# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1225

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1226

---

## [Kibana plugin 7.9.1 has the setup interface, what is in 7.5.1 can i use](https://discuss.elastic.co/t/kibana-plugin-7-9-1-has-the-setup-interface-what-is-in-7-5-1-can-i-use/249209)

<div class="topic-metadata">

**Author:** [@li\_H](https://discuss.elastic.co/u/li_H)\
**Replies:** 1\
**Last updated:** [September 23, 2020, 9:16am UTC](https://discuss.elastic.co/t/kibana-plugin-7-9-1-has-the-setup-interface-what-is-in-7-5-1-can-i-use/249209 "2020-09-23T09:16:10Z")

</div>

In 7.9.1 version of kibana, plugin.ts file there is setup interface. export class SoupLoginPlugin implements Plugin\<SoupLoginPluginSetup, SoupLoginPluginStart\> { public setup(core: CoreSetup, deps: {}) {} } how can in…

---

## [Failover mechanism of master nodes](https://discuss.elastic.co/t/failover-mechanism-of-master-nodes/249504)

<div class="topic-metadata">

**Author:** [@Shubham\_Mittal](https://discuss.elastic.co/u/Shubham_Mittal)\
**Replies:** 3\
**Last updated:** [September 23, 2020, 9:04am UTC](https://discuss.elastic.co/t/failover-mechanism-of-master-nodes/249504 "2020-09-23T09:04:14Z")

</div>

I have one web application in which IP address of one the 3 master eligible nodes is configured for using elasticsearch. Now if this configured node goes down, and my web app will hit the same IP address, will the reque…

---

## [Default index routing allocation](https://discuss.elastic.co/t/default-index-routing-allocation/249621)

<div class="topic-metadata">

**Author:** [@Mathmarc](https://discuss.elastic.co/u/Mathmarc)\
**Replies:** 1\
**Last updated:** [September 23, 2020, 8:53am UTC](https://discuss.elastic.co/t/default-index-routing-allocation/249621 "2020-09-23T08:53:05Z")

</div>

Does there is a way to force all new index, to be route to some specific nodes ? Lets say I have 8 nodes with: 6 nodes with "node.attr.group": "data" 2 nodes without group For now every times a new index, is created…

---

## [Importing Saved Objects API Error 413](https://discuss.elastic.co/t/importing-saved-objects-api-error-413/249550)

<div class="topic-metadata">

**Author:** [@Bustencio](https://discuss.elastic.co/u/Bustencio)\
**Replies:** 1\
**Last updated:** [September 23, 2020, 8:34am UTC](https://discuss.elastic.co/t/importing-saved-objects-api-error-413/249550 "2020-09-23T08:34:24Z")

</div>

Hi, I'm trying to import into Kibana a file created by using the export endpoint where I backup every object saved in a specific space including everything available (dashboards, index-patterns, visualizations, etc etc.…

---

## [Configure role based access for specific dashboards](https://discuss.elastic.co/t/configure-role-based-access-for-specific-dashboards/248429)

<div class="topic-metadata">

**Author:** [@sharmashrayansh](https://discuss.elastic.co/u/sharmashrayansh)\
**Replies:** 8\
**Last updated:** [September 23, 2020, 8:18am UTC](https://discuss.elastic.co/t/configure-role-based-access-for-specific-dashboards/248429 "2020-09-23T08:18:37Z")

</div>

Hello, We are evaluating Kibana and ElasticSearch for a new project. We wish to create Dashboards to monitor issue status and activity, and it is going good so far. But one of the key requirements we have is that speci…

---

## [How to return unmatched record with different score](https://discuss.elastic.co/t/how-to-return-unmatched-record-with-different-score/248704)

<div class="topic-metadata">

**Author:** [@Ankit\_Pradhan](https://discuss.elastic.co/u/Ankit_Pradhan)\
**Replies:** 2\
**Last updated:** [September 23, 2020, 8:16am UTC](https://discuss.elastic.co/t/how-to-return-unmatched-record-with-different-score/248704 "2020-09-23T08:16:52Z")

