# Latest **URL:** https://discuss.elastic.co/latest.md?page=1910 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1911 --- ## [Classification of String Data](https://discuss.elastic.co/t/classification-of-string-data/260194)
**Author:** [@Andrey\_Maksimov](https://discuss.elastic.co/u/Andrey_Maksimov)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 12:19pm UTC](https://discuss.elastic.co/t/classification-of-string-data/260194 "2021-01-05T12:19:53Z")
hey there, i have a task to classify download stats (basically, that's URL + some minor but yet valuable fields like referring host, request country, etc) of open-source products our company provide into metadata like s… --- ## [Elasticsearch 6.8.12 os.cpu always 100 although load varies and stays below number of processors](https://discuss.elastic.co/t/elasticsearch-6-8-12-os-cpu-always-100-although-load-varies-and-stays-below-number-of-processors/260136)
**Author:** [@span](https://discuss.elastic.co/u/span)\ **Replies:** 5\ **Last updated:** [January 5, 2021, 11:28am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-12-os-cpu-always-100-although-load-varies-and-stays-below-number-of-processors/260136 "2021-01-05T11:28:21Z")
I have a small elastic cluster running on Kubernetes 1.18 in AKS. It has 3 ingest nodes, 3 masters and 4 data nodes. I do not have much data, only a few gigabytes spread over a dozen indices. It has been setup using Helm… --- ## [Hot/Warm architecture question](https://discuss.elastic.co/t/hot-warm-architecture-question/260119)
**Author:** [@frichard](https://discuss.elastic.co/u/frichard)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 11:02am UTC](https://discuss.elastic.co/t/hot-warm-architecture-question/260119 "2021-01-05T11:02:14Z")
Hi everyone ! I am discussing Elasticsearch architecture with my team, and we wondered if the following setup would work : 2 hot nodes 2 warm nodes As a constraint, each index would have 1 replica for high availabili… --- ## [How to disable the new index creation mechanism whenever I ran Kibana 7.5.1?](https://discuss.elastic.co/t/how-to-disable-the-new-index-creation-mechanism-whenever-i-ran-kibana-7-5-1/259973)
**Author:** [@Zaga](https://discuss.elastic.co/u/Zaga)\ **Replies:** 4\ **Last updated:** [January 5, 2021, 10:51am UTC](https://discuss.elastic.co/t/how-to-disable-the-new-index-creation-mechanism-whenever-i-ran-kibana-7-5-1/259973 "2021-01-05T10:51:04Z")
Unlike in Kibana 6, I keep getting new indexes generated whenever I run my Kibana 7.5.1 instance .kibana\_1, .kibana\_2 etc. Why is it happening? can I disable it? it costs a lot of time and space to my development proce… --- ## [Kibana server is not ready: Error obtained after fresh installation on CentOS 7](https://discuss.elastic.co/t/kibana-server-is-not-ready-error-obtained-after-fresh-installation-on-centos-7/260171)
**Author:** [@jatomode](https://discuss.elastic.co/u/jatomode)\ **Replies:** 8\ **Last updated:** [January 5, 2021, 10:32am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-error-obtained-after-fresh-installation-on-centos-7/260171 "2021-01-05T10:32:29Z")
I freshly installed Ossec and required Kibana for visual log report and dashboard, but after following steps https://www.linode.com/docs/guides/visualize-server-security-on-centos-7-with-an-elastic-stack-and-wazuh/ all s… --- ## [How to add fileds to index pattren , so it can be filterd by in discover search](https://discuss.elastic.co/t/how-to-add-fileds-to-index-pattren-so-it-can-be-filterd-by-in-discover-search/259969)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 6\ **Last updated:** [January 5, 2021, 10:31am UTC](https://discuss.elastic.co/t/how-to-add-fileds-to-index-pattren-so-it-can-be-filterd-by-in-discover-search/259969 "2021-01-05T10:31:21Z")
