# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1816 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1817 --- ## [Kibana popup causes scroll event](https://discuss.elastic.co/t/kibana-popup-causes-scroll-event/205247)
**Author:** [@cmstan2002](https://discuss.elastic.co/u/cmstan2002)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 6:52pm UTC](https://discuss.elastic.co/t/kibana-popup-causes-scroll-event/205247 "2019-10-25T18:52:15Z")
I’d really like to raise a bug against Kibana and for the issue where if hovering over the name of a stat on the right side of a chart makes the popup cause a scroll event (if the name of the item is long) then the whole… --- ## [Ingest Plugin error on ECE](https://discuss.elastic.co/t/ingest-plugin-error-on-ece/204723)
**Author:** [@Francisco\_Noguera](https://discuss.elastic.co/u/Francisco_Noguera)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 6:33pm UTC](https://discuss.elastic.co/t/ingest-plugin-error-on-ece/204723 "2019-10-25T18:33:52Z")
Hi, I create a ingest pipeline on a ECE cluster, but everytime I try to ingest a document I'm receiving the next error: "root\_cause": \[ { "type": "illegal\_state\_exception", "reason": "There are no … --- ## [Выбор фильтра для индексации с префиксом](https://discuss.elastic.co/t/topic/205240)
**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 6:09pm UTC](https://discuss.elastic.co/t/topic/205240 "2019-10-25T18:09:05Z")
Добрый день! Мне нужно реализовать поиск по ключевым словам с использованием префикса. Например, у меня есть ключевое слово a\_b\_c\_, так вот, его нужно разбить анализатором на токены "a\_", затем "a\_b\_" и целиком "a\_b\_c\_". … --- ## [Cluster discovery configuration](https://discuss.elastic.co/t/cluster-discovery-configuration/204525)
**Author:** [@pinakinab](https://discuss.elastic.co/u/pinakinab)\ **Replies:** 6\ **Last updated:** [October 25, 2019, 6:07pm UTC](https://discuss.elastic.co/t/cluster-discovery-configuration/204525 "2019-10-25T18:07:43Z")
We are trying to host an elasticsearch cluster with 3 Master Nodes and 6 Data Nodes. In order to establish a cluster, we are providing discovery.seed\_hosts and cluster.initial\_master\_nodes in the elasticsearch.yml file. … --- ## [Custome script in kibana](https://discuss.elastic.co/t/custome-script-in-kibana/204856)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 6:06pm UTC](https://discuss.elastic.co/t/custome-script-in-kibana/204856 "2019-10-25T18:06:28Z")
Hi. I wanne have a table that shows streamed time per client. streamer serves the .ts files, every .ts file is 10 sec. In this table I have top 5 clients with the count of .ts files. How can I calculate this with script?… --- ## [CircuitBreakingException: \[parent\] Data too large is coming in ES (7.2.0)](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-is-coming-in-es-7-2-0/203941)
**Author:** [@kjain14](https://discuss.elastic.co/u/kjain14)\ **Replies:** 12\ **Last updated:** [October 25, 2019, 5:54pm UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-is-coming-in-es-7-2-0/203941 "2019-10-25T17:54:28Z")
We are seeking the frequent occurence of the CircuitBreakingException in our ES cluster (7.2.0). The stack-trace of the exception is as follows:- \[2019-10-16T00:34:30,850\]\[DEBUG\]\[o.e.a.a.c.n.i.TransportNodesInfoAction\]… --- ## [Make configuration only take effect for next daily index](https://discuss.elastic.co/t/make-configuration-only-take-effect-for-next-daily-index/205292)
**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\ **Replies:** 3\ **Last updated:** [October 25, 2019, 5:04pm UTC](https://discuss.elastic.co/t/make-configuration-only-take-effect-for-next-daily-index/205292 "2019-10-25T17:04:54Z")
Hi, We index into daily indices from logstash e.g. my\_index-%{+YYYY.MM.dd}. I would like to adjust the value of a setting on the elasticsearch output, but I only want that setting to take effect for the next day's index… --- ## [Invalid version of beats protocol?](https://discuss.elastic.co/t/invalid-version-of-beats-protocol/205259)
