# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1315 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1316 --- ## [Encoding URI kibana](https://discuss.elastic.co/t/encoding-uri-kibana/242495)
**Author:** [@hedia](https://discuss.elastic.co/u/hedia)\ **Replies:** 1\ **Last updated:** [July 24, 2020, 10:47am UTC](https://discuss.elastic.co/t/encoding-uri-kibana/242495 "2020-07-24T10:47:16Z")
I have to embed uri of dashboard kibana in my app web, i have to pass a parameter in my uri witch is a filter by any term(field) in the dashboard. the problem is that the final user can read the parameter from source and… --- ## [Enrich policy execution in elastic search](https://discuss.elastic.co/t/enrich-policy-execution-in-elastic-search/242496)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 0\ **Last updated:** [July 24, 2020, 10:42am UTC](https://discuss.elastic.co/t/enrich-policy-execution-in-elastic-search/242496 "2020-07-24T10:42:14Z")
Hi, I have created one enrich policy on one source index and used in ingest pipeline to enrich the data. my source index also will update if any new master data is added. the added new data is not enriching for the inc… --- ## [Stuck Installing 7.6 on Raspberry Pi 4 - curl: (7) Failed to connect to 192.168.1.20 port 9200: Connection refused](https://discuss.elastic.co/t/stuck-installing-7-6-on-raspberry-pi-4-curl-7-failed-to-connect-to-192-168-1-20-port-9200-connection-refused/241740)
**Author:** [@ShaunM1976](https://discuss.elastic.co/u/ShaunM1976)\ **Replies:** 5\ **Last updated:** [July 24, 2020, 10:38am UTC](https://discuss.elastic.co/t/stuck-installing-7-6-on-raspberry-pi-4-curl-7-failed-to-connect-to-192-168-1-20-port-9200-connection-refused/241740 "2020-07-24T10:38:22Z")
Hello lovely people, any experienced people out there that can help a newbie? I'm trying to install elasticsearch on my Pi 4 so I can install Magento 2.4 on it. I'm using a brand new Pi 4 with new installation of Raspbi… --- ## [Increase disk allocation for Elastic Search on linux](https://discuss.elastic.co/t/increase-disk-allocation-for-elastic-search-on-linux/242470)
**Author:** [@rao7806](https://discuss.elastic.co/u/rao7806)\ **Replies:** 3\ **Last updated:** [July 24, 2020, 10:00am UTC](https://discuss.elastic.co/t/increase-disk-allocation-for-elastic-search-on-linux/242470 "2020-07-24T10:00:19Z")
We are trying to index large datasets to elastic search and indexing is stopped due to watermark reached and nodes are set to read-only. We ran the command GET /\_cat/allocation?v and from the output, we came to know t… --- ## [Is there a way to prevent Kibana users from using Search and Add/change filter functions?](https://discuss.elastic.co/t/is-there-a-way-to-prevent-kibana-users-from-using-search-and-add-change-filter-functions/242338)
**Author:** [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\ **Replies:** 2\ **Last updated:** [July 24, 2020, 9:35am UTC](https://discuss.elastic.co/t/is-there-a-way-to-prevent-kibana-users-from-using-search-and-add-change-filter-functions/242338 "2020-07-24T09:35:04Z")
For some users I would like to be able to disable the search bar and the Add filter (and change filter) at the top of the Kibana screen. Is there a way to do this? I would like to disable this: --- ## [Speed Up Date range query](https://discuss.elastic.co/t/speed-up-date-range-query/242467)
**Author:** [@KBD-10](https://discuss.elastic.co/u/KBD-10)\ **Replies:** 4\ **Last updated:** [July 24, 2020, 9:02am UTC](https://discuss.elastic.co/t/speed-up-date-range-query/242467 "2020-07-24T09:02:55Z")
Hello every body, First of all I would like to thank you for your help. My problem is about query slow response. I have read a lot in the forum about the cluster configuration, shards and so on, and this is finally my … --- ## [Failed to join a cluster because of time-out](https://discuss.elastic.co/t/failed-to-join-a-cluster-because-of-time-out/238360)
