# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1579 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1580 --- ## [ES CCR, why need to close index to unfollow a follower index](https://discuss.elastic.co/t/es-ccr-why-need-to-close-index-to-unfollow-a-follower-index/223236)
**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\ **Replies:** 0\ **Last updated:** [March 12, 2020, 2:32am UTC](https://discuss.elastic.co/t/es-ccr-why-need-to-close-index-to-unfollow-a-follower-index/223236 "2020-03-12T02:32:00Z")
Hi, I want to know the reason why need to close the index when we unfollow a follower index in CCR. I think we just need to do is pause follower and unfollow is okay. --- ## [ES Lookups](https://discuss.elastic.co/t/es-lookups/220276)
**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\ **Replies:** 7\ **Last updated:** [March 11, 2020, 11:14pm UTC](https://discuss.elastic.co/t/es-lookups/220276 "2020-03-11T23:14:29Z")
So, I'm back dealing with RRAS logs on Logstash/Elasticsearch, and seems I'm in a pickle. I'm using filter { elasticsearch, and debug shows it's working fine: \[2020-02-20T20:36:56,495\]\[DEBUG\]\[logstash.pipeline \]… --- ## [Ingest pipeline merge subfields to JSON string?](https://discuss.elastic.co/t/ingest-pipeline-merge-subfields-to-json-string/222819)
**Author:** [@jsosic](https://discuss.elastic.co/u/jsosic)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 1:50am UTC](https://discuss.elastic.co/t/ingest-pipeline-merge-subfields-to-json-string/222819 "2020-03-12T01:50:24Z")
Hi guys, I have my apps set to write JSON logs, and filebeat sends them enriched with host metadata to Elasticsearch cluster. There they get processed by ingest pipeline which basically runs the following GROK: "p… --- ## [Problems Installing Elasticsearch via Helm Kubernetes (version 7.6.1)](https://discuss.elastic.co/t/problems-installing-elasticsearch-via-helm-kubernetes-version-7-6-1/222610)
**Author:** [@a\_pel73](https://discuss.elastic.co/u/a_pel73)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 1:21am UTC](https://discuss.elastic.co/t/problems-installing-elasticsearch-via-helm-kubernetes-version-7-6-1/222610 "2020-03-12T01:21:34Z")
Hi, so I'm following the example to install elasticsearch via Helm chart. I meet all the pre-requisite: Docker-for-Desktop Kubernetes: v1.10.11 Helm v2.14.1 It doesn't appear all the pods are running and just stalls … --- ## [Coordinate Map - No Data](https://discuss.elastic.co/t/coordinate-map-no-data/222570)
**Author:** [@ads](https://discuss.elastic.co/u/ads)\ **Replies:** 14\ **Last updated:** [March 12, 2020, 12:42am UTC](https://discuss.elastic.co/t/coordinate-map-no-data/222570 "2020-03-12T00:42:12Z")
Hi, I am trying to create a coordinate map based off a geo\_point. However, no locations are being shown on my map. To get to this point I first created an index with a mapping: PUT cm\_delivery\_locations { "settings" :… --- ## [Kibana\_task\_manager\_1 issues](https://discuss.elastic.co/t/kibana-task-manager-1-issues/222839)
**Author:** [@Cameron\_808](https://discuss.elastic.co/u/Cameron_808)\ **Replies:** 2\ **Last updated:** [March 11, 2020, 11:21pm UTC](https://discuss.elastic.co/t/kibana-task-manager-1-issues/222839 "2020-03-11T23:21:42Z")
Hello, I'm completely new to Kibana and Elasticsearch. I've been digging my heels into figuring out why my Kibana is giving me installation issues. I'm utilizing MAC OS. I installed and deleted and then re-installed … --- ## [Affect of disparate CPU speeds on cluster](https://discuss.elastic.co/t/affect-of-disparate-cpu-speeds-on-cluster/222962)
**Author:** [@HockeyFan0000](https://discuss.elastic.co/u/HockeyFan0000)\ **Replies:** 4\ **Last updated:** [March 11, 2020, 11:16pm UTC](https://discuss.elastic.co/t/affect-of-disparate-cpu-speeds-on-cluster/222962 "2020-03-11T23:16:57Z")
I've replaced some ESX hosts with new ones and used the old hosts to replace two nodes already in my ES cluster and add two more, for a total of five data nodes. That means I have one node with a CPU that benchmarks les… --- ## [Kibana Displays Total White Screen Behind Reverse Proxy](https://discuss.elastic.co/t/kibana-displays-total-white-screen-behind-reverse-proxy/222929)
