# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1117 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1118 --- ## [How to setup Kibana?](https://discuss.elastic.co/t/how-to-setup-kibana/258268)
**Author:** [@mahalabobis](https://discuss.elastic.co/u/mahalabobis)\ **Replies:** 2\ **Last updated:** [December 10, 2020, 6:43pm UTC](https://discuss.elastic.co/t/how-to-setup-kibana/258268 "2020-12-10T18:43:39Z")
I have a remote server which runs Elasticsearch. I'm accessing this server via ssh. I want to setup Kibana how can I do it? Do I need to set Kibana locally or to the remote server? --- ## [How to make queries to elasticsearch from client side of kibana plugin](https://discuss.elastic.co/t/how-to-make-queries-to-elasticsearch-from-client-side-of-kibana-plugin/254178)
**Author:** [@K\_Chaitanya](https://discuss.elastic.co/u/K_Chaitanya)\ **Replies:** 3\ **Last updated:** [December 10, 2020, 6:40pm UTC](https://discuss.elastic.co/t/how-to-make-queries-to-elasticsearch-from-client-side-of-kibana-plugin/254178 "2020-12-10T18:40:50Z")
Hi, I am trying to query elasticsearch indices from client side of kibana plugin. I was unable to find any native kibana plugin components which can readily enable me to create a client with which I can make request to… --- ## [Adding field creates an array not a static string](https://discuss.elastic.co/t/adding-field-creates-an-array-not-a-static-string/258149)
**Author:** [@jknott](https://discuss.elastic.co/u/jknott)\ **Replies:** 7\ **Last updated:** [December 10, 2020, 6:23pm UTC](https://discuss.elastic.co/t/adding-field-creates-an-array-not-a-static-string/258149 "2020-12-10T18:23:52Z")
When I add this in my filter it adds it but my other pipelines also add a field of the same and the values turn into an array instead of a static value per log. mutate { add\_field =\> { "service\_name"… --- ## [Average line is not shown as expected in vega visualization](https://discuss.elastic.co/t/average-line-is-not-shown-as-expected-in-vega-visualization/258314)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 6:11pm UTC](https://discuss.elastic.co/t/average-line-is-not-shown-as-expected-in-vega-visualization/258314 "2020-12-10T18:11:47Z")
{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "description": "Bar chart with text labels. Apply scale padding to make the frame cover the labels.", "data": { "values": \[ {"a": "A", … --- ## [Index Patterns Keep Disappearing](https://discuss.elastic.co/t/index-patterns-keep-disappearing/258292)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 4\ **Last updated:** [December 10, 2020, 5:39pm UTC](https://discuss.elastic.co/t/index-patterns-keep-disappearing/258292 "2020-12-10T17:39:15Z")
Hi All, I'm currently using version 7.8.0, I've indexed some documents into ES, but when I create a n Index Pattern in Kibana, it disappear automatically. Please see below some screenshots of this issue. GET \_cat/indi… --- ## [Kibana Lucene search of an array field](https://discuss.elastic.co/t/kibana-lucene-search-of-an-array-field/258313)
**Author:** [@gaz1](https://discuss.elastic.co/u/gaz1)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 5:36pm UTC](https://discuss.elastic.co/t/kibana-lucene-search-of-an-array-field/258313 "2020-12-10T17:36:00Z")
Hi there. I have a few docs in an index that go as the following example: ''' "\_index" : "metrics", "\_type" : "\_doc", "\_id" : "5fd1814e8a7b8b0023d747d5", "\_source" : { "socketId" : "hh9WMhPM1z1tD8SyAAdN", "events"… --- ## [Distinct values of one field based on date range](https://discuss.elastic.co/t/distinct-values-of-one-field-based-on-date-range/257176)
**Author:** [@Rohlik](https://discuss.elastic.co/u/Rohlik)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 5:33pm UTC](https://discuss.elastic.co/t/distinct-values-of-one-field-based-on-date-range/257176 "2020-12-10T17:33:41Z")
Hello community :wave: , I struggling with Elasticsearch query and sadly I cannot get correct response. :unamused: What I want is get unique/disctinct values for specific field in last X minutes. I have something like… --- ## [Required logstash patterns to extract JSON format log](https://discuss.elastic.co/t/required-logstash-patterns-to-extract-json-format-log/255516)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 3\ **Last updated:** [December 10, 2020, 5:31pm UTC](https://discuss.elastic.co/t/required-logstash-patterns-to-extract-json-format-log/255516 "2020-12-10T17:31:40Z")
