# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1951 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1952 --- ## [ECS-Kibana issue: is it possible to combine dynamic filter for kubernetes.pod.name or kubernetes.container.\_module.pod.name](https://discuss.elastic.co/t/ecs-kibana-issue-is-it-possible-to-combine-dynamic-filter-for-kubernetes-pod-name-or-kubernetes-container-module-pod-name/195449)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [August 20, 2019, 6:35am UTC](https://discuss.elastic.co/t/ecs-kibana-issue-is-it-possible-to-combine-dynamic-filter-for-kubernetes-pod-name-or-kubernetes-container-module-pod-name/195449 "2019-08-20T06:35:26Z")
Hi, I am using metricbeat to gather information about my kubernetes cluster. I want to build my own status dashboard to see if my deployments / statefulsets in kubernetes are healthy and I want to be able to dig deeper … --- ## [Is there anyway for logstash to join two csv files(m:m relationship) based on a common field, and ingest the data into one single index](https://discuss.elastic.co/t/is-there-anyway-for-logstash-to-join-two-csv-files-m-m-relationship-based-on-a-common-field-and-ingest-the-data-into-one-single-index/195835)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 0\ **Last updated:** [August 20, 2019, 3:21am UTC](https://discuss.elastic.co/t/is-there-anyway-for-logstash-to-join-two-csv-files-m-m-relationship-based-on-a-common-field-and-ingest-the-data-into-one-single-index/195835 "2019-08-20T03:21:15Z")
Hi Team, I have 2 csv files with be column info Columns of 1.csv \` caseid, classname, features, actions, author, module, prerequisite, steps, ation \` 2. Columns of 2.csv \` module, features, ation, ui, ktf1,kt… --- ## [Is it possible : Stream 50k-100k document \< 1sec?](https://discuss.elastic.co/t/is-it-possible-stream-50k-100k-document-1sec/193640)
**Author:** [@saz](https://discuss.elastic.co/u/saz)\ **Replies:** 6\ **Last updated:** [August 20, 2019, 5:25am UTC](https://discuss.elastic.co/t/is-it-possible-stream-50k-100k-document-1sec/193640 "2019-08-20T05:25:23Z")
Hi , We have a usecase in our projects, where elasticsearch is used for search and need to send anywhere from 50,000-100,000 documents for further processing and then send to client. The response document should contai… --- ## [Composite Aggregation without "size" parameter](https://discuss.elastic.co/t/composite-aggregation-without-size-parameter/195845)
**Author:** [@lightning](https://discuss.elastic.co/u/lightning)\ **Replies:** 0\ **Last updated:** [August 20, 2019, 5:12am UTC](https://discuss.elastic.co/t/composite-aggregation-without-size-parameter/195845 "2019-08-20T05:12:28Z")
What exactly will happen if we don't use the "size" parameter when using composite aggregation? Will it aggregate all records? if yes, how does this is different compared to terms aggregation? Thank you for your answer… --- ## [Can I substring event data's value and use this in elasitcsearch index name in logstash config?](https://discuss.elastic.co/t/can-i-substring-event-datas-value-and-use-this-in-elasitcsearch-index-name-in-logstash-config/195012)
**Author:** [@teemoGod](https://discuss.elastic.co/u/teemoGod)\ **Replies:** 3\ **Last updated:** [August 20, 2019, 4:20am UTC](https://discuss.elastic.co/t/can-i-substring-event-datas-value-and-use-this-in-elasitcsearch-index-name-in-logstash-config/195012 "2019-08-20T04:20:39Z")
following is my config input { file { path =\> "/\*.log" start\_position =\> "beginning" sincedb\_path =\> "/sincedb.log" exclude =\> \["\*current.log", "\*sincedb.log"\] } } filter { json { source =\> "m… --- ## [Parse repeated tags in xml using split filter](https://discuss.elastic.co/t/parse-repeated-tags-in-xml-using-split-filter/194231)
