# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1785

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1786

---

## [Different Replica settings per Hot/Warm Nodes](https://discuss.elastic.co/t/different-replica-settings-per-hot-warm-nodes/207701)

<div class="topic-metadata">

**Author:** [@999chris](https://discuss.elastic.co/u/999chris)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 1:14pm UTC](https://discuss.elastic.co/t/different-replica-settings-per-hot-warm-nodes/207701 "2019-11-13T13:14:06Z")

</div>

Hi All, My Cluster status is currently yellow. This is due to shards reaching the end of the lifecycle in the hot nodes and being moved to the warm node, however the replica shards cannot be created as there is only one…

---

## [Field with duplicate values, keep only one](https://discuss.elastic.co/t/field-with-duplicate-values-keep-only-one/207709)

<div class="topic-metadata">

**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 1:11pm UTC](https://discuss.elastic.co/t/field-with-duplicate-values-keep-only-one/207709 "2019-11-13T13:11:50Z")

</div>

Hi, We're parsing logs with the GROK filter and have set the option "brean\_on\_match" to false. This allows us to be absolutely sure that we don't miss a field but at the same time allows for multiple matches in a single…

---

## [Logstash 7.2 monitoring uses deprecated config and unsafe options](https://discuss.elastic.co/t/logstash-7-2-monitoring-uses-deprecated-config-and-unsafe-options/207708)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 1:11pm UTC](https://discuss.elastic.co/t/logstash-7-2-monitoring-uses-deprecated-config-and-unsafe-options/207708 "2019-11-13T13:11:30Z")

</div>

Hi! I've set up an ES cluster (all parts are 7.2.x) and without any custom configuration I'm already getting errors from the built-in monitoring process: \[WARN \]\[logstash.outputs.elasticsearch\] You are using a depreca…

---

## [Create Network Diagram](https://discuss.elastic.co/t/create-network-diagram/207547)

<div class="topic-metadata">

**Author:** [@Faten](https://discuss.elastic.co/u/Faten)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 1:06pm UTC](https://discuss.elastic.co/t/create-network-diagram/207547 "2019-11-13T13:06:10Z")

</div>

Hi, I am using Kibana 7.4 and I am trying to create a network diagram visualization, is there any tips and ways I can create a network diagram? I tried to download one plugin but it doesn't work with Kibana 7.4

---

## [Use own domain as Kibana URL](https://discuss.elastic.co/t/use-own-domain-as-kibana-url/207703)

<div class="topic-metadata">

**Author:** [@ingoAlmeida](https://discuss.elastic.co/u/ingoAlmeida)\
**Replies:** 2\
**Last updated:** [November 13, 2019, 12:50pm UTC](https://discuss.elastic.co/t/use-own-domain-as-kibana-url/207703 "2019-11-13T12:50:33Z")

</div>

It is possible to use a CNAME or A type to access kibana in elastic cloud? If not, there is another way to do that?

---

## [Fields Keep Changing](https://discuss.elastic.co/t/fields-keep-changing/207177)

<div class="topic-metadata">

**Author:** [@RhysEvans](https://discuss.elastic.co/u/RhysEvans)\
**Replies:** 5\
**Last updated:** [November 13, 2019, 12:50pm UTC](https://discuss.elastic.co/t/fields-keep-changing/207177 "2019-11-13T12:50:23Z")

</div>

Hi I am having an issue were I have 2 fields, source.port and source.ip , that keep changing the format in kibana. These are coming in via logstash This is what I am expecting Json Output (sub section) }, "source":…

---

## [Kibana user privileges](https://discuss.elastic.co/t/kibana-user-privileges/206834)

<div class="topic-metadata">

**Author:** [@joseja](https://discuss.elastic.co/u/joseja)\
**Replies:** 5\
**Last updated:** [November 13, 2019, 12:46pm UTC](https://discuss.elastic.co/t/kibana-user-privileges/206834 "2019-11-13T12:46:13Z")

</div>

Hi, With Kibana spaces and user/role privileges, is there a way in which I can give users permission to create new visualizations/dashboards, but at the same time making sure that the user doesnt have right to delete an…

---

## [How to set Index name in conf.d .conf File to adjust to ILM](https://discuss.elastic.co/t/how-to-set-index-name-in-conf-d-conf-file-to-adjust-to-ilm/207544)

<div class="topic-metadata">

**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\
**Replies:** 4\
**Last updated:** [November 13, 2019, 12:17pm UTC](https://discuss.elastic.co/t/how-to-set-index-name-in-conf-d-conf-file-to-adjust-to-ilm/207544 "2019-11-13T12:17:10Z")

