# Latest **URL:** https://discuss.elastic.co/latest.md?page=1486 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1487 --- ## [Read-only Query](https://discuss.elastic.co/t/read-only-query/283040)
**Author:** [@k.schmidtke](https://discuss.elastic.co/u/k.schmidtke)\ **Replies:** 2\ **Last updated:** [September 9, 2021, 9:54am UTC](https://discuss.elastic.co/t/read-only-query/283040 "2021-09-09T09:54:23Z")
I want to have preset Dashboards for Users with fixed querys that cannot be changed. Example: I want my Dashboard to query with "header\_from : company.com", but it schouldn't be changeable by read-only users Is this p… --- ## [Need help to have space on elasticsearch](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220)
**Author:** [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Replies:** 13\ **Last updated:** [September 9, 2021, 9:42am UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220 "2021-09-09T09:42:03Z")
When I replay the logs from logstash to elasticsearch, I no longer see them on kibana. I think there is no more storage space. So I go to Stack Management -\> Index Management to delete Indices. But, that does not solve… --- ## [Filebeat - Elasticsearch output is not configured](https://discuss.elastic.co/t/filebeat-elasticsearch-output-is-not-configured/283637)
**Author:** [@X\_T](https://discuss.elastic.co/u/X_T)\ **Replies:** 14\ **Last updated:** [September 9, 2021, 9:31am UTC](https://discuss.elastic.co/t/filebeat-elasticsearch-output-is-not-configured/283637 "2021-09-09T09:31:10Z")
Hi team, i'm facing an issue when setting up Filebeat 6.5.0 (testing on this version for an upcoming upgrade) in a Windows machine. I know that Filebeat is not the best to use it on Windows but i am just sending logs in… --- ## [Drop Events works only for Linux](https://discuss.elastic.co/t/drop-events-works-only-for-linux/283263)
**Author:** [@fpsouza](https://discuss.elastic.co/u/fpsouza)\ **Replies:** 2\ **Last updated:** [September 9, 2021, 8:51am UTC](https://discuss.elastic.co/t/drop-events-works-only-for-linux/283263 "2021-09-09T08:51:32Z")
Hello Sirs, Could you please let me know when my drop events below is only working for linux and not for windows platfom? Is tere something that should be difference in the metricbeat.yml file? Follow my metricbeat.yml… --- ## [TSVB Clipping with elk 7.10.2](https://discuss.elastic.co/t/tsvb-clipping-with-elk-7-10-2/281973)
**Author:** [@Rollup\_eval](https://discuss.elastic.co/u/Rollup_eval)\ **Replies:** 1\ **Last updated:** [September 9, 2021, 8:26am UTC](https://discuss.elastic.co/t/tsvb-clipping-with-elk-7-10-2/281973 "2021-09-09T08:26:13Z")
I'am using elk 7.10.2 and TSVB kibana plugin. For TSVB , I enter axis-min 0.1 for axis betwwen 0% and 100%, i get the following Any lines with one extremity lower than axis min dissappear: clipping fails Note that … --- ## [Plain text on markdown is not displayed if I select a long time range](https://discuss.elastic.co/t/plain-text-on-markdown-is-not-displayed-if-i-select-a-long-time-range/283626)
**Author:** [@Fosco](https://discuss.elastic.co/u/Fosco)\ **Replies:** 6\ **Last updated:** [September 9, 2021, 8:17am UTC](https://discuss.elastic.co/t/plain-text-on-markdown-is-not-displayed-if-i-select-a-long-time-range/283626 "2021-09-09T08:17:43Z")
Hello, I am on kibana 7.10.2 and when I create a TSVB Markdown visual with only plain text (or with an image), and then I select a time range of one year, the visual loads a long time until this error : Thanks --- ## [Pin main menu](https://discuss.elastic.co/t/pin-main-menu/283659)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 2\ **Last updated:** [September 9, 2021, 8:09am UTC](https://discuss.elastic.co/t/pin-main-menu/283659 "2021-09-09T08:09:16Z")
Hi, Using 7.14.1 In the past there was the possibility to pin the main menu, hoewever nowadays the menu slides away always. Is there no way to pin this/ make it always visible? Cheers --- ## [7.14.x Kibana query bar (search) user interface glitch in Firefox 91/92](https://discuss.elastic.co/t/7-14-x-kibana-query-bar-search-user-interface-glitch-in-firefox-91-92/283740)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 1\ **Last updated:** [September 9, 2021, 7:10am UTC](https://discuss.elastic.co/t/7-14-x-kibana-query-bar-search-user-interface-glitch-in-firefox-91-92/283740 "2021-09-09T07:10:19Z")
