# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1559

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1560

---

## [Parsing a pretty formatted JSON file using Logstash](https://discuss.elastic.co/t/parsing-a-pretty-formatted-json-file-using-logstash/224224)

<div class="topic-metadata">

**Author:** [@Noushad\_Aslam](https://discuss.elastic.co/u/Noushad_Aslam)\
**Replies:** 7\
**Last updated:** [March 22, 2020, 4:24pm UTC](https://discuss.elastic.co/t/parsing-a-pretty-formatted-json-file-using-logstash/224224 "2020-03-22T16:24:45Z")

</div>

Hi, I am pretty new to Elastic stack. I have a need to index a JSON file data. Below is my JSON file format. \[ { "metricId" : 1776736, "metricName" : "Hardware Resources|Memory|Used %", "metricPath" : "Application I…

---

## [Logstash Server 2016 Server Issues](https://discuss.elastic.co/t/logstash-server-2016-server-issues/224207)

<div class="topic-metadata">

**Author:** [@mrandolph](https://discuss.elastic.co/u/mrandolph)\
**Replies:** 1\
**Last updated:** [March 22, 2020, 4:08pm UTC](https://discuss.elastic.co/t/logstash-server-2016-server-issues/224207 "2020-03-22T16:08:21Z")

</div>

I have been trying to install and never get past the error below. I am trying to configure this up to pipe both netflow and system logs to the server. Can anyone help? Sending Logstash logs to E:/logstash-7.6.1/logs whi…

---

## [Logstash simplify list of dict](https://discuss.elastic.co/t/logstash-simplify-list-of-dict/224151)

<div class="topic-metadata">

**Author:** [@msirovy](https://discuss.elastic.co/u/msirovy)\
**Replies:** 1\
**Last updated:** [March 22, 2020, 4:05pm UTC](https://discuss.elastic.co/t/logstash-simplify-list-of-dict/224151 "2020-03-22T16:05:13Z")

</div>

Hi, I am trying to parse by logstash this: "attributes": \[ { "value": "ValueA", "name": "NameA" }, { "value": "ValueB", "name": "NameB" …

---

## [Sync from mongoDB to elasticsearch](https://discuss.elastic.co/t/sync-from-mongodb-to-elasticsearch/224023)

<div class="topic-metadata">

**Author:** [@deamnguyen](https://discuss.elastic.co/u/deamnguyen)\
**Replies:** 2\
**Last updated:** [March 22, 2020, 4:00pm UTC](https://discuss.elastic.co/t/sync-from-mongodb-to-elasticsearch/224023 "2020-03-22T16:00:22Z")

</div>

Hi all, I have questions about sync data from mongodb to elasticsearch, please give me permission: There are many ways to sync, which one have i used? Logstash, JDBC input plugin =\> Logstash file my config: jdbc …

---

## [Different results when changing pipeline aggregations order](https://discuss.elastic.co/t/different-results-when-changing-pipeline-aggregations-order/224559)

<div class="topic-metadata">

**Author:** [@morteza\_hosseini](https://discuss.elastic.co/u/morteza_hosseini)\
**Replies:** 0\
**Last updated:** [March 22, 2020, 1:23pm UTC](https://discuss.elastic.co/t/different-results-when-changing-pipeline-aggregations-order/224559 "2020-03-22T13:23:41Z")

</div>

Consider this query: GET test-index/\_search { "size": 0, "query": { "term": { "data.category": { "value": "light" } } } , "aggs": { "brand\_model": { "terms":…

---

## [Grok add\_tag processed when no match was found](https://discuss.elastic.co/t/grok-add-tag-processed-when-no-match-was-found/224304)

<div class="topic-metadata">

**Author:** [@elady](https://discuss.elastic.co/u/elady)\
**Replies:** 2\
**Last updated:** [March 22, 2020, 10:39am UTC](https://discuss.elastic.co/t/grok-add-tag-processed-when-no-match-was-found/224304 "2020-03-22T10:39:39Z")

</div>

Hey. I have the following configuration: filter { grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:event\_timestamp}%{SPACE}%{DATA:log\_level}%{SPACE}\\\[%{DATA:host}\\\]%{SPACE}\\\[%{DATA:tenant}\\\]%{SPACE}\\\[%{DATA:ja…

