# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=2000

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 2001

---

## [Cross inner-hits sort and pagination](https://discuss.elastic.co/t/cross-inner-hits-sort-and-pagination/192343)

<div class="topic-metadata">

**Author:** [@Wan\_Hui](https://discuss.elastic.co/u/Wan_Hui)\
**Replies:** 0\
**Last updated:** [July 26, 2019, 2:54am UTC](https://discuss.elastic.co/t/cross-inner-hits-sort-and-pagination/192343 "2019-07-26T02:54:52Z")

</div>

From the document, sort and pagination can be done per inner-hits. Is there any way I can sort and paginate across all inner-hits?

---

## [How to get the current running configuration of Kibana in kibana.yml (on cloud)](https://discuss.elastic.co/t/how-to-get-the-current-running-configuration-of-kibana-in-kibana-yml-on-cloud/181931)

<div class="topic-metadata">

**Author:** [@shiveshabhishek](https://discuss.elastic.co/u/shiveshabhishek)\
**Replies:** 5\
**Last updated:** [July 26, 2019, 2:46am UTC](https://discuss.elastic.co/t/how-to-get-the-current-running-configuration-of-kibana-in-kibana-yml-on-cloud/181931 "2019-07-26T02:46:28Z")

</div>

Hey there, I am running Kibana 6.4.0 on cloud. I am passing some variables as env in my deployment yaml. I want to see the overall running configurations of kibana.yml . In config/kibana.yml I am unable to get the curre…

---

## [Can we monitor AWS EC2 instances in Kibana which is installed in my Localsystem?](https://discuss.elastic.co/t/can-we-monitor-aws-ec2-instances-in-kibana-which-is-installed-in-my-localsystem/182059)

<div class="topic-metadata">

**Author:** [@Nishar\_shaik](https://discuss.elastic.co/u/Nishar_shaik)\
**Replies:** 3\
**Last updated:** [July 26, 2019, 2:45am UTC](https://discuss.elastic.co/t/can-we-monitor-aws-ec2-instances-in-kibana-which-is-installed-in-my-localsystem/182059 "2019-07-26T02:45:43Z")

</div>

Hi all, I am working on Kibana, I have installed it in my local system. I am not getting an option to monitor AWS metrics unlike as in Kibana cloud platform. how can I monitor the AWs metrics when kibana is in my local…

---

## [Logstash - ES to BigQuery - doesn't load all rows into BigQuery](https://discuss.elastic.co/t/logstash-es-to-bigquery-doesnt-load-all-rows-into-bigquery/190114)

<div class="topic-metadata">

**Author:** [@srikrishb](https://discuss.elastic.co/u/srikrishb)\
**Replies:** 1\
**Last updated:** [July 26, 2019, 2:19am UTC](https://discuss.elastic.co/t/logstash-es-to-bigquery-doesnt-load-all-rows-into-bigquery/190114 "2019-07-26T02:19:39Z")

</div>

Hello, I am using logstash 7.1.1 to fetch data from elasticsearch cluster to BigQuery database. My logstash instance ran successfully but ran into some problems: Logstash config file: input { elasticsearch { hosts =\>…

---

## [ELK stack include only required modules](https://discuss.elastic.co/t/elk-stack-include-only-required-modules/191931)

<div class="topic-metadata">

**Author:** [@tarun\_puri03](https://discuss.elastic.co/u/tarun_puri03)\
**Replies:** 2\
**Last updated:** [July 26, 2019, 1:53am UTC](https://discuss.elastic.co/t/elk-stack-include-only-required-modules/191931 "2019-07-26T01:53:05Z")

</div>

I am trying to install ELK stack but as observed, the total size of the whole stack after installation is around 1.3 GB. I was wondering if there is a way to cherry pick the modules I want running on my stack and bring d…

---

## [Ruby Shenanigans](https://discuss.elastic.co/t/ruby-shenanigans/192341)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 0\
**Last updated:** [July 26, 2019, 1:06am UTC](https://discuss.elastic.co/t/ruby-shenanigans/192341 "2019-07-26T01:06:51Z")

