# Top **URL:** https://discuss.elastic.co/top.md?page=1250&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1251 --- ## [Kibana SAML SSO Issue with spaces - "unauthorized to GetAll spaces"](https://discuss.elastic.co/t/kibana-saml-sso-issue-with-spaces-unauthorized-to-getall-spaces/297199)
**Author:** [@techguy20](https://discuss.elastic.co/u/techguy20)\ **Replies:** 3\ **Last updated:** [February 24, 2022, 6:25am UTC](https://discuss.elastic.co/t/kibana-saml-sso-issue-with-spaces-unauthorized-to-getall-spaces/297199 "2022-02-24T06:25:51Z")
Kibana 7.17 - self managed instance We have SAML SSL working well Azure. We have 3 roles defined kibana. user, superuser, restricted\_spaces\_user, Within the Enterprise App, the values are all assigned to the different… --- ## [Fleet server Installation error](https://discuss.elastic.co/t/fleet-server-installation-error/287443)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 3\ **Last updated:** [October 29, 2021, 7:27pm UTC](https://discuss.elastic.co/t/fleet-server-installation-error/287443 "2021-10-29T19:27:00Z")
How do I trouble shoot this error? localhost:~/elastic-agent-7.15.0-linux-x86\_64 # sudo ./elastic-agent install --url=https://172.16.12.18:8220 \\ \> -f \\ \> --fleet-server-es=https://172.16.12.11:9200 \\ \> --fleet-serve… --- ## [Elasticsearch bulk index request failing with error “if \_id is specified it must not be empty”](https://discuss.elastic.co/t/elasticsearch-bulk-index-request-failing-with-error-if-id-is-specified-it-must-not-be-empty/260778)
**Author:** [@surenraju](https://discuss.elastic.co/u/surenraju)\ **Replies:** 3\ **Last updated:** [January 12, 2021, 6:29am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-index-request-failing-with-error-if-id-is-specified-it-must-not-be-empty/260778 "2021-01-12T06:29:47Z")
I am trying to bulk insert records to index asset\_inventory\_dev index. Elastic search is returning error saying “if \_id is specified it must not be empty”. Following is the request i tried from Kibana dev tools. I can… --- ## [Centralized Pipelines referencing logstash-keystore for passwords](https://discuss.elastic.co/t/centralized-pipelines-referencing-logstash-keystore-for-passwords/196033)
**Author:** [@pattercw](https://discuss.elastic.co/u/pattercw)\ **Replies:** 3\ **Last updated:** [August 23, 2019, 4:07pm UTC](https://discuss.elastic.co/t/centralized-pipelines-referencing-logstash-keystore-for-passwords/196033 "2019-08-23T16:07:36Z")
Hello: So we're implementing SAML on our cluster which has led to the implementation of SSL communications instead of http. That journey is completed and functioning properly including logstash monitoring and manageme… --- ## [How to Insert Uipath Log into elasticsearch](https://discuss.elastic.co/t/how-to-insert-uipath-log-into-elasticsearch/127806)
**Author:** [@mkarthikeyan](https://discuss.elastic.co/u/mkarthikeyan)\ **Replies:** 0\ **Last updated:** [April 12, 2018, 11:37am UTC](https://discuss.elastic.co/t/how-to-insert-uipath-log-into-elasticsearch/127806 "2018-04-12T11:37:56Z")
Have installed 6.2.3 Kibana in the server were Orchestrator is installed. Able to view the ui path logs from the date of elastic search installation but not able to view the logs prior that. How to retrieve/insert those… --- ## [Indices.queries.cache.size come from the heap?](https://discuss.elastic.co/t/indices-queries-cache-size-come-from-the-heap/93027)
**Author:** [@red888](https://discuss.elastic.co/u/red888)\ **Replies:** 3\ **Last updated:** [July 14, 2017, 12:58pm UTC](https://discuss.elastic.co/t/indices-queries-cache-size-come-from-the-heap/93027 "2017-07-14T12:58:15Z")
Does indices.queries.cache.size come out of the JVM heap or free memory not used by the JVM? --- ## [Logstash exec input timeout](https://discuss.elastic.co/t/logstash-exec-input-timeout/57374)
