# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1735 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1736 --- ## [Security\_tenant in dashboard url when sharing or embedding missing in latest version](https://discuss.elastic.co/t/security-tenant-in-dashboard-url-when-sharing-or-embedding-missing-in-latest-version/252280)
**Author:** [@DMinovski](https://discuss.elastic.co/u/DMinovski)\ **Replies:** 2\ **Last updated:** [October 22, 2020, 11:36pm UTC](https://discuss.elastic.co/t/security-tenant-in-dashboard-url-when-sharing-or-embedding-missing-in-latest-version/252280 "2020-10-22T23:36:22Z")
In version 7.2, when I shared an embedded URL of a dashboard, it included the parameter kibana?security\_tenant=tenantName#. The users were able to be logged as another tenant and see the dashboard. In the latest versio… --- ## [Mutate rename, remove does not work on fields in list](https://discuss.elastic.co/t/mutate-rename-remove-does-not-work-on-fields-in-list/253069)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 2\ **Last updated:** [October 22, 2020, 11:18pm UTC](https://discuss.elastic.co/t/mutate-rename-remove-does-not-work-on-fields-in-list/253069 "2020-10-22T23:18:06Z")
Hello, I want to use logstash snmp walk input for fetching data from my network devices. This is the config I use. input { snmp { hosts =\> \[ {host =\> "udp:ip/port" community =\> "secret"} … --- ## [Filebeat connect with Kafka Kerberos(SASL\_SSL) not working](https://discuss.elastic.co/t/filebeat-connect-with-kafka-kerberos-sasl-ssl-not-working/246160)
**Author:** [@chandramouli\_sriniva](https://discuss.elastic.co/u/chandramouli_sriniva)\ **Replies:** 9\ **Last updated:** [October 15, 2020, 1:41pm UTC](https://discuss.elastic.co/t/filebeat-connect-with-kafka-kerberos-sasl-ssl-not-working/246160 "2020-10-15T13:41:49Z")
Hi - I am using Filebeat 7.9 version. using filebeat, read data from log file and push to kafka topic. our Kafka use SASL\_SSL with Kerberos mechanism. when I set up with below parms, it errors out. kerberos.enabled: "tr… --- ## [Logic Issue....Or Maybe Gsub](https://discuss.elastic.co/t/logic-issue-or-maybe-gsub/253047)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [October 22, 2020, 9:37pm UTC](https://discuss.elastic.co/t/logic-issue-or-maybe-gsub/253047 "2020-10-22T21:37:54Z")
I am capturing logs that primarily look like this: \[2020-10-21 22:12:44,067\]\[INFO\]\[audit\]{"JSON formatted stuff"} However, I will occasionally get lines that look like this: \[2020-10-21 22:12:44,067\]\[INFO\]\[audit\]text … --- ## [MetricBeat error while connecting to Elasticsearch](https://discuss.elastic.co/t/metricbeat-error-while-connecting-to-elasticsearch/252905)
**Author:** [@Sara3](https://discuss.elastic.co/u/Sara3)\ **Replies:** 2\ **Last updated:** [October 22, 2020, 9:29pm UTC](https://discuss.elastic.co/t/metricbeat-error-while-connecting-to-elasticsearch/252905 "2020-10-22T21:29:29Z")
Hi , I am having trouble with metricbeat communicate to OpendistroElasticsearch .Both are oss version.Please help! Error seen is : ERROR \[publisher\_pipeline\_output\] pipeline/output.go:154 Failed t… --- ## [Pass batch size in deleteByQuery \[elasticsearch\] \[scala\]](https://discuss.elastic.co/t/pass-batch-size-in-deletebyquery-elasticsearch-scala/253067)
**Author:** [@Priya3](https://discuss.elastic.co/u/Priya3)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 8:46pm UTC](https://discuss.elastic.co/t/pass-batch-size-in-deletebyquery-elasticsearch-scala/253067 "2020-10-22T20:46:03Z")
I need to pass batch size while using deletebyQuery. My requirement is: Get x rows based on filters Run DeletebyQuery on them Return this list While doing search using filters, there can 1000 rows but I need only bat… --- ## [Mapper for \[someField\] conflicts with existing mapping: \[mapper \[someField\] has different \[norms\] values, cannot change from disable to enabled](https://discuss.elastic.co/t/mapper-for-somefield-conflicts-with-existing-mapping-mapper-somefield-has-different-norms-values-cannot-change-from-disable-to-enabled/253064)
**Author:** [@b0redom](https://discuss.elastic.co/u/b0redom)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 8:02pm UTC](https://discuss.elastic.co/t/mapper-for-somefield-conflicts-with-existing-mapping-mapper-somefield-has-different-norms-values-cannot-change-from-disable-to-enabled/253064 "2020-10-22T20:02:10Z")
Hi, I'm reasonably new to ElasticSearch, and I've been Googling and reading, but I've not found anything to help. I use Index Templates to ingest data. I have one with well defined mapped fields, but 2 in particular: a… --- ## [High CPU usage 80/90% on elastic search cluster](https://discuss.elastic.co/t/high-cpu-usage-80-90-on-elastic-search-cluster/253062)