**Author:** [@dasolyn](https://discuss.elastic.co/u/dasolyn)\ **Replies:** 5\ **Last updated:** [June 26, 2020, 2:56pm UTC](https://discuss.elastic.co/t/failed-to-join-a-cluster-because-of-time-out/238360 "2020-06-26T14:56:44Z")
I'm trying to build ElasticSearch cluster but it cause an error. Log for master node (All IPs and comments were omitted due to privacy) \[2020-06-23T16:33:47,361\]\[WARN \]\[o.e.c.c.Coordinator \] \[kn-log-01\] failed to … --- ## [Logstash output plugin for slack](https://discuss.elastic.co/t/logstash-output-plugin-for-slack/242297)
**Author:** [@marttonso](https://discuss.elastic.co/u/marttonso)\ **Replies:** 1\ **Last updated:** [July 24, 2020, 8:34am UTC](https://discuss.elastic.co/t/logstash-output-plugin-for-slack/242297 "2020-07-24T08:34:35Z")
Hello, I'd like to get a few more urgent log messages into slack channel. They're not critical enough to route to Pagerduty and create alerts & incidents, otherwise I could send them to Slack from there. The output plu… --- ## [Master Node toggles permanently](https://discuss.elastic.co/t/master-node-toggles-permanently/242284)
**Author:** [@michael\_0815](https://discuss.elastic.co/u/michael_0815)\ **Replies:** 6\ **Last updated:** [July 24, 2020, 8:08am UTC](https://discuss.elastic.co/t/master-node-toggles-permanently/242284 "2020-07-24T08:08:20Z")
Hi there, we have an issue that we have constantly toggling of the master node - it leaves and joins permanently. We deleted all nodes including pvc and started all over. Same issue in AKS again. It´s a 3 node setup. L… --- ## [Elasticsearch Service won't start](https://discuss.elastic.co/t/elasticsearch-service-wont-start/242264)
**Author:** [@Jensxy](https://discuss.elastic.co/u/Jensxy)\ **Replies:** 25\ **Last updated:** [July 24, 2020, 8:06am UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-start/242264 "2020-07-24T08:06:56Z")
After adding some memory to our server and rebooting it afterward, Elasticsearch does not start anymore. I am using ES 7.8.0 I execute sudo systemctl start elasticsearch.service and get the following error Job for el… --- ## [Spaces in JVM options](https://discuss.elastic.co/t/spaces-in-jvm-options/242475)
**Author:** [@sts](https://discuss.elastic.co/u/sts)\ **Replies:** 0\ **Last updated:** [July 24, 2020, 7:50am UTC](https://discuss.elastic.co/t/spaces-in-jvm-options/242475 "2020-07-24T07:50:08Z")
I want to add "-XX:OnOutOfMemoryError=kill %p" to the Elasticsearch JVM options. No matter which way I try, I can't make it work. I think it's because the jvm.options parser always separates on spaces, is that true? Is t… --- ## [Nested Query in ES](https://discuss.elastic.co/t/nested-query-in-es/242471)
**Author:** [@mitelastic](https://discuss.elastic.co/u/mitelastic)\ **Replies:** 0\ **Last updated:** [July 24, 2020, 7:43am UTC](https://discuss.elastic.co/t/nested-query-in-es/242471 "2020-07-24T07:43:46Z")
I have an index with below fields SimID - Guid, UserId - Guid, WhenUserTrained - Datetime, WhenUserClicked - Datetime. Now I want to get the user count for given simulation who trained in past under any simulaton. … --- ## [Using Logstash http input filter, what is the max file size limit can be sent to it?](https://discuss.elastic.co/t/using-logstash-http-input-filter-what-is-the-max-file-size-limit-can-be-sent-to-it/240839)
