# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1647

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1648

---

## [Faild to connect spark-elasticsearch with keystore location as hdfs](https://discuss.elastic.co/t/faild-to-connect-spark-elasticsearch-with-keystore-location-as-hdfs/217880)

<div class="topic-metadata">

**Author:** [@maniarch](https://discuss.elastic.co/u/maniarch)\
**Replies:** 0\
**Last updated:** [February 4, 2020, 9:49pm UTC](https://discuss.elastic.co/t/faild-to-connect-spark-elasticsearch-with-keystore-location-as-hdfs/217880 "2020-02-04T21:49:31Z")

</div>

Hi , I'm running my spark job against a secured elasticsearch cluster. I have trustore.jks and keystore.jks generated , if i run run my spark job with ,jks on local path they are working fine but if i put my jks fil…

---

## [Kibana RAW message to text table](https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 3\
**Last updated:** [February 4, 2020, 9:33pm UTC](https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708 "2020-02-04T21:33:39Z")

</div>

I've been at this for a couple days with very limited success. Any tips on how to display 2 fields from a windows event log into a table. For example lets say error 1000 has to field param1 and param2 both are already i…

---

## [Problem indexing the year](https://discuss.elastic.co/t/problem-indexing-the-year/217870)

<div class="topic-metadata">

**Author:** [@Ay00b\_B](https://discuss.elastic.co/u/Ay00b_B)\
**Replies:** 1\
**Last updated:** [February 4, 2020, 8:55pm UTC](https://discuss.elastic.co/t/problem-indexing-the-year/217870 "2020-02-04T20:55:31Z")

</div>

Hello, I am new to this whole ELK thing. Im an intern working on indexing a bunch of syslogs into elastic using logstash. The only problem is that the logs do not contain the year which I also want to index for each mapp…

---

## [Problem to Disable xpack.security.enabled](https://discuss.elastic.co/t/problem-to-disable-xpack-security-enabled/217872)

<div class="topic-metadata">

**Author:** [@Marinho\_DevOPs](https://discuss.elastic.co/u/Marinho_DevOPs)\
**Replies:** 0\
**Last updated:** [February 4, 2020, 8:28pm UTC](https://discuss.elastic.co/t/problem-to-disable-xpack-security-enabled/217872 "2020-02-04T20:28:47Z")

</div>

Hi, I try to disable authentication in ECK K8S 7.5, but not working in spec \> config \> xpack.security.enabled. Could help me please

---

## [Elasticsearch bulk indexing issue](https://discuss.elastic.co/t/elasticsearch-bulk-indexing-issue/217830)

<div class="topic-metadata">

**Author:** [@giorgio](https://discuss.elastic.co/u/giorgio)\
**Replies:** 8\
**Last updated:** [February 4, 2020, 8:20pm UTC](https://discuss.elastic.co/t/elasticsearch-bulk-indexing-issue/217830 "2020-02-04T20:20:44Z")

</div>

I had issue that elasticsearch would become not responsive after few bulk index calls. I solved it by setting refresh\_interval to -1 before I call bulk api and set to 1s after i'm done ( https://discuss.elastic.co/t/stra…

---

## [Can we extract folder and file out of log.file.path field?](https://discuss.elastic.co/t/can-we-extract-folder-and-file-out-of-log-file-path-field/216722)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 4\
**Last updated:** [February 4, 2020, 7:05pm UTC](https://discuss.elastic.co/t/can-we-extract-folder-and-file-out-of-log-file-path-field/216722 "2020-02-04T19:05:20Z")

</div>

Hi, I want to extract the folder and file name out of log.file.path filed we have in kibana. SO for example- C:\\Program Files (x86)\\xxx SST\\DispatcherAPP\\logs\\dispatcher.log In this file path, I want to create a field …

