# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=681 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 682 --- ## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299474)
**Author:** [@paulov](https://discuss.elastic.co/u/paulov)\ **Replies:** 7\ **Last updated:** [March 14, 2022, 2:25pm UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299474 "2022-03-14T14:25:31Z")
Hi, After instaling/configuring logstash, I get this error: \[2022-03-11T09:22:27,379\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /u02/logstash\_frontend/etc/log4j2.properties \[2022-03-11T09:22:… --- ## [Error when clone index](https://discuss.elastic.co/t/error-when-clone-index/299504)
**Author:** [@Muhammad\_Fhadli](https://discuss.elastic.co/u/Muhammad_Fhadli)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 1:31pm UTC](https://discuss.elastic.co/t/error-when-clone-index/299504 "2022-03-14T13:31:08Z")
I want to clone my index, i have done what shown in this page to clone the index using this command. POST /my\_index/\_clone/my\_index\_clone I also tried to make the index read-only first with this command PUT /my\_index… --- ## [Geoip losing type geo\_point for location (v8.1)](https://discuss.elastic.co/t/geoip-losing-type-geo-point-for-location-v8-1/299623)
**Author:** [@fedora35](https://discuss.elastic.co/u/fedora35)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 1:20pm UTC](https://discuss.elastic.co/t/geoip-losing-type-geo-point-for-location-v8-1/299623 "2022-03-14T13:20:44Z")
Hello, I'm a beginner with ELK and i have the following problem: I send apache's logs with filebeat to logstash. All is working except the fact when I check the location mapping in kibana, it has no type : it appears l… --- ## [Reference a value from new added field within grok match setting](https://discuss.elastic.co/t/reference-a-value-from-new-added-field-within-grok-match-setting/299619)
**Author:** [@mstojanovic](https://discuss.elastic.co/u/mstojanovic)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 12:33pm UTC](https://discuss.elastic.co/t/reference-a-value-from-new-added-field-within-grok-match-setting/299619 "2022-03-14T12:33:59Z")
Hi, I'm trying to reference a value from a new field that was added with mutate plugin. I try to reference it within a grok match settings. Part of the filter pipeline looks like: filter { mutate { add\_… --- ## [How to overwrite system generated .monitoring-\* templates in elasticsearch 8.0](https://discuss.elastic.co/t/how-to-overwrite-system-generated-monitoring-templates-in-elasticsearch-8-0/299618)
**Author:** [@BhawanaSharma](https://discuss.elastic.co/u/BhawanaSharma)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 12:33pm UTC](https://discuss.elastic.co/t/how-to-overwrite-system-generated-monitoring-templates-in-elasticsearch-8-0/299618 "2022-03-14T12:33:33Z")
In Elasticsearch 8.0 few system generated templates are coming by default named with ".monitoring-\*" in that "number\_of\_replicas: 1" with default value 1, because of that replica is set to 1 and health of data stream is … --- ## [Pie chart - show last string value of two records with same ID](https://discuss.elastic.co/t/pie-chart-show-last-string-value-of-two-records-with-same-id/299614)
**Author:** [@Jakub\_Polcar](https://discuss.elastic.co/u/Jakub_Polcar)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 12:22pm UTC](https://discuss.elastic.co/t/pie-chart-show-last-string-value-of-two-records-with-same-id/299614 "2022-03-14T12:22:15Z")
Hello, is there an option how to set up a pie chart to show count of last string values, but if there are two records with same ID, count only last one based on timestamp? Test records: record 1: ID: 123, variable: "v… --- ## [Can you incorporate the Uptime dashboard into Canvas?](https://discuss.elastic.co/t/can-you-incorporate-the-uptime-dashboard-into-canvas/299373)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 11:48am UTC](https://discuss.elastic.co/t/can-you-incorporate-the-uptime-dashboard-into-canvas/299373 "2022-03-14T11:48:27Z")
If so, how ? Want to add this view with various filters to fine-tune the display into Canvas pages. --- ## [Hide field of document in Kibana](https://discuss.elastic.co/t/hide-field-of-document-in-kibana/299599)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 10:56am UTC](https://discuss.elastic.co/t/hide-field-of-document-in-kibana/299599 "2022-03-14T10:56:37Z")
