# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1947

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1948

---

## [Logstash date filter convert @timestamp to timestamp in log file issue](https://discuss.elastic.co/t/logstash-date-filter-convert-timestamp-to-timestamp-in-log-file-issue/196100)

<div class="topic-metadata">

**Author:** [@dcrocker](https://discuss.elastic.co/u/dcrocker)\
**Replies:** 2\
**Last updated:** [August 21, 2019, 2:49pm UTC](https://discuss.elastic.co/t/logstash-date-filter-convert-timestamp-to-timestamp-in-log-file-issue/196100 "2019-08-21T14:49:18Z")

</div>

I am trying to convert the log file time stamp to @timestamp, but it is not working. Following is the date in the job log: "2019-08-20T11:52:18.4906519-04:00" Following is the date filter: date { # use timestamp from…

---

## [RestHighLevelClient: Force merge async and SocketTimeoutException](https://discuss.elastic.co/t/resthighlevelclient-force-merge-async-and-sockettimeoutexception/196133)

<div class="topic-metadata">

**Author:** [@xavierfacq](https://discuss.elastic.co/u/xavierfacq)\
**Replies:** 0\
**Last updated:** [August 21, 2019, 2:32pm UTC](https://discuss.elastic.co/t/resthighlevelclient-force-merge-async-and-sockettimeoutexception/196133 "2019-08-21T14:32:48Z")

</div>

Hi, I have the following problem after trying to upgrade my Java code to the RestHighLevelClient. At the end of a big process of reindexation, there is an old piece of code that run a Force Merge. I have replaced with…

---

## [What is the best way of visualizing SonarQube analysis from Elasticsearch using Kibana?](https://discuss.elastic.co/t/what-is-the-best-way-of-visualizing-sonarqube-analysis-from-elasticsearch-using-kibana/192606)

<div class="topic-metadata">

**Author:** [@berko](https://discuss.elastic.co/u/berko)\
**Replies:** 4\
**Last updated:** [August 21, 2019, 2:29pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-of-visualizing-sonarqube-analysis-from-elasticsearch-using-kibana/192606 "2019-08-21T14:29:52Z")

</div>

Hi, I'm trying to visualize SonarQube analysis results. However, I couldn't figure out which configurations to follow. SonarQube version is 7.9 I found this https://discuss.elastic.co/t/elk-sonarqube/127732 discussion …

---

## [Index mappings - IP type also parses port?](https://discuss.elastic.co/t/index-mappings-ip-type-also-parses-port/195993)

<div class="topic-metadata">

**Author:** [@alonchis](https://discuss.elastic.co/u/alonchis)\
**Replies:** 2\
**Last updated:** [August 21, 2019, 2:22pm UTC](https://discuss.elastic.co/t/index-mappings-ip-type-also-parses-port/195993 "2019-08-21T14:22:39Z")

</div>

Hi people, I been slowly trying to change my mappings from text to "ip". However, some logs include the port. Before i go on and modify the grok filters, I wonder if this data type can handle IP:PORT fields. Thanks for…

---

## [Simple\_query\_string check if field exists](https://discuss.elastic.co/t/simple-query-string-check-if-field-exists/196106)

<div class="topic-metadata">

**Author:** [@Ennui](https://discuss.elastic.co/u/Ennui)\
**Replies:** 1\
**Last updated:** [August 21, 2019, 2:00pm UTC](https://discuss.elastic.co/t/simple-query-string-check-if-field-exists/196106 "2019-08-21T14:00:23Z")

</div>

Hi, How would I use simple\_query\_string to check if a field exists? For example, say if I had the following documents PUT test\_index/\_doc/1 { "user" : "test", "message" : "a" } PUT test\_index/\_doc/2 { "user" : "…

---

## [Elasticsearch 7.x support for ARM64 (Raspberry Pi 4 B)](https://discuss.elastic.co/t/elasticsearch-7-x-support-for-arm64-raspberry-pi-4-b/187976)

<div class="topic-metadata">

**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\
**Replies:** 10\
**Last updated:** [August 21, 2019, 1:37pm UTC](https://discuss.elastic.co/t/elasticsearch-7-x-support-for-arm64-raspberry-pi-4-b/187976 "2019-08-21T13:37:13Z")

