# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1403 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1404 --- ## [Ingest only nodes](https://discuss.elastic.co/t/ingest-only-nodes/235854)
**Author:** [@barracuda-charles](https://discuss.elastic.co/u/barracuda-charles)\ **Replies:** 3\ **Last updated:** [June 6, 2020, 4:28pm UTC](https://discuss.elastic.co/t/ingest-only-nodes/235854 "2020-06-06T16:28:47Z")
I have an ingest-heavy workload (many more writes than reads). I am curious about the need / benefits of having ingest-only nodes vs having the ingest done on the data nodes. I don't think I actually have a specific ing… --- ## [Updating the Beats agents properly issue](https://discuss.elastic.co/t/updating-the-beats-agents-properly-issue/236043)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 0\ **Last updated:** [June 6, 2020, 4:18pm UTC](https://discuss.elastic.co/t/updating-the-beats-agents-properly-issue/236043 "2020-06-06T16:18:11Z")
Hello, I have a 3 nodes cluster. Some days ago it was time for the ELK cluster update. During the process i run the sudo yum update command in each node in order to retrieve the newest versions for ELK. In the propose… --- ## [Regexp not searching as expected](https://discuss.elastic.co/t/regexp-not-searching-as-expected/235155)
**Author:** [@Alenoosh\_Baghoomian](https://discuss.elastic.co/u/Alenoosh_Baghoomian)\ **Replies:** 6\ **Last updated:** [June 6, 2020, 11:41am UTC](https://discuss.elastic.co/t/regexp-not-searching-as-expected/235155 "2020-06-06T11:41:38Z")
Hello I'm using 'search' api of elasticsearch (7.4.1) and the following is the query I pass to this api : \`\["size" =\> 10000, "query" =\> \[ "bool" =\> \[ "must" =\> \[ \[ "regexp" =\> \[ "name" =\> \[ "valu… --- ## [Plain Highlighter "order":"none" is not working](https://discuss.elastic.co/t/plain-highlighter-order-none-is-not-working/236030)
**Author:** [@mayanknc](https://discuss.elastic.co/u/mayanknc)\ **Replies:** 0\ **Last updated:** [June 6, 2020, 10:47am UTC](https://discuss.elastic.co/t/plain-highlighter-order-none-is-not-working/236030 "2020-06-06T10:47:52Z")
Hi, I have created below test\_plain\_highlighter index. I want highlighted fragments should appear in order as they appear in the field using Plain Highlighter. I have tried below option, Set "order":"none" in highlig… --- ## [How to make few token as phrase](https://discuss.elastic.co/t/how-to-make-few-token-as-phrase/235977)
**Author:** [@aradhanacha](https://discuss.elastic.co/u/aradhanacha)\ **Replies:** 0\ **Last updated:** [June 5, 2020, 3:48pm UTC](https://discuss.elastic.co/t/how-to-make-few-token-as-phrase/235977 "2020-06-05T15:48:45Z")
I want to search part of query to be considered as phrase .For e.g. I want to search "Can you show me documents for Hospitality and Airline Industry" Here I want Airline Industry to be considered as phrase.I dont find an… --- ## [Upgraded ES from 6.8.10 to 7.7...now Kibana has no such index for \_xpack](https://discuss.elastic.co/t/upgraded-es-from-6-8-10-to-7-7-now-kibana-has-no-such-index-for-xpack/236020)
**Author:** [@pszm](https://discuss.elastic.co/u/pszm)\ **Replies:** 0\ **Last updated:** [June 6, 2020, 4:10am UTC](https://discuss.elastic.co/t/upgraded-es-from-6-8-10-to-7-7-now-kibana-has-no-such-index-for-xpack/236020 "2020-06-06T04:10:27Z")
Pretty much as the title says. We upgraded our ElasticSearch install to run 7.7. That seems to have worked fine, but, Kibana no longer works with this error: {"statusCode":404,"error":"Not Found","message":"\[index\_not\_… --- ## [Logstash stops streaming/uploading csv files to elastic search after some time](https://discuss.elastic.co/t/logstash-stops-streaming-uploading-csv-files-to-elastic-search-after-some-time/235726)
