# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1025 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1026 --- ## [Index all data from treshold watcher](https://discuss.elastic.co/t/index-all-data-from-treshold-watcher/266222)
**Author:** [@tomaszgorka](https://discuss.elastic.co/u/tomaszgorka)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 11:20am UTC](https://discuss.elastic.co/t/index-all-data-from-treshold-watcher/266222 "2021-03-04T11:20:41Z")
Hi, I have a treshold alert on my data. The data is simply an integer "age" and "phone", and varchars of name and surname, and a date "time". I made a condition that checks if the age is below 18 in the data from last w… --- ## [Annotations and notification](https://discuss.elastic.co/t/annotations-and-notification/266283)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 9:09pm UTC](https://discuss.elastic.co/t/annotations-and-notification/266283 "2021-03-04T21:09:06Z")
Annotation due having opened dashboard can somehow make notification, like sound or something? --- ## [Drilldowns on TSVB](https://discuss.elastic.co/t/drilldowns-on-tsvb/266259)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 8:57pm UTC](https://discuss.elastic.co/t/drilldowns-on-tsvb/266259 "2021-03-04T20:57:38Z")
How use drilldowns on TSVB visualization? I created drilldown to another dashboard and I have no idea how use it, how jump to this another dashboard? --- ## [Adnnotations on TSVB](https://discuss.elastic.co/t/adnnotations-on-tsvb/266265)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 3\ **Last updated:** [March 4, 2021, 8:27pm UTC](https://discuss.elastic.co/t/adnnotations-on-tsvb/266265 "2021-03-04T20:27:24Z")
Can I change order on adnnotaions on TSVB? Sometimes when I have 2 notifications at the same time I cant see details on one of them. This is not possible somehow to make order? Do I need manually change all adnnotations … --- ## [Version Conflict Engine Exception](https://discuss.elastic.co/t/version-conflict-engine-exception/266286)
**Author:** [@edubcn](https://discuss.elastic.co/u/edubcn)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 8:13pm UTC](https://discuss.elastic.co/t/version-conflict-engine-exception/266286 "2021-03-04T20:13:15Z")
Hi. It is the first time I am using Elastic Search technology and I don't know how to face the following issue. \[6c48d578-2f5f-4d7c-9cd1-2dd356906801\_application\_unique\_id/B8Q4QxraQSW026dKuKd8Jg\]\[\[6c48d578-2f5f-4d7c-9c… --- ## [Interpolation in string should be happening but isn't](https://discuss.elastic.co/t/interpolation-in-string-should-be-happening-but-isnt/266275)
**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 6:59pm UTC](https://discuss.elastic.co/t/interpolation-in-string-should-be-happening-but-isnt/266275 "2021-03-04T18:59:22Z")
I have the following document that went through logstash (v7.10.2): and message was constructed with the snippet: mutate { add\_field =\> { "message" =\> "%{\[http\]\[request\]\[method\]} %{\[url\]\[domain\]}%{\[url\]\[ori… --- ## [Logstash CSV filter - \_dateparsefailure from string to date](https://discuss.elastic.co/t/logstash-csv-filter-dateparsefailure-from-string-to-date/266189)
**Author:** [@pmaganti](https://discuss.elastic.co/u/pmaganti)\ **Replies:** 2\ **Last updated:** [March 4, 2021, 6:06pm UTC](https://discuss.elastic.co/t/logstash-csv-filter-dateparsefailure-from-string-to-date/266189 "2021-03-04T18:06:57Z")
Hello, I am trying to set a field from CSV as @timestamp and is failing with a tag \_dateparsefailure. Following is the config. input { beats { port =\> 5044 } } filter { csv { separator =\> "," autodet… --- ## [Problems changing @timestamp value](https://discuss.elastic.co/t/problems-changing-timestamp-value/266009)
**Author:** [@tstrul](https://discuss.elastic.co/u/tstrul)\ **Replies:** 2\ **Last updated:** [March 4, 2021, 4:48pm UTC](https://discuss.elastic.co/t/problems-changing-timestamp-value/266009 "2021-03-04T16:48:03Z")
Hi all, Im working on moving cloudfront real-time logs from kinessis to our ELK stack using functionbeat. I'm trying to convert logs timestamp (unix format) to regular date and use it in @timestemp field. unfortunatel… --- ## [I can't able get system & host uptime metric beat](https://discuss.elastic.co/t/i-cant-able-get-system-host-uptime-metric-beat/265690)
