# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1109 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1110 --- ## [Adding new field based on AND Condition](https://discuss.elastic.co/t/adding-new-field-based-on-and-condition/259010)
**Author:** [@errupeshmca](https://discuss.elastic.co/u/errupeshmca)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 6:19pm UTC](https://discuss.elastic.co/t/adding-new-field-based-on-and-condition/259010 "2020-12-17T18:19:19Z")
Hi have below coloumns columns =\> \[ "Order Key","Cust #","Doc Type","Doc #","Order #","Order Type","Order Complete?","Order Date","Total Order Value","Total Dollar Value","TotalOrderReceivedToday","Inv #","Inv Date","Ex… --- ## [Split Json, transform result](https://discuss.elastic.co/t/split-json-transform-result/259019)
**Author:** [@Jose92](https://discuss.elastic.co/u/Jose92)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 6:13pm UTC](https://discuss.elastic.co/t/split-json-transform-result/259019 "2020-12-17T18:13:27Z")
Bonjour, je me permets de vous contacter pour avoir de l'aide sur une configuration avec logstash. Je tourne en rond depuis plusieurs jours.... Mon json ressemble à ça : ... "inventaire": { "Applicatio… --- ## [Internals of array of strings vs. concatenated string](https://discuss.elastic.co/t/internals-of-array-of-strings-vs-concatenated-string/257640)
**Author:** [@mitar](https://discuss.elastic.co/u/mitar)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 5:59pm UTC](https://discuss.elastic.co/t/internals-of-array-of-strings-vs-concatenated-string/257640 "2020-12-17T17:59:42Z")
I am trying to better understand internals of ElasticSearch, so I would like to know if there are any differences in how ElasticSearch internally computes term statistics for the following two cases. The first case is w… --- ## [Esaggs \> field is a required parameter](https://discuss.elastic.co/t/esaggs-field-is-a-required-parameter/259016)
**Author:** [@firstpostcommenter](https://discuss.elastic.co/u/firstpostcommenter)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 5:44pm UTC](https://discuss.elastic.co/t/esaggs-field-is-a-required-parameter/259016 "2020-12-17T17:44:16Z")
Hi, In my Kibana dashboard I get the below error: \[esaggs\] \> "field" is a required parameter In my Dashboard there are around 11 panels/visualizations (panel0 to panel10) and I narrowed it down to panel7 which is caus… --- ## [Imap input plugin download attachment](https://discuss.elastic.co/t/imap-input-plugin-download-attachment/258966)
**Author:** [@Aditya\_Srivastava1](https://discuss.elastic.co/u/Aditya_Srivastava1)\ **Replies:** 8\ **Last updated:** [December 17, 2020, 5:30pm UTC](https://discuss.elastic.co/t/imap-input-plugin-download-attachment/258966 "2020-12-17T17:30:51Z")
Hi, I am using imap input plugin to fetch email along with attachments. Below configuration gets me multiple fields but does not get the attachment content. Can anyone help here how to download attachments while connec… --- ## ["This Elastic installation has strict security requirements enabled that your current browser does not meet](https://discuss.elastic.co/t/this-elastic-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/259006)
**Author:** [@J\_Stan](https://discuss.elastic.co/u/J_Stan)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 5:03pm UTC](https://discuss.elastic.co/t/this-elastic-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/259006 "2020-12-17T17:03:30Z")
Hi All I am not able to access the Kibana UI . I am using Google Chrome (ver 87). The error I am getting is "This Elastic installation has strict security requirements enabled that your current browser does not meet.… --- ## [Populate geo\_shape values with ingest pipeline using lat/lon column values](https://discuss.elastic.co/t/populate-geo-shape-values-with-ingest-pipeline-using-lat-lon-column-values/258998)
**Author:** [@vmanohar1](https://discuss.elastic.co/u/vmanohar1)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 4:51pm UTC](https://discuss.elastic.co/t/populate-geo-shape-values-with-ingest-pipeline-using-lat-lon-column-values/258998 "2020-12-17T16:51:34Z")
If input data has lat/lon columns, is it possible to populate geo\_shape value using lat/long columns with ingest pipeline? Imagine original index has only lat/lon column mappings and data is populated. Now using reind… --- ## [Logstash crash with FATAL error](https://discuss.elastic.co/t/logstash-crash-with-fatal-error/258919)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 7\ **Last updated:** [December 17, 2020, 4:50pm UTC](https://discuss.elastic.co/t/logstash-crash-with-fatal-error/258919 "2020-12-17T16:50:08Z")