**Author:** [@Arshdeep\_Sandhu](https://discuss.elastic.co/u/Arshdeep_Sandhu)\ **Replies:** 6\ **Last updated:** [August 20, 2019, 3:51am UTC](https://discuss.elastic.co/t/parse-repeated-tags-in-xml-using-split-filter/194231 "2019-08-20T03:51:22Z")
I am trying to parse repeated tags in xml using split filter to get result as below example: If my logstash is: \ \ \ \ \ **Author:** [@nickovs](https://discuss.elastic.co/u/nickovs)\ **Replies:** 0\ **Last updated:** [August 19, 2019, 11:44pm UTC](https://discuss.elastic.co/t/aggregate-into-best-fit-buckets/195822 "2019-08-19T23:44:23Z") I'm looking for a way to put my data into one of a set of buckets depending on to which of a list of labels is closest to some field in each document. By way of example, say I have a geo-location point in each document a… --- ## [Monitoring画面でのLogStashの表示](https://discuss.elastic.co/t/monitoring-logstash/195675)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 4\ **Last updated:** [August 20, 2019, 1:44am UTC](https://discuss.elastic.co/t/monitoring-logstash/195675 "2019-08-20T01:44:33Z")
KibanaのMonitoring画面にて、Logstashを監視する設定の方法をご教示ください。 Kibanaバージョン：7.1 Logstashバージョン：7.1 ■マニュアル参照箇所 https://www.elastic.co/guide/en/logstash/current/configuring-logstash.html ■logstash.yml追加設定内容 xpack.monitoring.enabled… --- ## [Frozen Indices on Vega](https://discuss.elastic.co/t/frozen-indices-on-vega/195686)
**Author:** [@osckal](https://discuss.elastic.co/u/osckal)\ **Replies:** 2\ **Last updated:** [August 20, 2019, 1:20am UTC](https://discuss.elastic.co/t/frozen-indices-on-vega/195686 "2019-08-20T01:20:33Z")
I'm having a problem getting my data on frozen indices in vega.. I can confirm my data is there if I do a manual query with ignore\_throttled = false. GET myindex/\_search?ignore\_throttled=false Other visualization also… --- ## [EvtSeek used by winlogbeats go wrong when arch is 386](https://discuss.elastic.co/t/evtseek-used-by-winlogbeats-go-wrong-when-arch-is-386/195825)
**Author:** [@tianlin](https://discuss.elastic.co/u/tianlin)\ **Replies:** 0\ **Last updated:** [August 20, 2019, 12:50am UTC](https://discuss.elastic.co/t/evtseek-used-by-winlogbeats-go-wrong-when-arch-is-386/195825 "2019-08-20T00:50:44Z")
Hi, I found there is a bug in \_EvtSeek. position is int64, but in 386, it must call syscall.Syscall6(procEvtSeek.Addr(), 6, uintptr(resultSet), uintptr(position), uintptr(position\>\>32), uintptr(bookmark), uintptr(timeou… --- ## [Logstash log showing "error:1e00007d:Cipher functions:OPENSSL\_internal:INVALID\_NONCE"](https://discuss.elastic.co/t/logstash-log-showing-errorcipher-functionsinvalid-nonce/189418)
**Author:** [@xchai](https://discuss.elastic.co/u/xchai)\ **Replies:** 10\ **Last updated:** [August 20, 2019, 12:30am UTC](https://discuss.elastic.co/t/logstash-log-showing-errorcipher-functionsinvalid-nonce/189418 "2019-08-20T00:30:05Z")
Hi, we are testing ELK 6.6.1 on s390x platform (Linux on Z). After starting the ELK 6.6.1 stack, everything seems working fine and we can see logs on Kibana UI, but logstash log has following entries from time to time: … --- ## [Pipeline aborted due to error - Invalid argument](https://discuss.elastic.co/t/pipeline-aborted-due-to-error-invalid-argument/195824)
