# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=941 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 942 --- ## [Why stack\_trace field is not populated in discovery for filebeat-\* index pattern](https://discuss.elastic.co/t/why-stack-trace-field-is-not-populated-in-discovery-for-filebeat-index-pattern/273264)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 0\ **Last updated:** [May 18, 2021, 10:12am UTC](https://discuss.elastic.co/t/why-stack-trace-field-is-not-populated-in-discovery-for-filebeat-index-pattern/273264 "2021-05-18T10:12:35Z")
Hello, I am ingesting the java logs and when I have severe exceptions I am also having the error.stack\_trace.text field populated however I cannot see any of the error.stack\_trace nor the error.stack\_trace.textfields be… --- ## [Range query for date in filter ratio - TSVB](https://discuss.elastic.co/t/range-query-for-date-in-filter-ratio-tsvb/272900)
**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\ **Replies:** 5\ **Last updated:** [May 20, 2021, 8:25pm UTC](https://discuss.elastic.co/t/range-query-for-date-in-filter-ratio-tsvb/272900 "2021-05-20T20:25:53Z")
I want to calculate percentage of sales between offer period. I have multiple stores having offers running during multiple dates. I tried with TSVB, filter ratio as in below image. I'm getting 0% even having data for con… --- ## [Error fetching fields for index pattern metricbeat](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-metricbeat/273427)
**Author:** [@thrak](https://discuss.elastic.co/u/thrak)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 8:11pm UTC](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-metricbeat/273427 "2021-05-20T20:11:51Z")
Hello, Whenever I try to look at a Metricbeat dashboard, could be for anything, I get multiple spurious errors that pop up off to the side, Error fetching fields for index pattern metricbeat.\*, see attached screenshot. … --- ## [Ipv6 at dashboard](https://discuss.elastic.co/t/ipv6-at-dashboard/273482)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 7:55pm UTC](https://discuss.elastic.co/t/ipv6-at-dashboard/273482 "2021-05-20T19:55:04Z")
why in 1 hostname detect 2 ip. ipv4 and ipv6 --- ## [Kibana - calculate average bucket over multi layer data](https://discuss.elastic.co/t/kibana-calculate-average-bucket-over-multi-layer-data/273261)
**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 7:53pm UTC](https://discuss.elastic.co/t/kibana-calculate-average-bucket-over-multi-layer-data/273261 "2021-05-20T19:53:17Z")
Hi, I'm able to calculate average bucket score over one layer of data, but not on two lever hierarchy data. Example: A-parent-group m-group t-team 1 A-parent-group m-group t-team 4 A-parent-group n-group p-tea… --- ## [Logstash reads input files but does not write any output](https://discuss.elastic.co/t/logstash-reads-input-files-but-does-not-write-any-output/273575)
**Author:** [@fmanfredi](https://discuss.elastic.co/u/fmanfredi)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 7:14pm UTC](https://discuss.elastic.co/t/logstash-reads-input-files-but-does-not-write-any-output/273575 "2021-05-20T19:14:20Z")
Hi, I'm having problems with logstash. Looks like it is capable of reaching and reading the files I want it to read but there is no sign of processing and output. I'm trying to write both to elasticsearch and stdout bu… --- ## [Logstash: input file plugin and tcp plugins](https://discuss.elastic.co/t/logstash-input-file-plugin-and-tcp-plugins/273058)
**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\ **Replies:** 31\ **Last updated:** [May 20, 2021, 7:13pm UTC](https://discuss.elastic.co/t/logstash-input-file-plugin-and-tcp-plugins/273058 "2021-05-20T19:13:40Z")
I have 4 pipelines. 3 using tcp plugin and 1 using file plugin. pipeline with input file plugin works fine independently, but when i add 3 other tcp plugin pipeline, the input file plugin pipeline stops running (after s… --- ## [Load more than 1 million row from SQL Server to ES with Logstash JDBC](https://discuss.elastic.co/t/load-more-than-1-million-row-from-sql-server-to-es-with-logstash-jdbc/273563)
