# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=633 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 634 --- ## [ElasticSearch cluster design](https://discuss.elastic.co/t/elasticsearch-cluster-design/304707)
**Author:** [@Rayyanalbaz](https://discuss.elastic.co/u/Rayyanalbaz)\ **Replies:** 1\ **Last updated:** [May 13, 2022, 6:11pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-design/304707 "2022-05-13T18:11:49Z")
Hello Elastic Team/Community I’m currently in the process of designing a cluster that has 3 nodes. I was a bit confused on how will the requests be sent to the cluster. Should I be targeting the master node? Or split … --- ## [Logstash parse PDF from S3](https://discuss.elastic.co/t/logstash-parse-pdf-from-s3/304700)
**Author:** [@vsangam](https://discuss.elastic.co/u/vsangam)\ **Replies:** 0\ **Last updated:** [May 13, 2022, 4:56pm UTC](https://discuss.elastic.co/t/logstash-parse-pdf-from-s3/304700 "2022-05-13T16:56:06Z")
Hi, I have few files in s3 bucket. They are all PDF. Can I use S3 plugin to extract content from those PDF files. If not, is there any way to parse the PDF files from S3.... Please help. Thanks, Vsangam --- ## [Metricbeat can't make visualization due to null value in index fields value](https://discuss.elastic.co/t/metricbeat-cant-make-visualization-due-to-null-value-in-index-fields-value/302996)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 7\ **Last updated:** [May 13, 2022, 4:47pm UTC](https://discuss.elastic.co/t/metricbeat-cant-make-visualization-due-to-null-value-in-index-fields-value/302996 "2022-05-13T16:47:57Z")
Hello All, I am unable to create TSVB visulization TOP N in kibana,as I'm trying to display system.filesystem.used.pct of mount point but both these fiels have null values(-) in index. Any suggestion would be helpful! … --- ## [Error when accessing Security module on Elasticsearch 8.1 (Error: n is undefined)](https://discuss.elastic.co/t/error-when-accessing-security-module-on-elasticsearch-8-1-error-n-is-undefined/301278)
**Author:** [@aanton](https://discuss.elastic.co/u/aanton)\ **Replies:** 4\ **Last updated:** [May 13, 2022, 2:10pm UTC](https://discuss.elastic.co/t/error-when-accessing-security-module-on-elasticsearch-8-1-error-n-is-undefined/301278 "2022-05-13T14:10:07Z")
Greetings, When trying to access the Security module on Kibana for the Elasticsearch 8.1, I get the following error: Error Error: n is undefined c@http://127.0.0.1:5601/50609/bundles/plugin/securitySolution/8.0.0/sec… --- ## [How to disable geoip usage in 7.16.2](https://discuss.elastic.co/t/how-to-disable-geoip-usage-in-7-16-2/304676)
**Author:** [@rachit\_upadhyay](https://discuss.elastic.co/u/rachit_upadhyay)\ **Replies:** 1\ **Last updated:** [May 13, 2022, 1:13pm UTC](https://discuss.elastic.co/t/how-to-disable-geoip-usage-in-7-16-2/304676 "2022-05-13T13:13:56Z")
Hi, I want to disable the usage of geoip functionality because I have no usage for it. I have a three node cluster, which works fine with one voting only node and two master eligible and data nodes. The Elasticsearch ve… --- ## [Upgrade from version 7.17.3 to 8.1.3 can't get past xpack logging error in upgrade assistant](https://discuss.elastic.co/t/upgrade-from-version-7-17-3-to-8-1-3-cant-get-past-xpack-logging-error-in-upgrade-assistant/304616)
**Author:** [@Moxey](https://discuss.elastic.co/u/Moxey)\ **Replies:** 4\ **Last updated:** [May 13, 2022, 12:10pm UTC](https://discuss.elastic.co/t/upgrade-from-version-7-17-3-to-8-1-3-cant-get-past-xpack-logging-error-in-upgrade-assistant/304616 "2022-05-13T12:10:49Z")
Upgrade deployment Generally available versions 8.1.3 selected Error: Your changes cannot be applied Kibana - 'xpack.security.audit.appender.type' is not allowed Upgrade is greyed out. This is not a just a warning… --- ## [Data Table - Max Bucket Limit - too\_many\_buckets\_exception](https://discuss.elastic.co/t/data-table-max-bucket-limit-too-many-buckets-exception/304342)
**Author:** [@sasank.vemana](https://discuss.elastic.co/u/sasank.vemana)\ **Replies:** 2\ **Last updated:** [May 13, 2022, 11:46am UTC](https://discuss.elastic.co/t/data-table-max-bucket-limit-too-many-buckets-exception/304342 "2022-05-13T11:46:07Z")
"Trying to create too many buckets. Must be less than or equal to: \[65535\] but was \[65536\]. This limit can be set by changing the \[search.max\_buckets\] cluster level setting." When working with a data table, we run into … --- ## [ELK Kibana Angular](https://discuss.elastic.co/t/elk-kibana-angular/304555)
