# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1374 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1375 --- ## [Elasticsearch parser problem](https://discuss.elastic.co/t/elasticsearch-parser-problem/238109)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 0\ **Last updated:** [June 22, 2020, 3:02pm UTC](https://discuss.elastic.co/t/elasticsearch-parser-problem/238109 "2020-06-22T15:02:29Z")
Hello, we are having difficulties while parsing incoming object from http poller plugin and storing into ELS. Template mapping is here: "aqarchive": { "properties": { "hea… --- ## [Data ingest using curl](https://discuss.elastic.co/t/data-ingest-using-curl/237517)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 3\ **Last updated:** [June 22, 2020, 10:38pm UTC](https://discuss.elastic.co/t/data-ingest-using-curl/237517 "2020-06-22T22:38:59Z")
Is there a way to pull logs from an external system into Elastic through curl command? If so, what are the recommendations on it's architecture. Here is what I have in mind: Setup a shell script to run curl command -\> … --- ## [\_cat indice filtering by index wildcard](https://discuss.elastic.co/t/cat-indice-filtering-by-index-wildcard/238154)
**Author:** [@morty](https://discuss.elastic.co/u/morty)\ **Replies:** 0\ **Last updated:** [June 22, 2020, 9:09pm UTC](https://discuss.elastic.co/t/cat-indice-filtering-by-index-wildcard/238154 "2020-06-22T21:09:03Z")
According to this endpoint documentation (Optional, string) Comma-separated list or wildcard expression of index names used to limit the request. But in reality it also checks for aliases which makes this filtering … --- ## [Elasticsearch jdk](https://discuss.elastic.co/t/elasticsearch-jdk/238153)
**Author:** [@griffer98](https://discuss.elastic.co/u/griffer98)\ **Replies:** 0\ **Last updated:** [June 22, 2020, 8:59pm UTC](https://discuss.elastic.co/t/elasticsearch-jdk/238153 "2020-06-22T20:59:20Z")
I just installed elasticsearch 7.8 and when I run I get this error could not find java in bundled jdk at ..... What is wrong? --- ## [How to remove auto indexes in Kibana?](https://discuss.elastic.co/t/how-to-remove-auto-indexes-in-kibana/238140)
**Author:** [@impkos](https://discuss.elastic.co/u/impkos)\ **Replies:** 4\ **Last updated:** [June 22, 2020, 7:51pm UTC](https://discuss.elastic.co/t/how-to-remove-auto-indexes-in-kibana/238140 "2020-06-22T19:51:24Z")
Help remove indexes --- ## [Filter Sonicwall Logstash](https://discuss.elastic.co/t/filter-sonicwall-logstash/238146)
**Author:** [@Danilo\_Visual](https://discuss.elastic.co/u/Danilo_Visual)\ **Replies:** 0\ **Last updated:** [June 22, 2020, 7:41pm UTC](https://discuss.elastic.co/t/filter-sonicwall-logstash/238146 "2020-06-22T19:41:28Z")
I'm new to Logstash and I'm trying to filter my Sonicwall log My logstash.conf: input { syslog { type =\> Sonicwall port =\> 9991 } } filter { if \[type\] == "Sonicwall" { kv { exclude\_keys =\> \[ "c", "id", "m", "… --- ## [Синхронная или асинхронная запись на дата-ноды](https://discuss.elastic.co/t/topic/237958)
**Author:** [@111229](https://discuss.elastic.co/u/111229)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 7:11pm UTC](https://discuss.elastic.co/t/topic/237958 "2020-06-22T19:11:42Z")
Коллеги, добрый день. Помогите, пожалуйста, разобраться. У нас кластер из 9 дата-нод, 3 мастера, одна нода координации. Более 100000 записей в секунду. Очень часто последнее время возникают 429 ошибки. Сейчас осущест… --- ## [Ruby time.strftime logstash](https://discuss.elastic.co/t/ruby-time-strftime-logstash/238138)
**Author:** [@Rushabh\_Doshi](https://discuss.elastic.co/u/Rushabh_Doshi)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 7:05pm UTC](https://discuss.elastic.co/t/ruby-time-strftime-logstash/238138 "2020-06-22T19:05:58Z")
Hi I want to convert hour to number , hour is extracted from timestamp as below in logstash: ruby { code =\> "event.set('\[hour\]',event.get('Activity-Time-New').time.strftime('%k') )" } In Kibana i want #hour ,a number … --- ## [Central repository for Elastic documentation?](https://discuss.elastic.co/t/central-repository-for-elastic-documentation/238130)
