# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1514 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1515 --- ## [Cannot start elasticsearch under user](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587)
**Author:** [@gefela](https://discuss.elastic.co/u/gefela)\ **Replies:** 16\ **Last updated:** [April 14, 2020, 4:51pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587 "2020-04-14T16:51:20Z")
When I try to start elasticsearch , I get the following \[gefela@gefela bin\] ./elasticsearch ./elasticsearch-env: line 75: /etc/sysconfig/elasticsearch: Permission denied \[gefela@gefela bin\] ^C What do I need to do to f… --- ## [Kibana "Unable to revive connection" to Elasticsearch on Docker](https://discuss.elastic.co/t/kibana-unable-to-revive-connection-to-elasticsearch-on-docker/227944)
**Author:** [@ffcandido](https://discuss.elastic.co/u/ffcandido)\ **Replies:** 3\ **Last updated:** [April 14, 2020, 4:35pm UTC](https://discuss.elastic.co/t/kibana-unable-to-revive-connection-to-elasticsearch-on-docker/227944 "2020-04-14T16:35:38Z")
Hi everyone, I'm using Docker Compose to run Elasticsearch Single Node on Docker with Kibana. I reviewed my files several times and no luck so far. I'm getting "Unable to revive connection: http://elasticsearch:9200/" … --- ## [Failed to start kibana after adding more elasticsearch.host](https://discuss.elastic.co/t/failed-to-start-kibana-after-adding-more-elasticsearch-host/227846)
**Author:** [@gilang\_bilbisri](https://discuss.elastic.co/u/gilang_bilbisri)\ **Replies:** 3\ **Last updated:** [April 14, 2020, 4:32pm UTC](https://discuss.elastic.co/t/failed-to-start-kibana-after-adding-more-elasticsearch-host/227846 "2020-04-14T16:32:01Z")
hello. am using Centos 7, kibana 7.6,elasticsearch 7.6. i have problems with my kibana. It won't start after adding 1 more elasticsearch.host on kibana config. Before that i only have 2 elasticsearch host in my config.… --- ## [Logstash経由でのレコード転送が不完全に繰り返される](https://discuss.elastic.co/t/logstash/226507)
**Author:** [@sogaoh](https://discuss.elastic.co/u/sogaoh)\ **Replies:** 3\ **Last updated:** [April 14, 2020, 4:12pm UTC](https://discuss.elastic.co/t/logstash/226507 "2020-04-14T16:12:22Z")
と同一の以下環境で Logstash経由での400万件のレコード転送が240万件程しかされない という状況となっており、打開策を模索しています。 logstash:7.6.1 ( Docker ) AWS RDS (MySQL 5.7.12) AWS Elasticsearch (7.1) 同様の状況にご経験がある、あるいは何か効果的な対策が浮かぶ、等あれば ご提示いただけると大変ありがたいと思い、投稿する次第です。 よ… --- ## [Kibana infra/logs displaying "undefined" for ECS-formatted events](https://discuss.elastic.co/t/kibana-infra-logs-displaying-undefined-for-ecs-formatted-events/226137)
**Author:** [@ceekay](https://discuss.elastic.co/u/ceekay)\ **Replies:** 5\ **Last updated:** [April 14, 2020, 4:01pm UTC](https://discuss.elastic.co/t/kibana-infra-logs-displaying-undefined-for-ecs-formatted-events/226137 "2020-04-14T16:01:40Z")
I've spent quite a while reworking my apache/nginx Logstash filter to be ECS-compliant, mostly using the url and http field sets. The newly-formated events are indexing correctly and look fine in Kibana Discover, but in … --- ## [Kibana cloud doesn't load](https://discuss.elastic.co/t/kibana-cloud-doesnt-load/227951)
**Author:** [@runnyrun](https://discuss.elastic.co/u/runnyrun)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 3:42pm UTC](https://discuss.elastic.co/t/kibana-cloud-doesnt-load/227951 "2020-04-14T15:42:20Z")
Hey, I just started the free trial of the Kibana cloud. I clicked on the launch under Kibaba, but it doesn't get loaded in the Webbrowser " This site can’t be reached". Please help. --- ## [IntelTwit - Poor Man's Threat Intel](https://discuss.elastic.co/t/inteltwit-poor-mans-threat-intel/126183)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [April 14, 2020, 3:42pm UTC](https://discuss.elastic.co/t/inteltwit-poor-mans-threat-intel/126183 "2020-04-14T15:42:07Z")
This is the newest "fun" project I am working on. The twitter plugin can dump, literally, over 1,000 fields so I've narrowed it down to what I believe is the most relevant and then pulled some of those fields apart for … --- ## [How to prevent spring boot app to access to my logstash and elasticsearch?](https://discuss.elastic.co/t/how-to-prevent-spring-boot-app-to-access-to-my-logstash-and-elasticsearch/227935)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 3:38pm UTC](https://discuss.elastic.co/t/how-to-prevent-spring-boot-app-to-access-to-my-logstash-and-elasticsearch/227935 "2020-04-14T15:38:51Z")
