# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1505

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1506

---

## [Nested indexing possible?](https://discuss.elastic.co/t/nested-indexing-possible/228584)

<div class="topic-metadata">

**Author:** [@EliWallic](https://discuss.elastic.co/u/EliWallic)\
**Replies:** 1\
**Last updated:** [April 17, 2020, 10:07pm UTC](https://discuss.elastic.co/t/nested-indexing-possible/228584 "2020-04-17T22:07:02Z")

</div>

Hi all, I have some plaintext logfiles which i want to have in a single event. For example: Start time: 20200417225004 property1: value1 property2: value2 property3: value3 property4: value4 Command start time: 20…

---

## [Installing Beats (Filebeat, Auditbeat, etc) on remote host](https://discuss.elastic.co/t/installing-beats-filebeat-auditbeat-etc-on-remote-host/228590)

<div class="topic-metadata">

**Author:** [@mokotoy](https://discuss.elastic.co/u/mokotoy)\
**Replies:** 0\
**Last updated:** [April 17, 2020, 9:54pm UTC](https://discuss.elastic.co/t/installing-beats-filebeat-auditbeat-etc-on-remote-host/228590 "2020-04-17T21:54:32Z")

</div>

I have an ELK stack install on a RockNSM 2.5 machine with Elastic version 7.6 I have the server running and I want to install beats on other hosts in my network. I'm running into issues running the beats setup as it kee…

---

## [Indexing strategy for small IoT sensor data project](https://discuss.elastic.co/t/indexing-strategy-for-small-iot-sensor-data-project/228589)

<div class="topic-metadata">

**Author:** [@vanessa](https://discuss.elastic.co/u/vanessa)\
**Replies:** 0\
**Last updated:** [April 17, 2020, 9:46pm UTC](https://discuss.elastic.co/t/indexing-strategy-for-small-iot-sensor-data-project/228589 "2020-04-17T21:46:04Z")

</div>

Hello! We are new to Elasticsearch and want to use Elastic Stack for our data pipeline project. Basically we have a vehicle with multiple IMU (motion) sensors and we want to figure out the most efficient way to index ou…

---

## [Terms agregation](https://discuss.elastic.co/t/terms-agregation/228586)

<div class="topic-metadata">

**Author:** [@ilhem](https://discuss.elastic.co/u/ilhem)\
**Replies:** 0\
**Last updated:** [April 17, 2020, 9:30pm UTC](https://discuss.elastic.co/t/terms-agregation/228586 "2020-04-17T21:30:28Z")

</div>

By default, the terms aggregation will return the buckets for the top ten terms ordered by the doc\_count . I want to get buckets for all terms (without setting the size parameter) is it possible?

---

## [Only in AWS Lambda: Json\_parse\_exception Illegal character CTRL-CHAR code 31](https://discuss.elastic.co/t/only-in-aws-lambda-json-parse-exception-illegal-character-ctrl-char-code-31/228585)

<div class="topic-metadata">

**Author:** [@derrickl](https://discuss.elastic.co/u/derrickl)\
**Replies:** 0\
**Last updated:** [April 17, 2020, 9:25pm UTC](https://discuss.elastic.co/t/only-in-aws-lambda-json-parse-exception-illegal-character-ctrl-char-code-31/228585 "2020-04-17T21:25:39Z")

</div>

Hi all, I'm using the python Elasticsearch library to query an index. When I run the search on AWS Lambda I get this json\_parse\_execption: "errorMessage": "TransportError(500, 'json\_parse\_exception', 'Illegal character…

---

## [Index privilege to update setting](https://discuss.elastic.co/t/index-privilege-to-update-setting/228570)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 0\
**Last updated:** [April 17, 2020, 7:55pm UTC](https://discuss.elastic.co/t/index-privilege-to-update-setting/228570 "2020-04-17T19:55:44Z")

</div>

Hi! I'm trying to create a user that's restricted to updating settings (\[indices:admin/settings/update\]) for indices, but it seems that I can only give "all" or "manage" but both can delete indices that I don't want. I …

---

## [Securing ELK](https://discuss.elastic.co/t/securing-elk/228359)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 1\
**Last updated:** [April 17, 2020, 7:51pm UTC](https://discuss.elastic.co/t/securing-elk/228359 "2020-04-17T19:51:52Z")

