# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1708

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1709

---

## [Handle Sepcial char in elasticsearch](https://discuss.elastic.co/t/handle-sepcial-char-in-elasticsearch/254785)

<div class="topic-metadata">

**Author:** [@Shivesh\_Srivastava](https://discuss.elastic.co/u/Shivesh_Srivastava)\
**Replies:** 0\
**Last updated:** [November 9, 2020, 3:46pm UTC](https://discuss.elastic.co/t/handle-sepcial-char-in-elasticsearch/254785 "2020-11-09T15:46:04Z")

</div>

My Elasticsearch version is 6.8.3 and I am trying to fetch data against the Lucene query which contains filter value as \\\\\\\\\*\\\\abc$ I have some code, which handles the special characters and the above filter value is c…

---

## [Kibana doesnt show anything from local tile server](https://discuss.elastic.co/t/kibana-doesnt-show-anything-from-local-tile-server/254770)

<div class="topic-metadata">

**Author:** [@rklar](https://discuss.elastic.co/u/rklar)\
**Replies:** 1\
**Last updated:** [November 9, 2020, 3:45pm UTC](https://discuss.elastic.co/t/kibana-doesnt-show-anything-from-local-tile-server/254770 "2020-11-09T15:45:07Z")

</div>

After i enabled encryption in elastic (xpack), Kibana doesnt show any maps from our tile server, if i disable xpack maps are working just fine. Is there something that i need to configure/enable on tile server side? Im…

---

## [Multiple Logstash instances as Kafka inputs](https://discuss.elastic.co/t/multiple-logstash-instances-as-kafka-inputs/254784)

<div class="topic-metadata">

**Author:** [@Fran\_Raknic](https://discuss.elastic.co/u/Fran_Raknic)\
**Replies:** 0\
**Last updated:** [November 9, 2020, 3:44pm UTC](https://discuss.elastic.co/t/multiple-logstash-instances-as-kafka-inputs/254784 "2020-11-09T15:44:24Z")

</div>

I am having trouble in making multiple Logstash instances read from a single Kafka topic. The Logstash instances are all on the same server, together with Kafka and Zookeeper. When I check the topic with kafka-console-c…

---

## [Pipeline aborted due to EOF in aggregate maps file](https://discuss.elastic.co/t/pipeline-aborted-due-to-eof-in-aggregate-maps-file/254783)

<div class="topic-metadata">

**Author:** [@lens](https://discuss.elastic.co/u/lens)\
**Replies:** 0\
**Last updated:** [November 9, 2020, 3:42pm UTC](https://discuss.elastic.co/t/pipeline-aborted-due-to-eof-in-aggregate-maps-file/254783 "2020-11-09T15:42:49Z")

</div>

We have had several cases recently of logstash not being able to restart all of its configured pipelines. We are using the aggregation filter and it should write out any aggregation maps that are in-progress when logsta…

---

## [Elasticsearch cluster](https://discuss.elastic.co/t/elasticsearch-cluster/252379)

<div class="topic-metadata">

**Author:** [@bognad](https://discuss.elastic.co/u/bognad)\
**Replies:** 6\
**Last updated:** [November 9, 2020, 3:32pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster/252379 "2020-11-09T15:32:46Z")

</div>

Good day! I am having difficulty to create 2 nodes cluster, each nodes has different "cluster.uuid". Why? How add node to cluster? Node A cluster.name: "elk-cluster" network.host: 0.0.0.0 node.name: primary cluster…

---

## [Convert scientific notation (ex: 7.533992951114973E-4) to float](https://discuss.elastic.co/t/convert-scientific-notation-ex-7-533992951114973e-4-to-float/254482)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [November 9, 2020, 3:08pm UTC](https://discuss.elastic.co/t/convert-scientific-notation-ex-7-533992951114973e-4-to-float/254482 "2020-11-09T15:08:35Z")

</div>

Im trying to add the actual and typical field to the ML alerts on watcher, is there a method in painless to convert scientific notation to float? "actual" : \[ 7.533992951114973E-4 …

