# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1398 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1399 --- ## [Cannot create Elasticsearch users with ECK](https://discuss.elastic.co/t/cannot-create-elasticsearch-users-with-eck/236377)
**Author:** [@maxdanilov](https://discuss.elastic.co/u/maxdanilov)\ **Replies:** 2\ **Last updated:** [June 9, 2020, 3:59pm UTC](https://discuss.elastic.co/t/cannot-create-elasticsearch-users-with-eck/236377 "2020-06-09T15:59:32Z")
I'm following this tutorial: https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-users-and-roles.html to set up users in Elasticsearch programmatically. I have eck 1.1.2 installed in the cluster, Elasticsearch and … --- ## [Outdated Documentation](https://discuss.elastic.co/t/outdated-documentation/236382)
**Author:** [@Kren42](https://discuss.elastic.co/u/Kren42)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 3:59pm UTC](https://discuss.elastic.co/t/outdated-documentation/236382 "2020-06-09T15:59:00Z")
The documentation for the CEF codec located below is out of date. https://www.elastic.co/guide/en/logstash/current/plugins-codecs-cef.html There is at least one undocumented option: 'raw\_data\_field'. How does this go … --- ## [Supporting multiple languages in elasticsearch](https://discuss.elastic.co/t/supporting-multiple-languages-in-elasticsearch/236369)
**Author:** [@thekradev](https://discuss.elastic.co/u/thekradev)\ **Replies:** 1\ **Last updated:** [June 9, 2020, 3:35pm UTC](https://discuss.elastic.co/t/supporting-multiple-languages-in-elasticsearch/236369 "2020-06-09T15:35:19Z")
I want to know how to return the response based on site language. for example: "name": { "en": "Berlin", "nl": "Berlijn", } The site language is "nl", so the name field value should be return as "Berlijn"… --- ## [How to get total passed tests divided by total executed tests on a metric?](https://discuss.elastic.co/t/how-to-get-total-passed-tests-divided-by-total-executed-tests-on-a-metric/236225)
**Author:** [@Goishin](https://discuss.elastic.co/u/Goishin)\ **Replies:** 2\ **Last updated:** [June 9, 2020, 3:32pm UTC](https://discuss.elastic.co/t/how-to-get-total-passed-tests-divided-by-total-executed-tests-on-a-metric/236225 "2020-06-09T15:32:39Z")
I'm struggling to figure out how to display a metric. I'm trying to display the overall pass rate of test passes. In my index, I have a scripted field which has total\_tests, it is a sum of the following three fields: re… --- ## [\[Pipeline\] to rename column name of doc before indexing](https://discuss.elastic.co/t/pipeline-to-rename-column-name-of-doc-before-indexing/236375)
**Author:** [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 3:27pm UTC](https://discuss.elastic.co/t/pipeline-to-rename-column-name-of-doc-before-indexing/236375 "2020-06-09T15:27:48Z")
Hi Team , We want to rename column name of doc before indexing. Please find below example : in above example we have tag.customer\_id column name and we want to rename it to customerID before indexing doc as below. … --- ## [Escape pipe \\ Vertical Operator (|) in Ingress Pipeline for grok processor](https://discuss.elastic.co/t/escape-pipe-vertical-operator-in-ingress-pipeline-for-grok-processor/236358)
**Author:** [@Atul\_Gunjal](https://discuss.elastic.co/u/Atul_Gunjal)\ **Replies:** 5\ **Last updated:** [June 9, 2020, 3:20pm UTC](https://discuss.elastic.co/t/escape-pipe-vertical-operator-in-ingress-pipeline-for-grok-processor/236358 "2020-06-09T15:20:01Z")
I want to process logs separated by pipe '|' operator in an ingress pipeline using grok. How can I ignore this character in the pattern? Log data: PUT /combined/\_doc/1?pipeline=pipeline\_combined\_logs { "service": "… --- ## [Unable to start elasticsearch after add keystore on RHEL7](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-add-keystore-on-rhel7/236091)
**Author:** [@Bikash\_Swain](https://discuss.elastic.co/u/Bikash_Swain)\ **Replies:** 4\ **Last updated:** [June 9, 2020, 3:09pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-add-keystore-on-rhel7/236091 "2020-06-09T15:09:42Z")
I freshly installed elasticsearch 7.6 in RHEL7 and started it successfully. When I add "test" keystore with command "./elasticsearch-keystore add test" and restarted elasticsearch service, its not starting up and showin… --- ## [How do I connect my MySQL database to Elasticsearch (Cloud)](https://discuss.elastic.co/t/how-do-i-connect-my-mysql-database-to-elasticsearch-cloud/236249)
