# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1129 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1130 --- ## [External alerts via API](https://discuss.elastic.co/t/external-alerts-via-api/257293)
**Author:** [@Derick\_Jansen](https://discuss.elastic.co/u/Derick_Jansen)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 12:26pm UTC](https://discuss.elastic.co/t/external-alerts-via-api/257293 "2020-12-02T12:26:21Z")
Hi I am using the /detection\_engine/signals/search endpoint to grab detections but this endpoint doesn't include External alerts (eg. Crowdstrike). Is there an endpoint or other method to programmatically collect extern… --- ## [Logstash splitting and tagging events](https://discuss.elastic.co/t/logstash-splitting-and-tagging-events/256571)
**Author:** [@John\_Smith](https://discuss.elastic.co/u/John_Smith)\ **Replies:** 7\ **Last updated:** [December 2, 2020, 12:02pm UTC](https://discuss.elastic.co/t/logstash-splitting-and-tagging-events/256571 "2020-12-02T12:02:15Z")
I need to ingest following json as separated events { "test1": {some nested json here}, "test2": {some nested json here}, "test3": {some nested json here}, "test4": {some nested json here} } I have 3 problems: When … --- ## [Index management](https://discuss.elastic.co/t/index-management/254724)
**Author:** [@antoteo](https://discuss.elastic.co/u/antoteo)\ **Replies:** 7\ **Last updated:** [December 2, 2020, 12:00pm UTC](https://discuss.elastic.co/t/index-management/254724 "2020-12-02T12:00:38Z")
Hello i have a case that people will upload their dataset excels csvs and other with python. their data will have different types, i want them to be able to search from all data. I know create one index in every upload b… --- ## [Is there a good way to run benchmark to logstash on GKE?](https://discuss.elastic.co/t/is-there-a-good-way-to-run-benchmark-to-logstash-on-gke/257350)
**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 11:37am UTC](https://discuss.elastic.co/t/is-there-a-good-way-to-run-benchmark-to-logstash-on-gke/257350 "2020-12-02T11:37:50Z")
Here is an official tool but seems old: https://github.com/elastic/logstash-benchmark-tools Google provides a way but for security: https://cloud.google.com/blog/products/containers-kubernetes/gke-cis-benchmarks-deliver… --- ## [Does interval query work with Fast Vector Highlight?](https://discuss.elastic.co/t/does-interval-query-work-with-fast-vector-highlight/257262)
**Author:** [@zeusfsx](https://discuss.elastic.co/u/zeusfsx)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 6:26pm UTC](https://discuss.elastic.co/t/does-interval-query-work-with-fast-vector-highlight/257262 "2020-12-01T18:26:03Z")
I have a document, for example: { "text": "Index Down Jones", "title": "Index Down Jones" } And my mapping for text and title the same: "mappings": { "properties": { "text": { "type": "text… --- ## [Split a string to array/list, greedy match](https://discuss.elastic.co/t/split-a-string-to-array-list-greedy-match/255305)
**Author:** [@blukit](https://discuss.elastic.co/u/blukit)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 10:58am UTC](https://discuss.elastic.co/t/split-a-string-to-array-list-greedy-match/255305 "2020-12-02T10:58:11Z")
Hi all... I have a message field that contains multiline string. Need to split it to an array for each line, because will do some logic based on a certain lines. But so far only able to catch the first line. A simplifi… --- ## [Setting the TLS ServerName to an IP address is not permitted by RFC 6066](https://discuss.elastic.co/t/setting-the-tls-servername-to-an-ip-address-is-not-permitted-by-rfc-6066/257090)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 4\ **Last updated:** [November 30, 2020, 4:36pm UTC](https://discuss.elastic.co/t/setting-the-tls-servername-to-an-ip-address-is-not-permitted-by-rfc-6066/257090 "2020-11-30T16:36:37Z")
Hello, I am using Elasticsearch and kibana 8.0.0, and it was working perfectly. Today I run git pull and now kibana is not working anymore, when I try to run it, I am getting these errors: (node:48280) \[DEP0123\] Depre… --- ## [Recent data not being indexed](https://discuss.elastic.co/t/recent-data-not-being-indexed/257343)
