# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=965 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 966 --- ## [Editing date time filed in json filter output](https://discuss.elastic.co/t/editing-date-time-filed-in-json-filter-output/271136)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 7\ **Last updated:** [April 28, 2021, 10:52am UTC](https://discuss.elastic.co/t/editing-date-time-filed-in-json-filter-output/271136 "2021-04-28T10:52:27Z")
Hi all I am using filebeat 7.8 which sends log to logstash 7.8. Each line of log is as following: {"req": { "service": ser1,"re\_date": "2020-09-10T09:14:38.479"}} and my logstash filter is as following: inpu… --- ## [Is there a way in Kibana to group, aggregate and report frequently occurring exceptions and errors?](https://discuss.elastic.co/t/is-there-a-way-in-kibana-to-group-aggregate-and-report-frequently-occurring-exceptions-and-errors/269243)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 1\ **Last updated:** [April 28, 2021, 10:43am UTC](https://discuss.elastic.co/t/is-there-a-way-in-kibana-to-group-aggregate-and-report-frequently-occurring-exceptions-and-errors/269243 "2021-04-28T10:43:19Z")
Hello Experts, We have application and web logs. We would like to group group, aggregate and report frequently occurring exceptions and errors using API. How to get report errors with their frequency of occurrence? E… --- ## [Elasticsearch 7.12 cluster 3 node installation](https://discuss.elastic.co/t/elasticsearch-7-12-cluster-3-node-installation/271480)
**Author:** [@cuongnp](https://discuss.elastic.co/u/cuongnp)\ **Replies:** 2\ **Last updated:** [April 28, 2021, 10:37am UTC](https://discuss.elastic.co/t/elasticsearch-7-12-cluster-3-node-installation/271480 "2021-04-28T10:37:49Z")
Hi all, I tried to setup 3 Elasticsearch nodes with configuration below file /etc/hosts (on 3 nodes) elasticsearch.yml NODE 1 (master-1) cluster.name: es-cluster node.name: "master-1" node.master: true node.d… --- ## [Esrally test results, I want to see the test results about the query, thank you](https://discuss.elastic.co/t/esrally-test-results-i-want-to-see-the-test-results-about-the-query-thank-you/271496)
**Author:** [@rui.chen](https://discuss.elastic.co/u/rui.chen)\ **Replies:** 0\ **Last updated:** [April 28, 2021, 10:19am UTC](https://discuss.elastic.co/t/esrally-test-results-i-want-to-see-the-test-results-about-the-query-thank-you/271496 "2021-04-28T10:19:29Z")
this is test command esrally race --track=geonames --challenge=append-no-conflicts --offline --pipeline=benchmark-only --target-hosts=172.31.1.21:9200,172.31.1.30:9200,172.31.1.249:9200 test result | … --- ## [Can we use aggregate filter to get the total no of times an IP appears in the logs?](https://discuss.elastic.co/t/can-we-use-aggregate-filter-to-get-the-total-no-of-times-an-ip-appears-in-the-logs/271486)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 0\ **Last updated:** [April 28, 2021, 9:02am UTC](https://discuss.elastic.co/t/can-we-use-aggregate-filter-to-get-the-total-no-of-times-an-ip-appears-in-the-logs/271486 "2021-04-28T09:02:37Z")
I have a requirement , where an IP or hostname appears frequently in logs , can we use aggregate filter to get this count of IP /Hostnames ? --- ## [Index pattern creation fails in 7.9.2](https://discuss.elastic.co/t/index-pattern-creation-fails-in-7-9-2/271367)
**Author:** [@Lieven\_Merckx](https://discuss.elastic.co/u/Lieven_Merckx)\ **Replies:** 4\ **Last updated:** [April 28, 2021, 8:56am UTC](https://discuss.elastic.co/t/index-pattern-creation-fails-in-7-9-2/271367 "2021-04-28T08:56:07Z")
When we installed Elastic and Kibana on ou Kubernetes environment we have the recurrent issue that on a restart the index-pattern creation fails. It's an old issue that doesn't get solved in the latest release of Elastic… --- ## [Version conflict while restarting cluster node](https://discuss.elastic.co/t/version-conflict-while-restarting-cluster-node/271484)
**Author:** [@thomasixo](https://discuss.elastic.co/u/thomasixo)\ **Replies:** 0\ **Last updated:** [April 28, 2021, 8:44am UTC](https://discuss.elastic.co/t/version-conflict-while-restarting-cluster-node/271484 "2021-04-28T08:44:20Z")
Hi, i have an elasticsearch cluster with 4 nodes. I have a datastream with the name "log\_data", which have configured 2 shards and 1 replica. I have a test script, which creates in an endless loop new documents to thi… --- ## [Avoid index ballooning by updates and deletes](https://discuss.elastic.co/t/avoid-index-ballooning-by-updates-and-deletes/271233)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 6\ **Last updated:** [April 28, 2021, 8:43am UTC](https://discuss.elastic.co/t/avoid-index-ballooning-by-updates-and-deletes/271233 "2021-04-28T08:43:48Z")