**Author:** [@Lenny\_Parisi](https://discuss.elastic.co/u/Lenny_Parisi)\ **Replies:** 2\ **Last updated:** [June 9, 2020, 3:07pm UTC](https://discuss.elastic.co/t/how-do-i-connect-my-mysql-database-to-elasticsearch-cloud/236249 "2020-06-09T15:07:39Z")
I'm new to Elasticsearch and have a very rough understanding of how it works, so I'm not even sure if it's right for me. Does anyone know how to establish a live feed from my MySQL database to Elasticsearch (currently se… --- ## [ES Rest Client - trust all certificates](https://discuss.elastic.co/t/es-rest-client-trust-all-certificates/236080)
**Author:** [@AsfK](https://discuss.elastic.co/u/AsfK)\ **Replies:** 6\ **Last updated:** [June 9, 2020, 3:06pm UTC](https://discuss.elastic.co/t/es-rest-client-trust-all-certificates/236080 "2020-06-09T15:06:30Z")
Hello! For Dev-Ops testing we want to make a untrusted connection. I found a self-side soulution here, but will be glad to avoid the key part. RestClientBuilder restHttp; // .... restHttp.setHttpClientConfigCallback(h… --- ## [How to remove aggregation “count” in tooltip in Kibana coordinate map?](https://discuss.elastic.co/t/how-to-remove-aggregation-count-in-tooltip-in-kibana-coordinate-map/236131)
**Author:** [@New\_user](https://discuss.elastic.co/u/New_user)\ **Replies:** 1\ **Last updated:** [June 9, 2020, 3:00pm UTC](https://discuss.elastic.co/t/how-to-remove-aggregation-count-in-tooltip-in-kibana-coordinate-map/236131 "2020-06-09T15:00:54Z")
Hello, I need to remove"count" in tooltip in Kibana cordinate map. This map is in road\_map Layer. Anyone knows how to do this? --- ## [X-PACK DLS and caching](https://discuss.elastic.co/t/x-pack-dls-and-caching/236367)
**Author:** [@Aharon](https://discuss.elastic.co/u/Aharon)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 2:47pm UTC](https://discuss.elastic.co/t/x-pack-dls-and-caching/236367 "2020-06-09T14:47:34Z")
Sometime around ES 7.3 or 7.4 a fix was applied that stopped DLS caching in Fixed Bitsets from growing out of control for large DLS deployments (https://github.com/elastic/elasticsearch/commit/bb130f554e8908be2d8fbb9bb11… --- ## [How to create an API for read?](https://discuss.elastic.co/t/how-to-create-an-api-for-read/236363)
**Author:** [@Hello\_world](https://discuss.elastic.co/u/Hello_world)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 2:39pm UTC](https://discuss.elastic.co/t/how-to-create-an-api-for-read/236363 "2020-06-09T14:39:02Z")
I need api for user use to search data. https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api-create-api-key.html#security-api-create-api-key I create an API and then test it by Postman but its d… --- ## [Extracting data without saved \_source](https://discuss.elastic.co/t/extracting-data-without-saved-source/236342)
**Author:** [@kosmakoff](https://discuss.elastic.co/u/kosmakoff)\ **Replies:** 1\ **Last updated:** [June 9, 2020, 2:07pm UTC](https://discuss.elastic.co/t/extracting-data-without-saved-source/236342 "2020-06-09T14:07:45Z")
Say I need to index documents containing sensitive information, which I would only like to search by, but not return in search results. I learned that I can disable the \_source in index, so that nothing in document is re… --- ## [Logstash permissions](https://discuss.elastic.co/t/logstash-permissions/236355)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 2:03pm UTC](https://discuss.elastic.co/t/logstash-permissions/236355 "2020-06-09T14:03:48Z")
What are the correct user group, rwx permissions should i give to "/etc/logstash/config.d/" directory. I am always getting permission errors. --- ## [Replace @timestamp to time from actual log file](https://discuss.elastic.co/t/replace-timestamp-to-time-from-actual-log-file/236330)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 11\ **Last updated:** [June 9, 2020, 2:02pm UTC](https://discuss.elastic.co/t/replace-timestamp-to-time-from-actual-log-file/236330 "2020-06-09T14:02:56Z")
Hello it is possible to Change @timestamp to time from actual log file I use this config filter { date { match =\> \["timestamp", "ISO8601"\] } } But it does not work --- ## [Filebeat is not able to connect to logstash](https://discuss.elastic.co/t/filebeat-is-not-able-to-connect-to-logstash/236066)
