# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1821 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1822 --- ## [Need to get latest 2 records](https://discuss.elastic.co/t/need-to-get-latest-2-records/204092)
**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\ **Replies:** 9\ **Last updated:** [October 24, 2019, 8:15am UTC](https://discuss.elastic.co/t/need-to-get-latest-2-records/204092 "2019-10-24T08:15:27Z")
Hi, i need a query to fetch last and 2nd last record entered the index. What should be the query other than putting size: 2 after sorting and all? thanks --- ## [Missing authentication ceredentials for rest request](https://discuss.elastic.co/t/missing-authentication-ceredentials-for-rest-request/204859)
**Author:** [@Krypton8](https://discuss.elastic.co/u/Krypton8)\ **Replies:** 2\ **Last updated:** [October 24, 2019, 8:14am UTC](https://discuss.elastic.co/t/missing-authentication-ceredentials-for-rest-request/204859 "2019-10-24T08:14:23Z")
Hello guys, I have put in place a LDAP realm on my ES cluster. I enabled the xpack.security.enabled to true on all of my cluster nodes (3). I have modified my elasticsearch.yml to set the LDAP realm with user\_search a… --- ## [Efficient storage](https://discuss.elastic.co/t/efficient-storage/204684)
**Author:** [@eddie4](https://discuss.elastic.co/u/eddie4)\ **Replies:** 3\ **Last updated:** [October 24, 2019, 8:13am UTC](https://discuss.elastic.co/t/efficient-storage/204684 "2019-10-24T08:13:49Z")
Hello, am planning on storing 1,5TB of textfiles in Elasticsearch. However I do not have a lot of space to spare above the text file size. Now I have been reading up on elastic search and how to minimize storage and I ha… --- ## [Logstash Error csv](https://discuss.elastic.co/t/logstash-error-csv/204814)
**Author:** [@Sakthivanan](https://discuss.elastic.co/u/Sakthivanan)\ **Replies:** 3\ **Last updated:** [October 24, 2019, 8:12am UTC](https://discuss.elastic.co/t/logstash-error-csv/204814 "2019-10-24T08:12:54Z")
this is my logstash file: input { file { type =\> "csv" start\_position=\>"beginning" path =\> "D:/Chrome Downloads/Text file/csv files/KPI Master.csv" sincedb\_path=\>"nul" } } filter { } output { … --- ## [Procedure for Backup/Recover the elastic search data from cluster](https://discuss.elastic.co/t/procedure-for-backup-recover-the-elastic-search-data-from-cluster/204893)
**Author:** [@Joseph\_Raj](https://discuss.elastic.co/u/Joseph_Raj)\ **Replies:** 3\ **Last updated:** [October 24, 2019, 8:12am UTC](https://discuss.elastic.co/t/procedure-for-backup-recover-the-elastic-search-data-from-cluster/204893 "2019-10-24T08:12:36Z")
Hi, Can anyone help you us in finding the steps to recover or backup the elastic search data before the indices are corrupted or any malfunction happens in the cluster or nodes. Thanks in advance!!! --- ## [Documentation Error for Metricbeat system.diskio.iostat.request.avg\_size](https://discuss.elastic.co/t/documentation-error-for-metricbeat-system-diskio-iostat-request-avg-size/204945)
**Author:** [@dnwobu](https://discuss.elastic.co/u/dnwobu)\ **Replies:** 1\ **Last updated:** [October 24, 2019, 7:47am UTC](https://discuss.elastic.co/t/documentation-error-for-metricbeat-system-diskio-iostat-request-avg-size/204945 "2019-10-24T07:47:43Z")
The value calculated in https://github.com/elastic/beats/blob/master/metricbeat/module/system/diskio/diskstat\_linux\_test.go line 88 does not align with the documentation: https://www.elastic.co/guide/en/beats/metricbeat… --- ## [LifeCycle Policy Configuration](https://discuss.elastic.co/t/lifecycle-policy-configuration/198503)
