# Latest **URL:** https://discuss.elastic.co/latest.md?page=1113 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1114 --- ## [Seems Role Kibana privileges are not the same as the DOCS](https://discuss.elastic.co/t/seems-role-kibana-privileges-are-not-the-same-as-the-docs/305846)
**Author:** [@Miguel\_Frazao](https://discuss.elastic.co/u/Miguel_Frazao)\ **Replies:** 2\ **Last updated:** [May 28, 2022, 3:26pm UTC](https://discuss.elastic.co/t/seems-role-kibana-privileges-are-not-the-same-as-the-docs/305846 "2022-05-28T15:26:31Z")
Hello I'm trying to create an User/Role to view only dashboard, I'm following this Kibana role management | Kibana Guide \[8.0\] | Elastic . However on this section Kibana role management | Kibana Guide \[8.0\] | Elastic as… --- ## [Error while connecting logstash to elasticsearch](https://discuss.elastic.co/t/error-while-connecting-logstash-to-elasticsearch/304693)
**Author:** [@skander\_khalfet](https://discuss.elastic.co/u/skander_khalfet)\ **Replies:** 13\ **Last updated:** [May 28, 2022, 3:05pm UTC](https://discuss.elastic.co/t/error-while-connecting-logstash-to-elasticsearch/304693 "2022-05-28T15:05:26Z")
hi guys i have installed elk stack on kubernetes using helm charts. all pods are running fine except logstash with this error message. \[2022-05-13T12:01:46,928\]\[WARN \]\[logstash.licensechecker.licensereader\] Attempted t… --- ## [Filter in multiple docs](https://discuss.elastic.co/t/filter-in-multiple-docs/305741)
**Author:** [@Thiago\_Paiva](https://discuss.elastic.co/u/Thiago_Paiva)\ **Replies:** 1\ **Last updated:** [May 28, 2022, 2:24pm UTC](https://discuss.elastic.co/t/filter-in-multiple-docs/305741 "2022-05-28T14:24:58Z")
Hi, I have an index that has a tracking by ID. For each step that id pass writes a DOC to elastic. But I'm trying to make a filter that does the following validation. It passed Step2 but did not pass at Step4. Exempl… --- ## [Increase Top values aggregation limit above 1000](https://discuss.elastic.co/t/increase-top-values-aggregation-limit-above-1000/305652)
**Author:** [@lerignoux](https://discuss.elastic.co/u/lerignoux)\ **Replies:** 5\ **Last updated:** [May 28, 2022, 2:22pm UTC](https://discuss.elastic.co/t/increase-top-values-aggregation-limit-above-1000/305652 "2022-05-28T14:22:20Z")
Hello I am trying to generate a graph with a lot of records (~10k) and get the top values in an horizontal bar chart. It works well but the Top Values: Number of values is limited to 1000 entries meaning I cant see all… --- ## [Parsing timestamp](https://discuss.elastic.co/t/parsing-timestamp/305708)
**Author:** [@alon\_carmelly](https://discuss.elastic.co/u/alon_carmelly)\ **Replies:** 5\ **Last updated:** [May 28, 2022, 1:10pm UTC](https://discuss.elastic.co/t/parsing-timestamp/305708 "2022-05-28T13:10:38Z")
trying to parse with this :slight\_smile: if "one-sync" in \[tags\] and "heart-sync" in \[tags\] and "edemand" in \[tags\] and "events" in \[tags\] { date { match =\> \["timestamp", "yyyy-MM-dd'T'HH:mm:ss'.'SSS'Z'"\] … --- ## [Synonyms for medical text search](https://discuss.elastic.co/t/synonyms-for-medical-text-search/305853)
**Author:** [@Tim\_Shurlock](https://discuss.elastic.co/u/Tim_Shurlock)\ **Replies:** 0\ **Last updated:** [May 28, 2022, 12:25pm UTC](https://discuss.elastic.co/t/synonyms-for-medical-text-search/305853 "2022-05-28T12:25:39Z")
Hi, I am trying to build a synonym list of medical terms for use in Elasticsearch. The purpose being to catch exceptions that wont conflate properly with the already implemented porter stemmer, for example none of the v… --- ## [Jdbc\_fetch\_size, what would be the ideal value?](https://discuss.elastic.co/t/jdbc-fetch-size-what-would-be-the-ideal-value/305830)
