# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=933 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 934 --- ## [Multiline: flush downstream error java.io.IOException since upgrading from 6.8 to 7.12](https://discuss.elastic.co/t/multiline-flush-downstream-error-java-io-ioexception-since-upgrading-from-6-8-to-7-12/274236)
**Author:** [@soulless](https://discuss.elastic.co/u/soulless)\ **Replies:** 3\ **Last updated:** [May 28, 2021, 5:51pm UTC](https://discuss.elastic.co/t/multiline-flush-downstream-error-java-io-ioexception-since-upgrading-from-6-8-to-7-12/274236 "2021-05-28T17:51:49Z")
We have a multiline config that we use for capturing exceptions. codec =\> multiline { pattern =\> "^%{TIMESTAMP\_ISO8601}" negate =\> true what =\> "previous" } It appears to still be working, but since upgradi… --- ## [Kibana: representing evolution of boolean field in time](https://discuss.elastic.co/t/kibana-representing-evolution-of-boolean-field-in-time/274336)
**Author:** [@mostpha456](https://discuss.elastic.co/u/mostpha456)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 5:14pm UTC](https://discuss.elastic.co/t/kibana-representing-evolution-of-boolean-field-in-time/274336 "2021-05-28T17:14:47Z")
Hello, I am trying to represent the evolution over time of a boolean field. Do you have any suggestion how to do it ? Thank you --- ## [Using already provided time period](https://discuss.elastic.co/t/using-already-provided-time-period/274299)
**Author:** [@111238](https://discuss.elastic.co/u/111238)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 5:03pm UTC](https://discuss.elastic.co/t/using-already-provided-time-period/274299 "2021-05-28T17:03:35Z")
Hello. I have a bit of a problem here - i'm reseiving via syslog some data including uptime/downtime periods in format "HHhr:MMmin:SSsec". There's no problem parsing it in an object like "downtime.\
", but ho… --- ## [Get the name of the log file and create a tag or a custom field with that value](https://discuss.elastic.co/t/get-the-name-of-the-log-file-and-create-a-tag-or-a-custom-field-with-that-value/274344)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 4:58pm UTC](https://discuss.elastic.co/t/get-the-name-of-the-log-file-and-create-a-tag-or-a-custom-field-with-that-value/274344 "2021-05-28T16:58:12Z")
Good afternoon. I would like to know how I could in logstash create a tag (or a custom field) with a part of the value of the log.file.path.keyword field. Considering that this field stores the absolute path, I would be… --- ## [How does elasticsearch rank matching results?](https://discuss.elastic.co/t/how-does-elasticsearch-rank-matching-results/274325)
**Author:** [@Later](https://discuss.elastic.co/u/Later)\ **Replies:** 5\ **Last updated:** [May 28, 2021, 3:36pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-rank-matching-results/274325 "2021-05-28T15:36:35Z")
Hello. Can you explain lucidly (My knowledge in this field is almost zero) how the search engine rank matching results when a user performs a search (I think this is called search engine algorithm)? What are ranking fac… --- ## [Postgresql -\> Jdbc input plugin -\> logstash - ERROR: relation does not exist](https://discuss.elastic.co/t/postgresql-jdbc-input-plugin-logstash-error-relation-does-not-exist/274296)
**Author:** [@FALEN](https://discuss.elastic.co/u/FALEN)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 3:03pm UTC](https://discuss.elastic.co/t/postgresql-jdbc-input-plugin-logstash-error-relation-does-not-exist/274296 "2021-05-28T15:03:06Z")
Hello everyone, It seems im missing something, but couldn't found anything related to this. Im using jdbc input plugin to collect some data from postgresql db. \[2021-05-28T03:24:12,032\]\[ERROR\]\[logstash.inputs.jdbc … --- ## [ECK v1.4.0: spec.version: Invalid value: \\"6.8.15\\": Unsupported version"](https://discuss.elastic.co/t/eck-v1-4-0-spec-version-invalid-value-6-8-15-unsupported-version/272997)
