# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=679

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 680

---

## [Kibana lens visualization is very slow](https://discuss.elastic.co/t/kibana-lens-visualization-is-very-slow/299198)

<div class="topic-metadata">

**Author:** [@notgurev](https://discuss.elastic.co/u/notgurev)\
**Replies:** 10\
**Last updated:** [March 16, 2022, 9:45am UTC](https://discuss.elastic.co/t/kibana-lens-visualization-is-very-slow/299198 "2022-03-16T09:45:25Z")

</div>

I have a cluster consisting of 1 hot (40 cores, 2 SSDs) and 2 cold nodes. I use a data stream to index a lot of data into 50gb one-shard indices with rollover, ILM, etc. Data is also sorted by @timestamp (asc) -- so I be…

---

## [Kibana Panel Filter](https://discuss.elastic.co/t/kibana-panel-filter/299468)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 1\
**Last updated:** [March 16, 2022, 8:25am UTC](https://discuss.elastic.co/t/kibana-panel-filter/299468 "2022-03-16T08:25:33Z")

</div>

Hello All, Can some tell me how can this can be achieved,just show all CPU ,Memory,Diskusage ,Process Memory etc with host name that are critical based on threshhold.Currently I am able to achieve this but issue is some…

---

## [Elasticsearch - solving \`No space left on device\`](https://discuss.elastic.co/t/elasticsearch-solving-no-space-left-on-device/299838)

<div class="topic-metadata">

**Author:** [@sokolmateusz](https://discuss.elastic.co/u/sokolmateusz)\
**Replies:** 0\
**Last updated:** [March 16, 2022, 8:34am UTC](https://discuss.elastic.co/t/elasticsearch-solving-no-space-left-on-device/299838 "2022-03-16T08:34:34Z")

</div>

Hi! I'm using ELK (Elasticsearch, kibana, filebeat, metricbeat) deployed via Helm. I'm collecting small amount logs from a few containers and PVC for Elasticsearch is set to 2Gi. For some reason this space after one n…

---

## [Your browser does not meet the security requirements for kibana?](https://discuss.elastic.co/t/your-browser-does-not-meet-the-security-requirements-for-kibana/299813)

<div class="topic-metadata">

**Author:** [@pinehk](https://discuss.elastic.co/u/pinehk)\
**Replies:** 1\
**Last updated:** [March 16, 2022, 7:31am UTC](https://discuss.elastic.co/t/your-browser-does-not-meet-the-security-requirements-for-kibana/299813 "2022-03-16T07:31:30Z")

</div>

There is a small popup with the message "your browser does not meet the security requirements for kibana" everytime opening Kibana. From related posts it seems to be complaining a non-CSP compliant browser and especially…

---

## [How to find missing logs](https://discuss.elastic.co/t/how-to-find-missing-logs/299823)

<div class="topic-metadata">

**Author:** [@dginfi](https://discuss.elastic.co/u/dginfi)\
**Replies:** 0\
**Last updated:** [March 16, 2022, 7:01am UTC](https://discuss.elastic.co/t/how-to-find-missing-logs/299823 "2022-03-16T07:01:12Z")

</div>

I have logs being forwarding from Panorama to ELK. On ELK server I have filebeats setup with panw module enabled which receives the logs and forwards to logstash. In logstash filter I am using jdbc\_streaming filter for…

---

## [Nagios Performance data =\> Kafka Topic =\> Elastic search(Need to process Nagios performance data)](https://discuss.elastic.co/t/nagios-performance-data-kafka-topic-elastic-search-need-to-process-nagios-performance-data/299594)

<div class="topic-metadata">

**Author:** [@ranjithkodumbu](https://discuss.elastic.co/u/ranjithkodumbu)\
**Replies:** 4\
**Last updated:** [March 16, 2022, 5:13am UTC](https://discuss.elastic.co/t/nagios-performance-data-kafka-topic-elastic-search-need-to-process-nagios-performance-data/299594 "2022-03-16T05:13:20Z")

</div>

Hello team, I am trying to process Nagios performance data to ELK using logstash, I am receiving Nagios performance data format below, need to process and update it to the Elastic index. {"check\_type": "service", "chec…

