# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1625 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1626 --- ## [Send many alert mail according motif error define in file error in my fied message](https://discuss.elastic.co/t/send-many-alert-mail-according-motif-error-define-in-file-error-in-my-fied-message/219491)
**Author:** [@reneroy](https://discuss.elastic.co/u/reneroy)\ **Replies:** 1\ **Last updated:** [February 15, 2020, 11:58pm UTC](https://discuss.elastic.co/t/send-many-alert-mail-according-motif-error-define-in-file-error-in-my-fied-message/219491 "2020-02-15T23:58:02Z")
Hello ; please ; i have a basic licence ; is not have option alerting (Watcher); i want to configure my logtash to send many mails alerts to users according the file error where i am registre my differents error ; i… --- ## [Filter Error logs only](https://discuss.elastic.co/t/filter-error-logs-only/218701)
**Author:** [@Adam\_Songambele](https://discuss.elastic.co/u/Adam_Songambele)\ **Replies:** 14\ **Last updated:** [February 15, 2020, 10:20pm UTC](https://discuss.elastic.co/t/filter-error-logs-only/218701 "2020-02-15T22:20:26Z")
Hi, i am still very new to the ELK stack and i am wondering how can i filter only error logs through logstash? i am currently feeding application, security and system logs into Logstash. below is my configuration for l… --- ## [Kibana plugin needs to add "requestHeadersWhitelist" programmatically](https://discuss.elastic.co/t/kibana-plugin-needs-to-add-requestheaderswhitelist-programmatically/219489)
**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\ **Replies:** 0\ **Last updated:** [February 15, 2020, 6:21pm UTC](https://discuss.elastic.co/t/kibana-plugin-needs-to-add-requestheaderswhitelist-programmatically/219489 "2020-02-15T18:21:04Z")
Hello, In order to work correctly and as expected, my plugin (sometimes) needs to add a few extra headers to the white list so that they will be forwarded to Elasticsearch. Is there a way to do this in the new platfor… --- ## [How to Contribute to Elastic's Active projects?](https://discuss.elastic.co/t/how-to-contribute-to-elastics-active-projects/219462)
**Author:** [@aryamanpuri](https://discuss.elastic.co/u/aryamanpuri)\ **Replies:** 2\ **Last updated:** [February 15, 2020, 5:15pm UTC](https://discuss.elastic.co/t/how-to-contribute-to-elastics-active-projects/219462 "2020-02-15T17:15:28Z")
Hi , I am Aryaman Puri ,Sophomore , looking to contribute to this organisation as a part of Gsoc 2020 and learning . I am intersted in this project idea https://github.com/elastic/gsoc/blob/master/readme.md#playground--t… --- ## [Configuring Kafka Input with SASL PLAINTEXT auth](https://discuss.elastic.co/t/configuring-kafka-input-with-sasl-plaintext-auth/219485)
**Author:** [@chadskidmore](https://discuss.elastic.co/u/chadskidmore)\ **Replies:** 0\ **Last updated:** [February 15, 2020, 4:51pm UTC](https://discuss.elastic.co/t/configuring-kafka-input-with-sasl-plaintext-auth/219485 "2020-02-15T16:51:05Z")
Having some struggles getting kafka-input setup in logstash with SASL PLAINTEXT. Documentation seems to be largely non-existent. I did seem to get Beats sending data in to Kafka with this auth scheme. The input is prett… --- ## [Visualisation par plage horaire](https://discuss.elastic.co/t/visualisation-par-plage-horaire/219358)
**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\ **Replies:** 8\ **Last updated:** [February 15, 2020, 4:33pm UTC](https://discuss.elastic.co/t/visualisation-par-plage-horaire/219358 "2020-02-15T16:33:05Z")
Bonjour, J'aimerais mettre en place une visualisation qui me permettrai de voir, pour chaque plage horaire que je souhaites définir, le pourcentage d'activité sur cette plage horaire. Exemple avec 3 plages horaires : 8… --- ## [Passive deployment for log ingestion behind a TAP/SPAN/diode](https://discuss.elastic.co/t/passive-deployment-for-log-ingestion-behind-a-tap-span-diode/219481)
**Author:** [@m4rkus](https://discuss.elastic.co/u/m4rkus)\ **Replies:** 0\ **Last updated:** [February 15, 2020, 2:42pm UTC](https://discuss.elastic.co/t/passive-deployment-for-log-ingestion-behind-a-tap-span-diode/219481 "2020-02-15T14:42:50Z")
Hi, I would like to setup an ELK stack for passive log ingestion behind a TAP/SPAN/diode, from an existing log stream. Unfortunately I haven't been able to find any information about passive deployment. Can Logstash be… --- ## [Import Windows events stored as syslog in PCAPs](https://discuss.elastic.co/t/import-windows-events-stored-as-syslog-in-pcaps/219480)
