# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=934 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 935 --- ## [About Kibana version compatibility with ElasticSearch version upgrade](https://discuss.elastic.co/t/about-kibana-version-compatibility-with-elasticsearch-version-upgrade/274176)
**Author:** [@k-narazaki](https://discuss.elastic.co/u/k-narazaki)\ **Replies:** 4\ **Last updated:** [May 28, 2021, 2:32am UTC](https://discuss.elastic.co/t/about-kibana-version-compatibility-with-elasticsearch-version-upgrade/274176 "2021-05-28T02:32:20Z")
I have a question about compatibility between ElasticSearch and Kibana versions. ElasticSearch has been upgraded as follows. (Old) 6.5.4 (New) 7.8.0 I was wondering if it would be necessary to upgrade Kibana with the… --- ## [Need help with filebeat and Kibana index pattern creation](https://discuss.elastic.co/t/need-help-with-filebeat-and-kibana-index-pattern-creation/274243)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 1\ **Last updated:** [May 27, 2021, 11:42pm UTC](https://discuss.elastic.co/t/need-help-with-filebeat-and-kibana-index-pattern-creation/274243 "2021-05-27T23:42:07Z")
I was out on vacation last week and while I was out there was an issue with one of our kibana index patterns getting corrupted (for lack of a better term). We have a 'responseTime' stamp in our incoming payload that we … --- ## [Code Contribution - cannot import into IntelliJ](https://discuss.elastic.co/t/code-contribution-cannot-import-into-intellij/274187)
**Author:** [@VJvaLbhYbfr](https://discuss.elastic.co/u/VJvaLbhYbfr)\ **Replies:** 0\ **Last updated:** [May 27, 2021, 11:10am UTC](https://discuss.elastic.co/t/code-contribution-cannot-import-into-intellij/274187 "2021-05-27T11:10:52Z")
Hello everyone, I wanted to contribute to Elastic project. I did read CONTRIBUTING.md and followed it both on Ubuntu 20.04 (in VirtualBox) and on Windows 10. Ubuntu 20.04: Importing project into IntelliJ (version 2021… --- ## [Logstash stopped processing because of an error: (SystemExit)](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit/274267)
**Author:** [@soldider1621](https://discuss.elastic.co/u/soldider1621)\ **Replies:** 0\ **Last updated:** [May 27, 2021, 9:35pm UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit/274267 "2021-05-27T21:35:31Z")
Hi, I am trying to run the logstash service but it always stops due to error, below I share the log. I can't find the reason for the error, has it happened to you? If I use the program directly from command, it works w… --- ## [Timeline result of events not showing](https://discuss.elastic.co/t/timeline-result-of-events-not-showing/273930)
**Author:** [@Kupauw](https://discuss.elastic.co/u/Kupauw)\ **Replies:** 8\ **Last updated:** [May 27, 2021, 8:54pm UTC](https://discuss.elastic.co/t/timeline-result-of-events-not-showing/273930 "2021-05-27T20:54:38Z")
Hi everyone. Today i upgraded my ELK stack to 7.12.1 and everything seems to be working fine except for the SIEM timeline. I ingest logs from Cisco FTD firewalls, F5 loadbalancers and our infoblox (DHCP/DNS). When i s… --- ## [Mutate Lowercase Issue](https://discuss.elastic.co/t/mutate-lowercase-issue/274247)
**Author:** [@Alexandre.Bernier](https://discuss.elastic.co/u/Alexandre.Bernier)\ **Replies:** 4\ **Last updated:** [May 27, 2021, 7:46pm UTC](https://discuss.elastic.co/t/mutate-lowercase-issue/274247 "2021-05-27T19:46:09Z")
Hi, I'm running Logstash 7.3 and I actually face an issue (or maybe I didn't write the filter correctly) when I apply a lowercase to a new field. The base field is always lowered too. First, I tried this: filter { … --- ## [Is elastichsearch-oss still maintained?](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040)
**Author:** [@confuseduser](https://discuss.elastic.co/u/confuseduser)\ **Replies:** 10\ **Last updated:** [May 27, 2021, 7:09pm UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040 "2021-05-27T19:09:54Z")
I am really confused at the moment. I have this apt repo config which pulls from: deb https://artifacts.elastic.co/packages/oss-7.x/apt stable main The last update of elastichsearch-oss seems to be from january 2021 w… --- ## [Force insert double quotes in a field value](https://discuss.elastic.co/t/force-insert-double-quotes-in-a-field-value/274144)
