# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1077

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1078

---

## [Remove/hide comma separator between multiple values in a cell of Enhanced Data Table Visualization](https://discuss.elastic.co/t/remove-hide-comma-separator-between-multiple-values-in-a-cell-of-enhanced-data-table-visualization/261561)

<div class="topic-metadata">

**Author:** [@preeti1211](https://discuss.elastic.co/u/preeti1211)\
**Replies:** 2\
**Last updated:** [January 20, 2021, 7:55pm UTC](https://discuss.elastic.co/t/remove-hide-comma-separator-between-multiple-values-in-a-cell-of-enhanced-data-table-visualization/261561 "2021-01-20T19:55:18Z")

</div>

Hi Team, i have one usecase which i am able to achieve via Enhanced Data Table Visualization in Kibana. But since we are having multiple values in a single cell, they are coming as comma separated by default. Is there…

---

## [Unable to delete snapshot - no space left on device - Solved?](https://discuss.elastic.co/t/unable-to-delete-snapshot-no-space-left-on-device-solved/261675)

<div class="topic-metadata">

**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\
**Replies:** 4\
**Last updated:** [January 20, 2021, 7:50pm UTC](https://discuss.elastic.co/t/unable-to-delete-snapshot-no-space-left-on-device-solved/261675 "2021-01-20T19:50:14Z")

</div>

Hi all, Using 7.10.2 Basic licence After let my snapshot file system run out of space (100% full), I face the error were no more daily snapshots could run. This file system has nothing but snapshots, so I couldn't del…

---

## [Calculate the percentage based on two calculations - one for future data and another for past data and finally create a bar chart for every team](https://discuss.elastic.co/t/calculate-the-percentage-based-on-two-calculations-one-for-future-data-and-another-for-past-data-and-finally-create-a-bar-chart-for-every-team/261429)

<div class="topic-metadata">

**Author:** [@preeti1211](https://discuss.elastic.co/u/preeti1211)\
**Replies:** 1\
**Last updated:** [January 20, 2021, 7:18pm UTC](https://discuss.elastic.co/t/calculate-the-percentage-based-on-two-calculations-one-for-future-data-and-another-for-past-data-and-finally-create-a-bar-chart-for-every-team/261429 "2021-01-20T19:18:03Z")

</div>

Calculation - 95/120 (First value being the number of PBIs approved for future 3 sprints and second value being the number of PBIs completed in the past 3 sprints). If the divided value is =\<33% the bar chart should be …

---

## [\[Logstash\] Can't update document for status (entity-centric)](https://discuss.elastic.co/t/logstash-cant-update-document-for-status-entity-centric/261692)

<div class="topic-metadata">

**Author:** [@Joao\_Palma](https://discuss.elastic.co/u/Joao_Palma)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 7:17pm UTC](https://discuss.elastic.co/t/logstash-cant-update-document-for-status-entity-centric/261692 "2021-01-20T19:17:26Z")

</div>

Hello, I have this logs: {"process": "123", "status:red", "@timestamp":"2020-12-31T16:14:13.886+0000" } {"process": "122", "status:red", "@timestamp":"2020-12-31T16:14:14.886+0000" } {"process": "123", "status:green", …

---

## [Restrict the kibana user for one machine only](https://discuss.elastic.co/t/restrict-the-kibana-user-for-one-machine-only/261568)

<div class="topic-metadata">

**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\
**Replies:** 1\
**Last updated:** [January 20, 2021, 6:48pm UTC](https://discuss.elastic.co/t/restrict-the-kibana-user-for-one-machine-only/261568 "2021-01-20T18:48:23Z")

</div>

HI , My basic requirement here is to restrict any Kibana user for one machine only ,so that same user can not login from different machine at the same time. is there any setting needs to modify in kibana.yml file or an…

---

## [I need guy who can install and configure elasticsearch](https://discuss.elastic.co/t/i-need-guy-who-can-install-and-configure-elasticsearch/261358)

<div class="topic-metadata">

**Author:** [@avagyanlevon](https://discuss.elastic.co/u/avagyanlevon)\
**Replies:** 22\
**Last updated:** [January 20, 2021, 6:44pm UTC](https://discuss.elastic.co/t/i-need-guy-who-can-install-and-configure-elasticsearch/261358 "2021-01-20T18:44:31Z")

