# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1804

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1805

---

## [How to send same data to multiple elastic clusters with logstash output](https://discuss.elastic.co/t/how-to-send-same-data-to-multiple-elastic-clusters-with-logstash-output/206196)

<div class="topic-metadata">

**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\
**Replies:** 4\
**Last updated:** [November 1, 2019, 5:39pm UTC](https://discuss.elastic.co/t/how-to-send-same-data-to-multiple-elastic-clusters-with-logstash-output/206196 "2019-11-01T17:39:07Z")

</div>

All, We have requirement where we need to read data from kafka topics from logstash and send all data to cluster 1 and few data to cluster 2. Please let us know is it possible and it would really help us if any one prov…

---

## [Alerts on Message strings](https://discuss.elastic.co/t/alerts-on-message-strings/206198)

<div class="topic-metadata">

**Author:** [@Brad\_Wadsworth](https://discuss.elastic.co/u/Brad_Wadsworth)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 5:37pm UTC](https://discuss.elastic.co/t/alerts-on-message-strings/206198 "2019-11-01T17:37:05Z")

</div>

With Watcher, is it possible to alert on a string value in a message field?

---

## [Grok pattern not getting full message](https://discuss.elastic.co/t/grok-pattern-not-getting-full-message/205834)

<div class="topic-metadata">

**Author:** [@tomsozolins](https://discuss.elastic.co/u/tomsozolins)\
**Replies:** 6\
**Last updated:** [November 1, 2019, 5:29pm UTC](https://discuss.elastic.co/t/grok-pattern-not-getting-full-message/205834 "2019-11-01T17:29:13Z")

</div>

Hello! I have have a problem with grok getting full message from log file. Can you please help me? Log message: 2019-10-29 19:27:21.779+02:00 \[ 27\] INFO - State has changed: Rule: Recording FPS, Counter: \\Vi…

---

## [How can i connect filebeat with logstash?](https://discuss.elastic.co/t/how-can-i-connect-filebeat-with-logstash/205954)

<div class="topic-metadata">

**Author:** [@Zuleyma\_Espinoza](https://discuss.elastic.co/u/Zuleyma_Espinoza)\
**Replies:** 3\
**Last updated:** [November 1, 2019, 5:24pm UTC](https://discuss.elastic.co/t/how-can-i-connect-filebeat-with-logstash/205954 "2019-11-01T17:24:48Z")

</div>

Hi, I'm new on these topics. I'm working with ELK+Filebeat, I follow the steps of documentation but I can't connect filebeat with logstash, can some person help me, with tips or something else? The version of ELK+Fileb…

---

## [\[visualization\] \> Cannot read property 'appState' of undefined](https://discuss.elastic.co/t/visualization-cannot-read-property-appstate-of-undefined/204091)

<div class="topic-metadata">

**Author:** [@Classic](https://discuss.elastic.co/u/Classic)\
**Replies:** 3\
**Last updated:** [November 1, 2019, 4:43pm UTC](https://discuss.elastic.co/t/visualization-cannot-read-property-appstate-of-undefined/204091 "2019-11-01T16:43:39Z")

</div>

Hi, i have a big Problem with my Visualization. I have ELK 7.3.2 When i try to open my plugin transform\_vis i get this message: \[visualization\] \> Cannot read property 'appState' of undefined I get this message in F12 …

---

## [Data Table Set up in Kibana](https://discuss.elastic.co/t/data-table-set-up-in-kibana/206093)

<div class="topic-metadata">

**Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\
**Replies:** 7\
**Last updated:** [November 1, 2019, 5:19pm UTC](https://discuss.elastic.co/t/data-table-set-up-in-kibana/206093 "2019-11-01T17:19:05Z")

</div>

It appears that the data tables I can not just list the data based on a selection of columns. Can this be done? I have only been attempted to do aggregation on particular fields.

---

## [How extract data with logstash filter xml from a complex xml](https://discuss.elastic.co/t/how-extract-data-with-logstash-filter-xml-from-a-complex-xml/205905)

<div class="topic-metadata">

**Author:** [@Leandro1](https://discuss.elastic.co/u/Leandro1)\
**Replies:** 2\
**Last updated:** [November 1, 2019, 5:17pm UTC](https://discuss.elastic.co/t/how-extract-data-with-logstash-filter-xml-from-a-complex-xml/205905 "2019-11-01T17:17:13Z")

</div>

Hello, I need to extract the data returned from an xml in an http input The xml Returned is: \<?xml version="1.0" encoding="UTF-8" standalone="yes"?\> \<model-response-list xmlns="http://www.example.com" total-models="1" …

---

## [How to Merge Data from Two Tables in One Visualization?](https://discuss.elastic.co/t/how-to-merge-data-from-two-tables-in-one-visualization/205936)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 2\
**Last updated:** [November 1, 2019, 4:31pm UTC](https://discuss.elastic.co/t/how-to-merge-data-from-two-tables-in-one-visualization/205936 "2019-11-01T16:31:15Z")

