# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1328

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1329

---

## [Suggestion on summarizing running total value](https://discuss.elastic.co/t/suggestion-on-summarizing-running-total-value/241339)

<div class="topic-metadata">

**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\
**Replies:** 6\
**Last updated:** [July 16, 2020, 7:54am UTC](https://discuss.elastic.co/t/suggestion-on-summarizing-running-total-value/241339 "2020-07-16T07:54:54Z")

</div>

ES version 7.6 I am finding difficult to do summarize or transforms on running total values like network traffic metrics. For example i want to get the max bucket on inbound bytes/s. But prior to that, looks like i hav…

---

## [Browser security requirements warning when login](https://discuss.elastic.co/t/browser-security-requirements-warning-when-login/241257)

<div class="topic-metadata">

**Author:** [@Bustencio](https://discuss.elastic.co/u/Bustencio)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 7:51am UTC](https://discuss.elastic.co/t/browser-security-requirements-warning-when-login/241257 "2020-07-16T07:51:02Z")

</div>

Hi there, For the last few days I've been getting a warning message in the bottom right corner when I log in or open Kibana saying "Your browser does not meet the security requirements for Kibana." and is stopping me fr…

---

## [Logstash pipeline Elasticsearch filter if conditional not working](https://discuss.elastic.co/t/logstash-pipeline-elasticsearch-filter-if-conditional-not-working/241390)

<div class="topic-metadata">

**Author:** [@tbege](https://discuss.elastic.co/u/tbege)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 7:35am UTC](https://discuss.elastic.co/t/logstash-pipeline-elasticsearch-filter-if-conditional-not-working/241390 "2020-07-16T07:35:53Z")

</div>

Hello, I am using the following configuration to sync some data into my Elasticsearch indeces: logstashPipeline: logstash.conf: | input { jdbc { jdbc\_driver\_library =\> "/usr/share/lo…

---

## [Elasticsearch operator - Helm Chart](https://discuss.elastic.co/t/elasticsearch-operator-helm-chart/241382)

<div class="topic-metadata">

**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 7:31am UTC](https://discuss.elastic.co/t/elasticsearch-operator-helm-chart/241382 "2020-07-16T07:31:46Z")

</div>

Hi, I have seen the elasticsearch operator which can be deployed in self managed k8s. The deployment of the same is not straightforward. Helm Chart - Elasticsearch Cluster Im looking similar elasticsearch operator …

---

## [Logstash. Export data from Elasticsearch's nested field](https://discuss.elastic.co/t/logstash-export-data-from-elasticsearchs-nested-field/240354)

<div class="topic-metadata">

**Author:** [@Alex\_D](https://discuss.elastic.co/u/Alex_D)\
**Replies:** 7\
**Last updated:** [July 16, 2020, 7:18am UTC](https://discuss.elastic.co/t/logstash-export-data-from-elasticsearchs-nested-field/240354 "2020-07-16T07:18:39Z")

</div>

Hi all ! I'am trying to export data from ElasticSearch into csv-file. I installed plugins "logstash-input-elasticsearch", "logstash-output-csv" before. Part of my ES data scheme: mappings: { properties: { …

---

## [Delete all documents from specific ES index, that are not in the logstash feed](https://discuss.elastic.co/t/delete-all-documents-from-specific-es-index-that-are-not-in-the-logstash-feed/241318)

<div class="topic-metadata">

**Author:** [@Deleanu\_Alexandru](https://discuss.elastic.co/u/Deleanu_Alexandru)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 7:15am UTC](https://discuss.elastic.co/t/delete-all-documents-from-specific-es-index-that-are-not-in-the-logstash-feed/241318 "2020-07-16T07:15:48Z")

</div>

Hello, I am writing an ES ecommerce product search. I feed data to ES using filebeat and logstash like this: - every 24h I will upload a json file containing all the products in the ES index (all products that I want …

