# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=900 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 901 --- ## [Grok pattern not working with spaces](https://discuss.elastic.co/t/grok-pattern-not-working-with-spaces/277254)
**Author:** [@kriss332](https://discuss.elastic.co/u/kriss332)\ **Replies:** 2\ **Last updated:** [June 28, 2021, 4:54pm UTC](https://discuss.elastic.co/t/grok-pattern-not-working-with-spaces/277254 "2021-06-28T16:54:40Z")
Hi all , I am trying to get a pattern for tbelow log in GrokDebugger site. Jun 27 00:00:12 location2-squid2 SQUID 1624732203.029 877 172.1.1.1 TCP\_MISS/200 70205 GET http://10.10.1.1/v1/loading/summary? - HIER\_DIRECT… --- ## [Problem install logstash-7.13.2-x86](https://discuss.elastic.co/t/problem-install-logstash-7-13-2-x86/277249)
**Author:** [@mylogstash](https://discuss.elastic.co/u/mylogstash)\ **Replies:** 2\ **Last updated:** [June 28, 2021, 4:22pm UTC](https://discuss.elastic.co/t/problem-install-logstash-7-13-2-x86/277249 "2021-06-28T16:22:53Z")
On Centos 7.9 During upgrade of logstash-7.13.2-x86 the ownership /usr/share/logstash changes from logstash:logstash to root:root. Why does the installation changes the owner of /usr/share/logstash ? --- ## [Proximity searches](https://discuss.elastic.co/t/proximity-searches/276850)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 3\ **Last updated:** [June 28, 2021, 3:49pm UTC](https://discuss.elastic.co/t/proximity-searches/276850 "2021-06-28T15:49:02Z")
I’m trying to achieve Proximity searches with whole wild card, • (Alice \* Bob) NEAR/4 (Sam \* \* John): find all the documents having the phrase “Alice \* Bob” within 4 words distance to “Sam \* \* John”. I’ve tried followi… --- ## [How can I build verticalBar chart based on some custom calculation](https://discuss.elastic.co/t/how-can-i-build-verticalbar-chart-based-on-some-custom-calculation/276964)
**Author:** [@vivu007x](https://discuss.elastic.co/u/vivu007x)\ **Replies:** 4\ **Last updated:** [June 28, 2021, 2:38pm UTC](https://discuss.elastic.co/t/how-can-i-build-verticalbar-chart-based-on-some-custom-calculation/276964 "2021-06-28T14:38:13Z")
Hi, I have created a VerticalBar chart in Kibana. I used the Metrics and Buckets option to choose the index and terms. Say, totalValue is an index with values \[available/offline/suspended\] errorValue is an index w… --- ## [elasticsearch-7.14.0-SNAPSHOT and 7.x branch depend on different versions of lucene](https://discuss.elastic.co/t/elasticsearch-7-14-0-snapshot-and-7-x-branch-depend-on-different-versions-of-lucene/277216)
**Author:** [@rafis](https://discuss.elastic.co/u/rafis)\ **Replies:** 3\ **Last updated:** [June 28, 2021, 1:46pm UTC](https://discuss.elastic.co/t/elasticsearch-7-14-0-snapshot-and-7-x-branch-depend-on-different-versions-of-lucene/277216 "2021-06-28T13:46:54Z")
Hello, https://snapshots.elastic.co/maven/org/elasticsearch/elasticsearch/7.14.0-SNAPSHOT/elasticsearch-7.14.0-SNAPSHOT.pom depends on lucene 8.9.0-snapshot-ddc238e5df8, but 7.x branch of elasticsearch repository - on 8… --- ## [Does Kibana use python in runtime?](https://discuss.elastic.co/t/does-kibana-use-python-in-runtime/277017)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 2\ **Last updated:** [June 28, 2021, 12:40pm UTC](https://discuss.elastic.co/t/does-kibana-use-python-in-runtime/277017 "2021-06-28T12:40:04Z")
