# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=881 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 882 --- ## [Node processors](https://discuss.elastic.co/t/node-processors/273803)
**Author:** [@Cristian1988](https://discuss.elastic.co/u/Cristian1988)\ **Replies:** 7\ **Last updated:** [July 17, 2021, 12:59am UTC](https://discuss.elastic.co/t/node-processors/273803 "2021-07-17T00:59:40Z")
Estoy teniendo algunos rechazos a la hora de lanzar un bulk contra un elàstic y se producen con más frecuencia desde que subimos de versión de una versión 6 a una 7, revisando settings y mappings de todo el clúster, de u… --- ## [Parsing Syslog with Logstash Grock Filter isn't working with Kibana](https://discuss.elastic.co/t/parsing-syslog-with-logstash-grock-filter-isnt-working-with-kibana/278844)
**Author:** [@olg32](https://discuss.elastic.co/u/olg32)\ **Replies:** 2\ **Last updated:** [July 17, 2021, 12:48am UTC](https://discuss.elastic.co/t/parsing-syslog-with-logstash-grock-filter-isnt-working-with-kibana/278844 "2021-07-17T00:48:45Z")
Hi, I have crated a very basic grok filter to parse Cisco Syslogs: input { udp { port =\> 5140 type =\> syslog } } filter { grok { match =\> { "message"=\> "%{TIMESTAMP\_ISO8601:Timestamp\_Local… --- ## [Adding retry logic to java high level rest client](https://discuss.elastic.co/t/adding-retry-logic-to-java-high-level-rest-client/278950)
**Author:** [@Srinivasan\_Ramaswamy](https://discuss.elastic.co/u/Srinivasan_Ramaswamy)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 11:51pm UTC](https://discuss.elastic.co/t/adding-retry-logic-to-java-high-level-rest-client/278950 "2021-07-16T23:51:05Z")
As requests over http can fail for various reasons, would it make sense to add some retry mechanism to high level rest client ? I see this : Retry Lifecycle Policy API | Java REST Client \[7.13\] | Elastic. Not sure about… --- ## [Ailed to start Elasticsearch. (code=killed, signal=KILL)](https://discuss.elastic.co/t/ailed-to-start-elasticsearch-code-killed-signal-kill/278827)
**Author:** [@Tealk](https://discuss.elastic.co/u/Tealk)\ **Replies:** 3\ **Last updated:** [July 16, 2021, 10:38pm UTC](https://discuss.elastic.co/t/ailed-to-start-elasticsearch-code-killed-signal-kill/278827 "2021-07-16T22:38:48Z")
hello i just want to move my mastodon server and i just installed Elasticsearch on a new server but i get the following error when i start it: systemctl start elasticsearch Job for elasticsearch.service failed because a… --- ## [\[Detection Rule for Security\]: Extract fields from {{context.alerts}} in the Kibana Connector Message Service](https://discuss.elastic.co/t/detection-rule-for-security-extract-fields-from-context-alerts-in-the-kibana-connector-message-service/277919)
**Author:** [@heetS](https://discuss.elastic.co/u/heetS)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 8:49pm UTC](https://discuss.elastic.co/t/detection-rule-for-security-extract-fields-from-context-alerts-in-the-kibana-connector-message-service/277919 "2021-07-16T20:49:40Z")
Hi Everyone, Basically, I was simulating the Password spraying Attack using Kibana Detection Rule (in the Security Tab). For the End-to-End pipeline, I have used WinLog Beat to directly ingest windows log events into th… --- ## [How do I conditionally parse a CSV into different columns?](https://discuss.elastic.co/t/how-do-i-conditionally-parse-a-csv-into-different-columns/278884)
**Author:** [@nsouth](https://discuss.elastic.co/u/nsouth)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 7:57pm UTC](https://discuss.elastic.co/t/how-do-i-conditionally-parse-a-csv-into-different-columns/278884 "2021-07-16T19:57:58Z")
I have CSV log files where the columns change from line to line. The first field is an eventCode, which I can use to know which subsequent columns to expect. Here's a representative example. 1,sameTaskId,username,size 2… --- ## [Word Delimiter Graph Token + Synonym Graph Token](https://discuss.elastic.co/t/word-delimiter-graph-token-synonym-graph-token/278942)
**Author:** [@Kushikawa](https://discuss.elastic.co/u/Kushikawa)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 7:30pm UTC](https://discuss.elastic.co/t/word-delimiter-graph-token-synonym-graph-token/278942 "2021-07-16T19:30:31Z")
I want to use a word delimiter graph token to avoid spliting terms with "+" and "-", e.g. so "3+c" doesn't change to \["3","c"\] and stays \["3+c"\]. I also want to define a list of synonyms to be applied to this field aft… --- ## [Disk usage on benchmarks](https://discuss.elastic.co/t/disk-usage-on-benchmarks/278908)
