# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1741 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1742 --- ## [Unable to start audit beat](https://discuss.elastic.co/t/unable-to-start-audit-beat/209594)
**Author:** [@Sudeep\_Khare](https://discuss.elastic.co/u/Sudeep_Khare)\ **Replies:** 0\ **Last updated:** [November 27, 2019, 1:38am UTC](https://discuss.elastic.co/t/unable-to-start-audit-beat/209594 "2019-11-27T01:38:14Z")
I am relatively new to ELK and I am trying to send logs from audit beat to Kibana. I have followed the steps from ELK documentation to install audit-beats on Linux . But at the last step when I run the audit beat I am ge… --- ## [JMX conf multiple hosts](https://discuss.elastic.co/t/jmx-conf-multiple-hosts/210736)
**Author:** [@Gidi\_Kalef](https://discuss.elastic.co/u/Gidi_Kalef)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 3:09pm UTC](https://discuss.elastic.co/t/jmx-conf-multiple-hosts/210736 "2019-12-05T15:09:31Z")
Hi , is it possible to add multiple hosts to jmx.conf: { //Required, JMX listening host/ip "host" : "192.168.1.2", //Required, JMX listening port "port" : 1335, //Optional, the username to connect to JMX "usernam… --- ## [Create user in Kibana with read only access to indexes](https://discuss.elastic.co/t/create-user-in-kibana-with-read-only-access-to-indexes/210718)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 3:06pm UTC](https://discuss.elastic.co/t/create-user-in-kibana-with-read-only-access-to-indexes/210718 "2019-12-05T15:06:41Z")
Hi, I'm trying to create a new user that has read only access to indexes and its definition. I start by creating a role, in index privileges i select all index patterns and and as privileges selected read, view\_index\_m… --- ## [Get message field of last event](https://discuss.elastic.co/t/get-message-field-of-last-event/210735)
**Author:** [@ja123](https://discuss.elastic.co/u/ja123)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 2:55pm UTC](https://discuss.elastic.co/t/get-message-field-of-last-event/210735 "2019-12-05T14:55:34Z")
How can I get the message field of previous event in elasticsearch? The document ID is dynamically { "request" : { "url" : "https://reiseauskunft.bahn.de/bin/stboard.exe/dn?rt=1&input=Stuttgart%20Hauptbahnhof&boardTy… --- ## [Error: 0: pyembed: No module named 'elasticsearch'](https://discuss.elastic.co/t/error-0-pyembed-no-module-named-elasticsearch/210424)
**Author:** [@nvelumani](https://discuss.elastic.co/u/nvelumani)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 2:57pm UTC](https://discuss.elastic.co/t/error-0-pyembed-no-module-named-elasticsearch/210424 "2019-12-05T14:57:05Z")
Hello Team, I have version 7.4.2 Elasticsearch and Kibana installed along with python 3.6 in a centos7 machine. When I try to create an Elasticsearch index through python code I get an error saying "Error: 0: pyembed: N… --- ## [Syslog output debugging](https://discuss.elastic.co/t/syslog-output-debugging/210733)
**Author:** [@grimshad](https://discuss.elastic.co/u/grimshad)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 2:51pm UTC](https://discuss.elastic.co/t/syslog-output-debugging/210733 "2019-12-05T14:51:48Z")
How can I output the final syslog output to stdout to debug it prior to setting it up to be sent to the syslog server? --- ## [Output to Kafka](https://discuss.elastic.co/t/output-to-kafka/210732)
**Author:** [@Haalanam](https://discuss.elastic.co/u/Haalanam)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 2:40pm UTC](https://discuss.elastic.co/t/output-to-kafka/210732 "2019-12-05T14:40:48Z")
i have a logstash conf file that looks like this: input { jdbc { jdbc\_driver\_class =\> "Java::oracle.jdbc.driver.OracleDriver" jdbc\_connection\_string =\> "jdbc:oracle:thin:@//the-s2.db.orac… --- ## [Kibana UI(7.4.2) is very slow](https://discuss.elastic.co/t/kibana-ui-7-4-2-is-very-slow/210269)
**Author:** [@abhilashkom](https://discuss.elastic.co/u/abhilashkom)\ **Replies:** 3\ **Last updated:** [December 5, 2019, 1:46pm UTC](https://discuss.elastic.co/t/kibana-ui-7-4-2-is-very-slow/210269 "2019-12-05T13:46:17Z")
Installed kibana using yum, configured to forward requests to three back-end elastic-search nodes. kibana UI is very slow, it is taking time to load, tried to modified openfile descriptors, it is not picking up values.… --- ## [An ECS compliant Kibana index pattern must be configured to view event data on the map](https://discuss.elastic.co/t/an-ecs-compliant-kibana-index-pattern-must-be-configured-to-view-event-data-on-the-map/209969)
