# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1229 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1230 --- ## [Elastic Cloud. Different deployments. Titles](https://discuss.elastic.co/t/elastic-cloud-different-deployments-titles/247823)
**Author:** [@xhidalgo](https://discuss.elastic.co/u/xhidalgo)\ **Replies:** 3\ **Last updated:** [September 21, 2020, 8:15am UTC](https://discuss.elastic.co/t/elastic-cloud-different-deployments-titles/247823 "2020-09-21T08:15:11Z")
Hi, we are using Elastic Cloud to administer different deployments for different clients. We use it and have opened more than one windows at a time and it's easy to loose control on what client we are working on.. It wo… --- ## [How to convert default index template from 5.6 to 7.9?](https://discuss.elastic.co/t/how-to-convert-default-index-template-from-5-6-to-7-9/249112)
**Author:** [@jze](https://discuss.elastic.co/u/jze)\ **Replies:** 3\ **Last updated:** [September 21, 2020, 8:10am UTC](https://discuss.elastic.co/t/how-to-convert-default-index-template-from-5-6-to-7-9/249112 "2020-09-21T08:10:00Z")
Hello, I have from ELK 5.6 stack this default index template definition: PUT /\_template/mytemplate { "template":".kibana-\*", "settings":{ "number\_of\_shards":1 }, "mappings":{ "config":{ … --- ## [Bulk API "lies" in the response](https://discuss.elastic.co/t/bulk-api-lies-in-the-response/248674)
**Author:** [@JulGor](https://discuss.elastic.co/u/JulGor)\ **Replies:** 7\ **Last updated:** [September 21, 2020, 7:53am UTC](https://discuss.elastic.co/t/bulk-api-lies-in-the-response/248674 "2020-09-21T07:53:28Z")
Hello, I'm having some problems using the Bulk API because it is lying in the response it returns. I'm using the following request: POST /\_bulk?refresh=true { "index": { "\_index": "my\_index", "\_id": 123 } }, … --- ## [How to get sample data which is used in demo.elastic.co?](https://discuss.elastic.co/t/how-to-get-sample-data-which-is-used-in-demo-elastic-co/249247)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [September 21, 2020, 6:55am UTC](https://discuss.elastic.co/t/how-to-get-sample-data-which-is-used-in-demo-elastic-co/249247 "2020-09-21T06:55:57Z")
hi We could see the demo.elastic.co has quite good dataset to simulate SIEM/APM etc. eg. https://demo.elastic.co/app/siem#/detections/signals Would like to understand How to get hold of these sample data? Is it ope… --- ## [Rolling upgrade - can't revert... :-(](https://discuss.elastic.co/t/rolling-upgrade-cant-revert/249306)
**Author:** [@HarelM](https://discuss.elastic.co/u/HarelM)\ **Replies:** 2\ **Last updated:** [September 21, 2020, 6:28am UTC](https://discuss.elastic.co/t/rolling-upgrade-cant-revert/249306 "2020-09-21T06:28:39Z")
OK, so I started an attempt to upgrade my elasticsearch node. I had one node with 5.6.3 version and a few indices. I added another node with version 6.8.12. I Reindexed all my indices and added a prefix 6-8 so that ne… --- ## [Split message field into multiple fields in kibana](https://discuss.elastic.co/t/split-message-field-into-multiple-fields-in-kibana/249262)
**Author:** [@chand](https://discuss.elastic.co/u/chand)\ **Replies:** 4\ **Last updated:** [September 21, 2020, 5:39am UTC](https://discuss.elastic.co/t/split-message-field-into-multiple-fields-in-kibana/249262 "2020-09-21T05:39:05Z")
I've the following data for the message field which is being shipped by filebeat to elasticseatch. I am not using Logstash here 2020-09-20 15:44:23 ::1 get / - 80 - ::1 mozilla/5.0+(windows+nt+10.0;+win64;+x64)+window… --- ## [Kibana how to export csv](https://discuss.elastic.co/t/kibana-how-to-export-csv/249298)
**Author:** [@111387](https://discuss.elastic.co/u/111387)\ **Replies:** 1\ **Last updated:** [September 21, 2020, 5:33am UTC](https://discuss.elastic.co/t/kibana-how-to-export-csv/249298 "2020-09-21T05:33:52Z")
i installed kibana and recevied data using logstash i want to export data to csv but share-\> csv reports -\> generate csv button is disabled.. kibana version is 7.9 and license is basic basic license can't using export… --- ## [Template index\_pattern matching](https://discuss.elastic.co/t/template-index-pattern-matching/249289)
