# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1956 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1957 --- ## [Securing users on elasticsearch-oss](https://discuss.elastic.co/t/securing-users-on-elasticsearch-oss/239599)
**Author:** [@thegreatpeepee](https://discuss.elastic.co/u/thegreatpeepee)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 9:26am UTC](https://discuss.elastic.co/t/securing-users-on-elasticsearch-oss/239599 "2020-07-02T09:26:38Z")
I've combed the docs, but I can't figure out how to secure the default elastic (or any other users) using the elasticsearch-oss install (I'm using 7.6.1) According to https://www.elastic.co/what-is/open-x-pack, x-pack i… --- ## [How to combine Terms and Match query](https://discuss.elastic.co/t/how-to-combine-terms-and-match-query/239591)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 9:22am UTC](https://discuss.elastic.co/t/how-to-combine-terms-and-match-query/239591 "2020-07-02T09:22:53Z")
Hi, is there a way to combine a term and a match query? I have data with categorys A,B,C,D... which contains extra field which can vary. \_source: category: A value: 3 \_source: category: A value:2 \_source: category: A… --- ## [\[TOO\_MANY\_REQUESTS/12/index read-only / allow delete (api)\]](https://discuss.elastic.co/t/too-many-requests-12-index-read-only-allow-delete-api/236718)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 4\ **Last updated:** [July 2, 2020, 9:00am UTC](https://discuss.elastic.co/t/too-many-requests-12-index-read-only-allow-delete-api/236718 "2020-07-02T09:00:57Z")
Hi, I too am receiving this error like others. I know that I can fix it via the \_settings endpoint: PUT /\_all/\_settings {"index.blocks.read\_only\_allow\_delete": false} But, I have not run out of diskspace. I have lots … --- ## [How can I import dashboards to Kibana behind Kubernetes Nginx Ingress?](https://discuss.elastic.co/t/how-can-i-import-dashboards-to-kibana-behind-kubernetes-nginx-ingress/239589)
**Author:** [@tirelibirefe](https://discuss.elastic.co/u/tirelibirefe)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 8:11am UTC](https://discuss.elastic.co/t/how-can-i-import-dashboards-to-kibana-behind-kubernetes-nginx-ingress/239589 "2020-07-02T08:11:19Z")
Hello; How can I import custom dashboards to Kibana which is behind the Nginx Ingress on Kubernetes? Thanks --- ## [Delete raw text files once file beat forwarded to ELK](https://discuss.elastic.co/t/delete-raw-text-files-once-file-beat-forwarded-to-elk/239408)
**Author:** [@Puneeth\_S\_B\_Gowda1](https://discuss.elastic.co/u/Puneeth_S_B_Gowda1)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 8:46am UTC](https://discuss.elastic.co/t/delete-raw-text-files-once-file-beat-forwarded-to-elk/239408 "2020-07-02T08:46:51Z")
Is there any way to delete text file in the folder after forwarding into ELK ? example 10 text file there in source folder 5 files has been sent through file beat to logstash and able to see in Kibana then once data avai… --- ## [Performing sum after terms aggregation for 1.5m buckets](https://discuss.elastic.co/t/performing-sum-after-terms-aggregation-for-1-5m-buckets/239594)
**Author:** [@darshan\_ambre](https://discuss.elastic.co/u/darshan_ambre)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 8:37am UTC](https://discuss.elastic.co/t/performing-sum-after-terms-aggregation-for-1-5m-buckets/239594 "2020-07-02T08:37:39Z")
Hello Team, I am performing a terms aggregation on two fields i.e EntityCode and ItemNumber as shown in the example below. And over that I'm calculating sum on few fields and then applying a formula to the sum fields us… --- ## [How to convert my time with the date filter for kibana](https://discuss.elastic.co/t/how-to-convert-my-time-with-the-date-filter-for-kibana/239579)
**Author:** [@Mathis\_Gourc](https://discuss.elastic.co/u/Mathis_Gourc)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 8:06am UTC](https://discuss.elastic.co/t/how-to-convert-my-time-with-the-date-filter-for-kibana/239579 "2020-07-02T08:06:52Z")
I need to exploit this log line: 30361 30485 494 8861012 42:42 /plw/modules/bin/Lx86\_64/opx2-intranet.exe -I /plw/modules/bin/Lx86\_64/opx2-intranet.dxl -H /plw/modules/bin/Lx86\_64 -L /plw/PLW\_PROD/modules/preload… --- ## [Incorrect number of shard, what is the possible reason?](https://discuss.elastic.co/t/incorrect-number-of-shard-what-is-the-possible-reason/239582)
