# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=840 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 841 --- ## [TSVB - Sum of value for unique records](https://discuss.elastic.co/t/tsvb-sum-of-value-for-unique-records/282967)
**Author:** [@Athul\_Devkar](https://discuss.elastic.co/u/Athul_Devkar)\ **Replies:** 2\ **Last updated:** [September 1, 2021, 12:29am UTC](https://discuss.elastic.co/t/tsvb-sum-of-value-for-unique-records/282967 "2021-09-01T00:29:39Z")
Is there anyway I can filter unique records and then find the sum of value for those unique records? Data example: Order# - TotalMRC O101 - $120 O101 - $120(duplicate record) O102 - $130 O103 - $120 Expected resul… --- ## [Metric beat does not install any module (error: line 101)](https://discuss.elastic.co/t/metric-beat-does-not-install-any-module-error-line-101/282951)
**Author:** [@potap75](https://discuss.elastic.co/u/potap75)\ **Replies:** 5\ **Last updated:** [August 31, 2021, 10:27pm UTC](https://discuss.elastic.co/t/metric-beat-does-not-install-any-module-error-line-101/282951 "2021-08-31T22:27:26Z")
Prod ELK v 7.11. monitoring cluster 7.11 Installed Metricbeat 7.13 on Logstash node to collect metrics. Have been following the steps in this guide: https://www.elastic.co/guide/en/logstash/7.11/monitoring-with-metricbe… --- ## [Is there a converter from a search in kibana to query language?](https://discuss.elastic.co/t/is-there-a-converter-from-a-search-in-kibana-to-query-language/282954)
**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\ **Replies:** 1\ **Last updated:** [August 31, 2021, 10:15pm UTC](https://discuss.elastic.co/t/is-there-a-converter-from-a-search-in-kibana-to-query-language/282954 "2021-08-31T22:15:52Z")
I would like to know if there is any program or some type of converter from a search to a query language in kibana --- ## [Filter out signals that are produced too often by one user](https://discuss.elastic.co/t/filter-out-signals-that-are-produced-too-often-by-one-user/282553)
**Author:** [@lina1](https://discuss.elastic.co/u/lina1)\ **Replies:** 3\ **Last updated:** [August 31, 2021, 9:49pm UTC](https://discuss.elastic.co/t/filter-out-signals-that-are-produced-too-often-by-one-user/282553 "2021-08-31T21:49:19Z")
Hi all, I am working for a software company and we use Elasticsearch and Kibana to monitor the signals that our clients send. For that we implemented signals, that include a UserID and unique errorcodes. The problem is… --- ## [Parsing JSON objects within Square Brackets](https://discuss.elastic.co/t/parsing-json-objects-within-square-brackets/282953)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 1\ **Last updated:** [August 31, 2021, 9:46pm UTC](https://discuss.elastic.co/t/parsing-json-objects-within-square-brackets/282953 "2021-08-31T21:46:59Z")
I'm using an API to get JSON objects, but the API formats the JSON objects within square brackets as an array and splits the objects within the array by commas. Can anyone help me with parsing this JSON with Logstash. I'… --- ## [How to change routing value for existed routed data?](https://discuss.elastic.co/t/how-to-change-routing-value-for-existed-routed-data/280689)
**Author:** [@judy\_gao](https://discuss.elastic.co/u/judy_gao)\ **Replies:** 4\ **Last updated:** [August 31, 2021, 8:00pm UTC](https://discuss.elastic.co/t/how-to-change-routing-value-for-existed-routed-data/280689 "2021-08-31T20:00:56Z")
I have an existed index which is "\_routing" required as true. So all data is already routed to particular shards based on "\_routing" value. Right now we're using a customized routing value like "organization id" to route… --- ## [Azure event hub azure.activitylogs.properties](https://discuss.elastic.co/t/azure-event-hub-azure-activitylogs-properties/282907)
