# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1266 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1267 --- ## [Too many cached tokens with illegal\_state\_exception error](https://discuss.elastic.co/t/too-many-cached-tokens-with-illegal-state-exception-error/245250)
**Author:** [@111375](https://discuss.elastic.co/u/111375)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 4:28pm UTC](https://discuss.elastic.co/t/too-many-cached-tokens-with-illegal-state-exception-error/245250 "2020-08-25T16:28:30Z")
While doing bulk request to bulk API I got response with errors: Type: (string) (len=23) "illegal\_state\_exception", Reason: (string) (len=30) "Too many cached tokens (\> 100)" I tried to Google this Too many cached toke… --- ## [Adding additional data along with the visualization](https://discuss.elastic.co/t/adding-additional-data-along-with-the-visualization/246226)
**Author:** [@kjagadish36](https://discuss.elastic.co/u/kjagadish36)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 4:27pm UTC](https://discuss.elastic.co/t/adding-additional-data-along-with-the-visualization/246226 "2020-08-25T16:27:29Z")
Log record: "2020.07.20-00:33:51.787||null||32e1070d-5f49-44d8-952a-a04f0630464f||ccbisr2||MESSAGE\_PUBLICATION||CORPCHANNELS\_INTERFACE||API\_CALL||CREATE||INVOCATION\_SUCCESS||{fccPartyId=FCC044, message=\ **Author:** [@111375](https://discuss.elastic.co/u/111375)\ **Replies:** 3\ **Last updated:** [August 25, 2020, 4:13pm UTC](https://discuss.elastic.co/t/too-many-cached-tokens-with-illegal-state-exception/245539 "2020-08-25T16:13:47Z") Доброго времени суток. При использовании фонетического анализатора (см transliteration в конфиге ниже), во время записи (индексации) документов в Elasticsearch, используя Bulk API (пачка порядка 100 документов за один … --- ## [ELASTICSEARCH - Cumulative\_cardinality without histogram](https://discuss.elastic.co/t/elasticsearch-cumulative-cardinality-without-histogram/246322)
**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 4:07pm UTC](https://discuss.elastic.co/t/elasticsearch-cumulative-cardinality-without-histogram/246322 "2020-08-25T16:07:41Z")
With this query I want to make a count of how many unique mobile phone numbers per company. I have this query that returns the following error: {"size": 1, "\_source": "created\_at", "aggs": { "nested": { … --- ## [Can not get network sockets info](https://discuss.elastic.co/t/can-not-get-network-sockets-info/245398)
**Author:** [@ali.al-janabi](https://discuss.elastic.co/u/ali.al-janabi)\ **Replies:** 7\ **Last updated:** [August 25, 2020, 3:57pm UTC](https://discuss.elastic.co/t/can-not-get-network-sockets-info/245398 "2020-08-25T15:57:55Z")
Hello, I'm deploying elasticsearch SIEM using auditbeat and having trouble to get the network sockets counts, open, closed information. they all show 0 value in the network socket dashboard. in my deployment, I have el… --- ## [Logstash filter plugin for command line output](https://discuss.elastic.co/t/logstash-filter-plugin-for-command-line-output/246318)
**Author:** [@Arati](https://discuss.elastic.co/u/Arati)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 3:51pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-for-command-line-output/246318 "2020-08-25T15:51:01Z")
Hello everyone, I am new to logstash need help. I want to send commandline output from multiple system to elasticsearch via logstash. which filter plugin suits for this? Below is the sample command line output from 2 s… --- ## [Find logstash compatibility with kafka](https://discuss.elastic.co/t/find-logstash-compatibility-with-kafka/244490)
**Author:** [@satish92](https://discuss.elastic.co/u/satish92)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 3:45pm UTC](https://discuss.elastic.co/t/find-logstash-compatibility-with-kafka/244490 "2020-08-25T15:45:22Z")
Hello, I upgraded logstash from 2.4 to 7.5 and also kafka from 0.10 to 2.5 Im facing few issues here when pushing logs through logstash issue background information: Im using the same logstash config files in /etc/lo… --- ## [Is there a bug in elasticsearch 6.5.0 concerning s3 snapshot repositories](https://discuss.elastic.co/t/is-there-a-bug-in-elasticsearch-6-5-0-concerning-s3-snapshot-repositories/246250)
