# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1061

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1062

---

## [Updating index analyzer with html char strip filter - blocking?](https://discuss.elastic.co/t/updating-index-analyzer-with-html-char-strip-filter-blocking/263182)

<div class="topic-metadata">

**Author:** [@barry2](https://discuss.elastic.co/u/barry2)\
**Replies:** 0\
**Last updated:** [February 4, 2021, 12:03am UTC](https://discuss.elastic.co/t/updating-index-analyzer-with-html-char-strip-filter-blocking/263182 "2021-02-04T00:03:08Z")

</div>

Hello, I have an index with around 11,000,000 documents in it. I need to update the index analyzer to include a html strip character filter. I know I have to close the index first, apply the new analyzer, then open the …

---

## [Rally 2.0.4 released](https://discuss.elastic.co/t/rally-2-0-4-released/263180)

<div class="topic-metadata">

**Author:** [@Evgenia\_Badiyanova](https://discuss.elastic.co/u/Evgenia_Badiyanova)\
**Replies:** 0\
**Last updated:** [February 3, 2021, 11:39pm UTC](https://discuss.elastic.co/t/rally-2-0-4-released/263180 "2021-02-03T23:39:54Z")

</div>

We have just released Rally 2.0.4. This is mostly a bug fix release also adding a few enhancements: We deprecated running Rally without a subcommand so be sure to always specify the race subcommand when you run a bench…

---

## [Elastic Search Query for cross document reference counts](https://discuss.elastic.co/t/elastic-search-query-for-cross-document-reference-counts/263061)

<div class="topic-metadata">

**Author:** [@mobius](https://discuss.elastic.co/u/mobius)\
**Replies:** 1\
**Last updated:** [February 3, 2021, 10:40pm UTC](https://discuss.elastic.co/t/elastic-search-query-for-cross-document-reference-counts/263061 "2021-02-03T22:40:12Z")

</div>

I have emails in the index which look like these: { "emailId" : 1, "to" : "a@example.com", "from" : "b@example.com", "subject" : "xyz subject" }, { "emailId" : 2, …

---

## [Cluster 3 noeud et load balancer](https://discuss.elastic.co/t/cluster-3-noeud-et-load-balancer/263114)

<div class="topic-metadata">

**Author:** [@Corben\_Dallas](https://discuss.elastic.co/u/Corben_Dallas)\
**Replies:** 2\
**Last updated:** [February 3, 2021, 9:14pm UTC](https://discuss.elastic.co/t/cluster-3-noeud-et-load-balancer/263114 "2021-02-03T21:14:00Z")

</div>

Bonjour, Petite question, j'ai monté un cluster elasticsearch 7.9 licence basic avec 3 noeuds. Mais pour éviter de taper toujours sur le même noeud, j'ai mis en place un bon vieux haproxy pour gérer le load balancing…

---

## [Elasticsearch query - Most recent log for each user, for field logtype='x'](https://discuss.elastic.co/t/elasticsearch-query-most-recent-log-for-each-user-for-field-logtype-x/263170)

<div class="topic-metadata">

**Author:** [@brennan](https://discuss.elastic.co/u/brennan)\
**Replies:** 0\
**Last updated:** [February 3, 2021, 9:24pm UTC](https://discuss.elastic.co/t/elasticsearch-query-most-recent-log-for-each-user-for-field-logtype-x/263170 "2021-02-03T21:24:31Z")

</div>

I am trying to query elasticsearch to get the most recent log for all userIDs where we only include one log per user with field logtype='x' if logtype='x' then get 1 log per userID where the date of this log is the most…

---

## [Saved field "engines.time" is invalid for use with the "Date Histogram" aggregation. Please select a new field](https://discuss.elastic.co/t/saved-field-engines-time-is-invalid-for-use-with-the-date-histogram-aggregation-please-select-a-new-field/263160)

<div class="topic-metadata">

**Author:** [@Ankit4](https://discuss.elastic.co/u/Ankit4)\
**Replies:** 0\
**Last updated:** [February 3, 2021, 6:26pm UTC](https://discuss.elastic.co/t/saved-field-engines-time-is-invalid-for-use-with-the-date-histogram-aggregation-please-select-a-new-field/263160 "2021-02-03T18:26:42Z")

