# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=803

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 804

---

## [Unable to access Kibana in T-Pot](https://discuss.elastic.co/t/unable-to-access-kibana-in-t-pot/286409)

<div class="topic-metadata">

**Author:** [@paulap2](https://discuss.elastic.co/u/paulap2)\
**Replies:** 3\
**Last updated:** [October 14, 2021, 11:46am UTC](https://discuss.elastic.co/t/unable-to-access-kibana-in-t-pot/286409 "2021-10-14T11:46:25Z")

</div>

Hi, I am setting up T-POT for a uni project. I followed this tutorial step by step: Setup a T-POT Honeypot on Azure in less than 30 minutes - YouTube It worked for me over the weekend but today my kibana was giving me …

---

## [Elasticsearch and Strapi: How to create "geo\_point" type fields using Strapi cms](https://discuss.elastic.co/t/elasticsearch-and-strapi-how-to-create-geo-point-type-fields-using-strapi-cms/286714)

<div class="topic-metadata">

**Author:** [@GuiPerim](https://discuss.elastic.co/u/GuiPerim)\
**Replies:** 0\
**Last updated:** [October 14, 2021, 11:25am UTC](https://discuss.elastic.co/t/elasticsearch-and-strapi-how-to-create-geo-point-type-fields-using-strapi-cms/286714 "2021-10-14T11:25:12Z")

</div>

Hello! I'm pretty new on the React/NodeJs world. That being said, i'm working on an application that is using Strapi (v3.6.7) as the CMS and we are also using Elasticsearch (v7.15). And i'm using the following puglin to…

---

## [Since we moved 7.15 "Pushing flush onto pipeline." and files are not parsed](https://discuss.elastic.co/t/since-we-moved-7-15-pushing-flush-onto-pipeline-and-files-are-not-parsed/286605)

<div class="topic-metadata">

**Author:** [@fabeau](https://discuss.elastic.co/u/fabeau)\
**Replies:** 2\
**Last updated:** [October 14, 2021, 9:14am UTC](https://discuss.elastic.co/t/since-we-moved-7-15-pushing-flush-onto-pipeline-and-files-are-not-parsed/286605 "2021-10-14T09:14:30Z")

</div>

We deployed logstash config files on a new server running 7.15 from a 7.11 server working perfectly . We validated .conf files in command line and everything is fine. we parse some log files locally on the server and …

---

## [\[Help\] Display Concurrency between 2 date-type](https://discuss.elastic.co/t/help-display-concurrency-between-2-date-type/286351)

<div class="topic-metadata">

**Author:** [@hoaf13](https://discuss.elastic.co/u/hoaf13)\
**Replies:** 2\
**Last updated:** [October 14, 2021, 8:27am UTC](https://discuss.elastic.co/t/help-display-concurrency-between-2-date-type/286351 "2021-10-14T08:27:07Z")

</div>

I have 2 date-type: "timestamp\_pickup\_at" : "2021-09-06T04:10:28.070Z", "timestamp\_hangup\_at" : "2021-09-06T04:10:36.022Z" I want to visualize that as a conccurency date histogram. I refer to this topic but not work. …

---

## [Shards Not Being Allocated To Nodes](https://discuss.elastic.co/t/shards-not-being-allocated-to-nodes/286587)

<div class="topic-metadata">

**Author:** [@vilakazil](https://discuss.elastic.co/u/vilakazil)\
**Replies:** 6\
**Last updated:** [October 14, 2021, 6:54am UTC](https://discuss.elastic.co/t/shards-not-being-allocated-to-nodes/286587 "2021-10-14T06:54:04Z")

</div>

Hope to get assistance here as I have been struggling. I have 11 nodes that run Elasticsearch, with 2 master node. 5 shards and 1 replica (default) We recently ran patches on the nodes and upgraded the .Net software, t…

---

## [Kibana shows internal server error after implementing Authentication](https://discuss.elastic.co/t/kibana-shows-internal-server-error-after-implementing-authentication/286308)

