# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1952 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1953 --- ## [Use my own data for Search UI example](https://discuss.elastic.co/t/use-my-own-data-for-search-ui-example/239119)
**Author:** [@spadel](https://discuss.elastic.co/u/spadel)\ **Replies:** 1\ **Last updated:** [July 4, 2020, 9:30pm UTC](https://discuss.elastic.co/t/use-my-own-data-for-search-ui-example/239119 "2020-07-04T21:30:26Z")
I am currently working through the Search UI Guide on https://github.com/elastic/search-ui. By now, I have recreated the example site with the national parks. I understand now, how to modify the page for my needs. In a n… --- ## [Sum aggregation on distinct values query](https://discuss.elastic.co/t/sum-aggregation-on-distinct-values-query/239865)
**Author:** [@Giselle\_Castrejon](https://discuss.elastic.co/u/Giselle_Castrejon)\ **Replies:** 2\ **Last updated:** [July 4, 2020, 8:50pm UTC](https://discuss.elastic.co/t/sum-aggregation-on-distinct-values-query/239865 "2020-07-04T20:50:52Z")
Hi, I am having trouble with my sum aggregation. I am using Elasticsearch \[7.6.1\] and I cant get the sum of each field, my data is the following: POST test\_2/\_doc/1 { "gender": \[ { "name": "other",… --- ## [Set fielddata=true on \[event.dataset\]](https://discuss.elastic.co/t/set-fielddata-true-on-event-dataset/239769)
**Author:** [@kollp](https://discuss.elastic.co/u/kollp)\ **Replies:** 1\ **Last updated:** [July 4, 2020, 3:00pm UTC](https://discuss.elastic.co/t/set-fielddata-true-on-event-dataset/239769 "2020-07-04T15:00:32Z")
Hello, We are using the ELK Stack 7.3.1. Since a few days when I try to enter "Stack Monitoring" within Kibana I get the following error message: \[illegal\_argument\_exception\] Fielddata is disabled on text fields by de… --- ## [Problems accessing Kibana through Traefik Ingress (Kubernetes)](https://discuss.elastic.co/t/problems-accessing-kibana-through-traefik-ingress-kubernetes/239893)
**Author:** [@kodo65](https://discuss.elastic.co/u/kodo65)\ **Replies:** 0\ **Last updated:** [July 4, 2020, 2:05pm UTC](https://discuss.elastic.co/t/problems-accessing-kibana-through-traefik-ingress-kubernetes/239893 "2020-07-04T14:05:56Z")
I'm running the following: v1.17 of Kubernetes v0.9 of MetalLB v2.2 of Traefik v1.1 of ECK The setup is very basic and manifests look like the following: apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: … --- ## [Elasticsearch MMAPFS -\> Swap](https://discuss.elastic.co/t/elasticsearch-mmapfs-swap/239873)
**Author:** [@icm](https://discuss.elastic.co/u/icm)\ **Replies:** 7\ **Last updated:** [July 4, 2020, 1:58pm UTC](https://discuss.elastic.co/t/elasticsearch-mmapfs-swap/239873 "2020-07-04T13:58:58Z")
Hi, At our company we have a 6.1 cluster. To prepare for the upgrade to 6.8+ onwards, we've started rolling out new machines to Focal Fossa / Ubuntu 20.04 instead of Ubuntu 18.04. The cluster consists of 4 data nodes, … --- ## [Elasticsearch data replication from one server to another server](https://discuss.elastic.co/t/elasticsearch-data-replication-from-one-server-to-another-server/239874)
**Author:** [@Aniket\_Salvi](https://discuss.elastic.co/u/Aniket_Salvi)\ **Replies:** 5\ **Last updated:** [July 4, 2020, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-data-replication-from-one-server-to-another-server/239874 "2020-07-04T13:42:44Z")
Hi, I have installed Elasticsearch on two different DC servers. I have load balance for for failure situation. Consider I am doing transactions and storing logs on my x instance and my x instance is goes down then load … --- ## [Restoring snapshot on a different server](https://discuss.elastic.co/t/restoring-snapshot-on-a-different-server/239280)
