# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1415 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1416 --- ## [Multiple filters to multiple indexes](https://discuss.elastic.co/t/multiple-filters-to-multiple-indexes/235186)
**Author:** [@alxsss](https://discuss.elastic.co/u/alxsss)\ **Replies:** 3\ **Last updated:** [June 1, 2020, 3:40pm UTC](https://discuss.elastic.co/t/multiple-filters-to-multiple-indexes/235186 "2020-06-01T15:40:13Z")
Hello, I have a pipeline with the following set of plutings input filter1 filter2 output Is it possible to index output from filter1 to index1 and output of from both to index2? --- ## [Max from a calculated value](https://discuss.elastic.co/t/max-from-a-calculated-value/234782)
**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\ **Replies:** 1\ **Last updated:** [June 1, 2020, 3:40pm UTC](https://discuss.elastic.co/t/max-from-a-calculated-value/234782 "2020-06-01T15:40:03Z")
Hi all, I have a dataset with the number of hits and total time used to responde. So i present the average by sum(time), sum(requests) then a bucket script for dividing one by the other (i think with the the average is… --- ## [How to copy SQL Server data to Elasticsearch using LogStash](https://discuss.elastic.co/t/how-to-copy-sql-server-data-to-elasticsearch-using-logstash/235064)
**Author:** [@Naushad\_Ansari1](https://discuss.elastic.co/u/Naushad_Ansari1)\ **Replies:** 2\ **Last updated:** [June 1, 2020, 3:32pm UTC](https://discuss.elastic.co/t/how-to-copy-sql-server-data-to-elasticsearch-using-logstash/235064 "2020-06-01T15:32:31Z")
As a developer working with SQL Server there is a need to import data from the database to Elasticsearch and analyze data in Kibana --- ## [I can't send MongoDB data to Elasticseach via logstash](https://discuss.elastic.co/t/i-cant-send-mongodb-data-to-elasticseach-via-logstash/234976)
**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\ **Replies:** 5\ **Last updated:** [June 1, 2020, 3:17pm UTC](https://discuss.elastic.co/t/i-cant-send-mongodb-data-to-elasticseach-via-logstash/234976 "2020-06-01T15:17:42Z")
My configuration file is as follows: input { mongodb { uri =\> 'mongodb://localhost:27017/exemplo' placeholder\_db\_dir =\> 'C:/Users/Administrator/Documents/Elastic/logstash-7.6.1/data/opt/logstash-mo… --- ## [Help forming a cluster](https://discuss.elastic.co/t/help-forming-a-cluster/235172)
**Author:** [@Kevin\_M](https://discuss.elastic.co/u/Kevin_M)\ **Replies:** 7\ **Last updated:** [June 1, 2020, 3:06pm UTC](https://discuss.elastic.co/t/help-forming-a-cluster/235172 "2020-06-01T15:06:24Z")
Hey I am loosing my mind over this, I have 3 VMs on the same ESXI host in the same subnet. All have firewalld disabled and SElinux disabled. I can telnet on port 9300 from all hosts to all hosts in all directions. The cl… --- ## [Mulltiple instance of kibana with same download tar folder by providing separate config/kibana.yml file path](https://discuss.elastic.co/t/mulltiple-instance-of-kibana-with-same-download-tar-folder-by-providing-separate-config-kibana-yml-file-path/234871)
**Author:** [@kcfragrance.9](https://discuss.elastic.co/u/kcfragrance.9)\ **Replies:** 2\ **Last updated:** [June 1, 2020, 7:41am UTC](https://discuss.elastic.co/t/mulltiple-instance-of-kibana-with-same-download-tar-folder-by-providing-separate-config-kibana-yml-file-path/234871 "2020-06-01T07:41:50Z")
Hi, Is there any way to run multiple instance of kibana on same machine via tar file by providing the different kibana.yml config file path? Instead of downloading the multiple kibana folder. Kibana Version: 7.7 --- ## [Visualize TPS for current time i.e. last 5 secs, last 5 mins and last 15 mins](https://discuss.elastic.co/t/visualize-tps-for-current-time-i-e-last-5-secs-last-5-mins-and-last-15-mins/235181)