</div>

Hello Guys, i've got the following set in my /logstash/conf.d/10-syslog-XXXXX.conf file: output { if \[type\] == "syslog" { elasticsearch { hosts =\> \["000.000.000.000"\] index =\> "logstash-vmw-000002" I've also …

---

## [Unexpected error while indexing monitoring document, lots of queued tasks](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-lots-of-queued-tasks/204407)

<div class="topic-metadata">

**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 12:10pm UTC](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-lots-of-queued-tasks/204407 "2019-11-13T12:10:14Z")

</div>

Hello, Seems like my cluster has some issues since last two days. It appears that no new documents has been submitted since Oct 18th 21:30, even though i have multiple pipelines up and running in Logstash. I have 202 in…

---

## [Device log size per day](https://discuss.elastic.co/t/device-log-size-per-day/207695)

<div class="topic-metadata">

**Author:** [@DavidLevi](https://discuss.elastic.co/u/DavidLevi)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 12:00pm UTC](https://discuss.elastic.co/t/device-log-size-per-day/207695 "2019-11-13T12:00:08Z")

</div>

Hello All, I want to see the log size of each log sources per day. How can I do that? Many thanks,

---

## [ENvironmental variable hostname in logstash.yml and pipelines.yml or logstash.conf](https://discuss.elastic.co/t/environmental-variable-hostname-in-logstash-yml-and-pipelines-yml-or-logstash-conf/207508)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 11:50am UTC](https://discuss.elastic.co/t/environmental-variable-hostname-in-logstash-yml-and-pipelines-yml-or-logstash-conf/207508 "2019-11-13T11:50:11Z")

</div>

I have pipeline id in pipelines.yml=\> pipe-common I want to give id as pipe-common\_ So the hostname should be dynamic from the environmentla variables of OS level. I can use ${hostname} variable in shell script. same …

---

## [Order of result in complain autho-suggest](https://discuss.elastic.co/t/order-of-result-in-complain-autho-suggest/207694)

<div class="topic-metadata">

**Author:** [@v81](https://discuss.elastic.co/u/v81)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 11:48am UTC](https://discuss.elastic.co/t/order-of-result-in-complain-autho-suggest/207694 "2019-11-13T11:48:36Z")

</div>

Hi, I have a problem with the order of result in compain autho-suggest. I created index with mapping: { "properties": { "suggest": { "type": "completion", "analyzer": "pattern", "preserve\_separ…

---

## [Can I get the response stream?](https://discuss.elastic.co/t/can-i-get-the-response-stream/207693)

<div class="topic-metadata">

**Author:** [@jspate](https://discuss.elastic.co/u/jspate)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 11:45am UTC](https://discuss.elastic.co/t/can-i-get-the-response-stream/207693 "2019-11-13T11:45:52Z")

</div>

Hi, This may seem like a silly question, but with C# and Nest or the ElasticSearch.net clients is it possible to just get the Stream that comes from Elastic and use it with out the IElasticResponse? What I want to do i…

---

## [Calculate percentage](https://discuss.elastic.co/t/calculate-percentage/206715)

<div class="topic-metadata">

**Author:** [@SheetalRIL](https://discuss.elastic.co/u/SheetalRIL)\
**Replies:** 7\
**Last updated:** [November 13, 2019, 11:37am UTC](https://discuss.elastic.co/t/calculate-percentage/206715 "2019-11-13T11:37:51Z")

</div>

Hi , I want to calculate the percentage of some data on Kibana Dashboard.

---

## [Order of upgrading client and upgrading cluster?](https://discuss.elastic.co/t/order-of-upgrading-client-and-upgrading-cluster/207679)

<div class="topic-metadata">

**Author:** [@111222](https://discuss.elastic.co/u/111222)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 11:40am UTC](https://discuss.elastic.co/t/order-of-upgrading-client-and-upgrading-cluster/207679 "2019-11-13T11:40:36Z")

</div>

I'm going to upgrade my 6.8.2 cluster to 7.4.1 and also rest high level client. There might be a time window when client version and cluster version are different: client 6.8.2 with cluster 7.4.1, if I upgrade cluster…

---

## [Logstash (7.2.0) actively running but not listening on port 5043](https://discuss.elastic.co/t/logstash-7-2-0-actively-running-but-not-listening-on-port-5043/206772)

<div class="topic-metadata">

**Author:** [@koushikpal](https://discuss.elastic.co/u/koushikpal)\
**Replies:** 0\
**Last updated:** [November 6, 2019, 10:14am UTC](https://discuss.elastic.co/t/logstash-7-2-0-actively-running-but-not-listening-on-port-5043/206772 "2019-11-06T10:14:45Z")

</div>

I have configured Logstash to take input by listening to port 5043 from filebeat by creating a pipeline in /etc/logstash/conf.d for filebeat. Now when I start logstash and check the status, it shows active but when I che…

