# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1371 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1372 --- ## [Flow Search Data MDM via Elasticsearch](https://discuss.elastic.co/t/flow-search-data-mdm-via-elasticsearch/238224)
**Author:** [@alf1an](https://discuss.elastic.co/u/alf1an)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 10:57pm UTC](https://discuss.elastic.co/t/flow-search-data-mdm-via-elasticsearch/238224 "2020-06-23T22:57:26Z")
Hi All, I have a project to integrate Web Portal, Elasticsearch and IBM MDM. I already create the flow about it, but is it correct flow? Big appreciate for your thought and recommendation Thanks --- ## [How to Set up a cluster for high availability](https://discuss.elastic.co/t/how-to-set-up-a-cluster-for-high-availability/237978)
**Author:** [@emreorucoglu](https://discuss.elastic.co/u/emreorucoglu)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 10:48pm UTC](https://discuss.elastic.co/t/how-to-set-up-a-cluster-for-high-availability/237978 "2020-06-23T22:48:13Z")
Hello there, I am trying to establish a remote cluster connection for high usability between two remote machines. However, although I can access the Elastic Search port, I cannot connect to the remote cluster. Can you h… --- ## [Resources usage](https://discuss.elastic.co/t/resources-usage/238333)
**Author:** [@Elastan](https://discuss.elastic.co/u/Elastan)\ **Replies:** 6\ **Last updated:** [June 23, 2020, 10:39pm UTC](https://discuss.elastic.co/t/resources-usage/238333 "2020-06-23T22:39:59Z")
Hello, I'm newbie to Elastic. Assuming index size will have 500GB, let's say 100 users each 5GB of index data. What hardware is needed for that? If querying/searching will be only performed always on about 1/100 of wh… --- ## [Watch for changes in Elastic documentation](https://discuss.elastic.co/t/watch-for-changes-in-elastic-documentation/238129)
**Author:** [@necmettin](https://discuss.elastic.co/u/necmettin)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 10:44pm UTC](https://discuss.elastic.co/t/watch-for-changes-in-elastic-documentation/238129 "2020-06-23T22:44:44Z")
Hi, Is there a way to be notified of documentation changes, like diff files or commits, showing what changed / got added / deleted? --- ## [Failed to execute index. number of documents in the index cannot exceed 2147483519](https://discuss.elastic.co/t/failed-to-execute-index-number-of-documents-in-the-index-cannot-exceed-2147483519/238124)
**Author:** [@DucTran](https://discuss.elastic.co/u/DucTran)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 10:43pm UTC](https://discuss.elastic.co/t/failed-to-execute-index-number-of-documents-in-the-index-cannot-exceed-2147483519/238124 "2020-06-23T22:43:31Z")
Hi Guys, I am having problems with the capacity of ElasticSearch as below. I'm understanding the number od docs per shard reached to maximum number - 2147483519. I deleted many docs but the error continues, Elasticsear… --- ## [How to create patterns\_dir in elastic logstash helm chart?](https://discuss.elastic.co/t/how-to-create-patterns-dir-in-elastic-logstash-helm-chart/238346)
**Author:** [@Phillip\_Boushy](https://discuss.elastic.co/u/Phillip_Boushy)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 9:53pm UTC](https://discuss.elastic.co/t/how-to-create-patterns-dir-in-elastic-logstash-helm-chart/238346 "2020-06-23T21:53:39Z")
I'm deploy the elastic.co logstash helm chart 7.7.1 to kubernetes. I'm using a ConfigMap to create an example file in /usr/share/logstash/pipeline/patterns/ But it seems like it's not being read. I keep getting an err… --- ## [Creating cases from signals](https://discuss.elastic.co/t/creating-cases-from-signals/238315)
**Author:** [@forkhead](https://discuss.elastic.co/u/forkhead)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 9:43pm UTC](https://discuss.elastic.co/t/creating-cases-from-signals/238315 "2020-06-23T21:43:48Z")
Hi, I am trying to understand a couple of things with Detections and Cases in Elastic SIEM - Is there a way to automatically create cases for some rule detections ? Is there a way to store or create Case Templates in C… --- ## [Does utf8json used in elastic v7.x support user defined custom formatters?](https://discuss.elastic.co/t/does-utf8json-used-in-elastic-v7-x-support-user-defined-custom-formatters/237283)
