# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1840 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1841 --- ## [Logstash event @timestamp adjustment](https://discuss.elastic.co/t/logstash-event-timestamp-adjustment/203616)
**Author:** [@Stefan\_Sabolowitsch](https://discuss.elastic.co/u/Stefan_Sabolowitsch)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 2:50pm UTC](https://discuss.elastic.co/t/logstash-event-timestamp-adjustment/203616 "2019-10-15T14:50:22Z")
Hi there, i want to calculate "event.start" from "event.end" and "event.duration", so a subtraction of "event.end" and "event.duration" "event.end": "2019-10-15T07:34:14.000Z", "event.duration": 30, (sec.) Thereafter… --- ## [Filebeat / Winlogbeat -\> Logstash -\> Elastic '@timestamp' problem](https://discuss.elastic.co/t/filebeat-winlogbeat-logstash-elastic-timestamp-problem/203633)
**Author:** [@TaloN1x](https://discuss.elastic.co/u/TaloN1x)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 2:32pm UTC](https://discuss.elastic.co/t/filebeat-winlogbeat-logstash-elastic-timestamp-problem/203633 "2019-10-15T14:32:48Z")
I am capturing logs from hosts using winlogbeat and filebeat and sending them to the logstash, that is shipping them to the Elastic. The problem I am facing, is that filebeat and winlogbeat as well as logstash are usein… --- ## [Showing multiple metrics with conditions and calculation in visualize tool in Kibana](https://discuss.elastic.co/t/showing-multiple-metrics-with-conditions-and-calculation-in-visualize-tool-in-kibana/203624)
**Author:** [@axlb](https://discuss.elastic.co/u/axlb)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 2:32pm UTC](https://discuss.elastic.co/t/showing-multiple-metrics-with-conditions-and-calculation-in-visualize-tool-in-kibana/203624 "2019-10-15T14:32:44Z")
I want to create a table in the Visualize tool in Kibana where I show several metrics with condition and calculcation. I have created a generic example in excel, see below. I know the basics. On how to produce the first … --- ## [Remove timestamp and host frpm logfile](https://discuss.elastic.co/t/remove-timestamp-and-host-frpm-logfile/203480)
**Author:** [@hdma](https://discuss.elastic.co/u/hdma)\ **Replies:** 3\ **Last updated:** [October 15, 2019, 2:25pm UTC](https://discuss.elastic.co/t/remove-timestamp-and-host-frpm-logfile/203480 "2019-10-15T14:25:42Z")
Hello I have a logstash that receive log from other logstash using tcp: input { tcp { port =\> 65009 mode =\> server id =\> "wm-id" tags =\> "wm" codec =\> line } } In output, I put this syslog into file: filter { … --- ## [One kafka topic data is pushing to all elasticsearh](https://discuss.elastic.co/t/one-kafka-topic-data-is-pushing-to-all-elasticsearh/203591)
**Author:** [@jaychaudhary](https://discuss.elastic.co/u/jaychaudhary)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 2:24pm UTC](https://discuss.elastic.co/t/one-kafka-topic-data-is-pushing-to-all-elasticsearh/203591 "2019-10-15T14:24:33Z")
Hello All, I am facing one problem with kafka logstash plugin, I have two kafka topic (ie. Topic-1, topic-2) and two indexes on Elasticsearch (ie. Index-1, index-2). I want to send topic-1 data to index-1 and topic-2 da… --- ## [ElasticSearch Index Life Cycle Policy](https://discuss.elastic.co/t/elasticsearch-index-life-cycle-policy/203670)
**Author:** [@premkumar](https://discuss.elastic.co/u/premkumar)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 2:22pm UTC](https://discuss.elastic.co/t/elasticsearch-index-life-cycle-policy/203670 "2019-10-15T14:22:32Z")
Hi All, I have an Elastic cluster with 3 nodes. 1 master and 2 data nodes. Each node has 1TB storage. I need to set up a rollback policy for the indexes. Per day around 100GB data could be forwarded via beats -\> logsta… --- ## [Can I draw two graphs with different time in one dashboard in Kibana?](https://discuss.elastic.co/t/can-i-draw-two-graphs-with-different-time-in-one-dashboard-in-kibana/199568)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 3\ **Last updated:** [September 17, 2019, 2:16pm UTC](https://discuss.elastic.co/t/can-i-draw-two-graphs-with-different-time-in-one-dashboard-in-kibana/199568 "2019-09-17T14:16:57Z")
Can I draw two graphs with different time in one dashboard in Kibana? I want to draw a graph of this month's statistics and today's statistics. Is there a way to calculate the time dynamically in the graph itself inste… --- ## [Logstash使用if做条件判断问题](https://discuss.elastic.co/t/logstash-if/203544)
