# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1556 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1557 --- ## [Issues with Bulk Sending data](https://discuss.elastic.co/t/issues-with-bulk-sending-data/224694)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 7\ **Last updated:** [March 23, 2020, 10:43pm UTC](https://discuss.elastic.co/t/issues-with-bulk-sending-data/224694 "2020-03-23T22:43:58Z")
I am having a weird issue. I have a index template setup and I created an index. I tried sending data from dev inside KIBANA and it worked. One document went in. But when I try to send bulk through my code using python I… --- ## [How to use the script field for string](https://discuss.elastic.co/t/how-to-use-the-script-field-for-string/224155)
**Author:** [@somya](https://discuss.elastic.co/u/somya)\ **Replies:** 8\ **Last updated:** [March 23, 2020, 9:48pm UTC](https://discuss.elastic.co/t/how-to-use-the-script-field-for-string/224155 "2020-03-23T21:48:49Z")
I have a message index pattern which has the below string \[INFO\]\[callback\]\[views\]\[2020-03-18 13:06:21\]\[xce\_web\]\[PROD\]\[user\_\_id\_1010510-18-03-2020-13-03-26\]\[167\]:For ABC start time is 2020-03-18 13:03:26.999778 & end tim… --- ## [Logstash 7.6.1 - getting illegal access operation error](https://discuss.elastic.co/t/logstash-7-6-1-getting-illegal-access-operation-error/224334)
**Author:** [@snehid](https://discuss.elastic.co/u/snehid)\ **Replies:** 2\ **Last updated:** [March 23, 2020, 9:32pm UTC](https://discuss.elastic.co/t/logstash-7-6-1-getting-illegal-access-operation-error/224334 "2020-03-23T21:32:49Z")
Team, Saw the recommendations for the above mentioned errors in logstash7.6.1 add this in the logstash jvm.options file? and with scheduler logstash service, restarting again and again do suggest! --- ## [Canvas: visualize with two different fields within the same index](https://discuss.elastic.co/t/canvas-visualize-with-two-different-fields-within-the-same-index/224689)
**Author:** [@emad101](https://discuss.elastic.co/u/emad101)\ **Replies:** 2\ **Last updated:** [March 23, 2020, 8:53pm UTC](https://discuss.elastic.co/t/canvas-visualize-with-two-different-fields-within-the-same-index/224689 "2020-03-23T20:53:06Z")
Hello, I am trying to make a bar chart in Canvas with two fields. I want the Y-axis to have the unique count on 'filed A' and the X-axis to display the top six names in 'field B' that has the most unique count in 'field… --- ## [Reading regex from file in a filter](https://discuss.elastic.co/t/reading-regex-from-file-in-a-filter/224724)
**Author:** [@mnrdammu](https://discuss.elastic.co/u/mnrdammu)\ **Replies:** 0\ **Last updated:** [March 23, 2020, 8:13pm UTC](https://discuss.elastic.co/t/reading-regex-from-file-in-a-filter/224724 "2020-03-23T20:13:07Z")
I created a log stash filter plugin which runs the regex match against a field, and if it matches, create a new field 'flag' and sets the value as 'Y' Currently I am using the regex inside the ruby file of my filter but… --- ## [Ingesting oracle log file into elasticsearch](https://discuss.elastic.co/t/ingesting-oracle-log-file-into-elasticsearch/224723)
**Author:** [@perezs](https://discuss.elastic.co/u/perezs)\ **Replies:** 0\ **Last updated:** [March 23, 2020, 8:04pm UTC](https://discuss.elastic.co/t/ingesting-oracle-log-file-into-elasticsearch/224723 "2020-03-23T20:04:42Z")
what is the best way to ingest oracle log files in elasticsearch 7.6 --- ## [Duplicate Records in Kibana](https://discuss.elastic.co/t/duplicate-records-in-kibana/224721)
**Author:** [@Amit\_Garg](https://discuss.elastic.co/u/Amit_Garg)\ **Replies:** 0\ **Last updated:** [March 23, 2020, 7:48pm UTC](https://discuss.elastic.co/t/duplicate-records-in-kibana/224721 "2020-03-23T19:48:00Z")
Hi, I am getting duplicate records in Kibana. I am using the below config in logstash. But in the kibana it showing the \_id value as %{\[@metadata\]\[fingerprint\]} Please provide the solution to this. Logstash.conf filt… --- ## [Positive flow rate over time for tank level](https://discuss.elastic.co/t/positive-flow-rate-over-time-for-tank-level/224463)
