# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1063 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1064 --- ## [How to Know how many Metric beat agents are up and running](https://discuss.elastic.co/t/how-to-know-how-many-metric-beat-agents-are-up-and-running/261890)
**Author:** [@sai07](https://discuss.elastic.co/u/sai07)\ **Replies:** 17\ **Last updated:** [February 2, 2021, 3:26pm UTC](https://discuss.elastic.co/t/how-to-know-how-many-metric-beat-agents-are-up-and-running/261890 "2021-02-02T15:26:23Z")
We have configured 100 Metricbeat agents in 100 VM's and we are getting all the logs from that VM's as well. But we need to monitor the Metricbeat agent as well. If any Metricbeat agent is not working we need to identi… --- ## [Converting date to TIMESTAMP\_ISO8601 format](https://discuss.elastic.co/t/converting-date-to-timestamp-iso8601-format/262952)
**Author:** [@gloupe](https://discuss.elastic.co/u/gloupe)\ **Replies:** 1\ **Last updated:** [February 2, 2021, 3:24pm UTC](https://discuss.elastic.co/t/converting-date-to-timestamp-iso8601-format/262952 "2021-02-02T15:24:56Z")
Hi, I'm actually receiving logs with timestamp to this format : Mon Feb 1 13:29:48 2021 From Telegraf who's parsing the log with this Grok pattern : SOURCELOG %{DAY} %{MONTH} (?: %{POSINT:MONTHDAY}) %{TIME} %{YEAR} … --- ## [Query DSL, Boolean query. Multiple conditions for must\_not](https://discuss.elastic.co/t/query-dsl-boolean-query-multiple-conditions-for-must-not/263004)
**Author:** [@gneves](https://discuss.elastic.co/u/gneves)\ **Replies:** 0\ **Last updated:** [February 2, 2021, 3:10pm UTC](https://discuss.elastic.co/t/query-dsl-boolean-query-multiple-conditions-for-must-not/263004 "2021-02-02T15:10:15Z")
Hello guys, hope you are doing well and healthy. Im having a little trouble using DSL querys. My objective is this: I want to trigger an event that, the action must be "UserLoggedIn", the country must NOT be Portuga… --- ## [Weighted bars in count barchart](https://discuss.elastic.co/t/weighted-bars-in-count-barchart/262342)
**Author:** [@Bram\_Tervoort](https://discuss.elastic.co/u/Bram_Tervoort)\ **Replies:** 2\ **Last updated:** [February 2, 2021, 2:57pm UTC](https://discuss.elastic.co/t/weighted-bars-in-count-barchart/262342 "2021-02-02T14:57:56Z")
I would like to make a barchart in kibana displaying the counts of bucket. But i would like the bar of 1 XL to be as large a 5 times a single S. I already counted all the documents in my index split them on a weekly and … --- ## [Apm server secret\_token](https://discuss.elastic.co/t/apm-server-secret-token/262841)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 2\ **Last updated:** [February 2, 2021, 2:55pm UTC](https://discuss.elastic.co/t/apm-server-secret-token/262841 "2021-02-02T14:55:52Z")
Hi Team, i would like to change secret\_token of apm server config, i am using the following config, but the token is not getting reflected secureSettings: - secretName: test-apm-token config: apm-server: … --- ## [ElasticSearch - Latest record per day per ID from elastic](https://discuss.elastic.co/t/elasticsearch-latest-record-per-day-per-id-from-elastic/262993)
**Author:** [@prashantmalik](https://discuss.elastic.co/u/prashantmalik)\ **Replies:** 1\ **Last updated:** [February 2, 2021, 2:03pm UTC](https://discuss.elastic.co/t/elasticsearch-latest-record-per-day-per-id-from-elastic/262993 "2021-02-02T14:03:39Z")
I have index in Elsaticsearch of records of form: Record{ Timestamp; Id; . .} It has multiple records for ID per day. I want to fetch latest record per Id per day. Can you please help me with such query? Exam… --- ## [Reporting Error: Access for Kibana -\>Share -\> CSV Report -\> Generate CSV](https://discuss.elastic.co/t/reporting-error-access-for-kibana-share-csv-report-generate-csv/262658)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 4\ **Last updated:** [February 2, 2021, 1:48pm UTC](https://discuss.elastic.co/t/reporting-error-access-for-kibana-share-csv-report-generate-csv/262658 "2021-02-02T13:48:12Z")
Hi I have a user with the guest\_role which can "read" access on an index, I have also assigned a Kibana's reporting\_user role, but when the user tries to Share the content of and index using Share -\> CSV Report -\> Gen… --- ## [Elasticsearch vs Solr vs Vespa](https://discuss.elastic.co/t/elasticsearch-vs-solr-vs-vespa/262980)