---

## [Indices gone after upgrade (7.8.0 to 7.9.1)](https://discuss.elastic.co/t/indices-gone-after-upgrade-7-8-0-to-7-9-1/254149)

<div class="topic-metadata">

**Author:** [@rcz](https://discuss.elastic.co/u/rcz)\
**Replies:** 5\
**Last updated:** [November 9, 2020, 3:05pm UTC](https://discuss.elastic.co/t/indices-gone-after-upgrade-7-8-0-to-7-9-1/254149 "2020-11-09T15:05:55Z")

</div>

Hello, I'm in a bit of a pickle. A lot of my indices are gone after an upgrade. I have a Logstash pumping in data into an alias. The alias still pointed to the same index name after upgrading, but the old data was gon…

---

## [Monitoring logs from both inside the container and ELK](https://discuss.elastic.co/t/monitoring-logs-from-both-inside-the-container-and-elk/254772)

<div class="topic-metadata">

**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\
**Replies:** 0\
**Last updated:** [November 9, 2020, 2:49pm UTC](https://discuss.elastic.co/t/monitoring-logs-from-both-inside-the-container-and-elk/254772 "2020-11-09T14:49:58Z")

</div>

Hi, i have recently added a gelf input option to my elastic stack for docker container log monitoring. When i do this i can monitor logs from elk just fine but can't see them from inside the container. Is there a way to …

---

## [Need help on "sum by group" aggregations on simple doc structure](https://discuss.elastic.co/t/need-help-on-sum-by-group-aggregations-on-simple-doc-structure/254672)

<div class="topic-metadata">

**Author:** [@ElasBon](https://discuss.elastic.co/u/ElasBon)\
**Replies:** 4\
**Last updated:** [November 9, 2020, 2:46pm UTC](https://discuss.elastic.co/t/need-help-on-sum-by-group-aggregations-on-simple-doc-structure/254672 "2020-11-09T14:46:56Z")

</div>

I'm using es 7.8.1, my data are pojo records like this: { "timestamp": "2020-11-07 08:00:00", "lineId": 532, "sn": "A2600101000005DF", "upBytes": 5927, "dlBytes": 13706 } …

---

## [TSVB derivative returns 0 if previous interval was 0](https://discuss.elastic.co/t/tsvb-derivative-returns-0-if-previous-interval-was-0/252809)

<div class="topic-metadata">

**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\
**Replies:** 3\
**Last updated:** [November 9, 2020, 2:41pm UTC](https://discuss.elastic.co/t/tsvb-derivative-returns-0-if-previous-interval-was-0/252809 "2020-11-09T14:41:30Z")

</div>

This dataset has values recorded on a Monday to Friday, and no data at weekends. The graph plots data per day/24 hours. I've plotted a cumulative sum (blue line) and the value changes each weekday; as there is no data r…

---

## [Logstash pipelines does not take filter](https://discuss.elastic.co/t/logstash-pipelines-does-not-take-filter/254769)

<div class="topic-metadata">

**Author:** [@Andex](https://discuss.elastic.co/u/Andex)\
**Replies:** 0\
**Last updated:** [November 9, 2020, 2:34pm UTC](https://discuss.elastic.co/t/logstash-pipelines-does-not-take-filter/254769 "2020-11-09T14:34:48Z")

</div>

Hi, i have filebeat configured to send jboss log on Logstash. On logstash i have input.conf which gets me logs from filebeat, an output.conf to send log on elasticsearch and a jboss-filter.conf to parse the log. I see…

---

## [How to show year only in X-axis, Kibana using date histogram?](https://discuss.elastic.co/t/how-to-show-year-only-in-x-axis-kibana-using-date-histogram/254649)

<div class="topic-metadata">

**Author:** [@Mike\_Storm](https://discuss.elastic.co/u/Mike_Storm)\
**Replies:** 1\
**Last updated:** [November 9, 2020, 2:20pm UTC](https://discuss.elastic.co/t/how-to-show-year-only-in-x-axis-kibana-using-date-histogram/254649 "2020-11-09T14:20:50Z")