</div>

Previous versions of Elasticsearch (6.x, etc.) could easily be installed on ARM64 but Elasticsearch 7.x gives an error: "package architecture (amd64) does not match system (armhf)" Previously, I was able to install pac…

---

## [Bug Report : Memory leak when readiness probe Curls to check the cluster health when security is enabled](https://discuss.elastic.co/t/bug-report-memory-leak-when-readiness-probe-curls-to-check-the-cluster-health-when-security-is-enabled/193445)

<div class="topic-metadata">

**Author:** [@Cyril\_James](https://discuss.elastic.co/u/Cyril_James)\
**Replies:** 23\
**Last updated:** [August 21, 2019, 1:24pm UTC](https://discuss.elastic.co/t/bug-report-memory-leak-when-readiness-probe-curls-to-check-the-cluster-health-when-security-is-enabled/193445 "2019-08-21T13:24:11Z")

</div>

When I install elasticsearch using "https://github.com/elastic/helm-charts/tree/master/elasticsearch" with security enabled, I could observe that there is memory leak. Memory usage by each pod keeps on increasing and it …

---

## [How to create an histogram of substring occurences?](https://discuss.elastic.co/t/how-to-create-an-histogram-of-substring-occurences/193942)

<div class="topic-metadata">

**Author:** [@s7ygian](https://discuss.elastic.co/u/s7ygian)\
**Replies:** 4\
**Last updated:** [August 21, 2019, 1:15pm UTC](https://discuss.elastic.co/t/how-to-create-an-histogram-of-substring-occurences/193942 "2019-08-21T13:15:29Z")

</div>

Hi, I have the following 3 exemplary JSON log entries: { hint\_lists: \[{ "hint\_list": \["Entity X with number 1 is unknown!", "Entity Y with number 2 is unknown!", "Entity Z with number 3 unkown!"\] }, { …

---

## [Status Failure for Slack | Watcher](https://discuss.elastic.co/t/status-failure-for-slack-watcher/196086)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 2\
**Last updated:** [August 21, 2019, 1:06pm UTC](https://discuss.elastic.co/t/status-failure-for-slack-watcher/196086 "2019-08-21T13:06:54Z")

</div>

Hi, My slack message is failing and I was hoping someone could help me with figuring out why. // Action statement thus far "actions": { "notify-slack": { "throttle\_period": "5m", "slack": { "…

---

## [Too Many PoolArena$HeapArena Instances can not be Collected](https://discuss.elastic.co/t/too-many-poolarena-heaparena-instances-can-not-be-collected/196113)

<div class="topic-metadata">

**Author:** [@Liam](https://discuss.elastic.co/u/Liam)\
**Replies:** 0\
**Last updated:** [August 21, 2019, 12:47pm UTC](https://discuss.elastic.co/t/too-many-poolarena-heaparena-instances-can-not-be-collected/196113 "2019-08-21T12:47:37Z")

</div>

Default configuration and singleton PreBuiltTransportClient that never be closed. What's the possible reason?

---

## [Index not created, logstash](https://discuss.elastic.co/t/index-not-created-logstash/196110)

<div class="topic-metadata">

**Author:** [@hunter84](https://discuss.elastic.co/u/hunter84)\
**Replies:** 0\
**Last updated:** [August 21, 2019, 12:38pm UTC](https://discuss.elastic.co/t/index-not-created-logstash/196110 "2019-08-21T12:38:13Z")

</div>

Hello! I have windows 2012 server, it runs an ELK stack. I am trying to parse using logstash, the index has not yet been created in elastiсsearch, and it does not appear after running the config file. input { file { …

---

## [Dropdown Filter CSS](https://discuss.elastic.co/t/dropdown-filter-css/195744)

<div class="topic-metadata">

**Author:** [@gbarnett](https://discuss.elastic.co/u/gbarnett)\
**Replies:** 11\
**Last updated:** [August 21, 2019, 12:31pm UTC](https://discuss.elastic.co/t/dropdown-filter-css/195744 "2019-08-21T12:31:13Z")

</div>

Does anyone have an example of how to style the dropdown filter element?

