# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1946 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1947 --- ## [Whitespace tokenizer](https://discuss.elastic.co/t/whitespace-tokenizer/240165)
**Author:** [@anthony\_bliecq](https://discuss.elastic.co/u/anthony_bliecq)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 1:07pm UTC](https://discuss.elastic.co/t/whitespace-tokenizer/240165 "2020-07-07T13:07:27Z")
Hi, I'm actually using standard tokenizer wich contains whitespace tokenizer. The problem is that i want to separate a sentence by tokens with whitespace but i also want the entire sentence as token. How is this possib… --- ## [The difference between saved object export and snapshot](https://discuss.elastic.co/t/the-difference-between-saved-object-export-and-snapshot/240175)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 11:20pm UTC](https://discuss.elastic.co/t/the-difference-between-saved-object-export-and-snapshot/240175 "2020-07-07T23:20:53Z")
I would like to know if i don't need to keep the data in Elastic Stack but I do need to keep those application configuration, mapping, searches, dashboard, visualization . Do I need to take snapshot ? Or or just export… --- ## [Kubernetes hosting](https://discuss.elastic.co/t/kubernetes-hosting/240183)
**Author:** [@thokar](https://discuss.elastic.co/u/thokar)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 3:12pm UTC](https://discuss.elastic.co/t/kubernetes-hosting/240183 "2020-07-07T15:12:03Z")
I am unsure if it is officially supported to host elastic on kubernetes like AKS. When i scale the replicas up or down, or roleout a restart for example (for extending volume sizes, the nodes fail to join back to the cl… --- ## [How to add client ip address in winlogbeat](https://discuss.elastic.co/t/how-to-add-client-ip-address-in-winlogbeat/240195)
**Author:** [@tiencong283](https://discuss.elastic.co/u/tiencong283)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 4:27pm UTC](https://discuss.elastic.co/t/how-to-add-client-ip-address-in-winlogbeat/240195 "2020-07-07T16:27:35Z")
As the question implies, I know there's a processor that enrich client host information "add\_host\_metadata" but it just lists all network interfaces including the one really communicating with the output like: "ip": \["1… --- ## [Full pipeline Logstash with dead letter queue](https://discuss.elastic.co/t/full-pipeline-logstash-with-dead-letter-queue/239855)
**Author:** [@Altamir\_Dias](https://discuss.elastic.co/u/Altamir_Dias)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 11:14pm UTC](https://discuss.elastic.co/t/full-pipeline-logstash-with-dead-letter-queue/239855 "2020-07-07T23:14:39Z")
Hello Guys, I have a pipeline in my ELK that get data from Kafka and send Elasticsearch. But I don't know how I can set the dead letter queue. My goal is every errors be send a topic called dlq+date. I tried several so… --- ## [How to get aggregations with buckets of zero count only for the filter provided](https://discuss.elastic.co/t/how-to-get-aggregations-with-buckets-of-zero-count-only-for-the-filter-provided/238861)
**Author:** [@kiranvpawar](https://discuss.elastic.co/u/kiranvpawar)\ **Replies:** 0\ **Last updated:** [June 26, 2020, 12:57pm UTC](https://discuss.elastic.co/t/how-to-get-aggregations-with-buckets-of-zero-count-only-for-the-filter-provided/238861 "2020-06-26T12:57:59Z")
Elastic search aggregation using min\_doc\_count=0 returns all the buckets which are not related to query results or hits or provided filter within the query. It is correct based on documentation provided by Elastic Search… --- ## [Howto highlight results in a generic fashion](https://discuss.elastic.co/t/howto-highlight-results-in-a-generic-fashion/240132)
**Author:** [@DaveG](https://discuss.elastic.co/u/DaveG)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 9:24am UTC](https://discuss.elastic.co/t/howto-highlight-results-in-a-generic-fashion/240132 "2020-07-07T09:24:10Z")
Hi All, I have a requirement to highlight any searched field and update it in the returned source, this will be shown in a fielded HTML UI with the highlights shown per-field. I see a number of posts such as: Is there … --- ## [\[warning\]\[savedobjects-service\] Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/warning-savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/240083)
