# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=639 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 640 --- ## [Elastic agent shows healthy (Also no error messages in Logs) in Kibana but fails to send data to elastic search](https://discuss.elastic.co/t/elastic-agent-shows-healthy-also-no-error-messages-in-logs-in-kibana-but-fails-to-send-data-to-elastic-search/302575)
**Author:** [@ajj31](https://discuss.elastic.co/u/ajj31)\ **Replies:** 5\ **Last updated:** [May 5, 2022, 7:29pm UTC](https://discuss.elastic.co/t/elastic-agent-shows-healthy-also-no-error-messages-in-logs-in-kibana-but-fails-to-send-data-to-elastic-search/302575 "2022-05-05T19:29:54Z")
v 7.17.2 - ELK Elastic Agent for EndPoint security gets enrolled and installed successfully. But instead of showing data received from elastic agent , it always goes to the attached screenshot " Next step: Enroll an … --- ## [Query regarding split function and conditionality](https://discuss.elastic.co/t/query-regarding-split-function-and-conditionality/303944)
**Author:** [@ianrobo](https://discuss.elastic.co/u/ianrobo)\ **Replies:** 7\ **Last updated:** [May 5, 2022, 7:06pm UTC](https://discuss.elastic.co/t/query-regarding-split-function-and-conditionality/303944 "2022-05-05T19:06:06Z")
Hi, I am a fairly new user to elastic and trying to develop an ingest pipeline to process Cisco logs. The format of the log is that the log.source.address is 1.1.1.1: I am using the split function to delimit on : and … --- ## [Update/Upgrade?](https://discuss.elastic.co/t/update-upgrade/304059)
**Author:** [@jumpie](https://discuss.elastic.co/u/jumpie)\ **Replies:** 5\ **Last updated:** [May 5, 2022, 5:55pm UTC](https://discuss.elastic.co/t/update-upgrade/304059 "2022-05-05T17:55:57Z")
I don't see directions on how to update/upgrade Elastic. I see 8.2 came out for Linux. --- ## [Logstash user permissions](https://discuss.elastic.co/t/logstash-user-permissions/304049)
**Author:** [@ksobon](https://discuss.elastic.co/u/ksobon)\ **Replies:** 5\ **Last updated:** [May 5, 2022, 5:25pm UTC](https://discuss.elastic.co/t/logstash-user-permissions/304049 "2022-05-05T17:25:06Z")
I have configured a "logstash" user with the following set of permissions: "{ "indices": \[{ "names": \["\*beat\*"\], "privileges": \["create", "create\_index", "view\_index\_metadata"\] } \] }" That however results in … --- ## [How to change style for kibana widgets](https://discuss.elastic.co/t/how-to-change-style-for-kibana-widgets/303994)
**Author:** [@kashifqazi](https://discuss.elastic.co/u/kashifqazi)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 5:04pm UTC](https://discuss.elastic.co/t/how-to-change-style-for-kibana-widgets/303994 "2022-05-05T17:04:20Z")
How to change style(Like colour font etc) of kibana widgets like pie chart bar chart etc. --- ## [Can't query by IDs using logstash-filter-elasticserach](https://discuss.elastic.co/t/cant-query-by-ids-using-logstash-filter-elasticserach/304024)
**Author:** [@Gerard\_Purra](https://discuss.elastic.co/u/Gerard_Purra)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 4:09pm UTC](https://discuss.elastic.co/t/cant-query-by-ids-using-logstash-filter-elasticserach/304024 "2022-05-05T16:09:11Z")
Hey folks, I’m using the logstash-filter-elasticsearch and I’d like to query using IDs (IDs | Elasticsearch Guide \[8.2\] | Elastic), and I find myself unable. Does anyone have any idea on how to work around that? The pr… --- ## [Logstash Input-Path as Index](https://discuss.elastic.co/t/logstash-input-path-as-index/304030)
**Author:** [@Robsen\_Inc](https://discuss.elastic.co/u/Robsen_Inc)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 4:06pm UTC](https://discuss.elastic.co/t/logstash-input-path-as-index/304030 "2022-05-05T16:06:36Z")
Hi Community, I would like to use the Path as an index. The question has been asked many times in different forums, but unfortunately the solutions presented do not work for me. Maybe you can help me. Specifically, I… --- ## [Grok ignore possible extra word/text at end of the line?](https://discuss.elastic.co/t/grok-ignore-possible-extra-word-text-at-end-of-the-line/304026)
