# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=936

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 937

---

## [Increasing number of pending tasks despite small number of shards](https://discuss.elastic.co/t/increasing-number-of-pending-tasks-despite-small-number-of-shards/273562)

<div class="topic-metadata">

**Author:** [@crl](https://discuss.elastic.co/u/crl)\
**Replies:** 3\
**Last updated:** [May 26, 2021, 9:16am UTC](https://discuss.elastic.co/t/increasing-number-of-pending-tasks-despite-small-number-of-shards/273562 "2021-05-26T09:16:46Z")

</div>

Hi I'm fairly new to Elasticsearch and I'm trying to maintain a small cluster. Currently I'm having trouble with a growing number of pending tasks. In all other threads that I have looked at the issue have been caused …

---

## [Is it ok to use Kibana's saved\_objects optionJSON for custom attributes?](https://discuss.elastic.co/t/is-it-ok-to-use-kibanas-saved-objects-optionjson-for-custom-attributes/273435)

<div class="topic-metadata">

**Author:** [@shuber](https://discuss.elastic.co/u/shuber)\
**Replies:** 3\
**Last updated:** [May 26, 2021, 8:44am UTC](https://discuss.elastic.co/t/is-it-ok-to-use-kibanas-saved-objects-optionjson-for-custom-attributes/273435 "2021-05-26T08:44:35Z")

</div>

Hello, I'm working with Kibana dashboards that I'm embedding in pages. I'd like to add metadata to the dashboards and I noticed there is a structure called optionJSON in the saved\_objects structure for dashboards. Is it…

---

## [Clarification of Elastic Synthetic Monitoring Submit button up and down monitors actual scenarios](https://discuss.elastic.co/t/clarification-of-elastic-synthetic-monitoring-submit-button-up-and-down-monitors-actual-scenarios/273417)

<div class="topic-metadata">

**Author:** [@sadik](https://discuss.elastic.co/u/sadik)\
**Replies:** 1\
**Last updated:** [May 26, 2021, 8:33am UTC](https://discuss.elastic.co/t/clarification-of-elastic-synthetic-monitoring-submit-button-up-and-down-monitors-actual-scenarios/273417 "2021-05-26T08:33:08Z")

</div>

Hi Team, Please view the below of our questions/queries: What are we trying to do? We are trying to validate if the page is working or not based on action of submit button in the heartbeat.yml file inline script. wha…

---

## [Synthetic test script 'examples/inline/short' hover action fails](https://discuss.elastic.co/t/synthetic-test-script-examples-inline-short-hover-action-fails/273667)

<div class="topic-metadata">

**Author:** [@iorfix](https://discuss.elastic.co/u/iorfix)\
**Replies:** 6\
**Last updated:** [May 26, 2021, 7:53am UTC](https://discuss.elastic.co/t/synthetic-test-script-examples-inline-short-hover-action-fails/273667 "2021-05-26T07:53:14Z")

</div>

Hi all, I'm willing to explore the new syntethic features. I downloaed the repo, and launched the command: cat examples/inline/short.js | npx @elastic/synthetics --inline However, the script failed to complete the ho…

---

## [Different time field instead of @timestamp and filters](https://discuss.elastic.co/t/different-time-field-instead-of-timestamp-and-filters/273924)

<div class="topic-metadata">

**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\
**Replies:** 2\
**Last updated:** [May 26, 2021, 6:48am UTC](https://discuss.elastic.co/t/different-time-field-instead-of-timestamp-and-filters/273924 "2021-05-26T06:48:26Z")

</div>

Hi, I've recently inherited an ELK instance where all indexes are mapped with @timestamp as time field. Users are complaining a lot because the meaningful timestamp is not @timestamp, but some @event\_time field instead.…

---

## [Unable to read logs files](https://discuss.elastic.co/t/unable-to-read-logs-files/273891)

<div class="topic-metadata">

**Author:** [@legolas\_bilbao](https://discuss.elastic.co/u/legolas_bilbao)\
**Replies:** 5\
**Last updated:** [May 26, 2021, 5:48am UTC](https://discuss.elastic.co/t/unable-to-read-logs-files/273891 "2021-05-26T05:48:37Z")

