# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1024 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1025 --- ## [Data Table with Document Status Counts by Month](https://discuss.elastic.co/t/data-table-with-document-status-counts-by-month/265849)
**Author:** [@Darwin](https://discuss.elastic.co/u/Darwin)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 12:05pm UTC](https://discuss.elastic.co/t/data-table-with-document-status-counts-by-month/265849 "2021-03-05T12:05:58Z")
Hi all, I am new to Kibana and am having trouble creating a desired data table. In short, I have an index comprising documents representing order lifecycle, similar to the image shown below: The order documents incl… --- ## [Helm logstash last\_run\_metadata\_path](https://discuss.elastic.co/t/helm-logstash-last-run-metadata-path/266362)
**Author:** [@josemiguelq](https://discuss.elastic.co/u/josemiguelq)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 12:01pm UTC](https://discuss.elastic.co/t/helm-logstash-last-run-metadata-path/266362 "2021-03-05T12:01:46Z")
How can I define volumes bind for files used by last\_run\_metadata? In logstash.conf file a defined last\_run\_metadata\_path: "{$HOME}/states/.last\_run\_config" and I want this file persistent for any deploy. --- ## [How to use the search after after getting the result using the geolocation sort](https://discuss.elastic.co/t/how-to-use-the-search-after-after-getting-the-result-using-the-geolocation-sort/266359)
**Author:** [@kushal\_sharma](https://discuss.elastic.co/u/kushal_sharma)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 11:41am UTC](https://discuss.elastic.co/t/how-to-use-the-search-after-after-getting-the-result-using-the-geolocation-sort/266359 "2021-03-05T11:41:07Z")
Hi, I have an index in which I have a point field that holds the geolocation of the place, and I have a user interface on the frontend where the user can move the map and he will get the top 10 nearest location, everyth… --- ## [Setting a Time Zone for a Dashboard](https://discuss.elastic.co/t/setting-a-time-zone-for-a-dashboard/265941)
**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 11:39am UTC](https://discuss.elastic.co/t/setting-a-time-zone-for-a-dashboard/265941 "2021-03-05T11:39:26Z")
Hello Team, Greetings for the Day ! I am looking if it is possible to set a time zone when creating a specific visualization/dashboard/canvas Work pad by using advanced json / css in canvas. The purpose for this is so … --- ## [\[0\] "\_dateparsefailure"](https://discuss.elastic.co/t/0-dateparsefailure/266226)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 11:38am UTC](https://discuss.elastic.co/t/0-dateparsefailure/266226 "2021-03-05T11:38:09Z")
I want to replace timestamp with my field timestamp. I have tried but getting error so kindly share solution for this problem. "message" =\> "8/12/2020 0:00,jack,jazz,your recent attemt failed.,"9000.00 have been Debited… --- ## [Watcher webhook url has no port](https://discuss.elastic.co/t/watcher-webhook-url-has-no-port/266279)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 11:07am UTC](https://discuss.elastic.co/t/watcher-webhook-url-has-no-port/266279 "2021-03-05T11:07:16Z")
I have an api endpoint that does not have a port. I can hit the endpoint with java but the webhook requires a port. Is there a work around for this issue? --- ## [Filebeat 7.3.1 - Exiting: setup.template.name and setup.template.pattern have to be set if index name is modified](https://discuss.elastic.co/t/filebeat-7-3-1-exiting-setup-template-name-and-setup-template-pattern-have-to-be-set-if-index-name-is-modified/266204)
**Author:** [@dcenaculo](https://discuss.elastic.co/u/dcenaculo)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 9:52am UTC](https://discuss.elastic.co/t/filebeat-7-3-1-exiting-setup-template-name-and-setup-template-pattern-have-to-be-set-if-index-name-is-modified/266204 "2021-03-05T09:52:50Z")
Hi, I'm using Elastic Stack 7.3.1 and Filebeat 7.3.1. Now, when I try to start the filebeat, the following message appears: PS C:\\filebeat-7.3.1-windows-x86\_64\> .\\filebeat.exe Exiting: setup.template.name and setup.tem… --- ## [Mapping all Bools as String](https://discuss.elastic.co/t/mapping-all-bools-as-string/265583)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 9:35am UTC](https://discuss.elastic.co/t/mapping-all-bools-as-string/265583 "2021-03-05T09:35:22Z")
