# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1742

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1743

---

## [Confused about accessing "fields" in Kibana](https://discuss.elastic.co/t/confused-about-accessing-fields-in-kibana/210619)

<div class="topic-metadata">

**Author:** [@amhulli](https://discuss.elastic.co/u/amhulli)\
**Replies:** 1\
**Last updated:** [December 5, 2019, 9:02am UTC](https://discuss.elastic.co/t/confused-about-accessing-fields-in-kibana/210619 "2019-12-05T09:02:29Z")

</div>

Hi, I'm struggling to get my head around getting my elasticsearch data into such a format that will allow me to view fields within log messages (To get a better idea of what I want to do, I would like to be able to view…

---

## [How to assign nodeSelector to Kibana](https://discuss.elastic.co/t/how-to-assign-nodeselector-to-kibana/210636)

<div class="topic-metadata">

**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\
**Replies:** 2\
**Last updated:** [December 5, 2019, 8:55am UTC](https://discuss.elastic.co/t/how-to-assign-nodeselector-to-kibana/210636 "2019-12-05T08:55:43Z")

</div>

I try to add spec: version: 7.5.0 count: 1 nodeSelector: appType: stateless but it didn't work.

---

## [Searchable fields not available in Discover tab of Kibana](https://discuss.elastic.co/t/searchable-fields-not-available-in-discover-tab-of-kibana/210374)

<div class="topic-metadata">

**Author:** [@maarten](https://discuss.elastic.co/u/maarten)\
**Replies:** 2\
**Last updated:** [December 5, 2019, 8:33am UTC](https://discuss.elastic.co/t/searchable-fields-not-available-in-discover-tab-of-kibana/210374 "2019-12-05T08:33:09Z")

</div>

Not all fields that are indicated as searchable appear in the Discover tab. E.g. the following document.\* fields in the index: Versus then the available fields in the Discover tab, where there is a question mark next…

---

## [Elastic Search 6.8.5 high cpu load](https://discuss.elastic.co/t/elastic-search-6-8-5-high-cpu-load/210641)

<div class="topic-metadata">

**Author:** [@ioannigz](https://discuss.elastic.co/u/ioannigz)\
**Replies:** 0\
**Last updated:** [December 5, 2019, 8:24am UTC](https://discuss.elastic.co/t/elastic-search-6-8-5-high-cpu-load/210641 "2019-12-05T08:24:47Z")

</div>

Hello. I am new to Elasticsearch. I use one installation on my server with version 6.8.5 for a magento 2 instance I have. I am using java-8-openjdk openjdk version "1.8.0\_222". Although it not the first time I use the sa…

---

## [How to visualize division of two sum aggregations per time bucket](https://discuss.elastic.co/t/how-to-visualize-division-of-two-sum-aggregations-per-time-bucket/205281)

<div class="topic-metadata">

**Author:** [@MAvD](https://discuss.elastic.co/u/MAvD)\
**Replies:** 3\
**Last updated:** [December 5, 2019, 7:46am UTC](https://discuss.elastic.co/t/how-to-visualize-division-of-two-sum-aggregations-per-time-bucket/205281 "2019-12-05T07:46:51Z")

</div>

Hello, We want to create a visualizations in which we can compare the average prices per week for different years. Normally we would just get the mean prices per week. But, the problem in our case is that each document …

---

## [Elasicsearch cluster setup](https://discuss.elastic.co/t/elasicsearch-cluster-setup/210456)

<div class="topic-metadata">

**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\
**Replies:** 14\
**Last updated:** [December 5, 2019, 7:24am UTC](https://discuss.elastic.co/t/elasicsearch-cluster-setup/210456 "2019-12-05T07:24:06Z")

</div>

Hi I wan to setup a two node cluster in which i want only data node and master node is it possible? if it is then what will be the configuration done in both nodes

---

## [Pb using logstash Helm chart and X-Pack](https://discuss.elastic.co/t/pb-using-logstash-helm-chart-and-x-pack/209979)

<div class="topic-metadata">

**Author:** [@cabrinoob](https://discuss.elastic.co/u/cabrinoob)\
**Replies:** 1\
**Last updated:** [December 5, 2019, 7:18am UTC](https://discuss.elastic.co/t/pb-using-logstash-helm-chart-and-x-pack/209979 "2019-12-05T07:18:08Z")

