# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1705 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1706 --- ## [Cloud.elastic.co customer, need to perform REST search queries](https://discuss.elastic.co/t/cloud-elastic-co-customer-need-to-perform-rest-search-queries/213402)
**Author:** [@Arman\_Sharafshahi](https://discuss.elastic.co/u/Arman_Sharafshahi)\ **Replies:** 1\ **Last updated:** [December 31, 2019, 3:24am UTC](https://discuss.elastic.co/t/cloud-elastic-co-customer-need-to-perform-rest-search-queries/213402 "2019-12-31T03:24:04Z")
Hi, I'm a user of Elastic and Kibana via the cloud.elastic.co service. I have an aggregation search query which works perfectly from the Kibana devtools console. I now need to perform this query via a REST HTTP call f… --- ## [Send data in seperate lines from beats](https://discuss.elastic.co/t/send-data-in-seperate-lines-from-beats/210169)
**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\ **Replies:** 5\ **Last updated:** [December 17, 2019, 12:30pm UTC](https://discuss.elastic.co/t/send-data-in-seperate-lines-from-beats/210169 "2019-12-17T12:30:41Z")
Hi , We are configuring Siebel app server monitoring and we are running a batch file in execbeat . our output looks like below . Siebel Enterprise Applications Siebel Server Manager, Version 16.19.0.0 \[23057\] LANG\_IND… --- ## [How to access IIS request source IP from within pipeline.conf?](https://discuss.elastic.co/t/how-to-access-iis-request-source-ip-from-within-pipeline-conf/213387)
**Author:** [@dRm42](https://discuss.elastic.co/u/dRm42)\ **Replies:** 2\ **Last updated:** [December 31, 2019, 1:35am UTC](https://discuss.elastic.co/t/how-to-access-iis-request-source-ip-from-within-pipeline-conf/213387 "2019-12-31T01:35:09Z")
Hi Guys, I've spent more than a day trying to figure this out but just couldn't get it working. I'm using Filebeat to collect IIS logs, push them through Logstash and then into ES. Filebeat has the IIS module enabled an… --- ## [Adding filter by clicking specific point in chart doesn't work](https://discuss.elastic.co/t/adding-filter-by-clicking-specific-point-in-chart-doesnt-work/213395)
**Author:** [@111272](https://discuss.elastic.co/u/111272)\ **Replies:** 1\ **Last updated:** [December 31, 2019, 12:41am UTC](https://discuss.elastic.co/t/adding-filter-by-clicking-specific-point-in-chart-doesnt-work/213395 "2019-12-31T00:41:45Z")
In kibana tutorial, when i click the point in the chart then i think it has to be added new filter automatically. But it doesn't work in dashboard. However, when i open visualization in vizualization tab, it's work. H… --- ## [Cluster rebalancing across AZs](https://discuss.elastic.co/t/cluster-rebalancing-across-azs/210946)
**Author:** [@dwilches](https://discuss.elastic.co/u/dwilches)\ **Replies:** 5\ **Last updated:** [December 31, 2019, 12:03am UTC](https://discuss.elastic.co/t/cluster-rebalancing-across-azs/210946 "2019-12-31T00:03:40Z")
We have a cluster with 6 warm data nodes per AZ in EC2, for a total of 18 nodes spread in 3 AZs. As they were getting full, we added 1 more node to each AZ, and enabled auto-balancing in the cluster. I expected some of… --- ## [Proper locations for ansible-elasticsearch variables](https://discuss.elastic.co/t/proper-locations-for-ansible-elasticsearch-variables/213385)
**Author:** [@RLPowellJr](https://discuss.elastic.co/u/RLPowellJr)\ **Replies:** 1\ **Last updated:** [December 30, 2019, 10:13pm UTC](https://discuss.elastic.co/t/proper-locations-for-ansible-elasticsearch-variables/213385 "2019-12-30T22:13:03Z")
Greetings once again! When working with the ansible-elasticsearch playbook (from https://github.com/elastic/ansible-elasticsearch), is it acceptable for all of the Ansible variables to be defined in the same file? I’m … --- ## [Special characters in regex pattern](https://discuss.elastic.co/t/special-characters-in-regex-pattern/213380)
**Author:** [@Jeremy\_Andrews](https://discuss.elastic.co/u/Jeremy_Andrews)\ **Replies:** 1\ **Last updated:** [December 30, 2019, 9:40pm UTC](https://discuss.elastic.co/t/special-characters-in-regex-pattern/213380 "2019-12-30T21:40:00Z")
I’m trying to write an if statement in Logstash to check if the message starts with a certain pattern, but Logstash crashes without any useful reason given in the log. I’m wondering if I’m not escaping the special charac… --- ## [Visual Builder Time Series - Filter Ratio group by Terms](https://discuss.elastic.co/t/visual-builder-time-series-filter-ratio-group-by-terms/213081)
