# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1601

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1602

---

## [Unable to split message received on TCP port into individual records](https://discuss.elastic.co/t/unable-to-split-message-received-on-tcp-port-into-individual-records/218836)

<div class="topic-metadata">

**Author:** [@kunal.1709](https://discuss.elastic.co/u/kunal.1709)\
**Replies:** 3\
**Last updated:** [February 28, 2020, 4:25pm UTC](https://discuss.elastic.co/t/unable-to-split-message-received-on-tcp-port-into-individual-records/218836 "2020-02-28T16:25:51Z")

</div>

Hi everyone, I'm sending some network logs from RSA Netwitness SIEM to a logstash server over TCP on port 5515. Currently logstash is not able to separate the incoming data into separate records, its considering the en…

---

## [Elasticsearch cluster - 7.6 Error start](https://discuss.elastic.co/t/elasticsearch-cluster-7-6-error-start/221137)

<div class="topic-metadata">

**Author:** [@bruno\_aleixo](https://discuss.elastic.co/u/bruno_aleixo)\
**Replies:** 4\
**Last updated:** [February 28, 2020, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-7-6-error-start/221137 "2020-02-28T15:31:24Z")

</div>

Hi, first sorry my english not be good, but i have a doubt, i am creating a cluster of elasticsearch,where I have 3 nodes, but there is an error in the climb Conf Master node: cluster.name: elk\_lab node.master: true …

---

## [Custom Kibana Plugin not working in Kibana 7.5.x](https://discuss.elastic.co/t/custom-kibana-plugin-not-working-in-kibana-7-5-x/221412)

<div class="topic-metadata">

**Author:** [@PraveenKumarM](https://discuss.elastic.co/u/PraveenKumarM)\
**Replies:** 1\
**Last updated:** [February 28, 2020, 3:29pm UTC](https://discuss.elastic.co/t/custom-kibana-plugin-not-working-in-kibana-7-5-x/221412 "2020-02-28T15:29:58Z")

</div>

Hi, Greetings. I am new to ELK stack and I am trying to create a Kibana dashboard with custom kibana plugin. I have tried to do the same in the below Kibana version and Kibana has not started up. Can you please help m…

---

## [Loosing zero in a log line](https://discuss.elastic.co/t/loosing-zero-in-a-log-line/221262)

<div class="topic-metadata">

**Author:** [@AdamJade](https://discuss.elastic.co/u/AdamJade)\
**Replies:** 2\
**Last updated:** [February 28, 2020, 3:21pm UTC](https://discuss.elastic.co/t/loosing-zero-in-a-log-line/221262 "2020-02-28T15:21:42Z")

</div>

Hi there Here is my log line \[2020-02-11 09:55:39.595\] \[Value1\] \[Value2\] \[Value3\] \[Value4\] \[Value5\] \[Value6\] \[Value7\] # !! Détail code retour: 150 my grok grok { match =\> { "message" =\> "\[%{TIMESTAMP\_ISO8601:logDat…

---

## [User dashboards-only-read cannot make pdf reporting](https://discuss.elastic.co/t/user-dashboards-only-read-cannot-make-pdf-reporting/221439)

<div class="topic-metadata">

**Author:** [@JoseLuisEzquerro](https://discuss.elastic.co/u/JoseLuisEzquerro)\
**Replies:** 1\
**Last updated:** [February 28, 2020, 3:15pm UTC](https://discuss.elastic.co/t/user-dashboards-only-read-cannot-make-pdf-reporting/221439 "2020-02-28T15:15:26Z")

</div>

I'm using Kibana 6.8.2 and I have users with only read permission for dashboards, but the "shared" option to create pdf reporting is not showing for those users. Is there any way to enable this option for these kind of u…

---

## [Unable to install logstash=1:7.5.2-1](https://discuss.elastic.co/t/unable-to-install-logstash-1-7-5-2-1/221454)

<div class="topic-metadata">

**Author:** [@Chandrashekar467](https://discuss.elastic.co/u/Chandrashekar467)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 3:14pm UTC](https://discuss.elastic.co/t/unable-to-install-logstash-1-7-5-2-1/221454 "2020-02-28T15:14:12Z")

