# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1147 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1148 --- ## [Kibana CSV report show '(empty)' word instead of empty value.](https://discuss.elastic.co/t/kibana-csv-report-show-empty-word-instead-of-empty-value/290375)
**Author:** [@Pitchaya\_Thipkham](https://discuss.elastic.co/u/Pitchaya_Thipkham)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 5:13pm UTC](https://discuss.elastic.co/t/kibana-csv-report-show-empty-word-instead-of-empty-value/290375 "2021-11-29T17:13:34Z")
Hi,I'm using kibana 7.15 and I've created a scripted field that return empty string \> "" Then I create a report and download it, My CSV report show "(empty)" words. How can I do if I want them to be empty value? I've tri… --- ## [Exec input](https://discuss.elastic.co/t/exec-input/290463)
**Author:** [@lnunez](https://discuss.elastic.co/u/lnunez)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 4:54pm UTC](https://discuss.elastic.co/t/exec-input/290463 "2021-11-29T16:54:47Z")
Hi everyone, Just to keep the consistency between the input, I realized that is not possible to just execute manually a pipeline with an exec input without a schedule definition. This is allowed using the JDBC input or … --- ## [Jolokia Module Event Field Does not Work](https://discuss.elastic.co/t/jolokia-module-event-field-does-not-work/290464)
**Author:** [@chrismuzyn](https://discuss.elastic.co/u/chrismuzyn)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 4:44pm UTC](https://discuss.elastic.co/t/jolokia-module-event-field-does-not-work/290464 "2021-11-29T16:44:30Z")
Hi Everyone, We are using Metricbeat's Jolokia plugin to autodiscover and then query Jolokia for several metrics from different mbeans. Per the documentation here: The event setting is optional. Use this setting to g… --- ## [Keystore is not possible used in a pipeline after enabling centralized managment](https://discuss.elastic.co/t/keystore-is-not-possible-used-in-a-pipeline-after-enabling-centralized-managment/288641)
**Author:** [@lnunez](https://discuss.elastic.co/u/lnunez)\ **Replies:** 2\ **Last updated:** [November 29, 2021, 4:33pm UTC](https://discuss.elastic.co/t/keystore-is-not-possible-used-in-a-pipeline-after-enabling-centralized-managment/288641 "2021-11-29T16:33:00Z")
Related with: if is enabled the centralized management pipeline, it will deactivated the path settings to be used in cmd, but some pipeline, could have some key-value from the keystore, and as is deactivated the "--pat… --- ## [Unable to send alerts using custom webhook in the scheduled interval from Kibana, but test message works](https://discuss.elastic.co/t/unable-to-send-alerts-using-custom-webhook-in-the-scheduled-interval-from-kibana-but-test-message-works/290328)
**Author:** [@MuthulakshmiS](https://discuss.elastic.co/u/MuthulakshmiS)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 4:17pm UTC](https://discuss.elastic.co/t/unable-to-send-alerts-using-custom-webhook-in-the-scheduled-interval-from-kibana-but-test-message-works/290328 "2021-11-29T16:17:43Z")
Hi Team, I have configured a monitor in Kibana and scheduled it to trigger the action of sending a POST request to a custom webhook every 1 minute. I could connect to the webhook when sending a test message while config… --- ## [Can elastic search used as :- along with view data as visualization, option to download those data shown on the dash board](https://discuss.elastic.co/t/can-elastic-search-used-as-along-with-view-data-as-visualization-option-to-download-those-data-shown-on-the-dash-board/290294)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 4:14pm UTC](https://discuss.elastic.co/t/can-elastic-search-used-as-along-with-view-data-as-visualization-option-to-download-those-data-shown-on-the-dash-board/290294 "2021-11-29T16:14:20Z")
Hi All, Good evening, it has been long time since I got an opportunity to use Elasticsearch, now I am trying to propose Elastic Search to (a) visualize the data (b) and providing options to download the visualized dat… --- ## [Create an alert based on a filter ratio TSVB](https://discuss.elastic.co/t/create-an-alert-based-on-a-filter-ratio-tsvb/290174)
