# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1176 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1177 --- ## [Ingest Node Pipelines making Elasticsearch Unreachable](https://discuss.elastic.co/t/ingest-node-pipelines-making-elasticsearch-unreachable/253534)
**Author:** [@Vijay\_Barai](https://discuss.elastic.co/u/Vijay_Barai)\ **Replies:** 1\ **Last updated:** [October 28, 2020, 4:18pm UTC](https://discuss.elastic.co/t/ingest-node-pipelines-making-elasticsearch-unreachable/253534 "2020-10-28T16:18:33Z")
I am using ES-7.9.1. I created few ingest pipeling for small enrichment using UI. All pipeline working fine individually when load a data using logstash-output-elasticsearch. To impliment all the enrichment I combined 5 … --- ## [Lens not showing up fields which are searchable & aggregatable?](https://discuss.elastic.co/t/lens-not-showing-up-fields-which-are-searchable-aggregatable/253551)
**Author:** [@Goodyzain](https://discuss.elastic.co/u/Goodyzain)\ **Replies:** 1\ **Last updated:** [October 28, 2020, 2:57pm UTC](https://discuss.elastic.co/t/lens-not-showing-up-fields-which-are-searchable-aggregatable/253551 "2020-10-28T14:57:57Z")
Hi i am trying to build a dashboard with lens, i have a index where 1 of the field is both marked as searchable & aggregatable but still it doesn't appear in the lens... Here is the lens, even though the data is the… --- ## [Which (json or xml) input is better for parsing in logstash in terms of scalibility , performance and nested structure?](https://discuss.elastic.co/t/which-json-or-xml-input-is-better-for-parsing-in-logstash-in-terms-of-scalibility-performance-and-nested-structure/253555)
**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\ **Replies:** 2\ **Last updated:** [October 28, 2020, 2:21pm UTC](https://discuss.elastic.co/t/which-json-or-xml-input-is-better-for-parsing-in-logstash-in-terms-of-scalibility-performance-and-nested-structure/253555 "2020-10-28T14:21:46Z")
hi everyone , i need to decide which input type to parse in logstash for performance, scalibility and nested structure ? the input file could be nearly 100k records in size the data source is informatica. please let … --- ## [Process multiple Dead Letter Queues with one pipeline](https://discuss.elastic.co/t/process-multiple-dead-letter-queues-with-one-pipeline/253430)
**Author:** [@michielw](https://discuss.elastic.co/u/michielw)\ **Replies:** 2\ **Last updated:** [October 28, 2020, 2:11pm UTC](https://discuss.elastic.co/t/process-multiple-dead-letter-queues-with-one-pipeline/253430 "2020-10-28T14:11:38Z")
In our Elastic environment we use multiple pipelines on a single Logstash instance. Also, we enabled the Dead Letter Queue on all these pipelines. On creating the pipeline to process events in the DLQs I noticed I need t… --- ## [Dashboards have been unknowingly deleted, need recovery](https://discuss.elastic.co/t/dashboards-have-been-unknowingly-deleted-need-recovery/253471)
**Author:** [@tonyfwk](https://discuss.elastic.co/u/tonyfwk)\ **Replies:** 2\ **Last updated:** [October 28, 2020, 2:02pm UTC](https://discuss.elastic.co/t/dashboards-have-been-unknowingly-deleted-need-recovery/253471 "2020-10-28T14:02:41Z")
Today, I have found my custom-created dashboards were missing. Suspected have been deleted by one of the users with admin rights. Is there any way to recover from Kibana. It represents two months of work. Much obl… --- ## [How to exclude querystring reponse and keep only exact match if present?](https://discuss.elastic.co/t/how-to-exclude-querystring-reponse-and-keep-only-exact-match-if-present/253412)
