# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=771 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 772 --- ## [Elastic Cluster Performance Issue](https://discuss.elastic.co/t/elastic-cluster-performance-issue/289701)
**Author:** [@Clyton](https://discuss.elastic.co/u/Clyton)\ **Replies:** 2\ **Last updated:** [November 24, 2021, 8:02am UTC](https://discuss.elastic.co/t/elastic-cluster-performance-issue/289701 "2021-11-24T08:02:01Z")
Hi All, We have a set-up of Pipeline: Beats Agents--\>AWS MSK--\>LogStash--\>Elasticsearch. In which application team sends their application logs through this pipeline. We have 8 AWS ec2 instances which is running on Auto… --- ## [Kibana Enhanced Table 2 Total Values on Different Condition](https://discuss.elastic.co/t/kibana-enhanced-table-2-total-values-on-different-condition/289913)
**Author:** [@Avnish\_Singh](https://discuss.elastic.co/u/Avnish_Singh)\ **Replies:** 6\ **Last updated:** [November 24, 2021, 7:33am UTC](https://discuss.elastic.co/t/kibana-enhanced-table-2-total-values-on-different-condition/289913 "2021-11-24T07:33:23Z")
Hi, I have created an enhanced table now there is an option to do a sum on a computed column but it does the sum of the entire column whereas I want 2 sums based on condition. Is it possible if yes then how? --- ## [Logstash using KV filter creating a field with an array rather than individual fields and individual values](https://discuss.elastic.co/t/logstash-using-kv-filter-creating-a-field-with-an-array-rather-than-individual-fields-and-individual-values/290007)
**Author:** [@neil6323](https://discuss.elastic.co/u/neil6323)\ **Replies:** 2\ **Last updated:** [November 24, 2021, 5:32am UTC](https://discuss.elastic.co/t/logstash-using-kv-filter-creating-a-field-with-an-array-rather-than-individual-fields-and-individual-values/290007 "2021-11-24T05:32:19Z")
Hi all, I'm working through a Logstash configuration which is parsing Cisco ISE log entries. I'm using multiline to collate entries into records and a grok filter coupled with a 'kv' filter which is mostly having the de… --- ## [There are wrong values with memory usage in kubernetes metricbeat module](https://discuss.elastic.co/t/there-are-wrong-values-with-memory-usage-in-kubernetes-metricbeat-module/288261)
**Author:** [@Sergio\_Ferreyra](https://discuss.elastic.co/u/Sergio_Ferreyra)\ **Replies:** 4\ **Last updated:** [November 24, 2021, 3:53am UTC](https://discuss.elastic.co/t/there-are-wrong-values-with-memory-usage-in-kubernetes-metricbeat-module/288261 "2021-11-24T03:53:17Z")
Hi team, Having an issue with the values of this metric. kubernetes.node.memory.usage.bytes Looks like is not taking the proper values, for example: I am using that metric to get the memory usage but is not the cor… --- ## [Modify sourcecode to achieve dashboard only mode](https://discuss.elastic.co/t/modify-sourcecode-to-achieve-dashboard-only-mode/289936)
**Author:** [@laigood](https://discuss.elastic.co/u/laigood)\ **Replies:** 5\ **Last updated:** [November 24, 2021, 1:52am UTC](https://discuss.elastic.co/t/modify-sourcecode-to-achieve-dashboard-only-mode/289936 "2021-11-24T01:52:14Z")
I have an unsecurity es cluster，and i deploy a normal kibana for daily mangement and analysis data.then i want to deploy another kibana to achieve dashboard only mode,i want to modify source code to cut out other functio… --- ## [Is possible to listen index changes?](https://discuss.elastic.co/t/is-possible-to-listen-index-changes/289988)
**Author:** [@thewasta](https://discuss.elastic.co/u/thewasta)\ **Replies:** 2\ **Last updated:** [November 24, 2021, 1:25am UTC](https://discuss.elastic.co/t/is-possible-to-listen-index-changes/289988 "2021-11-24T01:25:31Z")
I need to 'listen' for changes on my index, at first I started by writing a script in nodejs which is executed every 5min. For now I think it works... But can I do it in realtime? When a new document is insert or update. … --- ## [Full text search on both Parent and Child](https://discuss.elastic.co/t/full-text-search-on-both-parent-and-child/289990)
