# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1995 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1996 --- ## [Snapshot to the mounted NFS, without path.repo parameter in elasticsearch.yml](https://discuss.elastic.co/t/snapshot-to-the-mounted-nfs-without-path-repo-parameter-in-elasticsearch-yml/192735)
**Author:** [@eli.bogomolnyi](https://discuss.elastic.co/u/eli.bogomolnyi)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 5:36pm UTC](https://discuss.elastic.co/t/snapshot-to-the-mounted-nfs-without-path-repo-parameter-in-elasticsearch-yml/192735 "2019-07-29T17:36:45Z")
I have Elastic Cluster (version 5.6.0) with 9 data nodes and 3 master-eligible client nodes. I want to backup date to the shared storage (NFS). So I am going to mount NFS to each node to the folder /mnt/backup and do s… --- ## [savedObjects shared across spaces](https://discuss.elastic.co/t/savedobjects-shared-across-spaces/192681)
**Author:** [@Matheu](https://discuss.elastic.co/u/Matheu)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 5:31pm UTC](https://discuss.elastic.co/t/savedobjects-shared-across-spaces/192681 "2019-07-29T17:31:09Z")
Is it possible to share savedObject across spaces...? --- ## [Reindex with pipeline not working with Rollup Index](https://discuss.elastic.co/t/reindex-with-pipeline-not-working-with-rollup-index/192753)
**Author:** [@John\_Guzman](https://discuss.elastic.co/u/John_Guzman)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 5:22pm UTC](https://discuss.elastic.co/t/reindex-with-pipeline-not-working-with-rollup-index/192753 "2019-07-29T17:22:22Z")
Hello! Im trying to reindex a rollup index with a pipeline, but the job is not recognizing any field. It shows the following error: field \[beat\] not present as part of path \[beat.hostname.keyword.terms.\_count\]. for each… --- ## [Logstash consuming too much bandwidth](https://discuss.elastic.co/t/logstash-consuming-too-much-bandwidth/190593)
**Author:** [@Jitendra\_Kumhar](https://discuss.elastic.co/u/Jitendra_Kumhar)\ **Replies:** 11\ **Last updated:** [July 29, 2019, 5:17pm UTC](https://discuss.elastic.co/t/logstash-consuming-too-much-bandwidth/190593 "2019-07-29T17:17:08Z")
Hello, I am sending logs from filebeat to Logstash and then from logstash to ElasticSearch. The problem is Logstash is consuming too much bandwidth.I have attached network usage graph of logstash server. (green is inc… --- ## [Does Kivana support linear regression or box plot?](https://discuss.elastic.co/t/does-kivana-support-linear-regression-or-box-plot/192674)
**Author:** [@enzobb](https://discuss.elastic.co/u/enzobb)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 5:13pm UTC](https://discuss.elastic.co/t/does-kivana-support-linear-regression-or-box-plot/192674 "2019-07-29T17:13:06Z")
Hi all, I am planning to build dashboards using Kibana. I checked out many of the features provided by Kivana. However, I did not find out whether linear regression or boxplot functions were provided. Does Kivana sup… --- ## [Public SSL'ed access with Ingress not working](https://discuss.elastic.co/t/public-ssled-access-with-ingress-not-working/189634)
**Author:** [@tadgh](https://discuss.elastic.co/u/tadgh)\ **Replies:** 9\ **Last updated:** [July 29, 2019, 4:25pm UTC](https://discuss.elastic.co/t/public-ssled-access-with-ingress-not-working/189634 "2019-07-29T16:25:53Z")
hey all, I have followed the quickstart guide from master branch of the docs, and all works perfectly well when i set the network type to LoadBalancer for kibana and elastic. I am able to curl the endpoints (with the sel… --- ## [ECE install error with timeout how to change the time with 600000 milliseconds](https://discuss.elastic.co/t/ece-install-error-with-timeout-how-to-change-the-time-with-600000-milliseconds/191123)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 3\ **Last updated:** [July 29, 2019, 3:33pm UTC](https://discuss.elastic.co/t/ece-install-error-with-timeout-how-to-change-the-time-with-600000-milliseconds/191123 "2019-07-29T15:33:27Z")
CONSOLE: - Applying Admin Console Elasticsearch index templates {} - Unhandled error. {} -- An error has occurred in bootstrap process. Please examine logs -- java.util.concurrent.TimeoutException: Futures timed out aft… --- ## [ElasticSearch .NET Slow System.IO.MemoryStream:set\_Capacity](https://discuss.elastic.co/t/elasticsearch-net-slow-system-io-memorystream-set-capacity/191974)
