# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1121 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1122 --- ## [Find hosts that do not have any documents matching a query](https://discuss.elastic.co/t/find-hosts-that-do-not-have-any-documents-matching-a-query/257871)
**Author:** [@jmcclelland](https://discuss.elastic.co/u/jmcclelland)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 9:42pm UTC](https://discuss.elastic.co/t/find-hosts-that-do-not-have-any-documents-matching-a-query/257871 "2020-12-08T21:42:58Z")
Is it possible to create a dashboard that lists all unique hosts that do not have any documents matching a particular query? Thanks for any tips you might have! --- ## [If you save dashboard as json, does it save visualization as well?](https://discuss.elastic.co/t/if-you-save-dashboard-as-json-does-it-save-visualization-as-well/258052)
**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 9:34pm UTC](https://discuss.elastic.co/t/if-you-save-dashboard-as-json-does-it-save-visualization-as-well/258052 "2020-12-08T21:34:07Z")
Hi. I am trying to create development environment and production environment for Kibana dashboard (two separate VMs). Idea is to work on dev environment, export json -\> import json in production environment. If I work … --- ## [Logstash filter for firewall packet drops](https://discuss.elastic.co/t/logstash-filter-for-firewall-packet-drops/258042)
**Author:** [@hassan.rana](https://discuss.elastic.co/u/hassan.rana)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 8:48pm UTC](https://discuss.elastic.co/t/logstash-filter-for-firewall-packet-drops/258042 "2020-12-08T20:48:03Z")
I am trying to parse logs from an aggregate syslog server to logstash. I have been successful in shipping the logs from the syslog server to logstash. I can see multiple fields from the log that are being setup like (hos… --- ## [Sorting by something other than timestamp in Logs app](https://discuss.elastic.co/t/sorting-by-something-other-than-timestamp-in-logs-app/257897)
**Author:** [@ippolito](https://discuss.elastic.co/u/ippolito)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 7:13pm UTC](https://discuss.elastic.co/t/sorting-by-something-other-than-timestamp-in-logs-app/257897 "2020-12-08T19:13:23Z")
Hi. Is there a way to sort by a different field in the Observability/Logs app? Since we have multiple logging servers feeding a kafka queue, our logs don't necessarily arrive in the same order they're generated. We'd lik… --- ## [org.elasticsearch.action.ActionRequestValidationException: Validation Failed: 1: id is missing](https://discuss.elastic.co/t/org-elasticsearch-action-actionrequestvalidationexception-validation-failed-1-id-is-missing/257084)
**Author:** [@andy4195](https://discuss.elastic.co/u/andy4195)\ **Replies:** 4\ **Last updated:** [December 8, 2020, 6:40pm UTC](https://discuss.elastic.co/t/org-elasticsearch-action-actionrequestvalidationexception-validation-failed-1-id-is-missing/257084 "2020-12-08T18:40:05Z")
При операции Bulk проиходит данная ошибка. Не очень понятно почему? Это ошибка потому что id пустой или не находит данное ID в БД? Там две операции, одна с добавление записи в в один индекс, вторая с удаление записи из… --- ## [Dashboard filter does not include fields from the index used in Vega visualization](https://discuss.elastic.co/t/dashboard-filter-does-not-include-fields-from-the-index-used-in-vega-visualization/258033)
**Author:** [@ege](https://discuss.elastic.co/u/ege)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 6:34pm UTC](https://discuss.elastic.co/t/dashboard-filter-does-not-include-fields-from-the-index-used-in-vega-visualization/258033 "2020-12-08T18:34:12Z")
Hi, I am trying to add an on-click signal to add a filter when clicked on each sector of a pie-chart using Vega. Even though the filter is added, it is not affected on the chart and shows an error within the filter. T… --- ## [Currency Format](https://discuss.elastic.co/t/currency-format/257999)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 9\ **Last updated:** [December 8, 2020, 4:23pm UTC](https://discuss.elastic.co/t/currency-format/257999 "2020-12-08T16:23:48Z")
Hi all, My data in Elasticsearch index are numbers (integer, long, float) and amounts in euros € currency whitout affecting those are just a number. I would like to display all amounts with euro € signe. Unfortunately… --- ## [Not able to see latest logs in discover in kibana](https://discuss.elastic.co/t/not-able-to-see-latest-logs-in-discover-in-kibana/257688)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 10\ **Last updated:** [December 8, 2020, 5:23pm UTC](https://discuss.elastic.co/t/not-able-to-see-latest-logs-in-discover-in-kibana/257688 "2020-12-08T17:23:20Z")
