# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1436

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1437

---

## [BottleNeck in local beats input](https://discuss.elastic.co/t/bottleneck-in-local-beats-input/232871)

<div class="topic-metadata">

**Author:** [@aerodynamic](https://discuss.elastic.co/u/aerodynamic)\
**Replies:** 4\
**Last updated:** [May 20, 2020, 7:39pm UTC](https://discuss.elastic.co/t/bottleneck-in-local-beats-input/232871 "2020-05-20T19:39:48Z")

</div>

Hello, I'm currently facing a bottleneck with Logstash. Currently my project is a single linux box running the FELK stack. I have determined that Logstash is a bottleneck by having filebeats write to a file (where I get…

---

## [Logstash to send events dynamically to kafka topics](https://discuss.elastic.co/t/logstash-to-send-events-dynamically-to-kafka-topics/233602)

<div class="topic-metadata">

**Author:** [@Sreekanth3](https://discuss.elastic.co/u/Sreekanth3)\
**Replies:** 0\
**Last updated:** [May 20, 2020, 7:33pm UTC](https://discuss.elastic.co/t/logstash-to-send-events-dynamically-to-kafka-topics/233602 "2020-05-20T19:33:21Z")

</div>

Hi , Is there a way to send the events received from a s3 bucket to kafka dynamically. Eg: First 10k events to one topic and next 10k events to other topic. It should send based on the count of events .

---

## [Logstash file input very slow with lots of files](https://discuss.elastic.co/t/logstash-file-input-very-slow-with-lots-of-files/233598)

<div class="topic-metadata">

**Author:** [@ByronTN](https://discuss.elastic.co/u/ByronTN)\
**Replies:** 0\
**Last updated:** [May 20, 2020, 7:20pm UTC](https://discuss.elastic.co/t/logstash-file-input-very-slow-with-lots-of-files/233598 "2020-05-20T19:20:56Z")

</div>

Hello, I am working to import a ton of old logs into our elastic cache cluster. These are cloudtrail files so there are millions of very small files I am trying to import. When starting Logstash with an input to glob o…

---

## [Kibana plugin?](https://discuss.elastic.co/t/kibana-plugin/233144)

<div class="topic-metadata">

**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\
**Replies:** 2\
**Last updated:** [May 20, 2020, 7:06pm UTC](https://discuss.elastic.co/t/kibana-plugin/233144 "2020-05-20T19:06:22Z")

</div>

i want to develop a simple plugin and integrate it it kibana,i use kibana 7.6.0, so i want develop visualisation like controls; this visualisation contains : labels -field editable and button + button insert. please …

---

## [Dynamic Templates error on Elastic 7.x+](https://discuss.elastic.co/t/dynamic-templates-error-on-elastic-7-x/233593)

<div class="topic-metadata">

**Author:** [@mehta.svarun](https://discuss.elastic.co/u/mehta.svarun)\
**Replies:** 0\
**Last updated:** [May 20, 2020, 6:45pm UTC](https://discuss.elastic.co/t/dynamic-templates-error-on-elastic-7-x/233593 "2020-05-20T18:45:56Z")

</div>

Is there an example of a Graph data structure source data to ingestion in Elastic? We have been doing a lot of work in Elastic Graph and it all worked great with the template until Kibana 6.x versions. But from 7.x it st…

---

## [GC OverHead Collecting Frequently](https://discuss.elastic.co/t/gc-overhead-collecting-frequently/233408)

<div class="topic-metadata">

**Author:** [@Phyo\_Thinza](https://discuss.elastic.co/u/Phyo_Thinza)\
**Replies:** 2\
**Last updated:** [May 20, 2020, 5:14pm UTC](https://discuss.elastic.co/t/gc-overhead-collecting-frequently/233408 "2020-05-20T17:14:40Z")

</div>

Hello, I am seeing GC overhead collection calls frequently in my ES cluster. ES is deployed on AWS. JVM memory usage is high and average is 96% max, 79% min. I appreciate for any idea and suggestion. Elasticsearch ver…

