# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1327

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1328

---

## [NetFlow Traffic from ASA](https://discuss.elastic.co/t/netflow-traffic-from-asa/239680)

<div class="topic-metadata">

**Author:** [@bushman4](https://discuss.elastic.co/u/bushman4)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 3:22pm UTC](https://discuss.elastic.co/t/netflow-traffic-from-asa/239680 "2020-07-16T15:22:59Z")

</div>

I am a new user of all of this, and I believe I have it set up correctly, but I am seeing some strange results. I have the latest version of filebeat installed, and have the cisco and netflow modules enabled. I have th…

---

## [Script\_score with multiline code](https://discuss.elastic.co/t/script-score-with-multiline-code/241468)

<div class="topic-metadata">

**Author:** [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 2:42pm UTC](https://discuss.elastic.co/t/script-score-with-multiline-code/241468 "2020-07-16T14:42:41Z")

</div>

Hi, I have a query, this one compute a score with painless. I try to use multiline painless, using """, but the parser seems to unlike this. From what I understand, it should work, right ? Here is my query for review. …

---

## [Elasticsearch for correlation](https://discuss.elastic.co/t/elasticsearch-for-correlation/241479)

<div class="topic-metadata">

**Author:** [@Suat\_Bey](https://discuss.elastic.co/u/Suat_Bey)\
**Replies:** 5\
**Last updated:** [July 16, 2020, 2:40pm UTC](https://discuss.elastic.co/t/elasticsearch-for-correlation/241479 "2020-07-16T14:40:26Z")

</div>

Is it possible to write a query for elacticsearch something like this: If same IP and same username generates 3 different rule.id within 15 min.

---

## [Print Current date time in kibana watcher webhook body](https://discuss.elastic.co/t/print-current-date-time-in-kibana-watcher-webhook-body/238639)

<div class="topic-metadata">

**Author:** [@Nord](https://discuss.elastic.co/u/Nord)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 2:33pm UTC](https://discuss.elastic.co/t/print-current-date-time-in-kibana-watcher-webhook-body/238639 "2020-07-16T14:33:22Z")

</div>

Hi i have alert and i want to print current time/watcher trigger time in webhook body of a kibana watcher? i have tried to add ctx.trigger.scheduled\_time or ctx.trigger.current\_time but nothing appear!

---

## [Elasticsearch unassigned shards](https://discuss.elastic.co/t/elasticsearch-unassigned-shards/241296)

<div class="topic-metadata">

**Author:** [@apintilie](https://discuss.elastic.co/u/apintilie)\
**Replies:** 13\
**Last updated:** [July 16, 2020, 2:30pm UTC](https://discuss.elastic.co/t/elasticsearch-unassigned-shards/241296 "2020-07-16T14:30:16Z")

</div>

Hi all, I have an ES cluster, made from 3 nodes, all are master/ingest/data. The cluster is configured with 5 shards and 1 replica, so 5 primary shards and 5 replica shards. After a restart of the cluster, I have a lot…

---

## [All shards failed even after tuning](https://discuss.elastic.co/t/all-shards-failed-even-after-tuning/241080)

<div class="topic-metadata">

**Author:** [@gzucca](https://discuss.elastic.co/u/gzucca)\
**Replies:** 9\
**Last updated:** [July 16, 2020, 2:14pm UTC](https://discuss.elastic.co/t/all-shards-failed-even-after-tuning/241080 "2020-07-16T14:14:31Z")

</div>

Hi all, I took a look into lots of open thread related to the error I'm getting. In my company we are using ELK 7.5.1 for a development enviroment. Both ELK and Kibana stay on the same machine with 8GB of RAM. The JVM…

---

## [Nested geo\_shape's only stores the first shape](https://discuss.elastic.co/t/nested-geo-shapes-only-stores-the-first-shape/241448)

