# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1999

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 2000

---

## [Creating a partial clone of a cluster](https://discuss.elastic.co/t/creating-a-partial-clone-of-a-cluster/237106)

<div class="topic-metadata">

**Author:** [@Konrad\_Moskal](https://discuss.elastic.co/u/Konrad_Moskal)\
**Replies:** 2\
**Last updated:** [June 15, 2020, 2:14pm UTC](https://discuss.elastic.co/t/creating-a-partial-clone-of-a-cluster/237106 "2020-06-15T14:14:54Z")

</div>

My ES cluster is constantly updating but I have a use case where I'd like to have a snapshot of static data, which I'd update periodically. Doesn't have to be all of the data, could be a fraction of it. Any tips on how w…

---

## [Reindex, convert float to float, mapper \[variableX\] cannot be changed from type \[float\] to \[long\]](https://discuss.elastic.co/t/reindex-convert-float-to-float-mapper-variablex-cannot-be-changed-from-type-float-to-long/237123)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 2:13pm UTC](https://discuss.elastic.co/t/reindex-convert-float-to-float-mapper-variablex-cannot-be-changed-from-type-float-to-long/237123 "2020-06-15T14:13:58Z")

</div>

Hi, I am trying to reindex something. It works with 4/5 of my indcies but the last one fails because of: { "took": 4178, "timed\_out": false, "total": 56576151, "updated": 0, "created": 994, "del…

---

## [Multiple Y axis](https://discuss.elastic.co/t/multiple-y-axis/235781)

<div class="topic-metadata">

**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\
**Replies:** 3\
**Last updated:** [June 15, 2020, 2:08pm UTC](https://discuss.elastic.co/t/multiple-y-axis/235781 "2020-06-15T14:08:26Z")

</div>

Hi, i have a TSVB with request, % success, % of failure. % success, % of failure i set the option Separate axis. the problem is that now i have 3 Y Axis,1 for requests and 1 for % success and other for % failure. How…

---

## [Types Removal](https://discuss.elastic.co/t/types-removal/236772)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 1:56pm UTC](https://discuss.elastic.co/t/types-removal/236772 "2020-06-15T13:56:12Z")

</div>

I've previously posted a question about this, but waited too long to respond and the topic got closed. I've read the notice about types being removed, but I can't figure it out. I'm getting a warning in my deprecation …

---

## [Import Saved Objects from 6.8.4 to 7.6.1](https://discuss.elastic.co/t/import-saved-objects-from-6-8-4-to-7-6-1/236833)

<div class="topic-metadata">

**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\
**Replies:** 5\
**Last updated:** [June 15, 2020, 1:48pm UTC](https://discuss.elastic.co/t/import-saved-objects-from-6-8-4-to-7-6-1/236833 "2020-06-15T13:48:28Z")

</div>

Hello All , I am trying to import the saved objects from 6.8.4 to 7.6.1 . When i try to import the .json file of saved objects , it gives me error . So i see it requires NDJSON format. Kindly help out please. Support f…

---

## [Add links like share ,edit in kibana top nav bar](https://discuss.elastic.co/t/add-links-like-share-edit-in-kibana-top-nav-bar/236675)

<div class="topic-metadata">

**Author:** [@suibgui](https://discuss.elastic.co/u/suibgui)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 1:19pm UTC](https://discuss.elastic.co/t/add-links-like-share-edit-in-kibana-top-nav-bar/236675 "2020-06-15T13:19:22Z")

</div>

hello team , i want to add other links like share ,edit in kibana top nav bar , i'm using kibana 7.4.0 and lunix os any solution ? thanks.