</div>

I need guy who can install and configure elasticsearch. I have problem with elasticsearch with my website, it was stop works after restarting server, now I need expert who can install and configuration it. Sorry for my E…

---

## [Security when using Selenium RemoteWebdriver with Kibana](https://discuss.elastic.co/t/security-when-using-selenium-remotewebdriver-with-kibana/260418)

<div class="topic-metadata">

**Author:** [@NicklausKew](https://discuss.elastic.co/u/NicklausKew)\
**Replies:** 3\
**Last updated:** [January 20, 2021, 3:29pm UTC](https://discuss.elastic.co/t/security-when-using-selenium-remotewebdriver-with-kibana/260418 "2021-01-20T15:29:38Z")

</div>

Morning all, I am having some issues with how selenium is interacting with Kibana. For the body of work completed I was running on version 7.6.1 of Kibana with all of my automated tests passing on both the Selenium Chro…

---

## [Question about doing a rolling upgrade from 6.8.6 to 7.9.3](https://discuss.elastic.co/t/question-about-doing-a-rolling-upgrade-from-6-8-6-to-7-9-3/261659)

<div class="topic-metadata">

**Author:** [@johnbonanchovy](https://discuss.elastic.co/u/johnbonanchovy)\
**Replies:** 4\
**Last updated:** [January 20, 2021, 3:24pm UTC](https://discuss.elastic.co/t/question-about-doing-a-rolling-upgrade-from-6-8-6-to-7-9-3/261659 "2021-01-20T15:24:22Z")

</div>

Hi, We are preparing to do a rolling upgrade on a fairly large cluster. As part of that, we have done the rolling upgrade on a much smaller development cluster. We left it half upgraded to see how the services will beh…

---

## [Spring Data Elastic - FIxing Client Version issue](https://discuss.elastic.co/t/spring-data-elastic-fixing-client-version-issue/261524)

<div class="topic-metadata">

**Author:** [@hcaupert](https://discuss.elastic.co/u/hcaupert)\
**Replies:** 3\
**Last updated:** [January 20, 2021, 2:44pm UTC](https://discuss.elastic.co/t/spring-data-elastic-fixing-client-version-issue/261524 "2021-01-20T14:44:51Z")

</div>

Hi, I am using a 7.3.1 cluster. Using Spring Data Elastic in Spring Boot 2.3 brings a client in version 7.6.2. As seen on this forum I add the version to match my cluster in my pom.xml : \<properties\> \<elasticsearch.v…

---

## [Event.action field for cloudTrail logs not being assigned event name when pulling cloud-trail logs using aws module](https://discuss.elastic.co/t/event-action-field-for-cloudtrail-logs-not-being-assigned-event-name-when-pulling-cloud-trail-logs-using-aws-module/261621)

<div class="topic-metadata">

**Author:** [@kbirhan](https://discuss.elastic.co/u/kbirhan)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 8:16am UTC](https://discuss.elastic.co/t/event-action-field-for-cloudtrail-logs-not-being-assigned-event-name-when-pulling-cloud-trail-logs-using-aws-module/261621 "2021-01-20T08:16:35Z")

</div>

Hi I was looking into my cloudtrail logs i am pulling from s3 bucket, and it seems aws module of filebeat seems to give a generic value ("mangement") for the event.action field. As shown in the image,all event.action fi…

---

## [How to reduce index mapping fields while keeping data continuity](https://discuss.elastic.co/t/how-to-reduce-index-mapping-fields-while-keeping-data-continuity/260376)

<div class="topic-metadata">

**Author:** [@NadavKal](https://discuss.elastic.co/u/NadavKal)\
**Replies:** 4\
**Last updated:** [January 20, 2021, 1:28pm UTC](https://discuss.elastic.co/t/how-to-reduce-index-mapping-fields-while-keeping-data-continuity/260376 "2021-01-20T13:28:17Z")

</div>

my issue is like this. I am trying to switch a dynamic mapping to static without impacting the users. We have many text and keyword fields which are redundant. the trick is... if field A has both A (text) and A.keywor…

