# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1992

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1993

---

## [Logstash Kafka Avro integration failing](https://discuss.elastic.co/t/logstash-kafka-avro-integration-failing/192499)

<div class="topic-metadata">

**Author:** [@NSK](https://discuss.elastic.co/u/NSK)\
**Replies:** 5\
**Last updated:** [July 30, 2019, 4:28pm UTC](https://discuss.elastic.co/t/logstash-kafka-avro-integration-failing/192499 "2019-07-30T16:28:03Z")

</div>

Hi - I am trying to consume a topic from Kafka using Avro Deserializer in Logstash and getting the below error. \[ERROR\]\[logstash.inputs.kafka \] Unable to create Kafka consumer from given configuration {:kafka\_error\_m…

---

## [Logstash Date and Kibana Issues](https://discuss.elastic.co/t/logstash-date-and-kibana-issues/192817)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 3\
**Last updated:** [July 30, 2019, 4:14pm UTC](https://discuss.elastic.co/t/logstash-date-and-kibana-issues/192817 "2019-07-30T16:14:23Z")

</div>

Not really sure where this goes but it isn't getting any bites in the Logstash forums so... I have a field that tracks when a ticket was created, sys\_created\_on. The time is in local timezone, -05:00 currently. I have…

---

## [How to parse grok in Logstash](https://discuss.elastic.co/t/how-to-parse-grok-in-logstash/192746)

<div class="topic-metadata">

**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\
**Replies:** 1\
**Last updated:** [July 30, 2019, 4:05pm UTC](https://discuss.elastic.co/t/how-to-parse-grok-in-logstash/192746 "2019-07-30T16:05:40Z")

</div>

Tanium 148 - \[GIS:-Startup-Programs@017472 Tanium 148 - \[WEC:-Subscription-Manager-Setting@017472 Tanium 148 - \[GIS:-Trace-Executed-Processes---Powershell@017472 Tanium 148 - \[GIS:-Scheduled-Task-Information@017472 T…

---

## [Correlate several events into one and visualize it](https://discuss.elastic.co/t/correlate-several-events-into-one-and-visualize-it/192398)

<div class="topic-metadata">

**Author:** [@getallad](https://discuss.elastic.co/u/getallad)\
**Replies:** 3\
**Last updated:** [July 30, 2019, 4:03pm UTC](https://discuss.elastic.co/t/correlate-several-events-into-one-and-visualize-it/192398 "2019-07-30T16:03:41Z")

</div>

Good day. I want to monitor several services, which have instances running on several nodes. I have several cases: for active-standby services I want to display service as 'up' only if I receive 'up' from one node an…

---

## [Logstash Filter to parse a string](https://discuss.elastic.co/t/logstash-filter-to-parse-a-string/192780)

<div class="topic-metadata">

**Author:** [@Gabriel\_Shen](https://discuss.elastic.co/u/Gabriel_Shen)\
**Replies:** 4\
**Last updated:** [July 30, 2019, 4:03pm UTC](https://discuss.elastic.co/t/logstash-filter-to-parse-a-string/192780 "2019-07-30T16:03:05Z")

</div>

I have a log file with each line being a long string (each being very similar). An example line is = "12345555678890,1234567890ABBCCDDEEFFGG123456789GGFFFEEDDCCBBAA" All I want is the numbers in between the two G's. Thos…

---

## [Announcing Elastic Cloud on Kubernetes (ECK) 0.9.0 Alpha 2](https://discuss.elastic.co/t/announcing-elastic-cloud-on-kubernetes-eck-0-9-0-alpha-2/192940)

<div class="topic-metadata">

**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 4:00pm UTC](https://discuss.elastic.co/t/announcing-elastic-cloud-on-kubernetes-eck-0-9-0-alpha-2/192940 "2019-07-30T16:00:58Z")

</div>

Announcing Elastic Cloud on Kubernetes (ECK) 0.9.0 Alpha 2 The latest release of Elastic Cloud on Kubernetes, the best way to run Elasticsearch on Kubernetes, features Elastic APM, more configuration options, and suppor…