</div>

Hi Kibana Jedi Masters, Suppose I have a Kibana data chart Visualisation tracking the inventory of my fruit store: | Product Code | Qnty | ========================= | 100 | 15 | | 400 | 8 |…

---

## [Logstash to convert all numeric field to float](https://discuss.elastic.co/t/logstash-to-convert-all-numeric-field-to-float/206100)

<div class="topic-metadata">

**Author:** [@jalu](https://discuss.elastic.co/u/jalu)\
**Replies:** 2\
**Last updated:** [November 1, 2019, 4:21pm UTC](https://discuss.elastic.co/t/logstash-to-convert-all-numeric-field-to-float/206100 "2019-11-01T16:21:04Z")

</div>

Hi, I recently start to work on a JSON\> logstash \> influx pipeline , I wonder if there is a way to make logstash to read every numeric value from JSON into float and write them into Influx. For now, some of the fields ar…

---

## [grok/KV filter for multiple values](https://discuss.elastic.co/t/grok-kv-filter-for-multiple-values/206109)

<div class="topic-metadata">

**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\
**Replies:** 6\
**Last updated:** [November 1, 2019, 4:17pm UTC](https://discuss.elastic.co/t/grok-kv-filter-for-multiple-values/206109 "2019-11-01T16:17:15Z")

</div>

For the nginx extended logs, I am using below grok pattern and KV pattern. But the value sometimes comes as '-' , some time real values and hypen + value. %{GREEDYDATA:\[nginx\]\[access\]\[message\]}' Log - 3 types rt=0.006 …

---

## [Update specific nested object](https://discuss.elastic.co/t/update-specific-nested-object/206168)

<div class="topic-metadata">

**Author:** [@Vlad\_Dogarescu](https://discuss.elastic.co/u/Vlad_Dogarescu)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 3:54pm UTC](https://discuss.elastic.co/t/update-specific-nested-object/206168 "2019-11-01T15:54:52Z")

</div>

I have hotel documents that each have rooms of nested type. { id: hotel\_id, rooms: \[ { id: room\_id\_1, name: "room 1 name" }, { id: room\_id\_2, name: "room 2 name" …

---

## ["CPU Usage" in monitoring shows "N/A" for Docker-based nodes](https://discuss.elastic.co/t/cpu-usage-in-monitoring-shows-n-a-for-docker-based-nodes/205890)

<div class="topic-metadata">

**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 3:51pm UTC](https://discuss.elastic.co/t/cpu-usage-in-monitoring-shows-n-a-for-docker-based-nodes/205890 "2019-11-01T15:51:01Z")

</div>

All our cluster nodes are Docker-based. The "Nodes" monitoring page shows "N/A" for "CPU Usage": Kibana has this configured: xpack.monitoring.ui.container.elasticsearch.enabled: true (Also, the detail page for each …

---

## [Logstash \<-\> Logstash using lumberjack. Beats input can not be passed through?](https://discuss.elastic.co/t/logstash-logstash-using-lumberjack-beats-input-can-not-be-passed-through/206184)

<div class="topic-metadata">

**Author:** [@Dars](https://discuss.elastic.co/u/Dars)\
**Replies:** 0\
**Last updated:** [November 1, 2019, 3:10pm UTC](https://discuss.elastic.co/t/logstash-logstash-using-lumberjack-beats-input-can-not-be-passed-through/206184 "2019-11-01T15:10:06Z")

</div>

Hi, I have an issues with lumberjack and Logstash to Logstash communication. I have 2 sites, and have a logstash on each site. They are connected with a VPN connection over the internet. I can get the Lumberjack connec…

---

## [Count the number of text type records](https://discuss.elastic.co/t/count-the-number-of-text-type-records/205883)

<div class="topic-metadata">

**Author:** [@andres\_cvilla](https://discuss.elastic.co/u/andres_cvilla)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 3:07pm UTC](https://discuss.elastic.co/t/count-the-number-of-text-type-records/205883 "2019-11-01T15:07:08Z")

</div>

Hello everyone, I need to count a string field, to create a percentage graph. I've tried script fields but this one doesn't work with typos string. I wear this: Any ideas ?, thank you very much

---

## [Using Point To Point in Maps](https://discuss.elastic.co/t/using-point-to-point-in-maps/206108)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 5\
**Last updated:** [November 1, 2019, 3:05pm UTC](https://discuss.elastic.co/t/using-point-to-point-in-maps/206108 "2019-11-01T15:05:58Z")

</div>

I have an index with multiple geo\_point data types that I'd like to visualize in Maps using the new point to point data source. However, it tells me Selected index pattern does not contain source and destination fields. …

