# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1588

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1589

---

## [Elasticsearch 7.6 Cluster Configuration](https://discuss.elastic.co/t/elasticsearch-7-6-cluster-configuration/222438)

<div class="topic-metadata">

**Author:** [@northmilo](https://discuss.elastic.co/u/northmilo)\
**Replies:** 1\
**Last updated:** [March 6, 2020, 11:35am UTC](https://discuss.elastic.co/t/elasticsearch-7-6-cluster-configuration/222438 "2020-03-06T11:35:22Z")

</div>

Hi, I am having issue with Elasticsearch 7.6 cluster configuration. Cluser status is RED. curl -XGET master1:9200/\_cat/nodes prints: 10.69.61.201 8 63 0 0.00 0.01 0.05 ilm \* master1.ela.soc.xxx curl -XGET data1:9200/\_c…

---

## [Graphite input and output logstash](https://discuss.elastic.co/t/graphite-input-and-output-logstash/222365)

<div class="topic-metadata">

**Author:** [@jalajgujral](https://discuss.elastic.co/u/jalajgujral)\
**Replies:** 3\
**Last updated:** [March 6, 2020, 11:07am UTC](https://discuss.elastic.co/t/graphite-input-and-output-logstash/222365 "2020-03-06T11:07:04Z")

</div>

Hi Guys , I am listing to one port where i am getting graphite and i want to send metrics to another graphite instance i am using graphite input and output plugins This my config input { graphite { port =\> 8686 } o…

---

## [Filter by comparing two number fields fails with number\_format\_exception](https://discuss.elastic.co/t/filter-by-comparing-two-number-fields-fails-with-number-format-exception/222250)

<div class="topic-metadata">

**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\
**Replies:** 4\
**Last updated:** [March 6, 2020, 10:58am UTC](https://discuss.elastic.co/t/filter-by-comparing-two-number-fields-fails-with-number-format-exception/222250 "2020-03-06T10:58:53Z")

</div>

I would like to filter documents in Kibana Visualize where msg.count\_passenger\_out \> msg.count\_passenger\_in. Both fields are number fields and are indexed. Im running Kibana + Elasticsearch v7.6.0 at Elastic Cloud. Thi…

---

## [Aggregations large data in real time in Elasticsearch. What solution is the best?](https://discuss.elastic.co/t/aggregations-large-data-in-real-time-in-elasticsearch-what-solution-is-the-best/222188)

<div class="topic-metadata">

**Author:** [@ndhcoder](https://discuss.elastic.co/u/ndhcoder)\
**Replies:** 10\
**Last updated:** [March 6, 2020, 10:30am UTC](https://discuss.elastic.co/t/aggregations-large-data-in-real-time-in-elasticsearch-what-solution-is-the-best/222188 "2020-03-06T10:30:21Z")

</div>

Hi all, I have a question ? With a system have about a billion logs each days, How can i get all my aggregations data like "count request error per host", "count request per days, per hours, ..", in time series in rea…

---

## [Use of filebeat templates - single template vs multiple templates](https://discuss.elastic.co/t/use-of-filebeat-templates-single-template-vs-multiple-templates/222437)

<div class="topic-metadata">

**Author:** [@mvienne](https://discuss.elastic.co/u/mvienne)\
**Replies:** 1\
**Last updated:** [March 6, 2020, 10:27am UTC](https://discuss.elastic.co/t/use-of-filebeat-templates-single-template-vs-multiple-templates/222437 "2020-03-06T10:27:35Z")

</div>

I'm confused about the use of filebeat templates with the file fields.yml. If I want to store two types of logs into elasticsearch, let's say apache logs and postgres logs, is it better to have a single template in the …

---

## [7.6.0 High CPU on a data node](https://discuss.elastic.co/t/7-6-0-high-cpu-on-a-data-node/220340)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 22\
**Last updated:** [March 6, 2020, 10:26am UTC](https://discuss.elastic.co/t/7-6-0-high-cpu-on-a-data-node/220340 "2020-03-06T10:26:01Z")

</div>

Found the need to restart elasticsearch service on one of our 7.6.0 data nodes today as it was in high cpu load. Maybe a general bug that bid us? Top of only stack dump/issue seen in the log: \[2020-02-21T09:15:34,251\]\[…

