# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1380 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1381 --- ## [Logstash filter pipeline Dynamic if on fields](https://discuss.elastic.co/t/logstash-filter-pipeline-dynamic-if-on-fields/237581)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 3:15pm UTC](https://discuss.elastic.co/t/logstash-filter-pipeline-dynamic-if-on-fields/237581 "2020-06-18T15:15:28Z")
Hello, is there any way how to match any field while constructing if in filter pipeline, for example: Tried but it seems it matches half of the fields, and half it does not.. if \[coad\]\[queueStatus\]\[queueByTypes\]\[\*… --- ## [ELK without logstash](https://discuss.elastic.co/t/elk-without-logstash/237119)
**Author:** [@YanisALBIK](https://discuss.elastic.co/u/YanisALBIK)\ **Replies:** 6\ **Last updated:** [June 18, 2020, 2:59pm UTC](https://discuss.elastic.co/t/elk-without-logstash/237119 "2020-06-18T14:59:41Z")
Hi, My team and me are currenlty working on a project to allow our client to view some dashboards in Kibana and we would like to get some elements to validate the architecture we define. We would like to know at which … --- ## [Logstash Syntax :: Check Boolian Value within a Field?](https://discuss.elastic.co/t/logstash-syntax-check-boolian-value-within-a-field/237530)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 3\ **Last updated:** [June 18, 2020, 2:57pm UTC](https://discuss.elastic.co/t/logstash-syntax-check-boolian-value-within-a-field/237530 "2020-06-18T14:57:19Z")
Hi Logstash Ninjas, In my filter{} section, I think I am creating a field with a Boolean value in it: if SOME CONDITION { mutate { add\_field =\> { "MyFlag" =\> 'true' } convert =\> { "MyFlag" =\> "boolean" } } … --- ## [How to parse nested json through logstash](https://discuss.elastic.co/t/how-to-parse-nested-json-through-logstash/237290)
**Author:** [@Rahul\_rr](https://discuss.elastic.co/u/Rahul_rr)\ **Replies:** 7\ **Last updated:** [June 18, 2020, 2:55pm UTC](https://discuss.elastic.co/t/how-to-parse-nested-json-through-logstash/237290 "2020-06-18T14:55:39Z")
I'm getting the data from sqs queue as a nested json and parsing through logstash. i tried some approaches but it didn't work. Below is my sample nested json. { "service\_event": { "id": 166175, "equipment": { "id": … --- ## [How do I publish my Kibana to access other machines?](https://discuss.elastic.co/t/how-do-i-publish-my-kibana-to-access-other-machines/237320)
**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\ **Replies:** 11\ **Last updated:** [June 18, 2020, 2:50pm UTC](https://discuss.elastic.co/t/how-do-i-publish-my-kibana-to-access-other-machines/237320 "2020-06-18T14:50:17Z")
I am wanting to publish my Kibana for access to other machines via Browser, I have not yet entered a password and my license is basic ELK --- ## [Can we read a variable in Kibana](https://discuss.elastic.co/t/can-we-read-a-variable-in-kibana/237271)
**Author:** [@Dhandeep\_Kumar](https://discuss.elastic.co/u/Dhandeep_Kumar)\ **Replies:** 5\ **Last updated:** [June 18, 2020, 2:49pm UTC](https://discuss.elastic.co/t/can-we-read-a-variable-in-kibana/237271 "2020-06-18T14:49:11Z")
Hi There, is this possible to read a variable in Kibana and that variable contains some expression for eg: vTotalSales = sum(sales) thanks, Dhandeep --- ## [Elasticsearch and Kibana On Prem standalone subscription](https://discuss.elastic.co/t/elasticsearch-and-kibana-on-prem-standalone-subscription/237654)
**Author:** [@Muhammad\_Umair\_Baig](https://discuss.elastic.co/u/Muhammad_Umair_Baig)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 2:29pm UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-on-prem-standalone-subscription/237654 "2020-06-18T14:29:59Z")
If you help me sharing the cost of on-prem (Standalone) licensed versions of elasticsearch and kibana 7.6.2 Gold Platinum Enterprise is it one time subscription or yearly? How many licenses do we need to purchase if … --- ## [Nested search in multiIndex approach](https://discuss.elastic.co/t/nested-search-in-multiindex-approach/234707)
**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 2:27pm UTC](https://discuss.elastic.co/t/nested-search-in-multiindex-approach/234707 "2020-06-18T14:27:45Z")
Hi, i am trying to get the nested value in multi indices approach. used below query but didn't help. please advise. GET \_all,/\_search { "query": { "bool": { "should": \[ { "nested": { "path": "\_index.student\_obj… --- ## [Better French and German stemming?](https://discuss.elastic.co/t/better-french-and-german-stemming/236283)
