# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1681 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1682 --- ## [Kibana training - looking for advanced users materials](https://discuss.elastic.co/t/kibana-training-looking-for-advanced-users-materials/256418)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 2\ **Last updated:** [November 24, 2020, 12:01am UTC](https://discuss.elastic.co/t/kibana-training-looking-for-advanced-users-materials/256418 "2020-11-24T00:01:11Z")
Hey All, Looking for Kibana training materials for advanced users. What can you recommend? Thank you! --- ## [Able to attach more than one ILM policy to an index](https://discuss.elastic.co/t/able-to-attach-more-than-one-ilm-policy-to-an-index/256419)
**Author:** [@sknayar](https://discuss.elastic.co/u/sknayar)\ **Replies:** 2\ **Last updated:** [November 24, 2020, 12:00am UTC](https://discuss.elastic.co/t/able-to-attach-more-than-one-ilm-policy-to-an-index/256419 "2020-11-24T00:00:02Z")
Once an index started moving through the phases of an ILM policy I can attach a second policy to the same index. Once this happens I cannot remove ILM policy from the index. I was able to attach the original policy back… --- ## [Master Vs Data Node selection](https://discuss.elastic.co/t/master-vs-data-node-selection/256414)
**Author:** [@AChopra](https://discuss.elastic.co/u/AChopra)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 11:06pm UTC](https://discuss.elastic.co/t/master-vs-data-node-selection/256414 "2020-11-23T23:06:03Z")
I have an oracle 11g instance which roughly has around 5TB of data on it. I plan to use the ELK stack .. use logstash to pump data onto elasticsearch and then use my java application to connect to the elasticsearch and … --- ## [Boost only if multiple criteria are met](https://discuss.elastic.co/t/boost-only-if-multiple-criteria-are-met/256412)
**Author:** [@felipeecst](https://discuss.elastic.co/u/felipeecst)\ **Replies:** 0\ **Last updated:** [November 23, 2020, 9:59pm UTC](https://discuss.elastic.co/t/boost-only-if-multiple-criteria-are-met/256412 "2020-11-23T21:59:07Z")
I have the following ElasticSearch query: query: { bool: { must: \[ { match\_all: {} } \], should: \[ { term: { company: { value: 'company', … --- ## [Snapshot automation - ES Version 5.2](https://discuss.elastic.co/t/snapshot-automation-es-version-5-2/256386)
**Author:** [@chateesh](https://discuss.elastic.co/u/chateesh)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 9:58pm UTC](https://discuss.elastic.co/t/snapshot-automation-es-version-5-2/256386 "2020-11-23T21:58:29Z")
Hi Team, I'm trying to automate snapshots creation and deletion using "snapshot life cycle management", how ever when I tried to run create slm policy using API POST \_slm/policy, I'm getting error as below {"error":{"r… --- ## [Migrating Elasticsearch cluster (elastic.co) to another region](https://discuss.elastic.co/t/migrating-elasticsearch-cluster-elastic-co-to-another-region/256328)
**Author:** [@Chen\_Levi](https://discuss.elastic.co/u/Chen_Levi)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 9:51pm UTC](https://discuss.elastic.co/t/migrating-elasticsearch-cluster-elastic-co-to-another-region/256328 "2020-11-23T21:51:35Z")
Hi We have an ElasticSearch cluster on ElastiCloud on one region and we want to migrate it to another region. we saw there are few options of doing so, and one of them which seems to be the easiest was do it using Snap… --- ## [Elasticsearch 7.10.0 not start Ubuntu 20.04](https://discuss.elastic.co/t/elasticsearch-7-10-0-not-start-ubuntu-20-04/256329)
**Author:** [@Pete\_Watcharawit](https://discuss.elastic.co/u/Pete_Watcharawit)\ **Replies:** 7\ **Last updated:** [November 23, 2020, 9:50pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-0-not-start-ubuntu-20-04/256329 "2020-11-23T21:50:58Z")
My elasticsearch 7.8.1 on my laptop was automatically updated to 7.10.0. I wanted to roll back to the previous version and now I have messed up. Elasticsearch does not even start successfully. Anybody knows how to compl… --- ## [Query about lifecycle management](https://discuss.elastic.co/t/query-about-lifecycle-management/256292)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 4\ **Last updated:** [November 23, 2020, 9:48pm UTC](https://discuss.elastic.co/t/query-about-lifecycle-management/256292 "2020-11-23T21:48:41Z")
