# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1724 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1725 --- ## [Start Kibana](https://discuss.elastic.co/t/start-kibana/251116)
**Author:** [@acastaldi84](https://discuss.elastic.co/u/acastaldi84)\ **Replies:** 12\ **Last updated:** [October 30, 2020, 11:09am UTC](https://discuss.elastic.co/t/start-kibana/251116 "2020-10-30T11:09:50Z")
Hello, i installed Kibana on Centos 7 but i have this error when i start it! kibana error|690x430 how can i understand what it depends on? Thank you --- ## [Create ILM Policy from Logstash when does not exist](https://discuss.elastic.co/t/create-ilm-policy-from-logstash-when-does-not-exist/253798)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [October 30, 2020, 10:47am UTC](https://discuss.elastic.co/t/create-ilm-policy-from-logstash-when-does-not-exist/253798 "2020-10-30T10:47:48Z")
Hi there, I was wondering if it is possible to create an ilm policy automatically in a logstash pipeline. My use case: I collect logs from an kubernetes cluster and create indices based on the applications for example: … --- ## [Group By Elk Stack?](https://discuss.elastic.co/t/group-by-elk-stack/253543)
**Author:** [@juuuhuuu](https://discuss.elastic.co/u/juuuhuuu)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 10:37am UTC](https://discuss.elastic.co/t/group-by-elk-stack/253543 "2020-10-30T10:37:49Z")
Hello Community, we are using elk Stack. I was wondering where is the best way to use aggregation- in Logstash or in elasticsearch? Or is it possible do it this in Kibana ? --- ## [Filtering- Delete a field to save storage space](https://discuss.elastic.co/t/filtering-delete-a-field-to-save-storage-space/253593)
**Author:** [@ASRLO](https://discuss.elastic.co/u/ASRLO)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 10:29am UTC](https://discuss.elastic.co/t/filtering-delete-a-field-to-save-storage-space/253593 "2020-10-30T10:29:36Z")
Hello , I am a beginner on the ELK solution, I would like to know if by deleting fields and their contents from my logs I can gain storage space. If so, how to do this task? This is what I tried to do: ' if \[event\]… --- ## [How to synchronize current thread with SubmitAsyncSearchRequest?](https://discuss.elastic.co/t/how-to-synchronize-current-thread-with-submitasyncsearchrequest/253795)
**Author:** [@Woniok](https://discuss.elastic.co/u/Woniok)\ **Replies:** 0\ **Last updated:** [October 30, 2020, 10:18am UTC](https://discuss.elastic.co/t/how-to-synchronize-current-thread-with-submitasyncsearchrequest/253795 "2020-10-30T10:18:19Z")
Hi, guys. Thank you for building such wonderful tools. :grinning: While I was coding with the guidance of the \[SubmitAsyncSearchRequest document\](https://www.elastic.co/guide/en/elasticsearch/client/java-rest/current/ja… --- ## [Error searching, probably (Global Serach plugin) error. ELK 7.9.1](https://discuss.elastic.co/t/error-searching-probably-global-serach-plugin-error-elk-7-9-1/251935)
**Author:** [@mdecastrosimon](https://discuss.elastic.co/u/mdecastrosimon)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 10:11am UTC](https://discuss.elastic.co/t/error-searching-probably-global-serach-plugin-error-elk-7-9-1/251935 "2020-10-30T10:11:05Z")
When I am trying to search any word withous specify the field I am obtaining this error: search\_phase\_execution\_exception all shards failed Error: Bad Request at Fetch.\_callee3$ (http://127.0.0.1:5601/33912/bundle… --- ## [\[QUESTION/HELP\] Metricbeat kubernetes state\_node labels](https://discuss.elastic.co/t/question-help-metricbeat-kubernetes-state-node-labels/253784)
**Author:** [@rayanebel](https://discuss.elastic.co/u/rayanebel)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 10:05am UTC](https://discuss.elastic.co/t/question-help-metricbeat-kubernetes-state-node-labels/253784 "2020-10-30T10:05:55Z")
Hello, I'm using metricbeat (7.x) and the kubernetes module to fetch kubernetes metrics from api-server and kube-state-metrics. I have a question about the metricset state\_node. This metricset will fetch the metrics rel… --- ## [Painless regex not match when string have a "\\n"](https://discuss.elastic.co/t/painless-regex-not-match-when-string-have-a-n/253258)