**Author:** [@szanin](https://discuss.elastic.co/u/szanin)\ **Replies:** 2\ **Last updated:** [September 21, 2020, 4:02am UTC](https://discuss.elastic.co/t/template-index-pattern-matching/249289 "2020-09-21T04:02:53Z")
How do I ensure that only new indices get my template, and not the metrics or logs indices. If I define the "index\_pattern" to be "\*" that will apply to all new indices. Is there a way to specify that I don't want to app… --- ## [Kibana redirect to page: Select your space after a day, all data is reset. (ver: 7.8.0)](https://discuss.elastic.co/t/kibana-redirect-to-page-select-your-space-after-a-day-all-data-is-reset-ver-7-8-0/245908)
**Author:** [@lucky\_luke15190](https://discuss.elastic.co/u/lucky_luke15190)\ **Replies:** 5\ **Last updated:** [September 21, 2020, 3:59am UTC](https://discuss.elastic.co/t/kibana-redirect-to-page-select-your-space-after-a-day-all-data-is-reset-ver-7-8-0/245908 "2020-09-21T03:59:50Z")
I have built kibana with elasticsearch and filebeat, it's running well with filebeat default index, own dashboard. After 1 day, it redirect to page: Select your space, no spaces match search criteria. This can be fixed… --- ## [How to calculate time difference across multi-layer nested structure](https://discuss.elastic.co/t/how-to-calculate-time-difference-across-multi-layer-nested-structure/248794)
**Author:** [@Fan\_Y102](https://discuss.elastic.co/u/Fan_Y102)\ **Replies:** 2\ **Last updated:** [September 21, 2020, 1:51am UTC](https://discuss.elastic.co/t/how-to-calculate-time-difference-across-multi-layer-nested-structure/248794 "2020-09-21T01:51:07Z")
Hello Guys, I'm new for Elasticsearch query. Currently, I'm working on a data set contains two layers nested JSON. For example: { "data": \[ { "number": 1, "startDate": "2020-01-08", "finalDate": "2020-01-04", … --- ## [Error: Could not find or load main class org.elasticsearch.bootstrap.Elasticsearch - Windows Server 2012 R2 - ElasticSearch 2.1.1](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-bootstrap-elasticsearch-windows-server-2012-r2-elasticsearch-2-1-1/248921)
**Author:** [@silo](https://discuss.elastic.co/u/silo)\ **Replies:** 1\ **Last updated:** [September 20, 2020, 9:39pm UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-bootstrap-elasticsearch-windows-server-2012-r2-elasticsearch-2-1-1/248921 "2020-09-20T21:39:26Z")
I am facing this error when i tried to run elasticsearch.bat file. I have verified the JAVA\_HOME environment variable. But still the above error persists. --- ## [Index template and JVM usage](https://discuss.elastic.co/t/index-template-and-jvm-usage/249071)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 1\ **Last updated:** [September 20, 2020, 9:36pm UTC](https://discuss.elastic.co/t/index-template-and-jvm-usage/249071 "2020-09-20T21:36:21Z")
Hi, We have a number of indexs for devices with limited static fields, ie a firewall. (assuming an upgrade of the device does not add more fields) I typically use the ECS as the template for the indexs. Would there b… --- ## [Read Only Repo FTP with username, password](https://discuss.elastic.co/t/read-only-repo-ftp-with-username-password/249079)
**Author:** [@binhvq](https://discuss.elastic.co/u/binhvq)\ **Replies:** 1\ **Last updated:** [September 20, 2020, 9:34pm UTC](https://discuss.elastic.co/t/read-only-repo-ftp-with-username-password/249079 "2020-09-20T21:34:48Z")
Hi! I'm use ftp for snap shot repo, but i can't find document for ftp repo with port, usename, password for repo. I can find format of url ftp://username:password@server but it's not work. Please help me. --- ## [Error message splitting series by scripted field terms agg](https://discuss.elastic.co/t/error-message-splitting-series-by-scripted-field-terms-agg/249264)
**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\ **Replies:** 2\ **Last updated:** [September 20, 2020, 9:15pm UTC](https://discuss.elastic.co/t/error-message-splitting-series-by-scripted-field-terms-agg/249264 "2020-09-20T21:15:10Z")
Hi, I added one scripted field. It adds a Category string field based on an existing string field. When I try to split series using terms agg and the scripted field in a bar visualization I get the following error mes… --- ## [Don't see APM Traces](https://discuss.elastic.co/t/dont-see-apm-traces/249093)
**Author:** [@Ramirag](https://discuss.elastic.co/u/Ramirag)\ **Replies:** 0\ **Last updated:** [September 18, 2020, 11:58am UTC](https://discuss.elastic.co/t/dont-see-apm-traces/249093 "2020-09-18T11:58:26Z")
Traces tab shows me this. No traces found for this query Try another time range or reset the search filter. But I can Services tab shows me services and their transactions. Plus I can get APM logs. Why traces doesn… --- ## [Elasticsearch node not responding (ES OSS version 7.6.1)](https://discuss.elastic.co/t/elasticsearch-node-not-responding-es-oss-version-7-6-1/249127)