---

## [Reducing stalling\_threads on restart of logstash](https://discuss.elastic.co/t/reducing-stalling-threads-on-restart-of-logstash/192769)

<div class="topic-metadata">

**Author:** [@rsaeks](https://discuss.elastic.co/u/rsaeks)\
**Replies:** 1\
**Last updated:** [July 30, 2019, 3:56pm UTC](https://discuss.elastic.co/t/reducing-stalling-threads-on-restart-of-logstash/192769 "2019-07-30T15:56:18Z")

</div>

Good afternoon, I've been using logstash for a while and have been trying to troubleshoot the cause of stalling\_threads\_info being thrown when restarting the service. I've tried switching out a variety of inputs / filte…

---

## [Add a new field to all index in ElasticSearch](https://discuss.elastic.co/t/add-a-new-field-to-all-index-in-elasticsearch/192854)

<div class="topic-metadata">

**Author:** [@iaskdoubt](https://discuss.elastic.co/u/iaskdoubt)\
**Replies:** 3\
**Last updated:** [July 30, 2019, 3:49pm UTC](https://discuss.elastic.co/t/add-a-new-field-to-all-index-in-elasticsearch/192854 "2019-07-30T15:49:16Z")

</div>

Hi, We are using Elastic Search 2.2 . We are in a need to add a new field to all the elastic search indices. Currently we create a new index each day. So need to add the specified field to all the documents in each ind…

---

## [Setting minimum query condition](https://discuss.elastic.co/t/setting-minimum-query-condition/192809)

<div class="topic-metadata">

**Author:** [@hpjules](https://discuss.elastic.co/u/hpjules)\
**Replies:** 1\
**Last updated:** [July 30, 2019, 3:29pm UTC](https://discuss.elastic.co/t/setting-minimum-query-condition/192809 "2019-07-30T15:29:56Z")

</div>

Is it possible to set a minimum number of filters or maybe set a compulsory set of filters when doing a query for a particular set of users? For example, we could require app\_name as required so that the query will only …

---

## [Choosing an elasticsearch version](https://discuss.elastic.co/t/choosing-an-elasticsearch-version/192930)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 1\
**Last updated:** [July 30, 2019, 3:21pm UTC](https://discuss.elastic.co/t/choosing-an-elasticsearch-version/192930 "2019-07-30T15:21:42Z")

</div>

Currently, we are using elastic 5.4. We want to upgrade it to the latest stable version possible. What is the most recommended and stable version currently? (6.8.2,7.1.1, 7.2.0)

---

## [Reverse salesforce integration](https://discuss.elastic.co/t/reverse-salesforce-integration/192924)

<div class="topic-metadata">

**Author:** [@mad823](https://discuss.elastic.co/u/mad823)\
**Replies:** 1\
**Last updated:** [July 30, 2019, 3:11pm UTC](https://discuss.elastic.co/t/reverse-salesforce-integration/192924 "2019-07-30T15:11:53Z")

</div>

Hi! I'm looking for a way to trigger events in salesforce based on certain log events created in elasticsearch. Eg. if there is a "user data change" event logged by elasticsearch, I want to take certain automatic actions…

---

## [I need a datetime picker control for kibana dashboard](https://discuss.elastic.co/t/i-need-a-datetime-picker-control-for-kibana-dashboard/192842)

<div class="topic-metadata">

**Author:** [@Sandeep\_Bind](https://discuss.elastic.co/u/Sandeep_Bind)\
**Replies:** 1\
**Last updated:** [July 30, 2019, 3:10pm UTC](https://discuss.elastic.co/t/i-need-a-datetime-picker-control-for-kibana-dashboard/192842 "2019-07-30T15:10:25Z")

</div>

i need a datetime picker control for kibana dashboard or anyother alternative which can be used to filter all the data in dashboard.