I have a years worth of daily indexes that I am cleaning up by reindexing. Reading the "FM" I find that there appears to be a much better way to manage indexes other then blindly creating a new index each day (I was won… --- ## [Multi-layer query + limiting results of a leaf query](https://discuss.elastic.co/t/multi-layer-query-limiting-results-of-a-leaf-query/256378)
**Author:** [@felipeecst](https://discuss.elastic.co/u/felipeecst)\ **Replies:** 0\ **Last updated:** [November 23, 2020, 3:54pm UTC](https://discuss.elastic.co/t/multi-layer-query-limiting-results-of-a-leaf-query/256378 "2020-11-23T15:54:25Z")
Hi there, I am new to ElasticSearch and still not much familiar with the capabilities of the query language. Am I trying to perform a specific query and would appreciate some help on how to build it, even the answer is … --- ## [How to manually delete indexes with elasticsearch running](https://discuss.elastic.co/t/how-to-manually-delete-indexes-with-elasticsearch-running/256392)
**Author:** [@bshaw](https://discuss.elastic.co/u/bshaw)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 8:38pm UTC](https://discuss.elastic.co/t/how-to-manually-delete-indexes-with-elasticsearch-running/256392 "2020-11-23T20:38:23Z")
Hello, I ran into an issue this morning after leaving a test running over the weekend. The test generated more data then available space in my elasticsearch data partition. I am running 7.7.1 on a single node in a doc… --- ## [Chart: Put multiple metrix on differenet axis](https://discuss.elastic.co/t/chart-put-multiple-metrix-on-differenet-axis/256305)
**Author:** [@Emiliani](https://discuss.elastic.co/u/Emiliani)\ **Replies:** 2\ **Last updated:** [November 23, 2020, 8:31pm UTC](https://discuss.elastic.co/t/chart-put-multiple-metrix-on-differenet-axis/256305 "2020-11-23T20:31:54Z")
I have added multiple metrics to my chart. And mutiple axis. How can I assign different metric to different axis Seems I was able to do it few mothns ago, but now I can't This is Kibana 6.8.12 --- ## [Set Master node ID for discovery](https://discuss.elastic.co/t/set-master-node-id-for-discovery/256193)
**Author:** [@albbapm](https://discuss.elastic.co/u/albbapm)\ **Replies:** 7\ **Last updated:** [November 23, 2020, 8:17pm UTC](https://discuss.elastic.co/t/set-master-node-id-for-discovery/256193 "2020-11-23T20:17:30Z")
Long story short, I screwed up in the process of migrating to a new datastore and removed the original one from the config file before I was ready causing some issues. Luckily, this is a new cluster build and not yet pr… --- ## [While reindexing can I add geoip info to a record](https://discuss.elastic.co/t/while-reindexing-can-i-add-geoip-info-to-a-record/256396)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [November 23, 2020, 7:57pm UTC](https://discuss.elastic.co/t/while-reindexing-can-i-add-geoip-info-to-a-record/256396 "2020-11-23T19:57:12Z")
I am using a script to tidy up old indexes and get all the data consistent. Later indexes have geoip information for ip addresses but older ones don't. I can't figure out how to explicitly invoke a geoip lookup in a sc… --- ## [Add an image to kibana header](https://discuss.elastic.co/t/add-an-image-to-kibana-header/256271)
**Author:** [@namakdoon](https://discuss.elastic.co/u/namakdoon)\ **Replies:** 2\ **Last updated:** [November 23, 2020, 7:29pm UTC](https://discuss.elastic.co/t/add-an-image-to-kibana-header/256271 "2020-11-23T19:29:33Z")
hi,how and where can i add an image to the top of kibana and can i also change the top menu of it? --- ## [Vega tree graph in Kibana: how to reference the fields from different indices?](https://discuss.elastic.co/t/vega-tree-graph-in-kibana-how-to-reference-the-fields-from-different-indices/256114)