<div class="topic-metadata">

**Author:** [@aes](https://discuss.elastic.co/u/aes)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 1:46pm UTC](https://discuss.elastic.co/t/nested-geo-shapes-only-stores-the-first-shape/241448 "2020-07-16T13:46:57Z")

</div>

Given a mapping of: ... "polygons": { - "type": "nested", "properties": { - "polygon": { - "type": "geo\_shape" }, "name": { - "type…

---

## [How to restrict the panels of dashboard to not to use the global filters applied on?](https://discuss.elastic.co/t/how-to-restrict-the-panels-of-dashboard-to-not-to-use-the-global-filters-applied-on/241396)

<div class="topic-metadata">

**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 1:35pm UTC](https://discuss.elastic.co/t/how-to-restrict-the-panels-of-dashboard-to-not-to-use-the-global-filters-applied-on/241396 "2020-07-16T13:35:31Z")

</div>

I'm using Kibana 7.8.I have a dashboard where I have different visualizations. When I select a filter, it ends up being applied to all the visualizations on the dashboard. I want the filter to be applied to only certain …

---

## [How to disable error message in Kibana?](https://discuss.elastic.co/t/how-to-disable-error-message-in-kibana/241138)

<div class="topic-metadata">

**Author:** [@Murango](https://discuss.elastic.co/u/Murango)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 1:27pm UTC](https://discuss.elastic.co/t/how-to-disable-error-message-in-kibana/241138 "2020-07-16T13:27:29Z")

</div>

Hello, Problem description: Elasticsearch version: 6.8.10 Kibana version: 6.8.10 Describe the issue: When user go to Discover in Kibana and he don’t have access to some data, he receive error: Discover: no permissi…

---

## [Use Ruby to get field string length](https://discuss.elastic.co/t/use-ruby-to-get-field-string-length/241460)

<div class="topic-metadata">

**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 1:13pm UTC](https://discuss.elastic.co/t/use-ruby-to-get-field-string-length/241460 "2020-07-16T13:13:43Z")

</div>

I am trying to get the string length of a dns domain name and place into a new field. I've seen several posts to use ruby to achieve this but I can't seem to get it to work. This code is placed inside the filter {} brack…

---

## [Tag metrics as testing](https://discuss.elastic.co/t/tag-metrics-as-testing/241277)

<div class="topic-metadata">

**Author:** [@A\_Mightiev](https://discuss.elastic.co/u/A_Mightiev)\
**Replies:** 5\
**Last updated:** [July 16, 2020, 1:04pm UTC](https://discuss.elastic.co/t/tag-metrics-as-testing/241277 "2020-07-16T13:04:44Z")

</div>

Hello, I use Metricbeat with Logstash to process and send to my Elasticsearch cluster. I do performance testing in some equipment and I have to write down the start and end time of the test so I can go to Kibana and loo…

---

## [Embed visualization loads a ton js files](https://discuss.elastic.co/t/embed-visualization-loads-a-ton-js-files/241368)

<div class="topic-metadata">

**Author:** [@jodinathan](https://discuss.elastic.co/u/jodinathan)\
**Replies:** 3\
**Last updated:** [July 16, 2020, 12:57pm UTC](https://discuss.elastic.co/t/embed-visualization-loads-a-ton-js-files/241368 "2020-07-16T12:57:01Z")

</div>

I am embedding a visualization in a website and looking at the network tab of chrome, kibana loads 97 JS files. Most of them are under a directory called 31997. I guess that is some kind of version number. Is this norma…

---

## [Cant Create index pattern](https://discuss.elastic.co/t/cant-create-index-pattern/241405)

<div class="topic-metadata">

**Author:** [@shmuel](https://discuss.elastic.co/u/shmuel)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 12:20pm UTC](https://discuss.elastic.co/t/cant-create-index-pattern/241405 "2020-07-16T12:20:50Z")

</div>

The "Next Step" is blank...