---

## [Logstash jdbc input output in one conf not working](https://discuss.elastic.co/t/logstash-jdbc-input-output-in-one-conf-not-working/192929)

<div class="topic-metadata">

**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 2:57pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-output-in-one-conf-not-working/192929 "2019-07-30T14:57:08Z")

</div>

Output works when input is not jdbc but this config ends in error: \[ERROR\]\[org.logstash.Logstash \] java.lang.NoClassDefFoundError: Could not initialize class com.mysql.jdbc.PreparedStatement conf: 'root@cloudcontro…

---

## [How to do split into array of object](https://discuss.elastic.co/t/how-to-do-split-into-array-of-object/192811)

<div class="topic-metadata">

**Author:** [@mrjayarajj](https://discuss.elastic.co/u/mrjayarajj)\
**Replies:** 2\
**Last updated:** [July 30, 2019, 2:48pm UTC](https://discuss.elastic.co/t/how-to-do-split-into-array-of-object/192811 "2019-07-30T14:48:21Z")

</div>

i am new to logstash my SQL output is like below FIRSTNAME-----LASTNAME----------PERMISSIONS jayaraj------------jaganathan----------BLK\_RTE\_APPRV,PLACE\_GPO,ORD\_AUTH i need to convert into { "firstName" : "Jayaraj", …

---

## [Logstash error : No implicit conversion of Integer into String](https://discuss.elastic.co/t/logstash-error-no-implicit-conversion-of-integer-into-string/192901)

<div class="topic-metadata">

**Author:** [@SalmaOua](https://discuss.elastic.co/u/SalmaOua)\
**Replies:** 3\
**Last updated:** [July 30, 2019, 2:46pm UTC](https://discuss.elastic.co/t/logstash-error-no-implicit-conversion-of-integer-into-string/192901 "2019-07-30T14:46:22Z")

</div>

Hello there ! I started diving into Elastic stack world recently, everything was going well but when I wanted to take data from a new SQL server table via Logstash, I got this error : My config file looks like this …

---

## [ELK and mysql geopoint](https://discuss.elastic.co/t/elk-and-mysql-geopoint/192888)

<div class="topic-metadata">

**Author:** [@Axel\_MORVAN](https://discuss.elastic.co/u/Axel_MORVAN)\
**Replies:** 6\
**Last updated:** [July 30, 2019, 2:42pm UTC](https://discuss.elastic.co/t/elk-and-mysql-geopoint/192888 "2019-07-30T14:42:35Z")

</div>

Hello, I need to create a kibana dashboard with a coordinate map. I import data from a mysql database with latitude and longitute. But I can't create a field type "geo\_point", and after a long search I come to ask you…

---

## [Problems with bulk indexing via JavaScript client](https://discuss.elastic.co/t/problems-with-bulk-indexing-via-javascript-client/192535)

<div class="topic-metadata">

**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\
**Replies:** 5\
**Last updated:** [July 30, 2019, 2:38pm UTC](https://discuss.elastic.co/t/problems-with-bulk-indexing-via-javascript-client/192535 "2019-07-30T14:38:46Z")

</div>

Hi, I'm using a variant of the code for bulk indexing from the documentation for Elastic 6.x, and I'm having a few problems. Here's a typical document: { index: { \_index: 'messages', \_type: '\_doc', \_id: 21653 } }, { …

---

## [ILM with rollover for APM indices on Elastic Cloud](https://discuss.elastic.co/t/ilm-with-rollover-for-apm-indices-on-elastic-cloud/192039)

<div class="topic-metadata">

**Author:** [@p-j](https://discuss.elastic.co/u/p-j)\
**Replies:** 3\
**Last updated:** [July 30, 2019, 2:15pm UTC](https://discuss.elastic.co/t/ilm-with-rollover-for-apm-indices-on-elastic-cloud/192039 "2019-07-30T14:15:06Z")

</div>

Hi everyone; I've been trying to setup ILM with Rollover for APM Indices and I'm still not able to achieve what I want and I don't even know if it is at all possible on Elastic Cloud. The context: Our deployment is us…

