# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1970 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1971 --- ## [Vis plugin development - Getting custom visualization to save editor parameters](https://discuss.elastic.co/t/vis-plugin-development-getting-custom-visualization-to-save-editor-parameters/193880)
**Author:** [@esantonicolvin](https://discuss.elastic.co/u/esantonicolvin)\ **Replies:** 5\ **Last updated:** [August 8, 2019, 8:43pm UTC](https://discuss.elastic.co/t/vis-plugin-development-getting-custom-visualization-to-save-editor-parameters/193880 "2019-08-08T20:43:19Z")
Hi, I'm developing a custom visualization for Kibana using the base visualization type. For part of my visualization, I have an options template HTML file with sliders and checkboxes that are used to set some vis.params… --- ## [ES Input plugin gives invalid json data](https://discuss.elastic.co/t/es-input-plugin-gives-invalid-json-data/194500)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 5\ **Last updated:** [August 8, 2019, 8:23pm UTC](https://discuss.elastic.co/t/es-input-plugin-gives-invalid-json-data/194500 "2019-08-08T20:23:41Z")
Hi All I am using ES input and output as file, i get json data but this is multiline and not a valid json here is my conf file input { elasticsearch { hosts =\> "" index =\> "abcd" size =\> 10 scroll =\> "5m" … --- ## [How to do password variable substitution in beats install](https://discuss.elastic.co/t/how-to-do-password-variable-substitution-in-beats-install/194482)
**Author:** [@niudaye123](https://discuss.elastic.co/u/niudaye123)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 7:50pm UTC](https://discuss.elastic.co/t/how-to-do-password-variable-substitution-in-beats-install/194482 "2019-08-08T19:50:39Z")
Hi, I would like to do password variable substitution in the beats configuration, something like this: ${beats\_password}, should I set the password value in elasticsearch keystore for that? How the value get passed to b… --- ## [Is 30GB of HEAP still the max recommended limit?](https://discuss.elastic.co/t/is-30gb-of-heap-still-the-max-recommended-limit/194473)
**Author:** [@o1o1o11o1](https://discuss.elastic.co/u/o1o1o11o1)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 7:48pm UTC](https://discuss.elastic.co/t/is-30gb-of-heap-still-the-max-recommended-limit/194473 "2019-08-08T19:48:55Z")
Is GC pauses still an issue with data nodes having more than 32GB of memory allocated to Java ? --- ## [Indent any json file nested fields and make it flat](https://discuss.elastic.co/t/indent-any-json-file-nested-fields-and-make-it-flat/194447)
**Author:** [@baselai](https://discuss.elastic.co/u/baselai)\ **Replies:** 5\ **Last updated:** [August 8, 2019, 7:33pm UTC](https://discuss.elastic.co/t/indent-any-json-file-nested-fields-and-make-it-flat/194447 "2019-08-08T19:33:06Z")
I have the following json code, it has a nested fields and I'm trying to make it flat but I couldn't! Here is the source json file { "body": { "BlockName": "SA", "input": { "type": "arra… --- ## [Trying to follow Logstash tutorial](https://discuss.elastic.co/t/trying-to-follow-logstash-tutorial/194487)
**Author:** [@bschooly](https://discuss.elastic.co/u/bschooly)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 7:15pm UTC](https://discuss.elastic.co/t/trying-to-follow-logstash-tutorial/194487 "2019-08-08T19:15:47Z")
On centos 7, I've installed logstash, and beats via the repo mentioned in the docs. The very first test at "https://www.elastic.co/guide/en/logstash/current/first-event.html" works. Now I'm trying "https://www.elastic.c… --- ## [Elasticsearch optimal timeout for querying 2000-7000 indices](https://discuss.elastic.co/t/elasticsearch-optimal-timeout-for-querying-2000-7000-indices/194423)
**Author:** [@pd\_tester](https://discuss.elastic.co/u/pd_tester)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 6:57pm UTC](https://discuss.elastic.co/t/elasticsearch-optimal-timeout-for-querying-2000-7000-indices/194423 "2019-08-08T18:57:39Z")
Hi may I ask your recommendations for optimal timeout for querying 2000 - 7000 indices in cloud? Thank you --- ## [Compare data from multiple rows](https://discuss.elastic.co/t/compare-data-from-multiple-rows/194252)
