# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1105

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1106

---

## [Retrieving keys from logstash-keystore externally](https://discuss.elastic.co/t/retrieving-keys-from-logstash-keystore-externally/259342)

<div class="topic-metadata">

**Author:** [@mahi2](https://discuss.elastic.co/u/mahi2)\
**Replies:** 0\
**Last updated:** [December 22, 2020, 7:51am UTC](https://discuss.elastic.co/t/retrieving-keys-from-logstash-keystore-externally/259342 "2020-12-22T07:51:55Z")

</div>

Hi I need to retrieve keys in logstash-keystore externally. Currently it only allows to retrieve it from logstash using config file. I'd like to know if there is a way to get it from cmd line or maybe any way other th…

---

## [ElasticSearch \`Search\` Usage Metrics and total queries count](https://discuss.elastic.co/t/elasticsearch-search-usage-metrics-and-total-queries-count/259335)

<div class="topic-metadata">

**Author:** [@sb\_chat\_v1](https://discuss.elastic.co/u/sb_chat_v1)\
**Replies:** 0\
**Last updated:** [December 22, 2020, 6:28am UTC](https://discuss.elastic.co/t/elasticsearch-search-usage-metrics-and-total-queries-count/259335 "2020-12-22T06:28:20Z")

</div>

We have a use-case which requires us to maintain count of total search queries. We need to do this on an index or index-alias basis and for this we are passing in a custom stats-group (as part of the \_search request). No…

---

## [Last value is not advancing after manual modification of the file](https://discuss.elastic.co/t/last-value-is-not-advancing-after-manual-modification-of-the-file/259333)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 0\
**Last updated:** [December 22, 2020, 6:21am UTC](https://discuss.elastic.co/t/last-value-is-not-advancing-after-manual-modification-of-the-file/259333 "2020-12-22T06:21:11Z")

</div>

Hi, after manipulating the last value file, its not moving forward in time anymore, this is my last value file --- !ruby/object:DateTime '2020-12-18 20:39:46.000000000 Z' and it seems that is writing duplicates every t…

---

## [Canvas kibana](https://discuss.elastic.co/t/canvas-kibana/259230)

<div class="topic-metadata">

**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\
**Replies:** 4\
**Last updated:** [December 22, 2020, 5:52am UTC](https://discuss.elastic.co/t/canvas-kibana/259230 "2020-12-22T05:52:25Z")

</div>

Hi all, I want to create data like this in canvas kibana And this is my query essql SELECT (labels.money::int) as a FROM "apm-\*" WHERE labels.status = 'PAID' When I preview the result the data type is already numer…

---

## [Search rejection when a shard relocation is complete](https://discuss.elastic.co/t/search-rejection-when-a-shard-relocation-is-complete/258829)

<div class="topic-metadata">

**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\
**Replies:** 2\
**Last updated:** [December 22, 2020, 3:44am UTC](https://discuss.elastic.co/t/search-rejection-when-a-shard-relocation-is-complete/258829 "2020-12-22T03:44:22Z")

</div>

There was a rare issue when I tried to add several data nodes to my online ES cluster yesterday. When the new data nodes joined to the cluster, it began to rebalance shards to these new data nodes. Most of the shard re…

---

## [Exception running enterprise-search for first time](https://discuss.elastic.co/t/exception-running-enterprise-search-for-first-time/259062)

<div class="topic-metadata">

**Author:** [@spetri](https://discuss.elastic.co/u/spetri)\
**Replies:** 1\
**Last updated:** [December 21, 2020, 11:05pm UTC](https://discuss.elastic.co/t/exception-running-enterprise-search-for-first-time/259062 "2020-12-21T23:05:44Z")

</div>

Hi all - I have a local elasticsearch server running and have followed all the steps when installing enterprise-search. My config is as follows: ent\_search.auth.source: standard elasticsearch.username: elastic elasticse…

---

## [Bool Queries - Filtering double negatives](https://discuss.elastic.co/t/bool-queries-filtering-double-negatives/258217)

