# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1548 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1549 --- ## [Alerts Elasticsearch](https://discuss.elastic.co/t/alerts-elasticsearch/264726)
**Author:** [@roy\_allen](https://discuss.elastic.co/u/roy_allen)\ **Replies:** 1\ **Last updated:** [February 18, 2021, 9:57pm UTC](https://discuss.elastic.co/t/alerts-elasticsearch/264726 "2021-02-18T21:57:13Z")
Hello, Is it possible to send an alerts on elasticsearch everytime I have "error" Level in document for all documents with error. Also is it possible to have different email for every alert ? Something like email fiel… --- ## [Elasticsearch backup & restore from one server to another](https://discuss.elastic.co/t/elasticsearch-backup-restore-from-one-server-to-another/264748)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [February 18, 2021, 9:47pm UTC](https://discuss.elastic.co/t/elasticsearch-backup-restore-from-one-server-to-another/264748 "2021-02-18T21:47:46Z")
Hi , I'm trying to backup one of index from one kibana server and restore it in another server. Should we copy the snapshot folder from server 1 to server 2 and then try to restore it? Can someone tell me how to go a… --- ## [Memory usage per Query](https://discuss.elastic.co/t/memory-usage-per-query/264767)
**Author:** [@JulioC](https://discuss.elastic.co/u/JulioC)\ **Replies:** 0\ **Last updated:** [February 18, 2021, 9:30pm UTC](https://discuss.elastic.co/t/memory-usage-per-query/264767 "2021-02-18T21:30:13Z")
Hi I'm new in Elasticsearch and I've been working on doing some comparative exercises between the different ways to mapping data, as Nested, Join and Denormalized, Is it possible to get the memory usage of each query tha… --- ## [Drilldown filtering does not make sense](https://discuss.elastic.co/t/drilldown-filtering-does-not-make-sense/264361)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 1\ **Last updated:** [February 18, 2021, 9:26pm UTC](https://discuss.elastic.co/t/drilldown-filtering-does-not-make-sense/264361 "2021-02-18T21:26:13Z")
I am trying to use the new drilldown feature for the Kibana dashboards. I have 2 dashboards Abusive IPs : This dashboard shows a table of IPs that are showing abusive behavior Drilldown IP: This dashboard shows a time… --- ## [Error: We Couldn´t activate monitoring](https://discuss.elastic.co/t/error-we-couldn-t-activate-monitoring/261427)
**Author:** [@wleandro](https://discuss.elastic.co/u/wleandro)\ **Replies:** 6\ **Last updated:** [February 18, 2021, 8:07pm UTC](https://discuss.elastic.co/t/error-we-couldn-t-activate-monitoring/261427 "2021-02-18T20:07:38Z")
Hi everyone I need to learned about Activate Monitoring, but present error on display. "We Couldn´t activate monitoring" Is my first support on tecnology Elastic Search on Kibana. Thank you for much. --- ## [\[.monitoring-logstash\] Pipeline terminated {"pipeline.id"=\>".monitoring-logstash"}](https://discuss.elastic.co/t/monitoring-logstash-pipeline-terminated-pipeline-id-monitoring-logstash/264619)
**Author:** [@grillo](https://discuss.elastic.co/u/grillo)\ **Replies:** 4\ **Last updated:** [February 18, 2021, 7:47pm UTC](https://discuss.elastic.co/t/monitoring-logstash-pipeline-terminated-pipeline-id-monitoring-logstash/264619 "2021-02-18T19:47:30Z")
Hello everyone, I have a cluster of four nodes running - secured with certificates. I have followed the tutorials to include a logstash to the cluster. At the moment I don't even use /conf.d/\* configuration files to all… --- ## [Elasticsearch similar elements count](https://discuss.elastic.co/t/elasticsearch-similar-elements-count/264613)
**Author:** [@James\_wood](https://discuss.elastic.co/u/James_wood)\ **Replies:** 6\ **Last updated:** [February 18, 2021, 7:29pm UTC](https://discuss.elastic.co/t/elasticsearch-similar-elements-count/264613 "2021-02-18T19:29:41Z")
I have the following product order list and need to find out what products are ordered together: \[ { "order\_id": 1, "products": \["Coke", "Fanta"\], "created\_on": "2016-12-26T03:41:46+00:0… --- ## [Split string into array and then into key value pairs](https://discuss.elastic.co/t/split-string-into-array-and-then-into-key-value-pairs/264741)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 2\ **Last updated:** [February 18, 2021, 7:06pm UTC](https://discuss.elastic.co/t/split-string-into-array-and-then-into-key-value-pairs/264741 "2021-02-18T19:06:18Z")
