# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1684 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1685 --- ## [About the filebeat input](https://discuss.elastic.co/t/about-the-filebeat-input/215065)
**Author:** [@eunnam](https://discuss.elastic.co/u/eunnam)\ **Replies:** 0\ **Last updated:** [January 15, 2020, 2:36am UTC](https://discuss.elastic.co/t/about-the-filebeat-input/215065 "2020-01-15T02:36:55Z")
Hello i'm using filebeat in aws ec2 and filebeat input type is s3. filebeat.inputs: - type: s3 queue\_url: "aws sqs queue url" If aws sqs queue is received message of aws s3 create, filebeat get file of gz format usi… --- ## [\[bug report\]: filebeat can't finish ,if the log file isn’t ending with line terminator(like \\n)](https://discuss.elastic.co/t/bug-report-filebeat-cant-finish-if-the-log-file-isn-t-ending-with-line-terminator-like-n/214835)
**Author:** [@chenyahui](https://discuss.elastic.co/u/chenyahui)\ **Replies:** 4\ **Last updated:** [January 15, 2020, 2:17am UTC](https://discuss.elastic.co/t/bug-report-filebeat-cant-finish-if-the-log-file-isn-t-ending-with-line-terminator-like-n/214835 "2020-01-15T02:17:11Z")
if a log file isn’t ending with line terminator(like \\n), the last line can't be read by harvester. the harvester of the file will not finished filebeat version \[7.5\] --- ## [Find similarity between two fields of an index](https://discuss.elastic.co/t/find-similarity-between-two-fields-of-an-index/215060)
**Author:** [@prathako](https://discuss.elastic.co/u/prathako)\ **Replies:** 0\ **Last updated:** [January 15, 2020, 12:09am UTC](https://discuss.elastic.co/t/find-similarity-between-two-fields-of-an-index/215060 "2020-01-15T00:09:41Z")
My index: {"var1": "abc", "var2": "ert","var3": "ca","var4": "sdf"} {"var1": "ert", "var2": "abc","var3": "La","var4": "abc"} {"var1": "vbn", "var2": "fgh","var3": "ert","var4": "vbh"} {"var1": "fgh", "var2": "tyu","… --- ## [Setting the fragment\_size of queries made by a Dashboard](https://discuss.elastic.co/t/setting-the-fragment-size-of-queries-made-by-a-dashboard/214896)
**Author:** [@ChubbyRat](https://discuss.elastic.co/u/ChubbyRat)\ **Replies:** 3\ **Last updated:** [January 14, 2020, 11:17pm UTC](https://discuss.elastic.co/t/setting-the-fragment-size-of-queries-made-by-a-dashboard/214896 "2020-01-14T23:17:45Z")
I want fragment\_size to change on only some queries (on one specific Dashboard) so changing the fragment\_size in Elastic isn't viable. Is it possible to set the fragment\_size Kibana-side? Elastic and Kibana versions ar… --- ## [Available fields in kibana](https://discuss.elastic.co/t/available-fields-in-kibana/214864)
**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\ **Replies:** 3\ **Last updated:** [January 14, 2020, 11:16pm UTC](https://discuss.elastic.co/t/available-fields-in-kibana/214864 "2020-01-14T23:16:25Z")
Here is this entry in logstash.conf mutate { split =\> \["message","Employee"\] add\_field =\> {"part1" =\>"%{\[message\]\[0\]}"} add\_field =\> {"part2" =\>"%{\[message\]\[1\]}"} } mutate { split =\> … --- ## [Problem Sorting Unique Values in CSV](https://discuss.elastic.co/t/problem-sorting-unique-values-in-csv/215057)
**Author:** [@niall](https://discuss.elastic.co/u/niall)\ **Replies:** 1\ **Last updated:** [January 14, 2020, 11:10pm UTC](https://discuss.elastic.co/t/problem-sorting-unique-values-in-csv/215057 "2020-01-14T23:10:28Z")
Hi, I've been trying to solve this issue and came to a dead end. I will need some advice for this. I do have a CSV file. Below is just sample data, but the file has like up to thousand lines. Below is the sample file: … --- ## [Jdbc problem when tracking column is fixed decimal](https://discuss.elastic.co/t/jdbc-problem-when-tracking-column-is-fixed-decimal/215051)
**Author:** [@Peter\_Li](https://discuss.elastic.co/u/Peter_Li)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 9:38pm UTC](https://discuss.elastic.co/t/jdbc-problem-when-tracking-column-is-fixed-decimal/215051 "2020-01-14T21:38:53Z")
I have a table where the tracking value has to be constructed from two integers: batch and index. So, I created a fixed decimal "bistamp" like 123.0034, 124.0003, etc. using: select ... to\_number(to\_char ( batch … --- ## [Getting 5 - 6 hours of data delay while extracting data from elastic search into kibana dev tools/console](https://discuss.elastic.co/t/getting-5-6-hours-of-data-delay-while-extracting-data-from-elastic-search-into-kibana-dev-tools-console/213990)