<div class="topic-metadata">

**Author:** [@Apoorv\_Singh](https://discuss.elastic.co/u/Apoorv_Singh)\
**Replies:** 2\
**Last updated:** [October 14, 2021, 5:16am UTC](https://discuss.elastic.co/t/kibana-shows-internal-server-error-after-implementing-authentication/286308 "2021-10-14T05:16:21Z")

</div>

I am trying to integrate my kibana dashboard into my website without password. To secure it I am using the auth\_request module of Nginx. But I am stuck at this error - Version: 7.14.1 Build: 42892 Error: Internal Server…

---

## [Run logstash on ram](https://discuss.elastic.co/t/run-logstash-on-ram/286615)

<div class="topic-metadata">

**Author:** [@hatuli](https://discuss.elastic.co/u/hatuli)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 10:09pm UTC](https://discuss.elastic.co/t/run-logstash-on-ram/286615 "2021-10-13T22:09:29Z")

</div>

Hi, im working with fluentbit to export the logs from my k8s env, then to kafka, logstash and in the end to elasticearch, the massages are indexing inside ES but after a while they stop to index, i conf heap to 8G, but s…

---

## [Istio with Elastic Stack for Observability](https://discuss.elastic.co/t/istio-with-elastic-stack-for-observability/286607)

<div class="topic-metadata">

**Author:** [@denukak2000](https://discuss.elastic.co/u/denukak2000)\
**Replies:** 0\
**Last updated:** [October 13, 2021, 10:42am UTC](https://discuss.elastic.co/t/istio-with-elastic-stack-for-observability/286607 "2021-10-13T10:42:55Z")

</div>

I am currently using Istio as service mesh with Kubernetes (On Prem). I want to implement observability infrastructure with Elastic Stack , I know Istio is supported for jaeger and Prometheus, But I have to capture dist…

---

## [How to perform natural sort on a field in Elasticsearch?](https://discuss.elastic.co/t/how-to-perform-natural-sort-on-a-field-in-elasticsearch/285854)

<div class="topic-metadata">

**Author:** [@tranindigo](https://discuss.elastic.co/u/tranindigo)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 8:04pm UTC](https://discuss.elastic.co/t/how-to-perform-natural-sort-on-a-field-in-elasticsearch/285854 "2021-10-13T20:04:02Z")

</div>

I have an Elasticsearch keyword field called LocationNumber that I want to sort "alphanumerically" (or "naturally") so that it is easy for users to read. I have been researching this for days and couldn't find any real d…

---

## [What is the grok pattern that can match variable length documents from a single log file?](https://discuss.elastic.co/t/what-is-the-grok-pattern-that-can-match-variable-length-documents-from-a-single-log-file/285338)

<div class="topic-metadata">

**Author:** [@shi](https://discuss.elastic.co/u/shi)\
**Replies:** 8\
**Last updated:** [October 13, 2021, 7:41pm UTC](https://discuss.elastic.co/t/what-is-the-grok-pattern-that-can-match-variable-length-documents-from-a-single-log-file/285338 "2021-10-13T19:41:38Z")

</div>

I am having records/documents of variable lengths, say 3 types of logs coming in a single log fie. What is the grok pattern that can match variable length documents from a single log file? This grok pattern can be used…

---

## [Some Fields of index not listed in kibana - discover- under avilable fields , , eventhough shown in in index using GET command](https://discuss.elastic.co/t/some-fields-of-index-not-listed-in-kibana-discover-under-avilable-fields-eventhough-shown-in-in-index-using-get-command/286545)

<div class="topic-metadata">

**Author:** [@shi](https://discuss.elastic.co/u/shi)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 6:43pm UTC](https://discuss.elastic.co/t/some-fields-of-index-not-listed-in-kibana-discover-under-avilable-fields-eventhough-shown-in-in-index-using-get-command/286545 "2021-10-13T18:43:07Z")

</div>

Following log entries are put in index 2021-09-27T03:35:53.263029+05:30 \_gateway devname="PPFW01" 2021-09-27T03:42:22.549689+05:30 \_gateway devname="PPFW02" 2021-09-27T04:02:36.089881+05:30 \_gateway devname="PPFW03" …

---

## [FireEye HX for Endpoint protection Vs Elastic endpoint security](https://discuss.elastic.co/t/fireeye-hx-for-endpoint-protection-vs-elastic-endpoint-security/285784)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 6:36pm UTC](https://discuss.elastic.co/t/fireeye-hx-for-endpoint-protection-vs-elastic-endpoint-security/285784 "2021-10-13T18:36:55Z")

</div>

Do we have the comparison details of FireEye HX for Endpoint protection Vs Elastic endpoint security opensource?