</div>

I have this pipeline that's a bit convoluted and wanted to know if this will work. The intent is, if old.new\_duration exists and, for example, has a value of 10, instead of it being replaced, it gets added to the value …

---

## [How to validated index templates](https://discuss.elastic.co/t/how-to-validated-index-templates/192313)

<div class="topic-metadata">

**Author:** [@TeraInferno](https://discuss.elastic.co/u/TeraInferno)\
**Replies:** 1\
**Last updated:** [July 26, 2019, 12:05am UTC](https://discuss.elastic.co/t/how-to-validated-index-templates/192313 "2019-07-26T00:05:28Z")

</div>

Hello, I am trying to use multiple index templates in elasticsearch and need to verify that the final index template, after they are merged together by elasticsearch, is what I was aiming for. For example, if I add the …

---

## [How can i search a null value in an ES query?](https://discuss.elastic.co/t/how-can-i-search-a-null-value-in-an-es-query/191411)

<div class="topic-metadata">

**Author:** [@morihend](https://discuss.elastic.co/u/morihend)\
**Replies:** 3\
**Last updated:** [July 25, 2019, 11:49pm UTC](https://discuss.elastic.co/t/how-can-i-search-a-null-value-in-an-es-query/191411 "2019-07-25T23:49:32Z")

</div>

Hello, I have a query ES that must search a null value in a field that is a date type in my BDD. Logstash is my program that put datas in the ES. Look at my query below. The problem is here : "DATE\_FIN": null { "qu…

---

## [Logstash with input from file and input from beats (port 5044) create two indices with the same data](https://discuss.elastic.co/t/logstash-with-input-from-file-and-input-from-beats-port-5044-create-two-indices-with-the-same-data/191348)

<div class="topic-metadata">

**Author:** [@izhael](https://discuss.elastic.co/u/izhael)\
**Replies:** 2\
**Last updated:** [July 25, 2019, 9:38pm UTC](https://discuss.elastic.co/t/logstash-with-input-from-file-and-input-from-beats-port-5044-create-two-indices-with-the-same-data/191348 "2019-07-25T21:38:26Z")

</div>

Good morning, I have two configuration files in Logstash conf directory: First file: File: firewall.conf \*\* Logs from Firewall \*\* input { file { path =\> "/var/log/remote/firewall/\*-firewall.log" ignore\_older =\> 60 …

---

## [Curator issue](https://discuss.elastic.co/t/curator-issue/192321)

<div class="topic-metadata">

**Author:** [@sridharreddy1994](https://discuss.elastic.co/u/sridharreddy1994)\
**Replies:** 1\
**Last updated:** [July 25, 2019, 9:37pm UTC](https://discuss.elastic.co/t/curator-issue/192321 "2019-07-25T21:37:06Z")

</div>

Hi I am using curator and trying to delete some of indices which are older than 30 days and I got following error message,Can someone help me ? curator --config /u001/users/elasticsearch/curator.yml /u001/users/elastic…

---

## [Error after upgrading to Logstash 7.1.1](https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147)

<div class="topic-metadata">

**Author:** [@Reena\_Deberry](https://discuss.elastic.co/u/Reena_Deberry)\
**Replies:** 5\
**Last updated:** [July 25, 2019, 9:01pm UTC](https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147 "2019-07-25T21:01:22Z")

</div>

\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Something is wrong with your configurati…

---

## [Is ElasticSearch the correct solution to index \>300 websites?](https://discuss.elastic.co/t/is-elasticsearch-the-correct-solution-to-index-300-websites/192024)

<div class="topic-metadata">

**Author:** [@prawsthorne](https://discuss.elastic.co/u/prawsthorne)\
**Replies:** 3\
**Last updated:** [July 25, 2019, 9:21pm UTC](https://discuss.elastic.co/t/is-elasticsearch-the-correct-solution-to-index-300-websites/192024 "2019-07-25T21:21:17Z")

</div>

I'm new to elastic and thinking meta elastic is the correct place to ask architectural questions. TLDR: Should I use ES 7.o and Nutch 1.15 to index a few hundred industry specific sites to build a faceted search? I hav…

