# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1830

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1831

---

## [Problems when starting elasticsearch](https://discuss.elastic.co/t/problems-when-starting-elasticsearch/202203)

<div class="topic-metadata">

**Author:** [@fgomez17](https://discuss.elastic.co/u/fgomez17)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 9:24am UTC](https://discuss.elastic.co/t/problems-when-starting-elasticsearch/202203 "2019-10-21T09:24:34Z")

</div>

Hello there, I'm working on a VM on RHEL 7.4 and I need to install ElasticSearch and Kibana. But here is my problem, elasticsearch is installed on my vm but when I try to start it i got this : I check what happened by …

---

## [How to Disable allocation awareness attributes in indices level](https://discuss.elastic.co/t/how-to-disable-allocation-awareness-attributes-in-indices-level/204415)

<div class="topic-metadata">

**Author:** [@luyuncheng](https://discuss.elastic.co/u/luyuncheng)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 9:17am UTC](https://discuss.elastic.co/t/how-to-disable-allocation-awareness-attributes-in-indices-level/204415 "2019-10-21T09:17:20Z")

</div>

When allocation-awareness set to zone. It make primary and replicas shard must split into different zone. When we need make cluster how-warm or shrink , we need move all shards which is warm indices into one zone. but w…

---

## [Need to change default time range for apm monitoring in kibana](https://discuss.elastic.co/t/need-to-change-default-time-range-for-apm-monitoring-in-kibana/202775)

<div class="topic-metadata">

**Author:** [@Shashank\_Sah](https://discuss.elastic.co/u/Shashank_Sah)\
**Replies:** 3\
**Last updated:** [October 21, 2019, 8:59am UTC](https://discuss.elastic.co/t/need-to-change-default-time-range-for-apm-monitoring-in-kibana/202775 "2019-10-21T08:59:51Z")

</div>

The default time range for apm monitoring in kibana is 24 hours and we want to change it to last 1 hour. I tried changing the 'Time picker defaults ' from kibana settings, but apm dashboard still had the same time range…

---

## [Logstash спорадически перестаёт отправлять логи в elastic](https://discuss.elastic.co/t/logstash-elastic/204231)

<div class="topic-metadata">

**Author:** [@111167](https://discuss.elastic.co/u/111167)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 8:42am UTC](https://discuss.elastic.co/t/logstash-elastic/204231 "2019-10-21T08:42:01Z")

</div>

Коллеги, доброго дня. Конфигурация: elasticsearch: 6.4.2, logstash: 6.6.1 Cluster health: { "cluster\_name" : "elastic-kibana", "status" : "yellow", "timed\_out" : false, "number\_of\_nodes" : 1, "number\_of\_data\_nodes…

---

## [Visualize garbage-collection-stats with moving average](https://discuss.elastic.co/t/visualize-garbage-collection-stats-with-moving-average/203878)

<div class="topic-metadata">

**Author:** [@rmy](https://discuss.elastic.co/u/rmy)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 7:33am UTC](https://discuss.elastic.co/t/visualize-garbage-collection-stats-with-moving-average/203878 "2019-10-21T07:33:03Z")

</div>

Hi. I have access to some simple jvm.gc-stats: |collectionTime|368177| |collectionCount|23869| I would like to create a timeline where i get, for a period - e.g 15 seconds, the number of counts done (deltaCount), the…

---

## [Kibana 7.4 Traffic Light Plugin](https://discuss.elastic.co/t/kibana-7-4-traffic-light-plugin/204211)

<div class="topic-metadata">

**Author:** [@ahmed.louati](https://discuss.elastic.co/u/ahmed.louati)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 7:31am UTC](https://discuss.elastic.co/t/kibana-7-4-traffic-light-plugin/204211 "2019-10-21T07:31:21Z")

</div>

Hi Elastic, I was working with the traffic light plugin in kibana 6.2.4 version. For now I want to use kibana 7.4.0 version but it doesn't work. Is there a traffic light in kibana 7.4.0 version ??

