# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1384 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1385 --- ## [How to get all results from Elastic Search Index using Powershell and save them locally](https://discuss.elastic.co/t/how-to-get-all-results-from-elastic-search-index-using-powershell-and-save-them-locally/237332)
**Author:** [@Vikas10](https://discuss.elastic.co/u/Vikas10)\ **Replies:** 3\ **Last updated:** [June 16, 2020, 11:25pm UTC](https://discuss.elastic.co/t/how-to-get-all-results-from-elastic-search-index-using-powershell-and-save-them-locally/237332 "2020-06-16T23:25:13Z")
At present I'm getting only 10 results form content .but the total shows 12000..i want to get all 12000 results one time. Is there a way to do it? --- ## [Do we need LB to cluster Kibana nodes](https://discuss.elastic.co/t/do-we-need-lb-to-cluster-kibana-nodes/237359)
**Author:** [@snambu5878](https://discuss.elastic.co/u/snambu5878)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 11:00pm UTC](https://discuss.elastic.co/t/do-we-need-lb-to-cluster-kibana-nodes/237359 "2020-06-16T23:00:34Z")
Hi Team, We are in the process of procuring Enterprise ELK license and we are doing a POC while the procurement in progress. We have 2 kibana nodes, 2 master nodes, 3 HOT data nodes, 2 WARM data nodes and other needed … --- ## [How does loadbalancing and "talking to a cluster" work?](https://discuss.elastic.co/t/how-does-loadbalancing-and-talking-to-a-cluster-work/237253)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 14\ **Last updated:** [June 16, 2020, 10:48pm UTC](https://discuss.elastic.co/t/how-does-loadbalancing-and-talking-to-a-cluster-work/237253 "2020-06-16T22:48:31Z")
Hi, I have learned a lot about clusteres in the past 2 weeks but one thing which I dont get the hang of is how to talk to the cluster. What i mean is that I have a Redis Database and I would like to ingest data into a H… --- ## [Kibana unable to start (validation error cookie\_session\_storage.js)](https://discuss.elastic.co/t/kibana-unable-to-start-validation-error-cookie-session-storage-js/233787)
**Author:** [@kumar\_k](https://discuss.elastic.co/u/kumar_k)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 10:41pm UTC](https://discuss.elastic.co/t/kibana-unable-to-start-validation-error-cookie-session-storage-js/233787 "2020-06-16T22:41:35Z")
Hi, Below error preventing kibana to start. please guide. ''' log \[17:00:36.724\] \[fatal\]\[root\] { ValidationError: child "path" fails because \["path" is not allowed to be empty\] at Object.exports.process (D:\\Kibana\_… --- ## [Suricata rulsets updates and Kibana](https://discuss.elastic.co/t/suricata-rulsets-updates-and-kibana/233809)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 9:56pm UTC](https://discuss.elastic.co/t/suricata-rulsets-updates-and-kibana/233809 "2020-06-16T21:56:24Z")
Hi, Running ELK 6.8.8 on premises I've defined a number of visualizations in Kibana, which use the signature IDs from Suricata. Initially I made a series of manual filters by ID and the visualizations look good, show… --- ## [I want to know the Roles setting for CSV output with Kibana](https://discuss.elastic.co/t/i-want-to-know-the-roles-setting-for-csv-output-with-kibana/234649)
**Author:** [@yokoyoko](https://discuss.elastic.co/u/yokoyoko)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 9:43pm UTC](https://discuss.elastic.co/t/i-want-to-know-the-roles-setting-for-csv-output-with-kibana/234649 "2020-06-16T21:43:04Z")
I want to create an account dedicated to CSV output from Kibana. To perform the following CSV output operation, What kind of setting should be made in "Management\> Security\> Roles"? ■ CSV output procedure Discover\> … --- ## [Breadcrumbs with drill down](https://discuss.elastic.co/t/breadcrumbs-with-drill-down/233780)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 9:31pm UTC](https://discuss.elastic.co/t/breadcrumbs-with-drill-down/233780 "2020-06-16T21:31:50Z")
Kibana version : 7.6 Elasticsearch version : 7.6 APM Server version : 7.3.2 APM Agent language and version : java 1.9.0 Fresh install or upgraded from other version? fresh install Is there anything special in your s… --- ## [Coordinating node recommendation](https://discuss.elastic.co/t/coordinating-node-recommendation/237364)
