# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1306 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1307 --- ## [Elasticsearch master(8.0.0) nodes can't form into a cluster](https://discuss.elastic.co/t/elasticsearch-master-8-0-0-nodes-cant-form-into-a-cluster/243153)
**Author:** [@vsop\_479](https://discuss.elastic.co/u/vsop_479)\ **Replies:** 2\ **Last updated:** [July 31, 2020, 3:02am UTC](https://discuss.elastic.co/t/elasticsearch-master-8-0-0-nodes-cant-form-into-a-cluster/243153 "2020-07-31T03:02:20Z")
I configured three nodes with elasticsearch master branch（8.0.0）,but they can't form into a cluster. It seems they don't attempt to connection each other. Here is my configuration: node1: cluster.name: es-cluster node… --- ## [Capturing all messages in a log](https://discuss.elastic.co/t/capturing-all-messages-in-a-log/243261)
**Author:** [@eyts](https://discuss.elastic.co/u/eyts)\ **Replies:** 2\ **Last updated:** [July 31, 2020, 2:13am UTC](https://discuss.elastic.co/t/capturing-all-messages-in-a-log/243261 "2020-07-31T02:13:24Z")
I'm trying to capture all the messages in a log. For example, we get this log that contains 6 messages. "message":\["18.59.43 STC47873 +LRGPSEVRI\\u000007/29/20 18:59:43 I West Logged on to Tandem/Base24.","18.59.43 STC4… --- ## [Is there any way to find the "xxx" that produces the most geo data？](https://discuss.elastic.co/t/is-there-any-way-to-find-the-xxx-that-produces-the-most-geo-data/243142)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 4\ **Last updated:** [July 31, 2020, 1:48am UTC](https://discuss.elastic.co/t/is-there-any-way-to-find-the-xxx-that-produces-the-most-geo-data/243142 "2020-07-31T01:48:13Z")
I did not find the visitor information for this location in Zhengzhou in the city list. I want to find out the "XX" serivce traffic information corresponding to geo\_localtion. serive.name geo\_localtion xxxx … --- ## [Converting TimeStamp to epoch in LogStash](https://discuss.elastic.co/t/converting-timestamp-to-epoch-in-logstash/243168)
**Author:** [@Shanmuka\_Chowdary](https://discuss.elastic.co/u/Shanmuka_Chowdary)\ **Replies:** 9\ **Last updated:** [July 31, 2020, 12:22am UTC](https://discuss.elastic.co/t/converting-timestamp-to-epoch-in-logstash/243168 "2020-07-31T00:22:24Z")
Hi Team, I am trying to get some records from SQLServer through logstash. In the database the record is like this : 2002-09-03 04:00:00.000 , But it's saving in elastic like : "fileddate" : "2002-09-03T04:00:00.000Z" … --- ## [How to assign back bulk numbers of Unassigned shards back into cluster](https://discuss.elastic.co/t/how-to-assign-back-bulk-numbers-of-unassigned-shards-back-into-cluster/243093)
**Author:** [@suddhasil.sarkar](https://discuss.elastic.co/u/suddhasil.sarkar)\ **Replies:** 4\ **Last updated:** [July 30, 2020, 11:35pm UTC](https://discuss.elastic.co/t/how-to-assign-back-bulk-numbers-of-unassigned-shards-back-into-cluster/243093 "2020-07-30T23:35:57Z")
Hi All, any help is much appreciated. due to unexpected shutdown of my master nodes in elastic cluster I see more than 400 unassigned shards at this point, and wanted to check if there is any way I can assign them back a… --- ## [Build a visualization based on gerenralization of data](https://discuss.elastic.co/t/build-a-visualization-based-on-gerenralization-of-data/243265)
**Author:** [@Carlos\_Zottmann](https://discuss.elastic.co/u/Carlos_Zottmann)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 9:45pm UTC](https://discuss.elastic.co/t/build-a-visualization-based-on-gerenralization-of-data/243265 "2020-07-30T21:45:09Z")
Hi, Everyone! Sorry for the newbie question! I have data of an inventory of my virtual servers. So far it has been a piece of cake building a visualization of my servers grouped by Operating Systems, so I´ve got a nice… --- ## [How to visualise syslog reporting data deltas](https://discuss.elastic.co/t/how-to-visualise-syslog-reporting-data-deltas/242753)
**Author:** [@nisaxena](https://discuss.elastic.co/u/nisaxena)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 9:30pm UTC](https://discuss.elastic.co/t/how-to-visualise-syslog-reporting-data-deltas/242753 "2020-07-30T21:30:35Z")
Hi There, I am new to ELK, so need suggestion on visualisation of rsyslog data. I am continuously ingesting rsyslog data from multiple rsyslog servers to my ELK stack. What I wish to have is, a view wherein I can have a… --- ## [Is Kibana Space causing long time to load?](https://discuss.elastic.co/t/is-kibana-space-causing-long-time-to-load/242931)
