# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1797 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1798 --- ## [How to grant roles from other system to elasticsearch?](https://discuss.elastic.co/t/how-to-grant-roles-from-other-system-to-elasticsearch/206829)
**Author:** [@lethienhoang](https://discuss.elastic.co/u/lethienhoang)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 3:56pm UTC](https://discuss.elastic.co/t/how-to-grant-roles-from-other-system-to-elasticsearch/206829 "2019-11-06T15:56:11Z")
At work. User want to log data to elasticsearch(development by C#, NEST, ..) In the system, I have a lot user with multiple roles in my sql and UI search data from elasticsearch. But I have a problem. User want to logi… --- ## [How to parse and iterate consecutive XML same id tag values](https://discuss.elastic.co/t/how-to-parse-and-iterate-consecutive-xml-same-id-tag-values/206817)
**Author:** [@asad\_ali](https://discuss.elastic.co/u/asad_ali)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 3:20pm UTC](https://discuss.elastic.co/t/how-to-parse-and-iterate-consecutive-xml-same-id-tag-values/206817 "2019-11-06T15:20:44Z")
I have an xml where the xpath I'm interested eted in looks like as /get\_reports\_response\[1\]/report\[1\]/report\[1\]/results\[1\]/result\[12\] and under result i have children like \[name: \] \[owner: +\] \[name: \] \[comment: \] \[… --- ## [APM not showing data in Kibana](https://discuss.elastic.co/t/apm-not-showing-data-in-kibana/206791)
**Author:** [@ceriania](https://discuss.elastic.co/u/ceriania)\ **Replies:** 1\ **Last updated:** [November 6, 2019, 3:35pm UTC](https://discuss.elastic.co/t/apm-not-showing-data-in-kibana/206791 "2019-11-06T15:35:59Z")
I'm using APM Real User Monitoring JavaScript Agent Reference \[4.x\] with my React application. When I try to send error to APM Server with apm.captureError(new Error('...')); the POST request is correctly sended to the … --- ## [Change docker registry and repo path](https://discuss.elastic.co/t/change-docker-registry-and-repo-path/206422)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 2\ **Last updated:** [November 6, 2019, 3:10pm UTC](https://discuss.elastic.co/t/change-docker-registry-and-repo-path/206422 "2019-11-06T15:10:32Z")
Hi there, we have a satellite server for our internal docker registry. When I setup ECE I can change the registry server but not the repository path. Unfortunatley we have a static path and cannot change it. satellite… --- ## [IP Filter on Cloud UI](https://discuss.elastic.co/t/ip-filter-on-cloud-ui/206636)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 1\ **Last updated:** [November 6, 2019, 3:07pm UTC](https://discuss.elastic.co/t/ip-filter-on-cloud-ui/206636 "2019-11-06T15:07:59Z")
Hi there, I have tried a few things with IP filtering and I have a question about how can I restrict traffic to the cloud UI. We are using Terminalserver where we want to access the Cloud UI and block every other conne… --- ## [Huawei Firewall Log](https://discuss.elastic.co/t/huawei-firewall-log/206815)
**Author:** [@SiggiK](https://discuss.elastic.co/u/SiggiK)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 3:00pm UTC](https://discuss.elastic.co/t/huawei-firewall-log/206815 "2019-11-06T15:00:55Z")
Hello, we need to process logs from a Huawei USG9560 firewall (provider grade machine). The logs come in a binary format. Is there a way to read such log date with Logstash? Rgds, Siggi --- ## [Help please - Elasticsearch not start CentOs 7](https://discuss.elastic.co/t/help-please-elasticsearch-not-start-centos-7/206811)
**Author:** [@Paulo\_Lima](https://discuss.elastic.co/u/Paulo_Lima)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 2:57pm UTC](https://discuss.elastic.co/t/help-please-elasticsearch-not-start-centos-7/206811 "2019-11-06T14:57:14Z")
Please help me, I have the following error when starting the service \[root@jcnslcapp9005 ~\]# service elasticsearch status ● elasticsearch.service - Elasticsearch Loaded: loaded (/etc/systemd/system/elasticsearch.serv… --- ## [Add field depending of the dstip](https://discuss.elastic.co/t/add-field-depending-of-the-dstip/206568)
