# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1917

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1918

---

## [How do i self sign kibana certs](https://discuss.elastic.co/t/how-do-i-self-sign-kibana-certs/241543)

<div class="topic-metadata">

**Author:** [@sb116](https://discuss.elastic.co/u/sb116)\
**Replies:** 3\
**Last updated:** [July 20, 2020, 7:17pm UTC](https://discuss.elastic.co/t/how-do-i-self-sign-kibana-certs/241543 "2020-07-20T19:17:15Z")

</div>

I am working on configuring SSL for ES cluster and I am at the step to enable SSL for Kibana (https://www.elastic.co/guide/en/kibana/7.8/configuring-tls.html). bin/elasticsearch-certutil csr -name kibana-server -dns som…

---

## [Custom Plugins 7.7.0](https://discuss.elastic.co/t/custom-plugins-7-7-0/240927)

<div class="topic-metadata">

**Author:** [@Carlos0](https://discuss.elastic.co/u/Carlos0)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 7:10pm UTC](https://discuss.elastic.co/t/custom-plugins-7-7-0/240927 "2020-07-20T19:10:42Z")

</div>

Hi, I'm having a hard time understanding a few things regarding custom plugin development since I cannot seem to find enough documentation about it: How do I build a single plugin without having to build the entire ki…

---

## [Converting Searches into Visualizations](https://discuss.elastic.co/t/converting-searches-into-visualizations/241149)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 7:04pm UTC](https://discuss.elastic.co/t/converting-searches-into-visualizations/241149 "2020-07-20T19:04:19Z")

</div>

If I create a discover search and then later I want to plot it on a visualization, can I do that? if so how?

---

## [Kibana: User statistics](https://discuss.elastic.co/t/kibana-user-statistics/241653)

<div class="topic-metadata">

**Author:** [@benno](https://discuss.elastic.co/u/benno)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 7:01pm UTC](https://discuss.elastic.co/t/kibana-user-statistics/241653 "2020-07-20T19:01:32Z")

</div>

Hi, is there a possibility to get user statistics in Kibana? I would like to know for some dashboards when it was opened/used by some user the last time. It would be easier to cleanup our dashboards if I would now that…

---

## [Logstash Kakfa is Slow and Rebalancing Often](https://discuss.elastic.co/t/logstash-kakfa-is-slow-and-rebalancing-often/241924)

<div class="topic-metadata">

**Author:** [@dhinesh](https://discuss.elastic.co/u/dhinesh)\
**Replies:** 0\
**Last updated:** [July 20, 2020, 6:43pm UTC](https://discuss.elastic.co/t/logstash-kakfa-is-slow-and-rebalancing-often/241924 "2020-07-20T18:43:17Z")

</div>

Hi., I have logstash reading from Kafka topic with 3 paritions. The logstash is slow in processing the data and kafka is rebalancing very often, which is causing duplication of records. I have tried to increase the max…

---

## [Why is kibana web server is Not secure](https://discuss.elastic.co/t/why-is-kibana-web-server-is-not-secure/241710)

<div class="topic-metadata">

**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\
**Replies:** 3\
**Last updated:** [July 20, 2020, 6:37pm UTC](https://discuss.elastic.co/t/why-is-kibana-web-server-is-not-secure/241710 "2020-07-20T18:37:07Z")

</div>

Please take look at the screenshot, chrome saying Not Secure, is it safe to access imp data on kibana?