**Author:** [@omerdemb](https://discuss.elastic.co/u/omerdemb)\ **Replies:** 3\ **Last updated:** [December 30, 2019, 6:52pm UTC](https://discuss.elastic.co/t/visual-builder-time-series-filter-ratio-group-by-terms/213081 "2019-12-30T18:52:15Z")
I want to be able to find the ratio of times each value in a certain field existed. currently to achieve this I have to build a separate series with manual filters on each value. what i would assume should be possible … --- ## [Правильно ли я использую script?](https://discuss.elastic.co/t/script/213313)
**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\ **Replies:** 8\ **Last updated:** [December 30, 2019, 6:34pm UTC](https://discuss.elastic.co/t/script/213313 "2019-12-30T18:34:09Z")
Добрый день! У меня есть порядка 45 тыс. поисковых запросов (это шаблоны поиска сохраненные нашими пользователями) Я хотел загрузить их в es и использовать search template для выполнения, однако, вставив порядка 13 тыс.… --- ## [Two kinds of logs, the same grok](https://discuss.elastic.co/t/two-kinds-of-logs-the-same-grok/213369)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 2\ **Last updated:** [December 30, 2019, 6:02pm UTC](https://discuss.elastic.co/t/two-kinds-of-logs-the-same-grok/213369 "2019-12-30T18:02:53Z")
Hi, I have two kinds of logs. if the server is linux it display : "$1" after the string "Used disk space on", and if the server is windows display the letter of the drive: "C:" Logs: 12/28/19 21:59:10 server-hostname U… --- ## [Logstash does not forward logs](https://discuss.elastic.co/t/logstash-does-not-forward-logs/213368)
**Author:** [@d.shulinin](https://discuss.elastic.co/u/d.shulinin)\ **Replies:** 0\ **Last updated:** [December 30, 2019, 4:44pm UTC](https://discuss.elastic.co/t/logstash-does-not-forward-logs/213368 "2019-12-30T16:44:22Z")
Hi all. I'm facing a strange issue with logstash 7.2.0. I have two winlogbeats with a similar config sending logs to logstash (elk-1). Logstash then sends the logs to elasticsearch node (elk-2). I can confirm that log… --- ## [Advanced filtering for aggregations](https://discuss.elastic.co/t/advanced-filtering-for-aggregations/213320)
**Author:** [@Allard\_Poldermans](https://discuss.elastic.co/u/Allard_Poldermans)\ **Replies:** 3\ **Last updated:** [December 30, 2019, 4:11pm UTC](https://discuss.elastic.co/t/advanced-filtering-for-aggregations/213320 "2019-12-30T16:11:22Z")
I have an index containing OrderLines in Elastic Search which contains customer name, product name, price. My objective is to create a visualization (datalist) and aggregate by Customer Name, and find the totals for all… --- ## [How to update the column in a elasticsearch database using sql query](https://discuss.elastic.co/t/how-to-update-the-column-in-a-elasticsearch-database-using-sql-query/212889)
**Author:** [@Sreekanth3](https://discuss.elastic.co/u/Sreekanth3)\ **Replies:** 4\ **Last updated:** [December 30, 2019, 4:11pm UTC](https://discuss.elastic.co/t/how-to-update-the-column-in-a-elasticsearch-database-using-sql-query/212889 "2019-12-30T16:11:14Z")
Hi All, Can we update a column in a elasticsearch database using sql query. I have used this query 'UPDATE from duration\_17 SET delay\_sec = '12.20' WHERE dest\_ip=192.168.1.181;' but got this error Bad request \[line… --- ## [How many user are login to kibana](https://discuss.elastic.co/t/how-many-user-are-login-to-kibana/210750)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [December 30, 2019, 3:15pm UTC](https://discuss.elastic.co/t/how-many-user-are-login-to-kibana/210750 "2019-12-30T15:15:06Z")
How do I know which user is curretntly login to kibana? or how many user daily logging in to kibana? I can't seem to find any way to do at this time I am using version 7.5.0 --- ## [Can not load kibana homepage](https://discuss.elastic.co/t/can-not-load-kibana-homepage/213243)
**Author:** [@Jay\_Tran](https://discuss.elastic.co/u/Jay_Tran)\ **Replies:** 11\ **Last updated:** [December 30, 2019, 3:08pm UTC](https://discuss.elastic.co/t/can-not-load-kibana-homepage/213243 "2019-12-30T15:08:21Z")
Hi All, I'm using kibana 6.8, I got below error after launched kibana Thank you for any response. --- ## [Which version of kibana supports siem?](https://discuss.elastic.co/t/which-version-of-kibana-supports-siem/213312)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 3\ **Last updated:** [December 30, 2019, 3:08pm UTC](https://discuss.elastic.co/t/which-version-of-kibana-supports-siem/213312 "2019-12-30T15:08:19Z")
