# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=827 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 828 --- ## [Kibana dashboard display text line by line](https://discuss.elastic.co/t/kibana-dashboard-display-text-line-by-line/282078)
**Author:** [@hellotty](https://discuss.elastic.co/u/hellotty)\ **Replies:** 4\ **Last updated:** [September 15, 2021, 8:38am UTC](https://discuss.elastic.co/t/kibana-dashboard-display-text-line-by-line/282078 "2021-09-15T08:38:23Z")
Hello! In filebeat.yml I split my log file using multiline.pattern snippet filebeat: multiline.type: pattern multiline.pattern: '---------' multiline.negate: true multiline.match: after In discover, it is displaye… --- ## [Kibana dashboard отображение текста построчно](https://discuss.elastic.co/t/kibana-dashboard/283880)
**Author:** [@hellotty](https://discuss.elastic.co/u/hellotty)\ **Replies:** 4\ **Last updated:** [September 15, 2021, 8:02am UTC](https://discuss.elastic.co/t/kibana-dashboard/283880 "2021-09-15T08:02:17Z")
Здравствуйте! В filebeat.yml я разделил свой файл журнала, используя multiline.pattern Фрагмент filebeat: multiline.type: pattern multiline.pattern: '---------' multiline.negate: true multiline.match: after В Di… --- ## [Is it possible to make new property having default normalizer](https://discuss.elastic.co/t/is-it-possible-to-make-new-property-having-default-normalizer/284252)
**Author:** [@VincentGWZhang](https://discuss.elastic.co/u/VincentGWZhang)\ **Replies:** 0\ **Last updated:** [September 15, 2021, 6:55am UTC](https://discuss.elastic.co/t/is-it-possible-to-make-new-property-having-default-normalizer/284252 "2021-09-15T06:55:41Z")
Suppose I have a index having mapping setting as: { "settings": { "index": { "number\_of\_shards": 3, "number\_of\_replicas": 1 }, "analysis": { "normalizer": { "lowercase\_normalizer"… --- ## [I want to set up sending notifications about errors](https://discuss.elastic.co/t/i-want-to-set-up-sending-notifications-about-errors/283287)
**Author:** [@sasha198407](https://discuss.elastic.co/u/sasha198407)\ **Replies:** 8\ **Last updated:** [September 15, 2021, 6:13am UTC](https://discuss.elastic.co/t/i-want-to-set-up-sending-notifications-about-errors/283287 "2021-09-15T06:13:27Z")
Hello. I want to set up sending notifications about errors (errors in the operation of Apache, MySQL, Nginx, as well as if the server is not available) from logstesh to e-mail. Wrote at ./logstash/pipeline/logstash.conf … --- ## [Going from 6.8.15 to 6.8.18 should be no issue correct](https://discuss.elastic.co/t/going-from-6-8-15-to-6-8-18-should-be-no-issue-correct/284198)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 4\ **Last updated:** [September 15, 2021, 5:29am UTC](https://discuss.elastic.co/t/going-from-6-8-15-to-6-8-18-should-be-no-issue-correct/284198 "2021-09-15T05:29:23Z")
Good Day, I have a cluster that has ES 6.8.15 install and see that 6.8.18 is there to upgrade to. This should be a straight forward upgrade correct. Everything is currently working in our cluster, but I wanted to make… --- ## [Elasticsearch 7.8.1 maximum shards open error](https://discuss.elastic.co/t/elasticsearch-7-8-1-maximum-shards-open-error/284234)
**Author:** [@ManOfDestiny](https://discuss.elastic.co/u/ManOfDestiny)\ **Replies:** 2\ **Last updated:** [September 15, 2021, 5:17am UTC](https://discuss.elastic.co/t/elasticsearch-7-8-1-maximum-shards-open-error/284234 "2021-09-15T05:17:01Z")
How can I solve this problem? Env 1. elsticsearch version : 7.8.1 2. cluster 1) master node 3EA 2) data Node : 7EA ConfigFile : elasticsearch.yml cluster.max\_shards\_per\_node: 10000 Cluster setting GET /\_clust… --- ## [Routing to an Index Partition - Custom Routing](https://discuss.elastic.co/t/routing-to-an-index-partition-custom-routing/284240)
**Author:** [@sudhir-ch](https://discuss.elastic.co/u/sudhir-ch)\ **Replies:** 0\ **Last updated:** [September 15, 2021, 3:28am UTC](https://discuss.elastic.co/t/routing-to-an-index-partition-custom-routing/284240 "2021-09-15T03:28:31Z")
Hi, I have configured the index such that custom routing values will go to a subset of the shards rather than a single shard by providing the index level setting "index.routing\_partition\_size" at index creation. Index … --- ## [Audit Concurrent Logons](https://discuss.elastic.co/t/audit-concurrent-logons/284236)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 0\ **Last updated:** [September 15, 2021, 2:29am UTC](https://discuss.elastic.co/t/audit-concurrent-logons/284236 "2021-09-15T02:29:33Z")