**Author:** [@vinnyoodles](https://discuss.elastic.co/u/vinnyoodles)\ **Replies:** 3\ **Last updated:** [August 10, 2016, 2:16pm UTC](https://discuss.elastic.co/t/logstash-exec-input-timeout/57374 "2016-08-10T14:16:57Z")
I'm getting this error with the exec input for logstash. It's pretty sporadic when the error comes up. For example, it'll timeout once in about every 10 executions. Is there anyway I can kill any commands that are taking… --- ## [How to calculate the score for a string to another string with the specific analyser](https://discuss.elastic.co/t/how-to-calculate-the-score-for-a-string-to-another-string-with-the-specific-analyser/38225)
**Author:** [@Red](https://discuss.elastic.co/u/Red)\ **Replies:** 3\ **Last updated:** [January 2, 2016, 8:07am UTC](https://discuss.elastic.co/t/how-to-calculate-the-score-for-a-string-to-another-string-with-the-specific-analyser/38225 "2016-01-02T08:07:00Z")
we can use analyse API just like curl -XGET 'localhost:9200/\_analyze?tokenizer=keyword&filters=lowercase&text=this+is+a+test' to see what the text will be parsed to. how can we test or get the score for a query string … --- ## [c.a.a.p.i.BasicProfileConfigFileLoader noise](https://discuss.elastic.co/t/c-a-a-p-i-basicprofileconfigfileloader-noise/307630)
**Author:** [@Anarhyst266](https://discuss.elastic.co/u/Anarhyst266)\ **Replies:** 6\ **Last updated:** [June 21, 2022, 5:55pm UTC](https://discuss.elastic.co/t/c-a-a-p-i-basicprofileconfigfileloader-noise/307630 "2022-06-21T17:55:38Z")
When I'm trying to set logger.level to warn in my ES 8.1.3(also checked on 8.2.3) I've got the noise WARN message "message":"Unable to load config file null", "ecs.version": "1.2.0","service.name":"ES\_ECS","event.datase… --- ## [Shards rebalance when adding nodes and using one primary and one replica](https://discuss.elastic.co/t/shards-rebalance-when-adding-nodes-and-using-one-primary-and-one-replica/260954)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 6\ **Last updated:** [January 14, 2021, 3:35pm UTC](https://discuss.elastic.co/t/shards-rebalance-when-adding-nodes-and-using-one-primary-and-one-replica/260954 "2021-01-14T15:35:50Z")
Hello ! I plan to use one primary and one replica by day. If I add more nodes, does the shards will be automatically rebalanced equally on all the nodes even if I have only one primary and one replica ? I'm asking th… --- ## [How to configure Logstash pipeline to not OOM-Kill ElasticSearch](https://discuss.elastic.co/t/how-to-configure-logstash-pipeline-to-not-oom-kill-elasticsearch/340949)
**Author:** [@amattice](https://discuss.elastic.co/u/amattice)\ **Replies:** 7\ **Last updated:** [August 21, 2023, 5:18am UTC](https://discuss.elastic.co/t/how-to-configure-logstash-pipeline-to-not-oom-kill-elasticsearch/340949 "2023-08-21T05:18:59Z")
I'm very new here and to the ELK stack in general. I setup an Ubuntu VM in my Azure resource group and installed the latest Elasticsearch,LogStash, and Kibana. I have basic user authentication setup for kibana, and no SS… --- ## [Unable to access Elastic with error message: "This Elastic installation has strict security requirements enabled that your current browser does not meet."](https://discuss.elastic.co/t/unable-to-access-elastic-with-error-message-this-elastic-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/336606)