Kibana query bar (search) user interface glitch. Firefox version 91 and 92 Kibana version 7.14.0 and 7.14.1 --- ## [Index.number\_of\_replicas setting is not applied during ES startup](https://discuss.elastic.co/t/index-number-of-replicas-setting-is-not-applied-during-es-startup/281946)
**Author:** [@Viktor\_H](https://discuss.elastic.co/u/Viktor_H)\ **Replies:** 3\ **Last updated:** [September 9, 2021, 6:43am UTC](https://discuss.elastic.co/t/index-number-of-replicas-setting-is-not-applied-during-es-startup/281946 "2021-09-09T06:43:20Z")
I have a question regarding index.number\_of\_replicas setting in elasticsearch.yml. I'm using elastisearch 2.4. Let me explain the situation. I mirror the ES index from single (PROD) node into 3 nodes, which together form… --- ## [Fail to match query](https://discuss.elastic.co/t/fail-to-match-query/283737)
**Author:** [@ekrx](https://discuss.elastic.co/u/ekrx)\ **Replies:** 1\ **Last updated:** [September 9, 2021, 6:41am UTC](https://discuss.elastic.co/t/fail-to-match-query/283737 "2021-09-09T06:41:55Z")
Hi Im using multimatch with cross fields and im failing to match a query where the query contains more information than the field in the index. for example in the index I have "countryName": "United states of America" … --- ## [\[Kibana 7.10\] how to match item in two index patten](https://discuss.elastic.co/t/kibana-7-10-how-to-match-item-in-two-index-patten/283730)
**Author:** [@cps598](https://discuss.elastic.co/u/cps598)\ **Replies:** 1\ **Last updated:** [September 9, 2021, 5:52am UTC](https://discuss.elastic.co/t/kibana-7-10-how-to-match-item-in-two-index-patten/283730 "2021-09-09T05:52:45Z")
I originally have two index patterns with one same item called user.id. Now I create one more index pattern which combines those two indexes. But I find that they just simply add one index after another, which includes t… --- ## [Elastalert send me 0 hit query doesn't work ? please help](https://discuss.elastic.co/t/elastalert-send-me-0-hit-query-doesnt-work-please-help/283732)
**Author:** [@Salim\_Adnan](https://discuss.elastic.co/u/Salim_Adnan)\ **Replies:** 2\ **Last updated:** [September 9, 2021, 5:47am UTC](https://discuss.elastic.co/t/elastalert-send-me-0-hit-query-doesnt-work-please-help/283732 "2021-09-09T05:47:58Z")
\--------------my config.yaml------------ This is the folder that contains the rule yaml files Any .yaml file will be loaded as a rule rules\_folder: example\_rules How often ElastAlert will query Elasticsearch The unit c… --- ## [Setting up elastic cluster](https://discuss.elastic.co/t/setting-up-elastic-cluster/283673)
**Author:** [@elastic\_dev](https://discuss.elastic.co/u/elastic_dev)\ **Replies:** 2\ **Last updated:** [September 9, 2021, 5:25am UTC](https://discuss.elastic.co/t/setting-up-elastic-cluster/283673 "2021-09-09T05:25:28Z")
Hi, I am setting up the Elasticsearch with 2 nodes. whenever I start my node-2 it gives me error as below '\[2021-09-08T19:24:43,093\]\[ERROR\]\[o.e.i.g.DatabaseRegistry \] \[node-2\] failed to download database \[GeoLite2-ASN.m… --- ## [“Classroom Guide” or “Reference" Links not working](https://discuss.elastic.co/t/classroom-guide-or-reference-links-not-working/283024)
**Author:** [@sparmar2000](https://discuss.elastic.co/u/sparmar2000)\ **Replies:** 5\ **Last updated:** [September 9, 2021, 5:24am UTC](https://discuss.elastic.co/t/classroom-guide-or-reference-links-not-working/283024 "2021-09-09T05:24:07Z")
The links on Strigo does not seem to work - has been like this for some time now. I would be really grateful for help. The following are steps to recreate: I select the DNS I paste on the browser and get I… --- ## [I need to have multiple index based on the path of log file](https://discuss.elastic.co/t/i-need-to-have-multiple-index-based-on-the-path-of-log-file/283667)
**Author:** [@akhilkandari](https://discuss.elastic.co/u/akhilkandari)\ **Replies:** 2\ **Last updated:** [September 9, 2021, 4:52am UTC](https://discuss.elastic.co/t/i-need-to-have-multiple-index-based-on-the-path-of-log-file/283667 "2021-09-09T04:52:37Z")
we have 2 environment one dev & one prod storing logs in dev path & prod path so how can i have 2 separate index for both of these based on path input { stdin{ type =\> "stdin-type" } file{ type… --- ## [Unable to create monthly index in filebeat to elasticsearch](https://discuss.elastic.co/t/unable-to-create-monthly-index-in-filebeat-to-elasticsearch/281567)
