# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1994 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1995 --- ## [Logstash XML parsing issues - trying to send to Graylog](https://discuss.elastic.co/t/logstash-xml-parsing-issues-trying-to-send-to-graylog/192790)
**Author:** [@eclipsed450](https://discuss.elastic.co/u/eclipsed450)\ **Replies:** 1\ **Last updated:** [July 30, 2019, 4:20am UTC](https://discuss.elastic.co/t/logstash-xml-parsing-issues-trying-to-send-to-graylog/192790 "2019-07-30T04:20:09Z")
Hi, I would like to parse some NetApp CIFS share audit log XML files, but they are an ugly format that I don't have control over (below): \ \ \… --- ## [Configuration for single node cluster v 7.2 setup](https://discuss.elastic.co/t/configuration-for-single-node-cluster-v-7-2-setup/192692)
**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\ **Replies:** 2\ **Last updated:** [July 30, 2019, 3:26am UTC](https://discuss.elastic.co/t/configuration-for-single-node-cluster-v-7-2-setup/192692 "2019-07-30T03:26:30Z")
My single node cluster configuration is like below cluster.name: Elastic-Demo node.name: ${HOSTNAME} path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch network.host: 172.24.36.204 discovery.seed\_ho… --- ## [Beats on OPNsense](https://discuss.elastic.co/t/beats-on-opnsense/192803)
**Author:** [@SteveP](https://discuss.elastic.co/u/SteveP)\ **Replies:** 0\ **Last updated:** [July 30, 2019, 1:52am UTC](https://discuss.elastic.co/t/beats-on-opnsense/192803 "2019-07-30T01:52:01Z")
Has anyone been able to configure OPNsense for Beats? I see alot of work on pfsense, but nothing on OPNsense. --- ## [How to get document length in terms of total terms/tokens - not in bytes?](https://discuss.elastic.co/t/how-to-get-document-length-in-terms-of-total-terms-tokens-not-in-bytes/191115)
**Author:** [@peidaqi](https://discuss.elastic.co/u/peidaqi)\ **Replies:** 2\ **Last updated:** [July 30, 2019, 12:43am UTC](https://discuss.elastic.co/t/how-to-get-document-length-in-terms-of-total-terms-tokens-not-in-bytes/191115 "2019-07-30T00:43:02Z")
I'm trying to find a way to get the total length of a document in terms of tokens. Right now I can achieve this using the termvectors API and do a sum along all terms' ttf, but I wonder if there's a more straightforward… --- ## [Assign to hot nodes via ILM](https://discuss.elastic.co/t/assign-to-hot-nodes-via-ilm/192784)
**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 10:37pm UTC](https://discuss.elastic.co/t/assign-to-hot-nodes-via-ilm/192784 "2019-07-29T22:37:29Z")
Hi, I can allocate shards to warm and cold nodes via ILM but do I really have to mess with templates if I want to have shards in the hot phase allocated to hot nodes? I can't find a way in the gui or the logstash config… --- ## [Q on using indices as logical separation](https://discuss.elastic.co/t/q-on-using-indices-as-logical-separation/192783)
**Author:** [@Mike\_Zmuda](https://discuss.elastic.co/u/Mike_Zmuda)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 10:37pm UTC](https://discuss.elastic.co/t/q-on-using-indices-as-logical-separation/192783 "2019-07-29T22:37:20Z")
Hopefully a simple question on using indices as logical separation within ES. If I understand the purpose of an index correctly, we should be able to use it for logical separation, ie a 'storage' index, 'compute' index, … --- ## [Adding customised kibana filtering tag ( such as Kubernetes.cluster.name)](https://discuss.elastic.co/t/adding-customised-kibana-filtering-tag-such-as-kubernetes-cluster-name/192387)
**Author:** [@Joshua\_Ocansey](https://discuss.elastic.co/u/Joshua_Ocansey)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 10:24pm UTC](https://discuss.elastic.co/t/adding-customised-kibana-filtering-tag-such-as-kubernetes-cluster-name/192387 "2019-07-29T22:24:31Z")
I have deployed ELK system to monitor kubernetes clusters logs from different data-centers and environments. I would like to be able to filter logs based on cluster's name. Is it possible to add my own customize tag … --- ## [Kibana 7.2.0 Cordinates map shows the points but not the map](https://discuss.elastic.co/t/kibana-7-2-0-cordinates-map-shows-the-points-but-not-the-map/192621)
**Author:** [@Aniss\_Chohra](https://discuss.elastic.co/u/Aniss_Chohra)\ **Replies:** 2\ **Last updated:** [July 29, 2019, 9:52pm UTC](https://discuss.elastic.co/t/kibana-7-2-0-cordinates-map-shows-the-points-but-not-the-map/192621 "2019-07-29T21:52:35Z")
Hello everyone, I have installed elk stack using docker compose (version 7.2.0) and it was working until I inserted the data in elasticsearch. The issue is that when I create a visualization using the coordinates map to… --- ## [Kibana login without x-pack](https://discuss.elastic.co/t/kibana-login-without-x-pack/192590)
