# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=754 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 755 --- ## [Logstash - comparison 2 fields](https://discuss.elastic.co/t/logstash-comparison-2-fields/291692)
**Author:** [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 11:47am UTC](https://discuss.elastic.co/t/logstash-comparison-2-fields/291692 "2021-12-14T11:47:48Z")
Hello. I would like to compare 2 fields using logstash. To be more precise, i would like to know id the content of one field is included into the other one, using ( regex) i tried this configuration if ( \[test\]\[fi… --- ## [Is that possible to use certificates signed by openssl instead of elasticsearch-certutil?](https://discuss.elastic.co/t/is-that-possible-to-use-certificates-signed-by-openssl-instead-of-elasticsearch-certutil/291724)
**Author:** [@v\_melnyk](https://discuss.elastic.co/u/v_melnyk)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 10:51am UTC](https://discuss.elastic.co/t/is-that-possible-to-use-certificates-signed-by-openssl-instead-of-elasticsearch-certutil/291724 "2021-12-14T10:51:06Z")
Hello, I'd like to sign the nodes' certificates by openssl (instead of Elasticsearch-certutil). Is that ever possible? When I have a PKCS12 keystore made by Elasticsearch-certutil, everything works like a charm. Here's… --- ## [Input Duration Reverting back to Picosecs after changing to Secs](https://discuss.elastic.co/t/input-duration-reverting-back-to-picosecs-after-changing-to-secs/291081)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 4\ **Last updated:** [December 14, 2021, 10:48am UTC](https://discuss.elastic.co/t/input-duration-reverting-back-to-picosecs-after-changing-to-secs/291081 "2021-12-14T10:48:26Z")
After I have updated pico to secs and saved. Upon editing the field it does not retain the update to seconds. I am running kibana v 7.14.0 Anyone have any ideas what I might be doing wrong? Thanks in advance --- ## [Secure log4j for elasticsearch](https://discuss.elastic.co/t/secure-log4j-for-elasticsearch/291684)
**Author:** [@beci](https://discuss.elastic.co/u/beci)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 10:47am UTC](https://discuss.elastic.co/t/secure-log4j-for-elasticsearch/291684 "2021-12-14T10:47:12Z")
Hello, We have a server with logstash and Elasticsearch installed on it, I updated these two items to 7.16.1. When I search for files that say "\* log4j \*", there are always items mentioning version 2.11.1 of log4j : /… --- ## [Scripted Field on Date in Kibana?](https://discuss.elastic.co/t/scripted-field-on-date-in-kibana/291754)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 4\ **Last updated:** [December 14, 2021, 10:44am UTC](https://discuss.elastic.co/t/scripted-field-on-date-in-kibana/291754 "2021-12-14T10:44:40Z")
Is there any way to create scripted field on Empty Date field? I want to find pending number of SMS when message Submitted but not Delivered. I am getting Submitted date but delivered Date Empty. if (doc\['SubmittedOn'\].… --- ## [Time picker with enddate relative to startdate](https://discuss.elastic.co/t/time-picker-with-enddate-relative-to-startdate/290892)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 10:22am UTC](https://discuss.elastic.co/t/time-picker-with-enddate-relative-to-startdate/290892 "2021-12-14T10:22:33Z")
Hi All, This might be a stupid question but here goes..! We have log data within Elasticsearch that I want to summarise in a visualisation so that it gives me the count of records from 0800 yesterday until 0800 today. … --- ## [Iterate over searchResponse](https://discuss.elastic.co/t/iterate-over-searchresponse/291648)
**Author:** [@Katgust](https://discuss.elastic.co/u/Katgust)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 10:06am UTC](https://discuss.elastic.co/t/iterate-over-searchresponse/291648 "2021-12-14T10:06:20Z")
I'd like to iterate over my searchResponse so I can use the value from an id field in every found document in order to do a new search where this id matches another one in another index. So first I'm doing this var… --- ## [Kibana index pattern creation through UI and REST leading to duplicates](https://discuss.elastic.co/t/kibana-index-pattern-creation-through-ui-and-rest-leading-to-duplicates/291553)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 10:00am UTC](https://discuss.elastic.co/t/kibana-index-pattern-creation-through-ui-and-rest-leading-to-duplicates/291553 "2021-12-14T10:00:27Z")