Hi, I'm struggling with having an index that has some fields that are frequently updated and documents that are deleted. I want to avoid ballooning the index for obvious reasons. I tried to go with freezing the index a… --- ## [Create a rule to detect number of beats](https://discuss.elastic.co/t/create-a-rule-to-detect-number-of-beats/270366)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 4\ **Last updated:** [April 28, 2021, 8:37am UTC](https://discuss.elastic.co/t/create-a-rule-to-detect-number-of-beats/270366 "2021-04-28T08:37:15Z")
Hello, I would like to create a new rule to detect if one of my beats stop sending data to my Cluster (one rule for each beat). For example I have installed packetbeat in 5 machines, and then the rule will verify each … --- ## [Import dashboard with new ID using API?](https://discuss.elastic.co/t/import-dashboard-with-new-id-using-api/271448)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 4\ **Last updated:** [April 28, 2021, 8:33am UTC](https://discuss.elastic.co/t/import-dashboard-with-new-id-using-api/271448 "2021-04-28T08:33:13Z")
Hi, I want to automatically add dashboards to a space. My dashboard are all the same except for a filter and the title. I was thinking about using the import API and have a script change the filter and title values but… --- ## [Is GCE Discovery still a thing?](https://discuss.elastic.co/t/is-gce-discovery-still-a-thing/271363)
**Author:** [@ppuschmann](https://discuss.elastic.co/u/ppuschmann)\ **Replies:** 7\ **Last updated:** [April 28, 2021, 8:06am UTC](https://discuss.elastic.co/t/is-gce-discovery-still-a-thing/271363 "2021-04-28T08:06:37Z")
Hi there, currently I'm investigating if it was sensible to enable the GCE-discovery in Elasticsearch. According to this (older) thread, there are some hints about documentation and possibly implementation being outdat… --- ## [I want to import aws cloudtrail eventTime through logstash](https://discuss.elastic.co/t/i-want-to-import-aws-cloudtrail-eventtime-through-logstash/271479)
**Author:** [@loanshark](https://discuss.elastic.co/u/loanshark)\ **Replies:** 0\ **Last updated:** [April 28, 2021, 7:47am UTC](https://discuss.elastic.co/t/i-want-to-import-aws-cloudtrail-eventtime-through-logstash/271479 "2021-04-28T07:47:57Z")
I want to import aws cloudtrail eventTime through logstash. Works well but fails to get eventTime. my logstash.conf input { s3 { bucket =\> "xxxxx" prefix =\> "xxxxx" sincedb\_path =\> "/etc/logstash/sincedb/… --- ## [Conditional with chinese character in ingest issue](https://discuss.elastic.co/t/conditional-with-chinese-character-in-ingest-issue/271475)
**Author:** [@tbs575](https://discuss.elastic.co/u/tbs575)\ **Replies:** 0\ **Last updated:** [April 28, 2021, 7:40am UTC](https://discuss.elastic.co/t/conditional-with-chinese-character-in-ingest-issue/271475 "2021-04-28T07:40:02Z")
Elasticsearch 7.12, filebeat get log message then send to elasticsearch. messages with keyword '上报请求信息' include json data, I created ingest with condition try to get these json data, the following is my ingest content. … --- ## [JVM heap spikes on data node](https://discuss.elastic.co/t/jvm-heap-spikes-on-data-node/270870)
**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\ **Replies:** 10\ **Last updated:** [April 28, 2021, 7:39am UTC](https://discuss.elastic.co/t/jvm-heap-spikes-on-data-node/270870 "2021-04-28T07:39:56Z")
Hello, I'm not really educated in this topic, but when I first saw this log in our logstash: \[2021-04-15T14:11:47,605\]\[INFO \]\[logstash.outputs.elasticsearch\]\[beats-monitoring-crypto\]\[3228c43cca49b666651ceb4c7945f188f5… --- ## [Alert kibana error](https://discuss.elastic.co/t/alert-kibana-error/271324)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 2\ **Last updated:** [April 28, 2021, 6:05am UTC](https://discuss.elastic.co/t/alert-kibana-error/271324 "2021-04-28T06:05:24Z")
