# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1270

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1271

---

## [Integrating with mongodb, logstash, elasticsearch and kibana](https://discuss.elastic.co/t/integrating-with-mongodb-logstash-elasticsearch-and-kibana/245761)

<div class="topic-metadata">

**Author:** [@soviek](https://discuss.elastic.co/u/soviek)\
**Replies:** 2\
**Last updated:** [August 23, 2020, 4:26pm UTC](https://discuss.elastic.co/t/integrating-with-mongodb-logstash-elasticsearch-and-kibana/245761 "2020-08-23T16:26:10Z")

</div>

What is the best way to integrate more than one collection of mongodb into Kibana via Logstash and Elasticsearch. I tried below 2 options but can't see all fields in Kibana. Because of that I am not able to join 4 collec…

---

## [NodeBuilder replacement](https://discuss.elastic.co/t/nodebuilder-replacement/245993)

<div class="topic-metadata">

**Author:** [@Pete\_Watcharawit](https://discuss.elastic.co/u/Pete_Watcharawit)\
**Replies:** 3\
**Last updated:** [August 23, 2020, 12:37pm UTC](https://discuss.elastic.co/t/nodebuilder-replacement/245993 "2020-08-23T12:37:00Z")

</div>

I am new to ES and trying to upgrade ES from 2.3 to 7.8. The following lines of code containing NodeBuilder are deprecated. import org.elasticsearch.common.settings.Settings; import org.elasticsearch.node.NodeBuilder; …

---

## [Ansi encoding for output of logstash](https://discuss.elastic.co/t/ansi-encoding-for-output-of-logstash/246014)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 0\
**Last updated:** [August 23, 2020, 11:04am UTC](https://discuss.elastic.co/t/ansi-encoding-for-output-of-logstash/246014 "2020-08-23T11:04:41Z")

</div>

Hi all, I want to save data as a txt file based on the ansi encoding using logstash. Logstash output is as following which ANSI\_X3.4-1968 codec is used to encode output in Ansi. But, when i check the encoding of data202…

---

## [Kibana.service holdoff time over, scheduling restart](https://discuss.elastic.co/t/kibana-service-holdoff-time-over-scheduling-restart/245700)

<div class="topic-metadata">

**Author:** [@Kra3](https://discuss.elastic.co/u/Kra3)\
**Replies:** 4\
**Last updated:** [August 23, 2020, 7:43am UTC](https://discuss.elastic.co/t/kibana-service-holdoff-time-over-scheduling-restart/245700 "2020-08-23T07:43:35Z")

</div>

● kibana.service - Kibana Loaded: loaded (/etc/systemd/system/kibana.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2020-08-20 04:29:53 UTC; 30s ago Main PID: 313 (node) CGroup: /system…

---

## [Collect Logs and Metrics from EKS control plane](https://discuss.elastic.co/t/collect-logs-and-metrics-from-eks-control-plane/246000)

<div class="topic-metadata">

**Author:** [@jinkim59](https://discuss.elastic.co/u/jinkim59)\
**Replies:** 0\
**Last updated:** [August 22, 2020, 10:52pm UTC](https://discuss.elastic.co/t/collect-logs-and-metrics-from-eks-control-plane/246000 "2020-08-22T22:52:39Z")

</div>

As EKS is a managed AWS Kubernetes service, we can NOT install Elastic agents (FileBeat, MetricBeat, etc.) on a EKS control pane. Would you help me for the best way to collect control plane logging and metrics, and inde…

---

## [Comparing metric over two time duration under same index](https://discuss.elastic.co/t/comparing-metric-over-two-time-duration-under-same-index/245964)

<div class="topic-metadata">

**Author:** [@SUMANTA\_ROY](https://discuss.elastic.co/u/SUMANTA_ROY)\
**Replies:** 6\
**Last updated:** [August 22, 2020, 8:45pm UTC](https://discuss.elastic.co/t/comparing-metric-over-two-time-duration-under-same-index/245964 "2020-08-22T20:45:51Z")

</div>

Hi, I am trying to find a way to visualize a bar chart displaying a metric value side by side (two different time periods), from the same index. Example : Comparing avg. attendance of class for 15 days of April month w…