**Author:** [@Maria20](https://discuss.elastic.co/u/Maria20)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 7:01pm UTC](https://discuss.elastic.co/t/vega-tree-graph-in-kibana-how-to-reference-the-fields-from-different-indices/256114 "2020-11-23T19:01:32Z")
Hi I am following this example and I am having an issue linking the fields of the indices. I have two indices one for nodes, and one for the links between them. My indices as follows: nodes: { "\_index" … --- ## [Visualising Nested Objects in Kibana](https://discuss.elastic.co/t/visualising-nested-objects-in-kibana/254643)
**Author:** [@weiyentan](https://discuss.elastic.co/u/weiyentan)\ **Replies:** 7\ **Last updated:** [November 23, 2020, 6:59pm UTC](https://discuss.elastic.co/t/visualising-nested-objects-in-kibana/254643 "2020-11-23T18:59:44Z")
Hi, I am exploring using ELK and imported in this json document: { "\_index": "system-inventory-\[version\]}-2020.11.07", "\_type": "\_doc", "\_id": "O0X1o3UBD7PZ5Lh--gIu", "\_version": 1, "\_score": null, "\_source… --- ## [Lens filling](https://discuss.elastic.co/t/lens-filling/256383)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 1\ **Last updated:** [November 23, 2020, 6:58pm UTC](https://discuss.elastic.co/t/lens-filling/256383 "2020-11-23T18:58:36Z")
What does this peak mean at current settings? --- ## [Add a condition on ML](https://discuss.elastic.co/t/add-a-condition-on-ml/255358)
**Author:** [@AmS](https://discuss.elastic.co/u/AmS)\ **Replies:** 5\ **Last updated:** [November 23, 2020, 6:54pm UTC](https://discuss.elastic.co/t/add-a-condition-on-ml/255358 "2020-11-23T18:54:35Z")
Hello , I m using ML plugin Kibana 7.4. I have a question about the following Case: We have a list of Event. We are reassuring the number of occurrence of these event. All the event are important But the events are … --- ## [Kibana Index patter issue with alias](https://discuss.elastic.co/t/kibana-index-patter-issue-with-alias/256086)
**Author:** [@ananta05](https://discuss.elastic.co/u/ananta05)\ **Replies:** 5\ **Last updated:** [November 23, 2020, 6:29pm UTC](https://discuss.elastic.co/t/kibana-index-patter-issue-with-alias/256086 "2020-11-23T18:29:19Z")
I am working on existing index pattern where field alias does not work when used as a part of filter. I have tried below things so far Index pattern refresh try to fetch the query sent from Kibana and it has \[object o… --- ## [One of three pods stop but Elasticsearch thinks it's still running](https://discuss.elastic.co/t/one-of-three-pods-stop-but-elasticsearch-thinks-its-still-running/256158)
**Author:** [@lahpman](https://discuss.elastic.co/u/lahpman)\ **Replies:** 4\ **Last updated:** [November 23, 2020, 5:44pm UTC](https://discuss.elastic.co/t/one-of-three-pods-stop-but-elasticsearch-thinks-its-still-running/256158 "2020-11-23T17:44:29Z")
Hey y'all, We are running Elasticsearch 7.9.3 with the help of helm-charts/elasticsearch and lately we have been having a pod go down out of the blue. When I check on the health of Elasticsearch via CURL \_cluster/health… --- ## [Index Template Data Stream](https://discuss.elastic.co/t/index-template-data-stream/255086)
**Author:** [@Craig2188](https://discuss.elastic.co/u/Craig2188)\ **Replies:** 1\ **Last updated:** [November 23, 2020, 5:33pm UTC](https://discuss.elastic.co/t/index-template-data-stream/255086 "2020-11-23T17:33:55Z")
Hi I have an index template that is assigned to a couple of index patterns, however, appears to of accidentally been set up to use data streams. How can I convert this back to use indices as it is failing to process log… --- ## [Can saved objects be read-only?](https://discuss.elastic.co/t/can-saved-objects-be-read-only/256206)
**Author:** [@south](https://discuss.elastic.co/u/south)\ **Replies:** 2\ **Last updated:** [November 23, 2020, 5:14pm UTC](https://discuss.elastic.co/t/can-saved-objects-be-read-only/256206 "2020-11-23T17:14:00Z")
Hi, I am looking for a way to make some of the saved objects(dashboard, visualization, etc) in a space to be read-only so those saved objects can not be edited by the user. The user has multiple dashbards and visualizat… --- ## [Converting null SQL values](https://discuss.elastic.co/t/converting-null-sql-values/255452)