---

## [Elasticsearch persistent settings](https://discuss.elastic.co/t/elasticsearch-persistent-settings/233335)

<div class="topic-metadata">

**Author:** [@tsbayne](https://discuss.elastic.co/u/tsbayne)\
**Replies:** 5\
**Last updated:** [May 20, 2020, 6:18pm UTC](https://discuss.elastic.co/t/elasticsearch-persistent-settings/233335 "2020-05-20T18:18:30Z")

</div>

On occasion, it's necessary for us to redeploy our eck stack. Kubernetes makes this convenient, and we don't mind having to clear our persistent storage if it's necessary at the time, but it would be really helpful if o…

---

## [Help needed for logstash pipeline.yml settings](https://discuss.elastic.co/t/help-needed-for-logstash-pipeline-yml-settings/233583)

<div class="topic-metadata">

**Author:** [@annk](https://discuss.elastic.co/u/annk)\
**Replies:** 1\
**Last updated:** [May 20, 2020, 5:27pm UTC](https://discuss.elastic.co/t/help-needed-for-logstash-pipeline-yml-settings/233583 "2020-05-20T17:27:44Z")

</div>

Hi, I have around 5 pipelines running on a logstash node sending output to elasticsearch (4 node cluster). two of the pipelines require high throughput in some scenarios . usually we received around 1000 events/ sec e…

---

## [I’m seeing Centos7 OS reported as wrong OS RHEL (not surprising) but is that expected Beat behavior?](https://discuss.elastic.co/t/i-m-seeing-centos7-os-reported-as-wrong-os-rhel-not-surprising-but-is-that-expected-beat-behavior/233206)

<div class="topic-metadata">

**Author:** [@EricDavisX](https://discuss.elastic.co/u/EricDavisX)\
**Replies:** 2\
**Last updated:** [May 20, 2020, 5:02pm UTC](https://discuss.elastic.co/t/i-m-seeing-centos7-os-reported-as-wrong-os-rhel-not-surprising-but-is-that-expected-beat-behavior/233206 "2020-05-20T17:02:42Z")

</div>

I'm seeing this with the MetricBeat and FileBeat deploys that come with the 7.8 Alpha Elastic Agent. I didn't see any 'wrong os' Agent discussions immediately so I'm asking.

---

## [Error using SQL Translate API](https://discuss.elastic.co/t/error-using-sql-translate-api/233550)

<div class="topic-metadata">

**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\
**Replies:** 2\
**Last updated:** [May 20, 2020, 5:00pm UTC](https://discuss.elastic.co/t/error-using-sql-translate-api/233550 "2020-05-20T17:00:39Z")

</div>

My index name is called fan\_messages curl -XPUT "http://localhost:9200/fan\_messages" -H 'Content-Type: application/json' -d' { "mappings" : { "properties": { "email": { "type": "keyword" …

---

## [How is process.cpu.percent calculated?](https://discuss.elastic.co/t/how-is-process-cpu-percent-calculated/233573)

<div class="topic-metadata">

**Author:** [@jeffzhao](https://discuss.elastic.co/u/jeffzhao)\
**Replies:** 0\
**Last updated:** [May 20, 2020, 4:22pm UTC](https://discuss.elastic.co/t/how-is-process-cpu-percent-calculated/233573 "2020-05-20T16:22:13Z")

</div>

Hi, I'm trying to understand the meaning of this metric returned from \_cluster/stats/nodes API. I noticed this number can be greater than 100. So what's the formula for calculating it?

---

## [Using the multiline codec with input pipeline](https://discuss.elastic.co/t/using-the-multiline-codec-with-input-pipeline/233350)

<div class="topic-metadata">

**Author:** [@Offer\_Baruch](https://discuss.elastic.co/u/Offer_Baruch)\
**Replies:** 3\
**Last updated:** [May 20, 2020, 4:01pm UTC](https://discuss.elastic.co/t/using-the-multiline-codec-with-input-pipeline/233350 "2020-05-20T16:01:44Z")

</div>

Hello everyone, I am using pipeline communication to have a different pipeline to parse different file types as input. My main input pipeline recognizes the file type and passes control to the correct pipeline. I am t…

