# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1959

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1960

---

## [How to change kibana heap size](https://discuss.elastic.co/t/how-to-change-kibana-heap-size/194979)

<div class="topic-metadata">

**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\
**Replies:** 2\
**Last updated:** [August 14, 2019, 6:22am UTC](https://discuss.elastic.co/t/how-to-change-kibana-heap-size/194979 "2019-08-14T06:22:52Z")

</div>

Hi, I'm using elk stack of version 5.5 Any idea on how to set the heapsize for kibana. I cant able to find any settings related to heap in kibana.yml

---

## [How to create daily Indices in elastic search 7.1.0?](https://discuss.elastic.co/t/how-to-create-daily-indices-in-elastic-search-7-1-0/193338)

<div class="topic-metadata">

**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\
**Replies:** 4\
**Last updated:** [August 14, 2019, 7:48pm UTC](https://discuss.elastic.co/t/how-to-create-daily-indices-in-elastic-search-7-1-0/193338 "2019-08-14T19:48:58Z")

</div>

Hi, I am using ELK stack version 7.1.0 and i send my logs using logstash. Now, All my logs are getting into one index. I want create index daily basis and store those logs of that particular day in that particular ind…

---

## [Export CSV Date Incorrect](https://discuss.elastic.co/t/export-csv-date-incorrect/195085)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 3\
**Last updated:** [August 14, 2019, 7:14pm UTC](https://discuss.elastic.co/t/export-csv-date-incorrect/195085 "2019-08-14T19:14:52Z")

</div>

When exporting a CSV with dates in it, the dates are not correct. What's going on here?? Kibana Output CSV Export

---

## [Search a string in Kibana](https://discuss.elastic.co/t/search-a-string-in-kibana/193761)

<div class="topic-metadata">

**Author:** [@koushickvikram](https://discuss.elastic.co/u/koushickvikram)\
**Replies:** 1\
**Last updated:** [August 14, 2019, 6:27pm UTC](https://discuss.elastic.co/t/search-a-string-in-kibana/193761 "2019-08-14T18:27:51Z")

</div>

Hi, I need a DSL query to filter some value from the requests. From the below requests i need to exclude requests which contains .html,.gif,.css,.jpg at the ending. i need only the requests which are without those exte…

---

## [Resources to learn ruby for use in logstash](https://discuss.elastic.co/t/resources-to-learn-ruby-for-use-in-logstash/195247)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 1\
**Last updated:** [August 14, 2019, 5:56pm UTC](https://discuss.elastic.co/t/resources-to-learn-ruby-for-use-in-logstash/195247 "2019-08-14T17:56:29Z")

</div>

Looking for a path to knowledge.... I don't know Ruby, but if I study a "Ruby for Dummies" type book, it probably won't have any specifics for logstash and will probably teach things never used in logstash. I think I'm…

---

## [Need help with "logstash-input-okta\_enterprise" plugin](https://discuss.elastic.co/t/need-help-with-logstash-input-okta-enterprise-plugin/195246)

<div class="topic-metadata">

**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\
**Replies:** 0\
**Last updated:** [August 14, 2019, 5:32pm UTC](https://discuss.elastic.co/t/need-help-with-logstash-input-okta-enterprise-plugin/195246 "2019-08-14T17:32:43Z")

</div>

I am not that familiar with ruby but I did manage to build the jruby gem. That one did not work and I am going to try again to get this plugin installed. I am hoping for guidance on a few steps to set up this plugin. I…

---

## [Elasticsearch SQL in Kibana](https://discuss.elastic.co/t/elasticsearch-sql-in-kibana/193864)

<div class="topic-metadata">

**Author:** [@cbmurphy87](https://discuss.elastic.co/u/cbmurphy87)\
**Replies:** 5\
**Last updated:** [August 14, 2019, 5:28pm UTC](https://discuss.elastic.co/t/elasticsearch-sql-in-kibana/193864 "2019-08-14T17:28:34Z")

</div>

I'm trying to do a SUM on a query, and can't seem to get anything to work. Perhaps I'm using the wrong syntax, but I keep getting the error message "Cannot use non-grouped column". I'm using metricbeat to collect metric…

