# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1526

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1527

---

## [How to index multiple root directories](https://discuss.elastic.co/t/how-to-index-multiple-root-directories/225710)

<div class="topic-metadata">

**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\
**Replies:** 2\
**Last updated:** [April 8, 2020, 4:58am UTC](https://discuss.elastic.co/t/how-to-index-multiple-root-directories/225710 "2020-04-08T04:58:54Z")

</div>

Hi, Suppose, I have multiple root directories such as /root1 and /root2. But under "/" I also have many folders that I don't want to index. What would be the best case to index the files in the above root directories? …

---

## [Logstash persisant queue usage without input](https://discuss.elastic.co/t/logstash-persisant-queue-usage-without-input/227051)

<div class="topic-metadata">

**Author:** [@hlamsc](https://discuss.elastic.co/u/hlamsc)\
**Replies:** 0\
**Last updated:** [April 8, 2020, 4:51am UTC](https://discuss.elastic.co/t/logstash-persisant-queue-usage-without-input/227051 "2020-04-08T04:51:09Z")

</div>

Hello, a week ago we build a small logstash "cluster" containing 3 logstash nodes (virtual machines) and haproxys for roundrobin. It worked really nice so we tried out persistent queue on one of the three nodes. As aspe…

---

## [Where to add client certificates in elasticsearch](https://discuss.elastic.co/t/where-to-add-client-certificates-in-elasticsearch/227050)

<div class="topic-metadata">

**Author:** [@bikkina\_mahesh](https://discuss.elastic.co/u/bikkina_mahesh)\
**Replies:** 0\
**Last updated:** [April 8, 2020, 4:48am UTC](https://discuss.elastic.co/t/where-to-add-client-certificates-in-elasticsearch/227050 "2020-04-08T04:48:22Z")

</div>

I am running an elastic cluster 7.2.0 with xpack security. Now in my case, Elasticsearch need to connect s3(through repository-s3 plugin) which runs on mTLS. Where to add these s3 client certificates in elasticsearch ? …

---

## [Json logging (ESJsonLayout) custom pattern](https://discuss.elastic.co/t/json-logging-esjsonlayout-custom-pattern/227047)

<div class="topic-metadata">

**Author:** [@mattweber](https://discuss.elastic.co/u/mattweber)\
**Replies:** 0\
**Last updated:** [April 8, 2020, 3:55am UTC](https://discuss.elastic.co/t/json-logging-esjsonlayout-custom-pattern/227047 "2020-04-08T03:55:55Z")

</div>

How do I customize the logging pattern for ESJsonLayout? Specifically I want to disable the 10k character limit of the message field \[1\]. \[1\] https://github.com/elastic/elasticsearch/blob/v7.6.2/server/src/main/java/or…

---

## [Creating my own binary sorting collation, how to store in Elastic?](https://discuss.elastic.co/t/creating-my-own-binary-sorting-collation-how-to-store-in-elastic/226860)

<div class="topic-metadata">

**Author:** [@JJK](https://discuss.elastic.co/u/JJK)\
**Replies:** 2\
**Last updated:** [April 8, 2020, 3:37am UTC](https://discuss.elastic.co/t/creating-my-own-binary-sorting-collation-how-to-store-in-elastic/226860 "2020-04-08T03:37:53Z")

</div>

I have my own binary fields that store a sorting collation in my current database. These are created with some very specific rules. I'd like to store these in Elastic and have Elastic sort by that field. But it appear…

---

## ['now-1d/d' cannot work correctly](https://discuss.elastic.co/t/now-1d-d-cannot-work-correctly/226806)

<div class="topic-metadata">

**Author:** [@Echo\_yu](https://discuss.elastic.co/u/Echo_yu)\
**Replies:** 4\
**Last updated:** [April 8, 2020, 3:06am UTC](https://discuss.elastic.co/t/now-1d-d-cannot-work-correctly/226806 "2020-04-08T03:06:06Z")

</div>

Hi, i used logstash to load data from MSSQL database to Elasticsearch. Since I lost 8 hours each time I imported the time field, I manually added 8 hours, for example: I have a sql in conf file of logstash : dateadd(hh,8…

