# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1739 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1740 --- ## [User access privilege on specific dashboard](https://discuss.elastic.co/t/user-access-privilege-on-specific-dashboard/252834)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 1:32pm UTC](https://discuss.elastic.co/t/user-access-privilege-on-specific-dashboard/252834 "2020-10-21T13:32:42Z")
I have created 2 different dashboard and users: Dashboards: "Dashboard1" and "Dashboard 2" Users: "User A" and "User B" -"user A" can see only "Dashboard1" -"user B" can see only "Dashboard 2". How can i solve t… --- ## [Line Visualize show top Value for each not Overall Top Value](https://discuss.elastic.co/t/line-visualize-show-top-value-for-each-not-overall-top-value/252813)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 1:28pm UTC](https://discuss.elastic.co/t/line-visualize-show-top-value-for-each-not-overall-top-value/252813 "2020-10-21T13:28:13Z")
Hei All i am using kibana 7.5 version... i want to create Line Visualization with date histogram to show top 10 in time range. but in line visualization its show top value for each date i see in lens we can create li… --- ## [Apache logs missing SSL Protocol v2](https://discuss.elastic.co/t/apache-logs-missing-ssl-protocol-v2/252400)
**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\ **Replies:** 5\ **Last updated:** [October 21, 2020, 1:26pm UTC](https://discuss.elastic.co/t/apache-logs-missing-ssl-protocol-v2/252400 "2020-10-21T13:26:44Z")
OP: Despite SSL Protocol and request time showing in my log format directive in Apache 2.4 I am not seeing either of them in ES/Kibana. How is this fixed? I am using filebeat and shipping logs directly to ES. Upgraded … --- ## [Filebeat not able to send data to TLS enabled Kafka cluster](https://discuss.elastic.co/t/filebeat-not-able-to-send-data-to-tls-enabled-kafka-cluster/251701)
**Author:** [@Amritanshu\_Pandey](https://discuss.elastic.co/u/Amritanshu_Pandey)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 1:24pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-send-data-to-tls-enabled-kafka-cluster/251701 "2020-10-21T13:24:08Z")
Hi Team, We are trying to send some logs from a Windows host using filebeat to a Kafka cluster that uses TLS for encryption and Kerberos for Authentication. Filebeat version: 7.9.2 On the Filebeats logs I get this mes… --- ## [Metricbeat for application connected to NAS drive](https://discuss.elastic.co/t/metricbeat-for-application-connected-to-nas-drive/252020)
**Author:** [@nagabhushan.tr](https://discuss.elastic.co/u/nagabhushan.tr)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 1:18pm UTC](https://discuss.elastic.co/t/metricbeat-for-application-connected-to-nas-drive/252020 "2020-10-21T13:18:36Z")
We have an application which connects to NetApp NAS drive, the application/users dont have permissions to setup beats on NAS drive. Is there a way we can monitor metrics like disk IO, disk Space just because of the fact… --- ## [Jvm memory problem (Data too large, data for.....)](https://discuss.elastic.co/t/jvm-memory-problem-data-too-large-data-for/252756)
**Author:** [@Ariel\_Zach](https://discuss.elastic.co/u/Ariel_Zach)\ **Replies:** 6\ **Last updated:** [October 21, 2020, 12:58pm UTC](https://discuss.elastic.co/t/jvm-memory-problem-data-too-large-data-for/252756 "2020-10-21T12:58:21Z")
Hello, I am having a problem with the memory of the jvm, I have two clusters with the same configuration and hardware to which I can derive traffic, one with 6.8 and the other with 7.8, the 6.8 cluster has no problem, i… --- ## [How to reduce primary storage size](https://discuss.elastic.co/t/how-to-reduce-primary-storage-size/252518)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 7\ **Last updated:** [October 21, 2020, 12:50pm UTC](https://discuss.elastic.co/t/how-to-reduce-primary-storage-size/252518 "2020-10-21T12:50:56Z")
hi all, generally, when I use Logstash I like to remove the message field if the filter section doesn't contain any error. I do it to reduce the size of every document. since this time I will not use Logstash, is there… --- ## [Filebeat fills up the disk very quickly and write log repeatedly](https://discuss.elastic.co/t/filebeat-fills-up-the-disk-very-quickly-and-write-log-repeatedly/252404)
