# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1794 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1795 --- ## [Filebeat to logstash using csv filter not working](https://discuss.elastic.co/t/filebeat-to-logstash-using-csv-filter-not-working/206955)
**Author:** [@nareshreddyp](https://discuss.elastic.co/u/nareshreddyp)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 7:48am UTC](https://discuss.elastic.co/t/filebeat-to-logstash-using-csv-filter-not-working/206955 "2019-11-08T07:48:45Z")
Hello, I have a csv file with following entries (Each column is already with double quotes) "2019/11/07 13:19:18.538";"138.106.61.153";"sxisl";"sxist0";"mxobjecttype:(""BUSINESSOBJECT"")";"xx";"0";"2";"1";"1";"118820"; … --- ## [Terms Query performance with increased number of terms](https://discuss.elastic.co/t/terms-query-performance-with-increased-number-of-terms/206888)
**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 6:58am UTC](https://discuss.elastic.co/t/terms-query-performance-with-increased-number-of-terms/206888 "2019-11-08T06:58:31Z")
I would like to understand how the performance of terms query is effected by the number of terms passed in to the terms query. According to very old blogs and Q&A terms around 1000 should not cause issue but what if the … --- ## [Basic license is unavailable for version(7.x)](https://discuss.elastic.co/t/basic-license-is-unavailable-for-version-7-x/207037)
**Author:** [@jaytran](https://discuss.elastic.co/u/jaytran)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 6:14am UTC](https://discuss.elastic.co/t/basic-license-is-unavailable-for-version-7-x/207037 "2019-11-08T06:14:39Z")
Hi all, I'm working on elasticsearch/kibana 7.1, I registered a basic license unfortunately there are only the basic license for version 5.x/6.x, there are no version 7.x. I tried to use this license with 7.1, I got bel… --- ## [And operator does not work as expected](https://discuss.elastic.co/t/and-operator-does-not-work-as-expected/207053)
**Author:** [@sonaleeka\_dash](https://discuss.elastic.co/u/sonaleeka_dash)\ **Replies:** 0\ **Last updated:** [November 8, 2019, 6:14am UTC](https://discuss.elastic.co/t/and-operator-does-not-work-as-expected/207053 "2019-11-08T06:14:21Z")
I have customField which is the combination of customFieldTypeId and value . My Document content data something like this For CustomeField.combined I want search using AND operator I tried something like this(tried M… --- ## [Monthly backup and restore along with snapshot](https://discuss.elastic.co/t/monthly-backup-and-restore-along-with-snapshot/206734)
**Author:** [@Rajat\_Panwar](https://discuss.elastic.co/u/Rajat_Panwar)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 5:54am UTC](https://discuss.elastic.co/t/monthly-backup-and-restore-along-with-snapshot/206734 "2019-11-08T05:54:05Z")
Hi, We are pretty new to Elasticseach, so our question may look like something trivial, But really need your advise. We have Elasticsearch hosted on elastic cloud. We are using this to save our logs. At any given time… --- ## [Data getting double in target table](https://discuss.elastic.co/t/data-getting-double-in-target-table/207041)
**Author:** [@Sumati\_Jain](https://discuss.elastic.co/u/Sumati_Jain)\ **Replies:** 0\ **Last updated:** [November 8, 2019, 4:29am UTC](https://discuss.elastic.co/t/data-getting-double-in-target-table/207041 "2019-11-08T04:29:34Z")
Hi everyone, I'm fetching data from Elasticsearch and putting into Bigquery through Logstash pipeline. When I'm fetching 15 days of data then I'm getting same number of records as source. No issues with 15 days of data… --- ## [Kibana Custom Region Map Configurations](https://discuss.elastic.co/t/kibana-custom-region-map-configurations/206893)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 4:13am UTC](https://discuss.elastic.co/t/kibana-custom-region-map-configurations/206893 "2019-11-08T04:13:20Z")
I am really confused with where I should set this following piece of code "http-server --cors="kbn-version" -p 8000", where and when should I set this? In the Kibana.yml file? elasticsearch.yml file? Can't figure this ou… --- ## [Kibana United Kingdom Subdivision Region Map - Not matching all UK cities](https://discuss.elastic.co/t/kibana-united-kingdom-subdivision-region-map-not-matching-all-uk-cities/206913)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 1\ **Last updated:** [November 8, 2019, 4:01am UTC](https://discuss.elastic.co/t/kibana-united-kingdom-subdivision-region-map-not-matching-all-uk-cities/206913 "2019-11-08T04:01:12Z")
