# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1033

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1034

---

## [If I want Q&A system, should I use Elasticsearch or IBM Watson Discovery?](https://discuss.elastic.co/t/if-i-want-q-a-system-should-i-use-elasticsearch-or-ibm-watson-discovery/265469)

<div class="topic-metadata">

**Author:** [@Cloud9Clone](https://discuss.elastic.co/u/Cloud9Clone)\
**Replies:** 1\
**Last updated:** [February 25, 2021, 11:05pm UTC](https://discuss.elastic.co/t/if-i-want-q-a-system-should-i-use-elasticsearch-or-ibm-watson-discovery/265469 "2021-02-25T23:05:23Z")

</div>

Hello everyone, I am new to the elasticsearch and as such I would like to ask you for your meaning. In front of me stays a project where I save Q&A pairs in a database and then when a question is asked I would like to r…

---

## [Running Elasticsearch on Eclipse OpenJ9 JVM](https://discuss.elastic.co/t/running-elasticsearch-on-eclipse-openj9-jvm/265523)

<div class="topic-metadata">

**Author:** [@Naoshad\_Mehta](https://discuss.elastic.co/u/Naoshad_Mehta)\
**Replies:** 1\
**Last updated:** [February 25, 2021, 11:03pm UTC](https://discuss.elastic.co/t/running-elasticsearch-on-eclipse-openj9-jvm/265523 "2021-02-25T23:03:58Z")

</div>

We have been using Elasticsearch with AdoptJDK11 + Eclipse OpenJ9 JVM and it has worked well for the most part. We have lately been seeing some weird issues related to Garbage Collection and so were wondering why Elastic…

---

## [Aggregate sum wrong with huge datasets](https://discuss.elastic.co/t/aggregate-sum-wrong-with-huge-datasets/265549)

<div class="topic-metadata">

**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\
**Replies:** 0\
**Last updated:** [February 25, 2021, 10:05pm UTC](https://discuss.elastic.co/t/aggregate-sum-wrong-with-huge-datasets/265549 "2021-02-25T22:05:20Z")

</div>

Hi all and sorry for my poor english. Hi have data like that: { "\_index": "statistic", "\_type": "\_doc", "\_id": "df5d295f-99bf-49b3-b640-a9000461de3a", "\_score": 1.0, "\_source":{ "\_class": "com.x.dsp.elasticssearc…

---

## [HTTP input plugin customize response-header](https://discuss.elastic.co/t/http-input-plugin-customize-response-header/265547)

<div class="topic-metadata">

**Author:** [@stemons](https://discuss.elastic.co/u/stemons)\
**Replies:** 1\
**Last updated:** [February 25, 2021, 9:54pm UTC](https://discuss.elastic.co/t/http-input-plugin-customize-response-header/265547 "2021-02-25T21:54:02Z")

</div>

Hello! I'm working with logstash and the http input plugin. I've a datasource that send a data stream to logstash and require as response header content-type =\> application/json. I'm using the following configuration, bu…

---

## [ECS Tooling to HttpTriggered Azure Function](https://discuss.elastic.co/t/ecs-tooling-to-httptriggered-azure-function/265544)

<div class="topic-metadata">

**Author:** [@mxu](https://discuss.elastic.co/u/mxu)\
**Replies:** 0\
**Last updated:** [February 25, 2021, 9:13pm UTC](https://discuss.elastic.co/t/ecs-tooling-to-httptriggered-azure-function/265544 "2021-02-25T21:13:44Z")

</div>

Hi, we have been using ECS Tooling to generate index templates with custom schemas. We plan to have that as HttpTriggered Azure Function which takes in custom schema in the request and generates template dynamically. …

---

## [Pre-filtering for \_termvectors API to get statistics on a subset of documents](https://discuss.elastic.co/t/pre-filtering-for-termvectors-api-to-get-statistics-on-a-subset-of-documents/265540)

<div class="topic-metadata">

**Author:** [@bbaronas](https://discuss.elastic.co/u/bbaronas)\
**Replies:** 0\
**Last updated:** [February 25, 2021, 8:42pm UTC](https://discuss.elastic.co/t/pre-filtering-for-termvectors-api-to-get-statistics-on-a-subset-of-documents/265540 "2021-02-25T20:42:33Z")