---

## [Adding sort to ES query returns inaccurate results?](https://discuss.elastic.co/t/adding-sort-to-es-query-returns-inaccurate-results/286549)

<div class="topic-metadata">

**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\
**Replies:** 4\
**Last updated:** [October 13, 2021, 6:25pm UTC](https://discuss.elastic.co/t/adding-sort-to-es-query-returns-inaccurate-results/286549 "2021-10-13T18:25:38Z")

</div>

My queries are successfully returning the exact results that I am looking for. { "size":100, "from":0, "query":{ "bool":{ "must":\[ { "bool":{ "should"…

---

## [Does it make sense to add timestamp in "index sorting"?](https://discuss.elastic.co/t/does-it-make-sense-to-add-timestamp-in-index-sorting/286551)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 6:05pm UTC](https://discuss.elastic.co/t/does-it-make-sense-to-add-timestamp-in-index-sorting/286551 "2021-10-13T18:05:05Z")

</div>

The documentation suggests using low cardinality field(s) for index sorting. We often search documents with some low cardinality ID (like site or org) and then with timestamp. Does it make sense to include timestamp in…

---

## [Can I disable replicas in when index is getting data from logstash?](https://discuss.elastic.co/t/can-i-disable-replicas-in-when-index-is-getting-data-from-logstash/286647)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 5:10pm UTC](https://discuss.elastic.co/t/can-i-disable-replicas-in-when-index-is-getting-data-from-logstash/286647 "2021-10-13T17:10:15Z")

</div>

Hi, I have a large quantity of data being indexed in elastic, is taking a long time to do it, so it is posible to disable replicas when data is being indexed to Elasticsearch? can this create any problem? it will speed u…

---

## [Grok regex pattern for symbols?](https://discuss.elastic.co/t/grok-regex-pattern-for-symbols/286624)

<div class="topic-metadata">

**Author:** [@helloworld1234](https://discuss.elastic.co/u/helloworld1234)\
**Replies:** 5\
**Last updated:** [October 13, 2021, 4:44pm UTC](https://discuss.elastic.co/t/grok-regex-pattern-for-symbols/286624 "2021-10-13T16:44:24Z")

</div>

Lets say I have a string: "petBreed":"dachshund" "petName":"rufus" "petAge":"12" The value is not constant and can vary in length and content. And i want to use grok overwrite to remove rufus from the raw string. So…

---

## [Logstash - how to remove strings within a field (whose content itself a raw string)?](https://discuss.elastic.co/t/logstash-how-to-remove-strings-within-a-field-whose-content-itself-a-raw-string/286561)

<div class="topic-metadata">

**Author:** [@helloworld1234](https://discuss.elastic.co/u/helloworld1234)\
**Replies:** 3\
**Last updated:** [October 13, 2021, 4:22pm UTC](https://discuss.elastic.co/t/logstash-how-to-remove-strings-within-a-field-whose-content-itself-a-raw-string/286561 "2021-10-13T16:22:58Z")

</div>

I have a event that consists of various fields, one of which is called "raw\_message". This field's contents is a raw string eg. Input: raw\_message: "Raw user details:: \[location:london name:kris wu id:L3j5k category:vi…

---

## [ElasticSearch Search-as-you-type field type field with partial search](https://discuss.elastic.co/t/elasticsearch-search-as-you-type-field-type-field-with-partial-search/286635)

<div class="topic-metadata">

**Author:** [@Jacques\_du\_Plessis](https://discuss.elastic.co/u/Jacques_du_Plessis)\
**Replies:** 0\
**Last updated:** [October 13, 2021, 2:34pm UTC](https://discuss.elastic.co/t/elasticsearch-search-as-you-type-field-type-field-with-partial-search/286635 "2021-10-13T14:34:40Z")

