# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=758 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 759 --- ## [Parse json in Log field to get individual fields for visualization](https://discuss.elastic.co/t/parse-json-in-log-field-to-get-individual-fields-for-visualization/291244)
**Author:** [@girija](https://discuss.elastic.co/u/girija)\ **Replies:** 7\ **Last updated:** [December 9, 2021, 12:24pm UTC](https://discuss.elastic.co/t/parse-json-in-log-field-to-get-individual-fields-for-visualization/291244 "2021-12-09T12:24:05Z")
Hello I am new to Kibana and have difficulty reading the logs for visualization. I have pasted a sample of how my log field looks. I need to read the values inside the log for creating visualizations in Kibana, like w… --- ## [Logstash issues with certificate](https://discuss.elastic.co/t/logstash-issues-with-certificate/291124)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 4\ **Last updated:** [December 9, 2021, 12:11pm UTC](https://discuss.elastic.co/t/logstash-issues-with-certificate/291124 "2021-12-09T12:11:10Z")
Hello, From a couple of days I'm fighting with certificates for logstash. Certificate was generated for logstash and filebeat clients but after couple of minutes I'm receiving below errors: in attach I don't know if t… --- ## [Recommendation for upgrading underlying kubernetes nodes](https://discuss.elastic.co/t/recommendation-for-upgrading-underlying-kubernetes-nodes/251298)
**Author:** [@estevez](https://discuss.elastic.co/u/estevez)\ **Replies:** 5\ **Last updated:** [December 9, 2021, 12:07pm UTC](https://discuss.elastic.co/t/recommendation-for-upgrading-underlying-kubernetes-nodes/251298 "2021-12-09T12:07:40Z")
ECK is great at updating Elasticsearch nodes in a rolling fashion but I was wondering if there's any recommendations for how to upgrade the underlying kubernetes worker nodes that Elasticsearch is running on. My thought… --- ## [Possible to have Kibana rules check at fixed times?](https://discuss.elastic.co/t/possible-to-have-kibana-rules-check-at-fixed-times/291316)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 0\ **Last updated:** [December 9, 2021, 11:31am UTC](https://discuss.elastic.co/t/possible-to-have-kibana-rules-check-at-fixed-times/291316 "2021-12-09T11:31:53Z")
Dear all =) When creating a Elasticsearch query to check every 24 hours, it will check every day at the same time it was created. Is it possible to have it check at a specific time? E.g. I create it at 14:00, but it sh… --- ## [How can we restrict to show data on kibana from different users?](https://discuss.elastic.co/t/how-can-we-restrict-to-show-data-on-kibana-from-different-users/291214)
**Author:** [@sajesh\_sb](https://discuss.elastic.co/u/sajesh_sb)\ **Replies:** 5\ **Last updated:** [December 9, 2021, 11:19am UTC](https://discuss.elastic.co/t/how-can-we-restrict-to-show-data-on-kibana-from-different-users/291214 "2021-12-09T11:19:52Z")
There are two dashboards created which are having independent data. I need to create three users - Admin, user-1, and user-2. Admin can see both the dashboards, user-1 should be able to see dashboard-1 and user-2 should … --- ## [Añadir valor mediante scripted field a otro campo](https://discuss.elastic.co/t/anadir-valor-mediante-scripted-field-a-otro-campo/291312)
**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\ **Replies:** 0\ **Last updated:** [December 9, 2021, 10:47am UTC](https://discuss.elastic.co/t/anadir-valor-mediante-scripted-field-a-otro-campo/291312 "2021-12-09T10:47:44Z")
Hola, alguien me puede ayudar. Necesito mediante scripted fields copiar una dato de un campo a otro campo existente. Es decir: el nombre del scripted filed es: vMEDIO if (doc\['CANAL'\].value.toString().length() \>= 5 &&… --- ## [ELK stack setup](https://discuss.elastic.co/t/elk-stack-setup/291292)
**Author:** [@girija](https://discuss.elastic.co/u/girija)\ **Replies:** 2\ **Last updated:** [December 9, 2021, 9:20am UTC](https://discuss.elastic.co/t/elk-stack-setup/291292 "2021-12-09T09:20:29Z")
Hello I am new to the ELK world and find myself confused. Although my stack is working fine and I am able to get the logs I want, I am not sure about what all is really required for correct setup and if I have anything … --- ## [Is this a right filter?](https://discuss.elastic.co/t/is-this-a-right-filter/291118)