Is there a way to split a string into an array and then turn each of those values into key value pairs within the array using logstash. For example: Turning this: SomeField -\> "key1:value1;key2:value2;key3:value3" In… --- ## [How to enable the mapper-size plugin within an INDEX TEMPLATE](https://discuss.elastic.co/t/how-to-enable-the-mapper-size-plugin-within-an-index-template/263646)
**Author:** [@ericjogonzalez](https://discuss.elastic.co/u/ericjogonzalez)\ **Replies:** 3\ **Last updated:** [February 18, 2021, 6:53pm UTC](https://discuss.elastic.co/t/how-to-enable-the-mapper-size-plugin-within-an-index-template/263646 "2021-02-18T18:53:07Z")
Hello, I am struggling to enable the mapper-size plugin within an index template in kibana. A bit of background: The mapper-size plugin is installed on all ES hosts on the cluster All hosts have been restarted since t… --- ## [Graceful shard management?](https://discuss.elastic.co/t/graceful-shard-management/264732)
**Author:** [@Curtis-KC](https://discuss.elastic.co/u/Curtis-KC)\ **Replies:** 5\ **Last updated:** [February 18, 2021, 6:36pm UTC](https://discuss.elastic.co/t/graceful-shard-management/264732 "2021-02-18T18:36:06Z")
Most challenging problems occur "when things have gone wrong". We have Warm Nodes that are oversharded and have network access storage mounted by mistake. The result is we have a good amount of data already on NAS, but… --- ## [Enrich data to send to connectors on Watcher](https://discuss.elastic.co/t/enrich-data-to-send-to-connectors-on-watcher/264428)
**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\ **Replies:** 3\ **Last updated:** [February 18, 2021, 6:34pm UTC](https://discuss.elastic.co/t/enrich-data-to-send-to-connectors-on-watcher/264428 "2021-02-18T18:34:58Z")
Hi all. I am using elastic Cloud and I have metricbeat sending data to the elasticsearch. I also created an alert in watcher when a POD is unavailable the send alert to OPSGenie. It works fine but I'd like to have the … --- ## [Elasticsearch output - ILM availablity not properly detected with expired ES license](https://discuss.elastic.co/t/elasticsearch-output-ilm-availablity-not-properly-detected-with-expired-es-license/264709)
**Author:** [@SH\_HSOC](https://discuss.elastic.co/u/SH_HSOC)\ **Replies:** 3\ **Last updated:** [February 18, 2021, 6:11pm UTC](https://discuss.elastic.co/t/elasticsearch-output-ilm-availablity-not-properly-detected-with-expired-es-license/264709 "2021-02-18T18:11:50Z")
Hi community, I think I discovered a corner case bug in the elasticsearch output plugin. Currently the license of my elasticsearch cluster has expired and it feels like the ILM availability is no longer properly detecte… --- ## [Unable to add remote cluster for CCS](https://discuss.elastic.co/t/unable-to-add-remote-cluster-for-ccs/264637)
**Author:** [@susindaran](https://discuss.elastic.co/u/susindaran)\ **Replies:** 8\ **Last updated:** [February 18, 2021, 6:06pm UTC](https://discuss.elastic.co/t/unable-to-add-remote-cluster-for-ccs/264637 "2021-02-18T18:06:17Z")
I am simply spinning up two Elasticsearch instances in the same machine and trying to add one as a remote cluster to the other one. Settings for cluster\_one (only the relevant part): transport.port: 9307 http.p… --- ## [Painless compile error using regex pattern](https://discuss.elastic.co/t/painless-compile-error-using-regex-pattern/264623)
**Author:** [@Rodrigo\_Rabioglio](https://discuss.elastic.co/u/Rodrigo_Rabioglio)\ **Replies:** 2\ **Last updated:** [February 18, 2021, 6:00pm UTC](https://discuss.elastic.co/t/painless-compile-error-using-regex-pattern/264623 "2021-02-18T18:00:09Z")
Hello, I'm getting a compile error when using regex patterns inside a scripted field. I couldn't figure out why this error is happening though, since I'm pretty sure the script is right, based on the docs. Here is the … --- ## [Elasticsearch:7.11.0 bootstrap checks failed](https://discuss.elastic.co/t/elasticsearch-7-11-0-bootstrap-checks-failed/264733)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 3\ **Last updated:** [February 18, 2021, 5:49pm UTC](https://discuss.elastic.co/t/elasticsearch-7-11-0-bootstrap-checks-failed/264733 "2021-02-18T17:49:35Z")
I upgraded elastic-search cluster from elasticsearch:7.10.0 to elasticsearch:7.11.0 and started noticing following error {"type": "server", "timestamp": "2021-02-18T16:15:46,270Z", "level": "INFO", "component": "o.e.b.B… --- ## [How to get Data Table Visualization with Top Hit show the last result for the bucket?](https://discuss.elastic.co/t/how-to-get-data-table-visualization-with-top-hit-show-the-last-result-for-the-bucket/264491)
