# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=685 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 686 --- ## [Logstash agent stopped due to error "Don't know how to handle \`Java::JavaLang::IllegalStateException\` for \`PipelineAction::Create\\`"](https://discuss.elastic.co/t/logstash-agent-stopped-due-to-error-dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction-create-main/299168)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 2\ **Last updated:** [March 9, 2022, 6:43am UTC](https://discuss.elastic.co/t/logstash-agent-stopped-due-to-error-dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction-create-main/299168 "2022-03-09T06:43:41Z")
Hi, I am new to ELK stack and have installed the three components on my SUSE linux 12 server. Running java 17.0.2. My logstash-plain.log repeats the java error for the agent which stops with below error: \[2022-03-09T0… --- ## [Create kibana visualization & dashboard - templates ndjson](https://discuss.elastic.co/t/create-kibana-visualization-dashboard-templates-ndjson/298609)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 6\ **Last updated:** [March 9, 2022, 6:32am UTC](https://discuss.elastic.co/t/create-kibana-visualization-dashboard-templates-ndjson/298609 "2022-03-09T06:32:20Z")
Hi, Is there a tool/method to create a template(ndjson) for a dashboard & its visualizations; so that we can replicate the same structure with a different name for another index pattern. Thanks Chandrakanth --- ## [Need to extract specific message from log](https://discuss.elastic.co/t/need-to-extract-specific-message-from-log/299171)
**Author:** [@sushant12](https://discuss.elastic.co/u/sushant12)\ **Replies:** 0\ **Last updated:** [March 9, 2022, 6:29am UTC](https://discuss.elastic.co/t/need-to-extract-specific-message-from-log/299171 "2022-03-09T06:29:13Z")
address space usage: 1827991552 bytes/1743MB} {rss usage: 389292032 bytes/371MB} \[pid: 19335|app: 0|req: 17171/48113\] 10.195.0.169 () {50 vars in 816 bytes} \[Mon Feb 21 04:06:57 2022\] GET /web/test\_name?name=sush =\> gene… --- ## [Alternative for SQL transaction in Elastic-search](https://discuss.elastic.co/t/alternative-for-sql-transaction-in-elastic-search/299166)
**Author:** [@Muhammad\_Hamza](https://discuss.elastic.co/u/Muhammad_Hamza)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 5:36am UTC](https://discuss.elastic.co/t/alternative-for-sql-transaction-in-elastic-search/299166 "2022-03-09T05:36:39Z")
Is there any alternative to SQL Transactions in Elastic-search? I want to perform multiple bulk indexing operations in batches and if any batch fails at some point, I would like to revert the whole indexing process. --- ## [Replacing all instances of a string in nested JSON](https://discuss.elastic.co/t/replacing-all-instances-of-a-string-in-nested-json/299152)
**Author:** [@7armyant](https://discuss.elastic.co/u/7armyant)\ **Replies:** 4\ **Last updated:** [March 9, 2022, 4:39am UTC](https://discuss.elastic.co/t/replacing-all-instances-of-a-string-in-nested-json/299152 "2022-03-09T04:39:17Z")
Hi Gurus, I'm new to logstash and have had little success with the following. I have been trying to relace all instances of a sting in nested JSON. Below is the JSON in question: "{"totalCount": 2, "nextPageKey": n… --- ## [Scripted fields not working for nested value in Kibana 7.x](https://discuss.elastic.co/t/scripted-fields-not-working-for-nested-value-in-kibana-7-x/297647)
**Author:** [@frankfenomena](https://discuss.elastic.co/u/frankfenomena)\ **Replies:** 7\ **Last updated:** [March 9, 2022, 4:38am UTC](https://discuss.elastic.co/t/scripted-fields-not-working-for-nested-value-in-kibana-7-x/297647 "2022-03-09T04:38:50Z")
My scripted field works as intended in older version of kibana 5.x, but we use 7.x in a different environment and the same scripted field does not work. I've searched for what the syntax change would be in 7.x but could… --- ## [Why and how to use elastic charts?](https://discuss.elastic.co/t/why-and-how-to-use-elastic-charts/298836)
**Author:** [@frank3nst3in](https://discuss.elastic.co/u/frank3nst3in)\ **Replies:** 4\ **Last updated:** [March 9, 2022, 3:26am UTC](https://discuss.elastic.co/t/why-and-how-to-use-elastic-charts/298836 "2022-03-09T03:26:05Z")
I found the @elastic/charts library on official github profile of elastic. So, can I create visualizations (ones which are displayed in a kibana dashboard) by consuming Elasticsearch rest api and @elastic/charts ? If y… --- ## [Mutate gsub pattern help for filter](https://discuss.elastic.co/t/mutate-gsub-pattern-help-for-filter/299020)