**Author:** [@bkazez](https://discuss.elastic.co/u/bkazez)\ **Replies:** 3\ **Last updated:** [June 18, 2020, 2:12pm UTC](https://discuss.elastic.co/t/better-french-and-german-stemming/236283 "2020-06-18T14:12:32Z")
Hello, I'm using cloud.elastic.co to index metadata about German and French baroque vocal music. I need to treat inflected and uninflected forms as equivalent, so someone can search "schlummer" and find the lovely Bach … --- ## [Big uncommitted segments to disk reported by GET /myIndex/\_segments API (ES version 6.3)](https://discuss.elastic.co/t/big-uncommitted-segments-to-disk-reported-by-get-myindex-segments-api-es-version-6-3/237648)
**Author:** [@Spico\_Florin](https://discuss.elastic.co/u/Spico_Florin)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 1:32pm UTC](https://discuss.elastic.co/t/big-uncommitted-segments-to-disk-reported-by-get-myindex-segments-api-es-version-6-3/237648 "2020-06-18T13:32:48Z")
Hello! WE are using ElasticSearch version 6.3. We have one situation were the GET /myIndex/\_segments API reported some big size files that are uncommitted to disk (the committed field of the mentioned API is false, see … --- ## [Error in script fields](https://discuss.elastic.co/t/error-in-script-fields/237645)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 1:22pm UTC](https://discuss.elastic.co/t/error-in-script-fields/237645 "2020-06-18T13:22:57Z")
Hi , why i can't get the result of the script : GET /test\_bookings\_v2/\_search?size=0 { "script\_fields": { "avg\_price": { "script": { "lang": "expression", "source": "doc\['price'\].avg()" } } } } i use ELK :… --- ## [How to build a custom Kibana plugin similar to discover saved search without aggregation](https://discuss.elastic.co/t/how-to-build-a-custom-kibana-plugin-similar-to-discover-saved-search-without-aggregation/237635)
**Author:** [@Tejashree\_kate](https://discuss.elastic.co/u/Tejashree_kate)\ **Replies:** 3\ **Last updated:** [June 18, 2020, 1:17pm UTC](https://discuss.elastic.co/t/how-to-build-a-custom-kibana-plugin-similar-to-discover-saved-search-without-aggregation/237635 "2020-06-18T13:17:29Z")
Hi Team, I am trying to build a custom Kibana plugin of type visualisation. I want to display similar to discover saved search without any aggregation. How can I achieve this? What schema should be definied inside edi… --- ## [Help with Logstash plug-in development](https://discuss.elastic.co/t/help-with-logstash-plug-in-development/236937)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 1:15pm UTC](https://discuss.elastic.co/t/help-with-logstash-plug-in-development/236937 "2020-06-18T13:15:24Z")
I am trying to develop a new logstash plugin in my development Elasticsearch stack environment. I am new to this so this is all a learning experience for me. I will try to be as clear and concise as I can be including as… --- ## [FScrawler: perform OCR selectively only on PDF files that do not have text](https://discuss.elastic.co/t/fscrawler-perform-ocr-selectively-only-on-pdf-files-that-do-not-have-text/236016)
**Author:** [@equj](https://discuss.elastic.co/u/equj)\ **Replies:** 5\ **Last updated:** [June 18, 2020, 1:14pm UTC](https://discuss.elastic.co/t/fscrawler-perform-ocr-selectively-only-on-pdf-files-that-do-not-have-text/236016 "2020-06-18T13:14:36Z")
Hello, I'm using FScrawler (2.7) to load text from PDFs into Elasticsearch (7.6.x). Most of PDF files have text, but some of PDF files contain images of scanned text and need to be OCRed. Is there a way to configure FSc… --- ## [Replace substring and concat rest](https://discuss.elastic.co/t/replace-substring-and-concat-rest/237622)
**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 12:52pm UTC](https://discuss.elastic.co/t/replace-substring-and-concat-rest/237622 "2020-06-18T12:52:27Z")
I have DNS Logs looks like (14)xxxxxxxxxxxx(11)keydelivery(13)mediaservices(7)windows(3)net(0) (4)mediaservices(7)windows(3)net(0) (3)windows.com(0) I want to remove all (...) and replace this with a dot "." if (..)… --- ## [Find one term result, or a list of match results](https://discuss.elastic.co/t/find-one-term-result-or-a-list-of-match-results/237472)
