# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=641 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 642 --- ## [Filter data in kibana based on begin date and end date](https://discuss.elastic.co/t/filter-data-in-kibana-based-on-begin-date-and-end-date/303905)
**Author:** [@Alice\_Ionescu](https://discuss.elastic.co/u/Alice_Ionescu)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 10:41am UTC](https://discuss.elastic.co/t/filter-data-in-kibana-based-on-begin-date-and-end-date/303905 "2022-05-04T10:41:53Z")
Hello, I have a table with information and a begin date and an end date. I want to be able to filter data that are valid in the given interval. Do you have an idea on how to do this? Thanks! --- ## [Split filter logstash](https://discuss.elastic.co/t/split-filter-logstash/303925)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 0\ **Last updated:** [May 4, 2022, 9:45am UTC](https://discuss.elastic.co/t/split-filter-logstash/303925 "2022-05-04T09:45:16Z")
Hi, Split filter works fine but i have a problem here my log looks like 2312-15:44:07:813|V2.5.4|DOW |WooalsewD6/TTxrff==|ss|ss|0110006|0Succeed| 1110-14:17:40:282|V2.5.1|G|1212|444|||EXCEPTION : System.ServiceModel.… --- ## [Unable to login to kibana](https://discuss.elastic.co/t/unable-to-login-to-kibana/303863)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 2\ **Last updated:** [May 4, 2022, 8:32am UTC](https://discuss.elastic.co/t/unable-to-login-to-kibana/303863 "2022-05-04T08:32:35Z")
Hi Team, I have installed es cluster v 7.16.2. kibana is installed on two servers. If kibana service is running on both servers, then i am not able to login to kibana. If its stopped on one of the server, then able to… --- ## [How to handle grok optional pattern (?:)](https://discuss.elastic.co/t/how-to-handle-grok-optional-pattern/303796)
**Author:** [@marwen](https://discuss.elastic.co/u/marwen)\ **Replies:** 6\ **Last updated:** [May 4, 2022, 7:36am UTC](https://discuss.elastic.co/t/how-to-handle-grok-optional-pattern/303796 "2022-05-04T07:36:37Z")
Hi everyone I'm new to Elastick Stack, I set grok custom pattern using RegEx: MODULE\_NAME (?:((?\<=\[\\\[\])\\/\\S\[^\\\]\]+)) the problem is it's optional pattern so I want the "module\_name" field to be empty instead of showing … --- ## [Why logstash csv filter skip\_header param don't work](https://discuss.elastic.co/t/why-logstash-csv-filter-skip-header-param-dont-work/303894)
**Author:** [@zhanghao116560](https://discuss.elastic.co/u/zhanghao116560)\ **Replies:** 2\ **Last updated:** [May 4, 2022, 6:18am UTC](https://discuss.elastic.co/t/why-logstash-csv-filter-skip-header-param-dont-work/303894 "2022-05-04T06:18:35Z")
Using the Logstash CSV filter to parse my CSV file, I set the skip\_header parameter to true. I wanted the first line not to be printed, but the actual result program didn't skip the first line。 here is my config: input… --- ## [Logstash mutate not working after kv filter applied](https://discuss.elastic.co/t/logstash-mutate-not-working-after-kv-filter-applied/303849)
**Author:** [@splitmessage88](https://discuss.elastic.co/u/splitmessage88)\ **Replies:** 6\ **Last updated:** [May 4, 2022, 5:56am UTC](https://discuss.elastic.co/t/logstash-mutate-not-working-after-kv-filter-applied/303849 "2022-05-04T05:56:19Z")
Hi, I created a filter for cisco syslog, input source cisco FTD. All the fields are parsing correctly but I can't rename/remove fields with mutate after I used the kv {} filter. Is it possible to use mutate after kv … --- ## [Metric - show last consecutive values](https://discuss.elastic.co/t/metric-show-last-consecutive-values/303902)
**Author:** [@Itiel\_Olenick](https://discuss.elastic.co/u/Itiel_Olenick)\ **Replies:** 0\ **Last updated:** [May 4, 2022, 5:47am UTC](https://discuss.elastic.co/t/metric-show-last-consecutive-values/303902 "2022-05-04T05:47:05Z")
Hi there, We have data coming in from a health check we preform on our services, and i am trying to figure out a way to create a metric that will show the last consecutive fails. The data field for the health-check is … --- ## [Kibana Unable to retrieve version information from Elasticsearch nodes. socket hang up](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-socket-hang-up/303528)
