# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1285 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1286 --- ## [Elasticsearch cluster architecture](https://discuss.elastic.co/t/elasticsearch-cluster-architecture/244057)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 15\ **Last updated:** [August 13, 2020, 9:18am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-architecture/244057 "2020-08-13T09:18:15Z")
I am planning to deploy a cluster with 2 nodes. Following is the proposed architecture, I would like a community review. Purpose: Non-enterprise. Final year project that will be collecting data from internet sensors (… --- ## [Created plugin, runs locally, won't build](https://discuss.elastic.co/t/created-plugin-runs-locally-wont-build/244782)
**Author:** [@bababrownbear](https://discuss.elastic.co/u/bababrownbear)\ **Replies:** 2\ **Last updated:** [August 13, 2020, 9:13am UTC](https://discuss.elastic.co/t/created-plugin-runs-locally-wont-build/244782 "2020-08-13T09:13:55Z")
Hello all! I'm having trouble finding help on this issue please. I've created a Kibana plugin following this: https://github.com/elastic/kibana/tree/master/packages/kbn-plugin-generator When I run 'yarn build' it fail… --- ## [Non master node not able to join a master node](https://discuss.elastic.co/t/non-master-node-not-able-to-join-a-master-node/244825)
**Author:** [@dishant.chawla.338](https://discuss.elastic.co/u/dishant.chawla.338)\ **Replies:** 2\ **Last updated:** [August 13, 2020, 8:58am UTC](https://discuss.elastic.co/t/non-master-node-not-able-to-join-a-master-node/244825 "2020-08-13T08:58:36Z")
I'm initializing a cluster with 2 node setup more nodes will be joining the cluster in near future.Both nodes are on different machine. One node will be a master node with the below configuration: transport.host: local… --- ## [Kibana: 405 response code on refreshing index pattern’s field list](https://discuss.elastic.co/t/kibana-405-response-code-on-refreshing-index-pattern-s-field-list/238205)
**Author:** [@MRC1](https://discuss.elastic.co/u/MRC1)\ **Replies:** 6\ **Last updated:** [August 13, 2020, 8:50am UTC](https://discuss.elastic.co/t/kibana-405-response-code-on-refreshing-index-pattern-s-field-list/238205 "2020-08-13T08:50:34Z")
Hi, all. This is an issue I've seen posted previously in this forum but with no actual answer. When trying to refresh the field list of an index pattern I get a 405 error response. This the error message: Error: … --- ## [Multi-tenancy with Elastic SIEM detection rules](https://discuss.elastic.co/t/multi-tenancy-with-elastic-siem-detection-rules/244548)
**Author:** [@admlko](https://discuss.elastic.co/u/admlko)\ **Replies:** 4\ **Last updated:** [August 13, 2020, 8:35am UTC](https://discuss.elastic.co/t/multi-tenancy-with-elastic-siem-detection-rules/244548 "2020-08-13T08:35:03Z")
Hi, Multi-tenancy can be easily gained with ML detection rules using partition field. Just partition based on the field containing customer id. Could this same approach be used with SIEM detection rules? If I have und… --- ## [Question of NormalFlush](https://discuss.elastic.co/t/question-of-normalflush/244823)
**Author:** [@Charele](https://discuss.elastic.co/u/Charele)\ **Replies:** 0\ **Last updated:** [August 13, 2020, 8:18am UTC](https://discuss.elastic.co/t/question-of-normalflush/244823 "2020-08-13T08:18:35Z")
I have a question,here, who can resolve my question?Thanks! --- ## [Date Filter Question](https://discuss.elastic.co/t/date-filter-question/244816)
**Author:** [@kvtang](https://discuss.elastic.co/u/kvtang)\ **Replies:** 2\ **Last updated:** [August 13, 2020, 8:08am UTC](https://discuss.elastic.co/t/date-filter-question/244816 "2020-08-13T08:08:26Z")
Hi all, Currently I have a use case where I have to do some calculation on the time, therefore I need to use date filter plugin in order to parse dates from field. But I dont want to use that date or timestamp as the l… --- ## [Problem for using regexp in DSL](https://discuss.elastic.co/t/problem-for-using-regexp-in-dsl/244809)
**Author:** [@Mrzhuang007](https://discuss.elastic.co/u/Mrzhuang007)\ **Replies:** 1\ **Last updated:** [August 13, 2020, 8:07am UTC](https://discuss.elastic.co/t/problem-for-using-regexp-in-dsl/244809 "2020-08-13T08:07:22Z")
ES version: 6.8.6 use something like this GET \_search { "query": { "regexp": { "message": ".\*error.\*" } } } I can get some result, for example { "\_index" : "filebeat-6.8.6-2020.08.13", … --- ## [Mapper\_parsing\_exception](https://discuss.elastic.co/t/mapper-parsing-exception/244695)
