# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1586 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1587 --- ## [Hello I want to create pie chart in kibana 7.6](https://discuss.elastic.co/t/hello-i-want-to-create-pie-chart-in-kibana-7-6/222398)
**Author:** [@Sahana1](https://discuss.elastic.co/u/Sahana1)\ **Replies:** 9\ **Last updated:** [March 9, 2020, 4:22am UTC](https://discuss.elastic.co/t/hello-i-want-to-create-pie-chart-in-kibana-7-6/222398 "2020-03-09T04:22:17Z")
1.I have data in my CSV file which is in the attached file format 2.when i create the pie chart all the it shows as in the below uploaded picture 2 3. actually i want to have my pie chart as shown in the below uploa… --- ## [Extracting a new field from the message field](https://discuss.elastic.co/t/extracting-a-new-field-from-the-message-field/222407)
**Author:** [@Hari\_Krishna](https://discuss.elastic.co/u/Hari_Krishna)\ **Replies:** 8\ **Last updated:** [March 9, 2020, 3:51am UTC](https://discuss.elastic.co/t/extracting-a-new-field-from-the-message-field/222407 "2020-03-09T03:51:33Z")
2020-03-06 09:36:52.801907464 re0:ndp:25786 lltp\_debug message = "NDP-DBG:NC\_FSM\_HANDLER:1634:: state 7, event 4, NexthopId 44001" This is my log. I need to extract state and NexthopId from the message field match =\> … --- ## [Elasticsearch java RestClient SocketTimeoutException: 12,000 milliseconds timeout on connection http-outgoing-12](https://discuss.elastic.co/t/elasticsearch-java-restclient-sockettimeoutexception-12-000-milliseconds-timeout-on-connection-http-outgoing-12/222193)
**Author:** [@jiankunking](https://discuss.elastic.co/u/jiankunking)\ **Replies:** 1\ **Last updated:** [March 9, 2020, 1:45am UTC](https://discuss.elastic.co/t/elasticsearch-java-restclient-sockettimeoutexception-12-000-milliseconds-timeout-on-connection-http-outgoing-12/222193 "2020-03-09T01:45:11Z")
When I use es client to connect es, the following errors often occur： 2020-01-20 17:48:12.330 \[http-nio-8080-exec-10\] INFO c.j.logsearch.aspect.ServiceTimeConsumeAspect - Service：ESClients.getInstance(..)，cost：0ms java… --- ## [Version of official Perl client library (Search::Elasticsearch) compatible with Elasticsearch 7.6?](https://discuss.elastic.co/t/version-of-official-perl-client-library-search-elasticsearch-compatible-with-elasticsearch-7-6/222630)
**Author:** [@KevinFink](https://discuss.elastic.co/u/KevinFink)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 12:58am UTC](https://discuss.elastic.co/t/version-of-official-perl-client-library-search-elasticsearch-compatible-with-elasticsearch-7-6/222630 "2020-03-09T00:58:38Z")
I am using Search::Elasticsearch 6.00 but when I connect to an Elasticsearch cluster running 7.6.1, I get annoying deprecation warnings on some calls. For example, calling update() with a type parameter results in the fo… --- ## [ElasticSearch as a time series database](https://discuss.elastic.co/t/elasticsearch-as-a-time-series-database/222279)
**Author:** [@Avinash\_D\_Silva](https://discuss.elastic.co/u/Avinash_D_Silva)\ **Replies:** 3\ **Last updated:** [March 8, 2020, 9:00pm UTC](https://discuss.elastic.co/t/elasticsearch-as-a-time-series-database/222279 "2020-03-08T21:00:14Z")
we currently have data that looks something like this index: device\_data\_2020-01-01 and docs looks something like this {deviceId: "a001", timestamp: "2020-02-21T19:33:00", metrics:{ port0: 12, port1: 13 }} {deviceId: "… --- ## [Using a variable as an index of an array of patterns](https://discuss.elastic.co/t/using-a-variable-as-an-index-of-an-array-of-patterns/222617)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 2\ **Last updated:** [March 8, 2020, 8:39pm UTC](https://discuss.elastic.co/t/using-a-variable-as-an-index-of-an-array-of-patterns/222617 "2020-03-08T20:39:12Z")
