# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1567

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1568

---

## [Deploying a premium version of the ELK stack Locally](https://discuss.elastic.co/t/deploying-a-premium-version-of-the-elk-stack-locally/223947)

<div class="topic-metadata">

**Author:** [@Hyperion0](https://discuss.elastic.co/u/Hyperion0)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 2:54pm UTC](https://discuss.elastic.co/t/deploying-a-premium-version-of-the-elk-stack-locally/223947 "2020-03-17T14:54:32Z")

</div>

Please forgive my ignorance. This is a more general and (probably stupid) question: If you have a premium subscription for the ELK stack can the entire thing be deployed on a local host or do you have to use a cloud se…

---

## [Cannot recover index - store.found: false](https://discuss.elastic.co/t/cannot-recover-index-store-found-false/223827)

<div class="topic-metadata">

**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\
**Replies:** 13\
**Last updated:** [March 17, 2020, 2:33pm UTC](https://discuss.elastic.co/t/cannot-recover-index-store-found-false/223827 "2020-03-17T14:33:24Z")

</div>

After a full cluster restart, some of my indices remained red. Among them a few had replicas... Cluster allocation explain API informs me that a pri 3 rep 1 index is missing its primary shard 0, on every node I get: …

---

## [Basic ruby field adding not working](https://discuss.elastic.co/t/basic-ruby-field-adding-not-working/223853)

<div class="topic-metadata">

**Author:** [@imrago](https://discuss.elastic.co/u/imrago)\
**Replies:** 2\
**Last updated:** [March 17, 2020, 2:22pm UTC](https://discuss.elastic.co/t/basic-ruby-field-adding-not-working/223853 "2020-03-17T14:22:07Z")

</div>

Hi, attempted to add a new field with ruby and not even a simple adding is working, what could be wrong? input { beats { port =\> 5044 } } filter { ruby { code =\> "event\['testfield'\] = 'test'" } } output { e…

---

## [Heepoutofmemory erroe xms and xmx set to 3g but problem not solved](https://discuss.elastic.co/t/heepoutofmemory-erroe-xms-and-xmx-set-to-3g-but-problem-not-solved/223676)

<div class="topic-metadata">

**Author:** [@eakam](https://discuss.elastic.co/u/eakam)\
**Replies:** 4\
**Last updated:** [March 17, 2020, 1:56pm UTC](https://discuss.elastic.co/t/heepoutofmemory-erroe-xms-and-xmx-set-to-3g-but-problem-not-solved/223676 "2020-03-17T13:56:44Z")

</div>

heepoutofmemory erroe xms and xmx set to 3g but problem not solved cat /var/log/elasticsearch/elasticsearch.log | grep -i -E "error|warn" output of this command: \[2020-03-16T03:59:12,934\]\[INFO \]\[o.e.n.Node …

---

## [Rename fieldnames based on an import configuration table](https://discuss.elastic.co/t/rename-fieldnames-based-on-an-import-configuration-table/223938)

<div class="topic-metadata">

**Author:** [@Pascal\_Rheinert](https://discuss.elastic.co/u/Pascal_Rheinert)\
**Replies:** 0\
**Last updated:** [March 17, 2020, 1:40pm UTC](https://discuss.elastic.co/t/rename-fieldnames-based-on-an-import-configuration-table/223938 "2020-03-17T13:40:20Z")

</div>

I have cassandra database with two tables "products" and "fields". The product table consists of the following fields: "ID", "1:Value", "2:Value", .. "99:Value" Example: "ID", "1:Value", "2:Value", "3:Value" 1, Test,…

---

## [Selecting multiple values in Kibana](https://discuss.elastic.co/t/selecting-multiple-values-in-kibana/223766)

<div class="topic-metadata">

**Author:** [@jakobtahe](https://discuss.elastic.co/u/jakobtahe)\
**Replies:** 2\
**Last updated:** [March 17, 2020, 1:39pm UTC](https://discuss.elastic.co/t/selecting-multiple-values-in-kibana/223766 "2020-03-17T13:39:03Z")

