# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1592 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1593 --- ## [How to covert 04-Mar-2020 19:20:06 o'clock GMT using Date Filter](https://discuss.elastic.co/t/how-to-covert-04-mar-2020-1906-oclock-gmt-using-date-filter/222158)
**Author:** [@keshavl](https://discuss.elastic.co/u/keshavl)\ **Replies:** 2\ **Last updated:** [March 4, 2020, 10:12pm UTC](https://discuss.elastic.co/t/how-to-covert-04-mar-2020-1906-oclock-gmt-using-date-filter/222158 "2020-03-04T22:12:39Z")
HI, I have an Weblogic Server which populates logs and date within logs is in format as "04-Mar-2020 19:20:06 o'clock GMT". What format should I use to covert this String into @Timestamp using DATE filter of logstash… --- ## [Multi Cloud Environment](https://discuss.elastic.co/t/multi-cloud-environment/222143)
**Author:** [@Reginato](https://discuss.elastic.co/u/Reginato)\ **Replies:** 3\ **Last updated:** [March 4, 2020, 9:50pm UTC](https://discuss.elastic.co/t/multi-cloud-environment/222143 "2020-03-04T21:50:30Z")
I have a multi-cloud environment (DB is on Oracle Cloud, Application servers are on AWS and Active Directoy is on AZURE). The ELK Stack server is installed on the IBM Cloud. In this scenario is it possible for ELK Stack … --- ## [Logstash redis filter goes wrong](https://discuss.elastic.co/t/logstash-redis-filter-goes-wrong/222151)
**Author:** [@TheBigPack](https://discuss.elastic.co/u/TheBigPack)\ **Replies:** 1\ **Last updated:** [March 4, 2020, 9:22pm UTC](https://discuss.elastic.co/t/logstash-redis-filter-goes-wrong/222151 "2020-03-04T21:22:28Z")
Hello, everybody, i have the following error messages in the plain-logstash.log Ruby exception occurred: undefined method \`\[ \]' for #LogStash::Event:0x671fe060 The filter that causes this problem looks like this fil… --- ## [Logstash deadletter queue vs persistent queue](https://discuss.elastic.co/t/logstash-deadletter-queue-vs-persistent-queue/222161)
**Author:** [@raghuveera](https://discuss.elastic.co/u/raghuveera)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 9:09pm UTC](https://discuss.elastic.co/t/logstash-deadletter-queue-vs-persistent-queue/222161 "2020-03-04T21:09:50Z")
Hi, If we enable persistent queue in logstash. Does, it disable dead letter queue? I have logstash with dead letter queue enabled and receiving log files. Once, i enabled persistent queue the dead letter queue stopped … --- ## [CSV Reader using LogStash. Unable to Read CSV](https://discuss.elastic.co/t/csv-reader-using-logstash-unable-to-read-csv/221491)
**Author:** [@keshavl](https://discuss.elastic.co/u/keshavl)\ **Replies:** 4\ **Last updated:** [March 4, 2020, 8:38pm UTC](https://discuss.elastic.co/t/csv-reader-using-logstash-unable-to-read-csv/221491 "2020-03-04T20:38:39Z")
HI All, I am trying to read CSV files and below is my logstash configuration. I am new to it hence I have just kept it simple as below. Error I face after starting logstash is --- ## [AzureRepositoryPlugin - Not accepting secret key](https://discuss.elastic.co/t/azurerepositoryplugin-not-accepting-secret-key/222155)
**Author:** [@markh12](https://discuss.elastic.co/u/markh12)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 8:32pm UTC](https://discuss.elastic.co/t/azurerepositoryplugin-not-accepting-secret-key/222155 "2020-03-04T20:32:53Z")
I'm having an odd issue. I'm currently working to have our our elasticsearch index snapshot indices to Azure for backup purposes. I have this working in our development and pre-production environments but our producti… --- ## [Benchmarking on ElasticSearch's Basic Operation like inserts , deletes](https://discuss.elastic.co/t/benchmarking-on-elasticsearchs-basic-operation-like-inserts-deletes/222067)
**Author:** [@Vikram\_Pancholi](https://discuss.elastic.co/u/Vikram_Pancholi)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 11:58am UTC](https://discuss.elastic.co/t/benchmarking-on-elasticsearchs-basic-operation-like-inserts-deletes/222067 "2020-03-04T11:58:17Z")
Hi, I was looking for benchmarks done against ElasticSearch for base operations like Inserts , Deletes , Search plotted against parameters such as data size , document size , record counts with some variations like CPU ,… --- ## [Data lose while using scroll](https://discuss.elastic.co/t/data-lose-while-using-scroll/222147)