**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\ **Replies:** 6\ **Last updated:** [July 2, 2020, 8:36am UTC](https://discuss.elastic.co/t/incorrect-number-of-shard-what-is-the-possible-reason/239582 "2020-07-02T08:36:23Z")
Hello, The default number of shard is 5 in the yml setting. I also didn't specify any template for all logstash config. Most of the index are with correct number of shards, However, some index appears to be only 1 pri… --- ## [Disk full, cannot add more disk, snapshot needs space](https://discuss.elastic.co/t/disk-full-cannot-add-more-disk-snapshot-needs-space/239373)
**Author:** [@dhruv2204](https://discuss.elastic.co/u/dhruv2204)\ **Replies:** 7\ **Last updated:** [July 2, 2020, 8:27am UTC](https://discuss.elastic.co/t/disk-full-cannot-add-more-disk-snapshot-needs-space/239373 "2020-07-02T08:27:45Z")
Hi Team We have some 1.8TB data in a single index. The disk storage on this machine is 2TB and already reached 95%. We have increased the flood limit to 98%, but that will only allow for 3-4 days of data more. We cann… --- ## [Gauge visual is always showing three ranges, even when only one is configured](https://discuss.elastic.co/t/gauge-visual-is-always-showing-three-ranges-even-when-only-one-is-configured/239590)
**Author:** [@rvanegmond](https://discuss.elastic.co/u/rvanegmond)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 8:16am UTC](https://discuss.elastic.co/t/gauge-visual-is-always-showing-three-ranges-even-when-only-one-is-configured/239590 "2020-07-02T08:16:03Z")
Using Kibana 7.8.0. I have a very simple gauge show only a count of all the documents. I have configured one range going from 0 till the total amount of documents (in this example 8). I expect the gauge to be full colore… --- ## [ShutdownWatcherExt The shutdown process appears to be stalled due to busy or blocked plugins without input entrace](https://discuss.elastic.co/t/shutdownwatcherext-the-shutdown-process-appears-to-be-stalled-due-to-busy-or-blocked-plugins-without-input-entrace/239343)
**Author:** [@ledoc](https://discuss.elastic.co/u/ledoc)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 8:09am UTC](https://discuss.elastic.co/t/shutdownwatcherext-the-shutdown-process-appears-to-be-stalled-due-to-busy-or-blocked-plugins-without-input-entrace/239343 "2020-07-02T08:09:19Z")
Hello, I'm installing new stack elk for my stage env. Kibana, and ES are ok, but I have problem with logstash. Currently, I have no input on this env. no metricbeat started, no filebeat, nothing. I configured pipeline… --- ## [How to process/filter output from SNMP input plugin for logstash](https://discuss.elastic.co/t/how-to-process-filter-output-from-snmp-input-plugin-for-logstash/239549)
**Author:** [@gasparuben](https://discuss.elastic.co/u/gasparuben)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 8:01am UTC](https://discuss.elastic.co/t/how-to-process-filter-output-from-snmp-input-plugin-for-logstash/239549 "2020-07-02T08:01:26Z")
hi, I am retrieving SNMP data from our webcast servers. I would like to know how to process the results in a filter stage in logstash e.g { "httpClientCountGetUserQueryStr.1.1.1.1.3" =\> "liveoutside/smil:1… --- ## [How to extract logstash log.file.path for filter](https://discuss.elastic.co/t/how-to-extract-logstash-log-file-path-for-filter/239581)
**Author:** [@jang](https://discuss.elastic.co/u/jang)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 7:51am UTC](https://discuss.elastic.co/t/how-to-extract-logstash-log-file-path-for-filter/239581 "2020-07-02T07:51:16Z")
hi. I am using Filebeat and Logstash. now, my \[log\]\[file\]\[path\] result. (The file path is flexible.) /home/logs/tomcat/application/test.log or /LOG/application/test2.log etc... I only want the file name except for… --- ## [Where can I download sample Kibana dashboards?](https://discuss.elastic.co/t/where-can-i-download-sample-kibana-dashboards/239573)
**Author:** [@tirelibirefe](https://discuss.elastic.co/u/tirelibirefe)\ **Replies:** 6\ **Last updated:** [July 2, 2020, 6:54am UTC](https://discuss.elastic.co/t/where-can-i-download-sample-kibana-dashboards/239573 "2020-07-02T06:54:43Z")
Hello; I think there are some sample Kibana dashboards comes with Linux installations of Metricbeat, Filebeat and Logstash. As I installed my Elastic, Kibana and beats via Helm, there are no any sample dashboards to wa… --- ## [Elastic Search 7.8 installation with XPACK](https://discuss.elastic.co/t/elastic-search-7-8-installation-with-xpack/239315)
