# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=993 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 994 --- ## [Unable to start Kibana](https://discuss.elastic.co/t/unable-to-start-kibana/268950)
**Author:** [@maruthi\_Donthi](https://discuss.elastic.co/u/maruthi_Donthi)\ **Replies:** 5\ **Last updated:** [April 2, 2021, 11:33am UTC](https://discuss.elastic.co/t/unable-to-start-kibana/268950 "2021-04-02T11:33:52Z")
I am trying to start Kibana using a docker. I have already installed elastic search and it is working fine: I can see the elastic search status here: http://localhost:9200/\_cluster/health?pretty But when I run kibana do… --- ## [Set timestamp from message](https://discuss.elastic.co/t/set-timestamp-from-message/269073)
**Author:** [@Andrey\_RF](https://discuss.elastic.co/u/Andrey_RF)\ **Replies:** 4\ **Last updated:** [April 2, 2021, 11:12am UTC](https://discuss.elastic.co/t/set-timestamp-from-message/269073 "2021-04-02T11:12:38Z")
I have a pipeline to receive logs from different programs with different timestamp formats. input { beats { port =\> 5000 } } filter { date { match =\> \["message", "yyyy-MM-d… --- ## [Elasticsearch crashing with 'no space available', while disk still has 75% free storage](https://discuss.elastic.co/t/elasticsearch-crashing-with-no-space-available-while-disk-still-has-75-free-storage/269094)
**Author:** [@Kristijan](https://discuss.elastic.co/u/Kristijan)\ **Replies:** 1\ **Last updated:** [April 2, 2021, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-crashing-with-no-space-available-while-disk-still-has-75-free-storage/269094 "2021-04-02T11:10:08Z")
The elasticsearch(v5.6.12) is deployed as a single pod in a Kubernetes cluster with attached storage through a PVC. Once every couple of months it will go into a crash loop state and complain that there is no storage le… --- ## [How to create mulitple indices](https://discuss.elastic.co/t/how-to-create-mulitple-indices/268920)
**Author:** [@Shushil\_Shankar](https://discuss.elastic.co/u/Shushil_Shankar)\ **Replies:** 5\ **Last updated:** [April 2, 2021, 10:40am UTC](https://discuss.elastic.co/t/how-to-create-mulitple-indices/268920 "2021-04-02T10:40:48Z")
Good morning eveyyone! I have a question about the creation of a multiple indices. Currenlty in my project i have one index mutileple types. Now i need to migrate new version 7.12. How to do i create multiple indicies … --- ## [Where condition](https://discuss.elastic.co/t/where-condition/269072)
**Author:** [@Wolfram\_P](https://discuss.elastic.co/u/Wolfram_P)\ **Replies:** 13\ **Last updated:** [April 2, 2021, 10:22am UTC](https://discuss.elastic.co/t/where-condition/269072 "2021-04-02T10:22:59Z")
Hi, as a beginner on Kibana this question might be silly, but I cannot get across it: I would like to add a stacked bar graph to my dashboard. Two Y-axis: sum of index abc field1, where field2="1" sum of index abc f… --- ## [Failed to get report](https://discuss.elastic.co/t/failed-to-get-report/269040)
**Author:** [@111456](https://discuss.elastic.co/u/111456)\ **Replies:** 1\ **Last updated:** [April 2, 2021, 9:52am UTC](https://discuss.elastic.co/t/failed-to-get-report/269040 "2021-04-02T09:52:08Z")
my problem： my yml: server.port: 5601 server.name: "kibana" server.host: "0.0.0.0" elasticsearch.hosts: \["http://192.168.8.142:9200", "http://192.168.8.143:9200", "http://192.168.8.144:9200"\] k… --- ## [Slower Query Response Times - Intermittent](https://discuss.elastic.co/t/slower-query-response-times-intermittent/266634)
**Author:** [@israni.amit](https://discuss.elastic.co/u/israni.amit)\ **Replies:** 6\ **Last updated:** [April 2, 2021, 9:41am UTC](https://discuss.elastic.co/t/slower-query-response-times-intermittent/266634 "2021-04-02T09:41:46Z")
Hi there, We recently noticed that some of the queries were having high response times like 12-15 seconds compared to others which were in miliseconds. We have a query layer (Spring Boot App) which uses RestHighLevelCl… --- ## [Recherche et auto-complete](https://discuss.elastic.co/t/recherche-et-auto-complete/267093)