**Author:** [@Farah\_Bhr](https://discuss.elastic.co/u/Farah_Bhr)\ **Replies:** 2\ **Last updated:** [May 13, 2022, 10:10am UTC](https://discuss.elastic.co/t/elk-kibana-angular/304555 "2022-05-13T10:10:30Z")
Hello I am a beginner in Elastic I want to ask if I can create an authentication interface with angular , so that an admin add users who can and interact with dashboards of kibana I mean can I integrate elk in a whole… --- ## [K8s cluster filter](https://discuss.elastic.co/t/k8s-cluster-filter/304589)
**Author:** [@Azondo\_DevOps](https://discuss.elastic.co/u/Azondo_DevOps)\ **Replies:** 1\ **Last updated:** [May 13, 2022, 9:59am UTC](https://discuss.elastic.co/t/k8s-cluster-filter/304589 "2022-05-13T09:59:55Z")
Hello guys. Did someone facing with cluster filter issue? Does anyone of you know how could be fixed? --- ## [How does the kibana "search profiler" "Query Profile" timing work?](https://discuss.elastic.co/t/how-does-the-kibana-search-profiler-query-profile-timing-work/304600)
**Author:** [@stefan.tolksdorf](https://discuss.elastic.co/u/stefan.tolksdorf)\ **Replies:** 2\ **Last updated:** [May 13, 2022, 9:38am UTC](https://discuss.elastic.co/t/how-does-the-kibana-search-profiler-query-profile-timing-work/304600 "2022-05-13T09:38:42Z")
I use version 7.13.1 Query I profile { "query": { "bool": { "must": \[ { "match": { "title": "logstash" } } \], "must\_not": \[ { "m… --- ## [Problem fixing index to realize a scroll with Typescript, node and Express](https://discuss.elastic.co/t/problem-fixing-index-to-realize-a-scroll-with-typescript-node-and-express/304543)
**Author:** [@Vincent92](https://discuss.elastic.co/u/Vincent92)\ **Replies:** 1\ **Last updated:** [May 13, 2022, 8:41am UTC](https://discuss.elastic.co/t/problem-fixing-index-to-realize-a-scroll-with-typescript-node-and-express/304543 "2022-05-13T08:41:32Z")
Hello, I'm new to elastic and I have an issue using scroll method. I've started the development of a small project in Typescript to complete some of Kibana's features and to simplify some actions on the front-end. I u… --- ## [Problem with date filter](https://discuss.elastic.co/t/problem-with-date-filter/304261)
**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\ **Replies:** 5\ **Last updated:** [May 13, 2022, 8:29am UTC](https://discuss.elastic.co/t/problem-with-date-filter/304261 "2022-05-13T08:29:08Z")
Hello, I have been trying to use the date filter plugin but without success. I am trying to parse a field and target it into @timestamp field. My message field contains a date string like the following: 2022-05-09 09:… --- ## [Logstash running on machine has high load average](https://discuss.elastic.co/t/logstash-running-on-machine-has-high-load-average/304321)
**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\ **Replies:** 3\ **Last updated:** [May 13, 2022, 8:28am UTC](https://discuss.elastic.co/t/logstash-running-on-machine-has-high-load-average/304321 "2022-05-13T08:28:15Z")
Hello guys, I am currently running into some issues regarding the usage of logstash. I am using the following architecture: kafka -\> logstash -\> elasticsearch We have 3 kafka brokers running on separated machines, 2 l… --- ## [Error upgrade 8.2](https://discuss.elastic.co/t/error-upgrade-8-2/304594)
**Author:** [@jojodd](https://discuss.elastic.co/u/jojodd)\ **Replies:** 2\ **Last updated:** [May 13, 2022, 8:04am UTC](https://discuss.elastic.co/t/error-upgrade-8-2/304594 "2022-05-13T08:04:32Z")
How can I fix this error that occurs after installing the new version of kibana ? \[FATAL\]\[root\] Error: Unable to complete saved object migrations for the \[.kibana\] index: The Elasticsearch cluster has cluster routing al… --- ## [Logstash indexing Error](https://discuss.elastic.co/t/logstash-indexing-error/304627)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 2\ **Last updated:** [May 13, 2022, 7:57am UTC](https://discuss.elastic.co/t/logstash-indexing-error/304627 "2022-05-13T07:57:32Z")
