# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1339 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1340 --- ## [Use static data in Vega Visualisation](https://discuss.elastic.co/t/use-static-data-in-vega-visualisation/239955)
**Author:** [@biplabd67](https://discuss.elastic.co/u/biplabd67)\ **Replies:** 3\ **Last updated:** [July 10, 2020, 6:37am UTC](https://discuss.elastic.co/t/use-static-data-in-vega-visualisation/239955 "2020-07-10T06:37:28Z")
I would like to use a static set of data instead of a url query to evaluate a Vega code I am trying to design. Somehow I am not able to use the static data , any help or assistance pointer would be appreciated. --- ## [How many shards should I have in Elasticsearch Node with v7.7?](https://discuss.elastic.co/t/how-many-shards-should-i-have-in-elasticsearch-node-with-v7-7/240452)
**Author:** [@begin](https://discuss.elastic.co/u/begin)\ **Replies:** 6\ **Last updated:** [July 10, 2020, 6:34am UTC](https://discuss.elastic.co/t/how-many-shards-should-i-have-in-elasticsearch-node-with-v7-7/240452 "2020-07-10T06:34:47Z")
Hello, I know, I keep number of shards per node below 20 per GB heap it has configured. https://www.elastic.co/blog/how-many-shards-should-i-have-in-my-elasticsearch-cluster But, I know Elasticsearch heap memory usag… --- ## [Search UI is not suupoting hashing in url](https://discuss.elastic.co/t/search-ui-is-not-suupoting-hashing-in-url/240519)
**Author:** [@ranjeet.tiwari](https://discuss.elastic.co/u/ranjeet.tiwari)\ **Replies:** 5\ **Last updated:** [July 10, 2020, 5:56am UTC](https://discuss.elastic.co/t/search-ui-is-not-suupoting-hashing-in-url/240519 "2020-07-10T05:56:59Z")
We are using search ui library that allows to quickly implement search experience leveraging Elasticsearch. We have used hashing in the url routing (which generate the url like this http://www.example.com/#/Search, it i… --- ## [Indian currency abbreviation format](https://discuss.elastic.co/t/indian-currency-abbreviation-format/239916)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 2\ **Last updated:** [July 10, 2020, 5:45am UTC](https://discuss.elastic.co/t/indian-currency-abbreviation-format/239916 "2020-07-10T05:45:10Z")
Hi , i am trying abbreviation the big number in kibana, i know there is abb. like million billion changing the format to 0.00a . but i want to in indan format , which is 100 k= 1 lakh 1 million = 10 lakh 10 millio… --- ## [How to create a new field combining values of other field values](https://discuss.elastic.co/t/how-to-create-a-new-field-combining-values-of-other-field-values/238087)
**Author:** [@Matish\_Bhuyan](https://discuss.elastic.co/u/Matish_Bhuyan)\ **Replies:** 36\ **Last updated:** [July 10, 2020, 5:32am UTC](https://discuss.elastic.co/t/how-to-create-a-new-field-combining-values-of-other-field-values/238087 "2020-07-10T05:32:08Z")
Hi All, I am using elk version 7.2 I have two keywords 1- result 2 - service using the values of these keywords i want to create another field which will met the condition and keep the data according to the conditio… --- ## [Unstrucutred data](https://discuss.elastic.co/t/unstrucutred-data/240644)
**Author:** [@kluvi](https://discuss.elastic.co/u/kluvi)\ **Replies:** 1\ **Last updated:** [July 10, 2020, 5:10am UTC](https://discuss.elastic.co/t/unstrucutred-data/240644 "2020-07-10T05:10:57Z")
Hi. We are currently using Elasticsearch as our primary database for some data about products. One document in Elasticsearch is one product, which have some predictable properties (like price, name,...). This products a… --- ## [Elasticsearch: empty slices when using scroll api with slice](https://discuss.elastic.co/t/elasticsearch-empty-slices-when-using-scroll-api-with-slice/239586)
**Author:** [@PierreC](https://discuss.elastic.co/u/PierreC)\ **Replies:** 2\ **Last updated:** [July 10, 2020, 5:00am UTC](https://discuss.elastic.co/t/elasticsearch-empty-slices-when-using-scroll-api-with-slice/239586 "2020-07-10T05:00:01Z")
I have a simple setup with a green cluster (v7.5.2) of 1 instance with 1 index (replica 0) with 8 shards. 61,500 documents indexed. If I create 8 slices with these queries (POST queries) http://localhost:9202/products… --- ## [Logstash 7.6.2 (EPIPE) Broken pipe Error (pipeline stopped processing new events)](https://discuss.elastic.co/t/logstash-7-6-2-epipe-broken-pipe-error-pipeline-stopped-processing-new-events/238366)