</div>

Good morning, I'm trying to read log files from a concrete path. My configuration is the following input { file { path =\> "/path/proxy/access2.log" start\_position =\> "beginning" …

---

## [Cannot search new documents after reindexing](https://discuss.elastic.co/t/cannot-search-new-documents-after-reindexing/273911)

<div class="topic-metadata">

**Author:** [@Andrey2](https://discuss.elastic.co/u/Andrey2)\
**Replies:** 4\
**Last updated:** [May 26, 2021, 3:10am UTC](https://discuss.elastic.co/t/cannot-search-new-documents-after-reindexing/273911 "2021-05-26T03:10:11Z")

</div>

Hi all, I'm having a problem with reindexing. I have an index called emails, after reindexing, I can get/post documents to this index normally. But for new documents, I cannot get these when search by property or show…

---

## [Single node, large database index performance](https://discuss.elastic.co/t/single-node-large-database-index-performance/273865)

<div class="topic-metadata">

**Author:** [@twbarr](https://discuss.elastic.co/u/twbarr)\
**Replies:** 8\
**Last updated:** [May 26, 2021, 12:34am UTC](https://discuss.elastic.co/t/single-node-large-database-index-performance/273865 "2021-05-26T00:34:12Z")

</div>

I have a set of documents that I'm trying to load into a single large index on a single node. About seven million documents, about 400gb of text. The fields are in different files, so I'm just using a script that loads e…

---

## [Cannot restore index](https://discuss.elastic.co/t/cannot-restore-index/273910)

<div class="topic-metadata">

**Author:** [@Tuyen](https://discuss.elastic.co/u/Tuyen)\
**Replies:** 1\
**Last updated:** [May 25, 2021, 11:08pm UTC](https://discuss.elastic.co/t/cannot-restore-index/273910 "2021-05-25T23:08:04Z")

</div>

Backup and index to a gzip using stdout: elasticdump --input=http://production.es.com:9200/my\_index --output=$ | gzip \> /data/my\_index.json.gz After dump index to my\_index.json.gz success I cannot restore them. So…

---

## [Security Vulnerability in ELK stack during docker scan by twistlock](https://discuss.elastic.co/t/security-vulnerability-in-elk-stack-during-docker-scan-by-twistlock/273927)

<div class="topic-metadata">

**Author:** [@asatsi](https://discuss.elastic.co/u/asatsi)\
**Replies:** 1\
**Last updated:** [May 25, 2021, 11:02pm UTC](https://discuss.elastic.co/t/security-vulnerability-in-elk-stack-during-docker-scan-by-twistlock/273927 "2021-05-25T23:02:52Z")

</div>

Hello, Below vulnerabilities are flagged during docker image scan. Is there any official response/statement on the docker scan vulnerabilities check from elastic? CVE-2020-25649 CVE-2020-28491 CVE-2017-18640 CVE-202…

---

## [Elasticsearch cluster kibana randomly slow on some requests](https://discuss.elastic.co/t/elasticsearch-cluster-kibana-randomly-slow-on-some-requests/273174)

<div class="topic-metadata">

**Author:** [@arvanMalian](https://discuss.elastic.co/u/arvanMalian)\
**Replies:** 10\
**Last updated:** [May 25, 2021, 10:57pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-kibana-randomly-slow-on-some-requests/273174 "2021-05-25T22:57:36Z")

</div>

Elasticsearch cluster kibana randomly slow on some requests Hi everyone, I have a perfomance issue when navigating on kibana admin interface. It takes a lot of time to display the contents: genearlly on items in SECURT…

---

## [Failed to parse the date format](https://discuss.elastic.co/t/failed-to-parse-the-date-format/273400)

<div class="topic-metadata">

**Author:** [@Ramalakshmi](https://discuss.elastic.co/u/Ramalakshmi)\
**Replies:** 5\
**Last updated:** [May 25, 2021, 10:55pm UTC](https://discuss.elastic.co/t/failed-to-parse-the-date-format/273400 "2021-05-25T22:55:55Z")

</div>

Hi, I am not able to parse 06-MAY-21 03.00.01.491228 AM date format into elasticsearch. Please help me out for this Thank you.

