# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1871

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1872

---

## [Logstash and filebeat](https://discuss.elastic.co/t/logstash-and-filebeat/201160)

<div class="topic-metadata">

**Author:** [@bcochofel](https://discuss.elastic.co/u/bcochofel)\
**Replies:** 3\
**Last updated:** [September 27, 2019, 6:23am UTC](https://discuss.elastic.co/t/logstash-and-filebeat/201160 "2019-09-27T06:23:55Z")

</div>

Hi, I have filebeat configured to send some modules to logstash and on logstash I have a pipeline that handles syslog (file from the documentation) I want to add some more custom logs on filebeat and I'm wondering what…

---

## [Resources limits not being set and ES\_JAVA\_OPTS doesn't exist in pod](https://discuss.elastic.co/t/resources-limits-not-being-set-and-es-java-opts-doesnt-exist-in-pod/201258)

<div class="topic-metadata">

**Author:** [@Leon\_Hatori](https://discuss.elastic.co/u/Leon_Hatori)\
**Replies:** 1\
**Last updated:** [September 27, 2019, 6:13am UTC](https://discuss.elastic.co/t/resources-limits-not-being-set-and-es-java-opts-doesnt-exist-in-pod/201258 "2019-09-27T06:13:22Z")

</div>

Elastic container being evicted on kubernates over gcloud, I noted that the pod is consuming too much resources, over 5 gb of RAM, while the resource limits variables are not being set as you can see at the image bellow …

---

## [Elastic search binding to public ip](https://discuss.elastic.co/t/elastic-search-binding-to-public-ip/201336)

<div class="topic-metadata">

**Author:** [@Vikas\_Yadav](https://discuss.elastic.co/u/Vikas_Yadav)\
**Replies:** 3\
**Last updated:** [September 27, 2019, 6:02am UTC](https://discuss.elastic.co/t/elastic-search-binding-to-public-ip/201336 "2019-09-27T06:02:07Z")

</div>

i want to access elastic search from a public ip 192.168.144.29 for that i changed in elasticsearch.yml file network.host: 192.168.144.29 its not working same i did for kibana it works fine? whats the problem while …

---

## [Metric visualization for Cardinality aggregation on multiple fields](https://discuss.elastic.co/t/metric-visualization-for-cardinality-aggregation-on-multiple-fields/201248)

<div class="topic-metadata">

**Author:** [@Darshan\_v\_Shah](https://discuss.elastic.co/u/Darshan_v_Shah)\
**Replies:** 2\
**Last updated:** [September 27, 2019, 5:07am UTC](https://discuss.elastic.co/t/metric-visualization-for-cardinality-aggregation-on-multiple-fields/201248 "2019-09-27T05:07:57Z")

</div>

Hi team, I want to output the "value":"37" of the query result inside the "Metric" Kibana visualization. Query- POST index-a/\_search?size=0 { "aggs" : { "1" : { "cardinality" : { "script" : { "source" : "doc\['S…

---

## [Elasticsearch Serviceの既存indexの更新時のダウンタイムについて](https://discuss.elastic.co/t/elasticsearch-service-index/201331)

<div class="topic-metadata">

**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\
**Replies:** 1\
**Last updated:** [September 27, 2019, 4:44am UTC](https://discuss.elastic.co/t/elasticsearch-service-index/201331 "2019-09-27T04:44:33Z")

</div>

ドキュメントの元ネタであるCSVの更新があった時に既存indexを一度削除して既存indexと同じmappingやsettingでindexを再作成してCSVをドキュメントとしてロードしようと考えているのですが、 このときElasticsearch Service上のインスタンスにダウンタイムを発生させないようにするためには、 deploymentを2つ(稼働用と更新用)用意しておいて、更新用のdeploymentでデプロイをしてか…

---

## [Can dissect use a variable number of fields?](https://discuss.elastic.co/t/can-dissect-use-a-variable-number-of-fields/200952)

<div class="topic-metadata">

**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\
**Replies:** 10\
**Last updated:** [September 26, 2019, 11:47pm UTC](https://discuss.elastic.co/t/can-dissect-use-a-variable-number-of-fields/200952 "2019-09-26T23:47:27Z")