**Author:** [@Rauly\_Koto](https://discuss.elastic.co/u/Rauly_Koto)\ **Replies:** 1\ **Last updated:** [May 28, 2022, 11:36am UTC](https://discuss.elastic.co/t/jdbc-fetch-size-what-would-be-the-ideal-value/305830 "2022-05-28T11:36:31Z")
200k lines: jdbc\_fetch\_size =\> 50000 (1/4) or jdbc\_fetch\_size =\> 100000 (1/2)? --- ## [Elastic Search Query to match Only if Specific value is present](https://discuss.elastic.co/t/elastic-search-query-to-match-only-if-specific-value-is-present/305796)
**Author:** [@Harinder\_Singh](https://discuss.elastic.co/u/Harinder_Singh)\ **Replies:** 2\ **Last updated:** [May 28, 2022, 11:30am UTC](https://discuss.elastic.co/t/elastic-search-query-to-match-only-if-specific-value-is-present/305796 "2022-05-28T11:30:41Z")
Hi, I have data like below { "instance": { "items": \[ { "name": "name\_1" }, { "name": "name\_2" } \] } } items is an array and it can contains many values. I am looki… --- ## [Elasticsearch search query quide](https://discuss.elastic.co/t/elasticsearch-search-query-quide/305847)
**Author:** [@Satya10](https://discuss.elastic.co/u/Satya10)\ **Replies:** 0\ **Last updated:** [May 28, 2022, 9:53am UTC](https://discuss.elastic.co/t/elasticsearch-search-query-quide/305847 "2022-05-28T09:53:59Z")
Currently, I'm working on ELK 8 (Filebeat, Logstash, Elasticsearch & Kibana) stuck in the middle The sample log is here, 2021-07-30 16:34:22 INFO com.example.OrderRest \[fhxh750df392\] Session opened OId 31324 2021-07-3… --- ## [Create a watcher to check that the IP address of device is same or changing](https://discuss.elastic.co/t/create-a-watcher-to-check-that-the-ip-address-of-device-is-same-or-changing/305294)
**Author:** [@no0ne](https://discuss.elastic.co/u/no0ne)\ **Replies:** 4\ **Last updated:** [May 27, 2022, 6:11pm UTC](https://discuss.elastic.co/t/create-a-watcher-to-check-that-the-ip-address-of-device-is-same-or-changing/305294 "2022-05-27T18:11:23Z")
I have a data set in which I want to check if each device's IP is the same or changed if it is the same then good if it is changing then notify alert or Jira ticket. How do I make the watcher for that I am a novice in e… --- ## [Elastic Cloud | How and why to handle Kibana resources when creating deploy](https://discuss.elastic.co/t/elastic-cloud-how-and-why-to-handle-kibana-resources-when-creating-deploy/305838)
**Author:** [@caraboy](https://discuss.elastic.co/u/caraboy)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 11:44pm UTC](https://discuss.elastic.co/t/elastic-cloud-how-and-why-to-handle-kibana-resources-when-creating-deploy/305838 "2022-05-27T23:44:28Z")
I am wondering which would be the reasons/use-cases that would require to assign Kibana high RAM, CPU and zone resources. I mean, it's clear what does this means for Elasticsearch component (I/O efficiency). But how the… --- ## [Custom Authz Engine Configuration](https://discuss.elastic.co/t/custom-authz-engine-configuration/305837)
**Author:** [@ash\_n](https://discuss.elastic.co/u/ash_n)\ **Replies:** 0\ **Last updated:** [May 27, 2022, 11:10pm UTC](https://discuss.elastic.co/t/custom-authz-engine-configuration/305837 "2022-05-27T23:10:06Z")
I'm working on an implementation of a custom authorization engine by following the instructions on this page. I'm using Elasticsearch v8.2.0. Step 2) on this page seems to indicate that I can pass settings for my custom… --- ## [Define Primaries and Replicas for Elastic Agent Integrations](https://discuss.elastic.co/t/define-primaries-and-replicas-for-elastic-agent-integrations/305560)
