# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=735

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 736

---

## [Importing file to an existing index](https://discuss.elastic.co/t/importing-file-to-an-existing-index/293932)

<div class="topic-metadata">

**Author:** [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\
**Replies:** 4\
**Last updated:** [January 11, 2022, 3:11pm UTC](https://discuss.elastic.co/t/importing-file-to-an-existing-index/293932 "2022-01-11T15:11:09Z")

</div>

I wanted to update my index by importing a file via Logstash. I used the same logstash file (the input file was updated with new records) cause I thought it's gonna overwrite the existing index. I tested this on a differ…

---

## [Json nested field](https://discuss.elastic.co/t/json-nested-field/293925)

<div class="topic-metadata">

**Author:** [@kvmuralidhar](https://discuss.elastic.co/u/kvmuralidhar)\
**Replies:** 2\
**Last updated:** [January 11, 2022, 3:02pm UTC](https://discuss.elastic.co/t/json-nested-field/293925 "2022-01-11T15:02:30Z")

</div>

Hi All, I have a field with value as a json object as follows messageParts="\[{\\"disposition\\":\\"inline\\",\\"sha256\\":\\"f3c958fe6406140b13360a42b3237477dc5bc525f3858f64cca45bf2d02fc771\\",\\"md5\\":\\"c87f14af3c845fc6d8b84b1…

---

## [Can i install two heartbeat on two servers and connet them to only one elasticsearh and kibana](https://discuss.elastic.co/t/can-i-install-two-heartbeat-on-two-servers-and-connet-them-to-only-one-elasticsearh-and-kibana/293819)

<div class="topic-metadata">

**Author:** [@amr\_ibrahim](https://discuss.elastic.co/u/amr_ibrahim)\
**Replies:** 2\
**Last updated:** [January 11, 2022, 2:57pm UTC](https://discuss.elastic.co/t/can-i-install-two-heartbeat-on-two-servers-and-connet-them-to-only-one-elasticsearh-and-kibana/293819 "2022-01-11T14:57:03Z")

</div>

Hello, i have old heartbeat connect with Elasticsearch and kibana and i want to create another heartbeat and connect it to same uptime is this possbile and how can we configure index and differentiate between them Than…

---

## [Fortigate Firewall Logs to Elasticsearch](https://discuss.elastic.co/t/fortigate-firewall-logs-to-elasticsearch/294041)

<div class="topic-metadata">

**Author:** [@yogicd](https://discuss.elastic.co/u/yogicd)\
**Replies:** 2\
**Last updated:** [January 11, 2022, 2:42pm UTC](https://discuss.elastic.co/t/fortigate-firewall-logs-to-elasticsearch/294041 "2022-01-11T14:42:53Z")

</div>

Hi Team, I am trying to get the Fortigate firewall logs to elasticsearch via logstash but not able to get the data to elasticsearch, But i can see the data coming via tcpdump udp port 514. and my logstash config as…

---

## [Problems deploying to azure](https://discuss.elastic.co/t/problems-deploying-to-azure/293954)

<div class="topic-metadata">

**Author:** [@Jorgenv](https://discuss.elastic.co/u/Jorgenv)\
**Replies:** 2\
**Last updated:** [January 11, 2022, 2:33pm UTC](https://discuss.elastic.co/t/problems-deploying-to-azure/293954 "2022-01-11T14:33:00Z")

</div>

I'm trying to deploy a test environment on azure and I'm running into all kinds of problems. I first had issues passing self-signed certificates for the application gateway and kibana, but I found some hacky way around t…

---

## [Logstash Input adds data stamp and host](https://discuss.elastic.co/t/logstash-input-adds-data-stamp-and-host/294021)

<div class="topic-metadata">

**Author:** [@pruttle](https://discuss.elastic.co/u/pruttle)\
**Replies:** 7\
**Last updated:** [January 11, 2022, 2:23pm UTC](https://discuss.elastic.co/t/logstash-input-adds-data-stamp-and-host/294021 "2022-01-11T14:23:17Z")