**Author:** [@f.Cavenaghi](https://discuss.elastic.co/u/f.Cavenaghi)\ **Replies:** 1\ **Last updated:** [July 4, 2020, 1:17pm UTC](https://discuss.elastic.co/t/restoring-snapshot-on-a-different-server/239280 "2020-07-04T13:17:57Z")
Hello, i have one ELK server (stand alone) that runs 7.6.1, i took one snapshot there and see that snapshot with: 'ET /\_snapshot/esbackup/\_all printout: "snapshots" : \[ { "snapshot" : "300620-oqkwq6XXXXX57hdrwkccq"… --- ## [Winlogbeat error to connecting to kinaba](https://discuss.elastic.co/t/winlogbeat-error-to-connecting-to-kinaba/239219)
**Author:** [@ali.rauf](https://discuss.elastic.co/u/ali.rauf)\ **Replies:** 10\ **Last updated:** [July 4, 2020, 9:44am UTC](https://discuss.elastic.co/t/winlogbeat-error-to-connecting-to-kinaba/239219 "2020-07-04T09:44:51Z")
Hello to all. I use a package of ELK that use this address (http://x.x.x.x/app/kibana) to open home page and don't using 5601 port for connecting to the kibana in the URL. now my problem is that how the winlogbeat can c… --- ## [How to get all suggest from an array?](https://discuss.elastic.co/t/how-to-get-all-suggest-from-an-array/239879)
**Author:** [@111362](https://discuss.elastic.co/u/111362)\ **Replies:** 0\ **Last updated:** [July 4, 2020, 9:11am UTC](https://discuss.elastic.co/t/how-to-get-all-suggest-from-an-array/239879 "2020-07-04T09:11:28Z")
For example this document { \_index: "documents", \_type: "\_doc", \_id: "bjQbFXMBUTNnZQiIspyw", \_score: 1, \_source: { text: "blablabla", tags: \[ "apple", "iphone", "iphonexr"… --- ## [Filebeat Suddenly duplicating events more than 4 entries per log](https://discuss.elastic.co/t/filebeat-suddenly-duplicating-events-more-than-4-entries-per-log/239878)
**Author:** [@uchenebed](https://discuss.elastic.co/u/uchenebed)\ **Replies:** 0\ **Last updated:** [July 4, 2020, 8:56am UTC](https://discuss.elastic.co/t/filebeat-suddenly-duplicating-events-more-than-4-entries-per-log/239878 "2020-07-04T08:56:17Z")
Hi All, I have ben using filebeat 7.5.2 to forward custom application logs to logstash, recently i noticed a sharp rise in number of events being received by logstash and also realised that i was now getting duplicate lo… --- ## [TSVB - Multiple sum on Metric](https://discuss.elastic.co/t/tsvb-multiple-sum-on-metric/239867)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 0\ **Last updated:** [July 3, 2020, 11:26pm UTC](https://discuss.elastic.co/t/tsvb-multiple-sum-on-metric/239867 "2020-07-03T23:26:57Z")
I am trying to setup metric with four different sum on tsvb. but it only allows me to do two sum. is there hard limit on this? --- ## [Bootstrap checks failed & the default discovery settings are unsuitable for production use; at least one of \[discovery.seed\_hosts, discovery.seed\_providers, cluster.initial\_master\_nodes\] must be configured](https://discuss.elastic.co/t/bootstrap-checks-failed-the-default-discovery-settings-are-unsuitable-for-production-use-at-least-one-of-discovery-seed-hosts-discovery-seed-providers-cluster-initial-master-nodes-must-be-configured/239842)
**Author:** [@nkrshna](https://discuss.elastic.co/u/nkrshna)\ **Replies:** 2\ **Last updated:** [July 3, 2020, 7:01pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed-the-default-discovery-settings-are-unsuitable-for-production-use-at-least-one-of-discovery-seed-hosts-discovery-seed-providers-cluster-initial-master-nodes-must-be-configured/239842 "2020-07-03T19:01:03Z")
Hi I have my Elasticsearch up and running but when I'm trying to configure xpack security feature under basic license mode is see issue and elasticsearch service does not restart. Below is my elasticsearch.yml file. c… --- ## [Is it possible to embed a visualization without saving it?](https://discuss.elastic.co/t/is-it-possible-to-embed-a-visualization-without-saving-it/239795)