**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\ **Replies:** 8\ **Last updated:** [May 4, 2022, 4:46am UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-socket-hang-up/303528 "2022-05-04T04:46:46Z")
Dear Team, kindly advise why error occurs when starting Kibana? da46c1"}} {"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-28T18:37:07.516+04:00","message":"Unable to retrieve version information from Elasticsearch nod… --- ## [Logstash plugin 0.5 fraction on number field](https://discuss.elastic.co/t/logstash-plugin-0-5-fraction-on-number-field/303890)
**Author:** [@Altiano\_Gerung](https://discuss.elastic.co/u/Altiano_Gerung)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 3:27am UTC](https://discuss.elastic.co/t/logstash-plugin-0-5-fraction-on-number-field/303890 "2022-05-04T03:27:46Z")
With logstash google pub/sub output plugin.. How do you set : delay\_threshold\_secs =\> "0.5" ? If I set to 1.x or 2.x, it'll work, but for 0.x it'll never work, so I guess it's just a matter of syntax error.. --- ## [Logstash filter out log lines](https://discuss.elastic.co/t/logstash-filter-out-log-lines/302230)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 5\ **Last updated:** [May 4, 2022, 3:11am UTC](https://discuss.elastic.co/t/logstash-filter-out-log-lines/302230 "2022-05-04T03:11:35Z")
Hi, I have json logs that I want to filter based on the message field. {"@timestamp":"2022-04-05T01:20:50.917+00:00","severity":"INFO","service":"service","pid":"18245","thread":"http-nio-8102-exec-1","class":"class","… --- ## [Alert 설정 관련 질문](https://discuss.elastic.co/t/alert/303888)
**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\ **Replies:** 0\ **Last updated:** [May 4, 2022, 1:37am UTC](https://discuss.elastic.co/t/alert/303888 "2022-05-04T01:37:16Z")
안녕하세요 항상 감사합니다 커뮤니티에 생각보다 전문가 분들이 바쁘시거나 많이 없으신듯 하네요 ㅜㅜ 현재 metricbeat를 수집하는 DB가 약 20대 있습니다. 그 중에 disk 사용량이 가장 높은 것이 87.6%를 점유하고 있습니다. 그래서 host.name: db-\*로 필터를 걸었을 때, 데이터가 87.6%로 보여집니다. (전체 자산 중 가장 높은 것의 데이터로… --- ## [Spring4Shell ::Spring Framework Remote Code Execution Vulnerability](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/301229)
**Author:** [@Vishnu\_Vijay](https://discuss.elastic.co/u/Vishnu_Vijay)\ **Replies:** 5\ **Last updated:** [May 3, 2022, 11:55pm UTC](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/301229 "2022-05-03T23:55:49Z")
Hello, We are using Elasticsearch 6.3.2 & 6.8.23 Please let us know, whether ES is using spring boot war and whether Elasticsearch is impacted any way by the reported spring shell vulnerability. Please suggest, wheth… --- ## [Unable to Delete Copied Dashboard Panel](https://discuss.elastic.co/t/unable-to-delete-copied-dashboard-panel/302677)
**Author:** [@Bartu\_Gokalp](https://discuss.elastic.co/u/Bartu_Gokalp)\ **Replies:** 14\ **Last updated:** [May 3, 2022, 10:15pm UTC](https://discuss.elastic.co/t/unable-to-delete-copied-dashboard-panel/302677 "2022-05-03T22:15:40Z")
I have copied a from one dashboard to another. Than I have deleted original panel from first dashboard. Options \> more \> Delete from dashboard is not visible in editing mode. So, I am unable to delete it. (see screensho… --- ## [Logstash- /var/log/logstash - has no files](https://discuss.elastic.co/t/logstash-var-log-logstash-has-no-files/303780)
**Author:** [@gurumu](https://discuss.elastic.co/u/gurumu)\ **Replies:** 7\ **Last updated:** [May 3, 2022, 8:46pm UTC](https://discuss.elastic.co/t/logstash-var-log-logstash-has-no-files/303780 "2022-05-03T20:46:35Z")
Hello- I have installed Elasticsearch, Kibana and Logstash version 8.1.0 on my ubuntu VM. I am trying to ingest auth.log into ES by passing it through logstash. attached is the configuration file screenshots. I am not se… --- ## [Logstash Permission denied - NUL error](https://discuss.elastic.co/t/logstash-permission-denied-nul-error/303686)
**Author:** [@Ersan](https://discuss.elastic.co/u/Ersan)\ **Replies:** 3\ **Last updated:** [May 3, 2022, 8:32pm UTC](https://discuss.elastic.co/t/logstash-permission-denied-nul-error/303686 "2022-05-03T20:32:57Z")
Hello I am new to EleasticSearch. I try to run logstash on Windows for the first time with different instrutions/Java versions/Logtash versions but always get the same error. I checked out the forms too but could not f… --- ## [How to start a elastic cluster 8.1 with three or more nodes](https://discuss.elastic.co/t/how-to-start-a-elastic-cluster-8-1-with-three-or-more-nodes/303540)