---

## [How to give different weights to exact, phonetic and fuzzy queries?](https://discuss.elastic.co/t/how-to-give-different-weights-to-exact-phonetic-and-fuzzy-queries/224365)

<div class="topic-metadata">

**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\
**Replies:** 2\
**Last updated:** [March 22, 2020, 9:37am UTC](https://discuss.elastic.co/t/how-to-give-different-weights-to-exact-phonetic-and-fuzzy-queries/224365 "2020-03-22T09:37:59Z")

</div>

Hi, So currently I am using the following query: { "\_source": \[ "title", "bench", "id\_", "court", "date" \], "size": 15, "from": 0, "query": { "bool": …

---

## [Cant get fields to show up for Data Table visualization](https://discuss.elastic.co/t/cant-get-fields-to-show-up-for-data-table-visualization/224529)

<div class="topic-metadata">

**Author:** [@perfecto25](https://discuss.elastic.co/u/perfecto25)\
**Replies:** 2\
**Last updated:** [March 22, 2020, 6:19am UTC](https://discuss.elastic.co/t/cant-get-fields-to-show-up-for-data-table-visualization/224529 "2020-03-22T06:19:07Z")

</div>

Hello, I have a custom index called "sysmon", I am sending a log to this index, from an iotop process that logs I/O count by process name, the data is showing up in Discover, and I can see my custom fields w data (diski…

---

## [Docker elasticsearch 7.3.2 dont work](https://discuss.elastic.co/t/docker-elasticsearch-7-3-2-dont-work/224543)

<div class="topic-metadata">

**Author:** [@Rafael\_Antonio\_Rodri](https://discuss.elastic.co/u/Rafael_Antonio_Rodri)\
**Replies:** 0\
**Last updated:** [March 22, 2020, 3:34am UTC](https://discuss.elastic.co/t/docker-elasticsearch-7-3-2-dont-work/224543 "2020-03-22T03:34:11Z")

</div>

Hello good afternoon. Friends, excuse me, I'm trying to do a docker, but it's throwing an error at me. this is the docker-compose.yml version: '2.2' services: es01: image: docker.elastic.co/elasticsearch/elasticsea…

---

## [Kibana TLS to Elastic cluster in docker-compose: self signed certificate in certificate chain](https://discuss.elastic.co/t/kibana-tls-to-elastic-cluster-in-docker-compose-self-signed-certificate-in-certificate-chain/224538)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 2\
**Last updated:** [March 21, 2020, 10:07pm UTC](https://discuss.elastic.co/t/kibana-tls-to-elastic-cluster-in-docker-compose-self-signed-certificate-in-certificate-chain/224538 "2020-03-21T22:07:56Z")

</div>

Hi there, I need some help with this docker-compose I am creating, with which I'd like to bring up an Elastic Stack with the security features set. docker-compose.yml version: '3.5' services: elasticsearch\_certific…

---

## [GSoC New Project Idea! want feedback](https://discuss.elastic.co/t/gsoc-new-project-idea-want-feedback/224533)

<div class="topic-metadata">

**Author:** [@Rupesh\_Kumar1](https://discuss.elastic.co/u/Rupesh_Kumar1)\
**Replies:** 1\
**Last updated:** [March 21, 2020, 8:14pm UTC](https://discuss.elastic.co/t/gsoc-new-project-idea-want-feedback/224533 "2020-03-21T20:14:20Z")

</div>

I am a GSoC aspirant and I would like to work on a new project idea, which is an android app which automates building of APK on android phone without any internet connection. I have been researching on creation of APK an…

---

## [GSOC 2020 issue for get started](https://discuss.elastic.co/t/gsoc-2020-issue-for-get-started/224321)

<div class="topic-metadata">

**Author:** [@Ivan\_Korotkii](https://discuss.elastic.co/u/Ivan_Korotkii)\
**Replies:** 1\
**Last updated:** [March 21, 2020, 6:47pm UTC](https://discuss.elastic.co/t/gsoc-2020-issue-for-get-started/224321 "2020-03-21T18:47:30Z")