</div>

Hi all, I am unable to install logstash=1:7.5.2-1,getting below error. Installing new version of config file /etc/logstash/logstash.yml ... /etc/logstash/startup.options is not a file path To manually specify a start…

---

## [How to enable the template tab in UI?](https://discuss.elastic.co/t/how-to-enable-the-template-tab-in-ui/221452)

<div class="topic-metadata">

**Author:** [@Jezal\_dan\_Luthar](https://discuss.elastic.co/u/Jezal_dan_Luthar)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 3:08pm UTC](https://discuss.elastic.co/t/how-to-enable-the-template-tab-in-ui/221452 "2020-02-28T15:08:56Z")

</div>

I can see indexes and other pages but do not see the Template tab which i saw on some screenshots under Management -\> Index management. How do i enable this so i can edit my templates? Also what's the command to get on…

---

## [Matching the middle or the end part of a word elasticsearch](https://discuss.elastic.co/t/matching-the-middle-or-the-end-part-of-a-word-elasticsearch/221444)

<div class="topic-metadata">

**Author:** [@Yassine\_Nifa](https://discuss.elastic.co/u/Yassine_Nifa)\
**Replies:** 1\
**Last updated:** [February 28, 2020, 2:49pm UTC](https://discuss.elastic.co/t/matching-the-middle-or-the-end-part-of-a-word-elasticsearch/221444 "2020-02-28T14:49:20Z")

</div>

Hello I am new to elasticsearch, I use it to store my dataset. I created a IHM search engine where I can type a query and get the response I would like to know if there is a way to match the middle or the end part of …

---

## [Best way to send a log from filebeat to his respective logstash conf](https://discuss.elastic.co/t/best-way-to-send-a-log-from-filebeat-to-his-respective-logstash-conf/221449)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 2:37pm UTC](https://discuss.elastic.co/t/best-way-to-send-a-log-from-filebeat-to-his-respective-logstash-conf/221449 "2020-02-28T14:37:18Z")

</div>

Filebeat consume many logs with different type of data, ex: -cpu.log -filesystem.log -memory.log -uptime.log Then this data is sended to logstash, and I have multiple logstash pipelines configurations, what will be …

---

## [How to enrich documents with geo data](https://discuss.elastic.co/t/how-to-enrich-documents-with-geo-data/221276)

<div class="topic-metadata">

**Author:** [@wifi](https://discuss.elastic.co/u/wifi)\
**Replies:** 4\
**Last updated:** [February 28, 2020, 2:15pm UTC](https://discuss.elastic.co/t/how-to-enrich-documents-with-geo-data/221276 "2020-02-28T14:15:28Z")

</div>

I have lots of documents that contain zip-codes. I want to visualize the data on a map so i need to add a geo location. To achieve this i created an index that contains coordinates for every zip-code. How can i enrich t…

---

## [Use docker-container or not use it](https://discuss.elastic.co/t/use-docker-container-or-not-use-it/221305)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 1\
**Last updated:** [February 28, 2020, 1:51pm UTC](https://discuss.elastic.co/t/use-docker-container-or-not-use-it/221305 "2020-02-28T13:51:08Z")

</div>

I have few high end servers 192gig ram, multicore cpu, 20gig network bandwidth and few SSD in them. should I use it as bare metal system as elasticsearch data-node or use container? plan was to use three new system ha…

---

## [De-Duplication Query](https://discuss.elastic.co/t/de-duplication-query/221441)

<div class="topic-metadata">

**Author:** [@mrbarret](https://discuss.elastic.co/u/mrbarret)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 1:47pm UTC](https://discuss.elastic.co/t/de-duplication-query/221441 "2020-02-28T13:47:59Z")