---

## [Cannot add 10 or more rows to Visualize Library in table view in Kibana](https://discuss.elastic.co/t/cannot-add-10-or-more-rows-to-visualize-library-in-table-view-in-kibana/299350)

<div class="topic-metadata">

**Author:** [@Stek\_new](https://discuss.elastic.co/u/Stek_new)\
**Replies:** 2\
**Last updated:** [March 16, 2022, 5:12am UTC](https://discuss.elastic.co/t/cannot-add-10-or-more-rows-to-visualize-library-in-table-view-in-kibana/299350 "2022-03-16T05:12:27Z")

</div>

Hello! I cannot add 10 or more rows to Visualize Library in table view in Kibana Steps on how to reproduce the issue: Go Dev Tools and run the following query: POST logs-my\_app-default/\_doc { "@timestamp": "2099-…

---

## [Run elasticsearch without initial master nodes configured](https://discuss.elastic.co/t/run-elasticsearch-without-initial-master-nodes-configured/299812)

<div class="topic-metadata">

**Author:** [@auto\_reply\_007](https://discuss.elastic.co/u/auto_reply_007)\
**Replies:** 0\
**Last updated:** [March 16, 2022, 4:24am UTC](https://discuss.elastic.co/t/run-elasticsearch-without-initial-master-nodes-configured/299812 "2022-03-16T04:24:24Z")

</div>

Hi! i have 3 node cluster ( 7.16.2 ) with this config ( example from first node ) cluster.name: sactions cluster.routing.allocation.awareness.attributes: zone cluster.routing.allocation.awareness.force.zone.values: zo…

---

## [How to collect all types of logs from my fortinet firewall using ELK](https://discuss.elastic.co/t/how-to-collect-all-types-of-logs-from-my-fortinet-firewall-using-elk/296830)

<div class="topic-metadata">

**Author:** [@randyvinoth](https://discuss.elastic.co/u/randyvinoth)\
**Replies:** 20\
**Last updated:** [March 16, 2022, 4:20am UTC](https://discuss.elastic.co/t/how-to-collect-all-types-of-logs-from-my-fortinet-firewall-using-elk/296830 "2022-03-16T04:20:54Z")

</div>

I configured Elasticsearch, Logstash and Kibana after lots of errors. I also configured my fortinet firewall for syslogd server to send the logs to ELK server. But I am not getting any data from my firewall. Also I confi…

---

## [Applying slowlog setting on daily rotated search index](https://discuss.elastic.co/t/applying-slowlog-setting-on-daily-rotated-search-index/299298)

<div class="topic-metadata">

**Author:** [@Nobuaki\_Ito](https://discuss.elastic.co/u/Nobuaki_Ito)\
**Replies:** 4\
**Last updated:** [March 16, 2022, 2:58am UTC](https://discuss.elastic.co/t/applying-slowlog-setting-on-daily-rotated-search-index/299298 "2022-03-16T02:58:45Z")

</div>

My team currently own an Elasticsearch with daily rotated index. The index name changes once the daily rotation completes, and hence it requires to have slowlog threshold configured after each daily rotation completes. W…

---

## [Logstash didn't send logs to Elasticsearch after upgrade](https://discuss.elastic.co/t/logstash-didnt-send-logs-to-elasticsearch-after-upgrade/299802)

<div class="topic-metadata">

**Author:** [@Othmane\_CHHAIBI](https://discuss.elastic.co/u/Othmane_CHHAIBI)\
**Replies:** 2\
**Last updated:** [March 16, 2022, 12:17am UTC](https://discuss.elastic.co/t/logstash-didnt-send-logs-to-elasticsearch-after-upgrade/299802 "2022-03-16T00:17:34Z")

</div>

hi, i upgrade logstash from version 6.8 to 7.16.2 but after this upgrade the status of logstash is running and it didn't sent logs to Elasticsearch (version 7.16.2). Here the error message from logs of logstash server : …

---

## [Column event.dataset is empty](https://discuss.elastic.co/t/column-event-dataset-is-empty/299792)

<div class="topic-metadata">

**Author:** [@Guif](https://discuss.elastic.co/u/Guif)\
**Replies:** 0\
**Last updated:** [March 15, 2022, 9:29pm UTC](https://discuss.elastic.co/t/column-event-dataset-is-empty/299792 "2022-03-15T21:29:05Z")