**Author:** [@jfchaput](https://discuss.elastic.co/u/jfchaput)\ **Replies:** 1\ **Last updated:** [April 2, 2021, 9:22am UTC](https://discuss.elastic.co/t/recherche-et-auto-complete/267093 "2021-04-02T09:22:13Z")
Bonjour, Je vous fait pars d'un enjeu qui me préoccupe, afin de vous donner plus de détails je vous explique le contexte afin de comprendre les défis auquels je fait face. Je suis dévelopeur d'une application web qui e… --- ## [Logstash pipeline order](https://discuss.elastic.co/t/logstash-pipeline-order/269057)
**Author:** [@Narayan\_Banik](https://discuss.elastic.co/u/Narayan_Banik)\ **Replies:** 3\ **Last updated:** [April 2, 2021, 8:34am UTC](https://discuss.elastic.co/t/logstash-pipeline-order/269057 "2021-04-02T08:34:54Z")
Hello All, Is there any order of logstash pipelines config: I've below pipelines: \[root@gzp-p-qv-logst-3 pipeline\]# ls -larth total 60K drwxr-xr-x. 3 logstash logstash 42 Oct 11 2019 .. -rw-r--r--. 1 root root … --- ## [Ingest-attachment sometimes recognizes files as empty](https://discuss.elastic.co/t/ingest-attachment-sometimes-recognizes-files-as-empty/268238)
**Author:** [@dimaPust](https://discuss.elastic.co/u/dimaPust)\ **Replies:** 1\ **Last updated:** [April 2, 2021, 8:32am UTC](https://discuss.elastic.co/t/ingest-attachment-sometimes-recognizes-files-as-empty/268238 "2021-04-02T08:32:10Z")
Hello, I am using elasticsearch:7.9.0 with the ingest-attachment plugin for indexing docx files, created in an external editor. However, sometimes files are indexed as 'empty', for example next file: { \_index: 'loc… --- ## [Question about threadpools](https://discuss.elastic.co/t/question-about-threadpools/268888)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 13\ **Last updated:** [April 2, 2021, 8:08am UTC](https://discuss.elastic.co/t/question-about-threadpools/268888 "2021-04-02T08:08:31Z")
Hi, It's a simple question but I couldn't be sure and couldn't find anything that specifies this. When using Kibana on discover page what operation is used on elasticsearch to show logs? Is it Get or Search? --- ## [I want to insert elasticsearch with multi time with range](https://discuss.elastic.co/t/i-want-to-insert-elasticsearch-with-multi-time-with-range/269088)
**Author:** [@gmcom2011](https://discuss.elastic.co/u/gmcom2011)\ **Replies:** 0\ **Last updated:** [April 2, 2021, 7:05am UTC](https://discuss.elastic.co/t/i-want-to-insert-elasticsearch-with-multi-time-with-range/269088 "2021-04-02T07:05:52Z")
If I have database table 100,000++ record and I want to insert to elasticsearch multi time. How to use logstash insert to elasticserch 1,000 records per request? example round 1 input record 1 - 1000 round 2 input … --- ## [Aggregation size](https://discuss.elastic.co/t/aggregation-size/269067)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 3\ **Last updated:** [April 2, 2021, 7:01am UTC](https://discuss.elastic.co/t/aggregation-size/269067 "2021-04-02T07:01:11Z")
Hi all and sorry for my poor english I have tons of data with different field value 'fastCategory', but whe i do an aggragation on fastCategory, I found just 10 aggregation? Why that? POST statistic/\_search { "aggs"… --- ## [How to get a specific cluster setting?](https://discuss.elastic.co/t/how-to-get-a-specific-cluster-setting/269081)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 2\ **Last updated:** [April 2, 2021, 6:40am UTC](https://discuss.elastic.co/t/how-to-get-a-specific-cluster-setting/269081 "2021-04-02T06:40:27Z")
I know that I can get the cluster settings with this: GET \_cluster/settings What I don’t know is how I can get a specific setting, especially when it‘s at the default and so it doesn’t show up on the GET. For example,… --- ## [Can’t filter Rollup index results](https://discuss.elastic.co/t/can-t-filter-rollup-index-results/268775)
**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\ **Replies:** 8\ **Last updated:** [April 2, 2021, 5:41am UTC](https://discuss.elastic.co/t/can-t-filter-rollup-index-results/268775 "2021-04-02T05:41:57Z")
I have a rollup index with some values, e.g. customer. I've created a Kibana dashboard from it. When I try to filter the dashboard with customer : some-customer, I get an error. When I do a custom query, I can filter by … --- ## [Is the multiline codec supposed to work with the JDBC input plugin?](https://discuss.elastic.co/t/is-the-multiline-codec-supposed-to-work-with-the-jdbc-input-plugin/268852)