</div>

Hi, I'am trying to deploy Logstash on my Kubernetes cluster using this helm chart : I just modified the values.yaml to have the input and output I need like this : inputs: main: |- input { kinesis { …

---

## [Elasticsearch master cluster problem on kubernetes (installed via helm chart stable/elastic-stack)](https://discuss.elastic.co/t/elasticsearch-master-cluster-problem-on-kubernetes-installed-via-helm-chart-stable-elastic-stack/210127)

<div class="topic-metadata">

**Author:** [@anon546463](https://discuss.elastic.co/u/anon546463)\
**Replies:** 1\
**Last updated:** [December 5, 2019, 7:15am UTC](https://discuss.elastic.co/t/elasticsearch-master-cluster-problem-on-kubernetes-installed-via-helm-chart-stable-elastic-stack/210127 "2019-12-05T07:15:51Z")

</div>

Hello, I've installed elastic-stack using command: helm upgrade --install elk-training stable/elastic-stack -f values.yaml default elasticsearch settings: values.yml: http://dpaste.com/2KM8VGR kubectl get po,svc …

---

## [Elasticsearch upgrade from 5.6 to 7.4](https://discuss.elastic.co/t/elasticsearch-upgrade-from-5-6-to-7-4/210624)

<div class="topic-metadata">

**Author:** [@nisham](https://discuss.elastic.co/u/nisham)\
**Replies:** 2\
**Last updated:** [December 5, 2019, 6:27am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-5-6-to-7-4/210624 "2019-12-05T06:27:57Z")

</div>

Hello, We have our production cluster running on 5.6 version. We would like to upgrade the Elasticsearch to 7.4 version. Is it possible to directly migrate from 5.x to 7.x ? Also we are using parent child relationship …

---

## [Configure logstast to bind to an IP](https://discuss.elastic.co/t/configure-logstast-to-bind-to-an-ip/210627)

<div class="topic-metadata">

**Author:** [@ShiviKaya](https://discuss.elastic.co/u/ShiviKaya)\
**Replies:** 0\
**Last updated:** [December 5, 2019, 6:12am UTC](https://discuss.elastic.co/t/configure-logstast-to-bind-to-an-ip/210627 "2019-12-05T06:12:47Z")

</div>

My server has two interfaces, public and private. I need to send logs to a kafka server which is not reachable from the private interface. Is there a way to configure logstash to use the public interface because it uses …

---

## [\[error when put index template \]Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/error-when-put-index-template-root-mapping-definition-has-unsupported-parameters/210517)

<div class="topic-metadata">

**Author:** [@Frank\_Wang](https://discuss.elastic.co/u/Frank_Wang)\
**Replies:** 1\
**Last updated:** [December 5, 2019, 6:07am UTC](https://discuss.elastic.co/t/error-when-put-index-template-root-mapping-definition-has-unsupported-parameters/210517 "2019-12-05T06:07:56Z")

</div>

I send following cmd to kibana.dev tool, and get error. what I did wrong? My elasticSearch version is 6.8.0 { "error": { "root\_cause": \[ { "type": "mapper\_parsing\_exception", "reason": "Root mapping definition has unsup…

---

## [Alert when Exception Logstash](https://discuss.elastic.co/t/alert-when-exception-logstash/210621)

<div class="topic-metadata">

**Author:** [@Anuwa\_A](https://discuss.elastic.co/u/Anuwa_A)\
**Replies:** 0\
**Last updated:** [December 5, 2019, 5:18am UTC](https://discuss.elastic.co/t/alert-when-exception-logstash/210621 "2019-12-05T05:18:57Z")

</div>

I'm using logstash to sync mysql data to elasticserch. Is there a way to enable alert notification/email when there is any exception happen in that process.