</div>

Hi all, I have an index in Kibana with the following fields Customer name, Product name and Price and I'm trying to determine an easy way to find specific customer based on a selection of products and a specific price. …

---

## [Prevent Logstash Service logging to /var/log/syslog](https://discuss.elastic.co/t/prevent-logstash-service-logging-to-var-log-syslog/223875)

<div class="topic-metadata">

**Author:** [@Amish](https://discuss.elastic.co/u/Amish)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 12:47pm UTC](https://discuss.elastic.co/t/prevent-logstash-service-logging-to-var-log-syslog/223875 "2020-03-17T12:47:33Z")

</div>

Hi, I am trying to work out how and where I can stop the logging of Logstash to the syslog on Ubuntu 16.04. Instead I would like to have all of the logs for logs for Logstash in a separate file. I should mention that I…

---

## [Emailing through logstash not working](https://discuss.elastic.co/t/emailing-through-logstash-not-working/223690)

<div class="topic-metadata">

**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\
**Replies:** 3\
**Last updated:** [March 17, 2020, 12:41pm UTC](https://discuss.elastic.co/t/emailing-through-logstash-not-working/223690 "2020-03-17T12:41:26Z")

</div>

Hi Team, I wrote this small logstash config. in which i just want to pick up some data and when the data comes it gets filter, and in the output section when the data comes it send an email. input{ file { type …

---

## [How to get Average from AvgAggregationBuilder elastic search for spesific keys](https://discuss.elastic.co/t/how-to-get-average-from-avgaggregationbuilder-elastic-search-for-spesific-keys/223921)

<div class="topic-metadata">

**Author:** [@Barak\_Kedem](https://discuss.elastic.co/u/Barak_Kedem)\
**Replies:** 0\
**Last updated:** [March 17, 2020, 12:30pm UTC](https://discuss.elastic.co/t/how-to-get-average-from-avgaggregationbuilder-elastic-search-for-spesific-keys/223921 "2020-03-17T12:30:09Z")

</div>

I'm am trying to get results from Elastic search with spesic keys example: average salary, by city, gender so i check at metrics\_aggregations and I was able AvgAggregationBuilder totalDuration = AggregationBuilder…

---

## [Issues with starting elasticsearch](https://discuss.elastic.co/t/issues-with-starting-elasticsearch/223913)

<div class="topic-metadata">

**Author:** [@ankitagarwal10k](https://discuss.elastic.co/u/ankitagarwal10k)\
**Replies:** 14\
**Last updated:** [March 17, 2020, 12:30pm UTC](https://discuss.elastic.co/t/issues-with-starting-elasticsearch/223913 "2020-03-17T12:30:57Z")

</div>

When I am trying to start the elasticsearch, i am getting the below logs: \[2020-03-17T16:41:33,633\]\[WARN \]\[i.n.u.i.MacAddressUtil \] \[elasticsearch-node-1\] Failed to find a usable hardware address from the network int…

---

## [Kibana visualizations](https://discuss.elastic.co/t/kibana-visualizations/223888)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 6\
**Last updated:** [March 17, 2020, 12:20pm UTC](https://discuss.elastic.co/t/kibana-visualizations/223888 "2020-03-17T12:20:06Z")

</div>

hi, I'm working with kibana for the last 2 month with timeseries data, and wondering.. There are many visualization types, and It's not clear (to me) when to use what. For example I can create a gauge using, the gaug…

---

## [Polygon filter](https://discuss.elastic.co/t/polygon-filter/223909)

<div class="topic-metadata">

**Author:** [@Anikesh\_Paul](https://discuss.elastic.co/u/Anikesh_Paul)\
**Replies:** 2\
**Last updated:** [March 17, 2020, 12:17pm UTC](https://discuss.elastic.co/t/polygon-filter/223909 "2020-03-17T12:17:37Z")

</div>

Hi, I have Kibana 7.6 and in dashboard when I'm using coordinate maps I can see polygon filter under tool icon :wrench:. Is there any way we can display the polygon icon directly on the coordinate map instead of multipl…

