# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1071 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1072 --- ## [Remove aggregated sums that equal to 0 from visualization](https://discuss.elastic.co/t/remove-aggregated-sums-that-equal-to-0-from-visualization/262271)
**Author:** [@thedevelpr](https://discuss.elastic.co/u/thedevelpr)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 8:52pm UTC](https://discuss.elastic.co/t/remove-aggregated-sums-that-equal-to-0-from-visualization/262271 "2021-01-26T20:52:45Z")
\[Kibana 7.9.0v\] I've been trying to remove fields from a bar graph in which their sum is 0. Currently, I am doing a sum aggregation for products sold and displaying it on a bar graph. The sums are correct and the produ… --- ## [High RAM usage by data nodes (Kubernetes)](https://discuss.elastic.co/t/high-ram-usage-by-data-nodes-kubernetes/262008)
**Author:** [@itsron](https://discuss.elastic.co/u/itsron)\ **Replies:** 4\ **Last updated:** [January 26, 2021, 7:58pm UTC](https://discuss.elastic.co/t/high-ram-usage-by-data-nodes-kubernetes/262008 "2021-01-26T19:58:32Z")
We are running v7.10.1 on Kubernetes. We've 4 data nodes each with 4 cpus and 16gb RAM (8gb heap). Currently it has only metricbeat and filebeat writing data into it which is a total of ~1.5M docs/hour (~10GB/day,retaine… --- ## [Repo for zip/tar logstash plugins](https://discuss.elastic.co/t/repo-for-zip-tar-logstash-plugins/262166)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 3\ **Last updated:** [January 26, 2021, 6:16pm UTC](https://discuss.elastic.co/t/repo-for-zip-tar-logstash-plugins/262166 "2021-01-26T18:16:30Z")
Hello, I am looking for a link to a repo or some location that can provide me logstash plugin zip/tar files. My servers do not have internet connection/access. So I am looking to install logstash plugins offline. However… --- ## [Efficient way of querying multiple ElasticSearch Indexes at once | Tools for visualization other than kibana](https://discuss.elastic.co/t/efficient-way-of-querying-multiple-elasticsearch-indexes-at-once-tools-for-visualization-other-than-kibana/261874)
**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 5:30pm UTC](https://discuss.elastic.co/t/efficient-way-of-querying-multiple-elasticsearch-indexes-at-once-tools-for-visualization-other-than-kibana/261874 "2021-01-26T17:30:57Z")
Hello Team, We explored kibana, however it seems very limited to our need. Can you please suggest, what are others recommended tools for visualization by joining multiple indexes from ElasticSearch. And how we can que… --- ## [No error in logstash. But no data in kibana](https://discuss.elastic.co/t/no-error-in-logstash-but-no-data-in-kibana/262143)
**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\ **Replies:** 4\ **Last updated:** [January 26, 2021, 5:08pm UTC](https://discuss.elastic.co/t/no-error-in-logstash-but-no-data-in-kibana/262143 "2021-01-26T17:08:35Z")
I don't see any indices created in amazon ES. architecture filebeat-\> logstash-\> amazon ES. filebeat conf filebeat.inputs: - type: log paths: - /var/test.log fields: tags: test environment: uflek … --- ## [Input command not executing](https://discuss.elastic.co/t/input-command-not-executing/262137)
**Author:** [@Christophe\_Dumont](https://discuss.elastic.co/u/Christophe_Dumont)\ **Replies:** 3\ **Last updated:** [January 26, 2021, 4:48pm UTC](https://discuss.elastic.co/t/input-command-not-executing/262137 "2021-01-26T16:48:12Z")
Hello, I'm trying to run a command every 10 seconds but it's not working. Here's my conf file : input { exec { command =\> "/home/xxx/CICFlow/bin/cfm \> '/tmp/logstash.log'" interval =\> 10 } } --- ## [Building Elasticsearch source code stuck at 99%](https://discuss.elastic.co/t/building-elasticsearch-source-code-stuck-at-99/262242)
**Author:** [@Amr\_Rady](https://discuss.elastic.co/u/Amr_Rady)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 4:46pm UTC](https://discuss.elastic.co/t/building-elasticsearch-source-code-stuck-at-99/262242 "2021-01-26T16:46:32Z")
I am trying to build the source code but it stuck at 99% --- ## [How to filter out IP from auth.log](https://discuss.elastic.co/t/how-to-filter-out-ip-from-auth-log/262231)