**Author:** [@necmettin](https://discuss.elastic.co/u/necmettin)\ **Replies:** 2\ **Last updated:** [June 22, 2020, 6:55pm UTC](https://discuss.elastic.co/t/central-repository-for-elastic-documentation/238130 "2020-06-22T18:55:14Z")
Is there a central repository to follow for Elastic documentation, especially if I want to start a translation effort? --- ## [Scripted field to convert 1024 Bytes to 1000 metric bytes](https://discuss.elastic.co/t/scripted-field-to-convert-1024-bytes-to-1000-metric-bytes/237901)
**Author:** [@chowpay](https://discuss.elastic.co/u/chowpay)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 6:15pm UTC](https://discuss.elastic.co/t/scripted-field-to-convert-1024-bytes-to-1000-metric-bytes/237901 "2020-06-22T18:15:28Z")
In 6.4.2 I have a scripted filed that converts 1024Bytes to 1000Bytes as that is how we bill by this is the script that was working in 6.4.2 (doc\['total\_usage'\].value \*1000000000) \* Math.pow(1.024, Math.floor(Math.log(… --- ## [Coordinating node to route requests from intranet/internet to two distinct subsets of nodes](https://discuss.elastic.co/t/coordinating-node-to-route-requests-from-intranet-internet-to-two-distinct-subsets-of-nodes/237981)
**Author:** [@xandmaga](https://discuss.elastic.co/u/xandmaga)\ **Replies:** 5\ **Last updated:** [June 22, 2020, 5:54pm UTC](https://discuss.elastic.co/t/coordinating-node-to-route-requests-from-intranet-internet-to-two-distinct-subsets-of-nodes/237981 "2020-06-22T17:54:43Z")
Hi, we have very different throughput scenarios for our cluster regarding the same indexes. Our product will be available through our private intranet, but it will be released publicly too, and available through internet… --- ## [Logstash grok filter combinedapachelog does not work](https://discuss.elastic.co/t/logstash-grok-filter-combinedapachelog-does-not-work/238133)
**Author:** [@ademxoy](https://discuss.elastic.co/u/ademxoy)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 5:50pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-combinedapachelog-does-not-work/238133 "2020-06-22T17:50:16Z")
Grok does not seem to create any outputs for COMBINEDAPACHELOG Here is my filter: filter { grok { match =\> { "messages" =\> "%{COMBINEDAPACHELOG}"} } mutate { convert =\> { "bytes" =\> "integer" } } date { mat… --- ## [Return nested fields from query using source filter](https://discuss.elastic.co/t/return-nested-fields-from-query-using-source-filter/238091)
**Author:** [@misheck](https://discuss.elastic.co/u/misheck)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 3:25pm UTC](https://discuss.elastic.co/t/return-nested-fields-from-query-using-source-filter/238091 "2020-06-22T15:25:58Z")
I am trying to query my signals indices in Elastic and I would like the results to return only the fields that I am interested and my current challenge is that some of the fields are nested. I have tried various methods … --- ## [ODBC Connection to Elasticsearch v6.8](https://discuss.elastic.co/t/odbc-connection-to-elasticsearch-v6-8/238094)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 3:15pm UTC](https://discuss.elastic.co/t/odbc-connection-to-elasticsearch-v6-8/238094 "2020-06-22T15:15:17Z")
I am looking to connect to Elasticsearch in AWS via odbc, but get the following error... connection failed: \[Elastic\]\[EsODBC 6.8(c0ace37 +,u,r) Driver\]{"Message":"Your Request: '/\_xpack/sql' is not allowed."} Where can… --- ## [ERROR Unable to delete file](https://discuss.elastic.co/t/error-unable-to-delete-file/237948)
**Author:** [@rezekiel](https://discuss.elastic.co/u/rezekiel)\ **Replies:** 5\ **Last updated:** [June 22, 2020, 3:13pm UTC](https://discuss.elastic.co/t/error-unable-to-delete-file/237948 "2020-06-22T15:13:28Z")
Hi , I use elasticsearch for windows amd getting --- ## [Sincronizar](https://discuss.elastic.co/t/sincronizar/238102)
**Author:** [@Juliano\_de\_Mello](https://discuss.elastic.co/u/Juliano_de_Mello)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 3:10pm UTC](https://discuss.elastic.co/t/sincronizar/238102 "2020-06-22T15:10:20Z")
Estou com dificuldades para sincronizar minha base mongoDB com elasticsearch. Há algum tutorial recente que possa me ajudar? I'm having trouble synchronizing my mongoDB base with elasticsearch. Are there any recent tuto… --- ## [Logstash input plugin for azure service bus topics](https://discuss.elastic.co/t/logstash-input-plugin-for-azure-service-bus-topics/238103)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 0\ **Last updated:** [June 22, 2020, 2:31pm UTC](https://discuss.elastic.co/t/logstash-input-plugin-for-azure-service-bus-topics/238103 "2020-06-22T14:31:26Z")