**Author:** [@DineshNaik](https://discuss.elastic.co/u/DineshNaik)\ **Replies:** 1\ **Last updated:** [September 20, 2020, 9:30pm UTC](https://discuss.elastic.co/t/elasticsearch-node-not-responding-es-oss-version-7-6-1/249127 "2020-09-20T21:30:21Z")
We have an elasticsearch cluster with 3 master and 6 data nodes . Elasticsearch version is 7.6.1(OSS). one of the data node is becoming non-responsive and none of API's (like \_cat, \_cluster/health etc) are working when … --- ## [Storage level in Elasticsearch cluster](https://discuss.elastic.co/t/storage-level-in-elasticsearch-cluster/249196)
**Author:** [@the\_brimix](https://discuss.elastic.co/u/the_brimix)\ **Replies:** 1\ **Last updated:** [September 20, 2020, 9:28pm UTC](https://discuss.elastic.co/t/storage-level-in-elasticsearch-cluster/249196 "2020-09-20T21:28:15Z")
Hi I've a Elasticsearch cluster with 5 nodes. I've this used storage repartition: Node1: 76% Node2: 94% Node3: 88% Node4: 73% Node5: 74% How to do to "leveling" the used storage ? For the node 2 et 3, We arrived … --- ## [Filebeat not picking up OSQUERY LOGS](https://discuss.elastic.co/t/filebeat-not-picking-up-osquery-logs/249279)
**Author:** [@Vansh\_Kumar\_Madan](https://discuss.elastic.co/u/Vansh_Kumar_Madan)\ **Replies:** 0\ **Last updated:** [September 20, 2020, 7:21pm UTC](https://discuss.elastic.co/t/filebeat-not-picking-up-osquery-logs/249279 "2020-09-20T19:21:34Z")
Hi, I am trying to intergate filbeat osquey module, my osquery is running successfully, and logs are building up at path /var/log/osquery/osqueryd.results.log I am passing this path in filebeat osquery module osquery.… --- ## [Logstash PQ Java 14 and Closed queue](https://discuss.elastic.co/t/logstash-pq-java-14-and-closed-queue/249242)
**Author:** [@Jugsofbeer](https://discuss.elastic.co/u/Jugsofbeer)\ **Replies:** 0\ **Last updated:** [September 20, 2020, 8:32am UTC](https://discuss.elastic.co/t/logstash-pq-java-14-and-closed-queue/249242 "2020-09-20T08:32:13Z")
Hi, Just wondering if anyone else has struck the issue I have recently with Persistent Queue enabled and the pipeline sometimes getting into a unrecoverable state where it throws the message "cannot write to a closed qu… --- ## [Dynamic input :Http\_poller url](https://discuss.elastic.co/t/dynamic-input-http-poller-url/249277)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 1\ **Last updated:** [September 20, 2020, 7:42pm UTC](https://discuss.elastic.co/t/dynamic-input-http-poller-url/249277 "2020-09-20T19:42:22Z")
Hi all, in my logstash file i use a http\_poller a input. input { http\_poller { urls =\> { url2020 =\> "http://xxxxx/XXXx/Xxxx/XXXXXXXstartDate=01/01/2020&endDate=30/09/2020" } request\_timeout =\> 60 schedule =\> { "… --- ## [ElasticSearch - how to use search-as-you-type for multivalued fields](https://discuss.elastic.co/t/elasticsearch-how-to-use-search-as-you-type-for-multivalued-fields/249270)
**Author:** [@Ondra\_N](https://discuss.elastic.co/u/Ondra_N)\ **Replies:** 0\ **Last updated:** [September 20, 2020, 5:59pm UTC](https://discuss.elastic.co/t/elasticsearch-how-to-use-search-as-you-type-for-multivalued-fields/249270 "2020-09-20T17:59:37Z")
I am messing around with the newly added search-as-you-type field type. Having documents with following structure doc\_1 ... "nickname": \["Super", "Terrible", "Mediocre"\] ... doc\_2 ... "nickname": \["Grande", "Perfect"… --- ## [Reindexing a document with same version number but with different metadata](https://discuss.elastic.co/t/reindexing-a-document-with-same-version-number-but-with-different-metadata/249268)
**Author:** [@vishnuk](https://discuss.elastic.co/u/vishnuk)\ **Replies:** 1\ **Last updated:** [September 20, 2020, 5:25pm UTC](https://discuss.elastic.co/t/reindexing-a-document-with-same-version-number-but-with-different-metadata/249268 "2020-09-20T17:25:07Z")
Hi, I have the following use case. An admin indexes the existing system during a small maintenance window , all good to go. We plan to use an external version for index document version Users starts using the system a… --- ## [How to Json log format output for my system log](https://discuss.elastic.co/t/how-to-json-log-format-output-for-my-system-log/249238)