**Author:** [@tjswe](https://discuss.elastic.co/u/tjswe)\ **Replies:** 3\ **Last updated:** [May 5, 2022, 4:03pm UTC](https://discuss.elastic.co/t/grok-ignore-possible-extra-word-text-at-end-of-the-line/304026 "2022-05-05T16:03:48Z")
Slightly embarrassed, but i can not find the answer of a what feels like simple question. Data looks like this ABC WORD1 DEF WORD2 GHI WORD3 or ABC WORD1 DEF WORD2 GHI WORD3 (nonimportanttext) This below works with … --- ## [Change Text mapping to Double/Number](https://discuss.elastic.co/t/change-text-mapping-to-double-number/304047)
**Author:** [@AmyMCollins](https://discuss.elastic.co/u/AmyMCollins)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 3:58pm UTC](https://discuss.elastic.co/t/change-text-mapping-to-double-number/304047 "2022-05-05T15:58:03Z")
Hi, I need to change the mapping of a field 'AmountExcVat' from Text to double. I have tried: but I am getting the following error: Can someone help me please? Thanks in advance, Amy --- ## [setCustomContext not showing data after upgrade from 7.9 to 8.1.2](https://discuss.elastic.co/t/setcustomcontext-not-showing-data-after-upgrade-from-7-9-to-8-1-2/304004)
**Author:** [@hertzden](https://discuss.elastic.co/u/hertzden)\ **Replies:** 0\ **Last updated:** [May 5, 2022, 7:56am UTC](https://discuss.elastic.co/t/setcustomcontext-not-showing-data-after-upgrade-from-7-9-to-8-1-2/304004 "2022-05-05T07:56:10Z")
We have setup custom context to fetch session FCP data for all our apps, last month we upgraded elastic version from 7.9 to 8.1.2 on 11th April, 2022. Since that date we are not able to see data in console while running … --- ## [Connection to localhost:9200 refused](https://discuss.elastic.co/t/connection-to-localhost-9200-refused/304040)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 6\ **Last updated:** [May 5, 2022, 2:28pm UTC](https://discuss.elastic.co/t/connection-to-localhost-9200-refused/304040 "2022-05-05T14:28:10Z")
Hello all, I am running a three node cluster with version 8.0.0. I start Elasticsearch nodes, they start without any errors. but when I load data from Logstash it gives me following errors. \[2022-05-04T14:54:41,780\]\[I… --- ## [Insert time range in TSVB markdown](https://discuss.elastic.co/t/insert-time-range-in-tsvb-markdown/303230)
**Author:** [@Chiaaa](https://discuss.elastic.co/u/Chiaaa)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:24pm UTC](https://discuss.elastic.co/t/insert-time-range-in-tsvb-markdown/303230 "2022-05-05T14:24:44Z")
Hi! I want to insert in my markdown text dynamic time range , something like: " This report starting from Apr 18, 00:00:00 to Apr 24, 23:59:59" (Those dates are the result of kql filter on ReportDate field "now-8d/d" … --- ## [Json input](https://discuss.elastic.co/t/json-input/303578)
**Author:** [@rituzza](https://discuss.elastic.co/u/rituzza)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:11pm UTC](https://discuss.elastic.co/t/json-input/303578 "2022-05-05T14:11:59Z")
I would like to create a data table analysis in which some Kpi are not related to all documents but only to those that satisfy a certain condition. For example, I want to calculate sum (field1) for documents for which … --- ## [Search large amounts of data as quickly as possible](https://discuss.elastic.co/t/search-large-amounts-of-data-as-quickly-as-possible/304021)
**Author:** [@error\_701](https://discuss.elastic.co/u/error_701)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 1:48pm UTC](https://discuss.elastic.co/t/search-large-amounts-of-data-as-quickly-as-possible/304021 "2022-05-05T13:48:05Z")
hey, i think i need ur help: the following use case: Monitor IDS, I receive about 300 million records of IP addresses every day, I need to search them for every single unique IP address as the last entry. (event) My… --- ## [How can i conditionally change the unit of metric values i receive?](https://discuss.elastic.co/t/how-can-i-conditionally-change-the-unit-of-metric-values-i-receive/303576)
**Author:** [@ASHOK\_PRIYADARSHI](https://discuss.elastic.co/u/ASHOK_PRIYADARSHI)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 1:32pm UTC](https://discuss.elastic.co/t/how-can-i-conditionally-change-the-unit-of-metric-values-i-receive/303576 "2022-05-05T13:32:09Z")
How can I change the unit as per my metric path ? --- ## [How to query multiple hosts using in elasticsearch using wildcard](https://discuss.elastic.co/t/how-to-query-multiple-hosts-using-in-elasticsearch-using-wildcard/303913)
