# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1729

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1730

---

## [File and directory permissions for /var/log/elasticsearch that I set revert back whenever I reboot](https://discuss.elastic.co/t/file-and-directory-permissions-for-var-log-elasticsearch-that-i-set-revert-back-whenever-i-reboot/211713)

<div class="topic-metadata">

**Author:** [@theVidVid](https://discuss.elastic.co/u/theVidVid)\
**Replies:** 0\
**Last updated:** [December 12, 2019, 7:26pm UTC](https://discuss.elastic.co/t/file-and-directory-permissions-for-var-log-elasticsearch-that-i-set-revert-back-whenever-i-reboot/211713 "2019-12-12T19:26:21Z")

</div>

Hello, I have a hobby flask web app running the Elasticsearch service. I am running Ubuntu 19.10 and followed the official installation instructions. I have had several issues where the service won't start after resta…

---

## [Field collapsing on alias fields?](https://discuss.elastic.co/t/field-collapsing-on-alias-fields/211589)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 2\
**Last updated:** [December 12, 2019, 9:07am UTC](https://discuss.elastic.co/t/field-collapsing-on-alias-fields/211589 "2019-12-12T09:07:54Z")

</div>

I'm trying to collapse on a field name field1 across different indexes. All indexes but one have the same field name field1 and one index has a different field name field2. So, in that index, I'm defining an alias field f…

---

## [Get doc with \_id in rolling index](https://discuss.elastic.co/t/get-doc-with-id-in-rolling-index/211370)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 4\
**Last updated:** [December 12, 2019, 7:14pm UTC](https://discuss.elastic.co/t/get-doc-with-id-in-rolling-index/211370 "2019-12-12T19:14:02Z")

</div>

Does anybody know how to find a document (with \_id) within rolling index? I cannot use wildcard in indexname. Do I need to search the hard index one by one?

---

## [Unable to get namespace as index name](https://discuss.elastic.co/t/unable-to-get-namespace-as-index-name/211578)

<div class="topic-metadata">

**Author:** [@sandeepk1210](https://discuss.elastic.co/u/sandeepk1210)\
**Replies:** 0\
**Last updated:** [December 12, 2019, 7:12am UTC](https://discuss.elastic.co/t/unable-to-get-namespace-as-index-name/211578 "2019-12-12T07:12:16Z")

</div>

Hi Guys, Requirement : Have INDEX name as FILEBEAT-NAMESPACE-YYYYMMDD Issue: I am unable to get NAMESPACE resolved to be the kubernetes namespace, with whatever option I try. Application: Logstash 7.4.1 is deployed …

---

## [Kibana VM Specs](https://discuss.elastic.co/t/kibana-vm-specs/211703)

<div class="topic-metadata">

**Author:** [@Omair](https://discuss.elastic.co/u/Omair)\
**Replies:** 1\
**Last updated:** [December 12, 2019, 6:48pm UTC](https://discuss.elastic.co/t/kibana-vm-specs/211703 "2019-12-12T18:48:22Z")

</div>

Hi, Im new to ELK and I want to setup Kibana instance. I would like to know the recommended specs for setting up kibana. I found specs for Elasticsearch, but unable to get any recommendations for Logstash and Kibana. Th…

---

## [Replacing New Relic plugin with new version in Github](https://discuss.elastic.co/t/replacing-new-relic-plugin-with-new-version-in-github/208742)

<div class="topic-metadata">

**Author:** [@Seth\_Schwartzman](https://discuss.elastic.co/u/Seth_Schwartzman)\
**Replies:** 1\
**Last updated:** [December 12, 2019, 6:09pm UTC](https://discuss.elastic.co/t/replacing-new-relic-plugin-with-new-version-in-github/208742 "2019-12-12T18:09:21Z")

</div>

Hi Logstash folks! New Relic has developed a new version of logstash-output-newrelic, and have replaced the Ruby Gem associated with it. We were hoping to replace the repo in your org with our own, or have that one poi…

