# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=870 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 871 --- ## [Elasticsearch query to return all records](https://discuss.elastic.co/t/elasticsearch-query-to-return-all-records/279998)
**Author:** [@varsha\_dusa](https://discuss.elastic.co/u/varsha_dusa)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 3:27pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-return-all-records/279998 "2021-07-29T15:27:21Z")
I have a small database in Elasticsearch and for testing purposes would like to pull all records back. I am attempting to use a URL of the form... http://localhost:9200/foo/\_search?pretty=true&q={'matchAll':{''}} Can s… --- ## [Combine 2 types of panels](https://discuss.elastic.co/t/combine-2-types-of-panels/279983)
**Author:** [@AlexM566](https://discuss.elastic.co/u/AlexM566)\ **Replies:** 2\ **Last updated:** [July 29, 2021, 3:23pm UTC](https://discuss.elastic.co/t/combine-2-types-of-panels/279983 "2021-07-29T15:23:12Z")
Hello guys, Is there possible to combine 2 visualization in 1 (like in the image below ). So I have vertical bar visualization of data and I want to add a line visualization over that. I have to mention that the data… --- ## [How to read local0.info and local4.info file content in UNIX server using filebeat configuration](https://discuss.elastic.co/t/how-to-read-local0-info-and-local4-info-file-content-in-unix-server-using-filebeat-configuration/280000)
**Author:** [@muralikrishna](https://discuss.elastic.co/u/muralikrishna)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 3:18pm UTC](https://discuss.elastic.co/t/how-to-read-local0-info-and-local4-info-file-content-in-unix-server-using-filebeat-configuration/280000 "2021-07-29T15:18:07Z")
Hello Everyone, I have some applications writing the logs to local0.info & local4.info file in UNIX servers. I have to read the log content from above files using filebeat.yml and send the same to Logstash. Could you … --- ## [How to use string interpolation for query string - Elasticsearch](https://discuss.elastic.co/t/how-to-use-string-interpolation-for-query-string-elasticsearch/280001)
**Author:** [@MarkCo](https://discuss.elastic.co/u/MarkCo)\ **Replies:** 0\ **Last updated:** [July 29, 2021, 2:58pm UTC](https://discuss.elastic.co/t/how-to-use-string-interpolation-for-query-string-elasticsearch/280001 "2021-07-29T14:58:45Z")
I am trying to perform string interpolation to my variable that contains of a string of JSON Objects. Below is my original query: var query = "{\\"size\\": 1000,\\"query\\": {\\"bool\\": {\\"should\\":\[ {\\"match\\": { \\"level\\"… --- ## [XML Filter: How import data from XML file](https://discuss.elastic.co/t/xml-filter-how-import-data-from-xml-file/279969)
**Author:** [@Fabio1](https://discuss.elastic.co/u/Fabio1)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 2:42pm UTC](https://discuss.elastic.co/t/xml-filter-how-import-data-from-xml-file/279969 "2021-07-29T14:42:27Z")
Hello everyone, I'm trying to upload my xml file to logstash/elasticsearch to improve my research capabilites. I already tried a lot of ways but I just can import all the file with the xml tags (very confusing). I woul… --- ## [Add a field to logs between 2 specific logs](https://discuss.elastic.co/t/add-a-field-to-logs-between-2-specific-logs/279743)
**Author:** [@Loulou](https://discuss.elastic.co/u/Loulou)\ **Replies:** 11\ **Last updated:** [July 29, 2021, 2:10pm UTC](https://discuss.elastic.co/t/add-a-field-to-logs-between-2-specific-logs/279743 "2021-07-29T14:10:12Z")
Hi, What I am trying to do is, when I encounter a specific log (with a message including "blockOpened"), I save somewhere the fact that I encountered it, and then for all the following logs I add to them a field or tag.… --- ## [SQL Server data to Elasticsearch using LogStash](https://discuss.elastic.co/t/sql-server-data-to-elasticsearch-using-logstash/279996)
**Author:** [@shharukh](https://discuss.elastic.co/u/shharukh)\ **Replies:** 0\ **Last updated:** [July 29, 2021, 1:50pm UTC](https://discuss.elastic.co/t/sql-server-data-to-elasticsearch-using-logstash/279996 "2021-07-29T13:50:55Z")
hey ELK fam, Im trying to connect SQL sever with logstash, but unable to connect with SQLsever here are log can anyone please help me out. regards shahrukh \*\*\[2021-07-29T18:21:41,590\]\[ERROR\]\[logstash.inputs.jdbc … --- ## [Synonym filter and preserve originals](https://discuss.elastic.co/t/synonym-filter-and-preserve-originals/279989)