---

## [テキストデータの取り込み時に、改行を入れる方法](https://discuss.elastic.co/t/topic/210285)

<div class="topic-metadata">

**Author:** [@5f750bbb360aba6ced5f](https://discuss.elastic.co/u/5f750bbb360aba6ced5f)\
**Replies:** 2\
**Last updated:** [December 5, 2019, 4:35am UTC](https://discuss.elastic.co/t/topic/210285 "2019-12-05T04:35:48Z")

</div>

現在、200字、300字を超える長めのテキストデータを取り込んでいますが、Kibana上での可読性を上げるため、取り込みの際にテキストデータに改行を入れるようなLogstashの設定などがないかと悩んでおります。 CSV上では一レコードがすべて一行（＝改行が含まれていない状態）ですが、たとえば句読点の後などに改行をいれたいです。 【環境等】 ・Kibana、Elasticsearch、Logstashのバージョン：6.6.2

---

## [データを取り込む際に不要な情報をインデックスから削除する方法](https://discuss.elastic.co/t/topic/210288)

<div class="topic-metadata">

**Author:** [@5f750bbb360aba6ced5f](https://discuss.elastic.co/u/5f750bbb360aba6ced5f)\
**Replies:** 2\
**Last updated:** [December 5, 2019, 4:34am UTC](https://discuss.elastic.co/t/topic/210288 "2019-12-05T04:34:18Z")

</div>

Logstashデータを取り込むと時に、Host・tags・pathなどがIndexに含まれていますが、こちらは見せたくない情報を含むため、これらを取り込み時点で除去するLogstash上の設定等はありませんでしょうか。 【環境等】 ・Kibana、Elasticsearch、Logstashのバージョン：6.6.2

---

## [New nodes in cluster timing out](https://discuss.elastic.co/t/new-nodes-in-cluster-timing-out/210614)

<div class="topic-metadata">

**Author:** [@tskull](https://discuss.elastic.co/u/tskull)\
**Replies:** 0\
**Last updated:** [December 5, 2019, 4:20am UTC](https://discuss.elastic.co/t/new-nodes-in-cluster-timing-out/210614 "2019-12-05T04:20:07Z")

</div>

Hey there, I have a cluster self hosted on GCP. Initially I had 5 a cluster with 5 nodes, and I'm downscaling to 3 smaller nodes. I have added the extra 3 VMs and installed elastic on each. Each have been added to the …

---

## [All logs are entered twice](https://discuss.elastic.co/t/all-logs-are-entered-twice/210603)

<div class="topic-metadata">

**Author:** [@matthew.simpson](https://discuss.elastic.co/u/matthew.simpson)\
**Replies:** 0\
**Last updated:** [December 4, 2019, 10:28pm UTC](https://discuss.elastic.co/t/all-logs-are-entered-twice/210603 "2019-12-04T22:28:03Z")

</div>

Hey everyone, we have filebeat set up on two VM's and Elasticsearch, Kibana and Logstash working on a 3rd VM. We also have Meraki Syslogs parsing into Logstash. All of our log entries are being duplicated from all sourc…

---

## [Understanding log settings](https://discuss.elastic.co/t/understanding-log-settings/210599)

<div class="topic-metadata">

**Author:** [@estevez](https://discuss.elastic.co/u/estevez)\
**Replies:** 0\
**Last updated:** [December 4, 2019, 10:17pm UTC](https://discuss.elastic.co/t/understanding-log-settings/210599 "2019-12-04T22:17:32Z")

</div>

Hi I have some confusion on the log settings. Specifically what this setting is doing and how it is related with the rest of the log settings: index.search.slowlog.level: info If I'm understanding the rest right, t…

---

## [Cross-Cluster Search With Hostname/Path](https://discuss.elastic.co/t/cross-cluster-search-with-hostname-path/210597)

<div class="topic-metadata">

**Author:** [@immolation](https://discuss.elastic.co/u/immolation)\
**Replies:** 0\
**Last updated:** [December 4, 2019, 9:52pm UTC](https://discuss.elastic.co/t/cross-cluster-search-with-hostname-path/210597 "2019-12-04T21:52:11Z")

</div>

Hello! I have Elasticsearch running in Kubernetes, and there is a cluster in each AWS Availability Zone (AZ). I am working on setting up cross-cluster searching across all AZs and currently have it working, but not in a …

