# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1935 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1936 --- ## [Fields in Table Do Not Match Fields in JSON](https://discuss.elastic.co/t/fields-in-table-do-not-match-fields-in-json/189174)
**Author:** [@ddodge](https://discuss.elastic.co/u/ddodge)\ **Replies:** 13\ **Last updated:** [August 27, 2019, 4:22pm UTC](https://discuss.elastic.co/t/fields-in-table-do-not-match-fields-in-json/189174 "2019-08-27T16:22:12Z")
Under the Discover tab in Kibana I can see entries in the Table listing that say "No cached mapping for this field. Refresh field list from the Management \> Index Patters page" Conversely in Discover, I can see fields i… --- ## [Exception: Faraday::SSLError Elasticsearch input](https://discuss.elastic.co/t/exception-faraday-sslerror-elasticsearch-input/196558)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [August 27, 2019, 4:20pm UTC](https://discuss.elastic.co/t/exception-faraday-sslerror-elasticsearch-input/196558 "2019-08-27T16:20:41Z")
I'm trying to use the Elasticsearch input, but I'm getting an error when I start the plugin. Below is my config and the error. I'm using the internal elastic super user account and the same certificate bundle that is u… --- ## [Logstash 7.3.0 - Failed to load mssql-jdbc-7.4.1.jre11.jar](https://discuss.elastic.co/t/logstash-7-3-0-failed-to-load-mssql-jdbc-7-4-1-jre11-jar/196319)
**Author:** [@saravanan\_palanivel](https://discuss.elastic.co/u/saravanan_palanivel)\ **Replies:** 5\ **Last updated:** [August 27, 2019, 3:55pm UTC](https://discuss.elastic.co/t/logstash-7-3-0-failed-to-load-mssql-jdbc-7-4-1-jre11-jar/196319 "2019-08-27T15:55:15Z")
Hi Team, ELK : 7.3.0 on Kubernetes MSSQL JDBC Driver : mssql-jdbc-7.4.1.jre11.jar OpenJDK Version: openjdk 11.0.4 2019-07-16 LTS I'm trying to deploy Logstash 7.3.0 pod into my on-premise Kubernetes cluster with a pi… --- ## [Restore history](https://discuss.elastic.co/t/restore-history/195664)
**Author:** [@murali12180](https://discuss.elastic.co/u/murali12180)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 3:52pm UTC](https://discuss.elastic.co/t/restore-history/195664 "2019-08-27T15:52:14Z")
Hi, I have restored some of snapshot from the backup and I'd like to pull the history of indices restored so that I can run some audit on it. Please help. Thanks --- ## [Assign a value if field has no value present](https://discuss.elastic.co/t/assign-a-value-if-field-has-no-value-present/193578)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 8\ **Last updated:** [August 27, 2019, 3:47pm UTC](https://discuss.elastic.co/t/assign-a-value-if-field-has-no-value-present/193578 "2019-08-27T15:47:17Z")
I am gone a read a csv formated file which has more then 50 field, by default I want to assign a value "UNKNOWN" to any blank field. how do I easily do it ? on smaller files I have done if !\[var1\] { mutate {update....… --- ## [Error in Kibana logs](https://discuss.elastic.co/t/error-in-kibana-logs/196971)
**Author:** [@billoreavinash12](https://discuss.elastic.co/u/billoreavinash12)\ **Replies:** 0\ **Last updated:** [August 27, 2019, 3:30pm UTC](https://discuss.elastic.co/t/error-in-kibana-logs/196971 "2019-08-27T15:30:13Z")
I think issue might have occurred but i am still not able to solve this. I am new to this. Below is what i am doing and getting errors in Kibana as Error message i see in " No Living Connection" "Unable to revie conne… --- ## [How can I reject a value from json data type column in elasticsearch index result by using Painless?](https://discuss.elastic.co/t/how-can-i-reject-a-value-from-json-data-type-column-in-elasticsearch-index-result-by-using-painless/196248)
**Author:** [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\ **Replies:** 4\ **Last updated:** [August 27, 2019, 3:17pm UTC](https://discuss.elastic.co/t/how-can-i-reject-a-value-from-json-data-type-column-in-elasticsearch-index-result-by-using-painless/196248 "2019-08-27T15:17:24Z")
My question is really simple and unique. I am trying get value from json string column in elasticsearch index. How can I get "ClassName" from below data? My rows is that: { "ClassName": "System.InvalidOperationExc… --- ## [Siebel Workflow Monitor Log](https://discuss.elastic.co/t/siebel-workflow-monitor-log/196840)