**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\ **Replies:** 12\ **Last updated:** [July 7, 2020, 11:09pm UTC](https://discuss.elastic.co/t/warning-savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/240083 "2020-07-07T23:09:27Z")
I have no idea what is the cause. anyone help me with this. kibana installation \[warning\]\[savedobjects-service\] Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms --- ## [Kibana iFrame cannot undo zoom](https://discuss.elastic.co/t/kibana-iframe-cannot-undo-zoom/239871)
**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 11:03pm UTC](https://discuss.elastic.co/t/kibana-iframe-cannot-undo-zoom/239871 "2020-07-07T23:03:15Z")
Dear all Please see the video. When viewing the iFrame of the Dashboard, if I zoom a visualization then it affects all panels. Thats a good feature. However their is no way to "Zoom back to Original"...The… --- ## [Kibana dashboards for Prometheus based metrics](https://discuss.elastic.co/t/kibana-dashboards-for-prometheus-based-metrics/240180)
**Author:** [@Xavier\_Krantz](https://discuss.elastic.co/u/Xavier_Krantz)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 10:39pm UTC](https://discuss.elastic.co/t/kibana-dashboards-for-prometheus-based-metrics/240180 "2020-07-07T22:39:28Z")
Hi there, I am trying to monitor the Nginx ingress controller on kubernetes. This project integrates nicely with Prometheus. Using the valuable information from this thread: Nginx k8s metrics, I am able to pull the me… --- ## [Logstash7.6 - data loss when input file logrotation happens](https://discuss.elastic.co/t/logstash7-6-data-loss-when-input-file-logrotation-happens/239719)
**Author:** [@manu1](https://discuss.elastic.co/u/manu1)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 10:09pm UTC](https://discuss.elastic.co/t/logstash7-6-data-loss-when-input-file-logrotation-happens/239719 "2020-07-07T22:09:28Z")
Hello, We have observed data loss when input file's logrotation happens every day. input { file { path =\> "/weblogs/biweb.log" sincedb\_path =\> "/opt/logshipper/ls7\_bi/sincedbs/biweb.db" … --- ## [\[warning\]Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/warning-error-request-timeout-after-30000ms/240199)
**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 10:08pm UTC](https://discuss.elastic.co/t/warning-error-request-timeout-after-30000ms/240199 "2020-07-07T22:08:37Z")
Hi, Can Someone help me with this issue, I have been trying to fix it from the last 24hours. Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms ➜ bin kibana log \[16:52:47.938\] \[wa… --- ## [Elastic Search/Kibana Alias basics/roll over/delete after 90 days](https://discuss.elastic.co/t/elastic-search-kibana-alias-basics-roll-over-delete-after-90-days/240032)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 9:59pm UTC](https://discuss.elastic.co/t/elastic-search-kibana-alias-basics-roll-over-delete-after-90-days/240032 "2020-07-07T21:59:29Z")
i've been using ES for about 2 yrs, never need to really store anything long term, so alias's and rollovers were never needed. I understand the concept, but cant seem to find any good resources in a walk-through or best … --- ## [MetricBeat sample dashboards/visualizations, and cross cluster search](https://discuss.elastic.co/t/metricbeat-sample-dashboards-visualizations-and-cross-cluster-search/240222)
**Author:** [@Alex\_Howle](https://discuss.elastic.co/u/Alex_Howle)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 9:12pm UTC](https://discuss.elastic.co/t/metricbeat-sample-dashboards-visualizations-and-cross-cluster-search/240222 "2020-07-07T21:12:03Z")
I have 2 ELK clusters. They have been setup correctly as Remote Clusters to each other, and I have the correct Cross Cluster Search Index Pattern of \*:metricbeat-\* I can successfully query the data against this Index Pa… --- ## [Send Logstash logs to Kibana remote server](https://discuss.elastic.co/t/send-logstash-logs-to-kibana-remote-server/240060)
**Author:** [@Sai\_Avinash\_Duddupud](https://discuss.elastic.co/u/Sai_Avinash_Duddupud)\ **Replies:** 5\ **Last updated:** [July 7, 2020, 8:19pm UTC](https://discuss.elastic.co/t/send-logstash-logs-to-kibana-remote-server/240060 "2020-07-07T20:19:01Z")
I am new to ELK Stack and trying to view logs on kibana which is hosted on different server. Following are my configurations for Filebeat and logstash in my localhost pc and logstash is succesfully recieving logs … --- ## [Getting error when trying to add or install repository-s3 plugin](https://discuss.elastic.co/t/getting-error-when-trying-to-add-or-install-repository-s3-plugin/240219)
