# Latest **URL:** https://discuss.elastic.co/latest.md?page=1888 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1889 --- ## [Group permission inconsistency between Kibana and Elasticsearch docker images](https://discuss.elastic.co/t/group-permission-inconsistency-between-kibana-and-elasticsearch-docker-images/261051)
**Author:** [@Aaron\_Norton](https://discuss.elastic.co/u/Aaron_Norton)\ **Replies:** 1\ **Last updated:** [January 18, 2021, 3:07pm UTC](https://discuss.elastic.co/t/group-permission-inconsistency-between-kibana-and-elasticsearch-docker-images/261051 "2021-01-18T15:07:45Z")
I noticed the latest Kibana and Elasticsearch docker images (7.10.0) have a difference that caused me issues when trying to change ownership of my bind mounted configuration and logging directories. The Elasticsearch doc… --- ## [Need help in configuring TLS/SSL for ELK with 3rd party certificates (comodo)](https://discuss.elastic.co/t/need-help-in-configuring-tls-ssl-for-elk-with-3rd-party-certificates-comodo/259745)
**Author:** [@Suddhasil\_Sarkar](https://discuss.elastic.co/u/Suddhasil_Sarkar)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 3:04pm UTC](https://discuss.elastic.co/t/need-help-in-configuring-tls-ssl-for-elk-with-3rd-party-certificates-comodo/259745 "2021-01-18T15:04:47Z")
Hi Team, Need your help, I was successfully able to manage/configure TLS/SSL with self signed pk12 certs. Now I purchased cert(pem) single pem file with SAN ( having 43 hosts DNS and ips) .I have pem format cert, cert f… --- ## [CircuitBreakingException: \[parent\] Data too large](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large/260792)
**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\ **Replies:** 4\ **Last updated:** [January 18, 2021, 3:00pm UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large/260792 "2021-01-18T15:00:34Z")
Hi, I am using Elasticsearch 7.8.0 in k8s environment. I have 3 master, 2 data and 3 ingest nodes. I am getting circuit breaker exception on one of the data node. Below are the details: java -version openjdk version… --- ## [Avoid loggin on a pipeline output](https://discuss.elastic.co/t/avoid-loggin-on-a-pipeline-output/261438)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [January 18, 2021, 2:34pm UTC](https://discuss.elastic.co/t/avoid-loggin-on-a-pipeline-output/261438 "2021-01-18T14:34:39Z")
Hi, Im getting an error on a pipeline, the error doesnt affect the indexing of the data, but is filling the docker logs, is there a way to avoid this error from being shown? -the output plugin is elasticsearch -I dont … --- ## [Could not index '1' records: listener timeout after waiting for \[30000\] ms in Single node](https://discuss.elastic.co/t/could-not-index-1-records-listener-timeout-after-waiting-for-30000-ms-in-single-node/261425)
**Author:** [@ARULAMUTHAN](https://discuss.elastic.co/u/ARULAMUTHAN)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 2:10pm UTC](https://discuss.elastic.co/t/could-not-index-1-records-listener-timeout-after-waiting-for-30000-ms-in-single-node/261425 "2021-01-18T14:10:33Z")
Getting below ERROR in the single node ELK. Configuration of elasticsearch.yml cluster.name: \*\*\*\*\*\*-elasticsearch node.name: \*\*\*\*\*\*Elastic-1 path.data: /data00/\*\*\*\*\*Elastic/data path.logs: /data00/\*\*\*\*\*Elastic/log netw… --- ## [System.cpu.total.norm.pct different of the sum system.process.cpu.total.norm.pct](https://discuss.elastic.co/t/system-cpu-total-norm-pct-different-of-the-sum-system-process-cpu-total-norm-pct/261130)
