# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=897 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 898 --- ## [Jdbc\_static prepared statement error](https://discuss.elastic.co/t/jdbc-static-prepared-statement-error/277507)
**Author:** [@metalshanked](https://discuss.elastic.co/u/metalshanked)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 3:37am UTC](https://discuss.elastic.co/t/jdbc-static-prepared-statement-error/277507 "2021-07-01T03:37:51Z")
Hello, I have the below jdbc\_static lookup statement but it seems to fail with the error:- exception=\>#\,… --- ## [Elasticsearch is down and data are messing, how to recover it!](https://discuss.elastic.co/t/elasticsearch-is-down-and-data-are-messing-how-to-recover-it/277202)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 2:06am UTC](https://discuss.elastic.co/t/elasticsearch-is-down-and-data-are-messing-how-to-recover-it/277202 "2021-07-01T02:06:31Z")
Hey, how can I recover data that I lost while my Elasticsearch was down. see the screen below. thank you. --- ## [Delete Index from Cluster State](https://discuss.elastic.co/t/delete-index-from-cluster-state/277343)
**Author:** [@daksh0225](https://discuss.elastic.co/u/daksh0225)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 2:02am UTC](https://discuss.elastic.co/t/delete-index-from-cluster-state/277343 "2021-07-01T02:02:05Z")
Hello!! I am trying to ensure that indices created during testing do not persist in elasticsearch when it is restarted. To achieve this, I have modiifed the doStop() function of IndicesService in the following manner: … --- ## [Removing subfield in the elasticsearch output display](https://discuss.elastic.co/t/removing-subfield-in-the-elasticsearch-output-display/277494)
**Author:** [@gisellecarballo](https://discuss.elastic.co/u/gisellecarballo)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 1:25am UTC](https://discuss.elastic.co/t/removing-subfield-in-the-elasticsearch-output-display/277494 "2021-07-01T01:25:13Z")
Hi, Anyone knows how to remove the subfield alone in the elasticsearch display output. In the output there are fields "host: 192.x.x.x" "host.keyword: 192.x.x.x" I want to remove the host.keyword field. Current filter… --- ## [Can the rest client be on a lower version than the elastic searver](https://discuss.elastic.co/t/can-the-rest-client-be-on-a-lower-version-than-the-elastic-searver/277501)
**Author:** [@reddroid](https://discuss.elastic.co/u/reddroid)\ **Replies:** 1\ **Last updated:** [June 30, 2021, 11:55pm UTC](https://discuss.elastic.co/t/can-the-rest-client-be-on-a-lower-version-than-the-elastic-searver/277501 "2021-06-30T23:55:11Z")
Hi , Can I use elastic client 7.10 with elastic server 7.10.2 ? --- ## [Metricbeat error fetching kube-state-metrics](https://discuss.elastic.co/t/metricbeat-error-fetching-kube-state-metrics/277493)
**Author:** [@anupshrestha](https://discuss.elastic.co/u/anupshrestha)\ **Replies:** 0\ **Last updated:** [June 30, 2021, 7:31pm UTC](https://discuss.elastic.co/t/metricbeat-error-fetching-kube-state-metrics/277493 "2021-06-30T19:31:42Z")
I am getting the following error in metricbeat deployment that is configured to fetch and push metrics from kube-state-metrics. 2021-06-30T19:25:11.318Z ERROR \[kubernetes.state\_statefulset\] state\_statefulset/state\_state… --- ## [Update few Attributes in Nested Object of index using logstash](https://discuss.elastic.co/t/update-few-attributes-in-nested-object-of-index-using-logstash/277500)
**Author:** [@kamalgunda](https://discuss.elastic.co/u/kamalgunda)\ **Replies:** 0\ **Last updated:** [June 30, 2021, 8:49pm UTC](https://discuss.elastic.co/t/update-few-attributes-in-nested-object-of-index-using-logstash/277500 "2021-06-30T20:49:35Z")
Hi All, Good Day! I have data in elastic search index and want to update the nested object two attributes values out of 20 attributes. Input table has n number of records and whatever matches with document\_id , it sho… --- ## [Exporting to CSV missing values in fields](https://discuss.elastic.co/t/exporting-to-csv-missing-values-in-fields/277389)
**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\ **Replies:** 4\ **Last updated:** [June 30, 2021, 7:49pm UTC](https://discuss.elastic.co/t/exporting-to-csv-missing-values-in-fields/277389 "2021-06-30T19:49:28Z")
Hi All, Wondering if I can get some help. Currently from Kibana I'm running some Discover Reports, I can see all the fields and information in Kibana, however when I export it to CSV, 4 columns out of 6 have no values a… --- ## [Indexing Xml subfields as a new field](https://discuss.elastic.co/t/indexing-xml-subfields-as-a-new-field/277215)