---

## [Cfgfile - is not read after first failed attempt](https://discuss.elastic.co/t/cfgfile-is-not-read-after-first-failed-attempt/227041)

<div class="topic-metadata">

**Author:** [@newmember](https://discuss.elastic.co/u/newmember)\
**Replies:** 0\
**Last updated:** [April 8, 2020, 2:19am UTC](https://discuss.elastic.co/t/cfgfile-is-not-read-after-first-failed-attempt/227041 "2020-04-08T02:19:07Z")

</div>

I thought it was interesting observation that the changed cfgfile was not re-read after the first attempt failed, until I restarted filebeat. Maybe there is an option I am missing to re-read failed config files. filebe…

---

## [Is Event API synchronous or asynchronous?](https://discuss.elastic.co/t/is-event-api-synchronous-or-asynchronous/227040)

<div class="topic-metadata">

**Author:** [@Sarah\_Taaher\_Bonna](https://discuss.elastic.co/u/Sarah_Taaher_Bonna)\
**Replies:** 0\
**Last updated:** [April 8, 2020, 2:12am UTC](https://discuss.elastic.co/t/is-event-api-synchronous-or-asynchronous/227040 "2020-04-08T02:12:09Z")

</div>

Hi, I understand that the Event API has been rewritten in Java. I would like to know if the event.get and event.set methods are synchronous or asynchronous. Thanks. Regards, Sarah

---

## [Max\_num\_segments is not working for forcemerge](https://discuss.elastic.co/t/max-num-segments-is-not-working-for-forcemerge/226855)

<div class="topic-metadata">

**Author:** [@quweiyu](https://discuss.elastic.co/u/quweiyu)\
**Replies:** 3\
**Last updated:** [April 8, 2020, 1:11am UTC](https://discuss.elastic.co/t/max-num-segments-is-not-working-for-forcemerge/226855 "2020-04-08T01:11:57Z")

</div>

All, I am going to do force merge for one of index (4 primary shard and 0 replica). To reduce the IO impact, I'd like to merge into 4 segments for each shard. So I use following command, POST /rms\_pl\_03-viewer-cdr-invi…

---

## [Kibanaでのmacアドレス正規表現でのfilter or search](https://discuss.elastic.co/t/kibana-mac-filter-or-search/227035)

<div class="topic-metadata">

**Author:** [@snowman\_1114](https://discuss.elastic.co/u/snowman_1114)\
**Replies:** 0\
**Last updated:** [April 8, 2020, 12:47am UTC](https://discuss.elastic.co/t/kibana-mac-filter-or-search/227035 "2020-04-08T00:47:55Z")

</div>

LinuxのbashでMACアドレスを検索する時は \[0-9A-F\]\\{2\\}\\(-\[0-9A-F\]\\{2\\}\\)\\{5\\} を指定してgrep等していますが、kibanaのSearchの際には、検索窓にどのように書くとMACアドレスが検索できますか？(kibana-6.6.1を使用しています。)

---

## [Nest for Generic Object index](https://discuss.elastic.co/t/nest-for-generic-object-index/226890)

<div class="topic-metadata">

**Author:** [@4ea9049c983a41c5ecf0](https://discuss.elastic.co/u/4ea9049c983a41c5ecf0)\
**Replies:** 1\
**Last updated:** [April 8, 2020, 12:25am UTC](https://discuss.elastic.co/t/nest-for-generic-object-index/226890 "2020-04-08T00:25:33Z")

</div>

Hi All, I want to index the .NET class object. There are multiple classes I have so want to keep the index generic, is there any way to do so in Nest ? I have tried dynamic but it didn't work for me.

