# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1153 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1154 --- ## [Parser error when logstash reading updated CSV file](https://discuss.elastic.co/t/parser-error-when-logstash-reading-updated-csv-file/254813)
**Author:** [@errupeshmca](https://discuss.elastic.co/u/errupeshmca)\ **Replies:** 2\ **Last updated:** [November 13, 2020, 7:19pm UTC](https://discuss.elastic.co/t/parser-error-when-logstash-reading-updated-csv-file/254813 "2020-11-13T19:19:58Z")
Hi, Logstash giving parser error whenever CSV file gets updated with new records. However logstash works fine when you delete the old csv file and replace with new updated CSV file, but in that scenerio logstash all rec… --- ## [Encrypt data volume for Elasticsearch service on Azure](https://discuss.elastic.co/t/encrypt-data-volume-for-elasticsearch-service-on-azure/254980)
**Author:** [@anshuman](https://discuss.elastic.co/u/anshuman)\ **Replies:** 2\ **Last updated:** [November 13, 2020, 7:10pm UTC](https://discuss.elastic.co/t/encrypt-data-volume-for-elasticsearch-service-on-azure/254980 "2020-11-13T19:10:33Z")
Do we have an option to encrypt the Elasticsearch data (or volume) which is offered as platform as a service on Azure using our own encryption key? --- ## [Elastic Query Regex](https://discuss.elastic.co/t/elastic-query-regex/254973)
**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\ **Replies:** 3\ **Last updated:** [November 13, 2020, 5:20pm UTC](https://discuss.elastic.co/t/elastic-query-regex/254973 "2020-11-13T17:20:33Z")
I am trying to write a regex query but it is not working accordingly am i doing something wrong I need to get back all values that ends in SVC in the field winlog.event\_data.TargetUserName { "query": { "regexp": { "… --- ## [Remove results with same id from Elasticsearch search result](https://discuss.elastic.co/t/remove-results-with-same-id-from-elasticsearch-search-result/255365)
**Author:** [@philippd](https://discuss.elastic.co/u/philippd)\ **Replies:** 1\ **Last updated:** [November 13, 2020, 4:37pm UTC](https://discuss.elastic.co/t/remove-results-with-same-id-from-elasticsearch-search-result/255365 "2020-11-13T16:37:43Z")
Hi, I just joined the forums and would like to aks you for a little help with the following question I am not able to answer reading the docs: Let's assume we have a search result with 3 documents. Two of them share a … --- ## [How to check number of IPs being resolved by the Elasticsearch client?](https://discuss.elastic.co/t/how-to-check-number-of-ips-being-resolved-by-the-elasticsearch-client/255318)
**Author:** [@prasad98](https://discuss.elastic.co/u/prasad98)\ **Replies:** 2\ **Last updated:** [November 13, 2020, 3:53pm UTC](https://discuss.elastic.co/t/how-to-check-number-of-ips-being-resolved-by-the-elasticsearch-client/255318 "2020-11-13T15:53:38Z")
I've some microservices which are dependent on the Elasticsearch cluster in production. This cluster is common for every microservice. Just to verify how many services IP is being resolved by Elasticsearch cluster, is t… --- ## [Have 2 operator versions in elasticsearch cluster](https://discuss.elastic.co/t/have-2-operator-versions-in-elasticsearch-cluster/255302)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 1\ **Last updated:** [November 13, 2020, 3:24pm UTC](https://discuss.elastic.co/t/have-2-operator-versions-in-elasticsearch-cluster/255302 "2020-11-13T15:24:07Z")
Will it be possible to have 2 operator versions like 1.1.0 and 1.2.1 in a single elasticsearch cluster. --- ## [Unable to post the client's cert to Webapi](https://discuss.elastic.co/t/unable-to-post-the-clients-cert-to-webapi/255076)
**Author:** [@sdr](https://discuss.elastic.co/u/sdr)\ **Replies:** 2\ **Last updated:** [November 13, 2020, 2:31pm UTC](https://discuss.elastic.co/t/unable-to-post-the-clients-cert-to-webapi/255076 "2020-11-13T14:31:40Z")
I'm using elk version 6.7.0. Issue with sending the client certificate using logstash output plugin to webapi. --- ## [How to manage long length text in data table viz?](https://discuss.elastic.co/t/how-to-manage-long-length-text-in-data-table-viz/255339)