i try to activate my alert. but when i start my kibana failure to start. here's my configuration # Kibana is served by a back end server. This setting specifies the port to use. # server.port: 5601 server.port: 5601 # … --- ## [Most optimal ElasticSearch](https://discuss.elastic.co/t/most-optimal-elasticsearch/271445)
**Author:** [@ekrx](https://discuss.elastic.co/u/ekrx)\ **Replies:** 6\ **Last updated:** [April 28, 2021, 5:16am UTC](https://discuss.elastic.co/t/most-optimal-elasticsearch/271445 "2021-04-28T05:16:12Z")
This is a very ambiguous question since I don't know exactly where to start. We require the most optimized ES performance for a mission critical system. Currently our ES queries are taking somewhere around 100-200 ms to … --- ## [How to remove special character on JSON file in logstash](https://discuss.elastic.co/t/how-to-remove-special-character-on-json-file-in-logstash/271462)
**Author:** [@mario\_kazela](https://discuss.elastic.co/u/mario_kazela)\ **Replies:** 1\ **Last updated:** [April 28, 2021, 5:06am UTC](https://discuss.elastic.co/t/how-to-remove-special-character-on-json-file-in-logstash/271462 "2021-04-28T05:06:16Z")
Hi, I'm new with ELK. Just want to ask, how to remove "\[" on the logstash? \[{"uuid": "8153990955613214174559836954673410970", "label": \["Phone", "Laptop", "Pc", "Computer", "Iphone", "Mobile Phone", "Electronics", "Cel… --- ## [Moving From ES 5.x to 7.x and OS Upgrade](https://discuss.elastic.co/t/moving-from-es-5-x-to-7-x-and-os-upgrade/270979)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 6\ **Last updated:** [April 28, 2021, 3:32am UTC](https://discuss.elastic.co/t/moving-from-es-5-x-to-7-x-and-os-upgrade/270979 "2021-04-28T03:32:39Z")
Good Morning, I have a clustered ES 5.x environment that I need to do a few things. 1.) Upgrade the Server OS from Ubuntu 16.04 to 18.04 possibly 20.04. When we attempted this last week, we tried to upgrade by using..… --- ## [Marking index location in read only mode](https://discuss.elastic.co/t/marking-index-location-in-read-only-mode/271416)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 5\ **Last updated:** [April 28, 2021, 3:29am UTC](https://discuss.elastic.co/t/marking-index-location-in-read-only-mode/271416 "2021-04-28T03:29:38Z")
I wanted to know, how to close existing index location (ready-only mode) and open new index location for writing the index data? Consider a use case that, I want to chage my storage type in which old data will remain on … --- ## [TCP connection limit of Elasticsearch](https://discuss.elastic.co/t/tcp-connection-limit-of-elasticsearch/271454)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 0\ **Last updated:** [April 28, 2021, 3:28am UTC](https://discuss.elastic.co/t/tcp-connection-limit-of-elasticsearch/271454 "2021-04-28T03:28:26Z")
We harvest logs on aws machines by filebeat. Filebeat on each machine push those log to local logstash nodes and then logstash nodes push the data to local Elasticsearch nodes. It seems to me that both logstash node and… --- ## [Convert File, Group, Record and Unit Separator](https://discuss.elastic.co/t/convert-file-group-record-and-unit-separator/271452)
**Author:** [@bibhuWork](https://discuss.elastic.co/u/bibhuWork)\ **Replies:** 0\ **Last updated:** [April 28, 2021, 3:01am UTC](https://discuss.elastic.co/t/convert-file-group-record-and-unit-separator/271452 "2021-04-28T03:01:20Z")
Hi Friends I am trying to convert my message containing ^\\ , ^\] , ^^ and ^\_ into comma using mutate-\>gsub but its not working I am trying out \\u005E, \\u001E , \\u001F etc but no luck. Can you please help me out here. S… --- ## [Switch dashboard between last value (single value) and time range (aggregrated values)?](https://discuss.elastic.co/t/switch-dashboard-between-last-value-single-value-and-time-range-aggregrated-values/271314)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 2\ **Last updated:** [April 28, 2021, 1:45am UTC](https://discuss.elastic.co/t/switch-dashboard-between-last-value-single-value-and-time-range-aggregrated-values/271314 "2021-04-28T01:45:29Z")
I'm creating visualizations in Kibana based on existing visualizations in a proprietary app. (I won't mention that app by name.) That app offers the user several choices for the time span of a viz—at display time, witho… --- ## [Missing Authentication Credentials for REST Request](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/271158)
