# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1175 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1176 --- ## [Use an array as parameter](https://discuss.elastic.co/t/use-an-array-as-parameter/253686)
**Author:** [@tallavi](https://discuss.elastic.co/u/tallavi)\ **Replies:** 0\ **Last updated:** [October 29, 2020, 12:00pm UTC](https://discuss.elastic.co/t/use-an-array-as-parameter/253686 "2020-10-29T12:00:53Z")
Hi all, I'm using Datadog Metrics Plugin. I want to use tags. I have an array of strings in my event called "datadog.tags" which I want to pass to dd\_tags, which gets an array of strings: datadog\_metrics { api\_key =\>… --- ## [Shipping logs using websocket instead filebeat to logstash](https://discuss.elastic.co/t/shipping-logs-using-websocket-instead-filebeat-to-logstash/253677)
**Author:** [@sudhakar](https://discuss.elastic.co/u/sudhakar)\ **Replies:** 1\ **Last updated:** [October 29, 2020, 11:35am UTC](https://discuss.elastic.co/t/shipping-logs-using-websocket-instead-filebeat-to-logstash/253677 "2020-10-29T11:35:49Z")
Hi, I am trying to use websocket instead of filebeat to ship the logs from a log file to logstash. I can see that the configuration for the logstash config for input is something like below: input { websocket { … --- ## [ElasticSearch 7.5.2: Scores must be positive or null exception](https://discuss.elastic.co/t/elasticsearch-7-5-2-scores-must-be-positive-or-null-exception/224872)
**Author:** [@bram](https://discuss.elastic.co/u/bram)\ **Replies:** 4\ **Last updated:** [October 29, 2020, 11:31am UTC](https://discuss.elastic.co/t/elasticsearch-7-5-2-scores-must-be-positive-or-null-exception/224872 "2020-10-29T11:31:14Z")
Hello, We're getting this exception from ElasticSearch for one specific search term: { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "Scores must be positive o… --- ## [GCP GCS storage using old service account key](https://discuss.elastic.co/t/gcp-gcs-storage-using-old-service-account-key/253545)
**Author:** [@bhuvaneshdct](https://discuss.elastic.co/u/bhuvaneshdct)\ **Replies:** 1\ **Last updated:** [October 29, 2020, 11:22am UTC](https://discuss.elastic.co/t/gcp-gcs-storage-using-old-service-account-key/253545 "2020-10-29T11:22:59Z")
I have an existing repository for GCS storage that using a JSON key. export PATH=/usr/share/elasticsearch/bin/:$PATH elasticsearch-keystore add-file gcs.client.default.credentials\_file /opt/esadmin/gcs-key.json elastics… --- ## [Can fields in one 7.9 component template refer to settings in another?](https://discuss.elastic.co/t/can-fields-in-one-7-9-component-template-refer-to-settings-in-another/253679)
**Author:** [@Bernt\_Rostad](https://discuss.elastic.co/u/Bernt_Rostad)\ **Replies:** 0\ **Last updated:** [October 29, 2020, 10:53am UTC](https://discuss.elastic.co/t/can-fields-in-one-7-9-component-template-refer-to-settings-in-another/253679 "2020-10-29T10:53:26Z")
I'm trying to get my head around the new concept of component templates in ES7.9 before I start upgrading from ES6.8. My problem is that I've got a dozen index templates where I use the "order" field to build up the map… --- ## [How to match a word which includes white spaces?](https://discuss.elastic.co/t/how-to-match-a-word-which-includes-white-spaces/253655)
**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\ **Replies:** 2\ **Last updated:** [October 29, 2020, 9:51am UTC](https://discuss.elastic.co/t/how-to-match-a-word-which-includes-white-spaces/253655 "2020-10-29T09:51:22Z")
I have a text field named profile (with default analyzer), and I want to query with words including white spaces. For example, when I wanted to search by vice president, I created a query { "query": { { … --- ## [Default Cisco ASA dashboard not working via logstash](https://discuss.elastic.co/t/default-cisco-asa-dashboard-not-working-via-logstash/253660)
