# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=779 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 780 --- ## [Filter does not work properly](https://discuss.elastic.co/t/filter-does-not-work-properly/289039)
**Author:** [@111435](https://discuss.elastic.co/u/111435)\ **Replies:** 1\ **Last updated:** [November 12, 2021, 5:47pm UTC](https://discuss.elastic.co/t/filter-does-not-work-properly/289039 "2021-11-12T17:47:43Z")
I have this filter: filter { mutate { convert =\> {"ticket\_fields" =\> "string" "tags" =\> "string"} } mutate { rename =\> { "tags" =\> "category" } } if "неактивность" in \[category\] { if "Диалог не состоя… --- ## [Elasticsearch schedule not working](https://discuss.elastic.co/t/elasticsearch-schedule-not-working/289088)
**Author:** [@SANDRA\_ROY\_ARICATT](https://discuss.elastic.co/u/SANDRA_ROY_ARICATT)\ **Replies:** 1\ **Last updated:** [November 12, 2021, 4:57pm UTC](https://discuss.elastic.co/t/elasticsearch-schedule-not-working/289088 "2021-11-12T16:57:57Z")
Even when I provided the schedule option, logstash is getting records from MySQL every second. I wanted logstash to poll MySQL only in every 30 minutes. logstash db.conf file #file : db.conf input{ jdbc { #connecti… --- ## [Logstash connection with oracle wallet](https://discuss.elastic.co/t/logstash-connection-with-oracle-wallet/289086)
**Author:** [@rodolfo\_pedra](https://discuss.elastic.co/u/rodolfo_pedra)\ **Replies:** 0\ **Last updated:** [November 12, 2021, 3:47pm UTC](https://discuss.elastic.co/t/logstash-connection-with-oracle-wallet/289086 "2021-11-12T15:47:55Z")
Hello I'm trying to make a connection to oracle database that uses wallet. I didn't find enough information to do it, so I decided to do it according to my knowledge, but I'm not successful. If anyone can help me. inpu… --- ## [Hide "Look inside document" from saved search](https://discuss.elastic.co/t/hide-look-inside-document-from-saved-search/288651)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 2\ **Last updated:** [November 12, 2021, 12:56pm UTC](https://discuss.elastic.co/t/hide-look-inside-document-from-saved-search/288651 "2021-11-12T12:56:58Z")
Hello, I need a simple visualization to show the last records of an index, but only show certain fields. I'm able to do it using "Save search" but I want to disable the button to "look inside the document" because I do… --- ## [Does elasticsearch provide technical help through any call apps?](https://discuss.elastic.co/t/does-elasticsearch-provide-technical-help-through-any-call-apps/288758)
**Author:** [@MinwooKim](https://discuss.elastic.co/u/MinwooKim)\ **Replies:** 3\ **Last updated:** [November 12, 2021, 12:34pm UTC](https://discuss.elastic.co/t/does-elasticsearch-provide-technical-help-through-any-call-apps/288758 "2021-11-12T12:34:43Z")
I am an amateur that has to cover any problem with Elasticsearch.... I have troubles covering the management in this system.... Is there any way I could get checkup for the status of our system in realtime like phone … --- ## [Viewing the most recent data](https://discuss.elastic.co/t/viewing-the-most-recent-data/286965)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 3\ **Last updated:** [November 12, 2021, 11:35am UTC](https://discuss.elastic.co/t/viewing-the-most-recent-data/286965 "2021-11-12T11:35:21Z")
So I am capturing data in elastic. It happens to be status of our scheduled tasks. What I cannot work out is how to display that data on a kibana dashboard. I have set up a search and can show the raw data, but that's… --- ## [Grok pattern for a unique value inside a field](https://discuss.elastic.co/t/grok-pattern-for-a-unique-value-inside-a-field/288890)
**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\ **Replies:** 2\ **Last updated:** [November 12, 2021, 9:35am UTC](https://discuss.elastic.co/t/grok-pattern-for-a-unique-value-inside-a-field/288890 "2021-11-12T09:35:20Z")
need to create a new field status\_code with value-successful by using ingest pipeline when status inside message field has 200 and when status inside message field is 502,404,402 it muse create status\_code with value fai… --- ## [特定ドキュメントの nested object 数を取得する方法](https://discuss.elastic.co/t/nested-object/289052)
