# Top **URL:** https://discuss.elastic.co/top.md?page=1361&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1362 --- ## [Kibana down during Nessus scanning](https://discuss.elastic.co/t/kibana-down-during-nessus-scanning/175823)
**Author:** [@sstest](https://discuss.elastic.co/u/sstest)\ **Replies:** 5\ **Last updated:** [April 11, 2019, 10:38am UTC](https://discuss.elastic.co/t/kibana-down-during-nessus-scanning/175823 "2019-04-11T10:38:33Z")
We recently implemented Nessus vulnerability scanning on top of Kibana ports \[80, 8080\] and found Kibana going down during scanning automatically. Looks like Nessus performing Soap API checks on 8080 port and if Kibana … --- ## [Sorting behaviour of a Date Field in Kibana Controls Option List](https://discuss.elastic.co/t/sorting-behaviour-of-a-date-field-in-kibana-controls-option-list/163758)
**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\ **Replies:** 5\ **Last updated:** [January 11, 2019, 5:52pm UTC](https://discuss.elastic.co/t/sorting-behaviour-of-a-date-field-in-kibana-controls-option-list/163758 "2019-01-11T17:52:22Z")
Hi there, Im completely new to Kibana and Elastic Stack (6.5.4) , all is running well as per your Install instructions and my first steps in Kibana looks quite promising. First thing I recognice is the sorting behavio… --- ## [Auditd module + file access = some paths are hex-encoded](https://discuss.elastic.co/t/auditd-module-file-access-some-paths-are-hex-encoded/125090)
**Author:** [@ceekay](https://discuss.elastic.co/u/ceekay)\ **Replies:** 5\ **Last updated:** [March 23, 2018, 9:09pm UTC](https://discuss.elastic.co/t/auditd-module-file-access-some-paths-are-hex-encoded/125090 "2018-03-23T21:09:38Z")
We're looking to track all file access on a shared volume, and are running the following config: module: auditd audit\_rules: | -w /share/path\_a -p rwa -w /share/path\_b -p rwa -w /share/path\_c -p rwa This seems to … --- ## [Does change of parent require a 'refresh' to be accurate?](https://discuss.elastic.co/t/does-change-of-parent-require-a-refresh-to-be-accurate/95565)
**Author:** [@chrisburrell](https://discuss.elastic.co/u/chrisburrell)\ **Replies:** 5\ **Last updated:** [August 3, 2017, 2:37pm UTC](https://discuss.elastic.co/t/does-change-of-parent-require-a-refresh-to-be-accurate/95565 "2017-08-03T14:37:38Z")
Hi My understanding from the doc is that when a child moves parent we can’t simply reindex because the document may be on a different shard. Instead, we need to delete the document and re-index it. Do we therefore need … --- ## [Instrument any .NET Core application](https://discuss.elastic.co/t/instrument-any-net-core-application/207680)
**Author:** [@cpiment](https://discuss.elastic.co/u/cpiment)\ **Replies:** 8\ **Last updated:** [November 13, 2019, 12:55pm UTC](https://discuss.elastic.co/t/instrument-any-net-core-application/207680 "2019-11-13T12:55:45Z")
I am having lots of trouble using a .NET Core application in my environment, and it would be great if I could "see" what it is doing using APM. That application is closed-source and I cannot modify it. I have usually wo… --- ## [Elasticsearch ECK on AWS EKS hosted on Fargate](https://discuss.elastic.co/t/elasticsearch-eck-on-aws-eks-hosted-on-fargate/332477)
**Author:** [@B\_Blank](https://discuss.elastic.co/u/B_Blank)\ **Replies:** 2\ **Last updated:** [May 22, 2023, 10:11pm UTC](https://discuss.elastic.co/t/elasticsearch-eck-on-aws-eks-hosted-on-fargate/332477 "2023-05-22T22:11:30Z")
I am curious to know if ECK is supported (even feasible) on AWS ECK hosted on Fargate. The ECK operator won't install when I try installing it on a Fargate hosted K8S cluster... but I can get it to install when the EKS … --- ## [Timestamp](https://discuss.elastic.co/t/timestamp/271206)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [April 26, 2021, 5:13pm UTC](https://discuss.elastic.co/t/timestamp/271206 "2021-04-26T17:13:21Z")