</div>

Is there a way to pre-filter documents for the \_termvector API to get statistics limited to a subset of the documents in an index? I would like to use the term vector API to look at tf/idf, etc. for items in my index, b…

---

## [Can I upgrade my kibana node thats running 7.6.1 to 7.11 without upgrading my elasticsearch and logstash nodes which are running 7.6.1?](https://discuss.elastic.co/t/can-i-upgrade-my-kibana-node-thats-running-7-6-1-to-7-11-without-upgrading-my-elasticsearch-and-logstash-nodes-which-are-running-7-6-1/265538)

<div class="topic-metadata">

**Author:** [@deep9300](https://discuss.elastic.co/u/deep9300)\
**Replies:** 1\
**Last updated:** [February 25, 2021, 8:24pm UTC](https://discuss.elastic.co/t/can-i-upgrade-my-kibana-node-thats-running-7-6-1-to-7-11-without-upgrading-my-elasticsearch-and-logstash-nodes-which-are-running-7-6-1/265538 "2021-02-25T20:24:34Z")

</div>

I have a 5 node ELK cluster. I have kibana 7.6.1 running on a single node. Elasticsearch 7.6.1 on 3 other nodes. Logstash 7.6.1 on the last node. Can I upgrade kibana without upgrading elasticsearch and logstash to 7.11…

---

## [For the same data with date format search works in Elasticsearch 6.x.But, it do not work on 7.x](https://discuss.elastic.co/t/for-the-same-data-with-date-format-search-works-in-elasticsearch-6-x-but-it-do-not-work-on-7-x/265536)

<div class="topic-metadata">

**Author:** [@Bharath\_Italapur](https://discuss.elastic.co/u/Bharath_Italapur)\
**Replies:** 0\
**Last updated:** [February 25, 2021, 8:12pm UTC](https://discuss.elastic.co/t/for-the-same-data-with-date-format-search-works-in-elasticsearch-6-x-but-it-do-not-work-on-7-x/265536 "2021-02-25T20:12:53Z")

</div>

Hi, The search with timestamp is not working for the 12-hour date format on 7.X . Please help me understand or fix the issue posted below. Thank you for the help. ------- This is the date format we are using. PUT test …

---

## [Where did the field refresh icon go in 7.11?](https://discuss.elastic.co/t/where-did-the-field-refresh-icon-go-in-7-11/265532)

<div class="topic-metadata">

**Author:** [@rmoff](https://discuss.elastic.co/u/rmoff)\
**Replies:** 3\
**Last updated:** [February 25, 2021, 8:15pm UTC](https://discuss.elastic.co/t/where-did-the-field-refresh-icon-go-in-7-11/265532 "2021-02-25T20:15:02Z")

</div>

In 7.11 I don't see a button to refresh the fields in my index pattern any more. It used to be up there in the top-right with the delete icon, but no longer. Has it been removed by design, and if so, how do I refresh…

---

## [Save Objects API often results in 503 Timeout](https://discuss.elastic.co/t/save-objects-api-often-results-in-503-timeout/265123)

<div class="topic-metadata">

**Author:** [@gdoctor](https://discuss.elastic.co/u/gdoctor)\
**Replies:** 8\
**Last updated:** [February 25, 2021, 7:33pm UTC](https://discuss.elastic.co/t/save-objects-api-often-results-in-503-timeout/265123 "2021-02-25T19:33:02Z")

</div>

Elasticsearch version: 7.10.0 Kibana version: 7.10.0 All POST API calls to the endpoint https://kibana-our-host.cisco.com/api/saved\_objects/query/Example%20Query result in the following 503 Error, no matter the conten…

---

## [Logstash warning](https://discuss.elastic.co/t/logstash-warning/265416)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 2\
**Last updated:** [February 25, 2021, 7:12pm UTC](https://discuss.elastic.co/t/logstash-warning/265416 "2021-02-25T19:12:47Z")

</div>

I am have metricbeat running on few systems. and getting this error message on and off. can't put my fingure on about which event is generating this error. is there a way to find out? Basically metricbeat is running f…