</div>

I am using Logstash to receive data from a syslog server and push it into different Kafka topics. Logstash appears to add a data/time stamp and hostname at that start of the raw event. Is there a way stop this happening?…

---

## [Elasticsearch 7.16 failed install on Unbuntu 20.04 - cannot execute binary file](https://discuss.elastic.co/t/elasticsearch-7-16-failed-install-on-unbuntu-20-04-cannot-execute-binary-file/293777)

<div class="topic-metadata">

**Author:** [@Winston\_Ferguson](https://discuss.elastic.co/u/Winston_Ferguson)\
**Replies:** 3\
**Last updated:** [January 11, 2022, 1:54pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-failed-install-on-unbuntu-20-04-cannot-execute-binary-file/293777 "2022-01-11T13:54:49Z")

</div>

Hi, I'm unable to solve my issue installing Elasticsearch on my new Windows 11 machine running Ubuntu 20.04 (via Windows Subsystem for Linux). The log received is: Reading package lists... Done Building dependency tree…

---

## [Parsing log date into timestamp](https://discuss.elastic.co/t/parsing-log-date-into-timestamp/293966)

<div class="topic-metadata">

**Author:** [@phung025](https://discuss.elastic.co/u/phung025)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 1:31pm UTC](https://discuss.elastic.co/t/parsing-log-date-into-timestamp/293966 "2022-01-11T13:31:07Z")

</div>

In the JSON-format logs sent from filebeat to logstash, I have a field named "time". In the logstash.conf, I mutate it to create a field in the kibana log called rawDate logstash.conf: mutate { add\_field =\> {"rawDa…

---

## [Question about data types and adding new data types](https://discuss.elastic.co/t/question-about-data-types-and-adding-new-data-types/293928)

<div class="topic-metadata">

**Author:** [@Miguel\_Lopez1](https://discuss.elastic.co/u/Miguel_Lopez1)\
**Replies:** 3\
**Last updated:** [January 11, 2022, 12:08pm UTC](https://discuss.elastic.co/t/question-about-data-types-and-adding-new-data-types/293928 "2022-01-11T12:08:31Z")

</div>

Hi, As part of a masters degree assignment I need to address some questions about the Elasticsearch to the developers. The question is: I saw that Elasticsearch is capable of working with a variety of data types (for i…

---

## [How to parse suricata rules with logstash](https://discuss.elastic.co/t/how-to-parse-suricata-rules-with-logstash/292548)

<div class="topic-metadata">

**Author:** [@karpaz](https://discuss.elastic.co/u/karpaz)\
**Replies:** 7\
**Last updated:** [January 11, 2022, 11:58am UTC](https://discuss.elastic.co/t/how-to-parse-suricata-rules-with-logstash/292548 "2022-01-11T11:58:54Z")

</div>

Hi, guys, I've been solving a "parsing" problem for a while now. First I tried it with GROK, then with KV filter. I have not been successful with either method. So I am turning to you for help to see if anyone experien…

---

## [Add link on row table to external application](https://discuss.elastic.co/t/add-link-on-row-table-to-external-application/293996)

<div class="topic-metadata">

**Author:** [@karatsuba](https://discuss.elastic.co/u/karatsuba)\
**Replies:** 2\
**Last updated:** [January 11, 2022, 11:17am UTC](https://discuss.elastic.co/t/add-link-on-row-table-to-external-application/293996 "2022-01-11T11:17:35Z")

</div>

Hello, I am trying to display my string field in a row table as a link to external application, i am using URL format for string in index patterns, but when I click on the link "myLink" it's opening it in new window and…

---

## [Unable to access kibana after upgrade 7.13.2 -\> 7.16.2](https://discuss.elastic.co/t/unable-to-access-kibana-after-upgrade-7-13-2-7-16-2/294011)

<div class="topic-metadata">

**Author:** [@mihalikv](https://discuss.elastic.co/u/mihalikv)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 10:56am UTC](https://discuss.elastic.co/t/unable-to-access-kibana-after-upgrade-7-13-2-7-16-2/294011 "2022-01-11T10:56:51Z")

