# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=554 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 555 --- ## [Do Kibana 6.8.1 have ability to create an interactive dashboards](https://discuss.elastic.co/t/do-kibana-6-8-1-have-ability-to-create-an-interactive-dashboards/332397)
**Author:** [@oraib](https://discuss.elastic.co/u/oraib)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 10:16am UTC](https://discuss.elastic.co/t/do-kibana-6-8-1-have-ability-to-create-an-interactive-dashboards/332397 "2023-05-03T10:16:22Z")
I created an a dashboard included a pie chart using Kibana dashboard version 6.8.1 . I am trying to allow the users to click on a pie chart to redirect them to a corresponding dashboard that provides detailed informat… --- ## [How to index my documents to aggregate similar item listings together](https://discuss.elastic.co/t/how-to-index-my-documents-to-aggregate-similar-item-listings-together/332342)
**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 8:22am UTC](https://discuss.elastic.co/t/how-to-index-my-documents-to-aggregate-similar-item-listings-together/332342 "2023-05-03T08:22:59Z")
Say I have a gaming website and there are panels that look like this: Panel A: Game: Super Mario Language : English Number of Players: Two Theme: Nature Panel B: Game:Super Mario Language : French Number of Player… --- ## [Logstash file input plugin picks different files other than specified path](https://discuss.elastic.co/t/logstash-file-input-plugin-picks-different-files-other-than-specified-path/332380)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 0\ **Last updated:** [May 3, 2023, 6:42am UTC](https://discuss.elastic.co/t/logstash-file-input-plugin-picks-different-files-other-than-specified-path/332380 "2023-05-03T06:42:15Z")
Hi , I am using the file input plugin , here is my config nput { file { type =\> "tomeeaccess\_passport" path =\> "/etc/logstash/logs/localhost\_access\_log..2023-04-20.txt" start\_posi… --- ## [SSD vs HDD performance? on ssd search takes 100ms on hdd 3000-6000ms](https://discuss.elastic.co/t/ssd-vs-hdd-performance-on-ssd-search-takes-100ms-on-hdd-3000-6000ms/332377)
**Author:** [@Eduard\_mart](https://discuss.elastic.co/u/Eduard_mart)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 6:01am UTC](https://discuss.elastic.co/t/ssd-vs-hdd-performance-on-ssd-search-takes-100ms-on-hdd-3000-6000ms/332377 "2023-05-03T06:01:08Z")
SSD vs HDD performance? on SSD search takes 100ms on HDD 3000-6000ms Is it possible to optimize performance on HDD? 130 millions of entries. 150gb of text. One server. Tried different amount of shards and nodes (usi… --- ## [The problem with getting a lot of logs](https://discuss.elastic.co/t/the-problem-with-getting-a-lot-of-logs/332291)
**Author:** [@DenisGr](https://discuss.elastic.co/u/DenisGr)\ **Replies:** 5\ **Last updated:** [May 3, 2023, 6:30am UTC](https://discuss.elastic.co/t/the-problem-with-getting-a-lot-of-logs/332291 "2023-05-03T06:30:03Z")
Hey guys. I'm new here and I apologize in advance if I opened a thread in the wrong section. I have the task of handling a large number of logs, generating up to 100,000 per minute or even more. I currently have elk mas… --- ## [Json codec failed with data bigger then 4k size](https://discuss.elastic.co/t/json-codec-failed-with-data-bigger-then-4k-size/330687)
**Author:** [@arunporwal](https://discuss.elastic.co/u/arunporwal)\ **Replies:** 12\ **Last updated:** [May 3, 2023, 4:49am UTC](https://discuss.elastic.co/t/json-codec-failed-with-data-bigger-then-4k-size/330687 "2023-05-03T04:49:18Z")
I am trying to read the JSON files using logstash input plugin. For this I used codec as JSON, it is working fine until it encounters a file containing a size of more than 4k. It is giving a parsing error for this. I did… --- ## [Change Scaled Date format by query](https://discuss.elastic.co/t/change-scaled-date-format-by-query/332203)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 3:55am UTC](https://discuss.elastic.co/t/change-scaled-date-format-by-query/332203 "2023-05-03T03:55:42Z")
Hi all, I'm trying to change Scaled Date format by query. Here in scaled format , I want to add: \["P1MT", "MMM-YYYY"\], Basically, we can change in Kibana UI, but for this instance I do not have kibana access and h… --- ## [Filebeat installation on AIX servers](https://discuss.elastic.co/t/filebeat-installation-on-aix-servers/332026)