**Author:** [@pran1](https://discuss.elastic.co/u/pran1)\ **Replies:** 2\ **Last updated:** [June 6, 2020, 8:58am UTC](https://discuss.elastic.co/t/logstash-stops-streaming-uploading-csv-files-to-elastic-search-after-some-time/235726 "2020-06-06T08:58:28Z")
ElasticSearch Configuration 1 zone - 4gb ram - 120GB storage Logstash Configuration 4vcpu - 16gb ram - t2.xlarge instance - logstash 7.7.0 Workflow One tool gets data from different sources and creates csv files i… --- ## [Why \_msearch request isn't cancellable(=false)?](https://discuss.elastic.co/t/why-msearch-request-isnt-cancellable-false/235893)
**Author:** [@rahul\_yadav1](https://discuss.elastic.co/u/rahul_yadav1)\ **Replies:** 7\ **Last updated:** [June 6, 2020, 8:18am UTC](https://discuss.elastic.co/t/why-msearch-request-isnt-cancellable-false/235893 "2020-06-06T08:18:27Z")
In ES-7.4.2, search request is cancellable(=true) but \_msearch request isn't. What's the idea behind it ?? --- ## [Add colonne in CSV file](https://discuss.elastic.co/t/add-colonne-in-csv-file/235981)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 0\ **Last updated:** [June 5, 2020, 4:01pm UTC](https://discuss.elastic.co/t/add-colonne-in-csv-file/235981 "2020-06-05T16:01:19Z")
hello everyone , please i need ur help i want add new columns in my logstash config file but i don't how do it ?? there is my config file ?? input { beats { port =\> "5044" } } filter { csv { separator =\> "," colu… --- ## [Date format is in string](https://discuss.elastic.co/t/date-format-is-in-string/235288)
**Author:** [@Sridhar](https://discuss.elastic.co/u/Sridhar)\ **Replies:** 1\ **Last updated:** [June 3, 2020, 5:54am UTC](https://discuss.elastic.co/t/date-format-is-in-string/235288 "2020-06-03T05:54:49Z")
Hi all, Below is the powershell script I try to push the data to Elasticsearch. I'm able to do that. but the @timestamp field is loaded as string. Please help me.. what exactly I'm missing.. I'm not using logstash.. ev… --- ## [Kibana page js cannot respond, 304 error appears in the log](https://discuss.elastic.co/t/kibana-page-js-cannot-respond-304-error-appears-in-the-log/233686)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 12\ **Last updated:** [June 6, 2020, 12:07am UTC](https://discuss.elastic.co/t/kibana-page-js-cannot-respond-304-error-appears-in-the-log/233686 "2020-06-06T00:07:05Z")
The page does not respond to my actions. I see some 304 appearing in the kibana log, what is wrong? https://paste.ubuntu.com/p/CMJ6ygY3TG/ --- ## [Push log files from different system and visualize it in kibana which is installed only in one system](https://discuss.elastic.co/t/push-log-files-from-different-system-and-visualize-it-in-kibana-which-is-installed-only-in-one-system/235935)
**Author:** [@TUSHAR\_Sinha](https://discuss.elastic.co/u/TUSHAR_Sinha)\ **Replies:** 3\ **Last updated:** [June 5, 2020, 10:27pm UTC](https://discuss.elastic.co/t/push-log-files-from-different-system-and-visualize-it-in-kibana-which-is-installed-only-in-one-system/235935 "2020-06-05T22:27:26Z")
Hi, I want to push the log files from different machines where different log files are being generated. Now I want that whenever a log file is generated in any system, it gets updated into kibana . So that this way I do… --- ## [Geojson loading error](https://discuss.elastic.co/t/geojson-loading-error/235137)
