# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=635 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 636 --- ## [Geoip pipeline setting for Netflow (Map on Geo Location Dashboard)](https://discuss.elastic.co/t/geoip-pipeline-setting-for-netflow-map-on-geo-location-dashboard/304454)
**Author:** [@IMagalashvili](https://discuss.elastic.co/u/IMagalashvili)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 2:30pm UTC](https://discuss.elastic.co/t/geoip-pipeline-setting-for-netflow-map-on-geo-location-dashboard/304454 "2022-05-11T14:30:46Z")
Hi, we had added Netflow module to analyze traffic with Filebeat netflow module. Everything works but cant activate Map settings. As i found, we have to add new pipeline ( "geoip-info", for example) ad add "final\_pipel… --- ## [Query cache vs search rate](https://discuss.elastic.co/t/query-cache-vs-search-rate/304468)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 2:25pm UTC](https://discuss.elastic.co/t/query-cache-vs-search-rate/304468 "2022-05-11T14:25:32Z")
We had a search spike in our cluster, the search rate almost tripled. But when checking the metrics it shows that query cache increased almost tenfold. What's the explanation for this? --- ## [Filebeat SSL connection to logstash](https://discuss.elastic.co/t/filebeat-ssl-connection-to-logstash/303186)
**Author:** [@ruchil](https://discuss.elastic.co/u/ruchil)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 2:13pm UTC](https://discuss.elastic.co/t/filebeat-ssl-connection-to-logstash/303186 "2022-05-11T14:13:34Z")
Hi All, Appreciate any help in configuring SSL connection from Filebeat to logstash on ECK. Openshift 4.8.x ECK 2.1.0 ELKF stack 8.1.0 I am using to certs from Elasticsearch-es-http-certs-internal. Created pkcs8.key… --- ## [Kibana high values with short interval as explicit growing line](https://discuss.elastic.co/t/kibana-high-values-with-short-interval-as-explicit-growing-line/304130)
**Author:** [@Radoslaw\_Sieprawski](https://discuss.elastic.co/u/Radoslaw_Sieprawski)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 2:02pm UTC](https://discuss.elastic.co/t/kibana-high-values-with-short-interval-as-explicit-growing-line/304130 "2022-05-11T14:02:36Z")
Hi guys, I'm looking for solution how to present in Kibana constantly growing high values as growing line graph. This what I have now is completely flat line especialy when choosen time span is low, eg 1h. I'll apprecia… --- ## [Found "Kibana server is not ready yet" after configured kibana](https://discuss.elastic.co/t/found-kibana-server-is-not-ready-yet-after-configured-kibana/304268)
**Author:** [@fanfan01127](https://discuss.elastic.co/u/fanfan01127)\ **Replies:** 7\ **Last updated:** [May 11, 2022, 1:32pm UTC](https://discuss.elastic.co/t/found-kibana-server-is-not-ready-yet-after-configured-kibana/304268 "2022-05-11T13:32:58Z")
After setup of kibana and configure the yml file in my linux box, I got message "Kibana server is not ready yet" once I access to http://myipaddress:5601 And here is my kibana.yml config file. Many thanks all. … --- ## [Logstash configuration to load next pages automatically](https://discuss.elastic.co/t/logstash-configuration-to-load-next-pages-automatically/304457)
**Author:** [@Iss](https://discuss.elastic.co/u/Iss)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 1:05pm UTC](https://discuss.elastic.co/t/logstash-configuration-to-load-next-pages-automatically/304457 "2022-05-11T13:05:47Z")
I am new with ELK. I apologize for mistake I have to configure logstash in order to import data from an external source using an oai-pmh API. I try it using the following configuration. input{ http\_poller{ urls =\>{… --- ## [Data Table in Dashboard](https://discuss.elastic.co/t/data-table-in-dashboard/303478)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 17\ **Last updated:** [May 11, 2022, 12:45pm UTC](https://discuss.elastic.co/t/data-table-in-dashboard/303478 "2022-05-11T12:45:55Z")
Hello, i want to create a basic data table in a Kibana Dashboard with employees. I tried using the Table Lens but there is always a requirement for a metric like count, sum,.. which i do not need, as i only want to dis… --- ## [502 Bad Gateway when callback from proxy](https://discuss.elastic.co/t/502-bad-gateway-when-callback-from-proxy/304443)