</div>

I recently updating my ngram implementation settings to use Search-as-you-type field type. Search-as-you-type field type | Elasticsearch Guide \[7.x\] | Elastic This worked great but I noticed that partial searching do…

---

## [Kibana showing incorrect timestamp](https://discuss.elastic.co/t/kibana-showing-incorrect-timestamp/286619)

<div class="topic-metadata">

**Author:** [@Sn4cK](https://discuss.elastic.co/u/Sn4cK)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 1:22pm UTC](https://discuss.elastic.co/t/kibana-showing-incorrect-timestamp/286619 "2021-10-13T13:22:07Z")

</div>

Hello, I am having issue with how Kibana shows timestamps of my documents indexed in Elasticsearch. I have a document looking like: { "\_index": "speedtest", "\_type": "\_doc", "\_id": "1-nldXwBFYKxSrUSopKs", "\_ve…

---

## [Pipeline question](https://discuss.elastic.co/t/pipeline-question/286494)

<div class="topic-metadata">

**Author:** [@Worlock](https://discuss.elastic.co/u/Worlock)\
**Replies:** 13\
**Last updated:** [October 13, 2021, 1:00pm UTC](https://discuss.elastic.co/t/pipeline-question/286494 "2021-10-13T13:00:10Z")

</div>

Hi all, I have a field in my index that is named "Severity". The values can be either 2, 1 or 0. I want to rename those values to Critical, Warning or Informational. I looked into pipelines and also read the documentat…

---

## [Parsing tabular data into canvas](https://discuss.elastic.co/t/parsing-tabular-data-into-canvas/286496)

<div class="topic-metadata">

**Author:** [@Kadhem](https://discuss.elastic.co/u/Kadhem)\
**Replies:** 1\
**Last updated:** [October 12, 2021, 10:54pm UTC](https://discuss.elastic.co/t/parsing-tabular-data-into-canvas/286496 "2021-10-12T22:54:34Z")

</div>

hi, how can i parse this output of command to push into into a table in Canvas : prec: rqstd, stored, dropped, retried, rtsfail,rtrydrop, psretry, acked,utlisatn,q length,Data Mbits/s,Phy Mbits/s, %air, %effcy (v5…

---

## [ElasticSearch Data Redirection](https://discuss.elastic.co/t/elasticsearch-data-redirection/286036)

<div class="topic-metadata">

**Author:** [@jrpayne30506](https://discuss.elastic.co/u/jrpayne30506)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 12:58pm UTC](https://discuss.elastic.co/t/elasticsearch-data-redirection/286036 "2021-10-13T12:58:02Z")

</div>

Hello All, New to Elasticsearch here and having an issue. I have an Ubuntu server (18.04) that I am using to send some security and firewall logs for period of retentions storage. I found an article on how to redirect t…

---

## [One Index is not recovering from the state INITIALIZING and UNASSIGNED](https://discuss.elastic.co/t/one-index-is-not-recovering-from-the-state-initializing-and-unassigned/286468)

<div class="topic-metadata">

**Author:** [@Programmer](https://discuss.elastic.co/u/Programmer)\
**Replies:** 4\
**Last updated:** [October 13, 2021, 12:46pm UTC](https://discuss.elastic.co/t/one-index-is-not-recovering-from-the-state-initializing-and-unassigned/286468 "2021-10-13T12:46:21Z")

</div>

curl -XGET http://localhost:9200/\_cat/shards app-all 1 r INITIALIZING 172.16.4.165 viepevrat02 app-all 1 p STARTED 85125705 67gb 172.16.4.164 viepevrat01 app-all 0 p RELOCATING…

---

## [Сохранение переменной request.url в filebeat httpjson](https://discuss.elastic.co/t/request-url-filebeat-httpjson/286621)

<div class="topic-metadata">

**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\
**Replies:** 0\
**Last updated:** [October 13, 2021, 12:14pm UTC](https://discuss.elastic.co/t/request-url-filebeat-httpjson/286621 "2021-10-13T12:14:12Z")