**Author:** [@newkidtopc](https://discuss.elastic.co/u/newkidtopc)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 9:25pm UTC](https://discuss.elastic.co/t/coordinating-node-recommendation/237364 "2020-06-16T21:25:50Z")
Hello, We have a ES cluster of 10 data nodes with additional 5 master nodes. We are exploring the idea of adding co-ordinating node to the cluster to help with query performance, especially aggregation queries. The dat… --- ## [The following Java JRE installation is unsupported](https://discuss.elastic.co/t/the-following-java-jre-installation-is-unsupported/237339)
**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 9:21pm UTC](https://discuss.elastic.co/t/the-following-java-jre-installation-is-unsupported/237339 "2020-06-16T21:21:42Z")
Hi all! I am running a 3 node, 7.6.2 cluster and came across the following critical alert during my latest Nessus scan on each: The following Java JRE installation is unsupported : Path : /usr/share/ela… --- ## [Kibana 7.5.0 - Unable to generate report Error: Failed to decrypt report job data](https://discuss.elastic.co/t/kibana-7-5-0-unable-to-generate-report-error-failed-to-decrypt-report-job-data/233824)
**Author:** [@Zabulon](https://discuss.elastic.co/u/Zabulon)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 9:19pm UTC](https://discuss.elastic.co/t/kibana-7-5-0-unable-to-generate-report-error-failed-to-decrypt-report-job-data/233824 "2020-06-16T21:19:39Z")
Hello, I'm trying to run reports and get stock with that message in the reporting console: \`Unable to generate report Error: Failed to decrypt report job data. Please ensure that xpack.reporting.encryptionKey is set a… --- ## [Kibana Web Console shows zero records when some docs don't have timestamp](https://discuss.elastic.co/t/kibana-web-console-shows-zero-records-when-some-docs-dont-have-timestamp/237355)
**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\ **Replies:** 5\ **Last updated:** [June 16, 2020, 9:07pm UTC](https://discuss.elastic.co/t/kibana-web-console-shows-zero-records-when-some-docs-dont-have-timestamp/237355 "2020-06-16T21:07:39Z")
Hi ES and Kibana versions 7.7.0 In this example I have three docs that are loaded into ElasticSearch. The mapping has a timestamp However one doc does not have a timestamp field { "browser\_type": "Firefox", "ts": … --- ## [CSV report downloaded is not giving the correct date data](https://discuss.elastic.co/t/csv-report-downloaded-is-not-giving-the-correct-date-data/234117)
**Author:** [@vijayaag](https://discuss.elastic.co/u/vijayaag)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 8:54pm UTC](https://discuss.elastic.co/t/csv-report-downloaded-is-not-giving-the-correct-date-data/234117 "2020-06-16T20:54:32Z")
Hi Team, I am trying to generate a CSV report, YTD. But the data after downloading is giving report only for April. I choose the absolute time range (Jan 2020 to till date) and i could see data from Jan in the UI. Once … --- ## [Remove message center icon from Kibana](https://discuss.elastic.co/t/remove-message-center-icon-from-kibana/234442)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 8:48pm UTC](https://discuss.elastic.co/t/remove-message-center-icon-from-kibana/234442 "2020-06-16T20:48:50Z")
Hi, I would like to remove this icon because it is confusing for my end users because they think that these messages are for them, but in fact these are just overall messages for the ELK stack. Is there a way to remove … --- ## [Not able to see elastic index to create index pattern](https://discuss.elastic.co/t/not-able-to-see-elastic-index-to-create-index-pattern/234558)
**Author:** [@kunal\_patil](https://discuss.elastic.co/u/kunal_patil)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 8:45pm UTC](https://discuss.elastic.co/t/not-able-to-see-elastic-index-to-create-index-pattern/234558 "2020-06-16T20:45:38Z")
I have created an index in ECE using filebeat as well as logstash. I am able to see the index in kibana in elasticseacrh index management. However, not able to create index pattern as the the indices are not available wh… --- ## [Can't Use Field (Float) in Visualization](https://discuss.elastic.co/t/cant-use-field-float-in-visualization/233445)
**Author:** [@ntwrk80](https://discuss.elastic.co/u/ntwrk80)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 8:36pm UTC](https://discuss.elastic.co/t/cant-use-field-float-in-visualization/233445 "2020-06-16T20:36:21Z")
I've verified that my index is showing the right type for the field I want to make a line graph with, but it does not show up as an option for the Y-Axis if I choose an aggregation type. My data is a simple number groke… --- ## [\[savedobjects-service\] Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/233548)
