# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1301 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1302 --- ## [How to export csv when \_source is disabled](https://discuss.elastic.co/t/how-to-export-csv-when-source-is-disabled/243150)
**Author:** [@t98907](https://discuss.elastic.co/u/t98907)\ **Replies:** 2\ **Last updated:** [August 4, 2020, 4:38am UTC](https://discuss.elastic.co/t/how-to-export-csv-when-source-is-disabled/243150 "2020-08-04T04:38:40Z")
Hi there, I looked into the reason why kibana can't export csv. It was because I had \_source disabled in my index, so I couldn't export csv with kibana. But I'm storing the fields I need, and discover is outputting th… --- ## [Sample Dashboard isnt working](https://discuss.elastic.co/t/sample-dashboard-isnt-working/243642)
**Author:** [@samoffice](https://discuss.elastic.co/u/samoffice)\ **Replies:** 1\ **Last updated:** [August 4, 2020, 3:19am UTC](https://discuss.elastic.co/t/sample-dashboard-isnt-working/243642 "2020-08-04T03:19:58Z")
Trying to create a build a sample dashboard based on this sample given: https://www.elastic.co/guide/en/kibana/current/tutorial-build-dashboard.html Facing following errors: Trying to set mappings as below: PUT /shak… --- ## [Aggregation Filter 2 logs same index](https://discuss.elastic.co/t/aggregation-filter-2-logs-same-index/243624)
**Author:** [@rcavezzale](https://discuss.elastic.co/u/rcavezzale)\ **Replies:** 11\ **Last updated:** [August 4, 2020, 1:38am UTC](https://discuss.elastic.co/t/aggregation-filter-2-logs-same-index/243624 "2020-08-04T01:38:18Z")
Dear Comminuty I need your help to fix my issue. i have 2 logs in same index that should be aggregate to view all information on the Data Table visualize input { udp { port =\> 1514 type =\> "alcatel" } } filter { if \[… --- ## [Kibana Datatable - Filters and Url links](https://discuss.elastic.co/t/kibana-datatable-filters-and-url-links/243487)
**Author:** [@nshrestha](https://discuss.elastic.co/u/nshrestha)\ **Replies:** 4\ **Last updated:** [August 4, 2020, 12:08am UTC](https://discuss.elastic.co/t/kibana-datatable-filters-and-url-links/243487 "2020-08-04T00:08:12Z")
Hi, Am creating a Datatable in Kibana. Have edited a field format as Url and supplied the relevant link in Url template. It is working as expected when I click on the field. But when I use filters on that field in datat… --- ## [Data from different sources and of different formats](https://discuss.elastic.co/t/data-from-different-sources-and-of-different-formats/243455)
**Author:** [@tnkumar](https://discuss.elastic.co/u/tnkumar)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 10:18pm UTC](https://discuss.elastic.co/t/data-from-different-sources-and-of-different-formats/243455 "2020-08-03T22:18:59Z")
Reliably and securely take data from any source, in any format, then search, analyze, and visualize it in real time - is what ELK is about I have word, pdf, ppt documents. Are these called formats? How do I ingest these… --- ## [SIEM course Lab](https://discuss.elastic.co/t/siem-course-lab/243570)
**Author:** [@Avi\_Manor](https://discuss.elastic.co/u/Avi_Manor)\ **Replies:** 0\ **Last updated:** [August 3, 2020, 1:04pm UTC](https://discuss.elastic.co/t/siem-course-lab/243570 "2020-08-03T13:04:36Z")
Hi I am taking the course to get to know the SEIM and did not understand how I connect to the SIEM (and in general, to KIBANA) to see the results of what I define on the Unix machines in the lab. Are there any guidelin… --- ## [Kibana stops running when tried to access with curl or browser](https://discuss.elastic.co/t/kibana-stops-running-when-tried-to-access-with-curl-or-browser/243553)
**Author:** [@pramod\_n1](https://discuss.elastic.co/u/pramod_n1)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 9:38pm UTC](https://discuss.elastic.co/t/kibana-stops-running-when-tried-to-access-with-curl-or-browser/243553 "2020-08-03T21:38:41Z")
{"type":"log","@timestamp":"2020-08-03T11:40:43Z","tags":\["warning","plugins-discovery"\],"pid":9766,"message":"Expect plugin "id" in camelCase, but found: eui\_utils"} {"type":"log","@timestamp":"2020-08-03T11:40:43Z","t… --- ## [Problem with the map in kibana](https://discuss.elastic.co/t/problem-with-the-map-in-kibana/243547)
