# Latest **URL:** https://discuss.elastic.co/latest.md?page=1912 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1913 --- ## [Kibana map inport china\_provinces\_v1.geojson but Chinese charactor unidentifiable](https://discuss.elastic.co/t/kibana-map-inport-china-provinces-v1-geojson-but-chinese-charactor-unidentifiable/259931)
**Author:** [@yorkzhang](https://discuss.elastic.co/u/yorkzhang)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 3:12pm UTC](https://discuss.elastic.co/t/kibana-map-inport-china-provinces-v1-geojson-but-chinese-charactor-unidentifiable/259931 "2021-01-04T15:12:27Z")
I used Kibana map, import geojson file download from map.elastic.co china\_provinces\_v1.geojson, but Chinese charactor unidentifiable. I get doc from Dev Tools and see unidentifiable chinese charactor. But if I use onlin… --- ## [Elastic APM - Object reference not set to an instance of an object](https://discuss.elastic.co/t/elastic-apm-object-reference-not-set-to-an-instance-of-an-object/260089)
**Author:** [@LandgrafJ](https://discuss.elastic.co/u/LandgrafJ)\ **Replies:** 3\ **Last updated:** [January 4, 2021, 3:05pm UTC](https://discuss.elastic.co/t/elastic-apm-object-reference-not-set-to-an-instance-of-an-object/260089 "2021-01-04T15:05:53Z")
Kibana version: N/A Elasticsearch version: N/A APM Server version: N/A APM Agent language and version: C# .NET 4.6.1, agent v1.7.1 Browser version: N/A Original install method (e.g. download page, yum, deb, from sou… --- ## [Metricbeat Kubernetes Module has JSON marshal error](https://discuss.elastic.co/t/metricbeat-kubernetes-module-has-json-marshal-error/259900)
**Author:** [@matthew-mcdermott](https://discuss.elastic.co/u/matthew-mcdermott)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 2:48pm UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-module-has-json-marshal-error/259900 "2021-01-04T14:48:27Z")
I am using metricbeat's kubernetes module and have come across what I believe is a bug. It is related to this issue: https://github.com/elastic/beats/issues/19475. I am not a Go developer, but seems like a fix might be … --- ## [Will my "%{GREEDYDATA:\[log\_message\]}" overwrides all my other grok filters?](https://discuss.elastic.co/t/will-my-greedydata-log-message-overwrides-all-my-other-grok-filters/260063)
**Author:** [@yulaika](https://discuss.elastic.co/u/yulaika)\ **Replies:** 1\ **Last updated:** [January 4, 2021, 2:43pm UTC](https://discuss.elastic.co/t/will-my-greedydata-log-message-overwrides-all-my-other-grok-filters/260063 "2021-01-04T14:43:13Z")
grok { match =\> { "message" =\> \[ "(?\<\[log\]\[timestamp\]\>%{YEAR}-%{MONTHNUM}-%{MONTHDAY}%{SPACE}%{TIME}) \\\[%{NOTSPACE:\[LOG\]\[LEVEL\]}\\\] %{GREEDYDATA:\[log\_message\]}" , "(?\<\[log\]\[timestamp\]\>%{YEA… --- ## [Consolidate log lines sa one depending on the threadID information](https://discuss.elastic.co/t/consolidate-log-lines-sa-one-depending-on-the-threadid-information/257978)
**Author:** [@secintic](https://discuss.elastic.co/u/secintic)\ **Replies:** 1\ **Last updated:** [January 4, 2021, 1:54pm UTC](https://discuss.elastic.co/t/consolidate-log-lines-sa-one-depending-on-the-threadid-information/257978 "2021-01-04T13:54:27Z")
We have a syserr messages from one of our WebApplication servers it is writing each line with timestamp we want to group these lines depending on their threadID you can see the example log file below. The challenging thi… --- ## [Need help displaying two different counts on the same chart](https://discuss.elastic.co/t/need-help-displaying-two-different-counts-on-the-same-chart/259264)