**Author:** [@thoth](https://discuss.elastic.co/u/thoth)\ **Replies:** 7\ **Last updated:** [March 23, 2020, 7:23pm UTC](https://discuss.elastic.co/t/positive-flow-rate-over-time-for-tank-level/224463 "2020-03-23T19:23:52Z")
I have a 'level' value for a tank coming in as a number, which is searchable and aggregatable. Is it possible for me to get a rate over time in which this level is increasing? As the tank nears full it is emptied and th… --- ## [Logstash having problem with elasticsearch filter](https://discuss.elastic.co/t/logstash-having-problem-with-elasticsearch-filter/224235)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 4\ **Last updated:** [March 23, 2020, 7:23pm UTC](https://discuss.elastic.co/t/logstash-having-problem-with-elasticsearch-filter/224235 "2020-03-23T19:23:05Z")
Hello, In the logstash pipeline I am querying the same index to get some data from the previous day The code looks like this: elasticsearch { hosts =\> \["127.0.0.1:9200"\] index =\> "index" query =\> "c… --- ## [License information could not be obtained from Elasticsearch](https://discuss.elastic.co/t/license-information-could-not-be-obtained-from-elasticsearch/224500)
**Author:** [@mathiznogoud](https://discuss.elastic.co/u/mathiznogoud)\ **Replies:** 4\ **Last updated:** [March 23, 2020, 7:12pm UTC](https://discuss.elastic.co/t/license-information-could-not-be-obtained-from-elasticsearch/224500 "2020-03-23T19:12:07Z")
Greetings, I've just set up ElasticSearch successfully. Later I install Kibana and I encountered this error, the Kibana doesn't go online. I'm using ElasticSearch 7.5.1 with Kibana 7.5.1. I setup both on my virtual Ce… --- ## [Variable length log](https://discuss.elastic.co/t/variable-length-log/224702)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [March 23, 2020, 7:10pm UTC](https://discuss.elastic.co/t/variable-length-log/224702 "2020-03-23T19:10:25Z")
Grettings, I have disk usage logs, these logs can have information of one or many disk, I am insterested in the "percent full" ex: Disk/\[C\]/percent full=71.63, Disk/\[C\]/MB free=11591, Disk/\[C\]/MB total=40857, Disk/\[E\]… --- ## [Time stamp in http\_poller input plugin](https://discuss.elastic.co/t/time-stamp-in-http-poller-input-plugin/224709)
**Author:** [@Aman\_Joshi](https://discuss.elastic.co/u/Aman_Joshi)\ **Replies:** 1\ **Last updated:** [March 23, 2020, 7:07pm UTC](https://discuss.elastic.co/t/time-stamp-in-http-poller-input-plugin/224709 "2020-03-23T19:07:12Z")
Continuing the discussion from Timestamp operation in http\_poller input: --- ## [How to rotate files in output plugin](https://discuss.elastic.co/t/how-to-rotate-files-in-output-plugin/224698)
**Author:** [@akhilsharma.in](https://discuss.elastic.co/u/akhilsharma.in)\ **Replies:** 1\ **Last updated:** [March 23, 2020, 7:03pm UTC](https://discuss.elastic.co/t/how-to-rotate-files-in-output-plugin/224698 "2020-03-23T19:03:20Z")
Team, I'm writing an output conf file and I want the output to be stored in a file. My conf file will get events once a day. I want when my conf file gets data tomorrow, it replaces the file of previous day to prevent f… --- ## [Logstash Output Dashboards](https://discuss.elastic.co/t/logstash-output-dashboards/224370)
**Author:** [@xennn](https://discuss.elastic.co/u/xennn)\ **Replies:** 0\ **Last updated:** [March 20, 2020, 7:55am UTC](https://discuss.elastic.co/t/logstash-output-dashboards/224370 "2020-03-20T07:55:49Z")
Hello, is it possible if we use a cluster to use the siem app, if we forward the logs to logstash? If we install winbeat, and configure the logstash output, we dont get the siem app working. The index was renamed to w… --- ## [Watcher- cannot update mail settings](https://discuss.elastic.co/t/watcher-cannot-update-mail-settings/224674)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 4\ **Last updated:** [March 23, 2020, 6:31pm UTC](https://discuss.elastic.co/t/watcher-cannot-update-mail-settings/224674 "2020-03-23T18:31:40Z")
hello, can you please assist with the following error? I'm trying to configure smtp in order to use watcher --- ## [Missing files input in logstash?](https://discuss.elastic.co/t/missing-files-input-in-logstash/224708)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 0\ **Last updated:** [March 23, 2020, 6:09pm UTC](https://discuss.elastic.co/t/missing-files-input-in-logstash/224708 "2020-03-23T18:09:44Z")
For example when every day i have an incoming csv files, if i have file03-03-2020.csv file05-03-2020.csv as input , how can I display in a field "missing files" that there is file missing in 04-03-2020 please any id… --- ## [Fileinput - force parsing (don't wait for all the files to be discovered)](https://discuss.elastic.co/t/fileinput-force-parsing-dont-wait-for-all-the-files-to-be-discovered/224707)