**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\ **Replies:** 2\ **Last updated:** [May 27, 2021, 6:41pm UTC](https://discuss.elastic.co/t/force-insert-double-quotes-in-a-field-value/274144 "2021-05-27T18:41:40Z")
Hi all, I have been trying to force wrap double quotes around a field value so it can be used in the query statements of the elasticsearch plugin. the field in question is the network.community\_id which includes a colo… --- ## [Parse logstash file format](https://discuss.elastic.co/t/parse-logstash-file-format/274237)
**Author:** [@sulsulatoff](https://discuss.elastic.co/u/sulsulatoff)\ **Replies:** 1\ **Last updated:** [May 27, 2021, 5:00pm UTC](https://discuss.elastic.co/t/parse-logstash-file-format/274237 "2021-05-27T17:00:47Z")
we have an input file with a format like below. How to process it with logstash? { "message" =\> "test", "@timestamp" =\> "2013-12-23T22:30:01.000Z", "@version" =\> "1", "type" =\> "syslog", "host" =\> "0:0:0:0:0:0:0:1:… --- ## [Line charts with default values](https://discuss.elastic.co/t/line-charts-with-default-values/273786)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 3\ **Last updated:** [May 27, 2021, 3:26pm UTC](https://discuss.elastic.co/t/line-charts-with-default-values/273786 "2021-05-27T15:26:29Z")
I have line chart showing values for couple of year using Histogram. I'm using count as aggregation to display it on the axes. For some number of days there aren't any values returned as count, as a result graph hangs mi… --- ## [Sorting in Kibana Data Table Visualization](https://discuss.elastic.co/t/sorting-in-kibana-data-table-visualization/274200)
**Author:** [@antony\_kavin](https://discuss.elastic.co/u/antony_kavin)\ **Replies:** 1\ **Last updated:** [May 27, 2021, 2:36pm UTC](https://discuss.elastic.co/t/sorting-in-kibana-data-table-visualization/274200 "2021-05-27T14:36:29Z")
Hi All, I have been using Elastic Cloud for more than 6 months now. The version I am using is 7.12. I am trying to create a data table visualization in Kibana. I have a couple of buckets(Category and Sub-Category) and … --- ## [Config file for multiple multi-line patterns?](https://discuss.elastic.co/t/config-file-for-multiple-multi-line-patterns/273877)
**Author:** [@1steve](https://discuss.elastic.co/u/1steve)\ **Replies:** 8\ **Last updated:** [May 27, 2021, 2:30pm UTC](https://discuss.elastic.co/t/config-file-for-multiple-multi-line-patterns/273877 "2021-05-27T14:30:52Z")
It looks like the configs described here no longer work; Config file for multiple multiline patterns There is now a codec for multiline inputs; Multiline codec plugin | Logstash Reference \[7.12\] | Elastic input { std… --- ## [Snapshot fails on ceph repository](https://discuss.elastic.co/t/snapshot-fails-on-ceph-repository/274197)
**Author:** [@faxm0dem](https://discuss.elastic.co/u/faxm0dem)\ **Replies:** 1\ **Last updated:** [May 27, 2021, 2:25pm UTC](https://discuss.elastic.co/t/snapshot-fails-on-ceph-repository/274197 "2021-05-27T14:25:20Z")
Hi, Using ES 6.8.6 I'm trying to set up a snapshot repository. The type is fs and the underlying filesystem is ceph. The UID/GID of elasticsearch is the same on all nodes. When issuing the standard API call to create… --- ## [How can I get immediate subdirectories using the path hierarchy tokenizer?](https://discuss.elastic.co/t/how-can-i-get-immediate-subdirectories-using-the-path-hierarchy-tokenizer/274099)
**Author:** [@F\_eq\_kx](https://discuss.elastic.co/u/F_eq_kx)\ **Replies:** 4\ **Last updated:** [May 27, 2021, 1:25pm UTC](https://discuss.elastic.co/t/how-can-i-get-immediate-subdirectories-using-the-path-hierarchy-tokenizer/274099 "2021-05-27T13:25:26Z")
I'm using the path hierarchy tokenizer and, using the examples, I would like to give /User/alice/photos/2017/05 to Elasticsearch and have it list the immediate subdirectories (e.g. 15 and 16). How can I do this? --- ## [Monitoring log sources status](https://discuss.elastic.co/t/monitoring-log-sources-status/273492)
