# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1440 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1441 --- ## [Query On Composite Aggregation](https://discuss.elastic.co/t/query-on-composite-aggregation/233292)
**Author:** [@ananth](https://discuss.elastic.co/u/ananth)\ **Replies:** 0\ **Last updated:** [May 19, 2020, 10:16am UTC](https://discuss.elastic.co/t/query-on-composite-aggregation/233292 "2020-05-19T10:16:11Z")
Hi, Is the composite Aggregation keeps any meta in memory? or keep the search context open similarly to what scroll does? In other terms, Is the 'after\_key' used as one of the criteria along with the original query? A… --- ## [Table does not show percentage when locale setting is changed](https://discuss.elastic.co/t/table-does-not-show-percentage-when-locale-setting-is-changed/232921)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 5\ **Last updated:** [May 19, 2020, 10:11am UTC](https://discuss.elastic.co/t/table-does-not-show-percentage-when-locale-setting-is-changed/232921 "2020-05-19T10:11:23Z")
Hi all, I'm doing a very simple table using a Term agg and where I want to calculate the percentage over the count column. Everything goes well But when I change in the Kibana Advanced Setting the Formating locale … --- ## [Table visualisation on last occurrence of specific field](https://discuss.elastic.co/t/table-visualisation-on-last-occurrence-of-specific-field/233290)
**Author:** [@Max\_Bertolini](https://discuss.elastic.co/u/Max_Bertolini)\ **Replies:** 0\ **Last updated:** [May 19, 2020, 10:03am UTC](https://discuss.elastic.co/t/table-visualisation-on-last-occurrence-of-specific-field/233290 "2020-05-19T10:03:22Z")
Hi Everybody, I'm collecting data from an application that runs "jobs" on different users. The same jobs can be executed multiple times for the same user and I'm struggling to find a way to create a table visualisation … --- ## [Elasticsearch dump using python](https://discuss.elastic.co/t/elasticsearch-dump-using-python/233254)
**Author:** [@vikasmastud](https://discuss.elastic.co/u/vikasmastud)\ **Replies:** 4\ **Last updated:** [May 19, 2020, 9:47am UTC](https://discuss.elastic.co/t/elasticsearch-dump-using-python/233254 "2020-05-19T09:47:36Z")
i am trying to dump elastic search from one Elasticsearch and import this dump to different Elasticsearch is there any way to do that using python --- ## [Type date not working](https://discuss.elastic.co/t/type-date-not-working/233283)
**Author:** [@floow](https://discuss.elastic.co/u/floow)\ **Replies:** 0\ **Last updated:** [May 19, 2020, 8:49am UTC](https://discuss.elastic.co/t/type-date-not-working/233283 "2020-05-19T08:49:55Z")
Hello, for the last three days I have been trying to get my Kibana to recognize dates, but with no luck. I am importing the data via python looking like this: b’\\n{"index": {"\_index": "index-test"}} \\n{"Type" : "\_doc",… --- ## [Sending data to elasticsearch](https://discuss.elastic.co/t/sending-data-to-elasticsearch/232941)
**Author:** [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\ **Replies:** 19\ **Last updated:** [May 19, 2020, 8:43am UTC](https://discuss.elastic.co/t/sending-data-to-elasticsearch/232941 "2020-05-19T08:43:25Z")
Hi, Below is the configuration I have for my 2 node elasticsearch cluster. Pls let me know how I should configure the logstash elasticsearch output. Should the data be sent to both the below nodes? I am fully aware th… --- ## [Upgrade to 7.7 removed LOGSTASH\_KEYSTORE\_PASS= from /etc/default/logstash - Keystore](https://discuss.elastic.co/t/upgrade-to-7-7-removed-logstash-keystore-pass-from-etc-default-logstash-keystore/233280)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 0\ **Last updated:** [May 19, 2020, 8:42am UTC](https://discuss.elastic.co/t/upgrade-to-7-7-removed-logstash-keystore-pass-from-etc-default-logstash-keystore/233280 "2020-05-19T08:42:46Z")