**Author:** [@Adrian\_Gtz](https://discuss.elastic.co/u/Adrian_Gtz)\ **Replies:** 8\ **Last updated:** [May 3, 2022, 8:10pm UTC](https://discuss.elastic.co/t/how-to-start-a-elastic-cluster-8-1-with-three-or-more-nodes/303540 "2022-05-03T20:10:59Z")
I have the first node, but I don't know what is next. What do I have to do to define the master and join new nodes to the cluster. Is there a guide or something explained ? Thanks in advanced. --- ## [ECE Installation Prerequisites - Max open files descriptors per process](https://discuss.elastic.co/t/ece-installation-prerequisites-max-open-files-descriptors-per-process/303325)
**Author:** [@morariu](https://discuss.elastic.co/u/morariu)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 8:11pm UTC](https://discuss.elastic.co/t/ece-installation-prerequisites-max-open-files-descriptors-per-process/303325 "2022-04-26T20:11:31Z")
I am trying to install ECE but the prerequisites fail with the following: OS settings for max open file descriptors per process should be \>= 65536, currently 32768 That's what I get when I exec in the container and run… --- ## [ECE Fully Private Installation on AWS - no public endpoints](https://discuss.elastic.co/t/ece-fully-private-installation-on-aws-no-public-endpoints/303263)
**Author:** [@morariu](https://discuss.elastic.co/u/morariu)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 10:41am UTC](https://discuss.elastic.co/t/ece-fully-private-installation-on-aws-no-public-endpoints/303263 "2022-04-26T10:41:19Z")
I have installed ECE on AWS EC2 and while the (latest) installation docs are pretty straightforward it stops there. There are no specifics as to what is required after the installation. I hope someone can help as I can'… --- ## [Elasticsearch Upgrade from 2.x to 6.x](https://discuss.elastic.co/t/elasticsearch-upgrade-from-2-x-to-6-x/301590)
**Author:** [@veenarvg](https://discuss.elastic.co/u/veenarvg)\ **Replies:** 0\ **Last updated:** [April 5, 2022, 6:24am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-2-x-to-6-x/301590 "2022-04-05T06:24:33Z")
This category relates to the Enterprise Search set of products - App Search, Site Search and Workplace Search. If your question relates to core Elasticsearch functionality, please head over to the #elastic-stack:elastic… --- ## [Kibana lens formula distinct by rows](https://discuss.elastic.co/t/kibana-lens-formula-distinct-by-rows/303847)
**Author:** [@wiwinagtor](https://discuss.elastic.co/u/wiwinagtor)\ **Replies:** 2\ **Last updated:** [May 3, 2022, 6:31pm UTC](https://discuss.elastic.co/t/kibana-lens-formula-distinct-by-rows/303847 "2022-05-03T18:31:00Z")
Is there a way to perform using kibana lens a calculated fields table where the formulas changes by row? For example: Or there is another way to do it, Thanks everyone --- ## [Logstash Conf | Extracting Filename from Path](https://discuss.elastic.co/t/logstash-conf-extracting-filename-from-path/303818)
**Author:** [@srii](https://discuss.elastic.co/u/srii)\ **Replies:** 2\ **Last updated:** [May 3, 2022, 4:36pm UTC](https://discuss.elastic.co/t/logstash-conf-extracting-filename-from-path/303818 "2022-05-03T16:36:14Z")
I am trying to setup Logstash to feed Elasticsearch. In course, I've created the following conf file that seem to work nicely: input { beats { port =\> 5044 } file { path =\> "C:/f1/f2/Logs/f3/LocalHost#b… --- ## [Is there any tool which will create dummy document based on index mapping for testing?](https://discuss.elastic.co/t/is-there-any-tool-which-will-create-dummy-document-based-on-index-mapping-for-testing/279935)
**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\ **Replies:** 1\ **Last updated:** [May 3, 2022, 4:30pm UTC](https://discuss.elastic.co/t/is-there-any-tool-which-will-create-dummy-document-based-on-index-mapping-for-testing/279935 "2022-05-03T16:30:12Z")
I have created a wrapper around ES index bulk document API, I need to test the performance of it. I want to create at least, 1000 documents based on my index mapping, so that I can test the performance of my API. Is th… --- ## [How to get rid of deleted documents and reclaim disk space?](https://discuss.elastic.co/t/how-to-get-rid-of-deleted-documents-and-reclaim-disk-space/303184)
**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\ **Replies:** 14\ **Last updated:** [May 3, 2022, 4:09pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-deleted-documents-and-reclaim-disk-space/303184 "2022-05-03T16:09:19Z")
I have a bunch of indexes with a massive amount of deleted documents. I've tried running POST /\_forcemerge?only\_expunge\_deletes=true multiple times, but it doesn't seem to do anything. The command returns Gateway Ti… --- ## [Official Puppet Forge Module Deprecation](https://discuss.elastic.co/t/official-puppet-forge-module-deprecation/303752)