**Author:** [@smam](https://discuss.elastic.co/u/smam)\ **Replies:** 4\ **Last updated:** [December 9, 2021, 9:18am UTC](https://discuss.elastic.co/t/is-this-a-right-filter/291118 "2021-12-09T09:18:03Z")
filter { if "warning" in "message" { mutate { add\_field =\> { "error-field" =\> "An error occured" } } } } Is this right? Because it seems to not be working. If I open Elasticsearch and… --- ## [Ignore\_throttled parameter is deprecated](https://discuss.elastic.co/t/ignore-throttled-parameter-is-deprecated/291224)
**Author:** [@SirConius](https://discuss.elastic.co/u/SirConius)\ **Replies:** 2\ **Last updated:** [December 9, 2021, 9:00am UTC](https://discuss.elastic.co/t/ignore-throttled-parameter-is-deprecated/291224 "2021-12-09T09:00:43Z")
I've updated my Elasticsearch installation from 7.15.2 to 7.16, but when I open a dashboard I'm greeted with the following Warning: I looked in the deprecated log file before updating and this wasn't in there and I ha… --- ## [Is posible to set a text as optional in RegularExpresions?](https://discuss.elastic.co/t/is-posible-to-set-a-text-as-optional-in-regularexpresions/291114)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 2\ **Last updated:** [December 9, 2021, 8:22am UTC](https://discuss.elastic.co/t/is-posible-to-set-a-text-as-optional-in-regularexpresions/291114 "2021-12-09T08:22:43Z")
Hola! Se puede poner textos como opcionales en regex? these days im reciving some logs with this format: \[07/12/2021 09:59:33 \[Id XXXXXXXXXXXXXXXX\] Parameters send to YYYYYY: action1: AAAAAAAAAAAA action2: BBBBBBBBB… --- ## [Is posible to have iptional field with regex as grok optionals fields?](https://discuss.elastic.co/t/is-posible-to-have-iptional-field-with-regex-as-grok-optionals-fields/290645)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 5\ **Last updated:** [December 9, 2021, 8:18am UTC](https://discuss.elastic.co/t/is-posible-to-have-iptional-field-with-regex-as-grok-optionals-fields/290645 "2021-12-09T08:18:25Z")
Hello! i want to know if a could set a field as optional in regular expresions as i do with grok for example: (%{DATA:Message})? Thank you! --- ## [Dec 9th, 2021: \[en\] Getting started with security enabled by default in three easy steps](https://discuss.elastic.co/t/dec-9th-2021-en-getting-started-with-security-enabled-by-default-in-three-easy-steps/289280)
**Author:** [@Fabio\_Busatto](https://discuss.elastic.co/u/Fabio_Busatto)\ **Replies:** 0\ **Last updated:** [December 9, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-9th-2021-en-getting-started-with-security-enabled-by-default-in-three-easy-steps/289280 "2021-12-09T08:00:45Z")
Elasticsearch 8.0 will come with security features enabled by default. This is a huge step forward to ensure that deployments are not unintentionally exposed to the world. We already saw that too many times in the past.… --- ## [Merging two fields in a visualization](https://discuss.elastic.co/t/merging-two-fields-in-a-visualization/291139)
**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\ **Replies:** 4\ **Last updated:** [December 9, 2021, 7:53am UTC](https://discuss.elastic.co/t/merging-two-fields-in-a-visualization/291139 "2021-12-09T07:53:43Z")
Team! I need to merge two fields into one in a Kibana visualization. Does anyone know how to do that? Have a good one :slight\_smile: --- ## [Unable to create index on elasticsearch](https://discuss.elastic.co/t/unable-to-create-index-on-elasticsearch/290657)
**Author:** [@Somesh\_ng](https://discuss.elastic.co/u/Somesh_ng)\ **Replies:** 5\ **Last updated:** [December 9, 2021, 7:27am UTC](https://discuss.elastic.co/t/unable-to-create-index-on-elasticsearch/290657 "2021-12-09T07:27:47Z")
I'm trying to ingest the data into Elasticsearch using logstash http\_poller but the index is not getting created in Elasticsearch. Can someone help me on this input { http\_poller { urls =\> { "te… --- ## [Increase Kibana data table bucket size](https://discuss.elastic.co/t/increase-kibana-data-table-bucket-size/291284)
**Author:** [@cps598](https://discuss.elastic.co/u/cps598)\ **Replies:** 1\ **Last updated:** [December 9, 2021, 7:40am UTC](https://discuss.elastic.co/t/increase-kibana-data-table-bucket-size/291284 "2021-12-09T07:40:21Z")
Kibana v 7.15.1 I want to show some items in the Kibana data table. And I found that the size of the bucket restricts the showing results. For example, if I set the size to 20, some log data will not be displayed on the… --- ## [How to fix cluster is red, reason: no\_valid\_shard\_copy after stopping data nodes?](https://discuss.elastic.co/t/how-to-fix-cluster-is-red-reason-no-valid-shard-copy-after-stopping-data-nodes/291206)
