# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1649 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1650 --- ## [Cpu and memory elastic watcher email alert](https://discuss.elastic.co/t/cpu-and-memory-elastic-watcher-email-alert/217715)
**Author:** [@tmodi](https://discuss.elastic.co/u/tmodi)\ **Replies:** 0\ **Last updated:** [February 4, 2020, 3:54am UTC](https://discuss.elastic.co/t/cpu-and-memory-elastic-watcher-email-alert/217715 "2020-02-04T03:54:01Z")
Anyone know, how to create a watcher using metricbeat in kibana? like to create a alert when cpu and memory reach 75% threadhold --- ## [Parent - Child relationship not working for some documents](https://discuss.elastic.co/t/parent-child-relationship-not-working-for-some-documents/217714)
**Author:** [@user977505](https://discuss.elastic.co/u/user977505)\ **Replies:** 0\ **Last updated:** [February 4, 2020, 3:18am UTC](https://discuss.elastic.co/t/parent-child-relationship-not-working-for-some-documents/217714 "2020-02-04T03:18:53Z")
I'm running into an issue where the Parent - Child relationship is working for some documents ONLY (using the has\_parent and has\_child queries). Say there is a 'Brand' and 'Product' documents and brand is a parent docum… --- ## [Elasticsearch output](https://discuss.elastic.co/t/elasticsearch-output/216502)
**Author:** [@fvegaucr](https://discuss.elastic.co/u/fvegaucr)\ **Replies:** 2\ **Last updated:** [February 4, 2020, 12:26am UTC](https://discuss.elastic.co/t/elasticsearch-output/216502 "2020-02-04T00:26:09Z")
Hi Im trying to use logstash to use elasticsearch output plugin to send logs to elasticsearch. The version of elastic that Im using is 7.4.2 as well as logstash. The issue that Im having is when I try to load the templ… --- ## [Date times SQL and output differents values](https://discuss.elastic.co/t/date-times-sql-and-output-differents-values/217545)
**Author:** [@Mbt\_Mbt](https://discuss.elastic.co/u/Mbt_Mbt)\ **Replies:** 11\ **Last updated:** [February 3, 2020, 10:44pm UTC](https://discuss.elastic.co/t/date-times-sql-and-output-differents-values/217545 "2020-02-03T22:44:32Z")
Hi, Good afternoon, I am having problems viewing data of type date in kibana. I am using an elk platform with the jdbc connector. Where to make the query I get date type information. In the database I have the field … --- ## [Logstash File Input Won't Re-read Files](https://discuss.elastic.co/t/logstash-file-input-wont-re-read-files/217684)
**Author:** [@mfisher](https://discuss.elastic.co/u/mfisher)\ **Replies:** 3\ **Last updated:** [February 3, 2020, 9:51pm UTC](https://discuss.elastic.co/t/logstash-file-input-wont-re-read-files/217684 "2020-02-03T21:51:45Z")
I've configured logstash to read all .system files from a specific directory and it works for new files. However after the file is read and indexed it won't re-read a file with the same file name even if I edit it or de… --- ## [Regex express to eliminate private address space from geoip](https://discuss.elastic.co/t/regex-express-to-eliminate-private-address-space-from-geoip/217677)
**Author:** [@DWbank](https://discuss.elastic.co/u/DWbank)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 8:49pm UTC](https://discuss.elastic.co/t/regex-express-to-eliminate-private-address-space-from-geoip/217677 "2020-02-03T20:49:10Z")
I am trying to eliminate private address spacing going through geoip. I am guessing my regexp is not quite right, seems to still match everything. ################### This checks to see that address is not internal for… --- ## [Custom URL for Elastic Search Service](https://discuss.elastic.co/t/custom-url-for-elastic-search-service/217686)
**Author:** [@AndresL](https://discuss.elastic.co/u/AndresL)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 8:40pm UTC](https://discuss.elastic.co/t/custom-url-for-elastic-search-service/217686 "2020-02-03T20:40:10Z")
On elastic search service running on cloud, when will be possible to have another name for kibana? My current deployment is: https://DEPLOYMENT\_ID.westeurope.azure.elastic-cloud.com/ will be possible to have a subdom… --- ## [How to use two controls in the same dashboard?](https://discuss.elastic.co/t/how-to-use-two-controls-in-the-same-dashboard/217634)
