# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1932

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1933

---

## [Custom Kibana Image readiness woes](https://discuss.elastic.co/t/custom-kibana-image-readiness-woes/196007)

<div class="topic-metadata">

**Author:** [@tadgh](https://discuss.elastic.co/u/tadgh)\
**Replies:** 2\
**Last updated:** [August 28, 2019, 5:32pm UTC](https://discuss.elastic.co/t/custom-kibana-image-readiness-woes/196007 "2019-08-28T17:32:26Z")

</div>

Hey all, for an internal deploy of ECK, we are using a custom docker image that we host on GCR (gcr.io/etc/etc/kibana:latest). in the Dockerfile, I replace some images that are part of the assets, then remove the optimi…

---

## [Usage of "or" operator in logstash grok filters](https://discuss.elastic.co/t/usage-of-or-operator-in-logstash-grok-filters/197132)

<div class="topic-metadata">

**Author:** [@naveenrt23](https://discuss.elastic.co/u/naveenrt23)\
**Replies:** 10\
**Last updated:** [August 28, 2019, 5:31pm UTC](https://discuss.elastic.co/t/usage-of-or-operator-in-logstash-grok-filters/197132 "2019-08-28T17:31:18Z")

</div>

Hello, I have a condition to check if the 7th-word matches either /list/ or /list or /simple/ or /simple using below condition \[@metadata\]\[copyOfMessage\]\[6\] =~ /^\\/list\\// or /^\\/list/ or /^\\/simple\\// or /^\\/simple/ T…

---

## [org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/197178)

<div class="topic-metadata">

**Author:** [@vivekj\_11](https://discuss.elastic.co/u/vivekj_11)\
**Replies:** 0\
**Last updated:** [August 28, 2019, 5:29pm UTC](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/197178 "2019-08-28T17:29:35Z")

</div>

I tried to create a basic setup with one Elasticsearch pod. The jvm\_memorry for this pod is 8GB. index.number\_of\_shards: 3 I didn't notice the pod for some time and today I found that the above-mentioned error. it say…

---

## [How use gsub in a Ruby code](https://discuss.elastic.co/t/how-use-gsub-in-a-ruby-code/197166)

<div class="topic-metadata">

**Author:** [@Thiago\_Paiva](https://discuss.elastic.co/u/Thiago_Paiva)\
**Replies:** 1\
**Last updated:** [August 28, 2019, 5:06pm UTC](https://discuss.elastic.co/t/how-use-gsub-in-a-ruby-code/197166 "2019-08-28T17:06:48Z")

</div>

Hi friend, I'm trying use gsub in ruby code. But my syntax didn't work. matches\[ x \] = "GenericLog\\tGenericDetail\\t4\\t2019-08-23 01:23:05" Code: matches.each\_index{ |x| x.gsub(/(GenericLog).\*\\\\t4\\\\t/…

---

## [Unable to Change Timezone](https://discuss.elastic.co/t/unable-to-change-timezone/197158)

<div class="topic-metadata">

**Author:** [@MR551](https://discuss.elastic.co/u/MR551)\
**Replies:** 4\
**Last updated:** [August 28, 2019, 4:45pm UTC](https://discuss.elastic.co/t/unable-to-change-timezone/197158 "2019-08-28T16:45:38Z")

</div>

Hello, Trying to configure logstash to ingest error logs into elastic from a txt file, so far its working and data gets delivered into elastic, but the date plugin won't get convert it to Eastern time. Sample error fro…

---

## [Facing an issue to send the log file Elastic](https://discuss.elastic.co/t/facing-an-issue-to-send-the-log-file-elastic/197117)

<div class="topic-metadata">

**Author:** [@Hari21](https://discuss.elastic.co/u/Hari21)\
**Replies:** 3\
**Last updated:** [August 28, 2019, 4:39pm UTC](https://discuss.elastic.co/t/facing-an-issue-to-send-the-log-file-elastic/197117 "2019-08-28T16:39:24Z")

</div>

Hi All, Am unable to send the log message to elastic using logstash , it would be great help if someone can help me on this. here is my test code. (in fact i tried several scripts but unsuccessful :frowning: Example on…