Hello everyone, I am trying to use timestamp from my log file instead of the timestamp when my logs were processed. in order to do that, I am using dissect processor and Timestamp processor together as below. processor… --- ## [Kibana Visualization of Pipeline Aggregation](https://discuss.elastic.co/t/kibana-visualization-of-pipeline-aggregation/241690)
**Author:** [@krenaut](https://discuss.elastic.co/u/krenaut)\ **Replies:** 2\ **Last updated:** [July 17, 2020, 6:13pm UTC](https://discuss.elastic.co/t/kibana-visualization-of-pipeline-aggregation/241690 "2020-07-17T18:13:50Z")
After much pain I was able to create the pipeline aggregation below in the console. But, I can't figure out how I am supposed to get it into a visualization. I just want to create a guage to display the "availabile\_per… --- ## [\[Kibana 7.0.1\] Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-7-0-1-kibana-server-is-not-ready-yet/181271)
**Author:** [@thebeaoliveira](https://discuss.elastic.co/u/thebeaoliveira)\ **Replies:** 2\ **Last updated:** [May 16, 2019, 5:35pm UTC](https://discuss.elastic.co/t/kibana-7-0-1-kibana-server-is-not-ready-yet/181271 "2019-05-16T17:35:11Z")
I'm trying to use elasticsearch and kibana (7.0.1) in separate instances in aws, but when trying to upload kibana I'm getting the message: Kibana server is not ready yet --- ## [Remove \_id field in index](https://discuss.elastic.co/t/remove-id-field-in-index/165968)
**Author:** [@vinu89](https://discuss.elastic.co/u/vinu89)\ **Replies:** 2\ **Last updated:** [January 28, 2019, 9:33am UTC](https://discuss.elastic.co/t/remove-id-field-in-index/165968 "2019-01-28T09:33:16Z")
Hi , Is there any way to remove the \_id field in elastic since \_id field requires to load a lot of data in memory . I have used mutate field but it is not removing the \_id field --- ## [Slice logs based on start and end of an user session](https://discuss.elastic.co/t/slice-logs-based-on-start-and-end-of-an-user-session/65856)
**Author:** [@satheeshravir](https://discuss.elastic.co/u/satheeshravir)\ **Replies:** 2\ **Last updated:** [November 21, 2016, 10:34pm UTC](https://discuss.elastic.co/t/slice-logs-based-on-start-and-end-of-an-user-session/65856 "2016-11-21T22:34:50Z")
Hi, I have multiple sets of user session start and end events. I would like to slice the logs within session start and end time frame. Then group them as events occurred within user session. I don't have any ID to unique… --- ## ["Search After" feature of ElasticSearch using NEST API](https://discuss.elastic.co/t/search-after-feature-of-elasticsearch-using-nest-api/66182)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 2\ **Last updated:** [November 16, 2016, 3:06am UTC](https://discuss.elastic.co/t/search-after-feature-of-elasticsearch-using-nest-api/66182 "2016-11-16T03:06:56Z")
Hi, I am on NEST.5.0.0-rc1 and Elasticsearch.Net.5.0.0-rc1 I am trying to use the "Search After" feature of ElasticSearch using NEST API. But it looks that it is not supported yet. The NEST provides Search, SearchAsy… --- ## [Logstash json to kv output to syslog for splunkindex](https://discuss.elastic.co/t/logstash-json-to-kv-output-to-syslog-for-splunkindex/63452)