**Author:** [@Bilal2](https://discuss.elastic.co/u/Bilal2)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 8:15pm UTC](https://discuss.elastic.co/t/how-to-use-two-controls-in-the-same-dashboard/217634 "2020-02-03T20:15:06Z")
Hello, I want to know if it is possible to use two controls in the same dashboard, and each control is specific for certain visualisations? If, yes, please how I will do that? Best --- ## [Installing logstash-input-mongodb](https://discuss.elastic.co/t/installing-logstash-input-mongodb/217685)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [February 3, 2020, 8:05pm UTC](https://discuss.elastic.co/t/installing-logstash-input-mongodb/217685 "2020-02-03T20:05:17Z")
I can't seems to figure out how to install this. downloaded zip file and use this \[root@elktst01 logstash\]# bin/logstash-plugin install logstash-input-mongodb-master.zip ERROR: Something went wrong when installing log… --- ## [Option ignoreFilterIfFieldNotInIndex breaks spatial filtering in Map visualizations](https://discuss.elastic.co/t/option-ignorefilteriffieldnotinindex-breaks-spatial-filtering-in-map-visualizations/217602)
**Author:** [@audeberc](https://discuss.elastic.co/u/audeberc)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 7:50pm UTC](https://discuss.elastic.co/t/option-ignorefilteriffieldnotinindex-breaks-spatial-filtering-in-map-visualizations/217602 "2020-02-03T19:50:30Z")
Hi, I'm currently working with some dashboards using visualizations mixing different indexes. I have activated ignoreFilterIfFieldNotInIndex in Kibana's advanced options to avoid errors caused by the mismatch of the var… --- ## [ECE - Certificate chain was invalid](https://discuss.elastic.co/t/ece-certificate-chain-was-invalid/217125)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 4\ **Last updated:** [February 3, 2020, 7:50pm UTC](https://discuss.elastic.co/t/ece-certificate-chain-was-invalid/217125 "2020-02-03T19:50:15Z")
Hi all, I am getting this error message when uploading my proxy certificate into ECE: Certificate chain was invalid \[Invalid Entry: expected X.509 Certificate As I don't have certificates, I am unable to log into Kiba… --- ## [Python to ingest data in to ES, reading from kafka](https://discuss.elastic.co/t/python-to-ingest-data-in-to-es-reading-from-kafka/216493)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 13\ **Last updated:** [February 3, 2020, 7:35pm UTC](https://discuss.elastic.co/t/python-to-ingest-data-in-to-es-reading-from-kafka/216493 "2020-02-03T19:35:23Z")
I want to read kafka topic and insert that data in to elasticsearch anyone has basic python script for it. I am newbee to python connection to es is alredy established with this code from elasticsearch import Elastic… --- ## [Small Baseline Installation - New Deployment](https://discuss.elastic.co/t/small-baseline-installation-new-deployment/217499)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 1\ **Last updated:** [February 3, 2020, 7:30pm UTC](https://discuss.elastic.co/t/small-baseline-installation-new-deployment/217499 "2020-02-03T19:30:08Z")
Hi all, I have recently deployed a small baseline installation with 3.5TB of storage, 128 GB of ram and 16 CPU. Is there any best practice documentation on how I should create a deployment that shares equal resources a… --- ## [How to search Regular expressions in Kibana 7.5](https://discuss.elastic.co/t/how-to-search-regular-expressions-in-kibana-7-5/217644)
**Author:** [@mosherr](https://discuss.elastic.co/u/mosherr)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 7:10pm UTC](https://discuss.elastic.co/t/how-to-search-regular-expressions-in-kibana-7-5/217644 "2020-02-03T19:10:38Z")
Hi all, i have Kibana 7.5 version I'm trying to search for a particular field in REGEX. The field is text-type, for example: 35-1010111\_HFBg 41-9991234\_ERF 51-9912234\_FGF 41-8888234\_ASDFG 21\_454556\_JHDS How do I… --- ## [Harvester could not be started on new file](https://discuss.elastic.co/t/harvester-could-not-be-started-on-new-file/217678)
**Author:** [@krishna\_bhargav](https://discuss.elastic.co/u/krishna_bhargav)\ **Replies:** 0\ **Last updated:** [February 3, 2020, 6:58pm UTC](https://discuss.elastic.co/t/harvester-could-not-be-started-on-new-file/217678 "2020-02-03T18:58:59Z")
We have over 10 files (type = log entries ) being read from filebeat.yml. When we reduce the number of files, type = log entries to 5 or less it works. how to fix this issue to allow all 10 files being read from single … --- ## [ElasticSearch and CentOS 7: Failed to start elasticsearch-.service: Unit not found](https://discuss.elastic.co/t/elasticsearch-and-centos-7-failed-to-start-elasticsearch-service-unit-not-found/217676)
