# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1293 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1294 --- ## [Need help to build dashboard for daily ingestion rate per host](https://discuss.elastic.co/t/need-help-to-build-dashboard-for-daily-ingestion-rate-per-host/244239)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 4\ **Last updated:** [August 8, 2020, 3:56pm UTC](https://discuss.elastic.co/t/need-help-to-build-dashboard-for-daily-ingestion-rate-per-host/244239 "2020-08-08T15:56:00Z")
Hi All, I am in process of building dashboard which gives me daily ingetion growth per day per host. After reviewing the monitoring index fields I saw there was no any field which Carrie's this data. Could any one help… --- ## [Dump RRD files into logstash to visualise in Kibana](https://discuss.elastic.co/t/dump-rrd-files-into-logstash-to-visualise-in-kibana/244250)
**Author:** [@Himani\_Agarwal](https://discuss.elastic.co/u/Himani_Agarwal)\ **Replies:** 0\ **Last updated:** [August 8, 2020, 12:28pm UTC](https://discuss.elastic.co/t/dump-rrd-files-into-logstash-to-visualise-in-kibana/244250 "2020-08-08T12:28:56Z")
Hello, I have RRD(Round Robin Database) files which contains the statistics of a remote server(collected using collectd). The requirement is to put this data on elastic search for analysis purpose. One of the solution … --- ## [Unable to allocate replica shard after node restart](https://discuss.elastic.co/t/unable-to-allocate-replica-shard-after-node-restart/243738)
**Author:** [@Chimu](https://discuss.elastic.co/u/Chimu)\ **Replies:** 8\ **Last updated:** [August 8, 2020, 12:22pm UTC](https://discuss.elastic.co/t/unable-to-allocate-replica-shard-after-node-restart/243738 "2020-08-08T12:22:43Z")
I have an Elasticsearch (v5.6.10) cluster with 3 nodes. Node A : Master Node B : Master + Data Node C : Master + Data There are 6 shards per data node with replication set as 1. All 6 primary nodes are in Node B and a… --- ## [How to remove repeting string in message?](https://discuss.elastic.co/t/how-to-remove-repeting-string-in-message/244195)
**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\ **Replies:** 11\ **Last updated:** [August 8, 2020, 7:20am UTC](https://discuss.elastic.co/t/how-to-remove-repeting-string-in-message/244195 "2020-08-08T07:20:28Z")
I have a syslog5424\_msg field which gets repeating JSON string, example log {"@t":"2020-08-07T15:32:19.7835920Z","@mt":"{@LogDetail}","ThreadId":32,"EventType":2890355315,"Application":"EsXYZ","Environment":"Development… --- ## [ELK target cluster and redactions](https://discuss.elastic.co/t/elk-target-cluster-and-redactions/244189)
**Author:** [@griffer98](https://discuss.elastic.co/u/griffer98)\ **Replies:** 1\ **Last updated:** [August 8, 2020, 5:25am UTC](https://discuss.elastic.co/t/elk-target-cluster-and-redactions/244189 "2020-08-08T05:25:54Z")
I am planning on having multiple clusters and some files that go through the stack will need ip redactions and so on. What I want to do is have some way for logstash to determine, based on certain requirements, which clu… --- ## ["Refresh every" field gets reset to 0.01 seconds](https://discuss.elastic.co/t/refresh-every-field-gets-reset-to-0-01-seconds/242364)
**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\ **Replies:** 3\ **Last updated:** [August 8, 2020, 12:28am UTC](https://discuss.elastic.co/t/refresh-every-field-gets-reset-to-0-01-seconds/242364 "2020-08-08T00:28:15Z")
Hi all I am not able to reproduce this use case every time. However every once in a while when I open an existing visualization in Kibana, I observe that the graph never displays. And then one time I observed that t… --- ## [\[ERROR\]\[logstash.config.sourceloader\] No configuration found in the configured sources](https://discuss.elastic.co/t/error-logstash-config-sourceloader-no-configuration-found-in-the-configured-sources/244230)