Found similar issue reported in Same index-pattern created with kibana UI and REST command which got auto-closed due to lack of response. Version: Kibana-oss 7.10.2 Issue: Say an index pattern say journal-2021.07.27 is… --- ## [URL Handlebars referencing value from other column (drilldown workaround)](https://discuss.elastic.co/t/url-handlebars-referencing-value-from-other-column-drilldown-workaround/291612)
**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 9:55am UTC](https://discuss.elastic.co/t/url-handlebars-referencing-value-from-other-column-drilldown-workaround/291612 "2021-12-14T09:55:21Z")
Hi, to get you in the context, my main goal was to find out if its possible to create dashboard drill down which would refer to different index with different name of columns but values would match e.g. index1 has colum… --- ## [Elasticsearch Engineering Observability - What do I do on the .YAML menu screen in the terminal?](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133)
**Author:** [@Brendanluvsdata](https://discuss.elastic.co/u/Brendanluvsdata)\ **Replies:** 11\ **Last updated:** [December 14, 2021, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133 "2021-12-14T09:23:06Z")
It comes up with a menu (shown in the first picture). The lab doesn't tell you anything about this and then goes on to tell you to do more code (second picture). What do I do with the menu after I type: "nano filebeat.… --- ## [Legacy index templates - будут ли продолжать работать, или нужно мигрировать?](https://discuss.elastic.co/t/legacy-index-templates/291764)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 8:58am UTC](https://discuss.elastic.co/t/legacy-index-templates/291764 "2021-12-14T08:58:24Z")
Добрый день! У меня имеется несколько сотен темплейтов для индексов, которые теперь находятся в секции "Legacy index templates" в Kibana. Будут ли продолжать работать эти темплейты, или в одно обновление вдруг перестанут… --- ## [ECK Operator not resetting shard\_allocation setting to "all"](https://discuss.elastic.co/t/eck-operator-not-resetting-shard-allocation-setting-to-all/291763)
**Author:** [@phoerious](https://discuss.elastic.co/u/phoerious)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 8:40am UTC](https://discuss.elastic.co/t/eck-operator-not-resetting-shard-allocation-setting-to-all/291763 "2021-12-14T08:40:08Z")
Hi, I've always had the the problem that the ECK operator does not reset the shard\_allocation cluster setting after restarting a node. The result is that after a rolling restart over night, I end up with hundreds of una… --- ## [Transaction already created](https://discuss.elastic.co/t/transaction-already-created/291047)
**Author:** [@Pucky](https://discuss.elastic.co/u/Pucky)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 8:16am UTC](https://discuss.elastic.co/t/transaction-already-created/291047 "2021-12-14T08:16:58Z")
Hi all. I keep getting the following in syslog Elastic APM PHP Tracer \[PID: 3234\] 2021-12-03 11:57:31.455829+02:00 \[WARNING\] \[Public-API\] \[Tracer.php:224\] \[beginTransactionWithBuilder\] Received reque st to begin a new … --- ## [Dec 14th, 2021: \[en\] Leverage your data to build better search faster with curations powered by adaptive relevance](https://discuss.elastic.co/t/dec-14th-2021-en-leverage-your-data-to-build-better-search-faster-with-curations-powered-by-adaptive-relevance/290470)
**Author:** [@isaacrlevin](https://discuss.elastic.co/u/isaacrlevin)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-14th-2021-en-leverage-your-data-to-build-better-search-faster-with-curations-powered-by-adaptive-relevance/290470 "2021-12-14T08:00:58Z")
The building blocks of building great search experiences Building a powerful search experience is a necessity for any applications that are built on top of data. Ensuring that the best results are delivered to users bas… --- ## [Using Elasticsearch as primary database](https://discuss.elastic.co/t/using-elasticsearch-as-primary-database/291694)
