# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1909 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1910 --- ## [Помогите извлечь поли из xml в message](https://discuss.elastic.co/t/xml-message/198355)
**Author:** [@Nurbek](https://discuss.elastic.co/u/Nurbek)\ **Replies:** 4\ **Last updated:** [September 10, 2019, 4:08am UTC](https://discuss.elastic.co/t/xml-message/198355 "2019-09-10T04:08:48Z")
input дает мне xml в message Хочу из message извлечь поля status, number, tip, Data xml отчет такой \ \ \ **Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 3\ **Last updated:** [September 10, 2019, 3:49am UTC](https://discuss.elastic.co/t/non-http-request-for-apm-server/198247 "2019-09-10T03:49:13Z") Sorry for deleting the template but this is more of is there a way than a specific issue. I'm trying to set up a custom APM pipeline and my initial thoughts were that I can install the agents in various containers, have… --- ## [Unable to set elastic search log file path](https://discuss.elastic.co/t/unable-to-set-elastic-search-log-file-path/198812)
**Author:** [@abhishek\_Shetty](https://discuss.elastic.co/u/abhishek_Shetty)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 2:49am UTC](https://discuss.elastic.co/t/unable-to-set-elastic-search-log-file-path/198812 "2019-09-10T02:49:46Z")
I have installed elasticsearch, kibana of 6.8.2 version on centos using RPM file and I have enabled basic authentication. I need to modify all log paths to /apps/log instead of /var. For now I did modify log path but lo… --- ## [When is the target release date for v7.4.0?](https://discuss.elastic.co/t/when-is-the-target-release-date-for-v7-4-0/197775)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [September 10, 2019, 2:21am UTC](https://discuss.elastic.co/t/when-is-the-target-release-date-for-v7-4-0/197775 "2019-09-10T02:21:42Z")
Hello. I really need this issue to be migrated into kibana TSVB ... Will v7.4.0 be released anytime soon ? Thanks, Yu Watanabe --- ## [Synonym token filter and edge\_ngram tokenizer conflicts](https://discuss.elastic.co/t/synonym-token-filter-and-edge-ngram-tokenizer-conflicts/198328)
**Author:** [@jjarthur](https://discuss.elastic.co/u/jjarthur)\ **Replies:** 5\ **Last updated:** [September 9, 2019, 10:21pm UTC](https://discuss.elastic.co/t/synonym-token-filter-and-edge-ngram-tokenizer-conflicts/198328 "2019-09-09T22:21:00Z")
Hello, I'm facing a small issue with my implementation of the synonym token filter combined with an edge\_ngram tokenizer. For example, I have a synonym mapping for sa =\> south\_australia and an entry with a field of san… --- ## [Ok to define custom grok patterns in default logstash pattern file?](https://discuss.elastic.co/t/ok-to-define-custom-grok-patterns-in-default-logstash-pattern-file/198789)
**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\ **Replies:** 4\ **Last updated:** [September 9, 2019, 9:27pm UTC](https://discuss.elastic.co/t/ok-to-define-custom-grok-patterns-in-default-logstash-pattern-file/198789 "2019-09-09T21:27:07Z")
Is there any problem with defining a custom expression in the already existing pattern file that I believe is read here in version 7.2: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-patterns-core-4.1.2/pat… --- ## [Unable to start logstash: ERROR: Unknown command '�f'](https://discuss.elastic.co/t/unable-to-start-logstash-error-unknown-command-i-f/198783)
**Author:** [@chinmay.parkar](https://discuss.elastic.co/u/chinmay.parkar)\ **Replies:** 4\ **Last updated:** [September 9, 2019, 9:12pm UTC](https://discuss.elastic.co/t/unable-to-start-logstash-error-unknown-command-i-f/198783 "2019-09-09T21:12:54Z")
\[root@localhost logstash-6.3.0\]# ./bin/logstash –f logstash.conf ERROR: Unknown command '�f' See: 'bin/logstash --help' \[ERROR\] 2019-09-09 11:27:30.255 \[main\] Logstash - java.lang.IllegalStateException: Logstash sto… --- ## [Help Using Python to Load Data into ES](https://discuss.elastic.co/t/help-using-python-to-load-data-into-es/198134)
**Author:** [@beezit](https://discuss.elastic.co/u/beezit)\ **Replies:** 5\ **Last updated:** [September 9, 2019, 8:45pm UTC](https://discuss.elastic.co/t/help-using-python-to-load-data-into-es/198134 "2019-09-09T20:45:29Z")
I am having some issues getting the following python script to load data into ElasticSearch, can someone please guide me. Here is my python script. My goal is to use python to load this into ElastiSearch and also view … --- ## [Counting instances per day](https://discuss.elastic.co/t/counting-instances-per-day/198780)
