# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1950

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1951

---

## [Native authentication with Basic License](https://discuss.elastic.co/t/native-authentication-with-basic-license/194494)

<div class="topic-metadata">

**Author:** [@harryk1](https://discuss.elastic.co/u/harryk1)\
**Replies:** 11\
**Last updated:** [August 20, 2019, 12:23pm UTC](https://discuss.elastic.co/t/native-authentication-with-basic-license/194494 "2019-08-20T12:23:10Z")

</div>

We are building a 3-node elastic cluster v7.1.0 (statefulset), and single-node Kibana (deployment) on Kuberenetes using basic license. Was wondering how can we implement native authentication?

---

## [Forcing Logstash to use TLS 1\_2](https://discuss.elastic.co/t/forcing-logstash-to-use-tls-1-2/195869)

<div class="topic-metadata">

**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\
**Replies:** 3\
**Last updated:** [August 20, 2019, 12:23pm UTC](https://discuss.elastic.co/t/forcing-logstash-to-use-tls-1-2/195869 "2019-08-20T12:23:02Z")

</div>

Hi! Is it possible to force Logstash (TCP\_INPUT) into using TLS v.1.2 only? Beats Input is actually using 1\_2 but sadly my TCP input is using 1.0, 1.1 and 1.2. Also, while starting Logstash I see: ssl.enabled.pr…

---

## [Sorting on missing values and using search\_after](https://discuss.elastic.co/t/sorting-on-missing-values-and-using-search-after/195883)

<div class="topic-metadata">

**Author:** [@Taha\_Nemat](https://discuss.elastic.co/u/Taha_Nemat)\
**Replies:** 2\
**Last updated:** [August 20, 2019, 12:21pm UTC](https://discuss.elastic.co/t/sorting-on-missing-values-and-using-search-after/195883 "2019-08-20T12:21:50Z")

</div>

Elasticsearch Version 7.0.0 Node.js client Node module: elasticsearch Hi, I'm trying to fetch a set of documents from elasticsearch using the node.js client (node module: elasticsearch). The problem I'm running into i…

---

## [Elasticsearch filter query score](https://discuss.elastic.co/t/elasticsearch-filter-query-score/195715)

<div class="topic-metadata">

**Author:** [@Callonski](https://discuss.elastic.co/u/Callonski)\
**Replies:** 1\
**Last updated:** [August 20, 2019, 12:18pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-query-score/195715 "2019-08-20T12:18:26Z")

</div>

Is there a way to get the score from a query with filter? Or do I need to restructure my query without filters? I would need a score between 0-1. Now it looks like this: { "from": 0, "size": 10, "query": { "bool":…

---

## [\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main/195915)

<div class="topic-metadata">

**Author:** [@jainabhishek0406](https://discuss.elastic.co/u/jainabhishek0406)\
**Replies:** 1\
**Last updated:** [August 20, 2019, 11:56am UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main/195915 "2019-08-20T11:56:38Z")

</div>

kindly help to resolve this issue. PS C:\\Users\\abhishek12.jain\\ELK\_Data\\logstash-6.4.3\> .\\bin/logstash.bat -f bin/logstash-sample.conf Sending Logstash logs to C:/Users/abhishek12.jain/ELK\_Data/logstash-6.4.3/logs whic…

---

## [Logstash http input plugin configuration of same URL on multiple nodes](https://discuss.elastic.co/t/logstash-http-input-plugin-configuration-of-same-url-on-multiple-nodes/195817)

<div class="topic-metadata">

**Author:** [@iamlearner123](https://discuss.elastic.co/u/iamlearner123)\
**Replies:** 1\
**Last updated:** [August 20, 2019, 11:41am UTC](https://discuss.elastic.co/t/logstash-http-input-plugin-configuration-of-same-url-on-multiple-nodes/195817 "2019-08-20T11:41:56Z")

</div>

Hello, i have two logstash instances running and i have configured one of the instance with HTTP input plugin to fetch the data from a URL. I want of find out whether is it possible to configure both the logstash nodes…

