# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1585 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1586 --- ## [CMDB use-case](https://discuss.elastic.co/t/cmdb-use-case/222735)
**Author:** [@robinf36](https://discuss.elastic.co/u/robinf36)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 2:50pm UTC](https://discuss.elastic.co/t/cmdb-use-case/222735 "2020-03-09T14:50:08Z")
Dear Elastic community, I have a question regarding a specific use-case for which we would like to use Elastic(search). We would like to use Elastic for automating our Configuration Management Database (CMDB). Using t… --- ## [Elasticsearch-7.4.2- unable to discover master](https://discuss.elastic.co/t/elasticsearch-7-4-2-unable-to-discover-master/222730)
**Author:** [@satya06](https://discuss.elastic.co/u/satya06)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 2:30pm UTC](https://discuss.elastic.co/t/elasticsearch-7-4-2-unable-to-discover-master/222730 "2020-03-09T14:30:24Z")
Hello Team, I am planning to spin up 3 nodes (node1,node2,node3) elasticsearch cluster in a single vm. I am using ip address of the machine for network host. getting the below errors in logs, master not discovered or e… --- ## [Removing agent.\* metadata doesn't work in Filebet nor Logstash](https://discuss.elastic.co/t/removing-agent-metadata-doesnt-work-in-filebet-nor-logstash/222314)
**Author:** [@ehsank777](https://discuss.elastic.co/u/ehsank777)\ **Replies:** 4\ **Last updated:** [March 9, 2020, 2:27pm UTC](https://discuss.elastic.co/t/removing-agent-metadata-doesnt-work-in-filebet-nor-logstash/222314 "2020-03-09T14:27:31Z")
Hi, I have Elasticsearch and Logstash version 7.5.0 installed in an ELK stack. So far I was using filebeat version 6.8.0 on my machines. Today I upgraded some of them to version 7.6.0 and after that I see the following … --- ## [ILM: delete phase based on number of indicies?](https://discuss.elastic.co/t/ilm-delete-phase-based-on-number-of-indicies/222726)
**Author:** [@reighnman](https://discuss.elastic.co/u/reighnman)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 2:15pm UTC](https://discuss.elastic.co/t/ilm-delete-phase-based-on-number-of-indicies/222726 "2020-03-09T14:15:04Z")
I thought I saw a commit in 7.6 for adding a delete phase based on "number of indicies", however I can no longer find it. Does anyone know if this is out in the channel somewhere? nm, think I found it in https://github… --- ## [Logstash not appearing in kibana index](https://discuss.elastic.co/t/logstash-not-appearing-in-kibana-index/222721)
**Author:** [@oumy](https://discuss.elastic.co/u/oumy)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 2:02pm UTC](https://discuss.elastic.co/t/logstash-not-appearing-in-kibana-index/222721 "2020-03-09T14:02:56Z")
Hello there, i can't get logstash to appear on the kibana index, even though it exist in localhost indices. --- ## [Empty fields appear in InfluwDB filled with the variable name, i.e. %{\[kubernetes\_node\_name\]}](https://discuss.elastic.co/t/empty-fields-appear-in-influwdb-filled-with-the-variable-name-i-e-kubernetes-node-name/222718)
**Author:** [@jeanflorentine](https://discuss.elastic.co/u/jeanflorentine)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 1:55pm UTC](https://discuss.elastic.co/t/empty-fields-appear-in-influwdb-filled-with-the-variable-name-i-e-kubernetes-node-name/222718 "2020-03-09T13:55:44Z")
In InfluxDB output plugin configured with: data\_points =\> { "\_kubernetes\_namespace" =\> "%{\[kubernetes\_namespace\]}" "\_field\_env" =\> "%{\[field\_env\]}" "\_event\_dataset" =\> "%{\[event\_datas… --- ## [Logstash failing at output stdout](https://discuss.elastic.co/t/logstash-failing-at-output-stdout/222483)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 2\ **Last updated:** [March 9, 2020, 1:04pm UTC](https://discuss.elastic.co/t/logstash-failing-at-output-stdout/222483 "2020-03-09T13:04:24Z")
I'm having trouble testing a grok filter. I've been able to run a very basic test using the file input and then stdout output. All I'm trying to do is run a test with a grok filter that takes a file (oneline.txt), util… --- ## [How to create multiple Indices of elasticsearch using logstash configuration](https://discuss.elastic.co/t/how-to-create-multiple-indices-of-elasticsearch-using-logstash-configuration/222537)
