# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1962

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1963

---

## [How to use Date Range filter in Kibana?](https://discuss.elastic.co/t/how-to-use-date-range-filter-in-kibana/194751)

<div class="topic-metadata">

**Author:** [@Sujata\_Yadav](https://discuss.elastic.co/u/Sujata_Yadav)\
**Replies:** 3\
**Last updated:** [August 13, 2019, 2:04pm UTC](https://discuss.elastic.co/t/how-to-use-date-range-filter-in-kibana/194751 "2019-08-13T14:04:30Z")

</div>

Hi All, I am trying to use kibana date filter range to plot a bar chart for my relevant data. I am unable to use the date filter for filtering out a particular range of data. My date format in JSON is 2019-01-04T03:02:…

---

## [Use 'y' for year-of-era. Prefix your date format with '8' to use the new specifier](https://discuss.elastic.co/t/use-y-for-year-of-era-prefix-your-date-format-with-8-to-use-the-new-specifier/191078)

<div class="topic-metadata">

**Author:** [@mattsdevop](https://discuss.elastic.co/u/mattsdevop)\
**Replies:** 25\
**Last updated:** [August 13, 2019, 1:46pm UTC](https://discuss.elastic.co/t/use-y-for-year-of-era-prefix-your-date-format-with-8-to-use-the-new-specifier/191078 "2019-08-13T13:46:46Z")

</div>

Need a little help with this one. Tried doing as the deprecation log states, but logstash crashes on restart. The full deprecation log message is: 'y' year should be replaced with 'u'. Use 'y' for year-of-era. Prefix y…

---

## [Service Logstash with exit code 1 when restarting](https://discuss.elastic.co/t/service-logstash-with-exit-code-1-when-restarting/194944)

<div class="topic-metadata">

**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Replies:** 2\
**Last updated:** [August 13, 2019, 1:17pm UTC](https://discuss.elastic.co/t/service-logstash-with-exit-code-1-when-restarting/194944 "2019-08-13T13:17:56Z")

</div>

hi community I need advise from community about logstash I create logstash as a service using NSSM in Windows Server 2016. Then I usually use(start/stop/restart) it via services panel. Now I can not restart anymore. …

---

## [Logstash/ElasticSearch/Kibana 7.3 not working for Netflow](https://discuss.elastic.co/t/logstash-elasticsearch-kibana-7-3-not-working-for-netflow/194829)

<div class="topic-metadata">

**Author:** [@Elena\_Kaidrikov](https://discuss.elastic.co/u/Elena_Kaidrikov)\
**Replies:** 2\
**Last updated:** [August 13, 2019, 1:05pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-kibana-7-3-not-working-for-netflow/194829 "2019-08-13T13:05:31Z")

</div>

Hi, I installed Logstash, ElasticSearch, Kibana, and ElasticFlow my logstash config : output { elasticsearch { hosts =\> \["localhost:9200"\] manage\_template =\> false index =\> "%{\[@metadata\]\[netflow\]}-%{\[@metadata\]\[v…

---

## [Create one doc per timestamp with this json](https://discuss.elastic.co/t/create-one-doc-per-timestamp-with-this-json/195000)

<div class="topic-metadata">

**Author:** [@igor.alvarez.lanit](https://discuss.elastic.co/u/igor.alvarez.lanit)\
**Replies:** 1\
**Last updated:** [August 13, 2019, 1:03pm UTC](https://discuss.elastic.co/t/create-one-doc-per-timestamp-with-this-json/195000 "2019-08-13T13:03:57Z")

</div>

Hi, I have this json and i need to create two docs, one per timestamp. It is possible? \[ { "timestamp": "23:55:48T30-JAN-2019", "filename": "xxxxx.nmon", "host": "xxxxx", "start\_date": "30-JAN-2019", "start\_time": "00:0…

---

## [Configuring Proxy in HTTP OUT Plugin](https://discuss.elastic.co/t/configuring-proxy-in-http-out-plugin/194785)

<div class="topic-metadata">

**Author:** [@rameshpasunoori](https://discuss.elastic.co/u/rameshpasunoori)\
**Replies:** 3\
**Last updated:** [August 13, 2019, 12:59pm UTC](https://discuss.elastic.co/t/configuring-proxy-in-http-out-plugin/194785 "2019-08-13T12:59:34Z")