I have used the "United Kingdom Subdivisions", the maps shows few cities but not all cities like Hull, Bristol, London..etc. What could be the reason that these places are not showing in maps? --- ## [Logstash with TCP input, TCP connection leak](https://discuss.elastic.co/t/logstash-with-tcp-input-tcp-connection-leak/207032)
**Author:** [@Fawlk](https://discuss.elastic.co/u/Fawlk)\ **Replies:** 0\ **Last updated:** [November 8, 2019, 2:43am UTC](https://discuss.elastic.co/t/logstash-with-tcp-input-tcp-connection-leak/207032 "2019-11-08T02:43:14Z")
I have setup Logstash to receive log via TCP with only one client sending logs. After run for a while, I found that TCP Established connections and never timeout. After googled, there's a parameter data\_timeout that I co… --- ## [How to fix that errors?](https://discuss.elastic.co/t/how-to-fix-that-errors/207027)
**Author:** [@pbona](https://discuss.elastic.co/u/pbona)\ **Replies:** 0\ **Last updated:** [November 8, 2019, 12:51am UTC](https://discuss.elastic.co/t/how-to-fix-that-errors/207027 "2019-11-08T00:51:03Z")
Followed this document: https://www.elastic.co/blog/how-to-setup-tls-for-elasticsearch-kibana-logstash-filebeat-with-offline-install-in-linux\](https://www.elastic.co/blog/how-to-setup-tls-for-elasticsearch-kibana-logsta… --- ## [How to display Tenants tab on Kibana?](https://discuss.elastic.co/t/how-to-display-tenants-tab-on-kibana/206749)
**Author:** [@jaytran](https://discuss.elastic.co/u/jaytran)\ **Replies:** 4\ **Last updated:** [November 8, 2019, 12:36am UTC](https://discuss.elastic.co/t/how-to-display-tenants-tab-on-kibana/206749 "2019-11-08T00:36:14Z")
Hi all, I'm new one, currently I want to configure multi-tenancy for my plugin, but I can not find out Tenants tab on kibana?(I'm using elastic/kibana7.1.0). anyone please tell me know how to enable Multi-Tenancy featur… --- ## [WatcherのConditionのAND,OR条件](https://discuss.elastic.co/t/watcher-condition-and-or/206908)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 6:45am UTC](https://discuss.elastic.co/t/watcher-condition-and-or/206908 "2019-11-07T06:45:16Z")
お世話になります。 WatcherのConditionをANDもしくはOR条件で指定したい場合は、scriptを使用するしかないのでしょうか？ 例えばcompareで2つの条件をANDもしくはORで満たす場合に、actionを実行するようにしたいです。 例1：項目Aが1以下、かつ項目Bの値が”RUNNING” 例2：項目Cが10以上、もしくは項目Dの値が”STOP” よろしくお願いいたします。 --- ## [How to transform JDBC input into a specific JSON format](https://discuss.elastic.co/t/how-to-transform-jdbc-input-into-a-specific-json-format/207012)
**Author:** [@seePhor](https://discuss.elastic.co/u/seePhor)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 11:40pm UTC](https://discuss.elastic.co/t/how-to-transform-jdbc-input-into-a-specific-json-format/207012 "2019-11-07T23:40:56Z")
Hello, New to Logstash and trying to backfill a new Elasticsearch instance from a MySQL table using the JDBC input plugin. I have the input plugin working, but right now the output is just going to stdout. I want to tr… --- ## [Search frozen indexes from Discover](https://discuss.elastic.co/t/search-frozen-indexes-from-discover/206974)
**Author:** [@OrangeDog](https://discuss.elastic.co/u/OrangeDog)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 10:43pm UTC](https://discuss.elastic.co/t/search-frozen-indexes-from-discover/206974 "2019-11-07T22:43:33Z")
I have a ILM policy that freezes log indexes after two weeks. However, there doesn't appear to be any way to include them when searching from Discover, regardless of the selected date range. --- ## [Logstash and ECK](https://discuss.elastic.co/t/logstash-and-eck/206997)
**Author:** [@dbwest](https://discuss.elastic.co/u/dbwest)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 10:26pm UTC](https://discuss.elastic.co/t/logstash-and-eck/206997 "2019-11-07T22:26:21Z")
Is Logstash part of ECK? How do I add it in? Is it currently on any dev branches or are there any ways to get edge releases that include it? I do not see it in stable. Are there any plans to add it in? --- ## [Maps with paths](https://discuss.elastic.co/t/maps-with-paths/206863)
