# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=675 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 676 --- ## [Visualization of requirement fulfillment during release tests](https://discuss.elastic.co/t/visualization-of-requirement-fulfillment-during-release-tests/300296)
**Author:** [@nikaes](https://discuss.elastic.co/u/nikaes)\ **Replies:** 0\ **Last updated:** [March 22, 2022, 8:26am UTC](https://discuss.elastic.co/t/visualization-of-requirement-fulfillment-during-release-tests/300296 "2022-03-22T08:26:58Z")
Hi All, I am quite new to Kibana and having some trouble in visualization of a use case. I would like to show a percentage how much of a Requirement is currently covered by tests. Simply I am feeding Elastic with fol… --- ## [Help: Only winlogbeat index with date being created](https://discuss.elastic.co/t/help-only-winlogbeat-index-with-date-being-created/300284)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 8:17am UTC](https://discuss.elastic.co/t/help-only-winlogbeat-index-with-date-being-created/300284 "2022-03-22T08:17:26Z")
This is my current output: output { if \[type\]=="syslog" { elasticsearch { hosts =\> \["localhost:9200"\] index =\> "logstash-%{+yyyy.MM.dd}" } … --- ## [Data extraction, Watcher - CSV export with relative time period](https://discuss.elastic.co/t/data-extraction-watcher-csv-export-with-relative-time-period/300287)
**Author:** [@AQ\_Amra](https://discuss.elastic.co/u/AQ_Amra)\ **Replies:** 0\ **Last updated:** [March 22, 2022, 7:54am UTC](https://discuss.elastic.co/t/data-extraction-watcher-csv-export-with-relative-time-period/300287 "2022-03-22T07:54:42Z")
Hi, I am attempting to extract a CSV of data from ES/Kibana every hour. I've configured a watcher task which runs hourly, and emails a CSV file (based on the discover POST URL form here Automatically generate reports |… --- ## [It was found that users could not generate a report CSV or download logs from the dashboard](https://discuss.elastic.co/t/it-was-found-that-users-could-not-generate-a-report-csv-or-download-logs-from-the-dashboard/298174)
**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 7:53am UTC](https://discuss.elastic.co/t/it-was-found-that-users-could-not-generate-a-report-csv-or-download-logs-from-the-dashboard/298174 "2022-03-22T07:53:25Z")
HI Team, It was found that users could not generate a report CSV or download logs from the dashboard, teps to Reproduce Search for logs in Kibana Discover dashboard Attempt to download those logs: Click 'Save' to s… --- ## [Kibana start fail with the error \[ERROR\]\[savedobjects-service\] \[.kibana\_task\_manager\] Action failed with 'security\_exception](https://discuss.elastic.co/t/kibana-start-fail-with-the-error-error-savedobjects-service-kibana-task-manager-action-failed-with-security-exception/300286)
**Author:** [@jack\_jack](https://discuss.elastic.co/u/jack_jack)\ **Replies:** 0\ **Last updated:** [March 22, 2022, 7:48am UTC](https://discuss.elastic.co/t/kibana-start-fail-with-the-error-error-savedobjects-service-kibana-task-manager-action-failed-with-security-exception/300286 "2022-03-22T07:48:09Z")
when i start kibana ,i get the error \[2022-03-22T07:38:57.371+00:00\]\[INFO \]\[savedobjects-service\] \[.kibana\] UPDATE\_TARGET\_MAPPINGS -\> UPDATE\_TARGET\_MAPPINGS. took: 32015ms. \[2022-03-22T07:38:57.372+00:00\]\[ERROR\]\[savedob… --- ## [How to get Id of a dashboard to export?](https://discuss.elastic.co/t/how-to-get-id-of-a-dashboard-to-export/300266)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 0\ **Last updated:** [March 22, 2022, 5:11am UTC](https://discuss.elastic.co/t/how-to-get-id-of-a-dashboard-to-export/300266 "2022-03-22T05:11:12Z")
Hi Team, Greetings, Hope everyone doing good. I want to make dashboard as part of build. So that I tried to export dashboard via CURL and trying to import via CURL. It was working fine in 6.8. But when I migrate to 7.17… --- ## [Logstash count events using ruby filter](https://discuss.elastic.co/t/logstash-count-events-using-ruby-filter/300256)
**Author:** [@gnam](https://discuss.elastic.co/u/gnam)\ **Replies:** 4\ **Last updated:** [March 22, 2022, 4:56am UTC](https://discuss.elastic.co/t/logstash-count-events-using-ruby-filter/300256 "2022-03-22T04:56:58Z")
I have following pipeline (example, not full pipeline) where I need count the number of events for EVERY file I am writing as output. For example, this pipleline creates new file every 30 seconds with the events processe… --- ## [Can't sum bucket after composite](https://discuss.elastic.co/t/cant-sum-bucket-after-composite/300184)