Hi, I upgraded to 7.7 from 7.6.1 yesterday, i have been using the keystore in logstash and storing the value in /etc/default/logstash. After upgrading i had some fun with Logstash not staring, the LOGSTASH\_KEYSTORE\_PA… --- ## [How does the intervals query resolve the need for first manually breaking up a search text into phrases?](https://discuss.elastic.co/t/how-does-the-intervals-query-resolve-the-need-for-first-manually-breaking-up-a-search-text-into-phrases/233274)
**Author:** [@gideongrossman](https://discuss.elastic.co/u/gideongrossman)\ **Replies:** 0\ **Last updated:** [May 19, 2020, 8:21am UTC](https://discuss.elastic.co/t/how-does-the-intervals-query-resolve-the-need-for-first-manually-breaking-up-a-search-text-into-phrases/233274 "2020-05-19T08:21:36Z")
How does the interval query handle the issue described here? https://github.com/elastic/elasticsearch/issues/16796 Don't we still need to break up our search text into phrases before passing them into the intervals query… --- ## [Multiline codec and fluent codec](https://discuss.elastic.co/t/multiline-codec-and-fluent-codec/233270)
**Author:** [@VarunKS](https://discuss.elastic.co/u/VarunKS)\ **Replies:** 0\ **Last updated:** [May 19, 2020, 8:07am UTC](https://discuss.elastic.co/t/multiline-codec-and-fluent-codec/233270 "2020-05-19T08:07:51Z")
I am using fluentD to send the logs to logstash, but since am using fluent codec to receive the logs, I am having issues in using multiline codec to handle stack trace. Any ideas would be helpful. Thanks. --- ## [X-Pack Installation with Elasticsearch and Graylog](https://discuss.elastic.co/t/x-pack-installation-with-elasticsearch-and-graylog/232195)
**Author:** [@rafaelcabralvo](https://discuss.elastic.co/u/rafaelcabralvo)\ **Replies:** 10\ **Last updated:** [May 19, 2020, 7:38am UTC](https://discuss.elastic.co/t/x-pack-installation-with-elasticsearch-and-graylog/232195 "2020-05-19T07:38:50Z")
Hello, I am trying to install x-pack in elasticsearch trough debian 9. But I am not using Kibana as web interface, I'm using Graylog. I found something like this: But that didn't worked. There came an error when I t… --- ## [Elasticsearch Keystore Authentication Failure](https://discuss.elastic.co/t/elasticsearch-keystore-authentication-failure/233259)
**Author:** [@Aidan\_Li](https://discuss.elastic.co/u/Aidan_Li)\ **Replies:** 0\ **Last updated:** [May 19, 2020, 7:19am UTC](https://discuss.elastic.co/t/elasticsearch-keystore-authentication-failure/233259 "2020-05-19T07:19:18Z")
I have a GCP bucket, and machines running with ES 7.6.1 in two separate clusters: cluster 0, with machines "machine 0" cluster 1, with machines "machine 1" GCP Bucket My goal is: register a repository with this GCP … --- ## [Logstash5.5 to kafka newer version - data discripency](https://discuss.elastic.co/t/logstash5-5-to-kafka-newer-version-data-discripency/233257)
**Author:** [@manu1](https://discuss.elastic.co/u/manu1)\ **Replies:** 0\ **Last updated:** [May 19, 2020, 6:58am UTC](https://discuss.elastic.co/t/logstash5-5-to-kafka-newer-version-data-discripency/233257 "2020-05-19T06:58:53Z")
Hello, We are using Logstash5.5 send event logs to Kafka newer version(2.4). We are seeing some data discrepancy. Issue seems to be resolving if we restart logstash service, however it is reoccurring nearly in 48 hours … --- ## [Grafana can't see ES indexes](https://discuss.elastic.co/t/grafana-cant-see-es-indexes/233170)
