# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1881 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1882 --- ## [VEGA Visualizations: index as data source](https://discuss.elastic.co/t/vega-visualizations-index-as-data-source/200696)
**Author:** [@g\_k\_b](https://discuss.elastic.co/u/g_k_b)\ **Replies:** 1\ **Last updated:** [September 23, 2019, 1:58pm UTC](https://discuss.elastic.co/t/vega-visualizations-index-as-data-source/200696 "2019-09-23T13:58:07Z")
Hi everyone! I would like to use some VEGA Visualizations for some indexed data I have on elasticsearch but my json always generates errors! The only case it works is the VEGA Sankey visulization. Examples on the VEGA … --- ## [Логирование Squid и Exchange](https://discuss.elastic.co/t/squid-exchange/200476)
**Author:** [@KOTOXJle6](https://discuss.elastic.co/u/KOTOXJle6)\ **Replies:** 8\ **Last updated:** [September 23, 2019, 1:55pm UTC](https://discuss.elastic.co/t/squid-exchange/200476 "2019-09-23T13:55:09Z")
Добрый день. Возникло желание для этих двух систем настроить долговременное хранение логов. Поиск готовых решений привел к некоторым результатам, но есть некоторые проблемы: Squid. Он генерирует огромное, для нашей и… --- ## [Dead queue log files](https://discuss.elastic.co/t/dead-queue-log-files/199969)
**Author:** [@yestoprince](https://discuss.elastic.co/u/yestoprince)\ **Replies:** 4\ **Last updated:** [September 23, 2019, 1:46pm UTC](https://discuss.elastic.co/t/dead-queue-log-files/199969 "2019-09-23T13:46:02Z")
Hi, ELK Community please help me to resolve this issue related to delete log files in dead queue. I reindex the documents logged in dead queue logs, but still the size of log files is still the same? what should i do of… --- ## [Unique count on field, not on field.keyword](https://discuss.elastic.co/t/unique-count-on-field-not-on-field-keyword/200417)
**Author:** [@Dani\_Ruse](https://discuss.elastic.co/u/Dani_Ruse)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 1:43pm UTC](https://discuss.elastic.co/t/unique-count-on-field-not-on-field-keyword/200417 "2019-09-23T13:43:13Z")
Hello! I am new to Kibana and I need to make a visualization showing the number of unique logs (with respect to the message). The logs retrieved by my search/query contain a field called "message", all of them having t… --- ## [Searching like using grep -A5](https://discuss.elastic.co/t/searching-like-using-grep-a5/200698)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 1:27pm UTC](https://discuss.elastic.co/t/searching-like-using-grep-a5/200698 "2019-09-23T13:27:24Z")
Hi Elasticians, a developer looking for feature like this: grep -A5 "ERROR" /var/log/error.log Developer can find necessary error lines from some log and after that he need to find logs which was generated before thes… --- ## [Help on Extend Kibana using new chromeNavControls plugin](https://discuss.elastic.co/t/help-on-extend-kibana-using-new-chromenavcontrols-plugin/199506)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 1:04pm UTC](https://discuss.elastic.co/t/help-on-extend-kibana-using-new-chromenavcontrols-plugin/199506 "2019-09-23T13:04:14Z")
I have an index with notifications (@timestamp, user\_id, alerte\_title, alert\_message) and i want to notify user when og in to Kibana like the following picture I will need your help (or any sample code) that can guid… --- ## [How to limit visibility of spaces](https://discuss.elastic.co/t/how-to-limit-visibility-of-spaces/200468)
**Author:** [@salomaoAndrade](https://discuss.elastic.co/u/salomaoAndrade)\ **Replies:** 5\ **Last updated:** [September 23, 2019, 12:53pm UTC](https://discuss.elastic.co/t/how-to-limit-visibility-of-spaces/200468 "2019-09-23T12:53:34Z")
Is there a way to restrict a user from viewing some spaces? I know i can set them to read only, but for what i want i would need to have users only seeing the spaces they can use, is that possible? --- ## [Elasticsearch::Transport::Transport::Errors::ServiceUnavailable: \[503\] {"ok":false,"message":"The requested deployment is currently unavailable."}](https://discuss.elastic.co/t/elasticsearch-503-ok-false-message-the-requested-deployment-is-currently-unavailable/200583)
**Author:** [@atul2685](https://discuss.elastic.co/u/atul2685)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-503-ok-false-message-the-requested-deployment-is-currently-unavailable/200583 "2019-09-23T12:52:25Z")
Hi, I don't know why I am getting the above error continuously. Error count has been reached to 1,00,000. --- ## [Using \[log\]\[file\]\[path\] in mail output for logstash](https://discuss.elastic.co/t/using-log-file-path-in-mail-output-for-logstash/200692)
