# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1311 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1312 --- ## [Tolerance of spelling mistakes when searching with shingles](https://discuss.elastic.co/t/tolerance-of-spelling-mistakes-when-searching-with-shingles/242887)
**Author:** [@LanceWalton](https://discuss.elastic.co/u/LanceWalton)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 10:43am UTC](https://discuss.elastic.co/t/tolerance-of-spelling-mistakes-when-searching-with-shingles/242887 "2020-07-28T10:43:16Z")
Hi. I'm very new to elasticsearch. I hope this is the right forum for asking this question. In https://www.elastic.co/blog/searching-with-shingles, Zachary Tong describes the solution to the problem I have, except at t… --- ## [Kibana Controls Does not Show All Possible Values](https://discuss.elastic.co/t/kibana-controls-does-not-show-all-possible-values/241957)
**Author:** [@pulkit007](https://discuss.elastic.co/u/pulkit007)\ **Replies:** 3\ **Last updated:** [July 28, 2020, 10:13am UTC](https://discuss.elastic.co/t/kibana-controls-does-not-show-all-possible-values/241957 "2020-07-28T10:13:35Z")
Hi, I am using Kibana 6.6.0. In that, I am trying to create controls based on the distinct possible values of a particular filed. Now, all the distinct possible values are not shown in the controls. I have also create… --- ## [Merge date and time field](https://discuss.elastic.co/t/merge-date-and-time-field/242862)
**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 10:07am UTC](https://discuss.elastic.co/t/merge-date-and-time-field/242862 "2020-07-28T10:07:34Z")
So, I have been trying to parse fortigate logs using logstash, I came across date and time fields, in fortigate there are two different fields, I tried to parse those fileds using mutate {add\_field =\> { "@timestamp" =\> … --- ## [Parse multi line json](https://discuss.elastic.co/t/parse-multi-line-json/242677)
**Author:** [@laxmikanth](https://discuss.elastic.co/u/laxmikanth)\ **Replies:** 11\ **Last updated:** [July 28, 2020, 9:57am UTC](https://discuss.elastic.co/t/parse-multi-line-json/242677 "2020-07-28T09:57:40Z")
Hi, When I try to parse multi line json as below, I am seeing in ELK as multiline, \_jsonparsefailure, \_grokparsefailure from below json file content, want to remove KEY4 & host and send rest of the fields to elastic se… --- ## [AWS PrivateLinkの使用方法](https://discuss.elastic.co/t/aws-privatelink/242146)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 9:45am UTC](https://discuss.elastic.co/t/aws-privatelink/242146 "2020-07-28T09:45:50Z")
AWS PrivateLinkを利用し、filebeatからElasticCloudへデータを登録しようとしています。 実施方法は以下を参照しています。 https://www.elastic.co/guide/en/cloud/current/ec-traffic-filtering-vpc.html VPCエンドポイントを作成し、作成したエンドポイントを介してElasticCloudに送信するようにfilebeat側に設定を入… --- ## [DSL query aggregation question](https://discuss.elastic.co/t/dsl-query-aggregation-question/242873)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 9:43am UTC](https://discuss.elastic.co/t/dsl-query-aggregation-question/242873 "2020-07-28T09:43:10Z")
Dears, I have some query with aggregation like this: "aggs": { "NAME": { "terms": { "script": "doc\['si.rc.keyword'\].getValue().substring(0,1)", "order": { "\_key": "asc" } … --- ## [How to configure log levels for a cluster?](https://discuss.elastic.co/t/how-to-configure-log-levels-for-a-cluster/242391)
**Author:** [@overmorrow](https://discuss.elastic.co/u/overmorrow)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 9:33am UTC](https://discuss.elastic.co/t/how-to-configure-log-levels-for-a-cluster/242391 "2020-07-28T09:33:38Z")
Hi! I'll start off that I love your ECK offering so far :slight\_smile: Quick question is there an easy way to configure log level options for a particular node group in the YAML manifest? --- ## [Drilldowns using scripted fields to preserve timestamps](https://discuss.elastic.co/t/drilldowns-using-scripted-fields-to-preserve-timestamps/242339)
**Author:** [@kilianten](https://discuss.elastic.co/u/kilianten)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 9:31am UTC](https://discuss.elastic.co/t/drilldowns-using-scripted-fields-to-preserve-timestamps/242339 "2020-07-28T09:31:25Z")
Hey, Im currently using 7.2 Kibana I'd like to be able to preserve the timestamp when using drilldowns in scripted fields. For example, if I'm looking at a dashboard with the timerange 30d-Now to now, I'd like to be ab… --- ## [ElasticSearch Transform Find Time Difference across documents](https://discuss.elastic.co/t/elasticsearch-transform-find-time-difference-across-documents/242861)
