# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1698 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1699 --- ## [Sniffer disconnect client connection \[Rest API\]](https://discuss.elastic.co/t/sniffer-disconnect-client-connection-rest-api/212463)
**Author:** [@AsfK](https://discuss.elastic.co/u/AsfK)\ **Replies:** 2\ **Last updated:** [January 7, 2020, 6:21am UTC](https://discuss.elastic.co/t/sniffer-disconnect-client-connection-rest-api/212463 "2020-01-07T06:21:25Z")
Hi I'm setting up a High Level Rest API conenction (7.4.\*) and all seems fine till I added a sniffer: RestClientBuilder restClientBuilder = RestClient.builder(hosts) .setHttpClientConfigCallback(httpClientBuilder -\> … --- ## [Kibana Role Not getting reflected](https://discuss.elastic.co/t/kibana-role-not-getting-reflected/213833)
**Author:** [@santhosh\_kumar2](https://discuss.elastic.co/u/santhosh_kumar2)\ **Replies:** 2\ **Last updated:** [January 7, 2020, 6:00am UTC](https://discuss.elastic.co/t/kibana-role-not-getting-reflected/213833 "2020-01-07T06:00:08Z")
While creating new user role. Getting 200 response but not reflecting in list of user role. i can't find any mislead in log as well. kindly help on this. --- ## [Elasticsearchのロギング設定について](https://discuss.elastic.co/t/elasticsearch/213983)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 0\ **Last updated:** [January 7, 2020, 5:40am UTC](https://discuss.elastic.co/t/elasticsearch/213983 "2020-01-07T05:40:18Z")
GET /\_cat/health?vで、Elasticsearchのクラスタのヘルスの状態を確認しました。 statusがredだったのですが、ESのログを確認したら、statusがredのログ出力ありませんでした。 ロギングの設定で、クラスターのヘルスの関連情報をログ出力できないでしょうか？ --- ## [Logstash Data Parsing Problem](https://discuss.elastic.co/t/logstash-data-parsing-problem/213704)
**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\ **Replies:** 7\ **Last updated:** [January 7, 2020, 5:34am UTC](https://discuss.elastic.co/t/logstash-data-parsing-problem/213704 "2020-01-07T05:34:45Z")
I have parse data through logstash i have 3 records in sql server the data is parse it shows if you look the attached image it shows 24 records and logstash shutdown after parsing data from database is there any way t… --- ## [Default index lifecycle management period](https://discuss.elastic.co/t/default-index-lifecycle-management-period/213977)
**Author:** [@suraj\_kumar3](https://discuss.elastic.co/u/suraj_kumar3)\ **Replies:** 0\ **Last updated:** [January 7, 2020, 5:08am UTC](https://discuss.elastic.co/t/default-index-lifecycle-management-period/213977 "2020-01-07T05:08:27Z")
What is the default lifecycle of indexes of .monitoring-kibana and .monitoring-es? --- ## [Calculate difference in time between two documents in same bucket on Data Table Visualization](https://discuss.elastic.co/t/calculate-difference-in-time-between-two-documents-in-same-bucket-on-data-table-visualization/213870)
**Author:** [@lmit](https://discuss.elastic.co/u/lmit)\ **Replies:** 2\ **Last updated:** [January 7, 2020, 4:43am UTC](https://discuss.elastic.co/t/calculate-difference-in-time-between-two-documents-in-same-bucket-on-data-table-visualization/213870 "2020-01-07T04:43:36Z")
I am struggling to build a Data Table visualization below that captures the timestamp of a prior doc in the same bucket where a field value changed from the current doc, so that I can show the difference in time. For e… --- ## [Need assistance with visualizing multiple queries in Kibana](https://discuss.elastic.co/t/need-assistance-with-visualizing-multiple-queries-in-kibana/213972)