**Author:** [@darraghenright](https://discuss.elastic.co/u/darraghenright)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 12:49pm UTC](https://discuss.elastic.co/t/find-one-term-result-or-a-list-of-match-results/237472 "2020-06-18T12:49:51Z")
Hi there :wave: Sorry, this is undoubtedly a bit of noob question but I am still trying to get to grips with compound queries in Elasticsearch. In my example, each document has a name field and we can assume that each n… --- ## [Problem with @timestamp](https://discuss.elastic.co/t/problem-with-timestamp/237587)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 6\ **Last updated:** [June 18, 2020, 12:44pm UTC](https://discuss.elastic.co/t/problem-with-timestamp/237587 "2020-06-18T12:44:53Z")
I use logstash for ingest in elasstic a CSV file, i have a error from the time stamps is not the daily date my config logstash is input { file { path =\> "/data/volumes/monitoring/logstash/logCtrlM/stock.csv" … --- ## [RabbitMQ output plugin](https://discuss.elastic.co/t/rabbitmq-output-plugin/236641)
**Author:** [@Marat](https://discuss.elastic.co/u/Marat)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 12:44pm UTC](https://discuss.elastic.co/t/rabbitmq-output-plugin/236641 "2020-06-18T12:44:32Z")
I am a new user for Logstash, and I want to use Logstash's RabbitMQ output plugin to feed data to RabbitMQ, schema is pretty simple: Nginx -(input)-\>Logstash -(output)-\> RabbitMQ cat /etc/logstash/conf.d/10-nginx-f… --- ## [What Is The True Meaning Of IS NOT BETWEEN?](https://discuss.elastic.co/t/what-is-the-true-meaning-of-is-not-between/237615)
**Author:** [@Ethan777100](https://discuss.elastic.co/u/Ethan777100)\ **Replies:** 7\ **Last updated:** [June 18, 2020, 12:23pm UTC](https://discuss.elastic.co/t/what-is-the-true-meaning-of-is-not-between/237615 "2020-06-18T12:23:04Z")
i just implemented a filter to find the count of values that are not within -300 to 300 But in my results, why do i still see 3 rows of 300? I would interpret IS NOT BETWEEN to be inclusive of the range boundaries.… --- ## [Logstash translate and replace filter not working](https://discuss.elastic.co/t/logstash-translate-and-replace-filter-not-working/237582)
**Author:** [@marco2005](https://discuss.elastic.co/u/marco2005)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 12:18pm UTC](https://discuss.elastic.co/t/logstash-translate-and-replace-filter-not-working/237582 "2020-06-18T12:18:56Z")
I have 5 log files using the below Golang log pattern: 2020-06-17 11:50:04 CEST | CORE | INFO | (pkg/collector/corechecks/net/ntp.go:162 in Run) | Failed to get clock offset from any ntp host And below is my filter: f… --- ## [Unable to see many custom index fields in Kibana Discover](https://discuss.elastic.co/t/unable-to-see-many-custom-index-fields-in-kibana-discover/237501)
**Author:** [@ozonshak](https://discuss.elastic.co/u/ozonshak)\ **Replies:** 6\ **Last updated:** [June 18, 2020, 12:11pm UTC](https://discuss.elastic.co/t/unable-to-see-many-custom-index-fields-in-kibana-discover/237501 "2020-06-18T12:11:00Z")
Hello. I'm attempting to load a new index into Elastic and Kibana. I have loaded it into ElasticSearch and I can see my fields just fine. Here is an example where I run a query against Dev Tools: { "took" : 2, "… --- ## [Best practice for Index and Shard Size](https://discuss.elastic.co/t/best-practice-for-index-and-shard-size/237627)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 12:04pm UTC](https://discuss.elastic.co/t/best-practice-for-index-and-shard-size/237627 "2020-06-18T12:04:06Z")
Hi, what is the best practice for index and shard size? I found sources that state that a good shard size is 10-30GB. But what is a good index size? I have timeseries data of over 300 GB split into 5 Indices and I am r… --- ## [Kibana dashboard - Input search field](https://discuss.elastic.co/t/kibana-dashboard-input-search-field/237126)
**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\ **Replies:** 8\ **Last updated:** [June 18, 2020, 11:52am UTC](https://discuss.elastic.co/t/kibana-dashboard-input-search-field/237126 "2020-06-18T11:52:14Z")
Hi, I didn't found anything that suites this need, i found this thread with some years: Maybe better solution already exists. I want to present a dashboard with logs, from multiple indexes (to avoid colleagues to kno… --- ## [Can we use nested object in the parent-child relationship in elasticsearch?](https://discuss.elastic.co/t/can-we-use-nested-object-in-the-parent-child-relationship-in-elasticsearch/237625)
