# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1719 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1720 --- ## [Logstash could not be started because there is already another instance using the configured data directory](https://discuss.elastic.co/t/logstash-could-not-be-started-because-there-is-already-another-instance-using-the-configured-data-directory/209226)
**Author:** [@sasikumarudu](https://discuss.elastic.co/u/sasikumarudu)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 8:18am UTC](https://discuss.elastic.co/t/logstash-could-not-be-started-because-there-is-already-another-instance-using-the-configured-data-directory/209226 "2019-12-19T08:18:35Z")
Hi Team, I need your help to fix the issue. I used to run Initiate a Job by providing command "/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash.conf -l /var/log/logstash/logstash-plain.log &" in one of… --- ## [Exponential numbers in visualisation(metric)](https://discuss.elastic.co/t/exponential-numbers-in-visualisation-metric/211994)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 4\ **Last updated:** [December 19, 2019, 8:09am UTC](https://discuss.elastic.co/t/exponential-numbers-in-visualisation-metric/211994 "2019-12-19T08:09:52Z")
Hello, I am trying to visualise a value using metric but numbers are very small. So the metric visualisation looks like this: 5.123,123,123,324,234e-53 I went to index pattern and tried to change the formater but I c… --- ## [Dec 19th, 2019 \[EN\]\[Elasticsearch\] Simplifying Ingest Pipelines with the new Enrich Processor](https://discuss.elastic.co/t/dec-19th-2019-en-elasticsearch-simplifying-ingest-pipelines-with-the-new-enrich-processor/211026)
**Author:** [@Imma](https://discuss.elastic.co/u/Imma)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-19th-2019-en-elasticsearch-simplifying-ingest-pipelines-with-the-new-enrich-processor/211026 "2019-12-19T08:00:03Z")
When ingesting data through a regular Elasticsearch ingest pipeline (e.g. with dissect, rename, or remove processors) we can now add an Enrich Processor. This allows us to do lookups on other Elasticsearch’s indices and… --- ## [Discover, Visualize, etc. unavailable for Default space for non-superuser users](https://discuss.elastic.co/t/discover-visualize-etc-unavailable-for-default-space-for-non-superuser-users/211321)
**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\ **Replies:** 5\ **Last updated:** [December 19, 2019, 7:40am UTC](https://discuss.elastic.co/t/discover-visualize-etc-unavailable-for-default-space-for-non-superuser-users/211321 "2019-12-19T07:40:25Z")
What privileges do I need to grant to a role for a user (of that role) so that the user can access the Discover, Visualize, etc. modules of Kibana in the "Default" space? All our users have a global read access to all s… --- ## [Incices are created with replicashards on single node cluster](https://discuss.elastic.co/t/incices-are-created-with-replicashards-on-single-node-cluster/212286)
**Author:** [@peoh](https://discuss.elastic.co/u/peoh)\ **Replies:** 11\ **Last updated:** [December 19, 2019, 7:37am UTC](https://discuss.elastic.co/t/incices-are-created-with-replicashards-on-single-node-cluster/212286 "2019-12-19T07:37:36Z")
Hi! I have found myself with a problem that I don't know how to fix, and I don't know exactly why this happens. What I have right now Elasticsearch 6.4.1 Single node cluster Indices: ~1000 Documents: ~500 000 000. … --- ## [Query with Filter not return doc](https://discuss.elastic.co/t/query-with-filter-not-return-doc/212306)
**Author:** [@Hung\_Nguyen\_Manh](https://discuss.elastic.co/u/Hung_Nguyen_Manh)\ **Replies:** 6\ **Last updated:** [December 19, 2019, 7:33am UTC](https://discuss.elastic.co/t/query-with-filter-not-return-doc/212306 "2019-12-19T07:33:28Z")
Hell everyone! I have a question. I do query filter in ES with field is "会員情報", it has value "D022FD29-DEA8-E311-947C-0626A2F00075", but not return doc. help me! pls. Thank a lot This is my query { "query": { "bool… --- ## [Unable to run Logstash : Logstash Error](https://discuss.elastic.co/t/unable-to-run-logstash-logstash-error/212346)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 7:18am UTC](https://discuss.elastic.co/t/unable-to-run-logstash-logstash-error/212346 "2019-12-19T07:18:56Z")
