# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1517 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1518 --- ## ["does not contain any of the following compatible field types: ip"](https://discuss.elastic.co/t/does-not-contain-any-of-the-following-compatible-field-types-ip/226476)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 8\ **Last updated:** [April 13, 2020, 2:22pm UTC](https://discuss.elastic.co/t/does-not-contain-any-of-the-following-compatible-field-types-ip/226476 "2020-04-13T14:22:15Z")
How can I define IP? Accually I have both, IPv4 and IPv6, but looks like in Kibana can I use CIDR notation for IPv4 only, what in fact is fine. But my field name is like "layers.ip.ip\_src" and I am goting error: The in… --- ## [Elasticsearch not starting as a service in RHEL 8](https://discuss.elastic.co/t/elasticsearch-not-starting-as-a-service-in-rhel-8/227758)
**Author:** [@gefela](https://discuss.elastic.co/u/gefela)\ **Replies:** 1\ **Last updated:** [April 13, 2020, 2:22pm UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-as-a-service-in-rhel-8/227758 "2020-04-13T14:22:58Z")
Hi When I try to start elasticsearch using the following command, I get the following error message \[root@gefela ansible\_junos\]# systemctl restart logstash elasticsearch kibana Job for elasticsearch.service failed bec… --- ## [Tshark output support](https://discuss.elastic.co/t/tshark-output-support/226372)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 7\ **Last updated:** [April 13, 2020, 2:15pm UTC](https://discuss.elastic.co/t/tshark-output-support/226372 "2020-04-13T14:15:12Z")
Which versions of Tshark json for ES are supported? Looks like old version (v2) is working fine when in new (v3) output didn't get parsed in latest ES (accually why, because it have no sense because this output is dedica… --- ## [Unable to process attachments using logstash 7.6.0 IMAP Input plugin](https://discuss.elastic.co/t/unable-to-process-attachments-using-logstash-7-6-0-imap-input-plugin/227416)
**Author:** [@Diptee](https://discuss.elastic.co/u/Diptee)\ **Replies:** 2\ **Last updated:** [April 13, 2020, 2:13pm UTC](https://discuss.elastic.co/t/unable-to-process-attachments-using-logstash-7-6-0-imap-input-plugin/227416 "2020-04-13T14:13:56Z")
I have configured logstash input to process emails from Gmail/Outlook using IMAP Input plugin. I am getting error when the email contains attachments or images. Sample config below- input { imap { host =\> "xyz.com" … --- ## [TSVB empty/null fields](https://discuss.elastic.co/t/tsvb-empty-null-fields/226591)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 4\ **Last updated:** [April 13, 2020, 2:10pm UTC](https://discuss.elastic.co/t/tsvb-empty-null-fields/226591 "2020-04-13T14:10:22Z")
Hi, how can I exclude null/empty fields on TSVB (time series)? I use cardinality, group by terms, order by cardinality, direction desc, top 50 but still got in legend most values with 0. I have logs like HTTP, there is… --- ## [Not able join two nodes elastic search clustering](https://discuss.elastic.co/t/not-able-join-two-nodes-elastic-search-clustering/227771)
**Author:** [@abhishek1](https://discuss.elastic.co/u/abhishek1)\ **Replies:** 4\ **Last updated:** [April 13, 2020, 2:08pm UTC](https://discuss.elastic.co/t/not-able-join-two-nodes-elastic-search-clustering/227771 "2020-04-13T14:08:13Z")
I am not able to join two nodes while configuring cluster setup for elasticsearch 7.4.2 version. I am getting below error org.elasticsearch.transport.RemoteTransportException: \[node-1\]\[10.112.2.93:9300\]\[internal:cluste… --- ## [No security menus: users, RBAC](https://discuss.elastic.co/t/no-security-menus-users-rbac/227665)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 3\ **Last updated:** [April 13, 2020, 2:02pm UTC](https://discuss.elastic.co/t/no-security-menus-users-rbac/227665 "2020-04-13T14:02:35Z")