**Author:** [@annasunny](https://discuss.elastic.co/u/annasunny)\ **Replies:** 0\ **Last updated:** [November 23, 2021, 10:20pm UTC](https://discuss.elastic.co/t/full-text-search-on-both-parent-and-child/289990 "2021-11-23T22:20:14Z")
Hi, I'm looking for a query ( or multiple queries) to do a full text search on both Parent and Child. Thank you in advance! I'm using the parent-child type. For example, my Parent documents will be a Choice, and its s… --- ## [Complete DNS activity coverage in endpoint](https://discuss.elastic.co/t/complete-dns-activity-coverage-in-endpoint/288259)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 1\ **Last updated:** [November 23, 2021, 5:00pm UTC](https://discuss.elastic.co/t/complete-dns-activity-coverage-in-endpoint/288259 "2021-11-23T17:00:16Z")
Hey, I've noticed that the rule DNS Activity to the Internet does not work with Elastic Endpoint data, even when I explicitly contact an external DNS server from my machines that are covered by Elastic Endpoint. I dug … --- ## [Kibana Field Formatting : Display Limited Decimal Points For Number Field Type](https://discuss.elastic.co/t/kibana-field-formatting-display-limited-decimal-points-for-number-field-type/289792)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 4:30pm UTC](https://discuss.elastic.co/t/kibana-field-formatting-display-limited-decimal-points-for-number-field-type/289792 "2021-11-23T16:30:45Z")
I have a number field and I want to change the color of it. I am using Kibana field formatting. While changing color, I am unable to find a way to limit the decimal points to 5 digits. For example 2.62386 Can anyone h… --- ## [Query a result set from another query](https://discuss.elastic.co/t/query-a-result-set-from-another-query/289964)
**Author:** [@antonkallenberg](https://discuss.elastic.co/u/antonkallenberg)\ **Replies:** 0\ **Last updated:** [November 23, 2021, 3:46pm UTC](https://discuss.elastic.co/t/query-a-result-set-from-another-query/289964 "2021-11-23T15:46:32Z")
Hi, Is it possible to query a result set from another query? Example List all employees by organization with ID #1 \> returns 10 employees. From those 10 employees \> List all employees working at department with ID #1 … --- ## [Unable to read two json](https://discuss.elastic.co/t/unable-to-read-two-json/289963)
**Author:** [@Fosco](https://discuss.elastic.co/u/Fosco)\ **Replies:** 0\ **Last updated:** [November 23, 2021, 3:34pm UTC](https://discuss.elastic.co/t/unable-to-read-two-json/289963 "2021-11-23T15:34:40Z")
Hello, I have a python file that is executed by logstash and which prints a json composed of two different data sources, the problem is that logstash only reads the first part. I tried to change the order and nothing cha… --- ## [Highlights not matching between annotated\_text and other fields](https://discuss.elastic.co/t/highlights-not-matching-between-annotated-text-and-other-fields/289937)
**Author:** [@evoluc](https://discuss.elastic.co/u/evoluc)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 3:26pm UTC](https://discuss.elastic.co/t/highlights-not-matching-between-annotated-text-and-other-fields/289937 "2021-11-23T15:26:06Z")
Executing a query\_string search on an index the returned matched highlights sometimes don't really match (this is needed to get the annotated metadata). From what I've seen there is not much support for this kind of feat… --- ## [How to use multiple inddexes in a dashboard](https://discuss.elastic.co/t/how-to-use-multiple-inddexes-in-a-dashboard/288706)
**Author:** [@nandatibco](https://discuss.elastic.co/u/nandatibco)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 2:25pm UTC](https://discuss.elastic.co/t/how-to-use-multiple-inddexes-in-a-dashboard/288706 "2021-11-23T14:25:18Z")
How to configure 2 or more indexes with similar structure in a kibana dashboard? Tried with Index pattern, if the index names are not having similar naming patterns how to create an index pattern with different index na… --- ## [Unable to start elasticsearch on windows "The system cannot find the path specified."](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-windows-the-system-cannot-find-the-path-specified/289914)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 1\ **Last updated:** [November 23, 2021, 2:17pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-windows-the-system-cannot-find-the-path-specified/289914 "2021-11-23T14:17:20Z")
Hi, Use case : I have to perform an upgrade activity in production environment. Upgrade from 7.7.1 version to 7.15.0 on windows 2016 64 bit OS. Before performing I am doing a testing in a lower environment. Where I h… --- ## [Syslogging Struggle - newbie alert](https://discuss.elastic.co/t/syslogging-struggle-newbie-alert/289861)
