# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=755 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 756 --- ## [Error running Logstash 7.16.1 OSS](https://discuss.elastic.co/t/error-running-logstash-7-16-1-oss/291677)
**Author:** [@BenSeb](https://discuss.elastic.co/u/BenSeb)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 4:54pm UTC](https://discuss.elastic.co/t/error-running-logstash-7-16-1-oss/291677 "2021-12-13T16:54:53Z")
We're getting the following errors when trying to run 7.16.1 OSS \[2021-12-13T14:53:22,775\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /etc/logstash/log4j2.properties \[2021-12-13T14:53:22,790\]\[I… --- ## [Fscrawler refuses connection over https](https://discuss.elastic.co/t/fscrawler-refuses-connection-over-https/291689)
**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 4:18pm UTC](https://discuss.elastic.co/t/fscrawler-refuses-connection-over-https/291689 "2021-12-13T16:18:50Z")
I've studied this page and really do not not how to make and use .cer certificate, so can't launch fscrawler over secured connection. I created a certificate like this: sudo ./elasticsearch-certutil ca -out /etc/elasti… --- ## [exception=\>#\](https://discuss.elastic.co/t/exception-csv-illegal-quoting-in-line-1/291437)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 4:06pm UTC](https://discuss.elastic.co/t/exception-csv-illegal-quoting-in-line-1/291437 "2021-12-13T16:06:49Z")
My config file is: { stdin{} } filter { if "box\_Firewall" not in \[program\] { if \[message\] =~ /{".\*":\\s".\*",/ { json { source =\> "message" } … --- ## [Logstash.conf not building pipeline.yml file](https://discuss.elastic.co/t/logstash-conf-not-building-pipeline-yml-file/291259)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 12\ **Last updated:** [December 13, 2021, 3:36pm UTC](https://discuss.elastic.co/t/logstash-conf-not-building-pipeline-yml-file/291259 "2021-12-13T15:36:58Z")
Good Afternoon Elastic Peeps; I am in the process of creating a second logstash.conf file on my server. It is intended to pull data from a microsoft database. To that end I downloaded and extracted the sqljdbc9.4.jar … --- ## [Convert IP string to Integer](https://discuss.elastic.co/t/convert-ip-string-to-integer/290351)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 3\ **Last updated:** [December 13, 2021, 2:48pm UTC](https://discuss.elastic.co/t/convert-ip-string-to-integer/290351 "2021-12-13T14:48:18Z")
Hi!, Is there a way to convert an IP address to an integer in logstash filters? Suppose I have the grok pattern: %{IPv4: clientip} - %{DATA:name}.... I want to have the equivalent byte-like integer of the IP address t… --- ## [Parsing a date and timestamp to default Elasticsearch](https://discuss.elastic.co/t/parsing-a-date-and-timestamp-to-default-elasticsearch/291667)
**Author:** [@mangesh\_shinde](https://discuss.elastic.co/u/mangesh_shinde)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 2:43pm UTC](https://discuss.elastic.co/t/parsing-a-date-and-timestamp-to-default-elasticsearch/291667 "2021-12-13T14:43:44Z")
I have a field called event\_timestamp with format Thu Dec 09 15:02:66 IST 2021 I want to parse this format to default elastic acceptable format I use date filter as below date{ match =\> \["event\_timestamp","EEE MMM dd… --- ## [Logstash concatenar dos campos strig](https://discuss.elastic.co/t/logstash-concatenar-dos-campos-strig/291657)
**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 1:52pm UTC](https://discuss.elastic.co/t/logstash-concatenar-dos-campos-strig/291657 "2021-12-13T13:52:28Z")
Hola, Necesito concatenar dos campos tipo string en el fichero de logtash ¿alguien me puede ayudar? es decir, los campos ya exiten del csv. filter.. mutate { add\_field =\> {"CANALITSOFT" =\> ""} } ruby{ code =\> " … --- ## [Is it possible to change the color of a submetric inside a metric?](https://discuss.elastic.co/t/is-it-possible-to-change-the-color-of-a-submetric-inside-a-metric/291404)