---

## [Data Formatter in TSVB visualization](https://discuss.elastic.co/t/data-formatter-in-tsvb-visualization/245982)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 1\
**Last updated:** [August 22, 2020, 2:14pm UTC](https://discuss.elastic.co/t/data-formatter-in-tsvb-visualization/245982 "2020-08-22T14:14:09Z")

</div>

Hi , i use kibana 7.7.0. i create a TSVB visualization : X-axis: sum of credit and sum of debit Y-axis: date per day . in my index the fields "credit" and "debit" are a number with a format string. i like to dis…

---

## [Date field format issue](https://discuss.elastic.co/t/date-field-format-issue/245988)

<div class="topic-metadata">

**Author:** [@razor-tazor](https://discuss.elastic.co/u/razor-tazor)\
**Replies:** 3\
**Last updated:** [August 22, 2020, 1:45pm UTC](https://discuss.elastic.co/t/date-field-format-issue/245988 "2020-08-22T13:45:12Z")

</div>

I have the following query that I'm trying to run on Elasticsearch 5.6 in Kibana Dev Tools: { "query": { "bool": { "filter": { "bool": { "must": \[ { "range": {…

---

## [Exporting saved search in Discover(more than 2GB)](https://discuss.elastic.co/t/exporting-saved-search-in-discover-more-than-2gb/244393)

<div class="topic-metadata">

**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\
**Replies:** 2\
**Last updated:** [August 22, 2020, 1:42pm UTC](https://discuss.elastic.co/t/exporting-saved-search-in-discover-more-than-2gb/244393 "2020-08-22T13:42:48Z")

</div>

I have problem of exporting data of saved search when exporting more than 2 GB The error: Max attempts reached How can I fix it? Please, Thanks, Liron Gofberg

---

## [Signal detection ML rule not working](https://discuss.elastic.co/t/signal-detection-ml-rule-not-working/245984)

<div class="topic-metadata">

**Author:** [@SUNILKUMAR\_BATANA](https://discuss.elastic.co/u/SUNILKUMAR_BATANA)\
**Replies:** 0\
**Last updated:** [August 22, 2020, 12:01pm UTC](https://discuss.elastic.co/t/signal-detection-ml-rule-not-working/245984 "2020-08-22T12:01:15Z")

</div>

Hi, I tried to create a ML rule for detecting signals when there is an anomaly in a ML job. The ML job is clearly showing anomalies but the rule is not detecting signals. Further, the rule is getting executed successf…

---

## [Kibana not showing all documents in index](https://discuss.elastic.co/t/kibana-not-showing-all-documents-in-index/245979)

<div class="topic-metadata">

**Author:** [@Diederik\_Mathijs](https://discuss.elastic.co/u/Diederik_Mathijs)\
**Replies:** 7\
**Last updated:** [August 22, 2020, 10:30am UTC](https://discuss.elastic.co/t/kibana-not-showing-all-documents-in-index/245979 "2020-08-22T10:30:13Z")

</div>

Hi, I'm having an issue with Kibana (I'm running es 7.9.0 and kb 7.9.0). In Kibana under my index management I see that the 'mag\_mapping' index contains 50 million documents. However, when I look in the Kibana discover …

---

## [How to enable special characters search when using simple query string](https://discuss.elastic.co/t/how-to-enable-special-characters-search-when-using-simple-query-string/245972)

<div class="topic-metadata">

**Author:** [@Dpsoniapandey](https://discuss.elastic.co/u/Dpsoniapandey)\
**Replies:** 1\
**Last updated:** [August 22, 2020, 9:58am UTC](https://discuss.elastic.co/t/how-to-enable-special-characters-search-when-using-simple-query-string/245972 "2020-08-22T09:58:07Z")

</div>

Hi Team, I have to enable search for all type of special character when using simple query string. Please help me wit analyzer and tokeniser which is to use.