**Author:** [@iscorpio23](https://discuss.elastic.co/u/iscorpio23)\ **Replies:** 3\ **Last updated:** [July 10, 2020, 4:48am UTC](https://discuss.elastic.co/t/logstash-7-6-2-epipe-broken-pipe-error-pipeline-stopped-processing-new-events/238366 "2020-07-10T04:48:22Z")
Hi All, Just upgrade Logstash version from version 6.2.3 to 7.6.2 by RPM upgrade and i have 9 pipeline. Logstash will push log to Elasticsearch cloud version 7.4. After the upgrade, log can be seen in Kibana, but daily … --- ## [How to run or test Logstash pipeline?](https://discuss.elastic.co/t/how-to-run-or-test-logstash-pipeline/240638)
**Author:** [@prabhpahul](https://discuss.elastic.co/u/prabhpahul)\ **Replies:** 0\ **Last updated:** [July 10, 2020, 4:05am UTC](https://discuss.elastic.co/t/how-to-run-or-test-logstash-pipeline/240638 "2020-07-10T04:05:24Z")
I am trying to build a logstash pipeline to pool data from sql server continuously. But I am not able to test the pipeline on the cloud? --- ## [Remote cluster connected but not listed](https://discuss.elastic.co/t/remote-cluster-connected-but-not-listed/238203)
**Author:** [@Sebastian\_Treu](https://discuss.elastic.co/u/Sebastian_Treu)\ **Replies:** 1\ **Last updated:** [July 10, 2020, 3:14am UTC](https://discuss.elastic.co/t/remote-cluster-connected-but-not-listed/238203 "2020-07-10T03:14:47Z")
Hey there, I'm trying to connect a local cluster (7.8.0) with a remote cluster (7.3.2) where both has secured xpack.security.transport.ssl.enabled=true with the same certificate, key and ca, and both are deployed using d… --- ## [ログローテート後のlogstashでのfile inputの挙動について](https://discuss.elastic.co/t/logstash-file-input/240635)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 0\ **Last updated:** [July 10, 2020, 2:48am UTC](https://discuss.elastic.co/t/logstash-file-input/240635 "2020-07-10T02:48:24Z")
logstashを使用して、messagesと、messagesローテート後のmessages.1をinputファイルとして見ております。 messagesは、1日1回ローテートして、messages.1に名前が変わります。iノードは変わりません。 logstashのconfにて、sincedbは明示的に出力しております messagesをlogstashにて読み込ませた。elasticに登録した後、1日経ってログがローテートし、… --- ## [ワーニング internal:plugin/license/cluster/register\_trial\_license](https://discuss.elastic.co/t/internal-plugin-license-cluster-register-trial-license/240631)
**Author:** [@chinone](https://discuss.elastic.co/u/chinone)\ **Replies:** 0\ **Last updated:** [July 10, 2020, 2:23am UTC](https://discuss.elastic.co/t/internal-plugin-license-cluster-register-trial-license/240631 "2020-07-10T02:23:14Z")
Elasticsearch 2.3.2 を利用しています。 マスターノードに以下のワーニングが頻繁に出力されます。 そのようにすればワーニングを消すことができるでしょうか？ \[2020-07-09 11:53:35,572\]\[WARN \]\[transport.netty \] \[engage-es02\] exception caught on transport layer \[\[id: 0xbedf8ecf, /1… --- ## [Check if a value of a field has changed in a single query](https://discuss.elastic.co/t/check-if-a-value-of-a-field-has-changed-in-a-single-query/240629)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [July 10, 2020, 2:16am UTC](https://discuss.elastic.co/t/check-if-a-value-of-a-field-has-changed-in-a-single-query/240629 "2020-07-10T02:16:07Z")
Hi, Its is posible to check if a value of a field has changed in a single query? Maybe comparing the last value with the actual value? --- ## [Installing elasticsearch for Graylog](https://discuss.elastic.co/t/installing-elasticsearch-for-graylog/240624)
**Author:** [@Morgan\_Hausmann](https://discuss.elastic.co/u/Morgan_Hausmann)\ **Replies:** 0\ **Last updated:** [July 10, 2020, 1:29am UTC](https://discuss.elastic.co/t/installing-elasticsearch-for-graylog/240624 "2020-07-10T01:29:55Z")
Trying to install and start elasticsearch to get Graylog working. I've been following the steps from the link above but for Amazon AMI Linux. Getting this error and I cannot figure out what's going on. --- ## [Problem with URL field](https://discuss.elastic.co/t/problem-with-url-field/239748)
**Author:** [@kvtang](https://discuss.elastic.co/u/kvtang)\ **Replies:** 4\ **Last updated:** [July 10, 2020, 1:19am UTC](https://discuss.elastic.co/t/problem-with-url-field/239748 "2020-07-10T01:19:44Z")
Hi all, Currently I have a "log" field which is pointed to a Windows file share. However, when I try to change the format of "log" to URL, it seems to add https://... before my file share and changed all backslash into … --- ## [Controls showing one value in kibana 7.1](https://discuss.elastic.co/t/controls-showing-one-value-in-kibana-7-1/240569)
