# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=805 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 806 --- ## [CPU usage alert reason is incorrect](https://discuss.elastic.co/t/cpu-usage-alert-reason-is-incorrect/285964)
**Author:** [@dyadav](https://discuss.elastic.co/u/dyadav)\ **Replies:** 4\ **Last updated:** [October 12, 2021, 4:30pm UTC](https://discuss.elastic.co/t/cpu-usage-alert-reason-is-incorrect/285964 "2021-10-12T16:30:11Z")
I have configured email alerts if CPU usage is above or equals 80% for last 2 minutes. Below is the content configured in my alert: {{alertName}} - {{context.group}} is in a state of {{context.alertState}} Reason: {{c… --- ## [Sum-up subprocesses](https://discuss.elastic.co/t/sum-up-subprocesses/286097)
**Author:** [@franknord](https://discuss.elastic.co/u/franknord)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 3:11pm UTC](https://discuss.elastic.co/t/sum-up-subprocesses/286097 "2021-10-12T15:11:41Z")
Hi all, On my system I have a parent process spawning several sub-processes: root 84046 0.0 0.2 392688 36420 ? Ss Sep30 2:47 /usr/sbin/httpd -DFOREGROUND apache 121160 3.3 0.1 395720 27616 ? … --- ## [Logstash Converting Base64 IP to Decimal IP](https://discuss.elastic.co/t/logstash-converting-base64-ip-to-decimal-ip/286153)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 19\ **Last updated:** [October 12, 2021, 3:07pm UTC](https://discuss.elastic.co/t/logstash-converting-base64-ip-to-decimal-ip/286153 "2021-10-12T15:07:49Z")
Hello, I'm trying to convert a base64 IP into a decimal IP. I saw that Logstash Ruby filter plugin can assist with this by parsing the message field, but is there a way to do this for just an IP field? --- ## [Envío archivo .file a logstash](https://discuss.elastic.co/t/envio-archivo-file-a-logstash/286512)
**Author:** [@Mauricio\_Salas](https://discuss.elastic.co/u/Mauricio_Salas)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 2:57pm UTC](https://discuss.elastic.co/t/envio-archivo-file-a-logstash/286512 "2021-10-12T14:57:16Z")
Buenas compañeros, tengo que realizar un SIEM con un cliente que el cual, un servidor envíe logs hacia un ambiente ELK, pero aquí tenemos dos problemas. El archivo que necesitamos enviar está con extensión .file, o sea… --- ## [Running logstash in background in linux](https://discuss.elastic.co/t/running-logstash-in-background-in-linux/286517)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 2:25pm UTC](https://discuss.elastic.co/t/running-logstash-in-background-in-linux/286517 "2021-10-12T14:25:53Z")
I want to run logstash in background on linux server i am using command like this on bin path nohup ./logstash -f sample.conf& is it correct way to run the logstash or anything else but then I need to read nohup.out … --- ## [Elasticsearch 7.14.1 and unassigned shards](https://discuss.elastic.co/t/elasticsearch-7-14-1-and-unassigned-shards/286510)
**Author:** [@Marcello\_A](https://discuss.elastic.co/u/Marcello_A)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 2:04pm UTC](https://discuss.elastic.co/t/elasticsearch-7-14-1-and-unassigned-shards/286510 "2021-10-12T14:04:43Z")
Hi All, we installed a 3 nodes cluster shipped with Elasticsearch 7.14.1. All indices are configured with 2 shards and 1 replica per shard and all works fine. We stop one node and the cluster becomes yellow and some sh… --- ## [Restrict suggestions to provide data from an desired index while using stored searches](https://discuss.elastic.co/t/restrict-suggestions-to-provide-data-from-an-desired-index-while-using-stored-searches/286498)
**Author:** [@pcvijayvignesh](https://discuss.elastic.co/u/pcvijayvignesh)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 1:24pm UTC](https://discuss.elastic.co/t/restrict-suggestions-to-provide-data-from-an-desired-index-while-using-stored-searches/286498 "2021-10-12T13:24:44Z")
We are using stored searches to perform queries, sort, agregations, and suggestions across a predefined index. Previously, we were not able to restrict the sort to certain indexes, so when we do a sort it searched acros… --- ## [Engineer Training - Download PDF](https://discuss.elastic.co/t/engineer-training-download-pdf/286337)
**Author:** [@eRDe2021](https://discuss.elastic.co/u/eRDe2021)\ **Replies:** 5\ **Last updated:** [October 12, 2021, 12:23pm UTC](https://discuss.elastic.co/t/engineer-training-download-pdf/286337 "2021-10-12T12:23:14Z")
Hello, I have finished ES Engineer Training. Where can I find link to download PDF guide? Regards. --- ## [Metric and drop filter not working together](https://discuss.elastic.co/t/metric-and-drop-filter-not-working-together/286380)