**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 7:27pm UTC](https://discuss.elastic.co/t/data-lose-while-using-scroll/222147 "2020-03-04T19:27:34Z")
Hi I see some data lose while using scroll. I am using the following inside python script. Without using scroll it showing the correct number of documents but with scroll I am getting less number of documents. Any ide… --- ## [When should we set pipeline.workers to 1?](https://discuss.elastic.co/t/when-should-we-set-pipeline-workers-to-1/222072)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 7\ **Last updated:** [March 4, 2020, 6:45pm UTC](https://discuss.elastic.co/t/when-should-we-set-pipeline-workers-to-1/222072 "2020-03-04T18:45:55Z")
Hi, I have read (but cant find where and what) that in some conditions pipeline.workers should be set to 1 or else the information is not processed in the right order. My configuration in conf.d is to have several file… --- ## [Kibana Auto Refresh](https://discuss.elastic.co/t/kibana-auto-refresh/220391)
**Author:** [@aman97](https://discuss.elastic.co/u/aman97)\ **Replies:** 8\ **Last updated:** [March 4, 2020, 6:25pm UTC](https://discuss.elastic.co/t/kibana-auto-refresh/220391 "2020-03-04T18:25:29Z")
Hi All, I am using Auto-refresh functionality in the kibana dashboard but it seems not working fine as the dashboard is not updating in the auto-refresh time interval. but when I did the same for discovering page and f… --- ## [JDBC input filter balancing](https://discuss.elastic.co/t/jdbc-input-filter-balancing/222105)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 2\ **Last updated:** [March 4, 2020, 6:24pm UTC](https://discuss.elastic.co/t/jdbc-input-filter-balancing/222105 "2020-03-04T18:24:49Z")
Hi, can I have 3 different LS instances (1 on node1, 1 on node2, 1 on node3) that should use the standand JDBC input filter. is there a way to balance the usage of them of each node? I mean, if node1 extract a subset of… --- ## [How to make command line -e working in linux, this is basic](https://discuss.elastic.co/t/how-to-make-command-line-e-working-in-linux-this-is-basic/222115)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 3\ **Last updated:** [March 4, 2020, 6:19pm UTC](https://discuss.elastic.co/t/how-to-make-command-line-e-working-in-linux-this-is-basic/222115 "2020-03-04T18:19:49Z")
Hi All I have a conf file, below is the example When i run this in linux machine with a .conf file file, it work perfectly with command line -f \` .logstash --debug -f test.conf \` below is the conf file \> input {… --- ## [Use gsub to add points to an integer](https://discuss.elastic.co/t/use-gsub-to-add-points-to-an-integer/221901)
**Author:** [@opellulo](https://discuss.elastic.co/u/opellulo)\ **Replies:** 3\ **Last updated:** [March 4, 2020, 6:17pm UTC](https://discuss.elastic.co/t/use-gsub-to-add-points-to-an-integer/221901 "2020-03-04T18:17:07Z")
Hi all, In my data stream i have a "price" value that however is an integer (1399 for 13.99 and so on). I want to convert it to ease the visualization but i can't find any valid numeral.js option in Kibana so i though o… --- ## [Elastic Stack 6.8.7 and 7.6.1 security update](https://discuss.elastic.co/t/elastic-stack-6-8-7-and-7-6-1-security-update/222136)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 6:01pm UTC](https://discuss.elastic.co/t/elastic-stack-6-8-7-and-7-6-1-security-update/222136 "2020-03-04T18:01:20Z")
Kibana Node.js security flaws (ESA-2020-01) The version of Node.js shipped in all versions of Kibana prior to 7.6.1 and 6.8.7 contain three security flaws. CVE-2019-15604 describes a Denial of Service (DoS) flaw in the… --- ## [Dead letter queue log files questions](https://discuss.elastic.co/t/dead-letter-queue-log-files-questions/222134)
**Author:** [@raghuveera](https://discuss.elastic.co/u/raghuveera)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 5:54pm UTC](https://discuss.elastic.co/t/dead-letter-queue-log-files-questions/222134 "2020-03-04T17:54:41Z")
Hi I am using dead letter queue with logstash and i see various empty log files like .log in /var/log/logstash/deadletter folder. Why are the log files empty ? Does it mean that events are processed successfully ? Whe… --- ## [Adding Tag to Allocator gives "internal server error" message](https://discuss.elastic.co/t/adding-tag-to-allocator-gives-internal-server-error-message/222104)
