# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=904 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 905 --- ## [Logstash problem with \\](https://discuss.elastic.co/t/logstash-problem-with/276775)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 2\ **Last updated:** [June 24, 2021, 6:47am UTC](https://discuss.elastic.co/t/logstash-problem-with/276775 "2021-06-24T06:47:38Z")
Hi every one, I want to put the values inside a path in some field. I want to split the path so i can take every value inside it but i can't split with \\ because is a special character. I tried to replace \\ with / but … --- ## [Kibana permission denied, open '/etc/kibana/kibana.yml'](https://discuss.elastic.co/t/kibana-permission-denied-open-etc-kibana-kibana-yml/276821)
**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\ **Replies:** 4\ **Last updated:** [June 24, 2021, 6:43am UTC](https://discuss.elastic.co/t/kibana-permission-denied-open-etc-kibana-kibana-yml/276821 "2021-06-24T06:43:53Z")
I have Kibana installed under the sudo user. As I try to run /usr/share/kibana/bin/kibana -c /etc/kibana/kibana.yml I get an error: Error: EACCES: permission denied, open '/etc/kibana/kibana.yml' kibana.yml chmod i… --- ## [Log4j2.properties- log rotation issue in ES-7.5.2 Cluster](https://discuss.elastic.co/t/log4j2-properties-log-rotation-issue-in-es-7-5-2-cluster/276881)
**Author:** [@anguri\_sudhakar](https://discuss.elastic.co/u/anguri_sudhakar)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 6:35am UTC](https://discuss.elastic.co/t/log4j2-properties-log-rotation-issue-in-es-7-5-2-cluster/276881 "2021-06-24T06:35:09Z")
Hi Team , need help on log4j2.properties, not rolling over when new day happens. We are using default log4j2.properties file with elasticsearch-7.5.2 version. One observation ,in master1&2 nodes are rolling every end o… --- ## [ECE 2.10.0 released](https://discuss.elastic.co/t/ece-2-10-0-released/276820)
**Author:** [@Przemyslaw\_H](https://discuss.elastic.co/u/Przemyslaw_H)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 6:35am UTC](https://discuss.elastic.co/t/ece-2-10-0-released/276820 "2021-06-24T06:35:01Z")
We are pleased to announce that ECE 2.10.0 has been released today. Release notes: Elastic Cloud Enterprise 2.10.0 | Elastic Cloud Enterprise Reference \[2.10\] | Elastic --- ## [Logstash 7.10.x version does not start](https://discuss.elastic.co/t/logstash-7-10-x-version-does-not-start/275178)
**Author:** [@Ramya\_Ramamurthy1](https://discuss.elastic.co/u/Ramya_Ramamurthy1)\ **Replies:** 3\ **Last updated:** [June 24, 2021, 6:06am UTC](https://discuss.elastic.co/t/logstash-7-10-x-version-does-not-start/275178 "2021-06-24T06:06:51Z")
I have downloaded the .tar.gz file and tried bringing up logstash through the logstash script. I am unable to bring up any of the 7.10.2 versions of logstash with the below error. I see posts about the permissions of th… --- ## [Date format in Index template kibana](https://discuss.elastic.co/t/date-format-in-index-template-kibana/276791)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 3\ **Last updated:** [June 24, 2021, 5:31am UTC](https://discuss.elastic.co/t/date-format-in-index-template-kibana/276791 "2021-06-24T05:31:11Z")
Can you please help me with the correct format for Date that I can give in my index mapping template to get the date in Epoch format. I am getting the date from source in epoch format like this "1624348829313". I want i… --- ## [Hosting/Indexing strategy for long-term storing data (if possible single node)](https://discuss.elastic.co/t/hosting-indexing-strategy-for-long-term-storing-data-if-possible-single-node/276657)
**Author:** [@yBother](https://discuss.elastic.co/u/yBother)\ **Replies:** 5\ **Last updated:** [June 24, 2021, 5:26am UTC](https://discuss.elastic.co/t/hosting-indexing-strategy-for-long-term-storing-data-if-possible-single-node/276657 "2021-06-24T05:26:57Z")
I have following requirements, that appear to be not so typical: Indexing up to ~5000 documents per second (small docs, (semi) structured, needs to reliable!) Exporting / Querying of big data sets up to 5\*10^6 document… --- ## [Containerd Metrics](https://discuss.elastic.co/t/containerd-metrics/275548)
