# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1980 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1981 --- ## [No mapping found for \[days\] in order to sort on](https://discuss.elastic.co/t/no-mapping-found-for-days-in-order-to-sort-on/238107)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 2:47pm UTC](https://discuss.elastic.co/t/no-mapping-found-for-days-in-order-to-sort-on/238107 "2020-06-23T14:47:24Z")
At the beggining of this month I added a template and a new numeric field for an index, so the field doesnt exists in the previous months, when displaying an horizontal bar visualizations (even if I query the last hour o… --- ## [Metricbeat Host Not Showing On Dashboard](https://discuss.elastic.co/t/metricbeat-host-not-showing-on-dashboard/238287)
**Author:** [@vps-eric](https://discuss.elastic.co/u/vps-eric)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 2:46pm UTC](https://discuss.elastic.co/t/metricbeat-host-not-showing-on-dashboard/238287 "2020-06-23T14:46:15Z")
I am using the latest Metricbeat from GitHub, cross compiled for use on aarch64. I have a device that was submitting default system statistics to Elastic just fine on Friday. Monday, it was not showing on the System Over… --- ## [Elasticsearch Curator: Empty list](https://discuss.elastic.co/t/elasticsearch-curator-empty-list/237599)
**Author:** [@AJCandfield](https://discuss.elastic.co/u/AJCandfield)\ **Replies:** 5\ **Last updated:** [June 23, 2020, 2:18pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-empty-list/237599 "2020-06-23T14:18:12Z")
Hi all, We decided to install the Curator to delete indices with respect to age and size. On our first run the tool was able to delete the Logstash indices that matched the criteria but when we specified any other inde… --- ## [Kibana won't start after upgrade to 7.8.0](https://discuss.elastic.co/t/kibana-wont-start-after-upgrade-to-7-8-0/237819)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 8\ **Last updated:** [June 23, 2020, 2:00pm UTC](https://discuss.elastic.co/t/kibana-wont-start-after-upgrade-to-7-8-0/237819 "2020-06-23T14:00:12Z")
I apply this to three node cluster all of them are master/data/kibana two of them starts up kibana without any problem one does not. it do not even puts any log on log file or on screen systemctl status kibana ● kib… --- ## [Elasticsearch not indexing after update (only a specific index)](https://discuss.elastic.co/t/elasticsearch-not-indexing-after-update-only-a-specific-index/238271)
**Author:** [@user9](https://discuss.elastic.co/u/user9)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 1:51pm UTC](https://discuss.elastic.co/t/elasticsearch-not-indexing-after-update-only-a-specific-index/238271 "2020-06-23T13:51:44Z")
I've been for days trying to solve this issue, there is no support neither troubleshoot about these issues. All indexes are being created, except this one. Before the update it worked, now it doesn't. Things I checked: … --- ## [Netflow logs](https://discuss.elastic.co/t/netflow-logs/238272)
**Author:** [@amr\_hamdy](https://discuss.elastic.co/u/amr_hamdy)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 1:55pm UTC](https://discuss.elastic.co/t/netflow-logs/238272 "2020-06-23T13:55:49Z")
when i run logstash to collect netflow logs and send it to sentinel it works well but message in logs is in unreadable format my input configuration file input { udp { port =\> 2055 type =\> "netflow" } } --- ## [Setup lifecycle of "monitoring" plugin wasn't completed in 30 sec](https://discuss.elastic.co/t/setup-lifecycle-of-monitoring-plugin-wasnt-completed-in-30-sec/237504)
**Author:** [@amwilliams](https://discuss.elastic.co/u/amwilliams)\ **Replies:** 4\ **Last updated:** [June 23, 2020, 1:46pm UTC](https://discuss.elastic.co/t/setup-lifecycle-of-monitoring-plugin-wasnt-completed-in-30-sec/237504 "2020-06-23T13:46:24Z")
Hi All, I am receiving an error when I start up the kibana docker image. I have tried to remove the package "monitoring" but it does not exist. I am running the 7.7.1 image. {"type":"log","@timestamp":"2020-06-17T15:… --- ## [Http\_poller input plugin: please no http\_poller\_metadata](https://discuss.elastic.co/t/http-poller-input-plugin-please-no-http-poller-metadata/238200)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 1:32pm UTC](https://discuss.elastic.co/t/http-poller-input-plugin-please-no-http-poller-metadata/238200 "2020-06-23T13:32:27Z")