**Author:** [@Umang\_Mahant](https://discuss.elastic.co/u/Umang_Mahant)\ **Replies:** 2\ **Last updated:** [August 7, 2020, 10:17pm UTC](https://discuss.elastic.co/t/error-logstash-config-sourceloader-no-configuration-found-in-the-configured-sources/244230 "2020-08-07T22:17:31Z")
Hi Masters, Please help me with this small query. Trying to load excel (Csv) to Kibana from logstash. I have not changed/ created any YML . geting the below error - Z:\\\>logstash -f logstash\_tc.conf --debug … --- ## [Ingest manager won't let kibana start](https://discuss.elastic.co/t/ingest-manager-wont-let-kibana-start/244222)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [August 7, 2020, 9:57pm UTC](https://discuss.elastic.co/t/ingest-manager-wont-let-kibana-start/244222 "2020-08-07T21:57:40Z")
when I enable ingest manager in kibana.yml file like below xpack.ingestManager.enabled: true kibana won't start and on browser get following message. is this a bug? Version: 7.8.0 Build: 31997 Error: Start lifecycle … --- ## [Total hits for search involving searchafter](https://discuss.elastic.co/t/total-hits-for-search-involving-searchafter/244223)
**Author:** [@jaekim06450](https://discuss.elastic.co/u/jaekim06450)\ **Replies:** 0\ **Last updated:** [August 7, 2020, 8:36pm UTC](https://discuss.elastic.co/t/total-hits-for-search-involving-searchafter/244223 "2020-08-07T20:36:37Z")
Hello, I am currently using Search After component of Search API for Java. The question I have involves the total hits that are tracked as part of each query. Let's say there's an index that contains 100 records for a … --- ## [Doc.length starts counting approximately starting from 41 tokens](https://discuss.elastic.co/t/doc-length-starts-counting-approximately-starting-from-41-tokens/244215)
**Author:** [@Alex\_D](https://discuss.elastic.co/u/Alex_D)\ **Replies:** 0\ **Last updated:** [August 7, 2020, 7:37pm UTC](https://discuss.elastic.co/t/doc-length-starts-counting-approximately-starting-from-41-tokens/244215 "2020-08-07T19:37:08Z")
Hi all ! I founded that doc.length variable starts counting approximately starting from 41 tokens in a document. Could anyone prompt, is it expected behavior ? I am trying to use scripted similarity and it's important… --- ## [Canvas Drop Down Filters](https://discuss.elastic.co/t/canvas-drop-down-filters/243790)
**Author:** [@aacharya](https://discuss.elastic.co/u/aacharya)\ **Replies:** 2\ **Last updated:** [August 7, 2020, 5:40pm UTC](https://discuss.elastic.co/t/canvas-drop-down-filters/243790 "2020-08-07T17:40:05Z")
I am trying to filter my data in Canvas using two drop downs. When someone selects an option from the first dropdown, the second one is automatically filtered to only contain options within their first selection. I als… --- ## [Kubernetes logs to filebeats](https://discuss.elastic.co/t/kubernetes-logs-to-filebeats/243682)
**Author:** [@sachithmuhandiram](https://discuss.elastic.co/u/sachithmuhandiram)\ **Replies:** 5\ **Last updated:** [August 7, 2020, 4:28pm UTC](https://discuss.elastic.co/t/kubernetes-logs-to-filebeats/243682 "2020-08-07T16:28:44Z")
I have ELK stack running in CentOS-7 environment, and I try to get logs from my Kubernetes cluster. for that, I installed filebeats as described. And those pods are running. I can see Obeservability-\> Logs shows kubern… --- ## [Getting new uuid every hour in logstash pipeline](https://discuss.elastic.co/t/getting-new-uuid-every-hour-in-logstash-pipeline/243406)