---

## [Automate Reindex API while source is still indexing](https://discuss.elastic.co/t/automate-reindex-api-while-source-is-still-indexing/195099)

<div class="topic-metadata">

**Author:** [@abaullosa](https://discuss.elastic.co/u/abaullosa)\
**Replies:** 4\
**Last updated:** [August 21, 2019, 12:30pm UTC](https://discuss.elastic.co/t/automate-reindex-api-while-source-is-still-indexing/195099 "2019-08-21T12:30:28Z")

</div>

Hi. Im using ES 7. And I need to automate a process on Kibana so when I create a new Index, I need to \_reindex it using a query. Im able to do this manually but, How do I automate this process so everytime I have a new …

---

## [Matching direction in dissect](https://discuss.elastic.co/t/matching-direction-in-dissect/195995)

<div class="topic-metadata">

**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\
**Replies:** 3\
**Last updated:** [August 21, 2019, 12:29pm UTC](https://discuss.elastic.co/t/matching-direction-in-dissect/195995 "2019-08-21T12:29:01Z")

</div>

I have log lines like the following: src=192.168.100.1:502 rest of message src=\[::1\]:304 message details The format is \<ip address\>:\<port\>. I could use dissect easily except for the case shown in the second line. This…

---

## [Getting error while running logstash](https://discuss.elastic.co/t/getting-error-while-running-logstash/196035)

<div class="topic-metadata">

**Author:** [@jainabhishek0406](https://discuss.elastic.co/u/jainabhishek0406)\
**Replies:** 1\
**Last updated:** [August 21, 2019, 12:25pm UTC](https://discuss.elastic.co/t/getting-error-while-running-logstash/196035 "2019-08-21T12:25:53Z")

</div>

facing issue and getting below error \[2019-08-19T14:27:41,342\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"Java: :JavaLang::NoSuchMethodErr…

---

## [Logstash throwing error .Unexpected character (‘\<’ (code 60))](https://discuss.elastic.co/t/logstash-throwing-error-unexpected-character-code-60/195005)

<div class="topic-metadata">

**Author:** [@prabhat\_ranjan](https://discuss.elastic.co/u/prabhat_ranjan)\
**Replies:** 11\
**Last updated:** [August 21, 2019, 12:14pm UTC](https://discuss.elastic.co/t/logstash-throwing-error-unexpected-character-code-60/195005 "2019-08-21T12:14:58Z")

</div>

Hi team, I am using ELK on the cloud. Using filebeat to send data to logstash. Logstash sends to ES which pushes it in Kibana.It appears most of the data is properly parsed and sent to Kibana successfully. There are ins…

---

## [Parse json as string](https://discuss.elastic.co/t/parse-json-as-string/196069)

<div class="topic-metadata">

**Author:** [@Ivan\_Martos](https://discuss.elastic.co/u/Ivan_Martos)\
**Replies:** 1\
**Last updated:** [August 21, 2019, 12:07pm UTC](https://discuss.elastic.co/t/parse-json-as-string/196069 "2019-08-21T12:07:12Z")

</div>

I'm having issues with parsing JSON as String using json filter Sample stdout output from logstash without any filters looks like this { "agent": { "type": "filebeat", "ephemeral\_id": "0a8384b3-c4df…

---

## [Setting up kibana dev environnement : error 403 Forbidden](https://discuss.elastic.co/t/setting-up-kibana-dev-environnement-error-403-forbidden/195871)

<div class="topic-metadata">

**Author:** [@TheEternalLearner](https://discuss.elastic.co/u/TheEternalLearner)\
**Replies:** 2\
**Last updated:** [August 21, 2019, 11:22am UTC](https://discuss.elastic.co/t/setting-up-kibana-dev-environnement-error-403-forbidden/195871 "2019-08-21T11:22:27Z")

</div>

Hello, I'm trying to create my custom kibana plugin and I'm having difficulties setting up the dev environnement. I'm working on a debian 9 vm and have followed the kibana contributing guide. after forking and clonning…