---

## [How to enable special characters search in simple query string](https://discuss.elastic.co/t/how-to-enable-special-characters-search-in-simple-query-string/245973)

<div class="topic-metadata">

**Author:** [@divya005](https://discuss.elastic.co/u/divya005)\
**Replies:** 1\
**Last updated:** [August 22, 2020, 7:30am UTC](https://discuss.elastic.co/t/how-to-enable-special-characters-search-in-simple-query-string/245973 "2020-08-22T07:30:43Z")

</div>

Hi Team, I have to enable search for all type of special character when using simple query string. Please help me wit analyzer and tokeniser which is to use. Thanks, Divya

---

## [Best approch to collect log files to elasticsearch in AIX OS](https://discuss.elastic.co/t/best-approch-to-collect-log-files-to-elasticsearch-in-aix-os/245859)

<div class="topic-metadata">

**Author:** [@renu\_jessi](https://discuss.elastic.co/u/renu_jessi)\
**Replies:** 3\
**Last updated:** [August 22, 2020, 5:40am UTC](https://discuss.elastic.co/t/best-approch-to-collect-log-files-to-elasticsearch-in-aix-os/245859 "2020-08-22T05:40:41Z")

</div>

Hi all, Iam working on elastic stack.I need to collect logs from files to create index in elasticsearch.as i can see beats and jdk dont have support in aix os.so filebeat and logstash isn't workout it seems. can u pls …

---

## [Is it possible to remove node from ES 6.8?](https://discuss.elastic.co/t/is-it-possible-to-remove-node-from-es-6-8/245583)

<div class="topic-metadata">

**Author:** [@tarkhil](https://discuss.elastic.co/u/tarkhil)\
**Replies:** 4\
**Last updated:** [August 22, 2020, 5:35am UTC](https://discuss.elastic.co/t/is-it-possible-to-remove-node-from-es-6-8/245583 "2020-08-22T05:35:44Z")

</div>

Hello I've set up a server, started a ES 6.8 instance, run it for a while in cluster and found an error in disk setup requiring me to reinstall everything starting from OS. As far as I can understand, I have only one o…

---

## [Logstash error - bootstrap broker disconnected](https://discuss.elastic.co/t/logstash-error-bootstrap-broker-disconnected/245965)

<div class="topic-metadata">

**Author:** [@chandramouli\_sriniva](https://discuss.elastic.co/u/chandramouli_sriniva)\
**Replies:** 1\
**Last updated:** [August 21, 2020, 11:31pm UTC](https://discuss.elastic.co/t/logstash-error-bootstrap-broker-disconnected/245965 "2020-08-21T23:31:53Z")

</div>

we are sending logs from file.txt to Kafka(SASL\_SSL with kerberos). Below are the parm being set in conf file: bootstrap\_servers =\> "broker:9093" codec =\> json topic\_id =\> "topic" jaas\_path =\> "jaas.conf" kerberos\_conf…

---

## [Alphabetical sorting of numeric labels not working](https://discuss.elastic.co/t/alphabetical-sorting-of-numeric-labels-not-working/245940)

<div class="topic-metadata">

**Author:** [@Dennis1](https://discuss.elastic.co/u/Dennis1)\
**Replies:** 3\
**Last updated:** [August 21, 2020, 10:30pm UTC](https://discuss.elastic.co/t/alphabetical-sorting-of-numeric-labels-not-working/245940 "2020-08-21T22:30:35Z")

</div>

I'm trying to order the response code labels in my stacked bar graph to be descending alphabetical, but it doesn't appear to be working properly. Further, when I select 'ascending', the response codes are re-ordered in s…

---

## [Using output Kafka Codec Avro with KafkaAvroSerializer (schema\_registry\_url issue)](https://discuss.elastic.co/t/using-output-kafka-codec-avro-with-kafkaavroserializer-schema-registry-url-issue/245953)

<div class="topic-metadata">

**Author:** [@belguith\_chachia](https://discuss.elastic.co/u/belguith_chachia)\
**Replies:** 1\
**Last updated:** [August 21, 2020, 9:19pm UTC](https://discuss.elastic.co/t/using-output-kafka-codec-avro-with-kafkaavroserializer-schema-registry-url-issue/245953 "2020-08-21T21:19:54Z")

</div>

Hi guys, Our purpose is to post messages to event bus Kafka using Avro. We added all required jars libraries in LS\_HOME/vendor/jruby/lib/ And Logstash does recognize KafkaAvroSerializer and all other required classes…