**Author:** [@ajee\_siapno](https://discuss.elastic.co/u/ajee_siapno)\ **Replies:** 8\ **Last updated:** [July 29, 2019, 3:22pm UTC](https://discuss.elastic.co/t/elasticsearch-net-slow-system-io-memorystream-set-capacity/191974 "2019-07-29T15:22:17Z")
Hi, Have anyone using ElasticSearch 6.3 and ElasticSearch.NET and NEST libraries have experienced slow code on the following stack trace (with response time) Nest.ElasticClient:Search: Unknown (execution time: 0 ms of … --- ## [Waiting for index curation lock](https://discuss.elastic.co/t/waiting-for-index-curation-lock/191414)
**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 3:20pm UTC](https://discuss.elastic.co/t/waiting-for-index-curation-lock/191414 "2019-07-29T15:20:04Z")
I have deployment changes stuck in the 'Waiting for index curation lock' phase. I can that Elastic identified and fixed something in Elastic Cloud to do with this. Is there a work around to get past this phase on ECE dep… --- ## [Minimum privileges for all spaces](https://discuss.elastic.co/t/minimum-privileges-for-all-spaces/192317)
**Author:** [@AQ\_Amra](https://discuss.elastic.co/u/AQ_Amra)\ **Replies:** 4\ **Last updated:** [July 29, 2019, 3:09pm UTC](https://discuss.elastic.co/t/minimum-privileges-for-all-spaces/192317 "2019-07-29T15:09:49Z")
Hi, I am trying to create a setup with multiple spaces, where a user should be restricted to a single space. I have created a second space, however when i set the role to only have read access for dashboards to this sp… --- ## [Name variation search (Pro Omega, ProOmega, Pro-Omega)](https://discuss.elastic.co/t/name-variation-search-pro-omega-proomega-pro-omega/192728)
**Author:** [@roman731](https://discuss.elastic.co/u/roman731)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 2:58pm UTC](https://discuss.elastic.co/t/name-variation-search-pro-omega-proomega-pro-omega/192728 "2019-07-29T14:58:20Z")
I use elastic to search for products in an index and have an issue where I have a product called "ProOmega" and the issue is when "Pro Omega" is searched I get no results. Ideally if I search for "ProOmega", "Pro Omega",… --- ## [Architecture for site recovery](https://discuss.elastic.co/t/architecture-for-site-recovery/191855)
**Author:** [@Nonow53](https://discuss.elastic.co/u/Nonow53)\ **Replies:** 8\ **Last updated:** [July 29, 2019, 2:44pm UTC](https://discuss.elastic.co/t/architecture-for-site-recovery/191855 "2019-07-29T14:44:59Z")
Hello, I want to install an elasticsearch cluster on two servers. The servers are separated by a few kilometers. I think create a master/data node on the server 1 and a master/data node on the server 2. Thus, if a si… --- ## [Allow access to elasticsearch](https://discuss.elastic.co/t/allow-access-to-elasticsearch/192725)
**Author:** [@rif3aa\_dev](https://discuss.elastic.co/u/rif3aa_dev)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 2:36pm UTC](https://discuss.elastic.co/t/allow-access-to-elasticsearch/192725 "2019-07-29T14:36:06Z")
how to allow access to the public on my elasticsearch? --- ## [\[ERROR\]logstash.pipeline - the trustAnchors parameter must be non-empty](https://discuss.elastic.co/t/error-logstash-pipeline-the-trustanchors-parameter-must-be-non-empty/192485)
**Author:** [@victor\_ide](https://discuss.elastic.co/u/victor_ide)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 2:34pm UTC](https://discuss.elastic.co/t/error-logstash-pipeline-the-trustanchors-parameter-must-be-non-empty/192485 "2019-07-29T14:34:52Z")
Hey guys, I'm trying to create different indexes based on a field added using the processors. So in the winlogbeat file I added the fields: processors: add\_tags: tags: \[internal, lab\] target: "environment" And I'… --- ## [Json of varying length and multiline](https://discuss.elastic.co/t/json-of-varying-length-and-multiline/191689)
**Author:** [@Shipper01](https://discuss.elastic.co/u/Shipper01)\ **Replies:** 16\ **Last updated:** [July 29, 2019, 2:21pm UTC](https://discuss.elastic.co/t/json-of-varying-length-and-multiline/191689 "2019-07-29T14:21:25Z")
I'm very new to everything elastic, logstash and json. I was able to stand everything up and ingest one set of logs and query on them in kibana. My second data set is a json file whose fields vary from message to messa… --- ## [Remove characters \[0;37m , \[0;33m and \[0m from logstash output](https://discuss.elastic.co/t/remove-characters-0-37m-0-33m-and-0m-from-logstash-output/192722)