---

## [How to collapse multiple fields value in ElasticSearch?](https://discuss.elastic.co/t/how-to-collapse-multiple-fields-value-in-elasticsearch/222427)

<div class="topic-metadata">

**Author:** [@ndhcoder](https://discuss.elastic.co/u/ndhcoder)\
**Replies:** 0\
**Last updated:** [March 6, 2020, 9:31am UTC](https://discuss.elastic.co/t/how-to-collapse-multiple-fields-value-in-elasticsearch/222427 "2020-03-06T09:31:52Z")

</div>

Hi everyone, I want to make a use case is allow user setting dynamic collapse field on their data, so I have a question: How to collapse multiple fields value in ElasticSearch ? Thanks all.

---

## [Continued support for annotated text plugin?](https://discuss.elastic.co/t/continued-support-for-annotated-text-plugin/218688)

<div class="topic-metadata">

**Author:** [@benarar](https://discuss.elastic.co/u/benarar)\
**Replies:** 1\
**Last updated:** [March 6, 2020, 9:31am UTC](https://discuss.elastic.co/t/continued-support-for-annotated-text-plugin/218688 "2020-03-06T09:31:29Z")

</div>

Hi, I am hoping to use the Mapper Annotated Text Plugin (Mapper Annotated Text Plugin | Elasticsearch Plugins and Integrations \[7.5\] | Elastic) but noticed this warning: This functionality is experimental and may be c…

---

## [Nginx is giving blank page on routing to Kibana](https://discuss.elastic.co/t/nginx-is-giving-blank-page-on-routing-to-kibana/221695)

<div class="topic-metadata">

**Author:** [@Natarajan](https://discuss.elastic.co/u/Natarajan)\
**Replies:** 4\
**Last updated:** [March 6, 2020, 8:40am UTC](https://discuss.elastic.co/t/nginx-is-giving-blank-page-on-routing-to-kibana/221695 "2020-03-06T08:40:42Z")

</div>

We have set up Kibana and Nginx. After making the changes in nginx to route to Kibana, we are getting following error and it is giving blank page. Refused to execute inline script because it violates the following Conte…

---

## [Winlogbeatログ送信時に文字化けします。](https://discuss.elastic.co/t/winlogbeat/222396)

<div class="topic-metadata">

**Author:** [@knm](https://discuss.elastic.co/u/knm)\
**Replies:** 0\
**Last updated:** [March 6, 2020, 2:51am UTC](https://discuss.elastic.co/t/winlogbeat/222396 "2020-03-06T02:51:41Z")

</div>

logstashにwinlogbeatのログを送信したところ、下記のような警告が出力されログのエラーメッセージが日本語で表示されません。設定方法などございましたら、ご教授いただけると助かります。 \[2020-03-06T02:38:35,180\]\[WARN \]\[logstash.codecs.line \]\[main\] Received an event that has a different character encod…

---

## [1つのDashboardを複数のSpaceで共有したい](https://discuss.elastic.co/t/1-dashboard-space/222392)

<div class="topic-metadata">

**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\
**Replies:** 2\
**Last updated:** [March 6, 2020, 7:56am UTC](https://discuss.elastic.co/t/1-dashboard-space/222392 "2020-03-06T07:56:53Z")

</div>

お世話になります。 1つのDashboardを複数のSpaceで共有したいのですが、よい方法はありませんでしょうか。 やりたいことイメージ ユーザーA,B,Cが、それぞれSpace A,B,Cを使用している。 1つのDashboardを共通的に、全てのユーザー（＝全てのSpace）で閲覧させたい それ以外のDashboardは、各 ユーザーごとに閲覧させたい 意図としては、１つのDashboardを更新するだけで、全てのS…

---

## [I would like to inquire that there are more than one field value for the entire document](https://discuss.elastic.co/t/i-would-like-to-inquire-that-there-are-more-than-one-field-value-for-the-entire-document/222259)

<div class="topic-metadata">

**Author:** [@Sihwan](https://discuss.elastic.co/u/Sihwan)\
**Replies:** 2\
**Last updated:** [March 6, 2020, 7:53am UTC](https://discuss.elastic.co/t/i-would-like-to-inquire-that-there-are-more-than-one-field-value-for-the-entire-document/222259 "2020-03-06T07:53:51Z")

</div>

If you look at MS-SQL queries select T1.column1 AS 'A' , count(T1.column1) AS 'C' from Table1 T1 group by column1 having count(column1) \> 1 But I would like to have a lookup at the elastic Will it be possible?