</div>

I am getting this error, while creating index pattern in kibana; Error: Saved field "engines.time" is invalid for use with the "Date Histogram" aggregation. Please select a new field. at FieldParamType.\_this.deseria…

---

## [How to set SameSite='None' in Kibana 7.6.2](https://discuss.elastic.co/t/how-to-set-samesite-none-in-kibana-7-6-2/262633)

<div class="topic-metadata">

**Author:** [@gaetano](https://discuss.elastic.co/u/gaetano)\
**Replies:** 17\
**Last updated:** [February 3, 2021, 6:25pm UTC](https://discuss.elastic.co/t/how-to-set-samesite-none-in-kibana-7-6-2/262633 "2021-02-03T18:25:15Z")

</div>

I'm using kibana 7.6.2 version and I tried to execute a cross-site domain access to Kibana bypassing login page. After I launched http post call to Kibana login endpoint, attaching username and password, I obtain a war…

---

## [Maximize Panel by default](https://discuss.elastic.co/t/maximize-panel-by-default/263149)

<div class="topic-metadata">

**Author:** [@advanced4](https://discuss.elastic.co/u/advanced4)\
**Replies:** 1\
**Last updated:** [February 3, 2021, 6:08pm UTC](https://discuss.elastic.co/t/maximize-panel-by-default/263149 "2021-02-03T18:08:09Z")

</div>

On an embedded dashboard, in the top right under the 3 dot menu, there's the option to "Maximize Panel". Is there a way to do this by default? I cannot find any reference to this feature anywhere. I assume a hack is all…

---

## [Logstash - How can i get the data from a key-value pair?](https://discuss.elastic.co/t/logstash-how-can-i-get-the-data-from-a-key-value-pair/263134)

<div class="topic-metadata">

**Author:** [@vinodhini](https://discuss.elastic.co/u/vinodhini)\
**Replies:** 2\
**Last updated:** [February 3, 2021, 6:00pm UTC](https://discuss.elastic.co/t/logstash-how-can-i-get-the-data-from-a-key-value-pair/263134 "2021-02-03T18:00:38Z")

</div>

I have a field which is like "host":{"name":"abcdef"}, How can i get the value "abcdef" alone from the host field? gsub is not allowing me to remove the {} or "name": I tried to get the value by referencing as %{host}{n…

---

## [Ruby code to add entry into an array?](https://discuss.elastic.co/t/ruby-code-to-add-entry-into-an-array/263046)

<div class="topic-metadata">

**Author:** [@aidanoc15](https://discuss.elastic.co/u/aidanoc15)\
**Replies:** 3\
**Last updated:** [February 3, 2021, 5:37pm UTC](https://discuss.elastic.co/t/ruby-code-to-add-entry-into-an-array/263046 "2021-02-03T17:37:10Z")

</div>

Hi, I'm using logstash as a method posting tickets into our ticketing system using data from an elasticsearch index. The API for out ticketing system expects all of the custom fields for our ticket to come through as an …

---

## [ECK Statefulset currentRevision not updated](https://discuss.elastic.co/t/eck-statefulset-currentrevision-not-updated/263155)

<div class="topic-metadata">

**Author:** [@Simon\_Apen-Sadler](https://discuss.elastic.co/u/Simon_Apen-Sadler)\
**Replies:** 0\
**Last updated:** [February 3, 2021, 5:29pm UTC](https://discuss.elastic.co/t/eck-statefulset-currentrevision-not-updated/263155 "2021-02-03T17:29:46Z")

</div>

I'm currently using a prometheus statefulset down rule to monitor our statefulsets and have noticed the alert is firing incorrectly for the elasticsearch statefulsets managed by ECK. It seems to be caused by updates. The…

---

## [Visualisation with unique values](https://discuss.elastic.co/t/visualisation-with-unique-values/263111)

<div class="topic-metadata">

**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\
**Replies:** 2\
**Last updated:** [February 3, 2021, 4:31pm UTC](https://discuss.elastic.co/t/visualisation-with-unique-values/263111 "2021-02-03T16:31:57Z")

