# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1720 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1721 --- ## [Enabling Encryption for Nodes with basic license](https://discuss.elastic.co/t/enabling-encryption-for-nodes-with-basic-license/254071)
**Author:** [@nikeee](https://discuss.elastic.co/u/nikeee)\ **Replies:** 2\ **Last updated:** [November 2, 2020, 7:20pm UTC](https://discuss.elastic.co/t/enabling-encryption-for-nodes-with-basic-license/254071 "2020-11-02T19:20:18Z")
The license comparison matrix states: ...so I guess encrypted communication is included in the "basic" license. According to the docs, xpack.security.enabled must be set to true for this. Also according to the docs,… --- ## [Advice on query against nested objects](https://discuss.elastic.co/t/advice-on-query-against-nested-objects/254077)
**Author:** [@genericusername](https://discuss.elastic.co/u/genericusername)\ **Replies:** 0\ **Last updated:** [November 2, 2020, 7:41pm UTC](https://discuss.elastic.co/t/advice-on-query-against-nested-objects/254077 "2020-11-02T19:41:13Z")
We are using ElasticSearch 6.8, and performing searches against an index of "locations" that have nested "offers" within them. A location can have many nested offers and offers can be nested within many locations. Locati… --- ## [Elasticsearch 7.9: using a suggester for every field in multiple indexes](https://discuss.elastic.co/t/elasticsearch-7-9-using-a-suggester-for-every-field-in-multiple-indexes/254076)
**Author:** [@Alex11](https://discuss.elastic.co/u/Alex11)\ **Replies:** 0\ **Last updated:** [November 2, 2020, 7:37pm UTC](https://discuss.elastic.co/t/elasticsearch-7-9-using-a-suggester-for-every-field-in-multiple-indexes/254076 "2020-11-02T19:37:32Z")
I have indexed multiple documents for my website with Elasticsearch and would like to use a suggester on all of the fields in all of the indices. I'm trying to create a site wide search that searches all indexed content … --- ## [Metricbeat not getting diskio](https://discuss.elastic.co/t/metricbeat-not-getting-diskio/251606)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 12\ **Last updated:** [November 2, 2020, 6:24pm UTC](https://discuss.elastic.co/t/metricbeat-not-getting-diskio/251606 "2020-11-02T18:24:20Z")
where can I see diskio for process and network traffic use by process? I did load default template, running 7.9.1 here is config file - module: system period: 1m metricsets: - cpu - load - memory -… --- ## [Kibana not showing values lower than 1](https://discuss.elastic.co/t/kibana-not-showing-values-lower-than-1/253994)
**Author:** [@sfischer](https://discuss.elastic.co/u/sfischer)\ **Replies:** 2\ **Last updated:** [November 2, 2020, 6:14pm UTC](https://discuss.elastic.co/t/kibana-not-showing-values-lower-than-1/253994 "2020-11-02T18:14:16Z")
Hello, I am using Kibana v 7.6.2 to visualize some log data. I have a problem when analysing data of decimal number values between 0 and 1. e.g. 0, 0, 0.163, 0.037, 0.164, 0.25, 0.202, 0 I tried visualizing the data … --- ## [Data node can't find the master on elasticsearch cluster](https://discuss.elastic.co/t/data-node-cant-find-the-master-on-elasticsearch-cluster/254043)
**Author:** [@Pavle\_Ilic](https://discuss.elastic.co/u/Pavle_Ilic)\ **Replies:** 1\ **Last updated:** [November 2, 2020, 6:08pm UTC](https://discuss.elastic.co/t/data-node-cant-find-the-master-on-elasticsearch-cluster/254043 "2020-11-02T18:08:22Z")
So, I have two elasticsearch servers and wanted to form a cluster with master and data node, but I'm facing some difficulties in connecting them in a same cluster, these are my .yml files and the things I've tried so far… --- ## [Error while genrating reports](https://discuss.elastic.co/t/error-while-genrating-reports/251051)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 5\ **Last updated:** [November 2, 2020, 6:03pm UTC](https://discuss.elastic.co/t/error-while-genrating-reports/251051 "2020-11-02T18:03:25Z")
