# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1916

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1917

---

## [Scoring when using wildcard search in query\_string](https://discuss.elastic.co/t/scoring-when-using-wildcard-search-in-query-string/241964)

<div class="topic-metadata">

**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\
**Replies:** 0\
**Last updated:** [July 21, 2020, 4:29am UTC](https://discuss.elastic.co/t/scoring-when-using-wildcard-search-in-query-string/241964 "2020-07-21T04:29:30Z")

</div>

Hi, This may be partly a general FTS question If I have two tokens like "abc" and "abc123" And user searches for "abc", in general is "abc" considered more relevant or "abc123"? Is there any deterministic ranking by…

---

## [Input file path wildcard is not working](https://discuss.elastic.co/t/input-file-path-wildcard-is-not-working/241617)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 3\
**Last updated:** [July 21, 2020, 4:16am UTC](https://discuss.elastic.co/t/input-file-path-wildcard-is-not-working/241617 "2020-07-21T04:16:25Z")

</div>

Hello all, input file path wildcard is not working, As I remember, logstash 6.5.4 don't have the proble, while currently 7.6.2 encounter this problem, what could be the reason? Not working: input { file { …

---

## [Pull data periodically from an Elasticsearch index](https://discuss.elastic.co/t/pull-data-periodically-from-an-elasticsearch-index/241962)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 0\
**Last updated:** [July 21, 2020, 3:52am UTC](https://discuss.elastic.co/t/pull-data-periodically-from-an-elasticsearch-index/241962 "2020-07-21T03:52:07Z")

</div>

Hi, We have some log indices and now there is a requirement to extract some pieces of information from them and put them in another index where we can run some machine learning jobs on them. Initally I was thinking of …

---

## [Json\_lines codec is not able to parse certain jsons correctly](https://discuss.elastic.co/t/json-lines-codec-is-not-able-to-parse-certain-jsons-correctly/241593)

<div class="topic-metadata">

**Author:** [@buch11](https://discuss.elastic.co/u/buch11)\
**Replies:** 3\
**Last updated:** [July 21, 2020, 3:56am UTC](https://discuss.elastic.co/t/json-lines-codec-is-not-able-to-parse-certain-jsons-correctly/241593 "2020-07-21T03:56:51Z")

</div>

I am using json\_lines codec along with http\_input in my pipeline. One of the elements in my JSON is querystring. Usually, this codec is able to handle all the variants of valid jsons except below "querystring": { …

---

## [Logstash 7.8 doesn't re-parse existing file](https://discuss.elastic.co/t/logstash-7-8-doesnt-re-parse-existing-file/240669)

<div class="topic-metadata">

**Author:** [@Alex\_Liu](https://discuss.elastic.co/u/Alex_Liu)\
**Replies:** 7\
**Last updated:** [July 21, 2020, 3:34am UTC](https://discuss.elastic.co/t/logstash-7-8-doesnt-re-parse-existing-file/240669 "2020-07-21T03:34:53Z")

</div>

Hi team, I'm using Elastic Stack 7.8, below logstash doesn't read old files in /usr/data/nsg/ folder. input { file { path =\> "/usr/data/nsg/\*" start\_position =\> "beginning" codec =\> "json" …

---

## [How to partition response time low25% mid50% top25%](https://discuss.elastic.co/t/how-to-partition-response-time-low25-mid50-top25/241959)

<div class="topic-metadata">

**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Replies:** 2\
**Last updated:** [July 21, 2020, 3:06am UTC](https://discuss.elastic.co/t/how-to-partition-response-time-low25-mid50-top25/241959 "2020-07-21T03:06:25Z")

</div>

hi community there is one report based on response time (req~resp) like this response time Lowest 25% and it's min/max values response time Median 50% and it's min/max values response time Top 25% and it's min/max va…