I import project spring-boot-elk and just i run it by spring suite tools, and when i run logstash it can't parsing data from my csv file . i just want to prevent spring boot to acces to my data and logstash; this is the… --- ## [Elasticsearch reindex range](https://discuss.elastic.co/t/elasticsearch-reindex-range/227954)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 3:36pm UTC](https://discuss.elastic.co/t/elasticsearch-reindex-range/227954 "2020-04-14T15:36:44Z")
Hi, in my index template "clientip" field is text. so I need to reindex the indices. It's been about 2 months and indices are create every day: logstash-vod-2020.04.14 logstash-vod-2020.04.13 In docs I see I should… --- ## [Ignore server name mismatch in Java transport client?](https://discuss.elastic.co/t/ignore-server-name-mismatch-in-java-transport-client/227950)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 3:22pm UTC](https://discuss.elastic.co/t/ignore-server-name-mismatch-in-java-transport-client/227950 "2020-04-14T15:22:28Z")
For tedious reasons discussed elsewhere, I have a temporary need to talk to Elasticsearch using the Java transport client with the complications that communication has to be over TLS, I can't change that the server cer… --- ## [Need help with Terms Aggregation : buckets count](https://discuss.elastic.co/t/need-help-with-terms-aggregation-buckets-count/227948)
**Author:** [@IanCap](https://discuss.elastic.co/u/IanCap)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 3:17pm UTC](https://discuss.elastic.co/t/need-help-with-terms-aggregation-buckets-count/227948 "2020-04-14T15:17:36Z")
Hi everyone ! I'm currently working on a query and want to count the numbers of hits returned. Given the following query : GET /index\*/\_search { "aggs": { "ip": { "terms": { "field": "ClientIP.ip… --- ## [Using the TransportClient with ECK](https://discuss.elastic.co/t/using-the-transportclient-with-eck/197767)
**Author:** [@akappler](https://discuss.elastic.co/u/akappler)\ **Replies:** 6\ **Last updated:** [April 14, 2020, 3:16pm UTC](https://discuss.elastic.co/t/using-the-transportclient-with-eck/197767 "2020-04-14T15:16:05Z")
We have a legacy application which uses the Java TransportClient to access the ES API on port 9300, which we would like to operate with the ES operator. It seems that the ES instance created by ECK only exposes the REST … --- ## [Kibana Type of the chart](https://discuss.elastic.co/t/kibana-type-of-the-chart/227936)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 3:00pm UTC](https://discuss.elastic.co/t/kibana-type-of-the-chart/227936 "2020-04-14T15:00:48Z")
Is there any way to identify the type of the chart ( like area , TSVB ) by looking at the chart in the dashboard - perhaps with a tooltip or help. This is generally nice to have as some of the charts are obvious by loo… --- ## [Kibana Filter is not working](https://discuss.elastic.co/t/kibana-filter-is-not-working/227923)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 3\ **Last updated:** [April 14, 2020, 2:56pm UTC](https://discuss.elastic.co/t/kibana-filter-is-not-working/227923 "2020-04-14T14:56:58Z")
I applied a filter : category.keyword: Men's Shoes . However, the widget "\[eCommerce\] Sales by Category" still shows other categories as well. What is the reasoning behind this . Check out here ,and see the widget "\[eC… --- ## [Pinned Query with Term Aggregation get me null\_pointer\_exception](https://discuss.elastic.co/t/pinned-query-with-term-aggregation-get-me-null-pointer-exception/227932)
**Author:** [@dearste](https://discuss.elastic.co/u/dearste)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 2:29pm UTC](https://discuss.elastic.co/t/pinned-query-with-term-aggregation-get-me-null-pointer-exception/227932 "2020-04-14T14:29:40Z")
Hi, try this query but gives me null\_pointer\_exception: { "query": { "pinned": { "ids": \[ "1819" \], "organic": { "bool": { "must": \[ … --- ## [Why i am not ablle to select my available fields in Percentiles Aggregation Field option in kibana visualization](https://discuss.elastic.co/t/why-i-am-not-ablle-to-select-my-available-fields-in-percentiles-aggregation-field-option-in-kibana-visualization/227900)
