# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=668 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 669 --- ## [Default install of logstash 8.1 results in error](https://discuss.elastic.co/t/default-install-of-logstash-8-1-results-in-error/300854)
**Author:** [@Louis\_Bohm](https://discuss.elastic.co/u/Louis_Bohm)\ **Replies:** 5\ **Last updated:** [March 29, 2022, 4:50pm UTC](https://discuss.elastic.co/t/default-install-of-logstash-8-1-results-in-error/300854 "2022-03-29T16:50:12Z")
I am running Centos 7.9 and followed the directions on this web to install logstash. After doing a yum -y install logstash to get logstash 8.1 installed did the following: Removed the logstash-sample.conf. Ran the fol… --- ## [Collect multiple events for processing in the filter and send to output (bulk)](https://discuss.elastic.co/t/collect-multiple-events-for-processing-in-the-filter-and-send-to-output-bulk/300986)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 4:25pm UTC](https://discuss.elastic.co/t/collect-multiple-events-for-processing-in-the-filter-and-send-to-output-bulk/300986 "2022-03-29T16:25:14Z")
Hi folks, I have following use case: I receive events from beat and would like to enrich them with additional information using a filter plugin in logstash. The filter plugin must send a request to an endpoint and retr… --- ## [Requests per second with Kibana Lens](https://discuss.elastic.co/t/requests-per-second-with-kibana-lens/300826)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 4:09pm UTC](https://discuss.elastic.co/t/requests-per-second-with-kibana-lens/300826 "2022-03-29T16:09:37Z")
Hello, How can we display a metric showing Requests per \[timeframe\] with a Metric Lens? In older Kibana versions this was possible: It's not a derivative, nor a counter\_rate but rather the average number of recor… --- ## [Delete temporary storage and cookies upon session termination](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974)
**Author:** [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\ **Replies:** 4\ **Last updated:** [March 29, 2022, 3:30pm UTC](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974 "2022-03-29T15:30:00Z")
Can Elasticsearch be configured to delete temporary storage and cookies upon session termination? If so, is it documented in anywhere? --- ## [Kibana windows notifications possibility](https://discuss.elastic.co/t/kibana-windows-notifications-possibility/299957)
**Author:** [@John\_McAfee1](https://discuss.elastic.co/u/John_McAfee1)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 3:19pm UTC](https://discuss.elastic.co/t/kibana-windows-notifications-possibility/299957 "2022-03-29T15:19:04Z")
Good Morning, I know that Kibana/Elasticsearch is capable for providing e-mails by using watches/alerts. But is it possible for Kibana to provide windows notification similar to Slack or other web based tools? Is there… --- ## [When output from logstash to mangodb, can I specify which fields wanted in output?](https://discuss.elastic.co/t/when-output-from-logstash-to-mangodb-can-i-specify-which-fields-wanted-in-output/300817)
**Author:** [@maoxuguang](https://discuss.elastic.co/u/maoxuguang)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 2:56pm UTC](https://discuss.elastic.co/t/when-output-from-logstash-to-mangodb-can-i-specify-which-fields-wanted-in-output/300817 "2022-03-29T14:56:25Z")
I config two destination in logstash output, one is Elasticsearch, the other is mongodb. I only want to out put several fields to mongodb, not all of them. How to config to achieve that? Thanks a lot. --- ## [And/OR DSL Query](https://discuss.elastic.co/t/and-or-dsl-query/300985)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 2:56pm UTC](https://discuss.elastic.co/t/and-or-dsl-query/300985 "2022-03-29T14:56:08Z")
Hello, I'm having a difficult time getting a DSL query to work right with a combination of an AND and OR. For the OR side, one of the two must be present in the document.... { "state": "active" } { "state": "re-surfa… --- ## [Terminate user session based on time period](https://discuss.elastic.co/t/terminate-user-session-based-on-time-period/300975)
**Author:** [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 2:18pm UTC](https://discuss.elastic.co/t/terminate-user-session-based-on-time-period/300975 "2022-03-29T14:18:46Z")
Can Elasticsearch be configured to terminate and log out privileged users after a set period? If so, is it documented anywhere? --- ## [Create and email report based on query](https://discuss.elastic.co/t/create-and-email-report-based-on-query/300971)
