# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=306 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 307 --- ## [Only one record gets created in the Elastic search](https://discuss.elastic.co/t/only-one-record-gets-created-in-the-elastic-search/342603)
**Author:** [@almostepic](https://discuss.elastic.co/u/almostepic)\ **Replies:** 10\ **Last updated:** [September 11, 2023, 12:16pm UTC](https://discuss.elastic.co/t/only-one-record-gets-created-in-the-elastic-search/342603 "2023-09-11T12:16:26Z")
I am using Logstash and created a conf file which allows me to input data into Elasticsearch. The data is related to git statistics from azure as I am creating a dashboard which will help to see information such as tota… --- ## [Configure Kibana With out Enrollment Token](https://discuss.elastic.co/t/configure-kibana-with-out-enrollment-token/342587)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 6\ **Last updated:** [September 11, 2023, 11:52am UTC](https://discuss.elastic.co/t/configure-kibana-with-out-enrollment-token/342587 "2023-09-11T11:52:46Z")
Hi Team, Could you please help me to configure Kibana with elastic cluster without an enrollment token? Due to some constraint, I had removed the security settings from elasticsearch.yml file due to which I am not able… --- ## [Elasticsearch system indices](https://discuss.elastic.co/t/elasticsearch-system-indices/342737)
**Author:** [@Swapnadeep\_Mondal](https://discuss.elastic.co/u/Swapnadeep_Mondal)\ **Replies:** 0\ **Last updated:** [September 11, 2023, 11:45am UTC](https://discuss.elastic.co/t/elasticsearch-system-indices/342737 "2023-09-11T11:45:11Z")
Hi team, we are using self self-managed Elasticsearch cluster. And we are using self-monitoring monitoring. So Elasticsearch creates monitoring logs named ".monitoring-es-7-" automatically and these indices are not ass… --- ## [How to whitelist a hunreds nested field](https://discuss.elastic.co/t/how-to-whitelist-a-hunreds-nested-field/342563)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 1\ **Last updated:** [September 11, 2023, 10:36am UTC](https://discuss.elastic.co/t/how-to-whitelist-a-hunreds-nested-field/342563 "2023-09-11T10:36:04Z")
I plan to whitelist around 600 fields from 3000 fields in my index pattern but how do I do it? if I use mutate rename and then use mutate remove to delete the rest of it. it will put so much work into it. I wonder if th… --- ## [Merge two indices created by two different Logstash conf file](https://discuss.elastic.co/t/merge-two-indices-created-by-two-different-logstash-conf-file/342705)
**Author:** [@Priyaansh\_Dwivedi](https://discuss.elastic.co/u/Priyaansh_Dwivedi)\ **Replies:** 2\ **Last updated:** [September 11, 2023, 9:46am UTC](https://discuss.elastic.co/t/merge-two-indices-created-by-two-different-logstash-conf-file/342705 "2023-09-11T09:46:07Z")
I have two logs from Jitsi Meet application: jicofo.log and jvb.log. These logs are transferred from Filebeat to Logstash. I have separate Logstash configuration files for both incoming logs, and they are stored in separ… --- ## [How to get matched documents from ElasticSearch for a nested array fields matching specified values](https://discuss.elastic.co/t/how-to-get-matched-documents-from-elasticsearch-for-a-nested-array-fields-matching-specified-values/342724)
**Author:** [@Nid](https://discuss.elastic.co/u/Nid)\ **Replies:** 0\ **Last updated:** [September 11, 2023, 9:12am UTC](https://discuss.elastic.co/t/how-to-get-matched-documents-from-elasticsearch-for-a-nested-array-fields-matching-specified-values/342724 "2023-09-11T09:12:04Z")
I am using elasticsearch-8.7.0. . I am a beginner, stuck on one thing. Please help. I have defined a mapping as below: mappings = { "properties": { "change\_id": {"type": "text", "analyzer": "english"}, "changes": { … --- ## [Logstash input json splitted by newline “\\n”](https://discuss.elastic.co/t/logstash-input-json-splitted-by-newline-n/342719)
