# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1655 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1656 --- ## [Filter Tabbing and Auto-Completion in 7.x](https://discuss.elastic.co/t/filter-tabbing-and-auto-completion-in-7-x/217238)
**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 9:11pm UTC](https://discuss.elastic.co/t/filter-tabbing-and-auto-completion-in-7-x/217238 "2020-01-30T21:11:44Z")
In Kibana 6.x, when you add a filter, you would automatically switch from field name, operator, and values as soon as you entered a value. In 7.x, I have to hit tab 2 or 3 times to go from field name to operator, or from… --- ## [Visualization with images](https://discuss.elastic.co/t/visualization-with-images/217272)
**Author:** [@mrotmann](https://discuss.elastic.co/u/mrotmann)\ **Replies:** 4\ **Last updated:** [January 30, 2020, 9:06pm UTC](https://discuss.elastic.co/t/visualization-with-images/217272 "2020-01-30T21:06:40Z")
Hello, I want to build simple visualizations that include some sort of images. For example, I have q data from led's going on or off and i want to have images of led's in the respective states for each item showing if i… --- ## [Disabling certain views for users](https://discuss.elastic.co/t/disabling-certain-views-for-users/217167)
**Author:** [@Ali\_Muhammad](https://discuss.elastic.co/u/Ali_Muhammad)\ **Replies:** 6\ **Last updated:** [January 30, 2020, 8:57pm UTC](https://discuss.elastic.co/t/disabling-certain-views-for-users/217167 "2020-01-30T20:57:35Z")
Hi everyone. So i have been trying to disable certain parts of kibana for certain user. I want the normal users to have only the dashboard view and one plugin view enabled, like canvas, ML or custom plugin. Is there a w… --- ## [Lumberjack fails afeter updating to 7.5.2](https://discuss.elastic.co/t/lumberjack-fails-afeter-updating-to-7-5-2/217228)
**Author:** [@Joao\_Neves](https://discuss.elastic.co/u/Joao_Neves)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 8:46pm UTC](https://discuss.elastic.co/t/lumberjack-fails-afeter-updating-to-7-5-2/217228 "2020-01-30T20:46:21Z")
Hello, After updating ELK stack from 7.4.2 to 7.5.2 lumberjack communication stopped working appropriately. Other kind of communications still works (i.e syslog). A simplified overview of my architecture: subsidiary\_be… --- ## [Persisted queue checkpoint and acknowledged inputs](https://discuss.elastic.co/t/persisted-queue-checkpoint-and-acknowledged-inputs/217219)
**Author:** [@franck.lefebure](https://discuss.elastic.co/u/franck.lefebure)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 3:10pm UTC](https://discuss.elastic.co/t/persisted-queue-checkpoint-and-acknowledged-inputs/217219 "2020-01-30T15:10:38Z")
Hi, I recently had to dig in our stack to identify some missing events, and one of the candidate explanations sits in this logstash doc section : By default, PQ will force write data to disk at every 1024 received inp… --- ## [Use azure fileshare as data storage for Multiple ES Clusters running on K8s](https://discuss.elastic.co/t/use-azure-fileshare-as-data-storage-for-multiple-es-clusters-running-on-k8s/217155)
**Author:** [@biswarup1290dass](https://discuss.elastic.co/u/biswarup1290dass)\ **Replies:** 5\ **Last updated:** [January 30, 2020, 8:24pm UTC](https://discuss.elastic.co/t/use-azure-fileshare-as-data-storage-for-multiple-es-clusters-running-on-k8s/217155 "2020-01-30T20:24:20Z")
Is it possible to use an Azure File Share(similar to NFS) for data storage of multiple ES Clusters running on K8s? So that both the clusters can write/read from a common location. Can think of it as a cross-geo HA soluti… --- ## [Encryption at rest support for Platinum subscriptions](https://discuss.elastic.co/t/encryption-at-rest-support-for-platinum-subscriptions/217268)
**Author:** [@mstephenson](https://discuss.elastic.co/u/mstephenson)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 8:19pm UTC](https://discuss.elastic.co/t/encryption-at-rest-support-for-platinum-subscriptions/217268 "2020-01-30T20:19:27Z")
As I understand it encryption at rest for Elasticsearch is done at the OS level. Does the Platinum subscription “Encryption at rest support” include running Elasticsearch on Windows Server 2016 using either Encrypting F… --- ## [Date format representation for "2020-01-29T21:40:00.000+0000" to assign to @timestamp](https://discuss.elastic.co/t/date-format-representation-for-2020-01-29t2100-000-0000-to-assign-to-timestamp/217261)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 8:15pm UTC](https://discuss.elastic.co/t/date-format-representation-for-2020-01-29t2100-000-0000-to-assign-to-timestamp/217261 "2020-01-30T20:15:02Z")