**Author:** [@itschobot](https://discuss.elastic.co/u/itschobot)\ **Replies:** 6\ **Last updated:** [March 8, 2022, 10:54pm UTC](https://discuss.elastic.co/t/mutate-gsub-pattern-help-for-filter/299020 "2022-03-08T22:54:13Z")
Hello, still new using regular expressions I currently am working on this to parse in my "message": {"groupByActivity":false,"exampleDevices":\[{"ip":"1.2.3.4","hostname":"example.hostname.com","sid":123456,"subnet":"som… --- ## [How to increase disk capacity of elasticsearch nodes?](https://discuss.elastic.co/t/how-to-increase-disk-capacity-of-elasticsearch-nodes/298951)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 10:44pm UTC](https://discuss.elastic.co/t/how-to-increase-disk-capacity-of-elasticsearch-nodes/298951 "2022-03-08T22:44:03Z")
Hello everyone, I want to increase the disk capacity of Elasticsearch data nodes. For this, I expect it to forward the shards on the node to other nodes using "cluster.routing.allocation.exclude.\_ip":"192.168.x.x" first.… --- ## [Two Kibana instance on one single Elasticsearch cluster pointing at different Indexes](https://discuss.elastic.co/t/two-kibana-instance-on-one-single-elasticsearch-cluster-pointing-at-different-indexes/299002)
**Author:** [@siemdude](https://discuss.elastic.co/u/siemdude)\ **Replies:** 3\ **Last updated:** [March 8, 2022, 10:11pm UTC](https://discuss.elastic.co/t/two-kibana-instance-on-one-single-elasticsearch-cluster-pointing-at-different-indexes/299002 "2022-03-08T22:11:09Z")
I am trying to create two Kibana on top of a single Elasticsearch cluster. I want to separate data at Kibana level instead of Spaces. Is it possible with Kibana Cloud? Which fields to configure to separate specific indic… --- ## [No output from json line delimited file](https://discuss.elastic.co/t/no-output-from-json-line-delimited-file/299092)
**Author:** [@theflakes](https://discuss.elastic.co/u/theflakes)\ **Replies:** 2\ **Last updated:** [March 8, 2022, 9:33pm UTC](https://discuss.elastic.co/t/no-output-from-json-line-delimited-file/299092 "2022-03-08T21:33:10Z")
I'm trying to get Logstash 8 working with a config that works in Logstash 7. I'm not getting any output even though it works fine in v7. If I remove all the filters, I still do not get any output. When I run LS in debut … --- ## [Problem overwriting field using json filter plugin](https://discuss.elastic.co/t/problem-overwriting-field-using-json-filter-plugin/299132)
**Author:** [@tstrul](https://discuss.elastic.co/u/tstrul)\ **Replies:** 3\ **Last updated:** [March 8, 2022, 9:17pm UTC](https://discuss.elastic.co/t/problem-overwriting-field-using-json-filter-plugin/299132 "2022-03-08T21:17:10Z")
Hey, I have a log that i want to parse as json. field is "log" I want to decode json but use the same field as the orig message. when i try: json { source =\> "log" target =\> "log" } Im ge… --- ## [Update doc only if doc changes? noop?](https://discuss.elastic.co/t/update-doc-only-if-doc-changes-noop/299040)
**Author:** [@andy4324](https://discuss.elastic.co/u/andy4324)\ **Replies:** 4\ **Last updated:** [March 8, 2022, 7:02pm UTC](https://discuss.elastic.co/t/update-doc-only-if-doc-changes-noop/299040 "2022-03-08T19:02:54Z")
Hi ES team, newbie ES user. We have a use case where we want to store signals from various hosts inside ES (as documents of course) and query them later based on a specific field value. Each event might have different fi… --- ## [Can't get logstash to work with Elastic 8.01](https://discuss.elastic.co/t/cant-get-logstash-to-work-with-elastic-8-01/298838)
**Author:** [@kim\_frederiksen](https://discuss.elastic.co/u/kim_frederiksen)\ **Replies:** 3\ **Last updated:** [March 8, 2022, 6:37pm UTC](https://discuss.elastic.co/t/cant-get-logstash-to-work-with-elastic-8-01/298838 "2022-03-08T18:37:00Z")
Hi Everybody, I am extremely new to ELK and have yet to build the first real solution on the platform. We have had version 7.16.1 and we could see the logs from filebeat in kibana. But before we really begin building st… --- ## [Lab contain Missing field](https://discuss.elastic.co/t/lab-contain-missing-field/299127)