**Author:** [@Charlie\_Hull](https://discuss.elastic.co/u/Charlie_Hull)\ **Replies:** 0\ **Last updated:** [February 2, 2021, 1:12pm UTC](https://discuss.elastic.co/t/elasticsearch-vs-solr-vs-vespa/262980 "2021-02-02T13:12:04Z")
We had a Meetup recently featuring Anshum Gupta, VP of Apache Lucene, Josh Devins of Elastic and Jo Kristian Bergum from the Vespa team - what did we learn? https://opensourceconnections.com/blog/2021/02/02/solr-vs-elast… --- ## [Percentiles plot in vega-lite](https://discuss.elastic.co/t/percentiles-plot-in-vega-lite/262942)
**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\ **Replies:** 2\ **Last updated:** [February 2, 2021, 12:54pm UTC](https://discuss.elastic.co/t/percentiles-plot-in-vega-lite/262942 "2021-02-02T12:54:55Z")
Hi , I want a visualization(bar plot) in kibana through vega-lite to aggregate the data on 90th percentile and 10th percentile and groupby the data on multiple fields, on x-axis , I want to display group1 , group2 etc.… --- ## [Best Practises to handle an index of of 1.2TiB](https://discuss.elastic.co/t/best-practises-to-handle-an-index-of-of-1-2tib/262839)
**Author:** [@carmine.fabrizio](https://discuss.elastic.co/u/carmine.fabrizio)\ **Replies:** 6\ **Last updated:** [February 2, 2021, 12:09pm UTC](https://discuss.elastic.co/t/best-practises-to-handle-an-index-of-of-1-2tib/262839 "2021-02-02T12:09:58Z")
Hi there, I have an index of 1.2TiB, split into 9 shards of 200GiB each, also I do have a lifecycle policy that will roll the shards in HOT/WARM/COLD phases. Are there any best practices that I can introduce in order t… --- ## [Visualize Group by result](https://discuss.elastic.co/t/visualize-group-by-result/262793)
**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\ **Replies:** 4\ **Last updated:** [February 2, 2021, 11:00am UTC](https://discuss.elastic.co/t/visualize-group-by-result/262793 "2021-02-02T11:00:52Z")
Hi, I am working on a large dataset with 20000 rows and 40 columns, I want to group by my data based on 10 categorical columns, then I want to create a histogram and percentiles graph to make a comparison between the to… --- ## [How to show mulitple servers logs in kibana separatly from each other](https://discuss.elastic.co/t/how-to-show-mulitple-servers-logs-in-kibana-separatly-from-each-other/262948)
**Author:** [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\ **Replies:** 2\ **Last updated:** [February 2, 2021, 10:52am UTC](https://discuss.elastic.co/t/how-to-show-mulitple-servers-logs-in-kibana-separatly-from-each-other/262948 "2021-02-02T10:52:24Z")
I have installed ELK on my Ubuntu server and install filebeat on remote server-A and server-B. I have configured Log-stash to receive data from filebeat and forward them to Elasticsearch. Both servers logs are showing in… --- ## [Minus timezone on date histogram aggregation shifts back buckets one day](https://discuss.elastic.co/t/minus-timezone-on-date-histogram-aggregation-shifts-back-buckets-one-day/262959)
**Author:** [@anas-hossam](https://discuss.elastic.co/u/anas-hossam)\ **Replies:** 0\ **Last updated:** [February 2, 2021, 10:28am UTC](https://discuss.elastic.co/t/minus-timezone-on-date-histogram-aggregation-shifts-back-buckets-one-day/262959 "2021-02-02T10:28:03Z")
this is my body request when search in elasticsearch version 1.5 { "body": { "size": 0, "query": { "filtered": { "filter": { "bool": { … --- ## [Add static line for Horizontal bar chart](https://discuss.elastic.co/t/add-static-line-for-horizontal-bar-chart/262338)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 3\ **Last updated:** [February 2, 2021, 10:18am UTC](https://discuss.elastic.co/t/add-static-line-for-horizontal-bar-chart/262338 "2021-02-02T10:18:03Z")
Kibana version 6.7 We are trying to create a dashboard with a horizontal bar based on a field named duration of type number. We want to add a static line to show the Threshold of sorts for the entire series. We followe… --- ## [Replicas allocation failed](https://discuss.elastic.co/t/replicas-allocation-failed/261768)
**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\ **Replies:** 8\ **Last updated:** [February 2, 2021, 10:07am UTC](https://discuss.elastic.co/t/replicas-allocation-failed/261768 "2021-02-02T10:07:48Z")
Hi, After adjusting "index lifecycle policies" several times for this index, some replicas can't be allocated: 1- Is there a way to reallocate those replicas? 2- Is it possible to force all indices to have the same … --- ## [ES node out of memory: Java heap space](https://discuss.elastic.co/t/es-node-out-of-memory-java-heap-space/262787)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 15\ **Last updated:** [February 2, 2021, 9:56am UTC](https://discuss.elastic.co/t/es-node-out-of-memory-java-heap-space/262787 "2021-02-02T09:56:51Z")