**Author:** [@kavindu\_manaram](https://discuss.elastic.co/u/kavindu_manaram)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 5:03pm UTC](https://discuss.elastic.co/t/invalid-version-of-beats-protocol/205259 "2019-10-25T17:03:35Z")
I try to used filebeat and logstash in local machine with cloud Elasticsearch. And some errors comes on filebeat and logstash both. \[2019-10-25T20:16:46,162\]\[INFO \]\[org.logstash.beats.BeatsHandler\]\[main\] \[local: 172.16… --- ## [Proper timestamp parsing](https://discuss.elastic.co/t/proper-timestamp-parsing/205293)
**Author:** [@nujojo](https://discuss.elastic.co/u/nujojo)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 4:20pm UTC](https://discuss.elastic.co/t/proper-timestamp-parsing/205293 "2019-10-25T16:20:56Z")
Hi Guys, I have a message with timestamp 2019-10-25T10:39:44.079331-04:00. I want to use grok filter and match that time, so later on can transfer to other format. What will be the best filter for match such timestamp. … --- ## [Logstash on kubernetes. Multiple output conditions](https://discuss.elastic.co/t/logstash-on-kubernetes-multiple-output-conditions/205087)
**Author:** [@Khuman](https://discuss.elastic.co/u/Khuman)\ **Replies:** 4\ **Last updated:** [October 25, 2019, 4:17pm UTC](https://discuss.elastic.co/t/logstash-on-kubernetes-multiple-output-conditions/205087 "2019-10-25T16:17:54Z")
Hi, guys! I want to manipulate output indexes in my output section. The config example below don't work. I need insert data into one index when host\_name index is present or another if not. Field kubernetes.labels.devo… --- ## [Cannot create an index in Kibana](https://discuss.elastic.co/t/cannot-create-an-index-in-kibana/205282)
**Author:** [@Barushka](https://discuss.elastic.co/u/Barushka)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 4:17pm UTC](https://discuss.elastic.co/t/cannot-create-an-index-in-kibana/205282 "2019-10-25T16:17:22Z")
Hi, I am practicing and learning ELK. I am using a new version of ELK 7.1.1 I have successfully created conf file and I used a simple log file ( few lines). I want to use it to practice coordinate maps. Although I do no… --- ## [Display numbers on y-axis without metrics](https://discuss.elastic.co/t/display-numbers-on-y-axis-without-metrics/205057)
**Author:** [@maco](https://discuss.elastic.co/u/maco)\ **Replies:** 3\ **Last updated:** [October 25, 2019, 4:09pm UTC](https://discuss.elastic.co/t/display-numbers-on-y-axis-without-metrics/205057 "2019-10-25T16:09:17Z")
Hi, I'm new to Kibana and i have a problem that i cant display just number on y-axis. So i want to have on y-axis numbers like state of device \[0 = online,1 = shutdown, 2 = offline\] and on x-axis time. I want to make … --- ## [How to filter based on the count of terms in a field](https://discuss.elastic.co/t/how-to-filter-based-on-the-count-of-terms-in-a-field/204947)
**Author:** [@pschinis](https://discuss.elastic.co/u/pschinis)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 4:06pm UTC](https://discuss.elastic.co/t/how-to-filter-based-on-the-count-of-terms-in-a-field/204947 "2019-10-25T16:06:23Z")
So I have a field that's basically just an array of tags and what I want to do is filter out any documents where the length of that tags array (i.e. the number of tags in the field) is greater than some specific number. … --- ## [Logstash 7 is not adding datestamp to index name](https://discuss.elastic.co/t/logstash-7-is-not-adding-datestamp-to-index-name/205162)
**Author:** [@kenwdelong](https://discuss.elastic.co/u/kenwdelong)\ **Replies:** 3\ **Last updated:** [October 25, 2019, 3:52pm UTC](https://discuss.elastic.co/t/logstash-7-is-not-adding-datestamp-to-index-name/205162 "2019-10-25T15:52:01Z")
I just updated my stack from 6.7.0 -\> 6.8.0 -\> 7.4.0. Everything seems find EXCEPT logstash is putting all the events into an index called "logstash". I used to date-stamp the index, like "logstash-2019-10-24". I canno… --- ## [Avoid split brain](https://discuss.elastic.co/t/avoid-split-brain/205214)
