# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=751 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 752 --- ## [Multiple values in field json parser](https://discuss.elastic.co/t/multiple-values-in-field-json-parser/290530)
**Author:** [@svenvg93](https://discuss.elastic.co/u/svenvg93)\ **Replies:** 3\ **Last updated:** [December 16, 2021, 4:12pm UTC](https://discuss.elastic.co/t/multiple-values-in-field-json-parser/290530 "2021-12-16T16:12:17Z")
In order to learn more about ELK, I try to combine it with fun stuff to build :slight\_smile: . On of the things I try to make is dashboard with Formula 1 data. Im able to get the data in Elasticsearch by curl an json a… --- ## [Logstash substring a field using position getting error](https://discuss.elastic.co/t/logstash-substring-a-field-using-position-getting-error/292157)
**Author:** [@aeoker](https://discuss.elastic.co/u/aeoker)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 4:10pm UTC](https://discuss.elastic.co/t/logstash-substring-a-field-using-position-getting-error/292157 "2021-12-16T16:10:13Z")
Hello Everyone, I am getting below error while trying to produce new event from existing one as follows, any help? ruby { code =\> "event\['new\_field'\] = event.get\['dummy'\]\[1..4\]" } Error: Ruby exception occurred:… --- ## [Ask for a help. Does the logstash output s3 plugin support getting data from Kafka?](https://discuss.elastic.co/t/ask-for-a-help-does-the-logstash-output-s3-plugin-support-getting-data-from-kafka/292084)
**Author:** [@shaojielinux](https://discuss.elastic.co/u/shaojielinux)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 3:53pm UTC](https://discuss.elastic.co/t/ask-for-a-help-does-the-logstash-output-s3-plugin-support-getting-data-from-kafka/292084 "2021-12-16T15:53:15Z")
Ask for a help. Does the logstash output s3 plugin support getting data from Kafka? Below is my configuration input { kafka { bootstrap\_servers =\> "10.88.14.172:9092,10.88.6.9:9092,10.88.10.166:9092" #topics =\> \["k8s… --- ## [Elastic Engineering lab](https://discuss.elastic.co/t/elastic-engineering-lab/291533)
**Author:** [@sabualrub](https://discuss.elastic.co/u/sabualrub)\ **Replies:** 8\ **Last updated:** [December 16, 2021, 3:41pm UTC](https://discuss.elastic.co/t/elastic-engineering-lab/291533 "2021-12-16T15:41:02Z")
Hi My strigo lab has expired and I want to train before I take the certification exam. How do I get the data in the indices used in the lab? is there is a way to get those data sets Thanks --- ## [Combining two events in one to calculate time difference](https://discuss.elastic.co/t/combining-two-events-in-one-to-calculate-time-difference/292155)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 2\ **Last updated:** [December 16, 2021, 3:35pm UTC](https://discuss.elastic.co/t/combining-two-events-in-one-to-calculate-time-difference/292155 "2021-12-16T15:35:54Z")
Hello team, I have case where information is being displayed in different lines. These lines are not even consecutive lines. Unique field is log\_processed.companyId. I have to display time difference between entry and e… --- ## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/291997)
**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\ **Replies:** 4\ **Last updated:** [December 16, 2021, 3:10pm UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/291997 "2021-12-16T15:10:49Z")
Hi I am getting the error when I run the config file through 'systemctl start logstash' log---- \[2021-12-15T13:49:55,003\]\[INFO \]\[logstash.runner\] Log4j configuration path used is: /etc/logstash/log4j2.properties \[202… --- ## [Embed Kibana Dashboard via IFrame / csp config](https://discuss.elastic.co/t/embed-kibana-dashboard-via-iframe-csp-config/291128)
**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\ **Replies:** 3\ **Last updated:** [December 16, 2021, 2:13pm UTC](https://discuss.elastic.co/t/embed-kibana-dashboard-via-iframe-csp-config/291128 "2021-12-16T14:13:32Z")
hi i want a third webserver to embed a dashboard via iframe, but default csp config denied it. what i tried so far in the kibana.yml xpack.security.sameSiteCookies: None xpack.security.secureCookies: true csp.strict:… --- ## [A way to pass on kibana's authentication credentials from a python flask app?](https://discuss.elastic.co/t/a-way-to-pass-on-kibanas-authentication-credentials-from-a-python-flask-app/290100)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 1:45pm UTC](https://discuss.elastic.co/t/a-way-to-pass-on-kibanas-authentication-credentials-from-a-python-flask-app/290100 "2021-12-16T13:45:40Z")