</div>

Version: 7.3 Operating System: Windows 10 Config File (if you have sensitive info, please remove it): I tried three options to configure proxy for http out plugin. All these are not working, Please provide some input. …

---

## [Output based on metadata field is not working](https://discuss.elastic.co/t/output-based-on-metadata-field-is-not-working/194787)

<div class="topic-metadata">

**Author:** [@rameshpasunoori](https://discuss.elastic.co/u/rameshpasunoori)\
**Replies:** 3\
**Last updated:** [August 13, 2019, 12:50pm UTC](https://discuss.elastic.co/t/output-based-on-metadata-field-is-not-working/194787 "2019-08-13T12:50:47Z")

</div>

Version: 7.3 Operating System: Windows 10 Config File (if you have sensitive info, please remove it): filter {mutate { add\_field =\> { "\[@metadata\]\[ingestInto\]" =\> "${INGEST\_INTO:true}" } } } output { file { …

---

## [Setup Elasticsearch in Docker for production](https://discuss.elastic.co/t/setup-elasticsearch-in-docker-for-production/195026)

<div class="topic-metadata">

**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\
**Replies:** 0\
**Last updated:** [August 13, 2019, 12:44pm UTC](https://discuss.elastic.co/t/setup-elasticsearch-in-docker-for-production/195026 "2019-08-13T12:44:50Z")

</div>

Hello, l use Elasticsearch using docker-compose.yml: version: '2' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:5.6.16 container\_name: elasticsearch restart: unless-stopped …

---

## [Logstash configuration not creating index in elasticseach](https://discuss.elastic.co/t/logstash-configuration-not-creating-index-in-elasticseach/193540)

<div class="topic-metadata">

**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\
**Replies:** 9\
**Last updated:** [August 13, 2019, 12:41pm UTC](https://discuss.elastic.co/t/logstash-configuration-not-creating-index-in-elasticseach/193540 "2019-08-13T12:41:42Z")

</div>

i am trying to create index based on quarter and each document is unique in elasticsearch via logstash. the data is coming from multiple xml files. there seems to be no error in configuration file and pipeline is started…

---

## [CSV Parsing error - illegal quoting in line 1](https://discuss.elastic.co/t/csv-parsing-error-illegal-quoting-in-line-1/194952)

<div class="topic-metadata">

**Author:** [@jy94](https://discuss.elastic.co/u/jy94)\
**Replies:** 4\
**Last updated:** [August 13, 2019, 12:41pm UTC](https://discuss.elastic.co/t/csv-parsing-error-illegal-quoting-in-line-1/194952 "2019-08-13T12:41:02Z")

</div>

Hello, when I trying to parse a csv file, this error message shows up. input { file { path =\> "/finance/BTC-USD.csv" start\_position =\> "beginning" } } The filter part of this file is commented out to indicate th…

---

## [Parsing rsyslog to logstash](https://discuss.elastic.co/t/parsing-rsyslog-to-logstash/194939)

<div class="topic-metadata">

**Author:** [@gracia](https://discuss.elastic.co/u/gracia)\
**Replies:** 1\
**Last updated:** [August 13, 2019, 12:13pm UTC](https://discuss.elastic.co/t/parsing-rsyslog-to-logstash/194939 "2019-08-13T12:13:46Z")

</div>

Is it possible for logstash to ingest rsyslog? How do I set it up? Thank you.

