# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1422

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1423

---

## [Logstash if statement for program](https://discuss.elastic.co/t/logstash-if-statement-for-program/234020)

<div class="topic-metadata">

**Author:** [@Rasoul\_Ahmadi](https://discuss.elastic.co/u/Rasoul_Ahmadi)\
**Replies:** 6\
**Last updated:** [May 28, 2020, 5:56am UTC](https://discuss.elastic.co/t/logstash-if-statement-for-program/234020 "2020-05-28T05:56:19Z")

</div>

hi i know its elementary but i am stuck at an if statement with if statement I get grok failure and without it every thing is fine I'm using logstash 7.7 indent preformatted text by 4 spaces \`\`\` input {stdin{}} filt…

---

## [Formulas in Logsatsh](https://discuss.elastic.co/t/formulas-in-logsatsh/234650)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 2\
**Last updated:** [May 28, 2020, 5:48am UTC](https://discuss.elastic.co/t/formulas-in-logsatsh/234650 "2020-05-28T05:48:15Z")

</div>

Hi, I have a column in my source data which says if a ticket has met its SLAs. met\_sla: true or met\_sla: false I wanna calculate the below in Logstash and create a new field called target percent Target= (count(met…

---

## [Too\_Complex\_To\_Determinize Exception: Determinizing automaton with 57621 states and 60867 transitions would result in more than 10000 states](https://discuss.elastic.co/t/too-complex-to-determinize-exception-determinizing-automaton-with-57621-states-and-60867-transitions-would-result-in-more-than-10000-states/234653)

<div class="topic-metadata">

**Author:** [@Drurvesh](https://discuss.elastic.co/u/Drurvesh)\
**Replies:** 0\
**Last updated:** [May 28, 2020, 5:15am UTC](https://discuss.elastic.co/t/too-complex-to-determinize-exception-determinizing-automaton-with-57621-states-and-60867-transitions-would-result-in-more-than-10000-states/234653 "2020-05-28T05:15:52Z")

</div>

As seen on the community page last year this was the limitation as mentioned by @nik9000 "This is a side effect of the internal implementation of wildards as NFAs that are determinized to DFAs. The determinization proce…

---

## [Ship Logs from application server to ELK server with beats](https://discuss.elastic.co/t/ship-logs-from-application-server-to-elk-server-with-beats/234647)

<div class="topic-metadata">

**Author:** [@vijazy](https://discuss.elastic.co/u/vijazy)\
**Replies:** 0\
**Last updated:** [May 28, 2020, 4:36am UTC](https://discuss.elastic.co/t/ship-logs-from-application-server-to-elk-server-with-beats/234647 "2020-05-28T04:36:48Z")

</div>

Hi ELK team, I am building log analyzer for production environment. My scenario is, i need to setupelasticsearch,Logstash and kibana on one centos7 server which is going to use ELK server another one is apache server(re…

---

## [【logstash】WARN LazyDelegatingGaugeについて](https://discuss.elastic.co/t/logstash-warn-lazydelegatinggauge/233051)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 2\
**Last updated:** [May 28, 2020, 4:31am UTC](https://discuss.elastic.co/t/logstash-warn-lazydelegatinggauge/233051 "2020-05-28T04:31:14Z")

</div>

お世話になります。 logstashにて、以下のWARNログが発生しました。 \[WARN \]\[org.logstash.instrument.metrics.gauge.LazyDelegatingGauge\]\[パイプライン名\] A gauge metric of an unknown type (org.jruby.RubyArray) has been create for key: cluster\_uuids. This ma…

---

## [Logstash translateのdictionaryについて](https://discuss.elastic.co/t/logstash-translate-dictionary/232554)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 2\
**Last updated:** [May 28, 2020, 4:30am UTC](https://discuss.elastic.co/t/logstash-translate-dictionary/232554 "2020-05-28T04:30:30Z")

</div>

お世話になります。 logstashのtranslateについてご質問させて頂きます。 dictionary\_pathにyamlファイルを指定しているのですが、 ファイルが更新されたことが分かる方法はありますでしょうか？ 以下ログには更新されず、他のログに追記される等ありましたらご教示頂きたいです。 /var/log/logstash/logstash-plain.log 以上、宜しくお願い致します。