**Author:** [@zj27](https://discuss.elastic.co/u/zj27)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 6:16pm UTC](https://discuss.elastic.co/t/disk-usage-on-benchmarks/278908 "2021-07-16T18:16:38Z")
Hi all, I'm studying the Elasticsearch Adhoc Benchmarks and am curious about the disk usage metrics. Why there is a huge gap between final index size (25GB) and total bytes written(313GB)? --- ## [Control filter between two dashboards](https://discuss.elastic.co/t/control-filter-between-two-dashboards/277767)
**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 6:13pm UTC](https://discuss.elastic.co/t/control-filter-between-two-dashboards/277767 "2021-07-16T18:13:46Z")
Hi, I have created two dashboards with similar column names "dashboard1" and "dashboard2". I applied some filters in "dashboard1" through the control panel dropdown "column1"=="some\_value". I saved the filter with the n… --- ## [Suppression of repeated alerts](https://discuss.elastic.co/t/suppression-of-repeated-alerts/277365)
**Author:** [@dhiegoalves](https://discuss.elastic.co/u/dhiegoalves)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 6:05pm UTC](https://discuss.elastic.co/t/suppression-of-repeated-alerts/277365 "2021-07-16T18:05:04Z")
Hello guys! Is it possible to configure a suppression to a SIEM's rule on ELK SIEM module? For example, if 5 events to the same user.id and source.ip in 5 minuts, so will be trigged just 1 alert. --- ## [Verification\_exception Error during Rule Execution](https://discuss.elastic.co/t/verification-exception-error-during-rule-execution/275781)
**Author:** [@inf](https://discuss.elastic.co/u/inf)\ **Replies:** 3\ **Last updated:** [July 16, 2021, 6:02pm UTC](https://discuss.elastic.co/t/verification-exception-error-during-rule-execution/275781 "2021-07-16T18:02:43Z")
Hi there, I am facing a particular error regarding many pre-built Elastic rules. Once they were activated, many of them start failing when executing - with the error: An error occurred during rule execution: message: "v… --- ## [Double whitespace in Exception's field's value](https://discuss.elastic.co/t/double-whitespace-in-exceptions-fields-value/277909)
**Author:** [@inf](https://discuss.elastic.co/u/inf)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 5:39pm UTC](https://discuss.elastic.co/t/double-whitespace-in-exceptions-fields-value/277909 "2021-07-16T17:39:40Z")
Hi there, I am trying to add an exception to a rule where these are the details given: Field: winlog.event\_data.ParentCommandLine Operator: is Value: C:\\\\Windows\\\\System32\\\\WindowsPowerShell\\\\v1.0\\\\powershell.exe -… --- ## [Search - Request Entity Too Large](https://discuss.elastic.co/t/search-request-entity-too-large/277445)
**Author:** [@Intech\_Ops6](https://discuss.elastic.co/u/Intech_Ops6)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 5:16pm UTC](https://discuss.elastic.co/t/search-request-entity-too-large/277445 "2021-07-16T17:16:27Z")
Kibana version: Kibana 6.8.0 Elasticsearch version: AWS ES/Kibana 6.8.0 Describe the bug: SearchError: Request Entity Too Large at https://name-domain.com/\_plugin/kibana/bundles/kibana.bundle.js:2:583038 at… --- ## [Logstash mapping logfile time to @timestamp](https://discuss.elastic.co/t/logstash-mapping-logfile-time-to-timestamp/278772)
**Author:** [@Vajb12](https://discuss.elastic.co/u/Vajb12)\ **Replies:** 5\ **Last updated:** [July 16, 2021, 5:11pm UTC](https://discuss.elastic.co/t/logstash-mapping-logfile-time-to-timestamp/278772 "2021-07-16T17:11:18Z")
Hi Team, Im trying to map the logfile time with @timestamp in logstash. The logfile time is in IST. I would require some help in converting the logfile time to UTC and map it to @timestamp. I used the below ruby code… --- ## [Copy\_to field not searchable as I would expect](https://discuss.elastic.co/t/copy-to-field-not-searchable-as-i-would-expect/278727)