**Author:** [@Chris\_Portka](https://discuss.elastic.co/u/Chris_Portka)\ **Replies:** 4\ **Last updated:** [February 18, 2021, 5:47pm UTC](https://discuss.elastic.co/t/how-to-get-data-table-visualization-with-top-hit-show-the-last-result-for-the-bucket/264491 "2021-02-18T17:47:33Z")
I have documents coming into elasticsearch that have a host field (string) and an update timestamp (string). I want to show a table of all unique hosts with their last update time. I created a data table visualization … --- ## [Can't Get Timestamp Transform To Work For A Basic Vega Scatter Plot](https://discuss.elastic.co/t/cant-get-timestamp-transform-to-work-for-a-basic-vega-scatter-plot/264254)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 7\ **Last updated:** [February 18, 2021, 5:43pm UTC](https://discuss.elastic.co/t/cant-get-timestamp-transform-to-work-for-a-basic-vega-scatter-plot/264254 "2021-02-18T17:43:33Z")
Here is my Vega code { "$schema": "https://vega.github.io/schema/vega/v4.json", "description": "A basic scatter plot", "padding": 5, "data": { "name": "source", "url": { "%context%": "true", … --- ## [Share a dashboard to an external website without logging in](https://discuss.elastic.co/t/share-a-dashboard-to-an-external-website-without-logging-in/264739)
**Author:** [@Luis\_Pizarro](https://discuss.elastic.co/u/Luis_Pizarro)\ **Replies:** 1\ **Last updated:** [February 18, 2021, 5:35pm UTC](https://discuss.elastic.co/t/share-a-dashboard-to-an-external-website-without-logging-in/264739 "2021-02-18T17:35:03Z")
I am trying to share a kibana dashboard through embed code but repeatedly it asks for access attached to it. \ \ \ \Tutorial de HTML para dummies\ \ **Author:** [@sastorsl](https://discuss.elastic.co/u/sastorsl)\ **Replies:** 1\ **Last updated:** [February 18, 2021, 5:27pm UTC](https://discuss.elastic.co/t/multiple-vs-one-filter-for-different-inputs/264696 "2021-02-18T17:27:17Z") In logstash we have multiple sources of input data - so we use conditionals on a document field (doc\_type) to apply the various filters. Is there any real difference or benefit between having one filter with conditional… --- ## [Kibana 7.11.0 kibana.pid en kibana.json not created in configured locations](https://discuss.elastic.co/t/kibana-7-11-0-kibana-pid-en-kibana-json-not-created-in-configured-locations/264694)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [February 18, 2021, 5:23pm UTC](https://discuss.elastic.co/t/kibana-7-11-0-kibana-pid-en-kibana-json-not-created-in-configured-locations/264694 "2021-02-18T17:23:47Z")
Hello, On our DV Elastic, we tested 7.11 and noticed the Kibana logs were no longer generated in the expected location. After some debuging, it seems the logs are written to the default path /var/log/kibana/kibana.log i… --- ## [Kibana alerting message with query results](https://discuss.elastic.co/t/kibana-alerting-message-with-query-results/264075)
**Author:** [@earlsanchez](https://discuss.elastic.co/u/earlsanchez)\ **Replies:** 6\ **Last updated:** [February 18, 2021, 5:19pm UTC](https://discuss.elastic.co/t/kibana-alerting-message-with-query-results/264075 "2021-02-18T17:19:08Z")
I have a Kibana monitor setup with a trigger and actions. In the actions email message I can email the alert query results for 1 document with these ctx parameters: - Hostname: {{ctx.results.0.hits.hits.0.\_source.host.n… --- ## [Data in my index](https://discuss.elastic.co/t/data-in-my-index/264688)
**Author:** [@Gharsa\_Khouloud](https://discuss.elastic.co/u/Gharsa_Khouloud)\ **Replies:** 1\ **Last updated:** [February 18, 2021, 5:15pm UTC](https://discuss.elastic.co/t/data-in-my-index/264688 "2021-02-18T17:15:23Z")
last day i created new index and also i manipulate that index with dashboard , but today when i wake up i didn't find any data i didn't find that index any explanation for that ??? --- ## [POST Url encoding: how do I encode portions of the URL?](https://discuss.elastic.co/t/post-url-encoding-how-do-i-encode-portions-of-the-url/264658)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 1\ **Last updated:** [February 18, 2021, 5:07pm UTC](https://discuss.elastic.co/t/post-url-encoding-how-do-i-encode-portions-of-the-url/264658 "2021-02-18T17:07:55Z")