**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 9:35pm UTC](https://discuss.elastic.co/t/problem-with-the-map-in-kibana/243547 "2020-08-03T21:35:59Z")
Hello, I have a problem with the map in kibana. I use a geocoordinate map ( visualisation ) to have a look on the geo\_points returned by geoip from the client ip. When i edit this map as a visualisation, there is no p… --- ## [How to set total limit field to be other than 1000 by default](https://discuss.elastic.co/t/how-to-set-total-limit-field-to-be-other-than-1000-by-default/243564)
**Author:** [@Abdul\_Hameed](https://discuss.elastic.co/u/Abdul_Hameed)\ **Replies:** 3\ **Last updated:** [August 3, 2020, 9:30pm UTC](https://discuss.elastic.co/t/how-to-set-total-limit-field-to-be-other-than-1000-by-default/243564 "2020-08-03T21:30:18Z")
Hi, I would like to increase the limit of total fields for my indices. I know that we can change it in Kibana by sending an API call as such: PUT logstash-\*/\_settings { "index.mapping.total\_fields.limit": 5000 } Bu… --- ## [Import only a specific default dashboards](https://discuss.elastic.co/t/import-only-a-specific-default-dashboards/243539)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 9:12pm UTC](https://discuss.elastic.co/t/import-only-a-specific-default-dashboards/243539 "2020-08-03T21:12:28Z")
Hi there, as you know there are ready to use default dasboards. Do you know a best practice or a trick to only import specific dashboards from the default ones? For example: I would like to only import the metricbeat d… --- ## [How to search for code in this GitHub?](https://discuss.elastic.co/t/how-to-search-for-code-in-this-github/242790)
**Author:** [@thanhlam](https://discuss.elastic.co/u/thanhlam)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 9:12pm UTC](https://discuss.elastic.co/t/how-to-search-for-code-in-this-github/242790 "2020-08-03T21:12:09Z")
Hello, I'm new to this GitHub but very interested in searching for code. So that I can find and learn how something works. Can someone point me to instructions on how to search for a text string for example in the code? … --- ## [Azure Market Place Deployment](https://discuss.elastic.co/t/azure-market-place-deployment/243530)
**Author:** [@wa2rod](https://discuss.elastic.co/u/wa2rod)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 9:11pm UTC](https://discuss.elastic.co/t/azure-market-place-deployment/243530 "2020-08-03T21:11:25Z")
Hi, I am new to ELK. I have installed the ELK Azure Market Place solution and i can't access Kibana. The Azure deployment was successful, the Kibana service is running on the kibana VM, the Elasticsearch service is also… --- ## [\[esaggs\] \> Internal Server Error in Dashboard error](https://discuss.elastic.co/t/esaggs-internal-server-error-in-dashboard-error/243500)
**Author:** [@nisargtest1](https://discuss.elastic.co/u/nisargtest1)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 9:03pm UTC](https://discuss.elastic.co/t/esaggs-internal-server-error-in-dashboard-error/243500 "2020-08-03T21:03:06Z")
While visualizing data through dashboard,I am getting \[esaggs\] \> Internal Server Error for long time range e.g. 100 hours, 1 week, 8 days. It works fine for short time range e.g. 24 hours, 48 hours --- ## [Use envoy proxy between elasticsearch nodes](https://discuss.elastic.co/t/use-envoy-proxy-between-elasticsearch-nodes/243433)
**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\ **Replies:** 3\ **Last updated:** [August 3, 2020, 8:38pm UTC](https://discuss.elastic.co/t/use-envoy-proxy-between-elasticsearch-nodes/243433 "2020-08-03T20:38:45Z")
Is it possible to use envoy proxy between elasticsearch nodes? The purpose is to enable tls verifications for any communication between nodes through envoy proxy. I am still in the early stage of this task, but would li… --- ## [Ruby code to iterate through list of pipelines received by Logstash API](https://discuss.elastic.co/t/ruby-code-to-iterate-through-list-of-pipelines-received-by-logstash-api/243616)
**Author:** [@aidanoc15](https://discuss.elastic.co/u/aidanoc15)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 7:52pm UTC](https://discuss.elastic.co/t/ruby-code-to-iterate-through-list-of-pipelines-received-by-logstash-api/243616 "2020-08-03T19:52:48Z")
Hi, I am trying to implement monitoring and alerting for some of our pipelines that we have set up in logstash. My thought is to run a cron job on the Logstash API (specifically \_nodes/stats/pipelines) to retrieve both t… --- ## [Looking for a Logstash Kubernetes Deployment/Stateful Configuration](https://discuss.elastic.co/t/looking-for-a-logstash-kubernetes-deployment-stateful-configuration/243558)
