# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1018 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1019 --- ## [New template doesn't works Geoip](https://discuss.elastic.co/t/new-template-doesnt-works-geoip/266801)
**Author:** [@hoff](https://discuss.elastic.co/u/hoff)\ **Replies:** 5\ **Last updated:** [March 11, 2021, 9:25am UTC](https://discuss.elastic.co/t/new-template-doesnt-works-geoip/266801 "2021-03-11T09:25:04Z")
Hi, I need to create geoip map but in my mapping field location is float type. I have some issue with create new template. I want to change field type from float to geo\_point. When I try to put new template and delete o… --- ## [Recursive search query for all leaf nodes(childs)](https://discuss.elastic.co/t/recursive-search-query-for-all-leaf-nodes-childs/266791)
**Author:** [@Paresh\_Vaniya](https://discuss.elastic.co/u/Paresh_Vaniya)\ **Replies:** 1\ **Last updated:** [March 11, 2021, 10:35am UTC](https://discuss.elastic.co/t/recursive-search-query-for-all-leaf-nodes-childs/266791 "2021-03-11T10:35:04Z")
Hi All, I need help for getting all the leaf nodes details using elasticsearch query. If I have search for root node id and it contains childEntities then it should get all the child id and its name in result. I have t… --- ## [Graph Relations not displayed](https://discuss.elastic.co/t/graph-relations-not-displayed/266775)
**Author:** [@Pruthvi\_Raj\_Venkates](https://discuss.elastic.co/u/Pruthvi_Raj_Venkates)\ **Replies:** 2\ **Last updated:** [March 11, 2021, 10:27am UTC](https://discuss.elastic.co/t/graph-relations-not-displayed/266775 "2021-03-11T10:27:26Z")
Hi Team, I have installed Elastic Search elasticsearch-7.11.1 and Kibana on Windows 10 machine. I was exploring graph functionality using a Trial license wherein I am trying to view the relationships among the different… --- ## [What is included in Cloud by Elastic?](https://discuss.elastic.co/t/what-is-included-in-cloud-by-elastic/266911)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [March 11, 2021, 9:07am UTC](https://discuss.elastic.co/t/what-is-included-in-cloud-by-elastic/266911 "2021-03-11T09:07:20Z")
Here are some useful links: Elastic Cloud Feature Matrix. It tells exactly what you could expect on cloud by elastic and the required license level for a given feature. You can check the pricing using the Pricing Calc… --- ## [Can't find Logstash /bin directory](https://discuss.elastic.co/t/cant-find-logstash-bin-directory/266902)
**Author:** [@Muhammad\_Suleman](https://discuss.elastic.co/u/Muhammad_Suleman)\ **Replies:** 0\ **Last updated:** [March 11, 2021, 8:06am UTC](https://discuss.elastic.co/t/cant-find-logstash-bin-directory/266902 "2021-03-11T08:06:22Z")
I did install my ElK stack with the help of docker compose on my bare metal window server 2019. I can't find my logstash bin directory for running my logstash. Thanks, --- ## [Raw message output](https://discuss.elastic.co/t/raw-message-output/266895)
**Author:** [@st1988](https://discuss.elastic.co/u/st1988)\ **Replies:** 0\ **Last updated:** [March 11, 2021, 7:21am UTC](https://discuss.elastic.co/t/raw-message-output/266895 "2021-03-11T07:21:22Z")
Hi, I currently have an issue where I am sending Syslog to Logstash and then forwarding to ELK and via syslog to a SIEM. The SIEM however is struggling to understand the log as think it is being sent in a format its not … --- ## [Create user role with Kibana visualization permissions](https://discuss.elastic.co/t/create-user-role-with-kibana-visualization-permissions/266125)
**Author:** [@Chinmaya\_Panigrahi](https://discuss.elastic.co/u/Chinmaya_Panigrahi)\ **Replies:** 2\ **Last updated:** [March 11, 2021, 7:03am UTC](https://discuss.elastic.co/t/create-user-role-with-kibana-visualization-permissions/266125 "2021-03-11T07:03:09Z")
Hi, I want to create a user with role which will have permission to access certain visualizations of certain dashboards. I want to know what should be the cURL command to achieve this. --- ## [Агрессивный merge сегментов ES](https://discuss.elastic.co/t/merge-es/266829)