**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\ **Replies:** 37\ **Last updated:** [October 24, 2019, 7:46am UTC](https://discuss.elastic.co/t/lifecycle-policy-configuration/198503 "2019-10-24T07:46:57Z")
Hi, I have this simple scenario. I have more or less 100 hosts (linux and windows) and i want to gather only logs and metrics. So i have install filebeat and metricbeat to all linux hosts and winlogbeat and metricbeat… --- ## [Elasticsearch Error {type:cluster\_block\_exception,reason:"blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];}](https://discuss.elastic.co/t/elasticsearch-error-type-cluster-block-exception-reason-blocked-by-forbidden-12-index-read-only-allow-delete-api/205006)
**Author:** [@ahmadtamimi](https://discuss.elastic.co/u/ahmadtamimi)\ **Replies:** 4\ **Last updated:** [October 24, 2019, 7:29am UTC](https://discuss.elastic.co/t/elasticsearch-error-type-cluster-block-exception-reason-blocked-by-forbidden-12-index-read-only-allow-delete-api/205006 "2019-10-24T07:29:58Z")
Hello before three days i got below error on production enviroment: {"type":"cluster\_block\_exception","reason":"blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];"} i applied below command, then it it wo… --- ## [How to 'filter' in Discover when the field is a scripted field](https://discuss.elastic.co/t/how-to-filter-in-discover-when-the-field-is-a-scripted-field/204890)
**Author:** [@Ssingh12](https://discuss.elastic.co/u/Ssingh12)\ **Replies:** 2\ **Last updated:** [October 24, 2019, 6:33am UTC](https://discuss.elastic.co/t/how-to-filter-in-discover-when-the-field-is-a-scripted-field/204890 "2019-10-24T06:33:59Z")
I have a Discover table which contains several scripted fields. When I click on the a cell (corresponding to a scripted field) to filter values - nothing happens. I do see a filter query getting created, but it does not … --- ## [Queries about copy\_to field](https://discuss.elastic.co/t/queries-about-copy-to-field/205002)
**Author:** [@sundarcse1216](https://discuss.elastic.co/u/sundarcse1216)\ **Replies:** 0\ **Last updated:** [October 24, 2019, 6:14am UTC](https://discuss.elastic.co/t/queries-about-copy-to-field/205002 "2019-10-24T06:14:03Z")
Hi, I have couple of queries about copy\_to fields. Please help me to clear following queries. What is the props and cons of copy\_to filed? Is copy\_to field occupies disk space? Thanks. --- ## [Is customize time range feature in version 7.4 available in basic version?](https://discuss.elastic.co/t/is-customize-time-range-feature-in-version-7-4-available-in-basic-version/204869)
**Author:** [@Saurabh\_Sharma\_IIT](https://discuss.elastic.co/u/Saurabh_Sharma_IIT)\ **Replies:** 2\ **Last updated:** [October 24, 2019, 5:57am UTC](https://discuss.elastic.co/t/is-customize-time-range-feature-in-version-7-4-available-in-basic-version/204869 "2019-10-24T05:57:23Z")
Hi, before upgrading my elastic stack I want to confirm whether Customize time range in version 7.4 available in basic licence. please confirm. Thanks --- ## [Do we have to use entity framework to monitor SQL on the C# agent](https://discuss.elastic.co/t/do-we-have-to-use-entity-framework-to-monitor-sql-on-the-c-agent/204958)
**Author:** [@LordMathis](https://discuss.elastic.co/u/LordMathis)\ **Replies:** 1\ **Last updated:** [October 24, 2019, 5:45am UTC](https://discuss.elastic.co/t/do-we-have-to-use-entity-framework-to-monitor-sql-on-the-c-agent/204958 "2019-10-24T05:45:36Z")
Kibana version: 7.3 Elasticsearch version: 7.3 APM Server version: 7.3 APM Agent language and version: C# The C# agent uses entity framework to monitor sql connections. All of our applications are currently using the… --- ## [Automating report generation by PDF or PNG?](https://discuss.elastic.co/t/automating-report-generation-by-pdf-or-png/204826)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [October 24, 2019, 5:43am UTC](https://discuss.elastic.co/t/automating-report-generation-by-pdf-or-png/204826 "2019-10-24T05:43:26Z")
