# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=765 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 766 --- ## [Schedule csv](https://discuss.elastic.co/t/schedule-csv/290575)
**Author:** [@lnunez](https://discuss.elastic.co/u/lnunez)\ **Replies:** 1\ **Last updated:** [December 1, 2021, 7:43pm UTC](https://discuss.elastic.co/t/schedule-csv/290575 "2021-12-01T19:43:39Z")
It is not possible to schedule the csv using file as input, I've tried also the approach mentioned here: Cron job for CSV filter, which is using exec. But as is mentioned in the documentation: (Cron job for CSV filter) … --- ## [Multiple output sequence](https://discuss.elastic.co/t/multiple-output-sequence/290640)
**Author:** [@zhanggengengen](https://discuss.elastic.co/u/zhanggengengen)\ **Replies:** 1\ **Last updated:** [December 1, 2021, 7:25pm UTC](https://discuss.elastic.co/t/multiple-output-sequence/290640 "2021-12-01T19:25:01Z")
I have two output,the first is http-output,and the second is elasticsearch-output. What i want to do is execute http-output before elasticsearch-output. How can i do that? The problem I have is this I need delete it be… --- ## [Unicode whitespace in configuration files](https://discuss.elastic.co/t/unicode-whitespace-in-configuration-files/290651)
**Author:** [@jmb](https://discuss.elastic.co/u/jmb)\ **Replies:** 2\ **Last updated:** [December 1, 2021, 7:21pm UTC](https://discuss.elastic.co/t/unicode-whitespace-in-configuration-files/290651 "2021-12-01T19:21:28Z")
Is Logstash expected to handle Unicode (UTF-8) in its configuration files? I found an issue today where a pipeline (actually, an Elasticsearch mapping template file) which looks perfectly good fails to load because some… --- ## [How to remove the fields](https://discuss.elastic.co/t/how-to-remove-the-fields/290663)
**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\ **Replies:** 3\ **Last updated:** [December 1, 2021, 7:19pm UTC](https://discuss.elastic.co/t/how-to-remove-the-fields/290663 "2021-12-01T19:19:28Z")
Hi, I am using filebeat to ship logs to logstash, and creating index. Now while visualising logs from kibana there are many unwanted fields i am seeing like agent.id, cloud.account.id. I want to remove all the fields. I… --- ## [Can I modify either Winlogbeat or Filebeat to collect and send Alert and Audit data from McAfee EPO](https://discuss.elastic.co/t/can-i-modify-either-winlogbeat-or-filebeat-to-collect-and-send-alert-and-audit-data-from-mcafee-epo/290703)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 0\ **Last updated:** [December 1, 2021, 6:15pm UTC](https://discuss.elastic.co/t/can-i-modify-either-winlogbeat-or-filebeat-to-collect-and-send-alert-and-audit-data-from-mcafee-epo/290703 "2021-12-01T18:15:02Z")
I am looking for an efficient way to have my ELK stack SIEM pull Alert and Audit logs from my three ePO servers. Each ePO server will only be able to use UDP as the rest of the environment is locked down and they are in… --- ## [How do i fix Unassigned Replicas on cluster?](https://discuss.elastic.co/t/how-do-i-fix-unassigned-replicas-on-cluster/290699)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 5\ **Last updated:** [December 1, 2021, 6:12pm UTC](https://discuss.elastic.co/t/how-do-i-fix-unassigned-replicas-on-cluster/290699 "2021-12-01T18:12:45Z")
Hello, we recently created a cluster on 2 VMs , 1 with Elasticsearch as MASTER node and another with Elasticsearch as DATA node . How do i allocate the replicas ? it seems the primary is allocated but the replicas … --- ## [Create visualization with Lens Error](https://discuss.elastic.co/t/create-visualization-with-lens-error/290687)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 2\ **Last updated:** [December 1, 2021, 5:04pm UTC](https://discuss.elastic.co/t/create-visualization-with-lens-error/290687 "2021-12-01T17:04:29Z")
Hi, we are using elastic 7.9.3 After a fresh installation, if we navigate to the Visualize panel and select Create visualization / Lens we get can error saying "Unexpected token u in JSON at position 0" on the UI. If w… --- ## [Zoom in/out on custom picture](https://discuss.elastic.co/t/zoom-in-out-on-custom-picture/290536)
