# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=841 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 842 --- ## [Question regarding file and folder permissions when it comes to File output plugin](https://discuss.elastic.co/t/question-regarding-file-and-folder-permissions-when-it-comes-to-file-output-plugin/282873)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 0\ **Last updated:** [August 31, 2021, 4:19am UTC](https://discuss.elastic.co/t/question-regarding-file-and-folder-permissions-when-it-comes-to-file-output-plugin/282873 "2021-08-31T04:19:42Z")
Problem In my Output plugin I want to write all grok parse failures to a file else if "\_grokparsefailure" in \[tags\] { file { path =\> "/home/anotherAccount/testfolder/grokfailures" … --- ## [Nori 필드 관련하여 query\_string 조회시 결과 안나오는 증상 관련 하여 도움 요청 드립니다](https://discuss.elastic.co/t/nori-query-string/282868)
**Author:** [@ankj0905](https://discuss.elastic.co/u/ankj0905)\ **Replies:** 0\ **Last updated:** [August 31, 2021, 2:29am UTC](https://discuss.elastic.co/t/nori-query-string/282868 "2021-08-31T02:29:26Z")
query\_string을 이용하여 특정 파일 명을 가져오는 부분을 진행하고 있습니다. 대부분의 쿼리는 잘되나 아래와 같은 쿼리에서 문제가 발생합니다. "query": "ERP 가맹점 정보 DB 업데이트", "query": ""가맹점 정보 DB 업데이트"", 로 검색시 결과가 잘 나오나 "query": ""ERP 가맹점정보 DB 업데이트"", 와 같이 검색 시 결과가 안나오는 증상이 있습니… --- ## [Watch configuration (advance watch - Jason queries for cyber security)](https://discuss.elastic.co/t/watch-configuration-advance-watch-jason-queries-for-cyber-security/274632)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 4\ **Last updated:** [August 31, 2021, 1:52am UTC](https://discuss.elastic.co/t/watch-configuration-advance-watch-jason-queries-for-cyber-security/274632 "2021-08-31T01:52:57Z")
Good morning everyone, I have recently setup ELK with elastic on cloud and I am in the process of configuring watch. I want to mainly use this to monitor my environment from suspicious events like: new user created, 5-1… --- ## [Heartbeat dashboard in Kibana visualizing not showing expected](https://discuss.elastic.co/t/heartbeat-dashboard-in-kibana-visualizing-not-showing-expected/282840)
**Author:** [@selin](https://discuss.elastic.co/u/selin)\ **Replies:** 6\ **Last updated:** [August 31, 2021, 1:45am UTC](https://discuss.elastic.co/t/heartbeat-dashboard-in-kibana-visualizing-not-showing-expected/282840 "2021-08-31T01:45:51Z")
Hi guys, i started 1 application and another is down. Can I know why my graph not showing equal. It showing both green greater than red. Anything i did wrong? Please advice --- ## [Kibana visualization showing data as "Other"](https://discuss.elastic.co/t/kibana-visualization-showing-data-as-other/282636)
**Author:** [@online](https://discuss.elastic.co/u/online)\ **Replies:** 6\ **Last updated:** [August 31, 2021, 1:01am UTC](https://discuss.elastic.co/t/kibana-visualization-showing-data-as-other/282636 "2021-08-31T01:01:11Z")
Hello Guys, I am having an issue where some of the data on visualizations including in tables/dashboards appear as "Other". The index that holds this data have no data with that particular word. What could be the reason… --- ## [Elastic Central -](https://discuss.elastic.co/t/elastic-central/282810)
**Author:** [@alanreboucas](https://discuss.elastic.co/u/alanreboucas)\ **Replies:** 1\ **Last updated:** [August 30, 2021, 11:49pm UTC](https://discuss.elastic.co/t/elastic-central/282810 "2021-08-30T23:49:11Z")
First, sorry for the lack of knowledge. I'm new to the ElasticSearch world. I've already read a lot of the documentation, but some things weren't clear. I'm implementing a Central lasticsearch cluster and the idea is to… --- ## [Different behavior on index shards when apply index mapping](https://discuss.elastic.co/t/different-behavior-on-index-shards-when-apply-index-mapping/282697)
