# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1372 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1373 --- ## [Is it possible to make snapshot of specific user's query result and dashboard?](https://discuss.elastic.co/t/is-it-possible-to-make-snapshot-of-specific-users-query-result-and-dashboard/234446)
**Author:** [@Taewoo](https://discuss.elastic.co/u/Taewoo)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:00pm UTC](https://discuss.elastic.co/t/is-it-possible-to-make-snapshot-of-specific-users-query-result-and-dashboard/234446 "2020-06-23T17:00:00Z")
Hello? I'm big fan of Elasticsearch and Kibana. I found that I can add user to Kibana and add role to each user. I have questions here. Is that user function is like give each user to different Kibana? For example… --- ## [Template based Elastic stack deployment for AWS](https://discuss.elastic.co/t/template-based-elastic-stack-deployment-for-aws/238248)
**Author:** [@Naresh\_Babu1](https://discuss.elastic.co/u/Naresh_Babu1)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 4:58pm UTC](https://discuss.elastic.co/t/template-based-elastic-stack-deployment-for-aws/238248 "2020-06-23T16:58:48Z")
Hi, Used below template based solution from Azure market place to deploy EFK solution. Do we have similar template based solution to deploy Elastic stack on AWS cloud. Thanks --- ## [Embed kibana Automatic Login](https://discuss.elastic.co/t/embed-kibana-automatic-login/235817)
**Author:** [@RafaelZurlo](https://discuss.elastic.co/u/RafaelZurlo)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 4:53pm UTC](https://discuss.elastic.co/t/embed-kibana-automatic-login/235817 "2020-06-23T16:53:11Z")
Hello guys! I'm having some problems with the ELK stack, version 7.6.0. I'm developing an application and I'm embedding Kibana's dashboards in this application. However, whenever someone tries to access it, it opens the… --- ## [Where's the % coming from?](https://discuss.elastic.co/t/wheres-the-coming-from/238277)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 4:46pm UTC](https://discuss.elastic.co/t/wheres-the-coming-from/238277 "2020-06-23T16:46:20Z")
I'm using the following to add an ingestion timestamp to my records: ruby { code =\> 'event.set("ingest\_time", Time.now.strftime("%Y-%m-%d %H:%M:%S.%3"))' } What I'm getting in my data, thought, is: ingest\_tim… --- ## [Logstash not pushing logs to elasticsearch in aws](https://discuss.elastic.co/t/logstash-not-pushing-logs-to-elasticsearch-in-aws/238255)
**Author:** [@Bharath\_reddy](https://discuss.elastic.co/u/Bharath_reddy)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 4:31pm UTC](https://discuss.elastic.co/t/logstash-not-pushing-logs-to-elasticsearch-in-aws/238255 "2020-06-23T16:31:26Z")
In logs I didnt find any errors ,but I can't able to see the output line in logs for my pipelines --- ## [Async Search Issue: FORBIDDEN/8/index write (api)](https://discuss.elastic.co/t/async-search-issue-forbidden-8-index-write-api/238221)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 4:25pm UTC](https://discuss.elastic.co/t/async-search-issue-forbidden-8-index-write-api/238221 "2020-06-23T16:25:49Z")
Since upgrading our cluster from 7.6 to 7.8 we are experiencing problems with kibana. We are using elasticsearch for our central logging, we have a logstash index for every single day. If I do a empty kibana search (usin… --- ## [Systemd service status visualization](https://discuss.elastic.co/t/systemd-service-status-visualization/235121)
**Author:** [@nabeel\_ahmed](https://discuss.elastic.co/u/nabeel_ahmed)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 4:00pm UTC](https://discuss.elastic.co/t/systemd-service-status-visualization/235121 "2020-06-23T16:00:04Z")
Hi, I am new to Kibana, and using kibana 7.7 I setup metricbeat and using service metricset for montioring of systemd services. I wan to visualize the service status of each service as 1 (active) or 0 (inactive) with … --- ## [Logstash Performance Tuning](https://discuss.elastic.co/t/logstash-performance-tuning/238088)
**Author:** [@Jib\_Suwanachote](https://discuss.elastic.co/u/Jib_Suwanachote)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 3:48pm UTC](https://discuss.elastic.co/t/logstash-performance-tuning/238088 "2020-06-23T15:48:22Z")
Hi all Currently our team use logstash run over container with K8S cluster for purpose consume data from KAFKA messaging and push data to Elasticsearch .As we're testing performance not good enough. we're setup only 3… --- ## [Growth over time using "metric" and "table" visualizations](https://discuss.elastic.co/t/growth-over-time-using-metric-and-table-visualizations/234717)
