# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1118

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1119

---

## [Elasticsearch 7.9.3 - exceptions of data insertions](https://discuss.elastic.co/t/elasticsearch-7-9-3-exceptions-of-data-insertions/257052)

<div class="topic-metadata">

**Author:** [@Lior\_Yakobov](https://discuss.elastic.co/u/Lior_Yakobov)\
**Replies:** 8\
**Last updated:** [December 10, 2020, 11:22am UTC](https://discuss.elastic.co/t/elasticsearch-7-9-3-exceptions-of-data-insertions/257052 "2020-12-10T11:22:01Z")

</div>

Hello, Recently I have upgraded our cluster from 7.5.2 to 7.9.3, and I noticed that there are some exceptions which were available in the elasticsearch log before the upgrade but now are gone. Some examples: \[2020-11-…

---

## [Create visualization using response from Search API](https://discuss.elastic.co/t/create-visualization-using-response-from-search-api/258103)

<div class="topic-metadata">

**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\
**Replies:** 6\
**Last updated:** [December 10, 2020, 11:04am UTC](https://discuss.elastic.co/t/create-visualization-using-response-from-search-api/258103 "2020-12-10T11:04:20Z")

</div>

Is it possible to create visualizations in Kibana using response received in SearchAPI in Dev Tools?

---

## [Kibana Visualisation](https://discuss.elastic.co/t/kibana-visualisation/258251)

<div class="topic-metadata">

**Author:** [@michaelpietzsch](https://discuss.elastic.co/u/michaelpietzsch)\
**Replies:** 5\
**Last updated:** [December 10, 2020, 10:50am UTC](https://discuss.elastic.co/t/kibana-visualisation/258251 "2020-12-10T10:50:48Z")

</div>

Hi good People of the Elastic Community! I am wondering on how to create a visualisation that has exactly the same overview like the hits counter graphic in the discover section of kibana? Can anyone provide insights to…

---

## [Manage ldap users from Kibana](https://discuss.elastic.co/t/manage-ldap-users-from-kibana/256892)

<div class="topic-metadata">

**Author:** [@Brolantor](https://discuss.elastic.co/u/Brolantor)\
**Replies:** 2\
**Last updated:** [December 10, 2020, 9:07am UTC](https://discuss.elastic.co/t/manage-ldap-users-from-kibana/256892 "2020-12-10T09:07:12Z")

</div>

Hello there! Is there a way to manage ldap users from within Kibana? In our production environment we have some (many) restriction of how users are deployd on the systems. So using an ldap for user authentication where …

---

## [Dec 10th, 2020: \[ES\] Las 12 mejores características de Mapas desde GA](https://discuss.elastic.co/t/dec-10th-2020-es-las-12-mejores-caracteristicas-de-mapas-desde-ga/256368)

<div class="topic-metadata">

**Author:** [@jsanz](https://discuss.elastic.co/u/jsanz)\
**Replies:** 0\
**Last updated:** [December 10, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-10th-2020-es-las-12-mejores-caracteristicas-de-mapas-desde-ga/256368 "2020-12-10T08:00:03Z")

</div>

Este artículo es una traducción de Top 12 Maps features since going GA de Nathan Reese. Elastic Maps fue lanzado de manera general (lo que en la casa llamamos generally available o GA) con Kibana 7.3. Alcanzar el nive…

---

## [Dec 10th, 2020: \[EN\] Top 12 Maps features since going GA](https://discuss.elastic.co/t/dec-10th-2020-en-top-12-maps-features-since-going-ga/256224)

<div class="topic-metadata">

**Author:** [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\
**Replies:** 0\
**Last updated:** [December 10, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-10th-2020-en-top-12-maps-features-since-going-ga/256224 "2020-12-10T08:00:03Z")

</div>

Also available in Spanish Maps was released as generally available (GA) in Kibana 7.3. Reaching production-ready is not the final destination, but just another stop on a long journey. Each Kibana point release include…

---

## [How to set week start day in elastic Aggregation](https://discuss.elastic.co/t/how-to-set-week-start-day-in-elastic-aggregation/258226)