**Author:** [@darshan\_ambre](https://discuss.elastic.co/u/darshan_ambre)\ **Replies:** 2\ **Last updated:** [October 28, 2020, 1:59pm UTC](https://discuss.elastic.co/t/how-to-exclude-querystring-reponse-and-keep-only-exact-match-if-present/253412 "2020-10-28T13:59:39Z")
How to return only exact match if exists else perform wildcard search. for e.g. for the below given set of data \[ { "\_index" : "priority\_test", "\_type" : "\_doc", "\_id" : "3IkeZHUBYJCjRl… --- ## [Count max consecutive values](https://discuss.elastic.co/t/count-max-consecutive-values/253565)
**Author:** [@Yevhen\_Baidiuk](https://discuss.elastic.co/u/Yevhen_Baidiuk)\ **Replies:** 0\ **Last updated:** [October 28, 2020, 1:33pm UTC](https://discuss.elastic.co/t/count-max-consecutive-values/253565 "2020-10-28T13:33:19Z")
Hello, I try to get values with specific logic. For Example, we get 2 Entity from 4 days period. Name Date Val B 01 1 (1) A 01 1 A 02 0 A … --- ## [Passing only loglevel ERROR FROM LOG USING GROK FILTRATION](https://discuss.elastic.co/t/passing-only-loglevel-error-from-log-using-grok-filtration/253369)
**Author:** [@noobman2logstash](https://discuss.elastic.co/u/noobman2logstash)\ **Replies:** 6\ **Last updated:** [October 28, 2020, 12:58pm UTC](https://discuss.elastic.co/t/passing-only-loglevel-error-from-log-using-grok-filtration/253369 "2020-10-28T12:58:03Z")
Hi I'm new to logstash and i need help parsing only error logs when loglevel == error i have tried many filtrations on here and im not getting the result i need. here is a sample of my error log. i just want to pick an… --- ## [Logstash read pdf by ruby-Filter](https://discuss.elastic.co/t/logstash-read-pdf-by-ruby-filter/253542)
**Author:** [@xiaoping1993](https://discuss.elastic.co/u/xiaoping1993)\ **Replies:** 2\ **Last updated:** [October 28, 2020, 12:24pm UTC](https://discuss.elastic.co/t/logstash-read-pdf-by-ruby-filter/253542 "2020-10-28T12:24:35Z")
I want use logstash to read the pdf、docx .... I think the ruby-Filter can solve the problem so I do some try: 1）create a function pdf\_to\_text(pdf\_filename) require 'docsplit' def pdf\_to\_text(pdf\_filename) Docsplit… --- ## [JDBC Oracle table to Elastic through logstash](https://discuss.elastic.co/t/jdbc-oracle-table-to-elastic-through-logstash/253338)
**Author:** [@Gopal\_Chauhan](https://discuss.elastic.co/u/Gopal_Chauhan)\ **Replies:** 2\ **Last updated:** [October 28, 2020, 12:24pm UTC](https://discuss.elastic.co/t/jdbc-oracle-table-to-elastic-through-logstash/253338 "2020-10-28T12:24:30Z")
Hi , I am trying to get oracle table data into Elastic through logstash (version 6.2, windows). I have created a pipe line. Added pipeline id into logstash.yml file and restarting logstash service. Pipeline is starting… --- ## [Error at first launch Kibana 7.9.2](https://discuss.elastic.co/t/error-at-first-launch-kibana-7-9-2/252848)
**Author:** [@Toontje](https://discuss.elastic.co/u/Toontje)\ **Replies:** 3\ **Last updated:** [October 28, 2020, 11:58am UTC](https://discuss.elastic.co/t/error-at-first-launch-kibana-7-9-2/252848 "2020-10-28T11:58:11Z")
Installed Kibana 7.9.2 from Homebrew. On first launch i get the following errors: log \[12:22:24.215\] \[info\]\[plugins\]\[reporting\] Extracting \[/usr/local/Cellar/kibana-full/7.9.2/libexec/.chromium/chromium-312d84c-… --- ## [Access secured Elasticsearch from Kibana](https://discuss.elastic.co/t/access-secured-elasticsearch-from-kibana/253460)
**Author:** [@Johann\_Hochtl](https://discuss.elastic.co/u/Johann_Hochtl)\ **Replies:** 1\ **Last updated:** [October 28, 2020, 9:43am UTC](https://discuss.elastic.co/t/access-secured-elasticsearch-from-kibana/253460 "2020-10-28T09:43:03Z")
I configured elasticsearch to require ssl-communication, but not https via REST, see: I can access elastic from curl using the pattern curl -u kibana\_system http://localhost:9200 I configured Kibana as following: xp… --- ## [Kibana fails to run in fresh deployment](https://discuss.elastic.co/t/kibana-fails-to-run-in-fresh-deployment/253499)