**Author:** [@izm1chael](https://discuss.elastic.co/u/izm1chael)\ **Replies:** 2\ **Last updated:** [March 11, 2020, 9:39pm UTC](https://discuss.elastic.co/t/kibana-displays-total-white-screen-behind-reverse-proxy/222929 "2020-03-11T21:39:40Z")
I am currently trying to run kibana behind a nginx reverse proxy, However, when I access the subdomain associated with my kibana instance, it displays a totally white page, Has anyone had any experience with this? --- ## [ECK with LoadBalancer on GKE](https://discuss.elastic.co/t/eck-with-loadbalancer-on-gke/223225)
**Author:** [@tillias](https://discuss.elastic.co/u/tillias)\ **Replies:** 0\ **Last updated:** [March 11, 2020, 9:38pm UTC](https://discuss.elastic.co/t/eck-with-loadbalancer-on-gke/223225 "2020-03-11T21:38:26Z")
Hello lovely people. I'm using following QuickStart https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-quickstart.html#k8s-deploy-eck Is there any example how to expose es-http using LoadBalancer in GKE? Thanks --- ## [\_delete\_by\_query must match exactly](https://discuss.elastic.co/t/delete-by-query-must-match-exactly/223030)
**Author:** [@puks1978](https://discuss.elastic.co/u/puks1978)\ **Replies:** 2\ **Last updated:** [March 11, 2020, 9:07pm UTC](https://discuss.elastic.co/t/delete-by-query-must-match-exactly/223030 "2020-03-11T21:07:58Z")
Hi, I am trying to delete an index by using the \_delete\_by\_query command and passing in a term I would like removed. The issue I am having is that if there are matching indexes that have any part of the term are being r… --- ## [OIDC client\_secret elasticsearch-keystore](https://discuss.elastic.co/t/oidc-client-secret-elasticsearch-keystore/223220)
**Author:** [@Victor\_Sartori](https://discuss.elastic.co/u/Victor_Sartori)\ **Replies:** 2\ **Last updated:** [March 11, 2020, 9:06pm UTC](https://discuss.elastic.co/t/oidc-client-secret-elasticsearch-keystore/223220 "2020-03-11T21:06:15Z")
I'm trying to use OIDC auth on ES. But If you follow the docs https://www.elastic.co/guide/en/elasticsearch/reference/7.6/oidc-guide-authentication.html, has a step to add manually the client secret on elasticsearch-key… --- ## [ES node storage size mixing?](https://discuss.elastic.co/t/es-node-storage-size-mixing/223214)
**Author:** [@EricMM](https://discuss.elastic.co/u/EricMM)\ **Replies:** 3\ **Last updated:** [March 11, 2020, 8:47pm UTC](https://discuss.elastic.co/t/es-node-storage-size-mixing/223214 "2020-03-11T20:47:36Z")
We have a few year old cluster of 15 servers (2 ES nodes per server) with 8TBs of local storage each, but are we running low on space and having to cut back on retention. I want to add 80TBs to increase our total storage… --- ## [Logstash pipeline tester UI tool - Feedback appreciated](https://discuss.elastic.co/t/logstash-pipeline-tester-ui-tool-feedback-appreciated/223219)
**Author:** [@epacke](https://discuss.elastic.co/u/epacke)\ **Replies:** 0\ **Last updated:** [March 11, 2020, 8:47pm UTC](https://discuss.elastic.co/t/logstash-pipeline-tester-ui-tool-feedback-appreciated/223219 "2020-03-11T20:47:27Z")
Hi there! I've made a pipeline testing tool using NodeJs, Logstash and docker-compose for my colleagues that is not so well versed in Linux but ended up using it myself out of convenience. Basically it launches a Web-U… --- ## [\[logstash.filters.grok\] Running grok filter missing in logs to apply grok filter](https://discuss.elastic.co/t/logstash-filters-grok-running-grok-filter-missing-in-logs-to-apply-grok-filter/223218)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 0\ **Last updated:** [March 11, 2020, 8:45pm UTC](https://discuss.elastic.co/t/logstash-filters-grok-running-grok-filter-missing-in-logs-to-apply-grok-filter/223218 "2020-03-11T20:45:15Z")
I can see that my grok filter for one file isnt working as the debugged log shows below. How can I fix to apply the logstash.filters.grok in below non-grok filter working file\> \[2020-03-11T13:36:16,801\]\[DEBUG\]\[org.logst… --- ## [Visualizations with icons](https://discuss.elastic.co/t/visualizations-with-icons/223202)
**Author:** [@northmilo](https://discuss.elastic.co/u/northmilo)\ **Replies:** 2\ **Last updated:** [March 11, 2020, 8:36pm UTC](https://discuss.elastic.co/t/visualizations-with-icons/223202 "2020-03-11T20:36:47Z")
Hi, Is there any way to add symbols icons to visualizations? I saw latest splunk dashboards with clean icons and I would like to implement it to my elstack system. Thnaks! --- ## [IP compare](https://discuss.elastic.co/t/ip-compare/223212)
