# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1820

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1821

---

## [+FORMAT syntax works for @timestamp field only?](https://discuss.elastic.co/t/format-syntax-works-for-timestamp-field-only/205037)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 3\
**Last updated:** [October 24, 2019, 2:06pm UTC](https://discuss.elastic.co/t/format-syntax-works-for-timestamp-field-only/205037 "2019-10-24T14:06:17Z")

</div>

can some other timestamp field be used with +FORMAT syntax? index =\> "${ELASTICSEARCH\_INDEX}.%{+yyyy.MM.dd}" the above config line would use @timestamp as the input for the format definition, but I'd like to use some o…

---

## [For kibana security](https://discuss.elastic.co/t/for-kibana-security/204682)

<div class="topic-metadata">

**Author:** [@zmira\_meriem](https://discuss.elastic.co/u/zmira_meriem)\
**Replies:** 3\
**Last updated:** [October 24, 2019, 2:03pm UTC](https://discuss.elastic.co/t/for-kibana-security/204682 "2019-10-24T14:03:45Z")

</div>

hi pllz any help i wanna secure kibana with https...how can i do that??? thnx

---

## [Is it possible to reset the rejected queue?](https://discuss.elastic.co/t/is-it-possible-to-reset-the-rejected-queue/204711)

<div class="topic-metadata">

**Author:** [@mwills](https://discuss.elastic.co/u/mwills)\
**Replies:** 2\
**Last updated:** [October 24, 2019, 1:52pm UTC](https://discuss.elastic.co/t/is-it-possible-to-reset-the-rejected-queue/204711 "2019-10-24T13:52:44Z")

</div>

It is possible to reset the rejected queue in the thread pool when it has exceeded the 200 queue size through the API?

---

## [Extract fields from multiline message](https://discuss.elastic.co/t/extract-fields-from-multiline-message/204843)

<div class="topic-metadata">

**Author:** [@guahos](https://discuss.elastic.co/u/guahos)\
**Replies:** 9\
**Last updated:** [October 24, 2019, 1:49pm UTC](https://discuss.elastic.co/t/extract-fields-from-multiline-message/204843 "2019-10-24T13:49:26Z")

</div>

Hello! I am new to Elastic stack, and currently I'm trying to set up simple visualization for our backup system which is run on rsync scripts. Those scripts provide a good logging, a single backup job log message looks …

---

## [How to aggregate & visualize data from specific fields in index elements? (mobile game)](https://discuss.elastic.co/t/how-to-aggregate-visualize-data-from-specific-fields-in-index-elements-mobile-game/205016)

<div class="topic-metadata">

**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\
**Replies:** 2\
**Last updated:** [October 24, 2019, 1:46pm UTC](https://discuss.elastic.co/t/how-to-aggregate-visualize-data-from-specific-fields-in-index-elements-mobile-game/205016 "2019-10-24T13:46:13Z")

</div>

Hi there, There is an index, each element of which contains: general information about a player's session in tutorial a few arrays with information for each tutorial stage It looks like this: \> id:206 duration:35 cr…

---

## [Как агрегироваться по определённому полю в массиве массивов? (с дальнейшей визуализацией)](https://discuss.elastic.co/t/topic/205018)

<div class="topic-metadata">

**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\
**Replies:** 2\
**Last updated:** [October 24, 2019, 1:45pm UTC](https://discuss.elastic.co/t/topic/205018 "2019-10-24T13:45:32Z")

</div>

Есть индекс, каждый элемент которого содержит следующую информацию: общая информация о прохождении туториала игры несколько массивов с информацией о прохождении каждого из этапов туториала Один элемент выглядит так: i…

---

## [コンテナ上のESでlocalhostへのアクセスできない](https://discuss.elastic.co/t/es-localhost/203626)

<div class="topic-metadata">

**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\
**Replies:** 5\
**Last updated:** [October 24, 2019, 1:28pm UTC](https://discuss.elastic.co/t/es-localhost/203626 "2019-10-24T13:28:26Z")

</div>

以下のdocker-compose.ymlとDockerfile、elasticsearch.ymlの設定で コンテナを作成しました。(使用するポート番号は9600) そこでlocalhost:9600にアクセスしてもERR\_EMPTY\_RESPONSEとなってしまいます。 設定ファイルのパラメータに何か不足があるのでしょうか？ docker-compose.yml version: '2.2' services: el…

---

## [Grok parse not work](https://discuss.elastic.co/t/grok-parse-not-work/205029)

<div class="topic-metadata">

**Author:** [@111228](https://discuss.elastic.co/u/111228)\
**Replies:** 2\
**Last updated:** [October 24, 2019, 1:16pm UTC](https://discuss.elastic.co/t/grok-parse-not-work/205029 "2019-10-24T13:16:55Z")