**Author:** [@gmmurugan](https://discuss.elastic.co/u/gmmurugan)\ **Replies:** 2\ **Last updated:** [October 20, 2016, 3:38am UTC](https://discuss.elastic.co/t/logstash-json-to-kv-output-to-syslog-for-splunkindex/63452 "2016-10-20T03:38:42Z")
I would like to get data from database and add few fields with builtin json to kv conversion and pusing it to syslog/tcp of splunk indexer. any sample config you can guide? 1. json to kv - any example? 2. add few fiel… --- ## [Token filter doesn't work on wildcard-search](https://discuss.elastic.co/t/token-filter-doesnt-work-on-wildcard-search/264588)
**Author:** [@TallGuru](https://discuss.elastic.co/u/TallGuru)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 2:31pm UTC](https://discuss.elastic.co/t/token-filter-doesnt-work-on-wildcard-search/264588 "2021-02-17T14:31:07Z")
Hi I'm trying to implement a filter to find compounded words and needs to combine it with wildcard-search but it doesn't work. Example case: There are documents with names "Coca-Cola", "Cocacola" and "Coca Cola". I wa… --- ## [Pulling the data from servicenow](https://discuss.elastic.co/t/pulling-the-data-from-servicenow/219624)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 3\ **Last updated:** [February 17, 2020, 2:11pm UTC](https://discuss.elastic.co/t/pulling-the-data-from-servicenow/219624 "2020-02-17T14:11:56Z")
Is there a way to pull the data from servicenow to be indexed into elasticsearch? --- ## [HighLevelRestClient appears inconsistent between hosted elasticsearch and testcontainers-java-module-elasticsearch](https://discuss.elastic.co/t/highlevelrestclient-appears-inconsistent-between-hosted-elasticsearch-and-testcontainers-java-module-elasticsearch/121348)
**Author:** [@tbuckner](https://discuss.elastic.co/u/tbuckner)\ **Replies:** 3\ **Last updated:** [February 24, 2018, 11:35pm UTC](https://discuss.elastic.co/t/highlevelrestclient-appears-inconsistent-between-hosted-elasticsearch-and-testcontainers-java-module-elasticsearch/121348 "2018-02-24T23:35:55Z")
I have a weird issue that might be a problem with testcontainers-java-module-elasticsearch or possibly with the HighLevelRestClient. I wrote a test that connected directly to our hosted cloud.elastic.co cluster and crea… --- ## [\[main\]\>worker0 ERROR Unable to copy file /var/log/logstash/logstash-plain-2018-01-23.log to /var/log/logstash/logstash-plain-2018-01-23.log](https://discuss.elastic.co/t/main-worker0-error-unable-to-copy-file-var-log-logstash-logstash-plain-2018-01-23-log-to-var-log-logstash-logstash-plain-2018-01-23-log/116714)
**Author:** [@pedrorochagoncalves](https://discuss.elastic.co/u/pedrorochagoncalves)\ **Replies:** 3\ **Last updated:** [January 29, 2018, 11:41am UTC](https://discuss.elastic.co/t/main-worker0-error-unable-to-copy-file-var-log-logstash-logstash-plain-2018-01-23-log-to-var-log-logstash-logstash-plain-2018-01-23-log/116714 "2018-01-29T11:41:00Z")
Hi, This is my first post here, so please excuse any mistakes on my end. :slight\_smile: We have a couple of servers running logstash 5.6.3-1 and we've recently found this article here: We configured our log4j2.proper… --- ## [Error while indexing list to Elastic search using pyspark](https://discuss.elastic.co/t/error-while-indexing-list-to-elastic-search-using-pyspark/115715)
**Author:** [@Ravi\_Ranjan](https://discuss.elastic.co/u/Ravi_Ranjan)\ **Replies:** 3\ **Last updated:** [January 29, 2018, 5:39am UTC](https://discuss.elastic.co/t/error-while-indexing-list-to-elastic-search-using-pyspark/115715 "2018-01-29T05:39:02Z")
Hi, we are facing an issue while reading a bson file as pyspark and then indexing it in ES. The error is regarding the type of certain keys in the bson file which is an array. The error is as follows: Data of type java… --- ## [Logstash-input-rss undefined method author](https://discuss.elastic.co/t/logstash-input-rss-undefined-method-author/56916)