</div>

I'm trying to use Logstash to ingest some old, OLD IAS/RRAS logs that seem to be customized. They all begin the same, so I can get dissect to ingest this correctly: filter { dissect { mapping =\> { "message" =\> "%{…

---

## [Security Measures 9200?](https://discuss.elastic.co/t/security-measures-9200/201324)

<div class="topic-metadata">

**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\
**Replies:** 1\
**Last updated:** [September 26, 2019, 11:05pm UTC](https://discuss.elastic.co/t/security-measures-9200/201324 "2019-09-26T23:05:41Z")

</div>

Hello Team, you know I already have my doubts about eslasticSearch where I have seen that several pages and companies have stolen all your information just by consulting your endpoint. So what are the security measures t…

---

## [Struggling with Grok/Dissect](https://discuss.elastic.co/t/struggling-with-grok-dissect/201161)

<div class="topic-metadata">

**Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\
**Replies:** 1\
**Last updated:** [September 26, 2019, 10:09pm UTC](https://discuss.elastic.co/t/struggling-with-grok-dissect/201161 "2019-09-26T22:09:13Z")

</div>

Hi I am struggling to dissect/use grok on the below log entry - 127.0.0.1 - - \[25/Sep/2019:11:53:28 +0200\] "GET /Request HTTP/1.1" 200 93 "-" "Version/7.1.1 (Build: 194445; Windows 10 (10.0); Zt 1.1.3 windows\_x86\_64) z…

---

## [XML file to elastic search](https://discuss.elastic.co/t/xml-file-to-elastic-search/201321)

<div class="topic-metadata">

**Author:** [@newelk](https://discuss.elastic.co/u/newelk)\
**Replies:** 1\
**Last updated:** [September 26, 2019, 9:59pm UTC](https://discuss.elastic.co/t/xml-file-to-elastic-search/201321 "2019-09-26T21:59:17Z")

</div>

Hi Experts, I'm trying a simple usecase using ELK to start with. The usecase is, I've an XML file like below ====================== \<stations version="2.0"\> \<station\> \<id\>2\</id\> …

---

## [Date format error when splitting a chart with date histogram](https://discuss.elastic.co/t/date-format-error-when-splitting-a-chart-with-date-histogram/200238)

<div class="topic-metadata">

**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\
**Replies:** 6\
**Last updated:** [September 26, 2019, 9:47pm UTC](https://discuss.elastic.co/t/date-format-error-when-splitting-a-chart-with-date-histogram/200238 "2019-09-26T21:47:30Z")

</div>

Hello, I'm currently using 6.7 If I create a visualization (either a pie or a histogram) and split it with a Date histogram aggregation, the axis labels are not formatted (key in millisec is shown), while the tooltip c…

---

## [Using field or field.keyword errors](https://discuss.elastic.co/t/using-field-or-field-keyword-errors/200928)

<div class="topic-metadata">

**Author:** [@pmarques](https://discuss.elastic.co/u/pmarques)\
**Replies:** 2\
**Last updated:** [September 26, 2019, 7:33pm UTC](https://discuss.elastic.co/t/using-field-or-field-keyword-errors/200928 "2019-09-26T19:33:14Z")

</div>

Hello all, Could you help me decipher this? The issue is the use of field/field.keyword Not sure where to start... Well ES 7.3 Note: There are some "-------------- \>\>\>" marks in this message. I hope you find it D…

---

## [Logstash with Mulesoft Cloud](https://discuss.elastic.co/t/logstash-with-mulesoft-cloud/201298)

<div class="topic-metadata">

**Author:** [@shiv\_khullar](https://discuss.elastic.co/u/shiv_khullar)\
**Replies:** 1\
**Last updated:** [September 26, 2019, 7:29pm UTC](https://discuss.elastic.co/t/logstash-with-mulesoft-cloud/201298 "2019-09-26T19:29:07Z")

</div>

Hi, I am new to ELK and would like to get the Mulesoft Cloud Application logs to Logstash. Any idea how can we do it? I am new to Logstash and ELK so any step by step tutorial would be really helpful.

