# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1867

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1868

---

## [Kibana export into CSV string got converted to number unexpectedly](https://discuss.elastic.co/t/kibana-export-into-csv-string-got-converted-to-number-unexpectedly/244947)

<div class="topic-metadata">

**Author:** [@ella](https://discuss.elastic.co/u/ella)\
**Replies:** 0\
**Last updated:** [August 13, 2020, 9:13pm UTC](https://discuss.elastic.co/t/kibana-export-into-csv-string-got-converted-to-number-unexpectedly/244947 "2020-08-13T21:13:16Z")

</div>

Hi I try to export data into CSV in kibana There is a field with value as '000011' and it's always shown as '11' even the the data type is string in index pattern. How can i solve this?

---

## [I have added a custom analyzer to my index settings, but not getting results](https://discuss.elastic.co/t/i-have-added-a-custom-analyzer-to-my-index-settings-but-not-getting-results/244771)

<div class="topic-metadata">

**Author:** [@Saumya\_Mishra](https://discuss.elastic.co/u/Saumya_Mishra)\
**Replies:** 9\
**Last updated:** [August 13, 2020, 8:56pm UTC](https://discuss.elastic.co/t/i-have-added-a-custom-analyzer-to-my-index-settings-but-not-getting-results/244771 "2020-08-13T20:56:59Z")

</div>

// This the setting of my index { "hw\_transcriptionlogindex" : { "settings" : { "index" : { "number\_of\_shards" : "1", "provided\_name" : "hw\_t…

---

## [Unable to cast org.elasticsearch.client.RestClient to org.elasticsearch.client.Client](https://discuss.elastic.co/t/unable-to-cast-org-elasticsearch-client-restclient-to-org-elasticsearch-client-client/244488)

<div class="topic-metadata">

**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\
**Replies:** 12\
**Last updated:** [August 13, 2020, 8:44pm UTC](https://discuss.elastic.co/t/unable-to-cast-org-elasticsearch-client-restclient-to-org-elasticsearch-client-client/244488 "2020-08-13T20:44:21Z")

</div>

Hi, In my code I am casting RestClient to Client. I don't see any runtime error but my application is not coming up due to the following error. Can someone help me org.apache.catalina.core.StandardContext.listenerStart …

---

## [Kibana sees only one logstash node](https://discuss.elastic.co/t/kibana-sees-only-one-logstash-node/244876)

<div class="topic-metadata">

**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\
**Replies:** 4\
**Last updated:** [August 13, 2020, 8:36pm UTC](https://discuss.elastic.co/t/kibana-sees-only-one-logstash-node/244876 "2020-08-13T20:36:58Z")

</div>

I see only one logstash node in kibana (it changes one time the first node and then the second ), I already deleted the uuid file and restarted the node but unfortunately it didn't create the new one . Version 6.3.0 P…

---

## [Can't see logstash monitoring window in kibana](https://discuss.elastic.co/t/cant-see-logstash-monitoring-window-in-kibana/244858)

<div class="topic-metadata">

**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\
**Replies:** 4\
**Last updated:** [August 13, 2020, 8:16pm UTC](https://discuss.elastic.co/t/cant-see-logstash-monitoring-window-in-kibana/244858 "2020-08-13T20:16:37Z")

</div>

Hi , I'm trying to configure logstash monitoring but can't see it in kibana , I see the index is created and have no related errors :slight\_smile: GET /\_cluster/settings { "persistent": { "xpack": { "monito…

---

## [Verify TLS enablement?](https://discuss.elastic.co/t/verify-tls-enablement/244944)

<div class="topic-metadata">

**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\
**Replies:** 0\
**Last updated:** [August 13, 2020, 8:13pm UTC](https://discuss.elastic.co/t/verify-tls-enablement/244944 "2020-08-13T20:13:42Z")

</div>

Hi, We recently enabled TLS on version 5.6.16 and it wasn't clear to us if there is any indication (even just a logging statement) that TLS enablement has kicked in. Is there anything we could look at for validation? T…

---

## [Problem to send data from filebeat autodiscover container to elastic search on kubernetes](https://discuss.elastic.co/t/problem-to-send-data-from-filebeat-autodiscover-container-to-elastic-search-on-kubernetes/244795)