**Author:** [@suraj888](https://discuss.elastic.co/u/suraj888)\ **Replies:** 6\ **Last updated:** [January 14, 2020, 8:12pm UTC](https://discuss.elastic.co/t/getting-5-6-hours-of-data-delay-while-extracting-data-from-elastic-search-into-kibana-dev-tools-console/213990 "2020-01-14T20:12:31Z")
Dear All, I am new to ELK and i apologize in advance for my question. I am trying to extract data from one of the index of elasticsearch to kibana dev tools, through query but i am getting data delay for nearly about … --- ## [Error on discover](https://discuss.elastic.co/t/error-on-discover/214906)
**Author:** [@vitornogueira](https://discuss.elastic.co/u/vitornogueira)\ **Replies:** 4\ **Last updated:** [January 14, 2020, 8:05pm UTC](https://discuss.elastic.co/t/error-on-discover/214906 "2020-01-14T20:05:52Z")
When I access the Discover screen the following error appears: I ran the following command to rebuild the index pattern apm- \*: apm-server setup Kibana version: 7.5 --- ## [Running custom docker image with cloud-on-k8s operator](https://discuss.elastic.co/t/running-custom-docker-image-with-cloud-on-k8s-operator/215036)
**Author:** [@sarthakn](https://discuss.elastic.co/u/sarthakn)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 7:27pm UTC](https://discuss.elastic.co/t/running-custom-docker-image-with-cloud-on-k8s-operator/215036 "2020-01-14T19:27:10Z")
I'm trying to use the cloud-on-k8s operator to deploy ES on k8s. However, I need to use a different docker image as I need to use Ubuntu instead of CentOS for compatibility with some of our packages and I also need to us… --- ## [How to make CSV output filter close file (not append) when pipeline runs?](https://discuss.elastic.co/t/how-to-make-csv-output-filter-close-file-not-append-when-pipeline-runs/215031)
**Author:** [@tomj](https://discuss.elastic.co/u/tomj)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 6:31pm UTC](https://discuss.elastic.co/t/how-to-make-csv-output-filter-close-file-not-append-when-pipeline-runs/215031 "2020-01-14T18:31:00Z")
I have a pipeline set up that I wish to "refresh" a CSV file (to be used later in a "translate" step) from a database. What I'm seeing is that every time this pipeline runs, the entire CSV output gets appended to the na… --- ## [Can't install ruby gem into logstash environment](https://discuss.elastic.co/t/cant-install-ruby-gem-into-logstash-environment/214926)
**Author:** [@Brian\_Seel](https://discuss.elastic.co/u/Brian_Seel)\ **Replies:** 3\ **Last updated:** [January 14, 2020, 5:57pm UTC](https://discuss.elastic.co/t/cant-install-ruby-gem-into-logstash-environment/214926 "2020-01-14T17:57:36Z")
I need to install a gem into the ruby instance that logstash uses. Specifically, I need to install jdbc-sqlite3 to support database calls that can't be done as an input plugin. I have tried doing it remote or local, wit… --- ## [Checking elasticsearch health during rolling restart](https://discuss.elastic.co/t/checking-elasticsearch-health-during-rolling-restart/215023)
**Author:** [@lag13](https://discuss.elastic.co/u/lag13)\ **Replies:** 2\ **Last updated:** [January 14, 2020, 5:56pm UTC](https://discuss.elastic.co/t/checking-elasticsearch-health-during-rolling-restart/215023 "2020-01-14T17:56:46Z")
Hello! When doing a rolling upgrade (Rolling upgrades | Elasticsearch Guide \[7.3\] | Elastic), is checking that there are 0 initializing and relocating shards a reliable way to determine if you can restart the next node a… --- ## [Logstash won't show output on console](https://discuss.elastic.co/t/logstash-wont-show-output-on-console/214941)
**Author:** [@Anindita\_Chavan](https://discuss.elastic.co/u/Anindita_Chavan)\ **Replies:** 8\ **Last updated:** [January 14, 2020, 5:40pm UTC](https://discuss.elastic.co/t/logstash-wont-show-output-on-console/214941 "2020-01-14T17:40:34Z")
This is my logstash configuration file: \< input { file { path =\> "/home/trimslogs/trims.log" sincedb\_path =\> "NUL" ignore\_older =\> 0 } } filter { grok { match =\> { "message" =\> "(\[(?%{YEAR}-%{MONTHNUM}-%{MONTH… --- ## [Latency buffer for Rollup jobs - recommended delay and/or what it depends on](https://discuss.elastic.co/t/latency-buffer-for-rollup-jobs-recommended-delay-and-or-what-it-depends-on/214819)
