# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1716 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1717 --- ## [Ingest user has autherntication failures to the default\_native realm](https://discuss.elastic.co/t/ingest-user-has-autherntication-failures-to-the-default-native-realm/212635)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 9:22am UTC](https://discuss.elastic.co/t/ingest-user-has-autherntication-failures-to-the-default-native-realm/212635 "2019-12-20T09:22:11Z")
Hello, I have enabled security on elasticsearch and created a ingest user with a dedicated role that it is used by the beats and logstash to ingest data into the elasticsearch. However I keep seing the following into th… --- ## [Boshrelease 208.0.0 v 209.1.0](https://discuss.elastic.co/t/boshrelease-208-0-0-v-209-1-0/211708)
**Author:** [@usr20190913](https://discuss.elastic.co/u/usr20190913)\ **Replies:** 2\ **Last updated:** [December 20, 2019, 9:21am UTC](https://discuss.elastic.co/t/boshrelease-208-0-0-v-209-1-0/211708 "2019-12-20T09:21:35Z")
We currently have logsearch 208.0.0 deployed, which contains: \[elasticsearch\_master/0\] version\[5.5.2\] Looking through all logsearch\_boshrelease, it appears version 209.1.0 would be compatible with the 5.5.2 release as … --- ## [Data disappeared but \_stats doesn't say the same](https://discuss.elastic.co/t/data-disappeared-but-stats-doesnt-say-the-same/212464)
**Author:** [@HugooBauer](https://discuss.elastic.co/u/HugooBauer)\ **Replies:** 3\ **Last updated:** [December 20, 2019, 9:08am UTC](https://discuss.elastic.co/t/data-disappeared-but-stats-doesnt-say-the-same/212464 "2019-12-20T09:08:45Z")
Hello, I just noticed that my data before April 1 has disappeared. I have one index per month, and the indexes 2019.03 and below no longer return documents. When I do a \_search or \_count, the return gives me : { "c… --- ## [How can I set the range against an existing fields in the same document?](https://discuss.elastic.co/t/how-can-i-set-the-range-against-an-existing-fields-in-the-same-document/212410)
**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\ **Replies:** 3\ **Last updated:** [December 20, 2019, 9:03am UTC](https://discuss.elastic.co/t/how-can-i-set-the-range-against-an-existing-fields-in-the-same-document/212410 "2019-12-20T09:03:40Z")
How can I set the range against an existing fields in the same document? GET my\_index/\_search { "query": { "range" : { "date" : { "gte" : "now-\[period\]d/d", "lte" … --- ## [Optimize Global Aggregation that became slower after increase of terms subaggregations count](https://discuss.elastic.co/t/optimize-global-aggregation-that-became-slower-after-increase-of-terms-subaggregations-count/212309)
**Author:** [@aspacca-gfg](https://discuss.elastic.co/u/aspacca-gfg)\ **Replies:** 3\ **Last updated:** [December 20, 2019, 8:56am UTC](https://discuss.elastic.co/t/optimize-global-aggregation-that-became-slower-after-increase-of-terms-subaggregations-count/212309 "2019-12-20T08:56:56Z")
We have and index with 500.000 documents ca with 3 shards and 3 replicas This is the mapping { "mappings": { "\_doc": { "dynamic\_templates": \[{ "attr\_template": { "mapping": { "type": "text", … --- ## [Cluster upgrade from 5.4 -\> 5.6 doubled disk usage](https://discuss.elastic.co/t/cluster-upgrade-from-5-4-5-6-doubled-disk-usage/212539)
**Author:** [@jmwilkinson](https://discuss.elastic.co/u/jmwilkinson)\ **Replies:** 5\ **Last updated:** [December 20, 2019, 8:37am UTC](https://discuss.elastic.co/t/cluster-upgrade-from-5-4-5-6-doubled-disk-usage/212539 "2019-12-20T08:37:05Z")
Was requested to post a discussion topic to start rather than a github issue. Original link: https://github.com/elastic/elasticsearch/issues/50323 The problem, as described in the issue, is that following the standard … --- ## [Syslog\_severity field is always using the default notice rather than the actual severity](https://discuss.elastic.co/t/syslog-severity-field-is-always-using-the-default-notice-rather-than-the-actual-severity/212478)