**Author:** [@jafri6](https://discuss.elastic.co/u/jafri6)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 10:45am UTC](https://discuss.elastic.co/t/recent-data-not-being-indexed/257343 "2020-12-02T10:45:22Z")
My ELK system has been running for over a week now. All components - beats, logstash, ES and Kibana are up and running. I suddenly stopped receiving data for the past 2 days. The log files exist but I don't see those in… --- ## [Elasticsearch snapshot supported on a non-shared filesystem?](https://discuss.elastic.co/t/elasticsearch-snapshot-supported-on-a-non-shared-filesystem/257317)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 4\ **Last updated:** [December 2, 2020, 10:44am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-supported-on-a-non-shared-filesystem/257317 "2020-12-02T10:44:10Z")
Acc to elastic 6.8 docs - https://www.elastic.co/guide/en/elasticsearch/reference/6.8/modules-snapshots.html, it is mentioned that - "we can take a snapshot of individual indices or of the entire cluster and store it in … --- ## [Delete by query returns version\_conflict\_engine\_exception](https://discuss.elastic.co/t/delete-by-query-returns-version-conflict-engine-exception/257338)
**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 10:26am UTC](https://discuss.elastic.co/t/delete-by-query-returns-version-conflict-engine-exception/257338 "2020-12-02T10:26:26Z")
Hello, I am trying to delete some old documents which are no longer needed using the https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-delete-by-query.html POST /aws-elb-2019.01/\_delete\_by\_query?requ… --- ## [HeartBeat : missing pings](https://discuss.elastic.co/t/heartbeat-missing-pings/256680)
**Author:** [@iDavico](https://discuss.elastic.co/u/iDavico)\ **Replies:** 6\ **Last updated:** [December 1, 2020, 6:36am UTC](https://discuss.elastic.co/t/heartbeat-missing-pings/256680 "2020-12-01T06:36:44Z")
Hello, I'm using hearbeat for monitoring my java application. I have some problems with the pings, when my application is really slow, hearbeat does not log the pings in elasticsearch. It's like hearbeat is stopped but… --- ## [Basic question about: Elasticsearch.hosts and discovery.seed.hosts](https://discuss.elastic.co/t/basic-question-about-elasticsearch-hosts-and-discovery-seed-hosts/257326)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 10:00am UTC](https://discuss.elastic.co/t/basic-question-about-elasticsearch-hosts-and-discovery-seed-hosts/257326 "2020-12-02T10:00:56Z")
Hello, I have 2 basic questions about Elastic stack. in the elasticsearch.yml file in the field discovery.seed.hosts should I write the IP address of all the nodes \[master, data ...\], or just master nodes ? (in my case… --- ## [Is there any way to run logstash from the kibana UI](https://discuss.elastic.co/t/is-there-any-way-to-run-logstash-from-the-kibana-ui/257058)
**Author:** [@Aryaman\_Gupta](https://discuss.elastic.co/u/Aryaman_Gupta)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 9:54am UTC](https://discuss.elastic.co/t/is-there-any-way-to-run-logstash-from-the-kibana-ui/257058 "2020-12-02T09:54:57Z")
I want to know if it is possible to run log-stash from the kibana UI instead of going to terminal and then providing the config file and running it. Can we do all these steps like, 1 writing config file for log-stash … --- ## [Aggregation filter half work](https://discuss.elastic.co/t/aggregation-filter-half-work/257038)
**Author:** [@Andex](https://discuss.elastic.co/u/Andex)\ **Replies:** 3\ **Last updated:** [December 2, 2020, 9:54am UTC](https://discuss.elastic.co/t/aggregation-filter-half-work/257038 "2020-12-02T09:54:19Z")
Hi, i need to aggregate 6 log file , i have 6 grok parser, each for one of my logs. This is my conf filter { if \[type\] == "application\_log" { grok { match =\> \[ "message", "%{DATA:jcaption\_id}\\s+%{TIME:orari… --- ## [Add fields in an existing Kibana Index Pattern](https://discuss.elastic.co/t/add-fields-in-an-existing-kibana-index-pattern/257096)
