# Latest **URL:** https://discuss.elastic.co/latest.md?page=1346 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1347 --- ## [Showing All Facet values irrespective of the selections in the other facets](https://discuss.elastic.co/t/showing-all-facet-values-irrespective-of-the-selections-in-the-other-facets/290830)
**Author:** [@Mecadamia.nut](https://discuss.elastic.co/u/Mecadamia.nut)\ **Replies:** 2\ **Last updated:** [December 15, 2021, 4:16am UTC](https://discuss.elastic.co/t/showing-all-facet-values-irrespective-of-the-selections-in-the-other-facets/290830 "2021-12-15T04:16:42Z")
i have two facets and i'm declaring them as disjunctive. the values in the facets show up fine as long as i'm selecting the options in the facet. when i start selecting the options in the second facet, some of the values… --- ## [Input 'aws-s3' failed with: failed to initialize s3 poller](https://discuss.elastic.co/t/input-aws-s3-failed-with-failed-to-initialize-s3-poller/288130)
**Author:** [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\ **Replies:** 50\ **Last updated:** [December 15, 2021, 3:05am UTC](https://discuss.elastic.co/t/input-aws-s3-failed-with-failed-to-initialize-s3-poller/288130 "2021-12-15T03:05:25Z")
Hi, I've been trying to setup AWS module on 7.15 Elastic Stack cluster running as containers to ingest cloudtrail, cloudwatch, elb, s3access and vpcflow events (configured only for cloudtrail atm). However, there seems… --- ## [Kibana Uptime Monitor](https://discuss.elastic.co/t/kibana-uptime-monitor/289151)
**Author:** [@mst3r25](https://discuss.elastic.co/u/mst3r25)\ **Replies:** 3\ **Last updated:** [December 15, 2021, 12:49am UTC](https://discuss.elastic.co/t/kibana-uptime-monitor/289151 "2021-12-15T00:49:24Z")
I'm using the Kibana Uptime app to ping all my servers. I have more than 10 locations, but Kibana seems to default to 10 locations. Is there a way to make this dynamic or increase the locations from 10? --- ## [Searching for patterns?](https://discuss.elastic.co/t/searching-for-patterns/291881)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 12:12am UTC](https://discuss.elastic.co/t/searching-for-patterns/291881 "2021-12-15T00:12:24Z")
After a little tinkering with Enterprise search I can see using it far more then I expected. While it needs a considerable about of user interface work still it's come a long way in a short time. Just to not leave that c… --- ## [Export Raw CSV (for Kibana read only user)](https://discuss.elastic.co/t/export-raw-csv-for-kibana-read-only-user/291864)
**Author:** [@luca.scarpato](https://discuss.elastic.co/u/luca.scarpato)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 10:45pm UTC](https://discuss.elastic.co/t/export-raw-csv-for-kibana-read-only-user/291864 "2021-12-14T22:45:54Z")
Hi our customers are accessing the kibana dashboard in read only mode and they are trying to download the Raw CSV but they get only 1 number (same as the formatted CSV) It seems like they cannot download the entire raw … --- ## [DeprecationWarning: The 'body' parameter is deprecated for the 'index' API and will be removed in a future version](https://discuss.elastic.co/t/deprecationwarning-the-body-parameter-is-deprecated-for-the-index-api-and-will-be-removed-in-a-future-version/291876)
**Author:** [@ingmar](https://discuss.elastic.co/u/ingmar)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 10:15pm UTC](https://discuss.elastic.co/t/deprecationwarning-the-body-parameter-is-deprecated-for-the-index-api-and-will-be-removed-in-a-future-version/291876 "2021-12-14T22:15:06Z")
Describe the feature: Elasticsearch version 7.15 elasticsearch-py version (elasticsearch.\_\_versionstr\_\_): 7.15.2 Please make sure the major version matches the Elasticsearch server you are running. Description of th… --- ## [Id size check](https://discuss.elastic.co/t/id-size-check/291870)
**Author:** [@thinkdffrnt](https://discuss.elastic.co/u/thinkdffrnt)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 8:39pm UTC](https://discuss.elastic.co/t/id-size-check/291870 "2021-12-14T20:39:09Z")
\_id is limited to 512 bytes in size and larger values will be rejected How can I check the bytes size in Java? Is this UTF 8 encoding? I can't find any info --- ## [Benchmarking ES using Rally store size metric increase and decrease](https://discuss.elastic.co/t/benchmarking-es-using-rally-store-size-metric-increase-and-decrease/291804)