**Author:** [@le\_ba\_nam](https://discuss.elastic.co/u/le_ba_nam)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 10:04am UTC](https://discuss.elastic.co/t/painless-regex-not-match-when-string-have-a-n/253258 "2020-10-30T10:04:41Z")
I have my regex like this: def m = /(.+)webservice.\*/.matcher(x);if ( m.matches()) {return m.group(1); The problem is it just match when my string have no "\\n" like : "mbccs\_getStatusIncorrectProfile webservice does n… --- ## [Metricbeat oracle module](https://discuss.elastic.co/t/metricbeat-oracle-module/253563)
**Author:** [@dmeijboom](https://discuss.elastic.co/u/dmeijboom)\ **Replies:** 3\ **Last updated:** [October 30, 2020, 10:01am UTC](https://discuss.elastic.co/t/metricbeat-oracle-module/253563 "2020-10-30T10:01:35Z")
We are trying to connect the oracle module in metricbeat if we use hosts: \["oraclemonitor/apassword@//host:1521/TESTDV"\] it works but then we see the password in plain text in the kibana message And if we use this(in… --- ## [Exporting a Timelion PNG at a certain date](https://discuss.elastic.co/t/exporting-a-timelion-png-at-a-certain-date/253701)
**Author:** [@Docrom](https://discuss.elastic.co/u/Docrom)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 9:49am UTC](https://discuss.elastic.co/t/exporting-a-timelion-png-at-a-certain-date/253701 "2020-10-30T09:49:06Z")
Hello everyone, I'm a beginner of Elastic/Kibana and I'm really struggling to find a topic talking about what I want on Google so here I am and I hope you can help me. So, I have a Timelion visualization and I want to … --- ## [Show Max and Min value for given period](https://discuss.elastic.co/t/show-max-and-min-value-for-given-period/253435)
**Author:** [@bubba](https://discuss.elastic.co/u/bubba)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 9:48am UTC](https://discuss.elastic.co/t/show-max-and-min-value-for-given-period/253435 "2020-10-30T09:48:09Z")
Hi All, I'm measuring temperature with a sensor, send it to Logstash -\> Elasticsearch. Currently everything is going well with temperature change visualizer, but I play a lot with all other available visualizers last 2 … --- ## [Unexpected behaviour with search\_as\_you\_type field indexed as arrays](https://discuss.elastic.co/t/unexpected-behaviour-with-search-as-you-type-field-indexed-as-arrays/253790)
**Author:** [@serkanozer](https://discuss.elastic.co/u/serkanozer)\ **Replies:** 0\ **Last updated:** [October 30, 2020, 9:18am UTC](https://discuss.elastic.co/t/unexpected-behaviour-with-search-as-you-type-field-indexed-as-arrays/253790 "2020-10-30T09:18:36Z")
curl -X PUT "localhost:9200/test\_index?pretty" -H 'Content-Type: application/json' -d' { "mappings": { "properties": { "search\_as\_you\_type\_field": { "type": "search\_as\_you\_type" } } } } ' … --- ## [Metricbeat getting error on illegal\_argument\_exception: index.lifecycle.rollover\_alias](https://discuss.elastic.co/t/metricbeat-getting-error-on-illegal-argument-exception-index-lifecycle-rollover-alias/253206)
**Author:** [@Beng\_Hui\_Ong](https://discuss.elastic.co/u/Beng_Hui_Ong)\ **Replies:** 5\ **Last updated:** [October 30, 2020, 9:16am UTC](https://discuss.elastic.co/t/metricbeat-getting-error-on-illegal-argument-exception-index-lifecycle-rollover-alias/253206 "2020-10-30T09:16:27Z")
Hi folks, I keep getting this error on my metricbeat setup, and despite me shutting down and recreate all the index and policies, it will still pop up. illegal\_argument\_exception: index.lifecycle.rollover\_alias \[metricb… --- ## [How to improve performance of ID query](https://discuss.elastic.co/t/how-to-improve-performance-of-id-query/253699)
**Author:** [@anjali\_zarkar](https://discuss.elastic.co/u/anjali_zarkar)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 9:12am UTC](https://discuss.elastic.co/t/how-to-improve-performance-of-id-query/253699 "2020-10-30T09:12:38Z")
'Hi , I am new to Elasticsearch, I am trying to fetch documents from eleasticsearch using Id query . Numbers of records in query are just 180 and query takes ~800 ms. { "profile" : "true", "query": { "ids" : { "va… --- ## [Packetbeats shards UNASSIGNED](https://discuss.elastic.co/t/packetbeats-shards-unassigned/253717)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 9:05am UTC](https://discuss.elastic.co/t/packetbeats-shards-unassigned/253717 "2020-10-30T09:05:52Z")
Hello, Everything was working fine in my cluster, and today I found out that I have no log from packetbeat, and shards' health is red: and when I run GET \_cat/shards I get something like that: packetbeat-7.9.3-2020.… --- ## [Daylight saving time, strange display in kibana discover diagram](https://discuss.elastic.co/t/daylight-saving-time-strange-display-in-kibana-discover-diagram/253309)