Hi All, Below is the log message which is in JSON format, would like to extract couple of keys from the below log ( say ex: x-forwarded-for, host, etc..). can any please help me to write logstash filters to extract the … --- ## [Export CSV doesn't work v7.9.0](https://discuss.elastic.co/t/export-csv-doesnt-work-v7-9-0/258247)
**Author:** [@111382](https://discuss.elastic.co/u/111382)\ **Replies:** 2\ **Last updated:** [December 10, 2020, 5:31pm UTC](https://discuss.elastic.co/t/export-csv-doesnt-work-v7-9-0/258247 "2020-12-10T17:31:35Z")
Hi everyone! I hope some of you met the same trouble with csv report generation. I read articles at the forum but didn't get the same case. So I try to export saved search in Kibana 7.9.0 but receive Service Unavailable… --- ## [Exported CSV from search table in dashboard has column values missing](https://discuss.elastic.co/t/exported-csv-from-search-table-in-dashboard-has-column-values-missing/257882)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 3\ **Last updated:** [December 10, 2020, 5:30pm UTC](https://discuss.elastic.co/t/exported-csv-from-search-table-in-dashboard-has-column-values-missing/257882 "2020-12-10T17:30:23Z")
Hi, I am using 7.8.0 . I have used discover search tables and data tables in kibana dashboards. When I download CSV from the dashboard for a search table, it doesn't contain values for some .keyword columns. When I dow… --- ## [Not able to show field values in Kibana](https://discuss.elastic.co/t/not-able-to-show-field-values-in-kibana/257188)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 2\ **Last updated:** [December 10, 2020, 5:27pm UTC](https://discuss.elastic.co/t/not-able-to-show-field-values-in-kibana/257188 "2020-12-10T17:27:25Z")
I have JSON documents that I send through a lambda to Elasticsearch and these JSONs have certain fields nested that are flattened in the process, I can see that they are correctly showed in my Index Pattern, like this: … --- ## [Limits of scripted fields](https://discuss.elastic.co/t/limits-of-scripted-fields/258030)
**Author:** [@Juanfri](https://discuss.elastic.co/u/Juanfri)\ **Replies:** 3\ **Last updated:** [December 10, 2020, 5:26pm UTC](https://discuss.elastic.co/t/limits-of-scripted-fields/258030 "2020-12-10T17:26:04Z")
Hi! First of all, sorry for my bad english. I need some help in order to understand if I can use scripted fields for my purpose. I want to calculate a field by a multiplication with other fields. However, I must know … --- ## [Create Watcher from Service gone](https://discuss.elastic.co/t/create-watcher-from-service-gone/258259)
**Author:** [@webjoel](https://discuss.elastic.co/u/webjoel)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 11:15am UTC](https://discuss.elastic.co/t/create-watcher-from-service-gone/258259 "2020-12-10T11:15:27Z")
I'm updated version Elastic Cloud from 7.8 to 7.9.3 and option the Create Watcher from Service (APM \> Services \> my-service \> Transactions) is gone. Has feature removed? --- ## [Kafka input plugin](https://discuss.elastic.co/t/kafka-input-plugin/258303)
**Author:** [@Samuel\_Delepiere](https://discuss.elastic.co/u/Samuel_Delepiere)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 5:17pm UTC](https://discuss.elastic.co/t/kafka-input-plugin/258303 "2020-12-10T17:17:54Z")
The documentation does not really make sense when it comes to poll\_timeout\_ms and fetch\_max\_wait\_ms. According to the documentation: fetch\_max\_wait\_ms has a default value of 500ms poll\_timeout\_ms has a default value o… --- ## [Keep data synchronize with Indices](https://discuss.elastic.co/t/keep-data-synchronize-with-indices/258257)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 2\ **Last updated:** [December 10, 2020, 5:12pm UTC](https://discuss.elastic.co/t/keep-data-synchronize-with-indices/258257 "2020-12-10T17:12:01Z")
