# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1100

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1101

---

## [Json upload using Data visualizer issue](https://discuss.elastic.co/t/json-upload-using-data-visualizer-issue/259763)

<div class="topic-metadata">

**Author:** [@Savita\_Chauhan](https://discuss.elastic.co/u/Savita_Chauhan)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 12:22am UTC](https://discuss.elastic.co/t/json-upload-using-data-visualizer-issue/259763 "2020-12-29T00:22:56Z")

</div>

I am trying to upload/index a simple json file using Kibana's Data Visualizer (under ML). I have 3 node elastic cluster and one kibana running on docker. It lets me upload the json, but when I look at the index it had pu…

---

## [Dec 19th, 2020: \[EN\] OpenTelemetry in Go Applications using Elastic APM](https://discuss.elastic.co/t/dec-19th-2020-en-opentelemetry-in-go-applications-using-elastic-apm/257279)

<div class="topic-metadata">

**Author:** [@riferrei](https://discuss.elastic.co/u/riferrei)\
**Replies:** 0\
**Last updated:** [December 19, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-19th-2020-en-opentelemetry-in-go-applications-using-elastic-apm/257279 "2020-12-19T08:00:24Z")

</div>

Distributed tracing technologies allow developers to virtually glue together disparate services to build a cohesive transaction that can be observed by folks in the operations team. This is super important because the di…

---

## [Elasticsearch Engineer I Home Labs Setup](https://discuss.elastic.co/t/elasticsearch-engineer-i-home-labs-setup/259544)

<div class="topic-metadata">

**Author:** [@NigelM](https://discuss.elastic.co/u/NigelM)\
**Replies:** 2\
**Last updated:** [December 28, 2020, 10:28pm UTC](https://discuss.elastic.co/t/elasticsearch-engineer-i-home-labs-setup/259544 "2020-12-28T22:28:45Z")

</div>

Hi, I am working through my Elasticsearch training material for the Elasticsearch Engineer 1 course and I have built my home environment - however it makes reference to accessing the blogs search page which was just an …

---

## [App allowed through elastic endpoint due to message processing error](https://discuss.elastic.co/t/app-allowed-through-elastic-endpoint-due-to-message-processing-error/259556)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 4\
**Last updated:** [December 28, 2020, 9:11pm UTC](https://discuss.elastic.co/t/app-allowed-through-elastic-endpoint-due-to-message-processing-error/259556 "2020-12-28T21:11:37Z")

</div>

Hi all. I have been trying to use elastic endpoint sec since yesterday and the agent on windows having some problems that i dont really know how to fix. It constantly say that some app or dll lib is allowed due to mess…

---

## [Getting the error when using EuiDataGrid inside Kibana plugin](https://discuss.elastic.co/t/getting-the-error-when-using-euidatagrid-inside-kibana-plugin/259613)

<div class="topic-metadata">

**Author:** [@zixon89](https://discuss.elastic.co/u/zixon89)\
**Replies:** 3\
**Last updated:** [December 28, 2020, 7:37pm UTC](https://discuss.elastic.co/t/getting-the-error-when-using-euidatagrid-inside-kibana-plugin/259613 "2020-12-28T19:37:37Z")

</div>

Hi there, I hope it's the right place to ask the following question... I'm new with Kibana plugin development, and I figure out most of the back-end part. However, now comes the tricky part for me - the EUI framework. …

---

## [Apply condition on value (count) greater than some value in aggregation](https://discuss.elastic.co/t/apply-condition-on-value-count-greater-than-some-value-in-aggregation/259750)

<div class="topic-metadata">

**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\
**Replies:** 3\
**Last updated:** [December 28, 2020, 6:54pm UTC](https://discuss.elastic.co/t/apply-condition-on-value-count-greater-than-some-value-in-aggregation/259750 "2020-12-28T18:54:05Z")

</div>

I am looking a way where I can apply condition on value return in result. Here is my query. { "size": 0, "aggs": { "by\_brand": { "terms": { "field": "brand\_name.keyword", "size": 10…

