# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1712 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1713 --- ## [Authentication issue while accessing elastic search(It is launched via azure elastic marketplace option)](https://discuss.elastic.co/t/authentication-issue-while-accessing-elastic-search-it-is-launched-via-azure-elastic-marketplace-option/212867)
**Author:** [@jinalptl1993](https://discuss.elastic.co/u/jinalptl1993)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 4:12pm UTC](https://discuss.elastic.co/t/authentication-issue-while-accessing-elastic-search-it-is-launched-via-azure-elastic-marketplace-option/212867 "2019-12-23T16:12:17Z")
I have launched an elastic search server using elastic marketplace option over azure. I am not able to access the elastic search. It is asking me username and password. I have tried with default elastic user and passwor… --- ## [Best way to parse lap data to make it sortable and filterable](https://discuss.elastic.co/t/best-way-to-parse-lap-data-to-make-it-sortable-and-filterable/211201)
**Author:** [@562uned](https://discuss.elastic.co/u/562uned)\ **Replies:** 1\ **Last updated:** [December 23, 2019, 3:46pm UTC](https://discuss.elastic.co/t/best-way-to-parse-lap-data-to-make-it-sortable-and-filterable/211201 "2019-12-23T15:46:47Z")
Hello, So i have my whole pipeline working great but there is one data field that im trying to figure out the best way to parse to make it sort able / aggregatable. The data comes in like 20/5:10.080. I had thought abou… --- ## [Logstash & VirusTotal lookup](https://discuss.elastic.co/t/logstash-virustotal-lookup/212858)
**Author:** [@gamarue](https://discuss.elastic.co/u/gamarue)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 3:05pm UTC](https://discuss.elastic.co/t/logstash-virustotal-lookup/212858 "2019-12-23T15:05:09Z")
Hi, We're currently building an ELK instance which has the purpose to nicely show forensic level data by reading data from a file and outputting to an elasticsearch instance. In that data which we have, there's a subse… --- ## [Remove double quotes from grok output](https://discuss.elastic.co/t/remove-double-quotes-from-grok-output/211822)
**Author:** [@Intissar\_Ayadi](https://discuss.elastic.co/u/Intissar_Ayadi)\ **Replies:** 8\ **Last updated:** [December 23, 2019, 1:47pm UTC](https://discuss.elastic.co/t/remove-double-quotes-from-grok-output/211822 "2019-12-23T13:47:46Z")
Hello, Anyone know how to remove the double quotes out of the grok output ? After grok filter, the ouput is "ip": "7.7.7.7", i would like to remove quotes and have an output like "ip": 7.7.7.7 I'm trying with gsub mut… --- ## [A fix for 'A document doesn't have a value for a field' doesn't work anymore](https://discuss.elastic.co/t/a-fix-for-a-document-doesnt-have-a-value-for-a-field-doesnt-work-anymore/212730)
**Author:** [@Devopsio](https://discuss.elastic.co/u/Devopsio)\ **Replies:** 1\ **Last updated:** [December 23, 2019, 1:46pm UTC](https://discuss.elastic.co/t/a-fix-for-a-document-doesnt-have-a-value-for-a-field-doesnt-work-anymore/212730 "2019-12-23T13:46:08Z")
Hi. I have a scripted field below and when I'm trying to visualize it by the field, it throws a 400 error, "A document doesn't have a value for a field". I've tried suggestions on the forum but none of them work. Were th… --- ## [Logstash Pipeline To Pipeline Communication Error Using HTTP Output Plugin](https://discuss.elastic.co/t/logstash-pipeline-to-pipeline-communication-error-using-http-output-plugin/212849)
**Author:** [@rameshkokare1](https://discuss.elastic.co/u/rameshkokare1)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 1:44pm UTC](https://discuss.elastic.co/t/logstash-pipeline-to-pipeline-communication-error-using-http-output-plugin/212849 "2019-12-23T13:44:29Z")
Hello, I am using logstash pipelines with http input/ouput plugin. e.g. pipeline1 gives http request to piepline2 on http port. lot of elasticsearch calls and business logic causing below error in logstash logs and in… --- ## [Cant restore the 6.1.1 snapshot to 7.5.1 latest version of elasticsearch](https://discuss.elastic.co/t/cant-restore-the-6-1-1-snapshot-to-7-5-1-latest-version-of-elasticsearch/212655)