<div class="topic-metadata">

**Author:** [@Stephen\_Kneubuehl](https://discuss.elastic.co/u/Stephen_Kneubuehl)\
**Replies:** 1\
**Last updated:** [December 21, 2020, 9:51pm UTC](https://discuss.elastic.co/t/bool-queries-filtering-double-negatives/258217 "2020-12-21T21:51:01Z")

</div>

Hey everyone, I need help with query syntax! I'm trying to build a compound bool query that filters out documents that do not match a certain criteria, essentially a double negative. I want to return relevant events f…

---

## [Make Kibana listen on localhost AND external IPs?](https://discuss.elastic.co/t/make-kibana-listen-on-localhost-and-external-ips/259277)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 1\
**Last updated:** [December 21, 2020, 9:49pm UTC](https://discuss.elastic.co/t/make-kibana-listen-on-localhost-and-external-ips/259277 "2020-12-21T21:49:04Z")

</div>

Hello I want to able to make my Elastic Stack (Elasticsearch, Logstash, Kibana, and Beats) all listen on the localhost AND on the external IP (or at least bind it to a IP) All I see is creating a reverse proxy with Ngi…

---

## [Make Logstash listen on localhost AND external IPs?](https://discuss.elastic.co/t/make-logstash-listen-on-localhost-and-external-ips/259276)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 1\
**Last updated:** [December 21, 2020, 9:48pm UTC](https://discuss.elastic.co/t/make-logstash-listen-on-localhost-and-external-ips/259276 "2020-12-21T21:48:04Z")

</div>

Hello I want to able to make my Elastic Stack (Elasticsearch, Logstash, Kibana, and Beats) all listen on the localhost AND on the external IP (or at least bind it to a IP) All I see is creating a reverse proxy with Ngi…

---

## [Make Elastic Stack listen on localhost AND external IPs?](https://discuss.elastic.co/t/make-elastic-stack-listen-on-localhost-and-external-ips/259275)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 3\
**Last updated:** [December 21, 2020, 9:47pm UTC](https://discuss.elastic.co/t/make-elastic-stack-listen-on-localhost-and-external-ips/259275 "2020-12-21T21:47:37Z")

</div>

Hello I want to able to make my Elastic Stack (Elasticsearch, Logstash, Kibana, and Beats) all listen on the localhost AND on the external IP (or at least bind it to a IP) All I see is creating a reverse proxy with Ngi…

---

## [Elasticsearch curl error](https://discuss.elastic.co/t/elasticsearch-curl-error/259297)

<div class="topic-metadata">

**Author:** [@hassan.rana](https://discuss.elastic.co/u/hassan.rana)\
**Replies:** 1\
**Last updated:** [December 21, 2020, 9:46pm UTC](https://discuss.elastic.co/t/elasticsearch-curl-error/259297 "2020-12-21T21:46:34Z")

</div>

I am trying to curl some fields/information out of elasticsearch ( to run as zabbix external checks) but can not see the output from any other machine. Blockquote curl -v -XGET "http://10.100.0.0:9200/filebeat\*/\_sea…

---

## [Need to visualize consistently failing tests](https://discuss.elastic.co/t/need-to-visualize-consistently-failing-tests/259299)

<div class="topic-metadata">

**Author:** [@larrya](https://discuss.elastic.co/u/larrya)\
**Replies:** 2\
**Last updated:** [December 21, 2020, 9:45pm UTC](https://discuss.elastic.co/t/need-to-visualize-consistently-failing-tests/259299 "2020-12-21T21:45:12Z")

</div>

I am trying to calculate consistently failing tests over the past 48 hours. For my index I have test results with two significant fields: test\_identifier (string) and test\_result\_status (pass or fail). I would like to d…

---

## [Visualize Amount of Data written to elastic in the last 24h per Index](https://discuss.elastic.co/t/visualize-amount-of-data-written-to-elastic-in-the-last-24h-per-index/258988)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 3\
**Last updated:** [December 21, 2020, 9:44pm UTC](https://discuss.elastic.co/t/visualize-amount-of-data-written-to-elastic-in-the-last-24h-per-index/258988 "2020-12-21T21:44:00Z")