---

## [Kibana did not load properly. Check the server output for more information.?](https://discuss.elastic.co/t/kibana-did-not-load-properly-check-the-server-output-for-more-information/201225)

<div class="topic-metadata">

**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\
**Replies:** 4\
**Last updated:** [September 26, 2019, 6:39pm UTC](https://discuss.elastic.co/t/kibana-did-not-load-properly-check-the-server-output-for-more-information/201225 "2019-09-26T18:39:25Z")

</div>

how can I solve ? I working development kibana dev platform.

---

## [AWS S3 bucket logs to Elastic search service (AWS) through log stash](https://discuss.elastic.co/t/aws-s3-bucket-logs-to-elastic-search-service-aws-through-log-stash/199737)

<div class="topic-metadata">

**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\
**Replies:** 6\
**Last updated:** [September 26, 2019, 6:35pm UTC](https://discuss.elastic.co/t/aws-s3-bucket-logs-to-elastic-search-service-aws-through-log-stash/199737 "2019-09-26T18:35:49Z")

</div>

I set up log stash on EC2 Linux (AWS) and Elastic search service on AWS and i have created one separate file (with input and output) under /etc/logstash/conf.d path but I am not getting logs in Kibana and conn…

---

## [How to install plugin on github to Kibana running on Container](https://discuss.elastic.co/t/how-to-install-plugin-on-github-to-kibana-running-on-container/201293)

<div class="topic-metadata">

**Author:** [@arrchana](https://discuss.elastic.co/u/arrchana)\
**Replies:** 0\
**Last updated:** [September 26, 2019, 6:33pm UTC](https://discuss.elastic.co/t/how-to-install-plugin-on-github-to-kibana-running-on-container/201293 "2019-09-26T18:33:01Z")

</div>

I'm getting the "object in arrays are not well supported" for the below input that is available in index pattern { "total": 4, "issues": \[{ "key": "PPPLPAYPT-68748", "fields": { "summary": " contingency is displayi…

---

## [Link between alias and index removed mysteriously](https://discuss.elastic.co/t/link-between-alias-and-index-removed-mysteriously/201291)

<div class="topic-metadata">

**Author:** [@lakhan.singh1](https://discuss.elastic.co/u/lakhan.singh1)\
**Replies:** 0\
**Last updated:** [September 26, 2019, 6:18pm UTC](https://discuss.elastic.co/t/link-between-alias-and-index-removed-mysteriously/201291 "2019-09-26T18:18:16Z")

</div>

I am using aliases in elastic search to interact with indexes from java application using RestHighLevelClient. Mapping between alias and index is done on application start up. From last 10-15 days link between alias an…

---

## [I working kibana dev platform](https://discuss.elastic.co/t/i-working-kibana-dev-platform/201038)

<div class="topic-metadata">

**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\
**Replies:** 12\
**Last updated:** [September 26, 2019, 5:44pm UTC](https://discuss.elastic.co/t/i-working-kibana-dev-platform/201038 "2019-09-26T17:44:54Z")

</div>

---

## [Map limit zoom into Kibana 6.5.4 with Basic Licence](https://discuss.elastic.co/t/map-limit-zoom-into-kibana-6-5-4-with-basic-licence/201122)

<div class="topic-metadata">

**Author:** [@olivierb](https://discuss.elastic.co/u/olivierb)\
**Replies:** 1\
**Last updated:** [September 26, 2019, 5:42pm UTC](https://discuss.elastic.co/t/map-limit-zoom-into-kibana-6-5-4-with-basic-licence/201122 "2019-09-26T17:42:46Z")

</div>

Hi, I want to have a street-level of Paris Coordinate map in Kibana 6.5.4 with Basic Licence. I saw that the default zoom is 10, and I tried to update it in kibana.yml, without much success: The level 18 zoom is not i…

---

## [Could not index event to Elasticsearch - Logstash with auth](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-logstash-with-auth/201286)