I often find out of memory: Java heap space in some nodes in our ES cluster. I have already allocated half of the total memory of each node to heap size but I still get this error. And except heap size issue, I never fin… --- ## [OFFLINE Labs - Issue on loading filebeat data for log-servers](https://discuss.elastic.co/t/offline-labs-issue-on-loading-filebeat-data-for-log-servers/262863)
**Author:** [@Francois\_Protopapa](https://discuss.elastic.co/u/Francois_Protopapa)\ **Replies:** 5\ **Last updated:** [February 2, 2021, 9:39am UTC](https://discuss.elastic.co/t/offline-labs-issue-on-loading-filebeat-data-for-log-servers/262863 "2021-02-02T09:39:55Z")
Dear Team, I started to setup m offline LABS for the EE 1 and all went well, but for some reason, I am not able to import the log files collected in the ZIP file. Here what I did: Followed the step by steps: Running… --- ## [Parser for LDAP logs - ECS format](https://discuss.elastic.co/t/parser-for-ldap-logs-ecs-format/262115)
**Author:** [@Logsman](https://discuss.elastic.co/u/Logsman)\ **Replies:** 1\ **Last updated:** [February 2, 2021, 9:22am UTC](https://discuss.elastic.co/t/parser-for-ldap-logs-ecs-format/262115 "2021-02-02T09:22:43Z")
Hi there ! I'm currently collecting LDAP logs (RHDS) with filebeat. As you know, there isn't any module for these type of logs. However, I would like to be able to create alert on Elastic security based on these logs. … --- ## [Using elasticsearch with SELinux](https://discuss.elastic.co/t/using-elasticsearch-with-selinux/262949)
**Author:** [@redplastic](https://discuss.elastic.co/u/redplastic)\ **Replies:** 0\ **Last updated:** [February 2, 2021, 9:14am UTC](https://discuss.elastic.co/t/using-elasticsearch-with-selinux/262949 "2021-02-02T09:14:26Z")
I'm attempting to use elasticsearch on a Centos machine with SELinux on enforced mode. However when running elasticsearch, it results in the java and controller service running as uncontrolled services. As having uncont… --- ## [Is the indices dir corresponded to indices I have in cluster?](https://discuss.elastic.co/t/is-the-indices-dir-corresponded-to-indices-i-have-in-cluster/262924)
**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\ **Replies:** 3\ **Last updated:** [February 2, 2021, 8:36am UTC](https://discuss.elastic.co/t/is-the-indices-dir-corresponded-to-indices-i-have-in-cluster/262924 "2021-02-02T08:36:26Z")
Hi experts, When I'm exploring the data dir of elasticsearch node, I found that there are some dirs in 'data/nodes/0/indices', say 'foo' and 'bar'. Are these dirs right my actual indices in cluster(foo and bar) correspo… --- ## [How to create logstash for different network device over same udp port](https://discuss.elastic.co/t/how-to-create-logstash-for-different-network-device-over-same-udp-port/262879)
**Author:** [@sajiby3k](https://discuss.elastic.co/u/sajiby3k)\ **Replies:** 3\ **Last updated:** [February 2, 2021, 8:29am UTC](https://discuss.elastic.co/t/how-to-create-logstash-for-different-network-device-over-same-udp-port/262879 "2021-02-02T08:29:54Z")
Hi, I am very new to elk stack. Trying to use logstash for Cisco routers and Fortigate firewalls. Both of these device types will use default udp port 514 to logstash to send log files. Most basic configuration looks… --- ## [Is there a tool to rebalance shards across multiple path.data paths?](https://discuss.elastic.co/t/is-there-a-tool-to-rebalance-shards-across-multiple-path-data-paths/262853)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 4\ **Last updated:** [February 2, 2021, 8:24am UTC](https://discuss.elastic.co/t/is-there-a-tool-to-rebalance-shards-across-multiple-path-data-paths/262853 "2021-02-02T08:24:09Z")
I have 5 data nodes in my cluster, all of them split the data across two disks. There should be plenty of space for my data, but because elasticsearch allocates shards to disks based on shard count rather than size (and … --- ## [Unable to install logstash-devutils locally for offline-packaging](https://discuss.elastic.co/t/unable-to-install-logstash-devutils-locally-for-offline-packaging/262936)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 0\ **Last updated:** [February 2, 2021, 7:36am UTC](https://discuss.elastic.co/t/unable-to-install-logstash-devutils-locally-for-offline-packaging/262936 "2021-02-02T07:36:45Z")