**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\ **Replies:** 0\ **Last updated:** [March 23, 2020, 6:08pm UTC](https://discuss.elastic.co/t/fileinput-force-parsing-dont-wait-for-all-the-files-to-be-discovered/224707 "2020-03-23T18:08:32Z")
Hi there, I'm using the logstash file input plugin to ingest many CSV files in a few directories. Is there any way to force the input plugin to pass the files to the csv filter stage quicker? It seems as though the fil… --- ## [How do you create a 2 series vega chart from 2 not nested aggregations](https://discuss.elastic.co/t/how-do-you-create-a-2-series-vega-chart-from-2-not-nested-aggregations/222347)
**Author:** [@TealFawn](https://discuss.elastic.co/u/TealFawn)\ **Replies:** 2\ **Last updated:** [March 23, 2020, 6:03pm UTC](https://discuss.elastic.co/t/how-do-you-create-a-2-series-vega-chart-from-2-not-nested-aggregations/222347 "2020-03-23T18:03:25Z")
I'm trying to create a 2 series vega chart from the following sample response. I have 2 date\_histogram aggregations and I want to plot the doc count for each month. Should I be using a format/transform on the data or sho… --- ## [Reindex documents following a query in order to make a snapshot](https://discuss.elastic.co/t/reindex-documents-following-a-query-in-order-to-make-a-snapshot/224307)
**Author:** [@stack](https://discuss.elastic.co/u/stack)\ **Replies:** 5\ **Last updated:** [March 23, 2020, 5:59pm UTC](https://discuss.elastic.co/t/reindex-documents-following-a-query-in-order-to-make-a-snapshot/224307 "2020-03-23T17:59:04Z")
Hello, I am currently looking at making a snapshot of my Active Directory users login events that i have been gathering using Winlogbeat. I don't want to snapshot the whole winlogbeat index, just theses specifics event… --- ## [Spark is unable to write to ES when ElasticSearch is in Red state](https://discuss.elastic.co/t/spark-is-unable-to-write-to-es-when-elasticsearch-is-in-red-state/224692)
**Author:** [@Amit\_Hora](https://discuss.elastic.co/u/Amit_Hora)\ **Replies:** 2\ **Last updated:** [March 23, 2020, 5:43pm UTC](https://discuss.elastic.co/t/spark-is-unable-to-write-to-es-when-elasticsearch-is-in-red-state/224692 "2020-03-23T17:43:12Z")
Hi, Spark is unable to write to ES when the cluster is in Red state even when the index to which the spark is reading/writing is 100% available, in Green state. The Spark job just hangs, it doesn't fail or timeout Is … --- ## [Query Related to Playground EUI Live Documentation Project](https://discuss.elastic.co/t/query-related-to-playground-eui-live-documentation-project/224297)
**Author:** [@sharvangsoc](https://discuss.elastic.co/u/sharvangsoc)\ **Replies:** 1\ **Last updated:** [March 23, 2020, 5:40pm UTC](https://discuss.elastic.co/t/query-related-to-playground-eui-live-documentation-project/224297 "2020-03-23T17:40:46Z")
I am Sharvan Sharma interested in contributing to the Playground EUI Live Documentation Project. I have visited the current documentation, as each component has its own code snippet. So I have some queries before making… --- ## [Unable to connect to Cloud Platform via Nest](https://discuss.elastic.co/t/unable-to-connect-to-cloud-platform-via-nest/224305)
**Author:** [@Justin\_Williams](https://discuss.elastic.co/u/Justin_Williams)\ **Replies:** 2\ **Last updated:** [March 23, 2020, 5:14pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-cloud-platform-via-nest/224305 "2020-03-23T17:14:30Z")
Here is my C# code: try { var credentials = new BasicAuthenticationCredentials(configuration\["Elastic:Username"\], configuration\["Elastic:Password"\]); var pool = new CloudConne… --- ## [Setting tdigest compression for percentile aggregations in visualisations \[Kibana 6.5\]](https://discuss.elastic.co/t/setting-tdigest-compression-for-percentile-aggregations-in-visualisations-kibana-6-5/224661)
**Author:** [@imacpherson](https://discuss.elastic.co/u/imacpherson)\ **Replies:** 3\ **Last updated:** [March 23, 2020, 5:00pm UTC](https://discuss.elastic.co/t/setting-tdigest-compression-for-percentile-aggregations-in-visualisations-kibana-6-5/224661 "2020-03-23T17:00:54Z")
Hi there, I'm running Kibana 6.5 and I have a data table visualisation where I'm showing the 95th percentile of a field, however the value is too inconsistent due to the approximation calculation for percentiles. I've s… --- ## [Elasticsearch snapshot backups in azure repository unknown host exception](https://discuss.elastic.co/t/elasticsearch-snapshot-backups-in-azure-repository-unknown-host-exception/224436)