**Author:** [@Gonzalo\_Cabanillas\_P](https://discuss.elastic.co/u/Gonzalo_Cabanillas_P)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 1:49pm UTC](https://discuss.elastic.co/t/is-it-possible-to-change-the-color-of-a-submetric-inside-a-metric/291404 "2021-12-13T13:49:39Z")
How can i change the color of the 1.52% to red? It is a metric in TSVB And this is the metric part: Thanks. --- ## [Logstash input Kafka error](https://discuss.elastic.co/t/logstash-input-kafka-error/291345)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 1:27pm UTC](https://discuss.elastic.co/t/logstash-input-kafka-error/291345 "2021-12-13T13:27:04Z")
Hi evrery one, i'm facing an issue while using kafka as my logstash input. when i started logstash i have this error : Unable to poll Kafka consumer {:kafka\_error\_message=\>org.apache.kafka.common.KafkaException: Recei… --- ## [Combining date and time fields in csv](https://discuss.elastic.co/t/combining-date-and-time-fields-in-csv/290624)
**Author:** [@Pba\_In](https://discuss.elastic.co/u/Pba_In)\ **Replies:** 5\ **Last updated:** [December 13, 2021, 12:15pm UTC](https://discuss.elastic.co/t/combining-date-and-time-fields-in-csv/290624 "2021-12-13T12:15:08Z")
I have a csv file that I'm looking to import into Kibana. There is a date field and a time field. I would like to combine them to be used as a timestamp, so that I can then search for specific time ranges. However, the… --- ## [Add comment in kibana elasticsearch](https://discuss.elastic.co/t/add-comment-in-kibana-elasticsearch/291624)
**Author:** [@Aitor\_MtzAm](https://discuss.elastic.co/u/Aitor_MtzAm)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 12:01pm UTC](https://discuss.elastic.co/t/add-comment-in-kibana-elasticsearch/291624 "2021-12-13T12:01:09Z")
Hi! is there any chance to comment in elastic? like you can comment in sql or java with /\* \*/ or -- --- ## [Unable to access 'path.repo'](https://discuss.elastic.co/t/unable-to-access-path-repo/291633)
**Author:** [@WTrois](https://discuss.elastic.co/u/WTrois)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 11:12am UTC](https://discuss.elastic.co/t/unable-to-access-path-repo/291633 "2021-12-13T11:12:55Z")
Hi, I'm having problems uploading indices from a snapshot. I'm running Elasticsearch version 7.16.0 I have: path.repo: \["/home/user/Downloads/snapshot1"\] in my yml file. The Elasticsearch cluster fails to start. The … --- ## [Use of caps in query with field names while perform search](https://discuss.elastic.co/t/use-of-caps-in-query-with-field-names-while-perform-search/291598)
**Author:** [@BIRENDRA](https://discuss.elastic.co/u/BIRENDRA)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 10:39am UTC](https://discuss.elastic.co/t/use-of-caps-in-query-with-field-names-while-perform-search/291598 "2021-12-13T10:39:25Z")
Hi Team, I have seen caps in field names while doing a search. Specially inside should block which contributes to score. I tried doing similar thing to see the effect but score remained same whatever number I gave after… --- ## [Get the entire sub-tree / tree structure for a document based on a field](https://discuss.elastic.co/t/get-the-entire-sub-tree-tree-structure-for-a-document-based-on-a-field/291614)
**Author:** [@olivebranch](https://discuss.elastic.co/u/olivebranch)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 10:30am UTC](https://discuss.elastic.co/t/get-the-entire-sub-tree-tree-structure-for-a-document-based-on-a-field/291614 "2021-12-13T10:30:06Z")
I have a hierarchical structure (much like categories contained within categories) in my document like following: 1(parent for root category is: -1) / \\ 2 3 … --- ## [The grok works very strangely in logstash](https://discuss.elastic.co/t/the-grok-works-very-strangely-in-logstash/291427)
**Author:** [@San9](https://discuss.elastic.co/u/San9)\ **Replies:** 5\ **Last updated:** [December 13, 2021, 10:13am UTC](https://discuss.elastic.co/t/the-grok-works-very-strangely-in-logstash/291427 "2021-12-13T10:13:42Z")
To all lovers of this hello! In some excellent one noticed that my messages in logstash stopped parsing, an error appeared - \_grokparsefailure. but no configuration changes were made. Original messages 1.2.3.4 0 - Tes… --- ## [Why do non ASCII characters cause problems in elastic search?](https://discuss.elastic.co/t/why-do-non-ascii-characters-cause-problems-in-elastic-search/291617)