HI, I'm using elk 7.3.2 version and im not able to run the logstash due the following error. This is the only error its showing Please help me solve it. \[ERROR\] 2019-12-18 19:46:29.143 \[main\] Logstash - org.jruby.exc… --- ## [SIEM Timeline data persistence and retention](https://discuss.elastic.co/t/siem-timeline-data-persistence-and-retention/212344)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 7:15am UTC](https://discuss.elastic.co/t/siem-timeline-data-persistence-and-retention/212344 "2019-12-19T07:15:20Z")
Playing a bit with SIEM App and wondering where are Timeline stored and how to possibly control their retention? Don't seem to find any godd system index candidates for this... --- ## [SQL Field aliases in ES?](https://discuss.elastic.co/t/sql-field-aliases-in-es/212401)
**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 7:09am UTC](https://discuss.elastic.co/t/sql-field-aliases-in-es/212401 "2019-12-19T07:09:31Z")
Hi guys, I am writing to make this query on how to set the aliases in the ES queries. since I want to implement the conversion from SQL to ES through a PHP plugin in development. For the application to be implemented, it… --- ## [Running a pipeline with a short command](https://discuss.elastic.co/t/running-a-pipeline-with-a-short-command/212017)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 7:04am UTC](https://discuss.elastic.co/t/running-a-pipeline-with-a-short-command/212017 "2019-12-19T07:04:21Z")
I have my conf files in the etc/logstash/conf.d/ directory, so whenever I run a pipeline I have to add this path to my command. ex: bin/logstash -f /etc/logstash/conf.d/pipe.conf what do I have to modify to run a pipel… --- ## [Need to parse field name via logstash](https://discuss.elastic.co/t/need-to-parse-field-name-via-logstash/212186)
**Author:** [@shagun](https://discuss.elastic.co/u/shagun)\ **Replies:** 4\ **Last updated:** [December 19, 2019, 5:27am UTC](https://discuss.elastic.co/t/need-to-parse-field-name-via-logstash/212186 "2019-12-19T05:27:13Z")
Hi, I need to parse the field in the following input JSON via Logstash. INPUT { "xyz": { "http://com.myappliation.com/abc/def/fieldName": "value", "id": "hsakjh-uuekjn-kj48ehu, "http://com.myappliation.com/abc… --- ## [【ingest node】dissect processorとKV processorを1度に処理できるか](https://discuss.elastic.co/t/ingest-node-dissect-processor-kv-processor-1/212268)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 4\ **Last updated:** [December 19, 2019, 5:05am UTC](https://discuss.elastic.co/t/ingest-node-dissect-processor-kv-processor-1/212268 "2019-12-19T05:05:17Z")
お世話になっております。 Ingest nodeについてご質問です。 サンプルログ value1|value2|key3=value3 key4=value4 上記ログは、1つのログに形式の異なるデータが存在します。 このログを "value1|value2|箇所は、Dissect Proccesorにて下記の方法で定義 dissect { mapping =\> { "message" =\> "%{key1… --- ## [Metrics filter plugin has delay in flushing](https://discuss.elastic.co/t/metrics-filter-plugin-has-delay-in-flushing/212437)
**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 4:27am UTC](https://discuss.elastic.co/t/metrics-filter-plugin-has-delay-in-flushing/212437 "2019-12-19T04:27:44Z")
Logstash version: 7.5.1 When in heavy load, ~1.8M events per minute. I used meter and set clear\_interval and flush\_interval to both 60 seconds. The outcome is that, i got metrics event in every ~65 seconds. Any idea? --- ## [Need Hunspell Analysis in Single Token Keyword](https://discuss.elastic.co/t/need-hunspell-analysis-in-single-token-keyword/212429)
**Author:** [@Stephanus\_Budiwijaya](https://discuss.elastic.co/u/Stephanus_Budiwijaya)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 3:07am UTC](https://discuss.elastic.co/t/need-hunspell-analysis-in-single-token-keyword/212429 "2019-12-19T03:07:42Z")
ES version: 5.6.3 Problem: I have a field with mappings: "keyword\_phrase\_tag": { "type": "text", "analyzer": "keyword\_phrase", "search\_analyzer": "phrase\_keyword\_analyzer" }, and then the keyword\_phrase i… --- ## [Pass params value to scripted\_metric](https://discuss.elastic.co/t/pass-params-value-to-scripted-metric/212340)
**Author:** [@prashant\_mishra1](https://discuss.elastic.co/u/prashant_mishra1)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 2:07am UTC](https://discuss.elastic.co/t/pass-params-value-to-scripted-metric/212340 "2019-12-19T02:07:59Z")
I am trying to pass value inside params field in scripted\_metric from outside (which is aggregated sum of particular column), but its not getting updated there. Please help me in this. How should I pass total\_price insid… --- ## [Reindexing data to elasticSearch cloud](https://discuss.elastic.co/t/reindexing-data-to-elasticsearch-cloud/212397)