---

## [Testing refresh.interval / explanation](https://discuss.elastic.co/t/testing-refresh-interval-explanation/194970)

<div class="topic-metadata">

**Author:** [@Jean-Marc\_Autexier](https://discuss.elastic.co/u/Jean-Marc_Autexier)\
**Replies:** 4\
**Last updated:** [August 13, 2019, 12:08pm UTC](https://discuss.elastic.co/t/testing-refresh-interval-explanation/194970 "2019-08-13T12:08:53Z")

</div>

Hi, I'm testing the refresh.interval \[2\]of my ES cluster (6 nodes, ES 6.5.0). I'm doing sync upserts into an index with refresh.interval=30s. In a differnt app, I'm executing queries. However I set index.interval, my…

---

## [Jdbc\_static left joins in local\_lookups](https://discuss.elastic.co/t/jdbc-static-left-joins-in-local-lookups/193953)

<div class="topic-metadata">

**Author:** [@ErikWarming](https://discuss.elastic.co/u/ErikWarming)\
**Replies:** 4\
**Last updated:** [August 13, 2019, 11:48am UTC](https://discuss.elastic.co/t/jdbc-static-left-joins-in-local-lookups/193953 "2019-08-13T11:48:59Z")

</div>

I have connected to a database via logstash filter jdbc\_static and input jdbc I have loaded the tables and defined the local\_db\_objects objects. I have created a query in the local\_lookups and when I just join tables t…

---

## [Elasticsearch container resources not recognized](https://discuss.elastic.co/t/elasticsearch-container-resources-not-recognized/195015)

<div class="topic-metadata">

**Author:** [@mohamamd](https://discuss.elastic.co/u/mohamamd)\
**Replies:** 0\
**Last updated:** [August 13, 2019, 11:41am UTC](https://discuss.elastic.co/t/elasticsearch-container-resources-not-recognized/195015 "2019-08-13T11:41:17Z")

</div>

I have deployed the operator according to the following document and it is running fine. Then I created the following elastic search but the pods for elastic search is not getting created. https://www.elastic.co/guide/…

---

## [Kibana Custom Plugin Timezone](https://discuss.elastic.co/t/kibana-custom-plugin-timezone/194838)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 1\
**Last updated:** [August 13, 2019, 11:28am UTC](https://discuss.elastic.co/t/kibana-custom-plugin-timezone/194838 "2019-08-13T11:28:18Z")

</div>

Hello Team, I am using Kibana Custom plugin and in that I am showing results in EUITable. But the time field is showing datetime in UTC but in Kibana time field shows based on the local/browser time. Could you please h…

---

## [Logstash 6.4.2 java.lang.IllegalStateException (LoadError) Unsupported platform: x86\_64-windows](https://discuss.elastic.co/t/logstash-6-4-2-java-lang-illegalstateexception-loaderror-unsupported-platform-x86-64-windows/194991)

<div class="topic-metadata">

**Author:** [@vamsi11](https://discuss.elastic.co/u/vamsi11)\
**Replies:** 1\
**Last updated:** [August 13, 2019, 11:16am UTC](https://discuss.elastic.co/t/logstash-6-4-2-java-lang-illegalstateexception-loaderror-unsupported-platform-x86-64-windows/194991 "2019-08-13T11:16:38Z")

</div>

can anyone please suggest steps to overcome this unsupported platform error

---

## [Snapshot deletion fails with remote\_transport\_exception and number\_format\_exception](https://discuss.elastic.co/t/snapshot-deletion-fails-with-remote-transport-exception-and-number-format-exception/195008)

<div class="topic-metadata">

**Author:** [@shevah](https://discuss.elastic.co/u/shevah)\
**Replies:** 2\
**Last updated:** [August 13, 2019, 11:07am UTC](https://discuss.elastic.co/t/snapshot-deletion-fails-with-remote-transport-exception-and-number-format-exception/195008 "2019-08-13T11:07:40Z")

</div>

Hey, Upon deleting a snapshot (stored in S3) using the DELETE API we get the following error: { "error": { "root\_cause": \[ { "type": "remote\_transport\_exception", "reason": "\[PROD-master-elastic1\]\[x…

---

## [Elastic search won't start with java 11 on ubuntu 18.04](https://discuss.elastic.co/t/elastic-search-wont-start-with-java-11-on-ubuntu-18-04/195003)

<div class="topic-metadata">

**Author:** [@Shiva\_Shahu](https://discuss.elastic.co/u/Shiva_Shahu)\
**Replies:** 1\
**Last updated:** [August 13, 2019, 10:37am UTC](https://discuss.elastic.co/t/elastic-search-wont-start-with-java-11-on-ubuntu-18-04/195003 "2019-08-13T10:37:31Z")

</div>

When I start the elasticsearch service i got below error that are attached - I have ElasticSearch 7.2 and JDK 11. Please help me to solve this issue.

