# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1664 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1665 --- ## [Visualizations based on values](https://discuss.elastic.co/t/visualizations-based-on-values/257466)
**Author:** [@Niranjan\_Acharya](https://discuss.elastic.co/u/Niranjan_Acharya)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 11:14am UTC](https://discuss.elastic.co/t/visualizations-based-on-values/257466 "2020-12-03T11:14:53Z")
Hello all I am trying to create a visualization based on AWS logs, where I want to count the number of hits on a specific host. the host information is within the json as below. I tried all possible ways, but I cannot … --- ## [Kibana markdown hyperlink](https://discuss.elastic.co/t/kibana-markdown-hyperlink/257488)
**Author:** [@Tlm\_Konstantinos](https://discuss.elastic.co/u/Tlm_Konstantinos)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 11:04am UTC](https://discuss.elastic.co/t/kibana-markdown-hyperlink/257488 "2020-12-03T11:04:54Z")
Hi community I'm having the following issue. I have installed wazuh through docker on a machine and created a hyperlink in a markdown to a visualization(the hyperlink looks like localhost/../../). Im accessing the kiban… --- ## [Disable Kibana login for user elastic](https://discuss.elastic.co/t/disable-kibana-login-for-user-elastic/257365)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 10:52am UTC](https://discuss.elastic.co/t/disable-kibana-login-for-user-elastic/257365 "2020-12-03T10:52:47Z")
Hi Team, Could you please let me know if there are any tweaks that can be done is elasticsearch or kibana to only disable kibana UI login for user elastic. Currently we are using user elastic in beats to send the logs t… --- ## [LogLevel DEBUG and INFO not required](https://discuss.elastic.co/t/loglevel-debug-and-info-not-required/257484)
**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 10:07am UTC](https://discuss.elastic.co/t/loglevel-debug-and-info-not-required/257484 "2020-12-03T10:07:27Z")
We do not need DEBUG and INFO logs coming into ELK but only for one or more components e.g. hostname and index name. From below link add exclude\_lines for DEBUG and INFO - Exclude\_lines: \[‘^DEBUG’, ‘^INFO’\] but to inclu… --- ## [Logstash mutate error for hostname](https://discuss.elastic.co/t/logstash-mutate-error-for-hostname/257474)
**Author:** [@aaron111com](https://discuss.elastic.co/u/aaron111com)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 10:02am UTC](https://discuss.elastic.co/t/logstash-mutate-error-for-hostname/257474 "2020-12-03T10:02:15Z")
hi I meet a weird problem, I want to parse my hostname is "alexworkstation-alex", I wanna get the string "alexworkstation" , so I split the hostname by "-" . but I can't add\_field . this is follow with official do… --- ## [Mapping Issues](https://discuss.elastic.co/t/mapping-issues/257461)
**Author:** [@muaz761](https://discuss.elastic.co/u/muaz761)\ **Replies:** 9\ **Last updated:** [December 3, 2020, 9:56am UTC](https://discuss.elastic.co/t/mapping-issues/257461 "2020-12-03T09:56:10Z")
Hey, I am facing a problem with elastic search mapping. currently, my elastic search version is 1.7.2. When I index my data in a cluster it workes perfectly. But when I want to map it for search purposes it gives me an … --- ## [Logstash is not indexing data to elasticsearch](https://discuss.elastic.co/t/logstash-is-not-indexing-data-to-elasticsearch/257470)
**Author:** [@Aryaman\_Gupta](https://discuss.elastic.co/u/Aryaman_Gupta)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 9:52am UTC](https://discuss.elastic.co/t/logstash-is-not-indexing-data-to-elasticsearch/257470 "2020-12-03T09:52:58Z")
I am not able index data from logstash to elasticsearch, hence I am not able to view the data index at the kibana UI. This issue I saw only when, running the logstash command from the php file, I guess it's www-data use… --- ## [Why is reindex from remote constantly slowing down on large indices?](https://discuss.elastic.co/t/why-is-reindex-from-remote-constantly-slowing-down-on-large-indices/257354)