---

## [Rsyslog Para Filebeat através de udp](https://discuss.elastic.co/t/rsyslog-para-filebeat-atraves-de-udp/194269)

<div class="topic-metadata">

**Author:** [@Joao\_Goncalves](https://discuss.elastic.co/u/Joao_Goncalves)\
**Replies:** 6\
**Last updated:** [August 14, 2019, 5:24pm UTC](https://discuss.elastic.co/t/rsyslog-para-filebeat-atraves-de-udp/194269 "2019-08-14T17:24:37Z")

</div>

Boa tarde, Estou a tentar enviar logs através de udp (rsyslog) numa máquina ubuntu (192.168.75.138 pel a porta 5141)para outra máquina (filebeat) debian (192.168.75.177) porém mesmo com o firewall configurado não ha com…

---

## [Compile nodegit on ppc64le for Kibana 7.2.1](https://discuss.elastic.co/t/compile-nodegit-on-ppc64le-for-kibana-7-2-1/195210)

<div class="topic-metadata">

**Author:** [@cspRules](https://discuss.elastic.co/u/cspRules)\
**Replies:** 2\
**Last updated:** [August 14, 2019, 5:24pm UTC](https://discuss.elastic.co/t/compile-nodegit-on-ppc64le-for-kibana-7-2-1/195210 "2019-08-14T17:24:14Z")

</div>

Hi, I tried to build Kibana 7.2.1 to run on ppc64le platform. But I run into issue on building nodegit. npm install and then npm get modular loading error and npm rebuild binary gives error on \[nodegit\] Configuring l…

---

## [Missing aggregations field in response](https://discuss.elastic.co/t/missing-aggregations-field-in-response/193189)

<div class="topic-metadata">

**Author:** [@julioolvr](https://discuss.elastic.co/u/julioolvr)\
**Replies:** 2\
**Last updated:** [August 14, 2019, 5:15pm UTC](https://discuss.elastic.co/t/missing-aggregations-field-in-response/193189 "2019-08-14T17:15:55Z")

</div>

Hi, We ran into an error where a query to ElasticSearch that included aggregations didn't return the aggregations field in the response at all. So for a query like this: { "size": 0, "query": { "bool"…

---

## [Why isn't the RestHighLevelClient class included in Elasticsearch 7.3.0?](https://discuss.elastic.co/t/why-isnt-the-resthighlevelclient-class-included-in-elasticsearch-7-3-0/195081)

<div class="topic-metadata">

**Author:** [@mathwin](https://discuss.elastic.co/u/mathwin)\
**Replies:** 4\
**Last updated:** [August 14, 2019, 5:10pm UTC](https://discuss.elastic.co/t/why-isnt-the-resthighlevelclient-class-included-in-elasticsearch-7-3-0/195081 "2019-08-14T17:10:05Z")

</div>

Let me see if I understand the situation fully. The 7.0.0 release of Elastic has deprecated the old TransportClient class, and the NodeClient class was deprecated all the way back in 2016. No alternative is present in …

---

## [Excluding Duplicate Values in Kibana Filter](https://discuss.elastic.co/t/excluding-duplicate-values-in-kibana-filter/195108)

<div class="topic-metadata">

**Author:** [@misiakj](https://discuss.elastic.co/u/misiakj)\
**Replies:** 2\
**Last updated:** [August 14, 2019, 4:58pm UTC](https://discuss.elastic.co/t/excluding-duplicate-values-in-kibana-filter/195108 "2019-08-14T16:58:09Z")

</div>

I have an index that looks similar to the below (it really has a number of additional fields that aren't relevant for this post) case\_id: int group: string unique\_id: case\_id + group value: int for any one case\_id v…

---

## [Including space / multiple entries with GROK](https://discuss.elastic.co/t/including-space-multiple-entries-with-grok/195217)

<div class="topic-metadata">

**Author:** [@cjb312](https://discuss.elastic.co/u/cjb312)\
**Replies:** 4\
**Last updated:** [August 14, 2019, 4:45pm UTC](https://discuss.elastic.co/t/including-space-multiple-entries-with-grok/195217 "2019-08-14T16:45:34Z")

