# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=916 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 917 --- ## [Share dashboards without authentication](https://discuss.elastic.co/t/share-dashboards-without-authentication/275820)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 10:40am UTC](https://discuss.elastic.co/t/share-dashboards-without-authentication/275820 "2021-06-14T10:40:57Z")
Hello! I'm trying to share a custom dashboard without authentication to embed in a web but when I access to link it shows the following: How can I share the dashboard to allow its visualization without authentication… --- ## [Getting the value of a doc field inside FilterScript plugin](https://discuss.elastic.co/t/getting-the-value-of-a-doc-field-inside-filterscript-plugin/275819)
**Author:** [@lsena](https://discuss.elastic.co/u/lsena)\ **Replies:** 0\ **Last updated:** [June 14, 2021, 10:20am UTC](https://discuss.elastic.co/t/getting-the-value-of-a-doc-field-inside-filterscript-plugin/275819 "2021-06-14T10:20:49Z")
Hi! I need to fetch the value of the \_id (or other doc fields). Currently, I'm doing it like this: Is this the proper way to do it? It feels wrong. Especially fetching \_id since it even throws a warning about the dep… --- ## [Newly added hosts cannot be seen in Dashboard](https://discuss.elastic.co/t/newly-added-hosts-cannot-be-seen-in-dashboard/275373)
**Author:** [@tuli](https://discuss.elastic.co/u/tuli)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 10:10am UTC](https://discuss.elastic.co/t/newly-added-hosts-cannot-be-seen-in-dashboard/275373 "2021-06-14T10:10:17Z")
Hello, We have upgraded our Elastic to 7.12. And after the upgradation, we can see that when we add any new host in heartbeat/SNMP, the newly added host can be seen in Discover, but cannot find that host from dashboard … --- ## [ElasticSearch escape special character](https://discuss.elastic.co/t/elasticsearch-escape-special-character/275765)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 9:34am UTC](https://discuss.elastic.co/t/elasticsearch-escape-special-character/275765 "2021-06-14T09:34:24Z")
How I escape Unicode characters using a query\_string query? For example, my documents consist of the following data: { "title":"Sachin$tendular" } I am using the query\_string query in the following way: { … --- ## [Can we restrict users to read last n days of data](https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 5\ **Last updated:** [June 14, 2021, 9:27am UTC](https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804 "2021-06-14T09:27:15Z")
we are running Elasticsearch 7.9.0 with basic liecense and we need to put some restriction on users to read the document not more than 2 days. is it possible to add range query in roles? --- ## [Created new index which is supposed to receive and collect logs from our endpoint solution however on Kibana it appears to list all the other index logs but expected?](https://discuss.elastic.co/t/created-new-index-which-is-supposed-to-receive-and-collect-logs-from-our-endpoint-solution-however-on-kibana-it-appears-to-list-all-the-other-index-logs-but-expected/275514)
**Author:** [@devashishsingh](https://discuss.elastic.co/u/devashishsingh)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 7:57am UTC](https://discuss.elastic.co/t/created-new-index-which-is-supposed-to-receive-and-collect-logs-from-our-endpoint-solution-however-on-kibana-it-appears-to-list-all-the-other-index-logs-but-expected/275514 "2021-06-14T07:57:51Z")
Hello Friends, I have created a new logstash conf file for a new TCP syslogs collector and defined to send them to a new index. However on kibana the index pattern seems to have all but endpoint logs? Have I missed ay s… --- ## [Loadtesting on elasticsearch](https://discuss.elastic.co/t/loadtesting-on-elasticsearch/275788)
**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 6:33am UTC](https://discuss.elastic.co/t/loadtesting-on-elasticsearch/275788 "2021-06-14T06:33:19Z")
Hi All, I am new to elasticsearch. usecase is to do loadtest on Elasticsearch cluster so that KPI can be monitored(for ex: documents indexed per second, repilcation etc etc). What are the available solutions for this? --- ## [Problems getting new node to join cluster](https://discuss.elastic.co/t/problems-getting-new-node-to-join-cluster/275776)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 5:58am UTC](https://discuss.elastic.co/t/problems-getting-new-node-to-join-cluster/275776 "2021-06-14T05:58:42Z")