**Author:** [@JoeSouthpaw](https://discuss.elastic.co/u/JoeSouthpaw)\ **Replies:** 0\ **Last updated:** [July 29, 2021, 1:32pm UTC](https://discuss.elastic.co/t/synonym-filter-and-preserve-originals/279989 "2021-07-29T13:32:42Z")
Hi there! I'm using elasticsearch for full-text front end search and have set up a custom search analyser with a large solr-format synonym filter attached. Unfortunately, some of these synonyms address business cases wh… --- ## [Escaping field names in queries](https://discuss.elastic.co/t/escaping-field-names-in-queries/279861)
**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\ **Replies:** 7\ **Last updated:** [July 29, 2021, 1:29pm UTC](https://discuss.elastic.co/t/escaping-field-names-in-queries/279861 "2021-07-29T13:29:11Z")
We have discovered that some documents in our index contain a source that resembles the following { "a": { "b" : \["test1"\] }, "a.b" : \["test2"\] } I'm aware of how to perform queries with "exists", but how do… --- ## [CentOS 7 unable to start elastic search searcive](https://discuss.elastic.co/t/centos-7-unable-to-start-elastic-search-searcive/278770)
**Author:** [@rdewan](https://discuss.elastic.co/u/rdewan)\ **Replies:** 2\ **Last updated:** [July 29, 2021, 1:25pm UTC](https://discuss.elastic.co/t/centos-7-unable-to-start-elastic-search-searcive/278770 "2021-07-29T13:25:39Z")
● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Thu 2021-07-15 10:57:58 UTC; 13min a… --- ## [Text color of values on chart (bar-chart)](https://discuss.elastic.co/t/text-color-of-values-on-chart-bar-chart/274319)
**Author:** [@Rachitha](https://discuss.elastic.co/u/Rachitha)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 8:39am UTC](https://discuss.elastic.co/t/text-color-of-values-on-chart-bar-chart/274319 "2021-06-02T08:39:50Z")
Can we change the text color of values displayed on charts like bar graph? Can I remove the shadow displayed around the text? I am using the kibana version(7.12.1). --- ## [Plot TP90 percentile](https://discuss.elastic.co/t/plot-tp90-percentile/279975)
**Author:** [@User8](https://discuss.elastic.co/u/User8)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 12:48pm UTC](https://discuss.elastic.co/t/plot-tp90-percentile/279975 "2021-07-29T12:48:10Z")
Hello everyone! I have data that have fields like API endpoints and response times. I want to show TP90 for these different endpoints, how can I do so in Kibana? --- ## [Search UI apply to elastic workplace search?](https://discuss.elastic.co/t/search-ui-apply-to-elastic-workplace-search/279659)
**Author:** [@James\_Huang1](https://discuss.elastic.co/u/James_Huang1)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 12:05pm UTC](https://discuss.elastic.co/t/search-ui-apply-to-elastic-workplace-search/279659 "2021-07-29T12:05:07Z")
Hi, I found a search-UI here (GitHub - elastic/search-ui: Search UI. Libraries for the fast development of modern, engaging search experiences.), base on this page, it is basically focus on the Elastic App search, could … --- ## [Logstash cycle in ruby filter](https://discuss.elastic.co/t/logstash-cycle-in-ruby-filter/279974)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 0\ **Last updated:** [July 29, 2021, 11:34am UTC](https://discuss.elastic.co/t/logstash-cycle-in-ruby-filter/279974 "2021-07-29T11:34:55Z")
Hi, community. I have message in CEF format, that may have cs1...csn and cs1Label...csnLabel fields. I can't use CEF codec, because I want to keep my original message too. So I decided to use "for" loop in ruby filter an… --- ## [Grok match regex](https://discuss.elastic.co/t/grok-match-regex/279957)
**Author:** [@Soren\_vdc](https://discuss.elastic.co/u/Soren_vdc)\ **Replies:** 2\ **Last updated:** [July 29, 2021, 11:11am UTC](https://discuss.elastic.co/t/grok-match-regex/279957 "2021-07-29T11:11:18Z")
Hi, I want to create grok match and have the 2 first words and the last part of the message. For example: ERROR;AuthenticationController ;processMessage ;THR=11107194 R=760a52d97983874 T=6031a0711ec3 U=Unauthenticated… --- ## ["Cannot invoke "java.util.List.get(int)" because "nestedParsedSource" is null" when using nested properties + has\_parent + inner\_hits](https://discuss.elastic.co/t/cannot-invoke-java-util-list-get-int-because-nestedparsedsource-is-null-when-using-nested-properties-has-parent-inner-hits/279967)