**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\ **Replies:** 1\ **Last updated:** [August 31, 2021, 7:13pm UTC](https://discuss.elastic.co/t/azure-event-hub-azure-activitylogs-properties/282907 "2021-08-31T19:13:53Z")
Hello, I'm trying to analyze the information from cloud Azure. I have activated the EventHub and I receive the log, but i have data form Azure Appgataway like azure.activitylogs.properties { "receivedBytes": 65, "s… --- ## [Caused by: org.elasticsearch.action.search.SearchPhaseExecutionException](https://discuss.elastic.co/t/caused-by-org-elasticsearch-action-search-searchphaseexecutionexception/282914)
**Author:** [@Pradeep\_Patil](https://discuss.elastic.co/u/Pradeep_Patil)\ **Replies:** 1\ **Last updated:** [August 31, 2021, 7:12pm UTC](https://discuss.elastic.co/t/caused-by-org-elasticsearch-action-search-searchphaseexecutionexception/282914 "2021-08-31T19:12:09Z")
Caused by: org.elasticsearch.action.search.SearchPhaseExecutionException: Search rejected due to missing shards \[\[.kibana\_task\_manager\_7.14.0\_001\]\[0\]\]. Consider using allow\_partial\_search\_results setting to bypass this e… --- ## [Errors with a "does not exist" query](https://discuss.elastic.co/t/errors-with-a-does-not-exist-query/282846)
**Author:** [@variable](https://discuss.elastic.co/u/variable)\ **Replies:** 2\ **Last updated:** [August 31, 2021, 7:07pm UTC](https://discuss.elastic.co/t/errors-with-a-does-not-exist-query/282846 "2021-08-31T19:07:47Z")
I am trying to determine if this is a bug before opening an Issue. I am trying to create a query to return results when a field does not have any data. These work and return results (but not what I'm looking for): eve… --- ## [TSVB Item URL doesn't work in new Kibana versions](https://discuss.elastic.co/t/tsvb-item-url-doesnt-work-in-new-kibana-versions/282952)
**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\ **Replies:** 1\ **Last updated:** [August 31, 2021, 6:08pm UTC](https://discuss.elastic.co/t/tsvb-item-url-doesnt-work-in-new-kibana-versions/282952 "2021-08-31T18:08:07Z")
Hello, The ITEM URL option of TSVB Table was working fine in the 7.12 version of Kibana. I'm now using Kibana - 7.13.3 and this option doesn't seem to work. Adding a URL in the ITEM URL section, results in the first co… --- ## [Do I need to follow Full-cluster restart steps for 1 Node](https://discuss.elastic.co/t/do-i-need-to-follow-full-cluster-restart-steps-for-1-node/282269)
**Author:** [@Zabulon](https://discuss.elastic.co/u/Zabulon)\ **Replies:** 4\ **Last updated:** [August 31, 2021, 5:53pm UTC](https://discuss.elastic.co/t/do-i-need-to-follow-full-cluster-restart-steps-for-1-node/282269 "2021-08-31T17:53:37Z")
Hi everyone, We had some discussion at the office about restarting a node or service when there is 1 node only issue. Some people find that it is a bit awkwark to follow the step from "Full-cluster restart" document… --- ## [Did not find the logs in google-cloud-storage pushed by logstash](https://discuss.elastic.co/t/did-not-find-the-logs-in-google-cloud-storage-pushed-by-logstash/282950)
**Author:** [@Xiaochi\_Weng](https://discuss.elastic.co/u/Xiaochi_Weng)\ **Replies:** 0\ **Last updated:** [August 31, 2021, 5:43pm UTC](https://discuss.elastic.co/t/did-not-find-the-logs-in-google-cloud-storage-pushed-by-logstash/282950 "2021-08-31T17:43:07Z")
Hello, I recently opened a google cloud account and installed the plugins. Here is my code: input{ udp{ port=\>55514 type=\>"syslog" } } output{ google\_cloud\_storage { bucket =\> "test-logstash-gcp-send-function" … --- ## [Logstash plugin exec error: Port number ended with '\\'](https://discuss.elastic.co/t/logstash-plugin-exec-error-port-number-ended-with/282947)