We saw that xpack has few py files. Hence if we bundle rpm, rpmbuild expects /usr/bin/python. RHEL seems not having python as they have upgraded to python3. So I just wanted to know whether Kibana use python for runtim… --- ## [Kibana7.13 development problems](https://discuss.elastic.co/t/kibana7-13-development-problems/276975)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 3\ **Last updated:** [June 28, 2021, 12:36pm UTC](https://discuss.elastic.co/t/kibana7-13-development-problems/276975 "2021-06-28T12:36:33Z")
Hello all, I hope you are doing well! I have been trying to develop Kibana 7.13 and using yarn 1.22.5 and node v14.16.1. It's been a week since I am trying and nothing's happening. I am using windows 10. somebody aske… --- ## [Long ECS-Logged error.stack\_trace not shown in Kibana-Discover Document-Table](https://discuss.elastic.co/t/long-ecs-logged-error-stack-trace-not-shown-in-kibana-discover-document-table/277222)
**Author:** [@cproinger\_rbigroupit](https://discuss.elastic.co/u/cproinger_rbigroupit)\ **Replies:** 0\ **Last updated:** [June 28, 2021, 12:14pm UTC](https://discuss.elastic.co/t/long-ecs-logged-error-stack-trace-not-shown-in-kibana-discover-document-table/277222 "2021-06-28T12:14:38Z")
The problem is the following: Our Applications use ECS-Logs (Overview | Elastic Common Schema (ECS) Reference \[1.10\] | Elastic) to be indexed by filebeat. We use the default configuration which uses an "ignore\_above: 102… --- ## [Is there any Kibana API endpoint to get index pattern for the current login user or if there is an existing implementation for it?](https://discuss.elastic.co/t/is-there-any-kibana-api-endpoint-to-get-index-pattern-for-the-current-login-user-or-if-there-is-an-existing-implementation-for-it/276941)
**Author:** [@HemaS](https://discuss.elastic.co/u/HemaS)\ **Replies:** 2\ **Last updated:** [June 28, 2021, 11:57am UTC](https://discuss.elastic.co/t/is-there-any-kibana-api-endpoint-to-get-index-pattern-for-the-current-login-user-or-if-there-is-an-existing-implementation-for-it/276941 "2021-06-28T11:57:04Z")
I'm developing custom Kibana plugin and I want to get the current logged in user information from my plugin server. It would be great if any Kibana API endpoint is available to get such details. --- ## [Mapping multiple properties to a single one](https://discuss.elastic.co/t/mapping-multiple-properties-to-a-single-one/275966)
**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\ **Replies:** 3\ **Last updated:** [June 28, 2021, 11:21am UTC](https://discuss.elastic.co/t/mapping-multiple-properties-to-a-single-one/275966 "2021-06-28T11:21:18Z")
Hi, Let's say you have a cluster with application logs. And since multiple applications are sending data to the cluster they have different properties. For example, one application will send a log message in the "messag… --- ## [Different number of hits between DSL Query and KQL](https://discuss.elastic.co/t/different-number-of-hits-between-dsl-query-and-kql/277063)
**Author:** [@baddack](https://discuss.elastic.co/u/baddack)\ **Replies:** 1\ **Last updated:** [June 28, 2021, 11:11am UTC](https://discuss.elastic.co/t/different-number-of-hits-between-dsl-query-and-kql/277063 "2021-06-28T11:11:50Z")
Hello everyone, I was curious about working with DSL queries, so I made some tests and I found something strange. I have a winlogbeat-security index which contains windows security events and I am searching logs with … --- ## [Simple variation of counts - Serial differencing](https://discuss.elastic.co/t/simple-variation-of-counts-serial-differencing/277118)
