# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=723 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 724 --- ## [DEVELOP JAVA OUTPUT PLUGIN FOR APPLICATION LOG](https://discuss.elastic.co/t/develop-java-output-plugin-for-application-log/295293)
**Author:** [@uday22](https://discuss.elastic.co/u/uday22)\ **Replies:** 0\ **Last updated:** [January 25, 2022, 2:43am UTC](https://discuss.elastic.co/t/develop-java-output-plugin-for-application-log/295293 "2022-01-25T02:43:58Z")
An application log every line of the message is different from another line. In that, need to extract the IP address and username by using the java output plugin. which method and PluginConfigSpec should use in the plugi… --- ## [Ec2 role based access failing for s3-input-plugin if we upgrade ec2 to use metadata v2](https://discuss.elastic.co/t/ec2-role-based-access-failing-for-s3-input-plugin-if-we-upgrade-ec2-to-use-metadata-v2/295271)
**Author:** [@uma\_rengasamy](https://discuss.elastic.co/u/uma_rengasamy)\ **Replies:** 0\ **Last updated:** [January 24, 2022, 6:56pm UTC](https://discuss.elastic.co/t/ec2-role-based-access-failing-for-s3-input-plugin-if-we-upgrade-ec2-to-use-metadata-v2/295271 "2022-01-24T18:56:29Z")
Logstash Version : logstash 7.2.0 aws-cli/1.18.157 Python/3.6.8 Linux/4.18.0-305.12.1.el8\_4.x86\_64 botocore/1.18.16 logstash-input-s3 (3.4.1) aws-cli/1.18.157 Python/3.6.8 Linux/4.18.0-305.12.1.el8\_4.x86\_64 botocore/1… --- ## [401 forbidden from artifacts.elastic.co](https://discuss.elastic.co/t/401-forbidden-from-artifacts-elastic-co/294114)
**Author:** [@hmof](https://discuss.elastic.co/u/hmof)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 1:12am UTC](https://discuss.elastic.co/t/401-forbidden-from-artifacts-elastic-co/294114 "2022-01-25T01:12:20Z")
I am getting a 401 forbidden error trying to access the APT repository but only from one of my hosts. Err:4 https://artifacts.elastic.co/packages/6.x/apt stable InRelease … --- ## [Remove \`\_all\` mapping from older indexes](https://discuss.elastic.co/t/remove-all-mapping-from-older-indexes/295263)
**Author:** [@willdennis](https://discuss.elastic.co/u/willdennis)\ **Replies:** 5\ **Last updated:** [January 25, 2022, 1:06am UTC](https://discuss.elastic.co/t/remove-all-mapping-from-older-indexes/295263 "2022-01-25T01:06:50Z")
Upgraded to v6.8 recently; trying to ensure I can now upgrade to v7.x Having an issue when trying to reindex my old logstash indexes created on v5.6.x - getting this message when the system goes to create the new index (… --- ## [Get distinct values from a array in ElasticSearch](https://discuss.elastic.co/t/get-distinct-values-from-a-array-in-elasticsearch/295274)
**Author:** [@smkarnan](https://discuss.elastic.co/u/smkarnan)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 12:27am UTC](https://discuss.elastic.co/t/get-distinct-values-from-a-array-in-elasticsearch/295274 "2022-01-25T00:27:04Z")
Hi, How can I retrieve unique values in the array, i just want to get unique lat from the below collection. "hits" { "function": { "geo\_fence: \[ { "lon": 131.… --- ## [Keyboard Shortcuts for Dev Tools](https://discuss.elastic.co/t/keyboard-shortcuts-for-dev-tools/295267)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [January 25, 2022, 12:19am UTC](https://discuss.elastic.co/t/keyboard-shortcuts-for-dev-tools/295267 "2022-01-25T00:19:09Z")
This is a simple one - is there a keyboard shortcut for executing an API call in Dev Tools (rather than clicking the little arrow)? It seems like a small thing, but if it exists, it would save a ton of time. --- ## [Error while connecting logstash to kafka](https://discuss.elastic.co/t/error-while-connecting-logstash-to-kafka/295189)
**Author:** [@Avnish\_Singh](https://discuss.elastic.co/u/Avnish_Singh)\ **Replies:** 0\ **Last updated:** [January 24, 2022, 8:16am UTC](https://discuss.elastic.co/t/error-while-connecting-logstash-to-kafka/295189 "2022-01-24T08:16:31Z")
Hi I'm trying to run logstash with input as Kafka and output to file, here is the pipeline config file: input { kafka { bootstrap\_servers =\> "kafka\_server:9092 topics =\> \["Topic1", "Topic2", "Topic3"\] … --- ## [Logstash throughput ramping up too slowly -- throttle filter?](https://discuss.elastic.co/t/logstash-throughput-ramping-up-too-slowly-throttle-filter/295285)