**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 7:07pm UTC](https://discuss.elastic.co/t/looking-for-a-logstash-kubernetes-deployment-stateful-configuration/243558 "2020-08-03T19:07:22Z")
Hi Team, I am trying to setup logstash in K8's cluster and after trying various ways, I ended up nowhere. I would like to know if there is any document which shows a working Logstash K8's Deployment/Statefulset files. --- ## [Delete and Insert documents in elasticsearch from logstash](https://discuss.elastic.co/t/delete-and-insert-documents-in-elasticsearch-from-logstash/243614)
**Author:** [@Gabriel\_Mare](https://discuss.elastic.co/u/Gabriel_Mare)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 6:53pm UTC](https://discuss.elastic.co/t/delete-and-insert-documents-in-elasticsearch-from-logstash/243614 "2020-08-03T18:53:49Z")
Hi, I need to delete all documents and then add documents from logstash, in the same query. Is this possible? How can I do? --- ## [Looking for systemd startup script examples for Elasticsearch 7.7.0, etc... CentOS 7](https://discuss.elastic.co/t/looking-for-systemd-startup-script-examples-for-elasticsearch-7-7-0-etc-centos-7/243405)
**Author:** [@uf0undzach](https://discuss.elastic.co/u/uf0undzach)\ **Replies:** 3\ **Last updated:** [August 3, 2020, 5:08pm UTC](https://discuss.elastic.co/t/looking-for-systemd-startup-script-examples-for-elasticsearch-7-7-0-etc-centos-7/243405 "2020-08-03T17:08:42Z")
Relatively new to ELK... I inherited this ELK server from another admin, and it appears that it was not installed via conventional means, as there are no x.services files in /systemd/system, etc.. The ELK processes work… --- ## [Elastic Alerting for Cybersecurity lab doesn't work](https://discuss.elastic.co/t/elastic-alerting-for-cybersecurity-lab-doesnt-work/241095)
**Author:** [@dwi.nugroho](https://discuss.elastic.co/u/dwi.nugroho)\ **Replies:** 8\ **Last updated:** [August 3, 2020, 4:57pm UTC](https://discuss.elastic.co/t/elastic-alerting-for-cybersecurity-lab-doesnt-work/241095 "2020-08-03T16:57:42Z")
i've enrolled the Elastic alerting for Cybersecurity lab, it seems that the lab prepared on strigo doesn't work. there no bash terminal that usually provided for us to config.. it shows in blank and i can't access the ki… --- ## [Regex search on the content field - fscrawler](https://discuss.elastic.co/t/regex-search-on-the-content-field-fscrawler/242815)
**Author:** [@arielwb](https://discuss.elastic.co/u/arielwb)\ **Replies:** 3\ **Last updated:** [August 3, 2020, 4:50pm UTC](https://discuss.elastic.co/t/regex-search-on-the-content-field-fscrawler/242815 "2020-08-03T16:50:24Z")
Hi! I'm trying to use fscrawler to index my files and kibana to do a regex search in the contents field. I'm very new to all this, but it seems that to do a regex search, first I need a keyword type field. Am I right? … --- ## [AzureBlob Old/Existing logs not Ingesting](https://discuss.elastic.co/t/azureblob-old-existing-logs-not-ingesting/243603)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 0\ **Last updated:** [August 3, 2020, 4:20pm UTC](https://discuss.elastic.co/t/azureblob-old-existing-logs-not-ingesting/243603 "2020-08-03T16:20:15Z")
Hello, Hope someone could help. I have logstash ingesting logs from Azureblob storage. What happened is that logs stopped ingesting 2 days ago. Today I got it working again however, the logs from the last 2 days are no… --- ## [Unrecognized @timestamp value type=class org.jruby.RubyFloat](https://discuss.elastic.co/t/unrecognized-timestamp-value-type-class-org-jruby-rubyfloat/243560)
**Author:** [@111266](https://discuss.elastic.co/u/111266)\ **Replies:** 10\ **Last updated:** [August 3, 2020, 4:08pm UTC](https://discuss.elastic.co/t/unrecognized-timestamp-value-type-class-org-jruby-rubyfloat/243560 "2020-08-03T16:08:22Z")
Use: "logstash.version"=\>"7.8.0" kafka\_2.13-2.5.0 Config: input { kafka { bootstrap\_servers =\> "ip:port" auto\_offset\_reset =\> "earliest" enable\_auto\_commit =\> true topics =\> \["logs… --- ## [Add two value from two record](https://discuss.elastic.co/t/add-two-value-from-two-record/243126)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 24\ **Last updated:** [August 3, 2020, 4:02pm UTC](https://discuss.elastic.co/t/add-two-value-from-two-record/243126 "2020-08-03T16:02:47Z")