---

## [Indexing Becomes Inconsistent and Problematic With Additional Capacity Added](https://discuss.elastic.co/t/indexing-becomes-inconsistent-and-problematic-with-additional-capacity-added/189147)

<div class="topic-metadata">

**Author:** [@Sometimes](https://discuss.elastic.co/u/Sometimes)\
**Replies:** 31\
**Last updated:** [July 25, 2019, 9:16pm UTC](https://discuss.elastic.co/t/indexing-becomes-inconsistent-and-problematic-with-additional-capacity-added/189147 "2019-07-25T21:16:33Z")

</div>

Tl;dr - We have added additional capacity to our Elasticsearch cluster and now indexing is actually performing worse than before. We have a fairly large ELK stack that runs across two data centers. Before I get to our e…

---

## [Logstash Grok New Line Syntax](https://discuss.elastic.co/t/logstash-grok-new-line-syntax/192148)

<div class="topic-metadata">

**Author:** [@userR](https://discuss.elastic.co/u/userR)\
**Replies:** 11\
**Last updated:** [July 25, 2019, 9:11pm UTC](https://discuss.elastic.co/t/logstash-grok-new-line-syntax/192148 "2019-07-25T21:11:29Z")

</div>

Hi, I am attempting to parse log data that are on different lines. When its read through filebeat and sent to logstash, the message contains \\n. Unfortunetly, I am unable to deal with this and am getting an error when I…

---

## [I am trying to deploy kibana using helm on my gke cluster](https://discuss.elastic.co/t/i-am-trying-to-deploy-kibana-using-helm-on-my-gke-cluster/187914)

<div class="topic-metadata">

**Author:** [@asrinivasan](https://discuss.elastic.co/u/asrinivasan)\
**Replies:** 3\
**Last updated:** [July 25, 2019, 9:07pm UTC](https://discuss.elastic.co/t/i-am-trying-to-deploy-kibana-using-helm-on-my-gke-cluster/187914 "2019-07-25T21:07:28Z")

</div>

Hi I am trying to deploy kibana using helm How do we add basepath to something else other than / which is default I tried this kibanaConfig: {} kibana.yml: | server.basepath: "/kibana" however whenever i try to…

---

## [Filter context in Kibana generated search](https://discuss.elastic.co/t/filter-context-in-kibana-generated-search/191210)

<div class="topic-metadata">

**Author:** [@obuez](https://discuss.elastic.co/u/obuez)\
**Replies:** 2\
**Last updated:** [July 25, 2019, 8:56pm UTC](https://discuss.elastic.co/t/filter-context-in-kibana-generated-search/191210 "2019-07-25T20:56:00Z")

</div>

Hi all, I'm taking a closer look at how Kibana actually build the search for visualizations and discoveries. What I can figure out is that every queries and Kibana filters are translated into a must clause in the gener…

---

## [Subsequent bulk index fail after first index](https://discuss.elastic.co/t/subsequent-bulk-index-fail-after-first-index/192121)

<div class="topic-metadata">

**Author:** [@Jtaks](https://discuss.elastic.co/u/Jtaks)\
**Replies:** 2\
**Last updated:** [July 25, 2019, 8:23pm UTC](https://discuss.elastic.co/t/subsequent-bulk-index-fail-after-first-index/192121 "2019-07-25T20:23:56Z")

</div>

Hi There, ES: 6.6 elastic/elasticsearch-js: 6.8 GKE: 1.12.7-gke.24 nodejs: 10.16.0 I currently have a Kubernetes cluster on GCP. What I usually do is kubectl port-forward elasticsearch-client... 9200 and test my nod…

---

## [TSVB Metric shows different value than Metric](https://discuss.elastic.co/t/tsvb-metric-shows-different-value-than-metric/192289)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 4\
**Last updated:** [July 25, 2019, 8:08pm UTC](https://discuss.elastic.co/t/tsvb-metric-shows-different-value-than-metric/192289 "2019-07-25T20:08:20Z")

</div>

I have two visualizations that are setup to count the unique number of IPs in a given field. TSVB shows one number that is significantly higher than Metric does. Below is an example followed by my settings for each vis…

