# Latest **URL:** https://discuss.elastic.co/latest.md?page=1274 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1275 --- ## [Kibana Dashboard display no content without filtering](https://discuss.elastic.co/t/kibana-dashboard-display-no-content-without-filtering/296256)
**Author:** [@fionachan](https://discuss.elastic.co/u/fionachan)\ **Replies:** 17\ **Last updated:** [February 7, 2022, 11:28am UTC](https://discuss.elastic.co/t/kibana-dashboard-display-no-content-without-filtering/296256 "2022-02-07T11:28:46Z")
Hi, is there a way to make the table in the dashboard shows a sentence like "please select", after filtering show the data? --- ## [Index houskeeping (ILM)](https://discuss.elastic.co/t/index-houskeeping-ilm/296270)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 5\ **Last updated:** [February 7, 2022, 11:11am UTC](https://discuss.elastic.co/t/index-houskeeping-ilm/296270 "2022-02-07T11:11:56Z")
Hi, I have this question on my mind for a long time. I have many indexes on a Elastic cluster, this cluster is used for application logging so I have plenty of indices separated by application because of they use case. … --- ## [How to prevent duplicates in filebeat](https://discuss.elastic.co/t/how-to-prevent-duplicates-in-filebeat/296391)
**Author:** [@Dror\_Tirosh](https://discuss.elastic.co/u/Dror_Tirosh)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 10:46am UTC](https://discuss.elastic.co/t/how-to-prevent-duplicates-in-filebeat/296391 "2022-02-07T10:46:42Z")
My input data (which is json-formatted) as a unique field. According to the documentation, this should use it as a unique identifier, and thus pervent duplicates: processor: - fingerprint: fields: \["tx"\] target… --- ## [Elasticsearch Python](https://discuss.elastic.co/t/elasticsearch-python/296356)
**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 10:39am UTC](https://discuss.elastic.co/t/elasticsearch-python/296356 "2022-02-07T10:39:36Z")
Here is my code, from datetime import datetime from elasticsearch import Elasticsearch, helpers from pprint import pprint import json import time es = Elasticsearch(\['http://localhost:9200'\], http\_auth=('elastic', … --- ## [Nested queries (or secondary query)](https://discuss.elastic.co/t/nested-queries-or-secondary-query/296452)
**Author:** [@eladf](https://discuss.elastic.co/u/eladf)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 10:21am UTC](https://discuss.elastic.co/t/nested-queries-or-secondary-query/296452 "2022-02-07T10:21:17Z")
Hi all, I encountered an issue and will appreciate your help with it. I have a huge index (~0.5B documents) with a mapping that includes numeric fields (enum values), one keyword field and a nested field. The nested f… --- ## [Making elasticdb container persistant in EKS](https://discuss.elastic.co/t/making-elasticdb-container-persistant-in-eks/296158)
**Author:** [@gaurav.mittal](https://discuss.elastic.co/u/gaurav.mittal)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 10:01am UTC](https://discuss.elastic.co/t/making-elasticdb-container-persistant-in-eks/296158 "2022-02-07T10:01:38Z")
Hi, We are deploying the Elasticsearch and one of the container is for elasticdb. the default location for the database is under "/usr/share/Elasticsearch" it creates a data directory and database is created here. How t… --- ## [How to set a custom logo in kibana 7.16](https://discuss.elastic.co/t/how-to-set-a-custom-logo-in-kibana-7-16/296422)
**Author:** [@Sunil\_Bhakar](https://discuss.elastic.co/u/Sunil_Bhakar)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 9:34am UTC](https://discuss.elastic.co/t/how-to-set-a-custom-logo-in-kibana-7-16/296422 "2022-02-07T09:34:21Z")
Hello, I want to set a custom logo in kibana 7.16. Thanks in Advance for the help. --- ## [Customize chart fields](https://discuss.elastic.co/t/customize-chart-fields/296071)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 5\ **Last updated:** [February 7, 2022, 9:18am UTC](https://discuss.elastic.co/t/customize-chart-fields/296071 "2022-02-07T09:18:56Z")
Hello everybody I have a small problem that I encounter on most of my graphs. I would like to display the field name + its value in the captions. There is currently only the value and it is not too telling. Is it pos… --- ## [Translog of index size is huge](https://discuss.elastic.co/t/translog-of-index-size-is-huge/296385)
