# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1058 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1059 --- ## [Running logstash pipeline is not working](https://discuss.elastic.co/t/running-logstash-pipeline-is-not-working/263394)
**Author:** [@Srinivas\_RK](https://discuss.elastic.co/u/Srinivas_RK)\ **Replies:** 2\ **Last updated:** [February 5, 2021, 4:48pm UTC](https://discuss.elastic.co/t/running-logstash-pipeline-is-not-working/263394 "2021-02-05T16:48:01Z")
input { jdbc { id =\> "my\_plugin\_id" jdbc\_connection\_string =\> "jdbc:sqlserver://abc.database.windows.net:1433;databaseName=db;" jdbc\_driver\_library =\> "" jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.… --- ## [What is the best way to push/add new elements into a nested array of objects?](https://discuss.elastic.co/t/what-is-the-best-way-to-push-add-new-elements-into-a-nested-array-of-objects/263439)
**Author:** [@OB1290](https://discuss.elastic.co/u/OB1290)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 4:47pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-push-add-new-elements-into-a-nested-array-of-objects/263439 "2021-02-05T16:47:07Z")
I have a candidate Index where documents are structured like so : { "\_index" : "candidates", "\_type" : "\_doc", "\_id" : "a23OcncBXBMGOH6pwXge", "\_version" : 1, "\_seq\_no" : 1, "\_primary\_term" : 1, "found" : … --- ## [Changing file path name every five minutes in output plugin](https://discuss.elastic.co/t/changing-file-path-name-every-five-minutes-in-output-plugin/263383)
**Author:** [@ritusingh](https://discuss.elastic.co/u/ritusingh)\ **Replies:** 1\ **Last updated:** [February 5, 2021, 4:36pm UTC](https://discuss.elastic.co/t/changing-file-path-name-every-five-minutes-in-output-plugin/263383 "2021-02-05T16:36:01Z")
Hi, My requirement is my file name should change every 5 minutes . Currently I am using below configuration to change it every minute. Please tell me some way to change it every 5 minute. output { stdout { codec =\> ru… --- ## [Best way to install Metricbeat on hundreds of machines](https://discuss.elastic.co/t/best-way-to-install-metricbeat-on-hundreds-of-machines/263245)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 3\ **Last updated:** [February 5, 2021, 3:31pm UTC](https://discuss.elastic.co/t/best-way-to-install-metricbeat-on-hundreds-of-machines/263245 "2021-02-05T15:31:33Z")
Hi. what will be the best way to install metricbeat in hundreds of machines? --- ## [How to filter data from beat in logstash](https://discuss.elastic.co/t/how-to-filter-data-from-beat-in-logstash/263418)
**Author:** [@IL\_Mare](https://discuss.elastic.co/u/IL_Mare)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 3:31pm UTC](https://discuss.elastic.co/t/how-to-filter-data-from-beat-in-logstash/263418 "2021-02-05T15:31:17Z")
Hello. I need to add data comes from beats to ElasticSearch. But before I need to filter to keep only records that have "status" and status is not "sent". I wrote next configuration for it. input { beats { port =\> … --- ## [Pie graph color change magically after refresh the page. Please help how to resolve this issue](https://discuss.elastic.co/t/pie-graph-color-change-magically-after-refresh-the-page-please-help-how-to-resolve-this-issue/263291)
**Author:** [@Satish\_Yadav](https://discuss.elastic.co/u/Satish_Yadav)\ **Replies:** 3\ **Last updated:** [February 5, 2021, 3:22pm UTC](https://discuss.elastic.co/t/pie-graph-color-change-magically-after-refresh-the-page-please-help-how-to-resolve-this-issue/263291 "2021-02-05T15:22:10Z")
--- ## [Customize SIEM Detection columns based on alert](https://discuss.elastic.co/t/customize-siem-detection-columns-based-on-alert/263228)
**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\ **Replies:** 1\ **Last updated:** [February 5, 2021, 2:57pm UTC](https://discuss.elastic.co/t/customize-siem-detection-columns-based-on-alert/263228 "2021-02-05T14:57:41Z")
Hello, it seems like the Columns in the SIEM Application are more or less static and if I want a new value to de displayed I have to add it to the entire mask which might lead to unpopulated fields in certain alerts. T… --- ## [Write in elasti is slow](https://discuss.elastic.co/t/write-in-elasti-is-slow/263403)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 1\ **Last updated:** [February 5, 2021, 2:52pm UTC](https://discuss.elastic.co/t/write-in-elasti-is-slow/263403 "2021-02-05T14:52:01Z")