I'm using Elasticsearch 7.9.0. and using ingress to process and enrich data. I want to share data in indices Elasticsearch with another app. This app have api to collect data. Have any way to keep sync data in indices … --- ## [Kibana json input](https://discuss.elastic.co/t/kibana-json-input/258246)
**Author:** [@saumya1](https://discuss.elastic.co/u/saumya1)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 5:09pm UTC](https://discuss.elastic.co/t/kibana-json-input/258246 "2020-12-10T17:09:51Z")
I want to utilize the advance section (json input )in visualization.How we can write the query to modify the visualization.Any help or information on this will be highly appreciated. --- ## [Elasticsearch issue](https://discuss.elastic.co/t/elasticsearch-issue/258182)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 6\ **Last updated:** [December 10, 2020, 4:46pm UTC](https://discuss.elastic.co/t/elasticsearch-issue/258182 "2020-12-10T16:46:24Z")
Hello there, I am using ELK 7.9.2 and I see following issue with elasticsearch and kibana. \*\*Elasticsearch\*\* \[2020-12-09T15:13:39,596\]\[WARN \]\[o.e.c.r.a.AllocationService\] \[master\] \[.kibana\_1\]\[0\] marking unavailable sh… --- ## [Can I hide legend from visualization?](https://discuss.elastic.co/t/can-i-hide-legend-from-visualization/258298)
**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 4:32pm UTC](https://discuss.elastic.co/t/can-i-hide-legend-from-visualization/258298 "2020-12-10T16:32:13Z")
Is there way to hide or remove legend from visualization? I am working on vertical bar.. --- ## [Problème connection filebeat](https://discuss.elastic.co/t/probleme-connection-filebeat/257870)
**Author:** [@f.boer](https://discuss.elastic.co/u/f.boer)\ **Replies:** 8\ **Last updated:** [December 10, 2020, 4:29pm UTC](https://discuss.elastic.co/t/probleme-connection-filebeat/257870 "2020-12-10T16:29:49Z")
bonjour je viens d'installer une version 7.10 d'elasticsearch pour pouvoir récupérer et stocker mes logs de firewall fortinet. Après recherche, il s'avère qu'il existe un module filebeat tout pret pour cela. j'ai instal… --- ## [Why collect the same log when I set different port?](https://discuss.elastic.co/t/why-collect-the-same-log-when-i-set-different-port/258211)
**Author:** [@111418](https://discuss.elastic.co/u/111418)\ **Replies:** 3\ **Last updated:** [December 10, 2020, 4:29pm UTC](https://discuss.elastic.co/t/why-collect-the-same-log-when-i-set-different-port/258211 "2020-12-10T16:29:08Z")
I have two conf file in /etc/logstash/conf.d/. One is named "nas\_ftp.conf" and include below setting:\`\`\` input { tcp { port =\> 10515 } } filter { } output { elasticsearch { hosts … --- ## [Programmatically backup existing index pattern](https://discuss.elastic.co/t/programmatically-backup-existing-index-pattern/258058)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 3:28pm UTC](https://discuss.elastic.co/t/programmatically-backup-existing-index-pattern/258058 "2020-12-10T15:28:47Z")
I have 2 index patterns that are named exactly the same. One of them must be deleted to reduce confusion. When I get the json of them (through dev tools), I can see slight differences between them. I want to back them up… --- ## [API limited search results](https://discuss.elastic.co/t/api-limited-search-results/258300)
**Author:** [@hohooss](https://discuss.elastic.co/u/hohooss)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 3:18pm UTC](https://discuss.elastic.co/t/api-limited-search-results/258300 "2020-12-10T15:18:13Z")
Hello, I trying to do an elasticsearch API call that will retrieve results more than 200,000 hits, as it was confirmed by Kibana GUI search, but I always get the following message, i.e. 10000 hits: "took": 102, "ti… --- ## [Running filebeat modules alongside a custom pipeline](https://discuss.elastic.co/t/running-filebeat-modules-alongside-a-custom-pipeline/258272)