**Author:** [@zaru](https://discuss.elastic.co/u/zaru)\ **Replies:** 0\ **Last updated:** [November 12, 2021, 8:51am UTC](https://discuss.elastic.co/t/nested-object/289052 "2021-11-12T08:51:37Z")
Elasticsearch v7 を利用しています。 特定ドキュメントに格納されている nested object 数を取得する方法はありますか？ デフォルト最大値の 1,000 個 nested object が格納されているドキュメントがあり、追加更新しようとするとエラーになってしまうので、事前に件数を取得したいです。 --- ## [Kibana shows documents from different indices in one index, why?](https://discuss.elastic.co/t/kibana-shows-documents-from-different-indices-in-one-index-why/288962)
**Author:** [@My\_Google\_Account](https://discuss.elastic.co/u/My_Google_Account)\ **Replies:** 9\ **Last updated:** [November 12, 2021, 7:12am UTC](https://discuss.elastic.co/t/kibana-shows-documents-from-different-indices-in-one-index-why/288962 "2021-11-12T07:12:18Z")
Hello! ELK stack is 7.15 and i have one problem, we have a pipeline in logstash and two different configs with different ports 5000 and 6000 in input section, then filter where we set a field for cassandra logs: \[fields\]… --- ## [Parsing logs using Regex pattern in logstash filter](https://discuss.elastic.co/t/parsing-logs-using-regex-pattern-in-logstash-filter/288117)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 2\ **Last updated:** [November 12, 2021, 6:53am UTC](https://discuss.elastic.co/t/parsing-logs-using-regex-pattern-in-logstash-filter/288117 "2021-11-12T06:53:22Z")
Hi, I am using logstash to ingest data into the Elasticsearch using a txt file. I build a regex query to extract msg-id field from the logs, but msg-id field is not getting extracted though the regex query is working f… --- ## [Managing Workplace Search Source Role access using SAML meta data](https://discuss.elastic.co/t/managing-workplace-search-source-role-access-using-saml-meta-data/278603)
**Author:** [@matt\_elastic](https://discuss.elastic.co/u/matt_elastic)\ **Replies:** 2\ **Last updated:** [November 12, 2021, 6:26am UTC](https://discuss.elastic.co/t/managing-workplace-search-source-role-access-using-saml-meta-data/278603 "2021-11-12T06:26:46Z")
I have successfully hooked up SAML to a workplace search cloud instance and can succesfully setup access based on the username and email attributes. I want to however use the groups attribute. I'm using Azure AD and I h… --- ## [Constant GC warnings with small indexes](https://discuss.elastic.co/t/constant-gc-warnings-with-small-indexes/288433)
**Author:** [@lesleyr1](https://discuss.elastic.co/u/lesleyr1)\ **Replies:** 3\ **Last updated:** [November 12, 2021, 6:15am UTC](https://discuss.elastic.co/t/constant-gc-warnings-with-small-indexes/288433 "2021-11-12T06:15:10Z")
Hello everyone, My team is getting constant GC overhead warnings on our production Elasticsearch cluster for our Liferay application, at least 5 times each minute. This occurs any time, not just when reindexing. "mess… --- ## [Some vulnerabilities in Elasticsearch v7.10.0](https://discuss.elastic.co/t/some-vulnerabilities-in-elasticsearch-v7-10-0/289030)
**Author:** [@Sagarika\_Mahalik](https://discuss.elastic.co/u/Sagarika_Mahalik)\ **Replies:** 2\ **Last updated:** [November 12, 2021, 5:12am UTC](https://discuss.elastic.co/t/some-vulnerabilities-in-elasticsearch-v7-10-0/289030 "2021-11-12T05:12:40Z")
There are few vulnerabilities coming from Elasticsearch 7.10.0 Can you have a look into these issues? Are they false positive issues? If not how can we mitigate these issues? NVD - CVE-2021-22147 NVD - CVE-2021-22145 … --- ## [Splitフィルターで分割したルートのフィールド名を削除する方法](https://discuss.elastic.co/t/split/288712)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [November 12, 2021, 4:53am UTC](https://discuss.elastic.co/t/split/288712 "2021-11-12T04:53:43Z")
logstashのconf(抜粋) filter { json { source =\> "message" } split { field =\> "Records" target =\> "r" remove\_field =\> "Records" } } inputレコード {\\"Records\\": \[ { \\"eventVersion\\": \\"1.08\\", \\"user… --- ## [Logstash не отправляет логи через systemd](https://discuss.elastic.co/t/logstash-systemd/289007)
**Author:** [@maykororen](https://discuss.elastic.co/u/maykororen)\ **Replies:** 2\ **Last updated:** [November 12, 2021, 4:40am UTC](https://discuss.elastic.co/t/logstash-systemd/289007 "2021-11-12T04:40:22Z")
Добрый день! Локальный хост, на нем с помощью yum установлен Elasticsearch, logstash, kibana. Если запускать через консоль /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash-sample.conf то индекс в кибане … --- ## [Can I use my own Threat Intel stored in plain txt file using filebeat module?](https://discuss.elastic.co/t/can-i-use-my-own-threat-intel-stored-in-plain-txt-file-using-filebeat-module/286911)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 6\ **Last updated:** [November 12, 2021, 3:16am UTC](https://discuss.elastic.co/t/can-i-use-my-own-threat-intel-stored-in-plain-txt-file-using-filebeat-module/286911 "2021-11-12T03:16:58Z")