**Author:** [@hussshe](https://discuss.elastic.co/u/hussshe)\ **Replies:** 1\ **Last updated:** [April 28, 2021, 1:40am UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/271158 "2021-04-28T01:40:25Z")
Hello Elastic Users, I am trying to check if my Elasticsearch is working fine or not by running the following command in WindowsPowershell. Invoke-RestMethod http://localhost:9200 But it threw an 401-Authentication er… --- ## [Elastic Search 7.12 Java CPU useage](https://discuss.elastic.co/t/elastic-search-7-12-java-cpu-useage/270996)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 4\ **Last updated:** [April 28, 2021, 12:29am UTC](https://discuss.elastic.co/t/elastic-search-7-12-java-cpu-useage/270996 "2021-04-28T00:29:16Z")
1 x3 node cluster 2 stand alone nodes all showing the same signs. Elastic+ Java process is running at 100% CPU. CentOS 8. Anyone else running into the issue. The same machines have been fine with the CPU and memory sin… --- ## [Minimum nodes for elasticsearch 7.11.2 cluster?](https://discuss.elastic.co/t/minimum-nodes-for-elasticsearch-7-11-2-cluster/271023)
**Author:** [@webfr](https://discuss.elastic.co/u/webfr)\ **Replies:** 15\ **Last updated:** [April 27, 2021, 9:31pm UTC](https://discuss.elastic.co/t/minimum-nodes-for-elasticsearch-7-11-2-cluster/271023 "2021-04-27T21:31:33Z")
Hello, I'm using standalone ES node at the moment. I would like to add another node in another datacenter to increase data resilience and use cluster functions. Is it possible with just another node? Any documentation … --- ## [Free Trainning AWS labs credentials ? How to get AWS labs credentials?](https://discuss.elastic.co/t/free-trainning-aws-labs-credentials-how-to-get-aws-labs-credentials/271442)
**Author:** [@kjack](https://discuss.elastic.co/u/kjack)\ **Replies:** 0\ **Last updated:** [April 27, 2021, 8:53pm UTC](https://discuss.elastic.co/t/free-trainning-aws-labs-credentials-how-to-get-aws-labs-credentials/271442 "2021-04-27T20:53:16Z")
Hello, I'm registered for the free training of Elasticsearch Observability When I try to access the AWS web interface using the Public DNS, I get asked some credentials I don't know. How can I find those ? For instanc… --- ## [In house testing for cloud vs self hosted before self hosted release](https://discuss.elastic.co/t/in-house-testing-for-cloud-vs-self-hosted-before-self-hosted-release/271429)
**Author:** [@cealliance](https://discuss.elastic.co/u/cealliance)\ **Replies:** 1\ **Last updated:** [April 27, 2021, 8:15pm UTC](https://discuss.elastic.co/t/in-house-testing-for-cloud-vs-self-hosted-before-self-hosted-release/271429 "2021-04-27T20:15:48Z")
I am looking to test integration with keycloak, and other features that require a higher tier license. Cloud licenses are cheaper. Can I get away with testing/developing on a cloud server and applying my findings to th… --- ## [Date Histogram Aggregation with Empty Days](https://discuss.elastic.co/t/date-histogram-aggregation-with-empty-days/271436)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 2\ **Last updated:** [April 27, 2021, 8:10pm UTC](https://discuss.elastic.co/t/date-histogram-aggregation-with-empty-days/271436 "2021-04-27T20:10:12Z")
With the Date Histogram Aggregation is it possible to return a complete list of days, even if none of them have found results? I am using a query to look for sales that occurred in a range of days, but in some cases the… --- ## [ECE 2.9.1 released](https://discuss.elastic.co/t/ece-2-9-1-released/271434)
**Author:** [@Przemyslaw\_H](https://discuss.elastic.co/u/Przemyslaw_H)\ **Replies:** 0\ **Last updated:** [April 27, 2021, 7:34pm UTC](https://discuss.elastic.co/t/ece-2-9-1-released/271434 "2021-04-27T19:34:11Z")
We are pleased to announce that ECE 2.9.1 has been released today. This is a bug fix release. Release notes can be found here: https://www.elastic.co/guide/en/cloud-enterprise/current/ece-release-notes-2.9.1.html --- ## [7.12.1 Security Update](https://discuss.elastic.co/t/7-12-1-security-update/271433)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [April 27, 2021, 7:28pm UTC](https://discuss.elastic.co/t/7-12-1-security-update/271433 "2021-04-27T19:28:03Z")
Kibana denial of service issue (ESA-2021-10) A denial of service vulnerability was found in the Kibana webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webh… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=964) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=966)