**Author:** [@ryanamadala](https://discuss.elastic.co/u/ryanamadala)\ **Replies:** 2\ **Last updated:** [May 3, 2023, 3:22am UTC](https://discuss.elastic.co/t/filebeat-installation-on-aix-servers/332026 "2023-05-03T03:22:12Z")
Need some help for installing Filebeat agents on AIX servers. Machine details: System Model: IBM,9040-MR9 Processor Type: PowerPC\_POWER9 Processor Implementation Mode: POWER 9 Platform Firmware level: VM940\_050 --- ## [Require Last 15 minutes from timestamp](https://discuss.elastic.co/t/require-last-15-minutes-from-timestamp/332039)
**Author:** [@rubhamra](https://discuss.elastic.co/u/rubhamra)\ **Replies:** 2\ **Last updated:** [May 3, 2023, 1:42am UTC](https://discuss.elastic.co/t/require-last-15-minutes-from-timestamp/332039 "2023-05-03T01:42:09Z")
I have REST API call and I need to pull records which were updated every last 15 minutes. I can pull last 24 records but I need just updated with in last 15 minutes based on the date field. This is the ruby code ruby … --- ## [Cluster with routing enabled has one node with consistently high CPU usage](https://discuss.elastic.co/t/cluster-with-routing-enabled-has-one-node-with-consistently-high-cpu-usage/330796)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 1:04am UTC](https://discuss.elastic.co/t/cluster-with-routing-enabled-has-one-node-with-consistently-high-cpu-usage/330796 "2023-05-03T01:04:34Z")
Hi, We have an 8-node cluster with routing enabled and we're seeing consistently high CPU usage on one node in particular (over 90%). The other 7 nodes flash high at times but don't remain or do so as often. Is this m… --- ## [What are the rough criteria for having dedicated masternodes in elasticsearch?](https://discuss.elastic.co/t/what-are-the-rough-criteria-for-having-dedicated-masternodes-in-elasticsearch/332351)
**Author:** [@winteriscomming](https://discuss.elastic.co/u/winteriscomming)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 12:27am UTC](https://discuss.elastic.co/t/what-are-the-rough-criteria-for-having-dedicated-masternodes-in-elasticsearch/332351 "2023-05-03T00:27:50Z")
We know that having dedicated masternodes is good for stability and resource management. In a relatively small scale, there are many cases where it seems that there is no need to have a dedicated master node. Can you g… --- ## [Invalid NEST response built from a unsuccessful () low level call on PUT:](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-put/332295)
**Author:** [@Maedeh\_Rafiei](https://discuss.elastic.co/u/Maedeh_Rafiei)\ **Replies:** 1\ **Last updated:** [May 2, 2023, 11:50pm UTC](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-put/332295 "2023-05-02T23:50:26Z")
hi , I've used multi-instance elastic but when I use the hostname I get this error Elasticsearch.Net.ElasticsearchClientException: Failed to ping the specified node.. Call: unknown resource But using IP in output elast… --- ## [System.process.cpu.total.norm.pct is always zero, metricbeat 7.17.9](https://discuss.elastic.co/t/system-process-cpu-total-norm-pct-is-always-zero-metricbeat-7-17-9/332346)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [May 2, 2023, 9:49pm UTC](https://discuss.elastic.co/t/system-process-cpu-total-norm-pct-is-always-zero-metricbeat-7-17-9/332346 "2023-05-02T21:49:20Z")
Hi, Im using system module of metricbeat and process metricset, this is the configuration - module: system period: 300s metricsets: - cpu - memory - network - process system.process.cpu.total.norm.p… --- ## [Logs not pushed to elasticsearch](https://discuss.elastic.co/t/logs-not-pushed-to-elasticsearch/330590)
**Author:** [@aaronlbk](https://discuss.elastic.co/u/aaronlbk)\ **Replies:** 5\ **Last updated:** [May 2, 2023, 8:25pm UTC](https://discuss.elastic.co/t/logs-not-pushed-to-elasticsearch/330590 "2023-05-02T20:25:48Z")
I have an issue with logstash that is not pushing logs to elastic. Below is the config file filebeat.yml that is used. I have tried to check on kibana if the index is even created and it is not. # Sample Logstash config… --- ## [Ssl error on accessing Kibana interface](https://discuss.elastic.co/t/ssl-error-on-accessing-kibana-interface/331999)