**Author:** [@linxianwu](https://discuss.elastic.co/u/linxianwu)\ **Replies:** 4\ **Last updated:** [October 21, 2020, 12:44pm UTC](https://discuss.elastic.co/t/filebeat-fills-up-the-disk-very-quickly-and-write-log-repeatedly/252404 "2020-10-21T12:44:06Z")
In our environment, filebeat has a lot of this error (file name is replaced): DEBUG \[input\] log/input.go:261 State for file not removed because harvester not finished: /var/log/xxx.log DEBUG \[input\] log/input.go:251 Rem… --- ## [Not able to process UDP traffic](https://discuss.elastic.co/t/not-able-to-process-udp-traffic/252838)
**Author:** [@joao.matias](https://discuss.elastic.co/u/joao.matias)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 12:31pm UTC](https://discuss.elastic.co/t/not-able-to-process-udp-traffic/252838 "2020-10-21T12:31:35Z")
Hello everyone. I have a host with the following specs CentOS 7 16GB RAM 2 CPUs 100GB storage 2 network interfaces And I'm trying to set up logstash to receive and filter the following types of logs Netflow over UD… --- ## [Indexing rate drops periodically - performance troubleshooting](https://discuss.elastic.co/t/indexing-rate-drops-periodically-performance-troubleshooting/252832)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 12:17pm UTC](https://discuss.elastic.co/t/indexing-rate-drops-periodically-performance-troubleshooting/252832 "2020-10-21T12:17:33Z")
I have a ES 7.9.2, \[ 10node cluster each: 4Core, 32G RAM, 500GB SSD\] I tried performance test on index , 5 primary shards, 0 replica. It reaches around 200K events/sec and I found weird performance drops. Can you help… --- ## [Discover page error in kibana](https://discuss.elastic.co/t/discover-page-error-in-kibana/252523)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 7\ **Last updated:** [October 21, 2020, 11:58am UTC](https://discuss.elastic.co/t/discover-page-error-in-kibana/252523 "2020-10-21T11:58:39Z")
Hi All, My kibana was working fine earlier and all of a sudden it started displaying internal error in the discover page and i'm not able to view any data in discover page, SearchError: Internal Server Error at htt… --- ## [Aggregation max additional info](https://discuss.elastic.co/t/aggregation-max-additional-info/252830)
**Author:** [@Jogi\_Michal](https://discuss.elastic.co/u/Jogi_Michal)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 11:17am UTC](https://discuss.elastic.co/t/aggregation-max-additional-info/252830 "2020-10-21T11:17:45Z")
Hi all, I have a question if there is a possibility to add some extra fields somehow to the max aggregation result? My document looks like this: { "updated": { "type": "date" }, "scores": { "pr… --- ## [Need help in v7.9.2 cluster configuration of 3 nodes](https://discuss.elastic.co/t/need-help-in-v7-9-2-cluster-configuration-of-3-nodes/252101)
**Author:** [@sges](https://discuss.elastic.co/u/sges)\ **Replies:** 7\ **Last updated:** [October 21, 2020, 11:10am UTC](https://discuss.elastic.co/t/need-help-in-v7-9-2-cluster-configuration-of-3-nodes/252101 "2020-10-21T11:10:59Z")
Hello, I'm setting up a cluster with elasticsearch v7.9.2 and for that I'm setting up a 3 node elasticsearch cluster environment on separate VM's. On performing search I'm seeing IllegalStateException in the logs. I nee… --- ## [Document compression - duplicate fields](https://discuss.elastic.co/t/document-compression-duplicate-fields/252658)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 11:10am UTC](https://discuss.elastic.co/t/document-compression-duplicate-fields/252658 "2020-10-21T11:10:16Z")
Hi, If i copy fields and rename them to match ECS you have a duplicate of data, are these 2 fields deduplicated as part of the compression within the doc? Looking at the wiki for Thanks Phil --- ## [Automatically create a multivalued field that consists of values from selected fields](https://discuss.elastic.co/t/automatically-create-a-multivalued-field-that-consists-of-values-from-selected-fields/252826)
**Author:** [@newcomer](https://discuss.elastic.co/u/newcomer)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 11:08am UTC](https://discuss.elastic.co/t/automatically-create-a-multivalued-field-that-consists-of-values-from-selected-fields/252826 "2020-10-21T11:08:44Z")
I would like to have a field that consists of values of other fields. E.g if a document has 2 fields; name and age, then there will be automatically created a new multivalued field that consists of these two formentioned… --- ## [Weird logs pushed by logstash after going secure](https://discuss.elastic.co/t/weird-logs-pushed-by-logstash-after-going-secure/250179)