**Author:** [@pavelfry](https://discuss.elastic.co/u/pavelfry)\ **Replies:** 0\ **Last updated:** [July 29, 2021, 10:38am UTC](https://discuss.elastic.co/t/cannot-invoke-java-util-list-get-int-because-nestedparsedsource-is-null-when-using-nested-properties-has-parent-inner-hits/279967 "2021-07-29T10:38:19Z")
Hello everyone, I've been banging my head against this for a while and it seems I've reached a dead end. I've tried to simplify the code as much as possible. Problem: I'm using the child/parent relationships and neste… --- ## [Global Search Query](https://discuss.elastic.co/t/global-search-query/279835)
**Author:** [@Ravi\_Chhatwani](https://discuss.elastic.co/u/Ravi_Chhatwani)\ **Replies:** 2\ **Last updated:** [July 29, 2021, 10:12am UTC](https://discuss.elastic.co/t/global-search-query/279835 "2021-07-29T10:12:52Z")
I am working on the Global Search functionality which include mathematical comparision operation like (=,\>,\<) , I am looking for the solution how to infer the field and then search the text or value meaning I can give us… --- ## [Winlogbeat Dashboard](https://discuss.elastic.co/t/winlogbeat-dashboard/279814)
**Author:** [@insurin](https://discuss.elastic.co/u/insurin)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 10:08am UTC](https://discuss.elastic.co/t/winlogbeat-dashboard/279814 "2021-07-29T10:08:32Z")
Can anyone help me get my dashboard working again. I deleted an index ( winlog 7.1.12.0) and a new one got made (winlog 7.1.12.1) but now I get loads of errors when using the built-in dashboard I'm not sure where to sta… --- ## [Elastic server](https://discuss.elastic.co/t/elastic-server/279831)
**Author:** [@111479](https://discuss.elastic.co/u/111479)\ **Replies:** 5\ **Last updated:** [July 29, 2021, 8:54am UTC](https://discuss.elastic.co/t/elastic-server/279831 "2021-07-29T08:54:39Z")
Hi, i am want to install an elastic server what are the requirement i need to do it? for exmpale : ram, cpu, operation system? thank you. --- ## [How to output a specific fields of JSON data in logstash](https://discuss.elastic.co/t/how-to-output-a-specific-fields-of-json-data-in-logstash/279944)
**Author:** [@Takky](https://discuss.elastic.co/u/Takky)\ **Replies:** 0\ **Last updated:** [July 29, 2021, 7:28am UTC](https://discuss.elastic.co/t/how-to-output-a-specific-fields-of-json-data-in-logstash/279944 "2021-07-29T07:28:45Z")
I want to know how to select and output some fields from JSON data with many fields. For example, there is the following input JSON data. \[input\] { "layers1": { "field01": { "sample01": "5", "… --- ## [Logstash-paloalto loss of data](https://discuss.elastic.co/t/logstash-paloalto-loss-of-data/279504)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 2\ **Last updated:** [July 29, 2021, 7:17am UTC](https://discuss.elastic.co/t/logstash-paloalto-loss-of-data/279504 "2021-07-29T07:17:17Z")
Hi evreyone, I'm not sure if I had to post this here or in a paloalto forum. Problem: My logstash take the logs that are coming from paloalto, this type of log have a precise structure explained here : Threat Log Fie… --- ## [Elasticsearch service enabled, vendor disabled issue](https://discuss.elastic.co/t/elasticsearch-service-enabled-vendor-disabled-issue/279934)
**Author:** [@ritesh.aduri45](https://discuss.elastic.co/u/ritesh.aduri45)\ **Replies:** 3\ **Last updated:** [July 29, 2021, 6:58am UTC](https://discuss.elastic.co/t/elasticsearch-service-enabled-vendor-disabled-issue/279934 "2021-07-29T06:58:52Z")
\[root@hib-vm-siemlog elasticsearch\]# systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: fail… --- ## [Logstash - Error parsing csv :exception=\>java.lang.ArrayIndexOutOfBoundsException](https://discuss.elastic.co/t/logstash-error-parsing-csv-exception-java-lang-arrayindexoutofboundsexception/279884)