**Author:** [@Yanislav\_Shetrev](https://discuss.elastic.co/u/Yanislav_Shetrev)\ **Replies:** 2\ **Last updated:** [March 23, 2020, 4:29pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-backups-in-azure-repository-unknown-host-exception/224436 "2020-03-23T16:29:53Z")
Trying to create backup repository for snapshots in Elasticsearch 6.5.2. But I am getting Internal server error(500) when executing the curl below. The error message is {"type":"unknown\_host\_exception","reason":"{{stora… --- ## [Convert Number to String Kibana JSON Input](https://discuss.elastic.co/t/convert-number-to-string-kibana-json-input/221297)
**Author:** [@Yasir](https://discuss.elastic.co/u/Yasir)\ **Replies:** 1\ **Last updated:** [March 23, 2020, 4:02pm UTC](https://discuss.elastic.co/t/convert-number-to-string-kibana-json-input/221297 "2020-03-23T16:02:24Z")
Hello, I am trying to use translate in the JSON INPUT to convert ItemValue 0 to Test/String Healthy I have been trying to use painless in the JSON Input but for some reason it doesnt work. Not too familiar with Pain… --- ## [Credentials' variables blocking beats from running as services on Windows](https://discuss.elastic.co/t/credentials-variables-blocking-beats-from-running-as-services-on-windows/214943)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 11\ **Last updated:** [March 23, 2020, 3:58pm UTC](https://discuss.elastic.co/t/credentials-variables-blocking-beats-from-running-as-services-on-windows/214943 "2020-03-23T15:58:06Z")
Hey there, So, the problem doesn't appear on linux boxes, but only windows ones : win server 2012 and win10. I had the (almost) exact same problem with Winlogbeat, Metricbeat and Filebeat. Following the documentation c… --- ## [\[WinLogBeats\] Missing events from ForwardedEvents channel](https://discuss.elastic.co/t/winlogbeats-missing-events-from-forwardedevents-channel/224296)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 2\ **Last updated:** [March 23, 2020, 3:56pm UTC](https://discuss.elastic.co/t/winlogbeats-missing-events-from-forwardedevents-channel/224296 "2020-03-23T15:56:50Z")
Hello ! I noticed that some logs are missing when I collect the channel "Forwarded Events" of my central log collector Here is my test. 1-Logs are well forwarded from my client (SRV-2012) to the central log collecto… --- ## [Visualizing a user burndown graph](https://discuss.elastic.co/t/visualizing-a-user-burndown-graph/224276)
**Author:** [@ethranes](https://discuss.elastic.co/u/ethranes)\ **Replies:** 4\ **Last updated:** [March 23, 2020, 3:10pm UTC](https://discuss.elastic.co/t/visualizing-a-user-burndown-graph/224276 "2020-03-23T15:10:53Z")
Hi, I have saved a document into elasticsearch, which has an array of users which include how many hours of work they have remaining, and I'm trying to show this as a bar chart in Kibana. The JSON I've entered looks li… --- ## [Logstash is not receiving or sending data to elastic from Azure Hub](https://discuss.elastic.co/t/logstash-is-not-receiving-or-sending-data-to-elastic-from-azure-hub/223562)
**Author:** [@igman](https://discuss.elastic.co/u/igman)\ **Replies:** 1\ **Last updated:** [March 23, 2020, 3:35pm UTC](https://discuss.elastic.co/t/logstash-is-not-receiving-or-sending-data-to-elastic-from-azure-hub/223562 "2020-03-23T15:35:18Z")
I created Azure Event Hub and I can see all message in Event Hub\*\* I installed have Elasticsearch,Kibana and LogStash on single Windows box. I enabled plug in logstash-input-azure\_event\_hubs. I run logstash –f Logstas… --- ## [How to select the top groups based on the relative occurence of a value in another variable](https://discuss.elastic.co/t/how-to-select-the-top-groups-based-on-the-relative-occurence-of-a-value-in-another-variable/223087)
**Author:** [@Amon](https://discuss.elastic.co/u/Amon)\ **Replies:** 3\ **Last updated:** [March 23, 2020, 3:27pm UTC](https://discuss.elastic.co/t/how-to-select-the-top-groups-based-on-the-relative-occurence-of-a-value-in-another-variable/223087 "2020-03-23T15:27:19Z")
Dear, Two variables in my dataset are important for this question namely : "Country\_code" and "Tunnel\_status". See example Country\_Code Tunnel\_status BE Up NL Up FR … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1555) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1557)