# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1938 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1939 --- ## [Elasticsearch cluster does not show all nodes](https://discuss.elastic.co/t/elasticsearch-cluster-does-not-show-all-nodes/195181)
**Author:** [@Ofer\_Peled](https://discuss.elastic.co/u/Ofer_Peled)\ **Replies:** 4\ **Last updated:** [August 26, 2019, 1:58pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-does-not-show-all-nodes/195181 "2019-08-26T13:58:20Z")
Hi there, Although I am using the docker compose attached, I see ONLY ONE node in my elasticsearch cluster (running http://X.X.X.X:9200/\_cat/nodes?v) Nothing suspicious in the logs. Any idea what am I doing wrong. … --- ## [Elasticsearch status red and shard percent stop at 85%](https://discuss.elastic.co/t/elasticsearch-status-red-and-shard-percent-stop-at-85/194949)
**Author:** [@Specs](https://discuss.elastic.co/u/Specs)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 1:56pm UTC](https://discuss.elastic.co/t/elasticsearch-status-red-and-shard-percent-stop-at-85/194949 "2019-08-26T13:56:05Z")
My ELK stack stoped yesterday, and I found it was because elasticsearch stoped. And I restart it, but logstash can not write data into it. I checked /\_cat/health, and got this: Later I restart it again, the active\_sha… --- ## [Conditional on elasticsearch output not working as expected](https://discuss.elastic.co/t/conditional-on-elasticsearch-output-not-working-as-expected/196772)
**Author:** [@glenacota](https://discuss.elastic.co/u/glenacota)\ **Replies:** 3\ **Last updated:** [August 26, 2019, 1:54pm UTC](https://discuss.elastic.co/t/conditional-on-elasticsearch-output-not-working-as-expected/196772 "2019-08-26T13:54:32Z")
Hi folks, I'm using the elasticsearch output plugin, and I want to define two alternatives configurations for it, depending on a certain condition (see code below). ... output { if \[condition\] { elasticsearch { … --- ## [Unable to bulk upload the stats payload to the local cluster Kibana 7.3](https://discuss.elastic.co/t/unable-to-bulk-upload-the-stats-payload-to-the-local-cluster-kibana-7-3/196724)
**Author:** [@Mohamad-Sobhie](https://discuss.elastic.co/u/Mohamad-Sobhie)\ **Replies:** 3\ **Last updated:** [August 26, 2019, 1:54pm UTC](https://discuss.elastic.co/t/unable-to-bulk-upload-the-stats-payload-to-the-local-cluster-kibana-7-3/196724 "2019-08-26T13:54:18Z")
Hey there, Kibana 7.3 I recieve this message when attempting to bulk : "tags":\["warning","monitoring","kibana-monitoring"\],"pid":1,"message":"Unable to bulk upload the stats payload to the local cluster"} Note that I… --- ## [ELK basic config](https://discuss.elastic.co/t/elk-basic-config/196411)
**Author:** [@NewmazN24](https://discuss.elastic.co/u/NewmazN24)\ **Replies:** 8\ **Last updated:** [August 26, 2019, 1:43pm UTC](https://discuss.elastic.co/t/elk-basic-config/196411 "2019-08-26T13:43:23Z")
Hey Guys, I am turning to this forum since I can't get to the bottom of it. I installed ELK Stack on CentOS7, however I do not seem to be able to make my configuration working with my network. I am trying to get Winlogb… --- ## [Will replica's do same amount of work as primaries?](https://discuss.elastic.co/t/will-replicas-do-same-amount-of-work-as-primaries/195044)
**Author:** [@eightnoteight](https://discuss.elastic.co/u/eightnoteight)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 1:39pm UTC](https://discuss.elastic.co/t/will-replicas-do-same-amount-of-work-as-primaries/195044 "2019-08-26T13:39:48Z")
Hi, for our cluster, now the disk is not an issue anymore but the cpu is, if I increase the replica's how much increase cpu usage should I expect? is it 2x of the previous usage? i.e will the replica's do the same amou… --- ## [FORBIDDEN/12/index read-only / allow delete (api)\] : indexes are set to "read only mode"](https://discuss.elastic.co/t/forbidden-12-index-read-only-allow-delete-api-indexes-are-set-to-read-only-mode/194843)
**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\ **Replies:** 3\ **Last updated:** [August 26, 2019, 1:39pm UTC](https://discuss.elastic.co/t/forbidden-12-index-read-only-allow-delete-api-indexes-are-set-to-read-only-mode/194843 "2019-08-26T13:39:25Z")
Hello, I have deployed ELK stack (version 7.2.0) on kubernetes, and everything was working just fine till I got this error " \[FORBIDDEN/12/index read-only / allow delete (api)\]\]" while doing some stuff on kibana. What I… --- ## [Kibana 6.8 fails to start](https://discuss.elastic.co/t/kibana-6-8-fails-to-start/196750)
