# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1271 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1272 --- ## [Filebeat NGINX-Plugin sending multiples separate lines as one event](https://discuss.elastic.co/t/filebeat-nginx-plugin-sending-multiples-separate-lines-as-one-event/245933)
**Author:** [@iceman91176](https://discuss.elastic.co/u/iceman91176)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 3:33pm UTC](https://discuss.elastic.co/t/filebeat-nginx-plugin-sending-multiples-separate-lines-as-one-event/245933 "2020-08-21T15:33:27Z")
We have deployed filebeat as kubernetes daemon set and are using hint based configuration to send logs to logstash. Here is the filebeat configuration filebeat.autodiscover: providers: - type: kubernetes host:… --- ## [Log queries from elasticsearch output](https://discuss.elastic.co/t/log-queries-from-elasticsearch-output/245882)
**Author:** [@SpaceRaven](https://discuss.elastic.co/u/SpaceRaven)\ **Replies:** 3\ **Last updated:** [August 21, 2020, 3:32pm UTC](https://discuss.elastic.co/t/log-queries-from-elasticsearch-output/245882 "2020-08-21T15:32:16Z")
Hi, Is there any way to log somehow queries from elasticsearch output plugin for es updates? i mean i want to inspect json queris which will go es cluster for update/delete/insert. Thanks --- ## [Kachok utility to pump data into elasticsearch](https://discuss.elastic.co/t/kachok-utility-to-pump-data-into-elasticsearch/245926)
**Author:** [@truekonrads](https://discuss.elastic.co/u/truekonrads)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 2:09pm UTC](https://discuss.elastic.co/t/kachok-utility-to-pump-data-into-elasticsearch/245926 "2020-08-21T14:09:27Z")
Kachok is a utility that loads JSON-ND (newline delimited JSON data) into elasticsearch. The primary purpose is batch loading of JSONND data. It supports multiple files, error handling and a sweet progress bar. Example u… --- ## [How to run a verification bloc (one time) after scheduled output](https://discuss.elastic.co/t/how-to-run-a-verification-bloc-one-time-after-scheduled-output/245898)
**Author:** [@RiadhBH](https://discuss.elastic.co/u/RiadhBH)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 9:57am UTC](https://discuss.elastic.co/t/how-to-run-a-verification-bloc-one-time-after-scheduled-output/245898 "2020-08-21T09:57:00Z")
Hi, I'm using this configuration: SqlServer --\> LogStash --\> {ElasticSearch, Mysql}. I need to verify the number of input data (from logstash) and the output data (from mysql). It is possible to query elasticsearch on… --- ## [Ingestion performance issues - where to start?](https://discuss.elastic.co/t/ingestion-performance-issues-where-to-start/245849)
**Author:** [@wardallen](https://discuss.elastic.co/u/wardallen)\ **Replies:** 5\ **Last updated:** [August 21, 2020, 1:35pm UTC](https://discuss.elastic.co/t/ingestion-performance-issues-where-to-start/245849 "2020-08-21T13:35:04Z")
Hi all, I'm having ingestion performance issues that I haven't gotten to the bottom of, and I'm quite new to the elastic stack, so I thought I'd seek advice here. I have a cluster of 3 VMs (4 CPU/64GB RAM/500GB disk). … --- ## [Logstash: How to pass value from one Aggregate Filter Task ID to another](https://discuss.elastic.co/t/logstash-how-to-pass-value-from-one-aggregate-filter-task-id-to-another/245921)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 1:06pm UTC](https://discuss.elastic.co/t/logstash-how-to-pass-value-from-one-aggregate-filter-task-id-to-another/245921 "2020-08-21T13:06:48Z")
I have a requirement in which I need flow data from one aggreage filter of id different\_%{customer} to another %{traceid} logstash.conf code snippet: aggregate { task\_id =\> "different\_%{customer}" c… --- ## [Help with custom pattern](https://discuss.elastic.co/t/help-with-custom-pattern/245917)
**Author:** [@Jonathan\_Morin](https://discuss.elastic.co/u/Jonathan_Morin)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 1:06pm UTC](https://discuss.elastic.co/t/help-with-custom-pattern/245917 "2020-08-21T13:06:02Z")
Hi guys, i'm trying to put parse a JDE log but i keep having a \_grokparsefailure and i really don't see where my problem is. Here's what i have filter { grok { pattern\_definitions =\> { "JDEPRO… --- ## [Can not parse bash output as json](https://discuss.elastic.co/t/can-not-parse-bash-output-as-json/245809)