**Author:** [@Isa](https://discuss.elastic.co/u/Isa)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 7:35pm UTC](https://discuss.elastic.co/t/high-cpu-usage-80-90-on-elastic-search-cluster/253062 "2020-10-22T19:35:46Z")
Hi Disclaimer: I'm new to elastic and have inheritted this cluster so please excuse my ignorance. Our cluster is used for logs. We create an index for each system each day and some indexes are huge 500GB. We started n… --- ## [Configuring ES coordinating only nodes in Kubernetes](https://discuss.elastic.co/t/configuring-es-coordinating-only-nodes-in-kubernetes/253053)
**Author:** [@jdevilla20](https://discuss.elastic.co/u/jdevilla20)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 6:29pm UTC](https://discuss.elastic.co/t/configuring-es-coordinating-only-nodes-in-kubernetes/253053 "2020-10-22T18:29:23Z")
Hi I want to create coordinating only nodes on my ES cluster. How do I configure client only nodes? For example, in my data nodes, I do this: config: node.master: false node.data: true n… --- ## [Huge ES query logging issue](https://discuss.elastic.co/t/huge-es-query-logging-issue/253055)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 6:31pm UTC](https://discuss.elastic.co/t/huge-es-query-logging-issue/253055 "2020-10-22T18:31:06Z")
We use elasticsearch 7.2.0 Yesterday we had an incident where nearly 4-5mb (request size) query was fired by one of our client. We use master nodes as our coordinating nodes ( i know, bad practice ) One of our master n… --- ## [Primary shard is not active Timeout: \[1m\]](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout-1m/253051)
**Author:** [@jaraws](https://discuss.elastic.co/u/jaraws)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 6:16pm UTC](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout-1m/253051 "2020-10-22T18:16:50Z")
I have got a single node(unix machine) where we have setup ELK 6.8.6. However while sending the logs from logstash to elasticsearch I am getting following exception s repeatedly. \[2020-10-22T13:59:23,500\]\[INFO \]\[logstas… --- ## [Elasticsearch and logstash on AWS EC2](https://discuss.elastic.co/t/elasticsearch-and-logstash-on-aws-ec2/253052)
**Author:** [@Kishan](https://discuss.elastic.co/u/Kishan)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 6:21pm UTC](https://discuss.elastic.co/t/elasticsearch-and-logstash-on-aws-ec2/253052 "2020-10-22T18:21:04Z")
HI, I am setting up elasticsearch and logstash using AWS EC2 with auto scaling option . Private IPs of EC2 are dynamic for each EC2 Instance creation during Auto scaling . i am looking for any information on how to c… --- ## [Matches query equivalent to terms query](https://discuss.elastic.co/t/matches-query-equivalent-to-terms-query/253030)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 2\ **Last updated:** [October 22, 2020, 6:19pm UTC](https://discuss.elastic.co/t/matches-query-equivalent-to-terms-query/253030 "2020-10-22T18:19:56Z")
I'd like to know why elasticsearch doesn't support array of values for different kinds of queries. As of now i'm only looking for something like matches (something similar to terms query where array of terms are accepte… --- ## [Importing data from MYSQL to Kibana using LOGSTASH](https://discuss.elastic.co/t/importing-data-from-mysql-to-kibana-using-logstash/252140)
**Author:** [@thotakura2](https://discuss.elastic.co/u/thotakura2)\ **Replies:** 1\ **Last updated:** [October 22, 2020, 5:27pm UTC](https://discuss.elastic.co/t/importing-data-from-mysql-to-kibana-using-logstash/252140 "2020-10-22T17:27:38Z")
I am sharing my sample document { "\_index": "publication", "\_type": "\_doc", "\_id": "XMbVJXUBBO8i-6d1ZwTb", "\_version": 1, "\_score": null, "\_source": { "affiliation\_city": "Chennai", "description": "© 2020 Elsevier Ltd P… --- ## [Elasticsearch will not start](https://discuss.elastic.co/t/elasticsearch-will-not-start/253039)
**Author:** [@rgibson\_27](https://discuss.elastic.co/u/rgibson_27)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 4:00pm UTC](https://discuss.elastic.co/t/elasticsearch-will-not-start/253039 "2020-10-22T16:00:08Z")
I am having an issue with Elasticsearch starting on Ubuntu 20.04 while trying to start the service doing the following: systemctl restart elasticsearch Job for elasticsearch.service failed because a fatal signal was de… --- ## [Mentioning path in filebeat.yml](https://discuss.elastic.co/t/mentioning-path-in-filebeat-yml/253018)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 1\ **Last updated:** [October 22, 2020, 3:55pm UTC](https://discuss.elastic.co/t/mentioning-path-in-filebeat-yml/253018 "2020-10-22T15:55:49Z")
