# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1763

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1764

---

## [Logstash OSS contains some dependencies from component containing GPL License](https://discuss.elastic.co/t/logstash-oss-contains-some-dependencies-from-component-containing-gpl-license/209127)

<div class="topic-metadata">

**Author:** [@Sunil\_Chadha](https://discuss.elastic.co/u/Sunil_Chadha)\
**Replies:** 0\
**Last updated:** [November 23, 2019, 12:26am UTC](https://discuss.elastic.co/t/logstash-oss-contains-some-dependencies-from-component-containing-gpl-license/209127 "2019-11-23T00:26:05Z")

</div>

Hi, I did FOSSA of Logstash 6.6.1 and Logstash-codec-plugin, both these software are under Apache 2.0 License. However both contains sub-components that are GPL, LGPL copyleft license. Fossa scanning reveals Logstash c…

---

## [Test filebeat and logstash independently](https://discuss.elastic.co/t/test-filebeat-and-logstash-independently/208997)

<div class="topic-metadata">

**Author:** [@carlsoane](https://discuss.elastic.co/u/carlsoane)\
**Replies:** 1\
**Last updated:** [November 22, 2019, 9:18pm UTC](https://discuss.elastic.co/t/test-filebeat-and-logstash-independently/208997 "2019-11-22T21:18:52Z")

</div>

My production logstash pipeline receives events from the filebeat agent using the "beats" input plugin. For unit testing, I would like to be able to decouple filebeat and logstash. I was thinking I would generate a file…

---

## [Error while building package from Source Code](https://discuss.elastic.co/t/error-while-building-package-from-source-code/188432)

<div class="topic-metadata">

**Author:** [@saravananselvamohan](https://discuss.elastic.co/u/saravananselvamohan)\
**Replies:** 3\
**Last updated:** [November 22, 2019, 9:14pm UTC](https://discuss.elastic.co/t/error-while-building-package-from-source-code/188432 "2019-11-22T21:14:24Z")

</div>

yarn build --rpm yarn run v1.16.0 node scripts/build --all-platforms --rpm C:\\Users\\Admin\\kibana\\packages\\kbn-pm\\dist\\index.js:42419 var e = new Error("Cannot find module '" + req + "'"); ^ Error: Cannot find modul…

---

## [Timeouts for meraki filters 7.4.2](https://discuss.elastic.co/t/timeouts-for-meraki-filters-7-4-2/209115)

<div class="topic-metadata">

**Author:** [@Erin](https://discuss.elastic.co/u/Erin)\
**Replies:** 2\
**Last updated:** [November 22, 2019, 7:48pm UTC](https://discuss.elastic.co/t/timeouts-for-meraki-filters-7-4-2/209115 "2019-11-22T19:48:04Z")

</div>

Hi guys i am running into issues with the latest 7.4 logstash. my meraki filters are timing out that the message value is too large. I have tried to set a greedydata on the last field type and others. i am sending these …

---

## [DNS Filter wont work](https://discuss.elastic.co/t/dns-filter-wont-work/209094)

<div class="topic-metadata">

**Author:** [@elasticcp](https://discuss.elastic.co/u/elasticcp)\
**Replies:** 5\
**Last updated:** [November 22, 2019, 7:35pm UTC](https://discuss.elastic.co/t/dns-filter-wont-work/209094 "2019-11-22T19:35:50Z")

</div>

Hey i tried to resolve a hostname in to a DNS. My Input data Looks like this: \> { \> "query\_status": "ok", \> "urls": \[ \> { \> "id": "223622", \> "urlhaus\_reference": "https:\\/\\/urlh…

---

## [Logstash running as service is not sending logs](https://discuss.elastic.co/t/logstash-running-as-service-is-not-sending-logs/208777)

<div class="topic-metadata">

**Author:** [@alesabat](https://discuss.elastic.co/u/alesabat)\
**Replies:** 6\
**Last updated:** [November 22, 2019, 7:02pm UTC](https://discuss.elastic.co/t/logstash-running-as-service-is-not-sending-logs/208777 "2019-11-22T19:02:09Z")