**Author:** [@Yevhen\_Baidiuk](https://discuss.elastic.co/u/Yevhen_Baidiuk)\ **Replies:** 3\ **Last updated:** [August 21, 2020, 12:52pm UTC](https://discuss.elastic.co/t/can-not-parse-bash-output-as-json/245809 "2020-08-21T12:52:16Z")
I use shall script to generate dataset but logstash won't accept my message Thanks for feature help. --- ## [Fluentd not connected to elasticsearch](https://discuss.elastic.co/t/fluentd-not-connected-to-elasticsearch/245919)
**Author:** [@samra1810](https://discuss.elastic.co/u/samra1810)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 12:49pm UTC](https://discuss.elastic.co/t/fluentd-not-connected-to-elasticsearch/245919 "2020-08-21T12:49:04Z")
I have installed td-agent rpm on linux and trying to connect to elastic search. but however when i am starting td-agent, it is not getting connected to elasticsearch. Elastic Search service is up and running. Error on l… --- ## [How to view multiple fields in kibana add filter section](https://discuss.elastic.co/t/how-to-view-multiple-fields-in-kibana-add-filter-section/245765)
**Author:** [@hemant\_472](https://discuss.elastic.co/u/hemant_472)\ **Replies:** 10\ **Last updated:** [August 21, 2020, 11:38am UTC](https://discuss.elastic.co/t/how-to-view-multiple-fields-in-kibana-add-filter-section/245765 "2020-08-21T11:38:34Z")
i am unable to see multiple filters in add filter field of kibana, can someone suggst anything as i cannot find anything in kibana settings --- ## [Parse\_origination\_date phase transition](https://discuss.elastic.co/t/parse-origination-date-phase-transition/245910)
**Author:** [@samaresh\_kirtania](https://discuss.elastic.co/u/samaresh_kirtania)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 10:43am UTC](https://discuss.elastic.co/t/parse-origination-date-phase-transition/245910 "2020-08-21T10:43:32Z")
I am trying to use origination\_date with ILM phases and need some help. I am creating the indexes manually of the format shipdetails-2020.08.19. We can create 7 indexes on a given date. Now the events will be stored acc… --- ## [Getting Appdynamics Data into ELK](https://discuss.elastic.co/t/getting-appdynamics-data-into-elk/245905)
**Author:** [@sriram28](https://discuss.elastic.co/u/sriram28)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 10:22am UTC](https://discuss.elastic.co/t/getting-appdynamics-data-into-elk/245905 "2020-08-21T10:22:47Z")
Hi All, Need your help. I am trying to get Appdynamics Data into Logstash . I am getting connect time out when trying to connect from logstash to appdynamics . +++++++++++++ t http\_request\_failure.error connect tim… --- ## [Logstash crash receiving data from filebeats](https://discuss.elastic.co/t/logstash-crash-receiving-data-from-filebeats/244425)
**Author:** [@M9k](https://discuss.elastic.co/u/M9k)\ **Replies:** 3\ **Last updated:** [August 21, 2020, 9:44am UTC](https://discuss.elastic.co/t/logstash-crash-receiving-data-from-filebeats/244425 "2020-08-21T09:44:05Z")
Hi, I have a problem with logstash, every time it receive a document from filebeat it crash. This is my filebeat configuration: filebeat.inputs: - paths: - c:\\windows\\system32\\dhcp\\DhcpSrvLog-\*.… --- ## [Filebeat send json data to Elastiksearch isuue](https://discuss.elastic.co/t/filebeat-send-json-data-to-elastiksearch-isuue/244860)
**Author:** [@Partha\_Biswas](https://discuss.elastic.co/u/Partha_Biswas)\ **Replies:** 5\ **Last updated:** [August 21, 2020, 9:32am UTC](https://discuss.elastic.co/t/filebeat-send-json-data-to-elastiksearch-isuue/244860 "2020-08-21T09:32:01Z")
I am using filebeat to send log data in ELK kibana. Log example:- error\_log.log {"type":"ERROR","errorType":"ERROR","message":"Error in add","others":{"error": "something went wrong","source":"/public/new/user"}} {"typ… --- ## [Elastic search throwing unknown setting error](https://discuss.elastic.co/t/elastic-search-throwing-unknown-setting-error/245887)
**Author:** [@Pradeep\_K\_S](https://discuss.elastic.co/u/Pradeep_K_S)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 9:18am UTC](https://discuss.elastic.co/t/elastic-search-throwing-unknown-setting-error/245887 "2020-08-21T09:18:22Z")
Hi, I am trying to create index with my schema mapping but i am getting unknown setting error for some tag. Attached the error below. {"error":{"root\_cause":\[{"type":"remote\_transport\_exception","reason":"\[ip-20-124-… --- ## [Watcher using filter range with time does not fire](https://discuss.elastic.co/t/watcher-using-filter-range-with-time-does-not-fire/244998)