**Author:** [@ehanft](https://discuss.elastic.co/u/ehanft)\ **Replies:** 5\ **Last updated:** [April 1, 2021, 10:06pm UTC](https://discuss.elastic.co/t/is-the-multiline-codec-supposed-to-work-with-the-jdbc-input-plugin/268852 "2021-04-01T22:06:08Z")
I been having a hard time processing log files stored in an Oracle database table. The logs are stored as CLOB, but converted to VARCHAR2 using a pipelined table function. This works great with the JDBC input plugin in L… --- ## [Kibana Dashboard - Did this ever get fixed?](https://discuss.elastic.co/t/kibana-dashboard-did-this-ever-get-fixed/268282)
**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\ **Replies:** 4\ **Last updated:** [April 1, 2021, 9:47pm UTC](https://discuss.elastic.co/t/kibana-dashboard-did-this-ever-get-fixed/268282 "2021-04-01T21:47:39Z")
Hi - I am trying to find out if this ever got fixed. I just tried under 7.12 and I get the same result but perhaps there is a switch or option I need to add? Thanks John --- ## [Elasticsearch & elasticflow](https://discuss.elastic.co/t/elasticsearch-elasticflow/269062)
**Author:** [@atamc3rb3r](https://discuss.elastic.co/u/atamc3rb3r)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 9:12pm UTC](https://discuss.elastic.co/t/elasticsearch-elasticflow/269062 "2021-04-01T21:12:41Z")
Dear community, I have decided to install the Elasticflow version 5.0.1 on my ubuntu server 20.04 LTS and integrate it with the current installed Elasticsearch 7.10. I did it step by step based on below documentation. … --- ## [Filter elements based on array constant or array environment variable](https://discuss.elastic.co/t/filter-elements-based-on-array-constant-or-array-environment-variable/269074)
**Author:** [@Automation\_Scripts](https://discuss.elastic.co/u/Automation_Scripts)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 7:41pm UTC](https://discuss.elastic.co/t/filter-elements-based-on-array-constant-or-array-environment-variable/269074 "2021-04-01T19:41:53Z")
Hi guys, How can I use an array constant in Logstash's filter? In my .env file I have a constant BLACKLIST=192.168.3.131, 10.0.0.1 if \[id.orig\_h\] in \[${BLACKLIST}\] { drop {} } How can we declare… --- ## [Kibana query filter by result of another saved search object field data](https://discuss.elastic.co/t/kibana-query-filter-by-result-of-another-saved-search-object-field-data/266656)
**Author:** [@singyim817](https://discuss.elastic.co/u/singyim817)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 6:27pm UTC](https://discuss.elastic.co/t/kibana-query-filter-by-result-of-another-saved-search-object-field-data/266656 "2021-04-01T18:27:20Z")
Hi, I am migrating the log reports from direct search with oracle SQL to Kibana, and I am creating the dashboard to show the existing log reports. May I know is it possible to get the result like the following query a… --- ## [Watcher, hits array empty](https://discuss.elastic.co/t/watcher-hits-array-empty/268909)
**Author:** [@dvyu](https://discuss.elastic.co/u/dvyu)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 5:31pm UTC](https://discuss.elastic.co/t/watcher-hits-array-empty/268909 "2021-04-01T17:31:28Z")
Hello, I am trying to use ctx fields in watcher action but some of them is empty My watcher is: { "trigger": { "schedule": { "interval": "1m" } }, "input": { "search": { "request": { … --- ## [S3 input getting stuck and not deleting SQS messages](https://discuss.elastic.co/t/s3-input-getting-stuck-and-not-deleting-sqs-messages/267090)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 5\ **Last updated:** [April 1, 2021, 5:28pm UTC](https://discuss.elastic.co/t/s3-input-getting-stuck-and-not-deleting-sqs-messages/267090 "2021-04-01T17:28:50Z")
Hi, I'm with filebeat 7.10.0 on Ubuntu. I've configured filebeat to retrieve files from S3 bucket alike: filebeat.inputs: - type: s3 enabled: true queue\_url: "https://sqs.us-west-2.amazonaws.com/… --- ## [Logstash listening](https://discuss.elastic.co/t/logstash-listening/269063)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 3\ **Last updated:** [April 1, 2021, 5:28pm UTC](https://discuss.elastic.co/t/logstash-listening/269063 "2021-04-01T17:28:06Z")
