# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1352

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1353

---

## [Date range doesn't have effect in Dashboard, missing in Explore](https://discuss.elastic.co/t/date-range-doesnt-have-effect-in-dashboard-missing-in-explore/238889)

<div class="topic-metadata">

**Author:** [@dmatt](https://discuss.elastic.co/u/dmatt)\
**Replies:** 2\
**Last updated:** [July 2, 2020, 5:30pm UTC](https://discuss.elastic.co/t/date-range-doesnt-have-effect-in-dashboard-missing-in-explore/238889 "2020-07-02T17:30:39Z")

</div>

Hi, I'm trying to solve a problem with the date range not appearing in the Explore page, and if I adjust the filter in a Dashboard, it has no effect on Data. Here's are the details: Kibana 7.1.0 created a visualization…

---

## [Pipeline does not exist](https://discuss.elastic.co/t/pipeline-does-not-exist/239478)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 4\
**Last updated:** [July 2, 2020, 5:27pm UTC](https://discuss.elastic.co/t/pipeline-does-not-exist/239478 "2020-07-02T17:27:58Z")

</div>

Hi, I'm sending logs from filebeat to logstash but it I'm getting this error from logstash connecting to elastisearch: Jul 01 14:26:49 elk logstash\[5445\]: \[2020-07-01T14:26:49,288\]\[WARN \]\[logstash.outputs.elasticsearch…

---

## [Metricbeat deamonset no system metrics](https://discuss.elastic.co/t/metricbeat-deamonset-no-system-metrics/239130)

<div class="topic-metadata">

**Author:** [@Bogdan\_Milescu](https://discuss.elastic.co/u/Bogdan_Milescu)\
**Replies:** 1\
**Last updated:** [July 2, 2020, 5:27pm UTC](https://discuss.elastic.co/t/metricbeat-deamonset-no-system-metrics/239130 "2020-07-02T17:27:14Z")

</div>

Hey guys, I have the deployed metricbeat as a daemonset on a k8s cluster. I have added the system module in order to monitor worker nodes metrics but it seems that no system metrics are recorded. The configuration is as…

---

## [Help with filter](https://discuss.elastic.co/t/help-with-filter/239556)

<div class="topic-metadata">

**Author:** [@rocanelo](https://discuss.elastic.co/u/rocanelo)\
**Replies:** 2\
**Last updated:** [July 2, 2020, 5:13pm UTC](https://discuss.elastic.co/t/help-with-filter/239556 "2020-07-02T17:13:39Z")

</div>

Dear community I have the next logs: \<6\> CEF:0|A10|TH1040S|4.1.4-GR1-P2|WAF62|filter-resp-hdrs|6|rt=Jul 01 2020 20:14:29 src=X.X.X.X spt=36230 dst=X.X.X.X dpt=443 dhost=axd341sas12jf.enjoy.cl cs1=WAF\_TEST cs2=8e139634b…

---

## [Centos 8 install Java before installing the elasticstack?](https://discuss.elastic.co/t/centos-8-install-java-before-installing-the-elasticstack/239546)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [July 2, 2020, 5:13pm UTC](https://discuss.elastic.co/t/centos-8-install-java-before-installing-the-elasticstack/239546 "2020-07-02T17:13:08Z")

</div>

Hi, in the documentation says that elasticsearch includes a bundled version of OpenJDK Elasticsearch is built using Java, and includes a bundled version of OpenJDK from the JDK maintainers (GPLv2+CE) within each distrib…

---

## [Getting issues with Java heap on Elasticsearch](https://discuss.elastic.co/t/getting-issues-with-java-heap-on-elasticsearch/239649)

<div class="topic-metadata">

**Author:** [@AshokBachchan](https://discuss.elastic.co/u/AshokBachchan)\
**Replies:** 6\
**Last updated:** [July 2, 2020, 4:14pm UTC](https://discuss.elastic.co/t/getting-issues-with-java-heap-on-elasticsearch/239649 "2020-07-02T16:14:42Z")