When my logstash starts it sends a template to ES where I set the mappings for various fields. I'm getting a lot of conflicts on a lot of fields(150+) that I do not have individual mappings for. These are dynamic as th… --- ## [How to add field to every element from an array with logstash ruby](https://discuss.elastic.co/t/how-to-add-field-to-every-element-from-an-array-with-logstash-ruby/266257)
**Author:** [@syrine\_chelly](https://discuss.elastic.co/u/syrine_chelly)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 9:33am UTC](https://discuss.elastic.co/t/how-to-add-field-to-every-element-from-an-array-with-logstash-ruby/266257 "2021-03-05T09:33:35Z")
Hi I have an array such like this: "step": \[ "\> MESSAGE AUTOMATE 03/08/2020 18:39:01 : POUR LA JOURNEE DU 20200731 L'ETAPE UNIP A PRIS 00H00", "\> MESSAGE AUTOMATE 03/08/2020 18:39:01 : POUR LA JOURNEE DU 20… --- ## [How to convert apache server uptime in seconds to minutes](https://discuss.elastic.co/t/how-to-convert-apache-server-uptime-in-seconds-to-minutes/266212)
**Author:** [@psganeshk](https://discuss.elastic.co/u/psganeshk)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 9:30am UTC](https://discuss.elastic.co/t/how-to-convert-apache-server-uptime-in-seconds-to-minutes/266212 "2021-03-05T09:30:44Z")
how to convert apache server uptime in seconds to minutes --- ## [Comment stocker le resultat d'une aggregation dans un autre index](https://discuss.elastic.co/t/comment-stocker-le-resultat-dune-aggregation-dans-un-autre-index/266256)
**Author:** [@Corben\_Dallas](https://discuss.elastic.co/u/Corben_Dallas)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 8:33am UTC](https://discuss.elastic.co/t/comment-stocker-le-resultat-dune-aggregation-dans-un-autre-index/266256 "2021-03-05T08:33:25Z")
Bonjour, afin d'éviter de refaire les mêmes queries, je voudrais stocker les résultat d'une agrégation dans un autre index. exemple des compteurs journaliers mais petite surprises, en 7.9 il n y a pas de moyen simple… --- ## [Message not fully read (response) for request AND incompatible wire format](https://discuss.elastic.co/t/message-not-fully-read-response-for-request-and-incompatible-wire-format/266209)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 7\ **Last updated:** [March 5, 2021, 8:29am UTC](https://discuss.elastic.co/t/message-not-fully-read-response-for-request-and-incompatible-wire-format/266209 "2021-03-05T08:29:53Z")
Hello, I am trying ELasticsearch from code source (8.0.0) , and I am getting these warninigs: java.lang.IllegalStateException: Message not fully read (response) for requestId \[542\], handler \[org.elasticsearch.transpor… --- ## [HELP with query =\> Doc with array of 2 values Return 2 hits](https://discuss.elastic.co/t/help-with-query-doc-with-array-of-2-values-return-2-hits/266325)
**Author:** [@Peter4](https://discuss.elastic.co/u/Peter4)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 8:11am UTC](https://discuss.elastic.co/t/help-with-query-doc-with-array-of-2-values-return-2-hits/266325 "2021-03-05T08:11:24Z")
Hi I need help writing query. doc in ES is { A: "A", B: \["1","2"\] } result from query should be: hits(2x) { A:"A" , B: "1"} { A:"A" , B: "2" } is this possible? --- ## [How to increase speed when using es-hadoop bulk data from hdfs to elasticsearch?](https://discuss.elastic.co/t/how-to-increase-speed-when-using-es-hadoop-bulk-data-from-hdfs-to-elasticsearch/266329)
**Author:** [@Chuckiefan](https://discuss.elastic.co/u/Chuckiefan)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 7:55am UTC](https://discuss.elastic.co/t/how-to-increase-speed-when-using-es-hadoop-bulk-data-from-hdfs-to-elasticsearch/266329 "2021-03-05T07:55:13Z")
When I use es-hadoop to run a MapReduce bulk data from hdfs to elasticsearch ,the number of reducer is 1 as default. Is there any way to increase the speed of it ? --- ## [Logstash CIDR Filter : create new field with matched network](https://discuss.elastic.co/t/logstash-cidr-filter-create-new-field-with-matched-network/266282)
