# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=242 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 243 --- ## [How to display the maximum number of shards allowed per node?](https://discuss.elastic.co/t/how-to-display-the-maximum-number-of-shards-allowed-per-node/351308)
**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\ **Replies:** 4\ **Last updated:** [January 19, 2024, 7:54am UTC](https://discuss.elastic.co/t/how-to-display-the-maximum-number-of-shards-allowed-per-node/351308 "2024-01-19T07:54:34Z")
how to display the maximum number of shards allowed per node? --- ## [Help on Elastic Search query](https://discuss.elastic.co/t/help-on-elastic-search-query/351409)
**Author:** [@hmulky](https://discuss.elastic.co/u/hmulky)\ **Replies:** 0\ **Last updated:** [January 19, 2024, 6:56am UTC](https://discuss.elastic.co/t/help-on-elastic-search-query/351409 "2024-01-19T06:56:23Z")
Hello, I think i may need some help here. I have a record in EFK as below orchestrator.resource.name : "akr1r3\*" and (log.file.path : /var/log/abc.log) and (message : "Signing with P-Origination Id \\\\\[F92DAEC5-F1C9-4F8… --- ## [Kibana Area Chart -Split chart twice i.e per release, per brand on X axis](https://discuss.elastic.co/t/kibana-area-chart-split-chart-twice-i-e-per-release-per-brand-on-x-axis/351347)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 10:04am UTC](https://discuss.elastic.co/t/kibana-area-chart-split-chart-twice-i-e-per-release-per-brand-on-x-axis/351347 "2024-01-18T10:04:30Z")
Hello All, I've a requirement and mostly I'm aware this won't be possible , but for second opinion need feedback if this can be done in some way. I am using normal area chart and problem is can SPLIT THE CHART TWICE , … --- ## [How to filter based on a pair of matching geopoints within a radius?](https://discuss.elastic.co/t/how-to-filter-based-on-a-pair-of-matching-geopoints-within-a-radius/350265)
**Author:** [@mike\_mivance](https://discuss.elastic.co/u/mike_mivance)\ **Replies:** 5\ **Last updated:** [January 18, 2024, 8:31pm UTC](https://discuss.elastic.co/t/how-to-filter-based-on-a-pair-of-matching-geopoints-within-a-radius/350265 "2024-01-18T20:31:34Z")
Hi All, I am trying to match based on two geopoints (origin and destination) within a radius so that if both the query geopoints are within their respective radiuses, they will be included in the results. For instance, i… --- ## [Convert string LLA to Geo-Point](https://discuss.elastic.co/t/convert-string-lla-to-geo-point/351376)
**Author:** [@michael\_c\_michael](https://discuss.elastic.co/u/michael_c_michael)\ **Replies:** 3\ **Last updated:** [January 18, 2024, 7:47pm UTC](https://discuss.elastic.co/t/convert-string-lla-to-geo-point/351376 "2024-01-18T19:47:14Z")
I have a string field that is in Latitude, Longitude, Altitude. In the pipeline, I am taking the location in x, y, z in ECEF coordinates and converting to LLA: - pipeline.id: entity-state-processing config.str… --- ## [I'm having a problem in Kibana every time I open a space in elastic](https://discuss.elastic.co/t/im-having-a-problem-in-kibana-every-time-i-open-a-space-in-elastic/351374)
**Author:** [@Leomar.V](https://discuss.elastic.co/u/Leomar.V)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 6:16pm UTC](https://discuss.elastic.co/t/im-having-a-problem-in-kibana-every-time-i-open-a-space-in-elastic/351374 "2024-01-18T18:16:30Z")
--- ## [Codec multiline grok pattern for Logstash](https://discuss.elastic.co/t/codec-multiline-grok-pattern-for-logstash/351334)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 6\ **Last updated:** [January 18, 2024, 5:55pm UTC](https://discuss.elastic.co/t/codec-multiline-grok-pattern-for-logstash/351334 "2024-01-18T17:55:10Z")
Hey, so i am parsing multiline logs using Logstash. I need consider each log line will start with {"offset": currently it is printing into single line that's why it is coming in one message only We are not using file… --- ## [Logstash.input.imap error SSL](https://discuss.elastic.co/t/logstash-input-imap-error-ssl/349772)
**Author:** [@drissm](https://discuss.elastic.co/u/drissm)\ **Replies:** 3\ **Last updated:** [January 18, 2024, 3:51pm UTC](https://discuss.elastic.co/t/logstash-input-imap-error-ssl/349772 "2024-01-18T15:51:22Z")
Hello, i have a logstash v8.11.3 with input.imap plugin v3.2.1. Here is my pipeline and the ssl error i have input { imap { host =\> "myhost" password =\> "mypassword" port =\> 993 user =\> "myemail@mydoma… --- ## [Calculating Windows User Session Duration](https://discuss.elastic.co/t/calculating-windows-user-session-duration/351362)
