# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=726

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 727

---

## [Convert a field from string to IP type](https://discuss.elastic.co/t/convert-a-field-from-string-to-ip-type/293253)

<div class="topic-metadata">

**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\
**Replies:** 1\
**Last updated:** [January 21, 2022, 4:14am UTC](https://discuss.elastic.co/t/convert-a-field-from-string-to-ip-type/293253 "2022-01-21T04:14:44Z")

</div>

Hi, i need to Convert a field (client\_ip) from string to IP type. I use ILM for the index. It would be possible to change the field type on the next rollover? It doesn't matter that the previous indices are compromise…

---

## [Allowing USER to generate and download PDFs and PNGs](https://discuss.elastic.co/t/allowing-user-to-generate-and-download-pdfs-and-pngs/294629)

<div class="topic-metadata">

**Author:** [@pchatterji](https://discuss.elastic.co/u/pchatterji)\
**Replies:** 1\
**Last updated:** [January 21, 2022, 4:06am UTC](https://discuss.elastic.co/t/allowing-user-to-generate-and-download-pdfs-and-pngs/294629 "2022-01-21T04:06:37Z")

</div>

Hi, We have created a USER and assigned it USER\_ROLE (which has 'read' and 'view\_index\_metadata' privileges for a given index). This user is assigned a USER\_SPACE where the dashboard(s) the USER is able to view has been…

---

## [Dynamic mapping issue](https://discuss.elastic.co/t/dynamic-mapping-issue/294981)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [January 21, 2022, 12:14am UTC](https://discuss.elastic.co/t/dynamic-mapping-issue/294981 "2022-01-21T00:14:32Z")

</div>

Hi I'm having indices being sent dynamically to my project. When indices are being pushed , fields are mapped dynamically. Due to this mappings are different everytime. For example for 1 index , created date field is …

---

## [Global Search](https://discuss.elastic.co/t/global-search/294887)

<div class="topic-metadata">

**Author:** [@Prabakar](https://discuss.elastic.co/u/Prabakar)\
**Replies:** 6\
**Last updated:** [January 20, 2022, 4:59pm UTC](https://discuss.elastic.co/t/global-search/294887 "2022-01-20T16:59:25Z")

</div>

Hello Everyone, I would like to perform a global search by providing a keyword like below (2 different requests) in the request. It returns the result which matches the word "pizza" in any of the field. But if I give "p…

---

## [Distinguishing username from domain\\username using grok](https://discuss.elastic.co/t/distinguishing-username-from-domain-username-using-grok/294988)

<div class="topic-metadata">

**Author:** [@smithtod](https://discuss.elastic.co/u/smithtod)\
**Replies:** 1\
**Last updated:** [January 20, 2022, 10:06pm UTC](https://discuss.elastic.co/t/distinguishing-username-from-domain-username-using-grok/294988 "2022-01-20T22:06:19Z")

</div>

I am trying to create a grok statement that will pull the username out of a syslog file. When users enter their authentication information for our VPN login, they can put either domain\\username, or just username, and eit…

---

## [How to find the Elasticsearch URL from Kibana?](https://discuss.elastic.co/t/how-to-find-the-elasticsearch-url-from-kibana/294979)

<div class="topic-metadata">

**Author:** [@Ananya\_Chakraborty](https://discuss.elastic.co/u/Ananya_Chakraborty)\
**Replies:** 3\
**Last updated:** [January 20, 2022, 10:00pm UTC](https://discuss.elastic.co/t/how-to-find-the-elasticsearch-url-from-kibana/294979 "2022-01-20T22:00:53Z")

</div>

I have a Kibana login with admin privilege. I don't know the URL for my Elasticsearch. How can I find it from within Kibana? Is there a query that I can run in the console to find the Elasticsearch URL?

---

## [Remove over gsub regex](https://discuss.elastic.co/t/remove-over-gsub-regex/294875)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 2\
**Last updated:** [January 20, 2022, 9:49pm UTC](https://discuss.elastic.co/t/remove-over-gsub-regex/294875 "2022-01-20T21:49:36Z")

</div>

Hi How to fix below code for remove all item with word " term" from many of fields, one variant of fields in example line "psm\_info" =\> "7-5-term-term-term-term-term-" I have tried some like this one, but it doesn't …

---

## [How to increase number of shards in parallel that are initializing or relocating](https://discuss.elastic.co/t/how-to-increase-number-of-shards-in-parallel-that-are-initializing-or-relocating/294946)

<div class="topic-metadata">

**Author:** [@lecko](https://discuss.elastic.co/u/lecko)\
**Replies:** 1\
**Last updated:** [January 20, 2022, 7:59pm UTC](https://discuss.elastic.co/t/how-to-increase-number-of-shards-in-parallel-that-are-initializing-or-relocating/294946 "2022-01-20T19:59:47Z")