**Author:** [@tomaxp13](https://discuss.elastic.co/u/tomaxp13)\ **Replies:** 0\ **Last updated:** [September 11, 2023, 8:33am UTC](https://discuss.elastic.co/t/logstash-input-json-splitted-by-newline-n/342719 "2023-09-11T08:33:45Z")
I send the bulk to logstash where the jsons are separated by a newline. it looks like that: {"tenantId":"abcdefg","userSessionId":"zxxxxxxxxxxxxxx","startTime":1234,"endTime":12345,"duration":111,"internalUserId":"1234… --- ## [CompressingStoredFieldsReader instances take up a lot of memory](https://discuss.elastic.co/t/compressingstoredfieldsreader-instances-take-up-a-lot-of-memory/342717)
**Author:** [@emmning](https://discuss.elastic.co/u/emmning)\ **Replies:** 0\ **Last updated:** [September 11, 2023, 8:17am UTC](https://discuss.elastic.co/t/compressingstoredfieldsreader-instances-take-up-a-lot-of-memory/342717 "2023-09-11T08:17:16Z")
Hello folks Our clients encountered errors below recently when performing index and query requests: TransportError(429, u'circuit\_breaking\_exception', {u'status': 429, u'error': {u'bytes\_wanted': 32385970160, u'durabil… --- ## [Merge two indexes to one](https://discuss.elastic.co/t/merge-two-indexes-to-one/342585)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 4\ **Last updated:** [September 11, 2023, 6:57am UTC](https://discuss.elastic.co/t/merge-two-indexes-to-one/342585 "2023-09-11T06:57:45Z")
Hi i would like to merge two indexes to one index, with same fields except for one field. i tried the reindex api but it is not working with regular expressions in the indexname. my index has timestamp attached to it. s… --- ## [Logstash Parallelism (pipeline workers) does not work with Persistent Queue](https://discuss.elastic.co/t/logstash-parallelism-pipeline-workers-does-not-work-with-persistent-queue/342673)
**Author:** [@zalseryani](https://discuss.elastic.co/u/zalseryani)\ **Replies:** 2\ **Last updated:** [September 11, 2023, 6:44am UTC](https://discuss.elastic.co/t/logstash-parallelism-pipeline-workers-does-not-work-with-persistent-queue/342673 "2023-09-11T06:44:15Z")
Issue We found that when setting pipeline.workers to 4 and having 4 CPU, filters and output were not running in parallel, while disabling the persistence queue and relying on memory , the parallel workers were working … --- ## [Logstash failed to parse field \[host\] of type \[text\] in document](https://discuss.elastic.co/t/logstash-failed-to-parse-field-host-of-type-text-in-document/342697)
**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\ **Replies:** 1\ **Last updated:** [September 11, 2023, 6:38am UTC](https://discuss.elastic.co/t/logstash-failed-to-parse-field-host-of-type-text-in-document/342697 "2023-09-11T06:38:19Z")
\[2023-09-10T19:02:57,621\]\[WARN \]\[logstash.outputs.amazonelasticsearch\]\[main\]\[58792cc6d6e46359a72de39af72a6b76e760ccb0beb773f15a78ec2ef0b24671\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_… --- ## ["Elasticsearch" integration not displaying data in \[Elasticsearch\] Ingest Pipelines dashboard](https://discuss.elastic.co/t/elasticsearch-integration-not-displaying-data-in-elasticsearch-ingest-pipelines-dashboard/342614)
**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\ **Replies:** 3\ **Last updated:** [September 11, 2023, 6:24am UTC](https://discuss.elastic.co/t/elasticsearch-integration-not-displaying-data-in-elasticsearch-ingest-pipelines-dashboard/342614 "2023-09-11T06:24:37Z")
The \[Elasticsearch\] Ingest Pipelines dashboard has very limited visualisations populated with data. Please see the screenshot. Is it that the dashboards aren't setup correctly or is there some other issue? Thanks in ad… --- ## [Combining two fields from tow different documents within the same index based on conditions](https://discuss.elastic.co/t/combining-two-fields-from-tow-different-documents-within-the-same-index-based-on-conditions/342708)