**Author:** [@abhishek\_Shetty](https://discuss.elastic.co/u/abhishek_Shetty)\ **Replies:** 2\ **Last updated:** [August 26, 2019, 1:22pm UTC](https://discuss.elastic.co/t/kibana-6-8-fails-to-start/196750 "2019-08-26T13:22:44Z")
Hello, I am trying to install 6.8 version of elasticsearch and Kibana. I have been able to get my elasticsearch instance running, but my Kibana will not connect. when I run ./bin/kibana it is getting stucked and if we… --- ## [Data modeling qustion](https://discuss.elastic.co/t/data-modeling-qustion/196641)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 12:58pm UTC](https://discuss.elastic.co/t/data-modeling-qustion/196641 "2019-08-26T12:58:58Z")
I have a user record database which has employee, userinfo1, userinfo2, managername foo1, info1, info2, foo2 foo2, info1, info2, foo3 foo3, info1, info2, foo4 as now I have manager level foo4 -\> foo3 -\> foo2 -\> foo… --- ## [Having a hard time parsing artifactory logs using 7.3.0](https://discuss.elastic.co/t/having-a-hard-time-parsing-artifactory-logs-using-7-3-0/195170)
**Author:** [@starrynight](https://discuss.elastic.co/u/starrynight)\ **Replies:** 10\ **Last updated:** [August 26, 2019, 12:58pm UTC](https://discuss.elastic.co/t/having-a-hard-time-parsing-artifactory-logs-using-7-3-0/195170 "2019-08-26T12:58:21Z")
Having a hard time parsing artifactory logs -- I've utilized the grok debugger in kibana as well as referenced jfrog's page regarding parsing logs -- but still it seems to not register. I've inserted greedydata in a lot … --- ## [ES cluster restart, any impact on Logstash output?](https://discuss.elastic.co/t/es-cluster-restart-any-impact-on-logstash-output/196767)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 0\ **Last updated:** [August 26, 2019, 12:27pm UTC](https://discuss.elastic.co/t/es-cluster-restart-any-impact-on-logstash-output/196767 "2019-08-26T12:27:58Z")
Hello, We need to restart ES cluster (node by node) due to some changes. Our concenr is to know whether it will have any impact on LS. We have mentioned ES-output to logstash using hosts uri. https://www.elastic.co/g… --- ## [Grok pattern for SYSLOGPROG](https://discuss.elastic.co/t/grok-pattern-for-syslogprog/196515)
**Author:** [@Kragh](https://discuss.elastic.co/u/Kragh)\ **Replies:** 3\ **Last updated:** [August 26, 2019, 12:27pm UTC](https://discuss.elastic.co/t/grok-pattern-for-syslogprog/196515 "2019-08-26T12:27:50Z")
Hi there, I'm currently looking into Logstash which recieves our logs from the syslog server, which recieves logs from our windows hosts (logged with NXLog, parsed as JSON). Currently I'm having having a issue with the… --- ## [Event Correlation on ELK](https://discuss.elastic.co/t/event-correlation-on-elk/194362)
**Author:** [@alperensoydan](https://discuss.elastic.co/u/alperensoydan)\ **Replies:** 2\ **Last updated:** [August 26, 2019, 12:07pm UTC](https://discuss.elastic.co/t/event-correlation-on-elk/194362 "2019-08-26T12:07:08Z")
Hello, I installed ELK as a SIEM and It works nicely. There is only one problem is that correlation of different events and it does not come default within ELK. According to my researches, Logstash filters work for this… --- ## [Questions about \[FORBIDDEN/12/index read-only](https://discuss.elastic.co/t/questions-about-forbidden-12-index-read-only/196731)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 12:05pm UTC](https://discuss.elastic.co/t/questions-about-forbidden-12-index-read-only/196731 "2019-08-26T12:05:46Z")
Hi, I have a small dev cluster running in kubernetes. Since I have quite limited diskspace elasticsearch is often throwing the following error to indexing applications like logstash or kibana: ... blocked by: \[FORBIDD… --- ## [Factor aggregate score on child collection into query on parent](https://discuss.elastic.co/t/factor-aggregate-score-on-child-collection-into-query-on-parent/196757)
**Author:** [@shertu](https://discuss.elastic.co/u/shertu)\ **Replies:** 0\ **Last updated:** [August 26, 2019, 11:49am UTC](https://discuss.elastic.co/t/factor-aggregate-score-on-child-collection-into-query-on-parent/196757 "2019-08-26T11:49:10Z")
I want to create a search system where a user's search is analyzed against similar searches. Here is an example of the data in my system: Each document in my system contains a list of events wherein the document was r… --- ## [Edge-NGram Ranking Results Incorrectly?](https://discuss.elastic.co/t/edge-ngram-ranking-results-incorrectly/196755)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 0\ **Last updated:** [August 26, 2019, 11:44am UTC](https://discuss.elastic.co/t/edge-ngram-ranking-results-incorrectly/196755 "2019-08-26T11:44:40Z")