</div>

I have a collection of documents where each document looks like { "\_id": ... , "Author": ..., "Content": ...., "DateTime": ... } I would like to issue one query to the collection so that I get in response the olde…

---

## [Elasticsearch Prometheus exporter for Openshift](https://discuss.elastic.co/t/elasticsearch-prometheus-exporter-for-openshift/221440)

<div class="topic-metadata">

**Author:** [@Tomas\_Bartek](https://discuss.elastic.co/u/Tomas_Bartek)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 1:46pm UTC](https://discuss.elastic.co/t/elasticsearch-prometheus-exporter-for-openshift/221440 "2020-02-28T13:46:53Z")

</div>

Hi, I wonder why is Openshift for the Elasticsearch using/recommending plugin based Prometheus exporter over proxy (standalone) exporter from the official Prometheus exporter list. Plugin-based exporter: Proxy expo…

---

## [APM metrics](https://discuss.elastic.co/t/apm-metrics/220039)

<div class="topic-metadata">

**Author:** [@AndresL](https://discuss.elastic.co/u/AndresL)\
**Replies:** 3\
**Last updated:** [February 28, 2020, 1:34pm UTC](https://discuss.elastic.co/t/apm-metrics/220039 "2020-02-28T13:34:20Z")

</div>

Hi, i have hosts hosting multiple applications and i want to setup APM on some applications. But i want to collect metrics from the server and i dont want to collect metrics from each agent/application running. any id…

---

## [Elasticsearch Ranger Kerbeos](https://discuss.elastic.co/t/elasticsearch-ranger-kerbeos/221429)

<div class="topic-metadata">

**Author:** [@hsl](https://discuss.elastic.co/u/hsl)\
**Replies:** 1\
**Last updated:** [February 28, 2020, 12:59pm UTC](https://discuss.elastic.co/t/elasticsearch-ranger-kerbeos/221429 "2020-02-28T12:59:10Z")

</div>

I want to use Ranger to control the access to elasticsearch, so I intall elasticsearch 7.1.1, and open kerberos for es. after install elasticsearch-ranger plugin, it can Synchronize policy from ranger, and kerberos Certi…

---

## [Average number of documents per buckets](https://discuss.elastic.co/t/average-number-of-documents-per-buckets/221323)

<div class="topic-metadata">

**Author:** [@suite800](https://discuss.elastic.co/u/suite800)\
**Replies:** 1\
**Last updated:** [February 28, 2020, 12:48pm UTC](https://discuss.elastic.co/t/average-number-of-documents-per-buckets/221323 "2020-02-28T12:48:56Z")

</div>

Suppose I have a mapping { "properties": { "jobName": { "type": "keyword" }, "jobNumber": { "type": "long" }, ... } What I am trying to do is to get metri…

---

## [How can I set X-axis time domain with 24hours?](https://discuss.elastic.co/t/how-can-i-set-x-axis-time-domain-with-24hours/221383)

<div class="topic-metadata">

**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\
**Replies:** 4\
**Last updated:** [February 28, 2020, 12:40pm UTC](https://discuss.elastic.co/t/how-can-i-set-x-axis-time-domain-with-24hours/221383 "2020-02-28T12:40:21Z")

</div>

I want to make my vega-light graph x-axis starts from 0:00 to 24:00 below. I was trying to add a code like this, but it doesn't work successfully. Is there any tips? "x": { . . . "scale":{ …

---

## [Edge-ngram and irrelevant scoring](https://discuss.elastic.co/t/edge-ngram-and-irrelevant-scoring/221397)

<div class="topic-metadata">

**Author:** [@slim-souissi](https://discuss.elastic.co/u/slim-souissi)\
**Replies:** 1\
**Last updated:** [February 28, 2020, 12:38pm UTC](https://discuss.elastic.co/t/edge-ngram-and-irrelevant-scoring/221397 "2020-02-28T12:38:25Z")

</div>

Hello , I'm applying edge-ngram as index toxenizer . My problem is that when a term matches , it matches so many times on the same field . As a consequence , the score become too high and irrelevant. Here is an examp…