</div>

Hello to everyone, I have a problem with grok parsing. trying to parse fiend log.file.path, I want to put out domain name for example: I Have path /var/www/httpd-logs/mydomain.net.access.log I'm using %{GREEDYDATA}/%…

---

## [Logstash pipeline problem](https://discuss.elastic.co/t/logstash-pipeline-problem/204902)

<div class="topic-metadata">

**Author:** [@basavyr](https://discuss.elastic.co/u/basavyr)\
**Replies:** 3\
**Last updated:** [October 24, 2019, 1:10pm UTC](https://discuss.elastic.co/t/logstash-pipeline-problem/204902 "2019-10-24T13:10:24Z")

</div>

So I have to achieve a Logstash setup where I have two (or maybe even more) log files, each with its own input and filters (output will always be sent to Elastic and then visualized in Kibana). I saw this is very doable…

---

## [About the Endpoint Security category](https://discuss.elastic.co/t/about-the-endpoint-security-category/204977)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 1\
**Last updated:** [October 24, 2019, 1:08pm UTC](https://discuss.elastic.co/t/about-the-endpoint-security-category/204977 "2019-10-24T13:08:00Z")

</div>

Stop threats in their tracks Elastic Endpoint Security is the only endpoint protection product to fully combine prevention, detection, and response into a single, autonomous agent. It's easy to use, built for speed, and …

---

## [ERROR in cmd - logstash](https://discuss.elastic.co/t/error-in-cmd-logstash/204875)

<div class="topic-metadata">

**Author:** [@Marfig](https://discuss.elastic.co/u/Marfig)\
**Replies:** 4\
**Last updated:** [October 24, 2019, 12:59pm UTC](https://discuss.elastic.co/t/error-in-cmd-logstash/204875 "2019-10-24T12:59:42Z")

</div>

Hi I have install Logstash, ElasticSearch and Kibana, without any problems. But when I going to rund the Logstash conf file through the Command Prompt or PowerShell I get the same error messages... see picture: My co…

---

## [Can't Filter Aggregation Results](https://discuss.elastic.co/t/cant-filter-aggregation-results/204497)

<div class="topic-metadata">

**Author:** [@ryes](https://discuss.elastic.co/u/ryes)\
**Replies:** 4\
**Last updated:** [October 24, 2019, 12:57pm UTC](https://discuss.elastic.co/t/cant-filter-aggregation-results/204497 "2019-10-24T12:57:04Z")

</div>

Hello, all! I have an index with web transaction logs. It consists of requests and responses. An index looks like this: { request\_id: '1234', message: 'request', path: '/fare' } { request\_id: '1234', message: 'respons…

---

## [Slow Index create](https://discuss.elastic.co/t/slow-index-create/204862)

<div class="topic-metadata">

**Author:** [@gintek](https://discuss.elastic.co/u/gintek)\
**Replies:** 7\
**Last updated:** [October 24, 2019, 12:47pm UTC](https://discuss.elastic.co/t/slow-index-create/204862 "2019-10-24T12:47:26Z")

</div>

Hi, We are struggling with ES performance issue, we have daily indexes and minute or two after midnight our cluster is unavailable. Logstash indexer reports time out, after around 10 min everything back to normal. we tr…

---

## [Syslog Output Plugin](https://discuss.elastic.co/t/syslog-output-plugin/205039)

<div class="topic-metadata">

**Author:** [@jforsain](https://discuss.elastic.co/u/jforsain)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 9:58am UTC](https://discuss.elastic.co/t/syslog-output-plugin/205039 "2019-10-24T09:58:01Z")

</div>

Hello, I'm using the syslog output plugin in my Logatsh file conf, but during the execution ( /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/apache.conf ) of the logstash conf file, it shows multiple errors : …

---

## [TermVector of artifical doc + filtering](https://discuss.elastic.co/t/termvector-of-artifical-doc-filtering/205065)

<div class="topic-metadata">

**Author:** [@vptu](https://discuss.elastic.co/u/vptu)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 12:32pm UTC](https://discuss.elastic.co/t/termvector-of-artifical-doc-filtering/205065 "2019-10-24T12:32:02Z")

</div>

Hi, first of all I'm fairly new to elasticsearch so sorry if the question is too obvious to answer. I've created an index with multiple documents stored. I want to use the term vector api to create term vectors based …

---

## [Login kibana without UI (using token)](https://discuss.elastic.co/t/login-kibana-without-ui-using-token/203763)

<div class="topic-metadata">

**Author:** [@frankShih](https://discuss.elastic.co/u/frankShih)\
**Replies:** 6\
**Last updated:** [October 24, 2019, 12:21pm UTC](https://discuss.elastic.co/t/login-kibana-without-ui-using-token/203763 "2019-10-24T12:21:47Z")

</div>

Hi, I am new in the elastic stack. My requirement is: after users login to our website, they do not need to key in account/password again in order to access kibana. So, I find this https://www.elastic.co/guide/en/ki…

---

## [Log management with elasticsearch](https://discuss.elastic.co/t/log-management-with-elasticsearch/205061)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 12:20pm UTC](https://discuss.elastic.co/t/log-management-with-elasticsearch/205061 "2019-10-24T12:20:39Z")

</div>

I would like to use elasticsearch as log management. How can I avoid that someone change o delete these logs and how can I verify their integrity.

