# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=654 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 655 --- ## [Master\_not\_discovered\_exception](https://discuss.elastic.co/t/master-not-discovered-exception/301925)
**Author:** [@flavono123](https://discuss.elastic.co/u/flavono123)\ **Replies:** 19\ **Last updated:** [April 15, 2022, 6:20am UTC](https://discuss.elastic.co/t/master-not-discovered-exception/301925 "2022-04-15T06:20:21Z")
With the version 7.15.2 from ubuntu package, I deployed 4 ES nodes in 2 VMs, so 2 nodes fo r each VM. Names of nodes(node.name) are following: es-01-1(9301) es-01-2(9302) es-02-1(9301) es-02-2(9302) Where the prefix, … --- ## [How to Monitor Kibana User Experience](https://discuss.elastic.co/t/how-to-monitor-kibana-user-experience/302484)
**Author:** [@ame123](https://discuss.elastic.co/u/ame123)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 6:19am UTC](https://discuss.elastic.co/t/how-to-monitor-kibana-user-experience/302484 "2022-04-15T06:19:41Z")
Hi, I am trying to monitor our Kibana instances using Elastic APM, I was able to enable the built in APM agent and collect the logs. The built in agent does not have the RUM capability does anybody know how to enable RU… --- ## [Facing error - Creation from saved object not supported by type dashboard](https://discuss.elastic.co/t/facing-error-creation-from-saved-object-not-supported-by-type-dashboard/300302)
**Author:** [@Shreeya\_Rajguru](https://discuss.elastic.co/u/Shreeya_Rajguru)\ **Replies:** 7\ **Last updated:** [April 15, 2022, 5:26am UTC](https://discuss.elastic.co/t/facing-error-creation-from-saved-object-not-supported-by-type-dashboard/300302 "2022-04-15T05:26:02Z")
Hi, I am trying to embed an existing dashboard in a custom plugin using its id as savedObjectID. I have referred the example plugin dashboard\_embeddable\_examples for the same. But I am facing the error - Creation from … --- ## [Count query over the date range doesn't return proper results](https://discuss.elastic.co/t/count-query-over-the-date-range-doesnt-return-proper-results/302476)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 4:51am UTC](https://discuss.elastic.co/t/count-query-over-the-date-range-doesnt-return-proper-results/302476 "2022-04-15T04:51:56Z")
Executing following query curl -s -XGET http://blah:9200/kgacrm-2022.04.15/\_count?pretty=true {"query": {"range" : {"timestamp": { "gte" : "now-15m", "lt" : "now"}}}} { "count" : 1725, "\_shards" : { "total" : 5… --- ## [Kibana asking for Enrollment Token when xpack.security.enabled: false in Elasticsearch](https://discuss.elastic.co/t/kibana-asking-for-enrollment-token-when-xpack-security-enabled-false-in-elasticsearch/302118)
**Author:** [@AdmiralGT](https://discuss.elastic.co/u/AdmiralGT)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 4:12am UTC](https://discuss.elastic.co/t/kibana-asking-for-enrollment-token-when-xpack-security-enabled-false-in-elasticsearch/302118 "2022-04-15T04:12:13Z")
I have Kibana and Elasticsearch running in a kubernetes cluster, both v8.1.2 In my Elasticsearch.yml I have xpack.security.enabled: false This is confirmed by trying to create the enrollment token in Elasticsearch … --- ## [How to extract fields from "message" field in logstash?](https://discuss.elastic.co/t/how-to-extract-fields-from-message-field-in-logstash/302470)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 9:15pm UTC](https://discuss.elastic.co/t/how-to-extract-fields-from-message-field-in-logstash/302470 "2022-04-14T21:15:44Z")
hello, I need help in extracting the fields that come in the "message" field, in case all the fields need to be extracted, can anyone help? here's the field: "message": "Apr 14 16:11:36 tutorial2022-1 sshd\[8454\]: PAM 2… --- ## [Elasticsearch run error](https://discuss.elastic.co/t/elasticsearch-run-error/302370)
**Author:** [@dawiddudek](https://discuss.elastic.co/u/dawiddudek)\ **Replies:** 6\ **Last updated:** [April 14, 2022, 7:54pm UTC](https://discuss.elastic.co/t/elasticsearch-run-error/302370 "2022-04-14T19:54:58Z")
Hi, i tried install and run Elasticsearch but service is still failed. I try to run this on Ubuntu 20.04 LTS from apk, dpkg and archive. i found Elasticsearch: Job for elasticsearch.service failed - Stack Overflow but… --- ## [Rules and Connector is not sending ot email;](https://discuss.elastic.co/t/rules-and-connector-is-not-sending-ot-email/301223)