---

## [SNOW events additiona\_info field contains \\r\\n or \\n or \\t\\r\\n](https://discuss.elastic.co/t/snow-events-additiona-info-field-contains-r-n-or-n-or-t-r-n/239686)

<div class="topic-metadata">

**Author:** [@genehunter29009](https://discuss.elastic.co/u/genehunter29009)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 6:02pm UTC](https://discuss.elastic.co/t/snow-events-additiona-info-field-contains-r-n-or-n-or-t-r-n/239686 "2020-07-20T18:02:19Z")

</div>

I am trying to find a way to filter out \\r\\n and \\r\\r\\n from an array. After I split the results field I have an array with addional\_info. Unfortunately there are several sources for this additional info and depending …

---

## [Grokfilter Parser error](https://discuss.elastic.co/t/grokfilter-parser-error/241236)

<div class="topic-metadata">

**Author:** [@Deepika\_Rawat](https://discuss.elastic.co/u/Deepika_Rawat)\
**Replies:** 4\
**Last updated:** [July 20, 2020, 5:10pm UTC](https://discuss.elastic.co/t/grokfilter-parser-error/241236 "2020-07-20T17:10:27Z")

</div>

I have a log file with data like this indent preformatted text by 4 spaces 172.16.3.254 Jun 22 11:00:40 date=2020-06-22 local7 notice time=11:00:39 devname="MIBLR\_FW\_1" devid="FG200ETK19907000" logid="0000000013" type…

---

## [Vega in Kibana 6.8 | Cannot tap on a relative url in "href" | vega.enableExternalUrls | External URLs are not enabled](https://discuss.elastic.co/t/vega-in-kibana-6-8-cannot-tap-on-a-relative-url-in-href-vega-enableexternalurls-external-urls-are-not-enabled/241766)

<div class="topic-metadata">

**Author:** [@hkhanz](https://discuss.elastic.co/u/hkhanz)\
**Replies:** 7\
**Last updated:** [July 20, 2020, 5:53pm UTC](https://discuss.elastic.co/t/vega-in-kibana-6-8-cannot-tap-on-a-relative-url-in-href-vega-enableexternalurls-external-urls-are-not-enabled/241766 "2020-07-20T17:53:43Z")

</div>

I am trying to create a very simple - but ultimately super practical example - of tapping a bar segment inside a Vega visualization and being able to go to the appropriate /discover url for the data. When I try to do th…

---

## [Elasticsearch Rest High Level Client throws java.lang.ArrayStoreException](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-throws-java-lang-arraystoreexception/241917)

<div class="topic-metadata">

**Author:** [@amit.nema](https://discuss.elastic.co/u/amit.nema)\
**Replies:** 2\
**Last updated:** [July 20, 2020, 5:29pm UTC](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-throws-java-lang-arraystoreexception/241917 "2020-07-20T17:29:55Z")

</div>

Hello Team, I'm using elasticsearch v7.3.1 with elasticsearch-spark-20\_2.11. While submitting the application via spark-submit it throws java.lang.ArrayStoreException. Stake-trace as below Exception in thread "main" j…

---

## [Restarting logstash from where it last shutdown](https://discuss.elastic.co/t/restarting-logstash-from-where-it-last-shutdown/241915)

<div class="topic-metadata">

**Author:** [@sandeepsingh](https://discuss.elastic.co/u/sandeepsingh)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 5:26pm UTC](https://discuss.elastic.co/t/restarting-logstash-from-where-it-last-shutdown/241915 "2020-07-20T17:26:43Z")

</div>

I am using Logstash to transfer data from Elasticsearch to MongoDB. Now whenever there is an error or a Shutdown of Logstash instance, upon restarting Logstash, it starts reading the indexes in Elasticsearch from the beg…

---

## [Logstash OOM from one host only](https://discuss.elastic.co/t/logstash-oom-from-one-host-only/241625)

<div class="topic-metadata">

**Author:** [@Mandraenke](https://discuss.elastic.co/u/Mandraenke)\
**Replies:** 3\
**Last updated:** [July 20, 2020, 5:24pm UTC](https://discuss.elastic.co/t/logstash-oom-from-one-host-only/241625 "2020-07-20T17:24:57Z")

</div>

Hi, I'm facing an issue I cant dig down. I have setup filebeat to ship logs from different hosts to logstash. I found that some logs were missing and I found an out of memory error in the logs: \[2020-07-17T09:37:03…

---

## [Unauthorized alert for ES with Open Distro Security](https://discuss.elastic.co/t/unauthorized-alert-for-es-with-open-distro-security/241524)