**Author:** [@alter](https://discuss.elastic.co/u/alter)\ **Replies:** 3\ **Last updated:** [January 14, 2020, 4:26pm UTC](https://discuss.elastic.co/t/latency-buffer-for-rollup-jobs-recommended-delay-and-or-what-it-depends-on/214819 "2020-01-14T16:26:54Z")
Hi! We are using real-time rollup job to aggregare events into metrics. The scenario: events are coming from logstash, peak ingestion flow is around 100k-120k events per minute rollup job is scheduled to run every min… --- ## [WID Extractions with Logstash](https://discuss.elastic.co/t/wid-extractions-with-logstash/215011)
**Author:** [@John\_Guzman](https://discuss.elastic.co/u/John_Guzman)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 3:57pm UTC](https://discuss.elastic.co/t/wid-extractions-with-logstash/215011 "2020-01-14T15:57:34Z")
Hello! I need to extract some data from a Windows internal Database from WSUS. I already tried using the JDBC and Exec input plugins, buy no one worked using this string connection \\.\\pipe\\MICROSOFT##WID\\tsql\\query. Th… --- ## [Azure module setup with elastic https security](https://discuss.elastic.co/t/azure-module-setup-with-elastic-https-security/215009)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 3:54pm UTC](https://discuss.elastic.co/t/azure-module-setup-with-elastic-https-security/215009 "2020-01-14T15:54:37Z")
I'm trying to run setup for the logstash (7.5.0) azure module. All examples are without security but we are using elasticsearch https. I'm getting errors: \[2020-01-14T09:42:45,431\]\[ERROR\]\[logstash.licensechecker.lice… --- ## [Disable/enable multiline codec when using clone filter](https://discuss.elastic.co/t/disable-enable-multiline-codec-when-using-clone-filter/214942)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 4\ **Last updated:** [January 14, 2020, 3:45pm UTC](https://discuss.elastic.co/t/disable-enable-multiline-codec-when-using-clone-filter/214942 "2020-01-14T15:45:46Z")
Hello all, is it posible to disable multiline when using clone filter?. For instance: input{ codec =\> multiline { pattern =\> "^ImposibleMatch" negate =\> true what =\> previous … --- ## [Is it possible to have one dashboard from two different Kibana servers?](https://discuss.elastic.co/t/is-it-possible-to-have-one-dashboard-from-two-different-kibana-servers/214858)
**Author:** [@emad101](https://discuss.elastic.co/u/emad101)\ **Replies:** 6\ **Last updated:** [January 14, 2020, 3:39pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-one-dashboard-from-two-different-kibana-servers/214858 "2020-01-14T15:39:04Z")
I have two different kibana servers and I wanted to know if it would be possible to create visualizations from both kibana servers into one dashboard for either server. Thank you in advance --- ## [Time Filter behaving strangely](https://discuss.elastic.co/t/time-filter-behaving-strangely/214680)
**Author:** [@sidhusaab](https://discuss.elastic.co/u/sidhusaab)\ **Replies:** 16\ **Last updated:** [January 14, 2020, 3:38pm UTC](https://discuss.elastic.co/t/time-filter-behaving-strangely/214680 "2020-01-14T15:38:39Z")
I have an index which contains data for the last 3 days (Jan 08 - Jan 10). I have a dashboard that shows different things from the index and it seems to only work if my time range is set to 7 days or more. If I set last … --- ## [Disable machine learning process creation](https://discuss.elastic.co/t/disable-machine-learning-process-creation/214913)
**Author:** [@musician](https://discuss.elastic.co/u/musician)\ **Replies:** 6\ **Last updated:** [January 14, 2020, 3:35pm UTC](https://discuss.elastic.co/t/disable-machine-learning-process-creation/214913 "2020-01-14T15:35:29Z")
I am using Elasticsearch 7.1.1 and noticed that when I start it, a process controller.exe (part of Elasticsearch machine learning) is spawned automatically. How do I disable creation of this process since I do not use ma… --- ## [Efficient aggregation of counting nested field values](https://discuss.elastic.co/t/efficient-aggregation-of-counting-nested-field-values/214869)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 6\ **Last updated:** [January 14, 2020, 3:27pm UTC](https://discuss.elastic.co/t/efficient-aggregation-of-counting-nested-field-values/214869 "2020-01-14T15:27:01Z")
Like so many others I run into the well-known "too\_many\_buckets\_exception". I am creating a data table visualization which sorts my data over four different fields, and then finally does a count over a fifth field. A pi… --- ## [Stdout codec json\_lines is empty](https://discuss.elastic.co/t/stdout-codec-json-lines-is-empty/214834)
