# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1272 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1273 --- ## [Retrieve the sum of count of string fields](https://discuss.elastic.co/t/retrieve-the-sum-of-count-of-string-fields/245778)
**Author:** [@ranu\_shekhar](https://discuss.elastic.co/u/ranu_shekhar)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 3:58am UTC](https://discuss.elastic.co/t/retrieve-the-sum-of-count-of-string-fields/245778 "2020-08-21T03:58:57Z")
Hi, I want to retrieve the sum of the count of string fields in bar chart. Is it possible to do it in Kibana visualisations. Here I want one more bar chart that will show the cummulative sum of all fields. --- ## [Failed to install The Japanese (kuromoji) Analysis plugin to Elasticsearch 7.8.1](https://discuss.elastic.co/t/failed-to-install-the-japanese-kuromoji-analysis-plugin-to-elasticsearch-7-8-1/245630)
**Author:** [@masapon](https://discuss.elastic.co/u/masapon)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 3:09pm UTC](https://discuss.elastic.co/t/failed-to-install-the-japanese-kuromoji-analysis-plugin-to-elasticsearch-7-8-1/245630 "2020-08-19T15:09:39Z")
ERROR message is as follows: Downloading file: https://artifacts.elastic.co/downloads/elasticsearch-plugins/analysis-kuromoji/analysis-kuromoji-7.8.1.zip Downloading \[===================================================… --- ## [FATAL Error: EISDIR: illegal operation on a directory, read](https://discuss.elastic.co/t/fatal-error-eisdir-illegal-operation-on-a-directory-read/245733)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 1:35am UTC](https://discuss.elastic.co/t/fatal-error-eisdir-illegal-operation-on-a-directory-read/245733 "2020-08-21T01:35:09Z")
I used version 7.6.1 before, and then I changed it to kibana:8.0.0-SNAPSHOT Restart the pod and it won't work Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read at Object.readSync (f… --- ## [\[Metricbeat Windows\] Services ECS dashboard throwing errors](https://discuss.elastic.co/t/metricbeat-windows-services-ecs-dashboard-throwing-errors/245173)
**Author:** [@mudricd](https://discuss.elastic.co/u/mudricd)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 11:21pm UTC](https://discuss.elastic.co/t/metricbeat-windows-services-ecs-dashboard-throwing-errors/245173 "2020-08-20T23:21:41Z")
Hi, I setup Metricbeat on Windows and I use windows module to send info about services to Elasticsearch through Logstash. There are no filters on Logstash server for this pipeline. Then I loaded Kibana dashboards accor… --- ## [Logstash sincedb file issue](https://discuss.elastic.co/t/logstash-sincedb-file-issue/245831)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 11:08pm UTC](https://discuss.elastic.co/t/logstash-sincedb-file-issue/245831 "2020-08-20T23:08:08Z")
Hi Team My elk is on docker and I'm mounting sincedb file to mounted volume. I changed the directory of logstash file input and recreated the docker container. I see log data of only one file in elasticsearch though h… --- ## [Unable to reindex after field changes](https://discuss.elastic.co/t/unable-to-reindex-after-field-changes/243867)
**Author:** [@Gavin\_Clark](https://discuss.elastic.co/u/Gavin_Clark)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 11:01pm UTC](https://discuss.elastic.co/t/unable-to-reindex-after-field-changes/243867 "2020-08-20T23:01:39Z")
At the end of each month to keep index and shard counts low, we reindex all of our daily indices into a larger monthly index. We do this by manually running a reindex job on each of our larger index groups by running the… --- ## [Mathematics calculations with daily data records](https://discuss.elastic.co/t/mathematics-calculations-with-daily-data-records/245320)
**Author:** [@MyQuery](https://discuss.elastic.co/u/MyQuery)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 10:38pm UTC](https://discuss.elastic.co/t/mathematics-calculations-with-daily-data-records/245320 "2020-08-20T22:38:39Z")
Hi Team, We would like to build table in the below format . Data is coming as record by record.. Marketing Operating Count Total AF FL Total(%) AF(%) FL(%) UA UA 9415 24 17 7 0.25 0.18 0.07 UA LH 47 6 6 0 12.… --- ## [Only insert json objects that are not in elasticsearch](https://discuss.elastic.co/t/only-insert-json-objects-that-are-not-in-elasticsearch/245712)