**Author:** [@Mayank\_Damani](https://discuss.elastic.co/u/Mayank_Damani)\ **Replies:** 1\ **Last updated:** [June 1, 2020, 2:55pm UTC](https://discuss.elastic.co/t/visualize-tps-for-current-time-i-e-last-5-secs-last-5-mins-and-last-15-mins/235181 "2020-06-01T14:55:44Z")
Hello, I want to visualize TPS(Transaction per second) in Kibana. I am trying to visualize it using TSVB(Time Series Visual Builder) . What i am currently doing is in Guage panel options in Data time range mode i have … --- ## [Explain API with DFS](https://discuss.elastic.co/t/explain-api-with-dfs/235184)
**Author:** [@riverbuilding](https://discuss.elastic.co/u/riverbuilding)\ **Replies:** 0\ **Last updated:** [June 1, 2020, 2:37pm UTC](https://discuss.elastic.co/t/explain-api-with-dfs/235184 "2020-06-01T14:37:46Z")
as we know that explain API can be used to demonstrate the detail score info, but when use DFS to search, is it possible to gain the DFS part info when use explain API? --- ## [Logstash elasticsearch input plugin query size not working](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-query-size-not-working/235183)
**Author:** [@alxsss](https://discuss.elastic.co/u/alxsss)\ **Replies:** 0\ **Last updated:** [June 1, 2020, 2:37pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-query-size-not-working/235183 "2020-06-01T14:37:05Z")
Hello, I am trying to get latest timestamp from an index by using elasticsearch input plugin with query as input { elasticsearch { hosts =\> "${ES\_HOST}:9200" index=\>"myindex" query =\> '{ "query": { "match\_all": { } … --- ## [How to implement Filters with ElasticSearch 7 and NEST 7](https://discuss.elastic.co/t/how-to-implement-filters-with-elasticsearch-7-and-nest-7/235166)
**Author:** [@Isanka\_Thalagala](https://discuss.elastic.co/u/Isanka_Thalagala)\ **Replies:** 0\ **Last updated:** [June 1, 2020, 12:46pm UTC](https://discuss.elastic.co/t/how-to-implement-filters-with-elasticsearch-7-and-nest-7/235166 "2020-06-01T12:46:51Z")
I'm using ElarsticSearch 7.7 & NEST 7.7 and I'm trying to filter data by some fields. As of 1st try, I need to filter by delivery dates. it returns documents by the search query.But when I add deliveryFilter I'm getti… --- ## [Lectura de un campo tipo String](https://discuss.elastic.co/t/lectura-de-un-campo-tipo-string/234992)
**Author:** [@Osvaldo\_Mendez](https://discuss.elastic.co/u/Osvaldo_Mendez)\ **Replies:** 3\ **Last updated:** [June 1, 2020, 2:31pm UTC](https://discuss.elastic.co/t/lectura-de-un-campo-tipo-string/234992 "2020-06-01T14:31:40Z")
Hola Tengo el siguiente problema con el campo mensaje, ahi almaceno un error que me devuelve un sistema externo, si pregunto por el largo me dice que es cero, vean: { "\_index" : "felgt\_online", "\_type" : "\_doc", "\_i… --- ## [Checking null condition in logstash not working](https://discuss.elastic.co/t/checking-null-condition-in-logstash-not-working/235157)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 1\ **Last updated:** [June 1, 2020, 2:25pm UTC](https://discuss.elastic.co/t/checking-null-condition-in-logstash-not-working/235157 "2020-06-01T14:25:56Z")
Hi, I am using the belwo logstash configuration, i will be getting one field value at a time among two fields in the record and i want to assign the value to the new field. csv{ separator =\> "," columns =\> \["source",… --- ## [SIEM -- Event Columns (Only Default Category)](https://discuss.elastic.co/t/siem-event-columns-only-default-category/234478)