---

## [Elastic Search with Docker](https://discuss.elastic.co/t/elastic-search-with-docker/245946)

<div class="topic-metadata">

**Author:** [@nages](https://discuss.elastic.co/u/nages)\
**Replies:** 8\
**Last updated:** [August 21, 2020, 8:43pm UTC](https://discuss.elastic.co/t/elastic-search-with-docker/245946 "2020-08-21T20:43:04Z")

</div>

I ran the following docker compose script and I am expecting two nodes to be up, however this only one. There seems to be some obvious error , please suggest your inputs Taken from the documentation https://www.elastic.…

---

## [\[Ingest Management\] - Multiple configs per agent?](https://discuss.elastic.co/t/ingest-management-multiple-configs-per-agent/245922)

<div class="topic-metadata">

**Author:** [@tjfred](https://discuss.elastic.co/u/tjfred)\
**Replies:** 1\
**Last updated:** [August 21, 2020, 7:53pm UTC](https://discuss.elastic.co/t/ingest-management-multiple-configs-per-agent/245922 "2020-08-21T19:53:30Z")

</div>

Hello, I'm trying out the new Ingest Manager on 7.9.1, all looks great! I was wondering if anyone could clarify how best to design configurations and integrations. Consider this setup: All hosts require "System" and …

---

## [Kibana 7.8, Apache HTTPD proxy, internal server error](https://discuss.elastic.co/t/kibana-7-8-apache-httpd-proxy-internal-server-error/245308)

<div class="topic-metadata">

**Author:** [@hanover23](https://discuss.elastic.co/u/hanover23)\
**Replies:** 2\
**Last updated:** [August 21, 2020, 7:44pm UTC](https://discuss.elastic.co/t/kibana-7-8-apache-httpd-proxy-internal-server-error/245308 "2020-08-21T19:44:50Z")

</div>

I have seen nginx is a documented way to proxy requests to a local Kibana listening on TCP 5601, but I am wondering if anyone has experience getting this to work with Apache HTTPD. I have a Kibana 7.8.0-1 instance that …

---

## [System has not been booted with systemd as init system (PID 1). Can't operate](https://discuss.elastic.co/t/system-has-not-been-booted-with-systemd-as-init-system-pid-1-cant-operate/245954)

<div class="topic-metadata">

**Author:** [@Yanyan\_Liang](https://discuss.elastic.co/u/Yanyan_Liang)\
**Replies:** 0\
**Last updated:** [August 21, 2020, 7:20pm UTC](https://discuss.elastic.co/t/system-has-not-been-booted-with-systemd-as-init-system-pid-1-cant-operate/245954 "2020-08-21T19:20:17Z")

</div>

I can't start logstash in Ubuntu (wsl 2). My command is as follows: Anyone has the same problem and how to solve it? Many thanks!

---

## [S3 Input Plugin Following Errors Execution Expired and Net::OpenTimeout](https://discuss.elastic.co/t/s3-input-plugin-following-errors-execution-expired-and-net-opentimeout/245951)

<div class="topic-metadata">

**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\
**Replies:** 0\
**Last updated:** [August 21, 2020, 6:46pm UTC](https://discuss.elastic.co/t/s3-input-plugin-following-errors-execution-expired-and-net-opentimeout/245951 "2020-08-21T18:46:06Z")

</div>

I've been trying to use s3 input plugin in Logstash to pull data from the Tencent COS (cloud object storage). They're claiming they're using the AWS SDK. It works fine, I'm able to pull the COS data just fine, but it tim…

---

## [Logstash map id always detected as long, even it string](https://discuss.elastic.co/t/logstash-map-id-always-detected-as-long-even-it-string/245843)

<div class="topic-metadata">

**Author:** [@bayucandra](https://discuss.elastic.co/u/bayucandra)\
**Replies:** 2\
**Last updated:** [August 21, 2020, 5:21pm UTC](https://discuss.elastic.co/t/logstash-map-id-always-detected-as-long-even-it-string/245843 "2020-08-21T17:21:57Z")

</div>

Hi, Based on logs below, I assume that my logstsh always consider any record with field named "id" as a "long", even it "string". \[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[f4110a8e1e28ebbac18f43191bfa4dea9a1b050d31…