</div>

i have 2 document ... document 1 { "field1": "Value1", "field2": "Value2", "field3": "Value3" } document 2 { "field1": "Value1", "field2": "Value2" } When I do a search with "field1": "Value1" and "field2": …

---

## [How? Use sample dashboards mit custom indices](https://discuss.elastic.co/t/how-use-sample-dashboards-mit-custom-indices/249104)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 1\
**Last updated:** [September 23, 2020, 8:15am UTC](https://discuss.elastic.co/t/how-use-sample-dashboards-mit-custom-indices/249104 "2020-09-23T08:15:57Z")

</div>

Hi there, I managed to import from the sample dashboards for 1 beat only 1 module in a specific space. Now my question is this: Do you know a trick how to define / change that the sample dashboards do not take the stand…

---

## [Server Error on fresh install of Kibana on Ubuntu 18.04](https://discuss.elastic.co/t/server-error-on-fresh-install-of-kibana-on-ubuntu-18-04/249201)

<div class="topic-metadata">

**Author:** [@Francisco\_Lema](https://discuss.elastic.co/u/Francisco_Lema)\
**Replies:** 2\
**Last updated:** [September 23, 2020, 8:05am UTC](https://discuss.elastic.co/t/server-error-on-fresh-install-of-kibana-on-ubuntu-18-04/249201 "2020-09-23T08:05:30Z")

</div>

Hi there, on a fresh install of the ELK Stack I get the following error: "Wrapper@http://10.10.100.86:1011/33813/bundles/core/core.entry.js:28:7854 \_createSuperInternal@http://10.10.100.86:1011/33813/bundles/core/core…

---

## [Migrating saved objects across spaces](https://discuss.elastic.co/t/migrating-saved-objects-across-spaces/249496)

<div class="topic-metadata">

**Author:** [@Abhilash\_B](https://discuss.elastic.co/u/Abhilash_B)\
**Replies:** 5\
**Last updated:** [September 23, 2020, 7:53am UTC](https://discuss.elastic.co/t/migrating-saved-objects-across-spaces/249496 "2020-09-23T07:53:53Z")

</div>

Kibana version: 6.8.1 Elasticsearch version: 6.8.1 I have two spaces, space 1 and space 2. I have 10 saved objects in space 1 and 0 saved objects in space 2. When I try to export all saved objects(including index patte…

---

## ["old" log files.log max number retained](https://discuss.elastic.co/t/old-log-files-log-max-number-retained/249589)

<div class="topic-metadata">

**Author:** [@ginolegigot](https://discuss.elastic.co/u/ginolegigot)\
**Replies:** 0\
**Last updated:** [September 22, 2020, 10:22pm UTC](https://discuss.elastic.co/t/old-log-files-log-max-number-retained/249589 "2020-09-22T22:22:22Z")

</div>

Hello! My problem is about setting properly a max number of retained files (\*.log). Here the beginning my log4j.j2: status = error # log action execution errors for easier debugging logger.action.name = org.elasticse…

---

## [Failed to execute action {:action=\>logstash::pipelineaction::create/pipeline](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline/249383)

<div class="topic-metadata">

**Author:** [@ludovic.denee](https://discuss.elastic.co/u/ludovic.denee)\
**Replies:** 4\
**Last updated:** [September 23, 2020, 7:25am UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline/249383 "2020-09-23T07:25:17Z")

</div>

Hi, I'm new in ELK and i'm trying to run the logstash with the default files and I still have the error message attached. I don't understand why this behavior. (see attached print screen) can you help me ? I already tr…

---

## [Multiple statements in logstash JDBC Input](https://discuss.elastic.co/t/multiple-statements-in-logstash-jdbc-input/249450)

<div class="topic-metadata">

**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\
**Replies:** 5\
**Last updated:** [September 23, 2020, 7:20am UTC](https://discuss.elastic.co/t/multiple-statements-in-logstash-jdbc-input/249450 "2020-09-23T07:20:29Z")

</div>

Hello, I have configured jdbc input plugin with 3 statements as below ( providing just an example ) input { jdbc { statement =\> "select from DATABASE1 where TRANSACTION\_DATE \> :sql\_last\_value" use\_column\_valu…

