# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1218

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1219

---

## [Exact match with multiple names from OSM elements](https://discuss.elastic.co/t/exact-match-with-multiple-names-from-osm-elements/250257)

<div class="topic-metadata">

**Author:** [@HarelM](https://discuss.elastic.co/u/HarelM)\
**Replies:** 0\
**Last updated:** [September 28, 2020, 7:17pm UTC](https://discuss.elastic.co/t/exact-match-with-multiple-names-from-osm-elements/250257 "2020-09-28T19:17:29Z")

</div>

OK, so this might be a long intro but stay with me... I've built a OSM names search engine, a bit like Nominatim, but better (at least for my site's needs). I'm basically indexing everything that has a name in OSM. Th…

---

## [Отслеживание логов в AD](https://discuss.elastic.co/t/ad/250194)

<div class="topic-metadata">

**Author:** [@111257](https://discuss.elastic.co/u/111257)\
**Replies:** 3\
**Last updated:** [September 28, 2020, 7:10pm UTC](https://discuss.elastic.co/t/ad/250194 "2020-09-28T19:10:01Z")

</div>

Добрый день! Мне по наследству досталась доменная инфраструктура AD на базе Windows Server 2016. В БД AD свыше 1000 пользователей и настроена политика смены паролей каждые 90 дней, у людей может быть не одно устройство. …

---

## [\[IMPROVEMENT REQUEST\] Add risk score field to each rule in Endgame](https://discuss.elastic.co/t/improvement-request-add-risk-score-field-to-each-rule-in-endgame/250125)

<div class="topic-metadata">

**Author:** [@kdawg](https://discuss.elastic.co/u/kdawg)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 7:06pm UTC](https://discuss.elastic.co/t/improvement-request-add-risk-score-field-to-each-rule-in-endgame/250125 "2020-09-28T19:06:18Z")

</div>

Feature request Describe the feature: Add a field to Endgame rules to include a risk score to show when the rule is triggered, this will assist with prioritizing these alerts. Description of the problem: When many di…

---

## [Questions about upgrading ES 6 -\> 7](https://discuss.elastic.co/t/questions-about-upgrading-es-6-7/250238)

<div class="topic-metadata">

**Author:** [@rdragan](https://discuss.elastic.co/u/rdragan)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 5:53pm UTC](https://discuss.elastic.co/t/questions-about-upgrading-es-6-7/250238 "2020-09-28T17:53:51Z")

</div>

Hey, We are planning to do an online 6-\>7 upgrade for our ES clusters, and we are looking into ways of rolling back safely from 7 to 6 in case something bad happens. The ES docs state that once the upgrade starts, the E…

---

## [Exception in thread "main" java.nio.file.AccessDeniedException](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-accessdeniedexception/249849)

<div class="topic-metadata">

**Author:** [@Elastic-Noob](https://discuss.elastic.co/u/Elastic-Noob)\
**Replies:** 2\
**Last updated:** [September 28, 2020, 2:02pm UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-accessdeniedexception/249849 "2020-09-28T14:02:36Z")

</div>

I'm getting the following error when running elasticsearch.bat C:\\Program Files\\Elastic\\Elasticsearch\\7.7.0\\bin\> .\\elasticsearch.bat Exception in thread "main" java.nio.file.AccessDeniedException: C:\\ProgramData\\Elasti…

---

## [Converting more than one column destroys data](https://discuss.elastic.co/t/converting-more-than-one-column-destroys-data/250161)

<div class="topic-metadata">

**Author:** [@Christoph1](https://discuss.elastic.co/u/Christoph1)\
**Replies:** 6\
**Last updated:** [September 28, 2020, 4:26pm UTC](https://discuss.elastic.co/t/converting-more-than-one-column-destroys-data/250161 "2020-09-28T16:26:11Z")

</div>

converting more than one column from string \> integer completely invalidates the logstash output. The values are interpreted as keys somehow What am I missing when converting? regardless of: CSV { convert =\> {}} mut…

---

## [Kibana 502 Bad gateway error](https://discuss.elastic.co/t/kibana-502-bad-gateway-error/250192)

<div class="topic-metadata">

**Author:** [@Krunal\_Patel1](https://discuss.elastic.co/u/Krunal_Patel1)\
**Replies:** 6\
**Last updated:** [September 28, 2020, 4:01pm UTC](https://discuss.elastic.co/t/kibana-502-bad-gateway-error/250192 "2020-09-28T16:01:14Z")

</div>

Hi, I'm taking the "Data Analysis with Kibana (On-Demand)", and I cannot access kibana. When I click the kibana link shown on the page "http://ec2-X-XXX-XXX-XX.eu-central-1.compute.amazonaws.com/", I get a 502 bad gatewa…