**Author:** [@crimson\_riot](https://discuss.elastic.co/u/crimson_riot)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 12:42pm UTC](https://discuss.elastic.co/t/502-bad-gateway-when-callback-from-proxy/304443 "2022-05-11T12:42:17Z")
I am using oauth2 proxy to authenticate the user through google and then the authenticated user should connect to kibana which can be accessed via http://localhost:5601. However after authentication success (as mentioned… --- ## [Search cretiria with TermSet](https://discuss.elastic.co/t/search-cretiria-with-termset/304459)
**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 12:38pm UTC](https://discuss.elastic.co/t/search-cretiria-with-termset/304459 "2022-05-11T12:38:28Z")
Hi All, I have requirement to search Elastic with following details . This is part of security implementation you can assume for my website. I have different Grouptypes with each group type having set of Groups . these… --- ## [Convert two repeated values in array into a string](https://discuss.elastic.co/t/convert-two-repeated-values-in-array-into-a-string/304429)
**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 12:21pm UTC](https://discuss.elastic.co/t/convert-two-repeated-values-in-array-into-a-string/304429 "2022-05-11T12:21:49Z")
Hello, I have some old documents where a field has an array of two vales repeated, something like this: "task" : \[ "first\_task", "first\_task" \], I'm trying to convert this a… --- ## [Can not extract the "value" from the Aggregation](https://discuss.elastic.co/t/can-not-extract-the-value-from-the-aggregation/304281)
**Author:** [@cugo](https://discuss.elastic.co/u/cugo)\ **Replies:** 3\ **Last updated:** [May 11, 2022, 11:51am UTC](https://discuss.elastic.co/t/can-not-extract-the-value-from-the-aggregation/304281 "2022-05-11T11:51:22Z")
I have a list of Buckets (parentSalaries) that has a list of Aggregations of size 2. One of the Aggregations (average\_salary) has the following fields; value, name, valueAsString and metadata. I am trying to extract the … --- ## [Elasticsearch Term suggester is not returning correct suggestions when one character is missing (instead of misspelling)](https://discuss.elastic.co/t/elasticsearch-term-suggester-is-not-returning-correct-suggestions-when-one-character-is-missing-instead-of-misspelling/304369)
**Author:** [@hesamrasouli](https://discuss.elastic.co/u/hesamrasouli)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 11:24am UTC](https://discuss.elastic.co/t/elasticsearch-term-suggester-is-not-returning-correct-suggestions-when-one-character-is-missing-instead-of-misspelling/304369 "2022-05-11T11:24:19Z")
I'm using Elasticsearch term suggester for spell correction. my index contains huge list of ads. Each ad has subject and body fields. I've found a problematic example for which the suggester is not suggesting correct sug… --- ## [How can I have multiple kibana URLs for each server while my ELK is setup on the same centralised machine?](https://discuss.elastic.co/t/how-can-i-have-multiple-kibana-urls-for-each-server-while-my-elk-is-setup-on-the-same-centralised-machine/304413)
**Author:** [@Yash\_garg](https://discuss.elastic.co/u/Yash_garg)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 10:49am UTC](https://discuss.elastic.co/t/how-can-i-have-multiple-kibana-urls-for-each-server-while-my-elk-is-setup-on-the-same-centralised-machine/304413 "2022-05-11T10:49:27Z")
Hi there, I am using ELK stack with filebeat. filebeat is sending logs from multiple servers and logstash is collecting logs and sending them to Elasticsearch , then it is sending it to kibana. But I am looking for a so… --- ## [Merging 2 log lines into 1](https://discuss.elastic.co/t/merging-2-log-lines-into-1/304370)
**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\ **Replies:** 5\ **Last updated:** [May 11, 2022, 8:31am UTC](https://discuss.elastic.co/t/merging-2-log-lines-into-1/304370 "2022-05-11T08:31:20Z")
Hi, I am looking at 2 indices that have 1 field in common and then different fields. Would it be possible to merge them into 1 log line using the similar field? Using the example above, both lines have the same value… --- ## [Multiple Dashboards for real time data](https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 5\ **Last updated:** [May 11, 2022, 8:42am UTC](https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372 "2022-05-11T08:42:36Z")