Hi there, is there a 'trick' to disable collecting the http\_poller\_metadata fields when using this plugin? I am only interested in the acutal data I get. Right now I am doing this: http\_poller { urls =\> { url =\> "ht… --- ## [Python : How to write a simple regexp query using Elasticsearch in python?](https://discuss.elastic.co/t/python-how-to-write-a-simple-regexp-query-using-elasticsearch-in-python/238197)
**Author:** [@VITTHAL\_BHANDARI](https://discuss.elastic.co/u/VITTHAL_BHANDARI)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 1:16pm UTC](https://discuss.elastic.co/t/python-how-to-write-a-simple-regexp-query-using-elasticsearch-in-python/238197 "2020-06-23T13:16:59Z")
I am trying to write a simple regexp query using elasticsearch in python that just won't work. Can anybody tell me where I'm going wrong ? result = es.search(index="my-index", body={"query": {"regexp": {"Name": "Vi.\*" }… --- ## [How to know which documents in the search results include all of the tokens in the search query (for one particular field)](https://discuss.elastic.co/t/how-to-know-which-documents-in-the-search-results-include-all-of-the-tokens-in-the-search-query-for-one-particular-field/237639)
**Author:** [@swafa](https://discuss.elastic.co/u/swafa)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 12:37pm UTC](https://discuss.elastic.co/t/how-to-know-which-documents-in-the-search-results-include-all-of-the-tokens-in-the-search-query-for-one-particular-field/237639 "2020-06-23T12:37:46Z")
We are trying to find out which documents in our search results include all the tokens in our search query. For example when running the following query: GET /test/\_search { "query" : { "match"… --- ## [Filter Sonicwall](https://discuss.elastic.co/t/filter-sonicwall/238257)
**Author:** [@Danilo\_Visual](https://discuss.elastic.co/u/Danilo_Visual)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 12:34pm UTC](https://discuss.elastic.co/t/filter-sonicwall/238257 "2020-06-23T12:34:13Z")
I'm using ELK and I wanted to know where I can insert filters to analyze Sonicwall logs and view them in the graphana. Would you put it in the filter.conf of the logstash? Can anybody help me? --- ## [Unable to change the replication factor in elasticsearch 6.8](https://discuss.elastic.co/t/unable-to-change-the-replication-factor-in-elasticsearch-6-8/238234)
**Author:** [@sammi](https://discuss.elastic.co/u/sammi)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 12:09pm UTC](https://discuss.elastic.co/t/unable-to-change-the-replication-factor-in-elasticsearch-6-8/238234 "2020-06-23T12:09:22Z")
Hi, Trying to change the replication factor for indices on 3 node elasticsearch 6.8 cluster from 1 to 2. Getting errors on the server. below is the GET result for settings. curl -XGET http://127.0.0.1:9200/janusgraph… --- ## [Doubt about System Module \[Filebeat\]](https://discuss.elastic.co/t/doubt-about-system-module-filebeat/238078)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 12:02pm UTC](https://discuss.elastic.co/t/doubt-about-system-module-filebeat/238078 "2020-06-23T12:02:00Z")
Hi, everyone I would like to know over which logs Module System is able to parse. In Filebeat Doc, it shows an example with auth.log and syslog. Is it possible to do it with logs as secure, messages, etc? From my poin… --- ## [Failed to obtain a connection with the database Metricbeat](https://discuss.elastic.co/t/failed-to-obtain-a-connection-with-the-database-metricbeat/238249)
**Author:** [@himalc](https://discuss.elastic.co/u/himalc)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 11:47am UTC](https://discuss.elastic.co/t/failed-to-obtain-a-connection-with-the-database-metricbeat/238249 "2020-06-23T11:47:06Z")
Hi, I have below issue on metricbeat logs. I have using all applications are in docker containers (metricbeat, postgresql, elasticsearch, kibana). Any help on this? Error from metricbeat: (1) Error INFO module/wrappe… --- ## [Elastic Search time query](https://discuss.elastic.co/t/elastic-search-time-query/238245)