**Author:** [@vihar\_mamania](https://discuss.elastic.co/u/vihar_mamania)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 9:16am UTC](https://discuss.elastic.co/t/elasticsearch-transform-find-time-difference-across-documents/242861 "2020-07-28T09:16:48Z")
I have multiple logs being sent out to Elasticsearch in the following way: { "resourceId" : 12345, "event" : "SUBMITTED/PROCESSING/SUCCESSFUL" "event\_time" : "dateString" } Resource Id w… --- ## [Pass applied filter value in dashboard in URL field](https://discuss.elastic.co/t/pass-applied-filter-value-in-dashboard-in-url-field/242859)
**Author:** [@ruben.ramirez](https://discuss.elastic.co/u/ruben.ramirez)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 8:14am UTC](https://discuss.elastic.co/t/pass-applied-filter-value-in-dashboard-in-url-field/242859 "2020-07-28T08:14:00Z")
Hi everyone. I want to take the value of the applied filter and enter it in a filter to be applied in the other dashboard. For example I have this filter: And I want to add this value to a link in a url filter field… --- ## [ElasticSearch is being attacked?](https://discuss.elastic.co/t/elasticsearch-is-being-attacked/242727)
**Author:** [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\ **Replies:** 3\ **Last updated:** [July 28, 2020, 8:07am UTC](https://discuss.elastic.co/t/elasticsearch-is-being-attacked/242727 "2020-07-28T08:07:37Z")
Hi, I have installed ES since month now, everything was fine until Friday. Each time, I need to restore ES manually (Delete / Restart / Launch my jobs). But since Friday, after a few hours, everything is down again! M… --- ## [Elasticsearch sub aggregation not working with max](https://discuss.elastic.co/t/elasticsearch-sub-aggregation-not-working-with-max/242852)
**Author:** [@Raza\_Jamil](https://discuss.elastic.co/u/Raza_Jamil)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 7:48am UTC](https://discuss.elastic.co/t/elasticsearch-sub-aggregation-not-working-with-max/242852 "2020-07-28T07:48:24Z")
I have nested data of shape: albums have tracks, tracks have versions. album: { tracks: \[ { id: 1, mainTrackID: 1, // mainTrackID = id means main track versions: \[ { … --- ## [Logstash - Retry with exponential backoff code=\>400,](https://discuss.elastic.co/t/logstash-retry-with-exponential-backoff-code-400/242849)
**Author:** [@GraceYu](https://discuss.elastic.co/u/GraceYu)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 7:34am UTC](https://discuss.elastic.co/t/logstash-retry-with-exponential-backoff-code-400/242849 "2020-07-28T07:34:15Z")
Hi, I have started logstash with the following error: \[2020-07-28T15:19:51,466\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[ac34975042de783740a7fba68d15a74cca99c92e561d5fc2f692e54892613f0d\] Encountered a retryable err… --- ## [Elastic Stack performance](https://discuss.elastic.co/t/elastic-stack-performance/242653)
**Author:** [@ArousOussema](https://discuss.elastic.co/u/ArousOussema)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 7:05am UTC](https://discuss.elastic.co/t/elastic-stack-performance/242653 "2020-07-28T07:05:41Z")
Greetings, I'm a student at the Hochschule Darmstadt in Germany. I'm currently working on a project for my university, where we’re trying to find a suitable Log management tool for our big data cluster. It will be so h… --- ## [Use 2 version ES on one server](https://discuss.elastic.co/t/use-2-version-es-on-one-server/242415)
**Author:** [@YURA](https://discuss.elastic.co/u/YURA)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 6:50am UTC](https://discuss.elastic.co/t/use-2-version-es-on-one-server/242415 "2020-07-28T06:50:10Z")
I have server CentOS 7, there is running ES version "number" : "6.4.0", can I install new version (version 7\*) and use both of them at the same time on one server? I wanna use 2 differet verion on server, is it possib… --- ## [Logstash jdbc sqlite file in readonly directory](https://discuss.elastic.co/t/logstash-jdbc-sqlite-file-in-readonly-directory/242838)
