# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=637 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 638 --- ## [JSON codec plugin - target option (http input)](https://discuss.elastic.co/t/json-codec-plugin-target-option-http-input/304217)
**Author:** [@sectex](https://discuss.elastic.co/u/sectex)\ **Replies:** 4\ **Last updated:** [May 9, 2022, 3:12pm UTC](https://discuss.elastic.co/t/json-codec-plugin-target-option-http-input/304217 "2022-05-09T15:12:02Z")
I am having some issues using the JSON codec plugin in my Logstash (v8.1.2) pipeline. pipeline.conf: input { http { codec =\> json port =\> 5046 } } output { stdout { codec =\> rubydebu… --- ## [Logstash ECS Compatiblity Issues](https://discuss.elastic.co/t/logstash-ecs-compatiblity-issues/304260)
**Author:** [@teamomni](https://discuss.elastic.co/u/teamomni)\ **Replies:** 5\ **Last updated:** [May 9, 2022, 2:54pm UTC](https://discuss.elastic.co/t/logstash-ecs-compatiblity-issues/304260 "2022-05-09T14:54:16Z")
We have moved our Logstash indices to data stream recently but are having issues with the geopoints. As a result, the geofencing for everything including the Elastic agents are broken. At first there was the error: Pi… --- ## [Unable to access into \ after installation of elastic search](https://discuss.elastic.co/t/unable-to-access-into-ipaddress-9200-after-installation-of-elastic-search/304019)
**Author:** [@fanfan01127](https://discuss.elastic.co/u/fanfan01127)\ **Replies:** 7\ **Last updated:** [May 9, 2022, 1:53pm UTC](https://discuss.elastic.co/t/unable-to-access-into-ipaddress-9200-after-installation-of-elastic-search/304019 "2022-05-09T13:53:30Z")
Installed version: Elasticsearch-8.2.0 OS: RedHat 8.2 on Azure Hello all I am a new starter to use Elasticsearch and linux. Just tried to install the Elasticsearch 8.2. After I configured the yml file, allow the fir… --- ## [Unable to add tag with filename](https://discuss.elastic.co/t/unable-to-add-tag-with-filename/304113)
**Author:** [@Fico125](https://discuss.elastic.co/u/Fico125)\ **Replies:** 4\ **Last updated:** [May 9, 2022, 1:50pm UTC](https://discuss.elastic.co/t/unable-to-add-tag-with-filename/304113 "2022-05-09T13:50:37Z")
Hey everyone, I'm quite stuck trying to add a custom field to my parsed data. Basically, I have a path from where I'm reading the content of csv files, and sending it to elastic. I'd like that content of .csv files rece… --- ## [Remove\_Field json path on logstash](https://discuss.elastic.co/t/remove-field-json-path-on-logstash/304146)
**Author:** [@adxalex](https://discuss.elastic.co/u/adxalex)\ **Replies:** 5\ **Last updated:** [May 9, 2022, 1:44pm UTC](https://discuss.elastic.co/t/remove-field-json-path-on-logstash/304146 "2022-05-09T13:44:52Z")
Hi comunity, I'm trying to remove some fileds into a json. The json is: {"recode":"VZ##","response-code":"4000","response":{"result":\[{"DetailsPageURL":"idsource":"0""Attribute":\[{"DISPLAYNAME":"Tiempo de respuesta ser… --- ## [Error at IndexDocument()](https://discuss.elastic.co/t/error-at-indexdocument/304131)
**Author:** [@frankmehlhop](https://discuss.elastic.co/u/frankmehlhop)\ **Replies:** 1\ **Last updated:** [May 9, 2022, 12:52pm UTC](https://discuss.elastic.co/t/error-at-indexdocument/304131 "2022-05-09T12:52:36Z")
I want to inject a data set using C# and elastic + kibana version 8.x. On console at Kibana it works fine. At the C# code at the indexResponse I get the error message: The client is unable to verify that the server i… --- ## [Download CSV numeric format issue](https://discuss.elastic.co/t/download-csv-numeric-format-issue/304193)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 2\ **Last updated:** [May 9, 2022, 11:44am UTC](https://discuss.elastic.co/t/download-csv-numeric-format-issue/304193 "2022-05-09T11:44:39Z")
Hi all, After creating a data table in kibana with appropriate fields, when I download CSV report, I see numeric values in report be given as 8.1E+11. When I expand the column size , then too the values remains as 8.1E… --- ## [Getting 403 denied to elastic.co (for anything: apt refresh, wget, etc)](https://discuss.elastic.co/t/getting-403-denied-to-elastic-co-for-anything-apt-refresh-wget-etc/301150)
