# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1273 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1274 --- ## [Print some line to stdout, Logstash filter pipeline](https://discuss.elastic.co/t/print-some-line-to-stdout-logstash-filter-pipeline/245748)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 1:33pm UTC](https://discuss.elastic.co/t/print-some-line-to-stdout-logstash-filter-pipeline/245748 "2020-08-20T13:33:20Z")
Hello, is there a way to print a line to stdout in filter pipeline some field, or any text? I have found there is stdout plugin to use, but have not found a single correct example how. Would be good to have some possibi… --- ## [Multiple docker container for multiple pipeline of logstash](https://discuss.elastic.co/t/multiple-docker-container-for-multiple-pipeline-of-logstash/245684)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 4\ **Last updated:** [August 20, 2020, 12:56pm UTC](https://discuss.elastic.co/t/multiple-docker-container-for-multiple-pipeline-of-logstash/245684 "2020-08-20T12:56:32Z")
Currently I run 20 pipeline in a system some just pulls data few times a day some just once a day some every few minute I was thinking to run multiple docker image on a single system, where slower pipeline is running… --- ## [\[function\_score\] malformed query, expected \[END\_OBJECT\] but found \[FIELD\_NAME\]](https://discuss.elastic.co/t/function-score-malformed-query-expected-end-object-but-found-field-name/245759)
**Author:** [@abhijeet\_sinha](https://discuss.elastic.co/u/abhijeet_sinha)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 12:12pm UTC](https://discuss.elastic.co/t/function-score-malformed-query-expected-end-object-but-found-field-name/245759 "2020-08-20T12:12:50Z")
What's wrong with this query? GET /catalog/\_search {"query": { "function\_score": { "boost\_mode": "multiply", "functions": \[ { "field\_value\_factor": { "field": "boostFactor", "factor"… --- ## [Failed to load settings from \[elasticsearch.yml\]](https://discuss.elastic.co/t/failed-to-load-settings-from-elasticsearch-yml/245391)
**Author:** [@Kailas](https://discuss.elastic.co/u/Kailas)\ **Replies:** 9\ **Last updated:** [August 20, 2020, 11:43am UTC](https://discuss.elastic.co/t/failed-to-load-settings-from-elasticsearch-yml/245391 "2020-08-20T11:43:29Z")
I am getting the following exception . I have followed this link https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-advanced-node-scheduling.html#k8s-define-elasticsearch-nodes-roles root@k8smaster elastic\]# ku l… --- ## [Reverse keyword vs new Wildcard data type](https://discuss.elastic.co/t/reverse-keyword-vs-new-wildcard-data-type/245751)
**Author:** [@TheWorkingDeveloper](https://discuss.elastic.co/u/TheWorkingDeveloper)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 11:28am UTC](https://discuss.elastic.co/t/reverse-keyword-vs-new-wildcard-data-type/245751 "2020-08-20T11:28:09Z")
In email wildcard searching: user\_email\* \*@domain.com Would reverse keyword be faster in searching than wildcard given a single wildcard? moc.niamod@\* on reverse keyword vs \*@domain.com on wildcard For example. So… --- ## [JSON parsing depth in logstash](https://discuss.elastic.co/t/json-parsing-depth-in-logstash/245205)
**Author:** [@rakesh15](https://discuss.elastic.co/u/rakesh15)\ **Replies:** 4\ **Last updated:** [August 20, 2020, 11:02am UTC](https://discuss.elastic.co/t/json-parsing-depth-in-logstash/245205 "2020-08-20T11:02:37Z")
Hi All, Im trying to index the camel logs by using grok pattern and json filter in logstash and then push the same to ES. Below is the sample log snippet that I'm trying to parse. 07:32:49.805 \[Camel (MyCamel) thread … --- ## [Two Logstash instances in the same machine are faster than only one](https://discuss.elastic.co/t/two-logstash-instances-in-the-same-machine-are-faster-than-only-one/245753)
**Author:** [@ricferr1976](https://discuss.elastic.co/u/ricferr1976)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 10:58am UTC](https://discuss.elastic.co/t/two-logstash-instances-in-the-same-machine-are-faster-than-only-one/245753 "2020-08-20T10:58:28Z")
Hello. I have a setup with a log source that is sending about 4k EPS and i have an HAProxy that is receiving those messages and sending them to currently only one Logstash machine. That machine has 8 cores and 8GB of R… --- ## [Multi search API: Getting more than 500 hits](https://discuss.elastic.co/t/multi-search-api-getting-more-than-500-hits/245752)