**Author:** [@Gopal\_Chauhan](https://discuss.elastic.co/u/Gopal_Chauhan)\ **Replies:** 2\ **Last updated:** [August 7, 2020, 4:18pm UTC](https://discuss.elastic.co/t/getting-new-uuid-every-hour-in-logstash-pipeline/243406 "2020-08-07T16:18:40Z")
Hi, I want to assign one unique id to all event/messages processed by logstash pipeline with in one hour. how can i do that? is there any timer which i can use to check that one hour has passes and now need to change t… --- ## [How to configure nfs in ECK k8s Rancher](https://discuss.elastic.co/t/how-to-configure-nfs-in-eck-k8s-rancher/213936)
**Author:** [@Marinho\_DevOPs](https://discuss.elastic.co/u/Marinho_DevOPs)\ **Replies:** 11\ **Last updated:** [August 7, 2020, 3:40pm UTC](https://discuss.elastic.co/t/how-to-configure-nfs-in-eck-k8s-rancher/213936 "2020-08-07T15:40:43Z")
Hi I have a problem setting a volume in the all-in-one.yaml file. I am trying to map an ntfs to persist the external volume and not use the Elastic default. Could someone help me in this case. My file. apiVersion: ap… --- ## [Logstash is sending variables to elasticsearch](https://discuss.elastic.co/t/logstash-is-sending-variables-to-elasticsearch/244082)
**Author:** [@shreddoctor](https://discuss.elastic.co/u/shreddoctor)\ **Replies:** 10\ **Last updated:** [August 7, 2020, 3:19pm UTC](https://discuss.elastic.co/t/logstash-is-sending-variables-to-elasticsearch/244082 "2020-08-07T15:19:49Z")
I have an issue where logstash is sending the variables to elasticsearch instead of enumerating the contents of the variable. The variables in question are coming from filebeat and I'm using these variables to create 2 d… --- ## [Cluster state update taking more than 10 seconds warnings](https://discuss.elastic.co/t/cluster-state-update-taking-more-than-10-seconds-warnings/243768)
**Author:** [@luiz.ooliveira](https://discuss.elastic.co/u/luiz.ooliveira)\ **Replies:** 7\ **Last updated:** [August 7, 2020, 2:47pm UTC](https://discuss.elastic.co/t/cluster-state-update-taking-more-than-10-seconds-warnings/243768 "2020-08-07T14:47:59Z")
Hi, I'm getting the following warning every time I update a cluster setting: took \[10.6s\], which is over \[10s\], to compute cluster state update for \[update-settings\] Is there any way to identify where it is taking mor… --- ## [How to ssh into eleasticsearch vm host ? This is for self managed ES on Azure](https://discuss.elastic.co/t/how-to-ssh-into-eleasticsearch-vm-host-this-is-for-self-managed-es-on-azure/244110)
**Author:** [@jpatel](https://discuss.elastic.co/u/jpatel)\ **Replies:** 3\ **Last updated:** [August 7, 2020, 2:44pm UTC](https://discuss.elastic.co/t/how-to-ssh-into-eleasticsearch-vm-host-this-is-for-self-managed-es-on-azure/244110 "2020-08-07T14:44:37Z")
I can ssh into kibana vm host using the IP address using putty ssh. I have tried to do same for elastic node vm and it does not work. I tried to ssh into elastic node from kibana host and it does not work for me. Plea… --- ## [Multi shard vs Multi index (Assuming same data)](https://discuss.elastic.co/t/multi-shard-vs-multi-index-assuming-same-data/244103)
**Author:** [@TheWorkingDeveloper](https://discuss.elastic.co/u/TheWorkingDeveloper)\ **Replies:** 1\ **Last updated:** [August 7, 2020, 2:31pm UTC](https://discuss.elastic.co/t/multi-shard-vs-multi-index-assuming-same-data/244103 "2020-08-07T14:31:22Z")
I'm currently working on a project where I have quite a bit of freedom in the structure and size of data. Now, I'm wondering if there's performance difference between the following two scenarios: Assuming a two node set… --- ## [High CPU on Elasticsearch for single node](https://discuss.elastic.co/t/high-cpu-on-elasticsearch-for-single-node/244126)