Hi Team, I am not able to see latest logs in discover tab in kibana. the last logs I can see is of 1 Dec 2020 but not after that. I can see folders getting created till today in /opt/elasticsearch/nodes/0/indices/, the… --- ## [Auto-logout in Elastic managed service Kibana](https://discuss.elastic.co/t/auto-logout-in-elastic-managed-service-kibana/255092)
**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\ **Replies:** 8\ **Last updated:** [December 8, 2020, 5:09pm UTC](https://discuss.elastic.co/t/auto-logout-in-elastic-managed-service-kibana/255092 "2020-12-08T17:09:11Z")
Hi, I'm presenting a Kibana dashboard on television and after like 6 hours the session automatically logouts and requires to log in again with username and password. I'd like to disable the session from disconnection o… --- ## [Elasticsearch Vulnerabilities](https://discuss.elastic.co/t/elasticsearch-vulnerabilities/258021)
**Author:** [@TerryQ](https://discuss.elastic.co/u/TerryQ)\ **Replies:** 6\ **Last updated:** [December 8, 2020, 4:55pm UTC](https://discuss.elastic.co/t/elasticsearch-vulnerabilities/258021 "2020-12-08T16:55:03Z")
Do these security vulnerabilities apply to the OSS distributions of Elasticsearch? From https://www.elastic.co/community/security/ Thanks --- ## [Inconsistency in no of total hits in results](https://discuss.elastic.co/t/inconsistency-in-no-of-total-hits-in-results/258023)
**Author:** [@Paresh\_Vaniya](https://discuss.elastic.co/u/Paresh_Vaniya)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 4:47pm UTC](https://discuss.elastic.co/t/inconsistency-in-no-of-total-hits-in-results/258023 "2020-12-08T16:47:34Z")
Hi All, I am using below query for one of the our use cases & we are observing weird thing on total hits count - means assume I hit the below request first time then total hits in result would be 64 and if I hit second … --- ## [Fortigate parsing logs](https://discuss.elastic.co/t/fortigate-parsing-logs/258028)
**Author:** [@sg\_tanoe](https://discuss.elastic.co/u/sg_tanoe)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 4:42pm UTC](https://discuss.elastic.co/t/fortigate-parsing-logs/258028 "2020-12-08T16:42:28Z")
I would like to know how can I adapt log fields from a fortigate? In case, I want to get a result with a variety of field numbers over multiple lines. --- ## [Elasticsearch Index with INDEX\_CREATED status progress](https://discuss.elastic.co/t/elasticsearch-index-with-index-created-status-progress/257872)
**Author:** [@mohamedshokry](https://discuss.elastic.co/u/mohamedshokry)\ **Replies:** 7\ **Last updated:** [December 8, 2020, 4:30pm UTC](https://discuss.elastic.co/t/elasticsearch-index-with-index-created-status-progress/257872 "2020-12-08T16:30:42Z")
Hello, I have a simple question: Is there an API to show current progress on an Elasticsearch index during different phases like 'INDEX\_CREATED'? I know that there is an API to check current recovery, but since the ind… --- ## [Do search templates improve performance?](https://discuss.elastic.co/t/do-search-templates-improve-performance/258018)
**Author:** [@kartoffelsack](https://discuss.elastic.co/u/kartoffelsack)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 4:08pm UTC](https://discuss.elastic.co/t/do-search-templates-improve-performance/258018 "2020-12-08T16:08:16Z")
Coming from a relational background I know that using precompiled queries can also help boosting database query performance. To my understanding search templates are the the equivalent to precompiled queries. Though al… --- ## [Kibana query to remote cluster causes null pointer exception](https://discuss.elastic.co/t/kibana-query-to-remote-cluster-causes-null-pointer-exception/258024)
**Author:** [@bwink](https://discuss.elastic.co/u/bwink)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 4:02pm UTC](https://discuss.elastic.co/t/kibana-query-to-remote-cluster-causes-null-pointer-exception/258024 "2020-12-08T16:02:44Z")
Cluster#1 7.10.0 Kibana#1 7.10.0 Cluster#2 7.9.2 Kibana#2 7.9.2 Problem#1 I have a local Kibana (kibana#1) to a local cluster (cluster#1) and everything works perfectly on querying an index pattern. I set up a diffe… --- ## [Kafka monitoring using JMX input plugin](https://discuss.elastic.co/t/kafka-monitoring-using-jmx-input-plugin/257936)