---

## [Using Slack for notification alerts](https://discuss.elastic.co/t/using-slack-for-notification-alerts/203724)

<div class="topic-metadata">

**Author:** [@akalra](https://discuss.elastic.co/u/akalra)\
**Replies:** 3\
**Last updated:** [October 21, 2019, 7:17am UTC](https://discuss.elastic.co/t/using-slack-for-notification-alerts/203724 "2019-10-21T07:17:34Z")

</div>

Hi, I want to create some notification alerts for a kubernetes cluster that i am monitoring and send them to a Slack channel. I am using watcher to configure these threshhold alerts. I followed the steps for creating th…

---

## [LogstashからElastic cloudに接続時に407エラー発生](https://discuss.elastic.co/t/logstash-elastic-cloud-407/204009)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 5\
**Last updated:** [October 21, 2019, 7:12am UTC](https://discuss.elastic.co/t/logstash-elastic-cloud-407/204009 "2019-10-21T07:12:11Z")

</div>

LogstashからElastic cloudに対してファイル転送を実施しようとしたところ、407エラーが発生しています。 【エラーメッセージ】 Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"https://elastic:xxxxxx@XXXXX.ap-northeast-1.aws.found.io:9243/",…

---

## [Visualization(goal)のPercentage modeを使った場合の小数点以下桁数について](https://discuss.elastic.co/t/visualization-goal-percentage-mode/203786)

<div class="topic-metadata">

**Author:** [@saku](https://discuss.elastic.co/u/saku)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 6:11am UTC](https://discuss.elastic.co/t/visualization-goal-percentage-mode/203786 "2019-10-21T06:11:51Z")

</div>

Visualization(goal)のPercentage modeを使った場合の小数点以下桁数を1桁などにすることはできるのでしょうか？ 環境 ElasticSearch : 7.4.0 Kibana : 7.4.0

---

## [Parse elastic response json into CSV](https://discuss.elastic.co/t/parse-elastic-response-json-into-csv/204347)

<div class="topic-metadata">

**Author:** [@raviep](https://discuss.elastic.co/u/raviep)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 5:59am UTC](https://discuss.elastic.co/t/parse-elastic-response-json-into-csv/204347 "2019-10-21T05:59:29Z")

</div>

Hi, I need to parse elastic search response JSON to CSV using logstash. Here I need only fields parameters to go into CSV file. { "took" : 11, "timed\_out" : false, "\_shards" : { "total" : 3, "successful" : 3, "sk…

---

## [How to use cat apis inside kibana 6.1](https://discuss.elastic.co/t/how-to-use-cat-apis-inside-kibana-6-1/203761)

<div class="topic-metadata">

**Author:** [@vvvprabhakar](https://discuss.elastic.co/u/vvvprabhakar)\
**Replies:** 4\
**Last updated:** [October 21, 2019, 5:51am UTC](https://discuss.elastic.co/t/how-to-use-cat-apis-inside-kibana-6-1/203761 "2019-10-21T05:51:42Z")

</div>

What module to import or what module to require . how can i use cat api's inside kibana plugin status plugin Or any example how to use it

---

## [Issues with grok and beats input](https://discuss.elastic.co/t/issues-with-grok-and-beats-input/204261)

<div class="topic-metadata">

**Author:** [@562uned](https://discuss.elastic.co/u/562uned)\
**Replies:** 3\
**Last updated:** [October 21, 2019, 5:26am UTC](https://discuss.elastic.co/t/issues-with-grok-and-beats-input/204261 "2019-10-21T05:26:01Z")

</div>

Hello everyone, I have been racking my brain trying to figure out what im doing wrong here.. i have a really simple input im testing with that i cannot seem to get working correctly. I have this log file that outputs "…

