# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1308 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1309 --- ## [Dynamic lookup on Kibana](https://discuss.elastic.co/t/dynamic-lookup-on-kibana/242524)
**Author:** [@zfmoto](https://discuss.elastic.co/u/zfmoto)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 6:13am UTC](https://discuss.elastic.co/t/dynamic-lookup-on-kibana/242524 "2020-07-30T06:13:47Z")
Currently, I'm trying to associate a process ID from a log to the name of the process. For instance, if I ingest 5 files, all of which belong to the same device, the name of the process will have a different process ID. … --- ## [Bug in bulk requests with mix of requests with and without pipelines](https://discuss.elastic.co/t/bug-in-bulk-requests-with-mix-of-requests-with-and-without-pipelines/242973)
**Author:** [@sihtam23](https://discuss.elastic.co/u/sihtam23)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 5:53am UTC](https://discuss.elastic.co/t/bug-in-bulk-requests-with-mix-of-requests-with-and-without-pipelines/242973 "2020-07-30T05:53:11Z")
I'm new here but not new to using the Elastic stack; I apologise if I get reporting this bug wrong. This bug exists in Elasticsearch 7.8. I know it doesn't exist in 6.8 but I haven't looked at all the in-between version… --- ## [Ansible Elasticsearch Hangs on TASK \[elastic.elasticsearch : Wait for elasticsearch to startup\]](https://discuss.elastic.co/t/ansible-elasticsearch-hangs-on-task-elastic-elasticsearch-wait-for-elasticsearch-to-startup/241734)
**Author:** [@M\_M](https://discuss.elastic.co/u/M_M)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 5:04am UTC](https://discuss.elastic.co/t/ansible-elasticsearch-hangs-on-task-elastic-elasticsearch-wait-for-elasticsearch-to-startup/241734 "2020-07-30T05:04:06Z")
The elasticsearch initiates successfully on the nodes but somehow ansible is stuck at TASK \[elastic.elasticsearch : Wait for elasticsearch to startup\] My nodes are EC2 Amazon linux 2 and ansible is run from my desktop… --- ## [Table Visual with Top Hit and filtering](https://discuss.elastic.co/t/table-visual-with-top-hit-and-filtering/243155)
**Author:** [@analog\_memories](https://discuss.elastic.co/u/analog_memories)\ **Replies:** 0\ **Last updated:** [July 30, 2020, 4:32am UTC](https://discuss.elastic.co/t/table-visual-with-top-hit-and-filtering/243155 "2020-07-30T04:32:36Z")
Hello there. I have a table visual that I have 2 Top Hits aggs. This is for Metricbeat filesystem used, trying to see when a host breaks a threshold. The Top Hits are for when the host is first seen in the query resul… --- ## [Best method in fingerprint](https://discuss.elastic.co/t/best-method-in-fingerprint/243055)
**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\ **Replies:** 3\ **Last updated:** [July 30, 2020, 4:32am UTC](https://discuss.elastic.co/t/best-method-in-fingerprint/243055 "2020-07-30T04:32:24Z")
Hello All , Can any one please let me know which is the best method used in Fingerprint filter ? I am beginner in fingerprint filter and not able to figure-out . Thanks and Regards Saravana S --- ## [Automatically created templates break beats dashboards](https://discuss.elastic.co/t/automatically-created-templates-break-beats-dashboards/242831)
**Author:** [@jclemons7](https://discuss.elastic.co/u/jclemons7)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 12:54am UTC](https://discuss.elastic.co/t/automatically-created-templates-break-beats-dashboards/242831 "2020-07-30T00:54:52Z")
Hello, I'm hoping someone can help me get this straight in my head. I've setup elastic stack all on one server and everything works well as it is. I've been messing with the beats in my lab (Winlogbeat, Packetbeat, Me… --- ## [We want to automatically delete some document with different expiration dates](https://discuss.elastic.co/t/we-want-to-automatically-delete-some-document-with-different-expiration-dates/243000)
**Author:** [@devin.teki](https://discuss.elastic.co/u/devin.teki)\ **Replies:** 7\ **Last updated:** [July 30, 2020, 12:54am UTC](https://discuss.elastic.co/t/we-want-to-automatically-delete-some-document-with-different-expiration-dates/243000 "2020-07-30T00:54:32Z")
How to let elasticsearch5.5.2 automatic delete document by some datetime field. The \_ttl mappings have been removed from 5.x. because effifient problem. Is there any other way I can delete expired files automatically… --- ## [Elasticsearch using too much memory](https://discuss.elastic.co/t/elasticsearch-using-too-much-memory/242808)
