# Latest **URL:** https://discuss.elastic.co/latest.md?page=1662 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1663 --- ## [Kiaban service unavailable while creating visualization](https://discuss.elastic.co/t/kiaban-service-unavailable-while-creating-visualization/273798)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 4\ **Last updated:** [May 25, 2021, 4:49am UTC](https://discuss.elastic.co/t/kiaban-service-unavailable-while-creating-visualization/273798 "2021-05-25T04:49:13Z")
Hi, I have a ELK 7.6.2 setup of 5 node cluster. When I am saving the new visualization or creating a new index in kibana getting following error. Also I checked elasticsearch and kibana logs and found no error. Ki… --- ## [Kibana TSVB limitation](https://discuss.elastic.co/t/kibana-tsvb-limitation/273835)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 4:11am UTC](https://discuss.elastic.co/t/kibana-tsvb-limitation/273835 "2021-05-25T04:11:35Z")
Please let me know if we can calculate the unique count of a field on the basis of another field in TSVB visual. I want to create a visual like below: - But in TSVB, there is no option for Unique count --- ## [Compare 2 lines of a given index](https://discuss.elastic.co/t/compare-2-lines-of-a-given-index/273253)
**Author:** [@Ronan\_Petit](https://discuss.elastic.co/u/Ronan_Petit)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 3:53am UTC](https://discuss.elastic.co/t/compare-2-lines-of-a-given-index/273253 "2021-05-25T03:53:30Z")
Hi ! My system is giving me two lines Start/Stop in the same index for the use of services. It looks like the following example : Timestamp1 Start Service1 IDService11 Timestamp2 Start Service1 IDService21 Timestamp3… --- ## [How can I match timestamp](https://discuss.elastic.co/t/how-can-i-match-timestamp/273612)
**Author:** [@BAIBAA](https://discuss.elastic.co/u/BAIBAA)\ **Replies:** 3\ **Last updated:** [May 25, 2021, 3:44am UTC](https://discuss.elastic.co/t/how-can-i-match-timestamp/273612 "2021-05-25T03:44:22Z")
--- ## [Filtering local holidays(date) in Kibana dashboard](https://discuss.elastic.co/t/filtering-local-holidays-date-in-kibana-dashboard/272875)
**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\ **Replies:** 3\ **Last updated:** [May 14, 2021, 12:33pm UTC](https://discuss.elastic.co/t/filtering-local-holidays-date-in-kibana-dashboard/272875 "2021-05-14T12:33:00Z")
I’m using ELK – 7.12.1 and the following days are our local holidays. 01-Jan-2021 14-Jan-2021 26-Jan-2021 11-Mar-2021 02-Apr-2021 13-Apr-2021 In Kibana dashboard is it possible to exclude these holidays(specific dates)… --- ## [Can filebeats access the lifecycle policies on Elasticsearch?](https://discuss.elastic.co/t/can-filebeats-access-the-lifecycle-policies-on-elasticsearch/273882)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 3\ **Last updated:** [May 25, 2021, 3:35am UTC](https://discuss.elastic.co/t/can-filebeats-access-the-lifecycle-policies-on-elasticsearch/273882 "2021-05-25T03:35:30Z")
In case of logstash I was able to specify an existing policy name in the Elasticsearch output. Something like: output { elasticsearch { hosts =\> "http://XXXXXXXXXXX" ilm\_… --- ## [Logstash configuration error](https://discuss.elastic.co/t/logstash-configuration-error/273652)
**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 2:59am UTC](https://discuss.elastic.co/t/logstash-configuration-error/273652 "2021-05-25T02:59:34Z")
hello, I have a problem when I try to configure the logstash here are the errors that appear Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs erro… --- ## [Maximum shards per node](https://discuss.elastic.co/t/maximum-shards-per-node/273830)
**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 2:17am UTC](https://discuss.elastic.co/t/maximum-shards-per-node/273830 "2021-05-25T02:17:54Z")
Is there any option to disable the max\_shard\_per\_node in cluster settings in Elastic 7.12 as in the older version 6.5 there is no such values. Elastic 7.12 "cluster" : { "max\_shards\_per\_node" : "1000" } --- ## [Make idices](https://discuss.elastic.co/t/make-idices/273868)