**Author:** [@Amisha\_Thakkar1](https://discuss.elastic.co/u/Amisha_Thakkar1)\ **Replies:** 12\ **Last updated:** [April 14, 2022, 7:48pm UTC](https://discuss.elastic.co/t/rules-and-connector-is-not-sending-ot-email/301223 "2022-04-14T19:48:52Z")
Hi Team I have setup rule under rules and connectors. I am trying to send out an email to my gmail. But its not working. But if i use watcher to send out an email. I am receiving emails. --- ## [Array in Scripted Field](https://discuss.elastic.co/t/array-in-scripted-field/302278)
**Author:** [@Alejandra\_Mata1](https://discuss.elastic.co/u/Alejandra_Mata1)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 7:20pm UTC](https://discuss.elastic.co/t/array-in-scripted-field/302278 "2022-04-14T19:20:17Z")
Hi @LeeDr I saw a publication, the cula you explained how to work with array in a scripted field, I had a question, if I want to pivot in a table, an array so that in each cell a value of the array is assigned, how woul… --- ## [Any way to have Custom Fields for Environment Variables within Metrics Inventory using Elastic Agent](https://discuss.elastic.co/t/any-way-to-have-custom-fields-for-environment-variables-within-metrics-inventory-using-elastic-agent/302466)
**Author:** [@jtocher](https://discuss.elastic.co/u/jtocher)\ **Replies:** 0\ **Last updated:** [April 14, 2022, 6:26pm UTC](https://discuss.elastic.co/t/any-way-to-have-custom-fields-for-environment-variables-within-metrics-inventory-using-elastic-agent/302466 "2022-04-14T18:26:53Z")
We've deployed Elastic Agent across our organization, and use the 'system' integration to grab system metrics from every VM. We view this in the Metrics App in Kibana. We have different environments - Development, Regre… --- ## [VPN Connection Alerts](https://discuss.elastic.co/t/vpn-connection-alerts/302457)
**Author:** [@rwilson](https://discuss.elastic.co/u/rwilson)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 5:31pm UTC](https://discuss.elastic.co/t/vpn-connection-alerts/302457 "2022-04-14T17:31:10Z")
Good morning, I am trying to configure an alert to email admins whenever there is a new user connecting to a VPN. I am fairly new to the Elastic platform and need some assistance in creating these alerts. The only pre… --- ## [Kibana server is not ready yet, unavailable\_shards\_exception](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-unavailable-shards-exception/302459)
**Author:** [@Dave\_G](https://discuss.elastic.co/u/Dave_G)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 5:24pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-unavailable-shards-exception/302459 "2022-04-14T17:24:58Z")
We have a four-node Elasticsearch cluster running ES 7.16.2 and Kibana 7.16.2. Since the last upgrade, our Kibana page is showing Kibana server is not ready yet The Kibana log shows this error repeated numerous times: … --- ## [Cannot log into Kibana using the standard UN and PW](https://discuss.elastic.co/t/cannot-log-into-kibana-using-the-standard-un-and-pw/302440)
**Author:** [@ella.parker](https://discuss.elastic.co/u/ella.parker)\ **Replies:** 3\ **Last updated:** [April 14, 2022, 3:00pm UTC](https://discuss.elastic.co/t/cannot-log-into-kibana-using-the-standard-un-and-pw/302440 "2022-04-14T15:00:01Z")
I have tried accessing Kibana using both my "Elastic Training" e-mail and password. I was then advised to use the standard log in ("training" username and password). I still cannot access Kibana. Any help would be apprec… --- ## [Installation of ELK on Windows help](https://discuss.elastic.co/t/installation-of-elk-on-windows-help/302333)
**Author:** [@insurin](https://discuss.elastic.co/u/insurin)\ **Replies:** 5\ **Last updated:** [April 14, 2022, 1:39pm UTC](https://discuss.elastic.co/t/installation-of-elk-on-windows-help/302333 "2022-04-14T13:39:39Z")
Hi all, need some help with Windows install. Windows Server 2022, ELK 8.12. I am trying to install everything on the 1 box. Steps for far Installed Elasticsearch using Elasticsearch.bat. This creates the elastic passwo… --- ## [Kibana keeps restarting with no error](https://discuss.elastic.co/t/kibana-keeps-restarting-with-no-error/301868)
**Author:** [@radw](https://discuss.elastic.co/u/radw)\ **Replies:** 10\ **Last updated:** [April 14, 2022, 1:35pm UTC](https://discuss.elastic.co/t/kibana-keeps-restarting-with-no-error/301868 "2022-04-14T13:35:01Z")
Hi all. I've deployed an EK stack on GKE, with operator 1.9.1, but my kibana pod keeps restarting. The only pertinent log which I've been able to extract from kibana's pods is this: rpc error: code = NotFound desc = a… --- ## [Advice to get different unstrctured log data into structured format](https://discuss.elastic.co/t/advice-to-get-different-unstrctured-log-data-into-structured-format/302433)
