# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1863

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1864

---

## [How to create basic authentication for Kibana dashboard](https://discuss.elastic.co/t/how-to-create-basic-authentication-for-kibana-dashboard/245195)

<div class="topic-metadata">

**Author:** [@devwinner](https://discuss.elastic.co/u/devwinner)\
**Replies:** 1\
**Last updated:** [August 17, 2020, 8:34am UTC](https://discuss.elastic.co/t/how-to-create-basic-authentication-for-kibana-dashboard/245195 "2020-08-17T08:34:23Z")

</div>

Hi everybody. I'm using ELK stack 7.8. Everything is working fine. Now i want to add basic authentication to Kibana dashboard (simple username and pasword). How can i do it ?

---

## [Kibana dashboard for ES cluster monitoring](https://discuss.elastic.co/t/kibana-dashboard-for-es-cluster-monitoring/245036)

<div class="topic-metadata">

**Author:** [@dominique.bejean](https://discuss.elastic.co/u/dominique.bejean)\
**Replies:** 8\
**Last updated:** [August 17, 2020, 8:13am UTC](https://discuss.elastic.co/t/kibana-dashboard-for-es-cluster-monitoring/245036 "2020-08-17T08:13:28Z")

</div>

Hi, I have 2 separate ES clusters. One is dedicated to monitoring. I followed these instructions https://www.elastic.co/guide/en/elasticsearch/reference/current/monitoring-production.html On the monitoring cluster I h…

---

## [Can not find geoshape in aggregation of Nest 6.8 to 7.8.1](https://discuss.elastic.co/t/can-not-find-geoshape-in-aggregation-of-nest-6-8-to-7-8-1/245011)

<div class="topic-metadata">

**Author:** [@Dat\_Le\_Tien](https://discuss.elastic.co/u/Dat_Le_Tien)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 7:44am UTC](https://discuss.elastic.co/t/can-not-find-geoshape-in-aggregation-of-nest-6-8-to-7-8-1/245011 "2020-08-17T07:44:51Z")

</div>

Hello. Can anyone help me to anwser the question. My below script can work in knibana. But when I convert it to c# code by Nest. I can not find GeoShape in Aggregation container. It's only available in query. Is it possi…

---

## [Heap (Shard Amount and Close Index)](https://discuss.elastic.co/t/heap-shard-amount-and-close-index/245073)

<div class="topic-metadata">

**Author:** [@gogi](https://discuss.elastic.co/u/gogi)\
**Replies:** 3\
**Last updated:** [August 17, 2020, 7:37am UTC](https://discuss.elastic.co/t/heap-shard-amount-and-close-index/245073 "2020-08-17T07:37:29Z")

</div>

Hi all, i have a question regarding saving Heap Space for the ES Nodes. As far as i know there is a shard Limit per Node due to heap usage / management. https://www.elastic.co/guide/en/elasticsearch/reference/current/a…

---

## [Changes to Kibana Stack monitoring?](https://discuss.elastic.co/t/changes-to-kibana-stack-monitoring/245008)

<div class="topic-metadata">

**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\
**Replies:** 1\
**Last updated:** [August 17, 2020, 6:59am UTC](https://discuss.elastic.co/t/changes-to-kibana-stack-monitoring/245008 "2020-08-17T06:59:04Z")

</div>

Hello, I'm sure I have missed some recommended configuration changes so bare with me. Since the upgrade to Kibana version 7.8.1 from 7.5.2, I'm not allowed to open the Stack Monitoring link to my local ES cluster. I ha…

---

## [Kibana Alert and Action "Error: error validating action params"](https://discuss.elastic.co/t/kibana-alert-and-action-error-error-validating-action-params/244502)

<div class="topic-metadata">

**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\
**Replies:** 11\
**Last updated:** [August 17, 2020, 5:37am UTC](https://discuss.elastic.co/t/kibana-alert-and-action-error-error-validating-action-params/244502 "2020-08-17T05:37:47Z")

</div>

Hi, I'm using kibana alert and action feature (stack management \> kibana \> alert and action) My purpose is to store the alert results on index. I have created an alert with all conditions and other stuff but document …

