# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1250

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1251

---

## [Logstash can not start](https://discuss.elastic.co/t/logstash-can-not-start/247509)

<div class="topic-metadata">

**Author:** [@psanggabuana](https://discuss.elastic.co/u/psanggabuana)\
**Replies:** 1\
**Last updated:** [September 4, 2020, 3:12pm UTC](https://discuss.elastic.co/t/logstash-can-not-start/247509 "2020-09-04T15:12:38Z")

</div>

I have problem with my logstash. When I start the logstash service, I have this log: 2020-09-04 16:21:19,830 main ERROR Unable to invoke factory method in class org.apache.logging.log4j.core.appender.RollingFileAppender…

---

## [Watchers for kubernetes metrics](https://discuss.elastic.co/t/watchers-for-kubernetes-metrics/247562)

<div class="topic-metadata">

**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 3:08pm UTC](https://discuss.elastic.co/t/watchers-for-kubernetes-metrics/247562 "2020-09-04T15:08:28Z")

</div>

Hi, Is there any place where I can get the watchers configuration for most commonly used kubernetes and AWS metrics?

---

## [Object field starting or ending with a \[.\] makes object resolution ambiguous](https://discuss.elastic.co/t/object-field-starting-or-ending-with-a-makes-object-resolution-ambiguous/246733)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 2\
**Last updated:** [September 4, 2020, 2:26pm UTC](https://discuss.elastic.co/t/object-field-starting-or-ending-with-a-makes-object-resolution-ambiguous/246733 "2020-09-04T14:26:46Z")

</div>

I'm trying to deal with an index that the Upgrade Assistant has said needs to be reindexed before an upgrade to Elasticsearch 7. The index was created with 5.6.14 and the cluster currently runs 6.8.9. Due to an issue wit…

---

## [Show \*all\* metrics as Netdata does](https://discuss.elastic.co/t/show-all-metrics-as-netdata-does/246410)

<div class="topic-metadata">

**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Replies:** 10\
**Last updated:** [September 4, 2020, 2:14pm UTC](https://discuss.elastic.co/t/show-all-metrics-as-netdata-does/246410 "2020-09-04T14:14:25Z")

</div>

Hi how can I display all metrics, one by one, each as a row? Just like: https://london.my-netdata.io/ this example. Thanks very much!

---

## [How to get external url of kibana (loadBalancer)](https://discuss.elastic.co/t/how-to-get-external-url-of-kibana-loadbalancer/244962)

<div class="topic-metadata">

**Author:** [@melissajenner22](https://discuss.elastic.co/u/melissajenner22)\
**Replies:** 2\
**Last updated:** [September 4, 2020, 2:13pm UTC](https://discuss.elastic.co/t/how-to-get-external-url-of-kibana-loadbalancer/244962 "2020-09-04T14:13:43Z")

</div>

I use the chart https://github.com/elastic/helm-charts, version 7.7.1 installed elasticsearch, kibana and logstash into Kubernetes. helm version is 2.16.10. Kubernetes version is 1.16 (eks). I use default settings. Comm…

---

## [Recovery Notification from uptime alert](https://discuss.elastic.co/t/recovery-notification-from-uptime-alert/247496)

<div class="topic-metadata">

**Author:** [@Vaggelis\_Xylogiannis](https://discuss.elastic.co/u/Vaggelis_Xylogiannis)\
**Replies:** 1\
**Last updated:** [September 4, 2020, 2:09pm UTC](https://discuss.elastic.co/t/recovery-notification-from-uptime-alert/247496 "2020-09-04T14:09:18Z")

</div>

Dear forum, I'm new to elk world, as we trying the stack at work. Impressed! We are trying to work with the Uptime module and the heartbeat. I manage to setup an simply alarm check alive using icmp which works pretty o…

---

## [After upgrade to 7.9.0 Kibana shows : "405 Method Not Allowed"](https://discuss.elastic.co/t/after-upgrade-to-7-9-0-kibana-shows-405-method-not-allowed/246279)