**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\ **Replies:** 3\ **Last updated:** [March 11, 2021, 6:14am UTC](https://discuss.elastic.co/t/merge-es/266829 "2021-03-11T06:14:34Z")
День добрый! В продолжение темы про "НЕ идеальный" подсчет \_score: Я попробовал настроить более агрессивный merge в ES, но не особо получилось. Из всех крутилов в: https://github.com/elastic/elasticsearch/blob/7.10/s… --- ## [Control DropDown in Kibana](https://discuss.elastic.co/t/control-dropdown-in-kibana/266769)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 2\ **Last updated:** [March 11, 2021, 5:21am UTC](https://discuss.elastic.co/t/control-dropdown-in-kibana/266769 "2021-03-11T05:21:51Z")
I am not getting month-day. Month August and Total days 31 but I am only getting random 5 days. --- ## [Week over Week Percentage Change for Metric Field](https://discuss.elastic.co/t/week-over-week-percentage-change-for-metric-field/266810)
**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\ **Replies:** 2\ **Last updated:** [March 11, 2021, 5:06am UTC](https://discuss.elastic.co/t/week-over-week-percentage-change-for-metric-field/266810 "2021-03-11T05:06:42Z")
Hello Team, Please help me to get Table visualization with Category Field, Current Week Metric, Previous Week, % change as columns. --- ## [Watherでインデックスサイズを監視する](https://discuss.elastic.co/t/wather/266638)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [March 11, 2021, 2:53am UTC](https://discuss.elastic.co/t/wather/266638 "2021-03-11T02:53:13Z")
とあるインデックスのサイズを定期的に監視し、閾値を超過したら通知するような仕組みを作りたいです。 watcherでインデックスを定期的に監視し、一定の容量を超過したら通知するように出来ないかと考えているのですが、watcherの監視設定で特定のインデックスのサイズを取得することは可能なのでしょうか？ --- ## [Missing columns in Kibana generated CSV](https://discuss.elastic.co/t/missing-columns-in-kibana-generated-csv/266865)
**Author:** [@noah.solomon](https://discuss.elastic.co/u/noah.solomon)\ **Replies:** 4\ **Last updated:** [March 11, 2021, 12:52am UTC](https://discuss.elastic.co/t/missing-columns-in-kibana-generated-csv/266865 "2021-03-11T00:52:56Z")
Hi, I'm using Kibana 7.10. I'm generating a CSV from a saved search in the Kibana UI. The generated CSV doesn't contain all of the columns that are in the index that I'm viewing. The columns that are added to the CSV ar… --- ## [Color each individual column in vega](https://discuss.elastic.co/t/color-each-individual-column-in-vega/266863)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 1\ **Last updated:** [March 10, 2021, 11:07pm UTC](https://discuss.elastic.co/t/color-each-individual-column-in-vega/266863 "2021-03-10T23:07:58Z")
Hi Vega experts, i need help on coloring my Vega Chart, i have a chart with multi series duration and i want to give each column a different color, i mean for example start1 to end1 color blue, start2 to end2 color red a… --- ## [ES7 Multiply scores from boolean queries](https://discuss.elastic.co/t/es7-multiply-scores-from-boolean-queries/266130)
**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\ **Replies:** 4\ **Last updated:** [March 10, 2021, 10:31pm UTC](https://discuss.elastic.co/t/es7-multiply-scores-from-boolean-queries/266130 "2021-03-10T22:31:11Z")
Hey Is it possible in some way to multiply the scores of two boolean queries? I now BoolQuery.Should can add the scores together, but not multiply. Another possibility is function scores, but here I can only provide a… --- ## [Single Value Visualization w/ Trend line](https://discuss.elastic.co/t/single-value-visualization-w-trend-line/266858)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 8:41pm UTC](https://discuss.elastic.co/t/single-value-visualization-w-trend-line/266858 "2021-03-10T20:41:42Z")
Hi there, Is it possible to generate a single value visualization w/ a trendline like Splunk does? see picture below TIA! Azulgrana --- ## [Enable TLS between ES and Kibana on an existing cluster](https://discuss.elastic.co/t/enable-tls-between-es-and-kibana-on-an-existing-cluster/266770)
**Author:** [@xcompass](https://discuss.elastic.co/u/xcompass)\ **Replies:** 3\ **Last updated:** [March 10, 2021, 8:20pm UTC](https://discuss.elastic.co/t/enable-tls-between-es-and-kibana-on-an-existing-cluster/266770 "2021-03-10T20:20:06Z")
Hi, I have a running ECK cluster (ES+Kibana) provisioned with http.tls.selfSignedCertificate.disabled: true. Now, I would like to try out alerts, which requires TLS to be enabled. I tried to change the above settings t… --- ## [\[publisher\_pipeline\_output\] pipeline /output.go:154 Failed to connect to backoff(async(tcp://logstash-xxx-xxx.apps.-xxx.xxx:443)): EOF](https://discuss.elastic.co/t/publisher-pipeline-output-pipeline-output-go-154-failed-to-connect-to-backoff-async-tcp-logstash-xxx-xxx-apps-xxx-xxx-443-eof/266451)
