# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1094 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1095 --- ## [Elasticsearch 7.5 erros?](https://discuss.elastic.co/t/elasticsearch-7-5-erros/260105)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 6\ **Last updated:** [January 5, 2021, 5:54pm UTC](https://discuss.elastic.co/t/elasticsearch-7-5-erros/260105 "2021-01-05T17:54:05Z")
Hello, Happy new year. It seems Spark Streaming job was slow into Elasticsearch. I check master and find this erros in log ? \[...\] only morning : \[2021-01-04T01:59:56,349\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] \[opu309\_m… --- ## [\[7.10\] Que veut dire le status des alerts and actions?](https://discuss.elastic.co/t/7-10-que-veut-dire-le-status-des-alerts-and-actions/260186)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 6\ **Last updated:** [January 5, 2021, 4:40pm UTC](https://discuss.elastic.co/t/7-10-que-veut-dire-le-status-des-alerts-and-actions/260186 "2021-01-05T16:40:47Z")
Hello, Je mets en place des alerts et actions (pour remplacer les watchers) Je suis sur elastic-cloud Mon alerte est dans le status pending. Ca veut dire quoi? Je ne vois pas de bouton pour la mettre en mode active P… --- ## [Unable to delete the documents when the index is full](https://discuss.elastic.co/t/unable-to-delete-the-documents-when-the-index-is-full/260201)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 6\ **Last updated:** [January 5, 2021, 4:21pm UTC](https://discuss.elastic.co/t/unable-to-delete-the-documents-when-the-index-is-full/260201 "2021-01-05T16:21:43Z")
I am unable to delete the documents from an index having the maximum number of documents (2147483519). getting the below exception. Please help me to get this resolved. "cause" : { "type" : "illegal\_argument\_ex… --- ## [Show different Metrics in one Visualization](https://discuss.elastic.co/t/show-different-metrics-in-one-visualization/260226)
**Author:** [@grra](https://discuss.elastic.co/u/grra)\ **Replies:** 6\ **Last updated:** [January 5, 2021, 4:19pm UTC](https://discuss.elastic.co/t/show-different-metrics-in-one-visualization/260226 "2021-01-05T16:19:56Z")
Hi, in my document I have a JSON metrics field like that: { "task": "task1", "size": 2048 }, { "task": "task2", "size": 1000 } As Buckets I have another field called number (lets say number: 1, 2) A field num… --- ## [ML Advanced datafeed Elasticsearch Query](https://discuss.elastic.co/t/ml-advanced-datafeed-elasticsearch-query/260219)
**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\ **Replies:** 1\ **Last updated:** [January 5, 2021, 3:49pm UTC](https://discuss.elastic.co/t/ml-advanced-datafeed-elasticsearch-query/260219 "2021-01-05T15:49:30Z")
How do i do query for event.code == 4625 winlog.event\_data.targetusername != "\*svc" this is what i have and doesnt seem to work { "bool": { "must": \[ { "match\_all": {} } \], "filter": \[ { "match\_phrase": { "… --- ## [Render kibana dashboard with API call in Angular10 application](https://discuss.elastic.co/t/render-kibana-dashboard-with-api-call-in-angular10-application/260225)
**Author:** [@manashreea](https://discuss.elastic.co/u/manashreea)\ **Replies:** 1\ **Last updated:** [January 5, 2021, 3:48pm UTC](https://discuss.elastic.co/t/render-kibana-dashboard-with-api-call-in-angular10-application/260225 "2021-01-05T15:48:50Z")
Hello, I want to display Kibana dashboard into Angular application. I know we can use embed url and set iframe src attribute. But I want to get dashboard report by making Kibana dashboard API call. And this API response… --- ## [How to avoid duplicate data in data table visualization](https://discuss.elastic.co/t/how-to-avoid-duplicate-data-in-data-table-visualization/260182)
**Author:** [@abhinav3](https://discuss.elastic.co/u/abhinav3)\ **Replies:** 1\ **Last updated:** [January 5, 2021, 3:39pm UTC](https://discuss.elastic.co/t/how-to-avoid-duplicate-data-in-data-table-visualization/260182 "2021-01-05T15:39:26Z")
I have data where I have customer names and devices linked to it. I want to visualize this on a data table. For this, I have added top hit as aggregation in metrics and have used field as Device. In the bucket, I have a… --- ## [Logstash Persistent Queue Buffer time](https://discuss.elastic.co/t/logstash-persistent-queue-buffer-time/260211)