**Author:** [@kibana\_user\_2020](https://discuss.elastic.co/u/kibana_user_2020)\ **Replies:** 0\ **Last updated:** [January 7, 2020, 4:17am UTC](https://discuss.elastic.co/t/need-assistance-with-visualizing-multiple-queries-in-kibana/213972 "2020-01-07T04:17:22Z")
Hi all. I am new to Kibana and still trying to get my head around the documentation. This is what I want to achieve - I have a query for successful requests and another for all the requests, I am looking to visualize a h… --- ## [Watcher to monitor Logstash Pipeline "Events Emitted Rate"](https://discuss.elastic.co/t/watcher-to-monitor-logstash-pipeline-events-emitted-rate/213958)
**Author:** [@SSS1](https://discuss.elastic.co/u/SSS1)\ **Replies:** 1\ **Last updated:** [January 7, 2020, 4:16am UTC](https://discuss.elastic.co/t/watcher-to-monitor-logstash-pipeline-events-emitted-rate/213958 "2020-01-07T04:16:52Z")
Hi, I need to create a Watcher to alert when a pipeline's "Events Emitted Rate" value drops below a certain threshold. Is this possible to do in the current monitoring tools? I've tried to run querying myself, but can… --- ## [o.e.c.c.ClusterFormationFailureHelper\] \[Master-node\] master not discovered or elected yet, an election requires a node with id \[Y11KbKB-SX2HIYM77Z1Zqg\], have discovered](https://discuss.elastic.co/t/o-e-c-c-clusterformationfailurehelper-master-node-master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-y11kbkb-sx2hiym77z1zqg-have-discovered/213829)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 6\ **Last updated:** [January 7, 2020, 3:47am UTC](https://discuss.elastic.co/t/o-e-c-c-clusterformationfailurehelper-master-node-master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-y11kbkb-sx2hiym77z1zqg-have-discovered/213829 "2020-01-07T03:47:43Z")
Hello, I am trying to form a 3 node ES cluster but i am getting a above mentioned error. I have one master node and 2 data nodes. My ES configurations are as follows: \*\*For master node:\*\* cluster.name: InTouc… --- ## [Logstash JDBC and Firebird](https://discuss.elastic.co/t/logstash-jdbc-and-firebird/213393)
**Author:** [@Osiel](https://discuss.elastic.co/u/Osiel)\ **Replies:** 3\ **Last updated:** [January 7, 2020, 2:54am UTC](https://discuss.elastic.co/t/logstash-jdbc-and-firebird/213393 "2020-01-07T02:54:44Z")
I need some help setting up logstash with jdbc and firebird 2.5 database, I'm using version 7.5 of elastic and logstash. What happens is that I always need to overwrite the information in my indexes, ie will always have… --- ## [Write queue continue to rise](https://discuss.elastic.co/t/write-queue-continue-to-rise/213652)
**Author:** [@ITzhangqiang](https://discuss.elastic.co/u/ITzhangqiang)\ **Replies:** 22\ **Last updated:** [January 7, 2020, 2:21am UTC](https://discuss.elastic.co/t/write-queue-continue-to-rise/213652 "2020-01-07T02:21:59Z")
One es node write queue continue to rise from about 08:00。But I set thread\_pool.write.queue\_size: 2000，why this node's write queue more than 2000? And why queue Sudden rise?I check bulk request not much changed as usua… --- ## [Multiple grok parsing not extracting all the fields](https://discuss.elastic.co/t/multiple-grok-parsing-not-extracting-all-the-fields/213764)
**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\ **Replies:** 4\ **Last updated:** [January 7, 2020, 2:28am UTC](https://discuss.elastic.co/t/multiple-grok-parsing-not-extracting-all-the-fields/213764 "2020-01-07T02:28:51Z")
Trying to extract some fields from the msgbody field using grok , but only the first field in the gork gets extracted. interested Fields - corId, controller, httpStatusText and uri Sample Data - 2020-01-03 10:44:17,02… --- ## [Elasticsearch query on a nested field with condition](https://discuss.elastic.co/t/elasticsearch-query-on-a-nested-field-with-condition/213642)