I am working with Kibana versio 7.9 and I tried to generate a PDF report of my dashboad. Keep getting the below error Unable to generate report Error: Error spawning Chromium browser: \[Error: Protocol error (Target.se… --- ## [Kibana 7.9.x redirects to location: /spaces/enter and doesn't work](https://discuss.elastic.co/t/kibana-7-9-x-redirects-to-location-spaces-enter-and-doesnt-work/253241)
**Author:** [@George\_Wainwright](https://discuss.elastic.co/u/George_Wainwright)\ **Replies:** 5\ **Last updated:** [November 2, 2020, 5:56pm UTC](https://discuss.elastic.co/t/kibana-7-9-x-redirects-to-location-spaces-enter-and-doesnt-work/253241 "2020-11-02T17:56:18Z")
I run my Elasticsearch cluster in docker with the next config: version: '2.4' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:7.9.3 container\_name: elasticsearch … --- ## [Logstash Failed to parse with all enclosed parsers](https://discuss.elastic.co/t/logstash-failed-to-parse-with-all-enclosed-parsers/254054)
**Author:** [@Yuy\_Heero](https://discuss.elastic.co/u/Yuy_Heero)\ **Replies:** 1\ **Last updated:** [November 2, 2020, 5:56pm UTC](https://discuss.elastic.co/t/logstash-failed-to-parse-with-all-enclosed-parsers/254054 "2020-11-02T17:56:16Z")
I want to use winlogbeat to monitor win10. Logs transfer via logstash to elasticsearch. winlogbeat(7.9.3)-\>logstash(7.9.3)-\>elasticsearch(7.8.0) After I started winlogbeat and logstash, I got no error from winlogbe… --- ## [Logstash replace existing fields & file input advice](https://discuss.elastic.co/t/logstash-replace-existing-fields-file-input-advice/254047)
**Author:** [@iccMe](https://discuss.elastic.co/u/iccMe)\ **Replies:** 3\ **Last updated:** [November 2, 2020, 5:36pm UTC](https://discuss.elastic.co/t/logstash-replace-existing-fields-file-input-advice/254047 "2020-11-02T17:36:29Z")
Hi, So this is a 2 part question. Below is an example of a log that is being read from a log file: \[09/10/2020 12:16:00\] xxx-server - HTTP Connections Spiking Ok 3.00 Perf Counter test (Current Connections) 4857 T… --- ## [Negative regrex \[field\] comparison in Logstash](https://discuss.elastic.co/t/negative-regrex-field-comparison-in-logstash/254060)
**Author:** [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\ **Replies:** 2\ **Last updated:** [November 2, 2020, 5:19pm UTC](https://discuss.elastic.co/t/negative-regrex-field-comparison-in-logstash/254060 "2020-11-02T17:19:24Z")
Hi, I'm trying to achieve simple \[username\] field character cheks. If \[username\] field NOT consists of \[A-Za-z\] then add new field. For example, if \[username\] equals foo.foo then write it into separate field. I can't … --- ## [Painless create new object](https://discuss.elastic.co/t/painless-create-new-object/254059)
**Author:** [@christophe\_spielmann](https://discuss.elastic.co/u/christophe_spielmann)\ **Replies:** 0\ **Last updated:** [November 2, 2020, 5:07pm UTC](https://discuss.elastic.co/t/painless-create-new-object/254059 "2020-11-02T17:07:06Z")
I have a rather basic requirement, I would like to add an object to a document with painless within a query for update. This is the object I would like to add '"memoire": { "codeActe": "C", "docType": "M",… --- ## [Conditional change in canvas shape BG colour for the data fetched from Jenkins](https://discuss.elastic.co/t/conditional-change-in-canvas-shape-bg-colour-for-the-data-fetched-from-jenkins/253922)
