# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1267 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1268 --- ## [ELK License for Kubernetes](https://discuss.elastic.co/t/elk-license-for-kubernetes/246257)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 9:39am UTC](https://discuss.elastic.co/t/elk-license-for-kubernetes/246257 "2020-08-25T09:39:22Z")
Hi Team, Please let know how licensing works on ELK deployment in Kubernetes . --- ## [Visualizations on Dashboard going grey from time to time (all 2-5 seconds)](https://discuss.elastic.co/t/visualizations-on-dashboard-going-grey-from-time-to-time-all-2-5-seconds/245869)
**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\ **Replies:** 4\ **Last updated:** [August 25, 2020, 9:03am UTC](https://discuss.elastic.co/t/visualizations-on-dashboard-going-grey-from-time-to-time-all-2-5-seconds/245869 "2020-08-25T09:03:43Z")
Hello, as mentoined in the Topic, since the update to 7.9.0 visualizations on a dashboard are going grey every few seconds. What is the reason for that behavior and what can i do about it? Thanks in advance! Boris --- ## [Logstash keeps crashing,used 7 different ports](https://discuss.elastic.co/t/logstash-keeps-crashing-used-7-different-ports/246247)
**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 8:06am UTC](https://discuss.elastic.co/t/logstash-keeps-crashing-used-7-different-ports/246247 "2020-08-25T08:06:11Z")
logstash keeps crashing,used 7 different ports with 7 different conf files added to pipeline.yml. How many ports in adding multiple pipeline can be logstash 6.5 version support --- ## [Is there a way to set analysis for a field?](https://discuss.elastic.co/t/is-there-a-way-to-set-analysis-for-a-field/244242)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 7:42am UTC](https://discuss.elastic.co/t/is-there-a-way-to-set-analysis-for-a-field/244242 "2020-08-25T07:42:02Z")
index mapping https://paste.ubuntu.com/p/9SdnNDfjM9/ I want to search for the value of productSN. Using the default analysis configuration, it seems that the result cannot be found. { "userType":2, "productSN":… --- ## [Splitting a field value based on other field](https://discuss.elastic.co/t/splitting-a-field-value-based-on-other-field/244887)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 7:37am UTC](https://discuss.elastic.co/t/splitting-a-field-value-based-on-other-field/244887 "2020-08-25T07:37:19Z")
I have an index having the below fields Time (every 5 minutes) MetricType Name (having values Inbound traffic , Outbound traffic) Metric Value (values for Inbound and Outbound traffic) I want to plot a Line graph havi… --- ## [ElasticSearch/Kibana query times](https://discuss.elastic.co/t/elasticsearch-kibana-query-times/245904)
**Author:** [@Julio\_reyes](https://discuss.elastic.co/u/Julio_reyes)\ **Replies:** 6\ **Last updated:** [August 25, 2020, 7:36am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-query-times/245904 "2020-08-25T07:36:33Z")
Hi, I'm using Kibana and ElasticSearch, doing a script to check the time that takes to make the query fetch the data for example to the discover page, and each time I refresh the page with in 1 year, the response times a… --- ## [ES - Windows Multi Cluster Advice](https://discuss.elastic.co/t/es-windows-multi-cluster-advice/246106)
**Author:** [@iccMe](https://discuss.elastic.co/u/iccMe)\ **Replies:** 4\ **Last updated:** [August 25, 2020, 7:35am UTC](https://discuss.elastic.co/t/es-windows-multi-cluster-advice/246106 "2020-08-25T07:35:38Z")
Hi, I am looking at creating an ES 3 node cluster all master and data in Windows on 3 hyper-V VM's. I have previously built a test environment in linux and attached 3 x separate 1TB storage drives for each node to repli… --- ## [Why shard relocating is happening all the time](https://discuss.elastic.co/t/why-shard-relocating-is-happening-all-the-time/243648)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 5\ **Last updated:** [August 25, 2020, 7:26am UTC](https://discuss.elastic.co/t/why-shard-relocating-is-happening-all-the-time/243648 "2020-08-25T07:26:15Z")
