# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1542 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1543 --- ## [Elastic machine learning on a different node but same server](https://discuss.elastic.co/t/elastic-machine-learning-on-a-different-node-but-same-server/264314)
**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\ **Replies:** 5\ **Last updated:** [February 22, 2021, 3:03pm UTC](https://discuss.elastic.co/t/elastic-machine-learning-on-a-different-node-but-same-server/264314 "2021-02-22T15:03:50Z")
Hi, I'm thinking about running two containers: elasticsearch master/data/ingest/ node -\> container A elasticsearch machine learning -\> container B but they must run on the same server. I think there might be two appr… --- ## [Kibana Date Histogram restricting date on graph](https://discuss.elastic.co/t/kibana-date-histogram-restricting-date-on-graph/264098)
**Author:** [@Ganesh\_Rao\_B](https://discuss.elastic.co/u/Ganesh_Rao_B)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 3:01pm UTC](https://discuss.elastic.co/t/kibana-date-histogram-restricting-date-on-graph/264098 "2021-02-22T15:01:01Z")
I am using Kibana visualization 'vertical bar'. In Vertical bar on x-axis i am using Date histogram and x axis minimum interval is given monthly . Data is shown in Vertical bar but its overlapped ,because X axis is shown… --- ## [TSVB Time filter question](https://discuss.elastic.co/t/tsvb-time-filter-question/264095)
**Author:** [@Vincent\_Vanclef](https://discuss.elastic.co/u/Vincent_Vanclef)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 2:50pm UTC](https://discuss.elastic.co/t/tsvb-time-filter-question/264095 "2021-02-22T14:50:48Z")
I've tried finding some documentation on it, but how does the TSVB visualization calculcate its aggregation? Especially a simple "count". It shows way too high data count compared to the total documents: I am just try… --- ## [Aggregations: sort by mutliple terms](https://discuss.elastic.co/t/aggregations-sort-by-mutliple-terms/265081)
**Author:** [@Douglas\_Leister](https://discuss.elastic.co/u/Douglas_Leister)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 2:38pm UTC](https://discuss.elastic.co/t/aggregations-sort-by-mutliple-terms/265081 "2021-02-22T14:38:04Z")
I have a mapping of businesses, for which I am using an aggregation to calculate average ratings for the businesses grouped by business id. Sorting the aggregation by business id or average rating works fine. My issue… --- ## [Colourful bullets in Discover section](https://discuss.elastic.co/t/colourful-bullets-in-discover-section/265062)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 6\ **Last updated:** [February 22, 2021, 2:35pm UTC](https://discuss.elastic.co/t/colourful-bullets-in-discover-section/265062 "2021-02-22T14:35:56Z")
Can we show the following image like bullets for particular entries? For example, I have a field to show the 'Priority' of a log such as HIGH, CRITICAL, LOW. I want to show a red bullet when priority is CRITICAL, orange … --- ## [Reading from specific index under alias](https://discuss.elastic.co/t/reading-from-specific-index-under-alias/265079)
**Author:** [@b\_bal](https://discuss.elastic.co/u/b_bal)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 2:35pm UTC](https://discuss.elastic.co/t/reading-from-specific-index-under-alias/265079 "2021-02-22T14:35:17Z")
Hello! I have different indices named myindex-. Every night a new index is created(with a different number), so we use an alias(myalias) to keep track of the index that contains the most recent documents. Under that al… --- ## [Help me understand Elasticsearch structure](https://discuss.elastic.co/t/help-me-understand-elasticsearch-structure/264859)
**Author:** [@butaminas](https://discuss.elastic.co/u/butaminas)\ **Replies:** 5\ **Last updated:** [February 22, 2021, 2:31pm UTC](https://discuss.elastic.co/t/help-me-understand-elasticsearch-structure/264859 "2021-02-22T14:31:57Z")
I'm new to Elasticsearch and I've been reading and playing around with it a lot lately but I still can't understand one thing and am hoping to find the answer here. From my understanding, Elasticsearch is not something … --- ## [Elasticsearch not starting after UID and GID change](https://discuss.elastic.co/t/elasticsearch-not-starting-after-uid-and-gid-change/265054)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 6\ **Last updated:** [February 22, 2021, 2:31pm UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-uid-and-gid-change/265054 "2021-02-22T14:31:23Z")