**Author:** [@fargolk](https://discuss.elastic.co/u/fargolk)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 8:25pm UTC](https://discuss.elastic.co/t/benchmarking-es-using-rally-store-size-metric-increase-and-decrease/291804 "2021-12-14T20:25:13Z")
I was benchmarking an ES index with different shard numbers using esrally. to find the shard number with best throughput for the specific index. As I read in documents store size is index size (translog excluded) In … --- ## [Multiple Pipelines throwing errors when enabled](https://discuss.elastic.co/t/multiple-pipelines-throwing-errors-when-enabled/291858)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 9\ **Last updated:** [December 14, 2021, 8:28pm UTC](https://discuss.elastic.co/t/multiple-pipelines-throwing-errors-when-enabled/291858 "2021-12-14T20:28:15Z")
Good Afternoon Elastic Peeps; I have been working with configuring and employing multiple pipelines in my ELK stack. I have implemented ELK 7.13.4 and when I use a simple syslog pipeline I am able to gather the informa… --- ## [Logstash Date filter plugin doesn't work with Java 8 after 7.16.1 upgrade](https://discuss.elastic.co/t/logstash-date-filter-plugin-doesnt-work-with-java-8-after-7-16-1-upgrade/291811)
**Author:** [@YuryShupletsov](https://discuss.elastic.co/u/YuryShupletsov)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 7:40pm UTC](https://discuss.elastic.co/t/logstash-date-filter-plugin-doesnt-work-with-java-8-after-7-16-1-upgrade/291811 "2021-12-14T19:40:15Z")
Hello, We have updated Logstash from 7.10.1 to 7.16.1 and cannot start it with the error: \[2021-12-14T15:35:05,385\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/… --- ## [Multiline pattern not matching in fluentbit](https://discuss.elastic.co/t/multiline-pattern-not-matching-in-fluentbit/291853)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 3\ **Last updated:** [December 14, 2021, 6:55pm UTC](https://discuss.elastic.co/t/multiline-pattern-not-matching-in-fluentbit/291853 "2021-12-14T18:55:32Z")
Hello team, I am ingesting data through fluent bit. we are facing some multiline pattern issu. can any one help me on this. In the message field it is displaying only 1 line. Pattern: (?m-ix)^(?\\\d{4}\\-\\d{2}\\… --- ## [ElasticSearch autocomplete/suggest by token](https://discuss.elastic.co/t/elasticsearch-autocomplete-suggest-by-token/291854)
**Author:** [@abhinav-nath](https://discuss.elastic.co/u/abhinav-nath)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 6:15pm UTC](https://discuss.elastic.co/t/elasticsearch-autocomplete-suggest-by-token/291854 "2021-12-14T18:15:12Z")
I want to create search suggestions based on the tokens (and not full documents) that are present in my index. For example: I have a simple index for movies in which I have these two documents: {"name":"Captain Ameri… --- ## [Search UI sorting by date: No mapping found error](https://discuss.elastic.co/t/search-ui-sorting-by-date-no-mapping-found-error/291857)
**Author:** [@asorondo](https://discuss.elastic.co/u/asorondo)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 6:36pm UTC](https://discuss.elastic.co/t/search-ui-sorting-by-date-no-mapping-found-error/291857 "2021-12-14T18:36:41Z")
Hi! I'm using Elasticsearch and search UI and wish to sort by different fields. I'm using the search UI component "Sorting" as follows: \ **Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 3\ **Last updated:** [December 14, 2021, 6:19pm UTC](https://discuss.elastic.co/t/how-to-re-name-field-names-in-logstash/291803 "2021-12-14T18:19:06Z") Hi all, We have field names like client.geo.name and event.category , how can we re-name the names to this client geo name and event category. "\[event\]\[category\]" =\> "Event category" "\[client\]\[geo\]\[name\]" =\> "client g… --- ## [Logstash sending data to kafka topic at same time which disturbs ordering of log transactions](https://discuss.elastic.co/t/logstash-sending-data-to-kafka-topic-at-same-time-which-disturbs-ordering-of-log-transactions/291848)
**Author:** [@venkataraman](https://discuss.elastic.co/u/venkataraman)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 5:58pm UTC](https://discuss.elastic.co/t/logstash-sending-data-to-kafka-topic-at-same-time-which-disturbs-ordering-of-log-transactions/291848 "2021-12-14T17:58:02Z")
Hello Everyone, My log file transactions look like this as shown below My log file looks like this: start time: 2021-10-11T13:54:34Z category: commercial status: started end time: start time: 2021-10-11T13:54:34Z c… --- ## [Problem with "\\n" character with tcp output plugin](https://discuss.elastic.co/t/problem-with-n-character-with-tcp-output-plugin/291822)