---

## [Dashboard layout](https://discuss.elastic.co/t/dashboard-layout/223887)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 3\
**Last updated:** [March 17, 2020, 12:00pm UTC](https://discuss.elastic.co/t/dashboard-layout/223887 "2020-03-17T12:00:41Z")

</div>

hello, is there any option to change a layout of a dashboard that I missed? maybe a Kibana plugin? I would like to rearrange the dashboard: putting 3 visualization in a row, setting a visualization height etc (without …

---

## [Map Visualization](https://discuss.elastic.co/t/map-visualization/223898)

<div class="topic-metadata">

**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Replies:** 2\
**Last updated:** [March 17, 2020, 11:53am UTC](https://discuss.elastic.co/t/map-visualization/223898 "2020-03-17T11:53:55Z")

</div>

I have parsed data from logstash. My data contain cities filed in which karachi, larhoe aur islamabad coming i want to use region map visualization to map the cities in kibana this show while i select the name cities …

---

## [How can i filter this pattern?](https://discuss.elastic.co/t/how-can-i-filter-this-pattern/223885)

<div class="topic-metadata">

**Author:** [@Ramon\_Mateo](https://discuss.elastic.co/u/Ramon_Mateo)\
**Replies:** 8\
**Last updated:** [March 17, 2020, 11:42am UTC](https://discuss.elastic.co/t/how-can-i-filter-this-pattern/223885 "2020-03-17T11:42:26Z")

</div>

Hi I try to filter this \> \\"tenantID\\": 80334, \\"Size\\": 11.42, \\"FirstDate\\": \\"15/03/2020 00:09:47\\", \\"LastDate\\": \\"15/03/2020 23:59:17\\" i need this: tenantID: 80334 Size: 11.42 FirstDate: 15/03/2020 00:09:47 …

---

## [Search key\_value\_pair to create data table in Kibana](https://discuss.elastic.co/t/search-key-value-pair-to-create-data-table-in-kibana/223886)

<div class="topic-metadata">

**Author:** [@salunkerahul](https://discuss.elastic.co/u/salunkerahul)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 11:31am UTC](https://discuss.elastic.co/t/search-key-value-pair-to-create-data-table-in-kibana/223886 "2020-03-17T11:31:34Z")

</div>

I have the following key\_value\_pairs from Logstash made available in Kibana PROD=TEST\_NAME VERS=113 35=A 34=1 49=DLR TIME=20200316-21:31:43.464 My use of Kibana with the log ingested, is to create a data table without …

---

## [The page’s settings blocked the loading of a resource at inline (“script-src”)](https://discuss.elastic.co/t/the-page-s-settings-blocked-the-loading-of-a-resource-at-inline-script-src/223782)

<div class="topic-metadata">

**Author:** [@lsambolino](https://discuss.elastic.co/u/lsambolino)\
**Replies:** 5\
**Last updated:** [March 17, 2020, 11:27am UTC](https://discuss.elastic.co/t/the-page-s-settings-blocked-the-loading-of-a-resource-at-inline-script-src/223782 "2020-03-17T11:27:47Z")

</div>

Hi, in our production environment, the kibana dashboard is now showing Kibana did not load properly. Check the server output for more information. When checking the browser developer Console we obtain: Content Security…

---

## [Kibana fails to start when using the Network Plugin](https://discuss.elastic.co/t/kibana-fails-to-start-when-using-the-network-plugin/222425)

<div class="topic-metadata">

**Author:** [@ankitagarwal10k](https://discuss.elastic.co/u/ankitagarwal10k)\
**Replies:** 3\
**Last updated:** [March 17, 2020, 11:24am UTC](https://discuss.elastic.co/t/kibana-fails-to-start-when-using-the-network-plugin/222425 "2020-03-17T11:24:25Z")

</div>

Hi, I tried using the Kibana network plugin on my Ubuntu 18 version by downloading the latest version of the network plugin tar.gz file as the Kibana version on my system is 7.6 But when I start the Kibana service - it…

