# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1716 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1717 --- ## [How to replace Non-breaking space](https://discuss.elastic.co/t/how-to-replace-non-breaking-space/254249)
**Author:** [@Chetan\_Ambi](https://discuss.elastic.co/u/Chetan_Ambi)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 10:41am UTC](https://discuss.elastic.co/t/how-to-replace-non-breaking-space/254249 "2020-11-04T10:41:22Z")
Could someone please help how to to replace Non-breaking space with regular space. I referred this but its not working. GET /\_analyze { "tokenizer": "keyword", "char\_filter": \[ { "type": "mapping", … --- ## [Unexpected indices being created by Logstash](https://discuss.elastic.co/t/unexpected-indices-being-created-by-logstash/254230)
**Author:** [@Philip\_Colmer](https://discuss.elastic.co/u/Philip_Colmer)\ **Replies:** 9\ **Last updated:** [November 4, 2020, 10:36am UTC](https://discuss.elastic.co/t/unexpected-indices-being-created-by-logstash/254230 "2020-11-04T10:36:13Z")
I'm using Logstash to ingest logs stored on AWS S3. My configuration file looks like this: input { s3 { "access\_key\_id" =\> "REDACTED" "secret\_access\_key" =\> "REDACTED" … --- ## [Pyspark Keeps Enforcing Type Text For Geo-Point, Despite Enforced Mapping](https://discuss.elastic.co/t/pyspark-keeps-enforcing-type-text-for-geo-point-despite-enforced-mapping/254246)
**Author:** [@aneeqyusuf](https://discuss.elastic.co/u/aneeqyusuf)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 10:34am UTC](https://discuss.elastic.co/t/pyspark-keeps-enforcing-type-text-for-geo-point-despite-enforced-mapping/254246 "2020-11-04T10:34:21Z")
Hi guys, I have been trying to index some data, with a geo\_point value into Elasticsearch for a coordinate map visualization on Kibana, using Spark, mainly the es-hadoop connector. Both the connector and ELK versions ar… --- ## [When I use scripted field and error show "runtime error" and "illegal\_argument\_exception"](https://discuss.elastic.co/t/when-i-use-scripted-field-and-error-show-runtime-error-and-illegal-argument-exception/253647)
**Author:** [@beam5544](https://discuss.elastic.co/u/beam5544)\ **Replies:** 7\ **Last updated:** [November 4, 2020, 10:26am UTC](https://discuss.elastic.co/t/when-i-use-scripted-field-and-error-show-runtime-error-and-illegal-argument-exception/253647 "2020-11-04T10:26:20Z")
When I use this script doc\['reqBody'\].length And I go to "Discover" page to show that field, and this happened. { "took": 201, "timed\_out": false, "num\_reduce\_phases": 92, "\_shards": { "total": 672, "s… --- ## ["query\_string" Wildcard search with special characters issue](https://discuss.elastic.co/t/query-string-wildcard-search-with-special-characters-issue/254068)
**Author:** [@Anas1](https://discuss.elastic.co/u/Anas1)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 10:15am UTC](https://discuss.elastic.co/t/query-string-wildcard-search-with-special-characters-issue/254068 "2020-11-04T10:15:10Z")
When searching using a wildcard words, i have an unexpected behavior. I'm working on ES 5.6.8. To reproduce the issue: (Test with Kibana) - create the index : PUT my-index-00001 { "mappings": { "test": {… --- ## [Can't create indices](https://discuss.elastic.co/t/cant-create-indices/254204)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 6\ **Last updated:** [November 4, 2020, 10:08am UTC](https://discuss.elastic.co/t/cant-create-indices/254204 "2020-11-04T10:08:37Z")
setup elk version 7.9.3 cannot create index logstash show me warning \[logstash.outputs.elasticsearch\]\[main\]\[27fb9d77028509eff9b3e4ec584ce0c8528c70f76c962e4e94e144a725a5b964\] Could not index event to Elasticsearch. {:st… --- ## [Change the order of my chart legend](https://discuss.elastic.co/t/change-the-order-of-my-chart-legend/254197)
**Author:** [@yanisyes](https://discuss.elastic.co/u/yanisyes)\ **Replies:** 2\ **Last updated:** [November 4, 2020, 9:56am UTC](https://discuss.elastic.co/t/change-the-order-of-my-chart-legend/254197 "2020-11-04T09:56:59Z")
Hi, Is there a way to make the legend appear in the order that I want (I'm using Kibana 7.6.1): I want the legend to appear in this order: \[0\] 0 sec \[1\] 1 sec \[2\] 2 sec \[3\] 3-4 sec \[4\] 5-6 sec \[5\] 7-9 sec \[6\]… --- ## [Filebeat kafka output with SCRAM authentication](https://discuss.elastic.co/t/filebeat-kafka-output-with-scram-authentication/254233)