---

## [Index Memory issue](https://discuss.elastic.co/t/index-memory-issue/244976)

<div class="topic-metadata">

**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\
**Replies:** 3\
**Last updated:** [August 17, 2020, 5:13am UTC](https://discuss.elastic.co/t/index-memory-issue/244976 "2020-08-17T05:13:22Z")

</div>

Hi Support, I checked with one of the elastic testing servers, I found some index memory difference. SS from the testing server - Heap Size: 3GB\[HDD 2TB\] SS from PROD server – Heap Size:30GB \[2TB\] Is there any co…

---

## [Does Elasticsearch Data Node full of replicas routing request to other nodes?](https://discuss.elastic.co/t/does-elasticsearch-data-node-full-of-replicas-routing-request-to-other-nodes/244987)

<div class="topic-metadata">

**Author:** [@vorapoap](https://discuss.elastic.co/u/vorapoap)\
**Replies:** 7\
**Last updated:** [August 17, 2020, 5:08am UTC](https://discuss.elastic.co/t/does-elasticsearch-data-node-full-of-replicas-routing-request-to-other-nodes/244987 "2020-08-17T05:08:58Z")

</div>

If the cluster has 4 nodes and the index has 4 primary shards. Each shard has 3 replicas, it means each node contains all shard data. When search query is sent to a node,. does it route query to other nodes? or it depe…

---

## [Unable to store binary in Elasticsearch through python REST API](https://discuss.elastic.co/t/unable-to-store-binary-in-elasticsearch-through-python-rest-api/245160)

<div class="topic-metadata">

**Author:** [@Dibyendu\_Dutta](https://discuss.elastic.co/u/Dibyendu_Dutta)\
**Replies:** 1\
**Last updated:** [August 17, 2020, 4:26am UTC](https://discuss.elastic.co/t/unable-to-store-binary-in-elasticsearch-through-python-rest-api/245160 "2020-08-17T04:26:59Z")

</div>

I have created a index like \> PUT new\_index\_blob \> { \> "mappings": { \> "properties": { \> "name": { \> "type": "text" \> }, \> "blob": { \> "type": "binary", \> "store": true \> …

---

## [Kibana 7.8.0 auto closed when click on Discover](https://discuss.elastic.co/t/kibana-7-8-0-auto-closed-when-click-on-discover/242296)

<div class="topic-metadata">

**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\
**Replies:** 4\
**Last updated:** [August 17, 2020, 4:05am UTC](https://discuss.elastic.co/t/kibana-7-8-0-auto-closed-when-click-on-discover/242296 "2020-08-17T04:05:06Z")

</div>

Hi All, I am using ELK 7.8.0. I have been inserting data into elasticsearch using logstash. Today, i loaded more data with different date format setting in the config file, i am not able to open Discover. Either Disco…

---

## [Error parsing xml with XmlSimple: Bad encoding name](https://discuss.elastic.co/t/error-parsing-xml-with-xmlsimple-bad-encoding-name/245147)

<div class="topic-metadata">

**Author:** [@insaneboiz](https://discuss.elastic.co/u/insaneboiz)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 3:58am UTC](https://discuss.elastic.co/t/error-parsing-xml-with-xmlsimple-bad-encoding-name/245147 "2020-08-17T03:58:56Z")

</div>

Hi guys, I've been having this trouble with Logstash v7.8.1 and v6.5.4 with EPO Syslog. It's a straight simple XML data, but the XML plugin could not parse it somehow. Sending Logstash logs to /home/XXX/Desktop/logstash…

---

## [How to create alert monitor where hits is over 100](https://discuss.elastic.co/t/how-to-create-alert-monitor-where-hits-is-over-100/244130)

<div class="topic-metadata">

**Author:** [@jamesyone](https://discuss.elastic.co/u/jamesyone)\
**Replies:** 6\
**Last updated:** [August 17, 2020, 3:44am UTC](https://discuss.elastic.co/t/how-to-create-alert-monitor-where-hits-is-over-100/244130 "2020-08-17T03:44:12Z")

</div>

Hi- Currently trying to create alert monitor in kibana where alert comes when count of certain object hits 100. For some reason, a single count triggers an alert... I want to make it so that 100 counts of the certain ob…

