# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1758 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1759 --- ## [Logstash mapping sql xml column to elasticsearch index properties](https://discuss.elastic.co/t/logstash-mapping-sql-xml-column-to-elasticsearch-index-properties/209495)
**Author:** [@karlm](https://discuss.elastic.co/u/karlm)\ **Replies:** 3\ **Last updated:** [November 26, 2019, 3:38pm UTC](https://discuss.elastic.co/t/logstash-mapping-sql-xml-column-to-elasticsearch-index-properties/209495 "2019-11-26T15:38:13Z")
Im creating "my\_events" index in elasticsearch \> PUT http://localhost:9200/my\_events \> { \> "settings" : { \> "number\_of\_shards" : 1 \> }, \> "mappings" : { \> "propert… --- ## [Sum calculation on field with Time](https://discuss.elastic.co/t/sum-calculation-on-field-with-time/209540)
**Author:** [@MrDannyHarry](https://discuss.elastic.co/u/MrDannyHarry)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 3:32pm UTC](https://discuss.elastic.co/t/sum-calculation-on-field-with-time/209540 "2019-11-26T15:32:58Z")
Hey All, Apologies if this is more aimed towards LogStash. I have used LogStash to push data to Kibana from a CSV file. This has so far been successful, my only issue atm is I now want to create a dashboard to view my… --- ## [Date math questions](https://discuss.elastic.co/t/date-math-questions/208559)
**Author:** [@john\_99](https://discuss.elastic.co/u/john_99)\ **Replies:** 2\ **Last updated:** [November 26, 2019, 3:31pm UTC](https://discuss.elastic.co/t/date-math-questions/208559 "2019-11-26T15:31:10Z")
Hi, I am pulling the data with {"gte": "now-1d/d"}}}, what if I need to pull the data twice a day - noon and midnight EST. --- ## [Kibana is disconnecting after some load into elasticsearch](https://discuss.elastic.co/t/kibana-is-disconnecting-after-some-load-into-elasticsearch/208264)
**Author:** [@ksareddy](https://discuss.elastic.co/u/ksareddy)\ **Replies:** 11\ **Last updated:** [November 26, 2019, 3:29pm UTC](https://discuss.elastic.co/t/kibana-is-disconnecting-after-some-load-into-elasticsearch/208264 "2019-11-26T15:29:53Z")
"error":{"message":"Uncaught error: Expected originalHeaders to be an object, but object given". { "statusCode": 500, "error": "Internal Server Error", "message": "An internal server error occurred" } can any one p… --- ## [Visualize: socket hangup](https://discuss.elastic.co/t/visualize-socket-hangup/209020)
**Author:** [@babarsiddique](https://discuss.elastic.co/u/babarsiddique)\ **Replies:** 5\ **Last updated:** [November 26, 2019, 2:31pm UTC](https://discuss.elastic.co/t/visualize-socket-hangup/209020 "2019-11-26T14:31:45Z")
Error: Bad Gateway at respond (http://xxx.xxx.xxx:5000/bundles/kibana.bundle.js?v=15543:13:2730) ........ Opening kibana's dashboard stopped the elasticsearch master and elasticsearch health goes from gr… --- ## [How to use and in logstash filter](https://discuss.elastic.co/t/how-to-use-and-in-logstash-filter/209376)
**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\ **Replies:** 7\ **Last updated:** [November 26, 2019, 2:24pm UTC](https://discuss.elastic.co/t/how-to-use-and-in-logstash-filter/209376 "2019-11-26T14:24:28Z")
I want to check if "domain" and "\[100\]" in \[message\] { drop { } } but it is dropping only first "domain" and not "\[100\]". What am I doing wrong? --- ## [Nested objects, to flatten or split?](https://discuss.elastic.co/t/nested-objects-to-flatten-or-split/209281)