**Author:** [@Arthur7868](https://discuss.elastic.co/u/Arthur7868)\ **Replies:** 2\ **Last updated:** [May 3, 2022, 3:11pm UTC](https://discuss.elastic.co/t/official-puppet-forge-module-deprecation/303752 "2022-05-03T15:11:31Z")
I noticed that the Puppet Forge Elasticsearch installation module provided by Elastic has been deprecated at the end of March 2022 (elastic/elasticsearch · Module for managing and configuring Elasticsearch nodes · Puppet… --- ## [ERROR: Failed to determine the health of the cluster](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/303772)
**Author:** [@hernani33](https://discuss.elastic.co/u/hernani33)\ **Replies:** 4\ **Last updated:** [May 3, 2022, 3:07pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/303772 "2022-05-03T15:07:11Z")
hello, i have Elasticsearch-8.1.3.tar.gz and kibana-8.1.3.tar.gz they are work but when i make this command line ----\> bin/Elasticsearch-create-enrollment-token -s kibana give me error ---\> ERROR: Failed to determin… --- ## [Sorting by Relevance Score and Sold Counts](https://discuss.elastic.co/t/sorting-by-relevance-score-and-sold-counts/303810)
**Author:** [@icgncl](https://discuss.elastic.co/u/icgncl)\ **Replies:** 3\ **Last updated:** [May 3, 2022, 2:56pm UTC](https://discuss.elastic.co/t/sorting-by-relevance-score-and-sold-counts/303810 "2022-05-03T14:56:58Z")
Hello everyone, I want to sort results according to sold counts. However, the criteria should also include relevance score. For example, assume that for a "X" product, sold count is 100 and relevance score 3; for a "Y" … --- ## [Mount ExistingClaim in Logstash install with Helm](https://discuss.elastic.co/t/mount-existingclaim-in-logstash-install-with-helm/303784)
**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\ **Replies:** 1\ **Last updated:** [May 3, 2022, 2:14pm UTC](https://discuss.elastic.co/t/mount-existingclaim-in-logstash-install-with-helm/303784 "2022-05-03T14:14:03Z")
I am using the official Helm chart for Logstash. I want to mount a volume using an existingClaim that has some dictionaries that will be used for translate filters across multiple Logstash instances. How do I bring in … --- ## [Failed to initialize a TrustManager for the system keystore (using elasticsearch-oss; i.e. no XPack)](https://discuss.elastic.co/t/failed-to-initialize-a-trustmanager-for-the-system-keystore-using-elasticsearch-oss-i-e-no-xpack/303778)
**Author:** [@Alex\_Nelson](https://discuss.elastic.co/u/Alex_Nelson)\ **Replies:** 4\ **Last updated:** [May 3, 2022, 1:44pm UTC](https://discuss.elastic.co/t/failed-to-initialize-a-trustmanager-for-the-system-keystore-using-elasticsearch-oss-i-e-no-xpack/303778 "2022-05-03T13:44:42Z")
I manage Elasticsearch on multiple instances. One of my instances is having problems bringing up Elasticsearch. I am unable to determine why this one instance is having problems. All of my instances should have the sa… --- ## [Manage "new" index templates with Logstash](https://discuss.elastic.co/t/manage-new-index-templates-with-logstash/303831)
**Author:** [@frank\_esg](https://discuss.elastic.co/u/frank_esg)\ **Replies:** 0\ **Last updated:** [May 3, 2022, 12:41pm UTC](https://discuss.elastic.co/t/manage-new-index-templates-with-logstash/303831 "2022-05-03T12:41:22Z")
Hi, whe´re currently using logstash to process all of our messages and we are using the "manage template" function of the Elasticsearch output. Now i' m working on the migration of our legacy templates to the new (comp… --- ## [Artifacts.elastic.co responds with 403](https://discuss.elastic.co/t/artifacts-elastic-co-responds-with-403/302151)
**Author:** [@kam1sh](https://discuss.elastic.co/u/kam1sh)\ **Replies:** 3\ **Last updated:** [May 3, 2022, 12:13pm UTC](https://discuss.elastic.co/t/artifacts-elastic-co-responds-with-403/302151 "2022-05-03T12:13:13Z")
Hi! I'm writing a blog post with overview of various logging solutions. When time has come to Elastic stack, I faced error downloading any package: $ sudo apt update \<...\> Err:8 https://artifacts.elastic.co/packages/8… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=640) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=642)