**Author:** [@pbatley](https://discuss.elastic.co/u/pbatley)\ **Replies:** 4\ **Last updated:** [December 10, 2020, 3:16pm UTC](https://discuss.elastic.co/t/running-filebeat-modules-alongside-a-custom-pipeline/258272 "2020-12-10T15:16:39Z")
I am completely new to Elastic so apologies if this is trivial. I have managed to set up the ELK stack (self managed, all on same host machine) and have got filebeat's apache module enable sending logs to logstash. I us… --- ## [Multi field search with wildcard expression in query](https://discuss.elastic.co/t/multi-field-search-with-wildcard-expression-in-query/258001)
**Author:** [@sreedhar1](https://discuss.elastic.co/u/sreedhar1)\ **Replies:** 5\ **Last updated:** [December 10, 2020, 3:12pm UTC](https://discuss.elastic.co/t/multi-field-search-with-wildcard-expression-in-query/258001 "2020-12-10T15:12:04Z")
Expecting text "abc" search against field1 or field2 to get the results. what is wrong in below query? s =\> s .Query(q =\> q .DisMax(d =\> d .Queries(q1 =\> q1 .Wildcard(w =\> w .Field(f =\> f.field1).Value("abc\*") .F… --- ## [Elasticsearch - update existing documents in different index](https://discuss.elastic.co/t/elasticsearch-update-existing-documents-in-different-index/258295)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 3:05pm UTC](https://discuss.elastic.co/t/elasticsearch-update-existing-documents-in-different-index/258295 "2020-12-10T15:05:16Z")
Here is my data set ticket\_id: T100 ticket\_status: open ticket\_updated\_date: 20201201T10:10:22 ticket\_id: T101 ticket\_status: open ticket\_updated\_date: 20201201T11:10:22 ticket\_id: T101 ticket\_status: closed ticket\_up… --- ## [How can i took all Hit values record in python?](https://discuss.elastic.co/t/how-can-i-took-all-hit-values-record-in-python/258273)
**Author:** [@subham\_p](https://discuss.elastic.co/u/subham_p)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 3:00pm UTC](https://discuss.elastic.co/t/how-can-i-took-all-hit-values-record-in-python/258273 "2020-12-10T15:00:20Z")
'took': 14, 'timed\_out': False, '\_shards': {'total': 1, 'successful': 1, 'skipped': 0, 'failed': 0}, 'hits': {'total': {'value': 99, 'relation': 'eq'}, 'max\_score': 1.0,\`Preformatted text\` when I am trying with thi… --- ## [Timezone problem/question again](https://discuss.elastic.co/t/timezone-problem-question-again/258180)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 2:40pm UTC](https://discuss.elastic.co/t/timezone-problem-question-again/258180 "2020-12-10T14:40:22Z")
In past I had problem with datestamp field but resolve by using this same index read data from source -\> logstash -\> send Field1 to ELK as is and it will be converted to UTC and convert it back to local time via Kibana … --- ## [Shards are UNASSIGNED state in ES 7.7 version](https://discuss.elastic.co/t/shards-are-unassigned-state-in-es-7-7-version/256808)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 3\ **Last updated:** [December 10, 2020, 12:45pm UTC](https://discuss.elastic.co/t/shards-are-unassigned-state-in-es-7-7-version/256808 "2020-12-10T12:45:55Z")
Hi Team, Frequently, i can see the some shards are unassigned state. can any please help me how to fix the issue? Thanks Nikhilesh Gade --- ## [Display multiple values as one](https://discuss.elastic.co/t/display-multiple-values-as-one/257993)
**Author:** [@Shay\_Levy](https://discuss.elastic.co/u/Shay_Levy)\ **Replies:** 4\ **Last updated:** [December 10, 2020, 12:30pm UTC](https://discuss.elastic.co/t/display-multiple-values-as-one/257993 "2020-12-10T12:30:23Z")
I'm indexing computer hardware related info, one of the fields is called Vendor. Example values of Vendor: Intel INTEL\_ HP Hewlett Packard Microsoft Microsoft Corporation And so on... I want to unify and display… --- ## [NEST Elasticsearch Query](https://discuss.elastic.co/t/nest-elasticsearch-query/258254)
**Author:** [@SergioRodenas](https://discuss.elastic.co/u/SergioRodenas)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 10:52am UTC](https://discuss.elastic.co/t/nest-elasticsearch-query/258254 "2020-12-10T10:52:55Z")
Hi, I would like to replicate this query using .NET Core 3.1, Nest 7.10.0 and Elasticsearch 7.9.3 SELECT name, lat, lon, (6371 \* acos(cos(radians(41.671958)) \* cos(radians(lat)) \* cos(radians(lon) - radians(-3.685049)) … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1116) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1118)