# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1757 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1758 --- ## [LogstashのSQS input pluginを使いS3データを取得する方法](https://discuss.elastic.co/t/logstash-sqs-input-plugin-s3/209607)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 0\ **Last updated:** [November 27, 2019, 4:49am UTC](https://discuss.elastic.co/t/logstash-sqs-input-plugin-s3/209607 "2019-11-27T04:49:26Z")
質問失礼致します。 Logstashにて、SQS input pluginを使いS3のデータを取得する方法はありますでしょうか。 ▼実現したいルート S3 -\> SQS \<- Logstash(SQS input plugin)-\>Elasticsearch Logstashのconfigにて以下のように記述する方法がないか ドキュメントを探しているのですが見つかりません。 input { sqs { acces… --- ## [Converting string to ip datatype](https://discuss.elastic.co/t/converting-string-to-ip-datatype/207890)
**Author:** [@bibin](https://discuss.elastic.co/u/bibin)\ **Replies:** 6\ **Last updated:** [November 27, 2019, 4:27am UTC](https://discuss.elastic.co/t/converting-string-to-ip-datatype/207890 "2019-11-27T04:27:48Z")
Hi team ES... Can anyone help me how to convert a string to ip datatype ,I have already indexed huge data... As I am new to ES ,i couldn't understand solutions to similar situation sample data // current format str… --- ## [Add Field In Alter Plugin Not Showing values inside field instead showing field name](https://discuss.elastic.co/t/add-field-in-alter-plugin-not-showing-values-inside-field-instead-showing-field-name/209492)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 14\ **Last updated:** [November 27, 2019, 4:20am UTC](https://discuss.elastic.co/t/add-field-in-alter-plugin-not-showing-values-inside-field-instead-showing-field-name/209492 "2019-11-27T04:20:33Z")
Hi have created the following code using Alter plugin because the mutate plugin won't work in my logstash server. filter { date{match =\> \["REQUEST\_TIMESTAMP","yyyy-MM-dd HH:mm:ss"\]} alter { add\_field =\> { "\[loc… --- ## [I have two Machine, one has elastic, Logstash and kibana and other pc has filebeat, in one PC ELK stack is up and when i start filebeat to send log to logstasg it is not able to send](https://discuss.elastic.co/t/i-have-two-machine-one-has-elastic-logstash-and-kibana-and-other-pc-has-filebeat-in-one-pc-elk-stack-is-up-and-when-i-start-filebeat-to-send-log-to-logstasg-it-is-not-able-to-send/208805)
**Author:** [@SoniyaGupta](https://discuss.elastic.co/u/SoniyaGupta)\ **Replies:** 2\ **Last updated:** [November 27, 2019, 4:12am UTC](https://discuss.elastic.co/t/i-have-two-machine-one-has-elastic-logstash-and-kibana-and-other-pc-has-filebeat-in-one-pc-elk-stack-is-up-and-when-i-start-filebeat-to-send-log-to-logstasg-it-is-not-able-to-send/208805 "2019-11-27T04:12:57Z")
it is giving connection Error not able to connect to port. I tried doing telnet for port it did not work. can you please tell me how I can change port to 8080 for logstash and filebeat. Logstash config file input { b… --- ## [What are the different kind of OutOfMemory in ElasticSearch?](https://discuss.elastic.co/t/what-are-the-different-kind-of-outofmemory-in-elasticsearch/209590)
**Author:** [@kgpersonal](https://discuss.elastic.co/u/kgpersonal)\ **Replies:** 1\ **Last updated:** [November 27, 2019, 3:16am UTC](https://discuss.elastic.co/t/what-are-the-different-kind-of-outofmemory-in-elasticsearch/209590 "2019-11-27T03:16:23Z")
Hi Team, What are the different cases where OutOfMemory might occur? I want to test my ES cluster with OutOfMemory exceptions. I would like to explore the options to obtain the same. What settings would help me create… --- ## [Interpreting Advanced Monitoring Stats](https://discuss.elastic.co/t/interpreting-advanced-monitoring-stats/209596)
**Author:** [@jmartori](https://discuss.elastic.co/u/jmartori)\ **Replies:** 0\ **Last updated:** [November 27, 2019, 1:52am UTC](https://discuss.elastic.co/t/interpreting-advanced-monitoring-stats/209596 "2019-11-27T01:52:54Z")
Hi there, I've been trying to find information about how to interpret the advanced monitoring section in kibana. However I haven't been able to find in it ES doc. How do you know a "normal" GC Count or GC Duration. We … --- ## [Need help with adding geoip to syslog and then how to visualize... -](https://discuss.elastic.co/t/need-help-with-adding-geoip-to-syslog-and-then-how-to-visualize/209113)
