# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=997

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 998

---

## [Want to set 'measurement.name' as a filter](https://discuss.elastic.co/t/want-to-set-measurement-name-as-a-filter/268738)

<div class="topic-metadata">

**Author:** [@Jungeun](https://discuss.elastic.co/u/Jungeun)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 12:52pm UTC](https://discuss.elastic.co/t/want-to-set-measurement-name-as-a-filter/268738 "2021-03-30T12:52:18Z")

</div>

If you look at the picture attached, I'm trying to visualize the value of "measurement.value" according to "measurement.name" with "up.version". However, I cannot get the value based on the "measurement.name’ from the Y…

---

## [Logstash unexpected message - crypto/rsa verification error](https://discuss.elastic.co/t/logstash-unexpected-message-crypto-rsa-verification-error/267484)

<div class="topic-metadata">

**Author:** [@dkdlv38](https://discuss.elastic.co/u/dkdlv38)\
**Replies:** 3\
**Last updated:** [March 30, 2021, 12:29pm UTC](https://discuss.elastic.co/t/logstash-unexpected-message-crypto-rsa-verification-error/267484 "2021-03-30T12:29:49Z")

</div>

Hi all, I'm new here and I have an issue with the configuration of my Windows machines sending logs to a Logstash server through Winlogbeat (for what I understand as I recovered this installation undocumented from a col…

---

## [Can we display TSVB Gauge in default color without any documents/value being populated](https://discuss.elastic.co/t/can-we-display-tsvb-gauge-in-default-color-without-any-documents-value-being-populated/268731)

<div class="topic-metadata">

**Author:** [@Shaiju\_Sam](https://discuss.elastic.co/u/Shaiju_Sam)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 11:19am UTC](https://discuss.elastic.co/t/can-we-display-tsvb-gauge-in-default-color-without-any-documents-value-being-populated/268731 "2021-03-30T11:19:01Z")

</div>

Hi, We have created multiple TSVB gauge graph to show the health of the infrastructure using the filter ratio aggregation however few gauges are displaying in green with 0%(document being generated in ES) and few gauges…

---

## [Running Elasticsearch](https://discuss.elastic.co/t/running-elasticsearch/268768)

<div class="topic-metadata">

**Author:** [@Ullubiy\_Abdurakhmano](https://discuss.elastic.co/u/Ullubiy_Abdurakhmano)\
**Replies:** 1\
**Last updated:** [March 30, 2021, 10:30am UTC](https://discuss.elastic.co/t/running-elasticsearch/268768 "2021-03-30T10:30:38Z")

</div>

Hi. Can anyone help me? I try to run elastic from the command promt, but wright that elasticsearch is running already and I get error like this: \[2021-03-29T07:57:23,485\]\[ERROR\]\[o.e.b.Bootstrap \] \[User\] Exception java…

---

## [How to add count value to each csv value in logstash](https://discuss.elastic.co/t/how-to-add-count-value-to-each-csv-value-in-logstash/268770)

<div class="topic-metadata">

**Author:** [@ofitz](https://discuss.elastic.co/u/ofitz)\
**Replies:** 0\
**Last updated:** [March 30, 2021, 10:22am UTC](https://discuss.elastic.co/t/how-to-add-count-value-to-each-csv-value-in-logstash/268770 "2021-03-30T10:22:50Z")

</div>

I have some csv, and with ruby i convert it to array , like this: 11;22;33;44;55 66;77;88;99;100 ruby { code =\> ' m = event.get("message").split(";") m.each\_index { |x| m\[x\] = m\[x\].to\_f } …

---

## [Logstash - output csv plugin - all fields are strings](https://discuss.elastic.co/t/logstash-output-csv-plugin-all-fields-are-strings/268513)

<div class="topic-metadata">

**Author:** [@YaronB](https://discuss.elastic.co/u/YaronB)\
**Replies:** 6\
**Last updated:** [March 30, 2021, 10:11am UTC](https://discuss.elastic.co/t/logstash-output-csv-plugin-all-fields-are-strings/268513 "2021-03-30T10:11:55Z")