Hello. I believe automatic report generation is available in GOLD subscription . Share & collaborate Embeddable dashboards Object export UI & APIs CSV exports PDF and PNG reports Saved queries However, would there… --- ## [\[x\] is defined as an object in mapping \[y\] but this name is already used for a field in other types](https://discuss.elastic.co/t/x-is-defined-as-an-object-in-mapping-y-but-this-name-is-already-used-for-a-field-in-other-types/204993)
**Author:** [@idanruf1](https://discuss.elastic.co/u/idanruf1)\ **Replies:** 1\ **Last updated:** [October 24, 2019, 5:10am UTC](https://discuss.elastic.co/t/x-is-defined-as-an-object-in-mapping-y-but-this-name-is-already-used-for-a-field-in-other-types/204993 "2019-10-24T05:10:57Z")
I get this error when I try to index a document, and I have no idea what it means and how to solve it. I have a mapping without duplicate fields and a document matching the mapping. --- ## [Kibana 6.6.2 fails with Unable to revive connection: https://sample-elasticsearch.elasticsearch:9200/](https://discuss.elastic.co/t/kibana-6-6-2-fails-with-unable-to-revive-connection-https-sample-elasticsearch-elasticsearch-9200/204640)
**Author:** [@Bharath\_venkat](https://discuss.elastic.co/u/Bharath_venkat)\ **Replies:** 8\ **Last updated:** [October 24, 2019, 5:04am UTC](https://discuss.elastic.co/t/kibana-6-6-2-fails-with-unable-to-revive-connection-https-sample-elasticsearch-elasticsearch-9200/204640 "2019-10-24T05:04:18Z")
Hi , I am trying to create SAML SSO authentication and secure elk with TLS/SSL on kubernetes . Following the post . Kibana is unable to connect to elasticsearch. I could successfully deploy elasticsearch with x-pack tl… --- ## [Is it possible to deploy Elastic, Logstash and Kibana container in single pod in Openshift/Kubernetes?](https://discuss.elastic.co/t/is-it-possible-to-deploy-elastic-logstash-and-kibana-container-in-single-pod-in-openshift-kubernetes/204994)
**Author:** [@kumavine](https://discuss.elastic.co/u/kumavine)\ **Replies:** 0\ **Last updated:** [October 24, 2019, 3:55am UTC](https://discuss.elastic.co/t/is-it-possible-to-deploy-elastic-logstash-and-kibana-container-in-single-pod-in-openshift-kubernetes/204994 "2019-10-24T03:55:29Z")
Please can anybody confirm that is it possible to create Elastic, Logstash and Kibana container in single POD in Openshift/Kubernetes? If yes, how? --- ## [Any solutions?](https://discuss.elastic.co/t/any-solutions/204986)
**Author:** [@pbona](https://discuss.elastic.co/u/pbona)\ **Replies:** 1\ **Last updated:** [October 24, 2019, 2:59am UTC](https://discuss.elastic.co/t/any-solutions/204986 "2019-10-24T02:59:02Z")
\[root@elastic ~\]# auditbeat setup --dashboards Loading dashboards (Kibana must be running and reachable) Exiting: Failed to import dashboard: Failed to load directory /usr/share/auditbeat/kibana/7/dashboard: error loa… --- ## [Logstash parse arrays in array by grok](https://discuss.elastic.co/t/logstash-parse-arrays-in-array-by-grok/204777)