**Author:** [@MartaB](https://discuss.elastic.co/u/MartaB)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 10:51am UTC](https://discuss.elastic.co/t/multi-search-api-getting-more-than-500-hits/245752 "2020-08-20T10:51:06Z")
Hello guys! I kindly need your help with something. I'm building a script using groovy. The main goal is to retrieve all the logs we have on our server so I can use that logs, apply some logic (e.g., regex, conditional… --- ## [How to handle "cannot parse empty date"?](https://discuss.elastic.co/t/how-to-handle-cannot-parse-empty-date/245749)
**Author:** [@Rachana\_Pole](https://discuss.elastic.co/u/Rachana_Pole)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 10:43am UTC](https://discuss.elastic.co/t/how-to-handle-cannot-parse-empty-date/245749 "2020-08-20T10:43:33Z")
Hi all, I had a field that provides date information in String format. I converted it to Date type format using mappings as shown in the below mapping sample. Ex: "stats" : { "properties" : { … --- ## [Template wildcard data type, normalizer/analyzer for case insensitive search](https://discuss.elastic.co/t/template-wildcard-data-type-normalizer-analyzer-for-case-insensitive-search/245743)
**Author:** [@TheWorkingDeveloper](https://discuss.elastic.co/u/TheWorkingDeveloper)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 10:36am UTC](https://discuss.elastic.co/t/template-wildcard-data-type-normalizer-analyzer-for-case-insensitive-search/245743 "2020-08-20T10:36:07Z")
I have a data ingest that contains user input and want to wildcard search it. But I need the search to be case insensitive. "normalizer": { "lowercase\_normalizer": { "type": "custom", "char\_filter": \[\], … --- ## [Wildcard datatype lowercase](https://discuss.elastic.co/t/wildcard-datatype-lowercase/245726)
**Author:** [@covolution](https://discuss.elastic.co/u/covolution)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 9:00am UTC](https://discuss.elastic.co/t/wildcard-datatype-lowercase/245726 "2020-08-20T09:00:45Z")
I am looking at the Wildcard datatype introduced in 7.9. I would like to normalize it first by lowercasing and removing whitespace. I can't work out the syntax. "normalizer" and "analyzer" don't seem to be supported. --- ## [Data Visualizer - Import button grayed out for CSV import](https://discuss.elastic.co/t/data-visualizer-import-button-grayed-out-for-csv-import/245664)
**Author:** [@kaoutar\_id](https://discuss.elastic.co/u/kaoutar_id)\ **Replies:** 7\ **Last updated:** [August 20, 2020, 7:56am UTC](https://discuss.elastic.co/t/data-visualizer-import-button-grayed-out-for-csv-import/245664 "2020-08-20T07:56:03Z")
I'm unable to import a CSV file to Elasticsearch using the Data Visualizer. I get to upload the file and see the file stats but after that when I type the name of the index the import button remains gray and can't import… --- ## [String type conversion to date type](https://discuss.elastic.co/t/string-type-conversion-to-date-type/245698)
**Author:** [@Rachana\_Pole](https://discuss.elastic.co/u/Rachana_Pole)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 8:26am UTC](https://discuss.elastic.co/t/string-type-conversion-to-date-type/245698 "2020-08-20T08:26:58Z")
Hi all, I have a field that provides the date information but is coming is of String Data Type. Ex: metrics.database.state.my\_session\_time 2020-Aug-19 04:40:53 I want to convert it into a date format. I tried a few da… --- ## [Change Upper left side Logo in Kibana version 7.8.0](https://discuss.elastic.co/t/change-upper-left-side-logo-in-kibana-version-7-8-0/245182)
**Author:** [@Mayank\_Damani](https://discuss.elastic.co/u/Mayank_Damani)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 8:22am UTC](https://discuss.elastic.co/t/change-upper-left-side-logo-in-kibana-version-7-8-0/245182 "2020-08-20T08:22:28Z")
I want to change upper left side logo in Kibana version 7.8.0 as shown in below image. What i tried is changing their svg code with my own svg code in node\_modules\\@kbn\\ui-shared-deps\\target\\kbn-ui-shared-deps.@elastic.j… --- ## [How to escape special characters in regexp](https://discuss.elastic.co/t/how-to-escape-special-characters-in-regexp/245727)
