# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=880

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 881

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/308127)

<div class="topic-metadata">

**Author:** [@fabiano341](https://discuss.elastic.co/u/fabiano341)\
**Replies:** 1\
**Last updated:** [June 30, 2022, 9:51pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/308127 "2022-06-30T21:51:32Z")

</div>

Hello everyone, I am trying to setup my ELK Stack with authentication in docker with the following commands: docker run -d --name elastic -p :9200:9200 -p :9300:9300 --restart=always -e "http.host=0.0.0.0" -e "discover…

---

## [Report format](https://discuss.elastic.co/t/report-format/308464)

<div class="topic-metadata">

**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\
**Replies:** 1\
**Last updated:** [June 30, 2022, 9:12pm UTC](https://discuss.elastic.co/t/report-format/308464 "2022-06-30T21:12:05Z")

</div>

is it possible to design a report in Kibana in the following format (Rather than a regular column table format) where you have the fields listed in separate rows, rather than in separate columns..?

---

## [Dynamic range in Kibana chart axis](https://discuss.elastic.co/t/dynamic-range-in-kibana-chart-axis/308064)

<div class="topic-metadata">

**Author:** [@qd-danh](https://discuss.elastic.co/u/qd-danh)\
**Replies:** 5\
**Last updated:** [June 30, 2022, 8:56pm UTC](https://discuss.elastic.co/t/dynamic-range-in-kibana-chart-axis/308064 "2022-06-30T20:56:24Z")

</div>

I have found some previous questions about this, but nothing from recent versions, and all just enough different that they don't apply. To dumb it way down, I want my Kibana Vega-Lite line chart to have a dynamic y-axis…

---

## [Query performance degradation between 7.9.2 & 7.17.2](https://discuss.elastic.co/t/query-performance-degradation-between-7-9-2-7-17-2/307889)

<div class="topic-metadata">

**Author:** [@BobH](https://discuss.elastic.co/u/BobH)\
**Replies:** 6\
**Last updated:** [June 30, 2022, 8:22pm UTC](https://discuss.elastic.co/t/query-performance-degradation-between-7-9-2-7-17-2/307889 "2022-06-30T20:22:56Z")

</div>

I recently upgraded one of my Elasticsearch clusters from 7.9.2 to 7.17.2. Immediately, I noticed that performance of my application (a Java app using the REST API) was degraded. So, I've been doing some side-by-side tes…

---

## [Enable filebeat and logstash caching during unavailablity](https://discuss.elastic.co/t/enable-filebeat-and-logstash-caching-during-unavailablity/308443)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 4\
**Last updated:** [June 30, 2022, 6:25pm UTC](https://discuss.elastic.co/t/enable-filebeat-and-logstash-caching-during-unavailablity/308443 "2022-06-30T18:25:36Z")

</div>

Hello, I hope you and your loved ones are safe and healthy. I am running a cluster that collects logs from sources on the internet. I need to enable caching of logs in case the next hop is not reachable as dropping log…

---

## [Is there a API which can get all beat.hostname in an index?](https://discuss.elastic.co/t/is-there-a-api-which-can-get-all-beat-hostname-in-an-index/308528)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 9\
**Last updated:** [June 30, 2022, 5:13pm UTC](https://discuss.elastic.co/t/is-there-a-api-which-can-get-all-beat-hostname-in-an-index/308528 "2022-06-30T17:13:56Z")

</div>

Or some other way...

