# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1177

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1178

---

## [Error getting details for process](https://discuss.elastic.co/t/error-getting-details-for-process/253061)

<div class="topic-metadata">

**Author:** [@gnordli](https://discuss.elastic.co/u/gnordli)\
**Replies:** 3\
**Last updated:** [October 27, 2020, 10:14pm UTC](https://discuss.elastic.co/t/error-getting-details-for-process/253061 "2020-10-27T22:14:34Z")

</div>

I am seeing quite a few log entries like this. The Endpoint agent is running as the local system account. { "@timestamp": "2020-10-22T17:46:14.800Z", "message": "Error getting details for process services.exe with …

---

## [Masking password in logstash config file](https://discuss.elastic.co/t/masking-password-in-logstash-config-file/253368)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 3\
**Last updated:** [October 27, 2020, 9:03pm UTC](https://discuss.elastic.co/t/masking-password-in-logstash-config-file/253368 "2020-10-27T21:03:53Z")

</div>

Hello all, As logstash config file is not centrally controlled, I want to mask the elasticsearch password in logstash.conf file so that it is not visible to all. Also user with what "security role" should suffice for m…

---

## [Documents version getting set to -1](https://discuss.elastic.co/t/documents-version-getting-set-to-1/253492)

<div class="topic-metadata">

**Author:** [@natasha\_adewar](https://discuss.elastic.co/u/natasha_adewar)\
**Replies:** 0\
**Last updated:** [October 27, 2020, 8:50pm UTC](https://discuss.elastic.co/t/documents-version-getting-set-to-1/253492 "2020-10-27T20:50:38Z")

</div>

We are migrating ES from 2.4 to 5.6. Before migrating we copy all the documents from Index A to Index B. After migrating to 5.6 we are seeing many of the documents version on Index B is getting set to -1, hence the dele…

---

## [Invalid index name \[\_security\], must not start with '\_', '-', or '+'](https://discuss.elastic.co/t/invalid-index-name-security-must-not-start-with-or/253448)

<div class="topic-metadata">

**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\
**Replies:** 10\
**Last updated:** [October 27, 2020, 8:41pm UTC](https://discuss.elastic.co/t/invalid-index-name-security-must-not-start-with-or/253448 "2020-10-27T20:41:19Z")

</div>

Elasticsearch version :6.3.0

---

## [Logstash to Logstash (Lumberjack) host details](https://discuss.elastic.co/t/logstash-to-logstash-lumberjack-host-details/253390)

<div class="topic-metadata">

**Author:** [@cliff.wakefield](https://discuss.elastic.co/u/cliff.wakefield)\
**Replies:** 3\
**Last updated:** [October 27, 2020, 8:36pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-lumberjack-host-details/253390 "2020-10-27T20:36:30Z")

</div>

I am setting up a two-tier Logstash setup for our customers. On-premises servers running syslog and beats will connect to 1 or more on-premises Logstash servers, which will be running syslog and beats pipelines configur…

---

## [S3 Input Plugin Does Not Delete The Temporary Files](https://discuss.elastic.co/t/s3-input-plugin-does-not-delete-the-temporary-files/253483)

<div class="topic-metadata">

**Author:** [@Rahul\_Kumar4](https://discuss.elastic.co/u/Rahul_Kumar4)\
**Replies:** 3\
**Last updated:** [October 27, 2020, 8:12pm UTC](https://discuss.elastic.co/t/s3-input-plugin-does-not-delete-the-temporary-files/253483 "2020-10-27T20:12:45Z")

</div>

The S3 input plugin does not delete the temporary files that it creates from the downloaded objects from S3 bucket even after processing and indexing it to Elasticsearch. Is there a work around/setting to automate this? …

