# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1362 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1363 --- ## [View only last logline from all hosts](https://discuss.elastic.co/t/view-only-last-logline-from-all-hosts/238206)
**Author:** [@Marcel27](https://discuss.elastic.co/u/Marcel27)\ **Replies:** 3\ **Last updated:** [June 27, 2020, 9:26am UTC](https://discuss.elastic.co/t/view-only-last-logline-from-all-hosts/238206 "2020-06-27T09:26:57Z")
For a specific use case where i have 1000+ hosts using filebeat to send a logfile to ES, i want a view in Kibana with a (filterable) listview of all hosts, with only the last logline of each host. Is this possible, and… --- ## [Index not found exception](https://discuss.elastic.co/t/index-not-found-exception/238734)
**Author:** [@Mamta1](https://discuss.elastic.co/u/Mamta1)\ **Replies:** 1\ **Last updated:** [June 27, 2020, 6:29am UTC](https://discuss.elastic.co/t/index-not-found-exception/238734 "2020-06-27T06:29:51Z")
Hi guys, Iam new to elasticsearch. I have indexed a small file. I get an error when i try to query it through an API as below: "{ "errors": \[ { "message": "index\_not\_found\_exception", "locations": \[ { "line": 2, … --- ## [GROUP BY with only one query](https://discuss.elastic.co/t/group-by-with-only-one-query/236411)
**Author:** [@fmisso](https://discuss.elastic.co/u/fmisso)\ **Replies:** 1\ **Last updated:** [June 27, 2020, 4:38am UTC](https://discuss.elastic.co/t/group-by-with-only-one-query/236411 "2020-06-27T04:38:14Z")
Hello, I'm looking for a solution to do this : SELECT t.nom, t.latitude, l.longitude, r.MaxTime FROM ( SELECT name, MAX(time) as MaxTime FROM BusTable GROUP BY name ) r INNER JOIN BusTable t ON t.name… --- ## [Logstash delta pull from postgres](https://discuss.elastic.co/t/logstash-delta-pull-from-postgres/238501)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 5\ **Last updated:** [June 27, 2020, 4:15am UTC](https://discuss.elastic.co/t/logstash-delta-pull-from-postgres/238501 "2020-06-27T04:15:16Z")
I have a simple logstash pipeline job that is a SQL job that pulls data from a postgres db into ES. The initial pull was 1.5 million rows, which ran last night and took about 5 minutes. but the delta daily pull is about… --- ## [Reduce iops during reindexing](https://discuss.elastic.co/t/reduce-iops-during-reindexing/236086)
**Author:** [@magnalite](https://discuss.elastic.co/u/magnalite)\ **Replies:** 1\ **Last updated:** [June 27, 2020, 3:42am UTC](https://discuss.elastic.co/t/reduce-iops-during-reindexing/236086 "2020-06-27T03:42:44Z")
At the moment my VMs get i/o throttled due to performing many i/o operations during reindexing but is nowhere near it's limit in terms of bandwidth. Is there any way I could reduce the number of i/o operations going to d… --- ## [Logstash.instrument.periodicpoller.os\] PeriodicPoller: Timeout exception](https://discuss.elastic.co/t/logstash-instrument-periodicpoller-os-periodicpoller-timeout-exception/238923)
**Author:** [@Yeading](https://discuss.elastic.co/u/Yeading)\ **Replies:** 1\ **Last updated:** [June 27, 2020, 2:19am UTC](https://discuss.elastic.co/t/logstash-instrument-periodicpoller-os-periodicpoller-timeout-exception/238923 "2020-06-27T02:19:14Z")
\[2020-06-27T07:45:55,338\]\[DEBUG\]\[logstash.instrument.periodicpoller.os\] PeriodicPoller: Timeout exception {:poller=\>#\ **Author:** [@Yuy\_Heero](https://discuss.elastic.co/u/Yuy_Heero)\ **Replies:** 1\ **Last updated:** [June 27, 2020, 1:37am UTC](https://discuss.elastic.co/t/public-key-protected-pkcs12-not-supported/238845 "2020-06-27T01:37:51Z") I want to use winbeat with siem, so I config elasticsearch 7.8 with TLS/SSL. I create cert files with this instruction. https://www.elastic.co/guide/en/elasticsearch/reference/7.7/configuring-tls.html#configuring-tls … --- ## [I need help! elastic doesn't get my mapping](https://discuss.elastic.co/t/i-need-help-elastic-doesnt-get-my-mapping/238909)
**Author:** [@sina12](https://discuss.elastic.co/u/sina12)\ **Replies:** 1\ **Last updated:** [June 26, 2020, 11:47pm UTC](https://discuss.elastic.co/t/i-need-help-elastic-doesnt-get-my-mapping/238909 "2020-06-26T23:47:27Z")
Hi Guys! I am in trouble. I need to visualize my data but elastic search doesn't accept my mapping. I created this mapping but Kibana/Elastic always adds "filed" and "message" and puts all the data inside those elemen… --- ## [Monitoring Amazon EKS logs and metrics with the Elastic Stack](https://discuss.elastic.co/t/monitoring-amazon-eks-logs-and-metrics-with-the-elastic-stack/238916)