---

## [Data Storage Policy in Elastic Search](https://discuss.elastic.co/t/data-storage-policy-in-elastic-search/209121)

<div class="topic-metadata">

**Author:** [@kjain14](https://discuss.elastic.co/u/kjain14)\
**Replies:** 3\
**Last updated:** [December 4, 2019, 10:01pm UTC](https://discuss.elastic.co/t/data-storage-policy-in-elastic-search/209121 "2019-12-04T22:01:50Z")

</div>

Hi, The version of ES is 7.0.0. I am curious to know how index stored at ES nodes. Let me give you one scenario: In our ES cluster, there are 5 indices including .kibana. The \_cat/shards api has been showing that data …

---

## [Looking for a complete list of ansible-elasticsearch variables](https://discuss.elastic.co/t/looking-for-a-complete-list-of-ansible-elasticsearch-variables/209547)

<div class="topic-metadata">

**Author:** [@RLPowellJr](https://discuss.elastic.co/u/RLPowellJr)\
**Replies:** 2\
**Last updated:** [December 4, 2019, 9:50pm UTC](https://discuss.elastic.co/t/looking-for-a-complete-list-of-ansible-elasticsearch-variables/209547 "2019-12-04T21:50:42Z")

</div>

Greetings all! I am working with the ansible-elasticsearch Ansible playbook from https://github.com/elastic/ansible-elasticsearch. I'm relatively new to Ansible and very new to this playbook. I can get the playbook to…

---

## [Cluster\_block\_exception FORBIDDEN/8/index write (api)](https://discuss.elastic.co/t/cluster-block-exception-forbidden-8-index-write-api/210594)

<div class="topic-metadata">

**Author:** [@alatas](https://discuss.elastic.co/u/alatas)\
**Replies:** 0\
**Last updated:** [December 4, 2019, 9:31pm UTC](https://discuss.elastic.co/t/cluster-block-exception-forbidden-8-index-write-api/210594 "2019-12-04T21:31:19Z")

</div>

Hi, we have a single node elk cluster running on ubuntu over docker. ELK version is 6.4.3. We started to get "cluster\_block\_exception with FORBIDDEN/8/index write api" error on the logstash output. I checked all the iss…

---

## [If statement is failing to match for certain values.. pls help](https://discuss.elastic.co/t/if-statement-is-failing-to-match-for-certain-values-pls-help/210438)

<div class="topic-metadata">

**Author:** [@Cdnvballer](https://discuss.elastic.co/u/Cdnvballer)\
**Replies:** 3\
**Last updated:** [December 4, 2019, 9:24pm UTC](https://discuss.elastic.co/t/if-statement-is-failing-to-match-for-certain-values-pls-help/210438 "2019-12-04T21:24:54Z")

</div>

I have syslog network messages successfully parsed with logstash, event 1 has \[system\]\[syslog\]\[hostname\]=10.20.0.3 event 2 has \[system\]\[syslog\]\[hostname\]=10.111.0.3 however the following statements fail to match for 1…

---

## [Help with grok filter \[ipv4\]](https://discuss.elastic.co/t/help-with-grok-filter-ipv4/210426)

<div class="topic-metadata">

**Author:** [@raged](https://discuss.elastic.co/u/raged)\
**Replies:** 2\
**Last updated:** [December 4, 2019, 8:48pm UTC](https://discuss.elastic.co/t/help-with-grok-filter-ipv4/210426 "2019-12-04T20:48:28Z")

</div>

Afternoon all, We are utilizing metricbeat to send host info by using the metadata that is described in this article. It eventually gives me a field that is populated with IPs from all of the network adapters: "host":…

---

## [Kibana Bot Utilization Dashboard](https://discuss.elastic.co/t/kibana-bot-utilization-dashboard/210518)

<div class="topic-metadata">

**Author:** [@Heena\_Saini](https://discuss.elastic.co/u/Heena_Saini)\
**Replies:** 0\
**Last updated:** [December 4, 2019, 11:12am UTC](https://discuss.elastic.co/t/kibana-bot-utilization-dashboard/210518 "2019-12-04T11:12:30Z")

</div>

Hi All I am new to Elastic Search/Kibana. I am working in UiPath and I want to create a dashboard where I can see my Robots utilization (on a Robot, what process run at what time and when its is free based on time of …