**Author:** [@Rakesh\_Partapsing](https://discuss.elastic.co/u/Rakesh_Partapsing)\ **Replies:** 2\ **Last updated:** [October 12, 2021, 12:07pm UTC](https://discuss.elastic.co/t/metric-and-drop-filter-not-working-together/286380 "2021-10-12T12:07:05Z")
Hi, I would like throttle events using the logstash-filter-throttle plugin. After that to create a logstash-filter-metric to push it to prometheus using graphite exporter. And finally drop the events that are marked by … --- ## [How to replace field values from json external file?](https://discuss.elastic.co/t/how-to-replace-field-values-from-json-external-file/286475)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 7\ **Last updated:** [October 12, 2021, 12:01pm UTC](https://discuss.elastic.co/t/how-to-replace-field-values-from-json-external-file/286475 "2021-10-12T12:01:36Z")
I am getting messages from RabbitMQ with field name ResponseCode. Response code consist of short codes like , 00, 01, 02 and so on. I want to replace those values will full form. I have another json key:values pair file … --- ## [How do I troubleshoot elastic agent not sending any logs to siem app](https://discuss.elastic.co/t/how-do-i-troubleshoot-elastic-agent-not-sending-any-logs-to-siem-app/286311)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 5\ **Last updated:** [October 12, 2021, 11:39am UTC](https://discuss.elastic.co/t/how-do-i-troubleshoot-elastic-agent-not-sending-any-logs-to-siem-app/286311 "2021-10-12T11:39:55Z")
Hi Team, I have enrolled windows serves through fleet and installed elastic-agent on them with malware-protction enabled in detect mode. However not a single log is being shipped hence wondering how do I troubleshoot th… --- ## [How can I filtering of child aggs on parent agg's key（date\_histogram.key\_as\_string）](https://discuss.elastic.co/t/how-can-i-filtering-of-child-aggs-on-parent-aggs-key-date-histogram-key-as-string/286483)
**Author:** [@chenbihao](https://discuss.elastic.co/u/chenbihao)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 11:33am UTC](https://discuss.elastic.co/t/how-can-i-filtering-of-child-aggs-on-parent-aggs-key-date-histogram-key-as-string/286483 "2021-10-12T11:33:51Z")
I want to Change filter.range.exitTime.lte:"2021-08" to date\_histogram.key\_as\_string How do i make it GET /workerentryexitrecord/\_search { "size": 0, "query": { "bool": { "must": \[ { "m… --- ## [.net Auto Authentication](https://discuss.elastic.co/t/net-auto-authentication/286180)
**Author:** [@prabha\_karan](https://discuss.elastic.co/u/prabha_karan)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 10:53am UTC](https://discuss.elastic.co/t/net-auto-authentication/286180 "2021-10-12T10:53:00Z")
Hi ,i want to use dashboard inside in our web application .so, i pasted iframe inside Html.it rendered in browser with kibana login page. but after entered login credentials it again shows the login page.how to rectify t… --- ## [Percentage calculation in kibana using json Inputs](https://discuss.elastic.co/t/percentage-calculation-in-kibana-using-json-inputs/286442)
**Author:** [@Nijanthan](https://discuss.elastic.co/u/Nijanthan)\ **Replies:** 2\ **Last updated:** [October 12, 2021, 10:48am UTC](https://discuss.elastic.co/t/percentage-calculation-in-kibana-using-json-inputs/286442 "2021-10-12T10:48:27Z")
How to calculate the failure percentage in kibana using the json inputs ? The kql query for success is statusCode:200 nd for failure is NOT STATUSCODE:200. I need to calculate the (failure/total)×100. I'm using kiban… --- ## [Visualizing across Distinct Indices](https://discuss.elastic.co/t/visualizing-across-distinct-indices/286394)
**Author:** [@gaganb](https://discuss.elastic.co/u/gaganb)\ **Replies:** 4\ **Last updated:** [October 12, 2021, 10:25am UTC](https://discuss.elastic.co/t/visualizing-across-distinct-indices/286394 "2021-10-12T10:25:06Z")
Hi all, I wanted to visualize data from two distinct indexes that do not share a common substring. Let's say I have Index A and Index B, both distinct names with no same substring. Both indexes have one common element… --- ## [\[Error\] Failed to execute query phase org.elasticsearch.transport.RemoteTransportException](https://discuss.elastic.co/t/error-failed-to-execute-query-phase-org-elasticsearch-transport-remotetransportexception/286467)