<div class="topic-metadata">

**Author:** [@MrZycred](https://discuss.elastic.co/u/MrZycred)\
**Replies:** 1\
**Last updated:** [August 13, 2020, 8:12pm UTC](https://discuss.elastic.co/t/problem-to-send-data-from-filebeat-autodiscover-container-to-elastic-search-on-kubernetes/244795 "2020-08-13T20:12:56Z")

</div>

I'm trying to properly configure Filebeat autodiscover on my kubernetes cluster to send log data from a specific namespace to a VM containing the elasticsearch installed. I couldn't identify the problem, because apparent…

---

## [Pinned Filters](https://discuss.elastic.co/t/pinned-filters/244929)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 2\
**Last updated:** [August 13, 2020, 7:56pm UTC](https://discuss.elastic.co/t/pinned-filters/244929 "2020-08-13T19:56:33Z")

</div>

I have a dashboard that I call from a URL passing some \_q filters to it. This dashboard also has links to go other pages. however the filter wont stay. I understand that this filter is not pinned and may have something t…

---

## [Add multiple data values to Elasticsearch index using java REST API](https://discuss.elastic.co/t/add-multiple-data-values-to-elasticsearch-index-using-java-rest-api/244938)

<div class="topic-metadata">

**Author:** [@Venkat\_Raj](https://discuss.elastic.co/u/Venkat_Raj)\
**Replies:** 0\
**Last updated:** [August 13, 2020, 7:10pm UTC](https://discuss.elastic.co/t/add-multiple-data-values-to-elasticsearch-index-using-java-rest-api/244938 "2020-08-13T19:10:29Z")

</div>

Hi All, I am using JAVA REST API to create index and add data to the index. Below is the code I am using: Map\<String, Object\> dataMap = new HashMap\<String, Object\>(); dataMap.put("appname", app); dataMap.put("version…

---

## [Adding conditions dynamically to the watcher](https://discuss.elastic.co/t/adding-conditions-dynamically-to-the-watcher/244872)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 0\
**Last updated:** [August 13, 2020, 11:25am UTC](https://discuss.elastic.co/t/adding-conditions-dynamically-to-the-watcher/244872 "2020-08-13T11:25:41Z")

</div>

Hello Team, Could you please help me understand if adding conditions dynamically to the watcher is possible. I will try to explain the scenario. for example if i have 3 status codes for which i am checking the index if…

---

## [ILM - creating new policy throw error "invalid\_index\_name\_exception"](https://discuss.elastic.co/t/ilm-creating-new-policy-throw-error-invalid-index-name-exception/244517)

<div class="topic-metadata">

**Author:** [@Abdul\_Hameed](https://discuss.elastic.co/u/Abdul_Hameed)\
**Replies:** 1\
**Last updated:** [August 13, 2020, 6:52pm UTC](https://discuss.elastic.co/t/ilm-creating-new-policy-throw-error-invalid-index-name-exception/244517 "2020-08-13T18:52:27Z")

</div>

Hi, I am trying to create a policy in ILM to delete indices which are older than 90 days. My elasticsearch version is 6.6.1. When I run the following query in dev tools of kibana: PUT \_ilm/policy/retention\_policy { …

---

## [How to name dated Index for ILM with Roll over](https://discuss.elastic.co/t/how-to-name-dated-index-for-ilm-with-roll-over/244880)

<div class="topic-metadata">

**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\
**Replies:** 1\
**Last updated:** [August 13, 2020, 6:49pm UTC](https://discuss.elastic.co/t/how-to-name-dated-index-for-ilm-with-roll-over/244880 "2020-08-13T18:49:15Z")

</div>

I have an ILM policy with roll over functionality and below is my Index name which consists of year-month-date and roll over series.(YYYY.MM.DD-000001) 'PUT test-2020.07.26-000001 { "aliases": { "…

---

## [Update the Configuration File for Deployment](https://discuss.elastic.co/t/update-the-configuration-file-for-deployment/243828)

<div class="topic-metadata">

**Author:** [@Edmond\_Legaspi](https://discuss.elastic.co/u/Edmond_Legaspi)\
**Replies:** 1\
**Last updated:** [August 13, 2020, 6:28pm UTC](https://discuss.elastic.co/t/update-the-configuration-file-for-deployment/243828 "2020-08-13T18:28:09Z")

