# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1756 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1757 --- ## [Can't use anymore @timestamp after a time filter change](https://discuss.elastic.co/t/cant-use-anymore-timestamp-after-a-time-filter-change/209639)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 2\ **Last updated:** [November 27, 2019, 11:15am UTC](https://discuss.elastic.co/t/cant-use-anymore-timestamp-after-a-time-filter-change/209639 "2019-11-27T11:15:51Z")
Hello, Usually, I always used @timestamp as time filter field name for Kibana index pattern. And I never used a date filter plugin in logstash. Yesterday, for testing purpose, I set a date filter in logstash : filter … --- ## [Showing GPS-routes in Kibana](https://discuss.elastic.co/t/showing-gps-routes-in-kibana/209655)
**Author:** [@michi123](https://discuss.elastic.co/u/michi123)\ **Replies:** 2\ **Last updated:** [November 27, 2019, 11:14am UTC](https://discuss.elastic.co/t/showing-gps-routes-in-kibana/209655 "2019-11-27T11:14:18Z")
Hi, I want to display GPS paths in Kibana in a solid line. At the moment the coordinates are only displayed in point form (solid line is wished). Furthermore I don't know any other possibility how to display the paths i… --- ## [Deploying multinode elastic cluster on Google Kubernetes Engine(GKE)](https://discuss.elastic.co/t/deploying-multinode-elastic-cluster-on-google-kubernetes-engine-gke/209420)
**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\ **Replies:** 6\ **Last updated:** [November 27, 2019, 11:06am UTC](https://discuss.elastic.co/t/deploying-multinode-elastic-cluster-on-google-kubernetes-engine-gke/209420 "2019-11-27T11:06:48Z")
Hi, I have deployed elasticsearch on GKE with cluster size : 3 under Asia region. Is it possible to add a new cluster under US region in GKE and join this one to the above cluster ( which is located in asia region). If… --- ## [Elasticsearch helm chart, are privileged containers necessary?](https://discuss.elastic.co/t/elasticsearch-helm-chart-are-privileged-containers-necessary/206205)
**Author:** [@nfickas](https://discuss.elastic.co/u/nfickas)\ **Replies:** 1\ **Last updated:** [November 27, 2019, 11:01am UTC](https://discuss.elastic.co/t/elasticsearch-helm-chart-are-privileged-containers-necessary/206205 "2019-11-27T11:01:54Z")
Hello, I am trying to deploy the elasticsearch helm chart onto a PKS cluster. I keep running into issues since the PodSecurityPolicy that is in effect does not allow for privileged containers. Is there a way to run the… --- ## [I want to change @timestamp value with my message timestamp value](https://discuss.elastic.co/t/i-want-to-change-timestamp-value-with-my-message-timestamp-value/209608)
**Author:** [@SoniyaGupta](https://discuss.elastic.co/u/SoniyaGupta)\ **Replies:** 4\ **Last updated:** [November 27, 2019, 10:53am UTC](https://discuss.elastic.co/t/i-want-to-change-timestamp-value-with-my-message-timestamp-value/209608 "2019-11-27T10:53:09Z")
--- ## [Filebeatのbackoff関連の動作確認方法を知りたい](https://discuss.elastic.co/t/filebeat-backoff/209657)
**Author:** [@sat1100](https://discuss.elastic.co/u/sat1100)\ **Replies:** 0\ **Last updated:** [November 27, 2019, 10:21am UTC](https://discuss.elastic.co/t/filebeat-backoff/209657 "2019-11-27T10:21:51Z")
現在、Filebeatにてbackoffにてスキャン間隔を指定して動作を確認しようとしております。 filebeat.ymlには下記の設定をしており、15s-30s-1m-2m-4m-5m-5mと動作すると想定しています。 #Log input type: log enabled: true scan\_frequency: 300s backoff: 15s max\_backoff: 300s backoff\_fact… --- ## [How to create a pipeline in elasticsearch cloud](https://discuss.elastic.co/t/how-to-create-a-pipeline-in-elasticsearch-cloud/209650)