**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 12:43pm UTC](https://discuss.elastic.co/t/how-to-query-multiple-hosts-using-in-elasticsearch-using-wildcard/303913 "2022-05-05T12:43:42Z")
hey all iam new to elk , iam trying to get all the hosts in the Elasticsearch db , i tried using a wildcard and "wild\_card": "hosts", "query": { "host.keyword": "test\*", "severity.keyword": "err" }, consider there … --- ## [Sizing question](https://discuss.elastic.co/t/sizing-question/304014)
**Author:** [@marek\_duciuc](https://discuss.elastic.co/u/marek_duciuc)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 11:01am UTC](https://discuss.elastic.co/t/sizing-question/304014 "2022-05-05T11:01:09Z")
Elasticsearch recommendations is as follows: Maximum of 32 GB heap 20 shards per 1 GB of heap 40 to 60 GB of data per shard this gives approximately 25TB to 39TB of data per node. Is this only theoretical or would… --- ## [Docs count delay - docs added regularly, but docs count 0](https://discuss.elastic.co/t/docs-count-delay-docs-added-regularly-but-docs-count-0/303740)
**Author:** [@jb79](https://discuss.elastic.co/u/jb79)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 10:38am UTC](https://discuss.elastic.co/t/docs-count-delay-docs-added-regularly-but-docs-count-0/303740 "2022-05-05T10:38:35Z")
Hi, Docs added regularly, but the count (after all added) could be verified after several minutes : Added docs ( @timestamp from logstash): Transport traffic Indexing rate: Docs count Seems that sth wr… --- ## [Storing images , videos in elasticserch](https://discuss.elastic.co/t/storing-images-videos-in-elasticserch/303985)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 8\ **Last updated:** [May 5, 2022, 10:17am UTC](https://discuss.elastic.co/t/storing-images-videos-in-elasticserch/303985 "2022-05-05T10:17:20Z")
Can someone help me how can I store images in elasticserch? 1st way: using logstash conf file 2nd way; using directly elasticserch --- ## [ELK reindex - no input realtime data](https://discuss.elastic.co/t/elk-reindex-no-input-realtime-data/303928)
**Author:** [@Next\_generation](https://discuss.elastic.co/u/Next_generation)\ **Replies:** 2\ **Last updated:** [May 4, 2022, 9:33pm UTC](https://discuss.elastic.co/t/elk-reindex-no-input-realtime-data/303928 "2022-05-04T21:33:15Z")
how to assign template to specific elk index i created the correct index template and migrated the data from the old index but it is not written further in real time How to make it write? (used by fluentd) --- ## [Kibana 401 Unauthorized](https://discuss.elastic.co/t/kibana-401-unauthorized/303954)
**Author:** [@CemG](https://discuss.elastic.co/u/CemG)\ **Replies:** 2\ **Last updated:** [May 5, 2022, 7:12am UTC](https://discuss.elastic.co/t/kibana-401-unauthorized/303954 "2022-05-05T07:12:50Z")
Hello, I would like to setup the dashboard of Winlogbeat in Kibana, but when I start Winlogbeat I have an error. I have done a curl, and saw that I got the error 401 as response. My architecture is : Winlogbeat → Kafk… --- ## [How to fix security issue with kibana 5.6 Timelion widget](https://discuss.elastic.co/t/how-to-fix-security-issue-with-kibana-5-6-timelion-widget/303996)
**Author:** [@kashifqazi](https://discuss.elastic.co/u/kashifqazi)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 6:29am UTC](https://discuss.elastic.co/t/how-to-fix-security-issue-with-kibana-5-6-timelion-widget/303996 "2022-05-05T06:29:22Z")
How to fix security issue with kibana 5.6 Timelion widget. --- ## [Want to send this logs to Elasticsearch without logstash](https://discuss.elastic.co/t/want-to-send-this-logs-to-elasticsearch-without-logstash/303990)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 5:28am UTC](https://discuss.elastic.co/t/want-to-send-this-logs-to-elasticsearch-without-logstash/303990 "2022-05-05T05:28:58Z")
Hello Every One I have Following Logs I want sent this logs using script (Powershell) to Elasticsearch without using logstash no need mediator any one can help How can I ? { "Id": "4280", "AppKey": "StoreSearchAPIUR… --- ## [Error when running pipelines.yml](https://discuss.elastic.co/t/error-when-running-pipelines-yml/303710)