**Author:** [@lional700](https://discuss.elastic.co/u/lional700)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 10:15am UTC](https://discuss.elastic.co/t/error-failed-to-execute-query-phase-org-elasticsearch-transport-remotetransportexception/286467 "2021-10-12T10:15:53Z")
Dear Community, We are currently at the learning stage of Elasticsearch. We are using Bitbucket Data Centre in a cluster of 5 servers and installed Elasticsearch "7.5.2" in single separated server integrated to Bitbucke… --- ## [Is it possible to relate fields in an index such that highlights are matches across fields?](https://discuss.elastic.co/t/is-it-possible-to-relate-fields-in-an-index-such-that-highlights-are-matches-across-fields/286463)
**Author:** [@regitze](https://discuss.elastic.co/u/regitze)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 9:53am UTC](https://discuss.elastic.co/t/is-it-possible-to-relate-fields-in-an-index-such-that-highlights-are-matches-across-fields/286463 "2021-10-12T09:53:46Z")
Hi I have an index which is constructed in the following way: {'id': 'xxx-xxx', 'text': 'ALICE was beginning to get very tired of sitting by her sister on the bank, and of having nothing to do', 'start': '0:00:01… --- ## [Rename fields inside Kibana in order to filter them in Dashboard](https://discuss.elastic.co/t/rename-fields-inside-kibana-in-order-to-filter-them-in-dashboard/286278)
**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 9:22am UTC](https://discuss.elastic.co/t/rename-fields-inside-kibana-in-order-to-filter-them-in-dashboard/286278 "2021-10-12T09:22:49Z")
Good evening, I'm facing with the following issue, working on Kibana version 7.0. I'm creating a Dashboard, where some visualization takes data from an Index and other visualizations takes data from other indexes... Th… --- ## [Percentage calculation in kibana using json Inputs](https://discuss.elastic.co/t/percentage-calculation-in-kibana-using-json-inputs/285234)
**Author:** [@Nijanthan](https://discuss.elastic.co/u/Nijanthan)\ **Replies:** 4\ **Last updated:** [October 12, 2021, 9:06am UTC](https://discuss.elastic.co/t/percentage-calculation-in-kibana-using-json-inputs/285234 "2021-10-12T09:06:49Z")
How to calculate the failure percentage in kibana using the json inputs ? Like the failure is NOT statusCode:200 and success is statusCode:200. I need to calculate (failure/total)\*100 --- ## [Regexp not working in nested query](https://discuss.elastic.co/t/regexp-not-working-in-nested-query/286357)
**Author:** [@Ankit\_Anuj](https://discuss.elastic.co/u/Ankit_Anuj)\ **Replies:** 3\ **Last updated:** [October 12, 2021, 9:03am UTC](https://discuss.elastic.co/t/regexp-not-working-in-nested-query/286357 "2021-10-12T09:03:02Z")
{ "query": { "bool": { "must": \[ { "match": { "testCase.status": "PASS" } }, { "nested": { "path": "testCase.logs", "query": { "regexp": { "testCase.logs.message": { "value": "W.\*R" } } } } } \]… --- ## [A question around to get relevant content By using TF-IDF algorithm](https://discuss.elastic.co/t/a-question-around-to-get-relevant-content-by-using-tf-idf-algorithm/286440)
**Author:** [@Lahu\_Gosavi](https://discuss.elastic.co/u/Lahu_Gosavi)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 7:03am UTC](https://discuss.elastic.co/t/a-question-around-to-get-relevant-content-by-using-tf-idf-algorithm/286440 "2021-10-12T07:03:59Z")
Hi everyone I am doing a POC on best match document should rank higher basically, we are using the TF-IDF algorithm to rank the documents we are using a multi\_match query to find a document here is the query: { "q… --- ## [Netflow Problem](https://discuss.elastic.co/t/netflow-problem/286435)
**Author:** [@1phoenix](https://discuss.elastic.co/u/1phoenix)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 5:13am UTC](https://discuss.elastic.co/t/netflow-problem/286435 "2021-10-12T05:13:55Z")
Hello all, I have installed an Elastic Fleet server (self managed) and have deployed Elastic Agents successfully via Fleet. I have the Netflow Integration as part of the agent policy, but it doesn't look to be creating … --- ## [Find elements in array of nested dictionaries](https://discuss.elastic.co/t/find-elements-in-array-of-nested-dictionaries/286431)