**Author:** [@lemahdois](https://discuss.elastic.co/u/lemahdois)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 5:55pm UTC](https://discuss.elastic.co/t/problem-with-n-character-with-tcp-output-plugin/291822 "2021-12-14T17:55:59Z")
Hello, on my logstash pipeline I receive logs that contain "\\n" character as follows "message" : "aaaa\\nbbbbb" When sending this log using tcp output plugin, the destination receives the log on two lines aaaa bb… --- ## [How to update log4j jar in logstash installed in ubuntu VM](https://discuss.elastic.co/t/how-to-update-log4j-jar-in-logstash-installed-in-ubuntu-vm/291830)
**Author:** [@Rughma\_Sussan\_Renji](https://discuss.elastic.co/u/Rughma_Sussan_Renji)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 5:47pm UTC](https://discuss.elastic.co/t/how-to-update-log4j-jar-in-logstash-installed-in-ubuntu-vm/291830 "2021-12-14T17:47:38Z")
how will I upgrade my logstash version in ubuntu to 2.15.0, currently it is 2.14.0, but due to the vulnerability issue I need to update it to 2.15.0. can anyone tell me the command to update it to the latest version --- ## [Create tab delimited string for output](https://discuss.elastic.co/t/create-tab-delimited-string-for-output/291840)
**Author:** [@trwillis](https://discuss.elastic.co/u/trwillis)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 5:40pm UTC](https://discuss.elastic.co/t/create-tab-delimited-string-for-output/291840 "2021-12-14T17:40:52Z")
I need to construct a string with tab as delimiters for downstream consumption. I don't want to create a csv file because I am sending it over the network somewhere else. example input: field1: timestamp field2: host… --- ## [CSV Export - Kibana.log error - TypeError: Cannot read property 'convert' of undefined](https://discuss.elastic.co/t/csv-export-kibana-log-error-typeerror-cannot-read-property-convert-of-undefined/289480)
**Author:** [@hocho](https://discuss.elastic.co/u/hocho)\ **Replies:** 4\ **Last updated:** [December 14, 2021, 5:27pm UTC](https://discuss.elastic.co/t/csv-export-kibana-log-error-typeerror-cannot-read-property-convert-of-undefined/289480 "2021-12-14T17:27:19Z")
Hello, I recently updated Kibana 7.10.2 to 7.15.0 and with the update/upgrade of Kibana I started noticing the below error in kibana.log when an CSV export running and missing data in the exported CSV file. This error … --- ## [Can't delete the reports file on kibana server](https://discuss.elastic.co/t/cant-delete-the-reports-file-on-kibana-server/291385)
**Author:** [@Hello-Linux](https://discuss.elastic.co/u/Hello-Linux)\ **Replies:** 1\ **Last updated:** [December 14, 2021, 5:25pm UTC](https://discuss.elastic.co/t/cant-delete-the-reports-file-on-kibana-server/291385 "2021-12-14T17:25:43Z")
The report document generated by kibana is always kept on the server, how to delete it? and ook at can't delete the reports on kibana · Issue #119420 · elastic/kibana · GitHub --- ## [Missing Field Value For Nested Field - Function Score Query | v7.10.2](https://discuss.elastic.co/t/missing-field-value-for-nested-field-function-score-query-v7-10-2/291365)
**Author:** [@gursahibsahni](https://discuss.elastic.co/u/gursahibsahni)\ **Replies:** 3\ **Last updated:** [December 14, 2021, 4:51pm UTC](https://discuss.elastic.co/t/missing-field-value-for-nested-field-function-score-query-v7-10-2/291365 "2021-12-14T16:51:22Z")
I have been trying for a long time now but the nested field value is always saying missing field value while calculating the score. Mapping: { "main\_idx" : { "mappings" : { "properties" : { "\_class"… --- ## [Aggregation buckets custom order](https://discuss.elastic.co/t/aggregation-buckets-custom-order/291838)
**Author:** [@mmoreram](https://discuss.elastic.co/u/mmoreram)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 4:24pm UTC](https://discuss.elastic.co/t/aggregation-buckets-custom-order/291838 "2021-12-14T16:24:09Z")
I'd like to define by hand the order of a term aggregation. Of course, these values should appear only when they are part of the result. Is there a way this can be done? Custom agg1 (x) Custom agg2 (x) Other1 (x) Oth… --- ## [Elasticsearch 5.6.6 security vulnerability log4j](https://discuss.elastic.co/t/elasticsearch-5-6-6-security-vulnerability-log4j/291821)