**Author:** [@erigaut](https://discuss.elastic.co/u/erigaut)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 8:39am UTC](https://discuss.elastic.co/t/daylight-saving-time-strange-display-in-kibana-discover-diagram/253309 "2020-10-30T08:39:31Z")
Kibana version : 6.1 Last night we underwent the time change and went back to winter time (Daylight saving time). The data in elasticsearch is apparently correctly indexed however Kibana displays a gap when the time ha… --- ## [Kibana Dashboard & Settings automatic backup/restore](https://discuss.elastic.co/t/kibana-dashboard-settings-automatic-backup-restore/253347)
**Author:** [@rverchere](https://discuss.elastic.co/u/rverchere)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 8:38am UTC](https://discuss.elastic.co/t/kibana-dashboard-settings-automatic-backup-restore/253347 "2020-10-30T08:38:08Z")
Hi, How can backup my dashboards and other saved objects from Kibana periodically ? I can do it manually with "saved objects" menu in "Stack Management", but would like to do it automatically through SLM (I guess with … --- ## [User.id Not Populated by Powershell Module](https://discuss.elastic.co/t/user-id-not-populated-by-powershell-module/253478)
**Author:** [@variable](https://discuss.elastic.co/u/variable)\ **Replies:** 5\ **Last updated:** [October 30, 2020, 8:33am UTC](https://discuss.elastic.co/t/user-id-not-populated-by-powershell-module/253478 "2020-10-30T08:33:12Z")
It doesn't appear that the powershell module for Winlogbeat 7.9.2 is recording the user.id or the user.name. Is this intended or a bug? One example: { "\_index": "winlogbeat-7.9.2-2020.10.14-000001", "\_type": "\_d… --- ## [Create mutliples area with jmx data](https://discuss.elastic.co/t/create-mutliples-area-with-jmx-data/253117)
**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 8:11am UTC](https://discuss.elastic.co/t/create-mutliples-area-with-jmx-data/253117 "2020-10-30T08:11:20Z")
Hello, i'm trying to create a vizualise which contains two area of jmx metrics of my java application : Heap used Heap max. To do it, I use jmx plugin. This is my logstash pipeline : input { jmx { path =\> "/etc… --- ## [How would you index this type of data?](https://discuss.elastic.co/t/how-would-you-index-this-type-of-data/253754)
**Author:** [@Toontje](https://discuss.elastic.co/u/Toontje)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 8:10am UTC](https://discuss.elastic.co/t/how-would-you-index-this-type-of-data/253754 "2020-10-30T08:10:41Z")
{"windowNumber": 1830323, "timestamp": "2020-09-24T01:26:31.673097Z", "tagData": {"103040840050DDABCD10028300003B93": {"inIntensity": "2542", "inCount": 2}, "103040840004FCA60A64028108F4C764": {"outIntensity": "760", "o… --- ## [How to monitor windows's GPU Utilization?](https://discuss.elastic.co/t/how-to-monitor-windowss-gpu-utilization/253766)
**Author:** [@Weicloud9527](https://discuss.elastic.co/u/Weicloud9527)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 8:10am UTC](https://discuss.elastic.co/t/how-to-monitor-windowss-gpu-utilization/253766 "2020-10-30T08:10:04Z")
hi I have server run for machine learning OS:windows 10 gpu:NVIDIA RTX8000 how do I monitor GPU Utilization can any beats support ? --- ## [I cant start up Elastic search](https://discuss.elastic.co/t/i-cant-start-up-elastic-search/253348)
**Author:** [@Fisnik\_Myrtezaj](https://discuss.elastic.co/u/Fisnik_Myrtezaj)\ **Replies:** 8\ **Last updated:** [October 30, 2020, 8:07am UTC](https://discuss.elastic.co/t/i-cant-start-up-elastic-search/253348 "2020-10-30T08:07:44Z")
When i try startup the elasticsearch i get this error : ./bin/elasticsearch-env: line 77: /volume1/web/elasticsearch/jdk/bin/java: cannot execute binary file: Exec format error im using Linux nas synology --- ## [Wildcard in aggregation acting Funny](https://discuss.elastic.co/t/wildcard-in-aggregation-acting-funny/253616)
**Author:** [@katana\_handler](https://discuss.elastic.co/u/katana_handler)\ **Replies:** 1\ **Last updated:** [October 30, 2020, 6:17am UTC](https://discuss.elastic.co/t/wildcard-in-aggregation-acting-funny/253616 "2020-10-30T06:17:09Z")
My docs (movies) are in this kind of format: { "title" : "title of movie", "cast": \[list of names\], "genres": \[list of genres\], "year" : long } Now i have attached the query that i performed and the res… --- ## [Roll up Jobs Performance](https://discuss.elastic.co/t/roll-up-jobs-performance/253773)
