# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1406 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1407 --- ## [Delete reports from reporting tab in Kibana](https://discuss.elastic.co/t/delete-reports-from-reporting-tab-in-kibana/233458)
**Author:** [@MaheshKumar](https://discuss.elastic.co/u/MaheshKumar)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 8:52pm UTC](https://discuss.elastic.co/t/delete-reports-from-reporting-tab-in-kibana/233458 "2020-06-04T20:52:09Z")
I am aware of deleting the reports using POST /.reporting-\/\_delete\_by\_query { "query": { "match\_all": {} } } But this deletes all the reports under that index irrespective of creation date of the report. I… --- ## [Kibana and Nagios errrors](https://discuss.elastic.co/t/kibana-and-nagios-errrors/235054)
**Author:** [@shalauras](https://discuss.elastic.co/u/shalauras)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 8:46pm UTC](https://discuss.elastic.co/t/kibana-and-nagios-errrors/235054 "2020-06-04T20:46:12Z")
Hi, I am trying to join Kibana and Nagios, following this link: Integrating Nagios Checks with Logstash | Elastic Blog But I get some errors which I cant resolve it, any ideas? Thanks. root@nagios:/home/nagios# cd /us… --- ## [Insert old MongoDB data for ES](https://discuss.elastic.co/t/insert-old-mongodb-data-for-es/235626)
**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\ **Replies:** 12\ **Last updated:** [June 4, 2020, 8:26pm UTC](https://discuss.elastic.co/t/insert-old-mongodb-data-for-es/235626 "2020-06-04T20:26:03Z")
My logstash configuration for inserting data in Elasticsearch inserts only new data, it does not insert the old DB documents. My .conf file is as follows: input { mongodb { uri =\> 'mongodb://localhost:27017… --- ## [Create a visualization or filter that shows data from one query, but where some data are exclude based on another query (Left Join)](https://discuss.elastic.co/t/create-a-visualization-or-filter-that-shows-data-from-one-query-but-where-some-data-are-exclude-based-on-another-query-left-join/232560)
**Author:** [@runewage](https://discuss.elastic.co/u/runewage)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 8:11pm UTC](https://discuss.elastic.co/t/create-a-visualization-or-filter-that-shows-data-from-one-query-but-where-some-data-are-exclude-based-on-another-query-left-join/232560 "2020-06-04T20:11:02Z")
Hi In my data in Kibana I have one filed referring to another field. (xref -\> yref). What I want to achieve is to have a visualization showing me all data where someField = someData, except the records where xref is wit… --- ## [Problem with splitted logstash config file in logstash 7.7](https://discuss.elastic.co/t/problem-with-splitted-logstash-config-file-in-logstash-7-7/235788)
**Author:** [@jammann](https://discuss.elastic.co/u/jammann)\ **Replies:** 2\ **Last updated:** [June 4, 2020, 7:52pm UTC](https://discuss.elastic.co/t/problem-with-splitted-logstash-config-file-in-logstash-7-7/235788 "2020-06-04T19:52:30Z")
We're migrating from logstash 6.5.4 to 7.7.0. In 6.5.4 we had our config files all in one directory, with a naming convention like 01\_. We pointed path.config to that directory and logstash concatenated the files as if i… --- ## [Use the right codec field "date"](https://discuss.elastic.co/t/use-the-right-codec-field-date/235751)
**Author:** [@souma](https://discuss.elastic.co/u/souma)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 7:51pm UTC](https://discuss.elastic.co/t/use-the-right-codec-field-date/235751 "2020-06-04T19:51:15Z")
Hi everyone, i use the logstash file below to send data to elasticsearch. input{ file{ path =\> "C:/Users/SOUMAYA/Desktop/bureau.csv" start\_position =\> "beginning" sincedb\_path =\> "NUL" codec… --- ## [How to create ruby class variables mapped to a given ID?](https://discuss.elastic.co/t/how-to-create-ruby-class-variables-mapped-to-a-given-id/234887)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 9\ **Last updated:** [June 4, 2020, 7:26pm UTC](https://discuss.elastic.co/t/how-to-create-ruby-class-variables-mapped-to-a-given-id/234887 "2020-06-04T19:26:52Z")
Hi, I'm using below Ruby filter to find the elapsed time between a start and end event for a given user. The code works fine with the events coming in sequence. But, I have event logs coming from multiple users. I have … --- ## [Delete by query for nested docs for ES version 7.x](https://discuss.elastic.co/t/delete-by-query-for-nested-docs-for-es-version-7-x/232134)