**Author:** [@niato](https://discuss.elastic.co/u/niato)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 4:21am UTC](https://discuss.elastic.co/t/find-elements-in-array-of-nested-dictionaries/286431 "2021-10-12T04:21:02Z")
I'm struggling to find a way to get documents meeting specific criteria in an index that looks like this: { "products": \[ { "name": "product 1", "defects": { "packaging": { "desc": ".… --- ## [Logstash write to kafka's nonexistent topic, but no errors/warns in debug log](https://discuss.elastic.co/t/logstash-write-to-kafkas-nonexistent-topic-but-no-errors-warns-in-debug-log/286193)
**Author:** [@silbertmonaphia](https://discuss.elastic.co/u/silbertmonaphia)\ **Replies:** 12\ **Last updated:** [October 12, 2021, 3:50am UTC](https://discuss.elastic.co/t/logstash-write-to-kafkas-nonexistent-topic-but-no-errors-warns-in-debug-log/286193 "2021-10-12T03:50:11Z")
Description: Logstash writes event to kafka, but I forgot to create topic on kafka. And then I check logstash logs, but I can't find any error or warn messages in logs. Is this a bug of logstash 5.5 that logstash isn't … --- ## [Filebeat文件注册表无法更新，日志无法收集](https://discuss.elastic.co/t/filebeat/286429)
**Author:** [@StruggleYang](https://discuss.elastic.co/u/StruggleYang)\ **Replies:** 0\ **Last updated:** [October 12, 2021, 3:42am UTC](https://discuss.elastic.co/t/filebeat/286429 "2021-10-12T03:42:59Z")
filebeat注册表一直出现如下日志 2021-10-12T03:11:29.199Z ERROR registrar/registrar.go:374 Writing of registry returned error: rename /usr/share/filebeat/data/registry/filebeat/data.json.new /usr/share/filebeat/data/re… --- ## [Elapsed time filter is not calculating the time correctly](https://discuss.elastic.co/t/elapsed-time-filter-is-not-calculating-the-time-correctly/286418)
**Author:** [@Indigo\_Star](https://discuss.elastic.co/u/Indigo_Star)\ **Replies:** 2\ **Last updated:** [October 12, 2021, 3:12am UTC](https://discuss.elastic.co/t/elapsed-time-filter-is-not-calculating-the-time-correctly/286418 "2021-10-12T03:12:00Z")
Hi, I am using an elapsed time plugin, as per the documentation the elapsed-time is calculated in seconds. I am calculating the values on a unique field basis "seq". Here is what i am getting, In the snapshot the second… --- ## [Track Application-level Events?](https://discuss.elastic.co/t/track-application-level-events/286419)
**Author:** [@dekim](https://discuss.elastic.co/u/dekim)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 1:49am UTC](https://discuss.elastic.co/t/track-application-level-events/286419 "2021-10-12T01:49:47Z")
We currently have a set of microservice. We would like to log all HTTP Requests using the Elastic Common Schema (ECS). Since Elastic propose a SIEM (known as Elastic SIEM), would it make sense to display these data in … --- ## [Elastic search 6.8.1 - missing indices](https://discuss.elastic.co/t/elastic-search-6-8-1-missing-indices/286364)
**Author:** [@Dan7](https://discuss.elastic.co/u/Dan7)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 12:22am UTC](https://discuss.elastic.co/t/elastic-search-6-8-1-missing-indices/286364 "2021-10-12T00:22:58Z")
Good day, I have an Elasticsearch 6.8.1 single node cluster running inside a kubernetes statefulset to index documents that I need to look after and I noticed that the snapshot path.repo had not been setup previously. S… --- ## [How to achieve hierarchical facets without using swift dependencies](https://discuss.elastic.co/t/how-to-achieve-hierarchical-facets-without-using-swift-dependencies/286413)
**Author:** [@pradeepjanga](https://discuss.elastic.co/u/pradeepjanga)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 8:38pm UTC](https://discuss.elastic.co/t/how-to-achieve-hierarchical-facets-without-using-swift-dependencies/286413 "2021-10-11T20:38:46Z")
am following below example to develop with React App search UI. I want to call search Api when user click on 1st level category to get the 2nd level categories but the Api connector doesn't have a method to call search… --- ## [\[.kibana\_task\_manager\] Action failed with 'Request timed out'](https://discuss.elastic.co/t/kibana-task-manager-action-failed-with-request-timed-out/286389)
**Author:** [@DenisSermyagin](https://discuss.elastic.co/u/DenisSermyagin)\ **Replies:** 3\ **Last updated:** [October 11, 2021, 8:17pm UTC](https://discuss.elastic.co/t/kibana-task-manager-action-failed-with-request-timed-out/286389 "2021-10-11T20:17:49Z")
Hello! I have deployed Elasticsearch and kibana versions 7.13.4. I encountered this error: {"type":"log","@timestamp":"2021-10-11T15:41:58+00:00","tags":\["info","savedobjects-service"\],"pid":948,"message":"\[.kibana\_ta… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=804) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=806)