</div>

Hi, I am trying to secure my ELK. I have been checking some documentation, tutorials and also topics in discuss.elastic.co, but everybody shows different steps and settings enabled, so I am confused. \*Note: I am using …

---

## [Script params via Logstash, is it possible?](https://discuss.elastic.co/t/script-params-via-logstash-is-it-possible/226586)

<div class="topic-metadata">

**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\
**Replies:** 7\
**Last updated:** [April 17, 2020, 7:48pm UTC](https://discuss.elastic.co/t/script-params-via-logstash-is-it-possible/226586 "2020-04-17T19:48:52Z")

</div>

Is it possible to send 'params' to a stored script in Elasticsearch from Logstash, or do I have to use a script defined inline or as a file in Logstash in order to define a 'params' block for the script?

---

## [Too many scroll contexts error while running Scroll request through RestHighLevelClient in ElasticSearch 7.3.2](https://discuss.elastic.co/t/too-many-scroll-contexts-error-while-running-scroll-request-through-resthighlevelclient-in-elasticsearch-7-3-2/228560)

<div class="topic-metadata">

**Author:** [@Nazim\_Hussain](https://discuss.elastic.co/u/Nazim_Hussain)\
**Replies:** 0\
**Last updated:** [April 17, 2020, 7:22pm UTC](https://discuss.elastic.co/t/too-many-scroll-contexts-error-while-running-scroll-request-through-resthighlevelclient-in-elasticsearch-7-3-2/228560 "2020-04-17T19:22:45Z")

</div>

Hi, I am new to ES and we migrated from ES 6 to ES 7 recently, but while making a Scroll search call, we are getting following error: org.elasticsearch.ElasticsearchStatusException: Elasticsearch exception \[type=search…

---

## [TSVB with two visualizations: no data during time period on one suppresses display of other](https://discuss.elastic.co/t/tsvb-with-two-visualizations-no-data-during-time-period-on-one-suppresses-display-of-other/228355)

<div class="topic-metadata">

**Author:** [@tomj](https://discuss.elastic.co/u/tomj)\
**Replies:** 1\
**Last updated:** [April 17, 2020, 7:01pm UTC](https://discuss.elastic.co/t/tsvb-with-two-visualizations-no-data-during-time-period-on-one-suppresses-display-of-other/228355 "2020-04-17T19:01:50Z")

</div>

Using Elastic Cloud with 7.6.2, Kibana 7.6.2. I've got time series data as follows. One component generates a variety of messages. I have a panel filter that selects the component, then two visualizations that subdivi…

---

## [ELK watcher : painless script - stream.filter](https://discuss.elastic.co/t/elk-watcher-painless-script-stream-filter/228392)

<div class="topic-metadata">

**Author:** [@Jags](https://discuss.elastic.co/u/Jags)\
**Replies:** 3\
**Last updated:** [April 17, 2020, 6:40pm UTC](https://discuss.elastic.co/t/elk-watcher-painless-script-stream-filter/228392 "2020-04-17T18:40:01Z")

</div>

Below is the reslut of Elastic query with derivative aggregation "utils\_per\_5m": { "buckets": \[ { "key\_as\_string": "2020-04-15T21:10:00.000Z", "doc\_count": 1, "utils": { "value": 924 }, "key": 1586985000000 }, …

---

## [Problem date\_histogram in vega with aggregation](https://discuss.elastic.co/t/problem-date-histogram-in-vega-with-aggregation/228487)

<div class="topic-metadata">

**Author:** [@nb03briceno](https://discuss.elastic.co/u/nb03briceno)\
**Replies:** 6\
**Last updated:** [April 17, 2020, 5:30pm UTC](https://discuss.elastic.co/t/problem-date-histogram-in-vega-with-aggregation/228487 "2020-04-17T17:30:52Z")

</div>

Hello everyone, I'm trying to create a graph with vega. A date histogram graph from an aggregation, but it is not working. In Kibana, it shows me the following error. \_.aggregations is undefined Would you mind to make…