**Author:** [@psohn](https://discuss.elastic.co/u/psohn)\ **Replies:** 0\ **Last updated:** [February 3, 2020, 6:57pm UTC](https://discuss.elastic.co/t/elasticsearch-and-centos-7-failed-to-start-elasticsearch-service-unit-not-found/217676 "2020-02-03T18:57:02Z")
Hello, First time trying to install and configure ElkStack on CentOS7 and ran into some issues. Was able to install the Elasticsearch package, however, I have not been able to start ElasticSearch after using systemctl s… --- ## [Urldecode filter doesn't replace plus sign](https://discuss.elastic.co/t/urldecode-filter-doesnt-replace-plus-sign/217671)
**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\ **Replies:** 0\ **Last updated:** [February 3, 2020, 6:19pm UTC](https://discuss.elastic.co/t/urldecode-filter-doesnt-replace-plus-sign/217671 "2020-02-03T18:19:51Z")
The urldecode ingest processor will convert decode+me =\> decode me, but the logstash filter plugin only handles %-encoded values, so + are not replaced with spaces. The workaround is to add a gsub filter above the urlde… --- ## [Date range search from the 25th of the month to now](https://discuss.elastic.co/t/date-range-search-from-the-25th-of-the-month-to-now/217668)
**Author:** [@npahucki](https://discuss.elastic.co/u/npahucki)\ **Replies:** 0\ **Last updated:** [February 3, 2020, 6:09pm UTC](https://discuss.elastic.co/t/date-range-search-from-the-25th-of-the-month-to-now/217668 "2020-02-03T18:09:01Z")
Using a range query, it's easy to search from the 1st of the month until now. However, I need to create an alert that aggregates date from the 25th of the month to now. For example, if today is the Jan 24, then I want da… --- ## [Populate field with dynamic value](https://discuss.elastic.co/t/populate-field-with-dynamic-value/217431)
**Author:** [@tmathwe](https://discuss.elastic.co/u/tmathwe)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 5:47pm UTC](https://discuss.elastic.co/t/populate-field-with-dynamic-value/217431 "2020-02-03T17:47:54Z")
i have a requirement to show the remaining days for an expiration days, like if record expire in 100 days we should be able to give a field back saying expire in 99 days 98 days.. my questions is how do i generate the a… --- ## [Count of the number of a particular named process in Kibana dashboards](https://discuss.elastic.co/t/count-of-the-number-of-a-particular-named-process-in-kibana-dashboards/217631)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 0\ **Last updated:** [February 3, 2020, 2:00pm UTC](https://discuss.elastic.co/t/count-of-the-number-of-a-particular-named-process-in-kibana-dashboards/217631 "2020-02-03T14:00:58Z")
We had a request come in from one of our users thats looking to add a column to the list of "Top 10 Processes" visualization. They are looking to see if we can display the count of the number of a particular named proce… --- ## [Use script to filter the logs based on specific value of field](https://discuss.elastic.co/t/use-script-to-filter-the-logs-based-on-specific-value-of-field/217556)
**Author:** [@Parth\_Kalaria](https://discuss.elastic.co/u/Parth_Kalaria)\ **Replies:** 1\ **Last updated:** [February 3, 2020, 5:22pm UTC](https://discuss.elastic.co/t/use-script-to-filter-the-logs-based-on-specific-value-of-field/217556 "2020-02-03T17:22:05Z")
Can I add an condition for metrics aggregation on y axis to check for the specific field value. I'm trying to create a bar chart with 2 y axis aggregation. In one aggregation I want count of all the docs and for another … --- ## [Extract json array using logstash to elasticsearch](https://discuss.elastic.co/t/extract-json-array-using-logstash-to-elasticsearch/217276)
**Author:** [@emailshak](https://discuss.elastic.co/u/emailshak)\ **Replies:** 1\ **Last updated:** [February 3, 2020, 4:55pm UTC](https://discuss.elastic.co/t/extract-json-array-using-logstash-to-elasticsearch/217276 "2020-02-03T16:55:46Z")
I am trying to extract the following json to elasticsearch using logstash { "times\_submitted": 6, "name": "task1", "sub\_names": \["rescan", "that.doc", "c:\\sorted\\files\\file1.exe"\], "tree": { "child1" : "abc", "chil… --- ## [Strange issue with Elasticsearch while bulk indexing](https://discuss.elastic.co/t/strange-issue-with-elasticsearch-while-bulk-indexing/217653)