**Author:** [@oldhamuk](https://discuss.elastic.co/u/oldhamuk)\ **Replies:** 2\ **Last updated:** [December 20, 2019, 8:36am UTC](https://discuss.elastic.co/t/syslog-severity-field-is-always-using-the-default-notice-rather-than-the-actual-severity/212478 "2019-12-20T08:36:52Z")
Good Morning, I'm fairly new to ELK but have managed to build my self solution I can use for a syslog server and I'm happy with it with the exceptions of one thing at the moment. The severity of the syslog events seems… --- ## [What Does the Preselect Filter (Today) Date Means in Kibana?](https://discuss.elastic.co/t/what-does-the-preselect-filter-today-date-means-in-kibana/212519)
**Author:** [@Haalanam](https://discuss.elastic.co/u/Haalanam)\ **Replies:** 2\ **Last updated:** [December 20, 2019, 8:34am UTC](https://discuss.elastic.co/t/what-does-the-preselect-filter-today-date-means-in-kibana/212519 "2019-12-20T08:34:07Z")
Hi, What the today means with Kibana ? From 00h ? --- ## [Rejected thread pool](https://discuss.elastic.co/t/rejected-thread-pool/212395)
**Author:** [@jdambly](https://discuss.elastic.co/u/jdambly)\ **Replies:** 6\ **Last updated:** [December 20, 2019, 8:18am UTC](https://discuss.elastic.co/t/rejected-thread-pool/212395 "2019-12-20T08:18:29Z")
I am getting rejected thread pools on just one node, how can I resolve this? node\_name name active rejected completed elastic-es-data-2 analyze 0 0 0 elastic… --- ## [Empty CoordinateMap in kibana](https://discuss.elastic.co/t/empty-coordinatemap-in-kibana/212608)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 1\ **Last updated:** [December 20, 2019, 8:09am UTC](https://discuss.elastic.co/t/empty-coordinatemap-in-kibana/212608 "2019-12-20T08:09:43Z")
Hi community My CoordinateMap is empty like this How do I fix to show map in kibana? My current kibana Version: 5.5.2 --- ## [Dec 20th, 2019 \[EN\] \[App Search\] Getting Started with App Search](https://discuss.elastic.co/t/dec-20th-2019-en-app-search-getting-started-with-app-search/211396)
**Author:** [@aravindputrevu](https://discuss.elastic.co/u/aravindputrevu)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-20th-2019-en-app-search-getting-started-with-app-search/211396 "2019-12-20T08:00:03Z")
What is Elastic App Search? App Search is a search solution that is built on Elasticsearch. Using App Search, one can build search experience faster. One can tune relevance, create synonyms or even change the index schem… --- ## [Query doesn't have any hits with date condition](https://discuss.elastic.co/t/query-doesnt-have-any-hits-with-date-condition/212492)
**Author:** [@bingchuan](https://discuss.elastic.co/u/bingchuan)\ **Replies:** 7\ **Last updated:** [December 20, 2019, 7:41am UTC](https://discuss.elastic.co/t/query-doesnt-have-any-hits-with-date-condition/212492 "2019-12-20T07:41:38Z")
Hi everyone, I'm beginner and i have a question. I created a index which contains some documents. But there are no any hits when i search the documents with the below query. Then, I deleted the date condition,and t… --- ## [SNMP Trap](https://discuss.elastic.co/t/snmp-trap/212610)
**Author:** [@inamatus](https://discuss.elastic.co/u/inamatus)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 6:45am UTC](https://discuss.elastic.co/t/snmp-trap/212610 "2019-12-20T06:45:51Z")
I have SNMP-Trap message. #\\>, #\ **Author:** [@wokmichel](https://discuss.elastic.co/u/wokmichel)\ **Replies:** 3\ **Last updated:** [December 20, 2019, 6:32am UTC](https://discuss.elastic.co/t/range-buckets-for-distributing-documents-over-the-average-of-one-of-their-fields/212466 "2019-12-20T06:32:05Z") Hello, I did not find the answer in the previous Kibana discussions so I thought I would explain what I am trying and not managing to achieve : I am trying to show display the repartition of the average of a field acro… --- ## [ELK Stack Configuration for UiPath logs](https://discuss.elastic.co/t/elk-stack-configuration-for-uipath-logs/212604)
**Author:** [@Praveen\_Yallala](https://discuss.elastic.co/u/Praveen_Yallala)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 6:04am UTC](https://discuss.elastic.co/t/elk-stack-configuration-for-uipath-logs/212604 "2019-12-20T06:04:55Z")
Hi, Currently I am using ElasticSearch and Kibana. UiPath Orchestrator is configured that logs are transmitted to Elasticsearch-\>Kibana. Everything is working fine. Do I also need to configure Filebeat and Logstash als… --- ## [Two data nodes: One node left, get stale shards and cluster status goes red](https://discuss.elastic.co/t/two-data-nodes-one-node-left-get-stale-shards-and-cluster-status-goes-red/212442)