**Author:** [@jmaharjan](https://discuss.elastic.co/u/jmaharjan)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 6:25am UTC](https://discuss.elastic.co/t/only-insert-json-objects-that-are-not-in-elasticsearch/245712 "2020-08-20T06:25:20Z")
Hello. Very new to elasticsearch. I am trying to use the ELK stack to provide a tool for viewing records obtain from an external API. The setup is: Get new records from external API Add them to elasticsearch if they do… --- ## [How to add custom Kibana Plugin App as Visualization Plugin in a Dashboard](https://discuss.elastic.co/t/how-to-add-custom-kibana-plugin-app-as-visualization-plugin-in-a-dashboard/245385)
**Author:** [@burakka](https://discuss.elastic.co/u/burakka)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 10:31pm UTC](https://discuss.elastic.co/t/how-to-add-custom-kibana-plugin-app-as-visualization-plugin-in-a-dashboard/245385 "2020-08-20T22:31:33Z")
Hi all, I developed a custom Kibana Plugin App. It's a React App which is visualizing data queried from an Elasticsearch index in its React components. It also has buttons in it, e.g. for filtering and updating data. N… --- ## [How to check stats of all saved objects](https://discuss.elastic.co/t/how-to-check-stats-of-all-saved-objects/245553)
**Author:** [@Redcxx](https://discuss.elastic.co/u/Redcxx)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 10:17pm UTC](https://discuss.elastic.co/t/how-to-check-stats-of-all-saved-objects/245553 "2020-08-20T22:17:41Z")
Hi I am using the saved\_objects API to create visualizations and dashboard, but since Kibana does not validate the data as mentioned here: When you create saved objects, attributes are not validated, which allows you t… --- ## [Query multiple mapping indices in visualization](https://discuss.elastic.co/t/query-multiple-mapping-indices-in-visualization/244971)
**Author:** [@InfiniteDreamer](https://discuss.elastic.co/u/InfiniteDreamer)\ **Replies:** 4\ **Last updated:** [August 20, 2020, 9:32pm UTC](https://discuss.elastic.co/t/query-multiple-mapping-indices-in-visualization/244971 "2020-08-20T21:32:36Z")
we have a index pattern with few indices with two different mapping, few fields are present in both mapping. we want bucket the common fields from both mapping indices and want to perform metric aggs on data from both m… --- ## [Kibana crash after 7.9 install; revert to 7.8 is ok](https://discuss.elastic.co/t/kibana-crash-after-7-9-install-revert-to-7-8-is-ok/245697)
**Author:** [@bumpyfaceok](https://discuss.elastic.co/u/bumpyfaceok)\ **Replies:** 11\ **Last updated:** [August 20, 2020, 9:22pm UTC](https://discuss.elastic.co/t/kibana-crash-after-7-9-install-revert-to-7-8-is-ok/245697 "2020-08-20T21:22:51Z")
Kibana starts and then fails with "FATAL URIError: URI malformed" Debian 10, logstash, elasticsearch, kibana all on same box. I removed Kibana 7.9 and installed 7.8 and it's working fine again; elasticsearch remains a… --- ## [Custom term dictionary](https://discuss.elastic.co/t/custom-term-dictionary/245820)
**Author:** [@sbt](https://discuss.elastic.co/u/sbt)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 8:35pm UTC](https://discuss.elastic.co/t/custom-term-dictionary/245820 "2020-08-20T20:35:49Z")
I have a use case where I want to get latest record for a terms filter. I am not interested in its score so its okay even if its not scored. I want this on 5 fields in an index. One option is to have 5 indexes with th… --- ## [Scripted field - Fielddata is disabled on text fields by default ... Alternatively use a keyword field instead. How to solve?](https://discuss.elastic.co/t/scripted-field-fielddata-is-disabled-on-text-fields-by-default-alternatively-use-a-keyword-field-instead-how-to-solve/245779)
**Author:** [@VooDooX](https://discuss.elastic.co/u/VooDooX)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 7:24pm UTC](https://discuss.elastic.co/t/scripted-field-fielddata-is-disabled-on-text-fields-by-default-alternatively-use-a-keyword-field-instead-how-to-solve/245779 "2020-08-20T19:24:40Z")
Hello. Running that script: def inst = /.\*instrument:(\[a-z\]+).\*/.matcher(doc\['FullDetails'\].value); if (inst.matches()) { return inst.group(1) } else { return "no match" } causes "Fielddata is disabled on text fi… --- ## [Kibana query help, find entries that occur on two different sites](https://discuss.elastic.co/t/kibana-query-help-find-entries-that-occur-on-two-different-sites/245790)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 7:03pm UTC](https://discuss.elastic.co/t/kibana-query-help-find-entries-that-occur-on-two-different-sites/245790 "2020-08-20T19:03:49Z")
hi, i'm struggling to sort out how to get a query to work. I have two sites sending logs via filebeat into an ELK stack. Each entry will have a field called "site" along with a bunch of log info (ip address, port, etc) … --- ## [Send Logstash events to secure Elasticsearch cluster](https://discuss.elastic.co/t/send-logstash-events-to-secure-elasticsearch-cluster/245810)