I am trying to add a couple of nodes to an existing cluster of 3 nodes. These "new" nodes have been in the cluster in the past but were taken out for "refurbishment" and now I am having issues getting them back in. see… --- ## [ドキュメント作成時に@timestampに現在日時を埋め込む方法](https://discuss.elastic.co/t/timestamp/275513)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 5:56am UTC](https://discuss.elastic.co/t/timestamp/275513 "2021-06-14T05:56:36Z")
以下のURLを参照しています インデックス作成APIを実行する際、タイムスタンプ型のフィールドに現在時刻を設定する方法があればご教示頂けないでしょうか？ 以下の例でいうと、@timestampフィールドに現在時刻を設定したいです PUT my-index-000001/\_doc/1?timeout=5m { "@timestamp": "2099-11-15T13:12:00", "message": "GET /sea… --- ## [Search using misspelled querys?](https://discuss.elastic.co/t/search-using-misspelled-querys/275783)
**Author:** [@Sebastian\_Marroquin](https://discuss.elastic.co/u/Sebastian_Marroquin)\ **Replies:** 0\ **Last updated:** [June 14, 2021, 4:18am UTC](https://discuss.elastic.co/t/search-using-misspelled-querys/275783 "2021-06-14T04:18:46Z")
Hi there, I'm working with elasticsearch version 6.2.4 along with the MEN stack. I was wondering if there is any way for elasticsearch to do searches even when the query is misspelled. I'll put it in Spanish to see if I … --- ## [Unassigned shards of index - not permitted by any node](https://discuss.elastic.co/t/unassigned-shards-of-index-not-permitted-by-any-node/275766)
**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 4:01am UTC](https://discuss.elastic.co/t/unassigned-shards-of-index-not-permitted-by-any-node/275766 "2021-06-14T04:01:07Z")
Hey, I'm trying to understand how to fix this issue of unassigned shards in my index: When running the explain API - I'm getting "no" for allocation: "can\_allocate" : "no" And in each node (9 of them), the decider… --- ## [JSON Filtering In Logstash To Remove Unwanted Fields](https://discuss.elastic.co/t/json-filtering-in-logstash-to-remove-unwanted-fields/275697)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 2\ **Last updated:** [June 13, 2021, 9:38pm UTC](https://discuss.elastic.co/t/json-filtering-in-logstash-to-remove-unwanted-fields/275697 "2021-06-13T21:38:18Z")
I want to ingest JSON PE file data that has 40+ fields w/nested fields. I only want the first few fields. Is there a way to either drop the unwanted fields or can I explicitly state which fields I want? --- ## [Detections - Kibana](https://discuss.elastic.co/t/detections-kibana/275716)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 7\ **Last updated:** [June 13, 2021, 7:04pm UTC](https://discuss.elastic.co/t/detections-kibana/275716 "2021-06-13T19:04:31Z")
Hi, I am trying to use detection rules in Kibana. I am testing it on predefined rules under Security module. To be exact " User Account Creation" . I am using winlog to send out data to kibana. I see user creation event… --- ## [Sorting on Nested array object within the same json file](https://discuss.elastic.co/t/sorting-on-nested-array-object-within-the-same-json-file/275767)
**Author:** [@madhan88](https://discuss.elastic.co/u/madhan88)\ **Replies:** 1\ **Last updated:** [June 13, 2021, 7:03pm UTC](https://discuss.elastic.co/t/sorting-on-nested-array-object-within-the-same-json-file/275767 "2021-06-13T19:03:47Z")
Hi, I'm trying to sort the fields present within an array which is of type nested. My data : { "name" : "abc", "shipping":\[ { "shipmentcode" : 5, "shipmentstatus" : "resolved", "shipmentorderid": "12345" }, { … --- ## [Parsing mySql slow query logs using Logstash](https://discuss.elastic.co/t/parsing-mysql-slow-query-logs-using-logstash/275518)
**Author:** [@learningelk](https://discuss.elastic.co/u/learningelk)\ **Replies:** 6\ **Last updated:** [June 13, 2021, 5:07pm UTC](https://discuss.elastic.co/t/parsing-mysql-slow-query-logs-using-logstash/275518 "2021-06-13T17:07:10Z")
I want to parse the mysql slow query logs using logstash and I want to replace modifieddate \> '2021-06-08 08:13:48' with some generix text like modifieddate \> 'NNNN' Below is the log sample : # Time: 2021-06-10T06:30:… --- ## [Nested queries don't work as documented](https://discuss.elastic.co/t/nested-queries-dont-work-as-documented/275737)
