# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1297 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1298 --- ## [Mapping private IP Address to geolocation with GeoIP Processor](https://discuss.elastic.co/t/mapping-private-ip-address-to-geolocation-with-geoip-processor/279981)
**Author:** [@Vannessa\_Kemeni](https://discuss.elastic.co/u/Vannessa_Kemeni)\ **Replies:** 4\ **Last updated:** [August 3, 2021, 11:54am UTC](https://discuss.elastic.co/t/mapping-private-ip-address-to-geolocation-with-geoip-processor/279981 "2021-08-03T11:54:55Z")
Hello, i am using a tool, that uses Elastic search. For retrieving the geolocaton of the IP Address a Json file was created that uses the GeoIP Processor. I updated this file in order to set the geolocation of the priva… --- ## [Elasticsearch input plugin size](https://discuss.elastic.co/t/elasticsearch-input-plugin-size/280163)
**Author:** [@JFO\_90](https://discuss.elastic.co/u/JFO_90)\ **Replies:** 7\ **Last updated:** [August 3, 2021, 11:15am UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-size/280163 "2021-08-03T11:15:25Z")
Hi, I have a logstash configuration from which I'm trying to extract elasticsearch information with the elasticsearch input plugin. The problem that i have is that despite indicating a size, it always returns all the do… --- ## [Disk.indices is higher than disk.used in cat allocation](https://discuss.elastic.co/t/disk-indices-is-higher-than-disk-used-in-cat-allocation/279853)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 13\ **Last updated:** [August 3, 2021, 11:02am UTC](https://discuss.elastic.co/t/disk-indices-is-higher-than-disk-used-in-cat-allocation/279853 "2021-08-03T11:02:35Z")
When I run the following command: GET \_cat/allocation?v&s=disk.indices&h=shards,disk.indices,disk.used,disk.available,disk.total,disk.percent it shows the following output: shards disk.indices disk.used disk.total dis… --- ## [How would be filter plugin for this desired output](https://discuss.elastic.co/t/how-would-be-filter-plugin-for-this-desired-output/280301)
**Author:** [@Srujan\_L](https://discuss.elastic.co/u/Srujan_L)\ **Replies:** 0\ **Last updated:** [August 3, 2021, 10:25am UTC](https://discuss.elastic.co/t/how-would-be-filter-plugin-for-this-desired-output/280301 "2021-08-03T10:25:34Z")
my input file looks like {"msg1":"\\"abcd\\" : \\"msg2\\""} {"msg1":"\\"Dhhdk\\" : \\"msg3\\""} {"msg1":"\\"Djskdh\\" : \\"msg2\\""} {"msg1":"\\"ksgdh\\" : \\"msg\\""} {"msg1":"\\"hxvdb\\" : \\"msg\\""} my desired output should be like {… --- ## [Disable Fuzziness in Query](https://discuss.elastic.co/t/disable-fuzziness-in-query/280073)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 3\ **Last updated:** [August 3, 2021, 9:11am UTC](https://discuss.elastic.co/t/disable-fuzziness-in-query/280073 "2021-08-03T09:11:07Z")
I am fetching results with the following query where search is being done on Strings (Recipe name): let body2 = { size: 200, from: 0, sort : \[ { "@timestamp" : {"order": "desc", "form… --- ## [Auditbeat: Combining data from both (system & file\_integrity) modules](https://discuss.elastic.co/t/auditbeat-combining-data-from-both-system-file-integrity-modules/280281)
**Author:** [@Stud21](https://discuss.elastic.co/u/Stud21)\ **Replies:** 0\ **Last updated:** [August 3, 2021, 7:24am UTC](https://discuss.elastic.co/t/auditbeat-combining-data-from-both-system-file-integrity-modules/280281 "2021-08-03T07:24:06Z")
I am trying to list events from Auditbeat as below: In Kibana discovery, select Auditbeat index pattern Search for a file say, /etc/auditbeat/auditbeat.yml It lists records that do not show the username for changes/cr… --- ## [Rest API Issues with downloading visualisation/dashboard as png](https://discuss.elastic.co/t/rest-api-issues-with-downloading-visualisation-dashboard-as-png/280165)