**Author:** [@jodinathan](https://discuss.elastic.co/u/jodinathan)\ **Replies:** 1\ **Last updated:** [July 3, 2020, 6:49pm UTC](https://discuss.elastic.co/t/is-it-possible-to-embed-a-visualization-without-saving-it/239795 "2020-07-03T18:49:52Z")
I am automating some stuff so users of my system will also have a user in our Kibana. Creating users, roles, index and patterns is a lot of stuff, so I would like to avoid having to also create a visualization object in… --- ## [Schema-less records support](https://discuss.elastic.co/t/schema-less-records-support/239714)
**Author:** [@dobes\_gf](https://discuss.elastic.co/u/dobes_gf)\ **Replies:** 5\ **Last updated:** [July 3, 2020, 6:17pm UTC](https://discuss.elastic.co/t/schema-less-records-support/239714 "2020-07-03T18:17:58Z")
Hi, I use elasticsearch to store logs collected by fluentd within Kubernetes. One of the pain points I keep hitting time and time again is elasticsearch rejecting logs because the field types change between log message… --- ## [Only one record is loaded to Elastic using Logstash conf file](https://discuss.elastic.co/t/only-one-record-is-loaded-to-elastic-using-logstash-conf-file/239684)
**Author:** [@Purnima\_Dhulipudi](https://discuss.elastic.co/u/Purnima_Dhulipudi)\ **Replies:** 5\ **Last updated:** [July 3, 2020, 6:10pm UTC](https://discuss.elastic.co/t/only-one-record-is-loaded-to-elastic-using-logstash-conf-file/239684 "2020-07-03T18:10:12Z")
Hi Below is my logstash conf file , i am trying to load data from oracle table which has 320 records to Elasticsearch but only one record got loaded to ES. I have enabled dead letter queue also but it created file wit… --- ## [MetricBeat Unknown or unexpected state \ for process with pid 25](https://discuss.elastic.co/t/metricbeat-unknown-or-unexpected-state-p-for-process-with-pid-25/239512)
**Author:** [@vamshisiddarth](https://discuss.elastic.co/u/vamshisiddarth)\ **Replies:** 3\ **Last updated:** [July 3, 2020, 6:06pm UTC](https://discuss.elastic.co/t/metricbeat-unknown-or-unexpected-state-p-for-process-with-pid-25/239512 "2020-07-03T18:06:13Z")
We have deployed metricbeat on our kubernetes cluster and everything is working as expected. But, noticing the pods continuously log the below error for the metricbeat pods. 2020-07-01T14:46:07.826Z ERROR process\_… --- ## [Unable to see winlogbeat events](https://discuss.elastic.co/t/unable-to-see-winlogbeat-events/234671)
**Author:** [@nkrshna](https://discuss.elastic.co/u/nkrshna)\ **Replies:** 7\ **Last updated:** [July 3, 2020, 5:35pm UTC](https://discuss.elastic.co/t/unable-to-see-winlogbeat-events/234671 "2020-07-03T17:35:32Z")
Hi, I'm new to Elasticsearch and configured 7 version running on CentOS 7. Trying to configure windows server to send event logs to ESS server but I'm not able to see any events under winlogbeat index pattern. Below is… --- ## [CSV : how to ignore new line?](https://discuss.elastic.co/t/csv-how-to-ignore-new-line/239839)
