# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=859 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 860 --- ## [Monitoring the logstash postfix queue](https://discuss.elastic.co/t/monitoring-the-logstash-postfix-queue/280986)
**Author:** [@KaPBaJIOJI](https://discuss.elastic.co/u/KaPBaJIOJI)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 5:16am UTC](https://discuss.elastic.co/t/monitoring-the-logstash-postfix-queue/280986 "2021-08-11T05:16:30Z")
Hi all, mb its stupid idei, but i want monitoring postfix queue . I write in file "data", "hostname", "count", how can I transfer this data to elastic? at the moment, i am parse postfix logs, thanks to GitHub - whyscre… --- ## [Upgrade elk from 6.3.2 to 7.14](https://discuss.elastic.co/t/upgrade-elk-from-6-3-2-to-7-14/280982)
**Author:** [@praseeb\_kdas](https://discuss.elastic.co/u/praseeb_kdas)\ **Replies:** 3\ **Last updated:** [August 11, 2021, 5:27am UTC](https://discuss.elastic.co/t/upgrade-elk-from-6-3-2-to-7-14/280982 "2021-08-11T05:27:41Z")
We are planning to upgrade our ELK 6.3.2 to 7.14,can we know the steps which we need to perform so there wont any data loss for us. --- ## [New nodes failing to join cluster](https://discuss.elastic.co/t/new-nodes-failing-to-join-cluster/280980)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 2\ **Last updated:** [August 11, 2021, 5:11am UTC](https://discuss.elastic.co/t/new-nodes-failing-to-join-cluster/280980 "2021-08-11T05:11:39Z")
I have two nodes that have been out of the cluster for some time and I have just tried to bring them back in. Both fail in the same manner: connection timed out. Tcpdump running on one of the cluster members shows the … --- ## [How to specify pipelines.yml file path](https://discuss.elastic.co/t/how-to-specify-pipelines-yml-file-path/280923)
**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\ **Replies:** 7\ **Last updated:** [August 11, 2021, 3:20am UTC](https://discuss.elastic.co/t/how-to-specify-pipelines-yml-file-path/280923 "2021-08-11T03:20:18Z")
I'm working on Logstash setup in a legacy system with no owners in the organisation. Using ps, i found the process executing the logstash service: /usr/bin/java -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headl… --- ## [How to import CSV files, where couple of fields have multiline content](https://discuss.elastic.co/t/how-to-import-csv-files-where-couple-of-fields-have-multiline-content/280453)
**Author:** [@itokai](https://discuss.elastic.co/u/itokai)\ **Replies:** 5\ **Last updated:** [August 11, 2021, 2:00am UTC](https://discuss.elastic.co/t/how-to-import-csv-files-where-couple-of-fields-have-multiline-content/280453 "2021-08-11T02:00:43Z")
Hello, how to accurately import CSV where lines contain fields with multiline content? Default separator is comma, but multiline content is surrounded with double-quotes. For example: Summary,Issue key,Issue id,Parent … --- ## [How to change color for bar chart](https://discuss.elastic.co/t/how-to-change-color-for-bar-chart/280809)
**Author:** [@HuongCV](https://discuss.elastic.co/u/HuongCV)\ **Replies:** 2\ **Last updated:** [August 10, 2021, 2:00am UTC](https://discuss.elastic.co/t/how-to-change-color-for-bar-chart/280809 "2021-08-10T02:00:48Z")
Hi team, I want to change the color for each column a color code As image : I used kibana ver 7.13 Thanks --- ## [Logstash http poller - PKIX path building failed](https://discuss.elastic.co/t/logstash-http-poller-pkix-path-building-failed/280966)
**Author:** [@gutierrezfj](https://discuss.elastic.co/u/gutierrezfj)\ **Replies:** 2\ **Last updated:** [August 11, 2021, 1:38am UTC](https://discuss.elastic.co/t/logstash-http-poller-pkix-path-building-failed/280966 "2021-08-11T01:38:09Z")
Hello community. I need your help again! I'm using http poller plugin requesting an url https but have the error: "pkix path building failed sun.security.provider.certpath.suncertpathbuilderexception: unable to find va… --- ## [Can Elastic Security read existing non default pre-existing indices?](https://discuss.elastic.co/t/can-elastic-security-read-existing-non-default-pre-existing-indices/280935)