**Author:** [@cblackburn36](https://discuss.elastic.co/u/cblackburn36)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 8:33pm UTC](https://discuss.elastic.co/t/counting-instances-per-day/198780 "2019-09-09T20:33:17Z")
Hi All, We have some documents where an id code is logged against a day. Something like:- { id: 12345, date: 09-09-2019 } Where 12345 changes and there are a bunch of documents each day. We want to count the numbe… --- ## [Using existing logstash index pattern in Kibana produces 413 Response Error](https://discuss.elastic.co/t/using-existing-logstash-index-pattern-in-kibana-produces-413-response-error/198779)
**Author:** [@swnbdy](https://discuss.elastic.co/u/swnbdy)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 8:07pm UTC](https://discuss.elastic.co/t/using-existing-logstash-index-pattern-in-kibana-produces-413-response-error/198779 "2019-09-09T20:07:22Z")
Hello team, Newbie here. Today I refreshed my index pattern to bring in new fields. After noticing that I had gone from having 18 fields to 2000+ I felt something wasn't as I only expected \>10 fields. Thinking I was r… --- ## [How to read a remote text file using logstash](https://discuss.elastic.co/t/how-to-read-a-remote-text-file-using-logstash/198773)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 7:51pm UTC](https://discuss.elastic.co/t/how-to-read-a-remote-text-file-using-logstash/198773 "2019-09-09T19:51:49Z")
hi, i want to know how to read a remote text file using logstash, i suppose that i have a text file in windows machine and my ELK in ubuntu thank you --- ## [Watcher send\_email and update\_documents Function Inquiry](https://discuss.elastic.co/t/watcher-send-email-and-update-documents-function-inquiry/198772)
**Author:** [@Shaw](https://discuss.elastic.co/u/Shaw)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 7:13pm UTC](https://discuss.elastic.co/t/watcher-send-email-and-update-documents-function-inquiry/198772 "2019-09-09T19:13:42Z")
Hi, I encountered an issue where "update\_documents" failed to execute and "send\_email" is still sending the result, which is causing multiple duplicate contents from emails. Is anywhere I can make a condition that if "u… --- ## [Multiply and adding fields in logstsh](https://discuss.elastic.co/t/multiply-and-adding-fields-in-logstsh/198767)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 7:12pm UTC](https://discuss.elastic.co/t/multiply-and-adding-fields-in-logstsh/198767 "2019-09-09T19:12:03Z")
Hello, I am trying to convert three separate fields for hour minute and second to one in seconds so I have dome some research and found if \[hour\] and \[minute\] and \[second\] { ruby { c… --- ## [Elasticsearch: transpose and aggregate?](https://discuss.elastic.co/t/elasticsearch-transpose-and-aggregate/198310)
**Author:** [@Mihir\_Kothari](https://discuss.elastic.co/u/Mihir_Kothari)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 4:02pm UTC](https://discuss.elastic.co/t/elasticsearch-transpose-and-aggregate/198310 "2019-09-09T16:02:13Z")
I am using the ES 6.5. When I fetch the required messages, I have to transpose and aggregate it. See example for more details. Message retrieved - 2 messages retried for example: { "\_index": "index\_name", "\_typ… --- ## [Can I show multiple aggregations in a single datatable in Kibana?](https://discuss.elastic.co/t/can-i-show-multiple-aggregations-in-a-single-datatable-in-kibana/198100)
**Author:** [@Evan\_Something](https://discuss.elastic.co/u/Evan_Something)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 6:31pm UTC](https://discuss.elastic.co/t/can-i-show-multiple-aggregations-in-a-single-datatable-in-kibana/198100 "2019-09-09T18:31:03Z")
Hello. I am very new to creating Visualizations and Dashboards with Kibana, so if my approach is way off, please help orient me. I am recording usage statistics for my website, and I would like to create a datagrid of i… --- ## [Alerts in elastic](https://discuss.elastic.co/t/alerts-in-elastic/197223)
