# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=714

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 715

---

## [Kibana 7.16.3 Pie Chart Hole Size](https://discuss.elastic.co/t/kibana-7-16-3-pie-chart-hole-size/296232)

<div class="topic-metadata">

**Author:** [@John\_Collins](https://discuss.elastic.co/u/John_Collins)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 10:57pm UTC](https://discuss.elastic.co/t/kibana-7-16-3-pie-chart-hole-size/296232 "2022-02-03T22:57:18Z")

</div>

I just upgraded from Kibana 7.11 to 7.16.3 and something just doesn't look right to me when I look at my dashboards. The size of the hole in the middle of my pie charts are causing me a ridiculous amount of unnatural st…

---

## [Kibana 7.16.2 - fields array empty for saved\_object api call](https://discuss.elastic.co/t/kibana-7-16-2-fields-array-empty-for-saved-object-api-call/295768)

<div class="topic-metadata">

**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\
**Replies:** 3\
**Last updated:** [February 3, 2022, 9:56pm UTC](https://discuss.elastic.co/t/kibana-7-16-2-fields-array-empty-for-saved-object-api-call/295768 "2022-02-03T21:56:48Z")

</div>

I've used the saved\_objects api in previous versions of Kibana to retrieve the array of fields associated with each index pattern. I use the following api call: /api/saved\_objects/\_find?type=index-pattern. This returns a…

---

## [Threat Intelligence Rule fails](https://discuss.elastic.co/t/threat-intelligence-rule-fails/293883)

<div class="topic-metadata">

**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 8:45pm UTC](https://discuss.elastic.co/t/threat-intelligence-rule-fails/293883 "2022-02-03T20:45:06Z")

</div>

I want to use the rule "Threat Intel Filebeat Module (v7.x) Indicator Match", but it fails due to format of IPs in the records. The problem is the format in the fileset "abuseurl" in threatintel.indicator.ip, for example…

---

## [DataBase Connection](https://discuss.elastic.co/t/database-connection/296167)

<div class="topic-metadata">

**Author:** [@Harsh1999](https://discuss.elastic.co/u/Harsh1999)\
**Replies:** 1\
**Last updated:** [February 3, 2022, 8:30pm UTC](https://discuss.elastic.co/t/database-connection/296167 "2022-02-03T20:30:00Z")

</div>

We want to connect Snowflake and PGSql Databases to Logstash/Elasticsearch. How do i go ahead with that? Is there any link to referral video or article?

---

## [Getting error while creating scripted field](https://discuss.elastic.co/t/getting-error-while-creating-scripted-field/296221)

<div class="topic-metadata">

**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 6:54pm UTC](https://discuss.elastic.co/t/getting-error-while-creating-scripted-field/296221 "2022-02-03T18:54:40Z")

</div>

Hi all, I am creating a scripted field on an index that already has a bunch of scripted fields. After creating the scripted field I preview the results and see my desired results. For some reason, when I go back to the …

---

## [What's the difference between Kibana and ES roles?](https://discuss.elastic.co/t/whats-the-difference-between-kibana-and-es-roles/295646)

<div class="topic-metadata">

**Author:** [@Agus\_Roca](https://discuss.elastic.co/u/Agus_Roca)\
**Replies:** 1\
**Last updated:** [February 3, 2022, 6:50pm UTC](https://discuss.elastic.co/t/whats-the-difference-between-kibana-and-es-roles/295646 "2022-02-03T18:50:37Z")

</div>

Hi fellows, I am reading the docs and found in Kibana API for roles it states \> Do not use the Elasticsearch role management APIs to manage Kibana roles. I could not find the difference and where these are stored in …

---

## [Heartbeat TCP DNS Query](https://discuss.elastic.co/t/heartbeat-tcp-dns-query/296180)

<div class="topic-metadata">

**Author:** [@rhysh](https://discuss.elastic.co/u/rhysh)\
**Replies:** 1\
**Last updated:** [February 3, 2022, 5:59pm UTC](https://discuss.elastic.co/t/heartbeat-tcp-dns-query/296180 "2022-02-03T17:59:04Z")

</div>

Hi everyone, I am looking to monitor a DNS server (or multiple) through heartbeat. Now it appears this isn't supported out of the box but it is possible to submit TCP requests. Is it at all possible to set up the follow…

---

## [Failed to start Elasticsearch \[7.16.3\] \[Ubuntu 20.04\]](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-16-3-ubuntu-20-04/295991)

<div class="topic-metadata">

**Author:** [@Arkoos62](https://discuss.elastic.co/u/Arkoos62)\
**Replies:** 18\
**Last updated:** [February 3, 2022, 5:56pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-16-3-ubuntu-20-04/295991 "2022-02-03T17:56:58Z")