**Author:** [@Altamir\_Dias](https://discuss.elastic.co/u/Altamir_Dias)\ **Replies:** 3\ **Last updated:** [January 18, 2021, 1:44pm UTC](https://discuss.elastic.co/t/system-cpu-total-norm-pct-different-of-the-sum-system-process-cpu-total-norm-pct/261130 "2021-01-18T13:44:23Z")
Hello Guys, I using a ELK STACK with version 7.7.1 and I'm testing metricbeat to enviroment observability, but when I need view data about CPU process the calcule not close. Why system.cpu.total.norm.pct its not the … --- ## [Audit all users login to kibana](https://discuss.elastic.co/t/audit-all-users-login-to-kibana/261264)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 4\ **Last updated:** [January 18, 2021, 1:01pm UTC](https://discuss.elastic.co/t/audit-all-users-login-to-kibana/261264 "2021-01-18T13:01:39Z")
Hi All, We are planning to give Kibana access to other users. Now we need to monitor what all activities they are doing, who all logged in to Kibana and also if we can monitor whether same user id is getting user from … --- ## [Alerts based on increase in logged value, rather than specific threshold](https://discuss.elastic.co/t/alerts-based-on-increase-in-logged-value-rather-than-specific-threshold/261163)
**Author:** [@Christopher1](https://discuss.elastic.co/u/Christopher1)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 12:48pm UTC](https://discuss.elastic.co/t/alerts-based-on-increase-in-logged-value-rather-than-specific-threshold/261163 "2021-01-18T12:48:54Z")
Hi there, I am quite new to the Elastic Stack, as is my company. We are attempting to build a centralized logging and alerting system, building dashboards and alerts in Kibana. Currently we have AWS Lambda functions ship… --- ## [Logstash drop unnecessary fields ( ip2location plugin )](https://discuss.elastic.co/t/logstash-drop-unnecessary-fields-ip2location-plugin/259694)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 6\ **Last updated:** [January 18, 2021, 11:42am UTC](https://discuss.elastic.co/t/logstash-drop-unnecessary-fields-ip2location-plugin/259694 "2021-01-18T11:42:46Z")
Hi, We use ip2locaion database and plugin to detect client's ISP. There are multiple versions of this database with different information but we bought the basic version with only ISP info. How can I prevent logstash t… --- ## [Create scripted field](https://discuss.elastic.co/t/create-scripted-field/261360)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 12:00pm UTC](https://discuss.elastic.co/t/create-scripted-field/261360 "2021-01-18T12:00:59Z")
Hi togehter!!! Hi all. i am new to Kibana and i want to create a scripted field to do the following calculation. how can it be done. Thank you in advance. StartupIOCount = StartupIOPS \* StartupTimeMs / 1000 --- ## [The Sort Script of ES 7.4.2 is very poor](https://discuss.elastic.co/t/the-sort-script-of-es-7-4-2-is-very-poor/261418)
**Author:** [@PandaXu](https://discuss.elastic.co/u/PandaXu)\ **Replies:** 0\ **Last updated:** [January 18, 2021, 11:46am UTC](https://discuss.elastic.co/t/the-sort-script-of-es-7-4-2-is-very-poor/261418 "2021-01-18T11:46:57Z")
hi , all, Our ES has been upgraded from ES 5.3.2 to 7.4.2. When you encounter a script performance problem, the execution of the same script in 7.4.2 is at least twice as slow as that in ES 5.3.2. The main method is t… --- ## [Remove Deprecation warnings in Elasticsearch nodejs client](https://discuss.elastic.co/t/remove-deprecation-warnings-in-elasticsearch-nodejs-client/260385)
**Author:** [@Vincent\_Maury](https://discuss.elastic.co/u/Vincent_Maury)\ **Replies:** 4\ **Last updated:** [January 18, 2021, 10:14am UTC](https://discuss.elastic.co/t/remove-deprecation-warnings-in-elasticsearch-nodejs-client/260385 "2021-01-18T10:14:59Z")
Hi I'm using node10 (in AWS Lambda), the 7.9 nodejs client version and a 7.9.3 ES cluster (in Elasticsearch service from cloud.elastic.co). Every time I'm calling Elasticsearch I get this in the error log: (node:8) De… --- ## [Rank Feature vs. Decay](https://discuss.elastic.co/t/rank-feature-vs-decay/261403)