**Author:** [@Cdnvballer](https://discuss.elastic.co/u/Cdnvballer)\ **Replies:** 12\ **Last updated:** [November 27, 2019, 1:43am UTC](https://discuss.elastic.co/t/need-help-with-adding-geoip-to-syslog-and-then-how-to-visualize/209113 "2019-11-27T01:43:47Z")
Hi, i'm receiving network device syslog via filebeats - works fine, using default syslog filter grok { match =\> { "message" =\> \["%{SYSLOGTIMESTAMP:\[system\]\[syslog\]\[timestamp\]} %{SYSLOGHOST:\[system\]\[syslog\]\[hostname\]} … --- ## [How to handle large message in log](https://discuss.elastic.co/t/how-to-handle-large-message-in-log/209542)
**Author:** [@Kwanchai\_Jaroensiric](https://discuss.elastic.co/u/Kwanchai_Jaroensiric)\ **Replies:** 0\ **Last updated:** [November 26, 2019, 3:38pm UTC](https://discuss.elastic.co/t/how-to-handle-large-message-in-log/209542 "2019-11-26T15:38:57Z")
i found large message in some log and i count word of log result : 2.5k++ and i using this code.. My sample code \ filter { if "service\_daily" in \[tags\] { mutate { gsub =\> \[ "message", "TIMESTAMP|", "", "mes… --- ## [Elastic search start service is failing](https://discuss.elastic.co/t/elastic-search-start-service-is-failing/206388)
**Author:** [@Shradha\_Bharti](https://discuss.elastic.co/u/Shradha_Bharti)\ **Replies:** 1\ **Last updated:** [November 27, 2019, 12:13am UTC](https://discuss.elastic.co/t/elastic-search-start-service-is-failing/206388 "2019-11-27T00:13:02Z")
Hi I am trying to install the elastic search 7.3.0 version in my centos server when i m checking the status with systemctl status elasticsearch -l command I am getting the below error elasticsearch.service - Elasti… --- ## [Filter date in logstash](https://discuss.elastic.co/t/filter-date-in-logstash/209582)
**Author:** [@Sirius](https://discuss.elastic.co/u/Sirius)\ **Replies:** 4\ **Last updated:** [November 26, 2019, 10:35pm UTC](https://discuss.elastic.co/t/filter-date-in-logstash/209582 "2019-11-26T22:35:17Z")
I am traying to filter a format date like below message log with grok, but not luck 01-NOV-2019 00:09:01 \* (ADDRESS=(PROTOCOL=tcp)(HOST=10.10.84.62) (PORT=48482)) \* \ \* 12537 From debugger works b… --- ## [How to check if logstash is sending the logs to Elasticsearch](https://discuss.elastic.co/t/how-to-check-if-logstash-is-sending-the-logs-to-elasticsearch/208444)
**Author:** [@Magesh](https://discuss.elastic.co/u/Magesh)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 8:44pm UTC](https://discuss.elastic.co/t/how-to-check-if-logstash-is-sending-the-logs-to-elasticsearch/208444 "2019-11-26T20:44:12Z")
Hi, could you please let us know How to check if logstash is sending the logs to Elasticsearch. logstash,elasticsearch,kibana has been started without any issues.however i'm unable to view the logs/indexes in Kibana. P… --- ## [Canvas - ! symbol](https://discuss.elastic.co/t/canvas-symbol/209468)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 2\ **Last updated:** [November 26, 2019, 8:40pm UTC](https://discuss.elastic.co/t/canvas-symbol/209468 "2019-11-26T20:40:25Z")
Hi There, Is it possible to show the value zero instead of ! symbol in Canvas. if the returned document value is zero. Thanks, Raj --- ## [Cannot add a filter for a geo\_point field in Kibana 6.5 visualisations](https://discuss.elastic.co/t/cannot-add-a-filter-for-a-geo-point-field-in-kibana-6-5-visualisations/209328)
**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\ **Replies:** 3\ **Last updated:** [November 26, 2019, 7:44pm UTC](https://discuss.elastic.co/t/cannot-add-a-filter-for-a-geo-point-field-in-kibana-6-5-visualisations/209328 "2019-11-26T19:44:47Z")
Hi, I have an index with multiple fields in it, one of which is of type geo\_point. We are using this data to plot on a coordinate map. However for a particular visualisation I wish to make, I need to filter out some of … --- ## [How to sum together values in different objects](https://discuss.elastic.co/t/how-to-sum-together-values-in-different-objects/209554)
**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\ **Replies:** 2\ **Last updated:** [November 26, 2019, 7:24pm UTC](https://discuss.elastic.co/t/how-to-sum-together-values-in-different-objects/209554 "2019-11-26T19:24:29Z")
Hi, I have nested objects in an array. The objects are the same structure. I want to add together all \[array\]\[amount\] values (which are all numbers) where x can be any number up to around 40, to create a new field \[amoun… --- ## [How to do group by multiple fields and sort on a different field, in elasticsearch](https://discuss.elastic.co/t/how-to-do-group-by-multiple-fields-and-sort-on-a-different-field-in-elasticsearch/207963)