**Author:** [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 8:18pm UTC](https://discuss.elastic.co/t/getting-error-when-trying-to-add-or-install-repository-s3-plugin/240219 "2020-07-07T20:18:54Z")
Hello, Trying to add a plugin called repository-s3 to my image or manually trying to install on pods and both fail with same error: Exception in thread “main” javax.net.ssl.SSLException: Connection reset at java.base/… --- ## [Kibana map metrics for heat map](https://discuss.elastic.co/t/kibana-map-metrics-for-heat-map/239407)
**Author:** [@john9570](https://discuss.elastic.co/u/john9570)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 8:16pm UTC](https://discuss.elastic.co/t/kibana-map-metrics-for-heat-map/239407 "2020-07-07T20:16:54Z")
Hi, I currently have kibana 7.8 and am trying to add Metrics to the Heat Map in Kibana's mapping visualization. However, unlike other map layers the Heat Map 'Metrics' section has no button to add a metric. How do I cor… --- ## [Grock Parse Date and time](https://discuss.elastic.co/t/grock-parse-date-and-time/240216)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 8:05pm UTC](https://discuss.elastic.co/t/grock-parse-date-and-time/240216 "2020-07-07T20:05:58Z")
Hi, Im currently parsing the date an time on this log: \<187\>Jul 07 2020 11:29:55: with this Grok \<%{POSINT:syslog\_pri}\>%{MONTH:mes} %{MONTHDAY:dia} %{YEAR:año} %{TIME:hora}: Is there a better way to do this? because… --- ## [Beats to Logstash Connectivity](https://discuss.elastic.co/t/beats-to-logstash-connectivity/240198)
**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 7:50pm UTC](https://discuss.elastic.co/t/beats-to-logstash-connectivity/240198 "2020-07-07T19:50:07Z")
Hi Team I am facing one weird issue when receiving connection on Logstash from filebeats. Logstash Version : 7.7.0 Beats version: 7.7.0 Connection - Beats -\> Traefik LB -\> Logstash Service -\> Logstash Configuration… --- ## [Search with multiple conditions](https://discuss.elastic.co/t/search-with-multiple-conditions/240144)
**Author:** [@mdiakhate](https://discuss.elastic.co/u/mdiakhate)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 7:15pm UTC](https://discuss.elastic.co/t/search-with-multiple-conditions/240144 "2020-07-07T19:15:34Z")
Hello, I have a very simple problem that I would like to translate into an ES search. I have different items with 2 fields : registration\_label which is a string and is\_optam is a bool. My query in SQL would be someth… --- ## [Slow snapshot to HDFS](https://discuss.elastic.co/t/slow-snapshot-to-hdfs/240208)
**Author:** [@theDor](https://discuss.elastic.co/u/theDor)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 7:07pm UTC](https://discuss.elastic.co/t/slow-snapshot-to-hdfs/240208 "2020-07-07T19:07:44Z")
Hello there, i tried today to backup my 1TB cluster to the HDFS for future snapshot on way bigger clusters (tons of TB). but the process was very slow (more then an hour for 1TB, while on local FS it tooks 5 - 10 Minut… --- ## [Trouble ingesting through Filebeat](https://discuss.elastic.co/t/trouble-ingesting-through-filebeat/240016)
**Author:** [@tom.p](https://discuss.elastic.co/u/tom.p)\ **Replies:** 6\ **Last updated:** [July 7, 2020, 6:21pm UTC](https://discuss.elastic.co/t/trouble-ingesting-through-filebeat/240016 "2020-07-07T18:21:35Z")
Hello all, I'm trying to ingest data from a "data" directory into Elasticsearch using Filebeat. When I manually upload these data files through Filebeat I have no problems. If I use that same mapping for my .conf file … --- ## [Setup Stack Monitoring with Metricbeat and Docker-compose](https://discuss.elastic.co/t/setup-stack-monitoring-with-metricbeat-and-docker-compose/240193)
**Author:** [@damasu](https://discuss.elastic.co/u/damasu)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 4:17pm UTC](https://discuss.elastic.co/t/setup-stack-monitoring-with-metricbeat-and-docker-compose/240193 "2020-07-07T16:17:13Z")
I am wondering how to correctly configure stack monitoring in kibana when used with an elastic stack based on docker-compose. For instance, on the same host machine as docker-compose i have installed metricbeat to monit… --- ## [Elasticsearch exception: Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/elasticsearch-exception-root-mapping-definition-has-unsupported-parameters/234630)
