# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=626 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 627 --- ## [Build your own APM demo](https://discuss.elastic.co/t/build-your-own-apm-demo/305517)
**Author:** [@stobbe99](https://discuss.elastic.co/u/stobbe99)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 2:43pm UTC](https://discuss.elastic.co/t/build-your-own-apm-demo/305517 "2022-05-24T14:43:09Z")
Hello, Found the pretty demo at: https://demo.elastic.co/app/apm/services?comparisonEnabled=true&environment=ENVIRONMENT\_ALL&rangeFrom=now-15m&rangeTo=now&offset=1d Is it possible to also use the opbeans components … --- ## [Logstash reads file with multiple lines as "1 hit"](https://discuss.elastic.co/t/logstash-reads-file-with-multiple-lines-as-1-hit/301191)
**Author:** [@RomanKau](https://discuss.elastic.co/u/RomanKau)\ **Replies:** 18\ **Last updated:** [May 24, 2022, 2:02pm UTC](https://discuss.elastic.co/t/logstash-reads-file-with-multiple-lines-as-1-hit/301191 "2022-05-24T14:02:21Z")
Running Windows 10, Logstash 8.1.0, Elasticsearch, kibana and filebeat 8.0.0 all on the same machine. Getting the data from logstash into elasticsearch and kibana works but when multiple files get read at the same time … --- ## [Logstash service started but no input](https://discuss.elastic.co/t/logstash-service-started-but-no-input/305472)
**Author:** [@CemG](https://discuss.elastic.co/u/CemG)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 1:54pm UTC](https://discuss.elastic.co/t/logstash-service-started-but-no-input/305472 "2022-05-24T13:54:54Z")
Hello, I have tested Logstash with debug, every thing worked fine. Also tried to start logstash with /usr/share/logstash/bin/logstash and it worked. I have changed the logstash.service file to use pipeline because it wo… --- ## [Substring does not match with in a string](https://discuss.elastic.co/t/substring-does-not-match-with-in-a-string/305470)
**Author:** [@vinayrordev](https://discuss.elastic.co/u/vinayrordev)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 1:27pm UTC](https://discuss.elastic.co/t/substring-does-not-match-with-in-a-string/305470 "2022-05-24T13:27:28Z")
I am working on search functionality using the Elasticsearch, I need to show result in dropdown if string or substring is match. right now query result be like if I type in input box test so result is test-load-1 te… --- ## [ECK Master not discovered issue](https://discuss.elastic.co/t/eck-master-not-discovered-issue/305147)
**Author:** [@Sagar\_Dalvi](https://discuss.elastic.co/u/Sagar_Dalvi)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 1:19pm UTC](https://discuss.elastic.co/t/eck-master-not-discovered-issue/305147 "2022-05-24T13:19:31Z")
We have deployed Elasticsearch on Openshift Cluster using ECK Operator. We were facing some sharding issue for Elasticsearch cluster after which we have restarted Elasticsearch operator and runtime pods. After restart … --- ## [Is there a way to have multiple yaml configs?](https://discuss.elastic.co/t/is-there-a-way-to-have-multiple-yaml-configs/305363)
**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 3\ **Last updated:** [May 24, 2022, 1:13pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-have-multiple-yaml-configs/305363 "2022-05-24T13:13:33Z")
Hi I have successfully deployed a HOT-WARM environment using one ECK yaml config file. Lets say i decided to add COLD tier, is it possible to have a separate yaml config that joins the existing ECK cluster? What is th… --- ## [How to invert the y axis to start from 100% in bottom to 0% in top](https://discuss.elastic.co/t/how-to-invert-the-y-axis-to-start-from-100-in-bottom-to-0-in-top/305505)
**Author:** [@AlaaElbahrawy](https://discuss.elastic.co/u/AlaaElbahrawy)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 12:51pm UTC](https://discuss.elastic.co/t/how-to-invert-the-y-axis-to-start-from-100-in-bottom-to-0-in-top/305505 "2022-05-24T12:51:13Z")
Hi, I'm facing a graph where data is almost near 100%. And i need a stacked bar chart to start from 100 in bottom to 0 in top just like the image is that possible? --- ## [Aggregating multiple values from single fields](https://discuss.elastic.co/t/aggregating-multiple-values-from-single-fields/305176)
