# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1978 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1979 --- ## [Logstashのoutput.httpのproxyに動的に設定したい](https://discuss.elastic.co/t/logstash-output-http-proxy/191619)
**Author:** [@devdevdev](https://discuss.elastic.co/u/devdevdev)\ **Replies:** 1\ **Last updated:** [August 6, 2019, 5:40am UTC](https://discuss.elastic.co/t/logstash-output-http-proxy/191619 "2019-08-06T05:40:42Z")
logstashのoutput.httpにあるproxyをconfを変更せずに外部から動的に変更したいと考えています。 現在以下設定で試したのですがエラーが発生して上手くいきません。 良い方法はないでしょうか？ よろしくお願いいたします。 input { stdin{} } filter { environment { add\_metadata\_from\_env =\> {"proxysrv" =\> "Proxy… --- ## [Calculate the difference of two entries](https://discuss.elastic.co/t/calculate-the-difference-of-two-entries/193840)
**Author:** [@bruecp](https://discuss.elastic.co/u/bruecp)\ **Replies:** 1\ **Last updated:** [August 6, 2019, 5:40am UTC](https://discuss.elastic.co/t/calculate-the-difference-of-two-entries/193840 "2019-08-06T05:40:11Z")
Hi, for each user we log a message to Elastic when an application starts and stops. With one application we have currently troubles, as at some users, the application crashes. Therefore, I need a simple way to subtrac… --- ## [Beat または logstash で出力を任意タイミングで行いたい](https://discuss.elastic.co/t/beat-logstash/191475)
**Author:** [@devdevdev](https://discuss.elastic.co/u/devdevdev)\ **Replies:** 1\ **Last updated:** [August 6, 2019, 5:38am UTC](https://discuss.elastic.co/t/beat-logstash/191475 "2019-08-06T05:38:13Z")
output時に一定間隔（間隔をあけて）で行うことは可能でしょうか？ イメージとしては1分出力したら30秒間隔を開けてまた1分出力する といったことを行いたいです。 beatの場合、logstashの場合とそれぞれで実現可能な方法がありましたらお教えいただけますでしょうか？ よろしくお願いいたします。 --- ## [logstashでOutputを複数指定し、順番に実行したい](https://discuss.elastic.co/t/logstash-output/189922)
**Author:** [@harad](https://discuss.elastic.co/u/harad)\ **Replies:** 1\ **Last updated:** [August 6, 2019, 5:35am UTC](https://discuss.elastic.co/t/logstash-output/189922 "2019-08-06T05:35:52Z")
logstashのoutputのcsv-pluginでcsv出力が終わったことを確認して、次のoutputを開始するようなことは可能でしょうか。 具体的には、下記のようなソースで、 input { file { path =\> "/etc/logstash/csv/\*" ～ } } filter { csv{ ～ } } output { csv { … --- ## [Scripted fields and nested](https://discuss.elastic.co/t/scripted-fields-and-nested/193587)
**Author:** [@popopo](https://discuss.elastic.co/u/popopo)\ **Replies:** 4\ **Last updated:** [August 6, 2019, 5:34am UTC](https://discuss.elastic.co/t/scripted-fields-and-nested/193587 "2019-08-06T05:34:35Z")
Hi everyone, I'm having trouble using scripted fields in Kibana... Here's my mapping: { "mappings": { "\_doc": { "properties": { "modules": { "type": "nested", "properties": { … --- ## [Transform句で複数スクリプトを登録する方法](https://discuss.elastic.co/t/transform/193919)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 5:03am UTC](https://discuss.elastic.co/t/transform/193919 "2019-08-06T05:03:17Z")
WatcherのAlertingの設定で、transform句でスクリプトを複数登録すると、エラーになってしまいます。スクリプトを複数複数登録する方法を教えて下さい。 シミュレーション時に以下のエラーが発生します \[parse\_exception\] could not parse watch \[inlined\]. null token Wathcerの設定が以下のようにしています { "trigger": { "schedu… --- ## [Pert CPM Chart in Kibana](https://discuss.elastic.co/t/pert-cpm-chart-in-kibana/193766)
**Author:** [@suhasgupta](https://discuss.elastic.co/u/suhasgupta)\ **Replies:** 2\ **Last updated:** [August 6, 2019, 3:50am UTC](https://discuss.elastic.co/t/pert-cpm-chart-in-kibana/193766 "2019-08-06T03:50:33Z")
Hi All, Can we create a Pert CPM chart in kibana to show sequence of events. Kindly help. Any leads will be appreciated. Thanks & Regards Suhas Gupta --- ## [How to filter a line in field](https://discuss.elastic.co/t/how-to-filter-a-line-in-field/193718)
**Author:** [@Smkumaran](https://discuss.elastic.co/u/Smkumaran)\ **Replies:** 2\ **Last updated:** [August 6, 2019, 3:18am UTC](https://discuss.elastic.co/t/how-to-filter-a-line-in-field/193718 "2019-08-06T03:18:46Z")
Hello, In my case, one of the field has following texts: (connectionIP =RDP) To login \[from 08/08/2019 5:30 AM to 09/08/2019 4:00 PM (GMT+8.00) multiple operations\]. Can anyone help me to filter inbetween pls ? . Th… --- ## [Logstash HTTP\_Poller tls version](https://discuss.elastic.co/t/logstash-http-poller-tls-version/193875)