**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\ **Replies:** 5\ **Last updated:** [January 7, 2020, 1:22am UTC](https://discuss.elastic.co/t/elasticsearch-query-on-a-nested-field-with-condition/213642 "2020-01-07T01:22:05Z")
Elasticsearch v7.0 Hello and good day! I'm trying to create a query that will have a condition: if a nested field has only 1 element, get that first element, if a nested field has 2 more or elements, get a matching nes… --- ## [Is it possible to integrate JavaScript and Kibana?](https://discuss.elastic.co/t/is-it-possible-to-integrate-javascript-and-kibana/213940)
**Author:** [@anelson-edge](https://discuss.elastic.co/u/anelson-edge)\ **Replies:** 5\ **Last updated:** [January 7, 2020, 12:04am UTC](https://discuss.elastic.co/t/is-it-possible-to-integrate-javascript-and-kibana/213940 "2020-01-07T00:04:20Z")
I am in a quandary here. I would like to have JavaScript abilities (like buttons) AND Kibana for global filters and the selected timerange. I could write my GUI using JS to talk directly to ES, but then I lose Kibana… --- ## [Is there a way to make a dashboard default from space?](https://discuss.elastic.co/t/is-there-a-way-to-make-a-dashboard-default-from-space/213917)
**Author:** [@Abdul\_Jaleel](https://discuss.elastic.co/u/Abdul_Jaleel)\ **Replies:** 1\ **Last updated:** [January 6, 2020, 11:41pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-make-a-dashboard-default-from-space/213917 "2020-01-06T23:41:24Z")
I have multiple dashboards inside different spaces ? Is there a way to launch a dashboard on clicking on space ? Right now It will take to home page and from there to dashboards and then pick dashboard interested. Is th… --- ## [Kibana 7.5 disable authentication](https://discuss.elastic.co/t/kibana-7-5-disable-authentication/213935)
**Author:** [@J\_Warner](https://discuss.elastic.co/u/J_Warner)\ **Replies:** 8\ **Last updated:** [January 6, 2020, 11:24pm UTC](https://discuss.elastic.co/t/kibana-7-5-disable-authentication/213935 "2020-01-06T23:24:16Z")
Hey I've configured Elasticsearch for Anonymous access which works. but because of this I can't login inside of my kibana instance is there a way to disable the login auth screen for kibana ? --- ## [Hardware requirement for logstash](https://discuss.elastic.co/t/hardware-requirement-for-logstash/213831)
**Author:** [@Jayanth\_S\_N](https://discuss.elastic.co/u/Jayanth_S_N)\ **Replies:** 2\ **Last updated:** [January 6, 2020, 11:22pm UTC](https://discuss.elastic.co/t/hardware-requirement-for-logstash/213831 "2020-01-06T23:22:39Z")
What will be the best suitable hardware configuration for logstash, we are reading the data from Apache Kafka and adding a few filters in logstash config file on the different sources of data and then data will be sent t… --- ## [ES1 vs ES7 - Different results when dis\_max wrapped with should](https://discuss.elastic.co/t/es1-vs-es7-different-results-when-dis-max-wrapped-with-should/213951)
**Author:** [@xlisfo](https://discuss.elastic.co/u/xlisfo)\ **Replies:** 0\ **Last updated:** [January 6, 2020, 10:40pm UTC](https://discuss.elastic.co/t/es1-vs-es7-different-results-when-dis-max-wrapped-with-should/213951 "2020-01-06T22:40:41Z")
Hi, I have a question for the Elasticsearch query below. The dis\_max clause actually returns 0 results for both Elasticsearch 1.7 and 7.4. Then when I use bool-\>should wrap the dis\_max clause, for Elasticsearch 1.7, al… --- ## [Elasticsearch 7.5.1 RPM update prevents restart of service](https://discuss.elastic.co/t/elasticsearch-7-5-1-rpm-update-prevents-restart-of-service/213636)