---

## [Trial license not basic](https://discuss.elastic.co/t/trial-license-not-basic/204206)

<div class="topic-metadata">

**Author:** [@tpetersen](https://discuss.elastic.co/u/tpetersen)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 5:06am UTC](https://discuss.elastic.co/t/trial-license-not-basic/204206 "2019-10-21T05:06:27Z")

</div>

Hi there, Been setting up HTTPS security on a cluster (version 6.8.0) and I have this in my eleasticsearch.yml xpack.license.self\_generated.type: basic But I see this when I check the logs \[2019-10-18T12:36:14,091\]\[…

---

## [Clarity on doc values vs ordinals and effect on refresh time?](https://discuss.elastic.co/t/clarity-on-doc-values-vs-ordinals-and-effect-on-refresh-time/204395)

<div class="topic-metadata">

**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\
**Replies:** 0\
**Last updated:** [October 21, 2019, 4:35am UTC](https://discuss.elastic.co/t/clarity-on-doc-values-vs-ordinals-and-effect-on-refresh-time/204395 "2019-10-21T04:35:31Z")

</div>

I have been going through elastic documentation and definitive guide to understand the use of doc values, ordinals and field data. While going through, I was unable to get a clear picture on in which scenario the one is …

---

## [How to add symbols in Metric visualizations?](https://discuss.elastic.co/t/how-to-add-symbols-in-metric-visualizations/204349)

<div class="topic-metadata">

**Author:** [@ronaldoescobar](https://discuss.elastic.co/u/ronaldoescobar)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 3:55am UTC](https://discuss.elastic.co/t/how-to-add-symbols-in-metric-visualizations/204349 "2019-10-21T03:55:43Z")

</div>

Can I add symbols like for temperatures, such as °C etc...?

---

## [Error while load logstash config](https://discuss.elastic.co/t/error-while-load-logstash-config/203967)

<div class="topic-metadata">

**Author:** [@dean92](https://discuss.elastic.co/u/dean92)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 2:36am UTC](https://discuss.elastic.co/t/error-while-load-logstash-config/203967 "2019-10-21T02:36:10Z")

</div>

hi expert, I'm still newbie in ES. I have problem with my logstash where there are some failed that no index in my ES after load the config. Below is my log file and show the failed to execute action. Please advice furt…

---

## [How to change query in SIEM](https://discuss.elastic.co/t/how-to-change-query-in-siem/204113)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 2:32am UTC](https://discuss.elastic.co/t/how-to-change-query-in-siem/204113 "2019-10-21T02:32:36Z")

</div>

Im using Elastic stack 7.4 and stup auditbeat, filebeat, packetbeat ready. Im focus on SIEM -\> network, in Top DNS domains panel, i saw , default get top root domain not real domain. ( dns.question.registered\_domain ins…

---

## [Logstashから認証プロキシ経由でファイルを転送する方法](https://discuss.elastic.co/t/logstash/204391)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 0\
**Last updated:** [October 21, 2019, 2:01am UTC](https://discuss.elastic.co/t/logstash/204391 "2019-10-21T02:01:54Z")

</div>

logstashから、認証付きプロキシに経由でElastic Searchにファイルを転送したいです。 パイプラインファイルの「proxy」に記載しても、OSの環境変数にプロキシサーバを設定しても407エラーとなってしまいます。 OSの環境変数設定は、/etc/profileのHTTP\_PROXY、HTTPS\_PROXYを指定しています。なお、OSに環境変数に設定した状態で、curlコマンドで対象のElasticseachには疎通が…

---

## [Creating a visualisation that Aggregates (combines?) 2 discrete fields in an index](https://discuss.elastic.co/t/creating-a-visualisation-that-aggregates-combines-2-discrete-fields-in-an-index/204383)

<div class="topic-metadata">

**Author:** [@shaddowofadream](https://discuss.elastic.co/u/shaddowofadream)\
**Replies:** 1\
**Last updated:** [October 21, 2019, 12:44am UTC](https://discuss.elastic.co/t/creating-a-visualisation-that-aggregates-combines-2-discrete-fields-in-an-index/204383 "2019-10-21T00:44:10Z")