**Author:** [@anon33720113](https://discuss.elastic.co/u/anon33720113)\ **Replies:** 11\ **Last updated:** [June 30, 2021, 5:01pm UTC](https://discuss.elastic.co/t/indexing-xml-subfields-as-a-new-field/277215 "2021-06-30T17:01:18Z")
Hi all, I have a xml-File with windows eventlogs that is structured like this: \ \ \...\ ... \ \ **Author:** [@gandhz](https://discuss.elastic.co/u/gandhz)\ **Replies:** 3\ **Last updated:** [June 30, 2021, 4:40pm UTC](https://discuss.elastic.co/t/create-split-series-aggregation-based-on-json-message/277401 "2021-06-30T16:40:18Z") Hi, I have service logs which contains json message like example below: { "caller\_method\_name": "transferConfirmation", "caller\_line\_number": 328, "message": "Transfer via virtual : {"transferRef":"22151","… --- ## [Can't get fields with an empty date to show up in a data table](https://discuss.elastic.co/t/cant-get-fields-with-an-empty-date-to-show-up-in-a-data-table/276052)
**Author:** [@dandcp](https://discuss.elastic.co/u/dandcp)\ **Replies:** 2\ **Last updated:** [June 30, 2021, 4:27pm UTC](https://discuss.elastic.co/t/cant-get-fields-with-an-empty-date-to-show-up-in-a-data-table/276052 "2021-06-30T16:27:48Z")
I have a data table (and I've done this before) let's say the fields are: Name Quantity End of Support Date End of Contract Date There are 30 records in the dataset right now. Of those 30 maybe 15 have the end of s… --- ## [Logstash Keystore While Running As A Service](https://discuss.elastic.co/t/logstash-keystore-while-running-as-a-service/277262)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 5\ **Last updated:** [June 30, 2021, 4:15pm UTC](https://discuss.elastic.co/t/logstash-keystore-while-running-as-a-service/277262 "2021-06-30T16:15:16Z")
Hello Team, I have created Logstash Keystore with command sudo -E /usr/share/logstash/bin/logstash-keystore --path.settings /etc/logstash create but while running /usr/share/logstash/bin/logstash-keystore list it is thro… --- ## [Logstash (Unable to retrieve license information from license server {:message=\>"Unsupported or unrecognized SSL message"})](https://discuss.elastic.co/t/logstash-unable-to-retrieve-license-information-from-license-server-message-unsupported-or-unrecognized-ssl-message/277484)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 0\ **Last updated:** [June 30, 2021, 4:02pm UTC](https://discuss.elastic.co/t/logstash-unable-to-retrieve-license-information-from-license-server-message-unsupported-or-unrecognized-ssl-message/277484 "2021-06-30T16:02:49Z")
I am getting the following error, does anyone know what is happening? localhost:/etc/logstash # tail -f /var/log/logstash/logstash-plain.log \[2021-06-30T16:44:31,287\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unabl… --- ## [Kibana not filtering specific visulization](https://discuss.elastic.co/t/kibana-not-filtering-specific-visulization/277360)
**Author:** [@thibdeb](https://discuss.elastic.co/u/thibdeb)\ **Replies:** 6\ **Last updated:** [June 30, 2021, 3:33pm UTC](https://discuss.elastic.co/t/kibana-not-filtering-specific-visulization/277360 "2021-06-30T15:33:20Z")
Hello everyone, I'm working on a project on Kibana to do a dashboard with specifics visualizations from 2 files, a .log file and a .csv file, I have two index patterns too. I use a panel to select what kind of data I w… --- ## [Labels and Annotation are not applied at the pod level](https://discuss.elastic.co/t/labels-and-annotation-are-not-applied-at-the-pod-level/262522)
**Author:** [@dg\_hivebrite](https://discuss.elastic.co/u/dg_hivebrite)\ **Replies:** 3\ **Last updated:** [June 30, 2021, 3:30pm UTC](https://discuss.elastic.co/t/labels-and-annotation-are-not-applied-at-the-pod-level/262522 "2021-06-30T15:30:12Z")
Hi, I'm trying to do a poc with datadog to monitor elasticsearch. One of the solution is to setting annotations and labels on pods. So I tried to do that, using the podTemplate field in the CRD but it doesn't update t… --- ## [Write thread pool queue size defaults](https://discuss.elastic.co/t/write-thread-pool-queue-size-defaults/277449)
