# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1973

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1974

---

## [Elasticsearchでidの自動採番について](https://discuss.elastic.co/t/elasticsearch-id/256726)

<div class="topic-metadata">

**Author:** [@Tasu](https://discuss.elastic.co/u/Tasu)\
**Replies:** 2\
**Last updated:** [November 27, 2020, 4:31am UTC](https://discuss.elastic.co/t/elasticsearch-id/256726 "2020-11-27T04:31:03Z")

</div>

logstashからElasticsearchにデータを送っています。 データが送られると、elasticsearchでidが自動採番されると思うのですが、 idには桁数や数の制限はあるのでしょうか？ ご存じのかたおられましたらご教示ください。

---

## [Kibana Dashboard Drilldown](https://discuss.elastic.co/t/kibana-dashboard-drilldown/256609)

<div class="topic-metadata">

**Author:** [@Atul\_Gunjal](https://discuss.elastic.co/u/Atul_Gunjal)\
**Replies:** 2\
**Last updated:** [November 27, 2020, 4:08am UTC](https://discuss.elastic.co/t/kibana-dashboard-drilldown/256609 "2020-11-27T04:08:02Z")

</div>

Hi, I wanted to drilldown dashboard from one to another and while doing that I want to open new dashboard in new tab with filters applied in first dashboard plus field value I selected on which drill down occur. someon…

---

## [Not able to update Null values in elastic search using Nest with field mapping](https://discuss.elastic.co/t/not-able-to-update-null-values-in-elastic-search-using-nest-with-field-mapping/256834)

<div class="topic-metadata">

**Author:** [@prvn\_prasher](https://discuss.elastic.co/u/prvn_prasher)\
**Replies:** 0\
**Last updated:** [November 27, 2020, 4:07am UTC](https://discuss.elastic.co/t/not-able-to-update-null-values-in-elastic-search-using-nest-with-field-mapping/256834 "2020-11-27T04:07:56Z")

</div>

I just noticed I couldn't able to update null values in existing properties. For example, i am trying to update the Date. I am using Nest with C# with field mapping. So I think serialization ignoring null values. I tr…

---

## [Kibana Aggregation/Search Documents](https://discuss.elastic.co/t/kibana-aggregation-search-documents/256772)

<div class="topic-metadata">

**Author:** [@Atul\_Gunjal](https://discuss.elastic.co/u/Atul_Gunjal)\
**Replies:** 2\
**Last updated:** [November 27, 2020, 4:00am UTC](https://discuss.elastic.co/t/kibana-aggregation-search-documents/256772 "2020-11-27T04:00:08Z")

</div>

Hi, I want to list the members which are active. It is possible that member's new status is inactive but previously it was active. How can I create data table with such visualisation so that I will not see member whose …

---

## [Need than throttle restart for watcher](https://discuss.elastic.co/t/need-than-throttle-restart-for-watcher/256830)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 0\
**Last updated:** [November 27, 2020, 12:48am UTC](https://discuss.elastic.co/t/need-than-throttle-restart-for-watcher/256830 "2020-11-27T00:48:01Z")

</div>

hello, i have a watcher, with the time throttle, i used the api ack, i executed it with the id of the watcher and the action, but it did not work, since it does not restart the time throttle, which is what i need so that…

---

## [HowTo Filter documents contain duplicates in array with PainLess](https://discuss.elastic.co/t/howto-filter-documents-contain-duplicates-in-array-with-painless/256829)

<div class="topic-metadata">

**Author:** [@vsmelov](https://discuss.elastic.co/u/vsmelov)\
**Replies:** 0\
**Last updated:** [November 27, 2020, 12:27am UTC](https://discuss.elastic.co/t/howto-filter-documents-contain-duplicates-in-array-with-painless/256829 "2020-11-27T00:27:31Z")

</div>

I have documents like {"tokens" \[ {"city": "RU-Moscow", ...}, {"city": "RU-Piter", ...}, {"city": "RU-Moscow", ...}, {"city": "GE-Berlin", ...}, {"city": "NL-Amsterdam", ...} {"city": "NL-Amst…

---

## [What is the best practice to pseudonymize user data?](https://discuss.elastic.co/t/what-is-the-best-practice-to-pseudonymize-user-data/252573)