**Author:** [@erempel](https://discuss.elastic.co/u/erempel)\ **Replies:** 3\ **Last updated:** [January 6, 2020, 10:17pm UTC](https://discuss.elastic.co/t/elasticsearch-7-5-1-rpm-update-prevents-restart-of-service/213636 "2020-01-06T22:17:44Z")
Updating an existing install of elasticsearch 7.x with the RPM package provided for ES 7.5.1-1 removes the group permissions on /etc/elasticsearch which results in an error when trying to start elasticsearch. rpm -qlv e… --- ## [What is the event hook to know when the dashboard dark theme changes?](https://discuss.elastic.co/t/what-is-the-event-hook-to-know-when-the-dashboard-dark-theme-changes/213927)
**Author:** [@brandtj](https://discuss.elastic.co/u/brandtj)\ **Replies:** 9\ **Last updated:** [January 6, 2020, 9:18pm UTC](https://discuss.elastic.co/t/what-is-the-event-hook-to-know-when-the-dashboard-dark-theme-changes/213927 "2020-01-06T21:18:03Z")
I can't seem to find how to register a plugin to watch for the dark theme changing on a dashboard. --- ## [Removing stop words from shingleFilter](https://discuss.elastic.co/t/removing-stop-words-from-shinglefilter/212206)
**Author:** [@Abdulaziz\_Al\_Qattan](https://discuss.elastic.co/u/Abdulaziz_Al_Qattan)\ **Replies:** 1\ **Last updated:** [January 6, 2020, 9:06pm UTC](https://discuss.elastic.co/t/removing-stop-words-from-shinglefilter/212206 "2020-01-06T21:06:04Z")
Dear All Does anybody know how to remove shingles that contain stop words completely using ShingleFilter \>\>\> I tried to use positionalIncrements in Shingle Filter but It is not available in (Elastic) \>\> I am still look… --- ## [SearchError: Internal Server Error in 'Discover'](https://discuss.elastic.co/t/searcherror-internal-server-error-in-discover/212479)
**Author:** [@rdeshmukh](https://discuss.elastic.co/u/rdeshmukh)\ **Replies:** 3\ **Last updated:** [January 6, 2020, 8:51pm UTC](https://discuss.elastic.co/t/searcherror-internal-server-error-in-discover/212479 "2020-01-06T20:51:49Z")
Hi, I'm facing this issue. I have indexed 200 records. In each record the body has huge amount of text data nearly 1000+ pages. I have tried increasing the heap size upto 16gb in jvm options xms16g and xmx16g. So there … --- ## [Elastic Search - Kibana - Advanced Watcher Script](https://discuss.elastic.co/t/elastic-search-kibana-advanced-watcher-script/213934)
**Author:** [@Maries](https://discuss.elastic.co/u/Maries)\ **Replies:** 4\ **Last updated:** [January 6, 2020, 7:48pm UTC](https://discuss.elastic.co/t/elastic-search-kibana-advanced-watcher-script/213934 "2020-01-06T19:48:41Z")
I have created an Advanced Watcher Script to trigger an action if the specific index does not receive data for the last 60 minutes. Script is working fine and alarms are getting triggered when the index does not receive … --- ## [Kibana Endpoint not Passing through Haproxy Using Shortened URL](https://discuss.elastic.co/t/kibana-endpoint-not-passing-through-haproxy-using-shortened-url/213597)
**Author:** [@balogan](https://discuss.elastic.co/u/balogan)\ **Replies:** 6\ **Last updated:** [January 6, 2020, 7:40pm UTC](https://discuss.elastic.co/t/kibana-endpoint-not-passing-through-haproxy-using-shortened-url/213597 "2020-01-06T19:40:43Z")
ECE 2.4.3 Haproxy 1.8 Kibana/Elasticsearch 7.5.4 I can get to Kibana using the endpoint prepended to the domain name like this: https://708....vcp-ecelab-log.mon.vzwops.com But we want a more user friendly url like … --- ## [Custom Visualization in Typescript not showing up in New Visualization list](https://discuss.elastic.co/t/custom-visualization-in-typescript-not-showing-up-in-new-visualization-list/213939)
