# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1717

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1718

---

## [Security in Elastic](https://discuss.elastic.co/t/security-in-elastic/212545)

<div class="topic-metadata">

**Author:** [@Pkeshav](https://discuss.elastic.co/u/Pkeshav)\
**Replies:** 3\
**Last updated:** [December 19, 2019, 6:49pm UTC](https://discuss.elastic.co/t/security-in-elastic/212545 "2019-12-19T18:49:38Z")

</div>

Per this article it looks we have access to TLS and RBAC with the basic version of Elastic. We want to confirm this is true? I have conflicting information in various blogs so want to confirm if my understanding is right…

---

## [Compare incoming string/data to keyword list, if in keyword list, flag?](https://discuss.elastic.co/t/compare-incoming-string-data-to-keyword-list-if-in-keyword-list-flag/212527)

<div class="topic-metadata">

**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\
**Replies:** 3\
**Last updated:** [December 19, 2019, 6:46pm UTC](https://discuss.elastic.co/t/compare-incoming-string-data-to-keyword-list-if-in-keyword-list-flag/212527 "2019-12-19T18:46:59Z")

</div>

hi, i'm not really sure the best way to describe what i'm trying to do.. but i will have data bring streamed into logstash. i have a growing keyword list, that is a text file. is there a way i can compare the values/da…

---

## [How does elasticsearch indexing handle repititions?](https://discuss.elastic.co/t/how-does-elasticsearch-indexing-handle-repititions/212541)

<div class="topic-metadata">

**Author:** [@hjiop\_oop](https://discuss.elastic.co/u/hjiop_oop)\
**Replies:** 1\
**Last updated:** [December 19, 2019, 6:39pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-indexing-handle-repititions/212541 "2019-12-19T18:39:23Z")

</div>

Say I have two entries: {'a':100,'b':'2000 aba'} {'a':100,'b':'2000 aba'} and I index them and then do a search over elasticsearch for all '2000 aba' in field 'b', will the repetitions show? will both the entries sho…

---

## [Http filter for each array item](https://discuss.elastic.co/t/http-filter-for-each-array-item/212239)

<div class="topic-metadata">

**Author:** [@mdailey](https://discuss.elastic.co/u/mdailey)\
**Replies:** 1\
**Last updated:** [December 19, 2019, 6:38pm UTC](https://discuss.elastic.co/t/http-filter-for-each-array-item/212239 "2019-12-19T18:38:54Z")

</div>

I have a filter that I need to apply to each item of an array that I obtain from an earlier filter. It works fine for a single input like this: http { url =\> "http://my.api.com/api/v1/%{id}?verbose=false" header…

---

## [DLQ 7.1.0 not working](https://discuss.elastic.co/t/dlq-7-1-0-not-working/212543)

<div class="topic-metadata">

**Author:** [@John\_McAfee1](https://discuss.elastic.co/u/John_McAfee1)\
**Replies:** 0\
**Last updated:** [December 19, 2019, 6:24pm UTC](https://discuss.elastic.co/t/dlq-7-1-0-not-working/212543 "2019-12-19T18:24:52Z")

</div>

I am using version 7.1.0 Elastic stack to ingest logs into Elasticsearch. When procssing the data, I encounter this ERROR message several times: \[2019-12-19T12:30:10,332\]\[ERROR\]\[logstash.outputs.elasticsearch\] Encounte…

---

## [Doesn't work when trying to match on "source" and "message" in the same grok](https://discuss.elastic.co/t/doesnt-work-when-trying-to-match-on-source-and-message-in-the-same-grok/212353)

<div class="topic-metadata">

**Author:** [@Hamish1](https://discuss.elastic.co/u/Hamish1)\
**Replies:** 1\
**Last updated:** [December 19, 2019, 6:24pm UTC](https://discuss.elastic.co/t/doesnt-work-when-trying-to-match-on-source-and-message-in-the-same-grok/212353 "2019-12-19T18:24:11Z")

</div>

Good day everyone! I'm using filebeat and logstash. Here is the part of logstash filter which is not working as I'm expecting. if "app\_name" in \[tags\] { mutate { gsub =\> \["message", "\\x1B\\\[(\[0-9\]{1,2}(;\[0-9\]{1,2}…

