# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=629 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 630 --- ## [Elastic Endpoint Security installation in scale](https://discuss.elastic.co/t/elastic-endpoint-security-installation-in-scale/305153)
**Author:** [@Idan\_Abramovich](https://discuss.elastic.co/u/Idan_Abramovich)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 5:31pm UTC](https://discuss.elastic.co/t/elastic-endpoint-security-installation-in-scale/305153 "2022-05-19T17:31:11Z")
Hi , Do you have any idea how to install the Endpoint Security on about 1000 ~ Machines? Thank you! --- ## [Issue searching for first\_name and last\_name when there is a compound name](https://discuss.elastic.co/t/issue-searching-for-first-name-and-last-name-when-there-is-a-compound-name/305124)
**Author:** [@celo1](https://discuss.elastic.co/u/celo1)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 4:39pm UTC](https://discuss.elastic.co/t/issue-searching-for-first-name-and-last-name-when-there-is-a-compound-name/305124 "2022-05-19T16:39:57Z")
Hi, I am newbie to ES and I am trying to create a search as you type experience that will find clients by their first name, last name, email and phone number. I am using the code below but it is not working as expected w… --- ## [Apm system.memory.actual.free and system.memory.total not exists in mapping](https://discuss.elastic.co/t/apm-system-memory-actual-free-and-system-memory-total-not-exists-in-mapping/303359)
**Author:** [@Shahin\_ke](https://discuss.elastic.co/u/Shahin_ke)\ **Replies:** 5\ **Last updated:** [May 19, 2022, 4:25pm UTC](https://discuss.elastic.co/t/apm-system-memory-actual-free-and-system-memory-total-not-exists-in-mapping/303359 "2022-05-19T16:25:20Z")
Kibana version : Kibana version 8.1.2 Elasticsearch version : Elasticsearch version 8.1.2 APM Server version : fleet integrated 8.1.2 Original install method (e.g. download page, yum, deb, from source, etc.) and ve… --- ## [If statement ruby filter](https://discuss.elastic.co/t/if-statement-ruby-filter/305093)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 6\ **Last updated:** [May 19, 2022, 3:42pm UTC](https://discuss.elastic.co/t/if-statement-ruby-filter/305093 "2022-05-19T15:42:50Z")
Hi, I have a small problem in if statement under ruby here my code: filter { grok { match =\> { "message" =\> "%{GREEDYDATA:log\_message}" }} mutate { split =\> {"message" =\> "|"} } ruby { code =\> "event.set('num… --- ## [Unable to split Arrays into fields -parsing XML Attributes of an unknown number of child elements](https://discuss.elastic.co/t/unable-to-split-arrays-into-fields-parsing-xml-attributes-of-an-unknown-number-of-child-elements/305144)
**Author:** [@rubberband](https://discuss.elastic.co/u/rubberband)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 3:23pm UTC](https://discuss.elastic.co/t/unable-to-split-arrays-into-fields-parsing-xml-attributes-of-an-unknown-number-of-child-elements/305144 "2022-05-19T15:23:10Z")
Hi, I'm trying to parse some XML content using Logstash. I'm trying to get the attributes as separate fields. Each \ element will have some attributes that need to be parsed as fields and an unknown number of \ **Author:** [@zubair\_aftab](https://discuss.elastic.co/u/zubair_aftab)\ **Replies:** 7\ **Last updated:** [May 19, 2022, 3:06pm UTC](https://discuss.elastic.co/t/unable-to-get-time-difference-with-ruby-in-logstash/304747 "2022-05-19T15:06:22Z") I have 2 time fields Time1 and Time2. I want to get there difference but getting error "Ruby exception occurred: undefined method \`-' for nil:NilClass". Below is the code. what is wrong in it?? \` if \[Time1\] { date{ … --- ## [Explore underlying data issue for TSVB (Bar Chart 1M intervals)](https://discuss.elastic.co/t/explore-underlying-data-issue-for-tsvb-bar-chart-1m-intervals/305207)
**Author:** [@MMurza](https://discuss.elastic.co/u/MMurza)\ **Replies:** 0\ **Last updated:** [May 19, 2022, 3:02pm UTC](https://discuss.elastic.co/t/explore-underlying-data-issue-for-tsvb-bar-chart-1m-intervals/305207 "2022-05-19T15:02:46Z")
Hello! Is there a way to workaround this bug? Maybe it was fixed in recent versions? In TSVB visual I have a bar chart, with timeline interval set to 1 month. Add visual to dashboard, switch to view mode in dashboard. … --- ## [Create index with index-settings](https://discuss.elastic.co/t/create-index-with-index-settings/305161)