---

## [Logstash Date Filter not working on Kibana](https://discuss.elastic.co/t/logstash-date-filter-not-working-on-kibana/245822)

<div class="topic-metadata">

**Author:** [@userR](https://discuss.elastic.co/u/userR)\
**Replies:** 9\
**Last updated:** [August 21, 2020, 4:52pm UTC](https://discuss.elastic.co/t/logstash-date-filter-not-working-on-kibana/245822 "2020-08-21T16:52:48Z")

</div>

date { match =\> \["logdate", "YYYY.MM.dd HH:mm:ss,SSS"\] target =\> "logdate" } Above is my date filter configuration on my logstash config file. On kibana, when I create an index pattern, the only date option that sh…

---

## [E-commerce products with prices per customer](https://discuss.elastic.co/t/e-commerce-products-with-prices-per-customer/245832)

<div class="topic-metadata">

**Author:** [@dndeus](https://discuss.elastic.co/u/dndeus)\
**Replies:** 8\
**Last updated:** [August 21, 2020, 4:15pm UTC](https://discuss.elastic.co/t/e-commerce-products-with-prices-per-customer/245832 "2020-08-21T16:15:19Z")

</div>

Hello there! Let me give you the use case. I need to build this b2b commerce where the prices for each product is different for every logged in customer. One of the functionalities is, the customer should be able to fi…

---

## [Logstash restarts continuously with below error when enabling ilm](https://discuss.elastic.co/t/logstash-restarts-continuously-with-below-error-when-enabling-ilm/245934)

<div class="topic-metadata">

**Author:** [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)\
**Replies:** 1\
**Last updated:** [August 21, 2020, 3:48pm UTC](https://discuss.elastic.co/t/logstash-restarts-continuously-with-below-error-when-enabling-ilm/245934 "2020-08-21T15:48:20Z")

</div>

Hello, Am working on ilm settings in elasticsearch output plugin(logstash plugin) and I see Logstash restarts continuously with below error. \[2020-08-21T16:35:08,665\]\[FATAL\]\[logstash.runner \] An unexpected err…

---

## [Time Series Visual Builder - regexing top n field responses](https://discuss.elastic.co/t/time-series-visual-builder-regexing-top-n-field-responses/245582)

<div class="topic-metadata">

**Author:** [@Marcus\_Webb](https://discuss.elastic.co/u/Marcus_Webb)\
**Replies:** 2\
**Last updated:** [August 21, 2020, 3:39pm UTC](https://discuss.elastic.co/t/time-series-visual-builder-regexing-top-n-field-responses/245582 "2020-08-21T15:39:26Z")

</div>

Hi Guys I know that the Timelion feature is being deprecated so I'm learning TSVB and fast. My question is this: I have a field called responsefield which contains literally thousands of possibilities, as there are var…

---

## [Combine terms of multiple fields into one bucket aggregation](https://discuss.elastic.co/t/combine-terms-of-multiple-fields-into-one-bucket-aggregation/245935)

<div class="topic-metadata">

**Author:** [@tiptobi](https://discuss.elastic.co/u/tiptobi)\
**Replies:** 0\
**Last updated:** [August 21, 2020, 3:37pm UTC](https://discuss.elastic.co/t/combine-terms-of-multiple-fields-into-one-bucket-aggregation/245935 "2020-08-21T15:37:29Z")

</div>

Hi community, Given the following index which contains media and its related products (simplified): { "media": { "mappings": { "doc": { "properties": { "color": { "type"…

---

## [Filebeat NGINX-Plugin sending multiples separate lines as one event](https://discuss.elastic.co/t/filebeat-nginx-plugin-sending-multiples-separate-lines-as-one-event/245933)

<div class="topic-metadata">

**Author:** [@iceman91176](https://discuss.elastic.co/u/iceman91176)\
**Replies:** 0\
**Last updated:** [August 21, 2020, 3:33pm UTC](https://discuss.elastic.co/t/filebeat-nginx-plugin-sending-multiples-separate-lines-as-one-event/245933 "2020-08-21T15:33:27Z")

</div>

We have deployed filebeat as kubernetes daemon set and are using hint based configuration to send logs to logstash. Here is the filebeat configuration filebeat.autodiscover: providers: - type: kubernetes host:…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1269)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1271)