I've been asked to come up with a way to audit concurrent Windows logins, and am trying to find anyone who has had success with this in Kibana. I can easily audit logons (4624) and logoffs (4647), but haven't yet figured… --- ## [The rebalancing task lasted for more than a week without stopping, and the balance has not been reached](https://discuss.elastic.co/t/the-rebalancing-task-lasted-for-more-than-a-week-without-stopping-and-the-balance-has-not-been-reached/284020)
**Author:** [@liwanjie](https://discuss.elastic.co/u/liwanjie)\ **Replies:** 17\ **Last updated:** [September 15, 2021, 2:32am UTC](https://discuss.elastic.co/t/the-rebalancing-task-lasted-for-more-than-a-week-without-stopping-and-the-balance-has-not-been-reached/284020 "2021-09-15T02:32:51Z")
version ：7.10.2 My cluster has a total of 30 machines, one machine has two data nodes, so there are a total of 60 nodes i add a dataNode to cluster，and then the rebalance tasks started... but a week has passed，rebalan… --- ## [Kibana - Is the translation to pt-BR still working the same since 2019?](https://discuss.elastic.co/t/kibana-is-the-translation-to-pt-br-still-working-the-same-since-2019/284193)
**Author:** [@medina](https://discuss.elastic.co/u/medina)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 2:29am UTC](https://discuss.elastic.co/t/kibana-is-the-translation-to-pt-br-still-working-the-same-since-2019/284193 "2021-09-15T02:29:28Z")
I need to translate kibana to pt-BR and I'm new to Kibana (and how it's plugins work). I checked this link Translating Kibana to pt-BR - Elastic Stack / Kibana - Discuss the Elastic Stack and I was wondering if it still… --- ## [Elasticsearch7.5 routing hash function](https://discuss.elastic.co/t/elasticsearch7-5-routing-hash-function/284187)
**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\ **Replies:** 0\ **Last updated:** [September 14, 2021, 1:15pm UTC](https://discuss.elastic.co/t/elasticsearch7-5-routing-hash-function/284187 "2021-09-14T13:15:37Z")
the Elasticsearch routine description like this routing\_factor = num\_routing\_shards / num\_primary\_shards shard\_num = (hash(\_routing) % num\_routing\_shards) / routing\_factor i want to know the hash function so that i … --- ## [Case Management System and external connectors](https://discuss.elastic.co/t/case-management-system-and-external-connectors/284189)
**Author:** [@thisisxgp](https://discuss.elastic.co/u/thisisxgp)\ **Replies:** 1\ **Last updated:** [September 15, 2021, 12:39am UTC](https://discuss.elastic.co/t/case-management-system-and-external-connectors/284189 "2021-09-15T00:39:46Z")
Hello guys, Currently, Elastic Security can send case updates to ServiceNow / Jira / Swimlane / IBM Resilient according to the official documentation. Are there any plans on expanding this list? I'd be very interested … --- ## [Is changing the jvm heap size a problem?](https://discuss.elastic.co/t/is-changing-the-jvm-heap-size-a-problem/284172)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 3\ **Last updated:** [September 14, 2021, 9:50pm UTC](https://discuss.elastic.co/t/is-changing-the-jvm-heap-size-a-problem/284172 "2021-09-14T21:50:58Z")
Hello, there are a total of 16 nodes in the cluster, including 13 data nodes and 3 master nodes. Master nodes have 64 gb ram. But jvm heap is set to 16gb. Data nodes have 64 GB ram. But jvm heap is set to 30gb. Does t… --- ## [Scripting a Field with multiple fields with Null values](https://discuss.elastic.co/t/scripting-a-field-with-multiple-fields-with-null-values/284207)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 0\ **Last updated:** [September 14, 2021, 5:05pm UTC](https://discuss.elastic.co/t/scripting-a-field-with-multiple-fields-with-null-values/284207 "2021-09-14T17:05:38Z")
Hi, I'm attempting to use a script processor to add the sum of other fields into a total field, but some of the values are null. I know that I can use a "gsub" or "set" processors to set null values to 0, but the "gsub… --- ## [Elasticsearch 7.13.4 Security Update](https://discuss.elastic.co/t/elasticsearch-7-13-4-security-update/279177)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [July 20, 2021, 3:14pm UTC](https://discuss.elastic.co/t/elasticsearch-7-13-4-security-update/279177 "2021-07-20T15:14:29Z")
Elasticsearch memory disclosure issue (ESA-2021-16) A memory disclosure vulnerability was identified in Elasticsearch’s error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit … --- ## [Enable private IP address crawls](https://discuss.elastic.co/t/enable-private-ip-address-crawls/284206)