**Author:** [@CoyoteKG](https://discuss.elastic.co/u/CoyoteKG)\ **Replies:** 1\ **Last updated:** [June 26, 2020, 11:43pm UTC](https://discuss.elastic.co/t/monitoring-amazon-eks-logs-and-metrics-with-the-elastic-stack/238916 "2020-06-26T23:43:29Z")
Hello @Asjad\_Athick, I found this nice guide, and I would like to try it. But, is it possible to be done with AWS ELK service instead Elastic Cloud service? --- ## [SIEM Timeline through API](https://discuss.elastic.co/t/siem-timeline-through-api/238907)
**Author:** [@forkhead](https://discuss.elastic.co/u/forkhead)\ **Replies:** 1\ **Last updated:** [June 26, 2020, 11:00pm UTC](https://discuss.elastic.co/t/siem-timeline-through-api/238907 "2020-06-26T23:00:38Z")
Hi, I wanted to know if it is possible to create/update SIEM Timelines through APIs. I am trying to run some correlation logic and save the results of it in a Timeline for further analysis and eventually make it to a cas… --- ## [Help configuring logstash on Microsoft Azure](https://discuss.elastic.co/t/help-configuring-logstash-on-microsoft-azure/238919)
**Author:** [@LukeJB](https://discuss.elastic.co/u/LukeJB)\ **Replies:** 0\ **Last updated:** [June 26, 2020, 10:08pm UTC](https://discuss.elastic.co/t/help-configuring-logstash-on-microsoft-azure/238919 "2020-06-26T22:08:25Z")
Hi, I'm trying to get logstash configured correctly on Azure. I'm a bit less that a week old with this. Recently, when I try running logstash, I get the following warnings and errors: WARNING: Could not find logstash.ym… --- ## [Send Linux/Windows/NetworkDevices logs to Elastic SIEM](https://discuss.elastic.co/t/send-linux-windows-networkdevices-logs-to-elastic-siem/238903)
**Author:** [@jelocabral](https://discuss.elastic.co/u/jelocabral)\ **Replies:** 1\ **Last updated:** [June 26, 2020, 10:40pm UTC](https://discuss.elastic.co/t/send-linux-windows-networkdevices-logs-to-elastic-siem/238903 "2020-06-26T22:40:06Z")
Dear people, I have an ELK server 7.8.0. I'm using the SIEM in order to see and monitor netflow and beats data. But now I want to add every syslog messages from Linux, Windows and Network Devices (Cisco and much more).… --- ## [Filter/search by log.file.path in kibana](https://discuss.elastic.co/t/filter-search-by-log-file-path-in-kibana/238918)
**Author:** [@shawn35gh](https://discuss.elastic.co/u/shawn35gh)\ **Replies:** 0\ **Last updated:** [June 26, 2020, 9:30pm UTC](https://discuss.elastic.co/t/filter-search-by-log-file-path-in-kibana/238918 "2020-06-26T21:30:39Z")
Hey, I want to search by log.file.path in filebeat-\*. values as below. I want to search/filter all the logs in folder 67890 and its sub-folder. anyone know how to do this search? Thanks in advance! Shawn /home/users/… --- ## [Filebeat do not send logs to kafka](https://discuss.elastic.co/t/filebeat-do-not-send-logs-to-kafka/238718)
**Author:** [@ramgold9](https://discuss.elastic.co/u/ramgold9)\ **Replies:** 3\ **Last updated:** [June 26, 2020, 9:47pm UTC](https://discuss.elastic.co/t/filebeat-do-not-send-logs-to-kafka/238718 "2020-06-26T21:47:01Z")
Hello Everyone, We are trying implement a centralized logging solution filebeats (on eks) -\>kafka -\> elasticsearch(aws). I have tried different versions of filebeat 6.X and 7.X with different valid versions of kafka. F… --- ## [Reingest Winlogbeat Events through Logstash](https://discuss.elastic.co/t/reingest-winlogbeat-events-through-logstash/238914)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 0\ **Last updated:** [June 26, 2020, 8:57pm UTC](https://discuss.elastic.co/t/reingest-winlogbeat-events-through-logstash/238914 "2020-06-26T20:57:50Z")
Not really sure where to put this question since it involves a lot of different parts of the stack.... I am currently ingesting windows event logs from a server --\> logstash --\> elasticsearch. I have modified my logsta… --- ## [/etc/init.d/elasticsearch: No such file or directory](https://discuss.elastic.co/t/etc-init-d-elasticsearch-no-such-file-or-directory/238908)
