# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=929 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 930 --- ## [Setting for alerts in elk](https://discuss.elastic.co/t/setting-for-alerts-in-elk/274199)
**Author:** [@varunbsgaur](https://discuss.elastic.co/u/varunbsgaur)\ **Replies:** 1\ **Last updated:** [June 1, 2021, 7:05pm UTC](https://discuss.elastic.co/t/setting-for-alerts-in-elk/274199 "2021-06-01T19:05:32Z")
In order to use alerts in ELK I followed the mentioned steps but always found some error while starting up the local elasticsearch and kibana servers. Kindly help me know where I went wrong . step 1 :creating certifica… --- ## [Dashboards with non-uniform indexes in Kibana](https://discuss.elastic.co/t/dashboards-with-non-uniform-indexes-in-kibana/274669)
**Author:** [@obnkf](https://discuss.elastic.co/u/obnkf)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 5:52pm UTC](https://discuss.elastic.co/t/dashboards-with-non-uniform-indexes-in-kibana/274669 "2021-06-01T17:52:35Z")
Here's my problem: I have two indexes that share an ID field of the same name and type (source\_location), but no other fields: Index M contains the source's metadata (e.g. who created the source, digital signature info… --- ## [Elastic APM .NET Agent 1.10.0 Security Update](https://discuss.elastic.co/t/elastic-apm-net-agent-1-10-0-security-update/274668)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 5:42pm UTC](https://discuss.elastic.co/t/elastic-apm-net-agent-1-10-0-security-update/274668 "2021-06-01T17:42:39Z")
Elastic APM .NET Agent information disclosure (ESA-2021-14) The Elastic APM .NET Agent can leak sensitive HTTP header information when logging the details during an application error. Normally, the APM agent will saniti… --- ## [Unable to access Enterprise Search on a cloud VM](https://discuss.elastic.co/t/unable-to-access-enterprise-search-on-a-cloud-vm/274432)
**Author:** [@kristang91](https://discuss.elastic.co/u/kristang91)\ **Replies:** 2\ **Last updated:** [June 1, 2021, 5:11pm UTC](https://discuss.elastic.co/t/unable-to-access-enterprise-search-on-a-cloud-vm/274432 "2021-06-01T17:11:00Z")
Hi there, only posting because I've really tried reading all documentation and googling, but found no solution. I've gotten a docker-compose consisting of 3 ES nodes, kibana, enterprise search, a React front-end (Elastic… --- ## [Thread\_pool write change size of queue](https://discuss.elastic.co/t/thread-pool-write-change-size-of-queue/274470)
**Author:** [@Cristian1988](https://discuss.elastic.co/u/Cristian1988)\ **Replies:** 2\ **Last updated:** [June 1, 2021, 4:53pm UTC](https://discuss.elastic.co/t/thread-pool-write-change-size-of-queue/274470 "2021-06-01T16:53:07Z")
Hi, We have a clúster running with elastic version 7.8.2, that by default the write queue\_size of thread\_pool is 200 In the lastest versions of elasticsearch this queue\_size by default is 10000. My question is can i up… --- ## [Comparing Two Aggregate Buckets](https://discuss.elastic.co/t/comparing-two-aggregate-buckets/274663)
**Author:** [@gshanklin](https://discuss.elastic.co/u/gshanklin)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 3:59pm UTC](https://discuss.elastic.co/t/comparing-two-aggregate-buckets/274663 "2021-06-01T15:59:42Z")
Hello, I am having a difficult time trying to compare the results of two aggerates. More specifically, I want to find unique "keys" between two aggerate buckets. For example, I have the two aggregates on the sample web … --- ## [Logstash](https://discuss.elastic.co/t/logstash/273611)
**Author:** [@httrack](https://discuss.elastic.co/u/httrack)\ **Replies:** 3\ **Last updated:** [June 1, 2021, 4:05pm UTC](https://discuss.elastic.co/t/logstash/273611 "2021-06-01T16:05:29Z")
Hello Team. I am having problems with a client. How can I activate the filebeat-\* index and the Logstash-\* index to have the syslog in the Discover part of Kibana --- ## [Heartbeat autodiscover kubernetes pods](https://discuss.elastic.co/t/heartbeat-autodiscover-kubernetes-pods/273642)
**Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\ **Replies:** 4\ **Last updated:** [June 1, 2021, 4:02pm UTC](https://discuss.elastic.co/t/heartbeat-autodiscover-kubernetes-pods/273642 "2021-06-01T16:02:18Z")
Hi i want heartbeat to find every single kubernetes pod and report it to elasticsearch uptime, however all i am able to currentlty get is the kubernetes nodes and my 1x http monitor. here is my config data: heartbea… --- ## [Scripted Field EsError in Kibana](https://discuss.elastic.co/t/scripted-field-eserror-in-kibana/274542)
**Author:** [@opdelta](https://discuss.elastic.co/u/opdelta)\ **Replies:** 1\ **Last updated:** [June 1, 2021, 3:38pm UTC](https://discuss.elastic.co/t/scripted-field-eserror-in-kibana/274542 "2021-06-01T15:38:18Z")
Hey there, I have Apache logs imported in ES where the "request.keyword" field contains the path of the accessed document of a server. For example: "/category/path/to/requested/data/xml/file.xml" I want to sort in a da… --- ## [Phrase/ multi-worlds search](https://discuss.elastic.co/t/phrase-multi-worlds-search/274661)
**Author:** [@lalitesh](https://discuss.elastic.co/u/lalitesh)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 3:43pm UTC](https://discuss.elastic.co/t/phrase-multi-worlds-search/274661 "2021-06-01T15:43:01Z")
I am trying to implement a use case wherein a user can make a multi-words/ phrase search for 'product\_name' field. Assuming someone is searching for 'Richest Man', the following results should come: The Richest Man in… --- ## [Extract fields from JSON Flie to Elastic using Logstash filters](https://discuss.elastic.co/t/extract-fields-from-json-flie-to-elastic-using-logstash-filters/274610)
**Author:** [@Sirine](https://discuss.elastic.co/u/Sirine)\ **Replies:** 5\ **Last updated:** [June 1, 2021, 3:18pm UTC](https://discuss.elastic.co/t/extract-fields-from-json-flie-to-elastic-using-logstash-filters/274610 "2021-06-01T15:18:50Z")
Hello, I'm trying to extract fields from my JSON file, but I have \_jsonparsefailure" error, I tried many other filters like grok Split or vk but always the same results, logstash doesn't extract the values of the fields… --- ## [Elasticsearch C# Nest unit tests with Moq : fail to mock concrete class](https://discuss.elastic.co/t/elasticsearch-c-nest-unit-tests-with-moq-fail-to-mock-concrete-class/274657)
**Author:** [@Nicolas\_Rey](https://discuss.elastic.co/u/Nicolas_Rey)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 3:06pm UTC](https://discuss.elastic.co/t/elasticsearch-c-nest-unit-tests-with-moq-fail-to-mock-concrete-class/274657 "2021-06-01T15:06:16Z")
Hi, I need to mock some methods and properties in Nest.IElasticClient interface that is used in my repo. As example I need to stub the Indices.Exists() method to return an ExistsResponse having an Exists property return… --- ## [Elasticsearch 7.13 | Error deleting field mapping script, cluster return red state](https://discuss.elastic.co/t/elasticsearch-7-13-error-deleting-field-mapping-script-cluster-return-red-state/274655)
**Author:** [@joao](https://discuss.elastic.co/u/joao)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 2:48pm UTC](https://discuss.elastic.co/t/elasticsearch-7-13-error-deleting-field-mapping-script-cluster-return-red-state/274655 "2021-06-01T14:48:33Z")
Hi, I've been testing the new features in the Elasticsearch 7.13, and I have a problem to deleting a field mapping script. This is my mapping: PUT runtime\_2\_indexed\_field { "mappings": { "propert… --- ## [Add a field depending on first log](https://discuss.elastic.co/t/add-a-field-depending-on-first-log/274653)
**Author:** [@A\_Chichi](https://discuss.elastic.co/u/A_Chichi)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 2:37pm UTC](https://discuss.elastic.co/t/add-a-field-depending-on-first-log/274653 "2021-06-01T14:37:14Z")
Hello, I would like to add a field in my logstash pipeline. But this field would be a dynamic field. Here is a sample of my file : date\_log;job\_id;service\_id;name;progress;status;duration 2021-06-01 16:16:03;nJzP4g;7… --- ## [Elasticsearch seems not to receive logs from logstash](https://discuss.elastic.co/t/elasticsearch-seems-not-to-receive-logs-from-logstash/274648)