**Author:** [@AndriesN](https://discuss.elastic.co/u/AndriesN)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 12:37pm UTC](https://discuss.elastic.co/t/using-log-file-path-in-mail-output-for-logstash/200692 "2019-09-23T12:37:16Z")
Hi guys, I'm using Filebeat, Logstash and Elasticsearch and I'm sending mail when a certain log file has passed a condition. Now, I would like to add the path of the log file to my mail so that the recipient knows whe… --- ## [Kibana dashboard grouping issues with domain and NT Authority](https://discuss.elastic.co/t/kibana-dashboard-grouping-issues-with-domain-and-nt-authority/199629)
**Author:** [@Yatesss](https://discuss.elastic.co/u/Yatesss)\ **Replies:** 3\ **Last updated:** [September 23, 2019, 12:26pm UTC](https://discuss.elastic.co/t/kibana-dashboard-grouping-issues-with-domain-and-nt-authority/199629 "2019-09-23T12:26:18Z")
Hi All, We use kibana for a number of estates with different domains. I've been looking at creating dashboards for each domain to be monitored as a SIEM. The basic set up I've got so far is using computer name and user… --- ## [Elasticsearch doesn't update pid file (and kibana does)](https://discuss.elastic.co/t/elasticsearch-doesnt-update-pid-file-and-kibana-does/200681)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 6\ **Last updated:** [September 23, 2019, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-update-pid-file-and-kibana-does/200681 "2019-09-23T12:24:43Z")
Hi everyone! I have a setup of the elk stack (I don't use any beats or other members of the elastic stack) that start and stop not via deamon or system ctl, rather directly from the respective bin and scripts. When I s… --- ## [Index selection based on date range](https://discuss.elastic.co/t/index-selection-based-on-date-range/199292)
**Author:** [@Bob94](https://discuss.elastic.co/u/Bob94)\ **Replies:** 1\ **Last updated:** [September 23, 2019, 11:52am UTC](https://discuss.elastic.co/t/index-selection-based-on-date-range/199292 "2019-09-23T11:52:21Z")
Hi all, I have below listed index in kibana Index-2019-09-09 Index-2019-09-10 Index-2019-09-11 Index-2019-09-12 Index-2019-09-13 Index-2019-09-14 Index-2019-09-15 My question is how or is there any api that i ca… --- ## [Compute substraction of count with Visual builder](https://discuss.elastic.co/t/compute-substraction-of-count-with-visual-builder/198379)
**Author:** [@dtu](https://discuss.elastic.co/u/dtu)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 11:52am UTC](https://discuss.elastic.co/t/compute-substraction-of-count-with-visual-builder/198379 "2019-09-23T11:52:15Z")
Hi, I'd like to know how I can compute the substraction between 2 results of count in visualbuilder. For each count, we've got a different filter. I'd like to obatin the difference between total and nb OK. Is it possi… --- ## [Elasticsearch service not working due to latest JRE update](https://discuss.elastic.co/t/elasticsearch-service-not-working-due-to-latest-jre-update/200648)
**Author:** [@Mukul\_Vaidya](https://discuss.elastic.co/u/Mukul_Vaidya)\ **Replies:** 4\ **Last updated:** [September 23, 2019, 11:29am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-working-due-to-latest-jre-update/200648 "2019-09-23T11:29:13Z")
\[2019-09-23T14:16:48,815\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[node-1\] uncaught exception in thread \[main\] org.elasticsearch.bootstrap.StartupException: ElasticsearchException\[X-Pack is not supported and… --- ## [How to get result that contains every word in the query](https://discuss.elastic.co/t/how-to-get-result-that-contains-every-word-in-the-query/200628)
**Author:** [@May](https://discuss.elastic.co/u/May)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 11:10am UTC](https://discuss.elastic.co/t/how-to-get-result-that-contains-every-word-in-the-query/200628 "2019-09-23T11:10:50Z")
Hi there, I would like have elasticsearch return only the docs that contain every word in the query. For example, if the user queries "wooden table", docs with "...wooden table ....." and "table .... with wooden...." wi… --- ## [ELK query history](https://discuss.elastic.co/t/elk-query-history/200678)