**Author:** [@Testeur](https://discuss.elastic.co/u/Testeur)\ **Replies:** 3\ **Last updated:** [December 1, 2021, 4:45pm UTC](https://discuss.elastic.co/t/zoom-in-out-on-custom-picture/290536 "2021-12-01T16:45:03Z")
Hello, I would like to know if with Kibana it is possible to create our own picture and be able to zoom in/out and put a circle when something has been found. The same as Map functionnalities but on a custom "map". This… --- ## [ES-SQL UNION alternative \[Was: Sql query canvas\]](https://discuss.elastic.co/t/es-sql-union-alternative-was-sql-query-canvas/290637)
**Author:** [@asmaalqasem4](https://discuss.elastic.co/u/asmaalqasem4)\ **Replies:** 7\ **Last updated:** [December 1, 2021, 4:44pm UTC](https://discuss.elastic.co/t/es-sql-union-alternative-was-sql-query-canvas/290637 "2021-12-01T16:44:04Z")
Hello,, I need to implement this query in the canvas but it is not working. is there another way to get the same result? SELECT SUM(amount) \*\* \*FROM (SELECT AMOUNT as amount FROM "payment-index "\* UNION \*\* \*SELECT P… --- ## [Logstash is not taking in account whitespaces at the end of lines ? (grok filter)](https://discuss.elastic.co/t/logstash-is-not-taking-in-account-whitespaces-at-the-end-of-lines-grok-filter/290449)
**Author:** [@duanra22](https://discuss.elastic.co/u/duanra22)\ **Replies:** 2\ **Last updated:** [December 1, 2021, 4:42pm UTC](https://discuss.elastic.co/t/logstash-is-not-taking-in-account-whitespaces-at-the-end-of-lines-grok-filter/290449 "2021-12-01T16:42:41Z")
Hello Elastic community, Sorry if this question has already been asked but I didn't find something that was close to what I'm looking for. I'm new to logstash and I'm trying to use Grok filter. I have a string of conc… --- ## [Dynamically passing to query](https://discuss.elastic.co/t/dynamically-passing-to-query/290471)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 3\ **Last updated:** [December 1, 2021, 4:29pm UTC](https://discuss.elastic.co/t/dynamically-passing-to-query/290471 "2021-12-01T16:29:52Z")
Hi Team, I have below similar logs. I have created dummy index and created mapping like below, PUT new { "mappings": { "properties": { "@timestamp": { "type": "date", "format": "yyyy-MM-d… --- ## [Subheadings in Elasticsearch/clean up system logs](https://discuss.elastic.co/t/subheadings-in-elasticsearch-clean-up-system-logs/289943)
**Author:** [@eprop-marc](https://discuss.elastic.co/u/eprop-marc)\ **Replies:** 12\ **Last updated:** [December 1, 2021, 2:39pm UTC](https://discuss.elastic.co/t/subheadings-in-elasticsearch-clean-up-system-logs/289943 "2021-12-01T14:39:57Z")
Hi, I'm brand new to the whole ELK stack, I've setup one in my company. I just wanted to know how best to clean up the logs, I'm getting a lot of system logs from the server and I don't want them. I just want the logs fr… --- ## [How to confine geopoint aggregation bucket count](https://discuss.elastic.co/t/how-to-confine-geopoint-aggregation-bucket-count/290681)
**Author:** [@FURKAN\_KURT](https://discuss.elastic.co/u/FURKAN_KURT)\ **Replies:** 0\ **Last updated:** [December 1, 2021, 2:45pm UTC](https://discuss.elastic.co/t/how-to-confine-geopoint-aggregation-bucket-count/290681 "2021-12-01T14:45:57Z")
Hello. I could not find how to confine coming aggregated bucket size. I want them to split into smaller pieces if they surpass 100 elements each. Thank you --- ## [Elasticsearch write performance](https://discuss.elastic.co/t/elasticsearch-write-performance/290646)
**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\ **Replies:** 4\ **Last updated:** [December 1, 2021, 1:20pm UTC](https://discuss.elastic.co/t/elasticsearch-write-performance/290646 "2021-12-01T13:20:56Z")
helllo,when i write data to Elasticsearch using the bulk api,which process is flink consume the data of kafka then write to Elasticsearch.sometimes the write performance has Large fluctuations，I want to kown when the ela… --- ## [Disapearing fields during kv parsing](https://discuss.elastic.co/t/disapearing-fields-during-kv-parsing/290652)
**Author:** [@ddoroshenko](https://discuss.elastic.co/u/ddoroshenko)\ **Replies:** 1\ **Last updated:** [December 1, 2021, 1:20pm UTC](https://discuss.elastic.co/t/disapearing-fields-during-kv-parsing/290652 "2021-12-01T13:20:03Z")
Hi! I'm trying to parse the following log record \_\_policy\_id\_tag:"product=APP1 & APP2\[db\_tag={ABCDEF}; mgmt=abcd; date=123456789; policy\_name=foo\]"; product:"APP1 & APP2"; mgmt:"abcd"; event:"Canceled" and when I use … --- ## [ElasticSearch does not allow IPv6-mapped IPv4 address in field of type ip\_range](https://discuss.elastic.co/t/elasticsearch-does-not-allow-ipv6-mapped-ipv4-address-in-field-of-type-ip-range/290656)
