# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1610 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1611 --- ## [Logstash + pfsense issues](https://discuss.elastic.co/t/logstash-pfsense-issues/220723)
**Author:** [@artson](https://discuss.elastic.co/u/artson)\ **Replies:** 0\ **Last updated:** [February 24, 2020, 8:46pm UTC](https://discuss.elastic.co/t/logstash-pfsense-issues/220723 "2020-02-24T20:46:23Z")
hi everyone i try to see the logs from pfsense in kibana but i think i miss something with the configuration files, i cant find the index logstash-\* on kibana maybe someone can help with that? this is the first file : #… --- ## [How to create a dashboard for a key instead of a value](https://discuss.elastic.co/t/how-to-create-a-dashboard-for-a-key-instead-of-a-value/220425)
**Author:** [@Goishin](https://discuss.elastic.co/u/Goishin)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 8:16pm UTC](https://discuss.elastic.co/t/how-to-create-a-dashboard-for-a-key-instead-of-a-value/220425 "2020-02-24T20:16:49Z")
I'm trying to create a dashboard for a key instead of a value in my index. I might have the wrong index. I'd appreciate advice on this. My kibana instance takes in test pass data. We use TestNG and when I set up my inde… --- ## [Custom sequence numbers for partial updates](https://discuss.elastic.co/t/custom-sequence-numbers-for-partial-updates/220459)
**Author:** [@shreedhan](https://discuss.elastic.co/u/shreedhan)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 7:52pm UTC](https://discuss.elastic.co/t/custom-sequence-numbers-for-partial-updates/220459 "2020-02-24T19:52:07Z")
Hi, I'm reading about partial updates and found that we cannot use external version with partial updates. However, I see that ES has introduced seq\_no and primary\_term for concurrency control. I see that seq\_no is auto… --- ## [GSOC'20 Elastic Live Documentation](https://discuss.elastic.co/t/gsoc20-elastic-live-documentation/220563)
**Author:** [@shivang2k](https://discuss.elastic.co/u/shivang2k)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 7:08pm UTC](https://discuss.elastic.co/t/gsoc20-elastic-live-documentation/220563 "2020-02-24T19:08:01Z")
Hello! My self Shivang Ahuja. I saw the proposed project about making the documentation of Elastic interactive. I am really interested in this project. I have a few questions regarding the same. Should we implement … --- ## [Fewer privilege in Index Management than monitor(c), view\_index\_metadata(i) and manage(i)](https://discuss.elastic.co/t/fewer-privilege-in-index-management-than-monitor-c-view-index-metadata-i-and-manage-i/220373)
**Author:** [@KTH](https://discuss.elastic.co/u/KTH)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 6:50pm UTC](https://discuss.elastic.co/t/fewer-privilege-in-index-management-than-monitor-c-view-index-metadata-i-and-manage-i/220373 "2020-02-24T18:50:41Z")
Hi. I have set monitor role for Cluster privilege, then view\_index\_metadata and manage privilege for Indice. It works great. Now I would like to set it fewer privilege, so that manage-button at bottom right and "Edit S… --- ## [Elasticsearch warm node CPU spike while search query](https://discuss.elastic.co/t/elasticsearch-warm-node-cpu-spike-while-search-query/220711)
**Author:** [@Aditya\_Srivastava](https://discuss.elastic.co/u/Aditya_Srivastava)\ **Replies:** 0\ **Last updated:** [February 24, 2020, 6:44pm UTC](https://discuss.elastic.co/t/elasticsearch-warm-node-cpu-spike-while-search-query/220711 "2020-02-24T18:44:33Z")
Hi, I have Elastic Stack v7.4 installed on cloud. I have 8 nodes (3-master, 3-Hot, 2-Warm) ILM policy is in place which keeps one month recent data in hot node and the remaining in warm data node. Now when I do a quer… --- ## [Communication between the plugins](https://discuss.elastic.co/t/communication-between-the-plugins/220369)
**Author:** [@vvvprabhakar](https://discuss.elastic.co/u/vvvprabhakar)\ **Replies:** 3\ **Last updated:** [February 24, 2020, 6:41pm UTC](https://discuss.elastic.co/t/communication-between-the-plugins/220369 "2020-02-24T18:41:54Z")
Kibana version 6.1 we have default core plugin 'elasticsearch' I wrote my own plugin 'project-auth' here I have a userId which I encrypted it and set to cookie In every request of my elasticsearch I want this userId t… --- ## [Deleting Elastic search index deleted kibana idexes and dashboard](https://discuss.elastic.co/t/deleting-elastic-search-index-deleted-kibana-idexes-and-dashboard/220307)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 6:17pm UTC](https://discuss.elastic.co/t/deleting-elastic-search-index-deleted-kibana-idexes-and-dashboard/220307 "2020-02-24T18:17:30Z")