**Author:** [@Kwiskas](https://discuss.elastic.co/u/Kwiskas)\ **Replies:** 4\ **Last updated:** [October 21, 2020, 10:29am UTC](https://discuss.elastic.co/t/weird-logs-pushed-by-logstash-after-going-secure/250179 "2020-10-21T10:29:18Z")
Hello Our elk stack is on version 7.6.2 A few days ago we pushed on our team logstash as secure to enable x-pack we dit same for elastic nodes also kibana Since we did that logstash is sending weird logs and paramete… --- ## [Invalid initial heap size on ES7 for Windows](https://discuss.elastic.co/t/invalid-initial-heap-size-on-es7-for-windows/252781)
**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 9:38am UTC](https://discuss.elastic.co/t/invalid-initial-heap-size-on-es7-for-windows/252781 "2020-10-21T09:38:50Z")
We are trying to install ES7 as windows service with elasticsearch-service.bat install We are setting ES\_JAVA\_OPTS via environment variable with -Xms4g -Xmx4g But we are getting the following error: Error: Could n… --- ## [Logs are coming delayed/late in Kibana UI discover](https://discuss.elastic.co/t/logs-are-coming-delayed-late-in-kibana-ui-discover/252295)
**Author:** [@Sayontani\_Bose](https://discuss.elastic.co/u/Sayontani_Bose)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 9:24am UTC](https://discuss.elastic.co/t/logs-are-coming-delayed-late-in-kibana-ui-discover/252295 "2020-10-21T09:24:33Z")
Hi My wazuh manager timezone is -\> Asia/Kolkata (IST, +0530) My Elastic server timezone is -\> Asia/Kolkata (IST, +0530) In ossec log file logs are coming into this timezone . In kibana.yml it sets as UTC and in Kiba… --- ## [Problem with embed dashboards when using markdown links](https://discuss.elastic.co/t/problem-with-embed-dashboards-when-using-markdown-links/252335)
**Author:** [@gizem](https://discuss.elastic.co/u/gizem)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 8:42am UTC](https://discuss.elastic.co/t/problem-with-embed-dashboards-when-using-markdown-links/252335 "2020-10-21T08:42:38Z")
Hello; I am using kibana 7.9.2. I made a dashboard and I used markdown visualization for making a tab. Tab links another dashboards. Here is the markdown : \[Overview\](#dashboard/79de3590-b2a3-11e9-ac48-859d1fb44fa3) | … --- ## [Undefined fields ARE SHOWN in "Available fields" in Kibana](https://discuss.elastic.co/t/undefined-fields-are-shown-in-available-fields-in-kibana/252320)
**Author:** [@Rudolf\_Reddy\_Macejka](https://discuss.elastic.co/u/Rudolf_Reddy_Macejka)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 8:34am UTC](https://discuss.elastic.co/t/undefined-fields-are-shown-in-available-fields-in-kibana/252320 "2020-10-21T08:34:33Z")
Hello, I would like to try to understand and fix "cosmetic" issue in Discovery panel in Kibana. I have a mapping by which I wanted to allow store any field, but index only defined fields. Hence I have chosen dynamic:fa… --- ## [Using stored\_fields for retrieving a subset of the fields](https://discuss.elastic.co/t/using-stored-fields-for-retrieving-a-subset-of-the-fields/252619)
**Author:** [@Arjun\_Singri](https://discuss.elastic.co/u/Arjun_Singri)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 8:26am UTC](https://discuss.elastic.co/t/using-stored-fields-for-retrieving-a-subset-of-the-fields/252619 "2020-10-21T08:26:15Z")
The documentation and recommendation for using stored\_fields feature in ElasticSearch has been changing. In the latest version, stored\_fields is not recommended - https://www.elastic.co/guide/en/elasticsearch/reference/7… --- ## [How do you time search query while debugging?](https://discuss.elastic.co/t/how-do-you-time-search-query-while-debugging/252739)
**Author:** [@Jaspreet\_Singh](https://discuss.elastic.co/u/Jaspreet_Singh)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 8:24am UTC](https://discuss.elastic.co/t/how-do-you-time-search-query-while-debugging/252739 "2020-10-21T08:24:19Z")
I'm currently debugging a slow query issue. As expected, the first time query execution is the slowest with subsequent hits way faster due to caching. As such, what is the best way to get consistent query times so I ca… --- ## [Newbie: 2 Different Queries on 1 PHP Page-Multi Search?](https://discuss.elastic.co/t/newbie-2-different-queries-on-1-php-page-multi-search/252725)
**Author:** [@zi94sm65](https://discuss.elastic.co/u/zi94sm65)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 6:18pm UTC](https://discuss.elastic.co/t/newbie-2-different-queries-on-1-php-page-multi-search/252725 "2020-10-20T18:18:24Z")
I am running elasticsearch by itself on localhost (no graphical user interface) "number" : "7.9.2", "lucene\_version" : "8.6.2", "minimum\_wire\_compatibility\_version" : "6.8.0", "minimum\_index\_compatibility\_ve… --- ## [Hide/show children in Controls - option list](https://discuss.elastic.co/t/hide-show-children-in-controls-option-list/251242)