</div>

Hello. I use Elasticsearch 6.8 in a cluster of 8 servers. Sometimes I need to do some hardware task on one of servers and need to move shards from that node to others or initilaize them on other nodes. Before start I ru…

---

## [Bind errors on startup](https://discuss.elastic.co/t/bind-errors-on-startup/294886)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 2\
**Last updated:** [January 20, 2022, 7:39pm UTC](https://discuss.elastic.co/t/bind-errors-on-startup/294886 "2022-01-20T19:39:23Z")

</div>

I am adding a new node to the cluster for the first time and I get the following error: \[2022-01-20T12:56:40,832\]\[INFO \]\[o.e.x.d.l.DeprecationIndexingComponent\] \[secmonprd01\] deprecation component started \[2022-01-20T12…

---

## [Drilldown date range bug](https://discuss.elastic.co/t/drilldown-date-range-bug/294976)

<div class="topic-metadata">

**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\
**Replies:** 6\
**Last updated:** [January 20, 2022, 6:57pm UTC](https://discuss.elastic.co/t/drilldown-date-range-bug/294976 "2022-01-20T18:57:05Z")

</div>

Hi, when you have stacked bar chart which is split by timestamp (lets say before 2019 and 2019-2022) and you create drilldown, the 2019-2022 part of bar redirects you to dashboard with correct timestamp. HOWEVER, when y…

---

## [How to construct JSON using filter{} and input data?](https://discuss.elastic.co/t/how-to-construct-json-using-filter-and-input-data/294867)

<div class="topic-metadata">

**Author:** [@AshwinMS](https://discuss.elastic.co/u/AshwinMS)\
**Replies:** 3\
**Last updated:** [January 20, 2022, 5:43pm UTC](https://discuss.elastic.co/t/how-to-construct-json-using-filter-and-input-data/294867 "2022-01-20T17:43:53Z")

</div>

Hi , im new to logstash and found it to be super useful to loadup data from different sources to an es cluster ! But ive run into one problem which ive been stuck with for a while now and would really love some help. Im…

---

## [Elastic Stack Architecture](https://discuss.elastic.co/t/elastic-stack-architecture/294849)

<div class="topic-metadata">

**Author:** [@baddack](https://discuss.elastic.co/u/baddack)\
**Replies:** 4\
**Last updated:** [January 20, 2022, 5:04pm UTC](https://discuss.elastic.co/t/elastic-stack-architecture/294849 "2022-01-20T17:04:56Z")

</div>

Hello everyone, /!\\ NB: First I would say that I am really really sorry for the ASCII Art but I can't upload images since this morning and I don't know why. :sweat\_smile: I read a lot about how an Elastic cluster shoul…

---

## [Setting a custom variable in TSVB bucket script](https://discuss.elastic.co/t/setting-a-custom-variable-in-tsvb-bucket-script/294960)

<div class="topic-metadata">

**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\
**Replies:** 1\
**Last updated:** [January 20, 2022, 4:57pm UTC](https://discuss.elastic.co/t/setting-a-custom-variable-in-tsvb-bucket-script/294960 "2022-01-20T16:57:25Z")

</div>

Hello, Is it possible to set a variable inside a bucket script in tsvb? i would like to compare two values and set the new variable to be the value that exists. right now I have: my code if (params.inmin != null)…

---

## [Directories of indices in Backup Storage](https://discuss.elastic.co/t/directories-of-indices-in-backup-storage/294958)

<div class="topic-metadata">

**Author:** [@ttttien](https://discuss.elastic.co/u/ttttien)\
**Replies:** 1\
**Last updated:** [January 20, 2022, 4:48pm UTC](https://discuss.elastic.co/t/directories-of-indices-in-backup-storage/294958 "2022-01-20T16:48:59Z")

</div>

Hello everyone, I would like to know that if there are a method to verify what folder in the Backup Storage that correspondent with each index in Elasticsearch: For example: consider 3 index "audit\_trail", "index\_log"…

---

## [Elastic users api: beginner questions](https://discuss.elastic.co/t/elastic-users-api-beginner-questions/294901)

<div class="topic-metadata">

**Author:** [@Emile\_Plas](https://discuss.elastic.co/u/Emile_Plas)\
**Replies:** 0\
**Last updated:** [January 20, 2022, 7:24am UTC](https://discuss.elastic.co/t/elastic-users-api-beginner-questions/294901 "2022-01-20T07:24:38Z")

</div>

Hey everyone! I am quite new to Elasticsearch and I have some beginners questions, please forgive me. I hope you can shortly take the time to validate my questions regarding the elastic users API. I am currently buildi…

