# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1904 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1905 --- ## [Kibana OSS 7.0](https://discuss.elastic.co/t/kibana-oss-7-0/199102)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 2\ **Last updated:** [September 11, 2019, 3:56pm UTC](https://discuss.elastic.co/t/kibana-oss-7-0/199102 "2019-09-11T15:56:31Z")
elasticsearch-oss-7.0 kibana-oss-7.0 I went through the release notes for kibana-oss-7.0 and from what I can tell we should have access to Canvas as well as a few other tools in Kibana. However we currently only have … --- ## [Kibana minimalistic view](https://discuss.elastic.co/t/kibana-minimalistic-view/198628)
**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\ **Replies:** 2\ **Last updated:** [September 11, 2019, 3:53pm UTC](https://discuss.elastic.co/t/kibana-minimalistic-view/198628 "2019-09-11T15:53:04Z")
We have an unstructured ELK stack with 100s of fields, hosts and types. I like to create a minimalistic view where user can only choose a few fields and hosts and keep all the rest hidden away. Not by giving the long co… --- ## [Kibana Custom Visulaization Session Object](https://discuss.elastic.co/t/kibana-custom-visulaization-session-object/198532)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 3\ **Last updated:** [September 11, 2019, 3:46pm UTC](https://discuss.elastic.co/t/kibana-custom-visulaization-session-object/198532 "2019-09-11T15:46:45Z")
Hello Team, I am working on a use case wherei had to update the documents. i have created a custom plugin with EUIBasic Table , selection option. Now, i want to handle multiple users trying to update the same record. c… --- ## [Logstash-codec-netflow: Unsupported field in template 258 {:type=\>44999, :length=\>32} \[Cisco ASR-1001-X\]](https://discuss.elastic.co/t/logstash-codec-netflow-unsupported-field-in-template-258-type-44999-length-32-cisco-asr-1001-x/198044)
**Author:** [@smaxxx](https://discuss.elastic.co/u/smaxxx)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 3:36pm UTC](https://discuss.elastic.co/t/logstash-codec-netflow-unsupported-field-in-template-258-type-44999-length-32-cisco-asr-1001-x/198044 "2019-09-11T15:36:37Z")
Error message: \[2019-09-02T09:51:06,601\]\[WARN \]\[logstash.codecs.netflow \] Unsupported field in template 258 {:type=\>44999, :length=\>32} \[2019-09-02T09:51:06,602\]\[WARN \]\[logstash.codecs.netflow \] Can't (yet) decode flo… --- ## [How to fetch events using REST api](https://discuss.elastic.co/t/how-to-fetch-events-using-rest-api/196804)
**Author:** [@akhilsharma.in](https://discuss.elastic.co/u/akhilsharma.in)\ **Replies:** 2\ **Last updated:** [September 11, 2019, 3:29pm UTC](https://discuss.elastic.co/t/how-to-fetch-events-using-rest-api/196804 "2019-09-11T15:29:12Z")
Hello team - We have an use case where we need to get events using REST api. REST api call is protected with authorization token which we generate using a url which is a combination of some parameters. Can we create in… --- ## [How to close response or connection properly of RestClient](https://discuss.elastic.co/t/how-to-close-response-or-connection-properly-of-restclient/198760)
**Author:** [@ekotqryz](https://discuss.elastic.co/u/ekotqryz)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 3:28pm UTC](https://discuss.elastic.co/t/how-to-close-response-or-connection-properly-of-restclient/198760 "2019-09-11T15:28:25Z")
From the document https://www.elastic.co/guide/en/elasticsearch/client/java-rest/7.3/java-rest-low-usage-initialization.html, we know that we should use one instance of RestClient for the whold application, and close() R… --- ## [Find out which process sends HTTP requests](https://discuss.elastic.co/t/find-out-which-process-sends-http-requests/199080)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 4\ **Last updated:** [September 11, 2019, 3:28pm UTC](https://discuss.elastic.co/t/find-out-which-process-sends-http-requests/199080 "2019-09-11T15:28:23Z")
Hi! I've enabled security on my cluster and more or less everything went as expected, except for one node (out of 10) where I get a long warning message every 5 minutes: \[2019-09-11T11:50:02,010\]\[WARN \]\[o.e.h.AbstractH… --- ## [Dedicated Master Node Cluster Communication](https://discuss.elastic.co/t/dedicated-master-node-cluster-communication/199039)
