# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1950 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1951 --- ## [Logstash out put csv with header](https://discuss.elastic.co/t/logstash-out-put-csv-with-header/239968)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 4:54pm UTC](https://discuss.elastic.co/t/logstash-out-put-csv-with-header/239968 "2020-07-06T16:54:27Z")
I am trying to create a csv file by using the output csv in logstash. How can I insert the header only once at the very beginning? my data: es\_field1 es\_field2 es\_field3 1 2 3 4 … --- ## [Where are my backsups?](https://discuss.elastic.co/t/where-are-my-backsups/240039)
**Author:** [@Matias\_Gerstner](https://discuss.elastic.co/u/Matias_Gerstner)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 4:47pm UTC](https://discuss.elastic.co/t/where-are-my-backsups/240039 "2020-07-06T16:47:45Z")
hello good afternoon, I wanted to ask you if anyone knows where the back ups (snapshots) are kept because I can't find them, and I need to migrate to another server. thank you --- ## [ILM update settings](https://discuss.elastic.co/t/ilm-update-settings/239999)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 4:42pm UTC](https://discuss.elastic.co/t/ilm-update-settings/239999 "2020-07-06T16:42:53Z")
Hi anyone knows if I added a cold storage phase to my ILM, will it take into account current indices which were move to warm phase before? for example, indices which were moved to warm phase 100 days ago --- ## [Render errors in generated PDF reports (Canvas)](https://discuss.elastic.co/t/render-errors-in-generated-pdf-reports-canvas/239353)
**Author:** [@sandbender](https://discuss.elastic.co/u/sandbender)\ **Replies:** 2\ **Last updated:** [July 6, 2020, 4:39pm UTC](https://discuss.elastic.co/t/render-errors-in-generated-pdf-reports-canvas/239353 "2020-07-06T16:39:44Z")
Hi, When generating a PDF reports from Canvas, I came across two unpleasant render errors: It appears that font choices are not being considered, which in the following case renders a customised chart unreadable. (Tri… --- ## [Anomaly Score Formular](https://discuss.elastic.co/t/anomaly-score-formular/240030)
**Author:** [@MisterLamp](https://discuss.elastic.co/u/MisterLamp)\ **Replies:** 2\ **Last updated:** [July 6, 2020, 3:45pm UTC](https://discuss.elastic.co/t/anomaly-score-formular/240030 "2020-07-06T15:45:46Z")
Hello, I am searching for the exact formular concerning the anomaly score. I have read that this is a 2 part calculation of mean and a quantile regressionanalysis. I am writing my masterthesis with some analysis on data… --- ## [Query to check if nestedobject contains values or not exist](https://discuss.elastic.co/t/query-to-check-if-nestedobject-contains-values-or-not-exist/239993)
**Author:** [@buka\_bidzina](https://discuss.elastic.co/u/buka_bidzina)\ **Replies:** 8\ **Last updated:** [July 6, 2020, 3:43pm UTC](https://discuss.elastic.co/t/query-to-check-if-nestedobject-contains-values-or-not-exist/239993 "2020-07-06T15:43:05Z")
Hello everyone, I am interested if something like this is possible in elastic search... So, I want to search for documents, which manufacturer.Id is in 1225 or manufacturer object doesn't exist. Manufacturer is a nested… --- ## [Filebeat setup kibana dashboard: limit to enabled modules](https://discuss.elastic.co/t/filebeat-setup-kibana-dashboard-limit-to-enabled-modules/239763)
**Author:** [@pauleccm](https://discuss.elastic.co/u/pauleccm)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-setup-kibana-dashboard-limit-to-enabled-modules/239763 "2020-07-06T15:24:25Z")
When I enable a module https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-modules.html like this, and run the filebeat setup command, the kibana dashboards for ALL default modules are created, … --- ## [Monitoring using metricbeat](https://discuss.elastic.co/t/monitoring-using-metricbeat/236727)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 8\ **Last updated:** [July 6, 2020, 3:18pm UTC](https://discuss.elastic.co/t/monitoring-using-metricbeat/236727 "2020-07-06T15:18:14Z")
I turned on self-monitoring that I want to roll-back and migrate to metricbeat based monitoring for the cluster. I clicked on set self-monitoring which led to the following: I searched elasticsearch.yml but could no… --- ## [Machine learning typical value not set at the moment of firing watcher](https://discuss.elastic.co/t/machine-learning-typical-value-not-set-at-the-moment-of-firing-watcher/239462)