Hi , Version - ELK 7.1.0 Cluster - Single node ELK cluster installed in AWS VM Issue - deleted the elastic search index deleted kibana index and dashboard I have used below command to delete elastic search index c… --- ## [Conditional math expression in TSVB](https://discuss.elastic.co/t/conditional-math-expression-in-tsvb/220703)
**Author:** [@tshayan](https://discuss.elastic.co/u/tshayan)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 5:55pm UTC](https://discuss.elastic.co/t/conditional-math-expression-in-tsvb/220703 "2020-02-24T17:55:54Z")
Hello, I am just curious if it would be possible to write a conditional statement inside the expression editor of the TSVB Math aggregation. For instance, consider I have an aggregation in TSVB metric which calculates a… --- ## [Cross Cluster Search - Intermittant Failures](https://discuss.elastic.co/t/cross-cluster-search-intermittant-failures/218379)
**Author:** [@chris.murray](https://discuss.elastic.co/u/chris.murray)\ **Replies:** 16\ **Last updated:** [February 24, 2020, 5:54pm UTC](https://discuss.elastic.co/t/cross-cluster-search-intermittant-failures/218379 "2020-02-24T17:54:55Z")
I have an Elasticsearch setup at 5 physical sites. Kibana is installed at two of them, and I've configured cross-cluster search to enable searching data at the other locations. Each Kibana instance is separate, with se… --- ## [java.lang.IllegalStateException: Logstash stopped processing because of an error: (LoadError) load error: ffi/ffi -- java.lang.NullPointerException: null](https://discuss.elastic.co/t/java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-loaderror-load-error-ffi-ffi-java-lang-nullpointerexception-null/220706)
**Author:** [@eng.lucianamendes](https://discuss.elastic.co/u/eng.lucianamendes)\ **Replies:** 0\ **Last updated:** [February 24, 2020, 5:48pm UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-loaderror-load-error-ffi-ffi-java-lang-nullpointerexception-null/220706 "2020-02-24T17:48:04Z")
I install Logstash 7.6.0 in Raspiberry Pi with OS Rasbian. When I execute a command line: ./logstash -e 'input {stdin {}} output {stdout {}}', the Logstash stopped work. --- ## [How to link Kibana URL for log in Alert?](https://discuss.elastic.co/t/how-to-link-kibana-url-for-log-in-alert/220432)
**Author:** [@gunjan\_prmr](https://discuss.elastic.co/u/gunjan_prmr)\ **Replies:** 3\ **Last updated:** [February 24, 2020, 5:19pm UTC](https://discuss.elastic.co/t/how-to-link-kibana-url-for-log-in-alert/220432 "2020-02-24T17:19:42Z")
I have an alert where I am sending certain data from log in alert which is working as expected. What I want to do is, I also want to include URL in alert but not sure about one particular id. i.e. http://MY-URL.com/\_plu… --- ## [Uptime displaying cumulative number of up and down monitors](https://discuss.elastic.co/t/uptime-displaying-cumulative-number-of-up-and-down-monitors/219025)
**Author:** [@bwright1558](https://discuss.elastic.co/u/bwright1558)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 5:08pm UTC](https://discuss.elastic.co/t/uptime-displaying-cumulative-number-of-up-and-down-monitors/219025 "2020-02-24T17:08:53Z")
After upgrading Elasticsearch and Kibana to version 7.6.0, Uptime is now displaying the cumulative counts for up and down monitors. My 600+ HTTP heartbeat monitors run once every 2 hours. When I filter by downed monitors… --- ## [Return task id when submitting a POST request](https://discuss.elastic.co/t/return-task-id-when-submitting-a-post-request/220697)
**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\ **Replies:** 0\ **Last updated:** [February 24, 2020, 5:03pm UTC](https://discuss.elastic.co/t/return-task-id-when-submitting-a-post-request/220697 "2020-02-24T17:03:38Z")
Hello, How do I return the TASK ID when submitting a POST request like: POST \_reindex?requests\_per\_second=115&wait\_for\_completion=true { "source": { "index": "elb-2020.01.\*", "size": 500 }, "dest": { … --- ## [Voir les fields en commun avec kibana](https://discuss.elastic.co/t/voir-les-fields-en-commun-avec-kibana/220500)