</div>

Hi there! I have a rhel ppc64le with tomcat. Wanted to send logs to ELK cluster (filebeat discarted because has no ppc version, so I choose logstash). If I run logstash from CLI, it works fine and I can discover logs i…

---

## [Output logs to multiple index from logstash](https://discuss.elastic.co/t/output-logs-to-multiple-index-from-logstash/208991)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 6\
**Last updated:** [November 22, 2019, 6:51pm UTC](https://discuss.elastic.co/t/output-logs-to-multiple-index-from-logstash/208991 "2019-11-22T18:51:47Z")

</div>

Hi there, I am trying to send multiple log files from filebeat tologstash to elasticsearch. In kibana, I would like each log file under a separate index. This is my logstash.conf file: # Sample Logstash configuration f…

---

## [Issue with nGram Analyzer on ECE](https://discuss.elastic.co/t/issue-with-ngram-analyzer-on-ece/208967)

<div class="topic-metadata">

**Author:** [@Francisco\_Noguera](https://discuss.elastic.co/u/Francisco_Noguera)\
**Replies:** 5\
**Last updated:** [November 22, 2019, 6:37pm UTC](https://discuss.elastic.co/t/issue-with-ngram-analyzer-on-ece/208967 "2019-11-22T18:37:39Z")

</div>

Hi, I'm creating a index on ECE with a nGram analyzer but never works the query. This is my index: { "settings": { "analysis": { "analyzer": { "ailabs\_analyzer": { "type": "stop", "stopwords": \["a", …

---

## [Retrieve metadata of document in response to queries](https://discuss.elastic.co/t/retrieve-metadata-of-document-in-response-to-queries/208939)

<div class="topic-metadata">

**Author:** [@chari](https://discuss.elastic.co/u/chari)\
**Replies:** 11\
**Last updated:** [November 22, 2019, 6:39pm UTC](https://discuss.elastic.co/t/retrieve-metadata-of-document-in-response-to-queries/208939 "2019-11-22T18:39:15Z")

</div>

I am indexing the text content of a file by using res = es.index(index=myIndex,body=jsonDict), where jsonDict is just the text of a pdf file in a json dictionary. I am able to query the content and retrieve the relevan…

---

## [Can we make basic authentication part of Open Source ES?](https://discuss.elastic.co/t/can-we-make-basic-authentication-part-of-open-source-es/209104)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 2\
**Last updated:** [November 22, 2019, 6:39pm UTC](https://discuss.elastic.co/t/can-we-make-basic-authentication-part-of-open-source-es/209104 "2019-11-22T18:39:03Z")

</div>

Hey all, This could be a sensitive topic, so I hope I'm able to address it tactfully. Can we please get basic authentication integrated into the open source version of Elasticsearch? And it should be turned on by defau…

---

## [Is it possible to log authentication attempts for Kibana?](https://discuss.elastic.co/t/is-it-possible-to-log-authentication-attempts-for-kibana/209087)

<div class="topic-metadata">

**Author:** [@krlwbstr](https://discuss.elastic.co/u/krlwbstr)\
**Replies:** 1\
**Last updated:** [November 22, 2019, 6:37pm UTC](https://discuss.elastic.co/t/is-it-possible-to-log-authentication-attempts-for-kibana/209087 "2019-11-22T18:37:01Z")

</div>

Hi! I'm new to ELK and have successfully enabled authentication in Kibana. I've also enabled logging to logfile. Is it possible to configure attempts to Kibana to the logfile. i.e.: Timestamp, username, login status \[…

---

## [Kibana UI - missing authentication token for REST](https://discuss.elastic.co/t/kibana-ui-missing-authentication-token-for-rest/209066)

<div class="topic-metadata">

**Author:** [@m0rt](https://discuss.elastic.co/u/m0rt)\
**Replies:** 2\
**Last updated:** [November 22, 2019, 6:34pm UTC](https://discuss.elastic.co/t/kibana-ui-missing-authentication-token-for-rest/209066 "2019-11-22T18:34:36Z")