**Author:** [@Fdsm](https://discuss.elastic.co/u/Fdsm)\ **Replies:** 4\ **Last updated:** [August 30, 2021, 11:13pm UTC](https://discuss.elastic.co/t/different-behavior-on-index-shards-when-apply-index-mapping/282697 "2021-08-30T23:13:54Z")
Hello, We watch a curious behavior after apply a index mapping on indices: Before mapping, it was not notice any docs\_deleted on indeces and size of the primary and replica shards were basicaly same: Before custom map… --- ## [Elasticsearch Cross-site cluster](https://discuss.elastic.co/t/elasticsearch-cross-site-cluster/282528)
**Author:** [@unknown\_user](https://discuss.elastic.co/u/unknown_user)\ **Replies:** 4\ **Last updated:** [August 30, 2021, 11:11pm UTC](https://discuss.elastic.co/t/elasticsearch-cross-site-cluster/282528 "2021-08-30T23:11:45Z")
Hi, Has anyone got experience with running a cluster across Data Centers? I'm interested in latency and bandwidth required between data centers. I've seen some information that 10Gbps / 10ms is required for a reliable c… --- ## [Kibana behind reverse proxy (nginx) on a different route](https://discuss.elastic.co/t/kibana-behind-reverse-proxy-nginx-on-a-different-route/278070)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 2\ **Last updated:** [August 30, 2021, 9:56pm UTC](https://discuss.elastic.co/t/kibana-behind-reverse-proxy-nginx-on-a-different-route/278070 "2021-08-30T21:56:15Z")
Hello everybody! I'm trying to set up a different path than / in a Nginx server as reverse proxy. I would like that the users can access to myserver.com/kibana and then https://....elastic-cloud.com:xxxxis showed. For … --- ## [Kibana iframes](https://discuss.elastic.co/t/kibana-iframes/280969)
**Author:** [@Cgr\_EQ](https://discuss.elastic.co/u/Cgr_EQ)\ **Replies:** 1\ **Last updated:** [August 30, 2021, 9:47pm UTC](https://discuss.elastic.co/t/kibana-iframes/280969 "2021-08-30T21:47:57Z")
Hello, I've setup Elastic/Kibana with basic authentication using x-pack. I understand that I can set up a reverse proxy using Nginx and specify a base 64 encoded username/password to the header to authenticate and use t… --- ## [How to extract nested json objects in to new fields in kibana](https://discuss.elastic.co/t/how-to-extract-nested-json-objects-in-to-new-fields-in-kibana/282626)
**Author:** [@sandhya1](https://discuss.elastic.co/u/sandhya1)\ **Replies:** 2\ **Last updated:** [August 30, 2021, 9:08pm UTC](https://discuss.elastic.co/t/how-to-extract-nested-json-objects-in-to-new-fields-in-kibana/282626 "2021-08-30T21:08:29Z")
Hi, I have one field which is having nested j son object format, i need to extract into new fields. The field is mapped to the "text" data type and from the below format i need the count of unique first name and need t… --- ## [Kibana failing to start because of incompatible plugins](https://discuss.elastic.co/t/kibana-failing-to-start-because-of-incompatible-plugins/282770)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 2\ **Last updated:** [August 30, 2021, 9:05pm UTC](https://discuss.elastic.co/t/kibana-failing-to-start-because-of-incompatible-plugins/282770 "2021-08-30T21:05:56Z")