Hello, I have a Flask app that redirects to an kibana instance that populates dashboards and works as expected . However,i'm wondering if there's a way to pass on kibana's credentials via the APP so that the kibana does… --- ## [Unable to start Kibana after enabling tls in Elasticsearch](https://discuss.elastic.co/t/unable-to-start-kibana-after-enabling-tls-in-elasticsearch/291482)
**Author:** [@mahmoudmaani](https://discuss.elastic.co/u/mahmoudmaani)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 1:15pm UTC](https://discuss.elastic.co/t/unable-to-start-kibana-after-enabling-tls-in-elasticsearch/291482 "2021-12-16T13:15:42Z")
I configured the TLS in Elasticsearch.yml. Everything is working well in Elastic and I can access it via HTTPS like https://192.168.56.108:9200 but when I am trying to access Kibana I get "Kibana server is not ready yet"… --- ## [After restart, logstash doesn't read only new files](https://discuss.elastic.co/t/after-restart-logstash-doesnt-read-only-new-files/292012)
**Author:** [@khouloud](https://discuss.elastic.co/u/khouloud)\ **Replies:** 6\ **Last updated:** [December 16, 2021, 1:12pm UTC](https://discuss.elastic.co/t/after-restart-logstash-doesnt-read-only-new-files/292012 "2021-12-16T13:12:12Z")
Hello, is it possible when we stop and restart logstash doesn't read all the files that match the path from the beginning and read only new files appended? --- ## [Determine when clone index has completed](https://discuss.elastic.co/t/determine-when-clone-index-has-completed/291675)
**Author:** [@madshov](https://discuss.elastic.co/u/madshov)\ **Replies:** 4\ **Last updated:** [December 16, 2021, 11:52am UTC](https://discuss.elastic.co/t/determine-when-clone-index-has-completed/291675 "2021-12-16T11:52:03Z")
Hi, I'm writing some functionality where step 1 would be to backup the current ES index. For this I'm using the \_cloneIndex request. This seems like the most appropriate choice. But how would I know for sure when that h… --- ## [Getting less hits in elasticsearch](https://discuss.elastic.co/t/getting-less-hits-in-elasticsearch/292095)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 10:39am UTC](https://discuss.elastic.co/t/getting-less-hits-in-elasticsearch/292095 "2021-12-16T10:39:10Z")
I have 1000 records but i am just getting 997 records. csv-input.conf input { file { path =\> "/usr/share/logstash/user\_details.csv" start\_position =\> "beginning" #sincedb\_path =\> "/usr/share/logstash/dbteste" } } f… --- ## [Add units to metric visualization in kibana](https://discuss.elastic.co/t/add-units-to-metric-visualization-in-kibana/292098)
**Author:** [@Anton\_Schleenvoigt](https://discuss.elastic.co/u/Anton_Schleenvoigt)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 10:35am UTC](https://discuss.elastic.co/t/add-units-to-metric-visualization-in-kibana/292098 "2021-12-16T10:35:03Z")
Right now I have created a metric that shows maximum value of an power meter value X and after this value i would like to add the measure unit sent i within the same msg. I have a modbus that sends different values and … --- ## [Nested ElasticSeach Aggregation term query help needed different levels](https://discuss.elastic.co/t/nested-elasticseach-aggregation-term-query-help-needed-different-levels/292129)
**Author:** [@Arti\_Sayani](https://discuss.elastic.co/u/Arti_Sayani)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 10:01am UTC](https://discuss.elastic.co/t/nested-elasticseach-aggregation-term-query-help-needed-different-levels/292129 "2021-12-16T10:01:44Z")
If someone can answer this. I need urgent help with this query on raw data for multiple nested aggregations --- ## [Kibana dropdown filter doesn't handle results containing a dash (-)](https://discuss.elastic.co/t/kibana-dropdown-filter-doesnt-handle-results-containing-a-dash/291994)
**Author:** [@vpy](https://discuss.elastic.co/u/vpy)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 9:13am UTC](https://discuss.elastic.co/t/kibana-dropdown-filter-doesnt-handle-results-containing-a-dash/291994 "2021-12-16T09:13:00Z")
Hi I would like to report a this Kibana canvas issue. Let me first describe the test environment: The canvas contains a dropdown filter and a Data table. The kibana index is issued from syslog files. The main index f… --- ## [Dec 16th, 2021: \[en\] Logging and monitoring HTTP requests reaching your Elasticsearch cluster](https://discuss.elastic.co/t/dec-16th-2021-en-logging-and-monitoring-http-requests-reaching-your-elasticsearch-cluster/290442)