---

## [\[Error\]tried to parse field \[TLSv1\] as object, but found a concrete value](https://discuss.elastic.co/t/error-tried-to-parse-field-tlsv1-as-object-but-found-a-concrete-value/259753)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 0\
**Last updated:** [December 28, 2020, 6:43pm UTC](https://discuss.elastic.co/t/error-tried-to-parse-field-tlsv1-as-object-but-found-a-concrete-value/259753 "2020-12-28T18:43:20Z")

</div>

I am trying to ingest json data into Elasticsearch vai http\_poller and facing following error. elasticsearch - Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"cloudflare",…

---

## [Elasticsearch-exporter connection failure](https://discuss.elastic.co/t/elasticsearch-exporter-connection-failure/259128)

<div class="topic-metadata">

**Author:** [@Patrick\_Lieberg1](https://discuss.elastic.co/u/Patrick_Lieberg1)\
**Replies:** 2\
**Last updated:** [December 28, 2020, 6:31pm UTC](https://discuss.elastic.co/t/elasticsearch-exporter-connection-failure/259128 "2020-12-28T18:31:47Z")

</div>

Any idea why an elasticsearch-exporter pod's logs report an error connecting to the coordinating pod, but if I exec into the pod and curl the same address, it works? Exporter version: 1.1.0-debian-10-r303 Error from lo…

---

## [I want to disable optons in visualization](https://discuss.elastic.co/t/i-want-to-disable-optons-in-visualization/259545)

<div class="topic-metadata">

**Author:** [@sujayjay](https://discuss.elastic.co/u/sujayjay)\
**Replies:** 5\
**Last updated:** [December 28, 2020, 5:04pm UTC](https://discuss.elastic.co/t/i-want-to-disable-optons-in-visualization/259545 "2020-12-28T17:04:10Z")

</div>

hi, im new to elasticsearch, i created dashbord in kibana and displayed in website by sharing through iframe. Problem is that i dont want user to see and go through the options in visualization in dashboard i want to …

---

## [Kibana Markdown local image](https://discuss.elastic.co/t/kibana-markdown-local-image/259740)

<div class="topic-metadata">

**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\
**Replies:** 2\
**Last updated:** [December 28, 2020, 4:56pm UTC](https://discuss.elastic.co/t/kibana-markdown-local-image/259740 "2020-12-28T16:56:57Z")

</div>

Hello! I want to display in my kibana visualization my local image. I put cat.png to /usr/share/kibana/src/legacy/ui/public/assets/favicons. Owner of /usr/share/kibana/src/legacy/ui/public/assets/favicons is root, owner…

---

## [How to keep logstash date type?](https://discuss.elastic.co/t/how-to-keep-logstash-date-type/259742)

<div class="topic-metadata">

**Author:** [@pamiers](https://discuss.elastic.co/u/pamiers)\
**Replies:** 2\
**Last updated:** [December 28, 2020, 4:39pm UTC](https://discuss.elastic.co/t/how-to-keep-logstash-date-type/259742 "2020-12-28T16:39:36Z")

</div>

I am reading data from oracle and putting data into elasticsearch through logstash. However, when reading data from oracle, the value of the field corresponding to the Date type is automatically changed to UTC type, dif…

---

## [ELK Kibana table grouping count](https://discuss.elastic.co/t/elk-kibana-table-grouping-count/259422)

<div class="topic-metadata">

**Author:** [@Atif\_EL\_KHACHINE](https://discuss.elastic.co/u/Atif_EL_KHACHINE)\
**Replies:** 3\
**Last updated:** [December 28, 2020, 4:28pm UTC](https://discuss.elastic.co/t/elk-kibana-table-grouping-count/259422 "2020-12-28T16:28:42Z")