---

## [Pie chart not displaying error message for zero values](https://discuss.elastic.co/t/pie-chart-not-displaying-error-message-for-zero-values/223861)

<div class="topic-metadata">

**Author:** [@kaviraj](https://discuss.elastic.co/u/kaviraj)\
**Replies:** 2\
**Last updated:** [March 17, 2020, 11:21am UTC](https://discuss.elastic.co/t/pie-chart-not-displaying-error-message-for-zero-values/223861 "2020-03-17T11:21:39Z")

</div>

For zero value pie chart not displaying error message as "No results displayed because all values equal 0".. While zoom-in and zoom-out browser only its showing the message . Kibana version:4.5

---

## [Pin filters by default - but only for me!](https://discuss.elastic.co/t/pin-filters-by-default-but-only-for-me/223862)

<div class="topic-metadata">

**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 11:23am UTC](https://discuss.elastic.co/t/pin-filters-by-default-but-only-for-me/223862 "2020-03-17T11:23:03Z")

</div>

We work a lot with filters in out setup, and it is extremely useful to pin filters by default. Especially because we work with a series of dashboards, where the filters should be carried from one to another. But... It'…

---

## [How matching logs of today's date](https://discuss.elastic.co/t/how-matching-logs-of-todays-date/223910)

<div class="topic-metadata">

**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Replies:** 0\
**Last updated:** [March 17, 2020, 11:11am UTC](https://discuss.elastic.co/t/how-matching-logs-of-todays-date/223910 "2020-03-17T11:11:36Z")

</div>

I have a question, file beat input-\> file-\> path . How matching logs of today's date. My directory / service / logs / contains many log files, these logs are cut by date. I just want to let filebeat to match today's …

---

## [Few Clarifications about elasticsearch setup](https://discuss.elastic.co/t/few-clarifications-about-elasticsearch-setup/223729)

<div class="topic-metadata">

**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\
**Replies:** 3\
**Last updated:** [March 17, 2020, 11:05am UTC](https://discuss.elastic.co/t/few-clarifications-about-elasticsearch-setup/223729 "2020-03-17T11:05:41Z")

</div>

Hi Team, I have configured elasticsearch STS object in k8s cluster using helm chart. I have defined following options in values.yaml. I am not still clear what it means. roles: master: "true" ingest: "true" dat…

---

## [ElasticSearch use aggregation over another aggregation result](https://discuss.elastic.co/t/elasticsearch-use-aggregation-over-another-aggregation-result/223579)

<div class="topic-metadata">

**Author:** [@Linu\_Radu](https://discuss.elastic.co/u/Linu_Radu)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 10:58am UTC](https://discuss.elastic.co/t/elasticsearch-use-aggregation-over-another-aggregation-result/223579 "2020-03-17T10:58:55Z")

</div>

Having an elasticsearch aggregation result, I want to collect all duplicated values and to do a count on them. The desired result should be something similar to this: { \[ {"\[root, A, A.3, A.3.1, A.3.1.1\]": 1}, --\>…

---

## [Logstash auto-transforming data, rendering it useless](https://discuss.elastic.co/t/logstash-auto-transforming-data-rendering-it-useless/223496)

<div class="topic-metadata">

**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\
**Replies:** 2\
**Last updated:** [March 17, 2020, 10:53am UTC](https://discuss.elastic.co/t/logstash-auto-transforming-data-rendering-it-useless/223496 "2020-03-17T10:53:02Z")

</div>

Hey there, I am using logstash to write data from my mssql database to elasticsearch. For whatever reason logstash transfrom the db-field "Duration" which contains values in the style of: "00:00:45.4388525" into this:…

---

## [How I can fix is\_write\_index=false in my indexes](https://discuss.elastic.co/t/how-i-can-fix-is-write-index-false-in-my-indexes/223900)

<div class="topic-metadata">

**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\
**Replies:** 0\
**Last updated:** [March 17, 2020, 10:27am UTC](https://discuss.elastic.co/t/how-i-can-fix-is-write-index-false-in-my-indexes/223900 "2020-03-17T10:27:21Z")