**Author:** [@hben](https://discuss.elastic.co/u/hben)\ **Replies:** 2\ **Last updated:** [November 29, 2021, 3:54pm UTC](https://discuss.elastic.co/t/create-an-alert-based-on-a-filter-ratio-tsvb/290174 "2021-11-29T15:54:19Z")
Hi, I got a dashboard with a filter ratio in it and I need to convert it into an alert, how can I do it? --- ## [Hide a specific visualisation when a filter is introduced in dashboard](https://discuss.elastic.co/t/hide-a-specific-visualisation-when-a-filter-is-introduced-in-dashboard/290393)
**Author:** [@Mani5189](https://discuss.elastic.co/u/Mani5189)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 2:02pm UTC](https://discuss.elastic.co/t/hide-a-specific-visualisation-when-a-filter-is-introduced-in-dashboard/290393 "2021-11-29T14:02:53Z")
Hi, Lets say I have added 2 visualisation in a dashboard. line graph data table When i filter a value from data table, the line graph becomes empty. In this case, How to hide line graph completely ? --- ## [Elasticsearch aggregation on array field with in a range](https://discuss.elastic.co/t/elasticsearch-aggregation-on-array-field-with-in-a-range/290031)
**Author:** [@jiajun](https://discuss.elastic.co/u/jiajun)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 1:35pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-on-array-field-with-in-a-range/290031 "2021-11-29T13:35:05Z")
I'm going to perform a count aggregation on an array field by filtering the values in a range. For example, I have following 3 documents and I want to find out value counts for purchase\_date\_list that are between 2021010… --- ## [Unable to Tessellate shape](https://discuss.elastic.co/t/unable-to-tessellate-shape/290384)
**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\ **Replies:** 5\ **Last updated:** [November 29, 2021, 12:09pm UTC](https://discuss.elastic.co/t/unable-to-tessellate-shape/290384 "2021-11-29T12:09:59Z")
when i ingest geo\_shape data to ES, it shows this kind of error elasticsearch.helpers.errors.BulkIndexError: ('1 document(s) failed to index.', \[{'index': {'\_index': 'spx\_id\_station\_zone\_detail\_di\_test', '\_type': '\_doc'… --- ## [How to use offset in table metrics](https://discuss.elastic.co/t/how-to-use-offset-in-table-metrics/290432)
**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 11:54am UTC](https://discuss.elastic.co/t/how-to-use-offset-in-table-metrics/290432 "2021-11-29T11:54:56Z")
i want to get the count of current hour, the hour of yesterday and the hour of 7 days ago. Here is the table i need. how to set offset in input json? --- ## [How to get text field size](https://discuss.elastic.co/t/how-to-get-text-field-size/290350)
**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 11:50am UTC](https://discuss.elastic.co/t/how-to-get-text-field-size/290350 "2021-11-29T11:50:17Z")
when i run this script : GET shopee\_smart\_sorting\_my\_db\_\_address\_match\_result\_tab\*/\_search { "script\_fields": { "full\_name": { "script": { "lang": "painless", "source": """ if (par… --- ## [Doc\_count value is mismatching when size is change](https://discuss.elastic.co/t/doc-count-value-is-mismatching-when-size-is-change/290053)
**Author:** [@nishar](https://discuss.elastic.co/u/nishar)\ **Replies:** 4\ **Last updated:** [November 29, 2021, 11:34am UTC](https://discuss.elastic.co/t/doc-count-value-is-mismatching-when-size-is-change/290053 "2021-11-29T11:34:09Z")
If we change size field in aggregations, doc\_count is mismatch. --- ## [Downgrade Elastic Search](https://discuss.elastic.co/t/downgrade-elastic-search/289286)
**Author:** [@Y\_MN](https://discuss.elastic.co/u/Y_MN)\ **Replies:** 8\ **Last updated:** [November 29, 2021, 11:03am UTC](https://discuss.elastic.co/t/downgrade-elastic-search/289286 "2021-11-29T11:03:48Z")
I need to upgrade ES from 7.10.2 to 7.14.1, and if something goes wrong, can I automatically roll back to the previous version? --- ## [Disable metrics logging in Elastic Agent managed by Fleet](https://discuss.elastic.co/t/disable-metrics-logging-in-elastic-agent-managed-by-fleet/290420)
