# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=746 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 747 --- ## [Logstash - grokparsefailure](https://discuss.elastic.co/t/logstash-grokparsefailure/292705)
**Author:** [@hassen\_k](https://discuss.elastic.co/u/hassen_k)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 6:27pm UTC](https://discuss.elastic.co/t/logstash-grokparsefailure/292705 "2021-12-22T18:27:31Z")
Hi, Logstash version 7.16.2 I am trying to parse the following logs: amAuthWindowsDesktopSSO:12/22/2021 03:55:44:349 PM CET: Thread\[http-nio-8080-exec-3,5,main\]: TransactionId\[b742688f-6089-41c4-925d-ba08dce4d7b7-1491… --- ## [Kibana 7.16 External Plugin creation](https://discuss.elastic.co/t/kibana-7-16-external-plugin-creation/292733)
**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 6:08pm UTC](https://discuss.elastic.co/t/kibana-7-16-external-plugin-creation/292733 "2021-12-22T18:08:27Z")
I'm trying to create an external plugin using Kibana 7.16. I've done this with 7.5 and 7.10. I'm hoping I can move our plugins over to 7.16. I ran the kibana generate\_plugin script and created a plugin with a UI componen… --- ## [Cluster re-balancing issue](https://discuss.elastic.co/t/cluster-re-balancing-issue/292685)
**Author:** [@arunpmohan](https://discuss.elastic.co/u/arunpmohan)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 5:34pm UTC](https://discuss.elastic.co/t/cluster-re-balancing-issue/292685 "2021-12-22T17:34:31Z")
We have a cluster with zoning enabled. Zone-A has 15 hot nodes+10 warm nodes and Zone-B has 14 hot nodes + 10 warm nodes (one node was taken out due to repeated issues). The cluster was doing well until the last we… --- ## [Data Analysis with Kibana (On-Demand): new lab machine](https://discuss.elastic.co/t/data-analysis-with-kibana-on-demand-new-lab-machine/292728)
**Author:** [@rinnes](https://discuss.elastic.co/u/rinnes)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 5:30pm UTC](https://discuss.elastic.co/t/data-analysis-with-kibana-on-demand-new-lab-machine/292728 "2021-12-22T17:30:28Z")
Hello, I'm still working through the course and my lab machine has shutdown. Is it possible to have a new lab machine started so I can finish the lab exercises? v/r, Ken --- ## [One or more required cgroup files or directories not found: /proc/self/cgroup, /sys/fs/cgroup/cpuacct, /sys/fs/cgroup/cpu](https://discuss.elastic.co/t/one-or-more-required-cgroup-files-or-directories-not-found-proc-self-cgroup-sys-fs-cgroup-cpuacct-sys-fs-cgroup-cpu/292689)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 6\ **Last updated:** [December 22, 2021, 5:21pm UTC](https://discuss.elastic.co/t/one-or-more-required-cgroup-files-or-directories-not-found-proc-self-cgroup-sys-fs-cgroup-cpuacct-sys-fs-cgroup-cpu/292689 "2021-12-22T17:21:14Z")
Hi Guys, I have logstash running on a windows machine. My inputs and parsers are set up correctly and everything works fine. The only issue I have - when I start the logstash process, it wont ingest files, instead it… --- ## [Elasticsearch 7.16.2 fails to start as service under windows server 2019](https://discuss.elastic.co/t/elasticsearch-7-16-2-fails-to-start-as-service-under-windows-server-2019/292708)
**Author:** [@yankun0567](https://discuss.elastic.co/u/yankun0567)\ **Replies:** 6\ **Last updated:** [December 22, 2021, 4:40pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-2-fails-to-start-as-service-under-windows-server-2019/292708 "2021-12-22T16:40:59Z")
Hi, I've just downloaded Elasticsearch 7.16.2 and installed it as a service under Windows Server 2019. Previously I had 7.10.2. running without any issues. If I'm trying to start the service, it fails with following er… --- ## [Failed test QueueTest](https://discuss.elastic.co/t/failed-test-queuetest/292719)
**Author:** [@SirBouBou](https://discuss.elastic.co/u/SirBouBou)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 4:23pm UTC](https://discuss.elastic.co/t/failed-test-queuetest/292719 "2021-12-22T16:23:24Z")
Hi, I'm trying to discover Logstash and its uses to be able to contribute and help the community but I have a problem. When launching a ./gradlew test I have a timeout error for the concurrentWritesTest in the QueueTest… --- ## [Problem importing saved\_objects using api](https://discuss.elastic.co/t/problem-importing-saved-objects-using-api/292304)
