# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1136 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1137 --- ## [Elastic APIs versioning and usage without breaking the integrated services](https://discuss.elastic.co/t/elastic-apis-versioning-and-usage-without-breaking-the-integrated-services/256483)
**Author:** [@es\_user2](https://discuss.elastic.co/u/es_user2)\ **Replies:** 7\ **Last updated:** [November 26, 2020, 4:30pm UTC](https://discuss.elastic.co/t/elastic-apis-versioning-and-usage-without-breaking-the-integrated-services/256483 "2020-11-26T16:30:15Z")
hi Team, we have few queries on Elasticserach APIs: Suppose we have used an API in our code and there is a version upgrade. How to handle the version change ? Will it not break our code integration with this API ? (If … --- ## [Query DSL causes SearchPhaseExecutionException](https://discuss.elastic.co/t/query-dsl-causes-searchphaseexecutionexception/256118)
**Author:** [@andrewKode](https://discuss.elastic.co/u/andrewKode)\ **Replies:** 4\ **Last updated:** [November 26, 2020, 3:57pm UTC](https://discuss.elastic.co/t/query-dsl-causes-searchphaseexecutionexception/256118 "2020-11-26T15:57:21Z")
Hey! I'm trying to visualize data for multiple documents. Since I'm not being able to import a file with the ids of the documents in Kibana, I'm building a Query DSL using a Python script. The query works just fine in … --- ## [ElasticSearch aggregation for recommendation engine](https://discuss.elastic.co/t/elasticsearch-aggregation-for-recommendation-engine/256789)
**Author:** [@martsuga](https://discuss.elastic.co/u/martsuga)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 3:52pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-for-recommendation-engine/256789 "2020-11-26T15:52:36Z")
I need some advice for aggregations. I am trying to build a recommendation engine based on existing ElasticSearch data but i am out of ideas how to build this query with aggregations. The easiest way would be to use "s… --- ## [Metricbeat view on syn\_recv tcp\_connections](https://discuss.elastic.co/t/metricbeat-view-on-syn-recv-tcp-connections/256781)
**Author:** [@Jo\_De\_Troy](https://discuss.elastic.co/u/Jo_De_Troy)\ **Replies:** 0\ **Last updated:** [November 26, 2020, 2:30pm UTC](https://discuss.elastic.co/t/metricbeat-view-on-syn-recv-tcp-connections/256781 "2020-11-26T14:30:38Z")
Hello, I have metricbeat collecting the socket\_summary metricset of the system module. I see on github \[socket\_summary\](https://github.com/elastic/beats/blob/master/metricbeat/module/system/socket\_summary/socket\_summa… --- ## [Running another logstash instance incase one logstash fails](https://discuss.elastic.co/t/running-another-logstash-instance-incase-one-logstash-fails/256656)
**Author:** [@mahi2](https://discuss.elastic.co/u/mahi2)\ **Replies:** 3\ **Last updated:** [November 26, 2020, 2:54pm UTC](https://discuss.elastic.co/t/running-another-logstash-instance-incase-one-logstash-fails/256656 "2020-11-26T14:54:35Z")
Hi, I have a scenario where one logstash is already running, and for some reason the machine fails. I want the process to keep going and not wait for the machine to be restarted.It must automatically start taking data f… --- ## [Persistent queue, drop?](https://discuss.elastic.co/t/persistent-queue-drop/256785)
**Author:** [@diecode](https://discuss.elastic.co/u/diecode)\ **Replies:** 0\ **Last updated:** [November 26, 2020, 2:42pm UTC](https://discuss.elastic.co/t/persistent-queue-drop/256785 "2020-11-26T14:42:59Z")
Hey, I am using persistent queue in my logstash with aggregate filter. I would like drop few incoming syslog message in filter, but when I use drop, then it will not removed from queue, thus my queue reach the maximum l… --- ## [Create copy of visualization that uses a different index as data source?](https://discuss.elastic.co/t/create-copy-of-visualization-that-uses-a-different-index-as-data-source/256382)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 2\ **Last updated:** [November 26, 2020, 2:23pm UTC](https://discuss.elastic.co/t/create-copy-of-visualization-that-uses-a-different-index-as-data-source/256382 "2020-11-26T14:23:58Z")
I have found that the visualizations (line charts, tables) are tied to its data source, and no easy way to edit it. Often, I have built a complex visualization that I can use for another index as a starting point, but I … --- ## [Detection rule for password spraying attempts](https://discuss.elastic.co/t/detection-rule-for-password-spraying-attempts/256628)