**Author:** [@Ilyoskhuja](https://discuss.elastic.co/u/Ilyoskhuja)\ **Replies:** 0\ **Last updated:** [December 18, 2019, 8:02pm UTC](https://discuss.elastic.co/t/reindexing-data-to-elasticsearch-cloud/212397 "2019-12-18T20:02:48Z")
Continuing the discussion from Cloud elastic account,Reindex docs: until now I used elasticsearch cloud version below 7.5, and now when i tried reindex my data to Elasticsearch cloud with same code it didn't reindex, ev… --- ## [Why move shard to unassigned when the circuit breaker is open?](https://discuss.elastic.co/t/why-move-shard-to-unassigned-when-the-circuit-breaker-is-open/212085)
**Author:** [@cigarl](https://discuss.elastic.co/u/cigarl)\ **Replies:** 6\ **Last updated:** [December 19, 2019, 2:04am UTC](https://discuss.elastic.co/t/why-move-shard-to-unassigned-when-the-circuit-breaker-is-open/212085 "2019-12-19T02:04:16Z")
I find that the replica shard is moved to unassigned, when write to replica and trip to circuit-brek if i used Circuit-break based on real memory usage. This will result in many started shards being moved back to the u… --- ## [No colour by range option in Horizontal/Vertical Bar graphs](https://discuss.elastic.co/t/no-colour-by-range-option-in-horizontal-vertical-bar-graphs/212263)
**Author:** [@SunilSMenon](https://discuss.elastic.co/u/SunilSMenon)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 1:01am UTC](https://discuss.elastic.co/t/no-colour-by-range-option-in-horizontal-vertical-bar-graphs/212263 "2019-12-19T01:01:16Z")
Hi, Want to colour the bars in the Horizontal visualization based on range defined. How can I achieve this --- ## [Disk space almost filled](https://discuss.elastic.co/t/disk-space-almost-filled/212413)
**Author:** [@piyush0](https://discuss.elastic.co/u/piyush0)\ **Replies:** 4\ **Last updated:** [December 18, 2019, 11:00pm UTC](https://discuss.elastic.co/t/disk-space-almost-filled/212413 "2019-12-18T23:00:45Z")
Hi I have a remote elasticsearch server set up with 1 node (I cannot ssh into this) The disk space (Total 50GB) is almost filled. Only about 1.5GB are left. But when I run \_cat/indices?v&s=store.size:desc I can see that… --- ## [Disk storage not increasing despite indexes being growing](https://discuss.elastic.co/t/disk-storage-not-increasing-despite-indexes-being-growing/211523)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 13\ **Last updated:** [December 18, 2019, 10:42pm UTC](https://discuss.elastic.co/t/disk-storage-not-increasing-despite-indexes-being-growing/211523 "2019-12-18T22:42:10Z")
Hi all, Noticed today something very weird, our Logstash workers keep emitting data consistently to two of our ES clusters, rate as expected. Disk storage in one of them gets consumed as expected also, but the other … --- ## [Can we perform joins between two indicis of elasticsearch in kibana?](https://discuss.elastic.co/t/can-we-perform-joins-between-two-indicis-of-elasticsearch-in-kibana/212277)
**Author:** [@Amit\_Chauhan](https://discuss.elastic.co/u/Amit_Chauhan)\ **Replies:** 1\ **Last updated:** [December 18, 2019, 10:23pm UTC](https://discuss.elastic.co/t/can-we-perform-joins-between-two-indicis-of-elasticsearch-in-kibana/212277 "2019-12-18T22:23:46Z")
I have 500 indecis in elasticsearch and 1 indecis that is created from postgres datasource data. Now I want to perform analytics in kibana on this data. Analytics data will be created once we will perform join between 50… --- ## [Elasticsearch input login - read only new documents](https://discuss.elastic.co/t/elasticsearch-input-login-read-only-new-documents/212408)
**Author:** [@Zabulon](https://discuss.elastic.co/u/Zabulon)\ **Replies:** 0\ **Last updated:** [December 18, 2019, 9:54pm UTC](https://discuss.elastic.co/t/elasticsearch-input-login-read-only-new-documents/212408 "2019-12-18T21:54:25Z")
Hi, I'm a bit noob in the elastic world and English is not my primary language.. But, I need some help !!!! How can I get only new documents from a remote elasticsearch database using the "elasticsearch input plugin" … --- ## [Moving Nodes Updates in 2.4.3](https://discuss.elastic.co/t/moving-nodes-updates-in-2-4-3/212240)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 6\ **Last updated:** [December 18, 2019, 9:54pm UTC](https://discuss.elastic.co/t/moving-nodes-updates-in-2-4-3/212240 "2019-12-18T21:54:23Z")