Hello! I have a cluster of 2 nodes and I wanted to do the snapshot by setting up the NFS server and a directory as the repository. I had read that all nodes should have the same UID and GID. Thus, I changed them using co… --- ## [Data is showing wrong when i add some nested fields](https://discuss.elastic.co/t/data-is-showing-wrong-when-i-add-some-nested-fields/263748)
**Author:** [@Juan\_Alvarez](https://discuss.elastic.co/u/Juan_Alvarez)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 2:30pm UTC](https://discuss.elastic.co/t/data-is-showing-wrong-when-i-add-some-nested-fields/263748 "2021-02-22T14:30:48Z")
hello, i need help to visualiza the next json: { "\_index": "signaturetrace", "\_type": "\_doc", "\_id": "pFVCUHcBaUOzInAquLbu", "\_version": 17, "\_score": null, "\_source": { "contractId": "baeb4e31-56a8-4b4e-32a3-08d856… --- ## [Cors in Kibana](https://discuss.elastic.co/t/cors-in-kibana/264575)
**Author:** [@seba\_galban](https://discuss.elastic.co/u/seba_galban)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 2:27pm UTC](https://discuss.elastic.co/t/cors-in-kibana/264575 "2021-02-22T14:27:33Z")
Hi Everyone, We have a problem when we want to get the cookie from Kibana 7.10.0. We have two scenarios: If we don´t use the credentials: true, In the header response we have the set-cookie attribute but the browser… --- ## [Logstash mutate rename](https://discuss.elastic.co/t/logstash-mutate-rename/265043)
**Author:** [@Jokie74](https://discuss.elastic.co/u/Jokie74)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 2:25pm UTC](https://discuss.elastic.co/t/logstash-mutate-rename/265043 "2021-02-22T14:25:08Z")
hello dear community, I have a question about the "mutate rename" filter option. In my logstash filter I have this: mutate { rename =\> { "\[fields\]\[host\]\[name\]" =\> "\[host\]\[name\]" … --- ## [Help with configurring cross cluster on 2 kubenrtes vms](https://discuss.elastic.co/t/help-with-configurring-cross-cluster-on-2-kubenrtes-vms/263759)
**Author:** [@Naomi](https://discuss.elastic.co/u/Naomi)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 2:23pm UTC](https://discuss.elastic.co/t/help-with-configurring-cross-cluster-on-2-kubenrtes-vms/263759 "2021-02-22T14:23:39Z")
I tried to configure a cross cluster for 2 elastic 7.10.2 clusters on 2 different kubenrtes vm I configure a node port for one elastic to enable connection like below: elasticsearch-client NodePort 10.1111.… --- ## [Script on nested fileds](https://discuss.elastic.co/t/script-on-nested-fileds/263389)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 2:18pm UTC](https://discuss.elastic.co/t/script-on-nested-fileds/263389 "2021-02-22T14:18:30Z")
hi all and sorry for my poor english . I have an index with this mapping "mappings":{ "properties":{ "\_class":{ "type": "text", "fields":{"keyword":{"type": "keyword", "ignore\_above": … --- ## [Metricbeat configuration file from package repository is always detected as changed and stops auto upgrade process](https://discuss.elastic.co/t/metricbeat-configuration-file-from-package-repository-is-always-detected-as-changed-and-stops-auto-upgrade-process/265077)
**Author:** [@Jorge\_Correa](https://discuss.elastic.co/u/Jorge_Correa)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 2:17pm UTC](https://discuss.elastic.co/t/metricbeat-configuration-file-from-package-repository-is-always-detected-as-changed-and-stops-auto-upgrade-process/265077 "2021-02-22T14:17:23Z")
I'm using metricbeat installed from APT repository in Ubuntu. I've all hosts configured to auto upgrade packages (for example, with rules in unattended-upgrades). However, on every upgrade of metricbeat, even though mino… --- ## [Get Akamai SIEM logs to ELK](https://discuss.elastic.co/t/get-akamai-siem-logs-to-elk/265075)
**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 2:11pm UTC](https://discuss.elastic.co/t/get-akamai-siem-logs-to-elk/265075 "2021-02-22T14:11:54Z")
Hi, We want to ingest SIEM logs from akamai to Logstash, then Elasticsearch. To access SIEM logs, we have created akamai API credentials and have gotten SIEM connector details. They include: client\_secret = host = xy… --- ## [Painless processor add field and set name from variable](https://discuss.elastic.co/t/painless-processor-add-field-and-set-name-from-variable/265074)