**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\ **Replies:** 17\ **Last updated:** [May 2, 2023, 7:01pm UTC](https://discuss.elastic.co/t/ssl-error-on-accessing-kibana-interface/331999 "2023-05-02T19:01:07Z")
I have set up Elasticsearch and Kibana on my server loganalysisclass1.cacr.camp. I have also setup Certbot for loganalysisclass1.cacr.camp using this. I can access Kibana on http://loganalysisclass1.cacr.camp:5601 but wh… --- ## [Issue parsing azure platform properties](https://discuss.elastic.co/t/issue-parsing-azure-platform-properties/332042)
**Author:** [@intsec](https://discuss.elastic.co/u/intsec)\ **Replies:** 10\ **Last updated:** [May 2, 2023, 4:35pm UTC](https://discuss.elastic.co/t/issue-parsing-azure-platform-properties/332042 "2023-05-02T16:35:51Z")
I am also working with support on this but was hoping to get a faster response here. Anyone using Azure Eventhubs forAppServiceHTTPLogs, I can get the logs to come in but I need to parse the azure.platform.properties fi… --- ## [Filebeat: permission denied](https://discuss.elastic.co/t/filebeat-permission-denied/330592)
**Author:** [@y34rz3r0](https://discuss.elastic.co/u/y34rz3r0)\ **Replies:** 6\ **Last updated:** [May 2, 2023, 4:33pm UTC](https://discuss.elastic.co/t/filebeat-permission-denied/330592 "2023-05-02T16:33:15Z")
Hi all! Need your help in solving the problem: Unexpected file opening error: "Failed opening /mnt/var/log/auth.log: open /mnt/var/log/auth.log: permission denied" My environment: docker-compose filebeat:8.7.0 user … --- ## [Arch Linux: jre19 openjdk EOL dependency](https://discuss.elastic.co/t/arch-linux-jre19-openjdk-eol-dependency/331124)
**Author:** [@D3vil0p3r](https://discuss.elastic.co/u/D3vil0p3r)\ **Replies:** 4\ **Last updated:** [May 2, 2023, 4:13pm UTC](https://discuss.elastic.co/t/arch-linux-jre19-openjdk-eol-dependency/331124 "2023-05-02T16:13:32Z")
Hello, I'm using Elasticsearch on Arch Linux, version 8.7.0, but this latest version use jre19 openjdk that reached its EOL ( Java/OpenJDK | endoflife.date) so, on Arch Linux it cannot be installed anymore because this d… --- ## [RestHighLevelClient and SyncedFlushRequest](https://discuss.elastic.co/t/resthighlevelclient-and-syncedflushrequest/332279)
**Author:** [@William\_Goss](https://discuss.elastic.co/u/William_Goss)\ **Replies:** 1\ **Last updated:** [May 2, 2023, 3:59pm UTC](https://discuss.elastic.co/t/resthighlevelclient-and-syncedflushrequest/332279 "2023-05-02T15:59:34Z")
I just shifted from 7.6.2 to 8.6.2 with Elasticsearch, and I wanted to continue to use the RestHighLevelClient. After doing some research, I found out about compatibility mode, and read that this was a way to make it all… --- ## [Kibana banner new announcement](https://discuss.elastic.co/t/kibana-banner-new-announcement/331017)
**Author:** [@ShubhamKumarJena](https://discuss.elastic.co/u/ShubhamKumarJena)\ **Replies:** 3\ **Last updated:** [May 2, 2023, 3:33pm UTC](https://discuss.elastic.co/t/kibana-banner-new-announcement/331017 "2023-05-02T15:33:43Z")
Hello Guys, I am trying to add a new banner for my Kibana home page, can somebody share some of their experience with it. I checked the official Elastic page but unable to find an example. Also we are using the PLATINUM… --- ## [Upgrade elastic agents using Fleet API](https://discuss.elastic.co/t/upgrade-elastic-agents-using-fleet-api/332194)
**Author:** [@alextg](https://discuss.elastic.co/u/alextg)\ **Replies:** 2\ **Last updated:** [May 2, 2023, 2:06pm UTC](https://discuss.elastic.co/t/upgrade-elastic-agents-using-fleet-api/332194 "2023-05-02T14:06:50Z")
Hi, Is there a way to upgrade elastic agents using Fleet API for both Windows and Linux? --- ## [Service elasticsearch stop is not stopping the process](https://discuss.elastic.co/t/service-elasticsearch-stop-is-not-stopping-the-process/332044)
**Author:** [@Swati\_Bourai](https://discuss.elastic.co/u/Swati_Bourai)\ **Replies:** 2\ **Last updated:** [May 2, 2023, 1:25pm UTC](https://discuss.elastic.co/t/service-elasticsearch-stop-is-not-stopping-the-process/332044 "2023-05-02T13:25:55Z")
We are trying to stop elastic using the service elasticsearch stop command however not sure how it further calls the kill command as there is no execstop command in the elasticsearch.service file Also we see the process… --- ## [Logstash input plugin http\_poller only loading 300 records in a run](https://discuss.elastic.co/t/logstash-input-plugin-http-poller-only-loading-300-records-in-a-run/332281)