**Author:** [@Samimb](https://discuss.elastic.co/u/Samimb)\ **Replies:** 3\ **Last updated:** [October 28, 2020, 9:42am UTC](https://discuss.elastic.co/t/kibana-fails-to-run-in-fresh-deployment/253499 "2020-10-28T09:42:12Z")
Hello, I’m trying to create an ECK instance using the official documentation. I’m a little bit confused as each time I try to create the Kibana instance I get the same error that the indexes already exist. This being … --- ## [Build kibana unreleased version](https://discuss.elastic.co/t/build-kibana-unreleased-version/253536)
**Author:** [@bering](https://discuss.elastic.co/u/bering)\ **Replies:** 2\ **Last updated:** [October 28, 2020, 9:19am UTC](https://discuss.elastic.co/t/build-kibana-unreleased-version/253536 "2020-10-28T09:19:33Z")
I would like to test the Ingest Manager with on prem package-registry mentioned here: The issue mentions that this works for Kibana v7.9.10, can I build the version with yarn somehow? --- ## [Performance graphs? Is this possible?](https://discuss.elastic.co/t/performance-graphs-is-this-possible/252980)
**Author:** [@Toontje](https://discuss.elastic.co/u/Toontje)\ **Replies:** 2\ **Last updated:** [October 28, 2020, 9:09am UTC](https://discuss.elastic.co/t/performance-graphs-is-this-possible/252980 "2020-10-28T09:09:54Z")
New to ELK. I want to collect data from two hardware devices and measure and visualise the throughput of those devices. The idea is the following: Two devices send data to Elasticsearch. In Kibana i create a dashboard t… --- ## [How to add a button in kibana 7.8.1 dashboard](https://discuss.elastic.co/t/how-to-add-a-button-in-kibana-7-8-1-dashboard/253402)
**Author:** [@Abhi6](https://discuss.elastic.co/u/Abhi6)\ **Replies:** 6\ **Last updated:** [October 28, 2020, 9:06am UTC](https://discuss.elastic.co/t/how-to-add-a-button-in-kibana-7-8-1-dashboard/253402 "2020-10-28T09:06:04Z")
Is there any way to add a button to kibana dashboard --- ## [Term aggregation size well with in search.max\_buckets, still getting too-many-bucket errors](https://discuss.elastic.co/t/term-aggregation-size-well-with-in-search-max-buckets-still-getting-too-many-bucket-errors/253535)
**Author:** [@nicholasb](https://discuss.elastic.co/u/nicholasb)\ **Replies:** 0\ **Last updated:** [October 28, 2020, 9:00am UTC](https://discuss.elastic.co/t/term-aggregation-size-well-with-in-search-max-buckets-still-getting-too-many-bucket-errors/253535 "2020-10-28T09:00:27Z")
The ES setup is with single-node and single-shard. There are around 15000 records being added on a given 8-hour window on a specific index. The search.max\_buckets is set to 10000. For the following query, if the size is… --- ## [Possible memory leak in Logstash 6.8.10](https://discuss.elastic.co/t/possible-memory-leak-in-logstash-6-8-10/253526)
**Author:** [@shreyas29](https://discuss.elastic.co/u/shreyas29)\ **Replies:** 0\ **Last updated:** [October 28, 2020, 8:04am UTC](https://discuss.elastic.co/t/possible-memory-leak-in-logstash-6-8-10/253526 "2020-10-28T08:04:20Z")
Version: Logstash 6.8.10 Operating System: Ubuntu 16.04 Config File (if you have sensitive info, please remove it): Not possible to share Sample Data: NA Steps to Reproduce: NA We are using Logstash in one of our micro… --- ## [Elasticsearch won't even try to launch](https://discuss.elastic.co/t/elasticsearch-wont-even-try-to-launch/253339)
