# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1178 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1179 --- ## [Remove "Install Beats" notice from Observability Overview](https://discuss.elastic.co/t/remove-install-beats-notice-from-observability-overview/252960)
**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\ **Replies:** 2\ **Last updated:** [October 27, 2020, 6:13am UTC](https://discuss.elastic.co/t/remove-install-beats-notice-from-observability-overview/252960 "2020-10-27T06:13:19Z")
Hey, can I somehow remove the "Install ..." Notices and Resources? thanks --- ## [SIEM Threshold Based Rules - Show several fields value](https://discuss.elastic.co/t/siem-threshold-based-rules-show-several-fields-value/253385)
**Author:** [@Kambing](https://discuss.elastic.co/u/Kambing)\ **Replies:** 0\ **Last updated:** [October 27, 2020, 4:41am UTC](https://discuss.elastic.co/t/siem-threshold-based-rules-show-several-fields-value/253385 "2020-10-27T04:41:16Z")
Hi, I already create threshold based detection and it was successfully detected. But I realize it only has specific fields to display and is different from Query based detection which contain all fields when the rules tr… --- ## [Best strategy for fast recoveries after node restart](https://discuss.elastic.co/t/best-strategy-for-fast-recoveries-after-node-restart/253381)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 0\ **Last updated:** [October 27, 2020, 2:35am UTC](https://discuss.elastic.co/t/best-strategy-for-fast-recoveries-after-node-restart/253381 "2020-10-27T02:35:06Z")
We have a 90 node cluster running in an Azure Service Fabric application. We have a few services in this application (logstash, a watchdog service, some compliance services, etc.). We occasionally need to roll updates ou… --- ## [How to Auto Login Kibana Dashboard which embedded in Iframe](https://discuss.elastic.co/t/how-to-auto-login-kibana-dashboard-which-embedded-in-iframe/252975)
**Author:** [@Ram\_Chaudhari](https://discuss.elastic.co/u/Ram_Chaudhari)\ **Replies:** 3\ **Last updated:** [October 27, 2020, 1:23am UTC](https://discuss.elastic.co/t/how-to-auto-login-kibana-dashboard-which-embedded-in-iframe/252975 "2020-10-27T01:23:35Z")
I am using angular 8 for front end application where we have dashboard page where a iframe of kibana dashboard will be present. If user logins to application, he should automatically get logged in to kibana also. How can… --- ## [How to format inregular json-string like this?](https://discuss.elastic.co/t/how-to-format-inregular-json-string-like-this/253375)
**Author:** [@knight](https://discuss.elastic.co/u/knight)\ **Replies:** 0\ **Last updated:** [October 27, 2020, 1:12am UTC](https://discuss.elastic.co/t/how-to-format-inregular-json-string-like-this/253375 "2020-10-27T01:12:39Z")
i have a json-string like this : { "aa":"123", "bb":"hello", "cc":"===this is inregular json==={"dd":"world","ee":"logstash"}" } now,the config file in logstash is : input { kafka { bootstrap\_servers… --- ## [How to remove document I logstash pipilnie that has no usefull fields](https://discuss.elastic.co/t/how-to-remove-document-i-logstash-pipilnie-that-has-no-usefull-fields/253243)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 8\ **Last updated:** [October 26, 2020, 11:53pm UTC](https://discuss.elastic.co/t/how-to-remove-document-i-logstash-pipilnie-that-has-no-usefull-fields/253243 "2020-10-26T23:53:44Z")
Hello, I use the logstash SNMP plugin to query my device. After that, I do some split and field renaming as below. input { snmp { interval =\> 5 hosts =\> \[ {host =\> "udp:ip/port" communit… --- ## [Changing role of a pod node](https://discuss.elastic.co/t/changing-role-of-a-pod-node/253371)
**Author:** [@asrinivasan](https://discuss.elastic.co/u/asrinivasan)\ **Replies:** 0\ **Last updated:** [October 26, 2020, 11:49pm UTC](https://discuss.elastic.co/t/changing-role-of-a-pod-node/253371 "2020-10-26T23:49:18Z")
Hi I have a cluster with 5 master nodes and 10 data nodes deployed on GKE using the stable helm charts. Version is 7.2.0. When i setup the cluster initially i had 5 nodes which had alll the roles master,data and ingest… --- ## [Kibana export API](https://discuss.elastic.co/t/kibana-export-api/253359)
