# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1808

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1809

---

## [Es instance unusable](https://discuss.elastic.co/t/es-instance-unusable/247768)

<div class="topic-metadata">

**Author:** [@lizhu](https://discuss.elastic.co/u/lizhu)\
**Replies:** 6\
**Last updated:** [September 14, 2020, 2:39pm UTC](https://discuss.elastic.co/t/es-instance-unusable/247768 "2020-09-14T14:39:45Z")

</div>

Hi I have an es(version 6.8.0) cluster with 5 nodes which have 261 shards that max size is 40G and min size is 700M，vm nodes：16 cpu and 32 G. It became unusable sometimes and print such logs how to trouble shoot? …

---

## [MongoDB logs are not reflecting in kibana dashboard](https://discuss.elastic.co/t/mongodb-logs-are-not-reflecting-in-kibana-dashboard/248493)

<div class="topic-metadata">

**Author:** [@vijay\_venky](https://discuss.elastic.co/u/vijay_venky)\
**Replies:** 10\
**Last updated:** [September 14, 2020, 2:36pm UTC](https://discuss.elastic.co/t/mongodb-logs-are-not-reflecting-in-kibana-dashboard/248493 "2020-09-14T14:36:39Z")

</div>

MongoDB logs are not reflecting in kibana dashboard MetricBeat YAML file is configured correctly and mongo DB YAML module enabled mongodb.yml: Module: mongodb Docs: https://www.elastic.co/guide/en/beats/metricbeat/6.8…

---

## [Issue in starting Kibana 7.9.1](https://discuss.elastic.co/t/issue-in-starting-kibana-7-9-1/248532)

<div class="topic-metadata">

**Author:** [@Prashant\_Achari](https://discuss.elastic.co/u/Prashant_Achari)\
**Replies:** 2\
**Last updated:** [September 14, 2020, 2:30pm UTC](https://discuss.elastic.co/t/issue-in-starting-kibana-7-9-1/248532 "2020-09-14T14:30:19Z")

</div>

Unable to start kibana getting error log \[13:18:38.159\] \[error\]\[plugins\]\[reporting\]\[validations\] The Reporting plugin encountered issues launching Chromium in a self-test. You may have trouble generating reports. log…

---

## [Interactive Property/Region boundaries with respect to labels on left side of the map and vice-versa](https://discuss.elastic.co/t/interactive-property-region-boundaries-with-respect-to-labels-on-left-side-of-the-map-and-vice-versa/248495)

<div class="topic-metadata">

**Author:** [@Macharathalli](https://discuss.elastic.co/u/Macharathalli)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 2:03pm UTC](https://discuss.elastic.co/t/interactive-property-region-boundaries-with-respect-to-labels-on-left-side-of-the-map-and-vice-versa/248495 "2020-09-14T14:03:08Z")

</div>

Hi Kibana Team, Here is our requirement : Showing all the multiple properties with boundaries in the map and respective names in left side panel of the map. Required User Interactions On clicking on any property/bo…

---

## [How to eliminate square brackets in the parsed logs](https://discuss.elastic.co/t/how-to-eliminate-square-brackets-in-the-parsed-logs/248502)

<div class="topic-metadata">

**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 1:51pm UTC](https://discuss.elastic.co/t/how-to-eliminate-square-brackets-in-the-parsed-logs/248502 "2020-09-14T13:51:09Z")

</div>

The pattern is : match =\> { "message" =\> "%{SYSLOG5424SD:time}%{SYSLOG5424SD:level}%{SYSLOG5424SD:message} %{SYSLOG5424SD:node} realm %{SYSLOG5424SD} authenticated user %{SYSLOG5424SD:user}, with roles %{SYSLOG5424S…