**Author:** [@Albert\_Aleksandrov](https://discuss.elastic.co/u/Albert_Aleksandrov)\ **Replies:** 2\ **Last updated:** [May 19, 2020, 6:18am UTC](https://discuss.elastic.co/t/grafana-cant-see-es-indexes/233170 "2020-05-19T06:18:30Z")
Hi all! Just started using Grafana + ES. I run ES in docker: docker run -d --name es -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" docker.elastic.co/elasticsearch/elasticsearch:7.7.0 Then generated some … --- ## [Elasticsearch query is too slow](https://discuss.elastic.co/t/elasticsearch-query-is-too-slow/233003)
**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\ **Replies:** 4\ **Last updated:** [May 19, 2020, 6:10am UTC](https://discuss.elastic.co/t/elasticsearch-query-is-too-slow/233003 "2020-05-19T06:10:54Z")
Hi , I am using a python script to pull the data from elasticsearch and process it. It has around 5000k records , but it's more then 24 hrs and it's still running. What i can do to make it fast. Here is the query I am … --- ## [How to create kibana Dashboard from client machine through Logstash](https://discuss.elastic.co/t/how-to-create-kibana-dashboard-from-client-machine-through-logstash/233043)
**Author:** [@vijazy](https://discuss.elastic.co/u/vijazy)\ **Replies:** 3\ **Last updated:** [May 19, 2020, 5:59am UTC](https://discuss.elastic.co/t/how-to-create-kibana-dashboard-from-client-machine-through-logstash/233043 "2020-05-19T05:59:15Z")
Hi elastic team , I am new in ELK, I am trying to implement ELK on production environment. I have configured Elasticsearch,kibana and logstash.. host1 - elasticsearch,kibana ,logstash with nginx proxy host2- Clientmac… --- ## [Restart on daily basis](https://discuss.elastic.co/t/restart-on-daily-basis/233116)
**Author:** [@mu44ly](https://discuss.elastic.co/u/mu44ly)\ **Replies:** 6\ **Last updated:** [May 19, 2020, 5:51am UTC](https://discuss.elastic.co/t/restart-on-daily-basis/233116 "2020-05-19T05:51:10Z")
Hello everyone, Recently we got issues with circuit.breaker exception on multiple clusters, right after upgrade from 6.8 to 7.4. It was found that problem can be fixed by jvm option tuning. However, due to other issues … --- ## [Encryption at rest support in x-pack platinum](https://discuss.elastic.co/t/encryption-at-rest-support-in-x-pack-platinum/100111)
**Author:** [@nkoothrappahli](https://discuss.elastic.co/u/nkoothrappahli)\ **Replies:** 3\ **Last updated:** [May 19, 2020, 5:49am UTC](https://discuss.elastic.co/t/encryption-at-rest-support-in-x-pack-platinum/100111 "2020-05-19T05:49:17Z")
According to https://www.elastic.co/subscriptions there is "Encryption at rest support" in Platinum x-pack security (formerly Shield). I cannot find any documentation about it or how to enable or configure it. Can you pl… --- ## [Adding a static text section in kibana dashboard](https://discuss.elastic.co/t/adding-a-static-text-section-in-kibana-dashboard/233233)
**Author:** [@vijay3](https://discuss.elastic.co/u/vijay3)\ **Replies:** 2\ **Last updated:** [May 19, 2020, 5:39am UTC](https://discuss.elastic.co/t/adding-a-static-text-section-in-kibana-dashboard/233233 "2020-05-19T05:39:23Z")
Hi All, I have created a dashboard. But at the end of the dashboard i need to add footnotes, which is nothing but a static text. But i dont find any feature to add such a section. Even if the text can be added as toolti… --- ## [Get a list of dashboards](https://discuss.elastic.co/t/get-a-list-of-dashboards/233031)
