# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1144 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1145 --- ## [Kibana search appearing as json object?](https://discuss.elastic.co/t/kibana-search-appearing-as-json-object/255289)
**Author:** [@sandeep1-0](https://discuss.elastic.co/u/sandeep1-0)\ **Replies:** 4\ **Last updated:** [November 20, 2020, 2:48pm UTC](https://discuss.elastic.co/t/kibana-search-appearing-as-json-object/255289 "2020-11-20T14:48:30Z")
Hi, I have metricbeat data indexing to kibana but the same is appearing as json object object instead of showing it as different field. Is this due to some template issue or missed any setting. Currently coming in the … --- ## [Replicas allocation issue in a hot cold architecture](https://discuss.elastic.co/t/replicas-allocation-issue-in-a-hot-cold-architecture/255953)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 6\ **Last updated:** [November 20, 2020, 2:45pm UTC](https://discuss.elastic.co/t/replicas-allocation-issue-in-a-hot-cold-architecture/255953 "2020-11-20T14:45:29Z")
Hello ! I have the following cluster : node1 with attributes box\_type: hot and zone: zone1 node2 with attributes box\_type: hot and zone: zone1 node3 with attributes box\_type: hot and zone: zone2 node4 with attributes b… --- ## [Grok filter not working](https://discuss.elastic.co/t/grok-filter-not-working/256077)
**Author:** [@Ajinkya\_1](https://discuss.elastic.co/u/Ajinkya_1)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 2:20pm UTC](https://discuss.elastic.co/t/grok-filter-not-working/256077 "2020-11-20T14:20:55Z")
My Grok filter is not working in logstash Even though it is working in grok debugger below is the grok string: \\((?\%{DAY} %{MONTH} %{MONTHNUM} %{TIME} %{YEAR})\\) \\\[(?\(.\*))\\\] \\\[%{DATA:function}\\\] \\(%… --- ## [How can I create the visualization of filling a glass regarding margins and the current value](https://discuss.elastic.co/t/how-can-i-create-the-visualization-of-filling-a-glass-regarding-margins-and-the-current-value/255701)
**Author:** [@borisllona](https://discuss.elastic.co/u/borisllona)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 1:48pm UTC](https://discuss.elastic.co/t/how-can-i-create-the-visualization-of-filling-a-glass-regarding-margins-and-the-current-value/255701 "2020-11-20T13:48:16Z")
I need to create the visualization of filling a glass regarding margins with the current value, but I can't find any tutorial on how to do that. --- ## [How to create a field that indicates value gain (for example temperature) compared to yesterday](https://discuss.elastic.co/t/how-to-create-a-field-that-indicates-value-gain-for-example-temperature-compared-to-yesterday/255699)
**Author:** [@borisllona](https://discuss.elastic.co/u/borisllona)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 1:47pm UTC](https://discuss.elastic.co/t/how-to-create-a-field-that-indicates-value-gain-for-example-temperature-compared-to-yesterday/255699 "2020-11-20T13:47:47Z")
So I need a text that could say, Today is +3°C more than yesterday. Thanks in advance --- ## [Matching multiple phrases to specific fields in Nest](https://discuss.elastic.co/t/matching-multiple-phrases-to-specific-fields-in-nest/256124)
**Author:** [@adiksl](https://discuss.elastic.co/u/adiksl)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 1:47pm UTC](https://discuss.elastic.co/t/matching-multiple-phrases-to-specific-fields-in-nest/256124 "2020-11-20T13:47:19Z")
I have built an application in C# which searches my Elasticsearch documents and this all works fine using this code.... List\ resultsList = Client.SearchAsync\(s =\> s .From(0) .Take(noRows) … --- ## [No cached mapping for this field after upgrading to 7.10](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-after-upgrading-to-7-10/256123)
**Author:** [@datawrangler](https://discuss.elastic.co/u/datawrangler)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 1:29pm UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-after-upgrading-to-7-10/256123 "2020-11-20T13:29:35Z")
Hello all, I had some issues when upgrading to 7.9.3 that I had to upgrade to 7.10 and unfortunately I had to delete my "filebeat-\*" index pattern. After recreating the filebeat-\* index pattern, I am now unable to upda… --- ## [How can rename logstash fields](https://discuss.elastic.co/t/how-can-rename-logstash-fields/254867)