<div class="topic-metadata">

**Author:** [@somebody](https://discuss.elastic.co/u/somebody)\
**Replies:** 4\
**Last updated:** [July 20, 2020, 5:24pm UTC](https://discuss.elastic.co/t/unauthorized-alert-for-es-with-open-distro-security/241524 "2020-07-20T17:24:02Z")

</div>

We are using ES (7.6.1 OSS version) with Open Distro ( LDAP security ). We are using Elasticsearch telegraf plugin to get the metrics Elasticsearch Plugin We know that there is an audit log which we could parse and us…

---

## [Geo\_distance\_range is obsolete?](https://discuss.elastic.co/t/geo-distance-range-is-obsolete/241729)

<div class="topic-metadata">

**Author:** [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\
**Replies:** 2\
**Last updated:** [July 20, 2020, 5:12pm UTC](https://discuss.elastic.co/t/geo-distance-range-is-obsolete/241729 "2020-07-20T17:12:32Z")

</div>

Hi, In old ES we had the function "geo\_distance\_range" that allows to filter everything between, let's say by example, 20k and 50km. When I look at the documentation, they propose to use geo distance aggregations: Bu…

---

## [How to change default file permission of log files in /var/log/logstash/](https://discuss.elastic.co/t/how-to-change-default-file-permission-of-log-files-in-var-log-logstash/241868)

<div class="topic-metadata">

**Author:** [@chitreshg](https://discuss.elastic.co/u/chitreshg)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 5:07pm UTC](https://discuss.elastic.co/t/how-to-change-default-file-permission-of-log-files-in-var-log-logstash/241868 "2020-07-20T17:07:37Z")

</div>

I want to change the default file permission of logstash's log files as 600, currently it is 644. In logstash.yml file I found only the file path and log level related information but I didn't get any file permission re…

---

## [ELK 7.8 detect anomalies?](https://discuss.elastic.co/t/elk-7-8-detect-anomalies/241807)

<div class="topic-metadata">

**Author:** [@Feriel\_Mufti](https://discuss.elastic.co/u/Feriel_Mufti)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 4:37pm UTC](https://discuss.elastic.co/t/elk-7-8-detect-anomalies/241807 "2020-07-20T16:37:48Z")

</div>

Hello , i am new to ELK and i am using version 7.8, i am using filebeat , metricbeat , heartbeat and packetbeat , i had one problem is that filebeat doesn't match any results whenever the i put the during time ( discover…

---

## [Kibana performance while reindex](https://discuss.elastic.co/t/kibana-performance-while-reindex/240991)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 3\
**Last updated:** [July 20, 2020, 3:33pm UTC](https://discuss.elastic.co/t/kibana-performance-while-reindex/240991 "2020-07-20T15:33:13Z")

</div>

Hello, Can Kibana's performance be affected while I reindex? For example I want to reindex good amount of data and it will take some days. During those days will I have reduced performance in loading visualisations or …

---

## [mariadb.jdbc.Driver not loaded](https://discuss.elastic.co/t/mariadb-jdbc-driver-not-loaded/241866)

<div class="topic-metadata">

**Author:** [@Fahad\_Ibrahim](https://discuss.elastic.co/u/Fahad_Ibrahim)\
**Replies:** 2\
**Last updated:** [July 20, 2020, 3:31pm UTC](https://discuss.elastic.co/t/mariadb-jdbc-driver-not-loaded/241866 "2020-07-20T15:31:30Z")

</div>

Hi All, I am trying to establish connectivity between mariadb and ELK. PFB conf file. input { jdbc { jdbc\_validate\_connection =\> true jdbc\_driver\_library =\> "D:/ELK/logstash/logstash-core/lib/jars/mari…

---

## [Kibana UI takes over 10 seconds on initial load](https://discuss.elastic.co/t/kibana-ui-takes-over-10-seconds-on-initial-load/241662)