---

## [Error installing local plugin](https://discuss.elastic.co/t/error-installing-local-plugin/206175)

<div class="topic-metadata">

**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 3:05pm UTC](https://discuss.elastic.co/t/error-installing-local-plugin/206175 "2019-11-01T15:05:04Z")

</div>

I have in my kibana directory a custom plugin "custom\_plugin" My impression from reading this portion of the elastic docs is that the directory needs to be zipped. So based on that, I do: zip -r custom\_plugin.zip custo…

---

## [Query in filters view](https://discuss.elastic.co/t/query-in-filters-view/205836)

<div class="topic-metadata">

**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 3:04pm UTC](https://discuss.elastic.co/t/query-in-filters-view/205836 "2019-11-01T15:04:19Z")

</div>

Hi, my problem is using filters in view. I simply want to count values greater than 0. First try with Range : the result is correct Second try with "filters" (i prefer it, to put specific label) : the result…

---

## [Elasticsearch is not accessible via machine IP Address](https://discuss.elastic.co/t/elasticsearch-is-not-accessible-via-machine-ip-address/206090)

<div class="topic-metadata">

**Author:** [@premkumar](https://discuss.elastic.co/u/premkumar)\
**Replies:** 5\
**Last updated:** [November 1, 2019, 2:51pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-accessible-via-machine-ip-address/206090 "2019-11-01T14:51:48Z")

</div>

Hi All, I have installed Elasticsearch 7.2 on CentOS 7. After installation without making any changes to the yml file, I was able to access Elasticsearch using the curl command curl http://localhost:9200/\_cluster/healt…

---

## [Making Tabs for different dashboard in single dashboard](https://discuss.elastic.co/t/making-tabs-for-different-dashboard-in-single-dashboard/205859)

<div class="topic-metadata">

**Author:** [@Prashant\_Kumar3](https://discuss.elastic.co/u/Prashant_Kumar3)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 2:46pm UTC](https://discuss.elastic.co/t/making-tabs-for-different-dashboard-in-single-dashboard/205859 "2019-11-01T14:46:48Z")

</div>

Hi, I want to make a dashboard which will contain different tabs/widgets for different dashboards, I have tried markdown and it's not the solution. Thanks in advance.

---

## [Риски number\_of\_replicas = 0](https://discuss.elastic.co/t/number-of-replicas-0/206149)

<div class="topic-metadata">

**Author:** [@111229](https://discuss.elastic.co/u/111229)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 2:27pm UTC](https://discuss.elastic.co/t/number-of-replicas-0/206149 "2019-11-01T14:27:36Z")

</div>

Добрый день! У нас кластер из 11 нод, 3 мастер-ноды, 6 дата-нод и 2 инежест-ноды. Помогите, пожалуйста, разобраться в рисках установки number\_of\_replicas = 0. Не потеряем ли мы данные в случае недоступности одной из д…

---

## [Using stdin to ingest multiple files at once](https://discuss.elastic.co/t/using-stdin-to-ingest-multiple-files-at-once/205314)

<div class="topic-metadata">

**Author:** [@edster](https://discuss.elastic.co/u/edster)\
**Replies:** 2\
**Last updated:** [November 1, 2019, 2:26pm UTC](https://discuss.elastic.co/t/using-stdin-to-ingest-multiple-files-at-once/205314 "2019-11-01T14:26:13Z")

</div>

I have added stdin { } into the input of my logstash config file. When running it I've been trying to run it with one config file, one call but for 6 files since it is all being ingested into one index. How can I do this…

---

## [Display 2 line charts based on filter](https://discuss.elastic.co/t/display-2-line-charts-based-on-filter/206123)

<div class="topic-metadata">

**Author:** [@rahul\_saini](https://discuss.elastic.co/u/rahul_saini)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 2:18pm UTC](https://discuss.elastic.co/t/display-2-line-charts-based-on-filter/206123 "2019-11-01T14:18:11Z")

</div>

Hello, I'm very new to Kibana. In my single data record I've fields like: code\_status.keyword : "Failed" code\_status.keyword : "Passed" I want to draw 2 line graphs in a single visualization, one for passed and one…

---

## [Searching message that contains "--------------"](https://discuss.elastic.co/t/searching-message-that-contains/206132)

<div class="topic-metadata">

**Author:** [@Jacob\_Larsson](https://discuss.elastic.co/u/Jacob_Larsson)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 2:13pm UTC](https://discuss.elastic.co/t/searching-message-that-contains/206132 "2019-11-01T14:13:45Z")

</div>

Hi, We have managed to get Kibana running with beats and elasticsearch at my work which means that we can do more root cause analysis reading logs from an IIS instance. However I do not manage get the search for messag…