**Author:** [@Bradendurg](https://discuss.elastic.co/u/Bradendurg)\ **Replies:** 0\ **Last updated:** [March 11, 2020, 8:14pm UTC](https://discuss.elastic.co/t/ip-compare/223212 "2020-03-11T20:14:34Z")
Hi everyone! I have a big array of input in logstash IP addresses, then it saves in elastic,so I want to compare that IP adresses with big array of IP addresses from MSSQL. Pair from-to contains in single massege. It doe… --- ## [Logstash if condition regex](https://discuss.elastic.co/t/logstash-if-condition-regex/223141)
**Author:** [@ash2](https://discuss.elastic.co/u/ash2)\ **Replies:** 4\ **Last updated:** [March 11, 2020, 8:00pm UTC](https://discuss.elastic.co/t/logstash-if-condition-regex/223141 "2020-03-11T20:00:29Z")
I want to write an if condition which takes regex for file path of window directory in logstash. Please help me with the regex pattern of C:\\Windows\\System32\\logs\\\*.log . e.g. output{ if \[log\]\[file\]\[path\] =~ /C:\\Windo… --- ## [Mapper parsing exeption logstash](https://discuss.elastic.co/t/mapper-parsing-exeption-logstash/223108)
**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\ **Replies:** 3\ **Last updated:** [March 11, 2020, 7:50pm UTC](https://discuss.elastic.co/t/mapper-parsing-exeption-logstash/223108 "2020-03-11T19:50:47Z")
Hi I am receiving this error message. I have been searching for hours where the problem is but I cannot find it. Is there a method to finding exactly where the problem is occurring? Mär 11 12:21:16 mon logstash\[16980\]… --- ## [Logstash-oss api](https://discuss.elastic.co/t/logstash-oss-api/223205)
**Author:** [@Ilya\_Moskalev](https://discuss.elastic.co/u/Ilya_Moskalev)\ **Replies:** 0\ **Last updated:** [March 11, 2020, 7:31pm UTC](https://discuss.elastic.co/t/logstash-oss-api/223205 "2020-03-11T19:31:37Z")
Hello! tell me trying to get the logstash-oss parameters through api but swears when prompted, maybe api does not work on logstash-oss curl -XGET 'localhost:9600/?pretty' 404 Not FoundNo context found for request --- ## [How to index Sharepoint files?](https://discuss.elastic.co/t/how-to-index-sharepoint-files/222959)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 6\ **Last updated:** [March 11, 2020, 7:15pm UTC](https://discuss.elastic.co/t/how-to-index-sharepoint-files/222959 "2020-03-11T19:15:00Z")
Hello, I am building an app that can search files across server, S3, Share point and Dropbox. I was able to search across files in servers, thanks to FsCrawler!! Exploring on how to index files from Share point right … --- ## [Having 4 independent pipelines vs pipeline-to-pipeline communication](https://discuss.elastic.co/t/having-4-independent-pipelines-vs-pipeline-to-pipeline-communication/222513)
**Author:** [@Eugene\_Dvorkin1](https://discuss.elastic.co/u/Eugene_Dvorkin1)\ **Replies:** 2\ **Last updated:** [March 11, 2020, 6:32pm UTC](https://discuss.elastic.co/t/having-4-independent-pipelines-vs-pipeline-to-pipeline-communication/222513 "2020-03-11T18:32:37Z")
I have 4 pipelines because I have to send data to different destinations: for example, prod and nonprod elastic search cluster, s3 bucket and some custom endpoint. Of course, I can configure one pipeline with different o… --- ## [Remote reindex and bandwidth usage](https://discuss.elastic.co/t/remote-reindex-and-bandwidth-usage/223186)
**Author:** [@wizardofc0dz](https://discuss.elastic.co/u/wizardofc0dz)\ **Replies:** 0\ **Last updated:** [March 11, 2020, 5:40pm UTC](https://discuss.elastic.co/t/remote-reindex-and-bandwidth-usage/223186 "2020-03-11T17:40:10Z")
Hello, I'm migrating all indices from an old server to a new one via remote reindexing but i'm having bandwidth limitation of ~ 60Mbit/s. The servers are connected with a cat6 crossover ethernet cable so bandwidth usa… --- ## [Suricata (3 of 4 shards failed)](https://discuss.elastic.co/t/suricata-3-of-4-shards-failed/223060)
**Author:** [@Lavardin](https://discuss.elastic.co/u/Lavardin)\ **Replies:** 0\ **Last updated:** [March 11, 2020, 7:09am UTC](https://discuss.elastic.co/t/suricata-3-of-4-shards-failed/223060 "2020-03-11T07:09:22Z")
I enabled the suricata module on filebeats, but when loading the dashboard I receive an error that its unable to load 3 of 4 shards. Also I noticed alerts are not displaying. This is my Suricata settings in pfsense T… --- ## [Grok Debugger is not shown in my dev tool](https://discuss.elastic.co/t/grok-debugger-is-not-shown-in-my-dev-tool/222607)