**Author:** [@nugroho-expereo](https://discuss.elastic.co/u/nugroho-expereo)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 10:28am UTC](https://discuss.elastic.co/t/disable-metrics-logging-in-elastic-agent-managed-by-fleet/290420 "2021-11-29T10:28:39Z")
Hi All, We use Fleet managed Elastic Agent and have a lot of "Non-zero metrics in the last 30s" in our log that we want to remove. Is there a way to disable that logging? I see there is a new option in standalone elas… --- ## [Different .kibana\_\* indices After upgrading](https://discuss.elastic.co/t/different-kibana-indices-after-upgrading/289912)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 4\ **Last updated:** [November 29, 2021, 9:42am UTC](https://discuss.elastic.co/t/different-kibana-indices-after-upgrading/289912 "2021-11-29T09:42:30Z")
Upgrade ELK stack from 7.13 to 7.15 I checked /\_cat/indices/.kibana?v\* health status index uuid pri rep docs.count docs.deleted store.size pri.store.size green open .kiban… --- ## [Anomaly on specific value (0)](https://discuss.elastic.co/t/anomaly-on-specific-value-0/290400)
**Author:** [@zangero98](https://discuss.elastic.co/u/zangero98)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 9:41am UTC](https://discuss.elastic.co/t/anomaly-on-specific-value-0/290400 "2021-11-29T09:41:12Z")
hello guys, (1) I want to make alerts with machine learning when a specific log source don't send any logs for 10 minutes (availability job). I tried it with low count and custom rules but there always showed up anomali… --- ## [Elasticserach not starting](https://discuss.elastic.co/t/elasticserach-not-starting/289965)
**Author:** [@zanoob](https://discuss.elastic.co/u/zanoob)\ **Replies:** 8\ **Last updated:** [November 29, 2021, 9:38am UTC](https://discuss.elastic.co/t/elasticserach-not-starting/289965 "2021-11-29T09:38:50Z")
One of my Elasticsearch nodes stopped the service and moved the master to another node. The logs do not show much info, why but rather just say master moved to a different node. \[2021-11-23T13:57:21,216\]\[INFO \]\[o.e.n.N… --- ## [Filebeat multiline pattern](https://discuss.elastic.co/t/filebeat-multiline-pattern/290414)
**Author:** [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 9:36am UTC](https://discuss.elastic.co/t/filebeat-multiline-pattern/290414 "2021-11-29T09:36:51Z")
There are stacktrace starting with three different pattern:- 1-\[ERROR\] 2- \[ERROR\] 3-ERROR or 2021-11-26 00:01:20.563 what should be the multiline pattern for parsing lines or stack trace starting with above different… --- ## [Elastic stack rules](https://discuss.elastic.co/t/elastic-stack-rules/290413)
**Author:** [@oliviawang](https://discuss.elastic.co/u/oliviawang)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 9:31am UTC](https://discuss.elastic.co/t/elastic-stack-rules/290413 "2021-11-29T09:31:52Z")
Hi All, According to the document, I want to receive the notification only on status change, and already setting notify field for Only on Status change , but still receive a lot of same alerts.. Does any one have some … --- ## [Two different date formats from logs. Handle with one multiline.pattern?](https://discuss.elastic.co/t/two-different-date-formats-from-logs-handle-with-one-multiline-pattern/290402)
**Author:** [@alexander.jansson](https://discuss.elastic.co/u/alexander.jansson)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 8:19am UTC](https://discuss.elastic.co/t/two-different-date-formats-from-logs-handle-with-one-multiline-pattern/290402 "2021-11-29T08:19:01Z")
Hi, I'm trying to match two different time formats within different application logs (two out of five use ISO8601, the other three DD-MM-YYYY HH:mm:ss,mmm. I figured I'd be able to solve it like this: multiline.patt… --- ## [Template mapping with one field](https://discuss.elastic.co/t/template-mapping-with-one-field/290311)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 2\ **Last updated:** [November 29, 2021, 7:18am UTC](https://discuss.elastic.co/t/template-mapping-with-one-field/290311 "2021-11-29T07:18:41Z")
Hi Experts, We are using multi fields Template mapping for some fields. example:- we are using attribute1 to attribute15 fields...for this we are set mapping for all individual fields with same property and data type. N… --- ## [Icinga integration with ELK](https://discuss.elastic.co/t/icinga-integration-with-elk/290397)
**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 7:10am UTC](https://discuss.elastic.co/t/icinga-integration-with-elk/290397 "2021-11-29T07:10:58Z")
Hello All / @widhalm\_t I need your suggestion/assistance here to send the logstash logs to Icinga for monitoring purpose. Let me explain you my environment and scenario. We are using ubuntu 20.4 I have ELK stack runn… --- ## [Bulk vs Single operations for 1 document](https://discuss.elastic.co/t/bulk-vs-single-operations-for-1-document/289522)