</div>

Hi, We would like to know if it is possible to add some configuration to kibana.yml files and setup\_connection.js prior to deployment. Sample is: Addin cors: { additionalHeaders: \['kbn-version','cookie'\], origin: \['\*'…

---

## [Find Exact same sentence from Document](https://discuss.elastic.co/t/find-exact-same-sentence-from-document/244663)

<div class="topic-metadata">

**Author:** [@aninda\_halder](https://discuss.elastic.co/u/aninda_halder)\
**Replies:** 4\
**Last updated:** [August 13, 2020, 6:07pm UTC](https://discuss.elastic.co/t/find-exact-same-sentence-from-document/244663 "2020-08-13T18:07:26Z")

</div>

Suppose i'm 3 documents . Abul hassan was a actor hassan was a actor abul was a actor if i want to search for abul hassan ,search query will return all of the 3 document , but i want to get only 1st document as this …

---

## [Monitor Acitve MQ server](https://discuss.elastic.co/t/monitor-acitve-mq-server/244923)

<div class="topic-metadata">

**Author:** [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)\
**Replies:** 1\
**Last updated:** [August 13, 2020, 5:02pm UTC](https://discuss.elastic.co/t/monitor-acitve-mq-server/244923 "2020-08-13T17:02:58Z")

</div>

Hi Team, What are configuration we have to do to monitor the active mq sever and also see what are the messgages are getting consumed by the consumers through metricbeat. Regards, Amritesh Mishra

---

## [Multiple data nodes with different storage size](https://discuss.elastic.co/t/multiple-data-nodes-with-different-storage-size/244885)

<div class="topic-metadata">

**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\
**Replies:** 2\
**Last updated:** [August 13, 2020, 5:01pm UTC](https://discuss.elastic.co/t/multiple-data-nodes-with-different-storage-size/244885 "2020-08-13T17:01:32Z")

</div>

Hi, I will reach soon my maximum cluster data size. I would like to add a temporary data node until I received a new one. This node has less storage than others but I wonder what will happened if I add it into my clus…

---

## [Cannot deploy elastic-stack into Kubernetes cluster. Error: found in Chart.yaml](https://discuss.elastic.co/t/cannot-deploy-elastic-stack-into-kubernetes-cluster-error-found-in-chart-yaml/244919)

<div class="topic-metadata">

**Author:** [@melissajenner22](https://discuss.elastic.co/u/melissajenner22)\
**Replies:** 0\
**Last updated:** [August 13, 2020, 4:37pm UTC](https://discuss.elastic.co/t/cannot-deploy-elastic-stack-into-kubernetes-cluster-error-found-in-chart-yaml/244919 "2020-08-13T16:37:49Z")

</div>

I would like to deploy elastic-stack into Kubernetes cluster. I git clone the chart, use default settings. But, I got errors. 1. git clone https://github.com/helm/charts 2. Create namespace kubectl create namespac…

---

## [Problem accessing file from base URL in Kibana 7.8](https://discuss.elastic.co/t/problem-accessing-file-from-base-url-in-kibana-7-8/244784)

<div class="topic-metadata">

**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\
**Replies:** 5\
**Last updated:** [August 13, 2020, 4:28pm UTC](https://discuss.elastic.co/t/problem-accessing-file-from-base-url-in-kibana-7-8/244784 "2020-08-13T16:28:28Z")

</div>

I'm converting a plugin from Kibana 7.5 to 7.8. In my code I grab an .xlsx file that is stored in a data directory in the public folder of my plugin. This works in 7.5 but does not work in 7.8. I'm grabbing this file: /…

---

## [Kibana 7.8.0 ( xpack login page customization )](https://discuss.elastic.co/t/kibana-7-8-0-xpack-login-page-customization/242155)

<div class="topic-metadata">

**Author:** [@Archangel](https://discuss.elastic.co/u/Archangel)\
**Replies:** 8\
**Last updated:** [August 13, 2020, 3:52pm UTC](https://discuss.elastic.co/t/kibana-7-8-0-xpack-login-page-customization/242155 "2020-08-13T15:52:10Z")

</div>

Has anybody tried to customize the login page? I tried pretty much everything imaginable, I did rm optimize/bundles but any changes I make doesn't seem to reflect when I restart kibana... I tried to change the login tex…