**Author:** [@Pathshala\_Gopi](https://discuss.elastic.co/u/Pathshala_Gopi)\ **Replies:** 14\ **Last updated:** [March 9, 2020, 12:16pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-indices-of-elasticsearch-using-logstash-configuration/222537 "2020-03-09T12:16:57Z")
Hello everyone, I am trying to create different indices of elasticsearch using logstash but i am not able to do this.can anyone help me out with this.How we can create and send multiple different index to elasticsearc… --- ## [Data reconciliation from Filebeat, Logstash and ElasticSearch](https://discuss.elastic.co/t/data-reconciliation-from-filebeat-logstash-and-elasticsearch/222697)
**Author:** [@Lakshmi\_Narasimhan\_V](https://discuss.elastic.co/u/Lakshmi_Narasimhan_V)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 11:38am UTC](https://discuss.elastic.co/t/data-reconciliation-from-filebeat-logstash-and-elasticsearch/222697 "2020-03-09T11:38:49Z")
I need to do a data reconciliation for the data read by filebeat (csv files) and the data processed by the Logstash (using csv filter plugin) and sent to Elasticsearch. Count of documents on a daily basis. Also if ther… --- ## [No handler for type \[string\] declared on field \[fieldname\]](https://discuss.elastic.co/t/no-handler-for-type-string-declared-on-field-fieldname/222693)
**Author:** [@Chris\_Wilmott](https://discuss.elastic.co/u/Chris_Wilmott)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 11:21am UTC](https://discuss.elastic.co/t/no-handler-for-type-string-declared-on-field-fieldname/222693 "2020-03-09T11:21:06Z")
I know this question has been asked before but I can't seem to make this work. I updated Kibana and ElasticSearch from 5.6.16 to 6.8.7, and after the upgrade everything continued to work. However, two days later at midn… --- ## [Snapshots on NFS volume - AccessDenied Exception](https://discuss.elastic.co/t/snapshots-on-nfs-volume-accessdenied-exception/221855)
**Author:** [@MattJones](https://discuss.elastic.co/u/MattJones)\ **Replies:** 1\ **Last updated:** [March 9, 2020, 11:15am UTC](https://discuss.elastic.co/t/snapshots-on-nfs-volume-accessdenied-exception/221855 "2020-03-09T11:15:22Z")
Hi, We're getting an intermittent AccessDeniedException when creating snapshots on our cluster. As far as I can see all permissions are correct and config is the same across all servers. ES Version: 7.6.0 The /home/sh… --- ## [Logstash - Multiple Logs](https://discuss.elastic.co/t/logstash-multiple-logs/220600)
**Author:** [@santos1204](https://discuss.elastic.co/u/santos1204)\ **Replies:** 3\ **Last updated:** [March 9, 2020, 11:06am UTC](https://discuss.elastic.co/t/logstash-multiple-logs/220600 "2020-03-09T11:06:21Z")
Hi, I'm just starting to play with ELK, we're looking at shipping different logs with different filters from each server to a centralised place. filebeat config; filebeat.inputs: Each - is an input. Most options can … --- ## [Translation Analyzer](https://discuss.elastic.co/t/translation-analyzer/222658)
**Author:** [@Yassine\_Nifa](https://discuss.elastic.co/u/Yassine_Nifa)\ **Replies:** 1\ **Last updated:** [March 9, 2020, 11:00am UTC](https://discuss.elastic.co/t/translation-analyzer/222658 "2020-03-09T11:00:52Z")
Hi, I'm wondering if there are analyzers that will translate text from one language to another at query time? So, to be able to write the query on French, and get the results in English? Thanks, --- ## [Time Filter used while creating index pattern](https://discuss.elastic.co/t/time-filter-used-while-creating-index-pattern/220985)
**Author:** [@cravinder489](https://discuss.elastic.co/u/cravinder489)\ **Replies:** 4\ **Last updated:** [March 9, 2020, 10:25am UTC](https://discuss.elastic.co/t/time-filter-used-while-creating-index-pattern/220985 "2020-03-09T10:25:25Z")
Can we select multiple time filters for filtering our data while creating an index pattern? In my data, I have 3-time fields: Grant Date, Status Date, Validity Date. I want to filter my data according to Grant and Vali… --- ## [Logstash JDBC to MSSQL - this driver is not configured for integrated authentication](https://discuss.elastic.co/t/logstash-jdbc-to-mssql-this-driver-is-not-configured-for-integrated-authentication/222674)
**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\ **Replies:** 2\ **Last updated:** [March 9, 2020, 10:21am UTC](https://discuss.elastic.co/t/logstash-jdbc-to-mssql-this-driver-is-not-configured-for-integrated-authentication/222674 "2020-03-09T10:21:22Z")
Hello, I am trying to connect logstash to my sql server 2019. My .conf file: input { jdbc { jdbc\_driver\_library =\> "C:/sqljdbc\_8.2/enu/mssql-jdbc-8.2.0.jre13.jar" jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.… --- ## [Control freshness of data in Elasticsearch](https://discuss.elastic.co/t/control-freshness-of-data-in-elasticsearch/222626)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 2\ **Last updated:** [March 9, 2020, 9:56am UTC](https://discuss.elastic.co/t/control-freshness-of-data-in-elasticsearch/222626 "2020-03-09T09:56:22Z")