---

## [EC2 PublicIP:9200](https://discuss.elastic.co/t/ec2-publicip-9200/211704)

<div class="topic-metadata">

**Author:** [@chintu](https://discuss.elastic.co/u/chintu)\
**Replies:** 0\
**Last updated:** [December 12, 2019, 5:48pm UTC](https://discuss.elastic.co/t/ec2-publicip-9200/211704 "2019-12-12T17:48:20Z")

</div>

Installed Java 1.8 and elasticsearch 7.x on linux box from EC2 instance. curl localhost:9200 - gives a response as below which means everything is good from installation point of view { "name" : "ip-172-31-46-49.eu-we…

---

## [What are the minimum privileges a user should be granted to connect to Elasticsearch via a sniffing connection pool with basic authentication?](https://discuss.elastic.co/t/what-are-the-minimum-privileges-a-user-should-be-granted-to-connect-to-elasticsearch-via-a-sniffing-connection-pool-with-basic-authentication/211705)

<div class="topic-metadata">

**Author:** [@duncRed](https://discuss.elastic.co/u/duncRed)\
**Replies:** 0\
**Last updated:** [December 12, 2019, 5:49pm UTC](https://discuss.elastic.co/t/what-are-the-minimum-privileges-a-user-should-be-granted-to-connect-to-elasticsearch-via-a-sniffing-connection-pool-with-basic-authentication/211705 "2019-12-12T17:49:25Z")

</div>

Hi We have created a sniffing connection pool to connect to the Elasticsearch cluster. Basic authentication is enabled so Elasticsearch user account details are included in the request. To provide the user with suffic…

---

## [How to create a report that show calls per hour](https://discuss.elastic.co/t/how-to-create-a-report-that-show-calls-per-hour/207874)

<div class="topic-metadata">

**Author:** [@letakeda](https://discuss.elastic.co/u/letakeda)\
**Replies:** 3\
**Last updated:** [December 12, 2019, 5:36pm UTC](https://discuss.elastic.co/t/how-to-create-a-report-that-show-calls-per-hour/207874 "2019-12-12T17:36:44Z")

</div>

I have a version from Kibana from one of IBM products. Not sure if it´s a customized version, maybe. The Kibana version is V5.1. I have a feel ready dashboard and I would to just have calls per hour. This is from API Co…

---

## [Access Kibana Application and Error Logs on Kibana](https://discuss.elastic.co/t/access-kibana-application-and-error-logs-on-kibana/207299)

<div class="topic-metadata">

**Author:** [@Zany](https://discuss.elastic.co/u/Zany)\
**Replies:** 5\
**Last updated:** [December 12, 2019, 5:36pm UTC](https://discuss.elastic.co/t/access-kibana-application-and-error-logs-on-kibana/207299 "2019-12-12T17:36:27Z")

</div>

Question: How can I see Kibana's own application and error logs on Kibana itself? For example, I want to investigate further on the following error that I encountered when trying to delete a dashboard. "TypeError: Faile…

---

## [Dissect not parsing](https://discuss.elastic.co/t/dissect-not-parsing/211698)

<div class="topic-metadata">

**Author:** [@imaad](https://discuss.elastic.co/u/imaad)\
**Replies:** 0\
**Last updated:** [December 12, 2019, 5:06pm UTC](https://discuss.elastic.co/t/dissect-not-parsing/211698 "2019-12-12T17:06:12Z")

</div>

Hello everyone, I'm trying to parse this two log lines : 2019-12-12T10:35:42.625+0100 ERROR log/input.go:501 Harvester could not be started on new file: /apps/tomcat/srvr\_inf\_tom80\_dxccloud\_dev\_01/prod/logs/ju.log, Err…

---

## [Fields splitting from kv filter not containing blank values](https://discuss.elastic.co/t/fields-splitting-from-kv-filter-not-containing-blank-values/211613)

<div class="topic-metadata">

**Author:** [@Vaibhav\_Gupta2](https://discuss.elastic.co/u/Vaibhav_Gupta2)\
**Replies:** 2\
**Last updated:** [December 12, 2019, 4:54pm UTC](https://discuss.elastic.co/t/fields-splitting-from-kv-filter-not-containing-blank-values/211613 "2019-12-12T16:54:00Z")