**Author:** [@internet-media](https://discuss.elastic.co/u/internet-media)\ **Replies:** 2\ **Last updated:** [September 11, 2019, 2:47pm UTC](https://discuss.elastic.co/t/dedicated-master-node-cluster-communication/199039 "2019-09-11T14:47:19Z")
Hi there ElasticSearch Community, we consider using a dedicated master node for our cluster. The master node wont hold any data, and is not involved in search processes. We are wondering about the communication workflow… --- ## [How to handle a field in logstash filter whose type is not fixed](https://discuss.elastic.co/t/how-to-handle-a-field-in-logstash-filter-whose-type-is-not-fixed/198942)
**Author:** [@RITZ\_VERMA](https://discuss.elastic.co/u/RITZ_VERMA)\ **Replies:** 6\ **Last updated:** [September 11, 2019, 2:41pm UTC](https://discuss.elastic.co/t/how-to-handle-a-field-in-logstash-filter-whose-type-is-not-fixed/198942 "2019-09-11T14:41:22Z")
i have a 'error' field in whose type is not fixed.normally it is text but when an error occurs it changes to an object.which throws error in logstash.how can i handle that --- ## [Index size is increasing during the forcemerge](https://discuss.elastic.co/t/index-size-is-increasing-during-the-forcemerge/199073)
**Author:** [@worapojc](https://discuss.elastic.co/u/worapojc)\ **Replies:** 4\ **Last updated:** [September 11, 2019, 1:52pm UTC](https://discuss.elastic.co/t/index-size-is-increasing-during-the-forcemerge/199073 "2019-09-11T13:52:12Z")
Hi Elastic team, I'm using hot-warm-cold ILM to manage my indexes. However, in forcemerge action, I'm curious why the index size is increasing during the forcemerge. From the picture below, the primary shard size is o… --- ## [Upgraded from 7.1.0 to 7.3.1 and stoped working](https://discuss.elastic.co/t/upgraded-from-7-1-0-to-7-3-1-and-stoped-working/198709)
**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 1:42pm UTC](https://discuss.elastic.co/t/upgraded-from-7-1-0-to-7-3-1-and-stoped-working/198709 "2019-09-11T13:42:31Z")
After upgrading ES to 7.3.1 when I start ES I've got in log: What can be wrong? \[2019-09-09T16:27:45,286\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[HV8\] All shards failed for phase: \[query\] \[2019-09-09T16:27:45,286\]\[DEBUG… --- ## [Clarification on Index/Index Pattern Creation](https://discuss.elastic.co/t/clarification-on-index-index-pattern-creation/199008)
**Author:** [@Matthew\_Graville](https://discuss.elastic.co/u/Matthew_Graville)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 5:19am UTC](https://discuss.elastic.co/t/clarification-on-index-index-pattern-creation/199008 "2019-09-11T05:19:48Z")
Followed this Elastic link: Parsing your first logs with logstash works great and I can use discover to see the Apache logs in Kibana. Yay! So now, I have my Palo FW logs and have adjusted the Filebeat file from the tu… --- ## [Setting index.search.slowlog.threshold.\* is not working](https://discuss.elastic.co/t/setting-index-search-slowlog-threshold-is-not-working/199083)
**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 1:27pm UTC](https://discuss.elastic.co/t/setting-index-search-slowlog-threshold-is-not-working/199083 "2019-09-11T13:27:15Z")
I have around 400 indices. Some time back I enabled full logging by below command. curl -XPUT -H 'Content-Type: application/json' 'http://localhost:9200/\_all/\_settings?preserve\_existing=true' -d '{ "index.indexing.sl… --- ## [X-pack kibana user fails to login](https://discuss.elastic.co/t/x-pack-kibana-user-fails-to-login/198350)
**Author:** [@manosmustang](https://discuss.elastic.co/u/manosmustang)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 1:23pm UTC](https://discuss.elastic.co/t/x-pack-kibana-user-fails-to-login/198350 "2019-09-11T13:23:09Z")
Hello, I run the command elasticsearch-setup-passwords interactive and everything run smoothly. But when I am trying to login at kibana with kibana user it fails I get the below error {"statusCode":403,"error":"Forbid… --- ## [Kibana 7.3 log scale is capped at 0.1 and does not display smaller numbers](https://discuss.elastic.co/t/kibana-7-3-log-scale-is-capped-at-0-1-and-does-not-display-smaller-numbers/199037)
**Author:** [@Alex-St](https://discuss.elastic.co/u/Alex-St)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 1:11pm UTC](https://discuss.elastic.co/t/kibana-7-3-log-scale-is-capped-at-0-1-and-does-not-display-smaller-numbers/199037 "2019-09-11T13:11:00Z")
problem 1: when trying to display positive numbers like 1e-3 and lower on log scale on line plot, the minimum is capped as 0.1. Auto scale does not work well either. The only solution I found is to create a calculated fi… --- ## [Kibana Visualization UI issue - Sidebar elements overlaps each other (Kibana Version 6.2.2)](https://discuss.elastic.co/t/kibana-visualization-ui-issue-sidebar-elements-overlaps-each-other-kibana-version-6-2-2/198238)
