# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1754 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1755 --- ## [Vega Tooltip does not show full text](https://discuss.elastic.co/t/vega-tooltip-does-not-show-full-text/251519)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 3\ **Last updated:** [October 13, 2020, 12:27pm UTC](https://discuss.elastic.co/t/vega-tooltip-does-not-show-full-text/251519 "2020-10-13T12:27:39Z")
I'm using Elasticsearch and Kibana version 7.6.1 and Vega version 4.3.0. When I hover the data, it will show up the details but the value of policy is too long and does not show full name. The code I added is below. … --- ## [The node does not automatically return to the Elasticsearch cluster](https://discuss.elastic.co/t/the-node-does-not-automatically-return-to-the-elasticsearch-cluster/251848)
**Author:** [@djuwa4](https://discuss.elastic.co/u/djuwa4)\ **Replies:** 18\ **Last updated:** [October 13, 2020, 1:41pm UTC](https://discuss.elastic.co/t/the-node-does-not-automatically-return-to-the-elasticsearch-cluster/251848 "2020-10-13T13:41:14Z")
Good afternoon! I have a cluster of five nodes: three node.master and all five node.data. There is a problem when testing it. If you turn off one node and turn it on again, its elasticsearch instance does not see the clu… --- ## [Kibana Maps wrong encoding](https://discuss.elastic.co/t/kibana-maps-wrong-encoding/251895)
**Author:** [@tomsozolins](https://discuss.elastic.co/u/tomsozolins)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 1:27pm UTC](https://discuss.elastic.co/t/kibana-maps-wrong-encoding/251895 "2020-10-13T13:27:58Z")
Hello! I have a problem with Kibana Maps character encoding. Im using ElasticStack version 7.9.2 and when i load UTF-8 geojson file in Kibana Maps some of the characters look wrong. If i update the maps index document… --- ## [When kibana logout the url is broken](https://discuss.elastic.co/t/when-kibana-logout-the-url-is-broken/251574)
**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 6\ **Last updated:** [October 13, 2020, 1:06pm UTC](https://discuss.elastic.co/t/when-kibana-logout-the-url-is-broken/251574 "2020-10-13T13:06:26Z")
The url from kibana logout :http://localhost:5601/login?next=%2Floginnull#?\_g=() Screen that comes up after logout and login again : help me ? --- ## [HTTP Header in Webhook Connectors dont save (Alerts and Actions KIbana)](https://discuss.elastic.co/t/http-header-in-webhook-connectors-dont-save-alerts-and-actions-kibana/251564)
**Author:** [@Guilherme](https://discuss.elastic.co/u/Guilherme)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 12:37pm UTC](https://discuss.elastic.co/t/http-header-in-webhook-connectors-dont-save-alerts-and-actions-kibana/251564 "2020-10-13T12:37:08Z")
Hello gentlemen, When creating a webhook connector in Kibana in alerts and actions I check the option to add a header and after I click on save, but when I go back in the connector the header disappears and it doesn't l… --- ## [When using KV in logstash, I am getting my key with escaped character, how do i read this value in the Ruby?](https://discuss.elastic.co/t/when-using-kv-in-logstash-i-am-getting-my-key-with-escaped-character-how-do-i-read-this-value-in-the-ruby/251845)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 12:12pm UTC](https://discuss.elastic.co/t/when-using-kv-in-logstash-i-am-getting-my-key-with-escaped-character-how-do-i-read-this-value-in-the-ruby/251845 "2020-10-13T12:12:58Z")
I have data coming from Kafka, and the data will look like this: "x-vcap-request-id":"smitshah", "x-cf-applicationid":"test", "x-cf-instanceid":"test2", "sec-ch-ua":"\\"something\\";\\"willwork\\"" It is simili… --- ## [Visualize zipcodes on Kibana Maps](https://discuss.elastic.co/t/visualize-zipcodes-on-kibana-maps/251860)
**Author:** [@Baptiste\_Orsoni](https://discuss.elastic.co/u/Baptiste_Orsoni)\ **Replies:** 4\ **Last updated:** [October 13, 2020, 11:59am UTC](https://discuss.elastic.co/t/visualize-zipcodes-on-kibana-maps/251860 "2020-10-13T11:59:48Z")
Hello everyone, I have csv data with information about users and in particular their zip code. I wanted to know how it was possible to display these zip codes on Kibana Maps knowing that I don't have the longitude and … --- ## [Send email whenever error occurs in the logs](https://discuss.elastic.co/t/send-email-whenever-error-occurs-in-the-logs/251888)