**Author:** [@Pineirin](https://discuss.elastic.co/u/Pineirin)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 9:56am UTC](https://discuss.elastic.co/t/why-do-non-ascii-characters-cause-problems-in-elastic-search/291617 "2021-12-13T09:56:52Z")
Greetings. I have found a problem in the search bar of my application (that uses Elasticsearch for the search bar). If I do a fuzzy search of a text (in this case the title of a book) that is quite long (more than 96 c… --- ## [Kibana suricata integration](https://discuss.elastic.co/t/kibana-suricata-integration/290363)
**Author:** [@algira37](https://discuss.elastic.co/u/algira37)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 9:47am UTC](https://discuss.elastic.co/t/kibana-suricata-integration/290363 "2021-12-13T09:47:45Z")
Hello, I added suricata integration to my system, but I can't use filebeat suricata module so I configured filebeat to send logs without suricata module to ELK, I just wondering is there any solution to use kibana inte… --- ## [Kibana dashboard spacing between values in an array](https://discuss.elastic.co/t/kibana-dashboard-spacing-between-values-in-an-array/289402)
**Author:** [@hellotty](https://discuss.elastic.co/u/hellotty)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 9:45am UTC](https://discuss.elastic.co/t/kibana-dashboard-spacing-between-values-in-an-array/289402 "2021-12-13T09:45:52Z")
Hello I am passing values as an array to elasticsearch and when I saw the result I got a question. Is it possible to make line spacing in an array so that it can be easier to read? At the moment, the kibana dashboard … --- ## [Kibana Visualization filtering data based on aggregation](https://discuss.elastic.co/t/kibana-visualization-filtering-data-based-on-aggregation/291610)
**Author:** [@anas\_pp](https://discuss.elastic.co/u/anas_pp)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 9:34am UTC](https://discuss.elastic.co/t/kibana-visualization-filtering-data-based-on-aggregation/291610 "2021-12-13T09:34:42Z")
I have requirement that to show the count of running jobs and completed in Pie chart . I am receiving status of jobs in real time . To show the count of the jobs that are currently in running state I have to filter those… --- ## [Logstash Error: "Your settings are invalid"](https://discuss.elastic.co/t/logstash-error-your-settings-are-invalid/291544)
**Author:** [@neerajg](https://discuss.elastic.co/u/neerajg)\ **Replies:** 2\ **Last updated:** [December 13, 2021, 7:52am UTC](https://discuss.elastic.co/t/logstash-error-your-settings-are-invalid/291544 "2021-12-13T07:52:03Z")
Hi guys, I just upgraded elk stack from 7.15.0 to 7.16.0. Everything is working fine except Logstash. It ends up failing to start. I checked the system logs and found the following error. Error: logstash\[20212\]: Ope… --- ## [Fscrawler - update existing record](https://discuss.elastic.co/t/fscrawler-update-existing-record/291597)
**Author:** [@Andrej\_K](https://discuss.elastic.co/u/Andrej_K)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 7:37am UTC](https://discuss.elastic.co/t/fscrawler-update-existing-record/291597 "2021-12-13T07:37:18Z")
Hello, I need to search documents by its content and some custom customer data. So my idea is to use fscrawler to extract content from documents and keep it with custom customer data in one index for easy searching. So… --- ## [How to get the field names which have no data or null in elasticsearch dynamically?](https://discuss.elastic.co/t/how-to-get-the-field-names-which-have-no-data-or-null-in-elasticsearch-dynamically/291591)
**Author:** [@Saurabh\_A](https://discuss.elastic.co/u/Saurabh_A)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 6:17am UTC](https://discuss.elastic.co/t/how-to-get-the-field-names-which-have-no-data-or-null-in-elasticsearch-dynamically/291591 "2021-12-13T06:17:53Z")
How do we get the field names with no data in them? For example, in an index, there is a field that is present in the mapping but no data is indexed in this case. So I want a list of all the field names or keys where the… --- ## [Output to different elastic search Indices based on the string](https://discuss.elastic.co/t/output-to-different-elastic-search-indices-based-on-the-string/291568)