**Author:** [@William1](https://discuss.elastic.co/u/William1)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-6-security-vulnerability-log4j/291821 "2021-12-14T15:01:08Z")
Hello all, I would like to ask if we can keep our current version 5.6.6 and setting the JVM option, in order to mitigate this vulnerability? This since upgrading is not possible. Thanks for your help! --- ## [Enable X\_pack Watcher not showingup Watcher in elasticsearch](https://discuss.elastic.co/t/enable-x-pack-watcher-not-showingup-watcher-in-elasticsearch/291516)
**Author:** [@DoDuyen162000](https://discuss.elastic.co/u/DoDuyen162000)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 3:24pm UTC](https://discuss.elastic.co/t/enable-x-pack-watcher-not-showingup-watcher-in-elasticsearch/291516 "2021-12-14T15:24:25Z")
Hello!! Currently I am using Elasticsearch, kibana, logstash version 7.5.2. I want to enable X-pack Watcher on Elasticsearch. Can someone show me how to turn on Watcher? This is what I added in file /etc/Elasticsearc… --- ## [How to visualise nested time series data](https://discuss.elastic.co/t/how-to-visualise-nested-time-series-data/291445)
**Author:** [@wfhartford](https://discuss.elastic.co/u/wfhartford)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 3:17pm UTC](https://discuss.elastic.co/t/how-to-visualise-nested-time-series-data/291445 "2021-12-14T15:17:33Z")
I have an interesting data structure and I'm looking for advice on how to store it in Elasticsearch and visualise in kibana. The data is statistics related to queries to a separate time series database. Each document sum… --- ## [Index rollover issues](https://discuss.elastic.co/t/index-rollover-issues/290669)
**Author:** [@sandeepmuthathi](https://discuss.elastic.co/u/sandeepmuthathi)\ **Replies:** 7\ **Last updated:** [December 14, 2021, 2:31pm UTC](https://discuss.elastic.co/t/index-rollover-issues/290669 "2021-12-14T14:31:19Z")
Suppose I'm creating the ES index using beat system or logstash with date time interpolation. how do I configure rolling over of index if size reaches at certain GBs in a single day? I did the following but I'm doing … --- ## [7.16.1: Interacting with a cell on a 'Discovery' pane in a dashboard results in a blank page being displayed](https://discuss.elastic.co/t/7-16-1-interacting-with-a-cell-on-a-discovery-pane-in-a-dashboard-results-in-a-blank-page-being-displayed/291780)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 2:26pm UTC](https://discuss.elastic.co/t/7-16-1-interacting-with-a-cell-on-a-discovery-pane-in-a-dashboard-results-in-a-blank-page-being-displayed/291780 "2021-12-14T14:26:01Z")
Hi All, After upgrading to from 7.15.2 to 7.16.1 yesterday I've noticed that when I try to view the contents of any cell within a 'discovery' view on a dashboard it now results in a blank page being displayed, rather th… --- ## [Painless: How to simulate a hashmap as a variable for painless lab?](https://discuss.elastic.co/t/painless-how-to-simulate-a-hashmap-as-a-variable-for-painless-lab/291813)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 2:24pm UTC](https://discuss.elastic.co/t/painless-how-to-simulate-a-hashmap-as-a-variable-for-painless-lab/291813 "2021-12-14T14:24:29Z")
Hi, I've got below painless snippet // define sample data as hashmap (similar to Elastic output) def buy\_list = ' \[{doc\_count=13, category={buckets=\[{doc\_count=11, key=apple}, {doc\_count=12, key=mango}, {doc\_count=13, … --- ## [How convert Hashmap to JSON string in painless script?](https://discuss.elastic.co/t/how-convert-hashmap-to-json-string-in-painless-script/291812)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 0\ **Last updated:** [December 14, 2021, 2:20pm UTC](https://discuss.elastic.co/t/how-convert-hashmap-to-json-string-in-painless-script/291812 "2021-12-14T14:20:22Z")
Hi , this is very same question : How convert Hashmap to JSON string in painless script? Just checking is this possible in Logstash 7.x? Mostly wanted to convert a hashmap format to pure JSON for output purposes --- ## [Vega-lite histogram](https://discuss.elastic.co/t/vega-lite-histogram/291539)
**Author:** [@Shalhevet](https://discuss.elastic.co/u/Shalhevet)\ **Replies:** 3\ **Last updated:** [December 14, 2021, 2:12pm UTC](https://discuss.elastic.co/t/vega-lite-histogram/291539 "2021-12-14T14:12:08Z")
Hi, I would like to plot a histogram from a data set that includes many documents, and in each document there is an error value. the histogram should display the count of documents per each binned error values. I trie… [Previous page](https://discuss.elastic.co/latest.md?page=1345) [Next page](https://discuss.elastic.co/latest.md?page=1347)