**Author:** [@majidbarz](https://discuss.elastic.co/u/majidbarz)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 2:07am UTC](https://discuss.elastic.co/t/make-idices/273868 "2021-05-25T02:07:05Z")
HI I use winlogbeats i want to get log from winlogbeats and send to logstash then logstash import to elasticsearch. default in /etc/logstash/conf.d doesnt exist winlogbeat and i use pipelines.yaml and make new file but … --- ## [Words vs Guids, what is faster?](https://discuss.elastic.co/t/words-vs-guids-what-is-faster/273819)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 1:53am UTC](https://discuss.elastic.co/t/words-vs-guids-what-is-faster/273819 "2021-05-25T01:53:48Z")
I'm in front of a design choice where I would need a bit of help to choose the most efficient way. I'm currently indexing data tagged with a string of comma separated Guids, for example: \\"e659959d-392f-44c5-83a5-fb959… --- ## [Handlebars syntax in TSVB Markdown panel with conditional output for multiple items?](https://discuss.elastic.co/t/handlebars-syntax-in-tsvb-markdown-panel-with-conditional-output-for-multiple-items/273797)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 1:43am UTC](https://discuss.elastic.co/t/handlebars-syntax-in-tsvb-markdown-panel-with-conditional-output-for-multiple-items/273797 "2021-05-25T01:43:07Z")
Background I have two dashboards: Dashboard A is designed to present information about multiple items. Dashboard B is designed to present information about one of those items. Visualizations in dashboard A drill-down … --- ## [How to plan/define needed clusters](https://discuss.elastic.co/t/how-to-plan-define-needed-clusters/273514)
**Author:** [@agKaspar](https://discuss.elastic.co/u/agKaspar)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 12:25am UTC](https://discuss.elastic.co/t/how-to-plan-define-needed-clusters/273514 "2021-05-25T00:25:16Z")
Hello, I'm working on setting up an elastic search environment within a kubernetes cluster (on MS Azure AKS), and am reading through the Elastic Cloud on Kubernetes \[1.5\] | Elastic documentation. It explains how to setu… --- ## [Can I delete some indices manually from elasticsearch to free up some space?](https://discuss.elastic.co/t/can-i-delete-some-indices-manually-from-elasticsearch-to-free-up-some-space/273480)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 9\ **Last updated:** [May 25, 2021, 12:19am UTC](https://discuss.elastic.co/t/can-i-delete-some-indices-manually-from-elasticsearch-to-free-up-some-space/273480 "2021-05-25T00:19:16Z")
Hi All, I have indices from 1st Feb in elasticsearch. Everyday there on average 4 indices. It has consumed 79 GB space out of 100GB. Can I delete few of them to release space without impacting to anything? Thanks, --- ## [Error No Available connections logstash a elastic](https://discuss.elastic.co/t/error-no-available-connections-logstash-a-elastic/273568)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 0\ **Last updated:** [May 20, 2021, 4:47pm UTC](https://discuss.elastic.co/t/error-no-available-connections-logstash-a-elastic/273568 "2021-05-20T16:47:47Z")
Good morning, I have encountered the following error, and I do not know how to solve this problem in definitive; we have tried connections and everything is correct, we have tried telnetting to elastic and everything is … --- ## [How to send Elasticsearch 6.8 logs to syslog?](https://discuss.elastic.co/t/how-to-send-elasticsearch-6-8-logs-to-syslog/273621)
**Author:** [@sviscapi](https://discuss.elastic.co/u/sviscapi)\ **Replies:** 0\ **Last updated:** [May 21, 2021, 6:38am UTC](https://discuss.elastic.co/t/how-to-send-elasticsearch-6-8-logs-to-syslog/273621 "2021-05-21T06:38:58Z")
Dear all, First post on these boards :slight\_smile: I've been tasked to configure some Elasticsearch 6.8 server to send its logs to syslog. Based on the official documentation, I came up with the following in /etc/elas… --- ## [Reindexing of the same document](https://discuss.elastic.co/t/reindexing-of-the-same-document/273629)