**Author:** [@Baptiste\_Orsoni](https://discuss.elastic.co/u/Baptiste_Orsoni)\ **Replies:** 3\ **Last updated:** [December 2, 2020, 9:41am UTC](https://discuss.elastic.co/t/add-fields-in-an-existing-kibana-index-pattern/257096 "2020-12-02T09:41:20Z")
Hello everyone, I would like to know if it's possible to add new fields to an existing index pattern in Kibana. I've had new parameters to existings logs recently but they haven't been ingested well (sort of ?) because… --- ## [Dec 2nd, 2020: \[DE\] Aufgemerkt & zugehört! Bessere Suchresultate mit phonetischer Suche](https://discuss.elastic.co/t/dec-2nd-2020-de-aufgemerkt-zugehort-bessere-suchresultate-mit-phonetischer-suche/257045)
**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-2nd-2020-de-aufgemerkt-zugehort-bessere-suchresultate-mit-phonetischer-suche/257045 "2020-12-02T08:00:01Z")
Tippfehler - ärgerlich, aber in Zeiten des Smartphones omnipräsent und somit auch eine Herausforderung für Suchmaschinen. Es gibt unterschiedliche Strategien, mit Tippfehlern in einer Suchmaschine umzugehen. Man kann Vor… --- ## ["Illegal argument exception" with timestamp](https://discuss.elastic.co/t/illegal-argument-exception-with-timestamp/257305)
**Author:** [@Enigmatr](https://discuss.elastic.co/u/Enigmatr)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 7:43am UTC](https://discuss.elastic.co/t/illegal-argument-exception-with-timestamp/257305 "2020-12-02T07:43:11Z")
Hi, I'm trying to create an index pattern for my logs, but I seem to be having some issues with the timestamp format, this is what I'm getting tin the Data Visualizer in Kibana: File could not be read \[illegal\_argument… --- ## [How to run logstash config file automatically after system restarts?](https://discuss.elastic.co/t/how-to-run-logstash-config-file-automatically-after-system-restarts/257177)
**Author:** [@Rahul\_Chougule](https://discuss.elastic.co/u/Rahul_Chougule)\ **Replies:** 4\ **Last updated:** [December 2, 2020, 7:26am UTC](https://discuss.elastic.co/t/how-to-run-logstash-config-file-automatically-after-system-restarts/257177 "2020-12-02T07:26:37Z")
I want to load/run my logstash config file automatically after system restarts everytime (after updates). How to do that? Thanks in advance. --- ## [Dec 1st, 2020: \[EN\] Synthetics: Finding problems before they happen](https://discuss.elastic.co/t/dec-1st-2020-en-synthetics-finding-problems-before-they-happen/254953)
**Author:** [@Ahil\_PonArul](https://discuss.elastic.co/u/Ahil_PonArul)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2020-en-synthetics-finding-problems-before-they-happen/254953 "2020-12-01T08:00:00Z")
Synthetics: Proactive Problem Detection Elastic is excited to introduce Synthetic monitoring to our Uptime solution. This allows for more advanced uptime checks beyond basic pings. Combined with our new User Experience U… --- ## [How to configure beat to automatically rotate indices without ILM (7.9.1)](https://discuss.elastic.co/t/how-to-configure-beat-to-automatically-rotate-indices-without-ilm-7-9-1/257211)
**Author:** [@igorid70](https://discuss.elastic.co/u/igorid70)\ **Replies:** 3\ **Last updated:** [December 2, 2020, 5:49am UTC](https://discuss.elastic.co/t/how-to-configure-beat-to-automatically-rotate-indices-without-ilm-7-9-1/257211 "2020-12-02T05:49:03Z")
Hi I am trying to implement an automatic indices rollover based on their size while ILM is disabled. So, in beats configuration yml (e.g. metricbeat.yml) I specified the following: setup.ilm.enabled: false output.ela… --- ## [Kibana 7.10 not loading in browser](https://discuss.elastic.co/t/kibana-7-10-not-loading-in-browser/256842)
**Author:** [@ameyk](https://discuss.elastic.co/u/ameyk)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 3:48am UTC](https://discuss.elastic.co/t/kibana-7-10-not-loading-in-browser/256842 "2020-12-02T03:48:35Z")
Hello, Kibana 7.10 is not getting loaded in browser , it is stuck at loading on browser , there is no error in kibana. We have load balancer(running with SSL) who redirect the request to apache and then apache redirect… --- ## [ELK sizing guidance](https://discuss.elastic.co/t/elk-sizing-guidance/256999)
**Author:** [@Raghava\_Reddy\_Kapu\_V](https://discuss.elastic.co/u/Raghava_Reddy_Kapu_V)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 2:48am UTC](https://discuss.elastic.co/t/elk-sizing-guidance/256999 "2020-12-02T02:48:47Z")
Hi, I am considering the ELK stack in a large telco opportunity in the MEA region as the propsosed log management solutions (Humio, Splunk Enterprise, etc,.) are turning out to be expensive in the overall solution approa… --- ## [Not properly formated XML](https://discuss.elastic.co/t/not-properly-formated-xml/257003)