---

## [Can I improve this aggregation query?](https://discuss.elastic.co/t/can-i-improve-this-aggregation-query/294843)

<div class="topic-metadata">

**Author:** [@elasticshane](https://discuss.elastic.co/u/elasticshane)\
**Replies:** 3\
**Last updated:** [January 20, 2022, 3:49pm UTC](https://discuss.elastic.co/t/can-i-improve-this-aggregation-query/294843 "2022-01-20T15:49:34Z")

</div>

Hello, I'm quite new to Elasticsearch, but have made some progress with a query, and I'd really appreciate your feedback/ideas about how I've approached my requirement. Introduction/Mappings I'm writing a query to det…

---

## [Remove duplicate tokens after edge\_ngram on array](https://discuss.elastic.co/t/remove-duplicate-tokens-after-edge-ngram-on-array/294945)

<div class="topic-metadata">

**Author:** [@timon](https://discuss.elastic.co/u/timon)\
**Replies:** 2\
**Last updated:** [January 20, 2022, 3:31pm UTC](https://discuss.elastic.co/t/remove-duplicate-tokens-after-edge-ngram-on-array/294945 "2022-01-20T15:31:41Z")

</div>

I have a field where multiple values are stored: field: \["testOneTwo", "testThreeFour"\] I would like to analyze this field with an edge\_ngram filter, but also remove duplicate tokens. I tried the unique and remove\_dupl…

---

## [Multiple Config Files - Duplicate data](https://discuss.elastic.co/t/multiple-config-files-duplicate-data/294898)

<div class="topic-metadata">

**Author:** [@sujeetkp](https://discuss.elastic.co/u/sujeetkp)\
**Replies:** 1\
**Last updated:** [January 20, 2022, 3:31pm UTC](https://discuss.elastic.co/t/multiple-config-files-duplicate-data/294898 "2022-01-20T15:31:01Z")

</div>

I am new to logstash and filebeat. I am trying to set up multiple config files for my logstash instance. Using filebeat to send data to logstash. Even if I have filters created for both the logstash config files, I am g…

---

## [Attempted to resurrect connection to dead ES instance, but got an error... Received fatal alert: bad\_certificate"}](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-received-fatal-alert-bad-certificate/294708)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 2\
**Last updated:** [January 20, 2022, 3:19pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-received-fatal-alert-bad-certificate/294708 "2022-01-20T15:19:05Z")

</div>

Hello, I wanted to run the old logstash config that once was working. It is not working anymore I guess that because now Elasticsearch is set up with xpack.security.transport.ssl.verification\_mode: certificate Logsta…

---

## [Generating shingles with synonyms in Elasticsearch](https://discuss.elastic.co/t/generating-shingles-with-synonyms-in-elasticsearch/294964)

<div class="topic-metadata">

**Author:** [@Yawan\_Gupta](https://discuss.elastic.co/u/Yawan_Gupta)\
**Replies:** 0\
**Last updated:** [January 20, 2022, 2:58pm UTC](https://discuss.elastic.co/t/generating-shingles-with-synonyms-in-elasticsearch/294964 "2022-01-20T14:58:09Z")

</div>

I have a file of alternate spellings for the terms in my index. I want to produce bigrams containing those alternate spellings for particular terms. For example, I have biriyani, biryani, briyani in my alternate spelling…

---

## [The error response for search\_geometry query with ES 6.7.2](https://discuss.elastic.co/t/the-error-response-for-search-geometry-query-with-es-6-7-2/294914)

<div class="topic-metadata">

**Author:** [@Eduardo\_Montes](https://discuss.elastic.co/u/Eduardo_Montes)\
**Replies:** 1\
**Last updated:** [January 20, 2022, 2:37pm UTC](https://discuss.elastic.co/t/the-error-response-for-search-geometry-query-with-es-6-7-2/294914 "2022-01-20T14:37:46Z")

</div>

Hello, I sent the search\_geometry query to ES V6.7.2 and got error (see below). With another ES server V6.2.4 I got correct response without error. Is there any bug in version 6.7.2? Or could be this error caused by the…

---

## [About Process tag under Observability](https://discuss.elastic.co/t/about-process-tag-under-observability/294956)

<div class="topic-metadata">

**Author:** [@varsharain-a11y](https://discuss.elastic.co/u/varsharain-a11y)\
**Replies:** 0\
**Last updated:** [January 20, 2022, 1:49pm UTC](https://discuss.elastic.co/t/about-process-tag-under-observability/294956 "2022-01-20T13:49:42Z")

</div>

I am first time user of Elastic . I was trying some of the quickstarts to ingest data in elastic. I was trying to use elastic agent method for data ingesting and with system Integration agent trying to visualize process…

---

## [How to get the minimum value of a timespan TSVB](https://discuss.elastic.co/t/how-to-get-the-minimum-value-of-a-timespan-tsvb/294950)