**Author:** [@venugrd](https://discuss.elastic.co/u/venugrd)\ **Replies:** 6\ **Last updated:** [August 13, 2020, 7:38am UTC](https://discuss.elastic.co/t/mapper-parsing-exception/244695 "2020-08-13T07:38:02Z")
Hi I am facing mapper parsing exception, when i store data in elastic index. please help me to fix this issue Error: Log: 2020-08-11 20:50:31,423 ERROR SQL elastic insert error: ('7 document(s) failed to index.', \[{'i… --- ## [Kibana dashboard pass filters from control visualization to date histogram visualization](https://discuss.elastic.co/t/kibana-dashboard-pass-filters-from-control-visualization-to-date-histogram-visualization/244673)
**Author:** [@dpettas](https://discuss.elastic.co/u/dpettas)\ **Replies:** 2\ **Last updated:** [August 13, 2020, 7:29am UTC](https://discuss.elastic.co/t/kibana-dashboard-pass-filters-from-control-visualization-to-date-histogram-visualization/244673 "2020-08-13T07:29:54Z")
Hello, I am trying to deliver a Kibana dashboard providing counters' measurement data. There are two fields that identify counter measurement uniquely. DN(distinguished name) which describes counter measurement source(V… --- ## [Webpack error when trying to load CSS file in Kibana 7.8](https://discuss.elastic.co/t/webpack-error-when-trying-to-load-css-file-in-kibana-7-8/244629)
**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\ **Replies:** 4\ **Last updated:** [August 13, 2020, 7:09am UTC](https://discuss.elastic.co/t/webpack-error-when-trying-to-load-css-file-in-kibana-7-8/244629 "2020-08-13T07:09:44Z")
I have Kibana 7.8 running in a Docker container. I'm trying to pull over a plugin I have in Kibana 7.5. I load a CSS file from within my visualization.js file. In Kibana 7.8, it is giving me the following error when it t… --- ## [How to correctly use json fields?](https://discuss.elastic.co/t/how-to-correctly-use-json-fields/244811)
**Author:** [@jde](https://discuss.elastic.co/u/jde)\ **Replies:** 1\ **Last updated:** [August 13, 2020, 7:08am UTC](https://discuss.elastic.co/t/how-to-correctly-use-json-fields/244811 "2020-08-13T07:08:41Z")
Hello, I have an index like that : I have an ID which could have a list of detail contact. In my vizualisation, I try to display the number of contacts per channel. The result is 2 SMS and 2 EMAIL whereas i wa… --- ## [Division in Scripted field](https://discuss.elastic.co/t/division-in-scripted-field/244715)
**Author:** [@Ramadevi](https://discuss.elastic.co/u/Ramadevi)\ **Replies:** 9\ **Last updated:** [August 13, 2020, 7:04am UTC](https://discuss.elastic.co/t/division-in-scripted-field/244715 "2020-08-13T07:04:18Z")
Hi Team, We are trying to create percentage based on 2 specific properties using Scripted field in kibana. Below is the code int AF\_failures = 0; int FL\_failures = 0; int count = 0; if(!(doc\['MarketingCarrier.keyword… --- ## [WHAT SIEM CAN DO?](https://discuss.elastic.co/t/what-siem-can-do/244483)
**Author:** [@syafeera](https://discuss.elastic.co/u/syafeera)\ **Replies:** 3\ **Last updated:** [August 13, 2020, 6:56am UTC](https://discuss.elastic.co/t/what-siem-can-do/244483 "2020-08-13T06:56:27Z")
Hi, is there anyone here can explain to me a simple way what is SIEM? How can SIEM detect threat? what is IP destination and IP source means in SIEM? I really not clear about it.. Thanks --- ## [Kibana login portal issue](https://discuss.elastic.co/t/kibana-login-portal-issue/244318)
**Author:** [@ronics](https://discuss.elastic.co/u/ronics)\ **Replies:** 8\ **Last updated:** [August 13, 2020, 6:21am UTC](https://discuss.elastic.co/t/kibana-login-portal-issue/244318 "2020-08-13T06:21:20Z")
I have recently upgraded elk stack from 7.8.1 Elasticsearch is currently in 7.8.1 version I have tried to restart kibana. systemctl restart kibana It shows it is active but when I try to browse from web, the login pa… --- ## [How to change Logtash internal/system logs to local timezone?](https://discuss.elastic.co/t/how-to-change-logtash-internal-system-logs-to-local-timezone/244687)