</div>

Hello @matw We have facing issue with elasticsearch, suddenly master nodes getting down. Logs were showing Java OutOfMemoryError. Master nodes have r5.xlarge instance type (4 Core CPU, 32 GB RAM), I have configured 15…

---

## [Support of dot in field name](https://discuss.elastic.co/t/support-of-dot-in-field-name/239664)

<div class="topic-metadata">

**Author:** [@Sergey\_Taranenko](https://discuss.elastic.co/u/Sergey_Taranenko)\
**Replies:** 1\
**Last updated:** [July 2, 2020, 4:14pm UTC](https://discuss.elastic.co/t/support-of-dot-in-field-name/239664 "2020-07-02T16:14:23Z")

</div>

Does es support dot in field name? I have field with name like: "checkbox1.1" and after insert it transforms to object type field(splitted by "."). As i know dots were supported in 2.4 version(https://www.elastic.co/guid…

---

## [Перемешивает логи](https://discuss.elastic.co/t/topic/239484)

<div class="topic-metadata">

**Author:** [@111360](https://discuss.elastic.co/u/111360)\
**Replies:** 7\
**Last updated:** [July 2, 2020, 3:50pm UTC](https://discuss.elastic.co/t/topic/239484 "2020-07-02T15:50:48Z")

</div>

Всем привет! Собираю логи logstash с сервера. input { file { path =\> "C:/HTTP/test/log/\*\*/\*" start\_position =\> "beginning" close\_older =\> "1 hour" ignore\_older =\> "2 hour" sincedb\_clean\_after =\> "2 hour" } } output {…

---

## [Highlighting with edge ngram token + synonym filter](https://discuss.elastic.co/t/highlighting-with-edge-ngram-token-synonym-filter/239600)

<div class="topic-metadata">

**Author:** [@b\_b\_inc](https://discuss.elastic.co/u/b_b_inc)\
**Replies:** 0\
**Last updated:** [July 2, 2020, 9:36am UTC](https://discuss.elastic.co/t/highlighting-with-edge-ngram-token-synonym-filter/239600 "2020-07-02T09:36:16Z")

</div>

Hi, For my use case I need to use both an edge-ngram token filter and a synonym filter, and then highlight the appropriate token in the result using highlight. Considering I've to use both edge-ngram and synonym, I've …

---

## [Help to increase number of shards on active index running close to 2B records](https://discuss.elastic.co/t/help-to-increase-number-of-shards-on-active-index-running-close-to-2b-records/239560)

<div class="topic-metadata">

**Author:** [@saiguru](https://discuss.elastic.co/u/saiguru)\
**Replies:** 9\
**Last updated:** [July 2, 2020, 2:53pm UTC](https://discuss.elastic.co/t/help-to-increase-number-of-shards-on-active-index-running-close-to-2b-records/239560 "2020-07-02T14:53:54Z")

</div>

I have 3 master and 2 data node with each 1TB cluster. I build a production index and it is reaching limit of 2B, how to increase # of shards to 10 on running index. ip heap.percent ram.percent cpu load\_1m load…

---

## [Keeping data aggregated in Kibana](https://discuss.elastic.co/t/keeping-data-aggregated-in-kibana/239651)

<div class="topic-metadata">

**Author:** [@leo.hamon](https://discuss.elastic.co/u/leo.hamon)\
**Replies:** 1\
**Last updated:** [July 2, 2020, 2:48pm UTC](https://discuss.elastic.co/t/keeping-data-aggregated-in-kibana/239651 "2020-07-02T14:48:16Z")

</div>

Hi everyone, I have logs every seconds on Kibana but keeping all of them is too heavy. I want to aggregate them to keep less values. Once the day is passed, I want to have only one value per 15 minutes, A week later, ju…

---

## [What causes "no route host" error while trying to Reindex from a remote cluster?](https://discuss.elastic.co/t/what-causes-no-route-host-error-while-trying-to-reindex-from-a-remote-cluster/239652)

<div class="topic-metadata">

**Author:** [@Yotam\_Levy](https://discuss.elastic.co/u/Yotam_Levy)\
**Replies:** 0\
**Last updated:** [July 2, 2020, 2:15pm UTC](https://discuss.elastic.co/t/what-causes-no-route-host-error-while-trying-to-reindex-from-a-remote-cluster/239652 "2020-07-02T14:15:11Z")

