# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=849

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 850

---

## [Aggregate filter - Parsing Jenkins log](https://discuss.elastic.co/t/aggregate-filter-parsing-jenkins-log/281994)

<div class="topic-metadata">

**Author:** [@Uplift](https://discuss.elastic.co/u/Uplift)\
**Replies:** 4\
**Last updated:** [August 20, 2021, 12:57pm UTC](https://discuss.elastic.co/t/aggregate-filter-parsing-jenkins-log/281994 "2021-08-20T12:57:38Z")

</div>

Dear ELK community, I'm quite new to ELK stack and I'm trying to figure out what can I really achieve with Logstash. I'm trying to extract some information from Jenkins logs, and I found the aggregate filter plugin whi…

---

## [Using recursion for paging?](https://discuss.elastic.co/t/using-recursion-for-paging/282079)

<div class="topic-metadata">

**Author:** [@jasenj1](https://discuss.elastic.co/u/jasenj1)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 12:55pm UTC](https://discuss.elastic.co/t/using-recursion-for-paging/282079 "2021-08-20T12:55:10Z")

</div>

Given a web service that supports a typical paging construct of specifying the record to start from and a page size, is using the "pipeline" input and output to recursively call a config file a viable option? Or will it …

---

## [Monitoring java process running in remote server by Elasticsearch](https://discuss.elastic.co/t/monitoring-java-process-running-in-remote-server-by-elasticsearch/282068)

<div class="topic-metadata">

**Author:** [@buulq90](https://discuss.elastic.co/u/buulq90)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 10:55am UTC](https://discuss.elastic.co/t/monitoring-java-process-running-in-remote-server-by-elasticsearch/282068 "2021-08-20T10:55:23Z")

</div>

Hello all, I have the ELK stack with: AWS Elasticsearch & Logstash on EC2 instance. Currently, I want to monitor the java process in the other remote server which running many java process such as: java --proccess1 j…

---

## [One node one primary shard](https://discuss.elastic.co/t/one-node-one-primary-shard/282066)

<div class="topic-metadata">

**Author:** [@terrainc](https://discuss.elastic.co/u/terrainc)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 10:41am UTC](https://discuss.elastic.co/t/one-node-one-primary-shard/282066 "2021-08-20T10:41:56Z")

</div>

I have 6 nodes and 6 primary shards for each index plus replica. I want to be sure that each index primary shard got own node. How I understand, this can be controlled by allocation.balance "cluster.routing.allo…

---

## [Shards balance and homogeneity of their sizes](https://discuss.elastic.co/t/shards-balance-and-homogeneity-of-their-sizes/281661)

<div class="topic-metadata">

**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\
**Replies:** 7\
**Last updated:** [August 20, 2021, 10:29am UTC](https://discuss.elastic.co/t/shards-balance-and-homogeneity-of-their-sizes/281661 "2021-08-20T10:29:42Z")

</div>

I understood the need of a well balanced ES cluster, with indices made of enough shards (not too much but not too few), but I was wondering if the constancy of the size of shards was important ? Indeed, according the pu…

---

## [Assets of System Integration seems missing on a fresh installed Elastic Stack 7.14 Basic Version](https://discuss.elastic.co/t/assets-of-system-integration-seems-missing-on-a-fresh-installed-elastic-stack-7-14-basic-version/282059)

<div class="topic-metadata">

**Author:** [@ZeLAxyz](https://discuss.elastic.co/u/ZeLAxyz)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 9:47am UTC](https://discuss.elastic.co/t/assets-of-system-integration-seems-missing-on-a-fresh-installed-elastic-stack-7-14-basic-version/282059 "2021-08-20T09:47:05Z")

</div>

Hi, I am using the elastic account on a freshed installed Elastic Stack 7.14. The Dashboards, Saved searches, Visualizations assets all seems missing. Did I do something wrong? How can I get them? Best regards Roy …