---

## [Match all words in any order but duplicates consider as individual](https://discuss.elastic.co/t/match-all-words-in-any-order-but-duplicates-consider-as-individual/196090)

<div class="topic-metadata">

**Author:** [@anjireddy543](https://discuss.elastic.co/u/anjireddy543)\
**Replies:** 0\
**Last updated:** [August 21, 2019, 11:08am UTC](https://discuss.elastic.co/t/match-all-words-in-any-order-but-duplicates-consider-as-individual/196090 "2019-08-21T11:08:26Z")

</div>

Hi, We have a text field which matches words in any order but when duplicate comes still both words need to exist. Below is my query and results "query": { "match": { "field": { "op…

---

## [Connect kinsta mysql](https://discuss.elastic.co/t/connect-kinsta-mysql/196089)

<div class="topic-metadata">

**Author:** [@zernalda](https://discuss.elastic.co/u/zernalda)\
**Replies:** 0\
**Last updated:** [August 21, 2019, 11:00am UTC](https://discuss.elastic.co/t/connect-kinsta-mysql/196089 "2019-08-21T11:00:05Z")

</div>

I want to connect my kinsta DB to visualize on kibana. but error when i run .conf in logstash. its my .conf = input { jdbc { jdbc\_connection\_string =\> "jdbc:mysql://35.187.353.208/db?useSSL=true&verifyServ…

---

## [Custom Elasticsearch plugin error not displaying in kibana 6.8](https://discuss.elastic.co/t/custom-elasticsearch-plugin-error-not-displaying-in-kibana-6-8/195951)

<div class="topic-metadata">

**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\
**Replies:** 5\
**Last updated:** [August 21, 2019, 10:51am UTC](https://discuss.elastic.co/t/custom-elasticsearch-plugin-error-not-displaying-in-kibana-6-8/195951 "2019-08-21T10:51:16Z")

</div>

Hello I have a custom elasticsearch plugin that returns a custom error message. Usually of type 400 In previous version of kibana 6.3\> This error would get passed to the client and be displayed. :smiley: I have recentl…

---

## [Loading map in kibana for coordinate map visualize](https://discuss.elastic.co/t/loading-map-in-kibana-for-coordinate-map-visualize/195588)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 3\
**Last updated:** [August 21, 2019, 10:42am UTC](https://discuss.elastic.co/t/loading-map-in-kibana-for-coordinate-map-visualize/195588 "2019-08-21T10:42:15Z")

</div>

hi all, i have an index with lon and lat information. now i want to create a coordinate map visualize so that show theses points on the map. notably, the kibana has been installed on a server with no access to internet.…

---

## [Splunk lookup file equivalent](https://discuss.elastic.co/t/splunk-lookup-file-equivalent/196015)

<div class="topic-metadata">

**Author:** [@wengsengtam](https://discuss.elastic.co/u/wengsengtam)\
**Replies:** 2\
**Last updated:** [August 21, 2019, 10:36am UTC](https://discuss.elastic.co/t/splunk-lookup-file-equivalent/196015 "2019-08-21T10:36:25Z")

</div>

Hello Elastic Forum members, I have been exploring the different possible data enrichments that are available in Splunk. However, I am trying to understand if there is a plugin or module that can be added to Elastic to …

---

## [Updated JDBC connection string but not seeing changes pull through](https://discuss.elastic.co/t/updated-jdbc-connection-string-but-not-seeing-changes-pull-through/196080)

<div class="topic-metadata">

**Author:** [@jared-nelson](https://discuss.elastic.co/u/jared-nelson)\
**Replies:** 0\
**Last updated:** [August 21, 2019, 10:01am UTC](https://discuss.elastic.co/t/updated-jdbc-connection-string-but-not-seeing-changes-pull-through/196080 "2019-08-21T10:01:50Z")

</div>

Hi everyone, New to ELK so will do my best to explain. We're using the JDBC input plugin and recently changed the MySQL server the conf file refers to in the connection string. However I wanted to confirm what steps ar…