**Author:** [@psganeshk](https://discuss.elastic.co/u/psganeshk)\ **Replies:** 4\ **Last updated:** [March 4, 2021, 4:43pm UTC](https://discuss.elastic.co/t/i-cant-able-get-system-host-uptime-metric-beat/265690 "2021-03-04T16:43:22Z")
this is my system module but i am not getting uptime of the host Module: system Docs: https://www.elastic.co/guide/en/beats/metricbeat/7.9/metricbeat-module-system.html module: system period: 10s metricsets: cpu … --- ## [Dealing with multiple number of values from the same input - Logstash](https://discuss.elastic.co/t/dealing-with-multiple-number-of-values-from-the-same-input-logstash/266101)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 4\ **Last updated:** [March 4, 2021, 4:27pm UTC](https://discuss.elastic.co/t/dealing-with-multiple-number-of-values-from-the-same-input-logstash/266101 "2021-03-04T16:27:41Z")
I have recently started using Logstash so still new at this. The use-case I am working on is that I want to ship a log file with Logstash that has different lengths of lines in it. The length of line (the number of attri… --- ## [How to Copy Elasticsearch Volume Data into Another Server Machine](https://discuss.elastic.co/t/how-to-copy-elasticsearch-volume-data-into-another-server-machine/266262)
**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 4:22pm UTC](https://discuss.elastic.co/t/how-to-copy-elasticsearch-volume-data-into-another-server-machine/266262 "2021-03-04T16:22:47Z")
Hi All, Below is the content which i have to copy that data of ES which is having more than 4GB root@server ~ # du -sh /var/lib/docker/volumes/uat\_esdata/\_data/ 4.1G /var/lib/docker/volumes/uat\_esdata/\_data/ root@serve… --- ## [Is date\_nanos supported in Logs UI](https://discuss.elastic.co/t/is-date-nanos-supported-in-logs-ui/265863)
**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\ **Replies:** 4\ **Last updated:** [March 4, 2021, 3:53pm UTC](https://discuss.elastic.co/t/is-date-nanos-supported-in-logs-ui/265863 "2021-03-04T15:53:28Z")
Is date\_nanos supported in the logs UI? It doesn't seem like it. --- ## [Erreur filebeat/elasticsearch](https://discuss.elastic.co/t/erreur-filebeat-elasticsearch/265925)
**Author:** [@steph-ipi-69](https://discuss.elastic.co/u/steph-ipi-69)\ **Replies:** 2\ **Last updated:** [March 4, 2021, 3:01pm UTC](https://discuss.elastic.co/t/erreur-filebeat-elasticsearch/265925 "2021-03-04T15:01:17Z")
Bonjour, je tente d'installer sur une redhat (Red Hat Enterprise Linux release 8.3 (Ootpa)) le triplé ealastisearch/filebeat/kibana depuis les infos github (https://github.com/molu8bits/squid-filebeat-kibana). Lorsque … --- ## [Threshold Detection Ignoring Group By Field](https://discuss.elastic.co/t/threshold-detection-ignoring-group-by-field/264873)
**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\ **Replies:** 6\ **Last updated:** [March 4, 2021, 3:02pm UTC](https://discuss.elastic.co/t/threshold-detection-ignoring-group-by-field/264873 "2021-03-04T15:02:10Z")
Hi I have upgraded to 7.11.0 and now 7.11.1 and I think there is an issue with Threshold detections. I have a simple detection based on my FW logs. It looks for flow\_denied or flow\_dropped messages and raises a detect… --- ## [How can I stream data from ES to Azure Blob (not snapshot)?](https://discuss.elastic.co/t/how-can-i-stream-data-from-es-to-azure-blob-not-snapshot/266240)
**Author:** [@Andrei\_Budaes-Tanaru](https://discuss.elastic.co/u/Andrei_Budaes-Tanaru)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 2:24pm UTC](https://discuss.elastic.co/t/how-can-i-stream-data-from-es-to-azure-blob-not-snapshot/266240 "2021-03-04T14:24:22Z")
Hi Guys, My company is using Elasticsearch for one of our projects to collect event data from an app. As the number of users increased on the app so did the analytics needs. We are keeping data in for about 3 months for… --- ## [Elasticsearch,yaml](https://discuss.elastic.co/t/elasticsearch-yaml/266247)
**Author:** [@sanketj1112](https://discuss.elastic.co/u/sanketj1112)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 2:14pm UTC](https://discuss.elastic.co/t/elasticsearch-yaml/266247 "2021-03-04T14:14:33Z")
I am using managed elasticsearch on AWS. I want to edit some configuration in elasticsearch.yaml file. Can anyone suggest where is Elastiucsearch.yaml is located? --- ## [I cannot load kibana from browser and got different errors when reloading it](https://discuss.elastic.co/t/i-cannot-load-kibana-from-browser-and-got-different-errors-when-reloading-it/266236)