---

## [Scripted field Avg](https://discuss.elastic.co/t/scripted-field-avg/244904)

<div class="topic-metadata">

**Author:** [@Shyrine](https://discuss.elastic.co/u/Shyrine)\
**Replies:** 4\
**Last updated:** [August 13, 2020, 3:47pm UTC](https://discuss.elastic.co/t/scripted-field-avg/244904 "2020-08-13T15:47:11Z")

</div>

Hi, I'd like to calculate a scripted field that makes me do this : Count(nb\_request)/UniqueCount(nb\_request) But i have no idea of how the language paineless works. Thanks

---

## [Wrong logstash input filter invoked: csv filter is being invoked rather than http](https://discuss.elastic.co/t/wrong-logstash-input-filter-invoked-csv-filter-is-being-invoked-rather-than-http/244798)

<div class="topic-metadata">

**Author:** [@david6](https://discuss.elastic.co/u/david6)\
**Replies:** 2\
**Last updated:** [August 13, 2020, 3:11pm UTC](https://discuss.elastic.co/t/wrong-logstash-input-filter-invoked-csv-filter-is-being-invoked-rather-than-http/244798 "2020-08-13T15:11:13Z")

</div>

When I PUT a json body to the configured http input url, the CSV filter is being invoked instead of http. What am I missing? PUT: curl --header "Content-Type: application/json" \\ --request PUT \\ --data '{"field1": "ma…

---

## [How to change timestamp adding by logstash while sending logs to output plugin](https://discuss.elastic.co/t/how-to-change-timestamp-adding-by-logstash-while-sending-logs-to-output-plugin/244799)

<div class="topic-metadata">

**Author:** [@aksshm](https://discuss.elastic.co/u/aksshm)\
**Replies:** 5\
**Last updated:** [August 13, 2020, 3:04pm UTC](https://discuss.elastic.co/t/how-to-change-timestamp-adding-by-logstash-while-sending-logs-to-output-plugin/244799 "2020-08-13T15:04:16Z")

</div>

Hi, I'm running logstash with kafka as input plugin and syslog as output plugin. For kafka , all the messages are with local timezone/required timezone but while sending to syslog logstash is adding a timestamp in fron…

---

## [\[Question\] Can I distribute filebeat ZIP binaries?](https://discuss.elastic.co/t/question-can-i-distribute-filebeat-zip-binaries/244901)

<div class="topic-metadata">

**Author:** [@joaovperin](https://discuss.elastic.co/u/joaovperin)\
**Replies:** 0\
**Last updated:** [August 13, 2020, 2:53pm UTC](https://discuss.elastic.co/t/question-can-i-distribute-filebeat-zip-binaries/244901 "2020-08-13T14:53:12Z")

</div>

I have a distributed Spring application running on Windows. I'm using Filebeat to ship data to a server where I have Elastic Search, Logstash and Kibana running. Internally, I've installed Filebeat using the msi install…

---

## [Copy nested fields to new nested fields via Reindex or Update API](https://discuss.elastic.co/t/copy-nested-fields-to-new-nested-fields-via-reindex-or-update-api/244897)

<div class="topic-metadata">

**Author:** [@g30](https://discuss.elastic.co/u/g30)\
**Replies:** 0\
**Last updated:** [August 13, 2020, 2:16pm UTC](https://discuss.elastic.co/t/copy-nested-fields-to-new-nested-fields-via-reindex-or-update-api/244897 "2020-08-13T14:16:31Z")

</div>

Hi, We have the following data stored in our existing index. { "id": "83c55df4-dd6d-11ea-87d0-0242ac130003", "name": "test", "customData": { "id\_int": 16934, "year": "2020", "number": "0001", "anotherField":…

---

## [How to apply parse failure tag only when message fails BOTH filters instead of just one?](https://discuss.elastic.co/t/how-to-apply-parse-failure-tag-only-when-message-fails-both-filters-instead-of-just-one/244833)

<div class="topic-metadata">

**Author:** [@drjosephliu](https://discuss.elastic.co/u/drjosephliu)\
**Replies:** 1\
**Last updated:** [August 13, 2020, 2:28pm UTC](https://discuss.elastic.co/t/how-to-apply-parse-failure-tag-only-when-message-fails-both-filters-instead-of-just-one/244833 "2020-08-13T14:28:45Z")