---

## [【Discover】CSVレポートの日本語が文字化けする](https://discuss.elastic.co/t/discover-csv/241400)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 0\
**Last updated:** [July 16, 2020, 7:15am UTC](https://discuss.elastic.co/t/discover-csv/241400 "2020-07-16T07:15:10Z")

</div>

お世話になります。 Discoverの検索結果(日本語の項目名と値が存在)を、共有 \> CSVレポート \> CSVを生成を押下後に、 ダウンロードし、ファイルをExcelで開くと文字化けが発生してしまいます。 Excelで文字コードを指定して開く等で、文字化けせずに表示させる事は可能ですが、 文字化けを起こさずにCSVレポートを生成する方法はございますでしょうか？ なお、Discoverの画面表示上は、文字化けしておりません。 …

---

## [Error while parsing date with Date filter](https://discuss.elastic.co/t/error-while-parsing-date-with-date-filter/241312)

<div class="topic-metadata">

**Author:** [@Ashish\_kapoor](https://discuss.elastic.co/u/Ashish_kapoor)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 7:11am UTC](https://discuss.elastic.co/t/error-while-parsing-date-with-date-filter/241312 "2020-07-16T07:11:41Z")

</div>

Hi, I am trying to parse date "Jan 21, 2020 1:02:24 PM". But I am getting \_dateparsefailure. I am using below conf in filter date { match =\> \["DateTime", "MMM d, yyyy h:mm a"\] target …

---

## [Grok failure, Grok debug OK](https://discuss.elastic.co/t/grok-failure-grok-debug-ok/240693)

<div class="topic-metadata">

**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\
**Replies:** 1\
**Last updated:** [July 11, 2020, 6:37pm UTC](https://discuss.elastic.co/t/grok-failure-grok-debug-ok/240693 "2020-07-11T18:37:13Z")

</div>

Hello, I am using grok to parse my logs, everything works in grok debugger in Kibana but when I use it in my pipeline it doesn't work!! here is an example of my log: Jul 10 12:21:08 vselk-vyos kernel: \[155099.389432\]…

---

## [Unable to access ElasticSearch -Standalone Setup using version 6.8.10](https://discuss.elastic.co/t/unable-to-access-elasticsearch-standalone-setup-using-version-6-8-10/239150)

<div class="topic-metadata">

**Author:** [@viuha8](https://discuss.elastic.co/u/viuha8)\
**Replies:** 3\
**Last updated:** [July 16, 2020, 6:47am UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-standalone-setup-using-version-6-8-10/239150 "2020-07-16T06:47:22Z")

</div>

Hello All, Iam trying to set up a Standalone ElasticSearch instance but not a Cluster One. For that , i have the following in the yml file: bootstrap.memory\_lock: false cluster.name: elasticsearch discovery.zen.min…

---

## [What is Heat Map used for](https://discuss.elastic.co/t/what-is-heat-map-used-for/241391)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 6:39am UTC](https://discuss.elastic.co/t/what-is-heat-map-used-for/241391 "2020-07-16T06:39:12Z")

</div>

I have successfully created the kibana heat map but i don't know the usage and meaning of it?

---

## [Logstash-plain.log is not rolling after upgrade to 7.x](https://discuss.elastic.co/t/logstash-plain-log-is-not-rolling-after-upgrade-to-7-x/241393)

<div class="topic-metadata">

**Author:** [@rchung-hku](https://discuss.elastic.co/u/rchung-hku)\
**Replies:** 0\
**Last updated:** [July 16, 2020, 6:33am UTC](https://discuss.elastic.co/t/logstash-plain-log-is-not-rolling-after-upgrade-to-7-x/241393 "2020-07-16T06:33:16Z")

</div>

Hi all I was using logstash 6.5.x before, Logstash used to auto rolling the logstash-plain.log everyday to logstash-plain.log-YYYY-MM-DD-1.log.gz. However, after I upgrade the ES and Logstash to 7.6.2, the logstash-pl…