**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\ **Replies:** 4\ **Last updated:** [December 5, 2019, 2:02pm UTC](https://discuss.elastic.co/t/an-ecs-compliant-kibana-index-pattern-must-be-configured-to-view-event-data-on-the-map/209969 "2019-12-05T14:02:14Z")
Hi all, I am using Filebeat module cisco to get logs. I am not storing this logs in an index called filebeat-\* but cisco-\*. To get the correct mapping for this pattern, I exported the filebeat template and imported it f… --- ## [\[7.5.0\] Transforming .raw into .keyword](https://discuss.elastic.co/t/7-5-0-transforming-raw-into-keyword/210713)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 12:55pm UTC](https://discuss.elastic.co/t/7-5-0-transforming-raw-into-keyword/210713 "2019-12-05T12:55:10Z")
Hi there! As the thread title states, my concern here is to loop through a specific index (maybe with an ingest pipeline) and - if possible - transform the nested .raw value into an equivalent .keyword value. I need th… --- ## [Failed to format message Kibana](https://discuss.elastic.co/t/failed-to-format-message-kibana/210335)
**Author:** [@whoatemyjam](https://discuss.elastic.co/u/whoatemyjam)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 12:52pm UTC](https://discuss.elastic.co/t/failed-to-format-message-kibana/210335 "2019-12-05T12:52:52Z")
hi getting failed to format message from test.json which has {"logMessage": "this is some message 01", "sessionID": "some session", "applicationName": "some application", "uniqueId": "some uniqueid", "applicationVers… --- ## [Failing in Mapping a doc with Multi field of boolean](https://discuss.elastic.co/t/failing-in-mapping-a-doc-with-multi-field-of-boolean/210714)
**Author:** [@afnanali1992](https://discuss.elastic.co/u/afnanali1992)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 12:52pm UTC](https://discuss.elastic.co/t/failing-in-mapping-a-doc-with-multi-field-of-boolean/210714 "2019-12-05T12:52:40Z")
Elasticsearch version ( bin/elasticsearch --version ): 6.8.5 - elastic cloud Plugins installed : \[mongoosastic\] Hello, I have a question regarding Mapping the Mixed type in ES where it doesn't support it, So we used t… --- ## [Logstash Grok problem](https://discuss.elastic.co/t/logstash-grok-problem/210710)
**Author:** [@LuigiDelavega](https://discuss.elastic.co/u/LuigiDelavega)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 12:41pm UTC](https://discuss.elastic.co/t/logstash-grok-problem/210710 "2019-12-05T12:41:02Z")
Hello, I'm using a grok filter for my logs. They come from severals folders and they have a common pattern i already manage to create : grok { match =\> { "message" =\> "%{DATESTAMP:time}\\|%{LOGLEVEL:Level}\\|%{DA… --- ## [Interactive Zoom in Kibana 7 dashboard](https://discuss.elastic.co/t/interactive-zoom-in-kibana-7-dashboard/210680)
**Author:** [@joaoantoniopereira2](https://discuss.elastic.co/u/joaoantoniopereira2)\ **Replies:** 4\ **Last updated:** [December 5, 2019, 11:57am UTC](https://discuss.elastic.co/t/interactive-zoom-in-kibana-7-dashboard/210680 "2019-12-05T11:57:29Z")
Hi, I recently upgraded from Kibana 5.5 to 7.x. I noticed I cannot zoom in dashboard visualizations with mouse pointer by default, which was possible in 5.5. Is there any setting I can choose to make this feature avai… --- ## [Tcp input plugin errors](https://discuss.elastic.co/t/tcp-input-plugin-errors/210673)
**Author:** [@annk](https://discuss.elastic.co/u/annk)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 10:11am UTC](https://discuss.elastic.co/t/tcp-input-plugin-errors/210673 "2019-12-05T10:11:37Z")
\[logstash.inputs.tcp \] Error in Netty pipeline: java.io.IOException: Connection reset by peer I've 3 logstahs nodes(docker containers) in our cluster and I am also seeing "Number of nodes " going up and down in th… --- ## [Histogram not showing in Discover](https://discuss.elastic.co/t/histogram-not-showing-in-discover/210516)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 11:33am UTC](https://discuss.elastic.co/t/histogram-not-showing-in-discover/210516 "2019-12-05T11:33:59Z")