**Author:** [@vishal\_M](https://discuss.elastic.co/u/vishal_M)\ **Replies:** 3\ **Last updated:** [November 7, 2019, 10:08pm UTC](https://discuss.elastic.co/t/maps-with-paths/206863 "2019-11-07T22:08:45Z")
Hello Team, I want to display the world's map and place over it locations of clients who interact with a single server. I want to draw lines between the clients and server I also need to differentiate server and clien… --- ## [Search All fields in an Index](https://discuss.elastic.co/t/search-all-fields-in-an-index/204965)
**Author:** [@keerthn](https://discuss.elastic.co/u/keerthn)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 9:52pm UTC](https://discuss.elastic.co/t/search-all-fields-in-an-index/204965 "2019-11-07T21:52:24Z")
Hey There ! I want to do a search where i can access all the documents within the given index to find the word i'm looking for. I see that "\_all" has been taken off which brings it down to use only the wildcard search w… --- ## [Kibana in multplie browsers](https://discuss.elastic.co/t/kibana-in-multplie-browsers/206591)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 9:48pm UTC](https://discuss.elastic.co/t/kibana-in-multplie-browsers/206591 "2019-11-07T21:48:29Z")
Hi, I've elastic stack on my vm all three of them and they are up and running, i just want to know is there any way by which i can access kibana in my physical machine's browser. my physical machine is in the same netw… --- ## [Manticore issue with Azure plugin](https://discuss.elastic.co/t/manticore-issue-with-azure-plugin/207005)
**Author:** [@ablanco722](https://discuss.elastic.co/u/ablanco722)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 9:37pm UTC](https://discuss.elastic.co/t/manticore-issue-with-azure-plugin/207005 "2019-11-07T21:37:40Z")
So working on setting up the Azure plugin and keep on getting this strange stack trace error. Wondering if anyone has seen this \[ERROR\]\[logstash.config.sourceloader\] Could not fetch all the sources {:exception=\>LogStash… --- ## [A second/third .kibana index is created after each upgrade](https://discuss.elastic.co/t/a-second-third-kibana-index-is-created-after-each-upgrade/206771)
**Author:** [@Kuckkuck](https://discuss.elastic.co/u/Kuckkuck)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 9:36pm UTC](https://discuss.elastic.co/t/a-second-third-kibana-index-is-created-after-each-upgrade/206771 "2019-11-07T21:36:56Z")
Hi, any idea, what I did wrong? After each upgrade for example from 5 - 6 , from 6.8 -\> 7.3.2 , 7.3.2 -\> 7.4.0 I get another nice .kibana\_x index created. Nicely numbered one of another. Some have data, some not. Any … --- ## [Allow monitoring of metricbeat uptime data in Kibana Uptime app](https://discuss.elastic.co/t/allow-monitoring-of-metricbeat-uptime-data-in-kibana-uptime-app/205395)
**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 9:32pm UTC](https://discuss.elastic.co/t/allow-monitoring-of-metricbeat-uptime-data-in-kibana-uptime-app/205395 "2019-11-07T21:32:58Z")
Hi, The metricbeat system module is able to ship uptime metrics to elasticsearch: https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-metricset-system-uptime.html It would be great if these were made a… --- ## [Can't get delete by query to actually delete](https://discuss.elastic.co/t/cant-get-delete-by-query-to-actually-delete/205323)
**Author:** [@CityofRome](https://discuss.elastic.co/u/CityofRome)\ **Replies:** 19\ **Last updated:** [November 7, 2019, 8:27pm UTC](https://discuss.elastic.co/t/cant-get-delete-by-query-to-actually-delete/205323 "2019-11-07T20:27:32Z")
I can't seem to get a delete query (ANY delete query) to actually delete anything. I've even tried the basic ones in the documentation (edited for my test index) and they don't work either. What am I overlooking? I'm … --- ## [How to validate incoming JSON body using Http-Input plugin](https://discuss.elastic.co/t/how-to-validate-incoming-json-body-using-http-input-plugin/206956)
**Author:** [@iFriT](https://discuss.elastic.co/u/iFriT)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 8:10pm UTC](https://discuss.elastic.co/t/how-to-validate-incoming-json-body-using-http-input-plugin/206956 "2019-11-07T20:10:24Z")
Dears Elastic, Using Http-Input plugin, I would like to know if there is a way to validate incoming Message (JSON) against a pre-defined JSON schema and return a specific response for example (Invalid Message) before pa… --- ## [Inconsistent aggregation results](https://discuss.elastic.co/t/inconsistent-aggregation-results/207006)