**Author:** [@Orpheus](https://discuss.elastic.co/u/Orpheus)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 2:07pm UTC](https://discuss.elastic.co/t/syslogging-struggle-newbie-alert/289861 "2021-11-23T14:07:45Z")
Hi, I'm just getting familiar with Elastic Stack, and implementing ELK with Filebeat to a syslog server that receives the syslogs from various routers on a network. The routers are running RouterOS on mikrotik routers, … --- ## [Multiget (mget) API performance](https://discuss.elastic.co/t/multiget-mget-api-performance/289813)
**Author:** [@jon\_cabrera](https://discuss.elastic.co/u/jon_cabrera)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 2:02pm UTC](https://discuss.elastic.co/t/multiget-mget-api-performance/289813 "2021-11-23T14:02:22Z")
Hello! I am working on a search engine and I have introduced the use of the mget API to obtain a series of documents from a series of ids. My question is related to a series of issues that I have been able to observe i… --- ## [Logstash and Beats with mTLS](https://discuss.elastic.co/t/logstash-and-beats-with-mtls/289941)
**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\ **Replies:** 0\ **Last updated:** [November 23, 2021, 11:27am UTC](https://discuss.elastic.co/t/logstash-and-beats-with-mtls/289941 "2021-11-23T11:27:12Z")
Hi, I have a working TLS connection between Beats and Logstash. What I now want is mTLS so that only Beats with a valid certificate can connect to Logstash. For policy reasons I can't use the certutil Tool within Elasti… --- ## [Mustache variable in email alert](https://discuss.elastic.co/t/mustache-variable-in-email-alert/289917)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 1\ **Last updated:** [November 23, 2021, 10:45am UTC](https://discuss.elastic.co/t/mustache-variable-in-email-alert/289917 "2021-11-23T10:45:50Z")
I feel like I'm missing a simple step, but is there a simple way to access Mustache variables within an email alert? Everything I try comes up blank. Do I need to query for these values elsewhere? --- ## [Query with multiple keywords](https://discuss.elastic.co/t/query-with-multiple-keywords/289929)
**Author:** [@Leitner](https://discuss.elastic.co/u/Leitner)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 10:23am UTC](https://discuss.elastic.co/t/query-with-multiple-keywords/289929 "2021-11-23T10:23:32Z")
Hi everyone, I'm new on Elasticsearch. So sorry for my question :slight\_smile: I want build a query in the console. With a single keyword it works great: But with multiple keywords the Value of the hits is always 0… --- ## [Rightsizing elastic batch size and number of workers](https://discuss.elastic.co/t/rightsizing-elastic-batch-size-and-number-of-workers/289803)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 9:33am UTC](https://discuss.elastic.co/t/rightsizing-elastic-batch-size-and-number-of-workers/289803 "2021-11-23T09:33:47Z")
I am trying to right size my configs for the logstashes that I have feeding my elastic stack. They are pushing filebeat and winlogbeat data. Right now they seem to be fairly underutilized and I am seeing a little bit of … --- ## [Endgame not detecting malware](https://discuss.elastic.co/t/endgame-not-detecting-malware/289165)
**Author:** [@TimoG](https://discuss.elastic.co/u/TimoG)\ **Replies:** 7\ **Last updated:** [November 23, 2021, 9:25am UTC](https://discuss.elastic.co/t/endgame-not-detecting-malware/289165 "2021-11-23T09:25:24Z")
Hi, we are currently evaluating the Elastic Agent to be used as endpoint security solution within our company. We are especially interested in the features provided by Endgame. To get a feeling for the system I have se… --- ## [Kibana health check for ingress health check?](https://discuss.elastic.co/t/kibana-health-check-for-ingress-health-check/289553)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 9:08am UTC](https://discuss.elastic.co/t/kibana-health-check-for-ingress-health-check/289553 "2021-11-23T09:08:19Z")
What's a lightweight endpoint that I can specify for a health check (to be used for alb.ingress.kubernetes.io/healthcheck-path)? I've seen /health suggested, but that takes a quarter of a second to send vast quantities … --- ## [Kerberos support in Logstash Jdbc input plugin](https://discuss.elastic.co/t/kerberos-support-in-logstash-jdbc-input-plugin/289921)