**Author:** [@ima](https://discuss.elastic.co/u/ima)\ **Replies:** 1\ **Last updated:** [May 27, 2021, 1:21pm UTC](https://discuss.elastic.co/t/monitoring-log-sources-status/273492 "2021-05-27T13:21:05Z")
Hello, does anybody have an idea on how to create a dashboard to monitor all log sources status observability and know those who stopped sending logs --- ## [Logstash fails to startup after update after update to 6.8.16](https://discuss.elastic.co/t/logstash-fails-to-startup-after-update-after-update-to-6-8-16/274184)
**Author:** [@bobbyphilip](https://discuss.elastic.co/u/bobbyphilip)\ **Replies:** 2\ **Last updated:** [May 27, 2021, 1:08pm UTC](https://discuss.elastic.co/t/logstash-fails-to-startup-after-update-after-update-to-6-8-16/274184 "2021-05-27T13:08:45Z")
I am running elk on debian. Today there was an update installed, which bumped the logstash version to 6.8.16 from 6.8.15 After this logstash fails to start. I see the following in the logs: \[ 2021-05-27T12:06:38,9… --- ## [Unable to view Partition Reassignment Data in Metricbeat Kafka Dashboard](https://discuss.elastic.co/t/unable-to-view-partition-reassignment-data-in-metricbeat-kafka-dashboard/274134)
**Author:** [@metalshanked](https://discuss.elastic.co/u/metalshanked)\ **Replies:** 0\ **Last updated:** [May 27, 2021, 3:43am UTC](https://discuss.elastic.co/t/unable-to-view-partition-reassignment-data-in-metricbeat-kafka-dashboard/274134 "2021-05-27T03:43:04Z")
I am facing the same issue as mentioned in the post below. --- ## [Fetch only new entries From mssql](https://discuss.elastic.co/t/fetch-only-new-entries-from-mssql/274195)
**Author:** [@akash01](https://discuss.elastic.co/u/akash01)\ **Replies:** 0\ **Last updated:** [May 27, 2021, 11:27am UTC](https://discuss.elastic.co/t/fetch-only-new-entries-from-mssql/274195 "2021-05-27T11:27:08Z")
Hi, I am fetching data from mssql database table which is keep on updating So I want to fetch only the new entries from the table but each time It is fetching all the data. like if there are total 5 records then after… --- ## [Stacked vertical graph in Kibana](https://discuss.elastic.co/t/stacked-vertical-graph-in-kibana/274058)
**Author:** [@dinesh5](https://discuss.elastic.co/u/dinesh5)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 4:38pm UTC](https://discuss.elastic.co/t/stacked-vertical-graph-in-kibana/274058 "2021-05-26T16:38:51Z")
Hello I'm new to Kibana, trying to create a vertical graph with a two split in a bar. My data set Ariyalur,11.1401,79.0786,215,4 Chengalpattu,12.6819,79.9888,1870,36 Chennai,13.0827,80.2707,4041,88 Coimbatore,11.016… --- ## [Xml filter Xpath nested fields](https://discuss.elastic.co/t/xml-filter-xpath-nested-fields/274190)
**Author:** [@roua.B](https://discuss.elastic.co/u/roua.B)\ **Replies:** 0\ **Last updated:** [May 27, 2021, 11:12am UTC](https://discuss.elastic.co/t/xml-filter-xpath-nested-fields/274190 "2021-05-27T11:12:49Z")
Hello, I have an xml file witch is a collection of tags like this: \ \ \ \ **Author:** [@ima](https://discuss.elastic.co/u/ima)\ **Replies:** 0\ **Last updated:** [May 27, 2021, 11:02am UTC](https://discuss.elastic.co/t/logstash-healthcheck/274185 "2021-05-27T11:02:05Z") Hello does anybody have an idea about healthchecks wa can do for logstash --- ## [PodDisruptionBudget was restarting](https://discuss.elastic.co/t/poddisruptionbudget-was-restarting/273914)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 2\ **Last updated:** [May 27, 2021, 8:56am UTC](https://discuss.elastic.co/t/poddisruptionbudget-was-restarting/273914 "2021-05-27T08:56:21Z")
I had deployed eck 1.3.0 in GKE cluster. I saw pdb was refreshing even though there were no changes in any elasticsearch cluster nor pdb related configurations. Can anyone please tell why would this happen. --- ## [Logtash |7.12.1 | Multiple pipelines](https://discuss.elastic.co/t/logtash-7-12-1-multiple-pipelines/273607)