---

## [Metricbeat-oss missing aws module](https://discuss.elastic.co/t/metricbeat-oss-missing-aws-module/241750)

<div class="topic-metadata">

**Author:** [@rishabh](https://discuss.elastic.co/u/rishabh)\
**Replies:** 2\
**Last updated:** [July 21, 2020, 2:51am UTC](https://discuss.elastic.co/t/metricbeat-oss-missing-aws-module/241750 "2020-07-21T02:51:59Z")

</div>

Hi, I am using metricbeat-oss 7.8. but aws module is missing. Can some please help how I can monitor AWS Infrastruture like aws cloudwatch do. I want to monitor service of aws like ec2, vpc, rds, s3. Please help in t…

---

## [Performance of running ELK Stack on Docker or VM?](https://discuss.elastic.co/t/performance-of-running-elk-stack-on-docker-or-vm/241595)

<div class="topic-metadata">

**Author:** [@eva\_cch](https://discuss.elastic.co/u/eva_cch)\
**Replies:** 2\
**Last updated:** [July 21, 2020, 2:38am UTC](https://discuss.elastic.co/t/performance-of-running-elk-stack-on-docker-or-vm/241595 "2020-07-21T02:38:49Z")

</div>

I have tried running ELK Stack on Docker in a CentOS 7 VM with 3 different Docker containers - Elasticsearch, Logstash and Kibana containers. It took me about an hour to run 625MB as per screenshot below whereby I have a…

---

## [Agent status as a time series data](https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936)

<div class="topic-metadata">

**Author:** [@madhan\_dc](https://discuss.elastic.co/u/madhan_dc)\
**Replies:** 7\
**Last updated:** [July 21, 2020, 2:23am UTC](https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936 "2020-07-21T02:23:45Z")

</div>

Newbie question. I am exploring elastic for our needs. We have a lot of filemonitor agents. these agents can go down sometimes and we want to monitor this via Kibana my understanding, i need to save the status of the ag…

---

## [Filebeat cannot send data to logstash](https://discuss.elastic.co/t/filebeat-cannot-send-data-to-logstash/241463)

<div class="topic-metadata">

**Author:** [@binschlag](https://discuss.elastic.co/u/binschlag)\
**Replies:** 1\
**Last updated:** [July 21, 2020, 1:25am UTC](https://discuss.elastic.co/t/filebeat-cannot-send-data-to-logstash/241463 "2020-07-21T01:25:56Z")

</div>

My filebeat - agents cannot send data to logstash anymore. In logstash.log i can see failed to parse field \[agent\] of type \[text\] in document with id whole message: \[2020-07-16T15:04:41,302\]\[WARN \]\[logstash.outputs.e…

---

## [Logstash Connectivity Issue with Elastic Search on Elastic Cloud](https://discuss.elastic.co/t/logstash-connectivity-issue-with-elastic-search-on-elastic-cloud/241585)

<div class="topic-metadata">

**Author:** [@dhirajagarwal2010](https://discuss.elastic.co/u/dhirajagarwal2010)\
**Replies:** 3\
**Last updated:** [July 21, 2020, 12:51am UTC](https://discuss.elastic.co/t/logstash-connectivity-issue-with-elastic-search-on-elastic-cloud/241585 "2020-07-21T00:51:25Z")

</div>

I am not able to connect my logstash instance on my local server with Elastic Search on Elastic Cloud . The user tag in logstash encodes the @ symbol in the email address twice to %2540. I guess because of this Elastic C…

---

## [How to extract ES related keys from pem certs](https://discuss.elastic.co/t/how-to-extract-es-related-keys-from-pem-certs/241950)

<div class="topic-metadata">

**Author:** [@sb116](https://discuss.elastic.co/u/sb116)\
**Replies:** 0\
**Last updated:** [July 21, 2020, 12:42am UTC](https://discuss.elastic.co/t/how-to-extract-es-related-keys-from-pem-certs/241950 "2020-07-21T00:42:11Z")

</div>

I have a signed cert in PEM format; how do i extract necessary certs the is required by ES cluster. We use ELB to discover ES cluster.