---

## [Escape character for SQL module](https://discuss.elastic.co/t/escape-character-for-sql-module/248352)

<div class="topic-metadata">

**Author:** [@Prashant\_Achari](https://discuss.elastic.co/u/Prashant_Achari)\
**Replies:** 3\
**Last updated:** [September 14, 2020, 1:46pm UTC](https://discuss.elastic.co/t/escape-character-for-sql-module/248352 "2020-09-14T13:46:58Z")

</div>

I am using SQL module and user password has "#". I gave "" prior to hash but the same is not working. Can you pl help error :oracle://GTXXX:July": invalid port ":July" after host

---

## [Freebsd 12.1 system.memory: VMStat error](https://discuss.elastic.co/t/freebsd-12-1-system-memory-vmstat-error/248342)

<div class="topic-metadata">

**Author:** [@THetherington](https://discuss.elastic.co/u/THetherington)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 1:37pm UTC](https://discuss.elastic.co/t/freebsd-12-1-system-memory-vmstat-error/248342 "2020-09-14T13:37:00Z")

</div>

Hi. is there a compatibility problem with FreeBSD 12.1 and Metricbeat 7.9.1? I'm not seeing the memory metricset working. below is the log: INFO module/wrapper.go:259 Error fetching data for metricset system.memor…

---

## [How to Merge Two indices into Single using Logstash](https://discuss.elastic.co/t/how-to-merge-two-indices-into-single-using-logstash/248534)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 0\
**Last updated:** [September 14, 2020, 1:30pm UTC](https://discuss.elastic.co/t/how-to-merge-two-indices-into-single-using-logstash/248534 "2020-09-14T13:30:22Z")

</div>

Hi Team I am having Elasticsearch Cluster of version 7.8.0 running with multiple indices without a pattern in their names. I want to merge two indices into single index and both \[ source \] do not have common field. I …

---

## [Can some help in value count aggregations](https://discuss.elastic.co/t/can-some-help-in-value-count-aggregations/248309)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 1:27pm UTC](https://discuss.elastic.co/t/can-some-help-in-value-count-aggregations/248309 "2020-09-14T13:27:48Z")

</div>

Hi, i am using value count aggragtion and with the script, pfb the script "script": { "lang": "painless", "source": "for(int i=0; i\<1; i++){if(doc\['message.code'\].size() \>0 && doc\['message.code'\].value \>= 300){doc\['…

---

## [How to detect route changes in kibana 7.8 OSS version using history.listen()](https://discuss.elastic.co/t/how-to-detect-route-changes-in-kibana-7-8-oss-version-using-history-listen/247700)

<div class="topic-metadata">

**Author:** [@Jayanth\_Mogadampalli](https://discuss.elastic.co/u/Jayanth_Mogadampalli)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 1:20pm UTC](https://discuss.elastic.co/t/how-to-detect-route-changes-in-kibana-7-8-oss-version-using-history-listen/247700 "2020-09-14T13:20:35Z")

</div>

I am developing a plugin for authentication and authorization For authorization, I need to protect all the routes So, I tried to listen to route changes using history.listen() in app\_router.tsx file present in repo Bu…

---

## [V7.8 : On route any common function](https://discuss.elastic.co/t/v7-8-on-route-any-common-function/247871)

<div class="topic-metadata">

**Author:** [@vvvprabhakar](https://discuss.elastic.co/u/vvvprabhakar)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 1:13pm UTC](https://discuss.elastic.co/t/v7-8-on-route-any-common-function/247871 "2020-09-14T13:13:00Z")

</div>

v7.8: On route any common function Is there any common function on every route change? For example if I am in the home page, if I navigate to the dashboard or visualize page I want to call a function before navigation …

---

## [Ingest-Attachment: Enabling OCR](https://discuss.elastic.co/t/ingest-attachment-enabling-ocr/248527)

<div class="topic-metadata">

**Author:** [@roelandw](https://discuss.elastic.co/u/roelandw)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 12:52pm UTC](https://discuss.elastic.co/t/ingest-attachment-enabling-ocr/248527 "2020-09-14T12:52:57Z")