**Author:** [@AlexCloudSec](https://discuss.elastic.co/u/AlexCloudSec)\ **Replies:** 1\ **Last updated:** [June 22, 2023, 7:16pm UTC](https://discuss.elastic.co/t/unable-to-access-elastic-with-error-message-this-elastic-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/336606 "2023-06-22T19:16:59Z")
Basically Title. My Browser is upgraded. Receiving this error across Chrome, Edge, and Firefox. How do I resolve this issue? --- ## [Exception during establishing a SSL connection: HttpRequestOnTransportException\[This is not an HTTP port\]](https://discuss.elastic.co/t/exception-during-establishing-a-ssl-connection-httprequestontransportexception-this-is-not-an-http-port/266536)
**Author:** [@sarthaksahu](https://discuss.elastic.co/u/sarthaksahu)\ **Replies:** 1\ **Last updated:** [March 8, 2021, 10:45am UTC](https://discuss.elastic.co/t/exception-during-establishing-a-ssl-connection-httprequestontransportexception-this-is-not-an-http-port/266536 "2021-03-08T10:45:42Z")
We are continuously getting below error. Please let me know the reason of this error, and what is the corrective action will help to get rid of this error. Exception during establishing a SSL connection: HttpRequestOnTr… --- ## [How set IP address type on selected fields](https://discuss.elastic.co/t/how-set-ip-address-type-on-selected-fields/253220)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [October 24, 2020, 8:03pm UTC](https://discuss.elastic.co/t/how-set-ip-address-type-on-selected-fields/253220 "2020-10-24T20:03:14Z")
My data incoming in json and IP is always on few fields, how can I set on this fields IP address type to query this fields via CIDR notation etc? --- ## [More Than one Aggregate in Watcher?](https://discuss.elastic.co/t/more-than-one-aggregate-in-watcher/115903)
**Author:** [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\ **Replies:** 1\ **Last updated:** [January 17, 2018, 3:01pm UTC](https://discuss.elastic.co/t/more-than-one-aggregate-in-watcher/115903 "2018-01-17T15:01:47Z")
How do I sub aggregate in Watcher? I want to alert when a user is added to a security enabled group, for this I query: "term": { "EventID": "EventID:4728 OR EventID:4… --- ## [Sort by price and stock](https://discuss.elastic.co/t/sort-by-price-and-stock/102719)
**Author:** [@juelisjr](https://discuss.elastic.co/u/juelisjr)\ **Replies:** 1\ **Last updated:** [October 7, 2017, 10:35pm UTC](https://discuss.elastic.co/t/sort-by-price-and-stock/102719 "2017-10-07T22:35:13Z")
Hi. I have a catalog of products and i'm need to sort the result by price and stock. The products with stock equal 0 need to be in end of result but need to be ordered by price. Example: NAME -\> PRICE -\> STOCK Produc… --- ## [Data from Mysql JSON column to Elasticsearch](https://discuss.elastic.co/t/data-from-mysql-json-column-to-elasticsearch/91559)
**Author:** [@Eduard\_Kubanda](https://discuss.elastic.co/u/Eduard_Kubanda)\ **Replies:** 1\ **Last updated:** [July 2, 2017, 5:28pm UTC](https://discuss.elastic.co/t/data-from-mysql-json-column-to-elasticsearch/91559 "2017-07-02T17:28:47Z")
Hi there, I checked Logstash reference and some tutorials about Mysql -\> Logstash -\> Elasticsearch data migration scenario, but I still have some questions to answer. (Mysql 5.7, Elasticsearch 5.4) I have table "pre\_buil… --- ## [Routing or Queuing happens first?](https://discuss.elastic.co/t/routing-or-queuing-happens-first/61765)
**Author:** [@vineeth\_mohan\_2](https://discuss.elastic.co/u/vineeth_mohan_2)\ **Replies:** 3\ **Last updated:** [October 3, 2016, 9:25pm UTC](https://discuss.elastic.co/t/routing-or-queuing-happens-first/61765 "2016-10-03T21:25:03Z")
Lets assume , we are sending bulk request to a node and lets assume that node is not where the documents in the bulk is supposed to go , based on shard the document is mapped to. Here what will happen first , queuing … --- ## [Current token (VALUE\_NUMBER\_INT) not of boolean type](https://discuss.elastic.co/t/current-token-value-number-int-not-of-boolean-type/210342)