---

## [Messages are not al same, how to grok?](https://discuss.elastic.co/t/messages-are-not-al-same-how-to-grok/273993)

<div class="topic-metadata">

**Author:** [@edvrfn](https://discuss.elastic.co/u/edvrfn)\
**Replies:** 1\
**Last updated:** [May 25, 2021, 10:26pm UTC](https://discuss.elastic.co/t/messages-are-not-al-same-how-to-grok/273993 "2021-05-25T22:26:47Z")

</div>

Logs sent by my gateway are not exactly same, how to handle missing fields in the logs with grok. Below Works TDM,50c9676c6d24,udm-1.9.3.3438 kernel: \[1393127.673482\] IN=br20 \*\*\*OUT=eth4\*\*\* MAC=74:ac:b9:1e:f3:00:e8:b1:…

---

## [LogStash seems to mask jdbc sql exception and exits with code 0](https://discuss.elastic.co/t/logstash-seems-to-mask-jdbc-sql-exception-and-exits-with-code-0/273992)

<div class="topic-metadata">

**Author:** [@trickett\_space](https://discuss.elastic.co/u/trickett_space)\
**Replies:** 1\
**Last updated:** [May 25, 2021, 9:48pm UTC](https://discuss.elastic.co/t/logstash-seems-to-mask-jdbc-sql-exception-and-exits-with-code-0/273992 "2021-05-25T21:48:07Z")

</div>

/usr/share/logstash/bin/logstash --path.data /usr/share/logstash/data\_supplier -f ./supplier.conf ... Starting Logstash {"logstash.version"=\>"7.10.2", "jruby.version"=\>"jruby 9.2.13.0 (2.5.7) 2020-08-03 9a89c94bcc Open…

---

## [Apply Grok to a log file](https://discuss.elastic.co/t/apply-grok-to-a-log-file/273979)

<div class="topic-metadata">

**Author:** [@Denilson-Semedo](https://discuss.elastic.co/u/Denilson-Semedo)\
**Replies:** 3\
**Last updated:** [May 25, 2021, 8:49pm UTC](https://discuss.elastic.co/t/apply-grok-to-a-log-file/273979 "2021-05-25T20:49:51Z")

</div>

I have thease following logs: {"type":"audit\_entry","created":"5/20/2021, 11:12:42 PM","colaborador\_id":"cf7dc62b-dde9-4980-89d8-96eb5707876e","ip":"192.168.112.6","request\_method":"PUT","ajax":false,"route":"/stock/art…

---

## [SIEM timeline cant be saved](https://discuss.elastic.co/t/siem-timeline-cant-be-saved/273963)

<div class="topic-metadata">

**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\
**Replies:** 3\
**Last updated:** [May 25, 2021, 8:31pm UTC](https://discuss.elastic.co/t/siem-timeline-cant-be-saved/273963 "2021-05-25T20:31:38Z")

</div>

I'm using ELK v7.8 How to save SIEM timelines? The autosave feature mentioned in the blogs/doc can not be seen for me. DO I need to enable something? I'm super user with all the access

---

## [Kibana does not display the result/data of a time field (converted from UNIX time)](https://discuss.elastic.co/t/kibana-does-not-display-the-result-data-of-a-time-field-converted-from-unix-time/271662)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 1\
**Last updated:** [May 25, 2021, 8:24pm UTC](https://discuss.elastic.co/t/kibana-does-not-display-the-result-data-of-a-time-field-converted-from-unix-time/271662 "2021-05-25T20:24:27Z")

</div>

I was successfully able to convert UNIX time to Human readable format ,However kibana fails to load data from the below field . Is it because the format is missing ? as seen in the mapping ? "Fwd\_Time" : { …

---

## [Jdbc logstash module pulling IP in decimal format](https://discuss.elastic.co/t/jdbc-logstash-module-pulling-ip-in-decimal-format/273948)