HI, I need to assign the string in format "2020-01-29T21:40:00.000+0000" to @timestamp. Used date filter . How is the format represented exactly ? date { match =\> \[ "\[sampleDate\]", "ISO8601"\] #match =\> \[ "\[sampl… --- ## [Can we link documents (parent) to the documents (child)?](https://discuss.elastic.co/t/can-we-link-documents-parent-to-the-documents-child/217089)
**Author:** [@deepak643](https://discuss.elastic.co/u/deepak643)\ **Replies:** 5\ **Last updated:** [January 30, 2020, 8:01pm UTC](https://discuss.elastic.co/t/can-we-link-documents-parent-to-the-documents-child/217089 "2020-01-30T20:01:44Z")
I would like to know if two documents can be linked to get the search benefits? For example: I have a child document which is formed from parent document. I do not want to copy the complete document metadata to child s… --- ## [Filter data based on script result](https://discuss.elastic.co/t/filter-data-based-on-script-result/216277)
**Author:** [@dknecht](https://discuss.elastic.co/u/dknecht)\ **Replies:** 4\ **Last updated:** [January 30, 2020, 7:35pm UTC](https://discuss.elastic.co/t/filter-data-based-on-script-result/216277 "2020-01-30T19:35:10Z")
Hi The script shown in the "JSON Input" field below computes bandwidth utilization in percent of the interface's nominal bandwidth: I'd like to display only those interfaces where the computed result of that script i… --- ## [Percolate performance in ES 2.x vs 6.x/7.x](https://discuss.elastic.co/t/percolate-performance-in-es-2-x-vs-6-x-7-x/217262)
**Author:** [@Nikolay\_Klimchuk](https://discuss.elastic.co/u/Nikolay_Klimchuk)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 7:07pm UTC](https://discuss.elastic.co/t/percolate-performance-in-es-2-x-vs-6-x-7-x/217262 "2020-01-30T19:07:39Z")
We're implementing use case that relies on percolate and found that on same EC2 instance type ES 2.x \_percolate latency is 10-30 times better than percolate in ES 6.x give us! Even worse with 7.x.. Is there any chance t… --- ## [Is Kibana Custom Plugin is good strategy?](https://discuss.elastic.co/t/is-kibana-custom-plugin-is-good-strategy/217139)
**Author:** [@stongia](https://discuss.elastic.co/u/stongia)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 6:59pm UTC](https://discuss.elastic.co/t/is-kibana-custom-plugin-is-good-strategy/217139 "2020-01-30T18:59:57Z")
As Kibana on the Known Plugin Page suggesting to not provide backward compatibility for the plugins which are developed with the Kibana. There are changes coming in minor versions as well, where developers are required t… --- ## [ECE on RHEL 8.x](https://discuss.elastic.co/t/ece-on-rhel-8-x/217174)
**Author:** [@caiossouza](https://discuss.elastic.co/u/caiossouza)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 6:55pm UTC](https://discuss.elastic.co/t/ece-on-rhel-8-x/217174 "2020-01-30T18:55:03Z")
Hi, I would like to confirm if we can run ECE on RHEL 8.x servers. Reading the Support Matrix (https://www.elastic.co/pt/support/matrix#matrix\_os) we can see RHEL 8.X is compatible with some recent components, like be… --- ## [How ot deal with empty field in xml parser?](https://discuss.elastic.co/t/how-ot-deal-with-empty-field-in-xml-parser/217250)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 6:54pm UTC](https://discuss.elastic.co/t/how-ot-deal-with-empty-field-in-xml-parser/217250 "2020-01-30T18:54:18Z")
i m sorry if this is repeat question. I m struggling with xml having empty values. I m using logstash 7.5.1 XML filter. Here is my config. ##Input section input { file { path =\> "/tmp/test.xml"… --- ## [Using Kibana to visualise last connection status by process](https://discuss.elastic.co/t/using-kibana-to-visualise-last-connection-status-by-process/217186)
**Author:** [@Eoghan\_McLaughlin](https://discuss.elastic.co/u/Eoghan_McLaughlin)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 6:52pm UTC](https://discuss.elastic.co/t/using-kibana-to-visualise-last-connection-status-by-process/217186 "2020-01-30T18:52:01Z")
Hi All, I am attempting to visualise the current connection status of processes within my system. When each process starts/stops, it posts and update to elasticsearch which includes a field "connected" (boolean) and "n… --- ## [Scripted field of type Date throwing an error when filter is added to it in line plot](https://discuss.elastic.co/t/scripted-field-of-type-date-throwing-an-error-when-filter-is-added-to-it-in-line-plot/217092)