**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\ **Replies:** 2\ **Last updated:** [November 13, 2020, 2:31pm UTC](https://discuss.elastic.co/t/how-to-manage-long-length-text-in-data-table-viz/255339 "2020-11-13T14:31:28Z")
Hello everyone, Below is the screenshot of a data table viz. here I have a lengthy column (story.keyword), I don't want to display so much of text. Is there any way to wrap it up and display only when needed ?? … --- ## [Make visualizations (metric and table/topn) with weighted average](https://discuss.elastic.co/t/make-visualizations-metric-and-table-topn-with-weighted-average/255316)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 1\ **Last updated:** [November 13, 2020, 1:48pm UTC](https://discuss.elastic.co/t/make-visualizations-metric-and-table-topn-with-weighted-average/255316 "2020-11-13T13:48:52Z")
Hi there, I'm struggling trying to visualize a Metric visualization with a given weighted average over a certain timespan. Let's consider the following scenario: index: sample\_shops\_data fields of interest: day (date)… --- ## [Optimize bool filter query](https://discuss.elastic.co/t/optimize-bool-filter-query/255348)
**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\ **Replies:** 0\ **Last updated:** [November 13, 2020, 1:45pm UTC](https://discuss.elastic.co/t/optimize-bool-filter-query/255348 "2020-11-13T13:45:39Z")
Hi, I'm using ES 7.10 deployed in Elastic Cloud. I developed a Java application that use High Level REST client. I want to make a query like this: index \>=1.67 && index\<=1.67 AND (sphereMin\<=-7 && sphereMax \>=-7 && cyl… --- ## [Query Statistics](https://discuss.elastic.co/t/query-statistics/250815)
**Author:** [@Escalus](https://discuss.elastic.co/u/Escalus)\ **Replies:** 3\ **Last updated:** [November 13, 2020, 12:04pm UTC](https://discuss.elastic.co/t/query-statistics/250815 "2020-11-13T12:04:22Z")
Hello, is there a way to get statistics for each query term? For each document a hitlist of terms from the query and in which field. Hightlight comes close, but it gives the stammed(hunspell) hits back and not the … --- ## [Not able to start enterprise search once I change the ip adress of ent\_search.listen\_host](https://discuss.elastic.co/t/not-able-to-start-enterprise-search-once-i-change-the-ip-adress-of-ent-search-listen-host/255315)
**Author:** [@Axelle\_Eynde](https://discuss.elastic.co/u/Axelle_Eynde)\ **Replies:** 4\ **Last updated:** [November 13, 2020, 11:22am UTC](https://discuss.elastic.co/t/not-able-to-start-enterprise-search-once-i-change-the-ip-adress-of-ent-search-listen-host/255315 "2020-11-13T11:22:33Z")
Hi, I'm running enterprise search 7.9.3 with docker on a server. When I try to run it on the localhost everything appears to be looking fine but I can't acess the interface. And when I change the ent-search.listen\_host… --- ## [How to get entire enriched "event" size (not message size)](https://discuss.elastic.co/t/how-to-get-entire-enriched-event-size-not-message-size/255184)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [November 13, 2020, 10:05am UTC](https://discuss.elastic.co/t/how-to-get-entire-enriched-event-size-not-message-size/255184 "2020-11-13T10:05:53Z")
hi As per the link below, we got the size of the "message" field But after doing transformation, we need to have the size of the final event also. How to get it? I tried event.set('event\_size', event.get('\_source').… --- ## [How to schedule logstash pipelibe to consume kafka input logs every 15min](https://discuss.elastic.co/t/how-to-schedule-logstash-pipelibe-to-consume-kafka-input-logs-every-15min/255320)
**Author:** [@soufian.eldouqe](https://discuss.elastic.co/u/soufian.eldouqe)\ **Replies:** 0\ **Last updated:** [November 13, 2020, 10:04am UTC](https://discuss.elastic.co/t/how-to-schedule-logstash-pipelibe-to-consume-kafka-input-logs-every-15min/255320 "2020-11-13T10:04:13Z")
Hello, I want to developp a logstash pipeline that consume heathbeat logs from filebeat that are generated every 5 minutes. the goal is to be sure that everything is working fine from my filebeat inputs to kibana. how … --- ## [How to sort aggregated based on sub aggregation's doc\_count?](https://discuss.elastic.co/t/how-to-sort-aggregated-based-on-sub-aggregations-doc-count/255195)
