# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1114 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1115 --- ## [Beats 7.10.1 Security Update](https://discuss.elastic.co/t/beats-7-10-1-security-update/258160)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [December 9, 2020, 4:24pm UTC](https://discuss.elastic.co/t/beats-7-10-1-security-update/258160 "2020-12-09T16:24:56Z")
Beats Denial of Service issue (ESA-2020-16) A denial of service flaw when parsing malformed TLS public keys was discovered in Go, the language used to implement Beats. If Beats is configured to listen for Syslog over TL… --- ## [Field have the same value](https://discuss.elastic.co/t/field-have-the-same-value/258604)
**Author:** [@Dea\_Agra](https://discuss.elastic.co/u/Dea_Agra)\ **Replies:** 5\ **Last updated:** [December 14, 2020, 5:08pm UTC](https://discuss.elastic.co/t/field-have-the-same-value/258604 "2020-12-14T17:08:05Z")
I don't know why logstash keep parsing the same value for the different field. Here I attach my logstash configuration input { file { start\_position =\> "beginning" sincedb\_path =\> "/dev/null" path =\> \[ "/home/elasticse… --- ## [Elasticsearch Audit not supported, but still got entries](https://discuss.elastic.co/t/elasticsearch-audit-not-supported-but-still-got-entries/258337)
**Author:** [@djordan66](https://discuss.elastic.co/u/djordan66)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 4:53pm UTC](https://discuss.elastic.co/t/elasticsearch-audit-not-supported-but-still-got-entries/258337 "2020-12-14T16:53:53Z")
We're running a cluster on Elasticsearch 7.9.3-1 We have 3 head/master nodes, 14 data nodes, and a kibana index node in the cluster. I was asked to get audit logging running on our cluster to keep an eye on users, but … --- ## [Is there a way to configure Elasticsearch for languages with 4 letters like DNA?](https://discuss.elastic.co/t/is-there-a-way-to-configure-elasticsearch-for-languages-with-4-letters-like-dna/258586)
**Author:** [@Popop\_Lldas](https://discuss.elastic.co/u/Popop_Lldas)\ **Replies:** 0\ **Last updated:** [December 14, 2020, 2:17pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-configure-elasticsearch-for-languages-with-4-letters-like-dna/258586 "2020-12-14T14:17:13Z")
There was a question on this subject in 2018, but it hasn't been fully addressed yet. https://discuss.elastic.co/t/elasticsearch-for-dna-sequence-analysis The DNA is a two-bit system so I assume regualr full-text searc… --- ## [Analyzers at search/query time vs at index time](https://discuss.elastic.co/t/analyzers-at-search-query-time-vs-at-index-time/258175)
**Author:** [@John\_McAfee1](https://discuss.elastic.co/u/John_McAfee1)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 3:24pm UTC](https://discuss.elastic.co/t/analyzers-at-search-query-time-vs-at-index-time/258175 "2020-12-14T15:24:50Z")
Hello! My team and I are using analyzers both at search/query and when data is indexed. After revewing the Elastic documentation and a few web searches, I have not found a conclusive answerto my questions. I have two q… --- ## [Showing saved dashboards in other plugins](https://discuss.elastic.co/t/showing-saved-dashboards-in-other-plugins/258501)
**Author:** [@houshmand1996](https://discuss.elastic.co/u/houshmand1996)\ **Replies:** 1\ **Last updated:** [December 14, 2020, 3:10pm UTC](https://discuss.elastic.co/t/showing-saved-dashboards-in-other-plugins/258501 "2020-12-14T15:10:27Z")
hi how we can use of saved dashboards in other plugins besides of dashboard plugin and apply filters to that dynamically --- ## [Grok filter TIMESTAMP\_ISO8601 appears in Kibana as String](https://discuss.elastic.co/t/grok-filter-timestamp-iso8601-appears-in-kibana-as-string/258240)
**Author:** [@SecretSquizza](https://discuss.elastic.co/u/SecretSquizza)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 2:48pm UTC](https://discuss.elastic.co/t/grok-filter-timestamp-iso8601-appears-in-kibana-as-string/258240 "2020-12-14T14:48:14Z")
Hi all, I done a bit of rooting around google but can't find any definitive answers, so i decided to humble myself and request help directly. The problem i have is that, like many incoming messages, my log entry contai… --- ## [Ideas to Normalize and join](https://discuss.elastic.co/t/ideas-to-normalize-and-join/258543)