**Author:** [@renu\_jessi](https://discuss.elastic.co/u/renu_jessi)\ **Replies:** 1\ **Last updated:** [July 10, 2020, 12:09am UTC](https://discuss.elastic.co/t/controls-showing-one-value-in-kibana-7-1/240569 "2020-07-10T00:09:19Z")
Hi, Iam getting only one value in control dropdown visualization even though index has multiple values. i searched every where thr solution is lilr upgrading kibana version. but my customer insisting on 7.1.1 version on… --- ## [Logstash since\_db =\> "NUL" not forcing reload](https://discuss.elastic.co/t/logstash-since-db-nul-not-forcing-reload/240566)
**Author:** [@noamc](https://discuss.elastic.co/u/noamc)\ **Replies:** 7\ **Last updated:** [July 9, 2020, 10:11pm UTC](https://discuss.elastic.co/t/logstash-since-db-nul-not-forcing-reload/240566 "2020-07-09T22:11:30Z")
Hello all, I've built a ELK stack that loads a CSV on an hourly basis. The CSV is of all our tasks from jira, and so every change in an issue gets updated in the CSV, and needs to be reloaded to Kibana. The stack works… --- ## [Index two parts of document in two different index](https://discuss.elastic.co/t/index-two-parts-of-document-in-two-different-index/240609)
**Author:** [@Bouraoui\_Kacem](https://discuss.elastic.co/u/Bouraoui_Kacem)\ **Replies:** 1\ **Last updated:** [July 9, 2020, 9:53pm UTC](https://discuss.elastic.co/t/index-two-parts-of-document-in-two-different-index/240609 "2020-07-09T21:53:51Z")
I received a document which contains an array of objects , i want to index all the document in index1 and the content of the array in indexTwo , how can i configure that with logstash please with filter and output ? --- ## [Query ES API for a Geofence Containing Most Docs](https://discuss.elastic.co/t/query-es-api-for-a-geofence-containing-most-docs/105303)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 1\ **Last updated:** [July 9, 2020, 9:35pm UTC](https://discuss.elastic.co/t/query-es-api-for-a-geofence-containing-most-docs/105303 "2020-07-09T21:35:44Z")
ES v5.6.2 I have a use case where I need to determine a geofence containing a large numbers of requests. It would be nice to get any geofence with \>10% of requests, however this ask is flexible depending on what's possi… --- ## [Mount Shared Repository for Snapshot](https://discuss.elastic.co/t/mount-shared-repository-for-snapshot/240563)
**Author:** [@aducSG](https://discuss.elastic.co/u/aducSG)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 9:29pm UTC](https://discuss.elastic.co/t/mount-shared-repository-for-snapshot/240563 "2020-07-09T21:29:38Z")
Hello, I want to use the Snapshot module in order to make backups of my one and only index. I created manually the folder in this location C:\\ProgramData\\Elastic\\Elasticsearch\\Snapshots, and I gave the written and read… --- ## [Logstash data not reflecting in kibana](https://discuss.elastic.co/t/logstash-data-not-reflecting-in-kibana/240583)
**Author:** [@Sai\_Avinash\_Duddupud](https://discuss.elastic.co/u/Sai_Avinash_Duddupud)\ **Replies:** 3\ **Last updated:** [July 9, 2020, 8:56pm UTC](https://discuss.elastic.co/t/logstash-data-not-reflecting-in-kibana/240583 "2020-07-09T20:56:52Z")
I am new to ELK stack and trying to setup one. Filebeat is sending logs to logstash and logstash is successfully receiving it. Also, the index pattern nsa got reflected on kibana indices list( elk\_server\_ip:9200/\_cat/in… --- ## [Mysterious \_dateparsefailure on identical fields](https://discuss.elastic.co/t/mysterious-dateparsefailure-on-identical-fields/240597)
**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\ **Replies:** 6\ **Last updated:** [July 9, 2020, 8:53pm UTC](https://discuss.elastic.co/t/mysterious-dateparsefailure-on-identical-fields/240597 "2020-07-09T20:53:48Z")
I have included below 3 csv input lines that are virtually identical to one another. The date field in the first and last parse properly whereas I get a \_dateparsefailure on the middle line. The logstash date field is s… --- ## [Printing stdout {codec =\> rubydebug} only on error](https://discuss.elastic.co/t/printing-stdout-codec-rubydebug-only-on-error/240598)