---

## [When logstash shutdown, renam file and data can be lost or duplicated](https://discuss.elastic.co/t/when-logstash-shutdown-renam-file-and-data-can-be-lost-or-duplicated/192669)

<div class="topic-metadata">

**Author:** [@Peihui\_He](https://discuss.elastic.co/u/Peihui_He)\
**Replies:** 3\
**Last updated:** [July 30, 2019, 2:06pm UTC](https://discuss.elastic.co/t/when-logstash-shutdown-renam-file-and-data-can-be-lost-or-duplicated/192669 "2019-07-30T14:06:18Z")

</div>

i'm ready to use logstah to transfer a local file to kafka. i assume the logstash is shutdown, i rename the file name (data.log -\> data.log.1) and echo one recode like '111' to data.log.1. when i restart logstash, the …

---

## [Is there some sort of preproduction staging mechanism (reindexing takes quite some time)](https://discuss.elastic.co/t/is-there-some-sort-of-preproduction-staging-mechanism-reindexing-takes-quite-some-time/192915)

<div class="topic-metadata">

**Author:** [@tom2](https://discuss.elastic.co/u/tom2)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 2:05pm UTC](https://discuss.elastic.co/t/is-there-some-sort-of-preproduction-staging-mechanism-reindexing-takes-quite-some-time/192915 "2019-07-30T14:05:24Z")

</div>

Hi there, I'm currently evaluating Elasticsearch for our project. In this project we want to completely reindex our database from time to time, which will probably take a few hours up to a couple of days. This must not…

---

## [How to manage different timezone](https://discuss.elastic.co/t/how-to-manage-different-timezone/192867)

<div class="topic-metadata">

**Author:** [@MARCO\_RAMBALDI](https://discuss.elastic.co/u/MARCO_RAMBALDI)\
**Replies:** 1\
**Last updated:** [July 30, 2019, 1:59pm UTC](https://discuss.elastic.co/t/how-to-manage-different-timezone/192867 "2019-07-30T13:59:34Z")

</div>

Hi, I'm uploading IoT data via logstash to elasticsearch. The data comes from machines that have a datetime with different time zones. I realized that the time is changed by the local timezone (the time is moved forward…

---

## [CASE WHEN THEN](https://discuss.elastic.co/t/case-when-then/192756)

<div class="topic-metadata">

**Author:** [@Farouk6072](https://discuss.elastic.co/u/Farouk6072)\
**Replies:** 4\
**Last updated:** [July 30, 2019, 1:42pm UTC](https://discuss.elastic.co/t/case-when-then/192756 "2019-07-30T13:42:23Z")

</div>

I have put this Query on Canva Elasticsearch SQL query : SELECT CASE sexe WHEN 1 THEN 'Male' WHEN 2 THEN 'Female' END FROM "test\*" WHERE sexe IS NOT NULL I have this error message : Whoops! Expression failed Ex…

---

## [Elasticsearch didn't start](https://discuss.elastic.co/t/elasticsearch-didnt-start/192905)

<div class="topic-metadata">

**Author:** [@Jalis\_Diehl](https://discuss.elastic.co/u/Jalis_Diehl)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 1:28pm UTC](https://discuss.elastic.co/t/elasticsearch-didnt-start/192905 "2019-07-30T13:28:31Z")

</div>

elasticsearch-7.2.0\]$ bin/elasticsearch \[2019-07-30T09:28:07,915\]\[INFO \]\[o.e.x.s.a.s.FileRolesStore\] \[node-1\] parsed \[0\] roles from file \[/home/app/elk/elasticsearch-7.2.0/config/roles.yml\] \[2019-07-30T09:28:19,055\]\[WA…

---

## [Kibana server is not ready yet in v 7.2](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-in-v-7-2/192889)

<div class="topic-metadata">

**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\
**Replies:** 4\
**Last updated:** [July 30, 2019, 1:26pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-in-v-7-2/192889 "2019-07-30T13:26:16Z")