</div>

Hello there, I have installed Elasticsearch trough the apt on my vps ubuntu 20.04, i just followed the installation guide from here : Install Elasticsearch with Debian Package | Elasticsearch Guide \[7.17\] | Elastic I c…

---

## [Getting message:Request Timeout after 60000ms error](https://discuss.elastic.co/t/getting-message-request-timeout-after-60000ms-error/295856)

<div class="topic-metadata">

**Author:** [@subha1](https://discuss.elastic.co/u/subha1)\
**Replies:** 1\
**Last updated:** [February 3, 2022, 5:45pm UTC](https://discuss.elastic.co/t/getting-message-request-timeout-after-60000ms-error/295856 "2022-02-03T17:45:30Z")

</div>

Hi, {"type":"error","@timestamp":"2022-01-31T13:18:46Z","tags":\[\],"pid":137,"level":"error","error":{"message":"Request Timeout after 60000ms: Request Timeout after 60000ms","name":"Error","stack":"Error: Request Timeou…

---

## [Kibana Status goes Red quite often with Socket hang up](https://discuss.elastic.co/t/kibana-status-goes-red-quite-often-with-socket-hang-up/296211)

<div class="topic-metadata">

**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 5:19pm UTC](https://discuss.elastic.co/t/kibana-status-goes-red-quite-often-with-socket-hang-up/296211 "2022-02-03T17:19:13Z")

</div>

Hello, I am running elastic 5.5.2 Kibana goes to red quite often curl -XGET http://localhost:9200/\_nodes?filter\_path=nodes.\*.version%2Cnodes.\*.http.publish\_address%2Cnodes.\*.ip?v wont respond and even elasticsearh c…

---

## [Kibana Controls - Manage Data](https://discuss.elastic.co/t/kibana-controls-manage-data/296052)

<div class="topic-metadata">

**Author:** [@SalvoDM91](https://discuss.elastic.co/u/SalvoDM91)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 5:03pm UTC](https://discuss.elastic.co/t/kibana-controls-manage-data/296052 "2022-02-03T17:03:46Z")

</div>

Hi, I'm trying to study ELK and I have a little problem with date management. I would like to show data of a hotel with guests: date of checkin (checkin date yyyy-mm-dd), name of guest (name), room booked (room) and pal…

---

## [Grok pattern for this specific log](https://discuss.elastic.co/t/grok-pattern-for-this-specific-log/296010)

<div class="topic-metadata">

**Author:** [@Mihailo\_Stanarevic](https://discuss.elastic.co/u/Mihailo_Stanarevic)\
**Replies:** 5\
**Last updated:** [February 3, 2022, 4:59pm UTC](https://discuss.elastic.co/t/grok-pattern-for-this-specific-log/296010 "2022-02-03T16:59:00Z")

</div>

I want to filter through this log: \[ ERROR\] 02.04.2016. 20:38:19 (FileManagerServlet:handleDownload) Date and time: Sat Apr 02 20:38:19 CEST 2016| miliseconds: 1459622299268| + session id: D4190DFF52C536C500FAF0947DB120…

---

## [Sizing of elastic cluster](https://discuss.elastic.co/t/sizing-of-elastic-cluster/296186)

<div class="topic-metadata">

**Author:** [@Rus](https://discuss.elastic.co/u/Rus)\
**Replies:** 1\
**Last updated:** [February 3, 2022, 4:07pm UTC](https://discuss.elastic.co/t/sizing-of-elastic-cluster/296186 "2022-02-03T16:07:30Z")

</div>

Currently I have a 3 node (DATA+MASTER). One node (CLIENT) with 24 gig RAM. The besic info of cluster now is JVM Heap 38.7 GB / 64.0 GB Documents 1281635203 Data1.1 TB Indices 636 Total shards 6032 re…

---

## [Can I replace a dead primary shard with the ok-replica?](https://discuss.elastic.co/t/can-i-replace-a-dead-primary-shard-with-the-ok-replica/296174)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 3:16pm UTC](https://discuss.elastic.co/t/can-i-replace-a-dead-primary-shard-with-the-ok-replica/296174 "2022-02-03T15:16:50Z")

</div>

I had a situation last night where a node left the cluster and I lost some primary shards. It rejoined, and the shards are showing up as UNASSIGNED with no documents: { "index": "my-index", "shard": "0", "…

---

## [Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id/296138)

<div class="topic-metadata">

**Author:** [@jeromeat](https://discuss.elastic.co/u/jeromeat)\
**Replies:** 5\
**Last updated:** [February 3, 2022, 3:07pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id/296138 "2022-02-03T15:07:51Z")

</div>

I'm currently trying to use Input http\_poller to make an API call to a site to pull some data. However I keep getting the following error: Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id…

---

## [Counting each key of an array inside aggregation](https://discuss.elastic.co/t/counting-each-key-of-an-array-inside-aggregation/296060)