**Author:** [@QiaolingTang](https://discuss.elastic.co/u/QiaolingTang)\ **Replies:** 5\ **Last updated:** [May 28, 2021, 12:43pm UTC](https://discuss.elastic.co/t/eck-v1-4-0-spec-version-invalid-value-6-8-15-unsupported-version/272997 "2021-05-28T12:43:06Z")
Hello here. I deployed an elasticsearch-eck-operator v1.4.0 on an OpenShift cluster, and created an elasticsearches.elasticsearch.k8s.elastic.co, the default elasticsearch version is 7.12.1, but I wanted to deploy elast… --- ## [Import data from the TheDude server softweare to elastiscearch](https://discuss.elastic.co/t/import-data-from-the-thedude-server-softweare-to-elastiscearch/273977)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 2:27pm UTC](https://discuss.elastic.co/t/import-data-from-the-thedude-server-softweare-to-elastiscearch/273977 "2021-05-28T14:27:01Z")
Hello, I wonder If anyone managed to connect/fetch data capture by TheDude server into elasticserach. I do not see much about that on the internet. --- ## [Enhanced Table](https://discuss.elastic.co/t/enhanced-table/274306)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 2:15pm UTC](https://discuss.elastic.co/t/enhanced-table/274306 "2021-05-28T14:15:41Z")
Hi @fbaligand i would like to use enhanced table in 7.13 version .... will you able help me? --- ## [Export Dashboard into ELK](https://discuss.elastic.co/t/export-dashboard-into-elk/274335)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 2:15pm UTC](https://discuss.elastic.co/t/export-dashboard-into-elk/274335 "2021-05-28T14:15:05Z")
Hello everybody... Please how I can export /import dashboard into ELk. I looking for the Workflow to do it. Thank you for answers in advance... --- ## [Tagging errors parsing json messages](https://discuss.elastic.co/t/tagging-errors-parsing-json-messages/274326)
**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 2:10pm UTC](https://discuss.elastic.co/t/tagging-errors-parsing-json-messages/274326 "2021-05-28T14:10:46Z")
Hi all we have elastic cloud 7.12 with logstash 7.12 parsing json messages and send them to elasticsearch, but as we are having issues with mismatch type I d like to tag the error when that happen. Do you have any idea… --- ## [Is it possible to include other fields in the top level term aggregation](https://discuss.elastic.co/t/is-it-possible-to-include-other-fields-in-the-top-level-term-aggregation/273528)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 4\ **Last updated:** [May 28, 2021, 2:01pm UTC](https://discuss.elastic.co/t/is-it-possible-to-include-other-fields-in-the-top-level-term-aggregation/273528 "2021-05-28T14:01:27Z")
I'm doing an aggregation on devices and calculating a metric on each. Is there a way to include other fields for the device in that top bucket like id, city, state? Each document in the vn-aggr index has those fields in … --- ## [Can't uninstall Elastic Endpoint on macOS](https://discuss.elastic.co/t/cant-uninstall-elastic-endpoint-on-macos/273986)
**Author:** [@Josh\_A](https://discuss.elastic.co/u/Josh_A)\ **Replies:** 9\ **Last updated:** [May 28, 2021, 11:16am UTC](https://discuss.elastic.co/t/cant-uninstall-elastic-endpoint-on-macos/273986 "2021-05-28T11:16:57Z")
Hi - the macOS agent is a huge CPU and RAM hog on macOS 11.2.3. I'm trying to uninstall following these instructions: When I browse to the folder where the endpoint is installed (/Library/Elastic/Endpoint/), I get the… --- ## [Search for Aggregation results](https://discuss.elastic.co/t/search-for-aggregation-results/274030)
**Author:** [@krishnapss](https://discuss.elastic.co/u/krishnapss)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 10:33am UTC](https://discuss.elastic.co/t/search-for-aggregation-results/274030 "2021-05-28T10:33:18Z")
Hi, Could someone help me to achieve this functionality. Aggregation results are 500 to 5000 on different fields (data is in millions). I have used CompositeAggregation for pagination. But for user it is not great t… --- ## [Get a page of products but return all product\_tags for the whole unpaginated result set](https://discuss.elastic.co/t/get-a-page-of-products-but-return-all-product-tags-for-the-whole-unpaginated-result-set/274283)
**Author:** [@kiko](https://discuss.elastic.co/u/kiko)\ **Replies:** 5\ **Last updated:** [May 28, 2021, 10:28am UTC](https://discuss.elastic.co/t/get-a-page-of-products-but-return-all-product-tags-for-the-whole-unpaginated-result-set/274283 "2021-05-28T10:28:19Z")
Hi I have a query, which filters products and paginates the results (by ?size URL argument). Is there a way to return just a page (?size=12) of products, but return the available product\_tags for the whole lot (hits.tot… --- ## [Pod has unbound immediate PersistentVolumeClaims](https://discuss.elastic.co/t/pod-has-unbound-immediate-persistentvolumeclaims/274057)