**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\ **Replies:** 5\ **Last updated:** [August 25, 2020, 3:44pm UTC](https://discuss.elastic.co/t/is-there-a-bug-in-elasticsearch-6-5-0-concerning-s3-snapshot-repositories/246250 "2020-08-25T15:44:37Z")
Hi All, This is a single node cluster installation running elasticsearch 6.5.0. I noticed that after the set up of the aws access key and secret key in the keystore P.S. I have tested my access key and secret key with… --- ## [While spinning up elastic search on ec2 machines with warm nodes, kibana not yet ready message](https://discuss.elastic.co/t/while-spinning-up-elastic-search-on-ec2-machines-with-warm-nodes-kibana-not-yet-ready-message/246147)
**Author:** [@souji](https://discuss.elastic.co/u/souji)\ **Replies:** 10\ **Last updated:** [August 25, 2020, 3:28pm UTC](https://discuss.elastic.co/t/while-spinning-up-elastic-search-on-ec2-machines-with-warm-nodes-kibana-not-yet-ready-message/246147 "2020-08-25T15:28:22Z")
Hi, I am new self hosted elastic search, for poc I started spinning the self hosted es with data nodes, client nodes set up worked fine. I added the warm nodes I am seeing message kibana not yet ready. Elasticsearch.ym… --- ## [Permissions issue with \`Kibana\_admin\` role and OpenIDConnect provider](https://discuss.elastic.co/t/permissions-issue-with-kibana-admin-role-and-openidconnect-provider/246264)
**Author:** [@Xavier\_Krantz](https://discuss.elastic.co/u/Xavier_Krantz)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 3:10pm UTC](https://discuss.elastic.co/t/permissions-issue-with-kibana-admin-role-and-openidconnect-provider/246264 "2020-08-25T15:10:42Z")
Hi there, I am using ES Cloud and trying to setup "SSO" with OpenID Connect. I have managed to connect my IdentityProvider (GitHub) to ElasticSearch through Auth0 (Which does the translation to provide ES with OpenID J… --- ## [Angular 2 or above version plugin for kibana](https://discuss.elastic.co/t/angular-2-or-above-version-plugin-for-kibana/246128)
**Author:** [@Nitheesh](https://discuss.elastic.co/u/Nitheesh)\ **Replies:** 3\ **Last updated:** [August 25, 2020, 2:23pm UTC](https://discuss.elastic.co/t/angular-2-or-above-version-plugin-for-kibana/246128 "2020-08-25T14:23:33Z")
I am having an angular application that I need to add in kibana as a plugin. Is it possible to do it in kibana? I am able to create a plugin in react but not getting any useful link or documentation to create and add a … --- ## [Pruning Indexes with 0 documents](https://discuss.elastic.co/t/pruning-indexes-with-0-documents/246172)
**Author:** [@akrzos](https://discuss.elastic.co/u/akrzos)\ **Replies:** 4\ **Last updated:** [August 25, 2020, 1:49pm UTC](https://discuss.elastic.co/t/pruning-indexes-with-0-documents/246172 "2020-08-25T13:49:57Z")
Hello, I am looking for the best method to prune indexes with 0 documents. After we migrated to ILM, we have a few indexes which rollover with 0 documents and this can cause an in-balance across a large cluster where s… --- ## [Anonymization of sensitive data by Logstash](https://discuss.elastic.co/t/anonymization-of-sensitive-data-by-logstash/245585)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 8\ **Last updated:** [August 25, 2020, 1:45pm UTC](https://discuss.elastic.co/t/anonymization-of-sensitive-data-by-logstash/245585 "2020-08-25T13:45:24Z")
Hello, can anyone help me how to anonymize sensitive data from multline log? How to anonymize value of parameter sensitive data: sensitive data:more than one line some part on second and on third line should be repla… --- ## [How can I get the similarity of two single words with ES](https://discuss.elastic.co/t/how-can-i-get-the-similarity-of-two-single-words-with-es/246294)
**Author:** [@Ingo](https://discuss.elastic.co/u/Ingo)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 1:31pm UTC](https://discuss.elastic.co/t/how-can-i-get-the-similarity-of-two-single-words-with-es/246294 "2020-08-25T13:31:01Z")
I try to get the score of the similarity of two single words but I get always a score of 0 and no hit although the words are very similar. For example, Bundesvermoegensverwaltung and Bundesvermogensverwaltung gives me a… --- ## [Elasticsearch 5.5.1 not able to create repository in GCS](https://discuss.elastic.co/t/elasticsearch-5-5-1-not-able-to-create-repository-in-gcs/246289)