</div>

i'm trying to move some data to mongodb from elastic using elastic input plugin and csv ouput plugin and then mongoimport. how can i define the fields types , including nested fields? everything is showing up as string…

---

## [The \[0.0.0\] version of the \[jdbc\] client is not compatible with Elasticsearch version \[7.10.0\];\]](https://discuss.elastic.co/t/the-0-0-0-version-of-the-jdbc-client-is-not-compatible-with-elasticsearch-version-7-10-0/267462)

<div class="topic-metadata">

**Author:** [@yxmm-wxe](https://discuss.elastic.co/u/yxmm-wxe)\
**Replies:** 3\
**Last updated:** [March 30, 2021, 9:52am UTC](https://discuss.elastic.co/t/the-0-0-0-version-of-the-jdbc-client-is-not-compatible-with-elasticsearch-version-7-10-0/267462 "2021-03-30T09:52:28Z")

</div>

Hello, everyone, I have a strange problem with the JDBC driver version after packaging. \<dependency\> \<groupId\>org.elasticsearch.plugin\</groupId\> \<artifactId\>x-pack-sql-jdbc\</artifactId\> \<version\>7.10.0\</vers…

---

## [During maintenance all writes on new shards targeted one node leading to document rejections](https://discuss.elastic.co/t/during-maintenance-all-writes-on-new-shards-targeted-one-node-leading-to-document-rejections/268681)

<div class="topic-metadata">

**Author:** [@ssouris](https://discuss.elastic.co/u/ssouris)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 9:31am UTC](https://discuss.elastic.co/t/during-maintenance-all-writes-on-new-shards-targeted-one-node-leading-to-document-rejections/268681 "2021-03-30T09:31:43Z")

</div>

Hi Elasticsearch experts :slight\_smile: During one of our maintenances of the cluster, we needed to restart a node to add more disk space to it. So we made sure no shards were located on that node, and we performed th…

---

## [MSSQL log](https://discuss.elastic.co/t/mssql-log/268677)

<div class="topic-metadata">

**Author:** [@jonsacri](https://discuss.elastic.co/u/jonsacri)\
**Replies:** 1\
**Last updated:** [March 30, 2021, 9:22am UTC](https://discuss.elastic.co/t/mssql-log/268677 "2021-03-30T09:22:44Z")

</div>

Best regards to all I wanted to ask you about the size of the logs. The path is different from the normal one. It is in another partition in the mssql module. You could define the path where the logs are. Metricbeat 7.1…

---

## [Error when querying on search\_as\_you\_type subfields (.\_2gram, .\_3gram)](https://discuss.elastic.co/t/error-when-querying-on-search-as-you-type-subfields-2gram-3gram/268751)

<div class="topic-metadata">

**Author:** [@mariskaas](https://discuss.elastic.co/u/mariskaas)\
**Replies:** 0\
**Last updated:** [March 30, 2021, 8:56am UTC](https://discuss.elastic.co/t/error-when-querying-on-search-as-you-type-subfields-2gram-3gram/268751 "2021-03-30T08:56:42Z")

</div>

Hi there. I've been trying to use search\_as\_you\_type for an autocomplete solution. I've mapped a field as the "search\_as\_you\_type" type, however when trying to query on the field, the .\_2gram and .\_3gram field, as descri…

---

## [Generating a CSV file from curl with Kibana, results in just 'Processing' in the output csv file](https://discuss.elastic.co/t/generating-a-csv-file-from-curl-with-kibana-results-in-just-processing-in-the-output-csv-file/268374)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 3\
**Last updated:** [March 30, 2021, 8:02am UTC](https://discuss.elastic.co/t/generating-a-csv-file-from-curl-with-kibana-results-in-just-processing-in-the-output-csv-file/268374 "2021-03-30T08:02:00Z")

</div>

I am using the following shell snipped to download csvs for a a series of queries that I have collected up in Kibana: for filename in ${KIBANA\_QUERIES}/\*.rison; do echo "Processing que…

---

## [Logstash failed to start after plugin update](https://discuss.elastic.co/t/logstash-failed-to-start-after-plugin-update/268472)