I have this filter in a logstash pipeline filter{ ruby { code =\> 'event.set("patternmatch1", event.get("message").scan(/TEXT.\*?(\\w\[\\w,.\]\*)\\r?$/))' } # Retrieve the lenght of the array cointaining all the ma… --- ## [Logstash filter semantic fields not loading in Kibana](https://discuss.elastic.co/t/logstash-filter-semantic-fields-not-loading-in-kibana/222619)
**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\ **Replies:** 0\ **Last updated:** [March 8, 2020, 8:01pm UTC](https://discuss.elastic.co/t/logstash-filter-semantic-fields-not-loading-in-kibana/222619 "2020-03-08T20:01:21Z")
I thought my knowledge of the ELK stack was pretty good but this weekend I have tried and tried to figure out what is going on with my deployment. The result that I am not getting is that I create my filters in logstash… --- ## [Problem Connecting 3 nodes](https://discuss.elastic.co/t/problem-connecting-3-nodes/222616)
**Author:** [@thewasta](https://discuss.elastic.co/u/thewasta)\ **Replies:** 1\ **Last updated:** [March 8, 2020, 7:31pm UTC](https://discuss.elastic.co/t/problem-connecting-3-nodes/222616 "2020-03-08T19:31:29Z")
Enviroment: VirtualBox three servers with Ubuntu 18.04 LTS and network bridge. Master: 106 ES01: 107 ES02: 108 ElasticSearch Version 7.6.1 This is my configuration elasticsearch.yml file: MASTER: cluster.name: my… --- ## [How to flatten the json, not working with previous post](https://discuss.elastic.co/t/how-to-flatten-the-json-not-working-with-previous-post/222608)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 6\ **Last updated:** [March 8, 2020, 6:38pm UTC](https://discuss.elastic.co/t/how-to-flatten-the-json-not-working-with-previous-post/222608 "2020-03-08T18:38:52Z")
Hi All I have a case, wherein i need to flatten the json data.To get started i am just following the previous post. But i am not successful with the result I am getting below result { "@timestamp" : "2020-03-08T15… --- ## [Feed file input to an ES query](https://discuss.elastic.co/t/feed-file-input-to-an-es-query/222598)
**Author:** [@Sineos](https://discuss.elastic.co/u/Sineos)\ **Replies:** 2\ **Last updated:** [March 8, 2020, 5:53pm UTC](https://discuss.elastic.co/t/feed-file-input-to-an-es-query/222598 "2020-03-08T17:53:47Z")
Dear all, I'm trying to achieve the following: Read a file: One value per line Transform this value into a wildcard value, e.g. "\*value\*" Feed the value into an ES query Return the results of the query These are my s… --- ## [Canvas share to pdf only creates pdf with 1 page](https://discuss.elastic.co/t/canvas-share-to-pdf-only-creates-pdf-with-1-page/221861)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 6\ **Last updated:** [March 8, 2020, 1:02pm UTC](https://discuss.elastic.co/t/canvas-share-to-pdf-only-creates-pdf-with-1-page/221861 "2020-03-08T13:02:46Z")
Hi, I have created a multipage workpad within canvas, within the workpasd, if i share to PDF it only generates the PDF with 1 page rather than the whole workpad. What am i missing? Thanks Phil --- ## [How to Replace the kibana logo in Kibana version 7.6](https://discuss.elastic.co/t/how-to-replace-the-kibana-logo-in-kibana-version-7-6/222266)
**Author:** [@Sakthi08](https://discuss.elastic.co/u/Sakthi08)\ **Replies:** 1\ **Last updated:** [March 8, 2020, 11:28am UTC](https://discuss.elastic.co/t/how-to-replace-the-kibana-logo-in-kibana-version-7-6/222266 "2020-03-08T11:28:55Z")
Can we replace the Kibana Logo in Version 7.6.0 Can someone help me with this. --- ## [Filebeatでの\_typeの変更について](https://discuss.elastic.co/t/filebeat-type/222417)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 1\ **Last updated:** [March 8, 2020, 8:37am UTC](https://discuss.elastic.co/t/filebeat-type/222417 "2020-03-08T08:37:47Z")