**Author:** [@Dai\_Thai\_Hoa\_Vo](https://discuss.elastic.co/u/Dai_Thai_Hoa_Vo)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 6:30pm UTC](https://discuss.elastic.co/t/load-more-than-1-million-row-from-sql-server-to-es-with-logstash-jdbc/273563 "2021-05-20T18:30:56Z")
Hi every one. I have one case that my table has more 1 million rows in SQL Server and I used logstash JDBC to load them to Elastic Search. It work fine but run very slow. This is my file config. input { jdbc { jdbc… --- ## [Logstash input plugin](https://discuss.elastic.co/t/logstash-input-plugin/273574)
**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 6:29pm UTC](https://discuss.elastic.co/t/logstash-input-plugin/273574 "2021-05-20T18:29:56Z")
Has anyone experienced a behavior where logstash is not discovering new files and incorrectly marking new discovery as false? \[2021-05-20T18:20:02,794\]\[TRACE\]\[filewatch.discoverer \] discover\_files {"count"=\>2254} \[2… --- ## [Logstash mutate remove field name 'JSON'](https://discuss.elastic.co/t/logstash-mutate-remove-field-name-json/273572)
**Author:** [@raghav\_krishna\_agarw](https://discuss.elastic.co/u/raghav_krishna_agarw)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 6:19pm UTC](https://discuss.elastic.co/t/logstash-mutate-remove-field-name-json/273572 "2021-05-20T18:19:11Z")
I am trying to remove a field name "JSON" in my mongoDB record, while dumping in ELK. But it is not working, may be the case of reserve keyword. Below is the document structure: "date" : \, "name" : "xyz", "JSON" … --- ## [Custom Visualisation in Kibana 7.5.1](https://discuss.elastic.co/t/custom-visualisation-in-kibana-7-5-1/273550)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 5:49pm UTC](https://discuss.elastic.co/t/custom-visualisation-in-kibana-7-5-1/273550 "2021-05-20T17:49:24Z")
I found that we should place our custom viz inside kibana/plugins folder? But I couldn't find any such folder in the directory structure. Where should I place the folder and how should I start with my development. Could … --- ## [Saving a specific array element in Logstash](https://discuss.elastic.co/t/saving-a-specific-array-element-in-logstash/273556)
**Author:** [@tumbledwyer](https://discuss.elastic.co/u/tumbledwyer)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 4:47pm UTC](https://discuss.elastic.co/t/saving-a-specific-array-element-in-logstash/273556 "2021-05-20T16:47:12Z")
Hi I am receiving a JSON object with an array property. I would like to search the array and save only the element that matches my criteria. My input looks like this: { "identifier": \[ { "system" : "Source1", "va… --- ## [LogStash::ConvergeResult::FailedAction while tryting to use pipeline output](https://discuss.elastic.co/t/logstash-failedaction-while-tryting-to-use-pipeline-output/273564)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 4:30pm UTC](https://discuss.elastic.co/t/logstash-failedaction-while-tryting-to-use-pipeline-output/273564 "2021-05-20T16:30:00Z")
Hi folks, this is my test.conf: input { beats { port =\> 6150 } } output { if \[agent\]\[type\] == "metricbeat" { elasticsearch { ... } } else if \[fields\]\[log\_type\] == "audit" { elasticsearch { … --- ## [SLM: Only one snapshot can be taken at a time. To avoid snapshot failures, edit or delete the policies](https://discuss.elastic.co/t/slm-only-one-snapshot-can-be-taken-at-a-time-to-avoid-snapshot-failures-edit-or-delete-the-policies/273500)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 4\ **Last updated:** [May 20, 2021, 4:02pm UTC](https://discuss.elastic.co/t/slm-only-one-snapshot-can-be-taken-at-a-time-to-avoid-snapshot-failures-edit-or-delete-the-policies/273500 "2021-05-20T16:02:29Z")
Hi, Does it mean that if you do schedule multiple snapshots on the same time they: Will be queued, meaning that they might start later than scheduled but eventually they will execute and take a snapshot. Or does i… --- ## [There is insufficient memory for the Java Runtime Environment to continue while using --config.test\_and\_exit](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue-while-using-config-test-and-exit/273561)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 3:42pm UTC](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue-while-using-config-test-and-exit/273561 "2021-05-20T15:42:59Z")
When I try to test the config of my logstash pipeline I run into this error: \[bash\]$ logstash --config.test\_and\_exit -f /path/to/config.conf OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in … --- ## [Introduce data with more lenght than 255 characters in Data Table](https://discuss.elastic.co/t/introduce-data-with-more-lenght-than-255-characters-in-data-table/273545)