**Author:** [@pcharles1](https://discuss.elastic.co/u/pcharles1)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 3:05pm UTC](https://discuss.elastic.co/t/calculating-windows-user-session-duration/351362 "2024-01-18T15:05:28Z")
I need to calculate Windows user session duration times using winlogbeat event codes like 4624 (login) and 4634 (logout) & create a visualization to display each user's duration. I'm using a heatmap visualization. I foun… --- ## [Arabic decode](https://discuss.elastic.co/t/arabic-decode/351027)
**Author:** [@abdullah144](https://discuss.elastic.co/u/abdullah144)\ **Replies:** 3\ **Last updated:** [January 18, 2024, 2:44pm UTC](https://discuss.elastic.co/t/arabic-decode/351027 "2024-01-18T14:44:37Z")
Hi , when I log some data in Arabic is came like this on Kibana : "شــريك" how can I let the Kibana convert it to Arabic direct? Thanks, --- ## [Drop event in procesor result in no records](https://discuss.elastic.co/t/drop-event-in-procesor-result-in-no-records/351352)
**Author:** [@Ruben\_Bahntje](https://discuss.elastic.co/u/Ruben_Bahntje)\ **Replies:** 2\ **Last updated:** [January 18, 2024, 1:29pm UTC](https://discuss.elastic.co/t/drop-event-in-procesor-result-in-no-records/351352 "2024-01-18T13:29:07Z")
I am using Fleet to configure agent policies for windows servers. I configure to get several security events 4624, 4625, 4771 and drop events when LogonType = 3 I ve configure procesor like this: drop\_event: when: … --- ## [Automating Sophos Central Agent Policies Integration via Python](https://discuss.elastic.co/t/automating-sophos-central-agent-policies-integration-via-python/351349)
**Author:** [@bl4ck-m33k4t](https://discuss.elastic.co/u/bl4ck-m33k4t)\ **Replies:** 1\ **Last updated:** [January 18, 2024, 1:21pm UTC](https://discuss.elastic.co/t/automating-sophos-central-agent-policies-integration-via-python/351349 "2024-01-18T13:21:58Z")
Hi everyone, I'm currently working on automating the deployment of Sophos Central Agent policies using Python. My goal is to create policies and add integrations programmatically. However, I'm facing challenges with the… --- ## [Legacy index templates deprecation](https://discuss.elastic.co/t/legacy-index-templates-deprecation/351356)
**Author:** [@cisupport-zkb](https://discuss.elastic.co/u/cisupport-zkb)\ **Replies:** 1\ **Last updated:** [January 18, 2024, 12:40pm UTC](https://discuss.elastic.co/t/legacy-index-templates-deprecation/351356 "2024-01-18T12:40:43Z")
Hi everyone, I have a question about legacy index templates. I know that are deprecated since Elasticsearch v7.9, but in what future Elasticsearch version will be definitively removed, so that only composable resp. comp… --- ## [Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’](https://discuss.elastic.co/t/response-to-preflight-request-doesn-t-pass-access-control-check-no-access-control-allow-origin/348244)
**Author:** [@alexander3](https://discuss.elastic.co/u/alexander3)\ **Replies:** 1\ **Last updated:** [January 18, 2024, 11:25am UTC](https://discuss.elastic.co/t/response-to-preflight-request-doesn-t-pass-access-control-check-no-access-control-allow-origin/348244 "2024-01-18T11:25:34Z")
Hi, I am in a process of learning how to use Elastic, Kibana and a simple create-react-app project with OpenTelemetry to monitor a react application. After setting up Elastic, Kibana and instrumenting OpenTelemetry I am … --- ## [While configuring the elastic search cluster with two elk nodes. i am getting the error](https://discuss.elastic.co/t/while-configuring-the-elastic-search-cluster-with-two-elk-nodes-i-am-getting-the-error/349947)
**Author:** [@Jaladanki\_Varaprasad](https://discuss.elastic.co/u/Jaladanki_Varaprasad)\ **Replies:** 1\ **Last updated:** [January 18, 2024, 11:22am UTC](https://discuss.elastic.co/t/while-configuring-the-elastic-search-cluster-with-two-elk-nodes-i-am-getting-the-error/349947 "2024-01-18T11:22:08Z")
mote\_cluster\_client, data, data\_cold\] \[2023-12-26T11:21:03,744\]\[ERROR\]\[o.e.b.Elasticsearch \] \[elk-node-2\] fatal exception while booting Elasticsearch org.elasticsearch.ElasticsearchSecurityException: failed to loa… --- ## [Can't deploy elastic cluster with ECK](https://discuss.elastic.co/t/cant-deploy-elastic-cluster-with-eck/351345)