**Author:** [@mudricd](https://discuss.elastic.co/u/mudricd)\ **Replies:** 3\ **Last updated:** [May 19, 2020, 5:00am UTC](https://discuss.elastic.co/t/get-a-list-of-dashboards/233031 "2020-05-19T05:00:37Z")
I am trying to get a list of dashboards. Here is my command: curl -u 'elastic:xxxxx' -XGET --cacert /opt/ssl-certs/client-ca.cer -s https://x.x.x.x:9201/.kibana/\_search?type=dashboard&size=40 | grep Metricbeat But all… --- ## [No highlighting with intervals/fuzzy queries](https://discuss.elastic.co/t/no-highlighting-with-intervals-fuzzy-queries/229259)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 6\ **Last updated:** [May 19, 2020, 3:30am UTC](https://discuss.elastic.co/t/no-highlighting-with-intervals-fuzzy-queries/229259 "2020-05-19T03:30:31Z")
In a recent feature request, the intervals query was extended to support fuzzy rules. I'm now trying to figure out why highlighting doesn't work with intervals/fuzzy whereas it does work with intervals/match and span\_ne… --- ## [Translog files not clearing, each associated with an open file descriptor](https://discuss.elastic.co/t/translog-files-not-clearing-each-associated-with-an-open-file-descriptor/231791)
**Author:** [@hhsuey](https://discuss.elastic.co/u/hhsuey)\ **Replies:** 7\ **Last updated:** [May 19, 2020, 3:14am UTC](https://discuss.elastic.co/t/translog-files-not-clearing-each-associated-with-an-open-file-descriptor/231791 "2020-05-19T03:14:12Z")
One of our clusters is in a bad state where the nodes appear to have thousands of file descriptors open. I found out there are many open translog files since filename translog-1 and now up to translog-2358. Every hour ab… --- ## [The logstash'pipeline is running, but elasticsearch didnt create an index for data](https://discuss.elastic.co/t/the-logstashpipeline-is-running-but-elasticsearch-didnt-create-an-index-for-data/232768)
**Author:** [@Joseph-Gan-wk](https://discuss.elastic.co/u/Joseph-Gan-wk)\ **Replies:** 9\ **Last updated:** [May 19, 2020, 2:52am UTC](https://discuss.elastic.co/t/the-logstashpipeline-is-running-but-elasticsearch-didnt-create-an-index-for-data/232768 "2020-05-19T02:52:27Z")
Hi all, i am facing an issue is the elasticsearch did not create an index for data on Kibana. I checked the Logstash-plain.log that shows two pipelines are running. \[2020-05-15T15:42:41,124\]\[INFO \]\[logstash.agent … --- ## [SSH auth logs not visualized in Kibana](https://discuss.elastic.co/t/ssh-auth-logs-not-visualized-in-kibana/227484)
**Author:** [@ArnimS](https://discuss.elastic.co/u/ArnimS)\ **Replies:** 5\ **Last updated:** [May 19, 2020, 1:34am UTC](https://discuss.elastic.co/t/ssh-auth-logs-not-visualized-in-kibana/227484 "2020-05-19T01:34:03Z")
Hi everyone! I'm relatively new to the Elasticstack and currently trying to set up a centralized dashboard for the logs of all my servers. (And also use the system to replicate all logs to my monitoring server, where I'… --- ## [Why my query matching too slow ? Urgent project need help please](https://discuss.elastic.co/t/why-my-query-matching-too-slow-urgent-project-need-help-please/233216)
**Author:** [@Newbieuser](https://discuss.elastic.co/u/Newbieuser)\ **Replies:** 3\ **Last updated:** [May 19, 2020, 1:23am UTC](https://discuss.elastic.co/t/why-my-query-matching-too-slow-urgent-project-need-help-please/233216 "2020-05-19T01:23:29Z")
So i made indice like this(via python, language not important just want to see mapping scheme); \`\`\`def index\_create(es, index\_name): # create an empty index with the defined mapping - no documents added if not es.indice… --- ## [Filebeat Cisco Module: Listening on IPV6 only?](https://discuss.elastic.co/t/filebeat-cisco-module-listening-on-ipv6-only/229716)