**Author:** [@larslevie](https://discuss.elastic.co/u/larslevie)\ **Replies:** 4\ **Last updated:** [October 28, 2020, 7:30am UTC](https://discuss.elastic.co/t/elasticsearch-wont-even-try-to-launch/253339 "2020-10-28T07:30:52Z")
Try to deploy Elasticsearch into a new EKS 1.18 cluster. For some reason no Elasticsearch instances will even attempt to launch, i.e. not pods even attempt to start. The operator just sits in a reconciliation loop and no… --- ## [Pipeline aborted due to error - exception=\>java.lang.ClassCastException - Error while fetching data using Salesforce plugin](https://discuss.elastic.co/t/pipeline-aborted-due-to-error-exception-java-lang-classcastexception-error-while-fetching-data-using-salesforce-plugin/253439)
**Author:** [@Pavitra\_Poojary](https://discuss.elastic.co/u/Pavitra_Poojary)\ **Replies:** 6\ **Last updated:** [October 28, 2020, 6:35am UTC](https://discuss.elastic.co/t/pipeline-aborted-due-to-error-exception-java-lang-classcastexception-error-while-fetching-data-using-salesforce-plugin/253439 "2020-10-28T06:35:47Z")
Hi, I am trying to pull the Salesforce data using the salesforce plugin available in Logstash. Below is my configuration. ELK Version : 7.4 input { salesforce { use\_test\_sandbox =\> true client\_id =\> 'xxx' … --- ## [Maximum Heap Size for Server with 192GB RAM](https://discuss.elastic.co/t/maximum-heap-size-for-server-with-192gb-ram/253277)
**Author:** [@gnome](https://discuss.elastic.co/u/gnome)\ **Replies:** 5\ **Last updated:** [October 28, 2020, 5:57am UTC](https://discuss.elastic.co/t/maximum-heap-size-for-server-with-192gb-ram/253277 "2020-10-28T05:57:18Z")
Good day everyone. I spend some time read up the maximum heap size can be allocated for ElasticSearch Server, most of it said recommend maximum of 32GB or 1/2 of your physical memory. I have a server with 192GB of Ram, … --- ## [Update by query don't accept user-defined param in java high level client](https://discuss.elastic.co/t/update-by-query-dont-accept-user-defined-param-in-java-high-level-client/226927)
**Author:** [@tnarita](https://discuss.elastic.co/u/tnarita)\ **Replies:** 8\ **Last updated:** [October 28, 2020, 3:49am UTC](https://discuss.elastic.co/t/update-by-query-dont-accept-user-defined-param-in-java-high-level-client/226927 "2020-10-28T03:49:01Z")
Hi, I'm using REST High Level Client in v7.5 I'm getting error when I tried to update all document by UpdateByQueryRequest. Error message : cannot write xcontent for unknown value of type class entity.Navigation Belo… --- ## [java.net.ConnectException: Connection timed out: no further information](https://discuss.elastic.co/t/java-net-connectexception-connection-timed-out-no-further-information/253513)
**Author:** [@carolcoral](https://discuss.elastic.co/u/carolcoral)\ **Replies:** 0\ **Last updated:** [October 28, 2020, 3:22am UTC](https://discuss.elastic.co/t/java-net-connectexception-connection-timed-out-no-further-information/253513 "2020-10-28T03:22:50Z")
Java version:1.8 Es version:7.9.2 Es java maven: \ \org.elasticsearch.client\ \elasticsearch-rest-high-level-client\ \7.9.3\ \… --- ## [Authenticated Kibana Iframe with the Authorization header](https://discuss.elastic.co/t/authenticated-kibana-iframe-with-the-authorization-header/251521)
**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\ **Replies:** 4\ **Last updated:** [October 28, 2020, 2:22am UTC](https://discuss.elastic.co/t/authenticated-kibana-iframe-with-the-authorization-header/251521 "2020-10-28T02:22:35Z")
Hi, I am trying to embed a Kibana dashboard in my React app. To address security concerns, I am trying to add an authorization header to all requests that are being sent to Kibana so that a proxy service can intercept t… --- ## [\[bug\] big decimal value losed precision](https://discuss.elastic.co/t/bug-big-decimal-value-losed-precision/253105)
