# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1190 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1191 --- ## [Could Not index event to ElasticSearch](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/250027)
**Author:** [@dhoman](https://discuss.elastic.co/u/dhoman)\ **Replies:** 37\ **Last updated:** [October 16, 2020, 7:05pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/250027 "2020-10-16T19:05:06Z")
I am new to Elasticsearch, and I had been running Elasticsearch, Kibana, Filebeat, and Zabbix Server. My visualization stopped on August 28. I can pull visualization before that just fine. But when I try to watch curren… --- ## [Suggestions on what Large test cluster footprint might look like?](https://discuss.elastic.co/t/suggestions-on-what-large-test-cluster-footprint-might-look-like/252388)
**Author:** [@rgeisman](https://discuss.elastic.co/u/rgeisman)\ **Replies:** 0\ **Last updated:** [October 16, 2020, 6:54pm UTC](https://discuss.elastic.co/t/suggestions-on-what-large-test-cluster-footprint-might-look-like/252388 "2020-10-16T18:54:24Z")
Hello all. Great conference by the way. Excellent question answer sessions and breakout talks. One question I wanted to ask is that I have setup an ELK stack to monitor 1000+ nodes with filebeat, metricbeat, Suricata and… --- ## [Elasticsearch connection idle timeout](https://discuss.elastic.co/t/elasticsearch-connection-idle-timeout/252283)
**Author:** [@lnitin](https://discuss.elastic.co/u/lnitin)\ **Replies:** 7\ **Last updated:** [October 16, 2020, 6:44pm UTC](https://discuss.elastic.co/t/elasticsearch-connection-idle-timeout/252283 "2020-10-16T18:44:58Z")
Hello, Elasticsearch server is rejecting any communication after certain amount of time interval if there is no activity from source server and connection is getting lost.? Can connection be open at all times, Is there … --- ## [Create metric graph, line graph with timetaken and want to group it by two fields (A, B)](https://discuss.elastic.co/t/create-metric-graph-line-graph-with-timetaken-and-want-to-group-it-by-two-fields-a-b/251730)
**Author:** [@Lata\_Pukale](https://discuss.elastic.co/u/Lata_Pukale)\ **Replies:** 3\ **Last updated:** [October 16, 2020, 6:38pm UTC](https://discuss.elastic.co/t/create-metric-graph-line-graph-with-timetaken-and-want-to-group-it-by-two-fields-a-b/251730 "2020-10-16T18:38:32Z")
I want to get metric and line graph visualization where it displays average timetaken by A and B where values of A can be ac,au ,ad and B can be bs,bc,bu So when I try to get metric visualization with Metric Average Ti… --- ## [Index suck in forcemerge](https://discuss.elastic.co/t/index-suck-in-forcemerge/252375)
**Author:** [@chaybird001](https://discuss.elastic.co/u/chaybird001)\ **Replies:** 0\ **Last updated:** [October 16, 2020, 5:08pm UTC](https://discuss.elastic.co/t/index-suck-in-forcemerge/252375 "2020-10-16T17:08:36Z")
Hi Everyone, I attempted to force merge an index, but whenever I \_cat/shards, the index is stuck at forcemerge. How do I remove forcemerge from the index? Thanks, --- ## [BUG assigning ILM policy to \_index\_template](https://discuss.elastic.co/t/bug-assigning-ilm-policy-to-index-template/252034)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 4\ **Last updated:** [October 16, 2020, 5:06pm UTC](https://discuss.elastic.co/t/bug-assigning-ilm-policy-to-index-template/252034 "2020-10-16T17:06:27Z")
How I can assign ILM Policy to \_index\_template I found this tutorial: I have version 7.9 and in older version (\_template) there was a button add policy to index template in recent version 7.9 \_index\_template is not… --- ## [Search\_phase\_execution\_exception all shards failed (filebeat + netflow)](https://discuss.elastic.co/t/search-phase-execution-exception-all-shards-failed-filebeat-netflow/252372)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 0\ **Last updated:** [October 16, 2020, 4:56pm UTC](https://discuss.elastic.co/t/search-phase-execution-exception-all-shards-failed-filebeat-netflow/252372 "2020-10-16T16:56:17Z")
Hello , I know it is a well known issue , but after looking on others solutions can not solve it. Im running filebeat with netflow module. It was working ok , but now I have this meesage on discover kibana interface: … --- ## [Alphabetically sorting + aggregation ElasticSearch](https://discuss.elastic.co/t/alphabetically-sorting-aggregation-elasticsearch/251414)
