# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1069 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1070 --- ## ['Lock' in Persistent Volumes on Openshift when deploys blue-green ELK Stack](https://discuss.elastic.co/t/lock-in-persistent-volumes-on-openshift-when-deploys-blue-green-elk-stack/262377)
**Author:** [@jonhmb](https://discuss.elastic.co/u/jonhmb)\ **Replies:** 4\ **Last updated:** [January 28, 2021, 1:17pm UTC](https://discuss.elastic.co/t/lock-in-persistent-volumes-on-openshift-when-deploys-blue-green-elk-stack/262377 "2021-01-28T13:17:57Z")
I have an ELK Stack running in a Openshift POD as 'Blue' using Persistent Volumes to storage data. When I try to deploy a second ELK Stack in a second POD using the same Persistent Volumes, i get an error because ELK Vo… --- ## [Return multiple fields when performing aggregations](https://discuss.elastic.co/t/return-multiple-fields-when-performing-aggregations/262502)
**Author:** [@ArifAlili](https://discuss.elastic.co/u/ArifAlili)\ **Replies:** 0\ **Last updated:** [January 28, 2021, 1:13pm UTC](https://discuss.elastic.co/t/return-multiple-fields-when-performing-aggregations/262502 "2021-01-28T13:13:57Z")
Hi all, Is there a way to return other fields besides "key" and "doc\_count" when performing aggregations? I don't want to do aggregation on multiple fields, I just want multiple fields to be returned in Aggregation res… --- ## [ImportError: cannot import name ‘decodestring’ from ‘base64’ (/usr/lib64/python3.9/base64.py)](https://discuss.elastic.co/t/importerror-cannot-import-name-decodestring-from-base64-usr-lib64-python3-9-base64-py/262248)
**Author:** [@Green\_Max](https://discuss.elastic.co/u/Green_Max)\ **Replies:** 4\ **Last updated:** [January 27, 2021, 12:53pm UTC](https://discuss.elastic.co/t/importerror-cannot-import-name-decodestring-from-base64-usr-lib64-python3-9-base64-py/262248 "2021-01-27T12:53:49Z")
can you help me to fix bug that says Traceback (most recent call last): File "/home/fofive/PycharmProjects/pythonProject/main.py", line 1, in \ from elasticsearch import Elasticsearch, RequestsH… --- ## [Sorting @timestamp while exporting from elasticsearch and writing into csv](https://discuss.elastic.co/t/sorting-timestamp-while-exporting-from-elasticsearch-and-writing-into-csv/262496)
**Author:** [@ritusingh](https://discuss.elastic.co/u/ritusingh)\ **Replies:** 0\ **Last updated:** [January 28, 2021, 12:35pm UTC](https://discuss.elastic.co/t/sorting-timestamp-while-exporting-from-elasticsearch-and-writing-into-csv/262496 "2021-01-28T12:35:04Z")
Hi, Problem Statement: To export the logs from elasticsearch and write into csv in timewise order(either increasing or decreasing) Solution: I am using logstash , configuration is given below, input { elasticsearch {… --- ## [Percentage in scripted fields](https://discuss.elastic.co/t/percentage-in-scripted-fields/262489)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 12:38pm UTC](https://discuss.elastic.co/t/percentage-in-scripted-fields/262489 "2021-01-28T12:38:53Z")
Hi I have divided two fields using below script return doc\['StatusOpen'\].value/doc\['StatusSent'\].value for this result should be 2/31 = 0.06451 = 6.451% but it's giving 0 % As I have format as percentage and Numer… --- ## [Vega scatterplot with specific color to each value](https://discuss.elastic.co/t/vega-scatterplot-with-specific-color-to-each-value/262268)