**Author:** [@panwarsagar](https://discuss.elastic.co/u/panwarsagar)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 6:57pm UTC](https://discuss.elastic.co/t/send-logstash-events-to-secure-elasticsearch-cluster/245810 "2020-08-20T18:57:30Z")
Hi, I have a 6 node Elasticsearch cluster deployed at two center with two Zone configuration. There are two master nodes (Master-1 & Master-2) at two locations. Both Master nodes are configured to use different certific… --- ## [Single Kibana Dashboard for All Users Limited with their Own Data](https://discuss.elastic.co/t/single-kibana-dashboard-for-all-users-limited-with-their-own-data/245807)
**Author:** [@Solaris23](https://discuss.elastic.co/u/Solaris23)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 6:28pm UTC](https://discuss.elastic.co/t/single-kibana-dashboard-for-all-users-limited-with-their-own-data/245807 "2020-08-20T18:28:36Z")
How to implement following scenario with ELK stack. Multiple users with same data type Single Kibana Dashboard for all users Each user should see own data on Dashboard The data type is same for all users. Should we cr… --- ## [Enabling features on air gapped network](https://discuss.elastic.co/t/enabling-features-on-air-gapped-network/245795)
**Author:** [@ave19](https://discuss.elastic.co/u/ave19)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 4:29pm UTC](https://discuss.elastic.co/t/enabling-features-on-air-gapped-network/245795 "2020-08-20T16:29:43Z")
I've just upgraded to 7.9.0 on an air gapped cluster. I cannot use the Ingest Manager because it cannot get to external repositories. Is there a way for me to get these packages and install them manually? Will these f… --- ## [Kibana 7.9.0: Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read](https://discuss.elastic.co/t/kibana-7-9-0-configuring-logger-failed-error-eisdir-illegal-operation-on-a-directory-read/245653)
**Author:** [@nixy](https://discuss.elastic.co/u/nixy)\ **Replies:** 7\ **Last updated:** [August 20, 2020, 4:04pm UTC](https://discuss.elastic.co/t/kibana-7-9-0-configuring-logger-failed-error-eisdir-illegal-operation-on-a-directory-read/245653 "2020-08-20T16:04:08Z")
Upgraded Kibana-full 7.8.1 to 7.9.0 using homebrew and elastic/tap/kibana-full. Afterwards when start kibana always get this error: Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read ..… --- ## [Composite aggregation after\_key](https://discuss.elastic.co/t/composite-aggregation-after-key/245789)
**Author:** [@Robert\_Pofuk](https://discuss.elastic.co/u/Robert_Pofuk)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 3:14pm UTC](https://discuss.elastic.co/t/composite-aggregation-after-key/245789 "2020-08-20T15:14:45Z")
Hi all! I have question. If I use histogram composite aggregation with setting size. For example I have integer range. Each number bucket in aggregation represents 1 day (Using integer for date is not important). If I… --- ## [Falha na configuração stack security](https://discuss.elastic.co/t/falha-na-configuracao-stack-security/204538)
**Author:** [@grfneto](https://discuss.elastic.co/u/grfneto)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 3:19pm UTC](https://discuss.elastic.co/t/falha-na-configuracao-stack-security/204538 "2020-08-20T15:19:20Z")
Fala pessoal, blz? Então.. estou com dificuldade em configurar um cluster de 3 nós, com o modo security ativo na versão 7.4.0 segue a configuração realizada no cluster: elk\_master: cluster.name: homolog node.name: el… --- ## [Using environment variables](https://discuss.elastic.co/t/using-environment-variables/245621)
**Author:** [@goncalobsantos](https://discuss.elastic.co/u/goncalobsantos)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 3:13pm UTC](https://discuss.elastic.co/t/using-environment-variables/245621 "2020-08-20T15:13:24Z")
I am trying to execute a conf file and get the following error: Connecion refused - failed to open TCP connection The error does not occur when I export the http and https\_proxy variables before executing the conf file… --- ## [Embed HTML5 chart(s) from TradingView, as charts or page/plugin?](https://discuss.elastic.co/t/embed-html5-chart-s-from-tradingview-as-charts-or-page-plugin/245633)