**Author:** [@aksshm](https://discuss.elastic.co/u/aksshm)\ **Replies:** 2\ **Last updated:** [August 13, 2020, 5:40am UTC](https://discuss.elastic.co/t/how-to-change-logtash-internal-system-logs-to-local-timezone/244687 "2020-08-13T05:40:55Z")
we are running logstash as a pod in k8s, we're trying to change the timezone of logstash internal/system logs. by default logs are coming in utc timezone ex: INFO \] 2020-08-12 07:26:19.757 \[Api Webserver\] agent - Succ… --- ## [Signal Timestamp Issue](https://discuss.elastic.co/t/signal-timestamp-issue/244669)
**Author:** [@Saurabh\_Singh1](https://discuss.elastic.co/u/Saurabh_Singh1)\ **Replies:** 1\ **Last updated:** [August 13, 2020, 4:18am UTC](https://discuss.elastic.co/t/signal-timestamp-issue/244669 "2020-08-13T04:18:11Z")
Hi All, I am trying the following scenario: 1.) Trying to ingest data into index in IST format. 2.) Created a detection rule over the index. 3.) Signals are getting generated. Observ… --- ## [Node addition failed](https://discuss.elastic.co/t/node-addition-failed/244523)
**Author:** [@faraz](https://discuss.elastic.co/u/faraz)\ **Replies:** 33\ **Last updated:** [August 13, 2020, 3:03am UTC](https://discuss.elastic.co/t/node-addition-failed/244523 "2020-08-13T03:03:33Z")
Hi Team, I am new in elasticsearch and trying to add new node on cluster getting this error. Please Help. \[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[Elastic-2\] master not discovered yet, this node has not previous… --- ## [CANVAS timelion의 시간별 그래프의 X축이 실제와 9시간 차이 납니다](https://discuss.elastic.co/t/canvas-timelion-x-9/244655)
**Author:** [@dutkadutka26](https://discuss.elastic.co/u/dutkadutka26)\ **Replies:** 2\ **Last updated:** [August 13, 2020, 2:59am UTC](https://discuss.elastic.co/t/canvas-timelion-x-9/244655 "2020-08-13T02:59:37Z")
안녕하세요. Kibana Canvas에서 timelion을 Datasource로 해서 Line Graph를 구현하고 있습니다. 우선 사용하는 인덱스의 시간 관련 필드는 아래와 같이 생겼습니다. workpad에 Today로 TimeFilter를 걸어놓고 1시간 단위로 서비스 성공률을 보여주도록 구현했습니다. 다만, x축 값이 제가 원하는 시간보다 9시간씩 밀려서 나옵… --- ## [Elastic 2 Cluster Setup upgrade](https://discuss.elastic.co/t/elastic-2-cluster-setup-upgrade/244737)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 4\ **Last updated:** [August 13, 2020, 2:44am UTC](https://discuss.elastic.co/t/elastic-2-cluster-setup-upgrade/244737 "2020-08-13T02:44:19Z")
I have 2 elastic machines M1 and M2 They both are master eligible and replicas of each other. I need to rebuild M1. But when I do that and reinstall everything on this box. M1 doesn't join back M2. I am assuming that M… --- ## [Is it safe to write into a green index in a red cluster?](https://discuss.elastic.co/t/is-it-safe-to-write-into-a-green-index-in-a-red-cluster/244743)
**Author:** [@wenhoujx](https://discuss.elastic.co/u/wenhoujx)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 10:10pm UTC](https://discuss.elastic.co/t/is-it-safe-to-write-into-a-green-index-in-a-red-cluster/244743 "2020-08-12T22:10:54Z")
hello, IIUC, i can write documents to a green index even if the cluster is red and trying to allocating shards. but is it safe to do it? anything i should watch out for? Thanks --- ## [Pulling elasticsearch-oss images](https://discuss.elastic.co/t/pulling-elasticsearch-oss-images/244758)
**Author:** [@nugusbayevkk](https://discuss.elastic.co/u/nugusbayevkk)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 10:10pm UTC](https://discuss.elastic.co/t/pulling-elasticsearch-oss-images/244758 "2020-08-12T22:10:06Z")
Hello, Starting today pulling images requires authentication. docker pull docker.elastic.co/elasticsearch/elasticsearch:7.8.1 Error response from daemon: Get https://docker.elastic.co/v2/elasticsearch/elasticsearch/man… --- ## [Bulk operation failing to index first document without attachment field](https://discuss.elastic.co/t/bulk-operation-failing-to-index-first-document-without-attachment-field/244777)
**Author:** [@russinholi](https://discuss.elastic.co/u/russinholi)\ **Replies:** 3\ **Last updated:** [August 12, 2020, 8:01pm UTC](https://discuss.elastic.co/t/bulk-operation-failing-to-index-first-document-without-attachment-field/244777 "2020-08-12T20:01:11Z")
Hi all I'm using Elasticsearch 7.8 and I'm having an weird situation while using bulk operation to index some documents, that might have or not attachment the them, like if run the following command: curl -X POST "local… --- ## [Panw module (Palo Alto) ingest reports Object Object.getClass() error because receiver is null](https://discuss.elastic.co/t/panw-module-palo-alto-ingest-reports-object-object-getclass-error-because-receiver-is-null/244747)