---

## [Elastic Search Killed on start up!](https://discuss.elastic.co/t/elastic-search-killed-on-start-up/245162)

<div class="topic-metadata">

**Author:** [@carterdacat](https://discuss.elastic.co/u/carterdacat)\
**Replies:** 23\
**Last updated:** [August 17, 2020, 2:53am UTC](https://discuss.elastic.co/t/elastic-search-killed-on-start-up/245162 "2020-08-17T02:53:47Z")

</div>

Hi! I just installed elastic on my pi running ubuntu 20.06, i got v5.6, and when ever i run ./bin/elasticsearch it just returns "killed" ubuntu@ubuntu:~/elasticsearch-5.6.16$ sudo ES\_JAVA\_OPTS="-Xms2g -Xmx2g" ./bin/elas…

---

## [Is it possible to combine results for .DateRange and .QueryString using NEST client?](https://discuss.elastic.co/t/is-it-possible-to-combine-results-for-daterange-and-querystring-using-nest-client/244474)

<div class="topic-metadata">

**Author:** [@mccamike](https://discuss.elastic.co/u/mccamike)\
**Replies:** 1\
**Last updated:** [August 17, 2020, 1:16am UTC](https://discuss.elastic.co/t/is-it-possible-to-combine-results-for-daterange-and-querystring-using-nest-client/244474 "2020-08-17T01:16:54Z")

</div>

I currently have a query where I'd like to combine the free text nature of .QueryString with the range operations of .DateRange in the same resultset. I was looking at how to combine queries and it looks like you can u…

---

## [Possible bug in elasticsearch nuget package](https://discuss.elastic.co/t/possible-bug-in-elasticsearch-nuget-package/244568)

<div class="topic-metadata">

**Author:** [@vohanka](https://discuss.elastic.co/u/vohanka)\
**Replies:** 1\
**Last updated:** [August 17, 2020, 1:01am UTC](https://discuss.elastic.co/t/possible-bug-in-elasticsearch-nuget-package/244568 "2020-08-17T01:01:14Z")

</div>

Hi, I found that elastic maybe have error in requirements of his nuget package. On nuget store is: Dependencies: .NET Framework, Version=v4.6.1 System.Diagnostics.DiagnosticSource (\>= 4.5.1). But if I try to run que…

---

## [How do I get elasticsearch endpoint for 3 coordinating node setup in Azure?](https://discuss.elastic.co/t/how-do-i-get-elasticsearch-endpoint-for-3-coordinating-node-setup-in-azure/244646)

<div class="topic-metadata">

**Author:** [@jpatel](https://discuss.elastic.co/u/jpatel)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 12:58am UTC](https://discuss.elastic.co/t/how-do-i-get-elasticsearch-endpoint-for-3-coordinating-node-setup-in-azure/244646 "2020-08-17T00:58:16Z")

</div>

I have installed 3 nodes of elastic search from Azure marketplace and any node can act as master node. Now how do I connect to the cluster ?

---

## [Facets performance: want to know just if has at least one item](https://discuss.elastic.co/t/facets-performance-want-to-know-just-if-has-at-least-one-item/245170)

<div class="topic-metadata">

**Author:** [@cristianossd](https://discuss.elastic.co/u/cristianossd)\
**Replies:** 0\
**Last updated:** [August 16, 2020, 11:30pm UTC](https://discuss.elastic.co/t/facets-performance-want-to-know-just-if-has-at-least-one-item/245170 "2020-08-16T23:30:50Z")

</div>

Hi, everyone! Consider that I have million of documents with its categories A, B and C. I am searching to show the query results and requesting the facets (for a filter) to know if these categories have documents. But, …

---

## [Get message information from filebeat](https://discuss.elastic.co/t/get-message-information-from-filebeat/244948)

<div class="topic-metadata">

**Author:** [@jorge\_rivera](https://discuss.elastic.co/u/jorge_rivera)\
**Replies:** 0\
**Last updated:** [August 13, 2020, 9:14pm UTC](https://discuss.elastic.co/t/get-message-information-from-filebeat/244948 "2020-08-13T21:14:44Z")