</div>

Hi, I have some data : {"groupname":"ZAAH", "dname":"DEVICE1", "status":"OK"} {"groupname":"ZAAH","dname":"DEVICE2", "status":"ERROR"} {"groupname":"ZAAH","dname":"DEVICE3", "status":"OK"} {"groupname":"ZAAH","dname…

---

## [Logstash enrichement: URLHaus](https://discuss.elastic.co/t/logstash-enrichement-urlhaus/259720)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 5\
**Last updated:** [December 28, 2020, 4:14pm UTC](https://discuss.elastic.co/t/logstash-enrichement-urlhaus/259720 "2020-12-28T16:14:18Z")

</div>

Hello , I would like to enrich my SIEM with information from URLhaus, I configured my logstash pipline like this: input { exec { command =\> 'curl https://urlhaus.abuse.ch/downloads/csv/' interval =\> 86400 …

---

## [Configure HTTP-server elasticsearch](https://discuss.elastic.co/t/configure-http-server-elasticsearch/259723)

<div class="topic-metadata">

**Author:** [@wmr84](https://discuss.elastic.co/u/wmr84)\
**Replies:** 1\
**Last updated:** [December 28, 2020, 1:02pm UTC](https://discuss.elastic.co/t/configure-http-server-elasticsearch/259723 "2020-12-28T13:02:03Z")

</div>

Hi everybody! I have configured the following parameters on my elasticsearch server http.host: elasticsearch.company.com http.publish\_host: elasticsearch.company.com http.bind\_host: elasticsearch.company.com I thoug…

---

## [Optimize corpus before training](https://discuss.elastic.co/t/optimize-corpus-before-training/259732)

<div class="topic-metadata">

**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\
**Replies:** 0\
**Last updated:** [December 28, 2020, 12:51pm UTC](https://discuss.elastic.co/t/optimize-corpus-before-training/259732 "2020-12-28T12:51:01Z")

</div>

Hi all from elastic team. I am building a pipiline to optimize a corpus before submitting to opennlp training. remove stopwords apply lemmatizer or stemmer The elastic has some functionality that I pass a text and re…

---

## [Cannot run Kibana](https://discuss.elastic.co/t/cannot-run-kibana/259677)

<div class="topic-metadata">

**Author:** [@111422](https://discuss.elastic.co/u/111422)\
**Replies:** 1\
**Last updated:** [December 28, 2020, 12:46pm UTC](https://discuss.elastic.co/t/cannot-run-kibana/259677 "2020-12-28T12:46:22Z")

</div>

After that I downloaded kibana to my windows, I opened in command prompt bin folder and ran kibana command. It showed "\\Kibana\\config was unexpected at this time." and did not run kibana. ElasticSearch was running normal…

---

## [Download kibana dashboards using API call](https://discuss.elastic.co/t/download-kibana-dashboards-using-api-call/259728)

<div class="topic-metadata">

**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\
**Replies:** 2\
**Last updated:** [December 28, 2020, 12:21pm UTC](https://discuss.elastic.co/t/download-kibana-dashboards-using-api-call/259728 "2020-12-28T12:21:41Z")

</div>

i know that we can download our kibana dashboards as CSV but is it possible to download any kibana dashboard using tools like POSTMAN ?? by providing our login credentials and without logging into kibana is there a way t…

---

## [Logstash grok hour and minute ruby](https://discuss.elastic.co/t/logstash-grok-hour-and-minute-ruby/259724)

<div class="topic-metadata">

**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\
**Replies:** 0\
**Last updated:** [December 28, 2020, 11:16am UTC](https://discuss.elastic.co/t/logstash-grok-hour-and-minute-ruby/259724 "2020-12-28T11:16:48Z")

</div>

Hi, I have a grok and I don't want to change it, but I wanted to have the hour and minutes separate, it could be using Ruby, something like that. Thanks else if "performanceLog" in \[path\] { grok { match =\> {"mess…

---

## [Multi match bool query returning 0 hits on large number of documents](https://discuss.elastic.co/t/multi-match-bool-query-returning-0-hits-on-large-number-of-documents/259523)

