# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=943

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 944

---

## [Logstash Http Input Plugin - Encrypted Private Key File is not Valid](https://discuss.elastic.co/t/logstash-http-input-plugin-encrypted-private-key-file-is-not-valid/273438)

<div class="topic-metadata">

**Author:** [@dickysum](https://discuss.elastic.co/u/dickysum)\
**Replies:** 0\
**Last updated:** [May 19, 2021, 6:21pm UTC](https://discuss.elastic.co/t/logstash-http-input-plugin-encrypted-private-key-file-is-not-valid/273438 "2021-05-19T18:21:24Z")

</div>

Hi, I am trying to use an encrypted private key for a Logstash HTTP Input where both the private key and certificate are stored locally on the server. However, if I encrypt the private key and configure the ssl\_key\_passp…

---

## [Prettified json is not parsed by logstash s3 input plugin](https://discuss.elastic.co/t/prettified-json-is-not-parsed-by-logstash-s3-input-plugin/273398)

<div class="topic-metadata">

**Author:** [@Anubha](https://discuss.elastic.co/u/Anubha)\
**Replies:** 4\
**Last updated:** [May 19, 2021, 6:01pm UTC](https://discuss.elastic.co/t/prettified-json-is-not-parsed-by-logstash-s3-input-plugin/273398 "2021-05-19T18:01:03Z")

</div>

We're trying to parse multiline json file from an s3 bucket which results in "\_jsonparsefailure". It reads the file line by line. The codec we're using is json\_lines. Our logstash config looks like this: input { …

---

## [Configuring network.host and network.publish\_host in dual stack environment](https://discuss.elastic.co/t/configuring-network-host-and-network-publish-host-in-dual-stack-environment/273342)

<div class="topic-metadata">

**Author:** [@mahudees](https://discuss.elastic.co/u/mahudees)\
**Replies:** 2\
**Last updated:** [May 19, 2021, 5:08pm UTC](https://discuss.elastic.co/t/configuring-network-host-and-network-publish-host-in-dual-stack-environment/273342 "2021-05-19T17:08:08Z")

</div>

Need to create a elasticsearch cluster where the environment is dual stack. From the document came to know that we can configure network.host: 0.0.0.0 to make it bind on all the available interfaces, in this case it can…

---

## [Remove first few lines of csv in logstash](https://discuss.elastic.co/t/remove-first-few-lines-of-csv-in-logstash/273359)

<div class="topic-metadata">

**Author:** [@Osiris](https://discuss.elastic.co/u/Osiris)\
**Replies:** 1\
**Last updated:** [May 19, 2021, 4:42pm UTC](https://discuss.elastic.co/t/remove-first-few-lines-of-csv-in-logstash/273359 "2021-05-19T16:42:16Z")

</div>

This is the input I am using for logstash. ItemId AssetId ItemName Comment 11111 07 ABCDa XYZa 11112 07 ABCDb XYZb 11113 07 ABCDc XYZc 11114 07 ABCDd XYZd 11115 07 ABCD…

---

## [How far to push the CPU on logstash](https://discuss.elastic.co/t/how-far-to-push-the-cpu-on-logstash/273363)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 1\
**Last updated:** [May 19, 2021, 4:26pm UTC](https://discuss.elastic.co/t/how-far-to-push-the-cpu-on-logstash/273363 "2021-05-19T16:26:47Z")

</div>

Hi, I have a 8 Core CPU with 16GB of RAM. 8 GB has been allocated to Logstash. Nothing else is running on the machine. The logstash is running a single pipeline only. I have seen that even when I configure the number…

---

## [Load data from SQL server to Elasticsearch on local](https://discuss.elastic.co/t/load-data-from-sql-server-to-elasticsearch-on-local/273196)

<div class="topic-metadata">

**Author:** [@Dai\_Thai\_Hoa\_Vo](https://discuss.elastic.co/u/Dai_Thai_Hoa_Vo)\
**Replies:** 9\
**Last updated:** [May 19, 2021, 4:15pm UTC](https://discuss.elastic.co/t/load-data-from-sql-server-to-elasticsearch-on-local/273196 "2021-05-19T16:15:24Z")

