# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1613 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1614 --- ## [How to use maxbucket of serial difference in kibana?](https://discuss.elastic.co/t/how-to-use-maxbucket-of-serial-difference-in-kibana/220495)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 0\ **Last updated:** [February 22, 2020, 3:19pm UTC](https://discuss.elastic.co/t/how-to-use-maxbucket-of-serial-difference-in-kibana/220495 "2020-02-22T15:19:47Z")
I have the daily data with cumilative value, i want to do view the graph for the maximum in the week wise. in kiban vertical bar visulization, i have the option like serial diff of max bucket, but i have to use the max … --- ## [Logstash startup error in docker container](https://discuss.elastic.co/t/logstash-startup-error-in-docker-container/220479)
**Author:** [@sahar](https://discuss.elastic.co/u/sahar)\ **Replies:** 1\ **Last updated:** [February 22, 2020, 2:40pm UTC](https://discuss.elastic.co/t/logstash-startup-error-in-docker-container/220479 "2020-02-22T14:40:06Z")
Hello, I'm trying to run ELK for the first time inside a docker-container using the image sebp/elk and it seems to be failing to start with a clean installation on logstash in particular. These are the startup logs: e… --- ## [Logstash grok parse failure, while kibana grok debugger works fine](https://discuss.elastic.co/t/logstash-grok-parse-failure-while-kibana-grok-debugger-works-fine/220485)
**Author:** [@sahar](https://discuss.elastic.co/u/sahar)\ **Replies:** 1\ **Last updated:** [February 22, 2020, 2:38pm UTC](https://discuss.elastic.co/t/logstash-grok-parse-failure-while-kibana-grok-debugger-works-fine/220485 "2020-02-22T14:38:47Z")
Hello, I tested a certain pattern in kibana debugger: As you can see, it works fine, but when sending the same log to logstash I always end up getting grok parse failure, how can I check what the issue is...? This i… --- ## [Is ElasticSearch meant for long term storage of large datasets?](https://discuss.elastic.co/t/is-elasticsearch-meant-for-long-term-storage-of-large-datasets/220477)
**Author:** [@Basman](https://discuss.elastic.co/u/Basman)\ **Replies:** 2\ **Last updated:** [February 22, 2020, 1:34pm UTC](https://discuss.elastic.co/t/is-elasticsearch-meant-for-long-term-storage-of-large-datasets/220477 "2020-02-22T13:34:16Z")
I have users that all have hundreds of GB’s of documents (pdf, word, etc). I want to use Elastic with the ingest-attachment plugin to make the plaintext contents of these documents searchable. It’s unlikely these documen… --- ## [Ogstash.javapipeline \]\[main\] Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\ **Author:** [@saidjon](https://discuss.elastic.co/u/saidjon)\ **Replies:** 6\ **Last updated:** [February 22, 2020, 12:21pm UTC](https://discuss.elastic.co/t/ogstash-javapipeline-main-pipeline-aborted-due-to-error-pipeline-id-main-exception-logstash-unexpected-character-code-60-expected-a-valid-value-number-string-array-object-true-false-or-null/220465 "2020-02-22T12:21:26Z") hi there . im trying to import data to elastic cloud but getting this error . my conf file looks like this \ input{ file{ path =\> "/home/saidjon/Downloads/big\_data/urbandict-word-defs.csv" start\_position =\>… --- ## [Help with Boolean query](https://discuss.elastic.co/t/help-with-boolean-query/220483)