**Author:** [@Dmitry\_O](https://discuss.elastic.co/u/Dmitry_O)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 9:47am UTC](https://discuss.elastic.co/t/why-is-reindex-from-remote-constantly-slowing-down-on-large-indices/257354 "2020-12-03T09:47:54Z")
Hey, I have 2 clusters: Source cluster: 5.6 version, 3 node with 126 GB RAM on each. Dest cluster: 7.9 version, 3 node with 6 GB RAM on each and ES\_JAVA\_OPTS -Xms3g -Xmx3g I have ~60 indices of different sizes from (… --- ## [ElasticSearch running, problems connecting (ipTables problem)](https://discuss.elastic.co/t/elasticsearch-running-problems-connecting-iptables-problem/257468)
**Author:** [@Mikel\_U](https://discuss.elastic.co/u/Mikel_U)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 9:35am UTC](https://discuss.elastic.co/t/elasticsearch-running-problems-connecting-iptables-problem/257468 "2020-12-03T09:35:20Z")
Hi, I want to create 3 nodes of ES and Kibana in production network. I would like to see ES in local network (site) and Kibana from Internet. My first (master) node is running. If I put network.host: 0.0.0.0: I can c… --- ## [Optimizing Aggregation Performance](https://discuss.elastic.co/t/optimizing-aggregation-performance/257477)
**Author:** [@muhammad\_ayoub](https://discuss.elastic.co/u/muhammad_ayoub)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 9:34am UTC](https://discuss.elastic.co/t/optimizing-aggregation-performance/257477 "2020-12-03T09:34:25Z")
Hi all, firstly, please excuse me if my questione is not very well formed as I am new to elasticsearch and not very familiar with what details I should list. We have an elasticearch cluster with three nodes where all o… --- ## [Specify extra fields in modules (e.g Elasticsearch)](https://discuss.elastic.co/t/specify-extra-fields-in-modules-e-g-elasticsearch/255948)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 9:09am UTC](https://discuss.elastic.co/t/specify-extra-fields-in-modules-e-g-elasticsearch/255948 "2020-12-03T09:09:48Z")
I have several log type inputs in Filebeat, these specify one or more extra fields. E.g. a.yml for logs from app 'A', b.yml for logs from app 'B'. The extra field 'index' is set to 'index\_A' and index\_B' respectively. L… --- ## [java.lang.StackOverflowError: null](https://discuss.elastic.co/t/java-lang-stackoverflowerror-null/257295)
**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 8:35am UTC](https://discuss.elastic.co/t/java-lang-stackoverflowerror-null/257295 "2020-12-03T08:35:37Z")
elasticsearch version : 6.7.1 \[search\]\[T#65\]\], exiting java.lang.StackOverflowError: null at java.util.stream.StreamOpFlag.fromCharacteristics(StreamOpFlag.java:733) ~\[?:1.8.0\_201\] at java.util.stream.StreamSupport.st… --- ## [Weights for synonyms](https://discuss.elastic.co/t/weights-for-synonyms/257467)
**Author:** [@TatianaParshina](https://discuss.elastic.co/u/TatianaParshina)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 8:31am UTC](https://discuss.elastic.co/t/weights-for-synonyms/257467 "2020-12-03T08:31:58Z")
Hi, Is there a way to provide weight/boost for synonyms? For example, I have synonyms: \["laptop", "notebook"\]. I want that score of "laptop" should be more then score of "notebook" and I want to specify this score. I h… --- ## [IP filtering and Security audit not working "Trial License"](https://discuss.elastic.co/t/ip-filtering-and-security-audit-not-working-trial-license/257185)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 8:07am UTC](https://discuss.elastic.co/t/ip-filtering-and-security-audit-not-working-trial-license/257185 "2020-12-03T08:07:55Z")
Hello, I am using trial License to try the IP filtering and Security audit (using version 8.0.0), but it's not working. I added this configuration to my elasticsearch.yml file: xpack.security.audit.enabled: true xpa… --- ## [I want to see only outbound traffic of VPC Flow log in kibana](https://discuss.elastic.co/t/i-want-to-see-only-outbound-traffic-of-vpc-flow-log-in-kibana/257458)
**Author:** [@sujeetjha](https://discuss.elastic.co/u/sujeetjha)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 6:55am UTC](https://discuss.elastic.co/t/i-want-to-see-only-outbound-traffic-of-vpc-flow-log-in-kibana/257458 "2020-12-03T06:55:43Z")
I want to see only outbound traffic of VPC FLow Log in kibana. Currently getting all inbound and outbound and I only want to see outbound traffic in kibana. this is a long pattern of VPC, I am not able to figure out how… --- ## [Find logs location](https://discuss.elastic.co/t/find-logs-location/257355)