**Author:** [@shenshensinian](https://discuss.elastic.co/u/shenshensinian)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 2:16pm UTC](https://discuss.elastic.co/t/logstash-if/203544 "2019-10-15T14:16:00Z")
你好，我在filter阶段使用if语句做条件判断的时候出现if语句无效果，也没有报错。版本7.1.1 例句如下。 filter { if \[message\] in \["te1","bb","lkj","hetyafaef"\] grok{ match =\> {"message" =\> "\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*"} } } --- ## [Unable to start Kibana (7.4) server at boot in CENTOS 7.7](https://discuss.elastic.co/t/unable-to-start-kibana-7-4-server-at-boot-in-centos-7-7/203105)
**Author:** [@clundy](https://discuss.elastic.co/u/clundy)\ **Replies:** 3\ **Last updated:** [October 15, 2019, 2:01pm UTC](https://discuss.elastic.co/t/unable-to-start-kibana-7-4-server-at-boot-in-centos-7-7/203105 "2019-10-15T14:01:45Z")
I disabled selinux in an affort to get Kibana started. It worked initially, but the kibana service fails to start. I checked /var/log/kibana/kibana.stderr. The following log entry is present: "FATAL Error: Port 5601 is… --- ## [Kibana Dashboard with Multiple Date Filter](https://discuss.elastic.co/t/kibana-dashboard-with-multiple-date-filter/203657)
**Author:** [@Carlos\_Rojas](https://discuss.elastic.co/u/Carlos_Rojas)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 1:51pm UTC](https://discuss.elastic.co/t/kibana-dashboard-with-multiple-date-filter/203657 "2019-10-15T13:51:05Z")
Hi Guys, Is Posible have a dashboard that has the main date filter and that a dashboard visualization has a different date filter to the main one? Example: Main date filter Last 15Hours, and 1 visualization have Last … --- ## [Any plans for extended metrics / events?](https://discuss.elastic.co/t/any-plans-for-extended-metrics-events/203348)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 4\ **Last updated:** [October 15, 2019, 1:40pm UTC](https://discuss.elastic.co/t/any-plans-for-extended-metrics-events/203348 "2019-10-15T13:40:18Z")
Curious if things like counters, stack traces, custom metrics, events, etc are anywhere on the APM roadmap. --- ## [Logstash elasticsearch filter plugin 401 error](https://discuss.elastic.co/t/logstash-elasticsearch-filter-plugin-401-error/203328)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 12:58pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-plugin-401-error/203328 "2019-10-15T12:58:55Z")
Hello Team, We are trying to use elasticsearch filter plugin,But we are getting 401 unauthorised error. Since our elasticsearch is secured , In elasticsearch output section we have configured SSL, cacert, keystore, and… --- ## [Weblogicbeat](https://discuss.elastic.co/t/weblogicbeat/203649)
**Author:** [@shali93](https://discuss.elastic.co/u/shali93)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 12:44pm UTC](https://discuss.elastic.co/t/weblogicbeat/203649 "2019-10-15T12:44:36Z")
I have created custom weblogicbeat using below reference. I am tying to fetch thread status details from weblogicbeat. Is this required Docker? We tried Jolokia and (https://github.com/golang/mobile/tree/master/inte… --- ## [Visualisation in Kibana to Convert Microtime](https://discuss.elastic.co/t/visualisation-in-kibana-to-convert-microtime/203642)
**Author:** [@vtd](https://discuss.elastic.co/u/vtd)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 12:50pm UTC](https://discuss.elastic.co/t/visualisation-in-kibana-to-convert-microtime/203642 "2019-10-15T12:50:57Z")
Hi, Im a little stuck on a visualisation I am trying to create. I am currently reporting on microtime response times on a website, but would like to convert this into milliseconds. Ill be honest I have no idea how to do… --- ## [Filebeat to Elastic (7.4): connection refused](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 4\ **Last updated:** [October 15, 2019, 12:32pm UTC](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604 "2019-10-15T12:32:26Z")
Hi, I installed Elastic, Kibana and Heartbeat as instructed. All 7.4, Ubuntu 18.04 and all working fine. With Filebeat, on another Ubuntu I installed Filebeat and this is can't connect to Elastic: "Connection refused".… --- ## [What a happen? Please help me](https://discuss.elastic.co/t/what-a-happen-please-help-me/203590)
**Author:** [@Wathit\_Chantree](https://discuss.elastic.co/u/Wathit_Chantree)\ **Replies:** 6\ **Last updated:** [October 15, 2019, 12:17pm UTC](https://discuss.elastic.co/t/what-a-happen-please-help-me/203590 "2019-10-15T12:17:55Z")
i can't use elasticsearch check service elasticsearch and kibana status active {"error":{"root\_cause":\[{"type":"circuit\_breaking\_exception","reason":"\[parent\] Data too large, data for \[\\] would be \[2985537… --- ## [\[Visualization\] Filter bucket containing spaces](https://discuss.elastic.co/t/visualization-filter-bucket-containing-spaces/203608)