**Author:** [@sg.esearch](https://discuss.elastic.co/u/sg.esearch)\ **Replies:** 10\ **Last updated:** [June 4, 2020, 7:09pm UTC](https://discuss.elastic.co/t/delete-by-query-for-nested-docs-for-es-version-7-x/232134 "2020-06-04T19:09:57Z")
Delete-by-query is in general a bit performance intensive in ES. Would you suggest to use it for nested docs too? Also, is there some different syntax to delete-by-query when the field being queried is present only in … --- ## [Connect to Elasticsearch with TransportClient](https://discuss.elastic.co/t/connect-to-elasticsearch-with-transportclient/218795)
**Author:** [@Sebastien\_Falquier](https://discuss.elastic.co/u/Sebastien_Falquier)\ **Replies:** 7\ **Last updated:** [June 4, 2020, 6:54pm UTC](https://discuss.elastic.co/t/connect-to-elasticsearch-with-transportclient/218795 "2020-06-04T18:54:18Z")
Hello, Even if java TransportClient is deprecated, I need to connect on port 9300 to an elasticsearch cluster deployed with ECK operator. Devops team has worked to open port 9300 on quickstart-es-http service so that i… --- ## [Issue Developing Filter Plugin on Windows](https://discuss.elastic.co/t/issue-developing-filter-plugin-on-windows/234932)
**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 6:43pm UTC](https://discuss.elastic.co/t/issue-developing-filter-plugin-on-windows/234932 "2020-06-04T18:43:32Z")
I am trying to write a new logstash filter, and I can't seem to get the rspec tests to run. I followed the guide posted here: https://www.elastic.co/guide/en/logstash/current/filter-new-plugin.html this is my process: P… --- ## [Date parsing errors I need help to debug](https://discuss.elastic.co/t/date-parsing-errors-i-need-help-to-debug/235733)
**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\ **Replies:** 4\ **Last updated:** [June 4, 2020, 6:35pm UTC](https://discuss.elastic.co/t/date-parsing-errors-i-need-help-to-debug/235733 "2020-06-04T18:35:45Z")
I am getting this error in my logstash error logs: logstash\[24891\]: \[2020-06-04T12:27:22,478\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[5a0b38d56348d6bc3ed40ef3de0fd75852bd567bf4973ad3b30fa5a1538d879b\] Could not ind… --- ## [Build error](https://discuss.elastic.co/t/build-error/235646)
**Author:** [@Elena\_Z](https://discuss.elastic.co/u/Elena_Z)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 6:23pm UTC](https://discuss.elastic.co/t/build-error/235646 "2020-06-04T18:23:27Z")
Hey all, I am trying to build from current github source on CentOS 7.7 / openjdk 11.0.7 / docker 19.03.11 and getting the following error during "./gradlew assembly": Task :x-pack:plugin:monitoring:compileJava FAILE… --- ## [Cpu usage is -1](https://discuss.elastic.co/t/cpu-usage-is-1/235824)
**Author:** [@Julio\_Edel\_Salas\_Dia](https://discuss.elastic.co/u/Julio_Edel_Salas_Dia)\ **Replies:** 0\ **Last updated:** [June 4, 2020, 5:31pm UTC](https://discuss.elastic.co/t/cpu-usage-is-1/235824 "2020-06-04T17:31:43Z")
When consulting the use of a CP in elasticsearch 7.7.1 I get a value of -1, using the query curl -X GET "localhost:9200/\_cat/nodes?v&pretty". What can be? ip heap.percent ram.percent cpu load\_1m load\_5m load\_1… --- ## [Logstash shut down](https://discuss.elastic.co/t/logstash-shut-down/235614)
**Author:** [@ajames](https://discuss.elastic.co/u/ajames)\ **Replies:** 9\ **Last updated:** [June 4, 2020, 5:08pm UTC](https://discuss.elastic.co/t/logstash-shut-down/235614 "2020-06-04T17:08:14Z")
Sending Logstash logs to C:/ElasticSearch/logstash-7.7.0/logs which is now configured via log4j2.properties \[2020-06-03T11:12:10,384\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file because m… --- ## [Does ILM work in Logstash with custom index names?](https://discuss.elastic.co/t/does-ilm-work-in-logstash-with-custom-index-names/235816)
**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\ **Replies:** 0\ **Last updated:** [June 4, 2020, 4:50pm UTC](https://discuss.elastic.co/t/does-ilm-work-in-logstash-with-custom-index-names/235816 "2020-06-04T16:50:18Z")
Hi there, we are currently using a single, generic "logstash-\*" ElasticSearch output which works quite well with the default ILM defaults of 30 days or 50GB and the automatic alias naming convention of logstash-2020.04.0… --- ## [When I have a multi-match query, what index analyzer gets applied to the query by default?](https://discuss.elastic.co/t/when-i-have-a-multi-match-query-what-index-analyzer-gets-applied-to-the-query-by-default/235811)