</div>

My logtash config has two filters: 1) parses a log message and 2) parses a JSON message: filter { grok { match =\> { "message" =\> "\\\[%{TIMESTAMP\_ISO8601:log\_time}\\\]\\\[%{LOGLEVEL:log\_level}(?\<space\>\\s\*)\\\]\\\[%{DATA…

---

## [Need help with aggregation on a column (having json stream)](https://discuss.elastic.co/t/need-help-with-aggregation-on-a-column-having-json-stream/243777)

<div class="topic-metadata">

**Author:** [@Pankaj\_Chopra](https://discuss.elastic.co/u/Pankaj_Chopra)\
**Replies:** 2\
**Last updated:** [August 13, 2020, 2:26pm UTC](https://discuss.elastic.co/t/need-help-with-aggregation-on-a-column-having-json-stream/243777 "2020-08-13T14:26:35Z")

</div>

Hi Team, Apologies, I am very new to Kibana, but definitely quite excited to do a lot of things. We have a JSON stream on one of the column in each doc\['Stream'\] In the following example of JSON string in a document…

---

## [SSL handshake error with logstash 7.8.0 kafka integration](https://discuss.elastic.co/t/ssl-handshake-error-with-logstash-7-8-0-kafka-integration/244894)

<div class="topic-metadata">

**Author:** [@t1m\_e](https://discuss.elastic.co/u/t1m_e)\
**Replies:** 1\
**Last updated:** [August 13, 2020, 2:21pm UTC](https://discuss.elastic.co/t/ssl-handshake-error-with-logstash-7-8-0-kafka-integration/244894 "2020-08-13T14:21:28Z")

</div>

I'm having a hard time to make the kafka integration to work with logstash 7.8.0 and 7.8.1. My setup is relatively simple. I'm using self-signed certificates stored in a jks keystore. The logstash input is configured to…

---

## [Why is it that when using ReIndex, only the specified size can be migrated, but not all data can be migrated](https://discuss.elastic.co/t/why-is-it-that-when-using-reindex-only-the-specified-size-can-be-migrated-but-not-all-data-can-be-migrated/243416)

<div class="topic-metadata">

**Author:** [@JaretWang](https://discuss.elastic.co/u/JaretWang)\
**Replies:** 1\
**Last updated:** [August 13, 2020, 2:13pm UTC](https://discuss.elastic.co/t/why-is-it-that-when-using-reindex-only-the-specified-size-can-be-migrated-but-not-all-data-can-be-migrated/243416 "2020-08-13T14:13:13Z")

</div>

The server is 5 physical machines and the operation system is ubuntu18.04 Es old cluster version: 7.3.1 The related nodes, indexes, memory, and sharding cases are as follows The main Settings information of the …

---

## [Usage of large amount of data on Elastic Search](https://discuss.elastic.co/t/usage-of-large-amount-of-data-on-elastic-search/244718)

<div class="topic-metadata">

**Author:** [@Erdi](https://discuss.elastic.co/u/Erdi)\
**Replies:** 4\
**Last updated:** [August 13, 2020, 1:04pm UTC](https://discuss.elastic.co/t/usage-of-large-amount-of-data-on-elastic-search/244718 "2020-08-13T13:04:17Z")

</div>

Hello, I would like to ask a question related to usage of elasctic search. I wonder that What your experiences are when you are storing large amounts of data in Elastic Search? Do you suggest this usage for me? Did you …

---

## [Select your space You can change your space at anytime{ No spaces match search criteria }](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565)

<div class="topic-metadata">

**Author:** [@Gopi\_mdvk](https://discuss.elastic.co/u/Gopi_mdvk)\
**Replies:** 28\
**Last updated:** [August 13, 2020, 2:04pm UTC](https://discuss.elastic.co/t/select-your-space-you-can-change-your-space-at-anytime-no-spaces-match-search-criteria/237565 "2020-08-13T14:04:26Z")

</div>

Hi team, I am using elk 7.x and i am getting a strange error that "No spaces match search criteria".I am getting this error cople of times.my kibana was working till yesterday but when i try to open i getting the above…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1866)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1868)