<div class="topic-metadata">

**Author:** [@SirJune](https://discuss.elastic.co/u/SirJune)\
**Replies:** 0\
**Last updated:** [September 26, 2019, 5:39pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-logstash-with-auth/201286 "2019-09-26T17:39:30Z")

</div>

Hi, This is related to my previous posts about LON and LAT. Anyway, i tried adding basic authentication in my stack. Filebeat works with authentication. I followed the docs (7.3) to setup Logstash, one config is not w…

---

## [Saved Items Import/Export Json/ndjson discrepancy](https://discuss.elastic.co/t/saved-items-import-export-json-ndjson-discrepancy/199834)

<div class="topic-metadata">

**Author:** [@SpinDORK](https://discuss.elastic.co/u/SpinDORK)\
**Replies:** 6\
**Last updated:** [September 26, 2019, 5:35pm UTC](https://discuss.elastic.co/t/saved-items-import-export-json-ndjson-discrepancy/199834 "2019-09-26T17:35:27Z")

</div>

Hi, We have a Dev and Prod copy of Kibana, our Dev is 7.1.0, our Prod is 7.2.0 The problem is when developing in Dev and exporting, we get a .json file which gives an warning when importing into Prod and nothing in Pro…

---

## [Should the plugin of kibana must use the same libraries and version of what kibana and search guard is using](https://discuss.elastic.co/t/should-the-plugin-of-kibana-must-use-the-same-libraries-and-version-of-what-kibana-and-search-guard-is-using/201227)

<div class="topic-metadata">

**Author:** [@a.muzam](https://discuss.elastic.co/u/a.muzam)\
**Replies:** 1\
**Last updated:** [September 26, 2019, 5:16pm UTC](https://discuss.elastic.co/t/should-the-plugin-of-kibana-must-use-the-same-libraries-and-version-of-what-kibana-and-search-guard-is-using/201227 "2019-09-26T17:16:51Z")

</div>

I am developing a kibana plugin when I choose the packages for it should I consciously check whether kibana or search guard is using the same version of libraries or can I blindly go forward and choose my own preferred v…

---

## [Connect imap Gmail](https://discuss.elastic.co/t/connect-imap-gmail/201279)

<div class="topic-metadata">

**Author:** [@Klaus\_SIlva](https://discuss.elastic.co/u/Klaus_SIlva)\
**Replies:** 0\
**Last updated:** [September 26, 2019, 5:16pm UTC](https://discuss.elastic.co/t/connect-imap-gmail/201279 "2019-09-26T17:16:44Z")

</div>

Hi, I got the problem on logstash when imap.gmai.com. My your configuration in input imap, below with error input { imap { host =\> "imap.gmail.com" user =\> "\*\*\*\*\*@gmail.com" password =\> "\*\*\*…

---

## [Mocking RestHighLevelClient](https://discuss.elastic.co/t/mocking-resthighlevelclient/201211)

<div class="topic-metadata">

**Author:** [@DevShan](https://discuss.elastic.co/u/DevShan)\
**Replies:** 2\
**Last updated:** [September 26, 2019, 4:57pm UTC](https://discuss.elastic.co/t/mocking-resthighlevelclient/201211 "2019-09-26T16:57:51Z")

</div>

I'm trying to use groovy to write Junit, for a class that uses RestHighLevelClient to call ES and get the search results. I am not able to mock the client using GroovyMock or normal mock. Please let me know how to appr…

---

## [Compare date range of uniq count](https://discuss.elastic.co/t/compare-date-range-of-uniq-count/201101)

<div class="topic-metadata">

**Author:** [@Guaris](https://discuss.elastic.co/u/Guaris)\
**Replies:** 1\
**Last updated:** [September 26, 2019, 4:41pm UTC](https://discuss.elastic.co/t/compare-date-range-of-uniq-count/201101 "2019-09-26T16:41:01Z")

</div>

How can I compare multiple date ranges (weekly ranges) by the uniq count of user\_id? I wanna see something like this:

---

## [Create dashboard from data in multiple Elasticsearch caches](https://discuss.elastic.co/t/create-dashboard-from-data-in-multiple-elasticsearch-caches/201082)

<div class="topic-metadata">

**Author:** [@Steztric](https://discuss.elastic.co/u/Steztric)\
**Replies:** 2\
**Last updated:** [September 26, 2019, 4:39pm UTC](https://discuss.elastic.co/t/create-dashboard-from-data-in-multiple-elasticsearch-caches/201082 "2019-09-26T16:39:54Z")

</div>

Is it possible to create one Kibana dashboard that sources some data from one Elasticsearch instance and other data from another Elasticsearch instance running on a different server?