**Author:** [@Sajeeva\_Lakmal](https://discuss.elastic.co/u/Sajeeva_Lakmal)\ **Replies:** 0\ **Last updated:** [November 27, 2019, 10:02am UTC](https://discuss.elastic.co/t/how-to-create-a-pipeline-in-elasticsearch-cloud/209650 "2019-11-27T10:02:58Z")
I'm evaluating elasticsearch cloud and I tried creating a pipeline which consumes data from a data source and saves it to ES. I'm not sure how to enable the pipeline once created. There is no option to enable this or de… --- ## [Creating custom visualizations in Kibana](https://discuss.elastic.co/t/creating-custom-visualizations-in-kibana/206523)
**Author:** [@SunilSMenon](https://discuss.elastic.co/u/SunilSMenon)\ **Replies:** 3\ **Last updated:** [November 27, 2019, 9:56am UTC](https://discuss.elastic.co/t/creating-custom-visualizations-in-kibana/206523 "2019-11-27T09:56:51Z")
We are using ELK stack (6.8.4)for application and server log analysis. We have installed the Elasticsearch and Kibana components of ELK and also we have created default visualizations. It will be of great help if you ca… --- ## [Aggregation only query returns hits with no aggregations](https://discuss.elastic.co/t/aggregation-only-query-returns-hits-with-no-aggregations/209520)
**Author:** [@KamyarGhajar](https://discuss.elastic.co/u/KamyarGhajar)\ **Replies:** 0\ **Last updated:** [November 26, 2019, 1:16pm UTC](https://discuss.elastic.co/t/aggregation-only-query-returns-hits-with-no-aggregations/209520 "2019-11-26T13:16:46Z")
I have a query that works properly sometimes. This query is simple bool query with nested composite(on terms) aggregations with hits size of zero because I only need the terms agg results so I can group the results by a … --- ## [How to store objects which are shared for another objects?](https://discuss.elastic.co/t/how-to-store-objects-which-are-shared-for-another-objects/209326)
**Author:** [@SeminDM](https://discuss.elastic.co/u/SeminDM)\ **Replies:** 2\ **Last updated:** [November 27, 2019, 9:25am UTC](https://discuss.elastic.co/t/how-to-store-objects-which-are-shared-for-another-objects/209326 "2019-11-27T09:25:44Z")
Hello! I have object of 'A' which have references to rarely changed object of 'RarelyChanged' (for example, user context) and frequently changed object of 'FrequentlyChanged'. "Rarely changed" means the many 'A' objec… --- ## [After upgrade from 6.8.4 to 7.4.1 no data is sent to ES](https://discuss.elastic.co/t/after-upgrade-from-6-8-4-to-7-4-1-no-data-is-sent-to-es/206821)
**Author:** [@MichelV](https://discuss.elastic.co/u/MichelV)\ **Replies:** 6\ **Last updated:** [November 27, 2019, 8:42am UTC](https://discuss.elastic.co/t/after-upgrade-from-6-8-4-to-7-4-1-no-data-is-sent-to-es/206821 "2019-11-27T08:42:40Z")
I'm preparing an upgrade of ELK for a customer, moving from 6.2.0 to 7.4.1. The upgrade of ELK to 6.8.4 worked fine, however after upgrading to 7.4.1 logstash no longer sends data to ES. ES and Kibana are both on 7.4.1 … --- ## [Have a single ip for the cluster](https://discuss.elastic.co/t/have-a-single-ip-for-the-cluster/209626)
**Author:** [@Medidou](https://discuss.elastic.co/u/Medidou)\ **Replies:** 1\ **Last updated:** [November 27, 2019, 8:39am UTC](https://discuss.elastic.co/t/have-a-single-ip-for-the-cluster/209626 "2019-11-27T08:39:38Z")
Hello, I wanted to know how I can configure a single ip for my cluster that contains 3 nodes because currently my applications in config files just the ip of the master, but if it comes to fall my applications will not… --- ## [Error during elasticsearch upgrade 6.8 to 7.4.2 unassigned shards IllegalArgumentException failed to parse date field](https://discuss.elastic.co/t/error-during-elasticsearch-upgrade-6-8-to-7-4-2-unassigned-shards-illegalargumentexception-failed-to-parse-date-field/209452)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 2\ **Last updated:** [November 27, 2019, 7:59am UTC](https://discuss.elastic.co/t/error-during-elasticsearch-upgrade-6-8-to-7-4-2-unassigned-shards-illegalargumentexception-failed-to-parse-date-field/209452 "2019-11-27T07:59:42Z")