---

## [How to use rest to display all the available indices?](https://discuss.elastic.co/t/how-to-use-rest-to-display-all-the-available-indices/197156)

<div class="topic-metadata">

**Author:** [@Bob94](https://discuss.elastic.co/u/Bob94)\
**Replies:** 3\
**Last updated:** [August 28, 2019, 4:35pm UTC](https://discuss.elastic.co/t/how-to-use-rest-to-display-all-the-available-indices/197156 "2019-08-28T16:35:26Z")

</div>

Hi Is there any way to list out all the indices by using rest api and java ? Some tutorial and example is really appreciated!

---

## [Grok jenkins console logs](https://discuss.elastic.co/t/grok-jenkins-console-logs/194577)

<div class="topic-metadata">

**Author:** [@chaymaa](https://discuss.elastic.co/u/chaymaa)\
**Replies:** 1\
**Last updated:** [August 28, 2019, 4:15pm UTC](https://discuss.elastic.co/t/grok-jenkins-console-logs/194577 "2019-08-28T16:15:31Z")

</div>

Hi All, I have a problem on groking jenkins console log, i have tested the filter instructions using input type file and it's OK but when i implement this configuration using a tcp input type the results is not the same…

---

## [Filter dropdown for a field missing one of the top 5 values displayed under "Available fields" section](https://discuss.elastic.co/t/filter-dropdown-for-a-field-missing-one-of-the-top-5-values-displayed-under-available-fields-section/194458)

<div class="topic-metadata">

**Author:** [@deepalalitaakella](https://discuss.elastic.co/u/deepalalitaakella)\
**Replies:** 14\
**Last updated:** [August 28, 2019, 3:39pm UTC](https://discuss.elastic.co/t/filter-dropdown-for-a-field-missing-one-of-the-top-5-values-displayed-under-available-fields-section/194458 "2019-08-28T15:39:17Z")

</div>

I am having an issue with the dropdown values listed for a field when trying to filter for an index. It always shows the same 10 values but doesn't show one of the top 5 values listed in the "Available fields" section fo…

---

## [Embedding dashboard in website with dynamic filter param and show user based dashboard](https://discuss.elastic.co/t/embedding-dashboard-in-website-with-dynamic-filter-param-and-show-user-based-dashboard/196877)

<div class="topic-metadata">

**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\
**Replies:** 3\
**Last updated:** [August 28, 2019, 3:20pm UTC](https://discuss.elastic.co/t/embedding-dashboard-in-website-with-dynamic-filter-param-and-show-user-based-dashboard/196877 "2019-08-28T15:20:05Z")

</div>

I want to embbed dashboard on my website: i need to know how to pass URL filters dynamically so i can show each customer only their dashboard data based in customer\_id field or other fields. Also how to remove the topb…

---

## [Unable two open 2 different versions in our system](https://discuss.elastic.co/t/unable-two-open-2-different-versions-in-our-system/196901)

<div class="topic-metadata">

**Author:** [@dharani](https://discuss.elastic.co/u/dharani)\
**Replies:** 3\
**Last updated:** [August 28, 2019, 3:07pm UTC](https://discuss.elastic.co/t/unable-two-open-2-different-versions-in-our-system/196901 "2019-08-28T15:07:13Z")

</div>

Hello Team, We had two different versions of elk -\>7.1 &6.6 in same server and we are using 7.1 version now ,when we we open 6.6 its throwing an error. we also need the backup of elk 6.6 like dashboards and indexes . …

---

## [Ruby Filter to delete array element with regexp](https://discuss.elastic.co/t/ruby-filter-to-delete-array-element-with-regexp/197131)

<div class="topic-metadata">

**Author:** [@Thiago\_Paiva](https://discuss.elastic.co/u/Thiago_Paiva)\
**Replies:** 2\
**Last updated:** [August 28, 2019, 2:55pm UTC](https://discuss.elastic.co/t/ruby-filter-to-delete-array-element-with-regexp/197131 "2019-08-28T14:55:27Z")