---

## [Shorten\_url api does not return urlId](https://discuss.elastic.co/t/shorten-url-api-does-not-return-urlid/253342)

<div class="topic-metadata">

**Author:** [@tshayan](https://discuss.elastic.co/u/tshayan)\
**Replies:** 2\
**Last updated:** [October 27, 2020, 7:54pm UTC](https://discuss.elastic.co/t/shorten-url-api-does-not-return-urlid/253342 "2020-10-27T19:54:17Z")

</div>

Hello, I have followed the shorten\_url api documentation to create a new shortened URL, however in response I am only getting a confirmation and not the urlID as per the documentation. I am doing this via Kibana's dev-…

---

## [Ingest Pipeline with Grok Processor cannot index all files](https://discuss.elastic.co/t/ingest-pipeline-with-grok-processor-cannot-index-all-files/252594)

<div class="topic-metadata">

**Author:** [@morningkaren](https://discuss.elastic.co/u/morningkaren)\
**Replies:** 5\
**Last updated:** [October 27, 2020, 6:22pm UTC](https://discuss.elastic.co/t/ingest-pipeline-with-grok-processor-cannot-index-all-files/252594 "2020-10-27T18:22:28Z")

</div>

Hello, In Python, I created an ingest pipeline with a grok processor to look for names in the file.filename field like so : body = { "description" : "name\_search\_test pipeline", "processors" : \[ …

---

## [ES Sorting on datetimestamp](https://discuss.elastic.co/t/es-sorting-on-datetimestamp/253476)

<div class="topic-metadata">

**Author:** [@Amit-Singh](https://discuss.elastic.co/u/Amit-Singh)\
**Replies:** 1\
**Last updated:** [October 27, 2020, 6:14pm UTC](https://discuss.elastic.co/t/es-sorting-on-datetimestamp/253476 "2020-10-27T18:14:02Z")

</div>

Hi Elasticsearch community, I have a doubt/ask, I need to get the latest record from the hits based on a date timestamp column. The format of date time column i.e. 'time': 'Mon Oct 26 20:04:11 2020' Kindly help me out …

---

## [Проблема GC на нодах-координаторах](https://discuss.elastic.co/t/gc/252266)

<div class="topic-metadata">

**Author:** [@ans\_x](https://discuss.elastic.co/u/ans_x)\
**Replies:** 3\
**Last updated:** [October 27, 2020, 5:51pm UTC](https://discuss.elastic.co/t/gc/252266 "2020-10-27T17:51:34Z")

</div>

Версия кластера 7.8.1 Версия ES на коордиаторах 7.9.2 (обновляли вместе с новой java) Java: openjdk 15 2020-09-15 ES в докере. Конфиг ES тут: Config ES Конфиг JVM тут: Config JVM Вывод GET \_cluster/stats тут: clust…

---

## [Create a weekly report](https://discuss.elastic.co/t/create-a-weekly-report/253457)

<div class="topic-metadata">

**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\
**Replies:** 0\
**Last updated:** [October 27, 2020, 3:23pm UTC](https://discuss.elastic.co/t/create-a-weekly-report/253457 "2020-10-27T15:23:52Z")

</div>

I've created a dashboard per bossman's requested and now he asks it to be delivered by mail every week. Unfortunately with a zero budget, I'm looking for an alternative for the paid subscription provided in kibana. Does…

---

## [Add Synonym Analyzer for Keyword field](https://discuss.elastic.co/t/add-synonym-analyzer-for-keyword-field/253469)

<div class="topic-metadata">

**Author:** [@Coder\_Cub](https://discuss.elastic.co/u/Coder_Cub)\
**Replies:** 0\
**Last updated:** [October 27, 2020, 4:23pm UTC](https://discuss.elastic.co/t/add-synonym-analyzer-for-keyword-field/253469 "2020-10-27T16:23:12Z")

</div>

Hi everyone, I am stuck here for adding Synonym Analyzer to Keyword field while creating my index. Can you please help how can I achieve this or what am I missing? Use case: A person can have multiple nick names. If …

---

## [Terms aggregation on a keyword field returns no results](https://discuss.elastic.co/t/terms-aggregation-on-a-keyword-field-returns-no-results/253436)