**Author:** [@shaigbdb](https://discuss.elastic.co/u/shaigbdb)\ **Replies:** 0\ **Last updated:** [January 18, 2021, 10:10am UTC](https://discuss.elastic.co/t/rank-feature-vs-decay/261403 "2021-01-18T10:10:05Z")
Hi, I'm trying rank feature for a rank field, and comparing the results to a function score using a gauss decay function on a similarly-valued float field. The results are pre-filtered with a geo\_distance query in both … --- ## [Update Dataset with Information comming delayed](https://discuss.elastic.co/t/update-dataset-with-information-comming-delayed/261397)
**Author:** [@michaelpietzsch](https://discuss.elastic.co/u/michaelpietzsch)\ **Replies:** 4\ **Last updated:** [January 18, 2021, 10:07am UTC](https://discuss.elastic.co/t/update-dataset-with-information-comming-delayed/261397 "2021-01-18T10:07:21Z")
Hello dear elastic users, im currently having an issue implementing a logic which updates fields after they have been stored in the elastic. Let me try to explain this to the best of my ability: Theres a log entrance … --- ## [Specific visualization in full screen](https://discuss.elastic.co/t/specific-visualization-in-full-screen/261244)
**Author:** [@cecoi\_gheorghe](https://discuss.elastic.co/u/cecoi_gheorghe)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 9:16am UTC](https://discuss.elastic.co/t/specific-visualization-in-full-screen/261244 "2021-01-18T09:16:43Z")
Hi, I wanted to ask if I can make specific visualization by default to be in full screen mode when I have more visualization in one dashboard. kibana version is 7.9. Thank you in advance --- ## [Lab Guide: Installing and Scaling ECE](https://discuss.elastic.co/t/lab-guide-installing-and-scaling-ece/261364)
**Author:** [@manivannans](https://discuss.elastic.co/u/manivannans)\ **Replies:** 1\ **Last updated:** [January 18, 2021, 9:06am UTC](https://discuss.elastic.co/t/lab-guide-installing-and-scaling-ece/261364 "2021-01-18T09:06:29Z")
I am on step number :4 Add the following line to the end of /etc/fstab to always mount the ECE drive on /mnt/data . /dev/xvdb /mnt/data xfs defaults,nofail,x-systemd.automount,prjquota,pquota 0 2 Note tha… --- ## [Make create-metricset error 127](https://discuss.elastic.co/t/make-create-metricset-error-127/261298)
**Author:** [@MatteoM](https://discuss.elastic.co/u/MatteoM)\ **Replies:** 1\ **Last updated:** [January 18, 2021, 9:02am UTC](https://discuss.elastic.co/t/make-create-metricset-error-127/261298 "2021-01-18T09:02:08Z")
Hi there, I'm trying to create a new metric beat and to do this I followed the official guide for dev Creating a Metricset | Beats Developer Guide \[7.16\] | Elastic I cloneed the beat repository with git and moved out i… --- ## [Aggregate on a sequence item in EQL](https://discuss.elastic.co/t/aggregate-on-a-sequence-item-in-eql/259116)
**Author:** [@jayden.mckay](https://discuss.elastic.co/u/jayden.mckay)\ **Replies:** 1\ **Last updated:** [January 18, 2021, 8:48am UTC](https://discuss.elastic.co/t/aggregate-on-a-sequence-item-in-eql/259116 "2021-01-18T08:48:44Z")
Hi all :slight\_smile: I am trying to run an EQL search where the first item must occur X amount of times or more before the second item in the sequence will be ran. Anyone know how I can do this? AKA for the example be… --- ## [Translate: Unquoted fields do not allow \\r or \\n (line 1)](https://discuss.elastic.co/t/translate-unquoted-fields-do-not-allow-r-or-n-line-1/260904)