**Author:** [@krattan](https://discuss.elastic.co/u/krattan)\ **Replies:** 3\ **Last updated:** [August 8, 2019, 4:52pm UTC](https://discuss.elastic.co/t/compare-data-from-multiple-rows/194252 "2019-08-08T16:52:32Z")
is it possible in kibana scripted fields to compare data from multiple rows. I have two search results 1. message = "abs" timestamp="hh.mm.ss" source="xyz" 2. message = "bsa" timestamp="hh.mm.ss" source="xyz" source … --- ## [CircuitBreaker: \[parent\] Data too large, data for \[\\]](https://discuss.elastic.co/t/circuitbreaker-parent-data-too-large-data-for-transport-request/193837)
**Author:** [@pjaikumar](https://discuss.elastic.co/u/pjaikumar)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 4:19pm UTC](https://discuss.elastic.co/t/circuitbreaker-parent-data-too-large-data-for-transport-request/193837 "2019-08-08T16:19:23Z")
Hi, We are having a cluster running in Elastic search version 7.1.1 , details below. 1.) 4 node cluster where 3 nodes act as Data node and also is master-eligible and one node configured as coordinating only node. 2.) … --- ## [How to visualize large shapefiles on kibana which are greater than 50MB](https://discuss.elastic.co/t/how-to-visualize-large-shapefiles-on-kibana-which-are-greater-than-50mb/194468)
**Author:** [@Jayasri\_Cimba](https://discuss.elastic.co/u/Jayasri_Cimba)\ **Replies:** 0\ **Last updated:** [August 8, 2019, 4:18pm UTC](https://discuss.elastic.co/t/how-to-visualize-large-shapefiles-on-kibana-which-are-greater-than-50mb/194468 "2019-08-08T16:18:24Z")
I have shapefiles data (.shp, .dbf) which I wish to see it on kibana. Unfortunately Kibana can only allow 50MB at maximum. Can you please help me providing the possbilities of doing it. --- ## [Getting to discovery from dashboard](https://discuss.elastic.co/t/getting-to-discovery-from-dashboard/193324)
**Author:** [@skf](https://discuss.elastic.co/u/skf)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 4:01pm UTC](https://discuss.elastic.co/t/getting-to-discovery-from-dashboard/193324 "2019-08-08T16:01:15Z")
I have a saved search on the Kibana Discovery page. Based on that search I've created a bar chart visualization. In the visualization there is a "Linked to Saved Search". The visualization is used in a Dashboard. Now, t… --- ## [Convert fields of datatype text to int or float in Kibana](https://discuss.elastic.co/t/convert-fields-of-datatype-text-to-int-or-float-in-kibana/194324)
**Author:** [@dundundundun](https://discuss.elastic.co/u/dundundundun)\ **Replies:** 3\ **Last updated:** [August 8, 2019, 3:48pm UTC](https://discuss.elastic.co/t/convert-fields-of-datatype-text-to-int-or-float-in-kibana/194324 "2019-08-08T15:48:11Z")
Is there a way to convert fields ingested as datatype text to an integer or float in Kibana? It would be cool to be able to convert datatypes real time when creating a visual --- ## [Error: com.mysql.cj.jdbc.Driver not loaded. Are you sure you've included the correct jdbc driver in :jdbc\_driver\_library?](https://discuss.elastic.co/t/error-com-mysql-cj-jdbc-driver-not-loaded-are-you-sure-youve-included-the-correct-jdbc-driver-in-jdbc-driver-library/194133)
**Author:** [@manideep](https://discuss.elastic.co/u/manideep)\ **Replies:** 5\ **Last updated:** [August 8, 2019, 3:46pm UTC](https://discuss.elastic.co/t/error-com-mysql-cj-jdbc-driver-not-loaded-are-you-sure-youve-included-the-correct-jdbc-driver-in-jdbc-driver-library/194133 "2019-08-08T15:46:03Z")
Hi All, I don't understand what's wrong in below conf file. input { jdbc { jdbc\_driver\_library =\> "/usr/share/logstash/myjars/mysql-connector-java-8.0.11.jar" jdbc\_driver\_class =\> "com.mysql.cj.jdbc.Driver" jdbc\_co… --- ## [Kibana \[6.8\] - How do I build Kibana from source and include a custom plugin with the build?](https://discuss.elastic.co/t/kibana-6-8-how-do-i-build-kibana-from-source-and-include-a-custom-plugin-with-the-build/194042)
**Author:** [@mamuv](https://discuss.elastic.co/u/mamuv)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 3:29pm UTC](https://discuss.elastic.co/t/kibana-6-8-how-do-i-build-kibana-from-source-and-include-a-custom-plugin-with-the-build/194042 "2019-08-08T15:29:42Z")
I have currently built a custom plugin for kibana using the generate\_plugin script. I had to modify the links in the package.json because I didn't call my root folder kibana when pulling the code down from github, howeve… --- ## [Displaying @datetime in UTC format from Elasticsearch database rollup using Kibana](https://discuss.elastic.co/t/displaying-datetime-in-utc-format-from-elasticsearch-database-rollup-using-kibana/194289)