---

## [Azure Saml SSO](https://discuss.elastic.co/t/azure-saml-sso/308594)

<div class="topic-metadata">

**Author:** [@Keemtaker](https://discuss.elastic.co/u/Keemtaker)\
**Replies:** 2\
**Last updated:** [June 30, 2022, 5:10pm UTC](https://discuss.elastic.co/t/azure-saml-sso/308594 "2022-06-30T17:10:24Z")

</div>

I am trying to setup Single Sign-On for an instance by following this guide . I am encountering the error 'You do not have permission to access the requested page'. I have a feeling it has to do with the role mappings.…

---

## [Kibana discover tab/ dev tools tab are failing to load with 503](https://discuss.elastic.co/t/kibana-discover-tab-dev-tools-tab-are-failing-to-load-with-503/308458)

<div class="topic-metadata">

**Author:** [@sekharkaza](https://discuss.elastic.co/u/sekharkaza)\
**Replies:** 3\
**Last updated:** [June 30, 2022, 5:03pm UTC](https://discuss.elastic.co/t/kibana-discover-tab-dev-tools-tab-are-failing-to-load-with-503/308458 "2022-06-30T17:03:30Z")

</div>

baseurl:5601/api/saved\_objects fails with { "message": "all shards failed: \[search\_phase\_execution\_exception\] all shards failed", "statusCode": 503, "error": "Service Unavailable" }

---

## [Like asciifolding for Mathematical Alphanumeric Symbols](https://discuss.elastic.co/t/like-asciifolding-for-mathematical-alphanumeric-symbols/308522)

<div class="topic-metadata">

**Author:** [@Miguel\_Cabero](https://discuss.elastic.co/u/Miguel_Cabero)\
**Replies:** 1\
**Last updated:** [June 30, 2022, 4:52pm UTC](https://discuss.elastic.co/t/like-asciifolding-for-mathematical-alphanumeric-symbols/308522 "2022-06-30T16:52:25Z")

</div>

Hi, How to configure an analyzer so that: 𝐕𝐢𝐧𝐧𝐢 is indexed as Vinni Something like asciifolding for Mathematical Alphanumeric Symbols. Any idea?

---

## [Input file and input jdbc](https://discuss.elastic.co/t/input-file-and-input-jdbc/308587)

<div class="topic-metadata">

**Author:** [@Calvete](https://discuss.elastic.co/u/Calvete)\
**Replies:** 1\
**Last updated:** [June 30, 2022, 4:34pm UTC](https://discuss.elastic.co/t/input-file-and-input-jdbc/308587 "2022-06-30T16:34:52Z")

</div>

Hi I want to get the name of the csv file and then that value use it in a select of another input in database input { file { path =\> "C:/Users/a/Downloads/bucket/\*.csv" start\_position =\> "beginning" sincedb\_path =\> …

---

## [Avoid duplicate document in different Indices,Logsatsh](https://discuss.elastic.co/t/avoid-duplicate-document-in-different-indices-logsatsh/308578)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 1\
**Last updated:** [June 30, 2022, 4:29pm UTC](https://discuss.elastic.co/t/avoid-duplicate-document-in-different-indices-logsatsh/308578 "2022-06-30T16:29:53Z")

</div>

Hello All, I have a logstash configuration that uses the following in the output block in an attempt to mitigate duplicates in elastic Index. The data that logstash is fetching from is through perl script running every…

---

## [Ingest Pipeline update existing array](https://discuss.elastic.co/t/ingest-pipeline-update-existing-array/307085)

<div class="topic-metadata">

**Author:** [@jhershcopf](https://discuss.elastic.co/u/jhershcopf)\
**Replies:** 0\
**Last updated:** [June 14, 2022, 12:07am UTC](https://discuss.elastic.co/t/ingest-pipeline-update-existing-array/307085 "2022-06-14T00:07:54Z")

</div>

I have two indices, one contains event records that contain a timestamp, location, user id and country, the other contains a summary of all the event records. The summary includes last timestamp, last location and last c…

---

## [Change column names in search visualize on kibana dashboard](https://discuss.elastic.co/t/change-column-names-in-search-visualize-on-kibana-dashboard/307741)

<div class="topic-metadata">

**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\
**Replies:** 1\
**Last updated:** [June 30, 2022, 3:49pm UTC](https://discuss.elastic.co/t/change-column-names-in-search-visualize-on-kibana-dashboard/307741 "2022-06-30T15:49:41Z")