**Author:** [@total-dor](https://discuss.elastic.co/u/total-dor)\ **Replies:** 13\ **Last updated:** [May 9, 2022, 8:46am UTC](https://discuss.elastic.co/t/getting-403-denied-to-elastic-co-for-anything-apt-refresh-wget-etc/301150 "2022-05-09T08:46:26Z")
Our company runs out of several datacenters and we just provisioned a new one in a new region (within USA) and I cannot pull from elastic.co from this site. The below commands work perfectly fine for any other site with… --- ## [How to remove fields exist in \_source array field using logstash filter](https://discuss.elastic.co/t/how-to-remove-fields-exist-in-source-array-field-using-logstash-filter/303350)
**Author:** [@Magesh\_02](https://discuss.elastic.co/u/Magesh_02)\ **Replies:** 1\ **Last updated:** [May 9, 2022, 8:39am UTC](https://discuss.elastic.co/t/how-to-remove-fields-exist-in-source-array-field-using-logstash-filter/303350 "2022-05-09T08:39:14Z")
I'm trying to use a logstash filter to remove unwanted fields from the \_source field, but the data isn't being sent to ES. filter { mutate { remove\_field =\> \[ "path", "host","@version","@timestamp","type"\] … --- ## [Loading unstructured data](https://discuss.elastic.co/t/loading-unstructured-data/304212)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 2\ **Last updated:** [May 9, 2022, 8:25am UTC](https://discuss.elastic.co/t/loading-unstructured-data/304212 "2022-05-09T08:25:33Z")
I am getting error while loading below line in elastic using gork filter 192.168.72.177 - - \[22/Dec/2002:23:32:14 -0400\] "GET /news/sports.html HTTP/1.1" 200 3500 www.yahoo.com "http://www.some.com/" "Mozilla/4.0 (com… --- ## [Logstash S3 input](https://discuss.elastic.co/t/logstash-s3-input/304118)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 3\ **Last updated:** [May 9, 2022, 7:34am UTC](https://discuss.elastic.co/t/logstash-s3-input/304118 "2022-05-09T07:34:07Z")
Hi there, I'm trying to use the logstash S3 input plugin to fetch logs from S3 bucket. This is my input s3 { id =\> "terminal\_app" access\_key\_id =\> "${access\_key\_id}" secret\_access\_key =\> "${secret\_access\_k… --- ## [Timestamp field issue](https://discuss.elastic.co/t/timestamp-field-issue/304126)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 2\ **Last updated:** [May 9, 2022, 7:31am UTC](https://discuss.elastic.co/t/timestamp-field-issue/304126 "2022-05-09T07:31:04Z")
Hi there, I'm using S3 to read input into logstash. The timestamp field generated in Elasticsearch is the time when logs are read from S3 and not the timestamp field of the json log file. Below is one object of the jso… --- ## [Apm agent misses some requests](https://discuss.elastic.co/t/apm-agent-misses-some-requests/304213)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 0\ **Last updated:** [May 9, 2022, 6:43am UTC](https://discuss.elastic.co/t/apm-agent-misses-some-requests/304213 "2022-05-09T06:43:56Z")
When the developer came to me, I found out that apm didn't log some requests, I don't know why. I can see the request record in the log, but I can't find any data for this request on the apm UI. I didn't… --- ## [Import/export CSV data feeds to elasticsearch](https://discuss.elastic.co/t/import-export-csv-data-feeds-to-elasticsearch/304189)
**Author:** [@Samiul008](https://discuss.elastic.co/u/Samiul008)\ **Replies:** 4\ **Last updated:** [May 9, 2022, 5:18am UTC](https://discuss.elastic.co/t/import-export-csv-data-feeds-to-elasticsearch/304189 "2022-05-09T05:18:27Z")
Good Day community! is there any way to automate the process of downloading CSV files from gmail and ingest those to Elasticsearch by creating new indices? My challenges are following- Downloading the CSV files from … --- ## [Like search on multiple indexes on elastic search](https://discuss.elastic.co/t/like-search-on-multiple-indexes-on-elastic-search/304165)
**Author:** [@Rajesh\_Kumar3](https://discuss.elastic.co/u/Rajesh_Kumar3)\ **Replies:** 2\ **Last updated:** [May 9, 2022, 5:08am UTC](https://discuss.elastic.co/t/like-search-on-multiple-indexes-on-elastic-search/304165 "2022-05-09T05:08:46Z")
Hi, I stuck on like searching on multiple indexes on Elasticsearch. I am using a query string and must to extract data for the particular user. Example JSON index "tasks" { "channelName": "Weekly Task-(HT-01030284)… --- ## [Logging failed shards in search response](https://discuss.elastic.co/t/logging-failed-shards-in-search-response/303109)
