# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1068 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1069 --- ## [How to get response header with cookie from POST request to Kibana REST API /internal/security/login](https://discuss.elastic.co/t/how-to-get-response-header-with-cookie-from-post-request-to-kibana-rest-api-internal-security-login/262530)
**Author:** [@gaetano](https://discuss.elastic.co/u/gaetano)\ **Replies:** 1\ **Last updated:** [January 29, 2021, 7:12am UTC](https://discuss.elastic.co/t/how-to-get-response-header-with-cookie-from-post-request-to-kibana-rest-api-internal-security-login/262530 "2021-01-29T07:12:27Z")
My goal is to skip login page in Kibana. With an HTTP request, I would to login in Kibana using the REST API /internal/security/login. The request is come from my Angular application and to bypass CORS and multi-origi… --- ## [Multiple indices in kibana dashboard](https://discuss.elastic.co/t/multiple-indices-in-kibana-dashboard/261751)
**Author:** [@Srikanth\_Kesireddy](https://discuss.elastic.co/u/Srikanth_Kesireddy)\ **Replies:** 3\ **Last updated:** [January 29, 2021, 5:49am UTC](https://discuss.elastic.co/t/multiple-indices-in-kibana-dashboard/261751 "2021-01-29T05:49:56Z")
I have 10 target servers installed Filebeat on all machines... Logstash , ElasticSearch , Kibana these 3 are installed on main server. How can I create 10 indices for 10 target machines --- ## [How to escape sprintf (to compare against an uninterpolated value)](https://discuss.elastic.co/t/how-to-escape-sprintf-to-compare-against-an-uninterpolated-value/262581)
**Author:** [@cknz](https://discuss.elastic.co/u/cknz)\ **Replies:** 2\ **Last updated:** [January 29, 2021, 3:59am UTC](https://discuss.elastic.co/t/how-to-escape-sprintf-to-compare-against-an-uninterpolated-value/262581 "2021-01-29T03:59:43Z")
Hi all, I'm on Elastic 7.10.2, and I noticed a problem with my processing. Some incoming data has tried to set a field using a sprintf string, but the sprintf expression did not result in a replacement, so I'm left with … --- ## [Machine learning, No node found to open the job because job memory requirements are stale](https://discuss.elastic.co/t/machine-learning-no-node-found-to-open-the-job-because-job-memory-requirements-are-stale/262582)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [January 29, 2021, 2:33am UTC](https://discuss.elastic.co/t/machine-learning-no-node-found-to-open-the-job-because-job-memory-requirements-are-stale/262582 "2021-01-29T02:33:16Z")
Hi, Im getting this warning from ML jobs after restart the nodes on docker I run this commands in devs tools before restart the nodes PUT \_cluster/settings { "persistent": { "cluster.routing.allocation.enable":… --- ## [High load after upgrading ElasticSearch/Kibana/Logstash from 7.5.1 to 7.9.3](https://discuss.elastic.co/t/high-load-after-upgrading-elasticsearch-kibana-logstash-from-7-5-1-to-7-9-3/261307)
**Author:** [@stideswell](https://discuss.elastic.co/u/stideswell)\ **Replies:** 8\ **Last updated:** [January 29, 2021, 1:14am UTC](https://discuss.elastic.co/t/high-load-after-upgrading-elasticsearch-kibana-logstash-from-7-5-1-to-7-9-3/261307 "2021-01-29T01:14:43Z")
Hello I've upgraded an ElasticSearch server running on Ubuntu 18 from version 7.5.1 to 7.9.3. I use ES, Kibana and Logstash on this server. The load was immediately much higher after the upgrade and this has persisted. … --- ## [Elasticsearch Upgrade from 2.4 to 6.8](https://discuss.elastic.co/t/elasticsearch-upgrade-from-2-4-to-6-8/262580)
**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\ **Replies:** 6\ **Last updated:** [January 29, 2021, 1:07am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-2-4-to-6-8/262580 "2021-01-29T01:07:37Z")
We are planning to upgrade elasticsearch from version 2.4 to 6.8. The current version of elasticsearch was an upgrade from 1.7 (side by side upgrade. Indices were restored to the new cluster). Since the indices are creat… --- ## [Elasticsearch query returning score of 1.0 for all documents?](https://discuss.elastic.co/t/elasticsearch-query-returning-score-of-1-0-for-all-documents/262567)
