# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1417 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1418 --- ## [Scripted fields - tengo problemas con tomar la fecha del timestap](https://discuss.elastic.co/t/scripted-fields-tengo-problemas-con-tomar-la-fecha-del-timestap/234433)
**Author:** [@Osvaldo\_Mendez](https://discuss.elastic.co/u/Osvaldo_Mendez)\ **Replies:** 6\ **Last updated:** [May 30, 2020, 8:52pm UTC](https://discuss.elastic.co/t/scripted-fields-tengo-problemas-con-tomar-la-fecha-del-timestap/234433 "2020-05-30T20:52:19Z")
Hola Quiero crear un campo calculado en Kibana, pero no me deja recortarlo para dejar solo la fecha, estoy tratando de hacer esto y da error: def fecha = doc\['timestamp'\].value; return fecha.substring(0,9); Saludos, --- ## [Ingest pipeline set processor override property](https://discuss.elastic.co/t/ingest-pipeline-set-processor-override-property/235034)
**Author:** [@Dumitrel\_Ciprian](https://discuss.elastic.co/u/Dumitrel_Ciprian)\ **Replies:** 0\ **Last updated:** [May 30, 2020, 8:14pm UTC](https://discuss.elastic.co/t/ingest-pipeline-set-processor-override-property/235034 "2020-05-30T20:14:29Z")
Hi, I have difficulties in using the "override" option of the SET processor. The use case is the following: I'm creating a document like this: POST test\_index/\_doc { "foo": "foo", "bar": "bar" } Sometimes I … --- ## [Timezone issue with logstash date filter plugin](https://discuss.elastic.co/t/timezone-issue-with-logstash-date-filter-plugin/235026)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 3\ **Last updated:** [May 30, 2020, 7:12pm UTC](https://discuss.elastic.co/t/timezone-issue-with-logstash-date-filter-plugin/235026 "2020-05-30T19:12:30Z")
Hi All, We are ingesting data into elasticsearch using logstash, our problem here is with the timezone issue. We are having a total of 8 date fields in the documents for example we are ingesting servicenow data, which … --- ## [Mlt - gives bad resaults](https://discuss.elastic.co/t/mlt-gives-bad-resaults/235030)
**Author:** [@Yaron\_K](https://discuss.elastic.co/u/Yaron_K)\ **Replies:** 0\ **Last updated:** [May 30, 2020, 6:20pm UTC](https://discuss.elastic.co/t/mlt-gives-bad-resaults/235030 "2020-05-30T18:20:33Z")
Hi, the reason i'm trying elastic is that i have in my company a lot of "tickets", i want to have the ability to search ticket that similar to another ticket. so i loaded most of the tickets to the elastic, all the tex… --- ## [Enrich Processor Performance Metrics](https://discuss.elastic.co/t/enrich-processor-performance-metrics/235029)
**Author:** [@Mike\_Adam](https://discuss.elastic.co/u/Mike_Adam)\ **Replies:** 0\ **Last updated:** [May 30, 2020, 6:16pm UTC](https://discuss.elastic.co/t/enrich-processor-performance-metrics/235029 "2020-05-30T18:16:25Z")
Hi, Are there any performance metrics available for using the enrich processor in large production environments setup running with around 120,000 events per second and multiple reference data enabled that change hourly. … --- ## [Reading BLOB data Docx from MySQL table](https://discuss.elastic.co/t/reading-blob-data-docx-from-mysql-table/234959)
**Author:** [@Jasmeet](https://discuss.elastic.co/u/Jasmeet)\ **Replies:** 1\ **Last updated:** [May 30, 2020, 5:07pm UTC](https://discuss.elastic.co/t/reading-blob-data-docx-from-mysql-table/234959 "2020-05-30T17:07:39Z")
I am trying to read a BLOB data stored in a Mysql table using JDBC connector in Logstash. I intend to index the data in Elasticsearch. I have been able to read a pdf file however when i read a Docx file, i get an error. … --- ## [Logstash dont use \*.conf files](https://discuss.elastic.co/t/logstash-dont-use-conf-files/234277)
**Author:** [@ahiyaz](https://discuss.elastic.co/u/ahiyaz)\ **Replies:** 27\ **Last updated:** [May 30, 2020, 4:31pm UTC](https://discuss.elastic.co/t/logstash-dont-use-conf-files/234277 "2020-05-30T16:31:59Z")
hi all i have an issue using configuration files that are under /etc/logstash/conf.d directory. The issue is that when loading logstash using systemctl the demon don't pull the configuration from the \*.conf file unde… --- ## [Elasticsearch cluster health red and data backups](https://discuss.elastic.co/t/elasticsearch-cluster-health-red-and-data-backups/234848)
