# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1609 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1610 --- ## [Logstash service not reading application log file](https://discuss.elastic.co/t/logstash-service-not-reading-application-log-file/220779)
**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\ **Replies:** 0\ **Last updated:** [February 25, 2020, 6:56am UTC](https://discuss.elastic.co/t/logstash-service-not-reading-application-log-file/220779 "2020-02-25T06:56:37Z")
I am using Logstash 7.4 in AWS EC2 (Amazon Linux 2) following command works #/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash.conf --debug // this is reading application log file But this command i… --- ## [Posting data to elasticsearch index using java API](https://discuss.elastic.co/t/posting-data-to-elasticsearch-index-using-java-api/219714)
**Author:** [@cravinder489](https://discuss.elastic.co/u/cravinder489)\ **Replies:** 6\ **Last updated:** [February 25, 2020, 10:35am UTC](https://discuss.elastic.co/t/posting-data-to-elasticsearch-index-using-java-api/219714 "2020-02-25T10:35:47Z")
I'm sending data to my elasticsearch index using JestClient in java(using a POJO class). JSONObject obj1 = new JSONObject(); obj1.put("name","answer"); test1 document = new tes… --- ## [Add new field into an array](https://discuss.elastic.co/t/add-new-field-into-an-array/220822)
**Author:** [@Aymen\_Rahal1](https://discuss.elastic.co/u/Aymen_Rahal1)\ **Replies:** 0\ **Last updated:** [February 25, 2020, 10:28am UTC](https://discuss.elastic.co/t/add-new-field-into-an-array/220822 "2020-02-25T10:28:59Z")
I wanna add a new field into my product mapping. below is my mapping: { "mappings": { "properties": { "name": { "type": "text", "fields": { "keyword": {"type": "keyword"} } }, "resslers": { "type": "nested", … --- ## [Adding char\_filter into language analyzer](https://discuss.elastic.co/t/adding-char-filter-into-language-analyzer/220818)
**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\ **Replies:** 0\ **Last updated:** [February 25, 2020, 10:14am UTC](https://discuss.elastic.co/t/adding-char-filter-into-language-analyzer/220818 "2020-02-25T10:14:00Z")
Is there a way to extend language analyzer with char\_filter without having to reimplement the whole analyzer? We are trying to add html\_strip char\_filter into language analyzed fields, following https://www.elastic.co/g… --- ## [Elasticsearch Screenshot Error](https://discuss.elastic.co/t/elasticsearch-screenshot-error/220816)
**Author:** [@jamesyone](https://discuss.elastic.co/u/jamesyone)\ **Replies:** 0\ **Last updated:** [February 25, 2020, 10:06am UTC](https://discuss.elastic.co/t/elasticsearch-screenshot-error/220816 "2020-02-25T10:06:38Z")
Hi, Im currently trying to take a manual screenshot of elasticsearch to backup amazon s3. After I imput my code, i keep getting this error.. {"error":{"root\_cause":\[{"type":"repository\_verification\_exception","reason"… --- ## [Watcher parse an array](https://discuss.elastic.co/t/watcher-parse-an-array/220777)
**Author:** [@cmiscloni](https://discuss.elastic.co/u/cmiscloni)\ **Replies:** 5\ **Last updated:** [February 25, 2020, 9:57am UTC](https://discuss.elastic.co/t/watcher-parse-an-array/220777 "2020-02-25T09:57:25Z")
Hi all, I try to monitor some events with watcher but I can't find the solution to parse the hits of the array below { "watch\_id": "inlined", "node": "\*\*\*\*\*\*\*\*\*\*\*\*\*", "state": "executed", "status": { "state": { "… --- ## [Parser un fichier text avec logstash](https://discuss.elastic.co/t/parser-un-fichier-text-avec-logstash/220676)
**Author:** [@fatfall](https://discuss.elastic.co/u/fatfall)\ **Replies:** 2\ **Last updated:** [February 25, 2020, 9:12am UTC](https://discuss.elastic.co/t/parser-un-fichier-text-avec-logstash/220676 "2020-02-25T09:12:07Z")
bonjour, j'ai un fichier .txt que je dois ingérer dans logstash pour l'intégrer sur elasticsearch; voici un extait du fichier: {"\_index":"logs-2010.11.27","\_type":"doc","\_id":"xcA","\_score":null,"\_source":{"app\_name":… --- ## [Is it possible to use a field from one filter to the next filter](https://discuss.elastic.co/t/is-it-possible-to-use-a-field-from-one-filter-to-the-next-filter/220701)