Hi, I'm using elastic stack 7.1.1 with x-pack installed and i want to enable siem but cant see the siem section in kibana . so, please let me know which version of elastic stack supports siem ? --- ## [Elastic Migration from 1.x to 6.8](https://discuss.elastic.co/t/elastic-migration-from-1-x-to-6-8/213143)
**Author:** [@Nirmal\_Palani](https://discuss.elastic.co/u/Nirmal_Palani)\ **Replies:** 2\ **Last updated:** [December 30, 2019, 2:40pm UTC](https://discuss.elastic.co/t/elastic-migration-from-1-x-to-6-8/213143 "2019-12-30T14:40:44Z")
In our existing project which uses Elastic Migration 1.x version, we use nested parent child relation between different types in a single index and we did use has\_child and has\_parent in conjunction to fetch the data in … --- ## [Cross search with 2 indexes](https://discuss.elastic.co/t/cross-search-with-2-indexes/213349)
**Author:** [@Seb\_Coyote](https://discuss.elastic.co/u/Seb_Coyote)\ **Replies:** 3\ **Last updated:** [December 30, 2019, 2:25pm UTC](https://discuss.elastic.co/t/cross-search-with-2-indexes/213349 "2019-12-30T14:25:24Z")
Hi All, I have elasticsearch with 2 indexes and Kibana. (import from CSV) The first index contain data for different machines like IP address (type:IP). The second index contain CIDR and Network name We want to visua… --- ## [Logstash reads only 10 rows](https://discuss.elastic.co/t/logstash-reads-only-10-rows/213338)
**Author:** [@Lubos\_Marek](https://discuss.elastic.co/u/Lubos_Marek)\ **Replies:** 1\ **Last updated:** [December 30, 2019, 2:24pm UTC](https://discuss.elastic.co/t/logstash-reads-only-10-rows/213338 "2019-12-30T14:24:31Z")
Hello, I am trying to read csv file with logstash but logstash reads only firs 10 rows. Where could be a problem? Structure of my CSV file: 500;message 1 200;message 2 500;message 1 200;message 2 500;message 1 20… --- ## [How to configure Logstash to get live tails logs in kibana dashboard?](https://discuss.elastic.co/t/how-to-configure-logstash-to-get-live-tails-logs-in-kibana-dashboard/213246)
**Author:** [@ppantang](https://discuss.elastic.co/u/ppantang)\ **Replies:** 2\ **Last updated:** [December 30, 2019, 2:24pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-to-get-live-tails-logs-in-kibana-dashboard/213246 "2019-12-30T14:24:18Z")
I have one custom log file that updates every one min. I am using flebeat to push this logfile to logstash . I want to see live logs with tailing in kibana dashboard how to configure at filebeat end. Please help me on … --- ## [Добавление нод в кластер](https://discuss.elastic.co/t/topic/213037)
**Author:** [@romixart](https://discuss.elastic.co/u/romixart)\ **Replies:** 3\ **Last updated:** [December 30, 2019, 1:55pm UTC](https://discuss.elastic.co/t/topic/213037 "2019-12-30T13:55:58Z")
Добрый день. Мы используем elasticsearch для полнотекстового поиска. При этом основным хранилищем для данных является MS SQL. Так повелось, что в проект используется MS стек, поэтому и база MS SQL. ES используем уже бол… --- ## [Fortinet firewall logs in ELK](https://discuss.elastic.co/t/fortinet-firewall-logs-in-elk/213343)
**Author:** [@rguptarg](https://discuss.elastic.co/u/rguptarg)\ **Replies:** 3\ **Last updated:** [December 30, 2019, 1:49pm UTC](https://discuss.elastic.co/t/fortinet-firewall-logs-in-elk/213343 "2019-12-30T13:49:34Z")
HI Team, I am getting logs from Fortinet firewall and config file for this input { tcp { port =\> 5014 type =\> syslog } udp { port =\> 5014 type =\> syslog } } filter { if \[type\] == "syslog" { grok { match =\> … --- ## [Using Kibana generated POST URL to generate CSV fails -](https://discuss.elastic.co/t/using-kibana-generated-post-url-to-generate-csv-fails/213353)
**Author:** [@Mike\_Donohue](https://discuss.elastic.co/u/Mike_Donohue)\ **Replies:** 1\ **Last updated:** [December 30, 2019, 1:46pm UTC](https://discuss.elastic.co/t/using-kibana-generated-post-url-to-generate-csv-fails/213353 "2019-12-30T13:46:53Z")
Hi We are using Kibana 7.3.0 Trying to download CSV from a Discover query. After running and Saving the query, I go to Share -\> CSV Reports -\> Copy POST URL and get the following URL: https://\/api… --- ## [How to allocate node to index shards](https://discuss.elastic.co/t/how-to-allocate-node-to-index-shards/213330)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 3\ **Last updated:** [December 30, 2019, 1:42pm UTC](https://discuss.elastic.co/t/how-to-allocate-node-to-index-shards/213330 "2019-12-30T13:42:15Z")