**Author:** [@ella.danielsson](https://discuss.elastic.co/u/ella.danielsson)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 2:11pm UTC](https://discuss.elastic.co/t/painless-processor-add-field-and-set-name-from-variable/265074 "2021-02-22T14:11:41Z")
Hi, I'm trying to use a painless script processor to split the content of a field and use the result of the split to add new fields to the document. The problem is that I can't figure out how to set a new field, the nam… --- ## [Kibana "Goal" Visual - how to make the end of the scale dynamic](https://discuss.elastic.co/t/kibana-goal-visual-how-to-make-the-end-of-the-scale-dynamic/264686)
**Author:** [@luca.scarpato](https://discuss.elastic.co/u/luca.scarpato)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 2:04pm UTC](https://discuss.elastic.co/t/kibana-goal-visual-how-to-make-the-end-of-the-scale-dynamic/264686 "2021-02-22T14:04:42Z")
Dear Kibana & ES team, We are trying to use the Kibana Goal Visual to represents a proportion of a metrics over its total. E.g. Newly Received Emails / Total of Emails E.g. 16,700 new emails / 100,000 of total emails … --- ## [Unrecognized scale name: "child\_layer\_0\_y" error for facet dual charts](https://discuss.elastic.co/t/unrecognized-scale-name-child-layer-0-y-error-for-facet-dual-charts/263117)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 1:59pm UTC](https://discuss.elastic.co/t/unrecognized-scale-name-child-layer-0-y-error-for-facet-dual-charts/263117 "2021-02-22T13:59:31Z")
{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "data":{ "url": "data/cars.json" }, "facet":{ "column": { "field":"Origin", "type": "nominal" … --- ## [Upgrade to Kibana 7.11 results in 'Unexpected token \< in JSON at position 0' for eaggs](https://discuss.elastic.co/t/upgrade-to-kibana-7-11-results-in-unexpected-token-in-json-at-position-0-for-eaggs/264707)
**Author:** [@commandline](https://discuss.elastic.co/u/commandline)\ **Replies:** 6\ **Last updated:** [February 22, 2021, 1:53pm UTC](https://discuss.elastic.co/t/upgrade-to-kibana-7-11-results-in-unexpected-token-in-json-at-position-0-for-eaggs/264707 "2021-02-22T13:53:16Z")
Following an upgrade to 7.11 for elasticsearch and kibana there now appear many Error states on dashboard panels. Inspect shows the response for the request to be { “message”: “Unexpected token \< in JSON at position 0… --- ## [How to create visualization for displaying top requests which has maximum response time in Kibana Holmes](https://discuss.elastic.co/t/how-to-create-visualization-for-displaying-top-requests-which-has-maximum-response-time-in-kibana-holmes/263600)
**Author:** [@mskar](https://discuss.elastic.co/u/mskar)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 1:52pm UTC](https://discuss.elastic.co/t/how-to-create-visualization-for-displaying-top-requests-which-has-maximum-response-time-in-kibana-holmes/263600 "2021-02-22T13:52:51Z")
Hello, Could you please share how to configure visualization for displaying top requests which has average/maximum response time in Kibana Holmes. Also i couldn't find fields such as reponseTime, bytes or time in the i… --- ## [Snapshot: repository\_verification\_exception](https://discuss.elastic.co/t/snapshot-repository-verification-exception/265059)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 1:52pm UTC](https://discuss.elastic.co/t/snapshot-repository-verification-exception/265059 "2021-02-22T13:52:29Z")
Hi! I am trying to do a snapshot for my cluster including 2 nodes. I have a shared file on both of my nodes. node-1 as an NFS server and node-2 as the client. if I add a file to the specified shared directory which is /v… --- ## [File realm users and cluster state size](https://discuss.elastic.co/t/file-realm-users-and-cluster-state-size/265050)
**Author:** [@zvonimir](https://discuss.elastic.co/u/zvonimir)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 1:47pm UTC](https://discuss.elastic.co/t/file-realm-users-and-cluster-state-size/265050 "2021-02-22T13:47:37Z")
Hi. Question about file realm authentication in Elasticsearch... My cluster is deployed in Docker and every time I am deploying changes I recreate containers and on each node execute command for adding user to file real… --- ## [Unable to access kibana console](https://discuss.elastic.co/t/unable-to-access-kibana-console/263734)