something in either my data or my logstash is killing logstash with following error. I have try this multiple time but I can't figure out what record does it gets kill on. how do I do the debug on this one? I am runni… --- ## [Parsing issue in Logstash grok](https://discuss.elastic.co/t/parsing-issue-in-logstash-grok/258717)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 2:27pm UTC](https://discuss.elastic.co/t/parsing-issue-in-logstash-grok/258717 "2020-12-17T14:27:06Z")
I am having a grok issue. I have a log like below Login Success \[user: jsaver\] \[Source: 10.110.20.58\] How can I parse the this log with grok filter ? --- ## [Can hour and minute be appended to index name?](https://discuss.elastic.co/t/can-hour-and-minute-be-appended-to-index-name/258830)
**Author:** [@danibe](https://discuss.elastic.co/u/danibe)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 2:16pm UTC](https://discuss.elastic.co/t/can-hour-and-minute-be-appended-to-index-name/258830 "2020-12-17T14:16:39Z")
I am trying to create index names with minute resolution since I am still experimenting with ELK and would like to see the effect of various changes in my logstash filter, without having to delete an existing filter (and… --- ## [ELS Watcher script free disc space](https://discuss.elastic.co/t/els-watcher-script-free-disc-space/258997)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 0\ **Last updated:** [December 17, 2020, 1:12pm UTC](https://discuss.elastic.co/t/els-watcher-script-free-disc-space/258997 "2020-12-17T13:12:32Z")
Dear team, we have used a script from the els repository to set up a watcher for free disc space ratio, unfortunately script execution ends with errors but watcher interface show all is ok, we got an NPE: "script\_stack… --- ## [Most popular search results - Site Search](https://discuss.elastic.co/t/most-popular-search-results-site-search/258111)
**Author:** [@petas](https://discuss.elastic.co/u/petas)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 1:06pm UTC](https://discuss.elastic.co/t/most-popular-search-results-site-search/258111 "2020-12-17T13:06:47Z")
Hi! I'm trying to fetch the most popular search results from my Swiftype engine, but I can't find any way to do this out of the box. I am tracking clicks through recording "click throughs" (https://swiftype.com/documen… --- ## [Embed kibana dashboard/visualizations on an external webpage as iFrame](https://discuss.elastic.co/t/embed-kibana-dashboard-visualizations-on-an-external-webpage-as-iframe/256279)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 14\ **Last updated:** [December 17, 2020, 12:38pm UTC](https://discuss.elastic.co/t/embed-kibana-dashboard-visualizations-on-an-external-webpage-as-iframe/256279 "2020-12-17T12:38:43Z")
I am doing these below mentioned steps Create a visualization, apply the filters, then save the visualization Click "Share" at the top Copy the iframe code Paste the iframe code into your external HTML. when i paste t… --- ## [Logstash translate doesn't work](https://discuss.elastic.co/t/logstash-translate-doesnt-work/258249)
**Author:** [@mihai.radulescu](https://discuss.elastic.co/u/mihai.radulescu)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 12:33pm UTC](https://discuss.elastic.co/t/logstash-translate-doesnt-work/258249 "2020-12-17T12:33:56Z")
Hello, I have the following code: input { file { path =\> "/home/path/files/\*.csv" start\_position =\> "beginning" } } filter { csv { columns =\> \[ "xx1","xx2","xx3","xx4","Response","TimeStamp",… --- ## [Relationship between hot-warm arch and node roles](https://discuss.elastic.co/t/relationship-between-hot-warm-arch-and-node-roles/258977)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 12:18pm UTC](https://discuss.elastic.co/t/relationship-between-hot-warm-arch-and-node-roles/258977 "2020-12-17T12:18:33Z")
when a node config as a hot node, then what should be the node role such as master, ingest, data? also when a node is warm what should be the node role? what is the relationship? between hot-warm arch and node roles? T… --- ## [Visualize 2 lines - 2 nodes with 1 parameter per time](https://discuss.elastic.co/t/visualize-2-lines-2-nodes-with-1-parameter-per-time/256240)