---

## [【Visualize】同率順位を全て表示する方法](https://discuss.elastic.co/t/visualize/232146)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 2\
**Last updated:** [May 28, 2020, 4:29am UTC](https://discuss.elastic.co/t/visualize/232146 "2020-05-28T04:29:44Z")

</div>

お世話になります。 Visualizeのbar charts(横棒グラフ)にて、 項目の値のTOP10を表示しようとしています。 バケットにて、順序…降順、サイズ…10を設定したところ、 同率順位の値が複数あった場合に、10個の値しか表示されずそれ以降は表示されません。 例）I,J,Kが同じ件数であるため全て表示させたいがKが表示されない 同率順位が複数あった場合に全てグラフ表示する方法はありますでしょうか？ 有識者の…

---

## [S3 input plugin missing kms decrypt parameter](https://discuss.elastic.co/t/s3-input-plugin-missing-kms-decrypt-parameter/234643)

<div class="topic-metadata">

**Author:** [@s2mvk](https://discuss.elastic.co/u/s2mvk)\
**Replies:** 0\
**Last updated:** [May 28, 2020, 3:32am UTC](https://discuss.elastic.co/t/s3-input-plugin-missing-kms-decrypt-parameter/234643 "2020-05-28T03:32:46Z")

</div>

Hi We are using ELK approach, part of it Logstash is not Able to decrypt data in s3(data at rest in kms(customer key) encrypted) when pushing to Elastic Search, Do we know/have any other way to decrypt with kms key for…

---

## [Kibana and @timestamp - out by 4 Months](https://discuss.elastic.co/t/kibana-and-timestamp-out-by-4-months/234632)

<div class="topic-metadata">

**Author:** [@peterlarb](https://discuss.elastic.co/u/peterlarb)\
**Replies:** 5\
**Last updated:** [May 28, 2020, 3:17am UTC](https://discuss.elastic.co/t/kibana-and-timestamp-out-by-4-months/234632 "2020-05-28T03:17:52Z")

</div>

I understand that Kibana uses UTC. Logstash imports a CSV and shows that @timestamp as 27 May 2020 for the file import. But my data in the rest of the index is showing Jan 2020 and not May 2020. Now I just can't work …

---

## [Enum Indexing As Number Instead Of Text](https://discuss.elastic.co/t/enum-indexing-as-number-instead-of-text/234624)

<div class="topic-metadata">

**Author:** [@Nathaniel\_Jones](https://discuss.elastic.co/u/Nathaniel_Jones)\
**Replies:** 1\
**Last updated:** [May 28, 2020, 12:24am UTC](https://discuss.elastic.co/t/enum-indexing-as-number-instead-of-text/234624 "2020-05-28T00:24:47Z")

</div>

We just upgraded from Elasticsearch/Nest 5.1.1 to 7.6.2 and are seeing a difference in how C# enums are being indexed. Previously, the JsonConverter attribute would store the enum in the index as a text string that we wo…

---

## [Can the size of the specified query result be obtained in the queryBuilder implemented by inheriting the AbstractQueryBuilder class, or can I specify the size of the query result in queryBuilder？](https://discuss.elastic.co/t/can-the-size-of-the-specified-query-result-be-obtained-in-the-querybuilder-implemented-by-inheriting-the-abstractquerybuilder-class-or-can-i-specify-the-size-of-the-query-result-in-querybuilder/234551)

<div class="topic-metadata">

**Author:** [@Huang\_James](https://discuss.elastic.co/u/Huang_James)\
**Replies:** 1\
**Last updated:** [May 28, 2020, 2:00am UTC](https://discuss.elastic.co/t/can-the-size-of-the-specified-query-result-be-obtained-in-the-querybuilder-implemented-by-inheriting-the-abstractquerybuilder-class-or-can-i-specify-the-size-of-the-query-result-in-querybuilder/234551 "2020-05-28T02:00:52Z")

</div>

Can the size of the specified query result be obtained in the queryBuilder implemented by inheriting the AbstractQueryBuilder class, or can I specify the size of the query result in queryBuilder？