---

## [Error response in search](https://discuss.elastic.co/t/error-response-in-search/241447)

<div class="topic-metadata">

**Author:** [@Sagar\_jain](https://discuss.elastic.co/u/Sagar_jain)\
**Replies:** 1\
**Last updated:** [July 21, 2020, 12:17am UTC](https://discuss.elastic.co/t/error-response-in-search/241447 "2020-07-21T00:17:57Z")

</div>

I am not getting the below error. string(738) "{"error":{"root\_cause":,"type":"search\_phase\_execution\_exception","reason":"", "phase":"fetch","grouped":true,"failed\_shards":,"caused\_by":{"type":"es\_rejected\_execution\_e…

---

## [Helping with red shards](https://discuss.elastic.co/t/helping-with-red-shards/241748)

<div class="topic-metadata">

**Author:** [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\
**Replies:** 1\
**Last updated:** [July 21, 2020, 12:09am UTC](https://discuss.elastic.co/t/helping-with-red-shards/241748 "2020-07-21T00:09:19Z")

</div>

Hi I have elastic on 1 node and tried to reindex but it maked my node health red and after i delete the destination index to free space all of my shards get red and do not get back to run elastic the data is important …

---

## [Elastic user password is not working for my docker image](https://discuss.elastic.co/t/elastic-user-password-is-not-working-for-my-docker-image/241864)

<div class="topic-metadata">

**Author:** [@Ashok\_Reddy](https://discuss.elastic.co/u/Ashok_Reddy)\
**Replies:** 0\
**Last updated:** [July 20, 2020, 9:15am UTC](https://discuss.elastic.co/t/elastic-user-password-is-not-working-for-my-docker-image/241864 "2020-07-20T09:15:09Z")

</div>

Hello There, When I am using the elasticsearch official docker image ELASTIC\_PASSWORD env variable is working good docker run -dti -e ELASTIC\_PASSWORD=my\_own\_password -e discovery.type=single-node elasticsearch:7.8.0 …

---

## [Fluentd to External ELK stack](https://discuss.elastic.co/t/fluentd-to-external-elk-stack/241880)

<div class="topic-metadata">

**Author:** [@Lilth](https://discuss.elastic.co/u/Lilth)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 11:58pm UTC](https://discuss.elastic.co/t/fluentd-to-external-elk-stack/241880 "2020-07-20T23:58:35Z")

</div>

Hello, I have a problem with Logstash. FluentD is sending logs to external ELK stack. Whichever option I have tried logstash is not creating index in ES. Config: input { tcp { port =\> codec =\> fluent } } outpu…

---

## [Error while accessing kibana from web browser](https://discuss.elastic.co/t/error-while-accessing-kibana-from-web-browser/241943)

<div class="topic-metadata">

**Author:** [@ArunAWS2020](https://discuss.elastic.co/u/ArunAWS2020)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 11:57pm UTC](https://discuss.elastic.co/t/error-while-accessing-kibana-from-web-browser/241943 "2020-07-20T23:57:19Z")

</div>

the error happen when i start the kibana and elasticsearch&elasticsearch-head have started。 \[Screenshot here\] log \[02:25:38.464\] \[error\]\[reporting\] The Reporting plugin encountered issues launching Chromium in a self-te…

---

## [ElasticSearch upgrade 6.7 to 7.8](https://discuss.elastic.co/t/elasticsearch-upgrade-6-7-to-7-8/241863)

<div class="topic-metadata">

**Author:** [@starwin\_stephen](https://discuss.elastic.co/u/starwin_stephen)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 11:48pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-6-7-to-7-8/241863 "2020-07-20T23:48:26Z")

</div>

Recently i have upgraded from 6.7 to 7.8 in a single node server.Now i am facing below error while trying to clear/reindex from the application server. \*\*\[error\]\*\* \*\*Message: {"error":{"root\_cause":\[{"type":"illegal\_a…