---

## [Parse Json Logs using logstash](https://discuss.elastic.co/t/parse-json-logs-using-logstash/265517)

<div class="topic-metadata">

**Author:** [@Yashkumar\_Dabhi](https://discuss.elastic.co/u/Yashkumar_Dabhi)\
**Replies:** 1\
**Last updated:** [February 25, 2021, 5:36pm UTC](https://discuss.elastic.co/t/parse-json-logs-using-logstash/265517 "2021-02-25T17:36:03Z")

</div>

Hi, I'm trying to parse logs in logstash, My logs are in Json, {"timestamp":"2021-02-25T15:20:38.490Z","logLevel":"INFO","serviceName":"xxx","transactionId":"0000-0000-000","elapsedTime":820,"endTime":"","url":"","statu…

---

## [ILM policy trigerring late](https://discuss.elastic.co/t/ilm-policy-trigerring-late/265436)

<div class="topic-metadata">

**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\
**Replies:** 2\
**Last updated:** [February 25, 2021, 5:27pm UTC](https://discuss.elastic.co/t/ilm-policy-trigerring-late/265436 "2021-02-25T17:27:19Z")

</div>

Hi : I am trying to dev test the ILM template by specifying the below... The rollover happens after a few minutes and after it reaches like 750KB instead of 10 KB as mentioned in ILM. Why is it not rolling over as soon…

---

## [All Rules are showing Failed](https://discuss.elastic.co/t/all-rules-are-showing-failed/264318)

<div class="topic-metadata">

**Author:** [@emmett.carey](https://discuss.elastic.co/u/emmett.carey)\
**Replies:** 28\
**Last updated:** [February 25, 2021, 5:16pm UTC](https://discuss.elastic.co/t/all-rules-are-showing-failed/264318 "2021-02-25T17:16:15Z")

</div>

Hi, I've recently set up Elastic Search and Kibana 7.11 and enrolled a VM via Fleet and Agent. In the process I set up a Policy and Assigned some detection rules as well as added the Security Endpoint Integration as we…

---

## [Visualization shard errors](https://discuss.elastic.co/t/visualization-shard-errors/265258)

<div class="topic-metadata">

**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\
**Replies:** 4\
**Last updated:** [February 25, 2021, 4:46pm UTC](https://discuss.elastic.co/t/visualization-shard-errors/265258 "2021-02-25T16:46:28Z")

</div>

We originally had "Shard errors: X of Y shards failed- your data may not be complete" We corrected our scripted field and now when we search data from the Discovery tab those errors are no longer present. (we had to te…

---

## [Sequentially execute filter plugins on listed file inputs](https://discuss.elastic.co/t/sequentially-execute-filter-plugins-on-listed-file-inputs/265496)

<div class="topic-metadata">

**Author:** [@pratz](https://discuss.elastic.co/u/pratz)\
**Replies:** 1\
**Last updated:** [February 25, 2021, 4:22pm UTC](https://discuss.elastic.co/t/sequentially-execute-filter-plugins-on-listed-file-inputs/265496 "2021-02-25T16:22:48Z")

</div>

I have two files that I input in logstash using the file plugin Is there a way that the first file is parsed first? input { file { path =\> "abc.txt" type =\> "first" } file { path =\> …

---

## [Geo shape query radius problem](https://discuss.elastic.co/t/geo-shape-query-radius-problem/265323)

<div class="topic-metadata">

**Author:** [@Fatih\_Kurnaz](https://discuss.elastic.co/u/Fatih_Kurnaz)\
**Replies:** 3\
**Last updated:** [February 25, 2021, 3:36pm UTC](https://discuss.elastic.co/t/geo-shape-query-radius-problem/265323 "2021-02-25T15:36:33Z")

</div>

Hi everyone; Here my mapping; \</\> PUT /circle-example { "mappings": { "properties": { "location": { "type": "geo\_shape", "strategy": "recursive" } } } } \</\> Here example docum…

---

## [EQL signal query return with error](https://discuss.elastic.co/t/eql-signal-query-return-with-error/265465)

<div class="topic-metadata">

**Author:** [@qiratnahraf](https://discuss.elastic.co/u/qiratnahraf)\
**Replies:** 1\
**Last updated:** [February 25, 2021, 3:33pm UTC](https://discuss.elastic.co/t/eql-signal-query-return-with-error/265465 "2021-02-25T15:33:18Z")