<div class="topic-metadata">

**Author:** [@hyonee](https://discuss.elastic.co/u/hyonee)\
**Replies:** 0\
**Last updated:** [December 10, 2020, 7:32am UTC](https://discuss.elastic.co/t/how-to-set-week-start-day-in-elastic-aggregation/258226 "2020-12-10T07:32:57Z")

</div>

I want to set Sunday as the first of the week.... request { "size":0, "query":{ "bool":{ "filter":\[ { "range":{ "@timestamp":{ …

---

## [Why tags has different behavior in version 6.8 and 7.10](https://discuss.elastic.co/t/why-tags-has-different-behavior-in-version-6-8-and-7-10/258218)

<div class="topic-metadata">

**Author:** [@AmitC](https://discuss.elastic.co/u/AmitC)\
**Replies:** 4\
**Last updated:** [December 10, 2020, 7:21am UTC](https://discuss.elastic.co/t/why-tags-has-different-behavior-in-version-6-8-and-7-10/258218 "2020-12-10T07:21:05Z")

</div>

When I inserted below json in 6.8 and 7.10 PUT zipkin-span-2020-12-11/\_doc/123 { "traceId": "6ba4cc20cc46a65b", "duration": 1665151, "remoteEndpoint": { "ipv4": "127.0.0.1",…

---

## [Sending metadata with external users (OIDC)](https://discuss.elastic.co/t/sending-metadata-with-external-users-oidc/258223)

<div class="topic-metadata">

**Author:** [@mahi2](https://discuss.elastic.co/u/mahi2)\
**Replies:** 0\
**Last updated:** [December 10, 2020, 7:04am UTC](https://discuss.elastic.co/t/sending-metadata-with-external-users-oidc/258223 "2020-12-10T07:04:50Z")

</div>

Hi, I have a scenario where the oidc users (external users) login to elastic search cloud. My question is , is there a way to add some metadata using an API along with the external user?

---

## [Is there a way to send logs from Elasticsearch to multiple Qradar IPs?](https://discuss.elastic.co/t/is-there-a-way-to-send-logs-from-elasticsearch-to-multiple-qradar-ips/258136)

<div class="topic-metadata">

**Author:** [@Pooja](https://discuss.elastic.co/u/Pooja)\
**Replies:** 3\
**Last updated:** [December 10, 2020, 6:41am UTC](https://discuss.elastic.co/t/is-there-a-way-to-send-logs-from-elasticsearch-to-multiple-qradar-ips/258136 "2020-12-10T06:41:16Z")

</div>

Is there a way to send logs from Elasticsearch to multiple Qradar IPs?

---

## [Ignore indexes with no hits during aggregation](https://discuss.elastic.co/t/ignore-indexes-with-no-hits-during-aggregation/258191)

<div class="topic-metadata">

**Author:** [@scarletfever](https://discuss.elastic.co/u/scarletfever)\
**Replies:** 3\
**Last updated:** [December 10, 2020, 6:27am UTC](https://discuss.elastic.co/t/ignore-indexes-with-no-hits-during-aggregation/258191 "2020-12-10T06:27:27Z")

</div>

Our ES cluster has a daily index with a field that previously was not saved with type = nested, but now is being saved with type = nested. Our search queries are against a wildcard index, not a specific index. So it's e…

---

## [Pagenation over 10,000 documents](https://discuss.elastic.co/t/pagenation-over-10-000-documents/258205)

<div class="topic-metadata">

**Author:** [@innze](https://discuss.elastic.co/u/innze)\
**Replies:** 1\
**Last updated:** [December 10, 2020, 6:23am UTC](https://discuss.elastic.co/t/pagenation-over-10-000-documents/258205 "2020-12-10T06:23:20Z")

</div>

I'm implementing a pagenation with an ElasticSearch over 10,000 documents. It is possible to bring the search results before and after the search by after\_search. But I would like to create a function to bring from a s…

---

## [No handler for type \[flattened\] declared on field \[host\]"](https://discuss.elastic.co/t/no-handler-for-type-flattened-declared-on-field-host/258177)

<div class="topic-metadata">

**Author:** [@voipas](https://discuss.elastic.co/u/voipas)\
**Replies:** 3\
**Last updated:** [December 10, 2020, 6:05am UTC](https://discuss.elastic.co/t/no-handler-for-type-flattened-declared-on-field-host/258177 "2020-12-10T06:05:17Z")