</div>

Hi there, I'm trying to index some various documents using the Ingest-Attachment plugin. Some of these documents are image-based pdf documents that require OCR processing. According to this page on StackOverflow, Inges…

---

## [Did elasticsearch cluster name includes special characters](https://discuss.elastic.co/t/did-elasticsearch-cluster-name-includes-special-characters/248329)

<div class="topic-metadata">

**Author:** [@chandu2](https://discuss.elastic.co/u/chandu2)\
**Replies:** 10\
**Last updated:** [September 14, 2020, 12:50pm UTC](https://discuss.elastic.co/t/did-elasticsearch-cluster-name-includes-special-characters/248329 "2020-09-14T12:50:19Z")

</div>

Did elasticsearch cluster name includes special characters. If Iam including I am getting error. Please anyone clarify on this. How can I use special characters also

---

## [Access elasticsearch from public ip instead of LAN ipv4](https://discuss.elastic.co/t/access-elasticsearch-from-public-ip-instead-of-lan-ipv4/248087)

<div class="topic-metadata">

**Author:** [@Abdul\_Samad](https://discuss.elastic.co/u/Abdul_Samad)\
**Replies:** 12\
**Last updated:** [September 14, 2020, 12:46pm UTC](https://discuss.elastic.co/t/access-elasticsearch-from-public-ip-instead-of-lan-ipv4/248087 "2020-09-14T12:46:42Z")

</div>

I have elasticsearch installed in one machine with local LAN ipv4 = 192.168.. public ip = 39...\* i have http.port: 9200 network.host: 0.0.0.0 in my elasticsearch.yml I can access this with in same network: ipv4:9…

---

## [Filebeat output file permission](https://discuss.elastic.co/t/filebeat-output-file-permission/247793)

<div class="topic-metadata">

**Author:** [@Mostafa\_Hamdy](https://discuss.elastic.co/u/Mostafa_Hamdy)\
**Replies:** 3\
**Last updated:** [September 14, 2020, 12:46pm UTC](https://discuss.elastic.co/t/filebeat-output-file-permission/247793 "2020-09-14T12:46:35Z")

</div>

These are my configuration for filebeat output.file: path: "/var/lib/filebeat-logs" filename: filebeat permissions: 0664 This is the permission is see when i use ls -l -rw-r----- 1 root root 269219 Sep 7 17:01…

---

## [Kibana and reverse proxy nginx](https://discuss.elastic.co/t/kibana-and-reverse-proxy-nginx/248460)

<div class="topic-metadata">

**Author:** [@Cheroufa](https://discuss.elastic.co/u/Cheroufa)\
**Replies:** 2\
**Last updated:** [September 14, 2020, 12:39pm UTC](https://discuss.elastic.co/t/kibana-and-reverse-proxy-nginx/248460 "2020-09-14T12:39:12Z")

</div>

Hi everybody i have a cluster elasticsearch of 3 nodes and two instance of kibana installed on two differents machines for loadbalancing with nginx reverse proxy , i access to kibana UI to login but when i enter my logi…

---

## [Need to have the date time picker separately for each visuals in dashboard (kibana-7.5.0 oss version)](https://discuss.elastic.co/t/need-to-have-the-date-time-picker-separately-for-each-visuals-in-dashboard-kibana-7-5-0-oss-version/247534)

<div class="topic-metadata">

**Author:** [@vignesh27](https://discuss.elastic.co/u/vignesh27)\
**Replies:** 5\
**Last updated:** [September 14, 2020, 12:36pm UTC](https://discuss.elastic.co/t/need-to-have-the-date-time-picker-separately-for-each-visuals-in-dashboard-kibana-7-5-0-oss-version/247534 "2020-09-14T12:36:34Z")

</div>

Hi I need to customize the time range separately for each visuals in dashboard. For that i need date time picker separately for each visuals in dashboard. I am using kibana 7.5.0 oss version. Please help me with po…