**Author:** [@clearedskies](https://discuss.elastic.co/u/clearedskies)\ **Replies:** 8\ **Last updated:** [June 1, 2020, 2:15pm UTC](https://discuss.elastic.co/t/siem-event-columns-only-default-category/234478 "2020-06-01T14:15:18Z")
Hopefully, someone can help: In the SIEM section of Kibana, in the events section, I wish to customise the columns shown (I have parsed these logs using Logstash and wish to use these filters in the plugin). It appears… --- ## [Is it possible to run Logstash 7.6.2 on 2GB RAM and 2 Core CPU](https://discuss.elastic.co/t/is-it-possible-to-run-logstash-7-6-2-on-2gb-ram-and-2-core-cpu/234460)
**Author:** [@karthiknpy](https://discuss.elastic.co/u/karthiknpy)\ **Replies:** 5\ **Last updated:** [June 1, 2020, 1:48pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-logstash-7-6-2-on-2gb-ram-and-2-core-cpu/234460 "2020-06-01T13:48:00Z")
Hi Team, I have only one Linux server with 2GB RAM and 2 core CPUs. Is it possible to tune the JVM limit the memory and use logstash in this server. I have seen the optimization guide but it is some high level tech to … --- ## [Search for slash only](https://discuss.elastic.co/t/search-for-slash-only/235160)
**Author:** [@AsfK](https://discuss.elastic.co/u/AsfK)\ **Replies:** 1\ **Last updated:** [June 1, 2020, 1:38pm UTC](https://discuss.elastic.co/t/search-for-slash-only/235160 "2020-06-01T13:38:49Z")
Hello! Looking for date contains slash return a document: GET /cdata\*/\_search { "query": { "query\_string": { "fields": \[ "callStartDate" \], "query": "3/24/2020", "analy… --- ## [Logstash elasticsearch output problem](https://discuss.elastic.co/t/logstash-elasticsearch-output-problem/234577)
**Author:** [@Rasoul\_Ahmadi](https://discuss.elastic.co/u/Rasoul_Ahmadi)\ **Replies:** 10\ **Last updated:** [June 1, 2020, 1:15pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-problem/234577 "2020-06-01T13:15:06Z")
hi all i have an strange problem i do check apache grok from this git in stdout codec rubydebug and i get success but when i try to push it in elastic search it wont show in indexes could you kindly test that out too… --- ## [Filter keep\_types not working with pattern tokenizer](https://discuss.elastic.co/t/filter-keep-types-not-working-with-pattern-tokenizer/235171)
**Author:** [@alembfilho](https://discuss.elastic.co/u/alembfilho)\ **Replies:** 0\ **Last updated:** [June 1, 2020, 1:08pm UTC](https://discuss.elastic.co/t/filter-keep-types-not-working-with-pattern-tokenizer/235171 "2020-06-01T13:08:25Z")
Hello, I am having a problem using the "keep\_types" filter with a "pattern" tokenizer, here is an example: { "tokenizer": { "type": "pattern", "pattern": "\[()., \_-\]" }, "filter": \[ … --- ## [How to read JSON string in message field](https://discuss.elastic.co/t/how-to-read-json-string-in-message-field/235167)
**Author:** [@Ankit\_S](https://discuss.elastic.co/u/Ankit_S)\ **Replies:** 0\ **Last updated:** [June 1, 2020, 12:47pm UTC](https://discuss.elastic.co/t/how-to-read-json-string-in-message-field/235167 "2020-06-01T12:47:48Z")
Hello, I have a message field having JSON string I need to filter records based on that keys of that JSON. Following is my message field having JSON string "\_source": { "@timestamp": "2020-06-01T11:30:01.081Z", "lev… --- ## [Top hits query working very slow while retrieving data](https://discuss.elastic.co/t/top-hits-query-working-very-slow-while-retrieving-data/235165)