---

## [Match specific word in grok filter](https://discuss.elastic.co/t/match-specific-word-in-grok-filter/192299)

<div class="topic-metadata">

**Author:** [@naveenrt23](https://discuss.elastic.co/u/naveenrt23)\
**Replies:** 1\
**Last updated:** [July 25, 2019, 7:43pm UTC](https://discuss.elastic.co/t/match-specific-word-in-grok-filter/192299 "2019-07-25T19:43:37Z")

</div>

I have a log message which is composed of multiple values joined by pipes. 20190615|4|method|userend|/test/value/123/1.1|500|2 mY grok filter: mutate { add\_field =\> { "\[@metadata\]\[copyOfMessage\]" =\>…

---

## [Kibana taking time to load discover](https://discuss.elastic.co/t/kibana-taking-time-to-load-discover/192204)

<div class="topic-metadata">

**Author:** [@mrashid](https://discuss.elastic.co/u/mrashid)\
**Replies:** 2\
**Last updated:** [July 25, 2019, 7:35pm UTC](https://discuss.elastic.co/t/kibana-taking-time-to-load-discover/192204 "2019-07-25T19:35:41Z")

</div>

I have around 6 GB of data coming to elastic search per day. The problem is that it takes around 5-6 seconds to load discover or conduct any search. I was trying to tune - to make it faster. I have the following observ…

---

## [Infrastructure UI issue](https://discuss.elastic.co/t/infrastructure-ui-issue/192258)

<div class="topic-metadata">

**Author:** [@pinguin](https://discuss.elastic.co/u/pinguin)\
**Replies:** 2\
**Last updated:** [July 25, 2019, 7:32pm UTC](https://discuss.elastic.co/t/infrastructure-ui-issue/192258 "2019-07-25T19:32:48Z")

</div>

Dear All, I am facing issue in kibana infrastructure UI , by mistake we have replaced logAlias field by \* , after that every time we try to go to infrastructure UI through kibana , all the cluster suddenly marked as dow…

---

## [Is it possible to perform an operation on fields from two different indexes?](https://discuss.elastic.co/t/is-it-possible-to-perform-an-operation-on-fields-from-two-different-indexes/191883)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 10\
**Last updated:** [July 25, 2019, 7:25pm UTC](https://discuss.elastic.co/t/is-it-possible-to-perform-an-operation-on-fields-from-two-different-indexes/191883 "2019-07-25T19:25:39Z")

</div>

These are my indexes: stage-api-athena-fruitcount: upload\_time \[other fields\] stage-cloudwatch: Timestamp \[other fields\] I want to perform the following action. Is it possible to do this operation on two separate …

---

## [Calculate Duration in JSON input](https://discuss.elastic.co/t/calculate-duration-in-json-input/191691)

<div class="topic-metadata">

**Author:** [@scttwoods](https://discuss.elastic.co/u/scttwoods)\
**Replies:** 4\
**Last updated:** [July 25, 2019, 7:24pm UTC](https://discuss.elastic.co/t/calculate-duration-in-json-input/191691 "2019-07-25T19:24:08Z")

</div>

I have a data table of individual events with rows split by an event id. I am able to find the min and max of my timestamp field. What I want to do is have a column whose values are the difference between the max and mix…

---

## [ECE 2.3 released](https://discuss.elastic.co/t/ece-2-3-released/192300)

<div class="topic-metadata">

**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\
**Replies:** 0\
**Last updated:** [July 25, 2019, 7:04pm UTC](https://discuss.elastic.co/t/ece-2-3-released/192300 "2019-07-25T19:04:20Z")

</div>

ECE 2.3 released We are happy to announce that Elastic Cloud Enterprise (ECE) version 2.3 is now available, bringing one of the most anticipated features, role-based access control (RBAC), into general availability. The…

---

## [Connectivity issues to Elasticsearch via tcp\\9200](https://discuss.elastic.co/t/connectivity-issues-to-elasticsearch-via-tcp-9200/191900)

<div class="topic-metadata">

**Author:** [@littlejob](https://discuss.elastic.co/u/littlejob)\
**Replies:** 17\
**Last updated:** [July 25, 2019, 6:40pm UTC](https://discuss.elastic.co/t/connectivity-issues-to-elasticsearch-via-tcp-9200/191900 "2019-07-25T18:40:55Z")