Hello Team, Can we allocate particular node and to an index so all the shards created for that index would get created to the defined node. I read about reroute API but could not find allocation option. can we define t… --- ## [Unable to generate CSV from Discover query -\> \[index\_closed\_exception\]](https://discuss.elastic.co/t/unable-to-generate-csv-from-discover-query-index-closed-exception/213350)
**Author:** [@Mike\_Donohue](https://discuss.elastic.co/u/Mike_Donohue)\ **Replies:** 1\ **Last updated:** [December 30, 2019, 1:36pm UTC](https://discuss.elastic.co/t/unable-to-generate-csv-from-discover-query-index-closed-exception/213350 "2019-12-30T13:36:53Z")
we are using Kibana 7.3.0 I'm trying to download CSV output from a Discover query. I saved the query, went to Share -\> CSV Reports -\> Generate CSV ... it spins for a few seconds and then returns an error that it can't … --- ## [Cannot apply multiply \[\*\] to types \[java.lang.Number\] and \[java.lang.Number\]](https://discuss.elastic.co/t/cannot-apply-multiply-to-types-java-lang-number-and-java-lang-number/213333)
**Author:** [@sidgate](https://discuss.elastic.co/u/sidgate)\ **Replies:** 1\ **Last updated:** [December 30, 2019, 12:08pm UTC](https://discuss.elastic.co/t/cannot-apply-multiply-to-types-java-lang-number-and-java-lang-number/213333 "2019-12-30T12:08:23Z")
I am migrating from Elasticsearch version 5.2.1 to latest 7.5.1. My query had special sub-aggregation where I used to multiple score "aggregations": { "max\_score": { "sum": { … --- ## [Logstash do not allow absolute file path](https://discuss.elastic.co/t/logstash-do-not-allow-absolute-file-path/213339)
**Author:** [@Vo\_Minh\_Tri](https://discuss.elastic.co/u/Vo_Minh_Tri)\ **Replies:** 0\ **Last updated:** [December 30, 2019, 11:47am UTC](https://discuss.elastic.co/t/logstash-do-not-allow-absolute-file-path/213339 "2019-12-30T11:47:38Z")
I'm running elk stack on my Windows environment. It's work well with path =\> "/opt/in/\*.log.\*" but It always throws File paths must be absolute, relative path specified when I change to absolute path "C:/Users/vmtri/De… --- ## [Network devices logs monitoring](https://discuss.elastic.co/t/network-devices-logs-monitoring/213340)
**Author:** [@rguptarg](https://discuss.elastic.co/u/rguptarg)\ **Replies:** 0\ **Last updated:** [December 30, 2019, 11:49am UTC](https://discuss.elastic.co/t/network-devices-logs-monitoring/213340 "2019-12-30T11:49:46Z")
Hi Team, I am new in ELK, and I am looking to monitor my network infra logs, We are using below vendors devices :- Cisco Sonic wall Fortinet At network end all log forwarding is configured on UDP 5014 port for all d… --- ## [Oniguruma patern will not work in grok debuger](https://discuss.elastic.co/t/oniguruma-patern-will-not-work-in-grok-debuger/213190)
**Author:** [@Marta\_Zagrajek](https://discuss.elastic.co/u/Marta_Zagrajek)\ **Replies:** 3\ **Last updated:** [December 30, 2019, 11:29am UTC](https://discuss.elastic.co/t/oniguruma-patern-will-not-work-in-grok-debuger/213190 "2019-12-30T11:29:00Z")
I have a filters like that: filter { grok { match =\> { "message" =\> '%{TIME:timestamp} (\\\[)?(%{DATA:logger})?(\\\])? \\{%{DATA:thread}\\} %{LOGLEVEL:level} : (?\(.|\\r|\\n)\*)' } remove\_field =\> \["messag… --- ## [Run Python Script from Kibana interface using a Variable](https://discuss.elastic.co/t/run-python-script-from-kibana-interface-using-a-variable/213321)
**Author:** [@jorj](https://discuss.elastic.co/u/jorj)\ **Replies:** 1\ **Last updated:** [December 30, 2019, 10:56am UTC](https://discuss.elastic.co/t/run-python-script-from-kibana-interface-using-a-variable/213321 "2019-12-30T10:56:07Z")
Hello there, Is there any possible way to run a Python Script placed in the Kibana node Server, from the Kibana Interface? My scenario is this: User Search for a Specific IP Address from an index When IP is selected,… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1704) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1706)