---

## [Spring Data Elasticsearch with ES 7.2.1 | GeoPoint mapping failure while indexing](https://discuss.elastic.co/t/spring-data-elasticsearch-with-es-7-2-1-geopoint-mapping-failure-while-indexing/227989)

<div class="topic-metadata">

**Author:** [@adivardhan](https://discuss.elastic.co/u/adivardhan)\
**Replies:** 9\
**Last updated:** [April 17, 2020, 5:23pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-with-es-7-2-1-geopoint-mapping-failure-while-indexing/227989 "2020-04-17T17:23:52Z")

</div>

Hi, I am using ES 7.2.1 to store large amount of location based data and querying for near-by locations. For location coordinates, I am using GeoPoint fields from my java codebase. ES: 7.2.1 Spring Data Elasticsearch…

---

## [How to save multiple logs to separate ES index's](https://discuss.elastic.co/t/how-to-save-multiple-logs-to-separate-es-indexs/227685)

<div class="topic-metadata">

**Author:** [@VSP](https://discuss.elastic.co/u/VSP)\
**Replies:** 2\
**Last updated:** [April 17, 2020, 4:30pm UTC](https://discuss.elastic.co/t/how-to-save-multiple-logs-to-separate-es-indexs/227685 "2020-04-17T16:30:47Z")

</div>

Hello, I am trying to send various types of logs through Filebeat -\> Logstash -\> Elastich Search -\> Kibana I used Fields with a variable log\_type and assigned different value to the variable basing on the type of the l…

---

## [How can i create logstash index every 4 hours except 1 hour](https://discuss.elastic.co/t/how-can-i-create-logstash-index-every-4-hours-except-1-hour/227928)

<div class="topic-metadata">

**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\
**Replies:** 13\
**Last updated:** [April 17, 2020, 4:25pm UTC](https://discuss.elastic.co/t/how-can-i-create-logstash-index-every-4-hours-except-1-hour/227928 "2020-04-17T16:25:47Z")

</div>

like output{ elasticsearch { index =\> "logstash-%{+YYYY.MM.dd.hh}" } } for example:- logstash-2020.04.14.07 logstash-2020.04.14.11

---

## [Translate Filters :: Can the Dictionary File Include a Range?](https://discuss.elastic.co/t/translate-filters-can-the-dictionary-file-include-a-range/228545)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 0\
**Last updated:** [April 17, 2020, 4:12pm UTC](https://discuss.elastic.co/t/translate-filters-can-the-dictionary-file-include-a-range/228545 "2020-04-17T16:12:41Z")

</div>

Hi Logstash Maestros, In my Logstash config file, I have a simple translate filter: filter { translate { field =\> "\[MyData\]\[FieldA\]" destination =\> "\[MyData\]\[FieldB\]" dictionary\_path =\> "/usr/share/logst…

---

## [ES marking some fields as multi-field by default. Why?](https://discuss.elastic.co/t/es-marking-some-fields-as-multi-field-by-default-why/228239)

<div class="topic-metadata">

**Author:** [@deepak643](https://discuss.elastic.co/u/deepak643)\
**Replies:** 1\
**Last updated:** [April 17, 2020, 3:42pm UTC](https://discuss.elastic.co/t/es-marking-some-fields-as-multi-field-by-default-why/228239 "2020-04-17T15:42:04Z")

</div>

I have a document with few fields. For some of the fields in that document, my ES mappings defined those fields as "keyword". I have indexed one document and tried to retrieve the index mappings to see how ES is storing…

---

## [Missing fields in Kibana](https://discuss.elastic.co/t/missing-fields-in-kibana/227974)

<div class="topic-metadata">

**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\
**Replies:** 6\
**Last updated:** [April 17, 2020, 3:34pm UTC](https://discuss.elastic.co/t/missing-fields-in-kibana/227974 "2020-04-17T15:34:27Z")

</div>

Hello, After I imported my CSV data in ES and when I search for my fields in devtools I couldn't find them all. This is my conf file : input{ file{ path =\> "C:/Users/Asus/Dropbox/PFE\_part2/MOOV\_ALEPE\_Data.csv" …

---

## [Big delay in writing to Elasticsearch from some log inputs of Filebeat](https://discuss.elastic.co/t/big-delay-in-writing-to-elasticsearch-from-some-log-inputs-of-filebeat/228007)