**Author:** [@het](https://discuss.elastic.co/u/het)\ **Replies:** 8\ **Last updated:** [October 16, 2020, 4:34pm UTC](https://discuss.elastic.co/t/alphabetically-sorting-aggregation-elasticsearch/251414 "2020-10-16T16:34:13Z")
Hi team, I am using aggregation to get grouped records. I am not able to sort the buckets. Dummy Data : { "\_index": "testing-aggregation", "\_type": "employee", "\_id": "emp001\_local000000000000001", "\_s… --- ## [Large composite agg + sorting](https://discuss.elastic.co/t/large-composite-agg-sorting/252126)
**Author:** [@joropito](https://discuss.elastic.co/u/joropito)\ **Replies:** 7\ **Last updated:** [October 16, 2020, 4:19pm UTC](https://discuss.elastic.co/t/large-composite-agg-sorting/252126 "2020-10-16T16:19:21Z")
Composite aggregation doesn't work very well with bucket\_sort aggregation. I know this was talked and explained lot of times. My scenario works with a composite aggregation on few fields, some metrics inside (max, min,… --- ## [Elastic stack basic edition and login security](https://discuss.elastic.co/t/elastic-stack-basic-edition-and-login-security/252364)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 1\ **Last updated:** [October 16, 2020, 3:59pm UTC](https://discuss.elastic.co/t/elastic-stack-basic-edition-and-login-security/252364 "2020-10-16T15:59:32Z")
I downloaded latest 7.9 version and I read basic security is now included in basic/free license but i dont see any option in kibana to create user/password or roles. How do I add security to the basic instance and protec… --- ## [Custom Logo Kibana 7.9.2 (guide)](https://discuss.elastic.co/t/custom-logo-kibana-7-9-2-guide/250814)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 6\ **Last updated:** [October 16, 2020, 3:49pm UTC](https://discuss.elastic.co/t/custom-logo-kibana-7-9-2-guide/250814 "2020-10-16T15:49:38Z")
Only verified on Kibana 7.9.2 running in Debian 10 Hello, For all users who, like me, need to customize the logos in Kibana, I share this guide that I have been creating myself as I have been able to solve each problem… --- ## [Date formatting yyyy.MM.dd](https://discuss.elastic.co/t/date-formatting-yyyy-mm-dd/251588)
**Author:** [@VeeT](https://discuss.elastic.co/u/VeeT)\ **Replies:** 6\ **Last updated:** [October 16, 2020, 3:26pm UTC](https://discuss.elastic.co/t/date-formatting-yyyy-mm-dd/251588 "2020-10-16T15:26:27Z")
I have a Date input in yyyy.MM.dd format but is getting converted to yyyy.MM.dd HH:mm:ss.ZZZ with the time getting set to "20:00:00.000". For example, the Date in put is "2020.10.09" but it's getting displayed in Kiban… --- ## [How to add "null" value in elastic search field if data is empty?](https://discuss.elastic.co/t/how-to-add-null-value-in-elastic-search-field-if-data-is-empty/247886)
**Author:** [@rifas\_ali\_pbi](https://discuss.elastic.co/u/rifas_ali_pbi)\ **Replies:** 3\ **Last updated:** [October 16, 2020, 3:26pm UTC](https://discuss.elastic.co/t/how-to-add-null-value-in-elastic-search-field-if-data-is-empty/247886 "2020-10-16T15:26:25Z")
--- ## [Source map line numbers mismatch (Angular)](https://discuss.elastic.co/t/source-map-line-numbers-mismatch-angular/251795)
**Author:** [@chan-n](https://discuss.elastic.co/u/chan-n)\ **Replies:** 2\ **Last updated:** [October 15, 2020, 11:59pm UTC](https://discuss.elastic.co/t/source-map-line-numbers-mismatch-angular/251795 "2020-10-15T23:59:40Z")
I am using Angular 9 and elastic/apm-rum-angular version 1.1.6. I uploaded the source maps generated by running "ng build --source-map". There is a mismatch between what is displayed in the "Exception stack trace" and … --- ## [Use an analyzer and a normalizer at the same time on the same field?](https://discuss.elastic.co/t/use-an-analyzer-and-a-normalizer-at-the-same-time-on-the-same-field/252356)
**Author:** [@Nicolas\_Rey](https://discuss.elastic.co/u/Nicolas_Rey)\ **Replies:** 3\ **Last updated:** [October 16, 2020, 2:51pm UTC](https://discuss.elastic.co/t/use-an-analyzer-and-a-normalizer-at-the-same-time-on-the-same-field/252356 "2020-10-16T14:51:15Z")
Hi, for some reason, if need to query (prefix) with an insensitive case on a text field, but I would like to keep the advantage of the tokenisation made by the default Analyzer on the same field, is it possible ? Examp… --- ## [Pipeline not starting](https://discuss.elastic.co/t/pipeline-not-starting/252112)