<div class="topic-metadata">

**Author:** [@elk51211](https://discuss.elastic.co/u/elk51211)\
**Replies:** 5\
**Last updated:** [November 26, 2020, 9:15pm UTC](https://discuss.elastic.co/t/what-is-the-best-practice-to-pseudonymize-user-data/252573 "2020-11-26T21:15:22Z")

</div>

What is the recommended approach to deal with logs to be as GDPR compliant as possible? I need to pseudonymize user data. The only resource I found is dated back to march of 2018 in this blog post: https://www.elastic.c…

---

## [Filtering documents by an unknown value of a field](https://discuss.elastic.co/t/filtering-documents-by-an-unknown-value-of-a-field/256768)

<div class="topic-metadata">

**Author:** [@jonatelo](https://discuss.elastic.co/u/jonatelo)\
**Replies:** 1\
**Last updated:** [November 26, 2020, 9:07pm UTC](https://discuss.elastic.co/t/filtering-documents-by-an-unknown-value-of-a-field/256768 "2020-11-26T21:07:05Z")

</div>

Hi, I'm trying to create a query to filter my documents by one (can be anyone) value from a field (in my case "host.name"). The point is that I don't know previously the unique values of this field. I need found these …

---

## [Create a new column with the hash of an existing column](https://discuss.elastic.co/t/create-a-new-column-with-the-hash-of-an-existing-column/256779)

<div class="topic-metadata">

**Author:** [@p1k4chu](https://discuss.elastic.co/u/p1k4chu)\
**Replies:** 1\
**Last updated:** [November 26, 2020, 8:30pm UTC](https://discuss.elastic.co/t/create-a-new-column-with-the-hash-of-an-existing-column/256779 "2020-11-26T20:30:55Z")

</div>

I have an elasticsearch index to which I want to add a new column whose value is going to be the hash(sha256 or md5) of an existing column. Manually doing it isn't feasible as the index has more than 600,000,000 document…

---

## [Mixing proximity with exact an not exact](https://discuss.elastic.co/t/mixing-proximity-with-exact-an-not-exact/256824)

<div class="topic-metadata">

**Author:** [@Sucaz](https://discuss.elastic.co/u/Sucaz)\
**Replies:** 0\
**Last updated:** [November 26, 2020, 8:22pm UTC](https://discuss.elastic.co/t/mixing-proximity-with-exact-an-not-exact/256824 "2020-11-26T20:22:41Z")

</div>

Hi, Is there a way to mix search of words in distance, where one word is exact and the other one isn't, with query\_string? something like: (Exact("Fox") quick)~2 Is it a combination of quote\_field\_suffix (as in http…

---

## [Adding a basic user/pass authentication for ElasticSearch](https://discuss.elastic.co/t/adding-a-basic-user-pass-authentication-for-elasticsearch/256822)

<div class="topic-metadata">

**Author:** [@yattaes](https://discuss.elastic.co/u/yattaes)\
**Replies:** 0\
**Last updated:** [November 26, 2020, 8:17pm UTC](https://discuss.elastic.co/t/adding-a-basic-user-pass-authentication-for-elasticsearch/256822 "2020-11-26T20:17:14Z")

</div>

Hi, I deployed Elasticsearch with the following the page below to my Azure Kubernetes environment. Deploy an Elasticsearch cluster | Elastic Cloud on Kubernetes \[master\] | Elastic It works fine. But I want to add a…

---

## [OOM on Elasticsearch client](https://discuss.elastic.co/t/oom-on-elasticsearch-client/256821)

<div class="topic-metadata">

**Author:** [@vikramc](https://discuss.elastic.co/u/vikramc)\
**Replies:** 0\
**Last updated:** [November 26, 2020, 8:03pm UTC](https://discuss.elastic.co/t/oom-on-elasticsearch-client/256821 "2020-11-26T20:03:52Z")

</div>

Hi All, We are using ES 6.8.0 and we see that our applicaiton is going out of memory after certain crossing certain threshold of data processing. We see that there are lots of “io.netty.channel.ChannelOutboundBuffer$Ent…

---

## [CONVERT GSM COORDINATE TO GD COORDINATE](https://discuss.elastic.co/t/convert-gsm-coordinate-to-gd-coordinate/256664)