**Author:** [@asaravanan](https://discuss.elastic.co/u/asaravanan)\ **Replies:** 0\ **Last updated:** [October 29, 2020, 9:12am UTC](https://discuss.elastic.co/t/default-cisco-asa-dashboard-not-working-via-logstash/253660 "2020-10-29T09:12:14Z")
I am filebeat to send logs to ELK via logstash but I am not able to view default dashboard or timestamp logs. At the same time, if I send all logs from filebeat to Elastic directly i can see dashboard without any issues.… --- ## [Log4j2.properties удаление логов](https://discuss.elastic.co/t/log4j2-properties/253557)
**Author:** [@es7x](https://discuss.elastic.co/u/es7x)\ **Replies:** 2\ **Last updated:** [October 29, 2020, 8:24am UTC](https://discuss.elastic.co/t/log4j2-properties/253557 "2020-10-29T08:24:02Z")
Подскажите, файл log4j2.properties appender.rolling.type = RollingFile appender.rolling.name = rolling appender.rolling.fileName = ${sys:es.logs.base\_path}${sys:file.separator}${sys:es.logs.cluster\_name}\_server.json app… --- ## [How to understand the “PUT /\_mapping” API](https://discuss.elastic.co/t/how-to-understand-the-put-mapping-api/253656)
**Author:** [@luchenguang](https://discuss.elastic.co/u/luchenguang)\ **Replies:** 0\ **Last updated:** [October 29, 2020, 8:14am UTC](https://discuss.elastic.co/t/how-to-understand-the-put-mapping-api/253656 "2020-10-29T08:14:31Z")
Hi, everyone. I am confuse about these PUT mapping APIs in this Guide Document, and need some help :pray: :pray: The Request APIs are: PUT /\/\_mapping PUT /\_mapping About the path parameter \, it says … --- ## [Elastic Search 6.8.6 breaks abruptly!](https://discuss.elastic.co/t/elastic-search-6-8-6-breaks-abruptly/253366)
**Author:** [@jaraws](https://discuss.elastic.co/u/jaraws)\ **Replies:** 3\ **Last updated:** [October 29, 2020, 8:12am UTC](https://discuss.elastic.co/t/elastic-search-6-8-6-breaks-abruptly/253366 "2020-10-29T08:12:18Z")
Hi, I have been facing a strange error where the Elastic search instance breaks abruptly . ELK stack works fine initially, I am able to push data against index as well but the stack later breaks with following error, t… --- ## [Can't delete old indices older than 21 days](https://discuss.elastic.co/t/cant-delete-old-indices-older-than-21-days/253586)
**Author:** [@yys2000](https://discuss.elastic.co/u/yys2000)\ **Replies:** 1\ **Last updated:** [October 29, 2020, 7:46am UTC](https://discuss.elastic.co/t/cant-delete-old-indices-older-than-21-days/253586 "2020-10-29T07:46:50Z")
Hi, I ran this in Kibana to delete the indices older than 21 days: POST monstache.\*/\_delete\_by\_query { "query": { "range": { "@timestamp": { "lte": "now-21d" } } } } After ran it, I performed indices search a… --- ## [Daily ingest in bytes](https://discuss.elastic.co/t/daily-ingest-in-bytes/253625)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 1\ **Last updated:** [October 29, 2020, 6:34am UTC](https://discuss.elastic.co/t/daily-ingest-in-bytes/253625 "2020-10-29T06:34:21Z")
How can i query to see my total ingest bytes across all data sources grouped daily? eg. 1/1/2020 - 1GB 2/1/2020 - 3GB 3/1/2020 - 2GB 4/1/2020 - 3GB --- ## [How to count the number of docs indexed per N seconds](https://discuss.elastic.co/t/how-to-count-the-number-of-docs-indexed-per-n-seconds/253631)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 6\ **Last updated:** [October 29, 2020, 6:31am UTC](https://discuss.elastic.co/t/how-to-count-the-number-of-docs-indexed-per-n-seconds/253631 "2020-10-29T06:31:45Z")