**Author:** [@bugb](https://discuss.elastic.co/u/bugb)\ **Replies:** 6\ **Last updated:** [December 9, 2021, 7:39am UTC](https://discuss.elastic.co/t/how-to-fix-cluster-is-red-reason-no-valid-shard-copy-after-stopping-data-nodes/291206 "2021-12-09T07:39:33Z")
After stopping some data nodes, my cluster becomes red and the reason is: no\_valid\_shard\_copy after stopping data nodes? How can I fix this? Update: should I use reroute? POST \_cluster/reroute?retry\_failed --- ## [Hyphenation token filter seems to ignore minimum subword size](https://discuss.elastic.co/t/hyphenation-token-filter-seems-to-ignore-minimum-subword-size/291295)
**Author:** [@mariskaas](https://discuss.elastic.co/u/mariskaas)\ **Replies:** 0\ **Last updated:** [December 9, 2021, 7:28am UTC](https://discuss.elastic.co/t/hyphenation-token-filter-seems-to-ignore-minimum-subword-size/291295 "2021-12-09T07:28:45Z")
Hello, I was looking to use the hyphenation decompounder filter. However during testing I found out it seems to be ignoring the minimum subword size option. Here is an example analyze I tried (normally I use a text fil… --- ## [How to list out all \*\*hidden\*\* indices in a cluster](https://discuss.elastic.co/t/how-to-list-out-all-hidden-indices-in-a-cluster/291291)
**Author:** [@Bruce\_Liu](https://discuss.elastic.co/u/Bruce_Liu)\ **Replies:** 1\ **Last updated:** [December 9, 2021, 5:59am UTC](https://discuss.elastic.co/t/how-to-list-out-all-hidden-indices-in-a-cluster/291291 "2021-12-09T05:59:15Z")
I'm trying to list out all hidden indices in a cluster. I tried GET \_cat/indices?expand\_wildcards=hidden,open&v, but even the status of the hidden index(index.hidden=true) is open, and the request lists out all open indi… --- ## [No detailed errors in logstash](https://discuss.elastic.co/t/no-detailed-errors-in-logstash/291233)
**Author:** [@SSivaji](https://discuss.elastic.co/u/SSivaji)\ **Replies:** 2\ **Last updated:** [December 9, 2021, 3:05am UTC](https://discuss.elastic.co/t/no-detailed-errors-in-logstash/291233 "2021-12-09T03:05:58Z")
When I try to Index a specific text. Able to index a in devtools, but when the same text is provided via logstash it is not getting Indexed, enabled debug logs it just prints the text to console, but not getting Indexe… --- ## [Fleet Seperation of agents and policies](https://discuss.elastic.co/t/fleet-seperation-of-agents-and-policies/290292)
**Author:** [@Dea](https://discuss.elastic.co/u/Dea)\ **Replies:** 1\ **Last updated:** [December 8, 2021, 10:29pm UTC](https://discuss.elastic.co/t/fleet-seperation-of-agents-and-policies/290292 "2021-12-08T22:29:52Z")
Hi We would like to know how to separate agents and polices into different "Spaces/sites". At the moment we see all agents and policies in all spaces. Please advise Thank you --- ## [How to do join field/routing in bigquery to elasticsearch dataflow template?](https://discuss.elastic.co/t/how-to-do-join-field-routing-in-bigquery-to-elasticsearch-dataflow-template/291269)
**Author:** [@rickbenchsci](https://discuss.elastic.co/u/rickbenchsci)\ **Replies:** 0\ **Last updated:** [December 8, 2021, 10:27pm UTC](https://discuss.elastic.co/t/how-to-do-join-field-routing-in-bigquery-to-elasticsearch-dataflow-template/291269 "2021-12-08T22:27:29Z")
Hi, I am using the dataflow template provided by google for importing data from BigQuery to Elasticsearch. see here We managed to get the thing working (sans API key. adding basic auth overwrites the need for it), and … --- ## [TSVB metrics moving around/shaking on screen and strange refresh behaviour](https://discuss.elastic.co/t/tsvb-metrics-moving-around-shaking-on-screen-and-strange-refresh-behaviour/291167)
**Author:** [@Sketchy](https://discuss.elastic.co/u/Sketchy)\ **Replies:** 2\ **Last updated:** [December 8, 2021, 9:59pm UTC](https://discuss.elastic.co/t/tsvb-metrics-moving-around-shaking-on-screen-and-strange-refresh-behaviour/291167 "2021-12-08T21:59:04Z")
Having issues, for a long time now with the TSVB metrics moving around on the screen, shaking about/moving side to side. It used to be much worse in previous versions and I have seen the issue happening again recently on… --- ## [Processing Multiple Rows From JDBC Streaming](https://discuss.elastic.co/t/processing-multiple-rows-from-jdbc-streaming/291012)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 22\ **Last updated:** [December 8, 2021, 8:37pm UTC](https://discuss.elastic.co/t/processing-multiple-rows-from-jdbc-streaming/291012 "2021-12-08T20:37:51Z")