**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\ **Replies:** 3\ **Last updated:** [October 25, 2019, 3:22pm UTC](https://discuss.elastic.co/t/avoid-split-brain/205214 "2019-10-25T15:22:28Z")
I have a cluster with 5 nodes master+data: 2 nodes are into site A and 3 nodes are into site B. There is a possiblity that link from A to B can go down. How can I configure discovery.zen.minimum\_master\_nodes ? --- ## [Can I combine scroll and preference?](https://discuss.elastic.co/t/can-i-combine-scroll-and-preference/205289)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 3:04pm UTC](https://discuss.elastic.co/t/can-i-combine-scroll-and-preference/205289 "2019-10-25T15:04:25Z")
I want to get all documents in one or more specific shards. Can I combine scroll and preference (with a shard specification) to do this? If not, how would people recommend I achieve that in the best way that produces l… --- ## [Visualization on the basis of months](https://discuss.elastic.co/t/visualization-on-the-basis-of-months/204997)
**Author:** [@suraj\_kumar3](https://discuss.elastic.co/u/suraj_kumar3)\ **Replies:** 3\ **Last updated:** [October 25, 2019, 2:39pm UTC](https://discuss.elastic.co/t/visualization-on-the-basis-of-months/204997 "2019-10-25T14:39:22Z")
I want to have a visualization where x axis will represent months and y axis represents cost in that month. but, the file having the data is having separate columns for every months. how to achieve this requirement of d… --- ## [Kibana 7.4 Can i change or remove labels in management page?](https://discuss.elastic.co/t/kibana-7-4-can-i-change-or-remove-labels-in-management-page/205116)
**Author:** [@Burak\_Cayir](https://discuss.elastic.co/u/Burak_Cayir)\ **Replies:** 3\ **Last updated:** [October 25, 2019, 2:36pm UTC](https://discuss.elastic.co/t/kibana-7-4-can-i-change-or-remove-labels-in-management-page/205116 "2019-10-25T14:36:00Z")
Hello , I am using kibana 7.4 . Can i change or remove euiSideNavItem euiSideNavItem--trunk labels. I changed a lot of things in /usr/share/kibana/ path but it doesn't work. Thanks. --- ## [Basic License Authentication Types](https://discuss.elastic.co/t/basic-license-authentication-types/205277)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 2:32pm UTC](https://discuss.elastic.co/t/basic-license-authentication-types/205277 "2019-10-25T14:32:56Z")
What types of authentication are supported under the free, basic license? --- ## [Compiling Ingest Plugin Fails](https://discuss.elastic.co/t/compiling-ingest-plugin-fails/204867)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 7\ **Last updated:** [October 25, 2019, 2:10pm UTC](https://discuss.elastic.co/t/compiling-ingest-plugin-fails/204867 "2019-10-25T14:10:16Z")
I'm having a weird issue while trying to compile and package an ingest plugin for ES 7.4.0. I started from @spinscale's cookiecutter project template and was able to properly create the project and implement the busines… --- ## [\[ANNOUNCEMENT\] ingest-h3 plugin released](https://discuss.elastic.co/t/announcement-ingest-h3-plugin-released/205275)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 2:10pm UTC](https://discuss.elastic.co/t/announcement-ingest-h3-plugin-released/205275 "2019-10-25T14:10:05Z")
A new ingest processor plugin named ingest-h3 has been released. This plugin provides support for generating Uber H3 geo indexes from a given geo location point at given resolutions. Uber H3 is an hexagonal hierarchical … --- ## [Multi-availability-zones HA cluster on AWS EC2 instances](https://discuss.elastic.co/t/multi-availability-zones-ha-cluster-on-aws-ec2-instances/205164)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 4\ **Last updated:** [October 25, 2019, 2:07pm UTC](https://discuss.elastic.co/t/multi-availability-zones-ha-cluster-on-aws-ec2-instances/205164 "2019-10-25T14:07:29Z")
Hello... I am more of a developer than ops, so I am wondering how to deploy a HA cluster on AWS' EC2 instances. The thing is, I want this cluster to survive a zone failure... Here's what I have planned so far: 7.4.0 A… --- ## [Logstash and Beat float compare](https://discuss.elastic.co/t/logstash-and-beat-float-compare/205274)
