh)\ **Replies:** 5\ **Last updated:** [March 12, 2020, 7:52pm UTC](https://discuss.elastic.co/t/kibana-7-6-0-fatal-typeerror-cannot-read-property-length-of-undefined/220910 "2020-03-12T19:52:23Z")
Kibana version: 7.6.0 Elasticsearch version: 7.6.0 Server OS version: Centos 7 Original install method (e.g. download page, yum, from source, etc.): YUM Describe the bug: After the elk update from version 7.5 to… --- ## [Heartbeat monitors](https://discuss.elastic.co/t/heartbeat-monitors/223199)
**Author:** [@northmilo](https://discuss.elastic.co/u/northmilo)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 7:32pm UTC](https://discuss.elastic.co/t/heartbeat-monitors/223199 "2020-03-12T19:32:40Z")
Hi, I am planning to monitor local network gateway. Can you advise how to configure monitor for this task? Thanks! --- ## [Pipeline terminated {"pipeline.id"=\>".monitoring-logstash"} after processing existing docs in the index](https://discuss.elastic.co/t/pipeline-terminated-pipeline-id-monitoring-logstash-after-processing-existing-docs-in-the-index/223401)
**Author:** [@Ilya\_Libin](https://discuss.elastic.co/u/Ilya_Libin)\ **Replies:** 0\ **Last updated:** [March 12, 2020, 7:25pm UTC](https://discuss.elastic.co/t/pipeline-terminated-pipeline-id-monitoring-logstash-after-processing-existing-docs-in-the-index/223401 "2020-03-12T19:25:44Z")
Hi! I'm running Elasticsearch and Logstash locally, trying to set up a pipeline that will process all ongoing events from Elasticsearch and write it to stdout (for POC). However after the dockerized logstash is up it tak… --- ## [Aggregation match forward slash and dot in query string](https://discuss.elastic.co/t/aggregation-match-forward-slash-and-dot-in-query-string/223397)
**Author:** [@kkworker](https://discuss.elastic.co/u/kkworker)\ **Replies:** 0\ **Last updated:** [March 12, 2020, 6:59pm UTC](https://discuss.elastic.co/t/aggregation-match-forward-slash-and-dot-in-query-string/223397 "2020-03-12T18:59:40Z")
Hello everyone, I just registered on this forum and ask my first question. I use aggregation to search a field "ID". The values of such field in the documents are those like "98.4325/D3452SD2", where "." and "/" are in… --- ## [Cannot install ECE onto Ubuntu 16.04](https://discuss.elastic.co/t/cannot-install-ece-onto-ubuntu-16-04/222961)
**Author:** [@akimbah](https://discuss.elastic.co/u/akimbah)\ **Replies:** 8\ **Last updated:** [March 12, 2020, 6:20pm UTC](https://discuss.elastic.co/t/cannot-install-ece-onto-ubuntu-16-04/222961 "2020-03-12T18:20:09Z")
I am attempting to install ECE 2.4.3 onto an EC2 instance of Ubuntu 16.04. Keep getting stuck in this portion. Attached a screenshot of the --debug information above. Please advise --- ## [Kibana dashboards export/import not working](https://discuss.elastic.co/t/kibana-dashboards-export-import-not-working/221118)
**Author:** [@kriket](https://discuss.elastic.co/u/kriket)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 6:09pm UTC](https://discuss.elastic.co/t/kibana-dashboards-export-import-not-working/221118 "2020-03-12T18:09:50Z")
We have 2 different Elasticsearch clusters (A-cluster & B-cluster) - The incoming data stream is pretty similar in both clusters. But the index naming differs in both clusters. I'm having trouble export the dashboards f… --- ## [Uptime monitor Up and Down overview dot indicator colors](https://discuss.elastic.co/t/uptime-monitor-up-and-down-overview-dot-indicator-colors/223203)
**Author:** [@northmilo](https://discuss.elastic.co/u/northmilo)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 5:58pm UTC](https://discuss.elastic.co/t/uptime-monitor-up-and-down-overview-dot-indicator-colors/223203 "2020-03-12T17:58:44Z")
Hi, Kibana 7.6.1 is showing Uptime monitor Up in grey and Down in red. Is this as designed? Thanks! --- ## [Removing duplicates when using search\_after](https://discuss.elastic.co/t/removing-duplicates-when-using-search-after/223390)
**Author:** [@ddrobert](https://discuss.elastic.co/u/ddrobert)\ **Replies:** 0\ **Last updated:** [March 12, 2020, 5:54pm UTC](https://discuss.elastic.co/t/removing-duplicates-when-using-search-after/223390 "2020-03-12T17:54:45Z")
:wave: Hi! I'm using the search API to query records across multiple indexes, so I know there will be duplicate records. I'd like to use the search\_after parameter for pagination since using from has caused problems wit… --- ## [Metricbeat on NGINX reads only access.log and error.log](https://discuss.elastic.co/t/metricbeat-on-nginx-reads-only-access-log-and-error-log/223300)
**Author:** [@carmine.fabrizio](https://discuss.elastic.co/u/carmine.fabrizio)\ **Replies:** 6\ **Last updated:** [March 12, 2020, 5:42pm UTC](https://discuss.elastic.co/t/metricbeat-on-nginx-reads-only-access-log-and-error-log/223300 "2020-03-12T17:42:56Z")
Hi all, I'm having a strange behavior, my metricbeat is reading only /var/log/nginx/access.log /var/log/nginx/error.log I have different .log file per each location on my NGINX. this is what I configured in my /etc… --- ## [Creating kibana users](https://discuss.elastic.co/t/creating-kibana-users/221414)
**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 5:37pm UTC](https://discuss.elastic.co/t/creating-kibana-users/221414 "2020-03-12T17:37:57Z")
Hello All, I'm using AWS elasticsearch service which provides kibana version 7.1.1 I have couple of doubts, right now I've 2 Accounts(Say A & B). Account A has 4 dashboards and Account B has 1 dashboard. I want to c… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1574) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1576)