**Author:** [@DivyaDileep](https://discuss.elastic.co/u/DivyaDileep)\ **Replies:** 0\ **Last updated:** [September 11, 2023, 6:12am UTC](https://discuss.elastic.co/t/combining-two-fields-from-tow-different-documents-within-the-same-index-based-on-conditions/342708 "2023-09-11T06:12:56Z")
I am having data as below in one of the index @timestamp instance\_name dskIndex dskPercent dskPath Sep 8, 2023 @ 21:45:27.332 ssc-b 3 - … --- ## ["Error" Icon displayed in random times when opening kibana dashboard](https://discuss.elastic.co/t/error-icon-displayed-in-random-times-when-opening-kibana-dashboard/342646)
**Author:** [@mostafaelsayed](https://discuss.elastic.co/u/mostafaelsayed)\ **Replies:** 3\ **Last updated:** [September 11, 2023, 4:36am UTC](https://discuss.elastic.co/t/error-icon-displayed-in-random-times-when-opening-kibana-dashboard/342646 "2023-09-11T04:36:36Z")
Hello, I have a couple of dashboards in kibana, where each one can have more than 10 views (mostly data tables and charts). Most of the time, I encounter this Error Icon (shown in random views, no specifc ones) as show… --- ## [How to Read Real time data from url (.php real time file) and send data to elasticsearch? is there any method in logstash or filebeat to read real time data from url.?](https://discuss.elastic.co/t/how-to-read-real-time-data-from-url-php-real-time-file-and-send-data-to-elasticsearch-is-there-any-method-in-logstash-or-filebeat-to-read-real-time-data-from-url/342572)
**Author:** [@bbkunbi](https://discuss.elastic.co/u/bbkunbi)\ **Replies:** 2\ **Last updated:** [September 11, 2023, 4:31am UTC](https://discuss.elastic.co/t/how-to-read-real-time-data-from-url-php-real-time-file-and-send-data-to-elasticsearch-is-there-any-method-in-logstash-or-filebeat-to-read-real-time-data-from-url/342572 "2023-09-11T04:31:31Z")
TOPIC: Fetch data from url and send to Elasticsearch. In php file (Ex: https://temeprature.co/temp.log) my real time data is written. i want to read this latest data log and send it to Elasticsearch how to do this task? … --- ## [Grok pattern matching both the logs](https://discuss.elastic.co/t/grok-pattern-matching-both-the-logs/342586)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 4\ **Last updated:** [September 11, 2023, 4:26am UTC](https://discuss.elastic.co/t/grok-pattern-matching-both-the-logs/342586 "2023-09-11T04:26:19Z")
Hi i have two types of logs, which differ just by one value at the end. can i get a single grok pattern to match both the files \[08/Sep/2023:13:28:50 +0530\] | 404 | 1 ms | 773 B | 127.0.0.1 | - | - | - | "GET /… --- ## [Kibana Graph Plugin - Error](https://discuss.elastic.co/t/kibana-graph-plugin-error/342683)
**Author:** [@drggfish](https://discuss.elastic.co/u/drggfish)\ **Replies:** 1\ **Last updated:** [September 11, 2023, 4:06am UTC](https://discuss.elastic.co/t/kibana-graph-plugin-error/342683 "2023-09-11T04:06:53Z")
I am getting errors on the Graph Plugin when I try to use fields of type "double." There are no errors with fields of type "long." Does the Graph Plugin support doubles? Here is the Error: Error : unsupported\_operatio… --- ## [Generate monthly report from elastic index](https://discuss.elastic.co/t/generate-monthly-report-from-elastic-index/342691)
**Author:** [@JasonREC](https://discuss.elastic.co/u/JasonREC)\ **Replies:** 0\ **Last updated:** [September 11, 2023, 2:56am UTC](https://discuss.elastic.co/t/generate-monthly-report-from-elastic-index/342691 "2023-09-11T02:56:54Z")
Hi, I want to generate a monthly report from my elastic index Currently, I have an index which contains time series data from July to now(Sep) after September, I want to generate the summary report of July, Aug And Se… --- ## [How does Logstash know the host.hostname field?](https://discuss.elastic.co/t/how-does-logstash-know-the-host-hostname-field/342666)