hi all and sorry for my poor english, I notice a write time very high on my index. I wonder if exists a way to write tons of doc quickly --- ## [Duplicate records in Elasticsearch](https://discuss.elastic.co/t/duplicate-records-in-elasticsearch/261658)
**Author:** [@sachin1112](https://discuss.elastic.co/u/sachin1112)\ **Replies:** 2\ **Last updated:** [February 5, 2021, 2:22pm UTC](https://discuss.elastic.co/t/duplicate-records-in-elasticsearch/261658 "2021-02-05T14:22:18Z")
Hello Elastic Team, We are creating our Agile dashboards using ELK Stack , we are able to extract data and push it to ES without any issues for the first time. but when we are pushing the incremental data , we are getti… --- ## [Can we access a scripted field with a scripted field](https://discuss.elastic.co/t/can-we-access-a-scripted-field-with-a-scripted-field/263388)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 1\ **Last updated:** [February 5, 2021, 2:19pm UTC](https://discuss.elastic.co/t/can-we-access-a-scripted-field-with-a-scripted-field/263388 "2021-02-05T14:19:05Z")
Kibana version : 7.9 Elasticsearch version : 7.9 APM Server version : 7.9 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your setup… --- ## [Too many logstash processes are running on server](https://discuss.elastic.co/t/too-many-logstash-processes-are-running-on-server/263391)
**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 1:53pm UTC](https://discuss.elastic.co/t/too-many-logstash-processes-are-running-on-server/263391 "2021-02-05T13:53:46Z")
Hi, I am using logstash pipeline to dump data in elastic search. Only two configuration define in pipeline. But when I htop my server there are lots of processes. following are screen short of htop. Also getting fol… --- ## [Rolling upgrade to 7.x](https://discuss.elastic.co/t/rolling-upgrade-to-7-x/263386)
**Author:** [@srikanth\_k](https://discuss.elastic.co/u/srikanth_k)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 1:29pm UTC](https://discuss.elastic.co/t/rolling-upgrade-to-7-x/263386 "2021-02-05T13:29:20Z")
In case of rolling upgrade, "In the unlikely case of a network malfunction during the upgrade process that isolates all remaining old nodes from the cluster, you must take the old nodes offline and upgrade them to enabl… --- ## [Kafka Topics](https://discuss.elastic.co/t/kafka-topics/263379)
**Author:** [@Abderrahmen\_Ridha](https://discuss.elastic.co/u/Abderrahmen_Ridha)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 11:51am UTC](https://discuss.elastic.co/t/kafka-topics/263379 "2021-02-05T11:51:18Z")
how can i get all Kafka Topics in Logstash ? --- ## [Reload\_search\_analyzers behaviour](https://discuss.elastic.co/t/reload-search-analyzers-behaviour/263376)
**Author:** [@Philippus\_Baalman](https://discuss.elastic.co/u/Philippus_Baalman)\ **Replies:** 1\ **Last updated:** [February 5, 2021, 11:43am UTC](https://discuss.elastic.co/t/reload-search-analyzers-behaviour/263376 "2021-02-05T11:43:39Z")
Maybe my memory is foggy but I thought that the 'reload\_search\_analyzers'-command only reloads the synonyms file (when the 'updateable'-field is set to true) and not other files (like stop\_words and stemmer\_override). W… --- ## [Snmp agent configuration for logstash](https://discuss.elastic.co/t/snmp-agent-configuration-for-logstash/261339)
**Author:** [@shehzadshaikh](https://discuss.elastic.co/u/shehzadshaikh)\ **Replies:** 2\ **Last updated:** [February 5, 2021, 11:24am UTC](https://discuss.elastic.co/t/snmp-agent-configuration-for-logstash/261339 "2021-02-05T11:24:56Z")
I'm trying to pull data from snmp agent directly to logstash, i went through online documents but none of the are descriptive and show what exactly configuration to put on the smp agent. Also while there is plugins avail… --- ## [Load and Performance of Elastic](https://discuss.elastic.co/t/load-and-performance-of-elastic/260989)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 2\ **Last updated:** [February 5, 2021, 10:50am UTC](https://discuss.elastic.co/t/load-and-performance-of-elastic/260989 "2021-02-05T10:50:58Z")