---

## [Grok parse error in Kibana](https://discuss.elastic.co/t/grok-parse-error-in-kibana/222391)

<div class="topic-metadata">

**Author:** [@kaj](https://discuss.elastic.co/u/kaj)\
**Replies:** 1\
**Last updated:** [March 6, 2020, 7:40am UTC](https://discuss.elastic.co/t/grok-parse-error-in-kibana/222391 "2020-03-06T07:40:46Z")

</div>

I've been constructing a grok filter for a log that has lines like the one below: 2018-09-19 03:48:46.900-05:00 \[HOST:hostname.domain.com\]\[SERVER:VariableString\]\[PID:35570\]\[THR:3726157568\]\[Kernel XML API\]\[Trace\] XML Com…

---

## [Products sort with pick products from every brand and list accordingly](https://discuss.elastic.co/t/products-sort-with-pick-products-from-every-brand-and-list-accordingly/222410)

<div class="topic-metadata">

**Author:** [@tejas-ambalia](https://discuss.elastic.co/u/tejas-ambalia)\
**Replies:** 1\
**Last updated:** [March 6, 2020, 7:19am UTC](https://discuss.elastic.co/t/products-sort-with-pick-products-from-every-brand-and-list-accordingly/222410 "2020-03-06T07:19:39Z")

</div>

I do have 10 products with different brands. Brand1 contains 3 products Brand2 contains 4 products Brand3 contains 3 products Currently I am getting output as per relevance sorting (given example below) { 'id': 1, …

---

## [I Cant snapshot to s3](https://discuss.elastic.co/t/i-cant-snapshot-to-s3/220336)

<div class="topic-metadata">

**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\
**Replies:** 7\
**Last updated:** [March 6, 2020, 6:17am UTC](https://discuss.elastic.co/t/i-cant-snapshot-to-s3/220336 "2020-03-06T06:17:26Z")

</div>

Hi, I'm getting this error once i ran the curator snaphots to s3 "{"error":{"root\_cause":\[{"type":"multi\_object\_delete\_exception","reason":"One or more objects could not be deleted (Service: null; Status Code: 200; Err…

---

## [Unable to access EC2 ElasticSearch7.5.2 Server using EC2 Public IP on local machine](https://discuss.elastic.co/t/unable-to-access-ec2-elasticsearch7-5-2-server-using-ec2-public-ip-on-local-machine/221854)

<div class="topic-metadata">

**Author:** [@shaheryar.malik](https://discuss.elastic.co/u/shaheryar.malik)\
**Replies:** 18\
**Last updated:** [March 6, 2020, 3:51am UTC](https://discuss.elastic.co/t/unable-to-access-ec2-elasticsearch7-5-2-server-using-ec2-public-ip-on-local-machine/221854 "2020-03-06T03:51:43Z")

</div>

I am using Elasticsearch7.5.2 on EC2 instance and I have modified config/elasticsearch.yml as: network.host: 0.0.0.0 node.master: true node.data: true transport.host: localhost transport.tcp.port: 9300 I can access it …

---

## [Elk highlight synonym problem](https://discuss.elastic.co/t/elk-highlight-synonym-problem/222399)

<div class="topic-metadata">

**Author:** [@Ye\_Zetao](https://discuss.elastic.co/u/Ye_Zetao)\
**Replies:** 0\
**Last updated:** [March 6, 2020, 3:04am UTC](https://discuss.elastic.co/t/elk-highlight-synonym-problem/222399 "2020-03-06T03:04:24Z")

</div>

Hi, I am using elasticsearch 6.x version and I have problem when gettiing highlight result with synonym. PUT /my\_test\_index/ { "settings": { "analysis": { "filter": { "native\_syno…