**Author:** [@vkshriva](https://discuss.elastic.co/u/vkshriva)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 1:03pm UTC](https://discuss.elastic.co/t/kibana-visualization-ui-issue-sidebar-elements-overlaps-each-other-kibana-version-6-2-2/198238 "2019-09-11T13:03:01Z")
In one of our use case we have metrics title's with more number of characters due to which side bar is not working properly as shown in image .It is overlapping each other as shown in screen shots We have to manually … --- ## [Elasticsearch ingest pipeline drop processor no worky :(](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-drop-processor-no-worky/198904)
**Author:** [@nilsenj](https://discuss.elastic.co/u/nilsenj)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 12:55pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-drop-processor-no-worky/198904 "2019-09-11T12:55:12Z")
Hello fellow log ingestors, I have an ingest pipeline to ingest logs however I want to drop the document if it contains a certain string in the message field. I am trying to use the drop processor for this but the docum… --- ## [Elasticsearch insertion, deletion, updation](https://discuss.elastic.co/t/elasticsearch-insertion-deletion-updation/198956)
**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\ **Replies:** 6\ **Last updated:** [September 11, 2019, 12:46pm UTC](https://discuss.elastic.co/t/elasticsearch-insertion-deletion-updation/198956 "2019-09-11T12:46:53Z")
I am using java client API and established connection with elastic search and my requirement is i need to take a sql query from the user and with that sql query i need to perform CRUD operation. i have used translate met… --- ## [Sql queries with elastic search](https://discuss.elastic.co/t/sql-queries-with-elastic-search/198949)
**Author:** [@Velliyangiri](https://discuss.elastic.co/u/Velliyangiri)\ **Replies:** 5\ **Last updated:** [September 11, 2019, 12:41pm UTC](https://discuss.elastic.co/t/sql-queries-with-elastic-search/198949 "2019-09-11T12:41:27Z")
Is it possible to process elastic search using sql queries in java program? If it is yes,give a sample code for this elastic search retrieval over sql queries in java program.Please give me a solution under RestHighLevel… --- ## [Generating report for a remote index](https://discuss.elastic.co/t/generating-report-for-a-remote-index/198939)
**Author:** [@o1o1o11o1](https://discuss.elastic.co/u/o1o1o11o1)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 12:40pm UTC](https://discuss.elastic.co/t/generating-report-for-a-remote-index/198939 "2019-09-11T12:40:28Z")
Hello, We have 3 ES clusters 7.1 running in a remote-cluster setup. All works well, except generating reports from Kibana on a remote index e.g. \*:remoteindex-\*. The user has the kibana\_user and reporting\_user roles, tr… --- ## [Stutract Two values](https://discuss.elastic.co/t/stutract-two-values/198869)
**Author:** [@Arpan.S](https://discuss.elastic.co/u/Arpan.S)\ **Replies:** 6\ **Last updated:** [September 11, 2019, 12:25pm UTC](https://discuss.elastic.co/t/stutract-two-values/198869 "2019-09-11T12:25:37Z")
Hi, I want to get difference between two values. suppose I have data in following format. "\_source" : { "students" : \[ { "name" : "A", "total\_fee" : 12345, "paid\_fee" : 12344.8 }, { "name" : "B", "total\_fee" … --- ## [Elasticsearch - Logstash data update issue](https://discuss.elastic.co/t/elasticsearch-logstash-data-update-issue/198176)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 12:03pm UTC](https://discuss.elastic.co/t/elasticsearch-logstash-data-update-issue/198176 "2019-09-11T12:03:46Z")
Im using the Below JDBC code in Logstash for updating the already existing index in Elasticsearch, without duplicating rows or adding the updated row as another new row. So my issue is, The updated old row does not get… --- ## [Why does logstash not mark \[geoip\]\[location\] as "geo\_point"?](https://discuss.elastic.co/t/why-does-logstash-not-mark-geoip-location-as-geo-point/197309)