**Author:** [@fkoene](https://discuss.elastic.co/u/fkoene)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 4:18pm UTC](https://discuss.elastic.co/t/problem-importing-saved-objects-using-api/292304 "2021-12-22T16:18:53Z")
I want to export saved\_objects and use the output file to import the objects in another space. The export goes well, the file can be imported by hand in the ELK GUI, but when I try importing it using the just exported f… --- ## [Uptime visualization only down monitors](https://discuss.elastic.co/t/uptime-visualization-only-down-monitors/292632)
**Author:** [@Rajesh\_Rai](https://discuss.elastic.co/u/Rajesh_Rai)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 4:16pm UTC](https://discuss.elastic.co/t/uptime-visualization-only-down-monitors/292632 "2021-12-22T16:16:11Z")
any idea how we can visualize uptime down monitors details only(not up monitors) --- ## [Index routing allocation does appear to move shards over to specified node](https://discuss.elastic.co/t/index-routing-allocation-does-appear-to-move-shards-over-to-specified-node/292682)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 6\ **Last updated:** [December 22, 2021, 3:34pm UTC](https://discuss.elastic.co/t/index-routing-allocation-does-appear-to-move-shards-over-to-specified-node/292682 "2021-12-22T15:34:33Z")
I am trying to separate indexes so that they are assigned to specific nodes. I have been following this documentation in order to achieve that. I have an Elasticsearch cluster with 3 nodes. Each node has been given a … --- ## [SNMP input with MIB](https://discuss.elastic.co/t/snmp-input-with-mib/292673)
**Author:** [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 3:29pm UTC](https://discuss.elastic.co/t/snmp-input-with-mib/292673 "2021-12-22T15:29:37Z")
"Hello. I´m trying to setup an snmp polling function in our Elasticsearch with Logstash. Today it is an "Proof of Concept" with only one 4G router from the vendor named Advantech. I have followed the instructions foun… --- ## [Logstash Internal API server error](https://discuss.elastic.co/t/logstash-internal-api-server-error/292707)
**Author:** [@Disha\_Bodade](https://discuss.elastic.co/u/Disha_Bodade)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 3:27pm UTC](https://discuss.elastic.co/t/logstash-internal-api-server-error/292707 "2021-12-22T15:27:40Z")
I am receiving error in logstash after upgraded from 7.11.x to 7.16.1 this log is not frequent, I feel some action is generating that log but I am not sure which action is generating this error, My pipelines are proper… --- ## [Calculate time difference between two log lines - Logstash](https://discuss.elastic.co/t/calculate-time-difference-between-two-log-lines-logstash/292284)
**Author:** [@giancringo](https://discuss.elastic.co/u/giancringo)\ **Replies:** 4\ **Last updated:** [December 22, 2021, 2:56pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-two-log-lines-logstash/292284 "2021-12-22T14:56:34Z")
Hello, I'm looking for a solution to calculate the difference between two time on two different log lines as below: 2020-06-11 15:31:22,817 \[http-8080-0\] INFO it.example.sign.sign.SignTool - \[TYPE\] trackingID: x12e65… --- ## [Query suggestion performance time](https://discuss.elastic.co/t/query-suggestion-performance-time/292692)
**Author:** [@miki\_haiat](https://discuss.elastic.co/u/miki_haiat)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 2:55pm UTC](https://discuss.elastic.co/t/query-suggestion-performance-time/292692 "2021-12-22T14:55:10Z")
I have a meta engine that contains 1.8 M docs im assuming that the size of the engine is around 1.5GB. i tried to tune as much as i can via UI result setting and adding gzip compression. The best result i got w… --- ## [Delete and recreate index in elasticsearch](https://discuss.elastic.co/t/delete-and-recreate-index-in-elasticsearch/292651)
**Author:** [@Vikrant1](https://discuss.elastic.co/u/Vikrant1)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 2:17pm UTC](https://discuss.elastic.co/t/delete-and-recreate-index-in-elasticsearch/292651 "2021-12-22T14:17:51Z")
Hi All, Thanks for taking your time to read this query - I have to delete the existing index and the need to create same Index in Elasticsearch using the logstash config file before data loading start (reading from or… --- ## [Patch log4j vulnerability on Windows](https://discuss.elastic.co/t/patch-log4j-vulnerability-on-windows/292679)
