# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1244 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1245 --- ## [Detecting Master\_Not\_Discovered faster](https://discuss.elastic.co/t/detecting-master-not-discovered-faster/248047)
**Author:** [@nicolaet](https://discuss.elastic.co/u/nicolaet)\ **Replies:** 1\ **Last updated:** [September 9, 2020, 7:16pm UTC](https://discuss.elastic.co/t/detecting-master-not-discovered-faster/248047 "2020-09-09T19:16:30Z")
Hello, I have a 2 node cluster - and that means that there is a chance, that i will run into the situation where one node remains but it can't elect a master. That's OK. But what i want is to be able to detect this fas… --- ## [Cannot view Strigo Endpoint Desktop](https://discuss.elastic.co/t/cannot-view-strigo-endpoint-desktop/248049)
**Author:** [@chris\_clare](https://discuss.elastic.co/u/chris_clare)\ **Replies:** 3\ **Last updated:** [September 9, 2020, 6:05pm UTC](https://discuss.elastic.co/t/cannot-view-strigo-endpoint-desktop/248049 "2020-09-09T18:05:45Z")
Currently taking the Endpoint Security Fundamentals course. The lab requires the use of the Strigo Endpoint desktop but I cannot view it. It is just a black screen. When I resize I can see the blue desktop momentarily bu… --- ## [Logstash missing XML records](https://discuss.elastic.co/t/logstash-missing-xml-records/248044)
**Author:** [@stevedbarnes](https://discuss.elastic.co/u/stevedbarnes)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 4:49pm UTC](https://discuss.elastic.co/t/logstash-missing-xml-records/248044 "2020-09-09T16:49:50Z")
Hi, I am consuming large (~600Mb) XML files with one line of data in the file. I am able to (mostly) consume the data using Logstash using xpath to extract fields from the XML and I am stuck on an issue I can't get arou… --- ## [Getting unauthorized when attempting to get api\_base\_url from ECE](https://discuss.elastic.co/t/getting-unauthorized-when-attempting-to-get-api-base-url-from-ece/248005)
**Author:** [@mdcrtse](https://discuss.elastic.co/u/mdcrtse)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 12:59pm UTC](https://discuss.elastic.co/t/getting-unauthorized-when-attempting-to-get-api-base-url-from-ece/248005 "2020-09-09T12:59:47Z")
I am attempting to retrieve the api base url from an ECE environment. When I issue the following command: curl -s -k -XGET https://XXX.YYY.ZZZ:12443/api/v1/platform/configuration/api\_base\_url -H "Authorization: Bearer … --- ## [Query on a date field that contains only a time value](https://discuss.elastic.co/t/query-on-a-date-field-that-contains-only-a-time-value/246823)
**Author:** [@rastro](https://discuss.elastic.co/u/rastro)\ **Replies:** 3\ **Last updated:** [September 9, 2020, 4:30pm UTC](https://discuss.elastic.co/t/query-on-a-date-field-that-contains-only-a-time-value/246823 "2020-09-09T16:30:08Z")
I have a full date field (epoch\_second), but I also want to be able to query based on the just the time, so I made another date field ("time" with "hour\_minute\_second" format). By default, Kibana shows this "time" field… --- ## [Indexing weighted terms (or fake term frequency)](https://discuss.elastic.co/t/indexing-weighted-terms-or-fake-term-frequency/248034)
**Author:** [@Hannes\_Korte](https://discuss.elastic.co/u/Hannes_Korte)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 3:21pm UTC](https://discuss.elastic.co/t/indexing-weighted-terms-or-fake-term-frequency/248034 "2020-09-09T15:21:09Z")
Hi, I am looking for a way to fake the frequency of terms in a field at index time. It's kind of a boost for a specific term in a specific document. Imagine your docs are people with each having a map of weighted skill… --- ## [How to take snapshot of one elasticsearch instance and restore into another instance](https://discuss.elastic.co/t/how-to-take-snapshot-of-one-elasticsearch-instance-and-restore-into-another-instance/248030)
**Author:** [@aman97](https://discuss.elastic.co/u/aman97)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 2:48pm UTC](https://discuss.elastic.co/t/how-to-take-snapshot-of-one-elasticsearch-instance-and-restore-into-another-instance/248030 "2020-09-09T14:48:10Z")
hello, Everyone, I am trying to take a snapshot of an elasticsearch instance and restore on another elasticsearch instance for that, I followed the standard steps elastic\_01 and elastic\_02 have this folder "/elastics… --- ## [Elastic Ingestion problem](https://discuss.elastic.co/t/elastic-ingestion-problem/248022)