---

## [Erreur d'importation avec logstash sous linux](https://discuss.elastic.co/t/erreur-dimportation-avec-logstash-sous-linux/233427)

<div class="topic-metadata">

**Author:** [@Katia](https://discuss.elastic.co/u/Katia)\
**Replies:** 19\
**Last updated:** [May 28, 2020, 12:37am UTC](https://discuss.elastic.co/t/erreur-dimportation-avec-logstash-sous-linux/233427 "2020-05-28T00:37:04Z")

</div>

Bonjour, J'importe mes logs avec logstash vers elasticserach, ça marche bien en local ( sous windows). Mais pas sous linux, j'ai pleins d'erreurs et je ne sais pas pourquoi! j'ai remarqué que le dans fichier.txt , s'…

---

## [How much cpu/memory/storage at least I need to use ELK](https://discuss.elastic.co/t/how-much-cpu-memory-storage-at-least-i-need-to-use-elk/234595)

<div class="topic-metadata">

**Author:** [@zhangruixue8080](https://discuss.elastic.co/u/zhangruixue8080)\
**Replies:** 1\
**Last updated:** [May 28, 2020, 12:30am UTC](https://discuss.elastic.co/t/how-much-cpu-memory-storage-at-least-i-need-to-use-elk/234595 "2020-05-28T00:30:45Z")

</div>

Our project has requirement for log aggregation of different micro-services, and ELK is great tool to do that. However our project has requirement of privatization deployment, which means we need to deploy the whole solu…

---

## [Logstash with elastisearch cloud](https://discuss.elastic.co/t/logstash-with-elastisearch-cloud/231021)

<div class="topic-metadata">

**Author:** [@Georgios\_Nikoloudis](https://discuss.elastic.co/u/Georgios_Nikoloudis)\
**Replies:** 7\
**Last updated:** [May 28, 2020, 12:25am UTC](https://discuss.elastic.co/t/logstash-with-elastisearch-cloud/231021 "2020-05-28T00:25:27Z")

</div>

hi is it possible to give me some direction how to configure the logstash in the ES cloud? I have logstash configurations in the current logstash (server side deployment) and I would like to move them to the ES cloud. …

---

## [Sprintf with undefined field](https://discuss.elastic.co/t/sprintf-with-undefined-field/234628)

<div class="topic-metadata">

**Author:** [@steevhise](https://discuss.elastic.co/u/steevhise)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 11:55pm UTC](https://discuss.elastic.co/t/sprintf-with-undefined-field/234628 "2020-05-27T23:55:04Z")

</div>

I'm setting the document\_id in a logstash to elasticsearch output module to a string made up of 2 of my fields, but i'm finding that when one field is null or undefined the name of the field just gets included in the str…

---

## [Is it possible](https://discuss.elastic.co/t/is-it-possible/234455)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 6\
**Last updated:** [May 27, 2020, 11:44pm UTC](https://discuss.elastic.co/t/is-it-possible/234455 "2020-05-27T23:44:24Z")

</div>

Hi, I have just started on transforms and while doing this I am wondering if something like this (It is what my transform is looking like now): Can be converted via Painless scripts (since I am introducing new durati…

---

## [Combine two fields of two different log lines in same index pattern](https://discuss.elastic.co/t/combine-two-fields-of-two-different-log-lines-in-same-index-pattern/232803)

<div class="topic-metadata">

**Author:** [@Hemalalli\_Dharanidha](https://discuss.elastic.co/u/Hemalalli_Dharanidha)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 11:37pm UTC](https://discuss.elastic.co/t/combine-two-fields-of-two-different-log-lines-in-same-index-pattern/232803 "2020-05-27T23:37:54Z")

</div>

I'm new to Kibana, i have two log patterns in same index pattern Example log line 1 : rejected with ID 123456 log line 2 : rebooking is successful for ID 123456 for US country I need to create bar chart for country…

---

## [Fetching Tokens Created by Analyzer?](https://discuss.elastic.co/t/fetching-tokens-created-by-analyzer/234627)

<div class="topic-metadata">

**Author:** [@nicowens](https://discuss.elastic.co/u/nicowens)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 10:36pm UTC](https://discuss.elastic.co/t/fetching-tokens-created-by-analyzer/234627 "2020-05-27T22:36:00Z")