**Author:** [@titani0us](https://discuss.elastic.co/u/titani0us)\ **Replies:** 2\ **Last updated:** [June 13, 2021, 4:45pm UTC](https://discuss.elastic.co/t/nested-queries-dont-work-as-documented/275737 "2021-06-13T16:45:55Z")
Hello, As documented in your documentation here, the documentation shows using dot-notation to traverse a nested field (user -\> id). However, when using the query dsl this way, no results are returned. Instead, you mus… --- ## [How can ser grok if log have different content from the same equipment?](https://discuss.elastic.co/t/how-can-ser-grok-if-log-have-different-content-from-the-same-equipment/275541)
**Author:** [@111418](https://discuss.elastic.co/u/111418)\ **Replies:** 5\ **Last updated:** [June 13, 2021, 3:54pm UTC](https://discuss.elastic.co/t/how-can-ser-grok-if-log-have-different-content-from-the-same-equipment/275541 "2021-06-13T15:54:59Z")
Jun 2 16:45:49 tp-id01.test.corp zorp/scb\_ssh\[1379\]: core.alerting(3): (svc/wwVRLvYoUMToHT2Xz9vEbj/ssh\_alert:11/ssh): Audit event was recognized; rule='PatternMatcherRule', type='adp.event.command', pattern='user', acti… --- ## [Find contact with aggs terms and date range and use the found contacts for another aggs with date\_histogram](https://discuss.elastic.co/t/find-contact-with-aggs-terms-and-date-range-and-use-the-found-contacts-for-another-aggs-with-date-histogram/275762)
**Author:** [@gregoire\_Tarres](https://discuss.elastic.co/u/gregoire_Tarres)\ **Replies:** 0\ **Last updated:** [June 13, 2021, 12:25pm UTC](https://discuss.elastic.co/t/find-contact-with-aggs-terms-and-date-range-and-use-the-found-contacts-for-another-aggs-with-date-histogram/275762 "2021-06-13T12:25:13Z")
Hi, i'm new with Elaticsearch and I need some help for a search query.... Thanks in advance ! I've an index with docs between 2021-02-01 and 2021-04-01. I make a search query like this to retrieve phone numbers that app… --- ## [Detection and Response for HAFNIUM Activity](https://discuss.elastic.co/t/detection-and-response-for-hafnium-activity/266289)
**Author:** [@devonkerr](https://discuss.elastic.co/u/devonkerr)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 10:47pm UTC](https://discuss.elastic.co/t/detection-and-response-for-hafnium-activity/266289 "2021-03-10T22:47:14Z")
Detection and Response for HAFNIUM Activity Executive summary On March 2, 2021, Microsoft released a security update for on-premises Exchange servers to address vulnerabilities being exploited. Security vendors are seein… --- ## [Logs hit value is different](https://discuss.elastic.co/t/logs-hit-value-is-different/275675)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 7\ **Last updated:** [June 13, 2021, 10:40am UTC](https://discuss.elastic.co/t/logs-hit-value-is-different/275675 "2021-06-13T10:40:30Z")
I have two elasticsearch cluster one elk cluster version is 7.6 and other elk cluster version is 7.11 The former elasticsearch cluster is simple it filebeat send the logs to logstash and logstash to elasticsearch, the … --- ## [Logstash grok nginx log](https://discuss.elastic.co/t/logstash-grok-nginx-log/275583)
**Author:** [@rdnaz](https://discuss.elastic.co/u/rdnaz)\ **Replies:** 2\ **Last updated:** [June 13, 2021, 8:19am UTC](https://discuss.elastic.co/t/logstash-grok-nginx-log/275583 "2021-06-13T08:19:36Z")
Hi dears, I want to grok nginx access log but i cant get the seperated field of the message , i tried to use overwrite and doesn't make the solution. my Log format is below : \ Jun 10, 2021 @ 11:07:43.648 host:lo… --- ## [Need to load balance Logstash](https://discuss.elastic.co/t/need-to-load-balance-logstash/275619)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 8\ **Last updated:** [June 13, 2021, 6:45am UTC](https://discuss.elastic.co/t/need-to-load-balance-logstash/275619 "2021-06-13T06:45:58Z")
I'm currently running a single logstash and interested in creating several for resilience in case one goes down, and for improving performance. I'm ingesting data currently with the http input plugin. I'm thinking about… --- ## [Received fatal alert: handshake\_failure. How to Solve it?](https://discuss.elastic.co/t/received-fatal-alert-handshake-failure-how-to-solve-it/275749)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 0\ **Last updated:** [June 13, 2021, 5:18am UTC](https://discuss.elastic.co/t/received-fatal-alert-handshake-failure-how-to-solve-it/275749 "2021-06-13T05:18:12Z")
