# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1361

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1362

---

## [\[Kibana\] How to divide using the sum of two columns?](https://discuss.elastic.co/t/kibana-how-to-divide-using-the-sum-of-two-columns/239037)

<div class="topic-metadata">

**Author:** [@skyskai](https://discuss.elastic.co/u/skyskai)\
**Replies:** 0\
**Last updated:** [June 29, 2020, 1:31am UTC](https://discuss.elastic.co/t/kibana-how-to-divide-using-the-sum-of-two-columns/239037 "2020-06-29T01:31:26Z")

</div>

I want to construct a new column by dividing the sum of column A by the sum of column B as shown below. '--------------------------------------------------------------------------------- | Date | Sum of Col A…

---

## [Elasticsearch failed when i try to setup x-pack](https://discuss.elastic.co/t/elasticsearch-failed-when-i-try-to-setup-x-pack/238984)

<div class="topic-metadata">

**Author:** [@Amine\_Aloui](https://discuss.elastic.co/u/Amine_Aloui)\
**Replies:** 6\
**Last updated:** [June 29, 2020, 12:30am UTC](https://discuss.elastic.co/t/elasticsearch-failed-when-i-try-to-setup-x-pack/238984 "2020-06-29T00:30:56Z")

</div>

when i try to setup x-pack in remote server i have some issues (in my local ,it works perfectly) ,but it dosn't in remote sever first : vi /etc/elasticsearch/elasticsearch.yml i add this option: xpack.security.enabl…

---

## [Mapping for object with dynamic keys](https://discuss.elastic.co/t/mapping-for-object-with-dynamic-keys/238993)

<div class="topic-metadata">

**Author:** [@luckyb56](https://discuss.elastic.co/u/luckyb56)\
**Replies:** 1\
**Last updated:** [June 28, 2020, 11:56pm UTC](https://discuss.elastic.co/t/mapping-for-object-with-dynamic-keys/238993 "2020-06-28T23:56:59Z")

</div>

Have a document like this: { "stats": { "fruits.v:apple": 30, "fruits.v:orange": 150, "vegetables.v: broccoli": 40 } } Can I keep the key name as is? What kind of dynami…

---

## [Can any kibana version greater than 6.5 be used to connect to elasticsearch 6.5?](https://discuss.elastic.co/t/can-any-kibana-version-greater-than-6-5-be-used-to-connect-to-elasticsearch-6-5/239033)

<div class="topic-metadata">

**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\
**Replies:** 1\
**Last updated:** [June 28, 2020, 9:51pm UTC](https://discuss.elastic.co/t/can-any-kibana-version-greater-than-6-5-be-used-to-connect-to-elasticsearch-6-5/239033 "2020-06-28T21:51:31Z")

</div>

Can any kibana version greater than 6.5 (e.g. 6.7, 6.8 or 7.x) be used to connect to elasticsearch 6.5? My understanding is that they should be compatible (same version with elasticsearch). Is it true? Thank you in adv…

---

## [Can we delete .monitoring-kibana (disk issue) - red shard](https://discuss.elastic.co/t/can-we-delete-monitoring-kibana-disk-issue-red-shard/238731)

<div class="topic-metadata">

**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\
**Replies:** 1\
**Last updated:** [June 28, 2020, 9:28pm UTC](https://discuss.elastic.co/t/can-we-delete-monitoring-kibana-disk-issue-red-shard/238731 "2020-06-28T21:28:40Z")

</div>

Could I delete .monitoring-kibana\_2020.MM.dd system index? I experienced a disk failure which damaged the lvm and after fixing this some system shards are corrupted blocking indexing. Thank you in advance!