ERROR: (IllegalArgumentException\[failed to parse date field \[1574755226.3741724\] with format \[strict\_date\_optional\_time||epoch\_millis\]\]) During upgrade after I upgraded one node and reenabled shard allocation PUT \_clu… --- ## [JDBC want to connect to db as windows user](https://discuss.elastic.co/t/jdbc-want-to-connect-to-db-as-windows-user/209628)
**Author:** [@kolten](https://discuss.elastic.co/u/kolten)\ **Replies:** 0\ **Last updated:** [November 27, 2019, 7:57am UTC](https://discuss.elastic.co/t/jdbc-want-to-connect-to-db-as-windows-user/209628 "2019-11-27T07:57:05Z")
I want to read db with jdbc input. Logstash wants to connect with windows authentication but i dont want this. Because windows authentication is not permitted. But logstash do this and crashes. How can i solve this pro… --- ## [Failed to obtain node locks, tried \[\[/datadisks/disk1/elasticsearch/data\]\] with lock id \[0\]; maybe these locations are not writable or multiple nodes were started without increasing \[node.max\_local\_storage\_nodes\] (was \[1\])?](https://discuss.elastic.co/t/failed-to-obtain-node-locks-tried-datadisks-disk1-elasticsearch-data-with-lock-id-0-maybe-these-locations-are-not-writable-or-multiple-nodes-were-started-without-increasing-node-max-local-storage-nodes-was-1/209624)
**Author:** [@Gokulnath](https://discuss.elastic.co/u/Gokulnath)\ **Replies:** 0\ **Last updated:** [November 27, 2019, 7:35am UTC](https://discuss.elastic.co/t/failed-to-obtain-node-locks-tried-datadisks-disk1-elasticsearch-data-with-lock-id-0-maybe-these-locations-are-not-writable-or-multiple-nodes-were-started-without-increasing-node-max-local-storage-nodes-was-1/209624 "2019-11-27T07:35:48Z")
In Kibana Nodes are in online, But when i checked the status in each node it shows it is failed. Thanks in Advance. --- ## [Kibana iframe with Token (Authentication purpose)](https://discuss.elastic.co/t/kibana-iframe-with-token-authentication-purpose/207744)
**Author:** [@vishal\_M](https://discuss.elastic.co/u/vishal_M)\ **Replies:** 8\ **Last updated:** [November 27, 2019, 7:19am UTC](https://discuss.elastic.co/t/kibana-iframe-with-token-authentication-purpose/207744 "2019-11-27T07:19:45Z")
Hello Team, I have integrated the Kibana dashboard "iframe" with my react application. But, each time I have to log-in to see the Kibana dashboard. (FYI: My Kibana version 7.4.0) So, I have followed a few paths to bypa… --- ## [Elasticsearch cluster is in Red state. How to recover it?](https://discuss.elastic.co/t/elasticsearch-cluster-is-in-red-state-how-to-recover-it/207444)
**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\ **Replies:** 13\ **Last updated:** [November 27, 2019, 6:58am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-is-in-red-state-how-to-recover-it/207444 "2019-11-27T06:58:36Z")
Hi, I am using Elasticsearch 6.6.1 in k8s environment. My cluster was in green state before. But now my cluster is in red state due to UNASSIGNED shards. I see many shards are in PRIMARY\_FAILED state. You can find the … --- ## [Io error the network adapter could not establish the connection in logstash](https://discuss.elastic.co/t/io-error-the-network-adapter-could-not-establish-the-connection-in-logstash/209236)