**Author:** [@Josip\_Cagalj](https://discuss.elastic.co/u/Josip_Cagalj)\ **Replies:** 4\ **Last updated:** [July 6, 2020, 3:12pm UTC](https://discuss.elastic.co/t/machine-learning-typical-value-not-set-at-the-moment-of-firing-watcher/239462 "2020-07-06T15:12:22Z")
Hi, I'm on Elastic Cloud v7.7 and I'm exploring the machine learning features. I have a simple job for monitoring the counts of requests our API endpoint receives over time. The goal is to get alerted when an anomaly o… --- ## [Alerting using opendistro webhook way](https://discuss.elastic.co/t/alerting-using-opendistro-webhook-way/240024)
**Author:** [@Rushabh\_Doshi](https://discuss.elastic.co/u/Rushabh_Doshi)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 3:11pm UTC](https://discuss.elastic.co/t/alerting-using-opendistro-webhook-way/240024 "2020-07-06T15:11:08Z")
What values should i give in path and query parameters (Key/value) if i need to send an alert to gmail, what will be the values in host and port number, i dont have any clue please guide --- ## [Elasticsearch will not properly boot without localhost settings](https://discuss.elastic.co/t/elasticsearch-will-not-properly-boot-without-localhost-settings/238881)
**Author:** [@mevans1101](https://discuss.elastic.co/u/mevans1101)\ **Replies:** 10\ **Last updated:** [July 6, 2020, 2:44pm UTC](https://discuss.elastic.co/t/elasticsearch-will-not-properly-boot-without-localhost-settings/238881 "2020-07-06T14:44:13Z")
Hello everyone. I've exhausted nearly all forms of documentation and forum searches, and I've yet been able to get elasticsearch to outside of local settings. For some background: I need elasticsearch to be able to com… --- ## [Directly Connecting MySQL DB to Kibana for visualization](https://discuss.elastic.co/t/directly-connecting-mysql-db-to-kibana-for-visualization/239982)
**Author:** [@Karan\_Gupta10](https://discuss.elastic.co/u/Karan_Gupta10)\ **Replies:** 4\ **Last updated:** [July 6, 2020, 2:34pm UTC](https://discuss.elastic.co/t/directly-connecting-mysql-db-to-kibana-for-visualization/239982 "2020-07-06T14:34:30Z")
Hi My current problem statement involves connecting to MySQL DB to fetch the data and produce Datavisualization in Kibana. Is there a way to directly connect with MySQL DB from Kibana. If not, then what are the other … --- ## [NEST search not working with wildcards or spaces or special chars like -](https://discuss.elastic.co/t/nest-search-not-working-with-wildcards-or-spaces-or-special-chars-like/239781)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 2:30pm UTC](https://discuss.elastic.co/t/nest-search-not-working-with-wildcards-or-spaces-or-special-chars-like/239781 "2020-07-06T14:30:59Z")
I have in elasticsearch index with software instaleld in my pc like this: Microsoft .NET Core Runtime - 3.1.5 (x64) But later when searching the index using NEST it doesnt get any result when I search for full or parti… --- ## [Error : mapper of different type, current\_type \[text\], merged\_type \[ObjectMapper\]","type":"illegal\_argument\_exception"](https://discuss.elastic.co/t/error-mapper-of-different-type-current-type-text-merged-type-objectmapper-type-illegal-argument-exception/240018)
**Author:** [@imene](https://discuss.elastic.co/u/imene)\ **Replies:** 0\ **Last updated:** [July 6, 2020, 2:01pm UTC](https://discuss.elastic.co/t/error-mapper-of-different-type-current-type-text-merged-type-objectmapper-type-illegal-argument-exception/240018 "2020-07-06T14:01:21Z")
i want to index my data to elasticsearch so i create a pipeline in java to do that My data is in form for example : {"insertId":"..........6PUYlYY.05Ku1RDDSQJmsg","jsonPayload":{"AssJRes.time":"","C4-begin.time":"","… --- ## [Set server.basePath and server.host in docker file](https://discuss.elastic.co/t/set-server-basepath-and-server-host-in-docker-file/239979)
**Author:** [@AsfK](https://discuss.elastic.co/u/AsfK)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 1:54pm UTC](https://discuss.elastic.co/t/set-server-basepath-and-server-host-in-docker-file/239979 "2020-07-06T13:54:14Z")
Hello I have this (working) docker-compose.yml file (before server. tries): version: '3' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:7.6.2 environment: - node.name=es01 - cluste… --- ## [Split the array that contains one string](https://discuss.elastic.co/t/split-the-array-that-contains-one-string/239981)
