# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1235 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1236 --- ## [Feasibility in joining two indexes in elasticsearch](https://discuss.elastic.co/t/feasibility-in-joining-two-indexes-in-elasticsearch/248577)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 4\ **Last updated:** [September 16, 2020, 4:14am UTC](https://discuss.elastic.co/t/feasibility-in-joining-two-indexes-in-elasticsearch/248577 "2020-09-16T04:14:57Z")
Hi All, I have a index named "dev-ticket" which stores the data of all the incidents created and "dev-perf" which stores the data related to respective server performance Is there are way to join these two index into … --- ## [Aggregation Script with ID and use it in condition](https://discuss.elastic.co/t/aggregation-script-with-id-and-use-it-in-condition/248749)
**Author:** [@saradac](https://discuss.elastic.co/u/saradac)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 12:16am UTC](https://discuss.elastic.co/t/aggregation-script-with-id-and-use-it-in-condition/248749 "2020-09-16T00:16:07Z")
Hi All, I am using script in aggregation and need two things min\_doc\_count Use aggerartion in condition All I am trying is to group by outlet and statationno and if count \> 3 send alert. Below is my script: "aggs"… --- ## [Elasticsearch output hosts list](https://discuss.elastic.co/t/elasticsearch-output-hosts-list/248735)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 4\ **Last updated:** [September 15, 2020, 11:58pm UTC](https://discuss.elastic.co/t/elasticsearch-output-hosts-list/248735 "2020-09-15T23:58:36Z")
Hi, Should I include all Elasticsearch nodes (there are no dedicated masters, and there's one coordinating node) when I specify the list of ES nodes in the output block? I mean in case, I'm horizontally scaling, do I ne… --- ## [Best practices on indexing/querying nested document in elasticsearch](https://discuss.elastic.co/t/best-practices-on-indexing-querying-nested-document-in-elasticsearch/248745)
**Author:** [@Deepanshu\_Gupta](https://discuss.elastic.co/u/Deepanshu_Gupta)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 10:49pm UTC](https://discuss.elastic.co/t/best-practices-on-indexing-querying-nested-document-in-elasticsearch/248745 "2020-09-15T22:49:19Z")
Team, I am reaching out to you regarding best practices on indexing/querying elasticsearch in order to minimize latencies we are seeing with our cluster. We had a use-case where we needed to ingest data which is nested… --- ## [When logging on to Kibana after install, it 'hangs' on the 'Select your space' page](https://discuss.elastic.co/t/when-logging-on-to-kibana-after-install-it-hangs-on-the-select-your-space-page/248687)
**Author:** [@shvanwijlen](https://discuss.elastic.co/u/shvanwijlen)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 10:25pm UTC](https://discuss.elastic.co/t/when-logging-on-to-kibana-after-install-it-hangs-on-the-select-your-space-page/248687 "2020-09-15T22:25:05Z")
Hi, I freshly installed Elasticsearch (trial license), then ran the elasticsearch-setup-passwords.bat and setup the passwords. Then I copied the Kibana zip contents and ran kibana.bat. I got all sorts of \[logical\] access… --- ## [Need to extract the records as per below requirement](https://discuss.elastic.co/t/need-to-extract-the-records-as-per-below-requirement/248646)
**Author:** [@Prasanth\_Kuna](https://discuss.elastic.co/u/Prasanth_Kuna)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 9:38pm UTC](https://discuss.elastic.co/t/need-to-extract-the-records-as-per-below-requirement/248646 "2020-09-15T21:38:20Z")
\--------------------------------------------------------------------- Requirement is as below. please have a look: I want res… --- ## [My first attempt to export events into ELK](https://discuss.elastic.co/t/my-first-attempt-to-export-events-into-elk/248702)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 3\ **Last updated:** [September 15, 2020, 9:14pm UTC](https://discuss.elastic.co/t/my-first-attempt-to-export-events-into-elk/248702 "2020-09-15T21:14:33Z")
Hi guys. I have a little application that generates a numeric result after performing some processing every 24hs. I, logging following log lines: Sep 15 15:06:30 UBUNTU-SMOKE 15 new customers created by system1 Sep 15… --- ## [Calculate time difference between 2 date fields : scripted field](https://discuss.elastic.co/t/calculate-time-difference-between-2-date-fields-scripted-field/248730)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 2\ **Last updated:** [September 15, 2020, 9:04pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-2-date-fields-scripted-field/248730 "2020-09-15T21:04:28Z")