---

## [Is Logstash useful for structured data?](https://discuss.elastic.co/t/is-logstash-useful-for-structured-data/226883)

<div class="topic-metadata">

**Author:** [@Robert\_Ga](https://discuss.elastic.co/u/Robert_Ga)\
**Replies:** 5\
**Last updated:** [April 7, 2020, 10:05pm UTC](https://discuss.elastic.co/t/is-logstash-useful-for-structured-data/226883 "2020-04-07T22:05:35Z")

</div>

Hello everyone, Recently I started to migrate some data into Elasticsearch using the Python client. The data is already structured in json files and needs some processing like: lowercase all the values handle value i…

---

## [Automation for CSV file generation in data tables](https://discuss.elastic.co/t/automation-for-csv-file-generation-in-data-tables/226569)

<div class="topic-metadata">

**Author:** [@WAFA\_Mardiney](https://discuss.elastic.co/u/WAFA_Mardiney)\
**Replies:** 3\
**Last updated:** [April 7, 2020, 9:45pm UTC](https://discuss.elastic.co/t/automation-for-csv-file-generation-in-data-tables/226569 "2020-04-07T21:45:26Z")

</div>

I'm using kibana data table visualization, I can export csv file from the button below the table but is there a way to automate this process to happen each day for example? I saw a previous topic automated csv file gener…

---

## [Strigo workstation freeze](https://discuss.elastic.co/t/strigo-workstation-freeze/226991)

<div class="topic-metadata">

**Author:** [@koyassan](https://discuss.elastic.co/u/koyassan)\
**Replies:** 1\
**Last updated:** [April 7, 2020, 9:06pm UTC](https://discuss.elastic.co/t/strigo-workstation-freeze/226991 "2020-04-07T21:06:13Z")

</div>

Hello guys, I've started an ECE FUndamentals Course, but after I finished the 1st Lab, my workstation on Strigo gets stuck on "Preparing Your Workstation..." I've lost a couple minutes waiting for that, but I can't proc…

---

## [Unable to ingest JSON file and output to stdout](https://discuss.elastic.co/t/unable-to-ingest-json-file-and-output-to-stdout/226793)

<div class="topic-metadata">

**Author:** [@leosoaivan](https://discuss.elastic.co/u/leosoaivan)\
**Replies:** 5\
**Last updated:** [April 7, 2020, 8:44pm UTC](https://discuss.elastic.co/t/unable-to-ingest-json-file-and-output-to-stdout/226793 "2020-04-07T20:44:00Z")

</div>

New to Logstash, and I've attempted to start with a simple JSON file, though I can't get anything to output to stdout. It just hangs at Successfully started Logstash API endpoint {:port=\>9646} I've looked at a few posts…

---

## [How to remove values from a returned search if they are equal?](https://discuss.elastic.co/t/how-to-remove-values-from-a-returned-search-if-they-are-equal/226544)

<div class="topic-metadata">

**Author:** [@mds4872](https://discuss.elastic.co/u/mds4872)\
**Replies:** 2\
**Last updated:** [April 7, 2020, 8:35pm UTC](https://discuss.elastic.co/t/how-to-remove-values-from-a-returned-search-if-they-are-equal/226544 "2020-04-07T20:35:48Z")

</div>

Hi yall, I have traceroute data pointing to websites and I wanted to know how I could filter out responses if they are qual in hop length? For example, I have a job-id with attached http and https traceroutes, once each…

---

## [Newbie trying to use syslog date and time as timestamp in Logstash](https://discuss.elastic.co/t/newbie-trying-to-use-syslog-date-and-time-as-timestamp-in-logstash/226948)

<div class="topic-metadata">

**Author:** [@dbaddorf](https://discuss.elastic.co/u/dbaddorf)\
**Replies:** 4\
**Last updated:** [April 7, 2020, 8:25pm UTC](https://discuss.elastic.co/t/newbie-trying-to-use-syslog-date-and-time-as-timestamp-in-logstash/226948 "2020-04-07T20:25:40Z")

</div>

Hello! I know that I'm trying to do something simple, and I'm just getting started with Elasticsearch/Logstash, but I just can't seem to get the right combination, so I was hoping that someone might point me in the corr…

---

## [How can i create a new control to filter by date and by date\_range?](https://discuss.elastic.co/t/how-can-i-create-a-new-control-to-filter-by-date-and-by-date-range/226561)

<div class="topic-metadata">

**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\
**Replies:** 1\
**Last updated:** [April 7, 2020, 8:22pm UTC](https://discuss.elastic.co/t/how-can-i-create-a-new-control-to-filter-by-date-and-by-date-range/226561 "2020-04-07T20:22:09Z")

</div>

in range slider , i can just put fields (number), how can i add control to filter by date ?? any answers??