Hi, We have made some dashboards in Kibana that also include the table with all the data of a specific index pattern. There is a new field ("hash") added in documents of some index patterns but we need to "hide" it in … --- ## [Discrepancy (bug or misunderstanding) in how simple\_query\_string handles queries?](https://discuss.elastic.co/t/discrepancy-bug-or-misunderstanding-in-how-simple-query-string-handles-queries/299351)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 9:52am UTC](https://discuss.elastic.co/t/discrepancy-bug-or-misunderstanding-in-how-simple-query-string-handles-queries/299351 "2022-03-14T09:52:22Z")
I have a field, let's call it MyField mapped as a keyword type. If I search using simple\_query\_string, like so: GET /my-index/\_search { "from": 0, "size": 1000, "query": { "bool": { "filter": \[ … --- ## [HTTP Output Could not fetch url (Illegal character)](https://discuss.elastic.co/t/http-output-could-not-fetch-url-illegal-character/299439)
**Author:** [@josemariafrupm](https://discuss.elastic.co/u/josemariafrupm)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 8:23am UTC](https://discuss.elastic.co/t/http-output-could-not-fetch-url-illegal-character/299439 "2022-03-14T08:23:58Z")
Hi! I'm an university student working on his final degree project, and I can't find any info about the problem I'm having. I need to send logs through Logstash with http but it says it can't fetch the url. I think the pr… --- ## [Elasticsearch 8 disable BEGIN SECURITY AUTO CONFIGURATION](https://discuss.elastic.co/t/elasticsearch-8-disable-begin-security-auto-configuration/299507)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 7:52am UTC](https://discuss.elastic.co/t/elasticsearch-8-disable-begin-security-auto-configuration/299507 "2022-03-14T07:52:00Z")
Is there a way to disable this during install? or even have a yes and no option I'm trying to create an automated install with my own certificates and sometimes during testing I don't want to have user authentication en… --- ## [Is it possible to update Elasticsearch using logstash conf file with field other than document id](https://discuss.elastic.co/t/is-it-possible-to-update-elasticsearch-using-logstash-conf-file-with-field-other-than-document-id/299203)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 3:52am UTC](https://discuss.elastic.co/t/is-it-possible-to-update-elasticsearch-using-logstash-conf-file-with-field-other-than-document-id/299203 "2022-03-14T03:52:21Z")
Hello if\[sid\]!="null" and \[sid\]!="" { elasticsearch { hosts =\> \["localhost:9200"\] document\_id =\> "%{sid}" index =\> "dashboard\_write" … --- ## [Can I create a Visualization from two different indices?](https://discuss.elastic.co/t/can-i-create-a-visualization-from-two-different-indices/299556)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 3\ **Last updated:** [March 14, 2022, 3:06am UTC](https://discuss.elastic.co/t/can-i-create-a-visualization-from-two-different-indices/299556 "2022-03-14T03:06:50Z")
Hi Team, I wanted to plot a data in a table and need to pick up a fields from different indices. Can that be possible with Kibana? If not then any other alternatives you can think of? --- ## [How to curl this query to shell script](https://discuss.elastic.co/t/how-to-curl-this-query-to-shell-script/299292)
**Author:** [@leyleynewt](https://discuss.elastic.co/u/leyleynewt)\ **Replies:** 4\ **Last updated:** [March 14, 2022, 2:30am UTC](https://discuss.elastic.co/t/how-to-curl-this-query-to-shell-script/299292 "2022-03-14T02:30:03Z")
I want to delete the 5 days old data of all my indexes. How to curl this query to shell script POST \_all/\_delete\_by\_query { "query": { "range": { "@timestamp": { "lte": "now-5d" } } } } Than… --- ## [Monitoring SAP SaaS using ElasticSearch](https://discuss.elastic.co/t/monitoring-sap-saas-using-elasticsearch/299564)
**Author:** [@hamdyahmed1984](https://discuss.elastic.co/u/hamdyahmed1984)\ **Replies:** 1\ **Last updated:** [March 13, 2022, 6:13pm UTC](https://discuss.elastic.co/t/monitoring-sap-saas-using-elasticsearch/299564 "2022-03-13T18:13:59Z")
Can I monitor SAP using Elasticsearch? SAP is used as software as a service. --- ## [NetApp reports Elasticsearch High Latency alerts](https://discuss.elastic.co/t/netapp-reports-elasticsearch-high-latency-alerts/299570)