**Author:** [@abhisarika\_verma](https://discuss.elastic.co/u/abhisarika_verma)\ **Replies:** 0\ **Last updated:** [May 2, 2023, 1:10pm UTC](https://discuss.elastic.co/t/logstash-input-plugin-http-poller-only-loading-300-records-in-a-run/332281 "2023-05-02T13:10:47Z")
I am trying to use the http\_poller input plugin to load data from sap CDC into Elasticsearch. But Logstash input plugin http\_poller is only loading 300 records in a run. How can I load bulk data using the http\_poller … --- ## [Two way substring search](https://discuss.elastic.co/t/two-way-substring-search/331052)
**Author:** [@Andr](https://discuss.elastic.co/u/Andr)\ **Replies:** 9\ **Last updated:** [May 2, 2023, 12:28pm UTC](https://discuss.elastic.co/t/two-way-substring-search/331052 "2023-05-02T12:28:48Z")
Hello! I would like to implement a search which returns a document if a query string is substring of the document field or the document field is substring of the query string. For example, I have a document with a text… --- ## [Reading append blob from azure storage account using logstash-input-azure\_blob\_storage](https://discuss.elastic.co/t/reading-append-blob-from-azure-storage-account-using-logstash-input-azure-blob-storage/332270)
**Author:** [@salramahi](https://discuss.elastic.co/u/salramahi)\ **Replies:** 0\ **Last updated:** [May 2, 2023, 12:20pm UTC](https://discuss.elastic.co/t/reading-append-blob-from-azure-storage-account-using-logstash-input-azure-blob-storage/332270 "2023-05-02T12:20:10Z")
Hello, I'm using the azure\_blob\_storage logstash input to read log files from storage account. Currently, I have a diagnostic setting on my ADF that pushes any pipeline/activity logs to storage account. for every hour, … --- ## [Copy document if fields are different](https://discuss.elastic.co/t/copy-document-if-fields-are-different/332269)
**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\ **Replies:** 0\ **Last updated:** [May 2, 2023, 12:13pm UTC](https://discuss.elastic.co/t/copy-document-if-fields-are-different/332269 "2023-05-02T12:13:58Z")
Hey Everyone, I have two indices which overlap with data, but there are some differences. What I would like, is to copy documents from index1 to index2, where index1.someField != index2.someField. someField being a cus… --- ## [Problem with elasticsearch 8 and php application while using docker](https://discuss.elastic.co/t/problem-with-elasticsearch-8-and-php-application-while-using-docker/332241)
**Author:** [@Sergii\_Demianchuk](https://discuss.elastic.co/u/Sergii_Demianchuk)\ **Replies:** 0\ **Last updated:** [May 2, 2023, 9:48am UTC](https://discuss.elastic.co/t/problem-with-elasticsearch-8-and-php-application-while-using-docker/332241 "2023-05-02T09:48:31Z")
Hi, everybody. I have a problem with elasticsearch 8 and docker, which I am sitting on last 3-4 hours. I have next docker compose configuration which consist of php symfony application and elasticsearch single node wit… --- ## [Kibana failed to start](https://discuss.elastic.co/t/kibana-failed-to-start/332212)
**Author:** [@target\_test](https://discuss.elastic.co/u/target_test)\ **Replies:** 13\ **Last updated:** [May 2, 2023, 11:17am UTC](https://discuss.elastic.co/t/kibana-failed-to-start/332212 "2023-05-02T11:17:26Z")
hi i'm new using kibana and Elasticsearch at first i don't have any problem following guide on the internet but after i restart my computer kibana won't start --- ## [Exists method doesnot work](https://discuss.elastic.co/t/exists-method-doesnot-work/331863)
**Author:** [@Gurjap\_Singh](https://discuss.elastic.co/u/Gurjap_Singh)\ **Replies:** 8\ **Last updated:** [May 2, 2023, 10:52am UTC](https://discuss.elastic.co/t/exists-method-doesnot-work/331863 "2023-05-02T10:52:59Z")
I have the following code which checks if product exists in the index and if it exists it try to delete it. But exists method always gives me true. I never index the product. so when it try to do some action like get or… --- ## [Put logstash behind httpd reverse proxy](https://discuss.elastic.co/t/put-logstash-behind-httpd-reverse-proxy/330916)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 4\ **Last updated:** [May 2, 2023, 10:48am UTC](https://discuss.elastic.co/t/put-logstash-behind-httpd-reverse-proxy/330916 "2023-05-02T10:48:36Z")
Hi, Can i put logstash behind httpd reverse proxy and use /logstash sub path? I have filebeat installe d on windows in one VPC and logstash in a private vpc. So if i put logstash behind httpd Reverse proxy which has a pu… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=553) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=555)