**Author:** [@swapnil\_vaidya](https://discuss.elastic.co/u/swapnil_vaidya)\ **Replies:** 0\ **Last updated:** [December 1, 2021, 11:17am UTC](https://discuss.elastic.co/t/elasticsearch-does-not-allow-ipv6-mapped-ipv4-address-in-field-of-type-ip-range/290656 "2021-12-01T11:17:08Z")
Hi All, I am trying to index the document with field having value as IPV6 mapped IPV4 address in the field with type as ip\_range. However ES throws following error: CIDR notation is not allowed with IPv6-mapped IPv4 a… --- ## [How to fetch environment varibles in kibana plugin](https://discuss.elastic.co/t/how-to-fetch-environment-varibles-in-kibana-plugin/290431)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 3\ **Last updated:** [December 1, 2021, 10:51am UTC](https://discuss.elastic.co/t/how-to-fetch-environment-varibles-in-kibana-plugin/290431 "2021-12-01T10:51:12Z")
Hi We are testing kibana plugin in 7.10.2. When we tried to used process.env.TEST\_VALUE in our code and run yarn build on kibana plugin and after unzip when we search for the TEST\_VALUE we get it in the below format in… --- ## [Fast vector highlighter (fvh) making searches slower](https://discuss.elastic.co/t/fast-vector-highlighter-fvh-making-searches-slower/290634)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 6\ **Last updated:** [December 1, 2021, 10:45am UTC](https://discuss.elastic.co/t/fast-vector-highlighter-fvh-making-searches-slower/290634 "2021-12-01T10:45:04Z")
Hi! We recently improved our hit highlighting by utilizing fvh (Lucene Fast Vector Highlighter). The highlighting is done as follows: { "query": {...}, "highlight": { "fields": { "searchableName": { … --- ## [Kibana Reports Hammering CPU](https://discuss.elastic.co/t/kibana-reports-hammering-cpu/290546)
**Author:** [@Evesy](https://discuss.elastic.co/u/Evesy)\ **Replies:** 2\ **Last updated:** [December 1, 2021, 10:20am UTC](https://discuss.elastic.co/t/kibana-reports-hammering-cpu/290546 "2021-12-01T10:20:37Z")
Hi, We recently upgraded our Elastic stack from 6.8 to 7.15 and one thing we've noticed is a pretty noticeable degradation in the performance of CSV reporting in Kibana; reports we were usually generating successfully i… --- ## [Does kibana generate report of sonarqube analysis?](https://discuss.elastic.co/t/does-kibana-generate-report-of-sonarqube-analysis/289256)
**Author:** [@mehmood1](https://discuss.elastic.co/u/mehmood1)\ **Replies:** 2\ **Last updated:** [December 1, 2021, 10:15am UTC](https://discuss.elastic.co/t/does-kibana-generate-report-of-sonarqube-analysis/289256 "2021-12-01T10:15:04Z")
if i configure sonarqube with Elasticsearch. --- ## [Dec 1st, 2021: \[en\] The impact of Elasticsearch source filtering on performance](https://discuss.elastic.co/t/dec-1st-2021-en-the-impact-of-elasticsearch-source-filtering-on-performance/289181)
**Author:** [@Quentin\_Pradet](https://discuss.elastic.co/u/Quentin_Pradet)\ **Replies:** 0\ **Last updated:** [December 1, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2021-en-the-impact-of-elasticsearch-source-filtering-on-performance/289181 "2021-12-01T08:00:43Z")
:information\_source: Ce billet est aussi disponible en français : Dec 1st, 2021: \[fr\] L'impact du filtrage de champs sur les performances d'Elasticsearch A few years ago, I needed to retrieve many documents from Elastic… --- ## [Dec 1st, 2021: \[fr\] L'impact du filtrage de champs sur les performances d'Elasticsearch](https://discuss.elastic.co/t/dec-1st-2021-fr-limpact-du-filtrage-de-champs-sur-les-performances-delasticsearch/290560)
**Author:** [@Quentin\_Pradet](https://discuss.elastic.co/u/Quentin_Pradet)\ **Replies:** 0\ **Last updated:** [December 1, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2021-fr-limpact-du-filtrage-de-champs-sur-les-performances-delasticsearch/290560 "2021-12-01T08:00:43Z")
:information\_source: This post is also available in English: Dec 1st, 2021: \[en\] The impact of Elasticsearch source filtering on performance Il y a quelques années, je voulais récupérer de nombreux documents d'Elasticse… --- ## [How can i find document where the value of a field It is not repeated](https://discuss.elastic.co/t/how-can-i-find-document-where-the-value-of-a-field-it-is-not-repeated/290426)