<div class="topic-metadata">

**Author:** [@Daniel\_Lopez](https://discuss.elastic.co/u/Daniel_Lopez)\
**Replies:** 3\
**Last updated:** [November 26, 2020, 7:57pm UTC](https://discuss.elastic.co/t/convert-gsm-coordinate-to-gd-coordinate/256664 "2020-11-26T19:57:25Z")

</div>

Hi to all I'm just trying to convert GSM to GD For example GMS N 39° 56' 41.673'' O 3° 43' 47.872'' to GET GD 39.94490923478156 and -3.729964618217764 I have this config csv { columns =\> \["MCC","MNC","LAC","CI"…

---

## [How to delete all documents that a field have specific length?](https://discuss.elastic.co/t/how-to-delete-all-documents-that-a-field-have-specific-length/256813)

<div class="topic-metadata">

**Author:** [@Ehsan\_sarshar](https://discuss.elastic.co/u/Ehsan_sarshar)\
**Replies:** 1\
**Last updated:** [November 26, 2020, 7:13pm UTC](https://discuss.elastic.co/t/how-to-delete-all-documents-that-a-field-have-specific-length/256813 "2020-11-26T19:13:43Z")

</div>

for example I have following documents { term: "bo" }, { term: "book" } I want to delete all documents that "term" field length is less than 3

---

## [Does Kibana supports a big csv exports?](https://discuss.elastic.co/t/does-kibana-supports-a-big-csv-exports/256714)

<div class="topic-metadata">

**Author:** [@Ayadi](https://discuss.elastic.co/u/Ayadi)\
**Replies:** 3\
**Last updated:** [November 26, 2020, 6:37pm UTC](https://discuss.elastic.co/t/does-kibana-supports-a-big-csv-exports/256714 "2020-11-26T18:37:02Z")

</div>

Hi Guys I'm facing a problem with the exports in Kibana since a week now and I will be happy, if I can get some help here. I want to generate big csv reports from kibana that could reach 3 Gb And I was surprised that e…

---

## [Does Kibana supports a big csv exports?](https://discuss.elastic.co/t/does-kibana-supports-a-big-csv-exports/256395)

<div class="topic-metadata">

**Author:** [@Ayadi](https://discuss.elastic.co/u/Ayadi)\
**Replies:** 3\
**Last updated:** [November 26, 2020, 6:35pm UTC](https://discuss.elastic.co/t/does-kibana-supports-a-big-csv-exports/256395 "2020-11-26T18:35:56Z")

</div>

Hi Guys I'm facing a problem with the exports in Kibana since a week now and I will be happy, if I can get some help here. I want to generate big csv reports from kibana that could reach 3 Gb And I was surprised that e…

---

## [Getting 502, when TSVB is disabled](https://discuss.elastic.co/t/getting-502-when-tsvb-is-disabled/255501)

<div class="topic-metadata">

**Author:** [@rwgron](https://discuss.elastic.co/u/rwgron)\
**Replies:** 1\
**Last updated:** [November 26, 2020, 5:59pm UTC](https://discuss.elastic.co/t/getting-502-when-tsvb-is-disabled/255501 "2020-11-26T17:59:14Z")

</div>

Does Kibana version 5.6.15 support disabling TSVB? To cover our vulnerability which described in CVE-2020-7013, we should disable TSVB. for that, I set metrics.enabled: false in kibana.yml, but after applying I'm gettin…

---

## [Specify Module Pipeline in Kubernetes Annotation](https://discuss.elastic.co/t/specify-module-pipeline-in-kubernetes-annotation/256802)

<div class="topic-metadata">

**Author:** [@Paul\_B](https://discuss.elastic.co/u/Paul_B)\
**Replies:** 0\
**Last updated:** [November 26, 2020, 5:13pm UTC](https://discuss.elastic.co/t/specify-module-pipeline-in-kubernetes-annotation/256802 "2020-11-26T17:13:35Z")

</div>

Is it possible to specify a custom pipeline for a module using hints-based autodiscover? An Elastic team member pointed me to the documentation here - https://www.elastic.co/guide/en/beats/filebeat/master/advanced-setti…