**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\ **Replies:** 0\ **Last updated:** [February 22, 2020, 12:05pm UTC](https://discuss.elastic.co/t/help-with-boolean-query/220483 "2020-02-22T12:05:08Z")
Hi, I am currently using the following query - { "\_source": \[ "title", "bench", "id\_", "court", "date", "content" \], "size": 15, "from": 0, "query": {… --- ## [Interested to contribute to EUI for GSoC 2020](https://discuss.elastic.co/t/interested-to-contribute-to-eui-for-gsoc-2020/220383)
**Author:** [@RisingGeek](https://discuss.elastic.co/u/RisingGeek)\ **Replies:** 2\ **Last updated:** [February 22, 2020, 11:51am UTC](https://discuss.elastic.co/t/interested-to-contribute-to-eui-for-gsoc-2020/220383 "2020-02-22T11:51:56Z")
Hi, I am Bhavay Puri. I would love to contribute to Elastic as part of GSoC 2020. I am interested in the following project idea: https://github.com/elastic/gsoc#playground--toggle-system-for-live-documentation Can anyo… --- ## [\[Query\] Count exist field in elasticsearch](https://discuss.elastic.co/t/query-count-exist-field-in-elasticsearch/220475)
**Author:** [@nathlee](https://discuss.elastic.co/u/nathlee)\ **Replies:** 0\ **Last updated:** [February 22, 2020, 9:07am UTC](https://discuss.elastic.co/t/query-count-exist-field-in-elasticsearch/220475 "2020-02-22T09:07:19Z")
Hi, I have 2 indices which store logs of two events. Now I want to find how many percents user do event A continue do event B so I count userIDs in index A and I want to count userIDs in index B that exist in index A (I… --- ## [Ruby exception occurred: undefined method \`/' for nil:NilClass](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-nil-nilclass/220338)
**Author:** [@Huy\_Le1](https://discuss.elastic.co/u/Huy_Le1)\ **Replies:** 2\ **Last updated:** [February 22, 2020, 7:38am UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-nil-nilclass/220338 "2020-02-22T07:38:36Z")
I configured my logstash exactly the same as filter { if "modsecurity" in \[tags\] { ruby { code =\> " if !event.get('message').nil? modSecSectionData = event.get('message').split(/(?:--… --- ## [Java High Level Rest Create Index API](https://discuss.elastic.co/t/java-high-level-rest-create-index-api/218517)
**Author:** [@andrewmk](https://discuss.elastic.co/u/andrewmk)\ **Replies:** 2\ **Last updated:** [February 22, 2020, 3:42am UTC](https://discuss.elastic.co/t/java-high-level-rest-create-index-api/218517 "2020-02-22T03:42:49Z")
I'm getting the error: Type mismatch: cannot convert from org.elasticsearch.action.admin.indices.create.CreateIndexResponse to org.elasticsearch.client.indices.CreateIndexResponse CreateIndexRequest request = new Creat… --- ## [Logstash date filter match pattern](https://discuss.elastic.co/t/logstash-date-filter-match-pattern/220458)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 3\ **Last updated:** [February 22, 2020, 12:40am UTC](https://discuss.elastic.co/t/logstash-date-filter-match-pattern/220458 "2020-02-22T00:40:23Z")
Hi, I have a logstash config that pulls from jdbc and pushes it to elasticsearch based on the select statement where my tracking column is an attribute mod\_dttm (Example: 23-JAN-20 12.23.28.771000000 PM). So, I created… --- ## [Csv filter match date field](https://discuss.elastic.co/t/csv-filter-match-date-field/220428)
**Author:** [@david.derosa](https://discuss.elastic.co/u/david.derosa)\ **Replies:** 4\ **Last updated:** [February 21, 2020, 11:04pm UTC](https://discuss.elastic.co/t/csv-filter-match-date-field/220428 "2020-02-21T23:04:05Z")
I am trying to parse e csv. All works fine except for date field. This is the format: 2020-02-21 18:25:37.254774 and this is my date code: date { match =\> \["date", "yyyy-MM-dd HH:mm:ss.SSS"\] target =\> "@times… --- ## [All @timestamp are in UCT time](https://discuss.elastic.co/t/all-timestamp-are-in-uct-time/220449)