</div>

Hello everyone - my name is Ivan. I am a student of 3 years of study. I know Java and I would like to write a little code for my application so that you can understand it - can you throw some sort of task that can be wr…

---

## [Error reindexing "Field \[\_source\] is defined both as an object and a field."](https://discuss.elastic.co/t/error-reindexing-field-source-is-defined-both-as-an-object-and-a-field/224518)

<div class="topic-metadata">

**Author:** [@sidgate](https://discuss.elastic.co/u/sidgate)\
**Replies:** 2\
**Last updated:** [March 21, 2020, 2:54pm UTC](https://discuss.elastic.co/t/error-reindexing-field-source-is-defined-both-as-an-object-and-a-field/224518 "2020-03-21T14:54:42Z")

</div>

I am trying to copy existing index to new index using reindex API /\_reindex?wait\_for\_completion=false { "source": { "index": "articles" }, "dest": { "index": "articles20200321" }, "conflicts"…

---

## [Replace ES master node](https://discuss.elastic.co/t/replace-es-master-node/222987)

<div class="topic-metadata">

**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\
**Replies:** 7\
**Last updated:** [March 21, 2020, 1:11pm UTC](https://discuss.elastic.co/t/replace-es-master-node/222987 "2020-03-21T13:11:49Z")

</div>

Hi, we use a 3-node master-eligible ES6 cluster, and we need to replace one of the nodes. I'm trying to follow the official doc here: https://www.elastic.co/guide/en/elasticsearch/reference/master/modules-discovery-addin…

---

## [When I add a new node, the shard will rebalance. Will there be a delay in inserting and updating data at this time? What is the approximate time? How does this rebalance work and what is the principle?](https://discuss.elastic.co/t/when-i-add-a-new-node-the-shard-will-rebalance-will-there-be-a-delay-in-inserting-and-updating-data-at-this-time-what-is-the-approximate-time-how-does-this-rebalance-work-and-what-is-the-principle/224100)

<div class="topic-metadata">

**Author:** [@Liyes](https://discuss.elastic.co/u/Liyes)\
**Replies:** 11\
**Last updated:** [March 21, 2020, 8:39am UTC](https://discuss.elastic.co/t/when-i-add-a-new-node-the-shard-will-rebalance-will-there-be-a-delay-in-inserting-and-updating-data-at-this-time-what-is-the-approximate-time-how-does-this-rebalance-work-and-what-is-the-principle/224100 "2020-03-21T08:39:44Z")

</div>

When I add a new node, the shard will rebalance. The primary shard may move to the new Node. Will there be a delay in inserting and updating data at this time? What is the approximate time? How does this rebalance work a…

---

## [COVID-19 Dashboard](https://discuss.elastic.co/t/covid-19-dashboard/224385)

<div class="topic-metadata">

**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\
**Replies:** 2\
**Last updated:** [March 21, 2020, 7:24am UTC](https://discuss.elastic.co/t/covid-19-dashboard/224385 "2020-03-21T07:24:28Z")

</div>

Hi Has anyone thought about a dashboard which shows the COVID-19 using Kibana Dashboard. Regards, Ginu

---

## [How to setup external remote cluster?](https://discuss.elastic.co/t/how-to-setup-external-remote-cluster/222016)

<div class="topic-metadata">

**Author:** [@Matthieu\_Paret](https://discuss.elastic.co/u/Matthieu_Paret)\
**Replies:** 8\
**Last updated:** [March 21, 2020, 6:19am UTC](https://discuss.elastic.co/t/how-to-setup-external-remote-cluster/222016 "2020-03-21T06:19:12Z")

</div>

Hello here, ECK added support to local remote cluster but how to manually add a remote cluster ? (both are running through ECK) How should we retrieve certificate and inject these into the other cluster ? Thanks if som…

---

## [How Filtering logstash output from winlogbeat using winevent More detail?](https://discuss.elastic.co/t/how-filtering-logstash-output-from-winlogbeat-using-winevent-more-detail/224338)

<div class="topic-metadata">

**Author:** [@dhimasjoe](https://discuss.elastic.co/u/dhimasjoe)\
**Replies:** 6\
**Last updated:** [March 21, 2020, 4:49am UTC](https://discuss.elastic.co/t/how-filtering-logstash-output-from-winlogbeat-using-winevent-more-detail/224338 "2020-03-21T04:49:32Z")

</div>

\#Windwos event ID #I have filtering using EventID and work 100% , but how to more specific filtering , i want to dinied QueryName below : my config : thanks.