Dear Team, while indexing the logs from wazuh to logstash and from logstash while indexing to ES getting the error Attempted to send a bulk request but Elasticsearch appears to be unreachable or down {:message=\>"Elasti… --- ## [Is it possible to extract value of data within a field in Kibana?](https://discuss.elastic.co/t/is-it-possible-to-extract-value-of-data-within-a-field-in-kibana/304626)
**Author:** [@thiton](https://discuss.elastic.co/u/thiton)\ **Replies:** 1\ **Last updated:** [May 13, 2022, 7:47am UTC](https://discuss.elastic.co/t/is-it-possible-to-extract-value-of-data-within-a-field-in-kibana/304626 "2022-05-13T07:47:29Z")
Hi, I am trying to extract value of data with a field, but no luck. Please help. Many thanks in advance. For example, I run below script to get the data GET xx-prod-transaction-\*/\_search { "query": { "bool"… --- ## [ELastic query](https://discuss.elastic.co/t/elastic-query/304645)
**Author:** [@nandalapadu\_shamriya](https://discuss.elastic.co/u/nandalapadu_shamriya)\ **Replies:** 0\ **Last updated:** [May 13, 2022, 7:18am UTC](https://discuss.elastic.co/t/elastic-query/304645 "2022-05-13T07:18:34Z")
is there a way to acheive this using elastic query builders for java select id1,IF (count(id2)\>0,count(id2),id2\_name) as id2 from index where id1\_name = 'xxxxxx' and id\_code=2 group by id1 --- ## [Avoid multiple indicies due to versions of auditbeat](https://discuss.elastic.co/t/avoid-multiple-indicies-due-to-versions-of-auditbeat/304644)
**Author:** [@Ulrik](https://discuss.elastic.co/u/Ulrik)\ **Replies:** 0\ **Last updated:** [May 13, 2022, 7:08am UTC](https://discuss.elastic.co/t/avoid-multiple-indicies-due-to-versions-of-auditbeat/304644 "2022-05-13T07:08:35Z")
We are using fleet with Endpoint Security and System integrations, both integrations have default namespace, the result from this is that we gets 2 indicies each day auditbeat-6.8.23-2022.05.13 and auditbeat-6.8.11-2022.… --- ## [Your search products doesn't exist](https://discuss.elastic.co/t/your-search-products-doesnt-exist/304531)
**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\ **Replies:** 1\ **Last updated:** [May 13, 2022, 7:05am UTC](https://discuss.elastic.co/t/your-search-products-doesnt-exist/304531 "2022-05-13T07:05:46Z")
I need to show your searched products not found if a product doesn't exist in database .Here , am using Elasticsearch for searching , if I type a product not in database it will show some other words matched product but … --- ## [Cumulative Cardinality](https://discuss.elastic.co/t/cumulative-cardinality/304351)
**Author:** [@walshe06](https://discuss.elastic.co/u/walshe06)\ **Replies:** 1\ **Last updated:** [May 13, 2022, 6:53am UTC](https://discuss.elastic.co/t/cumulative-cardinality/304351 "2022-05-13T06:53:05Z")
Hi all I am looking to count the number of unique referer values over a specified time period (range) so that I can compare that to the count of referer values within a 15 minute interval using a bucket aggregation. I t… --- ## [Terms Aggregation and get latest document](https://discuss.elastic.co/t/terms-aggregation-and-get-latest-document/304453)
**Author:** [@Liam\_B](https://discuss.elastic.co/u/Liam_B)\ **Replies:** 1\ **Last updated:** [May 13, 2022, 6:40am UTC](https://discuss.elastic.co/t/terms-aggregation-and-get-latest-document/304453 "2022-05-13T06:40:31Z")
Hi I am currently performing a search api call and that aggregates on a field and this works great, it gives me a list of terms and a count of those terms. How would I go about supplementing the search response, with a… --- ## [Count occurrences of a variable term](https://discuss.elastic.co/t/count-occurrences-of-a-variable-term/304511)
**Author:** [@MobileOne](https://discuss.elastic.co/u/MobileOne)\ **Replies:** 6\ **Last updated:** [May 13, 2022, 6:24am UTC](https://discuss.elastic.co/t/count-occurrences-of-a-variable-term/304511 "2022-05-13T06:24:55Z")
In my logs I have a field "message" that has in it among other strings one term "UserID:" followed by a value. This value is mostly different in each document, but sometimes the same UserID is logged. I am trying to fi… --- ## [Create Dashboards Dropdown](https://discuss.elastic.co/t/create-dashboards-dropdown/304574)
