# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1583 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1584 --- ## [Spark on k8s can't authenticate to ECK](https://discuss.elastic.co/t/spark-on-k8s-cant-authenticate-to-eck/222764)
**Author:** [@YaSe](https://discuss.elastic.co/u/YaSe)\ **Replies:** 3\ **Last updated:** [March 10, 2020, 1:18pm UTC](https://discuss.elastic.co/t/spark-on-k8s-cant-authenticate-to-eck/222764 "2020-03-10T13:18:06Z")
Hello everyone, I am very excited by using Elasticsearch on Kubernetes with Spark but I cant' authenticate my job to it. I successfully installed ECK (without TLS =\> for test) on my GKE cluster with the following templ… --- ## [Logging for Logstash with pipelines.yml](https://discuss.elastic.co/t/logging-for-logstash-with-pipelines-yml/222937)
**Author:** [@furhans](https://discuss.elastic.co/u/furhans)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 12:58pm UTC](https://discuss.elastic.co/t/logging-for-logstash-with-pipelines-yml/222937 "2020-03-10T12:58:37Z")
Hello, I have been trying to run Logstash (v6.5.4) with multiple pipelines by following guide here: https://www.elastic.co/guide/en/logstash/current/multiple-pipelines.html My logstash pipeline.yml looks like this: - … --- ## [Kibana creates invalid index(.kibana instead of .kibana\_1)](https://discuss.elastic.co/t/kibana-creates-invalid-index-kibana-instead-of-kibana-1/217964)
**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\ **Replies:** 5\ **Last updated:** [March 10, 2020, 12:34pm UTC](https://discuss.elastic.co/t/kibana-creates-invalid-index-kibana-instead-of-kibana-1/217964 "2020-03-10T12:34:59Z")
Hi, To validate some scenario, I had to delete .kibana\_1 index. Now I try to access kibana UI and a kibana index named .kibana gets created. After this I am not able to create any new index pattern or view any logs on k… --- ## [Logstash elasticsearch-filter disable ssl verification](https://discuss.elastic.co/t/logstash-elasticsearch-filter-disable-ssl-verification/222926)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 12:12pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-disable-ssl-verification/222926 "2020-03-10T12:12:11Z")
How to disable hostname verification in elasticsearch filter like below https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-ssl\_certificate\_verification --- ## [Whitelist URLs in Elasticsearch managed service from Elastic](https://discuss.elastic.co/t/whitelist-urls-in-elasticsearch-managed-service-from-elastic/222917)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 3\ **Last updated:** [March 10, 2020, 12:11pm UTC](https://discuss.elastic.co/t/whitelist-urls-in-elasticsearch-managed-service-from-elastic/222917 "2020-03-10T12:11:44Z")
I am unsure if this should question should go here, but I'm trying to find where I can whitelist URLs in my Elasticsearch managed service from Elastic? This is the following error: { "error": { "root\_cause": \[ { "t… --- ## [Sum of averages](https://discuss.elastic.co/t/sum-of-averages/222757)
**Author:** [@soprabs](https://discuss.elastic.co/u/soprabs)\ **Replies:** 1\ **Last updated:** [March 10, 2020, 11:49am UTC](https://discuss.elastic.co/t/sum-of-averages/222757 "2020-03-10T11:49:57Z")
Hi, i have the problem to sum the two different avarges of the same field in condition of two other (aggregateable) fields of the same log. Guess my log is parsed in something like this: \[timestamp\]\[event\]\[duration\] n… --- ## [\[SOLVED\] Failed to execute PipelineAction::Create](https://discuss.elastic.co/t/solved-failed-to-execute-pipelineaction-create/222782)
**Author:** [@alesabat](https://discuss.elastic.co/u/alesabat)\ **Replies:** 3\ **Last updated:** [March 10, 2020, 11:40am UTC](https://discuss.elastic.co/t/solved-failed-to-execute-pipelineaction-create/222782 "2020-03-10T11:40:54Z")
Hi everyone! I'm running ELK on docker. Everything works fine, but, since I added some grok patterns to my pipeline, logstash never start again. This is the error message: \[2020-03-09T18:10:36,634\]\[ERROR\]\[logstash.ag… --- ## [Journalctl logstash has issue "logstash.service: main process exited, code=exited, status=1/FAILURE"](https://discuss.elastic.co/t/journalctl-logstash-has-issue-logstash-service-main-process-exited-code-exited-status-1-failure/222891)
