# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1356 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1357 --- ## [Feature request?](https://discuss.elastic.co/t/feature-request/239394)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 1\ **Last updated:** [July 1, 2020, 3:42am UTC](https://discuss.elastic.co/t/feature-request/239394 "2020-07-01T03:42:27Z")
Hey, I notices that our siem app has alot of missing features, like the counting query, can we have that like query something then if it pass a threashold then create a detection signal. Since only having able to query … --- ## [SIEM error new install](https://discuss.elastic.co/t/siem-error-new-install/239387)
**Author:** [@jclemons7](https://discuss.elastic.co/u/jclemons7)\ **Replies:** 1\ **Last updated:** [July 1, 2020, 3:33am UTC](https://discuss.elastic.co/t/siem-error-new-install/239387 "2020-07-01T03:33:09Z")
Hello, I have a filebeat from one ubuntu 20.04 and netflow going to my stack directly into elasticsearch. The stack is one server and it's running native (not in docker or anything) running 7.8. Whenever I try to open… --- ## [\[illegal\_argument\_exception\] Fielddata is disabled on text fields by default](https://discuss.elastic.co/t/illegal-argument-exception-fielddata-is-disabled-on-text-fields-by-default/237891)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 1\ **Last updated:** [July 1, 2020, 3:21am UTC](https://discuss.elastic.co/t/illegal-argument-exception-fielddata-is-disabled-on-text-fields-by-default/237891 "2020-07-01T03:21:23Z")
I click on kibana apm ui and some errors will appear. I checked the log of kibana and found the following \> "message":"\[illegal\_argument\_exception\] Fielddata is disabled on text fields by default. Set fielddata=true on … --- ## [Пересечение по тэгам](https://discuss.elastic.co/t/topic/239008)
**Author:** [@Nasty](https://discuss.elastic.co/u/Nasty)\ **Replies:** 8\ **Last updated:** [July 1, 2020, 3:13am UTC](https://discuss.elastic.co/t/topic/239008 "2020-07-01T03:13:24Z")
Здравствуйте! Дано: в каждой аккаунт-карточке которую я храню в ЭС, есть поле "тэги", в котором лежит набор ключевых слов для каждого аккаунта. Это string. Мне нужно пробежаться по всей бд и найти процент совпадения эт… --- ## [Where Can I Find Vega-Lite Availability OF Features Comparison Between 2.6.0 and 4.13.1?](https://discuss.elastic.co/t/where-can-i-find-vega-lite-availability-of-features-comparison-between-2-6-0-and-4-13-1/239396)
**Author:** [@Ethan777100](https://discuss.elastic.co/u/Ethan777100)\ **Replies:** 0\ **Last updated:** [July 1, 2020, 3:04am UTC](https://discuss.elastic.co/t/where-can-i-find-vega-lite-availability-of-features-comparison-between-2-6-0-and-4-13-1/239396 "2020-07-01T03:04:36Z")
Since Kibana only support Vega-Lite 2.6.0, whilst the current Vega-Lite available is 4.13.1, i noticed that some visulisations i wanna do like Boxplot - is not possible due to version control. Where can i find a list or… --- ## [Incorrect date range in response and interval in date\_histogram](https://discuss.elastic.co/t/incorrect-date-range-in-response-and-interval-in-date-histogram/239393)
**Author:** [@Rakesh\_Sinha](https://discuss.elastic.co/u/Rakesh_Sinha)\ **Replies:** 0\ **Last updated:** [July 1, 2020, 3:00am UTC](https://discuss.elastic.co/t/incorrect-date-range-in-response-and-interval-in-date-histogram/239393 "2020-07-01T03:00:32Z")
I am trying to run the below query: query: { bool: { must: \[ { match: { app: 'myapp'} }, { range: { timestamp: { lt: '2020-… --- ## [I am having difficulty trying to use ELK-stack with suricata](https://discuss.elastic.co/t/i-am-having-difficulty-trying-to-use-elk-stack-with-suricata/239385)
**Author:** [@noobnoob](https://discuss.elastic.co/u/noobnoob)\ **Replies:** 0\ **Last updated:** [July 1, 2020, 1:18am UTC](https://discuss.elastic.co/t/i-am-having-difficulty-trying-to-use-elk-stack-with-suricata/239385 "2020-07-01T01:18:11Z")
First, I am not good at English, so I am writing a question with the help of Google Translator. Please understand if the grammar is wrong or strange. I'm trying to visualize IDS detections by linking ELK and suricata as… --- ## [Incorrect max value on long time spans](https://discuss.elastic.co/t/incorrect-max-value-on-long-time-spans/239389)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 0\ **Last updated:** [July 1, 2020, 2:13am UTC](https://discuss.elastic.co/t/incorrect-max-value-on-long-time-spans/239389 "2020-07-01T02:13:20Z")