**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\ **Replies:** 0\ **Last updated:** [April 14, 2022, 1:08pm UTC](https://discuss.elastic.co/t/advice-to-get-different-unstrctured-log-data-into-structured-format/302433 "2022-04-14T13:08:17Z")
I am new to Logstash. I have a processing question. I am getting these kind of logs with Filebeat on the "mmesage" field, from the same host. Sometimes different Files. How would I process to make those Messages I am get… --- ## [Slow handling of documents when large text in a field](https://discuss.elastic.co/t/slow-handling-of-documents-when-large-text-in-a-field/302431)
**Author:** [@lubosvr](https://discuss.elastic.co/u/lubosvr)\ **Replies:** 0\ **Last updated:** [April 14, 2022, 12:34pm UTC](https://discuss.elastic.co/t/slow-handling-of-documents-when-large-text-in-a-field/302431 "2022-04-14T12:34:54Z")
Hi, We have problems when handling for documents with large content in a single field. We have index with mapping like this: "mappings" : { "dynamic" : "false",... "properties" : { "created" : … --- ## [Netscout arbor legacy syslog parsing - Audit log issue](https://discuss.elastic.co/t/netscout-arbor-legacy-syslog-parsing-audit-log-issue/302340)
**Author:** [@Xor44](https://discuss.elastic.co/u/Xor44)\ **Replies:** 5\ **Last updated:** [April 14, 2022, 12:40pm UTC](https://discuss.elastic.co/t/netscout-arbor-legacy-syslog-parsing-audit-log-issue/302340 "2022-04-14T12:40:58Z")
Hi Folks , I need your help to resolve the issue below . I'm trying since many days to parse some audit logs .You will find some sample below . Idea is to simply extract these field . Field Need to be extracted … --- ## [How to retrieve the number of matched terms?](https://discuss.elastic.co/t/how-to-retrieve-the-number-of-matched-terms/302430)
**Author:** [@Filip4D](https://discuss.elastic.co/u/Filip4D)\ **Replies:** 0\ **Last updated:** [April 14, 2022, 12:33pm UTC](https://discuss.elastic.co/t/how-to-retrieve-the-number-of-matched-terms/302430 "2022-04-14T12:33:57Z")
Hey everyone, is there a way to count the number of matching words in the results. I.e. if I have the following query, I'd like to know for the results set, how many of the words: african, american and male were matched … --- ## [Twitter Logstash pipeline stops after a certain period](https://discuss.elastic.co/t/twitter-logstash-pipeline-stops-after-a-certain-period/302425)
**Author:** [@dihiaselma](https://discuss.elastic.co/u/dihiaselma)\ **Replies:** 2\ **Last updated:** [April 14, 2022, 12:31pm UTC](https://discuss.elastic.co/t/twitter-logstash-pipeline-stops-after-a-certain-period/302425 "2022-04-14T12:31:21Z")
Hello; I have created a pipeline logstash to retrieve data from twitter, then insert these data into Elasticsearch. It works fine for a certain period then, it stops without any error in logs. I have just to restart i… --- ## [What is proper configuration for metrics in elasticstack to reduce memory footprint?](https://discuss.elastic.co/t/what-is-proper-configuration-for-metrics-in-elasticstack-to-reduce-memory-footprint/299950)
**Author:** [@sokolmateusz](https://discuss.elastic.co/u/sokolmateusz)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 10:49am UTC](https://discuss.elastic.co/t/what-is-proper-configuration-for-metrics-in-elasticstack-to-reduce-memory-footprint/299950 "2022-04-14T10:49:55Z")
I'm using elasticstack for monitoring and logging our kubernetes cluster (with elasticsearch , filebeat , metricbeat , and kibana ). For some reason metricbeat collects unprecedented amount of data for just few pods (af… --- ## [QDSL Query: date\_histogram aggregating the results of a date\_histogram](https://discuss.elastic.co/t/qdsl-query-date-histogram-aggregating-the-results-of-a-date-histogram/302414)
**Author:** [@sebneu](https://discuss.elastic.co/u/sebneu)\ **Replies:** 0\ **Last updated:** [April 14, 2022, 9:29am UTC](https://discuss.elastic.co/t/qdsl-query-date-histogram-aggregating-the-results-of-a-date-histogram/302414 "2022-04-14T09:29:41Z")
Hi, I would like to stack two date-histograms, but I do not have a clue how to do it... Say, it's the traffic going through an interface and I want to receive the daily or hourly peaks of data in 60 minutes. For the p… --- ## [Elasticsearch immutable](https://discuss.elastic.co/t/elasticsearch-immutable/302413)
**Author:** [@111401](https://discuss.elastic.co/u/111401)\ **Replies:** 0\ **Last updated:** [April 14, 2022, 9:28am UTC](https://discuss.elastic.co/t/elasticsearch-immutable/302413 "2022-04-14T09:28:58Z")
Hi, I try to understand immutable in Elasticsearch, and read the article Updating API and Partial Update API , but still not clear about it. The article said Documents in Elasticsearch are immutable, but the Update API… --- ## [Send all data to one index and specific fields to another at same time](https://discuss.elastic.co/t/send-all-data-to-one-index-and-specific-fields-to-another-at-same-time/302381)