---

## [Kibana opens but does not save visualize](https://discuss.elastic.co/t/kibana-opens-but-does-not-save-visualize/236513)

<div class="topic-metadata">

**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\
**Replies:** 10\
**Last updated:** [June 15, 2020, 1:18pm UTC](https://discuss.elastic.co/t/kibana-opens-but-does-not-save-visualize/236513 "2020-06-15T13:18:56Z")

</div>

Kibana with error, I checked the logs and gave the following error: log \[12: 50: 26.691\] \[error\] \[plugins\] \[taskManager\] \[taskManager\] Failed to poll for work: Error: Request Timeout after 30000ms

---

## [Timelion Daily Totals](https://discuss.elastic.co/t/timelion-daily-totals/235846)

<div class="topic-metadata">

**Author:** [@cburling](https://discuss.elastic.co/u/cburling)\
**Replies:** 4\
**Last updated:** [June 15, 2020, 1:14pm UTC](https://discuss.elastic.co/t/timelion-daily-totals/235846 "2020-06-15T13:14:31Z")

</div>

Hello. I am trying to work in Timelion to show the total number of events received per day (24hour period). Instead, I keep getting the totals growing each day. I have included the "interval=24h" option. Is there a w…

---

## [SSL using Enterprise CA issued Certificates](https://discuss.elastic.co/t/ssl-using-enterprise-ca-issued-certificates/236608)

<div class="topic-metadata">

**Author:** [@handyd](https://discuss.elastic.co/u/handyd)\
**Replies:** 3\
**Last updated:** [June 15, 2020, 1:00pm UTC](https://discuss.elastic.co/t/ssl-using-enterprise-ca-issued-certificates/236608 "2020-06-15T13:00:44Z")

</div>

I'm having trouble configuring transport and HTTP SSL for Elastic Stack in my environment. The environment is Windows 2016 (domain-joined) and everything in the stack works fine. I've enabled x-pack security and followed…

---

## [Logstash Json filter re-formated the @timestamp field unexpectedly](https://discuss.elastic.co/t/logstash-json-filter-re-formated-the-timestamp-field-unexpectedly/237027)

<div class="topic-metadata">

**Author:** [@STAR\_DEVX](https://discuss.elastic.co/u/STAR_DEVX)\
**Replies:** 5\
**Last updated:** [June 15, 2020, 12:36pm UTC](https://discuss.elastic.co/t/logstash-json-filter-re-formated-the-timestamp-field-unexpectedly/237027 "2020-06-15T12:36:13Z")

</div>

Hi, I'm encounter an issue with the logstash json plugin. In my "message", there's an field called "@timestamp", it's in UNIX epoch float format. However, when I try to use json filter to parse the "message" field, it …

---

## [Passing data into KIbana iframe state and accessing it via a plugin](https://discuss.elastic.co/t/passing-data-into-kibana-iframe-state-and-accessing-it-via-a-plugin/235768)

<div class="topic-metadata">

**Author:** [@gurtgurt](https://discuss.elastic.co/u/gurtgurt)\
**Replies:** 5\
**Last updated:** [June 15, 2020, 12:35pm UTC](https://discuss.elastic.co/t/passing-data-into-kibana-iframe-state-and-accessing-it-via-a-plugin/235768 "2020-06-15T12:35:20Z")

</div>

Hi I've got a pretty basic Kibana plugin that is running on the client side (no server side logic), and I have a Kibana visualization inside of an iframe. In the parent, I have some values that I would like the plugin t…

---

## [To store and search a File content using elastic search](https://discuss.elastic.co/t/to-store-and-search-a-file-content-using-elastic-search/237062)

<div class="topic-metadata">

**Author:** [@Romy\_Bobby](https://discuss.elastic.co/u/Romy_Bobby)\
**Replies:** 11\
**Last updated:** [June 15, 2020, 12:18pm UTC](https://discuss.elastic.co/t/to-store-and-search-a-file-content-using-elastic-search/237062 "2020-06-15T12:18:53Z")

</div>

Hi, My requirement is an FAQ in my application where I require to Upload FAQ documents and later search and find these documents using the keywords in search cloumn. I Would like to know how to store and search a File c…

