# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1634 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1635 --- ## [Translate csv failed - caused by a missing field](https://discuss.elastic.co/t/translate-csv-failed-caused-by-a-missing-field/218522)
**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\ **Replies:** 2\ **Last updated:** [February 11, 2020, 3:51pm UTC](https://discuss.elastic.co/t/translate-csv-failed-caused-by-a-missing-field/218522 "2020-02-11T15:51:05Z")
Logstash 7.3.1 I read from csv: columns =\> \["field1","field2","field3","field4","field5","field6","field7","field8","field9","field10","field11","field12","CustomID","field13","field14"\] Then I want to enrich my doc… --- ## [JSON Input vs. Scripted Fields](https://discuss.elastic.co/t/json-input-vs-scripted-fields/218788)
**Author:** [@tshayan](https://discuss.elastic.co/u/tshayan)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 3:48pm UTC](https://discuss.elastic.co/t/json-input-vs-scripted-fields/218788 "2020-02-11T15:48:52Z")
Hello, I have a requirement to get the average of the sum of two fields in all document and visualize it, something like this: avg("field 1" + "field 2") I have found two ways to do this and curious what the differenc… --- ## [Elasticsearch master node election](https://discuss.elastic.co/t/elasticsearch-master-node-election/218700)
**Author:** [@Javier\_Meza\_Cogollo](https://discuss.elastic.co/u/Javier_Meza_Cogollo)\ **Replies:** 4\ **Last updated:** [February 11, 2020, 3:39pm UTC](https://discuss.elastic.co/t/elasticsearch-master-node-election/218700 "2020-02-11T15:39:20Z")
Hi everyone! I was working with the version 6.4 of elasticsearch, I always have had two nodes, in that version when the node A got down, the node B automatically took the master role. I just upgrade to the 7.5.2 versio… --- ## [Logstash - Load error](https://discuss.elastic.co/t/logstash-load-error/217654)
**Author:** [@jaugsuto](https://discuss.elastic.co/u/jaugsuto)\ **Replies:** 2\ **Last updated:** [February 11, 2020, 3:25pm UTC](https://discuss.elastic.co/t/logstash-load-error/217654 "2020-02-11T15:25:54Z")
Hi I have installed already several times the elastic stack all via the tar.gz files. This error that im having now is only regarding Logstash. When I start Logstash is returns this error \[ERROR\] 2020-02-03 15:10:23… --- ## [Logstash is essential or not](https://discuss.elastic.co/t/logstash-is-essential-or-not/218204)
**Author:** [@opensourcengineer](https://discuss.elastic.co/u/opensourcengineer)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 3:17pm UTC](https://discuss.elastic.co/t/logstash-is-essential-or-not/218204 "2020-02-11T15:17:58Z")
hi team, i have installed filebeat on my syslog server and in kibana i configured the output to elasticsearch so in this case i am getting the syslog server logs directly to kibana dashboard using the filebeat module sy… --- ## [Omit Zero Score Results From Filtered Query?](https://discuss.elastic.co/t/omit-zero-score-results-from-filtered-query/218224)
**Author:** [@codyspeck](https://discuss.elastic.co/u/codyspeck)\ **Replies:** 2\ **Last updated:** [February 11, 2020, 3:15pm UTC](https://discuss.elastic.co/t/omit-zero-score-results-from-filtered-query/218224 "2020-02-11T15:15:19Z")
Is it possible to omit results with a zero score when doing a filtered query? Take the following query for example: GET demo/\_search?pretty { "query": { "bool": { "should": { "match": { "part\_number": { … --- ## [.monitoring-es - increase retention?](https://discuss.elastic.co/t/monitoring-es-increase-retention/218344)
**Author:** [@TNO](https://discuss.elastic.co/u/TNO)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 2:57pm UTC](https://discuss.elastic.co/t/monitoring-es-increase-retention/218344 "2020-02-11T14:57:56Z")
Hi, We're using Elastic Cloud and have a deployment with 3 zones. When going to Kibana-\>Monitoring-\>Overview we only have 2 days worth of data. I also only see indices for two days when GETing: \_cat/indices (.monito… --- ## [Troubleshooting on a data table with aggregation in Kibana](https://discuss.elastic.co/t/troubleshooting-on-a-data-table-with-aggregation-in-kibana/216220)