**Author:** [@Raj\_K](https://discuss.elastic.co/u/Raj_K)\ **Replies:** 1\ **Last updated:** [February 25, 2020, 9:08am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-a-field-from-one-filter-to-the-next-filter/220701 "2020-02-25T09:08:04Z")
I am using multiple filters in my logstash. I want to use one field from a filter to my next filter as a query parameter. Is it possible? --- ## [Documentation to link remote clusters using proxy](https://discuss.elastic.co/t/documentation-to-link-remote-clusters-using-proxy/220229)
**Author:** [@twiggy](https://discuss.elastic.co/u/twiggy)\ **Replies:** 4\ **Last updated:** [February 25, 2020, 8:41am UTC](https://discuss.elastic.co/t/documentation-to-link-remote-clusters-using-proxy/220229 "2020-02-25T08:41:34Z")
Hello everyone, From the the release note : With Elasticsearch 7.6, a proxy can now be used between clusters for both CCR and CCS. This means fewer ports need to be opened between Elasticsearch clusters when a proxy i… --- ## [What is the supported jdbc driver to connect sybase 16.0 from logstash 7.20](https://discuss.elastic.co/t/what-is-the-supported-jdbc-driver-to-connect-sybase-16-0-from-logstash-7-20/220792)
**Author:** [@sai\_kadiveti](https://discuss.elastic.co/u/sai_kadiveti)\ **Replies:** 0\ **Last updated:** [February 25, 2020, 8:37am UTC](https://discuss.elastic.co/t/what-is-the-supported-jdbc-driver-to-connect-sybase-16-0-from-logstash-7-20/220792 "2020-02-25T08:37:06Z")
Hi, Iam trying to connect to sybase database by using below mentioned details in conf file but it is giving error as "\[ERROR\]\[logstash.inputs.jdbc \] Unable to connect to database. Tried 1 times {:error\_message=\>"Ja… --- ## [Analyzer \[default\_analyzer\] not found for field \[stateNames\]](https://discuss.elastic.co/t/analyzer-default-analyzer-not-found-for-field-statenames/220595)
**Author:** [@Raady\_s](https://discuss.elastic.co/u/Raady_s)\ **Replies:** 3\ **Last updated:** [February 25, 2020, 8:17am UTC](https://discuss.elastic.co/t/analyzer-default-analyzer-not-found-for-field-statenames/220595 "2020-02-25T08:17:23Z")
I am trying to copy data from my old elastic to a new elastic. So, I was copy the mapping and setting of the index. {"mappings":{"profile":{"properties":{"Address":{"type":"text","analyzer":"default\_analyzer"},"Candidat… --- ## [I have 3 nodes elasticsearch and also install have kibana, but kibana is not working in browser](https://discuss.elastic.co/t/i-have-3-nodes-elasticsearch-and-also-install-have-kibana-but-kibana-is-not-working-in-browser/220781)
**Author:** [@Ayush\_Verma1](https://discuss.elastic.co/u/Ayush_Verma1)\ **Replies:** 1\ **Last updated:** [February 25, 2020, 7:48am UTC](https://discuss.elastic.co/t/i-have-3-nodes-elasticsearch-and-also-install-have-kibana-but-kibana-is-not-working-in-browser/220781 "2020-02-25T07:48:18Z")
I have setup 3 nodes elasticsearch cluster on 3 different server and I am using elasticsearch 7.3 and also kibana 7.3 for UI, All 3 nodes are working fine, I installed kibana in one of the server, its status is green but… --- ## [How to output data if field value equal to "string"](https://discuss.elastic.co/t/how-to-output-data-if-field-value-equal-to-string/220541)
**Author:** [@saidjon](https://discuss.elastic.co/u/saidjon)\ **Replies:** 1\ **Last updated:** [February 25, 2020, 7:22am UTC](https://discuss.elastic.co/t/how-to-output-data-if-field-value-equal-to-string/220541 "2020-02-25T07:22:24Z")
Hi there , I'm getting data from csv file using this conf filter{ csv{ columns=\>\['geonameid','name','asciiname','alternatenames','latitude','longitude','feature class','feature code','country code','cc2','admin1 … --- ## [Delete older indices in elasticsearch](https://discuss.elastic.co/t/delete-older-indices-in-elasticsearch/220776)
**Author:** [@Vipin\_Gaur](https://discuss.elastic.co/u/Vipin_Gaur)\ **Replies:** 0\ **Last updated:** [February 25, 2020, 6:27am UTC](https://discuss.elastic.co/t/delete-older-indices-in-elasticsearch/220776 "2020-02-25T06:27:12Z")
I have the many of my logs indexed in logstash-Year-Week format. That is if i want to delete indices older than one month, how can I achieve that in elasticsearch using XDELETE --- ## [Monitoringインデックスの監視](https://discuss.elastic.co/t/monitoring/220772)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 0\ **Last updated:** [February 25, 2020, 5:47am UTC](https://discuss.elastic.co/t/monitoring/220772 "2020-02-25T05:47:39Z")
