# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1237

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1238

---

## [Export specific fields from data](https://discuss.elastic.co/t/export-specific-fields-from-data/248578)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 0\
**Last updated:** [September 14, 2020, 8:00pm UTC](https://discuss.elastic.co/t/export-specific-fields-from-data/248578 "2020-09-14T20:00:38Z")

</div>

Hi All, We need to export specific fields from a particular index. The export can be in any format. Problem is that the size of the index is large and on top of that we need information based on last 30 days. I did s…

---

## [Flip the starting position for Bar Chart](https://discuss.elastic.co/t/flip-the-starting-position-for-bar-chart/248377)

<div class="topic-metadata">

**Author:** [@trojan22](https://discuss.elastic.co/u/trojan22)\
**Replies:** 2\
**Last updated:** [September 14, 2020, 7:49pm UTC](https://discuss.elastic.co/t/flip-the-starting-position-for-bar-chart/248377 "2020-09-14T19:49:10Z")

</div>

Hello, I have a simple question. I have created a Horizontal Bar Chart (would apply to vertical chart as well) in Kibana(v7.1.1). By default, the bars start from left and go to right. What I mean is the Y Axis is at th…

---

## [Problem in Metricbeat for kubernetes monitoring deployed by ECK](https://discuss.elastic.co/t/problem-in-metricbeat-for-kubernetes-monitoring-deployed-by-eck/248440)

<div class="topic-metadata">

**Author:** [@HadarPeeran](https://discuss.elastic.co/u/HadarPeeran)\
**Replies:** 4\
**Last updated:** [September 14, 2020, 7:46pm UTC](https://discuss.elastic.co/t/problem-in-metricbeat-for-kubernetes-monitoring-deployed-by-eck/248440 "2020-09-14T19:46:43Z")

</div>

Hey, In order to monitor my k8s cluster, I deployed Elastic, Kibana and Metricbeat by this yaml In kibana dashboard I can see only metrics of the hosts (cluster nodes) but not metrics of kubernetes resources (Nodes, Po…

---

## [Count the number of phrase hits in a specific document](https://discuss.elastic.co/t/count-the-number-of-phrase-hits-in-a-specific-document/248572)

<div class="topic-metadata">

**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\
**Replies:** 0\
**Last updated:** [September 14, 2020, 6:23pm UTC](https://discuss.elastic.co/t/count-the-number-of-phrase-hits-in-a-specific-document/248572 "2020-09-14T18:23:33Z")

</div>

Is there a way to search for a document by id (\_doc) and then count the number of times a phrase is mentioned? Given the text in a field called 'message': "Bob Smith is a plumber. Bob Smith is also a racecar driver. Bob…

---

## [Query em um datastream](https://discuss.elastic.co/t/query-em-um-datastream/246123)

<div class="topic-metadata">

**Author:** [@abenas](https://discuss.elastic.co/u/abenas)\
**Replies:** 4\
**Last updated:** [September 14, 2020, 6:58pm UTC](https://discuss.elastic.co/t/query-em-um-datastream/246123 "2020-09-14T18:58:42Z")

</div>

Srs, bom dia. Atualmente usamos uma convenção na construção dos índices para conter uma quebra mensal dos documentos. Dessa forma, por convenção, consigo orientar em uma aplicação QUAL o indice deve conter o documento …

---

## [ES output in Logstash](https://discuss.elastic.co/t/es-output-in-logstash/248390)

<div class="topic-metadata">

**Author:** [@pvaithee07](https://discuss.elastic.co/u/pvaithee07)\
**Replies:** 2\
**Last updated:** [September 14, 2020, 6:36pm UTC](https://discuss.elastic.co/t/es-output-in-logstash/248390 "2020-09-14T18:36:31Z")

</div>

Hello All - I have a requirement where i have to send my data to ES index using the ES output plugin from Logstash. If the write to ES Index is successful, i need to write a log (in another ES index) that the record ins…

---

## [Parsing o365.audit.Data filed for o365 Module](https://discuss.elastic.co/t/parsing-o365-audit-data-filed-for-o365-module/248370)