**Author:** [@karthik8890](https://discuss.elastic.co/u/karthik8890)\ **Replies:** 1\ **Last updated:** [August 7, 2020, 2:08pm UTC](https://discuss.elastic.co/t/high-cpu-on-elasticsearch-for-single-node/244126 "2020-08-07T14:08:24Z")
Elasticsearch version : 6.8.9 JDK : 8 RAM : 8GB JVM arguments: -Xms4g -Xmx4g and the remaining are default configurations provided by package. CPU utilization is going more than 90% and also high response time taki… --- ## [Unable to connect to Kibana](https://discuss.elastic.co/t/unable-to-connect-to-kibana/243974)
**Author:** [@pchar](https://discuss.elastic.co/u/pchar)\ **Replies:** 17\ **Last updated:** [August 7, 2020, 1:48pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-kibana/243974 "2020-08-07T13:48:17Z")
Hello, I have configured ELK with a nginx in front for HTTPS and authentication. This setup worked perfectly until this morning (I stopped the server for days and restarted it). WHen I try to connect to kibana with Fir… --- ## [Azure blob plugin to logstash](https://discuss.elastic.co/t/azure-blob-plugin-to-logstash/244183)
**Author:** [@Amit\_Agarwal](https://discuss.elastic.co/u/Amit_Agarwal)\ **Replies:** 0\ **Last updated:** [August 7, 2020, 1:46pm UTC](https://discuss.elastic.co/t/azure-blob-plugin-to-logstash/244183 "2020-08-07T13:46:03Z")
Hi, I am trying to send logs from azure blob storage to logstash. I am using azureblob input plugin but i dont see any logs being sent to logstash and I get no errors in debug logs. The files have extension of .log.gz. … --- ## [Multi pipelines](https://discuss.elastic.co/t/multi-pipelines/243676)
**Author:** [@peretz\_shlomi](https://discuss.elastic.co/u/peretz_shlomi)\ **Replies:** 4\ **Last updated:** [August 7, 2020, 1:24pm UTC](https://discuss.elastic.co/t/multi-pipelines/243676 "2020-08-07T13:24:39Z")
hi i have two pipeline that collect csv file from different folder each folder collect the data to a different index The file name is the same (Inside the file the information is a bit different) i have problem that… --- ## [JSON response parsing at attribute level](https://discuss.elastic.co/t/json-response-parsing-at-attribute-level/243552)
**Author:** [@Puneeth\_S\_B\_Gowda1](https://discuss.elastic.co/u/Puneeth_S_B_Gowda1)\ **Replies:** 9\ **Last updated:** [August 7, 2020, 12:09pm UTC](https://discuss.elastic.co/t/json-response-parsing-at-attribute-level/243552 "2020-08-07T12:09:27Z")
Hi, my logstash configuration for moving JSON response isinput { beats { port =\> 5044 } } filter {mutate { split =\> { "message" =\> "@$@" }} mutate { add\_field =\> { "response" =\> "%{\[message\]\[7\]}" "channel\_typ" =\> "%… --- ## [Kibana pipelines ui not found?](https://discuss.elastic.co/t/kibana-pipelines-ui-not-found/241622)
**Author:** [@lework](https://discuss.elastic.co/u/lework)\ **Replies:** 6\ **Last updated:** [August 7, 2020, 12:20pm UTC](https://discuss.elastic.co/t/kibana-pipelines-ui-not-found/241622 "2020-08-07T12:20:06Z")
version : 7.8.0 kibana ui http://node1:5601/logstash/pipelines/nginx?\_g=(cluster\_uuid:%278vWjGROoTxeIW2yGB2UUng%27,refreshInterval:(pause:!f,value:10000),time:(from:now-1h,to:now)) {"statusCode":404,"error":"Not Found"… --- ## [Logstash continues to restart itself on connection failures](https://discuss.elastic.co/t/logstash-continues-to-restart-itself-on-connection-failures/244172)