<div class="topic-metadata">

**Author:** [@r2r2](https://discuss.elastic.co/u/r2r2)\
**Replies:** 4\
**Last updated:** [April 17, 2020, 3:28pm UTC](https://discuss.elastic.co/t/big-delay-in-writing-to-elasticsearch-from-some-log-inputs-of-filebeat/228007 "2020-04-17T15:28:21Z")

</div>

Hello! I had to migrate my Elasticsearch 7.0.1 in a docker container from ssd to hdd. After that I can see some filebeat log inputs are very late. I use filebeat to send Nginx logs using a log file input for multiple …

---

## [Push data to Elasticsearch through API](https://discuss.elastic.co/t/push-data-to-elasticsearch-through-api/225871)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 0\
**Last updated:** [March 31, 2020, 1:31pm UTC](https://discuss.elastic.co/t/push-data-to-elasticsearch-through-api/225871 "2020-03-31T13:31:28Z")

</div>

Hi All, We are using elasticsearch for dashboard and reporting and analytics purpose, as part of this we are planning to get data from monitoring tool into elasticsearch, wanted to know is there a way that the monitorin…

---

## [Kafka Input Performance Problems](https://discuss.elastic.co/t/kafka-input-performance-problems/228541)

<div class="topic-metadata">

**Author:** [@chris.murray](https://discuss.elastic.co/u/chris.murray)\
**Replies:** 0\
**Last updated:** [April 17, 2020, 3:14pm UTC](https://discuss.elastic.co/t/kafka-input-performance-problems/228541 "2020-04-17T15:14:59Z")

</div>

I've been working to convert an ELK setup over to using Logstash as a parsing engine, from something home-grown (don't ask). I'm running into a problem with the performance of the Kafka input. Versions: Everything 7.6…

---

## [Kibana.yml is not accepting custom headers](https://discuss.elastic.co/t/kibana-yml-is-not-accepting-custom-headers/228416)

<div class="topic-metadata">

**Author:** [@somebody](https://discuss.elastic.co/u/somebody)\
**Replies:** 1\
**Last updated:** [April 17, 2020, 3:09pm UTC](https://discuss.elastic.co/t/kibana-yml-is-not-accepting-custom-headers/228416 "2020-04-17T15:09:11Z")

</div>

My kibana.yml looks like below: Kibana.yml elasticsearch.customHeaders: { "my\_consumer.id":"5cf4af56-1769-4fb7-84ef-71cc99eb23" } elasticsearch.hosts: http://\<es\_ip\>:9200 logging.dest: /var/log/kibana/kibana.log pid…

---

## [Reclaim persistent volume](https://discuss.elastic.co/t/reclaim-persistent-volume/228197)

<div class="topic-metadata">

**Author:** [@Nikolas\_Mousouros](https://discuss.elastic.co/u/Nikolas_Mousouros)\
**Replies:** 2\
**Last updated:** [April 17, 2020, 3:04pm UTC](https://discuss.elastic.co/t/reclaim-persistent-volume/228197 "2020-04-17T15:04:00Z")

</div>

I deleted my stateful set on openshift believing that I could reuse my persistent volume claim but it got deleted. On the bright side I think I still have this EBS volume on AWS so I added it again on openshift but when…

---

## [Logstash Date Filter Not Working with tab](https://discuss.elastic.co/t/logstash-date-filter-not-working-with-tab/228300)

<div class="topic-metadata">

**Author:** [@Atul\_Gunjal](https://discuss.elastic.co/u/Atul_Gunjal)\
**Replies:** 3\
**Last updated:** [April 17, 2020, 2:52pm UTC](https://discuss.elastic.co/t/logstash-date-filter-not-working-with-tab/228300 "2020-04-17T14:52:54Z")

</div>

I need to parse event and time separated by tab using the date filter in logstash, but logstash failed to identify tab and gives an error grok{ patterns\_dir =\> \["./patterns"\] match =\> { "message" =\> "%{TIME…

---

## [Logstash cidr filter throws error if dictionary file is empty](https://discuss.elastic.co/t/logstash-cidr-filter-throws-error-if-dictionary-file-is-empty/228496)