Hi All, Greeting !! \*\*\* Need URGENT HELP \*\*\* Why shard relocating happening all the time? Due to that heap percentage is getting increasing "cluster\_name" : "BPOConnectElasticSearch", "status" : "green", "timed\_out… --- ## [ERROR Null object returned for RollingFile in Appenders](https://discuss.elastic.co/t/error-null-object-returned-for-rollingfile-in-appenders/246238)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 7:30am UTC](https://discuss.elastic.co/t/error-null-object-returned-for-rollingfile-in-appenders/246238 "2020-08-25T07:30:59Z")
i am unable to start the ES services below is the error which i am getting. Aug 25 09:19:48 RHEL7 systemd-entrypoint\[125773\]: at org.elasticsearch.common.logging.LogConfigurator.configure(LogConfigurator.java:129) Aug … --- ## [Write grok for 1 Aug 14 13:30:36 date time](https://discuss.elastic.co/t/write-grok-for-1-aug-14-1336-date-time/246231)
**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 7:02am UTC](https://discuss.elastic.co/t/write-grok-for-1-aug-14-1336-date-time/246231 "2020-08-25T07:02:17Z")
I need to write a proper date time log parser for "1 Aug 14 13:30:36". I found this log from PAM solution and forwarded to the logstash through CEF format. How ever I have tried several grok patterns to extract, but no … --- ## [Changing logger setting using API](https://discuss.elastic.co/t/changing-logger-setting-using-api/246223)
**Author:** [@somebody](https://discuss.elastic.co/u/somebody)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 6:24am UTC](https://discuss.elastic.co/t/changing-logger-setting-using-api/246223 "2020-08-25T06:24:47Z")
Logging information: https://www.elastic.co/guide/en/elasticsearch/reference/current/logging.html We are trying to change the following logger through API provided above: appender.rolling.policies.size.type = SizeBased… --- ## [How do I get a terms count of text filed?](https://discuss.elastic.co/t/how-do-i-get-a-terms-count-of-text-filed/245519)
**Author:** [@Charele](https://discuss.elastic.co/u/Charele)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 5:58am UTC](https://discuss.elastic.co/t/how-do-i-get-a-terms-count-of-text-filed/245519 "2020-08-25T05:58:29Z")
For example, "desc" is a text field (fielddata = true) doc1 PUT {"desc", "aaa aaa aaa"} doc2 PUT {"desc", "aaa xxx"} When I do a terms aggreation on it, and I will get a "doc count", but I want to get the term count, … --- ## [Can't find logstash.conf on Elastic Cloud](https://discuss.elastic.co/t/cant-find-logstash-conf-on-elastic-cloud/246218)
**Author:** [@jmaharjan](https://discuss.elastic.co/u/jmaharjan)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 5:51am UTC](https://discuss.elastic.co/t/cant-find-logstash-conf-on-elastic-cloud/246218 "2020-08-25T05:51:54Z")
Could be a really stupid question, please bear with me. I have an instance of ELK stack on the cloud. I am not sure where to find the logstash.conf file or set up the pipeline. The stack management section does not have… --- ## [How to disable all formatting/processing done by logstash](https://discuss.elastic.co/t/how-to-disable-all-formatting-processing-done-by-logstash/245377)
**Author:** [@joel.ng](https://discuss.elastic.co/u/joel.ng)\ **Replies:** 5\ **Last updated:** [August 25, 2020, 5:02am UTC](https://discuss.elastic.co/t/how-to-disable-all-formatting-processing-done-by-logstash/245377 "2020-08-25T05:02:52Z")
I am using logstash purely to upload them to my S3 bucket. My logs are already formatted nicely and I do not want any further formatting done on it. Is there any way to disable all the processing done by logstash? It's … --- ## [Elasticsearch scroll randomly fails on some shards on version 7.6.2](https://discuss.elastic.co/t/elasticsearch-scroll-randomly-fails-on-some-shards-on-version-7-6-2/246035)
**Author:** [@Enes\_Acikoglu](https://discuss.elastic.co/u/Enes_Acikoglu)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 4:42am UTC](https://discuss.elastic.co/t/elasticsearch-scroll-randomly-fails-on-some-shards-on-version-7-6-2/246035 "2020-08-25T04:42:59Z")
Hello All, We are using elasticsearch with version 7.6.2 with 9 data nodes and 3 masters. We are getting an error on scroll requests as defined below; \> Elasticsearch exception \[type=exception, reason=Trying to creat… --- ## [Connecting ES 7.8.1 nodes to a 6.8.2 cluster with ec2 discovery](https://discuss.elastic.co/t/connecting-es-7-8-1-nodes-to-a-6-8-2-cluster-with-ec2-discovery/246214)