I am gone a receive two line of record every few min. example name : total code1 : 100 code2: 101 I would like to create a record { name: code1 total: 100 combine\_total: 201 } { name:code2 total: … --- ## [Metricbeat - Max CPU and Memory usage](https://discuss.elastic.co/t/metricbeat-max-cpu-and-memory-usage/242371)
**Author:** [@vdelcampo](https://discuss.elastic.co/u/vdelcampo)\ **Replies:** 6\ **Last updated:** [August 3, 2020, 4:01pm UTC](https://discuss.elastic.co/t/metricbeat-max-cpu-and-memory-usage/242371 "2020-08-03T16:01:07Z")
Hi. Im using metricbeat to send CPU and Memory metrics of my servers to ES. How can i extract in a table the maximum value of mem and cpu usage and the timestamp? Regards Víctor --- ## [SIEM detection signals not showing up](https://discuss.elastic.co/t/siem-detection-signals-not-showing-up/241700)
**Author:** [@Darren\_G](https://discuss.elastic.co/u/Darren_G)\ **Replies:** 8\ **Last updated:** [August 3, 2020, 4:00pm UTC](https://discuss.elastic.co/t/siem-detection-signals-not-showing-up/241700 "2020-08-03T16:00:02Z")
I am trying to run detections in 7.8 on historical data by changing the time stamps to be recent and reindexing. The data is ECS compliant. The index is in the siem defaultIndex. I have the Additional look-back time set … --- ## [Need to ingest maillog generated by sendmail to Elasticsearch](https://discuss.elastic.co/t/need-to-ingest-maillog-generated-by-sendmail-to-elasticsearch/243598)
**Author:** [@xzelkworld](https://discuss.elastic.co/u/xzelkworld)\ **Replies:** 0\ **Last updated:** [August 3, 2020, 3:24pm UTC](https://discuss.elastic.co/t/need-to-ingest-maillog-generated-by-sendmail-to-elasticsearch/243598 "2020-08-03T15:24:37Z")
We need to ingest sendmail process generated maillog into Elasticsearch cluster. I have created latest installations of filebeat/logstash/elasticsearch stack on my test environment. I did Google search and found this is … --- ## [New cluster, lots of unused fields in filebeat-\*](https://discuss.elastic.co/t/new-cluster-lots-of-unused-fields-in-filebeat/242080)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 3:22pm UTC](https://discuss.elastic.co/t/new-cluster-lots-of-unused-fields-in-filebeat/242080 "2020-08-03T15:22:23Z")
Hello, Just started a trial of an Elastic Cloud 7.8.0 cluster on GCP. Enabled the system module in Filebeat and noticed a huge amount of unused fields? Is there a way to make Kibana Discover only show fields whih are ac… --- ## [Filebeat logs unauthorized when addressing old namespaces](https://discuss.elastic.co/t/filebeat-logs-unauthorized-when-addressing-old-namespaces/243220)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 7\ **Last updated:** [August 3, 2020, 2:31pm UTC](https://discuss.elastic.co/t/filebeat-logs-unauthorized-when-addressing-old-namespaces/243220 "2020-08-03T14:31:48Z")
Hi elastic team, I am currently struggling with the following issue. First I am trying to replace fluentd with filebeat in our kubernetes cluster for log collection. So far first tests are looking promessing, since I … --- ## [Syncing Mongodb with Elasticsearch](https://discuss.elastic.co/t/syncing-mongodb-with-elasticsearch/243328)
**Author:** [@sandeepsingh](https://discuss.elastic.co/u/sandeepsingh)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 2:15pm UTC](https://discuss.elastic.co/t/syncing-mongodb-with-elasticsearch/243328 "2020-08-03T14:15:06Z")
Hi, I wish to transfer data from Elasticsearch into a Mongodb instance. The data in Elasticsearch is nearly 120 GBs and is continuoly updating with nearly 4GB per day. How do I do it? What I have tried: Logstash is ve… --- ## [File path in connection string](https://discuss.elastic.co/t/file-path-in-connection-string/243578)
**Author:** [@Bob\_Schmidt](https://discuss.elastic.co/u/Bob_Schmidt)\ **Replies:** 0\ **Last updated:** [August 3, 2020, 1:26pm UTC](https://discuss.elastic.co/t/file-path-in-connection-string/243578 "2020-08-03T13:26:22Z")
We are trying to connect to a derby database that has a file path in the conncetion string jdbc:derby://host:port/c:path\_to\_database. We have a successfull connection when using datagrip but with logstash we are getting … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1300) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1302)