**Author:** [@jwalls](https://discuss.elastic.co/u/jwalls)\ **Replies:** 2\ **Last updated:** [February 21, 2020, 10:56pm UTC](https://discuss.elastic.co/t/all-timestamp-are-in-uct-time/220449 "2020-02-21T22:56:58Z")
I have set in "advanced settings" under kibana to use US/Central time, yet all my timestamp fields are still showing UCT time. Does this require a restart of Kibana to go in effect or does it need to be changed at the ES… --- ## [Question around field mappings for siem / audit](https://discuss.elastic.co/t/question-around-field-mappings-for-siem-audit/220462)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 0\ **Last updated:** [February 21, 2020, 10:56pm UTC](https://discuss.elastic.co/t/question-around-field-mappings-for-siem-audit/220462 "2020-02-21T22:56:50Z")
Hello, first of all I don't really know if this should go into beats or logstash so I have added it here for now. We use logstash for the majority of our logs, mostly because we use a lot of log types that are not popul… --- ## [Interested to participate in GSOC-2020 for elastic / eui](https://discuss.elastic.co/t/interested-to-participate-in-gsoc-2020-for-elastic-eui/220310)
**Author:** [@Gambitier](https://discuss.elastic.co/u/Gambitier)\ **Replies:** 1\ **Last updated:** [February 21, 2020, 10:27pm UTC](https://discuss.elastic.co/t/interested-to-participate-in-gsoc-2020-for-elastic-eui/220310 "2020-02-21T22:27:26Z")
Hi, I am Akash Jadhav. I am interested in GSOC-2020 for elastic eui/ eui project. I will have a look at good first issues. Apart from that what else should I know to get started with? --- ## [Interested to Contribute to EUI for GSoC-2020](https://discuss.elastic.co/t/interested-to-contribute-to-eui-for-gsoc-2020/220376)
**Author:** [@Jimil\_Desai](https://discuss.elastic.co/u/Jimil_Desai)\ **Replies:** 1\ **Last updated:** [February 21, 2020, 10:23pm UTC](https://discuss.elastic.co/t/interested-to-contribute-to-eui-for-gsoc-2020/220376 "2020-02-21T22:23:14Z")
Greetings, I am Jimil Desai, sophomore at School of Engineering and Applied Science, Ahmedabad University pursuing Bachelors in ICT. I am here for the opportunity to grow as a developer. I'm looking forward to contribut… --- ## [Contribute for GSOC 2020](https://discuss.elastic.co/t/contribute-for-gsoc-2020/220386)
**Author:** [@Dilshaad21](https://discuss.elastic.co/u/Dilshaad21)\ **Replies:** 1\ **Last updated:** [February 21, 2020, 10:22pm UTC](https://discuss.elastic.co/t/contribute-for-gsoc-2020/220386 "2020-02-21T22:22:13Z")
Hi, I'm Dilshaad, an undergraduate in Computer science and engineering from Indian Institute of Technology Mandi. I have good experience working with technologies Reactjs, Redux and Nodejs. I want to work on the idea: t… --- ## [7.6.0 with AdoptOpenJDK 13](https://discuss.elastic.co/t/7-6-0-with-adoptopenjdk-13/220053)
**Author:** [@nealef](https://discuss.elastic.co/u/nealef)\ **Replies:** 2\ **Last updated:** [February 21, 2020, 10:19pm UTC](https://discuss.elastic.co/t/7-6-0-with-adoptopenjdk-13/220053 "2020-02-21T22:19:17Z")
I built elasticsearch-oss 7.6.0 cleanly using AdoptOpenJDK 13. However, when I start it I get: org.elasticsearch.transport.BindTransportException: Failed to bind to \[9300-9400\] at org.elasticsearch.transport.Tcp… --- ## [SIEM App does not display Hostnames from Beats Events](https://discuss.elastic.co/t/siem-app-does-not-display-hostnames-from-beats-events/220330)
