# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1941 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1942 --- ## [How to open file from Kibana using path.real (or any other data) from Fscrawler](https://discuss.elastic.co/t/how-to-open-file-from-kibana-using-path-real-or-any-other-data-from-fscrawler/196435)
**Author:** [@ymorayko](https://discuss.elastic.co/u/ymorayko)\ **Replies:** 4\ **Last updated:** [August 23, 2019, 6:25pm UTC](https://discuss.elastic.co/t/how-to-open-file-from-kibana-using-path-real-or-any-other-data-from-fscrawler/196435 "2019-08-23T18:25:21Z")
Hello everyone. I am new to Elasticsearch. I am indexing some pdf, word files using Fscrawler (which works great!) and using Kibana to filter, search. I am wandering if there is a way to open file from Kibana using the… --- ## [Ruby request and logstash](https://discuss.elastic.co/t/ruby-request-and-logstash/196570)
**Author:** [@He\_Pamela](https://discuss.elastic.co/u/He_Pamela)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 6:17pm UTC](https://discuss.elastic.co/t/ruby-request-and-logstash/196570 "2019-08-23T18:17:58Z")
Hi, I'm trying to make a ruby request to Elasticsearch using Logstash and ruby. this is my filter part in the config file. filter { json { source =\> "message" } } ruby {… --- ## [Can you apply another grok filter in case of \_grokparsefailure?](https://discuss.elastic.co/t/can-you-apply-another-grok-filter-in-case-of-grokparsefailure/196557)
**Author:** [@Siri\_sour](https://discuss.elastic.co/u/Siri_sour)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 6:12pm UTC](https://discuss.elastic.co/t/can-you-apply-another-grok-filter-in-case-of-grokparsefailure/196557 "2019-08-23T18:12:51Z")
Hey, I'm working with different log structure and l Tried to adapt my grok filter for most of logs, but there still some that cause a grokparsefailure. I wonder what is the best way to handle a grokparsefailure? In m… --- ## [Metricbeat host overview dashboard filter](https://discuss.elastic.co/t/metricbeat-host-overview-dashboard-filter/196389)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 5:56pm UTC](https://discuss.elastic.co/t/metricbeat-host-overview-dashboard-filter/196389 "2019-08-23T17:56:59Z")
Hi, I have setup a host "elksrv" with elasticsearch, kibana and logstash. then i configured a second server "elk-lab" with metricbeat and filebeat. When i configure metricbeat on "elk-lab" i configured setup.dashboards.… --- ## [CPUs at 100%, but no disk I/O - ES 7.3](https://discuss.elastic.co/t/cpus-at-100-but-no-disk-i-o-es-7-3/196408)
**Author:** [@Aharon](https://discuss.elastic.co/u/Aharon)\ **Replies:** 6\ **Last updated:** [August 23, 2019, 5:40pm UTC](https://discuss.elastic.co/t/cpus-at-100-but-no-disk-i-o-es-7-3/196408 "2019-08-23T17:40:50Z")
ES Version 7.3 Various node sizes (hot/warm) (25+ nodes) SSDs on all nodes JDK 11 X-Pack Document level security (thank you for fixing the bitset issue in 7.3) Periodically our warm nodes that are sitting at 0% CPU uti… --- ## [Position getting incremented in Synonym filter when used after edge\_ngram filter](https://discuss.elastic.co/t/position-getting-incremented-in-synonym-filter-when-used-after-edge-ngram-filter/196320)
**Author:** [@pappu1](https://discuss.elastic.co/u/pappu1)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 5:29pm UTC](https://discuss.elastic.co/t/position-getting-incremented-in-synonym-filter-when-used-after-edge-ngram-filter/196320 "2019-08-23T17:29:09Z")
Hi All, I'm facing an issue understanding that sometimes synonym filter increments position and sometimes it doesn't. This is causing matching issues with match\_phrase queries. I've posted the entire details on this st… --- ## [Python API reindex issues](https://discuss.elastic.co/t/python-api-reindex-issues/196357)
**Author:** [@smhall316](https://discuss.elastic.co/u/smhall316)\ **Replies:** 3\ **Last updated:** [August 23, 2019, 5:17pm UTC](https://discuss.elastic.co/t/python-api-reindex-issues/196357 "2019-08-23T17:17:18Z")
I am relatively new to Elasticsearch so I have been playing with a bit using the Python API. I am using Elasticsearch service through AWS so I have been following its suggestions for restoring snapshots. Since AWS does… --- ## [Configuring Pipeline To Handle Duplicates In Rollover Indices](https://discuss.elastic.co/t/configuring-pipeline-to-handle-duplicates-in-rollover-indices/196563)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 5:00pm UTC](https://discuss.elastic.co/t/configuring-pipeline-to-handle-duplicates-in-rollover-indices/196563 "2019-08-23T17:00:38Z")