<div class="topic-metadata">

**Author:** [@oicfar](https://discuss.elastic.co/u/oicfar)\
**Replies:** 8\
**Last updated:** [September 4, 2020, 2:04pm UTC](https://discuss.elastic.co/t/after-upgrade-to-7-9-0-kibana-shows-405-method-not-allowed/246279 "2020-09-04T14:04:34Z")

</div>

With 7.8.0 and 7.8.1 there was no problems. But now ... { "statusCode": 405, "error": "Method Not Allowed", "message": "invalid escape sequence \`%{\[' at index 0 of: %{\[@metadata\]\[beat\]}-%{\[@metadata\]\[version\]}-202…

---

## [Tab not responding for some visualizations after upgrading to Kibana to 7.9](https://discuss.elastic.co/t/tab-not-responding-for-some-visualizations-after-upgrading-to-kibana-to-7-9/247499)

<div class="topic-metadata">

**Author:** [@intellion](https://discuss.elastic.co/u/intellion)\
**Replies:** 4\
**Last updated:** [September 4, 2020, 2:03pm UTC](https://discuss.elastic.co/t/tab-not-responding-for-some-visualizations-after-upgrading-to-kibana-to-7-9/247499 "2020-09-04T14:03:26Z")

</div>

After we upgraded the elastic stack to version 7.9 (all--\> logstash, elasticsearch and kibana) we experience visualisations which make the browser tab unresponsive: This was not the case before the update. Anyone else…

---

## [V8 - breaking changes - dangling indexes?](https://discuss.elastic.co/t/v8-breaking-changes-dangling-indexes/247551)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 1:49pm UTC](https://discuss.elastic.co/t/v8-breaking-changes-dangling-indexes/247551 "2020-09-04T13:49:17Z")

</div>

Upgraded to 7.9.1 this morning and had a bit of a shock when my data wasn't reloading. Finally RTFM and saw the note about dangling indexes no longer reloaded by default. Oh boy. Anyway - when v8 rolls around - how are …

---

## [Splitting multiple strings into subfields](https://discuss.elastic.co/t/splitting-multiple-strings-into-subfields/247549)

<div class="topic-metadata">

**Author:** [@ds2000](https://discuss.elastic.co/u/ds2000)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 1:46pm UTC](https://discuss.elastic.co/t/splitting-multiple-strings-into-subfields/247549 "2020-09-04T13:46:23Z")

</div>

Hi all, I'm not sure if this is possible or not. I'm collecting a lot of data and collecting it into a single line in a logfile. For reference, this is the pre-log format moduleName1 ----- InstalledVersion ----- Ne…

---

## [Dynamic Timezone in Logstash csv](https://discuss.elastic.co/t/dynamic-timezone-in-logstash-csv/247502)

<div class="topic-metadata">

**Author:** [@Rakku](https://discuss.elastic.co/u/Rakku)\
**Replies:** 1\
**Last updated:** [September 4, 2020, 1:20pm UTC](https://discuss.elastic.co/t/dynamic-timezone-in-logstash-csv/247502 "2020-09-04T13:20:46Z")

</div>

Hi there, Im completely new to pretty much anything here and got introduced at my workplace to ELK with the words: "We use ELK here, we have this and this problem, fix it". So here I am, with little to none knowledge on…

---

## [Kibana field type and Elasticsearch mapping don't match](https://discuss.elastic.co/t/kibana-field-type-and-elasticsearch-mapping-dont-match/247528)

<div class="topic-metadata">

**Author:** [@egray](https://discuss.elastic.co/u/egray)\
**Replies:** 3\
**Last updated:** [September 4, 2020, 1:15pm UTC](https://discuss.elastic.co/t/kibana-field-type-and-elasticsearch-mapping-dont-match/247528 "2020-09-04T13:15:13Z")

</div>

I spent a long time today trying to apply a new index template, to change the type of a field from a string to an integer. Then I used the GET Mapping API and saw this : "response\_time" : { "type" : "integer" },…