---

## [Show / Hide Global Filter Bar in Kibana](https://discuss.elastic.co/t/show-hide-global-filter-bar-in-kibana/240646)

<div class="topic-metadata">

**Author:** [@jeeva](https://discuss.elastic.co/u/jeeva)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 12:20pm UTC](https://discuss.elastic.co/t/show-hide-global-filter-bar-in-kibana/240646 "2020-07-16T12:20:15Z")

</div>

Hi Team, We would like to hide Global Filter Bar( KQL Search and Calendar controls) in all our dashboard to end-users , we have tried to do in filter bar styles but it's not working. Can you please help to use attain t…

---

## [Get text similarity by Levenstein distance in range 0-1](https://discuss.elastic.co/t/get-text-similarity-by-levenstein-distance-in-range-0-1/241399)

<div class="topic-metadata">

**Author:** [@Alex\_D](https://discuss.elastic.co/u/Alex_D)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 11:50am UTC](https://discuss.elastic.co/t/get-text-similarity-by-levenstein-distance-in-range-0-1/241399 "2020-07-16T11:50:12Z")

</div>

Hi all ! I search by a text field and want to get a similarity score for the entire phrase. Algorithm - Levenshtein distance. The result should be normalized in the range 0 - 1 Example: text in query: "big hat" ex…

---

## [Logstash configs and grok pattern for java logs](https://discuss.elastic.co/t/logstash-configs-and-grok-pattern-for-java-logs/241135)

<div class="topic-metadata">

**Author:** [@Montego](https://discuss.elastic.co/u/Montego)\
**Replies:** 4\
**Last updated:** [July 16, 2020, 11:49am UTC](https://discuss.elastic.co/t/logstash-configs-and-grok-pattern-for-java-logs/241135 "2020-07-16T11:49:47Z")

</div>

Hi there! I have logs, wich looks like: \[INFO \] 28-04-2019 08:49:41.675 PM \[main\] client.Application - No active profile set, falling back to default profiles: default \[INFO \] 28-04-2019 08:49:41.735 PM \[main\] o.s.b.…

---

## [Maximum heap reached and GC not working](https://discuss.elastic.co/t/maximum-heap-reached-and-gc-not-working/241436)

<div class="topic-metadata">

**Author:** [@Barak](https://discuss.elastic.co/u/Barak)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 11:23am UTC](https://discuss.elastic.co/t/maximum-heap-reached-and-gc-not-working/241436 "2020-07-16T11:23:08Z")

</div>

Hi, As can be seen in the attached screenshot, at around 06:45:20 the heap scrapes the limit, when the GC count is 0 for the next minute. This causes this node to be unresponsive for this time period. It happens quite…

---

## [AWS EC2 based cluster best practices](https://discuss.elastic.co/t/aws-ec2-based-cluster-best-practices/235354)

<div class="topic-metadata">

**Author:** [@Lior\_Yakobov](https://discuss.elastic.co/u/Lior_Yakobov)\
**Replies:** 17\
**Last updated:** [July 16, 2020, 11:22am UTC](https://discuss.elastic.co/t/aws-ec2-based-cluster-best-practices/235354 "2020-07-16T11:22:23Z")

</div>

Hello, We are currently running a 20 data nodes cluster on AWS EC2 instances. Since we have only 1 replica per shard, and we cannot tolerate failure of more than 1 node at the time, we are not using ephermal storage bu…

---

## [Annotating a main class with enable elasticsearch repositories in Spring Data Elasticsearch](https://discuss.elastic.co/t/annotating-a-main-class-with-enable-elasticsearch-repositories-in-spring-data-elasticsearch/241434)

<div class="topic-metadata">

**Author:** [@imacpherson](https://discuss.elastic.co/u/imacpherson)\
**Replies:** 0\
**Last updated:** [July 16, 2020, 10:33am UTC](https://discuss.elastic.co/t/annotating-a-main-class-with-enable-elasticsearch-repositories-in-spring-data-elasticsearch/241434 "2020-07-16T10:33:25Z")