**Author:** [@jonas27](https://discuss.elastic.co/u/jonas27)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 5:23am UTC](https://discuss.elastic.co/t/containerd-metrics/275548 "2021-06-24T05:23:47Z")
Hi, We recently upgraded our container runtime from docker to containerd. Is there a (planned) module to support querying the containerd socket for container metrics? Something like: containerd.yml: |- - module:… --- ## [Kibana DDOS dashboard - Detailed dashboard](https://discuss.elastic.co/t/kibana-ddos-dashboard-detailed-dashboard/276182)
**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Replies:** 10\ **Last updated:** [June 24, 2021, 4:10am UTC](https://discuss.elastic.co/t/kibana-ddos-dashboard-detailed-dashboard/276182 "2021-06-24T04:10:19Z")
I'm finding it a little challenging in developing dashboards beyond a line and pie chart. Looking for advice from kibana experts who can guide me towards resources or personal tips and tricks. Given the python script, d… --- ## [Elasticsearch购买xpack安全功能官方联系方式](https://discuss.elastic.co/t/elasticsearch-xpack/276859)
**Author:** [@peng-elasticsearch](https://discuss.elastic.co/u/peng-elasticsearch)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 1:39am UTC](https://discuss.elastic.co/t/elasticsearch-xpack/276859 "2021-06-24T01:39:59Z")
elasticsearch购买xpack安全功能官方咨询渠道有哪些？？ 官网都没找见联系方式或者其他 麻烦具体发下链接或者联系方式信息 --- ## [Creating Custom Index Template](https://discuss.elastic.co/t/creating-custom-index-template/276847)
**Author:** [@jthart](https://discuss.elastic.co/u/jthart)\ **Replies:** 4\ **Last updated:** [June 24, 2021, 2:22am UTC](https://discuss.elastic.co/t/creating-custom-index-template/276847 "2021-06-24T02:22:29Z")
I have a UniFi controller sending syslog data to logstash with custom patterns defined for parsing, and the data flow itself is working. However, the issue I am having is that I have no clue how to get the index definiti… --- ## [Data backup from prod elastic cluster to backup elastic cluster periodically](https://discuss.elastic.co/t/data-backup-from-prod-elastic-cluster-to-backup-elastic-cluster-periodically/276855)
**Author:** [@jebuna\_hau](https://discuss.elastic.co/u/jebuna_hau)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 12:31am UTC](https://discuss.elastic.co/t/data-backup-from-prod-elastic-cluster-to-backup-elastic-cluster-periodically/276855 "2021-06-24T00:31:36Z")
Hello, I am currently trying to find the best way to keep two elastic clusters in sync. I tried it by fetching the modified data from the main cluster and update/insert to the backup cluster. The idea is to keep the two… --- ## [Is Elasticsearch refresh interval useless option when updating document of specific index?](https://discuss.elastic.co/t/is-elasticsearch-refresh-interval-useless-option-when-updating-document-of-specific-index/276770)
**Author:** [@TheDevLuffy](https://discuss.elastic.co/u/TheDevLuffy)\ **Replies:** 1\ **Last updated:** [June 23, 2021, 9:41pm UTC](https://discuss.elastic.co/t/is-elasticsearch-refresh-interval-useless-option-when-updating-document-of-specific-index/276770 "2021-06-23T21:41:45Z")
Hello Is Elasticsearch refresh interval useless option when updating document of specific index ? For Example, I have two indices on my Elasticsearch (index-001, index-002) and these indices have default refresh\_inter… --- ## [Elasticsearch](https://discuss.elastic.co/t/elasticsearch/276615)
**Author:** [@Sanchit\_Agrawal](https://discuss.elastic.co/u/Sanchit_Agrawal)\ **Replies:** 1\ **Last updated:** [June 23, 2021, 9:35pm UTC](https://discuss.elastic.co/t/elasticsearch/276615 "2021-06-23T21:35:18Z")
I am new to elasticsearch. Please can you help with my other doubts- I have daily pushed to ES and the request cache is getting cleared automatically for as low as 1 document also. Can I restrict this from getting clea… --- ## [Official documentation for Alerts API?](https://discuss.elastic.co/t/official-documentation-for-alerts-api/276851)