running on ubuntu 20.04 After upgrading ES/Kibana to 7.14 kibana fails to start: FATAL Error: Failed to initialize plugins: Plugin "enhancedTable" is only compatible with Kibana version "7.11.2", but used Kibana ve… --- ## [Set custom ID for elastic-agent](https://discuss.elastic.co/t/set-custom-id-for-elastic-agent/282419)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 7\ **Last updated:** [August 30, 2021, 7:17pm UTC](https://discuss.elastic.co/t/set-custom-id-for-elastic-agent/282419 "2021-08-30T19:17:56Z")
Hello, Is it possible to set or create a custom agent.id during or after the elastic-agent install, whether it be via a command line argument or an API call we can make? For example, instead of agent.id being a uuid li… --- ## [Monitoring Metrics on AIX](https://discuss.elastic.co/t/monitoring-metrics-on-aix/282443)
**Author:** [@aniket.sonavane](https://discuss.elastic.co/u/aniket.sonavane)\ **Replies:** 1\ **Last updated:** [August 30, 2021, 5:26pm UTC](https://discuss.elastic.co/t/monitoring-metrics-on-aix/282443 "2021-08-30T17:26:19Z")
Objective:- Monitor AIX Server CPU, memory and disk utilization & read some application logs using filebeat / logstash. Hi, I want to monitor the AIX server using elastic stack 7.13. I've tried using community metrixbe… --- ## [Shard size not even for the same index](https://discuss.elastic.co/t/shard-size-not-even-for-the-same-index/282761)
**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\ **Replies:** 4\ **Last updated:** [August 30, 2021, 3:59pm UTC](https://discuss.elastic.co/t/shard-size-not-even-for-the-same-index/282761 "2021-08-30T15:59:44Z")
One of our index is relatively big and I just found its shards size are not even, see below. Any idea what could have cause this? Will it cause any perf issues and anything I can do? |my-index|0|r|STARTED|23869700|9.1… --- ## [Data storage - Shard and replica size](https://discuss.elastic.co/t/data-storage-shard-and-replica-size/282816)
**Author:** [@prithvirajsivarajan](https://discuss.elastic.co/u/prithvirajsivarajan)\ **Replies:** 4\ **Last updated:** [August 30, 2021, 1:55pm UTC](https://discuss.elastic.co/t/data-storage-shard-and-replica-size/282816 "2021-08-30T13:55:22Z")
I have a two node cluster with 600gb space between them on the data path. I'm setting a data stream where each index has 2 shards and one replica. Does the replica take same space as the main shards? Should I setup my da… --- ## [Logstash csv date deactivate](https://discuss.elastic.co/t/logstash-csv-date-deactivate/282764)
**Author:** [@shariq](https://discuss.elastic.co/u/shariq)\ **Replies:** 6\ **Last updated:** [August 30, 2021, 1:19pm UTC](https://discuss.elastic.co/t/logstash-csv-date-deactivate/282764 "2021-08-30T13:19:07Z")
Hi, I am new to the ELK stack. I am trying to import a CSV that contains Person Data to Elastic search, everything is working fine the only problem is that I would like to change the Birth\_date to "text" so i can use… --- ## [Problems to start Logstash conf pipelines with SystemCTL](https://discuss.elastic.co/t/problems-to-start-logstash-conf-pipelines-with-systemctl/282811)
**Author:** [@Leandro\_Valim](https://discuss.elastic.co/u/Leandro_Valim)\ **Replies:** 2\ **Last updated:** [August 30, 2021, 1:19pm UTC](https://discuss.elastic.co/t/problems-to-start-logstash-conf-pipelines-with-systemctl/282811 "2021-08-30T13:19:03Z")
I have a problem with logstash, when I running like this:/usr/share/logstash/bin/logstash --debug -f /etc/logstash/conf.d/switch.conf Works fine and start this specific configuration file. But I put this conf file in p… --- ## [JSON Split](https://discuss.elastic.co/t/json-split/282642)