**Author:** [@sabetai](https://discuss.elastic.co/u/sabetai)\ **Replies:** 3\ **Last updated:** [January 29, 2021, 12:32am UTC](https://discuss.elastic.co/t/elasticsearch-query-returning-score-of-1-0-for-all-documents/262567 "2021-01-29T00:32:54Z")
For the following query GET /test/\_search { "query": "fire" } I get hits with no match all showing a score of 1.0. Any variations of queries I try gives the same results. What's going on here? Results: { "took" … --- ## [Detection Rules Fail Index issues](https://discuss.elastic.co/t/detection-rules-fail-index-issues/261689)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 8\ **Last updated:** [January 29, 2021, 12:24am UTC](https://discuss.elastic.co/t/detection-rules-fail-index-issues/261689 "2021-01-29T00:24:40Z")
So the cluster has been running for about 2 months no issues or changes. Recently within the past 5 days: Bulk Indexing of signals failed: reason: "No mapping found for \[@timestamp\] in order to sort on" type: "query\_sha… --- ## [Unable to Access Instructions, lab or Kibana after pausing strigo](https://discuss.elastic.co/t/unable-to-access-instructions-lab-or-kibana-after-pausing-strigo/262441)
**Author:** [@MarcelVarallo](https://discuss.elastic.co/u/MarcelVarallo)\ **Replies:** 2\ **Last updated:** [January 29, 2021, 12:23am UTC](https://discuss.elastic.co/t/unable-to-access-instructions-lab-or-kibana-after-pausing-strigo/262441 "2021-01-29T00:23:38Z")
Hi there, So after Strigo finished rolling out my lab environment, the first thing I did was hit the pause button to save time and now I can't access the instructions, kibana, or lab at all. --- ## [Filebeat Error: connect: connection refused](https://discuss.elastic.co/t/filebeat-error-connect-connection-refused/260866)
**Author:** [@haithem899](https://discuss.elastic.co/u/haithem899)\ **Replies:** 4\ **Last updated:** [January 28, 2021, 10:48pm UTC](https://discuss.elastic.co/t/filebeat-error-connect-connection-refused/260866 "2021-01-28T22:48:21Z")
Hello, i've setup ELK stack with three nodes ( kibana-elasticsearch-logstash) separating however i can't recieve logs and with checking filebeat log i see this error: "connect: connection refused". Even i increased clie… --- ## [Multiple nodes in a single Ubuntu host with Debian package based install](https://discuss.elastic.co/t/multiple-nodes-in-a-single-ubuntu-host-with-debian-package-based-install/262396)
**Author:** [@Citeyes](https://discuss.elastic.co/u/Citeyes)\ **Replies:** 5\ **Last updated:** [January 28, 2021, 10:16pm UTC](https://discuss.elastic.co/t/multiple-nodes-in-a-single-ubuntu-host-with-debian-package-based-install/262396 "2021-01-28T22:16:57Z")
Hello community, I have installed elastic 7 and Kibana in a ubuntu host for dev purpose. I need to run multiple nodes under this unique host. However I installed elastic using apt install (Debian package) method ending … --- ## [Error mapping with an object](https://discuss.elastic.co/t/error-mapping-with-an-object/262390)
**Author:** [@Katherinne\_Quintero](https://discuss.elastic.co/u/Katherinne_Quintero)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 10:00pm UTC](https://discuss.elastic.co/t/error-mapping-with-an-object/262390 "2021-01-28T22:00:41Z")
Hello, I am trying to save a document with the following structure but it gives me an error, I understand that it is an error in the map since validationForm.content.value is for some cases as an object and in other case… --- ## [How do I make a Kibana histogram that plots the distribution of the average of key A for each distinct value of key B?](https://discuss.elastic.co/t/how-do-i-make-a-kibana-histogram-that-plots-the-distribution-of-the-average-of-key-a-for-each-distinct-value-of-key-b/262541)
**Author:** [@eric4](https://discuss.elastic.co/u/eric4)\ **Replies:** 5\ **Last updated:** [January 28, 2021, 9:36pm UTC](https://discuss.elastic.co/t/how-do-i-make-a-kibana-histogram-that-plots-the-distribution-of-the-average-of-key-a-for-each-distinct-value-of-key-b/262541 "2021-01-28T21:36:32Z")
This applies to any Kibana graph but the one I am interested in is a Histogram. My data is structured like this: \[ { "user\_id" : 3, "score" : 10 }, { "user\_id" : 1, "score" : 20 }, { "user\_id" : 2, "score" : 60 }… --- ## [Watcher Actions Greyed Out](https://discuss.elastic.co/t/watcher-actions-greyed-out/261956)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 9:10pm UTC](https://discuss.elastic.co/t/watcher-actions-greyed-out/261956 "2021-01-28T21:10:13Z")