---

## [Integrating ECS with ELK Stack](https://discuss.elastic.co/t/integrating-ecs-with-elk-stack/195007)

<div class="topic-metadata">

**Author:** [@gomathiganesan995](https://discuss.elastic.co/u/gomathiganesan995)\
**Replies:** 0\
**Last updated:** [August 13, 2019, 10:32am UTC](https://discuss.elastic.co/t/integrating-ecs-with-elk-stack/195007 "2019-08-13T10:32:13Z")

</div>

Hi, I need to monitor the AWS logs using ELK stack. What is the configuration required .

---

## [Embedded visualization height](https://discuss.elastic.co/t/embedded-visualization-height/194799)

<div class="topic-metadata">

**Author:** [@adankert](https://discuss.elastic.co/u/adankert)\
**Replies:** 3\
**Last updated:** [August 13, 2019, 10:12am UTC](https://discuss.elastic.co/t/embedded-visualization-height/194799 "2019-08-13T10:12:05Z")

</div>

I can embed Kibana visualizations without problems using the functionality in the GUI. However, for some visualizations the height of the visualization becomes smaller than the iframe height. Others fill the iframe size …

---

## [Problem in Visualizations after using "flattened" datatype](https://discuss.elastic.co/t/problem-in-visualizations-after-using-flattened-datatype/194584)

<div class="topic-metadata">

**Author:** [@JulGor](https://discuss.elastic.co/u/JulGor)\
**Replies:** 2\
**Last updated:** [August 13, 2019, 10:08am UTC](https://discuss.elastic.co/t/problem-in-visualizations-after-using-flattened-datatype/194584 "2019-08-13T10:08:03Z")

</div>

Hi, I just started trying the new "flattened" datatype included in version 7.3 for a field that usually has to many children and I don't usually access them. Here is an example of my documents: order { id: XXX custo…

---

## [Kibana in not running after setting log file destination](https://discuss.elastic.co/t/kibana-in-not-running-after-setting-log-file-destination/194579)

<div class="topic-metadata">

**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\
**Replies:** 2\
**Last updated:** [August 13, 2019, 9:58am UTC](https://discuss.elastic.co/t/kibana-in-not-running-after-setting-log-file-destination/194579 "2019-08-13T09:58:00Z")

</div>

I set the path to log file in kibana.yml file after that kibana is stop working. This is kibana.yml file: # Kibana is served by a back end server. This setting specifies the port to use. server.port: 5601 # Specifies t…

---

## [Problem with JSON date types](https://discuss.elastic.co/t/problem-with-json-date-types/194780)

<div class="topic-metadata">

**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\
**Replies:** 2\
**Last updated:** [August 13, 2019, 9:40am UTC](https://discuss.elastic.co/t/problem-with-json-date-types/194780 "2019-08-13T09:40:35Z")

</div>

I am generating custom logs formatted as single line JSON with Date fields and sending them to ES with Filebeat, however when the index and pattern is created, the date fields are Strings and numbers instead of Dates. d…

---

## [What is there in my JVM Heap](https://discuss.elastic.co/t/what-is-there-in-my-jvm-heap/194998)

<div class="topic-metadata">

**Author:** [@Rakesh4](https://discuss.elastic.co/u/Rakesh4)\
**Replies:** 0\
**Last updated:** [August 13, 2019, 9:38am UTC](https://discuss.elastic.co/t/what-is-there-in-my-jvm-heap/194998 "2019-08-13T09:38:33Z")

</div>

Hi, My analysis says, elastic search holds memory for segments ( cache memory no in heap) , fields mappings ( in Heap) and some shard structure. Can you please suggest is there any way to know what is there in my He…

---

## [CMS Old Gen GC consuming too much memory and never cleaned up](https://discuss.elastic.co/t/cms-old-gen-gc-consuming-too-much-memory-and-never-cleaned-up/194997)