<div class="topic-metadata">

**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 8:00am UTC](https://discuss.elastic.co/t/logstash-failed-to-start-after-plugin-update/268472 "2021-03-30T08:00:42Z")

</div>

After updating beats input plugin from 6.0.5 to 6.1.0 on logstash(7.5.2), the service stopped to work & keeps on throwing the following error - \`logstash\[22854\]: \[ERROR\] 2021-03-26 10:35:57.423 \[main\] Logstash - java.la…

---

## ["Content-Type header \[text/plain; charset=ISO-8859-1\] is not supported","status":406](https://discuss.elastic.co/t/content-type-header-text-plain-charset-iso-8859-1-is-not-supported-status-406/268309)

<div class="topic-metadata">

**Author:** [@Dan4](https://discuss.elastic.co/u/Dan4)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 7:47am UTC](https://discuss.elastic.co/t/content-type-header-text-plain-charset-iso-8859-1-is-not-supported-status-406/268309 "2021-03-30T07:47:33Z")

</div>

Hello together, I am new to the elastic stack and have no further experience than just google a solution. In my environment I have to use Logstash on a remote server. I have no control and influence over the version whi…

---

## [Scripted field to calculate a machine score](https://discuss.elastic.co/t/scripted-field-to-calculate-a-machine-score/268657)

<div class="topic-metadata">

**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\
**Replies:** 5\
**Last updated:** [March 30, 2021, 7:37am UTC](https://discuss.elastic.co/t/scripted-field-to-calculate-a-machine-score/268657 "2021-03-30T07:37:18Z")

</div>

Hallo !!! i want to write a scripted field that can calculate a machine score in kibana.. Please any idea how i can resolve it. Thank you in advance.

---

## [Elasticsearch directory permission](https://discuss.elastic.co/t/elasticsearch-directory-permission/268611)

<div class="topic-metadata">

**Author:** [@twilight](https://discuss.elastic.co/u/twilight)\
**Replies:** 8\
**Last updated:** [March 30, 2021, 5:48am UTC](https://discuss.elastic.co/t/elasticsearch-directory-permission/268611 "2021-03-30T05:48:10Z")

</div>

Hello, I just installed elasticsearch 7.12.0 rpm package on AWS Linux AMI, when I try to access the config directory, it says "permission denied". this is the directory detail. $ ls -l drwxr-s--- 3 root elasticsearc…

---

## [Logstash persistent queue empty but all events coming in fine](https://discuss.elastic.co/t/logstash-persistent-queue-empty-but-all-events-coming-in-fine/268619)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 5\
**Last updated:** [March 30, 2021, 4:11am UTC](https://discuss.elastic.co/t/logstash-persistent-queue-empty-but-all-events-coming-in-fine/268619 "2021-03-30T04:11:49Z")

</div>

I have configured logstash to use persistent queue. As per documentation, "When an input has events ready to process, it writes them to the queue." I was expecting to see some files in the folder '/Data/logstash/data/…

---

## [Error in Logstash Pipeline](https://discuss.elastic.co/t/error-in-logstash-pipeline/267930)

<div class="topic-metadata">

**Author:** [@caitlyn.carlisle](https://discuss.elastic.co/u/caitlyn.carlisle)\
**Replies:** 4\
**Last updated:** [March 30, 2021, 3:32am UTC](https://discuss.elastic.co/t/error-in-logstash-pipeline/267930 "2021-03-30T03:32:55Z")

</div>

I am getting this error when trying to run my Logstash pipeline. I would appreciate any help!! Thanks so much! \[2021-03-21T22:02:58,827\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file becaus…

---

## [SSL error from Elastic webhook. What does it mean?](https://discuss.elastic.co/t/ssl-error-from-elastic-webhook-what-does-it-mean/268471)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 3:01am UTC](https://discuss.elastic.co/t/ssl-error-from-elastic-webhook-what-does-it-mean/268471 "2021-03-30T03:01:22Z")

</div>

Dear all =) I have created a webhook in Elastic, but when Elastic connects to the client it logs SSL\_accept: ssl/record/ssl3\_record.c:322: error:1408F09C:SSL routines:ssl3\_get\_record:http request Can anyone explain wh…