**Author:** [@jrykowski-huron](https://discuss.elastic.co/u/jrykowski-huron)\ **Replies:** 0\ **Last updated:** [June 23, 2021, 9:23pm UTC](https://discuss.elastic.co/t/official-documentation-for-alerts-api/276851 "2021-06-23T21:23:33Z")
Continuing the discussion from Kibana Alerts from API: "Without official documentation and support of this API I can't really steer you in any other direction." Is there roadmap that includes alerts API as an official … --- ## [Elasticsearch alert](https://discuss.elastic.co/t/elasticsearch-alert/275112)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 3\ **Last updated:** [June 23, 2021, 9:21pm UTC](https://discuss.elastic.co/t/elasticsearch-alert/275112 "2021-06-23T21:21:28Z")
Hello Expert, I would like to create an alert when field(number) increase or decrease 30% from the last day or last inserted value. How can I create that.. pls guide me. Thanks in advance --- ## [Notwithin operator](https://discuss.elastic.co/t/notwithin-operator/276849)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 0\ **Last updated:** [June 23, 2021, 9:14pm UTC](https://discuss.elastic.co/t/notwithin-operator/276849 "2021-06-23T21:14:50Z")
I’m trying to achieve with searches Notwithin operators but no luck with intervals query, • a?e NOTWITHIN (How are yo?): find all the documents not having “a?e” (? can be any character) inside the phrase “How are yo?”… --- ## [Wildcard search](https://discuss.elastic.co/t/wildcard-search/276848)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 0\ **Last updated:** [June 23, 2021, 9:08pm UTC](https://discuss.elastic.co/t/wildcard-search/276848 "2021-06-23T21:08:10Z")
I’m trying to achieve searches with wildcard characters but no luck with match and intervals query, Alice \* \* \* Bob: find all the documents that have a 5-word phrase starting with “Alice” followed by 3 words and then … --- ## [Logstash error on new install](https://discuss.elastic.co/t/logstash-error-on-new-install/276819)
**Author:** [@scott2](https://discuss.elastic.co/u/scott2)\ **Replies:** 4\ **Last updated:** [June 23, 2021, 7:47pm UTC](https://discuss.elastic.co/t/logstash-error-on-new-install/276819 "2021-06-23T19:47:02Z")
I installed logstash 7.13.2 and i'm getting a couple configuration errors that I cannot seem to find the cause. \ Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"Log… --- ## [Solved: Logstash Is Receiving Data From Winlogbeat But Isn't Showing In Kibana](https://discuss.elastic.co/t/solved-logstash-is-receiving-data-from-winlogbeat-but-isnt-showing-in-kibana/276827)
**Author:** [@Jared9922](https://discuss.elastic.co/u/Jared9922)\ **Replies:** 0\ **Last updated:** [June 23, 2021, 5:18pm UTC](https://discuss.elastic.co/t/solved-logstash-is-receiving-data-from-winlogbeat-but-isnt-showing-in-kibana/276827 "2021-06-23T17:18:01Z")
EDIT: I have found a solution to the problem so I am going to post it here just in case anyone else runs into the same issue. The thing that was missing from my config file was a way to specify the index. I don't underst… --- ## [Why using \`fields\` changes the behavior of default operator?](https://discuss.elastic.co/t/why-using-fields-changes-the-behavior-of-default-operator/276840)
**Author:** [@iLemming](https://discuss.elastic.co/u/iLemming)\ **Replies:** 0\ **Last updated:** [June 23, 2021, 7:12pm UTC](https://discuss.elastic.co/t/why-using-fields-changes-the-behavior-of-default-operator/276840 "2021-06-23T19:12:44Z")
I have encountered a strange thing while trying to use fields: option in a "query\_string" query: Let's assume we have an entity and when using a query such as: "query\_string" : { "default\_operator" : "AND", "qu… --- ## [Разбор "необязательных" полей лога, состоящих только из символов кириллицы](https://discuss.elastic.co/t/topic/276701)
**Author:** [@lkfmasd](https://discuss.elastic.co/u/lkfmasd)\ **Replies:** 10\ **Last updated:** [June 23, 2021, 6:48pm UTC](https://discuss.elastic.co/t/topic/276701 "2021-06-23T18:48:21Z")
Добрый день. Есть лог вида MethodName, Level, Process, A=Value1,B=Value2,C=Иванов Иван Иванович,D=Value3,E=Value4. Поля(подстроки лога) A=Value1,B=Value2,C=Иванов Иван Иванович,D=Value3,E=Value4 являются необязательным… --- ## [How to disable user interaction with an embedded (iframe) visualization](https://discuss.elastic.co/t/how-to-disable-user-interaction-with-an-embedded-iframe-visualization/276811)