**Author:** [@gaurav1](https://discuss.elastic.co/u/gaurav1)\ **Replies:** 2\ **Last updated:** [November 2, 2020, 5:05pm UTC](https://discuss.elastic.co/t/conditional-change-in-canvas-shape-bg-colour-for-the-data-fetched-from-jenkins/253922 "2020-11-02T17:05:46Z")
New to Kibana, I am pushing my Jenkins log to Logstash and tring to create a canvas in Kibana using shape. through essql i am able to fetch build number and build status. Depending on build status I want to change the b… --- ## [Replace value with another value](https://discuss.elastic.co/t/replace-value-with-another-value/253741)
**Author:** [@errupeshmca](https://discuss.elastic.co/u/errupeshmca)\ **Replies:** 2\ **Last updated:** [November 2, 2020, 4:55pm UTC](https://discuss.elastic.co/t/replace-value-with-another-value/253741 "2020-11-02T16:55:11Z")
Hi, Below is my code to replace one value with another value, i have True and false value in field Order completed ? , and i want to replace true with Total order shipped and false with total order Pending. But when y… --- ## [Gateway timeout while getting the snapshots](https://discuss.elastic.co/t/gateway-timeout-while-getting-the-snapshots/254053)
**Author:** [@Utpal\_Kumar](https://discuss.elastic.co/u/Utpal_Kumar)\ **Replies:** 0\ **Last updated:** [November 2, 2020, 4:41pm UTC](https://discuss.elastic.co/t/gateway-timeout-while-getting-the-snapshots/254053 "2020-11-02T16:41:59Z")
Hi, I am using elasticsearch version 7.4. I am having a daily backup as snapshot for the indices in azure repository. I get a Gateway timeout while fetching the snapshots. The repository is fine and connected. I have … --- ## [Possible malformed shape detected - ES 7.9.3](https://discuss.elastic.co/t/possible-malformed-shape-detected-es-7-9-3/253804)
**Author:** [@oshan](https://discuss.elastic.co/u/oshan)\ **Replies:** 2\ **Last updated:** [November 2, 2020, 4:18pm UTC](https://discuss.elastic.co/t/possible-malformed-shape-detected-es-7-9-3/253804 "2020-11-02T16:18:31Z")
ES 7.9.3 throws a exception when I'm indexing this polygon. Possible malformed shape detected.type"":""mapper\_parsing\_exception"",""reason"":""failed to parse field \[ranges.geometry\] of type \[geo\_shape\] polygon and the… --- ## [How to check if documents exist? And avoid errors](https://discuss.elastic.co/t/how-to-check-if-documents-exist-and-avoid-errors/253253)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 1\ **Last updated:** [November 2, 2020, 3:39pm UTC](https://discuss.elastic.co/t/how-to-check-if-documents-exist-and-avoid-errors/253253 "2020-11-02T15:39:06Z")
Hello All, Have a simple ESQL script, to show counts in canvas. There are scenarios where there are no documents in the index, and that is natural. How can I check if the documents exist at all? So instead of just ru… --- ## [How to find the difference between last 5 minutes to last 10 minutes time range?](https://discuss.elastic.co/t/how-to-find-the-difference-between-last-5-minutes-to-last-10-minutes-time-range/253480)
**Author:** [@jacobdeiter](https://discuss.elastic.co/u/jacobdeiter)\ **Replies:** 1\ **Last updated:** [November 2, 2020, 3:39pm UTC](https://discuss.elastic.co/t/how-to-find-the-difference-between-last-5-minutes-to-last-10-minutes-time-range/253480 "2020-11-02T15:39:01Z")
I am trying to compare last 5 minutes(now -5m) data to last 10 minutes(now -10m) in TImelion. I tried offset but it does not help me because I does not compare data in the range. Is there a way to do it Timelion, if not… --- ## [How can I make a calculation across multiple documents with a given ID?](https://discuss.elastic.co/t/how-can-i-make-a-calculation-across-multiple-documents-with-a-given-id/253475)