**Author:** [@venugrd](https://discuss.elastic.co/u/venugrd)\ **Replies:** 3\ **Last updated:** [December 23, 2019, 12:58pm UTC](https://discuss.elastic.co/t/cant-restore-the-6-1-1-snapshot-to-7-5-1-latest-version-of-elasticsearch/212655 "2019-12-23T12:58:39Z")
When i restored the elastic older version 6.1.1 snapshot to 7.5.1 latest version, I got the below error. Could you please anyone help me ? OS : Centos 8 Error: {"error":{"root\_cause":\[{"type":"snapshot\_restore\_excepti… --- ## [Logstash Failed to maintain memory/persisted queue for solr\_http output](https://discuss.elastic.co/t/logstash-failed-to-maintain-memory-persisted-queue-for-solr-http-output/212846)
**Author:** [@prakhara](https://discuss.elastic.co/u/prakhara)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 12:34pm UTC](https://discuss.elastic.co/t/logstash-failed-to-maintain-memory-persisted-queue-for-solr-http-output/212846 "2019-12-23T12:34:23Z")
I have set up the logstash to index logs to solr using solr\_http plugin and reading events using file input plugin, but when solr is down the events that are recorded in that time period are lost and logstahs solr\_http p… --- ## [How to concatenate multiple fields into single timestamp](https://discuss.elastic.co/t/how-to-concatenate-multiple-fields-into-single-timestamp/212830)
**Author:** [@Bhaskar3184](https://discuss.elastic.co/u/Bhaskar3184)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 10:12am UTC](https://discuss.elastic.co/t/how-to-concatenate-multiple-fields-into-single-timestamp/212830 "2019-12-23T10:12:57Z")
HI, I am loading data from a text file to logstash using multiline grok, but every time stamp is creating for different fields, can you please help me here Input file: DATE: 2019-12-03 Input File/Folder:1.txt … --- ## [Split fileds from message in discover](https://discuss.elastic.co/t/split-fileds-from-message-in-discover/212834)
**Author:** [@Bhaskar3184](https://discuss.elastic.co/u/Bhaskar3184)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 10:43am UTC](https://discuss.elastic.co/t/split-fileds-from-message-in-discover/212834 "2019-12-23T10:43:27Z")
Hi, Can you please help me in creating separate fields for every value like below: Input file: DATE: 2019-12-03 Input File/Folder:1.txt SHA256 hash of 1.txt: 2f1d3f3343dbc60768a290565c9136f754015438e4ea25770… --- ## [Sending alerts through logstash](https://discuss.elastic.co/t/sending-alerts-through-logstash/212844)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 12:15pm UTC](https://discuss.elastic.co/t/sending-alerts-through-logstash/212844 "2019-12-23T12:15:30Z")
Hi Team, I wan to send alerts from logstash to telegram. any possible ways. Thanks. --- ## [Permission error after update to 7.5.1 from 7.4.0](https://discuss.elastic.co/t/permission-error-after-update-to-7-5-1-from-7-4-0/212842)
**Author:** [@AstroSlazak](https://discuss.elastic.co/u/AstroSlazak)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 12:04pm UTC](https://discuss.elastic.co/t/permission-error-after-update-to-7-5-1-from-7-4-0/212842 "2019-12-23T12:04:06Z")
Hi I'm using 7.4.0 docker version, and after i upgraded it to 7.5.1 i go an error: After i downgrade to 7.4.0 it works, what is a reason of this error ? --- ## [How to change 'termFreq' in BM25?](https://discuss.elastic.co/t/how-to-change-termfreq-in-bm25/212302)
**Author:** [@Ricardo\_Z](https://discuss.elastic.co/u/Ricardo_Z)\ **Replies:** 1\ **Last updated:** [December 23, 2019, 11:52am UTC](https://discuss.elastic.co/t/how-to-change-termfreq-in-bm25/212302 "2019-12-23T11:52:42Z")
Hello, I use elasticsearch 5.6. I am trying to reconstruct the Okapi BM25 default similarity in Elasticsearch. Some of our document have repeat words in the database, such as "you are a good boy boy boy". so, the 'te… --- ## [JSON Parsing Error](https://discuss.elastic.co/t/json-parsing-error/212772)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 3\ **Last updated:** [December 23, 2019, 11:41am UTC](https://discuss.elastic.co/t/json-parsing-error/212772 "2019-12-23T11:41:03Z")
I am reeving json parse error when i am using json filter to parse my data. my logstash config, filter { mutate { gsub =\> \[ "message", "^b\_rooms\_available\_and\_soldout...", "\[", "message", "\],$", "\]", … --- ## [Parsing message data into separate events](https://discuss.elastic.co/t/parsing-message-data-into-separate-events/212763)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 1\ **Last updated:** [December 23, 2019, 11:39am UTC](https://discuss.elastic.co/t/parsing-message-data-into-separate-events/212763 "2019-12-23T11:39:18Z")
