# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=762 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 763 --- ## [Unit elasticsearch.service has failed to start on centos 7](https://discuss.elastic.co/t/unit-elasticsearch-service-has-failed-to-start-on-centos-7/290224)
**Author:** [@dan\_bau](https://discuss.elastic.co/u/dan_bau)\ **Replies:** 10\ **Last updated:** [December 5, 2021, 11:49pm UTC](https://discuss.elastic.co/t/unit-elasticsearch-service-has-failed-to-start-on-centos-7/290224 "2021-12-05T23:49:10Z")
Can you please help? rpm -qa|grep elasticsearch elasticsearch-7.15.2-1.x86\_64 Nov 25 23:20:01 vps.ovh.net crond\[2260\]: WARNING: RunAsUser for MSP ignored, check group ids (egid=48, want=51) Nov 25 23:20:01 vps.ovh.net … --- ## [Logstash cannot Index Log Files into Elasticsearch](https://discuss.elastic.co/t/logstash-cannot-index-log-files-into-elasticsearch/290408)
**Author:** [@Amol](https://discuss.elastic.co/u/Amol)\ **Replies:** 3\ **Last updated:** [December 5, 2021, 12:20pm UTC](https://discuss.elastic.co/t/logstash-cannot-index-log-files-into-elasticsearch/290408 "2021-12-05T12:20:06Z")
Could anyone please help, as i have a logstash config file which need to pick log file when it is updated with new logs. once logstash is started it is working fine, but next day the log file is updated but the data is n… --- ## [Search multiple indices](https://discuss.elastic.co/t/search-multiple-indices/290972)
**Author:** [@Alireza\_Niary](https://discuss.elastic.co/u/Alireza_Niary)\ **Replies:** 3\ **Last updated:** [December 5, 2021, 8:50am UTC](https://discuss.elastic.co/t/search-multiple-indices/290972 "2021-12-05T08:50:22Z")
Is search on multiple indices asynchronous from each other? if I use "GET /my-index-1,my-index-2/\_search" dose Elasticsearch, search both indices simultaneous or in turn? I'm assuming that there is one node and single… --- ## [Dec 5th, 2021: \[ko\] Elastic Agent, 어떻게 사용하는건가요?](https://discuss.elastic.co/t/dec-5th-2021-ko-elastic-agent/290012)
**Author:** [@JongminKim](https://discuss.elastic.co/u/JongminKim)\ **Replies:** 0\ **Last updated:** [December 5, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-5th-2021-ko-elastic-agent/290012 "2021-12-05T08:00:17Z")
소문만 무성하고 얼굴을 잘 보여주지 않았던 Elastic Agent 가 7.8 버전에서 드디어 출시가 되었고 GA 가 되었습니다. 그런데 아직 많이들 사용 해 보지 않으셨죠? 그래서, 오늘 한번 Elastic Agent 를 어떻게 사용하는지 한번 살펴보려고 합니다. 예전에는 Elasticsearch 로 데이터 수집을 위해서는 Logstash 그리고 Beats 를 활용했습니다. 물론 지금도… --- ## [Is there a way to filter by date and not by date time in Kibana Lens?](https://discuss.elastic.co/t/is-there-a-way-to-filter-by-date-and-not-by-date-time-in-kibana-lens/289387)
**Author:** [@Arrick](https://discuss.elastic.co/u/Arrick)\ **Replies:** 8\ **Last updated:** [December 5, 2021, 7:08am UTC](https://discuss.elastic.co/t/is-there-a-way-to-filter-by-date-and-not-by-date-time-in-kibana-lens/289387 "2021-12-05T07:08:03Z")
I've recently tried to use kibana lens and realised that my time filter in control is filtering by date time. Is there a way to make it filter by date instead? what I plan to obtain is something similar to this: --- ## [Would having multiple ports/connections improve performance in a cluster](https://discuss.elastic.co/t/would-having-multiple-ports-connections-improve-performance-in-a-cluster/290959)
**Author:** [@soundof](https://discuss.elastic.co/u/soundof)\ **Replies:** 2\ **Last updated:** [December 4, 2021, 8:28pm UTC](https://discuss.elastic.co/t/would-having-multiple-ports-connections-improve-performance-in-a-cluster/290959 "2021-12-04T20:28:35Z")
Hi Im new to Elasticsearch and setting up a cluster with 3 nodes. Each server/node has multiple ethernet ports on the networking adapter. Would configuring the Elasticsearch node to have 2 IPs/ports increase performanc… --- ## [I need clear instruction to remove endpoint as it destruc my system](https://discuss.elastic.co/t/i-need-clear-instruction-to-remove-endpoint-as-it-destruc-my-system/290906)