**Author:** [@Shalhevet](https://discuss.elastic.co/u/Shalhevet)\ **Replies:** 4\ **Last updated:** [January 28, 2021, 10:59am UTC](https://discuss.elastic.co/t/vega-scatterplot-with-specific-color-to-each-value/262268 "2021-01-28T10:59:06Z")
I have an index in which each document has ‘X Location’ field, ‘Y Location’ field and ‘rgb’ field. The ‘rgb’ field contains rgb values of string format rgb(x,y,z). I would like to visualize the data, and I tried to m… --- ## [Kibana Visualization for Sensor Outage](https://discuss.elastic.co/t/kibana-visualization-for-sensor-outage/261898)
**Author:** [@kpraveeng](https://discuss.elastic.co/u/kpraveeng)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 10:50am UTC](https://discuss.elastic.co/t/kibana-visualization-for-sensor-outage/261898 "2021-01-28T10:50:32Z")
I want to create Kibana Visualization for Sensor Outage. Sensor Outage means that data for a given sensor is not received for a period of 10 min. So the visualization should show the count of sensors that did not send da… --- ## [Data table Visualisation not showing correct result for numeric data](https://discuss.elastic.co/t/data-table-visualisation-not-showing-correct-result-for-numeric-data/261947)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 6\ **Last updated:** [January 28, 2021, 9:47am UTC](https://discuss.elastic.co/t/data-table-visualisation-not-showing-correct-result-for-numeric-data/261947 "2021-01-28T09:47:49Z")
I am working with Cloudflare analytics data and trying to create a data table visualization to show the sum of the bandwidth in descending order for fields bandwidth.ssl.encrypted, bandwidth.ssl.unencrypted, bandwidth.ss… --- ## [405 error when calling /\_cluster/health?level=indices from a watcher](https://discuss.elastic.co/t/405-error-when-calling-cluster-health-level-indices-from-a-watcher/262457)
**Author:** [@mkadiri](https://discuss.elastic.co/u/mkadiri)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 8:30am UTC](https://discuss.elastic.co/t/405-error-when-calling-cluster-health-level-indices-from-a-watcher/262457 "2021-01-28T08:30:19Z")
I'm trying to setup a watcher to display indices health using the endpoint mentioned but keep getting a 405 error. This error goes away when I just use the following /\_cluster/health dropping the params ?level=indices, … --- ## [Unable to login](https://discuss.elastic.co/t/unable-to-login/257605)
**Author:** [@georgina](https://discuss.elastic.co/u/georgina)\ **Replies:** 11\ **Last updated:** [January 28, 2021, 7:23am UTC](https://discuss.elastic.co/t/unable-to-login/257605 "2021-01-28T07:23:57Z")
Hi, I've just installed Elasticsearch, Kibana and Enterprise Search via docker on desktop. It is a three node elastic cluster with Kibana and enterprise search https://www.elastic.co/guide/en/elastic-stack-get-started… --- ## [Trying to pass mongodb id as elasticsearch id](https://discuss.elastic.co/t/trying-to-pass-mongodb-id-as-elasticsearch-id/262449)
**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\ **Replies:** 1\ **Last updated:** [January 28, 2021, 6:40am UTC](https://discuss.elastic.co/t/trying-to-pass-mongodb-id-as-elasticsearch-id/262449 "2021-01-28T06:40:37Z")
Logstash 7.8 We have a case where we collect logs from a mobile app using parse-sdk. The data is sent to a MongoDB replicaset. Logstash is configured using the mongoschema jdbc driver to pull the data from Mongo and p… --- ## [Search based on aggregation result](https://discuss.elastic.co/t/search-based-on-aggregation-result/262431)
**Author:** [@Julian\_Ganzabal](https://discuss.elastic.co/u/Julian_Ganzabal)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 1:37am UTC](https://discuss.elastic.co/t/search-based-on-aggregation-result/262431 "2021-01-28T01:37:48Z")
I am actually doing a query with an aggregation that returns a list from which I need to re-search. So, I get the aggregated data and then do a search on this aggregated data. That means 2 requests to Elasticsearch Is … --- ## [All data nodes oom down during heavily indexing periods](https://discuss.elastic.co/t/all-data-nodes-oom-down-during-heavily-indexing-periods/262376)