**Author:** [@Ariel\_Benichou](https://discuss.elastic.co/u/Ariel_Benichou)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 9:14am UTC](https://discuss.elastic.co/t/translog-of-index-size-is-huge/296385 "2022-02-07T09:14:41Z")
TL;DR one of my index in one of my data node got out of end and took all the disk available space making the node crash. The Problem On one of my data nodes, one of my biggest index (~10G) had suddenly a translog the w… --- ## [Indexing latency slowly increases until it's taking hours](https://discuss.elastic.co/t/indexing-latency-slowly-increases-until-its-taking-hours/296324)
**Author:** [@mikehardenize](https://discuss.elastic.co/u/mikehardenize)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 9:10am UTC](https://discuss.elastic.co/t/indexing-latency-slowly-increases-until-its-taking-hours/296324 "2022-02-07T09:10:59Z")
I have a 3 node cluster. Once a day I create a new index and bulk insert some data. Then throughout the day singular docs are slowly added to that same index. Once a new index has been created and fulfilled the previous … --- ## [Percolation with document containing huge geo\_shape](https://discuss.elastic.co/t/percolation-with-document-containing-huge-geo-shape/294557)
**Author:** [@Pingouin](https://discuss.elastic.co/u/Pingouin)\ **Replies:** 3\ **Last updated:** [February 7, 2022, 8:58am UTC](https://discuss.elastic.co/t/percolation-with-document-containing-huge-geo-shape/294557 "2022-02-07T08:58:21Z")
Hello, i have strange error when using percolation with a document containing a huge geo\_shape property. I have an index containing documents (dt\_prior\_lake\_database\_continent\_basin). These documents have a mapped geo\_s… --- ## [I got "Limited to 500 results. Refine your search. 256 documents" in save search displayed in dashboard](https://discuss.elastic.co/t/i-got-limited-to-500-results-refine-your-search-256-documents-in-save-search-displayed-in-dashboard/296420)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 6:57am UTC](https://discuss.elastic.co/t/i-got-limited-to-500-results-refine-your-search-256-documents-in-save-search-displayed-in-dashboard/296420 "2022-02-07T06:57:25Z")
Hi All, I'm using 7.16.2 version. I have a saved search that I'm displaying in dashboard. When I add a filter for a text field which contains certain text I get: "Limited to 500 results. Refine your search. 256 documen… --- ## [Can a field like "name.last" be the target field of "enrich" in the ingest pipeline gui?](https://discuss.elastic.co/t/can-a-field-like-name-last-be-the-target-field-of-enrich-in-the-ingest-pipeline-gui/296418)
**Author:** [@Aloha](https://discuss.elastic.co/u/Aloha)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 6:30am UTC](https://discuss.elastic.co/t/can-a-field-like-name-last-be-the-target-field-of-enrich-in-the-ingest-pipeline-gui/296418 "2022-02-07T06:30:07Z")
Trying to setup an ingest pipeline via the gui after setting up an enrich policy similar to this example. The target field is name.last and testing the pipeline with documents via the GUI works fine but trying to ingest… --- ## [No data for query "exists": { "field": "event.original" }](https://discuss.elastic.co/t/no-data-for-query-exists-field-event-original/296355)
**Author:** [@Slavik\_Fursov](https://discuss.elastic.co/u/Slavik_Fursov)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:13am UTC](https://discuss.elastic.co/t/no-data-for-query-exists-field-event-original/296355 "2022-02-07T04:13:46Z")
I'm sending web access logs from Nginx server to Elastic. Everything works. I can see all data in Kibana correctly: However, when I try to add "exists": { "field": "event.original" } I'm getting no data: What … --- ## [Some questions](https://discuss.elastic.co/t/some-questions/296304)
**Author:** [@sandeepmuthathi](https://discuss.elastic.co/u/sandeepmuthathi)\ **Replies:** 4\ **Last updated:** [February 7, 2022, 5:35am UTC](https://discuss.elastic.co/t/some-questions/296304 "2022-02-07T05:35:24Z")
Is it a good idea to use Elasticsearch master nodes IPs(3 nodes) in the logstash or filebeat Or do we need to tell beat to use datanodes directly? Please note that master nodes has lots of resources but master nodes min… --- ## [Scripted field using painless - creating new field based on multiple fields](https://discuss.elastic.co/t/scripted-field-using-painless-creating-new-field-based-on-multiple-fields/296402)