**Author:** [@Shubham\_Singh\_Rathor](https://discuss.elastic.co/u/Shubham_Singh_Rathor)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 11:43am UTC](https://discuss.elastic.co/t/elastic-search-time-query/238245 "2020-06-23T11:43:54Z")
i am not able filter the data body={'query': { "bool": { "must": {"match": {"Id": "3"}} , "filter": {"range": {"@timestamp": {"gte": "now-30m", "lte": "now"}}} }}} less than 30 minute query for elasticsearch usi… --- ## [Unable to connect to mssql using logstash jdbc static filter](https://discuss.elastic.co/t/unable-to-connect-to-mssql-using-logstash-jdbc-static-filter/238237)
**Author:** [@Matthew\_Field](https://discuss.elastic.co/u/Matthew_Field)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 11:13am UTC](https://discuss.elastic.co/t/unable-to-connect-to-mssql-using-logstash-jdbc-static-filter/238237 "2020-06-23T11:13:31Z")
The log output doesnt give me much of a clue what the problem is: My config: jdbc\_static { loaders =\> \[ \ \] local\_db\_objects =\> \[ \… --- ## [Setting parse\_origination\_date doesn't update index's lifecycle date](https://discuss.elastic.co/t/setting-parse-origination-date-doesnt-update-indexs-lifecycle-date/238236)
**Author:** [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 11:06am UTC](https://discuss.elastic.co/t/setting-parse-origination-date-doesnt-update-indexs-lifecycle-date/238236 "2020-06-23T11:06:10Z")
I have an old index that's been reindexed and I want my ILM policy to work as if the reindexing never happened. I expected setting the index.lifecycle.parse\_origination\_date setting to true would've taken care of that fo… --- ## [Confused about the behaviour of last\_run\_metadata\_path in JDBC input](https://discuss.elastic.co/t/confused-about-the-behaviour-of-last-run-metadata-path-in-jdbc-input/237669)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 8:00am UTC](https://discuss.elastic.co/t/confused-about-the-behaviour-of-last-run-metadata-path-in-jdbc-input/237669 "2020-06-23T08:00:27Z")
I am trying to get some data out of a SQL database. Here is the configuration: input { jdbc { jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServerDriver" jdbc\_con… --- ## [Adding 2 button on Kibana discover page and enable it](https://discuss.elastic.co/t/adding-2-button-on-kibana-discover-page-and-enable-it/238214)
**Author:** [@edisonyang](https://discuss.elastic.co/u/edisonyang)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 10:52am UTC](https://discuss.elastic.co/t/adding-2-button-on-kibana-discover-page-and-enable-it/238214 "2020-06-23T10:52:52Z")
Hi, I want to add 2 button in discover page to call external HTTP API from our server, because I need the wonderful filter bar to add params to my request. I've successfully added the 2 button in kibana/src/legacy/cor… --- ## [Performance of logstash degrading](https://discuss.elastic.co/t/performance-of-logstash-degrading/238229)
**Author:** [@juliolb](https://discuss.elastic.co/u/juliolb)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 10:49am UTC](https://discuss.elastic.co/t/performance-of-logstash-degrading/238229 "2020-06-23T10:49:33Z")
Hello, I have been using logstash for some time now and I recently upgraded from an old version (5.3.2) to a newer one (6.2.4). Using basically the same parameters I noticed a dramatic decrease in the rate of processed … --- ## [ElasticSearch inine script, max\_compilation\_rate issue](https://discuss.elastic.co/t/elasticsearch-inine-script-max-compilation-rate-issue/238082)
**Author:** [@rkr57123](https://discuss.elastic.co/u/rkr57123)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-inine-script-max-compilation-rate-issue/238082 "2020-06-23T10:43:06Z")
\`Hi, I'm using elastic-7.3.1. I'm sending large number of requests each having unique dynamic inline script and I'm getting this issue on elastic server org.elasticsearch.ElasticsearchException: Elasticsearch exceptio… --- ## [Grok pattern to get the whole text without considering space](https://discuss.elastic.co/t/grok-pattern-to-get-the-whole-text-without-considering-space/238095)
**Author:** [@Mohan\_vel](https://discuss.elastic.co/u/Mohan_vel)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 6:55am UTC](https://discuss.elastic.co/t/grok-pattern-to-get-the-whole-text-without-considering-space/238095 "2020-06-23T06:55:15Z")
I am trying to grok a message text with my grok pattern if i pass the sample data without space my grok pattern works fine but if there is any space in between text it fetch only the first word before space and after spa… --- ## [How to Customize Kibana 7.6.0 Login Page?](https://discuss.elastic.co/t/how-to-customize-kibana-7-6-0-login-page/232769)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 32\ **Last updated:** [June 23, 2020, 10:32am UTC](https://discuss.elastic.co/t/how-to-customize-kibana-7-6-0-login-page/232769 "2020-06-23T10:32:24Z")