**Author:** [@Agniv\_Gon](https://discuss.elastic.co/u/Agniv_Gon)\ **Replies:** 1\ **Last updated:** [July 24, 2020, 7:06am UTC](https://discuss.elastic.co/t/using-logstash-http-input-filter-what-is-the-max-file-size-limit-can-be-sent-to-it/240839 "2020-07-24T07:06:55Z")
I am using Logstash 7.7.1 and using below conf for my logstash. I am trying to send .gz file and in header passing Content-Encoding: gzip which is working fine. But I am clueless about the max size limit which I can send… --- ## [Logstash http input plugin accepting gzip file but how to detect only text format?](https://discuss.elastic.co/t/logstash-http-input-plugin-accepting-gzip-file-but-how-to-detect-only-text-format/240683)
**Author:** [@Agniv\_Gon](https://discuss.elastic.co/u/Agniv_Gon)\ **Replies:** 4\ **Last updated:** [July 24, 2020, 6:51am UTC](https://discuss.elastic.co/t/logstash-http-input-plugin-accepting-gzip-file-but-how-to-detect-only-text-format/240683 "2020-07-24T06:51:22Z")
I am using the below conf for Logstash HTTP input plugin: I am trying to send .gz file and in header passing Content-Encoding: gzip. It is successfully doing its job but I am interested only in text format inside the gzi… --- ## [How to downgrade Elasticsearch 5.6.x Snapshot version?](https://discuss.elastic.co/t/how-to-downgrade-elasticsearch-5-6-x-snapshot-version/242423)
**Author:** [@Jayden\_Chew](https://discuss.elastic.co/u/Jayden_Chew)\ **Replies:** 5\ **Last updated:** [July 24, 2020, 5:13am UTC](https://discuss.elastic.co/t/how-to-downgrade-elasticsearch-5-6-x-snapshot-version/242423 "2020-07-24T05:13:33Z")
I've been attempting to migrate about 3TB of data from an AWS Elasticsearch Service cluster to a self managed Elasticsearch cluster made with EC2 instances. I was going to use snapshots to help with transferring all this… --- ## [ElasticSearch full text query (using multi-match) need to give more importance to document which starts with matched word](https://discuss.elastic.co/t/elasticsearch-full-text-query-using-multi-match-need-to-give-more-importance-to-document-which-starts-with-matched-word/242451)
**Author:** [@saikirant](https://discuss.elastic.co/u/saikirant)\ **Replies:** 0\ **Last updated:** [July 24, 2020, 5:20am UTC](https://discuss.elastic.co/t/elasticsearch-full-text-query-using-multi-match-need-to-give-more-importance-to-document-which-starts-with-matched-word/242451 "2020-07-24T05:20:38Z")
I have 2 documents whose fields are as follows. Doc1: "Identity Vijay" Doc2: "Vijay Identity" When I search for 'identity' both documents are appearing with same score. Ideally I want 'Doc1' to have higher score as 'm… --- ## [Trying to calculate differences between 2 timestamps](https://discuss.elastic.co/t/trying-to-calculate-differences-between-2-timestamps/242443)
**Author:** [@windowsrefund\_refund](https://discuss.elastic.co/u/windowsrefund_refund)\ **Replies:** 4\ **Last updated:** [July 24, 2020, 5:19am UTC](https://discuss.elastic.co/t/trying-to-calculate-differences-between-2-timestamps/242443 "2020-07-24T05:19:27Z")
input { generator { message =\> "Jul 24 03:35:03 myhost metricbeat: 2020-07-24T03:35:03.788Z#011INFO#011\[publisher\]#011pipeline/retry.go:225#011 done" count =\> 1 } } filter { grok { match =\> { "messag… --- ## [Send kafka topics to different elastic search hosts through logstash](https://discuss.elastic.co/t/send-kafka-topics-to-different-elastic-search-hosts-through-logstash/242446)
**Author:** [@ankit9787](https://discuss.elastic.co/u/ankit9787)\ **Replies:** 1\ **Last updated:** [July 24, 2020, 5:14am UTC](https://discuss.elastic.co/t/send-kafka-topics-to-different-elastic-search-hosts-through-logstash/242446 "2020-07-24T05:14:00Z")
I have created one logstash conf file and reading kafka topic and trying to send to different elastic search deployed on different servers. Can you please help, what I am doing wrong. Nothings happening. Below my code W… --- ## [Logstash SNS output failing](https://discuss.elastic.co/t/logstash-sns-output-failing/242273)