**Author:** [@KrishnaCh](https://discuss.elastic.co/u/KrishnaCh)\ **Replies:** 0\ **Last updated:** [March 13, 2022, 5:20pm UTC](https://discuss.elastic.co/t/netapp-reports-elasticsearch-high-latency-alerts/299570 "2022-03-13T17:20:27Z")
Hi All, We have NetApp storage in our environment. And there is one cluster which is hardly being used by the application, and there is very minimal data traffic coming into this cluster We are using Zabbix monitoring … --- ## [Using Variables in Elastic Synthetics](https://discuss.elastic.co/t/using-variables-in-elastic-synthetics/299567)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 0\ **Last updated:** [March 13, 2022, 2:17pm UTC](https://discuss.elastic.co/t/using-variables-in-elastic-synthetics/299567 "2022-03-13T14:17:03Z")
Hi Guys, Is it possible to use variables for example in the Url field ? I need to have the Host IP Address instead of something generic like localhost or 127.0.0.1 --- ## [Elasticsearch 8.1 fail to start](https://discuss.elastic.co/t/elasticsearch-8-1-fail-to-start/299524)
**Author:** [@mayayisim](https://discuss.elastic.co/u/mayayisim)\ **Replies:** 1\ **Last updated:** [March 13, 2022, 12:37pm UTC](https://discuss.elastic.co/t/elasticsearch-8-1-fail-to-start/299524 "2022-03-13T12:37:27Z")
Good day Please assist with Elasticsearch failing to start, I checked the logs and its complaining about access denied on /var/run/Elasticsearch. I then created the path and now it's complaining about the Elasticsearch.… --- ## [Output format](https://discuss.elastic.co/t/output-format/299558)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 0\ **Last updated:** [March 13, 2022, 8:20am UTC](https://discuss.elastic.co/t/output-format/299558 "2022-03-13T08:20:47Z")
Hi, Is there a way to get csv output format when querying by DSL? I show that when querying by SQL, you have to option to do it. Thanks... --- ## [I regret that I couldn't find an OCR parser to handle image/ocr-png.Please set the OCR\_STRATEGY to NO\_OCR or configure yourOCR parser correctly](https://discuss.elastic.co/t/i-regret-that-i-couldnt-find-an-ocr-parser-to-handle-image-ocr-png-please-set-the-ocr-strategy-to-no-ocr-or-configure-yourocr-parser-correctly/299512)
**Author:** [@Morphus1](https://discuss.elastic.co/u/Morphus1)\ **Replies:** 8\ **Last updated:** [March 13, 2022, 3:18am UTC](https://discuss.elastic.co/t/i-regret-that-i-couldnt-find-an-ocr-parser-to-handle-image-ocr-png-please-set-the-ocr-strategy-to-no-ocr-or-configure-yourocr-parser-correctly/299512 "2022-03-13T03:18:59Z")
Hi Everyone, I'm trying to use OCR when indexing but not getting any results. I've tried using tesseract for images and Tika for the pdfs but not a single one will get indexed with "content". The error message is: 09… --- ## [Creating a new column from existing columns](https://discuss.elastic.co/t/creating-a-new-column-from-existing-columns/299528)
**Author:** [@carl25en](https://discuss.elastic.co/u/carl25en)\ **Replies:** 1\ **Last updated:** [March 12, 2022, 5:00pm UTC](https://discuss.elastic.co/t/creating-a-new-column-from-existing-columns/299528 "2022-03-12T17:00:40Z")
Dear Elasticsearch community, I was wondering how I can create a DateTime column from 5 columns (forecasted\_year,month,day,hour,minute) as it is shown in the image (after creating a new index). I am not sure if this sh… --- ## [Records are getting dropped while creating map using logstash](https://discuss.elastic.co/t/records-are-getting-dropped-while-creating-map-using-logstash/299509)
**Author:** [@Deepak\_Dandotiya](https://discuss.elastic.co/u/Deepak_Dandotiya)\ **Replies:** 1\ **Last updated:** [March 12, 2022, 3:26pm UTC](https://discuss.elastic.co/t/records-are-getting-dropped-while-creating-map-using-logstash/299509 "2022-03-12T15:26:42Z")
Hi Experts, I need your help here. Context is, I am trying to read the data from DB after multiple joins and then forming a Map in Elasticsearch using ID column as agreegate and trying to handle the duplicate event from… --- ## [Elasticsearch Index creation time](https://discuss.elastic.co/t/elasticsearch-index-creation-time/299529)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 0\ **Last updated:** [March 12, 2022, 3:26pm UTC](https://discuss.elastic.co/t/elasticsearch-index-creation-time/299529 "2022-03-12T15:26:17Z")
Hi, Somehow my indexes are created each day at around 17pm. Indexes are being rolled over every day. What is happening is, for example, at 17pm of 11/03 the index-name-2022-03-11-00001 is created. Then, at 17pm of 12/0… --- ## [Question about the operator clientConfig caBundle of webhooks](https://discuss.elastic.co/t/question-about-the-operator-clientconfig-cabundle-of-webhooks/299114)