**Author:** [@AxelR](https://discuss.elastic.co/u/AxelR)\ **Replies:** 18\ **Last updated:** [February 11, 2020, 2:42pm UTC](https://discuss.elastic.co/t/troubleshooting-on-a-data-table-with-aggregation-in-kibana/216220 "2020-02-11T14:42:36Z")
Hello, I'm quite new to Kibana and ES, so my question might be a bit naive, I apologize in advance! I have indexed data on production test lines and I would like to compute (and then use) some specific values. Quick d… --- ## [Filebeat, s3access & ECS](https://discuss.elastic.co/t/filebeat-s3access-ecs/218011)
**Author:** [@cosmo](https://discuss.elastic.co/u/cosmo)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 2:22pm UTC](https://discuss.elastic.co/t/filebeat-s3access-ecs/218011 "2020-02-11T14:22:03Z")
Hello Looking to start migrating to ECS, for all the benefits listed on the blog Got nginx running through the filebeat modules, happy days (although the blog post suggests I should have event.original and message fiel… --- ## [Help Creating a Visualization](https://discuss.elastic.co/t/help-creating-a-visualization/218416)
**Author:** [@CommanderTso](https://discuss.elastic.co/u/CommanderTso)\ **Replies:** 3\ **Last updated:** [February 11, 2020, 2:15pm UTC](https://discuss.elastic.co/t/help-creating-a-visualization/218416 "2020-02-11T14:15:00Z")
Hi folks, I'm working my way through learning Kibana, but was hoping someone could give me a leg-up on a visualization I've been asked to create in the short term. I have an index of filebeat documents harvested from /… --- ## [\[logstash.outputs.elasticsearch\]\[.monitoring-logstash\] An unknown error occurred sending a bulk request to Elasticsearch](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-monitoring-logstash-an-unknown-error-occurred-sending-a-bulk-request-to-elasticsearch/218781)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 0\ **Last updated:** [February 11, 2020, 1:59pm UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-monitoring-logstash-an-unknown-error-occurred-sending-a-bulk-request-to-elasticsearch/218781 "2020-02-11T13:59:30Z")
Hi, I installed logstash 7.4.2 via rpm. Logstash is accessing elasticsearch's rest api via haproxy, wich is loadbalancing between the elasticsearch nodes. TLS is tunneled from client, so no re-encryption on haproxy side… --- ## [Need help with ILM](https://discuss.elastic.co/t/need-help-with-ilm/218333)
**Author:** [@tennaen](https://discuss.elastic.co/u/tennaen)\ **Replies:** 3\ **Last updated:** [February 11, 2020, 1:57pm UTC](https://discuss.elastic.co/t/need-help-with-ilm/218333 "2020-02-11T13:57:46Z")
Hello, i'm trying to understand ILM. I have created a policy "dev-focus-rollover" : { "version" : 3, "modified\_date" : "2020-02-06T10:21:55.920Z", "policy" : { "phases" : { "warm" : { … --- ## [Elasticsearch Randomly Crashing](https://discuss.elastic.co/t/elasticsearch-randomly-crashing/218679)
**Author:** [@Mike121](https://discuss.elastic.co/u/Mike121)\ **Replies:** 5\ **Last updated:** [February 11, 2020, 1:55pm UTC](https://discuss.elastic.co/t/elasticsearch-randomly-crashing/218679 "2020-02-11T13:55:43Z")
I'm not sure what the problem is here and I've been trying to search for a solution for days, so maybe someone here can help me out. I'm using Elasticsearch 6. It starts fine, and works fine, except for ever several day… --- ## [Logstash grok filter only extracting first match](https://discuss.elastic.co/t/logstash-grok-filter-only-extracting-first-match/218219)
**Author:** [@tmuon](https://discuss.elastic.co/u/tmuon)\ **Replies:** 4\ **Last updated:** [February 11, 2020, 1:50pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-only-extracting-first-match/218219 "2020-02-11T13:50:40Z")
Hi. Elastic Stack 7.4 in use here. I'm using the grok filter in logstash to extract data from a connection event from a Cisco Firepower. The syslog data is sent to Filebeat on a separate computer and the Filebeat Cisco m… --- ## [Unable to use Basic Auth as backup to SAML](https://discuss.elastic.co/t/unable-to-use-basic-auth-as-backup-to-saml/218665)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 2\ **Last updated:** [February 11, 2020, 1:46pm UTC](https://discuss.elastic.co/t/unable-to-use-basic-auth-as-backup-to-saml/218665 "2020-02-11T13:46:53Z")