**Author:** [@Vishnuvardhan\_K](https://discuss.elastic.co/u/Vishnuvardhan_K)\ **Replies:** 7\ **Last updated:** [July 24, 2020, 5:08am UTC](https://discuss.elastic.co/t/logstash-sns-output-failing/242273 "2020-07-24T05:08:58Z")
Hi, I am trying to send the logs to the SNS topic through Filebeat and Logstash. But it is failing with the attached below the message. When I try to send the output to stdout, then it works without any issues. Can so… --- ## [Kibana 내부에서 쓰이는 index 생성 규칙이 궁금합니다](https://discuss.elastic.co/t/kibana-index/242438)
**Author:** [@8wlgns](https://discuss.elastic.co/u/8wlgns)\ **Replies:** 0\ **Last updated:** [July 24, 2020, 4:02am UTC](https://discuss.elastic.co/t/kibana-index/242438 "2020-07-24T04:02:14Z")
안녕하세요? Kibana 내부에서 쓰이는 index (.kibana\_N , .kibana\_\\_\\_N 와 같은) 생성 규칙중 'N'이 증가하는 것 대해 궁금한 점이 있어서 질문 드립니다. 공식 문서를 보면, Saved objects are stored in an index named \`.kibana\_N\` , where \`N\` is a number… --- ## [Ship logs from multiple filebeat instances running on different machines to single logstash server](https://discuss.elastic.co/t/ship-logs-from-multiple-filebeat-instances-running-on-different-machines-to-single-logstash-server/242435)
**Author:** [@Gyanprakash\_Mishra](https://discuss.elastic.co/u/Gyanprakash_Mishra)\ **Replies:** 0\ **Last updated:** [July 24, 2020, 3:49am UTC](https://discuss.elastic.co/t/ship-logs-from-multiple-filebeat-instances-running-on-different-machines-to-single-logstash-server/242435 "2020-07-24T03:49:07Z")
I have following scenario : multiple applications running on different server spread across region. How should I configure system so that i have filebeat instance running on each application server and sending data to on… --- ## [Ask for recommendation to monitor 1000 PC with Metricbeat](https://discuss.elastic.co/t/ask-for-recommendation-to-monitor-1000-pc-with-metricbeat/242434)
**Author:** [@ahmad.ar](https://discuss.elastic.co/u/ahmad.ar)\ **Replies:** 0\ **Last updated:** [July 24, 2020, 3:36am UTC](https://discuss.elastic.co/t/ask-for-recommendation-to-monitor-1000-pc-with-metricbeat/242434 "2020-07-24T03:36:04Z")
Hallo Everything, can I ask for advice, how should I build elasticsearch cluster if I want to monitor 1000 PC with Metricbeat with 3 months data retention. How many nodes do I need to prepare, is it necessary to dedicate… --- ## [Logstash s3 output plugin storing files as .txt instead of .json on s3](https://discuss.elastic.co/t/logstash-s3-output-plugin-storing-files-as-txt-instead-of-json-on-s3/242431)
**Author:** [@jericomaramot](https://discuss.elastic.co/u/jericomaramot)\ **Replies:** 0\ **Last updated:** [July 24, 2020, 3:18am UTC](https://discuss.elastic.co/t/logstash-s3-output-plugin-storing-files-as-txt-instead-of-json-on-s3/242431 "2020-07-24T03:18:33Z")
Hi, I need to store my logstash output to s3 as json file. But upon checking the output files in s3, it is stored as .txt format. Here is my output code: output { s3 { region =\> "${elkRegion}" … --- ## [Data table disappears using "Top Hit" aggregation](https://discuss.elastic.co/t/data-table-disappears-using-top-hit-aggregation/242419)
**Author:** [@Ram2416](https://discuss.elastic.co/u/Ram2416)\ **Replies:** 6\ **Last updated:** [July 24, 2020, 2:16am UTC](https://discuss.elastic.co/t/data-table-disappears-using-top-hit-aggregation/242419 "2020-07-24T02:16:28Z")
Hi, I'm working on creating a data table using "Top Hit" aggregation in Kibana version 6.6.0. I'm encountering a unique problem which I'm not able to figure out. For few of the parameters, I'm able to sort and display… --- ## [How to upgrade my ElasticSearch](https://discuss.elastic.co/t/how-to-upgrade-my-elasticsearch/242036)