**Author:** [@gilang\_bilbisri](https://discuss.elastic.co/u/gilang_bilbisri)\ **Replies:** 2\ **Last updated:** [March 10, 2020, 11:30am UTC](https://discuss.elastic.co/t/journalctl-logstash-has-issue-logstash-service-main-process-exited-code-exited-status-1-failure/222891 "2020-03-10T11:30:10Z")
Halo i want to ask something about my logstash configuration. i've already installed logstash and giving some configure in /etc/logstash/logstash-sample.conf and for the configuration is input { beats { port =\> 5044… --- ## [Question about Spring Data Elasticsearch using Rest Client](https://discuss.elastic.co/t/question-about-spring-data-elasticsearch-using-rest-client/222886)
**Author:** [@aiden\_elastic](https://discuss.elastic.co/u/aiden_elastic)\ **Replies:** 2\ **Last updated:** [March 10, 2020, 10:01am UTC](https://discuss.elastic.co/t/question-about-spring-data-elasticsearch-using-rest-client/222886 "2020-03-10T10:01:57Z")
I am trying to connect spring data elastic search with elastic search using Rest Client. This is pom.xml \ \ **Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 3\ **Last updated:** [March 10, 2020, 10:21am UTC](https://discuss.elastic.co/t/when-i-am-searching-in-es-index-i-am-getting-2-or-3-multiple-records-i-want-those-results-as-a-single-record/221363 "2020-03-10T10:21:37Z") Hello, I am using jdbc input plugin to fetch data from database. I have created ES index using 6 different sql queries and in that 6 queries some columns are same. After that i have created one index pattern in endec… --- ## [Kibana timestamp showing UTC and not browser time in 7.6.0](https://discuss.elastic.co/t/kibana-timestamp-showing-utc-and-not-browser-time-in-7-6-0/222587)
**Author:** [@f.Cavenaghi](https://discuss.elastic.co/u/f.Cavenaghi)\ **Replies:** 5\ **Last updated:** [March 10, 2020, 10:17am UTC](https://discuss.elastic.co/t/kibana-timestamp-showing-utc-and-not-browser-time-in-7-6-0/222587 "2020-03-10T10:17:17Z")
Hello, i have an ELK setup where in the discover pane the timestamp is wrong. the timestamp is different from event time for some reason. the timezone setting is: and the logstash setup is (from logstash/conf.d/\*… --- ## [Remove timezone/timestamp from my data field?](https://discuss.elastic.co/t/remove-timezone-timestamp-from-my-data-field/222768)
**Author:** [@samargh](https://discuss.elastic.co/u/samargh)\ **Replies:** 6\ **Last updated:** [March 10, 2020, 10:17am UTC](https://discuss.elastic.co/t/remove-timezone-timestamp-from-my-data-field/222768 "2020-03-10T10:17:00Z")
how can i delete the timezone/timestamp from my data field ? i need it to get only : Disconnection Date Sep 16, 2020 not this !! Disconnection Date Sep 16, 2020 @ 23:00:00.000 Activation Date Aug 13, 2019 @ 23:00:00.… --- ## [Is this still valid syntax for grok filters?](https://discuss.elastic.co/t/is-this-still-valid-syntax-for-grok-filters/222908)
**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 10:15am UTC](https://discuss.elastic.co/t/is-this-still-valid-syntax-for-grok-filters/222908 "2020-03-10T10:15:27Z")
I want to make sure I identify the that the logs are coming from nginx before processing this grok filter, is this syntax still valid in version 7x? filter { if \[program\] == "nginx\_access" { grok { match… --- ## [Search slowlogs from all nodes](https://discuss.elastic.co/t/search-slowlogs-from-all-nodes/222905)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 10:07am UTC](https://discuss.elastic.co/t/search-slowlogs-from-all-nodes/222905 "2020-03-10T10:07:02Z")
Is there any way to retreive slowlog from all nodes (greping from one machine). I query for all indices (from my\_index\_2011 to my\_index\_2018) \[my\_index\_\*\], but on my machine I'm getting only logs for that machine/node\_i… --- ## [Logstash jdbc\_streaming to keep the casing of fields?](https://discuss.elastic.co/t/logstash-jdbc-streaming-to-keep-the-casing-of-fields/222901)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 9:53am UTC](https://discuss.elastic.co/t/logstash-jdbc-streaming-to-keep-the-casing-of-fields/222901 "2020-03-10T09:53:43Z")
I use jdbc\_streaming filter to lookup from sql but the columns returned were in small caps. I understand there was a setting in jdbc input lowercase\_column\_names =\> false but theres nothing like this in jdbc\_streaming fi… --- ## [If else ruby check for nil](https://discuss.elastic.co/t/if-else-ruby-check-for-nil/222681)