---

## [Current recommendations for large heaps (64GB+)](https://discuss.elastic.co/t/current-recommendations-for-large-heaps-64gb/249827)

<div class="topic-metadata">

**Author:** [@lechuck](https://discuss.elastic.co/u/lechuck)\
**Replies:** 4\
**Last updated:** [September 28, 2020, 3:55pm UTC](https://discuss.elastic.co/t/current-recommendations-for-large-heaps-64gb/249827 "2020-09-28T15:55:55Z")

</div>

Hey folks, I'd like to get an opinion on current recommendations for running Elasticsearch with large heaps (64-128GB) please. I understand ~30GB is generally recommended for most installs in order to benefit from com…

---

## [Strigo lab for Elastic Engineer I requiring username/password](https://discuss.elastic.co/t/strigo-lab-for-elastic-engineer-i-requiring-username-password/250223)

<div class="topic-metadata">

**Author:** [@ashaman](https://discuss.elastic.co/u/ashaman)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 3:52pm UTC](https://discuss.elastic.co/t/strigo-lab-for-elastic-engineer-i-requiring-username-password/250223 "2020-09-28T15:52:03Z")

</div>

Hi, I'm enrolled in the Elastic Engineer I On-Demand and after signing up for the lab, the video directs me to copy the FQDN of the machine and open it in a new tab. When I do so, the web application on there prompts m…

---

## [Life Policy зависает на шаге Cold. Не переводя индекс в статус Frozen](https://discuss.elastic.co/t/life-policy-cold-frozen/249967)

<div class="topic-metadata">

**Author:** [@menes](https://discuss.elastic.co/u/menes)\
**Replies:** 3\
**Last updated:** [September 28, 2020, 3:51pm UTC](https://discuss.elastic.co/t/life-policy-cold-frozen/249967 "2020-09-28T15:51:19Z")

</div>

Добрый день. Создал индекс правилом PUT filebeat-000001 { "aliases": { "filebeat":{ "is\_write\_index": true } }, "settings": { "index.write.wait\_for\_active\_shards": "1" } } С правилом PUT \_ilm/policy/my\_poli…

---

## [Using Java\_line codec on Kafka input](https://discuss.elastic.co/t/using-java-line-codec-on-kafka-input/250224)

<div class="topic-metadata">

**Author:** [@kbrisso](https://discuss.elastic.co/u/kbrisso)\
**Replies:** 0\
**Last updated:** [September 28, 2020, 3:39pm UTC](https://discuss.elastic.co/t/using-java-line-codec-on-kafka-input/250224 "2020-09-28T15:39:03Z")

</div>

Hello- Would this be a valid way to configure the java\_line codec for the Kafka input? I need to parse events with a custom line terminator like below. Currently I have \\n in my debug statements and \\n for line terminat…

---

## [Logstash JVM Settings](https://discuss.elastic.co/t/logstash-jvm-settings/250219)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 3:37pm UTC](https://discuss.elastic.co/t/logstash-jvm-settings/250219 "2020-09-28T15:37:15Z")

</div>

Hi, When running larger heap sizes (6-8GB+) would logstash benefit from using G1 garbage collection? Thx D

---

## [Terms list may be incomplete becasue the request is taking to long 7.8.0 autocompleteTerminate after not working](https://discuss.elastic.co/t/terms-list-may-be-incomplete-becasue-the-request-is-taking-to-long-7-8-0-autocompleteterminate-after-not-working/250201)

<div class="topic-metadata">

**Author:** [@madison](https://discuss.elastic.co/u/madison)\
**Replies:** 5\
**Last updated:** [September 28, 2020, 3:32pm UTC](https://discuss.elastic.co/t/terms-list-may-be-incomplete-becasue-the-request-is-taking-to-long-7-8-0-autocompleteterminate-after-not-working/250201 "2020-09-28T15:32:53Z")

</div>

We upgraded from 7.6.2 to 7.8.0 recently. The number of documents/shards have not change, but the controls visualization is now showing the error saying "Terms list may be incomplete because the request is taking too lon…

---

## [RuntimeError: attempted adding second root element to document](https://discuss.elastic.co/t/runtimeerror-attempted-adding-second-root-element-to-document/250146)

<div class="topic-metadata">

**Author:** [@Dinesh\_Potey](https://discuss.elastic.co/u/Dinesh_Potey)\
**Replies:** 4\
**Last updated:** [September 28, 2020, 3:12pm UTC](https://discuss.elastic.co/t/runtimeerror-attempted-adding-second-root-element-to-document/250146 "2020-09-28T15:12:52Z")

</div>

Hi, I am facing below error while Logstash is parsing my xml file which was extracted for the given pattern. DUe to this error , I am not able to create visualisation as well as the required fields in Visualisation is n…