**Author:** [@stoj](https://discuss.elastic.co/u/stoj)\ **Replies:** 5\ **Last updated:** [June 23, 2020, 9:43pm UTC](https://discuss.elastic.co/t/does-utf8json-used-in-elastic-v7-x-support-user-defined-custom-formatters/237283 "2020-06-23T21:43:29Z")
I've got an interesting situation whereby elastic v7 default utf8json has managed to serialize my object, but is unable to de-serialize it correctly. public class MyClass : FlagsSet { \[JsonIgnore\] … --- ## [Kibana cache the results of geo\_shape filter](https://discuss.elastic.co/t/kibana-cache-the-results-of-geo-shape-filter/237549)
**Author:** [@Scorpion21](https://discuss.elastic.co/u/Scorpion21)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 9:16pm UTC](https://discuss.elastic.co/t/kibana-cache-the-results-of-geo-shape-filter/237549 "2020-06-23T21:16:43Z")
I have created a Kibana Dashboard with elastic maps showing thousands of geo\_shape (multi-polygons). It takes too long to query the Dashboard when applying filters. I wonder if there is a way to cache the geo\_shape fil… --- ## [Query Hit limit](https://discuss.elastic.co/t/query-hit-limit/238336)
**Author:** [@th3Hopper](https://discuss.elastic.co/u/th3Hopper)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 9:05pm UTC](https://discuss.elastic.co/t/query-hit-limit/238336 "2020-06-23T21:05:37Z")
I have index 2M document. If I query GET indexName/\_search?q=email:info@yahoo.com It's giving me this result:- "took" : 12, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped" … --- ## [Find exact result](https://discuss.elastic.co/t/find-exact-result/238339)
**Author:** [@th3Hopper](https://discuss.elastic.co/u/th3Hopper)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 9:03pm UTC](https://discuss.elastic.co/t/find-exact-result/238339 "2020-06-23T21:03:15Z")
My goal is to find the exact match result from all of my documents. How can I achieve this? I have found 3 ways to achieve it but I'm confused about which one will be more effective. ### Exact search 1 GET email/\_searc… --- ## [Kibana doesn't show graphics for netflow index](https://discuss.elastic.co/t/kibana-doesnt-show-graphics-for-netflow-index/235010)
**Author:** [@Adrian\_Garrido](https://discuss.elastic.co/u/Adrian_Garrido)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 8:33pm UTC](https://discuss.elastic.co/t/kibana-doesnt-show-graphics-for-netflow-index/235010 "2020-06-23T20:33:24Z")
Hi. I ingested the traffic from a pcap with softflowd when logstash was listening that port, and a index was created in elasticsearch, the problem is kibanas doesn't show any dashboard or chart but it detects the index … --- ## [How to get max of 10minute Moving Average](https://discuss.elastic.co/t/how-to-get-max-of-10minute-moving-average/234886)
**Author:** [@Bhavya\_Bansal](https://discuss.elastic.co/u/Bhavya_Bansal)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 8:31pm UTC](https://discuss.elastic.co/t/how-to-get-max-of-10minute-moving-average/234886 "2020-06-23T20:31:45Z")
Hi, I have a data table in which I want to show the max of 10min and 1hr moving average of the CPU in a day. But in order to calculate 10m moving average, I have to set the minimum time interval of my data histogram buc… --- ## [Grok filter extracting fields from message](https://discuss.elastic.co/t/grok-filter-extracting-fields-from-message/238298)
**Author:** [@heinrich](https://discuss.elastic.co/u/heinrich)\ **Replies:** 8\ **Last updated:** [June 23, 2020, 8:21pm UTC](https://discuss.elastic.co/t/grok-filter-extracting-fields-from-message/238298 "2020-06-23T20:21:41Z")
Hi guys, I've never used grok patterns before, after hours of looking into this i'm making very slow progress. Here's a sample of what i have. 2020-06-23 15:30:02.568 \[https-jsse-nio-0.0.0.0-8443-exec-58\] INFO c.c.d.… --- ## [How to build visualization for average bandwidth utilization of a an interface/port](https://discuss.elastic.co/t/how-to-build-visualization-for-average-bandwidth-utilization-of-a-an-interface-port/234459)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 7:27pm UTC](https://discuss.elastic.co/t/how-to-build-visualization-for-average-bandwidth-utilization-of-a-an-interface-port/234459 "2020-06-23T19:27:16Z")
I am snmp polling WAN interface of firewall getting input and output bytes. How do i create average of 5 minute, 1 hour and 1day average graphs? i have the snmp polling and netflow 9 interface utilization data. --- ## [Help with Kibana displaying percentage by group](https://discuss.elastic.co/t/help-with-kibana-displaying-percentage-by-group/236372)
