# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1309 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1310 --- ## [Logstash filter plugin (Grok) for custom pattern Not match curly bracket!](https://discuss.elastic.co/t/logstash-filter-plugin-grok-for-custom-pattern-not-match-curly-bracket/243053)
**Author:** [@AliMaleki21](https://discuss.elastic.co/u/AliMaleki21)\ **Replies:** 17\ **Last updated:** [July 29, 2020, 3:42pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-grok-for-custom-pattern-not-match-curly-bracket/243053 "2020-07-29T15:42:57Z")
i have problem with grok plugin, curly bracket not match on Grok filter plugin sample log: {Allowed/Denied} .... regex: ACTION\_FIREWALL (Allowed|Denied) Pattern: {%{ACTION\_FIREWALL:action\_firewall}} when try this … --- ## [By Date Indexes when using Elastic Ingest](https://discuss.elastic.co/t/by-date-indexes-when-using-elastic-ingest/242994)
**Author:** [@tbernhardson](https://discuss.elastic.co/u/tbernhardson)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 3:29pm UTC](https://discuss.elastic.co/t/by-date-indexes-when-using-elastic-ingest/242994 "2020-07-29T15:29:21Z")
When using Logstash it's easy to tell the system to create indices by day (also then making it easy to delete old data). I've tried to figure out how to do the same thing when sending the beats data directly to Elastics… --- ## [Can't get encryption to Logstash working](https://discuss.elastic.co/t/cant-get-encryption-to-logstash-working/243078)
**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\ **Replies:** 0\ **Last updated:** [July 29, 2020, 2:44pm UTC](https://discuss.elastic.co/t/cant-get-encryption-to-logstash-working/243078 "2020-07-29T14:44:23Z")
I've created elasticsearch users to secure communications between the stack (all on one machine). Now I need to encrypt communications to logstash from remote machines. I'm redoing my step because I just don't know wha… --- ## [Как в фильтре поиска проверять размер поля?](https://discuss.elastic.co/t/topic/242934)
**Author:** [@IlyaEvseev](https://discuss.elastic.co/u/IlyaEvseev)\ **Replies:** 3\ **Last updated:** [July 29, 2020, 2:01pm UTC](https://discuss.elastic.co/t/topic/242934 "2020-07-29T14:01:15Z")
Имеется ElasticSearch 7.3.2 Внутри него есть индекс с полем "message" типа "text". Пытаюсь найти в нём документы, в которых поле имеет большую длину: curl -XPOST -H 'Content-Type: application/json' -d ' { "query": {… --- ## [Is anyone using logstash-output-datadog\_metrics with logstash 7.8.0?](https://discuss.elastic.co/t/is-anyone-using-logstash-output-datadog-metrics-with-logstash-7-8-0/243064)
**Author:** [@windowsrefund\_refund](https://discuss.elastic.co/u/windowsrefund_refund)\ **Replies:** 0\ **Last updated:** [July 29, 2020, 1:43pm UTC](https://discuss.elastic.co/t/is-anyone-using-logstash-output-datadog-metrics-with-logstash-7-8-0/243064 "2020-07-29T13:43:18Z")
Full description of the issue I'm seeing: https://github.com/logstash-plugins/logstash-output-datadog\_metrics/issues/16 --- ## [Adding new node to cluster](https://discuss.elastic.co/t/adding-new-node-to-cluster/242223)
**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\ **Replies:** 11\ **Last updated:** [July 29, 2020, 1:21pm UTC](https://discuss.elastic.co/t/adding-new-node-to-cluster/242223 "2020-07-29T13:21:53Z")
Hi, I want to add new node to running cluster. I have two servers on which elastic search 7.8 is setup. Server # 1 IP address x.x.x.x port 9200 hostname: es1.example.com Server # 2 IP Address x.x.x.x port 9200 hostna… --- ## [Ingesting Oracle Cloud Infrastructure Logs from It's Object Storage](https://discuss.elastic.co/t/ingesting-oracle-cloud-infrastructure-logs-from-its-object-storage/243046)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 0\ **Last updated:** [July 29, 2020, 11:59am UTC](https://discuss.elastic.co/t/ingesting-oracle-cloud-infrastructure-logs-from-its-object-storage/243046 "2020-07-29T11:59:08Z")
Hello All, I recently raised a Topic: https://discuss.elastic.co/t/oracle-cloud-infrastructure-logstash-plugin/239813. This is regarding if anyone has come across a way of ingesting logs from OCI object storage. Simil… --- ## [Issue on updating index\_pattern using api](https://discuss.elastic.co/t/issue-on-updating-index-pattern-using-api/236924)
