# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1330 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1331 --- ## [How to make kibana UI Access secure with users with limited privileges](https://discuss.elastic.co/t/how-to-make-kibana-ui-access-secure-with-users-with-limited-privileges/240695)
**Author:** [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)\ **Replies:** 5\ **Last updated:** [July 15, 2020, 12:06pm UTC](https://discuss.elastic.co/t/how-to-make-kibana-ui-access-secure-with-users-with-limited-privileges/240695 "2020-07-15T12:06:54Z")
Hi Team, How to make kibana UI Access secure with users/password with limited privileges in the basic license, like read-only access, full permission something like this, or any other suggestions? Also, I have another … --- ## [Selection based on duration?](https://discuss.elastic.co/t/selection-based-on-duration/238170)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 1\ **Last updated:** [July 15, 2020, 11:36am UTC](https://discuss.elastic.co/t/selection-based-on-duration/238170 "2020-07-15T11:36:08Z")
I've got some aggregate data that rolls up on a yearly basis. I've got real time data that feeds into one or more of the aggregated records to which I can add a field to indicating the yearly record it aggregates to. S… --- ## [ECK- Discovery GCE plugin not working in GKE cluster](https://discuss.elastic.co/t/eck-discovery-gce-plugin-not-working-in-gke-cluster/240209)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 7\ **Last updated:** [July 15, 2020, 10:48am UTC](https://discuss.elastic.co/t/eck-discovery-gce-plugin-not-working-in-gke-cluster/240209 "2020-07-15T10:48:45Z")
Hi All, I am trying to install gce discovery plugin in elasticsearch but unable to set the following parameters # get the IP address from network interface 1 network.host: \_gce:privateIp:1\_ # Using GCE internal hostnam… --- ## [Rss feed ingestion exception](https://discuss.elastic.co/t/rss-feed-ingestion-exception/241270)
**Author:** [@anu\_gaur](https://discuss.elastic.co/u/anu_gaur)\ **Replies:** 0\ **Last updated:** [July 15, 2020, 11:00am UTC](https://discuss.elastic.co/t/rss-feed-ingestion-exception/241270 "2020-07-15T11:00:47Z")
Hi, I am using logstash rss plugin for rss feeds ingestion in my elastic cloud. But when it try to ingest the feed, it throws exception Invalid RSS feed {:exception=\>#\} .… --- ## [ECK - can we run ECK operator in privileged mode](https://discuss.elastic.co/t/eck-can-we-run-eck-operator-in-privileged-mode/240474)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 2\ **Last updated:** [July 15, 2020, 10:49am UTC](https://discuss.elastic.co/t/eck-can-we-run-eck-operator-in-privileged-mode/240474 "2020-07-15T10:49:36Z")
Hi Team, Can we run elastic search pod in privileged mode? i want to map the host network of GKE to my elastic search pod use case : We are looking for running some of ES data nodes on host network (Pod needs to have h… --- ## [Question regarding dedicated master nodes](https://discuss.elastic.co/t/question-regarding-dedicated-master-nodes/241267)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 1\ **Last updated:** [July 15, 2020, 10:41am UTC](https://discuss.elastic.co/t/question-regarding-dedicated-master-nodes/241267 "2020-07-15T10:41:53Z")
Hello! What will happen to elasticsearch cluster if 2 out of 3 dedicated master nodes will go down? Let's say we have replication factor 2 and basically 2/3 of our cluster went down - we still have the data because it … --- ## [Sum of Average aggregation in visualization](https://discuss.elastic.co/t/sum-of-average-aggregation-in-visualization/238533)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 1\ **Last updated:** [July 15, 2020, 10:37am UTC](https://discuss.elastic.co/t/sum-of-average-aggregation-in-visualization/238533 "2020-07-15T10:37:48Z")
i using this script to get sum of average aggregation Script: { "size": 0, "aggs": { "by category": { "terms": { "field": "spv.keyword" }, "aggs": { "by user\_id": { "… --- ## [Logstash not able to create index](https://discuss.elastic.co/t/logstash-not-able-to-create-index/239941)