**Author:** [@pgbollwerk](https://discuss.elastic.co/u/pgbollwerk)\ **Replies:** 0\ **Last updated:** [August 20, 2019, 12:12am UTC](https://discuss.elastic.co/t/pipeline-aborted-due-to-error-invalid-argument/195824 "2019-08-20T00:12:29Z")
I am quite new to the ELK stack, and I'm trying to help take over a config someone else built. I'm running into an issue recently with one of my azureblob pipelines not working properly. I've spent a few hours digging … --- ## [How can I easily use Elasticsearch libs jars (grok, dissect) in Java code?](https://discuss.elastic.co/t/how-can-i-easily-use-elasticsearch-libs-jars-grok-dissect-in-java-code/195800)
**Author:** [@Luke\_Nezda](https://discuss.elastic.co/u/Luke_Nezda)\ **Replies:** 1\ **Last updated:** [August 19, 2019, 11:40pm UTC](https://discuss.elastic.co/t/how-can-i-easily-use-elasticsearch-libs-jars-grok-dissect-in-java-code/195800 "2019-08-19T23:40:39Z")
Hello, All - I'd like to use Elasticsearch's versions of dissect and grok in my Java code. There doesn't seem to be a Maven dependency which provides this. I've managed to build the libs using gradle but I'd prefer to g… --- ## [File input, from NetApp CIFS share, not reading single file](https://discuss.elastic.co/t/file-input-from-netapp-cifs-share-not-reading-single-file/195391)
**Author:** [@eclipsed450](https://discuss.elastic.co/u/eclipsed450)\ **Replies:** 10\ **Last updated:** [August 19, 2019, 9:25pm UTC](https://discuss.elastic.co/t/file-input-from-netapp-cifs-share-not-reading-single-file/195391 "2019-08-19T21:25:30Z")
Hi, I've made quite a few other posts, and have successfully ingested more than 1 billion messages in the last couple weeks, but we've come to the conclusion that Logstash just isn't keeping up with the backlog of messa… --- ## [Filebeat Setup Fails with Wildcard Certificate](https://discuss.elastic.co/t/filebeat-setup-fails-with-wildcard-certificate/193847)
**Author:** [@Zamiell](https://discuss.elastic.co/u/Zamiell)\ **Replies:** 4\ **Last updated:** [August 19, 2019, 7:56pm UTC](https://discuss.elastic.co/t/filebeat-setup-fails-with-wildcard-certificate/193847 "2019-08-19T19:56:35Z")
Greetings. I found a bug in beats, but I went to open a bug issue on GitHub but the prompts directed me here to confirm that it was a bug first. Steps to reproduce: Vanilla CentOS 7 Download and install filebeat-6.8.0… --- ## [Date filter for minor changes in format](https://discuss.elastic.co/t/date-filter-for-minor-changes-in-format/195259)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 4\ **Last updated:** [August 19, 2019, 9:07pm UTC](https://discuss.elastic.co/t/date-filter-for-minor-changes-in-format/195259 "2019-08-19T21:07:47Z")
Mar 3, 2019 9:40:30,734 PM Mar 11, 2019 11:20:10,114 PM I have to parse logs with the following formats. The first date does not have a 0 in front of the 3. This also applies to the hours portion. I am unsure how I wou… --- ## [Syslog out plugin connection error and UDP drops](https://discuss.elastic.co/t/syslog-out-plugin-connection-error-and-udp-drops/195809)
**Author:** [@Jayanthi](https://discuss.elastic.co/u/Jayanthi)\ **Replies:** 0\ **Last updated:** [August 19, 2019, 8:57pm UTC](https://discuss.elastic.co/t/syslog-out-plugin-connection-error-and-udp-drops/195809 "2019-08-19T20:57:23Z")
We have 4 logstash servers currently just taking ~4000/sec. Works fine almost all the time, but few times couple server have UDP drops. At the same time, i see following exception logged. syslog tcp output exception: c… --- ## [Select all tables from database MYSQL](https://discuss.elastic.co/t/select-all-tables-from-database-mysql/195804)