**Author:** [@Harsha7071](https://discuss.elastic.co/u/Harsha7071)\ **Replies:** 4\ **Last updated:** [July 2, 2020, 6:53am UTC](https://discuss.elastic.co/t/elastic-search-7-8-installation-with-xpack/239315 "2020-07-02T06:53:34Z")
Hello Team, We had Elastic search version 7.6 installed on the server and was working well with the Wazuh perfectly and then we tried to install the XPACK and Kibana was not starting at all. ● elasticsearch.service - E… --- ## [Bulk Partial Update in elasticsearch with Python](https://discuss.elastic.co/t/bulk-partial-update-in-elasticsearch-with-python/239575)
**Author:** [@johnny1](https://discuss.elastic.co/u/johnny1)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 6:33am UTC](https://discuss.elastic.co/t/bulk-partial-update-in-elasticsearch-with-python/239575 "2020-07-02T06:33:30Z")
I want to perform a bulk partial update in python for elasticsearch because I don't want to update the whole documents but only specific fields. Can you please give an example? Best thanks in advance. --- ## [java.lang.IllegalStateException: unexpected byte \[0x02\]](https://discuss.elastic.co/t/java-lang-illegalstateexception-unexpected-byte-0x02/239569)
**Author:** [@vikrammazakindia](https://discuss.elastic.co/u/vikrammazakindia)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 6:25am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-unexpected-byte-0x02/239569 "2020-07-02T06:25:36Z")
Hi, i am using query builder with simple query string to search data using elastic search template iam facing above error my code is final QueryBuilder searchquery = QueryBuilders.boolQuery() .should… --- ## [GROK Parse failure for log file pattern](https://discuss.elastic.co/t/grok-parse-failure-for-log-file-pattern/239320)
**Author:** [@Akshara](https://discuss.elastic.co/u/Akshara)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 5:59am UTC](https://discuss.elastic.co/t/grok-parse-failure-for-log-file-pattern/239320 "2020-07-02T05:59:33Z")
2019-05-12 15:57:15.446 \[localhost\] \[Services\] \[Request Id : RT1242124202120519027049\] \[User Id : TEST@sales.com\] INFO Services.aspect.AspectController:120 - \[1242,124202,RT1242124202120519027049\] Exit Add\_SaleLineItem… --- ## [How to get and create users in elasticsearch with API by using python](https://discuss.elastic.co/t/how-to-get-and-create-users-in-elasticsearch-with-api-by-using-python/239565)
**Author:** [@Mahathir\_Mohammad](https://discuss.elastic.co/u/Mahathir_Mohammad)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 5:51am UTC](https://discuss.elastic.co/t/how-to-get-and-create-users-in-elasticsearch-with-api-by-using-python/239565 "2020-07-02T05:51:33Z")
I want to get and create users in elasticsearch with python. I'm trying to use API. I'm following this documentation. I send a get request with Postman in this URL: http://localhost:9200/\_opendistro/\_security/api/intern… --- ## [To set an index name with filebeat](https://discuss.elastic.co/t/to-set-an-index-name-with-filebeat/239397)
**Author:** [@jang](https://discuss.elastic.co/u/jang)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 5:25am UTC](https://discuss.elastic.co/t/to-set-an-index-name-with-filebeat/239397 "2020-07-02T05:25:43Z")
hello, I pass the log to logstash via Filebit. I currently collect logs from three path. I'm trying to set index name on the filebit. I want to set an index name for each path. How can I set each index name? now se… --- ## [Auditbeat 7.8.0 socket only send data in 2 minutes](https://discuss.elastic.co/t/auditbeat-7-8-0-socket-only-send-data-in-2-minutes/239199)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 5:18am UTC](https://discuss.elastic.co/t/auditbeat-7-8-0-socket-only-send-data-in-2-minutes/239199 "2020-07-02T05:18:33Z")
Hi all, I have something weird since upgrade to 7.8 of auditbeat, below the log that produce by auditbeat I use Centos 7.6 with kernel Linux sync-02 3.10.0-1062.18.1.el7.x86\_64 #1 SMP Tue Mar 17 23:49:17 UTC 2020 x86\_… --- ## [Logstash error with multiple pipeline](https://discuss.elastic.co/t/logstash-error-with-multiple-pipeline/239474)
**Author:** [@dorcas](https://discuss.elastic.co/u/dorcas)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 5:16am UTC](https://discuss.elastic.co/t/logstash-error-with-multiple-pipeline/239474 "2020-07-02T05:16:05Z")
Logstash - java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit can someone help with this thanks --- ## [Kibana status is Red](https://discuss.elastic.co/t/kibana-status-is-red/239570)