**Author:** [@shashikant.deshmukh](https://discuss.elastic.co/u/shashikant.deshmukh)\ **Replies:** 4\ **Last updated:** [August 30, 2021, 12:03pm UTC](https://discuss.elastic.co/t/json-split/282642 "2021-08-30T12:03:46Z")
Hi, below is my Json, can you please help to split, I want all details from "Value" as separate event in elasticsearch. { "@odata.context": "https://urlrequired/api/$metadata#Robots", "@odata.count": 116, … --- ## [Update deleted RDBMS entries in Elasticsearch using Logstash jdbc input plugin](https://discuss.elastic.co/t/update-deleted-rdbms-entries-in-elasticsearch-using-logstash-jdbc-input-plugin/282803)
**Author:** [@RRSR](https://discuss.elastic.co/u/RRSR)\ **Replies:** 0\ **Last updated:** [August 30, 2021, 11:18am UTC](https://discuss.elastic.co/t/update-deleted-rdbms-entries-in-elasticsearch-using-logstash-jdbc-input-plugin/282803 "2021-08-30T11:18:44Z")
I am trying to sync the RDBMS (postgres) data to Elasticsearch using Logstash and it works fine. Logstash configuration file: input { jdbc { jdbc\_driver\_library =\> "/home/raj/Downloads/postgresql-42.2.23.jar" … --- ## [How to aggregate based on the number of items in a field?](https://discuss.elastic.co/t/how-to-aggregate-based-on-the-number-of-items-in-a-field/282650)
**Author:** [@Xi\_Ern\_Tee](https://discuss.elastic.co/u/Xi_Ern_Tee)\ **Replies:** 1\ **Last updated:** [August 30, 2021, 11:25am UTC](https://discuss.elastic.co/t/how-to-aggregate-based-on-the-number-of-items-in-a-field/282650 "2021-08-30T11:25:00Z")
On Elasticsearch I have a field named Itinerary that can contain multiple values (from 1 up to 6), for example in the picture below there's 2 items in the field. Is there a way I can aggregate based on the number of … --- ## [Elasticsearch with datatables in laravel](https://discuss.elastic.co/t/elasticsearch-with-datatables-in-laravel/282790)
**Author:** [@Chaima\_Dridi](https://discuss.elastic.co/u/Chaima_Dridi)\ **Replies:** 1\ **Last updated:** [August 30, 2021, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-with-datatables-in-laravel/282790 "2021-08-30T10:49:53Z")
I'm using databales in laravel and putting dynamic data into it with ajax. When I fetch the data from MySQL it works but when I fetch it from elasticsearch it returns an ajax error. --- ## [Search score of identical documents changes when nested integer attribute is modified](https://discuss.elastic.co/t/search-score-of-identical-documents-changes-when-nested-integer-attribute-is-modified/281515)
**Author:** [@Guido\_Cioni](https://discuss.elastic.co/u/Guido_Cioni)\ **Replies:** 1\ **Last updated:** [August 30, 2021, 10:43am UTC](https://discuss.elastic.co/t/search-score-of-identical-documents-changes-when-nested-integer-attribute-is-modified/281515 "2021-08-30T10:43:47Z")
We stumbled upon this issue today and cannot really understand what is happening. Suppose we have a really simple index with just two documents inside that have the same contents. // document 1 { "question": "text … --- ## [X-pack-async-search and flattened jars are not available in maven repository](https://discuss.elastic.co/t/x-pack-async-search-and-flattened-jars-are-not-available-in-maven-repository/282542)
**Author:** [@apurb\_ojha](https://discuss.elastic.co/u/apurb_ojha)\ **Replies:** 7\ **Last updated:** [August 30, 2021, 10:09am UTC](https://discuss.elastic.co/t/x-pack-async-search-and-flattened-jars-are-not-available-in-maven-repository/282542 "2021-08-30T10:09:00Z")
We want to use basic elastic license for (7.9.3). Although x-pack-core is available in maven repository but we are unable to find few jars like x-pack-async-search and flattened. Can we build these jars or is there any w… --- ## [Filebeat error- Failed to publish events caused by: lumberjack protocol error](https://discuss.elastic.co/t/filebeat-error-failed-to-publish-events-caused-by-lumberjack-protocol-error/282791)