Hi, I'm collecting network traffic and I need to find the maximum bytes per second value over a certain span of time. The visualization doesn't matter but for now I'm using this timelion query. $query='location:1234567… --- ## [How can I find some designated value after using split](https://discuss.elastic.co/t/how-can-i-find-some-designated-value-after-using-split/237907)
**Author:** [@kase](https://discuss.elastic.co/u/kase)\ **Replies:** 3\ **Last updated:** [July 1, 2020, 1:32am UTC](https://discuss.elastic.co/t/how-can-i-find-some-designated-value-after-using-split/237907 "2020-07-01T01:32:37Z")
Hi there, I have a filed looks like this format on kibana: flow.tcp\_flags : SYN, RST, PSH, ACK I want to split each type, so I will do fliter { mutate { split =\> \["\[flow\]\[tcp\_flags\]", ","\] } } after this, I … --- ## [Messages in Kibana appear truncated](https://discuss.elastic.co/t/messages-in-kibana-appear-truncated/239381)
**Author:** [@TomWBM](https://discuss.elastic.co/u/TomWBM)\ **Replies:** 2\ **Last updated:** [July 1, 2020, 12:48am UTC](https://discuss.elastic.co/t/messages-in-kibana-appear-truncated/239381 "2020-07-01T00:48:23Z")
I have an ELK implementation on a single server as a test box, I am receiving log data from a Mulesoft cluster via Filebeats at the source, received by Logstash at the server. When I view what should be a 3000+ line of l… --- ## [Hyphenation Patterns XML file in Cloud?](https://discuss.elastic.co/t/hyphenation-patterns-xml-file-in-cloud/149687)
**Author:** [@Kim\_Rauff\_Schurmann](https://discuss.elastic.co/u/Kim_Rauff_Schurmann)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 11:06pm UTC](https://discuss.elastic.co/t/hyphenation-patterns-xml-file-in-cloud/149687 "2020-06-30T23:06:50Z")
Hi guys How do I add a Hyphenation Patterns XML file when working in elastic cloud? The API only have the option for a Path (HyphenationPatternsPath). I should be able to upload and use a bundle with the file - but the… --- ## [Privileges to create index patterns](https://discuss.elastic.co/t/privileges-to-create-index-patterns/235109)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 8\ **Last updated:** [June 30, 2020, 11:01pm UTC](https://discuss.elastic.co/t/privileges-to-create-index-patterns/235109 "2020-06-30T23:01:00Z")
Hi, I have a role that I would like to give the option to create index patterns. How is that possible? The role already have to all (\*) indices in the cluster. What am I missing? Thanks! --- ## [Does Logstash support oracle wallet for jdbc connection?](https://discuss.elastic.co/t/does-logstash-support-oracle-wallet-for-jdbc-connection/237536)
**Author:** [@amritpal\_singh](https://discuss.elastic.co/u/amritpal_singh)\ **Replies:** 2\ **Last updated:** [June 30, 2020, 10:38pm UTC](https://discuss.elastic.co/t/does-logstash-support-oracle-wallet-for-jdbc-connection/237536 "2020-06-30T22:38:26Z")
Hi , I am trying to use oracle wallet in logstash jdbc connection and I am getting below error in logs. Unable to connect to database. Tried 1 times {:error\_message=\>"Java::JavaSql::SQLRecoverableException: IO Error: Un… --- ## [Bar chart of 500 status by host](https://discuss.elastic.co/t/bar-chart-of-500-status-by-host/239139)
**Author:** [@popefelix](https://discuss.elastic.co/u/popefelix)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 9:27pm UTC](https://discuss.elastic.co/t/bar-chart-of-500-status-by-host/239139 "2020-06-30T21:27:38Z")
I'm trying to create a bar graph that counts hosts that have returned HTTP 500 in response to a request. The relevant record structure: { "host": \, "status": \ } In SQL this would be "SEL… --- ## [Elastic search 7.8.0 and multiple geoshapes](https://discuss.elastic.co/t/elastic-search-7-8-0-and-multiple-geoshapes/239350)
**Author:** [@pandzel](https://discuss.elastic.co/u/pandzel)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 9:22pm UTC](https://discuss.elastic.co/t/elastic-search-7-8-0-and-multiple-geoshapes/239350 "2020-06-30T21:22:08Z")
Hi, I have created an index and I put the following mapping: { "dynamic\_templates": \[ { "\_geo": { "match": "\*\_geo", "mapping": { "type": "geo… --- ## [Why processors need inode/fileid in the event (why is file.StateOS under Private?)](https://discuss.elastic.co/t/why-processors-need-inode-fileid-in-the-event-why-is-file-stateos-under-private/239307)