Filebeatで収集しているログの「\_type」を、「doc」から、「statistics\_access\_log」に変更したいです。 上記は、可能でしょうか？ 下記の設定をしたのですが、反映されず、困っています。 filebeat.yml - type: log enabled: true close\_inactive: 5m ignore\_older: 15m… --- ## [How to get all the source from json that indexed with logstash](https://discuss.elastic.co/t/how-to-get-all-the-source-from-json-that-indexed-with-logstash/222590)
**Author:** [@Bahadir\_Eyuboglu](https://discuss.elastic.co/u/Bahadir_Eyuboglu)\ **Replies:** 0\ **Last updated:** [March 8, 2020, 8:26am UTC](https://discuss.elastic.co/t/how-to-get-all-the-source-from-json-that-indexed-with-logstash/222590 "2020-03-08T08:26:19Z")
I'm newbie and i need index large json data to elasticsearch so i use logstash to index my json files in some directory here is the logstash config: \< input { file { path =\> "/home/abahadir/Desktop/Proje/searchflask/… --- ## [Kibana working very slow and showing errors randomly](https://discuss.elastic.co/t/kibana-working-very-slow-and-showing-errors-randomly/222238)
**Author:** [@cravinder489](https://discuss.elastic.co/u/cravinder489)\ **Replies:** 18\ **Last updated:** [March 8, 2020, 7:19am UTC](https://discuss.elastic.co/t/kibana-working-very-slow-and-showing-errors-randomly/222238 "2020-03-08T07:19:01Z")
My kibana is working very slow. I only have 4 indices in it with 300, 45000, 66000 and 12000 documents respectively. Also once I start the server, after some time it gives circuit break exception. This did not happen i… --- ## [ECE on Virtual Machines](https://discuss.elastic.co/t/ece-on-virtual-machines/222580)
**Author:** [@tlazarus](https://discuss.elastic.co/u/tlazarus)\ **Replies:** 1\ **Last updated:** [March 8, 2020, 6:27am UTC](https://discuss.elastic.co/t/ece-on-virtual-machines/222580 "2020-03-08T06:27:50Z")
I'm hoping that someone else is running ECE on top of virtual machines, preferably on-premise, and would be willing to discuss their configuration. Using virtual machines rather than a bare-metal deployment obviously com… --- ## [Search for last 24 hours logs based on field?](https://discuss.elastic.co/t/search-for-last-24-hours-logs-based-on-field/222582)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 1\ **Last updated:** [March 8, 2020, 5:49am UTC](https://discuss.elastic.co/t/search-for-last-24-hours-logs-based-on-field/222582 "2020-03-08T05:49:43Z")
Hey Folks, Can someone please help me on constructing curl based query on src\_ip and agg: those for last 24 hours? here is something I constructed based on count and need help with for timerange curl -s -XGET "https:/… --- ## [Index Confluence, GitHub, Stackoverflow Teams](https://discuss.elastic.co/t/index-confluence-github-stackoverflow-teams/222560)
**Author:** [@Thomas\_Guettler](https://discuss.elastic.co/u/Thomas_Guettler)\ **Replies:** 4\ **Last updated:** [March 8, 2020, 1:00am UTC](https://discuss.elastic.co/t/index-confluence-github-stackoverflow-teams/222560 "2020-03-08T01:00:49Z")
In our company we have several sources: confluence, our github repos, data in the staffbase app and stackoverflow for teams. We would like to have one search which returns matchings results from all of these sources. E… --- ## [Send an array of string in query and get all the documents in which the field value matching with any of the array element value](https://discuss.elastic.co/t/send-an-array-of-string-in-query-and-get-all-the-documents-in-which-the-field-value-matching-with-any-of-the-array-element-value/222572)