**Author:** [@Alexander\_Ott](https://discuss.elastic.co/u/Alexander_Ott)\ **Replies:** 2\ **Last updated:** [May 19, 2022, 2:58pm UTC](https://discuss.elastic.co/t/create-index-with-index-settings/305161 "2022-05-19T14:58:31Z")
We are trying to migrate from Elasticsearch 6.7.1 to Elasticsearch 8.2.0. In Elasticsearch 6.7.1 it was possible to provide index-settings within an CreateIndexRequest as follows { "index": { "mapping": { … --- ## [Why would Kibana not show all docs?](https://discuss.elastic.co/t/why-would-kibana-not-show-all-docs/305187)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 5\ **Last updated:** [May 19, 2022, 2:32pm UTC](https://discuss.elastic.co/t/why-would-kibana-not-show-all-docs/305187 "2022-05-19T14:32:15Z")
I just created an index with 235 docs all created within the same second. In devtools a search returns all 235 docs, however Kibana, on the first screen before any filtering only returns 177. I don't know where to look… --- ## [Dissect Filter, Creating Subfields](https://discuss.elastic.co/t/dissect-filter-creating-subfields/305170)
**Author:** [@shinobu](https://discuss.elastic.co/u/shinobu)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 11:59am UTC](https://discuss.elastic.co/t/dissect-filter-creating-subfields/305170 "2022-05-19T11:59:04Z")
Hello, how can i get dissect to create a structure with subfields? dissect { mapping =\> { "message" =\> "%{test.subfield}.%{test.subfield2}" } } I would expect so… --- ## [Kibana pie chart with slices for different frequency values](https://discuss.elastic.co/t/kibana-pie-chart-with-slices-for-different-frequency-values/305175)
**Author:** [@Jaime\_Fernandez](https://discuss.elastic.co/u/Jaime_Fernandez)\ **Replies:** 0\ **Last updated:** [May 19, 2022, 11:00am UTC](https://discuss.elastic.co/t/kibana-pie-chart-with-slices-for-different-frequency-values/305175 "2022-05-19T11:00:17Z")
Hi, I have an ES index where each document represents a user login. The document contains a "user\_id" field (the other fields are not relevant). I need to show a pie chart in kibana with the following slices: "1" wit… --- ## [Socket error when starting kibana](https://discuss.elastic.co/t/socket-error-when-starting-kibana/304011)
**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\ **Replies:** 3\ **Last updated:** [May 19, 2022, 10:15am UTC](https://discuss.elastic.co/t/socket-error-when-starting-kibana/304011 "2022-05-19T10:15:17Z")
Hello Team, kindly advise why I am getting the following error when starting Kibana? SSL generated using: \[elastic@rb-in-prod-kibana-01 Elasticsearch\]$ ./bin/Elasticsearch-certutil http ## Elasticsearch HTTP Certific… --- ## [Query in Runtime Field](https://discuss.elastic.co/t/query-in-runtime-field/305165)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 0\ **Last updated:** [May 19, 2022, 10:14am UTC](https://discuss.elastic.co/t/query-in-runtime-field/305165 "2022-05-19T10:14:28Z")
Hi, I'm creating a runtime field and want to fetch data from Elasticsearch by performing a query. Below is my query GET prod\_logistic\_parcel\_index/\_search { "query": { "query\_string": { "query": "(71116812… --- ## [MongoDB Output plugin 3.1.7 error](https://discuss.elastic.co/t/mongodb-output-plugin-3-1-7-error/305160)
**Author:** [@bhumikadave](https://discuss.elastic.co/u/bhumikadave)\ **Replies:** 0\ **Last updated:** [May 19, 2022, 9:56am UTC](https://discuss.elastic.co/t/mongodb-output-plugin-3-1-7-error/305160 "2022-05-19T09:56:32Z")
Hello, I am not able to connect to MongoDB Atlas with below error.Using plugin version 3.1.7. \[WARN \]\[logstash.outputs.mongodb \]\[main\] MONGODB | Failed to handshake with \: 27017 ArgumentError: wrong number… --- ## [How to balance my elasticsearch cluster](https://discuss.elastic.co/t/how-to-balance-my-elasticsearch-cluster/305083)
**Author:** [@Arethusa](https://discuss.elastic.co/u/Arethusa)\ **Replies:** 12\ **Last updated:** [May 19, 2022, 9:52am UTC](https://discuss.elastic.co/t/how-to-balance-my-elasticsearch-cluster/305083 "2022-05-19T09:52:47Z")
Hello, I want to balance my Elasticsearch cluster. I am on version 7.16.3 I have 5 servers on cluster, but the data are not use symmetrically : ELS01 : 62% ELS02 : 50% ELS03 : 69% ELS04 : 76% ELS05 : 86% This is… --- ## [Permission denied (os:windows)](https://discuss.elastic.co/t/permission-denied-os-windows/304923)