Hello, Does anybody know about the following logstash plugin? This plugin reads messages from Azure Service Bus Topics but we would like to monitor only meta-data like number of messages in queue. Is this plug-in … --- ## [@timestamp field slow range query "DocValuesFieldExistsQuery"](https://discuss.elastic.co/t/timestamp-field-slow-range-query-docvaluesfieldexistsquery/234995)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 12\ **Last updated:** [June 22, 2020, 2:27pm UTC](https://discuss.elastic.co/t/timestamp-field-slow-range-query-docvaluesfieldexistsquery/234995 "2020-06-22T14:27:31Z")
Hi! I was profiling my queries and I run into this: According to this thread there's isn't anything I can do to avoid this behavior and it seems that the newest ES version has older Lucene version (8.5) which doesn't… --- ## [How to parse dynamic array json through logstash?](https://discuss.elastic.co/t/how-to-parse-dynamic-array-json-through-logstash/238081)
**Author:** [@Rahul\_rr](https://discuss.elastic.co/u/Rahul_rr)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 2:10pm UTC](https://discuss.elastic.co/t/how-to-parse-dynamic-array-json-through-logstash/238081 "2020-06-22T14:10:38Z")
Here is my array json. "service\_lines": \[ { "id": 584942, "is\_approved": null, "aar": { "category": { "id": 42, "name": "Tires" }, "system": { "id": 1, "name": "Tire" }, "subsystem": { "id": 1, "name": "T… --- ## [Logstash multiple jdbc input and clone](https://discuss.elastic.co/t/logstash-multiple-jdbc-input-and-clone/237739)
**Author:** [@ohoroyoi](https://discuss.elastic.co/u/ohoroyoi)\ **Replies:** 3\ **Last updated:** [June 22, 2020, 1:50pm UTC](https://discuss.elastic.co/t/logstash-multiple-jdbc-input-and-clone/237739 "2020-06-22T13:50:25Z")
I want to synchronize 2 postgres tables with 3 elasticsearch indexes. I'm going to split one of the tables and synchronize it with two indexes. so I'm cloning one of those tables. Divide the cloned things into 2 indexe… --- ## [How to create multiple pattern dissect processor - Ingest pipeline](https://discuss.elastic.co/t/how-to-create-multiple-pattern-dissect-processor-ingest-pipeline/237688)
**Author:** [@Mohan\_vel](https://discuss.elastic.co/u/Mohan_vel)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 1:50pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-pattern-dissect-processor-ingest-pipeline/237688 "2020-06-22T13:50:11Z")
I have created the ingest pipeline to dissect the incoming message with single pattern but the challenge is going with multiple patterns. Given my pipeline for reference. PUT \_ingest/pipeline/dissectpipeline { … --- ## [Why I am getting this error when using JDBC input plugin of Logstash](https://discuss.elastic.co/t/why-i-am-getting-this-error-when-using-jdbc-input-plugin-of-logstash/237988)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 7\ **Last updated:** [June 22, 2020, 1:42pm UTC](https://discuss.elastic.co/t/why-i-am-getting-this-error-when-using-jdbc-input-plugin-of-logstash/237988 "2020-06-22T13:42:01Z")
Here is the query I had put in the logstash conf file: select a.ID, a.TransactionID, b.Result from MyDB.Result a inner join MyDB.ResultData b on a.ID=b.ID where a.ID \< :sql\_last\_value and a.CreatedOn \> '2020-01-01' o… --- ## [How to highlight the selected dashboard in a markdown](https://discuss.elastic.co/t/how-to-highlight-the-selected-dashboard-in-a-markdown/236331)
**Author:** [@Anirudhan](https://discuss.elastic.co/u/Anirudhan)\ **Replies:** 2\ **Last updated:** [June 22, 2020, 1:29pm UTC](https://discuss.elastic.co/t/how-to-highlight-the-selected-dashboard-in-a-markdown/236331 "2020-06-22T13:29:19Z")
In the markdown visualization have added 5 dashboards.Is there anyway to highlight which dashboard is selected.Please to help. --- ## [Elasticsearch index not created after adding logstash (works fine with filebeat -\> es)](https://discuss.elastic.co/t/elasticsearch-index-not-created-after-adding-logstash-works-fine-with-filebeat-es/237374)