**Author:** [@Mohith\_Vegi](https://discuss.elastic.co/u/Mohith_Vegi)\ **Replies:** 5\ **Last updated:** [December 3, 2020, 5:21am UTC](https://discuss.elastic.co/t/find-logs-location/257355 "2020-12-03T05:21:16Z")
Hi, Where can I find the file path of the filebeats logs. Please help me with this... Thanks! --- ## [Logstash got error message "no implicit conversion of nil into String"](https://discuss.elastic.co/t/logstash-got-error-message-no-implicit-conversion-of-nil-into-string/257440)
**Author:** [@algo\_msh](https://discuss.elastic.co/u/algo_msh)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 3:11am UTC](https://discuss.elastic.co/t/logstash-got-error-message-no-implicit-conversion-of-nil-into-string/257440 "2020-12-03T03:11:21Z")
\[2020-12-03T01:22:03,474\]\[ERROR\]\[logstash.outputs.elasticsearch\] An unknown error occurred sending a bulk request to Elasticsearch. We will retry indefinitely {:error\_message=\>"no implicit conversion of nil into String",… --- ## [Too many scroll error](https://discuss.elastic.co/t/too-many-scroll-error/255919)
**Author:** [@Amy\_Jonson](https://discuss.elastic.co/u/Amy_Jonson)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 2:48am UTC](https://discuss.elastic.co/t/too-many-scroll-error/255919 "2020-12-03T02:48:28Z")
Hi, We encountered an error "Trying to create too many scroll context". What is the possible trigger of this error and how should we avoid it. We only resolve this issue when we restarted the ES. Thanks --- ## [Elasticsearch Head - Find and Remove Duplicate Documents](https://discuss.elastic.co/t/elasticsearch-head-find-and-remove-duplicate-documents/257438)
**Author:** [@test\_tester](https://discuss.elastic.co/u/test_tester)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 2:39am UTC](https://discuss.elastic.co/t/elasticsearch-head-find-and-remove-duplicate-documents/257438 "2020-12-03T02:39:29Z")
Hi All, Background: Inside my application, users noticed duplicate transactions -\> investigating deeper, we noticed that we have duplicates in our elasticsearch database, likely because we did not restart our logstash/… --- ## [ILM: issue while trying to set replica:0](https://discuss.elastic.co/t/ilm-issue-while-trying-to-set-replica-0/257424)
**Author:** [@ppuschmann](https://discuss.elastic.co/u/ppuschmann)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 1:43am UTC](https://discuss.elastic.co/t/ilm-issue-while-trying-to-set-replica-0/257424 "2020-12-03T01:43:29Z")
We're using the following ILM-policy with success. PUT \_ilm/policy/technical { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "set\_priority": { "priorit… --- ## [Logstash date format - Converting timestamp without timezone to timetamp with timezone](https://discuss.elastic.co/t/logstash-date-format-converting-timestamp-without-timezone-to-timetamp-with-timezone/257426)
**Author:** [@jasoninmel](https://discuss.elastic.co/u/jasoninmel)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 12:32am UTC](https://discuss.elastic.co/t/logstash-date-format-converting-timestamp-without-timezone-to-timetamp-with-timezone/257426 "2020-12-03T00:32:24Z")
I got an event timestamp field without timezone stored in Elasticsearch as follows; "open-date": "2016-05-28T00:00:00" This time is in Australia/Melbourne timezone (AEDT/AEST). I used the following filter to covert … --- ## [Setting hostname for specific log files being shipped with filebeat](https://discuss.elastic.co/t/setting-hostname-for-specific-log-files-being-shipped-with-filebeat/257431)
**Author:** [@afc](https://discuss.elastic.co/u/afc)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 12:04am UTC](https://discuss.elastic.co/t/setting-hostname-for-specific-log-files-being-shipped-with-filebeat/257431 "2020-12-03T00:04:24Z")
Greetings! I've been setting up a centralized log server to collect data from our servers, switches, access points etc. I have a folder on the log server that contains apache log files from a remote machine (/var/log/pr… --- ## [Logstash Java filter plugin example "./gradlew gem" error](https://discuss.elastic.co/t/logstash-java-filter-plugin-example-gradlew-gem-error/257110)