---

## [Logstash-output-google\_cloud\_storage plugin does not fail when expected](https://discuss.elastic.co/t/logstash-output-google-cloud-storage-plugin-does-not-fail-when-expected/204500)

<div class="topic-metadata">

**Author:** [@Niki\_Maslarski](https://discuss.elastic.co/u/Niki_Maslarski)\
**Replies:** 3\
**Last updated:** [November 1, 2019, 2:12pm UTC](https://discuss.elastic.co/t/logstash-output-google-cloud-storage-plugin-does-not-fail-when-expected/204500 "2019-11-01T14:12:44Z")

</div>

Hi all, I'm using logstash to store events/logs in to google cloud storage via the logstash. Using this plugin https://www.elastic.co/guide/en/logstash/current/plugins-outputs-google\_cloud\_storage.html However recentl…

---

## [Let kibana convert certain lines from epoch to human understandable](https://discuss.elastic.co/t/let-kibana-convert-certain-lines-from-epoch-to-human-understandable/206144)

<div class="topic-metadata">

**Author:** [@tmans1991](https://discuss.elastic.co/u/tmans1991)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 2:07pm UTC](https://discuss.elastic.co/t/let-kibana-convert-certain-lines-from-epoch-to-human-understandable/206144 "2019-11-01T14:07:07Z")

</div>

hello, very new to kibana, need some help with the folowing: there are certain files that i have imported, and some lines in these files contain epoch, and therefore not understandable example rec\_time: 1572603306.4…

---

## [Drop\_event processor doesn't work](https://discuss.elastic.co/t/drop-event-processor-doesnt-work/206130)

<div class="topic-metadata">

**Author:** [@hlamsc](https://discuss.elastic.co/u/hlamsc)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 1:50pm UTC](https://discuss.elastic.co/t/drop-event-processor-doesnt-work/206130 "2019-11-01T13:50:53Z")

</div>

Hello, I've a problem with my journalbeat config. I want to drop all events that have a syslog priority greater than 5 but nothing that has a process name with "nginx". The config looks like this: processors: …

---

## [ES cluster goes into red frequently](https://discuss.elastic.co/t/es-cluster-goes-into-red-frequently/206051)

<div class="topic-metadata">

**Author:** [@AKSHAY\_ARDAK](https://discuss.elastic.co/u/AKSHAY_ARDAK)\
**Replies:** 20\
**Last updated:** [November 1, 2019, 1:42pm UTC](https://discuss.elastic.co/t/es-cluster-goes-into-red-frequently/206051 "2019-11-01T13:42:39Z")

</div>

Current version of ES = 5.1.1 When the cluster goes into red state below are the logs Master server logs Caused by: org.elasticsearch.transport.NodeDisconnectedException: \[elsdata09\]\[10.10.0.102:9200\]\[cluster:monitor/…

---

## [Ranking not working for Search query with AllIndices](https://discuss.elastic.co/t/ranking-not-working-for-search-query-with-allindices/206173)

<div class="topic-metadata">

**Author:** [@gurjit\_buck](https://discuss.elastic.co/u/gurjit_buck)\
**Replies:** 0\
**Last updated:** [November 1, 2019, 1:30pm UTC](https://discuss.elastic.co/t/ranking-not-working-for-search-query-with-allindices/206173 "2019-11-01T13:30:48Z")

</div>

Hi, I am using rankfeature for ranking purpose, Since there are multiple (4) indexes, the search query result with option AllIndices the result is not correctely sorted, seems ranking working for indvisual index and th…

---

## [Shutdown Logstash when using pipeline-to-pipelines communication](https://discuss.elastic.co/t/shutdown-logstash-when-using-pipeline-to-pipelines-communication/205431)

<div class="topic-metadata">

**Author:** [@glenacota](https://discuss.elastic.co/u/glenacota)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 1:22pm UTC](https://discuss.elastic.co/t/shutdown-logstash-when-using-pipeline-to-pipelines-communication/205431 "2019-11-01T13:22:59Z")

</div>

Hi! I would like to refactor my pipelines by using one of the pipeline-to-pipeline architecture patterns (the forked path pattern). The input of the upstream pipeline is a one-time query to an Elasticsearch cluster, usi…

---

## [How to calculate the average count per unique term](https://discuss.elastic.co/t/how-to-calculate-the-average-count-per-unique-term/205213)

<div class="topic-metadata">

**Author:** [@astickler](https://discuss.elastic.co/u/astickler)\
**Replies:** 8\
**Last updated:** [November 1, 2019, 1:06pm UTC](https://discuss.elastic.co/t/how-to-calculate-the-average-count-per-unique-term/205213 "2019-11-01T13:06:41Z")

</div>

Maybe I need more coffee, but I can't work this out... I have say 10000 documents in a time period, one of the fields in a document is 'type' and there are, say 50 different values for 'type' in this document set. I wa…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1803)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1805)
