# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=624 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 625 --- ## [Fetch system date and time for remote serverd](https://discuss.elastic.co/t/fetch-system-date-and-time-for-remote-serverd/305739)
**Author:** [@Anagha\_nambiar](https://discuss.elastic.co/u/Anagha_nambiar)\ **Replies:** 6\ **Last updated:** [May 27, 2022, 11:54am UTC](https://discuss.elastic.co/t/fetch-system-date-and-time-for-remote-serverd/305739 "2022-05-27T11:54:47Z")
In Kibana dashboard, we would like to specifically get the system date and time of a remote server. We have installed metricbeat agent in that server. Could you please help to know how to use query in Kibana dashboard … --- ## [Elastic Search and Kibana is not working](https://discuss.elastic.co/t/elastic-search-and-kibana-is-not-working/305606)
**Author:** [@John\_Mari](https://discuss.elastic.co/u/John_Mari)\ **Replies:** 13\ **Last updated:** [May 27, 2022, 11:53am UTC](https://discuss.elastic.co/t/elastic-search-and-kibana-is-not-working/305606 "2022-05-27T11:53:08Z")
Hi Everyone, We installed Elasticsearch and Kibana in our Machine. Previously it was working fine. But, when we tried to access Elasticsearch and Kibana. Its showing following error. Can anyone guide us to solve the… --- ## [Delete documents in Enterprise Search](https://discuss.elastic.co/t/delete-documents-in-enterprise-search/305750)
**Author:** [@haris.sheikh](https://discuss.elastic.co/u/haris.sheikh)\ **Replies:** 2\ **Last updated:** [May 27, 2022, 11:26am UTC](https://discuss.elastic.co/t/delete-documents-in-enterprise-search/305750 "2022-05-27T11:26:45Z")
I wanted to delete documents in bulk in enterprise search and in documentation, I only found deleted documents by a list of ids. https://www.elastic.co/guide/en/app-search/8.2/documents.html#documents-delete but when … --- ## [Logstash not running own username](https://discuss.elastic.co/t/logstash-not-running-own-username/305703)
**Author:** [@bekk777](https://discuss.elastic.co/u/bekk777)\ **Replies:** 3\ **Last updated:** [May 27, 2022, 7:58am UTC](https://discuss.elastic.co/t/logstash-not-running-own-username/305703 "2022-05-27T07:58:20Z")
Hello, I am running this command: /usr/share/logstash/bin/logstash --debug --config.test\_and\_exit -f /etc/logstash/filebeat-test.conf I know many times published this kind of issue, but I'm getting errors yet. I tried… --- ## [Map Alert Rules to Kibana Widget](https://discuss.elastic.co/t/map-alert-rules-to-kibana-widget/305544)
**Author:** [@jsoule6](https://discuss.elastic.co/u/jsoule6)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 6:40am UTC](https://discuss.elastic.co/t/map-alert-rules-to-kibana-widget/305544 "2022-05-27T06:40:25Z")
Hello, We are looking to use Kibana dashboard capability to provide monitoring capability for our customer. We are going to be create alert rules based on numerous custom conditions and would like to map the rules to wi… --- ## [Logstash Pipeline for Nested data from sql](https://discuss.elastic.co/t/logstash-pipeline-for-nested-data-from-sql/305688)
**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\ **Replies:** 2\ **Last updated:** [May 27, 2022, 4:57am UTC](https://discuss.elastic.co/t/logstash-pipeline-for-nested-data-from-sql/305688 "2022-05-27T04:57:05Z")
Hi, I am trying to insert nested data from sqldb to Elasticsearch index. I create a query with joins and insert data into Elasticsearch index. I used aggregate, but it is not giving correct result. Mapping PUT testi… --- ## [Query explanation](https://discuss.elastic.co/t/query-explanation/305765)
**Author:** [@sean1223](https://discuss.elastic.co/u/sean1223)\ **Replies:** 0\ **Last updated:** [May 27, 2022, 4:04am UTC](https://discuss.elastic.co/t/query-explanation/305765 "2022-05-27T04:04:33Z")
Is there documentation explaining how to read the equation and the meaning of the symbols? Also, --- ## [Extract a field from a text field](https://discuss.elastic.co/t/extract-a-field-from-a-text-field/305756)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 3:33am UTC](https://discuss.elastic.co/t/extract-a-field-from-a-text-field/305756 "2022-05-27T03:33:39Z")
I'm trying to extract the fields that come within the "indicator" and "agentDetectionInfo" field, could someone help me? here's the log in json: { "\_index": "xxx", "\_type": "\_doc", "\_id": "xxxxxhvfUu\_M2V8K", "\_… --- ## [Adding new relic support to elasticsearch as a Windows service](https://discuss.elastic.co/t/adding-new-relic-support-to-elasticsearch-as-a-windows-service/305604)