**Author:** [@Vajb12](https://discuss.elastic.co/u/Vajb12)\ **Replies:** 3\ **Last updated:** [August 3, 2021, 7:17am UTC](https://discuss.elastic.co/t/rest-api-issues-with-downloading-visualisation-dashboard-as-png/280165 "2021-08-03T07:17:31Z")
HI Team, We are trying to download a kibana dashboard using the RESTAPI. http://localhost:5601/app/kibana#/dashboard/export?dashboard=7adfa750-4c81-11e8-b3d7-01146121b73d By specifying the dashboard id, Im able to do… --- ## [Details of Top N records](https://discuss.elastic.co/t/details-of-top-n-records/280224)
**Author:** [@ddramireddy](https://discuss.elastic.co/u/ddramireddy)\ **Replies:** 1\ **Last updated:** [August 3, 2021, 7:09am UTC](https://discuss.elastic.co/t/details-of-top-n-records/280224 "2021-08-03T07:09:21Z")
Hi, I have an index with following schema: GroupName,Time,Value Example values: G1 2020-01-01 1:00:00. 10 G2 2020-01-01 1:00:00. 15 G3 2020-01-01 1:00:00. 20 G1 2020-01-01 2:00:00. 10 G2 2020-01-01 2:00:00. 20 G… --- ## [API/endpoint to get analyzer/filter details](https://discuss.elastic.co/t/api-endpoint-to-get-analyzer-filter-details/280254)
**Author:** [@mattkallo](https://discuss.elastic.co/u/mattkallo)\ **Replies:** 1\ **Last updated:** [August 3, 2021, 7:06am UTC](https://discuss.elastic.co/t/api-endpoint-to-get-analyzer-filter-details/280254 "2021-08-03T07:06:35Z")
I have a synonyms analyzer with 2 filters configured to read from synonyms mapping files. I use the /\_analyze API to see how the analyzer processes text. But is there a way to get a summary of configured filters or ana… --- ## [Getting false hits on queries (boolean, match, term, and filters)](https://discuss.elastic.co/t/getting-false-hits-on-queries-boolean-match-term-and-filters/280100)
**Author:** [@encompassJeff](https://discuss.elastic.co/u/encompassJeff)\ **Replies:** 4\ **Last updated:** [August 3, 2021, 6:53am UTC](https://discuss.elastic.co/t/getting-false-hits-on-queries-boolean-match-term-and-filters/280100 "2021-08-03T06:53:09Z")
I use Elastic to host an index used for managing list filters, which returns IDs matching a query, that I then use in Seek call on a SQL database to retrieve large sets of data with decent efficiency. Lately I've seen a … --- ## [Couldn't find any input plugin named 'google\_pubsub'. Are you sure this is correct?](https://discuss.elastic.co/t/couldnt-find-any-input-plugin-named-google-pubsub-are-you-sure-this-is-correct/280218)
**Author:** [@devashishsingh](https://discuss.elastic.co/u/devashishsingh)\ **Replies:** 3\ **Last updated:** [August 3, 2021, 6:51am UTC](https://discuss.elastic.co/t/couldnt-find-any-input-plugin-named-google-pubsub-are-you-sure-this-is-correct/280218 "2021-08-03T06:51:50Z")
Hello, I noticed Kibana is no longer having Google cloud Stackdriver logs. So I started my troubleshooting with logstash and debug the .conf file, here's what I got: \[2021-08-02T20:08:44,540\]\[DEBUG\]\[logstash.plugins.re… --- ## [Embedd kibana in customer's own elasticsearch](https://discuss.elastic.co/t/embedd-kibana-in-customers-own-elasticsearch/280215)
**Author:** [@mogi](https://discuss.elastic.co/u/mogi)\ **Replies:** 3\ **Last updated:** [August 3, 2021, 6:49am UTC](https://discuss.elastic.co/t/embedd-kibana-in-customers-own-elasticsearch/280215 "2021-08-03T06:49:47Z")
We are planning to create dashboard for customers, that use elasticseach as part of our product. By that, we try to build default dashboards, that analyze the same data for each customer, but specified on their on index.… --- ## [Cannot access elasticsearch or kibana on browser but able to access within the server using curl](https://discuss.elastic.co/t/cannot-access-elasticsearch-or-kibana-on-browser-but-able-to-access-within-the-server-using-curl/280270)