**Author:** [@cknoell](https://discuss.elastic.co/u/cknoell)\ **Replies:** 5\ **Last updated:** [February 21, 2020, 10:12pm UTC](https://discuss.elastic.co/t/siem-app-does-not-display-hostnames-from-beats-events/220330 "2020-02-21T22:12:36Z")
Hi, we have some problems using the SIEM App and Displaying Hostnames on the Hosts Page if it comes to a setup where you use: Beats -\> Logstash -\> Logstash -\> Elastic All components are using up to date V7.6.0 Beats… --- ## [Adding a link to dashboard](https://discuss.elastic.co/t/adding-a-link-to-dashboard/220409)
**Author:** [@Monah\_Baki](https://discuss.elastic.co/u/Monah_Baki)\ **Replies:** 2\ **Last updated:** [February 21, 2020, 9:09pm UTC](https://discuss.elastic.co/t/adding-a-link-to-dashboard/220409 "2020-02-21T21:09:18Z")
Hi all, I am new to Kibana, and I cloned the "Beats" link in Kibana's dashboard, and was wandering how to have the new link displayed in the Dashboard. Thanks Monah --- ## [Error loading data - Request to Elasticsearch failed](https://discuss.elastic.co/t/error-loading-data-request-to-elasticsearch-failed/217629)
**Author:** [@Gelinski](https://discuss.elastic.co/u/Gelinski)\ **Replies:** 6\ **Last updated:** [February 21, 2020, 9:02pm UTC](https://discuss.elastic.co/t/error-loading-data-request-to-elasticsearch-failed/217629 "2020-02-21T21:02:43Z")
Hi, I need help to understand what is causing this error in my environment. Tks! Error loading data Request to Elasticsearch failed: {"error":{}} Error: Request to Elasticsearch failed: {"error":{}} at http://elk… --- ## [ES 7.0.1 : Unassigned Shards : Clarifications on how reroute API with retry\_failed parameter works and its side-effects](https://discuss.elastic.co/t/es-7-0-1-unassigned-shards-clarifications-on-how-reroute-api-with-retry-failed-parameter-works-and-its-side-effects/219740)
**Author:** [@Muthukumaran\_Kothand](https://discuss.elastic.co/u/Muthukumaran_Kothand)\ **Replies:** 5\ **Last updated:** [February 21, 2020, 7:57pm UTC](https://discuss.elastic.co/t/es-7-0-1-unassigned-shards-clarifications-on-how-reroute-api-with-retry-failed-parameter-works-and-its-side-effects/219740 "2020-02-21T19:57:52Z")
ES Version : 7.0.1 Cluster Details: 3 physical nodes each running 4 instances of ES - total 12 instances of Cluster Problem description: As part of testing, performed a full cluster-reboot, noticed that some shards (… --- ## [Indexing double nested relation using logstash](https://discuss.elastic.co/t/indexing-double-nested-relation-using-logstash/220447)
**Author:** [@Louie\_Sota](https://discuss.elastic.co/u/Louie_Sota)\ **Replies:** 0\ **Last updated:** [February 21, 2020, 7:54pm UTC](https://discuss.elastic.co/t/indexing-double-nested-relation-using-logstash/220447 "2020-02-21T19:54:09Z")
Hello there, I'm configuring to use logstash to index all the data I've got in the database, and I'm currently having problems trying to find a solution for what I'm doing. I'm trying to join 3 tables together, to crea… --- ## [Maps not able to read fetch geoip coordinates](https://discuss.elastic.co/t/maps-not-able-to-read-fetch-geoip-coordinates/220445)
**Author:** [@saiteja](https://discuss.elastic.co/u/saiteja)\ **Replies:** 1\ **Last updated:** [February 21, 2020, 7:41pm UTC](https://discuss.elastic.co/t/maps-not-able-to-read-fetch-geoip-coordinates/220445 "2020-02-21T19:41:54Z")
Hello i am using grok pattern to get ip from logs for maps it is not able to fetch values my index pattern is not showing in maps. grok { match =\> \[ "message", "%{IP:clientip} %{USER:ident} %{DATA:auth} \\\[%{HTTPDATE… --- ## [Template ERROR reason: Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/template-error-reason-root-mapping-definition-has-unsupported-parameters/220411)
