# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1842 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1843 --- ## [Monitor Status of Filebeat sin elastic cloud](https://discuss.elastic.co/t/monitor-status-of-filebeat-sin-elastic-cloud/203429)
**Author:** [@AndresL](https://discuss.elastic.co/u/AndresL)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 2:57pm UTC](https://discuss.elastic.co/t/monitor-status-of-filebeat-sin-elastic-cloud/203429 "2019-10-14T14:57:25Z")
Hi, how can i know the status of Filebeats across my organization in an elastic cloud deployment? Checking into the documentation, looks like is for hosted cluster. --- ## [Setting up Rollover Index](https://discuss.elastic.co/t/setting-up-rollover-index/203477)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 2:34pm UTC](https://discuss.elastic.co/t/setting-up-rollover-index/203477 "2019-10-14T14:34:42Z")
Hello, we keep running into issues trying to setup rollover index. I am not sure how to go about setting up the rollover. We have already have a template added to the elastic servers. curl -XPUT "hostname:9200/\_templa… --- ## [Elastic wouldn't start when changing network.host ip](https://discuss.elastic.co/t/elastic-wouldnt-start-when-changing-network-host-ip/203443)
**Author:** [@mouna\_boujrad](https://discuss.elastic.co/u/mouna_boujrad)\ **Replies:** 20\ **Last updated:** [October 14, 2019, 2:21pm UTC](https://discuss.elastic.co/t/elastic-wouldnt-start-when-changing-network-host-ip/203443 "2019-10-14T14:21:38Z")
Hello, I have problem with the elastic configuration, when I run the elastic under the default configuration with : # Set the bind address to a specific IP (IPv4 or IPv6): # network.host: localhost # # Set a custom po… --- ## [Udp output not working](https://discuss.elastic.co/t/udp-output-not-working/203109)
**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 2:07pm UTC](https://discuss.elastic.co/t/udp-output-not-working/203109 "2019-10-14T14:07:00Z")
Hi admin, I have simple logstash config where i am routing(shipping) logs to some other logstash based on the beat host name, below is the logstash config. I removed the IP, but is not shipping any logs to their server.… --- ## [Indice rollower duplicte docs](https://discuss.elastic.co/t/indice-rollower-duplicte-docs/202214)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 4\ **Last updated:** [October 14, 2019, 1:57pm UTC](https://discuss.elastic.co/t/indice-rollower-duplicte-docs/202214 "2019-10-14T13:57:05Z")
during the rollover - we notice the document count is already in the old index and when updating during that second the document count gets to the newly created indices as well. is there any way to prevent the duplicatio… --- ## [Kibana - range based on count timeseries](https://discuss.elastic.co/t/kibana-range-based-on-count-timeseries/203435)
**Author:** [@megakoresh](https://discuss.elastic.co/u/megakoresh)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 11:59am UTC](https://discuss.elastic.co/t/kibana-range-based-on-count-timeseries/203435 "2019-10-14T11:59:20Z")
As continuation of this question: https://discuss.elastic.co/t/kibana-range-based-on-count/ I would like to now display this data over time. Kind of like this: Which is backed by the following expression: filters | … --- ## [Get scores for two parts of bool query](https://discuss.elastic.co/t/get-scores-for-two-parts-of-bool-query/203471)
**Author:** [@zwirni](https://discuss.elastic.co/u/zwirni)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 1:50pm UTC](https://discuss.elastic.co/t/get-scores-for-two-parts-of-bool-query/203471 "2019-10-14T13:50:47Z")
Hello there, Right now I'm struggling finding out how to obtain relevant results for two parts of my query. My documents are basically some millions of text documents with a "content" field. What would be an appropriate… --- ## [ssl.SSLError: \[SSL\] PEM lib (\_ssl.c:3845)](https://discuss.elastic.co/t/ssl-sslerror-ssl-pem-lib-ssl-c-3845/203392)
**Author:** [@lioramilbaum](https://discuss.elastic.co/u/lioramilbaum)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 1:38pm UTC](https://discuss.elastic.co/t/ssl-sslerror-ssl-pem-lib-ssl-c-3845/203392 "2019-10-14T13:38:13Z")
The following function execution throws an error. The same command in bash works like a charm. def set\_kibana\_password(): headers = {"Content-Type": "application/json"} payload = {"password": os.getenv('ELASTIC\_PASSWORD… --- ## [Sort query returns order of record without ignoring case](https://discuss.elastic.co/t/sort-query-returns-order-of-record-without-ignoring-case/203466)