</div>

I'm trying to do a \_reindex API request from cluster A to cluster B, and I noticed some times I an error response that says: "no route host". this gets solved by restarting my cluster's es client nodes, then re-doing t…

---

## [Retry interval on failed shard allocation attempts](https://discuss.elastic.co/t/retry-interval-on-failed-shard-allocation-attempts/239646)

<div class="topic-metadata">

**Author:** [@Barak](https://discuss.elastic.co/u/Barak)\
**Replies:** 1\
**Last updated:** [July 2, 2020, 2:14pm UTC](https://discuss.elastic.co/t/retry-interval-on-failed-shard-allocation-attempts/239646 "2020-07-02T14:14:06Z")

</div>

I couldn't find any information about it, is there (or will there be) an option to set the interval between each shard allocation retry attempt? I am asking because even though I raised the retry limit to 20 or 30 on s…

---

## [Canvas Search Text Input](https://discuss.elastic.co/t/canvas-search-text-input/239647)

<div class="topic-metadata">

**Author:** [@TimJMartin](https://discuss.elastic.co/u/TimJMartin)\
**Replies:** 0\
**Last updated:** [July 2, 2020, 1:40pm UTC](https://discuss.elastic.co/t/canvas-search-text-input/239647 "2020-07-02T13:40:22Z")

</div>

Hi I am just starting with Elastic and have some data succesfully loaded and got a Canvas dashboard. However, it seems there is only the Dropdown Filter to query my data. I was hoping there would a text input type eleme…

---

## [Primeiros passos](https://discuss.elastic.co/t/primeiros-passos/239525)

<div class="topic-metadata">

**Author:** [@dicto](https://discuss.elastic.co/u/dicto)\
**Replies:** 14\
**Last updated:** [July 2, 2020, 1:29pm UTC](https://discuss.elastic.co/t/primeiros-passos/239525 "2020-07-02T13:29:39Z")

</div>

Boa tarde! Por gentileza me tire uma dúvida de arquitetura do Elastic. Quero alimentar uma base de dados na Elastic Cloud, estes dsdos eu consigo enviar via rest em Json ou conectandoba um BD e fazendo inserts de banco…

---

## [Get "Time picker defaults"](https://discuss.elastic.co/t/get-time-picker-defaults/239630)

<div class="topic-metadata">

**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\
**Replies:** 1\
**Last updated:** [July 2, 2020, 1:36pm UTC](https://discuss.elastic.co/t/get-time-picker-defaults/239630 "2020-07-02T13:36:25Z")

</div>

Hi team, can anybody help to receive "Time picker defaults" value from advanced settings in Kibana? What is the index or file where it\`s placed? My task is to refer to the parameter in my custom plugin.

---

## [Java.lang.illegalstateexception: unexpected byte \[0x02\] elasticsearch](https://discuss.elastic.co/t/java-lang-illegalstateexception-unexpected-byte-0x02-elasticsearch/239571)

<div class="topic-metadata">

**Author:** [@vikrammazakindia](https://discuss.elastic.co/u/vikrammazakindia)\
**Replies:** 5\
**Last updated:** [July 2, 2020, 12:57pm UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-unexpected-byte-0x02-elasticsearch/239571 "2020-07-02T12:57:54Z")

</div>

I am facing above error in spring data elastic search . how to parse simple query string in query builder? my code is final QueryBuilder searchquery = QueryBuilders.boolQuery() .should(QueryBuilders.simpleQueryStringQ…

---

## [Date filter needed for unix timestamps?](https://discuss.elastic.co/t/date-filter-needed-for-unix-timestamps/239585)

<div class="topic-metadata">

**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\
**Replies:** 2\
**Last updated:** [July 2, 2020, 12:52pm UTC](https://discuss.elastic.co/t/date-filter-needed-for-unix-timestamps/239585 "2020-07-02T12:52:30Z")