**Author:** [@Fikrat\_Karimli](https://discuss.elastic.co/u/Fikrat_Karimli)\ **Replies:** 8\ **Last updated:** [May 27, 2022, 8:46pm UTC](https://discuss.elastic.co/t/define-primaries-and-replicas-for-elastic-agent-integrations/305560 "2022-05-27T20:46:37Z")
Hi, I have elastic agent managed by fleet and I want to define primaries and replicas. By default it has 1 primary and 1 replica but want to do 3 primary and 0 replica. I tried to play with data stream but nothing seem … --- ## [Set flattened field type to avoid the limit of total fields \[1000\] issue](https://discuss.elastic.co/t/set-flattened-field-type-to-avoid-the-limit-of-total-fields-1000-issue/305834)
**Author:** [@austin0918](https://discuss.elastic.co/u/austin0918)\ **Replies:** 0\ **Last updated:** [May 27, 2022, 8:43pm UTC](https://discuss.elastic.co/t/set-flattened-field-type-to-avoid-the-limit-of-total-fields-1000-issue/305834 "2022-05-27T20:43:58Z")
I need to set flattened type for some fields, e.g., msgParts.urls, msgParts.metadata, filter.modules to avoid the limit of total fields \[1000\] issue. Below are the current settings that don't work, please advise. { "i… --- ## [Getting handshake error while enabling SSL in elasticsearch cluster](https://discuss.elastic.co/t/getting-handshake-error-while-enabling-ssl-in-elasticsearch-cluster/305783)
**Author:** [@AnandThakur](https://discuss.elastic.co/u/AnandThakur)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 7:56pm UTC](https://discuss.elastic.co/t/getting-handshake-error-while-enabling-ssl-in-elasticsearch-cluster/305783 "2022-05-27T19:56:55Z")
Hi All, We are new to using Elasticsearch and we use elasticsearch as audittrail for Informatica PIM. We were able to successfully create Elasticsearch nodes and enable SSL in DEV and SIT which have standalone nodes but… --- ## [Is it possible to know when no more changes will be included in a snapshot?](https://discuss.elastic.co/t/is-it-possible-to-know-when-no-more-changes-will-be-included-in-a-snapshot/305816)
**Author:** [@gearoidibm](https://discuss.elastic.co/u/gearoidibm)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 6:38pm UTC](https://discuss.elastic.co/t/is-it-possible-to-know-when-no-more-changes-will-be-included-in-a-snapshot/305816 "2022-05-27T18:38:38Z")
To create a backup that's consistent across my index and other application data I create a snapshot when there's no changes being made to the index. I want to start making changes to the index as soon as possible after … --- ## [Looking for a chart/line graph that could display the changes of status](https://discuss.elastic.co/t/looking-for-a-chart-line-graph-that-could-display-the-changes-of-status/305738)
**Author:** [@JaNa\_Cy](https://discuss.elastic.co/u/JaNa_Cy)\ **Replies:** 0\ **Last updated:** [May 26, 2022, 5:20pm UTC](https://discuss.elastic.co/t/looking-for-a-chart-line-graph-that-could-display-the-changes-of-status/305738 "2022-05-26T17:20:27Z")
Hi, I got data like name = "Interface1", status = "down", time="5:10 " name = "Interface1", status = "up", time="5:20 " name = "Interface1", status = "down", time="5:30 " name = "Interface1", status = "up", time="5:… --- ## [Export visualisation data as csv (7.17)](https://discuss.elastic.co/t/export-visualisation-data-as-csv-7-17/305748)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 2\ **Last updated:** [May 27, 2022, 2:16pm UTC](https://discuss.elastic.co/t/export-visualisation-data-as-csv-7-17/305748 "2022-05-27T14:16:45Z")
I used to be able to use the "share' button at the top to export the aggregated data but that option is no longer there. how can I get the data\> --- ## [Regarding Kibana : Calendar Visualization and Filtering](https://discuss.elastic.co/t/regarding-kibana-calendar-visualization-and-filtering/119920)