---

## [Does "retry\_on\_conflict" will handle updating the latest version number before retrying again?](https://discuss.elastic.co/t/does-retry-on-conflict-will-handle-updating-the-latest-version-number-before-retrying-again/281738)

<div class="topic-metadata">

**Author:** [@Vikram\_Golapelliwar](https://discuss.elastic.co/u/Vikram_Golapelliwar)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 9:41am UTC](https://discuss.elastic.co/t/does-retry-on-conflict-will-handle-updating-the-latest-version-number-before-retrying-again/281738 "2021-08-20T09:41:22Z")

</div>

Team, I have been trying to understand how setting retry\_on\_conflict will behave. It is little confusing in the documentation. As per my understanding, below lines suggest that the latest version update will be handle…

---

## [AWS Billing Dashboard using metricbeat](https://discuss.elastic.co/t/aws-billing-dashboard-using-metricbeat/281940)

<div class="topic-metadata">

**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\
**Replies:** 3\
**Last updated:** [August 20, 2021, 5:55am UTC](https://discuss.elastic.co/t/aws-billing-dashboard-using-metricbeat/281940 "2021-08-20T05:55:41Z")

</div>

Hi, I am trying to create AWS Billing Dashboard in Kibana using metricbeat. In metricbeat.yml, I want to load the dashboard in Space Name "Divyank" and not in default space. How to get space id for "Divyank" space. al…

---

## [Config Logstash with https to Elasticsearch cluster](https://discuss.elastic.co/t/config-logstash-with-https-to-elasticsearch-cluster/282053)

<div class="topic-metadata">

**Author:** [@kiran80511](https://discuss.elastic.co/u/kiran80511)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 9:19am UTC](https://discuss.elastic.co/t/config-logstash-with-https-to-elasticsearch-cluster/282053 "2021-08-20T09:19:24Z")

</div>

Error Logs in Logstash Aug 20 14:28:50 elastic.sys logstash\[5101\]: \[2021-08-20T14:28:50,172\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Attempted to resurrect connection to dead ES instance, but got an error {:url=\>"h…

---

## [Pagination option is not visible in kibana after upgraded it to 7.9.4](https://discuss.elastic.co/t/pagination-option-is-not-visible-in-kibana-after-upgraded-it-to-7-9-4/281834)

<div class="topic-metadata">

**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Replies:** 4\
**Last updated:** [August 20, 2021, 8:05am UTC](https://discuss.elastic.co/t/pagination-option-is-not-visible-in-kibana-after-upgraded-it-to-7-9-4/281834 "2021-08-20T08:05:30Z")

</div>

Hi Team, Recently i have upgraded my Elasticsearch & Kibana to 7.9.4 but after upgrade in kibana pagination option is not visible. For example if i have queried something in kibana and got total count 200 but out of 200…

---

## [Is there a way to configure Multiple Log Streams by distinct Index Name?](https://discuss.elastic.co/t/is-there-a-way-to-configure-multiple-log-streams-by-distinct-index-name/281823)

<div class="topic-metadata">

**Author:** [@vijay.sangha](https://discuss.elastic.co/u/vijay.sangha)\
**Replies:** 3\
**Last updated:** [August 20, 2021, 7:48am UTC](https://discuss.elastic.co/t/is-there-a-way-to-configure-multiple-log-streams-by-distinct-index-name/281823 "2021-08-20T07:48:16Z")

</div>

I have been using logtrail till version 7.9.0, but the plugin provider didn't re-wrote the code to comply with the latest version. As there is a streams availabe within Kibana now, is there a way to define multiple stre…

---

## [Logstash not creating index in kibana](https://discuss.elastic.co/t/logstash-not-creating-index-in-kibana/280780)

<div class="topic-metadata">

**Author:** [@kiran80511](https://discuss.elastic.co/u/kiran80511)\
**Replies:** 25\
**Last updated:** [August 20, 2021, 7:27am UTC](https://discuss.elastic.co/t/logstash-not-creating-index-in-kibana/280780 "2021-08-20T07:27:08Z")