---

## [Is it possible to pass Google Analytics data to Logstash?](https://discuss.elastic.co/t/is-it-possible-to-pass-google-analytics-data-to-logstash/246386)

<div class="topic-metadata">

**Author:** [@ckwm](https://discuss.elastic.co/u/ckwm)\
**Replies:** 1\
**Last updated:** [September 4, 2020, 1:13pm UTC](https://discuss.elastic.co/t/is-it-possible-to-pass-google-analytics-data-to-logstash/246386 "2020-09-04T13:13:22Z")

</div>

Hi, I'm new for ELK and I'm trying to pass the Google Analytics data to Logstash in order to visualize in Kibana. Is it possible to do it? Or is there a way to connect Google Analytics with Kibana directly? Hope someon…

---

## [Doc\_count is not returning for the index in "multi index approach" if no data present in that index](https://discuss.elastic.co/t/doc-count-is-not-returning-for-the-index-in-multi-index-approach-if-no-data-present-in-that-index/247539)

<div class="topic-metadata">

**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 12:56pm UTC](https://discuss.elastic.co/t/doc-count-is-not-returning-for-the-index-in-multi-index-approach-if-no-data-present-in-that-index/247539 "2020-09-04T12:56:03Z")

</div>

Hi, In case of multi Index approach, if the data for the specific index is not present in the Elastic \[index is empty\]. while doing the aggregation in multi index it should return at least doc\_count as '0' . tried solu…

---

## [ECK Quickstart - Elasticsearch fails to start with "permission denied" error](https://discuss.elastic.co/t/eck-quickstart-elasticsearch-fails-to-start-with-permission-denied-error/247094)

<div class="topic-metadata">

**Author:** [@kurbar](https://discuss.elastic.co/u/kurbar)\
**Replies:** 1\
**Last updated:** [September 4, 2020, 12:30pm UTC](https://discuss.elastic.co/t/eck-quickstart-elasticsearch-fails-to-start-with-permission-denied-error/247094 "2020-09-04T12:30:22Z")

</div>

Hello, I’m following the quickstart guide for ECK on one of my Kubeadm clusters (Kubernetes version 1.15.7). I have the Elastic operator up and running with version 1.2.1. I then tried deploying the same Elasticsearch cl…

---

## [How to get position of matched token](https://discuss.elastic.co/t/how-to-get-position-of-matched-token/247521)

<div class="topic-metadata">

**Author:** [@drewblin](https://discuss.elastic.co/u/drewblin)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 11:02am UTC](https://discuss.elastic.co/t/how-to-get-position-of-matched-token/247521 "2020-09-04T11:02:29Z")

</div>

Hi I want to migrate from Sphinxsearch to Elastic. But have task, that i don't know how to solve in elastic. I have documents with 2 fields. First field - "title". It is array of words. And each word can have some syn…

---

## [DevTools menu is not shown in the menu panel of Kibana 5.6.16](https://discuss.elastic.co/t/devtools-menu-is-not-shown-in-the-menu-panel-of-kibana-5-6-16/246701)

<div class="topic-metadata">

**Author:** [@girlie.tan](https://discuss.elastic.co/u/girlie.tan)\
**Replies:** 3\
**Last updated:** [September 4, 2020, 10:43am UTC](https://discuss.elastic.co/t/devtools-menu-is-not-shown-in-the-menu-panel-of-kibana-5-6-16/246701 "2020-09-04T10:43:22Z")

</div>

DevTools menu is not shown in the menu panel of Kibana 5.6.16 Please share the step by step to troubleshoot. Thank you.