Hi, I have basic license and I don't see security section in settings, why? I have default installation of ELK stack v7.6.2. How can I enable all options to which I have access/icense, to just see them? --- ## [How to parse multiple json using logstash which can occure anywhere in the log](https://discuss.elastic.co/t/how-to-parse-multiple-json-using-logstash-which-can-occure-anywhere-in-the-log/227781)
**Author:** [@Preyas\_Mistry](https://discuss.elastic.co/u/Preyas_Mistry)\ **Replies:** 0\ **Last updated:** [April 13, 2020, 1:53pm UTC](https://discuss.elastic.co/t/how-to-parse-multiple-json-using-logstash-which-can-occure-anywhere-in-the-log/227781 "2020-04-13T13:53:25Z")
I want to parse this log into ES which has multiple JSON string in it, the position of JSON is not fixed! 2020-03-30 17:42:15,672 INFO \[DefaultMessageListenerContainer-4\] (MeetingServiceImpl.getMeetingParticipants:270)… --- ## [Kibana Plugin Development (React)](https://discuss.elastic.co/t/kibana-plugin-development-react/227726)
**Author:** [@Paul\_Gege](https://discuss.elastic.co/u/Paul_Gege)\ **Replies:** 3\ **Last updated:** [April 13, 2020, 1:51pm UTC](https://discuss.elastic.co/t/kibana-plugin-development-react/227726 "2020-04-13T13:51:24Z")
Hi, I'm looking for some documentation on how I can develop my own plugin. I'd like to add a react component to my Kibana dashboard , specifically a dropdown with some drill-down capabilities. --- ## [Exists query with highlighting](https://discuss.elastic.co/t/exists-query-with-highlighting/223526)
**Author:** [@Jogi\_Michal](https://discuss.elastic.co/u/Jogi_Michal)\ **Replies:** 3\ **Last updated:** [March 16, 2020, 1:41pm UTC](https://discuss.elastic.co/t/exists-query-with-highlighting/223526 "2020-03-16T13:41:14Z")
Is there a possibility to use elastic search exists query with highlights? What I need achieve is to find all documents with some field and I'm using the exists query for this (it works fine) but additionally, I wan… --- ## [RabbitMQ: Configure read interval for rmq as input plugin](https://discuss.elastic.co/t/rabbitmq-configure-read-interval-for-rmq-as-input-plugin/226705)
**Author:** [@notricky](https://discuss.elastic.co/u/notricky)\ **Replies:** 1\ **Last updated:** [April 13, 2020, 1:28pm UTC](https://discuss.elastic.co/t/rabbitmq-configure-read-interval-for-rmq-as-input-plugin/226705 "2020-04-13T13:28:06Z")
HI! Im new here. Please dont get mad. :slight\_smile: I would like to know how to set an interval, that fires Logstash to check the RabbitMQ (rmq) for new messages? I was studying the manual to find out which argument … --- ## [30 million documents in one index best hardware to use](https://discuss.elastic.co/t/30-million-documents-in-one-index-best-hardware-to-use/227757)
**Author:** [@Bharatwaj\_Sriram](https://discuss.elastic.co/u/Bharatwaj_Sriram)\ **Replies:** 5\ **Last updated:** [April 13, 2020, 1:25pm UTC](https://discuss.elastic.co/t/30-million-documents-in-one-index-best-hardware-to-use/227757 "2020-04-13T13:25:59Z")
Hi elasticsearch lovers, I really appreciate the fact that these types of questions get asked a lot in the community and a lot of these get answered. I have been through a lot of similar threads and i learn something ne… --- ## [Elasticsearch operator deletes es pods which are scaled by Horizontal autoscaler](https://discuss.elastic.co/t/elasticsearch-operator-deletes-es-pods-which-are-scaled-by-horizontal-autoscaler/227775)