Hi! Assuming filebeat -\> ELK are on different machines. On the filebeat output i have to specify the IP address of the Logstash host. However I can´t see any option to bind my server IP address to Logstash. All the tut… --- ## [Watcher add field to payload](https://discuss.elastic.co/t/watcher-add-field-to-payload/269008)
**Author:** [@tomaszgorka](https://discuss.elastic.co/u/tomaszgorka)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 5:16pm UTC](https://discuss.elastic.co/t/watcher-add-field-to-payload/269008 "2021-04-01T17:16:20Z")
Hi, I have a watcher that takes people's data as input. If someone is below 21 yo it triggers the watcher and fires an index action. However I now need to add an additional field to the payload, which is "watchername" an… --- ## [Detection rules CLI](https://discuss.elastic.co/t/detection-rules-cli/268867)
**Author:** [@aditi\_salunke](https://discuss.elastic.co/u/aditi_salunke)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 5:05pm UTC](https://discuss.elastic.co/t/detection-rules-cli/268867 "2021-04-01T17:05:20Z")
Traceback (most recent call last): File "/usr/lib64/python3.8/runpy.py", line 194, in \_run\_module\_as\_main return \_run\_code(code, main\_globals, None, File "/usr/lib64/python3.8/runpy.py", line 87, in \_run\_code … --- ## [Jira Action sending broken links on detection jobs](https://discuss.elastic.co/t/jira-action-sending-broken-links-on-detection-jobs/268809)
**Author:** [@Balor](https://discuss.elastic.co/u/Balor)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 5:01pm UTC](https://discuss.elastic.co/t/jira-action-sending-broken-links-on-detection-jobs/268809 "2021-04-01T17:01:21Z")
Hello Elastic discuss, Am on: ECE 2.9.0 Elastic 7.12. I have been using the Detection API to add actions to certain Detection jobs. I am using a Jira connector. Am seeing this sort of behaviour in the action messag… --- ## [Post URL does not appear to be portable across environments](https://discuss.elastic.co/t/post-url-does-not-appear-to-be-portable-across-environments/269052)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 4:52pm UTC](https://discuss.elastic.co/t/post-url-does-not-appear-to-be-portable-across-environments/269052 "2021-04-01T16:52:13Z")
I am using the following snippet to download CSV reports in Kibana: for filename in ${KIBANA\_QUERIES}/\*.rison; do echo "Processing query file: $filename" … --- ## [Logstash SQS input to accept sqs url](https://discuss.elastic.co/t/logstash-sqs-input-to-accept-sqs-url/269059)
**Author:** [@rachel.takeuchi](https://discuss.elastic.co/u/rachel.takeuchi)\ **Replies:** 0\ **Last updated:** [April 1, 2021, 4:45pm UTC](https://discuss.elastic.co/t/logstash-sqs-input-to-accept-sqs-url/269059 "2021-04-01T16:45:51Z")
I'm using a third party that generates AWS credentials, a bucket and a queue for me to read logs from. I don't have the ability to change the permissions they've supplied to these credentials and unfortunately these cred… --- ## [How to create time series bar with site names in y-axis](https://discuss.elastic.co/t/how-to-create-time-series-bar-with-site-names-in-y-axis/267700)
**Author:** [@Dvir\_Alony](https://discuss.elastic.co/u/Dvir_Alony)\ **Replies:** 12\ **Last updated:** [April 1, 2021, 4:24pm UTC](https://discuss.elastic.co/t/how-to-create-time-series-bar-with-site-names-in-y-axis/267700 "2021-04-01T16:24:41Z")
Hi, I would like to create time series bar with site names in y-axis. For each site there will be a horizontal line representing the validity of the site with colors (green, yellow, red) according to the relevant time. … --- ## [Pipeline stopped due to database recovery](https://discuss.elastic.co/t/pipeline-stopped-due-to-database-recovery/268983)
**Author:** [@Dhruv\_Rank](https://discuss.elastic.co/u/Dhruv_Rank)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 3:05pm UTC](https://discuss.elastic.co/t/pipeline-stopped-due-to-database-recovery/268983 "2021-04-01T15:05:52Z")
Hello,I am new to this and everyday I got same issue \[2021-03-31T19:28:00,364\]\[ERROR\]\[logstash.inputs.jdbc \]\[add-jobs\] Unable to connect to database. Tried 1 times {:error\_message=\>"Java::OrgPostgresqlUtil::PSQLExcepti… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=992) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=994)