HI, I need to calculate duration using 2 date fields in watcher API. I tried using painless script and to test using scripted field. But it is errors out stating invalid syntax. What is missing in below ? if (!doc.con… --- ## [Logstash Error: Invalid FieldReference: \`\[iso-8859-1\]to\`](https://discuss.elastic.co/t/logstash-error-invalid-fieldreference-iso-8859-1-to/248712)
**Author:** [@adamzarn](https://discuss.elastic.co/u/adamzarn)\ **Replies:** 5\ **Last updated:** [September 15, 2020, 8:40pm UTC](https://discuss.elastic.co/t/logstash-error-invalid-fieldreference-iso-8859-1-to/248712 "2020-09-15T20:40:11Z")
I'm using ELK v7.9.1 and I get this error with some of records that are coming from CouchDB: logstash | \[2020-09-15T16:03:20,662\]\[ERROR\]\[logstash.javapipeline \]\[main\]\[69664fe8e111893f386d879e5cd848742ac1a327f… --- ## [Kibana - Hyperlink in Data Table](https://discuss.elastic.co/t/kibana-hyperlink-in-data-table/248209)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 3\ **Last updated:** [September 15, 2020, 8:05pm UTC](https://discuss.elastic.co/t/kibana-hyperlink-in-data-table/248209 "2020-09-15T20:05:22Z")
Hi, Below is the data table which I have created in Kibana. In this, I want the values of the column 'User' (User 1, User 2,...) to be hyperlinks and when it is clicked the detailed graph of that particular user shoul… --- ## [If/Else comparison to add tag](https://discuss.elastic.co/t/if-else-comparison-to-add-tag/248706)
**Author:** [@vvwood](https://discuss.elastic.co/u/vvwood)\ **Replies:** 5\ **Last updated:** [September 15, 2020, 8:01pm UTC](https://discuss.elastic.co/t/if-else-comparison-to-add-tag/248706 "2020-09-15T20:01:27Z")
Hey y'all, I have been beating my head against the wall trying to accomplish something that seemed rather simple. If anyone could spot would I am missing, I would appreciate it. The seemingly simple task is to compare v… --- ## [Error: expected 'location' header to be set](https://discuss.elastic.co/t/error-expected-location-header-to-be-set/248025)
**Author:** [@TamiTakamiya](https://discuss.elastic.co/u/TamiTakamiya)\ **Replies:** 6\ **Last updated:** [September 15, 2020, 5:57pm UTC](https://discuss.elastic.co/t/error-expected-location-header-to-be-set/248025 "2020-09-15T17:57:44Z")
Hello, I have an issue in connecting Kibana (7.8.0 OSS) running on my local machine to our Elasticsearch (7.8.0) instance on our Kubernates cluster. The initial connection works and Kibana creates the index .kibana\_1 on… --- ## [Can Grok / dissect filter be used only the last line of the input file?](https://discuss.elastic.co/t/can-grok-dissect-filter-be-used-only-the-last-line-of-the-input-file/248718)
**Author:** [@saurabhc](https://discuss.elastic.co/u/saurabhc)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 5:41pm UTC](https://discuss.elastic.co/t/can-grok-dissect-filter-be-used-only-the-last-line-of-the-input-file/248718 "2020-09-15T17:41:50Z")
Requirement: Depending on the value of a particular field in the last line of the input file, add\_field to all the matched pattern outputs with the value of the field. In the last line of the file, I have a string like … --- ## [Access \_ingest using Painless script](https://discuss.elastic.co/t/access-ingest-using-painless-script/245610)
**Author:** [@BkQc](https://discuss.elastic.co/u/BkQc)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 5:33pm UTC](https://discuss.elastic.co/t/access-ingest-using-painless-script/245610 "2020-09-15T17:33:24Z")
I'm trying to populate an array during ingestion within a sub-pipeline. To do so, I'm using a painless script like the following that gives this error. What am I doing wrong? Script: { "script":{ "source":"ctx.… --- ## [The set ingest processor converts json to string](https://discuss.elastic.co/t/the-set-ingest-processor-converts-json-to-string/245625)