**Author:** [@sauravjha221](https://discuss.elastic.co/u/sauravjha221)\ **Replies:** 0\ **Last updated:** [July 3, 2020, 5:11pm UTC](https://discuss.elastic.co/t/csv-how-to-ignore-new-line/239839 "2020-07-03T17:11:57Z")
"Door Opening: Small: 6.5""W x 7.25""H Medium: 9""W x 12""H Large: 11.75""W x 16""H Extra Large: 16""W x 23.75""H" this is one field but it's being read as multiple lines. How can i fix this. In excel it's working f… --- ## [Essql timestamp query in canvas](https://discuss.elastic.co/t/essql-timestamp-query-in-canvas/239712)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [July 3, 2020, 4:57pm UTC](https://discuss.elastic.co/t/essql-timestamp-query-in-canvas/239712 "2020-07-03T16:57:30Z")
SELECT islandtype FROM "index1\*" where '@timestamp' \> now() - INTERVAL 200 minutes group by islandtype this give me blank it says no document found. but I know I have document. when I remove where clause it give me o… --- ## ['Invalid watch actions' when saving/creating a watcher that simulates correctly](https://discuss.elastic.co/t/invalid-watch-actions-when-saving-creating-a-watcher-that-simulates-correctly/239834)
**Author:** [@Rom1](https://discuss.elastic.co/u/Rom1)\ **Replies:** 1\ **Last updated:** [July 3, 2020, 4:23pm UTC](https://discuss.elastic.co/t/invalid-watch-actions-when-saving-creating-a-watcher-that-simulates-correctly/239834 "2020-07-03T16:23:32Z")
Dear all, I created a watcher through the Kibana UI that search for documents and index results into a new index. It works fine when I simulate it, even with execution of actions (target index is populated) But when… --- ## [Creating grok filter to extract each field from Dao logs](https://discuss.elastic.co/t/creating-grok-filter-to-extract-each-field-from-dao-logs/239833)
**Author:** [@kumarvivek633](https://discuss.elastic.co/u/kumarvivek633)\ **Replies:** 0\ **Last updated:** [July 3, 2020, 4:17pm UTC](https://discuss.elastic.co/t/creating-grok-filter-to-extract-each-field-from-dao-logs/239833 "2020-07-03T16:17:22Z")
I want to create a grok filter for my dao logs but as its my first time i stuck wen its going to next line. 2020-07-02 01:13:34.279 \[https-jsse-nio-9143-exec-1\] \[fc7ac7ef-47d6-48f0-b8b4-44f0889a944d\] DEBUG QueryLogger -… --- ## [How to create fields from nested fields for json data in logstash](https://discuss.elastic.co/t/how-to-create-fields-from-nested-fields-for-json-data-in-logstash/239369)
**Author:** [@Ramalakshmi](https://discuss.elastic.co/u/Ramalakshmi)\ **Replies:** 8\ **Last updated:** [July 3, 2020, 4:12pm UTC](https://discuss.elastic.co/t/how-to-create-fields-from-nested-fields-for-json-data-in-logstash/239369 "2020-07-03T16:12:33Z")
Hi, I am having json data that is parsed into kibana using logstash, in that data I am getting nested fields but I want individual fields.Please tell me how to get those fields. service.action.portProbeAction.portProbe… --- ## [Question about nested data](https://discuss.elastic.co/t/question-about-nested-data/239829)
**Author:** [@Mirakuru](https://discuss.elastic.co/u/Mirakuru)\ **Replies:** 5\ **Last updated:** [July 3, 2020, 4:00pm UTC](https://discuss.elastic.co/t/question-about-nested-data/239829 "2020-07-03T16:00:17Z")
Im trying to read a 100k line file into elastic search with logstash. I have a .txt file lines are like this userid;action. I want to use my userids as uniq and import every matching action to it, but there are duplica… --- ## [File input not pulling in data](https://discuss.elastic.co/t/file-input-not-pulling-in-data/239822)
**Author:** [@karlm](https://discuss.elastic.co/u/karlm)\ **Replies:** 1\ **Last updated:** [July 3, 2020, 3:43pm UTC](https://discuss.elastic.co/t/file-input-not-pulling-in-data/239822 "2020-07-03T15:43:05Z")
So i Have a daily log file the this with 3 sections time / priority / message like this below 03-Jul-2020 10:24:00.773 +01:00 \[INF\] User profile is available. this C:/ as key repository and Windows API to encrypt keys a… --- ## [Range slider control button doesn't work in the visualization](https://discuss.elastic.co/t/range-slider-control-button-doesnt-work-in-the-visualization/239775)