**Author:** [@pooja\_sanga](https://discuss.elastic.co/u/pooja_sanga)\ **Replies:** 0\ **Last updated:** [June 1, 2020, 12:46pm UTC](https://discuss.elastic.co/t/top-hits-query-working-very-slow-while-retrieving-data/235165 "2020-06-01T12:46:17Z")
Hi, I have a nested index with 27627 records. I running the following query and getting the result in 34s if i put size=100. If i run the query for size-2/3 i get the result in about 1s. If i run the same query without … --- ## [Backup ElasticSearch data using GCS unexpectedly crashed](https://discuss.elastic.co/t/backup-elasticsearch-data-using-gcs-unexpectedly-crashed/235162)
**Author:** [@Ab\_Avramidis](https://discuss.elastic.co/u/Ab_Avramidis)\ **Replies:** 0\ **Last updated:** [June 1, 2020, 12:37pm UTC](https://discuss.elastic.co/t/backup-elasticsearch-data-using-gcs-unexpectedly-crashed/235162 "2020-06-01T12:37:03Z")
Hi, I had set up ES automatically to make backup of the indices to a Google Cloud Storage repo. Everything was working fine until unexpectedly crashed. I executed the command "elasticsearch-keystore list"to list the a… --- ## [Problem: \[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch-wazuh-alerts-3.x-2020.05.30](https://discuss.elastic.co/t/problem-logstash-outputs-elasticsearch-could-not-index-event-to-elasticsearch-wazuh-alerts-3-x-2020-05-30/235038)
**Author:** [@Harsha7071](https://discuss.elastic.co/u/Harsha7071)\ **Replies:** 6\ **Last updated:** [June 1, 2020, 12:36pm UTC](https://discuss.elastic.co/t/problem-logstash-outputs-elasticsearch-could-not-index-event-to-elasticsearch-wazuh-alerts-3-x-2020-05-30/235038 "2020-06-01T12:36:53Z")
Hi Team, We are running into a problem where we are not seeing any alerts in the Kibana. We are using this for the first time. We have two servers- Server is installed with Wazuh Manager-API- Filebeat Elastic search … --- ## [Graylog logs directed to Elastic SIEM](https://discuss.elastic.co/t/graylog-logs-directed-to-elastic-siem/234750)
**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\ **Replies:** 5\ **Last updated:** [June 1, 2020, 12:32pm UTC](https://discuss.elastic.co/t/graylog-logs-directed-to-elastic-siem/234750 "2020-06-01T12:32:14Z")
Hi people, I have a Graylog server fulfilled of a lot of network and host logs. On the other hand, I have a new Elastic SIEM 7.7 implementation and some servers with different beats that point to it. But I have to dire… --- ## [Parsing Logs based on a Regex sequence (Prune, Grok, Mutate)](https://discuss.elastic.co/t/parsing-logs-based-on-a-regex-sequence-prune-grok-mutate/234933)
**Author:** [@clearedskies](https://discuss.elastic.co/u/clearedskies)\ **Replies:** 5\ **Last updated:** [June 1, 2020, 12:18pm UTC](https://discuss.elastic.co/t/parsing-logs-based-on-a-regex-sequence-prune-grok-mutate/234933 "2020-06-01T12:18:48Z")
The set-up I currently have is Filebeat --\> Logstash --\> Elasticsearch --\> Kibana. Filebeat naturally comes with a series of fields (that can be turned off in filebeat.yml) and I am trying to parse them in Logstash so c… --- ## [Will analyzers applicable to existing documents?](https://discuss.elastic.co/t/will-analyzers-applicable-to-existing-documents/234918)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 2\ **Last updated:** [June 1, 2020, 11:46am UTC](https://discuss.elastic.co/t/will-analyzers-applicable-to-existing-documents/234918 "2020-06-01T11:46:56Z")
Hi Team, Hope you are doing great..! I'm new to elasticsearch. I have an index with 100 document's. Now as per customer requirement i have created a new custom analyzer, now my question is i want that 100 documents ana… --- ## [Logstash does not parse date when ingesting data](https://discuss.elastic.co/t/logstash-does-not-parse-date-when-ingesting-data/235106)