</div>

Hello, I'm taking some trainings on Elasticsearch, and I I receive an error if I try use flattened: ../bin/curl -XPUT "http://elastic.192.168.0.1.nip.io/demo-flattened/\_mapping" -d ' { "prope…

---

## [IOException when trying to create snapshot Unexpected end-of-input in VALUE\_STRING](https://discuss.elastic.co/t/ioexception-when-trying-to-create-snapshot-unexpected-end-of-input-in-value-string/258220)

<div class="topic-metadata">

**Author:** [@jbbasson](https://discuss.elastic.co/u/jbbasson)\
**Replies:** 0\
**Last updated:** [December 10, 2020, 5:56am UTC](https://discuss.elastic.co/t/ioexception-when-trying-to-create-snapshot-unexpected-end-of-input-in-value-string/258220 "2020-12-10T05:56:53Z")

</div>

We've a 6.8 elastisearch cluster using the gcp plugin to store snapshots running on a cron. We've been running a cron to periodically create snapshots of our elasticseearch 6.8 cluster using: http://...../\_snapshot/ind…

---

## [CircuitBreakingException\[\[parent\] Data too large on upgrading to elasticsearch 7.7 from 5.16](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-on-upgrading-to-elasticsearch-7-7-from-5-16/258170)

<div class="topic-metadata">

**Author:** [@Rajesh99](https://discuss.elastic.co/u/Rajesh99)\
**Replies:** 3\
**Last updated:** [December 10, 2020, 5:19am UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-on-upgrading-to-elasticsearch-7-7-from-5-16/258170 "2020-12-10T05:19:13Z")

</div>

We have a 3 node elasticsearch cluster (with 16 cores, 64GB RAM) running on 7.7.1 version. Each elasticsearch instance was given heap memory of 4.6GB. We were indexing documents using bulk API. We are encountering the fo…

---

## [Can I combine a single fields search results and get a hash?](https://discuss.elastic.co/t/can-i-combine-a-single-fields-search-results-and-get-a-hash/258212)

<div class="topic-metadata">

**Author:** [@ChristoKiwi](https://discuss.elastic.co/u/ChristoKiwi)\
**Replies:** 1\
**Last updated:** [December 10, 2020, 5:06am UTC](https://discuss.elastic.co/t/can-i-combine-a-single-fields-search-results-and-get-a-hash/258212 "2020-12-10T05:06:59Z")

</div>

I have a large ES index (7.7) that has a couple of million rows. I want to be able to pull a days worth of data and using their UUID id values generate a hash (MD5 or SHA1 ideally). I can do this easily using SQL: SEL…

---

## [Configuring Kibana - Existing Elasticsearch Remote Server](https://discuss.elastic.co/t/configuring-kibana-existing-elasticsearch-remote-server/257778)

<div class="topic-metadata">

**Author:** [@Sampson\_Light](https://discuss.elastic.co/u/Sampson_Light)\
**Replies:** 7\
**Last updated:** [December 10, 2020, 4:23am UTC](https://discuss.elastic.co/t/configuring-kibana-existing-elasticsearch-remote-server/257778 "2020-12-10T04:23:58Z")

</div>

Hi All, So in my company, we always used elasticsearch head plugin, connecting to an existing elasticsearch server to do our operations. Recently, we are explroing the usage of Kibana and I am trying to configure Kiban…

---

## [Painless Script for Comparing Nested Objects](https://discuss.elastic.co/t/painless-script-for-comparing-nested-objects/255608)

<div class="topic-metadata">

**Author:** [@edbautista](https://discuss.elastic.co/u/edbautista)\
**Replies:** 3\
**Last updated:** [December 10, 2020, 2:53am UTC](https://discuss.elastic.co/t/painless-script-for-comparing-nested-objects/255608 "2020-12-10T02:53:57Z")

</div>

Hi, We have a use case where we need to compare two dates that are inside a nested field and show the result to another field. Generally, if time1 \> time2, it would show 'Incorrect', and 'Correct' otherwise. Here is my …