---

## [Show line chart interval in label](https://discuss.elastic.co/t/show-line-chart-interval-in-label/248498)

<div class="topic-metadata">

**Author:** [@buncieboy](https://discuss.elastic.co/u/buncieboy)\
**Replies:** 4\
**Last updated:** [September 14, 2020, 12:28pm UTC](https://discuss.elastic.co/t/show-line-chart-interval-in-label/248498 "2020-09-14T12:28:44Z")

</div>

We have a line chart visualization to view occurrence over time. The time searched for can vary from hours to 10 years + so we are using the auto interval. Is it possible to pass the current setting of the auto interval …

---

## [Functionbeat deployment to s3 bucket fails](https://discuss.elastic.co/t/functionbeat-deployment-to-s3-bucket-fails/248111)

<div class="topic-metadata">

**Author:** [@kristofvb](https://discuss.elastic.co/u/kristofvb)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 12:02pm UTC](https://discuss.elastic.co/t/functionbeat-deployment-to-s3-bucket-fails/248111 "2020-09-14T12:02:22Z")

</div>

It looks like the issue reported in https://discuss.elastic.co/t/unable-to-deploy-functionbeat-to-s3-bucket/171371 and https://discuss.elastic.co/t/function-could-not-deploy-error-bucket-abc-already-exist-and-you-dont-ha…

---

## [Alert and report feature without license how to use](https://discuss.elastic.co/t/alert-and-report-feature-without-license-how-to-use/248369)

<div class="topic-metadata">

**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 11:37am UTC](https://discuss.elastic.co/t/alert-and-report-feature-without-license-how-to-use/248369 "2020-09-14T11:37:15Z")

</div>

I want to use alert and report feature in kibana 7.9 free. I am using trial license in that its working but after trail license how can I use there is any way I can use any plug in. I tried with sentinl plug in but its…

---

## [How to merge two arrays into single array](https://discuss.elastic.co/t/how-to-merge-two-arrays-into-single-array/247171)

<div class="topic-metadata">

**Author:** [@developer\_apk](https://discuss.elastic.co/u/developer_apk)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 11:35am UTC](https://discuss.elastic.co/t/how-to-merge-two-arrays-into-single-array/247171 "2020-09-14T11:35:06Z")

</div>

How can i show values in kibana pie chart from multiple array fields ? I have document like below: { "field1": \["a", "b", "c"\], "field2": \["a", "x", "y", "z"\], } I want to see the aggregations combining both fiel…

---

## [Aggregation Problem](https://discuss.elastic.co/t/aggregation-problem/247242)

<div class="topic-metadata">

**Author:** [@rHahem](https://discuss.elastic.co/u/rHahem)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 11:29am UTC](https://discuss.elastic.co/t/aggregation-problem/247242 "2020-09-14T11:29:01Z")

</div>

Hi, I'm sending my order details to Kibana to be able to track all order details and items sold. My items are in orderDetails.items but i can't seem to be able to aggregate by orderDetails.items.Quantity dispatchedOn S…

---

## [Long number search](https://discuss.elastic.co/t/long-number-search/247202)

<div class="topic-metadata">

**Author:** [@Aviram](https://discuss.elastic.co/u/Aviram)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 11:25am UTC](https://discuss.elastic.co/t/long-number-search/247202 "2020-09-14T11:25:17Z")

</div>

Hi . i have a number at a log , so i search : object: 111-222-333-444-555 This is the " string " that i looking for. but i get alsow all the answer of : 111 , 222 , 333 , 444 ,555 - with i don\`t want please your a…

---

## [Table showing response and response time](https://discuss.elastic.co/t/table-showing-response-and-response-time/248435)

<div class="topic-metadata">

**Author:** [@edwardj3](https://discuss.elastic.co/u/edwardj3)\
**Replies:** 2\
**Last updated:** [September 14, 2020, 11:22am UTC](https://discuss.elastic.co/t/table-showing-response-and-response-time/248435 "2020-09-14T11:22:04Z")

</div>

Hi all, Is it possible to create a visual like below in Kibana? I have 2 fields, status code (200, 400 etc) and elapsed time which captures the response time in ms so I need to group the values into seconds.