**Author:** [@Nybble](https://discuss.elastic.co/u/Nybble)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 6:22am UTC](https://discuss.elastic.co/t/logstash-cidr-filter-create-new-field-with-matched-network/266282 "2021-03-05T06:22:03Z")
Hello, I'm currently using the Logstash CIDR filter to tag private and public IP. Now, I want to use this plugin with a list of all the networks used within my company and add a field or a tag with network information … --- ## [Unable to use Top hit for ip address in pie chart](https://discuss.elastic.co/t/unable-to-use-top-hit-for-ip-address-in-pie-chart/266054)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 5:44am UTC](https://discuss.elastic.co/t/unable-to-use-top-hit-for-ip-address-in-pie-chart/266054 "2021-03-05T05:44:05Z")
Hi all, I'm trying to give a pie chart in kibana for ip address to monitor the up/down status of a device. SO many times, device ip may be down, but currently it is up. SO i want to give top hit of ip ordered by time… --- ## [Can I define color range in Object](https://discuss.elastic.co/t/can-i-define-color-range-in-object/266095)
**Author:** [@ChrisaT](https://discuss.elastic.co/u/ChrisaT)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 4:17am UTC](https://discuss.elastic.co/t/can-i-define-color-range-in-object/266095 "2021-03-05T04:17:06Z")
Hi, im having issues with visualisations and defining colour ranges. Although I can override the colour via the legend in the visualisation adding this into a Canvas ignores the colours I set. It reverts to the default g… --- ## [Default analyser in annotated text](https://discuss.elastic.co/t/default-analyser-in-annotated-text/266313)
**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 4:05am UTC](https://discuss.elastic.co/t/default-analyser-in-annotated-text/266313 "2021-03-05T04:05:41Z")
What is the default analyser used in annotated text?is it standard analyser?how do I find it? Can we use a different analyser for annotated text? --- ## [How to find whether the field in elasticSearch is sortable and analysed](https://discuss.elastic.co/t/how-to-find-whether-the-field-in-elasticsearch-is-sortable-and-analysed/265106)
**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\ **Replies:** 8\ **Last updated:** [March 5, 2021, 4:00am UTC](https://discuss.elastic.co/t/how-to-find-whether-the-field-in-elasticsearch-is-sortable-and-analysed/265106 "2021-03-05T04:00:16Z")
How to find whether the field in elasticSearch is sortable and analysed --- ## [Dissector mapping, pattern not found (Jfrog artifactory service logs)](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-jfrog-artifactory-service-logs/266305)
**Author:** [@jchiu](https://discuss.elastic.co/u/jchiu)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 2:23am UTC](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-jfrog-artifactory-service-logs/266305 "2021-03-05T02:23:48Z")
Hello all, I am having a hard time parsing the JFrog's artifactory-service log with "dissect". Even after few searches here, I still couldn't figure out what went wrong... Hope that someone could be kind enough to take… --- ## [Visualization in Kibana for Custome field](https://discuss.elastic.co/t/visualization-in-kibana-for-custome-field/265993)
**Author:** [@Subrat\_Dash](https://discuss.elastic.co/u/Subrat_Dash)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 2:00am UTC](https://discuss.elastic.co/t/visualization-in-kibana-for-custome-field/265993 "2021-03-05T02:00:24Z")
HI All, We have application log in JSON format with key value pair and those keys are coming as Fields in Kibana GUI. WIth this field I am able to parse in text filter but those field does not have virtualization option… --- ## [Isuue while overriding JSON object in document](https://discuss.elastic.co/t/isuue-while-overriding-json-object-in-document/266239)
**Author:** [@pawar.pradeep85](https://discuss.elastic.co/u/pawar.pradeep85)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 12:43pm UTC](https://discuss.elastic.co/t/isuue-while-overriding-json-object-in-document/266239 "2021-03-04T12:43:40Z")
Hello, I want to perform a task which requires below activities: Override "xyz" record with the new "xyz" record completely (avoid update/merging) in the existing document. New "xyz" record structure could be differen… --- ## [Unable to ingest data using different JDBC Drivers in one Conf file](https://discuss.elastic.co/t/unable-to-ingest-data-using-different-jdbc-drivers-in-one-conf-file/266261)
