# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=800 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 801 --- ## [Unable to setup kibana](https://discuss.elastic.co/t/unable-to-setup-kibana/286983)
**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\ **Replies:** 4\ **Last updated:** [October 18, 2021, 1:00pm UTC](https://discuss.elastic.co/t/unable-to-setup-kibana/286983 "2021-10-18T13:00:52Z")
Hello Team, I am using ansible playbook to run all three Elasticsearch, Kibana and logstash containers in one go. After running the ansible playbook I can see all three containers are up and running. Following is the … --- ## [How to get score aggregations on the scores after rescore phase?](https://discuss.elastic.co/t/how-to-get-score-aggregations-on-the-scores-after-rescore-phase/286984)
**Author:** [@Igor\_L](https://discuss.elastic.co/u/Igor_L)\ **Replies:** 0\ **Last updated:** [October 18, 2021, 11:32am UTC](https://discuss.elastic.co/t/how-to-get-score-aggregations-on-the-scores-after-rescore-phase/286984 "2021-10-18T11:32:53Z")
org/Elasticsearch/search/query/QueryPhase.java: // Pre-process aggregations as late as possible. In the case of a DFS\_Q\_T\_F // request, preProcess is called on the DFS phase phase, this is why we pre-process them // her… --- ## [Substract 2 fields from different indexes and plot on Kibana](https://discuss.elastic.co/t/substract-2-fields-from-different-indexes-and-plot-on-kibana/286572)
**Author:** [@pr1yadarshan](https://discuss.elastic.co/u/pr1yadarshan)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 11:02am UTC](https://discuss.elastic.co/t/substract-2-fields-from-different-indexes-and-plot-on-kibana/286572 "2021-10-18T11:02:35Z")
I have 2 indexes (sys-1-logs, sys-2-logs), I want to get the difference of count of both and plot on Kibana. Is this possible to do ? If yes then how to do it ? --- ## [Show records based on last modified date in Kibana](https://discuss.elastic.co/t/show-records-based-on-last-modified-date-in-kibana/286959)
**Author:** [@Farah\_Zaidi](https://discuss.elastic.co/u/Farah_Zaidi)\ **Replies:** 10\ **Last updated:** [October 18, 2021, 10:34am UTC](https://discuss.elastic.co/t/show-records-based-on-last-modified-date-in-kibana/286959 "2021-10-18T10:34:46Z")
Hi All , I have a requirement where we have same ids with different status but we need to show only the last status of the id based on last modified date . For Example {id : 123, status:validated, modifiedAt:Oct… --- ## [Memory usage grows in (short-ish) time](https://discuss.elastic.co/t/memory-usage-grows-in-short-ish-time/286817)
**Author:** [@depesz](https://discuss.elastic.co/u/depesz)\ **Replies:** 4\ **Last updated:** [October 18, 2021, 10:15am UTC](https://discuss.elastic.co/t/memory-usage-grows-in-short-ish-time/286817 "2021-10-18T10:15:52Z")
We just recently started trying to use logstash. The problem is that memory usage grows, at least within first 2 days, to the point that we can't use it. I tried reducing Xms and Xmx from default of 1G to 512M. restarte… --- ## [Use logged in users metadata username value in visualisations?](https://discuss.elastic.co/t/use-logged-in-users-metadata-username-value-in-visualisations/285831)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 1\ **Last updated:** [October 18, 2021, 10:12am UTC](https://discuss.elastic.co/t/use-logged-in-users-metadata-username-value-in-visualisations/285831 "2021-10-18T10:12:38Z")
As part of a visualisation i want to show a visualisation that is the number of entries with a specific fields value that is the same as the username of the logged in user to doc that have a different value. Is it possi… --- ## [Logstash can't collected logs of the current day](https://discuss.elastic.co/t/logstash-cant-collected-logs-of-the-current-day/286968)
**Author:** [@lisiyu](https://discuss.elastic.co/u/lisiyu)\ **Replies:** 0\ **Last updated:** [October 18, 2021, 10:10am UTC](https://discuss.elastic.co/t/logstash-cant-collected-logs-of-the-current-day/286968 "2021-10-18T10:10:34Z")
I set FileBeat to pull the log and LogStash to process the log format to es.But today's log does not collect the index. The logs from the last two days are here. filebeat.yaml filebeat.inputs: - type: container … --- ## [Job for elasticsearch.service failed](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed/286934)