**Author:** [@snolfi](https://discuss.elastic.co/u/snolfi)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 1:07pm UTC](https://discuss.elastic.co/t/issue-on-updating-index-pattern-using-api/236924 "2020-07-29T13:07:10Z")
Hello, i'm having a big issue in updating index\_pattern using api. My index\_patterns have the following property: "index": { "blocks": { "read\_only\_allow\_delete": "true" } } In this way, by kibana console, i don… --- ## [Shall we add more than 50 nested fields in single index?](https://discuss.elastic.co/t/shall-we-add-more-than-50-nested-fields-in-single-index/241901)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 7\ **Last updated:** [July 29, 2020, 12:32pm UTC](https://discuss.elastic.co/t/shall-we-add-more-than-50-nested-fields-in-single-index/241901 "2020-07-29T12:32:41Z")
Hi Team, Greetings..! Hope you are doing good. My requirement is to add 55 nested fields in a single index. but elastic recommendation is 50, If i add more than 50 nested fields means will it affect my performance? Ki… --- ## [How to use jdbc to import data into nested objects?](https://discuss.elastic.co/t/how-to-use-jdbc-to-import-data-into-nested-objects/52871)
**Author:** [@DaanCreemers](https://discuss.elastic.co/u/DaanCreemers)\ **Replies:** 7\ **Last updated:** [July 29, 2020, 10:59am UTC](https://discuss.elastic.co/t/how-to-use-jdbc-to-import-data-into-nested-objects/52871 "2020-07-29T10:59:17Z")
Hi everybody, I have multiple tables in my database which I would like to import into Elasticsearch using a single document type. One of the tables has a one-to-many relation to another table. I will use the example… --- ## [Logstash Pipeline Monitoring Data Is Intermittently Blank In Kibana](https://discuss.elastic.co/t/logstash-pipeline-monitoring-data-is-intermittently-blank-in-kibana/243008)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 10:54am UTC](https://discuss.elastic.co/t/logstash-pipeline-monitoring-data-is-intermittently-blank-in-kibana/243008 "2020-07-29T10:54:15Z")
In my setup I have 3 Logstash(7.5.0) nodes, each node has 20 pipelines. I'm trying to troubleshoot some performance issues with one of my pipelines, but find it difficult because the data is not always viewable in Kiban… --- ## [Unable to read parse log entries in Logstash](https://discuss.elastic.co/t/unable-to-read-parse-log-entries-in-logstash/243007)
**Author:** [@Dark](https://discuss.elastic.co/u/Dark)\ **Replies:** 1\ **Last updated:** [July 29, 2020, 7:57am UTC](https://discuss.elastic.co/t/unable-to-read-parse-log-entries-in-logstash/243007 "2020-07-29T07:57:59Z")
I have filebeat pushing data to logstash. Logstash is only able to parse the first entry pushed by beats and the rest are not getting filtered. This is the record present in log file: 2020-07-29 08:35:18,042 INFO \[gov… --- ## [Updating documents when using auto-generated IDs](https://discuss.elastic.co/t/updating-documents-when-using-auto-generated-ids/242828)
**Author:** [@jerrymj](https://discuss.elastic.co/u/jerrymj)\ **Replies:** 6\ **Last updated:** [July 29, 2020, 9:52am UTC](https://discuss.elastic.co/t/updating-documents-when-using-auto-generated-ids/242828 "2020-07-29T09:52:07Z")
Hi, I have an index running on 6.3. It is about 11MM documents, and since the documents are nested, they are much larger in count. These documents represent information stored in multiple databases relating to a specifi… --- ## [Cannot delete index template](https://discuss.elastic.co/t/cannot-delete-index-template/243009)
**Author:** [@Karel\_Cech](https://discuss.elastic.co/u/Karel_Cech)\ **Replies:** 1\ **Last updated:** [July 29, 2020, 9:58am UTC](https://discuss.elastic.co/t/cannot-delete-index-template/243009 "2020-07-29T09:58:18Z")
Hi, I accidentally created 2 templates with the same name and same pattern. Unfortunately, I don't remember how this happened, because the API does not allow to create templates of same priority and same pattern. But I… --- ## [All Shards failed to assign](https://discuss.elastic.co/t/all-shards-failed-to-assign/242075)
**Author:** [@Pradeep\_K\_S](https://discuss.elastic.co/u/Pradeep_K_S)\ **Replies:** 18\ **Last updated:** [July 29, 2020, 9:01am UTC](https://discuss.elastic.co/t/all-shards-failed-to-assign/242075 "2020-07-29T09:01:55Z")
Hi, I tried restoring EBS of Elastic search nodes from one cluster to another but after restoring the EBS nodes are running in EC2 but cluster health shows red. GET http://hostname/\_cluster/health?pretty { "cluster\_n… --- ## [How can I group similar message in visualization](https://discuss.elastic.co/t/how-can-i-group-similar-message-in-visualization/240668)