I noticed the edge\_ngram analyzer scoring exact matches of a query lower than poor matches so I copied the data into a second field with the standard analyzer to compare. I now have 2 fields with the same content but di… --- ## [How to Create Super User in Kibana](https://discuss.elastic.co/t/how-to-create-super-user-in-kibana/196257)
**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\ **Replies:** 23\ **Last updated:** [August 26, 2019, 11:24am UTC](https://discuss.elastic.co/t/how-to-create-super-user-in-kibana/196257 "2019-08-26T11:24:17Z")
Hello how to create super user with full access so i will create another user with role of dashboard mode only... I have ELK stack 7 and x pack by default is install in ELK . Can someone help. I have set password in kiba… --- ## [Kibana setting "week start" should perhaps control the date picker view also](https://discuss.elastic.co/t/kibana-setting-week-start-should-perhaps-control-the-date-picker-view-also/196714)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 2\ **Last updated:** [August 26, 2019, 11:00am UTC](https://discuss.elastic.co/t/kibana-setting-week-start-should-perhaps-control-the-date-picker-view-also/196714 "2019-08-26T11:00:03Z")
Hi Kibana 6.8.2 In kibana settings, we have this option to change the day when week starts. Default is Sunday. In our country, this setting differs, so I have changed it to Monday. Wouldn't it be nice, if this sett… --- ## [How to rename a column name in the scriptfeild?](https://discuss.elastic.co/t/how-to-rename-a-column-name-in-the-scriptfeild/196745)
**Author:** [@dharani](https://discuss.elastic.co/u/dharani)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 10:57am UTC](https://discuss.elastic.co/t/how-to-rename-a-column-name-in-the-scriptfeild/196745 "2019-08-26T10:57:42Z")
Hello Team, how to rename a column using scripted field in kibana. if possible need a solution or alternate solution for this. Thanks. Dharani --- ## [Kibana Visualization with "filters" on metric](https://discuss.elastic.co/t/kibana-visualization-with-filters-on-metric/196725)
**Author:** [@zbawio](https://discuss.elastic.co/u/zbawio)\ **Replies:** 7\ **Last updated:** [August 26, 2019, 10:48am UTC](https://discuss.elastic.co/t/kibana-visualization-with-filters-on-metric/196725 "2019-08-26T10:48:51Z")
hi , i have 4m documents on my kibana and i want to visualise some with "metric count" , all fields of my document have "string" values. I have a CS-Method field and it returns GET or POST string value. I tried to do a… --- ## [Replicating the APM behavior for log search](https://discuss.elastic.co/t/replicating-the-apm-behavior-for-log-search/196747)
**Author:** [@gajanan8086](https://discuss.elastic.co/u/gajanan8086)\ **Replies:** 0\ **Last updated:** [August 26, 2019, 10:20am UTC](https://discuss.elastic.co/t/replicating-the-apm-behavior-for-log-search/196747 "2019-08-26T10:20:42Z")
Hi Team, We are using Elasticsearch APM for performance monitoring and also using the log correction feature to stamp the traceID for each application log line. These log lines are published as an individual document to… --- ## [Error while diverting output to multiple secured kafka topic](https://discuss.elastic.co/t/error-while-diverting-output-to-multiple-secured-kafka-topic/196746)
**Author:** [@amrutadale](https://discuss.elastic.co/u/amrutadale)\ **Replies:** 0\ **Last updated:** [August 26, 2019, 10:12am UTC](https://discuss.elastic.co/t/error-while-diverting-output-to-multiple-secured-kafka-topic/196746 "2019-08-26T10:12:53Z")
I am trying to divert output to different secured kafka topics based on the topic name received from HTTP end point. for single topic my configuration is working fine. If I add if else based on topic name condition inte… --- ## [In Elasticsearch SQL using group by year(date-field) is slow, should I create a standalone year-of-date field when importing?](https://discuss.elastic.co/t/in-elasticsearch-sql-using-group-by-year-date-field-is-slow-should-i-create-a-standalone-year-of-date-field-when-importing/196480)