**Author:** [@LuciusLin](https://discuss.elastic.co/u/LuciusLin)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 5:58pm UTC](https://discuss.elastic.co/t/lab-contain-missing-field/299127 "2022-03-08T17:58:36Z")
Hi Hope any one can help to resolve an issue I have encountered. I am attempting the first Lab for Observability where I need to start my heartbeat.yml. Anyone can advise on the error message below? INFO instance/be… --- ## [Create fields from the objects that are a part of array in Logstash filter](https://discuss.elastic.co/t/create-fields-from-the-objects-that-are-a-part-of-array-in-logstash-filter/299088)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 5:14pm UTC](https://discuss.elastic.co/t/create-fields-from-the-objects-that-are-a-part-of-array-in-logstash-filter/299088 "2022-03-08T17:14:43Z")
In Logstash, in my event object there is a field that is an array. This field contains objects. I have to create or add some new fields in the event object and these fields will be created on the basis of the objects tha… --- ## [\[Kibana\] Some plugins show yellow state in 7.16.3](https://discuss.elastic.co/t/kibana-some-plugins-show-yellow-state-in-7-16-3/297623)
**Author:** [@PEB](https://discuss.elastic.co/u/PEB)\ **Replies:** 2\ **Last updated:** [March 8, 2022, 4:36pm UTC](https://discuss.elastic.co/t/kibana-some-plugins-show-yellow-state-in-7-16-3/297623 "2022-03-08T16:36:02Z")
Similarly to https://discuss.elastic.co/t/kibana-state-become-yellow-after-upgrade-to-version-7-16-2 , we have yellow state for kibana with the same plugin list. I wonder if this is kind of a bug or is there something f… --- ## [Logstash slow in bash script launch by cronjob](https://discuss.elastic.co/t/logstash-slow-in-bash-script-launch-by-cronjob/299103)
**Author:** [@Henri\_L](https://discuss.elastic.co/u/Henri_L)\ **Replies:** 5\ **Last updated:** [March 8, 2022, 4:18pm UTC](https://discuss.elastic.co/t/logstash-slow-in-bash-script-launch-by-cronjob/299103 "2022-03-08T16:18:58Z")
Hi I have a bash script like that: #!/bin/bash cat /home/xxx/public\_html/datas/zz/file.csv | /usr/share/logstash/bin/logstash -f /home/xxx/public\_html/datas/myconf.conf My conf file is basic like that: input { st… --- ## [Exact match for virtual product groups](https://discuss.elastic.co/t/exact-match-for-virtual-product-groups/299077)
**Author:** [@bw610](https://discuss.elastic.co/u/bw610)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 4:07pm UTC](https://discuss.elastic.co/t/exact-match-for-virtual-product-groups/299077 "2022-03-08T16:07:12Z")
Hello :slight\_smile: we are using Elasticsearch for magento 2 . We also use exact match. When typing in a product number, you are directly redirected to the product group that the product is in. Now we want to create s… --- ## [Composite Aggregation](https://discuss.elastic.co/t/composite-aggregation/299112)
**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 3:45pm UTC](https://discuss.elastic.co/t/composite-aggregation/299112 "2022-03-08T15:45:21Z")
Hi there, I would like to know how the composite aggregations works exactly. Do they open a context with a TTL taking a "snapshot" of the index just like scroll? If so, for the same number of buckets are the performan… --- ## [Indexing problems with GDAL/ogr2ogr for GEO\_POINT of geojson files](https://discuss.elastic.co/t/indexing-problems-with-gdal-ogr2ogr-for-geo-point-of-geojson-files/298856)
**Author:** [@Jordi\_Piqueras\_Bauti](https://discuss.elastic.co/u/Jordi_Piqueras_Bauti)\ **Replies:** 3\ **Last updated:** [March 8, 2022, 3:44pm UTC](https://discuss.elastic.co/t/indexing-problems-with-gdal-ogr2ogr-for-geo-point-of-geojson-files/298856 "2022-03-08T15:44:09Z")
I am having problem indexing Geojson files that have Point geometries using GDAL/ogr2ogr library. Points are not being indexed in the same way as if I am doing uploading geojson file with Kibana. With ogr2ogr I am havi… --- ## [Issue with index name](https://discuss.elastic.co/t/issue-with-index-name/299100)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 3:18pm UTC](https://discuss.elastic.co/t/issue-with-index-name/299100 "2022-03-08T15:18:20Z")
Hi, I can't change my index name im using filebeat 7.14.1 and filebeat won't change my index name to the one that I have in my config The docs are idexed to filebeat-7.14.1, pleas what am I doing wrong in here output.… --- ## [Create Pie Chart](https://discuss.elastic.co/t/create-pie-chart/298887)