i defined simple index pattern " filebeat-\*" and it has only a few fields which i can filter by: now i like to add new fields to this index pattern. which i can see they exist but i can't find anywhere how to ad… --- ## [Label is not shown for some categories in pie chart](https://discuss.elastic.co/t/label-is-not-shown-for-some-categories-in-pie-chart/259547)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 4\ **Last updated:** [January 5, 2021, 10:23am UTC](https://discuss.elastic.co/t/label-is-not-shown-for-some-categories-in-pie-chart/259547 "2021-01-05T10:23:50Z")
Here label is not shown for one category in pie chart, may I know how it can be resolved. --- ## [Set default time field on ingest\_timestamp](https://discuss.elastic.co/t/set-default-time-field-on-ingest-timestamp/260184)
**Author:** [@pat7](https://discuss.elastic.co/u/pat7)\ **Replies:** 0\ **Last updated:** [January 5, 2021, 9:54am UTC](https://discuss.elastic.co/t/set-default-time-field-on-ingest-timestamp/260184 "2021-01-05T09:54:55Z")
hi! i'm adding (w/ an ingest pipeline) an ingest\_timestamp to each document on my index. poorly I cannot use the kibana date picker on that data. how is it possible to set the default time field on an ingest\_timestamp? I… --- ## [How can I get all nouns in my field](https://discuss.elastic.co/t/how-can-i-get-all-nouns-in-my-field/260181)
**Author:** [@akamachi95](https://discuss.elastic.co/u/akamachi95)\ **Replies:** 0\ **Last updated:** [January 5, 2021, 9:19am UTC](https://discuss.elastic.co/t/how-can-i-get-all-nouns-in-my-field/260181 "2021-01-05T09:19:45Z")
Sorry fo my poor English. As kuromoji, I can just use part of speech to filter out the useless words and keep the words I want. For English, I want to do the same thin.So is there any way for me to do the same thing? --- ## [Limit number of slices in pie chart](https://discuss.elastic.co/t/limit-number-of-slices-in-pie-chart/260049)
**Author:** [@kasun](https://discuss.elastic.co/u/kasun)\ **Replies:** 5\ **Last updated:** [January 5, 2021, 8:49am UTC](https://discuss.elastic.co/t/limit-number-of-slices-in-pie-chart/260049 "2021-01-05T08:49:17Z")
I have created a pie chart and split the slices using filter aggregation. There are over 5 filters but I want to display only the top 5 values in the pie chart. I can do this if I use the terms as the aggregation. But i… --- ## [We already have an ES cluster running WITHOUT authentication and TLS. We are trying to enable the security feature. Is it possible to achieve this with zero down time?](https://discuss.elastic.co/t/we-already-have-an-es-cluster-running-without-authentication-and-tls-we-are-trying-to-enable-the-security-feature-is-it-possible-to-achieve-this-with-zero-down-time/260153)
**Author:** [@liwanjie](https://discuss.elastic.co/u/liwanjie)\ **Replies:** 9\ **Last updated:** [January 5, 2021, 8:46am UTC](https://discuss.elastic.co/t/we-already-have-an-es-cluster-running-without-authentication-and-tls-we-are-trying-to-enable-the-security-feature-is-it-possible-to-achieve-this-with-zero-down-time/260153 "2021-01-05T08:46:05Z")
Hello, I have encountered the problem mentioned above. I encountered it during the rolling upgrade of elasticsearch 6.8.1 to 7.8.1. Because my 6.8.1 did not configure xpack related configuration, but I want to configu… --- ## [Monitoring Request Failed](https://discuss.elastic.co/t/monitoring-request-failed/259628)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 7:44am UTC](https://discuss.elastic.co/t/monitoring-request-failed/259628 "2021-01-05T07:44:51Z")