**Author:** [@science162](https://discuss.elastic.co/u/science162)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 2:17pm UTC](https://discuss.elastic.co/t/remove-characters-0-37m-0-33m-and-0m-from-logstash-output/192722 "2019-07-29T14:17:32Z")
Hello, after configuring my simple logstash.conf with input stdin and output stdout, I always get a duty output with input : dhschggdsgg output : { "host"←\[0;37m =\> ←\[0m←\[0;33m"hostname"←\[0m, "message"←\[0;37m =\> ←\[… --- ## [Doc .txt en kibana](https://discuss.elastic.co/t/doc-txt-en-kibana/192719)
**Author:** [@sarahmech](https://discuss.elastic.co/u/sarahmech)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 2:13pm UTC](https://discuss.elastic.co/t/doc-txt-en-kibana/192719 "2019-07-29T14:13:02Z")
Hola, queria saber si es posible visualizar documentos .txt en kibana, Tengo instalado winlogbeat en un servidor windows Elasticsearch y kibana en un CentOS 7 Gracias. Sarah --- ## [Filebeat: Is it possible to have multiple inputs with different type](https://discuss.elastic.co/t/filebeat-is-it-possible-to-have-multiple-inputs-with-different-type/192579)
**Author:** [@tanjok](https://discuss.elastic.co/u/tanjok)\ **Replies:** 2\ **Last updated:** [July 29, 2019, 2:06pm UTC](https://discuss.elastic.co/t/filebeat-is-it-possible-to-have-multiple-inputs-with-different-type/192579 "2019-07-29T14:06:48Z")
Добрый вечер, у меня вопрос к Filebeat. Есть ли возможность конфигурации multiple Inputs разных типов? Что-нибудь подобное, как в этом примере. filebeat.inputs: - type: docker containers: path: "/usr/shar… --- ## [Reading data from redis server into logstash input](https://discuss.elastic.co/t/reading-data-from-redis-server-into-logstash-input/192673)
**Author:** [@Madhu\_Neal1](https://discuss.elastic.co/u/Madhu_Neal1)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 1:56pm UTC](https://discuss.elastic.co/t/reading-data-from-redis-server-into-logstash-input/192673 "2019-07-29T13:56:00Z")
Team, Greeting of the day! I like know how to read values which are saved in redis-server under the key and I have an input setting like this: input { redis { host =\> "127.0.0.1" # these settings should match the o… --- ## [Replacing @timestamp with actual logtime](https://discuss.elastic.co/t/replacing-timestamp-with-actual-logtime/192683)
**Author:** [@mkaruza](https://discuss.elastic.co/u/mkaruza)\ **Replies:** 5\ **Last updated:** [July 29, 2019, 1:50pm UTC](https://discuss.elastic.co/t/replacing-timestamp-with-actual-logtime/192683 "2019-07-29T13:50:37Z")
Hi everyone :slight\_smile: This is my first post here - I'm a rookie in Elasticstack and would really appreciate your help since obviously what I'm doing isn't working. I am trying to replace @timestamp with actual time… --- ## [\*\*\* SOLVED \*\*\* Forbidden to create Index Pattern in Kibana 7.2](https://discuss.elastic.co/t/solved-forbidden-to-create-index-pattern-in-kibana-7-2/190947)
**Author:** [@thirty2](https://discuss.elastic.co/u/thirty2)\ **Replies:** 8\ **Last updated:** [July 28, 2019, 3:36pm UTC](https://discuss.elastic.co/t/solved-forbidden-to-create-index-pattern-in-kibana-7-2/190947 "2019-07-28T15:36:28Z")
Hi guys, is there any simple solution how to fix Forbidden Error while creating index pattern in Kibana? I am still getting this error when trying to create a new index pattern. Error: Forbidden \_construct@https:… --- ## [Selectively download StackDriver files from google storage buckets with google input plugin](https://discuss.elastic.co/t/selectively-download-stackdriver-files-from-google-storage-buckets-with-google-input-plugin/192709)
**Author:** [@maineffort](https://discuss.elastic.co/u/maineffort)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 1:31pm UTC](https://discuss.elastic.co/t/selectively-download-stackdriver-files-from-google-storage-buckets-with-google-input-plugin/192709 "2019-07-29T13:31:03Z")
I'd like to selectively download StackDriver log files from google storage bucket. The bucket is created for forwarding StackDriver logs and is therefore arranged in a directory fashion i.e. logs-bucket/cloudaudit.googl… --- ## [HOW TO HAVE A CLEAN OUTPUT WITH RUBY DEBUG?](https://discuss.elastic.co/t/how-to-have-a-clean-output-with-ruby-debug/192707)