**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\ **Replies:** 6\ **Last updated:** [November 20, 2020, 1:17pm UTC](https://discuss.elastic.co/t/how-can-rename-logstash-fields/254867 "2020-11-20T13:17:26Z")
rename fields: Thanks --- ## [Rollup Fail: Existing mapping for field must be of type object](https://discuss.elastic.co/t/rollup-fail-existing-mapping-for-field-must-be-of-type-object/256122)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 1:13pm UTC](https://discuss.elastic.co/t/rollup-fail-existing-mapping-for-field-must-be-of-type-object/256122 "2020-11-20T13:13:00Z")
Our rollup job will not run and we are getting the following error log: \[991\]: index \[issues-prod1\], type \[\_doc\], id \[issues-prod1$ONEl7qIplbk6ayAuSYbUkA\], message \[MapperParsingException\[Could not dynamically add mappi… --- ## [Master not discovered or elected yet, an election requires 2 nodes with ids](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/256116)
**Author:** [@xziten](https://discuss.elastic.co/u/xziten)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 12:42pm UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/256116 "2020-11-20T12:42:00Z")
Hi, I'm trying to setup an elasticsearch Cluster. I know that this is a common topic but I would like to understand what I'm doing wrong. Here are some informations : OS : RHEL 7.8 ES Version : 7.10 Nodes : 3 Mast… --- ## [APM - distirubted tracing in microservice-architectures](https://discuss.elastic.co/t/apm-distirubted-tracing-in-microservice-architectures/255970)
**Author:** [@ChristianB](https://discuss.elastic.co/u/ChristianB)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 11:47am UTC](https://discuss.elastic.co/t/apm-distirubted-tracing-in-microservice-architectures/255970 "2020-11-20T11:47:09Z")
Hello everyone. I really like APM and what you can do with it, but in my opinion there is something missing when it comes to distributed tracing in a microservices architeture. This is due to the fact, that traces are n… --- ## [How to show fields value on Data table Columns?](https://discuss.elastic.co/t/how-to-show-fields-value-on-data-table-columns/255964)
**Author:** [@rmrodrigues](https://discuss.elastic.co/u/rmrodrigues)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 11:11am UTC](https://discuss.elastic.co/t/how-to-show-fields-value-on-data-table-columns/255964 "2020-11-20T11:11:05Z")
Hi there, I'm a newbie here on Elastic. Just to give you some context about my journey here, I'm trying elastic to build a business analytics system. I have an index where the document is something like this: { … --- ## [How to change the display name of elastic field in kibana dashboard?](https://discuss.elastic.co/t/how-to-change-the-display-name-of-elastic-field-in-kibana-dashboard/254380)
**Author:** [@ramashish](https://discuss.elastic.co/u/ramashish)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 10:56am UTC](https://discuss.elastic.co/t/how-to-change-the-display-name-of-elastic-field-in-kibana-dashboard/254380 "2020-11-20T10:56:06Z")
We are facing the following two issues in Kibana(v7.6) while creating a dashboard: How to change the display name of field in kibana. Usually in elastic search we have created fields like docketNo,bookingDate,actualWe… --- ## [Unable to start Elastic search when i delete jar from lang-mustache and place it in lib](https://discuss.elastic.co/t/unable-to-start-elastic-search-when-i-delete-jar-from-lang-mustache-and-place-it-in-lib/256090)
**Author:** [@rakeshdkaatkar](https://discuss.elastic.co/u/rakeshdkaatkar)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 9:06am UTC](https://discuss.elastic.co/t/unable-to-start-elastic-search-when-i-delete-jar-from-lang-mustache-and-place-it-in-lib/256090 "2020-11-20T09:06:21Z")
Im getting below error java.lang.IllegalStateException: Plugin \[lang-mustache\] must reference a class loader local Plugin class \[org.elasticsearch.script.mustache.MustachePlugin\] (class loader \[sun.misc.Launcher$AppClas… --- ## [Managing "is\_write\_index"](https://discuss.elastic.co/t/managing-is-write-index/256089)
**Author:** [@koos](https://discuss.elastic.co/u/koos)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 8:50am UTC](https://discuss.elastic.co/t/managing-is-write-index/256089 "2020-11-20T08:50:38Z")
Hi there, We've created a Lambda function (python) in order to steam logs from AWS CloudWatch to our ELK stack. I'm also making use of life cycle policies to rotate the index on a specific size and delete after the spe… --- ## [Find documents which is older then specified date range based on list of ids](https://discuss.elastic.co/t/find-documents-which-is-older-then-specified-date-range-based-on-list-of-ids/255843)