**Author:** [@Pacha\_Gopi](https://discuss.elastic.co/u/Pacha_Gopi)\ **Replies:** 7\ **Last updated:** [April 14, 2020, 2:27pm UTC](https://discuss.elastic.co/t/why-i-am-not-ablle-to-select-my-available-fields-in-percentiles-aggregation-field-option-in-kibana-visualization/227900 "2020-04-14T14:27:04Z")
Hi all, I am using latest version of kibana and my task is visualize the API responce time (upstream\_responce\_time in nginx) in kibana dash board on the values of p50,p90,p99.when i select Percentiles Aggregation opit… --- ## [Bug report: Refresh in Metrics app on host level is not working](https://discuss.elastic.co/t/bug-report-refresh-in-metrics-app-on-host-level-is-not-working/227249)
**Author:** [@JPT](https://discuss.elastic.co/u/JPT)\ **Replies:** 3\ **Last updated:** [April 14, 2020, 2:03pm UTC](https://discuss.elastic.co/t/bug-report-refresh-in-metrics-app-on-host-level-is-not-working/227249 "2020-04-14T14:03:33Z")
Hello, we run a cluster on version 7.6.2 and discovered that the refresh as well as the auto refresh are not working if you select one host. Here is how you can retrace the error: In Kibana open Metrics App --\> click o… --- ## [Phrase-based proximity search](https://discuss.elastic.co/t/phrase-based-proximity-search/227929)
**Author:** [@whatgeorgemade](https://discuss.elastic.co/u/whatgeorgemade)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 1:54pm UTC](https://discuss.elastic.co/t/phrase-based-proximity-search/227929 "2020-04-14T13:54:27Z")
Hi all, There seem to be quite a few other threads about this on the forum but none have answers, so forgive me for posting something that has been asked before. I'm looking for a way to do a phrase-based proximity sea… --- ## [Payload too large](https://discuss.elastic.co/t/payload-too-large/227858)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 2\ **Last updated:** [April 14, 2020, 1:33pm UTC](https://discuss.elastic.co/t/payload-too-large/227858 "2020-04-14T13:33:34Z")
I use snmp input for logstash, and the fields more than 7000, the limit fields already covered, but the kibana index pattern shown this message: Payload Too Large. Below the error Wrapper@http://10.210.20.98/kibana/bu… --- ## [Application monitoring](https://discuss.elastic.co/t/application-monitoring/227918)
**Author:** [@rakeshraagu2](https://discuss.elastic.co/u/rakeshraagu2)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 1:21pm UTC](https://discuss.elastic.co/t/application-monitoring/227918 "2020-04-14T13:21:55Z")
Hi guyz, Is it possible to monitor any particular application using elk stack? For example if I have a tomcat application server, Is it possible to monitor the status like memory usage by the application. Kindly help w… --- ## [Boost term without any query](https://discuss.elastic.co/t/boost-term-without-any-query/227921)
**Author:** [@jenssc](https://discuss.elastic.co/u/jenssc)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 1:19pm UTC](https://discuss.elastic.co/t/boost-term-without-any-query/227921 "2020-04-14T13:19:33Z")
Hi I would like to boost some results when I do a "blank" search, but it doesn't seem to work! I'm trying to do a "blank" search and then add a should match term but setting minimum\_should\_match = 0. The result doesn't … --- ## [How to write to a multiple indexes using single elasticsearch output?](https://discuss.elastic.co/t/how-to-write-to-a-multiple-indexes-using-single-elasticsearch-output/227870)
**Author:** [@artur\_m](https://discuss.elastic.co/u/artur_m)\ **Replies:** 2\ **Last updated:** [April 14, 2020, 1:18pm UTC](https://discuss.elastic.co/t/how-to-write-to-a-multiple-indexes-using-single-elasticsearch-output/227870 "2020-04-14T13:18:38Z")
Hey folks, i'm pretty new guy for ELK stack, so don't judge me too much. So we have a basic fresh ELK setup v 7.6.2 with basic licence enabled. We are using filebeat to gather logs and send them to logstash. After tha… --- ## [Mapping using Logstash](https://discuss.elastic.co/t/mapping-using-logstash/227269)
**Author:** [@Antonio\_Antovski](https://discuss.elastic.co/u/Antonio_Antovski)\ **Replies:** 3\ **Last updated:** [April 14, 2020, 1:08pm UTC](https://discuss.elastic.co/t/mapping-using-logstash/227269 "2020-04-14T13:08:11Z")
Hello, I'm new to logstash, and while experimenting with it I faced some problems for which I need some help to solve them. I'm reading the data I want to put into ES, from MySQL db. I have created a template (with temp… --- ## [Best way to parse events (filebeat module/logstash plugin/logstash input filter)](https://discuss.elastic.co/t/best-way-to-parse-events-filebeat-module-logstash-plugin-logstash-input-filter/227916)