**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 3:19am UTC](https://discuss.elastic.co/t/all-data-nodes-oom-down-during-heavily-indexing-periods/262376 "2021-01-28T03:19:34Z")
ES version: 7.5.2 JDK version: bundled openjdk 13 GC settings: -XX:+UseG1GC -XX:MaxGCPauseMillis=20 -XX:+UnlockExperimentalVMOptions -XX:G1NewSizePercent=2 We do heavily indexing(enable sniffing and all data node… --- ## [Writing API update for setting number of replicas to 0](https://discuss.elastic.co/t/writing-api-update-for-setting-number-of-replicas-to-0/261595)
**Author:** [@txmrlevine](https://discuss.elastic.co/u/txmrlevine)\ **Replies:** 5\ **Last updated:** [January 27, 2021, 11:13pm UTC](https://discuss.elastic.co/t/writing-api-update-for-setting-number-of-replicas-to-0/261595 "2021-01-27T23:13:42Z")
We are trying to eliminate replicas in our non-prod environment to save space and we do not need the replicas. we know this is counter to the fault tolerance but it is something we must do. I found this on the document… --- ## [Unable to access my Elastic account - says terminated](https://discuss.elastic.co/t/unable-to-access-my-elastic-account-says-terminated/262422)
**Author:** [@Stud21](https://discuss.elastic.co/u/Stud21)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 10:59pm UTC](https://discuss.elastic.co/t/unable-to-access-my-elastic-account-says-terminated/262422 "2021-01-27T22:59:12Z")
Hi, I have been enrolled by Leidos for the Elastic training/certification course for a year. However, when I access https://cloud.elastic.co/home using my patds12@gmail.com account, the status shows as Terminated. I am … --- ## [Nested Document Search Query (searching across filtered nested documents)](https://discuss.elastic.co/t/nested-document-search-query-searching-across-filtered-nested-documents/262420)
**Author:** [@suy1993](https://discuss.elastic.co/u/suy1993)\ **Replies:** 0\ **Last updated:** [January 27, 2021, 9:38pm UTC](https://discuss.elastic.co/t/nested-document-search-query-searching-across-filtered-nested-documents/262420 "2021-01-27T21:38:43Z")
I have nested document like {id:123, name:"abc", attendance\[{class: "physics", Joined: "2021-01- 21", "grade": "pass"} , {class: "chemistry", Joined: "2021-01- 13", "grade": "NA"}, {class: "maths", Joined: "2021-01- … --- ## [Python read all index pattern](https://discuss.elastic.co/t/python-read-all-index-pattern/262293)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 4\ **Last updated:** [January 27, 2021, 9:30pm UTC](https://discuss.elastic.co/t/python-read-all-index-pattern/262293 "2021-01-27T21:30:02Z")
is there a python call to read all index patterns I can read all indexes but I want to read patterns name for example I have index-1, index-2, index-3 and index pattern is index-\* and I use that for all visulization. … --- ## [How to distribute search requests by date](https://discuss.elastic.co/t/how-to-distribute-search-requests-by-date/262405)
**Author:** [@ozgun](https://discuss.elastic.co/u/ozgun)\ **Replies:** 2\ **Last updated:** [January 27, 2021, 8:54pm UTC](https://discuss.elastic.co/t/how-to-distribute-search-requests-by-date/262405 "2021-01-27T20:54:27Z")
Hello, I have daily indexes in the format of "payments-2021-01-27". When I search documents I send a time based query and I want to distribute search requests to the matched indexes by date. For example when I search l… --- ## [Exporting/Importing Saved Objects in Kibana 7.1](https://discuss.elastic.co/t/exporting-importing-saved-objects-in-kibana-7-1/262410)