**Author:** [@Srinivas1602](https://discuss.elastic.co/u/Srinivas1602)\ **Replies:** 2\ **Last updated:** [August 3, 2021, 4:29am UTC](https://discuss.elastic.co/t/cannot-access-elasticsearch-or-kibana-on-browser-but-able-to-access-within-the-server-using-curl/280270 "2021-08-03T04:29:48Z")
Hi, I am facing a problem while connecting to elastic search urls on browser. I have an elastic search with one master node and 2 datanodes configured and running on the respective servers. When I curl on the respecti… --- ## [Logstash "Rejected mapping update", not sure how to rectify the situation](https://discuss.elastic.co/t/logstash-rejected-mapping-update-not-sure-how-to-rectify-the-situation/280269)
**Author:** [@CameronCenic](https://discuss.elastic.co/u/CameronCenic)\ **Replies:** 5\ **Last updated:** [August 3, 2021, 4:22am UTC](https://discuss.elastic.co/t/logstash-rejected-mapping-update-not-sure-how-to-rectify-the-situation/280269 "2021-08-03T04:22:36Z")
I am seeing an error: Rejecting mapping update to \[logstash-INDEXNAME-2021.08.03\] as the final mapping would have more than 1 type: \[\_doc, doc\] I suspect this is due to me switching my template from using doc to usin… --- ## [Maximum load of a single logstash instance](https://discuss.elastic.co/t/maximum-load-of-a-single-logstash-instance/280205)
**Author:** [@Rahul\_Dey](https://discuss.elastic.co/u/Rahul_Dey)\ **Replies:** 1\ **Last updated:** [August 3, 2021, 4:17am UTC](https://discuss.elastic.co/t/maximum-load-of-a-single-logstash-instance/280205 "2021-08-03T04:17:15Z")
We have build a logging system using Elastic Stack which is currently ingesting log data from different applications for monitoring. We have plans of adding more applications to our logging system in the future. Only one… --- ## [Logstash Config Error-JAVA](https://discuss.elastic.co/t/logstash-config-error-java/125546)
**Author:** [@Nagu\_R\_Pujari](https://discuss.elastic.co/u/Nagu_R_Pujari)\ **Replies:** 10\ **Last updated:** [August 3, 2021, 3:24am UTC](https://discuss.elastic.co/t/logstash-config-error-java/125546 "2021-08-03T03:24:15Z")
i have performing basic setup of logstash getting JAVA error. not able to complete the config test. Error: ERROR: Failed to load settings file from "path.settings". Aborting... path.setting=/etc/logstash/logstash.yml, … --- ## [Treating Logs as Milk, not Wine (the art of playing catchup)](https://discuss.elastic.co/t/treating-logs-as-milk-not-wine-the-art-of-playing-catchup/280257)
**Author:** [@cknz](https://discuss.elastic.co/u/cknz)\ **Replies:** 9\ **Last updated:** [August 3, 2021, 3:04am UTC](https://discuss.elastic.co/t/treating-logs-as-milk-not-wine-the-art-of-playing-catchup/280257 "2021-08-03T03:04:29Z")
I'm have a logging pipeline that looks something like the following: Logstash/Rsyslog/etc (submission) -\> Kafka -\> Logstash (enrichment) -\> Elasticsearch Metrics tells me that the by-far slowest part of my pipeline in … --- ## [Elasticsearch Index Shards](https://discuss.elastic.co/t/elasticsearch-index-shards/280206)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 1\ **Last updated:** [August 3, 2021, 1:47am UTC](https://discuss.elastic.co/t/elasticsearch-index-shards/280206 "2021-08-03T01:47:24Z")