**Author:** [@jitentiwari82](https://discuss.elastic.co/u/jitentiwari82)\ **Replies:** 0\ **Last updated:** [November 23, 2021, 8:45am UTC](https://discuss.elastic.co/t/kerberos-support-in-logstash-jdbc-input-plugin/289921 "2021-11-23T08:45:37Z")
Hi Guys, I am trying to use Kerberos authentication to read data from Oracle database through Logstash JDBC plug-in . Has Kerberos support for database connection through JDBC input plugin been added ? Can someone plea… --- ## [Is it possible to search in random files with random texts in it with Elastic Search?](https://discuss.elastic.co/t/is-it-possible-to-search-in-random-files-with-random-texts-in-it-with-elastic-search/289863)
**Author:** [@Sahin\_Kasap](https://discuss.elastic.co/u/Sahin_Kasap)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 8:25am UTC](https://discuss.elastic.co/t/is-it-possible-to-search-in-random-files-with-random-texts-in-it-with-elastic-search/289863 "2021-11-23T08:25:48Z")
Hello, I am developing a backend and I have big pdf files(~20 MB), which I want to search words inside. I could upload the texts inside them to Sql or somewhere and search inside them, but this would be slow and pdf's h… --- ## [Filebeat cannot connect to ELK](https://discuss.elastic.co/t/filebeat-cannot-connect-to-elk/289076)
**Author:** [@bropid](https://discuss.elastic.co/u/bropid)\ **Replies:** 4\ **Last updated:** [November 23, 2021, 6:36am UTC](https://discuss.elastic.co/t/filebeat-cannot-connect-to-elk/289076 "2021-11-23T06:36:18Z")
Hey, i'm trying to input the apache2 visualize dashboard but when i run this command said connection refused everytime i try try to connect to my ELK in my VM1 with my webserver with apache2 and filebeat, the connect… --- ## [Elasticseach multi data path，every shard only stored into one data path](https://discuss.elastic.co/t/elasticseach-multi-data-path-every-shard-only-stored-into-one-data-path/289895)
**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\ **Replies:** 6\ **Last updated:** [November 23, 2021, 6:29am UTC](https://discuss.elastic.co/t/elasticseach-multi-data-path-every-shard-only-stored-into-one-data-path/289895 "2021-11-23T06:29:38Z")
when i use Elasticsearch to store my data,i have a Confuse，every Elasticsearch process I have config multi data path，but I find every shard of indices is only stored one data path，I want to know if one shard can be store… --- ## [Closing the Index released the RAM and Inodes?](https://discuss.elastic.co/t/closing-the-index-released-the-ram-and-inodes/289897)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 7\ **Last updated:** [November 23, 2021, 5:49am UTC](https://discuss.elastic.co/t/closing-the-index-released-the-ram-and-inodes/289897 "2021-11-23T05:49:12Z")
Hi Team, I have around 150 Indices open and my server has around 64 GB of RAM and 8 core CPU. Soon I believe my system would start complaining about RAM and inodes. Hence wanted to confirm if I close the index will that… --- ## [Sort order case insensitive](https://discuss.elastic.co/t/sort-order-case-insensitive/289882)
**Author:** [@Lyes\_Ouchene](https://discuss.elastic.co/u/Lyes_Ouchene)\ **Replies:** 1\ **Last updated:** [November 23, 2021, 4:21am UTC](https://discuss.elastic.co/t/sort-order-case-insensitive/289882 "2021-11-23T04:21:36Z")
hello, I already have an index created from logstash and I want to do a sort order case insensitive on a field. I need help. thank you --- ## [Mapper Size Plugin VS real Index Size](https://discuss.elastic.co/t/mapper-size-plugin-vs-real-index-size/289793)
**Author:** [@gneves](https://discuss.elastic.co/u/gneves)\ **Replies:** 3\ **Last updated:** [November 23, 2021, 3:17am UTC](https://discuss.elastic.co/t/mapper-size-plugin-vs-real-index-size/289793 "2021-11-23T03:17:12Z")
Hello guys, hope you are doing well. Im having a little problem, or not understanding something. My problem is: In order to make a metrics dashboard about index sizes and other metrics, i have enabled Mapper Size Pl… --- ## [Elastic cluster Performance issue](https://discuss.elastic.co/t/elastic-cluster-performance-issue/289703)
**Author:** [@Krishna\_Kumar](https://discuss.elastic.co/u/Krishna_Kumar)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 2:38am UTC](https://discuss.elastic.co/t/elastic-cluster-performance-issue/289703 "2021-11-23T02:38:49Z")
Hi All, We have a set-up of Pipeline: Beats Agents--\>AWS MSK--\>LogStash--\>Elasticsearch. In which application team sends their application logs through this pipeline. We have 8 AWS ec2 instances which is running on Auto… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=770) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=772)