**Author:** [@SteveHodges](https://discuss.elastic.co/u/SteveHodges)\ **Replies:** 9\ **Last updated:** [July 29, 2020, 11:08pm UTC](https://discuss.elastic.co/t/elasticsearch-using-too-much-memory/242808 "2020-07-29T23:08:12Z")
Hello, Originally the ELK stack was working great but after several months of collecting logs, Kibana reports are failing to run properly and it appears due to Elasticsearch memory issues. At least for the past week th… --- ## [I have loaded some logs onto Kibana through logstash but not able to visualize it. Please help](https://discuss.elastic.co/t/i-have-loaded-some-logs-onto-kibana-through-logstash-but-not-able-to-visualize-it-please-help/243127)
**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\ **Replies:** 6\ **Last updated:** [July 29, 2020, 10:51pm UTC](https://discuss.elastic.co/t/i-have-loaded-some-logs-onto-kibana-through-logstash-but-not-able-to-visualize-it-please-help/243127 "2020-07-29T22:51:30Z")
I have loaded some logs onto Kibana through logstash but not able to visualize it. Please help. !\[image|690x255\](upload://iphkLDgNMjPf5ckQWnShHvvXJKW.png) When i click on the available field on the left pane, it does … --- ## [Access Kibana 7.8 outside of LAN](https://discuss.elastic.co/t/access-kibana-7-8-outside-of-lan/242352)
**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\ **Replies:** 4\ **Last updated:** [July 29, 2020, 10:45pm UTC](https://discuss.elastic.co/t/access-kibana-7-8-outside-of-lan/242352 "2020-07-29T22:45:50Z")
My web servers running CentOS 7 are on AWS. I am running Elasticsearch and Kibana on a local VM also running CentOS 7 and what logs shipped there. Logs are flowing fine to Elasticsearch from the remote web servers. Unfo… --- ## [Single Kibana for multi ES clusters](https://discuss.elastic.co/t/single-kibana-for-multi-es-clusters/243102)
**Author:** [@deeshu](https://discuss.elastic.co/u/deeshu)\ **Replies:** 1\ **Last updated:** [July 29, 2020, 9:41pm UTC](https://discuss.elastic.co/t/single-kibana-for-multi-es-clusters/243102 "2020-07-29T21:41:10Z")
Hi, Can we add multiple elasticsearch clusters in kibana.yml? like below elasticsearch.hosts: https://cluster1.xyz.com:9200, https://cluster2.xyz.com:9200 So the objective here is to have single kibana url and console… --- ## [Does in refresh interval data of the entire shards get changed](https://discuss.elastic.co/t/does-in-refresh-interval-data-of-the-entire-shards-get-changed/242886)
**Author:** [@rishabh\_jain](https://discuss.elastic.co/u/rishabh_jain)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 9:39pm UTC](https://discuss.elastic.co/t/does-in-refresh-interval-data-of-the-entire-shards-get-changed/242886 "2020-07-29T21:39:46Z")
Does in refresh interval data of the entire shards get changed or only the data which has been changed. Suppose refresh interval is 1s. And in if index.requests.cache.enable = true then filter query results will be c… --- ## [Enable Index after disabling it](https://discuss.elastic.co/t/enable-index-after-disabling-it/242803)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 9:29pm UTC](https://discuss.elastic.co/t/enable-index-after-disabling-it/242803 "2020-07-29T21:29:43Z")
Index attribute enables / disables indexing on elasticsearch. I am wondering if I can do the following: Disable indexing (set index to false) on a field. At some point in future, enable indexing on that field. This is… --- ## [How to set HTTP filter body to whole event](https://discuss.elastic.co/t/how-to-set-http-filter-body-to-whole-event/243041)
**Author:** [@bradley.king](https://discuss.elastic.co/u/bradley.king)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 9:16pm UTC](https://discuss.elastic.co/t/how-to-set-http-filter-body-to-whole-event/243041 "2020-07-29T21:16:07Z")
Hi guys, just a quick question. I can't seem to find the answer on the docs :confused: How do I reference the whole event in logstash? I want to use the HTTP filter to send the whole event to one of our APIs for some q… --- ## [TSVB - match fields from two Indexes V7.3](https://discuss.elastic.co/t/tsvb-match-fields-from-two-indexes-v7-3/241873)