We are having single node architecture with 50 GB of physical space and 10 GB ram. We are looking to store around 90 Million documents spread across multiple index in the free version of Elastic search. Can Elastic sear… --- ## [@timestamp format while exporting from elasticsearch to csv](https://discuss.elastic.co/t/timestamp-format-while-exporting-from-elasticsearch-to-csv/263137)
**Author:** [@ritusingh](https://discuss.elastic.co/u/ritusingh)\ **Replies:** 5\ **Last updated:** [February 5, 2021, 10:15am UTC](https://discuss.elastic.co/t/timestamp-format-while-exporting-from-elasticsearch-to-csv/263137 "2021-02-05T10:15:12Z")
Hi, I want to know how can I change the format of @timestamp while exporting from elasticsearch to csv via logstash. In Kibana I have kept the format as "Feb-03-2021 20:03:04.603" using advance settings. I want same for… --- ## [Ssl not working in elasticsearch input plugin](https://discuss.elastic.co/t/ssl-not-working-in-elasticsearch-input-plugin/263357)
**Author:** [@ritusingh](https://discuss.elastic.co/u/ritusingh)\ **Replies:** 1\ **Last updated:** [February 5, 2021, 10:13am UTC](https://discuss.elastic.co/t/ssl-not-working-in-elasticsearch-input-plugin/263357 "2021-02-05T10:13:59Z")
Hi, I am fetching logs from elasticsearch via logstash but if I use ssl I get the following error. 2056 error: 2056 2056 2056 Manticore::ClientProtocolException 2056 PKIX path building failed: sun.… --- ## [Packetbeat OSS "HTTPS Error 404 - Not Found" with YUM](https://discuss.elastic.co/t/packetbeat-oss-https-error-404-not-found-with-yum/263360)
**Author:** [@gohovd](https://discuss.elastic.co/u/gohovd)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 9:40am UTC](https://discuss.elastic.co/t/packetbeat-oss-https-error-404-not-found-with-yum/263360 "2021-02-05T09:40:21Z")
Hi all, Using the following elastic repo for oss: \[elastic-7.x\] name=Elastic repository for 7.x packages baseurl=https://artifacts.elastic.co/packages/oss-7.x/yum gpgcheck=1 gpgkey=https://artifacts.elastic.co/GPG-KEY-… --- ## [How to send syslog to multiple destinations?](https://discuss.elastic.co/t/how-to-send-syslog-to-multiple-destinations/263354)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 8:52am UTC](https://discuss.elastic.co/t/how-to-send-syslog-to-multiple-destinations/263354 "2021-02-05T08:52:23Z")
I'm using logstash syslog module to send customized outputs to multiple destinations/port I've done as below, but somehow only the 1st destination receives message. Is there another format to have multiple syslog outpu… --- ## [Kibana role based access on remote cluster](https://discuss.elastic.co/t/kibana-role-based-access-on-remote-cluster/263235)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 2\ **Last updated:** [February 5, 2021, 6:18am UTC](https://discuss.elastic.co/t/kibana-role-based-access-on-remote-cluster/263235 "2021-02-05T06:18:46Z")
Hi All, We are trying to provide role based access to our partners for few indexes. It is working for the current cluster and consumer is able to see data only for allocated index. However consumer is able to see all r… --- ## [How to query by value in past bucket](https://discuss.elastic.co/t/how-to-query-by-value-in-past-bucket/263352)
**Author:** [@111439](https://discuss.elastic.co/u/111439)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 8:45am UTC](https://discuss.elastic.co/t/how-to-query-by-value-in-past-bucket/263352 "2021-02-05T08:45:32Z")
Hi, Im' Newbie of ELK Stack. I have question of elasticsearch REST API, I want to select data 2 time. First I use range (-20s to -140s) and aggregation term and bucket sort to find min value in this time. ex : 08.30 AM… --- ## [How to make auto Complete filters multiple contexts with an AND operator](https://discuss.elastic.co/t/how-to-make-auto-complete-filters-multiple-contexts-with-an-and-operator/263353)