---

## [Grok parse does not work, but looks fine on the debugger](https://discuss.elastic.co/t/grok-parse-does-not-work-but-looks-fine-on-the-debugger/238974)

<div class="topic-metadata">

**Author:** [@tenaz3](https://discuss.elastic.co/u/tenaz3)\
**Replies:** 9\
**Last updated:** [June 28, 2020, 8:26pm UTC](https://discuss.elastic.co/t/grok-parse-does-not-work-but-looks-fine-on-the-debugger/238974 "2020-06-28T20:26:28Z")

</div>

ELK: 7.71 On the debugger grok looks good, but when I send filebeat-\>logstash-\>elasticsearch, on kibana none of the fields I mapped is there. Any on has an idea? I have the following log structure: 2020-06-18T23:10:43…

---

## [Transform doesn't recognize all the documents](https://discuss.elastic.co/t/transform-doesnt-recognize-all-the-documents/237591)

<div class="topic-metadata">

**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\
**Replies:** 9\
**Last updated:** [June 28, 2020, 6:51pm UTC](https://discuss.elastic.co/t/transform-doesnt-recognize-all-the-documents/237591 "2020-06-28T18:51:49Z")

</div>

Hi, I created a new transform and It doesn't recognize all the documents in source index. The source index name is user\_data. The destination index name is session\_data. The transform is so simple: runs on the last …

---

## [Metricbeats only ships node\_stats, but not cluster\_stats to x-pack monitoring](https://discuss.elastic.co/t/metricbeats-only-ships-node-stats-but-not-cluster-stats-to-x-pack-monitoring/238948)

<div class="topic-metadata">

**Author:** [@souravsahoo](https://discuss.elastic.co/u/souravsahoo)\
**Replies:** 1\
**Last updated:** [June 28, 2020, 6:47pm UTC](https://discuss.elastic.co/t/metricbeats-only-ships-node-stats-but-not-cluster-stats-to-x-pack-monitoring/238948 "2020-06-28T18:47:10Z")

</div>

Hi, I have a 3 master, multiple data node architecture. Metricbeat's elasticsearch-xpack module is configured to ship elasticsearch metrics to a separate monitoring cluster. However, I see only node\_stats are sent and no…

---

## [Error with logstash-input-rss](https://discuss.elastic.co/t/error-with-logstash-input-rss/238997)

<div class="topic-metadata">

**Author:** [@Terizian](https://discuss.elastic.co/u/Terizian)\
**Replies:** 6\
**Last updated:** [June 28, 2020, 6:02pm UTC](https://discuss.elastic.co/t/error-with-logstash-input-rss/238997 "2020-06-28T18:02:37Z")

</div>

I was trying the RSS plugin with Logstash, and I'm facing an error as detailed below: Version: Logstash 7.7.1 Operating System: CentOS 7.8.2003 Config File: input { rss { url =\> "https://www.alit…

---

## [Can not get input from elasticsearch](https://discuss.elastic.co/t/can-not-get-input-from-elasticsearch/238988)

<div class="topic-metadata">

**Author:** [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\
**Replies:** 1\
**Last updated:** [June 28, 2020, 3:53pm UTC](https://discuss.elastic.co/t/can-not-get-input-from-elasticsearch/238988 "2020-06-28T15:53:14Z")

</div>

Hi, I wanna to get input from my elasticsearch and doing enrichment on the data in it but the problem is connecting to es via SSL, i get this error every time and can not handle it anyway the code input { elastic…

---

## [Force logstash to reindex a CSV](https://discuss.elastic.co/t/force-logstash-to-reindex-a-csv/239003)

<div class="topic-metadata">

**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Replies:** 3\
**Last updated:** [June 28, 2020, 3:46pm UTC](https://discuss.elastic.co/t/force-logstash-to-reindex-a-csv/239003 "2020-06-28T15:46:52Z")

</div>

Hello, Sometimes I need to force the re-indexing of files csv from the beginning. my config logstash is input { file { path =\> "/data/volumes/monitoring/logstash/dernier\_passage/stocks.csv" sincedb\_path =\> "/dev/null"…

---

## [How use DataTable or any component of Visualization to build below report](https://discuss.elastic.co/t/how-use-datatable-or-any-component-of-visualization-to-build-below-report/238840)

<div class="topic-metadata">

**Author:** [@jaytran](https://discuss.elastic.co/u/jaytran)\
**Replies:** 4\
**Last updated:** [June 28, 2020, 3:05pm UTC](https://discuss.elastic.co/t/how-use-datatable-or-any-component-of-visualization-to-build-below-report/238840 "2020-06-28T15:05:46Z")

</div>

Hi all, I have below data: "hits" : \[ { "\_index" : "test-2020.05", "\_source" : { "@version" : "1", "status" : "DONE", "level" : "ERROR" } }, { "\_index" : "test-2020.05", "\_s…