Hi Im creating an elasticsearch index with 3 shards. But as of today I have single node elasticsearch. I have future plan to have 3 nodes cluster and hence created 3 shards now. Will it be a right approach --- ## [Issues with viewing index data in kibana](https://discuss.elastic.co/t/issues-with-viewing-index-data-in-kibana/279452)
**Author:** [@Vajb12](https://discuss.elastic.co/u/Vajb12)\ **Replies:** 4\ **Last updated:** [August 3, 2021, 1:14am UTC](https://discuss.elastic.co/t/issues-with-viewing-index-data-in-kibana/279452 "2021-08-03T01:14:23Z")
We currently have a pipeline setup in our environment to fetch nginx logs to kibana. In the web server, we have a filebeat configuration to push the nginx logs to logstash server for processing. In logstash server, there… --- ## [ECK: Added nodes and now queries are unable to find stored scripts](https://discuss.elastic.co/t/eck-added-nodes-and-now-queries-are-unable-to-find-stored-scripts/279301)
**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\ **Replies:** 12\ **Last updated:** [August 2, 2021, 11:28pm UTC](https://discuss.elastic.co/t/eck-added-nodes-and-now-queries-are-unable-to-find-stored-scripts/279301 "2021-08-02T23:28:18Z")
ES: 6.8.13 We're in the process of moving from manually maintained ES clusters to Elastic Cloud on Kubernetes (ECK). In our first test environment (a single node cluster), we added 3 ECK nodes. Afterward, all our sear… --- ## [Elasticsearch timeout error on operations](https://discuss.elastic.co/t/elasticsearch-timeout-error-on-operations/280239)
**Author:** [@iuryfukuda](https://discuss.elastic.co/u/iuryfukuda)\ **Replies:** 4\ **Last updated:** [August 2, 2021, 11:22pm UTC](https://discuss.elastic.co/t/elasticsearch-timeout-error-on-operations/280239 "2021-08-02T23:22:46Z")
We have timeout error on worker clients who use ES go client: time="2021-08-02T16:04:45Z" level=error msg="error handling connection with queue: error saving bulk: error making bulk request dial tcp 20.96.122.135:9200:… --- ## [Update documents based on other updates](https://discuss.elastic.co/t/update-documents-based-on-other-updates/280237)
**Author:** [@nilei](https://discuss.elastic.co/u/nilei)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 10:44pm UTC](https://discuss.elastic.co/t/update-documents-based-on-other-updates/280237 "2021-08-02T22:44:56Z")
Hi :wave: I have two indices where one of them potentially contains several million documents (let us say index "installation") and the other one only a few hundreds (index "product" for now). Now, I want to update some… --- ## [Need help with filebeat index pattern - Mapping conflict with host.ip](https://discuss.elastic.co/t/need-help-with-filebeat-index-pattern-mapping-conflict-with-host-ip/279673)
**Author:** [@Cdnvballer](https://discuss.elastic.co/u/Cdnvballer)\ **Replies:** 7\ **Last updated:** [August 2, 2021, 10:18pm UTC](https://discuss.elastic.co/t/need-help-with-filebeat-index-pattern-mapping-conflict-with-host-ip/279673 "2021-08-02T22:18:45Z")
filebeat index pattern shows warning that host.ip is showing both type ip and text. I believe this is somehow related to IPv6 host.ip is in type text and IPv4 host.ip in type ip how do fix this ? at this point I don't … --- ## [Monitoring Cluster Sizing](https://discuss.elastic.co/t/monitoring-cluster-sizing/280229)
**Author:** [@shahidraza](https://discuss.elastic.co/u/shahidraza)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 9:37pm UTC](https://discuss.elastic.co/t/monitoring-cluster-sizing/280229 "2021-08-02T21:37:39Z")
Hi Team, I want to set up a Monitoring Cluster for my Dev, Test, and Non-Prod & Prod Cluster. Are any hardware sizing documents available for the same which I can refer for standard sizing? Dev and Test one Monitorin… --- ## [Elasticsearch client memory is not getting utilized](https://discuss.elastic.co/t/elasticsearch-client-memory-is-not-getting-utilized/279966)