**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\ **Replies:** 0\ **Last updated:** [December 3, 2019, 1:04pm UTC](https://discuss.elastic.co/t/current-token-value-number-int-not-of-boolean-type/210342 "2019-12-03T13:04:10Z")
Hi All, I have written a sample java client which will connect to a remote Ip and collect the data from ElasticSearch but keep on getting below exception .But below code working as expected with localhost. Could someone… --- ## [Logstash: filter to convert string to array of values](https://discuss.elastic.co/t/logstash-filter-to-convert-string-to-array-of-values/103210)
**Author:** [@geexee](https://discuss.elastic.co/u/geexee)\ **Replies:** 0\ **Last updated:** [October 9, 2017, 10:13am UTC](https://discuss.elastic.co/t/logstash-filter-to-convert-string-to-array-of-values/103210 "2017-10-09T10:13:37Z")
Hello, I have an input log string which contains some easy to regex-matching keywords. I want to index them as an array of values. E.g. "message"="User's locations: locERTY locRUIE locFGHD locTYUS" The below code succ… --- ## [Kibana after logging with user name and password in going back to login screen](https://discuss.elastic.co/t/kibana-after-logging-with-user-name-and-password-in-going-back-to-login-screen/266641)
**Author:** [@sathish.mtech01](https://discuss.elastic.co/u/sathish.mtech01)\ **Replies:** 4\ **Last updated:** [March 12, 2021, 4:55pm UTC](https://discuss.elastic.co/t/kibana-after-logging-with-user-name-and-password-in-going-back-to-login-screen/266641 "2021-03-12T16:55:46Z")
Kibana after logging with user name and password in going back to login screen itself After inspecting in console there are no errors Deployed in Azure Kubernetes environment --- ## [Can I use SQL EXCEPT to compare fields present in two indexes?](https://discuss.elastic.co/t/can-i-use-sql-except-to-compare-fields-present-in-two-indexes/265245)
**Author:** [@CoffeeRecon](https://discuss.elastic.co/u/CoffeeRecon)\ **Replies:** 4\ **Last updated:** [March 1, 2021, 9:31pm UTC](https://discuss.elastic.co/t/can-i-use-sql-except-to-compare-fields-present-in-two-indexes/265245 "2021-03-01T21:31:42Z")
Hello! I have two indexes that I'd like to compare: winlogbeat-\* winlogbeat\_rollup winlogbeat\_rollup is the rollup of winlogbeat-\* and contains its historical data. What I'm looking to do is to compare these two inde… --- ## [Logstash jdbc input keep sql field ordering in place](https://discuss.elastic.co/t/logstash-jdbc-input-keep-sql-field-ordering-in-place/123780)
**Author:** [@ramzey1981](https://discuss.elastic.co/u/ramzey1981)\ **Replies:** 4\ **Last updated:** [March 13, 2018, 9:20pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-keep-sql-field-ordering-in-place/123780 "2018-03-13T21:20:55Z")
hey team, I have the following logstash config file, jdbc { jdbc\_driver\_library =\> "C:\\Program Files\\sqljdbc\_6.2\\enu\\mssql-jdbc-6.2.2.jre8.jar" jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServerDriver" jdb… --- ## [Metricbeat data not showing on kibana](https://discuss.elastic.co/t/metricbeat-data-not-showing-on-kibana/248907)
**Author:** [@Roberto\_Chacon](https://discuss.elastic.co/u/Roberto_Chacon)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 5:49pm UTC](https://discuss.elastic.co/t/metricbeat-data-not-showing-on-kibana/248907 "2020-09-17T17:49:03Z")
Trying to setup metricbeat to monitor the ES cluster. It was running fine on an AWS instance that was removed and now going to be self monitored on the sale ES cluster. So far got all the metricbeat configuration update… --- ## [Canvas data table](https://discuss.elastic.co/t/canvas-data-table/203482)