---

## [Logs UI with cross cluster search](https://discuss.elastic.co/t/logs-ui-with-cross-cluster-search/239009)

<div class="topic-metadata">

**Author:** [@a3984](https://discuss.elastic.co/u/a3984)\
**Replies:** 0\
**Last updated:** [June 28, 2020, 1:08pm UTC](https://discuss.elastic.co/t/logs-ui-with-cross-cluster-search/239009 "2020-06-28T13:08:45Z")

</div>

I have created a cross cluster search configuration where I have one kibana/elasticsearch connecting to two other elasticsearch instances using cross cluster search. I know that it is configured correctly as I have crea…

---

## [Create Empty array when logstash outputs](https://discuss.elastic.co/t/create-empty-array-when-logstash-outputs/239005)

<div class="topic-metadata">

**Author:** [@recordable542](https://discuss.elastic.co/u/recordable542)\
**Replies:** 0\
**Last updated:** [June 28, 2020, 12:10pm UTC](https://discuss.elastic.co/t/create-empty-array-when-logstash-outputs/239005 "2020-06-28T12:10:49Z")

</div>

input { jdbc { jdbc\_driver\_library =\> "..." jdbc\_driver\_class =\> "com.mysql.jdbc.Driver" jdbc\_paging\_enabled =\> true tracking\_column =\> "unix\_ts\_in\_secs" use\_column\_value =\> tr…

---

## [Error on instrumenting Weblogic Server with APM Agent Client 1.16.0](https://discuss.elastic.co/t/error-on-instrumenting-weblogic-server-with-apm-agent-client-1-16-0/238990)

<div class="topic-metadata">

**Author:** [@ParashB](https://discuss.elastic.co/u/ParashB)\
**Replies:** 2\
**Last updated:** [June 28, 2020, 9:25am UTC](https://discuss.elastic.co/t/error-on-instrumenting-weblogic-server-with-apm-agent-client-1-16-0/238990 "2020-06-28T09:25:52Z")

</div>

I am trying to instrument application running on Weblogic 12.2. My APM client jar is 1.16.0.jar. It is able to connect to APM server as I can see the below line in the log 2020-06-27 13:50:11.749 \[elastic-apm-server-hea…

---

## [Logstash pipline optimization](https://discuss.elastic.co/t/logstash-pipline-optimization/236280)

<div class="topic-metadata">

**Author:** [@abhisheksimion](https://discuss.elastic.co/u/abhisheksimion)\
**Replies:** 3\
**Last updated:** [June 28, 2020, 6:20am UTC](https://discuss.elastic.co/t/logstash-pipline-optimization/236280 "2020-06-28T06:20:37Z")

</div>

I have multiple configurations defined in the pipelines.yml. All the configurations are responsible for pushing data from a jDBC source to Elasticsearch. I want to know what is the optimal settings required to do so. As …

---

## [Logstash install error in ubuntu](https://discuss.elastic.co/t/logstash-install-error-in-ubuntu/238987)

<div class="topic-metadata">

**Author:** [@Srini2](https://discuss.elastic.co/u/Srini2)\
**Replies:** 1\
**Last updated:** [June 28, 2020, 5:43am UTC](https://discuss.elastic.co/t/logstash-install-error-in-ubuntu/238987 "2020-06-28T05:43:55Z")

</div>

Hi, I'm new to ELK. I have successfully installed elasticsearch and kibana in Ubuntu 19.10 instance with OpenJDK 11 installed. But getting below error while installing Logstash. Any help on this please. $ sudo apt-get …

---

## [Unable to connect mysql using logstash](https://discuss.elastic.co/t/unable-to-connect-mysql-using-logstash/238969)

<div class="topic-metadata">

**Author:** [@sandy1](https://discuss.elastic.co/u/sandy1)\
**Replies:** 1\
**Last updated:** [June 28, 2020, 3:19am UTC](https://discuss.elastic.co/t/unable-to-connect-mysql-using-logstash/238969 "2020-06-28T03:19:49Z")