---

## [Backup & restore Logs configuration](https://discuss.elastic.co/t/backup-restore-logs-configuration/248586)

<div class="topic-metadata">

**Author:** [@Lolo\_Bee](https://discuss.elastic.co/u/Lolo_Bee)\
**Replies:** 4\
**Last updated:** [September 23, 2020, 6:29am UTC](https://discuss.elastic.co/t/backup-restore-logs-configuration/248586 "2020-09-23T06:29:04Z")

</div>

Hi, I'm trying to backup & restore Log Streams configuration i.e. indexes and fields used to represent Log Streams in kibana, but I'm unable to find a way to do that. Is it possible by using an API endpoint? Kind regar…

---

## [Nested array contain many problem](https://discuss.elastic.co/t/nested-array-contain-many-problem/249610)

<div class="topic-metadata">

**Author:** [@mich4s](https://discuss.elastic.co/u/mich4s)\
**Replies:** 1\
**Last updated:** [September 23, 2020, 6:11am UTC](https://discuss.elastic.co/t/nested-array-contain-many-problem/249610 "2020-09-23T06:11:00Z")

</div>

Hello, I cannot find anywhere example of that kind of query. What I need to achieve is filter that kind of documents: { "id": "11097a6a-2f9c-4717-9b21-4d675727b879", "options": \[ "ONE", "TWO", "FOUR" …

---

## [Query script for postfix queue id groupping](https://discuss.elastic.co/t/query-script-for-postfix-queue-id-groupping/249512)

<div class="topic-metadata">

**Author:** [@diecode](https://discuss.elastic.co/u/diecode)\
**Replies:** 2\
**Last updated:** [September 23, 2020, 5:40am UTC](https://discuss.elastic.co/t/query-script-for-postfix-queue-id-groupping/249512 "2020-09-23T05:40:29Z")

</div>

Hey, I created ELK stack, and I saving postfix logs into an index. I created grok patters for mail\_from, mail\_to and queue\_id so I store them in fields. When I'm searching a mail\_from or mail\_to, I need copy the queue\_i…

---

## [How elastic search support encryption of data at Rest](https://discuss.elastic.co/t/how-elastic-search-support-encryption-of-data-at-rest/249573)

<div class="topic-metadata">

**Author:** [@Vivek\_Sagar](https://discuss.elastic.co/u/Vivek_Sagar)\
**Replies:** 3\
**Last updated:** [September 23, 2020, 5:13am UTC](https://discuss.elastic.co/t/how-elastic-search-support-encryption-of-data-at-rest/249573 "2020-09-23T05:13:57Z")

</div>

How does ES support encryption of data at Rest? I read in many prior discussions that it can be achieved by OS level encryption like dm-crypt which is supported in Elastic Search platinum subscription. But still data wi…

---

## [S3\_repository error](https://discuss.elastic.co/t/s3-repository-error/249340)

<div class="topic-metadata">

**Author:** [@prashanth\_sri](https://discuss.elastic.co/u/prashanth_sri)\
**Replies:** 4\
**Last updated:** [September 23, 2020, 3:54am UTC](https://discuss.elastic.co/t/s3-repository-error/249340 "2020-09-23T03:54:57Z")

</div>

{"error":{"root\_cause":\[{"type":"repository\_exception","reason":"\[s3\_repository\] could not read repository data from index blob"}\], "type":"repository\_exception","reason":"\[s3\_repository\] could not read repository data …

---

## [ElasticSearch 7 start up error - the default discovery settings are unsuitable for production use](https://discuss.elastic.co/t/elasticsearch-7-start-up-error-the-default-discovery-settings-are-unsuitable-for-production-use/249222)

<div class="topic-metadata">

**Author:** [@linfordwoode](https://discuss.elastic.co/u/linfordwoode)\
**Replies:** 3\
**Last updated:** [September 23, 2020, 1:07am UTC](https://discuss.elastic.co/t/elasticsearch-7-start-up-error-the-default-discovery-settings-are-unsuitable-for-production-use/249222 "2020-09-23T01:07:40Z")

</div>

I am having this issue( the default discovery settings are unsuitable for production use: at least one of \[discovery.seed\_hosts, discovery.seed\_providers, cluster.initial\_master\_nodes\] must be configured) with my Elastic…