**Author:** [@bob\_herdsman](https://discuss.elastic.co/u/bob_herdsman)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 7:16pm UTC](https://discuss.elastic.co/t/help-with-kibana-displaying-percentage-by-group/236372 "2020-06-23T19:16:06Z")
Hi! I'd like to visualize my data in a certain way with Kibana and I don't know if it is possible or how to do it. I'd appreciate any help because I'm new to Kibana. I've attached a screenshot covering my current and, o… --- ## [HELP - decreasing date depending visual](https://discuss.elastic.co/t/help-decreasing-date-depending-visual/235987)
**Author:** [@julianf19](https://discuss.elastic.co/u/julianf19)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 7:13pm UTC](https://discuss.elastic.co/t/help-decreasing-date-depending-visual/235987 "2020-06-23T19:13:28Z")
Hi, I am trying to build a visualization in kibana: I have a set of data that have an end date or not yet (work still to be acomplished) I want to visualize how fast the work load is decreasing. Lets say i am looking… --- ## [Snapshot failed due to connection timeout to S3](https://discuss.elastic.co/t/snapshot-failed-due-to-connection-timeout-to-s3/238325)
**Author:** [@feiwhomai](https://discuss.elastic.co/u/feiwhomai)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 7:08pm UTC](https://discuss.elastic.co/t/snapshot-failed-due-to-connection-timeout-to-s3/238325 "2020-06-23T19:08:02Z")
Hi All, I am trying to make a snapshot, but it always fails after around 1.5 hours. The exception shows the connection to S3 timeouts. The cluster version is 6.8.2 It used to work fine, but starting from 2 weeks back,… --- ## [Kibana left pan menu - 7.8](https://discuss.elastic.co/t/kibana-left-pan-menu-7-8/237821)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 6\ **Last updated:** [June 23, 2020, 7:04pm UTC](https://discuss.elastic.co/t/kibana-left-pan-menu-7-8/237821 "2020-06-23T19:04:10Z")
in kibana 7.8 menu which was on left pan has change and they have put it under separate category. kibana - observability - management then once you click on it it will expand that further. don't like a bit at all. as … --- ## [Records not showing when filter using scripted field in kibana control](https://discuss.elastic.co/t/records-not-showing-when-filter-using-scripted-field-in-kibana-control/235699)
**Author:** [@Ankit\_S](https://discuss.elastic.co/u/Ankit_S)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 6:59pm UTC](https://discuss.elastic.co/t/records-not-showing-when-filter-using-scripted-field-in-kibana-control/235699 "2020-06-23T18:59:31Z")
Hello, I have created a kibana control which is loading the records from \_source and also created scripted field. Now this main control is a parent to scripted field control. On selection main field control option it l… --- ## [Kibana Docker Login issues](https://discuss.elastic.co/t/kibana-docker-login-issues/233462)
**Author:** [@Darryn\_Cornish](https://discuss.elastic.co/u/Darryn_Cornish)\ **Replies:** 4\ **Last updated:** [June 23, 2020, 6:38pm UTC](https://discuss.elastic.co/t/kibana-docker-login-issues/233462 "2020-06-23T18:38:32Z")
I seem to be having a redirect issue with my kibana's login page on my elk stack. Below is my yml for the docker-compose. After starting this up I added myself as a user on the elasticsearch api and the user exists. Wh… --- ## [Grok custom pattern for space delimited file](https://discuss.elastic.co/t/grok-custom-pattern-for-space-delimited-file/238291)
**Author:** [@atchyuth](https://discuss.elastic.co/u/atchyuth)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:23pm UTC](https://discuss.elastic.co/t/grok-custom-pattern-for-space-delimited-file/238291 "2020-06-23T17:23:15Z")
I'm trying to load a file to structured table in Athena. I am using GROK pattern to load it to the table but not able to find the correct pattern. The file format is as below: L1127 ACTUALS 214171 ON 27649075 -000000000… --- ## [Detection engine scheduler stuck after upgrade](https://discuss.elastic.co/t/detection-engine-scheduler-stuck-after-upgrade/238034)
**Author:** [@j91321](https://discuss.elastic.co/u/j91321)\ **Replies:** 5\ **Last updated:** [June 23, 2020, 5:48pm UTC](https://discuss.elastic.co/t/detection-engine-scheduler-stuck-after-upgrade/238034 "2020-06-23T17:48:56Z")
Hello, I have encountered an issue where after the detection engine rule scheduling, got stuck after upgrade from 7.7.1 to 7.8. I have a setup with two Kibana nodes and there were no other issues during the upgrade, but… --- ## [Send all routers, switches and access points logs to ELK server](https://discuss.elastic.co/t/send-all-routers-switches-and-access-points-logs-to-elk-server/238289)