</div>

I am using 'kv' filter in logstash like this kv { source =\> "request" field\_split =\> "&?" } I have a message like "key=value&key1=&key2=value2" the logstash output is coming like this "key" : "value" "key1" : "&k…

---

## [Error percentage](https://discuss.elastic.co/t/error-percentage/211567)

<div class="topic-metadata">

**Author:** [@aparnababu](https://discuss.elastic.co/u/aparnababu)\
**Replies:** 1\
**Last updated:** [December 12, 2019, 4:48pm UTC](https://discuss.elastic.co/t/error-percentage/211567 "2019-12-12T16:48:43Z")

</div>

how to find the error percentage of application in apm index

---

## [Использование файлов из output path, для восстановления удаленного индекса](https://discuss.elastic.co/t/output-path/210727)

<div class="topic-metadata">

**Author:** [@alex.tregub](https://discuss.elastic.co/u/alex.tregub)\
**Replies:** 9\
**Last updated:** [December 12, 2019, 4:28pm UTC](https://discuss.elastic.co/t/output-path/210727 "2019-12-12T16:28:54Z")

</div>

Здравствуйте! Случайно был удален индекс, который не бэкапился. Но все данные, которые отправлялись в эластик, в этот индекс, так же писались в файлы, с помощью конструкции в logstash: output { ... file { path =\> "/…

---

## [No events emitted - CPU & Memory is fine](https://discuss.elastic.co/t/no-events-emitted-cpu-memory-is-fine/211688)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 0\
**Last updated:** [December 12, 2019, 4:26pm UTC](https://discuss.elastic.co/t/no-events-emitted-cpu-memory-is-fine/211688 "2019-12-12T16:26:34Z")

</div>

My logstash instance is not emitting events that it is receiving to Elasticsearch. CPU across my hot nodes are very low (highest CPU usage is 12%) and my JVM memory percentage seems to be ok (highest one is 54%). What …

---

## [Visualization for nested aggregations](https://discuss.elastic.co/t/visualization-for-nested-aggregations/211642)

<div class="topic-metadata">

**Author:** [@Pablo\_Albertengo](https://discuss.elastic.co/u/Pablo_Albertengo)\
**Replies:** 1\
**Last updated:** [December 12, 2019, 4:24pm UTC](https://discuss.elastic.co/t/visualization-for-nested-aggregations/211642 "2019-12-12T16:24:45Z")

</div>

I am trying to create a visualization in Kibana from a Nested Aggregation but I am not finding the way. What I did now was to adapt another aggregation to be able to add a nested field and it brings me the desired resul…

---

## [Detect invalid latitude and longitude values in an index](https://discuss.elastic.co/t/detect-invalid-latitude-and-longitude-values-in-an-index/211687)

<div class="topic-metadata">

**Author:** [@Mateo\_Loaiza\_Rios](https://discuss.elastic.co/u/Mateo_Loaiza_Rios)\
**Replies:** 0\
**Last updated:** [December 12, 2019, 4:18pm UTC](https://discuss.elastic.co/t/detect-invalid-latitude-and-longitude-values-in-an-index/211687 "2019-12-12T16:18:00Z")

</div>

I am trying to detect by means of a regular expression if the latitude and longitude fields are not valid, but it does not work for me. At this time the values of these 2 fields are string. I was trying to merge latitude…

---

## [How to compare the two different fields value of a same index .?](https://discuss.elastic.co/t/how-to-compare-the-two-different-fields-value-of-a-same-index/211685)

<div class="topic-metadata">

**Author:** [@AutomationAnalyst](https://discuss.elastic.co/u/AutomationAnalyst)\
**Replies:** 0\
**Last updated:** [December 12, 2019, 3:50pm UTC](https://discuss.elastic.co/t/how-to-compare-the-two-different-fields-value-of-a-same-index/211685 "2019-12-12T15:50:55Z")

</div>

Hi, I am new to Kibana and I have two different fields (Both are date fields) from same index. I have to compare the values of the both the fields with Kibana Query language. I would like to implement a query that match…

---

## [JDBC static filter plugin: creating new subfield with value - getting unexpected array object](https://discuss.elastic.co/t/jdbc-static-filter-plugin-creating-new-subfield-with-value-getting-unexpected-array-object/211385)