Hi All While running LS, i am getting this below error. My HTTP endpoint uses TLS 1.3 It works perfectly for HTTP endpoint with TLS V1.2 looks like LS package does not support for open jruby-openssl In the Gem.lock f… --- ## [Set up - load the Kibana templates](https://discuss.elastic.co/t/set-up-load-the-kibana-templates/275731)
**Author:** [@sk88](https://discuss.elastic.co/u/sk88)\ **Replies:** 3\ **Last updated:** [June 13, 2021, 12:48am UTC](https://discuss.elastic.co/t/set-up-load-the-kibana-templates/275731 "2021-06-13T00:48:21Z")
i have the fllowing error root@stathis:/home/stathis# /usr/share/filebeat/bin/filebeat setup Exiting: error loading config file: stat filebeat.yml: no such file or directory filebeat test config: Config OK also file… --- ## [EQL library where](https://discuss.elastic.co/t/eql-library-where/275524)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [June 12, 2021, 7:57pm UTC](https://discuss.elastic.co/t/eql-library-where/275524 "2021-06-12T19:57:22Z")
Hello, Just noticed an EQL query in Suspicious RDP ActiveX Client Loaded | Elastic Security Solution \[7.13\] | Elastic where a "library where" clause is used. What kind of events contain library? I always though the firs… --- ## [Node memory](https://discuss.elastic.co/t/node-memory/275634)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 2\ **Last updated:** [June 12, 2021, 4:50pm UTC](https://discuss.elastic.co/t/node-memory/275634 "2021-06-12T16:50:14Z")
Hi All, Currently on our nodes we have 64GB RAM, with 30GB allocated to the heap, and the other 34GB for OS. I understand that I shouldn't allocate more then 30GB to the heap, but will ES/OS benefit from 128GB or 256GB… --- ## [Need Suggestion on match\_phrase\_prefix and field priority result top to bottom order](https://discuss.elastic.co/t/need-suggestion-on-match-phrase-prefix-and-field-priority-result-top-to-bottom-order/275728)
**Author:** [@bikashelastic](https://discuss.elastic.co/u/bikashelastic)\ **Replies:** 0\ **Last updated:** [June 12, 2021, 9:47am UTC](https://discuss.elastic.co/t/need-suggestion-on-match-phrase-prefix-and-field-priority-result-top-to-bottom-order/275728 "2021-06-12T09:47:48Z")
Hy Team, I have implemented the bool query "match\_phrase\_prefix" with "slop" in my search functionality and the query is giving me the result as expected. but the order of the result is not giving the field priority. W… --- ## [Rule for detecting email domain](https://discuss.elastic.co/t/rule-for-detecting-email-domain/273802)
**Author:** [@realtech2338](https://discuss.elastic.co/u/realtech2338)\ **Replies:** 1\ **Last updated:** [June 12, 2021, 4:07am UTC](https://discuss.elastic.co/t/rule-for-detecting-email-domain/273802 "2021-06-12T04:07:16Z")
I would like to create a rule to detect emails coming from specific domain for Strat malware email delivery. Please guide me how to do that: --- ## [Join the result of two different queries indices](https://discuss.elastic.co/t/join-the-result-of-two-different-queries-indices/275470)
**Author:** [@Walter\_Jimenez](https://discuss.elastic.co/u/Walter_Jimenez)\ **Replies:** 3\ **Last updated:** [June 11, 2021, 9:53pm UTC](https://discuss.elastic.co/t/join-the-result-of-two-different-queries-indices/275470 "2021-06-11T21:53:38Z")
Good morning, excuse my English. I am new to elastic and I am doing some tests with the queries, I have the following case: I have two indeces, metrics and a custom one of my own, I was able to make each one a separate … --- ## [Limiting dynamic properties/fields indexed](https://discuss.elastic.co/t/limiting-dynamic-properties-fields-indexed/275585)
**Author:** [@ronchalant](https://discuss.elastic.co/u/ronchalant)\ **Replies:** 3\ **Last updated:** [June 11, 2021, 9:48pm UTC](https://discuss.elastic.co/t/limiting-dynamic-properties-fields-indexed/275585 "2021-06-11T21:48:47Z")
We're migrating to ES7, and for one of our indexes which stores email data we are hitting the "Limit of total fields \[1000\]" error. The reason for this is we're indexing all headers, and for some emails the number of he… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=915) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=917)