**Author:** [@lcarr](https://discuss.elastic.co/u/lcarr)\ **Replies:** 1\ **Last updated:** [March 4, 2020, 5:40pm UTC](https://discuss.elastic.co/t/adding-tag-to-allocator-gives-internal-server-error-message/222104 "2020-03-04T17:40:13Z")
When we try to add a tag to the allocator we are getting an "internal server error" - the server configuration is 16GB of RAM to 50Gb of storage - could this error be due to the lack of storage available? We thought it … --- ## [Data\_points is mandatory, what is the syntaxe to pass fields to influxDB](https://discuss.elastic.co/t/data-points-is-mandatory-what-is-the-syntaxe-to-pass-fields-to-influxdb/222132)
**Author:** [@jeanflorentine](https://discuss.elastic.co/u/jeanflorentine)\ **Replies:** 1\ **Last updated:** [March 4, 2020, 5:27pm UTC](https://discuss.elastic.co/t/data-points-is-mandatory-what-is-the-syntaxe-to-pass-fields-to-influxdb/222132 "2020-03-04T17:27:48Z")
Cannot find the syntax to get the fields passed to influxDB my K8S message I got through Kafka input end like (of course each message has different values: "fields":{"env":"caa-hors-prod","cluster\_name":"hprd","client"… --- ## [FScrawler not parsing jpg in PDF](https://discuss.elastic.co/t/fscrawler-not-parsing-jpg-in-pdf/221975)
**Author:** [@freesinger](https://discuss.elastic.co/u/freesinger)\ **Replies:** 7\ **Last updated:** [March 4, 2020, 5:16pm UTC](https://discuss.elastic.co/t/fscrawler-not-parsing-jpg-in-pdf/221975 "2020-03-04T17:16:27Z")
Hi,@dadoonet I'm using fscrawler to index my stuff into ES and I find that fscrawler can't parse jpg in PDF though pdf\_strategy: "ocr\_and\_text" has been set. My settings on ocr are listed below: ocr: language: "e… --- ## [Elasticsearch 5.3: Indexing child document winds up on different shard than parent](https://discuss.elastic.co/t/elasticsearch-5-3-indexing-child-document-winds-up-on-different-shard-than-parent/222127)
**Author:** [@BarryS](https://discuss.elastic.co/u/BarryS)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 5:08pm UTC](https://discuss.elastic.co/t/elasticsearch-5-3-indexing-child-document-winds-up-on-different-shard-than-parent/222127 "2020-03-04T17:08:14Z")
Elasticsearch 5.3 indexing issue: Children sometimes wind up on different shards than their parent after indexing. This prevents the use of hasChild and hasParent queries against the index. The index (myindex\_v001) cont… --- ## [Conditional inside filter error](https://discuss.elastic.co/t/conditional-inside-filter-error/222101)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 3\ **Last updated:** [March 4, 2020, 4:58pm UTC](https://discuss.elastic.co/t/conditional-inside-filter-error/222101 "2020-03-04T16:58:23Z")
Hi, im trying to parse a field only if its a number, from time to time I get the string "n/a" instead of a number so I write this conditional inside a filter, but doesnt work. I also have another mutate { convert =\> {}… --- ## [Zentity resolution leads to maxClauseCount queries](https://discuss.elastic.co/t/zentity-resolution-leads-to-maxclausecount-queries/221463)
**Author:** [@erewok](https://discuss.elastic.co/u/erewok)\ **Replies:** 4\ **Last updated:** [March 4, 2020, 4:55pm UTC](https://discuss.elastic.co/t/zentity-resolution-leads-to-maxclausecount-queries/221463 "2020-03-04T16:55:49Z")
Hello, I started experimenting with the zentity plugin yesterday in order to see if we can use it to solve some of our entity resolution problems (instead of building our own custom software to do the same). I find tha… --- ## [Index privilege syntax : all indices except one](https://discuss.elastic.co/t/index-privilege-syntax-all-indices-except-one/221041)
**Author:** [@antoineozenne](https://discuss.elastic.co/u/antoineozenne)\ **Replies:** 8\ **Last updated:** [March 4, 2020, 4:43pm UTC](https://discuss.elastic.co/t/index-privilege-syntax-all-indices-except-one/221041 "2020-03-04T16:43:20Z")
Hello, I want grant my new user read only privilege on all indices except one. I don't understand how I can write the query in KQL (I don't use Lucene) : Is it possible ? How ? --- ## [Fuzzy query that is making me crazy](https://discuss.elastic.co/t/fuzzy-query-that-is-making-me-crazy/222120)