**Author:** [@Thiago\_Paiva](https://discuss.elastic.co/u/Thiago_Paiva)\ **Replies:** 3\ **Last updated:** [August 27, 2019, 3:17pm UTC](https://discuss.elastic.co/t/siebel-workflow-monitor-log/196840 "2019-08-27T15:17:18Z")
Hi, I have string extracted by "multiline" and it looks like below: "massage": "ts\_action: 2019-08-23 01:22:14, Action ID: 1-13RK8A8Z, ts\_action: 2019-08-23 01:22:14, Action ID: 1 + 1CU2 + 93, ts\_action : 2019 -08-23 01… --- ## [Stop sending duplicate error in mail alert in watcher](https://discuss.elastic.co/t/stop-sending-duplicate-error-in-mail-alert-in-watcher/196867)
**Author:** [@saurabh06](https://discuss.elastic.co/u/saurabh06)\ **Replies:** 1\ **Last updated:** [August 27, 2019, 2:54pm UTC](https://discuss.elastic.co/t/stop-sending-duplicate-error-in-mail-alert-in-watcher/196867 "2019-08-27T14:54:53Z")
How to stop executing action if their is same hits came again for the matched condition.i.e i want to send mail alert if their are distinct error came. I want to scan the log every 10 min interval but if their occurs sa… --- ## [Using grok to extract android log data](https://discuss.elastic.co/t/using-grok-to-extract-android-log-data/196904)
**Author:** [@Alisa\_Faingold](https://discuss.elastic.co/u/Alisa_Faingold)\ **Replies:** 1\ **Last updated:** [August 27, 2019, 12:51pm UTC](https://discuss.elastic.co/t/using-grok-to-extract-android-log-data/196904 "2019-08-27T12:51:23Z")
Hi all, I'm a new user in ELK and logstash, and I'm trying to extract the following log with grok but without success for now. This is my log: 08-14 10:22:50.863 1419 1419 D GpsNetInitiatedHandler: location enabled :… --- ## [Dataframe restart](https://discuss.elastic.co/t/dataframe-restart/195190)
**Author:** [@rvanegmond](https://discuss.elastic.co/u/rvanegmond)\ **Replies:** 3\ **Last updated:** [August 27, 2019, 2:21pm UTC](https://discuss.elastic.co/t/dataframe-restart/195190 "2019-08-27T14:21:23Z")
I created a few dataframes which I can successfully run but I can never restart them to update the results. Not by using the API or the (greyed out) start button. Am I missing something? --- ## [Analyze string arrays created by kv with grok](https://discuss.elastic.co/t/analyze-string-arrays-created-by-kv-with-grok/196954)
**Author:** [@mattia\_conversano](https://discuss.elastic.co/u/mattia_conversano)\ **Replies:** 1\ **Last updated:** [August 27, 2019, 1:52pm UTC](https://discuss.elastic.co/t/analyze-string-arrays-created-by-kv-with-grok/196954 "2019-08-27T13:52:04Z")
Hi guys, I have a problem with grok, let me explain better; Initially I have an array of strings like this: ..,"Warning. detected XSS using libinjection. \[file \\"/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATIO… --- ## [Trigger output Exec once if file exists](https://discuss.elastic.co/t/trigger-output-exec-once-if-file-exists/196830)
**Author:** [@baselai](https://discuss.elastic.co/u/baselai)\ **Replies:** 8\ **Last updated:** [August 27, 2019, 1:38pm UTC](https://discuss.elastic.co/t/trigger-output-exec-once-if-file-exists/196830 "2019-08-27T13:38:44Z")
I have this logstash conf. file: input { file { path =\> "/usr/share/src-input/x\_tran.csv" start\_position =\> beginning sincedb\_path =\> "/dev/null" mode =\> read } } output { exec { comma… --- ## [Issue with High Level Rest Client Api](https://discuss.elastic.co/t/issue-with-high-level-rest-client-api/195853)
**Author:** [@shantanu\_bhardwaj](https://discuss.elastic.co/u/shantanu_bhardwaj)\ **Replies:** 6\ **Last updated:** [August 27, 2019, 12:47pm UTC](https://discuss.elastic.co/t/issue-with-high-level-rest-client-api/195853 "2019-08-27T12:47:35Z")
RestHighLevelClient restHighLevelClient = new RestHighLevelClient(RestClient.builder(new HttpHost("localhost", 9200))); CreateIndexRequest indexRequest = new CreateIndexRequest("sample-index"); restHighLevel… --- ## [Mappings get messed up - Any way to enforce mappings](https://discuss.elastic.co/t/mappings-get-messed-up-any-way-to-enforce-mappings/196449)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 6\ **Last updated:** [August 27, 2019, 12:41pm UTC](https://discuss.elastic.co/t/mappings-get-messed-up-any-way-to-enforce-mappings/196449 "2019-08-27T12:41:45Z")
I create my indices with a nice tidy mapping where most fields are keywords but, over time, the mapping mutates into a monster of text fields with a ".keyword" property. How can this happen and is there any way to stop i… --- ## [Update elastic stack from 7.0 to 7.3](https://discuss.elastic.co/t/update-elastic-stack-from-7-0-to-7-3/196907)