**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 2:12pm UTC](https://discuss.elastic.co/t/nested-objects-to-flatten-or-split/209281 "2019-11-26T14:12:26Z")
Hi there, I'm using logstash and Kibana to visualise data stored in json format (about 2gigs worth). The ELK stack is all 7.4.2 However my understanding is that kibana doesn't support nested arrays of objects, of which… --- ## [Fuzziness support in intervals query?](https://discuss.elastic.co/t/fuzziness-support-in-intervals-query/208935)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 5\ **Last updated:** [November 26, 2019, 2:08pm UTC](https://discuss.elastic.co/t/fuzziness-support-in-intervals-query/208935 "2019-11-26T14:08:48Z")
ES 7.0 introduced support for the Lucene intervals query which is more powerful and easier to deal with than span queries (analyzer support, etc). However, one thing that span queries support and intervals doesn't is fuz… --- ## [NGram, timeout and errors](https://discuss.elastic.co/t/ngram-timeout-and-errors/209228)
**Author:** [@DesireeNordlund](https://discuss.elastic.co/u/DesireeNordlund)\ **Replies:** 2\ **Last updated:** [November 26, 2019, 2:04pm UTC](https://discuss.elastic.co/t/ngram-timeout-and-errors/209228 "2019-11-26T14:04:03Z")
It is importantant that you can search for parts of words, so I'm setting up nGram-settings. It works nicely when I have min and max to 4, but when I tested to raise max to 6 I got a problem. The problem occours when I … --- ## [How to parse ccda raw xml file using logstash](https://discuss.elastic.co/t/how-to-parse-ccda-raw-xml-file-using-logstash/209266)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 3\ **Last updated:** [November 26, 2019, 1:52pm UTC](https://discuss.elastic.co/t/how-to-parse-ccda-raw-xml-file-using-logstash/209266 "2019-11-26T13:52:56Z")
Dear All. i have some use to parse or directly point Elasticsearch to query DSL on top of raw ccda xml file. below is the demo ccdaraw.xml file link: link raw CCDA.xml file Note : we have huge number of raw CCDA.xml … --- ## [Elastisearch timeout on service start after yum update from 7.3 to 7.4](https://discuss.elastic.co/t/elastisearch-timeout-on-service-start-after-yum-update-from-7-3-to-7-4/201863)
**Author:** [@EtienneDemers](https://discuss.elastic.co/u/EtienneDemers)\ **Replies:** 5\ **Last updated:** [November 26, 2019, 1:37pm UTC](https://discuss.elastic.co/t/elastisearch-timeout-on-service-start-after-yum-update-from-7-3-to-7-4/201863 "2019-11-26T13:37:28Z")
I installed a brand new single node dev cluster of ES 7.3 earlier this week from the yum repository and ran a yum update to update the stack to 7.4 When i try to run service elasticsearch start i get a timeout, but no e… --- ## [Need help with metricbeat field update](https://discuss.elastic.co/t/need-help-with-metricbeat-field-update/209382)
**Author:** [@Jonny\_Reyes](https://discuss.elastic.co/u/Jonny_Reyes)\ **Replies:** 3\ **Last updated:** [November 26, 2019, 1:30pm UTC](https://discuss.elastic.co/t/need-help-with-metricbeat-field-update/209382 "2019-11-26T13:30:08Z")
Hi, I'm trying to replace a string value (process status that has values like running or stopped) but i'm failing. I only want to update "running" as an 1 and "stopped" as a 0. I've testing with filters like: filter {… --- ## [PLEASE, CAN I HELP YOU?](https://discuss.elastic.co/t/please-can-i-help-you/209516)
**Author:** [@matteo001](https://discuss.elastic.co/u/matteo001)\ **Replies:** 0\ **Last updated:** [November 26, 2019, 1:02pm UTC](https://discuss.elastic.co/t/please-can-i-help-you/209516 "2019-11-26T13:02:31Z")
I saw several video, read documentation but I don't know: How can I use ELK? I explain my problem. I want to create an application such that: (one person, in this case, LUCA) Luca is on the Kibana and he sees the data.… --- ## [How to filter a field values by 'contains' term](https://discuss.elastic.co/t/how-to-filter-a-field-values-by-contains-term/208629)