Hi everyone, I using kibana and elasticsearch verison 7.4.2 . When I set the time interval between 1-15 minutes in the Kibana Stack Monitoring panel, I get the error 'Monitoring Request Failed: Unable to find the clust… --- ## [Simultaneous Filebeats to handle high load](https://discuss.elastic.co/t/simultaneous-filebeats-to-handle-high-load/260108)
**Author:** [@talsh87](https://discuss.elastic.co/u/talsh87)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 7:32am UTC](https://discuss.elastic.co/t/simultaneous-filebeats-to-handle-high-load/260108 "2021-01-05T07:32:49Z")
I'd like to leverage Filebeat so it'd fetch our o365\\azure\\aws logs using the various modules . How would it handle very high volumes? Is there any benchmark for example events\\MBs per second? Is there any way to maint… --- ## [DNS lookup failure "my-cluster-es-http": lookup my-cluster-es-http on 1xx.xx.xx.xx:53: no such host](https://discuss.elastic.co/t/dns-lookup-failure-my-cluster-es-http-lookup-my-cluster-es-http-on-1xx-xx-xx-xx-no-such-host/260172)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 0\ **Last updated:** [January 5, 2021, 7:30am UTC](https://discuss.elastic.co/t/dns-lookup-failure-my-cluster-es-http-lookup-my-cluster-es-http-on-1xx-xx-xx-xx-no-such-host/260172 "2021-01-05T07:30:27Z")
Hey i followed the quickstart tutorial to setup elasticsearch on Kubernetes . installed it on pre created namespace not default . apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: my-cl… --- ## [ERROR pipeline/output.go:100 Failed to connect to backoff(async(tcp://0.0.0.0:5044)): dial tcp 0.0.0.0:5044: connect: connection refused](https://discuss.elastic.co/t/error-pipeline-output-go-100-failed-to-connect-to-backoff-async-tcp-0-0-0-0-5044-dial-tcp-0-0-0-0-connect-connection-refused/260121)
**Author:** [@UjjwalBera](https://discuss.elastic.co/u/UjjwalBera)\ **Replies:** 6\ **Last updated:** [January 5, 2021, 7:30am UTC](https://discuss.elastic.co/t/error-pipeline-output-go-100-failed-to-connect-to-backoff-async-tcp-0-0-0-0-5044-dial-tcp-0-0-0-0-connect-connection-refused/260121 "2021-01-05T07:30:11Z")
Here below filebeat.yml output configuration output.logstash: enabled: true hosts: \["0.0.0.0:5044"\] timeout: 86400\`\` logstash.conf input configuration input { beats { port =\> 5044 … --- ## [Create multiple indicies mapping at one elasticsearch](https://discuss.elastic.co/t/create-multiple-indicies-mapping-at-one-elasticsearch/260162)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 1\ **Last updated:** [January 5, 2021, 6:51am UTC](https://discuss.elastic.co/t/create-multiple-indicies-mapping-at-one-elasticsearch/260162 "2021-01-05T06:51:59Z")
Hi, I have a scenario where my index name is changing frequently, I want to create index mapping at one go. with my-index-\* But I am not able to create at one go. PUT /my-index-\*/\_mapping { "properties": { "emai… --- ## [Creating and deleting a small index every 3 minutes, posible problems?](https://discuss.elastic.co/t/creating-and-deleting-a-small-index-every-3-minutes-posible-problems/260158)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 5\ **Last updated:** [January 5, 2021, 6:44am UTC](https://discuss.elastic.co/t/creating-and-deleting-a-small-index-every-3-minutes-posible-problems/260158 "2021-01-05T06:44:51Z")
Hi, with a python script I run a single logstash pipeline that create an ES index, in the same script I delete the index every 3 minutes, the size of the index is less than 1 Mb, I was wandering if this constant deletio… --- ## [Multiple nodes docker-compose](https://discuss.elastic.co/t/multiple-nodes-docker-compose/260127)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 8\ **Last updated:** [January 5, 2021, 6:32am UTC](https://discuss.elastic.co/t/multiple-nodes-docker-compose/260127 "2021-01-05T06:32:38Z")