**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\ **Replies:** 2\ **Last updated:** [March 10, 2020, 9:51am UTC](https://discuss.elastic.co/t/if-else-ruby-check-for-nil/222681 "2020-03-10T09:51:51Z")
Hi I am using a ruby codeblock to add values from redis for specific cases - I am getting some null values and want to log those - but this check for null values and isn't working, I get a complication error - looking a… --- ## [Auditbeat: Can we access node/host process from the Kubernetes pod?](https://discuss.elastic.co/t/auditbeat-can-we-access-node-host-process-from-the-kubernetes-pod/222767)
**Author:** [@rajat\_badjatya](https://discuss.elastic.co/u/rajat_badjatya)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 4:43pm UTC](https://discuss.elastic.co/t/auditbeat-can-we-access-node-host-process-from-the-kubernetes-pod/222767 "2020-03-09T16:43:25Z")
Is there a way to access the underlying host/node's process from Kubernetes pod in the same way as we access the host/node's filesystem by using hostPath volume mount? PS: I am trying to monitor the node process with … --- ## [Elasticsearch DSL with (A or B) and C](https://discuss.elastic.co/t/elasticsearch-dsl-with-a-or-b-and-c/222890)
**Author:** [@Tennis](https://discuss.elastic.co/u/Tennis)\ **Replies:** 1\ **Last updated:** [March 10, 2020, 9:29am UTC](https://discuss.elastic.co/t/elasticsearch-dsl-with-a-or-b-and-c/222890 "2020-03-10T09:29:19Z")
I want to query the data with the condition: ("product":"book" OR customer":"A") AND "Tag":"T1" My DSL: body = { "query":{ "bool":{ "must":\[ {"bool":{ "should":\[ { "match"… --- ## [Dropdown filter didn't work](https://discuss.elastic.co/t/dropdown-filter-didnt-work/218115)
**Author:** [@McSaesch](https://discuss.elastic.co/u/McSaesch)\ **Replies:** 3\ **Last updated:** [March 10, 2020, 9:11am UTC](https://discuss.elastic.co/t/dropdown-filter-didnt-work/218115 "2020-03-10T09:11:48Z")
Hi, my dropdown filter essql query="SELECT fields.FileType as fileType FROM "test\_index-\*" where fields.FileType is not null group by fields.FileType" | dropdownControl valueColumn="fileType" filterColumn="fileType" f… --- ## [ILM with time based indices - eg test-logs-%{+YYYYMMdd}-000001](https://discuss.elastic.co/t/ilm-with-time-based-indices-eg-test-logs-yyyymmdd-000001/222256)
**Author:** [@radw](https://discuss.elastic.co/u/radw)\ **Replies:** 1\ **Last updated:** [March 10, 2020, 9:09am UTC](https://discuss.elastic.co/t/ilm-with-time-based-indices-eg-test-logs-yyyymmdd-000001/222256 "2020-03-10T09:09:00Z")
Hi all! I'm trying to implement ILM time-based indices in my elasticsearch cluster. Right now, I have custom indexes. My configuration is as follows: BEATS(metricbeat, filebeat) ---\> Logstash ---\> Elasticsearch. I ha… --- ## [Filedatavisualizer is only reachable when using a user assigned to the original super\_admin role (like elastic)](https://discuss.elastic.co/t/filedatavisualizer-is-only-reachable-when-using-a-user-assigned-to-the-original-super-admin-role-like-elastic/221270)
**Author:** [@thwiemann](https://discuss.elastic.co/u/thwiemann)\ **Replies:** 4\ **Last updated:** [March 10, 2020, 8:53am UTC](https://discuss.elastic.co/t/filedatavisualizer-is-only-reachable-when-using-a-user-assigned-to-the-original-super-admin-role-like-elastic/221270 "2020-03-10T08:53:14Z")
I have 7.6 version running with 4 instances (ELK + Heartbeat) with basic license and xpack enabled. The standard users have newly generated passwords. As an user which is assigned to the orginal super\_admin role I can u… --- ## [Elasticsearch + tableau](https://discuss.elastic.co/t/elasticsearch-tableau/222477)
**Author:** [@Oscar\_Benitez](https://discuss.elastic.co/u/Oscar_Benitez)\ **Replies:** 3\ **Last updated:** [March 10, 2020, 8:42am UTC](https://discuss.elastic.co/t/elasticsearch-tableau/222477 "2020-03-10T08:42:53Z")
buenas, mi consulta es si se puede conectar el motor de elasticsearch al cliente de tableau sin tener ninguna suscripcion ? gracias. --- ## [Converting whole CSV file in one field into multiple documents for each csv row (using headers as field names)](https://discuss.elastic.co/t/converting-whole-csv-file-in-one-field-into-multiple-documents-for-each-csv-row-using-headers-as-field-names/222789)