**Author:** [@dun7ill](https://discuss.elastic.co/u/dun7ill)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 9:48am UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed/286934 "2021-10-18T09:48:41Z")
Hi All, I've installed Elasticsearch 7 on CentOS 7, I faced a problem when I try to start it. Sometimes it's work fine, then it's failed ! Please find the following code ; ● elasticsearch.service - Elasticsearch L… --- ## [Kibana cannot connect to elastichsearch in https, xpack enabled](https://discuss.elastic.co/t/kibana-cannot-connect-to-elastichsearch-in-https-xpack-enabled/286692)
**Author:** [@Florent\_BITSCHY](https://discuss.elastic.co/u/Florent_BITSCHY)\ **Replies:** 1\ **Last updated:** [October 18, 2021, 9:31am UTC](https://discuss.elastic.co/t/kibana-cannot-connect-to-elastichsearch-in-https-xpack-enabled/286692 "2021-10-18T09:31:03Z")
hello i deploy elastci stack in kubernetes with helm chart i got my elastcisearch runnning with xpack and running well here uis the values node.master: true replicas: 1 minimumMasterNodes: 1 clusterHealthCheckPara… --- ## [How can I force search to look into fields that marked as \_Ignored](https://discuss.elastic.co/t/how-can-i-force-search-to-look-into-fields-that-marked-as-ignored/286915)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 9:24am UTC](https://discuss.elastic.co/t/how-can-i-force-search-to-look-into-fields-that-marked-as-ignored/286915 "2021-10-18T09:24:07Z")
Hi All, I'm using 7.15, I'm saving some logs of failed tests, the log contain the test failed reason which I save in fields called: "testcaseFailedReason" I've noticed that I don't get values from this field in visua… --- ## [Change kibana welcome logo & text ( 7.15.0 )](https://discuss.elastic.co/t/change-kibana-welcome-logo-text-7-15-0/286830)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 9:00am UTC](https://discuss.elastic.co/t/change-kibana-welcome-logo-text-7-15-0/286830 "2021-10-18T09:00:56Z")
Hello! I want to change the logo form the login ui: where are the css or the image to change it? Thanks in advanced! --- ## [How to change kibana logo in Kibana 7.6.2](https://discuss.elastic.co/t/how-to-change-kibana-logo-in-kibana-7-6-2/286912)
**Author:** [@v0landem0rt](https://discuss.elastic.co/u/v0landem0rt)\ **Replies:** 1\ **Last updated:** [October 18, 2021, 8:46am UTC](https://discuss.elastic.co/t/how-to-change-kibana-logo-in-kibana-7-6-2/286912 "2021-10-18T08:46:04Z")
I'm using Kibana 7.6.2, and i want to place custom logo at top left corner of kibana home page. How can i do it? There are many tutors at this forum, but this tutors useless for my case. --- ## [Depending on the restart of the index server, there are cases in which the search is different. Why?](https://discuss.elastic.co/t/depending-on-the-restart-of-the-index-server-there-are-cases-in-which-the-search-is-different-why/286792)
**Author:** [@jeongin](https://discuss.elastic.co/u/jeongin)\ **Replies:** 7\ **Last updated:** [October 18, 2021, 8:37am UTC](https://discuss.elastic.co/t/depending-on-the-restart-of-the-index-server-there-are-cases-in-which-the-search-is-different-why/286792 "2021-10-18T08:37:22Z")
We have a separate boxtype index server. Two cases will be described. First Restart. Perform an index. Check the term with '\_termvectors' api. Term 'xxxx' exists. Check the term with '\_explain' api. Receive 'no match… --- ## [Host isolation](https://discuss.elastic.co/t/host-isolation/286745)
**Author:** [@wmacleodstrath](https://discuss.elastic.co/u/wmacleodstrath)\ **Replies:** 7\ **Last updated:** [October 18, 2021, 8:12am UTC](https://discuss.elastic.co/t/host-isolation/286745 "2021-10-18T08:12:09Z")
7.14 - when I go to a case, with an alert on it , and click to get the fly out, I'm not seeing an option to "Take Action" and isolate a host. Do you only see the "Take Action" button if there is a certain alert in the ca… --- ## ["Isolate Host" is missing](https://discuss.elastic.co/t/isolate-host-is-missing/286843)
**Author:** [@robert.gleaden](https://discuss.elastic.co/u/robert.gleaden)\ **Replies:** 3\ **Last updated:** [October 18, 2021, 8:04am UTC](https://discuss.elastic.co/t/isolate-host-is-missing/286843 "2021-10-18T08:04:25Z")
Hi All, I have recently installed an ELK stack on Debian 11 v7.150.0 and seem to be having one issue, I've added the "Security Endpoint" as an integration however there is no "Isolate Agent" option under the "Take Actio… --- ## [Does this feature really work as the description? https://github.com/elastic/elasticsearch/pull/59394](https://discuss.elastic.co/t/does-this-feature-really-work-as-the-description-https-github-com-elastic-elasticsearch-pull-59394/286957)