**Author:** [@Kostas\_elastic](https://discuss.elastic.co/u/Kostas_elastic)\ **Replies:** 1\ **Last updated:** [June 23, 2021, 6:22pm UTC](https://discuss.elastic.co/t/how-to-disable-user-interaction-with-an-embedded-iframe-visualization/276811 "2021-06-23T18:22:52Z")
Hi all, I have embedded with Iframes a kibana visualization into a web page. Is there any way to disable certain user actions that interact with the visualization? For example, to disable the users' ability to scroll, f… --- ## [Ruby exceptions logstash](https://discuss.elastic.co/t/ruby-exceptions-logstash/276829)
**Author:** [@Roberto\_B](https://discuss.elastic.co/u/Roberto_B)\ **Replies:** 1\ **Last updated:** [June 23, 2021, 6:19pm UTC](https://discuss.elastic.co/t/ruby-exceptions-logstash/276829 "2021-06-23T18:19:24Z")
Hi all, i'm in trouble with Ruby exceptions i get 2 types of exceptions: \[ERROR\]\[logstash.filters.ruby \]\[windows-patching\]\[7da18e5397d31e1f8d249dc2ef273bcbcc32d26e064f064c3138ef1bcbc3c2a0\] Ruby exception occurred: … --- ## [HeartBeat complex time range](https://discuss.elastic.co/t/heartbeat-complex-time-range/276795)
**Author:** [@zerlas](https://discuss.elastic.co/u/zerlas)\ **Replies:** 2\ **Last updated:** [June 23, 2021, 6:16pm UTC](https://discuss.elastic.co/t/heartbeat-complex-time-range/276795 "2021-06-23T18:16:52Z")
Hi, I'm looking for help about using a custom time range for monitoring uptime of some services over http using heartbeat. I want to set for the following time range : 8-12:30 and 13:30-18 (every minute should be good … --- ## [Creating an email connector](https://discuss.elastic.co/t/creating-an-email-connector/275904)
**Author:** [@EvanGertis](https://discuss.elastic.co/u/EvanGertis)\ **Replies:** 4\ **Last updated:** [June 23, 2021, 6:06pm UTC](https://discuss.elastic.co/t/creating-an-email-connector/275904 "2021-06-23T18:06:33Z")
What exactly needs to be created for this action ? I am reviewing the documentation listed here: Email connector and action | Kibana Guide \[7.13\] | Elastic. --- ## [Visualize how much time (24h) processes took on the server](https://discuss.elastic.co/t/visualize-how-much-time-24h-processes-took-on-the-server/276728)
**Author:** [@kwoxer](https://discuss.elastic.co/u/kwoxer)\ **Replies:** 5\ **Last updated:** [June 23, 2021, 5:24pm UTC](https://discuss.elastic.co/t/visualize-how-much-time-24h-processes-took-on-the-server/276728 "2021-06-23T17:24:29Z")
I would like to have a diagram like this But I was only able to get this one This is the defined fields: So my question are: how can I show hours instead of the second? how to have bars that show the second… --- ## [Adding prefex to the field extracted via KV plugin](https://discuss.elastic.co/t/adding-prefex-to-the-field-extracted-via-kv-plugin/276621)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 3\ **Last updated:** [June 23, 2021, 5:18pm UTC](https://discuss.elastic.co/t/adding-prefex-to-the-field-extracted-via-kv-plugin/276621 "2021-06-23T17:18:55Z")
Hello every body, Apr 1 15:00:01 pc-tst cft: 21/04/20 00:00:00 CFTC12I IDTU=A0007GK PART=LKOR STATE=Y PHASE=Y PHASESTEP=C DIRECT=S TYPE=F SENTINEL\_STATE=POST\_PROC Deleted Is there a method to rename the fields extr… --- ## [Logstash Per Pipeline logs update?](https://discuss.elastic.co/t/logstash-per-pipeline-logs-update/276751)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 2\ **Last updated:** [June 23, 2021, 4:58pm UTC](https://discuss.elastic.co/t/logstash-per-pipeline-logs-update/276751 "2021-06-23T16:58:19Z")
Hi everyone! Saw this thread. Now I'd like to know if do we have any update on logstash's per pipeline logfiles? --- ## [Most visited domains (IPs)](https://discuss.elastic.co/t/most-visited-domains-ips/276761)
**Author:** [@\_codex](https://discuss.elastic.co/u/_codex)\ **Replies:** 1\ **Last updated:** [June 23, 2021, 4:50pm UTC](https://discuss.elastic.co/t/most-visited-domains-ips/276761 "2021-06-23T16:50:17Z")
Hello good people of the internet, Firstly I know how FRUSTRATING it is to answer stupid questions regarding technical stuff however I am in charge of SOC for our company and we have just changed from SPLUNK to Kibana 7… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=903) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=905)