**Author:** [@stongia](https://discuss.elastic.co/u/stongia)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 9:18pm UTC](https://discuss.elastic.co/t/is-kibana-space-causing-long-time-to-load/242931 "2020-07-30T21:18:04Z")
In our Kibana setup we are creating multiple space (8 to be specific) and adding dashboards to it. When we load those dashboard as embedded link in Iframe of our application, dashboard are taking long time to load. Want… --- ## [Create a bar chart that shows the number of empty fields compared with the total number of records](https://discuss.elastic.co/t/create-a-bar-chart-that-shows-the-number-of-empty-fields-compared-with-the-total-number-of-records/243107)
**Author:** [@dandcp](https://discuss.elastic.co/u/dandcp)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 9:15pm UTC](https://discuss.elastic.co/t/create-a-bar-chart-that-shows-the-number-of-empty-fields-compared-with-the-total-number-of-records/243107 "2020-07-30T21:15:48Z")
I know I can do this using Vega, and I also am fairly confident I can solve this using scripted fields, but I'm curious if I'm doing this the wrong way and making something that should be really, really easy much harder. … --- ## [How to find last element of array in logstash](https://discuss.elastic.co/t/how-to-find-last-element-of-array-in-logstash/243276)
**Author:** [@Rakesh\_Katakam](https://discuss.elastic.co/u/Rakesh_Katakam)\ **Replies:** 4\ **Last updated:** [July 30, 2020, 8:44pm UTC](https://discuss.elastic.co/t/how-to-find-last-element-of-array-in-logstash/243276 "2020-07-30T20:44:10Z")
Hi, I am trying to split string and add a new event with last index as value. Here below is code snippet which I am trying. Could someone please help me out on the same. Input : eqdomain/eqlogs/abc/hyper.log Script: … --- ## [New Platform - is it possible to use modules from the legacy platform?](https://discuss.elastic.co/t/new-platform-is-it-possible-to-use-modules-from-the-legacy-platform/243208)
**Author:** [@AndreaTosti](https://discuss.elastic.co/u/AndreaTosti)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 8:33pm UTC](https://discuss.elastic.co/t/new-platform-is-it-possible-to-use-modules-from-the-legacy-platform/243208 "2020-07-30T20:33:57Z")
I want to migrate my plugin to the new platform and I generated the skeleton using https://github.com/elastic/kibana/tree/master/packages/kbn-plugin-generator. I have encountered two anomalies: On 7.7.0, after inserti… --- ## [Why Can't Histogram Interval Be Decimal](https://discuss.elastic.co/t/why-cant-histogram-interval-be-decimal/243146)
**Author:** [@Ethan777100](https://discuss.elastic.co/u/Ethan777100)\ **Replies:** 0\ **Last updated:** [July 30, 2020, 3:04am UTC](https://discuss.elastic.co/t/why-cant-histogram-interval-be-decimal/243146 "2020-07-30T03:04:25Z")
Continuing the discussion from Histogram interval: I disagree with the constraint that the interval must be a decimal. I have a use case whose data is time duration which nominally falls between 0-5seconds. i also wann… --- ## [Embed Dashboard on external web page with search](https://discuss.elastic.co/t/embed-dashboard-on-external-web-page-with-search/242972)
**Author:** [@Jana](https://discuss.elastic.co/u/Jana)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 8:17pm UTC](https://discuss.elastic.co/t/embed-dashboard-on-external-web-page-with-search/242972 "2020-07-30T20:17:25Z")
Hi, I want to embed a kibana dashboard on an external html page. To do this I took the dashboard as iframe code via 'Share' and created the following simple page: \ \ \ \ **Author:** [@Siqi\_Deng](https://discuss.elastic.co/u/Siqi_Deng)\ **Replies:** 0\ **Last updated:** [July 30, 2020, 8:01pm UTC](https://discuss.elastic.co/t/possible-snapshot-bug-v7-8-0/243280 "2020-07-30T20:01:36Z") Hi, I try to create a snapshot of five indices via the Kibana dev\_tools like below PUT \_snapshot/shrink-cori-syslog/shrink-cori-syslog\_2020-04-24\_2020-04-29 { "indices": "shrink-cori-syslog-000101,shrink-cori-syslog-… --- ## [Kibana Calculate increase of Metric value](https://discuss.elastic.co/t/kibana-calculate-increase-of-metric-value/243179)
**Author:** [@sout13](https://discuss.elastic.co/u/sout13)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 8:01pm UTC](https://discuss.elastic.co/t/kibana-calculate-increase-of-metric-value/243179 "2020-07-30T20:01:20Z")
Hello, I am just starting to use Elasticsearch and Kibana. Was able to get a cumulative matric into elasticsearch, but are struggling to visualize or get my head around visualizing the increase of the value for set time… --- ## [Matching field with response](https://discuss.elastic.co/t/matching-field-with-response/243257)