</div>

Hi folks, I have following use case: I want to have a visualization (lets say a gauge) which indicates how much data customer writes to an index in the last 24h Can you help me about how I can achive this? So far in …

---

## [Kibana does not show timeframe in discover](https://discuss.elastic.co/t/kibana-does-not-show-timeframe-in-discover/259303)

<div class="topic-metadata">

**Author:** [@snolfi](https://discuss.elastic.co/u/snolfi)\
**Replies:** 1\
**Last updated:** [December 21, 2020, 9:25pm UTC](https://discuss.elastic.co/t/kibana-does-not-show-timeframe-in-discover/259303 "2020-12-21T21:25:34Z")

</div>

Hello, we are working on kibana 6. It's a SaaS on AWS. We noticed that in discover section there is not the timeframe option to select data, neither the graph the shows how documents are arriving from beats. What co…

---

## [Add date{} config make logstash not working](https://discuss.elastic.co/t/add-date-config-make-logstash-not-working/259213)

<div class="topic-metadata">

**Author:** [@azteker](https://discuss.elastic.co/u/azteker)\
**Replies:** 5\
**Last updated:** [December 21, 2020, 7:36pm UTC](https://discuss.elastic.co/t/add-date-config-make-logstash-not-working/259213 "2020-12-21T19:36:13Z")

</div>

I add date{} config into filter {}, but then the log is not passed to elasticseatch(cannot see new log in kibana). Logs are back if I removed the date config. This is the date config I added: date { match =\> \["ts"…

---

## [Magento 2.3.5 p1 - Elastic Search 7.7. /var/www/html/vendor/elasticsearch/elasticsearch/src/Elasticsearch/Connections/Connection.php:632)](https://discuss.elastic.co/t/magento-2-3-5-p1-elastic-search-7-7-var-www-html-vendor-elasticsearch-elasticsearch-src-elasticsearch-connections-connection-php-632/259182)

<div class="topic-metadata">

**Author:** [@danielJ](https://discuss.elastic.co/u/danielJ)\
**Replies:** 2\
**Last updated:** [December 21, 2020, 5:37pm UTC](https://discuss.elastic.co/t/magento-2-3-5-p1-elastic-search-7-7-var-www-html-vendor-elasticsearch-elasticsearch-src-elasticsearch-connections-connection-php-632/259182 "2020-12-21T17:37:07Z")

</div>

Hello Team, I am using Magento 2.3.5p1 using mysql on an AWS EC2 instance with installed Elasticsearch version 7.7. I get the test successful but on the front end the search does not work with there's no item matching y…

---

## [How to know the time when elasticsearch indexed the data](https://discuss.elastic.co/t/how-to-know-the-time-when-elasticsearch-indexed-the-data/258603)

<div class="topic-metadata">

**Author:** [@soufian.eldouqe](https://discuss.elastic.co/u/soufian.eldouqe)\
**Replies:** 9\
**Last updated:** [December 21, 2020, 5:31pm UTC](https://discuss.elastic.co/t/how-to-know-the-time-when-elasticsearch-indexed-the-data/258603 "2020-12-21T17:31:15Z")

</div>

Hello, is there any way to know the time that elasticsearch indexed the data ? in others words, when did the index received de data. Thank you

---

## [Elasticsearch returns documents with score 0.0](https://discuss.elastic.co/t/elasticsearch-returns-documents-with-score-0-0/259289)

<div class="topic-metadata">

**Author:** [@haitran](https://discuss.elastic.co/u/haitran)\
**Replies:** 0\
**Last updated:** [December 21, 2020, 4:40pm UTC](https://discuss.elastic.co/t/elasticsearch-returns-documents-with-score-0-0/259289 "2020-12-21T16:40:29Z")