**Author:** [@efftee](https://discuss.elastic.co/u/efftee)\ **Replies:** 3\ **Last updated:** [June 28, 2021, 10:48am UTC](https://discuss.elastic.co/t/simple-variation-of-counts-serial-differencing/277118 "2021-06-28T10:48:14Z")
Hi Community, The most apparently simplest of things, that you can do in seconds with a pen and paper, but spent hours trying in Kibana and failed so far. It's driving me completely crazy !! Try it and tell me … --- ## [Can't start elasticsearch](https://discuss.elastic.co/t/cant-start-elasticsearch/277086)
**Author:** [@Fatma\_Alzahraa](https://discuss.elastic.co/u/Fatma_Alzahraa)\ **Replies:** 2\ **Last updated:** [June 28, 2021, 10:37am UTC](https://discuss.elastic.co/t/cant-start-elasticsearch/277086 "2021-06-28T10:37:18Z")
Hello , I installed elasticsearch but can't start and get errors centos 7 jdk version : jdk 11 elasticsearch version : 7.13.2 \[root@server bin\]# systemctl status elasticsearch.service ● elasticsearch.service - Elas… --- ## [Calculate a list of identical date prefixes for a date range](https://discuss.elastic.co/t/calculate-a-list-of-identical-date-prefixes-for-a-date-range/277199)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 0\ **Last updated:** [June 28, 2021, 10:11am UTC](https://discuss.elastic.co/t/calculate-a-list-of-identical-date-prefixes-for-a-date-range/277199 "2021-06-28T10:11:06Z")
The background is, I want to use the keyword field to optimize the search of 1 date range, because it is keyword, I need to use prefix search, but if it is 1 date range, I need to calculate 2 date prefixes based on the s… --- ## [Text getting trimmed in Kibana](https://discuss.elastic.co/t/text-getting-trimmed-in-kibana/275607)
**Author:** [@kriss332](https://discuss.elastic.co/u/kriss332)\ **Replies:** 17\ **Last updated:** [June 28, 2021, 9:26am UTC](https://discuss.elastic.co/t/text-getting-trimmed-in-kibana/275607 "2021-06-28T09:26:28Z")
Hi all, I've uploaded a SCV file of HTTP traffic to ELK. The file has quite large values in URL field. These values may go upto 20 lines. Kibana is not showing the complete values, which is hampering my logs analysis. H… --- ## [The specified log group does not exist. Error when configuring lambda function for cloudwatch logs](https://discuss.elastic.co/t/the-specified-log-group-does-not-exist-error-when-configuring-lambda-function-for-cloudwatch-logs/277193)
**Author:** [@Origin\_Jing](https://discuss.elastic.co/u/Origin_Jing)\ **Replies:** 0\ **Last updated:** [June 28, 2021, 9:26am UTC](https://discuss.elastic.co/t/the-specified-log-group-does-not-exist-error-when-configuring-lambda-function-for-cloudwatch-logs/277193 "2021-06-28T09:26:00Z")
I'm trying to setup the functionbeat aws example. However, I keep getting "ResourceState: CREATE\_FAILED, ResourceStatusReason: The specified log group does not exist. (Service: AWSLogs; Status Code: 400; Error Code: Reso… --- ## [Logstash ERROR with CVS parsing in a Pod](https://discuss.elastic.co/t/logstash-error-with-cvs-parsing-in-a-pod/277180)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 2\ **Last updated:** [June 28, 2021, 8:41am UTC](https://discuss.elastic.co/t/logstash-error-with-cvs-parsing-in-a-pod/277180 "2021-06-28T08:41:13Z")
Hey there, I'm currently trying to automatically ingest a CVS when launching a Logstash pod connected to ECK and I have the following error: \[ERROR\] 2021-06-28 07:25:43.494 \[Converge PipelineAction::Create\\] agent… --- ## [Kibana URL links gets altered to security\_global](https://discuss.elastic.co/t/kibana-url-links-gets-altered-to-security-global/277177)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [June 28, 2021, 7:48am UTC](https://discuss.elastic.co/t/kibana-url-links-gets-altered-to-security-global/277177 "2021-06-28T07:48:59Z")