---

## [Kibana not recognizing logstash date filter](https://discuss.elastic.co/t/kibana-not-recognizing-logstash-date-filter/195816)

<div class="topic-metadata">

**Author:** [@userR](https://discuss.elastic.co/u/userR)\
**Replies:** 1\
**Last updated:** [August 20, 2019, 11:41am UTC](https://discuss.elastic.co/t/kibana-not-recognizing-logstash-date-filter/195816 "2019-08-20T11:41:04Z")

</div>

I have dates formatted as such: 2013-05-02 08:02:22.622+0000 And my date filter is the following: date { match =\> \["logdate", "YYYY-MM-DD HH:mm:ss.SSSZZZZ"\] target =\> "logdate" } However, when I create indices…

---

## [Conf files getting mixed when uploading](https://discuss.elastic.co/t/conf-files-getting-mixed-when-uploading/195803)

<div class="topic-metadata">

**Author:** [@cjb312](https://discuss.elastic.co/u/cjb312)\
**Replies:** 1\
**Last updated:** [August 20, 2019, 11:38am UTC](https://discuss.elastic.co/t/conf-files-getting-mixed-when-uploading/195803 "2019-08-20T11:38:14Z")

</div>

I'm trying to ingest a number of csv files to view on Kibana but am encountering an issue of fields carrying over from the previous file. I have multiple .conf files formatted like so: input { file { path =\> …

---

## [OpenJDK 64-Bit Server VM warning: Cannot open file logs/gc.log due to No such file or directory](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-cannot-open-file-logs-gc-log-due-to-no-such-file-or-directory/195887)

<div class="topic-metadata">

**Author:** [@Mike\_Fritzsche](https://discuss.elastic.co/u/Mike_Fritzsche)\
**Replies:** 1\
**Last updated:** [August 20, 2019, 11:32am UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-cannot-open-file-logs-gc-log-due-to-no-such-file-or-directory/195887 "2019-08-20T11:32:29Z")

</div>

I installed on my Mac OS 14.0.6 Elasticsearch with brew. It must be ES V 6 - not 7. But I tied to install 7 too - same error. So must be problem with the jdk? I was also installing java 8 with brew (was asking to install…

---

## [Copying data from one elastic server to different elastic server for specific time interval](https://discuss.elastic.co/t/copying-data-from-one-elastic-server-to-different-elastic-server-for-specific-time-interval/195167)

<div class="topic-metadata">

**Author:** [@amit.karir](https://discuss.elastic.co/u/amit.karir)\
**Replies:** 3\
**Last updated:** [August 20, 2019, 11:25am UTC](https://discuss.elastic.co/t/copying-data-from-one-elastic-server-to-different-elastic-server-for-specific-time-interval/195167 "2019-08-20T11:25:48Z")

</div>

We have 2 different elastic search servers, both having same version(5.5.2). 1st elastic search server has latest up to date data. Second server is having stale data, which is like a back up of one weeks old data. We cop…

---

## [How to disable monitoring and dev tools tab for Kibana custom user?](https://discuss.elastic.co/t/how-to-disable-monitoring-and-dev-tools-tab-for-kibana-custom-user/190689)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 4\
**Last updated:** [August 20, 2019, 11:18am UTC](https://discuss.elastic.co/t/how-to-disable-monitoring-and-dev-tools-tab-for-kibana-custom-user/190689 "2019-08-20T11:18:44Z")

</div>

Hi, I have created one user in kibana-5.6. Custome role: cbgmelk1\_role User: cbgmelk1user Above user is able to see monitoring, dev tools, management, and other tools. I want that user to see only discover tab. …

---

## [Logstash and Elasticsearch Ingest Node](https://discuss.elastic.co/t/logstash-and-elasticsearch-ingest-node/195890)

<div class="topic-metadata">

**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\
**Replies:** 0\
**Last updated:** [August 20, 2019, 10:42am UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-ingest-node/195890 "2019-08-20T10:42:54Z")

</div>

Hi, In our setup we are collecting log files using Filebeat and sending these into Logstash for filtering/enrichment then onto Elasticsearch. This is working as intended (although having some unrelated issues with ILM :…