**Author:** [@rconroy](https://discuss.elastic.co/u/rconroy)\ **Replies:** 7\ **Last updated:** [August 10, 2021, 11:49pm UTC](https://discuss.elastic.co/t/can-elastic-security-read-existing-non-default-pre-existing-indices/280935 "2021-08-10T23:49:22Z")
Hello We've been using ES for some time and have a number of indices that contain all the data we want to capture from windows hosts and other data sources such as firewalls etc... The reality is that I've already captu… --- ## [Help! I can't filter out docs with bad ids in reindex](https://discuss.elastic.co/t/help-i-cant-filter-out-docs-with-bad-ids-in-reindex/280968)
**Author:** [@tasslehawf](https://discuss.elastic.co/u/tasslehawf)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 11:28pm UTC](https://discuss.elastic.co/t/help-i-cant-filter-out-docs-with-bad-ids-in-reindex/280968 "2021-08-10T23:28:40Z")
Our index has a number of docs with bad ids. They were set by this script during a previous reindex: def lowerCaseAuthor = ctx.author\_string != null ? ctx.author\_string.toLowerCase() : null; def lowerCasePub = ctx.publi… --- ## [Questions On Setting Up A Production Ready Elastic Stack](https://discuss.elastic.co/t/questions-on-setting-up-a-production-ready-elastic-stack/280973)
**Author:** [@Jared9922](https://discuss.elastic.co/u/Jared9922)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 11:17pm UTC](https://discuss.elastic.co/t/questions-on-setting-up-a-production-ready-elastic-stack/280973 "2021-08-10T23:17:23Z")
Hello, After working with the elastic stack as a proof of concept and setting it up accordingly our business is ready to move onto a production level stack. We just had some questions before making the jump. We are hop… --- ## [Logstash filter: aggregate nested arrays](https://discuss.elastic.co/t/logstash-filter-aggregate-nested-arrays/280965)
**Author:** [@me.mohammed](https://discuss.elastic.co/u/me.mohammed)\ **Replies:** 7\ **Last updated:** [August 10, 2021, 10:47pm UTC](https://discuss.elastic.co/t/logstash-filter-aggregate-nested-arrays/280965 "2021-08-10T22:47:50Z")
I'm trying to fetch data from MySQL and push it to ElasticSearch using LogStash, although I'm having trouble creating a config file for LogStash that suits my need I'm trying to achieve this result { "products":\[ … --- ## [DLQ not enabled for logstasha](https://discuss.elastic.co/t/dlq-not-enabled-for-logstasha/280940)
**Author:** [@Krrish\_Raj1](https://discuss.elastic.co/u/Krrish_Raj1)\ **Replies:** 9\ **Last updated:** [August 10, 2021, 9:33pm UTC](https://discuss.elastic.co/t/dlq-not-enabled-for-logstasha/280940 "2021-08-10T21:33:28Z")
I have two events: test\_start and test\_end When I receive test\_start event, I clone one more event from it test\_attempt and index it in elasticsearch. Then when test\_end event arrives, I extract document id and index … --- ## [Use heartbeat for statuspage](https://discuss.elastic.co/t/use-heartbeat-for-statuspage/274911)
**Author:** [@fgierlinger](https://discuss.elastic.co/u/fgierlinger)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 8:46pm UTC](https://discuss.elastic.co/t/use-heartbeat-for-statuspage/274911 "2021-08-10T20:46:49Z")
Hearbeat and the corresponding uptime dashboard seem perfect to display an infrastructure statuspage as statuspage.io or betteruptime.com do it. Unfortunately, all statuspage products that I have found until now, do not … --- ## [Kibana Setup](https://discuss.elastic.co/t/kibana-setup/280955)
**Author:** [@prithvirajsivarajan](https://discuss.elastic.co/u/prithvirajsivarajan)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 8:40pm UTC](https://discuss.elastic.co/t/kibana-setup/280955 "2021-08-10T20:40:47Z")
I'm working on an elasticsearch cluster with two nodes. I have setup SSL on both of them. Now want to install kibana. Is it necessary to install kibana on both nodes? --- ## [Kibana search case sensitive](https://discuss.elastic.co/t/kibana-search-case-sensitive/280536)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 8:39pm UTC](https://discuss.elastic.co/t/kibana-search-case-sensitive/280536 "2021-08-10T20:39:56Z")
Few hostnames are in capital and few other are small. How do I do a case insensitive search in kibana? --- ## [Dashboards: No default time filter](https://discuss.elastic.co/t/dashboards-no-default-time-filter/280958)