**Author:** [@kumar\_kung](https://discuss.elastic.co/u/kumar_kung)\ **Replies:** 0\ **Last updated:** [April 13, 2020, 1:11pm UTC](https://discuss.elastic.co/t/elasticsearch-operator-deletes-es-pods-which-are-scaled-by-horizontal-autoscaler/227775 "2020-04-13T13:11:34Z")
Kibana version : 7.5.2 Elasticsearch version : 7.5.2 ECK-1.0.0 GA I am using elasticsearch quickstart from eck guide i autoscale when average mem hits 60%, when ever a new pod is created through autoscaling, elasti… --- ## [Configuring elk 7.6.2](https://discuss.elastic.co/t/configuring-elk-7-6-2/227773)
**Author:** [@amanehsan](https://discuss.elastic.co/u/amanehsan)\ **Replies:** 0\ **Last updated:** [April 13, 2020, 12:32pm UTC](https://discuss.elastic.co/t/configuring-elk-7-6-2/227773 "2020-04-13T12:32:35Z")
Hi I am upgrading elk to latest version. I am unable to understand the master notes settings in discovery. Previously I was not giving any such information. Please help me understand which IPs are to be given here. What … --- ## [Create Horizontal pod autoscaling for elasticsearch in kubernetes (eck operator)](https://discuss.elastic.co/t/create-horizontal-pod-autoscaling-for-elasticsearch-in-kubernetes-eck-operator/227753)
**Author:** [@kumar\_kung](https://discuss.elastic.co/u/kumar_kung)\ **Replies:** 5\ **Last updated:** [April 13, 2020, 12:03pm UTC](https://discuss.elastic.co/t/create-horizontal-pod-autoscaling-for-elasticsearch-in-kubernetes-eck-operator/227753 "2020-04-13T12:03:31Z")
ECK = 1.0.0 ga Cloud= EKS Kibana version : 7.5.2 Elasticsearch version : 7.5.2 EKS: 1.15 Please provide details for Horizontal pod autoscaling for elasticsearch in kubernetes (eck operator) --- ## [How to debug Elasticsearch source code in Idea with Security disabled](https://discuss.elastic.co/t/how-to-debug-elasticsearch-source-code-in-idea-with-security-disabled/227763)
**Author:** [@unnisworld](https://discuss.elastic.co/u/unnisworld)\ **Replies:** 0\ **Last updated:** [April 13, 2020, 10:59am UTC](https://discuss.elastic.co/t/how-to-debug-elasticsearch-source-code-in-idea-with-security-disabled/227763 "2020-04-13T10:59:33Z")
I have setup the Elasticsearch debug environment (for 6.8.1) using the instructions given here - https://www.elastic.co/blog/how-to-debug-elasticsearch-source-code-in-intellij-idea When I run Elasticsearch using ./gradl… --- ## [After adding Prune filter - logs are not going to Elastic search](https://discuss.elastic.co/t/after-adding-prune-filter-logs-are-not-going-to-elastic-search/227614)
**Author:** [@Vignesh2912](https://discuss.elastic.co/u/Vignesh2912)\ **Replies:** 1\ **Last updated:** [April 13, 2020, 10:37am UTC](https://discuss.elastic.co/t/after-adding-prune-filter-logs-are-not-going-to-elastic-search/227614 "2020-04-13T10:37:14Z")
Hi Team, I am learning ELK and trying to do as a POC for my project. I am applying KV filter for the sample integration logs from my project and i could see lot of extra fields are coming as a result so i have tried to … --- ## [Time display on X-axis for interval less than an hour](https://discuss.elastic.co/t/time-display-on-x-axis-for-interval-less-than-an-hour/227604)
**Author:** [@sai\_16](https://discuss.elastic.co/u/sai_16)\ **Replies:** 3\ **Last updated:** [April 13, 2020, 9:30am UTC](https://discuss.elastic.co/t/time-display-on-x-axis-for-interval-less-than-an-hour/227604 "2020-04-13T09:30:20Z")
My x-axis has a date histogram, it does display both date and time only if the interval selected is greater than an or equal to one hour, for intervals less than an hour,only time stamp is displayed,its confusing to view… --- ## [How many nodes should an ElasticSearch cluster have?](https://discuss.elastic.co/t/how-many-nodes-should-an-elasticsearch-cluster-have/227674)