**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\ **Replies:** 14\ **Last updated:** [May 19, 2022, 9:33am UTC](https://discuss.elastic.co/t/permission-denied-os-windows/304923 "2022-05-19T09:33:48Z")
Am starting Elasticsearch like this cd elasticsearch/bin/elasticsearch.bat but am getting permission denied when am accessing one of my es documents through my API. am not understanding what's the issue here . Am usin… --- ## [Creating a kibana rule to report the table of documents for the hits received in indices](https://discuss.elastic.co/t/creating-a-kibana-rule-to-report-the-table-of-documents-for-the-hits-received-in-indices/305154)
**Author:** [@vinitnair93](https://discuss.elastic.co/u/vinitnair93)\ **Replies:** 0\ **Last updated:** [May 19, 2022, 9:18am UTC](https://discuss.elastic.co/t/creating-a-kibana-rule-to-report-the-table-of-documents-for-the-hits-received-in-indices/305154 "2022-05-19T09:18:00Z")
I have written a kibana rule (Elasticsearch query) that would check every 1 day for an index with size 1 Elasticsearch query - { "query":{ "match\_all" : {} }, "fields": \[ "@timestamp", "column\_2" \], "\_source": … --- ## [Grok logstash JSON](https://discuss.elastic.co/t/grok-logstash-json/305152)
**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\ **Replies:** 0\ **Last updated:** [May 19, 2022, 9:11am UTC](https://discuss.elastic.co/t/grok-logstash-json/305152 "2022-05-19T09:11:55Z")
EL 8.2 Kibana 8.2 Hello Team, could you please advise how to merge the 2 lines below and generate the GONK command? {"log":"0.3817706468179257\\r\\n","stream":"stdout","time":"2022-05-18T10:37:31.746257847Z"} {"log":"1… --- ## [Timelion graph tuning](https://discuss.elastic.co/t/timelion-graph-tuning/304798)
**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\ **Replies:** 4\ **Last updated:** [May 19, 2022, 7:54am UTC](https://discuss.elastic.co/t/timelion-graph-tuning/304798 "2022-05-19T07:54:42Z")
Hi Again, I want to remove this vertical straight line. Can we able to do that? And also remove the horizontal straight line. All things has been encircled with blue line which I want to remove. Can we do that? Reg… --- ## [About the immutableOpenmap in elasticsearch](https://discuss.elastic.co/t/about-the-immutableopenmap-in-elasticsearch/305121)
**Author:** [@xingzhao](https://discuss.elastic.co/u/xingzhao)\ **Replies:** 5\ **Last updated:** [May 19, 2022, 7:45am UTC](https://discuss.elastic.co/t/about-the-immutableopenmap-in-elasticsearch/305121 "2022-05-19T07:45:46Z")
I would like to ask what consideration is the immutableOpenmap in Elasticsearch designed for? What kind of utility does it have? It is used in both aliasmetadata and indexmetadata. My personal guess is that it has someth… --- ## [Logstash parse logfiles](https://discuss.elastic.co/t/logstash-parse-logfiles/305128)
**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 7:43am UTC](https://discuss.elastic.co/t/logstash-parse-logfiles/305128 "2022-05-19T07:43:31Z")
Hello Team, kindly advise how I can parse the following logfile entry on Kibana/logstash? {"log":"LOG: aborting any active transactions\\n","stream":"stderr","time":"2022-05-17T11:04:05.353977974Z"} {"log":"FATAL: ter… --- ## [Show highlights for matched terms query (for integer values)](https://discuss.elastic.co/t/show-highlights-for-matched-terms-query-for-integer-values/305080)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 2\ **Last updated:** [May 19, 2022, 7:00am UTC](https://discuss.elastic.co/t/show-highlights-for-matched-terms-query-for-integer-values/305080 "2022-05-19T07:00:31Z")
We've got a mapping for field classes: "classes" : { "type" : "integer" } Is there a way to show highlight for the matching classes if we search it e.g. via terms-query: { "terms" : { "classes" : \[ 1, 5, 10 \] … --- ## [Event Analyser error](https://discuss.elastic.co/t/event-analyser-error/305070)
**Author:** [@okopnik](https://discuss.elastic.co/u/okopnik)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 12:44pm UTC](https://discuss.elastic.co/t/event-analyser-error/305070 "2022-05-18T12:44:18Z")
Hello, We're using Kibana 7.17.2 and trying to enable the Timelines and Event Renderers We're using an index named logs-sysmon containing Sysmon events We can see the process tree, but when trying to look on a specifi… --- ## [Scroll failed on some shards?](https://discuss.elastic.co/t/scroll-failed-on-some-shards/305116)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 2:08am UTC](https://discuss.elastic.co/t/scroll-failed-on-some-shards/305116 "2022-05-19T02:08:18Z")