---

## [Is there task completion history?](https://discuss.elastic.co/t/is-there-task-completion-history/224498)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 0\
**Last updated:** [March 21, 2020, 2:52am UTC](https://discuss.elastic.co/t/is-there-task-completion-history/224498 "2020-03-21T02:52:53Z")

</div>

Hi I ran an \_reindex task, where I tried to merge a few indexes into one... It completed, but when I compare the document counts between the single and the multiple indexes, they do not match. From what I see there no t…

---

## [Iframe recently displaying login page](https://discuss.elastic.co/t/iframe-recently-displaying-login-page/224481)

<div class="topic-metadata">

**Author:** [@seppar](https://discuss.elastic.co/u/seppar)\
**Replies:** 1\
**Last updated:** [March 21, 2020, 12:27am UTC](https://discuss.elastic.co/t/iframe-recently-displaying-login-page/224481 "2020-03-21T00:27:59Z")

</div>

I had iframes being displayed on my front end application using the iframes. Recently instead of displaying them, it loads to the kibana login page.

---

## [Pie chart value instead of percentage a numerical value?](https://discuss.elastic.co/t/pie-chart-value-instead-of-percentage-a-numerical-value/224390)

<div class="topic-metadata">

**Author:** [@Sajumoet](https://discuss.elastic.co/u/Sajumoet)\
**Replies:** 1\
**Last updated:** [March 20, 2020, 10:31pm UTC](https://discuss.elastic.co/t/pie-chart-value-instead-of-percentage-a-numerical-value/224390 "2020-03-20T22:31:06Z")

</div>

In the pie chart, the values in the overview are displayed as a percentage. Only if you move the mouse over the individual pie pieces, the value is displayed as a percentage and as a number. Is it possible to display the…

---

## [Pfsense Firewall Logs via Filebeat](https://discuss.elastic.co/t/pfsense-firewall-logs-via-filebeat/224492)

<div class="topic-metadata">

**Author:** [@ctdlegion](https://discuss.elastic.co/u/ctdlegion)\
**Replies:** 0\
**Last updated:** [March 20, 2020, 9:14pm UTC](https://discuss.elastic.co/t/pfsense-firewall-logs-via-filebeat/224492 "2020-03-20T21:14:58Z")

</div>

We have a new Elastic Cloud deployment where we are collecting Sysmon and Windows logs from a server in a remote data center. We have that Windows server setup with Filebeat listening for inbound syslog so that we can a…

---

## [How to use html\_strip in an attachment pipeline?](https://discuss.elastic.co/t/how-to-use-html-strip-in-an-attachment-pipeline/224096)

<div class="topic-metadata">

**Author:** [@photocurio](https://discuss.elastic.co/u/photocurio)\
**Replies:** 3\
**Last updated:** [March 20, 2020, 9:06pm UTC](https://discuss.elastic.co/t/how-to-use-html-strip-in-an-attachment-pipeline/224096 "2020-03-20T21:06:29Z")

</div>

I am indexing documents with Elasticsearch, and its working well. My problem is that some documents have hyperlinks in them. Search is finding terms in these links, which I don't want. I tried to add a html\_strip proc…

---

## [Grok pattern for '|' character](https://discuss.elastic.co/t/grok-pattern-for-character/224333)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 3\
**Last updated:** [March 20, 2020, 8:15pm UTC](https://discuss.elastic.co/t/grok-pattern-for-character/224333 "2020-03-20T20:15:45Z")

</div>

I have 4 log files and a sample line from each of them is below. All these log files are under one index. How can i make one grok pattern that works for these two different format of log files? The grok i have at the en…