**Author:** [@Vinoth\_Kumarasamy](https://discuss.elastic.co/u/Vinoth_Kumarasamy)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 1:18pm UTC](https://discuss.elastic.co/t/elasticsearch-5-5-1-not-able-to-create-repository-in-gcs/246289 "2020-08-25T13:18:57Z")
Hi, I am trying to create backup snapshot for my index running in elasticsearch 5.5.1 in GKE. I have followed below steps installed plugin (repository-gcs)and added service-account to keystore. https://www.elastic.co/g… --- ## [ELK cluster architecture](https://discuss.elastic.co/t/elk-cluster-architecture/246036)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 4\ **Last updated:** [August 25, 2020, 1:07pm UTC](https://discuss.elastic.co/t/elk-cluster-architecture/246036 "2020-08-25T13:07:08Z")
Is this seems ok architecture? each system has 96gig RAM and 24 core cpus. 3 master node + kibana (kibana is there just incase I need it) 25gig for elasticsearch and 8 gig for kibana 2 co-ordinating node + kibana 25… --- ## [Elasticsearch is still initializing the kibana index... Trying again in 2.5 second](https://discuss.elastic.co/t/elasticsearch-is-still-initializing-the-kibana-index-trying-again-in-2-5-second/245701)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 5\ **Last updated:** [August 25, 2020, 1:03pm UTC](https://discuss.elastic.co/t/elasticsearch-is-still-initializing-the-kibana-index-trying-again-in-2-5-second/245701 "2020-08-25T13:03:19Z")
Hi , I'm getting this error in Kibana Elasticsearch is still initializing the kibana index... Trying again in 2.5 second and the .kibana index is the only index in red mode any suggestions without losing all data ? E… --- ## [Logstash not reading keystore file after upgrade to ELK 7.9](https://discuss.elastic.co/t/logstash-not-reading-keystore-file-after-upgrade-to-elk-7-9/245680)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 12:59pm UTC](https://discuss.elastic.co/t/logstash-not-reading-keystore-file-after-upgrade-to-elk-7-9/245680 "2020-08-25T12:59:31Z")
Hi, Yesterday this was working perfectly fine. I just upgraded the server to ELK 7.9 and after restarted Logstash I am getting this error stating Logstash found the keystore file, but "... but it is not a valid Logstash… --- ## [Elastic Stack Hardware requirements](https://discuss.elastic.co/t/elastic-stack-hardware-requirements/246286)
**Author:** [@Turotakun98](https://discuss.elastic.co/u/Turotakun98)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 12:59pm UTC](https://discuss.elastic.co/t/elastic-stack-hardware-requirements/246286 "2020-08-25T12:59:04Z")
Hi, I have to setup the stack on a machine with limited hardware (4GB RAM, Ubuntu 20.04, 80GB SSD). I need to run Elasticsearch, Logstash and Kibana on this machine. I am facing various problem relative to the JVM, in b… --- ## [Drill Down Visualization](https://discuss.elastic.co/t/drill-down-visualization/245413)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 12:54pm UTC](https://discuss.elastic.co/t/drill-down-visualization/245413 "2020-08-25T12:54:21Z")
Hello Team, I am looking for creating a drill down , where i will have a hierarchical data in json format. for example \> { \> "Name":"L1", \> "level1":\[ \> { \> "Name":"L2", \> "level2":\[ \>… --- ## [Create Dashboard for 15 failed logon from AD in 10 Min](https://discuss.elastic.co/t/create-dashboard-for-15-failed-logon-from-ad-in-10-min/245877)
**Author:** [@Majid\_Att](https://discuss.elastic.co/u/Majid_Att)\ **Replies:** 4\ **Last updated:** [August 25, 2020, 12:51pm UTC](https://discuss.elastic.co/t/create-dashboard-for-15-failed-logon-from-ad-in-10-min/245877 "2020-08-25T12:51:07Z")
Hi Guys, we would like to enable Account Lockout in Active Directory with this policy: 15 failed logon in 10 Min will be lockout. Upfront we would like to simulate which user will be hit by this policy . we use Winlog… --- ## [ELK SIEM](https://discuss.elastic.co/t/elk-siem/246234)
**Author:** [@Deepika\_Rawat](https://discuss.elastic.co/u/Deepika_Rawat)\ **Replies:** 3\ **Last updated:** [August 25, 2020, 12:49pm UTC](https://discuss.elastic.co/t/elk-siem/246234 "2020-08-25T12:49:21Z")
Is Elk SIEM free ?? and how can i import data in siem through logstash i just wanted to check its functionality as a threat analyst.I am looking and comparing more options but since i am familiar with logstash and filebe… --- ## [Filebeat Apache module + Logstash: "Mapping definition for \[source\] has unsupported parameters"](https://discuss.elastic.co/t/filebeat-apache-module-logstash-mapping-definition-for-source-has-unsupported-parameters/246281)