**Author:** [@donetz](https://discuss.elastic.co/u/donetz)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 2:42pm UTC](https://discuss.elastic.co/t/add-field-depending-of-the-dstip/206568 "2019-11-06T14:42:20Z")
Hi community! I'm using logstash to process some data and I'm in trouble!! This is my situation: I'm reading alerts witg Filebeat from a file that has been written by a SIEM. I'm receiving these alerts with logstash a… --- ## [【Logstash】 I want to calculate the difference of field value](https://discuss.elastic.co/t/logstash-i-want-to-calculate-the-difference-of-field-value/206727)
**Author:** [@yokoyoko](https://discuss.elastic.co/u/yokoyoko)\ **Replies:** 1\ **Last updated:** [November 6, 2019, 2:37pm UTC](https://discuss.elastic.co/t/logstash-i-want-to-calculate-the-difference-of-field-value/206727 "2019-11-06T14:37:24Z")
Prerequisite Monitoring server access logs with logstash. want to do Calculate the difference between the time field values ​​in the log (end\_time-start\_time). And I want to add the result to the new field as \[support\_t… --- ## [514 port or IP address, I don't understand](https://discuss.elastic.co/t/514-port-or-ip-address-i-dont-understand/206744)
**Author:** [@lgllrd](https://discuss.elastic.co/u/lgllrd)\ **Replies:** 1\ **Last updated:** [November 6, 2019, 2:31pm UTC](https://discuss.elastic.co/t/514-port-or-ip-address-i-dont-understand/206744 "2019-11-06T14:31:16Z")
Hi it's again me ! Now I'm trying to listen the port 514 with udp, it's for syslog. Of course I've searched on the internet and all the port under 1024 are privileged. Alright so I'm trying the setcap command and I have… --- ## [Kibana Time picker](https://discuss.elastic.co/t/kibana-time-picker/206637)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 2:22pm UTC](https://discuss.elastic.co/t/kibana-time-picker/206637 "2019-11-06T14:22:43Z")
hello guys , so i was wondering is there a way to customize the predefined values in the time picker and add Monday of every week , i mean i want it to be dynamic so that when the user clic on Monday it will return the d… --- ## [How do I implement exact full text search on an index created by fscrawler](https://discuss.elastic.co/t/how-do-i-implement-exact-full-text-search-on-an-index-created-by-fscrawler/206617)
**Author:** [@Denn](https://discuss.elastic.co/u/Denn)\ **Replies:** 6\ **Last updated:** [November 6, 2019, 1:39pm UTC](https://discuss.elastic.co/t/how-do-i-implement-exact-full-text-search-on-an-index-created-by-fscrawler/206617 "2019-11-06T13:39:59Z")
I have an index that I created with fscrawler... How do I do a full text search on the content so that it matches words exactly even the cases? if ($q2 == '') { $params = \[ 'index' =\> 'trial2', 'body' =\> \[ 'quer… --- ## [Sort nested fields cross parent documents](https://discuss.elastic.co/t/sort-nested-fields-cross-parent-documents/206799)
**Author:** [@permagne](https://discuss.elastic.co/u/permagne)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 1:37pm UTC](https://discuss.elastic.co/t/sort-nested-fields-cross-parent-documents/206799 "2019-11-06T13:37:25Z")
Hi, We have a model that looks something like this: Order: { properties: { ... shipments: { type: "nested", properties: { ... deliveryDate: { type: "date" }, } } } } We need to be able to searc… --- ## [Duplicated data](https://discuss.elastic.co/t/duplicated-data/206606)
**Author:** [@AstroSlazak](https://discuss.elastic.co/u/AstroSlazak)\ **Replies:** 1\ **Last updated:** [November 6, 2019, 1:37pm UTC](https://discuss.elastic.co/t/duplicated-data/206606 "2019-11-06T13:37:01Z")
Hi, I am using jdbc to grab data from SQL, and it works, kind of. I have default index XXXXXX but from database i want to create a new index. output { if \[type\] == "stops" or \[type\] == "signon" { elasticsearch { … --- ## [FilebeatとLogstashのログ転送再開方法について](https://discuss.elastic.co/t/filebeat-logstash/205362)
**Author:** [@Yamda.Yutaka](https://discuss.elastic.co/u/Yamda.Yutaka)\ **Replies:** 1\ **Last updated:** [November 6, 2019, 12:32pm UTC](https://discuss.elastic.co/t/filebeat-logstash/205362 "2019-11-06T12:32:06Z")
＜構成＞ filebeatを利用して複数台からログ収集しています。 filebeat×約10台 =\> logstash =\> elasticsearch logstash 6.4.2 filebeat 6.4.2 ＜事象＞ filebeat導入サーバで大量ログ出力後に、logstashログ収集が停止しました。 ※大量ログ出力したサーバ以外からのログもlogstash側への取込みが停止 ＜現在までの対応＞ filebea… --- ## [How to aggregate data on elastic sent by logstash](https://discuss.elastic.co/t/how-to-aggregate-data-on-elastic-sent-by-logstash/205140)