For awhile, I've been using the fingerprint filter and setting the resulting value to the document id when outputting to Elasticsearch to handle duplicate prevention. I've recently discovered (the hard way) that this me… --- ## [Manipulate source data using script](https://discuss.elastic.co/t/manipulate-source-data-using-script/196434)
**Author:** [@rmunnur](https://discuss.elastic.co/u/rmunnur)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 4:32pm UTC](https://discuss.elastic.co/t/manipulate-source-data-using-script/196434 "2019-08-23T16:32:42Z")
Hi All, I want to check if there is a way to manipulate the response returned by elasticsearch. For ex: Below is the response and I would like replace the docdate field value based on user time zone. I don't want it as… --- ## [Edge NGram Tokenizer not Tokenizing Digits?](https://discuss.elastic.co/t/edge-ngram-tokenizer-not-tokenizing-digits/196521)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 4:04pm UTC](https://discuss.elastic.co/t/edge-ngram-tokenizer-not-tokenizing-digits/196521 "2019-08-23T16:04:57Z")
We're using the Edge NGram tokenizer (ElasticSearch 7.3 Windows) on letters and digits from 3 to 10 characters. However when we upload a text test 11kw and search for text: test AND text: 11k we find nothing. Interestin… --- ## [Visualisation - Term Aggregate on field alias](https://discuss.elastic.co/t/visualisation-term-aggregate-on-field-alias/193087)
**Author:** [@pisxx](https://discuss.elastic.co/u/pisxx)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 4:04pm UTC](https://discuss.elastic.co/t/visualisation-term-aggregate-on-field-alias/193087 "2019-08-23T16:04:17Z")
Hi, I wanted to ask if it is possible to use Term aggregation on field alias? We have logs from mutiple sources and I wanted to have a data table visualisation with IP count. I created an index alias to combine to be … --- ## [Problem with last 15 minute date time filter in Kibana](https://discuss.elastic.co/t/problem-with-last-15-minute-date-time-filter-in-kibana/196441)
**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 3:31pm UTC](https://discuss.elastic.co/t/problem-with-last-15-minute-date-time-filter-in-kibana/196441 "2019-08-23T15:31:23Z")
Hi Team, I am getting date time filter issue in Kibana. My log has been generated on machine in Italy timezone . When I try to apply last 15 minute filter then no result found. When I apply with today filter it will d… --- ## [Nested json using logstash mutate filter](https://discuss.elastic.co/t/nested-json-using-logstash-mutate-filter/196551)
**Author:** [@chimbu3306](https://discuss.elastic.co/u/chimbu3306)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 3:26pm UTC](https://discuss.elastic.co/t/nested-json-using-logstash-mutate-filter/196551 "2019-08-23T15:26:39Z")
I have the below json where i am trying to create a new json field using the mutate filter but i am not getting the expected results. below is my json and the filter i used Actual Json: { "@timestamp": "2019-08-23T14:5… --- ## [Show most recent documents by entity](https://discuss.elastic.co/t/show-most-recent-documents-by-entity/195929)
**Author:** [@dominikw](https://discuss.elastic.co/u/dominikw)\ **Replies:** 10\ **Last updated:** [August 23, 2019, 3:17pm UTC](https://discuss.elastic.co/t/show-most-recent-documents-by-entity/195929 "2019-08-23T15:17:11Z")
Hi, I'm trying to use one of the features introduced in Kibana 7.3 for Maps. I'm tracking vehicles, and because of that I have a lot of documents with Geo-points and indices of object. When I'm adding a new layer I wa… --- ## [Removing a filed in a json using mutate filter in logstash](https://discuss.elastic.co/t/removing-a-filed-in-a-json-using-mutate-filter-in-logstash/195746)
**Author:** [@chimbu3306](https://discuss.elastic.co/u/chimbu3306)\ **Replies:** 4\ **Last updated:** [August 23, 2019, 2:56pm UTC](https://discuss.elastic.co/t/removing-a-filed-in-a-json-using-mutate-filter-in-logstash/195746 "2019-08-23T14:56:58Z")
I have a json where i need to remove a field using mutate or any other filter, { "clientUserAgent": null, "environment": "Logs\_0z9uc0nzlh/qa", "timestamp": 1566220446505, "sequence": 3, "… --- ## [Metrices tab not available in APM kibana 6.5.1](https://discuss.elastic.co/t/metrices-tab-not-available-in-apm-kibana-6-5-1/196541)