**Author:** [@Poubelle\_Dirty](https://discuss.elastic.co/u/Poubelle_Dirty)\ **Replies:** 4\ **Last updated:** [September 10, 2023, 3:17pm UTC](https://discuss.elastic.co/t/how-does-logstash-know-the-host-hostname-field/342666 "2023-09-10T15:17:26Z")
Hello, I don't find the information and I think it's about ECS. I have a really simple config on logtash that uses syslog input, grok parsing and inject into elastic cluster. input { syslog { host =\> "0.0.0.0" … --- ## [Elasitc search date issue](https://discuss.elastic.co/t/elasitc-search-date-issue/342682)
**Author:** [@varun\_bisht](https://discuss.elastic.co/u/varun_bisht)\ **Replies:** 0\ **Last updated:** [September 10, 2023, 1:26pm UTC](https://discuss.elastic.co/t/elasitc-search-date-issue/342682 "2023-09-10T13:26:48Z")
Hi i am using this curl to create mapping - curl --cacert http\_ca.crt -u elastic:$ELASTIC\_PASSWORD -X PUT "https://DNS:9200/elasticdate-6?pretty=" -H 'content-type: application/json' -H 'user-agent: -lContent-Type: app… --- ## [Troubleshooting Kibana Dashboard Configuration for Metricbeat Modules](https://discuss.elastic.co/t/troubleshooting-kibana-dashboard-configuration-for-metricbeat-modules/342190)
**Author:** [@MasoudLakestani](https://discuss.elastic.co/u/MasoudLakestani)\ **Replies:** 4\ **Last updated:** [September 10, 2023, 10:59am UTC](https://discuss.elastic.co/t/troubleshooting-kibana-dashboard-configuration-for-metricbeat-modules/342190 "2023-09-10T10:59:20Z")
How can I configure Kibana to display monitoring dashboards for the PostgreSQL and System modules when I've already set up these modules in the Metricbeat configuration file (metricbeat.yml )? While I can see that Elasti… --- ## [Alert when Log Source last event received is \< 24 Hours](https://discuss.elastic.co/t/alert-when-log-source-last-event-received-is-24-hours/342665)
**Author:** [@Shinej](https://discuss.elastic.co/u/Shinej)\ **Replies:** 1\ **Last updated:** [September 9, 2023, 9:40pm UTC](https://discuss.elastic.co/t/alert-when-log-source-last-event-received-is-24-hours/342665 "2023-09-09T21:40:50Z")
Hello All, Im trying create an alert when when Log Source last event received is \< 24 Hours OR a dashboard which displays log Source which is not sending logs since last 24 hours. I was able to build a dashboard with l… --- ## [ElasticSearch + Kibana + Logstash Config in Windows](https://discuss.elastic.co/t/elasticsearch-kibana-logstash-config-in-windows/342550)
**Author:** [@dfir](https://discuss.elastic.co/u/dfir)\ **Replies:** 1\ **Last updated:** [September 8, 2023, 10:10pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-logstash-config-in-windows/342550 "2023-09-08T22:10:09Z")
I am working on configuring Elasticsearch with Kibana and Logstash. My goal is to be able to import AWS S3 Bucket Access logs, cloudtrail and other aws logs into Elastic either by manual import or via logstash. When I … --- ## [Logstash 7.17 keystore - get value by variable key](https://discuss.elastic.co/t/logstash-7-17-keystore-get-value-by-variable-key/342446)
**Author:** [@bonyolult](https://discuss.elastic.co/u/bonyolult)\ **Replies:** 4\ **Last updated:** [September 8, 2023, 8:24pm UTC](https://discuss.elastic.co/t/logstash-7-17-keystore-get-value-by-variable-key/342446 "2023-09-08T20:24:59Z")
Hello, long story short: i must process logs that are encryped with EC keys. The customer requires the keys' passwords to be stored in Logstash keystore where the key is the p12's serial and the value is the password. T… --- ## [Filebeat filtering incoming syslogs?](https://discuss.elastic.co/t/filebeat-filtering-incoming-syslogs/342458)