</div>

Good afternoon. I am starting in ELK issues and I have a question that I hope you will help me solve. I am sending logs from a cisco 5520 controller to a server (udp: 514) but when I receive the log with filebeat I get…

---

## [Access sharepoint file as input in Elasticsearch](https://discuss.elastic.co/t/access-sharepoint-file-as-input-in-elasticsearch/244961)

<div class="topic-metadata">

**Author:** [@ranu\_shekhar](https://discuss.elastic.co/u/ranu_shekhar)\
**Replies:** 1\
**Last updated:** [August 16, 2020, 10:03pm UTC](https://discuss.elastic.co/t/access-sharepoint-file-as-input-in-elasticsearch/244961 "2020-08-16T22:03:21Z")

</div>

Hi, I have an excel file which is stored in sharepoint. I want to ingest that file directly in elasticsearch via logstash input filter.But I am not finding any plugin in logstash to ingest the data through logstash.

---

## [Parse the log in filebeat](https://discuss.elastic.co/t/parse-the-log-in-filebeat/244993)

<div class="topic-metadata">

**Author:** [@sandeep1-0](https://discuss.elastic.co/u/sandeep1-0)\
**Replies:** 0\
**Last updated:** [August 14, 2020, 10:41am UTC](https://discuss.elastic.co/t/parse-the-log-in-filebeat/244993 "2020-08-14T10:41:57Z")

</div>

Hey my current setup includes filebeat sending data to kafka. So i wanted to have control over data going into partition. So by making use of a unique key we can actually control it. So the question is . Is there a way …

---

## [Use filebeat as a relay?](https://discuss.elastic.co/t/use-filebeat-as-a-relay/245055)

<div class="topic-metadata">

**Author:** [@astateofmind](https://discuss.elastic.co/u/astateofmind)\
**Replies:** 0\
**Last updated:** [August 14, 2020, 6:44pm UTC](https://discuss.elastic.co/t/use-filebeat-as-a-relay/245055 "2020-08-14T18:44:24Z")

</div>

I have a bit more complicated setup. But what I want is something similar to what's below: Host1 -\> Host2 -\> Logstash -\> ES. And i want to ship the metrics and logs from Host1 to ES. Metrics and logs from Host2 are i…

---

## [Using Stack Monitoring for monitor multiple cluster](https://discuss.elastic.co/t/using-stack-monitoring-for-monitor-multiple-cluster/244824)

<div class="topic-metadata">

**Author:** [@redondoxx](https://discuss.elastic.co/u/redondoxx)\
**Replies:** 2\
**Last updated:** [August 16, 2020, 9:49pm UTC](https://discuss.elastic.co/t/using-stack-monitoring-for-monitor-multiple-cluster/244824 "2020-08-16T21:49:22Z")

</div>

Hi, i have 1 centralize cluster (Monitor Cluster) to storage log and metrics from multiple cluster (Env Cluster). My Monitor Cluster deploy using ECK version 1.2. And my Env Cluster is using Elasticsearch Cloud Service…

---

## [How can i use ELK Stack with Infra as code?](https://discuss.elastic.co/t/how-can-i-use-elk-stack-with-infra-as-code/245126)

<div class="topic-metadata">

**Author:** [@jonhmb](https://discuss.elastic.co/u/jonhmb)\
**Replies:** 0\
**Last updated:** [August 16, 2020, 7:10am UTC](https://discuss.elastic.co/t/how-can-i-use-elk-stack-with-infra-as-code/245126 "2020-08-16T07:10:50Z")

</div>

Hi, can anyone help me with an idea? I need to use elk stack with infra as code to not lose my data when something happens with my server..... can anyone give a idea on how can i do it ?