**Author:** [@awan.soekamto](https://discuss.elastic.co/u/awan.soekamto)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 8:48am UTC](https://discuss.elastic.co/t/how-to-make-auto-complete-filters-multiple-contexts-with-an-and-operator/263353 "2021-02-05T08:48:45Z")
Hi, Is there any way I can return documents that match ALL the contexts? I use "contexts": { "suggestfilter\_groupid": \[3\], "suggestfilter\_userid": \[306\] } I want to just return documents that matches groupid 3 AND… --- ## [How to display only positive values after a tophit (latest) aggregation](https://discuss.elastic.co/t/how-to-display-only-positive-values-after-a-tophit-latest-aggregation/262997)
**Author:** [@Ricks](https://discuss.elastic.co/u/Ricks)\ **Replies:** 3\ **Last updated:** [February 5, 2021, 8:05am UTC](https://discuss.elastic.co/t/how-to-display-only-positive-values-after-a-tophit-latest-aggregation/262997 "2021-02-05T08:05:01Z")
Hi, currently I am exporting (once per hour) certificate expiration data to elasticsearch and visualize it with Kibana. So far so good, but I can't figure out to properly display certificates that are within 30 days to … --- ## [Syslog-ng logstash date\_time\_parse\_exception](https://discuss.elastic.co/t/syslog-ng-logstash-date-time-parse-exception/263104)
**Author:** [@tomsozolins](https://discuss.elastic.co/u/tomsozolins)\ **Replies:** 1\ **Last updated:** [February 5, 2021, 7:57am UTC](https://discuss.elastic.co/t/syslog-ng-logstash-date-time-parse-exception/263104 "2021-02-05T07:57:56Z")
Hello! I am trying to send logs from Syslog-ng to logstash and no logs are indexed in elasticsearch because of date time parse exception. I cannot use Beats on the devices, so the only option is Syslog-ng. Could anyone … --- ## [How to filter records that have no related record](https://discuss.elastic.co/t/how-to-filter-records-that-have-no-related-record/263240)
**Author:** [@Henk21](https://discuss.elastic.co/u/Henk21)\ **Replies:** 2\ **Last updated:** [February 5, 2021, 7:49am UTC](https://discuss.elastic.co/t/how-to-filter-records-that-have-no-related-record/263240 "2021-02-05T07:49:34Z")
I am loading a feed (ISE syslog events) in a given index. There are two types of events: Authentication events and Start events. The two are related through some unique session\_id. It may happen that for some Authenti… --- ## [Geoip conflict when splitting the index by day](https://discuss.elastic.co/t/geoip-conflict-when-splitting-the-index-by-day/263226)
**Author:** [@testsoft](https://discuss.elastic.co/u/testsoft)\ **Replies:** 2\ **Last updated:** [February 5, 2021, 7:27am UTC](https://discuss.elastic.co/t/geoip-conflict-when-splitting-the-index-by-day/263226 "2021-02-05T07:27:20Z")
Good afternoon. Please help with the following question. I use the following standard output config: elasticsearch { hosts =\> \["localhost:9200"\] manage\_template =\> false index =\> "… --- ## [How to customize the name of the s3 part file](https://discuss.elastic.co/t/how-to-customize-the-name-of-the-s3-part-file/263334)
**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 7:00am UTC](https://discuss.elastic.co/t/how-to-customize-the-name-of-the-s3-part-file/263334 "2021-02-05T07:00:33Z")
Hi There, I use the S3 output plugin for persisting the raw data of our Mulesoft applicaiton. I have following configuration is my s3 output plugin; output { s3 { id =\> "experience\_rt4\_s3\_backup" codec =\> line {… --- ## [Got error in logstash. help me!](https://discuss.elastic.co/t/got-error-in-logstash-help-me/262587)
**Author:** [@Farmer\_J](https://discuss.elastic.co/u/Farmer_J)\ **Replies:** 2\ **Last updated:** [February 5, 2021, 6:39am UTC](https://discuss.elastic.co/t/got-error-in-logstash-help-me/262587 "2021-02-05T06:39:37Z")
hi guys . i got some error code in AMI when i excute logstash config file for indexing these is error codes=\> Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash… --- ## [Delete doc.delete](https://discuss.elastic.co/t/delete-doc-delete/263333)
**Author:** [@Farmer\_J](https://discuss.elastic.co/u/Farmer_J)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 6:38am UTC](https://discuss.elastic.co/t/delete-doc-delete/263333 "2021-02-05T06:38:08Z")
good after noon mates. im using logstash on AMI i have question about doc.delete data Im trying to delete doc.delete datas is it properly command shell mate? curl -X POST "https://search-everon-jkgsx53bmgr3lhvcwpgyl… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1057) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1059)