<div class="topic-metadata">

**Author:** [@opiedrah](https://discuss.elastic.co/u/opiedrah)\
**Replies:** 2\
**Last updated:** [September 14, 2020, 6:21pm UTC](https://discuss.elastic.co/t/parsing-o365-audit-data-filed-for-o365-module/248370 "2020-09-14T18:21:00Z")

</div>

Hi folks, I've had the o365 module for Filebeat working for a while. I've onboarded a new workload called: o365.audit.Workload :"AirInvestigation" The filed is composed of nested json objects just the same as the Ext…

---

## [Unable to export more than 10k url saved objects](https://discuss.elastic.co/t/unable-to-export-more-than-10k-url-saved-objects/248565)

<div class="topic-metadata">

**Author:** [@chakragod](https://discuss.elastic.co/u/chakragod)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 6:08pm UTC](https://discuss.elastic.co/t/unable-to-export-more-than-10k-url-saved-objects/248565 "2020-09-14T18:08:43Z")

</div>

Hello, I am trying to use the saved\_objects/export api as documented here https://www.elastic.co/guide/en/kibana/current/saved-objects-api-export.html. But I am hitting a 10,000 object limit: "message": "Can't export mo…

---

## [Logstash maximum indexes](https://discuss.elastic.co/t/logstash-maximum-indexes/248563)

<div class="topic-metadata">

**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 5:48pm UTC](https://discuss.elastic.co/t/logstash-maximum-indexes/248563 "2020-09-14T17:48:15Z")

</div>

I saw that today's data is missing in kibana. After investigating I noticed that today's index doesn't exist (I create an index everyday. Today's index should be filebeat-7.9.0-2020.09.14) This is what logstash has to s…

---

## [Kibana table sample size](https://discuss.elastic.co/t/kibana-table-sample-size/248449)

<div class="topic-metadata">

**Author:** [@AditiKhalatkar](https://discuss.elastic.co/u/AditiKhalatkar)\
**Replies:** 13\
**Last updated:** [September 14, 2020, 5:43pm UTC](https://discuss.elastic.co/t/kibana-table-sample-size/248449 "2020-09-14T17:43:05Z")

</div>

How much can be the maximum value for discover:sampleSize in Kibana/Advanced Settings? I have tried setting it to 10000 because of a few use cases (since my table crashes because of too many rows at times). Also, I saw a…

---

## [Nginx Kibana: Bad gateway 502](https://discuss.elastic.co/t/nginx-kibana-bad-gateway-502/248392)

<div class="topic-metadata">

**Author:** [@davideluque](https://discuss.elastic.co/u/davideluque)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 5:37pm UTC](https://discuss.elastic.co/t/nginx-kibana-bad-gateway-502/248392 "2020-09-14T17:37:46Z")

</div>

Continuing the discussion from https://discuss.elastic.co/t/bad-gateway-nginx/127473 I have fixed this by running the following command in the terminal: setsebool httpd\_can\_network\_connect on -P This is because the we…

---

## [Bad Gateway (nginx)](https://discuss.elastic.co/t/bad-gateway-nginx/127473)

<div class="topic-metadata">

**Author:** [@Hackedia](https://discuss.elastic.co/u/Hackedia)\
**Replies:** 2\
**Last updated:** [September 14, 2020, 5:37pm UTC](https://discuss.elastic.co/t/bad-gateway-nginx/127473 "2020-09-14T17:37:38Z")

</div>

Hi everyone ! I did a very simple installation (from digital ocean tutorial) of an ELK server on CentOS and i get this "bad gateway" error (after sending htpasswd credentials). More information here : Checking local 5…

---

## [How to increase the speed of restoring snapshots using GCS](https://discuss.elastic.co/t/how-to-increase-the-speed-of-restoring-snapshots-using-gcs/248562)