**Author:** [@mmr11408](https://discuss.elastic.co/u/mmr11408)\ **Replies:** 7\ **Last updated:** [May 27, 2022, 2:01am UTC](https://discuss.elastic.co/t/adding-new-relic-support-to-elasticsearch-as-a-windows-service/305604 "2022-05-27T02:01:05Z")
I am adding new relic support to Elasticsearch on Windows. After adding -javaagent, ES starts up fine when invoked from CMD. But it will not start as a service. The error in system log viewer is "Incorrect Function". The… --- ## [Error 401 in kibana.log](https://discuss.elastic.co/t/error-401-in-kibana-log/305762)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 0\ **Last updated:** [May 27, 2022, 1:37am UTC](https://discuss.elastic.co/t/error-401-in-kibana-log/305762 "2022-05-27T01:37:40Z")
hello, I have this error appearing all the time in my kibana log. the web interface still works but i would like to resolve this error. can anyone suggest a solution? ps: i use a nginx reverse proxy in front of kibana. {… --- ## [Cannot invoke \\"String.length()\\" because \\"str\\" is null](https://discuss.elastic.co/t/cannot-invoke-string-length-because-str-is-null/305752)
**Author:** [@austin0918](https://discuss.elastic.co/u/austin0918)\ **Replies:** 3\ **Last updated:** [May 27, 2022, 12:54am UTC](https://discuss.elastic.co/t/cannot-invoke-string-length-because-str-is-null/305752 "2022-05-27T00:54:38Z")
Working on migrating Windows DNS logs to data stream and seeing a lot of errors. \[2022-05-26T13:43:37,457\]\[INFO \]\[logstash.outputs.elasticsearch\]\[filebeat-dns-dhcp\]\[7fe0474f97756847637aa742a5ac38f62e0e1460d0c70da893dabe… --- ## [Clean up unnecessary indices after upgrade Elastic Stack version](https://discuss.elastic.co/t/clean-up-unnecessary-indices-after-upgrade-elastic-stack-version/305586)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 4\ **Last updated:** [May 27, 2022, 12:13am UTC](https://discuss.elastic.co/t/clean-up-unnecessary-indices-after-upgrade-elastic-stack-version/305586 "2022-05-27T00:13:17Z")
Hi, after I've upgraded our Stack from version 7 to version 8, I see a lot of indices, that seem to be related to version 7 and therefore no longer in use. Unfortunately, I can't find any document, that shows a list of … --- ## [Understanding Elasticsearch Source Code](https://discuss.elastic.co/t/understanding-elasticsearch-source-code/305759)
**Author:** [@nikhilmehta](https://discuss.elastic.co/u/nikhilmehta)\ **Replies:** 0\ **Last updated:** [May 26, 2022, 11:47pm UTC](https://discuss.elastic.co/t/understanding-elasticsearch-source-code/305759 "2022-05-26T23:47:03Z")
Hello Everyone I am new to open source and quite new to reading a large Code Base, is their any particular guidelines, documentation or tutorials which helps one to do so for ES. I am a particularly interested how a ap… --- ## [How to delete the child document in the index](https://discuss.elastic.co/t/how-to-delete-the-child-document-in-the-index/305743)
**Author:** [@Udayaprakash\_S\_10d](https://discuss.elastic.co/u/Udayaprakash_S_10d)\ **Replies:** 1\ **Last updated:** [May 26, 2022, 9:46pm UTC](https://discuss.elastic.co/t/how-to-delete-the-child-document-in-the-index/305743 "2022-05-26T21:46:06Z")
i am new to the Elasticsearch .i want to delete the child document from the index ,i want the delete query for that --- ## [TLS Logstash](https://discuss.elastic.co/t/tls-logstash/305735)
**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\ **Replies:** 5\ **Last updated:** [May 26, 2022, 7:06pm UTC](https://discuss.elastic.co/t/tls-logstash/305735 "2022-05-26T19:06:23Z")
Hello guys, I have a beats input on a logstash pipeline using SSL /TLS: input { beats { port =\> 5044 ssl =\> true ssl\_certificate =\> "/etc/../mycert.pem" ssl\_key =\> "/etc/.../mycert.p… --- ## [Concatenation between two documents message value](https://discuss.elastic.co/t/concatenation-between-two-documents-message-value/305572)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 2\ **Last updated:** [May 26, 2022, 6:33pm UTC](https://discuss.elastic.co/t/concatenation-between-two-documents-message-value/305572 "2022-05-26T18:33:30Z")