**Author:** [@Yaho](https://discuss.elastic.co/u/Yaho)\ **Replies:** 0\ **Last updated:** [July 6, 2020, 9:34am UTC](https://discuss.elastic.co/t/split-the-array-that-contains-one-string/239981 "2020-07-06T09:34:54Z")
I have a field "umi\_app.keyword" as string but i need to convert to two variables/objects/arrays to be able to add another string to each one (\_Critical). The part of the script looks like this '+doc\['umi\_app.keyword'\]… --- ## [Adding iframe code in wordpress website](https://discuss.elastic.co/t/adding-iframe-code-in-wordpress-website/239984)
**Author:** [@Mayank\_Ruhella](https://discuss.elastic.co/u/Mayank_Ruhella)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 1:48pm UTC](https://discuss.elastic.co/t/adding-iframe-code-in-wordpress-website/239984 "2020-07-06T13:48:28Z")
I know how to create, share and embed iframe code of the visualisation and dashboard but the problem is, it is asking for kibana credentials to load on website. Is it possible to skip login into kibana. --- ## [TSVB table : Group by multiple fields](https://discuss.elastic.co/t/tsvb-table-group-by-multiple-fields/240007)
**Author:** [@elisavet](https://discuss.elastic.co/u/elisavet)\ **Replies:** 2\ **Last updated:** [July 6, 2020, 1:44pm UTC](https://discuss.elastic.co/t/tsvb-table-group-by-multiple-fields/240007 "2020-07-06T13:44:03Z")
Hello! I would like to use TSVB to make a data table that sums a value for multiple groups as in the picture? Is it possible? Thank you, elisavet --- ## [High number of org.elasticsearch.index.IndexNotFoundException exceptions detected by Dynatrace](https://discuss.elastic.co/t/high-number-of-org-elasticsearch-index-indexnotfoundexception-exceptions-detected-by-dynatrace/239702)
**Author:** [@GSmith](https://discuss.elastic.co/u/GSmith)\ **Replies:** 4\ **Last updated:** [July 6, 2020, 1:30pm UTC](https://discuss.elastic.co/t/high-number-of-org-elasticsearch-index-indexnotfoundexception-exceptions-detected-by-dynatrace/239702 "2020-07-06T13:30:23Z")
We have deployed Elasticsearch 7.6.1 onto a Kubernetes cluster for log monitoring. Logs are collected using Fluent Bit and sent to Elasticsearch. Everything seems to be working fine. But yesterday, one of the admins c… --- ## [Ml jobs stuck in deleting state](https://discuss.elastic.co/t/ml-jobs-stuck-in-deleting-state/239912)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 1:26pm UTC](https://discuss.elastic.co/t/ml-jobs-stuck-in-deleting-state/239912 "2020-07-06T13:26:52Z")
Hi, I would like to remove these limbo ml jobs. interface doesn't allow that. any advice will be appreciated --- ## [Fetch million doc in seconds](https://discuss.elastic.co/t/fetch-million-doc-in-seconds/239611)
**Author:** [@saurabhbhatt](https://discuss.elastic.co/u/saurabhbhatt)\ **Replies:** 10\ **Last updated:** [July 6, 2020, 1:25pm UTC](https://discuss.elastic.co/t/fetch-million-doc-in-seconds/239611 "2020-07-06T13:25:00Z")
Hi, To give brief, I have an index "allreportingdataindex" (example) and it has over 7,50,000 records. Each document has about about 20 columns and about 15 columns with array values. The ES instance is installed on ser… --- ## [Effect of extraneous analyzers or filters in settings - any negative consequences?](https://discuss.elastic.co/t/effect-of-extraneous-analyzers-or-filters-in-settings-any-negative-consequences/239897)
**Author:** [@pmallela](https://discuss.elastic.co/u/pmallela)\ **Replies:** 1\ **Last updated:** [July 6, 2020, 12:34pm UTC](https://discuss.elastic.co/t/effect-of-extraneous-analyzers-or-filters-in-settings-any-negative-consequences/239897 "2020-07-06T12:34:51Z")
Hi, does adding multiple analyzers/filters to the settings of an index use up lot of space, or add any burden on the index? (i wouldn’t think so, as it’s just configuration). I want to keep the “settings” common across … --- ## [Index design for large lists of document references](https://discuss.elastic.co/t/index-design-for-large-lists-of-document-references/240001)
**Author:** [@buckethead](https://discuss.elastic.co/u/buckethead)\ **Replies:** 0\ **Last updated:** [July 6, 2020, 12:26pm UTC](https://discuss.elastic.co/t/index-design-for-large-lists-of-document-references/240001 "2020-07-06T12:26:45Z")
Hi, I'm kind of new to elasticsearch and I wonder if i overlook a better solution to my Problem: I have an index of quite large documents (\< 1mb) with \> 100,000 entries, lets call them "products" and a lot of "customers… --- ## [Collect ES data for Suggest form when initiating FieldFormatter plugin](https://discuss.elastic.co/t/collect-es-data-for-suggest-form-when-initiating-fieldformatter-plugin/239989)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 0\ **Last updated:** [July 6, 2020, 10:32am UTC](https://discuss.elastic.co/t/collect-es-data-for-suggest-form-when-initiating-fieldformatter-plugin/239989 "2020-07-06T10:32:45Z")