**Author:** [@illeatmyhat](https://discuss.elastic.co/u/illeatmyhat)\ **Replies:** 1\ **Last updated:** [January 6, 2020, 7:31pm UTC](https://discuss.elastic.co/t/custom-visualization-in-typescript-not-showing-up-in-new-visualization-list/213939 "2020-01-06T19:31:14Z")
I made an extremely basic visualization using Typescript but it won't show up in the list of visualizations I can create. I generated the plugin using node scripts/generate\_plugin my\_plugin without any additional genera… --- ## [Error with outside gem for custom plugin, bug in pipeline](https://discuss.elastic.co/t/error-with-outside-gem-for-custom-plugin-bug-in-pipeline/213915)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 0\ **Last updated:** [January 6, 2020, 4:14pm UTC](https://discuss.elastic.co/t/error-with-outside-gem-for-custom-plugin-bug-in-pipeline/213915 "2020-01-06T16:14:38Z")
Hi All I am developing a very small plugin, in which in rb file, i am using a ruby gem require 'crack' i installed this crack gem, but still i get this error I installed the external gem like this /opt/logstash/bin… --- ## [Date parse failure message strange behavior](https://discuss.elastic.co/t/date-parse-failure-message-strange-behavior/213862)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 2\ **Last updated:** [January 6, 2020, 6:14pm UTC](https://discuss.elastic.co/t/date-parse-failure-message-strange-behavior/213862 "2020-01-06T18:14:48Z")
Hello, Using the following filter : #log timestamp filter { date { match =\> \[ "timestamp","UNIX" \] target =\> "log\_timestamp" timezone =\> "Europe/Paris" } } I have a \[0\] "\_dateparsefailure", but target fiel… --- ## [Interface bandwidth calculation](https://discuss.elastic.co/t/interface-bandwidth-calculation/213742)
**Author:** [@Richard\_Neely](https://discuss.elastic.co/u/Richard_Neely)\ **Replies:** 2\ **Last updated:** [January 6, 2020, 6:05pm UTC](https://discuss.elastic.co/t/interface-bandwidth-calculation/213742 "2020-01-06T18:05:53Z")
I'm using the logstash snmp plugin to get ifInOctect and ifOutOctect for all my interfaces. How can I create a scripted field to show the actual bandwidth of the interface from these numbers? --- ## [Logstash is getting terminated after succesfully running 3-4 hours but not completing its job](https://discuss.elastic.co/t/logstash-is-getting-terminated-after-succesfully-running-3-4-hours-but-not-completing-its-job/213735)
**Author:** [@Avinaba\_Ghosh\_Hajra](https://discuss.elastic.co/u/Avinaba_Ghosh_Hajra)\ **Replies:** 4\ **Last updated:** [January 6, 2020, 5:54pm UTC](https://discuss.elastic.co/t/logstash-is-getting-terminated-after-succesfully-running-3-4-hours-but-not-completing-its-job/213735 "2020-01-06T17:54:08Z")
We are running a pipeline that will fetch the data from oracle db table and send it to elasticsearch. We are using jdbc input plugin for that. As it is a one time activity we are running it in the following way nohup lo… --- ## [Unusually rare error with regard to logstash](https://discuss.elastic.co/t/unusually-rare-error-with-regard-to-logstash/213913)
**Author:** [@PhobosDthorga](https://discuss.elastic.co/u/PhobosDthorga)\ **Replies:** 1\ **Last updated:** [January 6, 2020, 5:53pm UTC](https://discuss.elastic.co/t/unusually-rare-error-with-regard-to-logstash/213913 "2020-01-06T17:53:36Z")
Hello everyone! We at GekkoFyre Networks are encountering an issue with logstash where we keep experiencing the same error over and over \[ 1 \], causing the service to restart repeatedly until eventually, systemd termina… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1697) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1699)