**Author:** [@Elad\_Itzhakian](https://discuss.elastic.co/u/Elad_Itzhakian)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 4:13am UTC](https://discuss.elastic.co/t/connecting-es-7-8-1-nodes-to-a-6-8-2-cluster-with-ec2-discovery/246214 "2020-08-25T04:13:16Z")
I have a running ES 6.8.2 cluster and I want to upgrade it by launching new 7.8.1 nodes (non master), syncing them with the cluster, then launch the 7.8.1 master nodes and so on. The problem is my new 7.8.1 nodes do not… --- ## [Network host elasticsearch](https://discuss.elastic.co/t/network-host-elasticsearch/246205)
**Author:** [@Juliano\_de\_Mello](https://discuss.elastic.co/u/Juliano_de_Mello)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 2:21am UTC](https://discuss.elastic.co/t/network-host-elasticsearch/246205 "2020-08-25T02:21:21Z")
In the configuration file elasticsearch.yml, I add the parameter network.host: 0.0.0.0, however when starting the system again it returns me the following error: No arquivo de configuração elasticsearch.yml, adiciono o… --- ## [Is it possible to do per saved object access control?](https://discuss.elastic.co/t/is-it-possible-to-do-per-saved-object-access-control/246084)
**Author:** [@Wang\_Hay\_Ng](https://discuss.elastic.co/u/Wang_Hay_Ng)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 1:35am UTC](https://discuss.elastic.co/t/is-it-possible-to-do-per-saved-object-access-control/246084 "2020-08-25T01:35:18Z")
i know we can do access control based on access to space, feature access/enabled of the space and by index access, but is there any way to restrict certain role/user access to certain saved object? say i have a project … --- ## [Multiple Match Array](https://discuss.elastic.co/t/multiple-match-array/245817)
**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\ **Replies:** 6\ **Last updated:** [August 25, 2020, 1:29am UTC](https://discuss.elastic.co/t/multiple-match-array/245817 "2020-08-25T01:29:48Z")
I am trying to parse a message that will have multiple items that I am trying to capture into an array. For example : message: test message @word blah blah @word test ... In this case, the number of captures can and w… --- ## [Cannot logout from Kibana](https://discuss.elastic.co/t/cannot-logout-from-kibana/246202)
**Author:** [@Solaris23](https://discuss.elastic.co/u/Solaris23)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 1:28am UTC](https://discuss.elastic.co/t/cannot-logout-from-kibana/246202 "2020-08-25T01:28:45Z")
When I try to logout from a Kibana user account. The user login again. Even Kibana's official demo also has the same issue. https://demo.elastic.co/ --- ## [Logstash - Is it Possible To Handle Dissect Failures Without Filling Up Syslog](https://discuss.elastic.co/t/logstash-is-it-possible-to-handle-dissect-failures-without-filling-up-syslog/246044)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 3\ **Last updated:** [August 25, 2020, 1:23am UTC](https://discuss.elastic.co/t/logstash-is-it-possible-to-handle-dissect-failures-without-filling-up-syslog/246044 "2020-08-25T01:23:23Z")
Hello ELK Community, I have a pipeline that processes a certain type of log file, depending on where the log file was generated the fields may be different, this causes my dissect to fail. With the following code block… --- ## [Fitting function in Visualization](https://discuss.elastic.co/t/fitting-function-in-visualization/246152)
**Author:** [@kvtang](https://discuss.elastic.co/u/kvtang)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 12:54am UTC](https://discuss.elastic.co/t/fitting-function-in-visualization/246152 "2020-08-25T00:54:09Z")
Hi guys, Am I able to set the fitting function for a line graph (not the timelion but basic one)? Thank you. --- ## [Change data from database](https://discuss.elastic.co/t/change-data-from-database/246190)
**Author:** [@pcb](https://discuss.elastic.co/u/pcb)\ **Replies:** 3\ **Last updated:** [August 24, 2020, 10:09pm UTC](https://discuss.elastic.co/t/change-data-from-database/246190 "2020-08-24T22:09:25Z")
Hi ya, I'm storing timestamped change data coming off a SQL database into Elasticsearch and would like some advice. It is over 100 tables and most will be fairly small (small number of bytes + not many changes over cour… --- ## [Logging Search Queries Made on ElasticSearch](https://discuss.elastic.co/t/logging-search-queries-made-on-elasticsearch/245950)