<div class="topic-metadata">

**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\
**Replies:** 1\
**Last updated:** [April 17, 2020, 2:49pm UTC](https://discuss.elastic.co/t/logstash-cidr-filter-throws-error-if-dictionary-file-is-empty/228496 "2020-04-17T14:49:22Z")

</div>

This is on the back of an older unresolved issue: Logstash translate filter throws error if dictionary file is empty I am running into the same problem as mentioned in the above stale issue. I have a translate filter l…

---

## [Logstash http filter plugin](https://discuss.elastic.co/t/logstash-http-filter-plugin/228516)

<div class="topic-metadata">

**Author:** [@akhilsharma.in](https://discuss.elastic.co/u/akhilsharma.in)\
**Replies:** 2\
**Last updated:** [April 17, 2020, 2:46pm UTC](https://discuss.elastic.co/t/logstash-http-filter-plugin/228516 "2020-04-17T14:46:43Z")

</div>

Team, we're using http in filter to make a REST API call. Body of the call accepts a parameter which should be an array like \[1111,11\] but while passing this parameter, logstash is converting array to string which is "\[…

---

## [Dynamic kibana visualization embedding](https://discuss.elastic.co/t/dynamic-kibana-visualization-embedding/228179)

<div class="topic-metadata">

**Author:** [@Amine\_Maalfi](https://discuss.elastic.co/u/Amine_Maalfi)\
**Replies:** 3\
**Last updated:** [April 17, 2020, 2:45pm UTC](https://discuss.elastic.co/t/dynamic-kibana-visualization-embedding/228179 "2020-04-17T14:45:55Z")

</div>

Hello is there a way to dynamically display embedded visualizations of kibana in our applications? for example changing the index name dynamically

---

## [\[ SOLVED\] Adding custom csp rule on Elastic Cloud : 'csp.rules': is not allowed - Not possible yet](https://discuss.elastic.co/t/solved-adding-custom-csp-rule-on-elastic-cloud-csp-rules-is-not-allowed-not-possible-yet/228513)

<div class="topic-metadata">

**Author:** [@IanCap](https://discuss.elastic.co/u/IanCap)\
**Replies:** 4\
**Last updated:** [April 17, 2020, 2:23pm UTC](https://discuss.elastic.co/t/solved-adding-custom-csp-rule-on-elastic-cloud-csp-rules-is-not-allowed-not-possible-yet/228513 "2020-04-17T14:23:14Z")

</div>

Hi ! I'm currently trying to modify the Content Security Policy in the kibana.yml file on a Clouded Deployment to allow a custom javascript to run on a dashboard but i get the following error message when adding the csp…

---

## [How to carry forward the applied index level settings to new indices](https://discuss.elastic.co/t/how-to-carry-forward-the-applied-index-level-settings-to-new-indices/228534)

<div class="topic-metadata">

**Author:** [@ntsh999](https://discuss.elastic.co/u/ntsh999)\
**Replies:** 2\
**Last updated:** [April 17, 2020, 2:14pm UTC](https://discuss.elastic.co/t/how-to-carry-forward-the-applied-index-level-settings-to-new-indices/228534 "2020-04-17T14:14:01Z")

</div>

I am running elastic stack (ES, kibana, Filebeat, Metricbeat , logstash) v7.2 on kubernetes. I have applied the following setting to my filebeat and metricbeat index patterns. PUT metricbeat-\*/\_settings { "index" : {…

---

## [Geo\_point mapping python and Streamsets fails with Elasticsearch](https://discuss.elastic.co/t/geo-point-mapping-python-and-streamsets-fails-with-elasticsearch/228486)

<div class="topic-metadata">

**Author:** [@drules](https://discuss.elastic.co/u/drules)\
**Replies:** 1\
**Last updated:** [April 17, 2020, 2:06pm UTC](https://discuss.elastic.co/t/geo-point-mapping-python-and-streamsets-fails-with-elasticsearch/228486 "2020-04-17T14:06:52Z")

</div>

I have this mapping in elasticsearch "mappings": { "properties": { "fromCoordinates": {"type": "geo\_point"}, "toCoordinates": {"type": "geo\_point"}, "seenCoordinates": {"type": …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1504)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1506)