Hi, we assume that i have 3 documents in Elasticsearch and here a example of messages that contains document 1 message : 2022-01-13 17:16:05 - request in formatHexDump is =\> 000: 12 15 46 77 77 55 | ak55s2 .... 000… --- ## [Connecting logstash on elastic with security enabled](https://discuss.elastic.co/t/connecting-logstash-on-elastic-with-security-enabled/305636)
**Author:** [@dlazure](https://discuss.elastic.co/u/dlazure)\ **Replies:** 6\ **Last updated:** [May 26, 2022, 5:32pm UTC](https://discuss.elastic.co/t/connecting-logstash-on-elastic-with-security-enabled/305636 "2022-05-26T17:32:46Z")
Hi I am trying to connect a plugin on elasticsearch with security enabled. The plugin is having an unrecoverable error and is restarting portion of logs of logstash \[2022-05-25T18:53:15,071\]\[INFO \]\[logstash.inputs.tc… --- ## [Different Timezones in syslog for some hosts](https://discuss.elastic.co/t/different-timezones-in-syslog-for-some-hosts/305737)
**Author:** [@syedabdullah](https://discuss.elastic.co/u/syedabdullah)\ **Replies:** 0\ **Last updated:** [May 26, 2022, 5:18pm UTC](https://discuss.elastic.co/t/different-timezones-in-syslog-for-some-hosts/305737 "2022-05-26T17:18:47Z")
Hi Everyone, I am relatively new to ELK stack I added a new source of syslog but that source is in UTC, When I forward the syslogs, I have its sources (hosts) in UTC and everything else in EST and once they go into Elas… --- ## [Stats requests to data nodes timing out while ingestion is happening](https://discuss.elastic.co/t/stats-requests-to-data-nodes-timing-out-while-ingestion-is-happening/305100)
**Author:** [@ethompson](https://discuss.elastic.co/u/ethompson)\ **Replies:** 7\ **Last updated:** [May 26, 2022, 5:07pm UTC](https://discuss.elastic.co/t/stats-requests-to-data-nodes-timing-out-while-ingestion-is-happening/305100 "2022-05-26T17:07:04Z")
I've got an on-prem hosted ElasticStack set up that looks like \[apps that send logs via http\]-\>Logstash Shipper-\>Kafka-\>3 Logstash Ingesters-\>6 ElasticSearches (3 master, 3 data). Everything is on 7.16.2, and has been h… --- ## [Influx Plugin: Data loss during Output server down-time](https://discuss.elastic.co/t/influx-plugin-data-loss-during-output-server-down-time/305624)
**Author:** [@AurelioAranzana](https://discuss.elastic.co/u/AurelioAranzana)\ **Replies:** 5\ **Last updated:** [May 26, 2022, 5:06pm UTC](https://discuss.elastic.co/t/influx-plugin-data-loss-during-output-server-down-time/305624 "2022-05-26T17:06:17Z")
Hi everyone! I would like to know how Logstash handles when your output server is down. In my case, I'm using the Influxdb output plugin. From what I'm seeing it will keep trying according to the max\_retries parameter… --- ## [HTTP filter logstash error](https://discuss.elastic.co/t/http-filter-logstash-error/305714)
**Author:** [@vishnuhngama](https://discuss.elastic.co/u/vishnuhngama)\ **Replies:** 1\ **Last updated:** [May 26, 2022, 4:50pm UTC](https://discuss.elastic.co/t/http-filter-logstash-error/305714 "2022-05-26T16:50:07Z")
Hi Team, We are facing issue while using http filter in logstash . We are using file input plugin to read from a file and then use the message field in http filter please see the code. Please help u actually its a urg… --- ## [Stop filter processing of the event on condition match and jump to output](https://discuss.elastic.co/t/stop-filter-processing-of-the-event-on-condition-match-and-jump-to-output/305673)
**Author:** [@esuser27](https://discuss.elastic.co/u/esuser27)\ **Replies:** 2\ **Last updated:** [May 26, 2022, 4:35pm UTC](https://discuss.elastic.co/t/stop-filter-processing-of-the-event-on-condition-match-and-jump-to-output/305673 "2022-05-26T16:35:16Z")
Hi Team, I want to know if there is any way to stop my filter processing of the event on condition match and jump to output for ex if \[log\] == "parsed" { stop processing next filter portion and jump to output } --- ## [Update logstash geo\_ip lib file do you need to restart the system?](https://discuss.elastic.co/t/update-logstash-geo-ip-lib-file-do-you-need-to-restart-the-system/305670)
**Author:** [@zhanghao116560](https://discuss.elastic.co/u/zhanghao116560)\ **Replies:** 1\ **Last updated:** [May 26, 2022, 4:13pm UTC](https://discuss.elastic.co/t/update-logstash-geo-ip-lib-file-do-you-need-to-restart-the-system/305670 "2022-05-26T16:13:48Z")
I covered the logstash file/vendor/bundle/app / 2.3.0 / gems/logstash - filter - geoip - 5.0.3 - Java/vendor/GeoLite2 - City. mmdb, but much more special server, Check whether you need to restart the system to take effec… --- ## [My regExp doesn't work in mutate gsub](https://discuss.elastic.co/t/my-regexp-doesnt-work-in-mutate-gsub/305657)