**Author:** [@pinkus13](https://discuss.elastic.co/u/pinkus13)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 8:03pm UTC](https://discuss.elastic.co/t/inconsistent-aggregation-results/207006 "2019-11-07T20:03:11Z")
Hi I am trying to run a terms aggregation to return a list of unique values. But each time I run the aggregation I get a different number of buckets returned. I have terms aggregation which has a sub aggregation to giv… --- ## [Elastic Doesnt work after enabling security settings on ubuntu](https://discuss.elastic.co/t/elastic-doesnt-work-after-enabling-security-settings-on-ubuntu/206858)
**Author:** [@Jayasri\_Cimba](https://discuss.elastic.co/u/Jayasri_Cimba)\ **Replies:** 4\ **Last updated:** [November 7, 2019, 7:09pm UTC](https://discuss.elastic.co/t/elastic-doesnt-work-after-enabling-security-settings-on-ubuntu/206858 "2019-11-07T19:09:44Z")
Caused by: java.lang.reflect.InvocationTargetException Caused by: org.elasticsearch.ElasticsearchException: failed to initialize a TrustManagerFactory Caused by: java.nio.file.AccessDeniedException: /etc/elasticsearch/… --- ## [Change a field type Kibana](https://discuss.elastic.co/t/change-a-field-type-kibana/206984)
**Author:** [@ajg](https://discuss.elastic.co/u/ajg)\ **Replies:** 4\ **Last updated:** [November 7, 2019, 7:13pm UTC](https://discuss.elastic.co/t/change-a-field-type-kibana/206984 "2019-11-07T19:13:20Z")
Hi everyone, I need to change a field type from "text" to "date" because I need to calculate the average time from a variable calculated inside my code. But when I try to change it, the option is not available. I hav… --- ## [How remove multi delimiter in a file](https://discuss.elastic.co/t/how-remove-multi-delimiter-in-a-file/206999)
**Author:** [@atchyuth](https://discuss.elastic.co/u/atchyuth)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 6:36pm UTC](https://discuss.elastic.co/t/how-remove-multi-delimiter-in-a-file/206999 "2019-11-07T18:36:10Z")
I have a file with each field separated by |~|. I am new to GROK pattern. Can someone help me build a custom pattern to remove the |~|. Empty or Null values should not be removed while processing. The data structure is … --- ## [Sending new fields to exisiting Elastic document, losing old data](https://discuss.elastic.co/t/sending-new-fields-to-exisiting-elastic-document-losing-old-data/206992)
**Author:** [@EdgeSync](https://discuss.elastic.co/u/EdgeSync)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 5:30pm UTC](https://discuss.elastic.co/t/sending-new-fields-to-exisiting-elastic-document-losing-old-data/206992 "2019-11-07T17:30:07Z")
I have an index in elastic, which is fed by two pipelines. pipeline 1 provides the base data for the document fields: id, name, number pipeline 2 needs to add new fields to the existing document based on the ID. fiel… --- ## [Geoip.location is not displaying in kibana when set up in logstash conf](https://discuss.elastic.co/t/geoip-location-is-not-displaying-in-kibana-when-set-up-in-logstash-conf/206980)
**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 4:57pm UTC](https://discuss.elastic.co/t/geoip-location-is-not-displaying-in-kibana-when-set-up-in-logstash-conf/206980 "2019-11-07T16:57:16Z")
hello, I am on ELK 7.4. When using geoip in a Logstash conf the geoip.location doesn't appear to be displayed in the index fields in Kibana. Below is the Logstash conf - showing the fields filter input under the geoip … --- ## [How to get data from other index (indexb) and add it to current index (temp) based on common field](https://discuss.elastic.co/t/how-to-get-data-from-other-index-indexb-and-add-it-to-current-index-temp-based-on-common-field/206965)
**Author:** [@aasoft](https://discuss.elastic.co/u/aasoft)\ **Replies:** 4\ **Last updated:** [November 7, 2019, 4:35pm UTC](https://discuss.elastic.co/t/how-to-get-data-from-other-index-indexb-and-add-it-to-current-index-temp-based-on-common-field/206965 "2019-11-07T16:35:22Z")
I have two indexes: current one: temp PUT temp/doc/1 {"Field1" : "data1", "Field2" : "data2", "cnt\_no":"1"} and other index: indexb PUT indexb/doc/1 {"Field3" : "data3", "Field4" : "data4", "cnt\_no":"1"} I would li… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1793) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1795)