Hi, I currently manage a docker ELK stack with 3 nodes (1 master/no-data, 2 master/data) on the same machine. If I add 2 mode data node containers to this(still on the same machine) will i experience significant perform… --- ## [Ingesting Oracle's Audit Trail](https://discuss.elastic.co/t/ingesting-oracles-audit-trail/259897)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 6:29am UTC](https://discuss.elastic.co/t/ingesting-oracles-audit-trail/259897 "2021-01-05T06:29:17Z")
Hi, I'm ingesting the content from sys.dba\_audit\_trail into ES using the jdbc input plugin. Everything goes ok with the exception of the field transactionid which is of type (at db level of RAW(8)) Here an example 000… --- ## [Kibana is not ready yet in 7.10.1](https://discuss.elastic.co/t/kibana-is-not-ready-yet-in-7-10-1/259232)
**Author:** [@Bhavya\_Sri](https://discuss.elastic.co/u/Bhavya_Sri)\ **Replies:** 4\ **Last updated:** [January 5, 2021, 4:43am UTC](https://discuss.elastic.co/t/kibana-is-not-ready-yet-in-7-10-1/259232 "2021-01-05T04:43:52Z")
Hi, I have installed Kibana v7.10. I have made the modifications for server.host in kibana.yml file. Post that when i start Kibana by using - sudo service kibana start it is says Starting kibana (via systemctl): … --- ## [File paths must be absolute, relative path specified](https://discuss.elastic.co/t/file-paths-must-be-absolute-relative-path-specified/260016)
**Author:** [@Cyphy](https://discuss.elastic.co/u/Cyphy)\ **Replies:** 9\ **Last updated:** [January 5, 2021, 4:09am UTC](https://discuss.elastic.co/t/file-paths-must-be-absolute-relative-path-specified/260016 "2021-01-05T04:09:27Z")
hey there, hope you can help me :slight\_smile: I started my ELK setup with docker-compose a few days ago. It looked fine as all 3 containers where running without any data. Today i wanted to import some xml files with … --- ## [No matching indices found: No indices match pattern "winlogbeat-\*"](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-winlogbeat/260134)
**Author:** [@sixstringssteve](https://discuss.elastic.co/u/sixstringssteve)\ **Replies:** 14\ **Last updated:** [January 5, 2021, 2:14am UTC](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-winlogbeat/260134 "2021-01-05T02:14:47Z")
I am getting the errors "No matching indices found: No indices match pattern "winlogbeat-\*" when I try to go to the Winlogbeat dashboard or Discover. There was a winlogbeat-\* index pattern created, just no traffic hitt… --- ## [Logstash best practice for filters order](https://discuss.elastic.co/t/logstash-best-practice-for-filters-order/259775)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 3:18am UTC](https://discuss.elastic.co/t/logstash-best-practice-for-filters-order/259775 "2021-01-05T03:18:49Z")
Hi, I have a lot of input and filters on my logstash and I've been thinking are they optimize and how can I measure logstash performance. I only monitor "heap used" and it's fine. I came up with a question. There are 2 t… --- ## [How can I configure kibana on different host?](https://discuss.elastic.co/t/how-can-i-configure-kibana-on-different-host/260069)
**Author:** [@Hi\_u\_Nguy\_n\_Dang](https://discuss.elastic.co/u/Hi_u_Nguy_n_Dang)\ **Replies:** 14\ **Last updated:** [January 5, 2021, 3:02am UTC](https://discuss.elastic.co/t/how-can-i-configure-kibana-on-different-host/260069 "2021-01-05T03:02:04Z")
How can I configure kibana if it run on a different host with elasticsearch and logstash? For example my elasticsearch server is 10.1.11.111 my kibana server is 10.1.11.112 and my logstash server is 10.1.11.113 ? In … --- ## [Show data in kibana, used snmp plugin](https://discuss.elastic.co/t/show-data-in-kibana-used-snmp-plugin/260125)