**Author:** [@Erni](https://discuss.elastic.co/u/Erni)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 2:15pm UTC](https://discuss.elastic.co/t/patch-log4j-vulnerability-on-windows/292679 "2021-12-22T14:15:09Z")
Hi, I was following instructions from: Elasticsearch 5.0.0-5.6.10 and 6.0.0-6.3.2: Log4j CVE-2021-44228, CVE-2021-45046 remediation But changed it to powershell commands as I am runnng elasticsearch on Windows: Copy-I… --- ## [How to parse nested json events](https://discuss.elastic.co/t/how-to-parse-nested-json-events/292039)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 2:02pm UTC](https://discuss.elastic.co/t/how-to-parse-nested-json-events/292039 "2021-12-22T14:02:10Z")
Hello! I have nested json objects like this : { "\_index": "impe\_logs-2021.11.19-1", "\_type": "\_doc", "\_id": "tyu", "\_version": 1, "\_score": null, "\_source": { "port": 54640, "impe": { "abp": {… --- ## [Logstash JDBC input metadata is overriding](https://discuss.elastic.co/t/logstash-jdbc-input-metadata-is-overriding/292691)
**Author:** [@Vinayak\_G](https://discuss.elastic.co/u/Vinayak_G)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 1:47pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-metadata-is-overriding/292691 "2021-12-22T13:47:41Z")
Hey Everybody I am new to ELK I was running logstash 6.8.3 on my machine, I wanted to upgrade to 6.8.21, so I created a new machine and installed logstash 6.8.21, then I pushed my pipeline's and metadata files so that … --- ## [Search.max\_buckets limit error on 7.6.0 even after setting to 10000](https://discuss.elastic.co/t/search-max-buckets-limit-error-on-7-6-0-even-after-setting-to-10000/292688)
**Author:** [@Nipun\_Tulsyan](https://discuss.elastic.co/u/Nipun_Tulsyan)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 1:36pm UTC](https://discuss.elastic.co/t/search-max-buckets-limit-error-on-7-6-0-even-after-setting-to-10000/292688 "2021-12-22T13:36:19Z")
I am using a simple query with aggregation. GET testIndex/\_search { "size": 0, "aggs": { "Name1": { "terms": { "field": "field1.keyword", "size": 10000 } }, "Name2":{ "… --- ## [Using short URL human-readable slugs](https://discuss.elastic.co/t/using-short-url-human-readable-slugs/292649)
**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 1:26pm UTC](https://discuss.elastic.co/t/using-short-url-human-readable-slugs/292649 "2021-12-22T13:26:19Z")
For regular short URLs I can browse to /goto/\ to have Kibana expand the short URL for me, but I can't find any information on how to use the human-readable slugs that the new API can generate, e.g. witty-de… --- ## [European number format not recognised](https://discuss.elastic.co/t/european-number-format-not-recognised/292606)
**Author:** [@mpmass](https://discuss.elastic.co/u/mpmass)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 1:12pm UTC](https://discuss.elastic.co/t/european-number-format-not-recognised/292606 "2021-12-22T13:12:32Z")
Hi, I have just started exploring Elastic and Kibana. When I am trying to upload a .csv file, the type and format isn't recognised properly. It is seen as a string instead of a double. The format of the number of the fi… --- ## [ERROR logstash.inputs.jdbc](https://discuss.elastic.co/t/error-logstash-inputs-jdbc/292610)
**Author:** [@Gabriel\_Munoz](https://discuss.elastic.co/u/Gabriel_Munoz)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 12:21pm UTC](https://discuss.elastic.co/t/error-logstash-inputs-jdbc/292610 "2021-12-22T12:21:58Z")
El controlador no pudo establecer una conexión segura con SQL Server con el cifrado de Capa de sockets seguros (SSL). Error: "No appropriate protocol (protocol is disabled or cipher suites are inappropriate) \[2021-12-21… --- ## [При прохождении beats pipeline теряется часть полей](https://discuss.elastic.co/t/beats-pipeline/292676)
**Author:** [@roonick](https://discuss.elastic.co/u/roonick)\ **Replies:** 0\ **Last updated:** [December 22, 2021, 12:09pm UTC](https://discuss.elastic.co/t/beats-pipeline/292676 "2021-12-22T12:09:46Z")
Здравствуйте! Я только осваиваю ELK стэк. Была поставлена задача создать дополнительное поле в документах, получаемых из модуля filebeat nginx, обрезав ip адрес до первых трёх октетов. Для этого направил документы в от… --- ## [Aggregation issue after upgrading elastic 7.16.2](https://discuss.elastic.co/t/aggregation-issue-after-upgrading-elastic-7-16-2/292645)