**Author:** [@cthibault](https://discuss.elastic.co/u/cthibault)\ **Replies:** 2\ **Last updated:** [December 4, 2021, 6:31pm UTC](https://discuss.elastic.co/t/i-need-clear-instruction-to-remove-endpoint-as-it-destruc-my-system/290906 "2021-12-04T18:31:39Z")
ELK is destroing all the computer in my office by using all the drive space, all the RAM et all the bandwidth. I need to remove this scrap as soon as possible. HELP... --- ## [Scatter plot which uses data source from Enhanced table on Dashboard](https://discuss.elastic.co/t/scatter-plot-which-uses-data-source-from-enhanced-table-on-dashboard/290871)
**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\ **Replies:** 1\ **Last updated:** [December 4, 2021, 6:04pm UTC](https://discuss.elastic.co/t/scatter-plot-which-uses-data-source-from-enhanced-table-on-dashboard/290871 "2021-12-04T18:04:37Z")
Hi, I have Enhanced table plugin installed and I created pivot table which is visible on Dashboard. Underneath, I would like to have scatter plot which would be using data source not from index but from this pivot table… --- ## [Debugger works for everything but plugin](https://discuss.elastic.co/t/debugger-works-for-everything-but-plugin/290962)
**Author:** [@devin244](https://discuss.elastic.co/u/devin244)\ **Replies:** 0\ **Last updated:** [December 4, 2021, 5:57pm UTC](https://discuss.elastic.co/t/debugger-works-for-everything-but-plugin/290962 "2021-12-04T17:57:45Z")
I have set up debugging in all Kibana source code so that breakpoints work. I cannot get breakpoints working for my plugin code though. Here's what I've done so far. Cloned Kibana Got debugging working after huge effor… --- ## [Kibana and REST API output](https://discuss.elastic.co/t/kibana-and-rest-api-output/290950)
**Author:** [@rimvydukas](https://discuss.elastic.co/u/rimvydukas)\ **Replies:** 1\ **Last updated:** [December 4, 2021, 3:21pm UTC](https://discuss.elastic.co/t/kibana-and-rest-api-output/290950 "2021-12-04T15:21:25Z")
Hi, I'm complete newbie with Elasticsearch, so sorry for maybe simple questions:) My problem. I'm trying to retrieve index patterns via Kibana's REST API. I'm trying to use the following command: curl -X GET "localhost… --- ## [How to add country name field based on mobile number using Mobile\_Number using logstash](https://discuss.elastic.co/t/how-to-add-country-name-field-based-on-mobile-number-using-mobile-number-using-logstash/289588)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 2\ **Last updated:** [December 4, 2021, 3:08pm UTC](https://discuss.elastic.co/t/how-to-add-country-name-field-based-on-mobile-number-using-mobile-number-using-logstash/289588 "2021-12-04T15:08:51Z")
Hi, I am having logs in txt file contains fields below. I want to extract country code from mobile number and create (translate) into new field called country. I checked with translate filter but not getting how to ext… --- ## [Building Pie chart in kibana](https://discuss.elastic.co/t/building-pie-chart-in-kibana/290150)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 6\ **Last updated:** [December 4, 2021, 2:26pm UTC](https://discuss.elastic.co/t/building-pie-chart-in-kibana/290150 "2021-12-04T14:26:21Z")
Hi, I have tried build pie chart on field such as "STAT" and "Sender\_", but some logs contain only the "STAT" field and some logs contain "Sender\_id". I tried building viz on two parameters but it's not working through … --- ## [Elascicsearch was running in mbp m1 pro much slower than intel platform](https://discuss.elastic.co/t/elascicsearch-was-running-in-mbp-m1-pro-much-slower-than-intel-platform/290952)