**Author:** [@Alex\_Abdulin](https://discuss.elastic.co/u/Alex_Abdulin)\ **Replies:** 2\ **Last updated:** [June 30, 2021, 3:12pm UTC](https://discuss.elastic.co/t/write-thread-pool-queue-size-defaults/277449 "2021-06-30T15:12:05Z")
Hello, everyone! I'm tuning ES 6.8 for indexing performance and noticed one interesting thing. There is a significant difference in the default value of the q size in versions 6.8 and 7.x. The documentation states: ES … --- ## [Unable to find "kibana.autocompleteTimeout" in kibana.yml](https://discuss.elastic.co/t/unable-to-find-kibana-autocompletetimeout-in-kibana-yml/277472)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 2\ **Last updated:** [June 30, 2021, 2:51pm UTC](https://discuss.elastic.co/t/unable-to-find-kibana-autocompletetimeout-in-kibana-yml/277472 "2021-06-30T14:51:35Z")
I have a control visualization , where i can't seem to find a filename that was processed . i can only see one of the files (two log files were ingested) . These are very large files and contain huge lines of informatio… --- ## [Change colour of Metric Visualization for Percentile ranks aggregation](https://discuss.elastic.co/t/change-colour-of-metric-visualization-for-percentile-ranks-aggregation/277454)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 3\ **Last updated:** [June 30, 2021, 2:48pm UTC](https://discuss.elastic.co/t/change-colour-of-metric-visualization-for-percentile-ranks-aggregation/277454 "2021-06-30T14:48:57Z")
Hi Kibana: 7.9.3 We are using metric visualization to get percentile ranks. Based on the percentage, I am trying to change colour of the background from Green to Red. But the color remains the same for any Ranges I giv… --- ## [Unable to create "Maps" visualization - Getting "Selected index pattern does not contain source and destination fields."](https://discuss.elastic.co/t/unable-to-create-maps-visualization-getting-selected-index-pattern-does-not-contain-source-and-destination-fields/276683)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 11\ **Last updated:** [June 30, 2021, 2:29pm UTC](https://discuss.elastic.co/t/unable-to-create-maps-visualization-getting-selected-index-pattern-does-not-contain-source-and-destination-fields/276683 "2021-06-30T14:29:25Z")
I'm unable to create "Maps" visualization. I get the error "Selected index pattern does not contain source and destination fields." I'm on version 7.13.2 ELK I used geoip to define the source and destination IP fields … --- ## [Kibana Showing Limited UI Options](https://discuss.elastic.co/t/kibana-showing-limited-ui-options/277357)
**Author:** [@toneyalexander](https://discuss.elastic.co/u/toneyalexander)\ **Replies:** 2\ **Last updated:** [June 30, 2021, 1:56pm UTC](https://discuss.elastic.co/t/kibana-showing-limited-ui-options/277357 "2021-06-30T13:56:26Z")
I have an Elasticsearch cluster with Kibana installed on one of the nodes. We have a beta and a prod cluster which are generally very similar, however one of them has been having a strange Kibana issue. Normally, and on … --- ## [Compare a collection/array of 2 numeric field values within same document](https://discuss.elastic.co/t/compare-a-collection-array-of-2-numeric-field-values-within-same-document/277461)
**Author:** [@Munazza](https://discuss.elastic.co/u/Munazza)\ **Replies:** 0\ **Last updated:** [June 30, 2021, 12:52pm UTC](https://discuss.elastic.co/t/compare-a-collection-array-of-2-numeric-field-values-within-same-document/277461 "2021-06-30T12:52:58Z")
I am trying to load sql server data to elasticsearch using logstash and have the watcher rule to alert if one field value is greater than the other field value within the same document. I am looking for a condition in … --- ## [Create a new HOME LOAN index using the file homeloan\_index.json](https://discuss.elastic.co/t/create-a-new-home-loan-index-using-the-file-homeloan-index-json/277248)
**Author:** [@BalakN](https://discuss.elastic.co/u/BalakN)\ **Replies:** 6\ **Last updated:** [June 30, 2021, 12:35pm UTC](https://discuss.elastic.co/t/create-a-new-home-loan-index-using-the-file-homeloan-index-json/277248 "2021-06-30T12:35:35Z")
I'm completely new to ELK and how to complete the following requirement. Create a new index "TEST-LOAN-INDEX" in QA environment using the json file "loan\_index.json" . --- ## [Logstash compare field with quotedstring fails](https://discuss.elastic.co/t/logstash-compare-field-with-quotedstring-fails/277385)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 2\ **Last updated:** [June 30, 2021, 12:32pm UTC](https://discuss.elastic.co/t/logstash-compare-field-with-quotedstring-fails/277385 "2021-06-30T12:32:17Z")