**Author:** [@pablixelastic](https://discuss.elastic.co/u/pablixelastic)\ **Replies:** 5\ **Last updated:** [May 20, 2021, 3:07pm UTC](https://discuss.elastic.co/t/introduce-data-with-more-lenght-than-255-characters-in-data-table/273545 "2021-05-20T15:07:56Z")
Hi! Is there any solution to watch data with more than 255 characters from MySQL in a Data Table placed inside a dashboard of Kibana? I have this response: Can someone help me with this? Thank you very much!! --- ## [Aggregation across multiple indices](https://discuss.elastic.co/t/aggregation-across-multiple-indices/271350)
**Author:** [@ice2021](https://discuss.elastic.co/u/ice2021)\ **Replies:** 8\ **Last updated:** [May 20, 2021, 3:07pm UTC](https://discuss.elastic.co/t/aggregation-across-multiple-indices/271350 "2021-05-20T15:07:36Z")
I have 2 indices and they store data of the same mappings on different dates - t1 and t2. I have a multi term aggregation below which works on a single index. How can I get elasticsearch to return the same aggregation a… --- ## [Is there a KQL API endpoint and/or a way to run KQL queries from CLI?](https://discuss.elastic.co/t/is-there-a-kql-api-endpoint-and-or-a-way-to-run-kql-queries-from-cli/273557)
**Author:** [@el\_tedward](https://discuss.elastic.co/u/el_tedward)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 2:49pm UTC](https://discuss.elastic.co/t/is-there-a-kql-api-endpoint-and-or-a-way-to-run-kql-queries-from-cli/273557 "2021-05-20T14:49:20Z")
In older versions of Kibana, you could get the full Kibana query syntax by just running query\_string queries with a few options that Kibana sets by default, though it doesn't appear you can do that any longer (in a fully… --- ## [Elasticsearch cluster data migration](https://discuss.elastic.co/t/elasticsearch-cluster-data-migration/273538)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 2:36pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-data-migration/273538 "2021-05-20T14:36:10Z")
I have 10 nodes in one cluster(in a server). I want to dump all documents from this cluster. After that, import these docs to new cluster. The new cluster will be have only one node. I have followed this tutorial After … --- ## [Kibana Local Set Up - Permissions Issue](https://discuss.elastic.co/t/kibana-local-set-up-permissions-issue/272681)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 2:11pm UTC](https://discuss.elastic.co/t/kibana-local-set-up-permissions-issue/272681 "2021-05-20T14:11:03Z")
I have setup kibana as per the guide and I have checked out version as well. But while running bootstrap cmd, I have been presented with below error info If you think this is a bug, please open a bug report with the inf… --- ## [Multiple Logstash outputs vs pipeline-to-pipeline communcations](https://discuss.elastic.co/t/multiple-logstash-outputs-vs-pipeline-to-pipeline-communcations/273546)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 1:24pm UTC](https://discuss.elastic.co/t/multiple-logstash-outputs-vs-pipeline-to-pipeline-communcations/273546 "2021-05-20T13:24:25Z")
Hi folks, I have following use case: I want to create one index for each kubernetes namespace (and its own lifecycle policy) and I want to use the ILM. As far as I understand I have two approaches: I have one pipelin… --- ## [Uptime monitor status missing alert variables for Recovered status](https://discuss.elastic.co/t/uptime-monitor-status-missing-alert-variables-for-recovered-status/272858)
**Author:** [@bwright1558](https://discuss.elastic.co/u/bwright1558)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 1:12pm UTC](https://discuss.elastic.co/t/uptime-monitor-status-missing-alert-variables-for-recovered-status/272858 "2021-05-20T13:12:58Z")
I have an Uptime monitor status alert with an action configured to run when "Recovered". I'm using the following message template for the action: OK - Monitor {{state.monitorName}} is {{state.statusMessage}}. Both stat… --- ## [From SQL Server Management Studio to Elastic Search: config file](https://discuss.elastic.co/t/from-sql-server-management-studio-to-elastic-search-config-file/273544)