---

## [Concurrent Sessions Counter](https://discuss.elastic.co/t/concurrent-sessions-counter/217773)

<div class="topic-metadata">

**Author:** [@AMES-IT](https://discuss.elastic.co/u/AMES-IT)\
**Replies:** 1\
**Last updated:** [February 4, 2020, 6:44pm UTC](https://discuss.elastic.co/t/concurrent-sessions-counter/217773 "2020-02-04T18:44:12Z")

</div>

Hi all! There is anyway to know how many sessions are working at the same time? I've a VPN service that I'm storing every log in and log out of users. I would know if it is possible to show the concurrent sessions in a …

---

## [Unable to Filter Data using Data Table in Kibana](https://discuss.elastic.co/t/unable-to-filter-data-using-data-table-in-kibana/217756)

<div class="topic-metadata">

**Author:** [@Venkata\_Naresh](https://discuss.elastic.co/u/Venkata_Naresh)\
**Replies:** 1\
**Last updated:** [February 4, 2020, 6:36pm UTC](https://discuss.elastic.co/t/unable-to-filter-data-using-data-table-in-kibana/217756 "2020-02-04T18:36:31Z")

</div>

Hi, I'm using Data Table Visualisation, recently I have upgraded ELK to 7.5.1 and with the latest version I found an issue. I have created an Index pattern in kibana without any custom index pattern ID by selecting "I …

---

## [App Search on Elastic Cloud is now generally available](https://discuss.elastic.co/t/app-search-on-elastic-cloud-is-now-generally-available/217860)

<div class="topic-metadata">

**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\
**Replies:** 0\
**Last updated:** [February 4, 2020, 6:14pm UTC](https://discuss.elastic.co/t/app-search-on-elastic-cloud-is-now-generally-available/217860 "2020-02-04T18:14:39Z")

</div>

App Search on Elastic Cloud is now generally available We're excited to announce that Elastic App Search is now generally available on Elasticsearch Service. App Search is a ready-to-use, fully complete search solution …

---

## [Mapping Timeout](https://discuss.elastic.co/t/mapping-timeout/217787)

<div class="topic-metadata">

**Author:** [@NewToThis](https://discuss.elastic.co/u/NewToThis)\
**Replies:** 2\
**Last updated:** [February 4, 2020, 5:04pm UTC](https://discuss.elastic.co/t/mapping-timeout/217787 "2020-02-04T17:04:51Z")

</div>

Hey I am using a very simple aggregation to count entries in an SQL Database. If a specific event is being monitored the counter should be lowered by one otherwise it should count up. Everything is running under a uniq…

---

## [Remove double quotes from the field in Logstash message](https://discuss.elastic.co/t/remove-double-quotes-from-the-field-in-logstash-message/217745)

<div class="topic-metadata">

**Author:** [@Kamesh\_M](https://discuss.elastic.co/u/Kamesh_M)\
**Replies:** 1\
**Last updated:** [February 4, 2020, 5:03pm UTC](https://discuss.elastic.co/t/remove-double-quotes-from-the-field-in-logstash-message/217745 "2020-02-04T17:03:46Z")

</div>

raw=\>"{ "device" : "TIR1-SF2.abc.om - Gignet1/2/4 · "f1-sf2:\[7\]" test abc " }" How to remove doublequotes for "f1-sf2:\[7\]" for the field "device". Im getting error while parsing this as json :exception=\>#\<LogStash::Js…

---

## [7.5 \[reporting\] fails randomly](https://discuss.elastic.co/t/7-5-reporting-fails-randomly/215160)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 5\
**Last updated:** [February 4, 2020, 4:45pm UTC](https://discuss.elastic.co/t/7-5-reporting-fails-randomly/215160 "2020-02-04T16:45:03Z")

</div>

Hello, my users want to create some reports but the completion/fail is erratic. I am running on a debian 9 Could not find more hint to solve that. Can you help, please? best the message in the frontend: Unable to gen…