**Author:** [@vpzlin](https://discuss.elastic.co/u/vpzlin)\ **Replies:** 10\ **Last updated:** [October 28, 2020, 2:09am UTC](https://discuss.elastic.co/t/bug-big-decimal-value-losed-precision/253105 "2020-10-28T02:09:56Z")
Hello, ES team! There is a precision losing problem when I'm using java client of ElasticSearch. Will you fix this bug recently? We do need a big decimal in developing financial system. Thanks very much! \[Development… --- ## [Cluster eventually starts giving absurdly wrong counts on search](https://discuss.elastic.co/t/cluster-eventually-starts-giving-absurdly-wrong-counts-on-search/252096)
**Author:** [@caarlos0](https://discuss.elastic.co/u/caarlos0)\ **Replies:** 3\ **Last updated:** [October 28, 2020, 2:06am UTC](https://discuss.elastic.co/t/cluster-eventually-starts-giving-absurdly-wrong-counts-on-search/252096 "2020-10-28T02:06:05Z")
We have a cluster running version 5.6.16. It has ~5.7k primary shards, ~2k indices and 28 nodes (3 masters, 3 coordinators and 22 data nodes): { "cluster\_name": "foo", "status": "green", "timed\_out": false, "num… --- ## [Creating dynamic watcher](https://discuss.elastic.co/t/creating-dynamic-watcher/252473)
**Author:** [@Wilbert\_Silverio](https://discuss.elastic.co/u/Wilbert_Silverio)\ **Replies:** 6\ **Last updated:** [October 28, 2020, 1:02am UTC](https://discuss.elastic.co/t/creating-dynamic-watcher/252473 "2020-10-28T01:02:28Z")
Hi All, we had a watcher wherein it sends us a notification when the transactions are going in per hour. we wanted to create a dynamic watcher wherein it checks for the peak hours and checks during off-peak hours. Can s… --- ## [Dynamically move nested fields to the top level](https://discuss.elastic.co/t/dynamically-move-nested-fields-to-the-top-level/253504)
**Author:** [@jiacob](https://discuss.elastic.co/u/jiacob)\ **Replies:** 0\ **Last updated:** [October 28, 2020, 12:02am UTC](https://discuss.elastic.co/t/dynamically-move-nested-fields-to-the-top-level/253504 "2020-10-28T00:02:44Z")
Hello, I am trying to parse an XML message with lots of nested fields. I am using the XML filter to parse the data and send it to Elasticsearch. The issue that I am having is that the XML path to the value is too large. … --- ## [Logstash \[7.8\] problem with an elastic update doc](https://discuss.elastic.co/t/logstash-7-8-problem-with-an-elastic-update-doc/253370)
**Author:** [@unknown\_user](https://discuss.elastic.co/u/unknown_user)\ **Replies:** 2\ **Last updated:** [October 27, 2020, 10:27pm UTC](https://discuss.elastic.co/t/logstash-7-8-problem-with-an-elastic-update-doc/253370 "2020-10-27T22:27:34Z")
Hi Guys, Running into a bit of an issue that I am trying to overcome. I have a index that only updates documents, specifically I am monitoring devices that are either in an UP or DOWN status and the doc\_id is the name … --- ## [Geo\_shape field for document index not showing on map for polygons](https://discuss.elastic.co/t/geo-shape-field-for-document-index-not-showing-on-map-for-polygons/253343)
**Author:** [@MarkCarroll](https://discuss.elastic.co/u/MarkCarroll)\ **Replies:** 1\ **Last updated:** [October 27, 2020, 10:20pm UTC](https://discuss.elastic.co/t/geo-shape-field-for-document-index-not-showing-on-map-for-polygons/253343 "2020-10-27T22:20:10Z")
Hello. I am trying to display geo\_shape polygon data on a Kibana map, using a document index. The map seems to be loading successfully as it zooms to where the polygon should be but there is no polygon drawn. I have cr… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1175) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1177)