**Author:** [@aandrewsllp](https://discuss.elastic.co/u/aandrewsllp)\ **Replies:** 1\ **Last updated:** [January 5, 2021, 2:53am UTC](https://discuss.elastic.co/t/show-data-in-kibana-used-snmp-plugin/260125 "2021-01-05T02:53:38Z")
i need show data in kibana, used snmp plugin --- ## [JDBC\_Streaming plugin issue](https://discuss.elastic.co/t/jdbc-streaming-plugin-issue/260149)
**Author:** [@Ashok\_Botcha](https://discuss.elastic.co/u/Ashok_Botcha)\ **Replies:** 0\ **Last updated:** [January 5, 2021, 2:29am UTC](https://discuss.elastic.co/t/jdbc-streaming-plugin-issue/260149 "2021-01-05T02:29:26Z")
Hi, I am trying below sample logstash config, Output also pasted below. data related to table C not coming inside B, Can you suggest if anything wrong with config ? CONFIG: \`input { jdbc { ....... statement =\> "SELE… --- ## [Can logstash's Google Cloud Storage output plugin do persistent transmission after restart machine?](https://discuss.elastic.co/t/can-logstashs-google-cloud-storage-output-plugin-do-persistent-transmission-after-restart-machine/260139)
**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\ **Replies:** 0\ **Last updated:** [January 4, 2021, 11:45pm UTC](https://discuss.elastic.co/t/can-logstashs-google-cloud-storage-output-plugin-do-persistent-transmission-after-restart-machine/260139 "2021-01-04T23:45:41Z")
Using this config for logstash's output. It's using /tmp/logstash-gcs as a local folder. Send to GCS when file become 1024 kbytes. input { beats { port =\> 5044 } } filter {} output { google\_cloud\_storage { … --- ## [7.x How do remove duplicates in search after query?](https://discuss.elastic.co/t/7-x-how-do-remove-duplicates-in-search-after-query/259692)
**Author:** [@Adin\_Sijamija](https://discuss.elastic.co/u/Adin_Sijamija)\ **Replies:** 1\ **Last updated:** [January 5, 2021, 12:54am UTC](https://discuss.elastic.co/t/7-x-how-do-remove-duplicates-in-search-after-query/259692 "2021-01-05T00:54:39Z")
I have several indexes spread across 3 shards that hold my data. I want to make a SearchAfter where I fetch 50 rows ordered by start time. When I run it I am returned 50 hits but half of them are duplicates as the data i… --- ## [EC2 metrics are not showing in inventory while creating Alerts](https://discuss.elastic.co/t/ec2-metrics-are-not-showing-in-inventory-while-creating-alerts/260140)
**Author:** [@minu.ajith](https://discuss.elastic.co/u/minu.ajith)\ **Replies:** 0\ **Last updated:** [January 5, 2021, 12:41am UTC](https://discuss.elastic.co/t/ec2-metrics-are-not-showing-in-inventory-while-creating-alerts/260140 "2021-01-05T00:41:44Z")
Hi, I was trying to create alerts for EC2 CPU usage. The metrics for aws.ec2.cpu.total.pct is appearing fine in Kibana. However, when I am trying to create an alert for the following condition and run a preview Invento… --- ## [Kibana not recognize my fields](https://discuss.elastic.co/t/kibana-not-recognize-my-fields/260088)
**Author:** [@learn\_and\_try](https://discuss.elastic.co/u/learn_and_try)\ **Replies:** 1\ **Last updated:** [January 5, 2021, 12:38am UTC](https://discuss.elastic.co/t/kibana-not-recognize-my-fields/260088 "2021-01-05T00:38:36Z")
hi guys i am new in elk and Kibana i am tried to put data via Logstah config file: this is the mapping details: "map\_date":{ "type": "date", "format": "yyyy-MM-dd HH:mm:ss||yyyy-MM-dd||epoch\_millis" }, when i … [Previous page](https://discuss.elastic.co/latest.md?page=1909) [Next page](https://discuss.elastic.co/latest.md?page=1911)