</div>

I've got a question regarding Spring Data Elasticsearch best practices using the EnableElasticsearchRepositories annotation. We've been working on writing a common Elasticsearch library to avoid repeating the same boiler…

---

## [How Attachments or file storage and searching is handled in Elasticsearch](https://discuss.elastic.co/t/how-attachments-or-file-storage-and-searching-is-handled-in-elasticsearch/241246)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 6\
**Last updated:** [July 16, 2020, 10:32am UTC](https://discuss.elastic.co/t/how-attachments-or-file-storage-and-searching-is-handled-in-elasticsearch/241246 "2020-07-16T10:32:41Z")

</div>

Hello Team, Could you please help me understand How Attachments or files like (pdf/text files/doc) are stored in elasticsearch and how the content and inverted index managed for searching. tried searching the document…

---

## [Stack Elastic sous ECK et accès à "Welcome to Nginx"](https://discuss.elastic.co/t/stack-elastic-sous-eck-et-acces-a-welcome-to-nginx/240959)

<div class="topic-metadata">

**Author:** [@LomigFR](https://discuss.elastic.co/u/LomigFR)\
**Replies:** 4\
**Last updated:** [July 16, 2020, 10:32am UTC](https://discuss.elastic.co/t/stack-elastic-sous-eck-et-acces-a-welcome-to-nginx/240959 "2020-07-16T10:32:08Z")

</div>

Bonjour, Je débute avec la stack Elastic et Kubernetes. J'essaie de faire fonctionner la stack Elastic avec ECK. Je ne travaille qu'en local avec : Windows 10 PRO Docker Desktop WSL 1 + Ubuntu 18.04 Pour le moment, j…

---

## [Logstash user-agent filter can't parse the user agent os with version](https://discuss.elastic.co/t/logstash-user-agent-filter-cant-parse-the-user-agent-os-with-version/240937)

<div class="topic-metadata">

**Author:** [@chairxiao](https://discuss.elastic.co/u/chairxiao)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 10:08am UTC](https://discuss.elastic.co/t/logstash-user-agent-filter-cant-parse-the-user-agent-os-with-version/240937 "2020-07-16T10:08:29Z")

</div>

Hello, My logstash's version is 7.7.1 I use the logstash user agent to parse the url,but i can't get the user agent os with version I got the parse info as blow: "name" =\> "Firefox", "os\_name…

---

## [Intersect documents with same id in two indices (5.6)](https://discuss.elastic.co/t/intersect-documents-with-same-id-in-two-indices-5-6/241321)

<div class="topic-metadata">

**Author:** [@AsafHirschfeld](https://discuss.elastic.co/u/AsafHirschfeld)\
**Replies:** 3\
**Last updated:** [July 16, 2020, 9:55am UTC](https://discuss.elastic.co/t/intersect-documents-with-same-id-in-two-indices-5-6/241321 "2020-07-16T09:55:37Z")

</div>

I have two indices with documents, each document assigned with a unique id. My goal is to find duplicate documents among the indices. Is there any sort of an intersection aggregation that i can make in order to determi…

---

## [No able to access Kibana in Azure](https://discuss.elastic.co/t/no-able-to-access-kibana-in-azure/241410)

<div class="topic-metadata">

**Author:** [@nilbak](https://discuss.elastic.co/u/nilbak)\
**Replies:** 4\
**Last updated:** [July 16, 2020, 9:52am UTC](https://discuss.elastic.co/t/no-able-to-access-kibana-in-azure/241410 "2020-07-16T09:52:34Z")

</div>

Hi , I have installed elasticsearch and kibana on linux in cloud. Both services are up and running. Output of curl for elastic search root@vm4:~# curl -XGET http://localhost:9200/\_cluster/health?pretty { "cluster\_n…

---

## [Creating dashboard in kibana based on logs](https://discuss.elastic.co/t/creating-dashboard-in-kibana-based-on-logs/241406)