**Author:** [@Hugo\_Pires](https://discuss.elastic.co/u/Hugo_Pires)\ **Replies:** 11\ **Last updated:** [June 5, 2020, 8:43pm UTC](https://discuss.elastic.co/t/geojson-loading-error/235137 "2020-06-05T20:43:11Z")
Hello I've tried several times to load a geojson file into a index through Kibana import system. It gives me the preview of the polygons, creates a index, but the it returns me an error "Error performing fetch: Request… --- ## [Ingest Node Timezone Offset](https://discuss.elastic.co/t/ingest-node-timezone-offset/236006)
**Author:** [@crux](https://discuss.elastic.co/u/crux)\ **Replies:** 0\ **Last updated:** [June 5, 2020, 8:15pm UTC](https://discuss.elastic.co/t/ingest-node-timezone-offset/236006 "2020-06-05T20:15:34Z")
I've found an inconsistency between Logstash date matching syntax and Ingest node date matching syntax. I have a time field that looks like this: 2020-06-03 15:37:14.465 -04:00 While most of the Logstash Date Plugin s… --- ## [Elasticsearch snapshot query](https://discuss.elastic.co/t/elasticsearch-snapshot-query/235820)
**Author:** [@Dev\_Chakraborty](https://discuss.elastic.co/u/Dev_Chakraborty)\ **Replies:** 12\ **Last updated:** [June 5, 2020, 7:39pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-query/235820 "2020-06-05T19:39:26Z")
Hi Team, I was running the below command to get all the snapshots which was taken by me: curl -username:password -X GET "ES Server IP:9200/\_snapshot/reponame?v&s=id&pretty" -k { "error" : { "root\_cause" : \[ … --- ## [Count values are not concatenated as one single value .How to get one entries out of multiple values](https://discuss.elastic.co/t/count-values-are-not-concatenated-as-one-single-value-how-to-get-one-entries-out-of-multiple-values/235999)
**Author:** [@hema\_vathi](https://discuss.elastic.co/u/hema_vathi)\ **Replies:** 0\ **Last updated:** [June 5, 2020, 7:22pm UTC](https://discuss.elastic.co/t/count-values-are-not-concatenated-as-one-single-value-how-to-get-one-entries-out-of-multiple-values/235999 "2020-06-05T19:22:14Z")
I am trying to get the time duration of my process and its count . But it showing up as different entries in data table for same value. Say for example i should get data like this duration count 0.34 … --- ## [Falha na Configuração em Cluster SSL](https://discuss.elastic.co/t/falha-na-configuracao-em-cluster-ssl/235985)
**Author:** [@grfneto](https://discuss.elastic.co/u/grfneto)\ **Replies:** 1\ **Last updated:** [June 5, 2020, 6:57pm UTC](https://discuss.elastic.co/t/falha-na-configuracao-em-cluster-ssl/235985 "2020-06-05T18:57:51Z")
Pessoal, estou tentando configurar o cluster em SSL utilizando certificado wildcard da godaddy porém está apresentando erro client did not trust this server's certificate, closing connection Netty4TcpChannel{localAddress… --- ## [Backp up native users along with passwords and roles](https://discuss.elastic.co/t/backp-up-native-users-along-with-passwords-and-roles/235995)
**Author:** [@Sirius](https://discuss.elastic.co/u/Sirius)\ **Replies:** 0\ **Last updated:** [June 5, 2020, 5:57pm UTC](https://discuss.elastic.co/t/backp-up-native-users-along-with-passwords-and-roles/235995 "2020-06-05T17:57:35Z")
Hello, Is there a way to export a backup of my users with passwords and roles ? I'm running ES 7.6.2. If I do create snapshots for indices security... I'll be covering that users, roles, passwords part ? i.e. PUT /\_… --- ## [XML Parsing incomplete](https://discuss.elastic.co/t/xml-parsing-incomplete/235979)