---

## [Mounting a nfs drive for snapshot](https://discuss.elastic.co/t/mounting-a-nfs-drive-for-snapshot/241218)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 6\
**Last updated:** [July 16, 2020, 6:30am UTC](https://discuss.elastic.co/t/mounting-a-nfs-drive-for-snapshot/241218 "2020-07-16T06:30:17Z")

</div>

Hi all i have a case that i really dont know how to solve. I have a nfs share server that i mount an external drive in, and then i share that specific drive for my elastic cluster to takke snapshot in. The problems is …

---

## [CircuitBreakingException: \[parent\] Data too large, data error](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-data-error/238690)

<div class="topic-metadata">

**Author:** [@Zeroc0pter](https://discuss.elastic.co/u/Zeroc0pter)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 6:27am UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-data-error/238690 "2020-07-16T06:27:47Z")

</div>

Hi People, I'm facing an issue that keeps crashing our cluster. Luckily it is our acceptance cluster, but still a problem because people use the cluster to log their errors. We use Elasticsearch 6.8 The error that we r…

---

## [Index structure question](https://discuss.elastic.co/t/index-structure-question/241001)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 6:24am UTC](https://discuss.elastic.co/t/index-structure-question/241001 "2020-07-16T06:24:58Z")

</div>

Can I have a index with different field name for each document? for example document1 { name: empid: location: pay: } Document2 { fullname: address: city: zip } will it cause any problem in long run? the…

---

## [High OS Cpu usage on 7.7.1](https://discuss.elastic.co/t/high-os-cpu-usage-on-7-7-1/238301)

<div class="topic-metadata">

**Author:** [@chakragod](https://discuss.elastic.co/u/chakragod)\
**Replies:** 5\
**Last updated:** [July 16, 2020, 6:20am UTC](https://discuss.elastic.co/t/high-os-cpu-usage-on-7-7-1/238301 "2020-07-16T06:20:50Z")

</div>

Hello, We recently upgraded our ELK stack from v 7.4.0 to 7.7.1 and now we noticed that the OS CPU is 100% on our hot data nodes which do the indexing. The OS CPU is almost always at 100%, the process CPU is close to 45…

---

## [Date format in my sql](https://discuss.elastic.co/t/date-format-in-my-sql/240182)

<div class="topic-metadata">

**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 6:12am UTC](https://discuss.elastic.co/t/date-format-in-my-sql/240182 "2020-07-16T06:12:02Z")

</div>

I have tried to parse data from mysql into elk stack i have date column which has date format 2020-04-01 00:00:01 and 2020-06-25 13:36:24 but when i parse the data the date is not showing in date format its still showing…

---

## [Guidance on increasing cluster.max\_shards\_per\_node](https://discuss.elastic.co/t/guidance-on-increasing-cluster-max-shards-per-node/240978)

<div class="topic-metadata">

**Author:** [@mrudrego](https://discuss.elastic.co/u/mrudrego)\
**Replies:** 8\
**Last updated:** [July 16, 2020, 6:10am UTC](https://discuss.elastic.co/t/guidance-on-increasing-cluster-max-shards-per-node/240978 "2020-07-16T06:10:12Z")

</div>

Hi, We use Elasticsearch(7.x) to store application/system logs and our indices are time based where new index is created everyday. We have a requirment where different indices are created for every log types and also fo…

---

## [GROK Pattern](https://discuss.elastic.co/t/grok-pattern/241291)

<div class="topic-metadata">

**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Replies:** 6\
**Last updated:** [July 16, 2020, 6:08am UTC](https://discuss.elastic.co/t/grok-pattern/241291 "2020-07-16T06:08:39Z")

</div>

I try to parse data from ELK to Kibana using logstash. I write some customize grok Pattern using this site https://grokdebug.herokuapp.com/ here the pattern is fine in but when i parse the data from logstash some data is…

---

## [Unable to retrive licence while trying to run logstash](https://discuss.elastic.co/t/unable-to-retrive-licence-while-trying-to-run-logstash/241386)

<div class="topic-metadata">

**Author:** [@vkg0312](https://discuss.elastic.co/u/vkg0312)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 5:56am UTC](https://discuss.elastic.co/t/unable-to-retrive-licence-while-trying-to-run-logstash/241386 "2020-07-16T05:56:49Z")

</div>

Error 2: \[2020-07-09T15:58:54,431\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retrieve license information from license server {:message=\>"Unrecognized SSL message, plaintext connection?"