</div>

how can I display the year only on a date histogram, I would like to display the years, but it seems i have intervals, please see below screenshot however I tried Terms aggregation here's the result, I want to achie…

---

## [Kibana development mode, yarn installation](https://discuss.elastic.co/t/kibana-development-mode-yarn-installation/254753)

<div class="topic-metadata">

**Author:** [@omerf](https://discuss.elastic.co/u/omerf)\
**Replies:** 1\
**Last updated:** [November 9, 2020, 2:14pm UTC](https://discuss.elastic.co/t/kibana-development-mode-yarn-installation/254753 "2020-11-09T14:14:57Z")

</div>

Hi, Last week I worked fine on the kibana dev, and now having trouble running " o yarn es snapshot --license trial "

---

## [Boolean similarity - is there a way to remove duplicates](https://discuss.elastic.co/t/boolean-similarity-is-there-a-way-to-remove-duplicates/253809)

<div class="topic-metadata">

**Author:** [@Miljenko\_Norsic](https://discuss.elastic.co/u/Miljenko_Norsic)\
**Replies:** 3\
**Last updated:** [November 9, 2020, 1:42pm UTC](https://discuss.elastic.co/t/boolean-similarity-is-there-a-way-to-remove-duplicates/253809 "2020-11-09T13:42:26Z")

</div>

Given the following index: { "mappings": { "properties": { "field1": { "type": "text", "analyzer": "whitespace", "similarity": "boolean" }, "field…

---

## [Can filebeat exclude a specific container name from hints-based autodiscover?](https://discuss.elastic.co/t/can-filebeat-exclude-a-specific-container-name-from-hints-based-autodiscover/254577)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 2\
**Last updated:** [November 9, 2020, 1:54pm UTC](https://discuss.elastic.co/t/can-filebeat-exclude-a-specific-container-name-from-hints-based-autodiscover/254577 "2020-11-09T13:54:20Z")

</div>

In a hints-based autodiscover configuration, can filebeat exclude all instances of a specific container name from discovery, even if co.elastic.logs/enabled: 'true' is set for the pod? My use case is that I have a fileb…

---

## [Add Clock to Ops Dashboard](https://discuss.elastic.co/t/add-clock-to-ops-dashboard/254684)

<div class="topic-metadata">

**Author:** [@Brandon\_Wagoner](https://discuss.elastic.co/u/Brandon_Wagoner)\
**Replies:** 3\
**Last updated:** [November 9, 2020, 1:52pm UTC](https://discuss.elastic.co/t/add-clock-to-ops-dashboard/254684 "2020-11-09T13:52:21Z")

</div>

Is there a way to add a clock or several clocks (multiple time zones) to a kibana dashboard for display in an operations center?

---

## [Grok regex too long](https://discuss.elastic.co/t/grok-regex-too-long/254763)

<div class="topic-metadata">

**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\
**Replies:** 0\
**Last updated:** [November 9, 2020, 1:40pm UTC](https://discuss.elastic.co/t/grok-regex-too-long/254763 "2020-11-09T13:40:02Z")

</div>

Hello there. I am trying to apply a really long regex to a field in a log. I keep getting an error and logstash doesn't even start. The regex is made up of several smaller regexes connected with |, like this: pattern\_de…

---

## [Cannot authenticate with kibana user to the stack after I enabled security 7.7.1](https://discuss.elastic.co/t/cannot-authenticate-with-kibana-user-to-the-stack-after-i-enabled-security-7-7-1/254307)

<div class="topic-metadata">

**Author:** [@txmrlevine](https://discuss.elastic.co/u/txmrlevine)\
**Replies:** 4\
**Last updated:** [November 9, 2020, 1:25pm UTC](https://discuss.elastic.co/t/cannot-authenticate-with-kibana-user-to-the-stack-after-i-enabled-security-7-7-1/254307 "2020-11-09T13:25:10Z")

</div>

elasticsearch.yml sec setup. xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate xpack.security.transport.ssl.keystore.path: elastic-certi…