</div>

Добрый день! Возник вопрос, можно ли сохранять последнее полученное значение параметра request.url и в дальнейшем производить чтение из него при запросе? Я использую в качестве input модуля httpjson со следующими настро…

---

## [Combination of filter and range](https://discuss.elastic.co/t/combination-of-filter-and-range/286392)

<div class="topic-metadata">

**Author:** [@smit\_vasava](https://discuss.elastic.co/u/smit_vasava)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 12:13pm UTC](https://discuss.elastic.co/t/combination-of-filter-and-range/286392 "2021-10-13T12:13:39Z")

</div>

hello everyone , i am newbie to Elasticsearch , i am having some issue with query searching .. here is my code GET /new\_product/\_search { "query": { "bool" : { "filter": \[ { "term": { "ca…

---

## [Auto Authentication using .net](https://discuss.elastic.co/t/auto-authentication-using-net/286462)

<div class="topic-metadata">

**Author:** [@prabha\_karan](https://discuss.elastic.co/u/prabha_karan)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 12:03pm UTC](https://discuss.elastic.co/t/auto-authentication-using-net/286462 "2021-10-13T12:03:03Z")

</div>

Hi ,i want to use dashboard inside in our web application .so, i pasted iframe inside Html.it rendered in browser with kibana login page. but after entered login credentials it again shows the login page.how to rectify t…

---

## [Which architecture is better? Should I collect the logs on the server side using rsyslog?](https://discuss.elastic.co/t/which-architecture-is-better-should-i-collect-the-logs-on-the-server-side-using-rsyslog/286589)

<div class="topic-metadata">

**Author:** [@Sagimb](https://discuss.elastic.co/u/Sagimb)\
**Replies:** 3\
**Last updated:** [October 13, 2021, 9:34am UTC](https://discuss.elastic.co/t/which-architecture-is-better-should-i-collect-the-logs-on-the-server-side-using-rsyslog/286589 "2021-10-13T09:34:35Z")

</div>

I am trying to understand which architecture is better for me. I have a few hundreds of instances that I want to send their logs to one central server. Should I got with A (run rsyslog on the central server to collec…

---

## [Kibana standard security and reverse proxy requires login multiple times](https://discuss.elastic.co/t/kibana-standard-security-and-reverse-proxy-requires-login-multiple-times/286404)

<div class="topic-metadata">

**Author:** [@mrybinski](https://discuss.elastic.co/u/mrybinski)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 11:23am UTC](https://discuss.elastic.co/t/kibana-standard-security-and-reverse-proxy-requires-login-multiple-times/286404 "2021-10-13T11:23:14Z")

</div>

Hello! I'm using basic Elastic Stack version 7.15 (Elasticsearch, Kibana, Logstash, Filebeat). To access Kibana I use IIS's URL Rewrite and reverse proxy. I wanted to deal with security warning by setting up minimal sec…

---

## [Tree node clustrering master\_not\_discovered\_exception issue](https://discuss.elastic.co/t/tree-node-clustrering-master-not-discovered-exception-issue/286604)

<div class="topic-metadata">

**Author:** [@Ali\_Panahian](https://discuss.elastic.co/u/Ali_Panahian)\
**Replies:** 1\
**Last updated:** [October 13, 2021, 10:35am UTC](https://discuss.elastic.co/t/tree-node-clustrering-master-not-discovered-exception-issue/286604 "2021-10-13T10:35:37Z")

</div>

i have tree node cluster of ES, the issue is: when i stop one node the other nodes work fine and discover master node and everything works fine, but when is stop 2 node, the last one return master\_not\_discovered\_except…

---

## [Json Parsing](https://discuss.elastic.co/t/json-parsing/286277)

<div class="topic-metadata">

**Author:** [@John\_snow](https://discuss.elastic.co/u/John_snow)\
**Replies:** 7\
**Last updated:** [October 13, 2021, 9:21am UTC](https://discuss.elastic.co/t/json-parsing/286277 "2021-10-13T09:21:29Z")

</div>

i have event coming in my logstash as a json {"key1": "value1", "key2": "value2", "key3": {"key4": "value4"}} I wanted too put that event inside a key data like {"data" : { "key1": "value1", "ke…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=802)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=804)