**Author:** [@Zhifei](https://discuss.elastic.co/u/Zhifei)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 12:32pm UTC](https://discuss.elastic.co/t/i-cannot-load-kibana-from-browser-and-got-different-errors-when-reloading-it/266236 "2021-03-04T12:32:34Z")
I cannot load kibana from browser, sometimes I got the following error when reloading kibana: {"statusCode":429,"error":"Too Many Requests","message":"\[circuit\_breaking\_exception\] \[parent\] Data too large, data for \[\ **Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 12:24pm UTC](https://discuss.elastic.co/t/not-able-to-copy-from-field-data1-to-field-data2-in-an-existing-index-in-es/266224 "2021-03-04T12:24:00Z") Hi all, I'm trying to copy data from field "updated" to "STATEMENT\_DATE". POST /test\_mycns\_com/\_update\_by\_query { { "query" : { "match\_all" : {} } }, "script" : { "source": "ctx.\_source.STATEMENT\_… --- ## [How to create multiple node in one cluster](https://discuss.elastic.co/t/how-to-create-multiple-node-in-one-cluster/266227)
**Author:** [@Moksedul\_Islam\_16](https://discuss.elastic.co/u/Moksedul_Islam_16)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 11:40am UTC](https://discuss.elastic.co/t/how-to-create-multiple-node-in-one-cluster/266227 "2021-03-04T11:40:32Z")
I have tried to create 3 nodes in my ES for "production", "development", "testing" using command: bin/elasticsearch -Epath.data=data1 -Epath.logs=log1 My elasticsearch.yml file located at admin:///etc/elasticsearch and… --- ## [Label an exact timestamp with event name](https://discuss.elastic.co/t/label-an-exact-timestamp-with-event-name/265685)
**Author:** [@jlbassereau](https://discuss.elastic.co/u/jlbassereau)\ **Replies:** 2\ **Last updated:** [March 4, 2021, 11:06am UTC](https://discuss.elastic.co/t/label-an-exact-timestamp-with-event-name/265685 "2021-03-04T11:06:56Z")
Hello, I order to be able to compare metrics when a new version of application is installed, I would like to be able to label a precise timestamp as "version x of the app deployed" with a visible label on graphs. Is th… --- ## [Geoip with GeoIP2-Connection-Type](https://discuss.elastic.co/t/geoip-with-geoip2-connection-type/266089)
**Author:** [@gyterpena](https://discuss.elastic.co/u/gyterpena)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 10:50am UTC](https://discuss.elastic.co/t/geoip-with-geoip2-connection-type/266089 "2021-03-03T10:50:11Z")
Hello I tried to use this DB for enrichment but it throws "Unsupported database type GeoIP2-Connection-Type" error Is there any chance this will be supported in the future? logstash config geoip { … --- ## [Elastic http securing: access denied ("java.io.FilePermission" "/etc/pki/tls/private" "read")](https://discuss.elastic.co/t/elastic-http-securing-access-denied-java-io-filepermission-etc-pki-tls-private-read/266202)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 2\ **Last updated:** [March 4, 2021, 10:09am UTC](https://discuss.elastic.co/t/elastic-http-securing-access-denied-java-io-filepermission-etc-pki-tls-private-read/266202 "2021-03-04T10:09:41Z")
Hi Elastic 7.11.1 I am trying to secure http protcol. But I am getting 2021-03-04T11:15:13,050\]\[ERROR\]\[o.e.b.Bootstrap \] \[dev-dc2-rk\] Exception java.security.AccessControlException: access denied ("java.io.F… --- ## [Logstash tcp input error : Error in Netty pipeline: java.io.IOException: Connection reset by peer](https://discuss.elastic.co/t/logstash-tcp-input-error-error-in-netty-pipeline-java-io-ioexception-connection-reset-by-peer/266206)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 9:58am UTC](https://discuss.elastic.co/t/logstash-tcp-input-error-error-in-netty-pipeline-java-io-ioexception-connection-reset-by-peer/266206 "2021-03-04T09:58:32Z")
Hi, I still couldn't find any answer to this issue. In our case, we are collecting logs from checkpoint. Anyone can help? Thanks. --- ## [Need to set following variables on AWS managed ES](https://discuss.elastic.co/t/need-to-set-following-variables-on-aws-managed-es/266199)