With reference to the following documentation: In it, you can copy a POST Url. I would like to add this url to a file, and then tokenise parts of it so that it can be re-used across multiple runs of a Jenkins pipeline. … --- ## [Kibana - '?\_g=' and '&\_a=' Parameters in the Dashboards URL String](https://discuss.elastic.co/t/kibana-g-and-a-parameters-in-the-dashboards-url-string/264642)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 1\ **Last updated:** [February 18, 2021, 4:40pm UTC](https://discuss.elastic.co/t/kibana-g-and-a-parameters-in-the-dashboards-url-string/264642 "2021-02-18T16:40:51Z")
I'm struggling to find documentation on this, if I load up a dashboard their appears to be two query parameters we can add: '?\_g=' and '&\_a=' Currently I have a string like this on the end of my Kibana URL: /app/dashb… --- ## [Elasticsearch 7.10.2 Installation - “jdk “ ” was unexpected at this time”](https://discuss.elastic.co/t/elasticsearch-7-10-2-installation-jdk-was-unexpected-at-this-time/262355)
**Author:** [@dcenaculo](https://discuss.elastic.co/u/dcenaculo)\ **Replies:** 3\ **Last updated:** [February 18, 2021, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-2-installation-jdk-was-unexpected-at-this-time/262355 "2021-02-18T16:21:40Z")
Hello, I'm trying to install Elasticsearch on premises. I've unziped it and I can't start it from command line: C:\\Program Files\\elasticsearch-7.10.2\\bin\>elasticsearch.bat Files\\elasticsearch-7.10.2\\jdk"" was unexpected… --- ## [Everything is broken after upgrade to 7.11](https://discuss.elastic.co/t/everything-is-broken-after-upgrade-to-7-11/263973)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 14\ **Last updated:** [February 18, 2021, 4:17pm UTC](https://discuss.elastic.co/t/everything-is-broken-after-upgrade-to-7-11/263973 "2021-02-18T16:17:44Z")
After upgrade to 7.11 everything is broken: -Elastic-agent in Fleet stopped every agent; -Stack management won't open; -Trying to read logs in Discover gives an error: 'Wrapper@https://2e233a9cadac49f5b5e52ee324f8e04… --- ## [Unable to initialize Fleet - An internal server error occurred](https://discuss.elastic.co/t/unable-to-initialize-fleet-an-internal-server-error-occurred/264368)
**Author:** [@searchtool](https://discuss.elastic.co/u/searchtool)\ **Replies:** 9\ **Last updated:** [February 18, 2021, 4:09pm UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet-an-internal-server-error-occurred/264368 "2021-02-18T16:09:42Z")
Hi, I'm a bit at a los here, today i upgrade my 7.10.0 dev-cluster to 7.11.0 and when i go to fleet in kibana i get en nice red box "Unable to initialize Fleet - An internal server error occurred". Lets rewind a bit, i… --- ## [Filter on Alias](https://discuss.elastic.co/t/filter-on-alias/264463)
**Author:** [@Oscar\_Lopez](https://discuss.elastic.co/u/Oscar_Lopez)\ **Replies:** 4\ **Last updated:** [February 18, 2021, 3:42pm UTC](https://discuss.elastic.co/t/filter-on-alias/264463 "2021-02-18T15:42:04Z")
Good afternoon, at the moment I am investigating how to restrict the filters of the kibana boards by time, at the moment I have a query that works for the alias\_metricbeat of the index pattern metricbeat- \*, however I se… --- ## [Beats Certificate verification with ElasticSearch/Kibana](https://discuss.elastic.co/t/beats-certificate-verification-with-elasticsearch-kibana/264689)
**Author:** [@radu990](https://discuss.elastic.co/u/radu990)\ **Replies:** 0\ **Last updated:** [February 18, 2021, 10:39am UTC](https://discuss.elastic.co/t/beats-certificate-verification-with-elasticsearch-kibana/264689 "2021-02-18T10:39:16Z")
Hello, I have configured SSL on both Elasticsearch and Kibana, and I can connect ok to it via browser. However when trying to configure Beats (Winlogbeat, Filebeat) to work with certificates, I see the following under t… --- ## [Elasticsearch on AWS ECS Fargate](https://discuss.elastic.co/t/elasticsearch-on-aws-ecs-fargate/264596)
**Author:** [@Agron\_Demiraj](https://discuss.elastic.co/u/Agron_Demiraj)\ **Replies:** 6\ **Last updated:** [February 18, 2021, 3:36pm UTC](https://discuss.elastic.co/t/elasticsearch-on-aws-ecs-fargate/264596 "2021-02-18T15:36:45Z")
Hi. I apologize if this is a duplicate of another thread, but so far I did not see a similar case. I am trying to deploy ES on ECS with default image from docker.elastic.co/elasticsearch/elasticsearch:7.11.1 but it is f… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1547) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1549)