<div class="topic-metadata">

**Author:** [@akhilmathew001](https://discuss.elastic.co/u/akhilmathew001)\
**Replies:** 1\
**Last updated:** [October 27, 2020, 2:52pm UTC](https://discuss.elastic.co/t/terms-aggregation-on-a-keyword-field-returns-no-results/253436 "2020-10-27T14:52:09Z")

</div>

I have Elastic search v7.2 with an index of 20 million documents. Part of es schema is as follows; { "properties": { "industries\_name": { "copy\_to": \[ "keyword\_search\_copy\_to\_field" \], "ty…

---

## [Supress errors from logstash input plugin](https://discuss.elastic.co/t/supress-errors-from-logstash-input-plugin/253414)

<div class="topic-metadata">

**Author:** [@nitzan.karni](https://discuss.elastic.co/u/nitzan.karni)\
**Replies:** 1\
**Last updated:** [October 27, 2020, 2:15pm UTC](https://discuss.elastic.co/t/supress-errors-from-logstash-input-plugin/253414 "2020-10-27T14:15:30Z")

</div>

Hi, I have set up a logstash input for syslog: syslog { port =\> 6514 codec =\> cef tags =\> \[ "syslog" \] } I have different kind of syslogs running through that input. I have messages that arrives in cef fo…

---

## [Multiple Kibana users and limit access](https://discuss.elastic.co/t/multiple-kibana-users-and-limit-access/253141)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 4\
**Last updated:** [October 27, 2020, 1:47pm UTC](https://discuss.elastic.co/t/multiple-kibana-users-and-limit-access/253141 "2020-10-27T13:47:53Z")

</div>

Hello, I have this scenario: I installed auditbeat in 2 machines and created 2 users in Kibana: User 1: can access only index that has the names: Audibeat-machine-1 User 2: can access only index that has the names: Au…

---

## [Engineer 2 - Issues with course progression since UI update](https://discuss.elastic.co/t/engineer-2-issues-with-course-progression-since-ui-update/253274)

<div class="topic-metadata">

**Author:** [@remnerud](https://discuss.elastic.co/u/remnerud)\
**Replies:** 4\
**Last updated:** [October 27, 2020, 1:45pm UTC](https://discuss.elastic.co/t/engineer-2-issues-with-course-progression-since-ui-update/253274 "2020-10-27T13:45:26Z")

</div>

A couple of days ago I noticed there was an update to course material page (nice btw) for the on demand course material for Elasticsearch Engineer 2. Since the update however I am having an issue that the course progres…

---

## [ResourceNotFoundException when running percolator query](https://discuss.elastic.co/t/resourcenotfoundexception-when-running-percolator-query/253440)

<div class="topic-metadata">

**Author:** [@makons](https://discuss.elastic.co/u/makons)\
**Replies:** 0\
**Last updated:** [October 27, 2020, 12:52pm UTC](https://discuss.elastic.co/t/resourcenotfoundexception-when-running-percolator-query/253440 "2020-10-27T12:52:27Z")

</div>

I'm getting a lot of ResourceNotFoundExceptions when using percolator queries, and I cannot seem to fully understand why... So the document that is reported to be missing in an index, indeed is not there, but I don't und…

---

## [Index patterns global and per rule?](https://discuss.elastic.co/t/index-patterns-global-and-per-rule/253109)

<div class="topic-metadata">

**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\
**Replies:** 2\
**Last updated:** [October 27, 2020, 12:44pm UTC](https://discuss.elastic.co/t/index-patterns-global-and-per-rule/253109 "2020-10-27T12:44:59Z")

</div>

Hi, I know, that I have to set in Stack Management/Kibana/Advanced which Indices are considered when SIEM is doing it's magic. But I just recently realised there are another "index patterns" per rule. Are these mere re…

---

## [Gsub backslash escape and continue when error](https://discuss.elastic.co/t/gsub-backslash-escape-and-continue-when-error/253282)