**Author:** [@kmz161](https://discuss.elastic.co/u/kmz161)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 9:56am UTC](https://discuss.elastic.co/t/cant-deploy-elastic-cluster-with-eck/351345 "2024-01-18T09:56:06Z")
Hello! I try to deploy Elasticsearch using ECK. But I have problem with Persistence Volume. My elastic manifest kind: Elasticsearch metadata: name: opencti-elastic spec: version: 8.11.4 volumeClaimDeletePolicy:… --- ## [Merge Data Streams from Integrations](https://discuss.elastic.co/t/merge-data-streams-from-integrations/351346)
**Author:** [@longansoju](https://discuss.elastic.co/u/longansoju)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 10:02am UTC](https://discuss.elastic.co/t/merge-data-streams-from-integrations/351346 "2024-01-18T10:02:13Z")
My setup is consists Fleet Management together with Tenable Integration. The issue with this is Tenable's Integration comes with multiple data streams. The two that I'm focusing on are asset and vulnerability. I wan… --- ## [How to set a specific bin folder for Elasticsearch 7.14](https://discuss.elastic.co/t/how-to-set-a-specific-bin-folder-for-elasticsearch-7-14/351344)
**Author:** [@sbottura](https://discuss.elastic.co/u/sbottura)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 9:51am UTC](https://discuss.elastic.co/t/how-to-set-a-specific-bin-folder-for-elasticsearch-7-14/351344 "2024-01-18T09:51:44Z")
Hello, I have two different instances of elasticsearch on the same disk on a virtual machine and I am currently using elasticsearch 7.14.1. I just discovered, however, that when elasticsearch 7.14.1 is running, it uses … --- ## [Elastic enterprise search - BadGatewayError \[502\] 'The instance rejected the connection.'](https://discuss.elastic.co/t/elastic-enterprise-search-badgatewayerror-502-the-instance-rejected-the-connection/351341)
**Author:** [@MarieD](https://discuss.elastic.co/u/MarieD)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 9:37am UTC](https://discuss.elastic.co/t/elastic-enterprise-search-badgatewayerror-502-the-instance-rejected-the-connection/351341 "2024-01-18T09:37:07Z")
Hi everyone, We've been using Elasticsearch through App Search. We've been getting the following error from time to time (~3% of our requests): elastic\_enterprise\_search.exceptions.BadGatewayError: \[502\] {'ok': False,… --- ## [problem on highlighting (sentence cutting)](https://discuss.elastic.co/t/problem-on-highlighting-sentence-cutting/351189)
**Author:** [@minwei.deng](https://discuss.elastic.co/u/minwei.deng)\ **Replies:** 2\ **Last updated:** [January 18, 2024, 9:02am UTC](https://discuss.elastic.co/t/problem-on-highlighting-sentence-cutting/351189 "2024-01-18T09:02:59Z")
Hello, I've a problem on highlighting. When I search for the keyword "éolienne", Elastic highlights l' instead of the l'éolienne. (see picture problem\_highlight.png) The complete sentene is : """Daulitz, Domaine de La… --- ## [Web crawler is crawling URLs that are not on the sitemap](https://discuss.elastic.co/t/web-crawler-is-crawling-urls-that-are-not-on-the-sitemap/350533)
**Author:** [@mmaccou](https://discuss.elastic.co/u/mmaccou)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 9:23pm UTC](https://discuss.elastic.co/t/web-crawler-is-crawling-urls-that-are-not-on-the-sitemap/350533 "2024-01-17T21:23:59Z")
I've been struggling to setup this web crawler properly. The sitemap is an XML sitemap, but the format is a table with the link to the page, number of images, and last modified date. The desired experience is for the cra… --- ## [Read Only to Everything in Elastic/Kibana](https://discuss.elastic.co/t/read-only-to-everything-in-elastic-kibana/351089)
**Author:** [@ryans](https://discuss.elastic.co/u/ryans)\ **Replies:** 5\ **Last updated:** [January 17, 2024, 9:03pm UTC](https://discuss.elastic.co/t/read-only-to-everything-in-elastic-kibana/351089 "2024-01-17T21:03:27Z")
Is there a quick/easy setting in Kibana Roles that would give a user full read only permissions to everything within the Elastic Stack? Basically, I want to create a user with a Role where they can see everything an adm… --- ## [GET \_cat/recovery How to display just 3 columns and where files\_percent \> 90%?](https://discuss.elastic.co/t/get-cat-recovery-how-to-display-just-3-columns-and-where-files-percent-90/351307)