**Author:** [@Karthik2411](https://discuss.elastic.co/u/Karthik2411)\ **Replies:** 5\ **Last updated:** [September 9, 2019, 5:48am UTC](https://discuss.elastic.co/t/alerts-in-elastic/197223 "2019-09-09T05:48:26Z")
I am working creating alerts in elastic. I have a complex requirement of checking failures every hour and then summing them up to alert when the sum is exceeding 10 and then checking every hour and doing the same. I am a… --- ## [Confusion on Aggregation Sum Datatype](https://discuss.elastic.co/t/confusion-on-aggregation-sum-datatype/197894)
**Author:** [@mikeagileedgecom](https://discuss.elastic.co/u/mikeagileedgecom)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 5:58pm UTC](https://discuss.elastic.co/t/confusion-on-aggregation-sum-datatype/197894 "2019-09-09T17:58:51Z")
I am missing something w/ ES Sum Aggregations. I want to sum a field that is mapped to as an integer vs a float. I specifically would like the resulting sum value to be an integer too. I have simplified my query and am … --- ## [Number of Master nodes across two data centers](https://discuss.elastic.co/t/number-of-master-nodes-across-two-data-centers/198753)
**Author:** [@Vertigo](https://discuss.elastic.co/u/Vertigo)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 5:55pm UTC](https://discuss.elastic.co/t/number-of-master-nodes-across-two-data-centers/198753 "2019-09-09T17:55:14Z")
We are working on redesigning our currently cluster. Our 40 ES data nodes are split between 2 data centers, 20 in each. Currently there are 3 master dedicated nodes, 2 in one DC, and 1 in the other. The goal with the two… --- ## [Extract specific fields from Json using Logstash](https://discuss.elastic.co/t/extract-specific-fields-from-json-using-logstash/198750)
**Author:** [@baselai](https://discuss.elastic.co/u/baselai)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 5:50pm UTC](https://discuss.elastic.co/t/extract-specific-fields-from-json-using-logstash/198750 "2019-09-09T17:50:20Z")
I have this json file { "type": "resource", "headers": { "destination\_channel": "data" }, "body": { "type":"resource", "resourceId":"estimatorB", "resourceType":null, "resourceValue":"data.c… --- ## [Subtraction of 90th and 10th percentile (percentile range)](https://discuss.elastic.co/t/subtraction-of-90th-and-10th-percentile-percentile-range/197910)
**Author:** [@Piotr\_Wasilewski](https://discuss.elastic.co/u/Piotr_Wasilewski)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 5:48pm UTC](https://discuss.elastic.co/t/subtraction-of-90th-and-10th-percentile-percentile-range/197910 "2019-09-09T17:48:41Z")
Hi, I was asked to create a query for records with response times in range between 10th and 90th percentile. These data are in single numeric field in documents. I know I can get both of them with aggregation query, bu… --- ## [Create new user to create and write any index](https://discuss.elastic.co/t/create-new-user-to-create-and-write-any-index/198755)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 5:47pm UTC](https://discuss.elastic.co/t/create-new-user-to-create-and-write-any-index/198755 "2019-09-09T17:47:17Z")
Hi, i'm new to Elastic and I would like to create a new user in elasticsearch from Kibana. I want this user to be able to create any index regardless of the index pattern. The only way i have found is to create index pa… --- ## [Securing Elastic Search single node](https://discuss.elastic.co/t/securing-elastic-search-single-node/198069)
**Author:** [@Joseph\_Mak](https://discuss.elastic.co/u/Joseph_Mak)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 5:35pm UTC](https://discuss.elastic.co/t/securing-elastic-search-single-node/198069 "2019-09-09T17:35:39Z")
I have a single node Elastic Search 6.4, and trying to see if I can add some security on it, like adding a user/password. Trying to follow this guide here I also have Kibana installed. But I do not see Management-\>User… --- ## [Mutate\>Convert and URL Decode](https://discuss.elastic.co/t/mutate-convert-and-url-decode/198745)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 4:38pm UTC](https://discuss.elastic.co/t/mutate-convert-and-url-decode/198745 "2019-09-09T16:38:03Z")
I am ingesting a document that is encoded as UTF-8BOM. This is causing an issue with the urldecode filter, though every other filter (json, mutate, translate, etc...) seems to process it just fine without changing the d… --- ## [StackOverflowError: null and elasticsearch dying](https://discuss.elastic.co/t/stackoverflowerror-null-and-elasticsearch-dying/198595)