**Author:** [@rmauri](https://discuss.elastic.co/u/rmauri)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 1:01pm UTC](https://discuss.elastic.co/t/why-processors-need-inode-fileid-in-the-event-why-is-file-stateos-under-private/239307 "2020-06-30T13:01:40Z")
I have filebeat, built with a custom regexprocessor, that processes events from input log files that have no date, only time, in the log messages. The regexprocessor constructs the @timestamp using the time from the log… --- ## [Java API - trying to fetch data from Index](https://discuss.elastic.co/t/java-api-trying-to-fetch-data-from-index/238971)
**Author:** [@Venkat\_Raj](https://discuss.elastic.co/u/Venkat_Raj)\ **Replies:** 3\ **Last updated:** [June 30, 2020, 8:34pm UTC](https://discuss.elastic.co/t/java-api-trying-to-fetch-data-from-index/238971 "2020-06-30T20:34:25Z")
I am trying to fetch data from index using java API to generate a report using jasper reports. I have added the maven dependency and able to make connection to ES. While trying to fetch the data corresponding to the pa… --- ## [Syntax for Aggregate Filter Plugin (No End Event)?](https://discuss.elastic.co/t/syntax-for-aggregate-filter-plugin-no-end-event/239188)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 4\ **Last updated:** [June 30, 2020, 7:25pm UTC](https://discuss.elastic.co/t/syntax-for-aggregate-filter-plugin-no-end-event/239188 "2020-06-30T19:25:38Z")
Hi Logstash Maestros, Suppose I have a continuous stream of data records flowing into Logstash, tracking how many widgets a producer as cranked out. The data fields are {timestamp} {producer} {numWidgits} and the data … --- ## [Elasticsearch 7.x data allocation?](https://discuss.elastic.co/t/elasticsearch-7-x-data-allocation/239196)
**Author:** [@ryebread157](https://discuss.elastic.co/u/ryebread157)\ **Replies:** 2\ **Last updated:** [June 30, 2020, 2:43pm UTC](https://discuss.elastic.co/t/elasticsearch-7-x-data-allocation/239196 "2020-06-30T14:43:20Z")
I have been using the ELK stack for years, and upgraded to ELK 7 last month and updated to 7.8 last week. Previous to 7.x data allocation to my Elastic data nodes was automatically distributed among nodes to be similar. … --- ## [Push\_previous\_map\_as\_event into fields](https://discuss.elastic.co/t/push-previous-map-as-event-into-fields/239310)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 4\ **Last updated:** [June 30, 2020, 6:41pm UTC](https://discuss.elastic.co/t/push-previous-map-as-event-into-fields/239310 "2020-06-30T18:41:49Z")
Hi, I'm trying to use push\_previous\_map\_as\_event to aggregate and save everything as key/value fields in a document. My data looks like this: device: router1 property: mem\_prop1 ( there are twelve properties per comp… --- ## [How does the Beats load balancing option work?](https://discuss.elastic.co/t/how-does-the-beats-load-balancing-option-work/239358)
**Author:** [@Guerreiro\_Sousa](https://discuss.elastic.co/u/Guerreiro_Sousa)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 6:12pm UTC](https://discuss.elastic.co/t/how-does-the-beats-load-balancing-option-work/239358 "2020-06-30T18:12:42Z")
How does balancing work? Does Beat monitor server availability and distribute events among available machines? --- ## [Logstash Pipeline grok filter (match) fails - Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"{\\", \\"}\\"](https://discuss.elastic.co/t/logstash-pipeline-grok-filter-match-fails-expected-one-of-t-r-n/239332)
**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\ **Replies:** 4\ **Last updated:** [June 30, 2020, 5:22pm UTC](https://discuss.elastic.co/t/logstash-pipeline-grok-filter-match-fails-expected-one-of-t-r-n/239332 "2020-06-30T17:22:22Z")
Hi Logstash community, I'm trying to parse a log through logstash but there seems to be an issue with my grok pattern, however I have tried a lot of different things now and always get the exact same error message. The… --- ## [MongoDB-Elasticsearch Integration Via Logstash](https://discuss.elastic.co/t/mongodb-elasticsearch-integration-via-logstash/239316)