**Author:** [@Jack\_Wu](https://discuss.elastic.co/u/Jack_Wu)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 10:07am UTC](https://discuss.elastic.co/t/in-elasticsearch-sql-using-group-by-year-date-field-is-slow-should-i-create-a-standalone-year-of-date-field-when-importing/196480 "2019-08-26T10:07:52Z")
Hi all, the "year" function in group by is slow. Here is the example: "select year(docdate), sum(docamt) FROM indexA GROUP BY year(docdate)" is much slower than "select docdate\_year, sum(docamt) FROM indexA GROUP … --- ## [CircuitBreakingException in elasticsearch](https://discuss.elastic.co/t/circuitbreakingexception-in-elasticsearch/196744)
**Author:** [@amolp](https://discuss.elastic.co/u/amolp)\ **Replies:** 0\ **Last updated:** [August 26, 2019, 10:06am UTC](https://discuss.elastic.co/t/circuitbreakingexception-in-elasticsearch/196744 "2019-08-26T10:06:43Z")
Hi Experts Below are the error logs of elasticsearch and logstash any one please help me in this. Elasticserach 6.x Logs ------\> at java.lang.Thread.run(Thread.java:748) \[?:1.8.0\_222\] \[2019-08-26T09:47:30,920\]\[WARN \]… --- ## [Bool filter and must - must not Query with nested not right response](https://discuss.elastic.co/t/bool-filter-and-must-must-not-query-with-nested-not-right-response/196481)
**Author:** [@z-Dapor](https://discuss.elastic.co/u/z-Dapor)\ **Replies:** 2\ **Last updated:** [August 26, 2019, 10:03am UTC](https://discuss.elastic.co/t/bool-filter-and-must-must-not-query-with-nested-not-right-response/196481 "2019-08-26T10:03:37Z")
This is my mappings: "mappings": { "\_doc":{ "properties": { "channels": { "type": "nested", "properties":{ "name":{ "type":"keyword" }, "value":{ "type":"long" } } } This is my DSL: GET my\_index2/\_search … --- ## [SSL Authentication between beat agent and Logstash](https://discuss.elastic.co/t/ssl-authentication-between-beat-agent-and-logstash/196742)
**Author:** [@radw](https://discuss.elastic.co/u/radw)\ **Replies:** 0\ **Last updated:** [August 26, 2019, 9:55am UTC](https://discuss.elastic.co/t/ssl-authentication-between-beat-agent-and-logstash/196742 "2019-08-26T09:55:07Z")
Hi all. I'm trying to setup the SSL authentication between beats agents(Metricbeat, Filebeat etc) but I'm stuck! I'm using the free/community edition of ELK stack, v6.8.2. Logstash configuration file(logstash.yml): p… --- ## [Sub Aggregated Field | Watcher Action Elasticsearch](https://discuss.elastic.co/t/sub-aggregated-field-watcher-action-elasticsearch/196734)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 9:41am UTC](https://discuss.elastic.co/t/sub-aggregated-field-watcher-action-elasticsearch/196734 "2019-08-26T09:41:39Z")
Hi all, I was wondering if you could help me in figuring out how I can reference an aggregated field AND sub-aggregated field in my watcher action? In this example, I wish to reference key and elasticid in my watcher a… --- ## [Is there an automated solution for the rollover pattern?](https://discuss.elastic.co/t/is-there-an-automated-solution-for-the-rollover-pattern/196726)
**Author:** [@SphiaTower](https://discuss.elastic.co/u/SphiaTower)\ **Replies:** 2\ **Last updated:** [August 26, 2019, 9:15am UTC](https://discuss.elastic.co/t/is-there-an-automated-solution-for-the-rollover-pattern/196726 "2019-08-26T09:15:52Z")
Hi there, As is described in this post, the rollover pattern is very effective and can often boost performance if implemented correctly. However, implementing the rollover pattern involves too many steps, some of which … --- ## [Multiple filters in the query return always the last](https://discuss.elastic.co/t/multiple-filters-in-the-query-return-always-the-last/196666)
**Author:** [@rudy42](https://discuss.elastic.co/u/rudy42)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 9:03am UTC](https://discuss.elastic.co/t/multiple-filters-in-the-query-return-always-the-last/196666 "2019-08-26T09:03:20Z")
Hello, I am a beginner with elasticsearch. I try to integrate it in my Laravel project. I use, at the moment ES v6.3, with the following mapping in my index; $params = \[ 'index' =\> 'stocks', … --- ## [Multiple outputs with different formats](https://discuss.elastic.co/t/multiple-outputs-with-different-formats/196285)
**Author:** [@programagor](https://discuss.elastic.co/u/programagor)\ **Replies:** 3\ **Last updated:** [August 26, 2019, 8:42am UTC](https://discuss.elastic.co/t/multiple-outputs-with-different-formats/196285 "2019-08-26T08:42:38Z")
Greetings I am using Logstash to parse and index event logs into Elasticsearch. My pipeline has the following form: input{ # input plugins and their config } filter{ # lots of parsing # in some cases, event is t… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1937) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1939)