---

## [How to Fetch Data of last month from logstash](https://discuss.elastic.co/t/how-to-fetch-data-of-last-month-from-logstash/205058)

<div class="topic-metadata">

**Author:** [@vish1](https://discuss.elastic.co/u/vish1)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 12:06pm UTC](https://discuss.elastic.co/t/how-to-fetch-data-of-last-month-from-logstash/205058 "2019-10-24T12:06:19Z")

</div>

I am trying to input data from mongodb of last month, so i want to know how we need to describe in conf file in filter section.

---

## [Unable to load the kibana logs due to error in Script field](https://discuss.elastic.co/t/unable-to-load-the-kibana-logs-due-to-error-in-script-field/204649)

<div class="topic-metadata">

**Author:** [@Rajukumbala](https://discuss.elastic.co/u/Rajukumbala)\
**Replies:** 2\
**Last updated:** [October 24, 2019, 11:51am UTC](https://discuss.elastic.co/t/unable-to-load-the-kibana-logs-due-to-error-in-script-field/204649 "2019-10-24T11:51:42Z")

</div>

We are using kibana 5.5 version. We are getting the following exception from 1st October, 2019 to till date while loading the kibana. Shard Failures The following shard failures ocurred: Index: default-2019.10 Shard: …

---

## [APM From file](https://discuss.elastic.co/t/apm-from-file/204806)

<div class="topic-metadata">

**Author:** [@cosmo](https://discuss.elastic.co/u/cosmo)\
**Replies:** 3\
**Last updated:** [October 24, 2019, 11:39am UTC](https://discuss.elastic.co/t/apm-from-file/204806 "2019-10-24T11:39:41Z")

</div>

Hello So I have a PHP app, but it doesn't have access to my internal elasticsearch cluster. I'm wondering how feasible it would be to do something like the following; Custom PHP agent in app writes events to file Cus…

---

## [Clickable Link in Kibana with Authentication Header](https://discuss.elastic.co/t/clickable-link-in-kibana-with-authentication-header/202754)

<div class="topic-metadata">

**Author:** [@joshuasmith](https://discuss.elastic.co/u/joshuasmith)\
**Replies:** 2\
**Last updated:** [October 24, 2019, 11:32am UTC](https://discuss.elastic.co/t/clickable-link-in-kibana-with-authentication-header/202754 "2019-10-24T11:32:29Z")

</div>

Hello, I have two external applications that I would like to have a clickable link in Kibana that opens the third party app. I have seen the URL field and that would work fine if auth was in a GET parameter, however in…

---

## [Kibana 7.4.0 date\_nanos discover view surrounding documents broken](https://discuss.elastic.co/t/kibana-7-4-0-date-nanos-discover-view-surrounding-documents-broken/204334)

<div class="topic-metadata">

**Author:** [@Alex-St](https://discuss.elastic.co/u/Alex-St)\
**Replies:** 4\
**Last updated:** [October 24, 2019, 10:24am UTC](https://discuss.elastic.co/t/kibana-7-4-0-date-nanos-discover-view-surrounding-documents-broken/204334 "2019-10-24T10:24:34Z")

</div>

In discover view, I click view surrounding document: I can see the document I clicked on, but nothing around it. I believe this is related to date\_nanos field type in kibana Getting the error on the right pane as shown …

---

## [Email and password field in /etc/elasticsearch/elasticsearch.yml](https://discuss.elastic.co/t/email-and-password-field-in-etc-elasticsearch-elasticsearch-yml/205023)

<div class="topic-metadata">

**Author:** [@elktester](https://discuss.elastic.co/u/elktester)\
**Replies:** 1\
**Last updated:** [October 24, 2019, 9:56am UTC](https://discuss.elastic.co/t/email-and-password-field-in-etc-elasticsearch-elasticsearch-yml/205023 "2019-10-24T09:56:59Z")

</div>

Hello all; well, i'm new to elasticsearch, and i'm trying to configure elasticsearch to receive alerts, but I do not know what to put in the email and password field: /etc/elasticsearch/elasticsearch.yml xpack.notifi…