</div>

So I'm using GROK to clean up some log files into Kibana but there's a couple areas im struggling with. How can get the value of to a field?: X-FORWARDED-FOR -\> (ip address) Also I have another instance of multiple em…

---

## [How to change kibana logo and login screen page in Elastic cloud](https://discuss.elastic.co/t/how-to-change-kibana-logo-and-login-screen-page-in-elastic-cloud/195144)

<div class="topic-metadata">

**Author:** [@vinay.rao](https://discuss.elastic.co/u/vinay.rao)\
**Replies:** 1\
**Last updated:** [August 14, 2019, 4:14pm UTC](https://discuss.elastic.co/t/how-to-change-kibana-logo-and-login-screen-page-in-elastic-cloud/195144 "2019-08-14T16:14:15Z")

</div>

Dear Team, Required your help to change the Kibana Logo and Login page look as well in Elastic Cloud. Kindly provide your inputs on this request.

---

## [Is there a way to set Kibana's default timezone to UTC from the yml file?](https://discuss.elastic.co/t/is-there-a-way-to-set-kibanas-default-timezone-to-utc-from-the-yml-file/193976)

<div class="topic-metadata">

**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\
**Replies:** 4\
**Last updated:** [August 14, 2019, 3:56pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-set-kibanas-default-timezone-to-utc-from-the-yml-file/193976 "2019-08-14T15:56:18Z")

</div>

We are using Kibana 6.5.4, and have an issue where our data which is timestamped in UTC from our applications, is showing up incorrectly in Kibana. I've found this is because the Kibana settings default to using the brow…

---

## [Size of geohash circle when creating a Map visualisation](https://discuss.elastic.co/t/size-of-geohash-circle-when-creating-a-map-visualisation/195202)

<div class="topic-metadata">

**Author:** [@bthomas](https://discuss.elastic.co/u/bthomas)\
**Replies:** 1\
**Last updated:** [August 14, 2019, 4:00pm UTC](https://discuss.elastic.co/t/size-of-geohash-circle-when-creating-a-map-visualisation/195202 "2019-08-14T16:00:00Z")

</div>

Hi, I'm trying to create a map visualisation (ideally a heatmap, but shaded circles will do nicely) based on a geo\_point field in my index. I've got a small index (300~ documents) that contain a "Location" geo\_point fie…

---

## [Reverse Proxy](https://discuss.elastic.co/t/reverse-proxy/194660)

<div class="topic-metadata">

**Author:** [@pmatreides](https://discuss.elastic.co/u/pmatreides)\
**Replies:** 3\
**Last updated:** [August 14, 2019, 3:54pm UTC](https://discuss.elastic.co/t/reverse-proxy/194660 "2019-08-14T15:54:54Z")

</div>

I have successfully installed a production version of ELK. I'm using HAProxy as a reverse proxy to route traffic from 443 to 5601 for kibana. I can do a wget and pull the webpage down but can not reach the kibana landi…

---

## [Kibana 7.3.0: show most recent values and combine multiple queries in a table?](https://discuss.elastic.co/t/kibana-7-3-0-show-most-recent-values-and-combine-multiple-queries-in-a-table/195208)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [August 14, 2019, 3:51pm UTC](https://discuss.elastic.co/t/kibana-7-3-0-show-most-recent-values-and-combine-multiple-queries-in-a-table/195208 "2019-08-14T15:51:43Z")

</div>

Hi, I want to create a live table which shows the current status of a system. In this particular example I want to create a table which is listing the node status of my kubernetes cluster. There may be many events p…

---

## [Connecting to remote ES index from behind a proxy](https://discuss.elastic.co/t/connecting-to-remote-es-index-from-behind-a-proxy/195233)

<div class="topic-metadata">

**Author:** [@pmadley](https://discuss.elastic.co/u/pmadley)\
**Replies:** 0\
**Last updated:** [August 14, 2019, 3:49pm UTC](https://discuss.elastic.co/t/connecting-to-remote-es-index-from-behind-a-proxy/195233 "2019-08-14T15:49:23Z")