**Author:** [@jpnorenam](https://discuss.elastic.co/u/jpnorenam)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 8:23pm UTC](https://discuss.elastic.co/t/savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/233548 "2020-06-16T20:23:50Z")
Hi, I'am setting up the new ELK (7.7.0) in debian/buster64 OS. And Kibana is unable to connect to ES. The console log: log \[13:32:01.586\] \[info\]\[savedobjects-service\] Starting saved objects migrations log \[13:32:01… --- ## [Terms query not working as expected](https://discuss.elastic.co/t/terms-query-not-working-as-expected/237357)
**Author:** [@denis\_ritchie](https://discuss.elastic.co/u/denis_ritchie)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 7:43pm UTC](https://discuss.elastic.co/t/terms-query-not-working-as-expected/237357 "2020-06-16T19:43:22Z")
Below is terms query with \_msearch. But its not giving all result.As of now, it only return result for 4161 even though data exists for 4402 as well. please look suggest solution. GET \_msearch { "index": \["index1", "i… --- ## [Retrieve unique key names from "property" field](https://discuss.elastic.co/t/retrieve-unique-key-names-from-property-field/237268)
**Author:** [@mashuma](https://discuss.elastic.co/u/mashuma)\ **Replies:** 8\ **Last updated:** [June 16, 2020, 7:18pm UTC](https://discuss.elastic.co/t/retrieve-unique-key-names-from-property-field/237268 "2020-06-16T19:18:44Z")
Hello everyone, Quick question.. I've got following documents. \[ { "aid": 1, "ameta": { "City": "Brussels", "Fleet": "", "Works": "Building", "Status"… --- ## [Field aliases in search results](https://discuss.elastic.co/t/field-aliases-in-search-results/237354)
**Author:** [@Ram\_Jeghan](https://discuss.elastic.co/u/Ram_Jeghan)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 6:57pm UTC](https://discuss.elastic.co/t/field-aliases-in-search-results/237354 "2020-06-16T18:57:51Z")
The field aliases in search results show the original field names and not aliases. How do we get the alias field names in the search result. Ex: PUT myindex { "mappings": { "properties": { … --- ## [Unable to create new document/event in logstash Ruby filter using yield](https://discuss.elastic.co/t/unable-to-create-new-document-event-in-logstash-ruby-filter-using-yield/236995)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 6:38pm UTC](https://discuss.elastic.co/t/unable-to-create-new-document-event-in-logstash-ruby-filter-using-yield/236995 "2020-06-16T18:38:00Z")
I am trying to calculate elapsed time between the first and last line of a file using a Ruby filter and push the field in a new event using the below Ruby filter ruby { init =\> "@save\_the\_path = 'none'" code =\> " … --- ## [Adding SCSS along with my KIbana plugin (How to pre-build plugin)](https://discuss.elastic.co/t/adding-scss-along-with-my-kibana-plugin-how-to-pre-build-plugin/236949)
**Author:** [@Paul\_Gege](https://discuss.elastic.co/u/Paul_Gege)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 6:29pm UTC](https://discuss.elastic.co/t/adding-scss-along-with-my-kibana-plugin-how-to-pre-build-plugin/236949 "2020-06-16T18:29:45Z")
Hi I've been trying to find out how to add an scss file to my kibana plugin, i'm using version 7.6.2. I ran into this post https://discuss.elastic.co/t/custom-webpack-settings-integration-with-kibana-plugin/195162/6?u=pa… --- ## [Kibana audit logging](https://discuss.elastic.co/t/kibana-audit-logging/236941)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 6:27pm UTC](https://discuss.elastic.co/t/kibana-audit-logging/236941 "2020-06-16T18:27:35Z")
Hi, I'm about to enable audit logging in kibana, but found documentation lacks information, i refer to: https://www.elastic.co/guide/en/kibana/current/xpack-security-audit-logging.html It says that the events you can … --- ## [Url link have prefix that cant open the file](https://discuss.elastic.co/t/url-link-have-prefix-that-cant-open-the-file/237012)