**Author:** [@Praneeth\_Kumar](https://discuss.elastic.co/u/Praneeth_Kumar)\ **Replies:** 1\ **Last updated:** [March 7, 2020, 11:06pm UTC](https://discuss.elastic.co/t/send-an-array-of-string-in-query-and-get-all-the-documents-in-which-the-field-value-matching-with-any-of-the-array-element-value/222572 "2020-03-07T23:06:37Z")
Currently, my documents in my index has data like this { "\_index" : "traffic", "\_type" : "\_doc", "\_id" : "dYY7m3AB\_cmkU5saDRdM", "\_score" : 4.078947, "keyword" : "baby toothp… --- ## [How to make dynamic document id from name of the json file](https://discuss.elastic.co/t/how-to-make-dynamic-document-id-from-name-of-the-json-file/222577)
**Author:** [@Bahadir\_Eyuboglu](https://discuss.elastic.co/u/Bahadir_Eyuboglu)\ **Replies:** 3\ **Last updated:** [March 7, 2020, 10:57pm UTC](https://discuss.elastic.co/t/how-to-make-dynamic-document-id-from-name-of-the-json-file/222577 "2020-03-07T22:57:49Z")
I'm nooby when it's come to elasticsearch what i'm trying to do is, while indexing the large json file want to give it a document id same with file's name dummy.json document\_id =\> "dummy" kinda \< input { file { p… --- ## [How to get systemId field value using logstash-input-azure\_blob\_storage plugin?](https://discuss.elastic.co/t/how-to-get-systemid-field-value-using-logstash-input-azure-blob-storage-plugin/222573)
**Author:** [@ls09](https://discuss.elastic.co/u/ls09)\ **Replies:** 0\ **Last updated:** [March 7, 2020, 7:08pm UTC](https://discuss.elastic.co/t/how-to-get-systemid-field-value-using-logstash-input-azure-blob-storage-plugin/222573 "2020-03-07T19:08:13Z")
How to get systemId field value using logstash-input-azure\_blob\_storage? please HELP! The Azure NSG log format is described here: my logstash.conf file contents: input { azure\_blob\_storage { storageaccount =\> … --- ## [ES 7.3.0 cluster crashes with error "failed to flush export bulks" after restarting data POD](https://discuss.elastic.co/t/es-7-3-0-cluster-crashes-with-error-failed-to-flush-export-bulks-after-restarting-data-pod/222558)
**Author:** [@praven\_rai](https://discuss.elastic.co/u/praven_rai)\ **Replies:** 3\ **Last updated:** [March 7, 2020, 5:44pm UTC](https://discuss.elastic.co/t/es-7-3-0-cluster-crashes-with-error-failed-to-flush-export-bulks-after-restarting-data-pod/222558 "2020-03-07T17:44:58Z")
Hello Team, I am running into issues with my Elasticsearch cluster v7.3.0 deployed under AWS EKS. I have a 3 node cluster in which 3 PODs configured i.e. ES Master-1, ES Data-1, ES Ingest-1. Persistent Valume and Pers… --- ## [Logstash not parsing logs into Elasticsearch](https://discuss.elastic.co/t/logstash-not-parsing-logs-into-elasticsearch/222555)
**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\ **Replies:** 1\ **Last updated:** [March 7, 2020, 3:04pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-logs-into-elasticsearch/222555 "2020-03-07T15:04:31Z")
I have setup my paths to the logs files as stated in the documentation, the problem is when, for example; I turn on the nginx module the logs seems to be parsed and sent to elasticsearch. But when I turn off the nginx m… --- ## [Cumulative sum with range limited date histogram](https://discuss.elastic.co/t/cumulative-sum-with-range-limited-date-histogram/222564)
**Author:** [@aksdb](https://discuss.elastic.co/u/aksdb)\ **Replies:** 0\ **Last updated:** [March 7, 2020, 3:04pm UTC](https://discuss.elastic.co/t/cumulative-sum-with-range-limited-date-histogram/222564 "2020-03-07T15:04:27Z")
I have a timeseries that consists of events like "user has visited page x". If I want to know the total number of visits for a page, I can use a cardinality aggregation. However, I want to (for example) see the total vi… --- ## [Highlighting a field with values from multiple other fields](https://discuss.elastic.co/t/highlighting-a-field-with-values-from-multiple-other-fields/220502)