**Author:** [@lakechat](https://discuss.elastic.co/u/lakechat)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 12:18am UTC](https://discuss.elastic.co/t/logstash-java-filter-plugin-example-gradlew-gem-error/257110 "2020-12-03T00:18:57Z")
I was following Elasticsearch document (https://www.elastic.co/guide/en/logstash/current/java-filter-plugin.html) to write a Java filter plugin for Logtash. Somehow, I could not even get the provided example work. I stuc… --- ## [Penalize multiple fuzzy matches from one word](https://discuss.elastic.co/t/penalize-multiple-fuzzy-matches-from-one-word/257430)
**Author:** [@Tianyi\_Mao](https://discuss.elastic.co/u/Tianyi_Mao)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 11:25pm UTC](https://discuss.elastic.co/t/penalize-multiple-fuzzy-matches-from-one-word/257430 "2020-12-02T23:25:57Z")
Suppose I am doing a multi\_match query with "good brain", on the following documents: a good brain is so fun some rain on grain and brain drain brain brain brain brain By adjusting the k1 value of BM25 scoring, one can… --- ## [Error: Cannot allocate memory](https://discuss.elastic.co/t/error-cannot-allocate-memory/257423)
**Author:** [@manunc](https://discuss.elastic.co/u/manunc)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 11:06pm UTC](https://discuss.elastic.co/t/error-cannot-allocate-memory/257423 "2020-12-02T23:06:23Z")
Hello, I am faced to an issue since a long time without finding the solution. I have a dedicated server with 12 Gb RAM but I can only allocate to Logstash 2Gb otherwise the process fall into an error. It seems linked t… --- ## [How To create a table in hive](https://discuss.elastic.co/t/how-to-create-a-table-in-hive/257310)
**Author:** [@irfangk1](https://discuss.elastic.co/u/irfangk1)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 6:59am UTC](https://discuss.elastic.co/t/how-to-create-a-table-in-hive/257310 "2020-12-02T06:59:42Z")
Hi, I am trying to create a ext. table in hive as mention is Elsatic doc. i need to know what are the below properties are STORED BY 'org.elasticsearch.hadoop.hive.EsStorageHandler' TBLPROPERTIES('es.resource' = 'radi… --- ## [NEST: Performing retries with a single node](https://discuss.elastic.co/t/nest-performing-retries-with-a-single-node/255373)
**Author:** [@knafve](https://discuss.elastic.co/u/knafve)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 10:15pm UTC](https://discuss.elastic.co/t/nest-performing-retries-with-a-single-node/255373 "2020-12-02T22:15:43Z")
I am using NEST to perform queries towards an Elasticsearch 6-cluster. The Elasticsearch cluster consists of a couple of nodes, but it's running behind a firewall/loadbalancer so from the client perspective it appears as… --- ## [Enable sub feature rules for user & rules](https://discuss.elastic.co/t/enable-sub-feature-rules-for-user-rules/257334)
**Author:** [@tacohen](https://discuss.elastic.co/u/tacohen)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 10:16am UTC](https://discuss.elastic.co/t/enable-sub-feature-rules-for-user-rules/257334 "2020-12-02T10:16:18Z")
Hi everyone, I need your help with user & rules. i have ELK 7.6 and I'm trying to understand how to define "sub feature rules" for Users. the idea is to enable "sub feature rules" like: "save queries" which required pri… --- ## [Access Elastic via .NET](https://discuss.elastic.co/t/access-elastic-via-net/257116)
**Author:** [@Amit5](https://discuss.elastic.co/u/Amit5)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 10:11pm UTC](https://discuss.elastic.co/t/access-elastic-via-net/257116 "2020-12-02T22:11:54Z")
Hi everyone I need to query our elastic search and pull some data from it. I read about about couple of ways to to it. What I tried so far is to Use NEST to query elastic: var response = client.Get(10, idx =\> idx.Inde… --- ## [Elasticsearch service suddenly stop after few minutes started](https://discuss.elastic.co/t/elasticsearch-service-suddenly-stop-after-few-minutes-started/257146)
**Author:** [@Junedi\_Rajagukguk](https://discuss.elastic.co/u/Junedi_Rajagukguk)\ **Replies:** 10\ **Last updated:** [December 2, 2020, 10:10pm UTC](https://discuss.elastic.co/t/elasticsearch-service-suddenly-stop-after-few-minutes-started/257146 "2020-12-02T22:10:38Z")
HI, i built cluster elasticserach which is 1 master, 1 logstash, 1 elastic i found this error when i start elasticservice in logstash server. and actualy i have another problem, my index always reset every 2 days(some… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1663) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1665)