**Author:** [@gisellecarballo](https://discuss.elastic.co/u/gisellecarballo)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 2:20pm UTC](https://discuss.elastic.co/t/elasticsearch-seems-not-to-receive-logs-from-logstash/274648 "2021-06-01T14:20:59Z")
Hi, anyone help me sort out why elasticsearch seems not to receive logs from logstash. I am new to ELK. here is my config so far. TIA /etc/elasticsearch/elasticsearch.yml network.host: 0.0.0.0 transport.host: localhos… --- ## [Json data ingested contains unicode data (xml)](https://discuss.elastic.co/t/json-data-ingested-contains-unicode-data-xml/274647)
**Author:** [@justroll](https://discuss.elastic.co/u/justroll)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 2:20pm UTC](https://discuss.elastic.co/t/json-data-ingested-contains-unicode-data-xml/274647 "2021-06-01T14:20:15Z")
Hi I'm a little bit puzzled .. We got logging coming from a k8s , it is logging in json to our elastic , the logging exposes a xml file in the message field, this is encoded in unicode like \ \ \ **Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 1\ **Last updated:** [June 1, 2021, 1:40pm UTC](https://discuss.elastic.co/t/how-to-use-mutate-filter-plugin-in-output/274578 "2021-06-01T13:40:36Z") I have a logstash configuration. With that configuration logstash do some operation in filter and send outputs. Everything works well. I want one more elasticsearch output in same configuration file. I mean after parsin… --- ## [Ingest plugin context data](https://discuss.elastic.co/t/ingest-plugin-context-data/273788)
**Author:** [@nmalocic](https://discuss.elastic.co/u/nmalocic)\ **Replies:** 7\ **Last updated:** [June 1, 2021, 1:29pm UTC](https://discuss.elastic.co/t/ingest-plugin-context-data/273788 "2021-06-01T13:29:16Z")
Hi everyone, I am building ingest plugin, and I was wondering if there is any way to know index, or pipeline name from plugin? My idea is to enable users to have multiple configurations so this seems like easy solution… --- ## [Deliberately fail event in logstash to requeue it](https://discuss.elastic.co/t/deliberately-fail-event-in-logstash-to-requeue-it/274635)
**Author:** [@tumbledwyer](https://discuss.elastic.co/u/tumbledwyer)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 1:19pm UTC](https://discuss.elastic.co/t/deliberately-fail-event-in-logstash-to-requeue-it/274635 "2021-06-01T13:19:09Z")
Hi Is there a way to fail an event so that it can be requeued for processing later? Let's take this conf for example: input { pipeline { address =\> "previous-pipe" } } filter { elasticsearch { hosts =\> \[… --- ## [Logstash one to one mapping of two lines](https://discuss.elastic.co/t/logstash-one-to-one-mapping-of-two-lines/274634)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 1:17pm UTC](https://discuss.elastic.co/t/logstash-one-to-one-mapping-of-two-lines/274634 "2021-06-01T13:17:15Z")
hi guys, how to do one to one mapping of below two lines - number of comma separated values in message and header fields can be dynamic but number of items in both fields will be same "message" =\> "error\_count,10,20,3… --- ## [Prefix field with specific index name while searching on multiple indices](https://discuss.elastic.co/t/prefix-field-with-specific-index-name-while-searching-on-multiple-indices/274628)
**Author:** [@Dgame](https://discuss.elastic.co/u/Dgame)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 12:14pm UTC](https://discuss.elastic.co/t/prefix-field-with-specific-index-name-while-searching-on-multiple-indices/274628 "2021-06-01T12:14:39Z")
Let's say I have two different indices (index\_a and index\_b) which both have different fields. For example index\_a has the field title and body and index\_b has only the field body. Now I'm searching like this: { "quer… --- ## [Splunk data to elasticsearch migration](https://discuss.elastic.co/t/splunk-data-to-elasticsearch-migration/274623)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [June 1, 2021, 12:08pm UTC](https://discuss.elastic.co/t/splunk-data-to-elasticsearch-migration/274623 "2021-06-01T12:08:54Z")
Is there a way data from Splunk can be indexed into elasticserach considering few tens of TB of data? Is there any utility program which can be used to export data from splunk? Thanks. --- ## [Upgrade hardware size - Any downtime?](https://discuss.elastic.co/t/upgrade-hardware-size-any-downtime/274613)