**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 1:09pm UTC](https://discuss.elastic.co/t/from-sql-server-management-studio-to-elastic-search-config-file/273544 "2021-05-20T13:09:03Z")
Good Evening. I'm new on the ELK stack and for the first time I'm trying to import some data from SQL Server Manamenet Studio database to the ElasticSearch. I know there is the necessity to download a driver to use the… --- ## [Search for text in a string](https://discuss.elastic.co/t/search-for-text-in-a-string/273457)
**Author:** [@cyberguy2891](https://discuss.elastic.co/u/cyberguy2891)\ **Replies:** 2\ **Last updated:** [May 20, 2021, 1:06pm UTC](https://discuss.elastic.co/t/search-for-text-in-a-string/273457 "2021-05-20T13:06:15Z")
Hi, Im fairly new to elastic search and Ive been stuck on these for 8 hrs now. I have a log field like this: Retry Exhausted Error Get segment: GET request failed after 1 attempts to record the segment (final status co… --- ## [AccessDeniedException on path.data when adding Volume Claim Templates on ECK](https://discuss.elastic.co/t/accessdeniedexception-on-path-data-when-adding-volume-claim-templates-on-eck/273540)
**Author:** [@Leonardo\_Corrati1](https://discuss.elastic.co/u/Leonardo_Corrati1)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 1:00pm UTC](https://discuss.elastic.co/t/accessdeniedexception-on-path-data-when-adding-volume-claim-templates-on-eck/273540 "2021-05-20T13:00:57Z")
Hi, I'm trying to deploy ECK on OpenShift using Minishift. I get the following error when I define a volume claim template according to the documentation: "stacktrace": \["org.elasticsearch.bootstrap.StartupException: … --- ## [Logstash pipeline problem (logstash not appearing in kibana)](https://discuss.elastic.co/t/logstash-pipeline-problem-logstash-not-appearing-in-kibana/273429)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 5\ **Last updated:** [May 20, 2021, 11:59am UTC](https://discuss.elastic.co/t/logstash-pipeline-problem-logstash-not-appearing-in-kibana/273429 "2021-05-20T11:59:38Z")
Hi guys, thank you for having me on this forum. I am trying to set up ELK for the first time. I have followed installation instructions from elastic.co with numbers of videos on yt and I have finally installed ELK. The… --- ## [How to chain synonyms in Elasticsearch](https://discuss.elastic.co/t/how-to-chain-synonyms-in-elasticsearch/273522)
**Author:** [@nik0219](https://discuss.elastic.co/u/nik0219)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 12:02pm UTC](https://discuss.elastic.co/t/how-to-chain-synonyms-in-elasticsearch/273522 "2021-05-20T12:02:39Z")
In my Application I want to create the following hierarchy: hobby -\> sport -\> football When looking for the word hobby, I want to check for the words sport and football as well, when looking for the word sport I also w… --- ## [Mapping two string values or create kv pair](https://discuss.elastic.co/t/mapping-two-string-values-or-create-kv-pair/273518)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 11:38am UTC](https://discuss.elastic.co/t/mapping-two-string-values-or-create-kv-pair/273518 "2021-05-20T11:38:28Z")
my current pipeline in logstash after running on input log data is producing below output , i need to map it one to one..or create kv such as .. pl-3: 361 pl-4: 366 etc.... "header" =\> "Parameter … --- ## [Inline script for round off float field is not working](https://discuss.elastic.co/t/inline-script-for-round-off-float-field-is-not-working/273454)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [May 20, 2021, 11:08am UTC](https://discuss.elastic.co/t/inline-script-for-round-off-float-field-is-not-working/273454 "2021-05-20T11:08:17Z")
Hi all, I'm trying to display average of a field in visualization bucket. But when i use below code in inline text of advanced JSON for an integer value, I dont get. I dont want decimal values. { "script": { "inlin… --- ## [Create configuration with minimum 2 master nodes](https://discuss.elastic.co/t/create-configuration-with-minimum-2-master-nodes/273501)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 3\ **Last updated:** [May 20, 2021, 10:51am UTC](https://discuss.elastic.co/t/create-configuration-with-minimum-2-master-nodes/273501 "2021-05-20T10:51:48Z")
I want (via ECK) to create a setup where a) there will be three nodes in total having all roles b) there will be a MINIMUM of 2 master nodes Is the following configuration on the Elasticsearch resource legit? apiVers… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=940) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=942)