<div class="topic-metadata">

**Author:** [@raj\_elk](https://discuss.elastic.co/u/raj_elk)\
**Replies:** 1\
**Last updated:** [July 16, 2020, 9:33am UTC](https://discuss.elastic.co/t/creating-dashboard-in-kibana-based-on-logs/241406 "2020-07-16T09:33:56Z")

</div>

In logs we have text like below so based on which we want to build dashboard INFO:root:2020-07-16 07:34:34.159403-Delta Count for sampleRegion\_sampleTrustee: 53 want to display delta count for every sampleRegion and sa…

---

## [Elasticsearch 7.7 crashing for Term Query if term text 200 - 300 char](https://discuss.elastic.co/t/elasticsearch-7-7-crashing-for-term-query-if-term-text-200-300-char/241395)

<div class="topic-metadata">

**Author:** [@pappukhode](https://discuss.elastic.co/u/pappukhode)\
**Replies:** 9\
**Last updated:** [July 16, 2020, 9:29am UTC](https://discuss.elastic.co/t/elasticsearch-7-7-crashing-for-term-query-if-term-text-200-300-char/241395 "2020-07-16T09:29:26Z")

</div>

Hi, I have upgraded Elasticsearch 5.5 to 7.7 recently. I have only 1 index of 30 fields and 6K data. Dataset is very simple in nature. \[provided 1g memory in jvm options\] In the dataset i have a field description whi…

---

## [Azure Event Hub logs not parsing](https://discuss.elastic.co/t/azure-event-hub-logs-not-parsing/241142)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 8:45am UTC](https://discuss.elastic.co/t/azure-event-hub-logs-not-parsing/241142 "2020-07-16T08:45:43Z")

</div>

Hi, i am using the logstash azure\_event\_hubs plugin in basic configuration, i am running7.7, the logs are been pulled but the message is not been parsed, any suggestions? Thanks Phil

---

## [Benchmarking and stress/load testing scripted fields](https://discuss.elastic.co/t/benchmarking-and-stress-load-testing-scripted-fields/241252)

<div class="topic-metadata">

**Author:** [@vivekkarne](https://discuss.elastic.co/u/vivekkarne)\
**Replies:** 0\
**Last updated:** [July 15, 2020, 8:46am UTC](https://discuss.elastic.co/t/benchmarking-and-stress-load-testing-scripted-fields/241252 "2020-07-15T08:46:07Z")

</div>

I would like to know if there is a set standard to test the performance of an elastic cluster when scripted fields are sent in a request? I am trying to extract some sort of parity between the cluster performance without…

---

## [Logstash停止時にステータスがfailedになる](https://discuss.elastic.co/t/logstash-failed/241418)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 0\
**Last updated:** [July 16, 2020, 8:34am UTC](https://discuss.elastic.co/t/logstash-failed/241418 "2020-07-16T08:34:40Z")

</div>

logstash停止時に、statusがfailedになる事象が発生しています。バージョンは7.8を使用しておりますが、100％の確率で発生します # systemctl stop logstash # systemctl status logstash ● logstash.service - logstash Loaded: loaded (/etc/systemd/system/logstash.service; disa…

---

## [How Data scientist can use data stored in elasticsearch](https://discuss.elastic.co/t/how-data-scientist-can-use-data-stored-in-elasticsearch/241244)

<div class="topic-metadata">

**Author:** [@vero](https://discuss.elastic.co/u/vero)\
**Replies:** 3\
**Last updated:** [July 16, 2020, 8:32am UTC](https://discuss.elastic.co/t/how-data-scientist-can-use-data-stored-in-elasticsearch/241244 "2020-07-16T08:32:06Z")

</div>

Hi, I have a new project to do an IA project ( predictive maintenace). I'm looking for an architecture to store the data for the Data scientist. We hesitate between PostgreSQL or Elasticsearch. My proposititon currentl…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1326)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1328)