**Author:** [@Kate\_Fox](https://discuss.elastic.co/u/Kate_Fox)\ **Replies:** 4\ **Last updated:** [September 9, 2019, 4:09pm UTC](https://discuss.elastic.co/t/stackoverflowerror-null-and-elasticsearch-dying/198595 "2019-09-09T16:09:57Z")
Getting a stack overlow error with Elasticsearch version\[6.6.2\] \[2019-09-09T04:01:07,798\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[da-data2\] fatal error in thread \[elasticsearch\[da-data2\]\[flush\]\[T#1\]\], exit… --- ## [Kibanaのvisualize -\> metric/data tableでのstandard deviation](https://discuss.elastic.co/t/kibana-visualize-metric-data-table-standard-deviation/198548)
**Author:** [@fjak156](https://discuss.elastic.co/u/fjak156)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 3:46pm UTC](https://discuss.elastic.co/t/kibana-visualize-metric-data-table-standard-deviation/198548 "2019-09-09T15:46:48Z")
kibanaのvisualizeで、metricを使って、標準偏差を表示させる、というごく簡単なことをしようとしています。データは、csvファイルでごく簡単な２０行のデータを入れています(data visualizerによるimport)。 環境は、docker-hubからpullした、elasticsearch,kibana 7.3.1になります。 ドキュメントによると、https://www.elastic.co/guide/e… --- ## [How to get the original message sent to logstash?](https://discuss.elastic.co/t/how-to-get-the-original-message-sent-to-logstash/198736)
**Author:** [@Daniel\_Ben\_Hayoun](https://discuss.elastic.co/u/Daniel_Ben_Hayoun)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 3:46pm UTC](https://discuss.elastic.co/t/how-to-get-the-original-message-sent-to-logstash/198736 "2019-09-09T15:46:34Z")
Hi, I'm dealing with winlogbeat , and want to add to the entire log that I've got to a field called "\[event\]\[original\]" usually I do this mutate { rename =\> { "message" =\> "forensicLog" } } but this time , winlogbeat… --- ## [Rally 1.3.0 released](https://discuss.elastic.co/t/rally-1-3-0-released/198734)
**Author:** [@Evgenia\_Badiyanova](https://discuss.elastic.co/u/Evgenia_Badiyanova)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 3:43pm UTC](https://discuss.elastic.co/t/rally-1-3-0-released/198734 "2019-09-09T15:43:41Z")
We have just released Rally 1.3.0. This release contains several improvements and bug fixes. A notable feature in this release is that Rally stores the track and team revision in the metrics store so it is easier to repr… --- ## [Cluster State Red after node restart](https://discuss.elastic.co/t/cluster-state-red-after-node-restart/198715)
**Author:** [@Bellicapelli0](https://discuss.elastic.co/u/Bellicapelli0)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 3:38pm UTC](https://discuss.elastic.co/t/cluster-state-red-after-node-restart/198715 "2019-09-09T15:38:08Z")
I'm running a three node cluster, and over the weekend one of the machines hosting one of the ES nodes failed. I restarted it this morning, but the cluster state remains red hours after restart, with the node seemingly r… --- ## [Elasticsearch service fails in Microsoft Team Foundation Server after upgrade from TFS 2017 to 2018](https://discuss.elastic.co/t/elasticsearch-service-fails-in-microsoft-team-foundation-server-after-upgrade-from-tfs-2017-to-2018/198731)
**Author:** [@PaulNovelli](https://discuss.elastic.co/u/PaulNovelli)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 3:34pm UTC](https://discuss.elastic.co/t/elasticsearch-service-fails-in-microsoft-team-foundation-server-after-upgrade-from-tfs-2017-to-2018/198731 "2019-09-09T15:34:36Z")
Posting here at Elissa J's request after initial email exchange. We recently upgraded an installation of Microsoft Team Foundation Server (TFS) running on Windows Server 2016 Standard from TFS 2017 to TFS 2018. The upg… --- ## [Distinct names of all matching attributes](https://discuss.elastic.co/t/distinct-names-of-all-matching-attributes/198724)
**Author:** [@tobias\_c](https://discuss.elastic.co/u/tobias_c)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 3:18pm UTC](https://discuss.elastic.co/t/distinct-names-of-all-matching-attributes/198724 "2019-09-09T15:18:32Z")
Dear all, i have a list of search results and want that the user can filter by the attributes where the search term is found. The list with the search results can be loaded in one elasticsearch request and the list of … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1908) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1910)