Hello, I would like to know how many documents are indexed per N seconds. So, I want to export/get statistics about the Elastic cluster performance. Is there a way to get these numbers? Is there a way to split these … --- ## [While copying the existing document with adding \_ to the id duplicate data is getting](https://discuss.elastic.co/t/while-copying-the-existing-document-with-adding-to-the-id-duplicate-data-is-getting/253644)
**Author:** [@kiran3](https://discuss.elastic.co/u/kiran3)\ **Replies:** 0\ **Last updated:** [October 29, 2020, 6:26am UTC](https://discuss.elastic.co/t/while-copying-the-existing-document-with-adding-to-the-id-duplicate-data-is-getting/253644 "2020-10-29T06:26:07Z")
when we are making a copy of the existing document(ex id: Tf23) with adding \_ to the id (ex id:\_Tf23) we are getting an issue like the existing document id (Tf23) it is also taking the \_ to the id but we need a copy of… --- ## [Kibana Table Excel export problem](https://discuss.elastic.co/t/kibana-table-excel-export-problem/253641)
**Author:** [@kym6414](https://discuss.elastic.co/u/kym6414)\ **Replies:** 2\ **Last updated:** [October 29, 2020, 5:50am UTC](https://discuss.elastic.co/t/kibana-table-excel-export-problem/253641 "2020-10-29T05:50:21Z")
--- ## [How to work with Array fields and their mapping for efficient search and results](https://discuss.elastic.co/t/how-to-work-with-array-fields-and-their-mapping-for-efficient-search-and-results/253498)
**Author:** [@katana\_handler](https://discuss.elastic.co/u/katana_handler)\ **Replies:** 4\ **Last updated:** [October 29, 2020, 3:42am UTC](https://discuss.elastic.co/t/how-to-work-with-array-fields-and-their-mapping-for-efficient-search-and-results/253498 "2020-10-29T03:42:30Z")
Hey community, This is my first post here seeking for knowledge. I was using the Dev Tools Console in kibana to learn querying. I came across this particular scenario where i couldn't get my head around. So I'll give a… --- ## [Can't connect to Logstash port 5044 from Filebeat](https://discuss.elastic.co/t/cant-connect-to-logstash-port-5044-from-filebeat/253639)
**Author:** [@aloalo2242](https://discuss.elastic.co/u/aloalo2242)\ **Replies:** 0\ **Last updated:** [October 29, 2020, 3:15am UTC](https://discuss.elastic.co/t/cant-connect-to-logstash-port-5044-from-filebeat/253639 "2020-10-29T03:15:27Z")
Hi all, This is my config in /etc/logstash/conf.d/01-logstash.conf from ELK Server. input { beats { port =\> 5044 } } filter { grok { match =\> { "message" =\> \[ "%{SYSLOGTIMESTAMP:syslog\_timestamp} %{SYSLOGHOST… --- ## [Kuromoji token offsets going backwards in extended mode](https://discuss.elastic.co/t/kuromoji-token-offsets-going-backwards-in-extended-mode/253634)
**Author:** [@matobaa](https://discuss.elastic.co/u/matobaa)\ **Replies:** 0\ **Last updated:** [October 29, 2020, 2:49am UTC](https://discuss.elastic.co/t/kuromoji-token-offsets-going-backwards-in-extended-mode/253634 "2020-10-29T02:49:06Z")
When we upgraded our ES instance from 6.8 to 7.8, we noticed errors during indexing like below: java.lang.IllegalArgumentException: startOffset must be non-negative, and endOffset must be \>= startOffset, and offsets mus… --- ## [Multiple Plugin Installations on Windows intermittently fail with java.nio.AccessDeniedException](https://discuss.elastic.co/t/multiple-plugin-installations-on-windows-intermittently-fail-with-java-nio-accessdeniedexception/253630)