**Author:** [@Shaiju\_Sam](https://discuss.elastic.co/u/Shaiju_Sam)\ **Replies:** 3\ **Last updated:** [September 9, 2021, 4:36am UTC](https://discuss.elastic.co/t/unable-to-create-monthly-index-in-filebeat-to-elasticsearch/281567 "2021-09-09T04:36:52Z")
Hi Team, I am trying to sending logs from couple of my windows servers using filebeat to elasticsearch directly. The index patterns are getting created by default ( filebeat-7.10.2-2021.08.16) however I want to create a… --- ## [Stop Filebeat automatically after it uploaded all log files](https://discuss.elastic.co/t/stop-filebeat-automatically-after-it-uploaded-all-log-files/283473)
**Author:** [@vladik22](https://discuss.elastic.co/u/vladik22)\ **Replies:** 2\ **Last updated:** [September 9, 2021, 4:32am UTC](https://discuss.elastic.co/t/stop-filebeat-automatically-after-it-uploaded-all-log-files/283473 "2021-09-09T04:32:22Z")
There is an option to configure Filebeat to stop automatically after it uploaded all log files? Before every uploading log file I should to modify them. --- ## [How to search all Domain](https://discuss.elastic.co/t/how-to-search-all-domain/282797)
**Author:** [@Mick1](https://discuss.elastic.co/u/Mick1)\ **Replies:** 3\ **Last updated:** [September 9, 2021, 4:07am UTC](https://discuss.elastic.co/t/how-to-search-all-domain/282797 "2021-09-09T04:07:20Z")
Why domain : \*.02222105.com include www.02222105.com and 02222105.com but not include www100.02222105.com How to Search all Domain (Lucene or KQL) Thanks you Master --- ## [Kafka (topic=): dropping invalid message](https://discuss.elastic.co/t/kafka-topic-dropping-invalid-message/283728)
**Author:** [@flaviawang](https://discuss.elastic.co/u/flaviawang)\ **Replies:** 0\ **Last updated:** [September 9, 2021, 3:49am UTC](https://discuss.elastic.co/t/kafka-topic-dropping-invalid-message/283728 "2021-09-09T03:49:34Z")
2021-09-08T19:15:47.776+0800 ERROR \[kafka\] kafka/client.go:341 Kafka (topic=ilog-filebeat-test): dropping invalid message --- ## [Logstash support snmptrap v3?](https://discuss.elastic.co/t/logstash-support-snmptrap-v3/283722)
**Author:** [@T\_Mashimo](https://discuss.elastic.co/u/T_Mashimo)\ **Replies:** 1\ **Last updated:** [September 9, 2021, 3:00am UTC](https://discuss.elastic.co/t/logstash-support-snmptrap-v3/283722 "2021-09-09T03:00:57Z")
Hello. Does snmptrap input plugin for logstash support v3? The official documentation does not specify the supported versions. Someone is asking the same question here, but there is no answer. Thank you. --- ## [FileBeat Not Processing Cisco 2960X Logs](https://discuss.elastic.co/t/filebeat-not-processing-cisco-2960x-logs/283725)
**Author:** [@Brad\_Henderson](https://discuss.elastic.co/u/Brad_Henderson)\ **Replies:** 0\ **Last updated:** [September 9, 2021, 2:52am UTC](https://discuss.elastic.co/t/filebeat-not-processing-cisco-2960x-logs/283725 "2021-09-09T02:52:29Z")
I am having an issue with getting Filebeat with the Cisco module to process logs from my 2960X switches running version 15.2. The switch is sending logs to Filebeat but when i run a debug I am getting an error that says … --- ## [\[Kibana 7.10\] How to search from all Index Patten](https://discuss.elastic.co/t/kibana-7-10-how-to-search-from-all-index-patten/283721)
**Author:** [@cps598](https://discuss.elastic.co/u/cps598)\ **Replies:** 3\ **Last updated:** [September 9, 2021, 2:33am UTC](https://discuss.elastic.co/t/kibana-7-10-how-to-search-from-all-index-patten/283721 "2021-09-09T02:33:04Z")
I would like to search for the IP address from all Index Patten. All Index Patten got the same field call "s.ip". Can we search like Splunk "index:\* s.ip:192.168.1.1"? --- ## [SIEM open rules](https://discuss.elastic.co/t/siem-open-rules/283710)
**Author:** [@wallacepalace](https://discuss.elastic.co/u/wallacepalace)\ **Replies:** 2\ **Last updated:** [September 9, 2021, 1:54am UTC](https://discuss.elastic.co/t/siem-open-rules/283710 "2021-09-09T01:54:06Z")
Hey there, how are ur? I'm posting here some rules I made for detecting communications with botnets, command and control (C2), VNC scanners, SSH, MySQL, RDP, DNS, Telnet, HTTP, TFTP. Using honeypots, blacklists, IP rank… --- ## [How Packetbeat for MongoDB](https://discuss.elastic.co/t/how-packetbeat-for-mongodb/282990)