**Author:** [@saravana\_hariharan](https://discuss.elastic.co/u/saravana_hariharan)\ **Replies:** 1\ **Last updated:** [November 27, 2019, 6:28am UTC](https://discuss.elastic.co/t/io-error-the-network-adapter-could-not-establish-the-connection-in-logstash/209236 "2019-11-27T06:28:52Z")
unable to connect to database.tried 1times{:error\_message =\>"java::javasql::sqlrecoverableexception: io error the network adapter could not establish the connection in logstash"} im connecting oracle to kibana while run… --- ## [Error on elasticsearch](https://discuss.elastic.co/t/error-on-elasticsearch/208659)
**Author:** [@elktester](https://discuss.elastic.co/u/elktester)\ **Replies:** 1\ **Last updated:** [November 27, 2019, 6:27am UTC](https://discuss.elastic.co/t/error-on-elasticsearch/208659 "2019-11-27T06:27:37Z")
Hello! I can not import the data (csv file) as I did before Whenever I try to import the files the following error is displayed: \[2019-11-20T09:58:52,897\]\[DEBUG\]\[org.logstash.execution.PeriodicFlush\]\[main\] Pushing flu… --- ## [Color rules not working in visual builder when grouping by terms](https://discuss.elastic.co/t/color-rules-not-working-in-visual-builder-when-grouping-by-terms/208621)
**Author:** [@arun1](https://discuss.elastic.co/u/arun1)\ **Replies:** 4\ **Last updated:** [November 27, 2019, 6:27am UTC](https://discuss.elastic.co/t/color-rules-not-working-in-visual-builder-when-grouping-by-terms/208621 "2019-11-27T06:27:29Z")
Hi, The color rules are not working in visual builder when I am grouping by terms aggregation. However it works when I remove the terms aggregation. Please help on this. Thanks, Arun --- ## [Timeseriesのlabel間集計](https://discuss.elastic.co/t/timeseries-label/209419)
**Author:** [@nakar-kashi](https://discuss.elastic.co/u/nakar-kashi)\ **Replies:** 8\ **Last updated:** [November 27, 2019, 6:17am UTC](https://discuss.elastic.co/t/timeseries-label/209419 "2019-11-27T06:17:22Z")
こんにちは。 現在kibanaでサーバごとのディスク使用量の前日との増減を表示したいと思っています。 timeseriesで当日、前日のディス使用量は表示できたのですが、差分がうまく取れません。 別ラベルのデータをとってくることは出来るのでしょうか。 尚、ディスク使用量は1つのデータとなっているので、同じindexに対するoffsetを使用しています。 ラベル1 Aggregation:MAX Field:use\_disk … --- ## [How to remove the root element while xml parsing using Logstash?](https://discuss.elastic.co/t/how-to-remove-the-root-element-while-xml-parsing-using-logstash/209412)
**Author:** [@Reshmi](https://discuss.elastic.co/u/Reshmi)\ **Replies:** 2\ **Last updated:** [November 27, 2019, 6:13am UTC](https://discuss.elastic.co/t/how-to-remove-the-root-element-while-xml-parsing-using-logstash/209412 "2019-11-27T06:13:10Z")
My sample XML structure is as below: \ \\ \ \\ \ \ With the below code: … --- ## [Fetching Data from couch db(nosql db) to elasticsearch through logstash?](https://discuss.elastic.co/t/fetching-data-from-couch-db-nosql-db-to-elasticsearch-through-logstash/209600)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 1\ **Last updated:** [November 27, 2019, 6:11am UTC](https://discuss.elastic.co/t/fetching-data-from-couch-db-nosql-db-to-elasticsearch-through-logstash/209600 "2019-11-27T06:11:06Z")
Hi, I want to fetch data from couch db which is a nosql db to elasticsearch through logstash. but i don't know what the logstash config file will look like, I mean what Input section will look like in the config file. … --- ## [Matching field to a single digit number](https://discuss.elastic.co/t/matching-field-to-a-single-digit-number/209405)