</div>

logstash.config: \> input { \> jdbc { \> jdbc\_connection\_string =\> "jdbc:mysql://localhost:3306/db\_name?ssl=false" \> jdbc\_user =\> "admin" \> jdbc\_password =\> "password" \> jdbc\_driver\_library =\> "D:/el…

---

## [ECE Installation and Openfile values](https://discuss.elastic.co/t/ece-installation-and-openfile-values/238952)

<div class="topic-metadata">

**Author:** [@Rocking\_Raphsody](https://discuss.elastic.co/u/Rocking_Raphsody)\
**Replies:** 1\
**Last updated:** [June 27, 2020, 11:11pm UTC](https://discuss.elastic.co/t/ece-installation-and-openfile-values/238952 "2020-06-27T23:11:12Z")

</div>

Though, the right value is set for the open file descriptors, the installer still reports requirements not met. Checking OS kernel cgroup.memory... PASSED - OS setting 'cgroup.memory' should be set to cgroup.memory=no…

---

## [Error Elasticsearch Unreachable](https://discuss.elastic.co/t/error-elasticsearch-unreachable/238964)

<div class="topic-metadata">

**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Replies:** 1\
**Last updated:** [June 27, 2020, 10:49pm UTC](https://discuss.elastic.co/t/error-elasticsearch-unreachable/238964 "2020-06-27T22:49:29Z")

</div>

I use logstash to ingest a csv file in elastic i have this error \[2020-06-27T18:46:09,043\]\[WARN \]\[logstash.outputs.elasticsearch\] Marking url as dead. Last error: \[LogStash::Outputs::ElasticSearch::HttpClient::Pool::Hos…

---

## [Top 10 doc of a User get changed when i insert data in another user's space](https://discuss.elastic.co/t/top-10-doc-of-a-user-get-changed-when-i-insert-data-in-another-users-space/238939)

<div class="topic-metadata">

**Author:** [@RAHUL\_PATEL](https://discuss.elastic.co/u/RAHUL_PATEL)\
**Replies:** 3\
**Last updated:** [June 27, 2020, 10:00pm UTC](https://discuss.elastic.co/t/top-10-doc-of-a-user-get-changed-when-i-insert-data-in-another-users-space/238939 "2020-06-27T22:00:05Z")

</div>

Problem Statement: I have 1000 users in my index when I use this query { "query": { "bool": { "must": \[ { "match": { "keywords": { "query":…

---

## [Refused to load the script 'https://maps.googleapis.com/...' because it violates the following Content Security Policy directive:](https://discuss.elastic.co/t/refused-to-load-the-script-https-maps-googleapis-com-because-it-violates-the-following-content-security-policy-directive/238954)

<div class="topic-metadata">

**Author:** [@Raja\_SP](https://discuss.elastic.co/u/Raja_SP)\
**Replies:** 1\
**Last updated:** [June 27, 2020, 3:28pm UTC](https://discuss.elastic.co/t/refused-to-load-the-script-https-maps-googleapis-com-because-it-violates-the-following-content-security-policy-directive/238954 "2020-06-27T15:28:58Z")

</div>

Hi, I am developing a plugin that uses googlemaps api for geofencing purposes. I have the csp.rules configured in kibana.yml as below: csp.rules: "script-src 'unsafe-eval' 'self' 'https://maps.googleapis.com'" "worker…

---

## [I need help! elastic doesn't get my mapping!](https://discuss.elastic.co/t/i-need-help-elastic-doesnt-get-my-mapping/238932)

<div class="topic-metadata">

**Author:** [@sina12](https://discuss.elastic.co/u/sina12)\
**Replies:** 3\
**Last updated:** [June 27, 2020, 2:18pm UTC](https://discuss.elastic.co/t/i-need-help-elastic-doesnt-get-my-mapping/238932 "2020-06-27T14:18:20Z")

</div>

Hi Guys! I am in trouble. I need to visualize my data but elasticsearch doesn't accept my mapping. I edited the mapping like that: PUT /my\_example/\_mappings { "properties" : { "id" :{ "type": "boolean" }, …

---

## [Visualize command history](https://discuss.elastic.co/t/visualize-command-history/238892)

<div class="topic-metadata">

**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\
**Replies:** 1\
**Last updated:** [June 27, 2020, 2:10pm UTC](https://discuss.elastic.co/t/visualize-command-history/238892 "2020-06-27T14:10:12Z")