<div class="topic-metadata">

**Author:** [@tushar.bansal](https://discuss.elastic.co/u/tushar.bansal)\
**Replies:** 4\
**Last updated:** [May 25, 2021, 6:44pm UTC](https://discuss.elastic.co/t/jdbc-logstash-module-pulling-ip-in-decimal-format/273948 "2021-05-25T18:44:22Z")

</div>

Hi, I am pulling events from sqlserver using jdbc module in logstash. I get all events I queried for, but IP is coming in different format. I think it is decimal format. I want them in regular IP notation a.b.c.d forma…

---

## [Getting version\_conflict\_eng (409) while updating in the existing Index](https://discuss.elastic.co/t/getting-version-conflict-eng-409-while-updating-in-the-existing-index/273543)

<div class="topic-metadata">

**Author:** [@Suraj\_Anand](https://discuss.elastic.co/u/Suraj_Anand)\
**Replies:** 3\
**Last updated:** [May 25, 2021, 6:42pm UTC](https://discuss.elastic.co/t/getting-version-conflict-eng-409-while-updating-in-the-existing-index/273543 "2021-05-25T18:42:31Z")

</div>

I am trying to update some data in an Elastic Search Index, I am trying to update using this method: Update Method: $params = \[ 'index' =\> 'my\_index', 'id' =\> 'my\_id', 'body' =\> \[…

---

## [Extract field's from a message field](https://discuss.elastic.co/t/extract-fields-from-a-message-field/273978)

<div class="topic-metadata">

**Author:** [@Denilson-Semedo](https://discuss.elastic.co/u/Denilson-Semedo)\
**Replies:** 0\
**Last updated:** [May 25, 2021, 5:41pm UTC](https://discuss.elastic.co/t/extract-fields-from-a-message-field/273978 "2021-05-25T17:41:10Z")

</div>

I'm colleting logs from a file .log: {"type":"audit\_entry","created":"5/20/2021, 11:12:42 PM","colaborador\_id":"cf7dc62b-dde9-4980-89d8-96eb5707876e","request\_method":"PUT","ajax":false,"route":"/stock/artigos/8c443bfe-…

---

## [Построение отказоустойчивой\\катастрофоустойчивой конфигурации ELK + Gafana](https://discuss.elastic.co/t/elk-gafana/273957)

<div class="topic-metadata">

**Author:** [@Victor2](https://discuss.elastic.co/u/Victor2)\
**Replies:** 1\
**Last updated:** [May 25, 2021, 5:01pm UTC](https://discuss.elastic.co/t/elk-gafana/273957 "2021-05-25T17:01:32Z")

</div>

добрый день! подскажите, как построить отказоустойчивую\\катастрофоустойчивую конфигурации ELK + Gafana с использованием Logstash forwarder. есть 2 ЦОД. на каждом ЦОД есть выделенный VLAN. в каждом выделенном VLAN сто…

---

## [Need update on tiebreaker fields for Kibana logs (event.sequence ?)](https://discuss.elastic.co/t/need-update-on-tiebreaker-fields-for-kibana-logs-event-sequence/273295)

<div class="topic-metadata">

**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 4:23pm UTC](https://discuss.elastic.co/t/need-update-on-tiebreaker-fields-for-kibana-logs-event-sequence/273295 "2021-05-25T16:23:51Z")

</div>

Good morning, Following up from another post I made a while ago, I want to know if in version 7.10.0 of Kibana, the event.sequence field is used automatically by the Kibana Logs application to sort the events that have …

---

## [Automatically start Logstash when Windows reboot](https://discuss.elastic.co/t/automatically-start-logstash-when-windows-reboot/273839)

<div class="topic-metadata">

**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\
**Replies:** 3\
**Last updated:** [May 25, 2021, 4:12pm UTC](https://discuss.elastic.co/t/automatically-start-logstash-when-windows-reboot/273839 "2021-05-25T16:12:37Z")

</div>

I am using Windows OS as a source in which Logstash is installed and run Logstash using the following command on PowerShell: logstash -f logstash.conf Now as I am working in an industrial setting, manually running this…