---

## [Kibana alerts (cluster health yellow) on new index creation](https://discuss.elastic.co/t/kibana-alerts-cluster-health-yellow-on-new-index-creation/254493)

<div class="topic-metadata">

**Author:** [@JoranDox](https://discuss.elastic.co/u/JoranDox)\
**Replies:** 4\
**Last updated:** [November 9, 2020, 1:16pm UTC](https://discuss.elastic.co/t/kibana-alerts-cluster-health-yellow-on-new-index-creation/254493 "2020-11-09T13:16:02Z")

</div>

(not sure if I should put this in elasticsearch or kibana topic) Setup: logstash -\> elasticsearch, index name is based on timestamp of event, so every day around midnight we get a new index. The issue is twofold: ela…

---

## [How to auto apply index policy to newly created indexes in AWS Elasticsearch](https://discuss.elastic.co/t/how-to-auto-apply-index-policy-to-newly-created-indexes-in-aws-elasticsearch/254734)

<div class="topic-metadata">

**Author:** [@nitin194](https://discuss.elastic.co/u/nitin194)\
**Replies:** 2\
**Last updated:** [November 9, 2020, 1:03pm UTC](https://discuss.elastic.co/t/how-to-auto-apply-index-policy-to-newly-created-indexes-in-aws-elasticsearch/254734 "2020-11-09T13:03:49Z")

</div>

We push Nginx logs to AWS Elasticsearch using Filebeat and Logstash. We have created an index pattern with the name nginx-error-logs\* & nginx-access-logs\*. We can see in Kibana that daily new indices are being created ba…

---

## [Trouble when upgrading ES from 7.3.2 to 7.9.3](https://discuss.elastic.co/t/trouble-when-upgrading-es-from-7-3-2-to-7-9-3/254550)

<div class="topic-metadata">

**Author:** [@yetanotheruser](https://discuss.elastic.co/u/yetanotheruser)\
**Replies:** 3\
**Last updated:** [November 9, 2020, 12:47pm UTC](https://discuss.elastic.co/t/trouble-when-upgrading-es-from-7-3-2-to-7-9-3/254550 "2020-11-09T12:47:54Z")

</div>

I'm trying to upgrade an ES cluster from 7.3.2 to 7.9.3. I'm configuring ES using Ansible and make REST API calls using Ansible's get\_url module. After installation/upgrade and start of ES, it tries to make REST API call…

---

## [Csv response from Dev tool search query](https://discuss.elastic.co/t/csv-response-from-dev-tool-search-query/254744)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 1\
**Last updated:** [November 9, 2020, 12:30pm UTC](https://discuss.elastic.co/t/csv-response-from-dev-tool-search-query/254744 "2020-11-09T12:30:45Z")

</div>

Hi All, Is there a way to get csv response from Get Search call. We are able to get json response, However our requirement is to get response in csv format.

---

## [Index expansion ratio](https://discuss.elastic.co/t/index-expansion-ratio/254746)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 0\
**Last updated:** [November 9, 2020, 11:52am UTC](https://discuss.elastic.co/t/index-expansion-ratio/254746 "2020-11-09T11:52:02Z")

</div>

Can you please share the latest details on index expansion ratio as in the recent years I see there are many improvements (7.x version) to optimize the index storage size? Usually I used to consider 0.8 to 1.4 as index …

---

## [Problem displaying points on maps](https://discuss.elastic.co/t/problem-displaying-points-on-maps/254190)

<div class="topic-metadata">

**Author:** [@grian](https://discuss.elastic.co/u/grian)\
**Replies:** 3\
**Last updated:** [November 9, 2020, 10:56am UTC](https://discuss.elastic.co/t/problem-displaying-points-on-maps/254190 "2020-11-09T10:56:05Z")

</div>

hi everyone, I would have a problem with the visualization of the points on the map, when I reduce the zoom you no longer see different points as if they were truncated as soon as I zoom back to see them. I use Kibana ve…