<div class="topic-metadata">

**Author:** [@bnmtl](https://discuss.elastic.co/u/bnmtl)\
**Replies:** 1\
**Last updated:** [October 27, 2020, 12:01pm UTC](https://discuss.elastic.co/t/gsub-backslash-escape-and-continue-when-error/253282 "2020-10-27T12:01:41Z")

</div>

Hi, I have json input, and using codec =\> json { charset =\> "UTF-8" } I see that logstash giving Json::ParserError: Unrecognized character escape '' when I am getting message below; "incoming": "\\u001Btb��01w" I used …

---

## [Input / Index configuration for log browsing. Differences due to disabled xpack?](https://discuss.elastic.co/t/input-index-configuration-for-log-browsing-differences-due-to-disabled-xpack/253427)

<div class="topic-metadata">

**Author:** [@AndreasS](https://discuss.elastic.co/u/AndreasS)\
**Replies:** 0\
**Last updated:** [October 27, 2020, 11:21am UTC](https://discuss.elastic.co/t/input-index-configuration-for-log-browsing-differences-due-to-disabled-xpack/253427 "2020-10-27T11:21:32Z")

</div>

Hello, sorry for the absolute noob question. Edit: just found the solution myself. Please ignore it, nothing interesting to see here anymore... :wink: I am looking for a solution to brows all my codes (running in some…

---

## [ILM Lifecycle limit of total fields](https://discuss.elastic.co/t/ilm-lifecycle-limit-of-total-fields/253420)

<div class="topic-metadata">

**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\
**Replies:** 0\
**Last updated:** [October 27, 2020, 10:47am UTC](https://discuss.elastic.co/t/ilm-lifecycle-limit-of-total-fields/253420 "2020-10-27T10:47:21Z")

</div>

Created ILM successfully couple of weeks ago for multi topics but one of topics I am getting error messages on logstash log - limit of total field 1000 for footy-000013. I added below: PUT micky\_aaa\_footy\*/\_settings { …

---

## [Ingest pipeline not working correctly?](https://discuss.elastic.co/t/ingest-pipeline-not-working-correctly/253291)

<div class="topic-metadata">

**Author:** [@iamtheliquor](https://discuss.elastic.co/u/iamtheliquor)\
**Replies:** 2\
**Last updated:** [October 27, 2020, 10:36am UTC](https://discuss.elastic.co/t/ingest-pipeline-not-working-correctly/253291 "2020-10-27T10:36:55Z")

</div>

Hi everybody, We have two pipelines, that are identical, one is for staging and one is for production logs; { "staging\_pipeline" : { "description" : "Staging Pipeline", "processors" : \[ …

---

## [Rally 2.0.2 released](https://discuss.elastic.co/t/rally-2-0-2-released/253404)

<div class="topic-metadata">

**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\
**Replies:** 0\
**Last updated:** [October 27, 2020, 8:59am UTC](https://discuss.elastic.co/t/rally-2-0-2-released/253404 "2020-10-27T08:59:09Z")

</div>

We have just released Rally 2.0.2. This is mostly a bug fix release also adding a few enhancements: The force-merge operation supports a polling mode which is useful if an intermediate proxy is in between the client an…

---

## [Boxplot and Histogram with Basic subscription](https://discuss.elastic.co/t/boxplot-and-histogram-with-basic-subscription/253147)

<div class="topic-metadata">

**Author:** [@Johann\_Hochtl](https://discuss.elastic.co/u/Johann_Hochtl)\
**Replies:** 1\
**Last updated:** [October 27, 2020, 8:43am UTC](https://discuss.elastic.co/t/boxplot-and-histogram-with-basic-subscription/253147 "2020-10-27T08:43:12Z")

</div>

Hello, I want to create a Boxplot aggregation, but the documentation is spare. According to the subscription overview, histogramm and boxplot should be available in my Basic Subscription.