**Author:** [@avovana](https://discuss.elastic.co/u/avovana)\ **Replies:** 16\ **Last updated:** [December 17, 2020, 12:17pm UTC](https://discuss.elastic.co/t/visualize-2-lines-2-nodes-with-1-parameter-per-time/256240 "2020-12-17T12:17:47Z")
Good morning! After intensive search It seems to me that it is impossible. Anyway, maybe someone have an idea to implement it(with Kibana, or, maybe Zabbix + prometheus)... The case is I have a system consists of many … --- ## [Underlying file changed by an external force](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/258648)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 12:13pm UTC](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/258648 "2020-12-17T12:13:10Z")
Hi Team, Of late, I've started seeing these errors in ES 6.8.6 cluster. I have this cluster since March but these errors started appearing only recently: \[2020-12-14T00:00:04,122\]\[WARN \]\[o.e.c.r.a.AllocationService\] \[n… --- ## [Geo\_shape, geo\_point - Can they be added on the fly?](https://discuss.elastic.co/t/geo-shape-geo-point-can-they-be-added-on-the-fly/258910)
**Author:** [@vmanohar1](https://discuss.elastic.co/u/vmanohar1)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 11:32am UTC](https://discuss.elastic.co/t/geo-shape-geo-point-can-they-be-added-on-the-fly/258910 "2020-12-17T11:32:54Z")
If the original index has just lat/lon values, is it possible to create additional columns of type geo\_shape and geo\_point using values from lat/lon column in the elastic query itself? I am curious to know.. Thanks. --- ## [Problem login dashboards after copying the iframe address in the html](https://discuss.elastic.co/t/problem-login-dashboards-after-copying-the-iframe-address-in-the-html/258693)
**Author:** [@Sarahabbasi](https://discuss.elastic.co/u/Sarahabbasi)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 11:29am UTC](https://discuss.elastic.co/t/problem-login-dashboards-after-copying-the-iframe-address-in-the-html/258693 "2020-12-17T11:29:52Z")
Hello Masters : I will copy the iframe in the HTML tags on a html page, but Elastic login page not working and i got this error in browser console : Refused to execute inline script because it violates the following … --- ## [Image Cloud in Kibana](https://discuss.elastic.co/t/image-cloud-in-kibana/258370)
**Author:** [@Abhishek5](https://discuss.elastic.co/u/Abhishek5)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 11:29am UTC](https://discuss.elastic.co/t/image-cloud-in-kibana/258370 "2020-12-17T11:29:27Z")
Hello All, I am thinking to create a image cloud (similar to tag cloud, using images instead) in Kibana. I could not find any visualization in Kibana 7.0. I am exploring markdowns to display static images for now, is the… --- ## [Not able to access my Kibana dashboard URL from angular with x-pack security turned on](https://discuss.elastic.co/t/not-able-to-access-my-kibana-dashboard-url-from-angular-with-x-pack-security-turned-on/258390)
**Author:** [@sam189](https://discuss.elastic.co/u/sam189)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 10:55am UTC](https://discuss.elastic.co/t/not-able-to-access-my-kibana-dashboard-url-from-angular-with-x-pack-security-turned-on/258390 "2020-12-17T10:55:45Z")
Disabling x-pack security in kibana alllows me to access the kibana dashboard in my angular application but when i enable xpack i cannot access the kibana dashboard in my angular iframe. I am passing username and passwo… --- ## [Errors in Kibana logs](https://discuss.elastic.co/t/errors-in-kibana-logs/258968)
**Author:** [@aramos](https://discuss.elastic.co/u/aramos)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 10:42am UTC](https://discuss.elastic.co/t/errors-in-kibana-logs/258968 "2020-12-17T10:42:39Z")
Good morning, The first sorry for my English. I am new on Linux, I have to install Kibana. I'm using Ubuntu Server 2004. I installed kibana 7.9.3 from the .tar file following the instructions https://www.elastic.co/gui… --- ## [Logstash not working when started via systemctl, however it work when manually starting](https://discuss.elastic.co/t/logstash-not-working-when-started-via-systemctl-however-it-work-when-manually-starting/258973)