**Author:** [@Noe253](https://discuss.elastic.co/u/Noe253)\ **Replies:** 2\ **Last updated:** [June 5, 2020, 5:03pm UTC](https://discuss.elastic.co/t/xml-parsing-incomplete/235979 "2020-06-05T17:03:27Z")
Hello everyone, I'm sending xml logs into Logstash using Filebeat, it worked perfectly the first time I set up my configuration, but since I restarted Logstash service using "systemctl restart logstash.service" (I'm on … --- ## [Logstash error - Output](https://discuss.elastic.co/t/logstash-error-output/235840)
**Author:** [@jgonzalez](https://discuss.elastic.co/u/jgonzalez)\ **Replies:** 4\ **Last updated:** [June 5, 2020, 4:58pm UTC](https://discuss.elastic.co/t/logstash-error-output/235840 "2020-06-05T16:58:29Z")
Hello All, I have an error in my logstash config file and i have not able to find it. Please if someone can help me This is the error: \[2020-06-04T15:00:07,633\]\[ERROR\]\[logstash.agent \] Failed to execute act… --- ## [Show all Data in saved Search on a Kibana Dashboard](https://discuss.elastic.co/t/show-all-data-in-saved-search-on-a-kibana-dashboard/232402)
**Author:** [@KoettingSimon](https://discuss.elastic.co/u/KoettingSimon)\ **Replies:** 6\ **Last updated:** [June 5, 2020, 4:53pm UTC](https://discuss.elastic.co/t/show-all-data-in-saved-search-on-a-kibana-dashboard/232402 "2020-06-05T16:53:53Z")
Hi All, Im using Kibana 7.6.1. I need to greate a monthly report of some Audit-Data. I would like to greate a Dashboard with some visualisations and a saved search showing all "raw" Audit-Data. Then i would use watche… --- ## [Aggregation facility in the detections rules tab?](https://discuss.elastic.co/t/aggregation-facility-in-the-detections-rules-tab/235080)
**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\ **Replies:** 1\ **Last updated:** [June 5, 2020, 4:48pm UTC](https://discuss.elastic.co/t/aggregation-facility-in-the-detections-rules-tab/235080 "2020-06-05T16:48:00Z")
can we write aggregation in the detection rules tab?. if not, is it a planned feature? --- ## [Metricbeat 7.7 problem](https://discuss.elastic.co/t/metricbeat-7-7-problem/235704)
**Author:** [@Mario\_Fimiani](https://discuss.elastic.co/u/Mario_Fimiani)\ **Replies:** 3\ **Last updated:** [June 5, 2020, 4:42pm UTC](https://discuss.elastic.co/t/metricbeat-7-7-problem/235704 "2020-06-05T16:42:13Z")
Hi I have installed metricbeat 7.7 on redhat 6.8 (Red Hat Enterprise Linux Server release 6.8 (Santiago)). After the configuration and restart of the agent, I'm receiving this error : Exiting: 1 error: error finding … --- ## [Addition of other visualizations in Elastic-SIEM dashboards](https://discuss.elastic.co/t/addition-of-other-visualizations-in-elastic-siem-dashboards/235078)
**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\ **Replies:** 1\ **Last updated:** [June 5, 2020, 4:11pm UTC](https://discuss.elastic.co/t/addition-of-other-visualizations-in-elastic-siem-dashboards/235078 "2020-06-05T16:11:06Z")
There are pre-built visualizations in the Elastic-SIEM section in Kibana. Can I add additional visualizations that I previously created in the visualizations, to the Elastic-SIEM section? --- ## ["File does not contain valid private key:/usr/share/logstash/ssl/server.key" error in input pipeline Logstash. How fix it?](https://discuss.elastic.co/t/file-does-not-contain-valid-private-key-usr-share-logstash-ssl-server-key-error-in-input-pipeline-logstash-how-fix-it/235980)