I have a multiple units numbered (1,2,3...) each unit has multiple type of log files(such as opereational, selinux audit, access & error) is it possible to create a UI on kibana that has a dashboard displaying all these… --- ## [How to add Document View to a Dashboard](https://discuss.elastic.co/t/how-to-add-document-view-to-a-dashboard/304072)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 5\ **Last updated:** [May 11, 2022, 8:41am UTC](https://discuss.elastic.co/t/how-to-add-document-view-to-a-dashboard/304072 "2022-05-11T08:41:24Z")
In Discover, there is a document table that always appears. It never appears on my Dashboard even though I saved the query in Discover, and loaded the query for my Dashboard. What else must I do? I set doc\_table:lega… --- ## [Logstash Multi Output and selective Information](https://discuss.elastic.co/t/logstash-multi-output-and-selective-information/304431)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 8:25am UTC](https://discuss.elastic.co/t/logstash-multi-output-and-selective-information/304431 "2022-05-11T08:25:40Z")
input { http { host =\> "0.0.0.0" # default: 0.0.0.0 port =\> 0000 # default: 8080 } } filter { urldecode { all\_fields =\> true } } filter { mutate { gsub =\> \[ "message", "\\\]", "}", "message", "\\\[", "{" \] } … --- ## [\_tier\_preference setting](https://discuss.elastic.co/t/tier-preference-setting/303907)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 8:03am UTC](https://discuss.elastic.co/t/tier-preference-setting/303907 "2022-05-11T08:03:14Z")
Hi Can You explain me why below index showing \_tier\_preference": "data\_cold,data\_warm,data\_hot" after moving from data warm to data cold tier? I need to store such kind of index due to life policy only in particular dat… --- ## [Dashboard with a graph problem with datetime axis](https://discuss.elastic.co/t/dashboard-with-a-graph-problem-with-datetime-axis/304316)
**Author:** [@marcw](https://discuss.elastic.co/u/marcw)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 7:12am UTC](https://discuss.elastic.co/t/dashboard-with-a-graph-problem-with-datetime-axis/304316 "2022-05-11T07:12:36Z")
I use a dashboard with a graph in an external application via iframe. The datetime range selector is hidden because we don't want that the user changes the settings for the period. Otherwise the user can zoom in (what is… --- ## [ECK Operator unable to verify basic license in OpenShift](https://discuss.elastic.co/t/eck-operator-unable-to-verify-basic-license-in-openshift/303423)
**Author:** [@RRGTHWAR](https://discuss.elastic.co/u/RRGTHWAR)\ **Replies:** 7\ **Last updated:** [May 11, 2022, 5:02am UTC](https://discuss.elastic.co/t/eck-operator-unable-to-verify-basic-license-in-openshift/303423 "2022-05-11T05:02:23Z")
Hello, I have the ECK Operator (2.1) running in OpenShift. Both Elasticsearch and Kibana are up and running properly with version 7.17.2, but the operator is stuck on trying to verify the (basic) license for Elasticsear… --- ## [Cannot use SecureSettings and availably zone awareness at the same time](https://discuss.elastic.co/t/cannot-use-securesettings-and-availably-zone-awareness-at-the-same-time/304304)
**Author:** [@Zijun\_X](https://discuss.elastic.co/u/Zijun_X)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 4:54am UTC](https://discuss.elastic.co/t/cannot-use-securesettings-and-availably-zone-awareness-at-the-same-time/304304 "2022-05-11T04:54:07Z")
Hi there, I try to use the SecureSettings section to hold the credentials for the AWS S3 snapshot repo. But the k8s pod failed at the elastic-internal-init-keystore container step. The following is the error message: %… --- ## [Wildcards in Document filters](https://discuss.elastic.co/t/wildcards-in-document-filters/304326)
**Author:** [@Anfo](https://discuss.elastic.co/u/Anfo)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 2:39am UTC](https://discuss.elastic.co/t/wildcards-in-document-filters/304326 "2022-05-11T02:39:01Z")
Hi Everything tells me that simple asterisk should work for a wildcard in a filter, but I'm finding it temperamental. Please see picture below. Sometimes it appears to work, other times ignored. Am I merely structur… --- ## [Deleted documents reappearing in searches, how to write unit tests for this?](https://discuss.elastic.co/t/deleted-documents-reappearing-in-searches-how-to-write-unit-tests-for-this/304396)