---

## [Ignore\_above for text datatype in elasticsearch](https://discuss.elastic.co/t/ignore-above-for-text-datatype-in-elasticsearch/195606)

<div class="topic-metadata">

**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\
**Replies:** 4\
**Last updated:** [August 20, 2019, 10:33am UTC](https://discuss.elastic.co/t/ignore-above-for-text-datatype-in-elasticsearch/195606 "2019-08-20T10:33:59Z")

</div>

In elasticsearch 5 string datatype has been removed as explained nicely in this blog post. ignore\_above is not supported with text datatype. Can someone let me know how does text field is then protected against Lucene’s…

---

## [Migration of dashboard from one instance to another](https://discuss.elastic.co/t/migration-of-dashboard-from-one-instance-to-another/195872)

<div class="topic-metadata">

**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\
**Replies:** 1\
**Last updated:** [August 20, 2019, 10:24am UTC](https://discuss.elastic.co/t/migration-of-dashboard-from-one-instance-to-another/195872 "2019-08-20T10:24:10Z")

</div>

Hi i am working on some migration project , we need to migrate kibana reports from one instance to another , the source instance is running for some time now . it has all the indices and corresponding kibana indices . …

---

## [Logstash parse log nginx not index refresh](https://discuss.elastic.co/t/logstash-parse-log-nginx-not-index-refresh/195881)

<div class="topic-metadata">

**Author:** [@jfernandez](https://discuss.elastic.co/u/jfernandez)\
**Replies:** 0\
**Last updated:** [August 20, 2019, 10:07am UTC](https://discuss.elastic.co/t/logstash-parse-log-nginx-not-index-refresh/195881 "2019-08-20T10:07:22Z")

</div>

Hello, I just finished my first installation ELK and I discover the differents elements that compose it. My first exercise is to parse nginx logs via Logstash and grok filter. To do so, I created a configuration file i…

---

## [Combining two fields into one during Reindex](https://discuss.elastic.co/t/combining-two-fields-into-one-during-reindex/194700)

<div class="topic-metadata">

**Author:** [@Nikhil04](https://discuss.elastic.co/u/Nikhil04)\
**Replies:** 10\
**Last updated:** [August 20, 2019, 10:06am UTC](https://discuss.elastic.co/t/combining-two-fields-into-one-during-reindex/194700 "2019-08-20T10:06:42Z")

</div>

Hi, We have a requirement wherein we want to combine two fields into one field during reindex. For Example: Original Index: field1: firstname field2: lastname After reindex: Name: firstname lastname I have checke…

---

## ["ignoring JAVA\_OPTS=-Xmx1024m -Xms1024m; pass JVM parameters via LS\_JAVA\_OPTS" error](https://discuss.elastic.co/t/ignoring-java-opts-xmx1024m-xms1024m-pass-jvm-parameters-via-ls-java-opts-error/195877)

<div class="topic-metadata">

**Author:** [@whalien52](https://discuss.elastic.co/u/whalien52)\
**Replies:** 0\
**Last updated:** [August 20, 2019, 9:43am UTC](https://discuss.elastic.co/t/ignoring-java-opts-xmx1024m-xms1024m-pass-jvm-parameters-via-ls-java-opts-error/195877 "2019-08-20T09:43:30Z")

</div>

I just downloaded the latest version of Logstash 7.3.0 and my aim is to send some data from SQL server to Elasticsearch via Logstash. Whenever I am running the logstash bat file, I am again and again getting the same er…

---

## [ES requires me to specify the type of data that I do not want to index](https://discuss.elastic.co/t/es-requires-me-to-specify-the-type-of-data-that-i-do-not-want-to-index/194404)

<div class="topic-metadata">

**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\
**Replies:** 4\
**Last updated:** [August 20, 2019, 9:36am UTC](https://discuss.elastic.co/t/es-requires-me-to-specify-the-type-of-data-that-i-do-not-want-to-index/194404 "2019-08-20T09:36:44Z")

</div>

I want to save some data just in case (Suddenly, later come in handy). I need them to not be indexed and not involved in the search. If this data is later needed, I will get it from \_source. I tried to add mapping, bu…

---

## [Can search.max\_buckets be applied per index](https://discuss.elastic.co/t/can-search-max-buckets-be-applied-per-index/195870)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 0\
**Last updated:** [August 20, 2019, 9:10am UTC](https://discuss.elastic.co/t/can-search-max-buckets-be-applied-per-index/195870 "2019-08-20T09:10:27Z")

</div>

I know search.max\_buckets is cluster level settings that gets applied for all indices. Can it be applied per index?