<div class="topic-metadata">

**Author:** [@Rakesh4](https://discuss.elastic.co/u/Rakesh4)\
**Replies:** 0\
**Last updated:** [August 13, 2019, 9:35am UTC](https://discuss.elastic.co/t/cms-old-gen-gc-consuming-too-much-memory-and-never-cleaned-up/194997 "2019-08-13T09:35:10Z")

</div>

Hi, my heap dump says , CMS old Gen GC is consuming too much memory and its never get cleaned up. Is it GC problem or its like Elastic search holds some object in heap for long last ? Any suggestion ?

---

## [Many many processors, how many is too many?](https://discuss.elastic.co/t/many-many-processors-how-many-is-too-many/194729)

<div class="topic-metadata">

**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\
**Replies:** 1\
**Last updated:** [August 13, 2019, 9:15am UTC](https://discuss.elastic.co/t/many-many-processors-how-many-is-too-many/194729 "2019-08-13T09:15:54Z")

</div>

I have a very long winlogbeat processor list that does a heap of security related stuff like; Add failure code descriptions - add\_fields: when.equals.winlog.event\_data.Status: "0xc000006a" fields: …

---

## [Unable to calculate duration by 2 dates fields](https://discuss.elastic.co/t/unable-to-calculate-duration-by-2-dates-fields/194833)

<div class="topic-metadata">

**Author:** [@Rudolf\_Reddy\_Macejka](https://discuss.elastic.co/u/Rudolf_Reddy_Macejka)\
**Replies:** 3\
**Last updated:** [August 13, 2019, 8:21am UTC](https://discuss.elastic.co/t/unable-to-calculate-duration-by-2-dates-fields/194833 "2019-08-13T08:21:48Z")

</div>

Hello, I am trying to crated new field in indices by recalculate duration based on response and request timestamps. I have this document: { "request" : { "time" : "2019-08-04T20:02:15.459Z" }, "respo…

---

## [URL Remote access for Elasticsearch and Kibana](https://discuss.elastic.co/t/url-remote-access-for-elasticsearch-and-kibana/194974)

<div class="topic-metadata">

**Author:** [@Rahul\_Chauhan](https://discuss.elastic.co/u/Rahul_Chauhan)\
**Replies:** 0\
**Last updated:** [August 13, 2019, 7:50am UTC](https://discuss.elastic.co/t/url-remote-access-for-elasticsearch-and-kibana/194974 "2019-08-13T07:50:41Z")

</div>

I want my elasticsearch indexes and Kibana to be available to remote users. I have changed my elasticsearch.yml files to have these- transport.host: localhost transport.tcp.port: 9300 http.port: 9200 network.host: 0.…

---

## [Filebeat passing over logstash](https://discuss.elastic.co/t/filebeat-passing-over-logstash/194882)

<div class="topic-metadata">

**Author:** [@Felipe\_Cabral\_Jeroni](https://discuss.elastic.co/u/Felipe_Cabral_Jeroni)\
**Replies:** 2\
**Last updated:** [August 13, 2019, 7:46am UTC](https://discuss.elastic.co/t/filebeat-passing-over-logstash/194882 "2019-08-13T07:46:29Z")

</div>

Hi guys, I'm trying to figure out why my filebeat is not sending information to logstach. Instead, it's sending directly to elastic. When I go to my kibana there is only the filebeat index patter. When I access the ela…

---

## [Slack Community](https://discuss.elastic.co/t/slack-community/194637)

<div class="topic-metadata">

**Author:** [@rhysjtevans](https://discuss.elastic.co/u/rhysjtevans)\
**Replies:** 3\
**Last updated:** [August 13, 2019, 7:40am UTC](https://discuss.elastic.co/t/slack-community/194637 "2019-08-13T07:40:48Z")

</div>

Hi Elastic Community, Not sure how others feel about demand for an elastic slack community? Happy to start a slack community if there's enough of a call for it. Why? Sorry guys, just not a fan of IRC and sometimes I wa…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1961)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1963)