---

## [Could not index event to Elasticsearch. {:status=\>400, :action=\> #\<LogStash::Event:0x458fc470\>\], :response=\>{"index"=\>ception", "reason"=\>"failed to parse date field](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-status-400-action-logstash-0x458fc470-response-index-ception-reason-failed-to-parse-date-field/233313)

<div class="topic-metadata">

**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\
**Replies:** 3\
**Last updated:** [May 20, 2020, 4:01pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-status-400-action-logstash-0x458fc470-response-index-ception-reason-failed-to-parse-date-field/233313 "2020-05-20T16:01:09Z")

</div>

\[2020-05-18T09:02:52,095\]\[WARN \]\[logstash.outputs.amazonelasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"gppepo-epo-govpp-scheduler-2020.05.18", :\_type=\>"\_doc…

---

## [Unable to add new field with values of nested fields](https://discuss.elastic.co/t/unable-to-add-new-field-with-values-of-nested-fields/233403)

<div class="topic-metadata">

**Author:** [@Feedy](https://discuss.elastic.co/u/Feedy)\
**Replies:** 7\
**Last updated:** [May 20, 2020, 3:59pm UTC](https://discuss.elastic.co/t/unable-to-add-new-field-with-values-of-nested-fields/233403 "2020-05-20T15:59:00Z")

</div>

I am attempting to create a geo-point data type so that I can utilize the map features in kibana. My index will not show as an option when I attempt to add a layer and I believe its because I do not have a geo-point data…

---

## [Why does split creates multiple output records in json filter](https://discuss.elastic.co/t/why-does-split-creates-multiple-output-records-in-json-filter/233490)

<div class="topic-metadata">

**Author:** [@Ullas7](https://discuss.elastic.co/u/Ullas7)\
**Replies:** 1\
**Last updated:** [May 20, 2020, 3:56pm UTC](https://discuss.elastic.co/t/why-does-split-creates-multiple-output-records-in-json-filter/233490 "2020-05-20T15:56:41Z")

</div>

I havea JSON with array element in it { "K1": "V1", "k2":"v2", "k3": \[{"a1":"b1","a2":"b2"},{"a1":"c1","a2":d2}\] } After logstash filter, I saving this in Elastic search, but for single json record its ins…

---

## [Problem updating counter on elastic document](https://discuss.elastic.co/t/problem-updating-counter-on-elastic-document/231722)

<div class="topic-metadata">

**Author:** [@gpolini](https://discuss.elastic.co/u/gpolini)\
**Replies:** 4\
**Last updated:** [May 20, 2020, 3:48pm UTC](https://discuss.elastic.co/t/problem-updating-counter-on-elastic-document/231722 "2020-05-20T15:48:43Z")

</div>

Hi I populate ELK database reading log files by logstash. Each document is populated using many log rows, each one inserts specific fileds. When logstash read a specific action, it update a boolean filed "action\_done…

---

## [Logstash error when attempting to ingest](https://discuss.elastic.co/t/logstash-error-when-attempting-to-ingest/233565)

<div class="topic-metadata">

**Author:** [@wild\_turkey](https://discuss.elastic.co/u/wild_turkey)\
**Replies:** 1\
**Last updated:** [May 20, 2020, 3:45pm UTC](https://discuss.elastic.co/t/logstash-error-when-attempting-to-ingest/233565 "2020-05-20T15:45:56Z")

</div>

Hi all, I'm pretty new to this, and this will be my first attempt to load a file into Elasticsearch. I have a csv file. I have Kibana and Elasticsearch running on a Windows 10 laptop I configured a config file the fo…

---

## [Kibana and IPv6](https://discuss.elastic.co/t/kibana-and-ipv6/231478)

<div class="topic-metadata">

**Author:** [@faxm0dem](https://discuss.elastic.co/u/faxm0dem)\
**Replies:** 4\
**Last updated:** [May 20, 2020, 3:45pm UTC](https://discuss.elastic.co/t/kibana-and-ipv6/231478 "2020-05-20T15:45:33Z")

</div>

There doesn't seem to be any way to consistently configure kibana to listen on both IPv4 and IPv6 addresses of a dual-stack server. There are similar open issues which discuss the fact that kibana is parsing the server.…