**Author:** [@Roshan\_Jha](https://discuss.elastic.co/u/Roshan_Jha)\ **Replies:** 5\ **Last updated:** [May 30, 2020, 3:11pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-health-red-and-data-backups/234848 "2020-05-30T15:11:49Z")
I have Elasticsearch cluster of 3 nodes, it was working fine till now then i changed default path.data path to my own custom data path and restarted the whole cluster now my cluster is in red state and when running clust… --- ## [How to use multiple inputs and output same index in Logstash?](https://discuss.elastic.co/t/how-to-use-multiple-inputs-and-output-same-index-in-logstash/235021)
**Author:** [@MrAst160](https://discuss.elastic.co/u/MrAst160)\ **Replies:** 0\ **Last updated:** [May 30, 2020, 2:33pm UTC](https://discuss.elastic.co/t/how-to-use-multiple-inputs-and-output-same-index-in-logstash/235021 "2020-05-30T14:33:13Z")
hi~ I want to output syslog and windows event log inputs into one index. I can't input with beats (event log) and udp (syslog). So I input event log in tcp and syslog in udp. However, in kibana, the event log is brok… --- ## [Elasticsearch download on aws ec2 linux](https://discuss.elastic.co/t/elasticsearch-download-on-aws-ec2-linux/233575)
**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\ **Replies:** 15\ **Last updated:** [May 30, 2020, 1:23pm UTC](https://discuss.elastic.co/t/elasticsearch-download-on-aws-ec2-linux/233575 "2020-05-30T13:23:30Z")
Hi, I'm trying to set elasticsearch on my AWS EC2 Linux server. I've followed the steps in https://www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html using rpm. But I found the error message when I input … --- ## [Sorting on large index](https://discuss.elastic.co/t/sorting-on-large-index/235017)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 1\ **Last updated:** [May 30, 2020, 1:16pm UTC](https://discuss.elastic.co/t/sorting-on-large-index/235017 "2020-05-30T13:16:28Z")
Hi! I read about index sorting in the documentation, but I don't know what are the limits and if there's any downside to do it. For example, I have a daily index with around 500M documents. I'd sort it by 5 fields from … --- ## [Nagios with Elastic](https://discuss.elastic.co/t/nagios-with-elastic/235016)
**Author:** [@shalauras](https://discuss.elastic.co/u/shalauras)\ **Replies:** 0\ **Last updated:** [May 30, 2020, 12:12pm UTC](https://discuss.elastic.co/t/nagios-with-elastic/235016 "2020-05-30T12:12:56Z")
Hi, I want to implement Nagios with Elastic and I can see notifications from Nagios in Elastic (Kibana). I am trying to install following manual: But when I try last step: /usr/share/logstash/bin/logstash --modules… --- ## [Getting "I/O dispatcher 1" java.lang.OutOfMemoryError: Direct buffer memory](https://discuss.elastic.co/t/getting-i-o-dispatcher-1-java-lang-outofmemoryerror-direct-buffer-memory/235013)
**Author:** [@HShetty](https://discuss.elastic.co/u/HShetty)\ **Replies:** 0\ **Last updated:** [May 30, 2020, 12:04pm UTC](https://discuss.elastic.co/t/getting-i-o-dispatcher-1-java-lang-outofmemoryerror-direct-buffer-memory/235013 "2020-05-30T12:04:14Z")
Continuing the discussion from Getting the error - Request cannot be executed; I/O reactor status: STOPPED: 2020-05-28T15:24:52.96+0530 \[RTR/0\] OUT 2020-05-28T15:24:53.72+0530 \[APP/PROC/WEB/0\] ERR Exception in thread "… --- ## [Relational indexes](https://discuss.elastic.co/t/relational-indexes/234946)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 1\ **Last updated:** [May 30, 2020, 10:30am UTC](https://discuss.elastic.co/t/relational-indexes/234946 "2020-05-30T10:30:37Z")
I have two indexes where I almost need to do a join. An ID in one index needs to pull up information in another index. How can I do this in ELK? --- ## [Kibana unable to use elastic-http-public cert](https://discuss.elastic.co/t/kibana-unable-to-use-elastic-http-public-cert/233805)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 5\ **Last updated:** [May 30, 2020, 7:17am UTC](https://discuss.elastic.co/t/kibana-unable-to-use-elastic-http-public-cert/233805 "2020-05-30T07:17:53Z")
hi team, I would like to enable HTTPS communication between kibana and elasticsearch , but i am not able to do that kibana config --\> count: 1 config: elasticsearch.ssl.certificateAuthorities: /mnt/usr/c… --- ## [Access required for a particular kibana dashboard (not all)](https://discuss.elastic.co/t/access-required-for-a-particular-kibana-dashboard-not-all/235001)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 1\ **Last updated:** [May 30, 2020, 5:13am UTC](https://discuss.elastic.co/t/access-required-for-a-particular-kibana-dashboard-not-all/235001 "2020-05-30T05:13:22Z")