**Author:** [@krishna\_bhargav](https://discuss.elastic.co/u/krishna_bhargav)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 12:14pm UTC](https://discuss.elastic.co/t/how-to-aggregate-data-on-elastic-sent-by-logstash/205140 "2019-11-06T12:14:30Z")
I am working on below schema, grouping multiple households based on the keyinformation. We could achieve this with the logstash aggregate filter. But this is having performance issue and also cannot run with multiple thr… --- ## [Kv filtering problem](https://discuss.elastic.co/t/kv-filtering-problem/206277)
**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\ **Replies:** 8\ **Last updated:** [November 6, 2019, 11:30am UTC](https://discuss.elastic.co/t/kv-filtering-problem/206277 "2019-11-06T11:30:55Z")
message" =\> "SENT =\> Status : \[SENT\] | CID/GID : \[20799461/ABC\] | OBID : \[08824\] | SID : \[02471\] | StatusMsg : \[null\]", I wish the following fields Status =\> SENT, CID/GID =\> 20799461/ABC, OBID =\> 08824, SID =\> 024… --- ## [Error changing type /mapping from object to nested](https://discuss.elastic.co/t/error-changing-type-mapping-from-object-to-nested/206781)
**Author:** [@kailash](https://discuss.elastic.co/u/kailash)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 11:29am UTC](https://discuss.elastic.co/t/error-changing-type-mapping-from-object-to-nested/206781 "2019-11-06T11:29:33Z")
I am trying to change object type to nested by PUT lfx2\_lp\_prices1/\_mapping { "properties" : { "NoMDEntries" : {"type" : "nested"} } } But getting error "type": "illegal\_argument\_exception", "reaso… --- ## [Visualizations work on its own, but not in a dashboard](https://discuss.elastic.co/t/visualizations-work-on-its-own-but-not-in-a-dashboard/206633)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 2\ **Last updated:** [November 6, 2019, 10:31am UTC](https://discuss.elastic.co/t/visualizations-work-on-its-own-but-not-in-a-dashboard/206633 "2019-11-06T10:31:40Z")
Hi, I use the example dashboards imported by metricbeat setup. The visualizations work: but not in the dashboard: What can be done about this? Best regards, Robert --- ## [How to search UTF-8 characters in Elastic Search](https://discuss.elastic.co/t/how-to-search-utf-8-characters-in-elastic-search/206736)
**Author:** [@Sadhiya](https://discuss.elastic.co/u/Sadhiya)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 9:47am UTC](https://discuss.elastic.co/t/how-to-search-utf-8-characters-in-elastic-search/206736 "2019-11-06T09:47:11Z")
I have UTF-8 characters ingested into Elastic search. They got ingested as Json String. When I try to search the documents using Search Query I am getting Parse Error as below: Parse Error: reason : Cannot parse 'm-att… --- ## [CP of CAP in elasticsearch and one can achieve this by configuration](https://discuss.elastic.co/t/cp-of-cap-in-elasticsearch-and-one-can-achieve-this-by-configuration/206763)
**Author:** [@Abhishek\_Goswami](https://discuss.elastic.co/u/Abhishek_Goswami)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 9:17am UTC](https://discuss.elastic.co/t/cp-of-cap-in-elasticsearch-and-one-can-achieve-this-by-configuration/206763 "2019-11-06T09:17:03Z")
As I am new to elasticsearch \[version 7.4\] and with a lot of studies it is not clear till now how much shards / Nodes are preferred in particular index. As of now, I have configured 3 shards and 2 replicas with 3 Nodes(… --- ## [Group by option with Basic License in Elasticsearch 7.2](https://discuss.elastic.co/t/group-by-option-with-basic-license-in-elasticsearch-7-2/206607)
**Author:** [@skdasari](https://discuss.elastic.co/u/skdasari)\ **Replies:** 1\ **Last updated:** [November 6, 2019, 9:28am UTC](https://discuss.elastic.co/t/group-by-option-with-basic-license-in-elasticsearch-7-2/206607 "2019-11-06T09:28:25Z")
Hello All, License Type: Basic license. Version : Elasticsearch 7.2.1 Problem: Unable to perform Group by search Description: I am trying to generate a report for max\_cpu utilized for all servers for a day. Is it pos… --- ## [Enabling logstash centralised pipeline management](https://discuss.elastic.co/t/enabling-logstash-centralised-pipeline-management/203968)