**Author:** [@sibasish.palo](https://discuss.elastic.co/u/sibasish.palo)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 8:23am UTC](https://discuss.elastic.co/t/find-documents-which-is-older-then-specified-date-range-based-on-list-of-ids/255843 "2020-11-20T08:23:13Z")
After searching for sometime and seeing some answer not able to quite figure out the query for my requirement My requirement is i have a list of document ids, what i need to find is the documents which are older than a … --- ## [Add \_routing via document not query string](https://discuss.elastic.co/t/add-routing-via-document-not-query-string/255458)
**Author:** [@pcb](https://discuss.elastic.co/u/pcb)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 8:11am UTC](https://discuss.elastic.co/t/add-routing-via-document-not-query-string/255458 "2020-11-20T08:11:08Z")
Hi ya, I'm attempting to use Elasticsearch custom routing in conjunction with Confluent's Kafka Elasticsearch Sink. Every thing is going well until I've run into custom routing which it doesn't seem to support. I can't… --- ## [Ingest pipeline with enrich policy that matches by \_id - not supported?](https://discuss.elastic.co/t/ingest-pipeline-with-enrich-policy-that-matches-by-id-not-supported/255543)
**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 8:08am UTC](https://discuss.elastic.co/t/ingest-pipeline-with-enrich-policy-that-matches-by-id-not-supported/255543 "2020-11-20T08:08:41Z")
Hi, I'd like to deduplicate data. We're hashing a subset of fields of the events into the document identifier. To do this in an ingest pipeline, I'd like to have an enrich policy like so: PUT /\_enrich/policy/event-… --- ## [Logstash on cifs mounted windows drive](https://discuss.elastic.co/t/logstash-on-cifs-mounted-windows-drive/256070)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 7:14am UTC](https://discuss.elastic.co/t/logstash-on-cifs-mounted-windows-drive/256070 "2020-11-20T07:14:45Z")
I have to pull in some logs which will be dumped on a shared windows drive. The files are small. But their number will be high. There is no chance of files appearing again once they have been processed and deleted. The… --- ## [Split is not working on multivalued string fields](https://discuss.elastic.co/t/split-is-not-working-on-multivalued-string-fields/256068)
**Author:** [@Abdul\_Aziz](https://discuss.elastic.co/u/Abdul_Aziz)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 7:06am UTC](https://discuss.elastic.co/t/split-is-not-working-on-multivalued-string-fields/256068 "2020-11-20T07:06:08Z")
I have record like below in my text file; id=1 name=Paint category=Decorative color=2345|red|5|| color=123|green|4|| color=345|yellow|8|| REC$$ I wanted output (stdout) as below using logstash configuration; "id… --- ## [Constant session timeouts in Kibana 7.10.0 on OpenShift but not with 7.9.3](https://discuss.elastic.co/t/constant-session-timeouts-in-kibana-7-10-0-on-openshift-but-not-with-7-9-3/256000)
**Author:** [@ngilmore](https://discuss.elastic.co/u/ngilmore)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 6:52am UTC](https://discuss.elastic.co/t/constant-session-timeouts-in-kibana-7-10-0-on-openshift-but-not-with-7-9-3/256000 "2020-11-20T06:52:30Z")
I have installed a secured Elastic 7.10.0 cluster (3 master, 2 client, 5 data nodes) on OpenShift and added Kibana (2 node cluster). However, with Kibana 7.10.0 installed it constantly experiences session timeouts. I h… --- ## [Logstash Grok filters, split and path](https://discuss.elastic.co/t/logstash-grok-filters-split-and-path/256015)
**Author:** [@Priyanka3](https://discuss.elastic.co/u/Priyanka3)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 5:46am UTC](https://discuss.elastic.co/t/logstash-grok-filters-split-and-path/256015 "2020-11-20T05:46:58Z")
Hi, I am new to Elastic search. So, can anyone explain me the difference between Split, xpath and Grok filters? and under what situation do we use these? Thanks, Priyanka --- ## [Having read-only shard greater than 50 GB](https://discuss.elastic.co/t/having-read-only-shard-greater-than-50-gb/256061)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 5:32am UTC](https://discuss.elastic.co/t/having-read-only-shard-greater-than-50-gb/256061 "2020-11-20T05:32:39Z")
I recently re-indexed past 18 months of day-wise indices (18 months \*30 days = 540 indices with 1 primary shard per index) into 18 monthly indices (18 indices with 12 primary shards per index). No indexing happens on th… --- ## [Modsecurity Log Grok Filter](https://discuss.elastic.co/t/modsecurity-log-grok-filter/256057)