**Author:** [@MarioRojas](https://discuss.elastic.co/u/MarioRojas)\ **Replies:** 4\ **Last updated:** [May 24, 2022, 12:43pm UTC](https://discuss.elastic.co/t/aggregating-multiple-values-from-single-fields/305176 "2022-05-24T12:43:10Z")
Hi all, I have some documents, where a given field can have one or several values (strings or numerical, not mixed though) and I wanted to know if it's possible to operate these, like count the number of values of one t… --- ## [Null values not showing on Dashboard](https://discuss.elastic.co/t/null-values-not-showing-on-dashboard/305503)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 12:31pm UTC](https://discuss.elastic.co/t/null-values-not-showing-on-dashboard/305503 "2022-05-24T12:31:05Z")
Hi, I have filtered for the same set of data for the same data range on Discover and Dashboard tabs. One of the fields in the data is Region. While Discover shows values for REgion as AMER, EMEA, ASIA and "-", Dashboard… --- ## [Logstash azure log analytics output - Failed to flush outgoing items - block in start\_workers](https://discuss.elastic.co/t/logstash-azure-log-analytics-output-failed-to-flush-outgoing-items-block-in-start-workers/305078)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 6\ **Last updated:** [May 24, 2022, 12:29pm UTC](https://discuss.elastic.co/t/logstash-azure-log-analytics-output-failed-to-flush-outgoing-items-block-in-start-workers/305078 "2022-05-24T12:29:11Z")
Hi, I am using the redhat openshift logging operator provided fluentd forward to forward my logs to a Logstash instance, and using the azure log analytics output plugin to forward the logs to an Azure Log Analytics Work… --- ## [Value of "elastic" is forbidden in Kibana 8.2](https://discuss.elastic.co/t/value-of-elastic-is-forbidden-in-kibana-8-2/305501)
**Author:** [@borisr84](https://discuss.elastic.co/u/borisr84)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 12:04pm UTC](https://discuss.elastic.co/t/value-of-elastic-is-forbidden-in-kibana-8-2/305501 "2022-05-24T12:04:18Z")
Hi, after upgrading to ELK 8.2, I started getting some errors, some of which I was able to resolve for now, however the last error that keeps me stuck is the error of using "elastic" user. I'm getting the following erro… --- ## [Wanted to drop specific syslog message and syslog Client](https://discuss.elastic.co/t/wanted-to-drop-specific-syslog-message-and-syslog-client/305498)
**Author:** [@ashisharyan](https://discuss.elastic.co/u/ashisharyan)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 11:56am UTC](https://discuss.elastic.co/t/wanted-to-drop-specific-syslog-message-and-syslog-client/305498 "2022-05-24T11:56:07Z")
Hi, I wanted to drop some specific syslog message and syslog client which should not be send to ELK. Below is the Logstash config file. we have tried but it is not working. So request if anyone can help me to get this … --- ## [Use KV filter in logstash can not filter?](https://discuss.elastic.co/t/use-kv-filter-in-logstash-can-not-filter/305446)
**Author:** [@GhostRaven](https://discuss.elastic.co/u/GhostRaven)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 10:29am UTC](https://discuss.elastic.co/t/use-kv-filter-in-logstash-can-not-filter/305446 "2022-05-24T10:29:45Z")
Use KV filter in logstash. I can get the value, but can not filter ? why ? Does the key can not be uppercase? if \[host\] == "10.9.10.10" { kv { include\_keys =\> \[ "ACMAC", "ACNAME", "AP… --- ## [Adding a New field to index](https://discuss.elastic.co/t/adding-a-new-field-to-index/305408)
**Author:** [@icgncl](https://discuss.elastic.co/u/icgncl)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 10:26am UTC](https://discuss.elastic.co/t/adding-a-new-field-to-index/305408 "2022-05-24T10:26:22Z")
I want to add a new field to my index which includes more than 20m documents. I have dictionary like this Template : \[Catalog\_id : {Keyword: Sold Count}\] Sold Counts = {1234: {Apple:50}, 3242: {Banana:20}, 3423: {Apple:… --- ## [Changing index replication factor to 0](https://discuss.elastic.co/t/changing-index-replication-factor-to-0/305482)
**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\ **Replies:** 4\ **Last updated:** [May 24, 2022, 10:08am UTC](https://discuss.elastic.co/t/changing-index-replication-factor-to-0/305482 "2022-05-24T10:08:35Z")
Currently I am working on a single node Elasticsearch setup. But the replication factor was set to 1 by default. The space on my node is 3TB. If I decrease the replication factor to 0 , what will happen in that case? O… --- ## [Failed to execute action](https://discuss.elastic.co/t/failed-to-execute-action/305479)