**Author:** [@Farouk6072](https://discuss.elastic.co/u/Farouk6072)\ **Replies:** 0\ **Last updated:** [August 19, 2019, 7:51pm UTC](https://discuss.elastic.co/t/select-all-tables-from-database-mysql/195804 "2019-08-19T19:51:36Z")
Hi how i can select all tables from database ? --- ## [Kibana Plugin or Visualization](https://discuss.elastic.co/t/kibana-plugin-or-visualization/193754)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 2\ **Last updated:** [August 19, 2019, 6:29pm UTC](https://discuss.elastic.co/t/kibana-plugin-or-visualization/193754 "2019-08-19T18:29:21Z")
Hello Team, I am working on a use case where i need to show saved search like visualization . ColumnClass : shows Admission for a particular class. ColumnA : todays admission count ColumnB: last 3 days admission co… --- ## [Kibana Visualization Data Flow](https://discuss.elastic.co/t/kibana-visualization-data-flow/195630)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 2\ **Last updated:** [August 19, 2019, 6:15pm UTC](https://discuss.elastic.co/t/kibana-visualization-data-flow/195630 "2019-08-19T18:15:32Z")
Hello Team, I am trying to build a visualization with custom table, i am trying to understand how to cll server function from Component. s per my understanding in Kibana plugin we have min Class in public/component fol… --- ## [Implementing Event dependent configurations using Java output plugins](https://discuss.elastic.co/t/implementing-event-dependent-configurations-using-java-output-plugins/195780)
**Author:** [@Xucito](https://discuss.elastic.co/u/Xucito)\ **Replies:** 4\ **Last updated:** [August 19, 2019, 6:05pm UTC](https://discuss.elastic.co/t/implementing-event-dependent-configurations-using-java-output-plugins/195780 "2019-08-19T18:05:56Z")
Following from the issue below: I am looking to access configurations that are evaluated based on the event https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html output { file { p… --- ## [Possible to restrict force merges to single ElasticSearch nodes?](https://discuss.elastic.co/t/possible-to-restrict-force-merges-to-single-elasticsearch-nodes/195790)
**Author:** [@prungta](https://discuss.elastic.co/u/prungta)\ **Replies:** 0\ **Last updated:** [August 19, 2019, 5:56pm UTC](https://discuss.elastic.co/t/possible-to-restrict-force-merges-to-single-elasticsearch-nodes/195790 "2019-08-19T17:56:14Z")
The API for forcemerge operates per index. I’d like to restrict further to only the segments on a single node. Few different reasons why I'm after this: (1) As things stand, forcemerge(s) cannot be cancelled. Isolating… --- ## [Trying to understand the behaviour of query string with double quotes](https://discuss.elastic.co/t/trying-to-understand-the-behaviour-of-query-string-with-double-quotes/195768)
**Author:** [@peidaqi](https://discuss.elastic.co/u/peidaqi)\ **Replies:** 4\ **Last updated:** [August 19, 2019, 5:20pm UTC](https://discuss.elastic.co/t/trying-to-understand-the-behaviour-of-query-string-with-double-quotes/195768 "2019-08-19T17:20:45Z")
I couldn't find a document that explains how the double quotes (exact string matches) in query strings work, so I did a bit of an experiment. Both the analyzer and search analyzer of my document field was created with a… --- ## [How to view all the documents in kibana](https://discuss.elastic.co/t/how-to-view-all-the-documents-in-kibana/195781)
**Author:** [@Karthik2411](https://discuss.elastic.co/u/Karthik2411)\ **Replies:** 1\ **Last updated:** [August 19, 2019, 4:40pm UTC](https://discuss.elastic.co/t/how-to-view-all-the-documents-in-kibana/195781 "2019-08-19T16:40:51Z")
When I add filters the discover part in kibana will show me that count is 1297 but ultimately says that I can view only 500 of those docs. How to view all those docs ?? --- ## [Issue starting Kibana 7.3](https://discuss.elastic.co/t/issue-starting-kibana-7-3/195365)