**Author:** [@Kyle\_Waid](https://discuss.elastic.co/u/Kyle_Waid)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 8:34pm UTC](https://discuss.elastic.co/t/dashboards-no-default-time-filter/280958 "2021-08-10T20:34:50Z")
Noob here. In Kibana Dashboards, you can create lens visualizations. Each one has customizable filters. We have created a dashboard with several visualizations. We noticed at the top of the dashboard is a search bar. I… --- ## [Unable to create a script field](https://discuss.elastic.co/t/unable-to-create-a-script-field/280512)
**Author:** [@Rammohan](https://discuss.elastic.co/u/Rammohan)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 5:46pm UTC](https://discuss.elastic.co/t/unable-to-create-a-script-field/280512 "2021-08-10T17:46:54Z")
Hello, I am trying to create a simple script field to display the key size of the SSL certificate, the key size value differs between 256 to 270 bytes, so I created the below script field. if (doc\['ssl\_certificate\_subj… --- ## [Warnings on logstash's config execution - "A gauge metric of an unknown type (org.jruby.RubySymbol) has been created for key: status"](https://discuss.elastic.co/t/warnings-on-logstashs-config-execution-a-gauge-metric-of-an-unknown-type-org-jruby-rubysymbol-has-been-created-for-key-status/280954)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 0\ **Last updated:** [August 10, 2021, 5:31pm UTC](https://discuss.elastic.co/t/warnings-on-logstashs-config-execution-a-gauge-metric-of-an-unknown-type-org-jruby-rubysymbol-has-been-created-for-key-status/280954 "2021-08-10T17:31:33Z")
Hello, I see the below warnings on logstash , only when a particular config is used. The warning is as below \[2021-08-10T17:26:22,581\]\[WARN \]\[org.logstash.instrument.metrics.gauge.LazyDelegatingGauge\]\[main\] A gauge m… --- ## [Difference between elastic node down and only elasticprocess down](https://discuss.elastic.co/t/difference-between-elastic-node-down-and-only-elasticprocess-down/280913)
**Author:** [@lecko](https://discuss.elastic.co/u/lecko)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 4:06pm UTC](https://discuss.elastic.co/t/difference-between-elastic-node-down-and-only-elasticprocess-down/280913 "2021-08-10T16:06:07Z")
Hello, Short summary: I noticed this difference in elasticsearch behavior in 2 scenarios: If elastic cluster is green and elasticproces goes down on one node , elastic cluster starts process of reallocting in after som… --- ## [Searching by value in field](https://discuss.elastic.co/t/searching-by-value-in-field/280926)
**Author:** [@newbie5](https://discuss.elastic.co/u/newbie5)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 3:42pm UTC](https://discuss.elastic.co/t/searching-by-value-in-field/280926 "2021-08-10T15:42:49Z")
Hi, I have field "message" which includes "error 404" or "error 506" etc. is there any option to search in Kibana by value? In this case by value "error" no matter what's more this field include. I want to create dashb… --- ## [Logstash aggregate not working as expected](https://discuss.elastic.co/t/logstash-aggregate-not-working-as-expected/280943)
**Author:** [@emad101](https://discuss.elastic.co/u/emad101)\ **Replies:** 0\ **Last updated:** [August 10, 2021, 3:31pm UTC](https://discuss.elastic.co/t/logstash-aggregate-not-working-as-expected/280943 "2021-08-10T15:31:58Z")
Hello, I am trying to send an entire txt file line in one single field to elastic. I am trying to do this using logstash aggregate, but it seems that it is no longer working, each line is being sent as a separate field … --- ## [Elasticsearch Shard distribution size differs enormously](https://discuss.elastic.co/t/elasticsearch-shard-distribution-size-differs-enormously/280845)
**Author:** [@sauasmast](https://discuss.elastic.co/u/sauasmast)\ **Replies:** 2\ **Last updated:** [August 10, 2021, 3:09pm UTC](https://discuss.elastic.co/t/elasticsearch-shard-distribution-size-differs-enormously/280845 "2021-08-10T15:09:44Z")
I need to load 1.2 billion documents in the elasticsearch. As of today we have 6 nodes in the cluster. To equally distribute the shards among the 6 nodes I have mentioned the number of shards to be 42. I use spark and it… --- ## [Cannot view ingested data in discover after index-template creation](https://discuss.elastic.co/t/cannot-view-ingested-data-in-discover-after-index-template-creation/280907)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 1:52pm UTC](https://discuss.elastic.co/t/cannot-view-ingested-data-in-discover-after-index-template-creation/280907 "2021-08-10T13:52:26Z")