**Author:** [@nayeli\_hernandez](https://discuss.elastic.co/u/nayeli_hernandez)\ **Replies:** 0\ **Last updated:** [August 31, 2021, 4:46pm UTC](https://discuss.elastic.co/t/logstash-plugin-exec-error-port-number-ended-with/282947 "2021-08-31T16:46:48Z")
Hi, I want to execute a CURL aggreation in Logstash & schedule it every 1 mins and store the data in elastic search. I'm using exec logstash plugin to do, here is my code: input{ exec{ codec =\> json command =\>"cu… --- ## [ES 6.8 issue with percolate search on documents with a join field](https://discuss.elastic.co/t/es-6-8-issue-with-percolate-search-on-documents-with-a-join-field/282851)
**Author:** [@noe](https://discuss.elastic.co/u/noe)\ **Replies:** 1\ **Last updated:** [August 31, 2021, 4:13pm UTC](https://discuss.elastic.co/t/es-6-8-issue-with-percolate-search-on-documents-with-a-join-field/282851 "2021-08-31T16:13:03Z")
I'm working on updating ES mappings and searching within an application from 5.6 to 6.8. The relevant change around this is that I merged multi-type mapping of an index into a single type and now use a custom 'type' fiel… --- ## [Timezone parameter has no impact in Date filter plugin](https://discuss.elastic.co/t/timezone-parameter-has-no-impact-in-date-filter-plugin/282935)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 2\ **Last updated:** [August 31, 2021, 4:10pm UTC](https://discuss.elastic.co/t/timezone-parameter-has-no-impact-in-date-filter-plugin/282935 "2021-08-31T16:10:35Z")
TLDR: my timestamp value is already in UTC, I am trying to prevent elastic from converting it to UTC again. I am using the JDBC input in logstash to query a SQL server database. When I look at a specific record in SQL S… --- ## [Retrieve value & key from json to build data table kibana](https://discuss.elastic.co/t/retrieve-value-key-from-json-to-build-data-table-kibana/282940)
**Author:** [@Mira\_9](https://discuss.elastic.co/u/Mira_9)\ **Replies:** 0\ **Last updated:** [August 31, 2021, 3:37pm UTC](https://discuss.elastic.co/t/retrieve-value-key-from-json-to-build-data-table-kibana/282940 "2021-08-31T15:37:56Z")
hey, i'm extracting data from Json file and displaying it in Kibana. i want to create a data table displaying the details for each id and for each category. How can i extract properly the key and the value from the mes… --- ## [How does elasticsearch query work for an index pattern in a given interval](https://discuss.elastic.co/t/how-does-elasticsearch-query-work-for-an-index-pattern-in-a-given-interval/282877)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 2\ **Last updated:** [August 31, 2021, 3:11pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-query-work-for-an-index-pattern-in-a-given-interval/282877 "2021-08-31T15:11:56Z")
Hi, I was restoring few indices and then observed some shard errors saying shard should be either started or in POST Recovery state when trying to load some dashboards/visualizations while few indices are being restored… --- ## [Parsing duration with 00:00:00 format](https://discuss.elastic.co/t/parsing-duration-with-0000-format/281284)
**Author:** [@Sketchy](https://discuss.elastic.co/u/Sketchy)\ **Replies:** 6\ **Last updated:** [August 31, 2021, 3:00pm UTC](https://discuss.elastic.co/t/parsing-duration-with-0000-format/281284 "2021-08-31T15:00:34Z")
I have a CSV that has multiple durations that are in seconds but one of the columns has the duration as 00:00:30 for 30 seconds for example. I cant work out how to get that into seconds/integer easily. I can think of a f… --- ## [Convert mysql point schema to geo\_point type through logstash please tell me how](https://discuss.elastic.co/t/convert-mysql-point-schema-to-geo-point-type-through-logstash-please-tell-me-how/282879)