**Author:** [@alphalol](https://discuss.elastic.co/u/alphalol)\ **Replies:** 1\ **Last updated:** [November 2, 2020, 3:27pm UTC](https://discuss.elastic.co/t/how-can-i-make-a-calculation-across-multiple-documents-with-a-given-id/253475 "2020-11-02T15:27:48Z")
I want to be able to add a bar chart on Kibana which displays a count of users (identified by name) which have a total of more than 0 in total\_a (with total of 0 for total\_b) and column for those with a total of more th… --- ## [Is there anyway to hold a TSVB params value independent of the overall filter?](https://discuss.elastic.co/t/is-there-anyway-to-hold-a-tsvb-params-value-independent-of-the-overall-filter/253834)
**Author:** [@blin432](https://discuss.elastic.co/u/blin432)\ **Replies:** 1\ **Last updated:** [November 2, 2020, 3:24pm UTC](https://discuss.elastic.co/t/is-there-anyway-to-hold-a-tsvb-params-value-independent-of-the-overall-filter/253834 "2020-11-02T15:24:24Z")
Currently the filter applies for the whole visual, I would like to hold params.z constant of any filter: --- ## [Kibana Keyword compare and collate based on the unique query list in string format](https://discuss.elastic.co/t/kibana-keyword-compare-and-collate-based-on-the-unique-query-list-in-string-format/254039)
**Author:** [@Kannan\_Rajendran](https://discuss.elastic.co/u/Kannan_Rajendran)\ **Replies:** 1\ **Last updated:** [November 2, 2020, 3:08pm UTC](https://discuss.elastic.co/t/kibana-keyword-compare-and-collate-based-on-the-unique-query-list-in-string-format/254039 "2020-11-02T15:08:24Z")
i have a scenario of collating some list of repeated SQL slow query with date vise transaction. My aim is to achieve unique no of the repeated SLOW query list which occurs in the certain time period in a data table visua… --- ## [Cluster state limitations/recommendations in es 7.x](https://discuss.elastic.co/t/cluster-state-limitations-recommendations-in-es-7-x/253458)
**Author:** [@Johan\_Nilsson\_Hansen](https://discuss.elastic.co/u/Johan_Nilsson_Hansen)\ **Replies:** 5\ **Last updated:** [November 2, 2020, 2:48pm UTC](https://discuss.elastic.co/t/cluster-state-limitations-recommendations-in-es-7-x/253458 "2020-11-02T14:48:58Z")
Hi all, Is there any limitations or recommendation of how large the cluster state can/should be in elasticsearch 7.x? Eg, how many nodes is recommended? How many shards and indices? The context for this question is tha… --- ## [Grok succeeds in debugger and through input{stdin. but with this config file I'm getting \_grokparsefailure](https://discuss.elastic.co/t/grok-succeeds-in-debugger-and-through-input-stdin-but-with-this-config-file-im-getting-grokparsefailure/253556)
**Author:** [@Vita\_Rosenberg](https://discuss.elastic.co/u/Vita_Rosenberg)\ **Replies:** 2\ **Last updated:** [November 2, 2020, 2:26pm UTC](https://discuss.elastic.co/t/grok-succeeds-in-debugger-and-through-input-stdin-but-with-this-config-file-im-getting-grokparsefailure/253556 "2020-11-02T14:26:18Z")
path =\> "C:/ELK/LocalLogs/\*" start\_position =\> beginning } } filter { grok{ match =\> { "message" =\> \["%{GREEDYDATA:first}%{DATE\_US:date\_}-%{TIME:time\_}%{GREEDYDATA:last}"\]} } da… --- ## [Machine learning jobs: soft and hard limit](https://discuss.elastic.co/t/machine-learning-jobs-soft-and-hard-limit/254023)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 2\ **Last updated:** [November 2, 2020, 2:26pm UTC](https://discuss.elastic.co/t/machine-learning-jobs-soft-and-hard-limit/254023 "2020-11-02T14:26:00Z")