**Author:** [@heading](https://discuss.elastic.co/u/heading)\ **Replies:** 2\ **Last updated:** [November 26, 2020, 2:18pm UTC](https://discuss.elastic.co/t/detection-rule-for-password-spraying-attempts/256628 "2020-11-26T14:18:43Z")
Hi, we have a use case where we want to detect if a host tries to log on to a certain number of different users. With threshold rules we are only able to detect a specific number of login attempts by a host. We cannot e… --- ## [Facing data too large exception frequently](https://discuss.elastic.co/t/facing-data-too-large-exception-frequently/255943)
**Author:** [@Divy\_Garg](https://discuss.elastic.co/u/Divy_Garg)\ **Replies:** 4\ **Last updated:** [November 26, 2020, 1:51pm UTC](https://discuss.elastic.co/t/facing-data-too-large-exception-frequently/255943 "2020-11-26T13:51:00Z")
CircuitBreakingException\[\[parent\] Data too large, data for \[internal:index/shard/recovery/start\_recovery\] would be \[7805417954/7.2gb\], which is larger than the limit of \[6941363404/6.4gb\], real usage: \[7805416568/7.2gb\],… --- ## [Elasticsearch 7.10 does not start on MacOS](https://discuss.elastic.co/t/elasticsearch-7-10-does-not-start-on-macos/256740)
**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\ **Replies:** 7\ **Last updated:** [November 26, 2020, 1:17pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-does-not-start-on-macos/256740 "2020-11-26T13:17:49Z")
I am very confused. I've downloaded the latest ELK stack to make a test on my machine. I am on MacOS 10.15.7 and Java 11 Here's what I did: Unzip the tar somewhere in my home directory cd to the elasticsearch invoke b… --- ## [Index deleted, want to restore from backup](https://discuss.elastic.co/t/index-deleted-want-to-restore-from-backup/256770)
**Author:** [@Arbind\_Bhagat](https://discuss.elastic.co/u/Arbind_Bhagat)\ **Replies:** 0\ **Last updated:** [November 26, 2020, 12:34pm UTC](https://discuss.elastic.co/t/index-deleted-want-to-restore-from-backup/256770 "2020-11-26T12:34:50Z")
All of my index have been deleted. So, I don't see them in Kibana. Of course, all the corresponding data has also been deleted. However, I do have the backup of the disk that contains all the files and folders. In this… --- ## [Kibana error 500 when viewing metrics](https://discuss.elastic.co/t/kibana-error-500-when-viewing-metrics/256429)
**Author:** [@daq](https://discuss.elastic.co/u/daq)\ **Replies:** 0\ **Last updated:** [November 24, 2020, 1:59am UTC](https://discuss.elastic.co/t/kibana-error-500-when-viewing-metrics/256429 "2020-11-24T01:59:26Z")
I'm having a problem viewing metrics in Kibana. My issue seems identical to this bug report. except the workaround there doesn't solve the problem for me. Every time I open metrics tab I get the following error: \[illeg… --- ## [Kibana alerting not matching wildcard AND condition](https://discuss.elastic.co/t/kibana-alerting-not-matching-wildcard-and-condition/256580)
**Author:** [@Chris\_Clifton](https://discuss.elastic.co/u/Chris_Clifton)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 11:33am UTC](https://discuss.elastic.co/t/kibana-alerting-not-matching-wildcard-and-condition/256580 "2020-11-26T11:33:31Z")
Hi, trying to determine why a field isn't matching wildcard searches in our log data in Kibana alerting. We're on the elastic cloud stack, v7.9.2. We need to add an AND condition for this particular log search and with … --- ## [Trying to implement pie chart logic](https://discuss.elastic.co/t/trying-to-implement-pie-chart-logic/256459)
**Author:** [@michaelacc](https://discuss.elastic.co/u/michaelacc)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 11:29am UTC](https://discuss.elastic.co/t/trying-to-implement-pie-chart-logic/256459 "2020-11-26T11:29:34Z")
Hello Everyone! I'm a new user of ELK stack, its looking really powerful and a bit challenging, however I would like to ask you about one thing related to kibana visualizations. I'm currently trying to implement a visua… --- ## [Access to different data source in vega-lite](https://discuss.elastic.co/t/access-to-different-data-source-in-vega-lite/256075)