</div>

I have local sql server and local ELK . I configed logstash.conf connect to SQL Server. The logstash have read data from SQL but when write data to Elasticsearch only 1 row. Please any one explain to me about this. inp…

---

## [Map not showing correctly in Uptime UI](https://discuss.elastic.co/t/map-not-showing-correctly-in-uptime-ui/273332)

<div class="topic-metadata">

**Author:** [@marone](https://discuss.elastic.co/u/marone)\
**Replies:** 6\
**Last updated:** [May 19, 2021, 4:07pm UTC](https://discuss.elastic.co/t/map-not-showing-correctly-in-uptime-ui/273332 "2021-05-19T16:07:21Z")

</div>

Hey I successfully configured heartbeat 7.12.0 with my elastic stack 7.12.0, I have 2 nodes to monitor, I configured the geo processor to be able to visualize my VMs on a map, the problem is that the map isn't shown prop…

---

## [Different values when trying to use scripted field](https://discuss.elastic.co/t/different-values-when-trying-to-use-scripted-field/273344)

<div class="topic-metadata">

**Author:** [@Francisco\_Gomez1](https://discuss.elastic.co/u/Francisco_Gomez1)\
**Replies:** 4\
**Last updated:** [May 19, 2021, 3:52pm UTC](https://discuss.elastic.co/t/different-values-when-trying-to-use-scripted-field/273344 "2021-05-19T15:52:38Z")

</div>

Hi, im trying to create a scripted field wich is the result of 2 different values. Thanks in advance This is the value i got stored in my document i access it usen the get "index"/\_doc/"id" If i manually add this 2…

---

## [Ingest CSV file with Logstash fails](https://discuss.elastic.co/t/ingest-csv-file-with-logstash-fails/273431)

<div class="topic-metadata">

**Author:** [@Oscar\_Lopez](https://discuss.elastic.co/u/Oscar_Lopez)\
**Replies:** 1\
**Last updated:** [May 19, 2021, 3:36pm UTC](https://discuss.elastic.co/t/ingest-csv-file-with-logstash-fails/273431 "2021-05-19T15:36:28Z")

</div>

I am trying to ingest a CSV file but I get an error when parsing the fields with the following configuration: input { file { path =\> "/etc/logstash/conf.d/taconería.conf" start\_position =\> "beginning" #s…

---

## [How does the setup of filebeat on kubernetes work?](https://discuss.elastic.co/t/how-does-the-setup-of-filebeat-on-kubernetes-work/272575)

<div class="topic-metadata">

**Author:** [@wifi](https://discuss.elastic.co/u/wifi)\
**Replies:** 3\
**Last updated:** [May 19, 2021, 3:35pm UTC](https://discuss.elastic.co/t/how-does-the-setup-of-filebeat-on-kubernetes-work/272575 "2021-05-19T15:35:46Z")

</div>

I'm using the elastic operator "docker.elastic.co/eck/eck-operator:1.5.0" and trying to get a working filebeat running. Somehow I don't get index templates properly set up and also ilm. My deployment looks like this: …

---

## [Unable to add Cisco integration under Fleet Policy](https://discuss.elastic.co/t/unable-to-add-cisco-integration-under-fleet-policy/273121)

<div class="topic-metadata">

**Author:** [@Shiv18](https://discuss.elastic.co/u/Shiv18)\
**Replies:** 1\
**Last updated:** [May 19, 2021, 3:35pm UTC](https://discuss.elastic.co/t/unable-to-add-cisco-integration-under-fleet-policy/273121 "2021-05-19T15:35:19Z")

</div>

Hi Team, I'm using Elastic agent for endpoint, servers and network devices. I can able to add policy for endpoints but for network Cisco integration alone throws me error. I'm trying to add this through Fleet policy for…

---

## [The difference between "check every", index size, and number of matches](https://discuss.elastic.co/t/the-difference-between-check-every-index-size-and-number-of-matches/273411)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 1\
**Last updated:** [May 19, 2021, 3:21pm UTC](https://discuss.elastic.co/t/the-difference-between-check-every-index-size-and-number-of-matches/273411 "2021-05-19T15:21:39Z")