**Author:** [@Masdi](https://discuss.elastic.co/u/Masdi)\ **Replies:** 2\ **Last updated:** [October 17, 2019, 8:33pm UTC](https://discuss.elastic.co/t/canvas-data-table/203482 "2019-10-17T20:33:05Z")
Hi, I'm trying to create a canvas like this in Kibana: My index is from mongo and among the fields, those are the one I would like to use in my query: "created\_at" : "2019-10-09 16:30:15.543838", "brand":"NIKE", So… --- ## [I can't get a directory name added as a field in Logstash and Kibana](https://discuss.elastic.co/t/i-cant-get-a-directory-name-added-as-a-field-in-logstash-and-kibana/74518)
**Author:** [@hoagieben](https://discuss.elastic.co/u/hoagieben)\ **Replies:** 2\ **Last updated:** [February 14, 2017, 10:11am UTC](https://discuss.elastic.co/t/i-cant-get-a-directory-name-added-as-a-field-in-logstash-and-kibana/74518 "2017-02-14T10:11:21Z")
Hi again. I have a structure within Logstash running in Docker of /opt/logs/CUSTOMERNAME/SERVERNAME/SystemOut\*.log I want to have SERVERNAME and CUSTOMERNAME as fields in Kibana but it doesn't work for me. Below i… --- ## [Problem getting logstash started](https://discuss.elastic.co/t/problem-getting-logstash-started/74854)
**Author:** [@agrawalsaurabh](https://discuss.elastic.co/u/agrawalsaurabh)\ **Replies:** 2\ **Last updated:** [February 13, 2017, 11:40am UTC](https://discuss.elastic.co/t/problem-getting-logstash-started/74854 "2017-02-13T11:40:16Z")
Hi, I am a newbie and trying to use the stack of Elastic Search, Logstash and Kibana working together to parse the apache log file and visualize it. I started with this URL - https://www.elastic.co/downloads/logstash w… --- ## [No output defined error in filebeat](https://discuss.elastic.co/t/no-output-defined-error-in-filebeat/63417)
**Author:** [@rai](https://discuss.elastic.co/u/rai)\ **Replies:** 2\ **Last updated:** [October 19, 2016, 4:42pm UTC](https://discuss.elastic.co/t/no-output-defined-error-in-filebeat/63417 "2016-10-19T16:42:39Z")
I have downloaded filebeat 5.0.0.rc and trying to configure kafka as output. Even though I have configured kafka as output but keep getting . I have tried but kee Error Initialising publisher: No outputs are defined. P… --- ## [Index Lifecycle Error on first rollover](https://discuss.elastic.co/t/index-lifecycle-error-on-first-rollover/189837)
**Author:** [@bigbobolue](https://discuss.elastic.co/u/bigbobolue)\ **Replies:** 1\ **Last updated:** [July 11, 2019, 8:45pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-on-first-rollover/189837 "2019-07-11T20:45:53Z")
Index lifecycle error illegal\_state\_exception: no rollover info found for \[filebeat\] with alias \[filebeat\_logs\], the index has not yet rolled over with that alias --- ## [Monitoring Jenkins with Beats](https://discuss.elastic.co/t/monitoring-jenkins-with-beats/147917)
**Author:** [@koko191](https://discuss.elastic.co/u/koko191)\ **Replies:** 1\ **Last updated:** [September 14, 2018, 9:21am UTC](https://discuss.elastic.co/t/monitoring-jenkins-with-beats/147917 "2018-09-14T09:21:34Z")
I am trying to monitor the status of Jenkins slaves using one or some of the Beats. One of my ideas was to use Metricbeat to monitor for service running with name "jenkins" but it quickly fails when a slave runs Jenkins… --- ## [Logstash can't read some files](https://discuss.elastic.co/t/logstash-cant-read-some-files/143847)
**Author:** [@alicia1](https://discuss.elastic.co/u/alicia1)\ **Replies:** 1\ **Last updated:** [August 10, 2018, 12:49pm UTC](https://discuss.elastic.co/t/logstash-cant-read-some-files/143847 "2018-08-10T12:49:11Z")
Hello, We have 3 files log csv in a repository (windows), but 2 of them can't be read by logstash (6.2.4), the msg logstash is like this: \[WARN \]\[filewatch.tailmode.processor\] \>\>\> Rotation In Progress - inode change d… --- ## [ElasticSearch Nested Aggregation with Cardinality on another field](https://discuss.elastic.co/t/elasticsearch-nested-aggregation-with-cardinality-on-another-field/119398)