**Author:** [@NetRajan](https://discuss.elastic.co/u/NetRajan)\ **Replies:** 4\ **Last updated:** [June 9, 2020, 1:59pm UTC](https://discuss.elastic.co/t/filebeat-is-not-able-to-connect-to-logstash/236066 "2020-06-09T13:59:16Z")
I am using filebeat version 7.6.2 Trying to connect to logstash and getting following error. Failed to connect to backoff(async(tcp://dnslogstash.net:5044)): EOF logstash is configured with SSL certificate. I am able… --- ## [Cannot see today's data in the first half of the day (!?)](https://discuss.elastic.co/t/cannot-see-todays-data-in-the-first-half-of-the-day/236347)
**Author:** [@Sergey\_Razumov](https://discuss.elastic.co/u/Sergey_Razumov)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 1:36pm UTC](https://discuss.elastic.co/t/cannot-see-todays-data-in-the-first-half-of-the-day/236347 "2020-06-09T13:36:06Z")
Hello there, I'm trying to do a request which is depending on a date field "@timestamp": { "type": "date" } The query looks like this: { "aggs": { "2": { "date\_histogram": { … --- ## [Azure Module Metricbeat](https://discuss.elastic.co/t/azure-module-metricbeat/236346)
**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 1:35pm UTC](https://discuss.elastic.co/t/azure-module-metricbeat/236346 "2020-06-09T13:35:44Z")
Hello, I want to make efficient use of "Monitor" metricset in "Azure" module on metricbeat side. I am looking to get relevant information regarding disk usage, memory availability of my Azure VMs. The issue is that I … --- ## [ECK route/traffic handle](https://discuss.elastic.co/t/eck-route-traffic-handle/236246)
**Author:** [@guizaols](https://discuss.elastic.co/u/guizaols)\ **Replies:** 6\ **Last updated:** [June 9, 2020, 1:15pm UTC](https://discuss.elastic.co/t/eck-route-traffic-handle/236246 "2020-06-09T13:15:47Z")
When I install the ECK operator in my kubernetes cluster it's added a hulk-es-http service. I'd like to know if I send all the requests to https://hulk-es-http:9200 it'll route to the right nodes. E.g.: 3 master nodes, … --- ## [Error fetching fields for index pattern filebeat-\* (ID: filebeat-\*)](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-filebeat-id-filebeat/236018)
**Author:** [@Zakaria\_Irkha](https://discuss.elastic.co/u/Zakaria_Irkha)\ **Replies:** 1\ **Last updated:** [June 9, 2020, 1:13pm UTC](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-filebeat-id-filebeat/236018 "2020-06-09T13:13:11Z")
Hello everyone, i'm new to elasticsearch and its tools, i face some troubles loading my apache server logs to kibana using filebeat then visualize them with the dashboard offered in kibana. i have done the setup for fi… --- ## [Kibana using docvalue\_fields for no apparent reason](https://discuss.elastic.co/t/kibana-using-docvalue-fields-for-no-apparent-reason/236333)
**Author:** [@Michiel\_Van\_Der\_Lee](https://discuss.elastic.co/u/Michiel_Van_Der_Lee)\ **Replies:** 4\ **Last updated:** [June 9, 2020, 1:12pm UTC](https://discuss.elastic.co/t/kibana-using-docvalue-fields-for-no-apparent-reason/236333 "2020-06-09T13:12:19Z")
I have a simple visualization: Metrics: Count Buckets: Split group: Date Histogram, @timestamp, Weekly Kibana builds the following request: { "aggs": { "2": { "date\_histogram": { "field": "@time… --- ## [Logstash filter ruby](https://discuss.elastic.co/t/logstash-filter-ruby/235677)
**Author:** [@ajayraghuraj](https://discuss.elastic.co/u/ajayraghuraj)\ **Replies:** 9\ **Last updated:** [June 9, 2020, 1:05pm UTC](https://discuss.elastic.co/t/logstash-filter-ruby/235677 "2020-06-09T13:05:06Z")
Hi How do I add a new field which is a percentage calculation using ruby filter ? new field called 'MemValuePct' should contain the value of 'type\_instance' in percentage example MemValuePct \[ free / (free +cached … --- ## [Hide a document from the searching](https://discuss.elastic.co/t/hide-a-document-from-the-searching/236313)
**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\ **Replies:** 4\ **Last updated:** [June 9, 2020, 1:03pm UTC](https://discuss.elastic.co/t/hide-a-document-from-the-searching/236313 "2020-06-09T13:03:41Z")
We want to use Elasticsearch as primary data source, and we also want to keep track of changes of document, so we want to store all the versions of a document. As a solution will be to hide previous document versions fr… --- ## [Kibana Heatmap - order by sum of all buckets](https://discuss.elastic.co/t/kibana-heatmap-order-by-sum-of-all-buckets/236137)