**Author:** [@Vinayak\_Chauhan](https://discuss.elastic.co/u/Vinayak_Chauhan)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 1:30pm UTC](https://discuss.elastic.co/t/sort-query-returns-order-of-record-without-ignoring-case/203466 "2019-10-14T13:30:20Z")
Hello All, I am trying to sort the search result on title field for example, but result shows order with title case first then small letter. Same to descending order, small letter results comes first and then title/capi… --- ## [Dashboard error: Could not locate that index-pattern although it exists](https://discuss.elastic.co/t/dashboard-error-could-not-locate-that-index-pattern-although-it-exists/112876)
**Author:** [@andig](https://discuss.elastic.co/u/andig)\ **Replies:** 13\ **Last updated:** [October 14, 2019, 1:26pm UTC](https://discuss.elastic.co/t/dashboard-error-could-not-locate-that-index-pattern-although-it-exists/112876 "2019-10-14T13:26:16Z")
Running ES 6.0 with Kibana and Metricbeat of the same version I'm getting Could not locate that index-pattern (id: metricbeat-\*), click here to re-create it in the Metricbeat Host dashboard. This only happens for the N… --- ## [How to search in particular node when running multiple nodes](https://discuss.elastic.co/t/how-to-search-in-particular-node-when-running-multiple-nodes/203462)
**Author:** [@gurjit\_buck](https://discuss.elastic.co/u/gurjit_buck)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 1:16pm UTC](https://discuss.elastic.co/t/how-to-search-in-particular-node-when-running-multiple-nodes/203462 "2019-10-14T13:16:23Z")
Hi, I am able to create multiple nodes (actually data folders) by following solution mentioned on this link Create multiple nodes elasticsearch 5.4 - #5 by pjayramkumar I am a .Net developer and I am struggling to find… --- ## [Replica shard unassigned while performing shrink action through ILM policy](https://discuss.elastic.co/t/replica-shard-unassigned-while-performing-shrink-action-through-ilm-policy/203432)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 8\ **Last updated:** [October 14, 2019, 1:16pm UTC](https://discuss.elastic.co/t/replica-shard-unassigned-while-performing-shrink-action-through-ilm-policy/203432 "2019-10-14T13:16:08Z")
Hi The Health of my Index has turned yellow, seemingly because a replica shard cannot be allocated. This index has been created as part of the "shrink" action as defined in my ILM policy. The desired result is that the … --- ## [Highlight - Break words and highlight](https://discuss.elastic.co/t/highlight-break-words-and-highlight/203457)
**Author:** [@Ilamparithi\_Karthike](https://discuss.elastic.co/u/Ilamparithi_Karthike)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 1:04pm UTC](https://discuss.elastic.co/t/highlight-break-words-and-highlight/203457 "2019-10-14T13:04:45Z")
I have a document { "field1": "Que a raíz de la emisión del Decreto Ley 2 de 22 de febrero de 2008, el Órgano Ejecutivo elaboró una ordenación sistemática en forma de Texto Único del Decreto Ley 9 de 1998 y todas sus … --- ## [Duration Time между двумя разными Events](https://discuss.elastic.co/t/duration-time-events/202967)
**Author:** [@Lebedev](https://discuss.elastic.co/u/Lebedev)\ **Replies:** 6\ **Last updated:** [October 14, 2019, 1:01pm UTC](https://discuss.elastic.co/t/duration-time-events/202967 "2019-10-14T13:01:49Z")
Коллеги, привет! Помогите, пожалуйста, с решением. Я рассчитываю Duration Time между двумя разными Events в эластике. Использую следующий метод: if "COMMONROUTER.OUT.REMOTE" in \[grok\_reciever\] { elasticsearch { h… --- ## [SIEM Command Line Auditing 4688 - 4689](https://discuss.elastic.co/t/siem-command-line-auditing-4688-4689/202656)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 10\ **Last updated:** [October 14, 2019, 1:01pm UTC](https://discuss.elastic.co/t/siem-command-line-auditing-4688-4689/202656 "2019-10-14T13:01:09Z")
Hello, 2 of the most interesting event id's in siem are 4688 and 4689, which can be enabled with a gpo and enable us to monitor every command used in your network. Interesting fields are: winlog.event\_data.NewProcessN… --- ## [How to combine properties of multiple sibling level nested objects in a single terms aggregations, Elasticsearch](https://discuss.elastic.co/t/how-to-combine-properties-of-multiple-sibling-level-nested-objects-in-a-single-terms-aggregations-elasticsearch/203456)