</div>

I have emails in my logs and I parse them like this: "email:" "user1@gmail.com" "name:" "user1" "provider:" "gmail.com" Now I want to make visualiation that will reflect unique providers in given timeframe, for example…

---

## [Disable gray coloring when refreshing dashboard](https://discuss.elastic.co/t/disable-gray-coloring-when-refreshing-dashboard/263127)

<div class="topic-metadata">

**Author:** [@jalzacs](https://discuss.elastic.co/u/jalzacs)\
**Replies:** 2\
**Last updated:** [February 3, 2021, 3:45pm UTC](https://discuss.elastic.co/t/disable-gray-coloring-when-refreshing-dashboard/263127 "2021-02-03T15:45:47Z")

</div>

I use Kibana dashboards to see real time data, updating them every 5 seconds. I have updated the ELK stack from 7.5 to 7.10 and now when the dashboard is refreshing data all dashboard goes gray. It is very annoying to se…

---

## [Elastic Agent 7.10.1 : javax.net.ssl.SSLHandshakeException: Received fatal alert: bad\_certificate](https://discuss.elastic.co/t/elastic-agent-7-10-1-javax-net-ssl-sslhandshakeexception-received-fatal-alert-bad-certificate/260607)

<div class="topic-metadata">

**Author:** [@hilo21](https://discuss.elastic.co/u/hilo21)\
**Replies:** 2\
**Last updated:** [February 3, 2021, 3:42pm UTC](https://discuss.elastic.co/t/elastic-agent-7-10-1-javax-net-ssl-sslhandshakeexception-received-fatal-alert-bad-certificate/260607 "2021-02-03T15:42:36Z")

</div>

Hello, I was testing the latest version of Elastic Stack 7.10.1. So far, so far following the documentation I managed setup an test environment and setup a small lab. I am interested in testing (Simulating Attacks) on …

---

## [Kibana Dashboard read only](https://discuss.elastic.co/t/kibana-dashboard-read-only/262977)

<div class="topic-metadata">

**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\
**Replies:** 2\
**Last updated:** [February 3, 2021, 2:56pm UTC](https://discuss.elastic.co/t/kibana-dashboard-read-only/262977 "2021-02-03T14:56:48Z")

</div>

Hi all. We have elastic cloud 7.10.2 and I'd like to create users with only access Kibana dashboards and in read only mode Also the dashboards that I create/update as an admin must be the same the read only users in Ki…

---

## [Elastic search indices](https://discuss.elastic.co/t/elastic-search-indices/262971)

<div class="topic-metadata">

**Author:** [@geomario](https://discuss.elastic.co/u/geomario)\
**Replies:** 3\
**Last updated:** [February 3, 2021, 2:22pm UTC](https://discuss.elastic.co/t/elastic-search-indices/262971 "2021-02-03T14:22:48Z")

</div>

Hello, I am a new user of Kibana and Elastic search. I am trying to load my elastic indices into my Kibana without success. I already created an index pattern which comes into mind that the information is there. In the …

---

## [How to create ingest pipeline for elasticsearch in kubernetes context?](https://discuss.elastic.co/t/how-to-create-ingest-pipeline-for-elasticsearch-in-kubernetes-context/263130)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 0\
**Last updated:** [February 3, 2021, 2:15pm UTC](https://discuss.elastic.co/t/how-to-create-ingest-pipeline-for-elasticsearch-in-kubernetes-context/263130 "2021-02-03T14:15:55Z")

</div>

I am shipping a csv file from filebeat to elasticsearch. I understand that I need to use an ingest pipeline to parse the csv data prior to it being stored in elastic, similar to what is described in this answer From wha…

---

## [Kibana 7.10.0 pageNavigation style](https://discuss.elastic.co/t/kibana-7-10-0-pagenavigation-style/262957)

<div class="topic-metadata">

**Author:** [@Rollup\_eval](https://discuss.elastic.co/u/Rollup_eval)\
**Replies:** 5\
**Last updated:** [February 3, 2021, 2:09pm UTC](https://discuss.elastic.co/t/kibana-7-10-0-pagenavigation-style/262957 "2021-02-03T14:09:26Z")

</div>

Using kibana 7.10.0 with elasticsearch 7.10.0. Switching from modern mode (menu) to legacy mode(buttons) in advanced settings: pageNavigation style not working Modern mode is always displayed.