**Author:** [@Gi\_seong\_Lee](https://discuss.elastic.co/u/Gi_seong_Lee)\ **Replies:** 1\ **Last updated:** [August 31, 2021, 2:57pm UTC](https://discuss.elastic.co/t/convert-mysql-point-schema-to-geo-point-type-through-logstash-please-tell-me-how/282879 "2021-08-31T14:57:26Z")
In various internets, there are many data that convert longitude and latitude variables to geo\_point by separately specifying them as double type. But I want to convert one Mysql's point type variable to geo\_point. How c… --- ## [Kibana 7.13/7.14 Uptime setting does not allow selecting email connector](https://discuss.elastic.co/t/kibana-7-13-7-14-uptime-setting-does-not-allow-selecting-email-connector/282885)
**Author:** [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\ **Replies:** 1\ **Last updated:** [August 31, 2021, 2:16pm UTC](https://discuss.elastic.co/t/kibana-7-13-7-14-uptime-setting-does-not-allow-selecting-email-connector/282885 "2021-08-31T14:16:45Z")
We are unable to select email connector in Default connectors drop down on Uptime settings page. The email action/connector can be selected through Create rule The email connector was returned by /api/actions, so… --- ## [Elastic can not start because of memory issue](https://discuss.elastic.co/t/elastic-can-not-start-because-of-memory-issue/282711)
**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\ **Replies:** 15\ **Last updated:** [August 31, 2021, 1:41pm UTC](https://discuss.elastic.co/t/elastic-can-not-start-because-of-memory-issue/282711 "2021-08-31T13:41:57Z")
Hi there, can somebody tell me please why my Elastic installation dont want to start? Log says it is out of memory. But it should contains only one index with about one million items. The server params are: 6vCPU, 16G RA… --- ## [Tried to load a plugin's code, but failed. path=\>"logstash/filters/\"](https://discuss.elastic.co/t/tried-to-load-a-plugins-code-but-failed-path-logstash-filters-filter-name/282923)
**Author:** [@raiz](https://discuss.elastic.co/u/raiz)\ **Replies:** 0\ **Last updated:** [August 31, 2021, 12:57pm UTC](https://discuss.elastic.co/t/tried-to-load-a-plugins-code-but-failed-path-logstash-filters-filter-name/282923 "2021-08-31T12:57:51Z")
Hello, I'm trying to use my filter plugin in a conf file. It's being properly installed via an offline plugin pack, but errors when running logstash: ERROR registry:123 - Tried to load a plugin's code, but failed. {:ex… --- ## [Restoring selected indexes from a snapshot using regex in Curator?](https://discuss.elastic.co/t/restoring-selected-indexes-from-a-snapshot-using-regex-in-curator/281951)
**Author:** [@pradeepgm](https://discuss.elastic.co/u/pradeepgm)\ **Replies:** 2\ **Last updated:** [August 31, 2021, 11:43am UTC](https://discuss.elastic.co/t/restoring-selected-indexes-from-a-snapshot-using-regex-in-curator/281951 "2021-08-31T11:43:53Z")
Hi, I would like to restore selected indexes based on regex from ElasticSearch Snapshot using Curator. For example while taking a snapshot of selected indexes we can mention the regex in filtertype as below filters: … --- ## [Overwriting Record in Logstash Using document\_id?](https://discuss.elastic.co/t/overwriting-record-in-logstash-using-document-id/282908)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 0\ **Last updated:** [August 31, 2021, 11:18am UTC](https://discuss.elastic.co/t/overwriting-record-in-logstash-using-document-id/282908 "2021-08-31T11:18:20Z")