</div>

Hi, I try to delete an array element using a regexp, But code isn't run. Imput json: \`{"test":"The http module allows to expose\\nThe http module allows to expose\\ncamp:using asynchronous communication\\nusing asynchrono…

---

## [Coding in kibana](https://discuss.elastic.co/t/coding-in-kibana/197057)

<div class="topic-metadata">

**Author:** [@chris2](https://discuss.elastic.co/u/chris2)\
**Replies:** 3\
**Last updated:** [August 28, 2019, 2:54pm UTC](https://discuss.elastic.co/t/coding-in-kibana/197057 "2019-08-28T14:54:31Z")

</div>

Why is it that when I search Kibana help, everyone is explaining with code, but on my kibana, it is really just buttons to click and visualise your data? is it about the different versions? or is there an extra extension…

---

## [Cut off frequency deprecated](https://discuss.elastic.co/t/cut-off-frequency-deprecated/197115)

<div class="topic-metadata">

**Author:** [@hcapitaine](https://discuss.elastic.co/u/hcapitaine)\
**Replies:** 2\
**Last updated:** [August 28, 2019, 2:50pm UTC](https://discuss.elastic.co/t/cut-off-frequency-deprecated/197115 "2019-08-28T14:50:46Z")

</div>

Hi all, It's written in the doc that cut off frequency feature is deprecated in 7.3 as it's "included" in the match search. How is it included and how does it work?

---

## [Exporting Indexed Data](https://discuss.elastic.co/t/exporting-indexed-data/196969)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 5\
**Last updated:** [August 28, 2019, 2:49pm UTC](https://discuss.elastic.co/t/exporting-indexed-data/196969 "2019-08-28T14:49:57Z")

</div>

I am trying to export approximately 100 million indexed events to txt files but having a hard time finding out how to do so. Since I can't get the Elasticsearch input filter to work in Logstash (secured cluster, open ti…

---

## [Kibana data table Split row on String with pipe seperator](https://discuss.elastic.co/t/kibana-data-table-split-row-on-string-with-pipe-seperator/196964)

<div class="topic-metadata">

**Author:** [@Kailayla](https://discuss.elastic.co/u/Kailayla)\
**Replies:** 1\
**Last updated:** [August 28, 2019, 2:35pm UTC](https://discuss.elastic.co/t/kibana-data-table-split-row-on-string-with-pipe-seperator/196964 "2019-08-28T14:35:26Z")

</div>

Hello, I just started working with Kibana and I am just learning the ropes. I have log messages in a data table, and I want to see the ones that occur the most. There are key values in the messages that differ sometim…

---

## [Slack action for elastic cloud](https://discuss.elastic.co/t/slack-action-for-elastic-cloud/196719)

<div class="topic-metadata">

**Author:** [@Denis.topa](https://discuss.elastic.co/u/Denis.topa)\
**Replies:** 2\
**Last updated:** [August 28, 2019, 2:34pm UTC](https://discuss.elastic.co/t/slack-action-for-elastic-cloud/196719 "2019-08-28T14:34:35Z")

</div>

Hi, How to configure slack account for Elasticsearch 7.3 under the elastic.co cloud. Based on documentation editing elasticsearch.yml is disabled in versions higher than 7. In the documentation is specified " You can …

---

## [Installed Kibana v. 7.3.1 but shows as 7.1.0](https://discuss.elastic.co/t/installed-kibana-v-7-3-1-but-shows-as-7-1-0/197090)

<div class="topic-metadata">

**Author:** [@Ged](https://discuss.elastic.co/u/Ged)\
**Replies:** 2\
**Last updated:** [August 28, 2019, 12:52pm UTC](https://discuss.elastic.co/t/installed-kibana-v-7-3-1-but-shows-as-7-1-0/197090 "2019-08-28T12:52:03Z")

</div>

HI guys, I've just installed ELK stack v. 7.3.1 but Kibana shows 7.1.0 version in Management. I also cannot see SIEM icon as shown on picture below. Source of Kibana installation: kibana-7.3.1-linux-x86\_64.tar.gz Any …

---

## [Prune not parsing date component of custom elasticsearch index](https://discuss.elastic.co/t/prune-not-parsing-date-component-of-custom-elasticsearch-index/197129)