**Author:** [@Bernie](https://discuss.elastic.co/u/Bernie)\ **Replies:** 1\ **Last updated:** [June 9, 2020, 1:00pm UTC](https://discuss.elastic.co/t/kibana-heatmap-order-by-sum-of-all-buckets/236137 "2020-06-09T13:00:30Z")
Hi there, I have created a Kibana Heatmap of sum("time spent") (y-axis) over a weekly aggregation (x-axis). In the first weeks of the year "time spent" is quite low and is ramping up later, unfortunately the whole heat… --- ## [{"statusCode":429,"error":"Too Many Requests","message":"\[circuit\_breaking\_exception\] \[parent\] Data too large, data for](https://discuss.elastic.co/t/statuscode-429-error-too-many-requests-message-circuit-breaking-exception-parent-data-too-large-data-for/236068)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 2\ **Last updated:** [June 9, 2020, 12:24pm UTC](https://discuss.elastic.co/t/statuscode-429-error-too-many-requests-message-circuit-breaking-exception-parent-data-too-large-data-for/236068 "2020-06-09T12:24:35Z")
Hi Team, Below are the errors i can see while loading the kibana dashboard and fetching the data of 1 month, can any please help on this. \[esaggs\] \> Request to Elasticsearch failed: {"message":"An internal server error… --- ## [Extracting JSON key and values to separated fields](https://discuss.elastic.co/t/extracting-json-key-and-values-to-separated-fields/236289)
**Author:** [@mihailo](https://discuss.elastic.co/u/mihailo)\ **Replies:** 1\ **Last updated:** [June 9, 2020, 12:13pm UTC](https://discuss.elastic.co/t/extracting-json-key-and-values-to-separated-fields/236289 "2020-06-09T12:13:51Z")
Hi, I need help with processing JSON file. My input looks like this (I need to keep it intact): input { s3 { bucket =\> "${S3\_BUCKET}" access\_key\_id =\> "${S3\_ACCESS\_KEY}" secret\_access\_key =\> "${S3\_S… --- ## [Not able to remove icon for Kibana 7.6.0](https://discuss.elastic.co/t/not-able-to-remove-icon-for-kibana-7-6-0/236279)
**Author:** [@richylyq](https://discuss.elastic.co/u/richylyq)\ **Replies:** 3\ **Last updated:** [June 9, 2020, 12:08pm UTC](https://discuss.elastic.co/t/not-able-to-remove-icon-for-kibana-7-6-0/236279 "2020-06-09T12:08:37Z")
Continuing the discussion from \[Guide\] Customize logo, text screen and loading in Kibana 7.x: Tried to use this example to remove the icon, but was not able to find the views folder here's what i am seeing in kibana/sr… --- ## [Date timestamp not matching](https://discuss.elastic.co/t/date-timestamp-not-matching/236277)
**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\ **Replies:** 11\ **Last updated:** [June 9, 2020, 12:02pm UTC](https://discuss.elastic.co/t/date-timestamp-not-matching/236277 "2020-06-09T12:02:36Z")
I am having trouble trying to get this timestamp to match, any ideas? \[20200609 084347\] --- ## [Aggregate filter doesn't find last line of file](https://discuss.elastic.co/t/aggregate-filter-doesnt-find-last-line-of-file/235962)
**Author:** [@anoop](https://discuss.elastic.co/u/anoop)\ **Replies:** 2\ **Last updated:** [June 9, 2020, 12:00pm UTC](https://discuss.elastic.co/t/aggregate-filter-doesnt-find-last-line-of-file/235962 "2020-06-09T12:00:22Z")
Aggregate filter doesn't find last line of file I am trying to identify the last line of my log files using aggregate timeout. Then I am setting set it a "\_aggregatetimeout" tag. (I want to later use it in a 'elapsed' … --- ## [Kibana y-axis values not relative to 0](https://discuss.elastic.co/t/kibana-y-axis-values-not-relative-to-0/236253)
**Author:** [@Ramazan\_dd](https://discuss.elastic.co/u/Ramazan_dd)\ **Replies:** 1\ **Last updated:** [June 9, 2020, 11:59am UTC](https://discuss.elastic.co/t/kibana-y-axis-values-not-relative-to-0/236253 "2020-06-09T11:59:32Z")
hello, every 15 minutes I receive 3 values min, max, avg. I want show them in one common line chart. my x-axis is date histogram. How can make them relative to 0, cause I have like this now [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1397) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1399)