I have data in which every record comes a three-time with attached unique referencedID. I am using document\_id=\>"referencedID". Currently, It is overwriting the record comes seconds time but It is not overwriting the rec… --- ## [Date Convert](https://discuss.elastic.co/t/date-convert/281664)
**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\ **Replies:** 3\ **Last updated:** [August 31, 2021, 11:06am UTC](https://discuss.elastic.co/t/date-convert/281664 "2021-08-31T11:06:06Z")
Hello, I created a pipeline to parse log file I want to parse datetime as follow 17/08/2021:12:14:50 +0200 Or 17/Aug/2021:12:14:50 +0200 I wrote pipeline "patterns" : \[ "%{HTTPDATE:time} .... { "… --- ## [Question on Elasticsearch upgrade using Ansible](https://discuss.elastic.co/t/question-on-elasticsearch-upgrade-using-ansible/282519)
**Author:** [@Arunlal\_A](https://discuss.elastic.co/u/Arunlal_A)\ **Replies:** 4\ **Last updated:** [August 31, 2021, 10:49am UTC](https://discuss.elastic.co/t/question-on-elasticsearch-upgrade-using-ansible/282519 "2021-08-31T10:49:47Z")
Hi, A quick basic question to the community. I have one three node Elasticsearch cluster (version 7.6.2) which was setup using the official Ansible role GitHub - elastic/ansible-elasticsearch: Ansible playbook for Elas… --- ## [Update previosuly indexed data](https://discuss.elastic.co/t/update-previosuly-indexed-data/282765)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 8\ **Last updated:** [August 31, 2021, 9:46am UTC](https://discuss.elastic.co/t/update-previosuly-indexed-data/282765 "2021-08-31T09:46:47Z")
Hello ! Is there any way to detect with logstash jdbc if some previously indexed field value has been modified and if so, replace the old value with the new modified one in the next scheduled execution? Thanks in advan… --- ## [Elastic not indexing any more filebeat data but metricbeat data after a Full filesystem](https://discuss.elastic.co/t/elastic-not-indexing-any-more-filebeat-data-but-metricbeat-data-after-a-full-filesystem/282783)
**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\ **Replies:** 2\ **Last updated:** [August 31, 2021, 7:24am UTC](https://discuss.elastic.co/t/elastic-not-indexing-any-more-filebeat-data-but-metricbeat-data-after-a-full-filesystem/282783 "2021-08-31T07:24:33Z")
Hello, I encountered a filesystem full on one of my nodes that caused a cluster stop. I solved the disk space problem by deleting a too big metricbeat index and restarted the cluster. I used the following method (as u… --- ## [Logstash not creating index in secure(https) kibana](https://discuss.elastic.co/t/logstash-not-creating-index-in-secure-https-kibana/282444)
**Author:** [@kiran80511](https://discuss.elastic.co/u/kiran80511)\ **Replies:** 9\ **Last updated:** [August 31, 2021, 4:57am UTC](https://discuss.elastic.co/t/logstash-not-creating-index-in-secure-https-kibana/282444 "2021-08-31T04:57:45Z")
This is my logstash log using journalctl -b 0 -r Aug 25 11:33:18 elastic.sys systemd\[1\]: Started logstash. Aug 25 11:33:18 elastic.sys systemd\[1\]: Stopped logstash. Aug 25 11:33:18 elastic.sys systemd\[1\]: logstash.serv… --- ## [Logstash using vulnerable JDK](https://discuss.elastic.co/t/logstash-using-vulnerable-jdk/282623)
**Author:** [@Aditya931](https://discuss.elastic.co/u/Aditya931)\ **Replies:** 6\ **Last updated:** [August 31, 2021, 4:50am UTC](https://discuss.elastic.co/t/logstash-using-vulnerable-jdk/282623 "2021-08-31T04:50:14Z")
Hi, The latest logstash (7.14.0) is using a vulnerable jdk, and we've got number of security issues because of that. Below is the version of logstash and the jdk used by it. Any update on when will this be resolved? an… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=839) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=841)