**Author:** [@Vatsal\_Agarwal](https://discuss.elastic.co/u/Vatsal_Agarwal)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 10:26am UTC](https://discuss.elastic.co/t/send-email-whenever-error-occurs-in-the-logs/251888 "2020-10-13T10:26:48Z")
Hi I need to send email automatically whenever any error comes in my Elastic search. Is there anyway to do it. I dont want to use Elastic Cloud for it. I can use Watcher in Kibana, but my question is whether the "Wat… --- ## [Timezone in metricbeat](https://discuss.elastic.co/t/timezone-in-metricbeat/251547)
**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 11:36am UTC](https://discuss.elastic.co/t/timezone-in-metricbeat/251547 "2020-10-13T11:36:01Z")
Hi I have installed metricbeat , on all my servers . servers are in different timezone . How do i browse based on timezone ? as timestamp get converted to UTC or Can i have another field servertime with timezone ? … --- ## [Attributes for template of system indices](https://discuss.elastic.co/t/attributes-for-template-of-system-indices/251893)
**Author:** [@v.n](https://discuss.elastic.co/u/v.n)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 11:05am UTC](https://discuss.elastic.co/t/attributes-for-template-of-system-indices/251893 "2020-10-13T11:05:34Z")
We have hot data nodes and warm/cold. But shards of system indices always partly store on warm data nodes. Of cource I can add an attribute pointing where to store this index but I prefer to save this info in template. … --- ## [Retryer: send unwait signal to consumer. Logstash overload?](https://discuss.elastic.co/t/retryer-send-unwait-signal-to-consumer-logstash-overload/250366)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 4\ **Last updated:** [October 13, 2020, 11:00am UTC](https://discuss.elastic.co/t/retryer-send-unwait-signal-to-consumer-logstash-overload/250366 "2020-10-13T11:00:04Z")
Hi everybody, I have a 3 cluster node used to collect logs from several services (received using Filebeat clients). On those nodes, I have installed also Logstash (for each node) with the same configuration and pipelin… --- ## [User file access metrics using metricbeat and its visualization in kibana](https://discuss.elastic.co/t/user-file-access-metrics-using-metricbeat-and-its-visualization-in-kibana/251890)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 10:48am UTC](https://discuss.elastic.co/t/user-file-access-metrics-using-metricbeat-and-its-visualization-in-kibana/251890 "2020-10-13T10:48:08Z")
Hi there, my use case is the following: I want to see read write operations per user on a file on a linux vm. I am shipping the metrics using metricbeat so I should have all required data alrady. I am just struggeling … --- ## [Is a value stored twice when using a tolowercase normalizer on keywords?](https://discuss.elastic.co/t/is-a-value-stored-twice-when-using-a-tolowercase-normalizer-on-keywords/251884)
**Author:** [@DanglingNode](https://discuss.elastic.co/u/DanglingNode)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 10:43am UTC](https://discuss.elastic.co/t/is-a-value-stored-twice-when-using-a-tolowercase-normalizer-on-keywords/251884 "2020-10-13T10:43:15Z")
Hi all, I'm using a 'tolowercase' normalizer upon index (mapping) time to be able to find documents with value 'John Doe' when searching for 'john doe'. Upon index creation: client.Indices.Create( … --- ## [Snapshot expiration date with S3 bucket](https://discuss.elastic.co/t/snapshot-expiration-date-with-s3-bucket/251887)
**Author:** [@sahitkumarreddy](https://discuss.elastic.co/u/sahitkumarreddy)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 10:23am UTC](https://discuss.elastic.co/t/snapshot-expiration-date-with-s3-bucket/251887 "2020-10-13T10:23:57Z")
We have a policy for creating snapshots to aws S3 bucket. In retention, we have to set expire\_after( delete after) 'y days'. Suppose if set expiration to 1 day, will it delete the snapshot just from elastic search or wi… --- ## [How to optimise heap usage on elasticsearch nodes?](https://discuss.elastic.co/t/how-to-optimise-heap-usage-on-elasticsearch-nodes/251627)
**Author:** [@Nitish\_Goyal](https://discuss.elastic.co/u/Nitish_Goyal)\ **Replies:** 8\ **Last updated:** [October 13, 2020, 10:20am UTC](https://discuss.elastic.co/t/how-to-optimise-heap-usage-on-elasticsearch-nodes/251627 "2020-10-13T10:20:53Z")
We use elasticsearch for analytics and ingest around 3 billions events a day. For this, we create daily indices and each index has a ttl of 30 days. We flush out older indices through a cron job Cluster Size : 200 nodes … --- ## [Can run Filebeat from HTML page or Javascript?](https://discuss.elastic.co/t/can-run-filebeat-from-html-page-or-javascript/251886)