---

## [Elastic Search Query help](https://discuss.elastic.co/t/elastic-search-query-help/261656)

<div class="topic-metadata">

**Author:** [@Pazhanikanthan](https://discuss.elastic.co/u/Pazhanikanthan)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 1:26pm UTC](https://discuss.elastic.co/t/elastic-search-query-help/261656 "2021-01-20T13:26:02Z")

</div>

Hello experts I have an index with accepts docs in JSON format. I have a specific JSON structure. { "title": "ABC", "admissions": \[ { "location": "Sydney", "year": 2020 }, { "location": "Melbourne", "year": 20…

---

## [Remove empty buckets from the query response](https://discuss.elastic.co/t/remove-empty-buckets-from-the-query-response/261648)

<div class="topic-metadata">

**Author:** [@wedkarz014](https://discuss.elastic.co/u/wedkarz014)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 12:49pm UTC](https://discuss.elastic.co/t/remove-empty-buckets-from-the-query-response/261648 "2021-01-20T12:49:40Z")

</div>

Hi, do you have any idea how i can remove empty buckets from my response? My query looks like that: GET kubernetes-prod-metrics/\_search { "\_source": \[ "@timestamp", "kubernetes.namespace", "kubernetes.con…

---

## [Dissector mapping, pattern not found in Logstash](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-in-logstash/261210)

<div class="topic-metadata">

**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\
**Replies:** 0\
**Last updated:** [January 15, 2021, 5:50am UTC](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-in-logstash/261210 "2021-01-15T05:50:25Z")

</div>

Hi Team, After a long time I am getting below error in my logstash config. \["beats\_input\_codec\_plain\_applied", "\_dissectfailure"\], "input"=\>{"type"=\>"log"}}} \[2021-01-15T04:02:07,055\]\[WARN \]\[org.logstash.dissect.Disse…

---

## [Dissector mapping, pattern not found in Logstash](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-in-logstash/261444)

<div class="topic-metadata">

**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\
**Replies:** 7\
**Last updated:** [January 20, 2021, 12:29pm UTC](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-in-logstash/261444 "2021-01-20T12:29:32Z")

</div>

Hi Team, I am getting Dissector mapping, pattern not found in Logstash while start logstash.

---

## [How to set elasticsearch jvm heap size?](https://discuss.elastic.co/t/how-to-set-elasticsearch-jvm-heap-size/261611)

<div class="topic-metadata">

**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\
**Replies:** 10\
**Last updated:** [January 20, 2021, 11:54am UTC](https://discuss.elastic.co/t/how-to-set-elasticsearch-jvm-heap-size/261611 "2021-01-20T11:54:57Z")

</div>

If I have a 16C64G machine and install CentOS7.6 on it, There is 62gb available memory. total used free shared buff/cache available Mem: 62 34 0 …

---

## [Why elasticsearch index log size larger than the actual size on the server?](https://discuss.elastic.co/t/why-elasticsearch-index-log-size-larger-than-the-actual-size-on-the-server/261636)

<div class="topic-metadata">

**Author:** [@xax](https://discuss.elastic.co/u/xax)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 11:29am UTC](https://discuss.elastic.co/t/why-elasticsearch-index-log-size-larger-than-the-actual-size-on-the-server/261636 "2021-01-20T11:29:18Z")

</div>

If you look picture no.1 my server have 64G and used 39G. Container elasticsearch and logstash use like 2.2G, docker image 3.4G = 5.6 G. Then the volume use like 30.7 G. Meanwhile, if i check my index size at index …

---

## [How to take filter and selected timeframe from Visualize to Logs view?](https://discuss.elastic.co/t/how-to-take-filter-and-selected-timeframe-from-visualize-to-logs-view/259460)

<div class="topic-metadata">

**Author:** [@bluepuma77](https://discuss.elastic.co/u/bluepuma77)\
**Replies:** 6\
**Last updated:** [January 20, 2021, 11:22am UTC](https://discuss.elastic.co/t/how-to-take-filter-and-selected-timeframe-from-visualize-to-logs-view/259460 "2021-01-20T11:22:22Z")