**Author:** [@surphix](https://discuss.elastic.co/u/surphix)\ **Replies:** 2\ **Last updated:** [December 14, 2020, 2:08pm UTC](https://discuss.elastic.co/t/ideas-to-normalize-and-join/258543 "2020-12-14T14:08:43Z")
Hello everyone, I am working on a project to integrate two existing indexes (30-50M records each) into one by joining across a common field. Unfortunately as I understand Elasticsearch does not support joins like SQL. I… --- ## [MS SQL+ ELASTICSEARCH](https://discuss.elastic.co/t/ms-sql-elasticsearch/258563)
**Author:** [@pmate](https://discuss.elastic.co/u/pmate)\ **Replies:** 6\ **Last updated:** [December 14, 2020, 1:02pm UTC](https://discuss.elastic.co/t/ms-sql-elasticsearch/258563 "2020-12-14T13:02:21Z")
Hy everybody! I am new in elasticsearch and beginner in docker also. I need to know what is the best way to connect an ms sql data base to an elastichsearch docker instance? Thanks for Help! --- ## [Elastic cluster "Received ban for the parent \[channel closed\]", Apache Metron "listener timeout after waiting for"](https://discuss.elastic.co/t/elastic-cluster-received-ban-for-the-parent-channel-closed-apache-metron-listener-timeout-after-waiting-for/258535)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 13\ **Last updated:** [December 14, 2020, 12:16pm UTC](https://discuss.elastic.co/t/elastic-cluster-received-ban-for-the-parent-channel-closed-apache-metron-listener-timeout-after-waiting-for/258535 "2020-12-14T12:16:32Z")
Hello, we using ES cluster with 3 nodes, each datanode. We faced with problem that sometimes we can't write into our cluster using Apache Metron : java.io.IOException: listener timeout after waiting for \[60000\] ms at or… --- ## [Appeared \_grokparsefailure, unable to parse specific lines from log file](https://discuss.elastic.co/t/appeared-grokparsefailure-unable-to-parse-specific-lines-from-log-file/258566)
**Author:** [@Polak](https://discuss.elastic.co/u/Polak)\ **Replies:** 0\ **Last updated:** [December 14, 2020, 10:50am UTC](https://discuss.elastic.co/t/appeared-grokparsefailure-unable-to-parse-specific-lines-from-log-file/258566 "2020-12-14T10:50:57Z")
I have this kind of log: https://pastebin.com/ztXijyNV I would like to drop all events except the lines with "INFO -- :". Logs are gathered by filebeat and then they are send to logstash. Important data are in log insid… --- ## [Elasticsearch Saved Search with Group By](https://discuss.elastic.co/t/elasticsearch-saved-search-with-group-by/257823)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 15\ **Last updated:** [December 14, 2020, 11:47am UTC](https://discuss.elastic.co/t/elasticsearch-saved-search-with-group-by/257823 "2020-12-14T11:47:36Z")
index\_name: my\_data-2020-12-01 ticket\_number: T123 ticket\_status: OPEN ticket\_updated\_time: 2020-12-01 12:22:12 index\_name: my\_data-2020-12-01 ticket\_number: T124 ticket\_status: OPEN ticket\_updated\_time: 2020-12… --- ## [Tag Cloud to only show current value](https://discuss.elastic.co/t/tag-cloud-to-only-show-current-value/258165)
**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\ **Replies:** 7\ **Last updated:** [December 14, 2020, 9:52am UTC](https://discuss.elastic.co/t/tag-cloud-to-only-show-current-value/258165 "2020-12-14T09:52:53Z")
I am reading data in from a machine tool and I would like to visualize the current status. My document looks like this @timestamp Dec 9, 2020 @ 10:44:00.867 @version 1 Events.Execution.@@data INTERRUPTED Events.Execut… --- ## [Replace Old Data From Logstash](https://discuss.elastic.co/t/replace-old-data-from-logstash/258538)
**Author:** [@rehannali](https://discuss.elastic.co/u/rehannali)\ **Replies:** 1\ **Last updated:** [December 14, 2020, 8:36am UTC](https://discuss.elastic.co/t/replace-old-data-from-logstash/258538 "2020-12-14T08:36:30Z")
Hi, I using MySql to dumb data into elasticsearch. It runs every 5 mins and got duplicate results. I want to replace data so there will be no duplicate entries in it. How can i achieve this? P.S. I need to replace who… --- ## [Elasticsearch repositoryが作成できない](https://discuss.elastic.co/t/elasticsearch-repository/258383)