---

## [Netflow\_module error](https://discuss.elastic.co/t/netflow-module-error/195723)

<div class="topic-metadata">

**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\
**Replies:** 15\
**Last updated:** [August 20, 2019, 9:05am UTC](https://discuss.elastic.co/t/netflow-module-error/195723 "2019-08-20T09:05:47Z")

</div>

Hi I am trying to use logstash netflow module but when I am executing "bin/logstash --modules netflow -M netflow.var.input.udp.port=2055" then I am getting error saying: "\[WARN \] 2019-08-19 16:26:18.548 \[Ruby-0-Thread-4…

---

## [Elastic superuser: You need permission to access Machine Learning](https://discuss.elastic.co/t/elastic-superuser-you-need-permission-to-access-machine-learning/193378)

<div class="topic-metadata">

**Author:** [@sergiodcm00](https://discuss.elastic.co/u/sergiodcm00)\
**Replies:** 9\
**Last updated:** [August 20, 2019, 8:59am UTC](https://discuss.elastic.co/t/elastic-superuser-you-need-permission-to-access-machine-learning/193378 "2019-08-20T08:59:57Z")

</div>

Hello, suddenly, I'm not user when (perphaps after change ES cluster name) I cant load Machine Learning tab (logged in Kibana with superuser elastic). Kibana says: You need permission to access Machine Learning You mu…

---

## [The id query will trigger refresh, but I still can't search with query qsl?](https://discuss.elastic.co/t/the-id-query-will-trigger-refresh-but-i-still-cant-search-with-query-qsl/195829)

<div class="topic-metadata">

**Author:** [@lance](https://discuss.elastic.co/u/lance)\
**Replies:** 11\
**Last updated:** [August 20, 2019, 8:56am UTC](https://discuss.elastic.co/t/the-id-query-will-trigger-refresh-but-i-still-cant-search-with-query-qsl/195829 "2019-08-20T08:56:35Z")

</div>

official documentation : the get API will issue a refresh call in-place to make the document visible. id query doc First I call the id query, then call query QSL, the official documentation says it will call refresh, b…

---

## [Elastic Cloud Kibana port-forward throws 503 with default TLS enabled](https://discuss.elastic.co/t/elastic-cloud-kibana-port-forward-throws-503-with-default-tls-enabled/195866)

<div class="topic-metadata">

**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\
**Replies:** 0\
**Last updated:** [August 20, 2019, 8:48am UTC](https://discuss.elastic.co/t/elastic-cloud-kibana-port-forward-throws-503-with-default-tls-enabled/195866 "2019-08-20T08:48:58Z")

</div>

Following this guidance, it seems that Kibana throws 503 error while connecting with kubectl port-forward service/quickstart-kb-http 5601 but it started working after adding below line into /etc/hosts and accessing Ki…

---

## [Delete option not working on internet but working fine on company network](https://discuss.elastic.co/t/delete-option-not-working-on-internet-but-working-fine-on-company-network/194225)

<div class="topic-metadata">

**Author:** [@saloni\_darbastwar](https://discuss.elastic.co/u/saloni_darbastwar)\
**Replies:** 3\
**Last updated:** [August 20, 2019, 8:42am UTC](https://discuss.elastic.co/t/delete-option-not-working-on-internet-but-working-fine-on-company-network/194225 "2019-08-20T08:42:12Z")

</div>

Hi team, I am trying to delete old reports from kibana. If I use my company network, all functions including delete are working fine. But If I use internet (mobile network or wifi),delete option is not working and error…