**Author:** [@njanashia](https://discuss.elastic.co/u/njanashia)\ **Replies:** 3\ **Last updated:** [January 4, 2021, 1:40pm UTC](https://discuss.elastic.co/t/need-help-displaying-two-different-counts-on-the-same-chart/259264 "2021-01-04T13:40:37Z")
I want to display sales and refunds counts for the same day on the same chart like it is shown on the first picture. The corresponding date fields for sales and refunds are detail\_trans\_date and detail\_refund\_date. I ha… --- ## [Can't find data when doing simple KQL query ( can see the log in general search)](https://discuss.elastic.co/t/cant-find-data-when-doing-simple-kql-query-can-see-the-log-in-general-search/260034)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 3\ **Last updated:** [January 4, 2021, 1:01pm UTC](https://discuss.elastic.co/t/cant-find-data-when-doing-simple-kql-query-can-see-the-log-in-general-search/260034 "2021-01-04T13:01:56Z")
im using the filebeat-\* index . when i watch the logs in discover i can see logs from the pods when i try to create simple query to get logs by namespace/name/container name i don't get any result i follow this threa… --- ## [Ms teams watcher](https://discuss.elastic.co/t/ms-teams-watcher/260076)
**Author:** [@Mohith\_Vegi](https://discuss.elastic.co/u/Mohith_Vegi)\ **Replies:** 5\ **Last updated:** [January 4, 2021, 12:47pm UTC](https://discuss.elastic.co/t/ms-teams-watcher/260076 "2021-01-04T12:47:54Z")
"type": "messaging\_exception", "reason": "failed to send email with subject \[mail alert\] via account \[outlook\_account\]", "caused\_by": { "type": "s\_m\_t\_p\_send\_failed\_exception", "reason": "554 5.2.0 STOREDRV.Submissio… --- ## [Respect bootstrapNewHistoryUUID option when restoring from snapshot](https://discuss.elastic.co/t/respect-bootstrapnewhistoryuuid-option-when-restoring-from-snapshot/259498)
**Author:** [@asce0705](https://discuss.elastic.co/u/asce0705)\ **Replies:** 9\ **Last updated:** [January 4, 2021, 12:23pm UTC](https://discuss.elastic.co/t/respect-bootstrapnewhistoryuuid-option-when-restoring-from-snapshot/259498 "2021-01-04T12:23:09Z")
Shall we enable bootstrapNewHistoryUUID option in SnapshotRecoverySource, which disable bootstraping new history uuid of the primary shard index when set false. In some environment, the primary shard may be restored fro… --- ## [Multiple resources on conf](https://discuss.elastic.co/t/multiple-resources-on-conf/260079)
**Author:** [@Sunflower](https://discuss.elastic.co/u/Sunflower)\ **Replies:** 6\ **Last updated:** [January 4, 2021, 11:40am UTC](https://discuss.elastic.co/t/multiple-resources-on-conf/260079 "2021-01-04T11:40:59Z")
Hi, I have multiple resources that I want to configure to send Syslog to Logstash and then send it to S3. I'd appreciate hearing your thoughts regarding the two following options: Multiple resources on the input, eac… --- ## [Max payload issue](https://discuss.elastic.co/t/max-payload-issue/260084)
**Author:** [@Dainius](https://discuss.elastic.co/u/Dainius)\ **Replies:** 1\ **Last updated:** [January 4, 2021, 11:29am UTC](https://discuss.elastic.co/t/max-payload-issue/260084 "2021-01-04T11:29:33Z")
Hey guys, I would like to sort out one issue I have. I get max payload error while trying to refresh index pattern in Kibana. Of course I have already increased server.maxPayloadBytes: value in kibana config file, but m… --- ## [Perform boolean operation on result sets of two queries](https://discuss.elastic.co/t/perform-boolean-operation-on-result-sets-of-two-queries/260083)