**Author:** [@s34g4r](https://discuss.elastic.co/u/s34g4r)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 12:55pm UTC](https://discuss.elastic.co/t/best-way-to-parse-events-filebeat-module-logstash-plugin-logstash-input-filter/227916 "2020-04-14T12:55:44Z")
I've installed and configured elasticstack on CentOS 8, using the packages in the elasticsearch repos. Once of the first log sources I'm toying with is mod\_security. Of course, the format of these logs is totally bruta… --- ## [Getting error like master not discovered or elected yet, an election requires at least 2 nodes](https://discuss.elastic.co/t/getting-error-like-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes/227901)
**Author:** [@raj31391](https://discuss.elastic.co/u/raj31391)\ **Replies:** 4\ **Last updated:** [April 14, 2020, 12:39pm UTC](https://discuss.elastic.co/t/getting-error-like-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes/227901 "2020-04-14T12:39:45Z")
Getting below error while starting the elastic search node \[2020-04-14T16:53:34,444\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[node-1\] master not discovered or elected yet, an election requires at least 2 no… --- ## [Kibana translate](https://discuss.elastic.co/t/kibana-translate/226434)
**Author:** [@Vlad\_Piratov](https://discuss.elastic.co/u/Vlad_Piratov)\ **Replies:** 4\ **Last updated:** [April 14, 2020, 12:39pm UTC](https://discuss.elastic.co/t/kibana-translate/226434 "2020-04-14T12:39:22Z")
Hi! You must localize Kibana into Russian. But I can't find instructions on how to do it anywhere. All links lead to I18n. If you do not find it difficult - please explain. Thanks :slight\_smile: https://github.com/elast… --- ## [Send Multiple dashboard using a single watcher](https://discuss.elastic.co/t/send-multiple-dashboard-using-a-single-watcher/227909)
**Author:** [@KaustavNath](https://discuss.elastic.co/u/KaustavNath)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 12:27pm UTC](https://discuss.elastic.co/t/send-multiple-dashboard-using-a-single-watcher/227909 "2020-04-14T12:27:08Z")
Hello, I want to pass multiple dashboard url in a single watcher so that all dashboard can be sent as an attachment in a single email. But when I try to pass urls as array it gives error "Does not support values of type… --- ## [Help understanding range query with date](https://discuss.elastic.co/t/help-understanding-range-query-with-date/227887)
**Author:** [@mauog](https://discuss.elastic.co/u/mauog)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 10:35am UTC](https://discuss.elastic.co/t/help-understanding-range-query-with-date/227887 "2020-04-14T10:35:36Z")
Hi all, I'm very new beginner with ELK stack. I'm trying to build a query that should get the documents created today. I thougt to write this query: "query": { "range": { "@timestamp": { "gte": "now/d"… --- ## [Difference between Doc count and Number of events sent by a collector](https://discuss.elastic.co/t/difference-between-doc-count-and-number-of-events-sent-by-a-collector/227896)
**Author:** [@hilo21](https://discuss.elastic.co/u/hilo21)\ **Replies:** 4\ **Last updated:** [April 14, 2020, 11:38am UTC](https://discuss.elastic.co/t/difference-between-doc-count-and-number-of-events-sent-by-a-collector/227896 "2020-04-14T11:38:01Z")
For sizing purposes, I am studying how much data size would be taken by different logs. I have ingested more than 10000 events (PANOS events automatically generated by a script) but i only see 4472 documents in my index.… --- ## [Elasticsearch query\_string doesnt work with \* wildcharacter in the starting](https://discuss.elastic.co/t/elasticsearch-query-string-doesnt-work-with-wildcharacter-in-the-starting/227897)
**Author:** [@prematiwari](https://discuss.elastic.co/u/prematiwari)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 11:15am UTC](https://discuss.elastic.co/t/elasticsearch-query-string-doesnt-work-with-wildcharacter-in-the-starting/227897 "2020-04-14T11:15:45Z")
Hi, I am using query\_string to fetch the results for ends with text in a specific field that holds a url. So, the query can either be ends with or starts with. The starts with scenario works well with match\_phrase\_pref… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1513) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1515)