**Author:** [@rohit\_IM](https://discuss.elastic.co/u/rohit_IM)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 1:01pm UTC](https://discuss.elastic.co/t/how-to-combine-properties-of-multiple-sibling-level-nested-objects-in-a-single-terms-aggregations-elasticsearch/203456 "2019-10-14T13:01:01Z")
We Have a use case with Elasticsearch, for an index structure, we have multiple nested objects at sibling level, and for our use case: we need to combine more than one properties of nested objects in a terms aggregation… --- ## [Unique dashboard to each user](https://discuss.elastic.co/t/unique-dashboard-to-each-user/203416)
**Author:** [@mouna\_boujrad](https://discuss.elastic.co/u/mouna_boujrad)\ **Replies:** 4\ **Last updated:** [October 14, 2019, 12:54pm UTC](https://discuss.elastic.co/t/unique-dashboard-to-each-user/203416 "2019-10-14T12:54:57Z")
Hello, I installed the elastic SIEM solution on my cloud and created multiple users , I want to get each user a personalized dashboard with specific componenets I mean if I had user X he can access and see only dashboar… --- ## [Increase number of strings in one row in Discovery](https://discuss.elastic.co/t/increase-number-of-strings-in-one-row-in-discovery/203438)
**Author:** [@Fenst](https://discuss.elastic.co/u/Fenst)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 12:48pm UTC](https://discuss.elastic.co/t/increase-number-of-strings-in-one-row-in-discovery/203438 "2019-10-14T12:48:03Z")
Hi! How can I increase number of symbols in one row in Discovery search? By default if shows 5-7 strings, but I want to see the whole message without expanding each row by clicking "\>". Screenshot attached --- ## [Trouble setting up an elasticsearch cluster](https://discuss.elastic.co/t/trouble-setting-up-an-elasticsearch-cluster/203245)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 6\ **Last updated:** [October 14, 2019, 12:31pm UTC](https://discuss.elastic.co/t/trouble-setting-up-an-elasticsearch-cluster/203245 "2019-10-14T12:31:16Z")
Hi, i'm trying to set up a cluster with 3 nodes es-node1 es-node2 es-node3 installed elasticsearch 7.4 on 3 nodes con configure elasticsearch.yml with the following: cluster.name: es-cluster node.name: es-node1 node… --- ## [How to build an linux version in mac](https://discuss.elastic.co/t/how-to-build-an-linux-version-in-mac/203446)
**Author:** [@yangz](https://discuss.elastic.co/u/yangz)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 12:27pm UTC](https://discuss.elastic.co/t/how-to-build-an-linux-version-in-mac/203446 "2019-10-14T12:27:57Z")
kibana version: 7.1.1 os: macOS 10.15 when i run yarn build,it will build all platform packages(windows,linux,darwin).How do i build only linux package? --- ## [Pipeline to pipeline distributor, how not to lose events](https://discuss.elastic.co/t/pipeline-to-pipeline-distributor-how-not-to-lose-events/202820)
**Author:** [@nahiko2000](https://discuss.elastic.co/u/nahiko2000)\ **Replies:** 3\ **Last updated:** [October 14, 2019, 12:19pm UTC](https://discuss.elastic.co/t/pipeline-to-pipeline-distributor-how-not-to-lose-events/202820 "2019-10-14T12:19:46Z")
Hello TL;DR - What pipelines must be set a persistent queues to avoid losing data, in a pepeline-to-pipeline distributor pattern We are using Pipeline to pipeline comunication in Logstash. We use the distributor patter… --- ## [Where can i learning the official grammar of ruby code which apply in logstash script](https://discuss.elastic.co/t/where-can-i-learning-the-official-grammar-of-ruby-code-which-apply-in-logstash-script/203368)
**Author:** [@terrymu](https://discuss.elastic.co/u/terrymu)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 12:10pm UTC](https://discuss.elastic.co/t/where-can-i-learning-the-official-grammar-of-ruby-code-which-apply-in-logstash-script/203368 "2019-10-14T12:10:42Z")
Hi experts, Would you please provide some materials or WEB Link for me that include the introduction of grammar of ruby code which apply in logstash script. Such like this: ruby { code =\> 'event.get("message").sca… --- ## [Count distinct with conditions using Count API](https://discuss.elastic.co/t/count-distinct-with-conditions-using-count-api/203283)