</div>

Issue: How to connect to a remote IP-restricted ES server from behind a company proxy Background: We need to connect to a 3rd party IP-restricted Elasticsearch server. Our local proxy IP is whitelisted at their end, i…

---

## [Investigating reindexing error (1.7 -\> 5.6)](https://discuss.elastic.co/t/investigating-reindexing-error-1-7-5-6/195232)

<div class="topic-metadata">

**Author:** [@maniard](https://discuss.elastic.co/u/maniard)\
**Replies:** 0\
**Last updated:** [August 14, 2019, 3:44pm UTC](https://discuss.elastic.co/t/investigating-reindexing-error-1-7-5-6/195232 "2019-08-14T15:44:33Z")

</div>

Hi, I am trying to reindex my 1.7.5 ES cluster into a 5.6 one using Reindex API. While most indices are migrated successfully, for one of them I am getting the following error: org.elasticsearch.ElasticsearchException:…

---

## [Kibana - discover - group by exception.ClassName](https://discuss.elastic.co/t/kibana-discover-group-by-exception-classname/192617)

<div class="topic-metadata">

**Author:** [@jross](https://discuss.elastic.co/u/jross)\
**Replies:** 3\
**Last updated:** [August 14, 2019, 3:37pm UTC](https://discuss.elastic.co/t/kibana-discover-group-by-exception-classname/192617 "2019-08-14T15:37:37Z")

</div>

Hi, I would like to visualize the logs with every 'exception.ClassName' different, I mean, if I have 30 logs with the same 'exception.ClassName', it should appear one time, because otherwise, it's very difficult to mana…

---

## [Can Kibana 7.1.1 work with Elasticsearch 7.2.1](https://discuss.elastic.co/t/can-kibana-7-1-1-work-with-elasticsearch-7-2-1/195207)

<div class="topic-metadata">

**Author:** [@cspRules](https://discuss.elastic.co/u/cspRules)\
**Replies:** 1\
**Last updated:** [August 14, 2019, 3:34pm UTC](https://discuss.elastic.co/t/can-kibana-7-1-1-work-with-elasticsearch-7-2-1/195207 "2019-08-14T15:34:56Z")

</div>

Hi, Although the support matrix said Kibana and Elasticsearch need to be the same version, I am just wondering can Kibana 7.1.1 work with Elasticsearch 7.2.1? I am asking this because I can't get Kibana 7.2.1 working o…

---

## [AWS London Region now live on Elasticsearch Service](https://discuss.elastic.co/t/aws-london-region-now-live-on-elasticsearch-service/195229)

<div class="topic-metadata">

**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\
**Replies:** 0\
**Last updated:** [August 14, 2019, 3:23pm UTC](https://discuss.elastic.co/t/aws-london-region-now-live-on-elasticsearch-service/195229 "2019-08-14T15:23:52Z")

</div>

AWS London Region now live on Elasticsearch Service We're excited to bring the official Elasticsearch Service to the London region on AWS. This will provide our growing set of customers in the United Kingdom and across …

---

## [Retrieve data from API, split response array and handle duplicates in Logstash](https://discuss.elastic.co/t/retrieve-data-from-api-split-response-array-and-handle-duplicates-in-logstash/195225)

<div class="topic-metadata">

**Author:** [@frv](https://discuss.elastic.co/u/frv)\
**Replies:** 0\
**Last updated:** [August 14, 2019, 3:09pm UTC](https://discuss.elastic.co/t/retrieve-data-from-api-split-response-array-and-handle-duplicates-in-logstash/195225 "2019-08-14T15:09:21Z")

</div>

I am working on an application that pulls in news articles from an API using the http\_poller plugin for Logstash. I want the data to be searchable in Elasticsearch. The basic setup that I have so far is working properly…

---

## [How to get Today's log in kibana dev Tools](https://discuss.elastic.co/t/how-to-get-todays-log-in-kibana-dev-tools/195218)

<div class="topic-metadata">

**Author:** [@Fosiul\_Alam](https://discuss.elastic.co/u/Fosiul_Alam)\
**Replies:** 3\
**Last updated:** [August 14, 2019, 2:54pm UTC](https://discuss.elastic.co/t/how-to-get-todays-log-in-kibana-dev-tools/195218 "2019-08-14T14:54:51Z")