**Author:** [@John\_McAfee](https://discuss.elastic.co/u/John_McAfee)\ **Replies:** 3\ **Last updated:** [August 2, 2016, 6:03pm UTC](https://discuss.elastic.co/t/logstash-input-rss-undefined-method-author/56916 "2016-08-02T18:03:04Z")
I am using logstash 2.3.4 with the rss plugin. My config file is as follows: input { rss { interval =\> 600 url =\> "http://advances.sciencemag.org/rss/current.xml" } } When I … --- ## [Lumberjack input not working with beats input](https://discuss.elastic.co/t/lumberjack-input-not-working-with-beats-input/40478)
**Author:** [@abinay](https://discuss.elastic.co/u/abinay)\ **Replies:** 3\ **Last updated:** [January 30, 2016, 7:19am UTC](https://discuss.elastic.co/t/lumberjack-input-not-working-with-beats-input/40478 "2016-01-30T07:19:15Z")
Hii I was using lumberjack input to receive logs from Logstash Forwarder . Then I also used Filebeat and liked some of its properties . Now I have one server that sends logs to Logstash using Filebeat and another server … --- ## [Setting path.home in a web application](https://discuss.elastic.co/t/setting-path-home-in-a-web-application/3166)
**Author:** [@James\_Cook](https://discuss.elastic.co/u/James_Cook)\ **Replies:** 3\ **Last updated:** [July 29, 2010, 4:22pm UTC](https://discuss.elastic.co/t/setting-path-home-in-a-web-application/3166 "2010-07-29T16:22:50Z")
We are using ElasticSearch deployed in a web application and noticed that ES is not looking for the config/mappings dir on the classpath. Is modifying path.home in the elasticsearch node configuration the suggested wor… --- ## [Filebeat on laptop with Win 10](https://discuss.elastic.co/t/filebeat-on-laptop-with-win-10/106378)
**Author:** [@KJ\_Wijne](https://discuss.elastic.co/u/KJ_Wijne)\ **Replies:** 0\ **Last updated:** [November 4, 2017, 3:36pm UTC](https://discuss.elastic.co/t/filebeat-on-laptop-with-win-10/106378 "2017-11-04T15:36:54Z")
Hello to all out there, Today I was trying to install filebeat on my laptop with Windows 10. Earlier I was able to install Elasticsearch, Kibana and Logstash. My account has administrator rights and I tried: PS C:\\Pr… --- ## [Cluster error, no known master node, scheduling a retry](https://discuss.elastic.co/t/cluster-error-no-known-master-node-scheduling-a-retry/60669)
**Author:** [@poper](https://discuss.elastic.co/u/poper)\ **Replies:** 0\ **Last updated:** [September 16, 2016, 6:14am UTC](https://discuss.elastic.co/t/cluster-error-no-known-master-node-scheduling-a-retry/60669 "2016-09-16T06:14:29Z")
Hi There, I was running ES 2.4 with cluster 3 nodes. The cluster is working till this day my ES service is Service Unavailable and I caught log below. My ES conifig -- cluster.name: production node.name: ${HOSTNAME… --- ## [How to remove scientific format](https://discuss.elastic.co/t/how-to-remove-scientific-format/288843)
**Author:** [@paigekim](https://discuss.elastic.co/u/paigekim)\ **Replies:** 1\ **Last updated:** [November 14, 2021, 2:54pm UTC](https://discuss.elastic.co/t/how-to-remove-scientific-format/288843 "2021-11-14T14:54:02Z")
Hello, I am currently using Elasticsearch query to find out an accumulated revenue and an accumulated sum. The values calculated fast as I needed it but I would like to get the numbers in float value, not by scientific … --- ## [Elasticsearch IO characteristics on SSD Vs HDD](https://discuss.elastic.co/t/elasticsearch-io-characteristics-on-ssd-vs-hdd/218629)