**Author:** [@itchy91](https://discuss.elastic.co/u/itchy91)\ **Replies:** 2\ **Last updated:** [December 20, 2019, 5:45am UTC](https://discuss.elastic.co/t/two-data-nodes-one-node-left-get-stale-shards-and-cluster-status-goes-red/212442 "2019-12-20T05:45:59Z")
Two data nodes: One node left, get stale shards and cluster status goes red Hello. Searched for this scenario, only get the hint that this could happen in situations, but i dont know how to solve it. We're using ES 6.… --- ## [ES Snapshot to File System on the k8s (multiple node)](https://discuss.elastic.co/t/es-snapshot-to-file-system-on-the-k8s-multiple-node/212601)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 5:41am UTC](https://discuss.elastic.co/t/es-snapshot-to-file-system-on-the-k8s-multiple-node/212601 "2019-12-20T05:41:15Z")
I want to take a snapshot on the filesystem on more than one node. However, i should find a path that is accessible from all nodes. i have to mount the filesystem. What can i do in a Kubernetes environment? PVC canno… --- ## [ILM delete x days from rollover on reindexed indices](https://discuss.elastic.co/t/ilm-delete-x-days-from-rollover-on-reindexed-indices/212599)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 5:22am UTC](https://discuss.elastic.co/t/ilm-delete-x-days-from-rollover-on-reindexed-indices/212599 "2019-12-20T05:22:07Z")
how ILM evaluates indices that have been reindexed recently due to mapping change? Does reindex modify the age of indices from ILM perspective so ILM is impacted? for instance I set ILM to "Delete 30days from rollove… --- ## [Can't get es remote info](https://discuss.elastic.co/t/cant-get-es-remote-info/212587)
**Author:** [@111269](https://discuss.elastic.co/u/111269)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 3:08am UTC](https://discuss.elastic.co/t/cant-get-es-remote-info/212587 "2019-12-20T03:08:06Z")
when use curl get remote info failed; task info :slightly\_smiling\_face: "c-dufCMQSc2YelvGnNGnIQ:589429" : { "node" : "c-dufCMQSc2YelvGnNGnIQ", "id" : 589429, "type" : "transport", "action" : "cluster:monitor/remote… --- ## [Elasticsearch find which field and array index matched?](https://discuss.elastic.co/t/elasticsearch-find-which-field-and-array-index-matched/212581)
**Author:** [@cjsjyh](https://discuss.elastic.co/u/cjsjyh)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 1:32am UTC](https://discuss.elastic.co/t/elasticsearch-find-which-field-and-array-index-matched/212581 "2019-12-20T01:32:15Z")
I am currently using multi\_match to search nested datatypes. I want to find the index of shortreview which matched my query. For example, if query matched """ review\_ccc """ of my review field, return 2. my purpose is… --- ## [Date stamp in index name is being ignored](https://discuss.elastic.co/t/date-stamp-in-index-name-is-being-ignored/212532)
**Author:** [@rrue](https://discuss.elastic.co/u/rrue)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 11:09pm UTC](https://discuss.elastic.co/t/date-stamp-in-index-name-is-being-ignored/212532 "2019-12-19T23:09:49Z")
I'm upgrading to ELK 7.5 and finding a lot of things have changed since 5.5 (no kidding). In particular I can't seem to make logstash write to an ES index named for the current date. When testing with a very simple logs… --- ## [Create single dashboard from two different datasource (Elasticsearch and postgres) is possible in kibana](https://discuss.elastic.co/t/create-single-dashboard-from-two-different-datasource-elasticsearch-and-postgres-is-possible-in-kibana/212172)
**Author:** [@Amit\_Chauhan](https://discuss.elastic.co/u/Amit_Chauhan)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 11:04pm UTC](https://discuss.elastic.co/t/create-single-dashboard-from-two-different-datasource-elasticsearch-and-postgres-is-possible-in-kibana/212172 "2019-12-19T23:04:24Z")
I want to perform analytics on some data in kibana. data will be fetched from two database (postgres and elasticsearch). Analytics will be applied on combined data of these two datasource data. is it possible in kibana? … --- ## [Web-UI for Logstash filter development](https://discuss.elastic.co/t/web-ui-for-logstash-filter-development/209748)