**Author:** [@wangxueyuan](https://discuss.elastic.co/u/wangxueyuan)\ **Replies:** 2\ **Last updated:** [December 4, 2021, 1:05pm UTC](https://discuss.elastic.co/t/elascicsearch-was-running-in-mbp-m1-pro-much-slower-than-intel-platform/290952 "2021-12-04T13:05:50Z")
I just got a mbp m1 pro .And I found that using es 7.15.2 , in my think pad I just can complete my procedure in just 3 minuts . The contents of procedure is just writing index data to es.But I installed es 7.15.2 and run… --- ## [Logstash bytes plugin behaving weirdly](https://discuss.elastic.co/t/logstash-bytes-plugin-behaving-weirdly/290947)
**Author:** [@tkauffmann](https://discuss.elastic.co/u/tkauffmann)\ **Replies:** 0\ **Last updated:** [December 4, 2021, 9:39am UTC](https://discuss.elastic.co/t/logstash-bytes-plugin-behaving-weirdly/290947 "2021-12-04T09:39:44Z")
Hi, I am trying to use the "Bytes" plugin (Bytes filter plugin | Logstash Reference \[8.0\] | Elastic) to transform fields in the form "1 GB" to their bytes value. I use the following syntax : bytes { sour… --- ## [Queries on keyword field are extremely slow](https://discuss.elastic.co/t/queries-on-keyword-field-are-extremely-slow/290833)
**Author:** [@Mujo](https://discuss.elastic.co/u/Mujo)\ **Replies:** 4\ **Last updated:** [December 4, 2021, 8:52am UTC](https://discuss.elastic.co/t/queries-on-keyword-field-are-extremely-slow/290833 "2021-12-04T08:52:25Z")
I use Elasticsearch for text search. Sentences used for indexing are first split into words and then each word is attached with its corresponding POS tag as below: Raw sentence: word1 word2 word3 word4. Sentence for i… --- ## [Can't run Kibana after installing on Archlinux (Failed to fetch)](https://discuss.elastic.co/t/cant-run-kibana-after-installing-on-archlinux-failed-to-fetch/290240)
**Author:** [@gachistyakov](https://discuss.elastic.co/u/gachistyakov)\ **Replies:** 2\ **Last updated:** [December 4, 2021, 8:03am UTC](https://discuss.elastic.co/t/cant-run-kibana-after-installing-on-archlinux-failed-to-fetch/290240 "2021-12-04T08:03:33Z")
I have installed Elasticsearch as stated in the resource https://wiki.archlinux.org/title/Elasticsearch. After that I had the store "/usr/share/Elasticsearch/config/Elasticsearch.keystore" created, so I didn’t recreate i… --- ## [Dec 4th, 2021: \[it\] Trucchi e consigli avanzati per Lens](https://discuss.elastic.co/t/dec-4th-2021-it-trucchi-e-consigli-avanzati-per-lens/290689)
**Author:** [@Marco\_Liberati](https://discuss.elastic.co/u/Marco_Liberati)\ **Replies:** 0\ **Last updated:** [December 4, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-4th-2021-it-trucchi-e-consigli-avanzati-per-lens/290689 "2021-12-04T08:00:26Z")
Questo articolo è disponibile anche in inglese. Lens è uno strumento relativamente nuovo in Kibana, rilasciato in versione stabile meno di un anno fa come strumento universale per visualizzazioni, ma ha già attratto mol… --- ## [Dec 4th, 2021: \[en\] Advanced trick and tips in Lens](https://discuss.elastic.co/t/dec-4th-2021-en-advanced-trick-and-tips-in-lens/289935)
**Author:** [@Marco\_Liberati](https://discuss.elastic.co/u/Marco_Liberati)\ **Replies:** 0\ **Last updated:** [December 4, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-4th-2021-en-advanced-trick-and-tips-in-lens/289935 "2021-12-04T08:00:26Z")
This article is also available in Italian. Lens is a relatively new tool in Kibana, which went GA less than a year ago as universal visualization editor, and already gained some interest for its advanced features minor … --- ## [Troubleshooting Metricbeat StatsD Module and Custom Metrics](https://discuss.elastic.co/t/troubleshooting-metricbeat-statsd-module-and-custom-metrics/290938)