**Author:** [@omardawed](https://discuss.elastic.co/u/omardawed)\ **Replies:** 1\ **Last updated:** [August 27, 2019, 11:53am UTC](https://discuss.elastic.co/t/update-elastic-stack-from-7-0-to-7-3/196907 "2019-08-27T11:53:59Z")
Hello , i'm using currently the version 7.0.1 (ELK) i want to upgrade to the version 7.3 (ELK), how to perform the upgrade in the right way ? --- ## [How to fetch all data from multiple index in single query through spring boot](https://discuss.elastic.co/t/how-to-fetch-all-data-from-multiple-index-in-single-query-through-spring-boot/196897)
**Author:** [@vishallodha84](https://discuss.elastic.co/u/vishallodha84)\ **Replies:** 3\ **Last updated:** [August 27, 2019, 11:52am UTC](https://discuss.elastic.co/t/how-to-fetch-all-data-from-multiple-index-in-single-query-through-spring-boot/196897 "2019-08-27T11:52:45Z")
Hi All, I have multiple indexes like store, sku, listing i want to search content in single query if any data match then get the response. I tried to check simple output from 2 indexes but its not showing simple query … --- ## [Unable to visualize the dashboards after importing](https://discuss.elastic.co/t/unable-to-visualize-the-dashboards-after-importing/196943)
**Author:** [@dharani](https://discuss.elastic.co/u/dharani)\ **Replies:** 0\ **Last updated:** [August 27, 2019, 11:49am UTC](https://discuss.elastic.co/t/unable-to-visualize-the-dashboards-after-importing/196943 "2019-08-27T11:49:27Z")
Hello Team, Recently i took a kibana backup by exporting the dashboards all to on single (json) file and then i imported json to the (same version kibana 6.6 to different system)now the dashboards which i created wer… --- ## [Query between a range H](https://discuss.elastic.co/t/query-between-a-range-h/196062)
**Author:** [@Digital](https://discuss.elastic.co/u/Digital)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 11:03am UTC](https://discuss.elastic.co/t/query-between-a-range-h/196062 "2019-08-27T11:03:40Z")
Hello all :slight\_smile: I'm blocked on one of my queries. I would like to receive the data everyday between 00H00 to 06H00 06H00 to 12H00 12H00 to 18H00 18H00 to 24H00 But I can't use now-12H or now-6H because I c… --- ## [Use ElasticEearch Query as Filter DSL Query in Discover Section of Kibana](https://discuss.elastic.co/t/use-elasticeearch-query-as-filter-dsl-query-in-discover-section-of-kibana/196562)
**Author:** [@Nirajan](https://discuss.elastic.co/u/Nirajan)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 10:46am UTC](https://discuss.elastic.co/t/use-elasticeearch-query-as-filter-dsl-query-in-discover-section-of-kibana/196562 "2019-08-27T10:46:40Z")
Hello Everybody, if i run a elastic query in kibana console then i am able to see the results but if i use the same query as a filter in Discover Section or in any kibana visualizations then i cannot see any results. D… --- ## [Kibana monitor is going off when query timesout](https://discuss.elastic.co/t/kibana-monitor-is-going-off-when-query-timesout/193132)
**Author:** [@Daniel\_Hopkins](https://discuss.elastic.co/u/Daniel_Hopkins)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 10:04am UTC](https://discuss.elastic.co/t/kibana-monitor-is-going-off-when-query-timesout/193132 "2019-08-27T10:04:30Z")
Hey, So I have a monitor in kibana that queries my elasticsearch to find specific errors and to raise an alert if they are found. The issue I am having though is that when the elasticsearch cluster is under high load th… --- ## [Codec multiline](https://discuss.elastic.co/t/codec-multiline/195204)
**Author:** [@uma\_rengasamy](https://discuss.elastic.co/u/uma_rengasamy)\ **Replies:** 3\ **Last updated:** [August 27, 2019, 10:02am UTC](https://discuss.elastic.co/t/codec-multiline/195204 "2019-08-27T10:02:57Z")
Can we add below codec =\> multiline in filter section ? if \[sourcetype =~ /error/\] { codec =\> multiline { pattern =\> "(^%{TOMCAT\_DATESTAMP})|(^%{CATALINA\_DATESTAMP})" negate =\> true what =\> "previous" } } --- ## [How to convert to JSON Query using Java HighlevelRestClient](https://discuss.elastic.co/t/how-to-convert-to-json-query-using-java-highlevelrestclient/196529)