---

## [Getting a bunch of startup errors when trying to run ES 6.3.2 on my mac](https://discuss.elastic.co/t/getting-a-bunch-of-startup-errors-when-trying-to-run-es-6-3-2-on-my-mac/203831)

<div class="topic-metadata">

**Author:** [@Nicholas\_Hillier](https://discuss.elastic.co/u/Nicholas_Hillier)\
**Replies:** 5\
**Last updated:** [July 16, 2020, 5:10am UTC](https://discuss.elastic.co/t/getting-a-bunch-of-startup-errors-when-trying-to-run-es-6-3-2-on-my-mac/203831 "2020-07-16T05:10:10Z")

</div>

I was running, without issue, Elastic Search 7.4.0 which comes bundled with a JDK. However, after downloading and attempting to run 6.3.2, I receive 12 errors with the following message: Message: access denied ("java.l…

---

## [【ダッシュボード】Discoverの表示時間を短縮する方法](https://discuss.elastic.co/t/discover/241250)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 5:09am UTC](https://discuss.elastic.co/t/discover/241250 "2020-07-16T05:09:17Z")

</div>

お世話になります。 Kibana(バージョン7.7)のダッシュボードにて、 Discoverのログ一覧・Visualizeのグラフを複数表示しています。 Discoverのログ一覧の表示時間がかかっているため、 レスポンスを早くするためのチューニングポイントはありますでしょうか？ Discoverの設定値は以下の通りです。 ・検索コンソール…複数のidをor条件で指定 ・23項目をスクリプトフィールドに追加(全てのログ項目…

---

## [Setting up ElasticSearch Cluster on Windows](https://discuss.elastic.co/t/setting-up-elasticsearch-cluster-on-windows/241266)

<div class="topic-metadata">

**Author:** [@Terizian](https://discuss.elastic.co/u/Terizian)\
**Replies:** 7\
**Last updated:** [July 16, 2020, 3:47am UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-cluster-on-windows/241266 "2020-07-16T03:47:22Z")

</div>

I'm trying to set up an ES cluster on three Windows hosts. Those hosts are currently offline, and I cannot extract screenshots. All three nodes have the following elasticsearch.yml: bootstrap.memory\_lock: false cluster…

---

## [Elastic Search Basic Authentication overriding the JWT headers issue while trying to access elastic db](https://discuss.elastic.co/t/elastic-search-basic-authentication-overriding-the-jwt-headers-issue-while-trying-to-access-elastic-db/241381)

<div class="topic-metadata">

**Author:** [@Sai\_Teja\_Singamsetty](https://discuss.elastic.co/u/Sai_Teja_Singamsetty)\
**Replies:** 0\
**Last updated:** [July 16, 2020, 3:43am UTC](https://discuss.elastic.co/t/elastic-search-basic-authentication-overriding-the-jwt-headers-issue-while-trying-to-access-elastic-db/241381 "2020-07-16T03:43:07Z")

</div>

I have a Gateway service for checking authentication and authorizations, then a microservice connecting to an elastic database. For a request I am making, I have to pass JWT token in headers to get authenticated at Gatew…

---

## [Master and Ingest node in one? Is my Hot-Warm-Cold concept any good?](https://discuss.elastic.co/t/master-and-ingest-node-in-one-is-my-hot-warm-cold-concept-any-good/241243)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 3\
**Last updated:** [July 16, 2020, 2:01am UTC](https://discuss.elastic.co/t/master-and-ingest-node-in-one-is-my-hot-warm-cold-concept-any-good/241243 "2020-07-16T02:01:42Z")