**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\ **Replies:** 2\ **Last updated:** [April 14, 2022, 8:50am UTC](https://discuss.elastic.co/t/send-all-data-to-one-index-and-specific-fields-to-another-at-same-time/302381 "2022-04-14T08:50:24Z")
Hello, I've been reading for a long time in different sources if it's possible to send all data processed by logstash to one index and at the same time send just some specific fields of this data to another different in… --- ## [Use field name in datastream namespace or dataset](https://discuss.elastic.co/t/use-field-name-in-datastream-namespace-or-dataset/302188)
**Author:** [@sirReeall](https://discuss.elastic.co/u/sirReeall)\ **Replies:** 5\ **Last updated:** [April 14, 2022, 8:17am UTC](https://discuss.elastic.co/t/use-field-name-in-datastream-namespace-or-dataset/302188 "2022-04-14T08:17:11Z")
I'm trying to use a field with logstash output to Elasticsearch but I can't seem to get this to work. My configuration is as below: output { elasticsearch { hosts =\> "es01" data\_stream =\> "true" data… --- ## [How to export Kibana search query results to CSV file with more than one million records](https://discuss.elastic.co/t/how-to-export-kibana-search-query-results-to-csv-file-with-more-than-one-million-records/301412)
**Author:** [@fymaterials](https://discuss.elastic.co/u/fymaterials)\ **Replies:** 3\ **Last updated:** [April 14, 2022, 7:39am UTC](https://discuss.elastic.co/t/how-to-export-kibana-search-query-results-to-csv-file-with-more-than-one-million-records/301412 "2022-04-14T07:39:27Z")
I used Kibana to query the index, and use export under resource tab to export query results. How can I export query results if there are million records? --- ## [Eck does take metadata name as role name](https://discuss.elastic.co/t/eck-does-take-metadata-name-as-role-name/302186)
**Author:** [@Rasoul\_Ahmadi](https://discuss.elastic.co/u/Rasoul_Ahmadi)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 7:35am UTC](https://discuss.elastic.co/t/eck-does-take-metadata-name-as-role-name/302186 "2022-04-14T07:35:52Z")
hi I have encountered a potentially ridiculous problem and can't find my way out I would appreciate any help my YAML file apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: logging na… --- ## [Elasticsearch non blocking ElasticsearchAsyncSearchAsyncClient and ElasticsearchAsyncClient](https://discuss.elastic.co/t/elasticsearch-non-blocking-elasticsearchasyncsearchasyncclient-and-elasticsearchasyncclient/302077)
**Author:** [@saeed\_shahsavan](https://discuss.elastic.co/u/saeed_shahsavan)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 6:57am UTC](https://discuss.elastic.co/t/elasticsearch-non-blocking-elasticsearchasyncsearchasyncclient-and-elasticsearchasyncclient/302077 "2022-04-14T06:57:32Z")
Recently I have upgraded my project to use Elasticsearch so I have changed my client to use ElasticsearchAsyncSearchAsyncClient and ElasticsearchAsyncClient unfortunately in both clients my response time increased huge… --- ## [Display data from external REST API in Kibana](https://discuss.elastic.co/t/display-data-from-external-rest-api-in-kibana/301317)
**Author:** [@SuprithaAradhya](https://discuss.elastic.co/u/SuprithaAradhya)\ **Replies:** 2\ **Last updated:** [April 14, 2022, 6:06am UTC](https://discuss.elastic.co/t/display-data-from-external-rest-api-in-kibana/301317 "2022-04-14T06:06:32Z")
I want to display some data in Kibana but this data is not present in Elasticsearch or Kibana. I want to read this data from an external REST API, i would be happy if I can do this inside Kibana page or can I add a new p… --- ## [Query array of keyword responce different in source and docfields](https://discuss.elastic.co/t/query-array-of-keyword-responce-different-in-source-and-docfields/302389)
**Author:** [@waitingF](https://discuss.elastic.co/u/waitingF)\ **Replies:** 0\ **Last updated:** [April 14, 2022, 3:34am UTC](https://discuss.elastic.co/t/query-array-of-keyword-responce-different-in-source-and-docfields/302389 "2022-04-14T03:34:43Z")
I have an mapping of keyword field, like below PUT test-map { "mappings": { "properties": { "field": { "type": "keyword" } } } } And I post a doc: POST … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=653) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=655)