</div>

Welcome Everybody, I’m trying to setup secure ES cluster with Kibana. I was following the steps outlined in the Elasticsearch security: Best practices to keep your data safe webinar Everything seems to be fine except t…

---

## [Kibana dashboard import API not working from API export](https://discuss.elastic.co/t/kibana-dashboard-import-api-not-working-from-api-export/208961)

<div class="topic-metadata">

**Author:** [@sdndude](https://discuss.elastic.co/u/sdndude)\
**Replies:** 7\
**Last updated:** [November 22, 2019, 6:32pm UTC](https://discuss.elastic.co/t/kibana-dashboard-import-api-not-working-from-api-export/208961 "2019-11-22T18:32:21Z")

</div>

I am trying to use the export/import APIs so I can extract my objects and put them in a repo so they can be loaded in an install script that also does all the elasticsearch mappings and whatnot. I am testing and the exp…

---

## [Survey || Data Search and Monitoring (ITIM, SIEM) Software || $100](https://discuss.elastic.co/t/survey-data-search-and-monitoring-itim-siem-software-100/209111)

<div class="topic-metadata">

**Author:** [@Rush123](https://discuss.elastic.co/u/Rush123)\
**Replies:** 0\
**Last updated:** [November 22, 2019, 6:31pm UTC](https://discuss.elastic.co/t/survey-data-search-and-monitoring-itim-siem-software-100/209111 "2019-11-22T18:31:41Z")

</div>

Hi, I'm running a survey to better understand developers' perspectives on software offerings in the data search (eg. Solr, FAST, Endeca, Elastic etc.) and IT monitoring (ITIM, SIEM - eg. Splunk, Sumologic, IBM QRadar et…

---

## [Best method of delimiter splitting](https://discuss.elastic.co/t/best-method-of-delimiter-splitting/209095)

<div class="topic-metadata">

**Author:** [@gborg](https://discuss.elastic.co/u/gborg)\
**Replies:** 2\
**Last updated:** [November 22, 2019, 6:30pm UTC](https://discuss.elastic.co/t/best-method-of-delimiter-splitting/209095 "2019-11-22T18:30:34Z")

</div>

Hello I have had a few fields with deliniter seperated strings that I have expanded into their own fields With grok Is that the best method ? Explanation: You have a field: ":foo:bar:goat" I want the first field, I…

---

## [Panel Settings is not working](https://discuss.elastic.co/t/panel-settings-is-not-working/209074)

<div class="topic-metadata">

**Author:** [@JacquelineGrecco](https://discuss.elastic.co/u/JacquelineGrecco)\
**Replies:** 1\
**Last updated:** [November 22, 2019, 6:30pm UTC](https://discuss.elastic.co/t/panel-settings-is-not-working/209074 "2019-11-22T18:30:03Z")

</div>

Hello guys, could you help me? I'm trying to change a few settings in my panel, but in ever horizontal bar this option isn't available. Has a bug in kibana?

---

## [Extract Month and Year from date field](https://discuss.elastic.co/t/extract-month-and-year-from-date-field/209090)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 7\
**Last updated:** [November 22, 2019, 6:17pm UTC](https://discuss.elastic.co/t/extract-month-and-year-from-date-field/209090 "2019-11-22T18:17:22Z")

</div>

I am trying to extract Month from date field. But following is actually extracting month from @timestamp and not from first input { generator { message =\> '{"first\_report": "2019-05-30 14:57:59.11"}' coun…

---

## [Logstash 7.1.1 - java memory settings not applied](https://discuss.elastic.co/t/logstash-7-1-1-java-memory-settings-not-applied/209101)

<div class="topic-metadata">

**Author:** [@ArunANayagam](https://discuss.elastic.co/u/ArunANayagam)\
**Replies:** 0\
**Last updated:** [November 22, 2019, 5:42pm UTC](https://discuss.elastic.co/t/logstash-7-1-1-java-memory-settings-not-applied/209101 "2019-11-22T17:42:45Z")

</div>

Hi, I have a docker-compose file like this, version: "3.4" services: logstash: build: context: . volumes: - /opt/elk-logstash/conf/pipeline:/usr/share/logstash/pipeline/ - /opt/elk-logstash/…