---

## [Saved "field" parameter is now invalid. Please select a new field](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field/256413)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 15\
**Last updated:** [November 26, 2020, 5:00pm UTC](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field/256413 "2020-11-26T17:00:55Z")

</div>

Hi, Currently using ELK 7.9.2. I have been using Winlogbeat for a while now. I created some custom visualizations and dashboards that read from winlogbeat-\* indexes. Everything was working fine just a few days ago, unt…

---

## [Request for Filebeat AWS CloudTrail Documentation/Configuration Options for s3prefix, etc](https://discuss.elastic.co/t/request-for-filebeat-aws-cloudtrail-documentation-configuration-options-for-s3prefix-etc/256801)

<div class="topic-metadata">

**Author:** [@Adam\_Krieger](https://discuss.elastic.co/u/Adam_Krieger)\
**Replies:** 0\
**Last updated:** [November 26, 2020, 4:49pm UTC](https://discuss.elastic.co/t/request-for-filebeat-aws-cloudtrail-documentation-configuration-options-for-s3prefix-etc/256801 "2020-11-26T16:49:52Z")

</div>

Regarding CloudTrail setup in filebeat for delivery via SQS Message and S3 Object Get: Current setup only allows read if the CloudTrail is pointed to the root of the S3 bucket. Could a 'var.s3prefix' option be added t…

---

## [Logstash conditional elasticsearch output plugin depends on success of S3 output plugin](https://discuss.elastic.co/t/logstash-conditional-elasticsearch-output-plugin-depends-on-success-of-s3-output-plugin/256800)

<div class="topic-metadata">

**Author:** [@Abolurah](https://discuss.elastic.co/u/Abolurah)\
**Replies:** 0\
**Last updated:** [November 26, 2020, 4:49pm UTC](https://discuss.elastic.co/t/logstash-conditional-elasticsearch-output-plugin-depends-on-success-of-s3-output-plugin/256800 "2020-11-26T16:49:19Z")

</div>

Hi All, In my Logstash configuration, I have 2 output plugins, one is S3 and another is Elasticsearch. My goal is to send logs to S3 and update the same logs with "uploadStatus = finished", everything works fine until …

---

## [Can timelion's title be a result of a query?](https://discuss.elastic.co/t/can-timelions-title-be-a-result-of-a-query/255285)

<div class="topic-metadata">

**Author:** [@Wang\_Hay\_Ng](https://discuss.elastic.co/u/Wang_Hay_Ng)\
**Replies:** 1\
**Last updated:** [November 26, 2020, 4:41pm UTC](https://discuss.elastic.co/t/can-timelions-title-be-a-result-of-a-query/255285 "2020-11-26T16:41:04Z")

</div>

i have a timelion graph displaying an on off switch's status, which returns a 1/0 value, i also have a scripted field that returns on/off string base on the value, i know i can showit with a plain text visualization, but…

---

## [Filter for content of specific field of second index](https://discuss.elastic.co/t/filter-for-content-of-specific-field-of-second-index/256796)

<div class="topic-metadata">

**Author:** [@elk51211](https://discuss.elastic.co/u/elk51211)\
**Replies:** 0\
**Last updated:** [November 26, 2020, 4:35pm UTC](https://discuss.elastic.co/t/filter-for-content-of-specific-field-of-second-index/256796 "2020-11-26T16:35:19Z")

</div>

Hello, I'm trying to setup a filter that creates unique fingerprints if username does not already exists in index identities. Otherwise look up the value of the created pseudoId and put this in the event index. How do a…

---

## [Elastic APIs versioning and usage without breaking the integrated services](https://discuss.elastic.co/t/elastic-apis-versioning-and-usage-without-breaking-the-integrated-services/256483)

<div class="topic-metadata">

**Author:** [@es\_user2](https://discuss.elastic.co/u/es_user2)\
**Replies:** 7\
**Last updated:** [November 26, 2020, 4:30pm UTC](https://discuss.elastic.co/t/elastic-apis-versioning-and-usage-without-breaking-the-integrated-services/256483 "2020-11-26T16:30:15Z")

</div>

hi Team, we have few queries on Elasticserach APIs: Suppose we have used an API in our code and there is a version upgrade. How to handle the version change ? Will it not break our code integration with this API ? (If …