**Author:** [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-16th-2021-en-logging-and-monitoring-http-requests-reaching-your-elasticsearch-cluster/290442 "2021-12-16T08:00:06Z")
Have you ever wanted to take a look at the HTTP requests served by your Elasticsearch nodes? This article is made for you! Except if you have a load balancer or reverse proxy in front of your Elasticsearch nodes, captu… --- ## [Extract Hashtags and Mentions into separate fields](https://discuss.elastic.co/t/extract-hashtags-and-mentions-into-separate-fields/291656)
**Author:** [@prakhar\_nigam](https://discuss.elastic.co/u/prakhar_nigam)\ **Replies:** 2\ **Last updated:** [December 16, 2021, 6:48am UTC](https://discuss.elastic.co/t/extract-hashtags-and-mentions-into-separate-fields/291656 "2021-12-16T06:48:50Z")
I am doing a DIY Tweet Sentiment analyser, I have an index of tweets like these, "\_source" : { "id" : 26930655, "status" : 1, "title" : "Here’s 5 underrated #BTC and realistic crypto accounts that ever… --- ## [Unable to configure Elasticsearch following the Quickstart guide](https://discuss.elastic.co/t/unable-to-configure-elasticsearch-following-the-quickstart-guide/292076)
**Author:** [@abu.kalna](https://discuss.elastic.co/u/abu.kalna)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 5:43am UTC](https://discuss.elastic.co/t/unable-to-configure-elasticsearch-following-the-quickstart-guide/292076 "2021-12-16T05:43:18Z")
Unable to configure Elasticsearch on Kubernetes 1.22 using the Quickstart guide (Deploy ECK in your Kubernetes cluster | Elastic Cloud on Kubernetes \[1.8\] | Elastic). It is in "ApplyingChanges" for the last 14 hours. $ … --- ## [MISP Configuration issue in Filebeat module](https://discuss.elastic.co/t/misp-configuration-issue-in-filebeat-module/292002)
**Author:** [@tejas.tech](https://discuss.elastic.co/u/tejas.tech)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 3:22pm UTC](https://discuss.elastic.co/t/misp-configuration-issue-in-filebeat-module/292002 "2021-12-15T15:22:36Z")
Error while processing http request: failed to execute http client.Do: failed to execute http client.Do: Post "https://127.0.0.1/events/restSearch": POST https://127.0.0.1/events/restSearch giving up after 6 attempts … --- ## [Elasticsearch 7.10.0, x-pack-core and x-pack-security under which license](https://discuss.elastic.co/t/elasticsearch-7-10-0-x-pack-core-and-x-pack-security-under-which-license/290104)
**Author:** [@Sagarika\_Mahalik](https://discuss.elastic.co/u/Sagarika_Mahalik)\ **Replies:** 3\ **Last updated:** [December 16, 2021, 5:34am UTC](https://discuss.elastic.co/t/elasticsearch-7-10-0-x-pack-core-and-x-pack-security-under-which-license/290104 "2021-12-16T05:34:53Z")
Hi, I wanted to ask the Elasticsearch 7.10.0 is now under which license and the x-pack-core7.10.0 and x-pack-security7.10.0 which comes with Elasticsearch 7.10.0 is under which license. Thanks --- ## [Logstash and logical or](https://discuss.elastic.co/t/logstash-and-logical-or/291582)
**Author:** [@KaPBaJIOJI](https://discuss.elastic.co/u/KaPBaJIOJI)\ **Replies:** 3\ **Last updated:** [December 16, 2021, 3:43am UTC](https://discuss.elastic.co/t/logstash-and-logical-or/291582 "2021-12-16T03:43:29Z")
Hello everyone I try to started config logstash Work config filter { # grok log lines by program name (listed alpabetically) if \[program\] =~ /^postfix.\*\\/anvil$/ { grok { patterns\_dir =\> … --- ## [Logstash calls flush method multiple times per filter plugin](https://discuss.elastic.co/t/logstash-calls-flush-method-multiple-times-per-filter-plugin/292062)
**Author:** [@vbohata](https://discuss.elastic.co/u/vbohata)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 12:28am UTC](https://discuss.elastic.co/t/logstash-calls-flush-method-multiple-times-per-filter-plugin/292062 "2021-12-16T00:28:29Z")
I am writing some logstash filter plugin and found one weird behaviour. It seems the LS somehow calls flush method multiple times even if I use 1 worker and 1 pipeline called "def". I did some tests and here are parts of… --- ## [LogstashのKVフィルター設定について](https://discuss.elastic.co/t/logstash-kv/290528)