**Author:** [@giorgio](https://discuss.elastic.co/u/giorgio)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 4:55pm UTC](https://discuss.elastic.co/t/strange-issue-with-elasticsearch-while-bulk-indexing/217653 "2020-02-03T16:55:22Z")
Hi I have bit of strange issue with elasticsearch, I have 30 shards 0 replicas and currently 14 million documents. I Bulk index using NEST like this: public static bool MultiIndex(List objects) where T : someclass { b… --- ## [Elastic snapshot for GCS seem to be ignoring my client credentials](https://discuss.elastic.co/t/elastic-snapshot-for-gcs-seem-to-be-ignoring-my-client-credentials/217526)
**Author:** [@Guillaume\_Roderick](https://discuss.elastic.co/u/Guillaume_Roderick)\ **Replies:** 17\ **Last updated:** [February 3, 2020, 4:47pm UTC](https://discuss.elastic.co/t/elastic-snapshot-for-gcs-seem-to-be-ignoring-my-client-credentials/217526 "2020-02-03T16:47:44Z")
Hi, I've exhausted my google-fu and have trawled the documentation and similar issues discussed in these support and am completely stuck. I'm attempting to snapshot my cluster to GCS, and the system seems to be ignorin… --- ## [Sort tickets by age group](https://discuss.elastic.co/t/sort-tickets-by-age-group/216186)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 11\ **Last updated:** [February 3, 2020, 4:42pm UTC](https://discuss.elastic.co/t/sort-tickets-by-age-group/216186 "2020-02-03T16:42:08Z")
Hello all, Im trying to create a graph similar to the below in Kibana. I am using an API to get all the ticketing fields including the created date and closed date. So I need to do the follwing to get to this: che… --- ## [Logs not showing up in readable format in Kibana after Logstash ingestion](https://discuss.elastic.co/t/logs-not-showing-up-in-readable-format-in-kibana-after-logstash-ingestion/217484)
**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\ **Replies:** 1\ **Last updated:** [February 3, 2020, 4:32pm UTC](https://discuss.elastic.co/t/logs-not-showing-up-in-readable-format-in-kibana-after-logstash-ingestion/217484 "2020-02-03T16:32:41Z")
Hi There, I've a problem with cloudwatch logs showing up in readable format in kibana and I believe the problem is with setting Logstash charset. The error is: \[main\] Received an event that has a different character en… --- ## [How do I create a date field from a nested date field?](https://discuss.elastic.co/t/how-do-i-create-a-date-field-from-a-nested-date-field/217580)
**Author:** [@Jeroen2](https://discuss.elastic.co/u/Jeroen2)\ **Replies:** 1\ **Last updated:** [February 3, 2020, 4:31pm UTC](https://discuss.elastic.co/t/how-do-i-create-a-date-field-from-a-nested-date-field/217580 "2020-02-03T16:31:46Z")
Let's say my mappings look like this. { "index\_patterns" : \["ftp-status-dev-\*"\], "mapping": { "properties": { "context": { "properties": { "created\_at" : { "type… --- ## [Elastic Search watcher is not working](https://discuss.elastic.co/t/elastic-search-watcher-is-not-working/217661)
**Author:** [@Abdulhadi](https://discuss.elastic.co/u/Abdulhadi)\ **Replies:** 0\ **Last updated:** [February 3, 2020, 4:27pm UTC](https://discuss.elastic.co/t/elastic-search-watcher-is-not-working/217661 "2020-02-03T16:27:41Z")
Hi All I am trying to build a JSON file for Watcher that will send an email whenever an account for Error logs exceed 80. But it continues giving an Error message This is the Built JSON file: PUT \_watcher/watch/feb6b0… --- ## [Log source with different field type - mapper\_parsing\_exception](https://discuss.elastic.co/t/log-source-with-different-field-type-mapper-parsing-exception/217655)
**Author:** [@nitzang](https://discuss.elastic.co/u/nitzang)\ **Replies:** 0\ **Last updated:** [February 3, 2020, 3:44pm UTC](https://discuss.elastic.co/t/log-source-with-different-field-type-mapper-parsing-exception/217655 "2020-02-03T15:44:45Z")
Hello, I recently started getting AWS cloud logs to ES and received many exceptions for indexing issues, such as: \[2020-02-03T15:35:56,728\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch… --- ## [Reindex drops timestamp](https://discuss.elastic.co/t/reindex-drops-timestamp/217495)
**Author:** [@Andrii](https://discuss.elastic.co/u/Andrii)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 3:35pm UTC](https://discuss.elastic.co/t/reindex-drops-timestamp/217495 "2020-02-03T15:35:23Z")
I'm trying to reindex data from one index to another. the query is: POST \_reindex { "source": {"index": "log-plt-2020.01.26" }, "dest": { "index": "log-plt-2020.01.26-1" } } I see that all dockuments got copied: G… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1648) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1650)