Hi, We're using 6.2.3, and I noticed some errors in our application logs yesterday that indicated a few shards (eg, 1-4 out of total of 90) failed while processing a scroll request. Unfortunately I don't have access to … --- ## [Logstash input file configuration](https://discuss.elastic.co/t/logstash-input-file-configuration/305081)
**Author:** [@Iss](https://discuss.elastic.co/u/Iss)\ **Replies:** 10\ **Last updated:** [May 19, 2022, 2:07am UTC](https://discuss.elastic.co/t/logstash-input-file-configuration/305081 "2022-05-19T02:07:05Z")
Hi! I use logstash to import a json file into Elasticsearch. I use the following configuration but the index is not created in Elasticsearch (or the consol). input{ file{ codec=\>multiline{ pattern =\>"^{header" … --- ## [Ingestion pipelines for new indices created everyday](https://discuss.elastic.co/t/ingestion-pipelines-for-new-indices-created-everyday/305051)
**Author:** [@katakam\_chaitanya](https://discuss.elastic.co/u/katakam_chaitanya)\ **Replies:** 4\ **Last updated:** [May 18, 2022, 9:41pm UTC](https://discuss.elastic.co/t/ingestion-pipelines-for-new-indices-created-everyday/305051 "2022-05-18T21:41:16Z")
I have new indices created on my Elasticsearch cluster everyday. I want to take all my docs through a ingestion pipeline. But as new indices get created automatically as date changes ( index name example:cwl-12.12.2022… --- ## [Couldn't start elasticsearch daemon on my magento2 cloud](https://discuss.elastic.co/t/couldnt-start-elasticsearch-daemon-on-my-magento2-cloud/305079)
**Author:** [@ingEnricoGiorgi](https://discuss.elastic.co/u/ingEnricoGiorgi)\ **Replies:** 4\ **Last updated:** [May 18, 2022, 9:39pm UTC](https://discuss.elastic.co/t/couldnt-start-elasticsearch-daemon-on-my-magento2-cloud/305079 "2022-05-18T21:39:36Z")
Couldn't start Elasticsearch daemon on my magento2 cloud log after sudo journactl -xe systemctl status of Elasticsearch --- ## [ES is upgraded from version 6.3.2 to 6.8.22 in a rolling manner. After the upgrade, the cluster status is abnormal. How to roll back to 6.3.2?](https://discuss.elastic.co/t/es-is-upgraded-from-version-6-3-2-to-6-8-22-in-a-rolling-manner-after-the-upgrade-the-cluster-status-is-abnormal-how-to-roll-back-to-6-3-2/304533)
**Author:** [@qiuxb](https://discuss.elastic.co/u/qiuxb)\ **Replies:** 10\ **Last updated:** [May 18, 2022, 9:37pm UTC](https://discuss.elastic.co/t/es-is-upgraded-from-version-6-3-2-to-6-8-22-in-a-rolling-manner-after-the-upgrade-the-cluster-status-is-abnormal-how-to-roll-back-to-6-3-2/304533 "2022-05-18T21:37:04Z")
Currently I am working on the ES rolling upgrade plan. The official manual lists the rolling upgrade steps, but there is no rollback step. After the ES rolling upgrade, the cluster status is abnormal or the application w… --- ## [Bulk request how to?](https://discuss.elastic.co/t/bulk-request-how-to/305096)
**Author:** [@frankmontyne](https://discuss.elastic.co/u/frankmontyne)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 6:20pm UTC](https://discuss.elastic.co/t/bulk-request-how-to/305096 "2022-05-18T18:20:50Z")
Hi I'm a bit confused on how to perform a bulk request with the new Java API client. To index one document I use the following code that works without problems. Since we are using GSON I pass the json string representat… --- ## [Is there any change in the query-syntax of Elasticsearch?](https://discuss.elastic.co/t/is-there-any-change-in-the-query-syntax-of-elasticsearch/305084)
**Author:** [@Ashrut](https://discuss.elastic.co/u/Ashrut)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 2:42pm UTC](https://discuss.elastic.co/t/is-there-any-change-in-the-query-syntax-of-elasticsearch/305084 "2022-05-18T14:42:19Z")
Hi, everyone. I had written this query when I was using Elasticsearch (5.6). --\> \< { from: params.fetch(:offset), size: params.fetch(:size), \_source: { excludes: \["attachments.\*"\] }, sort: SortB… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=628) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=630)