**Author:** [@ddraganp6](https://discuss.elastic.co/u/ddraganp6)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 1:55pm UTC](https://discuss.elastic.co/t/create-and-email-report-based-on-query/300971 "2022-03-29T13:55:02Z")
Hi everyone, I was able to succesfully retrieve the data I need - my top 10 most ERROR log producing applications - using this query : GET \_search { "size": 0, "query": { "bool": { "must": \[ { … --- ## [Logstash: \[ERROR\]\[logstash.javapipeline \]\[main\] Pipeline error | Cannot get new connection from pool](https://discuss.elastic.co/t/logstash-error-logstash-javapipeline-main-pipeline-error-cannot-get-new-connection-from-pool/300696)
**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\ **Replies:** 11\ **Last updated:** [March 29, 2022, 1:40pm UTC](https://discuss.elastic.co/t/logstash-error-logstash-javapipeline-main-pipeline-error-cannot-get-new-connection-from-pool/300696 "2022-03-29T13:40:02Z")
I am trying to start logstash pipeline. But after long search, I do not know what I am doing wrong. I am getting this output: C:\\Users\\Name\\ElasticStack\\logstash-8.0.1\>.\\bin\\logstash.bat -f erste-pipeline.conf "Using bu… --- ## [\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file because modules or co mmand line options are specified](https://discuss.elastic.co/t/logstash-config-source-multilocal-ignoring-the-pipelines-yml-file-because-modules-or-co-mmand-line-options-are-specified/300852)
**Author:** [@lug-gh](https://discuss.elastic.co/u/lug-gh)\ **Replies:** 6\ **Last updated:** [March 29, 2022, 1:23pm UTC](https://discuss.elastic.co/t/logstash-config-source-multilocal-ignoring-the-pipelines-yml-file-because-modules-or-co-mmand-line-options-are-specified/300852 "2022-03-29T13:23:34Z")
Hi, I wan't to use multiple pipelines, but after some testing I noticed the pipelines.yml won't be loaded. I searched the web and found it's ignored when you specify -f or -e (Multiple Pipelines | Logstash Reference \[8.1… --- ## [Pie chart on accumulated data](https://discuss.elastic.co/t/pie-chart-on-accumulated-data/300545)
**Author:** [@MarioRojas](https://discuss.elastic.co/u/MarioRojas)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 1:25pm UTC](https://discuss.elastic.co/t/pie-chart-on-accumulated-data/300545 "2022-03-29T13:25:38Z")
Hi All, I'm very new to Kibana and I need to create a pie chart based on the sum of the values present in different logs, marginalized from a given term in yet another log... In Discover the data looks like this: W… --- ## [Logstash redundancy and availability in ELK cluster](https://discuss.elastic.co/t/logstash-redundancy-and-availability-in-elk-cluster/300963)
**Author:** [@ELK\_Dummy](https://discuss.elastic.co/u/ELK_Dummy)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 1:15pm UTC](https://discuss.elastic.co/t/logstash-redundancy-and-availability-in-elk-cluster/300963 "2022-03-29T13:15:44Z")
Hi all, The question is about Logstash redundancy and availability. We have an Elasticsearch Cluster running fine with 3 CentOS nodes. One of this nodes hosts Losgstash. Logstash is set to ingest log files sent by SFT… --- ## [Write and then Read consistency](https://discuss.elastic.co/t/write-and-then-read-consistency/300785)
**Author:** [@TheGreatBaldOne](https://discuss.elastic.co/u/TheGreatBaldOne)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 1:11pm UTC](https://discuss.elastic.co/t/write-and-then-read-consistency/300785 "2022-03-29T13:11:59Z")
I am trying to achieve write and then read consistency. In other words, once i update or insert a document, I want to immediately read it correctly. I am getting a a list of a user's posts from ES insert a new pos… --- ## [Input the data into Elastic](https://discuss.elastic.co/t/input-the-data-into-elastic/300957)
**Author:** [@Thiago\_Paiva](https://discuss.elastic.co/u/Thiago_Paiva)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 1:00pm UTC](https://discuss.elastic.co/t/input-the-data-into-elastic/300957 "2022-03-29T13:00:33Z")
Hi, I have an elastic cluster with 3 master nodes, ten data nodes, and of these three are ingest too. But all nodes accept data in elastic open port. I used in the logstash output master:port and node:port, always \_docs… --- ## [Logstash service fails to start due to Ruby Error](https://discuss.elastic.co/t/logstash-service-fails-to-start-due-to-ruby-error/300902)