</div>

We are indexing our Web Proxy logs and have a large number of usable fields... timestamp, URL visited, bytes transferred etc... What I'd like to do is create a visualisation that aggregates the URL's by the sum of byte…

---

## [Can elasticsearch-head be configured to connect to secured ES?](https://discuss.elastic.co/t/can-elasticsearch-head-be-configured-to-connect-to-secured-es/204386)

<div class="topic-metadata">

**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\
**Replies:** 0\
**Last updated:** [October 21, 2019, 12:37am UTC](https://discuss.elastic.co/t/can-elasticsearch-head-be-configured-to-connect-to-secured-es/204386 "2019-10-21T00:37:06Z")

</div>

I referred the instruction from this link: https://github.com/mobz/elasticsearch-head and tried to use 'http://localhost:9100/?auth\_user=elastic&auth\_password=changeme' but failed. Anyone has done before successfully? T…

---

## [Remove commas from number field](https://discuss.elastic.co/t/remove-commas-from-number-field/204380)

<div class="topic-metadata">

**Author:** [@sud0](https://discuss.elastic.co/u/sud0)\
**Replies:** 1\
**Last updated:** [October 20, 2019, 11:17pm UTC](https://discuss.elastic.co/t/remove-commas-from-number-field/204380 "2019-10-20T23:17:11Z")

</div>

Hi guys. I am filtering customer id using the below: (%{NUMBER:customer-id:int} On my Kibana dashboard, I see it with , and I would like to take the commas out. Example: \*\*#\*\* customer-id 389,542,059 Expected: \*\*#…

---

## [Logstash split string issues when parsing text](https://discuss.elastic.co/t/logstash-split-string-issues-when-parsing-text/204308)

<div class="topic-metadata">

**Author:** [@Srikanth\_Reddy](https://discuss.elastic.co/u/Srikanth_Reddy)\
**Replies:** 1\
**Last updated:** [October 20, 2019, 8:57pm UTC](https://discuss.elastic.co/t/logstash-split-string-issues-when-parsing-text/204308 "2019-10-20T20:57:05Z")

</div>

Hi, I have message is in bellow format TIME: 2019-10-19T11:48:40.896687Z USER@HOST: TEST\[TEST\] @ \[172.30.1.71\] ID: 1130779 QUERY\_TIME: 1.611727 LOCK\_TIME: 0.000079 ROWS\_SENT: 5 ROWS\_EXAMINED: 13056 SET TIMESTAMP=15…

---

## [Why one node has no shard at all](https://discuss.elastic.co/t/why-one-node-has-no-shard-at-all/204348)

<div class="topic-metadata">

**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\
**Replies:** 2\
**Last updated:** [October 20, 2019, 8:53pm UTC](https://discuss.elastic.co/t/why-one-node-has-no-shard-at-all/204348 "2019-10-20T20:53:59Z")

</div>

One index was created as Unassigned: /localhost:9200/\_cat/shards?v index shard prirep state docs store ip node .kibana\_task\_manager\_1 0 p STARTED 2 46.1kb…

---

## [Не работает elastic после перезапуска сервера](https://discuss.elastic.co/t/elastic/204357)

<div class="topic-metadata">

**Author:** [@Vivaldy](https://discuss.elastic.co/u/Vivaldy)\
**Replies:** 2\
**Last updated:** [October 20, 2019, 8:44pm UTC](https://discuss.elastic.co/t/elastic/204357 "2019-10-20T20:44:34Z")

</div>

Подскажите в какую сторону искать и в чем может быть дело? Если перезагрузить сервер - то именно elasticsearch лежит После команды service elasticsearch restart - начинает нормально работать, но хочется привезти к норм…