---

## [Redirect to another url instead of search results](https://discuss.elastic.co/t/redirect-to-another-url-instead-of-search-results/227004)

<div class="topic-metadata">

**Author:** [@arch27](https://discuss.elastic.co/u/arch27)\
**Replies:** 1\
**Last updated:** [April 7, 2020, 8:16pm UTC](https://discuss.elastic.co/t/redirect-to-another-url-instead-of-search-results/227004 "2020-04-07T20:16:27Z")

</div>

Is it possible to redirect to another page when a certain keywords are searched? like when a user searches - special offer , instead of showing the result, the user should be taken to special offer page.

---

## [How to force Transform to run periodically?](https://discuss.elastic.co/t/how-to-force-transform-to-run-periodically/226413)

<div class="topic-metadata">

**Author:** [@roishibr](https://discuss.elastic.co/u/roishibr)\
**Replies:** 6\
**Last updated:** [April 7, 2020, 8:14pm UTC](https://discuss.elastic.co/t/how-to-force-transform-to-run-periodically/226413 "2020-04-07T20:14:47Z")

</div>

Hi there! Is there any way to run Transform periodically (e.g., at each 5 seconds) regardless of having an update in the sync date field of source index? I'm trying to use Transform to aggregate values ​​in a sliding w…

---

## [Keep getting null in field scripting](https://discuss.elastic.co/t/keep-getting-null-in-field-scripting/226472)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [April 7, 2020, 7:59pm UTC](https://discuss.elastic.co/t/keep-getting-null-in-field-scripting/226472 "2020-04-07T19:59:01Z")

</div>

Hi, not all documents has the field "seconds", so I check for it, and then check if the value is not null, but I keep getting null results, if (doc.containsKey('seconds')){ if (doc\['seconds'\].value != null){ …

---

## [Logstash IMAP "cannot decode entire message" errors](https://discuss.elastic.co/t/logstash-imap-cannot-decode-entire-message-errors/227000)

<div class="topic-metadata">

**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\
**Replies:** 0\
**Last updated:** [April 7, 2020, 7:53pm UTC](https://discuss.elastic.co/t/logstash-imap-cannot-decode-entire-message-errors/227000 "2020-04-07T19:53:45Z")

</div>

Just started using the logstash-imap-input filter to pull logs from a UNIX IMAP server. Using Logstash 7.6.1 running on a Scientific Linux 6.7 server (don't ask). The pipeline worked for 535 messages before it ran into …

---

## [Error when trying to edit filter when using embedded iframe on top of kibana visualization](https://discuss.elastic.co/t/error-when-trying-to-edit-filter-when-using-embedded-iframe-on-top-of-kibana-visualization/226488)

<div class="topic-metadata">

**Author:** [@1010sachin](https://discuss.elastic.co/u/1010sachin)\
**Replies:** 3\
**Last updated:** [April 7, 2020, 7:51pm UTC](https://discuss.elastic.co/t/error-when-trying-to-edit-filter-when-using-embedded-iframe-on-top-of-kibana-visualization/226488 "2020-04-07T19:51:59Z")

</div>

Hi, We have iframe embedded dashboards over kibana visualization and we see issues with editing filters. While we can still create dashboard filters and see the filters being applied, when you try to edit an already app…

---

## [Permission error when performing logstash -f](https://discuss.elastic.co/t/permission-error-when-performing-logstash-f/226976)

<div class="topic-metadata">

**Author:** [@Al1](https://discuss.elastic.co/u/Al1)\
**Replies:** 1\
**Last updated:** [April 7, 2020, 7:50pm UTC](https://discuss.elastic.co/t/permission-error-when-performing-logstash-f/226976 "2020-04-07T19:50:40Z")

</div>

Hi - I am very new to logstash and I am running into an issue when trying to perform a logstash - f on my .config file. This is my .config file: input { file { path =\> "/Users/alpitshah/Data/cars.csv" start\_position…