**Author:** [@cris](https://discuss.elastic.co/u/cris)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 12:30pm UTC](https://discuss.elastic.co/t/create-pie-chart/298887 "2022-03-08T12:30:34Z")
Hi Community! I want make a pie chart with some data but I don´t know how to do it. I have a doc that looks like: { Login: passed, Country: Spain, Logout: passed } I have diferent docs with diferent countries, lik… --- ## [The aggregation series\_agg is not supported in entire\_time\_range mode](https://discuss.elastic.co/t/the-aggregation-series-agg-is-not-supported-in-entire-time-range-mode/298846)
**Author:** [@d71247](https://discuss.elastic.co/u/d71247)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 12:25pm UTC](https://discuss.elastic.co/t/the-aggregation-series-agg-is-not-supported-in-entire-time-range-mode/298846 "2022-03-08T12:25:29Z")
After upgrading our kibana instance from 7.4 to 7.16.3 , we saw errors in our Visualizes tsvb "The aggregation series\_agg is not supported in entire\_time\_range mode" --- ## [Query on responded output](https://discuss.elastic.co/t/query-on-responded-output/298907)
**Author:** [@Tanvir\_Ahmmed](https://discuss.elastic.co/u/Tanvir_Ahmmed)\ **Replies:** 0\ **Last updated:** [March 6, 2022, 9:27am UTC](https://discuss.elastic.co/t/query-on-responded-output/298907 "2022-03-06T09:27:23Z")
How to write a conditional query on multiple fields? Explain: I have an index let say "case" and the fields are "title", "secondTitle(contain nested obj)", "source(contain nested obj)". Now I want to search on title and… --- ## [Hide "-" valued entries in predefined metricbeat dashboard](https://discuss.elastic.co/t/hide-valued-entries-in-predefined-metricbeat-dashboard/297524)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 12:13pm UTC](https://discuss.elastic.co/t/hide-valued-entries-in-predefined-metricbeat-dashboard/297524 "2022-03-08T12:13:31Z")
Hello, i just set up metricbeat with the predefined kibana dashboards. Is it possible to hide all entries with a "-" value, that are on top and look like they have 100%? I tried a filter on the field with 0% to 100… --- ## [Pipeline error : java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/pipeline-error-java-lang-outofmemoryerror-java-heap-space/299081)
**Author:** [@Sara\_Chater](https://discuss.elastic.co/u/Sara_Chater)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 11:32am UTC](https://discuss.elastic.co/t/pipeline-error-java-lang-outofmemoryerror-java-heap-space/299081 "2022-03-08T11:32:37Z")
Dear community, I have a log file that contains multiple entries per transaction id Entries are ordered in file, but not necessary one after each other I tried using logstash aggregate filter as follow : My idea is to… --- ## [Document table with duplicate records](https://discuss.elastic.co/t/document-table-with-duplicate-records/298066)
**Author:** [@rituzza](https://discuss.elastic.co/u/rituzza)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 11:18am UTC](https://discuss.elastic.co/t/document-table-with-duplicate-records/298066 "2022-03-08T11:18:22Z")
I have a problem: when importing a document table created on kibana v7.7.1 on a kibana v7.14.1, I have duplicate records that determine me wrong totals on the metrics. Opening the visualization in edit, as if I wanted to… --- ## [ELK servers required for training](https://discuss.elastic.co/t/elk-servers-required-for-training/299047)
**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 9:47am UTC](https://discuss.elastic.co/t/elk-servers-required-for-training/299047 "2022-03-08T09:47:53Z")
Hi i'm preparing for the elastic exam and i want to setup an env for training. what is the minimum space to run ELK stack without any issue ? and how many node required ? thanks --- ## [Use terms in events yesterday to for filter when documents appears the last week](https://discuss.elastic.co/t/use-terms-in-events-yesterday-to-for-filter-when-documents-appears-the-last-week/299063)
**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 9:45am UTC](https://discuss.elastic.co/t/use-terms-in-events-yesterday-to-for-filter-when-documents-appears-the-last-week/299063 "2022-03-08T09:45:24Z")
My use case requires search when some documents appears in the last 7 days based on the terms present in the documents exactly yesterday. I want to avoid make two querys one for query the terms yesterday and another to … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=684) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=686)