</div>

I have create search from discover tab and added to dashboard. I have selected fields I want to show data. Fields names are as per logstash but I want to change those on dashboard. I have tried from saved objects but the…

---

## [Logstash grok multiline file](https://discuss.elastic.co/t/logstash-grok-multiline-file/308509)

<div class="topic-metadata">

**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\
**Replies:** 3\
**Last updated:** [June 29, 2022, 9:51pm UTC](https://discuss.elastic.co/t/logstash-grok-multiline-file/308509 "2022-06-29T21:51:53Z")

</div>

Hello, I read a lot of articles here, but I still don’t understand how to properly configure grok in logstash, here is an example file: # Time: 2021-02-17T15:19:22.121290Z # User@Host: app\[app\] @ \[192.168.100.1\] Id: 4…

---

## [How to redirect my application to a session of a certain index on Kibana](https://discuss.elastic.co/t/how-to-redirect-my-application-to-a-session-of-a-certain-index-on-kibana/308595)

<div class="topic-metadata">

**Author:** [@Vincent92](https://discuss.elastic.co/u/Vincent92)\
**Replies:** 0\
**Last updated:** [June 30, 2022, 2:41pm UTC](https://discuss.elastic.co/t/how-to-redirect-my-application-to-a-session-of-a-certain-index-on-kibana/308595 "2022-06-30T14:41:05Z")

</div>

Hello, I am developing a javascript application that will complete my use of Kibana, the frontend is in React and I use NodeJS with the Express framework for the backend. In my application I display a table that shows …

---

## [Generating custom \_id when exporting from hadoop/spark to ES](https://discuss.elastic.co/t/generating-custom-id-when-exporting-from-hadoop-spark-to-es/308486)

<div class="topic-metadata">

**Author:** [@Oriol\_Lopez\_Massague](https://discuss.elastic.co/u/Oriol_Lopez_Massague)\
**Replies:** 1\
**Last updated:** [June 30, 2022, 2:17pm UTC](https://discuss.elastic.co/t/generating-custom-id-when-exporting-from-hadoop-spark-to-es/308486 "2022-06-30T14:17:25Z")

</div>

I want to insert data in ES using hadoop/spark but with a custom made \_id field (not the autogerated one). I have seen that there is method using RDDs "saveToEsWithMeta": Is there a way to do the same thing using the…

---

## [When I am registering a repository for snapshot, I have kept the path. repo at all my master and data nodes again am unable to get the repository at verifying repository it is showing not connected and this below error. I have no idea what to do further](https://discuss.elastic.co/t/when-i-am-registering-a-repository-for-snapshot-i-have-kept-the-path-repo-at-all-my-master-and-data-nodes-again-am-unable-to-get-the-repository-at-verifying-repository-it-is-showing-not-connected-and-this-below-error-i-have-no-idea-what-to-do-further/308561)

<div class="topic-metadata">

**Author:** [@balasani\_sri](https://discuss.elastic.co/u/balasani_sri)\
**Replies:** 3\
**Last updated:** [June 30, 2022, 2:13pm UTC](https://discuss.elastic.co/t/when-i-am-registering-a-repository-for-snapshot-i-have-kept-the-path-repo-at-all-my-master-and-data-nodes-again-am-unable-to-get-the-repository-at-verifying-repository-it-is-showing-not-connected-and-this-below-error-i-have-no-idea-what-to-do-further/308561 "2022-06-30T14:13:46Z")

</div>

"type": "repository\_verification\_exception", "reason": "\[newlocal\_repo\] a file written by master to the store \[/opt/elk/elasticsearch/backup\_repo\] cannot be accessed on the node \[{alab106}{mSm33eUCT2-gvtL…

---

## [Unique count by top status](https://discuss.elastic.co/t/unique-count-by-top-status/307262)

<div class="topic-metadata">

**Author:** [@talial](https://discuss.elastic.co/u/talial)\
**Replies:** 4\
**Last updated:** [June 30, 2022, 1:52pm UTC](https://discuss.elastic.co/t/unique-count-by-top-status/307262 "2022-06-30T13:52:07Z")