</div>

Dear all =) When creating an Alert with a webhook action, I have to fill out Check every Select an index and size When number of matches See screenshot below. Question 1 =) If check every is 1 day, and index size i…

---

## [Source IP Geoip](https://discuss.elastic.co/t/source-ip-geoip/273339)

<div class="topic-metadata">

**Author:** [@Pacous](https://discuss.elastic.co/u/Pacous)\
**Replies:** 1\
**Last updated:** [May 19, 2021, 3:07pm UTC](https://discuss.elastic.co/t/source-ip-geoip/273339 "2021-05-19T15:07:51Z")

</div>

Hello, I collect the fortigate events. I configured the geoip plugin in logstash. The visualization of sources before configuring the plugin is different after configuring the plugin. Please find the difference below…

---

## [How to limit rows for one single saved search panel](https://discuss.elastic.co/t/how-to-limit-rows-for-one-single-saved-search-panel/273357)

<div class="topic-metadata">

**Author:** [@Long\_Nguyen](https://discuss.elastic.co/u/Long_Nguyen)\
**Replies:** 1\
**Last updated:** [May 19, 2021, 3:03pm UTC](https://discuss.elastic.co/t/how-to-limit-rows-for-one-single-saved-search-panel/273357 "2021-05-19T15:03:47Z")

</div>

Hello everyone, I wonder if there is a way to limit the displayed rows for one single saved search panel in the dashboard? (Top 10 for example) I have looked at this thread Kibana search limit rows (top 20) - #4 by Bra…

---

## [Dashboard usage monitoring and node.js http access logs](https://discuss.elastic.co/t/dashboard-usage-monitoring-and-node-js-http-access-logs/273401)

<div class="topic-metadata">

**Author:** [@capitalism.exe](https://discuss.elastic.co/u/capitalism.exe)\
**Replies:** 1\
**Last updated:** [May 19, 2021, 2:56pm UTC](https://discuss.elastic.co/t/dashboard-usage-monitoring-and-node-js-http-access-logs/273401 "2021-05-19T14:56:20Z")

</div>

Hello folks, we are currently developing a monitoring platform for a large transportation company. This platform monitors environments like development, integration, testing. You get the idea. We maintain a large num…

---

## [Refresh Index not visible](https://discuss.elastic.co/t/refresh-index-not-visible/273421)

<div class="topic-metadata">

**Author:** [@wickerman](https://discuss.elastic.co/u/wickerman)\
**Replies:** 3\
**Last updated:** [May 19, 2021, 2:47pm UTC](https://discuss.elastic.co/t/refresh-index-not-visible/273421 "2021-05-19T14:47:50Z")

</div>

Hello, I've been using ELK for almost a year now. Great Journey! Currently, I can't seem to see the refresh option in Kibana after opening the index. Only the delete icon is visible. Any ideas, on what caused this or…

---

## [Manual inject columns in table view](https://discuss.elastic.co/t/manual-inject-columns-in-table-view/272991)

<div class="topic-metadata">

**Author:** [@debrt](https://discuss.elastic.co/u/debrt)\
**Replies:** 8\
**Last updated:** [May 19, 2021, 2:45pm UTC](https://discuss.elastic.co/t/manual-inject-columns-in-table-view/272991 "2021-05-19T14:45:10Z")

</div>

Dear community I'm using a data table to show the top count of event\_id's found in my Winlogbeat index and I am searching for a way to have a column in the table with the description of the event\_id as specified on the s…

---

## [Restore line rendering in point series vis using percentile agg #35649](https://discuss.elastic.co/t/restore-line-rendering-in-point-series-vis-using-percentile-agg-35649/273238)

<div class="topic-metadata">

**Author:** [@Aman\_Gupta1](https://discuss.elastic.co/u/Aman_Gupta1)\
**Replies:** 4\
**Last updated:** [May 19, 2021, 2:37pm UTC](https://discuss.elastic.co/t/restore-line-rendering-in-point-series-vis-using-percentile-agg-35649/273238 "2021-05-19T14:37:40Z")