</div>

Hi all, I have identified an anomaly (strange user behavior) in my logs with Visualize in Kibana. How can I now switch to log view to see the same matching log entries and details? Take the filter and selected timefra…

---

## [FiltersAggregation does not use query filter and/or parent aggregation filter](https://discuss.elastic.co/t/filtersaggregation-does-not-use-query-filter-and-or-parent-aggregation-filter/261629)

<div class="topic-metadata">

**Author:** [@panthony](https://discuss.elastic.co/u/panthony)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 10:32am UTC](https://discuss.elastic.co/t/filtersaggregation-does-not-use-query-filter-and-or-parent-aggregation-filter/261629 "2021-01-20T10:32:26Z")

</div>

Hi, I'm not sure if the issue was already reported but I couldn't find anything. It appears that the FiltersAggregation does not leverage the parent's aggregation filter and/or the query filter. Using: PUT /logs/\_bul…

---

## [Error parsing json](https://discuss.elastic.co/t/error-parsing-json/261618)

<div class="topic-metadata">

**Author:** [@shoaib\_akram](https://discuss.elastic.co/u/shoaib_akram)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 7:49am UTC](https://discuss.elastic.co/t/error-parsing-json/261618 "2021-01-20T07:49:03Z")

</div>

Hi i am getting the following errors while ingesting urls into elasticsearch through logstash. Data is ingesting properly but i am getting these errors in log files please help me thanks, Error parsing json {:source=\>"…

---

## [Looks like you either have a bad certificate, an invalid key or your private key was not in PKCS8 format in logstash](https://discuss.elastic.co/t/looks-like-you-either-have-a-bad-certificate-an-invalid-key-or-your-private-key-was-not-in-pkcs8-format-in-logstash/261627)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 10:12am UTC](https://discuss.elastic.co/t/looks-like-you-either-have-a-bad-certificate-an-invalid-key-or-your-private-key-was-not-in-pkcs8-format-in-logstash/261627 "2021-01-20T10:12:37Z")

</div>

Hi Team, Im using below configuration in logstash beats and im getting below error, Could anyone help to resolve this issue, input { beats { port =\> 5044 host =\> server" …

---

## [Enhanced Table Visualization](https://discuss.elastic.co/t/enhanced-table-visualization/255004)

<div class="topic-metadata">

**Author:** [@thuhaa](https://discuss.elastic.co/u/thuhaa)\
**Replies:** 11\
**Last updated:** [January 20, 2021, 9:16am UTC](https://discuss.elastic.co/t/enhanced-table-visualization/255004 "2021-01-20T09:16:01Z")

</div>

Hi @fbaligand, I'm very thank you for creating Kibana Enhanced Table Plugin. But I wonder why about the order of columns when I used split cols function. Example: The data of datetime field is 2020-11-05, 2020-11-06,…

---

## [Understand log4j default strategy](https://discuss.elastic.co/t/understand-log4j-default-strategy/261622)

<div class="topic-metadata">

**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 9:04am UTC](https://discuss.elastic.co/t/understand-log4j-default-strategy/261622 "2021-01-20T09:04:30Z")

</div>

Hello all ! I'm not sure about my understanding of the default Elasticsearch log4j strategy : ######## Server JSON ############################ appender.rolling.type = RollingFile appender.rolling.name = rolling appen…

---

## [Create Kibana saved objects API documentation error](https://discuss.elastic.co/t/create-kibana-saved-objects-api-documentation-error/261582)

<div class="topic-metadata">

**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\
**Replies:** 1\
**Last updated:** [January 20, 2021, 9:01am UTC](https://discuss.elastic.co/t/create-kibana-saved-objects-api-documentation-error/261582 "2021-01-20T09:01:25Z")

</div>

Hi, It looks like there is a bug in the documentation for Create saved objects API. If you click on the "Copy as cURL" the copied example has a couple of issues: Missing closing quatation marks after "my-pattern" Dup…

---

## [Pipeline processor to convert nested array to documents while reindexing](https://discuss.elastic.co/t/pipeline-processor-to-convert-nested-array-to-documents-while-reindexing/261547)