---

## [List indices in a snapshot](https://discuss.elastic.co/t/list-indices-in-a-snapshot/241908)

<div class="topic-metadata">

**Author:** [@Jonny\_McCullagh](https://discuss.elastic.co/u/Jonny_McCullagh)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 11:42pm UTC](https://discuss.elastic.co/t/list-indices-in-a-snapshot/241908 "2020-07-20T23:42:17Z")

</div>

Hi, is it possible for curator to get a list of the indices that are contained within a snapshot? This is for the purposes of restoring snapshots based on date. I've tried playing with endpoints and options but can't s…

---

## [Importing Historical Log Data](https://discuss.elastic.co/t/importing-historical-log-data/241913)

<div class="topic-metadata">

**Author:** [@phinkel](https://discuss.elastic.co/u/phinkel)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 11:41pm UTC](https://discuss.elastic.co/t/importing-historical-log-data/241913 "2020-07-20T23:41:58Z")

</div>

Hello currently we are transitioning to Elastic from LogRhythm SIEM. The current logs from LR are in .LCA format. Due to compliance reasons we will need to have access to this historical log data. I assume as LR is built…

---

## [What Value of ParallelGCThreads should I set](https://discuss.elastic.co/t/what-value-of-parallelgcthreads-should-i-set/241940)

<div class="topic-metadata">

**Author:** [@khzied](https://discuss.elastic.co/u/khzied)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 11:38pm UTC](https://discuss.elastic.co/t/what-value-of-parallelgcthreads-should-i-set/241940 "2020-07-20T23:38:37Z")

</div>

Hello, I have 9 servers Elasticsearch: 3 master and 6 datas. These 9 servers are identical:64 GB RAM, 8 CPU (each cpu has 4 cpu cores). Which correct value of ParallelGCThreads should I set in java.options. My Elasti…

---

## [Integrate Google Analytics with Kibana](https://discuss.elastic.co/t/integrate-google-analytics-with-kibana/241882)

<div class="topic-metadata">

**Author:** [@Tango31](https://discuss.elastic.co/u/Tango31)\
**Replies:** 2\
**Last updated:** [July 20, 2020, 10:41pm UTC](https://discuss.elastic.co/t/integrate-google-analytics-with-kibana/241882 "2020-07-20T22:41:41Z")

</div>

Hello, I want to see google analytics data into kibana dashboard..How to do it?..Can anyone help me on this topic?

---

## [Flush elasticsearch filter in output](https://discuss.elastic.co/t/flush-elasticsearch-filter-in-output/241825)

<div class="topic-metadata">

**Author:** [@Charlie\_Liang](https://discuss.elastic.co/u/Charlie_Liang)\
**Replies:** 0\
**Last updated:** [July 20, 2020, 2:13am UTC](https://discuss.elastic.co/t/flush-elasticsearch-filter-in-output/241825 "2020-07-20T02:13:25Z")

</div>

does pipeline.batch.delay control elasticsearch in output? it seems to be working on plugins in filter section. I've set the value to 5, but not able to see indices got updated in a min. Are there other controls for ela…

---

## [Not able to bypass Kibana authentication from Angular application](https://discuss.elastic.co/t/not-able-to-bypass-kibana-authentication-from-angular-application/240995)

<div class="topic-metadata">

**Author:** [@PRACHI\_GUPTA](https://discuss.elastic.co/u/PRACHI_GUPTA)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 8:49pm UTC](https://discuss.elastic.co/t/not-able-to-bypass-kibana-authentication-from-angular-application/240995 "2020-07-20T20:49:01Z")

</div>

hi, I am using iframe to embed kibana dashboards in my angular application. I am not getting how to bypass authentication using nginx. Please help. Also, Is it possible to have role based dashboards using basic authent…