**Author:** [@Seetha93](https://discuss.elastic.co/u/Seetha93)\ **Replies:** 4\ **Last updated:** [November 26, 2019, 7:21pm UTC](https://discuss.elastic.co/t/how-to-do-group-by-multiple-fields-and-sort-on-a-different-field-in-elasticsearch/207963 "2019-11-26T19:21:22Z")
Lets say I have a query like Select \* from table Group By field\_1, field\_2, field\_3 Order By filed\_7; How to achieve the same functionality in elasticsearch. I use Composite Aggregations to do Group by multiple fields.… --- ## [Kibana Space - Restricting "Default" Space View for custom users](https://discuss.elastic.co/t/kibana-space-restricting-default-space-view-for-custom-users/209126)
**Author:** [@Mauricio\_Borges](https://discuss.elastic.co/u/Mauricio_Borges)\ **Replies:** 4\ **Last updated:** [November 26, 2019, 7:08pm UTC](https://discuss.elastic.co/t/kibana-space-restricting-default-space-view-for-custom-users/209126 "2019-11-26T19:08:40Z")
Hello team! I have tried create new user, new role, new space, customized what user should View and Access. That's worked fine! However, I'd like new user access only the it's Space and not view Default anymore once l… --- ## [Ignore a string from logstash from grok pattern](https://discuss.elastic.co/t/ignore-a-string-from-logstash-from-grok-pattern/209561)
**Author:** [@whoatemyjam](https://discuss.elastic.co/u/whoatemyjam)\ **Replies:** 4\ **Last updated:** [November 26, 2019, 6:55pm UTC](https://discuss.elastic.co/t/ignore-a-string-from-logstash-from-grok-pattern/209561 "2019-11-26T18:55:22Z")
hi from a log file like this 2019-11-22 13:02:01 INFO sometext:999 \[applicationId=xxxxx\] \[version=xxxx\] \[hostname=hostname.domain\] \[logmessage=all went well\] can we remove the "sometext" and just show value of 999… --- ## [Kibana Authentication from an an external application](https://discuss.elastic.co/t/kibana-authentication-from-an-an-external-application/207371)
**Author:** [@vishal\_M](https://discuss.elastic.co/u/vishal_M)\ **Replies:** 3\ **Last updated:** [November 26, 2019, 6:30pm UTC](https://discuss.elastic.co/t/kibana-authentication-from-an-an-external-application/207371 "2019-11-26T18:30:41Z")
Hi Team, I have a requirement of integrating the Kibana dashboard into my react application. The dashboard may contain multiple charts(Pie, Time series, etc). And, the application will be used by many users. So, the dat… --- ## [Histogram Aggregation: unstable bucket keys with decimal intervals](https://discuss.elastic.co/t/histogram-aggregation-unstable-bucket-keys-with-decimal-intervals/209395)
**Author:** [@Yana\_Rose](https://discuss.elastic.co/u/Yana_Rose)\ **Replies:** 2\ **Last updated:** [November 26, 2019, 7:22am UTC](https://discuss.elastic.co/t/histogram-aggregation-unstable-bucket-keys-with-decimal-intervals/209395 "2019-11-26T07:22:11Z")
I'd like to build the histogram on numeric values index as doubles. I want to be able to perform searches on produces buckets but I get inconsistent counts for buckets and search results. Example: "aggs" : { "histo… --- ## [Cluster ES with Docker-compose Does Not Recognize an Image](https://discuss.elastic.co/t/cluster-es-with-docker-compose-does-not-recognize-an-image/209522)
**Author:** [@rbrodrigues](https://discuss.elastic.co/u/rbrodrigues)\ **Replies:** 3\ **Last updated:** [November 26, 2019, 5:43pm UTC](https://discuss.elastic.co/t/cluster-es-with-docker-compose-does-not-recognize-an-image/209522 "2019-11-26T17:43:15Z")
I have the following docker-compose.yml file, all images go up, but Kibana can't find ES, is there any wrong setting in the file? version: '2.2' services: es01: image: rbrodrigues/elasticseach:7.1.0 container\_n… --- ## [Canvas - Datatable](https://discuss.elastic.co/t/canvas-datatable/208560)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 12\ **Last updated:** [November 26, 2019, 5:26pm UTC](https://discuss.elastic.co/t/canvas-datatable/208560 "2019-11-26T17:26:33Z")
Hi There, Am trying to create a datatable in canvas , but Iam not sure how to execute this condition. I have a fields hostname and risk\_factor (critical, high, medium, low ) and Iam trying to create a datable on top h… --- ## [Node Move Failing for ES](https://discuss.elastic.co/t/node-move-failing-for-es/209203)
**Author:** [@Rob\_wylde](https://discuss.elastic.co/u/Rob_wylde)\ **Replies:** 4\ **Last updated:** [November 26, 2019, 5:14pm UTC](https://discuss.elastic.co/t/node-move-failing-for-es/209203 "2019-11-26T17:14:40Z")
So i just setup another brand new instance of ECE and I'm following the same process i've used successfully in the past. That being install an 'admin' node with less resources than the other 3 nodes. Add the new allocato… --- ## [Getting search request timeout after 60000ms](https://discuss.elastic.co/t/getting-search-request-timeout-after-60000ms/209521)