**Author:** [@leoper](https://discuss.elastic.co/u/leoper)\ **Replies:** 4\ **Last updated:** [June 30, 2020, 5:15pm UTC](https://discuss.elastic.co/t/mongodb-elasticsearch-integration-via-logstash/239316 "2020-06-30T17:15:55Z")
Hi everyone. I am trying to make an integration between MongoDB (Version 4.2.7) and Elasticsearch (Version 7.7.0) via Logstash (Version 7.8.0). The goal is to synchronize data from MongoDB to Elasticsearch. The scena… --- ## [Filter jdbc\_static mongodb error](https://discuss.elastic.co/t/filter-jdbc-static-mongodb-error/239194)
**Author:** [@pedropilla](https://discuss.elastic.co/u/pedropilla)\ **Replies:** 3\ **Last updated:** [June 30, 2020, 5:04pm UTC](https://discuss.elastic.co/t/filter-jdbc-static-mongodb-error/239194 "2020-06-30T17:04:06Z")
Hello, I'm trying to enrich data with mongodb objects, here's the related part in my pipeline: jdbc\_static { loaders =\> \[ { id =\> "circuitosOLT" table … --- ## [Elastic Stack with Network Security Zones](https://discuss.elastic.co/t/elastic-stack-with-network-security-zones/239337)
**Author:** [@bretonj](https://discuss.elastic.co/u/bretonj)\ **Replies:** 2\ **Last updated:** [June 30, 2020, 5:02pm UTC](https://discuss.elastic.co/t/elastic-stack-with-network-security-zones/239337 "2020-06-30T17:02:15Z")
I would like to know if what I'm trying to do is possible with Elastic Stack? I have multiple network security zones, all firewalled from each other: (PAZ - Public Access Zone, OZ - Operation Zone, RZ - Restricted Zone)… --- ## [Add a backslash at the end of a string](https://discuss.elastic.co/t/add-a-backslash-at-the-end-of-a-string/239336)
**Author:** [@Florent\_Fauvin](https://discuss.elastic.co/u/Florent_Fauvin)\ **Replies:** 2\ **Last updated:** [June 30, 2020, 4:54pm UTC](https://discuss.elastic.co/t/add-a-backslash-at-the-end-of-a-string/239336 "2020-06-30T16:54:02Z")
Hello, I want to add a backslash at the end of a field value, but logstash does not allow it: \`mutate { add\_field =\> { "\[prefix\]" =\> "%{\[domain\]}\\\\"}}\` Do you know how I could add a backslash at the end of the strin… --- ## [Not able to parse log file which contains xml format](https://discuss.elastic.co/t/not-able-to-parse-log-file-which-contains-xml-format/239348)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 4:49pm UTC](https://discuss.elastic.co/t/not-able-to-parse-log-file-which-contains-xml-format/239348 "2020-06-30T16:49:11Z")
Hello, I am having below webshpere GC log file which is generated in \*.log format. Different GC cycles and for every GC cycle start tag: "cycle-start" End Tage: "cycle-End" Now i need to parse each cycle as single mess… --- ## [\[ERROR\]\[logstash.filters.ruby \] Ruby exception occur red: too few arguments : Need Help](https://discuss.elastic.co/t/error-logstash-filters-ruby-ruby-exception-occur-red-too-few-arguments-need-help/238852)
**Author:** [@upasana\_sarangi](https://discuss.elastic.co/u/upasana_sarangi)\ **Replies:** 11\ **Last updated:** [June 30, 2020, 4:44pm UTC](https://discuss.elastic.co/t/error-logstash-filters-ruby-ruby-exception-occur-red-too-few-arguments-need-help/238852 "2020-06-30T16:44:12Z")
Hi , I am getting Ruby Exception too few arguments everytime I run logstash on our server . Below is the config and error msg I am trying to Parse :slight\_smile: Message : 20200515T005009.898-0500 Warning Fail Connect… --- ## [Timestamping issues with Winlogbeat and Logstash](https://discuss.elastic.co/t/timestamping-issues-with-winlogbeat-and-logstash/239325)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 2:39pm UTC](https://discuss.elastic.co/t/timestamping-issues-with-winlogbeat-and-logstash/239325 "2020-06-30T14:39:52Z")
Hello, Our setup is: Winlogbeat on endpoints which ships data to an API API sends logs to sqs queue Logstash VM picks up from sqs and contextualises logs then forwards them on to another sqs queue Another applicatio… --- ## [Querying Apache URL Requests in Kibana](https://discuss.elastic.co/t/querying-apache-url-requests-in-kibana/239156)
**Author:** [@Andrew225](https://discuss.elastic.co/u/Andrew225)\ **Replies:** 2\ **Last updated:** [June 30, 2020, 4:17pm UTC](https://discuss.elastic.co/t/querying-apache-url-requests-in-kibana/239156 "2020-06-30T16:17:49Z")
I have deployed Elasticsearch 7.7.1-1, Logstash 7.7.1-1 and Kibana 7.7.1-1. I am shipping logs to Logstash using Filebeat. I am developing a query to parse the request field of the apache logs. I have noticed there is a… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1355) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1357)