---

## [Http filter plugin parse error - Unexpected character ('\\\\\\\\' (code 92)): was expecting double-quote to start field name](https://discuss.elastic.co/t/http-filter-plugin-parse-error-unexpected-character-code-92-was-expecting-double-quote-to-start-field-name/201098)

<div class="topic-metadata">

**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\
**Replies:** 1\
**Last updated:** [September 26, 2019, 4:00pm UTC](https://discuss.elastic.co/t/http-filter-plugin-parse-error-unexpected-character-code-92-was-expecting-double-quote-to-start-field-name/201098 "2019-09-26T16:00:18Z")

</div>

I am using Logstash 6.5 with Elasticsearch 6.5 What I am trying to achieve is to remove from ELS document fields, that in input has null values. Following advice from other thread, I am planning to use ruby filter to s…

---

## [How to convert latitude, longitude to geohash](https://discuss.elastic.co/t/how-to-convert-latitude-longitude-to-geohash/201240)

<div class="topic-metadata">

**Author:** [@sahishnu.patil](https://discuss.elastic.co/u/sahishnu.patil)\
**Replies:** 4\
**Last updated:** [September 26, 2019, 3:28pm UTC](https://discuss.elastic.co/t/how-to-convert-latitude-longitude-to-geohash/201240 "2019-09-26T15:28:04Z")

</div>

While using Coordinate map visualization, Kibana asks for geo\_hash field type. Input data is filtered to get latitude and longitude as separate values as well as in as array. The error - The index pattern access\_log\* …

---

## [Kibana 6.1: Courier : searchSource segmented fetchSoon fetchNow](https://discuss.elastic.co/t/kibana-6-1-courier-searchsource-segmented-fetchsoon-fetchnow/200624)

<div class="topic-metadata">

**Author:** [@vvvprabhakar](https://discuss.elastic.co/u/vvvprabhakar)\
**Replies:** 3\
**Last updated:** [September 26, 2019, 3:20pm UTC](https://discuss.elastic.co/t/kibana-6-1-courier-searchsource-segmented-fetchsoon-fetchnow/200624 "2019-09-26T15:20:23Z")

</div>

i want a clear understanding of all these things . I am try to understand how kibana is fetching the logs from ES. What is segmenting ? what is fetchsoon/fetchNow ? What is searchSource ? How is courier architected ? …

---

## [Visualizing count differences](https://discuss.elastic.co/t/visualizing-count-differences/199331)

<div class="topic-metadata">

**Author:** [@wfaulk-bw](https://discuss.elastic.co/u/wfaulk-bw)\
**Replies:** 6\
**Last updated:** [September 26, 2019, 3:17pm UTC](https://discuss.elastic.co/t/visualizing-count-differences/199331 "2019-09-26T15:17:34Z")

</div>

I have a visualization that is showing me the top 25 clients for a particular DNS query. I'm interested in clients that are preferring one of our DNS servers over the other, so right now, I just have a Split Series, spli…

---

## [How do I plan the number of nodes required in cluster](https://discuss.elastic.co/t/how-do-i-plan-the-number-of-nodes-required-in-cluster/201259)

<div class="topic-metadata">

**Author:** [@ranjeet.tiwari](https://discuss.elastic.co/u/ranjeet.tiwari)\
**Replies:** 1\
**Last updated:** [September 26, 2019, 3:06pm UTC](https://discuss.elastic.co/t/how-do-i-plan-the-number-of-nodes-required-in-cluster/201259 "2019-09-26T15:06:14Z")

</div>

Is there any recommendation for numbers nodes in one cluster? How do I plan the number of nodes required in cluster?

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1870)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1872)