---

## [Kibana 7.7 using helm chart, pod exits on error](https://discuss.elastic.co/t/kibana-7-7-using-helm-chart-pod-exits-on-error/233419)

<div class="topic-metadata">

**Author:** [@Rajesh\_Kodali](https://discuss.elastic.co/u/Rajesh_Kodali)\
**Replies:** 1\
**Last updated:** [May 20, 2020, 3:29pm UTC](https://discuss.elastic.co/t/kibana-7-7-using-helm-chart-pod-exits-on-error/233419 "2020-05-20T15:29:59Z")

</div>

Here are the logs from the pod startup: Tried adding values into kibana.yaml and it doesn't looked to have helped. {"type":"log","@timestamp":"2020-05-19T22:17:26Z","tags":\["debug","plugins-service"\],"pid":8,"message":…

---

## [Sflow plugin dont work](https://discuss.elastic.co/t/sflow-plugin-dont-work/233469)

<div class="topic-metadata">

**Author:** [@ahiyaz](https://discuss.elastic.co/u/ahiyaz)\
**Replies:** 9\
**Last updated:** [May 20, 2020, 3:14pm UTC](https://discuss.elastic.co/t/sflow-plugin-dont-work/233469 "2020-05-20T15:14:50Z")

</div>

hi im new here just install logstash as shipper toward Logz.io ive install the sflow input plugin but i dont see logstash listening in any port. i have filebeat installed on this agent as well for syslog collecting. …

---

## [Is webhook validation possible for eck running in single namespace](https://discuss.elastic.co/t/is-webhook-validation-possible-for-eck-running-in-single-namespace/233383)

<div class="topic-metadata">

**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\
**Replies:** 6\
**Last updated:** [May 20, 2020, 3:03pm UTC](https://discuss.elastic.co/t/is-webhook-validation-possible-for-eck-running-in-single-namespace/233383 "2020-05-20T15:03:59Z")

</div>

If you install ECK in a Kubernetes namespace (not cluster wide) can you use the webhook validator? I installed everything (eck 1.1) in a single namespace and it seems to run fine but when I attempt to enable webhook val…

---

## [Date picker custom format config](https://discuss.elastic.co/t/date-picker-custom-format-config/233556)

<div class="topic-metadata">

**Author:** [@amirzbidi](https://discuss.elastic.co/u/amirzbidi)\
**Replies:** 1\
**Last updated:** [May 20, 2020, 3:01pm UTC](https://discuss.elastic.co/t/date-picker-custom-format-config/233556 "2020-05-20T15:01:55Z")

</div>

Hello, I have an issue in querry where i should choose custom in the date picker, so the date format for the custom mode is different than the relatif mode. I ask if there is a solution to change the configuration of d…

---

## [Are we able to line break the custom labels](https://discuss.elastic.co/t/are-we-able-to-line-break-the-custom-labels/233282)

<div class="topic-metadata">

**Author:** [@richylyq](https://discuss.elastic.co/u/richylyq)\
**Replies:** 3\
**Last updated:** [May 20, 2020, 3:01pm UTC](https://discuss.elastic.co/t/are-we-able-to-line-break-the-custom-labels/233282 "2020-05-20T15:01:02Z")

</div>

Hi, I want to line break my custom labels in Kibana Visuals, May i know if this is possible?

---

## [How to grant access to kibana for specific users](https://discuss.elastic.co/t/how-to-grant-access-to-kibana-for-specific-users/232965)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 3\
**Last updated:** [May 20, 2020, 2:51pm UTC](https://discuss.elastic.co/t/how-to-grant-access-to-kibana-for-specific-users/232965 "2020-05-20T14:51:33Z")

</div>

Hi, am very new to EKL Stack and for my project we have requirement to integrate kibana in our custom applications dashboard. We would like to give clients some statistics about their own activity (i.e. how many times …