**Author:** [@m4rkus](https://discuss.elastic.co/u/m4rkus)\ **Replies:** 0\ **Last updated:** [February 15, 2020, 2:29pm UTC](https://discuss.elastic.co/t/import-windows-events-stored-as-syslog-in-pcaps/219480 "2020-02-15T14:29:29Z")
Hi, I have PCAP files (hundreds of GB:s) with recorded syslog traffic (UDP/514) containing log events from Windows hosts. I would like to import and parse the data in an ELK stack. If possible, I would also like to pres… --- ## [Indexing the document is recommend approach](https://discuss.elastic.co/t/indexing-the-document-is-recommend-approach/219395)
**Author:** [@SivaPrasad\_Ampolu](https://discuss.elastic.co/u/SivaPrasad_Ampolu)\ **Replies:** 12\ **Last updated:** [February 15, 2020, 2:18pm UTC](https://discuss.elastic.co/t/indexing-the-document-is-recommend-approach/219395 "2020-02-15T14:18:33Z")
Hello, Is it recommended approach to store documents on elastic search? what if we extract keywords from document and creating index on those keywords( assumption is file path will stored index along with keywords phys… --- ## [Using payloads for scoring](https://discuss.elastic.co/t/using-payloads-for-scoring/219476)
**Author:** [@divyanshumarwah](https://discuss.elastic.co/u/divyanshumarwah)\ **Replies:** 0\ **Last updated:** [February 15, 2020, 12:13pm UTC](https://discuss.elastic.co/t/using-payloads-for-scoring/219476 "2020-02-15T12:13:06Z")
I am working on a research project in which I need to use some specific term weights for relevance score calculation. I have indexed the term weights as payloads along with the text and looks something like this : "Amer… --- ## [Rename fieldname in incoming logs](https://discuss.elastic.co/t/rename-fieldname-in-incoming-logs/219469)
**Author:** [@CyberSeppi](https://discuss.elastic.co/u/CyberSeppi)\ **Replies:** 1\ **Last updated:** [February 15, 2020, 11:42am UTC](https://discuss.elastic.co/t/rename-fieldname-in-incoming-logs/219469 "2020-02-15T11:42:10Z")
Hi All, we have now two different shippers sending logs to our es cluster (no logstash included). FileBeat is sending the log-message itself in field "message" and fluentbit (we have limited control over its configura… --- ## [Out of memory exception for coordinating nodes](https://discuss.elastic.co/t/out-of-memory-exception-for-coordinating-nodes/216538)
**Author:** [@deebify](https://discuss.elastic.co/u/deebify)\ **Replies:** 5\ **Last updated:** [February 15, 2020, 9:43am UTC](https://discuss.elastic.co/t/out-of-memory-exception-for-coordinating-nodes/216538 "2020-02-15T09:43:37Z")
I've a ES cluster 6.6.2 composed of 3 master, 4 datanodes, 2 coordinating nodes. 2 kibana instances connecting to 2 coordinating nodes. 2 coordinating nodes are 16GB of RAM, and 7GB of Heap (min=max heap). On coordina… --- ## [logstash mysql 연동](https://discuss.elastic.co/t/logstash-mysql/219465)
**Author:** [@Su\_Bae](https://discuss.elastic.co/u/Su_Bae)\ **Replies:** 0\ **Last updated:** [February 15, 2020, 7:18am UTC](https://discuss.elastic.co/t/logstash-mysql/219465 "2020-02-15T07:18:48Z")
docker-compose로 ELK 세팅 후 logstash와 Mysql 연동 중입니다. Mysql에 데이터가 입력되면 연동되어있는 logstash로 일정시간마다 동기화 시키는게 목적입니다. 연동이 되어야 스케줄러를 적용하기 때문에 연동 과정에서 에러가 생겼습니다. centOS jdk 1.8 질문 1. \[root@1aefff002dd2 logstash\]# bin/logstash -… --- ## [ElasticSearch plugin: access to text field](https://discuss.elastic.co/t/elasticsearch-plugin-access-to-text-field/219464)
**Author:** [@KTOIA](https://discuss.elastic.co/u/KTOIA)\ **Replies:** 0\ **Last updated:** [February 15, 2020, 7:08am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-access-to-text-field/219464 "2020-02-15T07:08:36Z")
I need to access to text field at ES document. I have used LeafReaderContext and only found leafContext.reader().getSortedSetDocValues(fieldName) But it contains a set of all values. Is Any way to access text field val… --- ## [How to add attachments to index and how to apply auto complete feature on it](https://discuss.elastic.co/t/how-to-add-attachments-to-index-and-how-to-apply-auto-complete-feature-on-it/219394)