---

## [Not working Https Elasticsearch with GKE default ingress](https://discuss.elastic.co/t/not-working-https-elasticsearch-with-gke-default-ingress/245180)

<div class="topic-metadata">

**Author:** [@kumar\_abhishek](https://discuss.elastic.co/u/kumar_abhishek)\
**Replies:** 2\
**Last updated:** [September 4, 2020, 10:38am UTC](https://discuss.elastic.co/t/not-working-https-elasticsearch-with-gke-default-ingress/245180 "2020-09-04T10:38:04Z")

</div>

Hi, Can Anyone help me here? I was able to configure and install an elastic search /kibana using Eck Operator in my environment (GKE GCP) and also able to enable Kibana with an https using GCP managed certificate for S…

---

## [Average Aggregation over two fields](https://discuss.elastic.co/t/average-aggregation-over-two-fields/247516)

<div class="topic-metadata">

**Author:** [@Daniel\_Garcia](https://discuss.elastic.co/u/Daniel_Garcia)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 10:14am UTC](https://discuss.elastic.co/t/average-aggregation-over-two-fields/247516 "2020-09-04T10:14:10Z")

</div>

What I would like to achieve is, given this type of docs: { "my\_index": { "mappings": { "result": { "dynamic": "false", "\_all": { "enabled": false …

---

## [Elasticsearch failed to start](https://discuss.elastic.co/t/elasticsearch-failed-to-start/247409)

<div class="topic-metadata">

**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\
**Replies:** 7\
**Last updated:** [September 4, 2020, 8:57am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-start/247409 "2020-09-04T08:57:47Z")

</div>

Hi, My elasticsearch instance was working just fine, I made some changes to elasticsearch.yml file for email setting and restarted service, but elasticsearch failed to start and I could not even connect to elasticsearch…

---

## [Ingesting Data via Python to Elastic](https://discuss.elastic.co/t/ingesting-data-via-python-to-elastic/247230)

<div class="topic-metadata">

**Author:** [@Rahul0711](https://discuss.elastic.co/u/Rahul0711)\
**Replies:** 5\
**Last updated:** [September 4, 2020, 8:52am UTC](https://discuss.elastic.co/t/ingesting-data-via-python-to-elastic/247230 "2020-09-04T08:52:14Z")

</div>

Hello Team I need help in ingesting the data via python into elastic. I have a cert that I have already uploaded the cert on the browser. After pre-processing is completed, I converted dataframe into dict. Now I want to…

---

## [Update Kibana for all visualisations to handle fields with null values](https://discuss.elastic.co/t/update-kibana-for-all-visualisations-to-handle-fields-with-null-values/243995)

<div class="topic-metadata">

**Author:** [@rbergmann](https://discuss.elastic.co/u/rbergmann)\
**Replies:** 10\
**Last updated:** [September 4, 2020, 8:39am UTC](https://discuss.elastic.co/t/update-kibana-for-all-visualisations-to-handle-fields-with-null-values/243995 "2020-09-04T08:39:03Z")

</div>

I understand that from v7+ there is an issue with the handling of null values in fields. This would check it. doc\[\<field\>\].size()==0 https://www.elastic.co/guide/en/elasticsearch/reference/current/breaking-changes-7.0…

---

## [Logstash not logging & failing after start of elasticsearch](https://discuss.elastic.co/t/logstash-not-logging-failing-after-start-of-elasticsearch/247501)

<div class="topic-metadata">

**Author:** [@apurvakhatri](https://discuss.elastic.co/u/apurvakhatri)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 8:23am UTC](https://discuss.elastic.co/t/logstash-not-logging-failing-after-start-of-elasticsearch/247501 "2020-09-04T08:23:54Z")

</div>

Here is the process: sudo service logstash start sudo service logstash status logstash.service - logstash Loaded: loaded (/etc/systemd/system/logstash.service; disabled; vendor preset …

---

## [Duplicate records in Kibana](https://discuss.elastic.co/t/duplicate-records-in-kibana/245896)

<div class="topic-metadata">

**Author:** [@apurvakhatri](https://discuss.elastic.co/u/apurvakhatri)\
**Replies:** 3\
**Last updated:** [September 4, 2020, 8:08am UTC](https://discuss.elastic.co/t/duplicate-records-in-kibana/245896 "2020-09-04T08:08:26Z")

</div>

I noticed that there are multiple records for the same log. They have the same clientip, time & host. Issue: Duplicate records. (There are multiple copies of same record) Requirement: There should only be one record …