---

## [Logstash dateparse failure error](https://discuss.elastic.co/t/logstash-dateparse-failure-error/221258)

<div class="topic-metadata">

**Author:** [@BIs1](https://discuss.elastic.co/u/BIs1)\
**Replies:** 3\
**Last updated:** [February 28, 2020, 12:35pm UTC](https://discuss.elastic.co/t/logstash-dateparse-failure-error/221258 "2020-02-28T12:35:14Z")

</div>

Hi, I am trying to use grok filter to change some indexes and format. Also trying to change the date format but comes with error "dateparsefailure". Please help me identify the mistake I made in following grok pattern. …

---

## [Index-pattern created via Kibana API not operational in UI](https://discuss.elastic.co/t/index-pattern-created-via-kibana-api-not-operational-in-ui/221418)

<div class="topic-metadata">

**Author:** [@serhii.zaidlin](https://discuss.elastic.co/u/serhii.zaidlin)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 11:37am UTC](https://discuss.elastic.co/t/index-pattern-created-via-kibana-api-not-operational-in-ui/221418 "2020-02-28T11:37:31Z")

</div>

Hi, I'm trying to create index-pattern via Kibana API. Everything looks fine - I make POST request, receive 200 and I can see this object in .kibana index. When I'm trying to access this pattern via Kibana UI (either I…

---

## [Cannot regenerate the the license](https://discuss.elastic.co/t/cannot-regenerate-the-the-license/221417)

<div class="topic-metadata">

**Author:** [@Vivek\_Vimal](https://discuss.elastic.co/u/Vivek_Vimal)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 11:36am UTC](https://discuss.elastic.co/t/cannot-regenerate-the-the-license/221417 "2020-02-28T11:36:23Z")

</div>

\[2020-02-28T15:34:48,940\]\[ERROR\]\[o.e.x.s.a.f.SecurityActionFilter\] \[O9MrWj0\] blocking \[cluster:monitor/stats\] operation due to expired license. Cluster health, cluster stats and indices stats operations are blocked on …

---

## [Please don't deprecate sparse vector fields](https://discuss.elastic.co/t/please-dont-deprecate-sparse-vector-fields/219063)

<div class="topic-metadata">

**Author:** [@George\_Kinsman](https://discuss.elastic.co/u/George_Kinsman)\
**Replies:** 1\
**Last updated:** [February 13, 2020, 3:29pm UTC](https://discuss.elastic.co/t/please-dont-deprecate-sparse-vector-fields/219063 "2020-02-13T15:29:55Z")

</div>

Hi there! I noticed that support for sparse vectors is being deprecated due to lack of interest and use cases: https://github.com/elastic/elasticsearch/pull/48781. This is a great article that discusses the trade off b…

---

## [Metric older than 10 minutes](https://discuss.elastic.co/t/metric-older-than-10-minutes/220472)

<div class="topic-metadata">

**Author:** [@Reshad](https://discuss.elastic.co/u/Reshad)\
**Replies:** 7\
**Last updated:** [February 28, 2020, 11:31am UTC](https://discuss.elastic.co/t/metric-older-than-10-minutes/220472 "2020-02-28T11:31:15Z")

</div>

Hey, I am setting up a monitoring system for my infra and using metricbeat from my servers (3 for now). What I want is a visulization that shows me a list of hosts that have not checked in to ES in the past 10 minutes. …

---

## [Regarding Bulk Queue Size](https://discuss.elastic.co/t/regarding-bulk-queue-size/221413)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 11:26am UTC](https://discuss.elastic.co/t/regarding-bulk-queue-size/221413 "2020-02-28T11:26:02Z")

</div>

Hi, Can I ask, is the heap consumption of the bulk queue simply a factor of queue length multiplied by bulk payload size? I ask because I've seen users report very large bulk queue sizes and am wondering how that impact…