<div class="topic-metadata">

**Author:** [@tomj](https://discuss.elastic.co/u/tomj)\
**Replies:** 3\
**Last updated:** [December 12, 2019, 3:46pm UTC](https://discuss.elastic.co/t/jdbc-static-filter-plugin-creating-new-subfield-with-value-getting-unexpected-array-object/211385 "2019-12-12T15:46:46Z")

</div>

I am using Logstash 7.1.1 with Elasticsearch 7.1.1 I have been able to query an external MSSQL DB and populate the internal Derby database just fine. I'm populating the fields with the proper names, but the resultant v…

---

## [Migration leads to index pattern ID failure / Hardcoded ID](https://discuss.elastic.co/t/migration-leads-to-index-pattern-id-failure-hardcoded-id/211482)

<div class="topic-metadata">

**Author:** [@t3fsx](https://discuss.elastic.co/u/t3fsx)\
**Replies:** 1\
**Last updated:** [December 12, 2019, 3:46pm UTC](https://discuss.elastic.co/t/migration-leads-to-index-pattern-id-failure-hardcoded-id/211482 "2019-12-12T15:46:17Z")

</div>

Scenario: Several filebeat agents dispatching information to Elastic Index Pattern created for filebeat-\* On a cluster migration, I just wanted to export my visualizations to the new cluster. Exported the visualizatio…

---

## [Elastic search missing aggregation](https://discuss.elastic.co/t/elastic-search-missing-aggregation/211586)

<div class="topic-metadata">

**Author:** [@Bala\_Kumar](https://discuss.elastic.co/u/Bala_Kumar)\
**Replies:** 1\
**Last updated:** [December 12, 2019, 3:02pm UTC](https://discuss.elastic.co/t/elastic-search-missing-aggregation/211586 "2019-12-12T15:02:15Z")

</div>

I'm new to elastic search and I'm using elastic search .nest I want to do aggregation of a field..If the field is missing or null ,I want to change the field and use the value of changed field in the same aggregation.Is…

---

## [Help in logstash parsing by using GROK](https://discuss.elastic.co/t/help-in-logstash-parsing-by-using-grok/211671)

<div class="topic-metadata">

**Author:** [@elkparser](https://discuss.elastic.co/u/elkparser)\
**Replies:** 1\
**Last updated:** [December 12, 2019, 2:56pm UTC](https://discuss.elastic.co/t/help-in-logstash-parsing-by-using-grok/211671 "2019-12-12T14:56:53Z")

</div>

Below is the sample Log: Worlkflow MainJobName Start\_time Job status dependencies ABCDS19F #QSDF\_workflow 1705 10/29 QSDF\_JOB READY ----- ----- …

---

## [How to split single field values in to multipleterms in logstash](https://discuss.elastic.co/t/how-to-split-single-field-values-in-to-multipleterms-in-logstash/211666)

<div class="topic-metadata">

**Author:** [@saravana\_hariharan](https://discuss.elastic.co/u/saravana_hariharan)\
**Replies:** 2\
**Last updated:** [December 12, 2019, 2:54pm UTC](https://discuss.elastic.co/t/how-to-split-single-field-values-in-to-multipleterms-in-logstash/211666 "2019-12-12T14:54:51Z")

</div>

(Fieldvalue =\> createdby,createdtime,updatedby,updatedtime) i need a individual field for createdtime in my kibana option thanks saravanan.R

---

## [Kibana Authentication Exception issue after running 1 minute](https://discuss.elastic.co/t/kibana-authentication-exception-issue-after-running-1-minute/211649)

<div class="topic-metadata">

**Author:** [@tpetersen](https://discuss.elastic.co/u/tpetersen)\
**Replies:** 1\
**Last updated:** [December 12, 2019, 2:50pm UTC](https://discuss.elastic.co/t/kibana-authentication-exception-issue-after-running-1-minute/211649 "2019-12-12T14:50:28Z")

</div>

Hi people, Got an annoying problem here with Kibana 6.8.0, setting up a test cluster with HTTPS and Xpack enabled. The Elastic cluster is running ok and our application can use this just fine. But Kibana can only run 1…