**Author:** [@Darshan\_Parab](https://discuss.elastic.co/u/Darshan_Parab)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 9:27am UTC](https://discuss.elastic.co/t/filebeat-kafka-output-with-scram-authentication/254233 "2020-11-04T09:27:46Z")
Hi People, I'm trying to configure a Kafka output for filebeat. The kafka broker is configure to listend on TLS and supports SCRAM authentication. I configured Kafka output successfully. However Published goes in retry … --- ## [Adding conditional tags or fields](https://discuss.elastic.co/t/adding-conditional-tags-or-fields/253890)
**Author:** [@zoulja](https://discuss.elastic.co/u/zoulja)\ **Replies:** 2\ **Last updated:** [November 4, 2020, 9:25am UTC](https://discuss.elastic.co/t/adding-conditional-tags-or-fields/253890 "2020-11-04T09:25:45Z")
Hello. I need Filebeat 7.9.2 to add tags based on content. What I've tried: - add\_tags: when: contains: request:"/image/" tags: \[image\] - add\_tags: when: cont… --- ## [Logstash output best practice](https://discuss.elastic.co/t/logstash-output-best-practice/253690)
**Author:** [@anon42972578](https://discuss.elastic.co/u/anon42972578)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 9:12am UTC](https://discuss.elastic.co/t/logstash-output-best-practice/253690 "2020-11-04T09:12:38Z")
Hello, we want to create a good scaling elastic cluster with: at least 3 master nodes coord nodes a lot of data nodes machine learning nodes ingest node ( for cases, where using logstash is not possible) also we have… --- ## [Kibana sync snapshot with rollover](https://discuss.elastic.co/t/kibana-sync-snapshot-with-rollover/253578)
**Author:** [@hinoryo](https://discuss.elastic.co/u/hinoryo)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 9:10am UTC](https://discuss.elastic.co/t/kibana-sync-snapshot-with-rollover/253578 "2020-11-04T09:10:02Z")
hello all, i 've asked to archive an index daily , so i have created a ilm to make a rollover every day and after 2 hour delete the index , and also create a snapshot every day at a specific time . was trying to make t… --- ## [Import-Link to import csv over Kibana not existing](https://discuss.elastic.co/t/import-link-to-import-csv-over-kibana-not-existing/252530)
**Author:** [@Oli\_Jaschok](https://discuss.elastic.co/u/Oli_Jaschok)\ **Replies:** 5\ **Last updated:** [November 4, 2020, 9:07am UTC](https://discuss.elastic.co/t/import-link-to-import-csv-over-kibana-not-existing/252530 "2020-11-04T09:07:04Z")
After upgrading to 7.9.2 the link in Kibana home to import a csv directly doesn'exist. I have a basic license. Went this very useful feature to another position? The documentation says it should be still there... May an… --- ## [Jvm.options missing while installing elasticsearch-oss](https://discuss.elastic.co/t/jvm-options-missing-while-installing-elasticsearch-oss/254158)
**Author:** [@Haptomai](https://discuss.elastic.co/u/Haptomai)\ **Replies:** 7\ **Last updated:** [November 4, 2020, 8:43am UTC](https://discuss.elastic.co/t/jvm-options-missing-while-installing-elasticsearch-oss/254158 "2020-11-04T08:43:55Z")
Hi fellows, No docker version involved here Ubuntu 16.04.7 LTS v7.9.1 OpenJDK 11.0.5 Yesterday I tried to switch from ELK Basic stack to OSS stack in order to use OpenDistro. I removed elasticsearch, kibana and logst… --- ## [Stuck in Kibana home page](https://discuss.elastic.co/t/stuck-in-kibana-home-page/253286)
**Author:** [@Cad](https://discuss.elastic.co/u/Cad)\ **Replies:** 2\ **Last updated:** [November 4, 2020, 8:43am UTC](https://discuss.elastic.co/t/stuck-in-kibana-home-page/253286 "2020-11-04T08:43:18Z")
Hi, I want to install ELK on debian 9. I performed my installations from the elasticsearch-7.9.2-amd64.deb, kibana-7.9.2-amd64.deb and logstash-7.9.2.deb package. I don't see any errors when starting Elasticsearch and… --- ## [Alerting on forecast](https://discuss.elastic.co/t/alerting-on-forecast/254100)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 5\ **Last updated:** [November 4, 2020, 8:42am UTC](https://discuss.elastic.co/t/alerting-on-forecast/254100 "2020-11-04T08:42:12Z")
Hi, im trying to alert when the forecast prediction value is greater than 95, I need to get the hostname (partition\_value) and the time when the value surpass the treshold of 95, I currently can get the value and the pa… --- ## [Multiple indexes and partial execution](https://discuss.elastic.co/t/multiple-indexes-and-partial-execution/254226)