**Author:** [@sanketj1112](https://discuss.elastic.co/u/sanketj1112)\ **Replies:** 2\ **Last updated:** [March 4, 2021, 8:56am UTC](https://discuss.elastic.co/t/need-to-set-following-variables-on-aws-managed-es/266199 "2021-03-04T08:56:20Z")
reindex.remote.whitelist=\:9200,\:9200 script.painless.regex.enabled=true How I am going to set these variables inside the Elasticsearch cluster domain? --- ## [ECK Operator stuck in ApplyingChanges state after upgrade to 1.4.0](https://discuss.elastic.co/t/eck-operator-stuck-in-applyingchanges-state-after-upgrade-to-1-4-0/265726)
**Author:** [@barracuda-charles](https://discuss.elastic.co/u/barracuda-charles)\ **Replies:** 4\ **Last updated:** [March 4, 2021, 8:25am UTC](https://discuss.elastic.co/t/eck-operator-stuck-in-applyingchanges-state-after-upgrade-to-1-4-0/265726 "2021-03-04T08:25:52Z")
I recently upgraded to 1.4.0 and the operator is stuck in the ApplyingChanges state. I expanded a few volumes on data nodes which caused the cluster to enter a yellow state temporarily however the operator stayed green t… --- ## [How to check in which way elasticsearch is running?](https://discuss.elastic.co/t/how-to-check-in-which-way-elasticsearch-is-running/265813)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 5\ **Last updated:** [March 4, 2021, 8:09am UTC](https://discuss.elastic.co/t/how-to-check-in-which-way-elasticsearch-is-running/265813 "2021-03-04T08:09:53Z")
Hi All, Greetings...! Kindly help me with following two questions.. 1.How to check in which mode elastic is running? In my project when I do Service elasticsearch status, it shows its failed, but this node is joined t… --- ## [Ways to get all points in shapes / shapes in shapes with Geo query geo\_shape (multiple pre-indexed shape) on big geo-spatial data in ElasticSearch?](https://discuss.elastic.co/t/ways-to-get-all-points-in-shapes-shapes-in-shapes-with-geo-query-geo-shape-multiple-pre-indexed-shape-on-big-geo-spatial-data-in-elasticsearch/266024)
**Author:** [@Florin\_Virdol](https://discuss.elastic.co/u/Florin_Virdol)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 8:04am UTC](https://discuss.elastic.co/t/ways-to-get-all-points-in-shapes-shapes-in-shapes-with-geo-query-geo-shape-multiple-pre-indexed-shape-on-big-geo-spatial-data-in-elasticsearch/266024 "2021-03-04T08:04:15Z")
I have three ElasticSearch indices with geo-spatial data: index-geodoc-geoshape-shapes-1: geographical shapes (e.g.: UK Output Areas with ~200k shapes as documents) each document contains a output area shape and has… --- ## [\_dateparsefailure in Kibana](https://discuss.elastic.co/t/dateparsefailure-in-kibana/266149)
**Author:** [@kund0831](https://discuss.elastic.co/u/kund0831)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 8:02am UTC](https://discuss.elastic.co/t/dateparsefailure-in-kibana/266149 "2021-03-04T08:02:09Z")
Hi, Good evening I'm parsing json logs to elasticsearch using logstash json filter. I'm getting \_dataparsefailure in Kibana dashboard and I couldn't see any error logs in logstash regarding this. time format in logs :… --- ## [Can not view and create snapshots after ELK upgrading](https://discuss.elastic.co/t/can-not-view-and-create-snapshots-after-elk-upgrading/266192)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 7:54am UTC](https://discuss.elastic.co/t/can-not-view-and-create-snapshots-after-elk-upgrading/266192 "2021-03-04T07:54:05Z")
Elasticsearch cluster was upgraded from 7.3.1 to 7.10.1. Now can't view and can not create a snapshot on existing repositories. Got the following error. --- ## [Logstash json filter fail to send to elasticearch when parse json error](https://discuss.elastic.co/t/logstash-json-filter-fail-to-send-to-elasticearch-when-parse-json-error/266190)
**Author:** [@stwang](https://discuss.elastic.co/u/stwang)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 7:48am UTC](https://discuss.elastic.co/t/logstash-json-filter-fail-to-send-to-elasticearch-when-parse-json-error/266190 "2021-03-04T07:48:47Z")
Hi there, I have a logstash filter to pass my log, my log contain json and non-json log, I want both send to elastic search no matter json parse success or failed. I found from logstash, for the failed parse log, it sh… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1024) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1026)