---

## [I can't create mapping with python modukle elasticsearch](https://discuss.elastic.co/t/i-cant-create-mapping-with-python-modukle-elasticsearch/212477)

<div class="topic-metadata">

**Author:** [@kevngzc](https://discuss.elastic.co/u/kevngzc)\
**Replies:** 0\
**Last updated:** [December 19, 2019, 11:53am UTC](https://discuss.elastic.co/t/i-cant-create-mapping-with-python-modukle-elasticsearch/212477 "2019-12-19T11:53:21Z")

</div>

Hi, I try to add a mapping with geocoding and date to my index with elasticsearch-py. But my field "COORDONNEES" doesn't appear in mapping as geo\_point but like type text with keywords. I want to use this this field in…

---

## [Translate query from Sphinx to Elasticsearch](https://discuss.elastic.co/t/translate-query-from-sphinx-to-elasticsearch/212005)

<div class="topic-metadata">

**Author:** [@zeusfsx](https://discuss.elastic.co/u/zeusfsx)\
**Replies:** 2\
**Last updated:** [December 19, 2019, 6:11pm UTC](https://discuss.elastic.co/t/translate-query-from-sphinx-to-elasticsearch/212005 "2019-12-19T18:11:28Z")

</div>

I work with a monitoring system and have a lot of queries on Sphinx. I need to translate Sphinx queries into elasticsearch, because we will upgrade our db on elasticsearch. For example i have query on sphinx: (Donald …

---

## [Has anyone bundled ELK as an OVA VMware?](https://discuss.elastic.co/t/has-anyone-bundled-elk-as-an-ova-vmware/212297)

<div class="topic-metadata">

**Author:** [@Namlovely\_Smile](https://discuss.elastic.co/u/Namlovely_Smile)\
**Replies:** 3\
**Last updated:** [December 19, 2019, 5:45pm UTC](https://discuss.elastic.co/t/has-anyone-bundled-elk-as-an-ova-vmware/212297 "2019-12-19T17:45:32Z")

</div>

I see only virtualbox and import into vmware. It can't do it. Help me. i what Elasticsearch, Logstash and Kibana instances. thaank you :grinning:

---

## [Kibana date filter for month](https://discuss.elastic.co/t/kibana-date-filter-for-month/211088)

<div class="topic-metadata">

**Author:** [@swati\_dupare](https://discuss.elastic.co/u/swati_dupare)\
**Replies:** 1\
**Last updated:** [December 19, 2019, 5:33pm UTC](https://discuss.elastic.co/t/kibana-date-filter-for-month/211088 "2019-12-19T17:33:52Z")

</div>

Hi, I want to have a date filter between start of the month to the end of the month . eg. 2019-12-01 to 2019-12-31

---

## [Monitoring production cluster with Kibana and Metricbeat](https://discuss.elastic.co/t/monitoring-production-cluster-with-kibana-and-metricbeat/207072)

<div class="topic-metadata">

**Author:** [@darefilz](https://discuss.elastic.co/u/darefilz)\
**Replies:** 8\
**Last updated:** [December 19, 2019, 4:21pm UTC](https://discuss.elastic.co/t/monitoring-production-cluster-with-kibana-and-metricbeat/207072 "2019-12-19T16:21:49Z")

</div>

Hi there, we run an Elastic Stack version 6.8.0 with a basic licence. Like a few others we have issues monitoring the production cluster in Kibana. As recommended we have set up a separate monitoring cluster including…

---

## [Repository-s3 plugin install fails](https://discuss.elastic.co/t/repository-s3-plugin-install-fails/212415)

<div class="topic-metadata">

**Author:** [@Kevin\_Comer](https://discuss.elastic.co/u/Kevin_Comer)\
**Replies:** 2\
**Last updated:** [December 19, 2019, 4:06pm UTC](https://discuss.elastic.co/t/repository-s3-plugin-install-fails/212415 "2019-12-19T16:06:07Z")

</div>

I am getting a connection time out when trying to install the repository-s3 plugin using the repository for CentOS 7 I have tried several ways all using the proxy and I'm still getting a time out are there any proxy set…