**Author:** [@SENDA\_YILDIRIM](https://discuss.elastic.co/u/SENDA_YILDIRIM)\ **Replies:** 1\ **Last updated:** [July 3, 2020, 3:37pm UTC](https://discuss.elastic.co/t/range-slider-control-button-doesnt-work-in-the-visualization/239775 "2020-07-03T15:37:36Z")
Hi, everyone. I'm trying to create a dashboard and I need to create a control button (range slider) first. When I'm trying to create and run the control button, I realized that there is not any output. As you see in the … --- ## [PNG reporting via Curl](https://discuss.elastic.co/t/png-reporting-via-curl/239751)
**Author:** [@mhelastic](https://discuss.elastic.co/u/mhelastic)\ **Replies:** 3\ **Last updated:** [July 3, 2020, 3:35pm UTC](https://discuss.elastic.co/t/png-reporting-via-curl/239751 "2020-07-03T15:35:59Z")
Hi There, We wrote a script that generates and download PDF reports from Kibana visualisations. This script has always been working fantastic. Since we have upgraded to 7.7 and later to 7.8 we get PNG's like this: So… --- ## [Logstash is not running on Windows 10](https://discuss.elastic.co/t/logstash-is-not-running-on-windows-10/239827)
**Author:** [@senthil1](https://discuss.elastic.co/u/senthil1)\ **Replies:** 0\ **Last updated:** [July 3, 2020, 3:10pm UTC](https://discuss.elastic.co/t/logstash-is-not-running-on-windows-10/239827 "2020-07-03T15:10:45Z")
Whenever I am running the logstash bat file, I am again and again getting the same error "ignoring JAVA\_OPTS=-Xmx1024m -Xms1024m; pass JVM parameters via LS\_JAVA\_OPTS" and Logstash is not runnning. logstash-6.5.1 log… --- ## [Slow transform performance](https://discuss.elastic.co/t/slow-transform-performance/239785)
**Author:** [@magnalite](https://discuss.elastic.co/u/magnalite)\ **Replies:** 6\ **Last updated:** [July 3, 2020, 3:01pm UTC](https://discuss.elastic.co/t/slow-transform-performance/239785 "2020-07-03T15:01:27Z")
I'm currently running a simple transform across ~500M docs but it is doing so super slowly, seemingly searching at \<1000 docs/s, slower than we ingest them live. The nodes are barely getting their CPU or network used and… --- ## [Continuous transform missing some documents, but they show in /\_preview](https://discuss.elastic.co/t/continuous-transform-missing-some-documents-but-they-show-in-preview/237614)
**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\ **Replies:** 7\ **Last updated:** [July 3, 2020, 3:01pm UTC](https://discuss.elastic.co/t/continuous-transform-missing-some-documents-but-they-show-in-preview/237614 "2020-07-03T15:01:16Z")
I received 2 new documents earlier within a short time frame. Neither of these msgs were updated in my transform output that is running in continuous mode. However, if I run the same transform in the console with /\_pre… --- ## [Disable inner\_hit fields from search api response](https://discuss.elastic.co/t/disable-inner-hit-fields-from-search-api-response/239814)
**Author:** [@shusson](https://discuss.elastic.co/u/shusson)\ **Replies:** 2\ **Last updated:** [July 3, 2020, 2:29pm UTC](https://discuss.elastic.co/t/disable-inner-hit-fields-from-search-api-response/239814 "2020-07-03T14:29:29Z")
Is it possible to disable certain inner\_hit fields in the response from the Search API. We have many hits and it is taking up unnecessary memory. e.g we would like to ES to remove the commented out fields from the respo… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1951) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1953)