I have a sample event with the message containing the value in following format, b\_rooms\_available\_and\_soldout: \[{"b\_id":50699001,"b\_roomtype\_id":9,"b\_has\_room\_inventory":1,"b\_name":"Deluxe Double Room","b\_blocks":\[{"… --- ## [Log/Debug Full RBAC Query in Elasticsearch](https://discuss.elastic.co/t/log-debug-full-rbac-query-in-elasticsearch/212838)
**Author:** [@leewadhams](https://discuss.elastic.co/u/leewadhams)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 11:30am UTC](https://discuss.elastic.co/t/log-debug-full-rbac-query-in-elasticsearch/212838 "2019-12-23T11:30:38Z")
Hi, We're trying to use RBAC to limit access to an index for a given user. Is there a way to view the full query that gets generated when a user submits a query? Lee --- ## [How to determine the list of indices that being queried more](https://discuss.elastic.co/t/how-to-determine-the-list-of-indices-that-being-queried-more/212836)
**Author:** [@Sumit\_Kumar1](https://discuss.elastic.co/u/Sumit_Kumar1)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 11:12am UTC](https://discuss.elastic.co/t/how-to-determine-the-list-of-indices-that-being-queried-more/212836 "2019-12-23T11:12:37Z")
I have a requirement of having a list of indices which are being queried more or used for search . Is there any API ? or something that would ease our job in order to find the indices which are being using elasticsearch… --- ## [I want to replace the value of a field if its value is a certain number](https://discuss.elastic.co/t/i-want-to-replace-the-value-of-a-field-if-its-value-is-a-certain-number/212835)
**Author:** [@Jamcast](https://discuss.elastic.co/u/Jamcast)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 11:02am UTC](https://discuss.elastic.co/t/i-want-to-replace-the-value-of-a-field-if-its-value-is-a-certain-number/212835 "2019-12-23T11:02:49Z")
I want to replace the value of a field if its value is a certain number and I'm not sure what I'm doing wrong. Here is the input: "price" =\> 811950, "last\_price\_update" =\> "2019-12-22T11:30:23Z", … --- ## [Constant\_score wrapper yields different results than Boolean query](https://discuss.elastic.co/t/constant-score-wrapper-yields-different-results-than-boolean-query/212831)
**Author:** [@EpsilonDelta](https://discuss.elastic.co/u/EpsilonDelta)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 10:21am UTC](https://discuss.elastic.co/t/constant-score-wrapper-yields-different-results-than-boolean-query/212831 "2019-12-23T10:21:41Z")
The following two queries return a different number of results and I cannot figure out why. The only difference between these two queries is that one is wrapped in "constant\_score": { "filter":{ ...} }. Note that the ai… --- ## [Why is my document result embedded in "doc" field when importing via Logstash to Elasticsearch?](https://discuss.elastic.co/t/why-is-my-document-result-embedded-in-doc-field-when-importing-via-logstash-to-elasticsearch/212827)
**Author:** [@michalz](https://discuss.elastic.co/u/michalz)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 9:59am UTC](https://discuss.elastic.co/t/why-is-my-document-result-embedded-in-doc-field-when-importing-via-logstash-to-elasticsearch/212827 "2019-12-23T09:59:29Z")
Hi, I created a pipeline in logstash, and and an index in elasticsearch. I am importing data from couch db. Yet the documents I retrieve are wrapped in an additional field "doc" (within "\_source" that I don't want): "hi… --- ## [\[Easy\] Pie chart of 2 different fields](https://discuss.elastic.co/t/easy-pie-chart-of-2-different-fields/212454)
**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\ **Replies:** 3\ **Last updated:** [December 23, 2019, 9:35am UTC](https://discuss.elastic.co/t/easy-pie-chart-of-2-different-fields/212454 "2019-12-23T09:35:45Z")
I'm clicking around endlessly without any hope. Googling around without any success. I have 2 fields in Elasticsearch with a single value, see: … --- ## [Multiple hosts in ES output - one of them down](https://discuss.elastic.co/t/multiple-hosts-in-es-output-one-of-them-down/212826)
**Author:** [@elastic22](https://discuss.elastic.co/u/elastic22)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 9:34am UTC](https://discuss.elastic.co/t/multiple-hosts-in-es-output-one-of-them-down/212826 "2019-12-23T09:34:03Z")
Hi I have a 5 node cluster, two of which are used for "hot" data. In my Logstash configs in the Elasticsearch output, I define both hosts: elasticsearch { hosts =\> \[ "https://host1:9200", "https://host2:9200" \] } I… --- ## [Multiple Root Element in single line](https://discuss.elastic.co/t/multiple-root-element-in-single-line/212809)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 4\ **Last updated:** [December 23, 2019, 8:42am UTC](https://discuss.elastic.co/t/multiple-root-element-in-single-line/212809 "2019-12-23T08:42:33Z")