---

## [Kibana @ docker no logfiles](https://discuss.elastic.co/t/kibana-docker-no-logfiles/256766)

<div class="topic-metadata">

**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\
**Replies:** 4\
**Last updated:** [November 26, 2020, 4:09pm UTC](https://discuss.elastic.co/t/kibana-docker-no-logfiles/256766 "2020-11-26T16:09:46Z")

</div>

Hi There, I run kibana on docker-compose, but I cannot see the logfiles. Here is the part of the docker compose file with volumes mapped: indent preformatted text by 4 spaces volumes: - /srv/Docker/config:/usr/…

---

## [Canvas - Line Chart Element with Date for X Axis - Sometimes displays timestamp, sometimes doesn't](https://discuss.elastic.co/t/canvas-line-chart-element-with-date-for-x-axis-sometimes-displays-timestamp-sometimes-doesnt/255249)

<div class="topic-metadata">

**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\
**Replies:** 1\
**Last updated:** [November 26, 2020, 4:05pm UTC](https://discuss.elastic.co/t/canvas-line-chart-element-with-date-for-x-axis-sometimes-displays-timestamp-sometimes-doesnt/255249 "2020-11-26T16:05:37Z")

</div>

I have a line chart element in Kibana canvas with a timestamp being used as the X axis. Depending on the results of the query behind this element, sometimes the X axis will show date and time (ex: "Nov 11 00:00") and so…

---

## [Query DSL causes SearchPhaseExecutionException](https://discuss.elastic.co/t/query-dsl-causes-searchphaseexecutionexception/256118)

<div class="topic-metadata">

**Author:** [@andrewKode](https://discuss.elastic.co/u/andrewKode)\
**Replies:** 4\
**Last updated:** [November 26, 2020, 3:57pm UTC](https://discuss.elastic.co/t/query-dsl-causes-searchphaseexecutionexception/256118 "2020-11-26T15:57:21Z")

</div>

Hey! I'm trying to visualize data for multiple documents. Since I'm not being able to import a file with the ids of the documents in Kibana, I'm building a Query DSL using a Python script. The query works just fine in …

---

## [ElasticSearch aggregation for recommendation engine](https://discuss.elastic.co/t/elasticsearch-aggregation-for-recommendation-engine/256789)

<div class="topic-metadata">

**Author:** [@martsuga](https://discuss.elastic.co/u/martsuga)\
**Replies:** 1\
**Last updated:** [November 26, 2020, 3:52pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-for-recommendation-engine/256789 "2020-11-26T15:52:36Z")

</div>

I need some advice for aggregations. I am trying to build a recommendation engine based on existing ElasticSearch data but i am out of ideas how to build this query with aggregations. The easiest way would be to use "s…

---

## [Metricbeat view on syn\_recv tcp\_connections](https://discuss.elastic.co/t/metricbeat-view-on-syn-recv-tcp-connections/256781)

<div class="topic-metadata">

**Author:** [@Jo\_De\_Troy](https://discuss.elastic.co/u/Jo_De_Troy)\
**Replies:** 0\
**Last updated:** [November 26, 2020, 2:30pm UTC](https://discuss.elastic.co/t/metricbeat-view-on-syn-recv-tcp-connections/256781 "2020-11-26T14:30:38Z")

</div>

Hello, I have metricbeat collecting the socket\_summary metricset of the system module. I see on github \[socket\_summary\](https://github.com/elastic/beats/blob/master/metricbeat/module/system/socket\_summary/socket\_summa…

---

## [Running another logstash instance incase one logstash fails](https://discuss.elastic.co/t/running-another-logstash-instance-incase-one-logstash-fails/256656)

<div class="topic-metadata">

**Author:** [@mahi2](https://discuss.elastic.co/u/mahi2)\
**Replies:** 3\
**Last updated:** [November 26, 2020, 2:54pm UTC](https://discuss.elastic.co/t/running-another-logstash-instance-incase-one-logstash-fails/256656 "2020-11-26T14:54:35Z")

</div>

Hi, I have a scenario where one logstash is already running, and for some reason the machine fails. I want the process to keep going and not wait for the machine to be restarted.It must automatically start taking data f…

[Previous page](https://discuss.elastic.co/latest.md?page=1972)

[Next page](https://discuss.elastic.co/latest.md?page=1974)