**Author:** [@rrrrrrrrrrr](https://discuss.elastic.co/u/rrrrrrrrrrr)\ **Replies:** 8\ **Last updated:** [May 5, 2022, 2:33am UTC](https://discuss.elastic.co/t/error-when-running-pipelines-yml/303710 "2022-05-05T02:33:47Z")
Hello, I'm a newbie in Elastic community and I'm trying to run my pipelines.yml on /etc/logstash/ using this command /usr/share/logstash/bin/logstash -f pipelines.yml but all I'm getting is the error below... \[WARN \] 2… --- ## [ELK Issue while enabling x-pack](https://discuss.elastic.co/t/elk-issue-while-enabling-x-pack/303656)
**Author:** [@anubhav.bss](https://discuss.elastic.co/u/anubhav.bss)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:27am UTC](https://discuss.elastic.co/t/elk-issue-while-enabling-x-pack/303656 "2022-05-05T02:27:15Z")
Hi Friends, I am facing issue with ELK stack deployed on AWS ECS. Whenever I am trying to connect enable x-pack feature, Elasticsearch and Kibana containers are not coming up. EC2 instance is behind Application load ba… --- ## [Elasticsearch pod going into crashloopbackoff state due to no space left on the device](https://discuss.elastic.co/t/elasticsearch-pod-going-into-crashloopbackoff-state-due-to-no-space-left-on-the-device/303719)
**Author:** [@ayushsharma191](https://discuss.elastic.co/u/ayushsharma191)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:25am UTC](https://discuss.elastic.co/t/elasticsearch-pod-going-into-crashloopbackoff-state-due-to-no-space-left-on-the-device/303719 "2022-05-05T02:25:40Z")
Caused by: org.Elasticsearch.gateway.WriteStateException: failed to write state to the first location tmp file /usr/share/Elasticsearch/data/nodes/0/node-1.st.tmp", "at org.Elasticsearch.gateway.MetaDataStateFormat.writ… --- ## [Elasticsearch check if key exist in document](https://discuss.elastic.co/t/elasticsearch-check-if-key-exist-in-document/303816)
**Author:** [@Hovo\_Baghdasaryan](https://discuss.elastic.co/u/Hovo_Baghdasaryan)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:23am UTC](https://discuss.elastic.co/t/elasticsearch-check-if-key-exist-in-document/303816 "2022-05-05T02:23:48Z")
Hi All. I have key "field1" in the document of Elasticsearch. With mapping, a field is an object. sometimes field does not exist, sometimes the field exists but is empty (\[\]), sometimes the field has the correct value -… --- ## [Data is not populating in kibana](https://discuss.elastic.co/t/data-is-not-populating-in-kibana/303830)
**Author:** [@SnehaB](https://discuss.elastic.co/u/SnehaB)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:20am UTC](https://discuss.elastic.co/t/data-is-not-populating-in-kibana/303830 "2022-05-05T02:20:39Z")
Hi Team, I have created a index on kibana.But I am not able to see the data in the same index. please check the below logs for reference. The logs are showing as follows :- Total time for which application threads we… --- ## [Is it possible to pass multiple hosts in scroll api](https://discuss.elastic.co/t/is-it-possible-to-pass-multiple-hosts-in-scroll-api/303919)
**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:13am UTC](https://discuss.elastic.co/t/is-it-possible-to-pass-multiple-hosts-in-scroll-api/303919 "2022-05-05T02:13:59Z")
hi all , is it possible to pass multiple hosts in scroll api , i want to get multiple logs from multiple hosts using scroll request url = '{0}/{1}/\_search?scroll=1m&ignore\_unavailable=true'.format( … --- ## [Vector Tile API: Updated mvt\_sample error](https://discuss.elastic.co/t/vector-tile-api-updated-mvt-sample-error/303291)
**Author:** [@Joseph\_Parish](https://discuss.elastic.co/u/Joseph_Parish)\ **Replies:** 2\ **Last updated:** [May 5, 2022, 1:59am UTC](https://discuss.elastic.co/t/vector-tile-api-updated-mvt-sample-error/303291 "2022-05-05T01:59:14Z")
The latest update to the mvt\_sample throws this ResponseError: x\_content\_parse\_exception: \[x\_content\_parse\_exception\] Reason: \[1:36\] \[vector-tile\] unknown field \[grid\_agg\] did you mean \[grid\_type\]? If the grid\_agg field … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=638) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=640)