**Author:** [@sharathnasa](https://discuss.elastic.co/u/sharathnasa)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 11:32am UTC](https://discuss.elastic.co/t/can-we-use-nested-object-in-the-parent-child-relationship-in-elasticsearch/237625 "2020-06-18T11:32:59Z")
i'm creating the mapping in elasticsearch. I have a four objects such as customer, promotion, product and agreement Customer - parent and promotion - child(child of customer) Promotion - parent and product - child(chil… --- ## [Missing documents when using partitions on a term aggregation](https://discuss.elastic.co/t/missing-documents-when-using-partitions-on-a-term-aggregation/237483)
**Author:** [@jsvac](https://discuss.elastic.co/u/jsvac)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 11:25am UTC](https://discuss.elastic.co/t/missing-documents-when-using-partitions-on-a-term-aggregation/237483 "2020-06-18T11:25:07Z")
Hi all, I have a relatively small index (about 5M docs) and each document has an organization\_id field. I need to list all the unique values for this field and I've implemented this using partitions by following this: h… --- ## [How to recover streaming data even if the connection lost with Python client Elasticsearch?](https://discuss.elastic.co/t/how-to-recover-streaming-data-even-if-the-connection-lost-with-python-client-elasticsearch/237273)
**Author:** [@New\_user](https://discuss.elastic.co/u/New_user)\ **Replies:** 4\ **Last updated:** [June 18, 2020, 10:12am UTC](https://discuss.elastic.co/t/how-to-recover-streaming-data-even-if-the-connection-lost-with-python-client-elasticsearch/237273 "2020-06-18T10:12:44Z")
I stream RESTful API data from https://www.n2yo.com/api/ which for tracking satellite positions. I use python client with Elasticsearch. I save the streamed data to ES every 10 seconds and visualized by Kibana. My ES ves… --- ## [Elastic Rollup Job , Error while creating visualization](https://discuss.elastic.co/t/elastic-rollup-job-error-while-creating-visualization/237577)
**Author:** [@brijeshpallath](https://discuss.elastic.co/u/brijeshpallath)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 7:10am UTC](https://discuss.elastic.co/t/elastic-rollup-job-error-while-creating-visualization/237577 "2020-06-18T07:10:53Z")
Hi I have created rollup Job as per the specification given below. This will roll up data on an hourly basis. I have also created a rollup index pattern combining the rollup index and source/original index pattern. Pl… --- ## [Exiting: error unpacking config data: more than one namespace configured accessing 'output' (source:'apm-server.yml')](https://discuss.elastic.co/t/exiting-error-unpacking-config-data-more-than-one-namespace-configured-accessing-output-source-apm-server-yml/237571)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 9:09am UTC](https://discuss.elastic.co/t/exiting-error-unpacking-config-data-more-than-one-namespace-configured-accessing-output-source-apm-server-yml/237571 "2020-06-18T09:09:19Z")
There is already an output.elasticsearch configuration in the original docker image, what should I do to close it? If I set output.elasticsearch.enable: false, how can I output the template of apm-server to elasticsearc… --- ## [JSON Processor to parse logs data into doc objects](https://discuss.elastic.co/t/json-processor-to-parse-logs-data-into-doc-objects/234949)
**Author:** [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 9:08am UTC](https://discuss.elastic.co/t/json-processor-to-parse-logs-data-into-doc-objects/234949 "2020-06-18T09:08:12Z")
Hi Team, We have below doc data in JSON format { "\_index": "jaeger-span-2020-05-29", "\_type": "\_doc", "\_id": "QDuvYHIBiNzxbOQnW-IN", "\_version": 1, "\_score": 0, "\_source": { "traceID": "1a9a6917049eff71", "span… --- ## [Count the number of rows(lines) in a CSV file](https://discuss.elastic.co/t/count-the-number-of-rows-lines-in-a-csv-file/237601)
**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 9:02am UTC](https://discuss.elastic.co/t/count-the-number-of-rows-lines-in-a-csv-file/237601 "2020-06-18T09:02:12Z")
Hey guys, i'm trying to count the number of rows in my csv file (it contain 2631 row) and save it in a variable. I used ruby filter but it didn't work so i tried using the metric filter but i get an result that i even … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1379) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1381)