<div class="topic-metadata">

**Author:** [@iiz](https://discuss.elastic.co/u/iiz)\
**Replies:** 2\
**Last updated:** [August 28, 2019, 2:26pm UTC](https://discuss.elastic.co/t/prune-not-parsing-date-component-of-custom-elasticsearch-index/197129 "2019-08-28T14:26:03Z")

</div>

I have json logs being shipped to logstash by filebeat on multiple server instances. I would like to whitelist a specific set of fields to include. The whitelist feature works quite well, except for the fact that it does…

---

## [Is it possible to plot a heat map with time range as input data?](https://discuss.elastic.co/t/is-it-possible-to-plot-a-heat-map-with-time-range-as-input-data/197097)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 1\
**Last updated:** [August 28, 2019, 2:20pm UTC](https://discuss.elastic.co/t/is-it-possible-to-plot-a-heat-map-with-time-range-as-input-data/197097 "2019-08-28T14:20:08Z")

</div>

Hello all, I have data as below: on\_time,off\_time,user,PC 2018-09-01 00:34:27.540,2018-09-01 03:40:34.870,xxxxxxx,NA016F 2018-09-01 02:55:55.710,2018-09-01 02:58:55.860,yyyyyyyy,NB106F 2018-09-01 03:44:24.460,2018-09-0…

---

## [How to query 2 logs and show where session.id is missing in one of the logs?](https://discuss.elastic.co/t/how-to-query-2-logs-and-show-where-session-id-is-missing-in-one-of-the-logs/197126)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [August 28, 2019, 1:50pm UTC](https://discuss.elastic.co/t/how-to-query-2-logs-and-show-where-session-id-is-missing-in-one-of-the-logs/197126 "2019-08-28T13:50:43Z")

</div>

Hi, I have 2 logs (httpd\_access and session log). Both logs have the field session.id. One httpd call can result in multiple sessionlog entries. I want to find out the following: which session ids have entries in s…

---

## [Problem in sending data from HTTP plugin to kafka plugin in logstash](https://discuss.elastic.co/t/problem-in-sending-data-from-http-plugin-to-kafka-plugin-in-logstash/197110)

<div class="topic-metadata">

**Author:** [@DZ1](https://discuss.elastic.co/u/DZ1)\
**Replies:** 2\
**Last updated:** [August 28, 2019, 1:44pm UTC](https://discuss.elastic.co/t/problem-in-sending-data-from-http-plugin-to-kafka-plugin-in-logstash/197110 "2019-08-28T13:44:30Z")

</div>

I am trying to send JSON data to HTTP plugin and that output to Kafka using Kafka plugin. In this HTTP input plugin shows output in the first attempt and sends only a small amount of data to Kafka. When I hit it next tim…

---

## [JVM heap size usage and causes](https://discuss.elastic.co/t/jvm-heap-size-usage-and-causes/196959)

<div class="topic-metadata">

**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\
**Replies:** 8\
**Last updated:** [August 28, 2019, 1:40pm UTC](https://discuss.elastic.co/t/jvm-heap-size-usage-and-causes/196959 "2019-08-28T13:40:00Z")

</div>

Hello, can someone explain to me what are the main causes of heap usage? Is it number of queries being run, the number of indexes / shards that are open or is it data ingestion? I ask because I have a 3 node cluster and…

---

## [Metrics for the Logstash persistent queue](https://discuss.elastic.co/t/metrics-for-the-logstash-persistent-queue/197064)

<div class="topic-metadata">

**Author:** [@Luigi\_Clemente](https://discuss.elastic.co/u/Luigi_Clemente)\
**Replies:** 2\
**Last updated:** [August 28, 2019, 1:34pm UTC](https://discuss.elastic.co/t/metrics-for-the-logstash-persistent-queue/197064 "2019-08-28T13:34:34Z")

</div>

Hi all I am trying to implement a cluster of Logstash nodes in AWS using Autoscaling group. I cannot find a clear, reliable metric in the Logstash API that can tell me if the Logstash persistent queue is completely empt…