</div>

I am using Kibana dev tools to return all lines by using bellow Query in DEV tools, but instead of giving all matches, its gives only dates from when in installed this kibana. GET filebeat-\*/\_search { "query": { "…

---

## [Grok Pattern not matching in Logstash, but matches in Grok Debuggger](https://discuss.elastic.co/t/grok-pattern-not-matching-in-logstash-but-matches-in-grok-debuggger/194985)

<div class="topic-metadata">

**Author:** [@man0l](https://discuss.elastic.co/u/man0l)\
**Replies:** 8\
**Last updated:** [August 14, 2019, 2:52pm UTC](https://discuss.elastic.co/t/grok-pattern-not-matching-in-logstash-but-matches-in-grok-debuggger/194985 "2019-08-14T14:52:17Z")

</div>

Hi, I have this grok pattern: (?\<timestamp\>%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{TIME})%{SPACE}%{LOGLEVEL:level}%{SPACE}%{NUMBER:pid} --- \\\[%{SPACE}(?\<thread\>\[A-Za-z0-9-\]+)\\\] \[A-Za-z0-9.\]\*\\.(?\<class\>\[A-Za-z0-9#\_\]+)\\s\*:%{S…

---

## [\_cat/indices data](https://discuss.elastic.co/t/cat-indices-data/195070)

<div class="topic-metadata">

**Author:** [@rorixrebel](https://discuss.elastic.co/u/rorixrebel)\
**Replies:** 6\
**Last updated:** [August 14, 2019, 2:24pm UTC](https://discuss.elastic.co/t/cat-indices-data/195070 "2019-08-14T14:24:56Z")

</div>

so i'd like to start visualize some of the data from the \_cat apis like indices, volume and replicas, etc. tried to see if i could scrape the info from .monitoring-es but no dice, is the data from the api somewhere we c…

---

## [Logstash network output blocking - 7.3.0](https://discuss.elastic.co/t/logstash-network-output-blocking-7-3-0/195037)

<div class="topic-metadata">

**Author:** [@espenk](https://discuss.elastic.co/u/espenk)\
**Replies:** 3\
**Last updated:** [August 14, 2019, 2:14pm UTC](https://discuss.elastic.co/t/logstash-network-output-blocking-7-3-0/195037 "2019-08-14T14:14:58Z")

</div>

Hi. I'm currently having issues with a Logstash instance not being utilized properly. Maximum load is ~ 50% on a 18 core VM running CentOS 7.6.1810. If I replace tcp output{} with file output{} , the load increase to ~90…

---

## [Multiple \`sort\` using with only one \`search\_after\`](https://discuss.elastic.co/t/multiple-sort-using-with-only-one-search-after/195213)

<div class="topic-metadata">

**Author:** [@coExp](https://discuss.elastic.co/u/coExp)\
**Replies:** 0\
**Last updated:** [August 14, 2019, 1:24pm UTC](https://discuss.elastic.co/t/multiple-sort-using-with-only-one-search-after/195213 "2019-08-14T13:24:16Z")

</div>

Hi everyone, I sort my results on field name witch is not unique, and the field uuid (unique id): "sort": \[ { "name": {"order": "desc"} }, { "uuid": {"order": "asc"} } \] But I would like to search after the field uuid …

---

## [S3 input plugin. Parse again an S3 bucket](https://discuss.elastic.co/t/s3-input-plugin-parse-again-an-s3-bucket/194397)

<div class="topic-metadata">

**Author:** [@Adrien\_Bigot](https://discuss.elastic.co/u/Adrien_Bigot)\
**Replies:** 2\
**Last updated:** [August 14, 2019, 1:15pm UTC](https://discuss.elastic.co/t/s3-input-plugin-parse-again-an-s3-bucket/194397 "2019-08-14T13:15:03Z")

</div>

Hello, I have an S3 bucket filled with kinesis logs. I want to re scan entirely this bucket but I didn't manage to do it. I've tried to delete the sincedb file ( /var/lib/logstash/plugins/inputs/s3/sincedb\_xxxxxxxxxxx…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1958)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1960)