**Author:** [@hope1234567hope](https://discuss.elastic.co/u/hope1234567hope)\ **Replies:** 6\ **Last updated:** [September 9, 2021, 1:33am UTC](https://discuss.elastic.co/t/how-packetbeat-for-mongodb/282990 "2021-09-09T01:33:34Z")
i Packetbeat for MongoDB，but not find mongodb.query information。only have mongodb.startingFrom mongodb.numberToReturn mongodb.numberToSkip mongodb.fullCollectionName mongodb.cursorId，but not data。 why？ my version i… --- ## [Is it necessary to update the Drive API to support WorkplaceSearch?](https://discuss.elastic.co/t/is-it-necessary-to-update-the-drive-api-to-support-workplacesearch/283641)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 2\ **Last updated:** [September 9, 2021, 12:51am UTC](https://discuss.elastic.co/t/is-it-necessary-to-update-the-drive-api-to-support-workplacesearch/283641 "2021-09-09T00:51:38Z")
I am using WorkplaceSearch to be able to search for documents in GoogleDrive. The other day, Google announced a security update to the Drive API, and it seems that Google Drive's file resourcekey will be given. Will th… --- ## [elasticsearch.exceptions.RequestError: RequestError(400, 'parse\_exception', 'numeric value expected')](https://discuss.elastic.co/t/elasticsearch-exceptions-requesterror-requesterror-400-parse-exception-numeric-value-expected/283687)
**Author:** [@saltyMcSalt](https://discuss.elastic.co/u/saltyMcSalt)\ **Replies:** 1\ **Last updated:** [September 9, 2021, 12:19am UTC](https://discuss.elastic.co/t/elasticsearch-exceptions-requesterror-requesterror-400-parse-exception-numeric-value-expected/283687 "2021-09-09T00:19:49Z")
Hi all, I am trying to do a geo-polygon query, running into this exception: elasticsearch.exceptions.RequestError: RequestError(400, 'parse\_exception', 'numeric value expected') Elasticsearch Version 7.5.3 The quer… --- ## [Suggestion: add a display of the total number of statistics](https://discuss.elastic.co/t/suggestion-add-a-display-of-the-total-number-of-statistics/282883)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 7\ **Last updated:** [September 8, 2021, 11:59pm UTC](https://discuss.elastic.co/t/suggestion-add-a-display-of-the-total-number-of-statistics/282883 "2021-09-08T23:59:40Z")
I don’t know how to view the total, I suggest it should appear in the most obvious position. --- ## [Json parse with logstash](https://discuss.elastic.co/t/json-parse-with-logstash/283714)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 4\ **Last updated:** [September 8, 2021, 11:49pm UTC](https://discuss.elastic.co/t/json-parse-with-logstash/283714 "2021-09-08T23:49:49Z")
Hi team, I want to laod data from sql server to elasticsearch via logstash 6.5 I have a table in sql server which has json objects as a value in one of the columns. My requirement is to read those objects as it is and … --- ## [What is the ideal configuration for a Elasticsearch cluster designed for High Availiability?](https://discuss.elastic.co/t/what-is-the-ideal-configuration-for-a-elasticsearch-cluster-designed-for-high-availiability/283654)
**Author:** [@xemyleex](https://discuss.elastic.co/u/xemyleex)\ **Replies:** 1\ **Last updated:** [September 8, 2021, 11:39pm UTC](https://discuss.elastic.co/t/what-is-the-ideal-configuration-for-a-elasticsearch-cluster-designed-for-high-availiability/283654 "2021-09-08T23:39:46Z")
Hello, I need to design a elasticsearch cluster for high availability. What is the ideal configuration ( nodes numbers, nodes roles, node configurations, etc ) for elasticsearch? What parameters ( workload, how much se… --- ## [Magento 2.4 to web hosting sites (NO ELASTICSEARCH)](https://discuss.elastic.co/t/magento-2-4-to-web-hosting-sites-no-elasticsearch/283701)
**Author:** [@larzu](https://discuss.elastic.co/u/larzu)\ **Replies:** 1\ **Last updated:** [September 8, 2021, 11:16pm UTC](https://discuss.elastic.co/t/magento-2-4-to-web-hosting-sites-no-elasticsearch/283701 "2021-09-08T23:16:13Z")
I suppose that you can give some help Shorty - Could you let me know how install Magento 2.4 to web hosting sites (like Siteground) where this elasticsearch is not supported? Is this a dead end for Magento or is there… [Previous page](https://discuss.elastic.co/latest.md?page=1485) [Next page](https://discuss.elastic.co/latest.md?page=1487)