**Author:** [@dheeru11](https://discuss.elastic.co/u/dheeru11)\ **Replies:** 2\ **Last updated:** [May 13, 2022, 5:31am UTC](https://discuss.elastic.co/t/create-dashboards-dropdown/304574 "2022-05-13T05:31:04Z")
Hi I have around 10 dashboards already created. I want to have 1 single dashboard which has a dropdown option to select 1 dashboard name and display relevant dashboard data. How to design this ? Thanks, Dheeru --- ## [Change default timestamp field of Index](https://discuss.elastic.co/t/change-default-timestamp-field-of-index/304522)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 2\ **Last updated:** [May 13, 2022, 3:20am UTC](https://discuss.elastic.co/t/change-default-timestamp-field-of-index/304522 "2022-05-13T03:20:03Z")
I have an index pattern in kibana whose timestamp is in UTC, I want to change this default timestamp to another date field. Is there a way to achieve this? --- ## [Logstash config Alertmanager](https://discuss.elastic.co/t/logstash-config-alertmanager/304483)
**Author:** [@linuxxin](https://discuss.elastic.co/u/linuxxin)\ **Replies:** 3\ **Last updated:** [May 13, 2022, 2:53am UTC](https://discuss.elastic.co/t/logstash-config-alertmanager/304483 "2022-05-13T02:53:19Z")
Log resolution using logstash configure keywords to send alarms to Alertmanager for email or Webhook notification --- ## [Cluster reovery failed and data node is not reachability](https://discuss.elastic.co/t/cluster-reovery-failed-and-data-node-is-not-reachability/304630)
**Author:** [@liuhuang9492](https://discuss.elastic.co/u/liuhuang9492)\ **Replies:** 0\ **Last updated:** [May 13, 2022, 2:02am UTC](https://discuss.elastic.co/t/cluster-reovery-failed-and-data-node-is-not-reachability/304630 "2022-05-13T02:02:26Z")
hi, I have run a Elasticsearch cluster in prd. it has 3 master node and 4 data node for version 2.1.1 it has a big index ,about 2.5TB and it only has 5 shards. The index is in translog state for a long time during inde… --- ## [Kibana not sorting by descending order](https://discuss.elastic.co/t/kibana-not-sorting-by-descending-order/304527)
**Author:** [@Jonas1](https://discuss.elastic.co/u/Jonas1)\ **Replies:** 3\ **Last updated:** [May 13, 2022, 1:18am UTC](https://discuss.elastic.co/t/kibana-not-sorting-by-descending-order/304527 "2022-05-13T01:18:02Z")
I clicked the arrow thats facing down but why is it not still in descending order? Please help --- ## [Logstash KV filter escape ":"](https://discuss.elastic.co/t/logstash-kv-filter-escape/304624)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 1\ **Last updated:** [May 12, 2022, 10:54pm UTC](https://discuss.elastic.co/t/logstash-kv-filter-escape/304624 "2022-05-12T22:54:26Z")
Hello, I have a message here (all message will be like this): {"Time": "2022-05-12T04:18:46.077", "HostName": "IBMNOAH", "Cat": "JOBLOG", "Severity": "Err", "SAF": 1, "SAFD": "RACF", "Name": "TEST", "JobName": "DBS1MST… --- ## [503 Service Temporarily Unavailable](https://discuss.elastic.co/t/503-service-temporarily-unavailable/304546)
**Author:** [@Nikos\_Kostis](https://discuss.elastic.co/u/Nikos_Kostis)\ **Replies:** 0\ **Last updated:** [May 12, 2022, 9:39am UTC](https://discuss.elastic.co/t/503-service-temporarily-unavailable/304546 "2022-05-12T09:39:09Z")
Hi I have installed to a k8s cluster in azure the ELK stack, all in version 8.2.0. I have used this guide for assistance elk deployment Unfortunately i get when i try to access kibana from 5601 (i have mapped the ing… --- ## [Expensive aggregation puts load onto a single data node](https://discuss.elastic.co/t/expensive-aggregation-puts-load-onto-a-single-data-node/304607)
**Author:** [@a06ced31bae02498a46d](https://discuss.elastic.co/u/a06ced31bae02498a46d)\ **Replies:** 0\ **Last updated:** [May 12, 2022, 4:32pm UTC](https://discuss.elastic.co/t/expensive-aggregation-puts-load-onto-a-single-data-node/304607 "2022-05-12T16:32:52Z")
Hello team! I've been trying to test our effective timeouts and crafted a special expensive query for that purpose. customer\_id field cardinality is hundreds of thousands – so you can imagine how expensive this aggregat… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=632) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=634)