**Author:** [@VinayM30](https://discuss.elastic.co/u/VinayM30)\ **Replies:** 0\ **Last updated:** [August 7, 2020, 12:10pm UTC](https://discuss.elastic.co/t/logstash-continues-to-restart-itself-on-connection-failures/244172 "2020-08-07T12:10:48Z")
I have a usecase where i need to ingest data from Oracle DB and send it to elastic search i have written a config file which is executing fine when connection is ok. but today when i ran it somehow password got wrong an… --- ## [Suspected bug: cannot disable a field using dynamic templates](https://discuss.elastic.co/t/suspected-bug-cannot-disable-a-field-using-dynamic-templates/244170)
**Author:** [@drs](https://discuss.elastic.co/u/drs)\ **Replies:** 0\ **Last updated:** [August 7, 2020, 12:05pm UTC](https://discuss.elastic.co/t/suspected-bug-cannot-disable-a-field-using-dynamic-templates/244170 "2020-08-07T12:05:29Z")
I am trying to use a dynamic template to disable analysis on a field by setting enabled: false in its mapping. This is the mapping I'm using: { "mappings": { "dynamic": true, "dynamic\_templates": \[ { … --- ## [Clean scroll context after \`\_update\_by\_query\`](https://discuss.elastic.co/t/clean-scroll-context-after-update-by-query/244164)
**Author:** [@Toma\_Popov](https://discuss.elastic.co/u/Toma_Popov)\ **Replies:** 0\ **Last updated:** [August 7, 2020, 11:36am UTC](https://discuss.elastic.co/t/clean-scroll-context-after-update-by-query/244164 "2020-08-07T11:36:27Z")
Hello, I have a question regarding scroll context-s created by the Update by query API. Currently we create a lot of scroll context, when we update events in our system. The scrolls are kept for just one minute, but du… --- ## [Error fetching data Bad Request msgs on my dashboard views](https://discuss.elastic.co/t/error-fetching-data-bad-request-msgs-on-my-dashboard-views/244076)
**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\ **Replies:** 2\ **Last updated:** [August 7, 2020, 11:33am UTC](https://discuss.elastic.co/t/error-fetching-data-bad-request-msgs-on-my-dashboard-views/244076 "2020-08-07T11:33:47Z")
I am getting these constantly. Any ideas how to solve? Thanks in advance, Mark Error fetching data Bad Request Error: Bad Request at Fetch.\_callee3$ (https://kibana.bobot.ai/bundles/commons.bundle.js:3:4049443) … --- ## [Overwriting the @timestamp work on stdout but don't work on es](https://discuss.elastic.co/t/overwriting-the-timestamp-work-on-stdout-but-dont-work-on-es/244131)
**Author:** [@Tristan\_D](https://discuss.elastic.co/u/Tristan_D)\ **Replies:** 4\ **Last updated:** [August 7, 2020, 10:36am UTC](https://discuss.elastic.co/t/overwriting-the-timestamp-work-on-stdout-but-dont-work-on-es/244131 "2020-08-07T10:36:53Z")
I want to overwrite the @timestamp with date filter. The result in the stdout is ok, the @timestamp is written by the log time, but there is no document written into the elasticsearch. If I remove the date filter, the … --- ## [Nginx as a reverse proxy for kibana gives 401 for /31997/bundles resources](https://discuss.elastic.co/t/nginx-as-a-reverse-proxy-for-kibana-gives-401-for-31997-bundles-resources/244151)
**Author:** [@Muhammad\_Umair\_Baig](https://discuss.elastic.co/u/Muhammad_Umair_Baig)\ **Replies:** 0\ **Last updated:** [August 7, 2020, 10:11am UTC](https://discuss.elastic.co/t/nginx-as-a-reverse-proxy-for-kibana-gives-401-for-31997-bundles-resources/244151 "2020-08-07T10:11:54Z")
I am using 7.8.0 version of kibana and elasticsearch. on the front i have configured nginx 1.19 as a reverse proxy. i have put following configurations on nginx.conf but when i hit https://DNS:4443 (Nginx url) it ends u… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1292) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1294)