**Author:** [@Tu5har](https://discuss.elastic.co/u/Tu5har)\ **Replies:** 1\ **Last updated:** [February 13, 2018, 11:21am UTC](https://discuss.elastic.co/t/elasticsearch-nested-aggregation-with-cardinality-on-another-field/119398 "2018-02-13T11:21:21Z")
Hi All, I need some help on below problem. Let me know how can I form my query to get expected output. Details posted in the stack overflow page. Thanks --- ## [Fasted way to receive large results](https://discuss.elastic.co/t/fasted-way-to-receive-large-results/25293)
**Author:** [@lasseschou](https://discuss.elastic.co/u/lasseschou)\ **Replies:** 1\ **Last updated:** [July 10, 2015, 8:11am UTC](https://discuss.elastic.co/t/fasted-way-to-receive-large-results/25293 "2015-07-10T08:11:46Z")
I'm querying a large index in ElasticSearch and retrieve a large list of documents like the one below: { "took": 5764, "timed\_out": false, "\_shards": { "total": 30, "successful": 30, "failed": 0 … --- ## [Date Math Support in index names while defining SLM policy](https://discuss.elastic.co/t/date-math-support-in-index-names-while-defining-slm-policy/263613)
**Author:** [@ParashB](https://discuss.elastic.co/u/ParashB)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 12:04pm UTC](https://discuss.elastic.co/t/date-math-support-in-index-names-while-defining-slm-policy/263613 "2021-02-25T12:04:14Z")
Hi, I want to backup only last months index using SLM policy and trying to use date Math while configuring the indices in SLM policy. Unfortunately, it doesn't work and can't find the index. However the same date math p… --- ## [How to handle comma delimited message with comma's existing within quotation marks](https://discuss.elastic.co/t/how-to-handle-comma-delimited-message-with-commas-existing-within-quotation-marks/85345)
**Author:** [@andynz2017](https://discuss.elastic.co/u/andynz2017)\ **Replies:** 0\ **Last updated:** [May 11, 2017, 8:20am UTC](https://discuss.elastic.co/t/how-to-handle-comma-delimited-message-with-commas-existing-within-quotation-marks/85345 "2017-05-11T08:20:00Z")
Hi All, Working on yet another curly parsing issue which I'm seeking community support as I have not readily been able to derive a graceful solution. Issue: Ingested message is in the format "string A,string B,string… --- ## [Space separated fields](https://discuss.elastic.co/t/space-separated-fields/61276)
**Author:** [@joshuaclark](https://discuss.elastic.co/u/joshuaclark)\ **Replies:** 3\ **Last updated:** [September 22, 2016, 7:31pm UTC](https://discuss.elastic.co/t/space-separated-fields/61276 "2016-09-22T19:31:27Z")
Hi I'm having a problem with shipping a log to elasticsearch. I have the config setup to use (?.{64}) when the field has /carbon/admin/login.jsp it's separating every slash. How can I get it to keep the slashes in the… --- ## [Alternative to similarity (float fuzzyness)](https://discuss.elastic.co/t/alternative-to-similarity-float-fuzzyness/49706)
**Author:** [@AndreKR](https://discuss.elastic.co/u/AndreKR)\ **Replies:** 3\ **Last updated:** [May 11, 2016, 2:53am UTC](https://discuss.elastic.co/t/alternative-to-similarity-float-fuzzyness/49706 "2016-05-11T02:53:04Z")
Our fuzzy queries stopped working after upgrading Elasticsearch to 2.x. It seems that float value for fuzzyness are not supported in Elasticsearch 2.x anymore? We had tuned our value to 0.82, which worked extremely wel… --- ## [Logstash Elasticsearch output - one field only](https://discuss.elastic.co/t/logstash-elasticsearch-output-one-field-only/316395)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 5\ **Last updated:** [October 13, 2022, 7:49am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-one-field-only/316395 "2022-10-13T07:49:11Z")