---

## [How is the system.network.in.dropped calculated?](https://discuss.elastic.co/t/how-is-the-system-network-in-dropped-calculated/212403)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 3\
**Last updated:** [December 19, 2019, 3:40pm UTC](https://discuss.elastic.co/t/how-is-the-system-network-in-dropped-calculated/212403 "2019-12-19T15:40:44Z")

</div>

Hi, I have noticed a machine has a "higher" rate of dropped packets vs other machines. This machine is about +1% packet loss vs other machines are way below 1% I.e: Machine 1: 14 dropped packets over 200 million Machi…

---

## [How to migrate not\_analyzed ES 1.4.4-\>7.5.0](https://discuss.elastic.co/t/how-to-migrate-not-analyzed-es-1-4-4-7-5-0/212511)

<div class="topic-metadata">

**Author:** [@michalz](https://discuss.elastic.co/u/michalz)\
**Replies:** 0\
**Last updated:** [December 19, 2019, 3:40pm UTC](https://discuss.elastic.co/t/how-to-migrate-not-analyzed-es-1-4-4-7-5-0/212511 "2019-12-19T15:40:19Z")

</div>

I am migrating ES 1.4.4 to ES 7.5.0 and I get the following error in the logs: In ES 1.4.4 we had several fields of type "index";"not\_analyzed" and a few with type "index":"no" and "index":"analyzed". How to migrate th…

---

## [Apache fields are disable](https://discuss.elastic.co/t/apache-fields-are-disable/212349)

<div class="topic-metadata">

**Author:** [@Yacine\_Mourchid](https://discuss.elastic.co/u/Yacine_Mourchid)\
**Replies:** 4\
**Last updated:** [December 19, 2019, 3:39pm UTC](https://discuss.elastic.co/t/apache-fields-are-disable/212349 "2019-12-19T15:39:36Z")

</div>

Hello, When I want to see all fields of my index in Discovery, my apache's fields are disable (I can see them only if I uncheck "hide missing fields"). In visualization, I can choose these fields but no data appears. …

---

## [Creating new field by aggregating values from existing field values](https://discuss.elastic.co/t/creating-new-field-by-aggregating-values-from-existing-field-values/212498)

<div class="topic-metadata">

**Author:** [@Saptha\_AD](https://discuss.elastic.co/u/Saptha_AD)\
**Replies:** 0\
**Last updated:** [December 19, 2019, 1:28pm UTC](https://discuss.elastic.co/t/creating-new-field-by-aggregating-values-from-existing-field-values/212498 "2019-12-19T13:28:06Z")

</div>

We want to create new field as "ProcCount3minAvg" for all the documents in Elasticsearch, "ProcTime3minAvg" is avg aggregation value of a floating point field captured from logs called "ProcCount". Avg value should be t…

---

## [Hide Unmapped Field Warnings](https://discuss.elastic.co/t/hide-unmapped-field-warnings/210751)

<div class="topic-metadata">

**Author:** [@stranjer](https://discuss.elastic.co/u/stranjer)\
**Replies:** 1\
**Last updated:** [December 19, 2019, 3:33pm UTC](https://discuss.elastic.co/t/hide-unmapped-field-warnings/210751 "2019-12-19T15:33:06Z")

</div>

I am working on reducing the number of indexed/mapped fields for one of our largest daily indices in Elasticsearch in order to reduce heap usage. I've rebuilt the index templates to explicitly map out ~250 fields, down f…

---

## [ES 7.5.0 gets OOM](https://discuss.elastic.co/t/es-7-5-0-gets-oom/212501)

<div class="topic-metadata">

**Author:** [@michalz](https://discuss.elastic.co/u/michalz)\
**Replies:** 2\
**Last updated:** [December 19, 2019, 3:29pm UTC](https://discuss.elastic.co/t/es-7-5-0-gets-oom/212501 "2019-12-19T15:29:00Z")

</div>

I am new to ELK and would like to use ES in connection with Logstash. Logstash is supposed to put around 15MB of data to ES. However my ES (which is run in Docker) does not behave stable. After about few minutes the c…