**Author:** [@Akira\_Kise](https://discuss.elastic.co/u/Akira_Kise)\ **Replies:** 0\ **Last updated:** [June 26, 2020, 7:16pm UTC](https://discuss.elastic.co/t/etc-init-d-elasticsearch-no-such-file-or-directory/238908 "2020-06-26T19:16:10Z")
Please help! I'm so desperate in getting help because I don't know what else to do. I'm working on a server that already had elasticsearch installed. But then I downloaded an elasticsearch package with this command: w… --- ## [Aggregate from one doc table to select items from another](https://discuss.elastic.co/t/aggregate-from-one-doc-table-to-select-items-from-another/238902)
**Author:** [@CapitanRedBeard](https://discuss.elastic.co/u/CapitanRedBeard)\ **Replies:** 1\ **Last updated:** [June 26, 2020, 7:26pm UTC](https://discuss.elastic.co/t/aggregate-from-one-doc-table-to-select-items-from-another/238902 "2020-06-26T19:26:11Z")
Consider the following, I have a ratings and posts index. The ratings doc is structured like: { "postId": { "type": "text", "fields": { "keyword": { "t… --- ## [Grok pattern not working](https://discuss.elastic.co/t/grok-pattern-not-working/238875)
**Author:** [@ndg](https://discuss.elastic.co/u/ndg)\ **Replies:** 5\ **Last updated:** [June 26, 2020, 7:21pm UTC](https://discuss.elastic.co/t/grok-pattern-not-working/238875 "2020-06-26T19:21:27Z")
Hi! I want to parse a Haproxy log sent by a rsyslog service. I have a grok pattern to parse the original rsyslog message (which send the message of the service to a syslog\_message field) and another that parse the syslog… --- ## [Problem in parsing json string](https://discuss.elastic.co/t/problem-in-parsing-json-string/238901)
**Author:** [@azteker](https://discuss.elastic.co/u/azteker)\ **Replies:** 1\ **Last updated:** [June 26, 2020, 6:45pm UTC](https://discuss.elastic.co/t/problem-in-parsing-json-string/238901 "2020-06-26T18:45:44Z")
This is how I parse json in filter json { source =\> "json\_content" target =\> "content" remove\_field=\>\["json\_content"\] } But I got the following error "type"=\>"mapper\_parsing\_exception", "reason"=\>"failed to parse… --- ## [Logstash xpack monitoring with certificate instead of truststore](https://discuss.elastic.co/t/logstash-xpack-monitoring-with-certificate-instead-of-truststore/238885)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 0\ **Last updated:** [June 26, 2020, 4:19pm UTC](https://discuss.elastic.co/t/logstash-xpack-monitoring-with-certificate-instead-of-truststore/238885 "2020-06-26T16:19:43Z")
Hi, I have a cluster of elasticsearch and i have configured ssl/tls and set xpack.security.http.ssl.client\_authentication: required The i have logstash with xpack monitoring enabled, and i have to specify a certific… --- ## [Transfer csv to elasticsearch from Python](https://discuss.elastic.co/t/transfer-csv-to-elasticsearch-from-python/238044)
**Author:** [@namali](https://discuss.elastic.co/u/namali)\ **Replies:** 4\ **Last updated:** [June 26, 2020, 4:19pm UTC](https://discuss.elastic.co/t/transfer-csv-to-elasticsearch-from-python/238044 "2020-06-26T16:19:28Z")
wanted to transfer following csv to elsticsearch |hcode|hname| |1|aaaa| |2|bbbbb| |3|ccccc| |4|dddd| |5|eeee| |6|ffff| and need to insert hcode field as document\_id. getting below error elasticseach version is 7… --- ## [Fscrawler not indexing all files](https://discuss.elastic.co/t/fscrawler-not-indexing-all-files/236576)
**Author:** [@morningkaren](https://discuss.elastic.co/u/morningkaren)\ **Replies:** 3\ **Last updated:** [June 26, 2020, 3:57pm UTC](https://discuss.elastic.co/t/fscrawler-not-indexing-all-files/236576 "2020-06-26T15:57:37Z")
Hello, I am having trouble getting fscrawler to index all my files. For example, I am trying to index all 7701 files , but only 2627 got indexed after a full day. The count stopped at 2627 today. I took some files that… --- ## [Beats monitoring settings](https://discuss.elastic.co/t/beats-monitoring-settings/238882)