**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 8:57pm UTC](https://discuss.elastic.co/t/get-cat-recovery-how-to-display-just-3-columns-and-where-files-percent-90/351307 "2024-01-17T20:57:01Z")
GET \_cat/recovery How to display just 3 columns and where files\_percent \> 90% ? --- ## [Logstash parsing for dynamic fieldname](https://discuss.elastic.co/t/logstash-parsing-for-dynamic-fieldname/351237)
**Author:** [@Priyanka\_chauhan](https://discuss.elastic.co/u/Priyanka_chauhan)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 7:34pm UTC](https://discuss.elastic.co/t/logstash-parsing-for-dynamic-fieldname/351237 "2024-01-17T19:34:19Z")
hi, I want to parse message: My message part is looking like after applying json filter is nodes.processes.C86BB2FAC5F22D51.user.name: value1 nodes.processes.C86BB2FAC5F22D51.user.sid: value2 nodes.files.EA68B2FAC5… --- ## [In elasticsearch.yml file node.attr.storage\_term parameter, what is the meaning of hot and warm?](https://discuss.elastic.co/t/in-elasticsearch-yml-file-node-attr-storage-term-parameter-what-is-the-meaning-of-hot-and-warm/351299)
**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 6:16pm UTC](https://discuss.elastic.co/t/in-elasticsearch-yml-file-node-attr-storage-term-parameter-what-is-the-meaning-of-hot-and-warm/351299 "2024-01-17T18:16:16Z")
In elasticsearch.yml file node.attr.storage\_term parameter, what is the meaning of hot and warm? --- ## [Aggregate to collect data in array](https://discuss.elastic.co/t/aggregate-to-collect-data-in-array/351290)
**Author:** [@masoud\_darvishi](https://discuss.elastic.co/u/masoud_darvishi)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 5:12pm UTC](https://discuss.elastic.co/t/aggregate-to-collect-data-in-array/351290 "2024-01-17T17:12:09Z")
hello this is my data: \[ { type: "a", // value is "a" or "b" number: 15 // number between 1 to 100 }, { type: "b", number: 56 }, { type: "a", number: 40 }, { … --- ## [maxBodyLength limit](https://discuss.elastic.co/t/maxbodylength-limit/351162)
**Author:** [@fdranger](https://discuss.elastic.co/u/fdranger)\ **Replies:** 2\ **Last updated:** [January 17, 2024, 5:03pm UTC](https://discuss.elastic.co/t/maxbodylength-limit/351162 "2024-01-17T17:03:11Z")
log: callAsCurrentUser:scroll|{"scrollId":"DXF1ZXJ5QW5kRmV0Y2gBAAAAAAA\_Q-QWOHdpMWswdlRUamlNX0hoVDBWUFowZw==","scroll":"1m","headers":{"x-kbn-domain":"\*\*\*\*\*\*","x-kbn-user":"\*\*\*\*\*\*"}};;undefined {"type":"log","@timestamp"… --- ## [Logstash agent.\* fields](https://discuss.elastic.co/t/logstash-agent-fields/351261)
**Author:** [@mwitsas](https://discuss.elastic.co/u/mwitsas)\ **Replies:** 6\ **Last updated:** [January 17, 2024, 4:35pm UTC](https://discuss.elastic.co/t/logstash-agent-fields/351261 "2024-01-17T16:35:08Z")
Is it possible to configure logstash to populate agent.\* fields in the same way beats agents do this e.g. agent.type agent.version ... Many thanks --- ## [Rest Java Api - remove\_binary option in Attachment processor](https://discuss.elastic.co/t/rest-java-api-remove-binary-option-in-attachment-processor/351287)
**Author:** [@cpeninou](https://discuss.elastic.co/u/cpeninou)\ **Replies:** 2\ **Last updated:** [January 17, 2024, 3:19pm UTC](https://discuss.elastic.co/t/rest-java-api-remove-binary-option-in-attachment-processor/351287 "2024-01-17T15:19:27Z")
Hello, Es version: 8.11.1 I'm trying to set the option remove\_binary for the Attachment processor to true since the default one is false by using the RestApi java, but this field is missing in the AttachmentProcessor.B… --- ## [Elasticsearch node won't start after updating index setting with index.mapper.dynamic](https://discuss.elastic.co/t/elasticsearch-node-wont-start-after-updating-index-setting-with-index-mapper-dynamic/351101)
**Author:** [@dslavescu](https://discuss.elastic.co/u/dslavescu)\ **Replies:** 3\ **Last updated:** [January 17, 2024, 2:53pm UTC](https://discuss.elastic.co/t/elasticsearch-node-wont-start-after-updating-index-setting-with-index-mapper-dynamic/351101 "2024-01-17T14:53:58Z")
Hello, I have an Elasticsearch cluster with version 7.17.2. I updated one of my indices with the following setting: PUT /testindex/\_settings { "index.mapper.dynamic": true } and everything was OK, my settings were u… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=241) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=243)