**Author:** [@killanch](https://discuss.elastic.co/u/killanch)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 12:05pm UTC](https://discuss.elastic.co/t/count-distinct-with-conditions-using-count-api/203283 "2019-10-14T12:05:02Z")
Is there a way to count distinct records/documents that match a given condition? I am aware that \_search API with cardinality aggregation can be used for this. But is there a way this can be achieved using \_count API? --- ## ["index\_out\_of\_bounds\_exception](https://discuss.elastic.co/t/index-out-of-bounds-exception/203375)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 12:02pm UTC](https://discuss.elastic.co/t/index-out-of-bounds-exception/203375 "2019-10-14T12:02:34Z")
Hi, When using scripts in term aggregation i am getting "index\_out\_of\_bounds\_exception why is this happening { "took" : 22, "timed\_out" : false, "\_shards" : { "total" : 3, "successful" : 2, "skipped" : 0, "fa… --- ## [Get List of Firing watches in Elasticsearch](https://discuss.elastic.co/t/get-list-of-firing-watches-in-elasticsearch/203307)
**Author:** [@real\_legend](https://discuss.elastic.co/u/real_legend)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 12:00pm UTC](https://discuss.elastic.co/t/get-list-of-firing-watches-in-elasticsearch/203307 "2019-10-14T12:00:57Z")
hi everyone, i want to get list of watches that their state is "Firing" ! how can i do this? can any one help me? --- ## [Gc.log elasticsearch](https://discuss.elastic.co/t/gc-log-elasticsearch/202215)
**Author:** [@thebeaoliveira](https://discuss.elastic.co/u/thebeaoliveira)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 11:59am UTC](https://discuss.elastic.co/t/gc-log-elasticsearch/202215 "2019-10-14T11:59:32Z")
Hello, I have a question. I need some more disk space and I saw that there are a lot of gc.log logs in the var/ log / elasticsearch directory Can I delete these gc.log files manually? If I delete, will I have a proble… --- ## [How to transfer multiple json files having common object to one index in elasticseach](https://discuss.elastic.co/t/how-to-transfer-multiple-json-files-having-common-object-to-one-index-in-elasticseach/203442)
**Author:** [@namali](https://discuss.elastic.co/u/namali)\ **Replies:** 0\ **Last updated:** [October 14, 2019, 11:58am UTC](https://discuss.elastic.co/t/how-to-transfer-multiple-json-files-having-common-object-to-one-index-in-elasticseach/203442 "2019-10-14T11:58:54Z")
I m trying to transfer more than different json files to a index. each json files have common object. I have already transferred multiple csv files using translate filter. Seems the method I used for csv transfer not co… --- ## [How to create custom analyzer using Java API in elasticsearch 7?](https://discuss.elastic.co/t/how-to-create-custom-analyzer-using-java-api-in-elasticsearch-7/201502)
**Author:** [@het](https://discuss.elastic.co/u/het)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 11:57am UTC](https://discuss.elastic.co/t/how-to-create-custom-analyzer-using-java-api-in-elasticsearch-7/201502 "2019-10-14T11:57:59Z")
Hello All, I want to create this analyzer using JAVA API of elasticsearch. Can any one help me? I tried to add tokenizer and filter at a same time, but could not do this. "analysis": { "analyzer": { "case\_insen… --- ## [Elasticsearch RestClient 7.4 - making SSL connection](https://discuss.elastic.co/t/elasticsearch-restclient-7-4-making-ssl-connection/203359)
**Author:** [@Sudhakar\_Tadepalli](https://discuss.elastic.co/u/Sudhakar_Tadepalli)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 11:52am UTC](https://discuss.elastic.co/t/elasticsearch-restclient-7-4-making-ssl-connection/203359 "2019-10-14T11:52:34Z")
HI, I am trying to connect to the elasticsearch server using basic credentials and receiving the "Unrecognized SSL message, plaintext connection?" error. Appreciate your help. Thanks! if (restClient == null) { try { … --- ## [How can we create custom drill down for pie charts/ guages in kibana](https://discuss.elastic.co/t/how-can-we-create-custom-drill-down-for-pie-charts-guages-in-kibana/203431)
**Author:** [@vishnuvardhan](https://discuss.elastic.co/u/vishnuvardhan)\ **Replies:** 1\ **Last updated:** [October 14, 2019, 11:47am UTC](https://discuss.elastic.co/t/how-can-we-create-custom-drill-down-for-pie-charts-guages-in-kibana/203431 "2019-10-14T11:47:56Z")
How can we create custom drill down for pie charts/ gauges in kibana. Any suggestions will be helpful!! [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1841) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1843)