**Author:** [@Rohan-boogeyman](https://discuss.elastic.co/u/Rohan-boogeyman)\ **Replies:** 13\ **Last updated:** [March 10, 2021, 7:42pm UTC](https://discuss.elastic.co/t/publisher-pipeline-output-pipeline-output-go-154-failed-to-connect-to-backoff-async-tcp-logstash-xxx-xxx-apps-xxx-xxx-443-eof/266451 "2021-03-10T19:42:50Z")
Hello Guys, Thanks in advance for taking your time to look into the issue i am experiencing. Error in File beat at the time of Debug \[publisher\_pipeline\_output\] pipeline /output.go:154 Failed to connect to backof… --- ## [Metrics from logstash with custom index to show in Elastic Observability](https://discuss.elastic.co/t/metrics-from-logstash-with-custom-index-to-show-in-elastic-observability/266203)
**Author:** [@alidrsn](https://discuss.elastic.co/u/alidrsn)\ **Replies:** 1\ **Last updated:** [March 10, 2021, 7:08pm UTC](https://discuss.elastic.co/t/metrics-from-logstash-with-custom-index-to-show-in-elastic-observability/266203 "2021-03-10T19:08:56Z")
Hello, I am trying to use Elasticsearch Observability Metrics with RabbitMQ dashboard. However, i am not sending metrics directly to elasticsearch, using logstash and custom index names. When i am trying to add data (Ra… --- ## [Create field form file name](https://discuss.elastic.co/t/create-field-form-file-name/266846)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 7:01pm UTC](https://discuss.elastic.co/t/create-field-form-file-name/266846 "2021-03-10T19:01:47Z")
Hi, Note: Running ELK 7.10.1 I am trying to generate a new field using Grok, by extracting data from the file name. File name comes from "path". path =\> "/opt/app\_logs/\*.log" Example: ip\_block-hgTest.Dev1test-2021-… --- ## [How to detect network scan using EQL](https://discuss.elastic.co/t/how-to-detect-network-scan-using-eql/266466)
**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\ **Replies:** 4\ **Last updated:** [March 10, 2021, 6:34pm UTC](https://discuss.elastic.co/t/how-to-detect-network-scan-using-eql/266466 "2021-03-10T18:34:00Z")
Hi All, Can anyone please help me setting up a simple correlation rule using EQL that detect if same source.ip attempts more than 50 destination.ip within 15 minutes. I'm unable to write EQL. I've fortigate logs, my c… --- ## [EQL - Alert on different values for the same field in a sequence](https://discuss.elastic.co/t/eql-alert-on-different-values-for-the-same-field-in-a-sequence/255344)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 6\ **Last updated:** [March 10, 2021, 6:33pm UTC](https://discuss.elastic.co/t/eql-alert-on-different-values-for-the-same-field-in-a-sequence/255344 "2021-03-10T18:33:41Z")
Hi, I am trying to build a sequence, as an example to look for multiple different user.names from the same host over a period of time. How would i go about this condition 2 user.name != condition 1 user.name. There a … --- ## [Popover not working properly in v7.9.3](https://discuss.elastic.co/t/popover-not-working-properly-in-v7-9-3/265842)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 6:31pm UTC](https://discuss.elastic.co/t/popover-not-working-properly-in-v7-9-3/265842 "2021-03-10T18:31:15Z")
Hi, I recently upgrade from ES 7.6.0 to 7.9.3. I now have a weird behavior where a Popover click clears my Chart. I pass LineSeries into the Chart as {children}. It appears the children gets cleared I have no idea why. … --- ## [Possible workarounds for percentile in heatmaps?](https://discuss.elastic.co/t/possible-workarounds-for-percentile-in-heatmaps/266777)
**Author:** [@nnoop](https://discuss.elastic.co/u/nnoop)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 6:28pm UTC](https://discuss.elastic.co/t/possible-workarounds-for-percentile-in-heatmaps/266777 "2021-03-10T18:28:26Z")
Hi I'm new to ELK and currently trying to work on a heatmap that shows cpu utilisation and its percentile on Kibana 7.6.2. I have an index that contains kernel percent and user percent which I add together to create a sc… --- ## [Using Nest.net indexing list\ where SomeType is abstract](https://discuss.elastic.co/t/using-nest-net-indexing-list-sometype-where-sometype-is-abstract/266848)