---

## [Ip filtering on elastic cloud](https://discuss.elastic.co/t/ip-filtering-on-elastic-cloud/216233)

<div class="topic-metadata">

**Author:** [@Eladsig](https://discuss.elastic.co/u/Eladsig)\
**Replies:** 1\
**Last updated:** [February 4, 2020, 4:10pm UTC](https://discuss.elastic.co/t/ip-filtering-on-elastic-cloud/216233 "2020-02-04T16:10:53Z")

</div>

hello, i am trying to configure ip filtering for my instance on elastic cloud. i want to block all unallowed ip addresses to my elasticsearch and kibana. i tried to follow this : guide and edit User setting overrides…

---

## [How to remove count column from visualization](https://discuss.elastic.co/t/how-to-remove-count-column-from-visualization/217845)

<div class="topic-metadata">

**Author:** [@Jasonbourne](https://discuss.elastic.co/u/Jasonbourne)\
**Replies:** 0\
**Last updated:** [February 4, 2020, 3:29pm UTC](https://discuss.elastic.co/t/how-to-remove-count-column-from-visualization/217845 "2020-02-04T15:29:38Z")

</div>

I don't want to reveal the count but I want to display the count percentages instead. How can I only display this percentage and the first column and remove the count one I don't seem to be able to figure it out. Thank…

---

## [Use distance on dense vectors in relevance score (at query time)](https://discuss.elastic.co/t/use-distance-on-dense-vectors-in-relevance-score-at-query-time/217012)

<div class="topic-metadata">

**Author:** [@thomas-chauvet](https://discuss.elastic.co/u/thomas-chauvet)\
**Replies:** 2\
**Last updated:** [February 4, 2020, 3:21pm UTC](https://discuss.elastic.co/t/use-distance-on-dense-vectors-in-relevance-score-at-query-time/217012 "2020-02-04T15:21:21Z")

</div>

I use elasticsearch to combine different things: search in text score based on dense vector (cosine similarity) I use a query with function\_score. The first part is the search in the text (giving a score) and THEN a s…

---

## [How to filter graph data based on a user attribute](https://discuss.elastic.co/t/how-to-filter-graph-data-based-on-a-user-attribute/217692)

<div class="topic-metadata">

**Author:** [@mallali](https://discuss.elastic.co/u/mallali)\
**Replies:** 4\
**Last updated:** [February 4, 2020, 2:49pm UTC](https://discuss.elastic.co/t/how-to-filter-graph-data-based-on-a-user-attribute/217692 "2020-02-04T14:49:30Z")

</div>

I would like to publish my Kibana dashboard to the end-users and have them see the visualizations based on their data. I was thinking about adding a filter to the visualization based on some user attribute (e.g specific …

---

## [Filebeat out put plugin](https://discuss.elastic.co/t/filebeat-out-put-plugin/217834)

<div class="topic-metadata">

**Author:** [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)\
**Replies:** 0\
**Last updated:** [February 4, 2020, 2:34pm UTC](https://discuss.elastic.co/t/filebeat-out-put-plugin/217834 "2020-02-04T14:34:17Z")

</div>

Hello everyone, Right now i have a cluster with 4 nodes. 3x(master-data) 1x(data only). in some scenario i am using file beat to send logs directly to elasticsearch and in some other scenario to log-stash. my question…

---

## [JSON Input in Kibana Visualization](https://discuss.elastic.co/t/json-input-in-kibana-visualization/217723)

<div class="topic-metadata">

**Author:** [@stongia](https://discuss.elastic.co/u/stongia)\
**Replies:** 3\
**Last updated:** [February 4, 2020, 2:06pm UTC](https://discuss.elastic.co/t/json-input-in-kibana-visualization/217723 "2020-02-04T14:06:19Z")

</div>

Hi What is the significance of the JSON Input in all the Kibana Visualizations. It says we can add JSON which can be merged with the aggregation to elastic? Can you please share some detailed documentation or examples …

---

## [Sort date-time fields within a document in elastic](https://discuss.elastic.co/t/sort-date-time-fields-within-a-document-in-elastic/217825)