---

## [How to extract json from the response field in the output of dead letter queue?](https://discuss.elastic.co/t/how-to-extract-json-from-the-response-field-in-the-output-of-dead-letter-queue/195306)

<div class="topic-metadata">

**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\
**Replies:** 2\
**Last updated:** [August 19, 2019, 12:01pm UTC](https://discuss.elastic.co/t/how-to-extract-json-from-the-response-field-in-the-output-of-dead-letter-queue/195306 "2019-08-19T12:01:39Z")

</div>

hi guys , my scripts is as follows :- input { dead\_letter\_queue { path =\> "${LS\_HOME}/data/dead\_letter\_queue" pipeline\_id =\> "main" } } filter { ruby { path =\> "${LS\_HOME}/config/failed-index-cre…

---

## [Hide Elasticsearch and Kibana version](https://discuss.elastic.co/t/hide-elasticsearch-and-kibana-version/195692)

<div class="topic-metadata">

**Author:** [@AdrianRyczek](https://discuss.elastic.co/u/AdrianRyczek)\
**Replies:** 4\
**Last updated:** [August 20, 2019, 7:59am UTC](https://discuss.elastic.co/t/hide-elasticsearch-and-kibana-version/195692 "2019-08-20T07:59:20Z")

</div>

Hi, I'm looking for a way to hide information about which version of Elasticsearch and Kibana we are currently using. We are using Elasticsearch and Kibana 6.4.2 version. Thanks, Adrian

---

## [Filter after aggregation](https://discuss.elastic.co/t/filter-after-aggregation/195758)

<div class="topic-metadata">

**Author:** [@ex56ri7](https://discuss.elastic.co/u/ex56ri7)\
**Replies:** 2\
**Last updated:** [August 20, 2019, 7:38am UTC](https://discuss.elastic.co/t/filter-after-aggregation/195758 "2019-08-20T07:38:33Z")

</div>

I have documents in the form of: { "result": "failure", "key": "A" } { "result": "failure", "key": "A" } { "result": "failure", "key": "A" } { "result": "failure", "key": "B" } I need to get the value …

---

## [Terms Aggregation on Array of String](https://discuss.elastic.co/t/terms-aggregation-on-array-of-string/195775)

<div class="topic-metadata">

**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\
**Replies:** 1\
**Last updated:** [August 20, 2019, 7:24am UTC](https://discuss.elastic.co/t/terms-aggregation-on-array-of-string/195775 "2019-08-20T07:24:53Z")

</div>

POST /test/log { "msg": \["text","text"\] } I have indexed the above document and tried term aggregation GET /test/\_search { "aggs": { "NAME": { "terms": { "field": …

---

## [Newbie in ELK](https://discuss.elastic.co/t/newbie-in-elk/195831)

<div class="topic-metadata">

**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\
**Replies:** 1\
**Last updated:** [August 20, 2019, 7:21am UTC](https://discuss.elastic.co/t/newbie-in-elk/195831 "2019-08-20T07:21:13Z")

</div>

hello "Elk"ites, I am basically new to ELK (i worked on Splunk), I need some inputs on where do I start my journey to div into ELK, any inputs would greatly be appreciated!

---

## [Using Java API multi-thread snapshot index come across concurrent snapshot execution exception](https://discuss.elastic.co/t/using-java-api-multi-thread-snapshot-index-come-across-concurrent-snapshot-execution-exception/195729)

<div class="topic-metadata">

**Author:** [@guobinhit](https://discuss.elastic.co/u/guobinhit)\
**Replies:** 2\
**Last updated:** [August 20, 2019, 7:17am UTC](https://discuss.elastic.co/t/using-java-api-multi-thread-snapshot-index-come-across-concurrent-snapshot-execution-exception/195729 "2019-08-20T07:17:57Z")

</div>

Elasticsearch version: 6.6.0 Plugins installed: install snapshot plugin in es cluster. JVM version: 1.8.0\_131 OS version: Darwin Guobin.local 16.6.0 Darwin Kernel Version 16.6.0: Fri Apr 14 16:21:16 PDT 2017; root:x…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1949)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1951)