**Author:** [@EHE](https://discuss.elastic.co/u/EHE)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 8:31am UTC](https://discuss.elastic.co/t/translate-unquoted-fields-do-not-allow-r-or-n-line-1/260904 "2021-01-18T08:31:01Z")
Hello, I am struggling with a translation dilemma, I have been researching for hrs for answers, but i havent found the right one for my issue, and i do not know why i am getting this error: Translate: Unquoted fields d… --- ## [Logstash-7.10.0 repositories available for APT doesn't have release file](https://discuss.elastic.co/t/logstash-7-10-0-repositories-available-for-apt-doesnt-have-release-file/261392)
**Author:** [@saroja](https://discuss.elastic.co/u/saroja)\ **Replies:** 0\ **Last updated:** [January 18, 2021, 7:50am UTC](https://discuss.elastic.co/t/logstash-7-10-0-repositories-available-for-apt-doesnt-have-release-file/261392 "2021-01-18T07:50:24Z")
Hi All, i am unable to install logstash-7.10.0 package from APT repository. To download and install logstash-7.10.0, used the following steps for APT distributions. Download and install the Public Signing Key: $ wg… --- ## [Metric Visualization in Kibana](https://discuss.elastic.co/t/metric-visualization-in-kibana/261374)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 1\ **Last updated:** [January 18, 2021, 7:42am UTC](https://discuss.elastic.co/t/metric-visualization-in-kibana/261374 "2021-01-18T07:42:44Z")
Here I am showing special characters used in specific subject line. Each special character is separated by comma ( which is also a special character) it may lead to confusion that even those commas are used in sentence… --- ## [Overwrite an index in logstash](https://discuss.elastic.co/t/overwrite-an-index-in-logstash/261345)
**Author:** [@hallaoui](https://discuss.elastic.co/u/hallaoui)\ **Replies:** 4\ **Last updated:** [January 18, 2021, 7:33am UTC](https://discuss.elastic.co/t/overwrite-an-index-in-logstash/261345 "2021-01-18T07:33:45Z")
Hi All, I am collecting alarms status from an oracle database every 5 minutes using logstash and load them into an index, the thing is that the remote DB will contain alarms only if the alarms are still open and I would… --- ## [Getting the message Failed to update shard information for ClusterInfoUpdateJob in the es master logs](https://discuss.elastic.co/t/getting-the-message-failed-to-update-shard-information-for-clusterinfoupdatejob-in-the-es-master-logs/261274)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 7:33am UTC](https://discuss.elastic.co/t/getting-the-message-failed-to-update-shard-information-for-clusterinfoupdatejob-in-the-es-master-logs/261274 "2021-01-18T07:33:18Z")
We are using elasticsearch 7.8.0 on centos 7. There are three data pods in the cluster we are restarting one of the data pod. Suddenly, elasticsearch curl to service stopped working and the following error observes in th… --- ## [How to print the values or grok expression and the line it is working on and file name and path](https://discuss.elastic.co/t/how-to-print-the-values-or-grok-expression-and-the-line-it-is-working-on-and-file-name-and-path/261385)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 0\ **Last updated:** [January 18, 2021, 6:49am UTC](https://discuss.elastic.co/t/how-to-print-the-values-or-grok-expression-and-the-line-it-is-working-on-and-file-name-and-path/261385 "2021-01-18T06:49:39Z")
i try to find how to print to log the name of the log file and the line the grok expretion is working on right now . here the logstash config : input { s3 { "access\_key\_id" =\> "xxxx" "secret\_acces… --- ## [How to use nginx's host overwrite logstash's host information when send it by filebeat?](https://discuss.elastic.co/t/how-to-use-nginxs-host-overwrite-logstashs-host-information-when-send-it-by-filebeat/261369)