**Author:** [@Colby\_Dozier](https://discuss.elastic.co/u/Colby_Dozier)\ **Replies:** 3\ **Last updated:** [January 27, 2021, 8:15pm UTC](https://discuss.elastic.co/t/exporting-importing-saved-objects-in-kibana-7-1/262410 "2021-01-27T20:15:59Z")
We are stuck with 7.1 being the newest version of Kibana we can use in our environment. I'm attempting to import multiple saved objects that was exported by hand in Kibana into a JSON file. This would be done during stan… --- ## [Composite aggs with an after key in a large index take forever](https://discuss.elastic.co/t/composite-aggs-with-an-after-key-in-a-large-index-take-forever/262412)
**Author:** [@benlin](https://discuss.elastic.co/u/benlin)\ **Replies:** 0\ **Last updated:** [January 27, 2021, 7:48pm UTC](https://discuss.elastic.co/t/composite-aggs-with-an-after-key-in-a-large-index-take-forever/262412 "2021-01-27T19:48:34Z")
I'm running into an issue where composite aggs with an after key seem to run forever on large indices (several 100m docs) when the same agg without an after key runs just fine. So this runs in seconds: { "size": 0, … --- ## [\_jsonparsefailure on reading json](https://discuss.elastic.co/t/jsonparsefailure-on-reading-json/262335)
**Author:** [@logstash123](https://discuss.elastic.co/u/logstash123)\ **Replies:** 2\ **Last updated:** [January 27, 2021, 7:03pm UTC](https://discuss.elastic.co/t/jsonparsefailure-on-reading-json/262335 "2021-01-27T19:03:45Z")
Dear community, I need to parse a JSON of the following format: { "commitId": "xxxxxxx", "author": { "name": "", "email": "", "date": "" }, "committer": { "name": "", "email": "", "date"… --- ## [How to configure ELK to receive logs from multiple servers](https://discuss.elastic.co/t/how-to-configure-elk-to-receive-logs-from-multiple-servers/262383)
**Author:** [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\ **Replies:** 3\ **Last updated:** [January 27, 2021, 7:01pm UTC](https://discuss.elastic.co/t/how-to-configure-elk-to-receive-logs-from-multiple-servers/262383 "2021-01-27T19:01:13Z")
I have multiple servers in which filebeat is installed and sending their logs to ELK. In kibana multiple server's logs are showing on single logs page which is every complicated to identify which log is coming from whic… --- ## [Throttle filter is not throttling correctly](https://discuss.elastic.co/t/throttle-filter-is-not-throttling-correctly/262402)
**Author:** [@holobolo0815](https://discuss.elastic.co/u/holobolo0815)\ **Replies:** 0\ **Last updated:** [January 27, 2021, 5:32pm UTC](https://discuss.elastic.co/t/throttle-filter-is-not-throttling-correctly/262402 "2021-01-27T17:32:07Z")
With reference to https://discuss.elastic.co/t/throttle-filter-notify-on-throttle/261861 When doing this: if \[srcip\] and \[dstip\] and \[dstport\] { throttle { # decorates event if OUTSIDE bounds key =\> "%{%filter\_ma… --- ## [Date Match is setting incorrect timestamp / not actually setting timestamp](https://discuss.elastic.co/t/date-match-is-setting-incorrect-timestamp-not-actually-setting-timestamp/262363)
**Author:** [@beirtipol](https://discuss.elastic.co/u/beirtipol)\ **Replies:** 5\ **Last updated:** [January 27, 2021, 5:57pm UTC](https://discuss.elastic.co/t/date-match-is-setting-incorrect-timestamp-not-actually-setting-timestamp/262363 "2021-01-27T17:57:24Z")
I have the following filter in my logstash pipeline: date { match =\> \[ "\[fields\]\[serverrequest\]\[starttime\]", "UNIX\_MS" \] tag\_on\_failure =\> \[ "serverrequest\_logstyle\_dateparsefailure" \] } However, th… --- ## [Issue with HTTP Poller : ConfigurationError: Invalid URL](https://discuss.elastic.co/t/issue-with-http-poller-configurationerror-invalid-url/262328)