---

## [Use NGINX with Logstash](https://discuss.elastic.co/t/use-nginx-with-logstash/263126)

<div class="topic-metadata">

**Author:** [@carmine.fabrizio](https://discuss.elastic.co/u/carmine.fabrizio)\
**Replies:** 0\
**Last updated:** [February 3, 2021, 1:25pm UTC](https://discuss.elastic.co/t/use-nginx-with-logstash/263126 "2021-02-03T13:25:37Z")

</div>

Do we have any kind of benefit or improvement if I configure an NGINX on top of LS? The only one that I can see is that I'll just configure one entry in my output.logstash and having a load balancer with a few helthchec…

---

## [Index Status goes Unknown after Dramatic Increase in Size](https://discuss.elastic.co/t/index-status-goes-unknown-after-dramatic-increase-in-size/263038)

<div class="topic-metadata">

**Author:** [@Senthamarai\_Kannan](https://discuss.elastic.co/u/Senthamarai_Kannan)\
**Replies:** 2\
**Last updated:** [February 3, 2021, 1:22pm UTC](https://discuss.elastic.co/t/index-status-goes-unknown-after-dramatic-increase-in-size/263038 "2021-02-03T13:22:35Z")

</div>

One of our ES indices go to Unknown status after the size increases dramatically. Usually the index size is about 300MB but it goes above 8GB and goes to Unknown state. This is a single node instance hosted in a Windo…

---

## [Better way to convert the object field to nested type field](https://discuss.elastic.co/t/better-way-to-convert-the-object-field-to-nested-type-field/263026)

<div class="topic-metadata">

**Author:** [@Prabaharan\_Kathiresa](https://discuss.elastic.co/u/Prabaharan_Kathiresa)\
**Replies:** 0\
**Last updated:** [February 2, 2021, 6:14pm UTC](https://discuss.elastic.co/t/better-way-to-convert-the-object-field-to-nested-type-field/263026 "2021-02-02T18:14:08Z")

</div>

Hi Team We have an index with object field, we are planning to improve the object field into nested type (array of objects). ie. { "name": "Adam", "car" : { "name": "Maruthi", "modelyear": "2005" } } we are …

---

## [Parallel queries to partitions in Elasticsearch aggregations](https://discuss.elastic.co/t/parallel-queries-to-partitions-in-elasticsearch-aggregations/263122)

<div class="topic-metadata">

**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Replies:** 0\
**Last updated:** [February 3, 2021, 12:58pm UTC](https://discuss.elastic.co/t/parallel-queries-to-partitions-in-elasticsearch-aggregations/263122 "2021-02-03T12:58:40Z")

</div>

If I have a partitioned terms aggregation, say with 20 partitions. If I request for all the 20 partitions by sending 20 requests at the same time using the REST API, will the result be fetched faster or would it still ta…

---

## [Percentage symbol in vega bar graphs](https://discuss.elastic.co/t/percentage-symbol-in-vega-bar-graphs/262794)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 2\
**Last updated:** [February 3, 2021, 12:05pm UTC](https://discuss.elastic.co/t/percentage-symbol-in-vega-bar-graphs/262794 "2021-02-03T12:05:01Z")

</div>

{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "description": "A bar graph showing what activites consume what percentage of the day.", "data": { "values": \[ {"Activity": "Sleeping", "Tim…

---

## [No\_shard\_available\_action\_exception in integration tests](https://discuss.elastic.co/t/no-shard-available-action-exception-in-integration-tests/262941)

<div class="topic-metadata">

**Author:** [@rdehuyss](https://discuss.elastic.co/u/rdehuyss)\
**Replies:** 4\
**Last updated:** [February 3, 2021, 11:49am UTC](https://discuss.elastic.co/t/no-shard-available-action-exception-in-integration-tests/262941 "2021-02-03T11:49:34Z")

</div>

Hi, I'm the author of JobRunr, a distributed job scheduling library that also supports ElasticSearch as a storage provider. For my integration tests, I use TestContainers and start an ElasticSearch. @Container pri…