**Author:** [@Varun\_S](https://discuss.elastic.co/u/Varun_S)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 9:28pm UTC](https://discuss.elastic.co/t/elasticsearch-client-memory-is-not-getting-utilized/279966 "2021-08-02T21:28:18Z")
Hi Team, We have deployed elasticsearch in kubernetes environment with the below memory and cpu configuration. Data has been pushed to elasticsearch from multiple clients\[7 clients\], elasticsearch data memory is get… --- ## [Is it possible to run a shell script from Kibana?](https://discuss.elastic.co/t/is-it-possible-to-run-a-shell-script-from-kibana/280230)
**Author:** [@danibe](https://discuss.elastic.co/u/danibe)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 9:24pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-a-shell-script-from-kibana/280230 "2021-08-02T21:24:44Z")
Is it possible to customize one of the Kibana web pages to have a link/button that runs a shell script (in the server that hosts Kibana) upon clicking it? If so, where do I find documentation or tutorial that explains h… --- ## [Error connecting to package registry](https://discuss.elastic.co/t/error-connecting-to-package-registry/279721)
**Author:** [@Nil\_Battey\_Sannata](https://discuss.elastic.co/u/Nil_Battey_Sannata)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 7:33pm UTC](https://discuss.elastic.co/t/error-connecting-to-package-registry/279721 "2021-08-02T19:33:00Z")
Since Zscaler proxy is enabled, My Kibana started giving an error So I simply added Zscaler RootCA.crt to ubuntu server (where ELK is running) in /usr/share/ca-certificates and reconfigured ca-certficates dpkg. Now c… --- ## [Counting faults per region given there are no repeats](https://discuss.elastic.co/t/counting-faults-per-region-given-there-are-no-repeats/279747)
**Author:** [@ammaars](https://discuss.elastic.co/u/ammaars)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 7:18pm UTC](https://discuss.elastic.co/t/counting-faults-per-region-given-there-are-no-repeats/279747 "2021-08-02T19:18:45Z")
I'm planning on having live data streaming to kibana on elasticsearch. The fields of concern will be "failure" (0 or 1), region (e.g. region 1-12) and a unique endpoint identifier. What I'd like to do is have a query whi… --- ## [ESRALLY : CREATE/DELETE operations fail 100% everytime](https://discuss.elastic.co/t/esrally-create-delete-operations-fail-100-everytime/280162)
**Author:** [@mots](https://discuss.elastic.co/u/mots)\ **Replies:** 2\ **Last updated:** [August 2, 2021, 6:20pm UTC](https://discuss.elastic.co/t/esrally-create-delete-operations-fail-100-everytime/280162 "2021-08-02T18:20:04Z")
I have created a custom track with 2 documents just to debug this use case. I am running this on a remote target index deployed on AWS. I am trying to debug why my create/delete operations always fail with 100%. I canno… --- ## [Very very new to this](https://discuss.elastic.co/t/very-very-new-to-this/280248)
**Author:** [@vinceisvince](https://discuss.elastic.co/u/vinceisvince)\ **Replies:** 0\ **Last updated:** [August 2, 2021, 6:14pm UTC](https://discuss.elastic.co/t/very-very-new-to-this/280248 "2021-08-02T18:14:18Z")
I'll do a high level overview. We are using IBM's APIC v10. It uses Kubernetes which I'm all but a few days new to it. They seemt o have used logstash on top of that for their propriety "analytics server". I feel l… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1296) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1298)