</div>

Please help me to understand the scoring logic. Configuration: PUT /my-index-000001 { "mappings": { "dynamic": "false", "properties": { "test": { "type": "text", "fields": { "\_…

---

## [Another dateparse failure](https://discuss.elastic.co/t/another-dateparse-failure/259089)

<div class="topic-metadata">

**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\
**Replies:** 3\
**Last updated:** [December 21, 2020, 4:57pm UTC](https://discuss.elastic.co/t/another-dateparse-failure/259089 "2020-12-21T16:57:41Z")

</div>

I cant figure out how to match this: RAW output \[2020-12-17T16:45:45+01:00\] Elasticsearch JSON Dez 18 11:03:58 mon logstash\[23980\]: "log\_timestamp" =\> "2020-12-18T11:03:56+01:00", Dez 18 11:03:58 mon logstash\[239…

---

## [Aggregate by multiple fields and Top 10 count in ElasticSearcch](https://discuss.elastic.co/t/aggregate-by-multiple-fields-and-top-10-count-in-elasticsearcch/259286)

<div class="topic-metadata">

**Author:** [@Prabhu.292](https://discuss.elastic.co/u/Prabhu.292)\
**Replies:** 0\
**Last updated:** [December 21, 2020, 4:33pm UTC](https://discuss.elastic.co/t/aggregate-by-multiple-fields-and-top-10-count-in-elasticsearcch/259286 "2020-12-21T16:33:12Z")

</div>

Dear Team, I have query like this GET logstash-sdc-questionrecords/\_search?q=source:website\_portal { "aggs" : { "genres" : { "terms" : { "field" : "question.keyword", "order" : { "\_count" : "desc" }, "size": 10 …

---

## [Test Dependency on elasticsearch-test.jar for plugins](https://discuss.elastic.co/t/test-dependency-on-elasticsearch-test-jar-for-plugins/259283)

<div class="topic-metadata">

**Author:** [@Bukhtawar\_Khan](https://discuss.elastic.co/u/Bukhtawar_Khan)\
**Replies:** 0\
**Last updated:** [December 21, 2020, 4:03pm UTC](https://discuss.elastic.co/t/test-dependency-on-elasticsearch-test-jar-for-plugins/259283 "2020-12-21T16:03:49Z")

</div>

Is there a way a plugin developer can leverage existing ES tests apart from elasticsearch-framework itself.

---

## [Elasticsearch sizing for Production POC](https://discuss.elastic.co/t/elasticsearch-sizing-for-production-poc/259268)

<div class="topic-metadata">

**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\
**Replies:** 0\
**Last updated:** [December 21, 2020, 2:12pm UTC](https://discuss.elastic.co/t/elasticsearch-sizing-for-production-poc/259268 "2020-12-21T14:12:12Z")

</div>

Hello everybody, It's the first time that I am going to run a cluster for a production POC and I need some help in the way that I size my machines. Knowing that I am going to have like 15Go of data per day, and knowing…

---

## [Elasticsearch transform role backward compatibility](https://discuss.elastic.co/t/elasticsearch-transform-role-backward-compatibility/259254)

<div class="topic-metadata">

**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\
**Replies:** 1\
**Last updated:** [December 21, 2020, 1:36pm UTC](https://discuss.elastic.co/t/elasticsearch-transform-role-backward-compatibility/259254 "2020-12-21T13:36:16Z")

</div>

Hi, I have a 3 nodes elasticsearch cluster with 7.4.2 version. It's look like this version does not support "transform role". I see in elasticsearch version 7.10.1 logs that a module called "transform" is loaded in star…

---

## [How to connect logstash from logstash?](https://discuss.elastic.co/t/how-to-connect-logstash-from-logstash/259258)

<div class="topic-metadata">

**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\
**Replies:** 0\
**Last updated:** [December 21, 2020, 1:33pm UTC](https://discuss.elastic.co/t/how-to-connect-logstash-from-logstash/259258 "2020-12-21T13:33:22Z")