**Author:** [@Thedsk8](https://discuss.elastic.co/u/Thedsk8)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 5:04pm UTC](https://discuss.elastic.co/t/getting-search-request-timeout-after-60000ms/209521 "2019-11-26T17:04:31Z")
We are currently using Elasticsearch 6.5 and getting intermittent request timeout for some dashboards. We are querying on approximately 550 GB data (76873087 documents) which is distributed among 3 indices. We have 6 dat… --- ## [Auditbeat docker (7.4.2) starts and then terminates with no error](https://discuss.elastic.co/t/auditbeat-docker-7-4-2-starts-and-then-terminates-with-no-error/209348)
**Author:** [@yoshugo](https://discuss.elastic.co/u/yoshugo)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 5:01pm UTC](https://discuss.elastic.co/t/auditbeat-docker-7-4-2-starts-and-then-terminates-with-no-error/209348 "2019-11-26T17:01:32Z")
Hi, i'm new to auditbeat. i've configured a test machine in my lab and configured all ELK stack as dockers. the Auditbeat starts and load dashboards and then stops. --- ## [Mutate - Split - datatype remains string](https://discuss.elastic.co/t/mutate-split-datatype-remains-string/207995)
**Author:** [@varshesh](https://discuss.elastic.co/u/varshesh)\ **Replies:** 3\ **Last updated:** [November 26, 2019, 4:52pm UTC](https://discuss.elastic.co/t/mutate-split-datatype-remains-string/207995 "2019-11-26T16:52:11Z")
Hi, I have a field with comma separated city names. I have applied simple split as below. filter { mutate { split =\> { "city" =\> ',' } } } But, in index mapping, the data type displayed is string. Can someone guide … --- ## [Kibana customized table](https://discuss.elastic.co/t/kibana-customized-table/209470)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 4:31pm UTC](https://discuss.elastic.co/t/kibana-customized-table/209470 "2019-11-26T16:31:52Z")
Hello everyone! I have an index where I monitor proxy http log messages that contain status codes 200-500 which I parse and index into elasticsearch so I can search them. I'm trying to create an easy table in kibana so… --- ## [IDs of indexes that doesnt exists](https://discuss.elastic.co/t/ids-of-indexes-that-doesnt-exists/209490)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 4:17pm UTC](https://discuss.elastic.co/t/ids-of-indexes-that-doesnt-exists/209490 "2019-11-26T16:17:36Z")
Hi, I have IDs of indexes that doesnt exists. When I run the folowing painless code in scripted fields I have many IDs that return empty strings, something that shouldn happen because in all my indexes I have a field ca… --- ## [Java.lang.illegalstateexception](https://discuss.elastic.co/t/java-lang-illegalstateexception/209467)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 4:15pm UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception/209467 "2019-11-26T16:15:19Z")
Hi i'm new to ELK Stack, I'm currently trying to ingest data from filebeat to logstash and using grok filter in it. i accidentally deleted the whole log folder of logstash /var/log/logstash, so i created the folder by… --- ## [How to check if value of a field has changed over time](https://discuss.elastic.co/t/how-to-check-if-value-of-a-field-has-changed-over-time/209393)
**Author:** [@jchat](https://discuss.elastic.co/u/jchat)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 4:14pm UTC](https://discuss.elastic.co/t/how-to-check-if-value-of-a-field-has-changed-over-time/209393 "2019-11-26T16:14:09Z")
I have two or more documents getting added to ES which may have same or different values. Is there a way to identify the records when a value for a field has changed. For example, If I receive below two documents, I w… --- ## [413 Request Entity Too Large - kibana error](https://discuss.elastic.co/t/413-request-entity-too-large-kibana-error/209399)
**Author:** [@aveek](https://discuss.elastic.co/u/aveek)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 4:13pm UTC](https://discuss.elastic.co/t/413-request-entity-too-large-kibana-error/209399 "2019-11-26T16:13:55Z")
Hi , Elastic Stack version: 7.2.0 We are using logstash to parse data and create custom fields. We rely on dynamic mapping to auto detect the new fields and add them to the index template. We have more than 1000 new fi… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1756) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1758)