</div>

Greetings Logstashers, I wrote a grok parser for one of my logs, the log in question has a unix timestamp. Here's a line from the log: {"name":"firefox.exe","pid":"7668","start\_time":"1585318348"} Here's what my gr…

---

## [KibanaのSIEM画面でNETWORK MAPが表示されない](https://discuss.elastic.co/t/kibana-siem-network-map/239409)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 1\
**Last updated:** [July 2, 2020, 12:26pm UTC](https://discuss.elastic.co/t/kibana-siem-network-map/239409 "2020-07-02T12:26:45Z")

</div>

以下のURLを参考に、kibanaのSIEM画面でNETWORK MAPを表示させようとしています https://www.elastic.co/guide/en/siem/guide/7.8/conf-map-ui.html#private-network エージェントとしてはfilebeatとpacketbeatを使用しており、MAP以外の収集情報はSIEM画面で見えています。 マニュアルにある通り、以下のパイプラインを設定 …

---

## [Data type - array, flattened or nested?](https://discuss.elastic.co/t/data-type-array-flattened-or-nested/239283)

<div class="topic-metadata">

**Author:** [@rd8388](https://discuss.elastic.co/u/rd8388)\
**Replies:** 0\
**Last updated:** [June 30, 2020, 11:31am UTC](https://discuss.elastic.co/t/data-type-array-flattened-or-nested/239283 "2020-06-30T11:31:15Z")

</div>

We are indexing records that may have one or more full names and one or more full addresses. We want to be able to search against those without getting cross matches so a simple JSON array or delimited concatenation wil…

---

## [Upgrading elasticsearch from 6.8 to 7.7.1](https://discuss.elastic.co/t/upgrading-elasticsearch-from-6-8-to-7-7-1/239620)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 8\
**Last updated:** [July 2, 2020, 11:28am UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-from-6-8-to-7-7-1/239620 "2020-07-02T11:28:42Z")

</div>

Hello, We are about to upgrade elasticserch from 6.8 to 7.7.1 is there anything special that needs to be done so that the indexes would be compatible? I know that beats has some option to migrate 6 to 7 and that is why …

---

## [How to create % comparative line graph for a set of stocks](https://discuss.elastic.co/t/how-to-create-comparative-line-graph-for-a-set-of-stocks/239623)

<div class="topic-metadata">

**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\
**Replies:** 0\
**Last updated:** [July 2, 2020, 11:26am UTC](https://discuss.elastic.co/t/how-to-create-comparative-line-graph-for-a-set-of-stocks/239623 "2020-07-02T11:26:27Z")

</div>

I would like to compare (say 10 stocks) on their relative performance for a given period (% increase or % decrease). I have the data (time, symbols, and daily change percent). I am doing a line chart I have used the s…

---

## [Unable to Access Elasticsearch using http://localhost:9200. Also on the last install page I dont see "open elastic search in the browser"](https://discuss.elastic.co/t/unable-to-access-elasticsearch-using-http-localhost-9200-also-on-the-last-install-page-i-dont-see-open-elastic-search-in-the-browser/239538)

<div class="topic-metadata">

**Author:** [@pasta80](https://discuss.elastic.co/u/pasta80)\
**Replies:** 6\
**Last updated:** [July 2, 2020, 10:56am UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-using-http-localhost-9200-also-on-the-last-install-page-i-dont-see-open-elastic-search-in-the-browser/239538 "2020-07-02T10:56:44Z")

</div>

Hi, As you can see in my title, i am unable to access elasticsearch after finishing the install using http://localhost:9200. it says this site cant be reached and local host refued to connect. I have already installed j…

---

## [Add data to elastic search and join records](https://discuss.elastic.co/t/add-data-to-elastic-search-and-join-records/239232)

<div class="topic-metadata">

**Author:** [@kate\_c](https://discuss.elastic.co/u/kate_c)\
**Replies:** 2\
**Last updated:** [July 2, 2020, 10:31am UTC](https://discuss.elastic.co/t/add-data-to-elastic-search-and-join-records/239232 "2020-07-02T10:31:16Z")

</div>

Hi, I have some questions I am new to elasticsearch. 1. I have a data file I would like to add it to elasticsearch how can I do it? Create a database first? The file is in csv. Do you have any guides for doing this or so…