Hi all, I'm working on kibana 7.10.2 version. I have some kibana dashboards in Global Tenant. In my project I have an UI associated with Kibana. In my Kibana dashboard URL links redirect correctly. But the same in m… --- ## [How to run configured pipeline.yml in logstash](https://discuss.elastic.co/t/how-to-run-configured-pipeline-yml-in-logstash/276072)
**Author:** [@sudo-ranjith](https://discuss.elastic.co/u/sudo-ranjith)\ **Replies:** 9\ **Last updated:** [June 28, 2021, 6:27am UTC](https://discuss.elastic.co/t/how-to-run-configured-pipeline-yml-in-logstash/276072 "2021-06-28T06:27:41Z")
I have configured 2 logstash.conf file in pipelines.yml file, pipeline.id: sys\_log\_1 pipeline.workers: 2 path.config: "D:/Elastic/Logstash/7.12.1/config/logstash\_sys\_1.conf" pipeline.id: sys\_log\_2 pipeline.workers: … --- ## [Coordinating Node Role in Data Ingestion](https://discuss.elastic.co/t/coordinating-node-role-in-data-ingestion/277157)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 4\ **Last updated:** [June 28, 2021, 6:08am UTC](https://discuss.elastic.co/t/coordinating-node-role-in-data-ingestion/277157 "2021-06-28T06:08:05Z")
Can anybody please help me understand the role of coordinating node with respect to data ingestion. I understand the role of the coordinating nodes in terms of search queries (the scatter and gather phases), But what i… --- ## [Delete data from Indices](https://discuss.elastic.co/t/delete-data-from-indices/276540)
**Author:** [@danny.tveria](https://discuss.elastic.co/u/danny.tveria)\ **Replies:** 11\ **Last updated:** [June 28, 2021, 5:33am UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540 "2021-06-28T05:33:04Z")
Hi, I new in ELK. Our previous sysadmin installed and configured the elk server but he getting out of space... I want to know if I can delete data from indices without reconfiguring the entire server or ELK? --- ## [How to delete a field completely from an index](https://discuss.elastic.co/t/how-to-delete-a-field-completely-from-an-index/276893)
**Author:** [@kwoxer](https://discuss.elastic.co/u/kwoxer)\ **Replies:** 6\ **Last updated:** [June 28, 2021, 3:43am UTC](https://discuss.elastic.co/t/how-to-delete-a-field-completely-from-an-index/276893 "2021-06-28T03:43:45Z")
I created some field in the past for testing. Let's take the "STATISTIC-PROCESS-RUNTIME-HOUR" as an example. So I was able to find a way to remove that field from my index with: POST filebeat-7.13.0-2021.05.26-000001/\_… --- ## [カスタムソースコンテンツおよびドキュメントの取得方法](https://discuss.elastic.co/t/topic/276257)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 2\ **Last updated:** [June 28, 2021, 2:41am UTC](https://discuss.elastic.co/t/topic/276257 "2021-06-28T02:41:39Z")
私はEnterpriseSearchをオンプレミス環境にインストールし、WorkplaceSearchを利用しています。 一度登録したドキュメントのIDを知るにはどのようにしたらよいでしょうか？ 登録したドキュメントを編集するにはドキュメントIDが必要なようですが、管理者ページから知る術がありません。 実際に、私は下記のURLの例に従って、ドキュメントを登録しました。 管理者ページからはソースコンテンツとして登録したドキュメン… --- ## [Kibanaでログイン失敗時のログ取得など、認証系のセキュリティについて](https://discuss.elastic.co/t/kibana/277166)
**Author:** [@vavan](https://discuss.elastic.co/u/vavan)\ **Replies:** 0\ **Last updated:** [June 28, 2021, 12:02am UTC](https://discuss.elastic.co/t/kibana/277166 "2021-06-28T00:02:11Z")
Elasticsearch7.8.1＋Kibana7.8.1を使っています。 BasicプランでKibanaのログイン画面で下記セキュリティ系の機能はあるでしょうか？ #1 ログイン失敗時に失敗のログを出力する（できればソースIPなども） #2 連続で何回かログイン失敗した場合は、一定時間アカウントをロックアウトする #3 パスワードの複雑度を設定する。 #1 は有料プランかと思いますが、Basicプランでも代替手段のよ… --- ## [Elastic Data Node leaves the cluster after force merge](https://discuss.elastic.co/t/elastic-data-node-leaves-the-cluster-after-force-merge/276672)