**Author:** [@tejas1\_shah](https://discuss.elastic.co/u/tejas1_shah)\ **Replies:** 0\ **Last updated:** [January 4, 2021, 11:20am UTC](https://discuss.elastic.co/t/perform-boolean-operation-on-result-sets-of-two-queries/260083 "2021-01-04T11:20:48Z")
Hello, I am creating a solution based on elastic search based on user inputs for a text. The results are to be shown in 3 groups - one group containing the exact match, second group containing only the stemmed results … --- ## [Postgres with Elastic search issue](https://discuss.elastic.co/t/postgres-with-elastic-search-issue/259448)
**Author:** [@vasimsaiyad2000](https://discuss.elastic.co/u/vasimsaiyad2000)\ **Replies:** 3\ **Last updated:** [January 4, 2021, 11:12am UTC](https://discuss.elastic.co/t/postgres-with-elastic-search-issue/259448 "2021-01-04T11:12:33Z")
I have implemented logstash with postgres to send my restaurant and menu items to Elasticsearch. I have applied paging to fetch the data from postgres and also have jdbc streaming. If i run the logstash with jdbc stream… --- ## [ILM policy - why isn't it deleting?](https://discuss.elastic.co/t/ilm-policy-why-isnt-it-deleting/259483)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 3\ **Last updated:** [January 4, 2021, 11:03am UTC](https://discuss.elastic.co/t/ilm-policy-why-isnt-it-deleting/259483 "2021-01-04T11:03:55Z")
Indices are building up instead of being deleted. Here's the policy: GET \_ilm/policy/packetbeat { "packetbeat" : { "version" : 6, "modified\_date" : "2020-12-21T12:30:41.023Z", "policy" : { "phases" :… --- ## [Error while trying to Install elasticsearch on Azure as self service](https://discuss.elastic.co/t/error-while-trying-to-install-elasticsearch-on-azure-as-self-service/258236)
**Author:** [@tal.paz](https://discuss.elastic.co/u/tal.paz)\ **Replies:** 13\ **Last updated:** [January 4, 2021, 10:21am UTC](https://discuss.elastic.co/t/error-while-trying-to-install-elasticsearch-on-azure-as-self-service/258236 "2021-01-04T10:21:50Z")
Hi, I am trying to install the elasticserach as self service in Azure portal. Using the following link: https://azuremarketplace.microsoft.com/en-us/marketplace/apps/elastic.elasticsearch?tab=Overview After configurin… --- ## [Canvas drilldown](https://discuss.elastic.co/t/canvas-drilldown/257543)
**Author:** [@ravishka](https://discuss.elastic.co/u/ravishka)\ **Replies:** 5\ **Last updated:** [January 4, 2021, 9:51am UTC](https://discuss.elastic.co/t/canvas-drilldown/257543 "2021-01-04T09:51:29Z")
Is there a drilldown concept/option or similar concept on the canvas? --- ## [Kibana dashboard](https://discuss.elastic.co/t/kibana-dashboard/259983)
**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 9:36am UTC](https://discuss.elastic.co/t/kibana-dashboard/259983 "2021-01-04T09:36:56Z")
Hi Folks , Can you please help me to make Kibana dashboard . I have got below Splunk Query from which i need to make Kibana Dashboard. We are migrating from Splunk to ELK. How to create deviation and and use in where c… --- ## [Kibana 7.8.1 user interface](https://discuss.elastic.co/t/kibana-7-8-1-user-interface/259746)
**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 9:35am UTC](https://discuss.elastic.co/t/kibana-7-8-1-user-interface/259746 "2021-01-04T09:35:28Z")
hi, Our technical team has updated Kibana 6.8 to 7.8.1. Today i'm very surprise about the user interface :frowning: Lot of shorts functions has disappeared, like filters action ! Now we are obliged to multiply clicks t… --- ## [Index Alias](https://discuss.elastic.co/t/index-alias/260068)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 9:21am UTC](https://discuss.elastic.co/t/index-alias/260068 "2021-01-04T09:21:49Z")