**Author:** [@shin1](https://discuss.elastic.co/u/shin1)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 11:19am UTC](https://discuss.elastic.co/t/access-to-different-data-source-in-vega-lite/256075 "2020-11-26T11:19:50Z")
Hi, Is it possible to access fields in different data source from encoding object in vega-lite? Many thanks in advance, Cheers, Shin --- ## [Cluster is not available and http request failed, but request by transport client worked well](https://discuss.elastic.co/t/cluster-is-not-available-and-http-request-failed-but-request-by-transport-client-worked-well/256722)
**Author:** [@fanwang](https://discuss.elastic.co/u/fanwang)\ **Replies:** 4\ **Last updated:** [November 26, 2020, 10:51am UTC](https://discuss.elastic.co/t/cluster-is-not-available-and-http-request-failed-but-request-by-transport-client-worked-well/256722 "2020-11-26T10:51:56Z")
Elasticsearch version V5.6.12 JVM version JDK 1.8 OS version CentOS7.6 Description of the problem including expected versus actual behavior : In a cluster with 3 master nodes, minuimum\_master\_nodes is 2. Kill 2 o… --- ## [Syncronize vega-lite timestamp with kibana chart's timestamp](https://discuss.elastic.co/t/syncronize-vega-lite-timestamp-with-kibana-charts-timestamp/256082)
**Author:** [@shin1](https://discuss.elastic.co/u/shin1)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 10:33am UTC](https://discuss.elastic.co/t/syncronize-vega-lite-timestamp-with-kibana-charts-timestamp/256082 "2020-11-26T10:33:01Z")
Hi Experts, I'm writing a scatter plots in vega-lite now and it's on a dashboard contining many kibana charts. One of the charts on the doashboard changes every 1 second and I would like the other charts to synchronize… --- ## [Dynamically changing the graphical dashboard](https://discuss.elastic.co/t/dynamically-changing-the-graphical-dashboard/256487)
**Author:** [@All](https://discuss.elastic.co/u/All)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 10:21am UTC](https://discuss.elastic.co/t/dynamically-changing-the-graphical-dashboard/256487 "2020-11-26T10:21:11Z")
Hey everyone, is it possible to dynamically change the appearance of the dashboard, e.g. if some data is missing the graph or table is not shown? Thanks for reading and I am also very thankful for any comment! --- ## [Attachments on ELK](https://discuss.elastic.co/t/attachments-on-elk/256717)
**Author:** [@AChopra](https://discuss.elastic.co/u/AChopra)\ **Replies:** 4\ **Last updated:** [November 26, 2020, 10:07am UTC](https://discuss.elastic.co/t/attachments-on-elk/256717 "2020-11-26T10:07:35Z")
Hello, I have some attachments which need to be ingested into elastic. There are of varying types i.e PDF, TXT, CSV, XLS, DOC, MSG (Outlook emails). As far as I could find out , I got to know that I can use Ingest Att… --- ## [Reindexing does not resolve conflict](https://discuss.elastic.co/t/reindexing-does-not-resolve-conflict/256745)
**Author:** [@eliwap](https://discuss.elastic.co/u/eliwap)\ **Replies:** 0\ **Last updated:** [November 26, 2020, 9:33am UTC](https://discuss.elastic.co/t/reindexing-does-not-resolve-conflict/256745 "2020-11-26T09:33:01Z")
Recently we upgraded our stack to elasticsearch-7.9.2 from 6.8. I had to reindex to resolve several mapping conflicts. However reindexing did not resolve all of them. How do I fix the following conflicts filebeat - rea… --- ## [Проблемы с Dashboard ELK 7.10.0 (WinlogBeat Dashboard ECS)](https://discuss.elastic.co/t/dashboard-elk-7-10-0-winlogbeat-dashboard-ecs/256735)
**Author:** [@tesla](https://discuss.elastic.co/u/tesla)\ **Replies:** 0\ **Last updated:** [November 26, 2020, 8:16am UTC](https://discuss.elastic.co/t/dashboard-elk-7-10-0-winlogbeat-dashboard-ecs/256735 "2020-11-26T08:16:28Z")
Добрый День всем участникам. При установке и настройке Dashboard и принятия логов с Winlogbeat 7.10.0, не создаётся Dashboard (WinlogBeat Dashboard ECS ), а все сваливается в кучу. Winlogbeat Security\] Group Management… --- ## [Display the most frequent words in tagcloud chart in kibana](https://discuss.elastic.co/t/display-the-most-frequent-words-in-tagcloud-chart-in-kibana/252561)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 3\ **Last updated:** [November 26, 2020, 8:54am UTC](https://discuss.elastic.co/t/display-the-most-frequent-words-in-tagcloud-chart-in-kibana/252561 "2020-11-26T08:54:42Z")
hello, i have text data indexed on elasticsearch, and i want to display the words that are frequently cited in this data in tagcloud format, how i can do this on kibana thank you very much --- ## [Integration of Kibana dashboard in angular application](https://discuss.elastic.co/t/integration-of-kibana-dashboard-in-angular-application/256729)