Hi All, The name of the log file that I need to mention in filebeat.yml is access-202010210000 I tried putting the following but it does not seem to work. Please help: filebeat.inputs: type: log paths: /opt/table… --- ## [Pipeline To Pipeline Communication inside Rancher](https://discuss.elastic.co/t/pipeline-to-pipeline-communication-inside-rancher/252743)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 1\ **Last updated:** [October 22, 2020, 3:14pm UTC](https://discuss.elastic.co/t/pipeline-to-pipeline-communication-inside-rancher/252743 "2020-10-22T15:14:29Z")
Hi, I need some guidance on setting up pipeline-to-pipeline communication inside of Rancher. What config files do I need at a minimum? I'm confused as to whether or not I need both logstash.yml and pipelines.yml configur… --- ## [Can not upload csv with coordinates to kibana](https://discuss.elastic.co/t/can-not-upload-csv-with-coordinates-to-kibana/252629)
**Author:** [@4T14S](https://discuss.elastic.co/u/4T14S)\ **Replies:** 3\ **Last updated:** [October 22, 2020, 3:24pm UTC](https://discuss.elastic.co/t/can-not-upload-csv-with-coordinates-to-kibana/252629 "2020-10-22T15:24:57Z")
Greetings! Hope you are well, I am trying to add this csv data to Elastic but throws error on every single line I try to add. I am loading it from ML / DataVisualizer, I have read documentation but I can´t see where is … --- ## [Meachine learning anomaly detection error: no node found](https://discuss.elastic.co/t/meachine-learning-anomaly-detection-error-no-node-found/252525)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 7\ **Last updated:** [October 22, 2020, 3:19pm UTC](https://discuss.elastic.co/t/meachine-learning-anomaly-detection-error-no-node-found/252525 "2020-10-22T15:19:32Z")
Hello, I am trying elastic machine learning, I tried to run default job for audibeat and I am getting this error in kibana logs : server log \[11:59:16.059\] \[error\]\[data\]\[elasticsearch\] \[status\_exception\]: No node … --- ## [ES JDBC Client compatible with specific minor versions only](https://discuss.elastic.co/t/es-jdbc-client-compatible-with-specific-minor-versions-only/252991)
**Author:** [@Mahdy\_S](https://discuss.elastic.co/u/Mahdy_S)\ **Replies:** 1\ **Last updated:** [October 22, 2020, 3:16pm UTC](https://discuss.elastic.co/t/es-jdbc-client-compatible-with-specific-minor-versions-only/252991 "2020-10-22T15:16:17Z")
Hi All, We have an Elasticsearch cluster in version 6. We are planning an upgrade to version 7. For one of our applications, we are using Elastic's JDBC client to get data from ES. We have unfortunately no other way to … --- ## [Possible to create elasticsearch indices on specific nodes?](https://discuss.elastic.co/t/possible-to-create-elasticsearch-indices-on-specific-nodes/253021)
**Author:** [@Nitish\_Goyal](https://discuss.elastic.co/u/Nitish_Goyal)\ **Replies:** 1\ **Last updated:** [October 22, 2020, 3:15pm UTC](https://discuss.elastic.co/t/possible-to-create-elasticsearch-indices-on-specific-nodes/253021 "2020-10-22T15:15:13Z")
Hi, Use case : We create daily indices. We want to reserve certain nodes only for some specific indices. Cluster size : 200 nodes Clients : 100+ We want to reserve 40 nodes only for important clients and leave 160 no… --- ## [Kibana authentication for iframe containing custom data](https://discuss.elastic.co/t/kibana-authentication-for-iframe-containing-custom-data/251269)
**Author:** [@renatoba](https://discuss.elastic.co/u/renatoba)\ **Replies:** 1\ **Last updated:** [October 22, 2020, 3:00pm UTC](https://discuss.elastic.co/t/kibana-authentication-for-iframe-containing-custom-data/251269 "2020-10-22T15:00:34Z")
I have a Kibana and Elasticsearch stack running with the following indexes: When a user in my application is part of a group, his stored index is: users\_production\_group-name. When a user is NOT part of a group, it's: … --- ## [Logstash output to elasticsearch - open distro for elasticsearch](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-open-distro-for-elasticsearch/252961)
**Author:** [@jafri6](https://discuss.elastic.co/u/jafri6)\ **Replies:** 2\ **Last updated:** [October 22, 2020, 2:28pm UTC](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-open-distro-for-elasticsearch/252961 "2020-10-22T14:28:39Z")
I have been working on this project, and my logstash configuration file works fine. Now I am trying to implement the same thing on a system that is running opendistro/elk stack. I have tried to fix most of the errors, b… --- ## [.logstash\_jdbc\_last\_run file is read only on logstash start up](https://discuss.elastic.co/t/logstash-jdbc-last-run-file-is-read-only-on-logstash-start-up/252993)