---

## [Bucketed aggregation on nested fields](https://discuss.elastic.co/t/bucketed-aggregation-on-nested-fields/254729)

<div class="topic-metadata">

**Author:** [@Matteo\_Grolla](https://discuss.elastic.co/u/Matteo_Grolla)\
**Replies:** 0\
**Last updated:** [November 9, 2020, 10:17am UTC](https://discuss.elastic.co/t/bucketed-aggregation-on-nested-fields/254729 "2020-11-09T10:17:28Z")

</div>

Good morning, I need to compute a bucketed aggregation on nested fields where the buckets correspond to the nested objects. Can you tell me if it’s possible at all and in case help me with the query? For clarity I ref…

---

## [Restart Elasticsearch cluster](https://discuss.elastic.co/t/restart-elasticsearch-cluster/254026)

<div class="topic-metadata">

**Author:** [@WLM](https://discuss.elastic.co/u/WLM)\
**Replies:** 8\
**Last updated:** [November 9, 2020, 9:54am UTC](https://discuss.elastic.co/t/restart-elasticsearch-cluster/254026 "2020-11-09T09:54:24Z")

</div>

Hello I have 6 elasticsearch instanse are runnig in docker containers on 3 physical node. When one of the elasticsearch instanse is restrating, all of indexs become inaccessible. How i can fix it? Config of elasticsearc…

---

## [400 Bad Request when trying to reindex Magento 2](https://discuss.elastic.co/t/400-bad-request-when-trying-to-reindex-magento-2/254688)

<div class="topic-metadata">

**Author:** [@StruggleSnuggl3](https://discuss.elastic.co/u/StruggleSnuggl3)\
**Replies:** 2\
**Last updated:** [November 9, 2020, 9:54am UTC](https://discuss.elastic.co/t/400-bad-request-when-trying-to-reindex-magento-2/254688 "2020-11-09T09:54:07Z")

</div>

I have a Magento 2 store running with Elasticsearch 7.x and Litemage. I’m getting the following error when trying to run an index job on Magento 2: Design Config Grid index has been rebuilt successfully in 00:00:00 Cus…

---

## [Unable to respond with a custom error payload through the Kibana NP](https://discuss.elastic.co/t/unable-to-respond-with-a-custom-error-payload-through-the-kibana-np/254573)

<div class="topic-metadata">

**Author:** [@BitBite](https://discuss.elastic.co/u/BitBite)\
**Replies:** 3\
**Last updated:** [November 9, 2020, 9:43am UTC](https://discuss.elastic.co/t/unable-to-respond-with-a-custom-error-payload-through-the-kibana-np/254573 "2020-11-09T09:43:43Z")

</div>

Within the Kibana NP (Node.js), the following methods are provided through dependency injection in the route handlers for the Response Object. { ok: \[Function: ok\], accepted: \[Function: accepted\], noContent:…

---

## [ElasticsearchSecurityException\[failed to load SSL configuration \[xpack.security.http.ssl\]\]](https://discuss.elastic.co/t/elasticsearchsecurityexception-failed-to-load-ssl-configuration-xpack-security-http-ssl/254722)

<div class="topic-metadata">

**Author:** [@Syaiful\_Amin](https://discuss.elastic.co/u/Syaiful_Amin)\
**Replies:** 1\
**Last updated:** [November 9, 2020, 9:28am UTC](https://discuss.elastic.co/t/elasticsearchsecurityexception-failed-to-load-ssl-configuration-xpack-security-http-ssl/254722 "2020-11-09T09:28:14Z")

</div>

\[2020-11-09T16:45:17,375\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[es-1\] uncaught exception in thread \[main\] org.elasticsearch.bootstrap.StartupException: ElasticsearchSecurityException\[failed to load SSL co…

---

## [Elastic agent & fleet](https://discuss.elastic.co/t/elastic-agent-fleet/254691)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 2\
**Last updated:** [November 9, 2020, 8:46am UTC](https://discuss.elastic.co/t/elastic-agent-fleet/254691 "2020-11-09T08:46:14Z")

</div>

Hi there, instead of different kind of beats we are going to use agent & fleet. Concerning fleet I have a question: How does it work together with Kibana spaces? In a central environment, where different projects share …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1707)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1709)