**Author:** [@madhan0618](https://discuss.elastic.co/u/madhan0618)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 5:33am UTC](https://discuss.elastic.co/t/kafka-monitoring-using-jmx-input-plugin/257936 "2020-12-08T05:33:05Z")
I read some tech notes on using jolokio jars to get logstash to consume JMX data from kafka and send it ES. Also came across the JMX input plugin. Installed and configured it and I am able to get the JMX metrics from ka… --- ## [Handling MQRFH2 header in logstash](https://discuss.elastic.co/t/handling-mqrfh2-header-in-logstash/258016)
**Author:** [@hassan2sn](https://discuss.elastic.co/u/hassan2sn)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 3:10pm UTC](https://discuss.elastic.co/t/handling-mqrfh2-header-in-logstash/258016 "2020-12-08T15:10:10Z")
Hi Guys, Can you please suggest , how to handle incoming MQRFH2 header in logstash, this is going to the dead letter queue, whenever there is an MQRFH2 / usr folder header in request --- ## [LogStash - Upload using MySQL](https://discuss.elastic.co/t/logstash-upload-using-mysql/257604)
**Author:** [@nottyheadedboss](https://discuss.elastic.co/u/nottyheadedboss)\ **Replies:** 12\ **Last updated:** [December 8, 2020, 2:52pm UTC](https://discuss.elastic.co/t/logstash-upload-using-mysql/257604 "2020-12-08T14:52:52Z")
I am new to the world of ELK and trying to learn. But Logstash is proving to be a big hurdle. I tried loading data from a CSV file and that caused lot of issues and I have been unable to upload using CSV. So I tried a ne… --- ## [Do I need a Gold license if I am using the Elastic Cloud Gold Subscription?](https://discuss.elastic.co/t/do-i-need-a-gold-license-if-i-am-using-the-elastic-cloud-gold-subscription/257998)
**Author:** [@kunalyadav](https://discuss.elastic.co/u/kunalyadav)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 1:47pm UTC](https://discuss.elastic.co/t/do-i-need-a-gold-license-if-i-am-using-the-elastic-cloud-gold-subscription/257998 "2020-12-08T13:47:38Z")
Is it possible to run an ELK deployment on Elastic Cloud with the Gold subscription without having the Gold license? I have seen that for self-managed ELK we need to get the Gold license. Is that the same case with Ela… --- ## [Way to send dictionary file to multiple nodes in multiple server machines](https://discuss.elastic.co/t/way-to-send-dictionary-file-to-multiple-nodes-in-multiple-server-machines/257948)
**Author:** [@Dahea\_Moon](https://discuss.elastic.co/u/Dahea_Moon)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 1:38pm UTC](https://discuss.elastic.co/t/way-to-send-dictionary-file-to-multiple-nodes-in-multiple-server-machines/257948 "2020-12-08T13:38:00Z")
Hello, Elastic Team. I'm using one cluster with three nodes in two server machines. Is there any method to update user / synonym dictionary file at once? Unfortunately, machines cannot use shared folder. For now, we … --- ## [Elasticsearch query search sort return null](https://discuss.elastic.co/t/elasticsearch-query-search-sort-return-null/256064)
**Author:** [@magesh\_kumar](https://discuss.elastic.co/u/magesh_kumar)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-query-search-sort-return-null/256064 "2020-12-08T10:19:25Z")
I'm recently upgrade elasticsearch to 7.9.3 version. All are good but sort not working in one of my index called user\_products. searched query curl -X GET "localhost:9200/user\_products/\_search?pretty" -H 'Content-Typ… --- ## [Communication between ruby and translate plugin in logstash filter](https://discuss.elastic.co/t/communication-between-ruby-and-translate-plugin-in-logstash-filter/257828)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 4\ **Last updated:** [December 8, 2020, 1:01pm UTC](https://discuss.elastic.co/t/communication-between-ruby-and-translate-plugin-in-logstash-filter/257828 "2020-12-08T13:01:00Z")
Hi all, Do you have any idea or example how in ruby plugin (in logstash filter) invoke translate plugin and then collect and use the translated data again in ruby plugin? Thank. Best regards --- ## [Logstash filter error "mapper \[@version\] cannot be changed from type \[keyword\] to \[text\]"](https://discuss.elastic.co/t/logstash-filter-error-mapper-version-cannot-be-changed-from-type-keyword-to-text/257409)