**Author:** [@meghana\_s](https://discuss.elastic.co/u/meghana_s)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 6:32pm UTC](https://discuss.elastic.co/t/scripted-field-of-type-date-throwing-an-error-when-filter-is-added-to-it-in-line-plot/217092 "2020-01-30T18:32:52Z")
I have a field loaded by index as startdate which is of the type" string". I created a scripted field startdate\_date to store the startdate as a "date" type; Index field: startdate- type String Scripted field: startda… --- ## [\[Heartbeat\] Checking multiple http response codes](https://discuss.elastic.co/t/heartbeat-checking-multiple-http-response-codes/214959)
**Author:** [@seblg](https://discuss.elastic.co/u/seblg)\ **Replies:** 5\ **Last updated:** [January 30, 2020, 6:20pm UTC](https://discuss.elastic.co/t/heartbeat-checking-multiple-http-response-codes/214959 "2020-01-30T18:20:13Z")
Hi, We've started using heartbeat agents (6.8.2) and uptime monitoring for monitoring api endpoints. We'd like to attribute all http reponse codes which are not 500 or 503 as being "up", going through documentation thi… --- ## [Aggregate filter plugin +](https://discuss.elastic.co/t/aggregate-filter-plugin/217015)
**Author:** [@binygreenberg](https://discuss.elastic.co/u/binygreenberg)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 5:55pm UTC](https://discuss.elastic.co/t/aggregate-filter-plugin/217015 "2020-01-30T17:55:58Z")
I'm interested in using the logstash aggregate filter plugin but I was wondering how this would work in my case where I have multiple logstash nodes. also do i need to set - filter workers to 1 ( -w 1 flag) - if I don'… --- ## [Can I make an admin account that can temporarily block all other users accessing Kibana?](https://discuss.elastic.co/t/can-i-make-an-admin-account-that-can-temporarily-block-all-other-users-accessing-kibana/216838)
**Author:** [@EdH](https://discuss.elastic.co/u/EdH)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 5:40pm UTC](https://discuss.elastic.co/t/can-i-make-an-admin-account-that-can-temporarily-block-all-other-users-accessing-kibana/216838 "2020-01-30T17:40:57Z")
Hi, I have encountered a problem where lots of people are trying to access Kibana at once and it causes it to run slowly/struggle. Lots of these connections are non critical ones but sometimes it is critical that the ad… --- ## [java.lang.NoSuchMethodError: org.elasticsearch.search.SearchHits.getTotalHits()](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-org-elasticsearch-search-searchhits-gettotalhits/215484)
**Author:** [@SachaMaiornikoff](https://discuss.elastic.co/u/SachaMaiornikoff)\ **Replies:** 4\ **Last updated:** [January 30, 2020, 5:39pm UTC](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-org-elasticsearch-search-searchhits-gettotalhits/215484 "2020-01-30T17:39:18Z")
Hello guys, I know there is a topic with the same issue but the answer doesn't solve my issue. I got a really basic spring boot 2.2.0 app which is supposed to connect to a ES 7.2.0. but when i try to search anything i… --- ## [Index cleanup](https://discuss.elastic.co/t/index-cleanup/215476)
**Author:** [@andymcinnes](https://discuss.elastic.co/u/andymcinnes)\ **Replies:** 19\ **Last updated:** [January 30, 2020, 5:28pm UTC](https://discuss.elastic.co/t/index-cleanup/215476 "2020-01-30T17:28:55Z")
Hi, I've got Serilog pumping logs in to elastic search from various applications, using the Serilog ElasticSearch Sink. I use a daily indexing pattern per environment and serilog manages the initial creation of these in… --- ## [Ruby or groak for string menuplation](https://discuss.elastic.co/t/ruby-or-groak-for-string-menuplation/217236)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 4\ **Last updated:** [January 30, 2020, 4:49pm UTC](https://discuss.elastic.co/t/ruby-or-groak-for-string-menuplation/217236 "2020-01-30T16:49:44Z")
I have a two different type of string example1\_string = /a/b/c/./d/e ( if found . then I just want to remove only './' ) example2\_sting = /a/b/c/../d/e ( if found .. anywhere in string then I want to just remove ' c… --- ## [Forked Pipelines](https://discuss.elastic.co/t/forked-pipelines/217151)
**Author:** [@BeMoore](https://discuss.elastic.co/u/BeMoore)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 4:37pm UTC](https://discuss.elastic.co/t/forked-pipelines/217151 "2020-01-30T16:37:24Z")
Hi all, I'm working on some forked pipelines and im getting a little confused on how this should be working... and this is sort of a continuation from this thread Single data source split to different indexes So the ex… --- ## [Logstash to filter and drop all strings mentioned in exception.txt file](https://discuss.elastic.co/t/logstash-to-filter-and-drop-all-strings-mentioned-in-exception-txt-file/217107)