---

## [Delete index cause the Master node offline](https://discuss.elastic.co/t/delete-index-cause-the-master-node-offline/210457)

<div class="topic-metadata">

**Author:** [@KellyK313](https://discuss.elastic.co/u/KellyK313)\
**Replies:** 5\
**Last updated:** [December 4, 2019, 7:55pm UTC](https://discuss.elastic.co/t/delete-index-cause-the-master-node-offline/210457 "2019-12-04T19:55:21Z")

</div>

When I delete a big-data index,I saw my master node offline and recovery a while later. I just feel the delete syntax is calling in the data node,have nothing to do with the master node. Somebody help me to figure it o…

---

## [Adding workspace causes issues with Kibana behind proxy](https://discuss.elastic.co/t/adding-workspace-causes-issues-with-kibana-behind-proxy/210430)

<div class="topic-metadata">

**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\
**Replies:** 1\
**Last updated:** [December 4, 2019, 7:49pm UTC](https://discuss.elastic.co/t/adding-workspace-causes-issues-with-kibana-behind-proxy/210430 "2019-12-04T19:49:21Z")

</div>

When I use Kibana with proxy and add workspaces I see the following: With any attempt to access roles, users or even visualizations i get prompted to select a workspace and then after selecting one i'm taken to the home …

---

## [Elasticsearch not restarting](https://discuss.elastic.co/t/elasticsearch-not-restarting/210583)

<div class="topic-metadata">

**Author:** [@pksinghal](https://discuss.elastic.co/u/pksinghal)\
**Replies:** 0\
**Last updated:** [December 4, 2019, 7:10pm UTC](https://discuss.elastic.co/t/elasticsearch-not-restarting/210583 "2019-12-04T19:10:23Z")

</div>

While restarting elasticsearch, getting this error : \[2019-12-05T00:26:09,539\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] uncaught exception in thread \[main\] org.elasticsearch.bootstrap.StartupException: org.…

---

## [Pushing flush onto pipeline error without glob issue](https://discuss.elastic.co/t/pushing-flush-onto-pipeline-error-without-glob-issue/210255)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 1\
**Last updated:** [December 4, 2019, 6:34pm UTC](https://discuss.elastic.co/t/pushing-flush-onto-pipeline-error-without-glob-issue/210255 "2019-12-04T18:34:26Z")

</div>

I am having this output in logstash and unable to get new index created after the last time it worked last week. This doesnt look like an error but is definitely preventing logstash from creating index on kibana. Can any…

---

## [Elastic search automatically changing the date type field year value to 1970](https://discuss.elastic.co/t/elastic-search-automatically-changing-the-date-type-field-year-value-to-1970/209749)

<div class="topic-metadata">

**Author:** [@dhshaw](https://discuss.elastic.co/u/dhshaw)\
**Replies:** 9\
**Last updated:** [December 4, 2019, 6:32pm UTC](https://discuss.elastic.co/t/elastic-search-automatically-changing-the-date-type-field-year-value-to-1970/209749 "2019-12-04T18:32:27Z")

</div>

I am using Elastic search version 7.2 and my date field mapping is "agent\_utc\_time": { "type": "date", "format": "MM/dd/YYYY HH:mm:ss || MM/dd/YYYY || YYYY-MM-dd" }, I am inserting the date value as: "agent\_utc\_time…

---

## [Elasticsearch returning inconsistent data](https://discuss.elastic.co/t/elasticsearch-returning-inconsistent-data/210442)

<div class="topic-metadata">

**Author:** [@Veshnu\_Ramakrishnan](https://discuss.elastic.co/u/Veshnu_Ramakrishnan)\
**Replies:** 1\
**Last updated:** [December 4, 2019, 1:04pm UTC](https://discuss.elastic.co/t/elasticsearch-returning-inconsistent-data/210442 "2019-12-04T13:04:00Z")

</div>

I have an index which stores user information. On one side I am updating the index with changes. The other side I am search user with display name. I have a problem now. Say { "name": "gOz7nH2Sk3242342"}. Then i change …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1741)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1743)