Hi, I am trying to edit email field in the Watcher actions as super user but the fields are greyed out and I am wondering why and how I may fix that? Thank you. --- ## [Kibana Dashboard Links for a PDF](https://discuss.elastic.co/t/kibana-dashboard-links-for-a-pdf/262543)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 9:07pm UTC](https://discuss.elastic.co/t/kibana-dashboard-links-for-a-pdf/262543 "2021-01-28T21:07:12Z")
Hi, I've created a dashboard in kibana (7.6.2) but wanted to edit the dashboard to include links to help PDFs that expalin how to use the dashboard. Question is... Is there a way to get the Dashboard links to bring u… --- ## [How to keep 2 clusters in sync](https://discuss.elastic.co/t/how-to-keep-2-clusters-in-sync/262084)
**Author:** [@mouli\_v](https://discuss.elastic.co/u/mouli_v)\ **Replies:** 5\ **Last updated:** [January 28, 2021, 8:38pm UTC](https://discuss.elastic.co/t/how-to-keep-2-clusters-in-sync/262084 "2021-01-28T20:38:06Z")
We are in process of creating an ES cluster in GCP and our old cluster in AWS. I have used es reindex api https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-reindex.html to copy data from old aws clust… --- ## [Kibana](https://discuss.elastic.co/t/kibana/261795)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 5\ **Last updated:** [January 28, 2021, 7:32pm UTC](https://discuss.elastic.co/t/kibana/261795 "2021-01-28T19:32:34Z")
hi guys. the Linzensen can be found in kibana under LicensingState. But i only want to issue unlicensed host. how can i do that ? thank you. --- ## [Kibana returns no data. Error: 70 of 2425 shards failed](https://discuss.elastic.co/t/kibana-returns-no-data-error-70-of-2425-shards-failed/262514)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 6:40pm UTC](https://discuss.elastic.co/t/kibana-returns-no-data-error-70-of-2425-shards-failed/262514 "2021-01-28T18:40:08Z")
I encounter an error, when I trying to show messages from my index pattern. After short time, I am receiving error: 70 of 2425 shards failed This message cant be enlarged, I can't click on it so basically, I do not kno… --- ## [How to extract string from JSON string using painless script](https://discuss.elastic.co/t/how-to-extract-string-from-json-string-using-painless-script/262513)
**Author:** [@Aniket\_Salvi](https://discuss.elastic.co/u/Aniket_Salvi)\ **Replies:** 0\ **Last updated:** [January 28, 2021, 2:20pm UTC](https://discuss.elastic.co/t/how-to-extract-string-from-json-string-using-painless-script/262513 "2021-01-28T14:20:35Z")
Hi team, script: if(doc\['charstream.keyword'\].size() == 0){ return "null" } else{ String\[\] parts = /\\|/.split(doc\['charstream.keyword'\].value); return parts\[4\]; } Message string: "charstream": "Conte… --- ## [Logstash, Date plugin not working as expected](https://discuss.elastic.co/t/logstash-date-plugin-not-working-as-expected/262525)
**Author:** [@sguerrero](https://discuss.elastic.co/u/sguerrero)\ **Replies:** 4\ **Last updated:** [January 28, 2021, 6:14pm UTC](https://discuss.elastic.co/t/logstash-date-plugin-not-working-as-expected/262525 "2021-01-28T18:14:38Z")
Logstash Version: 7.10.1 OS: Debian 10 Buster Architecture: x86-64 Kernel: Linux 4.19.0-11-amd64 I'm trying to parse this date: 20210128 94501065 The pattern is: date { match =\> \["timestamp", "yyyyM… --- ## [How calculed Uptime in Kibana](https://discuss.elastic.co/t/how-calculed-uptime-in-kibana/262486)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 5:49pm UTC](https://discuss.elastic.co/t/how-calculed-uptime-in-kibana/262486 "2021-01-28T17:49:12Z")
Hallo everyone. I need heep in kibana. I want to write one Scripted field that converts Sessionlogontime(string) and gives me the result per day. i would be very proud if someone can offer me a solution. It is calculated… --- ## [Logstash grok](https://discuss.elastic.co/t/logstash-grok/262498)
**Author:** [@igormarqs](https://discuss.elastic.co/u/igormarqs)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 5:23pm UTC](https://discuss.elastic.co/t/logstash-grok/262498 "2021-01-28T17:23:20Z")
hey all; I have this log line: TID: \[\] \[\] \[2021-01-28 12:25:50,298\] INFO {org.wso2.carbon.databridge.core.DataBridge} - user admin connected {org.wso2.carbon.databridge.core.DataBridge} and i use this grok: TID: \\\[\] … --- ## [Optional grok pattern field doesnt match](https://discuss.elastic.co/t/optional-grok-pattern-field-doesnt-match/262483)