**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 5:02pm UTC](https://discuss.elastic.co/t/voir-les-fields-en-commun-avec-kibana/220500 "2020-02-24T17:02:33Z")
Bonjour, Je vais commencer par expliquer la situation: J'ai un champ avec le nom de la personne qui parle et un champ avec le nom de la personne à qui il parle. ex: "parle":"robert","ecoute":"patrick" J'aimerai mettr… --- ## [Watcher, X amount of logs, per X host per hour](https://discuss.elastic.co/t/watcher-x-amount-of-logs-per-x-host-per-hour/220674)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 4:43pm UTC](https://discuss.elastic.co/t/watcher-x-amount-of-logs-per-x-host-per-hour/220674 "2020-02-24T16:43:05Z")
Hello, I have been fighting with this for a few hours now and just can't get an alert that works. I want to basically find out when a host is spamming syslog, so I have a watcher like so: { "trigger": { "schedule… --- ## [Add field date problem](https://discuss.elastic.co/t/add-field-date-problem/220665)
**Author:** [@samargh](https://discuss.elastic.co/u/samargh)\ **Replies:** 3\ **Last updated:** [February 24, 2020, 4:37pm UTC](https://discuss.elastic.co/t/add-field-date-problem/220665 "2020-02-24T16:37:31Z")
i used this code to add a new column with a specific date mutate { add\_field =\> {"D"=\> \["2020-01-01"\]} } it gives me the date but its adding minutes and hours Jan 1, 2020 @ 01:00:00.000 so is it normal ?? but i wan… --- ## [Elastic search URI search to query object](https://discuss.elastic.co/t/elastic-search-uri-search-to-query-object/220367)
**Author:** [@arjun\_kumar](https://discuss.elastic.co/u/arjun_kumar)\ **Replies:** 7\ **Last updated:** [February 24, 2020, 4:37pm UTC](https://discuss.elastic.co/t/elastic-search-uri-search-to-query-object/220367 "2020-02-24T16:37:22Z")
GET twitter/\_search?q="11|2019|myName:user|testname|5b2b18f2-54ab-11ea-a2e3-2e728ce88125|A|M|testuser" when I run the above query able to get the exact results even I tried GET twitter/\_search?q="11|2019|myName:user|t… --- ## [Visualizing maps on Kibana in logstash originated data, when I already HAVE the geo information](https://discuss.elastic.co/t/visualizing-maps-on-kibana-in-logstash-originated-data-when-i-already-have-the-geo-information/220677)
**Author:** [@GenXJason](https://discuss.elastic.co/u/GenXJason)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 4:36pm UTC](https://discuss.elastic.co/t/visualizing-maps-on-kibana-in-logstash-originated-data-when-i-already-have-the-geo-information/220677 "2020-02-24T16:36:23Z")
Hey there, I have a Django implementation that logs into Logstash. I already send the geographical information to logstash. I do not need it to convert IP addresses to geo-information. Here's a sample of what I send (… --- ## [Rsyslog input : Any way to disable severity and severity label?](https://discuss.elastic.co/t/rsyslog-input-any-way-to-disable-severity-and-severity-label/220480)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 5\ **Last updated:** [February 24, 2020, 4:06pm UTC](https://discuss.elastic.co/t/rsyslog-input-any-way-to-disable-severity-and-severity-label/220480 "2020-02-24T16:06:29Z")
Hello guys, I noticed that some logs I collect have a field "severity" (ips logs). This is in conflict with the field "severity" which is related to my syslog input : severity of syslog is long and severity of ips logs … --- ## [Interested to contribute towards EUI for GSOC-2020](https://discuss.elastic.co/t/interested-to-contribute-towards-eui-for-gsoc-2020/220533)
**Author:** [@jayanthj737](https://discuss.elastic.co/u/jayanthj737)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 3:53pm UTC](https://discuss.elastic.co/t/interested-to-contribute-towards-eui-for-gsoc-2020/220533 "2020-02-24T15:53:32Z")
Really excited and looking forward towards open source environment. Please guide me through what is to be done and how to proceed. :slight\_smile: --- ## [New to ELk](https://discuss.elastic.co/t/new-to-elk/220686)
**Author:** [@oumy](https://discuss.elastic.co/u/oumy)\ **Replies:** 0\ **Last updated:** [February 24, 2020, 3:28pm UTC](https://discuss.elastic.co/t/new-to-elk/220686 "2020-02-24T15:28:09Z")
Hello everyone, I am new to Elk, I am trying to build a SIEM with it, and it would be helpful if i know the architecture i can use, the parser i would need, And if it possible to add logrhythm Netmon for network monito… --- ## [Synonym list combined with wildcards got no more results](https://discuss.elastic.co/t/synonym-list-combined-with-wildcards-got-no-more-results/220683)