**Author:** [@Christian\_Pontesegge](https://discuss.elastic.co/u/Christian_Pontesegge)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 11:52am UTC](https://discuss.elastic.co/t/visualization-filter-bucket-containing-spaces/203608 "2019-10-15T11:52:10Z")
I have got a field called "Product version" (mind the space in the name). On Discover I can use a filter like: Product version:12\* Now I want to use the same filter for a visualization. Therefore I set Bucket/Aggregati… --- ## [Logstash in AWS container with S3 output not working unless S3 bucket is public?](https://discuss.elastic.co/t/logstash-in-aws-container-with-s3-output-not-working-unless-s3-bucket-is-public/203629)
**Author:** [@KalleDania](https://discuss.elastic.co/u/KalleDania)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 11:16am UTC](https://discuss.elastic.co/t/logstash-in-aws-container-with-s3-output-not-working-unless-s3-bucket-is-public/203629 "2019-10-15T11:16:03Z")
So, im hosting ELK in AWS, but it seems my Logstash container wont forward logs to my S3 storage unit even despite me giving it the right permissions. Could this be something to do with Logstash? I have role with access… --- ## [エラー Too many operations declared on operation entry](https://discuss.elastic.co/t/too-many-operations-declared-on-operation-entry/201892)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 11:09am UTC](https://discuss.elastic.co/t/too-many-operations-declared-on-operation-entry/201892 "2019-10-15T11:09:21Z")
node.jsから非同期処理を用いて 1.旧indexのindex\_name取得 2.旧indexのaliasをremove、新indexに旧につけていたalias名と同じものをaliasとしてadd 3.旧indexの削除 を行ったところタイトルのerrorが出ました。原因は一度に大量のオペレーションを宣言したからということみたいですが、解決策は何がありますでしょうか？ { StatusCodeError: 400 - {… --- ## [Can I fire multiple queries together and get results as different data sets for particular query?](https://discuss.elastic.co/t/can-i-fire-multiple-queries-together-and-get-results-as-different-data-sets-for-particular-query/203061)
**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 10:14am UTC](https://discuss.elastic.co/t/can-i-fire-multiple-queries-together-and-get-results-as-different-data-sets-for-particular-query/203061 "2019-10-15T10:14:12Z")
Is there a way to fire multiple queries together and get results for each query differently? Means, suppose I have 3 mobile numbers, and I want to query each mobile number and store its data against that mobile number a… --- ## [Exactly which documents are used for vector calculation](https://discuss.elastic.co/t/exactly-which-documents-are-used-for-vector-calculation/202270)
**Author:** [@ray1](https://discuss.elastic.co/u/ray1)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 9:32am UTC](https://discuss.elastic.co/t/exactly-which-documents-are-used-for-vector-calculation/202270 "2019-10-15T09:32:31Z")
I have read some of elastic search blogs and documents to understand how the vector calculation works. However it seems confusing for me about the range of documents that is used for the vector calculation. https://www… --- ## [Track\_total\_hits and approximate hit count](https://discuss.elastic.co/t/track-total-hits-and-approximate-hit-count/203598)
**Author:** [@ctombaugh](https://discuss.elastic.co/u/ctombaugh)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 9:18am UTC](https://discuss.elastic.co/t/track-total-hits-and-approximate-hit-count/203598 "2019-10-15T09:18:54Z")
Assuming that track\_total\_hits=true performs an accurate hit count, is there any way to have an approximate hit count and somewhat better performance? E.g. for 123,456 documents I would like to know that I have approxima… --- ## [Copy last line of file to another file if the size of the first file is increasing](https://discuss.elastic.co/t/copy-last-line-of-file-to-another-file-if-the-size-of-the-first-file-is-increasing/203601)
**Author:** [@Adrian\_Cincu](https://discuss.elastic.co/u/Adrian_Cincu)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 9:05am UTC](https://discuss.elastic.co/t/copy-last-line-of-file-to-another-file-if-the-size-of-the-first-file-is-increasing/203601 "2019-10-15T09:05:11Z")
Hi, i wrote the output of some logs to a file called interface\_up. I would like to copy the last line of this file to another file compare.txt ( lines in this file will be overwrite each time). Can you help me please? o… --- ## [Kibana 7.4 Status: Red](https://discuss.elastic.co/t/kibana-7-4-status-red/203260)