**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\ **Replies:** 0\ **Last updated:** [January 18, 2021, 2:04am UTC](https://discuss.elastic.co/t/how-to-use-nginxs-host-overwrite-logstashs-host-information-when-send-it-by-filebeat/261369 "2021-01-18T02:04:09Z")
Now using filebeat and logstash sending nginx's json log on k8s. The nginx's configuration likes nginx.conf http { log\_format bucket escape=json '{' '"request\_id": "$request\_id",' '"method": "$… --- ## [How to insert data in index-pattern for field with 'Keyword' type using Index API](https://discuss.elastic.co/t/how-to-insert-data-in-index-pattern-for-field-with-keyword-type-using-index-api/261381)
**Author:** [@savan.chovatiya](https://discuss.elastic.co/u/savan.chovatiya)\ **Replies:** 0\ **Last updated:** [January 18, 2021, 5:58am UTC](https://discuss.elastic.co/t/how-to-insert-data-in-index-pattern-for-field-with-keyword-type-using-index-api/261381 "2021-01-18T05:58:33Z")
Hello, Index-pattern contains two fields like below. {"name":"aws\_region","type":"string","count":11,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":false},{"name":"aws\_region.keyword","type"… --- ## [The performance of Script Based Sorting in ES 7.4.2 verison is very poor](https://discuss.elastic.co/t/the-performance-of-script-based-sorting-in-es-7-4-2-verison-is-very-poor/261241)
**Author:** [@PandaXu](https://discuss.elastic.co/u/PandaXu)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 5:55am UTC](https://discuss.elastic.co/t/the-performance-of-script-based-sorting-in-es-7-4-2-verison-is-very-poor/261241 "2021-01-18T05:55:09Z")
Hello, all, Recently , We compare the query performance of two versions of ES cluster. One is 5.3.2, and the other is 7.4.2. The index settings, mapping and the amout of data , is exactly the same.I find that the que… --- ## [Pipieline Agrregation](https://discuss.elastic.co/t/pipieline-agrregation/260286)
**Author:** [@Reyhaneh\_Sedehi](https://discuss.elastic.co/u/Reyhaneh_Sedehi)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 5:52am UTC](https://discuss.elastic.co/t/pipieline-agrregation/260286 "2021-01-18T05:52:07Z")
I have fiels as product\_score for each products\_Id field,also have a filed name category for each of product\_id . I want to visualize as Meters for get Maximum of the sum of product\_score for each category. How could I u… --- ## [How can I get a list of users, roles, spaces, etc](https://discuss.elastic.co/t/how-can-i-get-a-list-of-users-roles-spaces-etc/261370)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 4\ **Last updated:** [January 18, 2021, 3:37am UTC](https://discuss.elastic.co/t/how-can-i-get-a-list-of-users-roles-spaces-etc/261370 "2021-01-18T03:37:01Z")
Hello, Is there a way to list all users, their roles, assigned spaces, etc? Also, in a table format (CSV)? I know Get User API, but it is limited and showing in JSON only. Thanks! --- ## [Kibana のユーザ管理機能について](https://discuss.elastic.co/t/kibana/261368)
**Author:** [@vavan](https://discuss.elastic.co/u/vavan)\ **Replies:** 0\ **Last updated:** [January 18, 2021, 1:41am UTC](https://discuss.elastic.co/t/kibana/261368 "2021-01-18T01:41:31Z")
Kibana 7.8.1でダッシュボード機能を組織内に展開しようとしています。 組織A、組織B、組織C は、マルチテナントとして考えており、Elasticseqarch上のデータはIndexを分け、 roleでアクセス制御をかけています。また、ダッシュボードも各組織毎に個別のSpaceを割り当ててて、自由に作ってよいことにしたいと思っています。 下記サイトを参考にしています。 https://acro-engineer.haten… [Previous page](https://discuss.elastic.co/latest.md?page=1887) [Next page](https://discuss.elastic.co/latest.md?page=1889)