</div>

Hi, We are on 7.10 and trying to use EQL signal but hit with error, although when we execute the same EQL query from console it successfully return results. please note in detection module we hit with error whenever we t…

---

## [Avoid override of log4j2.properties during upgrade](https://discuss.elastic.co/t/avoid-override-of-log4j2-properties-during-upgrade/265505)

<div class="topic-metadata">

**Author:** [@ALIT](https://discuss.elastic.co/u/ALIT)\
**Replies:** 0\
**Last updated:** [February 25, 2021, 3:20pm UTC](https://discuss.elastic.co/t/avoid-override-of-log4j2-properties-during-upgrade/265505 "2021-02-25T15:20:45Z")

</div>

Hi, we want to edit our log4j2.properties to change the rotation of deprecation logs. But with upgrading ES (Ubuntu - APT) we need to merge the file with a new one (if there are any changes in the new version). Its eve…

---

## [Vertical line in vertical bar chart, possible?](https://discuss.elastic.co/t/vertical-line-in-vertical-bar-chart-possible/265232)

<div class="topic-metadata">

**Author:** [@ElasticQuestion\_1234](https://discuss.elastic.co/u/ElasticQuestion_1234)\
**Replies:** 5\
**Last updated:** [February 25, 2021, 2:52pm UTC](https://discuss.elastic.co/t/vertical-line-in-vertical-bar-chart-possible/265232 "2021-02-25T14:52:38Z")

</div>

Hi, I created a vertical histogram bar chart. My Y-axis is count. X axis is histogram range of the field I am interested in. Is it possible to add vertical fixed value lines to this vertical bar chart? Or add a vertical …

---

## [Developer mode fail](https://discuss.elastic.co/t/developer-mode-fail/265482)

<div class="topic-metadata">

**Author:** [@Matias\_Gerstner](https://discuss.elastic.co/u/Matias_Gerstner)\
**Replies:** 3\
**Last updated:** [February 25, 2021, 2:33pm UTC](https://discuss.elastic.co/t/developer-mode-fail/265482 "2021-02-25T14:33:39Z")

</div>

Hello good morning, I am having problems starting kibana in developer mode, it uses 100% of the cpu and gpu, my computer freezes, the idea is to make a plugin, but I cannot start the system, do you have any idea that it …

---

## [Aggregation over big data](https://discuss.elastic.co/t/aggregation-over-big-data/265486)

<div class="topic-metadata">

**Author:** [@Filip\_Sirc](https://discuss.elastic.co/u/Filip_Sirc)\
**Replies:** 0\
**Last updated:** [February 25, 2021, 2:22pm UTC](https://discuss.elastic.co/t/aggregation-over-big-data/265486 "2021-02-25T14:22:47Z")

</div>

Hello, i would like to ask you for advice. I have index with milions of documents and need to query it (query will return cca. 100 000 documents) and use results for aggregations. My current code is: { "query": { …

---

## [Wildcard query rewrite parameter not working with new wildcard field type?](https://discuss.elastic.co/t/wildcard-query-rewrite-parameter-not-working-with-new-wildcard-field-type/265453)

<div class="topic-metadata">

**Author:** [@cads](https://discuss.elastic.co/u/cads)\
**Replies:** 3\
**Last updated:** [February 25, 2021, 1:48pm UTC](https://discuss.elastic.co/t/wildcard-query-rewrite-parameter-not-working-with-new-wildcard-field-type/265453 "2021-02-25T13:48:53Z")

</div>

The Wildcard Query offers a rewrite parameter to influence how Lucene calculates the relevance scores. On keyword fields this works as expected but it does not seem to work with the new wildcard field type which belongs …

---

## [Elastic-Agent vs Metricbeat standalone](https://discuss.elastic.co/t/elastic-agent-vs-metricbeat-standalone/252270)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 4\
**Last updated:** [February 25, 2021, 1:48pm UTC](https://discuss.elastic.co/t/elastic-agent-vs-metricbeat-standalone/252270 "2021-02-25T13:48:21Z")

</div>

Hi, Note: Running in Windows Server 2012 I have a couple of questions about the Metricbeat service running under Elastic-Agent: Can modules (for example MSSQL) be activated like the standalone version of Metricbeat? H…