**Author:** [@Kostis95](https://discuss.elastic.co/u/Kostis95)\ **Replies:** 1\ **Last updated:** [January 14, 2020, 2:57pm UTC](https://discuss.elastic.co/t/stdout-codec-json-lines-is-empty/214834 "2020-01-14T14:57:15Z")
Hi there, I'm still trying to connect my postgresql database to elastic. I've got all the required files: logstash.yml, pipelines.yml and p1.conf (in my local/etc/logstash). However I'm only getting Successfully starte… --- ## [Extracting multiline xml fields from a log](https://discuss.elastic.co/t/extracting-multiline-xml-fields-from-a-log/214954)
**Author:** [@angelcab](https://discuss.elastic.co/u/angelcab)\ **Replies:** 1\ **Last updated:** [January 14, 2020, 2:34pm UTC](https://discuss.elastic.co/t/extracting-multiline-xml-fields-from-a-log/214954 "2020-01-14T14:34:40Z")
Hello I'm struggling with a problem trying to extract indepent fields from a log which contains a XML embebbed. I'm using logstash for the ingesting into elasticsearch. First, I collect the logs with filebeat and send … --- ## [Несовпадение данных в визуализации и базе данных Elastic](https://discuss.elastic.co/t/elastic/212034)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 5\ **Last updated:** [January 14, 2020, 2:23pm UTC](https://discuss.elastic.co/t/elastic/212034 "2020-01-14T14:23:23Z")
Всем привет, Есть визуализация в виде таблицы, но данные в ней отличаются от эластика. Например, для игрока с id 750 в таблице 6 записей с 2мя устройствами: Однако это невозможно, поскольку id игрока однозначно привя… --- ## [Wrong data aggregation in a table](https://discuss.elastic.co/t/wrong-data-aggregation-in-a-table/212033)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 6\ **Last updated:** [January 14, 2020, 2:20pm UTC](https://discuss.elastic.co/t/wrong-data-aggregation-in-a-table/212033 "2020-01-14T14:20:56Z")
Hello, I've created a table, but the data in the table differ from the elastic. For example, for player\_id "750" there are 6 records from 2 different devices: However it's impossible because each player's id is uniq… --- ## [Fluent codec and multline](https://discuss.elastic.co/t/fluent-codec-and-multline/212504)
**Author:** [@bquevat](https://discuss.elastic.co/u/bquevat)\ **Replies:** 2\ **Last updated:** [January 14, 2020, 1:52pm UTC](https://discuss.elastic.co/t/fluent-codec-and-multline/212504 "2020-01-14T13:52:06Z")
Hello, I use the fluent codec in my input. It receives logs from Java applications and I would like to make Java stack trace into a single event. This can be done with the multiline plugin. How can I benefit from the… --- ## [Count within field](https://discuss.elastic.co/t/count-within-field/214986)
**Author:** [@anon42972578](https://discuss.elastic.co/u/anon42972578)\ **Replies:** 3\ **Last updated:** [January 14, 2020, 1:41pm UTC](https://discuss.elastic.co/t/count-within-field/214986 "2020-01-14T13:41:12Z")
Hello, i have documents with multiline fields in my.field and need to count the number of received filenames. example: document 1: my.field: { "filename": "test.json", "type" : "File"} document 2: my.field: { "file… --- ## [Index Patterns management](https://discuss.elastic.co/t/index-patterns-management/214854)
**Author:** [@Mauricio\_Borges](https://discuss.elastic.co/u/Mauricio_Borges)\ **Replies:** 3\ **Last updated:** [January 14, 2020, 1:28pm UTC](https://discuss.elastic.co/t/index-patterns-management/214854 "2020-01-14T13:28:36Z")
Hi Team! Where I can learn more about Index Pattern Management ? I'd like to know how I can group couple servers by indexes ( using Beats and ES ). For example: Server A, Server B and Server C ingest Logs into filebe… --- ## [Failed status while using Public IP on my office](https://discuss.elastic.co/t/failed-status-while-using-public-ip-on-my-office/214987)
**Author:** [@gilang\_bilbisri](https://discuss.elastic.co/u/gilang_bilbisri)\ **Replies:** 1\ **Last updated:** [January 14, 2020, 12:34pm UTC](https://discuss.elastic.co/t/failed-status-while-using-public-ip-on-my-office/214987 "2020-01-14T12:34:07Z")
hello everyone am new in elasticsearch program. i need your help for my installation progress. for my configuration in /etc/elasticsearch/elasticsearch.yml network.host : localhost http.port: 9200 it's successfull ru… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1683) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1685)