**Author:** [@SivaPrasad\_Ampolu](https://discuss.elastic.co/u/SivaPrasad_Ampolu)\ **Replies:** 0\ **Last updated:** [February 14, 2020, 3:08pm UTC](https://discuss.elastic.co/t/how-to-add-attachments-to-index-and-how-to-apply-auto-complete-feature-on-it/219394 "2020-02-14T15:08:43Z")
Hello, Can some one suggest me how to achieve adding index to the attachments and searching functionality in c#. If some one shares the code snippet on top of latest elastic search it will be really helpful to me, than… --- ## [Elastic-operator requests regularly time out](https://discuss.elastic.co/t/elastic-operator-requests-regularly-time-out/219096)
**Author:** [@simonjam](https://discuss.elastic.co/u/simonjam)\ **Replies:** 6\ **Last updated:** [February 15, 2020, 1:05am UTC](https://discuss.elastic.co/t/elastic-operator-requests-regularly-time-out/219096 "2020-02-15T01:05:33Z")
Hi, I'm using ECK on GKE. Almost every time I make any modifications (initial apply, edit) to the elasticsearch object, it times out. But only barely! If I increase the timeout, the command usually succeeds in 30.1s. Fo… --- ## [How to create max of serial difference in visualbuilder](https://discuss.elastic.co/t/how-to-create-max-of-serial-difference-in-visualbuilder/218869)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 1\ **Last updated:** [February 15, 2020, 12:43am UTC](https://discuss.elastic.co/t/how-to-create-max-of-serial-difference-in-visualbuilder/218869 "2020-02-15T00:43:11Z")
i have data for every 15 mins with an incrimental data field. for rxample at 10:00 a.m. the value is 100 and at 10:15 the value is 130, at 10:30 the value 200 etc.. I have to find the serial difference and need to dra… --- ## [Is there a way to get the percentage (%) increase and rate of document growth?](https://discuss.elastic.co/t/is-there-a-way-to-get-the-percentage-increase-and-rate-of-document-growth/216877)
**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\ **Replies:** 1\ **Last updated:** [February 14, 2020, 7:56pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-the-percentage-increase-and-rate-of-document-growth/216877 "2020-02-14T19:56:11Z")
Hello, I have the following code to display the number of document over time in all my indexes: .es(q=\*, index=analytics-prod\*).mvavg(5).lines(width=1.5,stack=true,fill=4).label("analytics-prod").cusum(), .es(q=\*, inde… --- ## [How to customize the Timelion yAxis grid labels](https://discuss.elastic.co/t/how-to-customize-the-timelion-yaxis-grid-labels/219450)
**Author:** [@idangozlan](https://discuss.elastic.co/u/idangozlan)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 10:47pm UTC](https://discuss.elastic.co/t/how-to-customize-the-timelion-yaxis-grid-labels/219450 "2020-02-14T22:47:08Z")
When querying for a ratio (divide), is there a way to display also to absolute total numbers in the yAxis beside the ratio? Thanks! --- ## [Using original query score in a rescore function score query](https://discuss.elastic.co/t/using-original-query-score-in-a-rescore-function-score-query/219087)
**Author:** [@markhuds](https://discuss.elastic.co/u/markhuds)\ **Replies:** 3\ **Last updated:** [February 14, 2020, 10:26pm UTC](https://discuss.elastic.co/t/using-original-query-score-in-a-rescore-function-score-query/219087 "2020-02-14T22:26:52Z")
I would like to accomplish the following with a query: 1.) Perform a complex query that calculates a score for each matched document 2.) Rescore top N documents using a cosineSimilarity function for the dense\_vector fi… --- ## [Customzing discover display in kibana](https://discuss.elastic.co/t/customzing-discover-display-in-kibana/219429)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 9:40pm UTC](https://discuss.elastic.co/t/customzing-discover-display-in-kibana/219429 "2020-02-14T21:40:38Z")
i want o customize the discover display in kibana, so that the name of field are displayed without clicking on them, is there any solution to do that and display the differenst field without clicking on them --- ## [Creating a Plug and Play Ingested DB?](https://discuss.elastic.co/t/creating-a-plug-and-play-ingested-db/219443)
**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\ **Replies:** 0\ **Last updated:** [February 14, 2020, 8:17pm UTC](https://discuss.elastic.co/t/creating-a-plug-and-play-ingested-db/219443 "2020-02-14T20:17:48Z")
Thought to myself: ES does great for making queryable data, but one of the issues with things like Docker is that you need to commonly reingest the dataset in order for a docker instance of elasticsearch to be be stood … --- ## [Exporting dashobord and discover sectio in pdf](https://discuss.elastic.co/t/exporting-dashobord-and-discover-sectio-in-pdf/219431)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 1\ **Last updated:** [February 14, 2020, 7:50pm UTC](https://discuss.elastic.co/t/exporting-dashobord-and-discover-sectio-in-pdf/219431 "2020-02-14T19:50:14Z")