**Author:** [@Techinp](https://discuss.elastic.co/u/Techinp)\ **Replies:** 4\ **Last updated:** [March 22, 2022, 3:21am UTC](https://discuss.elastic.co/t/cant-sum-bucket-after-composite/300184 "2022-03-22T03:21:30Z")
Hi all, How can I sum data after composite stage? What did I do wrong? This is my query GET report-20220316/\_search { "query": { "bool": { "must": \[ { "match": { "parentId.ke… --- ## [Kibana 7.5.2 to 7.17.0 Migration Failure - Migration of Saved Objects Failure](https://discuss.elastic.co/t/kibana-7-5-2-to-7-17-0-migration-failure-migration-of-saved-objects-failure/300126)
**Author:** [@anburethy](https://discuss.elastic.co/u/anburethy)\ **Replies:** 3\ **Last updated:** [March 21, 2022, 11:40pm UTC](https://discuss.elastic.co/t/kibana-7-5-2-to-7-17-0-migration-failure-migration-of-saved-objects-failure/300126 "2022-03-21T23:40:39Z")
Hi, I am migrating Kibana from 7.5.2 to 7.17.0 and getting the following error when doing so. Kibana isnt starting up due to this failure and hence migration fails. {"type":"log","@timestamp":"2022-03-20T12:32:03+00:00"… --- ## [Update field on all SIEM detection Rules in one go](https://discuss.elastic.co/t/update-field-on-all-siem-detection-rules-in-one-go/299862)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 5\ **Last updated:** [March 21, 2022, 10:10pm UTC](https://discuss.elastic.co/t/update-field-on-all-siem-detection-rules-in-one-go/299862 "2022-03-21T22:10:29Z")
Hello all, We have created almost 400 + security rule under SIEM tab in Kibana. Now the new requirement come like they need to update one common field present in all the 400 rules. Can any one guide me how to achieve t… --- ## [Recommendation or best practice for monitoring SystemD service state](https://discuss.elastic.co/t/recommendation-or-best-practice-for-monitoring-systemd-service-state/296075)
**Author:** [@yelloyonder](https://discuss.elastic.co/u/yelloyonder)\ **Replies:** 4\ **Last updated:** [March 21, 2022, 8:56pm UTC](https://discuss.elastic.co/t/recommendation-or-best-practice-for-monitoring-systemd-service-state/296075 "2022-03-21T20:56:02Z")
Hello, I would like to generate an alert if a service is not running, but I can't see a straight forward way to do this. I can monitor the process the service starts up, but I was curious if there was a good way to mon… --- ## [Logstash processing gz file and sending logs to Elasticsearch](https://discuss.elastic.co/t/logstash-processing-gz-file-and-sending-logs-to-elasticsearch/300112)
**Author:** [@wallace84](https://discuss.elastic.co/u/wallace84)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 8:45pm UTC](https://discuss.elastic.co/t/logstash-processing-gz-file-and-sending-logs-to-elasticsearch/300112 "2022-03-21T20:45:23Z")
Hi, I am trying to do a test sending gz format logs from Logstash to Elasticsearch, do you know about a possible simple config file I could use to process the logs that use time stamps? The filter requires a bit of cus… --- ## [Unable to convert a field from string to integer that is dynamically generated in Logstash filter](https://discuss.elastic.co/t/unable-to-convert-a-field-from-string-to-integer-that-is-dynamically-generated-in-logstash-filter/300224)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 6:45pm UTC](https://discuss.elastic.co/t/unable-to-convert-a-field-from-string-to-integer-that-is-dynamically-generated-in-logstash-filter/300224 "2022-03-21T18:45:03Z")
I am adding a field in my event data point in Logstash filter. The name of the field is created dynamically based on the value of the other field. The code can be seen below which I am using to add this field mutate { … --- ## [Filebeat is not collecting logs from pods/kubernetes](https://discuss.elastic.co/t/filebeat-is-not-collecting-logs-from-pods-kubernetes/299980)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 6:43pm UTC](https://discuss.elastic.co/t/filebeat-is-not-collecting-logs-from-pods-kubernetes/299980 "2022-03-21T18:43:01Z")
Hey, I am using Docker-desktop 4.6.0 (75818) on windows 10 \[version 10.0.19042.1526\], trying to set up Observability in a Kubernetes context, I have two application running (spring boot application + react app) I set up … --- ## [Getting less search speed](https://discuss.elastic.co/t/getting-less-search-speed/300201)