Hello, Objective : Compare last data sent by injector with the last document inserted in index ES. About last document inserted in ES index, how i can show it ? In index mapping, we have field called Connect\_time, we … --- ## [Import Multiple Files CSV - Aggregate Data](https://discuss.elastic.co/t/import-multiple-files-csv-aggregate-data/222612)
**Author:** [@brunojpsantos](https://discuss.elastic.co/u/brunojpsantos)\ **Replies:** 2\ **Last updated:** [March 9, 2020, 9:23am UTC](https://discuss.elastic.co/t/import-multiple-files-csv-aggregate-data/222612 "2020-03-09T09:23:51Z")
Hi, I'm working on a project that I need to import 2 csv files, rename/modify that entries and agregate that 2 files... For example, I have a "file1" that contains the columns : id, name, state And I have a "file2" wi… --- ## [How to filter out when query does not meet the condition of multiple field using only one query](https://discuss.elastic.co/t/how-to-filter-out-when-query-does-not-meet-the-condition-of-multiple-field-using-only-one-query/222671)
**Author:** [@Sangmin\_Lee](https://discuss.elastic.co/u/Sangmin_Lee)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 9:18am UTC](https://discuss.elastic.co/t/how-to-filter-out-when-query-does-not-meet-the-condition-of-multiple-field-using-only-one-query/222671 "2020-03-09T09:18:19Z")
Hi, I'm newbie of elasticsearch. I have a website that receives one input query from a search box(typical website) A user can search for a restaurant, which is a combination of 'region, restaurant name, menu type, ... … --- ## [A question over the way we use maxSeqNoOfUpdatesOrDeletes for optimization](https://discuss.elastic.co/t/a-question-over-the-way-we-use-maxseqnoofupdatesordeletes-for-optimization/222636)
**Author:** [@iamorchid](https://discuss.elastic.co/u/iamorchid)\ **Replies:** 4\ **Last updated:** [March 9, 2020, 9:16am UTC](https://discuss.elastic.co/t/a-question-over-the-way-we-use-maxseqnoofupdatesordeletes-for-optimization/222636 "2020-03-09T09:16:10Z")
Currently, I see that we are using the following check to decide if we can optimize indexing of new documents on replicas (ApendOnly Optimization for non-primary). if (maxSeqNoOfUpdatesOrDeletes \<= localCheckpointTracke… --- ## [Kibana crashes - Error loading data](https://discuss.elastic.co/t/kibana-crashes-error-loading-data/222431)
**Author:** [@carmine.fabrizio](https://discuss.elastic.co/u/carmine.fabrizio)\ **Replies:** 4\ **Last updated:** [March 9, 2020, 8:59am UTC](https://discuss.elastic.co/t/kibana-crashes-error-loading-data/222431 "2020-03-09T08:59:35Z")
Hi everyone, I have an issue with Kibana when I run a search with time range \> 3hrs, is returning Error loading data Request to Elasticsearch failed: {"error":{}} Error: Request to Elasticsearch failed: {"error":{}} … --- ## [Logstash Beats port not opening](https://discuss.elastic.co/t/logstash-beats-port-not-opening/222663)
**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 8:04am UTC](https://discuss.elastic.co/t/logstash-beats-port-not-opening/222663 "2020-03-09T08:04:34Z")
I have set up logstash to receive the beats data. But unfortunately only 9600 port is opening beats config input { beats { port =\> 5044 } } output { elasticsearch { hosts =\> \["https://localhost:9200"\] … --- ## [Webdevelopment](https://discuss.elastic.co/t/webdevelopment/222418)
**Author:** [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\ **Replies:** 2\ **Last updated:** [March 9, 2020, 7:43am UTC](https://discuss.elastic.co/t/webdevelopment/222418 "2020-03-09T07:43:04Z")
Hi all, Is there any experience within the community for getting Kibana dashboards (or Canvas) into a interactive webpage where a customer can actually see there own data and interact with the data? Is there a way to ge… --- ## [\[FATAL\] 2020-03-09 05:19:25.972 \[LogStash::Runner\] runner - Logstash could not be started because there is already another instance using the configured data directory. If you wish to run multiple instances, you must change the "path.data" setting](https://discuss.elastic.co/t/fatal-2020-03-09-0525-972-logstash-runner-runner-logstash-could-not-be-started-because-there-is-already-another-instance-using-the-configured-data-directory-if-you-wish-to-run-multiple-instances-you-must-change-the-path-data-setting/222645)