**Author:** [@tasslehawf](https://discuss.elastic.co/u/tasslehawf)\ **Replies:** 2\ **Last updated:** [July 16, 2021, 3:59pm UTC](https://discuss.elastic.co/t/copy-to-field-not-searchable-as-i-would-expect/278727 "2021-07-16T15:59:33Z")
Here is my index: { "settings": { "analysis": { "normalizer": { "keyword\_lowercase": { "type": "custom", "filter": \[ "lowercase", "asciifolding" … --- ## [Showing data hourly](https://discuss.elastic.co/t/showing-data-hourly/278777)
**Author:** [@prathamesh7](https://discuss.elastic.co/u/prathamesh7)\ **Replies:** 7\ **Last updated:** [July 16, 2021, 3:38pm UTC](https://discuss.elastic.co/t/showing-data-hourly/278777 "2021-07-16T15:38:22Z")
Hi Team, I need to display results of filter i am running in visualisation to show for each hour of a day. When i run filter, i can see date for today but not each hour of day , it is showing with gap of 3 hours, so my… --- ## [Basic understating regarding index creation](https://discuss.elastic.co/t/basic-understating-regarding-index-creation/278189)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 9\ **Last updated:** [July 16, 2021, 3:34pm UTC](https://discuss.elastic.co/t/basic-understating-regarding-index-creation/278189 "2021-07-16T15:34:58Z")
Hi Team, I am facing issue where I can see index has not got created after some changes in logstash pipeline file. Can you please help me with below questions to understand. I am finding difficulty in getting it. I ha… --- ## [Hourly displaying of data](https://discuss.elastic.co/t/hourly-displaying-of-data/278695)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 10\ **Last updated:** [July 16, 2021, 3:29pm UTC](https://discuss.elastic.co/t/hourly-displaying-of-data/278695 "2021-07-16T15:29:02Z")
Hi Team, I have log file from which I am filtering specific words and I want to create curl request that will show results based on each hours of current day. In below screenshot, when I select Date histogram on @times… --- ## [Custom regexes.yml](https://discuss.elastic.co/t/custom-regexes-yml/278921)
**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 3:08pm UTC](https://discuss.elastic.co/t/custom-regexes-yml/278921 "2021-07-16T15:08:52Z")
Hello, Has anyone had any success/experience replacing the user agent plugin regexes.yml file with an entirely different/custom regexes.yml file? I'm curious if anyone has successfully done it and were you required to … --- ## [In Kibana Line chart graph, unable to show values](https://discuss.elastic.co/t/in-kibana-line-chart-graph-unable-to-show-values/278864)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 2:57pm UTC](https://discuss.elastic.co/t/in-kibana-line-chart-graph-unable-to-show-values/278864 "2021-07-16T14:57:06Z")
Hi all, I'm unable to show values on Kibana Line chart. I'm able to see values when i scroll on value points, but can't get them to be displayed on the chart. Any Turnaround for this? --- ## [Aggregate filter](https://discuss.elastic.co/t/aggregate-filter/278817)
**Author:** [@sergio\_junior](https://discuss.elastic.co/u/sergio_junior)\ **Replies:** 7\ **Last updated:** [July 16, 2021, 1:27pm UTC](https://discuss.elastic.co/t/aggregate-filter/278817 "2021-07-16T13:27:18Z")
hello guys, i need help with the aggregate filter. I'm trying to merge these logs' lines into a single event. 2021-07-08 00:00:00,181 INFO \[stdout\] (default task-1876) ###HawbPesquisaInteligenteConverter | Iniciando p… --- ## [How to insert only newly added rows in csv in logstash in old index](https://discuss.elastic.co/t/how-to-insert-only-newly-added-rows-in-csv-in-logstash-in-old-index/278866)
**Author:** [@Sarthak\_Mishra](https://discuss.elastic.co/u/Sarthak_Mishra)\ **Replies:** 4\ **Last updated:** [July 16, 2021, 1:23pm UTC](https://discuss.elastic.co/t/how-to-insert-only-newly-added-rows-in-csv-in-logstash-in-old-index/278866 "2021-07-16T13:23:04Z")
Hi community, If I have a csv with 5 rows and I have shipped it in logstash. In future, the csv gets updated with 5(old) + 2(new) =7 rows. I want to ship the updated csv in the same index. Can I ship only the updated 2(… --- ## [Logstash works but put a lot of 403 errors in log](https://discuss.elastic.co/t/logstash-works-but-put-a-lot-of-403-errors-in-log/278892)