**Author:** [@AmarKolhapuri](https://discuss.elastic.co/u/AmarKolhapuri)\ **Replies:** 2\ **Last updated:** [January 27, 2021, 5:51pm UTC](https://discuss.elastic.co/t/issue-with-http-poller-configurationerror-invalid-url/262328 "2021-01-27T17:51:52Z")
I am facing error with invalid URL for below http\_poller code. input { http\_poller{ urls =\> { test2 =\> { method =\> get user =\> "weblogic" password =\> "welcome1" urls =\> "http://weblogic:7001/management/wls/lates… --- ## [\[ Error parsing CSV \] : :exception=\>#\](https://discuss.elastic.co/t/error-parsing-csv-exception-csv-illegal-quoting-in-line-1/262370)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 2\ **Last updated:** [January 27, 2021, 4:55pm UTC](https://discuss.elastic.co/t/error-parsing-csv-exception-csv-illegal-quoting-in-line-1/262370 "2021-01-27T16:55:12Z")
Hello, I am trying to parse some csv logs using logstash and I am getting this error: \[WARN \] 2021-01-27 14:05:31.217 \[\[main\]\>worker2\] csv - Error parsing csv {:field=\>"message", :source=\>"\\"2020-12-24 00:01:23\\", \\"29… --- ## [Grok pattern to extract the fields from the log file](https://discuss.elastic.co/t/grok-pattern-to-extract-the-fields-from-the-log-file/262326)
**Author:** [@shiv97](https://discuss.elastic.co/u/shiv97)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 4:54pm UTC](https://discuss.elastic.co/t/grok-pattern-to-extract-the-fields-from-the-log-file/262326 "2021-01-27T16:54:43Z")
Hi Everyone, I am having one log file and I need to parse the message field into multiple subfields for that I need grok parser please look at the log file below:- message:{"level":"info","ts":1611311978.7658348,"calle… --- ## [Array values into single field](https://discuss.elastic.co/t/array-values-into-single-field/262348)
**Author:** [@Stevek](https://discuss.elastic.co/u/Stevek)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 4:50pm UTC](https://discuss.elastic.co/t/array-values-into-single-field/262348 "2021-01-27T16:50:36Z")
Hello, I struggle to extract IPs from JSON, I need to extract all IPs from array/s(regardless of count) into one field. Below the part of JSON I want to extract data from: "source": { "explicit": { … --- ## [Logstash writer permissions](https://discuss.elastic.co/t/logstash-writer-permissions/262397)
**Author:** [@iccMe](https://discuss.elastic.co/u/iccMe)\ **Replies:** 0\ **Last updated:** [January 27, 2021, 4:49pm UTC](https://discuss.elastic.co/t/logstash-writer-permissions/262397 "2021-01-27T16:49:23Z")
Hi, Looking for advice. I have created a new logstash writer user and created the appropriate role with permissions as per: https://www.elastic.co/guide/en/logstash/7.3/ls-security.html for a managed ILM index. The onl… --- ## [@timestamp not match with the log date](https://discuss.elastic.co/t/timestamp-not-match-with-the-log-date/262272)
**Author:** [@Riyanka](https://discuss.elastic.co/u/Riyanka)\ **Replies:** 3\ **Last updated:** [January 27, 2021, 4:46pm UTC](https://discuss.elastic.co/t/timestamp-not-match-with-the-log-date/262272 "2021-01-27T16:46:34Z")
The timestamp does not match with the actual log time in kibana @timestamp January 26th 2021, 23:38:10.426 message \[2021-01-22 09:53:09\] php.CRITICAL: Uncaught Error: Call to a member function getName() on null… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1068) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1070)