</div>

Hi, Inside ELK when goes to check the logs (/app/logs/stream) column "event.dataset" is empty but if I click on certain event (View Details) the value of "fields.event.dataset" are correctly informed (mylog) Value of "…

---

## [Getting multiple fields out of agent](https://discuss.elastic.co/t/getting-multiple-fields-out-of-agent/298228)

<div class="topic-metadata">

**Author:** [@itschobot](https://discuss.elastic.co/u/itschobot)\
**Replies:** 3\
**Last updated:** [March 15, 2022, 8:22pm UTC](https://discuss.elastic.co/t/getting-multiple-fields-out-of-agent/298228 "2022-03-15T20:22:25Z")

</div>

still new and learning filters... how would I get multiple fields out of agent? "agent" =\> { "hostname" =\> "2487b31167e2", "name" =\> "123b456c", "ephemeral\_id" =\> "123b456c", "version" =\> "7.15.1", "id" =\> "123b45…

---

## [Cisco-module (Filebeat) to Logstash - Configuration issue- Need help!](https://discuss.elastic.co/t/cisco-module-filebeat-to-logstash-configuration-issue-need-help/299765)

<div class="topic-metadata">

**Author:** [@arunhk3](https://discuss.elastic.co/u/arunhk3)\
**Replies:** 2\
**Last updated:** [March 15, 2022, 8:08pm UTC](https://discuss.elastic.co/t/cisco-module-filebeat-to-logstash-configuration-issue-need-help/299765 "2022-03-15T20:08:13Z")

</div>

Hi All, I was able to send logs to Elasticsearch using Filebeat using the below configuration successfully. # ============================== Filebeat inputs =============================== filebeat.inputs: - type: log…

---

## [Searching on keywords that have spaces fail using simple\_query\_string](https://discuss.elastic.co/t/searching-on-keywords-that-have-spaces-fail-using-simple-query-string/298577)

<div class="topic-metadata">

**Author:** [@JJK](https://discuss.elastic.co/u/JJK)\
**Replies:** 7\
**Last updated:** [March 15, 2022, 7:30pm UTC](https://discuss.elastic.co/t/searching-on-keywords-that-have-spaces-fail-using-simple-query-string/298577 "2022-03-15T19:30:08Z")

</div>

I have a tags keyword field defined simply as: 'tags' =\> \[ 'type' =\> 'keyword' \], I have a tag field that stores: "tags" : \[ "523", "523 az" \], I have a simple search set…

---

## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299747)

<div class="topic-metadata">

**Author:** [@Diego\_T](https://discuss.elastic.co/u/Diego_T)\
**Replies:** 4\
**Last updated:** [March 15, 2022, 7:22pm UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299747 "2022-03-15T19:22:58Z")

</div>

when i run logstash on windows i get the following error C:\\logstash-8.1.0\>.\\bin\\logstash.bat -f .\\config\\syslog.conf Using LS\_JAVA\_HOME defined java: C:\\Program Files\\Java\\jdk-17.0.2 WARNING: Using LS\_JAVA\_HOME while L…

---

## [Unable to build logstash-input-tcp - compatible versions for gem "logstash-core"](https://discuss.elastic.co/t/unable-to-build-logstash-input-tcp-compatible-versions-for-gem-logstash-core/299671)

<div class="topic-metadata">

**Author:** [@vinodhreddyg](https://discuss.elastic.co/u/vinodhreddyg)\
**Replies:** 1\
**Last updated:** [March 15, 2022, 6:23pm UTC](https://discuss.elastic.co/t/unable-to-build-logstash-input-tcp-compatible-versions-for-gem-logstash-core/299671 "2022-03-15T18:23:11Z")

</div>

Hi Team, I'm trying to build logstash-input-tcp plugin. It is failing with the following error. Exception is showing as compatible versions for gem "logstash-core". ENV details: Centos Stream JAVA: javac 11.0.14 Jru…

---

## [Logstash Sleep Filter Plugin Not Working](https://discuss.elastic.co/t/logstash-sleep-filter-plugin-not-working/299753)

<div class="topic-metadata">

**Author:** [@mpride63](https://discuss.elastic.co/u/mpride63)\
**Replies:** 1\
**Last updated:** [March 15, 2022, 5:36pm UTC](https://discuss.elastic.co/t/logstash-sleep-filter-plugin-not-working/299753 "2022-03-15T17:36:29Z")