</div>

Hello I have to build a visualize that count all event (id) with status "open" in a range of time. The problem is that I dont want to use the update option in the logstash so some events (id) can change their status to…

---

## [Logstash not using ingest pipeline with datastreams](https://discuss.elastic.co/t/logstash-not-using-ingest-pipeline-with-datastreams/308384)

<div class="topic-metadata">

**Author:** [@rzisk](https://discuss.elastic.co/u/rzisk)\
**Replies:** 2\
**Last updated:** [June 30, 2022, 1:24pm UTC](https://discuss.elastic.co/t/logstash-not-using-ingest-pipeline-with-datastreams/308384 "2022-06-30T13:24:59Z")

</div>

Hello, I recently got our Elasticsearch instances upgraded to the 8 branch am working on getting all of our Beats upgraded to 8 as well. So far there have been various gotchas with getting Logstash to play well with dat…

---

## [Combine Terms aggregation with Composite aggregation](https://discuss.elastic.co/t/combine-terms-aggregation-with-composite-aggregation/308573)

<div class="topic-metadata">

**Author:** [@mirokrastev](https://discuss.elastic.co/u/mirokrastev)\
**Replies:** 0\
**Last updated:** [June 30, 2022, 12:29pm UTC](https://discuss.elastic.co/t/combine-terms-aggregation-with-composite-aggregation/308573 "2022-06-30T12:29:56Z")

</div>

I have the following ES Query GET logstash-\*/\_search { "size": 0, "aggs": { "table": { "composite": { "size": 10000, "sources": \[ { "stk1": { "terms": { …

---

## [Applying best compression on already force-merged indices](https://discuss.elastic.co/t/applying-best-compression-on-already-force-merged-indices/308552)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 4\
**Last updated:** [June 30, 2022, 12:08pm UTC](https://discuss.elastic.co/t/applying-best-compression-on-already-force-merged-indices/308552 "2022-06-30T12:08:42Z")

</div>

Hi All, Have a question related to applying best\_compression on indices that are already force-merged to 1 segment. My question is: Can i still apply best\_compression on them to save some disk space? I suppose I can c…

---

## [How does ES protect users' private information](https://discuss.elastic.co/t/how-does-es-protect-users-private-information/308544)

<div class="topic-metadata">

**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Replies:** 4\
**Last updated:** [June 30, 2022, 11:34am UTC](https://discuss.elastic.co/t/how-does-es-protect-users-private-information/308544 "2022-06-30T11:34:24Z")

</div>

We have a user management system that stores some user information, such as email, telephone and so on. Now I want to protect this information from possible hacking attacks. Does ES have any good protection for fields? …

---

## [Use french steemer on java api](https://discuss.elastic.co/t/use-french-steemer-on-java-api/308563)

<div class="topic-metadata">

**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\
**Replies:** 0\
**Last updated:** [June 30, 2022, 11:20am UTC](https://discuss.elastic.co/t/use-french-steemer-on-java-api/308563 "2022-06-30T11:20:24Z")

</div>

Hi, from 1 week i try to index document using the french steemer. I'm totally stuck can someone give me an example ?

---

## [Azure connection with elastic search](https://discuss.elastic.co/t/azure-connection-with-elastic-search/308475)

<div class="topic-metadata">

**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\
**Replies:** 2\
**Last updated:** [June 30, 2022, 10:07am UTC](https://discuss.elastic.co/t/azure-connection-with-elastic-search/308475 "2022-06-30T10:07:25Z")

</div>

Hi all , Is there a way to check if any azure account is added to my elasticsearch cluster already or not ? It's urgent , hope to get a response soon ! Thanks !