**Author:** [@poddraj](https://discuss.elastic.co/u/poddraj)\ **Replies:** 0\ **Last updated:** [September 20, 2020, 7:29am UTC](https://discuss.elastic.co/t/how-to-json-log-format-output-for-my-system-log/249238 "2020-09-20T07:29:00Z")
Hi, I have my log in below format, it actually has all fields delimited by ^. However, in between we can have few other lines which are nothing but the field headers. I am unable to get this log converted into json form… --- ## [Input file plugin - file is not read when modified](https://discuss.elastic.co/t/input-file-plugin-file-is-not-read-when-modified/249228)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 3\ **Last updated:** [September 20, 2020, 2:14am UTC](https://discuss.elastic.co/t/input-file-plugin-file-is-not-read-when-modified/249228 "2020-09-20T02:14:52Z")
HI, I am using file input plugin in logstash. My file gets replaced in regular time interval . I need the file to be read from the beginning each time it is replaced. I have below setting . It reads from beginning onl… --- ## [Logstash error](https://discuss.elastic.co/t/logstash-error/249194)
**Author:** [@grazer](https://discuss.elastic.co/u/grazer)\ **Replies:** 4\ **Last updated:** [September 20, 2020, 1:25am UTC](https://discuss.elastic.co/t/logstash-error/249194 "2020-09-20T01:25:43Z")
Running version 7.8.0 everthing seems to be running fine however, I'm getting error... not sure what it is.. I have the correct java version, all the mutations seem to work, the paths are correct etc.. This extract is fr… --- ## [Coordination Node Where I put them?](https://discuss.elastic.co/t/coordination-node-where-i-put-them/249156)
**Author:** [@Samuel\_Amico](https://discuss.elastic.co/u/Samuel_Amico)\ **Replies:** 7\ **Last updated:** [September 19, 2020, 10:42pm UTC](https://discuss.elastic.co/t/coordination-node-where-i-put-them/249156 "2020-09-19T22:42:17Z")
Guys, I have a doubt. The coordination node, I put at the entrance of the cluster (logstash sends it to the coordination node) or I put it behind the kibana (kibana points to the coordination node). I have 2 coordinatio… --- ## [Get data from elasticsearch and visualize it using python](https://discuss.elastic.co/t/get-data-from-elasticsearch-and-visualize-it-using-python/249221)
**Author:** [@atiqah\_yusri](https://discuss.elastic.co/u/atiqah_yusri)\ **Replies:** 4\ **Last updated:** [September 19, 2020, 9:08pm UTC](https://discuss.elastic.co/t/get-data-from-elasticsearch-and-visualize-it-using-python/249221 "2020-09-19T21:08:49Z")
Hi, currently, I have to develop a data analytics dashboard on a web platform. It is possible if I load my datasets to elasticsearch using logstash without using kibana for the visualisation? Because I prefer to use pyth… --- ## [Bar chart percentage mode?](https://discuss.elastic.co/t/bar-chart-percentage-mode/249214)
**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\ **Replies:** 1\ **Last updated:** [September 19, 2020, 8:54pm UTC](https://discuss.elastic.co/t/bar-chart-percentage-mode/249214 "2020-09-19T20:54:10Z")
Is there a percentage mode for stacked bar charts in Kibana 7.9.1? I've seen some references to it, but I can't find it... --- ## [How to remove\_field for json data by http\_poller at all once](https://discuss.elastic.co/t/how-to-remove-field-for-json-data-by-http-poller-at-all-once/248545)
**Author:** [@unisuke](https://discuss.elastic.co/u/unisuke)\ **Replies:** 1\ **Last updated:** [September 19, 2020, 2:47pm UTC](https://discuss.elastic.co/t/how-to-remove-field-for-json-data-by-http-poller-at-all-once/248545 "2020-09-19T14:47:38Z")
Hi. I want to filter for jason getting by http\_poller plugin. For example, it's below. "content" =\> \[ \[0\] { "AList" =\> \[ \[0\] { "name" =\> "X", }, \[1\] { "name" =\> "Y, } … --- ## [Logstash http\_poller で 取得したデータのfilter方法について](https://discuss.elastic.co/t/logstash-http-poller-filter/248426)
**Author:** [@unisuke](https://discuss.elastic.co/u/unisuke)\ **Replies:** 5\ **Last updated:** [September 19, 2020, 2:46pm UTC](https://discuss.elastic.co/t/logstash-http-poller-filter/248426 "2020-09-19T14:46:20Z")
こんにちは。 http\_poller pluginで取得したデータをfilterしたいと思っています。 http\_pollerで得たデータは下記としまして、 "content" =\> \[ \[0\] { "AList" =\> \[ \[0\] { "name" =\> "X", }, \[1\] { "name" =\> "Y, } \], "… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1228) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1230)