**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\ **Replies:** 0\ **Last updated:** [January 24, 2022, 9:43pm UTC](https://discuss.elastic.co/t/logstash-throughput-ramping-up-too-slowly-throttle-filter/295285 "2022-01-24T21:43:42Z")
We have a (Windows) logs stream pulled out of Kafka and pushed into ES. During site events our rate can spike to many multiples. When this happens, Logstash appears to delay messages getting in to ES. It's not due to … --- ## [Elasticsearch Engineer - Lab 2.4 - Error in instructions](https://discuss.elastic.co/t/elasticsearch-engineer-lab-2-4-error-in-instructions/295278)
**Author:** [@Irina\_Truong](https://discuss.elastic.co/u/Irina_Truong)\ **Replies:** 1\ **Last updated:** [January 24, 2022, 8:40pm UTC](https://discuss.elastic.co/t/elasticsearch-engineer-lab-2-4-error-in-instructions/295278 "2022-01-24T20:40:40Z")
Dear Elasticsearch training experts, I've been going through the Elasticsearch Engineer class. In the lab 2.4 "Advanced search" there is a task as follows: Write a script query that returns all blogs where the authors… --- ## [Total shards per node calculation](https://discuss.elastic.co/t/total-shards-per-node-calculation/294829)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 4\ **Last updated:** [January 24, 2022, 8:04pm UTC](https://discuss.elastic.co/t/total-shards-per-node-calculation/294829 "2022-01-24T20:04:57Z")
I've been working on Elastic for a while now but just wanted to do a quick check on learning that may also be useful to others. I've got a customer that would like 4 separate indices for logs. The only difference betwe… --- ## [Rally 2.3.1 released](https://discuss.elastic.co/t/rally-2-3-1-released/295277)
**Author:** [@json](https://discuss.elastic.co/u/json)\ **Replies:** 0\ **Last updated:** [January 24, 2022, 7:52pm UTC](https://discuss.elastic.co/t/rally-2-3-1-released/295277 "2022-01-24T19:52:47Z")
We have just released Rally 2.3.1. Highlights: Rally now supports Python 3.10. A new timeout parameter can be used for bulk operations. Bug fixes and docs changes have been included. For the full list of changes pleas… --- ## [Iterating over the same grok filter](https://discuss.elastic.co/t/iterating-over-the-same-grok-filter/295089)
**Author:** [@tfinan](https://discuss.elastic.co/u/tfinan)\ **Replies:** 4\ **Last updated:** [January 24, 2022, 7:09pm UTC](https://discuss.elastic.co/t/iterating-over-the-same-grok-filter/295089 "2022-01-24T19:09:23Z")
I am a new user here, and don't know if this is a trivial question or not (it certainly is not for me). What I want to do is create a filter that creates fields with names based on the data itself. I think I can do this… --- ## [What happens to the original text field?](https://discuss.elastic.co/t/what-happens-to-the-original-text-field/295262)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [January 24, 2022, 6:26pm UTC](https://discuss.elastic.co/t/what-happens-to-the-original-text-field/295262 "2022-01-24T18:26:49Z")
When we use custom or built-in analyzer in our mapping it just convert the stream of characters to stream of tokens. For example when we analyze the text like The QUICK brown foxes jumped over the dog!.Here i am using c… --- ## [How to change the External alert trend request](https://discuss.elastic.co/t/how-to-change-the-external-alert-trend-request/295094)
**Author:** [@wsouza](https://discuss.elastic.co/u/wsouza)\ **Replies:** 4\ **Last updated:** [January 24, 2022, 6:18pm UTC](https://discuss.elastic.co/t/how-to-change-the-external-alert-trend-request/295094 "2022-01-24T18:18:31Z")
Guys, I need to change the information on the External alert trend dashboard, however, I can't find the place to change the requests. The image shows what I want to change. --- ## [Use Date Histogram to group data by day of the week](https://discuss.elastic.co/t/use-date-histogram-to-group-data-by-day-of-the-week/295255)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 1\ **Last updated:** [January 24, 2022, 6:09pm UTC](https://discuss.elastic.co/t/use-date-histogram-to-group-data-by-day-of-the-week/295255 "2022-01-24T18:09:36Z")