**Author:** [@Neeraj\_Jain7483](https://discuss.elastic.co/u/Neeraj_Jain7483)\ **Replies:** 3\ **Last updated:** [March 21, 2022, 6:40pm UTC](https://discuss.elastic.co/t/getting-less-search-speed/300201 "2022-03-21T18:40:32Z")
We have a cluster consisting of 3 masters (4 core, 16 GB RAM each), 3 hot(8 core, 32 GB RAM, 300 GB SSD each), and 3 warm nodes(8 core, 32GB RAM, 1.5TB HDD each). We have one index for each month of year following the n… --- ## [Logstash oracle db jdbc plugin eeror](https://discuss.elastic.co/t/logstash-oracle-db-jdbc-plugin-eeror/300225)
**Author:** [@Hamza\_Shakeel](https://discuss.elastic.co/u/Hamza_Shakeel)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 5:16pm UTC](https://discuss.elastic.co/t/logstash-oracle-db-jdbc-plugin-eeror/300225 "2022-03-21T17:16:44Z")
I am getting the following error : Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of \[ \\t\\r\\n\], "#", \[A-Za-z0-9\_… --- ## [How to specifiy proxy with websoket input plugin](https://discuss.elastic.co/t/how-to-specifiy-proxy-with-websoket-input-plugin/300174)
**Author:** [@zid57](https://discuss.elastic.co/u/zid57)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 5:12pm UTC](https://discuss.elastic.co/t/how-to-specifiy-proxy-with-websoket-input-plugin/300174 "2022-03-21T17:12:30Z")
Hello all, I would need to use the logstash websocket as input plugin. I installed it and it works. However, I'm not able to retrieve data from the websocket URL. The case is simple. In order to reach internet, my l… --- ## [Search-UI - How to use special Chars like german Umlaute or Whitespaces for facet names?](https://discuss.elastic.co/t/search-ui-how-to-use-special-chars-like-german-umlaute-or-whitespaces-for-facet-names/300150)
**Author:** [@John\_Agricola](https://discuss.elastic.co/u/John_Agricola)\ **Replies:** 2\ **Last updated:** [March 21, 2022, 3:15pm UTC](https://discuss.elastic.co/t/search-ui-how-to-use-special-chars-like-german-umlaute-or-whitespaces-for-facet-names/300150 "2022-03-21T15:15:12Z")
Hi everyone, I have been playing with enterprise search and search UI. I use a JSON file to upload the data. For the values, it looks fine - but for the Keys which are then converted to the names of the facets, I can't… --- ## [Understanding a match query on a search-as-you-type index](https://discuss.elastic.co/t/understanding-a-match-query-on-a-search-as-you-type-index/300215)
**Author:** [@dlants](https://discuss.elastic.co/u/dlants)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 3:04pm UTC](https://discuss.elastic.co/t/understanding-a-match-query-on-a-search-as-you-type-index/300215 "2022-03-21T15:04:45Z")
I'm curious if there is any way to understand the lucene query that's generated for a particular Elasticsearch DSL query. For example, if I create an index: await client.indices.create({ index: 'activities', … --- ## [ELK stack sizing](https://discuss.elastic.co/t/elk-stack-sizing/300214)
**Author:** [@PRASOON\_VINODAN](https://discuss.elastic.co/u/PRASOON_VINODAN)\ **Replies:** 0\ **Last updated:** [March 21, 2022, 2:43pm UTC](https://discuss.elastic.co/t/elk-stack-sizing/300214 "2022-03-21T14:43:17Z")
We are planning to use ELK stack with beats for few of our applications & OS real time monitoring. Currently I am doing some POC. I couldn't find any documentation regarding sizing when considering to build a ELK cluster… --- ## [Failed to verify all nodes have repository access](https://discuss.elastic.co/t/failed-to-verify-all-nodes-have-repository-access/299467)
**Author:** [@Caio\_Cesar](https://discuss.elastic.co/u/Caio_Cesar)\ **Replies:** 4\ **Last updated:** [March 21, 2022, 2:03pm UTC](https://discuss.elastic.co/t/failed-to-verify-all-nodes-have-repository-access/299467 "2022-03-21T14:03:48Z")
hello, I have a problem regarding backup using curator, I use version 6.3.2 of Elasticsearch and curator in version 5.7.6 , backups are stored in a google gsc bucket with all permissions but this error always appears Fa… --- ## [Need help in delete index after x days](https://discuss.elastic.co/t/need-help-in-delete-index-after-x-days/300192)
**Author:** [@Saranya\_V](https://discuss.elastic.co/u/Saranya_V)\ **Replies:** 5\ **Last updated:** [March 21, 2022, 12:52pm UTC](https://discuss.elastic.co/t/need-help-in-delete-index-after-x-days/300192 "2022-03-21T12:52:06Z")
I'm using Elasticsearch 1.x. is there any way we can delete index after x days without using delete query. --- ## [Migration from scripted to runtime field](https://discuss.elastic.co/t/migration-from-scripted-to-runtime-field/299484)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 12:37pm UTC](https://discuss.elastic.co/t/migration-from-scripted-to-runtime-field/299484 "2022-03-21T12:37:36Z")