**Author:** [@Ankit-github-26](https://discuss.elastic.co/u/Ankit-github-26)\ **Replies:** 0\ **Last updated:** [August 30, 2021, 9:26am UTC](https://discuss.elastic.co/t/filebeat-error-failed-to-publish-events-caused-by-lumberjack-protocol-error/282791 "2021-08-30T09:26:08Z")
Filebeat gives following error- 2021-08-30T08:59:03.490Z INFO \[publisher\_pipeline\_output\] pipeline/output.go:151 Connection to backoff(async(tcp://localhost:5044)) established 2021-08-30T08:59:03.565Z … --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/282753)
**Author:** [@asagiv](https://discuss.elastic.co/u/asagiv)\ **Replies:** 3\ **Last updated:** [August 30, 2021, 8:23am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/282753 "2021-08-30T08:23:51Z")
Hi I'm using a trial version of the Elastic/kibana. (30 days trial) I have configured ldap and it worked. I add few watcher and they worked as well , but after few days I couldn't login the kibana anymore. the error … --- ## [Navigation between dashboards](https://discuss.elastic.co/t/navigation-between-dashboards/282662)
**Author:** [@MTV](https://discuss.elastic.co/u/MTV)\ **Replies:** 2\ **Last updated:** [August 30, 2021, 7:23am UTC](https://discuss.elastic.co/t/navigation-between-dashboards/282662 "2021-08-30T07:23:46Z")
Hi, I have several dashboards built in kibana (7.14) and I need to be able to navigate from one dashboard to another. I know that we can do that with links in markdown, but it appears that everytime I make a change, the… --- ## [Using \_dissectfailure for matching multiple lines with dissect](https://discuss.elastic.co/t/using-dissectfailure-for-matching-multiple-lines-with-dissect/282781)
**Author:** [@nimblealliance](https://discuss.elastic.co/u/nimblealliance)\ **Replies:** 0\ **Last updated:** [August 30, 2021, 7:20am UTC](https://discuss.elastic.co/t/using-dissectfailure-for-matching-multiple-lines-with-dissect/282781 "2021-08-30T07:20:09Z")
Hello :slight\_smile: Could someone please let me know why my below filter using dissect doesn't work? I tried using the "\_dissectfailure" option to parse logs when the first dissect filter fails and returns this tag but… --- ## [Kibana can't show any apm data](https://discuss.elastic.co/t/kibana-cant-show-any-apm-data/282621)
**Author:** [@lisiyu](https://discuss.elastic.co/u/lisiyu)\ **Replies:** 2\ **Last updated:** [August 30, 2021, 7:11am UTC](https://discuss.elastic.co/t/kibana-cant-show-any-apm-data/282621 "2021-08-30T07:11:01Z")
Version: kibana:7.13.1 elasticsearch: 7.13.1 apm: 7.13.1 I can see apm data in discover. Kibana APM have no data. --- ## [FSCrawler not able to detect log42j.xml](https://discuss.elastic.co/t/fscrawler-not-able-to-detect-log42j-xml/282775)
**Author:** [@Pragyan\_prakash](https://discuss.elastic.co/u/Pragyan_prakash)\ **Replies:** 1\ **Last updated:** [August 30, 2021, 6:59am UTC](https://discuss.elastic.co/t/fscrawler-not-able-to-detect-log42j-xml/282775 "2021-08-30T06:59:42Z")
Trying to run the fscrawler.bat file using the command prompt but faced the following issue Error: Could not find or load main class (1)\\fscrawler-es7-2.8-SNAPSHOT.config.log4j2.xml Caused by: java.lang.ClassNotFoundEx… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=840) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=842)