**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\ **Replies:** 1\ **Last updated:** [February 10, 2020, 5:01pm UTC](https://discuss.elastic.co/t/elasticsearch-io-characteristics-on-ssd-vs-hdd/218629 "2020-02-10T17:01:43Z")
Hi! We are trying to compare between SSD and HDD for our Elasticsearch use case. In one of the scenarios, we want to see how fast we can Open an index. Index size is around 4.5 - 5GB. For SSD, we observe that there s… --- ## [Not getting complete logs in csv file from Kibana](https://discuss.elastic.co/t/not-getting-complete-logs-in-csv-file-from-kibana/149056)
**Author:** [@Aftab\_Ali](https://discuss.elastic.co/u/Aftab_Ali)\ **Replies:** 1\ **Last updated:** [September 19, 2018, 6:09am UTC](https://discuss.elastic.co/t/not-getting-complete-logs-in-csv-file-from-kibana/149056 "2018-09-19T06:09:05Z")
Dear Team, When I select a time period in kibana like September 17th, 2018 00.00.000 to September 17th, 2018 23.59.99.999 and I generate CSV file from kibana, I am not getting complete log in CSV file I am getting logs … --- ## [Creating multiple query\_string](https://discuss.elastic.co/t/creating-multiple-query-string/138851)
**Author:** [@shubham\_kumar1](https://discuss.elastic.co/u/shubham_kumar1)\ **Replies:** 1\ **Last updated:** [July 6, 2018, 10:03am UTC](https://discuss.elastic.co/t/creating-multiple-query-string/138851 "2018-07-06T10:03:21Z")
Hi, I want query data form elasticsearch based on some value of the string, i wrote following query for that. GET \_search { "query": { "bool": { "filter":{ "bool":{ "should": \[ { … --- ## [Incremental Refresh](https://discuss.elastic.co/t/incremental-refresh/76102)
**Author:** [@tausif786](https://discuss.elastic.co/u/tausif786)\ **Replies:** 1\ **Last updated:** [February 23, 2017, 7:07am UTC](https://discuss.elastic.co/t/incremental-refresh/76102 "2017-02-23T07:07:26Z")
Hello Everyone, I am new to ELK Stack. I have data in postgresql which i need to do some visualizations in Kibana. Steps i have followed Creating a logstash config file which reads data from postgresql and pushes it… --- ## [Http poller removing tags and type](https://discuss.elastic.co/t/http-poller-removing-tags-and-type/34198)
**Author:** [@voipoclay](https://discuss.elastic.co/u/voipoclay)\ **Replies:** 1\ **Last updated:** [November 12, 2015, 9:02pm UTC](https://discuss.elastic.co/t/http-poller-removing-tags-and-type/34198 "2015-11-12T21:02:30Z")
I am using http poller and as I was debugging I noticed some strange behavior. I am using logstash 2.0 and when I shut down nginx at one of the endpoints being polled I get this back. So when successful the json resp… --- ## [Update mapping of index](https://discuss.elastic.co/t/update-mapping-of-index/13067)
**Author:** [@Hanish\_Bansal](https://discuss.elastic.co/u/Hanish_Bansal)\ **Replies:** 1\ **Last updated:** [August 5, 2013, 7:43am UTC](https://discuss.elastic.co/t/update-mapping-of-index/13067 "2013-08-05T07:43:09Z")
Hi All, I am trying to update mapping of an existing index "tweetindex" which has no data. Initial mapping of "tweetindex "index is: { "tweet" : { "\_source" : { "enabled" : false}, … --- ## [Not able to read indices](https://discuss.elastic.co/t/not-able-to-read-indices/292302)
**Author:** [@AnkitaPujare](https://discuss.elastic.co/u/AnkitaPujare)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 5:58pm UTC](https://discuss.elastic.co/t/not-able-to-read-indices/292302 "2021-12-17T17:58:36Z")
Dear Team, I have ELK stack installed (ELK version-7.8.0) on one Linux server(say host1). Due to high severity vulnerability of apache log4j2, I have tried to install updated ELK stack (ELK version-7.16.1) on new server… --- ## [UI Search addFilter issue works only once](https://discuss.elastic.co/t/ui-search-addfilter-issue-works-only-once/261866)