**Author:** [@thiraj89](https://discuss.elastic.co/u/thiraj89)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 11:09am UTC](https://discuss.elastic.co/t/elk-query-history/200678 "2019-09-23T11:09:47Z")
Is there is any API or options to get previously fired filter query history from ELK? --- ## [Pipeline aborted due to error.PatternError: pattern %{REMOTEIP:remoteip} not defined\>](https://discuss.elastic.co/t/pipeline-aborted-due-to-error-patternerror-pattern-remoteip-remoteip-not-defined/200677)
**Author:** [@Deepanshu\_Malik](https://discuss.elastic.co/u/Deepanshu_Malik)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 11:08am UTC](https://discuss.elastic.co/t/pipeline-aborted-due-to-error-patternerror-pattern-remoteip-remoteip-not-defined/200677 "2019-09-23T11:08:47Z")
here is my config file input { file { path =\> "/log/apache-log/access\_log" type =\> "accesslogs" } } filter { if \[type\] == "accesslogs" { grok { patterns\_dir =\> "/opt/elastic/logstash/patterns/" match =\> { "mes… --- ## [How to do some aggregation on elastic search with joining](https://discuss.elastic.co/t/how-to-do-some-aggregation-on-elastic-search-with-joining/200676)
**Author:** [@Quang\_D\_Tr\_n](https://discuss.elastic.co/u/Quang_D_Tr_n)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 11:05am UTC](https://discuss.elastic.co/t/how-to-do-some-aggregation-on-elastic-search-with-joining/200676 "2019-09-23T11:05:40Z")
I have two indices and the result will have a field to join the result sets. After joining, I want to do some count and sum aggregation on the joined result. Option 1: since join is not supported so using aggregation in… --- ## [Systemctl start elasticsearch.service. Permission denied by logger](https://discuss.elastic.co/t/systemctl-start-elasticsearch-service-permission-denied-by-logger/200659)
**Author:** [@Frank\_Wang](https://discuss.elastic.co/u/Frank_Wang)\ **Replies:** 1\ **Last updated:** [September 23, 2019, 10:53am UTC](https://discuss.elastic.co/t/systemctl-start-elasticsearch-service-permission-denied-by-logger/200659 "2019-09-23T10:53:15Z")
Journalctl got this(Permission denied): Sep 23 17:31:11 A04-R08-I245-163-BCPLLP2 elasticsearch\[35226\]: 2019-09-23 17:31:11,012 main ERROR RollingFileManager (/var/log/elasticsearch/wzhj-cfs-es\_server.json) java.io.FileN… --- ## [Ingest pipeline - How to stores the split values into separate new fields?](https://discuss.elastic.co/t/ingest-pipeline-how-to-stores-the-split-values-into-separate-new-fields/200567)
**Author:** [@chanakagl](https://discuss.elastic.co/u/chanakagl)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 9:45am UTC](https://discuss.elastic.co/t/ingest-pipeline-how-to-stores-the-split-values-into-separate-new-fields/200567 "2019-09-23T09:45:32Z")
How to stores the split values (using split processor) into three new fields? here is my pipeline but need to store split values to separate 3 fields. I have tried set array list on target\_field parameter but look likes… --- ## [AVRO Single-object encoding](https://discuss.elastic.co/t/avro-single-object-encoding/200657)
**Author:** [@pinoniq](https://discuss.elastic.co/u/pinoniq)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 9:42am UTC](https://discuss.elastic.co/t/avro-single-object-encoding/200657 "2019-09-23T09:42:29Z")
Azure allows one to store events in a Blob storage coming from an Azure Event hub. These are stores as Single-Objevt encoded avro files. The specs: https://avro.apache.org/docs/1.8.2/spec.html#N104B8 This is currently … --- ## [Log or Save user search criteria](https://discuss.elastic.co/t/log-or-save-user-search-criteria/200654)
**Author:** [@krishnapss](https://discuss.elastic.co/u/krishnapss)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 9:34am UTC](https://discuss.elastic.co/t/log-or-save-user-search-criteria/200654 "2019-09-23T09:34:01Z")
HI, We are using Elasticsearch cloud service for our products search page. We have facets in the search page. What is the best way to log or save every user selected facet items on every request? Could someone point m… --- ## [Timout error when using Rest Client multiple times in production](https://discuss.elastic.co/t/timout-error-when-using-rest-client-multiple-times-in-production/198440)
**Author:** [@venky003](https://discuss.elastic.co/u/venky003)\ **Replies:** 3\ **Last updated:** [September 23, 2019, 9:03am UTC](https://discuss.elastic.co/t/timout-error-when-using-rest-client-multiple-times-in-production/198440 "2019-09-23T09:03:13Z")
public RestClient build() { if (this.failureListener == null) { this.failureListener = new FailureListener(); } CloseableHttpAsyncClient httpClient = this.createHttpCli… --- ## [No rollover info found for \[filebeat-7.1.1\] with alias \[filebeat-alias\]](https://discuss.elastic.co/t/no-rollover-info-found-for-filebeat-7-1-1-with-alias-filebeat-alias/200644)