</div>

I am new to logstash and I’m trying to setup a logstash instance to see if we can use it as a syslog\\trap front end to some of our network nodes. I have it working at a very basic level but can’t seem to get the sleep f…

---

## [Use elasticsearch requests in kibana (with double/tripple aggregation)](https://discuss.elastic.co/t/use-elasticsearch-requests-in-kibana-with-double-tripple-aggregation/299648)

<div class="topic-metadata">

**Author:** [@sebneu](https://discuss.elastic.co/u/sebneu)\
**Replies:** 2\
**Last updated:** [March 15, 2022, 4:10pm UTC](https://discuss.elastic.co/t/use-elasticsearch-requests-in-kibana-with-double-tripple-aggregation/299648 "2022-03-15T16:10:09Z")

</div>

Hi given: documents with a timestamp try: I have a working requests which first rounds the timestamps to 10 minutes (date\_histogram) and than sums up six 10 minute windows. (Rolling hour). here is the request: POST…

---

## [8.1.0 Java Client - SearchRequest example](https://discuss.elastic.co/t/8-1-0-java-client-searchrequest-example/299640)

<div class="topic-metadata">

**Author:** [@Valh](https://discuss.elastic.co/u/Valh)\
**Replies:** 2\
**Last updated:** [March 14, 2022, 6:08pm UTC](https://discuss.elastic.co/t/8-1-0-java-client-searchrequest-example/299640 "2022-03-14T18:08:40Z")

</div>

Hi, I'm struggling to understand how to do convert my code from the HLRC to the new Elasticsearch Java API Client. Could someone please give me an example? The documentation is very unclear on this subject. Fonctional …

---

## [Elasticsearch won't start after upgrade to 8.1.0](https://discuss.elastic.co/t/elasticsearch-wont-start-after-upgrade-to-8-1-0/299721)

<div class="topic-metadata">

**Author:** [@mralians](https://discuss.elastic.co/u/mralians)\
**Replies:** 5\
**Last updated:** [March 15, 2022, 2:52pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-after-upgrade-to-8-1-0/299721 "2022-03-15T14:52:43Z")

</div>

I upgraded Elasticsearch from 7.17 to 8.1.0 but since then I can start Elasticsearch. When I run systemctl status Elasticsearch.service I get this error. How can I fix this? org.elasticsearch.bootstrap.StartupException:…

---

## [Different between view and edit mode on several vizualization](https://discuss.elastic.co/t/different-between-view-and-edit-mode-on-several-vizualization/299633)

<div class="topic-metadata">

**Author:** [@sylvain\_fr](https://discuss.elastic.co/u/sylvain_fr)\
**Replies:** 2\
**Last updated:** [March 15, 2022, 1:41pm UTC](https://discuss.elastic.co/t/different-between-view-and-edit-mode-on-several-vizualization/299633 "2022-03-15T13:41:07Z")

</div>

Hello, I build a dashboard about an internal website. An interesting vizualization is the purcentage of user-agent. So I created a bucket with user\_agent.name and count aggregation metrics. It's OK when i'm on edit mode…

---

## [How to delete all Docs count or remove the Storage Size and bring it to "Zero" for created index patterns in Kibana?](https://discuss.elastic.co/t/how-to-delete-all-docs-count-or-remove-the-storage-size-and-bring-it-to-zero-for-created-index-patterns-in-kibana/299598)

<div class="topic-metadata">

**Author:** [@hitnalli\_praveen](https://discuss.elastic.co/u/hitnalli_praveen)\
**Replies:** 4\
**Last updated:** [March 15, 2022, 12:31pm UTC](https://discuss.elastic.co/t/how-to-delete-all-docs-count-or-remove-the-storage-size-and-bring-it-to-zero-for-created-index-patterns-in-kibana/299598 "2022-03-15T12:31:04Z")

</div>

I've created an Index Pattern in Kibana - "cscsv212previousbuild-perfdata" and currently it has some content of Documents (seems to be total count of Docs 177193) and has the Storage Space - 661.9MB. I would like to del…