**Author:** [@odlevakp](https://discuss.elastic.co/u/odlevakp)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 2:00pm UTC](https://discuss.elastic.co/t/logstash-and-beat-float-compare/205274 "2019-10-25T14:00:27Z")
I am sending metricbeat data via logstash input into elasticsearch and would like to set up a notification on low disk space. I tried something like: output { if \[type\] == "beats" and \[metricset\]\[name\] == "filesystem… --- ## [Logstash 7.3 install](https://discuss.elastic.co/t/logstash-7-3-install/205270)
**Author:** [@sobeman21](https://discuss.elastic.co/u/sobeman21)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 1:46pm UTC](https://discuss.elastic.co/t/logstash-7-3-install/205270 "2019-10-25T13:46:12Z")
I'm fairly new to the ELK stack world. It seems that when I upgraded Logstash to 7.4.1-1 it broke Elastiflow. How do I go about going back to either 7.4.0-0 or even 7.3.2? --- ## [Kibana visualization stacked vertical chart bars](https://discuss.elastic.co/t/kibana-visualization-stacked-vertical-chart-bars/204591)
**Author:** [@totochorizo](https://discuss.elastic.co/u/totochorizo)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 1:41pm UTC](https://discuss.elastic.co/t/kibana-visualization-stacked-vertical-chart-bars/204591 "2019-10-25T13:41:16Z")
I'm trying to display data on vertical chart bars using some aggregations. For example, if I have this kind of data: { "username": "toto", "role": "master", "month": "october" }, { "username": "tata", "role": "… --- ## [Ayuda para traer una vista en oracle al elk](https://discuss.elastic.co/t/ayuda-para-traer-una-vista-en-oracle-al-elk/205263)
**Author:** [@AgustinCerda](https://discuss.elastic.co/u/AgustinCerda)\ **Replies:** 0\ **Last updated:** [October 25, 2019, 1:21pm UTC](https://discuss.elastic.co/t/ayuda-para-traer-una-vista-en-oracle-al-elk/205263 "2019-10-25T13:21:49Z")
Buenas! Soy nuevo con ELK y necesitaria ayuda para llenar los datos de una vista de oracle al elk. Durante la configuracion me fueron saltando varios errores que cometi, como la duplicidad, o el defasaje de datos al rea… --- ## [CMSInitiatingOccupancyFraction not having any effect on GC trigger](https://discuss.elastic.co/t/cmsinitiatingoccupancyfraction-not-having-any-effect-on-gc-trigger/204230)
**Author:** [@Amit\_Agarwal](https://discuss.elastic.co/u/Amit_Agarwal)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 1:13pm UTC](https://discuss.elastic.co/t/cmsinitiatingoccupancyfraction-not-having-any-effect-on-gc-trigger/204230 "2019-10-25T13:13:11Z")
Hi, CMSInitiatingOccupancyFraction=75 flag does not seem to have any effect on GC. The GC starts at about 85-95 % old gen usage and makes the cluster status as yellow. I am using 1.7 version with java 8. Any idea what m… --- ## [Unassign shard](https://discuss.elastic.co/t/unassign-shard/205156)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 1:11pm UTC](https://discuss.elastic.co/t/unassign-shard/205156 "2019-10-25T13:11:19Z")
I know this has been ask many time. but can't find answer or fix my problem I had two node test cluster. I just abruptly shutdown/remove one node. all the shards are there but some are saying unassigned and r rally-m… --- ## [Geoip with private networks fails with](https://discuss.elastic.co/t/geoip-with-private-networks-fails-with/205183)
**Author:** [@aimarjg](https://discuss.elastic.co/u/aimarjg)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 1:04pm UTC](https://discuss.elastic.co/t/geoip-with-private-networks-fails-with/205183 "2019-10-25T13:04:12Z")
Hi, I'm having a trouble with mapping private IPs to their geo coordiantes, filter below always fails with error: "reason"=\>"failed to parse field \[client.geo.location\] of type \[geo\_point\]", "caused\_by"=\>{"type"=\>"pars… --- ## [Boost using caret sign](https://discuss.elastic.co/t/boost-using-caret-sign/203255)
**Author:** [@Benjamin\_Gathmann](https://discuss.elastic.co/u/Benjamin_Gathmann)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 12:55pm UTC](https://discuss.elastic.co/t/boost-using-caret-sign/203255 "2019-10-25T12:55:45Z")
I read on this website https://dzone.com/articles/23-useful-elasticsearch-example-queries that I can use the caret sign ("^") to boost a field in a multi\_match query, like so: GET /bookdb\_index/\_search { "query": { … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1815) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1817)