---

## [Filebeat to kafka - monitoring](https://discuss.elastic.co/t/filebeat-to-kafka-monitoring/245148)

<div class="topic-metadata">

**Author:** [@grynhtjnyuk](https://discuss.elastic.co/u/grynhtjnyuk)\
**Replies:** 0\
**Last updated:** [August 16, 2020, 2:36pm UTC](https://discuss.elastic.co/t/filebeat-to-kafka-monitoring/245148 "2020-08-16T14:36:44Z")

</div>

I have filebeat that sends data to kafka. Could you please tell me, how can I monitor this flow and send allert when no new data in kafka longer than 20 minutes for example. do you know some kafka metrics ? could it b…

---

## [How to degrade Elastic License from platinum to Basic](https://discuss.elastic.co/t/how-to-degrade-elastic-license-from-platinum-to-basic/245121)

<div class="topic-metadata">

**Author:** [@Sandeep\_Reddy\_Gutha](https://discuss.elastic.co/u/Sandeep_Reddy_Gutha)\
**Replies:** 1\
**Last updated:** [August 16, 2020, 9:27pm UTC](https://discuss.elastic.co/t/how-to-degrade-elastic-license-from-platinum-to-basic/245121 "2020-08-16T21:27:58Z")

</div>

Hi, I am currently using 6.8.11 version for both elastic and kibana. I am planning to degrade ElasticSearch license from Platinum to Basic. Could you please help us on this. Thanks in advance.

---

## [Generate automatic index names like "%{\[container.name\]}-%{+yyyy.MM.dd}" with ILM enabled](https://discuss.elastic.co/t/generate-automatic-index-names-like-container-name-yyyy-mm-dd-with-ilm-enabled/244217)

<div class="topic-metadata">

**Author:** [@sholokhov17](https://discuss.elastic.co/u/sholokhov17)\
**Replies:** 4\
**Last updated:** [August 16, 2020, 9:26pm UTC](https://discuss.elastic.co/t/generate-automatic-index-names-like-container-name-yyyy-mm-dd-with-ilm-enabled/244217 "2020-08-16T21:26:34Z")

</div>

Hello, our worked config of filebeat.yml: #===== Filebeat Inputs ====== filebeat.inputs: - type: docker combine\_partial: true containers: path: "/var/lib/docker/containers" ids : - "\*" #===== Filebeat…

---

## [Kibana autorisation by username and password](https://discuss.elastic.co/t/kibana-autorisation-by-username-and-password/244990)

<div class="topic-metadata">

**Author:** [@zakabluk](https://discuss.elastic.co/u/zakabluk)\
**Replies:** 1\
**Last updated:** [August 16, 2020, 8:39pm UTC](https://discuss.elastic.co/t/kibana-autorisation-by-username-and-password/244990 "2020-08-16T20:39:39Z")

</div>

I have 3 master node, 3 data node, one coordinator and one kibana. I added to every config for all nodes option: xpack.security.enabled=true And for kibana: "--elasticsearch.username=kibana\_system2", "--elasticsearc…

---

## [Logstash](https://discuss.elastic.co/t/logstash/245152)

<div class="topic-metadata">

**Author:** [@shashanksingh](https://discuss.elastic.co/u/shashanksingh)\
**Replies:** 1\
**Last updated:** [August 16, 2020, 6:54pm UTC](https://discuss.elastic.co/t/logstash/245152 "2020-08-16T18:54:18Z")

</div>

hi , i am new to elastic stack . i am configuring filebeat logstash elasticsearch kibana. and i am getting some error. please help me as soon as possible. thank you. root@ip-10-0-1-187:~# sudo /usr/share/logstash/bin/lo…

---

## [Max aggregation in transforms](https://discuss.elastic.co/t/max-aggregation-in-transforms/245159)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 0\
**Last updated:** [August 16, 2020, 6:45pm UTC](https://discuss.elastic.co/t/max-aggregation-in-transforms/245159 "2020-08-16T18:45:39Z")

</div>

Hi, In transform, i have created one max field with the below script, but when the documents are not present it is returning as null value and getting fail. can you please suggest how to handle it. "MaxHandlingDuratio…

---

## [ctx.containksKey is not working in 7.6 version](https://discuss.elastic.co/t/ctx-containkskey-is-not-working-in-7-6-version/244846)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 4\
**Last updated:** [August 16, 2020, 6:43pm UTC](https://discuss.elastic.co/t/ctx-containkskey-is-not-working-in-7-6-version/244846 "2020-08-16T18:43:09Z")

</div>

Hi I am using ctx.containsKey in ingestpipeline, it is not working in 7.6.2 vesrsion. but it is working in 7.8 version. can you please help here is it expected behaviour in 7.6 versions

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1862)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1864)