**Author:** [@KoettingSimon](https://discuss.elastic.co/u/KoettingSimon)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 6:34am UTC](https://discuss.elastic.co/t/logstash-jdbc-sqlite-file-in-readonly-directory/242838 "2020-07-28T06:34:34Z")
Hi all, I need your help for a Logstash-Pipeline. We have an third party application which stores is logs in a sqlite .db File (Windows Server). We want to integrate these Logs in our Stack. What we done so far: Mou… --- ## [Issue while Integrating spring-data-elasticsearch](https://discuss.elastic.co/t/issue-while-integrating-spring-data-elasticsearch/239224)
**Author:** [@Punj\_Shah](https://discuss.elastic.co/u/Punj_Shah)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 5:44am UTC](https://discuss.elastic.co/t/issue-while-integrating-spring-data-elasticsearch/239224 "2020-06-30T05:44:41Z")
(topic withdrawn by author, will be automatically deleted in 24 hours unless flagged) --- ## [Logstash filter fields in if conditions](https://discuss.elastic.co/t/logstash-filter-fields-in-if-conditions/242717)
**Author:** [@vape](https://discuss.elastic.co/u/vape)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 5:38am UTC](https://discuss.elastic.co/t/logstash-filter-fields-in-if-conditions/242717 "2020-07-28T05:38:26Z")
Hello, I am learning about logstash, esspecially about logstash filter with if condition. Something not clear to me is what are those fields used in if condition? How can I get the list of those fields? For example, I … --- ## [Index logstash-\* blocked by TOO\_MANY\_REQUESTS/12/index read-only](https://discuss.elastic.co/t/index-logstash-blocked-by-too-many-requests-12-index-read-only/242690)
**Author:** [@Mozhganch](https://discuss.elastic.co/u/Mozhganch)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 5:16am UTC](https://discuss.elastic.co/t/index-logstash-blocked-by-too-many-requests-12-index-read-only/242690 "2020-07-28T05:16:42Z")
Hi my logstash service starts without error but it stops with this error "Failed with result 'exit-code'" then I run it without logstash service. so after sending 5 entry point, the following error is occured: \[INFO … --- ## [HTTP\_POLLER plugin failing to connect to the REST API via proxy](https://discuss.elastic.co/t/http-poller-plugin-failing-to-connect-to-the-rest-api-via-proxy/242824)
**Author:** [@Gaurav\_Deoras](https://discuss.elastic.co/u/Gaurav_Deoras)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 4:29am UTC](https://discuss.elastic.co/t/http-poller-plugin-failing-to-connect-to-the-rest-api-via-proxy/242824 "2020-07-28T04:29:08Z")
Hi Team, I'm trying to use logstash to pull the log through rest API and plan to further forward it to the SIEM. The setup is pretty straight forward. SIEM \<== Logstash (server) ==\> Proxy ==\> FW ==\> API Host. The have … --- ## [Sharepoint online connector](https://discuss.elastic.co/t/sharepoint-online-connector/242722)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 0\ **Last updated:** [July 27, 2020, 9:33am UTC](https://discuss.elastic.co/t/sharepoint-online-connector/242722 "2020-07-27T09:33:42Z")
Hello Team, we have multiple sources like database, csv,jms and sharepoint online , we also need to do data transformation and enrichment. so we were planning to use logstash , Could you please help me understand if the… --- ## [Add a vertical Threshold line into a line plot](https://discuss.elastic.co/t/add-a-vertical-threshold-line-into-a-line-plot/238252)
**Author:** [@TH89](https://discuss.elastic.co/u/TH89)\ **Replies:** 2\ **Last updated:** [June 29, 2020, 7:02am UTC](https://discuss.elastic.co/t/add-a-vertical-threshold-line-into-a-line-plot/238252 "2020-06-29T07:02:10Z")
Hallo together, Is there a way to print into a line plot a vertical threshold line? A document of me looks like this: In the lineplot I print the field value on the x-Axis and the y-Axis are the Unique count of max\_… --- ## [SIEM signals can not be closed with another status or comment except "Closed"](https://discuss.elastic.co/t/siem-signals-can-not-be-closed-with-another-status-or-comment-except-closed/242755)