**Author:** [@john8](https://discuss.elastic.co/u/john8)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 1:23pm UTC](https://discuss.elastic.co/t/how-to-filter-out-ip-from-auth-log/262231 "2021-01-26T13:23:56Z")
hello newbie here I am running ELK on VMWare16 I need a little bit of help I have enabled the filebeat module called system but I am unable to get the clientip from there it falls under the message category Filebeat.y… --- ## [Another Kibana instance appears to be migrating the index](https://discuss.elastic.co/t/another-kibana-instance-appears-to-be-migrating-the-index/261145)
**Author:** [@Jambo80](https://discuss.elastic.co/u/Jambo80)\ **Replies:** 8\ **Last updated:** [January 26, 2021, 3:27pm UTC](https://discuss.elastic.co/t/another-kibana-instance-appears-to-be-migrating-the-index/261145 "2021-01-26T15:27:06Z")
Hi I am relatively new to ELK and recently upgraded from 6.X to 6.8.13. When I start Kibana I now see the following error: "tags":\["warning","migrations"\],"pid":15615,"message":"Another Kibana instance appears to be mi… --- ## [Loading Incremental data into Elastic Search](https://discuss.elastic.co/t/loading-incremental-data-into-elastic-search/262180)
**Author:** [@gaurav1](https://discuss.elastic.co/u/gaurav1)\ **Replies:** 3\ **Last updated:** [January 26, 2021, 3:12pm UTC](https://discuss.elastic.co/t/loading-incremental-data-into-elastic-search/262180 "2021-01-26T15:12:34Z")
I am getting Json response from JIRA using Api containing issue details and loading those as logs in Elasticsearch. This activity we are doing continuously. So every time we need to provide an incremental data. In data w… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/262091)
**Author:** [@jayanth\_m](https://discuss.elastic.co/u/jayanth_m)\ **Replies:** 8\ **Last updated:** [January 26, 2021, 3:09pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/262091 "2021-01-26T15:09:13Z")
Im getting Kibana server is not ready yet error when Opening Kibana dashboard After Looking into the logs, I observed below error: {"type":"log","@timestamp":"2021-01-25T11:11:14Z","tags":\["error","elasticsearch","data… --- ## [Kibana TSVB data is not displayed on legend](https://discuss.elastic.co/t/kibana-tsvb-data-is-not-displayed-on-legend/261909)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 3\ **Last updated:** [January 26, 2021, 2:52pm UTC](https://discuss.elastic.co/t/kibana-tsvb-data-is-not-displayed-on-legend/261909 "2021-01-26T14:52:19Z")
Hi guys , lately i installed the ELK 7.10.0 and created 2 time series graphs in TSVB , so the problem is that when i put the cursor on a point on the first graph it show me the values on the legend of that graph but no… --- ## [KIbana "Kibana server is not ready yet" -- routing disabled during upgrade](https://discuss.elastic.co/t/kibana-kibana-server-is-not-ready-yet-routing-disabled-during-upgrade/257245)
**Author:** [@OntheHighSeas](https://discuss.elastic.co/u/OntheHighSeas)\ **Replies:** 6\ **Last updated:** [January 26, 2021, 2:50pm UTC](https://discuss.elastic.co/t/kibana-kibana-server-is-not-ready-yet-routing-disabled-during-upgrade/257245 "2021-01-26T14:50:53Z")
Hi. So I think I made the mistake of upgrading to v7.10 Kibana with my cluster routing disabled, and as a result Kibana is stuck migrating. It's constantly producing log messages along the line of; \["info", "savedobj… --- ## [Upgrading Kibana to 7.10.2 hangs while migrating](https://discuss.elastic.co/t/upgrading-kibana-to-7-10-2-hangs-while-migrating/262197)
**Author:** [@IslandMan](https://discuss.elastic.co/u/IslandMan)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 1:53pm UTC](https://discuss.elastic.co/t/upgrading-kibana-to-7-10-2-hangs-while-migrating/262197 "2021-01-26T13:53:31Z")
Opening a new thread as suggested by @rudolf. So I've restored .kibana\_\* from a snapshot and started a 7.10.2 kibana server that in turn starts the migration. These are the logs it producses: Jan 26 08:03:50 ip-10-164… --- ## [Kibana Visualization: How to display long legend string?](https://discuss.elastic.co/t/kibana-visualization-how-to-display-long-legend-string/262230)
**Author:** [@AmS](https://discuss.elastic.co/u/AmS)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 1:23pm UTC](https://discuss.elastic.co/t/kibana-visualization-how-to-display-long-legend-string/262230 "2021-01-26T13:23:04Z")
Hello , I am using Kibana 7.10. I would like to display a long string in the legend in my visualization . I have always a truncated part of the string like "Long string to..." rather then "long string to display" Are… --- ## [Logstah tcp input plugin](https://discuss.elastic.co/t/logstah-tcp-input-plugin/262116)