elastic cloudを使用しているのですが、Dataノードを2zoneに1ノードずつ配置して運用する場合について質問させてください。 Dataノード2台のうち1台がダウンした場合に自動的に検知したいと思っています。 モニタリングでDataノードを監視し、モニタリングの情報が格納されるインデックス(.monitoring-es-7-YYYY.MM.DD)をwatcherで監視することで実現できないかと考えているのですが、認識合っ… --- ## [How to Select First matching document by group by for more than 10000 records](https://discuss.elastic.co/t/how-to-select-first-matching-document-by-group-by-for-more-than-10000-records/220770)
**Author:** [@Pinky\_Agarwal](https://discuss.elastic.co/u/Pinky_Agarwal)\ **Replies:** 0\ **Last updated:** [February 25, 2020, 5:41am UTC](https://discuss.elastic.co/t/how-to-select-first-matching-document-by-group-by-for-more-than-10000-records/220770 "2020-02-25T05:41:13Z")
I am using Collapse to get first element of group by with the search api. but it is working if my Limit+offset is less than 10000. for more than 10000 i am using the scroll api , collpase is not working with scroll , wha… --- ## [Problem with date filter](https://discuss.elastic.co/t/problem-with-date-filter/220758)
**Author:** [@alxfernando](https://discuss.elastic.co/u/alxfernando)\ **Replies:** 1\ **Last updated:** [February 25, 2020, 4:33am UTC](https://discuss.elastic.co/t/problem-with-date-filter/220758 "2020-02-25T04:33:41Z")
how can I load two dates of an event (event started - event ended) using logstash --- ## [Filtering log message from Mulesoft app with grok](https://discuss.elastic.co/t/filtering-log-message-from-mulesoft-app-with-grok/220760)
**Author:** [@aparasxidis](https://discuss.elastic.co/u/aparasxidis)\ **Replies:** 0\ **Last updated:** [February 25, 2020, 4:09am UTC](https://discuss.elastic.co/t/filtering-log-message-from-mulesoft-app-with-grok/220760 "2020-02-25T04:09:23Z")
Hi, I have the next message from a Mulesoft app "message": "event:1072eae0-5723-11ea-b982-0ad52e78f90f correlationId=ab7ab3a6-32b7-4529-872f-af0321c3f418" I want to filter and get the "event" and "correlationId" in sep… --- ## [Indezes and Sharding on Cluster](https://discuss.elastic.co/t/indezes-and-sharding-on-cluster/220641)
**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\ **Replies:** 1\ **Last updated:** [February 25, 2020, 4:07am UTC](https://discuss.elastic.co/t/indezes-and-sharding-on-cluster/220641 "2020-02-25T04:07:41Z")
Hi, in case we expected 300-500gb data per day and we have 4 data nodes in cluster. We want to create 1 index per day. How many Shards are wise to split the index off? 4 Shards to balance the load to the 4 Nodes? 8 … --- ## [GenerateCustomBeat](https://discuss.elastic.co/t/generatecustombeat/219059)
**Author:** [@DWbank](https://discuss.elastic.co/u/DWbank)\ **Replies:** 1\ **Last updated:** [February 25, 2020, 2:40am UTC](https://discuss.elastic.co/t/generatecustombeat/219059 "2020-02-25T02:40:00Z")
I have been trying to figure out how to set up dev environment for a few days now. The documentation is to say the least confusing. When I get to the point mage GenerateCustomBeat I get this error No .go files marked… --- ## [Help with processing metadata at start of file](https://discuss.elastic.co/t/help-with-processing-metadata-at-start-of-file/220740)
**Author:** [@uppaljs](https://discuss.elastic.co/u/uppaljs)\ **Replies:** 1\ **Last updated:** [February 25, 2020, 12:20am UTC](https://discuss.elastic.co/t/help-with-processing-metadata-at-start-of-file/220740 "2020-02-25T00:20:22Z")
Hi, I am trying to process a file which has the following format CreationDate;Application;ReportType;FromDate;UntilDate 2020-01-01 03:15:00;VOPS;System Report;2019-12-01 00:00:00;2020-01-01 00:00:10 SerialNo;Value;Fi… --- ## [PKIX path building failed](https://discuss.elastic.co/t/pkix-path-building-failed/220690)
**Author:** [@mru](https://discuss.elastic.co/u/mru)\ **Replies:** 1\ **Last updated:** [February 25, 2020, 12:23am UTC](https://discuss.elastic.co/t/pkix-path-building-failed/220690 "2020-02-25T00:23:39Z")
Hello all, I am trying to create reports with kibana on docker but I am getting this error, PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path… --- ## [Date Parsing Error After Index Rotation - Any Ideas?](https://discuss.elastic.co/t/date-parsing-error-after-index-rotation-any-ideas/220270)