**Author:** [@Varsha\_Muzumdar](https://discuss.elastic.co/u/Varsha_Muzumdar)\ **Replies:** 0\ **Last updated:** [October 29, 2020, 1:55am UTC](https://discuss.elastic.co/t/multiple-plugin-installations-on-windows-intermittently-fail-with-java-nio-accessdeniedexception/253630 "2020-10-29T01:55:11Z")
Hi, I am recently facing intermittent issue when sequentially installing multiple custom plugins as a part of ES 5.6.10 setup. I am spawning a C# process to invoke elasticsearch-plugin.bat with plugin name as argument a… --- ## [Context for clauses inside "must" parameter](https://discuss.elastic.co/t/context-for-clauses-inside-must-parameter/253628)
**Author:** [@shekharshan](https://discuss.elastic.co/u/shekharshan)\ **Replies:** 0\ **Last updated:** [October 29, 2020, 1:45am UTC](https://discuss.elastic.co/t/context-for-clauses-inside-must-parameter/253628 "2020-10-29T01:45:00Z")
I was reading Elasticsearch documentation here: https://www.elastic.co/guide/en/elasticsearch/reference/6.8/query-filter-context.html The page gives an example of a query like so: curl -X GET "localhost:9200/\_search?pr… --- ## [Metricbeat timeout reading index\_recovery, index\_summary, etc](https://discuss.elastic.co/t/metricbeat-timeout-reading-index-recovery-index-summary-etc/253592)
**Author:** [@zvazquez](https://discuss.elastic.co/u/zvazquez)\ **Replies:** 0\ **Last updated:** [October 28, 2020, 4:35pm UTC](https://discuss.elastic.co/t/metricbeat-timeout-reading-index-recovery-index-summary-etc/253592 "2020-10-28T16:35:13Z")
Hi, I am experiencing a problem where one of the elasticsearch clusters that I am monitoring within a Kubernetes cluster is having troubles being monitored with metricbeats. The metricbeat agent is having problem with … --- ## [Add field from ECS field (winlogbeats)](https://discuss.elastic.co/t/add-field-from-ecs-field-winlogbeats/253507)
**Author:** [@Camilo\_Diaz](https://discuss.elastic.co/u/Camilo_Diaz)\ **Replies:** 2\ **Last updated:** [October 28, 2020, 8:25pm UTC](https://discuss.elastic.co/t/add-field-from-ecs-field-winlogbeats/253507 "2020-10-28T20:25:45Z")
I am trying to add some fields to the logs coming from wingbeat 7.9 to Logstash. I need to extract the value from either user.name or related.user and add a new 'username' field. I was doing something like this but th… --- ## [Azure Snapshot ECK](https://discuss.elastic.co/t/azure-snapshot-eck/253610)
**Author:** [@Fikrat\_Karimli](https://discuss.elastic.co/u/Fikrat_Karimli)\ **Replies:** 1\ **Last updated:** [October 28, 2020, 7:58pm UTC](https://discuss.elastic.co/t/azure-snapshot-eck/253610 "2020-10-28T19:58:29Z")
Hi I followed steps in documentation and another posts. Still getting azure client invalid key even the account name and key is correct. First created secret apiVersion: v1 kind: Secret metadata: name: snapshot-secre… --- ## [No Implicit conversion of Nil](https://discuss.elastic.co/t/no-implicit-conversion-of-nil/253594)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [October 28, 2020, 7:54pm UTC](https://discuss.elastic.co/t/no-implicit-conversion-of-nil/253594 "2020-10-28T19:54:16Z")
I am getting following error. but do not where in code it is getting this error from. \[ERROR\] 2020-10-28 11:41:31.825 \[\[main\]\>worker7\] WorkerLoop - Exception in pipelineworker, the pipeline stopped processing new events… --- ## [S3 logstash conf grok filter](https://discuss.elastic.co/t/s3-logstash-conf-grok-filter/253357)