**Author:** [@sreliable](https://discuss.elastic.co/u/sreliable)\ **Replies:** 2\ **Last updated:** [November 27, 2019, 6:06am UTC](https://discuss.elastic.co/t/matching-field-to-a-single-digit-number/209405 "2019-11-27T06:06:12Z")
I have a field which contains strings like "0","1"..."10","11"..."23". How do I get an if statement where I take only fields which match single digits? ie. "0","1"...."9"? Currently what I have is this: if \[tmHour\] =~… --- ## [Pickup Updates from ElasticSearch Index and send to Kafka](https://discuss.elastic.co/t/pickup-updates-from-elasticsearch-index-and-send-to-kafka/209519)
**Author:** [@giridhar\_varma](https://discuss.elastic.co/u/giridhar_varma)\ **Replies:** 1\ **Last updated:** [November 27, 2019, 6:05am UTC](https://discuss.elastic.co/t/pickup-updates-from-elasticsearch-index-and-send-to-kafka/209519 "2019-11-27T06:05:41Z")
Hello Team, Need your guidance for my problem Requirement:- we push the updates into our ES Index from our source, and we want to pick up those updates and further send to Kafka topic using kafka output plugin Questi… --- ## [Send Only updates to Kafka topic](https://discuss.elastic.co/t/send-only-updates-to-kafka-topic/209524)
**Author:** [@giridhar\_varma](https://discuss.elastic.co/u/giridhar_varma)\ **Replies:** 1\ **Last updated:** [November 27, 2019, 6:04am UTC](https://discuss.elastic.co/t/send-only-updates-to-kafka-topic/209524 "2019-11-27T06:04:48Z")
Hi Team, we need to send the updates received into ElasticSearch Index(example: testcaseindex) to Kafka topic The Solution i am looking for is:- To only pick up UPDATES not the whole of index data everytime we schedul… --- ## [Logstash pipeline stops working](https://discuss.elastic.co/t/logstash-pipeline-stops-working/209604)
**Author:** [@b725](https://discuss.elastic.co/u/b725)\ **Replies:** 3\ **Last updated:** [November 27, 2019, 5:54am UTC](https://discuss.elastic.co/t/logstash-pipeline-stops-working/209604 "2019-11-27T05:54:33Z")
I noticed today that a pipeline stopped working Background events get logged into different Amazon S3 buckets paths a logstash pipeline is created for different bucket paths so that they run in parallel plus different… --- ## [Filebeatモジュールの作成について](https://discuss.elastic.co/t/filebeat/209448)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 3\ **Last updated:** [November 27, 2019, 5:25am UTC](https://discuss.elastic.co/t/filebeat/209448 "2019-11-27T05:25:12Z")
filebeat v7.4を使用しております 以下のマニュアルを参考に、filebeatのモジュールを作成しようとしております。 https://www.elastic.co/guide/en/beats/devguide/7.4/filebeat-modules-devguide.html マニュアルに従い、モジュール作成するにあたって以下のコマンドを実行したところ、エラーとなりました。 原因をご教示頂けないでしょうか $ … --- ## [Highlighting Using Nest](https://discuss.elastic.co/t/highlighting-using-nest/208180)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 7\ **Last updated:** [November 27, 2019, 5:15am UTC](https://discuss.elastic.co/t/highlighting-using-nest/208180 "2019-11-27T05:15:37Z")
We are trying to use the Highlighting feature , but we just want to update each document that has the relevant highlights. For example: var hits = searchResponse.Hits.Where(h =\> h.Highlight.Count \> 0).Select(p =\> { p.S… --- ## [Can I get logstash's instance-id or hostname / node name in processing?](https://discuss.elastic.co/t/can-i-get-logstashs-instance-id-or-hostname-node-name-in-processing/209030)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [November 27, 2019, 5:11am UTC](https://discuss.elastic.co/t/can-i-get-logstashs-instance-id-or-hostname-node-name-in-processing/209030 "2019-11-27T05:11:05Z")
Hi, I am runnnig logstash in kubernetes environment with identical configuration with multiple replicas as deployment. I need to debug the lost of some message parts, so I want process the message normally (parse and s… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1755) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1757)