</div>

This is my logstash plain log file \[2021-06-18T08:21:45,675\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /etc/logstash/log4j2.properties \[2021-06-18T08:21:45,686\]\[INFO \]\[logstash.runner …

---

## [Logstash http\_poller body calls the SQL API of elasticsearch error](https://discuss.elastic.co/t/logstash-http-poller-body-calls-the-sql-api-of-elasticsearch-error/282042)

<div class="topic-metadata">

**Author:** [@zhyp](https://discuss.elastic.co/u/zhyp)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 7:14am UTC](https://discuss.elastic.co/t/logstash-http-poller-body-calls-the-sql-api-of-elasticsearch-error/282042 "2021-08-20T07:14:48Z")

</div>

Hi I used logstash http\_ poller calls the SQL API of elasticsearch. SQL API \_sql?format=txt error. The following is some configuration information. input { http\_poller { urls =\> { item =\> { method =\> post url =\> …

---

## [About the Elastic Search category](https://discuss.elastic.co/t/about-the-elastic-search-category/235257)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [June 2, 2020, 12:09am UTC](https://discuss.elastic.co/t/about-the-elastic-search-category/235257 "2020-06-02T00:09:56Z")

</div>

Search everything, anywhere Easily implement powerful, modern search experiences for your busy team. Quickly add pre-tuned search to your website, app, or workplace. Search it all, simply. Looking to get help on traditi…

---

## [Convert elasticsearch query output of float fields( latitude & longtitude) to String](https://discuss.elastic.co/t/convert-elasticsearch-query-output-of-float-fields-latitude-longtitude-to-string/282001)

<div class="topic-metadata">

**Author:** [@Sagar\_kadu](https://discuss.elastic.co/u/Sagar_kadu)\
**Replies:** 3\
**Last updated:** [August 19, 2021, 8:59pm UTC](https://discuss.elastic.co/t/convert-elasticsearch-query-output-of-float-fields-latitude-longtitude-to-string/282001 "2021-08-19T20:59:18Z")

</div>

I'm using elasticsearch input plugin to fetch data from elasticsearch using scroll api and it returns JSON document which consists of \[customerAddresses\] array containing latitude & logitude fields of float type...I woul…

---

## [Remove hashtags "#" using gsub](https://discuss.elastic.co/t/remove-hashtags-using-gsub/282028)

<div class="topic-metadata">

**Author:** [@mario\_kazela](https://discuss.elastic.co/u/mario_kazela)\
**Replies:** 2\
**Last updated:** [August 20, 2021, 3:53am UTC](https://discuss.elastic.co/t/remove-hashtags-using-gsub/282028 "2021-08-20T03:53:02Z")

</div>

Hi, I have some trouble using gsub on logstash because I'm still new on logstash configuration. Just want to asking. Example I have data like "#ynwa". How to remove "#" and leave the word "ynwa" only using gsub ? mutat…

---

## [Ability to remove blank range of dates from Kibana visualization](https://discuss.elastic.co/t/ability-to-remove-blank-range-of-dates-from-kibana-visualization/281864)

<div class="topic-metadata">

**Author:** [@BMGR](https://discuss.elastic.co/u/BMGR)\
**Replies:** 3\
**Last updated:** [August 19, 2021, 10:38pm UTC](https://discuss.elastic.co/t/ability-to-remove-blank-range-of-dates-from-kibana-visualization/281864 "2021-08-19T22:38:48Z")

</div>

Hey all, I'm trying to build a dashboard that hones in on two primary time frames - monthly and yearly. In order to view yearly values, it appears that my date range needs to be set to that year. For the monthly range…

---

## [How can I change the default Elasticsearch port that Kibana listens?](https://discuss.elastic.co/t/how-can-i-change-the-default-elasticsearch-port-that-kibana-listens/281860)