**Author:** [@pducduy99](https://discuss.elastic.co/u/pducduy99)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 10:08am UTC](https://discuss.elastic.co/t/can-run-filebeat-from-html-page-or-javascript/251886 "2020-10-13T10:08:09Z")
Hi all, now i am doing task make a button in web page will be ship log at local to server remote immediate and once time when button clicked. I was try to run batch file from html pages but doesn't work, not allow. Can y… --- ## [Can I use elasticsearch 7 with Kibana 6](https://discuss.elastic.co/t/can-i-use-elasticsearch-7-with-kibana-6/251867)
**Author:** [@111320](https://discuss.elastic.co/u/111320)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 10:02am UTC](https://discuss.elastic.co/t/can-i-use-elasticsearch-7-with-kibana-6/251867 "2020-10-13T10:02:49Z")
I have a server with RHEL 6. I saw in the Support Matrix that Kibana 7 is not supported in RHEL 6. Can I use Elasticsearch 7 with Kibana 6? --- ## [Error In Logstash JSON Parsing](https://discuss.elastic.co/t/error-in-logstash-json-parsing/251880)
**Author:** [@rkAyachitula](https://discuss.elastic.co/u/rkAyachitula)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 9:56am UTC](https://discuss.elastic.co/t/error-in-logstash-json-parsing/251880 "2020-10-13T09:56:34Z")
Hi All, I have noticed a log message which is being pumped to elastic search through Logstash JSON filter combined two different messages to a single message. Both of these messages came from different filebeats. What m… --- ## [Only want alias field name showing in Kibana visualization aggregation drop down list, and need to hide the actual field name from drop down list](https://discuss.elastic.co/t/only-want-alias-field-name-showing-in-kibana-visualization-aggregation-drop-down-list-and-need-to-hide-the-actual-field-name-from-drop-down-list/251473)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 9:34am UTC](https://discuss.elastic.co/t/only-want-alias-field-name-showing-in-kibana-visualization-aggregation-drop-down-list-and-need-to-hide-the-actual-field-name-from-drop-down-list/251473 "2020-10-13T09:34:44Z")
I have some questions about alias fields in Kibana. I have created a set of aliases on the actual ES field name, like the table below. But in Kibana, I only want to see those alias names ( ES Alias Name column ) appear … --- ## [How to match Elasticsearch timestamp to windows format?](https://discuss.elastic.co/t/how-to-match-elasticsearch-timestamp-to-windows-format/251515)
**Author:** [@Enigmatr](https://discuss.elastic.co/u/Enigmatr)\ **Replies:** 5\ **Last updated:** [October 13, 2020, 9:28am UTC](https://discuss.elastic.co/t/how-to-match-elasticsearch-timestamp-to-windows-format/251515 "2020-10-13T09:28:37Z")
I'm currently trying to parse some logs using Elasticsearch and displaying them on Kibana. I have tried to make sure that the timestamp of the filter in the conf.d file matches the format that is displayed in the log fil… --- ## [Trigger event when file is closed in file-output plugin](https://discuss.elastic.co/t/trigger-event-when-file-is-closed-in-file-output-plugin/251870)
**Author:** [@yogevyuval](https://discuss.elastic.co/u/yogevyuval)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 9:06am UTC](https://discuss.elastic.co/t/trigger-event-when-file-is-closed-in-file-output-plugin/251870 "2020-10-13T09:06:51Z")
Hi, Is it possible to get some kind of an event/trigger/code execution every time the file-output plugin closes a file? The use case is that I want some processing to happen after every file is created, and I was wonde… --- ## [Script\_score query: fvh highlighter doesn't work](https://discuss.elastic.co/t/script-score-query-fvh-highlighter-doesnt-work/248926)
**Author:** [@grob](https://discuss.elastic.co/u/grob)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 8:50am UTC](https://discuss.elastic.co/t/script-score-query-fvh-highlighter-doesnt-work/248926 "2020-10-13T08:50:03Z")
Hi, (ElasticSearch 7.8.0) it looks like script\_score queries in conjunction with fvh highligher and matched\_fields doesn't work. I don't know if i'm missing something, but i couldn't find any do's/don'ts in the documen… --- ## [Unable to start Elasticsearch](https://discuss.elastic.co/t/unable-to-start-elasticsearch/251816)
**Author:** [@prabhukiran](https://discuss.elastic.co/u/prabhukiran)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 8:18am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch/251816 "2020-10-13T08:18:01Z")
I've installed Elasticsearch on a clean, new, updated build of CentOS (7.7.1908). This installation is in support of a Wazuh installation using instructions found here: https://documentation.wazuh.com/3.10/installation-… --- ## [Query with two date range filters 8x slower than an equivalent query with one?](https://discuss.elastic.co/t/query-with-two-date-range-filters-8x-slower-than-an-equivalent-query-with-one/251804)