**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 8:17am UTC](https://discuss.elastic.co/t/how-to-escape-special-characters-in-regexp/245727 "2020-08-20T08:17:03Z")
How to escape special characters in regular expression query GET my\_index/\_search { "\_source": \["file.filename"\], "query": { "regexp": { "content": "KRISHNA\\-\\1H3\[a-zA-Z0-9\]\*" } }, "highlight": { "fields": { "… --- ## [Logstash to azure blob](https://discuss.elastic.co/t/logstash-to-azure-blob/245725)
**Author:** [@nikul\_jain](https://discuss.elastic.co/u/nikul_jain)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 8:10am UTC](https://discuss.elastic.co/t/logstash-to-azure-blob/245725 "2020-08-20T08:10:20Z")
What is the best way to have output to azure blob --- ## [Watcher webhookのレスポンスを元にメール通知](https://discuss.elastic.co/t/watcher-webhook/243322)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 7:52am UTC](https://discuss.elastic.co/t/watcher-webhook/243322 "2020-08-20T07:52:23Z")
お世話になります。 Watcherのwebhookを利用して以下を実現したいのですが、実施可能でしょうか。 ①Watcher webhook actionにてリクエスト ②リクエスト処理が成功し、レスポンス値を取得 ③レスポンスで取得した値をメールの本文に設定し、メール通知 おそらく1回のwebhookのアクションで実現できないかと思っています。 その場合、②のレスポンス値をindexに登録することは可能でしょうか。 （i… --- ## [Using alt key code in logstash](https://discuss.elastic.co/t/using-alt-key-code-in-logstash/245094)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 7\ **Last updated:** [August 20, 2020, 7:52am UTC](https://discuss.elastic.co/t/using-alt-key-code-in-logstash/245094 "2020-08-20T07:52:00Z")
Hi all, i am using logstash to write some data into txt file so that my output configuration of logstash is as following: output { csv { fields =\> \["My\_Data"\] path =\> "D:\\app\_%{year}\_%{mounth}\_%{day}.txt" } stdout { c… --- ## [SNMPTRAP v3](https://discuss.elastic.co/t/snmptrap-v3/245722)
**Author:** [@shaigbdb](https://discuss.elastic.co/u/shaigbdb)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 7:47am UTC](https://discuss.elastic.co/t/snmptrap-v3/245722 "2020-08-20T07:47:54Z")
Hi, I'm looking for a way to get information from snmptrap V3 into Elasticsearch. The Logstash snmptrap plugin does not support V3. I was able to get the traps into LS and ES using the UDP plugin, however I'm getting g… --- ## [How to settings threadpool on elastic cloud?](https://discuss.elastic.co/t/how-to-settings-threadpool-on-elastic-cloud/245544)
**Author:** [@chautm](https://discuss.elastic.co/u/chautm)\ **Replies:** 5\ **Last updated:** [August 20, 2020, 5:11am UTC](https://discuss.elastic.co/t/how-to-settings-threadpool-on-elastic-cloud/245544 "2020-08-20T05:11:55Z")
My project using elastic cloud but reject error: EsThreadPoolExecutor\[name = instance-0000000003/write, queue capacity = 200 On breaking change description "Thread pool settings are now node-level settings. As such, it… --- ## [Adding new button to saved search object to export saved search object raw data from dashboard](https://discuss.elastic.co/t/adding-new-button-to-saved-search-object-to-export-saved-search-object-raw-data-from-dashboard/244407)
**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 7:20am UTC](https://discuss.elastic.co/t/adding-new-button-to-saved-search-object-to-export-saved-search-object-raw-data-from-dashboard/244407 "2020-08-20T07:20:28Z")
current Kibana version: 6.3.2 to get the next feature: I need to upgrade Kibana version to 7.3.0 now before I do that I have to ask.. I added saved search object to my dashboard that saved search have no filters, … --- ## [Regular expressions](https://discuss.elastic.co/t/regular-expressions/245716)
**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 7:08am UTC](https://discuss.elastic.co/t/regular-expressions/245716 "2020-08-20T07:08:14Z")
I have a word like this in my text, "KRISHNA-1H3" How to searh this word using regular expressions in kibana? and how to use regular expression for special characters? I am using this query: GET my\_index/\_search { … --- ## [Logstash collection for the fields newly added in indexes](https://discuss.elastic.co/t/logstash-collection-for-the-fields-newly-added-in-indexes/245710)
**Author:** [@Dayanidhi\_M](https://discuss.elastic.co/u/Dayanidhi_M)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 6:07am UTC](https://discuss.elastic.co/t/logstash-collection-for-the-fields-newly-added-in-indexes/245710 "2020-08-20T06:07:57Z")
How to load logstash collection to exiting indexes which few new fields added to it....am using JDBC plugin to for logstash collection.......please share your inputs and thoughts which is highly helpful for me --- ## [Getting "Encountered a retryable error. Will Retry with exponential backoff {:code=\>403, :url=\>"http://127.0.0.1:8800/\_bulk"}"](https://discuss.elastic.co/t/getting-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-403-url-http-127-0-0-1-8800-bulk/245703)