---

## [Elasticsearch 5.4.1 service failed to start](https://discuss.elastic.co/t/elasticsearch-5-4-1-service-failed-to-start/211501)

<div class="topic-metadata">

**Author:** [@fengliplatform](https://discuss.elastic.co/u/fengliplatform)\
**Replies:** 1\
**Last updated:** [December 12, 2019, 2:40pm UTC](https://discuss.elastic.co/t/elasticsearch-5-4-1-service-failed-to-start/211501 "2019-12-12T14:40:58Z")

</div>

It seems it failed to start and status stayed to RED. Any idea? Thanks Following errors are in elasticsearch log file: \[2019-11-26T10:53:03,141\]\[WARN \]\[o.e.b.Natives \] cannot register console handler because JNA is not…

---

## [ELK Installation order matters?](https://discuss.elastic.co/t/elk-installation-order-matters/211653)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [December 12, 2019, 2:34pm UTC](https://discuss.elastic.co/t/elk-installation-order-matters/211653 "2019-12-12T14:34:45Z")

</div>

I have read in several places that the installation of the ELK stack should follow the order ES-\>Kibana-\>Logstash, is this still relevant? I ask this because if I install ES, logstash and kibana in different machines th…

---

## [FScrawler stuck at 2.6gb index size](https://discuss.elastic.co/t/fscrawler-stuck-at-2-6gb-index-size/211094)

<div class="topic-metadata">

**Author:** [@Denn](https://discuss.elastic.co/u/Denn)\
**Replies:** 16\
**Last updated:** [December 12, 2019, 1:30pm UTC](https://discuss.elastic.co/t/fscrawler-stuck-at-2-6gb-index-size/211094 "2019-12-12T13:30:04Z")

</div>

I have elasticsearch that uses fscrawler to index a folder that is about 5TB. The \_settings.yml has not been modified except that it should update after every 3 hours. Everything goes well until the index grew to 2.6g…

---

## [Elastic 6.6 Elasticsearch Unrestricted Access Information Disclosure](https://discuss.elastic.co/t/elastic-6-6-elasticsearch-unrestricted-access-information-disclosure/211579)

<div class="topic-metadata">

**Author:** [@pugdummy](https://discuss.elastic.co/u/pugdummy)\
**Replies:** 8\
**Last updated:** [December 12, 2019, 2:06pm UTC](https://discuss.elastic.co/t/elastic-6-6-elasticsearch-unrestricted-access-information-disclosure/211579 "2019-12-12T14:06:22Z")

</div>

Hello, I'm new with Elastic and we are only using this on UiPath for monitoring. We recently got this vulnerability: Elasticsearch Unrestricted Access Information Disclosure Can anyone help me on what to do to fix this…

---

## [Spring message grok pattern](https://discuss.elastic.co/t/spring-message-grok-pattern/210862)

<div class="topic-metadata">

**Author:** [@Antoine\_GODEAU](https://discuss.elastic.co/u/Antoine_GODEAU)\
**Replies:** 3\
**Last updated:** [December 12, 2019, 1:43pm UTC](https://discuss.elastic.co/t/spring-message-grok-pattern/210862 "2019-12-12T13:43:31Z")

</div>

Hello everyone, I try to create a grok for my spring log message but it seems to not work. Anyone can me help to resolve my grok error ? You can find here an example of the log file : 2019-12-06 09:36:24,254 INFO com…

---

## [Sorting of results returned by autocomplete](https://discuss.elastic.co/t/sorting-of-results-returned-by-autocomplete/211638)

<div class="topic-metadata">

**Author:** [@Vikash\_Verma](https://discuss.elastic.co/u/Vikash_Verma)\
**Replies:** 0\
**Last updated:** [December 12, 2019, 11:36am UTC](https://discuss.elastic.co/t/sorting-of-results-returned-by-autocomplete/211638 "2019-12-12T11:36:13Z")

</div>

Hi, I have a simple index having following mapping: { "mappings": { "\_doc": { "dynamic": "strict", "properties": { "coordinates": { "type": "geo\_point" }, "suggest"…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1728)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1730)