I need help with splitting multiple root element in single line. My data format like this, b\_rooms\_available\_and\_soldout:\[{"b\_id":123, "b\_blocks":\[{...}\]},{"b\_id":456, "b\_blocks":\[{...}\]}\] My logstash config is, … --- ## [Logstash config file make db busy](https://discuss.elastic.co/t/logstash-config-file-make-db-busy/212821)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 8:27am UTC](https://discuss.elastic.co/t/logstash-config-file-make-db-busy/212821 "2019-12-23T08:27:16Z")
Hi Team, I have 50+ queries in a logstash config file which fetches data from a db and make individual index for every query. when i do this one of my queries make db busy by which i don't get data in other indices. so… --- ## [Cannot reference a field inside string](https://discuss.elastic.co/t/cannot-reference-a-field-inside-string/212276)
**Author:** [@BerkayOzturk](https://discuss.elastic.co/u/BerkayOzturk)\ **Replies:** 5\ **Last updated:** [December 23, 2019, 7:39am UTC](https://discuss.elastic.co/t/cannot-reference-a-field-inside-string/212276 "2019-12-23T07:39:41Z")
Hello, I'm trying to reference a field from a string inside the output section of my configuration. Instead of the field value, what I get is the literal representation of the string; in this case: '%{myfield}'. Here is… --- ## [Grok issues](https://discuss.elastic.co/t/grok-issues/212813)
**Author:** [@tortillla](https://discuss.elastic.co/u/tortillla)\ **Replies:** 5\ **Last updated:** [December 23, 2019, 8:09am UTC](https://discuss.elastic.co/t/grok-issues/212813 "2019-12-23T08:09:26Z")
I am trying to extract a substring from a file's path. The path is: "/home/kate/logs/phone/messages" I need to get the "phone" part. In my logstash conf file I am trying to use grok to extract this substring. I checke… --- ## [Dec 23th, 2019 \[FR\] \[Certification\] 5 choses que j'aurais aimé apprendre du Père Noël avant de passer la certification Elastic Engineer](https://discuss.elastic.co/t/dec-23th-2019-fr-certification-5-choses-que-jaurais-aime-apprendre-du-pere-noel-avant-de-passer-la-certification-elastic-engineer/212079)
**Author:** [@Melvyn](https://discuss.elastic.co/u/Melvyn)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-23th-2019-fr-certification-5-choses-que-jaurais-aime-apprendre-du-pere-noel-avant-de-passer-la-certification-elastic-engineer/212079 "2019-12-23T08:00:00Z")
Bien que j’adore écrire des articles techniques, aujourd’hui je vais plutôt essayer de démystifier un sujet : la certification "Elastic Engineer Certified". Comment réussir la certification ? C’est probablement la qu… --- ## [Does elasticsearch-6.8.4 support language detection?](https://discuss.elastic.co/t/does-elasticsearch-6-8-4-support-language-detection/212271)
**Author:** [@Pratik\_Hulji](https://discuss.elastic.co/u/Pratik_Hulji)\ **Replies:** 3\ **Last updated:** [December 23, 2019, 7:43am UTC](https://discuss.elastic.co/t/does-elasticsearch-6-8-4-support-language-detection/212271 "2019-12-23T07:43:51Z")
If Yes please help me --- ## [Logstashでのログ取込で前半部分が欠損する](https://discuss.elastic.co/t/logstash/212799)
**Author:** [@yyuri](https://discuss.elastic.co/u/yyuri)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 2:39am UTC](https://discuss.elastic.co/t/logstash/212799 "2019-12-23T02:39:28Z")
50万程度のログを1日に1回、Elastic Stackが動いているサーバに取り込み、Logstashのfile input pluginでElasticsearchに入れています。 ある日から突然、取り込まれたデータの前半部分が欠損するようになりました。 頻度や欠損の多さはまちまちですが、必ず前半部分のみが欠損します。 同様の事象にあった方や、対処策に心当たりがあれば、ご教授いただけないでしょうか。 構築してから1年9か月程度… --- ## [Consistent colors in a dashboard](https://discuss.elastic.co/t/consistent-colors-in-a-dashboard/205481)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 4\ **Last updated:** [December 23, 2019, 7:23am UTC](https://discuss.elastic.co/t/consistent-colors-in-a-dashboard/205481 "2019-12-23T07:23:48Z")
Hi everyone, Let's imagine an index with logs coming from different hosts. I would like to have : a list of the 10 top hosts with a color assigned to each one a donut chart which would allow to see the proportion of … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1711) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1713)