**Author:** [@tn-mikel](https://discuss.elastic.co/u/tn-mikel)\ **Replies:** 4\ **Last updated:** [August 6, 2019, 3:09am UTC](https://discuss.elastic.co/t/logstash-http-poller-tls-version/193875 "2019-08-06T03:09:44Z")
Hello, I am trying to use the HTTP\_Poller v5.0.1 to contact the CloudFlare API to pull some traffic and security logs. However, when calling the URI, Cloudflare API complains that the version of TLS I am using is only 1… --- ## [Workaround for scroll on nested aggregation](https://discuss.elastic.co/t/workaround-for-scroll-on-nested-aggregation/193906)
**Author:** [@i4never](https://discuss.elastic.co/u/i4never)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 2:25am UTC](https://discuss.elastic.co/t/workaround-for-scroll-on-nested-aggregation/193906 "2019-08-06T02:25:25Z")
I've read this but this feature is merged for 6.7.0. Is there any workaround for scroll nested aggregation for version 6.5? --- ## [Partition for Elasticsearch](https://discuss.elastic.co/t/partition-for-elasticsearch/193904)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 2:00am UTC](https://discuss.elastic.co/t/partition-for-elasticsearch/193904 "2019-08-06T02:00:00Z")
What is the best partition sizes for Elasticsearch? I am using a vm with 500GB storage. --- ## [Blank dashboards after setup](https://discuss.elastic.co/t/blank-dashboards-after-setup/193721)
**Author:** [@Buh-Lock-ay](https://discuss.elastic.co/u/Buh-Lock-ay)\ **Replies:** 6\ **Last updated:** [August 6, 2019, 1:57am UTC](https://discuss.elastic.co/t/blank-dashboards-after-setup/193721 "2019-08-06T01:57:24Z")
Hey there, I'm new to the Elastic stack and trying to build a POC in my lab. I've got the foundation created of being 3 Elastic nodes (1 master and 2 ingest) and a Kibana node. I've installed filebeat, metricbeat, and … --- ## [Invoking saved searchers using elasticsearch python API](https://discuss.elastic.co/t/invoking-saved-searchers-using-elasticsearch-python-api/193903)
**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 1:49am UTC](https://discuss.elastic.co/t/invoking-saved-searchers-using-elasticsearch-python-api/193903 "2019-08-06T01:49:54Z")
Hi, I have saved a few searches in Kibana. Now I want to invoke these searches by just defining time period through elastic pyhon API to get CSV output of data. Is this possible ? how can I achieve it ? Any lead/clue … --- ## [Installing watcher plugin fails on elasticsearch 6.7](https://discuss.elastic.co/t/installing-watcher-plugin-fails-on-elasticsearch-6-7/192386)
**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\ **Replies:** 7\ **Last updated:** [August 6, 2019, 1:44am UTC](https://discuss.elastic.co/t/installing-watcher-plugin-fails-on-elasticsearch-6-7/192386 "2019-08-06T01:44:52Z")
Hi, I have elasticsearch ver 6.7. I want to install watcher plugin. My ELK can reach internet only via proxy. So to install plugin I am doing following as elasticsearch user ES\_JAVA\_OPTS="-Dhttp.proxyHost=my\_proxy\_i… --- ## [\[Multiline\]Data following newline is ignored](https://discuss.elastic.co/t/multiline-data-following-newline-is-ignored/193733)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 4\ **Last updated:** [August 6, 2019, 1:33am UTC](https://discuss.elastic.co/t/multiline-data-following-newline-is-ignored/193733 "2019-08-06T01:33:34Z")
Hi, I have a csv file that contains a double quoted field with a empty line. I am trying to convert this to a single line using the multiline codec so I can filter it later on using the csv filter. csv example number… --- ## [Elasticsearch not starting - failed to notify ClusterStateListener unable to parse step for policy](https://discuss.elastic.co/t/elasticsearch-not-starting-failed-to-notify-clusterstatelistener-unable-to-parse-step-for-policy/193435)
**Author:** [@Daniel6](https://discuss.elastic.co/u/Daniel6)\ **Replies:** 4\ **Last updated:** [August 2, 2019, 7:33am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-failed-to-notify-clusterstatelistener-unable-to-parse-step-for-policy/193435 "2019-08-02T07:33:24Z")
Hi, I run Elasticsearch on liunx (CetnOS7) server in intranet environment. In the beginning I run Elasticsearch as a cluster with 5 nodes. I also install Kibana, Logstash, Beats and it run perfectly. When I try to … --- ## [Multiple codecs? running multiline codec during filter?](https://discuss.elastic.co/t/multiple-codecs-running-multiline-codec-during-filter/193894)