</div>

Hello, I have upgraded kibana from 7.13.2 to 7.16.2. No plugins installed. Environment: Error: There was an error in logs: {"type":"log","@timestamp":"2022-01-11T09:22:44+00:00","tags":\["error","plugins","ev…

---

## [Using S3 as storage for elasticsearch](https://discuss.elastic.co/t/using-s3-as-storage-for-elasticsearch/294007)

<div class="topic-metadata">

**Author:** [@Yang\_Yang2](https://discuss.elastic.co/u/Yang_Yang2)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 10:35am UTC](https://discuss.elastic.co/t/using-s3-as-storage-for-elasticsearch/294007 "2022-01-11T10:35:26Z")

</div>

Is it possible to use the S3 as a data storage for Elasticsearch?

---

## [Deprecation logs not being logged to file in Elasticsearch 7.15](https://discuss.elastic.co/t/deprecation-logs-not-being-logged-to-file-in-elasticsearch-7-15/294016)

<div class="topic-metadata">

**Author:** [@Suraj\_Kumar4](https://discuss.elastic.co/u/Suraj_Kumar4)\
**Replies:** 0\
**Last updated:** [January 11, 2022, 10:18am UTC](https://discuss.elastic.co/t/deprecation-logs-not-being-logged-to-file-in-elasticsearch-7-15/294016 "2022-01-11T10:18:24Z")

</div>

Snippet of the log4j2.properties file being used with ES 7.15.2 status = error appender.console.type = Console appender.console.name = console appender.console.layout.type = PatternLayout appender.console.layout.patter…

---

## [Logstasch pipeline filter](https://discuss.elastic.co/t/logstasch-pipeline-filter/294009)

<div class="topic-metadata">

**Author:** [@max\_cyril](https://discuss.elastic.co/u/max_cyril)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 10:13am UTC](https://discuss.elastic.co/t/logstasch-pipeline-filter/294009 "2022-01-11T10:13:14Z")

</div>

Hi, I am new to ELK and struggling to write my first logstash pipeline. Can anyone help me to write the filter section? Thanks in advance. i want to filter and only output the maximum of completion per users fo…

---

## [Max score multi match query](https://discuss.elastic.co/t/max-score-multi-match-query/294014)

<div class="topic-metadata">

**Author:** [@Divy\_Garg](https://discuss.elastic.co/u/Divy_Garg)\
**Replies:** 0\
**Last updated:** [January 11, 2022, 10:08am UTC](https://discuss.elastic.co/t/max-score-multi-match-query/294014 "2022-01-11T10:08:16Z")

</div>

Hi, I am using multi match query of Elasticsearch. Need to understand what is the maximum \_score that multi match query can have. Please help with this. { "query": { "multi\_match" : { "query": "john wi…

---

## [Elastic service stopped automatically](https://discuss.elastic.co/t/elastic-service-stopped-automatically/293252)

<div class="topic-metadata">

**Author:** [@sandesh0209](https://discuss.elastic.co/u/sandesh0209)\
**Replies:** 4\
**Last updated:** [January 11, 2022, 9:57am UTC](https://discuss.elastic.co/t/elastic-service-stopped-automatically/293252 "2022-01-11T09:57:58Z")

</div>

Faulting application name: Elasticsearch.exe, version: 7.10.1.0, time stamp: 0x5fcb0351 Faulting module name: KERNELBASE.dll, version: 10.0.14393.4770, time stamp: 0x6180883c Exception code: 0xe0434352 Fault offset: 0…

---

## [How to loop through array in Logstash?](https://discuss.elastic.co/t/how-to-loop-through-array-in-logstash/291747)

<div class="topic-metadata">

**Author:** [@rijo\_joseph](https://discuss.elastic.co/u/rijo_joseph)\
**Replies:** 4\
**Last updated:** [January 11, 2022, 9:15am UTC](https://discuss.elastic.co/t/how-to-loop-through-array-in-logstash/291747 "2022-01-11T09:15:10Z")