**Author:** [@Robert\_Ga](https://discuss.elastic.co/u/Robert_Ga)\ **Replies:** 2\ **Last updated:** [April 13, 2020, 9:00am UTC](https://discuss.elastic.co/t/how-many-nodes-should-an-elasticsearch-cluster-have/227674 "2020-04-13T09:00:47Z")
Hi everyone! I am trying to understand how to better configure my ELS Cluster. From what I understand, a node is an Elasticsearch instance (please correct me if I\`m wrong). What I want to know is: Should each node … --- ## [Index Pattern behavior](https://discuss.elastic.co/t/index-pattern-behavior/227643)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 8\ **Last updated:** [April 13, 2020, 9:36am UTC](https://discuss.elastic.co/t/index-pattern-behavior/227643 "2020-04-13T09:36:29Z")
Hi.. I have a logstash index and already delete\_by\_query of the part of the indexes, and no more particular fields, then I've done to delete the index pattern to make sure the fields is clean. The strange behavior of t… --- ## [Customer plugin](https://discuss.elastic.co/t/customer-plugin/227741)
**Author:** [@hyhong](https://discuss.elastic.co/u/hyhong)\ **Replies:** 1\ **Last updated:** [April 13, 2020, 9:30am UTC](https://discuss.elastic.co/t/customer-plugin/227741 "2020-04-13T09:30:51Z")
I have write a customer plugin,but it's not show in the kibana.I have debug,it's doesn't have applying,like this: Applying instrumentation co.elastic.apm.agent.httpclient.ApacheHttpAsyncHttpClientInstrumentation.I cann'… --- ## [Sql\_last\_value not working properly](https://discuss.elastic.co/t/sql-last-value-not-working-properly/227244)
**Author:** [@chelseia](https://discuss.elastic.co/u/chelseia)\ **Replies:** 2\ **Last updated:** [April 13, 2020, 9:30am UTC](https://discuss.elastic.co/t/sql-last-value-not-working-properly/227244 "2020-04-13T09:30:10Z")
i am trying to ingest the records with following timestamps 01.03.38.75894600 01.03.38.88577300 01.03.39.08149800 .but before that I have successfully ingested 100 rec which having same timestamp.so no w i have my sq… --- ## [Get average number of spans (queries) in a transaction grouped by path](https://discuss.elastic.co/t/get-average-number-of-spans-queries-in-a-transaction-grouped-by-path/226349)
**Author:** [@Joren\_Inghelbrecht](https://discuss.elastic.co/u/Joren_Inghelbrecht)\ **Replies:** 13\ **Last updated:** [April 13, 2020, 8:52am UTC](https://discuss.elastic.co/t/get-average-number-of-spans-queries-in-a-transaction-grouped-by-path/226349 "2020-04-13T08:52:09Z")
Elastic deployment version: v7.6.1 I'm trying to create a visualization which gives me the average number of queries per request. So basically what I want to see is: GET /users/ =\> 5 queries POST /users/ =\> 3 querie… --- ## [Max number of shards for a single node](https://discuss.elastic.co/t/max-number-of-shards-for-a-single-node/226952)
**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\ **Replies:** 1\ **Last updated:** [April 13, 2020, 8:49am UTC](https://discuss.elastic.co/t/max-number-of-shards-for-a-single-node/226952 "2020-04-13T08:49:25Z")
I have an elasticsearch node with different hw performance compared to others. I would like to set a lower limit of shards for this particular node. It's possible to do? --- ## [The cluster often reports an error \[service\_unavailable / 2 / no master\]](https://discuss.elastic.co/t/the-cluster-often-reports-an-error-service-unavailable-2-no-master/227739)