**Author:** [@playingkim0916](https://discuss.elastic.co/u/playingkim0916)\ **Replies:** 1\ **Last updated:** [May 26, 2022, 4:10pm UTC](https://discuss.elastic.co/t/my-regexp-doesnt-work-in-mutate-gsub/305657 "2022-05-26T16:10:52Z")
The value value of \[@metadata\]\[test\] is 2022-05-24T08:50:05.000Z , but using the corresponding regular expression causes an error error msg is Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipelin… --- ## [Изменение имени interface в filebeat](https://discuss.elastic.co/t/interface-filebeat/305724)
**Author:** [@dreshme](https://discuss.elastic.co/u/dreshme)\ **Replies:** 0\ **Last updated:** [May 26, 2022, 2:34pm UTC](https://discuss.elastic.co/t/interface-filebeat/305724 "2022-05-26T14:34:34Z")
Доброго времени суток. Подскажите, пожалуйста, я собираю netflow с помощью filebeat. Есть поля ''' "egress\_interface" : 199, "ingress\_interface" : 277, ''' Через SNMP я узнал, какие сетевые интерфейсы соответствую… --- ## [Language detection](https://discuss.elastic.co/t/language-detection/305565)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 1\ **Last updated:** [May 26, 2022, 2:29pm UTC](https://discuss.elastic.co/t/language-detection/305565 "2022-05-26T14:29:02Z")
Hi everyone! I have a field "content" in my index with text in it. I would like to be able to create a field "language" that would detect the language of my field "content", is this possible? Please help me with the … --- ## [Elasticsearch Engineer official course Module1 "information Out" questions: 21-22-23 there are no answers for validation](https://discuss.elastic.co/t/elasticsearch-engineer-official-course-module1-information-out-questions-21-22-23-there-are-no-answers-for-validation/304129)
**Author:** [@husoelasticbe](https://discuss.elastic.co/u/husoelasticbe)\ **Replies:** 4\ **Last updated:** [May 26, 2022, 1:31pm UTC](https://discuss.elastic.co/t/elasticsearch-engineer-official-course-module1-information-out-questions-21-22-23-there-are-no-answers-for-validation/304129 "2022-05-26T13:31:10Z")
Dear team, I am doing the official course online ( Elasticsearch Engineer) and I would like to validate my answers for the Elasticsearch Engineer Lab - Information out - questions: 21 - 22 - 23 "exam prep" I don't s… --- ## [Missing days on Elastic but command appears to be up to date?](https://discuss.elastic.co/t/missing-days-on-elastic-but-command-appears-to-be-up-to-date/305706)
**Author:** [@LionsELK](https://discuss.elastic.co/u/LionsELK)\ **Replies:** 1\ **Last updated:** [May 26, 2022, 1:28pm UTC](https://discuss.elastic.co/t/missing-days-on-elastic-but-command-appears-to-be-up-to-date/305706 "2022-05-26T13:28:27Z")
Hi all, my colleague has informed me that we're missing a couple of days on Elastic. I've had a look and we're missing the 24th and 25th May. I've gone into the command line and reran filebeat -e -d "publisher" and whil… --- ## [How to configure Kibana behind nginx balancer](https://discuss.elastic.co/t/how-to-configure-kibana-behind-nginx-balancer/304654)
**Author:** [@eduhernandezm](https://discuss.elastic.co/u/eduhernandezm)\ **Replies:** 4\ **Last updated:** [May 26, 2022, 11:02am UTC](https://discuss.elastic.co/t/how-to-configure-kibana-behind-nginx-balancer/304654 "2022-05-26T11:02:32Z")
Hi to everyone, I have recently configured ELK in our enterprise environment. I have configured Kibana by default, without making changes, so to access Kibana, I do it by the configured host name and port: http://tfvs0… --- ## [Raw logs to data compression ratio](https://discuss.elastic.co/t/raw-logs-to-data-compression-ratio/305440)
**Author:** [@michaelv](https://discuss.elastic.co/u/michaelv)\ **Replies:** 16\ **Last updated:** [May 26, 2022, 9:23am UTC](https://discuss.elastic.co/t/raw-logs-to-data-compression-ratio/305440 "2022-05-26T09:23:20Z")
Hi All, I've been investigating some compression ratios of my live logs. Two main catergories. Auditd logs and other logs like /var/log/messages etc. Both being ingested via filebeat 7.11 and running 7.11 cluster. S… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=623) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=625)