**Author:** [@BkQc](https://discuss.elastic.co/u/BkQc)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 5:31pm UTC](https://discuss.elastic.co/t/the-set-ingest-processor-converts-json-to-string/245625 "2020-09-15T17:31:15Z")
Hello, I have an array of objecs that I create in a temporary field on my document. I then want to use the value from that temporary field in place of the actual value of another field (originally an array of string). … --- ## [Use Visualization with nested objects](https://discuss.elastic.co/t/use-visualization-with-nested-objects/248716)
**Author:** [@BkQc](https://discuss.elastic.co/u/BkQc)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 5:21pm UTC](https://discuss.elastic.co/t/use-visualization-with-nested-objects/248716 "2020-09-15T17:21:11Z")
I have an index which is comprised of entries like the following. Is it possible to create Visualization that respects the nested nature of it? When I tried, with the X-Axis being SiteId and a split on Count and Distin… --- ## [Logstash Keystore doesn’t work - v7.7.1](https://discuss.elastic.co/t/logstash-keystore-doesn-t-work-v7-7-1/248711)
**Author:** [@Ashishtechnaut](https://discuss.elastic.co/u/Ashishtechnaut)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 4:06pm UTC](https://discuss.elastic.co/t/logstash-keystore-doesn-t-work-v7-7-1/248711 "2020-09-15T16:06:57Z")
Hi All, We are facing an issue while using Logstash keystore. We followed the steps available at the below link. This is setup on a single node cluster with Platinum License and xpack/TLS enabled. Please find the err… --- ## [Image to kibana from local host](https://discuss.elastic.co/t/image-to-kibana-from-local-host/248633)
**Author:** [@sai92](https://discuss.elastic.co/u/sai92)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 3:22pm UTC](https://discuss.elastic.co/t/image-to-kibana-from-local-host/248633 "2020-09-15T15:22:55Z")
hi i am trying to upload image to kibana from local host so that i can use it in markdown and i stored the image in usr/share/kibana/src/ui/public/assets/favicons/test.png and i point to thi sile in markdown http://127… --- ## [How to make shorter (closer) token match more relevant? (edge\_ngram)](https://discuss.elastic.co/t/how-to-make-shorter-closer-token-match-more-relevant-edge-ngram/248703)
**Author:** [@rebelfreq](https://discuss.elastic.co/u/rebelfreq)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 3:21pm UTC](https://discuss.elastic.co/t/how-to-make-shorter-closer-token-match-more-relevant-edge-ngram/248703 "2020-09-15T15:21:39Z")
Hello, I'm getting very weird results with edge\_ngram tokenizer I'm using for autocomplete. I'm trying to figure out how to make my results more relevant. I copied the example from the elasticsearch documentation. I ha… --- ## [How to serach message including "keyword" and format message](https://discuss.elastic.co/t/how-to-serach-message-including-keyword-and-format-message/248701)
**Author:** [@NouhaB](https://discuss.elastic.co/u/NouhaB)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 3:06pm UTC](https://discuss.elastic.co/t/how-to-serach-message-including-keyword-and-format-message/248701 "2020-09-15T15:06:26Z")
Hello, I need to filter logs in order to get only the message begining by "CALL\_END" This is an example of logs : here is my logstash config file : '' input { udp { port =\> 2514 type =\> "syslog" } } filter{ … --- ## [Store and query generic attributes/fields](https://discuss.elastic.co/t/store-and-query-generic-attributes-fields/248671)
**Author:** [@ggrune](https://discuss.elastic.co/u/ggrune)\ **Replies:** 3\ **Last updated:** [September 15, 2020, 2:58pm UTC](https://discuss.elastic.co/t/store-and-query-generic-attributes-fields/248671 "2020-09-15T14:58:41Z")
We have a software that allows custom attributes for products. Example: "products" : \[ { "id" : "222222", "sku" : "12345", "name" : "Fancy notebook", "category" : "computer", ... "a… --- ## [Where can I find the Elastic UI CSS? Can I use it without Javascript?](https://discuss.elastic.co/t/where-can-i-find-the-elastic-ui-css-can-i-use-it-without-javascript/248632)
**Author:** [@egray](https://discuss.elastic.co/u/egray)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 2:57pm UTC](https://discuss.elastic.co/t/where-can-i-find-the-elastic-ui-css-can-i-use-it-without-javascript/248632 "2020-09-15T14:57:15Z")
I tagged this Kibana because I couldn't see a better category for it. I am entirely new to UI programming, but I'm creating a web app which displays Kibana 7.8 dashboards- yes, I have reasons for doing this instead of us… --- ## [Check Kibana max-old-space-size](https://discuss.elastic.co/t/check-kibana-max-old-space-size/245310)