**Author:** [@richardfoster](https://discuss.elastic.co/u/richardfoster)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 3:03pm UTC](https://discuss.elastic.co/t/embed-html5-chart-s-from-tradingview-as-charts-or-page-plugin/245633 "2020-08-20T15:03:51Z")
Hi, I'm scoping the suitability of using ELK to deal with financial/market data. ELK does everything I need, however candlestick charts are required, and the ideal solution is to embed: https://www.tradingview.com/HTML5-… --- ## [Is there a way to display index last refreshed time in Elasticsearch/Kibana](https://discuss.elastic.co/t/is-there-a-way-to-display-index-last-refreshed-time-in-elasticsearch-kibana/245641)
**Author:** [@Divya\_Girase](https://discuss.elastic.co/u/Divya_Girase)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 2:52pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-display-index-last-refreshed-time-in-elasticsearch-kibana/245641 "2020-08-20T14:52:28Z")
Hello, Is there a way in Elasticsearch or Kibana with which I can determine when was the last time an index was refreshed. I am using python API to refresh the indices programmatically using python without the wait for … --- ## [Cannot use "+" in document id](https://discuss.elastic.co/t/cannot-use-in-document-id/245645)
**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\ **Replies:** 4\ **Last updated:** [August 20, 2020, 2:32pm UTC](https://discuss.elastic.co/t/cannot-use-in-document-id/245645 "2020-08-20T14:32:03Z")
I would like to search a document using below query and my document id contains "+" character. GET tpp\_lookup\_1808/\_doc/2FDC1B40E46EMD5DOHcKn5%2FR%2Bq6Wiipsx8Hkg==2020 in the response from kibana, "+" character is re… --- ## [Kibana Extremely slow Start Up Time on Openshift/Kubernetes while Optimizing and caching bundles](https://discuss.elastic.co/t/kibana-extremely-slow-start-up-time-on-openshift-kubernetes-while-optimizing-and-caching-bundles/245203)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 13\ **Last updated:** [August 20, 2020, 2:22pm UTC](https://discuss.elastic.co/t/kibana-extremely-slow-start-up-time-on-openshift-kubernetes-while-optimizing-and-caching-bundles/245203 "2020-08-20T14:22:11Z")
Hi guys, The deployment of kibana on openshift is extremely slow after or during this step: "Optimizing and caching bundles.... This may take a few minutes" The deployment takes about 7-8 minutes. You have an Idea how… --- ## [SQL Server data to Elasticsearch using LogStash](https://discuss.elastic.co/t/sql-server-data-to-elasticsearch-using-logstash/245488)
**Author:** [@sukumar.koganti](https://discuss.elastic.co/u/sukumar.koganti)\ **Replies:** 30\ **Last updated:** [August 20, 2020, 2:15pm UTC](https://discuss.elastic.co/t/sql-server-data-to-elasticsearch-using-logstash/245488 "2020-08-20T14:15:18Z")
HI I am tryting to integrate the Sql server data to Elasticsearch with Logstash in my local machine. I am using the Microsoft Sql Server 2019 and jdbc using the below --Microsoft JDBC Driver 4.2 for SQL Server This i… --- ## [Detecting bottleneck in Elasticsearch indexing](https://discuss.elastic.co/t/detecting-bottleneck-in-elasticsearch-indexing/242060)
**Author:** [@Merlin\_Nunez](https://discuss.elastic.co/u/Merlin_Nunez)\ **Replies:** 17\ **Last updated:** [August 20, 2020, 2:04pm UTC](https://discuss.elastic.co/t/detecting-bottleneck-in-elasticsearch-indexing/242060 "2020-08-20T14:04:48Z")
I posted about this same issue before but did not get an answer, I continued investigating but I´m still unable to get to the root cause of this. I have the following configuration in docker containers: 3 ES data nodes… --- ## [Create root field for all fields](https://discuss.elastic.co/t/create-root-field-for-all-fields/245740)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 1:49pm UTC](https://discuss.elastic.co/t/create-root-field-for-all-fields/245740 "2020-08-20T13:49:01Z")
Hi there, I have a question about ruby or anything else if it is possible. @Badger had a nice ruby script a few years ago. But it doesnt work right now and I am not familiar with ruby. ruby { init =\> ' E… --- ## [Open source Elasticsearch does not use template in index creation](https://discuss.elastic.co/t/open-source-elasticsearch-does-not-use-template-in-index-creation/245673)
**Author:** [@hweber](https://discuss.elastic.co/u/hweber)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 1:42pm UTC](https://discuss.elastic.co/t/open-source-elasticsearch-does-not-use-template-in-index-creation/245673 "2020-08-20T13:42:32Z")
I am using an open source build of Elasticsearch, version 7.8.0. I executed curl -ivvk -H "Content-Type: application/json" -H "Accept: application/json" -u username:password -X PUT "https://localhost:9200/\_template/tes… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1271) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1273)