</div>

Hi, for a customer I have set up the following cluster concept: Is it any good or do you think something should be different? In which node should I ingest the data and which one should run kibana? EDIT: Is this a…

---

## ["\_grokparsefailure" for pattern that works on grok debugger](https://discuss.elastic.co/t/grokparsefailure-for-pattern-that-works-on-grok-debugger/241224)

<div class="topic-metadata">

**Author:** [@Khaled3500](https://discuss.elastic.co/u/Khaled3500)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 1:51am UTC](https://discuss.elastic.co/t/grokparsefailure-for-pattern-that-works-on-grok-debugger/241224 "2020-07-16T01:51:21Z")

</div>

Hello, I created a grok pattern and it works well on grok debugger but when i add to filter inside the pipeline it pass the restart phase for the service but on kibana it give this tag \["\_grokparsefailure"\] i tried to de…

---

## [Global filter that works accross the different apps](https://discuss.elastic.co/t/global-filter-that-works-accross-the-different-apps/236054)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 0\
**Last updated:** [June 6, 2020, 6:40pm UTC](https://discuss.elastic.co/t/global-filter-that-works-accross-the-different-apps/236054 "2020-06-06T18:40:24Z")

</div>

Hello, Is there a way to set up a filter in kibana that works accross different apps. For example I want to see a the apm transactions in a time frame then when I move to metricbeat dashboard to keep the same selected t…

---

## [Fail to exclude Post by Term localhost:9200/abc-post-1/post/\_search/?mode=exclude:Sales&q=post\_type:%22jobs%22&size=1000&from=1 #59457](https://discuss.elastic.co/t/fail-to-exclude-post-by-term-localhost-9200-abc-post-1-post-search-mode-exclude-sales-q-post-type-22jobs-22-size-1000-from-1-59457/241374)

<div class="topic-metadata">

**Author:** [@iexpertini](https://discuss.elastic.co/u/iexpertini)\
**Replies:** 0\
**Last updated:** [July 16, 2020, 12:18am UTC](https://discuss.elastic.co/t/fail-to-exclude-post-by-term-localhost-9200-abc-post-1-post-search-mode-exclude-sales-q-post-type-22jobs-22-size-1000-from-1-59457/241374 "2020-07-16T00:18:40Z")

</div>

Hi Guys, Need help to filter the ElasticSearch Result. I don't want to display the post that comes from certain post author. We try to filter it by localhost:9200/abc-post-1/post/\_search/?mode=exclude:authorname&q=pos…

---

## [Client trying to route document to non-existent node?](https://discuss.elastic.co/t/client-trying-to-route-document-to-non-existent-node/240874)

<div class="topic-metadata">

**Author:** [@Dandy](https://discuss.elastic.co/u/Dandy)\
**Replies:** 6\
**Last updated:** [July 15, 2020, 11:58pm UTC](https://discuss.elastic.co/t/client-trying-to-route-document-to-non-existent-node/240874 "2020-07-15T23:58:48Z")

</div>

I'm in a bare-metal Kubernetes environment, and I see that documents sent from a fluent instance are being routed from my ingestor client to a non-existent data node: 2020-07-13 00:08:18 +0000 \[warn\]: #0 \[elasticsearch\]…

---

## [Missing geoip.location](https://discuss.elastic.co/t/missing-geoip-location/241004)

<div class="topic-metadata">

**Author:** [@brapnda23](https://discuss.elastic.co/u/brapnda23)\
**Replies:** 8\
**Last updated:** [July 15, 2020, 11:11pm UTC](https://discuss.elastic.co/t/missing-geoip-location/241004 "2020-07-15T23:11:54Z")

</div>

New to ELK...My test ELK instance is 7.8.x. I am using the below filter code for IIS Logs and it is working fine. I can see other geo fields but I don't see geoip.location as mentioned in https://www.elastic.co/blog/geo…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1327)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1329)