**Author:** [@science162](https://discuss.elastic.co/u/science162)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 1:30pm UTC](https://discuss.elastic.co/t/how-to-have-a-clean-output-with-ruby-debug/192707 "2019-07-29T13:30:20Z")
Hello, after configuring my simple logstash.conf with input stdin and output stdout, I always get a duty output with input : dhschggdsgg output : { "host"←\[0;37m =\> ←\[0m←\[0;33m"hostname"←\[0m, "message"←\[0;37m =\> ←\[… --- ## [Multi Indices](https://discuss.elastic.co/t/multi-indices/192687)
**Author:** [@nitingarg](https://discuss.elastic.co/u/nitingarg)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 12:48pm UTC](https://discuss.elastic.co/t/multi-indices/192687 "2019-07-29T12:48:29Z")
ind1,ind2/\_search { "query": { "bool": { "should": \[ { "bool": { "must": \[ { "match": { "linked\_m\_id": "11197" }} \]} }, { "bool": { "must": { "match": { "m\_id": "" }} }}\]} }, "aggs": {} } I want to u… --- ## [Having SIEM read windows events from non-default index pattern](https://discuss.elastic.co/t/having-siem-read-windows-events-from-non-default-index-pattern/192496)
**Author:** [@tyler\_hilsabeck](https://discuss.elastic.co/u/tyler_hilsabeck)\ **Replies:** 2\ **Last updated:** [July 29, 2019, 12:47pm UTC](https://discuss.elastic.co/t/having-siem-read-windows-events-from-non-default-index-pattern/192496 "2019-07-29T12:47:19Z")
Hi Everyone, I do not store my winlogbeat data in the default named indexes (winlogbeat-\*) but rather windows\_logs-\* for ease of management with ILM, log type clarity, etc. I have installed the default kibana dashboard… --- ## [HTTP Plugin and document update](https://discuss.elastic.co/t/http-plugin-and-document-update/192695)
**Author:** [@Christophe\_Cosnefroy](https://discuss.elastic.co/u/Christophe_Cosnefroy)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 12:31pm UTC](https://discuss.elastic.co/t/http-plugin-and-document-update/192695 "2019-07-29T12:31:06Z")
I'm using Logstash and http plugin in order to insert documents to ElasticSearch and it's work fine. But I would like to update documents instead of insert them. Does someone can help me? --- ## [Queries with large character counts in fields](https://discuss.elastic.co/t/queries-with-large-character-counts-in-fields/192457)
**Author:** [@jmb13562](https://discuss.elastic.co/u/jmb13562)\ **Replies:** 5\ **Last updated:** [July 29, 2019, 12:26pm UTC](https://discuss.elastic.co/t/queries-with-large-character-counts-in-fields/192457 "2019-07-29T12:26:47Z")
Hi all, I've run into an issue where searching through a relatively small data set is hitting some pretty slow performance. We're running queries for text matches like "Person Name" against a dataset of around 8GB. The … --- ## [(LoadError) no such file to load -- gssapi](https://discuss.elastic.co/t/loaderror-no-such-file-to-load-gssapi/192619)
**Author:** [@Darshan\_Parab](https://discuss.elastic.co/u/Darshan_Parab)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 12:25pm UTC](https://discuss.elastic.co/t/loaderror-no-such-file-to-load-gssapi/192619 "2019-07-29T12:25:34Z")
Hi, I have configured webhdfs output as show below. I'm getting error that says I don't have gssapi conf webhdfs output. Pipeline: input { beats { port =\> 5044 } } filter { } output { webhdfs { host =\> "hdfs… --- ## [Score results with same field values worse](https://discuss.elastic.co/t/score-results-with-same-field-values-worse/192685)
**Author:** [@mmair](https://discuss.elastic.co/u/mmair)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 11:51am UTC](https://discuss.elastic.co/t/score-results-with-same-field-values-worse/192685 "2019-07-29T11:51:50Z")
Hi, its possible rank results, when they have equal value on a field, worse, except one. So for example, if I have in a shop products with different colors, but the same model, that only one color gets a good score and… --- ## [Canvas - Expression Editor - 3 cases/ifs](https://discuss.elastic.co/t/canvas-expression-editor-3-cases-ifs/192460)
**Author:** [@u3432](https://discuss.elastic.co/u/u3432)\ **Replies:** 3\ **Last updated:** [July 29, 2019, 11:37am UTC](https://discuss.elastic.co/t/canvas-expression-editor-3-cases-ifs/192460 "2019-07-29T11:37:23Z")
Hi all, trying to use a case for the progress bar to set the 3 different colors based on what the value is. I have tried using this: valueColor={switch case={case if={gt 0.01} then="#1785b0"} case={case if={gt 1.25} th… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1994) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1996)