**Author:** [@catmanjan](https://discuss.elastic.co/u/catmanjan)\ **Replies:** 3\ **Last updated:** [May 11, 2022, 1:48am UTC](https://discuss.elastic.co/t/deleted-documents-reappearing-in-searches-how-to-write-unit-tests-for-this/304396 "2022-05-11T01:48:02Z")
Hello I have a simple CRUD app that reads and writes to Elasticsearch, I am up to writing some unit tests for the app, which involves creating dummy data, checking I can search for the data and then deleting the data. I… --- ## [Can I print all fields in one index?](https://discuss.elastic.co/t/can-i-print-all-fields-in-one-index/304400)
**Author:** [@111418](https://discuss.elastic.co/u/111418)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 1:32am UTC](https://discuss.elastic.co/t/can-i-print-all-fields-in-one-index/304400 "2022-05-11T01:32:13Z")
Can I print all fields in one index in 7.12? I want to know all the name of fields. Thanks --- ## [Reindex data streams "in place"](https://discuss.elastic.co/t/reindex-data-streams-in-place/304365)
**Author:** [@Mike\_Williams](https://discuss.elastic.co/u/Mike_Williams)\ **Replies:** 1\ **Last updated:** [May 10, 2022, 10:20pm UTC](https://discuss.elastic.co/t/reindex-data-streams-in-place/304365 "2022-05-10T22:20:59Z")
Hi, I have many data streams totaling... a lot... of space and I need to change the mapping of a few existing fields. What would be a decent strategy for re-indexing several dozen data streams consisting of several hun… --- ## [Terraform + ec2 discovery (AWS) initial master s](https://discuss.elastic.co/t/terraform-ec2-discovery-aws-initial-master-s/304385)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 0\ **Last updated:** [May 10, 2022, 7:00pm UTC](https://discuss.elastic.co/t/terraform-ec2-discovery-aws-initial-master-s/304385 "2022-05-10T19:00:37Z")
I'd like to create a small ES cluster in AWS with Terraform. Does anybody have prior experience/a working example where Terraform instantiates 3 master nodes that can connect to each other? The problem is that for boot… --- ## [Regarding implementing knn for geo-points](https://discuss.elastic.co/t/regarding-implementing-knn-for-geo-points/304384)
**Author:** [@dido](https://discuss.elastic.co/u/dido)\ **Replies:** 0\ **Last updated:** [May 10, 2022, 6:47pm UTC](https://discuss.elastic.co/t/regarding-implementing-knn-for-geo-points/304384 "2022-05-10T18:47:57Z")
Let's say I have an index of geo-json data of restaurants and another index of geo-json data of pharmacies. If I want to get all pharmacies having restaurant with in 100m, How can I do that. Taking each pharmacies coordi… --- ## [Logstash Illegal Argument Exception while parsing date](https://discuss.elastic.co/t/logstash-illegal-argument-exception-while-parsing-date/303142)
**Author:** [@b.ohmer](https://discuss.elastic.co/u/b.ohmer)\ **Replies:** 5\ **Last updated:** [May 10, 2022, 4:24pm UTC](https://discuss.elastic.co/t/logstash-illegal-argument-exception-while-parsing-date/303142 "2022-05-10T16:24:04Z")
Hi there, I've got three questions around Logstash: We're using an older version of Logstash (6.5.4) and experiencing currently an issue while parsing a date. I've got absolutely no idea anymore what I can do to make … --- ## [Incorrectly collected data in Logstash to Elasticsearch](https://discuss.elastic.co/t/incorrectly-collected-data-in-logstash-to-elasticsearch/303910)
**Author:** [@eduhernandezm](https://discuss.elastic.co/u/eduhernandezm)\ **Replies:** 11\ **Last updated:** [May 10, 2022, 4:17pm UTC](https://discuss.elastic.co/t/incorrectly-collected-data-in-logstash-to-elasticsearch/303910 "2022-05-10T16:17:53Z")
Hello, I have set up two processes to collect data and present it to ELK. On the one hand I have a process that collects log data from an iis and on the other I have another process that what it does is import the data… --- ## [Sonicwall firewall SIEM](https://discuss.elastic.co/t/sonicwall-firewall-siem/251102)
**Author:** [@arturo.mj](https://discuss.elastic.co/u/arturo.mj)\ **Replies:** 14\ **Last updated:** [May 10, 2022, 1:27pm UTC](https://discuss.elastic.co/t/sonicwall-firewall-siem/251102 "2022-05-10T13:27:52Z")
Hi there, I have already connected my Sonicwall firewall to Elastic Cloud (I'm in the trial). I can see the logs in Kibana, but Elastic Security SIEM doesn't recognize the Firewall as a host, so I it doesn't get the log… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=634) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=636)