**Author:** [@vedularaghu](https://discuss.elastic.co/u/vedularaghu)\ **Replies:** 30\ **Last updated:** [May 27, 2022, 1:28pm UTC](https://discuss.elastic.co/t/regarding-kibana-calendar-visualization-and-filtering/119920 "2022-05-27T13:28:43Z")
Hello, I am a CS undergraduate student of CET, Bhubaneswar. I want to work on 'Kibana: Calendar Visualisation and Filtering' project. I have experience in full-stack development in Node JS , React JS. I have hands-on … --- ## [Convert Date time Using StandardTimeZonename instead of Zoneid](https://discuss.elastic.co/t/convert-date-time-using-standardtimezonename-instead-of-zoneid/305800)
**Author:** [@M.Naim](https://discuss.elastic.co/u/M.Naim)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 1:22pm UTC](https://discuss.elastic.co/t/convert-date-time-using-standardtimezonename-instead-of-zoneid/305800 "2022-05-27T13:22:12Z")
Hi Team, I am facing issue to convert Datetime value into their Specific time zone by refering Timezone name from doc. Scenario: In my scenario, we have data for different timezones on elastic with thereTimezone belon… --- ## [Last\_failure\_timestamp](https://discuss.elastic.co/t/last-failure-timestamp/305591)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 11\ **Last updated:** [May 27, 2022, 1:13pm UTC](https://discuss.elastic.co/t/last-failure-timestamp/305591 "2022-05-27T13:13:01Z")
Hi How I can manage reload parameter, and why this output is "null" failure\_timestamp" : null In my config I'm using log.level: info "outputs" : \[ { "id" : "1937dea243c36a25e890be2892a0097740ae92… --- ## [Starting with snapshots when we already have a large amount of data?](https://discuss.elastic.co/t/starting-with-snapshots-when-we-already-have-a-large-amount-of-data/305781)
**Author:** [@Andreas\_Falk](https://discuss.elastic.co/u/Andreas_Falk)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 1:11pm UTC](https://discuss.elastic.co/t/starting-with-snapshots-when-we-already-have-a-large-amount-of-data/305781 "2022-05-27T13:11:09Z")
Hi, We shall do an upgrade from 7.10.2 to 7.17+ and have tried this is lab env. But one question that comes to mind is, how is the cluster going to react when starting a snapshot on over 10TB data with cold storage? W… --- ## [How do I make my LOGSTASH pipeline of input type ELASTICSEARCH to be running in certain periods automatically?](https://discuss.elastic.co/t/how-do-i-make-my-logstash-pipeline-of-input-type-elasticsearch-to-be-running-in-certain-periods-automatically/305799)
**Author:** [@Daniel\_Oliveira](https://discuss.elastic.co/u/Daniel_Oliveira)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 12:56pm UTC](https://discuss.elastic.co/t/how-do-i-make-my-logstash-pipeline-of-input-type-elasticsearch-to-be-running-in-certain-periods-automatically/305799 "2022-05-27T12:56:45Z")
Hello gentlemen. I have 2 pipelines running by my LOGSTASH. the first input FILE pipeline is running normally and processing .csv data the second pipeline of input type Elasticsearch it runs only the first time, then … --- ## [Find phrase ending with or containing](https://discuss.elastic.co/t/find-phrase-ending-with-or-containing/305801)
**Author:** [@dlazure](https://discuss.elastic.co/u/dlazure)\ **Replies:** 0\ **Last updated:** [May 27, 2022, 12:52pm UTC](https://discuss.elastic.co/t/find-phrase-ending-with-or-containing/305801 "2022-05-27T12:52:47Z")
this is what i am getting from a router log message : script,info CLIENT-ABC: 6.42.11 (long-term) the portion CLIENT-ABC: 6.42.11 will be dynamic and will change from devices to devices. I wou… --- ## [Create Index with settings](https://discuss.elastic.co/t/create-index-with-settings/305771)