**Author:** [@milosh3411](https://discuss.elastic.co/u/milosh3411)\ **Replies:** 3\ **Last updated:** [October 22, 2020, 2:27pm UTC](https://discuss.elastic.co/t/logstash-jdbc-last-run-file-is-read-only-on-logstash-start-up/252993 "2020-10-22T14:27:28Z")
Hi, we have 2 logstash servers with same configurations, connecting to one database server through their jdbc input plugins. The idea was to have a highly available logstash. Both LS servers are using the same .logsta… --- ## [Visualization for Date histogram for server code error rate. e.g., counts of 400s reponses vs total request count in Kibana](https://discuss.elastic.co/t/visualization-for-date-histogram-for-server-code-error-rate-e-g-counts-of-400s-reponses-vs-total-request-count-in-kibana/252123)
**Author:** [@sidmon](https://discuss.elastic.co/u/sidmon)\ **Replies:** 1\ **Last updated:** [October 22, 2020, 2:23pm UTC](https://discuss.elastic.co/t/visualization-for-date-histogram-for-server-code-error-rate-e-g-counts-of-400s-reponses-vs-total-request-count-in-kibana/252123 "2020-10-22T14:23:30Z")
I have server status codes normalized to 200s, 400s, 500s. { "script": { "inline": "doc\['status'\].value \>= 400 && doc\['status'\].value \< 500? 400:doc\['status'\].value \>= 500 && doc\['status'\].value \< 600? 500… --- ## [Charting cumulative sum and residual](https://discuss.elastic.co/t/charting-cumulative-sum-and-residual/251361)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 1\ **Last updated:** [October 22, 2020, 2:22pm UTC](https://discuss.elastic.co/t/charting-cumulative-sum-and-residual/251361 "2020-10-22T14:22:42Z")
I've got a years worth of sales data, by day. I've also got an annual sales target. I'm trying to duplicate a Cognos report that shows 'sales remaining to goal' stacked over 'sales to date' for the year. Sort of looks… --- ## [Help me on logstash conf for Json input file](https://discuss.elastic.co/t/help-me-on-logstash-conf-for-json-input-file/253015)
**Author:** [@Uday\_kumar\_Chunduri](https://discuss.elastic.co/u/Uday_kumar_Chunduri)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 2:19pm UTC](https://discuss.elastic.co/t/help-me-on-logstash-conf-for-json-input-file/253015 "2020-10-22T14:19:30Z")
Hello, I have json file adding below I am trying generate fields from the json data using logstash conf file. please suggest me how to write config create a individual fields in elastic search. input json "count": 15, … --- ## [Understanding continous transforms syncing](https://discuss.elastic.co/t/understanding-continous-transforms-syncing/252827)
**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\ **Replies:** 4\ **Last updated:** [October 22, 2020, 2:17pm UTC](https://discuss.elastic.co/t/understanding-continous-transforms-syncing/252827 "2020-10-22T14:17:45Z")
Hi all, recently I played a bit with the Transforms feature on Elasticsearch. I started by creating this test continuous transform { "description": "Create summary transaction entities", "frequency": "1m", "source"… --- ## [Canvas Time filter not refreshing](https://discuss.elastic.co/t/canvas-time-filter-not-refreshing/252590)
**Author:** [@GavinBeattie](https://discuss.elastic.co/u/GavinBeattie)\ **Replies:** 5\ **Last updated:** [October 22, 2020, 2:15pm UTC](https://discuss.elastic.co/t/canvas-time-filter-not-refreshing/252590 "2020-10-22T14:15:16Z")
The Time filter element refreshes only some of the time. Increasing the end time generally works on change, decreasing end time generally doesn't. Page refresh doesn't help, strangely, toggling edit or full screen does. … --- ## [How to query an index pattern from a Kibana's scripted fields? (Curl Command)](https://discuss.elastic.co/t/how-to-query-an-index-pattern-from-a-kibanas-scripted-fields-curl-command/252900)
**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 1\ **Last updated:** [October 22, 2020, 2:10pm UTC](https://discuss.elastic.co/t/how-to-query-an-index-pattern-from-a-kibanas-scripted-fields-curl-command/252900 "2020-10-22T14:10:29Z")
I want to add scripted fields into index with the curl command, not from the interface. How can I do it? I want it to automatically occur on this screen. [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1734) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1736)