Hi All, i am using basic license version and enabled the x-pack security. now i have created a read only user and granted permission to particular index and the dashboards. but all the indexes and dashboards are visib… --- ## [Need help with {{ctx.payload.aggregations.bucketAgg.buckets.key : null}} in watcher hence wont trigger email action](https://discuss.elastic.co/t/need-help-with-ctx-payload-aggregations-bucketagg-buckets-key-null-in-watcher-hence-wont-trigger-email-action/234785)
**Author:** [@vdalvi](https://discuss.elastic.co/u/vdalvi)\ **Replies:** 1\ **Last updated:** [May 30, 2020, 4:53am UTC](https://discuss.elastic.co/t/need-help-with-ctx-payload-aggregations-bucketagg-buckets-key-null-in-watcher-hence-wont-trigger-email-action/234785 "2020-05-30T04:53:30Z")
Hi, I am new to Kibana Watchers and I am facing issues in parsing the desired value to "ctx.payload.aggregations". I get the below result "ctx.payload.aggregations.numberofcmtsId.buckets.count\_deriv.value": null My W… --- ## [Discover option Filter - Range based on DeviceID](https://discuss.elastic.co/t/discover-option-filter-range-based-on-deviceid/234755)
**Author:** [@joedbadmin](https://discuss.elastic.co/u/joedbadmin)\ **Replies:** 2\ **Last updated:** [May 30, 2020, 4:35am UTC](https://discuss.elastic.co/t/discover-option-filter-range-based-on-deviceid/234755 "2020-05-30T04:35:46Z")
Hi Experts, I was trying to create a report using DISCOVER menu. The index got 8 million records and one of the fields is DeviceID If I choose the 'exists' as filter and field DeviceID; I get all the 8 million records… --- ## [Datastructure relational data](https://discuss.elastic.co/t/datastructure-relational-data/234561)
**Author:** [@michael\_9](https://discuss.elastic.co/u/michael_9)\ **Replies:** 7\ **Last updated:** [May 30, 2020, 4:28am UTC](https://discuss.elastic.co/t/datastructure-relational-data/234561 "2020-05-30T04:28:02Z")
I have the following data structure: I have a hierarchical structure where every element can link to n-further elements. (Similar to a tree, but an object can have multiple roots. A link is only downwards possible). The … --- ## [Alerts and Actions - Connectors](https://discuss.elastic.co/t/alerts-and-actions-connectors/234751)
**Author:** [@DivyaniJ](https://discuss.elastic.co/u/DivyaniJ)\ **Replies:** 1\ **Last updated:** [May 30, 2020, 4:26am UTC](https://discuss.elastic.co/t/alerts-and-actions-connectors/234751 "2020-05-30T04:26:36Z")
I created an index connector and configured an alert to index on it with proper conditions. As an output, I don't see the documents getting indexed after the alert. Can someone help? PS: I'm using elastic 7.7 SaaS offe… --- ## [Kibana Canvas DISTINCT key word](https://discuss.elastic.co/t/kibana-canvas-distinct-key-word/234999)
**Author:** [@Khirod\_Panda](https://discuss.elastic.co/u/Khirod_Panda)\ **Replies:** 0\ **Last updated:** [May 30, 2020, 3:15am UTC](https://discuss.elastic.co/t/kibana-canvas-distinct-key-word/234999 "2020-05-30T03:15:19Z")
I am trying to run following query as SQL . its erring saying DISTINCT is not allowed SELECT DISTINCT ("context.correlationId" , gqlOperationName ) FROM "alpha-\*" where isError ='1' Can I any way achieve this in canvas… --- ## [Indexing User-Agent data](https://discuss.elastic.co/t/indexing-user-agent-data/231972)
**Author:** [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\ **Replies:** 7\ **Last updated:** [May 30, 2020, 3:12am UTC](https://discuss.elastic.co/t/indexing-user-agent-data/231972 "2020-05-30T03:12:32Z")
Hi Team, I have below user-agent column in Elastic doc tag.http@user\_agent - Mozilla/5.0 (Macintosh; Intel Mac OS X 10\_14\_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36 I want to spl… --- ## [Want to get distinct record across 2 fields](https://discuss.elastic.co/t/want-to-get-distinct-record-across-2-fields/234740)
**Author:** [@Khirod\_Panda](https://discuss.elastic.co/u/Khirod_Panda)\ **Replies:** 2\ **Last updated:** [May 30, 2020, 3:11am UTC](https://discuss.elastic.co/t/want-to-get-distinct-record-across-2-fields/234740 "2020-05-30T03:11:00Z")
I have an index where data may be duplicating . but in those duplicating data set. i have 2 fields that does not change . Now I want to get count of distinct records Ex:- cid='AE123456XYZ', opname ='getData' isError=… --- ## [Maximum number of snapshots](https://discuss.elastic.co/t/maximum-number-of-snapshots/234956)