**Author:** [@Anirban\_Banerjee](https://discuss.elastic.co/u/Anirban_Banerjee)\ **Replies:** 4\ **Last updated:** [January 30, 2020, 4:33pm UTC](https://discuss.elastic.co/t/logstash-to-filter-and-drop-all-strings-mentioned-in-exception-txt-file/217107 "2020-01-30T16:33:56Z")
Hello We are trying to see the feasibility of using logstash and icinga (check\_logfiles plugins) in tandem to monitor postgres logs. The idea is we have a file called ignore\_alert.txt. It has 100s of strings which the … --- ## [Grok pattern matching](https://discuss.elastic.co/t/grok-pattern-matching/217078)
**Author:** [@littlejob1](https://discuss.elastic.co/u/littlejob1)\ **Replies:** 3\ **Last updated:** [January 30, 2020, 4:21pm UTC](https://discuss.elastic.co/t/grok-pattern-matching/217078 "2020-01-30T16:21:15Z")
Trying to figure out the most effective way to parse the following message being received via a syslog input. \<134\>1 2020-01-29T21:18:07Z 10.10.10.10 PulseSecure: - - - 2020-01-29 21:18:07 - ssl - \[4.4.4.4\] domain\\user(… --- ## [Monitoring history not being deleted](https://discuss.elastic.co/t/monitoring-history-not-being-deleted/217239)
**Author:** [@Ronin](https://discuss.elastic.co/u/Ronin)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 4:05pm UTC](https://discuss.elastic.co/t/monitoring-history-not-being-deleted/217239 "2020-01-30T16:05:49Z")
We have a monitoring cluster that is set up to monitor 3 other clusters and the beats for those clusters. The monitoring cluster is being filled up with indices such as .monitoring-es-7-2019.12.28. Looking at documentati… --- ## [Starting kibana with Elasticsearch Coordinating with loadbalanced elasticsearch](https://discuss.elastic.co/t/starting-kibana-with-elasticsearch-coordinating-with-loadbalanced-elasticsearch/217217)
**Author:** [@andras.vecsi](https://discuss.elastic.co/u/andras.vecsi)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 3:56pm UTC](https://discuss.elastic.co/t/starting-kibana-with-elasticsearch-coordinating-with-loadbalanced-elasticsearch/217217 "2020-01-30T15:56:20Z")
Hello, I'm building a new a elasticsearch,kibana,logstash cluster. I was able to create a 3 node elasticsearch cluster with x-pack security. I set the password to all my default users in elasticsearch. I installed an… --- ## [Syslog to Kibana](https://discuss.elastic.co/t/syslog-to-kibana/217208)
**Author:** [@bertlandh](https://discuss.elastic.co/u/bertlandh)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 3:46pm UTC](https://discuss.elastic.co/t/syslog-to-kibana/217208 "2020-01-30T15:46:12Z")
Hi team, How is the coffee today? I am here at the office and i have just deployed the HELK stack. But i am a total noob. I am doing some reading and testing. However i cannot find anything to pattern match to fit my cu… --- ## [onIsLockedUpdate props is not getting called on every click of Collapse section in left navigation](https://discuss.elastic.co/t/onislockedupdate-props-is-not-getting-called-on-every-click-of-collapse-section-in-left-navigation/216823)
**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Replies:** 5\ **Last updated:** [January 30, 2020, 3:29pm UTC](https://discuss.elastic.co/t/onislockedupdate-props-is-not-getting-called-on-every-click-of-collapse-section-in-left-navigation/216823 "2020-01-30T15:29:08Z")
Image attached. As here we are using elastic UI, Nav Drawer. Please suggest an event like click on Collapse list item section in Left Navigation bar which keeps tracks of closing and opening state of left navigation! … --- ## [Does deleting and creating indexes over time kill index performance?](https://discuss.elastic.co/t/does-deleting-and-creating-indexes-over-time-kill-index-performance/217041)
**Author:** [@Wa\_ed\_AL-Sawarieh](https://discuss.elastic.co/u/Wa_ed_AL-Sawarieh)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 3:20pm UTC](https://discuss.elastic.co/t/does-deleting-and-creating-indexes-over-time-kill-index-performance/217041 "2020-01-30T15:20:55Z")
Hello, I have question about elastic search index, Does delete and creating indexes over time kill index performance? Thanks [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1654) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1656)