---

## [How to to change string to object when re-indexing?](https://discuss.elastic.co/t/how-to-to-change-string-to-object-when-re-indexing/222355)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 1\
**Last updated:** [March 6, 2020, 2:54am UTC](https://discuss.elastic.co/t/how-to-to-change-string-to-object-when-re-indexing/222355 "2020-03-06T02:54:05Z")

</div>

Hi, using Elastic 6.4.2 I have a document like so... { "host": "foo.bar.com" } I would like to re-index it to... { "host": { "name": "foo.bar.com" } } I'm guessing I need to use re-index api with…

---

## [Kibana起動時にwarningがでます。(windows zip環境)](https://discuss.elastic.co/t/kibana-warning-windows-zip/221828)

<div class="topic-metadata">

**Author:** [@knm](https://discuss.elastic.co/u/knm)\
**Replies:** 3\
**Last updated:** [March 6, 2020, 2:42am UTC](https://discuss.elastic.co/t/kibana-warning-windows-zip/221828 "2020-03-06T02:42:49Z")

</div>

kibana7.6.0起動時に下記のようなwarningがでます。 (windows環境) log \[07:55:13.383\] \[warning\]\[config\]\[encryptedSavedObjects\]\[plugins\] Generating a random key for xpack.encryptedSavedObjects.encryptionKey. To be able to decrypt encrypt…

---

## [ロールとユーザーを作成方法](https://discuss.elastic.co/t/topic/221980)

<div class="topic-metadata">

**Author:** [@knm](https://discuss.elastic.co/u/knm)\
**Replies:** 2\
**Last updated:** [March 6, 2020, 2:36am UTC](https://discuss.elastic.co/t/topic/221980 "2020-03-06T02:36:45Z")

</div>

Kibanaでロールとユーザーを作成したいのですが、securityの項目が出てきません。(7.6.0) 設定方法などございましたら、ご教授いただけると嬉しいです。

---

## [VisualizeとDashboardの一括置換コピー](https://discuss.elastic.co/t/visualize-dashboard/221995)

<div class="topic-metadata">

**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\
**Replies:** 2\
**Last updated:** [March 6, 2020, 1:33am UTC](https://discuss.elastic.co/t/visualize-dashboard/221995 "2020-03-06T01:33:59Z")

</div>

お世話になります。 あるindex（src\_indexとします）で作成したVisualizationと、それらを配置したDashboardを、 データソースを別のindex（dst\_indexとします）に置き換えて、マルッとコピーしたいのですが、 いい方法がありますでしょうか？ Management --\> Kibana \[Saved Objects\] から、対象の Visualization と Dashboard をエクスポ…

---

## [I can't start Kibana on Ubuntu 16.04](https://discuss.elastic.co/t/i-cant-start-kibana-on-ubuntu-16-04/222180)

<div class="topic-metadata">

**Author:** [@Mohamed\_Koubaa](https://discuss.elastic.co/u/Mohamed_Koubaa)\
**Replies:** 4\
**Last updated:** [March 6, 2020, 1:14am UTC](https://discuss.elastic.co/t/i-cant-start-kibana-on-ubuntu-16-04/222180 "2020-03-06T01:14:48Z")

</div>

I installed the ELK package. Elasticsearch, kibana and logstash. Elasticsear seems to be working fine but i can't seem to be able to start kibana. Here are the results of sudo service kibana status kibana.service - Ki…

---

## [NodeJS client not respecting URL option](https://discuss.elastic.co/t/nodejs-client-not-respecting-url-option/222387)

<div class="topic-metadata">

**Author:** [@rbaindourov](https://discuss.elastic.co/u/rbaindourov)\
**Replies:** 0\
**Last updated:** [March 6, 2020, 12:05am UTC](https://discuss.elastic.co/t/nodejs-client-not-respecting-url-option/222387 "2020-03-06T00:05:07Z")

</div>

So I am instantiating the esclient with const esclient = new require('elasticsearch').Client({ node: "http://10.164.204.92:9200/" , sniffOnStart: false }); But when it decides to run, it's totally ignoring the setting …

---

## [Grouping similar results in aggs search](https://discuss.elastic.co/t/grouping-similar-results-in-aggs-search/222385)