**Author:** [@Husain\_Altaraif](https://discuss.elastic.co/u/Husain_Altaraif)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 5:15am UTC](https://discuss.elastic.co/t/ui-search-addfilter-issue-works-only-once/261866 "2021-01-22T05:15:14Z")
I am using two Elasticsearch engines and drivers to build a search functionality on vue. The first driver is used to search across all the profiles that I indexed in an engine called profiles. The other driver is used to… --- ## [APM .net response time mismatch?](https://discuss.elastic.co/t/apm-net-response-time-mismatch/279462)
**Author:** [@Nicolas\_Rey](https://discuss.elastic.co/u/Nicolas_Rey)\ **Replies:** 4\ **Last updated:** [August 2, 2021, 2:48pm UTC](https://discuss.elastic.co/t/apm-net-response-time-mismatch/279462 "2021-08-02T14:48:06Z")
Hi, Kibana version: 7.10.2 Elasticsearch version: 7.10.2 APM Server version: 7.10.2 APM Agent language and version: \net5.0\ \ **Author:** [@smola](https://discuss.elastic.co/u/smola)\ **Replies:** 4\ **Last updated:** [November 26, 2018, 4:28pm UTC](https://discuss.elastic.co/t/topic/156807 "2018-11-26T16:28:22Z") Коллеги, добрый день! Есть 2 типа в одном индексе. Пусть это будет Компании и Товары. У компании есть поле company\_name. Товары связаны с компаниями один ко многим, 1 компания - несколько товаров. Допустим, у товаров ес… --- ## [High CPU on logstash cluster](https://discuss.elastic.co/t/high-cpu-on-logstash-cluster/94359)
**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\ **Replies:** 4\ **Last updated:** [July 25, 2017, 9:41pm UTC](https://discuss.elastic.co/t/high-cpu-on-logstash-cluster/94359 "2017-07-25T21:41:17Z")
Hi , I am struggling with High CPU on logstash cluster . I have 4 nodes with 8 CPUs and 8 GB memory . Memory seems to used half of it. but CPU is always above 90% . Below is my logstash config input { beats… --- ## [Find/Intercept query from visualization plugin](https://discuss.elastic.co/t/find-intercept-query-from-visualization-plugin/88053)
**Author:** [@voiser](https://discuss.elastic.co/u/voiser)\ **Replies:** 4\ **Last updated:** [June 5, 2017, 7:11am UTC](https://discuss.elastic.co/t/find-intercept-query-from-visualization-plugin/88053 "2017-06-05T07:11:07Z")
Hi all, I am learning a little bit about Kibana 5.x and as an exercise I am creating some visualizations. To the date I have had some success playing with filters and aggregations, and now I am trying to make an 'insp… --- ## [Filter a string date format on logstash](https://discuss.elastic.co/t/filter-a-string-date-format-on-logstash/84016)
**Author:** [@Djelouah\_Laala](https://discuss.elastic.co/u/Djelouah_Laala)\ **Replies:** 4\ **Last updated:** [April 28, 2017, 1:57pm UTC](https://discuss.elastic.co/t/filter-a-string-date-format-on-logstash/84016 "2017-04-28T13:57:16Z")
Hi guys, I get data from an sql server database and i have a date on a string format like this : "2017-04-25 00:00:00 +0200" and I want to use grok filter to transform this to a similar format to @timestamp I have … --- ## [\[SOLVED\] Date filter slowing pipeline](https://discuss.elastic.co/t/solved-date-filter-slowing-pipeline/34909)