My case is as follows, I am conducting a search for sales that occurred between 2021-12-23 to 2022-01-23, and I need to know the total sales by day of the week, regardless of the week and year. So I can theoretically kn… --- ## [How to improve below Logstash grok filters?](https://discuss.elastic.co/t/how-to-improve-below-logstash-grok-filters/295212)
**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\ **Replies:** 3\ **Last updated:** [January 24, 2022, 5:55pm UTC](https://discuss.elastic.co/t/how-to-improve-below-logstash-grok-filters/295212 "2022-01-24T17:55:59Z")
Hi there. I have a problem with Logstash consuming most of the CPU resources all the time and events not being parsed in real time. Through Stack Monitoring in Kibana, I found that for one set of filters for a certain so… --- ## [Why does ClusterState class need need a data member named stateUUID?](https://discuss.elastic.co/t/why-does-clusterstate-class-need-need-a-data-member-named-stateuuid/295196)
**Author:** [@armsword](https://discuss.elastic.co/u/armsword)\ **Replies:** 1\ **Last updated:** [January 24, 2022, 5:48pm UTC](https://discuss.elastic.co/t/why-does-clusterstate-class-need-need-a-data-member-named-stateuuid/295196 "2022-01-24T17:48:05Z")
https://github.com/elastic/elasticsearch/blob/master/server/src/main/java/org/elasticsearch/cluster/ClusterState.java#L139 This class ClusterState has two data member, named stateUUID and version. The stateUUID is supp… --- ## [Kibana vs. Power BI](https://discuss.elastic.co/t/kibana-vs-power-bi/295240)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 3\ **Last updated:** [January 24, 2022, 5:33pm UTC](https://discuss.elastic.co/t/kibana-vs-power-bi/295240 "2022-01-24T17:33:52Z")
I have a use-case where end users need to be able to quickly and easily view data stored in a MS SQL database for devices, systems and hardware/software assets they own. This would just be a read-only dashboard where the… --- ## [Ruby script for deleting some elements recursively \[Q&A\]](https://discuss.elastic.co/t/ruby-script-for-deleting-some-elements-recursively-q-a/295253)
**Author:** [@SudoNova](https://discuss.elastic.co/u/SudoNova)\ **Replies:** 0\ **Last updated:** [January 24, 2022, 4:31pm UTC](https://discuss.elastic.co/t/ruby-script-for-deleting-some-elements-recursively-q-a/295253 "2022-01-24T16:31:24Z")
Hi Just because I had troubles to make it work,I decided to share it maybe some other folks can use it some time. Requirement: Delete all elements in a parsed json log where they are empty Note: Haproxy sends empty fi… --- ## [Mongodb jdbc logstash no data output in my console](https://discuss.elastic.co/t/mongodb-jdbc-logstash-no-data-output-in-my-console/295245)
**Author:** [@Kermit\_Liu](https://discuss.elastic.co/u/Kermit_Liu)\ **Replies:** 0\ **Last updated:** [January 24, 2022, 3:23pm UTC](https://discuss.elastic.co/t/mongodb-jdbc-logstash-no-data-output-in-my-console/295245 "2022-01-24T15:23:37Z")
input { jdbc { jdbc\_driver\_library =\> "/usr/share/logstash/pipeline/driver/mongojdbc4.0.jar" jdbc\_driver\_class =\> "com.dbschema.MongoJdbcDriver" jdbc\_connection\_string =\> "jdbc:mongodb://172.17.0.1… --- ## [Beginner here](https://discuss.elastic.co/t/beginner-here/295241)
**Author:** [@Faraz\_Sidd](https://discuss.elastic.co/u/Faraz_Sidd)\ **Replies:** 0\ **Last updated:** [January 24, 2022, 2:37pm UTC](https://discuss.elastic.co/t/beginner-here/295241 "2022-01-24T14:37:13Z")
Hello Elastic community I am a newbie programmer. I want to contribute to this community as a open source contributor. Can someone point in the right direction as how can I get started with it. --- ## [Reporting option not available while adding Kibana privileges](https://discuss.elastic.co/t/reporting-option-not-available-while-adding-kibana-privileges/295223)
**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\ **Replies:** 2\ **Last updated:** [January 24, 2022, 2:29pm UTC](https://discuss.elastic.co/t/reporting-option-not-available-while-adding-kibana-privileges/295223 "2022-01-24T14:29:36Z")
Hi, I followed the document (Configure reporting in Kibana | Kibana Guide \[7.16\] | Elastic) which explains how to enable users generate reports and grant users access to the reporting features, and secure the reporting … --- ## [Install filter-plugin failed](https://discuss.elastic.co/t/install-filter-plugin-failed/295237)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 0\ **Last updated:** [January 24, 2022, 2:04pm UTC](https://discuss.elastic.co/t/install-filter-plugin-failed/295237 "2022-01-24T14:04:16Z")