**Author:** [@Nobuaki\_Ito](https://discuss.elastic.co/u/Nobuaki_Ito)\ **Replies:** 1\ **Last updated:** [May 9, 2022, 3:50am UTC](https://discuss.elastic.co/t/logging-failed-shards-in-search-response/303109 "2022-05-09T03:50:23Z")
My team would like to keep track of occurrences of shard failures. Is there any way to enable logging of such events? To clarify, the event that I would like to log is the occurrence of "failed" in the \_shards block of … --- ## [Can we select history source in peer recovery by settings When both Lucene soft-deletes and Translog are available](https://discuss.elastic.co/t/can-we-select-history-source-in-peer-recovery-by-settings-when-both-lucene-soft-deletes-and-translog-are-available/304203)
**Author:** [@liurui](https://discuss.elastic.co/u/liurui)\ **Replies:** 2\ **Last updated:** [May 9, 2022, 3:12am UTC](https://discuss.elastic.co/t/can-we-select-history-source-in-peer-recovery-by-settings-when-both-lucene-soft-deletes-and-translog-are-available/304203 "2022-05-09T03:12:28Z")
Hi ~ :smile: I encountered a problem with an online cluster: Peer recovery is very slow on translog stage. Ioutil of source node full intermittently. We don't have much read/write tasks and from Jstack, we see sou… --- ## [Automaticaly close SIEM case](https://discuss.elastic.co/t/automaticaly-close-siem-case/304195)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 1\ **Last updated:** [May 9, 2022, 2:25am UTC](https://discuss.elastic.co/t/automaticaly-close-siem-case/304195 "2022-05-09T02:25:11Z")
Hi all, I am tryiing to use shuffle soar to automate some of the task in the SIEM. One of them is the create and close cases. when i run the playbook the close case keep giving me error like this: These cases id has … --- ## [How to export results from alert page](https://discuss.elastic.co/t/how-to-export-results-from-alert-page/304156)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 1\ **Last updated:** [May 9, 2022, 12:34am UTC](https://discuss.elastic.co/t/how-to-export-results-from-alert-page/304156 "2022-05-09T00:34:56Z")
Hello there, I would like to know if is possible to export the results from the alert security page?? Thanks for the attention. --- ## [License is not available](https://discuss.elastic.co/t/license-is-not-available/304149)
**Author:** [@Onsrm](https://discuss.elastic.co/u/Onsrm)\ **Replies:** 5\ **Last updated:** [May 8, 2022, 11:46pm UTC](https://discuss.elastic.co/t/license-is-not-available/304149 "2022-05-08T23:46:26Z")
hello , when I use Elasticsearch with kibana they work together but when I add xpack.security.enabled: true in Elasticsearch.yml they stop working and I get this message : license is not available --- ## [I cant Add index in my kibana](https://discuss.elastic.co/t/i-cant-add-index-in-my-kibana/304183)
**Author:** [@DanialNabi82](https://discuss.elastic.co/u/DanialNabi82)\ **Replies:** 1\ **Last updated:** [May 8, 2022, 11:24pm UTC](https://discuss.elastic.co/t/i-cant-add-index-in-my-kibana/304183 "2022-05-08T23:24:36Z")
Hi I install new version of kibana and Elasticsearch (8.2.0) in my kibana dashboard I cant add new index --- ## [Trouble with artifacts.elastic.co ― Error 403](https://discuss.elastic.co/t/trouble-with-artifacts-elastic-co-error-403/304142)
**Author:** [@ilya.romashev](https://discuss.elastic.co/u/ilya.romashev)\ **Replies:** 1\ **Last updated:** [May 8, 2022, 10:29pm UTC](https://discuss.elastic.co/t/trouble-with-artifacts-elastic-co-error-403/304142 "2022-05-08T22:29:30Z")
Can't connect to Elasticsearch rpm repo, instead of xml with repo metadata server answers with 403 error. Is there anything wrong with this repo? --- ## [How to change default value size parameter of the terms aggregation?](https://discuss.elastic.co/t/how-to-change-default-value-size-parameter-of-the-terms-aggregation/304162)
**Author:** [@MNB\_1101](https://discuss.elastic.co/u/MNB_1101)\ **Replies:** 3\ **Last updated:** [May 8, 2022, 10:27pm UTC](https://discuss.elastic.co/t/how-to-change-default-value-size-parameter-of-the-terms-aggregation/304162 "2022-05-08T22:27:53Z")
By default, the terms aggregation returns the top ten terms with the most documents. How to change default value of the size parameter of terms aggregation? --- ## [Logstash cant start the pipeline in the conf.d file](https://discuss.elastic.co/t/logstash-cant-start-the-pipeline-in-the-conf-d-file/304172)