**Author:** [@sanzcans](https://discuss.elastic.co/u/sanzcans)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 3:42pm UTC](https://discuss.elastic.co/t/growth-over-time-using-metric-and-table-visualizations/234717 "2020-06-23T15:42:49Z")
Hello! Is there any way to calculate the growth over time in the "metric" and "table" visualizations? I only have two fields in my index: timestamp and sales, and I would like to get something like this: I know tha… --- ## [How to change the percentage data label in pie chart to 1dec place accuracy](https://discuss.elastic.co/t/how-to-change-the-percentage-data-label-in-pie-chart-to-1dec-place-accuracy/236614)
**Author:** [@DeniseLow](https://discuss.elastic.co/u/DeniseLow)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 3:38pm UTC](https://discuss.elastic.co/t/how-to-change-the-percentage-data-label-in-pie-chart-to-1dec-place-accuracy/236614 "2020-06-23T15:38:31Z")
hi , is there a way to change the percentage from 2 to 1 d.p? --- ## [All of the primary shards are on 1 node. Would that bottlenecks our writes?](https://discuss.elastic.co/t/all-of-the-primary-shards-are-on-1-node-would-that-bottlenecks-our-writes/237418)
**Author:** [@Jehu\_T](https://discuss.elastic.co/u/Jehu_T)\ **Replies:** 5\ **Last updated:** [June 23, 2020, 3:17pm UTC](https://discuss.elastic.co/t/all-of-the-primary-shards-are-on-1-node-would-that-bottlenecks-our-writes/237418 "2020-06-23T15:17:31Z")
Hi, We see that almost all of the primary shards are on 1 node out of the 3 nodes. Would that bottlenecks our writes? Our ES Indexing Service has code to catch what's basically a "queue full" state on the server and res… --- ## ["index.mapper.dynamic" not working as intended on Elasticsearch 6.8](https://discuss.elastic.co/t/index-mapper-dynamic-not-working-as-intended-on-elasticsearch-6-8/238290)
**Author:** [@egibrajshori](https://discuss.elastic.co/u/egibrajshori)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 2:58pm UTC](https://discuss.elastic.co/t/index-mapper-dynamic-not-working-as-intended-on-elasticsearch-6-8/238290 "2020-06-23T14:58:36Z")
Hi, We have some indexes we would like to disable dynamic mapping for, I'm testing disabling the dynamic mapping by putting : index.mapper.dynamic : false or null in the settings for said indexes. The request is acknow… --- ## [No mapping found for \[days\] in order to sort on](https://discuss.elastic.co/t/no-mapping-found-for-days-in-order-to-sort-on/238107)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 2:47pm UTC](https://discuss.elastic.co/t/no-mapping-found-for-days-in-order-to-sort-on/238107 "2020-06-23T14:47:24Z")
At the beggining of this month I added a template and a new numeric field for an index, so the field doesnt exists in the previous months, when displaying an horizontal bar visualizations (even if I query the last hour o… --- ## [Kibana won't start after upgrade to 7.8.0](https://discuss.elastic.co/t/kibana-wont-start-after-upgrade-to-7-8-0/237819)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 8\ **Last updated:** [June 23, 2020, 2:00pm UTC](https://discuss.elastic.co/t/kibana-wont-start-after-upgrade-to-7-8-0/237819 "2020-06-23T14:00:12Z")
I apply this to three node cluster all of them are master/data/kibana two of them starts up kibana without any problem one does not. it do not even puts any log on log file or on screen systemctl status kibana ● kib… --- ## [Elasticsearch not indexing after update (only a specific index)](https://discuss.elastic.co/t/elasticsearch-not-indexing-after-update-only-a-specific-index/238271)
**Author:** [@user9](https://discuss.elastic.co/u/user9)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 1:51pm UTC](https://discuss.elastic.co/t/elasticsearch-not-indexing-after-update-only-a-specific-index/238271 "2020-06-23T13:51:44Z")
I've been for days trying to solve this issue, there is no support neither troubleshoot about these issues. All indexes are being created, except this one. Before the update it worked, now it doesn't. Things I checked: … --- ## [Netflow logs](https://discuss.elastic.co/t/netflow-logs/238272)