**Author:** [@baljka](https://discuss.elastic.co/u/baljka)\ **Replies:** 0\ **Last updated:** [December 17, 2020, 10:20am UTC](https://discuss.elastic.co/t/logstash-not-working-when-started-via-systemctl-however-it-work-when-manually-starting/258973 "2020-12-17T10:20:39Z")
Hello, Everything was working fine. However it suddenly stopped working. Now when I try running command "/usr/share/logstash/bin/logstash --path.settings /etc/logstash" manually, it works fine When I run command "syst… --- ## [MSSP SOC - How to ByPass "Cases"](https://discuss.elastic.co/t/mssp-soc-how-to-bypass-cases/255387)
**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\ **Replies:** 5\ **Last updated:** [December 17, 2020, 10:01am UTC](https://discuss.elastic.co/t/mssp-soc-how-to-bypass-cases/255387 "2020-12-17T10:01:07Z")
I'm a SOC Engineer at a MSSP SOC and we currently use AlienVault for the majority of our clients, but we started to play around with Elastic SIEM and we just started to work with a potential new client and we have deploy… --- ## [Autogenerating field names from csv headers](https://discuss.elastic.co/t/autogenerating-field-names-from-csv-headers/258638)
**Author:** [@toucan](https://discuss.elastic.co/u/toucan)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 9:27am UTC](https://discuss.elastic.co/t/autogenerating-field-names-from-csv-headers/258638 "2020-12-17T09:27:07Z")
Hi, I'm trying to parse CSV files with Logstash. Some of the files have a column called time, others have two columns called time\_from and time\_to (and they have several other columns). Ideally I'd like to have one pipe… --- ## [Searching Document (NEST) with Selecting fields to return](https://discuss.elastic.co/t/searching-document-nest-with-selecting-fields-to-return/258967)
**Author:** [@mohannad](https://discuss.elastic.co/u/mohannad)\ **Replies:** 0\ **Last updated:** [December 17, 2020, 9:05am UTC](https://discuss.elastic.co/t/searching-document-nest-with-selecting-fields-to-return/258967 "2020-12-17T09:05:43Z")
Hi, I am quite new in Elasticsearch and I have some questions. The case is "FS-Crawler" is used with Elastic to index a group of documents. I am trying to search (using NEST) the content of the documents with filtration… --- ## [Snapshot & Restore on Windows can not access directory](https://discuss.elastic.co/t/snapshot-restore-on-windows-can-not-access-directory/257472)
**Author:** [@azeiner](https://discuss.elastic.co/u/azeiner)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 8:04am UTC](https://discuss.elastic.co/t/snapshot-restore-on-windows-can-not-access-directory/257472 "2020-12-17T08:04:23Z")
We've got a 3 Node Elastic Cluster on Windows 10 (Customer Request) and i would like to configure the snapshot restore ability for the cluster. What i've done is to create a share on one of the Node (seperate Harddisk),… --- ## [Dec 17th, 2020: \[KR\] Elastic Cloud 에서 한글 형태소 분석기 사용하기](https://discuss.elastic.co/t/dec-17th-2020-kr-elastic-cloud/258379)
**Author:** [@kimjmin](https://discuss.elastic.co/u/kimjmin)\ **Replies:** 0\ **Last updated:** [December 17, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-17th-2020-kr-elastic-cloud/258379 "2020-12-17T08:00:00Z")
Elasticsearch 에서는 Elastic 에서 공식으로 제공하는 한글 형태소 분석기인 nori 를 사용할 수 있습니다. 한글은 띄어쓰기가 없는 복합어가 대다수이기 때문에 의도하지 않은 대로 분석이 되는 경우가 많아 nori 를 사용하기 위해서는 목적에 맞는 사용자 사전을 등록해야 할 때가 많습니다. nori\_tokenizer 에서는 사용자 사전을 텍스트 파일로 만들어 등록하거나 인덱스… --- ## [Custom event category in correlation rule](https://discuss.elastic.co/t/custom-event-category-in-correlation-rule/258809)
**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 7:48am UTC](https://discuss.elastic.co/t/custom-event-category-in-correlation-rule/258809 "2020-12-17T07:48:54Z")
Can anyone please explain what does it means I have Symantec antimalware logs on index pattern logstash-sepm\*. In json document I don't have event.category field but I want to create a correlation rule what if the sa… --- ## [Would ES reindex API ignore all updates post reindex is triggered](https://discuss.elastic.co/t/would-es-reindex-api-ignore-all-updates-post-reindex-is-triggered/258948)
**Author:** [@the123saurav](https://discuss.elastic.co/u/the123saurav)\ **Replies:** 3\ **Last updated:** [December 17, 2020, 7:32am UTC](https://discuss.elastic.co/t/would-es-reindex-api-ignore-all-updates-post-reindex-is-triggered/258948 "2020-12-17T07:32:49Z")
I read that ES' reindex API works by taking a snapshot of the source index. So let's say i triggered reindexing at T0 and this finished at T2. So if say any create/update/delete came for any document at T1 (T0 \< T1 \< T… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1108) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1110)