---

## [Logstash and CSV - append to field while upsert](https://discuss.elastic.co/t/logstash-and-csv-append-to-field-while-upsert/247071)

<div class="topic-metadata">

**Author:** [@AnthonyA](https://discuss.elastic.co/u/AnthonyA)\
**Replies:** 3\
**Last updated:** [September 4, 2020, 7:47am UTC](https://discuss.elastic.co/t/logstash-and-csv-append-to-field-while-upsert/247071 "2020-09-04T07:47:10Z")

</div>

Hi there :grinning: I'm using logstash. My input is a CSV file. I'm using one of the columns as the document\_id. There are lines in the CSV file that have the same document\_id. In my output, I'm using upsert. When Logs…

---

## [Unable to create index pattern in kibana 6.5](https://discuss.elastic.co/t/unable-to-create-index-pattern-in-kibana-6-5/246479)

<div class="topic-metadata">

**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\
**Replies:** 3\
**Last updated:** [September 4, 2020, 5:56am UTC](https://discuss.elastic.co/t/unable-to-create-index-pattern-in-kibana-6-5/246479 "2020-09-04T05:56:00Z")

</div>

Hi, I am using kibana 6.5 and recently changed to 3 node cluster. after that when i tried to create index pattern to build visulaization it neither throwing error nor getting created.But struck as creating index. r…

---

## [Not seeing all my hosts in Kibana Infrastructure UI](https://discuss.elastic.co/t/not-seeing-all-my-hosts-in-kibana-infrastructure-ui/247122)

<div class="topic-metadata">

**Author:** [@Delep](https://discuss.elastic.co/u/Delep)\
**Replies:** 0\
**Last updated:** [September 1, 2020, 3:39pm UTC](https://discuss.elastic.co/t/not-seeing-all-my-hosts-in-kibana-infrastructure-ui/247122 "2020-09-01T15:39:05Z")

</div>

Hi, I'm using the elk suite (all in 6.8.6). I've installed metricbeat on all my hosts (more than 250). Config is identical on all hosts: #========================== Modules configuration ============================ …

---

## [Disable login UI Page of kibana](https://discuss.elastic.co/t/disable-login-ui-page-of-kibana/247480)

<div class="topic-metadata">

**Author:** [@kkhadka](https://discuss.elastic.co/u/kkhadka)\
**Replies:** 1\
**Last updated:** [September 4, 2020, 5:39am UTC](https://discuss.elastic.co/t/disable-login-ui-page-of-kibana/247480 "2020-09-04T05:39:14Z")

</div>

Hi, I enabled the basic security of Xpack and found that the kibana UI comes up with a new login page for authentication. Is there any way to disable the UI page as we are having a login page for our web application and …

---

## [ElasticsearchError error=“400 - Rejected by Elasticsearch](https://discuss.elastic.co/t/elasticsearcherror-error-400-rejected-by-elasticsearch/247477)

<div class="topic-metadata">

**Author:** [@akhinair](https://discuss.elastic.co/u/akhinair)\
**Replies:** 1\
**Last updated:** [September 4, 2020, 5:37am UTC](https://discuss.elastic.co/t/elasticsearcherror-error-400-rejected-by-elasticsearch/247477 "2020-09-04T05:37:25Z")

</div>

I am using EFK stack in my GKE cluster and recently i observed below errors in my fluentd logs. This has started after adding new data point for geopoint in the fluentd. can somebody please help on this? 2020-09-03 16…

---

## [Dot replace is not working](https://discuss.elastic.co/t/dot-replace-is-not-working/247481)

<div class="topic-metadata">

**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\
**Replies:** 0\
**Last updated:** [September 4, 2020, 5:15am UTC](https://discuss.elastic.co/t/dot-replace-is-not-working/247481 "2020-09-04T05:15:19Z")

</div>

Hi Support, I have below configuration for index. PUT dottest { "settings":{ "index" : { "number\_of\_shards" : 1, "number\_of\_replicas" : 0 }, "analysis": { "analyzer": { "splchar\_analyzer": { "tokenizer": "st…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1249)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1251)