**Author:** [@tedder](https://discuss.elastic.co/u/tedder)\ **Replies:** 4\ **Last updated:** [August 6, 2019, 12:52am UTC](https://discuss.elastic.co/t/multiple-codecs-running-multiline-codec-during-filter/193894 "2019-08-06T00:52:12Z")
I have log entries coming in as a JSON payload. I'm using a json codec, then splitting the entries in a filter. My JSON looks something like this: payload = { "date": "...", "source": "...", "entries": \["line1", "line2"… --- ## [\[Solved\] Elasticsearch 7.2.0, Python and Date Range Query](https://discuss.elastic.co/t/solved-elasticsearch-7-2-0-python-and-date-range-query/193891)
**Author:** [@pritchey](https://discuss.elastic.co/u/pritchey)\ **Replies:** 2\ **Last updated:** [August 6, 2019, 12:50am UTC](https://discuss.elastic.co/t/solved-elasticsearch-7-2-0-python-and-date-range-query/193891 "2019-08-06T00:50:55Z")
I'm really pulling my hair out on something that should be working (I think) but is returning no results. I'm using packetbeats to feed data into my Elasticsearch setup (7.2.0). Data is there - I can see it in Kibana. … --- ## [Update blog attachment code example](https://discuss.elastic.co/t/update-blog-attachment-code-example/193862)
**Author:** [@futureshock2038](https://discuss.elastic.co/u/futureshock2038)\ **Replies:** 1\ **Last updated:** [August 5, 2019, 11:52pm UTC](https://discuss.elastic.co/t/update-blog-attachment-code-example/193862 "2019-08-05T23:52:04Z")
Russ, I am hoping you can help me get the code working from the following blog post: It is written using a previous version of NEST, but the Attachment method seems to have been deprecated and will not work with NEST… --- ## [Connection failed thru ODBC (x\_content\_parse\_exception) to ES 7.2.0](https://discuss.elastic.co/t/connection-failed-thru-odbc-x-content-parse-exception-to-es-7-2-0/191957)
**Author:** [@jakubg](https://discuss.elastic.co/u/jakubg)\ **Replies:** 5\ **Last updated:** [August 5, 2019, 11:42pm UTC](https://discuss.elastic.co/t/connection-failed-thru-odbc-x-content-parse-exception-to-es-7-2-0/191957 "2019-08-05T23:42:02Z")
Hi, I am trying to connect via ODBC driver in version 7.2.0 on Windows 10 to our Elasticsearch cluster. Everything was working fine on Elasticsearch v7.1.1, but after upgrading to 7.2.0 we are receiving just this error m… --- ## [logstash와 mongodb관련한 질문입니다.](https://discuss.elastic.co/t/logstash-mongodb/190203)
**Author:** [@PJHooooo](https://discuss.elastic.co/u/PJHooooo)\ **Replies:** 1\ **Last updated:** [August 5, 2019, 11:37pm UTC](https://discuss.elastic.co/t/logstash-mongodb/190203 "2019-08-05T23:37:54Z")
logstash와 mongodb를 설정해서 logstash input으로 mongodb설정을 하고 엘라스틱서치로 output을 보냈습니다. 로그를 확인하면 데이터는 전송되는거같은데 그걸 kibana로 확인하고 싶어서 보면 index가 따로 없고 엘라스틱 index 매칭에는 생성되어 있고 그걸 확인해보면 mapping에는 mappin {} 만 나오고 없습니다. mapping을 따로 생성해… --- ## [Fielddata is disabled on text fields by default. Set fielddata=true](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true/193898)
**Author:** [@ntsh999](https://discuss.elastic.co/u/ntsh999)\ **Replies:** 0\ **Last updated:** [August 5, 2019, 11:31pm UTC](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true/193898 "2019-08-05T23:31:45Z")
I am running elastic stack v 7.2.0 on kubernetes and I am getting this error in the elasticsearch while accessing the metricbeat dashboard Caused by: java.lang.IllegalArgumentException: Fielddata is disabled on text fi… --- ## [VEGA visual](https://discuss.elastic.co/t/vega-visual/193895)
**Author:** [@aaditya\_alekar](https://discuss.elastic.co/u/aaditya_alekar)\ **Replies:** 1\ **Last updated:** [August 5, 2019, 11:32pm UTC](https://discuss.elastic.co/t/vega-visual/193895 "2019-08-05T23:32:20Z")
{ $schema: https://vega.github.io/schema/vega/v3.0.json config: { kibana: { type: "map" latitude: 37.0902 longitude: 95.7129 zoom: 4 } } data: \[ { "name": "cities", "values": \[ {"city": "Boston", "lon": 42.… --- ## [Elasticsearch node has no shards](https://discuss.elastic.co/t/elasticsearch-node-has-no-shards/193871)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 4\ **Last updated:** [August 5, 2019, 7:58pm UTC](https://discuss.elastic.co/t/elasticsearch-node-has-no-shards/193871 "2019-08-05T19:58:16Z")