**Author:** [@na\_taka](https://discuss.elastic.co/u/na_taka)\ **Replies:** 6\ **Last updated:** [December 16, 2021, 2:20am UTC](https://discuss.elastic.co/t/logstash-kv/290528 "2021-12-16T02:20:17Z")
お世話になっております。 logstashのフィルター設定についてご質問です。 サンプルログ(valueにスペースが存在するデータ) key3=value3 key4=val ue4 key5=value5 key6=val ue6 以下のようにkvフィルターを使用しています。 filter { kv { source =\> "message" field\_split =\> " " value\_split =\> "=" … --- ## [Dec 15th, 2021: \[en\] UFOs in Kibana Maps](https://discuss.elastic.co/t/dec-15th-2021-en-ufos-in-kibana-maps/290576)
**Author:** [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-15th-2021-en-ufos-in-kibana-maps/290576 "2021-12-15T08:00:52Z")
When the call came for doing a post for the advent calendar, I signed up to write about our amazing maps capabilities in Kibana again. But, in my end-of-year escapism from real and scary things like covid and climate em… --- ## [Logstash json parse error](https://discuss.elastic.co/t/logstash-json-parse-error/291557)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 11:01pm UTC](https://discuss.elastic.co/t/logstash-json-parse-error/291557 "2021-12-15T23:01:31Z")
hello, Last time I'm receiving a log of logstash json parse errors, from the error logs I cannot read anything about to what files it is about to, \[ WARN \] 2021-12-12 13:28:20.845 \[\[main\]\>worker6\] json - Error parsing… --- ## [Nested must\_not query does not return expected results](https://discuss.elastic.co/t/nested-must-not-query-does-not-return-expected-results/291944)
**Author:** [@jsjs2](https://discuss.elastic.co/u/jsjs2)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 10:44pm UTC](https://discuss.elastic.co/t/nested-must-not-query-does-not-return-expected-results/291944 "2021-12-15T22:44:54Z")
what is the expected behavior for a nested must\_not query? sample query: { "query": { "bool": { "filter": \[ { "nested": { "path": "par… --- ## [Logstash : Elasticsearch input plugin not working with a remote server](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-not-working-with-a-remote-server/291685)
**Author:** [@Bassem\_Wadie](https://discuss.elastic.co/u/Bassem_Wadie)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 9:37pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-not-working-with-a-remote-server/291685 "2021-12-15T21:37:03Z")
Hello, I have logstash installed on my PC and there is a Amazon Linux 2 AMI machine contains Kubernetes ( Elasticsearch and Ngnix) There is ssl installed on the server but i can make queries from postman on my pc usi… --- ## [Logstash.instrument.periodicpoller.jvm remove from log](https://discuss.elastic.co/t/logstash-instrument-periodicpoller-jvm-remove-from-log/291932)
**Author:** [@peledev](https://discuss.elastic.co/u/peledev)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 9:20pm UTC](https://discuss.elastic.co/t/logstash-instrument-periodicpoller-jvm-remove-from-log/291932 "2021-12-15T21:20:11Z")
how do i disable all the logs debug of logstash.instrument.periodicpoller.jvm it is filling my log with junk please assist thanks claudia --- ## [Is it possible to send one email with several Dashboard PDF reports?](https://discuss.elastic.co/t/is-it-possible-to-send-one-email-with-several-dashboard-pdf-reports/291359)
**Author:** [@Luis\_P](https://discuss.elastic.co/u/Luis_P)\ **Replies:** 3\ **Last updated:** [December 15, 2021, 9:16pm UTC](https://discuss.elastic.co/t/is-it-possible-to-send-one-email-with-several-dashboard-pdf-reports/291359 "2021-12-15T21:16:30Z")
I've been building a watcher with the purpose of when the condition is met, it should send one email with several Dashboard PDF reports as attachments, one for each process. So far I've only been able to make it so it se… --- ## [Is it possible to update an index by importing an updated .csv file?](https://discuss.elastic.co/t/is-it-possible-to-update-an-index-by-importing-an-updated-csv-file/292029)
**Author:** [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 8:35pm UTC](https://discuss.elastic.co/t/is-it-possible-to-update-an-index-by-importing-an-updated-csv-file/292029 "2021-12-15T20:35:24Z")
I want to update my index by importing a .csv file via Logstash. Currently, the plan is to delete all the records from the index and then reimport the new .csv file from scratch. But I was wondering if it's possible to j… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=750) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=752)