Hi, Is it possible to send only the "message" field to elasticsearch from logstash? I have tried codec =\> line { format =\> "%{message}" } but the full beat output is still sent. Thanks. --- ## [CSV export: Reporting features are not yet ready](https://discuss.elastic.co/t/csv-export-reporting-features-are-not-yet-ready/285163)
**Author:** [@drnw](https://discuss.elastic.co/u/drnw)\ **Replies:** 5\ **Last updated:** [September 28, 2021, 4:30am UTC](https://discuss.elastic.co/t/csv-export-reporting-features-are-not-yet-ready/285163 "2021-09-28T04:30:38Z")
Please advise regards my failure to get CSV export working with an on-premise basic installation. Mac OSX install of Kibana from Homebrew (elastic/tap/kibana-full: stable 7.15.0) is throwing the following error: "tags"… --- ## [Adding multi tenant encryption at rest](https://discuss.elastic.co/t/adding-multi-tenant-encryption-at-rest/264423)
**Author:** [@oriagranat9](https://discuss.elastic.co/u/oriagranat9)\ **Replies:** 5\ **Last updated:** [February 17, 2021, 2:28pm UTC](https://discuss.elastic.co/t/adding-multi-tenant-encryption-at-rest/264423 "2021-02-17T14:28:53Z")
hey everyone, at my job we want to add encryption at rest with multi tenant keys, like this plugin called elasticrypt did a long time ago. since this plugin is deprecated i wanted to know if it is still possible to do s… --- ## [Inner\_hits with Kibana visualizations](https://discuss.elastic.co/t/inner-hits-with-kibana-visualizations/108356)
**Author:** [@mPanasiewicz](https://discuss.elastic.co/u/mPanasiewicz)\ **Replies:** 5\ **Last updated:** [November 22, 2017, 9:50am UTC](https://discuss.elastic.co/t/inner-hits-with-kibana-visualizations/108356 "2017-11-22T09:50:22Z")
Is there any possibility to use inner\_hits in Kibana visualizations?? Is there any other solution to make join to use data from two documents in one axis? Example: { "payment": "1000", "user\_id": "10" } { "id": "10" "… --- ## [Link embed visualization to querybar and filterbar](https://discuss.elastic.co/t/link-embed-visualization-to-querybar-and-filterbar/106229)
**Author:** [@havidarou](https://discuss.elastic.co/u/havidarou)\ **Replies:** 5\ **Last updated:** [November 3, 2017, 11:27am UTC](https://discuss.elastic.co/t/link-embed-visualization-to-querybar-and-filterbar/106229 "2017-11-03T11:27:58Z")
Hi, I've been reading the documentation here: https://www.elastic.co/guide/en/kibana/master/development-embedding-visualizations.html And at some point it says "time picker must be present (enabled) on the page" and a … --- ## [List searchtemplates](https://discuss.elastic.co/t/list-searchtemplates/31522)
**Author:** [@trycoon](https://discuss.elastic.co/u/trycoon)\ **Replies:** 5\ **Last updated:** [October 7, 2015, 9:07am UTC](https://discuss.elastic.co/t/list-searchtemplates/31522 "2015-10-07T09:07:52Z")
There are ways to list installed indextemplates, but no one for listing searchtemplates what I know of. https://www.elastic.co/guide/en/elasticsearch/reference/1.7/search-template.html I can upload new templates using … --- ## [Access field that was excluded from \_source](https://discuss.elastic.co/t/access-field-that-was-excluded-from-source/363329)
**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\ **Replies:** 6\ **Last updated:** [July 18, 2024, 2:17pm UTC](https://discuss.elastic.co/t/access-field-that-was-excluded-from-source/363329 "2024-07-18T14:17:50Z")
Hi, As mentioned in the title, I have an index with a few fields that are not included in the \_source field. I was wondering, since we can still search on these fields, is there a way to access their values? One solut… --- ## [How to collect information using remote script and visualise them in. dedicated Kibana visualization?](https://discuss.elastic.co/t/how-to-collect-information-using-remote-script-and-visualise-them-in-dedicated-kibana-visualization/258564)