---

## [\[Error\] Setup-passwords: Failed to determine the health of the cluster](https://discuss.elastic.co/t/error-setup-passwords-failed-to-determine-the-health-of-the-cluster/207649)

<div class="topic-metadata">

**Author:** [@cjsjyh](https://discuss.elastic.co/u/cjsjyh)\
**Replies:** 2\
**Last updated:** [November 13, 2019, 11:00am UTC](https://discuss.elastic.co/t/error-setup-passwords-failed-to-determine-the-health-of-the-cluster/207649 "2019-11-13T11:00:59Z")

</div>

I get this error when trying to setup password: /usr/share/elasticsearch/bin# sudo ./elasticsearch-setup-passwords interactive Failed to determine the health of the cluster running at http://172.31.47.37:9200 Unexpecte…

---

## [Logstash to parse custom exception log](https://discuss.elastic.co/t/logstash-to-parse-custom-exception-log/207685)

<div class="topic-metadata">

**Author:** [@bamboomy](https://discuss.elastic.co/u/bamboomy)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 10:59am UTC](https://discuss.elastic.co/t/logstash-to-parse-custom-exception-log/207685 "2019-11-13T10:59:23Z")

</div>

Dears, I know there are a lot of tutorials and examples with almost an answer but I don't seem to get it right... I want to parse exception logs and they are in the following format: ERROR (some data that I like to p…

---

## [Difference between manage\_pipeline and manage\_ingest\_pipelines privileges?](https://discuss.elastic.co/t/difference-between-manage-pipeline-and-manage-ingest-pipelines-privileges/207683)

<div class="topic-metadata">

**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 10:56am UTC](https://discuss.elastic.co/t/difference-between-manage-pipeline-and-manage-ingest-pipelines-privileges/207683 "2019-11-13T10:56:41Z")

</div>

Hi, According to the docs, there are 2 privileges related to the management of ingest pipelines (manage\_pipeline and manage\_ingest\_pipelines), however, it's not clear to me what the difference is between them. Thanks.

---

## [Metricbeat -c /etc/metricbeat.yml logs goes to the path specified , when stating with systemctl it does not](https://discuss.elastic.co/t/metricbeat-c-etc-metricbeat-yml-logs-goes-to-the-path-specified-when-stating-with-systemctl-it-does-not/206273)

<div class="topic-metadata">

**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\
**Replies:** 4\
**Last updated:** [November 13, 2019, 10:54am UTC](https://discuss.elastic.co/t/metricbeat-c-etc-metricbeat-yml-logs-goes-to-the-path-specified-when-stating-with-systemctl-it-does-not/206273 "2019-11-13T10:54:22Z")

</div>

Hi All, Good morning I am experiencing a strange observation here with logs when I run metricbeat -c /etc/metricbeat/metricbeat.yml the logs goes to the specified location else not going, ie when started as servic…

---

## [Kibana , displaying of hosts takes a lot of time \[ I have only few hosts 6 max\]](https://discuss.elastic.co/t/kibana-displaying-of-hosts-takes-a-lot-of-time-i-have-only-few-hosts-6-max/206004)

<div class="topic-metadata">

**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 10:45am UTC](https://discuss.elastic.co/t/kibana-displaying-of-hosts-takes-a-lot-of-time-i-have-only-few-hosts-6-max/206004 "2019-11-13T10:45:54Z")

</div>

Hi All, My kibana interaces displays the status of the machines very very slow, I do not have much hosts, 6 hosts for tesing purpose and it is taking too much time to display, I have added the screen shot for reference …

---

## [Add Another Reputation Link into Kibana SIEM](https://discuss.elastic.co/t/add-another-reputation-link-into-kibana-siem/205072)

<div class="topic-metadata">

**Author:** [@joshuasmith](https://discuss.elastic.co/u/joshuasmith)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 10:42am UTC](https://discuss.elastic.co/t/add-another-reputation-link-into-kibana-siem/205072 "2019-11-13T10:42:56Z")

</div>

Hello, We are starting to use the SIEM app some more and wanted to add a few additional links for Threat Intel and context. What is the process for getting another customizable link (similar to the virustotal or talosi…

---

## [What are the best (preferred) methods to recover data from a corrupted shard?](https://discuss.elastic.co/t/what-are-the-best-preferred-methods-to-recover-data-from-a-corrupted-shard/207583)

<div class="topic-metadata">

**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\
**Replies:** 2\
**Last updated:** [November 13, 2019, 10:25am UTC](https://discuss.elastic.co/t/what-are-the-best-preferred-methods-to-recover-data-from-a-corrupted-shard/207583 "2019-11-13T10:25:30Z")