---

## [SQL Structure to JSON Structure the ElasticSearch?](https://discuss.elastic.co/t/sql-structure-to-json-structure-the-elasticsearch/212037)

<div class="topic-metadata">

**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\
**Replies:** 12\
**Last updated:** [December 19, 2019, 3:28pm UTC](https://discuss.elastic.co/t/sql-structure-to-json-structure-the-elasticsearch/212037 "2019-12-19T15:28:59Z")

</div>

Hi guys, I would like to ask a question. I want to convert the mysql SQL structure to the JSON structure for elasticSearch. that is, the parameters to limit, sort, group by, select and where then you fall into the config…

---

## [Latest(7.4) Kibana Plugin development using Reactjs](https://discuss.elastic.co/t/latest-7-4-kibana-plugin-development-using-reactjs/211089)

<div class="topic-metadata">

**Author:** [@ashokp](https://discuss.elastic.co/u/ashokp)\
**Replies:** 1\
**Last updated:** [December 19, 2019, 3:16pm UTC](https://discuss.elastic.co/t/latest-7-4-kibana-plugin-development-using-reactjs/211089 "2019-12-19T15:16:41Z")

</div>

Can anyone Guide me on latest(7.4) Kibana Plugin development using Reactjs.

---

## [Different time range for different dashboards (6.4)?](https://discuss.elastic.co/t/different-time-range-for-different-dashboards-6-4/210864)

<div class="topic-metadata">

**Author:** [@Christos\_Gitsis](https://discuss.elastic.co/u/Christos_Gitsis)\
**Replies:** 1\
**Last updated:** [December 19, 2019, 3:12pm UTC](https://discuss.elastic.co/t/different-time-range-for-different-dashboards-6-4/210864 "2019-12-19T15:12:38Z")

</div>

Hi, I have two dashboards, A and B, and I need to have a different time range shown in each one of them: for A, the last 12 hours, for B the last 7 days. Unfortunately, I see in Kibana 6.4 only one global time range sel…

---

## [Logstash sync mysql two tables to elasticsearch doesn't work](https://discuss.elastic.co/t/logstash-sync-mysql-two-tables-to-elasticsearch-doesnt-work/212500)

<div class="topic-metadata">

**Author:** [@hel](https://discuss.elastic.co/u/hel)\
**Replies:** 0\
**Last updated:** [December 19, 2019, 1:31pm UTC](https://discuss.elastic.co/t/logstash-sync-mysql-two-tables-to-elasticsearch-doesnt-work/212500 "2019-12-19T13:31:21Z")

</div>

I'm tring to use logstash to synchronize mysql tables to elasticsearch. At first there was only one input for synchronizing table 'article' and went well. Then I appended another input for synchronizing table 'user', but…

---

## [AWS ES logstash - Got response code '403' contacting Elasticsearch at URL 'https://search-aws-e\*](https://discuss.elastic.co/t/aws-es-logstash-got-response-code-403-contacting-elasticsearch-at-url-https-search-aws-e/212506)

<div class="topic-metadata">

**Author:** [@Kiran\_Kumar2](https://discuss.elastic.co/u/Kiran_Kumar2)\
**Replies:** 0\
**Last updated:** [December 19, 2019, 2:48pm UTC](https://discuss.elastic.co/t/aws-es-logstash-got-response-code-403-contacting-elasticsearch-at-url-https-search-aws-e/212506 "2019-12-19T14:48:09Z")

</div>

I have configured the AWS ES and logstash. and granted the default full AWS policy(AmazonESFullAccess) to the user still I am getting 403 error. my filebeats and logstash are running in same host here are the configura…

---

## [Field tooltip in Kibana - can it be edited?](https://discuss.elastic.co/t/field-tooltip-in-kibana-can-it-be-edited/211001)

<div class="topic-metadata">

**Author:** [@omerdemb](https://discuss.elastic.co/u/omerdemb)\
**Replies:** 1\
**Last updated:** [December 19, 2019, 2:46pm UTC](https://discuss.elastic.co/t/field-tooltip-in-kibana-can-it-be-edited/211001 "2019-12-19T14:46:13Z")

</div>

today the tooltip when hovering on a field shows the field name - can it be configured somewhere to show different text? can help educate users on what each field means.