**Author:** [@krish2](https://discuss.elastic.co/u/krish2)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 8:33am UTC](https://discuss.elastic.co/t/no-rollover-info-found-for-filebeat-7-1-1-with-alias-filebeat-alias/200644 "2019-09-23T08:33:58Z")
Facing issue while applying ILM policy for rollover , GET filebeat-7.1.1/\_ilm/explain { "indices" : { "filebeat-7.1.1" : { "index" : "filebeat-7.1.1", "managed" : true, "policy" : "new\_policy\_1", "lifecycle\_date\_… --- ## [Version 7.0.1 : Pre-requisites for using XPackClient in production](https://discuss.elastic.co/t/version-7-0-1-pre-requisites-for-using-xpackclient-in-production/200629)
**Author:** [@Muthukumaran\_Kothand](https://discuss.elastic.co/u/Muthukumaran_Kothand)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 8:09am UTC](https://discuss.elastic.co/t/version-7-0-1-pre-requisites-for-using-xpackclient-in-production/200629 "2019-09-23T08:09:21Z")
Hi, I am planning to include some WatcherClients for our cluster for monitoring cluster-state to begin with. I am following the instructions provided here : https://www.elastic.co/guide/en/x-pack/current/api-java.html. … --- ## [Codec multiline in Input section doesn't load last line](https://discuss.elastic.co/t/codec-multiline-in-input-section-doesnt-load-last-line/200637)
**Author:** [@uma\_rengasamy](https://discuss.elastic.co/u/uma_rengasamy)\ **Replies:** 1\ **Last updated:** [September 23, 2019, 7:47am UTC](https://discuss.elastic.co/t/codec-multiline-in-input-section-doesnt-load-last-line/200637 "2019-09-23T07:47:53Z")
I have below configuration , Last line of log is not getting loaded. codec =\> multiline { pattern =\> "(^\[0-9\]{4})|(^\[A-Z,a-z\]{3})" negate =\> "true" what =\> "previous" auto\_flush\_interval =\> 60 } } --- ## [Issue on Elasticsearch authenication using Active directory](https://discuss.elastic.co/t/issue-on-elasticsearch-authenication-using-active-directory/200224)
**Author:** [@karimkun](https://discuss.elastic.co/u/karimkun)\ **Replies:** 1\ **Last updated:** [September 23, 2019, 7:28am UTC](https://discuss.elastic.co/t/issue-on-elasticsearch-authenication-using-active-directory/200224 "2019-09-23T07:28:56Z")
Hi there, I'm new to Elastic stack and I'm trying to use AD authentication in ES, by the way I have just the basic license. After configuring my ES with the following configuration : elasticsearch.yml xpack.security.… --- ## [ECE Installation script error](https://discuss.elastic.co/t/ece-installation-script-error/200288)
**Author:** [@rajuleo](https://discuss.elastic.co/u/rajuleo)\ **Replies:** 2\ **Last updated:** [September 23, 2019, 7:09am UTC](https://discuss.elastic.co/t/ece-installation-script-error/200288 "2019-09-23T07:09:01Z")
Hi Team, While running the installation bash script, I am getting below error? any insight? bash-4.2$ bash \<(curl -fsSL https://download.elastic.co/cloud/elastic-cloud-enterprise.sh) install Elastic Cloud Enterprise I… --- ## [Logstash unable to start](https://discuss.elastic.co/t/logstash-unable-to-start/200474)
**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\ **Replies:** 5\ **Last updated:** [September 23, 2019, 7:05am UTC](https://discuss.elastic.co/t/logstash-unable-to-start/200474 "2019-09-23T07:05:33Z")
I have installed logstash 7.3.2 on EC2 RHEL linux , when i try to start the service i am getting below error systemctl start logstash "Failed to start logstash.service: Unit not found." i have downloaded logstash RPM … --- ## [Problem of node detachment from the cluster](https://discuss.elastic.co/t/problem-of-node-detachment-from-the-cluster/200355)
**Author:** [@Abhishek\_Dwivedi](https://discuss.elastic.co/u/Abhishek_Dwivedi)\ **Replies:** 10\ **Last updated:** [September 23, 2019, 6:18am UTC](https://discuss.elastic.co/t/problem-of-node-detachment-from-the-cluster/200355 "2019-09-23T06:18:54Z")
Hi Concern, We have a 4 node Elasticsearch cluster which serves as the backend of Kibana for the log analysis. The current roles of the nodes in the cluster are as follows- 1 dedicated master node 3 data node (with 2… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1880) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1882)