<div class="topic-metadata">

**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\
**Replies:** 0\
**Last updated:** [September 14, 2020, 4:29pm UTC](https://discuss.elastic.co/t/how-to-increase-the-speed-of-restoring-snapshots-using-gcs/248562 "2020-09-14T16:29:32Z")

</div>

Can this be "max\_restore\_bytes\_per\_sec" : "10gb" used to increase restoring snapshots on GKE elasticsearch using GCS bucket. Can anyone please answer this one

---

## [Tableau Connector with Elastic JDBC driver](https://discuss.elastic.co/t/tableau-connector-with-elastic-jdbc-driver/248344)

<div class="topic-metadata">

**Author:** [@otorih](https://discuss.elastic.co/u/otorih)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 4:28pm UTC](https://discuss.elastic.co/t/tableau-connector-with-elastic-jdbc-driver/248344 "2020-09-14T16:28:54Z")

</div>

Hello, I couldn't find any satisfying solution on google and after double-checking that this hasn't already been answered here, I decided to write that post to seek for some help. I am currently trying to connect Table…

---

## [Scroll query performance regression upgrading to ES v7.9 from v6.8](https://discuss.elastic.co/t/scroll-query-performance-regression-upgrading-to-es-v7-9-from-v6-8/248556)

<div class="topic-metadata">

**Author:** [@rankida](https://discuss.elastic.co/u/rankida)\
**Replies:** 0\
**Last updated:** [September 14, 2020, 3:57pm UTC](https://discuss.elastic.co/t/scroll-query-performance-regression-upgrading-to-es-v7-9-from-v6-8/248556 "2020-09-14T15:57:19Z")

</div>

We have a query that returns a stupid amount of results (98k). I won't go into details as to why. To achieve this we use a scroll with 1,000 documents per batch. We recently (finally) upgraded to v7.x of ElasticSearch a…

---

## [What's wrong with my mutate filter?](https://discuss.elastic.co/t/whats-wrong-with-my-mutate-filter/248536)

<div class="topic-metadata">

**Author:** [@Haptomai](https://discuss.elastic.co/u/Haptomai)\
**Replies:** 2\
**Last updated:** [September 14, 2020, 2:58pm UTC](https://discuss.elastic.co/t/whats-wrong-with-my-mutate-filter/248536 "2020-09-14T14:58:48Z")

</div>

Hi there, first time requiring help here :wink: In order to filter some different inputs (actually same filebeat input, but multiple beats/formats are sent), I achieved to get this following logstash pipeline: input {…

---

## [GCP machine type (N1,N2 and N2D) recommendations for ELK](https://discuss.elastic.co/t/gcp-machine-type-n1-n2-and-n2d-recommendations-for-elk/248547)

<div class="topic-metadata">

**Author:** [@hemanth49841](https://discuss.elastic.co/u/hemanth49841)\
**Replies:** 0\
**Last updated:** [September 14, 2020, 2:58pm UTC](https://discuss.elastic.co/t/gcp-machine-type-n1-n2-and-n2d-recommendations-for-elk/248547 "2020-09-14T14:58:18Z")

</div>

Hi All, We are planning deploy elk stack on Google cloud Platform. What are best recommended instance type (N1,N2 ,N2D, Compute optimised and memory optimised) for elastic, logstash and kibana nodes. Thanks in Advance…

---

## [Visualization of sparse data in TSVB](https://discuss.elastic.co/t/visualization-of-sparse-data-in-tsvb/247113)

<div class="topic-metadata">

**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\
**Replies:** 6\
**Last updated:** [September 14, 2020, 2:49pm UTC](https://discuss.elastic.co/t/visualization-of-sparse-data-in-tsvb/247113 "2020-09-14T14:49:42Z")

</div>

Hello, I use TSVB to visualize data that is being sent every 1 minute to Elasticsearch. The problem is, sometimes the data takes a little bit more time to be calculated, and so it is being sent after 1 min and 5 second…

---

## [Inspect =\> Download CSV =\> Formatted CSV, download file using Python](https://discuss.elastic.co/t/inspect-download-csv-formatted-csv-download-file-using-python/248508)