**Author:** [@code\_share](https://discuss.elastic.co/u/code_share)\ **Replies:** 13\ **Last updated:** [June 22, 2020, 12:45pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-created-after-adding-logstash-works-fine-with-filebeat-es/237374 "2020-06-22T12:45:11Z")
I spin up an ELK stack using docker-compose (see below). I have manged to successfully enable basic authentication (using xpack + certs + built-in passwords) for the ES cluster and connect filebeat to the the ES cluster … --- ## [Syslog to different indexes](https://discuss.elastic.co/t/syslog-to-different-indexes/238050)
**Author:** [@arun\_k](https://discuss.elastic.co/u/arun_k)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 12:41pm UTC](https://discuss.elastic.co/t/syslog-to-different-indexes/238050 "2020-06-22T12:41:23Z")
Hi Team Am using filebeat to collect logs (mainly syslog) from multiple NW devices belongs to multiple tenants How can i configure logstash conf to index this to seperate indexes based on customers? Log source x,y(sys… --- ## [How to delete kibana.log](https://discuss.elastic.co/t/how-to-delete-kibana-log/238079)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 2\ **Last updated:** [June 22, 2020, 12:35pm UTC](https://discuss.elastic.co/t/how-to-delete-kibana-log/238079 "2020-06-22T12:35:36Z")
Hi , my kibana.log is growing rapidly how can I delete it and create a new one , I tried to rename it but it kept growing ... Thanks in advance. --- ## [Kibana Static Lookup](https://discuss.elastic.co/t/kibana-static-lookup/236309)
**Author:** [@Anton91](https://discuss.elastic.co/u/Anton91)\ **Replies:** 8\ **Last updated:** [June 22, 2020, 11:57am UTC](https://discuss.elastic.co/t/kibana-static-lookup/236309 "2020-06-22T11:57:57Z")
Hello, I am faced with the following problem: I'm getting two fields A and B. For example, field A contains a 6 and field B should now contain Ethernet. Both fields are already stored in the index pattern and I have a… --- ## [Logststash](https://discuss.elastic.co/t/logststash/238080)
**Author:** [@Eryadav](https://discuss.elastic.co/u/Eryadav)\ **Replies:** 0\ **Last updated:** [June 22, 2020, 11:55am UTC](https://discuss.elastic.co/t/logststash/238080 "2020-06-22T11:55:35Z")
i am using the docker compose to configure the logstash .but while i trying to mount the sincedb path of logstash in host container its not working if anyone can help me with this. \< - /opt/sanjay/logs/aartech:/usr/sha… --- ## [How to add the count of 2 values in logstash](https://discuss.elastic.co/t/how-to-add-the-count-of-2-values-in-logstash/238077)
**Author:** [@Matish\_Bhuyan](https://discuss.elastic.co/u/Matish_Bhuyan)\ **Replies:** 0\ **Last updated:** [June 22, 2020, 11:43am UTC](https://discuss.elastic.co/t/how-to-add-the-count-of-2-values-in-logstash/238077 "2020-06-22T11:43:56Z")
Hi All, I have a requirement in logstash. For an example in fruits keyword i have 3 values 1- Mangoes ---- 5 2- Oranges -----6 3- Brinjal -----7 But in Kibana i need to visualize the sum of only 2 objects as… --- ## [How to parse this xml data each rate plan id data should go to new row or new column dynamically by using xml filter xpath option or any other solution let me know please (edited)](https://discuss.elastic.co/t/how-to-parse-this-xml-data-each-rate-plan-id-data-should-go-to-new-row-or-new-column-dynamically-by-using-xml-filter-xpath-option-or-any-other-solution-let-me-know-please-edited/238073)
**Author:** [@Puneeth\_S\_B\_Gowda1](https://discuss.elastic.co/u/Puneeth_S_B_Gowda1)\ **Replies:** 0\ **Last updated:** [June 22, 2020, 11:30am UTC](https://discuss.elastic.co/t/how-to-parse-this-xml-data-each-rate-plan-id-data-should-go-to-new-row-or-new-column-dynamically-by-using-xml-filter-xpath-option-or-any-other-solution-let-me-know-please-edited/238073 "2020-06-22T11:30:04Z")
my logstash input { beats { port =\> 5044 } } filter { mutate { split =\> { "message" =\> "@$@" }} mutate { add\_field =\> { "response" =\> "%{\[message\]\[1\]}" "request" =\> "%{\[message\]\[0\]}" } } xml { store\_xml =\> "fa… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1373) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1375)