**Author:** [@adamleonard](https://discuss.elastic.co/u/adamleonard)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 8:06am UTC](https://discuss.elastic.co/t/query-with-two-date-range-filters-8x-slower-than-an-equivalent-query-with-one/251804 "2020-10-13T08:06:36Z")
We recently added a query that had two date range filters applied for the same field, in short, if dates X, Y, and Z are sorted chronologically, the query was: "Date between X and Y" "Date before Z" This query is of c… --- ## [ELK is working fine at one system and another system it's not working](https://discuss.elastic.co/t/elk-is-working-fine-at-one-system-and-another-system-its-not-working/251856)
**Author:** [@parvajkhan1](https://discuss.elastic.co/u/parvajkhan1)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 8:05am UTC](https://discuss.elastic.co/t/elk-is-working-fine-at-one-system-and-another-system-its-not-working/251856 "2020-10-13T08:05:34Z")
Hi All, We are new at elk. We are facing the problem at ELK at one system it's working fine, but at another system it's very slow or not working. problem like (expand your time range) when we do get the logs. Re… --- ## [Kibana error randomly](https://discuss.elastic.co/t/kibana-error-randomly/249471)
**Author:** [@Gentle-Chen](https://discuss.elastic.co/u/Gentle-Chen)\ **Replies:** 7\ **Last updated:** [October 13, 2020, 8:03am UTC](https://discuss.elastic.co/t/kibana-error-randomly/249471 "2020-10-13T08:03:53Z")
Hi, I am upgrading Kibana from 6.0 to 7.2.1, and it works fine after upgraded, but i found it often shutdown randomly with below error, do you have any idea? events.js:174 throw er; // Unhandled 'error' event … --- ## [Failed to parse field \[coordinates\] of type \[geo\_shape\]](https://discuss.elastic.co/t/failed-to-parse-field-coordinates-of-type-geo-shape/251305)
**Author:** [@davidb1](https://discuss.elastic.co/u/davidb1)\ **Replies:** 6\ **Last updated:** [October 13, 2020, 7:36am UTC](https://discuss.elastic.co/t/failed-to-parse-field-coordinates-of-type-geo-shape/251305 "2020-10-13T07:36:02Z")
I'm using Kibana to upload a geojson to Elasticsearch. It loads and shows up without problems but when I try to index it I get: { "success": true, "failures": \[ { "item": 0, "reason": "failed to pars… --- ## [Index.lifecycle.rollover\_alias does not point to index](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-does-not-point-to-index/250609)
**Author:** [@Zoltan\_Kovacs](https://discuss.elastic.co/u/Zoltan_Kovacs)\ **Replies:** 6\ **Last updated:** [October 13, 2020, 7:51am UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-does-not-point-to-index/250609 "2020-10-13T07:51:00Z")
Hello @warkolm ! I run to this error today. I use NLog to write to ES. I would like to use rollover for not blow up my monthly index more than 50GB. Error: \[2020-10-01T07:54:17,209\]\[ERROR\]\[o.e.x.i.IndexLifecycleRunner… --- ## [Logstash ruby time difference appends date\_time](https://discuss.elastic.co/t/logstash-ruby-time-difference-appends-date-time/251857)
**Author:** [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 7:31am UTC](https://discuss.elastic.co/t/logstash-ruby-time-difference-appends-date-time/251857 "2020-10-13T07:31:01Z")
Hello, Am trying to get the difference between two time fields in my logstash ruby filter and when the difference in ingested to elasticsearch I see date\_time appended to the value of the difference. Any possible way we… --- ## [Context Suggester Input Generation: How to optimize \_analyze call over large no. of documents](https://discuss.elastic.co/t/context-suggester-input-generation-how-to-optimize-analyze-call-over-large-no-of-documents/251853)
**Author:** [@Bhavik92](https://discuss.elastic.co/u/Bhavik92)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 7:02am UTC](https://discuss.elastic.co/t/context-suggester-input-generation-how-to-optimize-analyze-call-over-large-no-of-documents/251853 "2020-10-13T07:02:18Z")
We are using Context suggester on our documents to support autocompletion. However, since Context suggester does not support shingle analyzer out of the box, we're trying to generate shingles ourselves. Our custom analy… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1753) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1755)