**Author:** [@iraidalavrovaa](https://discuss.elastic.co/u/iraidalavrovaa)\ **Replies:** 3\ **Last updated:** [February 7, 2022, 5:19am UTC](https://discuss.elastic.co/t/scripted-field-using-painless-creating-new-field-based-on-multiple-fields/296402 "2022-02-07T05:19:30Z")
Hi all, I have multiple fields containing the values of the same type (strings). The underlying structure of the division into these fields has changed. So I want to reorganize these fields for better filtering and vis… --- ## [Kibana Sizing Guide?](https://discuss.elastic.co/t/kibana-sizing-guide/296395)
**Author:** [@crpj](https://discuss.elastic.co/u/crpj)\ **Replies:** 4\ **Last updated:** [February 7, 2022, 4:44am UTC](https://discuss.elastic.co/t/kibana-sizing-guide/296395 "2022-02-07T04:44:51Z")
Hello, I am attempting to create a sizing estimate and did not find specific guidance for Kibana, could anyone clarify if there is an official guide? As of now, I am considering this setup to be a single machine: 4 CPU… --- ## [Elasticsearch-5.5.1 not starting](https://discuss.elastic.co/t/elasticsearch-5-5-1-not-starting/296325)
**Author:** [@Kiranreddyk](https://discuss.elastic.co/u/Kiranreddyk)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:43am UTC](https://discuss.elastic.co/t/elasticsearch-5-5-1-not-starting/296325 "2022-02-07T04:43:32Z")
HI , Need help on Elasticsearch-5.5.1.. When i start services on RHEL 7 .. it just hungs without any logs/error message.. where as I am able start Elasticsearch-6.2.2 services on same server.. This is all hapening af… --- ## [Logstash Persistant Queue](https://discuss.elastic.co/t/logstash-persistant-queue/296410)
**Author:** [@amitmahajan29](https://discuss.elastic.co/u/amitmahajan29)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 4:18am UTC](https://discuss.elastic.co/t/logstash-persistant-queue/296410 "2022-02-07T04:18:17Z")
I'm trying to create a persistant Queue which will sit between logstash and Elasticsearch. My aim being, in case the cluster goes red due to any scenario, the logs won't be lost. But since the persistant queue typicall… --- ## [Create alerts for logs ingestion in kibana](https://discuss.elastic.co/t/create-alerts-for-logs-ingestion-in-kibana/295772)
**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:16am UTC](https://discuss.elastic.co/t/create-alerts-for-logs-ingestion-in-kibana/295772 "2022-02-07T04:16:07Z")
Hello, I'm trying to create an alert for log ingestion alert. ex- If we have one index pattern and logs stopped coming to the kibana for the last 5 min, Can we create an alert for this in kibana? --- ## [Filter for field contains value in Dashboard](https://discuss.elastic.co/t/filter-for-field-contains-value-in-dashboard/296398)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 5\ **Last updated:** [February 7, 2022, 3:29am UTC](https://discuss.elastic.co/t/filter-for-field-contains-value-in-dashboard/296398 "2022-02-07T03:29:29Z")
Hi All, I'm using 7.16.2 version. I want to ask if there is a possibility to filter the dashboard by field that contain certain string? Thanks, Shay --- ## [How do I restore certificate created on one node to other?](https://discuss.elastic.co/t/how-do-i-restore-certificate-created-on-one-node-to-other/296377)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 2:39am UTC](https://discuss.elastic.co/t/how-do-i-restore-certificate-created-on-one-node-to-other/296377 "2022-02-07T02:39:51Z")
Hi Team, I have created one setup for testing purpose where I installed complete elasticstack on one host with complete certificates. In case if that host is crashed and If I need to resinstall the new host; how do I r… --- ## [Find all the nearest points that lie near linestring data](https://discuss.elastic.co/t/find-all-the-nearest-points-that-lie-near-linestring-data/296400)
**Author:** [@vaseem001](https://discuss.elastic.co/u/vaseem001)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 1:58am UTC](https://discuss.elastic.co/t/find-all-the-nearest-points-that-lie-near-linestring-data/296400 "2022-02-07T01:58:08Z")
Let's say I have an index of points and I query linestring data so how can I find the nearest point that lies near give linestring data --- ## [How to compare index pattern values?](https://discuss.elastic.co/t/how-to-compare-index-pattern-values/296394)