---

## [Kibana search bar in dashboard](https://discuss.elastic.co/t/kibana-search-bar-in-dashboard/252801)

<div class="topic-metadata">

**Author:** [@sus](https://discuss.elastic.co/u/sus)\
**Replies:** 2\
**Last updated:** [October 27, 2020, 7:39am UTC](https://discuss.elastic.co/t/kibana-search-bar-in-dashboard/252801 "2020-10-27T07:39:38Z")

</div>

Hi! Im working in Kibana 7.8.1. I have a dashboard with a controls visualization and a table. The controls visualization has a dropdown menu - at the moment I dont have more than 100 data entries, but sooner than later…

---

## [Sending Rsyslog data to logstash](https://discuss.elastic.co/t/sending-rsyslog-data-to-logstash/249066)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 6\
**Last updated:** [October 27, 2020, 7:25am UTC](https://discuss.elastic.co/t/sending-rsyslog-data-to-logstash/249066 "2020-10-27T07:25:26Z")

</div>

I've configured two linux server for sending client rsyslog data to server.The server is receiving messages from client and i've installed elk service on server side now i want to send the rsyslog data (which the server …

---

## [Cannot detect ES Version - Elasticsearch/Cloudera Hive Connectivity](https://discuss.elastic.co/t/cannot-detect-es-version-elasticsearch-cloudera-hive-connectivity/253168)

<div class="topic-metadata">

**Author:** [@bob1985](https://discuss.elastic.co/u/bob1985)\
**Replies:** 3\
**Last updated:** [October 27, 2020, 7:15am UTC](https://discuss.elastic.co/t/cannot-detect-es-version-elasticsearch-cloudera-hive-connectivity/253168 "2020-10-27T07:15:05Z")

</div>

Hi, I am creating a Cloudera CDH 6.1.2 Hive connection (bare metal cluster) with Elasticsearch 7.9.3 (in openshift environment) I am getting below error while selecting the data from the table. Error: java.io.IOExcept…

---

## [Como crear alerta en watcher advance? para las metricas de basicas de CPU, MEMORIA](https://discuss.elastic.co/t/como-crear-alerta-en-watcher-advance-para-las-metricas-de-basicas-de-cpu-memoria/253362)

<div class="topic-metadata">

**Author:** [@aandrewsllp](https://discuss.elastic.co/u/aandrewsllp)\
**Replies:** 1\
**Last updated:** [October 27, 2020, 7:09am UTC](https://discuss.elastic.co/t/como-crear-alerta-en-watcher-advance-para-las-metricas-de-basicas-de-cpu-memoria/253362 "2020-10-27T07:09:45Z")

</div>

como crear alerta en watcher advance?? necesito ayuda

---

## [Constant SocketException: Broken pipe for selective indices while taking snapshot to AWS](https://discuss.elastic.co/t/constant-socketexception-broken-pipe-for-selective-indices-while-taking-snapshot-to-aws/253389)

<div class="topic-metadata">

**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\
**Replies:** 0\
**Last updated:** [October 27, 2020, 6:28am UTC](https://discuss.elastic.co/t/constant-socketexception-broken-pipe-for-selective-indices-while-taking-snapshot-to-aws/253389 "2020-10-27T06:28:49Z")

</div>

We have been facing a strange issue while taking snapshot of all the indices in our cluster. Issuing an API call to take snapshot works fine every time for some indices but fail every time for a few indices. Taking snap…

---

## [Logstash clustering issue](https://discuss.elastic.co/t/logstash-clustering-issue/251777)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 8\
**Last updated:** [October 27, 2020, 6:17am UTC](https://discuss.elastic.co/t/logstash-clustering-issue/251777 "2020-10-27T06:17:46Z")

</div>

Im having Elasticsearch clustering and my output.conf in logstash, looks like below hosts =\> \["node1:9200","node2:9200","node3:9200"\] So through java, Im updating output.conf and starting logstash. Now in case my elast…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1176)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1178)