<div class="topic-metadata">

**Author:** [@Gavin\_Clark](https://discuss.elastic.co/u/Gavin_Clark)\
**Replies:** 3\
**Last updated:** [July 20, 2020, 2:32pm UTC](https://discuss.elastic.co/t/kibana-ui-takes-over-10-seconds-on-initial-load/241662 "2020-07-20T14:32:56Z")

</div>

Hey team, long time reader, first time poster. We have a weird issue ever since upgrading to Kibana and elasticsearch 7.7.1. What we'll see is sometimes the UI(doesn't matter on module, could be Discover, Dashboard, Ma…

---

## [Data too large using BulkProcessor with size limit](https://discuss.elastic.co/t/data-too-large-using-bulkprocessor-with-size-limit/241779)

<div class="topic-metadata">

**Author:** [@Fabrizio\_Fortino](https://discuss.elastic.co/u/Fabrizio_Fortino)\
**Replies:** 5\
**Last updated:** [July 20, 2020, 2:25pm UTC](https://discuss.elastic.co/t/data-too-large-using-bulkprocessor-with-size-limit/241779 "2020-07-20T14:25:36Z")

</div>

Hello, We are using a BulkProcessor (ES 7.8.0) with the following properties: Actions: 250 Size: 2097152 bytes (2MB) Flush Time: 3000 ms During a load test we are getting the following exception: org.elastic…

---

## [Trying to spin up 2 test nodes for Integration Testing](https://discuss.elastic.co/t/trying-to-spin-up-2-test-nodes-for-integration-testing/241896)

<div class="topic-metadata">

**Author:** [@radhika](https://discuss.elastic.co/u/radhika)\
**Replies:** 0\
**Last updated:** [July 20, 2020, 1:24pm UTC](https://discuss.elastic.co/t/trying-to-spin-up-2-test-nodes-for-integration-testing/241896 "2020-07-20T13:24:48Z")

</div>

Hi, I have written a ES plugin (using version ES 7.5.2) which I have been able to test successfully using a single node integration test environment. However, I have faced issues when running the same code on multiple …

---

## [Bouncycastle versions](https://discuss.elastic.co/t/bouncycastle-versions/241892)

<div class="topic-metadata">

**Author:** [@josephine-rueckert](https://discuss.elastic.co/u/josephine-rueckert)\
**Replies:** 0\
**Last updated:** [July 20, 2020, 1:06pm UTC](https://discuss.elastic.co/t/bouncycastle-versions/241892 "2020-07-20T13:06:43Z")

</div>

Hi elastic team! I was looking through the code base for which bouncycastle version is used in v7.7.0 and was a bit confused by what I found. In https://github.com/elastic/elasticsearch/blob/v7.7.0/buildSrc/version.pro…

---

## [Error with embedded server and tokenizer: edge\_ngram](https://discuss.elastic.co/t/error-with-embedded-server-and-tokenizer-edge-ngram/241726)

<div class="topic-metadata">

**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\
**Replies:** 6\
**Last updated:** [July 20, 2020, 12:47pm UTC](https://discuss.elastic.co/t/error-with-embedded-server-and-tokenizer-edge-ngram/241726 "2020-07-20T12:47:42Z")

</div>

Hi, I'm making integration testing with the RestHighLevelClient (ES v7.8). I'm starting an embedded server with the hack described here: When I try to create an index with this settings, I am facing an error. Code: …

---

## [With space and without space search](https://discuss.elastic.co/t/with-space-and-without-space-search/241887)

<div class="topic-metadata">

**Author:** [@Apoorva\_Sharma](https://discuss.elastic.co/u/Apoorva_Sharma)\
**Replies:** 0\
**Last updated:** [July 20, 2020, 12:21pm UTC](https://discuss.elastic.co/t/with-space-and-without-space-search/241887 "2020-07-20T12:21:39Z")

</div>

I am using Elasticsearch 7.8 and would like to get the same results if the words have space or without space with searched with match\_phrase\_prefix query. example: Some of the documents have " 5 mg " (with space).So whe…