**Author:** [@Jan\_Kabelka](https://discuss.elastic.co/u/Jan_Kabelka)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 10:24pm UTC](https://discuss.elastic.co/t/siem-signals-can-not-be-closed-with-another-status-or-comment-except-closed/242755 "2020-07-27T22:24:39Z")
Dear Elastic Team, we have started to work with your SIEM module. We have defined many detection rules. Signals generated based on these rules can be simply closed (signal.status: "Closed"). We would -of course - like t… --- ## [Logstash multiple outputs](https://discuss.elastic.co/t/logstash-multiple-outputs/238428)
**Author:** [@mycloudcms](https://discuss.elastic.co/u/mycloudcms)\ **Replies:** 5\ **Last updated:** [July 27, 2020, 10:05pm UTC](https://discuss.elastic.co/t/logstash-multiple-outputs/238428 "2020-07-27T22:05:27Z")
Hi, once I try to add multiple output.logstash as array, I don't get any data, can you please assist? Thank you ex. #----------------------------- Logstash output -------------------------------- output.logstash: # T… --- ## [How to serializing json object to string in ingest node](https://discuss.elastic.co/t/how-to-serializing-json-object-to-string-in-ingest-node/242565)
**Author:** [@android.kc](https://discuss.elastic.co/u/android.kc)\ **Replies:** 6\ **Last updated:** [July 27, 2020, 9:56pm UTC](https://discuss.elastic.co/t/how-to-serializing-json-object-to-string-in-ingest-node/242565 "2020-07-27T21:56:37Z")
I am trying to convert json objects with certain key pattern to string by using ingest API. for example, { "myObject": { "toSerialize\_A": {"key\_a": "a"}, "toSerialize\_B": {"key\_b": "b"}, "toSerialize\_C": … --- ## [Different config files for different log sources](https://discuss.elastic.co/t/different-config-files-for-different-log-sources/242734)
**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\ **Replies:** 3\ **Last updated:** [July 27, 2020, 9:32pm UTC](https://discuss.elastic.co/t/different-config-files-for-different-log-sources/242734 "2020-07-27T21:32:08Z")
Hi, I am new to ELK, and I have tried to integrate some sources with ELk, I have integrated 'Microsoft DNS logs' and 'Fortigate' using Logstash config. My question here is that what is best practice for logstash config… --- ## [KIbana super user privleges](https://discuss.elastic.co/t/kibana-super-user-privleges/242806)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 8:53pm UTC](https://discuss.elastic.co/t/kibana-super-user-privleges/242806 "2020-07-27T20:53:55Z")
Hello All, As a kibana super user, can I track/ monitor activities of non-super users, historically and in real time? Thanks in advance --- ## [Canvas line chart : what's this line?](https://discuss.elastic.co/t/canvas-line-chart-whats-this-line/242768)
**Author:** [@Lempkin](https://discuss.elastic.co/u/Lempkin)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 8:08pm UTC](https://discuss.elastic.co/t/canvas-line-chart-whats-this-line/242768 "2020-07-27T20:08:01Z")
Hi, I'm new to ELK. I have some API that I need to monitor. I've installed Heartbeat and now I try to represent data in a canvas. I would like to display status of an API with a linechart, showing when it's up or down.… --- ## [All (non-redundant) values of a list of fields](https://discuss.elastic.co/t/all-non-redundant-values-of-a-list-of-fields/242743)
**Author:** [@Florent\_Fauvin](https://discuss.elastic.co/u/Florent_Fauvin)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 8:07pm UTC](https://discuss.elastic.co/t/all-non-redundant-values-of-a-list-of-fields/242743 "2020-07-27T20:07:19Z")
Hello, I would like to know which Elastic query can give me all (non-redundant) values ​​of a list of fields. For example, I would like to know all the possible values ​​contained in field: User, SubjectUser, UserName? … --- ## [REST API to fetch values based on Terms aggregation](https://discuss.elastic.co/t/rest-api-to-fetch-values-based-on-terms-aggregation/241188)
**Author:** [@Venkat\_Raj](https://discuss.elastic.co/u/Venkat_Raj)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 7:55pm UTC](https://discuss.elastic.co/t/rest-api-to-fetch-values-based-on-terms-aggregation/241188 "2020-07-27T19:55:29Z")
Hi All, I have a requirement to fetch data from Elasticsearch based on Term aggregation. I need to build a request using terms aggregation where I need to groupby a particular field name and then fetch other fields corr… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1310) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1312)