---

## [How to plot percentile distributions?](https://discuss.elastic.co/t/how-to-plot-percentile-distributions/231303)

<div class="topic-metadata">

**Author:** [@andrzejo](https://discuss.elastic.co/u/andrzejo)\
**Replies:** 3\
**Last updated:** [May 20, 2020, 2:44pm UTC](https://discuss.elastic.co/t/how-to-plot-percentile-distributions/231303 "2020-05-20T14:44:46Z")

</div>

I'm trying to create a latency percentile distribution plot, like the one here: https://hdrhistogram.github.io/HdrHistogram/plotFiles.html But I cannot find a good way to do this, any ideas? Details: My source data i…

---

## [Passing in complex array as environment variables?](https://discuss.elastic.co/t/passing-in-complex-array-as-environment-variables/233508)

<div class="topic-metadata">

**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\
**Replies:** 3\
**Last updated:** [May 20, 2020, 1:43pm UTC](https://discuss.elastic.co/t/passing-in-complex-array-as-environment-variables/233508 "2020-05-20T13:43:04Z")

</div>

Hi there, I'm using the Logstash SNMP input to poll a list of servers with a list of OIDs. We are deploying Logstash in Docker using Ansible, and we try to maintain the code using environment variables passed through t…

---

## [Unable to find usable node.js executable while installing plugin](https://discuss.elastic.co/t/unable-to-find-usable-node-js-executable-while-installing-plugin/233146)

<div class="topic-metadata">

**Author:** [@sudosu](https://discuss.elastic.co/u/sudosu)\
**Replies:** 3\
**Last updated:** [May 20, 2020, 1:40pm UTC](https://discuss.elastic.co/t/unable-to-find-usable-node-js-executable-while-installing-plugin/233146 "2020-05-20T13:40:36Z")

</div>

Hi guys, I am trying to install a plugin on my kibana usign the bin/kibana-install command and I got this error. unable to find usable node.js executable. Kibana Dev Version : 7.4.2 Elasticsearch version: 7.4.2 whic…

---

## [Hi Guys , I got Error whe I connect remote filebeat with logstash](https://discuss.elastic.co/t/hi-guys-i-got-error-whe-i-connect-remote-filebeat-with-logstash/233526)

<div class="topic-metadata">

**Author:** [@Maxwell\_Chu](https://discuss.elastic.co/u/Maxwell_Chu)\
**Replies:** 5\
**Last updated:** [May 20, 2020, 1:27pm UTC](https://discuss.elastic.co/t/hi-guys-i-got-error-whe-i-connect-remote-filebeat-with-logstash/233526 "2020-05-20T13:27:16Z")

</div>

2020-05-20T21:41:56.637+1000 ERROR \[logstash\] logstash/async.go:279 Failed to publish events caused by: write tcp 192.168.110.144:51994-\>192.168.110.143:5044: write: connection reset by peer 2020-05-20T21:41…

---

## [Compare documents from two indexes](https://discuss.elastic.co/t/compare-documents-from-two-indexes/233448)

<div class="topic-metadata">

**Author:** [@Veer](https://discuss.elastic.co/u/Veer)\
**Replies:** 3\
**Last updated:** [May 20, 2020, 1:22pm UTC](https://discuss.elastic.co/t/compare-documents-from-two-indexes/233448 "2020-05-20T13:22:25Z")

</div>

Hello. I'm trying to compare two indexes. Index 1 will have the raw data and I'll use Index 2 to store processed data from Index 1. However, I have noticed that when the records in Index 1 are not in sequential order by …

---

## [Winlogbeat: lire tous les fichiers evtx d'un dossier](https://discuss.elastic.co/t/winlogbeat-lire-tous-les-fichiers-evtx-dun-dossier/233500)

<div class="topic-metadata">

**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\
**Replies:** 4\
**Last updated:** [May 20, 2020, 1:13pm UTC](https://discuss.elastic.co/t/winlogbeat-lire-tous-les-fichiers-evtx-dun-dossier/233500 "2020-05-20T13:13:52Z")

</div>

Bonjour, J'ai plusieurs fichiers evtx dans un dossier sur clé et je souhaiterai les intégrer dans elastic. Le problème c'est que pour chaque fichier, je suis actuellement obligé de modifier winlogbeat.yml afin de point…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1435)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1437)