**Author:** [@kenyjeanreyes](https://discuss.elastic.co/u/kenyjeanreyes)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 9:40pm UTC](https://discuss.elastic.co/t/kibana-login-without-x-pack/192590 "2019-07-29T21:40:48Z")
I am new to Kibana. I have everything doing fine, but i would like to add a login page for authentication of users. I already edited my kibana.yml with the elasticsearch username and password. But how do i get it to pro… --- ## [How many shards are recommended 3TB index with 15 million documents?](https://discuss.elastic.co/t/how-many-shards-are-recommended-3tb-index-with-15-million-documents/192778)
**Author:** [@praveengadugin1](https://discuss.elastic.co/u/praveengadugin1)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 9:28pm UTC](https://discuss.elastic.co/t/how-many-shards-are-recommended-3tb-index-with-15-million-documents/192778 "2019-07-29T21:28:06Z")
I am trying reindex my old index. Present Index size is 3 TB with 18 shards for 15 million documents. What is the recommended number of shards for good performance( recovery speed, query speed, reindex speed etc) --- ## [Prioritize ES node for Kibana requests](https://discuss.elastic.co/t/prioritize-es-node-for-kibana-requests/192626)
**Author:** [@Nonow53](https://discuss.elastic.co/u/Nonow53)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 9:11pm UTC](https://discuss.elastic.co/t/prioritize-es-node-for-kibana-requests/192626 "2019-07-29T21:11:16Z")
Hello, When I define a multiple elasticsearch hosts in config file, is it possible to prioritize one host over the others ? Can I affect a weight in order to redistribute essentially to one specific node and send reque… --- ## [Kibana is not starting after upgrade from 6.7.1 to 7.2](https://discuss.elastic.co/t/kibana-is-not-starting-after-upgrade-from-6-7-1-to-7-2/190296)
**Author:** [@Ryan\_Clark](https://discuss.elastic.co/u/Ryan_Clark)\ **Replies:** 3\ **Last updated:** [July 29, 2019, 9:08pm UTC](https://discuss.elastic.co/t/kibana-is-not-starting-after-upgrade-from-6-7-1-to-7-2/190296 "2019-07-29T21:08:55Z")
I was previously using ELK 6.7.1 with searchguard. I've uninstalled the searchguard plugins and upgraded the ELK RPMs to 7.2. Elasticsearch seems to be up and running but Kibana will not start. I keep getting this error… --- ## [Date parse failed on kibana index update](https://discuss.elastic.co/t/date-parse-failed-on-kibana-index-update/188821)
**Author:** [@queenstownswords](https://discuss.elastic.co/u/queenstownswords)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 8:39pm UTC](https://discuss.elastic.co/t/date-parse-failed-on-kibana-index-update/188821 "2019-07-29T20:39:25Z")
Hello, ELK 7.2.0 Windows I am using the 8.0 Upgrade assistant in Kibana. It appears that a MM argument without the leading 0 gives an index warning but the upgrade assistant (parser) cannot handle it. I am getting t… --- ## [How can i count exact the number of item in array object?](https://discuss.elastic.co/t/how-can-i-count-exact-the-number-of-item-in-array-object/192153)
**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 8:36pm UTC](https://discuss.elastic.co/t/how-can-i-count-exact-the-number-of-item-in-array-object/192153 "2019-07-29T20:36:49Z")
How can i count exact the number of item in array object? I have data like below. doc1 people : \[ {email:a@virtual.com}, {email:b@virtual.com}, {email:c@another.com} \] doc2 people : \[ {email:d@virtual.com}, … --- ## [How to visulize two level of aggregation in kibana?](https://discuss.elastic.co/t/how-to-visulize-two-level-of-aggregation-in-kibana/191467)
**Author:** [@A\_google\_user](https://discuss.elastic.co/u/A_google_user)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 8:21pm UTC](https://discuss.elastic.co/t/how-to-visulize-two-level-of-aggregation-in-kibana/191467 "2019-07-29T20:21:30Z")
I have a document type in Elasticsearch. doc1 { event\_timestamp="2019-06-05 13:56:45" event\_type="heart\_beat" store\_id="abc" } I want to aggregate on two levels first on hours and then on days. Is it possible to d… --- ## [Error when build Kibana from source code : Ineffective mark-compacts near heap limit Allocation failed - JavaScript heap out of memory](https://discuss.elastic.co/t/error-when-build-kibana-from-source-code-ineffective-mark-compacts-near-heap-limit-allocation-failed-javascript-heap-out-of-memory/192132)