**Author:** [@Cesidio\_DiBenedetto](https://discuss.elastic.co/u/Cesidio_DiBenedetto)\ **Replies:** 5\ **Last updated:** [June 1, 2021, 12:03pm UTC](https://discuss.elastic.co/t/upgrade-hardware-size-any-downtime/274613 "2021-06-01T12:03:38Z")
Will an upgrade in hardware size cause any downtime? --- ## [Performance issues when returning many ids](https://discuss.elastic.co/t/performance-issues-when-returning-many-ids/274618)
**Author:** [@Kristian\_Andersen](https://discuss.elastic.co/u/Kristian_Andersen)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 10:52am UTC](https://discuss.elastic.co/t/performance-issues-when-returning-many-ids/274618 "2021-06-01T10:52:46Z")
Hello, I have a search index with 200.000 documents, and experience bad performance when performing searches that returns multiple results. Each document consists of 1040 fields all mapped as keywords. See filemapping … --- ## [Could not find the logstash.yml](https://discuss.elastic.co/t/could-not-find-the-logstash-yml/274614)
**Author:** [@Kanishk\_Madan](https://discuss.elastic.co/u/Kanishk_Madan)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 10:35am UTC](https://discuss.elastic.co/t/could-not-find-the-logstash-yml/274614 "2021-06-01T10:35:53Z")
I have a problem when i run a file using this command :sudo /usr/share/logstash/bin/logstash -f /etc/logstash/logstash.conf It shows:- Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/… --- ## [Using different names for services created by the operator](https://discuss.elastic.co/t/using-different-names-for-services-created-by-the-operator/273560)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 2\ **Last updated:** [June 1, 2021, 10:05am UTC](https://discuss.elastic.co/t/using-different-names-for-services-created-by-the-operator/273560 "2021-06-01T10:05:11Z")
When creating the Elasticsearch resource (using ECK), the http service from where es is accessible is by default named esresourcename-es-http. Is this configurable? And in general, are all the options that can be confi… --- ## [Remove drive letter from file path GROK pattern](https://discuss.elastic.co/t/remove-drive-letter-from-file-path-grok-pattern/274609)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 1\ **Last updated:** [June 1, 2021, 9:57am UTC](https://discuss.elastic.co/t/remove-drive-letter-from-file-path-grok-pattern/274609 "2021-06-01T09:57:00Z")
Im trying to remove the drive letter from file paths as they are ingested through the pipeline, my input is something like C:\\folder1\\folder2\\file.ext (This is just an example the file could be many more folders deep) … --- ## [Identify event fom JDBC input](https://discuss.elastic.co/t/identify-event-fom-jdbc-input/274607)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 9:36am UTC](https://discuss.elastic.co/t/identify-event-fom-jdbc-input/274607 "2021-06-01T09:36:08Z")
Hi, I'm currently having issues to identify my JDBC input from my beat input and all others. I'm quite new to using jdbc as input in logstash. I actually have a workflow where data from my beats go through a bunch of f… --- ## [Change value of @timestamp](https://discuss.elastic.co/t/change-value-of-timestamp/274343)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 2\ **Last updated:** [June 1, 2021, 9:33am UTC](https://discuss.elastic.co/t/change-value-of-timestamp/274343 "2021-06-01T09:33:29Z")
Hello! How can I remplace the value of @timestamp with the value that I get with a regular expresion? I need change the value of @timestamp because when the data is indexed in elasticsearch it shows in this field the v… --- ## [Creating a pipeline which runs with particular interval on same index](https://discuss.elastic.co/t/creating-a-pipeline-which-runs-with-particular-interval-on-same-index/274584)
**Author:** [@aswanth\_jabba](https://discuss.elastic.co/u/aswanth_jabba)\ **Replies:** 6\ **Last updated:** [June 1, 2021, 9:22am UTC](https://discuss.elastic.co/t/creating-a-pipeline-which-runs-with-particular-interval-on-same-index/274584 "2021-06-01T09:22:45Z")
Can anyone please tell me, if this is possible ? I am trying to create a pipeline but I want it to run in particular intervals on the same index For example : { "description":"Find the Progress", "processors":\[ … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=928) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=930)