**Author:** [@Lylian1](https://discuss.elastic.co/u/Lylian1)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 5:01pm UTC](https://discuss.elastic.co/t/using-elasticsearch-as-primary-database/291694 "2021-12-13T17:01:53Z")
Some blogs say that Elasticsearch is reliable enough to be used as a primary database and some say that Elasticsearch has issues and can loose data. In order to implement a new project , we have as requirements: store… --- ## [Kibana build from source always include xpack](https://discuss.elastic.co/t/kibana-build-from-source-always-include-xpack/290678)
**Author:** [@salamani](https://discuss.elastic.co/u/salamani)\ **Replies:** 3\ **Last updated:** [December 14, 2021, 6:59am UTC](https://discuss.elastic.co/t/kibana-build-from-source-always-include-xpack/290678 "2021-12-14T06:59:18Z")
Hi, I am trying to build kibana 7.14.0 from source and would like to have only standard features (without the X-Pack feature). But somehow, I am to able to run yarn kbn bootstrap --oss, however yarn build --skip-os-pac… --- ## [Auditbeat настройка частоты сканирования](https://discuss.elastic.co/t/auditbeat/291753)
**Author:** [@cva](https://discuss.elastic.co/u/cva)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 6:59am UTC](https://discuss.elastic.co/t/auditbeat/291753 "2021-12-14T06:59:10Z")
Доброго дня! Моя цель получить точное количество логов по пути указанному в auditbeat в elastic для построения графика получения логов по дням в kibana. Проблема в том, что я получаю несколько дублей одного и того же л… --- ## [Regarding log4j with Elasticsearch 2.x which uses log4j 1.2](https://discuss.elastic.co/t/regarding-log4j-with-elasticsearch-2-x-which-uses-log4j-1-2/291751)
**Author:** [@nipun\_reddy](https://discuss.elastic.co/u/nipun_reddy)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 6:50am UTC](https://discuss.elastic.co/t/regarding-log4j-with-elasticsearch-2-x-which-uses-log4j-1-2/291751 "2021-12-14T06:50:47Z")
Hi All, I am looking for impact analysis of Elasticsearch 2.4.1 with the newly detected vulnerabilities. As per update from elastic, there is no impact on Elasticsearch 2 and below with cve-2021-44228. But based on CVE-2… --- ## [Data node vs level of data](https://discuss.elastic.co/t/data-node-vs-level-of-data/291708)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 5:46am UTC](https://discuss.elastic.co/t/data-node-vs-level-of-data/291708 "2021-12-14T05:46:47Z")
How do I equalize data levels between data nodes? --- ## [Extracting fields from existing message field in windows logs](https://discuss.elastic.co/t/extracting-fields-from-existing-message-field-in-windows-logs/291705)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 3\ **Last updated:** [December 14, 2021, 4:55am UTC](https://discuss.elastic.co/t/extracting-fields-from-existing-message-field-in-windows-logs/291705 "2021-12-14T04:55:32Z")
Hi, I have winlogbeat that sends evtx files to logstash and than the output of logstash goes to elastic. In the windows event logs, there is a field named "message". the problem is that the field type is text, so i ca… --- ## [Elasticsearch upgrade using Ansible with https](https://discuss.elastic.co/t/elasticsearch-upgrade-using-ansible-with-https/291741)
**Author:** [@Roberto\_Chacon](https://discuss.elastic.co/u/Roberto_Chacon)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 3:32am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-using-ansible-with-https/291741 "2021-12-14T03:32:10Z")
Hello I have been following the following post, there is one response that provide an ansible script that seems to do all the magic. Question on Elasticsearch upgrade using Ansible I have found a blocker that my setup… --- ## [Data displayed in Watcher email having issue with float values](https://discuss.elastic.co/t/data-displayed-in-watcher-email-having-issue-with-float-values/291722)
**Author:** [@keyu](https://discuss.elastic.co/u/keyu)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 10:20pm UTC](https://discuss.elastic.co/t/data-displayed-in-watcher-email-having-issue-with-float-values/291722 "2021-12-13T22:20:31Z")
Hi, I am new to Elasticsearch cloud. I have used aggregations in watchers to accumulate a float field. But the value of the aggregated amount is displaying incorrectly The value should be displayed as 10,800,050 but i… --- ## [Kibana converting to dubble](https://discuss.elastic.co/t/kibana-converting-to-dubble/291521)