**Author:** [@jasmineL](https://discuss.elastic.co/u/jasmineL)\ **Replies:** 5\ **Last updated:** [July 29, 2019, 8:21pm UTC](https://discuss.elastic.co/t/error-when-build-kibana-from-source-code-ineffective-mark-compacts-near-heap-limit-allocation-failed-javascript-heap-out-of-memory/192132 "2019-07-29T20:21:05Z")
I am trying to build kibana branch 6.8 from source code with command node script/build.js --release And I saw below error at when about finish building. info \[ kibana \] Running optimizer │ debg Temporarily installin… --- ## [Could not start KIBANA: "not sending \[kibana\_settings\] monitoring document because \[undefined\] is null or invalid."](https://discuss.elastic.co/t/could-not-start-kibana-not-sending-kibana-settings-monitoring-document-because-undefined-is-null-or-invalid/192183)
**Author:** [@gnh1201](https://discuss.elastic.co/u/gnh1201)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 7:58pm UTC](https://discuss.elastic.co/t/could-not-start-kibana-not-sending-kibana-settings-monitoring-document-because-undefined-is-null-or-invalid/192183 "2019-07-29T19:58:13Z")
Could not start KIBANA: "not sending \[kibana\_settings\] monitoring document because \[undefined\] is null or invalid." environment: elasticsearch: 7.2, kibana 7.2, centos 7 full log file: kibana.log · GitHub summary log: … --- ## [Elastic snapshot, best practice to take snapshots](https://discuss.elastic.co/t/elastic-snapshot-best-practice-to-take-snapshots/192767)
**Author:** [@Elast1](https://discuss.elastic.co/u/Elast1)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 7:52pm UTC](https://discuss.elastic.co/t/elastic-snapshot-best-practice-to-take-snapshots/192767 "2019-07-29T19:52:32Z")
We have a logs data which goes to elastic search cluster holding around 180 shards and 1 tB of data on each data node of total 3 data nodes cluster. I want to take the snapshot of all indices. What is the best practice… --- ## [Weird behavior after server reboot](https://discuss.elastic.co/t/weird-behavior-after-server-reboot/192765)
**Author:** [@leeyu](https://discuss.elastic.co/u/leeyu)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 7:36pm UTC](https://discuss.elastic.co/t/weird-behavior-after-server-reboot/192765 "2019-07-29T19:36:11Z")
Hi all, I am currently running elasticsearch 7.2 on an ubuntu server. And I faced some weird behavior that I don't know what to do. Here is some background I change the default data path to a newly added hard drive. … --- ## [Retrieve multiple documents in elasticsearch filter](https://discuss.elastic.co/t/retrieve-multiple-documents-in-elasticsearch-filter/192751)
**Author:** [@jdcohen220](https://discuss.elastic.co/u/jdcohen220)\ **Replies:** 2\ **Last updated:** [July 29, 2019, 7:31pm UTC](https://discuss.elastic.co/t/retrieve-multiple-documents-in-elasticsearch-filter/192751 "2019-07-29T19:31:50Z")
Hi, Is it possible to retrieve multiple elasticsearch documents from a query using the elasticsearch filter plugin? All the docs show use cases with a single log document. --- ## [Cloud isn't restoring from snapshot](https://discuss.elastic.co/t/cloud-isnt-restoring-from-snapshot/192491)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 6\ **Last updated:** [July 29, 2019, 7:23pm UTC](https://discuss.elastic.co/t/cloud-isnt-restoring-from-snapshot/192491 "2019-07-29T19:23:06Z")
This is a pretty basic use case, don't know how this isn't caught yet in testing, but I can't bring a snapshot I have over because of the .kibana index (and .apm-\*) which come default on the new instance. I have 100's of… --- ## [Reference table](https://discuss.elastic.co/t/reference-table/192409)
**Author:** [@Jim\_Palazzolo](https://discuss.elastic.co/u/Jim_Palazzolo)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 7:07pm UTC](https://discuss.elastic.co/t/reference-table/192409 "2019-07-29T19:07:43Z")
Using ELK stack 6.x I have two tables. One table is event tags the other is tags. In the event tags table is the tag id. This tag id is used to look up in the tags table the text value associated with the tag. So, f… --- ## [Need to return \*all\* the results from a search using ReactJS](https://discuss.elastic.co/t/need-to-return-all-the-results-from-a-search-using-reactjs/192744)
**Author:** [@amcgrath815](https://discuss.elastic.co/u/amcgrath815)\ **Replies:** 3\ **Last updated:** [July 29, 2019, 6:54pm UTC](https://discuss.elastic.co/t/need-to-return-all-the-results-from-a-search-using-reactjs/192744 "2019-07-29T18:54:44Z")
I am helping another developer with a ReactJS search application. No matter what I've tried, the search always returns exactly ten results. We need to return all the results of the search. I have added from:0 and size… --- ## [Kibana Visualization for list of string values](https://discuss.elastic.co/t/kibana-visualization-for-list-of-string-values/192426)