**Author:** [@kiran\_kumar1](https://discuss.elastic.co/u/kiran_kumar1)\ **Replies:** 14\ **Last updated:** [November 6, 2019, 9:25am UTC](https://discuss.elastic.co/t/enabling-logstash-centralised-pipeline-management/203968 "2019-11-06T09:25:15Z")
Hi Team, I am trying to enabling logstash centralised pipeline management I have configured below settings into logstash.yml xpack.security.enabled: true xpack.management.enabled: true xpack.management.elasticsearch… --- ## [Unable to start logstash 7.4.1 in windows](https://discuss.elastic.co/t/unable-to-start-logstash-7-4-1-in-windows/206754)
**Author:** [@lohit18](https://discuss.elastic.co/u/lohit18)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 9:02am UTC](https://discuss.elastic.co/t/unable-to-start-logstash-7-4-1-in-windows/206754 "2019-11-06T09:02:44Z")
Hello Guys, I'm unable to start logstash 7.4.1 in windows machine getting follow error in command prompt .... i.e.., follows PS C:\\Users\\abc\\Downloads\\ELK\_7.4.1\> .\\logstash-7.4.1\\bin\\logstash -f .\\simpleconf.conf "co… --- ## [Number format](https://discuss.elastic.co/t/number-format/206750)
**Author:** [@Rakesh4](https://discuss.elastic.co/u/Rakesh4)\ **Replies:** 1\ **Last updated:** [November 6, 2019, 9:07am UTC](https://discuss.elastic.co/t/number-format/206750 "2019-11-06T09:07:52Z")
Hi, I have one input as 28 M G ROAD, is there any way ES can generate terms for number as 28,28th, twentyEight etc. Any help appreciated. --- ## [VolumeMounts](https://discuss.elastic.co/t/volumemounts/206759)
**Author:** [@kiran\_kumar1](https://discuss.elastic.co/u/kiran_kumar1)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 9:06am UTC](https://discuss.elastic.co/t/volumemounts/206759 "2019-11-06T09:06:28Z")
Hi Team, while deploying logstash am getting issue like this ,could you please help on this. Events: Type Reason Age From Message Warni… --- ## [ElasticSearch Index combinations of tokens with delimiter](https://discuss.elastic.co/t/elasticsearch-index-combinations-of-tokens-with-delimiter/206747)
**Author:** [@ankur\_singla](https://discuss.elastic.co/u/ankur_singla)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 8:43am UTC](https://discuss.elastic.co/t/elasticsearch-index-combinations-of-tokens-with-delimiter/206747 "2019-11-06T08:43:56Z")
Hey, I am using ES version 6.8.1 & I am indexing below document in index. PUT test/\_doc/1 --\>1 {"test\_data": "hello test 1"} PUT test/\_doc/2 --\>2 {"test\_data": "hello@test@aip"} PUT test/\_doc/3 … --- ## [Why does the field docs.deleted count returns as zero in elasticsearch \_cat/indices API response?](https://discuss.elastic.co/t/why-does-the-field-docs-deleted-count-returns-as-zero-in-elasticsearch-cat-indices-api-response/206537)
**Author:** [@Santu](https://discuss.elastic.co/u/Santu)\ **Replies:** 6\ **Last updated:** [November 6, 2019, 8:56am UTC](https://discuss.elastic.co/t/why-does-the-field-docs-deleted-count-returns-as-zero-in-elasticsearch-cat-indices-api-response/206537 "2019-11-06T08:56:58Z")
Hey, I am using elasticsearch 5.X version. and i have created an index along with some documents. POST /\_bulk { "index" : { "\_index" : "index-a", "\_type" : "type-a", "\_id" : "1" } } { "field" : "value1" } { "create"… --- ## [How can I use ECS with custom JSON input?](https://discuss.elastic.co/t/how-can-i-use-ecs-with-custom-json-input/206753)
**Author:** [@janoliver](https://discuss.elastic.co/u/janoliver)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 8:56am UTC](https://discuss.elastic.co/t/how-can-i-use-ecs-with-custom-json-input/206753 "2019-11-06T08:56:46Z")
Hi there! I have a server that collects metrics (such as CPU, memory, etc.) from other servers and I'd like to send that already collected data via logstash to elastic. At the moment, I have a TCP input with JSON encodi… --- ## [I want to return only terms of a field](https://discuss.elastic.co/t/i-want-to-return-only-terms-of-a-field/205445)
**Author:** [@dinesh\_c](https://discuss.elastic.co/u/dinesh_c)\ **Replies:** 9\ **Last updated:** [November 6, 2019, 8:56am UTC](https://discuss.elastic.co/t/i-want-to-return-only-terms-of-a-field/205445 "2019-11-06T08:56:09Z")
By using terms aggregation I am getting terms as well as doct count but i need only terms is there a way to get only terms. this is the default response ... "aggregations" : { "genres" : { … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1796) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1798)