**Author:** [@sus](https://discuss.elastic.co/u/sus)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 7:05am UTC](https://discuss.elastic.co/t/hide-show-children-in-controls-option-list/251242 "2020-10-13T07:05:00Z")
Hi! So, Im having problems figuring out how do show/hide children as option lists. Im working in Kibana 7.8.1. Im working with documents which contains information about import/export of different foods in different co… --- ## [Logstash-7.8.1 - Couldn't connect MySQL jdbc on plugin logstash-integration-jdbc (5.0.5)](https://discuss.elastic.co/t/logstash-7-8-1-couldnt-connect-mysql-jdbc-on-plugin-logstash-integration-jdbc-5-0-5/252767)
**Author:** [@matthewdeepblue](https://discuss.elastic.co/u/matthewdeepblue)\ **Replies:** 2\ **Last updated:** [October 21, 2020, 7:57am UTC](https://discuss.elastic.co/t/logstash-7-8-1-couldnt-connect-mysql-jdbc-on-plugin-logstash-integration-jdbc-5-0-5/252767 "2020-10-21T07:57:13Z")
Hi guys. I got error message below when I tried to connect MySQL RDS through logstash plugin. please post here if you guys have any idea. Thanks. \[2020-10-21T04:27:23,538\]\[ERROR\]\[logstash.inputs.jdbc \] Unable to … --- ## [Elasticsearch "OR" condition query](https://discuss.elastic.co/t/elasticsearch-or-condition-query/252531)
**Author:** [@Yotam\_Mazurik](https://discuss.elastic.co/u/Yotam_Mazurik)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 7:49am UTC](https://discuss.elastic.co/t/elasticsearch-or-condition-query/252531 "2020-10-21T07:49:05Z")
Hi! I am trying to query an index with two different document fieldsets. to be more specific, I am trying to query all documents where field1 is equal to field2 but field1 and field2 will never exists in the same docum… --- ## [To push updated data from mongodb using logstash logstash-input-mongodb plugin](https://discuss.elastic.co/t/to-push-updated-data-from-mongodb-using-logstash-logstash-input-mongodb-plugin/252791)
**Author:** [@Durga\_AK](https://discuss.elastic.co/u/Durga_AK)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 7:46am UTC](https://discuss.elastic.co/t/to-push-updated-data-from-mongodb-using-logstash-logstash-input-mongodb-plugin/252791 "2020-10-21T07:46:01Z")
Im trying to sync updated data from mongodb using the logstash-input-mongodb plugin. New data inserted into mongodb is getting indexed in Elastic search. Already existing data and updated data is not moving to Elastic se… --- ## [No new daily indices after setup TLS/SSL](https://discuss.elastic.co/t/no-new-daily-indices-after-setup-tls-ssl/252786)
**Author:** [@LuWe](https://discuss.elastic.co/u/LuWe)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 7:19am UTC](https://discuss.elastic.co/t/no-new-daily-indices-after-setup-tls-ssl/252786 "2020-10-21T07:19:22Z")
I have a small elk cluster. 2 elastic nodes, 2 data nodes, one of the data node is also master vote only. One Kibana node, 2 logstash nodes. Every node is a single hyper-v VM. Everything worked nicely until i start conf… --- ## [Data Loss with HTTP Input Plugin](https://discuss.elastic.co/t/data-loss-with-http-input-plugin/252782)
**Author:** [@mbrill](https://discuss.elastic.co/u/mbrill)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 7:11am UTC](https://discuss.elastic.co/t/data-loss-with-http-input-plugin/252782 "2020-10-21T07:11:55Z")
Hi, i'm currently running into the following issue with the http input plugin for logstash: Whenever a request is sent to the pipeline while the pipeline is busy, this request is dropped. I have read about the blocking… --- ## [How to store & get data with different time interval](https://discuss.elastic.co/t/how-to-store-get-data-with-different-time-interval/252775)
**Author:** [@James\_Liu](https://discuss.elastic.co/u/James_Liu)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 6:04am UTC](https://discuss.elastic.co/t/how-to-store-get-data-with-different-time-interval/252775 "2020-10-21T06:04:30Z")
Our team are currently focusing on log datas and visualizing them. We are building a platform analyzing every audit log by log4j in our java project: log -\> filebeat -\> logstash -\> elasticsearch -\> our platform CURREN… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1738) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1740)