**Author:** [@rubjurgens](https://discuss.elastic.co/u/rubjurgens)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 12:25pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-logstash-mapping-definition-for-source-has-unsupported-parameters/246281 "2020-08-25T12:25:46Z")
Hello, For some time now, we are using ES, Logstash and Kibana with filebeats parsing application logs from different servers. Recently we configured filebeat for the first time using a module. I followed the instructi… --- ## [Delete child documents without parent using Java API](https://discuss.elastic.co/t/delete-child-documents-without-parent-using-java-api/246276)
**Author:** [@makons](https://discuss.elastic.co/u/makons)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 11:59am UTC](https://discuss.elastic.co/t/delete-child-documents-without-parent-using-java-api/246276 "2020-08-25T11:59:24Z")
As the title says, I'm trying to delete all the parentless child documents using ES Java API. If I got things correctly, I need to use DeleteByQuery, and my proposed solution is this: val allParentlessChildren = QueryBu… --- ## [How to select only one field from an array?](https://discuss.elastic.co/t/how-to-select-only-one-field-from-an-array/246275)
**Author:** [@Mayank\_Ruhella](https://discuss.elastic.co/u/Mayank_Ruhella)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 11:54am UTC](https://discuss.elastic.co/t/how-to-select-only-one-field-from-an-array/246275 "2020-08-25T11:54:43Z")
Output "\_source" : { "mortgagesObj" : \[ { "regDate" : "04/06/2020" }, { "regDate" : "01/10/2013" }, { "regD… --- ## [Persian Analyzer](https://discuss.elastic.co/t/persian-analyzer/246274)
**Author:** [@Pori\_Niki](https://discuss.elastic.co/u/Pori_Niki)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 11:46am UTC](https://discuss.elastic.co/t/persian-analyzer/246274 "2020-08-25T11:46:58Z")
Hi. I recently checked the language analyzer in elastic docs and wonder why in all examples like this link: analysis-lang-analyzer the Persian analyzer comes after the Arabic analyzer?! Is that needed because of anything… --- ## [What is the Stable Version for Production Deployment](https://discuss.elastic.co/t/what-is-the-stable-version-for-production-deployment/246269)
**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 11:43am UTC](https://discuss.elastic.co/t/what-is-the-stable-version-for-production-deployment/246269 "2020-08-25T11:43:54Z")
Hi Team, Please let me know the latest stable ELK version for production deployment. Regards, Vivek --- ## [How To Back Up Elasticsearch Database/Data](https://discuss.elastic.co/t/how-to-back-up-elasticsearch-database-data/246113)
**Author:** [@upchair](https://discuss.elastic.co/u/upchair)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 11:32am UTC](https://discuss.elastic.co/t/how-to-back-up-elasticsearch-database-data/246113 "2020-08-25T11:32:09Z")
Please can anybody please tell me how to backup my Elasticsearch Data easily. Thank You. Richard --- ## [Azure Filebeat User Authentications](https://discuss.elastic.co/t/azure-filebeat-user-authentications/246271)
**Author:** [@josborn](https://discuss.elastic.co/u/josborn)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 11:26am UTC](https://discuss.elastic.co/t/azure-filebeat-user-authentications/246271 "2020-08-25T11:26:12Z")
Hi All, First time posting so go easy on me. I am on the latest version 7.9 and have been configuring the Azure filebeat module to ingest signin events. The events are populating and all fields are present and correct,… --- ## [Not able to download dataset blogs.csv for offline pracitce](https://discuss.elastic.co/t/not-able-to-download-dataset-blogs-csv-for-offline-pracitce/238178)
**Author:** [@manojb1-in.ibm.com](https://discuss.elastic.co/u/manojb1-in.ibm.com)\ **Replies:** 11\ **Last updated:** [August 25, 2020, 9:39am UTC](https://discuss.elastic.co/t/not-able-to-download-dataset-blogs-csv-for-offline-pracitce/238178 "2020-08-25T09:39:57Z")
Hi, Could you please let me know, how I could download dataset , blogs.csv for offline practice? In elastic engineer1 , i did not see any link for downloading datasets. Please help [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1265) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1267)