Hi, I have elastic SIEM 7.15 and have enabled threat intel filebeat module; it works very well however wondering if I can use my own threat intel gathered and stored in plain txt file? This comprises of IP Addresses, do… --- ## [Looking for an annunciator panel heat map visualization](https://discuss.elastic.co/t/looking-for-an-annunciator-panel-heat-map-visualization/287359)
**Author:** [@RLPowellJr](https://discuss.elastic.co/u/RLPowellJr)\ **Replies:** 4\ **Last updated:** [November 12, 2021, 2:32am UTC](https://discuss.elastic.co/t/looking-for-an-annunciator-panel-heat-map-visualization/287359 "2021-11-12T02:32:03Z")
Greetings all! I am looking for a heat map visualization that's not exactly what Kibana (in 7.3 to 7.12 at least) provides. We want to display the parameter of interest, let's say one of the CPU usage stats collected b… --- ## [How to Improve throughput of Azure EventHub input plugin](https://discuss.elastic.co/t/how-to-improve-throughput-of-azure-eventhub-input-plugin/288871)
**Author:** [@menha](https://discuss.elastic.co/u/menha)\ **Replies:** 1\ **Last updated:** [November 12, 2021, 1:56am UTC](https://discuss.elastic.co/t/how-to-improve-throughput-of-azure-eventhub-input-plugin/288871 "2021-11-12T01:56:53Z")
Hi Experts, I am using Azure EventHub plugin as input in Logstash, but the event receiving rate is at most around 1.2k/s, it cannot be improved by any methods i tried. Currently the events being ingested to EventHub wou… --- ## [Filter json parse is replacing tags set from the input](https://discuss.elastic.co/t/filter-json-parse-is-replacing-tags-set-from-the-input/289032)
**Author:** [@teebu](https://discuss.elastic.co/u/teebu)\ **Replies:** 2\ **Last updated:** [November 12, 2021, 1:21am UTC](https://discuss.elastic.co/t/filter-json-parse-is-replacing-tags-set-from-the-input/289032 "2021-11-12T01:21:36Z")
I have input that sets tags input { ... tags =\> \["a"\] } But in the filter, I do a json parse: filter { json { source =\> "i" } } And part of that parse, includes tags. However, the tags it has replace the … --- ## [Problem with S3 Plugin](https://discuss.elastic.co/t/problem-with-s3-plugin/288714)
**Author:** [@rajsuper2021](https://discuss.elastic.co/u/rajsuper2021)\ **Replies:** 3\ **Last updated:** [November 11, 2021, 9:00pm UTC](https://discuss.elastic.co/t/problem-with-s3-plugin/288714 "2021-11-11T21:00:24Z")
My current EFK logging configuration looks like this: apiVersion: elasticsearch.k8s.elastic.co/v1beta1 kind: Elasticsearch metadata: name: efk namespace: logging spec: version: 7.14.0 secureSettings: - secretN… --- ## [How can I use a proxy as gateway of my logstash to controll my elasticsearch cluster users?](https://discuss.elastic.co/t/how-can-i-use-a-proxy-as-gateway-of-my-logstash-to-controll-my-elasticsearch-cluster-users/288965)
**Author:** [@skylogs](https://discuss.elastic.co/u/skylogs)\ **Replies:** 0\ **Last updated:** [November 11, 2021, 8:16am UTC](https://discuss.elastic.co/t/how-can-i-use-a-proxy-as-gateway-of-my-logstash-to-controll-my-elasticsearch-cluster-users/288965 "2021-11-11T08:16:36Z")
Hi, I'm trying to design Elasticsearch as a service platform and I want to control my user in size of logs that they can send to my cluster. how can drop some user's log in logstash input or using a gateway before logst… --- ## [How toi get Mainfram data to Logstash](https://discuss.elastic.co/t/how-toi-get-mainfram-data-to-logstash/288972)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 1\ **Last updated:** [November 11, 2021, 4:29pm UTC](https://discuss.elastic.co/t/how-toi-get-mainfram-data-to-logstash/288972 "2021-11-11T16:29:36Z")
Read data files which are delivered in zipped EDCDIC format and get it into Elasticsearch via Logstash --- ## [Elastic search-ui - not working](https://discuss.elastic.co/t/elastic-search-ui-not-working/289003)