**Author:** [@Ostr1969](https://discuss.elastic.co/u/Ostr1969)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 6:02pm UTC](https://discuss.elastic.co/t/url-link-have-prefix-that-cant-open-the-file/237012 "2020-06-16T18:02:28Z")
When I click url field in search results it opens the link with prefix of http://localhost:5601. How do I cancel the prefix? --- ## [Reindex a subset of data to a different index](https://discuss.elastic.co/t/reindex-a-subset-of-data-to-a-different-index/237341)
**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 5:00pm UTC](https://discuss.elastic.co/t/reindex-a-subset-of-data-to-a-different-index/237341 "2020-06-16T17:00:44Z")
Hello all, we're using Elasticsearch to index Windows event logs and keeping them for 6 months; what I would like to do is reindex a subset of data such as: user creation/deletion events group creation/deletion events i… --- ## [Elasticsearch no longer writing to index(s) after upgrading from 7.6 to 7.7](https://discuss.elastic.co/t/elasticsearch-no-longer-writing-to-index-s-after-upgrading-from-7-6-to-7-7/236775)
**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 4:49pm UTC](https://discuss.elastic.co/t/elasticsearch-no-longer-writing-to-index-s-after-upgrading-from-7-6-to-7-7/236775 "2020-06-16T16:49:03Z")
Last night we upgraded from 7.6 to 7.7. Since then we have not had any logs coming into Elasticsearch. Our pipeline looks like so: filebeat on nodes ship to a single ELK server I enabled ruby debug logging in logstas… --- ## [Synchronizing elastic search with relational database](https://discuss.elastic.co/t/synchronizing-elastic-search-with-relational-database/237342)
**Author:** [@Ragav\_Kb](https://discuss.elastic.co/u/Ragav_Kb)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 4:43pm UTC](https://discuss.elastic.co/t/synchronizing-elastic-search-with-relational-database/237342 "2020-06-16T16:43:47Z")
I'm new to elastic search and evaluating a need to synchronize data from relational database to elastic search. This article provided a solution to achieve it - https://www.elastic.co/blog/how-to-keep-elasticsearch-sync… --- ## [Using remote reindex on clusters which doesn't support username & password](https://discuss.elastic.co/t/using-remote-reindex-on-clusters-which-doesnt-support-username-password/237333)
**Author:** [@ankikala](https://discuss.elastic.co/u/ankikala)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 3:44pm UTC](https://discuss.elastic.co/t/using-remote-reindex-on-clusters-which-doesnt-support-username-password/237333 "2020-06-16T15:44:24Z")
Hello, I was exploring the remote reindex feature. Looking at the documentation and a bit of code reading, it seems remote reindex would only work if the cluster supports username & password kind of authentication. So … --- ## [Simulation of Adobe Hijack](https://discuss.elastic.co/t/simulation-of-adobe-hijack/237281)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 3:25pm UTC](https://discuss.elastic.co/t/simulation-of-adobe-hijack/237281 "2020-06-16T15:25:52Z")
Hi guys, Anyone know how i can simulate this on my personal laptop in order to check the alert? https://www.elastic.co/guide/en/siem/guide/current/adobe-hijack-persistence.html#adobe-hijack-persistence Thanks in advan… --- ## [Scalability of ES server](https://discuss.elastic.co/t/scalability-of-es-server/237329)
**Author:** [@Andre\_Dexheimer](https://discuss.elastic.co/u/Andre_Dexheimer)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 3:20pm UTC](https://discuss.elastic.co/t/scalability-of-es-server/237329 "2020-06-16T15:20:16Z")
Hi, I'm running a setup with Elasticsearch, Fluentd and Kibana where a single central aggregator receives data from multiple clients and stores it into elasticsearch, running in a docker compose. I receive about 22GB o… --- ## [Store messages that fail to index to elastisearch into file for later analysis](https://discuss.elastic.co/t/store-messages-that-fail-to-index-to-elastisearch-into-file-for-later-analysis/237298)
**Author:** [@petrkalina](https://discuss.elastic.co/u/petrkalina)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 3:17pm UTC](https://discuss.elastic.co/t/store-messages-that-fail-to-index-to-elastisearch-into-file-for-later-analysis/237298 "2020-06-16T15:17:43Z")
Hello Community, in a logstash / elasticsearch pipeline I notice rare errors similar to this one: \[2020-06-08T17:02:05,621\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Could not index event to Elasticsearch. {:status=\>… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1383) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1385)