**Author:** [@sumitsahay](https://discuss.elastic.co/u/sumitsahay)\ **Replies:** 19\ **Last updated:** [July 15, 2020, 10:35am UTC](https://discuss.elastic.co/t/logstash-not-able-to-create-index/239941 "2020-07-15T10:35:03Z")
Hi All, My logstash file is not able to create the Index pattern in Kibana. My logstash.conf file /etc/logstash/conf.d/logstash.conf \< input { beats { port =\> 5044 type =\> syslog ssl\_certificate =\> "/etc… --- ## [Discover query with geolocation](https://discuss.elastic.co/t/discover-query-with-geolocation/241199)
**Author:** [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\ **Replies:** 2\ **Last updated:** [July 15, 2020, 10:25am UTC](https://discuss.elastic.co/t/discover-query-with-geolocation/241199 "2020-07-15T10:25:12Z")
Hi, FYI, I'm just a newbie with ES, but so... let's start :slight\_smile: I currently have a "discovery query", imagine that I have "stores" and each store has "products". Noticed that each store is geolocalized. So, t… --- ## [Ingesting High Volume of AWS Flowlogs](https://discuss.elastic.co/t/ingesting-high-volume-of-aws-flowlogs/241151)
**Author:** [@sam6](https://discuss.elastic.co/u/sam6)\ **Replies:** 1\ **Last updated:** [July 15, 2020, 10:16am UTC](https://discuss.elastic.co/t/ingesting-high-volume-of-aws-flowlogs/241151 "2020-07-15T10:16:10Z")
Hi, Im currently using the Logstash S3 input module to ingest flowlog data from an S3 bucket however it isn't pulling in enough data quick enough and so falling behind. I've tried upping the max batch size to 20000 in … --- ## [Logstash - Improving speed of reading data from Redis queue](https://discuss.elastic.co/t/logstash-improving-speed-of-reading-data-from-redis-queue/241260)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 0\ **Last updated:** [July 15, 2020, 9:56am UTC](https://discuss.elastic.co/t/logstash-improving-speed-of-reading-data-from-redis-queue/241260 "2020-07-15T09:56:09Z")
Hi, can you please help how to increase speed of reading messages from redis queue by Logstash? An application generates 100 mil. documents / day. I have 3 logstash instances. I've tried these input configuration: i… --- ## [Create data in Kibana](https://discuss.elastic.co/t/create-data-in-kibana/241249)
**Author:** [@leo.hamon](https://discuss.elastic.co/u/leo.hamon)\ **Replies:** 6\ **Last updated:** [July 15, 2020, 9:47am UTC](https://discuss.elastic.co/t/create-data-in-kibana/241249 "2020-07-15T09:47:07Z")
Hi everyone, I want to create data directly from Kibana, by making a visualization with inputs in my dashboard where the user can create data. To be a little bit more precise, let me give an example. I have some inform… --- ## [Populating SIEM](https://discuss.elastic.co/t/populating-siem/241235)
**Author:** [@darkbeatz](https://discuss.elastic.co/u/darkbeatz)\ **Replies:** 1\ **Last updated:** [July 15, 2020, 9:11am UTC](https://discuss.elastic.co/t/populating-siem/241235 "2020-07-15T09:11:06Z")
I am reletively new to Elastic SIEM. I have dont some formal training with elastic (2 day entry course) along with the online SIEM fundamentals course. I am also a certifice GIAC GCDA. Our operations team have primarily … --- ## [Clarifying the difference between Active shards and in-sync copies](https://discuss.elastic.co/t/clarifying-the-difference-between-active-shards-and-in-sync-copies/238716)
**Author:** [@paulcarey](https://discuss.elastic.co/u/paulcarey)\ **Replies:** 2\ **Last updated:** [July 15, 2020, 9:06am UTC](https://discuss.elastic.co/t/clarifying-the-difference-between-active-shards-and-in-sync-copies/238716 "2020-07-15T09:06:18Z")
Hi The replication docs state a single in-sync copy is sufficient to serve read requests and then, when describing the read model, the same doc states that the basic flow Select\[s\] an active copy of each relevant … --- ## [Can we run Logstash API endpoint in HTTPS (secured)?](https://discuss.elastic.co/t/can-we-run-logstash-api-endpoint-in-https-secured/241251)
**Author:** [@Agniv\_Gon](https://discuss.elastic.co/u/Agniv_Gon)\ **Replies:** 0\ **Last updated:** [July 15, 2020, 8:36am UTC](https://discuss.elastic.co/t/can-we-run-logstash-api-endpoint-in-https-secured/241251 "2020-07-15T08:36:51Z")
In my logstash I have configured logstash.yml with below: http.host: "0.0.0.0" http.port: 9000 And it is working fine \[Api Webserver\] agent - Successfully started Logstash API endpoint {:port=\>9000} Is there a way we… --- ## [時々 SERVICE\_UNAVAILABLE/2/no master が発生](https://discuss.elastic.co/t/service-unavailable-2-no-master/240625)