**Author:** [@Anthony\_Pope](https://discuss.elastic.co/u/Anthony_Pope)\ **Replies:** 2\ **Last updated:** [September 9, 2020, 2:50pm UTC](https://discuss.elastic.co/t/elastic-ingestion-problem/248022 "2020-09-09T14:50:31Z")
Hi, I have a problem about ingestion process in elasticsearch. I use a Java program to ingest some documents in elasticsearch using HTTP node as a claster entry (I send request to an HTTP node). I have noticed that th… --- ## [Examples/help please - how to query arrays of data in TSVB tables?](https://discuss.elastic.co/t/examples-help-please-how-to-query-arrays-of-data-in-tsvb-tables/247922)
**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\ **Replies:** 3\ **Last updated:** [September 9, 2020, 2:20pm UTC](https://discuss.elastic.co/t/examples-help-please-how-to-query-arrays-of-data-in-tsvb-tables/247922 "2020-09-09T14:20:58Z")
I have a use case, which I need some help with, please. I'd like to create a metric in TSVB Table, where I can report the sum of a field, across a variable number (not fixed number) of documents. i.e. if I have docs wi… --- ## [Writing raw mapping\_error events from the Logstash DLQ to Elasticsearch](https://discuss.elastic.co/t/writing-raw-mapping-error-events-from-the-logstash-dlq-to-elasticsearch/248024)
**Author:** [@Yor\_On](https://discuss.elastic.co/u/Yor_On)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 1:59pm UTC](https://discuss.elastic.co/t/writing-raw-mapping-error-events-from-the-logstash-dlq-to-elasticsearch/248024 "2020-09-09T13:59:49Z")
Hi, I'm trying to find a way to get the raw data of messages that fail on mapping errors from my Logstash's Dead Letter Queues to Elasticsearch so I can look into the reasons why the messages ended up in the DLQ in the … --- ## [Generate daily report](https://discuss.elastic.co/t/generate-daily-report/247993)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 6\ **Last updated:** [September 9, 2020, 1:57pm UTC](https://discuss.elastic.co/t/generate-daily-report/247993 "2020-09-09T13:57:34Z")
I have a dashboard in kibana (version 7.9.0). I need the dashboard to be exported to a PDF or an excel spreadsheet daily and emailed to someone. The time for the results should be in the last 24 hours. This doc page sug… --- ## [Es-Sql-Query - http client did not trust this server's certificate](https://discuss.elastic.co/t/es-sql-query-http-client-did-not-trust-this-servers-certificate/248019)
**Author:** [@Jose\_H](https://discuss.elastic.co/u/Jose_H)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 1:46pm UTC](https://discuss.elastic.co/t/es-sql-query-http-client-did-not-trust-this-servers-certificate/248019 "2020-09-09T13:46:41Z")
Hi all, Im having issues with getting data from my index, using elasticsearch-sql-cli: /usr/share/elasticsearch/bin/elasticsearch-sql-cli https://elastic:my-password@elastic.local:9200 ERROR: Cannot communicate with t… --- ## [How to increase the performance of logging in elasticsearch](https://discuss.elastic.co/t/how-to-increase-the-performance-of-logging-in-elasticsearch/248018)
**Author:** [@galet](https://discuss.elastic.co/u/galet)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 1:41pm UTC](https://discuss.elastic.co/t/how-to-increase-the-performance-of-logging-in-elasticsearch/248018 "2020-09-09T13:41:18Z")
I have multiple logs in my elasticsearch plugin app which will be logged during ingest and search. I want to reduce the time taken to log the events in all log files when multiple ingest or bulk ingest happens. Same for… --- ## [Elastic stuck and flooded with "monitoring execution failed"](https://discuss.elastic.co/t/elastic-stuck-and-flooded-with-monitoring-execution-failed/247881)
**Author:** [@ludaca](https://discuss.elastic.co/u/ludaca)\ **Replies:** 9\ **Last updated:** [September 9, 2020, 1:14pm UTC](https://discuss.elastic.co/t/elastic-stuck-and-flooded-with-monitoring-execution-failed/247881 "2020-09-09T13:14:20Z")
Hello, ES 5.6.10 under k8s cluster v1.9 xpack.security disabled 16 data nodes Large number of unassigned shards that do not go down at all. \[2020-09-08T11:15:40,655\]\[WARN \]\[o.e.x.m.MonitoringService\] \[es-data05-0\] … --- ## [502 Bad Gateway](https://discuss.elastic.co/t/502-bad-gateway/247921)