**Author:** [@Vikas\_Thakur](https://discuss.elastic.co/u/Vikas_Thakur)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 2:29pm UTC](https://discuss.elastic.co/t/metrices-tab-not-available-in-apm-kibana-6-5-1/196541 "2019-08-23T14:29:27Z")
Kibana version:6.5.1 Elasticsearch version:6.5.1 APM Server version:6.5.4 APM Agent language and version: Browser version: Chrome 76.0.3809.100 Fresh install or upgraded from other version? Fresh install Descriptio… --- ## [Logstash output pretty json file?](https://discuss.elastic.co/t/logstash-output-pretty-json-file/196520)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 2:10pm UTC](https://discuss.elastic.co/t/logstash-output-pretty-json-file/196520 "2019-08-23T14:10:33Z")
Hi, I know, that I can use json\_lines codec for file output to generate a one json line per event. Is there also a possibility to create a pretty json file as file output which is easier readable for humans? Thanks, A… --- ## [Default Logstash Encryption to Elastic Cloud?](https://discuss.elastic.co/t/default-logstash-encryption-to-elastic-cloud/196530)
**Author:** [@tyler\_hilsabeck](https://discuss.elastic.co/u/tyler_hilsabeck)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 2:07pm UTC](https://discuss.elastic.co/t/default-logstash-encryption-to-elastic-cloud/196530 "2019-08-23T14:07:56Z")
Will Logstash automatically encrypt traffic to an elastic cloud instance if the cloud endpoint it specified as https? Upon packet inspection it seems that it is but I want to verify. This is my pipefile config: output{… --- ## [How to terminate logstash at EOF in a single pipeline?](https://discuss.elastic.co/t/how-to-terminate-logstash-at-eof-in-a-single-pipeline/196534)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 2:07pm UTC](https://discuss.elastic.co/t/how-to-terminate-logstash-at-eof-in-a-single-pipeline/196534 "2019-08-23T14:07:29Z")
Hi, We will get csv exports of error data from our customer and want to import this export into our own elasticsearch instance to analyze the provided data (log data). We use losgtash to import csv files to elasticsear… --- ## [Csv filter plugin: how to deal with masked quotations?](https://discuss.elastic.co/t/csv-filter-plugin-how-to-deal-with-masked-quotations/196488)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 2:05pm UTC](https://discuss.elastic.co/t/csv-filter-plugin-how-to-deal-with-masked-quotations/196488 "2019-08-23T14:05:03Z")
Hi, I have following csv file. "@timestamp";"col\_a";"col\_b";"col\_c";"col\_d" "2019-08-23 04:43:16.821";"\";b;c;d I am trying to parse it in logstash with following filter: filt… --- ## [All syslogs have same severity](https://discuss.elastic.co/t/all-syslogs-have-same-severity/196390)
**Author:** [@jmorris](https://discuss.elastic.co/u/jmorris)\ **Replies:** 3\ **Last updated:** [August 23, 2019, 1:59pm UTC](https://discuss.elastic.co/t/all-syslogs-have-same-severity/196390 "2019-08-23T13:59:53Z")
I'm still very new to elastic stack and I ditched filebeat because it made all of my syslogs look like they were coming from the same host. I have my syslogs coming into logstash now and for the most part its working, h… --- ## [Error on pipeline configuration with Java plugin](https://discuss.elastic.co/t/error-on-pipeline-configuration-with-java-plugin/196484)
**Author:** [@DottorP](https://discuss.elastic.co/u/DottorP)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 1:58pm UTC](https://discuss.elastic.co/t/error-on-pipeline-configuration-with-java-plugin/196484 "2019-08-23T13:58:56Z")
Hi. I wrote a filter plugin in Java named blob\_to\_clob\_filter. When using it in a pipeline I get the following error: \[2019-08-23T11:20:38,254\]\[DEBUG\]\[logstash.plugins.registry\] On demand adding plugin to the registry {… --- ## [Rollover Doesn't work](https://discuss.elastic.co/t/rollover-doesnt-work/196542)