**Author:** [@lgoolsby](https://discuss.elastic.co/u/lgoolsby)\ **Replies:** 1\ **Last updated:** [September 14, 2021, 4:57pm UTC](https://discuss.elastic.co/t/enable-private-ip-address-crawls/284206 "2021-09-14T16:57:27Z")
I am setting up App Search and need to crawl some internal content. I found this post that says the feature is coming in the next minor patch, but it wasn't clear which version that will be. Will it be a patch based off … --- ## [Logging not working with Kibana 7.14.1](https://discuss.elastic.co/t/logging-not-working-with-kibana-7-14-1/283624)
**Author:** [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)\ **Replies:** 1\ **Last updated:** [September 14, 2021, 2:43pm UTC](https://discuss.elastic.co/t/logging-not-working-with-kibana-7-14-1/283624 "2021-09-14T14:43:05Z")
In my kibana.yml I have given the following. But I don't see kibana logs being written to the path I defined logging: root: level: all appenders: rolling-file: type: rolling-file fileName: /apps… --- ## [How to disable geoip usage in 7.14.0](https://discuss.elastic.co/t/how-to-disable-geoip-usage-in-7-14-0/281076)
**Author:** [@Alex\_Batt](https://discuss.elastic.co/u/Alex_Batt)\ **Replies:** 21\ **Last updated:** [September 14, 2021, 2:18pm UTC](https://discuss.elastic.co/t/how-to-disable-geoip-usage-in-7-14-0/281076 "2021-09-14T14:18:55Z")
hi, I want to disable the usage of geoip functionality because of licensing and no usage . I have a single node cluster, which works fine. I've tried to disable the geoip on a cluster level using the following param: ing… --- ## ["type": "parsing\_exception","reason":"unknown query \[aggs\] - Elasticsearch node js client](https://discuss.elastic.co/t/type-parsing-exception-reason-unknown-query-aggs-elasticsearch-node-js-client/281402)
**Author:** [@manojkrishna561994](https://discuss.elastic.co/u/manojkrishna561994)\ **Replies:** 4\ **Last updated:** [September 14, 2021, 2:11pm UTC](https://discuss.elastic.co/t/type-parsing-exception-reason-unknown-query-aggs-elasticsearch-node-js-client/281402 "2021-09-14T14:11:42Z")
Hi, I want to connect to elasticsearch through elasticsearch node js client. I'm using search api and want to run few aggregation to calculate the total count of docs which passes the given condition. However, im gettin… --- ## [Logstash refuses to bind to port 9600](https://discuss.elastic.co/t/logstash-refuses-to-bind-to-port-9600/284183)
**Author:** [@Dan\_Sputnikk](https://discuss.elastic.co/u/Dan_Sputnikk)\ **Replies:** 3\ **Last updated:** [September 14, 2021, 2:04pm UTC](https://discuss.elastic.co/t/logstash-refuses-to-bind-to-port-9600/284183 "2021-09-14T14:04:20Z")
Hi all, Using Logstash 6. I have: http.host: "0.0.0.0" http.port: 9600-9700 xpack.monitoring.enabled: true xpack.monitoring.elasticsearch.hosts: \["http://10.1.96.89:9200", "http://10.1.96.90:9200", "http://10.1.96.9… --- ## [Geo\_shape size and elastic performance](https://discuss.elastic.co/t/geo-shape-size-and-elastic-performance/283920)
**Author:** [@rgwozdz](https://discuss.elastic.co/u/rgwozdz)\ **Replies:** 4\ **Last updated:** [September 14, 2021, 1:30pm UTC](https://discuss.elastic.co/t/geo-shape-size-and-elastic-performance/283920 "2021-09-14T13:30:44Z")
We have an index that contains about 5 million documents. About 20% will have a geo\_shape field that contains polygon data. I need to support intersect queries on these geo\_shapes. Some of these polygons are very comp… --- ## [Need help with conditional only if field contains a period](https://discuss.elastic.co/t/need-help-with-conditional-only-if-field-contains-a-period/284126)
**Author:** [@pcharles1](https://discuss.elastic.co/u/pcharles1)\ **Replies:** 2\ **Last updated:** [September 14, 2021, 1:04pm UTC](https://discuss.elastic.co/t/need-help-with-conditional-only-if-field-contains-a-period/284126 "2021-09-14T13:04:44Z")
I'm trying to grok the host name field only if it contains a period using the conditional below: if (\[host\]\[name\] =~ ".") { grok host.name field } For some reason, when the host name field doesn't contain a period, I g… --- ## [Stop token filter how to set whitespace char as stop word in stopwords\_path config file](https://discuss.elastic.co/t/stop-token-filter-how-to-set-whitespace-char-as-stop-word-in-stopwords-path-config-file/282429)