**Author:** [@Alejandro\_Chaves](https://discuss.elastic.co/u/Alejandro_Chaves)\ **Replies:** 2\ **Last updated:** [December 1, 2021, 8:36am UTC](https://discuss.elastic.co/t/how-can-i-find-document-where-the-value-of-a-field-it-is-not-repeated/290426 "2021-12-01T08:36:18Z")
Hello, im new in ELK and dont know how to find only the documents where the value of serviceName It is not repeated, just show me the document with the serviceName SLA\_D\_CARGA\_MODELO\_ACTIVO\_SSII\_testemail with the devtoo… --- ## [Visualize the last value](https://discuss.elastic.co/t/visualize-the-last-value/290641)
**Author:** [@carlos\_gomez\_gomez](https://discuss.elastic.co/u/carlos_gomez_gomez)\ **Replies:** 1\ **Last updated:** [December 1, 2021, 9:57am UTC](https://discuss.elastic.co/t/visualize-the-last-value/290641 "2021-12-01T09:57:09Z")
Hi. I'm trying to make a visualitzacion of an scripted field. The value of the scripted field only can be 1 or 0 is like a boolean. I want to visualice a line graph. I have two questions about that. It its possible t… --- ## [Filebeat incompatibility when upgrading elasticsearch](https://discuss.elastic.co/t/filebeat-incompatibility-when-upgrading-elasticsearch/290607)
**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\ **Replies:** 2\ **Last updated:** [December 1, 2021, 8:28am UTC](https://discuss.elastic.co/t/filebeat-incompatibility-when-upgrading-elasticsearch/290607 "2021-12-01T08:28:38Z")
Hi. We're currently testing an upgrade from Elasticsearch 6.8 to 7.15 and we noticed that when we upgrade the cluster, the Filebeat agents on some of our hosts can no longer write to the indices and we see the errors li… --- ## [Gpg: no valid OpenPGP data found](https://discuss.elastic.co/t/gpg-no-valid-openpgp-data-found/290633)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 0\ **Last updated:** [December 1, 2021, 7:23am UTC](https://discuss.elastic.co/t/gpg-no-valid-openpgp-data-found/290633 "2021-12-01T07:23:00Z")
Hi, I already have an ELK environment running at version 7.13, I'm trying to update to 7.15. But when trying to use the below command: wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - … --- ## [What is a good number of fields to have in an index?](https://discuss.elastic.co/t/what-is-a-good-number-of-fields-to-have-in-an-index/290618)
**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\ **Replies:** 3\ **Last updated:** [December 1, 2021, 7:53am UTC](https://discuss.elastic.co/t/what-is-a-good-number-of-fields-to-have-in-an-index/290618 "2021-12-01T07:53:19Z")
I am trying to manage the index and I would like to know how many fields must be present inside an index for it to have good performance. Currently, I have 6000 fields in my index but not all documents have 6000 fields i… --- ## [Cannot get Cisco Filebeat module to work](https://discuss.elastic.co/t/cannot-get-cisco-filebeat-module-to-work/289903)
**Author:** [@titan\_tm](https://discuss.elastic.co/u/titan_tm)\ **Replies:** 13\ **Last updated:** [December 1, 2021, 6:56am UTC](https://discuss.elastic.co/t/cannot-get-cisco-filebeat-module-to-work/289903 "2021-12-01T06:56:46Z")
Hello Team, I'm running on ELK 7.14.0 and I'm facing an issue with kibana dashboard and need your help. I have an ELK stack which gets logs from filebeat (cisco module) and sends them directly to Elasticsearch. It work… --- ## [How to parse xml log inside of the json format in Logstash](https://discuss.elastic.co/t/how-to-parse-xml-log-inside-of-the-json-format-in-logstash/290006)
**Author:** [@Bigboy0706](https://discuss.elastic.co/u/Bigboy0706)\ **Replies:** 15\ **Last updated:** [December 1, 2021, 6:28am UTC](https://discuss.elastic.co/t/how-to-parse-xml-log-inside-of-the-json-format-in-logstash/290006 "2021-12-01T06:28:09Z")
I will receive a log that contained JSON and XML format I configurated the Logstash to receive TCP in JSON and used the filter when shown dateparsefailure in tags. The JSON part is able to extract, but the xml part can… --- ## [Elasticsearch wont run](https://discuss.elastic.co/t/elasticsearch-wont-run/290395)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 7\ **Last updated:** [December 1, 2021, 6:20am UTC](https://discuss.elastic.co/t/elasticsearch-wont-run/290395 "2021-12-01T06:20:27Z")
Hi dears I have upgraded the Elasticsearch and removed old version and copy all the new Elasticsearch parts in the same directory (upgrading ES 7.6.2 to 7.15.2) Unfortunately when I want to start the service with sysV … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=764) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=766)