---

## [Jan 1, reindex, implement ILM on 2020 data, move forward into 2021](https://discuss.elastic.co/t/jan-1-reindex-implement-ilm-on-2020-data-move-forward-into-2021/258206)

<div class="topic-metadata">

**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\
**Replies:** 1\
**Last updated:** [December 10, 2020, 1:21am UTC](https://discuss.elastic.co/t/jan-1-reindex-implement-ilm-on-2020-data-move-forward-into-2021/258206 "2020-12-10T01:21:21Z")

</div>

hi, i'm very new to ES.. i've been using it for about a year.. but have ALOT to learn. i have built a "system" (i use that term loosely) that sends a large amount of log data via filebeat to logstash for some enrichment…

---

## [Span\_near with a wildcard not finding an index](https://discuss.elastic.co/t/span-near-with-a-wildcard-not-finding-an-index/258204)

<div class="topic-metadata">

**Author:** [@Rvs](https://discuss.elastic.co/u/Rvs)\
**Replies:** 0\
**Last updated:** [December 10, 2020, 12:54am UTC](https://discuss.elastic.co/t/span-near-with-a-wildcard-not-finding-an-index/258204 "2020-12-10T00:54:48Z")

</div>

I am trying to search for a phrase where the one of the term i need to search using a wildcard. This is the index { "id": 2, "name": "Some Other Pizzaeria"} This is the query { "query": { "span\_near" : { …

---

## [How to extract field name which has space in them using xpath](https://discuss.elastic.co/t/how-to-extract-field-name-which-has-space-in-them-using-xpath/258201)

<div class="topic-metadata">

**Author:** [@kamalbeg](https://discuss.elastic.co/u/kamalbeg)\
**Replies:** 1\
**Last updated:** [December 10, 2020, 12:53am UTC](https://discuss.elastic.co/t/how-to-extract-field-name-which-has-space-in-them-using-xpath/258201 "2020-12-10T00:53:51Z")

</div>

I have following xml code xml { source =\> "message" store\_xml =\> "false" remove\_namespaces =\> "true" xpath =\> \[ '/E2ETraceEvent/System/Computer/text()', "\[grc\]\[System\]\[Computer\]", …

---

## [How to apply if condition on the field of json log](https://discuss.elastic.co/t/how-to-apply-if-condition-on-the-field-of-json-log/257931)

<div class="topic-metadata">

**Author:** [@dharanesh](https://discuss.elastic.co/u/dharanesh)\
**Replies:** 1\
**Last updated:** [December 10, 2020, 12:45am UTC](https://discuss.elastic.co/t/how-to-apply-if-condition-on-the-field-of-json-log/257931 "2020-12-10T00:45:49Z")

</div>

I have a log which contains json, i want to apply if condition if log line contains "hai" i need to push data to elasticsearch @REQ.WS: {"message":"hai","Id":"123"}

---

## [How would I build a OR query for field exists](https://discuss.elastic.co/t/how-would-i-build-a-or-query-for-field-exists/258065)

<div class="topic-metadata">

**Author:** [@M\_Gibbs](https://discuss.elastic.co/u/M_Gibbs)\
**Replies:** 1\
**Last updated:** [December 10, 2020, 12:18am UTC](https://discuss.elastic.co/t/how-would-i-build-a-or-query-for-field-exists/258065 "2020-12-10T00:18:57Z")

</div>

Hey all, I've managed to create a query that searches for two fields, but both must exist. I'd like to build a query that requires field1 OR field2 to exist. Any pointers? I can't find anything in the docs related to t…

---

## [How to get start offset and end offset of a search string in search result in elasticsearch](https://discuss.elastic.co/t/how-to-get-start-offset-and-end-offset-of-a-search-string-in-search-result-in-elasticsearch/256879)

<div class="topic-metadata">

**Author:** [@Sreejith\_Pk](https://discuss.elastic.co/u/Sreejith_Pk)\
**Replies:** 3\
**Last updated:** [December 10, 2020, 12:08am UTC](https://discuss.elastic.co/t/how-to-get-start-offset-and-end-offset-of-a-search-string-in-search-result-in-elasticsearch/256879 "2020-12-10T00:08:41Z")

</div>

Hi team, I have a requirement to find the start and end position of a particular word in a text.