**Author:** [@martb](https://discuss.elastic.co/u/martb)\ **Replies:** 1\ **Last updated:** [July 29, 2020, 8:45pm UTC](https://discuss.elastic.co/t/tsvb-match-fields-from-two-indexes-v7-3/241873 "2020-07-29T20:45:33Z")
Hi, I'm new to the TSVB in Kibana. Im displaying data from one index and trying to tag events from another index where the field contents matches i.e hostname. All works accept the tagging events on match. Please advi… --- ## [Kibana Index time field does not match @timestamp field](https://discuss.elastic.co/t/kibana-index-time-field-does-not-match-timestamp-field/242922)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 8:20pm UTC](https://discuss.elastic.co/t/kibana-index-time-field-does-not-match-timestamp-field/242922 "2020-07-29T20:20:39Z")
Hello, Within my Kibana, I have an index showing @timestamp and another called "time". The first issue is the field @timestamp does not match the time in Europe/London. The second is issue is that the time field in lo… --- ## [Multiple Advanced Setting after upgrade to 7.8.0](https://discuss.elastic.co/t/multiple-advanced-setting-after-upgrade-to-7-8-0/242178)
**Author:** [@srpine](https://discuss.elastic.co/u/srpine)\ **Replies:** 1\ **Last updated:** [July 29, 2020, 7:51pm UTC](https://discuss.elastic.co/t/multiple-advanced-setting-after-upgrade-to-7-8-0/242178 "2020-07-29T19:51:17Z")
After upgrading from 7.7.0 to 7.8.0 Saved Objects in Kibana shows in Saved Objects: Advanced Settings \[7.8.0\] Advanced Settings \[7.7.0\] Question: Do I need to keep both Advanced Settings and if so why? Can I delete… --- ## [Date histograms -- fixed intervals possible?](https://discuss.elastic.co/t/date-histograms-fixed-intervals-possible/243106)
**Author:** [@Todd\_Sayers](https://discuss.elastic.co/u/Todd_Sayers)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 7:41pm UTC](https://discuss.elastic.co/t/date-histograms-fixed-intervals-possible/243106 "2020-07-29T19:41:40Z")
I'm really struggling with the Date Histogram (in Kibana). We're sending custom metric data to ES (no, none of the Elastic tools are capable of doing this). The data and visualizations are "fine..." with one caveat: we c… --- ## [Is there a way to match Timestamps with the time in the message of the log](https://discuss.elastic.co/t/is-there-a-way-to-match-timestamps-with-the-time-in-the-message-of-the-log/242906)
**Author:** [@Archie\_Crawford](https://discuss.elastic.co/u/Archie_Crawford)\ **Replies:** 9\ **Last updated:** [July 29, 2020, 7:32pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-match-timestamps-with-the-time-in-the-message-of-the-log/242906 "2020-07-29T19:32:29Z")
I have tried to use things like : Filter{ grok { match =\> \["message", "%{TIMESTAMP\_ISO8601:timestamp}"\] } date { match =\> \["timestamp", "ISO8601"\] } } I have been trying to do this for java stack trace logs ... … --- ## [Creating a sub field of GROK filter pattern](https://discuss.elastic.co/t/creating-a-sub-field-of-grok-filter-pattern/238860)
**Author:** [@hemant\_472](https://discuss.elastic.co/u/hemant_472)\ **Replies:** 4\ **Last updated:** [July 29, 2020, 6:52pm UTC](https://discuss.elastic.co/t/creating-a-sub-field-of-grok-filter-pattern/238860 "2020-07-29T18:52:00Z")
Hi Everyone, i have a logstash configuration to parse my current logs but i would like to create a sub field from my message field and that data should be parsed as a fieldname, please suggest how that is possible: For… --- ## [Area visualization](https://discuss.elastic.co/t/area-visualization/242116)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 1\ **Last updated:** [July 29, 2020, 6:38pm UTC](https://discuss.elastic.co/t/area-visualization/242116 "2020-07-29T18:38:22Z")
Hi, this my data source: { "bookings": \[ { "bookingId": 553267, "bookingRef": "VO20200108460", "statusId": 1, "status": "Confirmed", "rating": 4, "hotelId": 17060, "hotelName": "Nerolia Hotel & SPA 4\*", "hote… --- ## [Analyzing Windows Host Data - Lab](https://discuss.elastic.co/t/analyzing-windows-host-data-lab/239171)
**Author:** [@fadi.alhamwii](https://discuss.elastic.co/u/fadi.alhamwii)\ **Replies:** 8\ **Last updated:** [July 29, 2020, 5:53pm UTC](https://discuss.elastic.co/t/analyzing-windows-host-data-lab/239171 "2020-07-29T17:53:16Z")
I have an issue with Analyzing Windows Host Data - Lab. I could open Strigo page, then can not Access lab instructions Also left the lab page open (30 min) and still the page is unreachable --- ## [How to recover unassigned shards and replica for a index](https://discuss.elastic.co/t/how-to-recover-unassigned-shards-and-replica-for-a-index/242917)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 5:46pm UTC](https://discuss.elastic.co/t/how-to-recover-unassigned-shards-and-replica-for-a-index/242917 "2020-07-29T17:46:54Z")