Hello, Today I upgraded logstash to the latest version and needs to install logstash-filter-elapsed plugin. I'm receiving below error: ./logstash-plugin install logstash-filter-elapsed Using bundled JDK: /usr/share/lo… --- ## [Replace Log4j from 2.x to 2.17.0 or later](https://discuss.elastic.co/t/replace-log4j-from-2-x-to-2-17-0-or-later/292897)
**Author:** [@marisubu](https://discuss.elastic.co/u/marisubu)\ **Replies:** 4\ **Last updated:** [January 24, 2022, 1:16pm UTC](https://discuss.elastic.co/t/replace-log4j-from-2-x-to-2-17-0-or-later/292897 "2022-01-24T13:16:53Z")
Our oldest products includes Elastic stack versions 5.2, 6.2.2 and 7.10.2. We're in situation that we can not perform elastic versions uplift to the latest/fixed versions. Can we replace Log4j 2.x versions with 2.17.x o… --- ## [Multiple Index](https://discuss.elastic.co/t/multiple-index/294012)
**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\ **Replies:** 2\ **Last updated:** [January 24, 2022, 12:43pm UTC](https://discuss.elastic.co/t/multiple-index/294012 "2022-01-24T12:43:13Z")
Dear all I have a problem with filebeat configuration. I enable two different module and I need to write log in two different index , myindex-module1-data myindex-module2-data Is it possible? I read about filebeat.p… --- ## [Update ELK 7.14 at 7.16](https://discuss.elastic.co/t/update-elk-7-14-at-7-16/295195)
**Author:** [@marc0069urca](https://discuss.elastic.co/u/marc0069urca)\ **Replies:** 1\ **Last updated:** [January 24, 2022, 10:16am UTC](https://discuss.elastic.co/t/update-elk-7-14-at-7-16/295195 "2022-01-24T10:16:34Z")
Hello, I wanted to know step by step in the order of the Elasticsearch machine to Kibana the implementation of a complete upgrade of an ELK , can you tell me the procedure to upgrade from our tool 7.14 to the current ve… --- ## [Export Elasticsearch Index to local](https://discuss.elastic.co/t/export-elasticsearch-index-to-local/295193)
**Author:** [@AsakaRin](https://discuss.elastic.co/u/AsakaRin)\ **Replies:** 1\ **Last updated:** [January 24, 2022, 9:54am UTC](https://discuss.elastic.co/t/export-elasticsearch-index-to-local/295193 "2022-01-24T09:54:36Z")
I want to make a clone database Elasticsearch from server to my local. I already have permission to access API and create snapshots but I can't access the server direct and download snapshots to my local. Is there any wa… --- ## [LogStash Special Character Split Error](https://discuss.elastic.co/t/logstash-special-character-split-error/295137)
**Author:** [@eagles40cnuh](https://discuss.elastic.co/u/eagles40cnuh)\ **Replies:** 6\ **Last updated:** [January 24, 2022, 9:10am UTC](https://discuss.elastic.co/t/logstash-special-character-split-error/295137 "2022-01-24T09:10:40Z")
Hi! I have some problem with Logstash Filter Filebeat collect -\> "aaa.log" file and then message field -\> "ID∮NAME∮TELNO" And Logstash.conf is input { beats { port =\> xxxx } filter { mutate { split =\> { "message"… --- ## [Right order to stop ELK](https://discuss.elastic.co/t/right-order-to-stop-elk/295199)
**Author:** [@Ram\_N](https://discuss.elastic.co/u/Ram_N)\ **Replies:** 1\ **Last updated:** [January 24, 2022, 9:01am UTC](https://discuss.elastic.co/t/right-order-to-stop-elk/295199 "2022-01-24T09:01:19Z")
Hi What is the recommended to stop Elasticsearch, logstash, kibana? Which should be stopped first? At times if Elasticsearch is stopped first, logstash is trying to establish connection and logstash is not getting stopp… --- ## [ElasticSearch won't search specific field](https://discuss.elastic.co/t/elasticsearch-wont-search-specific-field/295201)
**Author:** [@bert\_coenen](https://discuss.elastic.co/u/bert_coenen)\ **Replies:** 0\ **Last updated:** [January 24, 2022, 8:59am UTC](https://discuss.elastic.co/t/elasticsearch-wont-search-specific-field/295201 "2022-01-24T08:59:30Z")
I have a problem searching a specific field inside my index. little background: On my project we need to search inside a terminology Server like FHIR but then our own. So we have an object that contains a Code (123564/… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=722) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=724)