**Author:** [@nimrod](https://discuss.elastic.co/u/nimrod)\ **Replies:** 4\ **Last updated:** [November 26, 2019, 1:18pm UTC](https://discuss.elastic.co/t/how-to-filter-a-field-values-by-contains-term/208629 "2019-11-26T13:18:33Z")
I want to filter out the results by getting all results which their 'testClass' field contains the 'policymanager.ui.common.RulesPageTests' package name. Is there any way querying the results out? --- ## [How to deploy elastic search with azure portal service](https://discuss.elastic.co/t/how-to-deploy-elastic-search-with-azure-portal-service/209513)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 0\ **Last updated:** [November 26, 2019, 12:57pm UTC](https://discuss.elastic.co/t/how-to-deploy-elastic-search-with-azure-portal-service/209513 "2019-11-26T12:57:20Z")
Dear All. how to add Elasticsearch service with azure portal through web. i tried to add this Elasticsearch service with azure but getting below issue: please some one help -how to add elasticsearch with azure por… --- ## [Reporting option is not showing up in Kibana 7.4](https://discuss.elastic.co/t/reporting-option-is-not-showing-up-in-kibana-7-4/206928)
**Author:** [@Sagesh](https://discuss.elastic.co/u/Sagesh)\ **Replies:** 4\ **Last updated:** [November 26, 2019, 12:46pm UTC](https://discuss.elastic.co/t/reporting-option-is-not-showing-up-in-kibana-7-4/206928 "2019-11-26T12:46:28Z")
Reporting option is not showing up in Kibana 7.4. Can any one help me to enable reporting in Kibana. I have set "xpack.reporting.enabled: true" in Yml file. Thanks in Advance Regards, Sagesh --- ## [Uncaught TypeError: Return value of Elasticsearch\\ClientBuilder::buildLoggers() must be an instance of Elasticsearch\\void, none returned](https://discuss.elastic.co/t/uncaught-typeerror-return-value-of-elasticsearch-clientbuilder-buildloggers-must-be-an-instance-of-elasticsearch-void-none-returned/207847)
**Author:** [@azo](https://discuss.elastic.co/u/azo)\ **Replies:** 4\ **Last updated:** [November 26, 2019, 12:38pm UTC](https://discuss.elastic.co/t/uncaught-typeerror-return-value-of-elasticsearch-clientbuilder-buildloggers-must-be-an-instance-of-elasticsearch-void-none-returned/207847 "2019-11-26T12:38:55Z")
When i try to initialize client i get this error: Fatal error : Uncaught TypeError: Return value of Elasticsearch\\ClientBuilder::buildLoggers() must be an instance of Elasticsearch\\void, none returned in C:\\inetpub\\wwwr… --- ## [LOGSTASH system exit error while running logstash conf file](https://discuss.elastic.co/t/logstash-system-exit-error-while-running-logstash-conf-file/209500)
**Author:** [@Viveck](https://discuss.elastic.co/u/Viveck)\ **Replies:** 0\ **Last updated:** [November 26, 2019, 12:04pm UTC](https://discuss.elastic.co/t/logstash-system-exit-error-while-running-logstash-conf-file/209500 "2019-11-26T12:04:01Z")
When running my logstash conf file getting this type of error,plz help \[root@localhost logstash\]# ./bin/logstash -f /etc/logstash/conf.d/logstash-sample.conf Thread.exclusive is deprecated, use Thread::Mutex WARNING: … --- ## [Waiting for the transport certificates (/mnt/elastic-internal/transport-certificates/elasticsearch-sample-es-default-0.tls.key)](https://discuss.elastic.co/t/waiting-for-the-transport-certificates-mnt-elastic-internal-transport-certificates-elasticsearch-sample-es-default-0-tls-key/209313)