---

## [Vega Kibana Maps Offline Implementation](https://discuss.elastic.co/t/vega-kibana-maps-offline-implementation/268680)

<div class="topic-metadata">

**Author:** [@gerardo\_dutan](https://discuss.elastic.co/u/gerardo_dutan)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 2:45am UTC](https://discuss.elastic.co/t/vega-kibana-maps-offline-implementation/268680 "2021-03-30T02:45:28Z")

</div>

I've noticed that the implementation of Vega maps have changed in the latest version of kibana, 12.0. I submitted an issue on Github, elastic/kibana/issues/87853, a while ago to fix a bug in the previous implementation …

---

## [Easy way to transfer data from one node to another?](https://discuss.elastic.co/t/easy-way-to-transfer-data-from-one-node-to-another/268711)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 2:34am UTC](https://discuss.elastic.co/t/easy-way-to-transfer-data-from-one-node-to-another/268711 "2021-03-30T02:34:44Z")

</div>

From time to time, we know that we have to shutdown nodes (remove a node from a cluster) and add a new one. Normally, we shutdown the node, add a new one, and just let the cluster determine the best way to re-allocate ev…

---

## [Kibana Dashboard Two Charts Within a Single Panel](https://discuss.elastic.co/t/kibana-dashboard-two-charts-within-a-single-panel/268708)

<div class="topic-metadata">

**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Replies:** 4\
**Last updated:** [March 29, 2021, 10:42pm UTC](https://discuss.elastic.co/t/kibana-dashboard-two-charts-within-a-single-panel/268708 "2021-03-29T22:42:33Z")

</div>

Hi there, I came across the below image while I was browsing the forum and I wonder if you can give some info on the following 2 things... 1 - What are the steps for placing two charts, see User Authentications, within…

---

## [Field\_masking\_span - Not working as expected with span queries](https://discuss.elastic.co/t/field-masking-span-not-working-as-expected-with-span-queries/268704)

<div class="topic-metadata">

**Author:** [@Michael\_Sander](https://discuss.elastic.co/u/Michael_Sander)\
**Replies:** 1\
**Last updated:** [March 29, 2021, 10:30pm UTC](https://discuss.elastic.co/t/field-masking-span-not-working-as-expected-with-span-queries/268704 "2021-03-29T22:30:53Z")

</div>

Hi, I am using field\_masking\_span to find spans across two different fields, a stemmed field (text) and an unstemmed field (text.unstemed). In particular, I am trying to search for the word loss in the text field, and …

---

## [Doubts about the use of StopWords](https://discuss.elastic.co/t/doubts-about-the-use-of-stopwords/268707)

<div class="topic-metadata">

**Author:** [@RabBit\_BR](https://discuss.elastic.co/u/RabBit_BR)\
**Replies:** 0\
**Last updated:** [March 29, 2021, 9:36pm UTC](https://discuss.elastic.co/t/doubts-about-the-use-of-stopwords/268707 "2021-03-29T21:36:25Z")

</div>

Hi. I would like to ask a question about what is the best use of stop words. I have a filter (option A) with passing all stopwords and the other option is to create a filter for each language (option B). In any case wou…

---

## [Specific steps to build monitoring and siem with elk](https://discuss.elastic.co/t/specific-steps-to-build-monitoring-and-siem-with-elk/268605)

<div class="topic-metadata">

**Author:** [@Depressed](https://discuss.elastic.co/u/Depressed)\
**Replies:** 3\
**Last updated:** [March 29, 2021, 9:09pm UTC](https://discuss.elastic.co/t/specific-steps-to-build-monitoring-and-siem-with-elk/268605 "2021-03-29T21:09:09Z")

</div>

Hi I'm kinda new to whole siem and elk things and before i managed to setup monitoring with splunk cracked enterprise edition and there all was simple as forwarding data from netflow ,syslog ,snmp and defining new fi…

---

## [Easily deploy the Elastic Stack on Azure](https://discuss.elastic.co/t/easily-deploy-the-elastic-stack-on-azure/268701)