**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\ **Replies:** 3\ **Last updated:** [October 26, 2020, 9:42pm UTC](https://discuss.elastic.co/t/kibana-export-api/253359 "2020-10-26T21:42:35Z")
Hello, I am trying to export a canvas using this: Now the request requires a type, but when I set canvas it says {"statusCode":400,"error":"Bad Request","message":"Trying to export non-exportable type(s): \*"} Ther… --- ## [Computers with no data in metrics inventory](https://discuss.elastic.co/t/computers-with-no-data-in-metrics-inventory/252246)
**Author:** [@0xDECAFBAD](https://discuss.elastic.co/u/0xDECAFBAD)\ **Replies:** 4\ **Last updated:** [October 26, 2020, 8:51pm UTC](https://discuss.elastic.co/t/computers-with-no-data-in-metrics-inventory/252246 "2020-10-26T20:51:54Z")
I have a couple computers that used to have the Elastic Agent installed and reporting metric data. Now that they are no longer reporting metric data they still show up on the metric inventory screen in Kibana showing 0% … --- ## [{"statusCode":404,"error":"Not Found","message":"Not Found"} after security](https://discuss.elastic.co/t/statuscode-404-error-not-found-message-not-found-after-security/252730)
**Author:** [@txmrlevine](https://discuss.elastic.co/u/txmrlevine)\ **Replies:** 13\ **Last updated:** [October 26, 2020, 8:10pm UTC](https://discuss.elastic.co/t/statuscode-404-error-not-found-message-not-found-after-security/252730 "2020-10-26T20:10:51Z")
after implementing the following lines in my 7.7.1 nodes I try to bring up Kibana and AFTER I use the login credentials I supplied in the password-setup binary I get the 404. I created the cert on the master node and p… --- ## [Logstash problem](https://discuss.elastic.co/t/logstash-problem/253349)
**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\ **Replies:** 1\ **Last updated:** [October 26, 2020, 7:53pm UTC](https://discuss.elastic.co/t/logstash-problem/253349 "2020-10-26T19:53:13Z")
Logstash version 7.1.1 after restart logstash I am getting below log message but not sure what is issue. Please advise. tail /var/log/logstash/logstash-plain.log \[2020-09-28T09:23:05,009\]\[WARN \]\[logstash.outputs.elasti… --- ## [Logstash-input-salesforce](https://discuss.elastic.co/t/logstash-input-salesforce/252906)
**Author:** [@eemtzc](https://discuss.elastic.co/u/eemtzc)\ **Replies:** 5\ **Last updated:** [October 26, 2020, 7:09pm UTC](https://discuss.elastic.co/t/logstash-input-salesforce/252906 "2020-10-26T19:09:37Z")
Hello, Right now in the actuallyty we are running a Elastic Cluster v 7.5.2 with a Logstash 6.4.2 we want to upgrade our cluster to v 7.9.2 but the only reason we are not able to do this is because in this Logstash serv… --- ## [Problema en la devolucion de doc en elastic serach con query de fechas](https://discuss.elastic.co/t/problema-en-la-devolucion-de-doc-en-elastic-serach-con-query-de-fechas/253340)
**Author:** [@joseantonio.sanchez](https://discuss.elastic.co/u/joseantonio.sanchez)\ **Replies:** 1\ **Last updated:** [October 26, 2020, 7:03pm UTC](https://discuss.elastic.co/t/problema-en-la-devolucion-de-doc-en-elastic-serach-con-query-de-fechas/253340 "2020-10-26T19:03:05Z")
Buenas tardes, estoy programando desde php la consulta a elastic para que me devuelva los datos. desde le php le estoy pasando un para con los siguientes datos: $params = \[ 'scroll' =\> '30s', // how long bet… --- ## [How to store iis x-forwarded-for ip with field type IPORHOST](https://discuss.elastic.co/t/how-to-store-iis-x-forwarded-for-ip-with-field-type-iporhost/253186)
**Author:** [@Thanura\_Kannangara](https://discuss.elastic.co/u/Thanura_Kannangara)\ **Replies:** 4\ **Last updated:** [October 26, 2020, 6:16pm UTC](https://discuss.elastic.co/t/how-to-store-iis-x-forwarded-for-ip-with-field-type-iporhost/253186 "2020-10-26T18:16:31Z")
I'm trying to grok these entries #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken X-Forwarded-For 2020-10-23… --- ## [Endpoint not detecting installed plugins](https://discuss.elastic.co/t/endpoint-not-detecting-installed-plugins/253352)
**Author:** [@columbian\_chris](https://discuss.elastic.co/u/columbian_chris)\ **Replies:** 0\ **Last updated:** [October 26, 2020, 5:03pm UTC](https://discuss.elastic.co/t/endpoint-not-detecting-installed-plugins/253352 "2020-10-26T17:03:04Z")
I have installed a couple plugins into my elasticsearch setup, but nothing gets listed when I use the /\_cat/plugins endpoint. I can confirm that they're installed because bin/elasticsearch-plugin list correctly lists th… --- ## [Monitor Internal Servers up/down](https://discuss.elastic.co/t/monitor-internal-servers-up-down/252752)