<div class="topic-metadata">

**Author:** [@puks1978](https://discuss.elastic.co/u/puks1978)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 11:53pm UTC](https://discuss.elastic.co/t/grouping-similar-results-in-aggs-search/222385 "2020-03-05T23:53:45Z")

</div>

Hi community, I am hoping someone can help. I have ES 7.5.2 running and indexed a whole bunch of documents. When a user performs a search I store this in another index so I can later recall the previous searches. This i…

---

## [Parsing CSV file with multiple key values in one line](https://discuss.elastic.co/t/parsing-csv-file-with-multiple-key-values-in-one-line/221959)

<div class="topic-metadata">

**Author:** [@david4](https://discuss.elastic.co/u/david4)\
**Replies:** 3\
**Last updated:** [March 5, 2020, 11:07pm UTC](https://discuss.elastic.co/t/parsing-csv-file-with-multiple-key-values-in-one-line/221959 "2020-03-05T23:07:38Z")

</div>

Hello, I'm new to the ELK stack and have been struggling to solve one problem. I'm trying to write a Logstash configuration to parse a log file of csv format as follow: "time\_stamp", 2020-02-28 16:35:16.048, "name", "D…

---

## [SunOS](https://discuss.elastic.co/t/sunos/221428)

<div class="topic-metadata">

**Author:** [@Felipe0792](https://discuss.elastic.co/u/Felipe0792)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 10:41pm UTC](https://discuss.elastic.co/t/sunos/221428 "2020-03-05T22:41:50Z")

</div>

I would like to know if there are any version for SunOS 5.11 11.3 sun4v sparc sun4v?

---

## [Resolve Import Errors API Not Working](https://discuss.elastic.co/t/resolve-import-errors-api-not-working/219573)

<div class="topic-metadata">

**Author:** [@rathna\_subramanian](https://discuss.elastic.co/u/rathna_subramanian)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 10:26pm UTC](https://discuss.elastic.co/t/resolve-import-errors-api-not-working/219573 "2020-03-05T22:26:36Z")

</div>

I am trying to overwrite kibana advanced setting config using the following curl command. curl -X POST "localhost:5601/api/saved\_objects/\_resolve\_import\_errors" -H "kbn-xsrf: true" --form file=@configs.ndjson --form ret…

---

## [Failed to load data sources in Kibana](https://discuss.elastic.co/t/failed-to-load-data-sources-in-kibana/218816)

<div class="topic-metadata">

**Author:** [@ladeesh](https://discuss.elastic.co/u/ladeesh)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 10:17pm UTC](https://discuss.elastic.co/t/failed-to-load-data-sources-in-kibana/218816 "2020-03-05T22:17:56Z")

</div>

Hi Team, My ELK stack running with below details 3 ES nodes 1 Logstash node 1 Kibana node Version using : 7.5.1 I am getting the error "failed to load data sources" while loading the logs/metrics in Kibana UI. Err…

---

## [Remove old data from database](https://discuss.elastic.co/t/remove-old-data-from-database/222374)

<div class="topic-metadata">

**Author:** [@coi6644](https://discuss.elastic.co/u/coi6644)\
**Replies:** 7\
**Last updated:** [March 5, 2020, 9:57pm UTC](https://discuss.elastic.co/t/remove-old-data-from-database/222374 "2020-03-05T21:57:35Z")

</div>

Hi, How can I remove data older from 12 months from database? I have a ELK+Elastiflow to collect logs from some equipments, but I need to do a cleanup of records older than 12 monts.

---

## [How many scripts can be stored in elasticsearch?](https://discuss.elastic.co/t/how-many-scripts-can-be-stored-in-elasticsearch/222226)

<div class="topic-metadata">

**Author:** [@smogami](https://discuss.elastic.co/u/smogami)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 7:30pm UTC](https://discuss.elastic.co/t/how-many-scripts-can-be-stored-in-elasticsearch/222226 "2020-03-05T19:30:15Z")

</div>

I would like to know how many scripts can be stored in single elasticsearch cluster. Is it limitless, or is there any hard limit ? I found the limit of script size, but could not find the limit of number of scripts. H…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1587)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1589)