**Author:** [@ajazam](https://discuss.elastic.co/u/ajazam)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 8:37am UTC](https://discuss.elastic.co/t/watcher-using-filter-range-with-time-does-not-fire/244998 "2020-08-21T08:37:53Z")
Hello. I have been trying to write a Watcher that looks for specific conditions in data and then send out an email, but it doesn't work. I have managed to shrink the Watcher down to a bare minimum and have found out that… --- ## [Logstash dosn't run file.conf in /etc/logstash/conf.d](https://discuss.elastic.co/t/logstash-dosnt-run-file-conf-in-etc-logstash-conf-d/244192)
**Author:** [@Amine\_Aloui](https://discuss.elastic.co/u/Amine_Aloui)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 8:30am UTC](https://discuss.elastic.co/t/logstash-dosnt-run-file-conf-in-etc-logstash-conf-d/244192 "2020-08-21T08:30:52Z")
in /etc/logstash.yml i put this config path.config: /etc/logstash/conf.d/\*.conf config.reload.automatic: true config.reload.interval: 3s in /etc/logstash/conf.d i put my index.conf tail -f /var/log/logstash/logst… --- ## [How to use Javascript to get Response data on the Kibana Discover page?](https://discuss.elastic.co/t/how-to-use-javascript-to-get-response-data-on-the-kibana-discover-page/245860)
**Author:** [@neargle](https://discuss.elastic.co/u/neargle)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 8:09am UTC](https://discuss.elastic.co/t/how-to-use-javascript-to-get-response-data-on-the-kibana-discover-page/245860 "2020-08-21T08:09:59Z")
I hope that after searching in Discover, I can use JS or Chrome DevTools Console in the /app/kibana#/discover page to get the data returned by ES for further processing? How can I get the result of javascript object? --- ## [Plugin on new platform](https://discuss.elastic.co/t/plugin-on-new-platform/245773)
**Author:** [@wilmouths](https://discuss.elastic.co/u/wilmouths)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 8:04am UTC](https://discuss.elastic.co/t/plugin-on-new-platform/245773 "2020-08-21T08:04:31Z")
Hello, I am developing a Kibana 7.8 plugin, I would like to know how to retrieve environment variables in the client part (public) and also how to add a link in the menu, because before you had to use uiExports: { links… --- ## [Logstash how to parse different format message in one logfile](https://discuss.elastic.co/t/logstash-how-to-parse-different-format-message-in-one-logfile/245863)
**Author:** [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 7:58am UTC](https://discuss.elastic.co/t/logstash-how-to-parse-different-format-message-in-one-logfile/245863 "2020-08-21T07:58:55Z")
The original log 07/20/20 09:23:14 INFO login 2493 us.(channel/Channel.cpp:575) 07/20/20 09:23:14 INFO deletecity:cn(city/CityDeleteBusiness.cpp:55) 07/20/20 09:23:14 INFO ---p\_dbSession-\>deleteCity() 14066… --- ## [How to apply filters in elasticsearch NEST functionscore function](https://discuss.elastic.co/t/how-to-apply-filters-in-elasticsearch-nest-functionscore-function/245839)
**Author:** [@learning21](https://discuss.elastic.co/u/learning21)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 7:15am UTC](https://discuss.elastic.co/t/how-to-apply-filters-in-elasticsearch-nest-functionscore-function/245839 "2020-08-21T07:15:30Z")
To control the score of documents based on a field value, I am using filter with function\_score in my DSL query and this gets the results ordered as I expect. However on implementing this in NEST, the results are differ… --- ## [How to use JSON Input to make filter on part of log](https://discuss.elastic.co/t/how-to-use-json-input-to-make-filter-on-part-of-log/245570)
**Author:** [@VooDooX](https://discuss.elastic.co/u/VooDooX)\ **Replies:** 3\ **Last updated:** [August 21, 2020, 6:52am UTC](https://discuss.elastic.co/t/how-to-use-json-input-to-make-filter-on-part-of-log/245570 "2020-08-21T06:52:21Z")
I have collected logs which are already imported into ELK. Each log contains several fields, for ex date is different field. Also there is complicated field "Details" which consist a lot of data: method: value, source:… --- ## [Filebeat json to Elasticsearch, error processing pipeline](https://discuss.elastic.co/t/filebeat-json-to-elasticsearch-error-processing-pipeline/245767)