Hi, I'm parsing modsecurity messages from apache error log, one of the fields i get is ruleid that is parsed with a grok filter using the pattern QUOTEDSTRING. So in the field for instance i get a string with quotes: ""… --- ## [Grok Pattern for line - custom date](https://discuss.elastic.co/t/grok-pattern-for-line-custom-date/277412)
**Author:** [@Kamikaze\_K](https://discuss.elastic.co/u/Kamikaze_K)\ **Replies:** 1\ **Last updated:** [June 30, 2021, 12:27pm UTC](https://discuss.elastic.co/t/grok-pattern-for-line-custom-date/277412 "2021-06-30T12:27:12Z")
I am trying to use a grok pattern to get the fields from the following. any help with this especially with the custom date? 0E7 10JUN21 23:37:53.8 Track 1 EZ: 100 EX: 72 Speed: 36 mph I need to get the fields; "date" … --- ## [Does elastic have a healthcheck endpoint that does not require username and password](https://discuss.elastic.co/t/does-elastic-have-a-healthcheck-endpoint-that-does-not-require-username-and-password/217090)
**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\ **Replies:** 5\ **Last updated:** [June 30, 2021, 11:48am UTC](https://discuss.elastic.co/t/does-elastic-have-a-healthcheck-endpoint-that-does-not-require-username-and-password/217090 "2021-06-30T11:48:17Z")
Problem description: AWS ALB health check does not take in username and password. For elastic search container to attach to ALB and pass its health check, I have to enable the anonymous user in elastic and assign it th… --- ## [How to quote/escape esQuery when it contains quotes?](https://discuss.elastic.co/t/how-to-quote-escape-esquery-when-it-contains-quotes/277384)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 2\ **Last updated:** [June 30, 2021, 11:26am UTC](https://discuss.elastic.co/t/how-to-quote-escape-esquery-when-it-contains-quotes/277384 "2021-06-30T11:26:31Z")
Dear all =) I am using the Create Rule API with the Elasticsearch query action. It works perfectly until I need to query something that includes quotes. Example host:"10.250.11.11". Ideally I would like to write it as … --- ## [Parsing data presented in the form of a table](https://discuss.elastic.co/t/parsing-data-presented-in-the-form-of-a-table/273143)
**Author:** [@San9](https://discuss.elastic.co/u/San9)\ **Replies:** 8\ **Last updated:** [June 30, 2021, 9:58am UTC](https://discuss.elastic.co/t/parsing-data-presented-in-the-form-of-a-table/273143 "2021-06-30T09:58:12Z")
Hello team. More and more often you have to work with logos that come to logstash in the form of a table: Network Management Card AOS v3.7.3 Symmetra APP v1.1.2 Date Time Name Contact Location System IP 23.0… --- ## [Difference between log and dashboard](https://discuss.elastic.co/t/difference-between-log-and-dashboard/277066)
**Author:** [@Arethusa](https://discuss.elastic.co/u/Arethusa)\ **Replies:** 2\ **Last updated:** [June 30, 2021, 9:33am UTC](https://discuss.elastic.co/t/difference-between-log-and-dashboard/277066 "2021-06-30T09:33:38Z")
Hello, I'm on Kibana v7.12.0 I have a fied "CommanLine" and in THIS log is very long. And when i want to add it on Dashboard, I have (Missing Value) but only for this field, the other are ok. I supose it's becau… --- ## [Search/Filter on exact keyword with email value](https://discuss.elastic.co/t/search-filter-on-exact-keyword-with-email-value/277425)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 2\ **Last updated:** [June 30, 2021, 8:30am UTC](https://discuss.elastic.co/t/search-filter-on-exact-keyword-with-email-value/277425 "2021-06-30T08:30:54Z")
We cannot find documents with an email keyword exact match. Other keywords work so I guess it's the @ symbol. How do we /\_search documents with exact keyword match I thought keywords worked with exact match only (no to… --- ## [If Else condition based on input log lines in logstash](https://discuss.elastic.co/t/if-else-condition-based-on-input-log-lines-in-logstash/277336)
**Author:** [@sudo-ranjith](https://discuss.elastic.co/u/sudo-ranjith)\ **Replies:** 2\ **Last updated:** [June 30, 2021, 8:22am UTC](https://discuss.elastic.co/t/if-else-condition-based-on-input-log-lines-in-logstash/277336 "2021-06-30T08:22:52Z")
Hi There, I would like to write a logstash config file with an if else condition. line 1: "Severity","ThreadID","Date","Time","Application","Message" GROK for Line 1: %{DATA:Severity}","%{DATA:ThreadID}","%{DATA:Dat… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=896) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=898)