</div>

when I try to access kibana from the following URL I got "Kibana server is not ready yet" http://172.24.36.204:5601/ kibana.log {"type":"log","@timestamp":"2019-07-30T12:10:52Z","tags":\["reporting","browser-driver","e…

---

## [Problem with Infrastructure tab](https://discuss.elastic.co/t/problem-with-infrastructure-tab/192902)

<div class="topic-metadata">

**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 1:16pm UTC](https://discuss.elastic.co/t/problem-with-infrastructure-tab/192902 "2019-07-30T13:16:56Z")

</div>

Hi, I have problem with infrastructure tab. I can see all the hosts grouped by CPU, memory, load etc. but when i am going to view the metrics of a host before one hour for example i am getting an message that "There is …

---

## [Make Plugin Backward Compataible](https://discuss.elastic.co/t/make-plugin-backward-compataible/191003)

<div class="topic-metadata">

**Author:** [@dkelsen](https://discuss.elastic.co/u/dkelsen)\
**Replies:** 2\
**Last updated:** [July 30, 2019, 1:08pm UTC](https://discuss.elastic.co/t/make-plugin-backward-compataible/191003 "2019-07-30T13:08:20Z")

</div>

Hi there, So I created a Kibana plugin for version 7.0 However, it turns out I will be using version 6.5. What's the easiest way to make the plugin compatible with that version? I'm also using version 7 of the Elasti…

---

## [What is the purpose of setting "thread" value in heartbeat plugin?](https://discuss.elastic.co/t/what-is-the-purpose-of-setting-thread-value-in-heartbeat-plugin/192605)

<div class="topic-metadata">

**Author:** [@garima](https://discuss.elastic.co/u/garima)\
**Replies:** 1\
**Last updated:** [July 30, 2019, 12:48pm UTC](https://discuss.elastic.co/t/what-is-the-purpose-of-setting-thread-value-in-heartbeat-plugin/192605 "2019-07-30T12:48:23Z")

</div>

Hi Team, \[Using Logstash version: 6.4.1\] I have some queries regarding heartbeat plugin. I have configured heartbeat plugin with "threads" parameter, as per the specification mentioned on elastic official site, Kindly…

---

## [Storing long fields in ELK](https://discuss.elastic.co/t/storing-long-fields-in-elk/192875)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 2\
**Last updated:** [July 30, 2019, 12:42pm UTC](https://discuss.elastic.co/t/storing-long-fields-in-elk/192875 "2019-07-30T12:42:30Z")

</div>

Hi, I have few very large fields, in order of few MB's. When i query for something on that index i used to get "length of the field crossed max allowed for highlighting". To work around this problem, i started indexing …

---

## [Unable to customize the beats log storage location](https://discuss.elastic.co/t/unable-to-customize-the-beats-log-storage-location/192890)

<div class="topic-metadata">

**Author:** [@subhash.parise](https://discuss.elastic.co/u/subhash.parise)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 12:12pm UTC](https://discuss.elastic.co/t/unable-to-customize-the-beats-log-storage-location/192890 "2019-07-30T12:12:07Z")

</div>

Hello Team, I have installed elasticsearch 7.2 ,filebeat,metricbeat are configured to push the metrics & logs. By default all beat logs are writing to /var/log/messages or /var/log/syslog. i have modified -path.logs =…

---

## [Elasticsearch terms aggregation and querrying](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-and-querrying/192748)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 1\
**Last updated:** [July 29, 2019, 5:18pm UTC](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-and-querrying/192748 "2019-07-29T17:18:15Z")

</div>

Hi I have two types of log messages: Jul 23 09:24:16 rrr mrr-core\[222\]: Aweg3AOMTs\_1563866656871111.mt processMTMessage() #12798 realtime: 5.684 ms Jul 23 09:24:18 rrr mrr-core\[2222\]: Aweg3AOMTs\_1563866656871111.0.dn p…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1991)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1993)