**Author:** [@SzymonZy](https://discuss.elastic.co/u/SzymonZy)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 1:16pm UTC](https://discuss.elastic.co/t/logstash-works-but-put-a-lot-of-403-errors-in-log/278892 "2021-07-16T13:16:01Z")
Hello I have setup els and it seems to work beside many errors: "Got response code '403' contacting Elasticsearch at URL 'https://localhost:9200/logstash'", : exception=\>LogStash::Outputs::ElasticSearch::HttpClient::Po… --- ## [Query with conditional logic](https://discuss.elastic.co/t/query-with-conditional-logic/278902)
**Author:** [@Sascha\_Gerloff](https://discuss.elastic.co/u/Sascha_Gerloff)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 1:00pm UTC](https://discuss.elastic.co/t/query-with-conditional-logic/278902 "2021-07-16T13:00:59Z")
Hello, I would like to build a query, whose logic depends on a specific field. For example, I have data like this: username: Name1 description: desc1 username: Name2 info: info1 I would like to build a query that m… --- ## [Elasticsearch 7.13 crash - can not start again](https://discuss.elastic.co/t/elasticsearch-7-13-crash-can-not-start-again/277427)
**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\ **Replies:** 6\ **Last updated:** [July 16, 2021, 11:26am UTC](https://discuss.elastic.co/t/elasticsearch-7-13-crash-can-not-start-again/277427 "2021-07-16T11:26:33Z")
Hi there, I have Elastic + Kiabana + Logstash + Filebeat installed on Ubuntu 20.04 server. Yesterday everything worked fine together. I happily wrote requests in Kibana console. Today morning I tried to open Kibana but… --- ## [Found in Full-text search scenario，ES 7 slow than ES 5](https://discuss.elastic.co/t/found-in-full-text-search-scenario-es-7-slow-than-es-5/278065)
**Author:** [@zfaster](https://discuss.elastic.co/u/zfaster)\ **Replies:** 4\ **Last updated:** [July 16, 2021, 11:00am UTC](https://discuss.elastic.co/t/found-in-full-text-search-scenario-es-7-slow-than-es-5/278065 "2021-07-16T11:00:53Z")
Planning to upgrade from ES 5.6.7 to ES7.X,； During the test, the index data in ES5 was migrated to ES7, and performance comparison was performed in a specific scenario. It was found that the search time of ES7 decrease… --- ## [Как в apm kibana увидеть запросы к базе elastic](https://discuss.elastic.co/t/apm-kibana-elastic/278881)
**Author:** [@Marina\_S](https://discuss.elastic.co/u/Marina_S)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 10:37am UTC](https://discuss.elastic.co/t/apm-kibana-elastic/278881 "2021-07-16T10:37:18Z")
Добрый день. Подскажите, как в apm kibana увидеть запросы к базе elastic как например это видно с запросами к postgres?! --- ## [How to display and play multiple audio file urls in a document field](https://discuss.elastic.co/t/how-to-display-and-play-multiple-audio-file-urls-in-a-document-field/278587)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 4\ **Last updated:** [July 16, 2021, 10:30am UTC](https://discuss.elastic.co/t/how-to-display-and-play-multiple-audio-file-urls-in-a-document-field/278587 "2021-07-16T10:30:58Z")
Hi Elastic Team, The url of the audio file for each call is storing in elastic and defined the format as url type as audio. We have a scenario like each call can have multiple audio files and the filenames will be in a… --- ## [Not getting proper result while searching special characters in query string](https://discuss.elastic.co/t/not-getting-proper-result-while-searching-special-characters-in-query-string/278875)
**Author:** [@Madhavi](https://discuss.elastic.co/u/Madhavi)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 9:55am UTC](https://discuss.elastic.co/t/not-getting-proper-result-while-searching-special-characters-in-query-string/278875 "2021-07-16T09:55:49Z")
This is my query GET /momsarchival1/\_search { "track\_total\_hits": true, "query": { "bool": { "must": \[ { "bool": { "must": \[ { "query\_string": { … --- ## [Boolean query always returns boosted score](https://discuss.elastic.co/t/boolean-query-always-returns-boosted-score/276290)
**Author:** [@stefAnger](https://discuss.elastic.co/u/stefAnger)\ **Replies:** 2\ **Last updated:** [July 16, 2021, 9:19am UTC](https://discuss.elastic.co/t/boolean-query-always-returns-boosted-score/276290 "2021-07-16T09:19:45Z")
Hi, I am trying to replace a MySQL "product search" with an elastic search. The MySQL Search is querying a single table, containing any information for both: Presenting the search results, and containing the source dat… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=880) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=882)