**Author:** [@tonyskulk](https://discuss.elastic.co/u/tonyskulk)\ **Replies:** 10\ **Last updated:** [March 10, 2020, 8:31am UTC](https://discuss.elastic.co/t/converting-whole-csv-file-in-one-field-into-multiple-documents-for-each-csv-row-using-headers-as-field-names/222789 "2020-03-10T08:31:42Z")
Hi, I have an index with a field that contains a whole CSV file (headers included). I want to convert each csv row into a separate document containing all fields of the corresponding csv row (if possible the field names… --- ## [Logstash jdbc plugin schedule](https://discuss.elastic.co/t/logstash-jdbc-plugin-schedule/222881)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 8:02am UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-schedule/222881 "2020-03-10T08:02:41Z")
Hey everyone, I was wondering if there is any possibility to query a database via logstash jdbc plugin in intervals that are lower than one second? Thanks for reply! --- ## [Visualizations became uneditable](https://discuss.elastic.co/t/visualizations-became-uneditable/222686)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 3\ **Last updated:** [March 10, 2020, 7:51am UTC](https://discuss.elastic.co/t/visualizations-became-uneditable/222686 "2020-03-10T07:51:46Z")
Hello there, I noticed than suddenly, my visualization became uneditable (nothing happen when I click on the edit logo). I also can't see them in the dashboard. Error message when loading the dashboard is : Could not… --- ## [Closed index red status and ES failed to turn off translog retention](https://discuss.elastic.co/t/closed-index-red-status-and-es-failed-to-turn-off-translog-retention/222877)
**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 7:32am UTC](https://discuss.elastic.co/t/closed-index-red-status-and-es-failed-to-turn-off-translog-retention/222877 "2020-03-10T07:32:43Z")
Hi, In Elasticsearch 7.5.1 there is a case: closed index is red and server log is: so Cluster status will be stuck in red status caused by theses unrecoverable closed red indices --- ## [Kibana 7.1.1 Table: Multiplication of two columns as value for a third column](https://discuss.elastic.co/t/kibana-7-1-1-table-multiplication-of-two-columns-as-value-for-a-third-column/222771)
**Author:** [@sjishan](https://discuss.elastic.co/u/sjishan)\ **Replies:** 2\ **Last updated:** [March 10, 2020, 7:23am UTC](https://discuss.elastic.co/t/kibana-7-1-1-table-multiplication-of-two-columns-as-value-for-a-third-column/222771 "2020-03-10T07:23:36Z")
This is how the current data looks like. Metric is average of value\_a and max of value\_b. Bucket is country. now I want to have a third column which is not in the original data. that is Value C which is the multiplicati… --- ## [Index rollover latency](https://discuss.elastic.co/t/index-rollover-latency/222866)
**Author:** [@Muhammad\_Ariful\_Isla](https://discuss.elastic.co/u/Muhammad_Ariful_Isla)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 6:24am UTC](https://discuss.elastic.co/t/index-rollover-latency/222866 "2020-03-10T06:24:41Z")
I have created an ILM policy as follows, { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { "max\_docs": 30 }, "set\_prior… --- ## [Fail Index if document does not match explicit mapping](https://discuss.elastic.co/t/fail-index-if-document-does-not-match-explicit-mapping/222832)
**Author:** [@m\_ebags](https://discuss.elastic.co/u/m_ebags)\ **Replies:** 1\ **Last updated:** [March 10, 2020, 6:19am UTC](https://discuss.elastic.co/t/fail-index-if-document-does-not-match-explicit-mapping/222832 "2020-03-10T06:19:57Z")
Is it possible to force a document to fail being indexed if it does not match an explicit mapping https://www.elastic.co/guide/en/elasticsearch/reference/master/mapping.html#\_explicit\_mappings --- ## [I have tried to ingested the new record ..but everytime the existing record is overriding with the new one.how to clear this?](https://discuss.elastic.co/t/i-have-tried-to-ingested-the-new-record-but-everytime-the-existing-record-is-overriding-with-the-new-one-how-to-clear-this/222863)
**Author:** [@chelseia](https://discuss.elastic.co/u/chelseia)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 6:16am UTC](https://discuss.elastic.co/t/i-have-tried-to-ingested-the-new-record-but-everytime-the-existing-record-is-overriding-with-the-new-one-how-to-clear-this/222863 "2020-03-10T06:16:43Z")
input{ jdbc{ clean\_run =\> true jdbc\_driver\_library =\> "C:/Program Files/SQL Developer 4/jdbc/lib/ojdbc8.jar" jdbc\_driver\_class =\> "Java::oracle.jdbc.driver.OracleDriver" jdbc\_connection\_string =\> "..................… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1582) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1584)