**Author:** [@Oleg\_Ruchovets](https://discuss.elastic.co/u/Oleg_Ruchovets)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 8:32am UTC](https://discuss.elastic.co/t/multiple-indexes-and-partial-execution/254226 "2020-11-04T08:32:29Z")
Hello, We finished a series of tests using rally and got very useful insides. Thank you for the great product guys. We want to run an additional series of tests and I have a couple of questions: We are using \[https://g… --- ## [Elasticsearch 7.8.1 on Openshift 4.5 - 3 Pods](https://discuss.elastic.co/t/elasticsearch-7-8-1-on-openshift-4-5-3-pods/252758)
**Author:** [@bob1985](https://discuss.elastic.co/u/bob1985)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 8:32am UTC](https://discuss.elastic.co/t/elasticsearch-7-8-1-on-openshift-4-5-3-pods/252758 "2020-11-04T08:32:16Z")
Elasticsearch 7.8.1 on Openshift 4.5 - 3 Pods Hi, Can you please help on below error: "message": "master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, and \[ \] is empty on this n… --- ## [Integration of Kibana dashboard in angular application](https://discuss.elastic.co/t/integration-of-kibana-dashboard-in-angular-application/254207)
**Author:** [@sam189](https://discuss.elastic.co/u/sam189)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 8:23am UTC](https://discuss.elastic.co/t/integration-of-kibana-dashboard-in-angular-application/254207 "2020-11-04T08:23:18Z")
I am looking to integrate kibana dashboard in my angular application. I have tried with the iframe approach by adding the iframe source code in my anguular app.Now I want to integrate the same without using iframe. I wan… --- ## [Impossible to download a csv file](https://discuss.elastic.co/t/impossible-to-download-a-csv-file/254107)
**Author:** [@yanisyes](https://discuss.elastic.co/u/yanisyes)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 8:21am UTC](https://discuss.elastic.co/t/impossible-to-download-a-csv-file/254107 "2020-11-04T08:21:11Z")
Hi, I am using kibana 7.6.1. But it's impossible for me to download my search as a csv file. When I save the report and I click on share, I only have the permalink option not the download as a csv option. Thanks i… --- ## [Performance issues when pushing data using the elastic API](https://discuss.elastic.co/t/performance-issues-when-pushing-data-using-the-elastic-api/253743)
**Author:** [@hugohendriks](https://discuss.elastic.co/u/hugohendriks)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 7:52am UTC](https://discuss.elastic.co/t/performance-issues-when-pushing-data-using-the-elastic-api/253743 "2020-11-04T07:52:57Z")
Hi, we are using a service on-prem to post data to our elastic cluster in the cloud...hosted by elastic. Not so long ago we had 1 instance running on AWS in frankfurt to which we pushed data. We never experienced timeou… --- ## [FIlebeat dashboard creation](https://discuss.elastic.co/t/filebeat-dashboard-creation/254216)
**Author:** [@A\_Ravi\_Prashant](https://discuss.elastic.co/u/A_Ravi_Prashant)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 7:24am UTC](https://discuss.elastic.co/t/filebeat-dashboard-creation/254216 "2020-11-04T07:24:11Z")
Hi team I have 12 EC2 instances my requirement is to create dashboard for all the server I have configure Elk stack with docker compose in one ec2 instance To create dashboard we use command filebeat setup so my ques… --- ## [How to create a separate index which has only required fields](https://discuss.elastic.co/t/how-to-create-a-separate-index-which-has-only-required-fields/253125)
**Author:** [@Ronnie16](https://discuss.elastic.co/u/Ronnie16)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 5:26am UTC](https://discuss.elastic.co/t/how-to-create-a-separate-index-which-has-only-required-fields/253125 "2020-11-04T05:26:54Z")
I have ELK cluster setup and i delete indices older than 10 days but i want to create a separate index which only has 1 required field so that it is always present . The main index has huge data and multiple fields, i o… --- ## [Error logstash stop command](https://discuss.elastic.co/t/error-logstash-stop-command/254212)