**Author:** [@Rama\_Krishna\_S](https://discuss.elastic.co/u/Rama_Krishna_S)\ **Replies:** 1\ **Last updated:** [February 21, 2020, 7:16pm UTC](https://discuss.elastic.co/t/template-error-reason-root-mapping-definition-has-unsupported-parameters/220411 "2020-02-21T19:16:20Z")
unable to create template following is my template. #! Deprecation: \[types removal\] The parameter include\_type\_name should be explicitly specified in get template requests to prepare for 7.0. In 7.0 include\_type\_name wi… --- ## [Error with manage\_template on multiple elasticsearch outputs](https://discuss.elastic.co/t/error-with-manage-template-on-multiple-elasticsearch-outputs/220435)
**Author:** [@tmccoy](https://discuss.elastic.co/u/tmccoy)\ **Replies:** 0\ **Last updated:** [February 21, 2020, 6:17pm UTC](https://discuss.elastic.co/t/error-with-manage-template-on-multiple-elasticsearch-outputs/220435 "2020-02-21T18:17:19Z")
Hi, thanks in advance for your assistance! Description: I have an output configuration where I am using an if statement to select an output to elasticsearch, essentially I want to index documents into an index dependin… --- ## [Http input on different pipeline breaks beats pipeline](https://discuss.elastic.co/t/http-input-on-different-pipeline-breaks-beats-pipeline/220416)
**Author:** [@dris](https://discuss.elastic.co/u/dris)\ **Replies:** 1\ **Last updated:** [February 21, 2020, 6:25pm UTC](https://discuss.elastic.co/t/http-input-on-different-pipeline-breaks-beats-pipeline/220416 "2020-02-21T18:25:37Z")
I have two pipelines for logstash: beats http When I only use beats, everything works fine, data comes in as it should. However, when I turn on the http pipeline, http starts fine, but beats throws this error: :excep… --- ## ["Your trial license is expired"](https://discuss.elastic.co/t/your-trial-license-is-expired/217361)
**Author:** [@yoavb](https://discuss.elastic.co/u/yoavb)\ **Replies:** 4\ **Last updated:** [February 21, 2020, 6:17pm UTC](https://discuss.elastic.co/t/your-trial-license-is-expired/217361 "2020-02-21T18:17:54Z")
I am getting the following message : \[2020-01-31T11:42:39,671\]\[ERROR\]\[o.e.x.s.a.f.SecurityActionFilter\] \[elk74\] blocking \[cluster:monitor/stats\] operation due to expired license. I have run : curl -uelastic -XPOST 'h… --- ## [Logstash syslog output ignores message](https://discuss.elastic.co/t/logstash-syslog-output-ignores-message/220434)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 0\ **Last updated:** [February 21, 2020, 6:16pm UTC](https://discuss.elastic.co/t/logstash-syslog-output-ignores-message/220434 "2020-02-21T18:16:10Z")
Hi, logstash syslog output is ignoring the message y configure and adds something "%{host}" in the message, dont know what may be wrong. I have 2 servers, one with filebeat 1.3.1 reading apache logs and shipping them to… --- ## [How to access \_resource in context?](https://discuss.elastic.co/t/how-to-access-resource-in-context/219284)
**Author:** [@gunjan\_prmr](https://discuss.elastic.co/u/gunjan_prmr)\ **Replies:** 7\ **Last updated:** [February 21, 2020, 6:03pm UTC](https://discuss.elastic.co/t/how-to-access-resource-in-context/219284 "2020-02-21T18:03:31Z")
I have set up alert in Kibana for slack notification which works fine. I can access my trigger name by {{ ctx.trigger.name }} I want to access \_source but I don't see that in ctx. How can I access that? Detailed In… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1612) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1614)