</div>

I'm completely new here so, first off, I apologize if I do things the wrong way. I'd like to learn the right way as we are just beginning our road with Elastic Search. In troubleshooting why a document is not being retu…

---

## [Drop Downs (Controls - Option Lists) are not functioning as planned](https://discuss.elastic.co/t/drop-downs-controls-option-lists-are-not-functioning-as-planned/234570)

<div class="topic-metadata">

**Author:** [@Rory\_McClaskey](https://discuss.elastic.co/u/Rory_McClaskey)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 10:22pm UTC](https://discuss.elastic.co/t/drop-downs-controls-option-lists-are-not-functioning-as-planned/234570 "2020-05-27T22:22:06Z")

</div>

Hello! I have a dashboard using multiple Controls (options list) Drop downs (that are not linked with parents). There is one major issue, can you please advise how to correct? Suppose data element ABC is selected in …

---

## [Automatic dashboard export from command line - using python](https://discuss.elastic.co/t/automatic-dashboard-export-from-command-line-using-python/234076)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 3\
**Last updated:** [May 27, 2020, 10:16pm UTC](https://discuss.elastic.co/t/automatic-dashboard-export-from-command-line-using-python/234076 "2020-05-27T22:16:49Z")

</div>

Many people has ask this questions in past. I have search around for same for many days and didn't find right answer or proper explanation. I am not good in python but used it and implemented my solution. posting it he…

---

## [Correctly applying criteria for sum aggregation](https://discuss.elastic.co/t/correctly-applying-criteria-for-sum-aggregation/234620)

<div class="topic-metadata">

**Author:** [@jaekim06450](https://discuss.elastic.co/u/jaekim06450)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 9:10pm UTC](https://discuss.elastic.co/t/correctly-applying-criteria-for-sum-aggregation/234620 "2020-05-27T21:10:52Z")

</div>

Hello, I am dealing with a use case where, given an elastic index with information of a number of people, I am querying for those that have the first name of "John" and get the sum of their ages. The query in question l…

---

## [Preventing document field from getting updated in Elastic Search](https://discuss.elastic.co/t/preventing-document-field-from-getting-updated-in-elastic-search/234300)

<div class="topic-metadata">

**Author:** [@viralshah1494](https://discuss.elastic.co/u/viralshah1494)\
**Replies:** 4\
**Last updated:** [May 27, 2020, 9:52pm UTC](https://discuss.elastic.co/t/preventing-document-field-from-getting-updated-in-elastic-search/234300 "2020-05-27T21:52:36Z")

</div>

I have the following requirement. In the system there is a job running that fetches the documents from another system every 15 mins. Once those documents are fetched, I have my own job which runs and updates the document…

---

## [Kibana and Elastic Search Connectivity](https://discuss.elastic.co/t/kibana-and-elastic-search-connectivity/233900)

<div class="topic-metadata">

**Author:** [@karthik3](https://discuss.elastic.co/u/karthik3)\
**Replies:** 5\
**Last updated:** [May 27, 2020, 9:27pm UTC](https://discuss.elastic.co/t/kibana-and-elastic-search-connectivity/233900 "2020-05-27T21:27:57Z")

</div>

Hi, How data are received from Elastic Search to Kibana? Whenever data are shipped to Elastic Search the data are posted to kibana or it will query Elastic search in particular interval? Possible we can get kibana das…

---

## [Logstash Parsing takes too much time for processing](https://discuss.elastic.co/t/logstash-parsing-takes-too-much-time-for-processing/234488)

<div class="topic-metadata">

**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 8:55pm UTC](https://discuss.elastic.co/t/logstash-parsing-takes-too-much-time-for-processing/234488 "2020-05-27T20:55:42Z")

</div>

Hey, My logstash has multiple lookups and various grok parsing too The normal logs count without parsing is 500-600 eps but with filter plugin in is 100-150 eps Please Help needed Thanks in advance

---

## [Logstash does not update logs Elasticsearch input plugin](https://discuss.elastic.co/t/logstash-does-not-update-logs-elasticsearch-input-plugin/234617)

