# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=994 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 995 --- ## [Dynamic input for logstash](https://discuss.elastic.co/t/dynamic-input-for-logstash/269004)
**Author:** [@igorid70](https://discuss.elastic.co/u/igorid70)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 2:55pm UTC](https://discuss.elastic.co/t/dynamic-input-for-logstash/269004 "2021-04-01T14:55:09Z")
Hi I have a use case when my logstash pipeline generates output based on which I want to initiate another logstash pipeline with input based on that output. In more details: the current pipeline uses a command input th… --- ## [Changing logstash jdbc statement](https://discuss.elastic.co/t/changing-logstash-jdbc-statement/269037)
**Author:** [@Gregorkosmina](https://discuss.elastic.co/u/Gregorkosmina)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 2:53pm UTC](https://discuss.elastic.co/t/changing-logstash-jdbc-statement/269037 "2021-04-01T14:53:13Z")
I want to change SQL statement in my logstash, so I would fill index with newely queried data. I re-run logstash with new statement but my index still contains old data. Am I missing something? --- ## [Geoip cache\_size # relates to + flush frequency?](https://discuss.elastic.co/t/geoip-cache-size-relates-to-flush-frequency/269007)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 2:52pm UTC](https://discuss.elastic.co/t/geoip-cache-size-relates-to-flush-frequency/269007 "2021-04-01T14:52:05Z")
Hi, The default is cache\_size for geoip is documented at 1000. Is that 1000 IPs, bytes/kb? Also with pereodic\_flush:false (default), when does this flush? Tracing down a mismatch IP where going back a month up until … --- ## [Does Elasticsearch 7.11 not supported by ECK operator](https://discuss.elastic.co/t/does-elasticsearch-7-11-not-supported-by-eck-operator/268984)
**Author:** [@NK2812](https://discuss.elastic.co/u/NK2812)\ **Replies:** 3\ **Last updated:** [April 1, 2021, 2:44pm UTC](https://discuss.elastic.co/t/does-elasticsearch-7-11-not-supported-by-eck-operator/268984 "2021-04-01T14:44:07Z")
Hi, I trying to deploy the Elasticsearch 7.11.0 version cluster using eck operator 1.3 version, it fails in init container elastic-internal-init-filesystem . It says unsupported\_distribution Is 7.11 version not suppor… --- ## [Need to get the list of hosts not sending the logs to kibana](https://discuss.elastic.co/t/need-to-get-the-list-of-hosts-not-sending-the-logs-to-kibana/266922)
**Author:** [@mbm\_wfm](https://discuss.elastic.co/u/mbm_wfm)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 2:41pm UTC](https://discuss.elastic.co/t/need-to-get-the-list-of-hosts-not-sending-the-logs-to-kibana/266922 "2021-04-01T14:41:50Z")
Hi, I need to get list of hosts not sending logs over two days for example, a query with kibana would be awesome! --- ## [How to filter logs coming from filebeat and apply a filter on message](https://discuss.elastic.co/t/how-to-filter-logs-coming-from-filebeat-and-apply-a-filter-on-message/267694)
**Author:** [@muralikrishna](https://discuss.elastic.co/u/muralikrishna)\ **Replies:** 3\ **Last updated:** [April 1, 2021, 2:32pm UTC](https://discuss.elastic.co/t/how-to-filter-logs-coming-from-filebeat-and-apply-a-filter-on-message/267694 "2021-04-01T14:32:49Z")
Hi Folks, I am using Logstash 7.8 version and i will be getting logs from multiple data sources as part of my requirement. I wanted to apply a filter on my log message coming from filebeat and containing the string "pa… --- ## [Stopwords are not working in custom tokenizer](https://discuss.elastic.co/t/stopwords-are-not-working-in-custom-tokenizer/269033)
**Author:** [@tusharl](https://discuss.elastic.co/u/tusharl)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 2:23pm UTC](https://discuss.elastic.co/t/stopwords-are-not-working-in-custom-tokenizer/269033 "2021-04-01T14:23:47Z")
Consider below example GET \_analyze { "tokenizer": { "pattern" : ",", "type" : "pattern" }, "filter": \[ { "type": "edge\_ngram", "min\_gram": 2, "max\_g… --- ## [ZonedDateTime.parse function not working for custom DateTimeFormatter](https://discuss.elastic.co/t/zoneddatetime-parse-function-not-working-for-custom-datetimeformatter/268819)