---

## [Data ingestion got stuck though the Logstash pipelines are running](https://discuss.elastic.co/t/data-ingestion-got-stuck-though-the-logstash-pipelines-are-running/273970)

<div class="topic-metadata">

**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\
**Replies:** 0\
**Last updated:** [May 25, 2021, 3:41pm UTC](https://discuss.elastic.co/t/data-ingestion-got-stuck-though-the-logstash-pipelines-are-running/273970 "2021-05-25T15:41:53Z")

</div>

We have deployed 10 logstash config files last year. We started all the config files at once by using the folder where we have kept all the config files(as service). Yesterday we found that, few of them are not pushing d…

---

## [Reading from specific Kafka partitions](https://discuss.elastic.co/t/reading-from-specific-kafka-partitions/273549)

<div class="topic-metadata">

**Author:** [@wkuijsters](https://discuss.elastic.co/u/wkuijsters)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 3:38pm UTC](https://discuss.elastic.co/t/reading-from-specific-kafka-partitions/273549 "2021-05-25T15:38:03Z")

</div>

Hi, I'm trying to consume Kafka data hosted on an on-prem Kafka bus using Logstash in a cloud-hosted environment. There is a single massive topic with about 100 partitions, the messages I need are all located in a singl…

---

## [Elastic Stack 7.13.0 and 6.8.16 Security Update](https://discuss.elastic.co/t/elastic-stack-7-13-0-and-6-8-16-security-update/273964)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [May 25, 2021, 3:17pm UTC](https://discuss.elastic.co/t/elastic-stack-7-13-0-and-6-8-16-security-update/273964 "2021-05-25T15:17:07Z")

</div>

Kibana url redirection flaw (ESA-2021-12) An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could result in Kibana redirecting the user…

---

## [Aggregate TopHit based on filter](https://discuss.elastic.co/t/aggregate-tophit-based-on-filter/273634)

<div class="topic-metadata">

**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 3:04pm UTC](https://discuss.elastic.co/t/aggregate-tophit-based-on-filter/273634 "2021-05-25T15:04:01Z")

</div>

I am working on a index that stores statistics about issue tracking. Each document is a snapshot of the state of a given project (number of open issues, etc). Each document is categorized by an organization, a project na…

---

## [Kibana control visual](https://discuss.elastic.co/t/kibana-control-visual/273885)

<div class="topic-metadata">

**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\
**Replies:** 1\
**Last updated:** [May 25, 2021, 2:51pm UTC](https://discuss.elastic.co/t/kibana-control-visual/273885 "2021-05-25T14:51:27Z")

</div>

I am creating a simple dropdown using Control visual in Kibana, but it is not listing me all the distinct values for that particular field. Below is the screenshot for the same. This "Source system" field contains man…

---

## [Unable to write grok filter for access.log](https://discuss.elastic.co/t/unable-to-write-grok-filter-for-access-log/273730)

<div class="topic-metadata">

**Author:** [@Ipsidash](https://discuss.elastic.co/u/Ipsidash)\
**Replies:** 7\
**Last updated:** [May 25, 2021, 2:46pm UTC](https://discuss.elastic.co/t/unable-to-write-grok-filter-for-access-log/273730 "2021-05-25T14:46:38Z")

</div>

Hi, I have an access.log for which i need grok filter to ingest logs to logstash. I have passing the grok filter in logstash.conf. Access.log: 144.70.113.111 - - \[16/May/2021:23:40:32 -0400\] \[https-jsse-nio-8443-exe-4…

---

## [MariaDB audit](https://discuss.elastic.co/t/mariadb-audit/273934)

<div class="topic-metadata">

**Author:** [@Juju-fr34](https://discuss.elastic.co/u/Juju-fr34)\
**Replies:** 1\
**Last updated:** [May 25, 2021, 2:26pm UTC](https://discuss.elastic.co/t/mariadb-audit/273934 "2021-05-25T14:26:42Z")

</div>

Hi everyone. I'm trying to index my mariadb servers audit logs but I'm facing a problem. 90% off my logs are correctly indexed but some of them don't. It is like the produced csv is incorrect and message filed is empty. …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=935)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=937)