**Author:** [@Julius\_Gamboa](https://discuss.elastic.co/u/Julius_Gamboa)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 8:55am UTC](https://discuss.elastic.co/t/kibana-7-4-status-red/203260 "2019-10-15T08:55:10Z")
Hi, I recently tried to install Elasticsearch and Kibana 7.4. After starting both, I am receiving the following Red status on Kibana console. The error message is saying "This version of Kibana requires Elasticsearch … --- ## [Plan about supporting org.wikimedia.search:extra for 7.4.0?](https://discuss.elastic.co/t/plan-about-supporting-org-wikimedia-search-extra-for-7-4-0/203585)
**Author:** [@Vimos](https://discuss.elastic.co/u/Vimos)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 8:22am UTC](https://discuss.elastic.co/t/plan-about-supporting-org-wikimedia-search-extra-for-7-4-0/203585 "2019-10-15T08:22:12Z")
I am trying to load enwiki-20191007-cirrussearch-content.json.gz into elasticsearch 7.4.0. But I find the plugin org.wikimedia.search:extra does not have a version supporting 7.4.0. I am getting this error for Kibana: U… --- ## [How to import a config file into Docker Container of Logstash?](https://discuss.elastic.co/t/how-to-import-a-config-file-into-docker-container-of-logstash/203099)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 4\ **Last updated:** [October 15, 2019, 7:46am UTC](https://discuss.elastic.co/t/how-to-import-a-config-file-into-docker-container-of-logstash/203099 "2019-10-15T07:46:27Z")
Hi Logstash Ninja Masters, I recently spun up a Logstash docker container (v 7.4.0), to replace a local-app version of LS on the same Ubuntu box. I‘m confused how to instruct the Docker LS to use the configuration that… --- ## [Existing mapping for \[postfix\] must be of type object but found \[boolean\]](https://discuss.elastic.co/t/existing-mapping-for-postfix-must-be-of-type-object-but-found-boolean/203479)
**Author:** [@beren](https://discuss.elastic.co/u/beren)\ **Replies:** 5\ **Last updated:** [October 15, 2019, 7:26am UTC](https://discuss.elastic.co/t/existing-mapping-for-postfix-must-be-of-type-object-but-found-boolean/203479 "2019-10-15T07:26:14Z")
Всем привет. Поднял с нуля ELK. Настроил его на мониторинг В /etc/logstash/conf.d/postfix.conf В /etc/logstash/patterns/postfix Но в логах logstash Blockquote \[2019-10-14T10:39:13,494\]\[WARN \]\[logstash.outputs.… --- ## [High level rest client facing Connection refused when running docker image](https://discuss.elastic.co/t/high-level-rest-client-facing-connection-refused-when-running-docker-image/203187)
**Author:** [@tutorj](https://discuss.elastic.co/u/tutorj)\ **Replies:** 1\ **Last updated:** [October 15, 2019, 7:20am UTC](https://discuss.elastic.co/t/high-level-rest-client-facing-connection-refused-when-running-docker-image/203187 "2019-10-15T07:20:19Z")
Dear community, I'm new to elastic & i'm trying to cloud-ize my application via docker then kubernetes. I've built the same Springboot app as: To test this app: 1. Pull docker image a. docker pull docker.elastic.… --- ## [Help explain Logstash with rollover](https://discuss.elastic.co/t/help-explain-logstash-with-rollover/203572)
**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\ **Replies:** 0\ **Last updated:** [October 15, 2019, 7:19am UTC](https://discuss.elastic.co/t/help-explain-logstash-with-rollover/203572 "2019-10-15T07:19:49Z")
Hi, We're using the OSS version of the stack and are ingesting logs in the following way: Syslog -\> Logstash -\> Elasticsearch We want to utilize the Rollover API but we're having difficulty grasping how to implement i… --- ## [Conflict of customized config for installing different Kibana plugins](https://discuss.elastic.co/t/conflict-of-customized-config-for-installing-different-kibana-plugins/202137)
**Author:** [@tony21177](https://discuss.elastic.co/u/tony21177)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 6:45am UTC](https://discuss.elastic.co/t/conflict-of-customized-config-for-installing-different-kibana-plugins/202137 "2019-10-15T06:45:01Z")
Hi, I develope two different plugin. In the kibana.yml,I configure the customized config as below feature1.uri: "http://192.168.28.152:11213" feature2.uri: "http://192.168.28.152:11214" index.js as below return … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1839) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1841)