**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\ **Replies:** 6\ **Last updated:** [April 1, 2021, 1:36pm UTC](https://discuss.elastic.co/t/zoneddatetime-parse-function-not-working-for-custom-datetimeformatter/268819 "2021-04-01T13:36:04Z")
Below string to date time code is not working for me and it is returning empty array. script1: String datetime = '2021-03-25 08:41:22.011'; DateTimeFormatter dtf = DateTimeFormatter.ofPattern("yyyy-MM-dd HH:mm:ss.SSS… --- ## [Logstash](https://discuss.elastic.co/t/logstash/269018)
**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\ **Replies:** 6\ **Last updated:** [April 1, 2021, 1:06pm UTC](https://discuss.elastic.co/t/logstash/269018 "2021-04-01T13:06:58Z")
Hi i hope this message find you well , how could to send filtred logs to elasticsearch and in the same time send raw logs to another server (I need this logs for investigation and forensics task) regards and thanks --- ## [Rollover is taking time](https://discuss.elastic.co/t/rollover-is-taking-time/268927)
**Author:** [@Narayan\_Banik](https://discuss.elastic.co/u/Narayan_Banik)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 10:58am UTC](https://discuss.elastic.co/t/rollover-is-taking-time/268927 "2021-04-01T10:58:23Z")
My Policy is supposed to roll over indices if size reaches to 500mb like below: GET \_ilm/policy/my-policy { "my-policy" : { "version" : 4, "modified\_date" : "2021-03-31T14:34:45.932Z", "policy" : { "… --- ## [Execute aggs query for each unqiue value?](https://discuss.elastic.co/t/execute-aggs-query-for-each-unqiue-value/268997)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 0\ **Last updated:** [April 1, 2021, 8:38am UTC](https://discuss.elastic.co/t/execute-aggs-query-for-each-unqiue-value/268997 "2021-04-01T08:38:49Z")
Hi, I have the following script which gives me the 10 most used applications. I want to expand this by getting the top 10 applications for each unique value in the customers field. Is this possible? The goal is to appl… --- ## [ElasticSearch Kibana Fields with "keyword"](https://discuss.elastic.co/t/elasticsearch-kibana-fields-with-keyword/268202)
**Author:** [@miklin](https://discuss.elastic.co/u/miklin)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 8:36am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-fields-with-keyword/268202 "2021-04-01T08:36:43Z")
Hi, I had some questions about Kibana Data Analysis training, mainly in fields with "keyword". Why the search (occupation: "Sales") got a result of "Sales Engineer"? I thought it should be exact match for this search? … --- ## [Can't index a special word in Nest!](https://discuss.elastic.co/t/cant-index-a-special-word-in-nest/266457)
**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 8:35am UTC](https://discuss.elastic.co/t/cant-index-a-special-word-in-nest/266457 "2021-04-01T08:35:20Z")
Let's look at the built in analyzer named "persian" var analyzeResponse = client.Indices.Analyze(a =\> a .Analyzer("persian") .Text("word1 words2 ManyWord3 LargeWOrds4 Sma… --- ## [Find values inside parenthesees and put it into an array](https://discuss.elastic.co/t/find-values-inside-parenthesees-and-put-it-into-an-array/268935)
**Author:** [@Roberto\_B](https://discuss.elastic.co/u/Roberto_B)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 8:26am UTC](https://discuss.elastic.co/t/find-values-inside-parenthesees-and-put-it-into-an-array/268935 "2021-04-01T08:26:06Z")
Hi all, i have this problem , i have this kind of value into a field: Update for Windows Server 2012 R2 (KB3013410)"", Update for Windows Server 2012 R2 (KB3033446), Update for Windows Server 2012 R2 (KB3024751), Updat… --- ## [Kibana - How to do customized sort to saved objects API](https://discuss.elastic.co/t/kibana-how-to-do-customized-sort-to-saved-objects-api/266681)
**Author:** [@saifabusaleh](https://discuss.elastic.co/u/saifabusaleh)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 7:27am UTC](https://discuss.elastic.co/t/kibana-how-to-do-customized-sort-to-saved-objects-api/266681 "2021-04-01T07:27:52Z")
Hi, We use: Kibana 7.10.0 Elastic 7.10.2 We use Kibana Saved Objects Find API to get all dashboards (https://www.elastic.co/guide/en/kibana/master/saved-objects-api-find.html) We want to get this dashboard data sort… --- ## [Elasticsearch load is low, batch write latency is high, how to check the problem](https://discuss.elastic.co/t/elasticsearch-load-is-low-batch-write-latency-is-high-how-to-check-the-problem/268975)