---

## [Logstash error. Expected symbols](https://discuss.elastic.co/t/logstash-error-expected-symbols/262752)

<div class="topic-metadata">

**Author:** [@111435](https://discuss.elastic.co/u/111435)\
**Replies:** 5\
**Last updated:** [February 3, 2021, 11:38am UTC](https://discuss.elastic.co/t/logstash-error-expected-symbols/262752 "2021-02-03T11:38:34Z")

</div>

Hello, I am new at logstash, so please could you help me. I have this log: 2021-01-27 00:20:10 GET /ads/servlet/dbRequest?BNumber=353&ANumber=485739274 200 0.013 There are tabs between "date", "time", "GET" and "…

---

## [@timestamp in date\_nanos](https://discuss.elastic.co/t/timestamp-in-date-nanos/263112)

<div class="topic-metadata">

**Author:** [@ritusingh](https://discuss.elastic.co/u/ritusingh)\
**Replies:** 0\
**Last updated:** [February 3, 2021, 11:17am UTC](https://discuss.elastic.co/t/timestamp-in-date-nanos/263112 "2021-02-03T11:17:19Z")

</div>

Hi , I am using ELK 7.7.0 and want to know that how can I change @timestamp to date\_nanos while sending logs from logstash to elasticsearch? I know that we can change format of @timestamp to date\_nanos , but it simply …

---

## [Synonyms multi word search issue](https://discuss.elastic.co/t/synonyms-multi-word-search-issue/263110)

<div class="topic-metadata">

**Author:** [@smshabab11](https://discuss.elastic.co/u/smshabab11)\
**Replies:** 0\
**Last updated:** [February 3, 2021, 11:09am UTC](https://discuss.elastic.co/t/synonyms-multi-word-search-issue/263110 "2021-02-03T11:09:47Z")

</div>

I have created an index with synonyms.txt file in which there is a word GDM and corresponding synonym is General Data Manager and the expectation is If I want to search "GDM" it should show results which has "GDM" or "Ge…

---

## [In ECK - Verify that a coordinating-only node is doing its job](https://discuss.elastic.co/t/in-eck-verify-that-a-coordinating-only-node-is-doing-its-job/261859)

<div class="topic-metadata">

**Author:** [@sbonami](https://discuss.elastic.co/u/sbonami)\
**Replies:** 6\
**Last updated:** [February 3, 2021, 11:04am UTC](https://discuss.elastic.co/t/in-eck-verify-that-a-coordinating-only-node-is-doing-its-job/261859 "2021-02-03T11:04:33Z")

</div>

Hi, I'm using Elastic Cloud on Kubernetes (version 1.1.2 according to the operator). I want to have a coordinating-only node in my cluster. For the config, I have set node.master, node.data, node.ingest, node.ml, node.tr…

---

## [Integrating Ingest Pipeline with the Indicies](https://discuss.elastic.co/t/integrating-ingest-pipeline-with-the-indicies/263106)

<div class="topic-metadata">

**Author:** [@shiv97](https://discuss.elastic.co/u/shiv97)\
**Replies:** 0\
**Last updated:** [February 3, 2021, 10:43am UTC](https://discuss.elastic.co/t/integrating-ingest-pipeline-with-the-indicies/263106 "2021-02-03T10:43:34Z")

</div>

Hi Everyone, I have created one ingest pipeline now I want to attach this pipeline with the index having the format "cwl-2021.02.02 " where indices from every date are created like "cwl-2021.02.03" and so on... So I tr…

---

## [Circuit\_breaking\_exception](https://discuss.elastic.co/t/circuit-breaking-exception/261503)

<div class="topic-metadata">

**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\
**Replies:** 12\
**Last updated:** [February 3, 2021, 10:37am UTC](https://discuss.elastic.co/t/circuit-breaking-exception/261503 "2021-02-03T10:37:24Z")

</div>

@Marta\_Bondyra Hello, I need some help { "error": { "root\_cause": \[ { "type": "circuit\_breaking\_exception", "reason": "\[parent\] Data too large, data for \[\<transport\_r…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1060)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1062)