---

## [Making an Opaque Search Request](https://discuss.elastic.co/t/making-an-opaque-search-request/299726)

<div class="topic-metadata">

**Author:** [@Adeisbright](https://discuss.elastic.co/u/Adeisbright)\
**Replies:** 0\
**Last updated:** [March 15, 2022, 12:18pm UTC](https://discuss.elastic.co/t/making-an-opaque-search-request/299726 "2022-03-15T12:18:32Z")

</div>

Hello, I am working in an environment with many services. We are introducing Elasticsearch as an after-thought; it means we need to do this in a way that does not impact on already existing service. To achieve this, we…

---

## [How to exclude repeating values while creating an Area Vizualization and using Unique Count?](https://discuss.elastic.co/t/how-to-exclude-repeating-values-while-creating-an-area-vizualization-and-using-unique-count/299718)

<div class="topic-metadata">

**Author:** [@iraidalavrovaa](https://discuss.elastic.co/u/iraidalavrovaa)\
**Replies:** 3\
**Last updated:** [March 15, 2022, 11:54am UTC](https://discuss.elastic.co/t/how-to-exclude-repeating-values-while-creating-an-area-vizualization-and-using-unique-count/299718 "2022-03-15T11:54:33Z")

</div>

Hi all! I want to visualize a trend of appearing of new users over time. Username is a text field. I decided to use Area Visualization with Cumulative Sum and Unique count of username aggregations. I specified it in Me…

---

## [Add user role in ECE or revoke access on "client"](https://discuss.elastic.co/t/add-user-role-in-ece-or-revoke-access-on-client/299705)

<div class="topic-metadata">

**Author:** [@stobbe99](https://discuss.elastic.co/u/stobbe99)\
**Replies:** 2\
**Last updated:** [March 15, 2022, 11:50am UTC](https://discuss.elastic.co/t/add-user-role-in-ece-or-revoke-access-on-client/299705 "2022-03-15T11:50:57Z")

</div>

Hello, Is is possible to add additional roles in ECE and is it possible to revoke the ECE accounts on created environments. As a use case, from ECE we create environments for different customers. There are customers wh…

---

## [Deleted documents force-merge](https://discuss.elastic.co/t/deleted-documents-force-merge/299717)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [March 15, 2022, 11:08am UTC](https://discuss.elastic.co/t/deleted-documents-force-merge/299717 "2022-03-15T11:08:34Z")

</div>

Hi all, I have an index showing 1000 deleted documents. It is said that deleted documents occupy some amount of memory and we have to force merge them to empty space. Which steps or command should we use to achieve this…

---

## [Reindex Problem](https://discuss.elastic.co/t/reindex-problem/299720)

<div class="topic-metadata">

**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\
**Replies:** 1\
**Last updated:** [March 15, 2022, 11:06am UTC](https://discuss.elastic.co/t/reindex-problem/299720 "2022-03-15T11:06:27Z")

</div>

Hello dear friends i have a problem. While reindexing, a question occurred and data transfer was interrupted. How do I replace the missing data in the target index? (I have no chance to reindex.)

---

## [Count Each word in a text Field](https://discuss.elastic.co/t/count-each-word-in-a-text-field/299605)

<div class="topic-metadata">

**Author:** [@vishesh08](https://discuss.elastic.co/u/vishesh08)\
**Replies:** 7\
**Last updated:** [March 15, 2022, 11:02am UTC](https://discuss.elastic.co/t/count-each-word-in-a-text-field/299605 "2022-03-15T11:02:07Z")

</div>

I have tweets stored in a text field with field Data True. I want to remove the english stopwords and get a count of each word in the tweets. Data Mapping: { "tweets" : { "mappings" : { "properties" : { …

---

## [Is there any way to check the relocation progress of shards?](https://discuss.elastic.co/t/is-there-any-way-to-check-the-relocation-progress-of-shards/299719)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 2\
**Last updated:** [March 15, 2022, 10:55am UTC](https://discuss.elastic.co/t/is-there-any-way-to-check-the-relocation-progress-of-shards/299719 "2022-03-15T10:55:57Z")

</div>

I plan to migrate the data in a cluster with three nodes to another cluster. After I add the exclusion parameter (cluster.routing.allocation.exclude.\_ip) to the cluster, check the status of shards through /\_cat/shards It…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=678)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=680)