</div>

I recently ran into an out of space issue (I know, bad planning) and I would like to recover as much data from the shard as possible. I can see the data files under the node directory for that particular index and was wo…

---

## [Get extra fields at \`xpack\` vertices](https://discuss.elastic.co/t/get-extra-fields-at-xpack-vertices/207457)

<div class="topic-metadata">

**Author:** [@dbenatia](https://discuss.elastic.co/u/dbenatia)\
**Replies:** 4\
**Last updated:** [November 13, 2019, 10:19am UTC](https://discuss.elastic.co/t/get-extra-fields-at-xpack-vertices/207457 "2019-11-13T10:19:26Z")

</div>

Hello all , i am using elasticsearch v5.6 with an "xpack" license, i am doing a request to //\_xpack/\_graph/\_explore as shown in the docs. the response is vertices and connections as expected. is there any way to a…

---

## [Mapping Array of Arrays that have mapped fields?](https://discuss.elastic.co/t/mapping-array-of-arrays-that-have-mapped-fields/207417)

<div class="topic-metadata">

**Author:** [@mikeRead](https://discuss.elastic.co/u/mikeRead)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 10:09am UTC](https://discuss.elastic.co/t/mapping-array-of-arrays-that-have-mapped-fields/207417 "2019-11-13T10:09:21Z")

</div>

I want to map a field to store data like so field1:\[ \[ {val:1}, {val:2} \], \[ {val:3} \], \[ {val:4} \] \] For the life of me I can't find how to map all the way down to "val:number" Thank you for any help even…

---

## [How to get the last nested object of all documents then perform sub-aggregations](https://discuss.elastic.co/t/how-to-get-the-last-nested-object-of-all-documents-then-perform-sub-aggregations/207306)

<div class="topic-metadata">

**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\
**Replies:** 2\
**Last updated:** [November 13, 2019, 9:32am UTC](https://discuss.elastic.co/t/how-to-get-the-last-nested-object-of-all-documents-then-perform-sub-aggregations/207306 "2019-11-13T09:32:04Z")

</div>

I have an index called socialmedia and trying to create queries with this field called eng (omitted some unnecessary fields) "id" : "1", "eng": \[ { "soc\_mm\_score" : "3", "date\_updated" : "1520969306", }, { "s…

---

## [Error:Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release](https://discuss.elastic.co/t/error-java-hotspot-tm-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/207661)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 9:04am UTC](https://discuss.elastic.co/t/error-java-hotspot-tm-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/207661 "2019-11-13T09:04:17Z")

</div>

Hello, Can anyone help me in this? I am getting below error when trying to run logstash config file: Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely b…

---

## [Filter pfsense Logs in Logstash](https://discuss.elastic.co/t/filter-pfsense-logs-in-logstash/207658)

<div class="topic-metadata">

**Author:** [@Snadro](https://discuss.elastic.co/u/Snadro)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 8:54am UTC](https://discuss.elastic.co/t/filter-pfsense-logs-in-logstash/207658 "2019-11-13T08:54:20Z")

</div>

Hi erveryone. I looking for to use ELK-Stack as intrusion decetion system (IDS). i'm new in ELK and it is my first setup of en IDS. Our-Setup: Firewall: pfsense ELK-Stack Version: 6.8.4 Java-Version: 1.8.0\_222-8u222…

---

## [Error while sending logs to logstash with filebeats](https://discuss.elastic.co/t/error-while-sending-logs-to-logstash-with-filebeats/207652)

<div class="topic-metadata">

**Author:** [@David\_Samm](https://discuss.elastic.co/u/David_Samm)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 8:16am UTC](https://discuss.elastic.co/t/error-while-sending-logs-to-logstash-with-filebeats/207652 "2019-11-13T08:16:54Z")

</div>

Getting following error while I try to fetch logs using filebeats to logstash \[logstash.outputs.elasticsearch\] Installing elasticsearch template to \_template/logstash \[2019-11-13T13:36:49,899\]\[ERROR\]\[logstash.outputs…

---

## [Is there way to create Kibana dashboards from custom application?](https://discuss.elastic.co/t/is-there-way-to-create-kibana-dashboards-from-custom-application/206608)

<div class="topic-metadata">

**Author:** [@Sagesh](https://discuss.elastic.co/u/Sagesh)\
**Replies:** 3\
**Last updated:** [November 13, 2019, 8:33am UTC](https://discuss.elastic.co/t/is-there-way-to-create-kibana-dashboards-from-custom-application/206608 "2019-11-13T08:33:46Z")

</div>

I wanted to provide clients to create dashboards and visualization in Kibana using our application. Is there a way I can create dashboards and visualization from my application? Or if client creates a new dashboard in Ki…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1784)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1786)