**Author:** [@Palaibada](https://discuss.elastic.co/u/Palaibada)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 9:40am UTC](https://discuss.elastic.co/t/failed-to-execute-action/305479 "2022-05-24T09:40:30Z")
what is solution for this error "message=\>"java.io.IOException: Page file size is too small to hold elements" ? --- ## [APM integration on Elastic agent 7.17 - agents are healthy but no data appears](https://discuss.elastic.co/t/apm-integration-on-elastic-agent-7-17-agents-are-healthy-but-no-data-appears/305196)
**Author:** [@christianfosli](https://discuss.elastic.co/u/christianfosli)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 9:33am UTC](https://discuss.elastic.co/t/apm-integration-on-elastic-agent-7-17-agents-are-healthy-but-no-data-appears/305196 "2022-05-24T09:33:33Z")
I have tried to set up elastic-agent with APM integration. My configuration is nearly the same as the example here Configuration Examples | Elastic Cloud on Kubernetes \[master\] | Elastic, except I use version 7.17 for ev… --- ## [Preserve original log file name using Filebeat and Logstash](https://discuss.elastic.co/t/preserve-original-log-file-name-using-filebeat-and-logstash/305390)
**Author:** [@Robert\_Garcia\_Torren](https://discuss.elastic.co/u/Robert_Garcia_Torren)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 8:50am UTC](https://discuss.elastic.co/t/preserve-original-log-file-name-using-filebeat-and-logstash/305390 "2022-05-24T08:50:07Z")
Hi. I just want to preserve the original file name for example: laravel-2022-05-17.log and set it as index. I was not able to find the propper way to obtain it using filebeat and sending it to logstash. Thanks … --- ## [Can word spacing support and or relationship](https://discuss.elastic.co/t/can-word-spacing-support-and-or-relationship/305444)
**Author:** [@S-Dragon0302](https://discuss.elastic.co/u/S-Dragon0302)\ **Replies:** 6\ **Last updated:** [May 24, 2022, 7:02am UTC](https://discuss.elastic.co/t/can-word-spacing-support-and-or-relationship/305444 "2022-05-24T07:02:39Z")
query\_string case: ((a|b)+(c|d))~10 ==\> ((a+c)~10)|((a+d)~10)|((b+c)~10)|((b+d)~10) Can this be true,What should I do if I want to do this. --- ## [Fuzzysearch not working as expected](https://discuss.elastic.co/t/fuzzysearch-not-working-as-expected/305450)
**Author:** [@Reset\_Button](https://discuss.elastic.co/u/Reset_Button)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 6:04am UTC](https://discuss.elastic.co/t/fuzzysearch-not-working-as-expected/305450 "2022-05-24T06:04:25Z")
Hello! I try to implement fuzzysearch like explained here How to Use Fuzzy Query Matches in Elasticsearch | HackerNoon - but get strange results. { "query": { "match" : { "term": { "query" : "At w… --- ## [Using formula section on the vertical axis](https://discuss.elastic.co/t/using-formula-section-on-the-vertical-axis/305410)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 3\ **Last updated:** [May 24, 2022, 5:09am UTC](https://discuss.elastic.co/t/using-formula-section-on-the-vertical-axis/305410 "2022-05-24T05:09:30Z")
Hi, I want to show the count as a percentage. Currently it is displaying the count of files. How do I show the count as a percentage of the total number of files in the formula section of the vertical axis. attached scr… --- ## [Index document: very bad performance in Elasticsearch 8.2.0](https://discuss.elastic.co/t/index-document-very-bad-performance-in-elasticsearch-8-2-0/305392)
**Author:** [@Alexander\_Ott](https://discuss.elastic.co/u/Alexander_Ott)\ **Replies:** 3\ **Last updated:** [May 24, 2022, 5:07am UTC](https://discuss.elastic.co/t/index-document-very-bad-performance-in-elasticsearch-8-2-0/305392 "2022-05-24T05:07:03Z")
We are trying to migrate from Elasticsearch 6.7.1 to Elasticsearch 8.2.0. With the same amount of documents per bulk request, we always get a socket timeout in Elasticsearch 8.2.0. Everything works fine in Elasticsearch… --- ## [Filebeat on raspberry pi 3](https://discuss.elastic.co/t/filebeat-on-raspberry-pi-3/303671)
**Author:** [@Dhia\_Saibi](https://discuss.elastic.co/u/Dhia_Saibi)\ **Replies:** 5\ **Last updated:** [May 24, 2022, 4:59am UTC](https://discuss.elastic.co/t/filebeat-on-raspberry-pi-3/303671 "2022-05-24T04:59:26Z")
I wanna know if is it possible to install filebeat from elasticstack (I need it to get logs file from an indoor camera) on raspberry pi 3 and if yes does anyone have a tutorial or can teach me the process? --- ## [Parse specific field when JSON filter failed](https://discuss.elastic.co/t/parse-specific-field-when-json-filter-failed/305439)