**Author:** [@deep9300](https://discuss.elastic.co/u/deep9300)\ **Replies:** 5\ **Last updated:** [October 28, 2020, 6:43pm UTC](https://discuss.elastic.co/t/s3-logstash-conf-grok-filter/253357 "2020-10-28T18:43:03Z")
Hello. I want to collect s3 access logs from an s3 bucket and process them to logstash and elasticsearch. I have it working properly but the filter in the logstash conf is not working properly. Currently its giving me t… --- ## [How to create a stacked graph using Lens of license checkouts per user over time that gives the right answer regardless of timescale?](https://discuss.elastic.co/t/how-to-create-a-stacked-graph-using-lens-of-license-checkouts-per-user-over-time-that-gives-the-right-answer-regardless-of-timescale/253495)
**Author:** [@stanvick](https://discuss.elastic.co/u/stanvick)\ **Replies:** 4\ **Last updated:** [October 28, 2020, 6:27pm UTC](https://discuss.elastic.co/t/how-to-create-a-stacked-graph-using-lens-of-license-checkouts-per-user-over-time-that-gives-the-right-answer-regardless-of-timescale/253495 "2020-10-28T18:27:24Z")
I am certain this question has been asked many times before but I don't understand the answer(s) given because I am using Kibana Lens to create my graph and because I am a rank beginner. I have data sampled every 5 minut… --- ## [Different Default Dashboards for Different Groups](https://discuss.elastic.co/t/different-default-dashboards-for-different-groups/253473)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [October 28, 2020, 6:00pm UTC](https://discuss.elastic.co/t/different-default-dashboards-for-different-groups/253473 "2020-10-28T18:00:53Z")
Hi, How I can force a dashboard to appear as default when a user in one group logs in, but a different default dashboard for another group's login? Currently, they have to go to the DASHBOARD section and select one but … --- ## [Inconsistent date\_histogram "key\_as\_string" when "format" is set](https://discuss.elastic.co/t/inconsistent-date-histogram-key-as-string-when-format-is-set/253597)
**Author:** [@Nicolas\_Labrot](https://discuss.elastic.co/u/Nicolas_Labrot)\ **Replies:** 1\ **Last updated:** [October 28, 2020, 6:00pm UTC](https://discuss.elastic.co/t/inconsistent-date-histogram-key-as-string-when-format-is-set/253597 "2020-10-28T18:00:44Z")
Hello, I have an issue with date\_histogram on Elastic 7.9.2. The "key\_as\_string" does not seems to be correct. I have this index: PUT https://localhost:9200/test -d ' { "mappings":{ "propertie… --- ## [Logstash not working with ActiveMQ](https://discuss.elastic.co/t/logstash-not-working-with-activemq/252022)
**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\ **Replies:** 4\ **Last updated:** [October 28, 2020, 5:22pm UTC](https://discuss.elastic.co/t/logstash-not-working-with-activemq/252022 "2020-10-28T17:22:53Z")
I am trying to consume a message from an ActiveMQ with the following configuration; input { jms { broker\_url =\> 'failover:(ssl://b-d5bc797b-sjd8-41d2-dfjh7-127ba48c6238-1.mq.eu-west-1.amazonaws.com:61617)?init… --- ## [Logstash http output plugin documentation outdated](https://discuss.elastic.co/t/logstash-http-output-plugin-documentation-outdated/253595)
**Author:** [@bosand](https://discuss.elastic.co/u/bosand)\ **Replies:** 0\ **Last updated:** [October 28, 2020, 5:06pm UTC](https://discuss.elastic.co/t/logstash-http-output-plugin-documentation-outdated/253595 "2020-10-28T17:06:12Z")
I did not see a feedback option on the website other than a contact form for sales purposes, so I thought I might as well post it here... The documentation on Elastic's website is not in sync with the Github version. D… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1174) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1176)