**Author:** [@aorona](https://discuss.elastic.co/u/aorona)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 4:35pm UTC](https://discuss.elastic.co/t/when-i-have-a-multi-match-query-what-index-analyzer-gets-applied-to-the-query-by-default/235811 "2020-06-04T16:35:51Z")
I am using a multi-match query on multi-fields as follows: INDEX: "mappings": { "my\_doc": { "properties": { "content": { "type": "text", "fields": { "ngram": { … --- ## [ClusterBlockException SERVICE\_UNAVAILABLE](https://discuss.elastic.co/t/clusterblockexception-service-unavailable/235610)
**Author:** [@Tiago\_Krebs](https://discuss.elastic.co/u/Tiago_Krebs)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 4:28pm UTC](https://discuss.elastic.co/t/clusterblockexception-service-unavailable/235610 "2020-06-04T16:28:36Z")
After some coordinators node left from Elastic cluster and return we start to see this erros on the logs: org.elasticsearch.cluster.block.ClusterBlockException: blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / i… --- ## [\_dateparsefailure - yet all data has been imported](https://discuss.elastic.co/t/dateparsefailure-yet-all-data-has-been-imported/235259)
**Author:** [@peterlarb](https://discuss.elastic.co/u/peterlarb)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 3:51pm UTC](https://discuss.elastic.co/t/dateparsefailure-yet-all-data-has-been-imported/235259 "2020-06-04T15:51:32Z")
Hi I have researched previous messages regarding the error "\_dateparsefailure ". I can't figure out why when all of my data is imported correctly and yet the last line in Kibana is throwing up an error "\_dateparsefailur… --- ## [Updating geo.location in add\_host\_metadata with beats while running](https://discuss.elastic.co/t/updating-geo-location-in-add-host-metadata-with-beats-while-running/235800)
**Author:** [@Ad3t0](https://discuss.elastic.co/u/Ad3t0)\ **Replies:** 0\ **Last updated:** [June 4, 2020, 3:47pm UTC](https://discuss.elastic.co/t/updating-geo-location-in-add-host-metadata-with-beats-while-running/235800 "2020-06-04T15:47:18Z")
Is it possible to update the geo.location metadata while a beat is running? I have it configured in my metricbeat.yml and after metricbeat runs it sends the metadata however if it were to change while running how can I s… --- ## [Server 2016 Logstash 7.7 continually stops and restarts with errors](https://discuss.elastic.co/t/server-2016-logstash-7-7-continually-stops-and-restarts-with-errors/235633)
**Author:** [@Elkmaster20](https://discuss.elastic.co/u/Elkmaster20)\ **Replies:** 2\ **Last updated:** [June 4, 2020, 3:28pm UTC](https://discuss.elastic.co/t/server-2016-logstash-7-7-continually-stops-and-restarts-with-errors/235633 "2020-06-04T15:28:42Z")
Here is error in the log file: \[2020-06-01T00:04:16,445\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.version"=\>"7.7.0"} \[2020-06-01T00:04:16,986\]\[INFO \]\[logstash.config.source.local.configpathloader\]… --- ## [Kibana plugin build and .local-chromium](https://discuss.elastic.co/t/kibana-plugin-build-and-local-chromium/235148)
**Author:** [@Nicolap](https://discuss.elastic.co/u/Nicolap)\ **Replies:** 5\ **Last updated:** [June 4, 2020, 3:17pm UTC](https://discuss.elastic.co/t/kibana-plugin-build-and-local-chromium/235148 "2020-06-04T15:17:00Z")
Hi guys, I've a problem with che kibana plugin build I did using plugin-helpers In detail, when I run the build command I can see the zip file with all the plugin's file I need. The only files are missing is the .loca… --- ## [Creating a mapping when nested object has too many unique random keys](https://discuss.elastic.co/t/creating-a-mapping-when-nested-object-has-too-many-unique-random-keys/235239)
**Author:** [@jb789](https://discuss.elastic.co/u/jb789)\ **Replies:** 4\ **Last updated:** [June 4, 2020, 3:01pm UTC](https://discuss.elastic.co/t/creating-a-mapping-when-nested-object-has-too-many-unique-random-keys/235239 "2020-06-04T15:01:17Z")
Wondering how to create a mapping for the below document when the nested object key has too many unique / unknown keys in just one document. Document Link When run as dynamic mapping, I receive the following error { … --- ## [Issue with regular expressions](https://discuss.elastic.co/t/issue-with-regular-expressions/232425)