**Author:** [@strikerx22](https://discuss.elastic.co/u/strikerx22)\ **Replies:** 3\ **Last updated:** [February 25, 2020, 12:14am UTC](https://discuss.elastic.co/t/date-parsing-error-after-index-rotation-any-ideas/220270 "2020-02-25T00:14:53Z")
Hello Everyone, I have been parsing TACACS logs for a few months now without error and all of a sudden, on 2/1/2020, the logs stopped appearing in Kibana. I mention this because my current index name is logstash-2020.02… --- ## [What is the purpose of running logstash as a service?](https://discuss.elastic.co/t/what-is-the-purpose-of-running-logstash-as-a-service/220739)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 0\ **Last updated:** [February 24, 2020, 11:29pm UTC](https://discuss.elastic.co/t/what-is-the-purpose-of-running-logstash-as-a-service/220739 "2020-02-24T23:29:22Z")
If I can run pipelines and multiple pipelines without running logstash as a service? --- ## [Create visualization (table with latest deploys for each environment)](https://discuss.elastic.co/t/create-visualization-table-with-latest-deploys-for-each-environment/220213)
**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 11:22pm UTC](https://discuss.elastic.co/t/create-visualization-table-with-latest-deploys-for-each-environment/220213 "2020-02-24T23:22:09Z")
Hi, I'm trying to create a table with this 5 "simple" fields service\_name | current\_version\_stage | date\_deployed\_stage | current\_version\_prod | date\_deployed\_prod The idea is only show one row by service\_name (so do… --- ## [How to generate visualization template?](https://discuss.elastic.co/t/how-to-generate-visualization-template/220159)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 10:11pm UTC](https://discuss.elastic.co/t/how-to-generate-visualization-template/220159 "2020-02-24T22:11:41Z")
Hi all, is there any generator like kbn-plugin-generator which allows to genetate template for visualizations? As for now i use kbn\_tp\_custom\_visualizations to create my custom visualizations. My kibana is 6.7.3 --- ## [How to configure AWS VPN flow logs in ELK basic license](https://discuss.elastic.co/t/how-to-configure-aws-vpn-flow-logs-in-elk-basic-license/220151)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 10:06pm UTC](https://discuss.elastic.co/t/how-to-configure-aws-vpn-flow-logs-in-elk-basic-license/220151 "2020-02-24T22:06:36Z")
Hi Team, Need help to know the approaches/ways to configure AWS VPN flow logs in ELK basic license. we have cloud watch monitor for VPN flow logs. Thanks Nikhilesh Gade --- ## [How to achieve fault tolerance](https://discuss.elastic.co/t/how-to-achieve-fault-tolerance/220720)
**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\ **Replies:** 3\ **Last updated:** [February 24, 2020, 9:49pm UTC](https://discuss.elastic.co/t/how-to-achieve-fault-tolerance/220720 "2020-02-24T21:49:49Z")
I have a 8 node elk cluster, 3 data dedicated nodes, 3 master dedicated node and 2 http(kibana) nodes. Currently the indexes are daily created with date stamp. It contains around 21293408 docs on daily average. The inde… --- ## [After adding second host I can no longer create or view visualizations](https://discuss.elastic.co/t/after-adding-second-host-i-can-no-longer-create-or-view-visualizations/220708)
**Author:** [@MalcolmReynoldsWrap](https://discuss.elastic.co/u/MalcolmReynoldsWrap)\ **Replies:** 5\ **Last updated:** [February 24, 2020, 9:22pm UTC](https://discuss.elastic.co/t/after-adding-second-host-i-can-no-longer-create-or-view-visualizations/220708 "2020-02-24T21:22:25Z")
For about a year we operated on a single host/instance of Elastic. I've secured the ElasticStack with the native (basic) authentication scheme and everything was working fine. I've now added a second host and clustered … --- ## [How to enable Region Map in kibana7.6](https://discuss.elastic.co/t/how-to-enable-region-map-in-kibana7-6/220444)
**Author:** [@saiteja](https://discuss.elastic.co/u/saiteja)\ **Replies:** 5\ **Last updated:** [February 24, 2020, 9:06pm UTC](https://discuss.elastic.co/t/how-to-enable-region-map-in-kibana7-6/220444 "2020-02-24T21:06:28Z")
Hello, How to enable region map in kibana 7.6.0 I see in the documentation that xpack.maps.showMapVisualizationTypes to true I am not sure though where to add this. Thank you [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1608) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1610)