**Author:** [@Renat\_Zamaletdinov](https://discuss.elastic.co/u/Renat_Zamaletdinov)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 12:06am UTC](https://discuss.elastic.co/t/reindexing-of-the-same-document/273629 "2021-05-25T00:06:54Z")
What will happen if we upsert an existing document with the same content and the same id? Will it trigger reindexing? Or it will detect that nothing is changed and will do nothing? --- ## [Logstash data is tripled](https://discuss.elastic.co/t/logstash-data-is-tripled/273671)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 0\ **Last updated:** [May 21, 2021, 2:08pm UTC](https://discuss.elastic.co/t/logstash-data-is-tripled/273671 "2021-05-21T14:08:44Z")
Hello, I am monitoring several computers in different configurations in logstash, they are for 1 minute that I send data from logstash to kibana, but I have seen in discover that the data are appearing tripled and I have… --- ## [Installing Filebeat](https://discuss.elastic.co/t/installing-filebeat/273771)
**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\ **Replies:** 2\ **Last updated:** [May 25, 2021, 12:02am UTC](https://discuss.elastic.co/t/installing-filebeat/273771 "2021-05-25T00:02:34Z")
Hi All, I have downloaded Filebeat and trying to install per instruction provided on the site. I have extracted it to C:\\Program Files , I have renamed it and ran powershell as admin as well. When I run the command C:… --- ## [Elastic APM (Java Agent) getting 400 error](https://discuss.elastic.co/t/elastic-apm-java-agent-getting-400-error/272527)
**Author:** [@adsandie](https://discuss.elastic.co/u/adsandie)\ **Replies:** 7\ **Last updated:** [May 25, 2021, 12:02am UTC](https://discuss.elastic.co/t/elastic-apm-java-agent-getting-400-error/272527 "2021-05-25T00:02:18Z")
Kibana version: 7.12.1 Elasticsearch version: 7.12.1 APM Server version: 7.12.1 APM Agent language and version: JAVA elastic-apm-agent-1.23.0.jar Browser version: Original install method (e.g. download page, yum, de… --- ## [Way to easily compare two custom time/dates](https://discuss.elastic.co/t/way-to-easily-compare-two-custom-time-dates/273867)
**Author:** [@Tydorius](https://discuss.elastic.co/u/Tydorius)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 12:00am UTC](https://discuss.elastic.co/t/way-to-easily-compare-two-custom-time-dates/273867 "2021-05-25T00:00:16Z")
I am working to monitor network performance during a series of experiments. I'll be running identical experiments on various network configurations and would like to compare them. Is there an easy way to configure a das… --- ## [Search all fields for a string](https://discuss.elastic.co/t/search-all-fields-for-a-string/273846)
**Author:** [@vinholla](https://discuss.elastic.co/u/vinholla)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 11:57pm UTC](https://discuss.elastic.co/t/search-all-fields-for-a-string/273846 "2021-05-24T23:57:27Z")
I am unable to get any results GET /earnings\_transcripts/\_search { "query": { "bool": { "must": \[ { "match\_phrase": { "presentationContent.componentText": "inflation" } } \] } } } my index data looks "\_ind… --- ## [Ruby code works in an online IDE but not in logstash pipeline](https://discuss.elastic.co/t/ruby-code-works-in-an-online-ide-but-not-in-logstash-pipeline/273874)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 10:47pm UTC](https://discuss.elastic.co/t/ruby-code-works-in-an-online-ide-but-not-in-logstash-pipeline/273874 "2021-05-24T22:47:41Z")
\`Hi, Im using ruby scan method to get the values of some metrics in a line examples: 73% virtual memory used,4442MB virtual memory free,0.10955 pages-sec\` 0% swap space used,6125MB swap space free,0 pages-sec; 88% phys… --- ## [Automatic restart of logstash](https://discuss.elastic.co/t/automatic-restart-of-logstash/273860)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 6\ **Last updated:** [May 24, 2021, 9:00pm UTC](https://discuss.elastic.co/t/automatic-restart-of-logstash/273860 "2021-05-24T21:00:31Z")
I would like the logstash service to restart automatically every Tuesday at 8:00 p.m. What type of configuration can you offer me? --- ## [Failed to deploy Endpoint on Windows Server 2008 R2 Standard](https://discuss.elastic.co/t/failed-to-deploy-endpoint-on-windows-server-2008-r2-standard/273704)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 7\ **Last updated:** [May 24, 2021, 8:14pm UTC](https://discuss.elastic.co/t/failed-to-deploy-endpoint-on-windows-server-2008-r2-standard/273704 "2021-05-24T20:14:13Z")