---

## [Logstash 7.3.2 deployment not starting after upgrade from 7.1.1](https://discuss.elastic.co/t/logstash-7-3-2-deployment-not-starting-after-upgrade-from-7-1-1/209097)

<div class="topic-metadata">

**Author:** [@zgergely](https://discuss.elastic.co/u/zgergely)\
**Replies:** 0\
**Last updated:** [November 22, 2019, 4:42pm UTC](https://discuss.elastic.co/t/logstash-7-3-2-deployment-not-starting-after-upgrade-from-7-1-1/209097 "2019-11-22T16:42:41Z")

</div>

Hi, We have an ELK 7.1.1 deployment running fine on IKS (IBMCLOUD Kubernetes Service). We tried a re-deploy changing the 7.1.1 images for all the components with 7.3.2. All are working fine except logstash is not starti…

---

## [Logstash 6.8.4 and 6.8.5 jdbc input plugin erasing last\_run\_metadata](https://discuss.elastic.co/t/logstash-6-8-4-and-6-8-5-jdbc-input-plugin-erasing-last-run-metadata/209096)

<div class="topic-metadata">

**Author:** [@lpkirby](https://discuss.elastic.co/u/lpkirby)\
**Replies:** 0\
**Last updated:** [November 22, 2019, 4:42pm UTC](https://discuss.elastic.co/t/logstash-6-8-4-and-6-8-5-jdbc-input-plugin-erasing-last-run-metadata/209096 "2019-11-22T16:42:31Z")

</div>

Starting in Logstash 6.8.4 and still present in logstash 6.8.5... Whenever I start or restart logstash all of the files defined in all the jdbc input last\_run\_metadata\_path settings are erased. This causes all my queri…

---

## [Cross cluster index management](https://discuss.elastic.co/t/cross-cluster-index-management/205536)

<div class="topic-metadata">

**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\
**Replies:** 5\
**Last updated:** [November 22, 2019, 4:33pm UTC](https://discuss.elastic.co/t/cross-cluster-index-management/205536 "2019-11-22T16:33:16Z")

</div>

After cross-cluster settings are applied, is it possible to view/edit templates of indices on remote cluster and view/edit cluster level settings of remote cluster in Kibana ?

---

## [Warnings after patching from 7.4.0 to 7.4.1](https://discuss.elastic.co/t/warnings-after-patching-from-7-4-0-to-7-4-1/205340)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 5\
**Last updated:** [November 22, 2019, 4:27pm UTC](https://discuss.elastic.co/t/warnings-after-patching-from-7-4-0-to-7-4-1/205340 "2019-11-22T16:27:31Z")

</div>

Just patched kibana as the last component after patching hole cluster from 7.4.0 to 7.4.1 and find these kibana warnings when launched: {"type":"log","@timestamp":"2019-10-26T07:31:24Z","tags":\["warning","plugins","sec…

---

## [Create saved objects by custom id in Kibana?](https://discuss.elastic.co/t/create-saved-objects-by-custom-id-in-kibana/209018)

<div class="topic-metadata">

**Author:** [@kibana-rocks](https://discuss.elastic.co/u/kibana-rocks)\
**Replies:** 1\
**Last updated:** [November 22, 2019, 4:23pm UTC](https://discuss.elastic.co/t/create-saved-objects-by-custom-id-in-kibana/209018 "2019-11-22T16:23:51Z")

</div>

Hi, I am using Kibana 7.2. Is there any way to create any saved\_object (index-pattern, visualization, dashboards) by giving our own id manually in UI (not by API). Instead kibana assigning its own id. I am using free v…

---

## [Grok pattern match but replace a character from result](https://discuss.elastic.co/t/grok-pattern-match-but-replace-a-character-from-result/209084)

<div class="topic-metadata">

**Author:** [@GaryD007](https://discuss.elastic.co/u/GaryD007)\
**Replies:** 2\
**Last updated:** [November 22, 2019, 4:22pm UTC](https://discuss.elastic.co/t/grok-pattern-match-but-replace-a-character-from-result/209084 "2019-11-22T16:22:27Z")