**Author:** [@Hugo\_Pires](https://discuss.elastic.co/u/Hugo_Pires)\ **Replies:** 1\ **Last updated:** [November 23, 2020, 5:01pm UTC](https://discuss.elastic.co/t/converting-null-sql-values/255452 "2020-11-23T17:01:48Z")
Hello When an SQL query return null, how can I convert it to 0? Thank you --- ## [URL Links from Index Patterns Redirect to Port 5601](https://discuss.elastic.co/t/url-links-from-index-patterns-redirect-to-port-5601/256156)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 2\ **Last updated:** [November 23, 2020, 4:45pm UTC](https://discuss.elastic.co/t/url-links-from-index-patterns-redirect-to-port-5601/256156 "2020-11-23T16:45:04Z")
Good morning! We just recently spun up a second Kibana instance and threw both behind a load-balancer for HA. We previously accessed Kibana via https://kb1.contoso.com:5601, but now with the second server of https://kb2… --- ## [ES 7.3 - restarting data node doesn't rejoin cluster](https://discuss.elastic.co/t/es-7-3-restarting-data-node-doesnt-rejoin-cluster/256286)
**Author:** [@charlatan](https://discuss.elastic.co/u/charlatan)\ **Replies:** 5\ **Last updated:** [November 23, 2020, 4:42pm UTC](https://discuss.elastic.co/t/es-7-3-restarting-data-node-doesnt-rejoin-cluster/256286 "2020-11-23T16:42:00Z")
We have the following cluster: 3 x ES 7.3 on CentOS 7.8 VMs, "master eligible" + coordinating nodes 15 x ES 7.3 on CentOS 7.8 physical nodes, data-only 1 x ES 7.3 on CentOS 7.8 VM, running on the Kibana node purely to… --- ## [How to put two groks for IIS Logs?](https://discuss.elastic.co/t/how-to-put-two-groks-for-iis-logs/256111)
**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Replies:** 4\ **Last updated:** [November 23, 2020, 4:38pm UTC](https://discuss.elastic.co/t/how-to-put-two-groks-for-iis-logs/256111 "2020-11-23T16:38:05Z")
\ true match =\> \["message", "%{TIMESTAMP\_ISO8601:log\_timestamp} %{IPORHOST:site} %{WORD:method} %{URIPATH:request}(?:%{URIPARAM:requestparam})? - %{NUMBER:port} - %{IPORHOST:clienthost} %{NOTSP… --- ## [Could not create ml job based on rollup job index](https://discuss.elastic.co/t/could-not-create-ml-job-based-on-rollup-job-index/256135)
**Author:** [@nujabness](https://discuss.elastic.co/u/nujabness)\ **Replies:** 1\ **Last updated:** [November 23, 2020, 4:22pm UTC](https://discuss.elastic.co/t/could-not-create-ml-job-based-on-rollup-job-index/256135 "2020-11-23T16:22:34Z")
Hi, Im using Elasticsearch Service in cloud version 7.9.2. Im trying to create a machine learning job based on an index created from a rollup job that counts the number of requests per webservice. I first create a rol… --- ## [Vega Beeswarm](https://discuss.elastic.co/t/vega-beeswarm/256280)
**Author:** [@GavinBeattie](https://discuss.elastic.co/u/GavinBeattie)\ **Replies:** 3\ **Last updated:** [November 23, 2020, 4:16pm UTC](https://discuss.elastic.co/t/vega-beeswarm/256280 "2020-11-23T16:16:47Z")
I am trying to use the Beeswarm chart in Vega visualisation, but I am unable to get data points to display. When I get to the "marks": \[ {\* "name": "nodes",\* "data": "people.",\* element should this be the nam… --- ## [Kibana arm64 packages missing in Debian repo](https://discuss.elastic.co/t/kibana-arm64-packages-missing-in-debian-repo/256275)
**Author:** [@captbrando](https://discuss.elastic.co/u/captbrando)\ **Replies:** 2\ **Last updated:** [November 23, 2020, 4:06pm UTC](https://discuss.elastic.co/t/kibana-arm64-packages-missing-in-debian-repo/256275 "2020-11-23T16:06:58Z")
Hi there! I was able to download the arm64 Kibana package from here, but unlike all the other ELK stack components, the Kibana .deb is missing in the repository. Can you add the Kibana .deb to the repo? Thanks --- ## [Aggregation filter error](https://discuss.elastic.co/t/aggregation-filter-error/256372)
**Author:** [@Andex](https://discuss.elastic.co/u/Andex)\ **Replies:** 2\ **Last updated:** [November 23, 2020, 3:51pm UTC](https://discuss.elastic.co/t/aggregation-filter-error/256372 "2020-11-23T15:51:01Z")
Hi, i have this problem on aggregation filter : String can't be coerced into Integer , this is the log message : \[2020-11-23T15:55:13,479\]\[ERROR\]\[logstash.filters.aggregate\]\[main\]\[13ac83016d9f4ef50e52f1df4fd7eba1bf205… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1680) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1682)