**Author:** [@newkate12](https://discuss.elastic.co/u/newkate12)\ **Replies:** 2\ **Last updated:** [October 24, 2019, 2:24am UTC](https://discuss.elastic.co/t/logstash-parse-arrays-in-array-by-grok/204777 "2019-10-24T02:24:39Z")
Hi I'm trying to import csv and parse array data in a specific column. My csv data is like this. TXN\_TIME|TENANT\_ID|TAG\_ID|TAG\_VALUE 2019-06-14 10:00:00.693|T00|GTW000000007-001-1|\[\[1.9744,3.0427,1.9170\],\[1.9743,3.006… --- ## [Persistent Queue not removing page files despite event count being 0](https://discuss.elastic.co/t/persistent-queue-not-removing-page-files-despite-event-count-being-0/204983)
**Author:** [@Melaniemj](https://discuss.elastic.co/u/Melaniemj)\ **Replies:** 0\ **Last updated:** [October 24, 2019, 1:33am UTC](https://discuss.elastic.co/t/persistent-queue-not-removing-page-files-despite-event-count-being-0/204983 "2019-10-24T01:33:04Z")
We are using logstash v 6.8.2 with the persistent queue enabled. Recently, one of our clusters started to show signs that the queue had data, but the event count was 0. After observing the behavior for several days, I've… --- ## [Data Import Question](https://discuss.elastic.co/t/data-import-question/204112)
**Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\ **Replies:** 1\ **Last updated:** [October 24, 2019, 1:17am UTC](https://discuss.elastic.co/t/data-import-question/204112 "2019-10-24T01:17:45Z")
I have data in my mariaDB/MySQL database that I would like to graph in elasticsearch. I am new to ELK and from what I have seen this is something that I would use logstash for correct? I also have data in a csv file tha… --- ## [Copy logstash template](https://discuss.elastic.co/t/copy-logstash-template/204694)
**Author:** [@SirJune](https://discuss.elastic.co/u/SirJune)\ **Replies:** 4\ **Last updated:** [October 24, 2019, 1:17am UTC](https://discuss.elastic.co/t/copy-logstash-template/204694 "2019-10-24T01:17:29Z")
i would like to copy logstash template to a newname template. I did a GET \_template/logstash , copied and edited (replace the word "logstash" with "blah") Did a PUT but got an error of: { "error": { "root\_cause… --- ## [Total shards, but this cluster currently has \[1000\]/\[1000\]](https://discuss.elastic.co/t/total-shards-but-this-cluster-currently-has-1000-1000/204960)
**Author:** [@rbrodrigues](https://discuss.elastic.co/u/rbrodrigues)\ **Replies:** 1\ **Last updated:** [October 24, 2019, 12:03am UTC](https://discuss.elastic.co/t/total-shards-but-this-cluster-currently-has-1000-1000/204960 "2019-10-24T00:03:36Z")
Hello Elasticsearch Team, I have the following problem when I index a very large volume of data. 2019-10-23 17:33:52,158 ERROR 0:0:0:0:0:0:0:1 admin \[LumisRequest - http-nio-8080-exec-7; url: \[http://localhost:8080/… --- ## [Preview results is generating an empty array](https://discuss.elastic.co/t/preview-results-is-generating-an-empty-array/202949)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 2\ **Last updated:** [October 23, 2019, 10:49pm UTC](https://discuss.elastic.co/t/preview-results-is-generating-an-empty-array/202949 "2019-10-23T22:49:26Z")
Hi, I am trying to review the results when creating a script filed. It is empty. Is it a bug or a feature? Kibana 7.3.2 Thanks! --- ## [LogsUI in kibana 7.4.0 getting error when trying to look at the logs with date\_nanos](https://discuss.elastic.co/t/logsui-in-kibana-7-4-0-getting-error-when-trying-to-look-at-the-logs-with-date-nanos/204335)
**Author:** [@Alex-St](https://discuss.elastic.co/u/Alex-St)\ **Replies:** 3\ **Last updated:** [October 23, 2019, 9:55pm UTC](https://discuss.elastic.co/t/logsui-in-kibana-7-4-0-getting-error-when-trying-to-look-at-the-logs-with-date-nanos/204335 "2019-10-23T21:55:25Z")
open logs UI - configure to use SourceTime which is in date\_nanos instead of @timestamp field, logsUI tries to load data for several seconds, then displays graphics on the left side (timeline), and briefly shows the logs… --- ## [Question about multiple inputs](https://discuss.elastic.co/t/question-about-multiple-inputs/204939)