**Author:** [@ronaldom](https://discuss.elastic.co/u/ronaldom)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 4:21pm UTC](https://discuss.elastic.co/t/unable-to-ingest-data-using-different-jdbc-drivers-in-one-conf-file/266261 "2021-03-04T16:21:31Z")
Hello, I am currently doing a proof of concept where I try to pull data from 2 different databases (SQL and Snowflake). I don't see any error in the logs when running the conf file and logstash never seem to complete eve… --- ## [Kibana instance with multi node elastic cluster](https://discuss.elastic.co/t/kibana-instance-with-multi-node-elastic-cluster/266297)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 11:53pm UTC](https://discuss.elastic.co/t/kibana-instance-with-multi-node-elastic-cluster/266297 "2021-03-04T23:53:42Z")
Hi Elastic 7.11.1 Lets' say I have 3 node elastic cluster and I would like to access this cluster through kibana. node-1 node-2 node-3 How should I proceed, I mean, should I: install kibana on each of these 3 serv… --- ## [Setting a long custom \_id value when inserting into Elastic search](https://discuss.elastic.co/t/setting-a-long-custom-id-value-when-inserting-into-elastic-search/266300)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 11:42pm UTC](https://discuss.elastic.co/t/setting-a-long-custom-id-value-when-inserting-into-elastic-search/266300 "2021-03-04T23:42:18Z")
I'm reading data with filebeat, sending to logstash and it ends up in ES. One issue we have is sometimes Filebeat re-reads files leading to duplicate entries in Elastic Search. One idea was to create a custom \_id value… --- ## [How to combine alerts in one?](https://discuss.elastic.co/t/how-to-combine-alerts-in-one/266046)
**Author:** [@VellayLoket](https://discuss.elastic.co/u/VellayLoket)\ **Replies:** 13\ **Last updated:** [March 4, 2021, 11:09pm UTC](https://discuss.elastic.co/t/how-to-combine-alerts-in-one/266046 "2021-03-04T23:09:57Z")
For example, i have infected PC in my network, and it sends many requests to C2 malware domain. So, i setup detection rule for this C2C domain and now i have got 100500 alerts from only 1 IP of infected PC. How to combin… --- ## [Found differences in mapping. Can I simply update the mapping?](https://discuss.elastic.co/t/found-differences-in-mapping-can-i-simply-update-the-mapping/266278)
**Author:** [@Lennart\_Wong](https://discuss.elastic.co/u/Lennart_Wong)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 11:04pm UTC](https://discuss.elastic.co/t/found-differences-in-mapping-can-i-simply-update-the-mapping/266278 "2021-03-04T23:04:10Z")
Hello! I am very new to Elasticsearch and was tasked to add a new cluster and put it to work. Any help is much appreciated! My company has a few existing ES cluster. After I added the new cluster and the indexes, I a… --- ## [Sort by string in kibana's discover (search)](https://discuss.elastic.co/t/sort-by-string-in-kibanas-discover-search/266284)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 5\ **Last updated:** [March 4, 2021, 10:15pm UTC](https://discuss.elastic.co/t/sort-by-string-in-kibanas-discover-search/266284 "2021-03-04T22:15:43Z")
When I go to Kiban's discover and add fields I can sort on date field or Number field but I can't on string. is this by design or I have to change some setting to enable this I am using version 7.10.1 --- ## [Kibana - Visualize Metric](https://discuss.elastic.co/t/kibana-visualize-metric/266201)
**Author:** [@cvasilak](https://discuss.elastic.co/u/cvasilak)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 9:56pm UTC](https://discuss.elastic.co/t/kibana-visualize-metric/266201 "2021-03-04T21:56:40Z")
hey all, apologies but currently I am new to Elastic and Kibana and need some guidance. I have a custom app that puts an index that contains a 'payload' field which is a String and stored as-is. That 'payload' field is … --- ## [maxClauseCount error on Multi Match after Upgrade to 7.10.1](https://discuss.elastic.co/t/maxclausecount-error-on-multi-match-after-upgrade-to-7-10-1/266160)
**Author:** [@dwhite44](https://discuss.elastic.co/u/dwhite44)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 9:39pm UTC](https://discuss.elastic.co/t/maxclausecount-error-on-multi-match-after-upgrade-to-7-10-1/266160 "2021-03-04T21:39:20Z")
We are in the process of upgrading from Elasticsearch 6.5.4 to 7.10.1. We have some searches that worked fine against 6.5.4 but are getting "failed to create query: maxClauseCount is set to 1024" errors against 7.10.1. H… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1023) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1025)