**Author:** [@peledev](https://discuss.elastic.co/u/peledev)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 6:42am UTC](https://discuss.elastic.co/t/error-logstash-stop-command/254212 "2020-11-04T06:42:59Z")
every time i stop logstash service i get failed eventualy it stops the service but not proprly this is whar i get: \[root@vrl-logapp2 logstash\]# logstash\_status ● logstash.service - logstash Loaded: loaded (/etc/syst… --- ## [Traffic Filters and monitoring clusters](https://discuss.elastic.co/t/traffic-filters-and-monitoring-clusters/253706)
**Author:** [@adrian0](https://discuss.elastic.co/u/adrian0)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 6:42am UTC](https://discuss.elastic.co/t/traffic-filters-and-monitoring-clusters/253706 "2020-11-04T06:42:12Z")
Hi, Regarding Traffic FIlters in ES Cloud, the documentation reads the following: This only applies to external traffic. Internal traffic is managed by Elasticsearch Service. For example, Kibana can connect to Elastic… --- ## [Elastic Agent init script calls unavailable test command](https://discuss.elastic.co/t/elastic-agent-init-script-calls-unavailable-test-command/253811)
**Author:** [@SergeyD](https://discuss.elastic.co/u/SergeyD)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 6:34am UTC](https://discuss.elastic.co/t/elastic-agent-init-script-calls-unavailable-test-command/253811 "2020-11-04T06:34:52Z")
Elastic Agent service is unable to start via init script due to call of unavailable "test" command. Environment: Ubuntu 14.04 + Agent 7.9.3 Steps to reproduce: curl -L -O https://artifacts.elastic.co/downloads/beats/… --- ## [Logstash Server Location](https://discuss.elastic.co/t/logstash-server-location/254115)
**Author:** [@Karl\_Ofeiche](https://discuss.elastic.co/u/Karl_Ofeiche)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 6:30am UTC](https://discuss.elastic.co/t/logstash-server-location/254115 "2020-11-04T06:30:40Z")
Hello all, I'm building an ELK-Kubernetes environment for an enterprise, and I'm installing Beats on their PCs, servers, network components... and the data center where I'll store and configure my ElasticSearch and Kiba… --- ## [How to parse WebSphere SystemErr log in logstash](https://discuss.elastic.co/t/how-to-parse-websphere-systemerr-log-in-logstash/252323)
**Author:** [@eubarkana](https://discuss.elastic.co/u/eubarkana)\ **Replies:** 14\ **Last updated:** [November 4, 2020, 6:18am UTC](https://discuss.elastic.co/t/how-to-parse-websphere-systemerr-log-in-logstash/252323 "2020-11-04T06:18:37Z")
IBM WebSphere logs include SystemOut and SystemErr logs for a JVM. Each message in SystemOut is enabled with timestamp that can be parsed with logstash. Exceptions in this log has stack trace but does not include timesta… --- ## [TransportError: TransportError(429, 'circuit\_breaking\_exception', '\[parent\] Data too large,](https://discuss.elastic.co/t/transporterror-transporterror-429-circuit-breaking-exception-parent-data-too-large/254161)
**Author:** [@subham\_p](https://discuss.elastic.co/u/subham_p)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 5:58am UTC](https://discuss.elastic.co/t/transporterror-transporterror-429-circuit-breaking-exception-parent-data-too-large/254161 "2020-11-04T05:58:53Z")
elasticsearch Version: 7.8.0 Summary: Python client for Elasticsearch TransportError: TransportError(429, 'circuit\_breaking\_exception', '\[parent\] Data too large, data for \[\\] would be \[2128807074/1.9gb\], … --- ## [How to use match\_phrase and fuzzy query at the same time](https://discuss.elastic.co/t/how-to-use-match-phrase-and-fuzzy-query-at-the-same-time/254201)
**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 5:10am UTC](https://discuss.elastic.co/t/how-to-use-match-phrase-and-fuzzy-query-at-the-same-time/254201 "2020-11-04T05:10:11Z")
I'd like to search documents by phrases and do not need to match all the words included in the phrases, but only some (specified) words / characters. For example, { "match\_phrase": { "target\_field": { "query… --- ## [Elastic Agent - OSS version](https://discuss.elastic.co/t/elastic-agent-oss-version/254182)
**Author:** [@micas](https://discuss.elastic.co/u/micas)\ **Replies:** 0\ **Last updated:** [November 3, 2020, 5:32pm UTC](https://discuss.elastic.co/t/elastic-agent-oss-version/254182 "2020-11-03T17:32:48Z")
Are there any plans to make an OSS version of the new "Elastic Agent"? ( https://www.elastic.co/downloads/elastic-agent ) or is it something that will never happen? We are creating a product that heavily relies on Beats… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1715) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1717)