**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\ **Replies:** 7\ **Last updated:** [August 8, 2019, 3:29pm UTC](https://discuss.elastic.co/t/displaying-datetime-in-utc-format-from-elasticsearch-database-rollup-using-kibana/194289 "2019-08-08T15:29:34Z")
Greetings! We are using Elasticsearch rollups of metricbeat data using Kibana. Instead of @datetime we would like to see the date in UTC. I cannot find an option to do this in Kibana. We just need to convert the field "@… --- ## [Nested object visualization](https://discuss.elastic.co/t/nested-object-visualization/192377)
**Author:** [@theo1991](https://discuss.elastic.co/u/theo1991)\ **Replies:** 3\ **Last updated:** [August 8, 2019, 3:21pm UTC](https://discuss.elastic.co/t/nested-object-visualization/192377 "2019-08-08T15:21:48Z")
Hello, Is it possible to select a nested object to visualize in Kibana ? I want to select the first field in this nested object. Here is my filter : grok : u'rules': \\\[(?\<\[@metadata\]\[rules\]\>\[^\\\]\]+)\\\] ruby : rules =… --- ## [How to list plugins on a logstash docker container?](https://discuss.elastic.co/t/how-to-list-plugins-on-a-logstash-docker-container/194460)
**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 3:17pm UTC](https://discuss.elastic.co/t/how-to-list-plugins-on-a-logstash-docker-container/194460 "2019-08-08T15:17:08Z")
Logstash is running in a docker container, and I'd like to list its plugins. For a VM or metal installation, Here is the command \[Ref 1\] sudo bin/plugin list How do I run this command in a Docker container? I've tried… --- ## [100% CPU after upgrade (7.1.1 to 7.3)](https://discuss.elastic.co/t/100-cpu-after-upgrade-7-1-1-to-7-3/194116)
**Author:** [@icheishvili](https://discuss.elastic.co/u/icheishvili)\ **Replies:** 3\ **Last updated:** [August 8, 2019, 3:09pm UTC](https://discuss.elastic.co/t/100-cpu-after-upgrade-7-1-1-to-7-3/194116 "2019-08-08T15:09:48Z")
After upgrading to 7.3 over the weekend, I now have a node that constantly sits at full CPU utilization. \_nodes/hot\_threads is empty. The cluster has 25 indices, 250 total shards, and is made of up 3 machines, with each … --- ## [Getting json data into Elasticsearch](https://discuss.elastic.co/t/getting-json-data-into-elasticsearch/194457)
**Author:** [@trudesea](https://discuss.elastic.co/u/trudesea)\ **Replies:** 0\ **Last updated:** [August 8, 2019, 2:57pm UTC](https://discuss.elastic.co/t/getting-json-data-into-elasticsearch/194457 "2019-08-08T14:57:45Z")
Hi all, I have a simple json (key/single value per key) file I need to get into Elasticsearch via Filebeat. I've been able to do this, but it's using the standard filebeat index, therefore the datatypes are off and I c… --- ## [Problem with add\_tag](https://discuss.elastic.co/t/problem-with-add-tag/194426)
**Author:** [@Arnodl](https://discuss.elastic.co/u/Arnodl)\ **Replies:** 8\ **Last updated:** [August 8, 2019, 2:45pm UTC](https://discuss.elastic.co/t/problem-with-add-tag/194426 "2019-08-08T14:45:10Z")
Hello, I would like to change the tags field to a lowercase field. My original message like this: { "@timestamp": "2019-08-08T13:33:38.86", "appid": "bla", "tags": \[ "SUCC:AUTHEN"\] } My filter: mutate { rename =\> { … --- ## [Failed to parse date field error](https://discuss.elastic.co/t/failed-to-parse-date-field-error/194445)
**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 2:38pm UTC](https://discuss.elastic.co/t/failed-to-parse-date-field-error/194445 "2019-08-08T14:38:35Z")
hi i get these errors with one of the indexes (microsoft defender ATP data) \[2019-08-08T15:57:01,663\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_i… --- ## [How to use Kibana as an end-user](https://discuss.elastic.co/t/how-to-use-kibana-as-an-end-user/194301)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 2\ **Last updated:** [August 8, 2019, 2:33pm UTC](https://discuss.elastic.co/t/how-to-use-kibana-as-an-end-user/194301 "2019-08-08T14:33:10Z")
I am needing to link end-users to an instructional How-To guide on using already-built Kibana dashboards. All the instructional videos and How-To's I'm finding are regarding how to build dashboards - are there any that … --- ## [Error while loading shared libraries: libjli.so / Cannot Open Shared Object File](https://discuss.elastic.co/t/error-while-loading-shared-libraries-libjli-so-cannot-open-shared-object-file/194449)