<div class="topic-metadata">

**Author:** [@darshan\_ambre](https://discuss.elastic.co/u/darshan_ambre)\
**Replies:** 5\
**Last updated:** [January 20, 2021, 8:17am UTC](https://discuss.elastic.co/t/pipeline-processor-to-convert-nested-array-to-documents-while-reindexing/261547 "2021-01-20T08:17:33Z")

</div>

Hi Team, Need a solution to take data from source index and have an ingest pipeline to extract data from array in each document of source index as individual document to destination index. e.g. main index data: {…

---

## [I/o timeout filebeat when send data to logstash](https://discuss.elastic.co/t/i-o-timeout-filebeat-when-send-data-to-logstash/261412)

<div class="topic-metadata">

**Author:** [@Eti\_Huri](https://discuss.elastic.co/u/Eti_Huri)\
**Replies:** 4\
**Last updated:** [January 20, 2021, 7:49am UTC](https://discuss.elastic.co/t/i-o-timeout-filebeat-when-send-data-to-logstash/261412 "2021-01-20T07:49:27Z")

</div>

Hi all:) I have my logstash vm and my application vm, they don't run in the same subnet I am trying send logs from my vm application to logstash vm this is my filebeat.yml filebeat.inputs: - type: log p…

---

## [Rolling upgrade: How many times should I flush?](https://discuss.elastic.co/t/rolling-upgrade-how-many-times-should-i-flush/260907)

<div class="topic-metadata">

**Author:** [@Dennis1](https://discuss.elastic.co/u/Dennis1)\
**Replies:** 13\
**Last updated:** [January 20, 2021, 7:42am UTC](https://discuss.elastic.co/t/rolling-upgrade-how-many-times-should-i-flush/260907 "2021-01-20T07:42:42Z")

</div>

If I follow the steps in the Rolling Upgrade docs in the order they're written, it seems to suggest performing a flush for every node I upgrade in my cluster. Is this really necessary, or would performing the flush once…

---

## [Log stash not loading exact number of records in elasticsearch and on every hit results are changing](https://discuss.elastic.co/t/log-stash-not-loading-exact-number-of-records-in-elasticsearch-and-on-every-hit-results-are-changing/261266)

<div class="topic-metadata">

**Author:** [@ocmvin](https://discuss.elastic.co/u/ocmvin)\
**Replies:** 1\
**Last updated:** [January 20, 2021, 7:07am UTC](https://discuss.elastic.co/t/log-stash-not-loading-exact-number-of-records-in-elasticsearch-and-on-every-hit-results-are-changing/261266 "2021-01-20T07:07:05Z")

</div>

Problem statement : Logstash is not loading all records from Database to elasticsearch correctly and everytime I hit same api gets different results (However sometimes correct but changes on every hit and shows only subs…

---

## [Unable to create primary shard in hot-1 and replica shard in hot-2](https://discuss.elastic.co/t/unable-to-create-primary-shard-in-hot-1-and-replica-shard-in-hot-2/261606)

<div class="topic-metadata">

**Author:** [@aris\_lawrence](https://discuss.elastic.co/u/aris_lawrence)\
**Replies:** 5\
**Last updated:** [January 20, 2021, 4:45am UTC](https://discuss.elastic.co/t/unable-to-create-primary-shard-in-hot-1-and-replica-shard-in-hot-2/261606 "2021-01-20T04:45:17Z")

</div>

Elasticsearch version 7.7.1 We have the following setup in our elastic environment. 3 master only 2 ingest only 2 hot nodes (hot-1-p1 and hot-2-p1) 2 warm nodes (warm-1-p1 and warm-2-p1) 1 cold node (cold-p1) mast…

---

## [Get total no. of buckets using composite aggregation](https://discuss.elastic.co/t/get-total-no-of-buckets-using-composite-aggregation/261607)

<div class="topic-metadata">

**Author:** [@shreedhan](https://discuss.elastic.co/u/shreedhan)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 1:25am UTC](https://discuss.elastic.co/t/get-total-no-of-buckets-using-composite-aggregation/261607 "2021-01-20T01:25:37Z")

</div>

Is there a way to get total no. of buckets using composite aggregation. I see there's a question asked almost 2 years ago https://discuss.elastic.co/t/composite-aggregation-buckets-total-count/137156/2. Has this changed?…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1076)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1078)