**Author:** [@xujingrui](https://discuss.elastic.co/u/xujingrui)\ **Replies:** 2\ **Last updated:** [April 13, 2020, 8:47am UTC](https://discuss.elastic.co/t/the-cluster-often-reports-an-error-service-unavailable-2-no-master/227739 "2020-04-13T08:47:12Z")
HI! The \[service ﹣ unavailable / 2 / no master\] error message often occurs in the cluster master node. Have you ever encountered it? It will appear after running for a period of time. After an error is reported, you can… --- ## [Spreading files across data paths](https://discuss.elastic.co/t/spreading-files-across-data-paths/227026)
**Author:** [@Flatline2005](https://discuss.elastic.co/u/Flatline2005)\ **Replies:** 1\ **Last updated:** [April 13, 2020, 8:41am UTC](https://discuss.elastic.co/t/spreading-files-across-data-paths/227026 "2020-04-13T08:41:58Z")
There are lots of docs talking about the distribution of shards across nodes in a cluster, but very little about the actual usage of multiple data paths within nodes. It is clear that a shard cannot be split over differ… --- ## [Sql\_last\_value in logstash http\_pooler or http\_input](https://discuss.elastic.co/t/sql-last-value-in-logstash-http-pooler-or-http-input/227744)
**Author:** [@sandy\_rizqi](https://discuss.elastic.co/u/sandy_rizqi)\ **Replies:** 0\ **Last updated:** [April 13, 2020, 8:26am UTC](https://discuss.elastic.co/t/sql-last-value-in-logstash-http-pooler-or-http-input/227744 "2020-04-13T08:26:43Z")
Hi there, May someone give me short explanation about http\_pooler or http input plugin , from what variable i can get tracking data column ? i.e in jdbc input plugin we can use sql\_last\_value , so how in http or http… --- ## [How elasticsearch uses memory](https://discuss.elastic.co/t/how-elasticsearch-uses-memory/227462)
**Author:** [@ahmed\_charafouddine](https://discuss.elastic.co/u/ahmed_charafouddine)\ **Replies:** 1\ **Last updated:** [April 13, 2020, 8:21am UTC](https://discuss.elastic.co/t/how-elasticsearch-uses-memory/227462 "2020-04-13T08:21:28Z")
Hello, how elasticsearch uses memory ? Question which could appear naive but I cannot find a satisfactory solution. If anyone could help me. thank you --- ## [Transforming multiple documents to a single document for a Kibana visualization](https://discuss.elastic.co/t/transforming-multiple-documents-to-a-single-document-for-a-kibana-visualization/227642)
**Author:** [@Rowan](https://discuss.elastic.co/u/Rowan)\ **Replies:** 1\ **Last updated:** [April 13, 2020, 8:12am UTC](https://discuss.elastic.co/t/transforming-multiple-documents-to-a-single-document-for-a-kibana-visualization/227642 "2020-04-13T08:12:13Z")
Hi, I have the following documents in the same Index timestamp | sessionID=123 | IPAddress="1.1.1.1" timestamp | sessionID=123 | username=harry timestamp | sessionID=123 | error=1002 timestamp | sessionID=123 | reconne… --- ## [Indices are not showing for Fluentd on kubernetes](https://discuss.elastic.co/t/indices-are-not-showing-for-fluentd-on-kubernetes/227558)
**Author:** [@odirionyeo](https://discuss.elastic.co/u/odirionyeo)\ **Replies:** 1\ **Last updated:** [April 13, 2020, 8:00am UTC](https://discuss.elastic.co/t/indices-are-not-showing-for-fluentd-on-kubernetes/227558 "2020-04-13T08:00:15Z")
I deployed the EFK Stack(Elasticsearch, Fluentd, Kibana) on kuberntes using helm charts from elastic. I am trying to load the indices from kibana yet I don't see anything. when i did curl localhost:9200/\_cat/indices, i … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1516) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1518)