**Author:** [@shani](https://discuss.elastic.co/u/shani)\ **Replies:** 0\ **Last updated:** [November 29, 2020, 7:20pm UTC](https://discuss.elastic.co/t/not-properly-formated-xml/257003 "2020-11-29T19:20:22Z")
Hi All, I have raw event logs like this \\\ **Author:** [@awer1967](https://discuss.elastic.co/u/awer1967)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 1:02am UTC](https://discuss.elastic.co/t/a-question-from-newbie-about-an-index-structure/256993 "2020-12-02T01:02:58Z") Hi there ! I am completely new in Elasticsearch so I want to query about the things unclear to me. My first question is about amount of indices. Basically I am going to get a lot of a different data from different so… --- ## [Best way to ingest data from windows c++ app](https://discuss.elastic.co/t/best-way-to-ingest-data-from-windows-c-app/257093)
**Author:** [@robderon](https://discuss.elastic.co/u/robderon)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 12:48am UTC](https://discuss.elastic.co/t/best-way-to-ingest-data-from-windows-c-app/257093 "2020-12-02T00:48:31Z")
Hello, I must create a Kibana dashboard to analyze a windows c++ application usage : screen viewed, actions, app launching, subscription etc.. Our plan is to send data from the clients to our server (not elastic) once … --- ## [Upgrading ELK stack to 7.10 along with filebeat](https://discuss.elastic.co/t/upgrading-elk-stack-to-7-10-along-with-filebeat/257099)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 12:44am UTC](https://discuss.elastic.co/t/upgrading-elk-stack-to-7-10-along-with-filebeat/257099 "2020-12-02T00:44:34Z")
Hi, currently we are using ELK stack version 7.8.0 and to push the logs to ES we are using filebeat(7.8.0). we are planning to upgrade our ELK stack to 7.10. so my doubts are 1) after upgrading ELK to 7.10 should we al… --- ## [Filtering one index with another](https://discuss.elastic.co/t/filtering-one-index-with-another/257265)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 12:22am UTC](https://discuss.elastic.co/t/filtering-one-index-with-another/257265 "2020-12-02T00:22:28Z")
So I know there is no connection between 2 indexes in Elasticsearch. However some times its impossible to completely denormalize the data. For example I have the following two indexes Parent Index Child Index. One of … --- ## [Edge\_ngram tokenizer and edge\_ngram filter don't behave the same?](https://discuss.elastic.co/t/edge-ngram-tokenizer-and-edge-ngram-filter-dont-behave-the-same/257291)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 12:10am UTC](https://discuss.elastic.co/t/edge-ngram-tokenizer-and-edge-ngram-filter-dont-behave-the-same/257291 "2020-12-02T00:10:57Z")
I'm trying to convert a field which currently uses the edge\_ngram tokenizer to use the edge\_ngram filter instead, and tokens created by the edge\_ngram filter are not scoring the same as the same tokens created by the edg… --- ## [How can achieve this with kibana?](https://discuss.elastic.co/t/how-can-achieve-this-with-kibana/257270)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 4\ **Last updated:** [December 1, 2020, 11:46pm UTC](https://discuss.elastic.co/t/how-can-achieve-this-with-kibana/257270 "2020-12-01T23:46:38Z")
Hello, i need to calculate dynamically return column, but i don't know if we can get this with kibana: formula column return = value (today) / value(yesterday) -1 @timestamp account value return… --- ## [Kibana User with diferent GMT time](https://discuss.elastic.co/t/kibana-user-with-diferent-gmt-time/256917)
**Author:** [@Samuel\_Amico](https://discuss.elastic.co/u/Samuel_Amico)\ **Replies:** 7\ **Last updated:** [December 1, 2020, 11:39pm UTC](https://discuss.elastic.co/t/kibana-user-with-diferent-gmt-time/256917 "2020-12-01T23:39:43Z")
Ok guys this is very IMPORTANT !!! I have my admin Space with my elastic superuser and I put this setting: Advance Settings -\> Timezone for date formatting = America/Belem I the other Space (Supervisor space) that has… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1128) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1130)