<div class="topic-metadata">

**Author:** [@hugomeloo](https://discuss.elastic.co/u/hugomeloo)\
**Replies:** 4\
**Last updated:** [February 3, 2022, 3:06pm UTC](https://discuss.elastic.co/t/counting-each-key-of-an-array-inside-aggregation/296060 "2022-02-03T15:06:41Z")

</div>

I am trying to make an aggregation in which I can count the number of times each key specific of an array is repeated. As an example: curl -XPUT "localhost:9200/products/\_mapping" -H 'Content-Type: application/json' -d'…

---

## [Options list](https://discuss.elastic.co/t/options-list/296059)

<div class="topic-metadata">

**Author:** [@iraidalavrovaa](https://discuss.elastic.co/u/iraidalavrovaa)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 3:06pm UTC](https://discuss.elastic.co/t/options-list/296059 "2022-02-03T15:06:24Z")

</div>

Hi everyone, I've recently started using Elastic. While working on my dashboard I faced a problem. I want to add an options list but the information I'm interested in is located in 3 different fields: Level 1, Level 2, …

---

## [Can i export data from elasticsearch into mongodb database?](https://discuss.elastic.co/t/can-i-export-data-from-elasticsearch-into-mongodb-database/296118)

<div class="topic-metadata">

**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\
**Replies:** 3\
**Last updated:** [February 3, 2022, 3:03pm UTC](https://discuss.elastic.co/t/can-i-export-data-from-elasticsearch-into-mongodb-database/296118 "2022-02-03T15:03:17Z")

</div>

Hi, I would like to know can I export data from Elasticsearch to mongodb? or from Elasticsearch to another database? I prefer Mongodb but if it is not possible I would like to know which database can I use and how if th…

---

## [Aliases for 5 fields in 5 indices](https://discuss.elastic.co/t/aliases-for-5-fields-in-5-indices/296175)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 12:05pm UTC](https://discuss.elastic.co/t/aliases-for-5-fields-in-5-indices/296175 "2022-02-03T12:05:34Z")

</div>

Hi all, I have 5 indices : ( indices a1, a2, a3, a4, a5) with 5 different fields : Merchant\_Id, Mer\_Id, Merc\_Id, MERCHANT\_Id, MERCH\_ID. For some reasons, I cannot delete or alter the field or data. I want to create a…

---

## [Multiple indexes multiple tag](https://discuss.elastic.co/t/multiple-indexes-multiple-tag/295229)

<div class="topic-metadata">

**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\
**Replies:** 4\
**Last updated:** [February 3, 2022, 1:37pm UTC](https://discuss.elastic.co/t/multiple-indexes-multiple-tag/295229 "2022-02-03T13:37:28Z")

</div>

Hello, I divide my log in different index using event.module value indices: - index: "filebeat-system-%{+yyyy.MM.dd}" when.equals: event.module: "system" - index: "filebeat-apache-%{+yyyy.MM.dd}" …

---

## [Unable to get all indices in the data folder that have been reindexed from 5.6 to 6.8 however I can see indices when I use query \_cat /indices](https://discuss.elastic.co/t/unable-to-get-all-indices-in-the-data-folder-that-have-been-reindexed-from-5-6-to-6-8-however-i-can-see-indices-when-i-use-query-cat-indices/295686)

<div class="topic-metadata">

**Author:** [@rutika\_kamble](https://discuss.elastic.co/u/rutika_kamble)\
**Replies:** 8\
**Last updated:** [February 3, 2022, 1:23pm UTC](https://discuss.elastic.co/t/unable-to-get-all-indices-in-the-data-folder-that-have-been-reindexed-from-5-6-to-6-8-however-i-can-see-indices-when-i-use-query-cat-indices/295686 "2022-02-03T13:23:21Z")

</div>

Unable to get all indices in the data folder that have been reindexed from 5.6 to 6.8 however I can see indices when I use query \_cat /indices PFA attachments please suggest here something

---

## [Can the logstash rabbitmq input plugin read from the start of a stream?](https://discuss.elastic.co/t/can-the-logstash-rabbitmq-input-plugin-read-from-the-start-of-a-stream/296084)

<div class="topic-metadata">

**Author:** [@Daniel\_Bray](https://discuss.elastic.co/u/Daniel_Bray)\
**Replies:** 0\
**Last updated:** [February 2, 2022, 4:08pm UTC](https://discuss.elastic.co/t/can-the-logstash-rabbitmq-input-plugin-read-from-the-start-of-a-stream/296084 "2022-02-02T16:08:21Z")

</div>

I have a rabbitmq stream whose events I want logstash to process. I can get it working mostly ok but logstash only processes records that are pushed to the stream while logstash is running. If I push messages before lo…