**Author:** [@Eknoor](https://discuss.elastic.co/u/Eknoor)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 7:55pm UTC](https://discuss.elastic.co/t/matching-field-with-response/243257 "2020-07-30T19:55:19Z")
Is there any way to get the field matched in response? Specifically any indication in response that with which field the query is matched?? Using elasticsearch 7.7.1 --- ## [Lots of empty fields in expanded document view](https://discuss.elastic.co/t/lots-of-empty-fields-in-expanded-document-view/243271)
**Author:** [@opoplawski](https://discuss.elastic.co/u/opoplawski)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 7:49pm UTC](https://discuss.elastic.co/t/lots-of-empty-fields-in-expanded-document-view/243271 "2020-07-30T19:49:20Z")
This behavior seems fairly new with a recent kibana or other update - when looking at the expanded document for an item in the discover list I see lots of empty fields. Apparently these are “date\_time” fields that kib… --- ## [Создание подкатегорий в индексе php api](https://discuss.elastic.co/t/php-api/242890)
**Author:** [@111311](https://discuss.elastic.co/u/111311)\ **Replies:** 6\ **Last updated:** [July 30, 2020, 7:01pm UTC](https://discuss.elastic.co/t/php-api/242890 "2020-07-30T19:01:58Z")
Здравствуйте мне нужно создать некоторую вложенность в индексе. Например для индекса blog нужно создать подкатегории posts и categories, это образно для примера. То есть чтобы обратившись 127.0.0.1:9200/blog/posts/1 полу… --- ## [Elasticsearch Master Node JVM reaching 99%](https://discuss.elastic.co/t/elasticsearch-master-node-jvm-reaching-99/241907)
**Author:** [@rsmith013](https://discuss.elastic.co/u/rsmith013)\ **Replies:** 7\ **Last updated:** [July 30, 2020, 6:48pm UTC](https://discuss.elastic.co/t/elasticsearch-master-node-jvm-reaching-99/241907 "2020-07-30T18:48:28Z")
I am running a 3 Master 8 Data node cluster. Elasticsearch Version 7.8.0 The cluster bumps along happily for several days with the regular sawtooth JVM pattern then suddenly ramps up and then hits 99%. This leads to… --- ## [Full Screen by default](https://discuss.elastic.co/t/full-screen-by-default/242942)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 6\ **Last updated:** [July 30, 2020, 4:36pm UTC](https://discuss.elastic.co/t/full-screen-by-default/242942 "2020-07-30T16:36:59Z")
Hi, Is there a way to set "Full screen" mode as default for a dashboard? The goal is that every time we call the dashboard, it will open in full screen mode, without having to click on the button. A way to obtain a sha… --- ## [Logstash multi-pipeline output failure breaks other pipelines](https://discuss.elastic.co/t/logstash-multi-pipeline-output-failure-breaks-other-pipelines/243246)
**Author:** [@Dave\_Waters](https://discuss.elastic.co/u/Dave_Waters)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 6:15pm UTC](https://discuss.elastic.co/t/logstash-multi-pipeline-output-failure-breaks-other-pipelines/243246 "2020-07-30T18:15:15Z")
Running Logstash 7.8.1 Multi pipelines Pipeline A output to B and C B output to ES cluster 1 C output to ES cluster 2 Shutdown ES cluster 1 Error from output attempt to send bulk request... normal error when ES is … --- ## [Logstash csv filter plugin, with mariadb audit plugin logs](https://discuss.elastic.co/t/logstash-csv-filter-plugin-with-mariadb-audit-plugin-logs/242953)
**Author:** [@fabrizio73](https://discuss.elastic.co/u/fabrizio73)\ **Replies:** 6\ **Last updated:** [July 30, 2020, 5:29pm UTC](https://discuss.elastic.co/t/logstash-csv-filter-plugin-with-mariadb-audit-plugin-logs/242953 "2020-07-30T17:29:32Z")
Hi, we are develeping our log management ELK Platform, and we managed almost everything we need in order to get logs with filebeat from percona, mariadb, ssh and SAMBA4 ADC access. The only issue we are facing is that lo… --- ## [Stemmer for keyword-fields before index](https://discuss.elastic.co/t/stemmer-for-keyword-fields-before-index/243231)