**Author:** [@jaispirit](https://discuss.elastic.co/u/jaispirit)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 10:07am UTC](https://discuss.elastic.co/t/pod-has-unbound-immediate-persistentvolumeclaims/274057 "2021-05-28T10:07:45Z")
Hello, I'm trying to deploy ECK quickstart into my Cluster. Unfortunately I'm getting the message 'pod has unbound immediate PersistentVolumeClaims (repeated 2 times)'. Why doesn't the claim access the volume? … --- ## [Dr Cheryl Pruitt](https://discuss.elastic.co/t/dr-cheryl-pruitt/274225)
**Author:** [@drcherylpruitt](https://discuss.elastic.co/u/drcherylpruitt)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 9:47am UTC](https://discuss.elastic.co/t/dr-cheryl-pruitt/274225 "2021-05-28T09:47:51Z")
I am Dr Cheryl Pruitt i am new to this website. Kindly tell me about elastic and what is the purpose of this website --- ## [Omit pinned filters that are inappropriate to a dashboard?](https://discuss.elastic.co/t/omit-pinned-filters-that-are-inappropriate-to-a-dashboard/273901)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 6\ **Last updated:** [May 28, 2021, 9:38am UTC](https://discuss.elastic.co/t/omit-pinned-filters-that-are-inappropriate-to-a-dashboard/273901 "2021-05-28T09:38:14Z")
I have developed a set of dashboards. At the top of each dashboard is a Markdown panel that contains a row of links to those dashboards. Some dashboards can be usefully filtered by the job\_name field, so it makes sense … --- ## [How to cut syslog/sophos filebeat output into pieces?](https://discuss.elastic.co/t/how-to-cut-syslog-sophos-filebeat-output-into-pieces/274301)
**Author:** [@3lastic](https://discuss.elastic.co/u/3lastic)\ **Replies:** 0\ **Last updated:** [May 28, 2021, 8:19am UTC](https://discuss.elastic.co/t/how-to-cut-syslog-sophos-filebeat-output-into-pieces/274301 "2021-05-28T08:19:06Z")
Hello all, I'm completely new to Elastic/ELK. Currently I'm playing arround with some syslog output from a Sophos UTM network firewall. I successfully get the data via filebeat module for sophos into the stack. But m… --- ## [SRE-Ansible To Install ELK Stack](https://discuss.elastic.co/t/sre-ansible-to-install-elk-stack/274086)
**Author:** [@Ashish\_Jindal](https://discuss.elastic.co/u/Ashish_Jindal)\ **Replies:** 5\ **Last updated:** [May 28, 2021, 8:13am UTC](https://discuss.elastic.co/t/sre-ansible-to-install-elk-stack/274086 "2021-05-28T08:13:24Z")
Our task is related to SRE-Ansible To Install ELK Stack i.e. Write an ansible script to install ELK stack and filebeat locally. To do so, create a directory structure as mentioned below ansible\_ELK |\_site.yml |\_… --- ## [Elasticsearch filter plugin and winlogbeat](https://discuss.elastic.co/t/elasticsearch-filter-plugin-and-winlogbeat/273794)
**Author:** [@fabryx87](https://discuss.elastic.co/u/fabryx87)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-filter-plugin-and-winlogbeat/273794 "2021-05-28T07:43:00Z")
Goodmorning everyone, I am trying to use for the firts time the elasticsearch filter plugin for logstash. I am trying to searching the login event whenever you the log off event and enrich the log off event with necess… --- ## [Elastic Scripting caching issue](https://discuss.elastic.co/t/elastic-scripting-caching-issue/273511)
**Author:** [@Divy\_Garg](https://discuss.elastic.co/u/Divy_Garg)\ **Replies:** 7\ **Last updated:** [May 28, 2021, 6:30am UTC](https://discuss.elastic.co/t/elastic-scripting-caching-issue/273511 "2021-05-28T06:30:04Z")
I am facing caching issue while using scripts. So I am using below script in elasticsearch query. But when it runs multiple times it gives circuit breaker exception( Too many dynamic script compilations within, max: \[7… --- ## [KIBANAインストール時にFatalErrorが発生する。](https://discuss.elastic.co/t/kibana-fatalerror/273741)