Hi, I want to create an index with name xyz-yyyy-MM. Index Name should be like : xyz-2020-01 xyz-2020-04 xyz-2020-12 xyz-2021-05 I want to add these index into one in this pattern "xyz" with "\*" Will it be possibl… --- ## [Time Filter in Kibana](https://discuss.elastic.co/t/time-filter-in-kibana/260050)
**Author:** [@Amrita\_Mahule](https://discuss.elastic.co/u/Amrita_Mahule)\ **Replies:** 4\ **Last updated:** [January 4, 2021, 9:11am UTC](https://discuss.elastic.co/t/time-filter-in-kibana/260050 "2021-01-04T09:11:58Z")
Hi Team, We have a requirement where we want to customize the time filter on Kibana. We want that a user can only view data of last 2 days and not older than that. Is there any way to achieve that without deleting the … --- ## [Grokk Patterning output to respective indexes based on \[agent.type\] (or any conditionals) not working](https://discuss.elastic.co/t/grokk-patterning-output-to-respective-indexes-based-on-agent-type-or-any-conditionals-not-working/259602)
**Author:** [@Rohan-boogeyman](https://discuss.elastic.co/u/Rohan-boogeyman)\ **Replies:** 1\ **Last updated:** [January 4, 2021, 8:40am UTC](https://discuss.elastic.co/t/grokk-patterning-output-to-respective-indexes-based-on-agent-type-or-any-conditionals-not-working/259602 "2021-01-04T08:40:32Z")
Hello, Sorry but i've got a question as I have searched alot for an answer but could not find anything. My winlogbeat and filebeat are all sent to logstash on 5044. I want logstash to filter using Grokk and output them… --- ## [Group by function is not working in sql query in kibana\>dev tools](https://discuss.elastic.co/t/group-by-function-is-not-working-in-sql-query-in-kibana-dev-tools/259452)
**Author:** [@anjali28](https://discuss.elastic.co/u/anjali28)\ **Replies:** 8\ **Last updated:** [January 4, 2021, 7:43am UTC](https://discuss.elastic.co/t/group-by-function-is-not-working-in-sql-query-in-kibana-dev-tools/259452 "2021-01-04T07:43:17Z")
I am creating a query in kibana\>dev tools. Some how my SQL query is not working due to group by function in console. The SQL query is working fine in MSSQL management studio. Query: POST /\_sql?format=txt&pretty { … --- ## [What is the release date of Beats 7.11?](https://discuss.elastic.co/t/what-is-the-release-date-of-beats-7-11/260062)
**Author:** [@cy-zheng](https://discuss.elastic.co/u/cy-zheng)\ **Replies:** 1\ **Last updated:** [January 4, 2021, 7:20am UTC](https://discuss.elastic.co/t/what-is-the-release-date-of-beats-7-11/260062 "2021-01-04T07:20:45Z")
I found it has some exciting new features and can’t wait to use it. --- ## [Elasticsearch shows Circuit Breaking Exception](https://discuss.elastic.co/t/elasticsearch-shows-circuit-breaking-exception/259872)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 5\ **Last updated:** [January 4, 2021, 7:19am UTC](https://discuss.elastic.co/t/elasticsearch-shows-circuit-breaking-exception/259872 "2021-01-04T07:19:28Z")
We have Elasticsearch deployed in a Kubernetes cluster as a 3 node (all 3 are Master and Data). Recently we are facing issue with Elasticsearch Circuit breaking excpetion and only 2 nodes are reporting to the Cluster. A… --- ## [Logstash Filter - Grok pattern not working as expected](https://discuss.elastic.co/t/logstash-filter-grok-pattern-not-working-as-expected/259271)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 7:15am UTC](https://discuss.elastic.co/t/logstash-filter-grok-pattern-not-working-as-expected/259271 "2021-01-04T07:15:11Z")