**Author:** [@ASA01](https://discuss.elastic.co/u/ASA01)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 12:45pm UTC](https://discuss.elastic.co/t/logstash-service-fails-to-start-due-to-ruby-error/300902 "2022-03-29T12:45:25Z")
I cannot get logstash to start and keep running. I have verified all my logstash confs work individually with test\_and\_exit, but when I try to start it as a service I get the following error. \[2022-03-29T01:37:10,010\]\[… --- ## [Sum index size based on unique identifier](https://discuss.elastic.co/t/sum-index-size-based-on-unique-identifier/300581)
**Author:** [@phager](https://discuss.elastic.co/u/phager)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 12:33pm UTC](https://discuss.elastic.co/t/sum-index-size-based-on-unique-identifier/300581 "2022-03-29T12:33:29Z")
I have data within Elasticsearch indexed by customer, i.e. index-custnumber-2022-w11, that I would like to sum index size per unique customer into a chart in Kibana. I can run curl -X GET "localhost:9200/\_cat/indices/ind… --- ## [Automated Curations in Meta Engines](https://discuss.elastic.co/t/automated-curations-in-meta-engines/299353)
**Author:** [@miki\_haiat](https://discuss.elastic.co/u/miki_haiat)\ **Replies:** 7\ **Last updated:** [March 29, 2022, 12:31pm UTC](https://discuss.elastic.co/t/automated-curations-in-meta-engines/299353 "2022-03-29T12:31:47Z")
Automated curation is a very cool feature but for some unknown reason it dosent work on meta engine. im currently using v 8.0 and im wondering if its a version issue ? --- ## [Metricbeat SQL module date fields](https://discuss.elastic.co/t/metricbeat-sql-module-date-fields/297348)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 12:30pm UTC](https://discuss.elastic.co/t/metricbeat-sql-module-date-fields/297348 "2022-03-29T12:30:16Z")
I am ingesting some sql queries via the metricbeat sql module, including date/time fields. I would like to use these fields on a Lens graph, but cannot as they are ingested as a string format. Is there any way to get K… --- ## [How to add Available Fields on my Discover menu for visualization purposes on my dashboards?](https://discuss.elastic.co/t/how-to-add-available-fields-on-my-discover-menu-for-visualization-purposes-on-my-dashboards/300954)
**Author:** [@renatoa12](https://discuss.elastic.co/u/renatoa12)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 11:42am UTC](https://discuss.elastic.co/t/how-to-add-available-fields-on-my-discover-menu-for-visualization-purposes-on-my-dashboards/300954 "2022-03-29T11:42:06Z")
Hi everyone, Does anyone here know how can i add specific fields for my index for visualization purposes on my dashboards?? --- ## [Stop standard tokenizer from splitting on punctuations](https://discuss.elastic.co/t/stop-standard-tokenizer-from-splitting-on-punctuations/300951)
**Author:** [@Nipun\_Tulsyan](https://discuss.elastic.co/u/Nipun_Tulsyan)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 11:28am UTC](https://discuss.elastic.co/t/stop-standard-tokenizer-from-splitting-on-punctuations/300951 "2022-03-29T11:28:00Z")
Hi We use the "standard" tokenizer in custom analyzer definitions. By default the standard tokenizer splits words on hyphens and ampersands, so for example "i-mac" is tokenized to "i" and "mac" Is there any way to co… --- ## [Enterprise Search Not Grabbing Product Images From Shopify Product Page](https://discuss.elastic.co/t/enterprise-search-not-grabbing-product-images-from-shopify-product-page/299105)
**Author:** [@thahunt](https://discuss.elastic.co/u/thahunt)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 10:24am UTC](https://discuss.elastic.co/t/enterprise-search-not-grabbing-product-images-from-shopify-product-page/299105 "2022-03-29T10:24:46Z")
Upon first ingestion, a default text based schema was created for me. I need to create a custom schema for the web crawler to index. The default index did a good job but it did not grab the product image, which is pr… --- ## [Kibana behind apache reverse proxy](https://discuss.elastic.co/t/kibana-behind-apache-reverse-proxy/300454)
**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 9:37am UTC](https://discuss.elastic.co/t/kibana-behind-apache-reverse-proxy/300454 "2022-03-29T09:37:35Z")
Hi I'm trying to get kibana working behind and apache reverse proxy. I already have it working, but there's one issue (for which I already have a workaround) but I need to know if it's a configuration issue or a bug. The… --- ## [Elasticsearch index mapping?](https://discuss.elastic.co/t/elasticsearch-index-mapping/300926)