I have a FieldFormatter plugin where users can enter values into different fields in a dialog that are submitted to ES to update specific fields of a specific document at a time. The dialog is opened using html in a simi… --- ## [Kibana Data Table COlumn Split](https://discuss.elastic.co/t/kibana-data-table-column-split/239078)
**Author:** [@Shikhar\_Dixit](https://discuss.elastic.co/u/Shikhar_Dixit)\ **Replies:** 3\ **Last updated:** [July 6, 2020, 11:55am UTC](https://discuss.elastic.co/t/kibana-data-table-column-split/239078 "2020-07-06T11:55:11Z")
Hi, I wanted to ask, whether it is possible in kibana data table to split data by columns? like if I wanted to show count of subjects and sports for a student in a single row under columns named as, Subjects and Sports --- ## [Continous transforms accumulating delay, can be tweak for speed up?](https://discuss.elastic.co/t/continous-transforms-accumulating-delay-can-be-tweak-for-speed-up/239807)
**Author:** [@Germain\_Pavot](https://discuss.elastic.co/u/Germain_Pavot)\ **Replies:** 11\ **Last updated:** [July 6, 2020, 11:34am UTC](https://discuss.elastic.co/t/continous-transforms-accumulating-delay-can-be-tweak-for-speed-up/239807 "2020-07-06T11:34:45Z")
Hi guys, I use tranforms to create an aggregated index. The setup are : 1 live index with live datas injections. Currently this index receive between 5 and 10 Millions of documents per hour and this will be growth in … --- ## [Not allowed to increase reporting capture timeouts in Elastic cloud](https://discuss.elastic.co/t/not-allowed-to-increase-reporting-capture-timeouts-in-elastic-cloud/234697)
**Author:** [@Martijn04](https://discuss.elastic.co/u/Martijn04)\ **Replies:** 10\ **Last updated:** [July 6, 2020, 10:39am UTC](https://discuss.elastic.co/t/not-allowed-to-increase-reporting-capture-timeouts-in-elastic-cloud/234697 "2020-07-06T10:39:12Z")
Hello, We are using the Elastic Cloud service. When generating a report I get the following error message: An error occurred when trying to open the Kibana URL. You may need to increase 'xpack.reporting.capture.timeout… --- ## [Performance querying time-based indices in a date range](https://discuss.elastic.co/t/performance-querying-time-based-indices-in-a-date-range/238283)
**Author:** [@devplayer0](https://discuss.elastic.co/u/devplayer0)\ **Replies:** 2\ **Last updated:** [July 6, 2020, 10:16am UTC](https://discuss.elastic.co/t/performance-querying-time-based-indices-in-a-date-range/238283 "2020-07-06T10:16:38Z")
Bit new to Elasticsearch. When limiting the date range of a query (for example if I have a daily index of events and I'd like to search within only a non-aligned monthly cycle), is it worth optimising the index pattern? … --- ## [Elasticsearch is not starting for Search Guard error](https://discuss.elastic.co/t/elasticsearch-is-not-starting-for-search-guard-error/239909)
**Author:** [@Mahathir\_Mohammad](https://discuss.elastic.co/u/Mahathir_Mohammad)\ **Replies:** 2\ **Last updated:** [July 6, 2020, 9:59am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-starting-for-search-guard-error/239909 "2020-07-06T09:59:42Z")
I'm trying to configure Search Guard admin. here is my elasticsearch.yml configurations: searchguard.ssl.transport.pemcert\_filepath: /home/rsa-key-20200528/search-guard-ssl-master/example-pki-scripts/node-0.crt.pem sear… --- ## [Sorting results from composite aggregation](https://discuss.elastic.co/t/sorting-results-from-composite-aggregation/239076)
**Author:** [@Vignesh\_Theyagarajan](https://discuss.elastic.co/u/Vignesh_Theyagarajan)\ **Replies:** 13\ **Last updated:** [July 6, 2020, 9:51am UTC](https://discuss.elastic.co/t/sorting-results-from-composite-aggregation/239076 "2020-07-06T09:51:21Z")
I'm using a combination of composite, terms and tophits aggregation. I'd like to sort the results (groups retrieved) based on a document's property (nested field property). I read about bucket sort, but really not sure … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1949) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1951)