</div>

Hi Team, I'm using elasticsearch: 7.0.1 logstash: 7.0.1 kibana: 7.0.1 but kibana graph can't restore line in %tile graphs. tried upgrading kibana to few version: like 7.2.x, 7.4.x, 7.12.x none of them is compatibl…

---

## [How to handle error mapping](https://discuss.elastic.co/t/how-to-handle-error-mapping/273399)

<div class="topic-metadata">

**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\
**Replies:** 2\
**Last updated:** [May 19, 2021, 2:34pm UTC](https://discuss.elastic.co/t/how-to-handle-error-mapping/273399 "2021-05-19T14:34:30Z")

</div>

hallo I tried to make a mapping for my needs, but an error appeared, can you help with my error, and this my mappping PUT /badilums { "mappings":{ "properties":{ "badilum\_perkara":{ …

---

## [Parsing json array](https://discuss.elastic.co/t/parsing-json-array/273218)

<div class="topic-metadata">

**Author:** [@Amy007](https://discuss.elastic.co/u/Amy007)\
**Replies:** 5\
**Last updated:** [May 19, 2021, 2:07pm UTC](https://discuss.elastic.co/t/parsing-json-array/273218 "2021-05-19T14:07:33Z")

</div>

Hi , I have json having same structure as the below . How should I parse it?I tried split filter but its not working . \[ { "accounting": \[ { "firstName": "a35aa", "lastName": "Doe", "age": 23 }, { "firstName": …

---

## [@timestamp field problem while reading data from elasticsearch using spark-sql](https://discuss.elastic.co/t/timestamp-field-problem-while-reading-data-from-elasticsearch-using-spark-sql/273382)

<div class="topic-metadata">

**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\
**Replies:** 1\
**Last updated:** [May 19, 2021, 1:49pm UTC](https://discuss.elastic.co/t/timestamp-field-problem-while-reading-data-from-elasticsearch-using-spark-sql/273382 "2021-05-19T13:49:16Z")

</div>

i am trying to read data from elasticsearch using spark-sql, my index contains @timestamp field. below is my query the field name contains a special character so i am escaping it. the problem here is i am not getting…

---

## [Access payload from payload\_delimiter in scoring script](https://discuss.elastic.co/t/access-payload-from-payload-delimiter-in-scoring-script/273407)

<div class="topic-metadata">

**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\
**Replies:** 0\
**Last updated:** [May 19, 2021, 1:02pm UTC](https://discuss.elastic.co/t/access-payload-from-payload-delimiter-in-scoring-script/273407 "2021-05-19T13:02:15Z")

</div>

Hi I have trouble doing something like this, in es7. Can anyone help me, on how to access the payloads, from payload\_delimiter, from my script\_score? score=0; for (term: my\_terms) { termInfo = \_index\['text'\].get…

---

## [Extract specific line from java stack trace](https://discuss.elastic.co/t/extract-specific-line-from-java-stack-trace/273180)

<div class="topic-metadata">

**Author:** [@gerry1](https://discuss.elastic.co/u/gerry1)\
**Replies:** 2\
**Last updated:** [May 19, 2021, 1:45pm UTC](https://discuss.elastic.co/t/extract-specific-line-from-java-stack-trace/273180 "2021-05-19T13:45:31Z")

</div>

hi everyone, what i need to do is to extract from a java stack trace a specific line using the elk stack. What i have, as example, is the exception below and in kibana I want to have only the line starting with com.hos…

---

## [SQL Views in Elastic](https://discuss.elastic.co/t/sql-views-in-elastic/273408)

<div class="topic-metadata">

**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\
**Replies:** 3\
**Last updated:** [May 19, 2021, 1:40pm UTC](https://discuss.elastic.co/t/sql-views-in-elastic/273408 "2021-05-19T13:40:22Z")

</div>

Is there functionality in Elasticsearch that would be comparable to that of a view in SQL? What I would like to do is use a query (a complex aggregation) as the "definition" of a new index. Lets say I have index-A that…