Hello, I had created an index template , so that mappings are added automatically when an index of specific pattern is created. However i can't seem to find the data on discover tab ? Here;s the output section : outpu… --- ## [Kibana weird fail after upgrade to 7.14.0](https://discuss.elastic.co/t/kibana-weird-fail-after-upgrade-to-7-14-0/280686)
**Author:** [@kleckns](https://discuss.elastic.co/u/kleckns)\ **Replies:** 25\ **Last updated:** [August 10, 2021, 1:42pm UTC](https://discuss.elastic.co/t/kibana-weird-fail-after-upgrade-to-7-14-0/280686 "2021-08-10T13:42:16Z")
Today I upgraded my ES stack from 7.9.3 to 7.14.0. ES and filebeats upgraded with no issues. I have kibana installed on one of the master ES nodes. After upgrading kibana I received the output in the UI. Kibana doesn't a… --- ## [Need help on creating Logstash\_FILTER](https://discuss.elastic.co/t/need-help-on-creating-logstash-filter/277928)
**Author:** [@sumit\_n](https://discuss.elastic.co/u/sumit_n)\ **Replies:** 10\ **Last updated:** [August 10, 2021, 12:52pm UTC](https://discuss.elastic.co/t/need-help-on-creating-logstash-filter/277928 "2021-08-10T12:52:28Z")
log:{​​​​​​​​"time\_stamp":"2021-06-11T04:58:32.22154414Z","labels":{​​​​​​​​"vm\_index":0,"session\_docker\_id":"12d333","tenant\_id":"21a64d4","user\_id":"bob","session\_uuid":"2a30"}​​​​​​​​,"event":{​​​​​​​​"kind":"Metric",… --- ## [Elastic SIEM TheHive Integration](https://discuss.elastic.co/t/elastic-siem-thehive-integration/279729)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 12:52pm UTC](https://discuss.elastic.co/t/elastic-siem-thehive-integration/279729 "2021-08-10T12:52:20Z")
Hello, Is there any plan to integrate more SIEM Case connectors, for example for TheHive? Willem --- ## [Watcher Automated Reporting; Custom Report Window](https://discuss.elastic.co/t/watcher-automated-reporting-custom-report-window/280930)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [August 10, 2021, 12:50pm UTC](https://discuss.elastic.co/t/watcher-automated-reporting-custom-report-window/280930 "2021-08-10T12:50:37Z")
Hi All, I'm creating an automated report following Automatically generate reports | Kibana Guide \[7.14\] | Elastic. However, I'm having a bit of trouble coming up with a way to query the data I want for it to generate th… --- ## [ELK Upgrade Error from 7.9.3 to 7.13.4 Using Ansible](https://discuss.elastic.co/t/elk-upgrade-error-from-7-9-3-to-7-13-4-using-ansible/280929)
**Author:** [@BlessingEzeama](https://discuss.elastic.co/u/BlessingEzeama)\ **Replies:** 0\ **Last updated:** [August 10, 2021, 12:50pm UTC](https://discuss.elastic.co/t/elk-upgrade-error-from-7-9-3-to-7-13-4-using-ansible/280929 "2021-08-10T12:50:31Z")
FAILED! =\> {"msg": "The conditional check 'redhat\_elasticsearch\_install\_from\_repo.rc == 0' failed. The error was: error while evaluating conditional (redhat\_elasticsearch\_install\_from\_repo.rc == 0): 'dict object' has no … --- ## [Unable to start logstash service on Ubuntu server](https://discuss.elastic.co/t/unable-to-start-logstash-service-on-ubuntu-server/280883)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 12:15pm UTC](https://discuss.elastic.co/t/unable-to-start-logstash-service-on-ubuntu-server/280883 "2021-08-10T12:15:23Z")
I'm using Elasticseach and logstash 7.10.1 on ubuntu 18.04 Logstash service was working properly, few days ago. Suddenly it didn't work. I tried to restart logstash service. But unable to start the service. What can … --- ## [Logstash converts singleton array to string](https://discuss.elastic.co/t/logstash-converts-singleton-array-to-string/280900)
**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 11:37am UTC](https://discuss.elastic.co/t/logstash-converts-singleton-array-to-string/280900 "2021-08-10T11:37:46Z")
I'm using mutate { add\_field =\> { "new\_field" =\> \["X"\] } } to create an array of integers which can be appended to downstream. But logstash output reads as "new\_field" =\> "X". [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=858) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=860)