**Author:** [@goyocasero](https://discuss.elastic.co/u/goyocasero)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 4:39pm UTC](https://discuss.elastic.co/t/fuzzy-query-that-is-making-me-crazy/222120 "2020-03-04T16:39:09Z")
Hi all. A fuzzy query is making me crazy. It returns me some result that I could understand but it doesn't return some other that, for me, are more similar than the ones it returns. This is the query: "query":{ "… --- ## [Logstash Mutate add\_field geo\_point](https://discuss.elastic.co/t/logstash-mutate-add-field-geo-point/222103)
**Author:** [@kevvo2000](https://discuss.elastic.co/u/kevvo2000)\ **Replies:** 1\ **Last updated:** [March 4, 2020, 4:35pm UTC](https://discuss.elastic.co/t/logstash-mutate-add-field-geo-point/222103 "2020-03-04T16:35:56Z")
I am having an issue getting geo\_point data into Kibana from a Security Appliance Here is my logstash .conf file mutate { add\_field =\> { "\[location\]\[lat\]" =\> "%{\[geoip\]\[latitude\]}" } add\_field =\> { "\[location\]\[lon\]" … --- ## [Can I set a rollover alias in an index pattern?](https://discuss.elastic.co/t/can-i-set-a-rollover-alias-in-an-index-pattern/222118)
**Author:** [@Jezal\_dan\_Luthar](https://discuss.elastic.co/u/Jezal_dan_Luthar)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 4:32pm UTC](https://discuss.elastic.co/t/can-i-set-a-rollover-alias-in-an-index-pattern/222118 "2020-03-04T16:32:16Z")
Can I set a rollover alias in an index pattern, or do i need to create a template and reference the pattern in there? I have new indexes generated every month with a timestamp. How do i include the timestamp of my inde… --- ## [Field value uppercase on old cluster, lowercase on new](https://discuss.elastic.co/t/field-value-uppercase-on-old-cluster-lowercase-on-new/222110)
**Author:** [@Ron\_Hay](https://discuss.elastic.co/u/Ron_Hay)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 4:06pm UTC](https://discuss.elastic.co/t/field-value-uppercase-on-old-cluster-lowercase-on-new/222110 "2020-03-04T16:06:27Z")
I'm having an issue with an old cluster (7.2.1) having some term fields being in uppercase, but a new cluster (7.5.2) having the same terms, from the same docs and synonyms file, being lowercase. Here are the most relev… --- ## [Security roles](https://discuss.elastic.co/t/security-roles/221981)
**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\ **Replies:** 2\ **Last updated:** [March 4, 2020, 3:48pm UTC](https://discuss.elastic.co/t/security-roles/221981 "2020-03-04T15:48:29Z")
what is the minimal security role permission a user would need to access the \_cluster/health api when I just look at the documentation https://www.elastic.co/guide/en/elasticsearch/reference/current/built-in-roles.html … --- ## [Rolling upgrade 6.8.1](https://discuss.elastic.co/t/rolling-upgrade-6-8-1/222074)
**Author:** [@Hamza\_Y](https://discuss.elastic.co/u/Hamza_Y)\ **Replies:** 4\ **Last updated:** [March 4, 2020, 3:38pm UTC](https://discuss.elastic.co/t/rolling-upgrade-6-8-1/222074 "2020-03-04T15:38:36Z")
I have a 6 node cluster where all nodes are master eligible and data nodes I have 2 degrees of Replication across the cluster During rolling upgrade from 6.2.4 to 6.8.1 is it ever possible for the cluster to be green … --- ## [Watcher - Multiple wildcards not catching](https://discuss.elastic.co/t/watcher-multiple-wildcards-not-catching/222082)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 1\ **Last updated:** [March 4, 2020, 3:25pm UTC](https://discuss.elastic.co/t/watcher-multiple-wildcards-not-catching/222082 "2020-03-04T15:25:08Z")
Hello I am sure I misunderstood something here, but I have a watcher with a few must\_not match and it appears logs are still trickling through: "body": { "query": { "bool": { "must": \[ { "… --- ## [Score в nested запросе](https://discuss.elastic.co/t/score-nested/222100)
**Author:** [@Pavel\_Novoydarskiy](https://discuss.elastic.co/u/Pavel_Novoydarskiy)\ **Replies:** 2\ **Last updated:** [March 4, 2020, 3:13pm UTC](https://discuss.elastic.co/t/score-nested/222100 "2020-03-04T15:13:33Z")
Здравствуйте, у меня есть индекс в Elasticsearch, в котором хранятся сведения о группе людей. У одной группы может быть сразу несколько характеристик одного типа, например в группе 100 человек, из них 10 человек с одним … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1591) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1593)