---

## [How can I check logstash throughput(event per second)?](https://discuss.elastic.co/t/how-can-i-check-logstash-throughput-event-per-second/265340)

<div class="topic-metadata">

**Author:** [@jang](https://discuss.elastic.co/u/jang)\
**Replies:** 1\
**Last updated:** [February 25, 2021, 1:33pm UTC](https://discuss.elastic.co/t/how-can-i-check-logstash-throughput-event-per-second/265340 "2021-02-25T13:33:33Z")

</div>

I am sending data from Logstash to Elasticsearch. (filebeat -\> kafka -\> logstash -\> elasticsearch) I want to know the Logstash Event Per Second(EPS) (it is assumed that the environment of Elasticsearch is the same.) P…

---

## [Kibana Time Histogram x-axis Dates and Time Overlapping](https://discuss.elastic.co/t/kibana-time-histogram-x-axis-dates-and-time-overlapping/265448)

<div class="topic-metadata">

**Author:** [@Disha\_Bodade](https://discuss.elastic.co/u/Disha_Bodade)\
**Replies:** 2\
**Last updated:** [February 25, 2021, 1:22pm UTC](https://discuss.elastic.co/t/kibana-time-histogram-x-axis-dates-and-time-overlapping/265448 "2021-02-25T13:22:55Z")

</div>

HI, I am using OSS kibana version - 7.5.0, I have created visuals bar charts ,Line charts selected x-axis as Date Histogram with field @timestamp with minimum interval as a Auto. When selecting time range to see visua…

---

## [Node couldn't rejoin cluster because "version not supported"](https://discuss.elastic.co/t/node-couldnt-rejoin-cluster-because-version-not-supported/265473)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 2\
**Last updated:** [February 25, 2021, 1:21pm UTC](https://discuss.elastic.co/t/node-couldnt-rejoin-cluster-because-version-not-supported/265473 "2021-02-25T13:21:43Z")

</div>

I've got an Elasticsearch cluster of four nodes. Three can hold data and are master eligible. One cannot hold data, isn't master eligible and has Kibana on it. Two of the master eligible nodes became unhappy resulting in…

---

## [KIBANA: xpack.spaces.enabled: false](https://discuss.elastic.co/t/kibana-xpack-spaces-enabled-false/265466)

<div class="topic-metadata">

**Author:** [@MaximK](https://discuss.elastic.co/u/MaximK)\
**Replies:** 2\
**Last updated:** [February 25, 2021, 11:32am UTC](https://discuss.elastic.co/t/kibana-xpack-spaces-enabled-false/265466 "2021-02-25T11:32:08Z")

</div>

Hi Team, Could you please let me know if set xpack.spaces.enabled: false i dont have in kibana UI: logs\\metric. Can I use features such as Logs UI , Metric ,... without xpack.spaces.enabled: true ? or spaces is requ…

---

## [Export Emojis and Special Characters in CSV Reports](https://discuss.elastic.co/t/export-emojis-and-special-characters-in-csv-reports/265425)

<div class="topic-metadata">

**Author:** [@zah](https://discuss.elastic.co/u/zah)\
**Replies:** 1\
**Last updated:** [February 25, 2021, 10:45am UTC](https://discuss.elastic.co/t/export-emojis-and-special-characters-in-csv-reports/265425 "2021-02-25T10:45:38Z")

</div>

Is there a way to export special characters (eg accented letters) and emojis from a Kibana table to CSV format? Whenever I export a data table with special characters and emojis in the text as a CSV report, the csv rende…

---

## [Unexpected Shingle Behaviour](https://discuss.elastic.co/t/unexpected-shingle-behaviour/265461)

<div class="topic-metadata">

**Author:** [@rishabhm12](https://discuss.elastic.co/u/rishabhm12)\
**Replies:** 0\
**Last updated:** [February 25, 2021, 9:48am UTC](https://discuss.elastic.co/t/unexpected-shingle-behaviour/265461 "2021-02-25T09:48:17Z")

</div>

Hey, I have a field locality in my index having 'ashok vihar phase 2' as one of the document. The corresponding setting is {"settings": { "analysis": { "analyzer": { "custom\_analyzer": …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1032)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1034)