**Author:** [@Jai\_Tripathi](https://discuss.elastic.co/u/Jai_Tripathi)\ **Replies:** 5\ **Last updated:** [March 11, 2020, 5:25pm UTC](https://discuss.elastic.co/t/grok-debugger-is-not-shown-in-my-dev-tool/222607 "2020-03-11T17:25:32Z")
Hi Team, i have ELK 6.8.6, however i am not able to see the "Search Profiler" and "GROK Debugger" in my "Dev Tools" on Kibana Dashboard. Are these available on some subscription? --- ## [Data Table Visualizations - Newbie wrestling with Null Values & Counts](https://discuss.elastic.co/t/data-table-visualizations-newbie-wrestling-with-null-values-counts/222499)
**Author:** [@gardanni](https://discuss.elastic.co/u/gardanni)\ **Replies:** 3\ **Last updated:** [March 11, 2020, 5:25pm UTC](https://discuss.elastic.co/t/data-table-visualizations-newbie-wrestling-with-null-values-counts/222499 "2020-03-11T17:25:31Z")
I am new to Kibana (v6.86). I have been wrestling to create some visualizations and dashboards over the past few weeks. I am not very technical... to date, pretty much all of my work has involved the selectors that exist… --- ## [Configuration parameter syntax for nodeSelector?](https://discuss.elastic.co/t/configuration-parameter-syntax-for-nodeselector/222528)
**Author:** [@danielP1](https://discuss.elastic.co/u/danielP1)\ **Replies:** 2\ **Last updated:** [March 11, 2020, 5:17pm UTC](https://discuss.elastic.co/t/configuration-parameter-syntax-for-nodeselector/222528 "2020-03-11T17:17:13Z")
Greetings, I'm attempting to deploy elasticsearch onto k8s with the elasticsearch helm chart: I would like to constrain on which nodes the elastisearch components run. I see in the documentation there is a configur… --- ## [Unable to visualize in kibana with parent-child relationship](https://discuss.elastic.co/t/unable-to-visualize-in-kibana-with-parent-child-relationship/222106)
**Author:** [@Pankti\_Patel](https://discuss.elastic.co/u/Pankti_Patel)\ **Replies:** 3\ **Last updated:** [March 11, 2020, 5:14pm UTC](https://discuss.elastic.co/t/unable-to-visualize-in-kibana-with-parent-child-relationship/222106 "2020-03-11T17:14:07Z")
Hello, I have documents with the parent-child relationship. Parent documents contain users detail and Child document contain user’s daily details. I want to visualize state wise sum of deposite\_amount in kibana Parent… --- ## [Parsing XML File -\> xpath does not parse all fields in "event\_data"](https://discuss.elastic.co/t/parsing-xml-file-xpath-does-not-parse-all-fields-in-event-data/222916)
**Author:** [@jmohar](https://discuss.elastic.co/u/jmohar)\ **Replies:** 3\ **Last updated:** [March 11, 2020, 5:13pm UTC](https://discuss.elastic.co/t/parsing-xml-file-xpath-does-not-parse-all-fields-in-event-data/222916 "2020-03-11T17:13:58Z")
Hello ! After hours of trying i can´t find "the light". I have the following customized Windows XML File... with data in \[messages\]...but xpath only recognize the first field (activity\_id) ...and does not parse the "Use… --- ## [How to set variables and iterate using Vega](https://discuss.elastic.co/t/how-to-set-variables-and-iterate-using-vega/223013)
**Author:** [@jmrozi1](https://discuss.elastic.co/u/jmrozi1)\ **Replies:** 2\ **Last updated:** [March 11, 2020, 5:13pm UTC](https://discuss.elastic.co/t/how-to-set-variables-and-iterate-using-vega/223013 "2020-03-11T17:13:05Z")
Just a disclaimer: I'm new to Vega, so chances are this is a dumb question. Please let me know if I'm on the wrong path :slightly\_smiling\_face: At any rate, the context is that I'm trying create a 3x4 grid of text field… --- ## [How to translate this query to Kibana GUI](https://discuss.elastic.co/t/how-to-translate-this-query-to-kibana-gui/223124)
**Author:** [@jtebbens](https://discuss.elastic.co/u/jtebbens)\ **Replies:** 1\ **Last updated:** [March 11, 2020, 4:55pm UTC](https://discuss.elastic.co/t/how-to-translate-this-query-to-kibana-gui/223124 "2020-03-11T16:55:15Z")
Hi all, I am struggling with a table view that only shows interfaces that are utilized 70% or more. I received something like below as guidance but have no clue how to capture this in the Kibana GUI interface. I can't … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1578) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1580)