**Author:** [@Jeremy\_Gillick](https://discuss.elastic.co/u/Jeremy_Gillick)\ **Replies:** 0\ **Last updated:** [December 4, 2021, 1:28am UTC](https://discuss.elastic.co/t/troubleshooting-metricbeat-statsd-module-and-custom-metrics/290938 "2021-12-04T01:28:57Z")
I installed the Metricbeat StatsD module a few days ago and it's reporting data on the machine it's installed on, but not reporting any custom metrics I send to it. For example: echo "test.metric:1|c" | nc -u -w0 \ **Author:** [@thanhlam](https://discuss.elastic.co/u/thanhlam)\ **Replies:** 4\ **Last updated:** [December 3, 2021, 9:42pm UTC](https://discuss.elastic.co/t/kibana-7-5-1-web-error-private-is-not-a-function-in-bundles-commons-bundle-js/289712 "2021-12-03T21:42:32Z") Hello, I just wonder if anyone here have seen following problem after installing a plugin to kibana, version 7.5.1. If I removed the plugin then everything worked fine. After installing the plugin, kibana started fine … --- ## [Elasticsearch Engineering Observability - Where is the terminal screen to do SSH?](https://discuss.elastic.co/t/elasticsearch-engineering-observability-where-is-the-terminal-screen-to-do-ssh/290907)
**Author:** [@Brendanluvsdata](https://discuss.elastic.co/u/Brendanluvsdata)\ **Replies:** 1\ **Last updated:** [December 3, 2021, 8:57pm UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-where-is-the-terminal-screen-to-do-ssh/290907 "2021-12-03T20:57:14Z")
The lab just casually tells you to SSH into the SQL database, but it doesn't tell you where the terminal screen is located in the lab. Can anyone help? --- ## [Push logstash aggregate map as fields in final event](https://discuss.elastic.co/t/push-logstash-aggregate-map-as-fields-in-final-event/290929)
**Author:** [@Joe\_Martin](https://discuss.elastic.co/u/Joe_Martin)\ **Replies:** 3\ **Last updated:** [December 3, 2021, 8:39pm UTC](https://discuss.elastic.co/t/push-logstash-aggregate-map-as-fields-in-final-event/290929 "2021-12-03T20:39:54Z")
I am trying to use an aggregate filter to pull fields from several different but related logs into one "summary" log. There is a clear end\_of\_task event and I would like to "push"/add all of the fields in the map into t… --- ## [Updated "hardware" recommendations?](https://discuss.elastic.co/t/updated-hardware-recommendations/290930)
**Author:** [@Jamshid](https://discuss.elastic.co/u/Jamshid)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 8:34pm UTC](https://discuss.elastic.co/t/updated-hardware-recommendations/290930 "2021-12-03T20:34:51Z")
Just wondering if there is an updated doc similar to the very helpful 2.3 guide It summarized memory, disk, and network configuration information and is probably still relevant but I can't find a modern version of the … --- ## [Suggested pipline for rsyslog](https://discuss.elastic.co/t/suggested-pipline-for-rsyslog/290919)
**Author:** [@aqwserf](https://discuss.elastic.co/u/aqwserf)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 5:03pm UTC](https://discuss.elastic.co/t/suggested-pipline-for-rsyslog/290919 "2021-12-03T17:03:40Z")
Hi everyone ! Quite new user to the ELK stack, and after reading a lot of docs/threads, I'd like some suggestions about my current situation. I have a couple of SOHO router running Openwrt, a Proxmox server and a VPS. … --- ## [Logstash CSV output generation](https://discuss.elastic.co/t/logstash-csv-output-generation/290285)