<div class="topic-metadata">

**Author:** [@raylight](https://discuss.elastic.co/u/raylight)\
**Replies:** 6\
**Last updated:** [August 19, 2021, 10:14pm UTC](https://discuss.elastic.co/t/how-can-i-change-the-default-elasticsearch-port-that-kibana-listens/281860 "2021-08-19T22:14:40Z")

</div>

I already have an instance of Logstash, Elasticsearch and Kibana running on my computer with the version 7.4.2... I'd like to run a different instance of them with the version 7.14.0... So, in these new instances, I've c…

---

## [Run Elasticsearch on port other than 9200](https://discuss.elastic.co/t/run-elasticsearch-on-port-other-than-9200/281830)

<div class="topic-metadata">

**Author:** [@mba](https://discuss.elastic.co/u/mba)\
**Replies:** 5\
**Last updated:** [August 19, 2021, 10:12pm UTC](https://discuss.elastic.co/t/run-elasticsearch-on-port-other-than-9200/281830 "2021-08-19T22:12:55Z")

</div>

I want to run elasticsearch on port other than 9200, so I changed http.port=9220 in elasticsearch.yml but still it is running on port number 9200

---

## [Filtering and ordering](https://discuss.elastic.co/t/filtering-and-ordering/282015)

<div class="topic-metadata">

**Author:** [@Sriram8894](https://discuss.elastic.co/u/Sriram8894)\
**Replies:** 2\
**Last updated:** [August 19, 2021, 10:03pm UTC](https://discuss.elastic.co/t/filtering-and-ordering/282015 "2021-08-19T22:03:49Z")

</div>

I would like to know the reason for below case Case 1 : Consider, I have applied a filter on documents and the order of documents in response is 1,2,3,4. Case 2: I have updated a field in the document 2, then If I exec…

---

## [Elastic Endpoint Security crashes and memory errors](https://discuss.elastic.co/t/elastic-endpoint-security-crashes-and-memory-errors/282003)

<div class="topic-metadata">

**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\
**Replies:** 6\
**Last updated:** [August 19, 2021, 9:49pm UTC](https://discuss.elastic.co/t/elastic-endpoint-security-crashes-and-memory-errors/282003 "2021-08-19T21:49:53Z")

</div>

Hey, I'm getting multiple different Elastic Endpoint crashes across different hosts and across Elastic Agent 7.14 and 7.13.2. I provide exemplary crashes below, from the Windows Application Event log. In terms of crash…

---

## [How to customize Maps plugin in kibana?](https://discuss.elastic.co/t/how-to-customize-maps-plugin-in-kibana/281644)

<div class="topic-metadata">

**Author:** [@WhatsIsKibana](https://discuss.elastic.co/u/WhatsIsKibana)\
**Replies:** 6\
**Last updated:** [August 19, 2021, 8:22pm UTC](https://discuss.elastic.co/t/how-to-customize-maps-plugin-in-kibana/281644 "2021-08-19T20:22:27Z")

</div>

Hi, I want to customize Maps plugin in kibana, but I can't find where sources are located. I mean this Maps plugin Looks like it is already pre-build and combined into one file in built\_assets/dlls folder. Is there …

---

## [Timezone logstash date filter](https://discuss.elastic.co/t/timezone-logstash-date-filter/281791)

<div class="topic-metadata">

**Author:** [@Bigbad](https://discuss.elastic.co/u/Bigbad)\
**Replies:** 4\
**Last updated:** [August 19, 2021, 6:25pm UTC](https://discuss.elastic.co/t/timezone-logstash-date-filter/281791 "2021-08-19T18:25:50Z")

</div>

Hello, I want to have another date field in Europe/Paris timezone with logstash date filter. filter { mutate { add\_field =\>{ "my\_date" =\> "%{@timestamp}" } } date { match =\> \["my\_date", "yyyy-…