**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 8:36pm UTC](https://discuss.elastic.co/t/printing-stdout-codec-rubydebug-only-on-error/240598 "2020-07-09T20:36:16Z")
How can I control the output section of a logstash config to only print the stdout {codec =\> rubydebug} on an error? for example , on a \_dateparsefailure. --- ## [Can some one help How to add two columns in Kibana tabble visulisation](https://discuss.elastic.co/t/can-some-one-help-how-to-add-two-columns-in-kibana-tabble-visulisation/240412)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 6\ **Last updated:** [July 9, 2020, 8:00pm UTC](https://discuss.elastic.co/t/can-some-one-help-how-to-add-two-columns-in-kibana-tabble-visulisation/240412 "2020-07-09T20:00:12Z")
Hi I have use case to display multiple aggrgated columns in visulisation. i am using data table as visulisation. column 1 : sum of field 1 based on filteration in a given period column 2: count of calls based on filt… --- ## [Question about logstash and kafka](https://discuss.elastic.co/t/question-about-logstash-and-kafka/240553)
**Author:** [@Maurizio\_Tarducci](https://discuss.elastic.co/u/Maurizio_Tarducci)\ **Replies:** 12\ **Last updated:** [July 9, 2020, 6:26pm UTC](https://discuss.elastic.co/t/question-about-logstash-and-kafka/240553 "2020-07-09T18:26:23Z")
Hi i would like to configure logstash with kafka in a way that based on the content of the message that logstash collect send to kafka in a different topic : for example if the message contains the string XXX i want send… --- ## [Problem in SSL between logstash and filebeat](https://discuss.elastic.co/t/problem-in-ssl-between-logstash-and-filebeat/240579)
**Author:** [@azteker](https://discuss.elastic.co/u/azteker)\ **Replies:** 1\ **Last updated:** [July 9, 2020, 5:47pm UTC](https://discuss.elastic.co/t/problem-in-ssl-between-logstash-and-filebeat/240579 "2020-07-09T17:47:46Z")
Here is the logstash's error log: Jul 09 17:34:26 elk.novalocal logstash\[15657\]: Caused by: java.security.cert.CertificateException: could not find certificate file: /etc/logstash/certs/logstash.crt Jul 09 17:34:26 elk… --- ## [Receiving remote logs in logstash](https://discuss.elastic.co/t/receiving-remote-logs-in-logstash/240234)
**Author:** [@orlapa](https://discuss.elastic.co/u/orlapa)\ **Replies:** 4\ **Last updated:** [July 9, 2020, 5:36pm UTC](https://discuss.elastic.co/t/receiving-remote-logs-in-logstash/240234 "2020-07-09T17:36:23Z")
I have configured a HSM to send lodgs via TCP to logstash listening in pot 5004, but nothing arrive. I did a test with Rsyslog in port 514 and the logs arrive. Where should I focus the serach for error, the services are … --- ## [Kibana - Avg Table visualization for two different dates](https://discuss.elastic.co/t/kibana-avg-table-visualization-for-two-different-dates/236945)
**Author:** [@nareshnakka](https://discuss.elastic.co/u/nareshnakka)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 5:36pm UTC](https://discuss.elastic.co/t/kibana-avg-table-visualization-for-two-different-dates/236945 "2020-07-09T17:36:00Z")
Hello experts, I am trying to visualize some date into Kibana table. But unable to generate comparative table of two different dates like below. I can visualize it as a graph but , I want it as a table. Sample Data in … --- ## [Is Elasticsearch as a primary database better than Oracle?](https://discuss.elastic.co/t/is-elasticsearch-as-a-primary-database-better-than-oracle/236970)
**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\ **Replies:** 12\ **Last updated:** [July 9, 2020, 5:25pm UTC](https://discuss.elastic.co/t/is-elasticsearch-as-a-primary-database-better-than-oracle/236970 "2020-07-09T17:25:04Z")
Hi, I am a student and my project is about Elastic Stack. the company I work for is currently using oracle for managing its data. they want assess Elasticsearch as a replacement. according to my project success they … --- ## [Data node won't start due to name duplication](https://discuss.elastic.co/t/data-node-wont-start-due-to-name-duplication/240576)
**Author:** [@Ugon](https://discuss.elastic.co/u/Ugon)\ **Replies:** 0\ **Last updated:** [July 9, 2020, 5:21pm UTC](https://discuss.elastic.co/t/data-node-wont-start-due-to-name-duplication/240576 "2020-07-09T17:21:52Z")
Hello, I'm experiencing an error where my elasticsearch (6.7) data nodes won't start due to name duplication. Caused by: java.lang.IllegalStateException: index and alias names need to be unique, but the following d… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1338) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1340)