**Author:** [@VeeT](https://discuss.elastic.co/u/VeeT)\ **Replies:** 9\ **Last updated:** [September 15, 2020, 2:45pm UTC](https://discuss.elastic.co/t/check-kibana-max-old-space-size/245310 "2020-09-15T14:45:13Z")
Hi, I tried adding --max-old-space-size=2048 into the bin/kibana file under NODE\_OPTIONS. How do I check that this came in effect? Thanks! --- ## [OOM Error](https://discuss.elastic.co/t/oom-error/248154)
**Author:** [@Shreesha\_Gundmi](https://discuss.elastic.co/u/Shreesha_Gundmi)\ **Replies:** 7\ **Last updated:** [September 15, 2020, 2:44pm UTC](https://discuss.elastic.co/t/oom-error/248154 "2020-09-15T14:44:03Z")
Hi Team, I am using Elasticsearch 7.6.2, sometimes when we request query I am getting OOM (Out Of Memory) may I know how to tackle this issue? Hardware environment as follows: Server capacity vCPUs: 8 RAM: 32GB Sto… --- ## [Conversion type pipeline](https://discuss.elastic.co/t/conversion-type-pipeline/248638)
**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\ **Replies:** 6\ **Last updated:** [September 15, 2020, 2:23pm UTC](https://discuss.elastic.co/t/conversion-type-pipeline/248638 "2020-09-15T14:23:11Z")
Hello, I'm trying to write a pipeline to parse following part of data ua="192.168.211.109:443" I implement it as ua=\\"%{IP:wkaddress}:%{NUMBER:port:integer}\\" but always I have wkaddress and port as Text field. Wh… --- ## [Changing kubernetes storage class for data nodes without data loss](https://discuss.elastic.co/t/changing-kubernetes-storage-class-for-data-nodes-without-data-loss/248693)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 2:18pm UTC](https://discuss.elastic.co/t/changing-kubernetes-storage-class-for-data-nodes-without-data-loss/248693 "2020-09-15T14:18:28Z")
Elasticsearch version: 7.6.2 $ kubectl version Client Version: version.Info{Major:"1", Minor:"18", GitVersion:"v1.18.2", GitCommit:"52c56ce7a8272c798dbc29846288d7cd9fbae032", GitTreeState:"clean", BuildDate:"2020-04-16T… --- ## [Using a layer as a filter in a map](https://discuss.elastic.co/t/using-a-layer-as-a-filter-in-a-map/248588)
**Author:** [@Vester](https://discuss.elastic.co/u/Vester)\ **Replies:** 4\ **Last updated:** [September 15, 2020, 2:15pm UTC](https://discuss.elastic.co/t/using-a-layer-as-a-filter-in-a-map/248588 "2020-09-15T14:15:48Z")
Hi, Is it possible to use a layer imported from a GeoJSON file as a filter ? Example, in this picture I would like to use the red area layer as a filter, only points inside the area are shown ? How can I do it ? tha… --- ## [Strigo Lab Env toolbar not present](https://discuss.elastic.co/t/strigo-lab-env-toolbar-not-present/248683)
**Author:** [@dallen](https://discuss.elastic.co/u/dallen)\ **Replies:** 3\ **Last updated:** [September 15, 2020, 1:59pm UTC](https://discuss.elastic.co/t/strigo-lab-env-toolbar-not-present/248683 "2020-09-15T13:59:17Z")
Hi, I just started the Elasticsearch Engineer 1 on-demand course. When I open Strigo to access the lab environment, there is no toolbar on the left. It defaults to the terminal. Within the terminal, I am unable to ssh… --- ## [Node class, Client interface and RestHighLevelClient](https://discuss.elastic.co/t/node-class-client-interface-and-resthighlevelclient/248665)
**Author:** [@Pete\_Watcharawit](https://discuss.elastic.co/u/Pete_Watcharawit)\ **Replies:** 3\ **Last updated:** [September 15, 2020, 1:25pm UTC](https://discuss.elastic.co/t/node-class-client-interface-and-resthighlevelclient/248665 "2020-09-15T13:25:38Z")
import org.elasticsearch.node.Node; import org.elasticsearch.client.Client; Settings settings = Settings.builder().loadFromPath(Paths.get("config/elasticsearch.yml").toAbsolutePath()).build(); Path path = Paths.get("con… --- ## [Kibana data table](https://discuss.elastic.co/t/kibana-data-table/248631)
**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\ **Replies:** 2\ **Last updated:** [September 15, 2020, 11:58am UTC](https://discuss.elastic.co/t/kibana-data-table/248631 "2020-09-15T11:58:01Z")
Hi, I create a data table visualisation kibana. I add split table option on timestamp, but after it.It is creating problem on export option. When I export it, timestamp field not showing in correct format and one colum… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1234) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1236)