**Author:** [@ftyuuu](https://discuss.elastic.co/u/ftyuuu)\ **Replies:** 2\ **Last updated:** [November 26, 2019, 11:28am UTC](https://discuss.elastic.co/t/waiting-for-the-transport-certificates-mnt-elastic-internal-transport-certificates-elasticsearch-sample-es-default-0-tls-key/209313 "2019-11-26T11:28:32Z")
I want to debug es, so i commented on the following code in cmd/manager/main.go. But pod stop at init container (elastic-internal-init-filesystem). if operator.HasRole(operator.NamespaceOperator, roles) { //if e… --- ## [If condition inside aggregate filter](https://discuss.elastic.co/t/if-condition-inside-aggregate-filter/209486)
**Author:** [@Anuwa\_A](https://discuss.elastic.co/u/Anuwa_A)\ **Replies:** 0\ **Last updated:** [November 26, 2019, 11:08am UTC](https://discuss.elastic.co/t/if-condition-inside-aggregate-filter/209486 "2019-11-26T11:08:04Z")
I want to create my document using mysql data, here when creating document i want to use if condition, This is my mysql data, id myid1 myid2 name 1 1 2 abc 2 1 2 xyz i want to… --- ## [Logstash - input filter ruby. Persisted vs memory queue: different way to store a blob column from Oracle](https://discuss.elastic.co/t/logstash-input-filter-ruby-persisted-vs-memory-queue-different-way-to-store-a-blob-column-from-oracle/209481)
**Author:** [@evecitas89](https://discuss.elastic.co/u/evecitas89)\ **Replies:** 0\ **Last updated:** [November 26, 2019, 11:02am UTC](https://discuss.elastic.co/t/logstash-input-filter-ruby-persisted-vs-memory-queue-different-way-to-store-a-blob-column-from-oracle/209481 "2019-11-26T11:02:16Z")
Hello everyone. I have a Logstash pipeline reading from Oracle database a Blob column, named INPUT\_MESSAGE. In the pipepiline.yml I was using this configuration for the pipeline: queue.type: memory In the pipeline.co… --- ## [Problem with JSON](https://discuss.elastic.co/t/problem-with-json/208896)
**Author:** [@Parry](https://discuss.elastic.co/u/Parry)\ **Replies:** 2\ **Last updated:** [November 26, 2019, 10:49am UTC](https://discuss.elastic.co/t/problem-with-json/208896 "2019-11-26T10:49:47Z")
Hello. I have problem with json logs. Some of logs isn't pushed to Elastic+Kibana properly. I get this error: "\[2019-11-21T08:51:24,441\]\[ERROR\]\[logstash.codecs.json \]\[main\] JSON parse error, original data now in me… --- ## [Phrase suggestion against multiple indexes: more is less?](https://discuss.elastic.co/t/phrase-suggestion-against-multiple-indexes-more-is-less/209474)
**Author:** [@acerioni](https://discuss.elastic.co/u/acerioni)\ **Replies:** 0\ **Last updated:** [November 26, 2019, 10:45am UTC](https://discuss.elastic.co/t/phrase-suggestion-against-multiple-indexes-more-is-less/209474 "2019-11-26T10:45:48Z")
Hi, I encounter exactly the same problem as the one reported by another user on last February, cf. https://discuss.elastic.co/t/use-phrase-suggester-over-multiple-indices/166956. The problem can be reproduced by running… --- ## [New user can't login kibana](https://discuss.elastic.co/t/new-user-cant-login-kibana/204810)
**Author:** [@lonelyleaf](https://discuss.elastic.co/u/lonelyleaf)\ **Replies:** 6\ **Last updated:** [November 26, 2019, 10:42am UTC](https://discuss.elastic.co/t/new-user-cant-login-kibana/204810 "2019-11-26T10:42:57Z")
I setup eck and login by default "elastic" account successfully.But I or logstash can't login by new account created in kibana. {"statusCode":401,"error":"Unauthorized","message":"\[security\_exception\] unable to authe… --- ## [Cluster Block Exception - Elastic Search 7.4.2](https://discuss.elastic.co/t/cluster-block-exception-elastic-search-7-4-2/209471)