**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\ **Replies:** 2\ **Last updated:** [September 14, 2021, 1:02pm UTC](https://discuss.elastic.co/t/stop-token-filter-how-to-set-whitespace-char-as-stop-word-in-stopwords-path-config-file/282429 "2021-09-14T13:02:52Z")
Elasticsearch 7.5 thank you for help me ! i want to set the stop word by the stopwords\_path , i set a lot word in the stopwords.txt file , most of the word in the file is effective but only the whitespace char is not e… --- ## [Pagerduty - Set Urgency - Feature Request](https://discuss.elastic.co/t/pagerduty-set-urgency-feature-request/283717)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 1\ **Last updated:** [September 14, 2021, 12:58pm UTC](https://discuss.elastic.co/t/pagerduty-set-urgency-feature-request/283717 "2021-09-14T12:58:11Z")
Within Pagerduty there is a concept of 'urgency' for incidents. Based on the level of urgency different rules get applied. This should be configurable within Kibana to set the Urgency. I see this was previously raised f… --- ## [Change event name based on type](https://discuss.elastic.co/t/change-event-name-based-on-type/284129)
**Author:** [@antonisnyc94](https://discuss.elastic.co/u/antonisnyc94)\ **Replies:** 1\ **Last updated:** [September 14, 2021, 12:48pm UTC](https://discuss.elastic.co/t/change-event-name-based-on-type/284129 "2021-09-14T12:48:30Z")
Hello, I am having a field which is an object but sometimes it's a string. I'm using the below ruby code but for some reason im still getting an error.. Does anyone know why? if event.get("\[data\]\[aws\]\[configuration\]\[s… --- ## [Is it possible to make the custom dashboard links use current dashboard time along with the applied filters?](https://discuss.elastic.co/t/is-it-possible-to-make-the-custom-dashboard-links-use-current-dashboard-time-along-with-the-applied-filters/283203)
**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\ **Replies:** 2\ **Last updated:** [September 14, 2021, 12:40pm UTC](https://discuss.elastic.co/t/is-it-possible-to-make-the-custom-dashboard-links-use-current-dashboard-time-along-with-the-applied-filters/283203 "2021-09-14T12:40:25Z")
Hello, I used URL formatting option on some of my index pattern fields. These URLs basically redirect me to a different dedicated dashboard when clicked. The dashboard redirection is working very well where the clicked… --- ## [How to calculate the time a request remains in the queue](https://discuss.elastic.co/t/how-to-calculate-the-time-a-request-remains-in-the-queue/284128)
**Author:** [@Higor](https://discuss.elastic.co/u/Higor)\ **Replies:** 2\ **Last updated:** [September 14, 2021, 11:18am UTC](https://discuss.elastic.co/t/how-to-calculate-the-time-a-request-remains-in-the-queue/284128 "2021-09-14T11:18:51Z")
I need to find some way to calculate how long a request remains in the queue. --- ## [Logstash kafka input plugin mutate problem](https://discuss.elastic.co/t/logstash-kafka-input-plugin-mutate-problem/284156)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 1\ **Last updated:** [September 14, 2021, 10:15am UTC](https://discuss.elastic.co/t/logstash-kafka-input-plugin-mutate-problem/284156 "2021-09-14T10:15:16Z")
Dears, I'm trying to load data from kafka topic but have some problem with if statement in filter. This part of the setup doesn't work and I don't know why: replace =\> { "\[@metadata\]\[index\_prefix\]" =\> "kafka-%{+YYYY.M… --- ## [Kibana Lens Visualization showing data as "other" where as I have values for that fields](https://discuss.elastic.co/t/kibana-lens-visualization-showing-data-as-other-where-as-i-have-values-for-that-fields/282659)
**Author:** [@sagar.pattnayak](https://discuss.elastic.co/u/sagar.pattnayak)\ **Replies:** 3\ **Last updated:** [September 14, 2021, 10:05am UTC](https://discuss.elastic.co/t/kibana-lens-visualization-showing-data-as-other-where-as-i-have-values-for-that-fields/282659 "2021-09-14T10:05:15Z")
Hi There, I have created a Kibana Lens visualization (Datatable) where I am showing some tabular data from my index. The problem I have is even if I have some values in one my field (documenttitle), it is showing as "ot… --- ## [Keyword seem to have disappeared](https://discuss.elastic.co/t/keyword-seem-to-have-disappeared/283685)
**Author:** [@Bibas](https://discuss.elastic.co/u/Bibas)\ **Replies:** 5\ **Last updated:** [September 14, 2021, 9:44am UTC](https://discuss.elastic.co/t/keyword-seem-to-have-disappeared/283685 "2021-09-14T09:44:04Z")
Hello I have logs coming from my application, in those logs, there is a "coType" field that used to be a text that contains a keyword subfield. For a reason that I ignore (I don't think I changed the conf file in month… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=826) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=828)