**Author:** [@Rajashree\_Sekar](https://discuss.elastic.co/u/Rajashree_Sekar)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 6:44pm UTC](https://discuss.elastic.co/t/kibana-visualization-for-list-of-string-values/192426 "2019-07-29T18:44:37Z")
Hi, I have list of values for each columns as shown in the reference screenshot above. But while plotting pie-chart, or any visualization, it is just counting the number of records. Reference of Table Visualization o… --- ## [3/6 shards failing when trying to visualize on Kibana](https://discuss.elastic.co/t/3-6-shards-failing-when-trying-to-visualize-on-kibana/191857)
**Author:** [@sarahvo](https://discuss.elastic.co/u/sarahvo)\ **Replies:** 14\ **Last updated:** [July 29, 2019, 6:41pm UTC](https://discuss.elastic.co/t/3-6-shards-failing-when-trying-to-visualize-on-kibana/191857 "2019-07-29T18:41:50Z")
Hi, I'm currently trying to do a simple POC for a potential monitoring system for my company using the Elastic stack. I have metricbeat & winlogbeat going through Logstash, which ships to Elasticsearch. I'm currently onl… --- ## [Search is returning a search phrase execution exception in a specific index](https://discuss.elastic.co/t/search-is-returning-a-search-phrase-execution-exception-in-a-specific-index/192762)
**Author:** [@roland-d](https://discuss.elastic.co/u/roland-d)\ **Replies:** 0\ **Last updated:** [July 29, 2019, 6:41pm UTC](https://discuss.elastic.co/t/search-is-returning-a-search-phrase-execution-exception-in-a-specific-index/192762 "2019-07-29T18:41:37Z")
Hello all, A new user of elastic search here :slight\_smile: Please bear with me. So I setup an elastic search server with 2 indices and all seems to be running fine until today. On certain search queries to a specific … --- ## [Changing field format into proper date format that has date as TEXT](https://discuss.elastic.co/t/changing-field-format-into-proper-date-format-that-has-date-as-text/192736)
**Author:** [@zatom](https://discuss.elastic.co/u/zatom)\ **Replies:** 5\ **Last updated:** [July 29, 2019, 6:31pm UTC](https://discuss.elastic.co/t/changing-field-format-into-proper-date-format-that-has-date-as-text/192736 "2019-07-29T18:31:06Z")
hi, I currently have a field that is in this text format ( some field has "2019/03/25 00:00:00.000" and some docs in same field has "20190619"). I changed the mapping for the field as DATE (yyyy/MM/dd HH:mm:ss.SSSZZ), bu… --- ## [How to read off .mbtiles world map on Kibana](https://discuss.elastic.co/t/how-to-read-off-mbtiles-world-map-on-kibana/192592)
**Author:** [@Pikapi](https://discuss.elastic.co/u/Pikapi)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 6:02pm UTC](https://discuss.elastic.co/t/how-to-read-off-mbtiles-world-map-on-kibana/192592 "2019-07-29T18:02:25Z")
Trying to get Kibana's world map read off a .mbtiles world map which I understand has to be locally hosted. Anyone knows how to Create a locally hosted map server which my .mbtiles world map can be uploaded to it and ha… --- ## [Error on: Unable to bulk upload the stats payload to the local cluster](https://discuss.elastic.co/t/error-on-unable-to-bulk-upload-the-stats-payload-to-the-local-cluster/192663)
**Author:** [@jrplus](https://discuss.elastic.co/u/jrplus)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 5:54pm UTC](https://discuss.elastic.co/t/error-on-unable-to-bulk-upload-the-stats-payload-to-the-local-cluster/192663 "2019-07-29T17:54:50Z")
Faced the below problem: log \[09:42:06.246\] \[warning\]\[kibana-monitoring\]\[monitoring-ui\] \[export\_exception\] failed to flush export bulks :: {"path":"/\_monitoring/bulk","query":{"system\_id":"kibana","system\_api\_version… --- ## [Newbie question on adding data](https://discuss.elastic.co/t/newbie-question-on-adding-data/192743)
**Author:** [@elasticHT](https://discuss.elastic.co/u/elasticHT)\ **Replies:** 2\ **Last updated:** [July 29, 2019, 5:52pm UTC](https://discuss.elastic.co/t/newbie-question-on-adding-data/192743 "2019-07-29T17:52:50Z")
I am getting an error trying to add values to an index I created. My index is just a listing of companies, what type of texting they offer (SMS, MMS, etc.), the URL, and the date created. Here's the index I created: MA… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1993) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1995)