**Author:** [@crab86](https://discuss.elastic.co/u/crab86)\ **Replies:** 4\ **Last updated:** [March 7, 2020, 12:00pm UTC](https://discuss.elastic.co/t/highlighting-a-field-with-values-from-multiple-other-fields/220502 "2020-03-07T12:00:21Z")
Hi there, is it somehow possible to highlight text from a field with values from multiple other fields? For example: "Text": "The dog eats an apple under a pine tree." "animals": \["dog","cat","mouse"\] "fruits": \["or… --- ## [Help me to remove json tag from the given json](https://discuss.elastic.co/t/help-me-to-remove-json-tag-from-the-given-json/222481)
**Author:** [@jahaber\_sadhik](https://discuss.elastic.co/u/jahaber_sadhik)\ **Replies:** 2\ **Last updated:** [March 7, 2020, 9:36am UTC](https://discuss.elastic.co/t/help-me-to-remove-json-tag-from-the-given-json/222481 "2020-03-07T09:36:32Z")
"@timestamp" =\> 2020-03-06T15:24:44.555Z, "@version" =\> "1", "host" =\> "worker02.stg.xxxxx.com", "path" =\> "/var/log/spark2/sparkBatchsla-file.log", "payload" =\> { "slaBatchRes" =\> { // Like to remove json tag "res… --- ## [Logstash tried to bind to port range 9600..9700, but all the ports are already in use. You can specify a new port by launching logstash with the --http.port option](https://discuss.elastic.co/t/logstash-tried-to-bind-to-port-range-9600-9700-but-all-the-ports-are-already-in-use-you-can-specify-a-new-port-by-launching-logstash-with-the-http-port-option/222540)
**Author:** [@nipin1509](https://discuss.elastic.co/u/nipin1509)\ **Replies:** 0\ **Last updated:** [March 7, 2020, 5:59am UTC](https://discuss.elastic.co/t/logstash-tried-to-bind-to-port-range-9600-9700-but-all-the-ports-are-already-in-use-you-can-specify-a-new-port-by-launching-logstash-with-the-http-port-option/222540 "2020-03-07T05:59:11Z")
I am getting " Logstash tried to bind to port range ' when installing logstash in openshift. Below is the Config map and Logstsh Yaml file. Logstash Config apiVersion: v1 kind: ConfigMap metadata: name: logstash-co… --- ## [Kibana installed, but cannot be access through web browser](https://discuss.elastic.co/t/kibana-installed-but-cannot-be-access-through-web-browser/220064)
**Author:** [@vernal](https://discuss.elastic.co/u/vernal)\ **Replies:** 8\ **Last updated:** [February 28, 2020, 6:52am UTC](https://discuss.elastic.co/t/kibana-installed-but-cannot-be-access-through-web-browser/220064 "2020-02-28T06:52:37Z")
Below is the setting from kibana.yml: server.port: 5601 server.host: namenode2 elasticsearch.url: "http://namenode2:9200" Below is the setting from elasticsearch.yml: cluster.name: es-prod node.name: master-1 path… --- ## [Simplify results](https://discuss.elastic.co/t/simplify-results/222516)
**Author:** [@lugao](https://discuss.elastic.co/u/lugao)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 9:54pm UTC](https://discuss.elastic.co/t/simplify-results/222516 "2020-03-06T21:54:00Z")
I have a query containing multiple aggregations and I would like to strip metadata before return it to improve performance. Is there anyway to transform a query result before returning it? Thanks! --- ## [Alerting with actions in SIEM Detection Rules](https://discuss.elastic.co/t/alerting-with-actions-in-siem-detection-rules/221595)
**Author:** [@Or\_Biran](https://discuss.elastic.co/u/Or_Biran)\ **Replies:** 3\ **Last updated:** [March 6, 2020, 9:47pm UTC](https://discuss.elastic.co/t/alerting-with-actions-in-siem-detection-rules/221595 "2020-03-06T21:47:04Z")
Hi, I'm trying to understand how can I add alerts with actions like Slack to the SIEM rules... The only way I found is to add a Watcher on the .siem indice.. but its not it, I want to get an actual alert to Slack with … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1585) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1587)