HI team, I want to know how to recover the red state into Green and when it try to find the reason and im getting below data, xx-logstash-2020.07 0 p INITIALIZING INDEX\_REOPENED xx-logstash-2020.07 0 … --- ## [Convert Kibana query (create index pattern) to Python](https://discuss.elastic.co/t/convert-kibana-query-create-index-pattern-to-python/242991)
**Author:** [@momora9809](https://discuss.elastic.co/u/momora9809)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 5:28pm UTC](https://discuss.elastic.co/t/convert-kibana-query-create-index-pattern-to-python/242991 "2020-07-29T17:28:41Z")
Hi, I'm trying to convert this query to python: PUT /.kibana/\_doc/index-pattern:tempindex { "type": "index-pattern", "index-pattern": { "title": "tempindex", "timeFieldName": "sendTime" } } HEADERS = { … --- ## [Adding a new columns to a data table from a calculation based on two different columns in the same row](https://discuss.elastic.co/t/adding-a-new-columns-to-a-data-table-from-a-calculation-based-on-two-different-columns-in-the-same-row/242952)
**Author:** [@MyQuery](https://discuss.elastic.co/u/MyQuery)\ **Replies:** 3\ **Last updated:** [July 29, 2020, 5:14pm UTC](https://discuss.elastic.co/t/adding-a-new-columns-to-a-data-table-from-a-calculation-based-on-two-different-columns-in-the-same-row/242952 "2020-07-29T17:14:42Z")
Hi, The user wants to see if there is a way to add a two additional column (Calculated columns) to data table like below table. Market | Total | D1 | D2 | Total D | Percentage D1 | Percentage D2 | percentage Tot… --- ## [Customization of Discover Page (Doc Table)](https://discuss.elastic.co/t/customization-of-discover-page-doc-table/240949)
**Author:** [@Akhil\_Kaithoju](https://discuss.elastic.co/u/Akhil_Kaithoju)\ **Replies:** 12\ **Last updated:** [July 29, 2020, 4:56pm UTC](https://discuss.elastic.co/t/customization-of-discover-page-doc-table/240949 "2020-07-29T16:56:49Z")
Hi, I want to customize Doc Table‌ on the Discover page. Requirement: I want to implement for selecting and multi-selecting all table fields using the check boxes and the data should come when selecting the check boxe… --- ## [Load kibana dashboard in iframe with API KEY authentication](https://discuss.elastic.co/t/load-kibana-dashboard-in-iframe-with-api-key-authentication/242970)
**Author:** [@Muhammad\_Umair\_Baig](https://discuss.elastic.co/u/Muhammad_Umair_Baig)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 10:27pm UTC](https://discuss.elastic.co/t/load-kibana-dashboard-in-iframe-with-api-key-authentication/242970 "2020-07-28T22:27:39Z")
Hi Team, I am wondering if we can achieve this. I did not find any topic related to this on which we are using api key authentication mechanism and load kibana dashboard in iframe Kibana and elastic search version i am… --- ## [Highlight entire row in kibana dashboard](https://discuss.elastic.co/t/highlight-entire-row-in-kibana-dashboard/243056)
**Author:** [@raj\_elk](https://discuss.elastic.co/u/raj_elk)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 4:30pm UTC](https://discuss.elastic.co/t/highlight-entire-row-in-kibana-dashboard/243056 "2020-07-29T16:30:01Z")
Hi, I have extracted error\_type(INFO,ERROR) from logs so want to highlight each row with different color based on type. i have tried but it is highlighting only that field not entire row. how this can be implemented. --- ## [Cidr Plugin - Warn and skipping data... Missing Data](https://discuss.elastic.co/t/cidr-plugin-warn-and-skipping-data-missing-data/242875)
**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\ **Replies:** 3\ **Last updated:** [July 29, 2020, 3:57pm UTC](https://discuss.elastic.co/t/cidr-plugin-warn-and-skipping-data-missing-data/242875 "2020-07-29T15:57:57Z")
Hello, I've been playing around with the logstash cidr filter plugin and have been coming into a couple of issues. For the most part, with most of the data sets that are coming in, this filter is working well and is doi… --- ## [How to fix this date range](https://discuss.elastic.co/t/how-to-fix-this-date-range/243065)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 3\ **Last updated:** [July 29, 2020, 3:42pm UTC](https://discuss.elastic.co/t/how-to-fix-this-date-range/243065 "2020-07-29T15:42:58Z")
Hi, Here is sample code from the documentation: GET /\_search { "query": { "range": { "timestamp": { "gte": "now-1d/d", "lt": "now/d" } } } } I want to change it so that now only… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1307) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1309)