**Author:** [@gongon](https://discuss.elastic.co/u/gongon)\ **Replies:** 3\ **Last updated:** [January 26, 2021, 1:18pm UTC](https://discuss.elastic.co/t/logstah-tcp-input-plugin/262116 "2021-01-26T13:18:20Z")
Hello, When I use the tcp input plugin in mode server, it works. But it does not work in mode client.It can connect to the server,but does not receive data.It's about a webserver : I try to extract data from a database … --- ## [Logstash pipeline service failed with X-Pack](https://discuss.elastic.co/t/logstash-pipeline-service-failed-with-x-pack/262119)
**Author:** [@esijati](https://discuss.elastic.co/u/esijati)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 12:58pm UTC](https://discuss.elastic.co/t/logstash-pipeline-service-failed-with-x-pack/262119 "2021-01-26T12:58:29Z")
Hi, I have created a logstash service (tarball) and enabled the x-pack management. But getting the below error while running the service. \[ERROR\]\[logstash.config.sourceloader\] Could not fetch all the sources {:exceptio… --- ## [S3 output event per file](https://discuss.elastic.co/t/s3-output-event-per-file/262037)
**Author:** [@Sunflower](https://discuss.elastic.co/u/Sunflower)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 12:23pm UTC](https://discuss.elastic.co/t/s3-output-event-per-file/262037 "2021-01-26T12:23:56Z")
Hi, I'm using the S3 output plugin and I noticed that I'm receiving files that include multiple events per file. How can I create a file for each event? I saw the option to limit the file size but I'm not sure it is g… --- ## [ES 6.8.0 on Ubuntu 16.04 starts properly but Systemd times out](https://discuss.elastic.co/t/es-6-8-0-on-ubuntu-16-04-starts-properly-but-systemd-times-out/262155)
**Author:** [@jtbis](https://discuss.elastic.co/u/jtbis)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 12:15pm UTC](https://discuss.elastic.co/t/es-6-8-0-on-ubuntu-16-04-starts-properly-but-systemd-times-out/262155 "2021-01-26T12:15:30Z")
Hello, I have a server where ES is starting properly, but the service is always showing activating. With TimeoutStartSec=infinity in the service file, everything functions as normal except for the service always stayin… --- ## [Can I use "script" to truncate a field so it's 950 characters or less in a watcher?](https://discuss.elastic.co/t/can-i-use-script-to-truncate-a-field-so-its-950-characters-or-less-in-a-watcher/261277)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 12:06pm UTC](https://discuss.elastic.co/t/can-i-use-script-to-truncate-a-field-so-its-950-characters-or-less-in-a-watcher/261277 "2021-01-26T12:06:38Z")
So, we use PagerDuty as an action for our alerts. Unfortunately, with this action you can only set description so we must try to plug as much information into the field before we fire off the alert. Sometimes this means… --- ## [Create a view mysql with logstash](https://discuss.elastic.co/t/create-a-view-mysql-with-logstash/262223)
**Author:** [@MatteoM](https://discuss.elastic.co/u/MatteoM)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 11:01am UTC](https://discuss.elastic.co/t/create-a-view-mysql-with-logstash/262223 "2021-01-26T11:01:02Z")
Hi there!, I was wondering if exists a way to create a view mysql through by the statement in the pipeline input jdbc. I need to create some views because these are involved in a query that I need it to save in a index… --- ## [Timezone with negative (minus) value return more bucket before gte range](https://discuss.elastic.co/t/timezone-with-negative-minus-value-return-more-bucket-before-gte-range/262133)
**Author:** [@anas-hossam](https://discuss.elastic.co/u/anas-hossam)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 4:13pm UTC](https://discuss.elastic.co/t/timezone-with-negative-minus-value-return-more-bucket-before-gte-range/262133 "2021-01-25T16:13:00Z")
i am trying to get docs matching query from elastic v1.5 { "range": { "create\_time": { "gte": "2020-07-20T00:00:00", "lte": "2020-07-30T23:59:59", "time\_zone": "-2:00" … --- ## [Gestion des user et des roles](https://discuss.elastic.co/t/gestion-des-user-et-des-roles/262208)