**Author:** [@RejectKid](https://discuss.elastic.co/u/RejectKid)\ **Replies:** 0\ **Last updated:** [March 10, 2021, 5:40pm UTC](https://discuss.elastic.co/t/using-nest-net-indexing-list-sometype-where-sometype-is-abstract/266848 "2021-03-10T17:40:32Z")
I have an object public class SomeObject { List\ } There are several derived types of SomeType and populated in the list. However when i push this data into ES using Nest.net it strips out … --- ## [Doing aggregations using flattened\_fields is slow](https://discuss.elastic.co/t/doing-aggregations-using-flattened-fields-is-slow/266832)
**Author:** [@Ronald\_de\_Haan](https://discuss.elastic.co/u/Ronald_de_Haan)\ **Replies:** 1\ **Last updated:** [March 10, 2021, 4:41pm UTC](https://discuss.elastic.co/t/doing-aggregations-using-flattened-fields-is-slow/266832 "2021-03-10T16:41:31Z")
We consume and store data containing a field filter\_properties containing key =\> value fields. Up until now we use dynamic mapping to store that data but that's creating a lot of unique fields. So I decided to try the f… --- ## [2 different time](https://discuss.elastic.co/t/2-different-time/266640)
**Author:** [@111435](https://discuss.elastic.co/u/111435)\ **Replies:** 4\ **Last updated:** [March 10, 2021, 4:34pm UTC](https://discuss.elastic.co/t/2-different-time/266640 "2021-03-10T16:34:33Z")
Hello guys! Please, I need your advise. From one client server to logstash comming 2 different logs with different time template: \[2021-02-24 00:00:06,335\] \[\[ACTIVE\] ExecuteThread: '121' for queue: 'weblogic.kernel.… --- ## [Custom CSS code for dashboards](https://discuss.elastic.co/t/custom-css-code-for-dashboards/266740)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 4:31pm UTC](https://discuss.elastic.co/t/custom-css-code-for-dashboards/266740 "2021-03-10T16:31:28Z")
Hi there! I'm looking into adding some custom CSS code to personalize a bit my dashboard. Say that I have a custom dashboard, I want the panels to have rounded corners. I have tested this code w/ the Firefox inspector (… --- ## [Forcemerge multiple indices = high fragmentation on disk?](https://discuss.elastic.co/t/forcemerge-multiple-indices-high-fragmentation-on-disk/265586)
**Author:** [@MichelV](https://discuss.elastic.co/u/MichelV)\ **Replies:** 8\ **Last updated:** [March 10, 2021, 4:25pm UTC](https://discuss.elastic.co/t/forcemerge-multiple-indices-high-fragmentation-on-disk/265586 "2021-03-10T16:25:42Z")
I'm applying an ILM policy on older (daily) indices. In warm phase I have enabled forcemerge to reduce the number of segments. If I assign the ILM policy to multiple indices, say 30 days, will the forcemerge run on all … --- ## [No dynamic or static mapping - data not searchable?](https://discuss.elastic.co/t/no-dynamic-or-static-mapping-data-not-searchable/266270)
**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\ **Replies:** 1\ **Last updated:** [March 10, 2021, 4:00pm UTC](https://discuss.elastic.co/t/no-dynamic-or-static-mapping-data-not-searchable/266270 "2021-03-10T16:00:52Z")
I have a template that disables dynamic mapping and statically maps a few specific fields. When data is ingested that does not fit the static mappings, I can see the data in elasticsearch, but I can't search it. Queryin… --- ## [ConnectTransportException non-master-eligible node found](https://discuss.elastic.co/t/connecttransportexception-non-master-eligible-node-found/266417)
**Author:** [@SSRR](https://discuss.elastic.co/u/SSRR)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 4:00pm UTC](https://discuss.elastic.co/t/connecttransportexception-non-master-eligible-node-found/266417 "2021-03-10T16:00:28Z")
I'm configuring Elasticserach 7.9.0 cluster with 2 hosts. The elasticsearch.yml in host1 is setup with node.master as true and host2 is setup with node.master as false. Both hosts have elasticsearch started but with err… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1017) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1019)