<div class="topic-metadata">

**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\
**Replies:** 0\
**Last updated:** [February 4, 2020, 1:52pm UTC](https://discuss.elastic.co/t/sort-date-time-fields-within-a-document-in-elastic/217825 "2020-02-04T13:52:37Z")

</div>

Hi All, I have an index in elasticsearch to track a user's journey through a web portal. Each document records the page URL and timestamp which user visited as part of their journey. E.g: if user visited 10 pages of th…

---

## [Elasticsearch log rotatio not working using log4j2.properties](https://discuss.elastic.co/t/elasticsearch-log-rotatio-not-working-using-log4j2-properties/217824)

<div class="topic-metadata">

**Author:** [@saumilmac](https://discuss.elastic.co/u/saumilmac)\
**Replies:** 0\
**Last updated:** [February 4, 2020, 1:52pm UTC](https://discuss.elastic.co/t/elasticsearch-log-rotatio-not-working-using-log4j2-properties/217824 "2020-02-04T13:52:34Z")

</div>

I am trying to rotate my elasticsearch logs using log4j2. However, using the below configuration I am not able to do so. Any help would be appreciated. status = error log action execution errors for easier debugging lo…

---

## [ES7.5: Documents not searchable after update](https://discuss.elastic.co/t/es7-5-documents-not-searchable-after-update/217788)

<div class="topic-metadata">

**Author:** [@sls89](https://discuss.elastic.co/u/sls89)\
**Replies:** 1\
**Last updated:** [February 4, 2020, 1:46pm UTC](https://discuss.elastic.co/t/es7-5-documents-not-searchable-after-update/217788 "2020-02-04T13:46:41Z")

</div>

Hi, I have several documents in an index and try to update / create just one attribute (the attribute will be added and is not set by creating the document) therefore I tried both via \_update or \_update\_by\_query API. T…

---

## [Listen to new nodes added to cluster](https://discuss.elastic.co/t/listen-to-new-nodes-added-to-cluster/217820)

<div class="topic-metadata">

**Author:** [@Praveen\_Giri](https://discuss.elastic.co/u/Praveen_Giri)\
**Replies:** 0\
**Last updated:** [February 4, 2020, 1:42pm UTC](https://discuss.elastic.co/t/listen-to-new-nodes-added-to-cluster/217820 "2020-02-04T13:42:37Z")

</div>

Is there a way to listen to new nodes discovered by a cluster?

---

## [Elasticsearch Query to combine \_source and inner\_hits result using nested query](https://discuss.elastic.co/t/elasticsearch-query-to-combine-source-and-inner-hits-result-using-nested-query/217819)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 0\
**Last updated:** [February 4, 2020, 1:41pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-combine-source-and-inner-hits-result-using-nested-query/217819 "2020-02-04T13:41:11Z")

</div>

Do you have any ways on how to combine the \_source and inner\_hits result to a single document? I am using nested query to filter my fields that is stored in array for a specific document but it shows the original docume…

---

## [Logstash UTF-16 codepoint \[0x0\] at position 0 is a reserved character](https://discuss.elastic.co/t/logstash-utf-16-codepoint-0x0-at-position-0-is-a-reserved-character/217810)

<div class="topic-metadata">

**Author:** [@devopselk](https://discuss.elastic.co/u/devopselk)\
**Replies:** 0\
**Last updated:** [February 4, 2020, 1:24pm UTC](https://discuss.elastic.co/t/logstash-utf-16-codepoint-0x0-at-position-0-is-a-reserved-character/217810 "2020-02-04T13:24:21Z")

</div>

Hello everyone, I transfer data from an elasticsearch to another elasticsearch with logstash. I am using codec but could not solve the UTF problem. My Config elasticsearch { codec =\> json { charset =\> "UTF-16" }…