From the 2.4.3 ECE release note: Moving nodes off allocators for the system-owned deployments admin-console-elasticsearch and logging-and-metrics now works as expected. I've been trying to move Kibana, the one fro… --- ## [How to visualize sibling aggregations?](https://discuss.elastic.co/t/how-to-visualize-sibling-aggregations/211829)
**Author:** [@anelson-edge](https://discuss.elastic.co/u/anelson-edge)\ **Replies:** 2\ **Last updated:** [December 18, 2019, 9:41pm UTC](https://discuss.elastic.co/t/how-to-visualize-sibling-aggregations/211829 "2019-12-18T21:41:30Z")
insert sample data like this: get the desired output using sibling aggregations like this: sample firing alerts output: Now, how would I visualize that output? When I see non-trivial aggregations, I think ti… --- ## [ES "Join" making query over another query's result and aggregation](https://discuss.elastic.co/t/es-join-making-query-over-another-querys-result-and-aggregation/212407)
**Author:** [@niztal](https://discuss.elastic.co/u/niztal)\ **Replies:** 0\ **Last updated:** [December 18, 2019, 9:33pm UTC](https://discuss.elastic.co/t/es-join-making-query-over-another-querys-result-and-aggregation/212407 "2019-12-18T21:33:40Z")
Hi all, I have a use case where I want to have FTS (Full-Text-Search) over my corpus on ES which includes few documents over a single index. This part is easy, but I have another index (BTW, there may be that my design… --- ## [Can we migrate rollup index and rollup job from Kibana 6.5 to 7.5?](https://discuss.elastic.co/t/can-we-migrate-rollup-index-and-rollup-job-from-kibana-6-5-to-7-5/212231)
**Author:** [@alarka](https://discuss.elastic.co/u/alarka)\ **Replies:** 2\ **Last updated:** [December 18, 2019, 9:04pm UTC](https://discuss.elastic.co/t/can-we-migrate-rollup-index-and-rollup-job-from-kibana-6-5-to-7-5/212231 "2019-12-18T21:04:33Z")
Currently we are using Kibana 6.5.4 and have data worth 90 days which we are planning to rollup each day. However, in the coming months, we are planning to move to Kibana 7.5.0 Once we move, we plan to reindex data inde… --- ## [How to look for substring pattern inside the JSON in Kibana](https://discuss.elastic.co/t/how-to-look-for-substring-pattern-inside-the-json-in-kibana/212324)
**Author:** [@madhur\_modi](https://discuss.elastic.co/u/madhur_modi)\ **Replies:** 1\ **Last updated:** [December 18, 2019, 8:57pm UTC](https://discuss.elastic.co/t/how-to-look-for-substring-pattern-inside-the-json-in-kibana/212324 "2019-12-18T20:57:57Z")
Have to look for the substring inside the JSON an example : "parsedMessage": { "attributes": { "Reponse": {"fields":{"22":{"value":"812"},"48":{"value":"PRESENT:LENGTH:60"},"49":{"value":"784"},"50":{"value":"840"},"5… --- ## [Kibana external plugin does not work after enabling security](https://discuss.elastic.co/t/kibana-external-plugin-does-not-work-after-enabling-security/212301)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 3\ **Last updated:** [December 18, 2019, 8:38pm UTC](https://discuss.elastic.co/t/kibana-external-plugin-does-not-work-after-enabling-security/212301 "2019-12-18T20:38:50Z")
Hello, I have wazuh plugin running in kibana, After I have enabled security the wazuh plugin no longer works. in the logs I am getting the following error message. 2001 - \[security\_exception\] action \[indices:data/read/… --- ## [Kibana plugin development inspect](https://discuss.elastic.co/t/kibana-plugin-development-inspect/212244)
**Author:** [@McKittrick\_Kaminski](https://discuss.elastic.co/u/McKittrick_Kaminski)\ **Replies:** 3\ **Last updated:** [December 18, 2019, 8:22pm UTC](https://discuss.elastic.co/t/kibana-plugin-development-inspect/212244 "2019-12-18T20:22:11Z")
So I'm trying to debug a plugin thats getting an error, but I'm having trouble launching Kibana with inspection and connecting to it. I've seen in the contributing docs that I can use yarn debug to launch kbn with debug… --- ## [Convert String to integer in Kibana](https://discuss.elastic.co/t/convert-string-to-integer-in-kibana/212398)
**Author:** [@cricketfan5](https://discuss.elastic.co/u/cricketfan5)\ **Replies:** 1\ **Last updated:** [December 18, 2019, 8:17pm UTC](https://discuss.elastic.co/t/convert-string-to-integer-in-kibana/212398 "2019-12-18T20:17:42Z")
Hi, I am getting a value as string in my logs and I want to convert it to integer in the Kibana. I know that I can use Logstash. But I would like to know if there is a way to convert string to integer in Kibana while cr… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1718) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1720)