---

## [Alerts with the combination of multiple metrics](https://discuss.elastic.co/t/alerts-with-the-combination-of-multiple-metrics/247653)

<div class="topic-metadata">

**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 11:20am UTC](https://discuss.elastic.co/t/alerts-with-the-combination-of-multiple-metrics/247653 "2020-09-14T11:20:27Z")

</div>

Hi, we started using onpremise Elastic Stack 7.9.0 for monitoring infrastructure and logs. For alerting, how can I combine multiple metrics and create an alert? For ex to calculate the percentage of elasticsearch node…

---

## [Time between two timestamps in different files](https://discuss.elastic.co/t/time-between-two-timestamps-in-different-files/248327)

<div class="topic-metadata">

**Author:** [@Tommie](https://discuss.elastic.co/u/Tommie)\
**Replies:** 5\
**Last updated:** [September 14, 2020, 11:09am UTC](https://discuss.elastic.co/t/time-between-two-timestamps-in-different-files/248327 "2020-09-14T11:09:10Z")

</div>

Hi, Can you please advise me setting up the following? There are multiple log files (csv) coming from multiple sources. The logfiles contains data from transactions which are first processed in system A, then processe…

---

## [How to settings a elasticsearch cluster correctly](https://discuss.elastic.co/t/how-to-settings-a-elasticsearch-cluster-correctly/248500)

<div class="topic-metadata">

**Author:** [@djuwa4](https://discuss.elastic.co/u/djuwa4)\
**Replies:** 8\
**Last updated:** [September 14, 2020, 11:08am UTC](https://discuss.elastic.co/t/how-to-settings-a-elasticsearch-cluster-correctly/248500 "2020-09-14T11:08:09Z")

</div>

Hello! According to the terms of reference, I have to set up a cluster of five nodes. I have a number of questions. Can I specify one of the nodes simultaneously as a master node and as a data node? If I specifie…

---

## [Tsvb markdown with multiple line](https://discuss.elastic.co/t/tsvb-markdown-with-multiple-line/248248)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 10:58am UTC](https://discuss.elastic.co/t/tsvb-markdown-with-multiple-line/248248 "2020-09-14T10:58:10Z")

</div>

I want to put multiple link with different color on TSVB mark down \[link1\](#/dashboard/b9b2bed0-e5d7-11ea-ab58-ff09b8c93d) \[link2\](#/dashboard/86f34bd0-7d2e-11e9-a486-97beebb405) then I have put custom CSS text-align…

---

## [Kibana discover not showing correct "top 5 values"](https://discuss.elastic.co/t/kibana-discover-not-showing-correct-top-5-values/248478)

<div class="topic-metadata">

**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 10:46am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-correct-top-5-values/248478 "2020-09-14T10:46:39Z")

</div>

Hi, when I want to see the top 5 values for a field in discover, some documents are ignored and thus not showing in "top 5 values". for example if a select the facility field I can't see "SEC\_LOGIN" value: but if I …

---

## [ElasticSearch Performance](https://discuss.elastic.co/t/elasticsearch-performance/248026)

<div class="topic-metadata">

**Author:** [@oliverlucas](https://discuss.elastic.co/u/oliverlucas)\
**Replies:** 3\
**Last updated:** [September 14, 2020, 10:31am UTC](https://discuss.elastic.co/t/elasticsearch-performance/248026 "2020-09-14T10:31:35Z")

</div>

Hi All, So quite new to ElasticSearch, and very new to large amounts of data that we seem to be collecting, and because of this i have a few problems that hopefully someone can help with. Background: We're collecting…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1807)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1809)