**Author:** [@Cat](https://discuss.elastic.co/u/Cat)\ **Replies:** 7\ **Last updated:** [July 7, 2020, 5:50pm UTC](https://discuss.elastic.co/t/elasticsearch-exception-root-mapping-definition-has-unsupported-parameters/234630 "2020-07-07T17:50:27Z")
When I used curl to create my template, it works fine. But when I used High Level REST it gave me the exception: org.elasticsearch.ElasticsearchException: Elasticsearch exception \[type=mapper\_parsing\_exception, reason=… --- ## [Elasticsearch aggregation performance](https://discuss.elastic.co/t/elasticsearch-aggregation-performance/240044)
**Author:** [@lschmid](https://discuss.elastic.co/u/lschmid)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 5:17pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-performance/240044 "2020-07-07T17:17:33Z")
Hi, I am trying to test aggregation performance across different ES topologies. The first time running it takes about 26 seconds, and all subsequent runs takes less than a second. I would like to compare performance for… --- ## [Distribute primary shards among newly added data nodes](https://discuss.elastic.co/t/distribute-primary-shards-among-newly-added-data-nodes/240187)
**Author:** [@Ankur\_Mahajan](https://discuss.elastic.co/u/Ankur_Mahajan)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 4:30pm UTC](https://discuss.elastic.co/t/distribute-primary-shards-among-newly-added-data-nodes/240187 "2020-07-07T16:30:35Z")
I am looking for a way to automatically distribute Elasticsearch's primary shards among the newly added data nodes. I know a way to achieve this is by re-indexing after the new nodes are added. Is there any internal con… --- ## [Powerpoint to Canvas theme conversion](https://discuss.elastic.co/t/powerpoint-to-canvas-theme-conversion/238510)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 4:20pm UTC](https://discuss.elastic.co/t/powerpoint-to-canvas-theme-conversion/238510 "2020-07-07T16:20:50Z")
Is there a way to import a theme for Powerpoint into Canvas? If I understand the "Import workpad JSON file" function correctly I need to convert the Powerpoint slides into JSON in order to use it. Any guidance would be… --- ## [Kibana 7.8.0. Empty csv report](https://discuss.elastic.co/t/kibana-7-8-0-empty-csv-report/239500)
**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 4:16pm UTC](https://discuss.elastic.co/t/kibana-7-8-0-empty-csv-report/239500 "2020-07-07T16:16:08Z")
After upgrading to 7.8.0 about 90 % of cvs reports empty (the corresponding saved search is not!). Can't find any corresponding error messages in the kibana log. The only one suspect is absence of .reporting-%date% ind… --- ## [MongoDB module error](https://discuss.elastic.co/t/mongodb-module-error/240065)
**Author:** [@szaharici](https://discuss.elastic.co/u/szaharici)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 3:55pm UTC](https://discuss.elastic.co/t/mongodb-module-error/240065 "2020-07-07T15:55:33Z")
Hey guys, I am trying to use the mongodb filebeat module to parse the logs from mongodb instances running under kubernetes. Filebeat is deployed with the elastic-stack helm chart, here is the configuration: filebeat: … --- ## [After upgrade to 7.8 kibana is suddenly showing a lot of non-existing fields in the table view](https://discuss.elastic.co/t/after-upgrade-to-7-8-kibana-is-suddenly-showing-a-lot-of-non-existing-fields-in-the-table-view/240066)
**Author:** [@corbosman](https://discuss.elastic.co/u/corbosman)\ **Replies:** 4\ **Last updated:** [July 7, 2020, 3:49pm UTC](https://discuss.elastic.co/t/after-upgrade-to-7-8-kibana-is-suddenly-showing-a-lot-of-non-existing-fields-in-the-table-view/240066 "2020-07-07T15:49:05Z")
We upgraded elasticsearch/kibana to 7.8 from 7.7. All went well, except for one weird thing. If I go into discover and look at documents (all server logs) in one of our indices (using the table view), kibana is not only … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1945) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1947)