**Author:** [@Transrian](https://discuss.elastic.co/u/Transrian)\ **Replies:** 10\ **Last updated:** [December 19, 2019, 10:16pm UTC](https://discuss.elastic.co/t/web-ui-for-logstash-filter-development/209748 "2019-12-19T22:16:40Z")
Hi guys, At work, we use Logstash a lot, and spend way more time than we should creating parsing for complex log format .. To help us, I created a little web app, that I decided to release lately in open-source, now th… --- ## [Could not locate that index-pattern (id: metricbeat-\*), \[click here to re-create it\](#/management/kibana/index\_pattern)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-metricbeat-click-here-to-re-create-it-management-kibana-index-pattern/211148)
**Author:** [@baronnenate](https://discuss.elastic.co/u/baronnenate)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 9:05pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-metricbeat-click-here-to-re-create-it-management-kibana-index-pattern/211148 "2019-12-19T21:05:33Z")
Hi, I'm VERY new to ELK - I've been setting up a test stack over the past week or so, after a lot reading guides, following tutorials, etc. - I've managed to get something up and running. However, I've started to encount… --- ## [HOW USE METRİCS İS MAKE TREND İN KİBANA VİSUALİZE?](https://discuss.elastic.co/t/how-use-metrics-is-make-trend-in-kibana-visualize/210631)
**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 8:50pm UTC](https://discuss.elastic.co/t/how-use-metrics-is-make-trend-in-kibana-visualize/210631 "2019-12-19T20:50:39Z")
Iwaint answer. this like. --- ## [HTTP\_POLLER Certificate Question](https://discuss.elastic.co/t/http-poller-certificate-question/212557)
**Author:** [@RunningSmurf](https://discuss.elastic.co/u/RunningSmurf)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 8:38pm UTC](https://discuss.elastic.co/t/http-poller-certificate-question/212557 "2019-12-19T20:38:53Z")
Hello, My HTTP\_POLLER makes a call to an API over https. There, I tried to use the following parameters in my .CONF file: truststore =\> "/path/to/downloaded\_truststore.jks" truststore\_password =\> "mypassword" Howeve… --- ## [Does anyone have a source for sample metricbeat data?](https://discuss.elastic.co/t/does-anyone-have-a-source-for-sample-metricbeat-data/212556)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 8:36pm UTC](https://discuss.elastic.co/t/does-anyone-have-a-source-for-sample-metricbeat-data/212556 "2019-12-19T20:36:32Z")
Does anyone have a source for some sample data I could load into a test cluster? Specifically for Metricbeat. For bonus points, any other beats like Filebeat, Journalbeat, or Winlogbeat. Kibana has some sample data for … --- ## [Bulk insert API with json file not working](https://discuss.elastic.co/t/bulk-insert-api-with-json-file-not-working/212522)
**Author:** [@apizano](https://discuss.elastic.co/u/apizano)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 8:07pm UTC](https://discuss.elastic.co/t/bulk-insert-api-with-json-file-not-working/212522 "2019-12-19T20:07:25Z")
Hi, I have a very large file with like 1 million records or 1,000,000 records (either way its a lot :D) I am using the curl command: $ curl -s -H "Content-Type: application/json" -XPOST localhost:9200/\_bulk --data-bina… --- ## [Importing CSV and mapping geo\_point](https://discuss.elastic.co/t/importing-csv-and-mapping-geo-point/210957)
**Author:** [@davidmgm-ES](https://discuss.elastic.co/u/davidmgm-ES)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 7:04pm UTC](https://discuss.elastic.co/t/importing-csv-and-mapping-geo-point/210957 "2019-12-19T19:04:14Z")
Hello ES Community. I'm fairly new to ES/Kibana 7.5. I have the following CSV file with 3 columns.; first\_seen, last\_seen and geom. Dropbox link to the CSV file Type of the first two columns are date and type of the… --- ## [Importing CSV into Kibana and mapping geo\_point](https://discuss.elastic.co/t/importing-csv-into-kibana-and-mapping-geo-point/210848)
**Author:** [@davidmgm-ES](https://discuss.elastic.co/u/davidmgm-ES)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 7:04pm UTC](https://discuss.elastic.co/t/importing-csv-into-kibana-and-mapping-geo-point/210848 "2019-12-19T19:04:12Z")
Hello ES Community. I'm fairly new to ES/Kibana 7.5. I have the following CSV file with 3 columns.; first\_seen, last\_seen and geom. Dropbox link to the CSV file Type of the first two columns are date and type of the … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1715) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1717)