**Author:** [@liushida](https://discuss.elastic.co/u/liushida)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 12:31pm UTC](https://discuss.elastic.co/t/create-index-with-settings/305771 "2022-05-27T12:31:13Z")
When I create the index with settings, the response is \[es/indices.create\] failed: \[illegal\_argument\_exception\] unknown setting \[index.settings.analysis.analyzer.custom.type\] so how I should resolve this problem? the E… --- ## [Logstash cpu usage is very high, and there are a large number of thread GC](https://discuss.elastic.co/t/logstash-cpu-usage-is-very-high-and-there-are-a-large-number-of-thread-gc/305666)
**Author:** [@1065916870](https://discuss.elastic.co/u/1065916870)\ **Replies:** 6\ **Last updated:** [May 27, 2022, 12:16pm UTC](https://discuss.elastic.co/t/logstash-cpu-usage-is-very-high-and-there-are-a-large-number-of-thread-gc/305666 "2022-05-27T12:16:39Z")
Using 3-node logstash to consume kafka data, logstash cpu usage is very high, and there are a large number of thread GC logstash configuration: 3 node , 16C 32G jvm -Xms16g -Xmx16g two pipeline: pipeline.workers: 16 … --- ## [Dense vector upload slow down](https://discuss.elastic.co/t/dense-vector-upload-slow-down/305609)
**Author:** [@KacperLukawski](https://discuss.elastic.co/u/KacperLukawski)\ **Replies:** 2\ **Last updated:** [May 27, 2022, 11:55am UTC](https://discuss.elastic.co/t/dense-vector-upload-slow-down/305609 "2022-05-27T11:55:16Z")
Hi there! I've been playing a bit with the dense\_vector field recently. I have a collection of thousands of vectors, 100 dimensions each. I created the index with the following config: { "properties": { "vector":… --- ## [Fetch system date and time for remote serverd](https://discuss.elastic.co/t/fetch-system-date-and-time-for-remote-serverd/305739)
**Author:** [@Anagha\_nambiar](https://discuss.elastic.co/u/Anagha_nambiar)\ **Replies:** 6\ **Last updated:** [May 27, 2022, 11:54am UTC](https://discuss.elastic.co/t/fetch-system-date-and-time-for-remote-serverd/305739 "2022-05-27T11:54:47Z")
In Kibana dashboard, we would like to specifically get the system date and time of a remote server. We have installed metricbeat agent in that server. Could you please help to know how to use query in Kibana dashboard … --- ## [Elastic Search and Kibana is not working](https://discuss.elastic.co/t/elastic-search-and-kibana-is-not-working/305606)
**Author:** [@John\_Mari](https://discuss.elastic.co/u/John_Mari)\ **Replies:** 13\ **Last updated:** [May 27, 2022, 11:53am UTC](https://discuss.elastic.co/t/elastic-search-and-kibana-is-not-working/305606 "2022-05-27T11:53:08Z")
Hi Everyone, We installed Elasticsearch and Kibana in our Machine. Previously it was working fine. But, when we tried to access Elasticsearch and Kibana. Its showing following error. Can anyone guide us to solve the… --- ## [Delete documents in Enterprise Search](https://discuss.elastic.co/t/delete-documents-in-enterprise-search/305750)
**Author:** [@haris.sheikh](https://discuss.elastic.co/u/haris.sheikh)\ **Replies:** 2\ **Last updated:** [May 27, 2022, 11:26am UTC](https://discuss.elastic.co/t/delete-documents-in-enterprise-search/305750 "2022-05-27T11:26:45Z")
I wanted to delete documents in bulk in enterprise search and in documentation, I only found deleted documents by a list of ids. https://www.elastic.co/guide/en/app-search/8.2/documents.html#documents-delete but when … [Previous page](https://discuss.elastic.co/latest.md?page=1112) [Next page](https://discuss.elastic.co/latest.md?page=1114)