**Author:** [@Dimple\_Goyal](https://discuss.elastic.co/u/Dimple_Goyal)\ **Replies:** 0\ **Last updated:** [October 30, 2020, 6:14am UTC](https://discuss.elastic.co/t/roll-up-jobs-performance/253773 "2020-10-30T06:14:33Z")
I have about 90 indexes 50gb each. I have created rollup job to process information of these indices. The max page size for the rollup job is 10000 indexing is taking forever, any ideas on how i could ehance the perform… --- ## [Need help with co-occurrence of values in nested documents across documents](https://discuss.elastic.co/t/need-help-with-co-occurrence-of-values-in-nested-documents-across-documents/253718)
**Author:** [@verdict-lg](https://discuss.elastic.co/u/verdict-lg)\ **Replies:** 0\ **Last updated:** [October 29, 2020, 3:21pm UTC](https://discuss.elastic.co/t/need-help-with-co-occurrence-of-values-in-nested-documents-across-documents/253718 "2020-10-29T15:21:10Z")
Hi, Say this is my document and Book Meta is a nested field { { "Book ID": 1, "Book Meta": \[ { "Chapter\_ID" : 1, "Chapter\_Gist": "\ **Author:** [@rthielen](https://discuss.elastic.co/u/rthielen)\ **Replies:** 11\ **Last updated:** [October 30, 2020, 5:13am UTC](https://discuss.elastic.co/t/filebeat-cisco-module-cant-parse-305011-302015-302013-or-722015-message-types/250882 "2020-10-30T05:13:31Z") Version 7.9.2 Debian 10 Problematic file: /usr/share/filebeat/module/cisco/shared/ingest/asa-ftd-pipeline.yml 305011 parse pattern doesn't account for presence of source.user.name pattern: "Built %{} %{network.transp… --- ## [Enabling security in Basic subscription](https://discuss.elastic.co/t/enabling-security-in-basic-subscription/253449)
**Author:** [@Johann\_Hochtl](https://discuss.elastic.co/u/Johann_Hochtl)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 4:54am UTC](https://discuss.elastic.co/t/enabling-security-in-basic-subscription/253449 "2020-10-30T04:54:30Z")
I am using elasticsearch 7.9, Basic subscription I followed https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-security.html I enabled security in elastic with this configuration: xpack.se… --- ## [Logstash converts integer value in scientific notation to float, causing mapping error in Elasticsearch](https://discuss.elastic.co/t/logstash-converts-integer-value-in-scientific-notation-to-float-causing-mapping-error-in-elasticsearch/253396)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 7\ **Last updated:** [October 30, 2020, 3:40am UTC](https://discuss.elastic.co/t/logstash-converts-integer-value-in-scientific-notation-to-float-causing-mapping-error-in-elasticsearch/253396 "2020-10-30T03:40:22Z")
Background Given the following input (these are snippets from the input JSON Lines): "MEMLIMIT Size":0 ... "MEMLIMIT Size":0.8590E+10 Logstash (I'm using 7.9.3) outputs: "MEMLIMIT Size" =\> 0 "MEMLIMIT Size" =\> 859000… --- ## [How do I get the highest matching set of data in a multi-value field?](https://discuss.elastic.co/t/how-do-i-get-the-highest-matching-set-of-data-in-a-multi-value-field/252141)
**Author:** [@yanglingqiang](https://discuss.elastic.co/u/yanglingqiang)\ **Replies:** 3\ **Last updated:** [October 30, 2020, 3:10am UTC](https://discuss.elastic.co/t/how-do-i-get-the-highest-matching-set-of-data-in-a-multi-value-field/252141 "2020-10-30T03:10:38Z")
my index mapping "mapping":{ "test":{ "descript": { "properties": { "prop": { "type": "long" }, "value": { "analyzer": "english", "type": "text" } } }, "id":{ "type":"lo… --- ## [Show total count on line graph when using split series bucket](https://discuss.elastic.co/t/show-total-count-on-line-graph-when-using-split-series-bucket/253143)
**Author:** [@buncieboy](https://discuss.elastic.co/u/buncieboy)\ **Replies:** 2\ **Last updated:** [October 30, 2020, 1:54am UTC](https://discuss.elastic.co/t/show-total-count-on-line-graph-when-using-split-series-bucket/253143 "2020-10-30T01:54:14Z")
We have a line graph that shows the occurrence of an event over time, using count on the y axis and a date histogram on the x axis. If we add a split series sub bucket on the data (for example on the field "owner") it sp… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1723) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1725)