**Author:** [@madhatt](https://discuss.elastic.co/u/madhatt)\ **Replies:** 1\ **Last updated:** [May 19, 2020, 1:22am UTC](https://discuss.elastic.co/t/filebeat-cisco-module-listening-on-ipv6-only/229716 "2020-05-19T01:22:47Z")
I have configured the Cisco module to listen on 0.0.0.0 UDP/514. If I use echo and netcat to send a message from localhost, I can see it come in (on loopback) with tcpdump, and filebeat parses the message successfully. … --- ## [Sort order of "View surrounding documents" view](https://discuss.elastic.co/t/sort-order-of-view-surrounding-documents-view/232280)
**Author:** [@thethomp](https://discuss.elastic.co/u/thethomp)\ **Replies:** 2\ **Last updated:** [May 19, 2020, 12:15am UTC](https://discuss.elastic.co/t/sort-order-of-view-surrounding-documents-view/232280 "2020-05-19T00:15:12Z")
Hello, I have a use case where I would like the "View Surrounding Documents" view to present the data in timestamp ascending order, rather than descending. If I go change this bit in the URL I get the view I'd like, but… --- ## [What are the fields in the text field of this index mapping?](https://discuss.elastic.co/t/what-are-the-fields-in-the-text-field-of-this-index-mapping/233202)
**Author:** [@aorona](https://discuss.elastic.co/u/aorona)\ **Replies:** 2\ **Last updated:** [May 18, 2020, 11:57pm UTC](https://discuss.elastic.co/t/what-are-the-fields-in-the-text-field-of-this-index-mapping/233202 "2020-05-18T23:57:31Z")
"mappings": { "my\_doc": { "properties": { "content": { "type": "text", "fields": { "ngram": { "type": "text", … --- ## [Allow read only access to a specific kibana dashboard](https://discuss.elastic.co/t/allow-read-only-access-to-a-specific-kibana-dashboard/233173)
**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\ **Replies:** 3\ **Last updated:** [May 18, 2020, 11:24pm UTC](https://discuss.elastic.co/t/allow-read-only-access-to-a-specific-kibana-dashboard/233173 "2020-05-18T23:24:11Z")
Hello, Is it possible to give only read access to a specific dashboard in Kibana for a set of users? Any advice is much appreciated --- ## [Weekly index with date\_index\_name processor](https://discuss.elastic.co/t/weekly-index-with-date-index-name-processor/233215)
**Author:** [@Arol](https://discuss.elastic.co/u/Arol)\ **Replies:** 0\ **Last updated:** [May 18, 2020, 10:56pm UTC](https://discuss.elastic.co/t/weekly-index-with-date-index-name-processor/233215 "2020-05-18T22:56:08Z")
I implement weakly-routing using elaticsearch processors. I need to generate the formy index yyyy-MM-W, i.e. for the date 05/19/2020, the index -2020-05-4 must be created. I use the processor: "date\_index\_name" … --- ## [Python Elasticsearch Client Authentication - Connection Refused](https://discuss.elastic.co/t/python-elasticsearch-client-authentication-connection-refused/233211)
**Author:** [@Fernando1](https://discuss.elastic.co/u/Fernando1)\ **Replies:** 2\ **Last updated:** [May 18, 2020, 10:46pm UTC](https://discuss.elastic.co/t/python-elasticsearch-client-authentication-connection-refused/233211 "2020-05-18T22:46:56Z")
Hello!! How is going? I'm using python client to connect to my elasticsearch database host at IBM Cloud's Openshift Instance. Then when I try to connect to it I got several errors. About my elasticsearch database: Ve… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1439) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1441)