**Author:** [@Jarek](https://discuss.elastic.co/u/Jarek)\ **Replies:** 3\ **Last updated:** [September 9, 2020, 1:12pm UTC](https://discuss.elastic.co/t/502-bad-gateway/247921 "2020-09-09T13:12:15Z")
Hi, We use Elasticsearch 7.8.0. The problem we have is the "502 Bad Gateway" error that appears very often. The problem seems to occur between ms proxy and Kibana, but there is no information in the Kibana logs what cou… --- ## [Xpack computation](https://discuss.elastic.co/t/xpack-computation/248000)
**Author:** [@whiletruelearn](https://discuss.elastic.co/u/whiletruelearn)\ **Replies:** 1\ **Last updated:** [September 9, 2020, 1:03pm UTC](https://discuss.elastic.co/t/xpack-computation/248000 "2020-09-09T13:03:03Z")
Hi, I read about the concept of ml nodes for xpack. But since xpack itself is a form of a plugin , i was curious to know where the actual compute is happening? Is it internally some form of a rest service where data is… --- ## [Only access to Management Kibana: Spaces, Users and Roles](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615)
**Author:** [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\ **Replies:** 8\ **Last updated:** [September 9, 2020, 12:47pm UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615 "2020-09-09T12:47:28Z")
Hi community, for certain Users I would like to know how to configure Kibana management in such a manner that these Users only have acces in Kibana Management to: Spaces: to create and modify Users: to create and modif… --- ## [Kibana 7.9.0 does not start when setting path.data](https://discuss.elastic.co/t/kibana-7-9-0-does-not-start-when-setting-path-data/246632)
**Author:** [@jlthorel](https://discuss.elastic.co/u/jlthorel)\ **Replies:** 4\ **Last updated:** [September 9, 2020, 12:23pm UTC](https://discuss.elastic.co/t/kibana-7-9-0-does-not-start-when-setting-path-data/246632 "2020-09-09T12:23:02Z")
Hello, I have an issue with Kibana 7.9.0. Kibana does not start when I set the parameter path.data I have the following error message Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read… --- ## [Bulk index if not exists](https://discuss.elastic.co/t/bulk-index-if-not-exists/247912)
**Author:** [@noorul.m](https://discuss.elastic.co/u/noorul.m)\ **Replies:** 4\ **Last updated:** [September 9, 2020, 9:45am UTC](https://discuss.elastic.co/t/bulk-index-if-not-exists/247912 "2020-09-09T09:45:52Z")
I have the following document structure { "id": "977373", "name": "Air Odisha" } I want to create documents in bulk only if id and name are not present already. --- ## [How to config logstash filter to remove new line in the field csv file](https://discuss.elastic.co/t/how-to-config-logstash-filter-to-remove-new-line-in-the-field-csv-file/247985)
**Author:** [@111207](https://discuss.elastic.co/u/111207)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 9:29am UTC](https://discuss.elastic.co/t/how-to-config-logstash-filter-to-remove-new-line-in-the-field-csv-file/247985 "2020-09-09T09:29:23Z")
Hi Everyone I need to parse csv file with logstash and ingest data to elasticsearch But the some column in csv file have new line This is my input --- ## [Unable to load ASA logs in SIEM](https://discuss.elastic.co/t/unable-to-load-asa-logs-in-siem/247977)
**Author:** [@Kupauw](https://discuss.elastic.co/u/Kupauw)\ **Replies:** 1\ **Last updated:** [September 9, 2020, 9:22am UTC](https://discuss.elastic.co/t/unable-to-load-asa-logs-in-siem/247977 "2020-09-09T09:22:24Z")
Hi everyone. Last week i set up a filebeat (7.8.1) to ingest syslog from an Cisco ASA. Everything works fine and the data is visible in kibana. Now when i go to the SIEM page and try to setup SIEM with the Cisco module… --- ## [Logstash error: cannot parse empty date](https://discuss.elastic.co/t/logstash-error-cannot-parse-empty-date/247983)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 9:21am UTC](https://discuss.elastic.co/t/logstash-error-cannot-parse-empty-date/247983 "2020-09-09T09:21:33Z")
Hi all, i want to load data from an api to elasticserach via logstash. i have a field "depDate" with date type ....in some documents, this field can be empty . what can i do to load this documents in my index ? \[20… --- ## [Http request response to elastic search](https://discuss.elastic.co/t/http-request-response-to-elastic-search/247959)