</div>

I'm a complete noob at Elastic Stack. I need to display command history in kibana in an easy to read format, I'm looking for something like this. For that, I've set auditbeat with this rule to log every command someone r…

---

## [Input from 3 log files on 1 visualization on kibana](https://discuss.elastic.co/t/input-from-3-log-files-on-1-visualization-on-kibana/238941)

<div class="topic-metadata">

**Author:** [@falconpurple](https://discuss.elastic.co/u/falconpurple)\
**Replies:** 2\
**Last updated:** [June 27, 2020, 1:25pm UTC](https://discuss.elastic.co/t/input-from-3-log-files-on-1-visualization-on-kibana/238941 "2020-06-27T13:25:59Z")

</div>

Hi, I have to connect 3 log files. The Logfile 1 contains fields: Logdate,request\_type,responsetime The Logfile 2 contains fields: Logdate,request\_type,responsetime The Logfile 3 contains fields: Logdate,request\_t…

---

## [API Integration with Elastic + KIBANA](https://discuss.elastic.co/t/api-integration-with-elastic-kibana/238951)

<div class="topic-metadata">

**Author:** [@get2saravanan](https://discuss.elastic.co/u/get2saravanan)\
**Replies:** 0\
**Last updated:** [June 27, 2020, 1:15pm UTC](https://discuss.elastic.co/t/api-integration-with-elastic-kibana/238951 "2020-06-27T13:15:37Z")

</div>

Hi Team, I have a requirement to display the Currency rates in the Kibana dashboard. I have few restAPI which serve data for the Currency. I couldn't understand how to load this live data in Elastic. Kindly share your …

---

## [Wildcard in a match\_phrase query](https://discuss.elastic.co/t/wildcard-in-a-match-phrase-query/238775)

<div class="topic-metadata">

**Author:** [@Manjunath\_Venkatram](https://discuss.elastic.co/u/Manjunath_Venkatram)\
**Replies:** 3\
**Last updated:** [June 27, 2020, 12:25pm UTC](https://discuss.elastic.co/t/wildcard-in-a-match-phrase-query/238775 "2020-06-27T12:25:49Z")

</div>

Hi I am trying to do a wildcard query on a field as below, {"clientPort":{"query":"\*"}}, my intention is for the query to bring any/all values associated with clientPort, is this possible ? currently i dont get anythin…

---

## [Suricata and Kibana in Ubuntu 18.04](https://discuss.elastic.co/t/suricata-and-kibana-in-ubuntu-18-04/235438)

<div class="topic-metadata">

**Author:** [@wahyu\_wir](https://discuss.elastic.co/u/wahyu_wir)\
**Replies:** 6\
**Last updated:** [June 27, 2020, 11:29am UTC](https://discuss.elastic.co/t/suricata-and-kibana-in-ubuntu-18-04/235438 "2020-06-27T11:29:47Z")

</div>

how can I use ELK on the suricata that I installed on Ubuntu 18.04? I have followed the link: https://www.google.com/amp/s/logz.io/blog/network-security-monitoring/amp/ but after the kibana is opened, it appears that i…

---

## [Upgrade with docker](https://discuss.elastic.co/t/upgrade-with-docker/238689)

<div class="topic-metadata">

**Author:** [@Elastan](https://discuss.elastic.co/u/Elastan)\
**Replies:** 1\
**Last updated:** [June 27, 2020, 10:11am UTC](https://discuss.elastic.co/t/upgrade-with-docker/238689 "2020-06-27T10:11:28Z")

</div>

Hello, Where I can find manual how to pefrom version upgrade when Elastic cluster running in Docker? Regards

---

## [Combine rank with different buckets](https://discuss.elastic.co/t/combine-rank-with-different-buckets/238886)

<div class="topic-metadata">

**Author:** [@remeo](https://discuss.elastic.co/u/remeo)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 4:55pm UTC](https://discuss.elastic.co/t/combine-rank-with-different-buckets/238886 "2020-06-26T16:55:24Z")

</div>

We are running a marketplace (with auctions and fixed price items). Since you have different type of search users and use cases (some search for precise items, others want some inspiration), we are thinking about this a…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1360)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1362)