---

## [Freezing Indicies Doesn't Improve Cluster Performance](https://discuss.elastic.co/t/freezing-indicies-doesnt-improve-cluster-performance/241548)

<div class="topic-metadata">

**Author:** [@Liam\_B](https://discuss.elastic.co/u/Liam_B)\
**Replies:** 8\
**Last updated:** [July 20, 2020, 11:49am UTC](https://discuss.elastic.co/t/freezing-indicies-doesnt-improve-cluster-performance/241548 "2020-07-20T11:49:29Z")

</div>

Currently working with a 4 node ELK cluster (7.6) with 10k indices, 20k Primary Shard, 12k replica shards. To stabilise the cluster performance, I have attempted freezing and closing indices. so the number of open non-f…

---

## [Can't start node (out of space) and can't move shards because I can't start the node](https://discuss.elastic.co/t/cant-start-node-out-of-space-and-cant-move-shards-because-i-cant-start-the-node/241813)

<div class="topic-metadata">

**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\
**Replies:** 2\
**Last updated:** [July 20, 2020, 11:10am UTC](https://discuss.elastic.co/t/cant-start-node-out-of-space-and-cant-move-shards-because-i-cant-start-the-node/241813 "2020-07-20T11:10:43Z")

</div>

I am in a bit of a bind. One of the nodes on my cluster ran out of space. I can't start elasticsearch because there is no space left. I'm unable to move or delete shards / indices from that node because I can't start Ela…

---

## [AIOPs, correlating two indexes and ML](https://discuss.elastic.co/t/aiops-correlating-two-indexes-and-ml/236720)

<div class="topic-metadata">

**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 11:06am UTC](https://discuss.elastic.co/t/aiops-correlating-two-indexes-and-ml/236720 "2020-07-20T11:06:44Z")

</div>

Hey there, Im about to get info from APM, log files and Host metrics. I would like to know fristly if I will able to correlate RCA and get full application traceblity even if the data is in diferent indices. Also if the…

---

## [FileBeat fails to process large log files of some MBs](https://discuss.elastic.co/t/filebeat-fails-to-process-large-log-files-of-some-mbs/240122)

<div class="topic-metadata">

**Author:** [@shwethaN](https://discuss.elastic.co/u/shwethaN)\
**Replies:** 9\
**Last updated:** [July 20, 2020, 11:05am UTC](https://discuss.elastic.co/t/filebeat-fails-to-process-large-log-files-of-some-mbs/240122 "2020-07-20T11:05:35Z")

</div>

Hi, I am new to ELK stack. Done the setup of elastic, Kibana , Logstash and filebeat to process the files. If i configure path of log file which in some KBs(2-3KB) then i am able to process file successfully. I would l…

---

## [Auditbeat 6.8.10 / Windows / File intergrity / kafka output / changing file attrubutes info](https://discuss.elastic.co/t/auditbeat-6-8-10-windows-file-intergrity-kafka-output-changing-file-attrubutes-info/240166)

<div class="topic-metadata">

**Author:** [@MaGu](https://discuss.elastic.co/u/MaGu)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 10:53am UTC](https://discuss.elastic.co/t/auditbeat-6-8-10-windows-file-intergrity-kafka-output-changing-file-attrubutes-info/240166 "2020-07-20T10:53:15Z")

</div>

Hi guys I have auditbeat (v6.8.10) installed and configured on a windows host to send data to kafka (kafka output). I noticed that changing file attributes triggers an event which is sent to kafka but I do not see any s…

---

## [Weather details on maps in kibana](https://discuss.elastic.co/t/weather-details-on-maps-in-kibana/241875)

<div class="topic-metadata">

**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\
**Replies:** 1\
**Last updated:** [July 20, 2020, 10:15am UTC](https://discuss.elastic.co/t/weather-details-on-maps-in-kibana/241875 "2020-07-20T10:15:25Z")

</div>

Hello to everyone!!! I am wondering about adding weather details on maps in kibana. Especially, is there any way to use Openweather API in order to show on kibana maps weather info, like this image. Any advice would be…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1916)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1918)