</div>

Testing out winlogbeat to send syslogs to elastic instance with a kibana front end. kibana status page shows all things are green two network options set in elasticsearch.yml are: network.host: 127.0.0.1 http.port:…

---

## [Elasticsearch client node's log is flooded with "Values less than -1 bytes are deprecated and will not be supported in the next major version: \[-5915230208b\]"](https://discuss.elastic.co/t/elasticsearch-client-nodes-log-is-flooded-with-values-less-than-1-bytes-are-deprecated-and-will-not-be-supported-in-the-next-major-version-5915230208b/189410)

<div class="topic-metadata">

**Author:** [@xchai](https://discuss.elastic.co/u/xchai)\
**Replies:** 1\
**Last updated:** [July 25, 2019, 6:29pm UTC](https://discuss.elastic.co/t/elasticsearch-client-nodes-log-is-flooded-with-values-less-than-1-bytes-are-deprecated-and-will-not-be-supported-in-the-next-major-version-5915230208b/189410 "2019-07-25T18:29:57Z")

</div>

Hi, we are testing ELK 6.6.1 on s390x platform (Linux on Z). We have 3 elasticsearch nodes configured as: client: discovery.zen.ping.unicast.hosts: master-discovery discovery.zen.minimum\_master\_nodes: 1 node.master:…

---

## [\[Elasticsearch 7.1.1\] Node failed to join cluster with GCE discovery plugin due to different cluster uuid](https://discuss.elastic.co/t/elasticsearch-7-1-1-node-failed-to-join-cluster-with-gce-discovery-plugin-due-to-different-cluster-uuid/191294)

<div class="topic-metadata">

**Author:** [@haotian9850](https://discuss.elastic.co/u/haotian9850)\
**Replies:** 7\
**Last updated:** [July 25, 2019, 6:18pm UTC](https://discuss.elastic.co/t/elasticsearch-7-1-1-node-failed-to-join-cluster-with-gce-discovery-plugin-due-to-different-cluster-uuid/191294 "2019-07-25T18:18:20Z")

</div>

Hey there, I am currently making an automated elasticsearch cluster deployment on Google Compute Platform with terraform and packer. For a testing 2-node test deployment, the config files (elasticsearch.yml) were as belo…

---

## [Weird field/output issues](https://discuss.elastic.co/t/weird-field-output-issues/192286)

<div class="topic-metadata">

**Author:** [@eclipsed450](https://discuss.elastic.co/u/eclipsed450)\
**Replies:** 2\
**Last updated:** [July 25, 2019, 5:55pm UTC](https://discuss.elastic.co/t/weird-field-output-issues/192286 "2019-07-25T17:55:02Z")

</div>

Hi, I'm having some weird issues. Below is my config. I'm finding that if I leave the if \[type\] == "s3\_emr", then the output will not output anything; however if I comment it out, the gelf output will kick in and start …

---

## [Custom kibana](https://discuss.elastic.co/t/custom-kibana/191939)

<div class="topic-metadata">

**Author:** [@Dania\_Ayu](https://discuss.elastic.co/u/Dania_Ayu)\
**Replies:** 6\
**Last updated:** [July 25, 2019, 5:27pm UTC](https://discuss.elastic.co/t/custom-kibana/191939 "2019-07-25T17:27:56Z")

</div>

i use kibana 7.1, i want to custom kibana ui for my project, what should i do?

---

## [Security connection for Elastic and Logstash](https://discuss.elastic.co/t/security-connection-for-elastic-and-logstash/191009)

<div class="topic-metadata">

**Author:** [@edster](https://discuss.elastic.co/u/edster)\
**Replies:** 2\
**Last updated:** [July 25, 2019, 5:27pm UTC](https://discuss.elastic.co/t/security-connection-for-elastic-and-logstash/191009 "2019-07-25T17:27:41Z")

</div>

Is there any kind of security for the Elastic application, not using X-Pack, so that not anyone can make a REST call or have any sort of connection to Elastic without needing using a proper id or login?

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1999)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=2001)