**Author:** [@lalchand\_rajak](https://discuss.elastic.co/u/lalchand_rajak)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 11:26am UTC](https://discuss.elastic.co/t/aggregation-issue-after-upgrading-elastic-7-16-2/292645 "2021-12-22T11:26:34Z")
unable to do the aggregation in Kibana for entire time range after the upgrading to new version i.e 7.16.2 . but when i am changing to last value it's working. --- ## [Filters in Visualization](https://discuss.elastic.co/t/filters-in-visualization/292630)
**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 11:14am UTC](https://discuss.elastic.co/t/filters-in-visualization/292630 "2021-12-22T11:14:21Z")
Hi I am new to kibana dashboard working on a small task where i am getting logs data from logstash to kibana dashboard for understanding the logs .here in kibana dashboard were we can create our own visualization with e… --- ## [Logstash S3 output plugin, how do we get logging?](https://discuss.elastic.co/t/logstash-s3-output-plugin-how-do-we-get-logging/292615)
**Author:** [@Colin\_K](https://discuss.elastic.co/u/Colin_K)\ **Replies:** 6\ **Last updated:** [December 22, 2021, 11:07am UTC](https://discuss.elastic.co/t/logstash-s3-output-plugin-how-do-we-get-logging/292615 "2021-12-22T11:07:16Z")
When I use the file output plugin I see INFO log lines that we are opening and closing a file to write to. But when using the s3 output plugin I get writes but no logging. log4j2.properties status = debug name = Logst… --- ## [Mapping conflict but no way to resolve anymore](https://discuss.elastic.co/t/mapping-conflict-but-no-way-to-resolve-anymore/292617)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 10:56am UTC](https://discuss.elastic.co/t/mapping-conflict-but-no-way-to-resolve-anymore/292617 "2021-12-22T10:56:01Z")
In the past, you could click on the conflict field and see which indices are causing the conflict but for some reason you have removed that functionality. Is there some way to see which index is causing the conflict? --- ## [Elasticsearch clusterstate data](https://discuss.elastic.co/t/elasticsearch-clusterstate-data/292392)
**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\ **Replies:** 11\ **Last updated:** [December 22, 2021, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-clusterstate-data/292392 "2021-12-22T08:22:03Z")
hello,I have a question need to have a answer，which is if my master es nodes have multi datapaths,the clusterstate data will be saved Multiple and which is Exactly the same --- ## [How to process csv data from multiple folders using file beat and create separate index and move it to elastic search](https://discuss.elastic.co/t/how-to-process-csv-data-from-multiple-folders-using-file-beat-and-create-separate-index-and-move-it-to-elastic-search/292641)
**Author:** [@data123](https://discuss.elastic.co/u/data123)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 6:52am UTC](https://discuss.elastic.co/t/how-to-process-csv-data-from-multiple-folders-using-file-beat-and-create-separate-index-and-move-it-to-elastic-search/292641 "2021-12-22T06:52:49Z")
Hi Team, Our requirement is like this... we have log files stored in different folders under master folder as csv format. we want to send this to Elasticsearch using file beats as a part of automation. we cant find s… --- ## [Urgent - Incomplete fix for Apache Log4j vulnerability v2.15.0](https://discuss.elastic.co/t/urgent-incomplete-fix-for-apache-log4j-vulnerability-v2-15-0/291893)
**Author:** [@ppafford](https://discuss.elastic.co/u/ppafford)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 4:58am UTC](https://discuss.elastic.co/t/urgent-incomplete-fix-for-apache-log4j-vulnerability-v2-15-0/291893 "2021-12-22T04:58:48Z")
Looks like there is another issue and another fix And the release of Logstash 7.16.1 Release Notes | Logstash Reference \[7.16\] | Elastic has the incomplete fix. When can this be addressed? [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=745) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=747)