**Author:** [@ksaha](https://discuss.elastic.co/u/ksaha)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 2:29pm UTC](https://discuss.elastic.co/t/logstash-persistent-queue-buffer-time/260211 "2021-01-05T14:29:04Z")
Hi, I am exploring on Logstash resiliency part and come to know about the logstash Persistent Queue. I am searching what is the maximum buffer time of this Persistent Queue? Our requirement is the buffer should hold the… --- ## [AWS EC2 Logstash input with external IPs](https://discuss.elastic.co/t/aws-ec2-logstash-input-with-external-ips/260202)
**Author:** [@Sunflower](https://discuss.elastic.co/u/Sunflower)\ **Replies:** 0\ **Last updated:** [January 5, 2021, 12:16pm UTC](https://discuss.elastic.co/t/aws-ec2-logstash-input-with-external-ips/260202 "2021-01-05T12:16:20Z")
(topic withdrawn by author, will be automatically deleted in 24 hours unless flagged) --- ## [How to save large data send from logstash to Redis with list type?](https://discuss.elastic.co/t/how-to-save-large-data-send-from-logstash-to-redis-with-list-type/260210)
**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\ **Replies:** 0\ **Last updated:** [January 5, 2021, 1:30pm UTC](https://discuss.elastic.co/t/how-to-save-large-data-send-from-logstash-to-redis-with-list-type/260210 "2021-01-05T13:30:24Z")
I'm using logstash to send data to Redis as output { redis { host =\> \["${REDIS\_URL}"\] data\_type =\> "list" key =\> "ID" codec =\> line { format =\> "%{id}"} } } When I check data in Redis, it created an… --- ## [Elastic receives small amount of data and nginx buffers the bulk events](https://discuss.elastic.co/t/elastic-receives-small-amount-of-data-and-nginx-buffers-the-bulk-events/259578)
**Author:** [@opouwels](https://discuss.elastic.co/u/opouwels)\ **Replies:** 6\ **Last updated:** [January 5, 2021, 12:30pm UTC](https://discuss.elastic.co/t/elastic-receives-small-amount-of-data-and-nginx-buffers-the-bulk-events/259578 "2021-01-05T12:30:22Z")
Hi List, Sinces we switched from fluentd to fluent-bit our elastic cluster showed more problems with the bulk queue, is their a way to see whats in the bulk queue and why its not progressing the queue? the nginx shows … --- ## [Pause Young (Allocation Failure) in gc.log](https://discuss.elastic.co/t/pause-young-allocation-failure-in-gc-log/260100)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 12:24pm UTC](https://discuss.elastic.co/t/pause-young-allocation-failure-in-gc-log/260100 "2021-01-05T12:24:26Z")
Hi, I've been having these errors in gc.log in elasticsearch (7.3), and sometimes elasticsearch crushes, dont know if because of theese errors. Can anyone help to identifiy what does it mean? \[2021-01-04T14:36:14.097+0… --- ## [Logs correlation](https://discuss.elastic.co/t/logs-correlation/260110)
**Author:** [@sm\_loguser](https://discuss.elastic.co/u/sm_loguser)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 12:22pm UTC](https://discuss.elastic.co/t/logs-correlation/260110 "2021-01-05T12:22:47Z")
I have two log files. I am correlating these two files by timestamp using aggregate filter. Where there is timestamp match between two files, correlation is working fine. But there are scenarios where either of the two… --- ## [Elasticsearch 6.8.12 os.cpu always 100 although load varies and stays below number of processors](https://discuss.elastic.co/t/elasticsearch-6-8-12-os-cpu-always-100-although-load-varies-and-stays-below-number-of-processors/260136)
**Author:** [@span](https://discuss.elastic.co/u/span)\ **Replies:** 5\ **Last updated:** [January 5, 2021, 11:28am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-12-os-cpu-always-100-although-load-varies-and-stays-below-number-of-processors/260136 "2021-01-05T11:28:21Z")
I have a small elastic cluster running on Kubernetes 1.18 in AKS. It has 3 ingest nodes, 3 masters and 4 data nodes. I do not have much data, only a few gigabytes spread over a dozen indices. It has been setup using Helm… --- ## [Hot/Warm architecture question](https://discuss.elastic.co/t/hot-warm-architecture-question/260119)
**Author:** [@frichard](https://discuss.elastic.co/u/frichard)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 11:02am UTC](https://discuss.elastic.co/t/hot-warm-architecture-question/260119 "2021-01-05T11:02:14Z")
Hi everyone ! I am discussing Elasticsearch architecture with my team, and we wondered if the following setup would work : 2 hot nodes 2 warm nodes As a constraint, each index would have 1 replica for high availabili… --- ## [How to disable the new index creation mechanism whenever I ran Kibana 7.5.1?](https://discuss.elastic.co/t/how-to-disable-the-new-index-creation-mechanism-whenever-i-ran-kibana-7-5-1/259973)