**Author:** [@Tarun\_N](https://discuss.elastic.co/u/Tarun_N)\ **Replies:** 5\ **Last updated:** [May 27, 2021, 8:12am UTC](https://discuss.elastic.co/t/logtash-7-12-1-multiple-pipelines/273607 "2021-05-27T08:12:34Z")
Hello All I have to configure multiple pipelines for which I carried out the changes in pipelines.yml with simple test configuration, after removing all the code to debug to make it work. Below is the sample configurati… --- ## [Terms query success on ID, fails on everything else](https://discuss.elastic.co/t/terms-query-success-on-id-fails-on-everything-else/274075)
**Author:** [@pyrovoice](https://discuss.elastic.co/u/pyrovoice)\ **Replies:** 1\ **Last updated:** [May 27, 2021, 6:47am UTC](https://discuss.elastic.co/t/terms-query-success-on-id-fails-on-everything-else/274075 "2021-05-27T06:47:50Z")
Doing the following search: curl --location --request POST 'localhost:9200/author/\_search?pretty' \\ --header 'Content-Type: application/json' \\ --data-raw '{ "query": { "terms": { "\_id": \[ "myName" \] … --- ## [Help in a search query](https://discuss.elastic.co/t/help-in-a-search-query/274112)
**Author:** [@appydam](https://discuss.elastic.co/u/appydam)\ **Replies:** 2\ **Last updated:** [May 27, 2021, 6:24am UTC](https://discuss.elastic.co/t/help-in-a-search-query/274112 "2021-05-27T06:24:59Z")
I have {id, title, short\_description and description} in my document. I have to do search query on description text and want to reach title. Like if a person enters something in the description then matching titles appe… --- ## [ElasticSearch Windows 2019 service fails to start](https://discuss.elastic.co/t/elasticsearch-windows-2019-service-fails-to-start/274137)
**Author:** [@ddemland](https://discuss.elastic.co/u/ddemland)\ **Replies:** 1\ **Last updated:** [May 27, 2021, 6:13am UTC](https://discuss.elastic.co/t/elasticsearch-windows-2019-service-fails-to-start/274137 "2021-05-27T06:13:56Z")
I have installed ElasticSerach on Windows 2019 server. When I start the service manually it starts, but seems to be a little slow. When I reboot the system the Event log shows the following error: The Elasticsearch serv… --- ## [Same Condition Logs Parse on Logstash](https://discuss.elastic.co/t/same-condition-logs-parse-on-logstash/274139)
**Author:** [@Nazakat](https://discuss.elastic.co/u/Nazakat)\ **Replies:** 0\ **Last updated:** [May 27, 2021, 6:13am UTC](https://discuss.elastic.co/t/same-condition-logs-parse-on-logstash/274139 "2021-05-27T06:13:30Z")
how to parse logs in same condition? --- ## [Elastic-APM Invalid index name \[\_license\]](https://discuss.elastic.co/t/elastic-apm-invalid-index-name-license/274131)
**Author:** [@pszm](https://discuss.elastic.co/u/pszm)\ **Replies:** 1\ **Last updated:** [May 27, 2021, 5:01am UTC](https://discuss.elastic.co/t/elastic-apm-invalid-index-name-license/274131 "2021-05-27T05:01:24Z")
We are trying to get elastic-apm install (for now on our development systems). According to Homebrew, we have the latest elasticsearch-oss (7.10.2), kibana-oss (7.10.2) and today installed apm-server-oss (which is at ve… --- ## [Transfer data/fields from one index to another](https://discuss.elastic.co/t/transfer-data-fields-from-one-index-to-another/273961)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 4\ **Last updated:** [May 27, 2021, 4:07am UTC](https://discuss.elastic.co/t/transfer-data-fields-from-one-index-to-another/273961 "2021-05-27T04:07:16Z")
Can anybody help me moving the data from one index to another in Kibana. I have an index "abc" with lot number of documents and say 100 fields and I want to extract 10 fields out of it and with some filter applied to re… --- ## [“No results match your search criteria”](https://discuss.elastic.co/t/no-results-match-your-search-criteria/274043)
**Author:** [@sosogh](https://discuss.elastic.co/u/sosogh)\ **Replies:** 2\ **Last updated:** [May 27, 2021, 2:05am UTC](https://discuss.elastic.co/t/no-results-match-your-search-criteria/274043 "2021-05-27T02:05:51Z")
The timestamp format in the original log is "2021-05-26 18:00:00". I use fluentd to "modify" it to "2021-05-26T18:00:00.000Z" , supply it as the value of key "fulltime" , and then send it to ES. When creating index … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=933) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=935)