Hi, Notes: Running ELK 7.11.2 Standalone OS Windows Server 2008 R2 Standard I am deploying the Elastic Endpoint on several servers. On servers running OS Windows Server 2012 R2 Datacenter and Windows Server 2019 Data… --- ## [Best way to aggregate terms from a text field with type text](https://discuss.elastic.co/t/best-way-to-aggregate-terms-from-a-text-field-with-type-text/273864)
**Author:** [@thedraketaylor](https://discuss.elastic.co/u/thedraketaylor)\ **Replies:** 0\ **Last updated:** [May 24, 2021, 8:09pm UTC](https://discuss.elastic.co/t/best-way-to-aggregate-terms-from-a-text-field-with-type-text/273864 "2021-05-24T20:09:28Z")
I'm using Elasticsearch to hold descriptions of products I get from scraping sites. I have a description field in my index to hold the data and it's of type "text" because I want to search in those fields. Now, I find my… --- ## [Client Timeout error in elastic heartbeat for http POST](https://discuss.elastic.co/t/client-timeout-error-in-elastic-heartbeat-for-http-post/273002)
**Author:** [@Bikram\_Dhoju](https://discuss.elastic.co/u/Bikram_Dhoju)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 7:33pm UTC](https://discuss.elastic.co/t/client-timeout-error-in-elastic-heartbeat-for-http-post/273002 "2021-05-24T19:33:20Z")
I have an error while trying to apply the heartbeat for the post request. My heartbeat config is: heartbeat.monitors: - type: http ipv4: true mode: any timeout: 30s name: test schedule:… --- ## [Prefix Search](https://discuss.elastic.co/t/prefix-search/273324)
**Author:** [@pesc](https://discuss.elastic.co/u/pesc)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 6:55pm UTC](https://discuss.elastic.co/t/prefix-search/273324 "2021-05-24T18:55:00Z")
Hi Is it possible to use a PrefixSearch with Appsearch? With Elasticsearch it's easy. Something like that: { "query": { "match\_phrase\_prefix": { "aaaa\_record$string": { "query": "2a02:168:2132:" … --- ## [Enterprise Search (App Search) - doesn't expose with custom 443 port in Kubernetes](https://discuss.elastic.co/t/enterprise-search-app-search-doesnt-expose-with-custom-443-port-in-kubernetes/273441)
**Author:** [@111476](https://discuss.elastic.co/u/111476)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 6:32pm UTC](https://discuss.elastic.co/t/enterprise-search-app-search-doesnt-expose-with-custom-443-port-in-kubernetes/273441 "2021-05-24T18:32:18Z")
Hi guys! Spent 2 days digging and trying to debug things, but now I'm stuck. I deployed Kibana, ES, and App Search (Enterprise Search) to my Kubernetes cluster via this guide Everything works great within the cluster w… --- ## [How to remove \_id, \_index, \_type, num\_matches, num\_hits and @timestamp from elastialert rules](https://discuss.elastic.co/t/how-to-remove-id-index-type-num-matches-num-hits-and-timestamp-from-elastialert-rules/273822)
**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 6:27pm UTC](https://discuss.elastic.co/t/how-to-remove-id-index-type-num-matches-num-hits-and-timestamp-from-elastialert-rules/273822 "2021-05-24T18:27:41Z")
Hi All, Below is the content which im getting in my gmail inbox. I want to remove \_id, \_index, \_type, num\_matches, num\_hits and @timestamp all this only i want message to be include in my email triggering everytime. … --- ## [URGENT , please help with creating a new engine](https://discuss.elastic.co/t/urgent-please-help-with-creating-a-new-engine/273660)
**Author:** [@Jan\_Orange](https://discuss.elastic.co/u/Jan_Orange)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 6:13pm UTC](https://discuss.elastic.co/t/urgent-please-help-with-creating-a-new-engine/273660 "2021-05-24T18:13:40Z")
Hello I deleted an engine by accident, is there a way to restore it again ? And if not , how can i recreate an engine with the same name ? because it refuses , it says : Name cannot be reused , i really needed Thanks… [Previous page](https://discuss.elastic.co/latest.md?page=1661) [Next page](https://discuss.elastic.co/latest.md?page=1663)