**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 5:20pm UTC](https://discuss.elastic.co/t/optional-grok-pattern-field-doesnt-match/262483 "2021-01-28T17:20:48Z")
Hi, my log looks like this: "rootModel":"modelR","providedByRM":false,"rm\_user":"100001935398@rm.com","publishers":\["Unknown"\] the part: ,"rm\_user":"100001935398@rm.com" is optional so i marked it with ()?, but it do… --- ## [Logstash Error](https://discuss.elastic.co/t/logstash-error/262392)
**Author:** [@PriyankaS](https://discuss.elastic.co/u/PriyankaS)\ **Replies:** 3\ **Last updated:** [January 28, 2021, 5:18pm UTC](https://discuss.elastic.co/t/logstash-error/262392 "2021-01-28T17:18:43Z")
I am trying run the logstash with the below pattern: .\* PulseSecure: .\*%{IP:\[additionalinfo\]\[client\_public\_ip\]}.\*\\\\%{USERNAME:\[additionalinfo\]\[suser\]}.\*%{IP:\[additionalinfo\]\[client\_ip\]} for the below sample log: \<182\>1… --- ## [Logstash Json remove nested properties that have empty field name](https://discuss.elastic.co/t/logstash-json-remove-nested-properties-that-have-empty-field-name/262516)
**Author:** [@david.preston](https://discuss.elastic.co/u/david.preston)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 4:40pm UTC](https://discuss.elastic.co/t/logstash-json-remove-nested-properties-that-have-empty-field-name/262516 "2021-01-28T16:40:08Z")
Hi, Are there any "out of the box" logstash functions for removing json properties that have empty field names. e.g. { "event": { "data": { "" : "some value" } } } I'm not a… --- ## [Logstash doesn't work on windows](https://discuss.elastic.co/t/logstash-doesnt-work-on-windows/262506)
**Author:** [@l418](https://discuss.elastic.co/u/l418)\ **Replies:** 4\ **Last updated:** [January 28, 2021, 3:03pm UTC](https://discuss.elastic.co/t/logstash-doesnt-work-on-windows/262506 "2021-01-28T15:03:52Z")
Hello. Trying to populate simple elastic cluster from demo using windows Your logstash windows implementation seems broken completely file { path =\> "/var/log/apache2/access.log" start\_position =\> "beginning" since… --- ## [DuplicateKeyError](https://discuss.elastic.co/t/duplicatekeyerror/262107)
**Author:** [@pesc](https://discuss.elastic.co/u/pesc)\ **Replies:** 6\ **Last updated:** [January 28, 2021, 2:49pm UTC](https://discuss.elastic.co/t/duplicatekeyerror/262107 "2021-01-28T14:49:21Z")
Hi I'm getting an error while adding a document by POST to documents: Exception: Unable to save document: Swiftype::Documents::DuplicateKeyError: How's that even possible? If the ID already exists, wouldn't it just u… --- ## [Range in data table is not working](https://discuss.elastic.co/t/range-in-data-table-is-not-working/262490)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 4\ **Last updated:** [January 28, 2021, 1:39pm UTC](https://discuss.elastic.co/t/range-in-data-table-is-not-working/262490 "2021-01-28T13:39:42Z")
Hi, I have a ELK setup of 7.10.0v. I created a data table visualization with Range in bucket, but it is not giving the correct value. PFA of the data table with out range. Here it is givin the total U-clients "126,9… --- ## [Raw data visualization takes too much time](https://discuss.elastic.co/t/raw-data-visualization-takes-too-much-time/262479)
**Author:** [@Shalhevet](https://discuss.elastic.co/u/Shalhevet)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 1:39pm UTC](https://discuss.elastic.co/t/raw-data-visualization-takes-too-much-time/262479 "2021-01-28T13:39:33Z")
Hi, I am trying to create line chart visualization of field Y vs. PatchNo field. I have more then 10K documents, but even if I limit the buckets size to 1000, it takes few minutes for the vis. to get updated. why is i… --- ## [Not able to login with a new created user into kibana](https://discuss.elastic.co/t/not-able-to-login-with-a-new-created-user-into-kibana/262454)
**Author:** [@Abhishek\_Shah](https://discuss.elastic.co/u/Abhishek_Shah)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 1:32pm UTC](https://discuss.elastic.co/t/not-able-to-login-with-a-new-created-user-into-kibana/262454 "2021-01-28T13:32:29Z")
I have created a user using elasticsearch security API. But I am not able to login into kibana using the newly created user. Do I need to make any configuration changes or any other reason? ELK Stack is hosted on elasti… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1067) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1069)