**Author:** [@bxl](https://discuss.elastic.co/u/bxl)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 7:09am UTC](https://discuss.elastic.co/t/elasticsearch-load-is-low-batch-write-latency-is-high-how-to-check-the-problem/268975 "2021-04-01T07:09:43Z")
elasticsearch load is low, batch write latency is high, how to check the problem , thanks 13:24:27 22.6s{ "completed" : false, "task" : { "node" : "6nPgzz7\_Q96pQzAompMFUQ", "id" : 470791605, "type" : "tr… --- ## [Unique count two fields combined](https://discuss.elastic.co/t/unique-count-two-fields-combined/268987)
**Author:** [@kasun](https://discuss.elastic.co/u/kasun)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 6:59am UTC](https://discuss.elastic.co/t/unique-count-two-fields-combined/268987 "2021-04-01T06:59:49Z")
Hi all, For a pie chart, I am using unique count aggregation as the metric. However, I need to get the unique count when two fields combined. Is this possible using the advanced option in kibana visualizations? As an e… --- ## [Best design for managing 'likes' on each comment?](https://discuss.elastic.co/t/best-design-for-managing-likes-on-each-comment/267607)
**Author:** [@Jenny1](https://discuss.elastic.co/u/Jenny1)\ **Replies:** 9\ **Last updated:** [April 1, 2021, 6:59am UTC](https://discuss.elastic.co/t/best-design-for-managing-likes-on-each-comment/267607 "2021-04-01T06:59:46Z")
Hi, I'm new to Elasticsearch and struggling with the design. I have 2 indices. One is 'comment' index which contains comments users wrote, the other is 'ex\_comment' which also contains comments but crawling data. What … --- ## [Kibana maximum results capped at 10000](https://discuss.elastic.co/t/kibana-maximum-results-capped-at-10000/267196)
**Author:** [@shamzeer](https://discuss.elastic.co/u/shamzeer)\ **Replies:** 6\ **Last updated:** [April 1, 2021, 6:58am UTC](https://discuss.elastic.co/t/kibana-maximum-results-capped-at-10000/267196 "2021-04-01T06:58:37Z")
We are using Elastic and Kibana version on 7.10. As per the documentations, the maximum results returned would be 10000. However this causes a real issue for us in the metric visualization where we use visualization to … --- ## [Elasticsearch failed to start on Ubuntu 18.04](https://discuss.elastic.co/t/elasticsearch-failed-to-start-on-ubuntu-18-04/268262)
**Author:** [@Sebastian\_F](https://discuss.elastic.co/u/Sebastian_F)\ **Replies:** 21\ **Last updated:** [April 1, 2021, 6:54am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-start-on-ubuntu-18-04/268262 "2021-04-01T06:54:29Z")
Hi folks, I am an elastic noob and I am stuck with running elasticsearch on an Ubuntu 18.04 V-Server with 4 Cores, 8Gb Ram and a 100GB Hard drive. I followed the instructions from this post: Installieren und Konfigurier… --- ## [Changing the index pattern that a visualisation is based on](https://discuss.elastic.co/t/changing-the-index-pattern-that-a-visualisation-is-based-on/268290)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 6\ **Last updated:** [April 1, 2021, 6:49am UTC](https://discuss.elastic.co/t/changing-the-index-pattern-that-a-visualisation-is-based-on/268290 "2021-04-01T06:49:57Z")
I have found a set of visualisation on github that I want to use. But they are build around a different pattern of index name to what I have even though the mapping are the same (or at least mostly). I have the ndjson … --- ## [Is the dependent jars can be upgraded](https://discuss.elastic.co/t/is-the-dependent-jars-can-be-upgraded/268866)
**Author:** [@mohammed\_rizwan](https://discuss.elastic.co/u/mohammed_rizwan)\ **Replies:** 3\ **Last updated:** [April 1, 2021, 6:43am UTC](https://discuss.elastic.co/t/is-the-dependent-jars-can-be-upgraded/268866 "2021-04-01T06:43:54Z")
Hi team, We are using the elastic search 7.2.0 which depends on snakeyaml version 1.17. Snakeyaml 1.17 has security vulnerabilities and we plan to upgrade it to the latest version 1.28. Is upgrading the dependant snak… --- ## [Kibana APM without installing APM agents](https://discuss.elastic.co/t/kibana-apm-without-installing-apm-agents/268791)