**Author:** [@Travel\_Time](https://discuss.elastic.co/u/Travel_Time)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 1:56am UTC](https://discuss.elastic.co/t/how-to-compare-index-pattern-values/296394 "2022-02-07T01:56:55Z")
Hello. I want to compare index patterns and as a result find the same ones. So for example I have index pattern1 where I have indexes with columns like --\> |pattern1\* \[index-1, index-2\] | col1 | col2 | col3 | ==… --- ## [Beginner here; how do I](https://discuss.elastic.co/t/beginner-here-how-do-i/292514)
**Author:** [@end-user](https://discuss.elastic.co/u/end-user)\ **Replies:** 26\ **Last updated:** [February 7, 2022, 12:34am UTC](https://discuss.elastic.co/t/beginner-here-how-do-i/292514 "2022-02-07T00:34:43Z")
I'm new to this stack ecosystem and I was hoping someone could point me to the elements that might fit my project. I have a command that I'd like to run on a schedule (like every 10 minutes) that generates some good met… --- ## [Storage size doubled after Update By Query](https://discuss.elastic.co/t/storage-size-doubled-after-update-by-query/296405)
**Author:** [@yamaga](https://discuss.elastic.co/u/yamaga)\ **Replies:** 1\ **Last updated:** [February 6, 2022, 11:58pm UTC](https://discuss.elastic.co/t/storage-size-doubled-after-update-by-query/296405 "2022-02-06T23:58:17Z")
Hi, Mi index has 17Gb of storage size But where I executed (2 times !) the "update by query" querey to copy a field in an other one the size is increased : The Docs count doesnt change. POST jp\_data\_stk\_mouv/\_updat… --- ## [Aggregations for combinations / permutations?](https://discuss.elastic.co/t/aggregations-for-combinations-permutations/296058)
**Author:** [@Emporea](https://discuss.elastic.co/u/Emporea)\ **Replies:** 2\ **Last updated:** [February 6, 2022, 11:17pm UTC](https://discuss.elastic.co/t/aggregations-for-combinations-permutations/296058 "2022-02-06T23:17:18Z")
Are there aggregations available to calculate combinations or permutations of keywords in one field or more field per document? Or is this a task for some painless script action I should learn? Example: keyword\_field … --- ## [Elastic Stack setup with multiple instances of different Beats](https://discuss.elastic.co/t/elastic-stack-setup-with-multiple-instances-of-different-beats/296109)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 3\ **Last updated:** [February 6, 2022, 9:57pm UTC](https://discuss.elastic.co/t/elastic-stack-setup-with-multiple-instances-of-different-beats/296109 "2022-02-06T21:57:34Z")
Hello, we want to use multiple instances of the different Beats. (File, Metric, Winlog, Packet and Heart) Metricbeat on multiple servers for monitoring, Filebeat on multiple servers for logs and so on. They should col… --- ## [Getting Error while configuring ELK stack Filebeat to remote server via Terraform](https://discuss.elastic.co/t/getting-error-while-configuring-elk-stack-filebeat-to-remote-server-via-terraform/296252)
**Author:** [@MurLeeDas](https://discuss.elastic.co/u/MurLeeDas)\ **Replies:** 0\ **Last updated:** [February 4, 2022, 5:47am UTC](https://discuss.elastic.co/t/getting-error-while-configuring-elk-stack-filebeat-to-remote-server-via-terraform/296252 "2022-02-04T05:47:51Z")
Hello All, My usecase is to deploy ELK stack to AWS ubuntu server. I have all the required installation and configurations commands in .sh file in the local. And while doing apply, I am getting error in the remote exec … --- ## [Feature Question around KPI Visualisation](https://discuss.elastic.co/t/feature-question-around-kpi-visualisation/296287)
**Author:** [@Gosborne](https://discuss.elastic.co/u/Gosborne)\ **Replies:** 0\ **Last updated:** [February 4, 2022, 11:50am UTC](https://discuss.elastic.co/t/feature-question-around-kpi-visualisation/296287 "2022-02-04T11:50:18Z")
I'm currently setting up Elastic Security as a single pane of glass for security information and event management. As part of this we have all our alerts being created in the detections pane with the SOC opening/closing … [Previous page](https://discuss.elastic.co/latest.md?page=1273) [Next page](https://discuss.elastic.co/latest.md?page=1275)