**Author:** [@rrcoudian](https://discuss.elastic.co/u/rrcoudian)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 12:05pm UTC](https://discuss.elastic.co/t/logstash-filter-error-mapper-version-cannot-be-changed-from-type-keyword-to-text/257409 "2020-12-08T12:05:48Z")
Greetings, and thank you in advance for your support! Could you please help us with the syntax of our ES 7.10 logstash.conf file to parse an application log file via filebeat that was tested on ES 6.6, but we are now us… --- ## [Adding body in elastic heartbeat configuration](https://discuss.elastic.co/t/adding-body-in-elastic-heartbeat-configuration/257958)
**Author:** [@amr\_ibrahim](https://discuss.elastic.co/u/amr_ibrahim)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 11:09am UTC](https://discuss.elastic.co/t/adding-body-in-elastic-heartbeat-configuration/257958 "2020-12-08T11:09:11Z")
Hello Kindly we need to add api to elastic heartbeat configuration and we need to pass post body json object in the configuration so how can we do that http://url-api { "GetFees": { "CRNumber": "5555555", "Transaction… --- ## [How often does logstash send data to google cloud storage?](https://discuss.elastic.co/t/how-often-does-logstash-send-data-to-google-cloud-storage/257973)
**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 11:06am UTC](https://discuss.elastic.co/t/how-often-does-logstash-send-data-to-google-cloud-storage/257973 "2020-12-08T11:06:03Z")
Config pipeline.yml output { stdout { codec =\> rubydebug } google\_cloud\_storage { bucket =\> "my\_nginx" json\_key\_file =\> "/my/secret/path/credentials.json" temp\_directory… --- ## [How to show last n records in ascending order in kibana dashboard](https://discuss.elastic.co/t/how-to-show-last-n-records-in-ascending-order-in-kibana-dashboard/257323)
**Author:** [@ajain16](https://discuss.elastic.co/u/ajain16)\ **Replies:** 7\ **Last updated:** [December 8, 2020, 10:49am UTC](https://discuss.elastic.co/t/how-to-show-last-n-records-in-ascending-order-in-kibana-dashboard/257323 "2020-12-08T10:49:22Z")
Hi All, We have data and time field in X axis and we are showing data on X axis from today to today+25 records. e.g 3Dec, 2 Dec, 1 Dec, 30 Nov, 29 Nov etc. We need to show total 25 data count in reverse order. e.g 25 … --- ## [How to change my data to kv in Logstash](https://discuss.elastic.co/t/how-to-change-my-data-to-kv-in-logstash/257449)
**Author:** [@Mick1](https://discuss.elastic.co/u/Mick1)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 10:15am UTC](https://discuss.elastic.co/t/how-to-change-my-data-to-kv-in-logstash/257449 "2020-12-08T10:15:56Z")
The source data format cannot be changed First stroke： {value=12123, key=ABC2}, {value=2223, key=AB21C}, {value=1243, key=A4B1C}, {value=15223, key=AB35C}, {value=122123, key=A24BC}, {value=122213, key=AB33C}, {value=2… --- ## [Exisisting field doesn't show on Dashboard filters, but it does in discover and visualizations](https://discuss.elastic.co/t/exisisting-field-doesnt-show-on-dashboard-filters-but-it-does-in-discover-and-visualizations/257691)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 10:14am UTC](https://discuss.elastic.co/t/exisisting-field-doesnt-show-on-dashboard-filters-but-it-does-in-discover-and-visualizations/257691 "2020-12-08T10:14:55Z")
Hi a specific field doesn't show on the filter of the dashboards, but it exists and can be found in discovery and in the visualizations I have reloaded the index pattern, checked his existance through a month, but … --- ## [Improving search query time](https://discuss.elastic.co/t/improving-search-query-time/257880)
**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 8:39am UTC](https://discuss.elastic.co/t/improving-search-query-time/257880 "2020-12-08T08:39:19Z")
Hi, Setup: Elasticseach 6.3.0, 2 shards, 4 replicas on 5 dedicated data nodes. I have a 10,000,000 products feed index - each document represent a product and look like: { "id": 123, "active": true… --- ## [Kibana 7.10 Dashboard Drilldown - filter on fewer values in destination dashbaord)](https://discuss.elastic.co/t/kibana-7-10-dashboard-drilldown-filter-on-fewer-values-in-destination-dashbaord/257821)
**Author:** [@AndyH](https://discuss.elastic.co/u/AndyH)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 9:16am UTC](https://discuss.elastic.co/t/kibana-7-10-dashboard-drilldown-filter-on-fewer-values-in-destination-dashbaord/257821 "2020-12-08T09:16:21Z")
I've been playing with the new Create Drilldown feature available in Kibana 7.10 dashboards. On the parent dashboard I have a stacked horizontal bar chart: The y-axis (i.e. bar label) is a "Site Name" The x-axis (i.e.… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1120) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1122)