**Author:** [@Nupur](https://discuss.elastic.co/u/Nupur)\ **Replies:** 8\ **Last updated:** [September 9, 2020, 9:11am UTC](https://discuss.elastic.co/t/http-request-response-to-elastic-search/247959 "2020-09-09T09:11:32Z")
when sending 100 parallel http request the http response time is very high .. whereas the took time in for each query response is very low. How can i improve the http response time to ealstic search. --- ## [Elastic search stops at no plugin loaded](https://discuss.elastic.co/t/elastic-search-stops-at-no-plugin-loaded/247555)
**Author:** [@Sourabh](https://discuss.elastic.co/u/Sourabh)\ **Replies:** 3\ **Last updated:** [September 7, 2020, 8:54pm UTC](https://discuss.elastic.co/t/elastic-search-stops-at-no-plugin-loaded/247555 "2020-09-07T20:54:14Z")
When i started my node on the server it was successfully started.But when due to some reason the node goes down may be due to extensive load or if i down it intentionally and i try to restart it then the log stops at … --- ## [What are typical memory or cpu intensive workloads?](https://discuss.elastic.co/t/what-are-typical-memory-or-cpu-intensive-workloads/247978)
**Author:** [@vchalmel](https://discuss.elastic.co/u/vchalmel)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 8:37am UTC](https://discuss.elastic.co/t/what-are-typical-memory-or-cpu-intensive-workloads/247978 "2020-09-09T08:37:47Z")
I would like to get a better understanding of the alternative proposed for elastic-cloud new deployements between "I/O" "CPU" or "memory" optimizations. What they are, and how the selected hardware is balanced is pretty… --- ## [Siem Rule to detect ssh login with multiple source address](https://discuss.elastic.co/t/siem-rule-to-detect-ssh-login-with-multiple-source-address/247718)
**Author:** [@Kambing](https://discuss.elastic.co/u/Kambing)\ **Replies:** 2\ **Last updated:** [September 9, 2020, 8:23am UTC](https://discuss.elastic.co/t/siem-rule-to-detect-ssh-login-with-multiple-source-address/247718 "2020-09-09T08:23:04Z")
Hi, I'm new with Elastic SIEM and now I need to create a rule to detect ssh successful login with multiple IP address with the same username. I wonder how can I create a rule like this since if I using Custon Query or Th… --- ## [Combine results for user\_agent.device.name from Apache logs](https://discuss.elastic.co/t/combine-results-for-user-agent-device-name-from-apache-logs/247898)
**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\ **Replies:** 2\ **Last updated:** [September 9, 2020, 8:13am UTC](https://discuss.elastic.co/t/combine-results-for-user-agent-device-name-from-apache-logs/247898 "2020-09-09T08:13:08Z")
How would I combine these results into a single item for all Samsung devices? --- ## [How to give json.gz to Elasticsearch docker](https://discuss.elastic.co/t/how-to-give-json-gz-to-elasticsearch-docker/247973)
**Author:** [@Cyril\_Guiet](https://discuss.elastic.co/u/Cyril_Guiet)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 7:55am UTC](https://discuss.elastic.co/t/how-to-give-json-gz-to-elasticsearch-docker/247973 "2020-09-09T07:55:50Z")
Hello ! I would like to know the "sexiest" way to give my json to ElasticSearch container :slight\_smile: my start command is actually docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" docker.elastic… --- ## [Import Button Grayed Out for a JSON File Import](https://discuss.elastic.co/t/import-button-grayed-out-for-a-json-file-import/247412)
**Author:** [@Broggy-Git](https://discuss.elastic.co/u/Broggy-Git)\ **Replies:** 3\ **Last updated:** [September 9, 2020, 7:50am UTC](https://discuss.elastic.co/t/import-button-grayed-out-for-a-json-file-import/247412 "2020-09-09T07:50:57Z")
I have recently installed and configured ElasticSearch 7.9 along with Kibana 7.9. When loading a josn file for testing purposes, I manage to arrive to thee data visualization step but cannot finalize this process due to… --- ## [Logstash s3-sqs input plugin to differentiate 2 types of log](https://discuss.elastic.co/t/logstash-s3-sqs-input-plugin-to-differentiate-2-types-of-log/247971)
**Author:** [@vinodjv\_3](https://discuss.elastic.co/u/vinodjv_3)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 7:49am UTC](https://discuss.elastic.co/t/logstash-s3-sqs-input-plugin-to-differentiate-2-types-of-log/247971 "2020-09-09T07:49:43Z")
Hi all, I have an use case where application logs are pushed to s3 bucket, log types are json and plain. Am using \[logstash-input-s3-sns-sqs\] plugin to read logs from S3 bucket. Both log types are pushed to different p… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1243) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1245)