**Author:** [@amr\_hamdy](https://discuss.elastic.co/u/amr_hamdy)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 1:55pm UTC](https://discuss.elastic.co/t/netflow-logs/238272 "2020-06-23T13:55:49Z")
when i run logstash to collect netflow logs and send it to sentinel it works well but message in logs is in unreadable format my input configuration file input { udp { port =\> 2055 type =\> "netflow" } } --- ## [Http\_poller input plugin: please no http\_poller\_metadata](https://discuss.elastic.co/t/http-poller-input-plugin-please-no-http-poller-metadata/238200)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 1:32pm UTC](https://discuss.elastic.co/t/http-poller-input-plugin-please-no-http-poller-metadata/238200 "2020-06-23T13:32:27Z")
Hi there, is there a 'trick' to disable collecting the http\_poller\_metadata fields when using this plugin? I am only interested in the acutal data I get. Right now I am doing this: http\_poller { urls =\> { url =\> "ht… --- ## [Python : How to write a simple regexp query using Elasticsearch in python?](https://discuss.elastic.co/t/python-how-to-write-a-simple-regexp-query-using-elasticsearch-in-python/238197)
**Author:** [@VITTHAL\_BHANDARI](https://discuss.elastic.co/u/VITTHAL_BHANDARI)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 1:16pm UTC](https://discuss.elastic.co/t/python-how-to-write-a-simple-regexp-query-using-elasticsearch-in-python/238197 "2020-06-23T13:16:59Z")
I am trying to write a simple regexp query using elasticsearch in python that just won't work. Can anybody tell me where I'm going wrong ? result = es.search(index="my-index", body={"query": {"regexp": {"Name": "Vi.\*" }… --- ## [Aggregation support in SIEM](https://discuss.elastic.co/t/aggregation-support-in-siem/237974)
**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 12:59pm UTC](https://discuss.elastic.co/t/aggregation-support-in-siem/237974 "2020-06-23T12:59:40Z")
Hi Team, Are there any plans to add an aggregations support in the SIEM app? Maybe the ability to create a correlation rule by leveraging the Elasticsearch aggregations? For example, a very simple use case, where you w… --- ## [How to know which documents in the search results include all of the tokens in the search query (for one particular field)](https://discuss.elastic.co/t/how-to-know-which-documents-in-the-search-results-include-all-of-the-tokens-in-the-search-query-for-one-particular-field/237639)
**Author:** [@swafa](https://discuss.elastic.co/u/swafa)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 12:37pm UTC](https://discuss.elastic.co/t/how-to-know-which-documents-in-the-search-results-include-all-of-the-tokens-in-the-search-query-for-one-particular-field/237639 "2020-06-23T12:37:46Z")
We are trying to find out which documents in our search results include all the tokens in our search query. For example when running the following query: GET /test/\_search { "query" : { "match"… --- ## [Filter Sonicwall](https://discuss.elastic.co/t/filter-sonicwall/238257)
**Author:** [@Danilo\_Visual](https://discuss.elastic.co/u/Danilo_Visual)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 12:34pm UTC](https://discuss.elastic.co/t/filter-sonicwall/238257 "2020-06-23T12:34:13Z")
I'm using ELK and I wanted to know where I can insert filters to analyze Sonicwall logs and view them in the graphana. Would you put it in the filter.conf of the logstash? Can anybody help me? --- ## [Unable to change the replication factor in elasticsearch 6.8](https://discuss.elastic.co/t/unable-to-change-the-replication-factor-in-elasticsearch-6-8/238234)
**Author:** [@sammi](https://discuss.elastic.co/u/sammi)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 12:09pm UTC](https://discuss.elastic.co/t/unable-to-change-the-replication-factor-in-elasticsearch-6-8/238234 "2020-06-23T12:09:22Z")
Hi, Trying to change the replication factor for indices on 3 node elasticsearch 6.8 cluster from 1 to 2. Getting errors on the server. below is the GET result for settings. curl -XGET http://127.0.0.1:9200/janusgraph… --- ## [Failed to obtain a connection with the database Metricbeat](https://discuss.elastic.co/t/failed-to-obtain-a-connection-with-the-database-metricbeat/238249)