**Author:** [@Zaga](https://discuss.elastic.co/u/Zaga)\ **Replies:** 4\ **Last updated:** [January 5, 2021, 10:51am UTC](https://discuss.elastic.co/t/how-to-disable-the-new-index-creation-mechanism-whenever-i-ran-kibana-7-5-1/259973 "2021-01-05T10:51:04Z")
Unlike in Kibana 6, I keep getting new indexes generated whenever I run my Kibana 7.5.1 instance .kibana\_1, .kibana\_2 etc. Why is it happening? can I disable it? it costs a lot of time and space to my development proce… --- ## [Kibana server is not ready: Error obtained after fresh installation on CentOS 7](https://discuss.elastic.co/t/kibana-server-is-not-ready-error-obtained-after-fresh-installation-on-centos-7/260171)
**Author:** [@jatomode](https://discuss.elastic.co/u/jatomode)\ **Replies:** 8\ **Last updated:** [January 5, 2021, 10:32am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-error-obtained-after-fresh-installation-on-centos-7/260171 "2021-01-05T10:32:29Z")
I freshly installed Ossec and required Kibana for visual log report and dashboard, but after following steps https://www.linode.com/docs/guides/visualize-server-security-on-centos-7-with-an-elastic-stack-and-wazuh/ all s… --- ## [How to add fileds to index pattren , so it can be filterd by in discover search](https://discuss.elastic.co/t/how-to-add-fileds-to-index-pattren-so-it-can-be-filterd-by-in-discover-search/259969)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 6\ **Last updated:** [January 5, 2021, 10:31am UTC](https://discuss.elastic.co/t/how-to-add-fileds-to-index-pattren-so-it-can-be-filterd-by-in-discover-search/259969 "2021-01-05T10:31:21Z")
i defined simple index pattern " filebeat-\*" and it has only a few fields which i can filter by: now i like to add new fields to this index pattern. which i can see they exist but i can't find anywhere how to ad… --- ## [Label is not shown for some categories in pie chart](https://discuss.elastic.co/t/label-is-not-shown-for-some-categories-in-pie-chart/259547)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 4\ **Last updated:** [January 5, 2021, 10:23am UTC](https://discuss.elastic.co/t/label-is-not-shown-for-some-categories-in-pie-chart/259547 "2021-01-05T10:23:50Z")
Here label is not shown for one category in pie chart, may I know how it can be resolved. --- ## [How can I get all nouns in my field](https://discuss.elastic.co/t/how-can-i-get-all-nouns-in-my-field/260181)
**Author:** [@akamachi95](https://discuss.elastic.co/u/akamachi95)\ **Replies:** 0\ **Last updated:** [January 5, 2021, 9:19am UTC](https://discuss.elastic.co/t/how-can-i-get-all-nouns-in-my-field/260181 "2021-01-05T09:19:45Z")
Sorry fo my poor English. As kuromoji, I can just use part of speech to filter out the useless words and keep the words I want. For English, I want to do the same thin.So is there any way for me to do the same thing? --- ## [Limit number of slices in pie chart](https://discuss.elastic.co/t/limit-number-of-slices-in-pie-chart/260049)
**Author:** [@kasun](https://discuss.elastic.co/u/kasun)\ **Replies:** 5\ **Last updated:** [January 5, 2021, 8:49am UTC](https://discuss.elastic.co/t/limit-number-of-slices-in-pie-chart/260049 "2021-01-05T08:49:17Z")
I have created a pie chart and split the slices using filter aggregation. There are over 5 filters but I want to display only the top 5 values in the pie chart. I can do this if I use the terms as the aggregation. But i… --- ## [Create multiple indicies mapping at one elasticsearch](https://discuss.elastic.co/t/create-multiple-indicies-mapping-at-one-elasticsearch/260162)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 1\ **Last updated:** [January 5, 2021, 6:51am UTC](https://discuss.elastic.co/t/create-multiple-indicies-mapping-at-one-elasticsearch/260162 "2021-01-05T06:51:59Z")
Hi, I have a scenario where my index name is changing frequently, I want to create index mapping at one go. with my-index-\* But I am not able to create at one go. PUT /my-index-\*/\_mapping { "properties": { "emai… --- ## [Creating and deleting a small index every 3 minutes, posible problems?](https://discuss.elastic.co/t/creating-and-deleting-a-small-index-every-3-minutes-posible-problems/260158)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 5\ **Last updated:** [January 5, 2021, 6:44am UTC](https://discuss.elastic.co/t/creating-and-deleting-a-small-index-every-3-minutes-posible-problems/260158 "2021-01-05T06:44:51Z")