Hello, I've updated my stack from 7.4 to 7.5 and since then Kibana is not showing the histogram in discover for the test index I have with dates spanning years (from 2008 to 2019), changing the scaling interval only wor… --- ## [How to write Logstash input to get data from Rest API](https://discuss.elastic.co/t/how-to-write-logstash-input-to-get-data-from-rest-api/210687)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 11:26am UTC](https://discuss.elastic.co/t/how-to-write-logstash-input-to-get-data-from-rest-api/210687 "2019-12-05T11:26:44Z")
Hi team, I'm new to ELK ( using 7.2.0) and I need to connect to ServiceNow through a Rest API connection, I'm not exactly sure of how to proceed with it. Can anyone give me a simple example of how the Logstash conf f… --- ## [Elasticsearch X-Pack monitoring index-template](https://discuss.elastic.co/t/elasticsearch-x-pack-monitoring-index-template/210686)
**Author:** [@xtruthx](https://discuss.elastic.co/u/xtruthx)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 11:19am UTC](https://discuss.elastic.co/t/elasticsearch-x-pack-monitoring-index-template/210686 "2019-12-05T11:19:57Z")
Hello, simple question where i can find a index-template for the X-pack monitoring in a specific version. Actually i am not able to locate those specific template. Thanks for answers in advance. --- ## [Non-UI way of setting default index pattern](https://discuss.elastic.co/t/non-ui-way-of-setting-default-index-pattern/210644)
**Author:** [@AshTappin](https://discuss.elastic.co/u/AshTappin)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 11:16am UTC](https://discuss.elastic.co/t/non-ui-way-of-setting-default-index-pattern/210644 "2019-12-05T11:16:30Z")
I am currently starting up Kibana with Docker and I was wondering if there was a way of specifying the default index pattern without manually doing it through the UI? I am aware there is an API which I can use to create … --- ## [Logstash-input-jdbc handle geo shape for mysql geometry field](https://discuss.elastic.co/t/logstash-input-jdbc-handle-geo-shape-for-mysql-geometry-field/210677)
**Author:** [@xiangqian](https://discuss.elastic.co/u/xiangqian)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 10:36am UTC](https://discuss.elastic.co/t/logstash-input-jdbc-handle-geo-shape-for-mysql-geometry-field/210677 "2019-12-05T10:36:43Z")
when i use logstash-input-jdbc to transform data from mysql to es,i find a problem which seems like can not convert ASCII-8bit to UTF-8;this is not plugin'bug ;because mysql use a different format to encode geometry. wh… --- ## [Compare average and individual dynamics (in TSVB)](https://discuss.elastic.co/t/compare-average-and-individual-dynamics-in-tsvb/206191)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 6\ **Last updated:** [December 5, 2019, 10:31am UTC](https://discuss.elastic.co/t/compare-average-and-individual-dynamics-in-tsvb/206191 "2019-12-05T10:31:30Z")
Hi there, I've created a TSVB-visualization that plots the dynamics of an average rang (of all players) and individual rangs. It looks like that: This visualization is used in a dashboard filtered by a single player … --- ## [Error parsing csv when files are being added](https://discuss.elastic.co/t/error-parsing-csv-when-files-are-being-added/210071)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 10:00am UTC](https://discuss.elastic.co/t/error-parsing-csv-when-files-are-being-added/210071 "2019-12-05T10:00:57Z")
I'm copying log files generated on dba server on my linux machine (where logstash instance is) with crontab job every day at 06:30. Files are during generation being written each minute, which means that if generation is… --- ## [How to index documents which contain pascal-case strings and do some stemming associations?](https://discuss.elastic.co/t/how-to-index-documents-which-contain-pascal-case-strings-and-do-some-stemming-associations/209469)