**Author:** [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Replies:** 5\ **Last updated:** [September 8, 2023, 7:16pm UTC](https://discuss.elastic.co/t/filebeat-filtering-incoming-syslogs/342458 "2023-09-08T19:16:01Z")
I'm setting up Filebeat (8.9) on an Elasticsearch (8.9) instance, and it looks like Filebeat is filtering logs from external hosts. Here's the relevant section from my Filebeat config: - type: syslog format: auto p… --- ## [What happens when Redis output plugin can't deliver a message?](https://discuss.elastic.co/t/what-happens-when-redis-output-plugin-cant-deliver-a-message/342630)
**Author:** [@noobiewan](https://discuss.elastic.co/u/noobiewan)\ **Replies:** 2\ **Last updated:** [September 8, 2023, 6:49pm UTC](https://discuss.elastic.co/t/what-happens-when-redis-output-plugin-cant-deliver-a-message/342630 "2023-09-08T18:49:17Z")
Hello there, I'm trying to understand what happens when an output plugin can't deliver a message. We are using logstash-output-redis to send batched messages to Redis and I would like to understand what happens if Redis… --- ## [Deploying Elasticsearch latest version in Anthos on-prem K8s cluster](https://discuss.elastic.co/t/deploying-elasticsearch-latest-version-in-anthos-on-prem-k8s-cluster/342636)
**Author:** [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Replies:** 0\ **Last updated:** [September 8, 2023, 5:30pm UTC](https://discuss.elastic.co/t/deploying-elasticsearch-latest-version-in-anthos-on-prem-k8s-cluster/342636 "2023-09-08T17:30:03Z")
Hello Experts, I'm new to Elasticsearch, I want to deploy elasticsearch v 8.9.1 into Anthos on-pre mK8s cluster, and I used the attached .yaml files for the same, I have the below questions. Is the attached yaml files… --- ## [Grok pattern to account for #](https://discuss.elastic.co/t/grok-pattern-to-account-for/342616)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 1\ **Last updated:** [September 8, 2023, 4:46pm UTC](https://discuss.elastic.co/t/grok-pattern-to-account-for/342616 "2023-09-08T16:46:26Z")
I have log messages coming in and a few of them have one of three special characters: @, -, or #. How can I get grok to ignore the hashtag without removing it from the new field? Below is the code snippet I'm using. It… --- ## [ECK 8.7 Fleet managed Agents, Create Policy, Add Integrations & Agent enrollment via code](https://discuss.elastic.co/t/eck-8-7-fleet-managed-agents-create-policy-add-integrations-agent-enrollment-via-code/342626)
**Author:** [@mayur.kadam](https://discuss.elastic.co/u/mayur.kadam)\ **Replies:** 0\ **Last updated:** [September 8, 2023, 3:26pm UTC](https://discuss.elastic.co/t/eck-8-7-fleet-managed-agents-create-policy-add-integrations-agent-enrollment-via-code/342626 "2023-09-08T15:26:33Z")
We have ECK (2.7) installed on our AKS cluster and used Elastic agents for policy orchestration managed by fleet server. The Policy creation and addition of Integration to the Policy is currently done via UI console and … --- ## [Remove event.original from logstash as it comes in every document of logstash version 8.8.2(ECS)](https://discuss.elastic.co/t/remove-event-original-from-logstash-as-it-comes-in-every-document-of-logstash-version-8-8-2-ecs/342612)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [September 8, 2023, 3:12pm UTC](https://discuss.elastic.co/t/remove-event-original-from-logstash-as-it-comes-in-every-document-of-logstash-version-8-8-2-ecs/342612 "2023-09-08T15:12:18Z")
Hello All, I am facing major issue with logstash after migration from 7.9.1 to 8.8.2 version. Elasticsearch/Logstash 8.X version has ECS compatibility enabled by default.This adds new field event.original in every do… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=305) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=307)