---

## [Bool From JDBC](https://discuss.elastic.co/t/bool-from-jdbc/280850)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 2\
**Last updated:** [August 19, 2021, 6:22pm UTC](https://discuss.elastic.co/t/bool-from-jdbc/280850 "2021-08-19T18:22:02Z")

</div>

Is it possible to query a SQL database and, if the results have a column value matching a given string, return a boolean? I am wanting to query a table whose results will return multiple rows. I want to check the colum…

---

## [Elastic Endpoint Windows Event Log - Security Channel](https://discuss.elastic.co/t/elastic-endpoint-windows-event-log-security-channel/281993)

<div class="topic-metadata">

**Author:** [@mikemitchell](https://discuss.elastic.co/u/mikemitchell)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 5:02pm UTC](https://discuss.elastic.co/t/elastic-endpoint-windows-event-log-security-channel/281993 "2021-08-19T17:02:14Z")

</div>

Does the Elastic Security Windows Integration or the Endpoint Integration not have the ability to pull from the Security channel of Windows Event Logs? I had to create a new Custom channel to pull in security events fro…

---

## [Yarn build fails](https://discuss.elastic.co/t/yarn-build-fails/281849)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 6\
**Last updated:** [August 19, 2021, 3:59pm UTC](https://discuss.elastic.co/t/yarn-build-fails/281849 "2021-08-19T15:59:08Z")

</div>

Hello there, I am trying to build archive for my custom plugin. I am following the process in the link below. So, I generated the plugin with the generate\_plugin script but then it says that in order to use my plugin…

---

## [Grok Pattern](https://discuss.elastic.co/t/grok-pattern/281878)

<div class="topic-metadata">

**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\
**Replies:** 4\
**Last updated:** [August 19, 2021, 2:54pm UTC](https://discuss.elastic.co/t/grok-pattern/281878 "2021-08-19T14:54:53Z")

</div>

What is the correct syntax to incorporate raw regex expressions in between grok patterns? Ex (Cisco device): LOG: Aug 1 22:15:10 abc-hostname tcp GROK pattern: %{CISCOTIMESTAMP:timestamp} \\b\\w+-\\w+\\b %{WORD:protocol} …

---

## [Exporting & Importing Saved objects across different kibana versions](https://discuss.elastic.co/t/exporting-importing-saved-objects-across-different-kibana-versions/281968)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 2:53pm UTC](https://discuss.elastic.co/t/exporting-importing-saved-objects-across-different-kibana-versions/281968 "2021-08-19T14:53:20Z")

</div>

Hi all, I'm trying to export saved objects from 7.10 to kibana 7.9 version. But it is giving error saying :thinking: " Sorry, there was an error The file could not be processed." Someone told that we cannot import s…

---

## [Drilldown is not working with Visualization](https://discuss.elastic.co/t/drilldown-is-not-working-with-visualization/281925)

<div class="topic-metadata">

**Author:** [@Srinivas25](https://discuss.elastic.co/u/Srinivas25)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 8:44am UTC](https://discuss.elastic.co/t/drilldown-is-not-working-with-visualization/281925 "2021-08-19T08:44:10Z")

</div>

We are using v 7.10.2, Created a visualization - line chart based on ActionName.Keyword field Made the same field as URL and linked it with URL of above visualization Created a search on that field. finally added the s…

---

## [Collapse within top hit aggregation results](https://discuss.elastic.co/t/collapse-within-top-hit-aggregation-results/281977)

<div class="topic-metadata">

**Author:** [@bhimawan](https://discuss.elastic.co/u/bhimawan)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 2:03pm UTC](https://discuss.elastic.co/t/collapse-within-top-hit-aggregation-results/281977 "2021-08-19T14:03:33Z")

</div>

I'm trying to do this (two level collapse) but with top\_hits aggregation. Essentially I want to be able to have a collapse inside of the top\_hits aggregation but it's not supported. Is there any way to make this w…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=848)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=850)