<div class="topic-metadata">

**Author:** [@Finley](https://discuss.elastic.co/u/Finley)\
**Replies:** 2\
**Last updated:** [December 28, 2020, 10:46am UTC](https://discuss.elastic.co/t/multi-match-bool-query-returning-0-hits-on-large-number-of-documents/259523 "2020-12-28T10:46:31Z")

</div>

Hi, I have 2 elk cluster in 7.10. A -\> 70 documents per hour B -\> 100 - 300 documents per second (825k on 1 hour) When I am doing a KQL search in kibana (discover) with just typing "POST", on the cluster A, it's retu…

---

## [Snapshot size limits](https://discuss.elastic.co/t/snapshot-size-limits/259703)

<div class="topic-metadata">

**Author:** [@noob1](https://discuss.elastic.co/u/noob1)\
**Replies:** 4\
**Last updated:** [December 28, 2020, 10:34am UTC](https://discuss.elastic.co/t/snapshot-size-limits/259703 "2020-12-28T10:34:12Z")

</div>

Hey All, I'm trying to understand if there is any size limit on how much size snapshot can be written to repository. Say, is it possible to write 200 GB of snapshot to repository? If yes which backend repository should …

---

## [How to sort results based on another field's value or weightage](https://discuss.elastic.co/t/how-to-sort-results-based-on-another-fields-value-or-weightage/259713)

<div class="topic-metadata">

**Author:** [@pushanbhattacharya](https://discuss.elastic.co/u/pushanbhattacharya)\
**Replies:** 1\
**Last updated:** [December 28, 2020, 10:03am UTC](https://discuss.elastic.co/t/how-to-sort-results-based-on-another-fields-value-or-weightage/259713 "2020-12-28T10:03:26Z")

</div>

Hi, Let's take an example. Say the index has 2 fields, viz., name and weightage. Values- name: Black Bus, weightage: 1 name: Blue Bus, weightage: 2 name: Black Car, weightage: 2 name: Blue Car, weightage: 1 Now, …

---

## [Build kibana via proxy](https://discuss.elastic.co/t/build-kibana-via-proxy/256212)

<div class="topic-metadata">

**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\
**Replies:** 5\
**Last updated:** [December 28, 2020, 8:48am UTC](https://discuss.elastic.co/t/build-kibana-via-proxy/256212 "2020-12-28T08:48:36Z")

</div>

i have a source code of kibana 7.3.3 i want to build kibana by : yarn build --skip-node-download --skip-os-packages --skip-archives i have no internet access except an http proxy! i want to build kibana by using this…

---

## [Cookies issue while embedding kibana dashboard with iFrame](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777)

<div class="topic-metadata">

**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\
**Replies:** 8\
**Last updated:** [December 28, 2020, 6:29am UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777 "2020-12-28T06:29:14Z")

</div>

recently i read this in github. Currently, Kibana does not set the SameSite attribute on its session cookie. Up until recently, this was tolerable, but Chrome recently (version 80 ) updated its default configuration to …

---

## [Average bucket in histogram change when time filter change](https://discuss.elastic.co/t/average-bucket-in-histogram-change-when-time-filter-change/258285)

<div class="topic-metadata">

**Author:** [@vbarai](https://discuss.elastic.co/u/vbarai)\
**Replies:** 7\
**Last updated:** [December 28, 2020, 5:15am UTC](https://discuss.elastic.co/t/average-bucket-in-histogram-change-when-time-filter-change/258285 "2020-12-28T05:15:09Z")

</div>

Hi All, I am using latest ELK 7.10. I am facing weired issue with the Lens and Average Bucket Histogram. STEP 1 : Created 4 Index for Dec-2020 Days as below idx\_agg\_test\_20201201 idx\_agg\_test\_20201207 idx\_agg\_test\_2…

---

## [How to save only one data into mongodb by logstash-output-mongodb plugin?](https://discuss.elastic.co/t/how-to-save-only-one-data-into-mongodb-by-logstash-output-mongodb-plugin/259702)