**Author:** [@amjad-alarori](https://discuss.elastic.co/u/amjad-alarori)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 9:44pm UTC](https://discuss.elastic.co/t/kibana-converting-to-dubble/291521 "2021-12-13T21:44:47Z")
im trying to upload a csv file in kibana with fields of type "long", but somehow it convert to type "dubble" i see this error when i brows the Analysis explanation: --- ## [Query text with White space](https://discuss.elastic.co/t/query-text-with-white-space/291078)
**Author:** [@miki\_haiat](https://discuss.elastic.co/u/miki_haiat)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 7:20pm UTC](https://discuss.elastic.co/t/query-text-with-white-space/291078 "2021-12-13T19:20:41Z")
Hey i want to query text that include white space as single term for example los angeles I've tried some of Lucene options but fetch wrong docs. "query": "Los \\\\ Ange\*" "query": "Los\* Ange\*", "query":… --- ## [Best browser for Kibana 7.16](https://discuss.elastic.co/t/best-browser-for-kibana-7-16/291703)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 7:08pm UTC](https://discuss.elastic.co/t/best-browser-for-kibana-7-16/291703 "2021-12-13T19:08:30Z")
Hello everyone, Which browser is best compatible with Kibana 7.16 ? I know that Internet explorer is old now and should use latest browsers like Google Chrome or Microsoft Edge. But is there any explanation about that … --- ## [Logstash - OutOfMemoryError from TCP input](https://discuss.elastic.co/t/logstash-outofmemoryerror-from-tcp-input/291702)
**Author:** [@vishnug](https://discuss.elastic.co/u/vishnug)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 6:38pm UTC](https://discuss.elastic.co/t/logstash-outofmemoryerror-from-tcp-input/291702 "2021-12-13T18:38:38Z")
Hi, I have a logstash pipeline that uses TCP as input. The pipeline handles around 150k to 200k events per day. I was getting the below errors. An exception was thrown by org.logstash.tcp.InputLoop$InputHandler$FlushOn… --- ## [Can't get nodes communicate to each other via TLS-secured transport](https://discuss.elastic.co/t/cant-get-nodes-communicate-to-each-other-via-tls-secured-transport/291676)
**Author:** [@v\_melnyk](https://discuss.elastic.co/u/v_melnyk)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 6:00pm UTC](https://discuss.elastic.co/t/cant-get-nodes-communicate-to-each-other-via-tls-secured-transport/291676 "2021-12-13T18:00:18Z")
Hello, I have a question regarding deploying of a cluster of nodes and stuck with an inter-node communications issue. It seems that my mistake and the solution are pretty obvious, but somewhy I can't grasp what exactly … --- ## [How to re-name multiple field names at once in logstash](https://discuss.elastic.co/t/how-to-re-name-multiple-field-names-at-once-in-logstash/291599)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 5:45pm UTC](https://discuss.elastic.co/t/how-to-re-name-multiple-field-names-at-once-in-logstash/291599 "2021-12-13T17:45:14Z")
Hie All, I want to rename fields names from this : "\[url\]\[path\]" =\> to "url path" and "\[server\]\[domain\]" =\> "Server domain" We can use mutate filter plugin (as mutate uses lot of cpu) ,but I have nearly 50 fields name… --- ## [CSV MalformedCSVError: Illegal quoting in line](https://discuss.elastic.co/t/csv-malformedcsverror-illegal-quoting-in-line/291639)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 4:59pm UTC](https://discuss.elastic.co/t/csv-malformedcsverror-illegal-quoting-in-line/291639 "2021-12-13T16:59:45Z")
I have used CSV filter to log the events my sample data is 2021-12-09 12:12:09,155 INFO com.tdg.box.incrindex.service.PastEventProcessor \[Thread-14\] Captured Event false dbf5b71c-faa1-4e73-b8db-bf057002e3f5 UPLOAD 1747… --- ## [Mapping Strategies For Survey Data](https://discuss.elastic.co/t/mapping-strategies-for-survey-data/291481)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 4:58pm UTC](https://discuss.elastic.co/t/mapping-strategies-for-survey-data/291481 "2021-12-13T16:58:55Z")
I am ingesting data and looking for opinions on better ways of indexing the data for later aggregation analytics. The data is currently pulled and stored in Elasticsearch as numbered q&a fields. { "question1": { … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=753) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=755)