---

## [ES Watcher Action failed to execute](https://discuss.elastic.co/t/es-watcher-action-failed-to-execute/210142)

<div class="topic-metadata">

**Author:** [@Dinesh\_Krishnan](https://discuss.elastic.co/u/Dinesh_Krishnan)\
**Replies:** 1\
**Last updated:** [December 19, 2019, 2:38pm UTC](https://discuss.elastic.co/t/es-watcher-action-failed-to-execute/210142 "2019-12-19T14:38:14Z")

</div>

We have enabled Watcher Alert for Cluster Health with webhook to create incident in Servicenow Action it failed to execute type": "connect\_timeout\_exception", "reason": "Connect to XXXXXXXXX:XXXX \[XXXXXXXX/XXXXXXXXX\] …

---

## [In Kibana 7.5 Vizualization returns zero instead of 0.0123](https://discuss.elastic.co/t/in-kibana-7-5-vizualization-returns-zero-instead-of-0-0123/212476)

<div class="topic-metadata">

**Author:** [@Michaela\_Krkosova](https://discuss.elastic.co/u/Michaela_Krkosova)\
**Replies:** 3\
**Last updated:** [December 19, 2019, 2:37pm UTC](https://discuss.elastic.co/t/in-kibana-7-5-vizualization-returns-zero-instead-of-0-0123/212476 "2019-12-19T14:37:54Z")

</div>

Hi I have migrated from 7.2.x to 7.5 and problem with vizualization occured. When I look into Inspect -\> view:Requests -\> Response I see that value is correct "sec\_reads": 0.00036976904761904764 but "fields": { "windo…

---

## [Watcher JSON](https://discuss.elastic.co/t/watcher-json/210396)

<div class="topic-metadata">

**Author:** [@brooksly](https://discuss.elastic.co/u/brooksly)\
**Replies:** 1\
**Last updated:** [December 19, 2019, 2:17pm UTC](https://discuss.elastic.co/t/watcher-json/210396 "2019-12-19T14:17:56Z")

</div>

I'm working on alerting for some winlogbeat indices. This one is for event.id 4625, logon failure. Below in my json: Basically, the end result will be alerting with a single user account failed x number of times within y…

---

## [Java version paid/free](https://discuss.elastic.co/t/java-version-paid-free/212352)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 3\
**Last updated:** [December 19, 2019, 2:06pm UTC](https://discuss.elastic.co/t/java-version-paid-free/212352 "2019-12-19T14:06:12Z")

</div>

is java provided by elasticsearch falls in to paid product or free version? /usr/share/elasticsearch/jdk/bin/java

---

## [APM server not creating separate indices](https://discuss.elastic.co/t/apm-server-not-creating-separate-indices/212142)

<div class="topic-metadata">

**Author:** [@sharry007](https://discuss.elastic.co/u/sharry007)\
**Replies:** 6\
**Last updated:** [December 19, 2019, 2:01pm UTC](https://discuss.elastic.co/t/apm-server-not-creating-separate-indices/212142 "2019-12-19T14:01:26Z")

</div>

Kibana version: 7.4.0 Elasticsearch version: 7.4.0 APM Server version: 7.4.0 Upgraded from other version: From 6.7.1 I upgraded elastic stack and APM server to 7.4.0. I installed APM server from deb package. Earlier …

---

## [Taking snapshots concurrently of each index in Elasticsearch](https://discuss.elastic.co/t/taking-snapshots-concurrently-of-each-index-in-elasticsearch/212339)

<div class="topic-metadata">

**Author:** [@ishanjain](https://discuss.elastic.co/u/ishanjain)\
**Replies:** 2\
**Last updated:** [December 19, 2019, 2:00pm UTC](https://discuss.elastic.co/t/taking-snapshots-concurrently-of-each-index-in-elasticsearch/212339 "2019-12-19T14:00:06Z")

</div>

Hi! I have written a module which issues snapshot creation requests for an index and sends it off to a ES cluster. This module is deployed on ECS and can run issue snapshot creation requests concurrently. Right now, Th…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1716)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1718)