I'm querying a database to get questions asked in a ticket. The query asks for all questions asked by the ticket id. So a single query may return multiple rows. I'd like to be able to parse them all into separate fiel… --- ## [CSV Illegal Quoting in Line 1](https://discuss.elastic.co/t/csv-illegal-quoting-in-line-1/289834)
**Author:** [@Micah\_Barsness](https://discuss.elastic.co/u/Micah_Barsness)\ **Replies:** 13\ **Last updated:** [December 8, 2021, 8:19pm UTC](https://discuss.elastic.co/t/csv-illegal-quoting-in-line-1/289834 "2021-12-08T20:19:33Z")
I'm receiving the following error & some of my incoming logs are being not being parsed and therefore dropped. \[2021-11-22T09:50:11,381\]\[WARN \]\[logstash.filters.csv \]\[MID-CUCM\]\[6a45eeb30e5ba587e03ab6fc5b123b705e6e76… --- ## [No data after CSV Export - Kibana](https://discuss.elastic.co/t/no-data-after-csv-export-kibana/288486)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 5\ **Last updated:** [December 8, 2021, 7:24pm UTC](https://discuss.elastic.co/t/no-data-after-csv-export-kibana/288486 "2021-12-08T19:24:34Z")
Continuing the discussion from Reporting - CSV Export: contains partial data: Hi Team, currently we are facing two issues related to csv Export. If index is frozen then how to export data in csv as we are getting emp… --- ## [Dashboard - Creating a complex graph with 3 metrics](https://discuss.elastic.co/t/dashboard-creating-a-complex-graph-with-3-metrics/291121)
**Author:** [@Alice\_S](https://discuss.elastic.co/u/Alice_S)\ **Replies:** 1\ **Last updated:** [December 8, 2021, 7:10pm UTC](https://discuss.elastic.co/t/dashboard-creating-a-complex-graph-with-3-metrics/291121 "2021-12-08T19:10:26Z")
Hi, I would really appreciate getting some help: I'm trying to visualize my data in a more convenient way and to combine 3 graphs into one. The graph should show distinct users and the sum of a specific column by time… --- ## [Exporting large number of objects from Kibana - errors](https://discuss.elastic.co/t/exporting-large-number-of-objects-from-kibana-errors/291158)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 2\ **Last updated:** [December 8, 2021, 6:59pm UTC](https://discuss.elastic.co/t/exporting-large-number-of-objects-from-kibana-errors/291158 "2021-12-08T18:59:38Z")
Hi there, We have v7.5 Elasticsearch/Kibana. Trying to export Saved Objects in prod (~12,000 objects). But it's erroring with this reason in Kibana with this error: Unable to generate export. Here are the Kibana logs at… --- ## [Elasticsearch-PHP requires cURL, or a custom HTTP handler](https://discuss.elastic.co/t/elasticsearch-php-requires-curl-or-a-custom-http-handler/291250)
**Author:** [@tranha31](https://discuss.elastic.co/u/tranha31)\ **Replies:** 0\ **Last updated:** [December 8, 2021, 6:16pm UTC](https://discuss.elastic.co/t/elasticsearch-php-requires-curl-or-a-custom-http-handler/291250 "2021-12-08T18:16:58Z")
I try to connect Elasticsearch from php with Elasticsearch-php Library. But it notices 127.0.0.1:43202 \[500\]: GET /main.php?q=a - Uncaught RuntimeException: Elasticsearch-PHP requires cURL, or a custom HTTP handler. in… --- ## [SORTING, SUM, PAGINATION, and AGGREGATION all in one!](https://discuss.elastic.co/t/sorting-sum-pagination-and-aggregation-all-in-one/291248)
**Author:** [@michael\_jaskiewicz](https://discuss.elastic.co/u/michael_jaskiewicz)\ **Replies:** 0\ **Last updated:** [December 8, 2021, 6:04pm UTC](https://discuss.elastic.co/t/sorting-sum-pagination-and-aggregation-all-in-one/291248 "2021-12-08T18:04:42Z")
'm using Elasticsearch and I see questions now and then about doing some aggregations with sorting or aggregations with paging, but I never see anything GROUP\_BY, SUM, SORT, and PAGINATION together. If I were to write wh… --- ## [Imap input gives weird error](https://discuss.elastic.co/t/imap-input-gives-weird-error/290671)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 6\ **Last updated:** [December 8, 2021, 5:16pm UTC](https://discuss.elastic.co/t/imap-input-gives-weird-error/290671 "2021-12-08T17:16:38Z")
Hello, I want to run imap plugin to load some reporting mails into Elasticsearch. I have it configured as the following: input { imap { check\_interval =\> "10" host =\> "host" port =\> "995" user =\> "em… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=757) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=759)