I recently restarted the master node and found that no shards have been allocated to it. Master node version is 7.20 and data nodes are 7.21. Is that an issue? How do I go about updating the Master node version (instal… --- ## [Unable to Start ElasticSearch 5.6.16](https://discuss.elastic.co/t/unable-to-start-elasticsearch-5-6-16/192791)
**Author:** [@jboyes](https://discuss.elastic.co/u/jboyes)\ **Replies:** 4\ **Last updated:** [August 5, 2019, 9:06pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-5-6-16/192791 "2019-08-05T21:06:05Z")
I just downgraded from v6.5.4 to v5.6.16 to meet the requirements of a web app I am installing. When I start the service (service elasticsearch start) it says OK, but when I check the status (service elasticsearch start… --- ## [Grok - Parsing a String with Spaces](https://discuss.elastic.co/t/grok-parsing-a-string-with-spaces/193855)
**Author:** [@jakecramer17](https://discuss.elastic.co/u/jakecramer17)\ **Replies:** 5\ **Last updated:** [August 5, 2019, 9:34pm UTC](https://discuss.elastic.co/t/grok-parsing-a-string-with-spaces/193855 "2019-08-05T21:34:21Z")
For a while I've been trying to parse a syslog input in Logstash. I've encountered something like this: 2019-08-05 08:55:15 - jcramer(string with user information) - Successfully updated profile (this is an example mea… --- ## [Logstash pipelines and conditionals in config](https://discuss.elastic.co/t/logstash-pipelines-and-conditionals-in-config/193416)
**Author:** [@oliverlucas1](https://discuss.elastic.co/u/oliverlucas1)\ **Replies:** 6\ **Last updated:** [August 5, 2019, 9:00pm UTC](https://discuss.elastic.co/t/logstash-pipelines-and-conditionals-in-config/193416 "2019-08-05T21:00:29Z")
Hi All, Although the subject sounds interesting (maybe for some) but I don't really have a clue what I'm doing! I've been trying to search for an answer but no luck so I'm seeing if someone can help or point me to somet… --- ## [Maxing out update queue \`remote\_transport\_exception\`](https://discuss.elastic.co/t/maxing-out-update-queue-remote-transport-exception/193874)
**Author:** [@minder1](https://discuss.elastic.co/u/minder1)\ **Replies:** 0\ **Last updated:** [August 5, 2019, 7:46pm UTC](https://discuss.elastic.co/t/maxing-out-update-queue-remote-transport-exception/193874 "2019-08-05T19:46:02Z")
I have set up ES to handle a basic Tinder like dating app data stream for profiles and their swipes. My mapping looks something like this: { name: text, dob: date, ..., swipedOnBy: Array\<(profile IDs)\>, liked: Arra… --- ## [The problem of using iframe when developing a Kibana plugin that loads remote website](https://discuss.elastic.co/t/the-problem-of-using-iframe-when-developing-a-kibana-plugin-that-loads-remote-website/193858)
**Author:** [@sunminxuan](https://discuss.elastic.co/u/sunminxuan)\ **Replies:** 2\ **Last updated:** [August 5, 2019, 6:50pm UTC](https://discuss.elastic.co/t/the-problem-of-using-iframe-when-developing-a-kibana-plugin-that-loads-remote-website/193858 "2019-08-05T18:50:08Z")
I am developing a Kibana plugin and named it test-3. This is the content of kibana/plugins/test\_3/public/components/main/main.js: import React from 'react'; export class Main extends React.Component { constructor(pro… --- ## [Minimum should match is not working](https://discuss.elastic.co/t/minimum-should-match-is-not-working/193528)
**Author:** [@sballa](https://discuss.elastic.co/u/sballa)\ **Replies:** 4\ **Last updated:** [August 5, 2019, 8:11pm UTC](https://discuss.elastic.co/t/minimum-should-match-is-not-working/193528 "2019-08-05T20:11:56Z")
I have a query with an array of 'must' clauses. Two of those clauses have array of 'should' clauses in them as follows just providing pseuodocode here): must: \[ { clause 1 }, { clause 2 }, { bool: should: \[ {clause… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1977) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1979)