---

## [Plugin installation was unsuccessful due to error No valid url specified 7.10.2](https://discuss.elastic.co/t/plugin-installation-was-unsuccessful-due-to-error-no-valid-url-specified-7-10-2/273406)

<div class="topic-metadata">

**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\
**Replies:** 1\
**Last updated:** [May 19, 2021, 1:30pm UTC](https://discuss.elastic.co/t/plugin-installation-was-unsuccessful-due-to-error-no-valid-url-specified-7-10-2/273406 "2021-05-19T13:30:54Z")

</div>

hi team, can you help with issue? My command is like below \`\[admin@kibana-server1 bin\]$ ./kibana-plugin install file:///usr/share/kibana/plugins/navMenu-7.10.2.zip\` and my result is that: \`Found previous install atte…

---

## [Update mappings on index](https://discuss.elastic.co/t/update-mappings-on-index/273299)

<div class="topic-metadata">

**Author:** [@Cesidio\_DiBenedetto](https://discuss.elastic.co/u/Cesidio_DiBenedetto)\
**Replies:** 2\
**Last updated:** [May 19, 2021, 1:03pm UTC](https://discuss.elastic.co/t/update-mappings-on-index/273299 "2021-05-19T13:03:09Z")

</div>

If I add a few new fields in my index but are not currently being populated because our caching job hasn't been updated to match, will that break current inserts/updates on that index? Edit: Basically added a few new "f…

---

## [KV filter and fields separator](https://discuss.elastic.co/t/kv-filter-and-fields-separator/273286)

<div class="topic-metadata">

**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\
**Replies:** 23\
**Last updated:** [May 19, 2021, 12:13pm UTC](https://discuss.elastic.co/t/kv-filter-and-fields-separator/273286 "2021-05-19T12:13:05Z")

</div>

Good morning. I'm using a KV filter in logstash to parse the content of a JSON log. I have to use a comma "," as separator between different fileds, but there is some values wich contains string with commas in the text, …

---

## [Copy dashboards](https://discuss.elastic.co/t/copy-dashboards/272818)

<div class="topic-metadata">

**Author:** [@capitalism.exe](https://discuss.elastic.co/u/capitalism.exe)\
**Replies:** 2\
**Last updated:** [May 19, 2021, 11:56am UTC](https://discuss.elastic.co/t/copy-dashboards/272818 "2021-05-19T11:56:57Z")

</div>

Hello folks, we are currently developing a monitoring platform for a large transportation company. This platform monitors environments like development, integration, testing. You get the idea. We maintain a large num…

---

## [Apache2 User Agent not avalaible in the Visualize menu](https://discuss.elastic.co/t/apache2-user-agent-not-avalaible-in-the-visualize-menu/273031)

<div class="topic-metadata">

**Author:** [@dkdlv38](https://discuss.elastic.co/u/dkdlv38)\
**Replies:** 6\
**Last updated:** [May 19, 2021, 11:48am UTC](https://discuss.elastic.co/t/apache2-user-agent-not-avalaible-in-the-visualize-menu/273031 "2021-05-19T11:48:29Z")

</div>

Hello all! I'm trying to create a visualisation to track the user agent of the Apache clients connecting to my website, I have this information in the "Discover" menu, but it doesn't appear in the "Visualize" menu... …

---

## [Nested query with must clause and second nested query](https://discuss.elastic.co/t/nested-query-with-must-clause-and-second-nested-query/273380)

<div class="topic-metadata">

**Author:** [@hastinc](https://discuss.elastic.co/u/hastinc)\
**Replies:** 0\
**Last updated:** [May 19, 2021, 9:52am UTC](https://discuss.elastic.co/t/nested-query-with-must-clause-and-second-nested-query/273380 "2021-05-19T09:52:11Z")

</div>

Hi All, First of all sorry for the long post. I'm wondering if somebody can confirm if the query I've constructed is correct. Basically, I have a User mapping that has Transaction nested within the user and I'm lookin…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=942)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=944)