**Author:** [@lessless](https://discuss.elastic.co/u/lessless)\ **Replies:** 6\ **Last updated:** [November 13, 2020, 9:41am UTC](https://discuss.elastic.co/t/how-to-sort-aggregated-based-on-sub-aggregations-doc-count/255195 "2020-11-13T09:41:22Z")
Hi, I'm completely stuck trying to figure out how to sort "users" based on "status\_codes" in the following query: { "size": 0, "aggs": { "users": { "terms": { "field": "user\_id" }, … --- ## [Apply scoring after filter](https://discuss.elastic.co/t/apply-scoring-after-filter/255309)
**Author:** [@Jalendra\_Bhanarkar](https://discuss.elastic.co/u/Jalendra_Bhanarkar)\ **Replies:** 0\ **Last updated:** [November 13, 2020, 9:28am UTC](https://discuss.elastic.co/t/apply-scoring-after-filter/255309 "2020-11-13T09:28:45Z")
I want the score to be calculated after the filter is applied. Right now, the score gets calculated considering all the documents in the index. And other entity documents interfere with the score calculation which I don'… --- ## [How to create aging column for number of days wanted](https://discuss.elastic.co/t/how-to-create-aging-column-for-number-of-days-wanted/254556)
**Author:** [@khairul\_faiz](https://discuss.elastic.co/u/khairul_faiz)\ **Replies:** 3\ **Last updated:** [November 13, 2020, 8:52am UTC](https://discuss.elastic.co/t/how-to-create-aging-column-for-number-of-days-wanted/254556 "2020-11-13T08:52:20Z")
hi can anyone share their experience in creating aging column? the process is i need to calculate aging of days that a payment made between number of days invoice date - invoice due date thank you for sharing --- ## [java.lang.NoClassDefFoundError: org/elasticsearch/script/mustache/SearchTemplateRequestBuilder](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-org-elasticsearch-script-mustache-searchtemplaterequestbuilder/255306)
**Author:** [@rakeshdkaatkar](https://discuss.elastic.co/u/rakeshdkaatkar)\ **Replies:** 0\ **Last updated:** [November 13, 2020, 8:44am UTC](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-org-elasticsearch-script-mustache-searchtemplaterequestbuilder/255306 "2020-11-13T08:44:43Z")
\[2020-11-13T14:09:32,460\]\[WARN \]\[o.e.h.AbstractHttpServerTransport\] \[L-356004158\] caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/0:0:0:0:0:0:0:1:9200, remoteAddres… --- ## [Query - Regexp with special characters fails when used within multiple must\_not](https://discuss.elastic.co/t/query-regexp-with-special-characters-fails-when-used-within-multiple-must-not/255147)
**Author:** [@gonzalo2kx](https://discuss.elastic.co/u/gonzalo2kx)\ **Replies:** 3\ **Last updated:** [November 13, 2020, 8:23am UTC](https://discuss.elastic.co/t/query-regexp-with-special-characters-fails-when-used-within-multiple-must-not/255147 "2020-11-13T08:23:49Z")
Good day, I am having issues when using regexp clause in my query for identifying and filtering out log messages produced by the filebeat, packetbeat, metricbeat, and auditbeat processes which contain the patterns below… --- ## [How to express SQL in Logstash](https://discuss.elastic.co/t/how-to-express-sql-in-logstash/255049)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 1\ **Last updated:** [November 13, 2020, 8:08am UTC](https://discuss.elastic.co/t/how-to-express-sql-in-logstash/255049 "2020-11-13T08:08:13Z")
Hello Team I am using Logstash and Elasticsearch version 7.8.0. I want to write query in logstash for input plugin of elasticsearch as select userId from myindex I am unable to achieve same in logstash ... --- ## [Kibana Heatmap: Use discrete values or labels in legend](https://discuss.elastic.co/t/kibana-heatmap-use-discrete-values-or-labels-in-legend/254548)
**Author:** [@FloJe](https://discuss.elastic.co/u/FloJe)\ **Replies:** 4\ **Last updated:** [November 13, 2020, 7:52am UTC](https://discuss.elastic.co/t/kibana-heatmap-use-discrete-values-or-labels-in-legend/254548 "2020-11-13T07:52:27Z")
Dear Forum, I have a question regarding Kibana Heatmap visualisation. I'm collecting logs from an application and these logs have an Apachee syslog level, i.e. error, warning, info. Now I want to visualize 10 minute bi… --- ## [Can't change port for logstash](https://discuss.elastic.co/t/cant-change-port-for-logstash/255299)
**Author:** [@Hi\_u\_Nguy\_n\_Dang](https://discuss.elastic.co/u/Hi_u_Nguy_n_Dang)\ **Replies:** 0\ **Last updated:** [November 13, 2020, 7:18am UTC](https://discuss.elastic.co/t/cant-change-port-for-logstash/255299 "2020-11-13T07:18:33Z")
How can I change from port 5044 to 4000 for filebeat/logstash guys, it show this error Tks in advance --- ## [Orchestration of configuration](https://discuss.elastic.co/t/orchestration-of-configuration/255185)