**Author:** [@Pathshala\_Gopi](https://discuss.elastic.co/u/Pathshala_Gopi)\ **Replies:** 2\ **Last updated:** [March 9, 2020, 6:44am UTC](https://discuss.elastic.co/t/fatal-2020-03-09-0525-972-logstash-runner-runner-logstash-could-not-be-started-because-there-is-already-another-instance-using-the-configured-data-directory-if-you-wish-to-run-multiple-instances-you-must-change-the-path-data-setting/222645 "2020-03-09T06:44:56Z")
I created two different droplets in Digitalocen and install nginx and filebeat on those two droplets.I configured my filebeat.yml file as below: VM1 filebeat.yml:\_ filebeat.prospectors: type: log paths: /var/log/ng… --- ## [How to get a more accurate score？](https://discuss.elastic.co/t/how-to-get-a-more-accurate-score/222546)
**Author:** [@Aure](https://discuss.elastic.co/u/Aure)\ **Replies:** 3\ **Last updated:** [March 9, 2020, 6:36am UTC](https://discuss.elastic.co/t/how-to-get-a-more-accurate-score/222546 "2020-03-09T06:36:03Z")
Can anyone explain this situation? Different time, same score? I use the exp function: "functions": \[ { "exp": { "evnt\_time": { "origin": "now", "scale": "900d", "decay": 0.1 } } } \] There is result： Thank… --- ## [7.6.0 vs new signals and futher enrich ingestion](https://discuss.elastic.co/t/7-6-0-vs-new-signals-and-futher-enrich-ingestion/219211)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 9\ **Last updated:** [February 17, 2020, 8:14am UTC](https://discuss.elastic.co/t/7-6-0-vs-new-signals-and-futher-enrich-ingestion/219211 "2020-02-17T08:14:17Z")
Just updated our cluster to 7.6.0 and are wondering where to read up on utilizing the new SIEM signals and if needed how to do further ingestion enriching to enhance signals eta. Currently got winlog(+sysmon) and audit … --- ## [Pass array to search template](https://discuss.elastic.co/t/pass-array-to-search-template/222644)
**Author:** [@JdKock](https://discuss.elastic.co/u/JdKock)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 5:50am UTC](https://discuss.elastic.co/t/pass-array-to-search-template/222644 "2020-03-09T05:50:31Z")
I have a search template and now I need to pass some parameters. Strings are no problem, but how do I pass an array? In the documentation I found that I need to use {{#toJson}}. But this seems not to work. https://www.… --- ## [How can i combine log and database data with the common field](https://discuss.elastic.co/t/how-can-i-combine-log-and-database-data-with-the-common-field/222642)
**Author:** [@saravana\_hariharan](https://discuss.elastic.co/u/saravana_hariharan)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 5:28am UTC](https://discuss.elastic.co/t/how-can-i-combine-log-and-database-data-with-the-common-field/222642 "2020-03-09T05:28:32Z")
I would like to join/combine log and database data with the common filed in a same index pattern . is it possible in ELK? Pls Help @magnusbaeck --- ## [How to apply custom css in Kibana UI](https://discuss.elastic.co/t/how-to-apply-custom-css-in-kibana-ui/37434)
**Author:** [@jawahar\_reddy\_bandi](https://discuss.elastic.co/u/jawahar_reddy_bandi)\ **Replies:** 10\ **Last updated:** [March 9, 2020, 5:21am UTC](https://discuss.elastic.co/t/how-to-apply-custom-css-in-kibana-ui/37434 "2020-03-09T05:21:47Z")
How to apply custom css in Kibana UI --- ## [Metricbeatのエラーについて](https://discuss.elastic.co/t/metricbeat/222631)
**Author:** [@knm](https://discuss.elastic.co/u/knm)\ **Replies:** 2\ **Last updated:** [March 9, 2020, 5:18am UTC](https://discuss.elastic.co/t/metricbeat/222631 "2020-03-09T05:18:06Z")
metricbeatの7.6.1を起動すると、下記のようなエラーが出て起動できません。 対応方法などございましたら、ご教授いただけると助かります。 2020-03-09T10:27:22.170+0900 ERROR instance/beat.go:933 Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET r… --- ## [Issues with kibana\_markdown\_doc\_view plugin](https://discuss.elastic.co/t/issues-with-kibana-markdown-doc-view-plugin/222641)
**Author:** [@HH2O77](https://discuss.elastic.co/u/HH2O77)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 5:04am UTC](https://discuss.elastic.co/t/issues-with-kibana-markdown-doc-view-plugin/222641 "2020-03-09T05:04:35Z")
Hi All, I am trying to use the kibana plugin: The latest version supported is 6.2. I am trying to installed after changing the version in 6.5 but I got an error with LESS when installing. If anyone has any idea how s… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1584) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1586)