**Author:** [@Ej\_Eric\_H](https://discuss.elastic.co/u/Ej_Eric_H)\ **Replies:** 1\ **Last updated:** [October 26, 2020, 4:39pm UTC](https://discuss.elastic.co/t/monitor-internal-servers-up-down/252752 "2020-10-26T16:39:45Z")
Hello all, I am new to elastic. What is the ideal way to setup server monitoring to know when a server is down? --- ## [Documentation error](https://discuss.elastic.co/t/documentation-error/253330)
**Author:** [@gborg](https://discuss.elastic.co/u/gborg)\ **Replies:** 1\ **Last updated:** [October 26, 2020, 4:39pm UTC](https://discuss.elastic.co/t/documentation-error/253330 "2020-10-26T16:39:01Z")
In the logstash mutete filter documentation there seems to be an error, or at least it seems like an error to me mutate { split =\> \["hostname", "."\] add\_field =\> { "shortHostname" =\> "%{hostname\[0\]… --- ## [O/p not getting in console](https://discuss.elastic.co/t/o-p-not-getting-in-console/253344)
**Author:** [@Sakthivanan](https://discuss.elastic.co/u/Sakthivanan)\ **Replies:** 0\ **Last updated:** [October 26, 2020, 4:31pm UTC](https://discuss.elastic.co/t/o-p-not-getting-in-console/253344 "2020-10-26T16:31:41Z")
Hi All, I m trying to load CSV file for that i used below config file.its running without error in cmd prompt but I didnt get output. This my CSV File with header cds,rtype,schoolname,districtname,countyname,charter\_f… --- ## [Elastic LDAP config issues](https://discuss.elastic.co/t/elastic-ldap-config-issues/252880)
**Author:** [@dmartinezz23](https://discuss.elastic.co/u/dmartinezz23)\ **Replies:** 8\ **Last updated:** [October 26, 2020, 4:09pm UTC](https://discuss.elastic.co/t/elastic-ldap-config-issues/252880 "2020-10-26T16:09:39Z")
Hello, I’m working on setting up Ldap/AD auth. However, I’m not sure what I’m missing here. In terms of logging, I’m not seeing much of anything in Kibana or Elasticsearch at all. Mainly due to the logs getting clobbered… --- ## [Problem with query date elastichsearch with php](https://discuss.elastic.co/t/problem-with-query-date-elastichsearch-with-php/253336)
**Author:** [@joseantonio.sanchez](https://discuss.elastic.co/u/joseantonio.sanchez)\ **Replies:** 0\ **Last updated:** [October 26, 2020, 3:43pm UTC](https://discuss.elastic.co/t/problem-with-query-date-elastichsearch-with-php/253336 "2020-10-26T15:43:56Z")
good afternoon, I am making a query from php to elasticsearch, I give you some parameters $params = \[ 'scroll' =\> '30s', // how long between scroll requests. should be small! 'size' =\> 300, //… --- ## [No logs after enable TLS](https://discuss.elastic.co/t/no-logs-after-enable-tls/253337)
**Author:** [@LuWe](https://discuss.elastic.co/u/LuWe)\ **Replies:** 0\ **Last updated:** [October 26, 2020, 3:57pm UTC](https://discuss.elastic.co/t/no-logs-after-enable-tls/253337 "2020-10-26T15:57:12Z")
Hi, i have a ELK-cluster to log a firewall. That worked well until i enabled TLS/SSL. Now Kibana do not show new logs. Here ist one of the config files: input { udp { port =\> 514 type =\> firewall } } filter { if \[type\]… --- ## [How to only use score of best matching term](https://discuss.elastic.co/t/how-to-only-use-score-of-best-matching-term/253317)
**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\ **Replies:** 2\ **Last updated:** [October 26, 2020, 3:53pm UTC](https://discuss.elastic.co/t/how-to-only-use-score-of-best-matching-term/253317 "2020-10-26T15:53:43Z")
Hey I have four terms, Term\_A, Term\_B, Term\_C and Term\_D. I would like to do something like this: { "query": { "bool" : { "should" : \[ { "term" : { "tags\_field" : "Term\_A" } }, … --- ## [Kibana latency display bug or real?](https://discuss.elastic.co/t/kibana-latency-display-bug-or-real/252882)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 2\ **Last updated:** [October 26, 2020, 3:44pm UTC](https://discuss.elastic.co/t/kibana-latency-display-bug-or-real/252882 "2020-10-26T15:44:49Z")
With a kibana instance 7.9.2 running ingest manager I have about 100 clients connected. Looking in stack monitor everything appears fine CPU usage is low RAM is not under any pressure and disk io at storage and VM level… --- ## [Has\_child query match children-less parent](https://discuss.elastic.co/t/has-child-query-match-children-less-parent/253325)