**Author:** [@Felipe](https://discuss.elastic.co/u/Felipe)\ **Replies:** 11\ **Last updated:** [July 24, 2020, 1:08am UTC](https://discuss.elastic.co/t/how-to-upgrade-my-elasticsearch/242036 "2020-07-24T01:08:31Z")
Hey gus, hope everybody is doing good! I'm having a problem to upgrade my ES cluster and i'm really lost on how many nodes do i need, their role, their hardware. Right now, i have 2 nodes which one of them is Master Dat… --- ## [How to track the stream of documents inputed in Logstash by Elastic search input plugin?](https://discuss.elastic.co/t/how-to-track-the-stream-of-documents-inputed-in-logstash-by-elastic-search-input-plugin/242417)
**Author:** [@lucasbemol](https://discuss.elastic.co/u/lucasbemol)\ **Replies:** 0\ **Last updated:** [July 23, 2020, 11:10pm UTC](https://discuss.elastic.co/t/how-to-track-the-stream-of-documents-inputed-in-logstash-by-elastic-search-input-plugin/242417 "2020-07-23T23:10:53Z")
I'm having some problems with ElasticSearch. Keeping it short, I need to look into my logs and normalize them in various indexes. My logs are stored in both an index of ElasticSearch and in a relational database. These … --- ## [Engineer certification exam topics vs Engineer I, II training labs](https://discuss.elastic.co/t/engineer-certification-exam-topics-vs-engineer-i-ii-training-labs/241433)
**Author:** [@jkhere](https://discuss.elastic.co/u/jkhere)\ **Replies:** 7\ **Last updated:** [July 23, 2020, 10:32pm UTC](https://discuss.elastic.co/t/engineer-certification-exam-topics-vs-engineer-i-ii-training-labs/241433 "2020-07-23T22:32:26Z")
Hi, The following topics are included in the official exam objectives but these are missing in the labs of Engineer I and II training labs. Write and execute pipeline aggregations Use the scroll API to retrieve large… --- ## [Ingest pipeline for text analysis?](https://discuss.elastic.co/t/ingest-pipeline-for-text-analysis/241857)
**Author:** [@yolo](https://discuss.elastic.co/u/yolo)\ **Replies:** 11\ **Last updated:** [July 23, 2020, 10:07pm UTC](https://discuss.elastic.co/t/ingest-pipeline-for-text-analysis/241857 "2020-07-23T22:07:19Z")
Hi community, is it possible to apply text analysis on search index using ingest pipelines? i still did not find any processor suitable for this task. The idea is to detect the language using inference processor from in… --- ## [NegativeArraySizeException: -1680966849, HostUnreachableError and OOM](https://discuss.elastic.co/t/negativearraysizeexception-1680966849-hostunreachableerror-and-oom/242366)
**Author:** [@rajdevworks](https://discuss.elastic.co/u/rajdevworks)\ **Replies:** 4\ **Last updated:** [July 23, 2020, 10:04pm UTC](https://discuss.elastic.co/t/negativearraysizeexception-1680966849-hostunreachableerror-and-oom/242366 "2020-07-23T22:04:30Z")
On our ELK stack, while ingesting bulk logs, we are seeing HostUnreachableError often followed by connection restoration message in logstash.err. Following that we see NegativeArraySizeException: -1680966849 multiple tim… --- ## [Need some help creating a complex query/aggregation](https://discuss.elastic.co/t/need-some-help-creating-a-complex-query-aggregation/242402)
**Author:** [@sKurryBoii](https://discuss.elastic.co/u/sKurryBoii)\ **Replies:** 0\ **Last updated:** [July 23, 2020, 8:51pm UTC](https://discuss.elastic.co/t/need-some-help-creating-a-complex-query-aggregation/242402 "2020-07-23T20:51:04Z")
I'm trying to create a query to help create a retention cohort. Essentially, my index consists of many records with the fields username,timestamp,taskCompleted From this data I'm trying to group users into weeks (based… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1314) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1316)