**Author:** [@chinone](https://discuss.elastic.co/u/chinone)\ **Replies:** 1\ **Last updated:** [July 15, 2020, 8:21am UTC](https://discuss.elastic.co/t/service-unavailable-2-no-master/240625 "2020-07-15T08:21:09Z")
Fluentd と Elasticsearch(v2.3.1)を利用しています。 通常は問題なく稼働しているのですが、約10分に一回、以下のエラー（SERVICE\_UNAVAILABLE/2/no master）がエラーログに表示されます。 マスターノードは正常に動いており、マスターの変更はおこっておりません。 どのような問題がおこっており、どうすれば解決できるでしょうか？ 2020-07-10 03:22:07 +0900 \[… --- ## [How to import attribute from another analyzer plugin](https://discuss.elastic.co/t/how-to-import-attribute-from-another-analyzer-plugin/241013)
**Author:** [@JBo\_Shim](https://discuss.elastic.co/u/JBo_Shim)\ **Replies:** 1\ **Last updated:** [July 15, 2020, 8:16am UTC](https://discuss.elastic.co/t/how-to-import-attribute-from-another-analyzer-plugin/241013 "2020-07-15T08:16:03Z")
Hi, I'm attempting to create custom token filter in elasticsearch (7.8.0, lucene 8.5.1). I managed to make my own plugin with filter, installed on my ES cluster. In this filter, I'm trying to use attribute from anothe… --- ## [Reindex error!](https://discuss.elastic.co/t/reindex-error/241125)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 5\ **Last updated:** [July 15, 2020, 7:09am UTC](https://discuss.elastic.co/t/reindex-error/241125 "2020-07-15T07:09:39Z")
Hello, I use elk version: v 7.7.1 I am using this command to reindex: POST \_reindex { "source": { "index": "logs-gelf-2020.07.06-000057" }, "dest": { "index": "tempconnect5" } } But i get that response: { "er… --- ## [Kibana scripted field (bad request error)](https://discuss.elastic.co/t/kibana-scripted-field-bad-request-error/238767)
**Author:** [@thanirin](https://discuss.elastic.co/u/thanirin)\ **Replies:** 4\ **Last updated:** [July 14, 2020, 3:45pm UTC](https://discuss.elastic.co/t/kibana-scripted-field-bad-request-error/238767 "2020-07-14T15:45:18Z")
Hi, so I added a scripted field in one of the index pattern. I am pretty sure the code should work fine. return doc\['sequence'\].value % 2 When I previewed the results, it works fine. However, when I tried to view it in… --- ## [Error in elk](https://discuss.elastic.co/t/error-in-elk/240956)
**Author:** [@Deepika\_Rawat](https://discuss.elastic.co/u/Deepika_Rawat)\ **Replies:** 11\ **Last updated:** [July 15, 2020, 6:34am UTC](https://discuss.elastic.co/t/error-in-elk/240956 "2020-07-15T06:34:45Z")
I tried to import using kv filter my logs started importing like this.. indent preformatted text by 4 spaces "authserver" =\> "a\_India RADIUS", "proto" =\> "6", "devname" =\> "FW\_1", "10:56:12\\tdate" =\> "2020-06-22\\tl… --- ## [Data Organization](https://discuss.elastic.co/t/data-organization/241178)
**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\ **Replies:** 3\ **Last updated:** [July 15, 2020, 6:29am UTC](https://discuss.elastic.co/t/data-organization/241178 "2020-07-15T06:29:57Z")
Hi, I have 150 thousands fathers and each father has 20 millions children there is only one type of document. document describes child and its father. I routed the documents by father id but I am not sure if it's a g… --- ## [Replacing missing aggregation value](https://discuss.elastic.co/t/replacing-missing-aggregation-value/241223)
**Author:** [@111366](https://discuss.elastic.co/u/111366)\ **Replies:** 0\ **Last updated:** [July 15, 2020, 5:12am UTC](https://discuss.elastic.co/t/replacing-missing-aggregation-value/241223 "2020-07-15T05:12:22Z")
Hello, I am an engineer preparing to migrate from splunk to elasticsearch. I wanted to aggregate the highest value of count every minute, and I wanted to replace the empty part with zero. However, it didn't work out as… --- ## [Elastic APM sanitization on message body](https://discuss.elastic.co/t/elastic-apm-sanitization-on-message-body/240913)
**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\ **Replies:** 7\ **Last updated:** [July 15, 2020, 5:07am UTC](https://discuss.elastic.co/t/elastic-apm-sanitization-on-message-body/240913 "2020-07-15T05:07:48Z")
We are using Elastic APM from Elasticsearch 7.8 with java agent. We would like to capture HTTP message body. However, it does not work as expected. First, I'd expect that the sanitization can ensure a field would not be… --- ## [Logstash pipeline execution order](https://discuss.elastic.co/t/logstash-pipeline-execution-order/240539)