---

## [Logstash pipeline MS SQL Server Query](https://discuss.elastic.co/t/logstash-pipeline-ms-sql-server-query/217798)

<div class="topic-metadata">

**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\
**Replies:** 1\
**Last updated:** [February 4, 2020, 1:18pm UTC](https://discuss.elastic.co/t/logstash-pipeline-ms-sql-server-query/217798 "2020-02-04T13:18:09Z")

</div>

Hi all I am trying to do SQL Query to SQL Server using JDBC and trying to get some data from SQL Server database. my logstash pipeline looks: input { jdbc { jdbc\_validate\_connection =\> true jdbc\_driver\_libr…

---

## [Elasticsearch process is killed by OOM killer](https://discuss.elastic.co/t/elasticsearch-process-is-killed-by-oom-killer/217792)

<div class="topic-metadata">

**Author:** [@ashok6](https://discuss.elastic.co/u/ashok6)\
**Replies:** 3\
**Last updated:** [February 4, 2020, 1:17pm UTC](https://discuss.elastic.co/t/elasticsearch-process-is-killed-by-oom-killer/217792 "2020-02-04T13:17:57Z")

</div>

Hi, We have a 32GB c5.4xlarge ( 4 nodes cluster ) for the elastic search and the elastic search process is getting killed after a period of 3 weeks and there is no enough memopry left to restart the process. So had to m…

---

## [Kibana dashboard disappeared](https://discuss.elastic.co/t/kibana-dashboard-disappeared/217746)

<div class="topic-metadata">

**Author:** [@Dhruvil\_Doshi](https://discuss.elastic.co/u/Dhruvil_Doshi)\
**Replies:** 3\
**Last updated:** [February 4, 2020, 1:12pm UTC](https://discuss.elastic.co/t/kibana-dashboard-disappeared/217746 "2020-02-04T13:12:58Z")

</div>

I am new to ELK. I had some previous visualizations and dashboards which i made which I can't see in kibana. i think It is because I moved elasticsearch and logstash directory to other location. Can I get back old data?

---

## [Certain json messages not found in elastic](https://discuss.elastic.co/t/certain-json-messages-not-found-in-elastic/217681)

<div class="topic-metadata">

**Author:** [@jdepp99](https://discuss.elastic.co/u/jdepp99)\
**Replies:** 3\
**Last updated:** [February 4, 2020, 1:03pm UTC](https://discuss.elastic.co/t/certain-json-messages-not-found-in-elastic/217681 "2020-02-04T13:03:08Z")

</div>

I setup a dashboard in kibana and found the messages I was sending based on the 'type' field in the json that I specify. This is getting sent to a logstash index along millions of other types. I found certain msgTypes bu…

---

## [Beats privileges documentation](https://discuss.elastic.co/t/beats-privileges-documentation/214190)

<div class="topic-metadata">

**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\
**Replies:** 8\
**Last updated:** [February 4, 2020, 1:00pm UTC](https://discuss.elastic.co/t/beats-privileges-documentation/214190 "2020-02-04T13:00:11Z")

</div>

Hi there, I had a problem that I managed to resolve but it seems then that the documentation isn't completely accurate. Let me know if I should post this somewhere else. So, when configuring Beats agents to send data t…

---

## [Best way to have a big cluster on a huge bare metal](https://discuss.elastic.co/t/best-way-to-have-a-big-cluster-on-a-huge-bare-metal/217805)

<div class="topic-metadata">

**Author:** [@Arman\_Ajdani](https://discuss.elastic.co/u/Arman_Ajdani)\
**Replies:** 0\
**Last updated:** [February 4, 2020, 12:42pm UTC](https://discuss.elastic.co/t/best-way-to-have-a-big-cluster-on-a-huge-bare-metal/217805 "2020-02-04T12:42:12Z")

</div>

Suppose I have a bare metal with a huge amount of RAM, What is the best approach to have a cluster of ES node, using VM? Multiple instances on different ports? or use an orchestration like Kubernetes? I need a cluster fo…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1646)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1648)