**Author:** [@GrandFisher](https://discuss.elastic.co/u/GrandFisher)\ **Replies:** 3\ **Last updated:** [October 18, 2021, 7:00am UTC](https://discuss.elastic.co/t/does-this-feature-really-work-as-the-description-https-github-com-elastic-elasticsearch-pull-59394/286957 "2021-10-18T07:00:16Z")
Does anyone really observe this feature in the log? We never found this log in our log file.（total circuit breaker has thrown at least an CircuitBreakingException） logger.info("attempting to trigger G1GC due to high he… --- ## [How can I build a claster from two independent Elastic Servers?](https://discuss.elastic.co/t/how-can-i-build-a-claster-from-two-independent-elastic-servers/286798)
**Author:** [@marti1](https://discuss.elastic.co/u/marti1)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 4:33am UTC](https://discuss.elastic.co/t/how-can-i-build-a-claster-from-two-independent-elastic-servers/286798 "2021-10-18T04:33:37Z")
Hi, I have two independent Elastic Servers in my business. I know the steeps I have to do to set up the cluster, the question is what will happens with the data of both servers when I create the cluster? Will I lose i… --- ## [Update elasticsearch index mapping through script or curl command](https://discuss.elastic.co/t/update-elasticsearch-index-mapping-through-script-or-curl-command/286905)
**Author:** [@prataprajasekhar](https://discuss.elastic.co/u/prataprajasekhar)\ **Replies:** 8\ **Last updated:** [October 18, 2021, 4:30am UTC](https://discuss.elastic.co/t/update-elasticsearch-index-mapping-through-script-or-curl-command/286905 "2021-10-18T04:30:40Z")
Dear Team, We are trying to update an index using below method in kibana dev console. Can you please let me know the method to be followed either using curl method or wget method or via a python or shell script to upda… --- ## [Checking query efficiency tool](https://discuss.elastic.co/t/checking-query-efficiency-tool/286944)
**Author:** [@eylon\_koren](https://discuss.elastic.co/u/eylon_koren)\ **Replies:** 1\ **Last updated:** [October 18, 2021, 4:12am UTC](https://discuss.elastic.co/t/checking-query-efficiency-tool/286944 "2021-10-18T04:12:58Z")
Hi! I am providing accessibility to search on ES for our customers. Some of them are creating inefficient queries, which uses wildcard at the start of a sentence or without any field specified. I would like to find th… --- ## [日本語を含むダッシュボードでレポート出力すると文字化けする](https://discuss.elastic.co/t/topic/286939)
**Author:** [@air-hayashi](https://discuss.elastic.co/u/air-hayashi)\ **Replies:** 0\ **Last updated:** [October 18, 2021, 12:31am UTC](https://discuss.elastic.co/t/topic/286939 "2021-10-18T00:31:59Z")
日本語を含んだダッシュボードからレポート出力すると、日本語の箇所が文字化けしてしまいます。 ダッシュボードでは問題なく表示できておりますが、レポート出力したPDFやPNGファイルでは文字化けしています。 設定変更等で解決できるかご教示いただけないでしょうか。 RHEL8.2でElastic 7.14を使用しております。 ダッシュボード PDF --- ## [Ingesting Web Services API data into Elasticsearch without a database](https://discuss.elastic.co/t/ingesting-web-services-api-data-into-elasticsearch-without-a-database/286878)
**Author:** [@rvalle](https://discuss.elastic.co/u/rvalle)\ **Replies:** 1\ **Last updated:** [October 18, 2021, 1:40am UTC](https://discuss.elastic.co/t/ingesting-web-services-api-data-into-elasticsearch-without-a-database/286878 "2021-10-18T01:40:24Z")
I’m new to this forum as well as to Elasticsearch. I just recently started exploring how Elasticsearch works and if it can solve a problem. I am trying to find a solution to the following scenario: I have a web servic… --- ## [Invalid url](https://discuss.elastic.co/t/invalid-url/286814)
**Author:** [@Jakub\_Kaczmarek](https://discuss.elastic.co/u/Jakub_Kaczmarek)\ **Replies:** 2\ **Last updated:** [October 18, 2021, 12:46am UTC](https://discuss.elastic.co/t/invalid-url/286814 "2021-10-18T00:46:56Z")
Hi I'm getting invalid url error in Logstash. My config: http\_poller { urls =\> { executedsteps =\> { method =\> get cacert =\> "/elk-stack/cert.pem" url =\> "https://odata-trial.… --- ## [How to prevent a single node slowing down queries where it acts as the coordinator?](https://discuss.elastic.co/t/how-to-prevent-a-single-node-slowing-down-queries-where-it-acts-as-the-coordinator/286937)