Hi All, We are trying to apply Grok filter patterns for our application logs. The logs are applied successfully on the grok debugger online as well as Kibana Dev Tool debugger, but is not getting applied properly in the… --- ## [Getting TransportError: TransportError(500, 'exception', 'java.io.OptionalDataException' while posting to AWS managed elastic stack](https://discuss.elastic.co/t/getting-transporterror-transporterror-500-exception-java-io-optionaldataexception-while-posting-to-aws-managed-elastic-stack/257713)
**Author:** [@yackoa](https://discuss.elastic.co/u/yackoa)\ **Replies:** 12\ **Last updated:** [January 4, 2021, 6:41am UTC](https://discuss.elastic.co/t/getting-transporterror-transporterror-500-exception-java-io-optionaldataexception-while-posting-to-aws-managed-elastic-stack/257713 "2021-01-04T06:41:46Z")
I am getting 'occasional' 500 Transport errors on AWS managed ES stack when posting JSONS from our python based lambdas. This was working flawlessly until today's upgrade to ES 7.9. We have tried increasing the cluster … --- ## [Search elements inside nested fields](https://discuss.elastic.co/t/search-elements-inside-nested-fields/260056)
**Author:** [@Asheesh\_Bhuria](https://discuss.elastic.co/u/Asheesh_Bhuria)\ **Replies:** 0\ **Last updated:** [January 4, 2021, 6:28am UTC](https://discuss.elastic.co/t/search-elements-inside-nested-fields/260056 "2021-01-04T06:28:16Z")
Hi, I have field which stores an array of objects. Each object contains a key on the basis of which we need to perform search operation and get the list of the matched terms only. We have achieved this using a combinati… --- ## [Unable to connect via token through the API](https://discuss.elastic.co/t/unable-to-connect-via-token-through-the-api/259597)
**Author:** [@JSmithOner](https://discuss.elastic.co/u/JSmithOner)\ **Replies:** 1\ **Last updated:** [January 4, 2021, 5:56am UTC](https://discuss.elastic.co/t/unable-to-connect-via-token-through-the-api/259597 "2021-01-04T05:56:41Z")
Hello Elasticsearch community, I'm using google cloud functions as backend and using a simple angular HttpClient to connect via the API to my google cloud elasticsearch endpoint. At first when I tried to connect I got … --- ## [Auditbeat-\* No results match your search criteria](https://discuss.elastic.co/t/auditbeat-no-results-match-your-search-criteria/259980)
**Author:** [@Vigilox](https://discuss.elastic.co/u/Vigilox)\ **Replies:** 3\ **Last updated:** [January 4, 2021, 2:37am UTC](https://discuss.elastic.co/t/auditbeat-no-results-match-your-search-criteria/259980 "2021-01-04T02:37:29Z")
Fresh ElasticStack 7.10 deployment on Azure. Elastic Agents have been deployed. The indices for packetbeat-\* and auditbeat-\* are not found. Date range expanded to a YEAR. Here are the installed Integrations. N… --- ## [How to speed up the segment merging](https://discuss.elastic.co/t/how-to-speed-up-the-segment-merging/260044)
**Author:** [@chemboking](https://discuss.elastic.co/u/chemboking)\ **Replies:** 0\ **Last updated:** [January 4, 2021, 1:44am UTC](https://discuss.elastic.co/t/how-to-speed-up-the-segment-merging/260044 "2021-01-04T01:44:57Z")
I don't understand why merging a 8GB(total) shard into one 3GB segment shard should take about 6 minutes, while all the indicators(io/cpu/memory/gc) of the machine(ssd/32 cores/30GB jvm/64GB total/swap disabled) are very… [Previous page](https://discuss.elastic.co/latest.md?page=1911) [Next page](https://discuss.elastic.co/latest.md?page=1913)