**Author:** [@dorcas](https://discuss.elastic.co/u/dorcas)\ **Replies:** 0\ **Last updated:** [October 14, 2020, 10:41pm UTC](https://discuss.elastic.co/t/pipeline-not-starting/252112 "2020-10-14T22:41:35Z")
kindly help pipeline action failing :exception=\>#\ Could not execute action: PipelineAction::Create after add truststore index =\> "Sample" user =\> "Log… --- ## [Regarding Ingestion Exception](https://discuss.elastic.co/t/regarding-ingestion-exception/252230)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 2\ **Last updated:** [October 16, 2020, 2:09pm UTC](https://discuss.elastic.co/t/regarding-ingestion-exception/252230 "2020-10-16T14:09:08Z")
Hi, I'm seeing an exception during ingestion. Ingestion rates have fallen to very low rates for no apparent reason. Would appreciate some input here: \[2020-10-15T15:46:51,605\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] \[node-A\]… --- ## [Logstash Filter Error](https://discuss.elastic.co/t/logstash-filter-error/252252)
**Author:** [@iccMe](https://discuss.elastic.co/u/iccMe)\ **Replies:** 2\ **Last updated:** [October 16, 2020, 1:59pm UTC](https://discuss.elastic.co/t/logstash-filter-error/252252 "2020-10-16T13:59:50Z")
Hi, I am trying to pull out relevant fields from a log file message and pass it into elasticsearch. I am still in testing and have managed to use the grok debugger to pull out the fields I need. An example of the log me… --- ## [Prefix query insensitive case : normalizer or analyzer ? (nest inside)](https://discuss.elastic.co/t/prefix-query-insensitive-case-normalizer-or-analyzer-nest-inside/252255)
**Author:** [@Nicolas\_Rey](https://discuss.elastic.co/u/Nicolas_Rey)\ **Replies:** 2\ **Last updated:** [October 16, 2020, 1:53pm UTC](https://discuss.elastic.co/t/prefix-query-insensitive-case-normalizer-or-analyzer-nest-inside/252255 "2020-10-16T13:53:43Z")
Hi, I get hard time to figure out which kind of settings should I use, my needs are basics, I got a text field (literally a phrase) that I should be able to query using a prefix ("start with") in an insensitive way. i… --- ## [MongoDB elasticsearch using logstash error](https://discuss.elastic.co/t/mongodb-elasticsearch-using-logstash-error/252347)
**Author:** [@Manuang](https://discuss.elastic.co/u/Manuang)\ **Replies:** 0\ **Last updated:** [October 16, 2020, 1:05pm UTC](https://discuss.elastic.co/t/mongodb-elasticsearch-using-logstash-error/252347 "2020-10-16T13:05:28Z")
I am trying to connect mongodb to elastic search. I am using Mongodb compass and in that the database is MongoPOC and collection is Json\_file. My config file is as below: MongoDB 4.2.10 Enterprise Cluster Standalone i… --- ## [Logstas-output-mongodb DB creation](https://discuss.elastic.co/t/logstas-output-mongodb-db-creation/252305)
**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\ **Replies:** 0\ **Last updated:** [October 16, 2020, 6:36am UTC](https://discuss.elastic.co/t/logstas-output-mongodb-db-creation/252305 "2020-10-16T06:36:14Z")
Hi Team, I am trying to have logstash output for MongoDB and I am unsure whether if i can customize the Mongo DB name based upon the input logstash receives. To be be more precise, I am unaware of the logstash capabili… --- ## [Best way to tag a large amount of documents](https://discuss.elastic.co/t/best-way-to-tag-a-large-amount-of-documents/252211)
**Author:** [@LurenzZ](https://discuss.elastic.co/u/LurenzZ)\ **Replies:** 3\ **Last updated:** [October 16, 2020, 12:36pm UTC](https://discuss.elastic.co/t/best-way-to-tag-a-large-amount-of-documents/252211 "2020-10-16T12:36:24Z")
Hi all, This is my first question topic :slight\_smile: Me and my colleagues are trying to figure out the best way to manage tags on a bunch of documents. Our scenario is, many several devices that send data to elastic… --- ## [3-nodes License, Adding Unlicensed Nodes to the Cluster](https://discuss.elastic.co/t/3-nodes-license-adding-unlicensed-nodes-to-the-cluster/252122)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 3\ **Last updated:** [October 16, 2020, 12:34pm UTC](https://discuss.elastic.co/t/3-nodes-license-adding-unlicensed-nodes-to-the-cluster/252122 "2020-10-16T12:34:38Z")