**Author:** [@rfferrao](https://discuss.elastic.co/u/rfferrao)\ **Replies:** 1\ **Last updated:** [October 26, 2020, 3:36pm UTC](https://discuss.elastic.co/t/has-child-query-match-children-less-parent/253325 "2020-10-26T15:36:59Z")
Is it possible to do this? Here's what I've tried: { "query": { "bool": { "should": { "has\_child": { "type": "group", "query": { "bool": { "should": { "match\_all": { } } } }, … --- ## [Logstash combining dissect and grok to add date to my timestamps without date](https://discuss.elastic.co/t/logstash-combining-dissect-and-grok-to-add-date-to-my-timestamps-without-date/253314)
**Author:** [@bobmaza](https://discuss.elastic.co/u/bobmaza)\ **Replies:** 0\ **Last updated:** [October 26, 2020, 1:27pm UTC](https://discuss.elastic.co/t/logstash-combining-dissect-and-grok-to-add-date-to-my-timestamps-without-date/253314 "2020-10-26T13:27:50Z")
Hi, i totally new to the elastic stack, and currently working on a dash board for logs through kibana, but i'm still at the data ingestion stage unfortunately ! took me some days to learn how to make things work, frist… --- ## [Is Kibana Capable to use right to left (for Arabic) graphics and Arabic characters?](https://discuss.elastic.co/t/is-kibana-capable-to-use-right-to-left-for-arabic-graphics-and-arabic-characters/253210)
**Author:** [@fiore\_el](https://discuss.elastic.co/u/fiore_el)\ **Replies:** 1\ **Last updated:** [October 26, 2020, 2:59pm UTC](https://discuss.elastic.co/t/is-kibana-capable-to-use-right-to-left-for-arabic-graphics-and-arabic-characters/253210 "2020-10-26T14:59:48Z")
Is Kibana Capable to use right to left graphics/chars and Arabic characters? We want to use it do create a complete Arabic Dashboards --- ## [Create a table counting the number of buckets having same count (count pipeline ?)](https://discuss.elastic.co/t/create-a-table-counting-the-number-of-buckets-having-same-count-count-pipeline/252914)
**Author:** [@tenchi](https://discuss.elastic.co/u/tenchi)\ **Replies:** 3\ **Last updated:** [October 26, 2020, 2:46pm UTC](https://discuss.elastic.co/t/create-a-table-counting-the-number-of-buckets-having-same-count-count-pipeline/252914 "2020-10-26T14:46:11Z")
Hello, I have an index with a line for each customer order. I am trying to get a visualization table listing the number of customers ordering several times, with one line per number of recurrent orders. Number of … --- ## [Coordinating node license requirement](https://discuss.elastic.co/t/coordinating-node-license-requirement/253279)
**Author:** [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\ **Replies:** 1\ **Last updated:** [October 26, 2020, 2:41pm UTC](https://discuss.elastic.co/t/coordinating-node-license-requirement/253279 "2020-10-26T14:41:26Z")
Hi Team, We have 5 Nodes cluster with Platinum license . Now we are planning to add 1 coordinating node for request/response. Do we require additional license for coordinating node ? Regards, Jalpesh --- ## [Efficient kv parser - replacement?](https://discuss.elastic.co/t/efficient-kv-parser-replacement/253320)
**Author:** [@wedkarz014](https://discuss.elastic.co/u/wedkarz014)\ **Replies:** 0\ **Last updated:** [October 26, 2020, 2:17pm UTC](https://discuss.elastic.co/t/efficient-kv-parser-replacement/253320 "2020-10-26T14:17:54Z")
Hi, In filter part I have a parser like here: kv { field\_split =\> "," trim\_value =\> "\\"" value\_split =\> "=" include\_keys =\> \["Hostname","SlotId","EOCTimestamp","RequestStartTimestamp","ResponseStartTi… --- ## [Elastic Ingest Pipeline with enrich processor to enrich nested objects](https://discuss.elastic.co/t/elastic-ingest-pipeline-with-enrich-processor-to-enrich-nested-objects/253044)
**Author:** [@bgiordano](https://discuss.elastic.co/u/bgiordano)\ **Replies:** 2\ **Last updated:** [October 26, 2020, 1:36pm UTC](https://discuss.elastic.co/t/elastic-ingest-pipeline-with-enrich-processor-to-enrich-nested-objects/253044 "2020-10-26T13:36:39Z")
What is the correct syntax for the enrich processor to access field for enrichment for an object within an array? This works to get access to field in single object, as shown in the example provided. This is what I am s… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1177) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1179)