I am trying build a dev-env for my work-stations where i do not have access to the internet. I was hoping to install basic gem offline and transport it over to my work-station however while trying the below command: gem… --- ## [Performance issues on shared Kubernetes cluster](https://discuss.elastic.co/t/performance-issues-on-shared-kubernetes-cluster/262846)
**Author:** [@Konrad\_Moskal](https://discuss.elastic.co/u/Konrad_Moskal)\ **Replies:** 2\ **Last updated:** [February 2, 2021, 6:57am UTC](https://discuss.elastic.co/t/performance-issues-on-shared-kubernetes-cluster/262846 "2021-02-02T06:57:23Z")
Hey! I have an issue with performance on a shared K8s cluster. When there is no load on the cluster, performance is great but for reason when activity increases my ES performance declines a lot. I have 20 indices, ~ 1GB… --- ## [How to append index level information to documents when returning search results](https://discuss.elastic.co/t/how-to-append-index-level-information-to-documents-when-returning-search-results/262923)
**Author:** [@ali\_wetrill](https://discuss.elastic.co/u/ali_wetrill)\ **Replies:** 1\ **Last updated:** [February 2, 2021, 6:12am UTC](https://discuss.elastic.co/t/how-to-append-index-level-information-to-documents-when-returning-search-results/262923 "2021-02-02T06:12:09Z")
Hi! Relatively simple question -- I want to append index-level information onto each document when returning those documents. I do not want to copy that information into each document (makes it harder to adjust that info… --- ## [Index Life cycle Policy indexes not roll overing](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102)
**Author:** [@Anu6006](https://discuss.elastic.co/u/Anu6006)\ **Replies:** 12\ **Last updated:** [February 2, 2021, 5:22am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102 "2021-02-02T05:22:31Z")
Hi, I'm facing some problem in Index life cycle policy in which indexes are not roll overing and delete phase is not working. Is there is a best practice to do so? --- ## [CPU Utilization not showing correct value \[ In heatmaps \]](https://discuss.elastic.co/t/cpu-utilization-not-showing-correct-value-in-heatmaps/262638)
**Author:** [@Sujithra\_S](https://discuss.elastic.co/u/Sujithra_S)\ **Replies:** 2\ **Last updated:** [February 2, 2021, 5:13am UTC](https://discuss.elastic.co/t/cpu-utilization-not-showing-correct-value-in-heatmaps/262638 "2021-02-02T05:13:06Z")
CPU Utilization is showing the wrong value in Heatmaps... In Azure portal CPU Utilization is 20% but in Heatmaps Visualization it is showing 90% and how to do Bucket script in Heatmaps. Please help me to sort out thi… --- ## [Can I delete the source index that's been split into a new one?](https://discuss.elastic.co/t/can-i-delete-the-source-index-thats-been-split-into-a-new-one/262740)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 2\ **Last updated:** [February 2, 2021, 4:35am UTC](https://discuss.elastic.co/t/can-i-delete-the-source-index-thats-been-split-into-a-new-one/262740 "2021-02-02T04:35:27Z")
Hello everyone! I have an index which has been split into a target index with more shards. Can I delete the source index now? Will there be any problems? I'd appreciate if anyone could explain this to me. Thanks in advan… --- ## [QueryShardException: No mapping found for \[sortOrder\] in order to sort on](https://discuss.elastic.co/t/queryshardexception-no-mapping-found-for-sortorder-in-order-to-sort-on/262927)
**Author:** [@Haunh](https://discuss.elastic.co/u/Haunh)\ **Replies:** 2\ **Last updated:** [February 2, 2021, 3:56am UTC](https://discuss.elastic.co/t/queryshardexception-no-mapping-found-for-sortorder-in-order-to-sort-on/262927 "2021-02-02T03:56:18Z")
Hi Everyone! I connect Fess to external Elastic then have error after created index of fess : QueryShardException: No mapping found for \[sortOrder\] in order to sort on Below is version of Fess & Elastic Elastic : { … --- ## [How to stop logstash schedule? and Keep the schedule function? (jdbc input)](https://discuss.elastic.co/t/how-to-stop-logstash-schedule-and-keep-the-schedule-function-jdbc-input/262919)
**Author:** [@plumy0902](https://discuss.elastic.co/u/plumy0902)\ **Replies:** 1\ **Last updated:** [February 2, 2021, 3:48am UTC](https://discuss.elastic.co/t/how-to-stop-logstash-schedule-and-keep-the-schedule-function-jdbc-input/262919 "2021-02-02T03:48:40Z")
I confirmed that the schedule is working normally. (I use the jdbc input) In the test environment, I stopped the job by using ctrl+c. How do I stop the schedule when I turn off the window that started logstash? After … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1062) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1064)