---

## [Set "target" in JSON filter to be variable](https://discuss.elastic.co/t/set-target-in-json-filter-to-be-variable/249434)

<div class="topic-metadata">

**Author:** [@Mohamed\_Saeed](https://discuss.elastic.co/u/Mohamed_Saeed)\
**Replies:** 2\
**Last updated:** [September 23, 2020, 12:36am UTC](https://discuss.elastic.co/t/set-target-in-json-filter-to-be-variable/249434 "2020-09-23T00:36:10Z")

</div>

I'm trying to use json filter to parse logs but I want to save them under a new field. I know that I can do something like the following: filter { json{ source =\> "message" target =\> …

---

## [CloudFront log arrived as giant blob, how to make it searchable in Kibana?](https://discuss.elastic.co/t/cloudfront-log-arrived-as-giant-blob-how-to-make-it-searchable-in-kibana/249167)

<div class="topic-metadata">

**Author:** [@jchiu](https://discuss.elastic.co/u/jchiu)\
**Replies:** 1\
**Last updated:** [September 23, 2020, 12:15am UTC](https://discuss.elastic.co/t/cloudfront-log-arrived-as-giant-blob-how-to-make-it-searchable-in-kibana/249167 "2020-09-23T00:15:12Z")

</div>

Hello All, Relatively new to the ELK world and I am having trouble making the information in the CloudFront log searchable in Kibana. Let me explain in detail: I was able to have CF (CloudFront) logs delivered to log…

---

## [Is it possible to limit retrieved documents based on a sum aggregation?](https://discuss.elastic.co/t/is-it-possible-to-limit-retrieved-documents-based-on-a-sum-aggregation/249582)

<div class="topic-metadata">

**Author:** [@jmwilkinson](https://discuss.elastic.co/u/jmwilkinson)\
**Replies:** 1\
**Last updated:** [September 22, 2020, 11:18pm UTC](https://discuss.elastic.co/t/is-it-possible-to-limit-retrieved-documents-based-on-a-sum-aggregation/249582 "2020-09-22T23:18:49Z")

</div>

Lets say i have the documents: {"name": "foo", "size": 1} {"name": "bar", "size": 10} {"name": "baz", "size": 2} {"name": "fred", "size": 5} I could perform the following aggregation: POST /my-docs/\_search?size=0 { …

---

## [Logstash not listening](https://discuss.elastic.co/t/logstash-not-listening/249325)

<div class="topic-metadata">

**Author:** [@Chandana\_Koppal](https://discuss.elastic.co/u/Chandana_Koppal)\
**Replies:** 1\
**Last updated:** [September 22, 2020, 10:27pm UTC](https://discuss.elastic.co/t/logstash-not-listening/249325 "2020-09-22T22:27:16Z")

</div>

2020-09-21T11:01:30.174+0530 INFO cfgfile/reload.go:224 Loading of config files completed. 2020-09-21T11:01:31.181+0530 INFO \[publisher\_pipeline\_output\] pipeline/output.go:143 Connecting to backoff(as…

---

## [Increase the query per sec and latency for very less data](https://discuss.elastic.co/t/increase-the-query-per-sec-and-latency-for-very-less-data/249345)

<div class="topic-metadata">

**Author:** [@Nupur](https://discuss.elastic.co/u/Nupur)\
**Replies:** 1\
**Last updated:** [September 22, 2020, 10:26pm UTC](https://discuss.elastic.co/t/increase-the-query-per-sec-and-latency-for-very-less-data/249345 "2020-09-22T22:26:41Z")

</div>

how to do horizontal scaling to increase the query/s and latency when i have very less data(less than 50 mb) and only one shard

---

## [Language Identification in Elastic Cloud](https://discuss.elastic.co/t/language-identification-in-elastic-cloud/249498)

<div class="topic-metadata">

**Author:** [@antony\_kavin](https://discuss.elastic.co/u/antony_kavin)\
**Replies:** 2\
**Last updated:** [September 22, 2020, 10:19pm UTC](https://discuss.elastic.co/t/language-identification-in-elastic-cloud/249498 "2020-09-22T22:19:36Z")