---

## [Flat table of data](https://discuss.elastic.co/t/flat-table-of-data/296177)

<div class="topic-metadata">

**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\
**Replies:** 8\
**Last updated:** [February 3, 2022, 1:01pm UTC](https://discuss.elastic.co/t/flat-table-of-data/296177 "2022-02-03T13:01:03Z")

</div>

Hi all, I'm using 7.16.2 version. I have data in elastic which is representing result of tests, one json for example: My question is, how can I create new table in kibana with flat result, not top values. I want to s…

---

## [SQL metadata interface (SHOW TABLE) not showing DataStreams](https://discuss.elastic.co/t/sql-metadata-interface-show-table-not-showing-datastreams/288618)

<div class="topic-metadata">

**Author:** [@JPMoresmau](https://discuss.elastic.co/u/JPMoresmau)\
**Replies:** 1\
**Last updated:** [February 2, 2022, 5:25pm UTC](https://discuss.elastic.co/t/sql-metadata-interface-show-table-not-showing-datastreams/288618 "2022-02-02T17:25:33Z")

</div>

Hello, I have defined a data stream with backing indices and an index policy. So far so good. POST http://localhost:9200/\_sql?format=txt Content-Type: application/json { "query": "select \* from \\"my-data-stream\\"" } …

---

## [I have a problem help me](https://discuss.elastic.co/t/i-have-a-problem-help-me/296088)

<div class="topic-metadata">

**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\
**Replies:** 4\
**Last updated:** [February 3, 2022, 11:43am UTC](https://discuss.elastic.co/t/i-have-a-problem-help-me/296088 "2022-02-03T11:43:33Z")

</div>

It is an index where data is continuously flowing in. As a result, merges continue to occur, the query cache goes down, and as a result, I/O increases again. What should I do? below is 1 hour below is 3 hou…

---

## [Logstash configuration File](https://discuss.elastic.co/t/logstash-configuration-file/296179)

<div class="topic-metadata">

**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\
**Replies:** 3\
**Last updated:** [February 3, 2022, 11:17am UTC](https://discuss.elastic.co/t/logstash-configuration-file/296179 "2022-02-03T11:17:10Z")

</div>

input { file { type =\> "json" path =\> "/home/harsh/Documents/elklog/2022/01/1/\*.json" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { } output { stdout { codec =\> rubydebug…

---

## [Hot to get all results in the Dev Tools](https://discuss.elastic.co/t/hot-to-get-all-results-in-the-dev-tools/296178)

<div class="topic-metadata">

**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 11:14am UTC](https://discuss.elastic.co/t/hot-to-get-all-results-in-the-dev-tools/296178 "2022-02-03T11:14:55Z")

</div>

Hi All, I'm using 7.16.2, When I run query in the dev tools I get only 10 first results... How can I get all the query results? Thanks, Shay

---

## [How to create grok filter to parse the below log format](https://discuss.elastic.co/t/how-to-create-grok-filter-to-parse-the-below-log-format/295988)

<div class="topic-metadata">

**Author:** [@poddraj](https://discuss.elastic.co/u/poddraj)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 7:32am UTC](https://discuss.elastic.co/t/how-to-create-grok-filter-to-parse-the-below-log-format/295988 "2022-02-03T07:32:59Z")

</div>

2022-02-01 01:25:45.778-\[ActivationSrvc-28\] com.verizon.vnm.activation.ejb.helper.ActivationRequestHelper.nbaReqResponse(ActivationRequestHelper.java:3313) INFO {"VSAD\_ID":"ABFD","log\_type":"","app\_name":"ABC","VAST\_ID"…

---

## [Logstash Automation](https://discuss.elastic.co/t/logstash-automation/296150)

<div class="topic-metadata">

**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 7:26am UTC](https://discuss.elastic.co/t/logstash-automation/296150 "2022-02-03T07:26:57Z")

</div>

there is a one Folder name logs in that Folder there is multiple json file like 1.json, 2.json, etc i want to pars logs in Elasticsearch with logstash so Question is that how to configure that all file in one conf fi…

---

## [Kafka input kibana message one field](https://discuss.elastic.co/t/kafka-input-kibana-message-one-field/296134)

<div class="topic-metadata">

**Author:** [@splitmessage88](https://discuss.elastic.co/u/splitmessage88)\
**Replies:** 2\
**Last updated:** [February 3, 2022, 7:00am UTC](https://discuss.elastic.co/t/kafka-input-kibana-message-one-field/296134 "2022-02-03T07:00:31Z")

</div>

Hello! I'm new here and have been stuck with an issue for 2 days. I have a working flow with winlogbeat - kafka - logstash - Elasticsearch. I receive the winlogbeat logs in kibana but the problem is that the full log …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=713)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=715)