**Author:** [@chiara](https://discuss.elastic.co/u/chiara)\ **Replies:** 1\ **Last updated:** [May 30, 2020, 3:07am UTC](https://discuss.elastic.co/t/maximum-number-of-snapshots/234956 "2020-05-30T03:07:30Z")
Does a limit exist for snapshots? Can I have 72 snapshots of the same cluster? Can I have any issue in restoring one of those snapshot to the old cluster or to a new cluster? I mean, in other situations forever increm… --- ## [Parse Delimited values from JSON log](https://discuss.elastic.co/t/parse-delimited-values-from-json-log/234637)
**Author:** [@pawankumardv](https://discuss.elastic.co/u/pawankumardv)\ **Replies:** 11\ **Last updated:** [May 29, 2020, 8:35pm UTC](https://discuss.elastic.co/t/parse-delimited-values-from-json-log/234637 "2020-05-29T20:35:41Z")
Hello i have logs in the following format { "timeMillis" : 1590564813191, "thread" : "JOBSCHEDULER\_THREAD\_2", "level" : "ALERT", "loggerName" : "JobScheduler", "message" : "value1\*value2\*value3\*value4\*", "endOfBa… --- ## [When insert into django model elastic search gives error](https://discuss.elastic.co/t/when-insert-into-django-model-elastic-search-gives-error/234998)
**Author:** [@Shriram\_Choubey](https://discuss.elastic.co/u/Shriram_Choubey)\ **Replies:** 0\ **Last updated:** [May 30, 2020, 1:45am UTC](https://discuss.elastic.co/t/when-insert-into-django-model-elastic-search-gives-error/234998 "2020-05-30T01:45:24Z")
'error': {'type': 'mapper\_parsing\_exception', 'reason': "failed to parse field \[transaction\_timestamp\] of type \[date\] in document with id '3'. Preview of field's value: '2020-05-29 17:50:51.721000'", 'caused\_by': {'type… --- ## [Combining three different indices into one available to be queried by ODBC with Tableau](https://discuss.elastic.co/t/combining-three-different-indices-into-one-available-to-be-queried-by-odbc-with-tableau/234864)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 1:44pm UTC](https://discuss.elastic.co/t/combining-three-different-indices-into-one-available-to-be-queried-by-odbc-with-tableau/234864 "2020-05-29T13:44:03Z")
Hello, I have three different indices called: first, second, third. first is the main index, second references to main and third references to second index using id fields. The sample data looks like this: first - 2 … --- ## [Watcher email alert fails intermittently](https://discuss.elastic.co/t/watcher-email-alert-fails-intermittently/234994)
**Author:** [@cglencr](https://discuss.elastic.co/u/cglencr)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 10:46pm UTC](https://discuss.elastic.co/t/watcher-email-alert-fails-intermittently/234994 "2020-05-29T22:46:47Z")
I am using ES 7.4 and have created a Watcher with an email alert. It is scheduled to go off once a day. Some days it works. Others it fails. And this is with no changes to ES or environment. When I go to research why… --- ## [Logstash XML parsing issue](https://discuss.elastic.co/t/logstash-xml-parsing-issue/234833)
**Author:** [@Noe253](https://discuss.elastic.co/u/Noe253)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 10:23pm UTC](https://discuss.elastic.co/t/logstash-xml-parsing-issue/234833 "2020-05-29T22:23:47Z")
Hello everyone, I have a problem when I'm trying to parse xml logs with Logstash. Indeed, I installed and configured Filebeat on a CentOS 7 with Prelude SIEM installed. I am using Filebeat to transmit the xml logs from… --- ## [ERROR: Unknown command \[http\] when executing bin/elasticsearch-certutil http](https://discuss.elastic.co/t/error-unknown-command-http-when-executing-bin-elasticsearch-certutil-http/234993)
**Author:** [@Shan\_Chathusanda](https://discuss.elastic.co/u/Shan_Chathusanda)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 10:20pm UTC](https://discuss.elastic.co/t/error-unknown-command-http-when-executing-bin-elasticsearch-certutil-http/234993 "2020-05-29T22:20:36Z")
I am trying to encrypt HTTP client communications as the doc in https://www.elastic.co/guide/en/elasticsearch/reference/7.x/configuring-tls.html#tls-http. But when I execute this command it prompts an error as follows. … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1416) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1418)