**Author:** [@LinHuiqing](https://discuss.elastic.co/u/LinHuiqing)\ **Replies:** 4\ **Last updated:** [November 29, 2021, 6:45am UTC](https://discuss.elastic.co/t/bulk-vs-single-operations-for-1-document/289522 "2021-11-29T06:45:09Z")
Hi, I understand that using bulk operations when there are many operations to be made brings performance benefits based on forums and documentation. However, how does a bulk operation with a single operation compare to s… --- ## ["include\_in\_root" option with wildcard field causes "illegal\_argument\_exception"](https://discuss.elastic.co/t/include-in-root-option-with-wildcard-field-causes-illegal-argument-exception/290353)
**Author:** [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)\ **Replies:** 2\ **Last updated:** [November 29, 2021, 6:11am UTC](https://discuss.elastic.co/t/include-in-root-option-with-wildcard-field-causes-illegal-argument-exception/290353 "2021-11-29T06:11:43Z")
Hello, I tried to use "include\_in\_root" option with nesting wildcard field but got error. The Elasticsearch version is as follows: "version" : { "number" : "7.15.2", "build\_flavor" : "default", "build\_type… --- ## [Synonyms relevance help](https://discuss.elastic.co/t/synonyms-relevance-help/290172)
**Author:** [@sagarpatel](https://discuss.elastic.co/u/sagarpatel)\ **Replies:** 6\ **Last updated:** [November 29, 2021, 5:38am UTC](https://discuss.elastic.co/t/synonyms-relevance-help/290172 "2021-11-29T05:38:40Z")
HI, I am trying to configured synonyms in Elasticsearch and done the sample configuration as well. But not getting expected relevancy when i am searching data. Below is index Mapping configuration: PUT /test\_index { … --- ## [Rally Benchmark - Which race/benchmark to use for performance testing](https://discuss.elastic.co/t/rally-benchmark-which-race-benchmark-to-use-for-performance-testing/289994)
**Author:** [@mmadhana](https://discuss.elastic.co/u/mmadhana)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 4:55am UTC](https://discuss.elastic.co/t/rally-benchmark-which-race-benchmark-to-use-for-performance-testing/289994 "2021-11-29T04:55:57Z")
Hi, I am using Rally on ECK to test the performance of my hardware - CPU cores/memory, storage, and network usage. Which benchmark/race is compute-intensive and has a mix of indexing and concurrent search workload? I use… --- ## [Reading data from MS-SQL](https://discuss.elastic.co/t/reading-data-from-ms-sql/290391)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 4:49am UTC](https://discuss.elastic.co/t/reading-data-from-ms-sql/290391 "2021-11-29T04:49:11Z")
Dear All, Good morning I am trying to configure ES Kibana to read the data from MS-SQL to the Kibana dashboard, on the option of "adding data", we can see the option of "Microsoft SQL Server Metrics " , this option gi… --- ## [Human Readable Duration - Remove Day Format](https://discuss.elastic.co/t/human-readable-duration-remove-day-format/290108)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 10\ **Last updated:** [November 29, 2021, 4:48am UTC](https://discuss.elastic.co/t/human-readable-duration-remove-day-format/290108 "2021-11-29T04:48:39Z")
Hi, I would like to use the human-readable duration but report seconds, minutes and hours only. For example, I want to see 24 hours instead of 1 day. Is this possible? Thanks in advance, Matt --- ## [Elastic support diagnostics, Scrub.bat -c parameter](https://discuss.elastic.co/t/elastic-support-diagnostics-scrub-bat-c-parameter/290254)
**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\ **Replies:** 1\ **Last updated:** [November 29, 2021, 4:46am UTC](https://discuss.elastic.co/t/elastic-support-diagnostics-scrub-bat-c-parameter/290254 "2021-11-29T04:46:54Z")
Contains an example /scrub.sh -i '/Users/adminuser/diagnostic output/diagnostics-20180621-161231.zip' -o /home/adminuser/sanitized-diags -c /home/adminuser/sanitized-diags/scrub.yml What is the -c parameter? scrub.b… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1146) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1148)