---

## [Apples & Oranges](https://discuss.elastic.co/t/apples-oranges/226891)

<div class="topic-metadata">

**Author:** [@gardanni](https://discuss.elastic.co/u/gardanni)\
**Replies:** 2\
**Last updated:** [April 7, 2020, 7:37pm UTC](https://discuss.elastic.co/t/apples-oranges/226891 "2020-04-07T19:37:06Z")

</div>

I'm trying to visualize the volume of traffic associated with entities of very different size. Visualizing the data directly on a chart (see top chart) is meaningless - the data of the high-volume entity renders the data…

---

## [Fields are not shown in "Available fields" in KIbana](https://discuss.elastic.co/t/fields-are-not-shown-in-available-fields-in-kibana/226716)

<div class="topic-metadata">

**Author:** [@Manav\_Chopra](https://discuss.elastic.co/u/Manav_Chopra)\
**Replies:** 7\
**Last updated:** [April 7, 2020, 6:50pm UTC](https://discuss.elastic.co/t/fields-are-not-shown-in-available-fields-in-kibana/226716 "2020-04-07T18:50:39Z")

</div>

I have added fields i.e through mapping API and all the fields are shown on index management\> index pattern page But when I go to Discover tab, no new fields are shown there. Can you please tell what is the missing par…

---

## [Hello World doesn't output to Logstash](https://discuss.elastic.co/t/hello-world-doesnt-output-to-logstash/226985)

<div class="topic-metadata">

**Author:** [@eStrux-MAB](https://discuss.elastic.co/u/eStrux-MAB)\
**Replies:** 0\
**Last updated:** [April 7, 2020, 6:41pm UTC](https://discuss.elastic.co/t/hello-world-doesnt-output-to-logstash/226985 "2020-04-07T18:41:32Z")

</div>

I have a Logstash conf file configured as such: input { exec { command =\> "/etc/logstash/scripts/do\_something.py" interval =\> 60 } } output { stdout {} } …

---

## [How to query Array of Objects](https://discuss.elastic.co/t/how-to-query-array-of-objects/226980)

<div class="topic-metadata">

**Author:** [@prathako](https://discuss.elastic.co/u/prathako)\
**Replies:** 0\
**Last updated:** [April 7, 2020, 6:25pm UTC](https://discuss.elastic.co/t/how-to-query-array-of-objects/226980 "2020-04-07T18:25:13Z")

</div>

Mapping: { "log":{ "properties":{ "detail":{ "type":"nested", "properties":{ "attribute":{ "type":"text", "fields":{ …

---

## [.monitoring-es-6, .monitoring-kibana-6 are unassigned](https://discuss.elastic.co/t/monitoring-es-6-monitoring-kibana-6-are-unassigned/226974)

<div class="topic-metadata">

**Author:** [@pami](https://discuss.elastic.co/u/pami)\
**Replies:** 0\
**Last updated:** [April 7, 2020, 6:11pm UTC](https://discuss.elastic.co/t/monitoring-es-6-monitoring-kibana-6-are-unassigned/226974 "2020-04-07T18:11:37Z")

</div>

Hi, My cluster is in red state due to following indicies are unassigned. .monitoring-es-6, I tried to remove the indicies but still not working. Not sure what to do ? \[root@cs-els01 elasticsearch\]# curl -X GET localh…

---

## [Getting Json Formated Data to elastic in multiple Docs](https://discuss.elastic.co/t/getting-json-formated-data-to-elastic-in-multiple-docs/226934)

<div class="topic-metadata">

**Author:** [@KaiThoZ](https://discuss.elastic.co/u/KaiThoZ)\
**Replies:** 2\
**Last updated:** [April 7, 2020, 6:06pm UTC](https://discuss.elastic.co/t/getting-json-formated-data-to-elastic-in-multiple-docs/226934 "2020-04-07T18:06:45Z")

</div>

Hello, certainly this has been asked many times before but after hours of working on this topic I was unable to solve my problem. I have Json data that looks like this in ruby debug, I want to ghav each of those random…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1525)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1527)