**Author:** [@ted.fed](https://discuss.elastic.co/u/ted.fed)\ **Replies:** 0\ **Last updated:** [October 17, 2021, 9:20pm UTC](https://discuss.elastic.co/t/how-to-prevent-a-single-node-slowing-down-queries-where-it-acts-as-the-coordinator/286937 "2021-10-17T21:20:32Z")
As per my understanding, clients do not have a server-preference for sending read queries and do either a round-robin or a random client selection. If so, then each server acts as a coordinator node (one that scatter-ga… --- ## [Warnings when service starts](https://discuss.elastic.co/t/warnings-when-service-starts/286928)
**Author:** [@aakerbeere](https://discuss.elastic.co/u/aakerbeere)\ **Replies:** 1\ **Last updated:** [October 17, 2021, 9:16pm UTC](https://discuss.elastic.co/t/warnings-when-service-starts/286928 "2021-10-17T21:16:41Z")
fyi I get warnings when Elasticsearch.service starts. Don't know if this is important but it's considering reporting to the maintainers, which is done herewith. Elasticsearch aarch64 (RPi4). openjdk version "11.0.12" 2… --- ## [Is Elasticsearch good for such a problem?](https://discuss.elastic.co/t/is-elasticsearch-good-for-such-a-problem/286917)
**Author:** [@Michal\_Szymanski](https://discuss.elastic.co/u/Michal_Szymanski)\ **Replies:** 2\ **Last updated:** [October 17, 2021, 12:23pm UTC](https://discuss.elastic.co/t/is-elasticsearch-good-for-such-a-problem/286917 "2021-10-17T12:23:18Z")
Hi, We have been thinking about choosing the right technology for our problem for a long time. The problem is as follows: we will have tens of millions of JSON documents documents will contain any number of "entry" s… --- ## [Elasticsearch plugin to do search requests](https://discuss.elastic.co/t/elasticsearch-plugin-to-do-search-requests/286923)
**Author:** [@ali\_kh](https://discuss.elastic.co/u/ali_kh)\ **Replies:** 3\ **Last updated:** [October 17, 2021, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-to-do-search-requests/286923 "2021-10-17T11:46:55Z")
I want to build an ES plugin to do index search requests, what type of plugins can I use? and is there some tutorial or documentation for that? Thanks --- ## [Logstash-keystore Java error](https://discuss.elastic.co/t/logstash-keystore-java-error/286925)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 0\ **Last updated:** [October 17, 2021, 10:02am UTC](https://discuss.elastic.co/t/logstash-keystore-java-error/286925 "2021-10-17T10:02:28Z")
Hi, I have a problem when running logstash-keystore Windows command line: bin\\logstash-keystore create Does not work and returns the information: "Using boundled JDK:" Cannot find Java 1.5 or higher However... b… --- ## [How do I get the dns.request.registerd\_name field?](https://discuss.elastic.co/t/how-do-i-get-the-dns-request-registerd-name-field/286883)
**Author:** [@polarfox](https://discuss.elastic.co/u/polarfox)\ **Replies:** 5\ **Last updated:** [October 17, 2021, 9:10am UTC](https://discuss.elastic.co/t/how-do-i-get-the-dns-request-registerd-name-field/286883 "2021-10-17T09:10:14Z")
Hello all, I've recently started getting familiar with Elastic Security. I'm currently using the 14-day free trial and I have a very small setup with a single Windows 10 machine enrolled as an agent. When I click on Se… --- ## [Named multi match query](https://discuss.elastic.co/t/named-multi-match-query/286904)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 0\ **Last updated:** [October 17, 2021, 3:35am UTC](https://discuss.elastic.co/t/named-multi-match-query/286904 "2021-10-17T03:35:59Z")
Hello everyone , I need a hand here. I have a cross\_fields multi\_match query and I need to use named queries for each field. I can rewrite it into a bool/should match but then I dont know how to reproduce the cross\_field… --- ## [JSON Parse error: Illegal unquoted character](https://discuss.elastic.co/t/json-parse-error-illegal-unquoted-character/286894)
**Author:** [@geetika\_gopi](https://discuss.elastic.co/u/geetika_gopi)\ **Replies:** 1\ **Last updated:** [October 16, 2021, 4:08pm UTC](https://discuss.elastic.co/t/json-parse-error-illegal-unquoted-character/286894 "2021-10-16T16:08:31Z")
Hello, I am using rsyslog to send my auditd logs to logstash. Before reaching logstash, an rsyslog template is applied for better formatting. I run into an error here jsonlines - JSON parse error, original data now in… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=799) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=801)