**Author:** [@Fedir\_Yatseta](https://discuss.elastic.co/u/Fedir_Yatseta)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 8:54am UTC](https://discuss.elastic.co/t/how-can-i-group-similar-message-in-visualization/240668 "2020-07-29T08:54:02Z")
I can not understand how to group similar message in visualisation, i have field "message" in and why in field don't have message . I want to do group message, I get message with time, it time different, me need divi… --- ## [Kibana에서 distinct list를 불러오는 방법](https://discuss.elastic.co/t/kibana-distinct-list/241090)
**Author:** [@4orty](https://discuss.elastic.co/u/4orty)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 8:52am UTC](https://discuss.elastic.co/t/kibana-distinct-list/241090 "2020-07-29T08:52:51Z")
안녕하세요. elasticsearch에 저장된 데이터에 질의를 통해 특정 field의 distinct value list를 불러오고 싶습니다. kibana로 하는 방법과 e/s api를 통해 하는 방법 두가지 모두 알고싶은데 방법이 있나요? 제가 지금 해본 방법으로는 kibana에서 visualize에 들어가서 Buckets에 X-axis에 Terns, field명을 입력하고 Order… --- ## [Kibana 7.7.0 cannot delete saved object and create new index](https://discuss.elastic.co/t/kibana-7-7-0-cannot-delete-saved-object-and-create-new-index/242491)
**Author:** [@wind0316](https://discuss.elastic.co/u/wind0316)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 8:32am UTC](https://discuss.elastic.co/t/kibana-7-7-0-cannot-delete-saved-object-and-create-new-index/242491 "2020-07-29T08:32:58Z")
Hi there my Kibana is not able to create index and delete saved object. Anyone might assist on checking. My Kibana is build on docker with linux system Thank you in advance --- ## [Problème de création de cluster](https://discuss.elastic.co/t/probleme-de-creation-de-cluster/243018)
**Author:** [@Medidou](https://discuss.elastic.co/u/Medidou)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 8:30am UTC](https://discuss.elastic.co/t/probleme-de-creation-de-cluster/243018 "2020-07-29T08:30:28Z")
Bonjour voila le problème quand je monte mon cluster ES (7.8)j'ai mes 3 serveurs qui reste chacun en master et je du coup impossible de crée le fameux cluster voici la conf chaque serveur a été installé un par un Hel… --- ## [Slow Elasticsearch Ingestion](https://discuss.elastic.co/t/slow-elasticsearch-ingestion/243006)
**Author:** [@evacch](https://discuss.elastic.co/u/evacch)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 8:20am UTC](https://discuss.elastic.co/t/slow-elasticsearch-ingestion/243006 "2020-07-29T08:20:50Z")
I am new to ELK stack and I am currently testing on the performance of the Elasticsearch with 3 different configurations as follows: One source file: 1GB One source file: 3GB 3 source files: 1GB+1GB+1GB It took me 3 t… --- ## [The title of Kibana](https://discuss.elastic.co/t/the-title-of-kibana/243013)
**Author:** [@chenghan1993](https://discuss.elastic.co/u/chenghan1993)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 8:19am UTC](https://discuss.elastic.co/t/the-title-of-kibana/243013 "2020-07-29T08:19:33Z")
Hi, everyone I need modify the title of kibana I can't find this file, and i dont know if it is possible. Thank you. --- ## [Logstash filter conditionals](https://discuss.elastic.co/t/logstash-filter-conditionals/243005)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 8:05am UTC](https://discuss.elastic.co/t/logstash-filter-conditionals/243005 "2020-07-29T08:05:12Z")
Hi there, I have 2 simple questions reagarding this logstash conditionals example. I have found something like this: ... if \[fields\]\[some\_id\] { mutate { add\_field =\> {"some\_id" =\> "%{\[fields\]\[some\_id\]}"} } } ... … --- ## [Logstash - Multiple outputs with different content](https://discuss.elastic.co/t/logstash-multiple-outputs-with-different-content/242300)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 3\ **Last updated:** [July 29, 2020, 7:55am UTC](https://discuss.elastic.co/t/logstash-multiple-outputs-with-different-content/242300 "2020-07-29T07:55:28Z")
Hello, I would like to achieve to have multiple outputs withing one pipeline but with different content of documents. ONE PIPELINE OUTPUT FOR CUSTOMER (REDIS QUEUE or LOGSTASH) only one field: \[@metadata\]\[message\]\[… --- ## [Modern Plugin router, specify timeout](https://discuss.elastic.co/t/modern-plugin-router-specify-timeout/242088)