**Author:** [@sam189](https://discuss.elastic.co/u/sam189)\ **Replies:** 2\ **Last updated:** [November 26, 2020, 8:40am UTC](https://discuss.elastic.co/t/integration-of-kibana-dashboard-in-angular-application/256729 "2020-11-26T08:40:50Z")
Hi, When i am trying to integrate kibana dashboard inside my angular application via iframe it is giving me below error. Refused to execute inline script because it violates the following Content Security Policy direct… --- ## [Kibana plugin or custom app](https://discuss.elastic.co/t/kibana-plugin-or-custom-app/256648)
**Author:** [@jnc943](https://discuss.elastic.co/u/jnc943)\ **Replies:** 3\ **Last updated:** [November 26, 2020, 8:26am UTC](https://discuss.elastic.co/t/kibana-plugin-or-custom-app/256648 "2020-11-26T08:26:35Z")
I would like to automate some current troubleshooting workflows that are done manually. Essentially, I would like to be able to run a query, extract some fields/information which can then be passed down to subsequent que… --- ## [Unable to find any unassigned shards to explain](https://discuss.elastic.co/t/unable-to-find-any-unassigned-shards-to-explain/256733)
**Author:** [@devdatta\_mulgund](https://discuss.elastic.co/u/devdatta_mulgund)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 8:01am UTC](https://discuss.elastic.co/t/unable-to-find-any-unassigned-shards-to-explain/256733 "2020-11-26T08:01:34Z")
I am facing this error in Elasticsearch. Can someone help with this? Below is the output for Elasticsearch APIs: curl localhost:9200/\_cluster/health output: {"cluster\_name":"docker-cluster","status":"green","timed\_ou… --- ## [Taking care of syslog PRI header in filter](https://discuss.elastic.co/t/taking-care-of-syslog-pri-header-in-filter/256732)
**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\ **Replies:** 0\ **Last updated:** [November 26, 2020, 7:53am UTC](https://discuss.elastic.co/t/taking-care-of-syslog-pri-header-in-filter/256732 "2020-11-26T07:53:36Z")
I use kv filter on a syslog data on the form key1=value1 key2=value2 etc. However, every syslog row has a leading PRI header of key1=value1. Is there a way to: Parse the pri header and all key-value pairs. Remove… --- ## [Pipeline with id does not exist](https://discuss.elastic.co/t/pipeline-with-id-does-not-exist/256689)
**Author:** [@Integration](https://discuss.elastic.co/u/Integration)\ **Replies:** 2\ **Last updated:** [November 26, 2020, 7:32am UTC](https://discuss.elastic.co/t/pipeline-with-id-does-not-exist/256689 "2020-11-26T07:32:37Z")
Hello, I'm trying to configure my filebeat.yml file with a pipeline that I created, and it's not working. I created the pipeline using Ingest Node Pipelines on the ElasticSearch UI. I get this error: 'pipeline with i… --- ## [Ошибка при обновлении ElasticSearch](https://discuss.elastic.co/t/elasticsearch/256620)
**Author:** [@Jhonny-2005](https://discuss.elastic.co/u/Jhonny-2005)\ **Replies:** 2\ **Last updated:** [November 26, 2020, 6:01am UTC](https://discuss.elastic.co/t/elasticsearch/256620 "2020-11-26T06:01:25Z")
При обновлении ElasticSearch с 7.9.0 на 7.10.0 возникает ошибка. С чем может быть связано? Ранее таких ошибок не было. Что-то изменилось? $ sudo dpkg -i elasticsearch-7.10.0-amd64.deb (Reading database ... 203772 files … --- ## [What config will need to send mail using log4j.property settings in logstash?](https://discuss.elastic.co/t/what-config-will-need-to-send-mail-using-log4j-property-settings-in-logstash/256481)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 4\ **Last updated:** [November 26, 2020, 5:51am UTC](https://discuss.elastic.co/t/what-config-will-need-to-send-mail-using-log4j-property-settings-in-logstash/256481 "2020-11-26T05:51:28Z")
currently logstash create plain.log, how can send mail using log4j2.property file. any idea? --- ## [Auditbeat chroot jail support](https://discuss.elastic.co/t/auditbeat-chroot-jail-support/256677)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 5:45am UTC](https://discuss.elastic.co/t/auditbeat-chroot-jail-support/256677 "2020-11-26T05:45:23Z")
Hi All, I was wondering if there is any documentation on getting Auditbeat to collect information from chroot jails? Based on how chroot jails work, it doesn't seem like there is a straight forward way of getting Auditb… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1135) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1137)