**Author:** [@Fares\_Oueslati](https://discuss.elastic.co/u/Fares_Oueslati)\ **Replies:** 2\ **Last updated:** [March 12, 2022, 10:41am UTC](https://discuss.elastic.co/t/question-about-the-operator-clientconfig-cabundle-of-webhooks/299114 "2022-03-12T10:41:25Z")
Hello! I'm trying to update a manifest of a ValidatingWebhookConfiguration deployed with our elastic operator. More precisely I want to update the caBundle field in the clientConfig webhooks. I can see that a dummy va… --- ## [Logstash filter loglevel info warn and error](https://discuss.elastic.co/t/logstash-filter-loglevel-info-warn-and-error/299306)
**Author:** [@waelboss](https://discuss.elastic.co/u/waelboss)\ **Replies:** 7\ **Last updated:** [March 12, 2022, 9:23am UTC](https://discuss.elastic.co/t/logstash-filter-loglevel-info-warn-and-error/299306 "2022-03-12T09:23:05Z")
i have this JSON data: "result": \[ { "payload": { "context": "default", "level": "DEBUG", "logger": "org.forgerock.opendj.ldap.CachedConnectionPool", "me… --- ## [Problems caused by creating replica shards too quickly](https://discuss.elastic.co/t/problems-caused-by-creating-replica-shards-too-quickly/299513)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 0\ **Last updated:** [March 12, 2022, 7:07am UTC](https://discuss.elastic.co/t/problems-caused-by-creating-replica-shards-too-quickly/299513 "2022-03-12T07:07:29Z")
When we execute batch execution, if the primary shard is indexed, we are increasing the replica shard at that time, But at that time, the search engine creates replica shards, and as you can see from the metrix, a large … --- ## [Kibana error after upgrade to version 8.0 \[config validation of \[logging\].dest\]: definition for this key is missing\]](https://discuss.elastic.co/t/kibana-error-after-upgrade-to-version-8-0-config-validation-of-logging-dest-definition-for-this-key-is-missing/297948)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 3\ **Last updated:** [March 11, 2022, 11:03pm UTC](https://discuss.elastic.co/t/kibana-error-after-upgrade-to-version-8-0-config-validation-of-logging-dest-definition-for-this-key-is-missing/297948 "2022-03-11T23:03:26Z")
Hi, I had successfully upgraded to version 8.0 on ELK , while the rest of the stack works , kibana has failed to start citing dev-elk-app01 kibana\[19018\]: FATAL Error: \[config validation of \[logging\].dest\]: definitio… --- ## [Not able to create role mapping in kibana](https://discuss.elastic.co/t/not-able-to-create-role-mapping-in-kibana/299472)
**Author:** [@Amisha\_Thakkar1](https://discuss.elastic.co/u/Amisha_Thakkar1)\ **Replies:** 3\ **Last updated:** [March 11, 2022, 8:44pm UTC](https://discuss.elastic.co/t/not-able-to-create-role-mapping-in-kibana/299472 "2022-03-11T20:44:37Z")
I have assigned one user as superuser and I am trying to search for role mapping under stack management in Kibana. But I am not able to see that. Even I tried to assign role using role mapping api. Still not able to log… --- ## [Elastic Search Failing on multi tier environment](https://discuss.elastic.co/t/elastic-search-failing-on-multi-tier-environment/299495)
**Author:** [@Ish\_Singh](https://discuss.elastic.co/u/Ish_Singh)\ **Replies:** 0\ **Last updated:** [March 11, 2022, 7:32pm UTC](https://discuss.elastic.co/t/elastic-search-failing-on-multi-tier-environment/299495 "2022-03-11T19:32:47Z")
Hi All , we currently have 2 servers for TFS and 1 server hosts the Elasticsearch but somehow the search keeps on failing while accessing and i see the error in developer tools.. i believe its trying to cluster between 2… --- ## [Need help with a NOT in if statement, is it "not" or "!"?](https://discuss.elastic.co/t/need-help-with-a-not-in-if-statement-is-it-not-or/299486)
**Author:** [@teebu](https://discuss.elastic.co/u/teebu)\ **Replies:** 1\ **Last updated:** [March 11, 2022, 6:58pm UTC](https://discuss.elastic.co/t/need-help-with-a-not-in-if-statement-is-it-not-or/299486 "2022-03-11T18:58:41Z")
\# filter out local ips if !(\[http\]\[request\]\[headers\]\[CF-Connecting-IP\] =~ "^10.0.\*" or \[http\]\[request\]\[headers\]\[CF-Connecting-IP\] =~ "^127.0.\*" or \[http\]\[request\]\[headers\]\[CF-Connecting-IP\] == "0.0.0.0") … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=680) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=682)