---

## [Elasticsearch heap usage increase after switching from Oracle Java 8 to OpenJDK11](https://discuss.elastic.co/t/elasticsearch-heap-usage-increase-after-switching-from-oracle-java-8-to-openjdk11/205034)

<div class="topic-metadata">

**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 9:43am UTC](https://discuss.elastic.co/t/elasticsearch-heap-usage-increase-after-switching-from-oracle-java-8-to-openjdk11/205034 "2019-10-24T09:43:27Z")

</div>

Hello all, I have started testing of running Elasticsearch on OpenJDK11 and noticed that the jvm heap usage has changed. I changed the JAVA version and had to adjust jvm.options. I'm using Elasticsearch version 6.8.2. …

---

## [Negative size parameter](https://discuss.elastic.co/t/negative-size-parameter/205032)

<div class="topic-metadata">

**Author:** [@b789](https://discuss.elastic.co/u/b789)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 9:34am UTC](https://discuss.elastic.co/t/negative-size-parameter/205032 "2019-10-24T09:34:24Z")

</div>

Hi, while doing some test with elasticsearch (version 6.7) i notice that the size parameter seems to be ignored when set to -1 (the query returns 10 results as default) but setting it to a lower number, like -2 return a…

---

## [\[7.2\] Kibana plugin development possible bug](https://discuss.elastic.co/t/7-2-kibana-plugin-development-possible-bug/204672)

<div class="topic-metadata">

**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\
**Replies:** 19\
**Last updated:** [October 24, 2019, 9:19am UTC](https://discuss.elastic.co/t/7-2-kibana-plugin-development-possible-bug/204672 "2019-10-24T09:19:01Z")

</div>

Hi there! I'm having some problems developing a kibana plugin for this specific Kibana version. If I make EXACTLY the same steps which I'm about to describe to develop the plugin for version 7.0 or 7.1 or even 7.3, it …

---

## [Implement product filter in Front End](https://discuss.elastic.co/t/implement-product-filter-in-front-end/205021)

<div class="topic-metadata">

**Author:** [@wjonkerhulst](https://discuss.elastic.co/u/wjonkerhulst)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 8:51am UTC](https://discuss.elastic.co/t/implement-product-filter-in-front-end/205021 "2019-10-24T08:51:43Z")

</div>

Hey, I'am looking to built a products filter. I found some other post with the same question : https://discuss.elastic.co/t/query-for-ecommerce-product-filter-using-aggregation/47736 https://discuss.elastic.co/t/aggre…

---

## [I cannot use case in Kibana 6.8.3](https://discuss.elastic.co/t/i-cannot-use-case-in-kibana-6-8-3/204864)

<div class="topic-metadata">

**Author:** [@Minisha\_M](https://discuss.elastic.co/u/Minisha_M)\
**Replies:** 1\
**Last updated:** [October 24, 2019, 8:41am UTC](https://discuss.elastic.co/t/i-cannot-use-case-in-kibana-6-8-3/204864 "2019-10-24T08:41:10Z")

</div>

Case statements doesn't work in kibana canvas. I am using Kibana 6.8.3. Does it support case? For instance the below query giving me weird errors. Like below: Expression failed with the message: \[essql\] Couldnt parse …

---

## [SQL execution for filed with dot notation](https://discuss.elastic.co/t/sql-execution-for-filed-with-dot-notation/204889)

<div class="topic-metadata">

**Author:** [@Khirod\_Panda](https://discuss.elastic.co/u/Khirod_Panda)\
**Replies:** 3\
**Last updated:** [October 24, 2019, 8:38am UTC](https://discuss.elastic.co/t/sql-execution-for-filed-with-dot-notation/204889 "2019-10-24T08:38:42Z")

</div>

Hello , I want to read output for following SELECT \* FROM "alpha-\*" where APILog.req.operationName="submitOrder" but seems it is failing for the APILog.req.operationName . Can we not use that way in SQL ? I have attac…

---

## [Searching Duplicate terms in Index based on ID, splits the Id with limiter "-"](https://discuss.elastic.co/t/searching-duplicate-terms-in-index-based-on-id-splits-the-id-with-limiter/204900)

<div class="topic-metadata">

**Author:** [@Vinothkumar\_Ganeshan](https://discuss.elastic.co/u/Vinothkumar_Ganeshan)\
**Replies:** 2\
**Last updated:** [October 24, 2019, 8:28am UTC](https://discuss.elastic.co/t/searching-duplicate-terms-in-index-based-on-id-splits-the-id-with-limiter/204900 "2019-10-24T08:28:28Z")

</div>

Hello, I'm trying to find the duplicate based on a term "TDID" in a index. Basically the TDID : "00000-00000-0000000-00000" GET ttd-2019-04\*/\_search { "size" : 0, "\_source": \["TDID"\], "query": { "term": { "even…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1819)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1821)