---

## [Boost value on a boolean field](https://discuss.elastic.co/t/boost-value-on-a-boolean-field/238869)

<div class="topic-metadata">

**Author:** [@djean](https://discuss.elastic.co/u/djean)\
**Replies:** 3\
**Last updated:** [July 2, 2020, 10:17am UTC](https://discuss.elastic.co/t/boost-value-on-a-boolean-field/238869 "2020-07-02T10:17:05Z")

</div>

Hello, I have a field indexed as a boolean. I wonder if there is a way to boost the document when this value is true and not boost it when the value is false. I can't find a way to do it. Thanks.

---

## [Data table/report list of values per item](https://discuss.elastic.co/t/data-table-report-list-of-values-per-item/239606)

<div class="topic-metadata">

**Author:** [@VishalBhalla](https://discuss.elastic.co/u/VishalBhalla)\
**Replies:** 0\
**Last updated:** [July 2, 2020, 10:10am UTC](https://discuss.elastic.co/t/data-table-report-list-of-values-per-item/239606 "2020-07-02T10:10:39Z")

</div>

Each document in my index has the following terms: host.hostname vulnerability.id I'm just looking to create a report or data table to view this data in the following format: host.hostname-1: vulnerability.id-1, vuln…

---

## [Use Curl command to access ElasticCloud-Kibana API secured by Azure AD](https://discuss.elastic.co/t/use-curl-command-to-access-elasticcloud-kibana-api-secured-by-azure-ad/239506)

<div class="topic-metadata">

**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 2:40pm UTC](https://discuss.elastic.co/t/use-curl-command-to-access-elasticcloud-kibana-api-secured-by-azure-ad/239506 "2020-07-01T14:40:22Z")

</div>

I am trying to get a token from Azure AD and use that on cURL command for using RestAPI on ElasticCloud, forexample for getting or creating an index,... Here is what I have tried: #!/bin/bash host="myApplicatio…

---

## [Grokparse failure for multiline ERROR messages but not for WARN log levels](https://discuss.elastic.co/t/grokparse-failure-for-multiline-error-messages-but-not-for-warn-log-levels/239252)

<div class="topic-metadata">

**Author:** [@ramokarahasan](https://discuss.elastic.co/u/ramokarahasan)\
**Replies:** 2\
**Last updated:** [July 2, 2020, 9:53am UTC](https://discuss.elastic.co/t/grokparse-failure-for-multiline-error-messages-but-not-for-warn-log-levels/239252 "2020-07-02T09:53:06Z")

</div>

Hi, I'm using filebeat -\> logstash -\> elasticsearch -\> kibana and would like to have the loglevels displayed in kibana. Filebeat 7.6.2 Logstash 7.6.1 This works fine with WARN and INFO but not for ERROR log levels. M…

---

## [Csv reporting always failed win 5m records](https://discuss.elastic.co/t/csv-reporting-always-failed-win-5m-records/239072)

<div class="topic-metadata">

**Author:** [@Hari\_Krishnan](https://discuss.elastic.co/u/Hari_Krishnan)\
**Replies:** 9\
**Last updated:** [July 2, 2020, 9:50am UTC](https://discuss.elastic.co/t/csv-reporting-always-failed-win-5m-records/239072 "2020-07-02T09:50:22Z")

</div>

Hi, I was trying to share CSV with 5 million records which is only datatime and md5 . so size might be less even its 5 million records . I have 900 MB in limit in both xpack.reporting.csv.maxSizeBytes http.max\_conten…

---

## [How to combine Terms and Match query](https://discuss.elastic.co/t/how-to-combine-terms-and-match-query/239591)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 1\
**Last updated:** [July 2, 2020, 9:22am UTC](https://discuss.elastic.co/t/how-to-combine-terms-and-match-query/239591 "2020-07-02T09:22:53Z")

</div>

Hi, is there a way to combine a term and a match query? I have data with categorys A,B,C,D... which contains extra field which can vary. \_source: category: A value: 3 \_source: category: A value:2 \_source: category: A…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1351)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1353)