---

## [Recovering all the dashboards from the kibana in old system](https://discuss.elastic.co/t/recovering-all-the-dashboards-from-the-kibana-in-old-system/196898)

<div class="topic-metadata">

**Author:** [@dharani](https://discuss.elastic.co/u/dharani)\
**Replies:** 4\
**Last updated:** [August 28, 2019, 1:29pm UTC](https://discuss.elastic.co/t/recovering-all-the-dashboards-from-the-kibana-in-old-system/196898 "2019-08-28T13:29:18Z")

</div>

Hello Team, We copied all (ELK )from existing server to Another Server but we are unable to see the dashboards and indexes in kibana. Need your help! Thank you, Dharani

---

## [ElasticSearch deleting data to comply with the GPDR](https://discuss.elastic.co/t/elasticsearch-deleting-data-to-comply-with-the-gpdr/193755)

<div class="topic-metadata">

**Author:** [@notStan](https://discuss.elastic.co/u/notStan)\
**Replies:** 3\
**Last updated:** [August 28, 2019, 1:08pm UTC](https://discuss.elastic.co/t/elasticsearch-deleting-data-to-comply-with-the-gpdr/193755 "2019-08-28T13:08:42Z")

</div>

Hello. I have a question/concern about the workings of Elasticsearch and the GPDR. In the GPDR you have the right to be forgotten. Let's say I am a server owner and I have some personal information, which the owner has …

---

## [Can we run two ES Instances on the same server](https://discuss.elastic.co/t/can-we-run-two-es-instances-on-the-same-server/196982)

<div class="topic-metadata">

**Author:** [@suvarna](https://discuss.elastic.co/u/suvarna)\
**Replies:** 6\
**Last updated:** [August 28, 2019, 12:23pm UTC](https://discuss.elastic.co/t/can-we-run-two-es-instances-on-the-same-server/196982 "2019-08-28T12:23:46Z")

</div>

Currently I have one cluster 1 node ES . I need few inputs on below points.. Can we run two ES instances on the same server ? if yes, how can we ensure, that the client have single endpoint . Is there any rever…

---

## [Filter on TCP input plugin](https://discuss.elastic.co/t/filter-on-tcp-input-plugin/197083)

<div class="topic-metadata">

**Author:** [@DZ1](https://discuss.elastic.co/u/DZ1)\
**Replies:** 2\
**Last updated:** [August 28, 2019, 12:03pm UTC](https://discuss.elastic.co/t/filter-on-tcp-input-plugin/197083 "2019-08-28T12:03:24Z")

</div>

I am fetching input using the TCP input plugin. I am hitting TCP endpoint with an API so while fetching data from the endpoint it fetches data like header information (Content-length, User-Agent etc) . So is there any wa…

---

## [Total store size of index with only one shard and one replica is three times the size of primary](https://discuss.elastic.co/t/total-store-size-of-index-with-only-one-shard-and-one-replica-is-three-times-the-size-of-primary/196057)

<div class="topic-metadata">

**Author:** [@kmousikos](https://discuss.elastic.co/u/kmousikos)\
**Replies:** 11\
**Last updated:** [August 28, 2019, 11:50am UTC](https://discuss.elastic.co/t/total-store-size-of-index-with-only-one-shard-and-one-replica-is-three-times-the-size-of-primary/196057 "2019-08-28T11:50:35Z")

</div>

Is there any kind of background task that would reduce the total number of segments increasing the total store size while leaving the respective primary values unaffected, as shown in the graphs? Version: 6.8.0

---

## [Logstash doesn't work with XML file](https://discuss.elastic.co/t/logstash-doesnt-work-with-xml-file/197032)

<div class="topic-metadata">

**Author:** [@Nurbek](https://discuss.elastic.co/u/Nurbek)\
**Replies:** 1\
**Last updated:** [August 28, 2019, 11:47am UTC](https://discuss.elastic.co/t/logstash-doesnt-work-with-xml-file/197032 "2019-08-28T11:47:22Z")

</div>

XML file \<?xml version="1.0" encoding="UTF-8"?\> -\<Documents xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns="http://localhost/request"\> -\<Document\> \<Status\>Зар…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1931)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1933)