Hi, I've read a few posts around how to customize the login page of Kibana but all seem obsolete since from version to version, the code gets changed and so do the mods. so can i have a guide to : 1- Browser title an… --- ## [Kibana - visualization axis values](https://discuss.elastic.co/t/kibana-visualization-axis-values/238222)
**Author:** [@Anna\_R](https://discuss.elastic.co/u/Anna_R)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 9:53am UTC](https://discuss.elastic.co/t/kibana-visualization-axis-values/238222 "2020-06-23T09:53:39Z")
Hello! I am creating a simple bar visualization with count aggregation metric. Is there a way to avoid the (.5) values in the axis and have just integer values? (It is a count aggregation, it cannot have non-integer … --- ## [Alternative to top\_hits aggregation](https://discuss.elastic.co/t/alternative-to-top-hits-aggregation/235790)
**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 9:47am UTC](https://discuss.elastic.co/t/alternative-to-top-hits-aggregation/235790 "2020-06-23T09:47:56Z")
What are the alternate ways to bring source data of buckets after aggregation? Why top\_hits aggregation slow when we increase the value of "from"? --- ## [Disable optimization for custom plugin](https://discuss.elastic.co/t/disable-optimization-for-custom-plugin/236476)
**Author:** [@bard0x](https://discuss.elastic.co/u/bard0x)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 9:45am UTC](https://discuss.elastic.co/t/disable-optimization-for-custom-plugin/236476 "2020-06-23T09:45:27Z")
Hi, it's possible to disable the optimization for a custom plugin that I developed? Thank's in advance --- ## [Why this feature is missing in new kibana version](https://discuss.elastic.co/t/why-this-feature-is-missing-in-new-kibana-version/237764)
**Author:** [@Liu\_Vincent](https://discuss.elastic.co/u/Liu_Vincent)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 9:32am UTC](https://discuss.elastic.co/t/why-this-feature-is-missing-in-new-kibana-version/237764 "2020-06-23T09:32:50Z")
Discover-\>Extended Document-\> Json format-\> Line number --- ## [Filebeat stop working after upgrade from 7.6.0 to 7.7.1 (kubernetes)](https://discuss.elastic.co/t/filebeat-stop-working-after-upgrade-from-7-6-0-to-7-7-1-kubernetes/238190)
**Author:** [@Johanes\_Anggara](https://discuss.elastic.co/u/Johanes_Anggara)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 9:23am UTC](https://discuss.elastic.co/t/filebeat-stop-working-after-upgrade-from-7-6-0-to-7-7-1-kubernetes/238190 "2020-06-23T09:23:42Z")
I have filebeat running as daemonset in k8s cluster, while apps storing file which mounted in host disk, this path also mounted by filebeat containers. Previously on 7.6 its working but after upgrading to 7.7.1 its stop… --- ## [Unable to parse csv over 20000 with Data Visualizer](https://discuss.elastic.co/t/unable-to-parse-csv-over-20000-with-data-visualizer/236208)
**Author:** [@Thodoris\_Alexopoulos](https://discuss.elastic.co/u/Thodoris_Alexopoulos)\ **Replies:** 4\ **Last updated:** [June 23, 2020, 9:17am UTC](https://discuss.elastic.co/t/unable-to-parse-csv-over-20000-with-data-visualizer/236208 "2020-06-23T09:17:34Z")
Hello everyone, I am trying to parse a CSV file that is 22000 rows to Data visualizer and it fails with error , file could not be read. Unexpected token \< in JSON at position 0. But when I erase 3000 rows the file passe… --- ## [Unable to start metricbeat using service command](https://discuss.elastic.co/t/unable-to-start-metricbeat-using-service-command/238122)
**Author:** [@prakash\_a](https://discuss.elastic.co/u/prakash_a)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 9:09am UTC](https://discuss.elastic.co/t/unable-to-start-metricbeat-using-service-command/238122 "2020-06-23T09:09:51Z")
We are unable to start/stop/ manage metricbeat on Oracle Linux 6.5 version. We have to manually start service using metricbeat -e -c /etc/metricbeat/metricbeat.yml Below is what we see when we start metricbeat using se… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1979) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1981)