TL;DR Unable to use basic authentication as backup method with SAML configured. The Full Story I am configuring our ELK installation to use SAML authentication via ADFS, with basic authentication enabled as a "break-gla… --- ## [Extracting MonthOfYear In Kibana Scripted Field](https://discuss.elastic.co/t/extracting-monthofyear-in-kibana-scripted-field/218322)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 3\ **Last updated:** [February 11, 2020, 1:44pm UTC](https://discuss.elastic.co/t/extracting-monthofyear-in-kibana-scripted-field/218322 "2020-02-11T13:44:04Z")
The following Scripted Field code is throwing an error, def month = doc\['signed\_date'\].date.monthOfYear; I want to extract the months as a separate column. What am I doing wrong here? Kindly help. --- ## [No data found error when added new scripted field](https://discuss.elastic.co/t/no-data-found-error-when-added-new-scripted-field/218403)
**Author:** [@sajjithreddy](https://discuss.elastic.co/u/sajjithreddy)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 1:39pm UTC](https://discuss.elastic.co/t/no-data-found-error-when-added-new-scripted-field/218403 "2020-02-11T13:39:24Z")
Hi, I have a question regarding scripted filed in index patterns. My log stash event one of the column name is "model.size" and it's value is like "69147 Bytes". I am trying to convert this value into MBs. So I added a … --- ## [Upgrade Rollback](https://discuss.elastic.co/t/upgrade-rollback/218774)
**Author:** [@rahulka](https://discuss.elastic.co/u/rahulka)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 1:35pm UTC](https://discuss.elastic.co/t/upgrade-rollback/218774 "2020-02-11T13:35:45Z")
I have elastic search version 5.5 planning to upgrade it to 7.x .h How can we rollback es node to 5.5 again after the upgrade. Is it even possible? --- ## [Configuration of HTTPS / SSL on 6.8.5 without clustering](https://discuss.elastic.co/t/configuration-of-https-ssl-on-6-8-5-without-clustering/218771)
**Author:** [@Rudy\_Gunawan](https://discuss.elastic.co/u/Rudy_Gunawan)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 1:17pm UTC](https://discuss.elastic.co/t/configuration-of-https-ssl-on-6-8-5-without-clustering/218771 "2020-02-11T13:17:15Z")
Hi I am trying to configure SSL on Elastic Search. The Elastic Search Server is running as standalone , no nodes / cluster created. My intention is simple : to secure the communication from Elastic Search to Client ( J… --- ## [Iframe not Load Properly with NGINX & Kibana](https://discuss.elastic.co/t/iframe-not-load-properly-with-nginx-kibana/218119)
**Author:** [@ferry1090](https://discuss.elastic.co/u/ferry1090)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 12:55pm UTC](https://discuss.elastic.co/t/iframe-not-load-properly-with-nginx-kibana/218119 "2020-02-11T12:55:33Z")
Hi Masters, Kindly need your expertise on Kibana & NGINX config. So my Kibana Application and Angularjs is running in the same server and I have enable the connection from internet. So when i hit mydomain.com, browser… --- ## [Send logs email from elasticsearch](https://discuss.elastic.co/t/send-logs-email-from-elasticsearch/218773)
**Author:** [@jskishor](https://discuss.elastic.co/u/jskishor)\ **Replies:** 0\ **Last updated:** [February 11, 2020, 12:53pm UTC](https://discuss.elastic.co/t/send-logs-email-from-elasticsearch/218773 "2020-02-11T12:53:55Z")
Hi there, I have ingested logs into elastic search using filebeat. My question is how do I send an email from elastic search of the logs which were ingested through filebeat? Thanks Kishore --- ## [Authentication against Active Directory](https://discuss.elastic.co/t/authentication-against-active-directory/217383)
**Author:** [@admin\_berlin](https://discuss.elastic.co/u/admin_berlin)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 12:22pm UTC](https://discuss.elastic.co/t/authentication-against-active-directory/217383 "2020-02-11T12:22:05Z")
Hi there, I've been trying to set authentication via Active Directory / LDAP for days. With the correct login data I get the error message: { "Status code" 403 "error": "Forbidden", "message": "Forbidden"} With incor… --- ## [Parsing Syslog to Logstash](https://discuss.elastic.co/t/parsing-syslog-to-logstash/218564)