hi, i am using kibana and ES 6.8 and i want to export in PDF without using comercial version, is there an solution thank you --- ## [Clicking on graphical charts and obtain détails](https://discuss.elastic.co/t/clicking-on-graphical-charts-and-obtain-details/219430)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 1\ **Last updated:** [February 14, 2020, 7:49pm UTC](https://discuss.elastic.co/t/clicking-on-graphical-charts-and-obtain-details/219430 "2020-02-14T19:49:04Z")
hi, i habe a ashboard and graphical charts and i want to customize the charts so that when i click on the charts i obtain détails (other fileds than the displayed in bar or pie charts) thank you --- ## [I want to use filter: "NOT FIELD exists" in TSVB](https://discuss.elastic.co/t/i-want-to-use-filter-not-field-exists-in-tsvb/218061)
**Author:** [@AlfredoC](https://discuss.elastic.co/u/AlfredoC)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 7:36pm UTC](https://discuss.elastic.co/t/i-want-to-use-filter-not-field-exists-in-tsvb/218061 "2020-02-14T19:36:40Z")
Hello, I am working with TSVB and it is easy to use the following filter: " FIELD:\* ", but I actually want the opposite for example "NOT FIELD exists", I want to know if it is possible to use it. --- ## [Slow first request on an index after a short amount of time](https://discuss.elastic.co/t/slow-first-request-on-an-index-after-a-short-amount-of-time/219292)
**Author:** [@Spencer\_Uresk](https://discuss.elastic.co/u/Spencer_Uresk)\ **Replies:** 5\ **Last updated:** [February 14, 2020, 7:28pm UTC](https://discuss.elastic.co/t/slow-first-request-on-an-index-after-a-short-amount-of-time/219292 "2020-02-14T19:28:48Z")
We are having a really weird performance issue with our ES cluster, and I've run out of things to check so I thought I'd see if anyone has run into anything similar or has ideas for further debugging. Our symptom is thi… --- ## [Logstash directory folder deletion](https://discuss.elastic.co/t/logstash-directory-folder-deletion/219435)
**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\ **Replies:** 0\ **Last updated:** [February 14, 2020, 6:51pm UTC](https://discuss.elastic.co/t/logstash-directory-folder-deletion/219435 "2020-02-14T18:51:10Z")
Has anyone come across a instance where logstash has lost the config folder in the logstash directory if there is an issue with disk space. We have had a issue where the config folder has been removed --- ## [Issue using role mapping API for AD Group](https://discuss.elastic.co/t/issue-using-role-mapping-api-for-ad-group/219229)
**Author:** [@ElasticUser4](https://discuss.elastic.co/u/ElasticUser4)\ **Replies:** 4\ **Last updated:** [February 14, 2020, 6:13pm UTC](https://discuss.elastic.co/t/issue-using-role-mapping-api-for-ad-group/219229 "2020-02-14T18:13:20Z")
Hello, First, I apologize if this is the wrong section to post in. I was not sure if it should be in stack-security, Elasticsearch, etc. I figured being it was around trying to get this to work on ECE that this would … --- ## [RANK results in kibana](https://discuss.elastic.co/t/rank-results-in-kibana/219426)
**Author:** [@yoavb](https://discuss.elastic.co/u/yoavb)\ **Replies:** 0\ **Last updated:** [February 14, 2020, 5:54pm UTC](https://discuss.elastic.co/t/rank-results-in-kibana/219426 "2020-02-14T17:54:17Z")
Hello, On kibana 7.4 Please condsider the following case: I have a json file with 3 column : STUDENT DATE GRADE A 01/02/2020 80 A 11/01/2020 85 A … --- ## [BulkIndexError using Elasticsearch in Python](https://discuss.elastic.co/t/bulkindexerror-using-elasticsearch-in-python/219417)
**Author:** [@brendanwalker](https://discuss.elastic.co/u/brendanwalker)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 5:30pm UTC](https://discuss.elastic.co/t/bulkindexerror-using-elasticsearch-in-python/219417 "2020-02-14T17:30:33Z")
I am writing a program to search through really large (\>400mb) csv files provided by the government. Some of these files have over 1,000,000 rows. This is a local program that roughly 5 people will use in my company to h… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1624) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1626)