Hello everybody, I am running elasticsearch machine learning jobs and in some of them I am getting in their memory status: hard\_limit and soft\_limit and other type of error is : Datafeed has missed X documents due to i… --- ## [Logstash-Ruby is using which Testing Framework?](https://discuss.elastic.co/t/logstash-ruby-is-using-which-testing-framework/254041)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 0\ **Last updated:** [November 2, 2020, 2:19pm UTC](https://discuss.elastic.co/t/logstash-ruby-is-using-which-testing-framework/254041 "2020-11-02T14:19:52Z")
I am using the test sample shown in this page: But it seems this assert works events.size == 0 Because the debugging it very hard with this, if i have multiple assert, it doesnt tell me which assert failed... --- ## [Shingle filter to allow mismatching spaces](https://discuss.elastic.co/t/shingle-filter-to-allow-mismatching-spaces/253846)
**Author:** [@awarrenlove](https://discuss.elastic.co/u/awarrenlove)\ **Replies:** 4\ **Last updated:** [November 2, 2020, 2:15pm UTC](https://discuss.elastic.co/t/shingle-filter-to-allow-mismatching-spaces/253846 "2020-11-02T14:15:21Z")
I am trying to solve a problem where users sometimes include an extra space in their search terms, or alternatively a space was missing in the search term compared to what is in the index. In order to do this, I attempte… --- ## [Elasticsearch cluster monitoring](https://discuss.elastic.co/t/elasticsearch-cluster-monitoring/253897)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [November 2, 2020, 2:08pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-monitoring/253897 "2020-11-02T14:08:24Z")
I've successfully setup the 8 node of elasticsearch cluster.In kibana stack monitoring it showing me the disk free space . My question is that is there any setting that it will show me the disk free space of all data no… --- ## [Weird error with kibana cluster](https://discuss.elastic.co/t/weird-error-with-kibana-cluster/253904)
**Author:** [@mtbx88](https://discuss.elastic.co/u/mtbx88)\ **Replies:** 1\ **Last updated:** [November 2, 2020, 2:08pm UTC](https://discuss.elastic.co/t/weird-error-with-kibana-cluster/253904 "2020-11-02T14:08:23Z")
I keep getting this error in Kibana, it has some thing to do with the monitoring. Any ideas? log \[14:46:39.367\] \[error\]\[http\] { Error: Saved object \[task/ad935fc0-1b37-11eb-b82d-4de2f86f3632\] not found at Function.cr… --- ## [Logstash Error while configuring the JDBC connection](https://discuss.elastic.co/t/logstash-error-while-configuring-the-jdbc-connection/254036)
**Author:** [@Kannan\_Rajendran](https://discuss.elastic.co/u/Kannan_Rajendran)\ **Replies:** 0\ **Last updated:** [November 2, 2020, 1:57pm UTC](https://discuss.elastic.co/t/logstash-error-while-configuring-the-jdbc-connection/254036 "2020-11-02T13:57:32Z")
Hi , When i try to connect the JDBC connection and test the logstash conf file i'm getting the below error. i have tried the some forum solution but nothing worked. \[logstash.runner \] The given configuration is… --- ## [\`Provided Grok expressions do not match field value\` Apache Filebeat](https://discuss.elastic.co/t/provided-grok-expressions-do-not-match-field-value-apache-filebeat/254027)
**Author:** [@willis](https://discuss.elastic.co/u/willis)\ **Replies:** 0\ **Last updated:** [November 2, 2020, 1:42pm UTC](https://discuss.elastic.co/t/provided-grok-expressions-do-not-match-field-value-apache-filebeat/254027 "2020-11-02T13:42:51Z")
Filebeat: 7.9.2 We are using a custom log format for Apache. The filebeat apache module (i.e. /usr/share/filebeat/module/apache/access/ingest/pipeline.yml) is updated with a single Grok expression that matches our custo… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1719) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1721)