---

## [Search as you Type field functionality](https://discuss.elastic.co/t/search-as-you-type-field-functionality/224478)

<div class="topic-metadata">

**Author:** [@asura\_e](https://discuss.elastic.co/u/asura_e)\
**Replies:** 0\
**Last updated:** [March 20, 2020, 7:46pm UTC](https://discuss.elastic.co/t/search-as-you-type-field-functionality/224478 "2020-03-20T19:46:06Z")

</div>

I was looking at the functionality of the new field here: https://www.elastic.co/guide/en/elasticsearch/reference/7.x/search-as-you-type.html What I was wanting from the new field was to be able to facilitate a search-a…

---

## [How to recover after bad rolling upgrade](https://discuss.elastic.co/t/how-to-recover-after-bad-rolling-upgrade/224466)

<div class="topic-metadata">

**Author:** [@Michael\_Jackson1](https://discuss.elastic.co/u/Michael_Jackson1)\
**Replies:** 4\
**Last updated:** [March 20, 2020, 7:05pm UTC](https://discuss.elastic.co/t/how-to-recover-after-bad-rolling-upgrade/224466 "2020-03-20T19:05:45Z")

</div>

I was following the rolling upgrade documentation and the first node I was trying to upgrade from 7.3 to 7.6 didn't upgrade. It still shows that I am on 7.3 and now my cluster health shows red. Now I am seeing: .kibana…

---

## [Not a valid keystore when running Logstash as a service](https://discuss.elastic.co/t/not-a-valid-keystore-when-running-logstash-as-a-service/224471)

<div class="topic-metadata">

**Author:** [@ancdaromidi](https://discuss.elastic.co/u/ancdaromidi)\
**Replies:** 0\
**Last updated:** [March 20, 2020, 6:39pm UTC](https://discuss.elastic.co/t/not-a-valid-keystore-when-running-logstash-as-a-service/224471 "2020-03-20T18:39:00Z")

</div>

Hi, I am trying to use keystore as documented in https://www.elastic.co/guide/en/logstash/current/keystore.html I was able to succesfully implement it and also run it. However, when I run Logstash as a service it will …

---

## [Having issue with kibana](https://discuss.elastic.co/t/having-issue-with-kibana/224293)

<div class="topic-metadata">

**Author:** [@miket](https://discuss.elastic.co/u/miket)\
**Replies:** 9\
**Last updated:** [March 20, 2020, 6:34pm UTC](https://discuss.elastic.co/t/having-issue-with-kibana/224293 "2020-03-20T18:34:40Z")

</div>

Hi, I'm new to this and have setup graylog and elasticsearch but having issue when setting up kibana. Getting this error when I attempt to connect to kibana: Mar 19 15:51:53 greylog kibana\[7157\]: {"type":"log","@timest…

---

## [Throttle Kibana Queries to Elasticsearch](https://discuss.elastic.co/t/throttle-kibana-queries-to-elasticsearch/224339)

<div class="topic-metadata">

**Author:** [@jeffzhao](https://discuss.elastic.co/u/jeffzhao)\
**Replies:** 4\
**Last updated:** [March 20, 2020, 6:00pm UTC](https://discuss.elastic.co/t/throttle-kibana-queries-to-elasticsearch/224339 "2020-03-20T18:00:48Z")

</div>

Hi, In my Elasticsearch+Kibana environment, sometimes, user submitted heavy queries which blow up Elasticsearch cluster after CPU on the data node spiked to 100%. I know there is room to optimize the query and I know t…

---

## [How to select two coordinates from \[x,y,z\] array?](https://discuss.elastic.co/t/how-to-select-two-coordinates-from-x-y-z-array/224341)

<div class="topic-metadata">

**Author:** [@Agrikk](https://discuss.elastic.co/u/Agrikk)\
**Replies:** 1\
**Last updated:** [March 20, 2020, 5:20pm UTC](https://discuss.elastic.co/t/how-to-select-two-coordinates-from-x-y-z-array/224341 "2020-03-20T17:20:25Z")

</div>

Forgive me but I am brand. spankin'. new. to Kibana and Elastic and I'm fumbling my way through my first data set. I have a set of json documents loaded into my first elasticsearch cluster and one of the fields is a set…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1558)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1560)