**Author:** [@azharsc](https://discuss.elastic.co/u/azharsc)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 5:14am UTC](https://discuss.elastic.co/t/kibana-status-is-red/239570 "2020-07-02T05:14:55Z")
Kibana UI is getting RED status, even though ES and Kibana servers are running fine. error: Unable to retrieve version information from Elasticsearch nodes. --- ## [Is it viable to create a ElasticSearch user for each customer? And indexes?](https://discuss.elastic.co/t/is-it-viable-to-create-a-elasticsearch-user-for-each-customer-and-indexes/239539)
**Author:** [@jodinathan](https://discuss.elastic.co/u/jodinathan)\ **Replies:** 3\ **Last updated:** [July 2, 2020, 5:03am UTC](https://discuss.elastic.co/t/is-it-viable-to-create-a-elasticsearch-user-for-each-customer-and-indexes/239539 "2020-07-02T05:03:49Z")
We are pondering in creating one user in elasticsearch & kibana for each of our customers through the api and also creating a unique index for them, ie: somedata12345, somedata54321, where the 12345 would be the user ID … --- ## [Hide space for user](https://discuss.elastic.co/t/hide-space-for-user/239327)
**Author:** [@igarci](https://discuss.elastic.co/u/igarci)\ **Replies:** 4\ **Last updated:** [July 2, 2020, 4:54am UTC](https://discuss.elastic.co/t/hide-space-for-user/239327 "2020-07-02T04:54:30Z")
Hello I have kibana 7.2 and basic license I am trying to hide or not allow any user to access some space, but there is no documentation to do it. I just want to create a user who can access to different workspaces wit… --- ## [Issue in mapping of fileds](https://discuss.elastic.co/t/issue-in-mapping-of-fileds/238816)
**Author:** [@muhammad.ashraf](https://discuss.elastic.co/u/muhammad.ashraf)\ **Replies:** 3\ **Last updated:** [July 2, 2020, 4:44am UTC](https://discuss.elastic.co/t/issue-in-mapping-of-fileds/238816 "2020-07-02T04:44:31Z")
I am getting netflows from nprobe at Kibana. The template i am using while run nprobe is %IN\_SRC\_MAC %OUT\_DST\_MAC %INPUT\_SNMP %OUTPUT\_SNMP %SRC\_VLAN %IPV4\_SRC\_ADDR %IPV4\_DST\_ADDR %L4\_SRC\_PORT %L4\_DST\_PORT %IPV6\_SRC\_ADDR… --- ## [Cannot see user "id" in slowlogs (X-Opaque-ID)](https://discuss.elastic.co/t/cannot-see-user-id-in-slowlogs-x-opaque-id/239555)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 0\ **Last updated:** [July 2, 2020, 12:15am UTC](https://discuss.elastic.co/t/cannot-see-user-id-in-slowlogs-x-opaque-id/239555 "2020-07-02T00:15:48Z")
Hello According to this post Identifying search slow log origin It is often useful to identify what triggered a slow running query. If a call was initiated with an X-Opaque-ID header, then the user ID is included i… --- ## [How can i pinned the documents in elastic search?](https://discuss.elastic.co/t/how-can-i-pinned-the-documents-in-elastic-search/239285)
**Author:** [@Sagar\_jain](https://discuss.elastic.co/u/Sagar_jain)\ **Replies:** 27\ **Last updated:** [July 1, 2020, 11:42pm UTC](https://discuss.elastic.co/t/how-can-i-pinned-the-documents-in-elastic-search/239285 "2020-07-01T23:42:08Z")
How can i pinned the documents in elastic search? --- ## [JSON field expansion](https://discuss.elastic.co/t/json-field-expansion/239544)
**Author:** [@DPattee](https://discuss.elastic.co/u/DPattee)\ **Replies:** 2\ **Last updated:** [July 1, 2020, 11:14pm UTC](https://discuss.elastic.co/t/json-field-expansion/239544 "2020-07-01T23:14:58Z")
Over the past couple days I've read a bunch of posts here and on some other forums, plus official documentation, but there is something that just isn't "clicking"... Goal: Expand/explode/parse a document field that cont… --- ## [Aggregation to count parent documents by field in their children?](https://discuss.elastic.co/t/aggregation-to-count-parent-documents-by-field-in-their-children/239550)
**Author:** [@bobbyi](https://discuss.elastic.co/u/bobbyi)\ **Replies:** 0\ **Last updated:** [July 1, 2020, 11:03pm UTC](https://discuss.elastic.co/t/aggregation-to-count-parent-documents-by-field-in-their-children/239550 "2020-07-01T23:03:29Z")
I have an index that contains parent documents and child documents using the join datatype. I have a field on the child documents and for each unique value that appears in that field I would like to answer this question:… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1955) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1957)