**Author:** [@elk\_chaser](https://discuss.elastic.co/u/elk_chaser)\ **Replies:** 1\ **Last updated:** [December 3, 2021, 5:03pm UTC](https://discuss.elastic.co/t/logstash-csv-output-generation/290285 "2021-12-03T17:03:03Z")
I have a logstash csv output report generation config, that I run as a separate logstash instance as and when it is required. I have many csv report to be generated and for each, I have one config file. Everytime I run t… --- ## [Partial substring search that contains whitespaces or special chars like file contains "1 - document" doesnt work](https://discuss.elastic.co/t/partial-substring-search-that-contains-whitespaces-or-special-chars-like-file-contains-1-document-doesnt-work/290883)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 1\ **Last updated:** [December 3, 2021, 4:49pm UTC](https://discuss.elastic.co/t/partial-substring-search-that-contains-whitespaces-or-special-chars-like-file-contains-1-document-doesnt-work/290883 "2021-12-03T16:49:06Z")
We have an application that store and query data in Elasticsearch. We have a problem when searching for partial substrings that contains a word with special chats like "notepad++.exe" or "/folder1/file1.txt" or "new text… --- ## [Point in time snapshot (PIT id), original query required when paging?](https://discuss.elastic.co/t/point-in-time-snapshot-pit-id-original-query-required-when-paging/290097)
**Author:** [@tamis-laan](https://discuss.elastic.co/u/tamis-laan)\ **Replies:** 5\ **Last updated:** [December 3, 2021, 4:45pm UTC](https://discuss.elastic.co/t/point-in-time-snapshot-pit-id-original-query-required-when-paging/290097 "2021-12-03T16:45:53Z")
I implemented pagination inside an API using point in time snapshots for efficiency. In the first request a PIT is generated and in subsequent requests the PIT is being supplied with the request. What I would like to do… --- ## [Need to build visualization like how much time user stay on web page](https://discuss.elastic.co/t/need-to-build-visualization-like-how-much-time-user-stay-on-web-page/290759)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 3\ **Last updated:** [December 3, 2021, 4:25pm UTC](https://discuss.elastic.co/t/need-to-build-visualization-like-how-much-time-user-stay-on-web-page/290759 "2021-12-03T16:25:06Z")
Hello All, We have apache logs. We need to build visualization like how much time user stay on web page? Is this possible to determine above information by using below logs? How? 222.105.82.235 - - \[16/Nov/2021:10:04:… --- ## [LogStash with distributor pattern, relay pipelines problem](https://discuss.elastic.co/t/logstash-with-distributor-pattern-relay-pipelines-problem/290880)
**Author:** [@djehuty](https://discuss.elastic.co/u/djehuty)\ **Replies:** 7\ **Last updated:** [December 3, 2021, 4:12pm UTC](https://discuss.elastic.co/t/logstash-with-distributor-pattern-relay-pipelines-problem/290880 "2021-12-03T16:12:49Z")
Hi everyone, i recently changed my LogStash configuration from multiple pipelines input to 3 pipelines, relaying on another local pipelines with distributor. Now, i've tried to send and udp json to the udp pipeline, wi… --- ## [Not able to search or aggregate values from a field included lately in the mapping](https://discuss.elastic.co/t/not-able-to-search-or-aggregate-values-from-a-field-included-lately-in-the-mapping/290836)
**Author:** [@Fabio\_Batalha](https://discuss.elastic.co/u/Fabio_Batalha)\ **Replies:** 4\ **Last updated:** [December 3, 2021, 4:12pm UTC](https://discuss.elastic.co/t/not-able-to-search-or-aggregate-values-from-a-field-included-lately-in-the-mapping/290836 "2021-12-03T16:12:02Z")
Hello there! I have a field (log\_file\_name) in my index that was not included in the mapping since de index was created. All records have the field but no mapping was defined to it. My mapping is configured as dynamic =… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=761) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=763)