**Author:** [@ahmed\_barki](https://discuss.elastic.co/u/ahmed_barki)\ **Replies:** 9\ **Last updated:** [May 8, 2022, 7:49pm UTC](https://discuss.elastic.co/t/logstash-cant-start-the-pipeline-in-the-conf-d-file/304172 "2022-05-08T19:49:00Z")
Hello everyone, when i use the command /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/simple.conf here is what i get '\[INFO \] 2022-05-07 09:58:02.271 \[\[main\]-pipeline-manager\] elasticsearch - New Elasticsear… --- ## [\[.kibana\_task\_manager\] Action failed with ‘Request timed out’](https://discuss.elastic.co/t/kibana-task-manager-action-failed-with-request-timed-out/302420)
**Author:** [@ndinesh-aie](https://discuss.elastic.co/u/ndinesh-aie)\ **Replies:** 3\ **Last updated:** [May 8, 2022, 7:08pm UTC](https://discuss.elastic.co/t/kibana-task-manager-action-failed-with-request-timed-out/302420 "2022-05-08T19:08:19Z")
Continuing the discussion from \[.kibana\_task\_manager\] Action failed with 'Request timed out': --- ## [Kibana server unable to connect to :5601](https://discuss.elastic.co/t/kibana-server-unable-to-connect-to-5601/304187)
**Author:** [@Heythem\_DHAOUADI](https://discuss.elastic.co/u/Heythem_DHAOUADI)\ **Replies:** 4\ **Last updated:** [May 8, 2022, 4:21pm UTC](https://discuss.elastic.co/t/kibana-server-unable-to-connect-to-5601/304187 "2022-05-08T16:21:42Z")
This is my kibana.yml # Kibana is served by a back end server. This setting specifies the port to use. server.port: 5601 # Specifies the address to which the Kibana server will bind. IP addresses and host names are bot… --- ## [Sending data to logstash from remote machine](https://discuss.elastic.co/t/sending-data-to-logstash-from-remote-machine/304192)
**Author:** [@safaeaz](https://discuss.elastic.co/u/safaeaz)\ **Replies:** 4\ **Last updated:** [May 8, 2022, 3:58pm UTC](https://discuss.elastic.co/t/sending-data-to-logstash-from-remote-machine/304192 "2022-05-08T15:58:58Z")
i have logstash running on a different machine and want to read csv files from anothere mechine. Is there a way to set the ip in file input of config file? --- ## [Data type for Log Message Fields, does keyword add overhead?](https://discuss.elastic.co/t/data-type-for-log-message-fields-does-keyword-add-overhead/304043)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 6\ **Last updated:** [May 8, 2022, 6:23am UTC](https://discuss.elastic.co/t/data-type-for-log-message-fields-does-keyword-add-overhead/304043 "2022-05-08T06:23:46Z")
Currently I'm indexing log messages into Elasticsearch. Generally the initial 'message' field is dissected and stored in the following fields: @timestamp(date), logLevel(keyword), logMessage(keyword/text). … --- ## [Feature request - Security Rule exception autopopulate](https://discuss.elastic.co/t/feature-request-security-rule-exception-autopopulate/302569)
**Author:** [@smzd](https://discuss.elastic.co/u/smzd)\ **Replies:** 2\ **Last updated:** [May 7, 2022, 6:19pm UTC](https://discuss.elastic.co/t/feature-request-security-rule-exception-autopopulate/302569 "2022-05-07T18:19:29Z")
would it be possible to auto populate all the fields when create a rule exception with the data coming from the alert. Then I can simply eliminate the fields that are not relevant. This will hugely simplify the process… --- ## [Bulk Indexing API- To return the number of successful updates/creates](https://discuss.elastic.co/t/bulk-indexing-api-to-return-the-number-of-successful-updates-creates/304174)
**Author:** [@Zee\_Grinch](https://discuss.elastic.co/u/Zee_Grinch)\ **Replies:** 0\ **Last updated:** [May 7, 2022, 1:24pm UTC](https://discuss.elastic.co/t/bulk-indexing-api-to-return-the-number-of-successful-updates-creates/304174 "2022-05-07T13:24:04Z")
Not sure if this is a feature request, or is something that I missed (like a parameter in the Request that can enable this): The JSON body returned by a ~/\_bulk POST will include fairly rich info in the items\[\] array, b… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=636) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=638)