Hi, with a python script I run a single logstash pipeline that create an ES index, in the same script I delete the index every 3 minutes, the size of the index is less than 1 Mb, I was wandering if this constant deletio… --- ## [Ingesting Oracle's Audit Trail](https://discuss.elastic.co/t/ingesting-oracles-audit-trail/259897)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 6:29am UTC](https://discuss.elastic.co/t/ingesting-oracles-audit-trail/259897 "2021-01-05T06:29:17Z")
Hi, I'm ingesting the content from sys.dba\_audit\_trail into ES using the jdbc input plugin. Everything goes ok with the exception of the field transactionid which is of type (at db level of RAW(8)) Here an example 000… --- ## [Kibana is not ready yet in 7.10.1](https://discuss.elastic.co/t/kibana-is-not-ready-yet-in-7-10-1/259232)
**Author:** [@Bhavya\_Sri](https://discuss.elastic.co/u/Bhavya_Sri)\ **Replies:** 4\ **Last updated:** [January 5, 2021, 4:43am UTC](https://discuss.elastic.co/t/kibana-is-not-ready-yet-in-7-10-1/259232 "2021-01-05T04:43:52Z")
Hi, I have installed Kibana v7.10. I have made the modifications for server.host in kibana.yml file. Post that when i start Kibana by using - sudo service kibana start it is says Starting kibana (via systemctl): … --- ## [File paths must be absolute, relative path specified](https://discuss.elastic.co/t/file-paths-must-be-absolute-relative-path-specified/260016)
**Author:** [@Cyphy](https://discuss.elastic.co/u/Cyphy)\ **Replies:** 9\ **Last updated:** [January 5, 2021, 4:09am UTC](https://discuss.elastic.co/t/file-paths-must-be-absolute-relative-path-specified/260016 "2021-01-05T04:09:27Z")
hey there, hope you can help me :slight\_smile: I started my ELK setup with docker-compose a few days ago. It looked fine as all 3 containers where running without any data. Today i wanted to import some xml files with … --- ## [No matching indices found: No indices match pattern "winlogbeat-\*"](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-winlogbeat/260134)
**Author:** [@sixstringssteve](https://discuss.elastic.co/u/sixstringssteve)\ **Replies:** 14\ **Last updated:** [January 5, 2021, 2:14am UTC](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-winlogbeat/260134 "2021-01-05T02:14:47Z")
I am getting the errors "No matching indices found: No indices match pattern "winlogbeat-\*" when I try to go to the Winlogbeat dashboard or Discover. There was a winlogbeat-\* index pattern created, just no traffic hitt… --- ## [Logstash best practice for filters order](https://discuss.elastic.co/t/logstash-best-practice-for-filters-order/259775)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 2\ **Last updated:** [January 5, 2021, 3:18am UTC](https://discuss.elastic.co/t/logstash-best-practice-for-filters-order/259775 "2021-01-05T03:18:49Z")
Hi, I have a lot of input and filters on my logstash and I've been thinking are they optimize and how can I measure logstash performance. I only monitor "heap used" and it's fine. I came up with a question. There are 2 t… --- ## [How can I configure kibana on different host?](https://discuss.elastic.co/t/how-can-i-configure-kibana-on-different-host/260069)
**Author:** [@Hi\_u\_Nguy\_n\_Dang](https://discuss.elastic.co/u/Hi_u_Nguy_n_Dang)\ **Replies:** 14\ **Last updated:** [January 5, 2021, 3:02am UTC](https://discuss.elastic.co/t/how-can-i-configure-kibana-on-different-host/260069 "2021-01-05T03:02:04Z")
How can I configure kibana if it run on a different host with elasticsearch and logstash? For example my elasticsearch server is 10.1.11.111 my kibana server is 10.1.11.112 and my logstash server is 10.1.11.113 ? In … --- ## [Show data in kibana, used snmp plugin](https://discuss.elastic.co/t/show-data-in-kibana-used-snmp-plugin/260125)
**Author:** [@aandrewsllp](https://discuss.elastic.co/u/aandrewsllp)\ **Replies:** 1\ **Last updated:** [January 5, 2021, 2:53am UTC](https://discuss.elastic.co/t/show-data-in-kibana-used-snmp-plugin/260125 "2021-01-05T02:53:38Z")
i need show data in kibana, used snmp plugin [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1093) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1095)