**Author:** [@deostroll](https://discuss.elastic.co/u/deostroll)\ **Replies:** 3\ **Last updated:** [December 5, 2019, 9:53am UTC](https://discuss.elastic.co/t/how-to-index-documents-which-contain-pascal-case-strings-and-do-some-stemming-associations/209469 "2019-12-05T09:53:13Z")
For e.g. I have a document as follows: { "filename": "SRV\_MODA\_ACCT\_FSCK", "svcName": "VerifyAddOperationForUserTransactions" } If I'd provide search terms such as "srv", "moda", "acct", etc, I'd (for e.g.) want th… --- ## [How do I give input file path from a text file?](https://discuss.elastic.co/t/how-do-i-give-input-file-path-from-a-text-file/210666)
**Author:** [@Ramesh\_Raghavan](https://discuss.elastic.co/u/Ramesh_Raghavan)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 9:40am UTC](https://discuss.elastic.co/t/how-do-i-give-input-file-path-from-a-text-file/210666 "2019-12-05T09:40:53Z")
if I have a input field in config file like this. input { file { path =\> "/tmp/log.csv" start\_position =\> "beginning" } } How do I give input file path from a text file? --- ## [Logstash unable to gsub a pattern](https://discuss.elastic.co/t/logstash-unable-to-gsub-a-pattern/210273)
**Author:** [@Abhishek\_Kumar4](https://discuss.elastic.co/u/Abhishek_Kumar4)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 9:35am UTC](https://discuss.elastic.co/t/logstash-unable-to-gsub-a-pattern/210273 "2019-12-05T09:35:21Z")
I am sending below log file from filbeat to Logstash. The below is the output from filbeat to Logstash This output I got by setting filebeat output to stdout to see what is being sent to Logstash \\u001b\[m\\u001b\[32m\[201… --- ## [Top-K Plot with nested aggregations](https://discuss.elastic.co/t/top-k-plot-with-nested-aggregations/210662)
**Author:** [@elster](https://discuss.elastic.co/u/elster)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 9:28am UTC](https://discuss.elastic.co/t/top-k-plot-with-nested-aggregations/210662 "2019-12-05T09:28:19Z")
Dear experts, I would like to create a Top-K Plot as shown here using this DSL query: "aggs": { "nested\_app": { "nested": { "path": "app" }, "aggs": { "message" : { "filter": { … --- ## [Kibana TimeStamp Offset](https://discuss.elastic.co/t/kibana-timestamp-offset/210556)
**Author:** [@wokmichel](https://discuss.elastic.co/u/wokmichel)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 9:26am UTC](https://discuss.elastic.co/t/kibana-timestamp-offset/210556 "2019-12-05T09:26:58Z")
Hello, I am wondering how Kibana is handling timestamps' timezones when presenting documents in the discover section. I was under the impression that Kibana would use the browser timezone if none was specified in the fi… --- ## [Searching based on custom header field in APM index](https://discuss.elastic.co/t/searching-based-on-custom-header-field-in-apm-index/209855)
**Author:** [@anand\_gt](https://discuss.elastic.co/u/anand_gt)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 9:25am UTC](https://discuss.elastic.co/t/searching-based-on-custom-header-field-in-apm-index/209855 "2019-12-05T09:25:41Z")
Hi Team, I need to search based on a custom header field, say "context.request.headers.ua-device", I followed below procedure to make that field searchable by changing the index template. But even after indexing the … --- ## [\[Kibana\] - Multiple Indexes Bubble Chart](https://discuss.elastic.co/t/kibana-multiple-indexes-bubble-chart/210656)
**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 9:13am UTC](https://discuss.elastic.co/t/kibana-multiple-indexes-bubble-chart/210656 "2019-12-05T09:13:54Z")
Hi guys, Thanks in advance for your time, I'm trying to find a way to create the equivalent chart below (Area) calling 2 different indexes : In my case I have : index1 with rates1 coming from source1 index2 with r… --- ## [Multi-level Sankey Vega Visualisations in Kibana](https://discuss.elastic.co/t/multi-level-sankey-vega-visualisations-in-kibana/205978)
**Author:** [@1201](https://discuss.elastic.co/u/1201)\ **Replies:** 3\ **Last updated:** [December 5, 2019, 9:08am UTC](https://discuss.elastic.co/t/multi-level-sankey-vega-visualisations-in-kibana/205978 "2019-12-05T09:08:25Z")
Can anyone help about how to make multi-level Sankey Vega visualisations in Kibana? I am only able to make two-level Sankey Vega visualisations. [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1740) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1742)