**Author:** [@mikula](https://discuss.elastic.co/u/mikula)\ **Replies:** 4\ **Last updated:** [November 30, 2015, 3:29pm UTC](https://discuss.elastic.co/t/solved-date-filter-slowing-pipeline/34909 "2015-11-30T15:29:17Z")
Hello, I have problem when I turn on date parsing in my logstash config, whole pipeline gas a LOT slower (about 10 times). My ELK stack is quite capable (4 8 core Xeon, 16 gb memory severs) running whole ELK on them. An… --- ## [How parse this field Transport: PTU.13-3034-3345-70;](https://discuss.elastic.co/t/how-parse-this-field-transport-ptu-13-3034-3345-70/26147)
**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\ **Replies:** 4\ **Last updated:** [July 23, 2015, 12:07pm UTC](https://discuss.elastic.co/t/how-parse-this-field-transport-ptu-13-3034-3345-70/26147 "2015-07-23T12:07:27Z")
Hi!!! How to parse this field? Transport: PTU.13-3034-3345-70; Is it GREEDYDATA? --- ## [Using the elasticsearch logo r](https://discuss.elastic.co/t/using-the-elasticsearch-logo-r/7104)
**Author:** [@Alex\_At\_Ikanow](https://discuss.elastic.co/u/Alex_At_Ikanow)\ **Replies:** 4\ **Last updated:** [February 12, 2014, 8:07pm UTC](https://discuss.elastic.co/t/using-the-elasticsearch-logo-r/7104 "2014-02-12T20:07:34Z")
Apologies if this is somewhere obvious on the web-site and I just missed it. I'm writing a set of web pages that will accompany the release of our open source platform, and am looking through the legalese for all t… --- ## [Saved "field" parameter is now invalid. Please select a new field](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field/244886)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 6\ **Last updated:** [August 17, 2020, 1:15pm UTC](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field/244886 "2020-08-17T13:15:31Z")
hello everybody, I am setting up ILM and I am having an error in kibana dashboards: Saved "field" parameter is now invalid. Please select a new field. here are the steps that I followed: Create ILM policy: PUT \_ilm/p… --- ## [Upgrading/Updating SIEM rules](https://discuss.elastic.co/t/upgrading-updating-siem-rules/298014)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 2\ **Last updated:** [February 24, 2022, 7:13am UTC](https://discuss.elastic.co/t/upgrading-updating-siem-rules/298014 "2022-02-24T07:13:16Z")
Good Morning, I am in the process of migrating a SOC from Splunk to Elastic and am going through some of the growing pains at the moment. This question is in regards to upgrading/updating SIEM rules as we upgrade our el… --- ## [Unexpected behaviour for exec input plugin](https://discuss.elastic.co/t/unexpected-behaviour-for-exec-input-plugin/143664)
**Author:** [@Marco\_Strambelli](https://discuss.elastic.co/u/Marco_Strambelli)\ **Replies:** 2\ **Last updated:** [August 13, 2018, 10:32am UTC](https://discuss.elastic.co/t/unexpected-behaviour-for-exec-input-plugin/143664 "2018-08-13T10:32:22Z")
The curl command returns empty message. input { exec { command =\> "curl -s -I \" interval =\> 30 } } --- ## [How to force LogStash to connect using Ip Address instead of DNS names](https://discuss.elastic.co/t/how-to-force-logstash-to-connect-using-ip-address-instead-of-dns-names/233748)
**Author:** [@jimisdrpc](https://discuss.elastic.co/u/jimisdrpc)\ **Replies:** 0\ **Last updated:** [May 21, 2020, 1:58pm UTC](https://discuss.elastic.co/t/how-to-force-logstash-to-connect-using-ip-address-instead-of-dns-names/233748 "2020-05-21T13:58:59Z")
In my local environment, I must use IP Address instead of Localhost or other nickname. My settup is Docker over Virtual Box instead of Docker For Windows. It is not part of my question discuss why I am using Virtual Box … --- ## [Regarding if else condition for grok filter](https://discuss.elastic.co/t/regarding-if-else-condition-for-grok-filter/308863)