**Author:** [@Baljeet](https://discuss.elastic.co/u/Baljeet)\ **Replies:** 0\ **Last updated:** [November 11, 2021, 3:15pm UTC](https://discuss.elastic.co/t/elastic-search-ui-not-working/289003 "2021-11-11T15:15:47Z")
Hi Elastic team, I am evaluating Elasticsearch-ui for work. I am not able to run elastic “search-ui” @ search-ui/examples/elasticsearch at master · elastic/search-ui · GitHub iMac Elasticsearch running at localhost… --- ## [View Data from specific index over 24hr period](https://discuss.elastic.co/t/view-data-from-specific-index-over-24hr-period/288941)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 3\ **Last updated:** [November 11, 2021, 2:48pm UTC](https://discuss.elastic.co/t/view-data-from-specific-index-over-24hr-period/288941 "2021-11-11T14:48:51Z")
Hi, I am trying to come up with a way to view the data from a field within Elasticsearch index called "dns.highest\_registered\_domain" over a 24 hour period. I have come up with the following but I am not sure if it is … --- ## [Rsyslog logstash input](https://discuss.elastic.co/t/rsyslog-logstash-input/288664)
**Author:** [@duscha](https://discuss.elastic.co/u/duscha)\ **Replies:** 9\ **Last updated:** [November 11, 2021, 2:46pm UTC](https://discuss.elastic.co/t/rsyslog-logstash-input/288664 "2021-11-11T14:46:07Z")
I installed on CentOS-7 an ELK stack according to a tutorial. This worked all fine and I can see and search the logs of the localhost server itself in the Kibana interface. The purpose of the server is to act as a centr… --- ## [Creating links between kibana dashboards](https://discuss.elastic.co/t/creating-links-between-kibana-dashboards/288750)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 3\ **Last updated:** [November 11, 2021, 2:27pm UTC](https://discuss.elastic.co/t/creating-links-between-kibana-dashboards/288750 "2021-11-11T14:27:02Z")
Hi, Could you please let me know if the below given feature is available in Kibana's latest version. I am trying to create a Link between Kibana dashboards where the filter condition applied in the Search bar in dashbo… --- ## ['illegal\_argument\_exception', 'reason': 'Unable to Tessellate shape 6.6.0](https://discuss.elastic.co/t/illegal-argument-exception-reason-unable-to-tessellate-shape-6-6-0/288859)
**Author:** [@Lemon\_C](https://discuss.elastic.co/u/Lemon_C)\ **Replies:** 2\ **Last updated:** [November 11, 2021, 1:26pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-reason-unable-to-tessellate-shape-6-6-0/288859 "2021-11-11T13:26:57Z")
dear all, I am trying to post data to es but failed for the reason as following: " 'caused\_by': {'type': 'illegal\_argument\_exception', 'reason': 'Unable to Tessellate shape" but its ok on geojson.io to make a polygon… --- ## [Specifying field weight during query time](https://discuss.elastic.co/t/specifying-field-weight-during-query-time/288982)
**Author:** [@Newbie111985](https://discuss.elastic.co/u/Newbie111985)\ **Replies:** 0\ **Last updated:** [November 11, 2021, 10:45am UTC](https://discuss.elastic.co/t/specifying-field-weight-during-query-time/288982 "2021-11-11T10:45:48Z")
I have an index with below mapping. { "mappings" : { "\_doc" : { "properties" : { "author" : {"type" : "keyword"}, "title" : { "type" : "keyword" }, … --- ## [Scripting aggregation order](https://discuss.elastic.co/t/scripting-aggregation-order/288980)
**Author:** [@yen\_l\_ng\_th](https://discuss.elastic.co/u/yen_l_ng_th)\ **Replies:** 0\ **Last updated:** [November 11, 2021, 10:29am UTC](https://discuss.elastic.co/t/scripting-aggregation-order/288980 "2021-11-11T10:29:44Z")
Would it be possible to script the sort order of aggregations? Let me explain with a contrived example: { "aggs": { "agg1": { "terms": { "field": "somefield", "order": { "avg1": "desc" }, "size" : 100 }, "agg… --- ## [Logstash not sending data to elastic search](https://discuss.elastic.co/t/logstash-not-sending-data-to-elastic-search/288903)
**Author:** [@Akhil\_Chandran](https://discuss.elastic.co/u/Akhil_Chandran)\ **Replies:** 4\ **Last updated:** [November 11, 2021, 10:02am UTC](https://discuss.elastic.co/t/logstash-not-sending-data-to-elastic-search/288903 "2021-11-11T10:02:06Z")
Trying to send data from logstash to an ES index, but the index is not created when logstash is run. Tried logginf the input lines and there is rows logged in the logstash log, but data not sent to ES index jdbc { … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=778) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=780)