**Author:** [@austin0918](https://discuss.elastic.co/u/austin0918)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 2:53am UTC](https://discuss.elastic.co/t/parse-specific-field-when-json-filter-failed/305439 "2022-05-24T02:53:53Z")
I have some logs in JSON format with some offending key-value pairs that cause \_jsonparsefailure. I wanted to leave the log as is and just parse the timestamp. I tried the below config but failed to parse the timestamp f… --- ## [Kibana URL breaking and navigates back to home page](https://discuss.elastic.co/t/kibana-url-breaking-and-navigates-back-to-home-page/305442)
**Author:** [@shyamnguitar](https://discuss.elastic.co/u/shyamnguitar)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 2:48am UTC](https://discuss.elastic.co/t/kibana-url-breaking-and-navigates-back-to-home-page/305442 "2022-05-24T02:48:14Z")
When I run a query and share the URLs to my developers, the URL breaks and goes to home page. The developer who wants to debug has to construct the whole query again from beginning. Thanks folks in advance for any guidan… --- ## [Elasticsearch等の学習方法について](https://discuss.elastic.co/t/elasticsearch/305437)
**Author:** [@Yos](https://discuss.elastic.co/u/Yos)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 2:09am UTC](https://discuss.elastic.co/t/elasticsearch/305437 "2022-05-24T02:09:50Z")
※このようなことをここに投稿してよいのかわかりませんので、 不適切であれば削除いたしますのでご返信ください。 私は仕事でElasticsearch＋Kibana＋Logstash＋Beatsを組み合わせたログ分析の仕組みを構築中ですが、そのための学習は書籍（ElasticStack実践ガイド）や公式ドキュメント、このコミュニティ、個人のブログで進めております。 皆様はElasticsearchやその他Kibana、Logstash… --- ## [\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\] Encountered a retryable error (will retry with exponential backoff) {:code=\>400, :url=\>"http://127.0.0.1:9200/\_bulk", :content\_length=\>137306}](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-main-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-http-127-0-0-1-9200-bulk-content-length-137306/305436)
**Author:** [@sunpasup](https://discuss.elastic.co/u/sunpasup)\ **Replies:** 4\ **Last updated:** [May 24, 2022, 2:03am UTC](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-main-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-http-127-0-0-1-9200-bulk-content-length-137306/305436 "2022-05-24T02:03:29Z")
we are facing above issue while uploading large sets of data from postgres table. based on basic research it looks like, its because of malfunctioned data. how to fix this ? how to identify what data is causing this is… --- ## [Hide weekends for date histogram field in time series in graph](https://discuss.elastic.co/t/hide-weekends-for-date-histogram-field-in-time-series-in-graph/305434)
**Author:** [@monilgangar](https://discuss.elastic.co/u/monilgangar)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 12:54am UTC](https://discuss.elastic.co/t/hide-weekends-for-date-histogram-field-in-time-series-in-graph/305434 "2022-05-24T00:54:51Z")
Our application runs between Monday to Friday... and not on Saturday and Sunday. We are creating a chart in Kibana and using the date histogram field for time series. It is showing the weekends as well in the graph. so… --- ## [Your Query is taking a while - Kibana](https://discuss.elastic.co/t/your-query-is-taking-a-while-kibana/305417)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 12:22am UTC](https://discuss.elastic.co/t/your-query-is-taking-a-while-kibana/305417 "2022-05-24T00:22:29Z")
Hello All, I'm facing an issue in almost in all my Index when I'm trying to get data more than 1 day. Below is the error screenshot , I'm not sure how to resolve this,any suggestion would be helpful. Note: I've done v… --- ## [Parsing whole phrase](https://discuss.elastic.co/t/parsing-whole-phrase/305420)
**Author:** [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\ **Replies:** 3\ **Last updated:** [May 23, 2022, 7:58pm UTC](https://discuss.elastic.co/t/parsing-whole-phrase/305420 "2022-05-23T19:58:01Z")
I'm collecting Windows Applications Event Logs, all of them are multiline and can have a variety of formats. My message field which I would like to match has such format: \[Message: An error occurred while trying to ch… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=625) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=627)