**Author:** [@suresh\_u](https://discuss.elastic.co/u/suresh_u)\ **Replies:** 5\ **Last updated:** [July 5, 2022, 2:11pm UTC](https://discuss.elastic.co/t/regarding-if-else-condition-for-grok-filter/308863 "2022-07-05T14:11:39Z")
Hi @sudhagar\_ramesh @Badger I have 1 date field in my oracle db. If the date field value is empty then I am getting grokparsefailure error as I am doing grok on that value. I need to put 1 condition like if date is nil… --- ## [Grok pattern not working](https://discuss.elastic.co/t/grok-pattern-not-working/238875)
**Author:** [@ndg](https://discuss.elastic.co/u/ndg)\ **Replies:** 5\ **Last updated:** [June 26, 2020, 7:21pm UTC](https://discuss.elastic.co/t/grok-pattern-not-working/238875 "2020-06-26T19:21:27Z")
Hi! I want to parse a Haproxy log sent by a rsyslog service. I have a grok pattern to parse the original rsyslog message (which send the message of the service to a syslog\_message field) and another that parse the syslog… --- ## [How to get the current running configuration of Kibana in kibana.yml (on cloud)](https://discuss.elastic.co/t/how-to-get-the-current-running-configuration-of-kibana-in-kibana-yml-on-cloud/181931)
**Author:** [@shiveshabhishek](https://discuss.elastic.co/u/shiveshabhishek)\ **Replies:** 5\ **Last updated:** [July 26, 2019, 2:46am UTC](https://discuss.elastic.co/t/how-to-get-the-current-running-configuration-of-kibana-in-kibana-yml-on-cloud/181931 "2019-07-26T02:46:28Z")
Hey there, I am running Kibana 6.4.0 on cloud. I am passing some variables as env in my deployment yaml. I want to see the overall running configurations of kibana.yml . In config/kibana.yml I am unable to get the curre… --- ## [System\_api\_version \[7\] is not supported by system\_id beats](https://discuss.elastic.co/t/system-api-version-7-is-not-supported-by-system-id-beats/182406)
**Author:** [@Urs\_Bronk](https://discuss.elastic.co/u/Urs_Bronk)\ **Replies:** 5\ **Last updated:** [May 23, 2019, 2:03pm UTC](https://discuss.elastic.co/t/system-api-version-7-is-not-supported-by-system-id-beats/182406 "2019-05-23T14:03:27Z")
Hi, I'm trying to monitor my filebeats on Kibana through elasticsearch. I get the following error: system\_api\_version \[7\] is not supported by system\_id ERROR pipeline/output.go:121 Failed to publish events: 400 Ba… --- ## [Dec 11th, 2024: \[EN\] Troubleshooting query rules](https://discuss.elastic.co/t/dec-11th-2024-en-troubleshooting-query-rules/369452)
**Author:** [@Kathleen\_DeRusso](https://discuss.elastic.co/u/Kathleen_DeRusso)\ **Replies:** 0\ **Last updated:** [December 11, 2024, 8:00am UTC](https://discuss.elastic.co/t/dec-11th-2024-en-troubleshooting-query-rules/369452 "2024-12-11T08:00:40Z")
Query rules offer users a way to have fine grained control over specific queries. Currently, the capabilities of query rules allow you to pin the search results you choose at the top of the result set, and/or exclude sp… --- ## [Need assistance on CEF \_grokparsefailure](https://discuss.elastic.co/t/need-assistance-on-cef-grokparsefailure/278270)
**Author:** [@Xor44](https://discuss.elastic.co/u/Xor44)\ **Replies:** 7\ **Last updated:** [July 19, 2021, 6:34pm UTC](https://discuss.elastic.co/t/need-assistance-on-cef-grokparsefailure/278270 "2021-07-19T18:34:51Z")
Hi Folk , I'm new on ELK since many days I have configure a pipeline for parsing CEF logs from netscout device . When I'm checking logs I see some \_grokparsefailure tage on Kibana . I conclude that there is some issue… [Previous page](https://discuss.elastic.co/top.md?page=1360&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1362&per_page=50&period=all)