---

## [Kibana Dashbaird shows "No results found"](https://discuss.elastic.co/t/kibana-dashbaird-shows-no-results-found/258081)

<div class="topic-metadata">

**Author:** [@ramoba](https://discuss.elastic.co/u/ramoba)\
**Replies:** 2\
**Last updated:** [December 9, 2020, 11:57pm UTC](https://discuss.elastic.co/t/kibana-dashbaird-shows-no-results-found/258081 "2020-12-09T23:57:05Z")

</div>

I installed Suricata 6.0.0 and using filebeat to ship events \>logstash\>elasticseacrh I can see Suricata events when checking Discovery in Kibana. However , when trying to run Suricata Events dashboards ,I get "No suture…

---

## [Best practice for monitoring ECK and Elastic stack on Kubernetes](https://discuss.elastic.co/t/best-practice-for-monitoring-eck-and-elastic-stack-on-kubernetes/258181)

<div class="topic-metadata">

**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\
**Replies:** 1\
**Last updated:** [December 9, 2020, 11:27pm UTC](https://discuss.elastic.co/t/best-practice-for-monitoring-eck-and-elastic-stack-on-kubernetes/258181 "2020-12-09T23:27:48Z")

</div>

I have just installed ECK on our on prem Kubernetes cluster. Currently with Elastic stack consisting of Elasticsearch and Enterprise Search (both v7.10.0). My question is what would be the preferred way of monitoring th…

---

## [Can I add title to each visualization in my dashboard?](https://discuss.elastic.co/t/can-i-add-title-to-each-visualization-in-my-dashboard/258199)

<div class="topic-metadata">

**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\
**Replies:** 1\
**Last updated:** [December 9, 2020, 11:20pm UTC](https://discuss.elastic.co/t/can-i-add-title-to-each-visualization-in-my-dashboard/258199 "2020-12-09T23:20:27Z")

</div>

Hi, I am wondering if I can add title to my visualization in dashboard. In my example, I have a name for the visualization "Upload\_Stack\_Post\_Proc\_Vertical\_Bar". Instead of changing this, I would like to add title in th…

---

## [Passing parameters to Java filter plugin during runtime](https://discuss.elastic.co/t/passing-parameters-to-java-filter-plugin-during-runtime/258062)

<div class="topic-metadata">

**Author:** [@lakechat](https://discuss.elastic.co/u/lakechat)\
**Replies:** 5\
**Last updated:** [December 9, 2020, 10:53pm UTC](https://discuss.elastic.co/t/passing-parameters-to-java-filter-plugin-during-runtime/258062 "2020-12-09T22:53:34Z")

</div>

The Java filter plugin example (https://www.elastic.co/guide/en/logstash/current/java-filter-plugin.html) was called without any inputs because everything is fixed during compilation time. This makes the plugin less gene…

---

## [New to ELK Stack, Logstash Will Not Start - Please Help](https://discuss.elastic.co/t/new-to-elk-stack-logstash-will-not-start-please-help/258172)

<div class="topic-metadata">

**Author:** [@NJMitchell](https://discuss.elastic.co/u/NJMitchell)\
**Replies:** 11\
**Last updated:** [December 9, 2020, 10:52pm UTC](https://discuss.elastic.co/t/new-to-elk-stack-logstash-will-not-start-please-help/258172 "2020-12-09T22:52:47Z")

</div>

Hello elastic community, I'm very new to the ELK stack and am working on getting a production environment up and running. So far I have a four node Elasticsearch cluster running with Kibana. Everything there is working …

---

## [Need help understanding index templates](https://discuss.elastic.co/t/need-help-understanding-index-templates/258127)

<div class="topic-metadata">

**Author:** [@madhan0618](https://discuss.elastic.co/u/madhan0618)\
**Replies:** 3\
**Last updated:** [December 9, 2020, 10:31pm UTC](https://discuss.elastic.co/t/need-help-understanding-index-templates/258127 "2020-12-09T22:31:35Z")

</div>

I have metricbeat installed/set up. I wanted my own index name so i put the below in metricbeat.yml file index: "adm\_jkafka" this gave me an error stating that when i want to use my own index, i need to mention the …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1117)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1119)