**Author:** [@javaamtho](https://discuss.elastic.co/u/javaamtho)\ **Replies:** 0\ **Last updated:** [November 26, 2019, 10:39am UTC](https://discuss.elastic.co/t/cluster-block-exception-elastic-search-7-4-2/209471 "2019-11-26T10:39:39Z")
Elastic 7.4, The multiple types of support are deprecated !! But it's not blocked as per the elastic documentation. // PUT twitter/user/kimchy { "name": "Shay Banon", "user\_name": "kimchy", "email": "shay@kimchy.c… --- ## [Scaling index/shard model: Message conversations](https://discuss.elastic.co/t/scaling-index-shard-model-message-conversations/209378)
**Author:** [@Tyler\_Weitzman](https://discuss.elastic.co/u/Tyler_Weitzman)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 10:36am UTC](https://discuss.elastic.co/t/scaling-index-shard-model-message-conversations/209378 "2019-11-26T10:36:00Z")
I run a messaging app. My past teammate set up our elasticsearch service for users to search through all their messages - where each document in ES is a message object. Our staging server cluster has red health and I fo… --- ## [Logstash stops executing jdbc query](https://discuss.elastic.co/t/logstash-stops-executing-jdbc-query/209460)
**Author:** [@Ayden](https://discuss.elastic.co/u/Ayden)\ **Replies:** 0\ **Last updated:** [November 26, 2019, 9:56am UTC](https://discuss.elastic.co/t/logstash-stops-executing-jdbc-query/209460 "2019-11-26T09:56:24Z")
Hello, I have logstash running a jdbc input with a 5 minute scheduler and after few hours logstash stops doing the query. The latest log I have is: \[2019-11-25T18:00:31,645\]\[DEBUG\]\[logstash.inputs.jdbc \] Executing… --- ## [Max\_poll\_records doesn't works on startup](https://discuss.elastic.co/t/max-poll-records-doesnt-works-on-startup/209046)
**Author:** [@Sergey\_Smirnov](https://discuss.elastic.co/u/Sergey_Smirnov)\ **Replies:** 7\ **Last updated:** [November 26, 2019, 9:04am UTC](https://discuss.elastic.co/t/max-poll-records-doesnt-works-on-startup/209046 "2019-11-26T09:04:57Z")
Parameter max\_poll\_records of kafka plagin doesn't works on service startup and message sequence doesn't save. Logstash config: input { kafka { bootstrap\_servers =\> "0.dual.kafka.qa-env.com:9092,1.dual.kafka.qa-env… --- ## [Hostname verification failed while setting up logstash to connect with elasticsearch](https://discuss.elastic.co/t/hostname-verification-failed-while-setting-up-logstash-to-connect-with-elasticsearch/209450)
**Author:** [@Vikas\_Yadav](https://discuss.elastic.co/u/Vikas_Yadav)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 9:01am UTC](https://discuss.elastic.co/t/hostname-verification-failed-while-setting-up-logstash-to-connect-with-elasticsearch/209450 "2019-11-26T09:01:03Z")
i'm setting up the ELK security using X-Pack, I generated the CA and Certs as suggested by the docs: bin/elasticsearch-certutil ca bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12 Shipped them to all the ela… --- ## [Can user behavior be detected by machine learning?](https://discuss.elastic.co/t/can-user-behavior-be-detected-by-machine-learning/209253)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 3\ **Last updated:** [November 26, 2019, 8:49am UTC](https://discuss.elastic.co/t/can-user-behavior-be-detected-by-machine-learning/209253 "2019-11-26T08:49:41Z")
I want to find a user who repeats certain actions. here is example document ... {"user\_id":"user01", "action":"A", "@timestamp":"2019-11-25 06:00:00.000"} {"user\_id":"user01", "action":"B", "@timestamp":"2019-11-25 0… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1757) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1759)