**Author:** [@himalc](https://discuss.elastic.co/u/himalc)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 11:47am UTC](https://discuss.elastic.co/t/failed-to-obtain-a-connection-with-the-database-metricbeat/238249 "2020-06-23T11:47:06Z")
Hi, I have below issue on metricbeat logs. I have using all applications are in docker containers (metricbeat, postgresql, elasticsearch, kibana). Any help on this? Error from metricbeat: (1) Error INFO module/wrappe… --- ## [Elastic Search time query](https://discuss.elastic.co/t/elastic-search-time-query/238245)
**Author:** [@Shubham\_Singh\_Rathor](https://discuss.elastic.co/u/Shubham_Singh_Rathor)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 11:43am UTC](https://discuss.elastic.co/t/elastic-search-time-query/238245 "2020-06-23T11:43:54Z")
i am not able filter the data body={'query': { "bool": { "must": {"match": {"Id": "3"}} , "filter": {"range": {"@timestamp": {"gte": "now-30m", "lte": "now"}}} }}} less than 30 minute query for elasticsearch usi… --- ## [Unable to connect to mssql using logstash jdbc static filter](https://discuss.elastic.co/t/unable-to-connect-to-mssql-using-logstash-jdbc-static-filter/238237)
**Author:** [@Matthew\_Field](https://discuss.elastic.co/u/Matthew_Field)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 11:13am UTC](https://discuss.elastic.co/t/unable-to-connect-to-mssql-using-logstash-jdbc-static-filter/238237 "2020-06-23T11:13:31Z")
The log output doesnt give me much of a clue what the problem is: My config: jdbc\_static { loaders =\> \[ \ \] local\_db\_objects =\> \[ \… --- ## [Confused about the behaviour of last\_run\_metadata\_path in JDBC input](https://discuss.elastic.co/t/confused-about-the-behaviour-of-last-run-metadata-path-in-jdbc-input/237669)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 8:00am UTC](https://discuss.elastic.co/t/confused-about-the-behaviour-of-last-run-metadata-path-in-jdbc-input/237669 "2020-06-23T08:00:27Z")
I am trying to get some data out of a SQL database. Here is the configuration: input { jdbc { jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServerDriver" jdbc\_con… --- ## [Adding 2 button on Kibana discover page and enable it](https://discuss.elastic.co/t/adding-2-button-on-kibana-discover-page-and-enable-it/238214)
**Author:** [@edisonyang](https://discuss.elastic.co/u/edisonyang)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 10:52am UTC](https://discuss.elastic.co/t/adding-2-button-on-kibana-discover-page-and-enable-it/238214 "2020-06-23T10:52:52Z")
Hi, I want to add 2 button in discover page to call external HTTP API from our server, because I need the wonderful filter bar to add params to my request. I've successfully added the 2 button in kibana/src/legacy/cor… --- ## [Performance of logstash degrading](https://discuss.elastic.co/t/performance-of-logstash-degrading/238229)
**Author:** [@juliolb](https://discuss.elastic.co/u/juliolb)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 10:49am UTC](https://discuss.elastic.co/t/performance-of-logstash-degrading/238229 "2020-06-23T10:49:33Z")
Hello, I have been using logstash for some time now and I recently upgraded from an old version (5.3.2) to a newer one (6.2.4). Using basically the same parameters I noticed a dramatic decrease in the rate of processed … --- ## [ElasticSearch inine script, max\_compilation\_rate issue](https://discuss.elastic.co/t/elasticsearch-inine-script-max-compilation-rate-issue/238082)
**Author:** [@rkr57123](https://discuss.elastic.co/u/rkr57123)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-inine-script-max-compilation-rate-issue/238082 "2020-06-23T10:43:06Z")
\`Hi, I'm using elastic-7.3.1. I'm sending large number of requests each having unique dynamic inline script and I'm getting this issue on elastic server org.elasticsearch.ElasticsearchException: Elasticsearch exceptio… --- ## [Grok pattern to get the whole text without considering space](https://discuss.elastic.co/t/grok-pattern-to-get-the-whole-text-without-considering-space/238095)
**Author:** [@Mohan\_vel](https://discuss.elastic.co/u/Mohan_vel)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 6:55am UTC](https://discuss.elastic.co/t/grok-pattern-to-get-the-whole-text-without-considering-space/238095 "2020-06-23T06:55:15Z")
I am trying to grok a message text with my grok pattern if i pass the sample data without space my grok pattern works fine but if there is any space in between text it fetch only the first word before space and after spa… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1371) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1373)