**Author:** [@deadloss](https://discuss.elastic.co/u/deadloss)\ **Replies:** 2\ **Last updated:** [July 29, 2021, 4:41am UTC](https://discuss.elastic.co/t/logstash-error-parsing-csv-exception-java-lang-arrayindexoutofboundsexception/279884 "2021-07-29T04:41:50Z")
I am trying to sync logs from csv, sometimes I get this error \[2021-07-28T14:49:03,857\]\[WARN \]\[logstash.filters.csv \] Error parsing csv {:field=\>"message", :source=\>"M5804240304", :exception=\>java.lang.ArrayIndexOut… --- ## [Invalid zlib data](https://discuss.elastic.co/t/invalid-zlib-data/279823)
**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\ **Replies:** 1\ **Last updated:** [July 29, 2021, 4:26am UTC](https://discuss.elastic.co/t/invalid-zlib-data/279823 "2021-07-29T04:26:26Z")
Hi Team, Getting the following error in Discover in Kibana 7.13.4 - Error: invalid zlib data at search\_interceptor\_EnhancedSearchInterceptor.handleSearchError (https://new-kibana.viapplogs.net/41022/bundles/plu… --- ## [Logstash does not create index in Elasticsearch (Windows 10)](https://discuss.elastic.co/t/logstash-does-not-create-index-in-elasticsearch-windows-10/279796)
**Author:** [@Lucas\_Yoshioka](https://discuss.elastic.co/u/Lucas_Yoshioka)\ **Replies:** 2\ **Last updated:** [July 29, 2021, 12:35am UTC](https://discuss.elastic.co/t/logstash-does-not-create-index-in-elasticsearch-windows-10/279796 "2021-07-29T00:35:13Z")
Hi guys, I am trying run ELK, but for some reason Logstash does not create my indexes in Elasticsearch. I installed both and added their /bin path to my environment variables. Here is the conf file I am using: input { … --- ## [Kibana query performance](https://discuss.elastic.co/t/kibana-query-performance/279363)
**Author:** [@paigekim](https://discuss.elastic.co/u/paigekim)\ **Replies:** 13\ **Last updated:** [July 28, 2021, 11:46pm UTC](https://discuss.elastic.co/t/kibana-query-performance/279363 "2021-07-28T23:46:53Z")
Hello, I am currently drawing graphs and charts from Kibana, but it takes longer than the time that I started to draw. Compared to the beginning, there are obviously more data, but I am not sure it is still count as slo… --- ## [Alias Index visualization](https://discuss.elastic.co/t/alias-index-visualization/279871)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [July 28, 2021, 11:24pm UTC](https://discuss.elastic.co/t/alias-index-visualization/279871 "2021-07-28T23:24:31Z")
Hi all, I'm wondering if it is possible to visualize data of 2 differently named indices in a single index pattern. For example , i have a1 index and b1 index. I have a\* index pattern. Is it possible to give alias fo… --- ## [Unable to add node to the Elasticsearch cluster](https://discuss.elastic.co/t/unable-to-add-node-to-the-elasticsearch-cluster/279487)
**Author:** [@Sathiraju\_Eswar](https://discuss.elastic.co/u/Sathiraju_Eswar)\ **Replies:** 3\ **Last updated:** [July 28, 2021, 11:20pm UTC](https://discuss.elastic.co/t/unable-to-add-node-to-the-elasticsearch-cluster/279487 "2021-07-28T23:20:39Z")
I am newbie to elastic search clustering. I am trying to setup a simple cluster with two nodes(not adviced) for experimental purpose. My nodes are my laptop and my desktop. The master node elastic search configuration : … --- ## [Alternatives to the Dev Tools Console](https://discuss.elastic.co/t/alternatives-to-the-dev-tools-console/279911)
**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\ **Replies:** 0\ **Last updated:** [July 28, 2021, 8:56pm UTC](https://discuss.elastic.co/t/alternatives-to-the-dev-tools-console/279911 "2021-07-28T20:56:07Z")
The Dev Tools Console is nice but very basic. I am trying to find an alternative that retains all the niceties of the Console (e.g auto-highlight, intellisense, etc...), but also provide other features such as ability t… --- ## [Filtering syslog message](https://discuss.elastic.co/t/filtering-syslog-message/279877)
**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\ **Replies:** 4\ **Last updated:** [July 28, 2021, 8:18pm UTC](https://discuss.elastic.co/t/filtering-syslog-message/279877 "2021-07-28T20:18:19Z")
hello, I'm new to ELK and I'm trying to use logstash to consume logs from a syslog server I have, how do I extract the messages that arrive inside the message field? here is a log sample: "\<133\>Jul 28 09:59:11 10.128.x… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=869) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=871)