---

## [Matching with analyzer](https://discuss.elastic.co/t/matching-with-analyzer/250214)

<div class="topic-metadata">

**Author:** [@st1nc1ty](https://discuss.elastic.co/u/st1nc1ty)\
**Replies:** 0\
**Last updated:** [September 28, 2020, 3:00pm UTC](https://discuss.elastic.co/t/matching-with-analyzer/250214 "2020-09-28T15:00:52Z")

</div>

I've got a fairly simple index that has a first and last name that are both have an ngram analyzer attached. It's working well as I can search "ali" and get "alice" among others. I probably already know the answer but …

---

## [I want to change the Kibana logo and customized the page](https://discuss.elastic.co/t/i-want-to-change-the-kibana-logo-and-customized-the-page/248322)

<div class="topic-metadata">

**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\
**Replies:** 4\
**Last updated:** [September 28, 2020, 2:35pm UTC](https://discuss.elastic.co/t/i-want-to-change-the-kibana-logo-and-customized-the-page/248322 "2020-09-28T14:35:35Z")

</div>

Login logo (welcome screen) Change login in Select Space Change login in Header Change loading screen Change favicon

---

## [Kibana - Gauge - fetch data based on threshold](https://discuss.elastic.co/t/kibana-gauge-fetch-data-based-on-threshold/250206)

<div class="topic-metadata">

**Author:** [@prashu421](https://discuss.elastic.co/u/prashu421)\
**Replies:** 0\
**Last updated:** [September 28, 2020, 2:11pm UTC](https://discuss.elastic.co/t/kibana-gauge-fetch-data-based-on-threshold/250206 "2020-09-28T14:11:40Z")

</div>

Hello, I am working with AWS Elasticsearch and have recently started looking into the Kibana Visualizations, I came across a blocker that I am not able to figure how to fix. I have data coming in from certain pipelines…

---

## [Is my scenario a good candidate to use ElasticSearch?](https://discuss.elastic.co/t/is-my-scenario-a-good-candidate-to-use-elasticsearch/250034)

<div class="topic-metadata">

**Author:** [@coderberry](https://discuss.elastic.co/u/coderberry)\
**Replies:** 2\
**Last updated:** [September 28, 2020, 1:43pm UTC](https://discuss.elastic.co/t/is-my-scenario-a-good-candidate-to-use-elasticsearch/250034 "2020-09-28T13:43:26Z")

</div>

I work for a real estate company that pulls MLS data from over 500 different sources. We are currently storing the listing property data as a flat jsonb document within Postgres. For example, one MLS might have the follo…

---

## [Grok Debugger not shown in Dev Tools](https://discuss.elastic.co/t/grok-debugger-not-shown-in-dev-tools/249853)

<div class="topic-metadata">

**Author:** [@willis](https://discuss.elastic.co/u/willis)\
**Replies:** 4\
**Last updated:** [September 28, 2020, 1:36pm UTC](https://discuss.elastic.co/t/grok-debugger-not-shown-in-dev-tools/249853 "2020-09-28T13:36:08Z")

</div>

We are using Kibana 7.6.2. X-Pack Security is enabled, confirmed by making a request to GET \_xpack?pretty. Currently logged into Kibana with the elastic user. However, I don't see the Grok Debugger in Dev Tools. What am…

---

## [How to restore an index](https://discuss.elastic.co/t/how-to-restore-an-index/250173)

<div class="topic-metadata">

**Author:** [@DENMODSupport](https://discuss.elastic.co/u/DENMODSupport)\
**Replies:** 6\
**Last updated:** [September 28, 2020, 1:13pm UTC](https://discuss.elastic.co/t/how-to-restore-an-index/250173 "2020-09-28T13:13:48Z")

</div>

We have accidentally deleted an index through Cerebro. But we have backup of that deleted index folder from server backup. Could you please let me know how to restore that deleted index from that server backup?

---

## [Does Text Analysis increaase CPU utilization](https://discuss.elastic.co/t/does-text-analysis-increaase-cpu-utilization/249078)

<div class="topic-metadata">

**Author:** [@dimm](https://discuss.elastic.co/u/dimm)\
**Replies:** 5\
**Last updated:** [September 28, 2020, 12:43pm UTC](https://discuss.elastic.co/t/does-text-analysis-increaase-cpu-utilization/249078 "2020-09-28T12:43:54Z")

</div>

Hi, I want to add some analyzer to tokenize text fields in some specific way, will it have impact to ES cluster resourses utilization (CPU, ... )? If yes, how significant? thanks

---

## [Convert Date String Into Date Format](https://discuss.elastic.co/t/convert-date-string-into-date-format/250153)

<div class="topic-metadata">

**Author:** [@wahzix](https://discuss.elastic.co/u/wahzix)\
**Replies:** 2\
**Last updated:** [September 28, 2020, 12:40pm UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/250153 "2020-09-28T12:40:59Z")