**Author:** [@reza\_naipospos](https://discuss.elastic.co/u/reza_naipospos)\ **Replies:** 10\ **Last updated:** [November 20, 2020, 4:21am UTC](https://discuss.elastic.co/t/modsecurity-log-grok-filter/256057 "2020-11-20T04:21:28Z")
I make grok filter with this condition but noting show anything on grok debugger. Log format is Modsecurity audit log (?%{YEAR}\[./\]%{MONTHNUM}\[./\]%{MONTHDAY} %{TIME}) \[%{LOGLEVEL:severity}\] %{POSINT:pid}#%{NUMBER:thread… --- ## [Non-negative Serial Diff for a "counter" that resets to 0 from time to time](https://discuss.elastic.co/t/non-negative-serial-diff-for-a-counter-that-resets-to-0-from-time-to-time/256046)
**Author:** [@mludvig](https://discuss.elastic.co/u/mludvig)\ **Replies:** 2\ **Last updated:** [November 19, 2020, 11:35pm UTC](https://discuss.elastic.co/t/non-negative-serial-diff-for-a-counter-that-resets-to-0-from-time-to-time/256046 "2020-11-19T23:35:48Z")
I'm collecting stats from some industrial process that has variable number of workers that produce some output at a variable rate, that is accumulating to a balance queue that from time to time is flushed and reset to 0. … --- ## [Heat Map visualization of Azure DevOps Pipeline build](https://discuss.elastic.co/t/heat-map-visualization-of-azure-devops-pipeline-build/255868)
**Author:** [@sachin1112](https://discuss.elastic.co/u/sachin1112)\ **Replies:** 1\ **Last updated:** [November 19, 2020, 9:37pm UTC](https://discuss.elastic.co/t/heat-map-visualization-of-azure-devops-pipeline-build/255868 "2020-11-19T21:37:33Z")
Hello Experts, we are trying to create a Heat map to reflect last 10 pipeline builds for environments (Dev, Test, Prod) In the metric section we had chosen the count , in the x axis we had taken the Date histogram an… --- ## [Logstash.bat generates new .jar files every time it is run](https://discuss.elastic.co/t/logstash-bat-generates-new-jar-files-every-time-it-is-run/255747)
**Author:** [@Mefhisto1](https://discuss.elastic.co/u/Mefhisto1)\ **Replies:** 5\ **Last updated:** [November 19, 2020, 9:01pm UTC](https://discuss.elastic.co/t/logstash-bat-generates-new-jar-files-every-time-it-is-run/255747 "2020-11-19T21:01:10Z")
Hi, I'm running logstash every minute via a task scheduler. The task is to call logstash.bat with the appropriate .config file. This is done every minute. Logstash is generating a lot of files in TEMP folder every ti… --- ## [Kibana server is not ready after upgrading to 7.10](https://discuss.elastic.co/t/kibana-server-is-not-ready-after-upgrading-to-7-10/256029)
**Author:** [@patrickr](https://discuss.elastic.co/u/patrickr)\ **Replies:** 6\ **Last updated:** [November 19, 2020, 8:19pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-after-upgrading-to-7-10/256029 "2020-11-19T20:19:34Z")
Hello, We seem to constantly have issues when attempting to upgrade. This time, after the upgrade is complete and the server has rebooted, we simply get a kibana is not ready message. Can someone provide any informati… --- ## ["error":{"type":"missing\_references","references":\[{"type":"search","id":"dfd3ea60-0154-11eb-8672-4ba31b1f4ee1"}\]](https://discuss.elastic.co/t/error-type-missing-references-references-type-search-id-dfd3ea60-0154-11eb-8672-4ba31b1f4ee1/255979)
**Author:** [@PADMAVATHI\_GUNTURU](https://discuss.elastic.co/u/PADMAVATHI_GUNTURU)\ **Replies:** 3\ **Last updated:** [November 19, 2020, 8:09pm UTC](https://discuss.elastic.co/t/error-type-missing-references-references-type-search-id-dfd3ea60-0154-11eb-8672-4ba31b1f4ee1/255979 "2020-11-19T20:09:46Z")
Hi, I'm importing a dashboard from one kibana to another kibana, While importing I'm got the error "missing\_references". Here dashboard having 8 visualizations. Here I have a doubt that, when importing the dashboard, the… --- ## [Calculating MTTR(Mean Time to Recovery)](https://discuss.elastic.co/t/calculating-mttr-mean-time-to-recovery/255741)
**Author:** [@sam7](https://discuss.elastic.co/u/sam7)\ **Replies:** 1\ **Last updated:** [November 19, 2020, 7:13pm UTC](https://discuss.elastic.co/t/calculating-mttr-mean-time-to-recovery/255741 "2020-11-19T19:13:06Z")
I have an Index having build failed and succeeded status with respective time stamp. I want to calculate MTTR(Mean Time to Recovery) using scripted field or any other option available. Any suggestions? [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1143) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1145)