**Author:** [@RSR\_PHANI\_KUMAR](https://discuss.elastic.co/u/RSR_PHANI_KUMAR)\ **Replies:** 0\ **Last updated:** [August 23, 2019, 1:51pm UTC](https://discuss.elastic.co/t/rollover-doesnt-work/196542 "2019-08-23T13:51:09Z")
Hello Forum, I'm New to the Elastic Stack, and have set up various indexes for Metricbeat,Auditbeat, etc. I have set up Index Rollover Policy for the respective Indexes to get rolled-over for every 10 days and get dele… --- ## [How to access Elasticsearch and Kibana from another machine within same network](https://discuss.elastic.co/t/how-to-access-elasticsearch-and-kibana-from-another-machine-within-same-network/196516)
**Author:** [@narasimhaes](https://discuss.elastic.co/u/narasimhaes)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 1:49pm UTC](https://discuss.elastic.co/t/how-to-access-elasticsearch-and-kibana-from-another-machine-within-same-network/196516 "2019-08-23T13:49:23Z")
I installed Kibana and Elasticsearch, now I am able to access both with localhost. How to make it accessible from another machine within same network. is there any webserver like nginx/tomcat need to install? Please h… --- ## [Elastic serveur down number of documents exeed 2147483519](https://discuss.elastic.co/t/elastic-serveur-down-number-of-documents-exeed-2147483519/194464)
**Author:** [@EVOTYS](https://discuss.elastic.co/u/EVOTYS)\ **Replies:** 3\ **Last updated:** [August 23, 2019, 1:46pm UTC](https://discuss.elastic.co/t/elastic-serveur-down-number-of-documents-exeed-2147483519/194464 "2019-08-23T13:46:41Z")
J'ai un serveur elastic primaire du cluster qui démarre puis s'arrête au bout d'une minute maximum. Dans les logs, je retrouve l'erreur suivante depuis la mise à jour en 7.3\_1 (mais je pense que ce n'est pas lié) Cause… --- ## [Can't join hot node to master node](https://discuss.elastic.co/t/cant-join-hot-node-to-master-node/196540)
**Author:** [@Usama\_waqar](https://discuss.elastic.co/u/Usama_waqar)\ **Replies:** 0\ **Last updated:** [August 23, 2019, 1:36pm UTC](https://discuss.elastic.co/t/cant-join-hot-node-to-master-node/196540 "2019-08-23T13:36:47Z")
I want to make cluster of 3 master nodes and 6 hot nodes. So i want to join hot node with master node but i am facing following error. join validation on cluster state with a different cluster uuid el3dZYW5QDO0xmPQi6\_P8… --- ## [Finding all patterns that match](https://discuss.elastic.co/t/finding-all-patterns-that-match/196539)
**Author:** [@sanketn](https://discuss.elastic.co/u/sanketn)\ **Replies:** 0\ **Last updated:** [August 23, 2019, 1:36pm UTC](https://discuss.elastic.co/t/finding-all-patterns-that-match/196539 "2019-08-23T13:36:17Z")
I am just starting with logstash; I have a use case where bunch of logs(each line is a json) are persisted to S3 by an external service. I have bunch of filters that represents some field values in this log(e.g. key1=val… --- ## [Date Histogram based on aggregate total values](https://discuss.elastic.co/t/date-histogram-based-on-aggregate-total-values/196505)
**Author:** [@ivoecpereira](https://discuss.elastic.co/u/ivoecpereira)\ **Replies:** 0\ **Last updated:** [August 23, 2019, 11:03am UTC](https://discuss.elastic.co/t/date-histogram-based-on-aggregate-total-values/196505 "2019-08-23T11:03:36Z")
Hello, I have an index that contains documents such as the follow: { "event" : "pageView", "owner" : "5dbec3a4-55bf-4c83-912e-6ddb56623bc4", "session" : "c17b4d6c-dfea-4ecb-8c6f-7401f8f8595a", "createdAt" : "20… --- ## [Histogram and calendar\_interval](https://discuss.elastic.co/t/histogram-and-calendar-interval/196407)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [August 23, 2019, 1:30pm UTC](https://discuss.elastic.co/t/histogram-and-calendar-interval/196407 "2019-08-23T13:30:24Z")
I have sql with histogram and interval now after upgrade to 7.x it complains that it will be deprecated. select histogram(status\_achieved, INTERVAL 1 day) as d but when I type select histogram(status\_achieved, FIXED\_… --- ## [Datatype string to state/country type](https://discuss.elastic.co/t/datatype-string-to-state-country-type/196345)
**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 12:55pm UTC](https://discuss.elastic.co/t/datatype-string-to-state-country-type/196345 "2019-08-23T12:55:34Z")
Hi all, i have a fields in the document with the type as string but it's actually city, state and country and now i want to create visualization based on map for the same. what should i do in order to get the desired r… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1940) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1942)