**Author:** [@tbege](https://discuss.elastic.co/u/tbege)\ **Replies:** 2\ **Last updated:** [July 15, 2020, 4:17am UTC](https://discuss.elastic.co/t/logstash-pipeline-execution-order/240539 "2020-07-15T04:17:38Z")
Hello, I am working on a sync mechanism between a DB2 database and Elasticsearch, I am transporting the data with the JDBC plugin. However, I am running into the issue of the pipeline order, meaning: I have 3 masterd… --- ## [Elasticsearch index/result aggregation with multiple datasources](https://discuss.elastic.co/t/elasticsearch-index-result-aggregation-with-multiple-datasources/237649)
**Author:** [@tbege](https://discuss.elastic.co/u/tbege)\ **Replies:** 13\ **Last updated:** [July 15, 2020, 4:16am UTC](https://discuss.elastic.co/t/elasticsearch-index-result-aggregation-with-multiple-datasources/237649 "2020-07-15T04:16:38Z")
Hello, I am currently researching the functionalities and features of the Elastic stack, more precisely Elasticsearch and Logstash and would need some advice regarding a scenario that I would need to implement. I have s… --- ## [Elasticsearch restart issue](https://discuss.elastic.co/t/elasticsearch-restart-issue/241197)
**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\ **Replies:** 3\ **Last updated:** [July 15, 2020, 3:58am UTC](https://discuss.elastic.co/t/elasticsearch-restart-issue/241197 "2020-07-15T03:58:15Z")
Hi Guys, I changed network host to 0.0.0.0 from localhost and I restarted the machine that's all its gone below is the message, any suggestion thanks. ubuntu@ip-1XX-XX-X-X:~/ELK$ sudo /etc/init.d/elasticsearch status ●… --- ## [Elastic Search Failure over EC2 AWS](https://discuss.elastic.co/t/elastic-search-failure-over-ec2-aws/241130)
**Author:** [@BabarKhan](https://discuss.elastic.co/u/BabarKhan)\ **Replies:** 2\ **Last updated:** [July 15, 2020, 2:53am UTC](https://discuss.elastic.co/t/elastic-search-failure-over-ec2-aws/241130 "2020-07-15T02:53:49Z")
I was trying to install Magento over Amazon EC2 instance and it requires ElasticSearch as prerequisite. I followed available methods to install it through Archive and the other method. But none of them worked for me. Wh… --- ## [exception=\>#\ **Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\ **Replies:** 7\ **Last updated:** [July 15, 2020, 2:37am UTC](https://discuss.elastic.co/t/exception-logstash-unexpected-character-code-58-expected-a-valid-value-number-string-array-object-true-false-or-null/241198 "2020-07-15T02:37:37Z") I need to parse and have all the JSON object in one message but it is splitting into different messages as you can see in stdout below JSON: \[ { "SOURCE": "Source A", "Model": "Mo… --- ## [When \`.logstash\_jdbc\_last\_run\` is created?](https://discuss.elastic.co/t/when-logstash-jdbc-last-run-is-created/240902)
**Author:** [@ohoroyoi](https://discuss.elastic.co/u/ohoroyoi)\ **Replies:** 1\ **Last updated:** [July 15, 2020, 2:18am UTC](https://discuss.elastic.co/t/when-logstash-jdbc-last-run-is-created/240902 "2020-07-15T02:18:48Z")
Even if I create a file arbitrarily, the text in the file is erased and sql\_last\_value is not created. I originally had this file, but I deleted it. So I can't get sql\_last\_value. How should I solve it? --- ## [Facing issue in Discover in kibana while accessing index](https://discuss.elastic.co/t/facing-issue-in-discover-in-kibana-while-accessing-index/241152)
**Author:** [@adkalavadia](https://discuss.elastic.co/u/adkalavadia)\ **Replies:** 1\ **Last updated:** [July 15, 2020, 1:49am UTC](https://discuss.elastic.co/t/facing-issue-in-discover-in-kibana-while-accessing-index/241152 "2020-07-15T01:49:50Z")
Getting below error in discover window while accessing index. \[illegal\_argument\_exception\] Text fields are not optimised for operations that require per-document field data like aggregations and sorting, so these operat… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1329) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1331)