**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 1:47pm UTC](https://discuss.elastic.co/t/unable-to-access-kibana-console/263734 "2021-02-22T13:47:23Z")
Hi Team, We have been using EFK stack in our environment from many months( Elasticserach, kibana verison is 7.4, Xpack security also enabled, used helm method for installation) and able to access the kibana console. No… --- ## [Filter metrics of each gridded cell](https://discuss.elastic.co/t/filter-metrics-of-each-gridded-cell/264660)
**Author:** [@Matthias3033](https://discuss.elastic.co/u/Matthias3033)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 1:39pm UTC](https://discuss.elastic.co/t/filter-metrics-of-each-gridded-cell/264660 "2021-02-22T13:39:24Z")
Hello, I have the following question: I have created a layer with clusters & grids where GPS data is grouped into grid cells. Now I would like to filter these grid cells by counts, i.e. I would like to know how many dat… --- ## [Phrase Suggester Returns Suggestions from Deleted Documents as of 7.0.0](https://discuss.elastic.co/t/phrase-suggester-returns-suggestions-from-deleted-documents-as-of-7-0-0/265068)
**Author:** [@bencody](https://discuss.elastic.co/u/bencody)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 1:39pm UTC](https://discuss.elastic.co/t/phrase-suggester-returns-suggestions-from-deleted-documents-as-of-7-0-0/265068 "2021-02-22T13:39:20Z")
Issue As of Elasticsearch 7.0.0, the Phrase Suggester returns suggestions of deleted documents. I assume this is a bug. However, the documentation on Suggesters | Elasticsearch Reference \[7.11\] | Elastic does not state… --- ## [\[s3-repository\] path is not accessible on master node](https://discuss.elastic.co/t/s3-repository-path-is-not-accessible-on-master-node/264942)
**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Replies:** 5\ **Last updated:** [February 22, 2021, 1:15pm UTC](https://discuss.elastic.co/t/s3-repository-path-is-not-accessible-on-master-node/264942 "2021-02-22T13:15:01Z")
Hello Team, We are trying to configure the snapshot of indices and store over S3 bucket. But we are facing issue when we are trying to configure repository. We are using 3 node cluster and we instlled the repository-s3 … --- ## [Schedule a Job in Elasticsearch](https://discuss.elastic.co/t/schedule-a-job-in-elasticsearch/265032)
**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\ **Replies:** 9\ **Last updated:** [February 22, 2021, 12:56pm UTC](https://discuss.elastic.co/t/schedule-a-job-in-elasticsearch/265032 "2021-02-22T12:56:32Z")
Hi, is it possible to schedule a job in elasticsearch and save it? My requirements are that the team only wants to keep certain messages after xy days to reduce the storage capacity. Can i realize it with rollover, il… --- ## [Can I add dynamic index mapping from Logstash](https://discuss.elastic.co/t/can-i-add-dynamic-index-mapping-from-logstash/264674)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 11:51am UTC](https://discuss.elastic.co/t/can-i-add-dynamic-index-mapping-from-logstash/264674 "2021-02-22T11:51:03Z")
I am creating index dynamically(e.g wallet-tx-customer-%{+YYYY.MM}) from Logstash. For some field I am getting an error mapper \[usd\] cannot be changed from type \[long\] to \[float\] and that event doesn't get indexed. I wa… --- ## [Use Enrich policy and enrich pipeline processor to check secondary index and update a value](https://discuss.elastic.co/t/use-enrich-policy-and-enrich-pipeline-processor-to-check-secondary-index-and-update-a-value/264840)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 11:47am UTC](https://discuss.elastic.co/t/use-enrich-policy-and-enrich-pipeline-processor-to-check-secondary-index-and-update-a-value/264840 "2021-02-22T11:47:43Z")
So i have 2 indexes, A which is periodically updated and contains docs with two fields which are email and reviewed. My second index B has lots of fields including email and reviewed, this index im constantly adding to. … --- ## [Azure Activity Logs in Elastic](https://discuss.elastic.co/t/azure-activity-logs-in-elastic/264856)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 11:28am UTC](https://discuss.elastic.co/t/azure-activity-logs-in-elastic/264856 "2021-02-22T11:28:59Z")
Hi, currently we are tryting to ship logs from azure eventhub to logstash. We use this: Azure Event Hubs plugin | Logstash Reference \[7.11\] | Elastic to forward the logs to elastic cluster. As far as I have learnt from… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1541) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1543)