**Author:** [@\_Username](https://discuss.elastic.co/u/_Username)\ **Replies:** 2\ **Last updated:** [December 14, 2020, 7:19am UTC](https://discuss.elastic.co/t/elasticsearch-repository/258383 "2020-12-14T07:19:06Z")
【問合せ内容】 Elasticsearchのsnapshot取得のため、リポジトリを作成しようとしているが、【現象】エラーが発生してリポジトリを作成できない。 同じ事象の情報や、原因調査方法など、助言をいただきたく、宜しくお願いいたします。 【環境】 Windows10 PRO(バージョン 1909)(※開発環境のため、スタンドアロン) Elasticsearch 7.9.2 kibana 7.9.2 【参考】 スナップシ… --- ## [How to enable SO\_KEEPALIVE with the Java HighLevel Rest client](https://discuss.elastic.co/t/how-to-enable-so-keepalive-with-the-java-highlevel-rest-client/188979)
**Author:** [@menardorama](https://discuss.elastic.co/u/menardorama)\ **Replies:** 1\ **Last updated:** [December 14, 2020, 7:05am UTC](https://discuss.elastic.co/t/how-to-enable-so-keepalive-with-the-java-highlevel-rest-client/188979 "2020-12-14T07:05:02Z")
Hi, First of all I am not a Java developper but a Sysadmin. We are hosting an java microservice application that is using Elasticsearch on a Kubernetes platform. We are facing some « Connection Reset » on the client s… --- ## [Hive connection and data ingestion](https://discuss.elastic.co/t/hive-connection-and-data-ingestion/256797)
**Author:** [@irfangk1](https://discuss.elastic.co/u/irfangk1)\ **Replies:** 1\ **Last updated:** [December 14, 2020, 6:37am UTC](https://discuss.elastic.co/t/hive-connection-and-data-ingestion/256797 "2020-12-14T06:37:14Z")
Hi, I want to connect Hive with Elastic and then ingest data into it. Please share the steps/process --- ## [Forming Index name for Elasticsearch plugin](https://discuss.elastic.co/t/forming-index-name-for-elasticsearch-plugin/258398)
**Author:** [@s0umen](https://discuss.elastic.co/u/s0umen)\ **Replies:** 6\ **Last updated:** [December 14, 2020, 6:18am UTC](https://discuss.elastic.co/t/forming-index-name-for-elasticsearch-plugin/258398 "2020-12-14T06:18:20Z")
I am sending Linux system logs using filebeat to logstash. my "logstash.conf" file is something like below (within double Line). I am trying to name index dynamically using "type" variable. But when I view it in Kibana… --- ## [Is it possible to build elasticsearch-range-aggretaion-of-aggregation](https://discuss.elastic.co/t/is-it-possible-to-build-elasticsearch-range-aggretaion-of-aggregation/258537)
**Author:** [@Ju\_Cheng](https://discuss.elastic.co/u/Ju_Cheng)\ **Replies:** 0\ **Last updated:** [December 14, 2020, 5:34am UTC](https://discuss.elastic.co/t/is-it-possible-to-build-elasticsearch-range-aggretaion-of-aggregation/258537 "2020-12-14T05:34:42Z")
I am new to elasticsearch and my log are about users and the conferences they participate, like {"userid": "user1", "conferencesId": "c2", "action":"blabla" ... } {"userid": "user2", "conferencesId": "c2", "action":"bla… --- ## [Change index file name from logstash command](https://discuss.elastic.co/t/change-index-file-name-from-logstash-command/258532)
**Author:** [@Aryaman\_Gupta](https://discuss.elastic.co/u/Aryaman_Gupta)\ **Replies:** 0\ **Last updated:** [December 14, 2020, 4:54am UTC](https://discuss.elastic.co/t/change-index-file-name-from-logstash-command/258532 "2020-12-14T04:54:46Z")
Is there any way to give custom name to index file in logstash config file every-time I run log-stash command? output { elasticsearch { hosts =\> \["localhost:9200"\] index =\> "global7679-%{+YYYY.MM.dd}" \<----- Need to … --- ## [ES operator log rotation](https://discuss.elastic.co/t/es-operator-log-rotation/256494)
**Author:** [@Ravi\_Gusain](https://discuss.elastic.co/u/Ravi_Gusain)\ **Replies:** 6\ **Last updated:** [December 14, 2020, 4:12am UTC](https://discuss.elastic.co/t/es-operator-log-rotation/256494 "2020-12-14T04:12:54Z")
Hi, What's the by default log rotation policy for ES operator? I have created master node of 1G, want to understand chances of it getting filled with the logs. Thanks Ravi --- ## [Need help in writing DSL](https://discuss.elastic.co/t/need-help-in-writing-dsl/258451)
**Author:** [@Vikas\_Rathore](https://discuss.elastic.co/u/Vikas_Rathore)\ **Replies:** 1\ **Last updated:** [December 13, 2020, 1:47pm UTC](https://discuss.elastic.co/t/need-help-in-writing-dsl/258451 "2020-12-13T13:47:31Z")
I searched a lot but couldn't able to write a proper KQL. I am trying to search a string "error" in message field AND field kubernetes.pod.name must contain test-\* I tried this but it's not working { "size": 1, "qu… --- ## [How to deploy logstash with persistent volume on kubernetes?](https://discuss.elastic.co/t/how-to-deploy-logstash-with-persistent-volume-on-kubernetes/258505)