**Author:** [@AJITH](https://discuss.elastic.co/u/AJITH)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 9:27am UTC](https://discuss.elastic.co/t/elasticsearch-index-mapping/300926 "2022-03-29T09:27:34Z")
i'm beginner of Elasticsearch i doing now a simple project for my training purpose , my project is user login system with fileuploading and search option, user can upload multiple textfiles on his account there is no l… --- ## [Combining Documents for test result comparison in Kibana](https://discuss.elastic.co/t/combining-documents-for-test-result-comparison-in-kibana/300829)
**Author:** [@JBufton](https://discuss.elastic.co/u/JBufton)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 9:23am UTC](https://discuss.elastic.co/t/combining-documents-for-test-result-comparison-in-kibana/300829 "2022-03-29T09:23:48Z")
Hi, I'm new here so I apologise if this turns out to be a noob question. I have a large set of documents in elastic containing test result data including timestamps, runtimes, results, branch tests were ran on and test r… --- ## [Logstash "Marking url as dead" issue and http client logging log4j2](https://discuss.elastic.co/t/logstash-marking-url-as-dead-issue-and-http-client-logging-log4j2/300937)
**Author:** [@can.ozdemir](https://discuss.elastic.co/u/can.ozdemir)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 9:10am UTC](https://discuss.elastic.co/t/logstash-marking-url-as-dead-issue-and-http-client-logging-log4j2/300937 "2022-03-29T09:10:52Z")
Hello there, We are experiencing "marking url as dead" problem on our logstash machines, I know this is a known issue and there are many solutions people are discussing. I tried some of them they are not the solution t… --- ## [Concurrent IndexSearch clarification](https://discuss.elastic.co/t/concurrent-indexsearch-clarification/300073)
**Author:** [@dlants](https://discuss.elastic.co/u/dlants)\ **Replies:** 0\ **Last updated:** [March 18, 2022, 4:51pm UTC](https://discuss.elastic.co/t/concurrent-indexsearch-clarification/300073 "2022-03-18T16:51:04Z")
This blog post describes concurrent query execution in Lucene (at the IndexSearcher level), and claims: Concurrent query execution is a surprisingly little known sleeper feature in Lucene, since it is not yet exposed i… --- ## [ES \[Get by document ID\] vs \[Search by terms\] returns different results](https://discuss.elastic.co/t/es-get-by-document-id-vs-search-by-terms-returns-different-results/300700)
**Author:** [@T-Muller-25](https://discuss.elastic.co/u/T-Muller-25)\ **Replies:** 0\ **Last updated:** [March 25, 2022, 1:26pm UTC](https://discuss.elastic.co/t/es-get-by-document-id-vs-search-by-terms-returns-different-results/300700 "2022-03-25T13:26:50Z")
Hi, From my understanding, there is no difference between the get by document id and search by terms but the performance. However, I just encountered a very strange issue. when I use: GET /my\_index/\_doc/1 --\> it retur… --- ## [Drawing a time based graph](https://discuss.elastic.co/t/drawing-a-time-based-graph/300382)
**Author:** [@George915](https://discuss.elastic.co/u/George915)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 8:57am UTC](https://discuss.elastic.co/t/drawing-a-time-based-graph/300382 "2022-03-29T08:57:24Z")
Hi ELK community, newbie ELK user here. I have a time based document as shown below and I was able to insert it in my Elasticsearch. I set up the timestamps field as a date date type. Timestamps are epoch time. I want t… --- ## [I am trying to perform aggregation on top aggregations results in kibana visualization tab. Can anyone please help me how to achieve this](https://discuss.elastic.co/t/i-am-trying-to-perform-aggregation-on-top-aggregations-results-in-kibana-visualization-tab-can-anyone-please-help-me-how-to-achieve-this/300795)
**Author:** [@Sumithra\_Thammineni](https://discuss.elastic.co/u/Sumithra_Thammineni)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 8:51am UTC](https://discuss.elastic.co/t/i-am-trying-to-perform-aggregation-on-top-aggregations-results-in-kibana-visualization-tab-can-anyone-please-help-me-how-to-achieve-this/300795 "2022-03-29T08:51:34Z")
My use case: Group the data by "a" attribute and "b" attribute. The below is the result i am able to figure out with kibana a attribute b attribute Count A1 x 1 A1 y 1 B1 z 2 Problem: Again i want to grou… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=667) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=669)