---

## [Kibana not displaying monitoring data](https://discuss.elastic.co/t/kibana-not-displaying-monitoring-data/237124)

<div class="topic-metadata">

**Author:** [@souravsahoo](https://discuss.elastic.co/u/souravsahoo)\
**Replies:** 6\
**Last updated:** [June 15, 2020, 12:15pm UTC](https://discuss.elastic.co/t/kibana-not-displaying-monitoring-data/237124 "2020-06-15T12:15:34Z")

</div>

I have been trying to setup a separate monitoring cluster for collecting monitoring data from the production cluster. I have installed metricbeat on each of the production cluster's nodes and metricbeats is successfully …

---

## [Hide metafields on Kibana Filter](https://discuss.elastic.co/t/hide-metafields-on-kibana-filter/236582)

<div class="topic-metadata">

**Author:** [@gferrette](https://discuss.elastic.co/u/gferrette)\
**Replies:** 2\
**Last updated:** [June 15, 2020, 12:06pm UTC](https://discuss.elastic.co/t/hide-metafields-on-kibana-filter/236582 "2020-06-15T12:06:55Z")

</div>

Hello! Is it possible to hide the metafields on Kibana filter? Example (fields starting with underscore "\_id", "\_index", "\_type"): Thanks in advance! Gabriel.

---

## [How to bypass Array error in Canvas?](https://discuss.elastic.co/t/how-to-bypass-array-error-in-canvas/236122)

<div class="topic-metadata">

**Author:** [@edbautista](https://discuss.elastic.co/u/edbautista)\
**Replies:** 3\
**Last updated:** [June 15, 2020, 11:32am UTC](https://discuss.elastic.co/t/how-to-bypass-array-error-in-canvas/236122 "2020-06-15T11:32:29Z")

</div>

Elasticsearch: 7.6.2 Kibana: 7.6.2 Hi. I'm fairly new with using the Elastic Stack. Trying to explore both Kibana and Canvas to decide which to use for our dashboards. We are currently leaning towards Canvas for its ca…

---

## [How to generate grok pattern using existing elasticsearch index?](https://discuss.elastic.co/t/how-to-generate-grok-pattern-using-existing-elasticsearch-index/237116)

<div class="topic-metadata">

**Author:** [@dattack13](https://discuss.elastic.co/u/dattack13)\
**Replies:** 0\
**Last updated:** [June 15, 2020, 11:07am UTC](https://discuss.elastic.co/t/how-to-generate-grok-pattern-using-existing-elasticsearch-index/237116 "2020-06-15T11:07:54Z")

</div>

Hello All, Let me explain my existing structure, I have 4 servers (Web Server, API Server, Database server, SSIS Severs) and installed filebeat and winlog in all four servers and from there I am getting all logs in my l…

---

## [Unable to fetch exact result at first when searching with special charecters](https://discuss.elastic.co/t/unable-to-fetch-exact-result-at-first-when-searching-with-special-charecters/235584)

<div class="topic-metadata">

**Author:** [@mallikarjuna.manne](https://discuss.elastic.co/u/mallikarjuna.manne)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 11:00am UTC](https://discuss.elastic.co/t/unable-to-fetch-exact-result-at-first-when-searching-with-special-charecters/235584 "2020-06-15T11:00:49Z")

</div>

Hello mates, When I used the following query It unable to fetch the exact result even though data existed. {"query": {"query\_string": {"query": "column1:(1.3 \\"@\\")"}}} This query is fetching results that are only hav…

---

## [Calculate new field in logstash config file](https://discuss.elastic.co/t/calculate-new-field-in-logstash-config-file/237097)

<div class="topic-metadata">

**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\
**Replies:** 0\
**Last updated:** [June 15, 2020, 9:19am UTC](https://discuss.elastic.co/t/calculate-new-field-in-logstash-config-file/237097 "2020-06-15T09:19:48Z")

</div>

Hello everyone, I wonder if I can calculate a new fields using the fields in my csv file in the logstash configuration file . Priciasly I want to add a field attempt complaint (number of observation where ServRvLevdle \>…