</div>

Hi, I have some indexes in read-only, I want to put the latest alias in write mode. But I received this error { "error": { "root\_cause": \[ { "type": "cluster\_block\_exception", "reas…

---

## [5 new hot nodes were added, but the relocating shards were all freeze nodes, and the number of freeze nodes was close to equilibrium. ES version 6.8.3](https://discuss.elastic.co/t/5-new-hot-nodes-were-added-but-the-relocating-shards-were-all-freeze-nodes-and-the-number-of-freeze-nodes-was-close-to-equilibrium-es-version-6-8-3/223897)

<div class="topic-metadata">

**Author:** [@zcola](https://discuss.elastic.co/u/zcola)\
**Replies:** 0\
**Last updated:** [March 17, 2020, 10:16am UTC](https://discuss.elastic.co/t/5-new-hot-nodes-were-added-but-the-relocating-shards-were-all-freeze-nodes-and-the-number-of-freeze-nodes-was-close-to-equilibrium-es-version-6-8-3/223897 "2020-03-17T10:16:28Z")

</div>

5 new hot nodes were added, but the relocating shards were all freeze nodes, and the number of freeze nodes was close to equilibrium. ES version 6.8.3 awk '{print $ NF}' 2005\_shards | sort | uniq -c | grep freeze | sort…

---

## [Email Output plugin in logstash](https://discuss.elastic.co/t/email-output-plugin-in-logstash/223894)

<div class="topic-metadata">

**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\
**Replies:** 0\
**Last updated:** [March 17, 2020, 10:04am UTC](https://discuss.elastic.co/t/email-output-plugin-in-logstash/223894 "2020-03-17T10:04:33Z")

</div>

Hi Team, I'm getting this error, in Email output plugin in logstash, \[2020-03-17T01:31:33,099\]\[ ERROR \]\[logstash.outputs.email \]\[main\] Something happen while delivering an email {:exception=\>#\<Net::SMTPAuthenticationE…

---

## [Create new role for read index](https://discuss.elastic.co/t/create-new-role-for-read-index/223880)

<div class="topic-metadata">

**Author:** [@Leonadius](https://discuss.elastic.co/u/Leonadius)\
**Replies:** 0\
**Last updated:** [March 17, 2020, 8:34am UTC](https://discuss.elastic.co/t/create-new-role-for-read-index/223880 "2020-03-17T08:34:57Z")

</div>

Greetings, I need some guidance for creating new role to read an index within 24 hours only. I did test creating new role on kibana with dev tools POST /\_security/role/timestamp\_restrict { "indices": \[ { "n…

---

## [Limit of total fields \[1000\] in index has been exceeded particular json's](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-has-been-exceeded-particular-jsons/222627)

<div class="topic-metadata">

**Author:** [@Bahadir\_Eyuboglu](https://discuss.elastic.co/u/Bahadir_Eyuboglu)\
**Replies:** 12\
**Last updated:** [March 17, 2020, 10:00am UTC](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-has-been-exceeded-particular-jsons/222627 "2020-03-17T10:00:26Z")

</div>

I have huge json files, so i split the json files and index them one by one but no matter how smallest the split gets, i get limit total fields exception, Im using elastisearch on python, and i splitthe json objects thr…

---

## [Help displaying correctly metricbeat/munin-node realtime data](https://discuss.elastic.co/t/help-displaying-correctly-metricbeat-munin-node-realtime-data/221709)

<div class="topic-metadata">

**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\
**Replies:** 3\
**Last updated:** [March 17, 2020, 9:37am UTC](https://discuss.elastic.co/t/help-displaying-correctly-metricbeat-munin-node-realtime-data/221709 "2020-03-17T09:37:35Z")

</div>

Hi forum... I'm not succeeding displaying correctly in kibana line or area visualization of real-time data coming from metricbeat munin plugin. The events at elasticsearch are essentially number type reads of listeners…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1566)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1568)