<div class="topic-metadata">

**Author:** [@balajipothula](https://discuss.elastic.co/u/balajipothula)\
**Replies:** 3\
**Last updated:** [September 14, 2020, 2:41pm UTC](https://discuss.elastic.co/t/inspect-download-csv-formatted-csv-download-file-using-python/248508 "2020-09-14T14:41:50Z")

</div>

HI Team, I had Kibana version 7.4 Inspect =\> Download CSV =\> Formatted CSV Can I download table visualization Formatted data by using Python code or CURL Thanks and regards, BALAJI

---

## [Es instance unusable](https://discuss.elastic.co/t/es-instance-unusable/247768)

<div class="topic-metadata">

**Author:** [@lizhu](https://discuss.elastic.co/u/lizhu)\
**Replies:** 6\
**Last updated:** [September 14, 2020, 2:39pm UTC](https://discuss.elastic.co/t/es-instance-unusable/247768 "2020-09-14T14:39:45Z")

</div>

Hi I have an es(version 6.8.0) cluster with 5 nodes which have 261 shards that max size is 40G and min size is 700M，vm nodes：16 cpu and 32 G. It became unusable sometimes and print such logs how to trouble shoot? …

---

## [MongoDB logs are not reflecting in kibana dashboard](https://discuss.elastic.co/t/mongodb-logs-are-not-reflecting-in-kibana-dashboard/248493)

<div class="topic-metadata">

**Author:** [@vijay\_venky](https://discuss.elastic.co/u/vijay_venky)\
**Replies:** 10\
**Last updated:** [September 14, 2020, 2:36pm UTC](https://discuss.elastic.co/t/mongodb-logs-are-not-reflecting-in-kibana-dashboard/248493 "2020-09-14T14:36:39Z")

</div>

MongoDB logs are not reflecting in kibana dashboard MetricBeat YAML file is configured correctly and mongo DB YAML module enabled mongodb.yml: Module: mongodb Docs: https://www.elastic.co/guide/en/beats/metricbeat/6.8…

---

## [Issue in starting Kibana 7.9.1](https://discuss.elastic.co/t/issue-in-starting-kibana-7-9-1/248532)

<div class="topic-metadata">

**Author:** [@Prashant\_Achari](https://discuss.elastic.co/u/Prashant_Achari)\
**Replies:** 2\
**Last updated:** [September 14, 2020, 2:30pm UTC](https://discuss.elastic.co/t/issue-in-starting-kibana-7-9-1/248532 "2020-09-14T14:30:19Z")

</div>

Unable to start kibana getting error log \[13:18:38.159\] \[error\]\[plugins\]\[reporting\]\[validations\] The Reporting plugin encountered issues launching Chromium in a self-test. You may have trouble generating reports. log…

---

## [How to eliminate square brackets in the parsed logs](https://discuss.elastic.co/t/how-to-eliminate-square-brackets-in-the-parsed-logs/248502)

<div class="topic-metadata">

**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 1:51pm UTC](https://discuss.elastic.co/t/how-to-eliminate-square-brackets-in-the-parsed-logs/248502 "2020-09-14T13:51:09Z")

</div>

The pattern is : match =\> { "message" =\> "%{SYSLOG5424SD:time}%{SYSLOG5424SD:level}%{SYSLOG5424SD:message} %{SYSLOG5424SD:node} realm %{SYSLOG5424SD} authenticated user %{SYSLOG5424SD:user}, with roles %{SYSLOG5424S…

---

## [How to Merge Two indices into Single using Logstash](https://discuss.elastic.co/t/how-to-merge-two-indices-into-single-using-logstash/248534)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 0\
**Last updated:** [September 14, 2020, 1:30pm UTC](https://discuss.elastic.co/t/how-to-merge-two-indices-into-single-using-logstash/248534 "2020-09-14T13:30:22Z")

</div>

Hi Team I am having Elasticsearch Cluster of version 7.8.0 running with multiple indices without a pattern in their names. I want to merge two indices into single index and both \[ source \] do not have common field. I …