**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\ **Replies:** 3\ **Last updated:** [November 13, 2020, 6:01am UTC](https://discuss.elastic.co/t/orchestration-of-configuration/255185 "2020-11-13T06:01:58Z")
Hello, How are folks managing configuration of ES and Kibana from source code? For example, we have a number of Spaces, Users, Dashboards, Alerts, Pipeline configurations etc that we want to version and test through di… --- ## [Ingest xml file using Logstash](https://discuss.elastic.co/t/ingest-xml-file-using-logstash/255113)
**Author:** [@Priyanka3](https://discuss.elastic.co/u/Priyanka3)\ **Replies:** 9\ **Last updated:** [November 12, 2020, 8:29pm UTC](https://discuss.elastic.co/t/ingest-xml-file-using-logstash/255113 "2020-11-12T20:29:55Z")
Hi, I am very new to Elastic search and Logstash. But I am trying to ingest using Logstash. My xml file looks something like this \ **Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 1\ **Last updated:** [November 13, 2020, 4:12am UTC](https://discuss.elastic.co/t/adaptive-replica-selection-in-es-version-8/255277 "2020-11-13T04:12:33Z") Hi Does anyone know what adaptive replica selection mean? Below was extracted from https://www.elastic.co/guide/en/elasticsearch/reference/master/breaking-changes-8.0.html Search and get requests are now routed to s… --- ## [Kibana is running but can't access 5601 port](https://discuss.elastic.co/t/kibana-is-running-but-cant-access-5601-port/255272)
**Author:** [@spate141](https://discuss.elastic.co/u/spate141)\ **Replies:** 3\ **Last updated:** [November 13, 2020, 3:31am UTC](https://discuss.elastic.co/t/kibana-is-running-but-cant-access-5601-port/255272 "2020-11-13T03:31:30Z")
I'm trying to run the Kibana on 5601 port & seems like ES & Kibana service are running. But I can't access the Kibana portal or the 5601 port. Any suggestion? Elasticsearch: \> curl localhost:9200 { "name" : "node-1",… --- ## [Need suggestion for mapping](https://discuss.elastic.co/t/need-suggestion-for-mapping/255281)
**Author:** [@amanjain](https://discuss.elastic.co/u/amanjain)\ **Replies:** 0\ **Last updated:** [November 13, 2020, 3:03am UTC](https://discuss.elastic.co/t/need-suggestion-for-mapping/255281 "2020-11-13T03:03:12Z")
Hi I am using category, which is a hierarchical field represented as level1\>level2\>level3\>level4 I want to make a query that can apply filter on level2 or level3 individually. So, I am using simple\_pattern\_split tokeni… --- ## [Unable to start Elasticsearch 7.9.3](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-9-3/255280)
**Author:** [@mdAsh](https://discuss.elastic.co/u/mdAsh)\ **Replies:** 0\ **Last updated:** [November 13, 2020, 2:45am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-9-3/255280 "2020-11-13T02:45:37Z")
Hi, Faced similar issue by: https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-6-2/254128 https://discuss.elastic.co/t/rpm-upgrade-from-7-1-1-to-7-5-0-fatal-error/210419 MainError: Caused by: java.security… --- ## [Fatal Error Block in setup after succesfull connection](https://discuss.elastic.co/t/fatal-error-block-in-setup-after-succesfull-connection/255255)
**Author:** [@Kiwito](https://discuss.elastic.co/u/Kiwito)\ **Replies:** 3\ **Last updated:** [November 12, 2020, 11:49pm UTC](https://discuss.elastic.co/t/fatal-error-block-in-setup-after-succesfull-connection/255255 "2020-11-12T23:49:24Z")
Hi there, I have been trying to solve this problem for a day. I couldn't find any solutions. \[2020-11-12T20:07:47,943\]\[INFO \]\[logstash.filters.geoip \]\[main\] Using geoip database {:path=\>"/opt/logstash/vendor/geoi… --- ## [How to convert strings to time format](https://discuss.elastic.co/t/how-to-convert-strings-to-time-format/255267)
**Author:** [@Stephenson](https://discuss.elastic.co/u/Stephenson)\ **Replies:** 0\ **Last updated:** [November 12, 2020, 11:01pm UTC](https://discuss.elastic.co/t/how-to-convert-strings-to-time-format/255267 "2020-11-12T23:01:31Z")
Hello everyone, Since a few months, I started working with logstash to small programs like reading a log. I have some trouble understanding the development. I have this line of log. 08:19:1915 , Error trae\_1dato I… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1152) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1154)