**Author:** [@mostafa\_kamal](https://discuss.elastic.co/u/mostafa_kamal)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 5:39am UTC](https://discuss.elastic.co/t/getting-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-403-url-http-127-0-0-1-8800-bulk/245703 "2020-08-20T05:39:23Z")
I am trying to send logs from filebeat to logstash, but getting the following error message \[2020-08-20T06:52:31,108\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[797474f8edf561358316c00f5117e9f69c7d9881a02a0e167b0d2d76… --- ## [HTTP POLLER NTLM AUTH](https://discuss.elastic.co/t/http-poller-ntlm-auth/245683)
**Author:** [@gutierrezfj](https://discuss.elastic.co/u/gutierrezfj)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 5:04am UTC](https://discuss.elastic.co/t/http-poller-ntlm-auth/245683 "2020-08-20T05:04:29Z")
What is the parameter for an NTML type authentication using HTTP POLLER?. I need to verify the response of many websites but first I must go through the NTML authentication. I appreciate your help! --- ## [logstashのFile output pluginにおけるファイルロックについて](https://discuss.elastic.co/t/logstash-file-output-plugin/242689)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 4\ **Last updated:** [August 20, 2020, 4:50am UTC](https://discuss.elastic.co/t/logstash-file-output-plugin/242689 "2020-08-20T04:50:07Z")
お世話になります。 logstashのFile output pluginにおいて、ファイル出力中のファイルロックの仕様はどのようになっているのでしょうか？ （調べてみたものの、情報を見つけることができませんでした） 具体的にやろうとしていることは、Logstashで出力したファイルをシェルなどで定期的にgzipコマンドで圧縮して後続処理へ渡すようなことを考えております。 この際に、inputが不定期で行われるため、ファイル出力… --- ## [How to create Document to Index in Heartbeat Uptime alert](https://discuss.elastic.co/t/how-to-create-document-to-index-in-heartbeat-uptime-alert/245445)
**Author:** [@sai07](https://discuss.elastic.co/u/sai07)\ **Replies:** 2\ **Last updated:** [August 18, 2020, 4:03pm UTC](https://discuss.elastic.co/t/how-to-create-document-to-index-in-heartbeat-uptime-alert/245445 "2020-08-18T16:03:56Z")
we have created hearbeat for crossing thresh hold. what we need to select in Document to index tab in Uptime alert? we are not able to see any docs count in index managment. Could any one please suggest to resolve thi… --- ## [Kibana Dev Tools: How to execute multiple statements in one shot?](https://discuss.elastic.co/t/kibana-dev-tools-how-to-execute-multiple-statements-in-one-shot/245682)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 4:12am UTC](https://discuss.elastic.co/t/kibana-dev-tools-how-to-execute-multiple-statements-in-one-shot/245682 "2020-08-20T04:12:49Z")
hi We don't have access to ssh/backend/elastic-port directly. So the only interaction we have is with Kibana's DEV console to update and retrieve data So i've around 60 commands (mainly deleting and creating watchers)… --- ## [Is there a way to specify multiple cacert files](https://discuss.elastic.co/t/is-there-a-way-to-specify-multiple-cacert-files/245694)
**Author:** [@Qingkun\_Li](https://discuss.elastic.co/u/Qingkun_Li)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 3:50am UTC](https://discuss.elastic.co/t/is-there-a-way-to-specify-multiple-cacert-files/245694 "2020-08-20T03:50:31Z")
Can we specify multiple cacert files? I have multiple Elasticsearch clusters configured with the same domain name (e.g. es.xxx.com), and use DNS to decide which Elasticsearch cluster to use. So my logstash output setting… --- ## [Search.totalhits breaking change in ES 7: Java rest client 6.7](https://discuss.elastic.co/t/search-totalhits-breaking-change-in-es-7-java-rest-client-6-7/245690)
**Author:** [@Musfiqur\_Siddique](https://discuss.elastic.co/u/Musfiqur_Siddique)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 1:30am UTC](https://discuss.elastic.co/t/search-totalhits-breaking-change-in-es-7-java-rest-client-6-7/245690 "2020-08-20T01:30:22Z")
Before ES 7, search.totalhits was a number. In ES 7, it is an object with a value and relation. The behavior can be retained by setting track\_total\_hits=true and rest\_total\_hits\_as\_int=true in search request. But how to… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1272) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1274)