**Author:** [@gdd](https://discuss.elastic.co/u/gdd)\ **Replies:** 4\ **Last updated:** [June 27, 2021, 11:00pm UTC](https://discuss.elastic.co/t/elastic-data-node-leaves-the-cluster-after-force-merge/276672 "2021-06-27T23:00:23Z")
Elasticsearch version 7.3.2, JVM 12.0.2; Heap 15 GB. The machine remains blocked and it's not possible to access by ssh. These the node statististics just before the issue. And these are the system metrics: Anyb… --- ## [Suricata Agent Integration - Unable to grab eve.json](https://discuss.elastic.co/t/suricata-agent-integration-unable-to-grab-eve-json/277076)
**Author:** [@Verax](https://discuss.elastic.co/u/Verax)\ **Replies:** 0\ **Last updated:** [June 25, 2021, 3:00pm UTC](https://discuss.elastic.co/t/suricata-agent-integration-unable-to-grab-eve-json/277076 "2021-06-25T15:00:33Z")
Hello all, I have successfully added the Elastic Agent to my security onion host and it is correctly grabbing the Zeek logs. However, the agent doesn’t seem to be able to pull the Suricata logs even though it was doing … --- ## [Convert text value to IP](https://discuss.elastic.co/t/convert-text-value-to-ip/277146)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 2\ **Last updated:** [June 27, 2021, 10:27pm UTC](https://discuss.elastic.co/t/convert-text-value-to-ip/277146 "2021-06-27T22:27:14Z")
Hello every body, I am parsing the wallix logs by using the kv plugin kv{ source =\> "syslog\_message" value\_split =\> "=\\"" field\_split =\> "\\"\\s" } As results i get all the output as text as you can see bellow: \> { \>… --- ## [DSL aggregation query in event pair documents for showing in kibana](https://discuss.elastic.co/t/dsl-aggregation-query-in-event-pair-documents-for-showing-in-kibana/277165)
**Author:** [@irajtaghlidi](https://discuss.elastic.co/u/irajtaghlidi)\ **Replies:** 0\ **Last updated:** [June 27, 2021, 10:03pm UTC](https://discuss.elastic.co/t/dsl-aggregation-query-in-event-pair-documents-for-showing-in-kibana/277165 "2021-06-27T22:03:30Z")
I have event document pairs that each one shows the start or end of an event. Every two events have a key with the save value. for example: doc1: { startTime: 123 endTime: 0 buildId: ABC1 (shared ID) } doc2: { … --- ## [Load balancer for multi logstash](https://discuss.elastic.co/t/load-balancer-for-multi-logstash/277071)
**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\ **Replies:** 2\ **Last updated:** [June 27, 2021, 8:16pm UTC](https://discuss.elastic.co/t/load-balancer-for-multi-logstash/277071 "2021-06-27T20:16:17Z")
Hi, We have 2 Logstash servers. I want to put them behind a load balancer and push the data to the logstash over the HTTPS. But now, I am using the HTTP input plugin without a load balancer. Let me show you my HTTPS co… --- ## [XML Logstash](https://discuss.elastic.co/t/xml-logstash/277160)
**Author:** [@leggomyego](https://discuss.elastic.co/u/leggomyego)\ **Replies:** 1\ **Last updated:** [June 27, 2021, 7:21pm UTC](https://discuss.elastic.co/t/xml-logstash/277160 "2021-06-27T19:21:27Z")
Custom fields have been tricky because they are in an array. I can rename them fine and everything, but I am looking for a Ruby answer to my issue. For instance, if the field names are \[test\]\[test\]\[0\]\[test\], \[test\]\[test\]… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=899) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=901)