<div class="topic-metadata">

**Author:** [@Juliana\_Sabino](https://discuss.elastic.co/u/Juliana_Sabino)\
**Replies:** 0\
**Last updated:** [January 20, 2022, 1:34pm UTC](https://discuss.elastic.co/t/how-to-get-the-minimum-value-of-a-timespan-tsvb/294950 "2022-01-20T13:34:36Z")

</div>

Hi Team, I have a TSVB time series, I'm doing a filter ratio do divide the number x by the number y. Everything goes right here. Then, I have another TSVB metric that I'm doing the same thing, I have a filter ratio wh…

---

## [Kibana doesnt log stderr](https://discuss.elastic.co/t/kibana-doesnt-log-stderr/294949)

<div class="topic-metadata">

**Author:** [@gorbroth](https://discuss.elastic.co/u/gorbroth)\
**Replies:** 0\
**Last updated:** [January 20, 2022, 1:19pm UTC](https://discuss.elastic.co/t/kibana-doesnt-log-stderr/294949 "2022-01-20T13:19:54Z")

</div>

Hi , We've recently changed our log dentation from the default /var/log but ever since that we are unable to get stderr logs to our kibana.log file , its only able to capture stdout (info) logs. We also tried the optio…

---

## [Logstash EVTX Ingestion](https://discuss.elastic.co/t/logstash-evtx-ingestion/294947)

<div class="topic-metadata">

**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\
**Replies:** 0\
**Last updated:** [January 20, 2022, 1:00pm UTC](https://discuss.elastic.co/t/logstash-evtx-ingestion/294947 "2022-01-20T13:00:22Z")

</div>

Hi Guys, Is there a way to ingest cold EVTX files with logstash? The reason I am asking, is that winlogbeat is really slow. I have big files, some of them takes hours to upload into ELK with winlogbeat. Thanks

---

## [ECK - EFS Issue](https://discuss.elastic.co/t/eck-efs-issue/294943)

<div class="topic-metadata">

**Author:** [@OpsLon](https://discuss.elastic.co/u/OpsLon)\
**Replies:** 0\
**Last updated:** [January 20, 2022, 11:11am UTC](https://discuss.elastic.co/t/eck-efs-issue/294943 "2022-01-20T11:11:15Z")

</div>

Hello, I can't get an Elasticsearch cluster running with efs as storageclass. Error messages: 0/2 nodes are available: 2 pod has unbound immediate PersistentVolumeClaims. Back-off restarting failed container Is anyo…

---

## [Abrir por iFrame](https://discuss.elastic.co/t/abrir-por-iframe/294930)

<div class="topic-metadata">

**Author:** [@leandrofakada](https://discuss.elastic.co/u/leandrofakada)\
**Replies:** 1\
**Last updated:** [January 20, 2022, 11:18am UTC](https://discuss.elastic.co/t/abrir-por-iframe/294930 "2022-01-20T11:18:46Z")

</div>

Atualizei para a última versão do Kibana e agora não consigo mais logar adicionado os dashboards por iframe. Alguém tem alguma ideia de qual opção posso ter esquecido de habilitar?

---

## [Updating a mapping in existing indicese](https://discuss.elastic.co/t/updating-a-mapping-in-existing-indicese/294918)

<div class="topic-metadata">

**Author:** [@pruttle](https://discuss.elastic.co/u/pruttle)\
**Replies:** 6\
**Last updated:** [January 20, 2022, 11:14am UTC](https://discuss.elastic.co/t/updating-a-mapping-in-existing-indicese/294918 "2022-01-20T11:14:42Z")

</div>

Hi I have added a new mapping to an Index Template and it is updating new Indices as they are created. I need to update all the pre-existing retrospective Indices with the new mapping. What is the best approach to this…

---

## [Logstash Filter help - Newbie question](https://discuss.elastic.co/t/logstash-filter-help-newbie-question/294580)

<div class="topic-metadata">

**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\
**Replies:** 5\
**Last updated:** [January 20, 2022, 11:05am UTC](https://discuss.elastic.co/t/logstash-filter-help-newbie-question/294580 "2022-01-20T11:05:18Z")

</div>

Hi All, Sorry I'm just a bit lost on where to start with this one, I was hoping someone would be kind enough to point me in the right direction please? I have a log that looks like this {"host":"192.168.221.11","messa…

---

## [JSON Filter Errors help](https://discuss.elastic.co/t/json-filter-errors-help/294830)

<div class="topic-metadata">

**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\
**Replies:** 10\
**Last updated:** [January 20, 2022, 11:03am UTC](https://discuss.elastic.co/t/json-filter-errors-help/294830 "2022-01-20T11:03:38Z")

</div>

Hi All, I'm trying to run the JSON filter on this input with continual errors. Any suggestions on how i do it please? Thanks {"host":"192.168.221.11","message":"HAL GetChassisSlot called from LACPD\_USER(timeout=3000 …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=725)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=727)