**Author:** [@marvine82](https://discuss.elastic.co/u/marvine82)\ **Replies:** 5\ **Last updated:** [February 11, 2020, 12:17pm UTC](https://discuss.elastic.co/t/parsing-syslog-to-logstash/218564 "2020-02-11T12:17:31Z")
Hey; im currently trying to parse my syslog events to my elasticsearch host over logstash. I created a new .conf file under /etc/logstash/conf.d called syslog.conf. This file looks like this: input { syslog { port… --- ## [Customized Look and Feel for Kibana](https://discuss.elastic.co/t/customized-look-and-feel-for-kibana/218359)
**Author:** [@Pablo\_Albertengo](https://discuss.elastic.co/u/Pablo_Albertengo)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 12:15pm UTC](https://discuss.elastic.co/t/customized-look-and-feel-for-kibana/218359 "2020-02-11T12:15:45Z")
Hi community! I have the next question... From the Product area of my company pose the following dahsboard. As you will see, the layout has some significant differences with Kibana (custom side menu bar, custom comp… --- ## [Filtering in nested data](https://discuss.elastic.co/t/filtering-in-nested-data/218764)
**Author:** [@tmathwe](https://discuss.elastic.co/u/tmathwe)\ **Replies:** 0\ **Last updated:** [February 11, 2020, 12:08pm UTC](https://discuss.elastic.co/t/filtering-in-nested-data/218764 "2020-02-11T12:08:44Z")
Hi Experts, We have a data in following format measure:{ name:"",value:"",timestamp:""} now type of value can be vary based on the name example as follows measure:{name:co2,value:1,timestamp} measure:{name:co2,value:… --- ## [Postgres output from json type doesn't work, writes null values](https://discuss.elastic.co/t/postgres-output-from-json-type-doesnt-work-writes-null-values/218548)
**Author:** [@ActionAdi83](https://discuss.elastic.co/u/ActionAdi83)\ **Replies:** 4\ **Last updated:** [February 11, 2020, 10:22am UTC](https://discuss.elastic.co/t/postgres-output-from-json-type-doesnt-work-writes-null-values/218548 "2020-02-11T10:22:25Z")
Hello, I need a little help, I'm trying to write from a kafka topic to a postgres table only specific fields and it doesn't work, it writes nulls. I haven't figured out how to post jsons to kafka topic so I'm getting t… --- ## [Kibana {"statusCode":404,"error":"Not Found","message":"Not Found"}](https://discuss.elastic.co/t/kibana-statuscode-404-error-not-found-message-not-found/217124)
**Author:** [@Whovian](https://discuss.elastic.co/u/Whovian)\ **Replies:** 2\ **Last updated:** [February 11, 2020, 11:40am UTC](https://discuss.elastic.co/t/kibana-statuscode-404-error-not-found-message-not-found/217124 "2020-02-11T11:40:53Z")
Hello there elasticsearch and logstash work but not my ihm kibana Here's my problem On ihm -\> {"statusCode":404,"error":"Not Found","message":"Not Found"} When i launch bin\]$ kibana log \[07:38:38.505\] \[info\]\[plug… --- ## [Cant get any html page on kibana](https://discuss.elastic.co/t/cant-get-any-html-page-on-kibana/194150)
**Author:** [@way](https://discuss.elastic.co/u/way)\ **Replies:** 2\ **Last updated:** [February 11, 2020, 11:27am UTC](https://discuss.elastic.co/t/cant-get-any-html-page-on-kibana/194150 "2020-02-11T11:27:16Z")
Hello! I make elk cluster with 3 elastic, 1 logstash and 1 kibana vms, all wms used Ubuntu 18.04 as os. I installed kibana successfully but cant load index page, get 404 error instead: curl --no-proxy "" localhost:56… --- ## [Switch OR Case statement in kibana scripted field](https://discuss.elastic.co/t/switch-or-case-statement-in-kibana-scripted-field/218756)
**Author:** [@Dhruvil\_Doshi](https://discuss.elastic.co/u/Dhruvil_Doshi)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 11:15am UTC](https://discuss.elastic.co/t/switch-or-case-statement-in-kibana-scripted-field/218756 "2020-02-11T11:15:17Z")
Can we use case statement while making scripted field in kibana OR we just have to use if else --- ## [Up to 5 hours delay in elasticsearch indexing](https://discuss.elastic.co/t/up-to-5-hours-delay-in-elasticsearch-indexing/218562)
**Author:** [@Andrea\_Caligiuri](https://discuss.elastic.co/u/Andrea_Caligiuri)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 11:08am UTC](https://discuss.elastic.co/t/up-to-5-hours-delay-in-elasticsearch-indexing/218562 "2020-02-11T11:08:44Z")
Hi, I'm experiencing an issue with Elasticsearch indexing. I've searched online quite a lot but i could not find anyone with a problem even remotely as severe as mine, hence this message. My elasticsearch cluster is co… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1633) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1635)