</div>

I want to use one logstash send data to multiple logstash services. If I use this setting in k8s, it can work. service.yml apiVersion: v1 kind: Service metadata: labels: app: logstash name: logstash spec: se…

---

## [Convert graphite field name in to tags](https://discuss.elastic.co/t/convert-graphite-field-name-in-to-tags/259257)

<div class="topic-metadata">

**Author:** [@Mario\_Giammarco](https://discuss.elastic.co/u/Mario_Giammarco)\
**Replies:** 0\
**Last updated:** [December 21, 2020, 1:30pm UTC](https://discuss.elastic.co/t/convert-graphite-field-name-in-to-tags/259257 "2020-12-21T13:30:39Z")

</div>

Hello, I am a logstash newbie. I have this problem: I receive data from graphite. Data is in this format: computername.cpu.load.cpu0 = 10 I would like to insert this into elastic search: tags=\> \[ computername, cpu,…

---

## [Elasticsearch Python Cache](https://discuss.elastic.co/t/elasticsearch-python-cache/259246)

<div class="topic-metadata">

**Author:** [@satyamsinghal575](https://discuss.elastic.co/u/satyamsinghal575)\
**Replies:** 0\
**Last updated:** [December 21, 2020, 11:52am UTC](https://discuss.elastic.co/t/elasticsearch-python-cache/259246 "2020-12-21T11:52:05Z")

</div>

I am using elasticsearch primarily for aggregations, then eventually i came across setting the query size to zero, according to my understanding this helps in two ways : payload size is reduced and when we use query in…

---

## [Kibana Dashboard for sales team](https://discuss.elastic.co/t/kibana-dashboard-for-sales-team/259052)

<div class="topic-metadata">

**Author:** [@bhavin.shah](https://discuss.elastic.co/u/bhavin.shah)\
**Replies:** 4\
**Last updated:** [December 21, 2020, 10:29am UTC](https://discuss.elastic.co/t/kibana-dashboard-for-sales-team/259052 "2020-12-21T10:29:17Z")

</div>

Hi team, I am relatively new on ES and Kibana and my business team needs very specific dashboard as mentioned in below snapshot. We can prepare state of the art dashboards into Kibana where I can get sense of business …

---

## [Search content in English and resultset returns in other languages](https://discuss.elastic.co/t/search-content-in-english-and-resultset-returns-in-other-languages/259070)

<div class="topic-metadata">

**Author:** [@Antonio\_Teixeira](https://discuss.elastic.co/u/Antonio_Teixeira)\
**Replies:** 2\
**Last updated:** [December 21, 2020, 10:26am UTC](https://discuss.elastic.co/t/search-content-in-english-and-resultset-returns-in-other-languages/259070 "2020-12-21T10:26:27Z")

</div>

Hello All Im trying to find the best way to receive in the resultset all the results that being made in a language plus the results in another language. For example if i search for black, i want that Elasticsearch retr…

---

## [User Specific Configurable Dashboards](https://discuss.elastic.co/t/user-specific-configurable-dashboards/259229)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 3\
**Last updated:** [December 21, 2020, 9:27am UTC](https://discuss.elastic.co/t/user-specific-configurable-dashboards/259229 "2020-12-21T09:27:06Z")

</div>

Hi Team, I know that if user has write/admin access he/she can edit dashboard Add objects, Remove objects , Apply Filters, Apply Search Queries. But can this be user specific? if user "xyz" make any changes this shoul…

---

## [Shard allocation based on shard size](https://discuss.elastic.co/t/shard-allocation-based-on-shard-size/257817)

<div class="topic-metadata">

**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\
**Replies:** 13\
**Last updated:** [December 21, 2020, 8:38am UTC](https://discuss.elastic.co/t/shard-allocation-based-on-shard-size/257817 "2020-12-21T08:38:30Z")

</div>

Hi, I was wondering if there is an option to include shard size in the shard allocation decision process. The Disk-based shard allocation settings and the number of shards/node works, and most of or shards are 50G in s…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1104)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1106)