Hello, I want to purchase a 3-nodes license. What will happen if I add unlicensed data nodes to the cluster? Will commercial features be enabled for some nodes or indices, but not for others? --- ## [Simple card to display a string-](https://discuss.elastic.co/t/simple-card-to-display-a-string/252284)
**Author:** [@elaair](https://discuss.elastic.co/u/elaair)\ **Replies:** 3\ **Last updated:** [October 16, 2020, 12:22pm UTC](https://discuss.elastic.co/t/simple-card-to-display-a-string/252284 "2020-10-16T12:22:46Z")
I would like to add a card to my dashboard that displays the state of charge of my batteries. It is just a word like Resting or Float MPPT. I don't need time or math acted on it. Whats the best way to do this? --- ## [Importing json file using logstash stuck with Successfully started Logstash API endpoint {:port=\>9600}](https://discuss.elastic.co/t/importing-json-file-using-logstash-stuck-with-successfully-started-logstash-api-endpoint-port-9600/252342)
**Author:** [@Manuang](https://discuss.elastic.co/u/Manuang)\ **Replies:** 0\ **Last updated:** [October 16, 2020, 11:50am UTC](https://discuss.elastic.co/t/importing-json-file-using-logstash-stuck-with-successfully-started-logstash-api-endpoint-port-9600/252342 "2020-10-16T11:50:21Z")
{"request\_id":1,"requestDetail\_id":0,"enrichedContent":"enrich cont example","statusCode":"P","reasonDesc":"This is a test","createdBy":"Sarah","createdDate":"Sep 24, 2010"} Json data Conf file is input { file{ pa… --- ## [What Grok pattern will be?](https://discuss.elastic.co/t/what-grok-pattern-will-be/252340)
**Author:** [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\ **Replies:** 0\ **Last updated:** [October 16, 2020, 11:40am UTC](https://discuss.elastic.co/t/what-grok-pattern-will-be/252340 "2020-10-16T11:40:15Z")
what should grok pattern will be of this log? log sample 2020-10-16 16:53:17.4009 \[57244\] ERROR Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddleware 192.168.43.244 bvarsur@gmail.com http://localhost/Tran… --- ## [\[script\_exception\] runtime error in Discover](https://discuss.elastic.co/t/script-exception-runtime-error-in-discover/252218)
**Author:** [@mats.ahlbom](https://discuss.elastic.co/u/mats.ahlbom)\ **Replies:** 5\ **Last updated:** [October 16, 2020, 11:22am UTC](https://discuss.elastic.co/t/script-exception-runtime-error-in-discover/252218 "2020-10-16T11:22:59Z")
Hi, I can add scripted field selfReview; if ( doc\['type.keyword'\].value == "comment-added" && doc\['comment.keyword'\].value.contains("Code-Review+2") && doc\['change.owner.name.keyword'\].value == doc\['author.na… --- ## [Kibana UI session timeout issue](https://discuss.elastic.co/t/kibana-ui-session-timeout-issue/252147)
**Author:** [@Vineeth\_varma](https://discuss.elastic.co/u/Vineeth_varma)\ **Replies:** 3\ **Last updated:** [October 16, 2020, 11:22am UTC](https://discuss.elastic.co/t/kibana-ui-session-timeout-issue/252147 "2020-10-16T11:22:52Z")
Hi.., I am using ECK, for my kibana instance I am frequently getting session timeout issue, and also the search becomes really slow..., I am using kibana - 7.9.2 I am attaching the screenshot for reference could s… --- ## [Looking for examples of the native minhash being used for near duplicate detection](https://discuss.elastic.co/t/looking-for-examples-of-the-native-minhash-being-used-for-near-duplicate-detection/252336)
**Author:** [@Ola\_Gustafsson1](https://discuss.elastic.co/u/Ola_Gustafsson1)\ **Replies:** 0\ **Last updated:** [October 16, 2020, 11:20am UTC](https://discuss.elastic.co/t/looking-for-examples-of-the-native-minhash-being-used-for-near-duplicate-detection/252336 "2020-10-16T11:20:02Z")
Following the documentation examples, I have mapped a text field for minhashing of shingles. Using it in a more-like-this query does work, but, as the documentation says, I'd like to use it for Jaccard similarity and ret… --- ## [Kibana Timeserie data on select timerange](https://discuss.elastic.co/t/kibana-timeserie-data-on-select-timerange/252047)
**Author:** [@Nibeckj](https://discuss.elastic.co/u/Nibeckj)\ **Replies:** 2\ **Last updated:** [October 16, 2020, 9:59am UTC](https://discuss.elastic.co/t/kibana-timeserie-data-on-select-timerange/252047 "2020-10-16T09:59:52Z")
Hello, I have some index with data. @timestamp is unix timestamp. how do for have a timseries grafic with data only between 08h-20h every day ? [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1189) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1191)