**Author:** [@JoeLiMo](https://discuss.elastic.co/u/JoeLiMo)\ **Replies:** 0\ **Last updated:** [February 24, 2020, 3:14pm UTC](https://discuss.elastic.co/t/synonym-list-combined-with-wildcards-got-no-more-results/220683 "2020-02-24T15:14:59Z")
Hi, I hope anyone could help us to develop the right way to solve our little problems with synonyms and wildcards in elastic search. We are using a synonym list at our search to identified all relevant typings of users… --- ## [Prevent logstash from reading file from beginning when restarted](https://discuss.elastic.co/t/prevent-logstash-from-reading-file-from-beginning-when-restarted/220682)
**Author:** [@akwoprosper](https://discuss.elastic.co/u/akwoprosper)\ **Replies:** 0\ **Last updated:** [February 24, 2020, 3:13pm UTC](https://discuss.elastic.co/t/prevent-logstash-from-reading-file-from-beginning-when-restarted/220682 "2020-02-24T15:13:14Z")
Hi everyone, I don't understand why Logstash does not continue reading a file from where it left off when restarted. Following is my input plugin configuration: input { file{ path=\>"/data/backup/recovery-data/QUICKS… --- ## [Cannot run ElasticSearch-7.5.0 on Linux(SUSE)](https://discuss.elastic.co/t/cannot-run-elasticsearch-7-5-0-on-linux-suse/220333)
**Author:** [@elabedouss](https://discuss.elastic.co/u/elabedouss)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 3:01pm UTC](https://discuss.elastic.co/t/cannot-run-elasticsearch-7-5-0-on-linux-suse/220333 "2020-02-24T15:01:28Z")
I am trying to run ES on my server, and I got this error: Exception in thread "main" java.lang.UnsupportedClassVersionError: org/elasticsearch/tools/java\_version\_checker/JavaVersionChecker : Unsupported major.minor vers… --- ## [Increase no of shared not working (template update)](https://discuss.elastic.co/t/increase-no-of-shared-not-working-template-update/220429)
**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 3:01pm UTC](https://discuss.elastic.co/t/increase-no-of-shared-not-working-template-update/220429 "2020-02-24T15:01:20Z")
Hi, I have 3 master nodes and 3 data nodes running in elk. Beats sends logs to log stash and then to elk. The index name created from log stash o/p like below. elasticsearch { hosts =\> \["http://host1:9200","http://ho… --- ## [Aggregation that multiplies averages](https://discuss.elastic.co/t/aggregation-that-multiplies-averages/220680)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 0\ **Last updated:** [February 24, 2020, 2:53pm UTC](https://discuss.elastic.co/t/aggregation-that-multiplies-averages/220680 "2020-02-24T14:53:24Z")
Hello, With following dataset: area type result bld1 inspection 1 bld1 inspection 1 bld1 inspection 0 bld1 packing 1 bld1 packing 0 bld1 packing 0 bld1 inspection 1 bld1 packing 0 I would like to visualize a metr… --- ## [Log4j Configuration](https://discuss.elastic.co/t/log4j-configuration/220565)
**Author:** [@dtapia](https://discuss.elastic.co/u/dtapia)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 2:52pm UTC](https://discuss.elastic.co/t/log4j-configuration/220565 "2020-02-24T14:52:19Z")
I need to edit the log4j configuration in log4j.properties, the file is editible if I exec into it but the changes dont persist accross pod restarts. Is there a way to configure this through the operator or a yaml file? --- ## [Uptime (Monitor Status) doesn't show my 22 services (show randonly) but not the total](https://discuss.elastic.co/t/uptime-monitor-status-doesnt-show-my-22-services-show-randonly-but-not-the-total/218988)
**Author:** [@rafaelcassau](https://discuss.elastic.co/u/rafaelcassau)\ **Replies:** 9\ **Last updated:** [February 24, 2020, 2:48pm UTC](https://discuss.elastic.co/t/uptime-monitor-status-doesnt-show-my-22-services-show-randonly-but-not-the-total/218988 "2020-02-24T14:48:42Z")
I've configured heart-beat and uptime in the elastic stack cloud, but after I've added my 22 endpoints I noticed that the sections "All monitors are up" and "Pings over time" are work correctly but the section "Monitor S… --- ## [Install Cluster of Elasticsearch on EC2 AWS](https://discuss.elastic.co/t/install-cluster-of-elasticsearch-on-ec2-aws/220494)
**Author:** [@Miguel\_Plazas](https://discuss.elastic.co/u/Miguel_Plazas)\ **Replies:** 8\ **Last updated:** [February 24, 2020, 2:45pm UTC](https://discuss.elastic.co/t/install-cluster-of-elasticsearch-on-ec2-aws/220494 "2020-02-24T14:45:02Z")
Hi, currently I'm trying to deploy a cluster with 3 nodes on EC2 AWS. The configuration is the following: #master node cluster.name: woombat node.name: node1 node.master: true bootstrap.memory\_lock: true discovery.zen.h… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1609) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1611)