**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\ **Replies:** 8\ **Last updated:** [August 27, 2019, 9:41am UTC](https://discuss.elastic.co/t/how-to-convert-to-json-query-using-java-highlevelrestclient/196529 "2019-08-27T09:41:19Z")
ocalhost:9200/my\_index/\_mapping/doc { "properties": { "my\_field": { "type": "text", "fielddata": true } } } How to convert this to java API using HighLevelRestClient highlevelRestClient.se… --- ## [Logstash not receiving Docker syslog input](https://discuss.elastic.co/t/logstash-not-receiving-docker-syslog-input/196770)
**Author:** [@jjarzyns](https://discuss.elastic.co/u/jjarzyns)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 8:35am UTC](https://discuss.elastic.co/t/logstash-not-receiving-docker-syslog-input/196770 "2019-08-27T08:35:06Z")
I am facing an issue with the ELK stack and docker syslog. I used tcpdump and confirmed that log entries are being sent to the port exposed by my Logstash container but for some reason they don't show up in the container… --- ## [XML hiérarchique avec logstash](https://discuss.elastic.co/t/xml-hierarchique-avec-logstash/195878)
**Author:** [@mhd](https://discuss.elastic.co/u/mhd)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 8:18am UTC](https://discuss.elastic.co/t/xml-hierarchique-avec-logstash/195878 "2019-08-27T08:18:25Z")
Bonjour Je cherche à analyser via logstash un fichier xml organisé hiérarchiquement comme l'exemple suivant : \ \ \id1\_1\ \ \id2\_1\ **Author:** [@kavaan](https://discuss.elastic.co/u/kavaan)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 8:15am UTC](https://discuss.elastic.co/t/how-to-query-array-of-keywords-in-elastic-search-filter-with-space/196894 "2019-08-27T08:15:33Z") I have a list of cities like this: \["New York","Bayern Munchen","Porto Alegre"\] I want to search some query in must or should section and use this cities keywords in filter section, but this cities have white space and… --- ## [JVM HEAP usage over 85% during snapshots](https://discuss.elastic.co/t/jvm-heap-usage-over-85-during-snapshots/194568)
**Author:** [@cyril.r](https://discuss.elastic.co/u/cyril.r)\ **Replies:** 4\ **Last updated:** [August 27, 2019, 7:28am UTC](https://discuss.elastic.co/t/jvm-heap-usage-over-85-during-snapshots/194568 "2019-08-27T07:28:00Z")
Hello :slight\_smile: I have an issue with elasticsearch and HEAP usage during snapshots. My cluster have 7 nodes (2cpu & 7.5G of RAM per node, local SSD storage), about 220 millions of documents for a total size of 377… --- ## [Please update your Logstash mutate split documentation example](https://discuss.elastic.co/t/please-update-your-logstash-mutate-split-documentation-example/196893)
**Author:** [@MrFrost](https://discuss.elastic.co/u/MrFrost)\ **Replies:** 0\ **Last updated:** [August 27, 2019, 7:27am UTC](https://discuss.elastic.co/t/please-update-your-logstash-mutate-split-documentation-example/196893 "2019-08-27T07:27:37Z")
I was browsing mutate -\> split documentation and example is messed up, took me a while to find the solution what was wrong. Deprecated doc link: https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.h… --- ## [Logstash 7.1.0 crashes occasionally (xml plugin) but v. 6.3.1 works fine](https://discuss.elastic.co/t/logstash-7-1-0-crashes-occasionally-xml-plugin-but-v-6-3-1-works-fine/195476)
**Author:** [@Ged](https://discuss.elastic.co/u/Ged)\ **Replies:** 5\ **Last updated:** [August 27, 2019, 7:26am UTC](https://discuss.elastic.co/t/logstash-7-1-0-crashes-occasionally-xml-plugin-but-v-6-3-1-works-fine/195476 "2019-08-27T07:26:03Z")
HI guys, I've two instances of ELK stack grepping the same log files containing XML payloads. Flow is : input-plugin-file -\> filter-plugin-grok -\> filter-plugin-xml. Log lines from files are parsed using grok and one … --- ## [How to capture remote client machines' system and application status through Logstash running on server?](https://discuss.elastic.co/t/how-to-capture-remote-client-machines-system-and-application-status-through-logstash-running-on-server/196617)
**Author:** [@timelion01](https://discuss.elastic.co/u/timelion01)\ **Replies:** 1\ **Last updated:** [August 27, 2019, 7:24am UTC](https://discuss.elastic.co/t/how-to-capture-remote-client-machines-system-and-application-status-through-logstash-running-on-server/196617 "2019-08-27T07:24:08Z")
Hi, I need some help for using Logstash to capture monitoring stats. We have a client server application setup where the ELK (Elasticsearch, Logstash and Kibana) are hosted on the server and the client machines (which … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1934) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1936)