**Author:** [@Francois\_Valiquette](https://discuss.elastic.co/u/Francois_Valiquette)\ **Replies:** 1\ **Last updated:** [August 24, 2020, 9:37pm UTC](https://discuss.elastic.co/t/logging-search-queries-made-on-elasticsearch/245950 "2020-08-24T21:37:05Z")
I would like to know if there is a way to log all the search queries made against our Elasticsearch cluster. I assume it might be possible by changing the log level of one of the logging hierarchies as described here but… --- ## [Logstash to panos pipeline - CircuitBreakerException script.max\_compilations\_rate](https://discuss.elastic.co/t/logstash-to-panos-pipeline-circuitbreakerexception-script-max-compilations-rate/246187)
**Author:** [@nverrill](https://discuss.elastic.co/u/nverrill)\ **Replies:** 0\ **Last updated:** [August 24, 2020, 9:09pm UTC](https://discuss.elastic.co/t/logstash-to-panos-pipeline-circuitbreakerexception-script-max-compilations-rate/246187 "2020-08-24T21:09:18Z")
I am using the filebeat panw module to ingest palo-alto logs. Due to some performance testing the current path is a little convoluted, but filebeat listens on syslog port with panw module and the output sends to Redis. T… --- ## [Old doc versions will not be deleted](https://discuss.elastic.co/t/old-doc-versions-will-not-be-deleted/246061)
**Author:** [@Messias\_2](https://discuss.elastic.co/u/Messias_2)\ **Replies:** 10\ **Last updated:** [August 24, 2020, 9:05pm UTC](https://discuss.elastic.co/t/old-doc-versions-will-not-be-deleted/246061 "2020-08-24T21:05:37Z")
Hi, in this discuss https://discuss.elastic.co/t/deleting-old-versions/4689/3 stands if you use the same ID for a doc: ... each time you index a doc with the same ID, the old version will be marked as deleted, and will … --- ## ["Your query is taking a while" notification prompted too early on dashboard load](https://discuss.elastic.co/t/your-query-is-taking-a-while-notification-prompted-too-early-on-dashboard-load/246136)
**Author:** [@Dennis1](https://discuss.elastic.co/u/Dennis1)\ **Replies:** 5\ **Last updated:** [August 24, 2020, 7:40pm UTC](https://discuss.elastic.co/t/your-query-is-taking-a-while-notification-prompted-too-early-on-dashboard-load/246136 "2020-08-24T19:40:04Z")
Hello, Whenever my dashboard has to reload, a little pop-up notification appears after about 5 seconds in the lower-right of the screen that informs me, "Your query is taking a while," and asks if I want to "Run beyond … --- ## [Kibana \_find API does not work for multiple values](https://discuss.elastic.co/t/kibana-find-api-does-not-work-for-multiple-values/246032)
**Author:** [@Redcxx](https://discuss.elastic.co/u/Redcxx)\ **Replies:** 2\ **Last updated:** [August 24, 2020, 7:08pm UTC](https://discuss.elastic.co/t/kibana-find-api-does-not-work-for-multiple-values/246032 "2020-08-24T19:08:19Z")
Hi I sent the request as follows: URI: /\_plugin/kibana/api/saved\_objects/\_find?type=index-pattern&type=visualization&search=mps Headers: {kbn-xsrf: true} body: null But I receive: {"message":"The request signature we … --- ## [How to build a custom plugin for Kibana v7.9.0?](https://discuss.elastic.co/t/how-to-build-a-custom-plugin-for-kibana-v7-9-0/246060)
**Author:** [@trex](https://discuss.elastic.co/u/trex)\ **Replies:** 3\ **Last updated:** [August 24, 2020, 7:04pm UTC](https://discuss.elastic.co/t/how-to-build-a-custom-plugin-for-kibana-v7-9-0/246060 "2020-08-24T19:04:29Z")
I generated a new plugin using Kibana scripts node scripts/generate\_plugin.js aplugin. How to build a distributable .zip package for it? The one that can be installed like this ./bin/kibana-plugin install file:///plugi… --- ## [Issue when calculating MAX TPS using MAX Bucket Aggregation](https://discuss.elastic.co/t/issue-when-calculating-max-tps-using-max-bucket-aggregation/242979)
**Author:** [@rpotnuru](https://discuss.elastic.co/u/rpotnuru)\ **Replies:** 5\ **Last updated:** [August 24, 2020, 6:48pm UTC](https://discuss.elastic.co/t/issue-when-calculating-max-tps-using-max-bucket-aggregation/242979 "2020-08-24T18:48:56Z")
Hello, I am trying to add a visualization to calculate MAX TPS for an API, attached the Visualization settings. I am selecting the minimum interval in my date histogram as 1s, but the metric result I am getting is fo… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1266) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1268)