**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\ **Replies:** 0\ **Last updated:** [December 13, 2020, 1:17pm UTC](https://discuss.elastic.co/t/how-to-deploy-logstash-with-persistent-volume-on-kubernetes/258505 "2020-12-13T13:17:59Z")
Using GKE to deploy logstash by statefulset kind with pvc. Also need to install an output plugin. When don't use while true; do sleep 1000; done; in container's command args, it can't deploy with pvc successfully. The … --- ## [Null and nil](https://discuss.elastic.co/t/null-and-nil/258507)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 0\ **Last updated:** [December 13, 2020, 1:25pm UTC](https://discuss.elastic.co/t/null-and-nil/258507 "2020-12-13T13:25:44Z")
Hello everyone! I have a grok pattern which some of its fields may include "null" values. How am I supposed to show null in kibana? or logstash output? I have defined the pattern as number for those fields. input { … --- ## [Stop Words something missing](https://discuss.elastic.co/t/stop-words-something-missing/258504)
**Author:** [@ElGringo](https://discuss.elastic.co/u/ElGringo)\ **Replies:** 0\ **Last updated:** [December 13, 2020, 12:54pm UTC](https://discuss.elastic.co/t/stop-words-something-missing/258504 "2020-12-13T12:54:07Z")
Hi, I'm trying to use stop words with ELK, everything seems ok but when I'm inserting a new value the filter does not apply. Using \_analyze it works ... I think something is wrong in my mapping but I don't find what. Th… --- ## [Deploying elasticsearch cluster on kubernetes issue](https://discuss.elastic.co/t/deploying-elasticsearch-cluster-on-kubernetes-issue/258474)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 8\ **Last updated:** [December 13, 2020, 10:24am UTC](https://discuss.elastic.co/t/deploying-elasticsearch-cluster-on-kubernetes-issue/258474 "2020-12-13T10:24:44Z")
Hello, I am trying to deploy elasticsearch 7.7.1 on kubernetes into a 3 node cluster. I have tried following the documentation for it and when I run kubectl apply -f \.yaml I am getting the following error: … --- ## [Dec 13th, 2020: \[EN\] Making it personal: Tailoring content with signed search keys in App Search](https://discuss.elastic.co/t/dec-13th-2020-en-making-it-personal-tailoring-content-with-signed-search-keys-in-app-search/257827)
**Author:** [@orhantoy](https://discuss.elastic.co/u/orhantoy)\ **Replies:** 0\ **Last updated:** [December 13, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-13th-2020-en-making-it-personal-tailoring-content-with-signed-search-keys-in-app-search/257827 "2020-12-13T08:00:05Z")
Signed search keys in Elastic App Search give you more control of a user's search experience. You can tailor the experience to show results you know are more relevant to the specific user while also letting you control w… --- ## [Logstash UDP input buffer](https://discuss.elastic.co/t/logstash-udp-input-buffer/258480)
**Author:** [@Hendrik1](https://discuss.elastic.co/u/Hendrik1)\ **Replies:** 7\ **Last updated:** [December 12, 2020, 7:29pm UTC](https://discuss.elastic.co/t/logstash-udp-input-buffer/258480 "2020-12-12T19:29:22Z")
Hi, I am using the logstash UDP input to receive my firewall syslog messages, this seems to work fine. However, I just enabled the reverse dns lookup filter on the ip's, but now I keep wondering what happens when the U… --- ## [Detect epoch as Date field](https://discuss.elastic.co/t/detect-epoch-as-date-field/258477)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 1\ **Last updated:** [December 12, 2020, 3:24pm UTC](https://discuss.elastic.co/t/detect-epoch-as-date-field/258477 "2020-12-12T15:24:17Z")
Hi every one, i have an index (name: x-001) with a date field: { "time": { "type": "date" } } I insert docs into index like this: time: 1607782041000 elasticsearch automatically convert epoch to dateti… --- ## [Aggregate every field](https://discuss.elastic.co/t/aggregate-every-field/258467)
**Author:** [@5minutes](https://discuss.elastic.co/u/5minutes)\ **Replies:** 0\ **Last updated:** [December 12, 2020, 6:14am UTC](https://discuss.elastic.co/t/aggregate-every-field/258467 "2020-12-12T06:14:39Z")
hi, lets consider we have 2 records: { "@timestamp": "2020-12-11T11:13:00", "time": { "a": 200, "b": 2 } } { "@timestamp": "2020-12-11T12:13:00", "time": { … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1113) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1115)