**Author:** [@DiiSteR](https://discuss.elastic.co/u/DiiSteR)\ **Replies:** 5\ **Last updated:** [June 4, 2020, 2:54pm UTC](https://discuss.elastic.co/t/issue-with-regular-expressions/232425 "2020-06-04T14:54:49Z")
Hello, I'm having trouble when I try to use some regexp in Kibana filters, to make graphics. Example : I have a simple filter which is source.keyword : "mylog.log" and message: "\\\[200\\\]" Example of line in LOG : HTT… --- ## [Reverting to the 6.X interface (I need my efficient workflows back)](https://discuss.elastic.co/t/reverting-to-the-6-x-interface-i-need-my-efficient-workflows-back/235588)
**Author:** [@jhfrontz](https://discuss.elastic.co/u/jhfrontz)\ **Replies:** 3\ **Last updated:** [June 4, 2020, 2:37pm UTC](https://discuss.elastic.co/t/reverting-to-the-6-x-interface-i-need-my-efficient-workflows-back/235588 "2020-06-04T14:37:47Z")
I've had it with the new interface -- all of the things I used to be able to do with a single click (toggle a filter, search the previous/next period) are now hidden in menus that require clicks and pushes, completely br… --- ## [Read and index multiple CSV files](https://discuss.elastic.co/t/read-and-index-multiple-csv-files/235615)
**Author:** [@manideep](https://discuss.elastic.co/u/manideep)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 2:18pm UTC](https://discuss.elastic.co/t/read-and-index-multiple-csv-files/235615 "2020-06-04T14:18:50Z")
Hi Community, I am working on a task to read multiple CSV files from path and index them in Elasticsearch. all csv files are independent of each other. I am using python. I appreciate if there are any alternate methods… --- ## [Dynamic Facets in Elasticsearch](https://discuss.elastic.co/t/dynamic-facets-in-elasticsearch/234382)
**Author:** [@manideep](https://discuss.elastic.co/u/manideep)\ **Replies:** 6\ **Last updated:** [June 4, 2020, 2:16pm UTC](https://discuss.elastic.co/t/dynamic-facets-in-elasticsearch/234382 "2020-06-04T14:16:09Z")
Hello All, how to achieve dynamic faceting functionality in elastic search? Is there a way my facets(not values inside the facets) change as per the search query? I don't want to perform aggregation on any specific fi… --- ## [How to transform input before indexing document into elastic search](https://discuss.elastic.co/t/how-to-transform-input-before-indexing-document-into-elastic-search/235769)
**Author:** [@Ajinkya\_Pathrudkar](https://discuss.elastic.co/u/Ajinkya_Pathrudkar)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 2:13pm UTC](https://discuss.elastic.co/t/how-to-transform-input-before-indexing-document-into-elastic-search/235769 "2020-06-04T14:13:02Z")
Hi All, I have requirement, where I want to store the value into property after removing special characters from request. I tried using mapping-transform but its giving mapper\_parsing\_exception. Is there any way where… --- ## [Filtering using terms for function\_score in elasticsearch?](https://discuss.elastic.co/t/filtering-using-terms-for-function-score-in-elasticsearch/235051)
**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 2:05pm UTC](https://discuss.elastic.co/t/filtering-using-terms-for-function-score-in-elasticsearch/235051 "2020-06-04T14:05:40Z")
I am trying to filter out results of a cosine similarity using terms . This is the query I am using? { "size": 15, "query": { "function\_score": { "query": { "bool": { … --- ## [What is the command to check the status of logstash in windows](https://discuss.elastic.co/t/what-is-the-command-to-check-the-status-of-logstash-in-windows/235774)
**Author:** [@Rahul\_Ravichandran](https://discuss.elastic.co/u/Rahul_Ravichandran)\ **Replies:** 0\ **Last updated:** [June 4, 2020, 1:59pm UTC](https://discuss.elastic.co/t/what-is-the-command-to-check-the-status-of-logstash-in-windows/235774 "2020-06-04T13:59:53Z")
Hi How do i check for the logstash status in windows. What is the command that is used ? --- ## [Correlation in Elastic-SIEM](https://discuss.elastic.co/t/correlation-in-elastic-siem/235075)
**Author:** [@arunpmohan](https://discuss.elastic.co/u/arunpmohan)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 1:54pm UTC](https://discuss.elastic.co/t/correlation-in-elastic-siem/235075 "2020-06-04T13:54:27Z")
How well we can have a correlation using the Elastic-SIEM application? A sample use case would be I want to know, in the last 15minutes, for the events tagged that were tagged as "attack", whether the source IPs are eq… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1405) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1407)