**Author:** [@Mauro\_Tridici](https://discuss.elastic.co/u/Mauro_Tridici)\ **Replies:** 6\ **Last updated:** [December 15, 2020, 6:15pm UTC](https://discuss.elastic.co/t/how-to-collect-information-using-remote-script-and-visualise-them-in-dedicated-kibana-visualization/258564 "2020-12-15T18:15:40Z")
Dear Users, I started using ELK stack from a few days, so I'm not an expert. After a very basic ELK stack deploy, everything seems to be running as expected. Now, I would like to: execute a script on a remote server,… --- ## [Binary file indexing](https://discuss.elastic.co/t/binary-file-indexing/139498)
**Author:** [@sankar\_elastic](https://discuss.elastic.co/u/sankar_elastic)\ **Replies:** 6\ **Last updated:** [July 12, 2018, 1:24pm UTC](https://discuss.elastic.co/t/binary-file-indexing/139498 "2018-07-12T13:24:49Z")
Can we indexing the binary file through elastic which is not having any extension ? --- ## [ELK data not getting saved](https://discuss.elastic.co/t/elk-data-not-getting-saved/131854)
**Author:** [@Rahul\_Kumar2](https://discuss.elastic.co/u/Rahul_Kumar2)\ **Replies:** 6\ **Last updated:** [May 18, 2018, 5:01am UTC](https://discuss.elastic.co/t/elk-data-not-getting-saved/131854 "2018-05-18T05:01:47Z")
Hi awesome people We are using ELK with Amazon SQS in an in-house server. Elasticsearch log \[2018-05-15T11:39:03,411\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[node-1\] \[gc\]\[old\]\[982956\]\[151886\] duration \[8.8s\], collection… --- ## [Custom index age logic for ILM policies](https://discuss.elastic.co/t/custom-index-age-logic-for-ilm-policies/236371)
**Author:** [@Marcin\_Kawa](https://discuss.elastic.co/u/Marcin_Kawa)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 3:07pm UTC](https://discuss.elastic.co/t/custom-index-age-logic-for-ilm-policies/236371 "2020-06-09T15:07:25Z")
Hello, The ILM is great for managing the indexes and keeping the database clean, though upgrading to a new version of Elasticsearch requires re-indexing of almost all of the existing data, e.g. bumping from ELK v6 to EL… --- ## [How to cause queries to fail against an index when unmapped fields are referenced?](https://discuss.elastic.co/t/how-to-cause-queries-to-fail-against-an-index-when-unmapped-fields-are-referenced/234820)
**Author:** [@jheath](https://discuss.elastic.co/u/jheath)\ **Replies:** 0\ **Last updated:** [May 28, 2020, 8:53pm UTC](https://discuss.elastic.co/t/how-to-cause-queries-to-fail-against-an-index-when-unmapped-fields-are-referenced/234820 "2020-05-28T20:53:56Z")
Hi folks, Is there a method by which we can cause queries to fail against an index when unmapped fields are referenced? I have noticed that, in the past, there was an ignore\_unmapped option that worked, however suppo… --- ## [Ruby exception with no message](https://discuss.elastic.co/t/ruby-exception-with-no-message/198887)
**Author:** [@yujin](https://discuss.elastic.co/u/yujin)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 11:13am UTC](https://discuss.elastic.co/t/ruby-exception-with-no-message/198887 "2019-09-10T11:13:23Z")
I was trying to use ruby filter to calculate time difference: ruby{ code =\> "require 'date'; event.set('landing\_delay',(( DateTime.parse(event.get('landing\_t')) - DateTime.parse(event.get('t')) … [Previous page](https://discuss.elastic.co/top.md?page=1249&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1251&per_page=50&period=all)