**Author:** [@raniceyue](https://discuss.elastic.co/u/raniceyue)\ **Replies:** 1\ **Last updated:** [June 1, 2020, 11:25am UTC](https://discuss.elastic.co/t/logstash-does-not-parse-date-when-ingesting-data/235106 "2020-06-01T11:25:30Z")
I have a large CSV file with many columns, and when I first ingested it into elasticsearch, everything worked fine, and all the dates that I specified in the date filters were parsed properly. However after adding 3 col… --- ## [RestClient Connection reset by peer](https://discuss.elastic.co/t/restclient-connection-reset-by-peer/235134)
**Author:** [@wmj765](https://discuss.elastic.co/u/wmj765)\ **Replies:** 2\ **Last updated:** [June 1, 2020, 11:17am UTC](https://discuss.elastic.co/t/restclient-connection-reset-by-peer/235134 "2020-06-01T11:17:10Z")
Hi , when using RestHighLevelClient , often the requests to Elasticsearch (index search, index requests etc) fail due to connection problems. java.io.IOException: Connection reset by peer at sun.nio.ch.FileDispatcherImp… --- ## [Kuery\_autocomplete.enabled: false on Kibana 7.7.0](https://discuss.elastic.co/t/kuery-autocomplete-enabled-false-on-kibana-7-7-0/234936)
**Author:** [@Aharon](https://discuss.elastic.co/u/Aharon)\ **Replies:** 1\ **Last updated:** [June 1, 2020, 9:21am UTC](https://discuss.elastic.co/t/kuery-autocomplete-enabled-false-on-kibana-7-7-0/234936 "2020-06-01T09:21:29Z")
Looks like this setting was removed in Kibana 7.7.0. I also cant find documentation around this setting being removed. A lot of large Elastic installations rely on this setting to keep Kibana performant (not too mention … --- ## [Get data primary key](https://discuss.elastic.co/t/get-data-primary-key/235128)
**Author:** [@freesinger](https://discuss.elastic.co/u/freesinger)\ **Replies:** 1\ **Last updated:** [June 1, 2020, 9:19am UTC](https://discuss.elastic.co/t/get-data-primary-key/235128 "2020-06-01T09:19:52Z")
Hi, I am handling how to find the primary key of data in ES index. I know that ES has \_id to represent each document's unique id, but the problem is that when I handling the data which has been stored in ES, the data ma… --- ## [How to trigger "indexing.index\_failed" stat](https://discuss.elastic.co/t/how-to-trigger-indexing-index-failed-stat/235133)
**Author:** [@vakhtang](https://discuss.elastic.co/u/vakhtang)\ **Replies:** 0\ **Last updated:** [June 1, 2020, 8:23am UTC](https://discuss.elastic.co/t/how-to-trigger-indexing-index-failed-stat/235133 "2020-06-01T08:23:35Z")
Hello, One of the stats, that we can receive from the \_cat/indices API, is indexing.index\_failed. In the documentation, this stat describes as: "Number of failed indexing operations". How can I trigger this stat? I t… --- ## [Issue with sending data from oracle to elasticsearch using logstah](https://discuss.elastic.co/t/issue-with-sending-data-from-oracle-to-elasticsearch-using-logstah/235131)
**Author:** [@sine\_traore](https://discuss.elastic.co/u/sine_traore)\ **Replies:** 0\ **Last updated:** [June 1, 2020, 8:19am UTC](https://discuss.elastic.co/t/issue-with-sending-data-from-oracle-to-elasticsearch-using-logstah/235131 "2020-06-01T08:19:52Z")
Please Could some one help with this issue. i want to send records from an oracle database to elasticsearch using logstash but i'm getting the following error \[2020-06-01T08:55:41,800\]\[ERROR\]\[logstash.agent \]… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1414) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1416)