</div>

Hi, I want to convert a date which is like this : 2020-09-18 15:42:41.5721 To do so, I have tried to use date plugin but it seems that it doesn't work. I have this \_dateparsefailure and my @timestamp hasn't changed …

---

## [ELK Setup in AWS EKS](https://discuss.elastic.co/t/elk-setup-in-aws-eks/250183)

<div class="topic-metadata">

**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\
**Replies:** 0\
**Last updated:** [September 28, 2020, 12:30pm UTC](https://discuss.elastic.co/t/elk-setup-in-aws-eks/250183 "2020-09-28T12:30:12Z")

</div>

Hi, We are planning to go for on premise ELK setup on AWS ELK (Kubernetes) for Infra/APM/Log Monitoring. I would like to know which EC2 slave machines are best suited for this. And which storage type is suited for this…

---

## [Indexing to Multiple Endpoints](https://discuss.elastic.co/t/indexing-to-multiple-endpoints/250166)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 12:28pm UTC](https://discuss.elastic.co/t/indexing-to-multiple-endpoints/250166 "2020-09-28T12:28:33Z")

</div>

Hi, In a single pipeline scenario, how much of a performance cost is there to having more than one output configured? Will all outputs run at the speed of the slowest? Thx D

---

## [Manage different type of logs with logstash](https://discuss.elastic.co/t/manage-different-type-of-logs-with-logstash/249964)

<div class="topic-metadata">

**Author:** [@Luca\_Padovan](https://discuss.elastic.co/u/Luca_Padovan)\
**Replies:** 4\
**Last updated:** [September 28, 2020, 12:05pm UTC](https://discuss.elastic.co/t/manage-different-type-of-logs-with-logstash/249964 "2020-09-28T12:05:58Z")

</div>

I'm trying to managing different type of logs with logstash, but i don't see them in kibana. logstash pipeline: input { udp { port =\> 5000 type =\> "heartbeat" } udp { port =\> 6000 type =\> "startup\_shutdown" …

---

## [Creating and Recycling Dashboard Template over multiple indices](https://discuss.elastic.co/t/creating-and-recycling-dashboard-template-over-multiple-indices/250169)

<div class="topic-metadata">

**Author:** [@Max\_Handle](https://discuss.elastic.co/u/Max_Handle)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 11:46am UTC](https://discuss.elastic.co/t/creating-and-recycling-dashboard-template-over-multiple-indices/250169 "2020-09-28T11:46:05Z")

</div>

Hi, I am relatively new to Kibana and elastic. But for quite some time I am struggling to to find an answer to this question: Is it possible with Kibana to create a Dashboard template, that I can re-use for different in…

---

## [ECK License](https://discuss.elastic.co/t/eck-license/250165)

<div class="topic-metadata">

**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\
**Replies:** 0\
**Last updated:** [September 28, 2020, 10:25am UTC](https://discuss.elastic.co/t/eck-license/250165 "2020-09-28T10:25:26Z")

</div>

How does ECK license works if I have to deploy ECK in multiple instances at different network under GCP

---

## [How create histogram with fixed bucket](https://discuss.elastic.co/t/how-create-histogram-with-fixed-bucket/250142)

<div class="topic-metadata">

**Author:** [@natthawut](https://discuss.elastic.co/u/natthawut)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 10:24am UTC](https://discuss.elastic.co/t/how-create-histogram-with-fixed-bucket/250142 "2020-09-28T10:24:02Z")

</div>

I try to create histogram by fixed minimum interval=5 when histogram generate It auto generate bucket to 400 or something was not interval then i fixed.

---

## [Index patterns keep disappearing](https://discuss.elastic.co/t/index-patterns-keep-disappearing/249965)

<div class="topic-metadata">

**Author:** [@mutt13y](https://discuss.elastic.co/u/mutt13y)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 10:15am UTC](https://discuss.elastic.co/t/index-patterns-keep-disappearing/249965 "2020-09-28T10:15:49Z")

</div>

Hi I was experiencing this issue, I see it has been reported previously. As it seems there were no solutions I though I would post my findings. I determined that the cause was that I had defined a catchall index-templ…

---

## [Mapping not respected](https://discuss.elastic.co/t/mapping-not-respected/249670)

<div class="topic-metadata">

**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\
**Replies:** 4\
**Last updated:** [September 28, 2020, 9:55am UTC](https://discuss.elastic.co/t/mapping-not-respected/249670 "2020-09-28T09:55:35Z")

</div>

Hi, In Elastic 7.9.1I have this template (which is considered 'legacy' for some reason) which has several mappings like for example this one: However, when I look at the actual index I see everything is mapped as te…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1217)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1219)