**Author:** [@JunJun\_San](https://discuss.elastic.co/u/JunJun_San)\ **Replies:** 4\ **Last updated:** [May 28, 2021, 6:10am UTC](https://discuss.elastic.co/t/kibana-fatalerror/273741 "2021-05-28T06:10:29Z")
Windows版ElasticSerchKibanaを使用したく、 インストールを進めています。 Ver.7.12.1 ElasticSerchのインストール（サービススタート）は上手くできましたが KIBANAインストール実施時に「Fatal Error：Cannot find module '../../../space/server」 が発生し前に進めません。 解決方法をご教示ください。 なお Kibana.yml… --- ## [Creating custom runtime field which does a reverse dns lookup of another field](https://discuss.elastic.co/t/creating-custom-runtime-field-which-does-a-reverse-dns-lookup-of-another-field/274258)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 5:57am UTC](https://discuss.elastic.co/t/creating-custom-runtime-field-which-does-a-reverse-dns-lookup-of-another-field/274258 "2021-05-28T05:57:05Z")
Hello, Is it possible to do a (reverse) DNS lookup in a runtime field? How would I do this? Best regards, Willem --- ## [How to create onClick event in Kibana?](https://discuss.elastic.co/t/how-to-create-onclick-event-in-kibana/274039)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 5:41am UTC](https://discuss.elastic.co/t/how-to-create-onclick-event-in-kibana/274039 "2021-05-28T05:41:20Z")
It is possible to create event when clicking on the table row in kibana, it send some data from that table to another index? --- ## [Logstash pipeline stopped inserting data into elasticsearch](https://discuss.elastic.co/t/logstash-pipeline-stopped-inserting-data-into-elasticsearch/274285)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 0\ **Last updated:** [May 28, 2021, 5:40am UTC](https://discuss.elastic.co/t/logstash-pipeline-stopped-inserting-data-into-elasticsearch/274285 "2021-05-28T05:40:56Z")
Logstash pipeline is not ingesting data into the elasticsearch index though the pipeline was running. This pipeline was deployed one year back and it was running well since then. But on 24th May 2021, it stopped ingesti… --- ## ['ElasticPressProvider' was not found in '@10up/elasticpress-react'](https://discuss.elastic.co/t/elasticpressprovider-was-not-found-in-10up-elasticpress-react/274196)
**Author:** [@Sharmeela\_Jaimalani](https://discuss.elastic.co/u/Sharmeela_Jaimalani)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 5:26am UTC](https://discuss.elastic.co/t/elasticpressprovider-was-not-found-in-10up-elasticpress-react/274196 "2021-05-28T05:26:05Z")
Hello, I have installed the elasticpress-react with following npm command in my gastby project - (GitHub - 10up/elasticpress-react: Use ElasticPress with React.) "npm install @10up/elasticpress-react --save" After in… --- ## [Kibanaでdashboardに\[saved search\]で表表示した際のpagingサイズの変更](https://discuss.elastic.co/t/kibana-dashboard-saved-search-paging/273899)
**Author:** [@toshi\_miura](https://discuss.elastic.co/u/toshi_miura)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 7:05am UTC](https://discuss.elastic.co/t/kibana-dashboard-saved-search-paging/273899 "2021-05-25T07:05:03Z")
下記の50という数字を変更したいのですが、 kibana \> Advanced Settings \> Discover \> Number of rows は、discover で見るときしかきいていないっぽく、 ダッシュボードにsaved searchとしてはった場合にきかない認識です。 ダッシュボードに、saved searchとして表示される表の ページングの単位を変える方法は存在しないのでしょうか？ --- ## [Update from 7.8 to 7.12.1](https://discuss.elastic.co/t/update-from-7-8-to-7-12-1/274172)
**Author:** [@Lorenzo\_Allori](https://discuss.elastic.co/u/Lorenzo_Allori)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 3:36am UTC](https://discuss.elastic.co/t/update-from-7-8-to-7-12-1/274172 "2021-05-28T03:36:52Z")
Hello! I updated from 7.8 to 7.12.1 and imported by dashboards to the system. Everything seemed fine but some problems are showing: the filters are not applying globally but only on some map layers, I had to create … --- ## [Defining drill-downs per visualization a tad tedious?](https://discuss.elastic.co/t/defining-drill-downs-per-visualization-a-tad-tedious/274143)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 3:03am UTC](https://discuss.elastic.co/t/defining-drill-downs-per-visualization-a-tad-tedious/274143 "2021-05-28T03:03:35Z")
...or am I just lazy? I have several dashboards that show various metrics, such as memory usage and CPU usage, by "job" name. Each dashboard has several "... by Job Name" visualizations. For each ".. by Job Name" viz, … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=932) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=934)