<div class="topic-metadata">

**Author:** [@Oleh\_Smahliuk](https://discuss.elastic.co/u/Oleh_Smahliuk)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 8:53pm UTC](https://discuss.elastic.co/t/logstash-does-not-update-logs-elasticsearch-input-plugin/234617 "2020-05-27T20:53:12Z")

</div>

Hi guys! I have an issue with Logstash Elasticsearch input plugin. I try to transfer data from one ES cluster to other ES cluster, but Logstash transfer data only to time when pipeline starting. For example, pipeline st…

---

## [Java heapspace issue while running logstash](https://discuss.elastic.co/t/java-heapspace-issue-while-running-logstash/234601)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 4\
**Last updated:** [May 27, 2020, 8:51pm UTC](https://discuss.elastic.co/t/java-heapspace-issue-while-running-logstash/234601 "2020-05-27T20:51:00Z")

</div>

Hi All, I'm using logstash to ingest data into elasticsearch, while executing logstash its throwing up java heap space error. There is almost 5450 documents i'm trying to ingest. Any ideas or suggestions where i should…

---

## [How to restrict user to a specific dashboard among other dashboards?](https://discuss.elastic.co/t/how-to-restrict-user-to-a-specific-dashboard-among-other-dashboards/234597)

<div class="topic-metadata">

**Author:** [@Fernando1](https://discuss.elastic.co/u/Fernando1)\
**Replies:** 2\
**Last updated:** [May 27, 2020, 8:12pm UTC](https://discuss.elastic.co/t/how-to-restrict-user-to-a-specific-dashboard-among-other-dashboards/234597 "2020-05-27T20:12:17Z")

</div>

Hello!! How can I restrict user access to certain dashboards? Thanks in advance!!! Best Wishes, Fernando Durier!

---

## [Kibana Metrics APP don't show metricbeat system Capacity Metrics](https://discuss.elastic.co/t/kibana-metrics-app-dont-show-metricbeat-system-capacity-metrics/234604)

<div class="topic-metadata">

**Author:** [@Ozcan\_Yildirim](https://discuss.elastic.co/u/Ozcan_Yildirim)\
**Replies:** 2\
**Last updated:** [May 27, 2020, 8:02pm UTC](https://discuss.elastic.co/t/kibana-metrics-app-dont-show-metricbeat-system-capacity-metrics/234604 "2020-05-27T20:02:30Z")

</div>

I have deployed Metrics beat as recommended on https://www.elastic.co/guide/en/beats/metricbeat/current/running-on-kubernetes.html System actual CPU, Memory, Load and Network Usage are shown But Capacity Graphs don't sh…

---

## [NumberFormatException for query field in simple\_query\_string](https://discuss.elastic.co/t/numberformatexception-for-query-field-in-simple-query-string/234602)

<div class="topic-metadata">

**Author:** [@weilandia](https://discuss.elastic.co/u/weilandia)\
**Replies:** 2\
**Last updated:** [May 27, 2020, 7:01pm UTC](https://discuss.elastic.co/t/numberformatexception-for-query-field-in-simple-query-string/234602 "2020-05-27T19:01:23Z")

</div>

I'm getting NumberFormatException\[For input string: \\"AZURE\\"\] when validating this query. This is an issue that's popped up recently using ES 7.6.2. This doesn't make sense to me since "query" is not a field with a ma…

---

## [How to run Logstash with batch file through Task scheduler](https://discuss.elastic.co/t/how-to-run-logstash-with-batch-file-through-task-scheduler/234599)

<div class="topic-metadata">

**Author:** [@chandra\_kunisetti](https://discuss.elastic.co/u/chandra_kunisetti)\
**Replies:** 1\
**Last updated:** [May 27, 2020, 6:34pm UTC](https://discuss.elastic.co/t/how-to-run-logstash-with-batch-file-through-task-scheduler/234599 "2020-05-27T18:34:03Z")

</div>

I have created a bacth file and tried to call it through Task scheduler. It is giving an error unable to launch. but am able to run manually(Without Scheduler) Its perfectly working . Below is code for Batch : @echo of…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1421)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1423)