We have a scripted field, for example winlogbeat.user\_data.mysf (my snowflake). I guess we are forced to move this to a runtime field, they were deprecated in 7.13, but I'm not sure when they really quit working. My w… --- ## [Retrouver tous les saved-objects pour un tag donné](https://discuss.elastic.co/t/retrouver-tous-les-saved-objects-pour-un-tag-donne/298398)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 12:00pm UTC](https://discuss.elastic.co/t/retrouver-tous-les-saved-objects-pour-un-tag-donne/298398 "2022-03-21T12:00:26Z")
Bonjour, je cherche à utiliser une requete REST pour récupérer tous les objets taggés avec un tag donné. Par exemple, j'ai un dashboard que j'ai taggé FS, et je voudrais un truc comme GET api/kibana/management/saved\_ob… --- ## [Elasticsearch problem when update mapping](https://discuss.elastic.co/t/elasticsearch-problem-when-update-mapping/300197)
**Author:** [@Muhammad\_Fhadli](https://discuss.elastic.co/u/Muhammad_Fhadli)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 11:42am UTC](https://discuss.elastic.co/t/elasticsearch-problem-when-update-mapping/300197 "2022-03-21T11:42:21Z")
I want add mapping to synonym analyzer by perform this operation PUT /my\_index/\_mapping/items { "items": { "properties": { "judul": { "type": "text", "analyzer": "synonym"… --- ## [Unable to retrieve version information from Elasticsearch nodes. Kibana v8 MacOS local machine setup](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-kibana-v8-macos-local-machine-setup/300199)
**Author:** [@Gowrishankar\_G](https://discuss.elastic.co/u/Gowrishankar_G)\ **Replies:** 0\ **Last updated:** [March 21, 2022, 11:30am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-kibana-v8-macos-local-machine-setup/300199 "2022-03-21T11:30:55Z")
\[ERROR\]\[Elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 192.168.1.6:9200 \[ERROR\]\[plugins.ruleRegistry\] Error: Timeout: it took more than 1200000ms \[ERROR\]\[pl… --- ## [Requirements for the deployment of ELK](https://discuss.elastic.co/t/requirements-for-the-deployment-of-elk/300159)
**Author:** [@thujitha\_p](https://discuss.elastic.co/u/thujitha_p)\ **Replies:** 2\ **Last updated:** [March 21, 2022, 10:17am UTC](https://discuss.elastic.co/t/requirements-for-the-deployment-of-elk/300159 "2022-03-21T10:17:02Z")
Hi all, Currently in our system has 2 Elasticsearch nodes. And we are facing an issue and it says, shards count reach 2000 limits. When I search I saw , it is not good to increase no of shards. But we can increase the s… --- ## [Sincedb\_path file type](https://discuss.elastic.co/t/sincedb-path-file-type/300182)
**Author:** [@Greninja\_San](https://discuss.elastic.co/u/Greninja_San)\ **Replies:** 3\ **Last updated:** [March 21, 2022, 10:05am UTC](https://discuss.elastic.co/t/sincedb-path-file-type/300182 "2022-03-21T10:05:50Z")
Hello! I have to set a sincedb\_path file for logstash. However, I have to create one and I cannot find the file type required. What should it be? (CSV, TXT, JSON...) Thank you :slight\_smile: --- ## [Lost lab work after reissue of license](https://discuss.elastic.co/t/lost-lab-work-after-reissue-of-license/300144)
**Author:** [@shailaja.telukuntla](https://discuss.elastic.co/u/shailaja.telukuntla)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 9:00am UTC](https://discuss.elastic.co/t/lost-lab-work-after-reissue-of-license/300144 "2022-03-21T09:00:28Z")
Im taking the Elasticsearch engineer course; The Elastic training team reissued my 30-day kibana license as it expired. It was suggested that i need to "export Saved objects" and then import the saved objects after the … --- ## [Kibana error : "Failed to poll for work: Error: work has timed out"](https://discuss.elastic.co/t/kibana-error-failed-to-poll-for-work-error-work-has-timed-out/300172)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 0\ **Last updated:** [March 21, 2022, 8:59am UTC](https://discuss.elastic.co/t/kibana-error-failed-to-poll-for-work-error-work-has-timed-out/300172 "2022-03-21T08:59:31Z")
Hello! I'm repeatedly getting this kind of errors in kibana which I think are hurting the performance. {"type":"log","@timestamp":"2022-03-17T09:14:21+01:00","tags":\["error","plugins","taskManager"\],"pid":96071,"messag… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=674) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=676)