---

## [Bool query with a must and 2 match queries](https://discuss.elastic.co/t/bool-query-with-a-must-and-2-match-queries/237108)

<div class="topic-metadata">

**Author:** [@hcraes](https://discuss.elastic.co/u/hcraes)\
**Replies:** 0\
**Last updated:** [June 15, 2020, 9:56am UTC](https://discuss.elastic.co/t/bool-query-with-a-must-and-2-match-queries/237108 "2020-06-15T09:56:43Z")

</div>

Hello, I recently started learning Elasticsearh and I have (probably) one noobie question. I have a field "name" & "surname". Both fields can have multiple words. Let's say I have a user with a name "Test Test2" and a s…

---

## [Why does this reindex API fail (Reindex multiple indexes at once)](https://discuss.elastic.co/t/why-does-this-reindex-api-fail-reindex-multiple-indexes-at-once/237104)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 9:57am UTC](https://discuss.elastic.co/t/why-does-this-reindex-api-fail-reindex-multiple-indexes-at-once/237104 "2020-06-15T09:57:06Z")

</div>

Hi, I have 5 Indices on my Elasticsearch and want to reindex all of them. Is there an API which can do this? I tried it with this approach: { "conflicts": "proceed", "source": { "index": \["index1", "index2","in…

---

## [Elastic Cloud Service search performance](https://discuss.elastic.co/t/elastic-cloud-service-search-performance/236368)

<div class="topic-metadata">

**Author:** [@cr-solutions](https://discuss.elastic.co/u/cr-solutions)\
**Replies:** 11\
**Last updated:** [June 15, 2020, 9:08am UTC](https://discuss.elastic.co/t/elastic-cloud-service-search-performance/236368 "2020-06-15T09:08:32Z")

</div>

Hello, we currently evaluating Elasticsearch as replacement of our Sphinxsearch (sphinxsearch.com). As step one we tried the Elasticsearch service from AWS, but it really sucks. Now we are currently trying the Elastic…

---

## [Should Inside Must](https://discuss.elastic.co/t/should-inside-must/237095)

<div class="topic-metadata">

**Author:** [@prvn\_prasher](https://discuss.elastic.co/u/prvn_prasher)\
**Replies:** 0\
**Last updated:** [June 15, 2020, 8:56am UTC](https://discuss.elastic.co/t/should-inside-must/237095 "2020-06-15T08:56:42Z")

</div>

I am trying to create a query like Simply, I am trying to recreate this SQL query: SELECT \* FROM test where com\_ref= 'ddfdfdfdf' and (fr\_id = 511168 or fr\_id = 511258 ). { "query": { "bool": { "filter": { "bool": { "…

---

## [Filbeat exclude and multiline configuration](https://discuss.elastic.co/t/filbeat-exclude-and-multiline-configuration/237042)

<div class="topic-metadata">

**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 8:45am UTC](https://discuss.elastic.co/t/filbeat-exclude-and-multiline-configuration/237042 "2020-06-15T08:45:08Z")

</div>

Example Events - time,thread,logger,level,message 2020-06-11 09:46:50.3836,7,Logs.Shared.ServiceBehaviors.ServiceExceptionHandlerBehavior,Debug,applying ServiceExceptionHandler to UsersService time,thread,logger,level,m…

---

## [High cardinality multi bucket terms aggregation - huge memory consumption](https://discuss.elastic.co/t/high-cardinality-multi-bucket-terms-aggregation-huge-memory-consumption/235530)

<div class="topic-metadata">

**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 8:44am UTC](https://discuss.elastic.co/t/high-cardinality-multi-bucket-terms-aggregation-huge-memory-consumption/235530 "2020-06-15T08:44:45Z")

</div>

Hi all, I' m pretty new to the elastic stack but I'm facing an issue which I don't understand. I tried to reproduce it with the easiest example: My documents look like this: { "a1" : "3abcdefghi", "a2" : "3ab…