**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\ **Replies:** 3\ **Last updated:** [December 13, 2021, 3:40am UTC](https://discuss.elastic.co/t/output-to-different-elastic-search-indices-based-on-the-string/291568 "2021-12-13T03:40:17Z")
Hi I have a Category field (cat) which can have following value and future expect to add more. BL LA KA Currently I have following code to output to the different Elasticsearch indices from our Logstash pipeline . I… --- ## [Resources for learning ElasticSearch](https://discuss.elastic.co/t/resources-for-learning-elasticsearch/291536)
**Author:** [@rav3n](https://discuss.elastic.co/u/rav3n)\ **Replies:** 2\ **Last updated:** [December 12, 2021, 7:19pm UTC](https://discuss.elastic.co/t/resources-for-learning-elasticsearch/291536 "2021-12-12T19:19:50Z")
Hey people, Just started using Elasticsearch for my personal use. So, last night I picked one of the tool from Elastic stack and started reading about it. I came across to this book named "Elasticsearch: The Definitive … --- ## [Kibana Single Click Drilldown events.value Array Issue](https://discuss.elastic.co/t/kibana-single-click-drilldown-events-value-array-issue/290925)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 3\ **Last updated:** [December 12, 2021, 6:56pm UTC](https://discuss.elastic.co/t/kibana-single-click-drilldown-events-value-array-issue/290925 "2021-12-12T18:56:37Z")
Hi there! I have an aggregation-based data table where I would like to use the drilldown capabilities. My table shows the following fields Id, Description, Severity, Hostname, Count My goal is to have a single click d… --- ## [Increase timeouts between ES and logstash](https://discuss.elastic.co/t/increase-timeouts-between-es-and-logstash/291550)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 0\ **Last updated:** [December 12, 2021, 4:15pm UTC](https://discuss.elastic.co/t/increase-timeouts-between-es-and-logstash/291550 "2021-12-12T16:15:52Z")
hello, I'm facing the issues means: \[\[main\]\>worker5\] elasticsearch - Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_message=\>"Elasticsearch Unreachable:… --- ## [Can't access our cluster through Grafana](https://discuss.elastic.co/t/cant-access-our-cluster-through-grafana/291548)
**Author:** [@mertkaant](https://discuss.elastic.co/u/mertkaant)\ **Replies:** 0\ **Last updated:** [December 12, 2021, 3:43pm UTC](https://discuss.elastic.co/t/cant-access-our-cluster-through-grafana/291548 "2021-12-12T15:43:15Z")
Hello, dear community, We recently have upgraded our ELK to 7.15.2. from 7.7.0. Here are some details from our cluster This is one of our cluster's health: { "cluster\_name" : "xxxxxxxxxxx", "status" : "green", … --- ## [Split index in runtime](https://discuss.elastic.co/t/split-index-in-runtime/291329)
**Author:** [@valentineg](https://discuss.elastic.co/u/valentineg)\ **Replies:** 2\ **Last updated:** [December 12, 2021, 8:01am UTC](https://discuss.elastic.co/t/split-index-in-runtime/291329 "2021-12-12T08:01:11Z")
HI, we have logstash and elastic on a k8s environment. in our topology logstash receives data from multiple applications while part of the data is application name \\ id. is there a way to add a dynamic variable to the … --- ## [Copy an engine](https://discuss.elastic.co/t/copy-an-engine/291513)
**Author:** [@miki\_haiat](https://discuss.elastic.co/u/miki_haiat)\ **Replies:** 1\ **Last updated:** [December 11, 2021, 7:46pm UTC](https://discuss.elastic.co/t/copy-an-engine/291513 "2021-12-11T19:46:06Z")
Im trying to figure out if there a way to copy an existing engine with all his properties. the API doesn't support this feature. It will be very useful if you create a "DEV" engine and you convert it to a "PROD" en… --- ## [How distinguish records at file](https://discuss.elastic.co/t/how-distinguish-records-at-file/291518)
**Author:** [@Alpork](https://discuss.elastic.co/u/Alpork)\ **Replies:** 0\ **Last updated:** [December 11, 2021, 7:34pm UTC](https://discuss.elastic.co/t/how-distinguish-records-at-file/291518 "2021-12-11T19:34:05Z")
Hello I have these records at file. 1639243031955|120|0|100|1|344405511|1|1906||sw|34esae3d||sdsw| 1639044203391|207|0|2009030129|http:\\126.198.81.51|5|1|10500| I use Processors-\>CSV for extracting values for these r… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=754) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=756)