**Author:** [@xibal](https://discuss.elastic.co/u/xibal)\ **Replies:** 4\ **Last updated:** [October 23, 2019, 9:02pm UTC](https://discuss.elastic.co/t/question-about-multiple-inputs/204939 "2019-10-23T21:02:56Z")
Hi, I'm migrating orders and their itemsin a joined SQL and using aggregate filter to list items as a nested field under each order. Each document's id is the respective orders table id. Now, in another table I have ord… --- ## [Running Logstash FILE config files "once"](https://discuss.elastic.co/t/running-logstash-file-config-files-once/204269)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 1\ **Last updated:** [October 23, 2019, 8:54pm UTC](https://discuss.elastic.co/t/running-logstash-file-config-files-once/204269 "2019-10-23T20:54:01Z")
Hello, How can I run a logstash config ingesting a csv or xml or file so that it is not continually running? The logstash config file can keep running until it is manually shut down, however, how can I have it run once … --- ## [Will Elasticsearch automatically load balance a two node cluser](https://discuss.elastic.co/t/will-elasticsearch-automatically-load-balance-a-two-node-cluser/204956)
**Author:** [@jtgajda](https://discuss.elastic.co/u/jtgajda)\ **Replies:** 0\ **Last updated:** [October 23, 2019, 8:19pm UTC](https://discuss.elastic.co/t/will-elasticsearch-automatically-load-balance-a-two-node-cluser/204956 "2019-10-23T20:19:09Z")
I have a two node cluster. I currently connect to the master node using the Python Elasticsearch client. Will python automatically distibute the query traffice between the two nodes or do I need to take special actions? … --- ## [Elasticsearch 7.4 does not start](https://discuss.elastic.co/t/elasticsearch-7-4-does-not-start/204954)
**Author:** [@Mohammad\_Etemad](https://discuss.elastic.co/u/Mohammad_Etemad)\ **Replies:** 0\ **Last updated:** [October 23, 2019, 8:16pm UTC](https://discuss.elastic.co/t/elasticsearch-7-4-does-not-start/204954 "2019-10-23T20:16:50Z")
I am trying to install an instance of elasticsearch and I am using the following config file: cluster.name: elasticsearch node.name: hostname path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch # Set the… --- ## [Elasticsearch Accessible Without Authentication](https://discuss.elastic.co/t/elasticsearch-accessible-without-authentication/204895)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 6\ **Last updated:** [October 23, 2019, 8:10pm UTC](https://discuss.elastic.co/t/elasticsearch-accessible-without-authentication/204895 "2019-10-23T20:10:18Z")
How can we close or secure the accessibility of Elasticsearch? We are using Ubuntu servers and are using Elasticsearch 6.7.2. We are a custom Angular front end. Anybody seems to be able to reach or manipulate or do anyth… --- ## [Logstash wont start correctly with systemctl](https://discuss.elastic.co/t/logstash-wont-start-correctly-with-systemctl/204952)
**Author:** [@jmoran8888](https://discuss.elastic.co/u/jmoran8888)\ **Replies:** 0\ **Last updated:** [October 23, 2019, 8:04pm UTC](https://discuss.elastic.co/t/logstash-wont-start-correctly-with-systemctl/204952 "2019-10-23T20:04:48Z")
I have logstash 7.4 installed - when i run it from the command line via this /usr/share/logstash/bin/logstash --path.settings /etc/logstash it works fine - i see the log file and its showing up in the Kibana Monitoring… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1820) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1822)