---

## [Elasticsearch terms aggregations performance of many unique values](https://discuss.elastic.co/t/elasticsearch-terms-aggregations-performance-of-many-unique-values/236661)

<div class="topic-metadata">

**Author:** [@ming1997](https://discuss.elastic.co/u/ming1997)\
**Replies:** 6\
**Last updated:** [June 15, 2020, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-terms-aggregations-performance-of-many-unique-values/236661 "2020-06-15T08:40:38Z")

</div>

I use terms aggregations to aggregate my data . But there is a problem. For example , If i have 300 million data in my ES cluster. I use terms aggregation to aggregate the bytes of ip. If the ip field has 1000 unique ip…

---

## [Filebeat Netflow not getting to Kibana](https://discuss.elastic.co/t/filebeat-netflow-not-getting-to-kibana/237044)

<div class="topic-metadata">

**Author:** [@Pradeepan](https://discuss.elastic.co/u/Pradeepan)\
**Replies:** 3\
**Last updated:** [June 15, 2020, 8:39am UTC](https://discuss.elastic.co/t/filebeat-netflow-not-getting-to-kibana/237044 "2020-06-15T08:39:50Z")

</div>

Hi Techs Filebeat not getting the Netflow logs from Cisco. Not sure where to check. Using Filebeat 7.7.1 ELK also 7.7.1.Filebat , Kibana , Logstash and Elasticserach are running without errors. Cisco Netflow config is …

---

## [How do I create custom plugins for Kibana visualisation?](https://discuss.elastic.co/t/how-do-i-create-custom-plugins-for-kibana-visualisation/237066)

<div class="topic-metadata">

**Author:** [@Akhil\_Kaithoju](https://discuss.elastic.co/u/Akhil_Kaithoju)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 8:33am UTC](https://discuss.elastic.co/t/how-do-i-create-custom-plugins-for-kibana-visualisation/237066 "2020-06-15T08:33:18Z")

</div>

I want to create custom plugin for Kibana visualisation in 7.6

---

## [Elasticsearch/Logstash low indexing rate](https://discuss.elastic.co/t/elasticsearch-logstash-low-indexing-rate/236852)

<div class="topic-metadata">

**Author:** [@urkole](https://discuss.elastic.co/u/urkole)\
**Replies:** 5\
**Last updated:** [June 15, 2020, 8:19am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-low-indexing-rate/236852 "2020-06-15T08:19:00Z")

</div>

Hello, I'm setting up an Elasticsearch cluster in my laptop to do some testing before migrating to a better infrastructure, so I'm still learning how this works. As I've said, I have an Elasticsearch instance running (…

---

## [Filter is occasionally including wrong results](https://discuss.elastic.co/t/filter-is-occasionally-including-wrong-results/236544)

<div class="topic-metadata">

**Author:** [@Will\_Monk](https://discuss.elastic.co/u/Will_Monk)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 8:05am UTC](https://discuss.elastic.co/t/filter-is-occasionally-including-wrong-results/236544 "2020-06-15T08:05:19Z")

</div>

Cluster summary: 8 GB RAM 240 GB storage 1 node 2 zones Version 7.4.2 46 shards Query: { "query": { "bool": { "filter": \[ { "term": { "id": "uuid" } }, …

---

## [Is there a goroutine leak in libbeat?](https://discuss.elastic.co/t/is-there-a-goroutine-leak-in-libbeat/236822)

<div class="topic-metadata">

**Author:** [@erenming](https://discuss.elastic.co/u/erenming)\
**Replies:** 3\
**Last updated:** [June 15, 2020, 7:21am UTC](https://discuss.elastic.co/t/is-there-a-goroutine-leak-in-libbeat/236822 "2020-06-15T07:21:11Z")

</div>

I'm doing a pressure test for our beats like filebeat use libbeat package，But I found github.com/elastic/beats/libbeat/reader/readfile.(\*TimeoutReader).Next.func1 is continuous growing。 The presure test condition is de…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1998)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=2000)