---

## [Definition of plugin "uiActions" should be a function (/bundles/plugin/uiActions.bundle.js)](https://discuss.elastic.co/t/definition-of-plugin-uiactions-should-be-a-function-bundles-plugin-uiactions-bundle-js/239173)

<div class="topic-metadata">

**Author:** [@j4sper](https://discuss.elastic.co/u/j4sper)\
**Replies:** 2\
**Last updated:** [July 20, 2020, 8:44pm UTC](https://discuss.elastic.co/t/definition-of-plugin-uiactions-should-be-a-function-bundles-plugin-uiactions-bundle-js/239173 "2020-07-20T20:44:15Z")

</div>

Fresh install of Kibana and Elastic on FreeBSD 12.1-RELEASE When I open kibana in a browser, I get Definition of plugin "uiActions" should be a function (/bundles/plugin/uiActions.bundle.js). Kibana and Elastic were i…

---

## [How to run test with coverage](https://discuss.elastic.co/t/how-to-run-test-with-coverage/241058)

<div class="topic-metadata">

**Author:** [@seraphjiang](https://discuss.elastic.co/u/seraphjiang)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 8:25pm UTC](https://discuss.elastic.co/t/how-to-run-test-with-coverage/241058 "2020-07-20T20:25:04Z")

</div>

tried to run yarn test:coverage, but failed yarn test:coverage yarn run v1.22.4 $ grunt test:coverage Running "run:testCoverageServer" (run) task Verifying property run.testCoverageServer exists in…

---

## [Get the list of kibana index patterns](https://discuss.elastic.co/t/get-the-list-of-kibana-index-patterns/241847)

<div class="topic-metadata">

**Author:** [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 8:07pm UTC](https://discuss.elastic.co/t/get-the-list-of-kibana-index-patterns/241847 "2020-07-20T20:07:22Z")

</div>

Hi I need to get list of all kibana index patterns that we use to mapping indices with them. \_cat/indices just back all the indexes and not the mapping patterns that we create in kibana managment. thanks

---

## [How to create a Kibana Visualisation with python script?](https://discuss.elastic.co/t/how-to-create-a-kibana-visualisation-with-python-script/241841)

<div class="topic-metadata">

**Author:** [@adz](https://discuss.elastic.co/u/adz)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 8:05pm UTC](https://discuss.elastic.co/t/how-to-create-a-kibana-visualisation-with-python-script/241841 "2020-07-20T20:05:45Z")

</div>

Hello! Does anyone know how to create a Kibana Visualisation with python script? I'm currently using ES/Kibana 7.6.2. Thanks in advance!

---

## [Need help with ILM when using logstash](https://discuss.elastic.co/t/need-help-with-ilm-when-using-logstash/241927)

<div class="topic-metadata">

**Author:** [@SimonR](https://discuss.elastic.co/u/SimonR)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 8:03pm UTC](https://discuss.elastic.co/t/need-help-with-ilm-when-using-logstash/241927 "2020-07-20T20:03:15Z")

</div>

Hi all, i am struggling to setup ILM when sending logs from beats to via Logstash to Elasticsearch. Im looking to do daily indices, with rollover like the following index naming scheme: "companyname-winlogbeat-7.7.0--0…

---

## [Docker image for Kibana 7.8.0 not showing drilldown capability](https://discuss.elastic.co/t/docker-image-for-kibana-7-8-0-not-showing-drilldown-capability/241558)

<div class="topic-metadata">

**Author:** [@AnEpicK9](https://discuss.elastic.co/u/AnEpicK9)\
**Replies:** 4\
**Last updated:** [July 20, 2020, 7:57pm UTC](https://discuss.elastic.co/t/docker-image-for-kibana-7-8-0-not-showing-drilldown-capability/241558 "2020-07-20T19:57:44Z")

</div>

I have a docker container running Kibana version 7.8.0 and don't seem to have the ability to create a Drilldown in my dashboard. Here's an image showing the issue: Is this something that's not available (yet) in the d…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1915)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1917)