**Author:** [@McKittrick\_Kaminski](https://discuss.elastic.co/u/McKittrick_Kaminski)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 7:20am UTC](https://discuss.elastic.co/t/modern-plugin-router-specify-timeout/242088 "2020-07-29T07:20:15Z")
Hey guys, making a Kibana plugin. I'm uploading a large-ish (think 100mb) file with HTTP2 multipart/form-data, and streaming the data into a GCP bucket. I was able to do this cleanly with the old plugin, with the follow… --- ## [Rabbitmq setup in ELK stack](https://discuss.elastic.co/t/rabbitmq-setup-in-elk-stack/242696)
**Author:** [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\ **Replies:** 1\ **Last updated:** [July 29, 2020, 7:00am UTC](https://discuss.elastic.co/t/rabbitmq-setup-in-elk-stack/242696 "2020-07-29T07:00:13Z")
Hi, I need to install a messaging queue in the ELK stack. I am planning to use RabbitMQ for this purpose since my Elastic installation is on Windows servers. I have around 30 app servers on which logstash is installed … --- ## [An error occurred while enabling session management: Error: Failed when trying to obtain the endpoints from your IdP](https://discuss.elastic.co/t/an-error-occurred-while-enabling-session-management-error-failed-when-trying-to-obtain-the-endpoints-from-your-idp/242993)
**Author:** [@Kundan\_Singh](https://discuss.elastic.co/u/Kundan_Singh)\ **Replies:** 4\ **Last updated:** [July 29, 2020, 5:01am UTC](https://discuss.elastic.co/t/an-error-occurred-while-enabling-session-management-error-failed-when-trying-to-obtain-the-endpoints-from-your-idp/242993 "2020-07-29T05:01:34Z")
I am configuring kibana 7.2 with Single Sign-On with OpenID and Keycloak for https and its throwing error unable to obtain IDP endpoint. Kibana.yml # Kibana is served by a back end server. This setting specifies the po… --- ## [Match terms with characters in a sequence](https://discuss.elastic.co/t/match-terms-with-characters-in-a-sequence/238768)
**Author:** [@emarthinsen](https://discuss.elastic.co/u/emarthinsen)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 4:33am UTC](https://discuss.elastic.co/t/match-terms-with-characters-in-a-sequence/238768 "2020-07-29T04:33:31Z")
I'm interested in building an autocomplete-style interface where someone can enter characters and the results will be the terms that have those characters in that order, but not necessarily contiguous. This is functiona… --- ## [Cant analyze byte string ( b'{... \\\\u0633 ... }' )](https://discuss.elastic.co/t/cant-analyze-byte-string-b-u0633/242605)
**Author:** [@momora9809](https://discuss.elastic.co/u/momora9809)\ **Replies:** 6\ **Last updated:** [July 29, 2020, 4:27am UTC](https://discuss.elastic.co/t/cant-analyze-byte-string-b-u0633/242605 "2020-07-29T04:27:11Z")
First of all, sorry for the title. I don't know what should I call that (byte string?). I have a data that is like this: b'{"id": "2", "words": \["\\\\u0633\\\\u0647\\\\u0627\\\\u0645\\\\u062f\\\\u0627\\\\u0631\\\\u06cc", "\\\\u0634\\\\u06… --- ## [HOW TO logstash convert all fields to String](https://discuss.elastic.co/t/how-to-logstash-convert-all-fields-to-string/242844)
**Author:** [@thaopt](https://discuss.elastic.co/u/thaopt)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 4:12am UTC](https://discuss.elastic.co/t/how-to-logstash-convert-all-fields-to-string/242844 "2020-07-29T04:12:30Z")
Hello I am a foreign developer. My process is: Json \>\> Filebeat \>\> logstash \>\> Kibana So how can i convert all of fileds to String in Json via Logstash Filter config? P/s: I added this config to pipeline but not work… --- ## [Is My Date Range Format Correct?](https://discuss.elastic.co/t/is-my-date-range-format-correct/242866)
**Author:** [@Ethan777100](https://discuss.elastic.co/u/Ethan777100)\ **Replies:** 3\ **Last updated:** [July 29, 2020, 2:09am UTC](https://discuss.elastic.co/t/is-my-date-range-format-correct/242866 "2020-07-29T02:09:27Z")
I actually want to obtain 2 separate charts within the same visualisation, seperated base on date range? Is my Date Range Format Correct? coz i get a bad request error? E400 means i made a syntax error in the query… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1308) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1310)