**Author:** [@Igor\_Belyakov](https://discuss.elastic.co/u/Igor_Belyakov)\ **Replies:** 2\ **Last updated:** [September 11, 2019, 12:03pm UTC](https://discuss.elastic.co/t/why-does-logstash-not-mark-geoip-location-as-geo-point/197309 "2019-09-11T12:03:24Z")
Hi. I use logstash to analyze web requests. To build a map of query, I use the geoIP module. When using this module I found a small error :nerd\_face: The documentation says: In practice, the data received does not h… --- ## [Logstash: Как правильно использовать geoip?](https://discuss.elastic.co/t/logstash-geoip/197293)
**Author:** [@Igor\_Belyakov](https://discuss.elastic.co/u/Igor_Belyakov)\ **Replies:** 2\ **Last updated:** [September 11, 2019, 11:44am UTC](https://discuss.elastic.co/t/logstash-geoip/197293 "2019-09-11T11:44:00Z")
Добрый день. В приложении logstash есть плагин: "Geoip filter". В описании плагина сказано: Однако, фактически, это поле передается без указания типа: Следовательно, невозможно построить карту. Я уже пытался указ… --- ## [Connamara fix\_protocol](https://discuss.elastic.co/t/connamara-fix-protocol/199074)
**Author:** [@kailash](https://discuss.elastic.co/u/kailash)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 11:43am UTC](https://discuss.elastic.co/t/connamara-fix-protocol/199074 "2019-09-11T11:43:21Z")
I have installed fix\_protocol, either the bundled with logstash 7.3 or from https://rubygems.org/gems/logstash-filter-fix\_protocol/ logstash-filter-fix\_protocol-0.3.3.gem. But in both case, logstash failed to find it … --- ## [How to get running time in this case?](https://discuss.elastic.co/t/how-to-get-running-time-in-this-case/197595)
**Author:** [@morinooji](https://discuss.elastic.co/u/morinooji)\ **Replies:** 4\ **Last updated:** [September 11, 2019, 11:41am UTC](https://discuss.elastic.co/t/how-to-get-running-time-in-this-case/197595 "2019-09-11T11:41:50Z")
There are two docs which are added by Application Logger (log4j). docs have same instance id (key). #1 { "instance\_id": "ee0e5890-4968-4dec-80c7-69e22ed4001b" , "message": "done", "@TimeStamp" : "2019-08-06T09:33:0… --- ## [Extract fields from a json substring](https://discuss.elastic.co/t/extract-fields-from-a-json-substring/199072)
**Author:** [@harshavmb](https://discuss.elastic.co/u/harshavmb)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 11:38am UTC](https://discuss.elastic.co/t/extract-fields-from-a-json-substring/199072 "2019-09-11T11:38:07Z")
I'm fairly new to Logstash filtering stuff. I've below json string { "changed": false, "msg": "Foo Facts: oma\_phase: prd, oma\_app: fsd, oma\_apptype: obe, oma\_componenttype: oltp, oma\_componentname: -, oma\_pea… --- ## [Wild card query is not returing expected result](https://discuss.elastic.co/t/wild-card-query-is-not-returing-expected-result/199067)
**Author:** [@imprints](https://discuss.elastic.co/u/imprints)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 11:14am UTC](https://discuss.elastic.co/t/wild-card-query-is-not-returing-expected-result/199067 "2019-09-11T11:14:26Z")
I was trying with below query { "\_source" : \["prmry\_pers\_frst\_gvn\_nm"\], "query": { "bool": { "must": { "wildcard": { "prmry\_pers\_frst\_gvn\_nm": "Ben Unit\*" } } } }, "size": "100" } Was expecting below result… --- ## [Elasticsearch to speedup social media feed](https://discuss.elastic.co/t/elasticsearch-to-speedup-social-media-feed/199064)
**Author:** [@ajayk](https://discuss.elastic.co/u/ajayk)\ **Replies:** 0\ **Last updated:** [September 11, 2019, 10:41am UTC](https://discuss.elastic.co/t/elasticsearch-to-speedup-social-media-feed/199064 "2019-09-11T10:41:35Z")
Hi, It is very well known fact that EL is used to speed-up search capabilities within a website. You can implement search based on the time frame and display the results. My thought is that let's suppose if it is a Fa… --- ## [Json Transform in Logstash](https://discuss.elastic.co/t/json-transform-in-logstash/198698)
**Author:** [@Siddharth86](https://discuss.elastic.co/u/Siddharth86)\ **Replies:** 4\ **Last updated:** [September 11, 2019, 10:34am UTC](https://discuss.elastic.co/t/json-transform-in-logstash/198698 "2019-09-11T10:34:13Z")
I have a json like this { "consumer": { "created\_at": 1566912618154, "username": "dummyapp", "id": "079c3e6d-ca35-464b-8596-b2ace5e60481" }, "service": { "created\_at": 1567173649, "connect\_timeout": 60000, "pro… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1903) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1905)