</div>

Hi team, I am currently on platinum plan of Elastic cloud. I want to use the Language Identification feature in elasticsearch.I would like to use identify the language of a text field and add it as a separate column be…

---

## [Elasticsearch in Geoportal](https://discuss.elastic.co/t/elasticsearch-in-geoportal/249323)

<div class="topic-metadata">

**Author:** [@Durga07](https://discuss.elastic.co/u/Durga07)\
**Replies:** 4\
**Last updated:** [September 22, 2020, 9:53pm UTC](https://discuss.elastic.co/t/elasticsearch-in-geoportal/249323 "2020-09-22T21:53:20Z")

</div>

Hi I am using Elasticsearch in Geoportal. I don't have much knowledge on Search engines. I went through the Lucene Search Text Queries(Lucene Search Syntax) in which it is mentioned that we should use double quotes ("w…

---

## [Run additional options for logstash in docker container](https://discuss.elastic.co/t/run-additional-options-for-logstash-in-docker-container/249578)

<div class="topic-metadata">

**Author:** [@vinci](https://discuss.elastic.co/u/vinci)\
**Replies:** 2\
**Last updated:** [September 22, 2020, 8:31pm UTC](https://discuss.elastic.co/t/run-additional-options-for-logstash-in-docker-container/249578 "2020-09-22T20:31:59Z")

</div>

Hello, I would like to run logstash as such: logstash -e 'input { stdin {}} output { stdout {}}' but within a docker container, using the logstash official image. Is there a way I can do this? I simply want to test th…

---

## [How do I disable enterprise search in Kibana 7.9?](https://discuss.elastic.co/t/how-do-i-disable-enterprise-search-in-kibana-7-9/249559)

<div class="topic-metadata">

**Author:** [@Rhonda\_Gregory](https://discuss.elastic.co/u/Rhonda_Gregory)\
**Replies:** 2\
**Last updated:** [September 22, 2020, 7:45pm UTC](https://discuss.elastic.co/t/how-do-i-disable-enterprise-search-in-kibana-7-9/249559 "2020-09-22T19:45:33Z")

</div>

Our elastic/kibana instances reside on an air gapped network so we can not leverage the features of enterprise search. Are there configuration settings for kibana.yml that we can use to disable this feature? We would a…

---

## [Data node not able to discover master node](https://discuss.elastic.co/t/data-node-not-able-to-discover-master-node/249570)

<div class="topic-metadata">

**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\
**Replies:** 4\
**Last updated:** [September 22, 2020, 7:04pm UTC](https://discuss.elastic.co/t/data-node-not-able-to-discover-master-node/249570 "2020-09-22T19:04:55Z")

</div>

I have 1 master eligible node and 1 data node Master config: # ---------------------------------- Cluster ----------------------------------- cluster.name: ELS\_Cluster # ------------------------------------ Node ------…

---

## [SIEM, Auditbeat Queries](https://discuss.elastic.co/t/siem-auditbeat-queries/249571)

<div class="topic-metadata">

**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\
**Replies:** 0\
**Last updated:** [September 22, 2020, 5:42pm UTC](https://discuss.elastic.co/t/siem-auditbeat-queries/249571 "2020-09-22T17:42:16Z")

</div>

Hi there, I am trying out Elastic Siem 7.7 with Auditbeat 7.7 on Red Hat 7.6 and I have a few questions. Is SIEM data available only when I set Auditbeat output to elasticsearch? I try output to logstash-\>elasticsearc…

---

## [Dashboard для web-аналитики: количество посетителей и продолжительность сессии](https://discuss.elastic.co/t/dashboard-web/249415)

<div class="topic-metadata">

**Author:** [@Slavik\_Fursov](https://discuss.elastic.co/u/Slavik_Fursov)\
**Replies:** 7\
**Last updated:** [September 22, 2020, 4:33pm UTC](https://discuss.elastic.co/t/dashboard-web/249415 "2020-09-22T16:33:06Z")

</div>

Я собираю nginx web access and error logs в Elastic с помощью Filebeat. Хочу чтобы была dashboard, в которой была вот такая информация: количество посетителей за период времени. Сейчас есть количество requests, но нуж…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1224)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1226)