**Author:** [@elk\_novice](https://discuss.elastic.co/u/elk_novice)\ **Replies:** 4\ **Last updated:** [April 1, 2021, 5:53am UTC](https://discuss.elastic.co/t/kibana-apm-without-installing-apm-agents/268791 "2021-04-01T05:53:27Z")
Hi All, I am newbie. Please let me know if its possible to use KIBANA APM, without having APM server and APM agent. Can we use kibana APM just by doing ECS mapping in logstash and storing the index in elasticsearch. OR… --- ## [How to create a search saved object with kibana API](https://discuss.elastic.co/t/how-to-create-a-search-saved-object-with-kibana-api/268963)
**Author:** [@BhavyaSree](https://discuss.elastic.co/u/BhavyaSree)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 5:41am UTC](https://discuss.elastic.co/t/how-to-create-a-search-saved-object-with-kibana-api/268963 "2021-04-01T05:41:00Z")
I tried to create a search saved object with kibana API. I could able to create the object with selected columns and sort, but I am unable to add filters to the search. Below is the body of POST call I used. { "attri… --- ## [Filter Logstash based on field from Filebeat tags](https://discuss.elastic.co/t/filter-logstash-based-on-field-from-filebeat-tags/268965)
**Author:** [@Automation\_Scripts](https://discuss.elastic.co/u/Automation_Scripts)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 5:33am UTC](https://discuss.elastic.co/t/filter-logstash-based-on-field-from-filebeat-tags/268965 "2021-04-01T05:33:09Z")
Hi guys, I need some help filtering some data from Filebeat in Logstash. My original filebeat log looks liks this: \*\*\* This is the log from docker from filebeat container ssl.log "@timestamp": "2021-03-31T23:14:55.7… --- ## [Node disconnecting randomly](https://discuss.elastic.co/t/node-disconnecting-randomly/265085)
**Author:** [@DENMODSupport](https://discuss.elastic.co/u/DENMODSupport)\ **Replies:** 27\ **Last updated:** [April 1, 2021, 5:20am UTC](https://discuss.elastic.co/t/node-disconnecting-randomly/265085 "2021-04-01T05:20:07Z")
Hi, We could see that nodes are disconnecting frequently from cluster. Below are the errors from Master and data nodes. We are using ELK version 5.3.1. Could you please help us to prevent the node disconnection issue? \*… --- ## [Upload logfile in the kibana](https://discuss.elastic.co/t/upload-logfile-in-the-kibana/268972)
**Author:** [@Son\_Vu\_Bao](https://discuss.elastic.co/u/Son_Vu_Bao)\ **Replies:** 6\ **Last updated:** [April 1, 2021, 3:22am UTC](https://discuss.elastic.co/t/upload-logfile-in-the-kibana/268972 "2021-04-01T03:22:01Z")
Hi, I am new in Elasticsearch. I am trying to upload a log file into elasticsearch by using data visualizer. However, I ran to some error like below: --- ## [Kibana : Internal Server Error](https://discuss.elastic.co/t/kibana-internal-server-error/268938)
**Author:** [@sanju\_timsina](https://discuss.elastic.co/u/sanju_timsina)\ **Replies:** 5\ **Last updated:** [April 1, 2021, 2:29am UTC](https://discuss.elastic.co/t/kibana-internal-server-error/268938 "2021-04-01T02:29:29Z")
Hi, I am running Kibana 7.11 and I am getting this Internal Server Error when I try to get logs on the Kibana Portal. log \[11:09:04.725\] \[info\]\[listening\] Server running at http://0.0.0.0:5601 log \[11:09:05.303… --- ## [How to get the realtime data based on aggrgations](https://discuss.elastic.co/t/how-to-get-the-realtime-data-based-on-aggrgations/268787)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 3\ **Last updated:** [March 31, 2021, 10:08pm UTC](https://discuss.elastic.co/t/how-to-get-the-realtime-data-based-on-aggrgations/268787 "2021-03-31T22:08:53Z")
Hi, With the below data, want to measure the time series graph with 30 sec resolution, how many are logged in and how many are Ready and how many are Busy. how to group by agent and find the status and sum the agents ba… --- ## [Make a pie chart based on one field where value is x, y, and z?](https://discuss.elastic.co/t/make-a-pie-chart-based-on-one-field-where-value-is-x-y-and-z/268828)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 3\ **Last updated:** [March 31, 2021, 10:06pm UTC](https://discuss.elastic.co/t/make-a-pie-chart-based-on-one-field-where-value-is-x-y-and-z/268828 "2021-03-31T22:06:28Z")
Hello I have a index pattern called my-index-x with entries and a text field that says Results. What I want to do is in a pie chart for example, make three or more slices: One slices would represent the number that "Su… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=993) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=995)