---

## [Can some help in value count aggregations](https://discuss.elastic.co/t/can-some-help-in-value-count-aggregations/248309)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 1:27pm UTC](https://discuss.elastic.co/t/can-some-help-in-value-count-aggregations/248309 "2020-09-14T13:27:48Z")

</div>

Hi, i am using value count aggragtion and with the script, pfb the script "script": { "lang": "painless", "source": "for(int i=0; i\<1; i++){if(doc\['message.code'\].size() \>0 && doc\['message.code'\].value \>= 300){doc\['…

---

## [How to detect route changes in kibana 7.8 OSS version using history.listen()](https://discuss.elastic.co/t/how-to-detect-route-changes-in-kibana-7-8-oss-version-using-history-listen/247700)

<div class="topic-metadata">

**Author:** [@Jayanth\_Mogadampalli](https://discuss.elastic.co/u/Jayanth_Mogadampalli)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 1:20pm UTC](https://discuss.elastic.co/t/how-to-detect-route-changes-in-kibana-7-8-oss-version-using-history-listen/247700 "2020-09-14T13:20:35Z")

</div>

I am developing a plugin for authentication and authorization For authorization, I need to protect all the routes So, I tried to listen to route changes using history.listen() in app\_router.tsx file present in repo Bu…

---

## [V7.8 : On route any common function](https://discuss.elastic.co/t/v7-8-on-route-any-common-function/247871)

<div class="topic-metadata">

**Author:** [@vvvprabhakar](https://discuss.elastic.co/u/vvvprabhakar)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 1:13pm UTC](https://discuss.elastic.co/t/v7-8-on-route-any-common-function/247871 "2020-09-14T13:13:00Z")

</div>

v7.8: On route any common function Is there any common function on every route change? For example if I am in the home page, if I navigate to the dashboard or visualize page I want to call a function before navigation …

---

## [Ingest-Attachment: Enabling OCR](https://discuss.elastic.co/t/ingest-attachment-enabling-ocr/248527)

<div class="topic-metadata">

**Author:** [@roelandw](https://discuss.elastic.co/u/roelandw)\
**Replies:** 1\
**Last updated:** [September 14, 2020, 12:52pm UTC](https://discuss.elastic.co/t/ingest-attachment-enabling-ocr/248527 "2020-09-14T12:52:57Z")

</div>

Hi there, I'm trying to index some various documents using the Ingest-Attachment plugin. Some of these documents are image-based pdf documents that require OCR processing. According to this page on StackOverflow, Inges…

---

## [Did elasticsearch cluster name includes special characters](https://discuss.elastic.co/t/did-elasticsearch-cluster-name-includes-special-characters/248329)

<div class="topic-metadata">

**Author:** [@chandu2](https://discuss.elastic.co/u/chandu2)\
**Replies:** 10\
**Last updated:** [September 14, 2020, 12:50pm UTC](https://discuss.elastic.co/t/did-elasticsearch-cluster-name-includes-special-characters/248329 "2020-09-14T12:50:19Z")

</div>

Did elasticsearch cluster name includes special characters. If Iam including I am getting error. Please anyone clarify on this. How can I use special characters also

---

## [Access elasticsearch from public ip instead of LAN ipv4](https://discuss.elastic.co/t/access-elasticsearch-from-public-ip-instead-of-lan-ipv4/248087)

<div class="topic-metadata">

**Author:** [@Abdul\_Samad](https://discuss.elastic.co/u/Abdul_Samad)\
**Replies:** 12\
**Last updated:** [September 14, 2020, 12:46pm UTC](https://discuss.elastic.co/t/access-elasticsearch-from-public-ip-instead-of-lan-ipv4/248087 "2020-09-14T12:46:42Z")

</div>

I have elasticsearch installed in one machine with local LAN ipv4 = 192.168.. public ip = 39...\* i have http.port: 9200 network.host: 0.0.0.0 in my elasticsearch.yml I can access this with in same network: ipv4:9…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1236)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1238)