---

## [Received ban for the parent](https://discuss.elastic.co/t/received-ban-for-the-parent/204376)

<div class="topic-metadata">

**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\
**Replies:** 1\
**Last updated:** [October 20, 2019, 8:08pm UTC](https://discuss.elastic.co/t/received-ban-for-the-parent/204376 "2019-10-20T20:08:20Z")

</div>

Hi guys, Periodically in debug logs we can see: \[2019-10-20T18:07:48,342\]\[DEBUG\]\[o.e.a.a.c.n.t.c.TransportCancelTasksAction\] \[node-00\] Received ban for the parent \[s8jcicF9TDy\_iIzFgH07zw:10741071\] on the node \[A9AdXLb5…

---

## [Filter for value icon not shown](https://discuss.elastic.co/t/filter-for-value-icon-not-shown/202713)

<div class="topic-metadata">

**Author:** [@nobound](https://discuss.elastic.co/u/nobound)\
**Replies:** 2\
**Last updated:** [October 20, 2019, 6:36pm UTC](https://discuss.elastic.co/t/filter-for-value-icon-not-shown/202713 "2019-10-20T18:36:06Z")

</div>

Hi, From the Kibana, I have defined two index patterns; one is for specific logs (e.g. access-gateway-), and another one includes multiple different logs (e.g. access-). I go the "Discover" tag and select access-gatewa…

---

## [Change type field in logstash](https://discuss.elastic.co/t/change-type-field-in-logstash/204368)

<div class="topic-metadata">

**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\
**Replies:** 1\
**Last updated:** [October 20, 2019, 6:02pm UTC](https://discuss.elastic.co/t/change-type-field-in-logstash/204368 "2019-10-20T18:02:27Z")

</div>

Hi. I wanna have sum of network usage per client in nginx. This is the logstash before changes: grok { match =\> { "message" =\> "%{IP:clientip} ... %{NUMBER:bytes}" } } so at first I changed the NUMBER to INT: grok { …

---

## ["node.name" value not being applied](https://discuss.elastic.co/t/node-name-value-not-being-applied/204367)

<div class="topic-metadata">

**Author:** [@mcohen](https://discuss.elastic.co/u/mcohen)\
**Replies:** 1\
**Last updated:** [October 20, 2019, 5:08pm UTC](https://discuss.elastic.co/t/node-name-value-not-being-applied/204367 "2019-10-20T17:08:22Z")

</div>

I'm testing with an internal cluster, 3 nodes on the same VM. Env: Ubuntu 18.04.3 LTS, elasticsearch-7.3.2-amd64.deb (Debian) To simulate multiple nodes, I've replicated the /etc/elasticsearch directory, results are as…

---

## [Sort aggregations by sum of sub aggregations?](https://discuss.elastic.co/t/sort-aggregations-by-sum-of-sub-aggregations/204329)

<div class="topic-metadata">

**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\
**Replies:** 2\
**Last updated:** [October 20, 2019, 3:35pm UTC](https://discuss.elastic.co/t/sort-aggregations-by-sum-of-sub-aggregations/204329 "2019-10-20T15:35:11Z")

</div>

Hi, The query at the bottom of this thread returns data in this shape, ordered by the key value asc: Is there a way for me to sort the aggregations by the sum of the user\_count values per key? I want the data to sta…

---

## [Snapshot name patterns](https://discuss.elastic.co/t/snapshot-name-patterns/204314)

<div class="topic-metadata">

**Author:** [@wyllys66](https://discuss.elastic.co/u/wyllys66)\
**Replies:** 2\
**Last updated:** [October 20, 2019, 1:30pm UTC](https://discuss.elastic.co/t/snapshot-name-patterns/204314 "2019-10-20T13:30:49Z")

</div>

In elasticsearch 7.4.0, I have a snapshot policy that has the snapshot name pattern set to ""\<snapshot-{now/d}\>", however when the snapshots are taken, they have extra characters appended to the name, for example: snap…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1829)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1831)