</div>

{ "modifiedTime": "2021-12-13T06:47:11.138Z", "task\_owner\_name": null, "contents": \[ { "eligible": false, "rawResponse": "454536251", "id": 868286622 }, { "eligible": false, …

---

## [Delete index pattern](https://discuss.elastic.co/t/delete-index-pattern/293987)

<div class="topic-metadata">

**Author:** [@sunny3794.ad](https://discuss.elastic.co/u/sunny3794.ad)\
**Replies:** 2\
**Last updated:** [January 11, 2022, 8:57am UTC](https://discuss.elastic.co/t/delete-index-pattern/293987 "2022-01-11T08:57:33Z")

</div>

I am trying to automate the deletion of index patterns whenever the index is deleted. For this I am using the requests module in Python to send the delete request to the Kibana API enpoint. However, the request fails whe…

---

## [Can't start logstash after installtion because java](https://discuss.elastic.co/t/cant-start-logstash-after-installtion-because-java/293993)

<div class="topic-metadata">

**Author:** [@aviad.co1](https://discuss.elastic.co/u/aviad.co1)\
**Replies:** 0\
**Last updated:** [January 11, 2022, 8:49am UTC](https://discuss.elastic.co/t/cant-start-logstash-after-installtion-because-java/293993 "2022-01-11T08:49:51Z")

</div>

I install this java version - java -version : openjdk version "11.0.13" 2021-10-19. OpenJDK Runtime Environment (build 11.0.13+8-Ubuntu-0ubuntu1.20.04). OpenJDK 64-Bit Server VM (build 11.0.13+8-Ubuntu-0ubuntu1.20.04…

---

## [12K fields in the mapping](https://discuss.elastic.co/t/12k-fields-in-the-mapping/293340)

<div class="topic-metadata">

**Author:** [@orips](https://discuss.elastic.co/u/orips)\
**Replies:** 6\
**Last updated:** [January 11, 2022, 8:35am UTC](https://discuss.elastic.co/t/12k-fields-in-the-mapping/293340 "2022-01-11T08:35:28Z")

</div>

Hi, We're approaching 12K fields in our mapping. Our cluster does not have many documents (it's about 1 billion, and it's doc one per user, so it's not growing very rapidly). I'd like to know: how much further can we g…

---

## [How to implement ElastiFlow on CentOS 7](https://discuss.elastic.co/t/how-to-implement-elastiflow-on-centos-7/293982)

<div class="topic-metadata">

**Author:** [@jeffrey0329](https://discuss.elastic.co/u/jeffrey0329)\
**Replies:** 0\
**Last updated:** [January 11, 2022, 7:42am UTC](https://discuss.elastic.co/t/how-to-implement-elastiflow-on-centos-7/293982 "2022-01-11T07:42:16Z")

</div>

I'm new to using ElasticStack, and I'm trying to use ElastiFlow on CentOS7. I've looked into the ElastiFlow official website, but they don't specify support and install guideline on CentOS. Can someone advise or guide me…

---

## [What are the permissions necessary to import data in data visualizer? v7.12](https://discuss.elastic.co/t/what-are-the-permissions-necessary-to-import-data-in-data-visualizer-v7-12/293901)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 7:58am UTC](https://discuss.elastic.co/t/what-are-the-permissions-necessary-to-import-data-in-data-visualizer-v7-12/293901 "2022-01-11T07:58:35Z")

</div>

Hi Im getting this import persmissions error when I try to upload a file onto elastic the user has his own space and has this privigeles: machine\_learning\_user, ingest\_admin, machine\_learning\_admin the custom rol ha…

---

## [Receiving data to the ELK database using logstash](https://discuss.elastic.co/t/receiving-data-to-the-elk-database-using-logstash/292547)

<div class="topic-metadata">

**Author:** [@San9](https://discuss.elastic.co/u/San9)\
**Replies:** 5\
**Last updated:** [January 11, 2022, 7:56am UTC](https://discuss.elastic.co/t/receiving-data-to-the-elk-database-using-logstash/292547 "2022-01-11T07:56:20Z")