**Author:** [@adithyamk](https://discuss.elastic.co/u/adithyamk)\ **Replies:** 6\ **Last updated:** [August 19, 2019, 4:25pm UTC](https://discuss.elastic.co/t/issue-starting-kibana-7-3/195365 "2019-08-19T16:25:42Z")
Hi, I have an issue bringing up Kibana 7.3 It's similar to the issues others have faced but those comments were not able to resolve the issue and I am not able to comment on that issue as it is closed due to inactivity… --- ## [Unable to add geo\_point mapping with sub lat/lon properties](https://discuss.elastic.co/t/unable-to-add-geo-point-mapping-with-sub-lat-lon-properties/194941)
**Author:** [@r0bot85](https://discuss.elastic.co/u/r0bot85)\ **Replies:** 9\ **Last updated:** [August 19, 2019, 3:46pm UTC](https://discuss.elastic.co/t/unable-to-add-geo-point-mapping-with-sub-lat-lon-properties/194941 "2019-08-19T15:46:36Z")
Hello, Hopefully this is an easy answer but not a stupid question. I am fairly new to the Elastick Stack in general but learning my way around. I am attempting to get a Coordinate Map visualization using the GeoIP data… --- ## [Elasticsearch 7.3.0 - AccessDeniedException: /usr/share/elasticsearch/data/nodes](https://discuss.elastic.co/t/elasticsearch-7-3-0-accessdeniedexception-usr-share-elasticsearch-data-nodes/195619)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 3\ **Last updated:** [August 19, 2019, 3:45pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-0-accessdeniedexception-usr-share-elasticsearch-data-nodes/195619 "2019-08-19T15:45:00Z")
Hello, I deployed elasticsearch on IBM IKS cluster but I see some java exception. Please let me know whether this is something with a specific version or different. The same version works fine on GKE. k version Client … --- ## [Investigating Search Rate Spike](https://discuss.elastic.co/t/investigating-search-rate-spike/195769)
**Author:** [@Or\_Arnon](https://discuss.elastic.co/u/Or_Arnon)\ **Replies:** 0\ **Last updated:** [August 19, 2019, 3:42pm UTC](https://discuss.elastic.co/t/investigating-search-rate-spike/195769 "2019-08-19T15:42:08Z")
Hi, Our search rare spiked and is killing our cluster What tools do I have to troubleshoot this issue? Which queries are run and by whom? Is there a way to kill them? --- ## [Saved Search display specific nested field as a column](https://discuss.elastic.co/t/saved-search-display-specific-nested-field-as-a-column/195480)
**Author:** [@theflyingcarpet](https://discuss.elastic.co/u/theflyingcarpet)\ **Replies:** 4\ **Last updated:** [August 19, 2019, 3:29pm UTC](https://discuss.elastic.co/t/saved-search-display-specific-nested-field-as-a-column/195480 "2019-08-19T15:29:37Z")
The current behaviour when displaying a nested field is to display the complete sub-document as the column e.g. {"field1": "value1", "field2": "value2"} How can we flatten this to display the fields as separate columns?… --- ## [Custom plugins kibana](https://discuss.elastic.co/t/custom-plugins-kibana/195712)
**Author:** [@tomma100](https://discuss.elastic.co/u/tomma100)\ **Replies:** 2\ **Last updated:** [August 19, 2019, 3:27pm UTC](https://discuss.elastic.co/t/custom-plugins-kibana/195712 "2019-08-19T15:27:34Z")
hi there we are considering open source ELK as the basis for a project we are working on but it will be necessary to add some custom plugins to achieve what we want to do. we see that custom plugins are only available … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1950) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1952)