**Author:** [@Ronin](https://discuss.elastic.co/u/Ronin)\ **Replies:** 0\ **Last updated:** [June 26, 2020, 3:37pm UTC](https://discuss.elastic.co/t/beats-monitoring-settings/238882 "2020-06-26T15:37:58Z")
We are using Elastic Cloud and its unclear from the documentation of what we should put for the monitoring settings. Following this documentation: https://www.elastic.co/guide/en/beats/filebeat/current/monitoring-interna… --- ## [Multiple logstash configs with different filters running at the same time](https://discuss.elastic.co/t/multiple-logstash-configs-with-different-filters-running-at-the-same-time/238749)
**Author:** [@Archie\_Crawford](https://discuss.elastic.co/u/Archie_Crawford)\ **Replies:** 6\ **Last updated:** [June 26, 2020, 3:14pm UTC](https://discuss.elastic.co/t/multiple-logstash-configs-with-different-filters-running-at-the-same-time/238749 "2020-06-26T15:14:21Z")
Hello, I have been having this issue when I try to send server logs to logstash.. Java stack trace server logs sent to Logstash with their own input.conf filter.conf and output.conf and Cisco ASA firewall logs going t… --- ## [Sum of one common value on two fields](https://discuss.elastic.co/t/sum-of-one-common-value-on-two-fields/238877)
**Author:** [@kamfart](https://discuss.elastic.co/u/kamfart)\ **Replies:** 0\ **Last updated:** [June 26, 2020, 2:55pm UTC](https://discuss.elastic.co/t/sum-of-one-common-value-on-two-fields/238877 "2020-06-26T14:55:16Z")
Hi there, I'm trying to build a visualisation which calculates the sum of one specific value across all my documents filtered by 2 fields. Here some truncated data to illustrate my words : { ... "class": "A", "valu… --- ## [How to change field type from string to number](https://discuss.elastic.co/t/how-to-change-field-type-from-string-to-number/238876)
**Author:** [@peirceg](https://discuss.elastic.co/u/peirceg)\ **Replies:** 0\ **Last updated:** [June 26, 2020, 2:40pm UTC](https://discuss.elastic.co/t/how-to-change-field-type-from-string-to-number/238876 "2020-06-26T14:40:25Z")
I have imported some sample sales data and want to change the total profits field from a string to a number. I have no coding experience and do not understand the steps on most google pages. Any help would be appreciated… --- ## [Visualization: Display missing values on filter aggregation](https://discuss.elastic.co/t/visualization-display-missing-values-on-filter-aggregation/238586)
**Author:** [@kimjavier43](https://discuss.elastic.co/u/kimjavier43)\ **Replies:** 4\ **Last updated:** [June 26, 2020, 2:09pm UTC](https://discuss.elastic.co/t/visualization-display-missing-values-on-filter-aggregation/238586 "2020-06-26T14:09:19Z")
Hello, Is there a way to include missing fields in filters aggregation like in terms aggregation? Thanks, --- ## [Problème avec le démarrage d'un cluster à 3 nodes](https://discuss.elastic.co/t/probleme-avec-le-demarrage-dun-cluster-a-3-nodes/238825)
**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\ **Replies:** 2\ **Last updated:** [June 26, 2020, 1:58pm UTC](https://discuss.elastic.co/t/probleme-avec-le-demarrage-dun-cluster-a-3-nodes/238825 "2020-06-26T13:58:52Z")
Bonjour, J'ai suivi la documentation suivante : https://www.elastic.co/guide/en/elasticsearch/reference/7.5/getting-started-install.html Le problème vient après quand je souhaites relancer elasticsearch, j'obtiens l'er… --- ## [Terms aggregations exclude the key of parent](https://discuss.elastic.co/t/terms-aggregations-exclude-the-key-of-parent/236977)
**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\ **Replies:** 3\ **Last updated:** [June 26, 2020, 1:23pm UTC](https://discuss.elastic.co/t/terms-aggregations-exclude-the-key-of-parent/236977 "2020-06-26T13:23:26Z")
GET posts/\_search { "size": 0, "aggs": { "hashtags": { "terms": { "field": "hashtags", "size": 10 }, "aggs": { "tagalongs": { … --- ## [Elasticsearch - query with 2 conditions](https://discuss.elastic.co/t/elasticsearch-query-with-2-conditions/238273)
**Author:** [@Rohlik](https://discuss.elastic.co/u/Rohlik)\ **Replies:** 3\ **Last updated:** [June 26, 2020, 1:15pm UTC](https://discuss.elastic.co/t/elasticsearch-query-with-2-conditions/238273 "2020-06-26T13:15:40Z")
Hi there, I want get result from Elasticsearch of specific fields (and their values) which match 2 criteria - date and string match. But I something doing wrong, because I receiving this error: \[match\] malformed quer… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1361) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1363)