**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\ **Replies:** 0\ **Last updated:** [August 8, 2019, 2:32pm UTC](https://discuss.elastic.co/t/error-while-loading-shared-libraries-libjli-so-cannot-open-shared-object-file/194449 "2019-08-08T14:32:58Z")
Hi, I am building elasticsearch buildah image. I am installing elasticsearch rpm (elasticsearch-oss-7.0.1-x86\_64.rpm) in my buildah script. command: rpm --root $mnt\_container -Uvh https://elasticsearch/elasticsearch-os… --- ## [Очередь сообщий в Logstash при заблокированной записи в Elasticsearch](https://discuss.elastic.co/t/logstash-elasticsearch/194283)
**Author:** [@ep4sh](https://discuss.elastic.co/u/ep4sh)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 2:12pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch/194283 "2019-08-08T14:12:40Z")
Доброго дня уважаемые форумчане! Моя схема передачи логов следующая: App servers -\> AWS SQS (очередь) -\> Logstash (input =\> sqs, outsput =\> elasticsearch) -\> AWS Elasticsearch Иногда Elasticsearch блокируется на запис… --- ## [Custom vector maps with accents](https://discuss.elastic.co/t/custom-vector-maps-with-accents/194075)
**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\ **Replies:** 4\ **Last updated:** [August 8, 2019, 2:05pm UTC](https://discuss.elastic.co/t/custom-vector-maps-with-accents/194075 "2019-08-08T14:05:26Z")
Hello everyone, I was able to configure my custom vector map with Brazilian cities. I have an index that one of the fields is the city and I was able to make a join between the index field and the custom vector map. B… --- ## [Incorrect response from elasticsearch Node.js client v7.2.0 for aggregation query](https://discuss.elastic.co/t/incorrect-response-from-elasticsearch-node-js-client-v7-2-0-for-aggregation-query/194442)
**Author:** [@kartikchauhan](https://discuss.elastic.co/u/kartikchauhan)\ **Replies:** 0\ **Last updated:** [August 8, 2019, 1:45pm UTC](https://discuss.elastic.co/t/incorrect-response-from-elasticsearch-node-js-client-v7-2-0-for-aggregation-query/194442 "2019-08-08T13:45:02Z")
Hello, I am sending a nested aggregation query on a nested object using the Node.js client v7.2.0 for elasticsearch. While executing the query on Node.js client, i am getting all the records for that index and not the f… --- ## [Migrating created users from ELK cluster to another](https://discuss.elastic.co/t/migrating-created-users-from-elk-cluster-to-another/194228)
**Author:** [@ruthvicsd](https://discuss.elastic.co/u/ruthvicsd)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 1:33pm UTC](https://discuss.elastic.co/t/migrating-created-users-from-elk-cluster-to-another/194228 "2019-08-08T13:33:13Z")
Hi, Where does kibana save all the created users? Will it be in a file in local system or in elasticsearch index? Can we migrate the users created in primary cluster to secondary cluster without recreating them in the s… --- ## [Custom mapping some questions](https://discuss.elastic.co/t/custom-mapping-some-questions/194217)
**Author:** [@newbie1](https://discuss.elastic.co/u/newbie1)\ **Replies:** 5\ **Last updated:** [August 8, 2019, 1:09pm UTC](https://discuss.elastic.co/t/custom-mapping-some-questions/194217 "2019-08-08T13:09:49Z")
Hi, I work on certification and mapping exercises. I defined the following index with a custom analyzer. I wonder : Since the analyzer is defined in settings part, is it used for all fields ? If yes, could some on… --- ## [Logstash in-mem queues and input plugins](https://discuss.elastic.co/t/logstash-in-mem-queues-and-input-plugins/194427)
**Author:** [@ep4sh](https://discuss.elastic.co/u/ep4sh)\ **Replies:** 1\ **Last updated:** [August 8, 2019, 1:04pm UTC](https://discuss.elastic.co/t/logstash-in-mem-queues-and-input-plugins/194427 "2019-08-08T13:04:07Z")
Good day, dear forum users! My logs transfer scheme is as follows: App servers -\> AWS SQS (queue) -\> Logstash (input =\> sqs, output =\> elasticsearch) -\> AWS Elasticsearch Sometimes Elasticsearch is blocked for writing… --- ## [Multiple pipelines - distributor pattern](https://discuss.elastic.co/t/multiple-pipelines-distributor-pattern/194058)
**Author:** [@penguinairlines](https://discuss.elastic.co/u/penguinairlines)\ **Replies:** 21\ **Last updated:** [August 8, 2019, 12:53pm UTC](https://discuss.elastic.co/t/multiple-pipelines-distributor-pattern/194058 "2019-08-08T12:53:25Z")
Looks like I'm having a similar problem to another thread that was closed without being resolved. I am trying to use the distributor pattern. The linked doc makes some sense, but I have a few remaining questions. Rega… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1969) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1971)