**Author:** [@srpine](https://discuss.elastic.co/u/srpine)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 6:36pm UTC](https://discuss.elastic.co/t/panw-module-palo-alto-ingest-reports-object-object-getclass-error-because-receiver-is-null/244747 "2020-08-12T18:36:34Z")
I am seeing errors for some of the TRAFFIC entries in the log. Pipeline complains about: Object Object.getClass() because receiver is null After breaking down the csv I found the following fields 12,13,19 were null in… --- ## [Kibana TSVB - Accessing Last Bucket' Timestamp](https://discuss.elastic.co/t/kibana-tsvb-accessing-last-bucket-timestamp/238347)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 5\ **Last updated:** [August 12, 2020, 6:22pm UTC](https://discuss.elastic.co/t/kibana-tsvb-accessing-last-bucket-timestamp/238347 "2020-08-12T18:22:22Z")
I'm attempting to forecast warranty renewal costs for hardware using a TSVB on Kibana 6.5.1. My use case is to provide a dashboard where someone can select the end-date (start date should be today), and depending on whe… --- ## [Unable to set "ssl true", "ssl\_certificate\_verification false" in logstash http output plugin](https://discuss.elastic.co/t/unable-to-set-ssl-true-ssl-certificate-verification-false-in-logstash-http-output-plugin/244764)
**Author:** [@bimanarajesh](https://discuss.elastic.co/u/bimanarajesh)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 5:54pm UTC](https://discuss.elastic.co/t/unable-to-set-ssl-true-ssl-certificate-verification-false-in-logstash-http-output-plugin/244764 "2020-08-12T17:54:03Z")
With http output plugin, I am not able to set ssl =\> true ssl\_certificate\_verification =\> false We are getting configuration error when we add the above configurations in http output Pls let us know how to enable ssl… --- ## [Save PySpark DataFRame to ElasticSEarch index](https://discuss.elastic.co/t/save-pyspark-dataframe-to-elasticsearch-index/244581)
**Author:** [@larryrodrigues](https://discuss.elastic.co/u/larryrodrigues)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 5:08pm UTC](https://discuss.elastic.co/t/save-pyspark-dataframe-to-elasticsearch-index/244581 "2020-08-12T17:08:15Z")
Using Spark 2.6 and elasticsearch 6.8 I am trying to save a PySpark DataFrame to elasticsearch index using the external library: df\_to\_save.write.format('org.elasticsearch.spark.sql').option('es.resource', '%s/%s' % ('… --- ## [Setting up elasticsearch and kibana behind a single AWS application load balancer (on http)](https://discuss.elastic.co/t/setting-up-elasticsearch-and-kibana-behind-a-single-aws-application-load-balancer-on-http/243541)
**Author:** [@Deepak\_Atrey](https://discuss.elastic.co/u/Deepak_Atrey)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 5:03pm UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-and-kibana-behind-a-single-aws-application-load-balancer-on-http/243541 "2020-08-12T17:03:24Z")
Hi Experts, I am setting up the elasticsearch and kibana on amazon ECS cluster. I am able to run the elasticsearch and kibana from official docker images (v7.8.1) on Ec2 nodes. I have configured the elasticsearch targ… --- ## [Example logstash.conf with multiline json to elasticsearch](https://discuss.elastic.co/t/example-logstash-conf-with-multiline-json-to-elasticsearch/244741)
**Author:** [@Annette1](https://discuss.elastic.co/u/Annette1)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 4:03pm UTC](https://discuss.elastic.co/t/example-logstash-conf-with-multiline-json-to-elasticsearch/244741 "2020-08-12T16:03:24Z")
kibana error - failed to format messages from /var/lib/containers/....json.log filebeat config "paths": \[/var/lib/docker/cnotainers//.log"\] "fields": {"environement": "dev", "system" : "test" "level "application"}, … --- ## [Error in logstash-input-s3-sns-sqs plugin](https://discuss.elastic.co/t/error-in-logstash-input-s3-sns-sqs-plugin/244699)
**Author:** [@Jayakumar\_R\_R](https://discuss.elastic.co/u/Jayakumar_R_R)\ **Replies:** 4\ **Last updated:** [August 12, 2020, 3:53pm UTC](https://discuss.elastic.co/t/error-in-logstash-input-s3-sns-sqs-plugin/244699 "2020-08-12T15:53:36Z")
Hi all, I am new to logstash. I am using s3snssqs plugin to pull data from s3. input { s3snssqs { region =\> "us-east-1" s3\_default\_options =\> { "endpoint\_discovery" =\> … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1284) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1286)