**Author:** [@felixbarbeira](https://discuss.elastic.co/u/felixbarbeira)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 6:37am UTC](https://discuss.elastic.co/t/filebeat-json-to-elasticsearch-error-processing-pipeline/245767 "2020-08-21T06:37:17Z")
Hi, I'm sending a json log file with filebeat to an Elasticsearch cluster. When I try to parse the ip field with geoip filter it shows the following error in the ingestError field: field \[client\] not present as part of… --- ## [【ingest node】別のindexのデータを登録する方法について](https://discuss.elastic.co/t/ingest-node-index/245375)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 4\ **Last updated:** [August 21, 2020, 6:25am UTC](https://discuss.elastic.co/t/ingest-node-index/245375 "2020-08-21T06:25:24Z")
お世話になります。 ingest node(またはLogstash等)にて、以下が実現できるかご教示をお願い致します。 ▼実現したいこと ・ingest nodeでA indexにデータ登録する際に、B indexのデータも併せて登録したい(B indexは予め登録しておく) ・A indexとB indexは共通のキー項目が存在しないため、C indexという紐づけindexを予め登録しておき参照した上で登録したい 例： … --- ## [Histogram per second](https://discuss.elastic.co/t/histogram-per-second/245855)
**Author:** [@idyuzhev](https://discuss.elastic.co/u/idyuzhev)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 5:48am UTC](https://discuss.elastic.co/t/histogram-per-second/245855 "2020-08-21T05:48:44Z")
Hi. I need to build a histogram per second. Kibana, depending on the specified period, can be grouped in 5/10/30/60 seconds. This option does not suit me. Can this somehow be disabled and forced to output per second? … --- ## [GeoIP Troubles](https://discuss.elastic.co/t/geoip-troubles/245824)
**Author:** [@Midnigh7](https://discuss.elastic.co/u/Midnigh7)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 5:25am UTC](https://discuss.elastic.co/t/geoip-troubles/245824 "2020-08-21T05:25:49Z")
Trying to get geoip working from IIS log ingestion. Current setup; Elasticsearch v.7.9.0 Kibana v.7.9.0 Filebeat v.7.9.0 Output is set to Elasticsearch with geoip pipeline; output.elasticsearch: # Array of… --- ## [Instrumenting a C++ application](https://discuss.elastic.co/t/instrumenting-a-c-application/245026)
**Author:** [@DenProg](https://discuss.elastic.co/u/DenProg)\ **Replies:** 7\ **Last updated:** [August 21, 2020, 5:02am UTC](https://discuss.elastic.co/t/instrumenting-a-c-application/245026 "2020-08-21T05:02:14Z")
I didn't find any topic like that... Which library should I use to instrument a C++ application? We found the Elastic APM system very appropriate for our software, but we have C++ apps and we want to collect custom data … --- ## [Persistent queue not working?](https://discuss.elastic.co/t/persistent-queue-not-working/245852)
**Author:** [@TomHome](https://discuss.elastic.co/u/TomHome)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 4:57am UTC](https://discuss.elastic.co/t/persistent-queue-not-working/245852 "2020-08-21T04:57:40Z")
Hi, I'd like to use Persistent Queues (PQ) as an internal overflow buffer when we get spikes of logs into our redis instance (input redis {} in each pipeline). But the PQ does not grow despite our redis instance being s… --- ## [Use query parameters to change token filter behavior for the given query](https://discuss.elastic.co/t/use-query-parameters-to-change-token-filter-behavior-for-the-given-query/245851)
**Author:** [@dtchesno](https://discuss.elastic.co/u/dtchesno)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 4:46am UTC](https://discuss.elastic.co/t/use-query-parameters-to-change-token-filter-behavior-for-the-given-query/245851 "2020-08-21T04:46:38Z")
I understand it's not what normally happens. But I'm curious, is there a pattern to pass config to token filter for the given query? E.g. I could have plugin with custom query builder and analyzer/filters. I want to app… --- ## [Kibana Dashboard Data](https://discuss.elastic.co/t/kibana-dashboard-data/245763)
**Author:** [@Kundan\_Singh](https://discuss.elastic.co/u/Kundan_Singh)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 4:41am UTC](https://discuss.elastic.co/t/kibana-dashboard-data/245763 "2020-08-21T04:41:41Z")
Hi there How kibana UI request this API for dashboard data. http://localhost:5601/elasticsearch/\_msearch?rest\_total\_hits\_as\_int=true&ignore\_throttled=true [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1270) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1272)