---

## [Ingest node / source name](https://discuss.elastic.co/t/ingest-node-source-name/195892)

<div class="topic-metadata">

**Author:** [@thaideval](https://discuss.elastic.co/u/thaideval)\
**Replies:** 8\
**Last updated:** [August 21, 2019, 9:45am UTC](https://discuss.elastic.co/t/ingest-node-source-name/195892 "2019-08-21T09:45:08Z")

</div>

Hello, i am using filebeat for sending logs to elastic and ingest node for parsing with grok. my logs have 2 fields for datestamp - \> 1/2 is in the name of every file (Year-month-day-hour) and 1/2 is in the beginning …

---

## [How to apply time filter specific to visualization in spite applying global time range filter to the entire dashboard](https://discuss.elastic.co/t/how-to-apply-time-filter-specific-to-visualization-in-spite-applying-global-time-range-filter-to-the-entire-dashboard/195846)

<div class="topic-metadata">

**Author:** [@Shreemathi](https://discuss.elastic.co/u/Shreemathi)\
**Replies:** 2\
**Last updated:** [August 21, 2019, 9:34am UTC](https://discuss.elastic.co/t/how-to-apply-time-filter-specific-to-visualization-in-spite-applying-global-time-range-filter-to-the-entire-dashboard/195846 "2019-08-21T09:34:54Z")

</div>

I tried applying time filter specific to visualization. That is working only when the time range selection in Dashboard is later than the time filter range that i applied in visualization. For instance, consider i have a…

---

## [Connect node from internal network to external through dynamic dns](https://discuss.elastic.co/t/connect-node-from-internal-network-to-external-through-dynamic-dns/196073)

<div class="topic-metadata">

**Author:** [@heilwood](https://discuss.elastic.co/u/heilwood)\
**Replies:** 0\
**Last updated:** [August 21, 2019, 9:03am UTC](https://discuss.elastic.co/t/connect-node-from-internal-network-to-external-through-dynamic-dns/196073 "2019-08-21T09:03:17Z")

</div>

Is it possible to connect nodes from internal network with node from external network through dynamic dns. internal ip address: node1 - 192.168.1.1 node2 - 192.168.2.2 public dns: mypublic.ddns.net Public dns resol…

---

## [Logstash Twitter plugin issues](https://discuss.elastic.co/t/logstash-twitter-plugin-issues/195950)

<div class="topic-metadata">

**Author:** [@gur79](https://discuss.elastic.co/u/gur79)\
**Replies:** 1\
**Last updated:** [August 21, 2019, 9:23am UTC](https://discuss.elastic.co/t/logstash-twitter-plugin-issues/195950 "2019-08-21T09:23:07Z")

</div>

Hello Guys. Yesterday i tried to use Twitter Logstash input plugin to connect to Twitter Stream API to get tweets contain word "Twitter". the Question is, I run the Logstash for 2 hours and it didn't even return one st…

---

## [Kibana Visualization for netflow.application\_name](https://discuss.elastic.co/t/kibana-visualization-for-netflow-application-name/195642)

<div class="topic-metadata">

**Author:** [@Elena\_Kaidrikov](https://discuss.elastic.co/u/Elena_Kaidrikov)\
**Replies:** 6\
**Last updated:** [August 21, 2019, 5:33am UTC](https://discuss.elastic.co/t/kibana-visualization-for-netflow-application-name/195642 "2019-08-21T05:33:45Z")

</div>

Hello , Please help me to understand how to create a Visualization for netflow.application\_name . I don't see this field in the list on adding a new Visualization Thanks you for your help and support Elena

---

## [Embed Visualizations with authentication: CORS and preflight](https://discuss.elastic.co/t/embed-visualizations-with-authentication-cors-and-preflight/194053)

<div class="topic-metadata">

**Author:** [@apiras](https://discuss.elastic.co/u/apiras)\
**Replies:** 4\
**Last updated:** [August 21, 2019, 8:19am UTC](https://discuss.elastic.co/t/embed-visualizations-with-authentication-cors-and-preflight/194053 "2019-08-21T08:19:47Z")

</div>

Hi all, I read numerous post on authenticating in iframe-embedded Kibana dashboard but I did not found the solution of my problem. I'm using ES and Kibana 7.2.0. I set server.cors: true in config/kibana.yml. On the H…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1946)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1948)