**Author:** [@Arol](https://discuss.elastic.co/u/Arol)\ **Replies:** 4\ **Last updated:** [July 30, 2020, 5:28pm UTC](https://discuss.elastic.co/t/stemmer-for-keyword-fields-before-index/243231 "2020-07-30T17:28:48Z")
Salut. I have field "Title". I use this field for aggregations, including building in the Kibana Tags Cloud, so the field is declared as a keyword. In this field, I write the title text, where each word is an array ele… --- ## [Log rotation script for logstash/elasticsearch logs](https://discuss.elastic.co/t/log-rotation-script-for-logstash-elasticsearch-logs/243214)
**Author:** [@pkshara](https://discuss.elastic.co/u/pkshara)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 5:25pm UTC](https://discuss.elastic.co/t/log-rotation-script-for-logstash-elasticsearch-logs/243214 "2020-07-30T17:25:34Z")
Hi Team, I am trying to understand the log rotation scripts for logstash/elasticsearch enabled by default. however i cannot find any logrotate script in servers. Can you please explain, what is the default log rotation… --- ## [Logstash - Filter.Aggregate - push\_map\_as\_event\_on\_timeout not happening](https://discuss.elastic.co/t/logstash-filter-aggregate-push-map-as-event-on-timeout-not-happening/243044)
**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\ **Replies:** 3\ **Last updated:** [July 30, 2020, 5:17pm UTC](https://discuss.elastic.co/t/logstash-filter-aggregate-push-map-as-event-on-timeout-not-happening/243044 "2020-07-30T17:17:53Z")
Hi there, Thanks in advance for your time I'm trying to use filter { aggregate { } } while reading/parsing an old log file Into this log file, every second, there is a block of statistics generated that I'd like to ag… --- ## [Can you answer these ELK questions?](https://discuss.elastic.co/t/can-you-answer-these-elk-questions/243047)
**Author:** [@myrsecurity](https://discuss.elastic.co/u/myrsecurity)\ **Replies:** 5\ **Last updated:** [July 30, 2020, 3:38pm UTC](https://discuss.elastic.co/t/can-you-answer-these-elk-questions/243047 "2020-07-30T15:38:40Z")
Given the following use case: Filebeat and Metricbeat installed on 10 centos. Each centos location represents a different customer (tenant): Topology and authentication Can we authenticate each feed and make sure tha… --- ## [Metric not being visualising in Gauge graph](https://discuss.elastic.co/t/metric-not-being-visualising-in-gauge-graph/241865)
**Author:** [@jimmyvalmer19](https://discuss.elastic.co/u/jimmyvalmer19)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 2:38pm UTC](https://discuss.elastic.co/t/metric-not-being-visualising-in-gauge-graph/241865 "2020-07-30T14:38:32Z")
Hi there, I'm having issues in my gauge visualization. It does't react on the metrict at all - it stays at 0. I use stress feature to stress 2 cores of my CPU at max. This gives me 50% CPU usage at the moment, cause I … --- ## [Logstash - Syslog Output - Custom message](https://discuss.elastic.co/t/logstash-syslog-output-custom-message/240979)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 7\ **Last updated:** [July 30, 2020, 2:37pm UTC](https://discuss.elastic.co/t/logstash-syslog-output-custom-message/240979 "2020-07-30T14:37:23Z")
Hi, I'm working with Logstash - Syslog Output and I've found problem with custom field message. I'm using Elasticstack 7.8.0. I've installed logstash syslog-output plugin. /usr/share/logstash/bin/logstash-plugin insta… --- ## [URL Reformatting in Kibana Visualization](https://discuss.elastic.co/t/url-reformatting-in-kibana-visualization/243236)
**Author:** [@stellarwinds1](https://discuss.elastic.co/u/stellarwinds1)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 2:27pm UTC](https://discuss.elastic.co/t/url-reformatting-in-kibana-visualization/243236 "2020-07-30T14:27:22Z")
Hi, In our logs we have the API being captured as something like GET:/xxx/yyy/carts/c3ui34u/status and GET:/xxx/yyy/carts/3j32j4l/status etc. i.e. the specific cartID is part of the API. So, while doing the aggregations… --- ## [Kibana not showing filter values in the add filter section on ubuntu server](https://discuss.elastic.co/t/kibana-not-showing-filter-values-in-the-add-filter-section-on-ubuntu-server/243201)
**Author:** [@hemant\_472](https://discuss.elastic.co/u/hemant_472)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 1:48pm UTC](https://discuss.elastic.co/t/kibana-not-showing-filter-values-in-the-add-filter-section-on-ubuntu-server/243201 "2020-07-30T13:48:18Z")
I am not able to see the filter value in kibana when using it as a service on an ubuntu server like below - someone please suggest how i can see values in here, i tried refreshing m index as well [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1305) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1307)