**Author:** [@Andrew\_Foxis](https://discuss.elastic.co/u/Andrew_Foxis)\ **Replies:** 0\ **Last updated:** [June 5, 2020, 3:58pm UTC](https://discuss.elastic.co/t/file-does-not-contain-valid-private-key-usr-share-logstash-ssl-server-key-error-in-input-pipeline-logstash-how-fix-it/235980 "2020-06-05T15:58:11Z")
Hi all! I get certificate from MS CA. Then convert it: openssl pkcs12 -in test.pfx -out ca.crt -nodes -nokeys -cacerts openssl pkcs12 -in test.pfx -clcerts -nokeys -out server.crt openssl pkcs12 -in test.p… --- ## [Unable to launch Kibana after upgrade to 7.7.0](https://discuss.elastic.co/t/unable-to-launch-kibana-after-upgrade-to-7-7-0/234654)
**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\ **Replies:** 1\ **Last updated:** [June 5, 2020, 3:55pm UTC](https://discuss.elastic.co/t/unable-to-launch-kibana-after-upgrade-to-7-7-0/234654 "2020-06-05T15:55:26Z")
Hi all, yesterday I tried to upgrade my ELKS from 7.1 to 7.7. After the upgrade I am able to run the services and when I check its working and running. Just that I am not able to browse the site. But there are following… --- ## [Pipeline to pipeline communication - logstash data](https://discuss.elastic.co/t/pipeline-to-pipeline-communication-logstash-data/235914)
**Author:** [@Pankaj\_Jadhav](https://discuss.elastic.co/u/Pankaj_Jadhav)\ **Replies:** 2\ **Last updated:** [June 5, 2020, 3:46pm UTC](https://discuss.elastic.co/t/pipeline-to-pipeline-communication-logstash-data/235914 "2020-06-05T15:46:59Z")
Pipeline1 :- ds\_test.conf input { generator { count =\> 1 lines =\> \[ '' \] } } filter { mutate { add\_field =\> { "\[eventHeader\]\[applicationId\]" =\> "A" "\[eventHeader\]\[objectCode\]" =\> 1 } } mutate { add\_field =\> { "… --- ## [Cost calculation on count](https://discuss.elastic.co/t/cost-calculation-on-count/235885)
**Author:** [@simran13](https://discuss.elastic.co/u/simran13)\ **Replies:** 2\ **Last updated:** [June 5, 2020, 3:28pm UTC](https://discuss.elastic.co/t/cost-calculation-on-count/235885 "2020-06-05T15:28:48Z")
Hello, I am new to kibana and need to calculate cost of an instance. I am able to get the total runtime of the instance but can't seem to find a way to multiply it with the cost of running that instance. Is there a wa… --- ## [Gelf input with multiline](https://discuss.elastic.co/t/gelf-input-with-multiline/235918)
**Author:** [@111228](https://discuss.elastic.co/u/111228)\ **Replies:** 3\ **Last updated:** [June 5, 2020, 3:25pm UTC](https://discuss.elastic.co/t/gelf-input-with-multiline/235918 "2020-06-05T15:25:27Z")
Hello all Tell me how to configure correctly PHP errors with Stack trace in multiline. I have such messages 1 message ) \[05-Jun-2020 11:35:39 Europe/Kiev\] PHP Fatal error: require(): Failed opening required 'askldja… --- ## [Trouble selecting beats inputs](https://discuss.elastic.co/t/trouble-selecting-beats-inputs/235830)
**Author:** [@Maria\_Daniel](https://discuss.elastic.co/u/Maria_Daniel)\ **Replies:** 1\ **Last updated:** [June 5, 2020, 3:17pm UTC](https://discuss.elastic.co/t/trouble-selecting-beats-inputs/235830 "2020-06-05T15:17:24Z")
Hello! So, i'm trying to select two different types of input files from the same directory. I add a different tag depending on the type of file so that I can later use different grok patterns to process the logs, based … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1402) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1404)