</div>

Hi all I am trying to extract the timestamp from a log file but the date and time are separated by a semicolon. Is there a way I can make my Grok pattern work but replace the semicolon with a space ? Here is a sample f…

---

## [ILM and alias confusion](https://discuss.elastic.co/t/ilm-and-alias-confusion/208753)

<div class="topic-metadata">

**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\
**Replies:** 8\
**Last updated:** [November 22, 2019, 4:22pm UTC](https://discuss.elastic.co/t/ilm-and-alias-confusion/208753 "2019-11-22T16:22:15Z")

</div>

Hi, I have a 5 node cluster. 3 ingestion nodes, 1 coordinator node and a cold node. All ingestion goes via my Logstash server and the output of each index is dated as so: elasticsearch { index =\> "firewall-traffic-…

---

## [Significant terms aggregation custom score with more than one background](https://discuss.elastic.co/t/significant-terms-aggregation-custom-score-with-more-than-one-background/208910)

<div class="topic-metadata">

**Author:** [@dbuijs](https://discuss.elastic.co/u/dbuijs)\
**Replies:** 13\
**Last updated:** [November 22, 2019, 4:06pm UTC](https://discuss.elastic.co/t/significant-terms-aggregation-custom-score-with-more-than-one-background/208910 "2019-11-22T16:06:57Z")

</div>

I'm trying to implement different types of disproportionality metrics for pharmacovigilance reports in Elasticsearch. These are basically different flavours of significant terms aggregations, and I'm pretty sure I can us…

---

## [How import json file using filbeat to kibana](https://discuss.elastic.co/t/how-import-json-file-using-filbeat-to-kibana/209079)

<div class="topic-metadata">

**Author:** [@pmal](https://discuss.elastic.co/u/pmal)\
**Replies:** 0\
**Last updated:** [November 22, 2019, 2:59pm UTC](https://discuss.elastic.co/t/how-import-json-file-using-filbeat-to-kibana/209079 "2019-11-22T14:59:37Z")

</div>

I am sending tshark packets in JSON format to kibana, using filebeat. I am a newbie with kibana and filebeat. I am not getting any data. Not sure what is wrong, either importing template or creating an index. I can no…

---

## [Create X Axis percentage chart of total](https://discuss.elastic.co/t/create-x-axis-percentage-chart-of-total/208373)

<div class="topic-metadata">

**Author:** [@markus\_buchner](https://discuss.elastic.co/u/markus_buchner)\
**Replies:** 3\
**Last updated:** [November 22, 2019, 2:51pm UTC](https://discuss.elastic.co/t/create-x-axis-percentage-chart-of-total/208373 "2019-11-22T14:51:24Z")

</div>

I am struggling getting used to kibana charting - or its not possible at all. I have a really simple index structure like: RequestId: 1234 Duration(in seconds): 1,3 What I want (have to) visualize is a percentage buck…

---

## [Filebeat netflow module multiple host](https://discuss.elastic.co/t/filebeat-netflow-module-multiple-host/209076)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 0\
**Last updated:** [November 22, 2019, 2:51pm UTC](https://discuss.elastic.co/t/filebeat-netflow-module-multiple-host/209076 "2019-11-22T14:51:24Z")

</div>

Hi everyone In my system i have a multiple network equipment that need to push log to elasticsearch I have install filebeat on a seperate server and enable netflow module to collect log. So can i ask how to type in mu…

---

## [Logstash multiple indices](https://discuss.elastic.co/t/logstash-multiple-indices/209071)

<div class="topic-metadata">

**Author:** [@111245](https://discuss.elastic.co/u/111245)\
**Replies:** 0\
**Last updated:** [November 22, 2019, 1:59pm UTC](https://discuss.elastic.co/t/logstash-multiple-indices/209071 "2019-11-22T13:59:16Z")

</div>

Hello! I ask for help The question is: I send data using filebeat to logstash, logstash sends to elasticsearch All logs are written in a single logstash- \* indices I would like to write logs from different servers to…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1762)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1764)