---

## [How to access Kibana with x-pack security disabled?](https://discuss.elastic.co/t/how-to-access-kibana-with-x-pack-security-disabled/308347)

<div class="topic-metadata">

**Author:** [@dendog](https://discuss.elastic.co/u/dendog)\
**Replies:** 6\
**Last updated:** [June 30, 2022, 10:32am UTC](https://discuss.elastic.co/t/how-to-access-kibana-with-x-pack-security-disabled/308347 "2022-06-30T10:32:02Z")

</div>

Hi! I starting es and kibana in a docker compose file, I have set xpack.security.enabled=false, but when accessing the kibana UI I am still asked for an enrollment token, which from my understanding would not be generat…

---

## [Create dashboard with multiple visualizations based on field value](https://discuss.elastic.co/t/create-dashboard-with-multiple-visualizations-based-on-field-value/308372)

<div class="topic-metadata">

**Author:** [@elni](https://discuss.elastic.co/u/elni)\
**Replies:** 5\
**Last updated:** [June 30, 2022, 10:27am UTC](https://discuss.elastic.co/t/create-dashboard-with-multiple-visualizations-based-on-field-value/308372 "2022-06-30T10:27:16Z")

</div>

I have a line chart which is split based on a specific id as below. What I would really like however is that each line will appear alone in a separate chart/visualization within a dashboard based on a term filter. Is t…

---

## [Codec Multiline is not working for Kafka input plugin as expected](https://discuss.elastic.co/t/codec-multiline-is-not-working-for-kafka-input-plugin-as-expected/308553)

<div class="topic-metadata">

**Author:** [@ashish.kumar2](https://discuss.elastic.co/u/ashish.kumar2)\
**Replies:** 0\
**Last updated:** [June 30, 2022, 9:56am UTC](https://discuss.elastic.co/t/codec-multiline-is-not-working-for-kafka-input-plugin-as-expected/308553 "2022-06-30T09:56:43Z")

</div>

codec =\> multiline { pattern =\> "(^UL ingress)|(^DL ingress)|(^numOfActiveUe)|(^pdcpCurrentTime\_g)" what =\> "previous" max\_lines =\> 6 } Still we are getting indiv…

---

## [Pod is not running](https://discuss.elastic.co/t/pod-is-not-running/307245)

<div class="topic-metadata">

**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\
**Replies:** 6\
**Last updated:** [June 30, 2022, 9:50am UTC](https://discuss.elastic.co/t/pod-is-not-running/307245 "2022-06-30T09:50:18Z")

</div>

Good morning, We try to update kubernetes version from 1.19 to 1.20, and when try to renew an Elasticsearch data pod, this data pod is not runnning, showing this error in logs: {"type": "server", "timestamp": "2022-06-…

---

## [Optimizing a single node ES instance for throughput](https://discuss.elastic.co/t/optimizing-a-single-node-es-instance-for-throughput/307808)

<div class="topic-metadata">

**Author:** [@dmh43](https://discuss.elastic.co/u/dmh43)\
**Replies:** 6\
**Last updated:** [June 30, 2022, 9:41am UTC](https://discuss.elastic.co/t/optimizing-a-single-node-es-instance-for-throughput/307808 "2022-06-30T09:41:50Z")

</div>

I have a single large (500GB ram and 128 cores) machine that I have indexed a corpus of around 1TB in size. The documents vary in length, from very short (~100 characters) to very long (a single documents that is \> 100 M…

---

## [Increase 255 character limit in analyzer](https://discuss.elastic.co/t/increase-255-character-limit-in-analyzer/308543)

<div class="topic-metadata">

**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\
**Replies:** 0\
**Last updated:** [June 30, 2022, 8:51am UTC](https://discuss.elastic.co/t/increase-255-character-limit-in-analyzer/308543 "2022-06-30T08:51:59Z")

</div>

I want to use a whitespace tokenizer, but I have very long "tokens", and if it is longer than 255 characters, it will split it into 2 or more tokens. GET \_analyze { "tokenizer": "whitespace", "filter": \[ { …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=879)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=881)