**Author:** [@Corben\_Dallas](https://discuss.elastic.co/u/Corben_Dallas)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 9:55am UTC](https://discuss.elastic.co/t/gestion-des-user-et-des-roles/262208 "2021-01-26T09:55:51Z")
Bonjour, je suis en license basic, j'utilise le mécanisme des security api pour gérer les utilisateur et leur role avec les privilèges, ca marche très bien Mais il y a un truc que je n'arrive pas à tester Dans la déf… --- ## [Can I define the color of each value in Kibana visualization by assigning it specific RGB?](https://discuss.elastic.co/t/can-i-define-the-color-of-each-value-in-kibana-visualization-by-assigning-it-specific-rgb/261401)
**Author:** [@Shalhevet](https://discuss.elastic.co/u/Shalhevet)\ **Replies:** 4\ **Last updated:** [January 26, 2021, 9:44am UTC](https://discuss.elastic.co/t/can-i-define-the-color-of-each-value-in-kibana-visualization-by-assigning-it-specific-rgb/261401 "2021-01-26T09:44:34Z")
hi, I have a data set which includes x and y position of each measurement, and its corresponding RGB. is there a way to Visualize it with Kibana? This is actually a heat map where each point has x and y values, but th… --- ## [Can I filter an array in elastic?](https://discuss.elastic.co/t/can-i-filter-an-array-in-elastic/262198)
**Author:** [@ShreyaBhat](https://discuss.elastic.co/u/ShreyaBhat)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 8:33am UTC](https://discuss.elastic.co/t/can-i-filter-an-array-in-elastic/262198 "2021-01-26T08:33:41Z")
is there a way to filter an array in elastic ? I have inserted the following data into elastic "\_source":{ "FileName": "fileName.log" "logData": \[ { "LineNumber": 1, … --- ## [Sort by every element of array](https://discuss.elastic.co/t/sort-by-every-element-of-array/262201)
**Author:** [@Dmitrii](https://discuss.elastic.co/u/Dmitrii)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 8:02am UTC](https://discuss.elastic.co/t/sort-by-every-element-of-array/262201 "2021-01-26T08:02:50Z")
Hello, I have some problems with sorting by element of array. If I have for example 2 documents like: { "\_id" : "1", "\_source" : { "users" : \[{"name" : "John"},{"name" : "Paul"}\] } } { "\_id" : "2", "\_so… --- ## [Kibana service fails regularly and following errors are displayed at startup](https://discuss.elastic.co/t/kibana-service-fails-regularly-and-following-errors-are-displayed-at-startup/262172)
**Author:** [@Daniel\_Haverporth](https://discuss.elastic.co/u/Daniel_Haverporth)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 5:28am UTC](https://discuss.elastic.co/t/kibana-service-fails-regularly-and-following-errors-are-displayed-at-startup/262172 "2021-01-26T05:28:50Z")
Hello: The Kibana service fails regularly and when I go to restart Kibana the following errors are displayed in the log: log \[21:15:09.874\] \[error\]\[data\]\[elasticsearch\] \[version\_conflict\_engine\_exception\]: \[task:Len… --- ## [Kibana field Aliases](https://discuss.elastic.co/t/kibana-field-aliases/261588)
**Author:** [@griffer98](https://discuss.elastic.co/u/griffer98)\ **Replies:** 3\ **Last updated:** [January 26, 2021, 5:10am UTC](https://discuss.elastic.co/t/kibana-field-aliases/261588 "2021-01-26T05:10:36Z")
I have two indices that have a field with the same name. I want to join both into one data table. I know I can change the display name in a table but I wont know which index each one is coming from to name appropriately.… --- ## [If condition Statement](https://discuss.elastic.co/t/if-condition-statement/262167)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 2:53am UTC](https://discuss.elastic.co/t/if-condition-statement/262167 "2021-01-26T02:53:35Z")
Hi All, Could you please tell me what is wrong with the following IF condition if \[ DOCUMENT\_MODEL \] == "10000" { mutate { replace =\> { "DOCUMENT\_MODEL" =\> "INVOICE" } } } Even though the DOCUM… --- ## [How to import Nested JSON?](https://discuss.elastic.co/t/how-to-import-nested-json/262183)
**Author:** [@hourtest](https://discuss.elastic.co/u/hourtest)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 1:33am UTC](https://discuss.elastic.co/t/how-to-import-nested-json/262183 "2021-01-26T01:33:43Z")
Nested JSON like this { "boolean\_key": "--- true\\n", "empty\_string\_translation": "", "key\_with\_description": "Check it out! This key has a description! (At least in some formats)", "key\_with\_line-break": "This … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1070) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1072)