---

## [Pushing partly JSON log to ES with filebeat](https://discuss.elastic.co/t/pushing-partly-json-log-to-es-with-filebeat/221208)

<div class="topic-metadata">

**Author:** [@tuudik](https://discuss.elastic.co/u/tuudik)\
**Replies:** 2\
**Last updated:** [February 28, 2020, 10:58am UTC](https://discuss.elastic.co/t/pushing-partly-json-log-to-es-with-filebeat/221208 "2020-02-28T10:58:45Z")

</div>

Hi! Could someone give me some guidance, how to push audit.log which looks like below to ES? In Elasticsearch I would like to have timestamp which is the first one on the line and then information from JSON part: event…

---

## [Extracting fields from a linked xml file](https://discuss.elastic.co/t/extracting-fields-from-a-linked-xml-file/221402)

<div class="topic-metadata">

**Author:** [@djb000m](https://discuss.elastic.co/u/djb000m)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 10:33am UTC](https://discuss.elastic.co/t/extracting-fields-from-a-linked-xml-file/221402 "2020-02-28T10:33:48Z")

</div>

Hi, I am indexing xml files using Logstash, which is working fine. Does anyone know if it is possible to grab values from an xml file linked to from within the xml file being processed by Logstash? Specifically, my da…

---

## [ElasticSearch Cutodd Limit](https://discuss.elastic.co/t/elasticsearch-cutodd-limit/221390)

<div class="topic-metadata">

**Author:** [@Aditya2](https://discuss.elastic.co/u/Aditya2)\
**Replies:** 1\
**Last updated:** [February 28, 2020, 10:05am UTC](https://discuss.elastic.co/t/elasticsearch-cutodd-limit/221390 "2020-02-28T10:05:09Z")

</div>

I am trying to push data from a database to ElasticSearch. The records is in Json format and each records is of about 300 lines. I am trying to push about 1000 records. The ElasticSearch shows only 9-10 records. Is there…

---

## [Elasticsearch default credentials](https://discuss.elastic.co/t/elasticsearch-default-credentials/221384)

<div class="topic-metadata">

**Author:** [@Amine\_Maalfi](https://discuss.elastic.co/u/Amine_Maalfi)\
**Replies:** 2\
**Last updated:** [February 28, 2020, 9:55am UTC](https://discuss.elastic.co/t/elasticsearch-default-credentials/221384 "2020-02-28T09:55:10Z")

</div>

Hello guys, i've found that the default credentials for ES are elastic:changeme but it's not working for me! am i missing something? the error : { "error": { "root\_cause": \[ { "t…

---

## [Suppport to display correct number format for non US integer and or currency](https://discuss.elastic.co/t/suppport-to-display-correct-number-format-for-non-us-integer-and-or-currency/220807)

<div class="topic-metadata">

**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\
**Replies:** 4\
**Last updated:** [February 28, 2020, 9:51am UTC](https://discuss.elastic.co/t/suppport-to-display-correct-number-format-for-non-us-integer-and-or-currency/220807 "2020-02-28T09:51:23Z")

</div>

Hi there, I still messing arround with the correct number format for non US nummeric and or currency fields like: 0,01 1,00 10,00 100,00 1.000,00 10.000,00 100.000,00 1.000.000,00 10.000.000,00 are they still …

---

## [How to find percentage using doc\_count in elastic query](https://discuss.elastic.co/t/how-to-find-percentage-using-doc-count-in-elastic-query/221394)

<div class="topic-metadata">

**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 9:17am UTC](https://discuss.elastic.co/t/how-to-find-percentage-using-doc-count-in-elastic-query/221394 "2020-02-28T09:17:17Z")

</div>

I am having an elastic result like below. { "key" : "2020-02-18T09:10:14.453Z-2020-02-26T09:10:14.453Z", "from" : 1.582017014453E12, "from\_as\_string" : "2020-02-18T09:10:14.453Z", "to" : 1.582708214453E12, "to\_as\_s…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1600)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1602)