</div>

I have a problem with accessing the ELK database and receiving a specific field with a token to form a further request to connect to the o365 api. I can't get data from this particular field. scheme, I connect to the EL…

---

## [Use other query next to suggester](https://discuss.elastic.co/t/use-other-query-next-to-suggester/293921)

<div class="topic-metadata">

**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\
**Replies:** 2\
**Last updated:** [January 11, 2022, 5:13am UTC](https://discuss.elastic.co/t/use-other-query-next-to-suggester/293921 "2022-01-11T05:13:22Z")

</div>

How to use other query next to suggester that affects the score of the data obtained from suggester For example, I want to search for products that are active ??

---

## [Grok Pattern not working](https://discuss.elastic.co/t/grok-pattern-not-working/293159)

<div class="topic-metadata">

**Author:** [@Pranav\_M](https://discuss.elastic.co/u/Pranav_M)\
**Replies:** 5\
**Last updated:** [January 11, 2022, 4:50am UTC](https://discuss.elastic.co/t/grok-pattern-not-working/293159 "2022-01-11T04:50:00Z")

</div>

Hey Community, Received packet: Type = N5abcde8AbcAbcde9AbcdAbcde15AbcdefghAbcdefA, xx = 95, xxx = 441, xxxXxo = 2, xXxxXxx = 1, xxxx = 9 accepted. The above line is a message from my log and I want to seperate each da…

---

## [Daily indices or monthly indices for storing data?](https://discuss.elastic.co/t/daily-indices-or-monthly-indices-for-storing-data/293967)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 0\
**Last updated:** [January 11, 2022, 4:37am UTC](https://discuss.elastic.co/t/daily-indices-or-monthly-indices-for-storing-data/293967 "2022-01-11T04:37:01Z")

</div>

Hi all I have a question regarding the storage comparision between having daily indices or monthly indices. The question is very simple: is the daily indices tooks more storage space than the monthly indices. Somehow i…

---

## [Latitude and Longitude Error in logstash?](https://discuss.elastic.co/t/latitude-and-longitude-error-in-logstash/293855)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 11\
**Last updated:** [January 11, 2022, 4:35am UTC](https://discuss.elastic.co/t/latitude-and-longitude-error-in-logstash/293855 "2022-01-11T04:35:23Z")

</div>

Hello Everyone, I am trying to convert PostalCode to lat and long, I have done this task but Now I am confuse how to convert it into geopoint field I have tried in logstash but no success so for, getting error. My con…

---

## [ElasticSearch for Temporal (version, incident\_raised\_date, auto\_create\_index)](https://discuss.elastic.co/t/elasticsearch-for-temporal-version-incident-raised-date-auto-create-index/293638)

<div class="topic-metadata">

**Author:** [@ridwan.santoso](https://discuss.elastic.co/u/ridwan.santoso)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 12:41am UTC](https://discuss.elastic.co/t/elasticsearch-for-temporal-version-incident-raised-date-auto-create-index/293638 "2022-01-11T00:41:29Z")

</div>

Hi, I need to use Elasticsearch for Temporal and have couple question: Will Elasticsearch 7.6 works for Temporal 1.13? If not then what is recommended version? I am using Elasticsearch 7.6 for Temporal 1.13 currently …

---

## [Only able to see 100 index in Create index pattern](https://discuss.elastic.co/t/only-able-to-see-100-index-in-create-index-pattern/293854)

<div class="topic-metadata">

**Author:** [@faisalshah20](https://discuss.elastic.co/u/faisalshah20)\
**Replies:** 1\
**Last updated:** [January 11, 2022, 12:39am UTC](https://discuss.elastic.co/t/only-able-to-see-100-index-in-create-index-pattern/293854 "2022-01-11T00:39:37Z")

</div>

Hi Team i am running into problem i am only able to see 100 index in create index pattern. My scenario is to keep last 1 months logs in ELK. But when the 100 index are in create index pattern now new index pattern gets c…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=734)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=736)