<div class="topic-metadata">

**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\
**Replies:** 0\
**Last updated:** [March 29, 2021, 8:39pm UTC](https://discuss.elastic.co/t/easily-deploy-the-elastic-stack-on-azure/268701 "2021-03-29T20:39:47Z")

</div>

Hello! The Elastic team is currently working on a deep integration on the Azure platform that will drastically simplify deploying and managing the Elastic Stack on Azure. We would love to get some feedback on this exciti…

---

## [Parsing Logstash Message Fields](https://discuss.elastic.co/t/parsing-logstash-message-fields/268509)

<div class="topic-metadata">

**Author:** [@Micah\_Barsness](https://discuss.elastic.co/u/Micah_Barsness)\
**Replies:** 5\
**Last updated:** [March 29, 2021, 7:26pm UTC](https://discuss.elastic.co/t/parsing-logstash-message-fields/268509 "2021-03-29T19:26:13Z")

</div>

I currently have logstash sending to Elastic cloud - I'd like to get that message section parsed out a bit so that its not one giant section. Could someone help me with that? Here's my filter section - it is just the "o…

---

## [What exactly steps should take to import custom syslog to elk](https://discuss.elastic.co/t/what-exactly-steps-should-take-to-import-custom-syslog-to-elk/268673)

<div class="topic-metadata">

**Author:** [@Depressed](https://discuss.elastic.co/u/Depressed)\
**Replies:** 4\
**Last updated:** [March 29, 2021, 6:37pm UTC](https://discuss.elastic.co/t/what-exactly-steps-should-take-to-import-custom-syslog-to-elk/268673 "2021-03-29T18:37:41Z")

</div>

hi i'm new to elk and i wanted to know what exactly should i do to receive various syslog and proccess and define filed and make dashbord? i've read some articles that points to some filter ,rule and grok stuff that i d…

---

## [Convert parent doc to child doc in 6.6](https://discuss.elastic.co/t/convert-parent-doc-to-child-doc-in-6-6/268683)

<div class="topic-metadata">

**Author:** [@kgeographer](https://discuss.elastic.co/u/kgeographer)\
**Replies:** 0\
**Last updated:** [March 29, 2021, 5:54pm UTC](https://discuss.elastic.co/t/convert-parent-doc-to-child-doc-in-6-6/268683 "2021-03-29T17:54:03Z")

</div>

In a 6.6 index, I have a join field 'relation' like so: "relation": { "type": "join", "relations": { "parent": "child" } Several hundred parent docs need to become children to another existing parent doc. I h…

---

## [Visualize 2 values evolution (sum) with a Pie chart](https://discuss.elastic.co/t/visualize-2-values-evolution-sum-with-a-pie-chart/268669)

<div class="topic-metadata">

**Author:** [@Anto1](https://discuss.elastic.co/u/Anto1)\
**Replies:** 1\
**Last updated:** [March 29, 2021, 5:08pm UTC](https://discuss.elastic.co/t/visualize-2-values-evolution-sum-with-a-pie-chart/268669 "2021-03-29T17:08:30Z")

</div>

Hello ! I'm kind of a beginner in creating Kibana visualizations, and I'm actually facing this issue : I have a lot of logs, and some are containing the following fields "inSuccess" (eg. 2), "inError" (eg. 1), which …

---

## [Logstash on linux machine to read files from remote Windows folder](https://discuss.elastic.co/t/logstash-on-linux-machine-to-read-files-from-remote-windows-folder/268458)

<div class="topic-metadata">

**Author:** [@gukutini](https://discuss.elastic.co/u/gukutini)\
**Replies:** 3\
**Last updated:** [March 29, 2021, 4:48pm UTC](https://discuss.elastic.co/t/logstash-on-linux-machine-to-read-files-from-remote-windows-folder/268458 "2021-03-29T16:48:31Z")

</div>

I have logstash installed on ubuntu machine and use file input to read log files. I need read files from remote folder of Windows machine. For more convenience I mounted remote folder of Windows machine to my Ubuntu f…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=996)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=998)