**Author:** [@jelocabral](https://discuss.elastic.co/u/jelocabral)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 5:30pm UTC](https://discuss.elastic.co/t/send-all-routers-switches-and-access-points-logs-to-elk-server/238289 "2020-06-23T17:30:18Z")
Hi people, I have several routers, switches and acces points in my network and I want to send all their logs to a syslog service implemented in my ELK server. Is this possible to implement a syslog server listening on … --- ## [Kibana editor vis issue](https://discuss.elastic.co/t/kibana-editor-vis-issue/235373)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:22pm UTC](https://discuss.elastic.co/t/kibana-editor-vis-issue/235373 "2020-06-23T17:22:54Z")
hi team, i create custom vis and have issue while updating my default state. this is my editor script: export class StandardDeviationFilterEditor extends React.Component { onChange = (selectedOptions) =\> { this.… --- ## [How to update an existing es document and add a new value received from logstash event, to the existing array field at es at indexing time](https://discuss.elastic.co/t/how-to-update-an-existing-es-document-and-add-a-new-value-received-from-logstash-event-to-the-existing-array-field-at-es-at-indexing-time/238112)
**Author:** [@darkwarrior](https://discuss.elastic.co/u/darkwarrior)\ **Replies:** 6\ **Last updated:** [June 23, 2020, 5:12pm UTC](https://discuss.elastic.co/t/how-to-update-an-existing-es-document-and-add-a-new-value-received-from-logstash-event-to-the-existing-array-field-at-es-at-indexing-time/238112 "2020-06-23T17:12:46Z")
Hello guys, I am running logstash with es as output and my logstash input looks like this: Date time \[some-fields\] country\_name city\_name sample input values=\> 22-06-2020 02:19:27 \[some-fields\] US NewYork 22-06-202… --- ## [Kibana keeps crashing after enabling Xpack](https://discuss.elastic.co/t/kibana-keeps-crashing-after-enabling-xpack/235076)
**Author:** [@beingnurd](https://discuss.elastic.co/u/beingnurd)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:13pm UTC](https://discuss.elastic.co/t/kibana-keeps-crashing-after-enabling-xpack/235076 "2020-06-23T17:13:08Z")
Hi Team, We have Kibana 6.8.6 (single node) connected with a coordinating only node of Elastic search (we have 3 data nodes). We are not using any proxy etc. and access Kibana directly over 5601 using self signed certi… --- ## [Gelf in Kafka out for logstash](https://discuss.elastic.co/t/gelf-in-kafka-out-for-logstash/238294)
**Author:** [@pointonj](https://discuss.elastic.co/u/pointonj)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:06pm UTC](https://discuss.elastic.co/t/gelf-in-kafka-out-for-logstash/238294 "2020-06-23T17:06:16Z")
Im trying to use Logstash with a GELF input and outputting to Kafka and not getting any logs. My config file looks like this - input { udp { host =\> "ip of loadbalancer" port =\> 9900 type =\> gelf … --- ## [Kibana 6.x.x load balancing issue behind an F5 appliance](https://discuss.elastic.co/t/kibana-6-x-x-load-balancing-issue-behind-an-f5-appliance/234714)
**Author:** [@ThSPT](https://discuss.elastic.co/u/ThSPT)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:01pm UTC](https://discuss.elastic.co/t/kibana-6-x-x-load-balancing-issue-behind-an-f5-appliance/234714 "2020-06-23T17:01:43Z")
Hi all, I'd like to know if there is a specific configuration/recommendation to be done on the F5 appliance which is used to load balance the HTTP traffic between 2 kibana nodes ? I'm not using the xpack and don't want… --- ## [Adding user.name as a pivot item](https://discuss.elastic.co/t/adding-user-name-as-a-pivot-item/237863)
**Author:** [@forkhead](https://discuss.elastic.co/u/forkhead)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 5:00pm UTC](https://discuss.elastic.co/t/adding-user-name-as-a-pivot-item/237863 "2020-06-23T17:00:07Z")
Hi, I am playing around with SIEM app and was wondering if there is a way to pivot off of user.name rather than Hosts and IP. I understand I can use Events and filter for both user.name and host.name but might be helpful… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1370) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1372)