<div class="topic-metadata">

**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\
**Replies:** 0\
**Last updated:** [December 28, 2020, 3:58am UTC](https://discuss.elastic.co/t/how-to-save-only-one-data-into-mongodb-by-logstash-output-mongodb-plugin/259702 "2020-12-28T03:58:22Z")

</div>

Like this output configuration, just want to send id to mongodb output { mongodb { uri =\> 'mongodb://localhost' database =\> "testDB" collection =\> 'testCollection' codec =\> line { format =\> "%{id}"} …

---

## [Logstash 6.8 template gives 400 HTTP response code](https://discuss.elastic.co/t/logstash-6-8-template-gives-400-http-response-code/259699)

<div class="topic-metadata">

**Author:** [@mlpn](https://discuss.elastic.co/u/mlpn)\
**Replies:** 0\
**Last updated:** [December 27, 2020, 11:04pm UTC](https://discuss.elastic.co/t/logstash-6-8-template-gives-400-http-response-code/259699 "2020-12-27T23:04:36Z")

</div>

Hello, I'm in the middle of process of migrating ELK Stack from 5.4 to 7.1. I'm currently on 6.8 and my Logstash gives me HTTP response code 400 after start when I'm trying to import my template. I've renamed string valu…

---

## [Parse PostgreSQL CSV log](https://discuss.elastic.co/t/parse-postgresql-csv-log/259688)

<div class="topic-metadata">

**Author:** [@azlev](https://discuss.elastic.co/u/azlev)\
**Replies:** 3\
**Last updated:** [December 27, 2020, 5:52pm UTC](https://discuss.elastic.co/t/parse-postgresql-csv-log/259688 "2020-12-27T17:52:33Z")

</div>

Hello. At work we are consuming the PostgreSQL CSV log instead of plain log. This poses some advantages, like a better formatted input file, stable format, and easy to turn it on. To achieve it, we are using the filebe…

---

## [True/False Visualization](https://discuss.elastic.co/t/true-false-visualization/259665)

<div class="topic-metadata">

**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\
**Replies:** 2\
**Last updated:** [December 27, 2020, 3:40pm UTC](https://discuss.elastic.co/t/true-false-visualization/259665 "2020-12-27T15:40:39Z")

</div>

Hi all! I'm perplexed on how to do something that should be easy and hoping that someone can point me in the right direction. I'm building a dashboard and want to have a box on it that pulls the last text value and dis…

---

## [Grok an Elasticsearch problem](https://discuss.elastic.co/t/grok-an-elasticsearch-problem/259675)

<div class="topic-metadata">

**Author:** [@mesutalf](https://discuss.elastic.co/u/mesutalf)\
**Replies:** 1\
**Last updated:** [December 27, 2020, 2:14pm UTC](https://discuss.elastic.co/t/grok-an-elasticsearch-problem/259675 "2020-12-27T14:14:19Z")

</div>

Hi, I use ELK (7.2.x) my localhost and I have problem. I have log file like this; 2020-11-30 05:52:33,018 \[9344\] INFO Zdk.ServiceProvider.ServiceThread \[\] - Thread \[Core\[8047e7a3-c403-4fe4-ab87-9bea0c0ab449\]:0\]: idle …

---

## [Logstash kafka input plugin not retrieving data](https://discuss.elastic.co/t/logstash-kafka-input-plugin-not-retrieving-data/259686)

<div class="topic-metadata">

**Author:** [@LogstashDeveloper](https://discuss.elastic.co/u/LogstashDeveloper)\
**Replies:** 0\
**Last updated:** [December 27, 2020, 1:39pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-plugin-not-retrieving-data/259686 "2020-12-27T13:39:21Z")

</div>

Im using logstash kafka input plugin, but it does not retrieve data from kafka topic. Logstash log shows the following messages: Adding newly assigned partitions Setting offset for partition to the committed offset Fet…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1099)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1101)
