# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1383

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1384

---

## [Kibana visualizations broken after deleting index pattern - modifying object does not work](https://discuss.elastic.co/t/kibana-visualizations-broken-after-deleting-index-pattern-modifying-object-does-not-work/237088)

<div class="topic-metadata">

**Author:** [@mujina93](https://discuss.elastic.co/u/mujina93)\
**Replies:** 6\
**Last updated:** [June 17, 2020, 10:11am UTC](https://discuss.elastic.co/t/kibana-visualizations-broken-after-deleting-index-pattern-modifying-object-does-not-work/237088 "2020-06-17T10:11:11Z")

</div>

Hello, I had a dashboard in Kibana that was relying on an index pattern. I set a lifetime policy on the index and my index got deleted (I thought the "deletion time" was a retention window, i.e. documents older than X …

---

## [Elasticsearch 7.7 : field expansion matches too many fields, limit: 1024, got: 1139](https://discuss.elastic.co/t/elasticsearch-7-7-field-expansion-matches-too-many-fields-limit-1024-got-1139/237425)

<div class="topic-metadata">

**Author:** [@pappukhode](https://discuss.elastic.co/u/pappukhode)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 9:00am UTC](https://discuss.elastic.co/t/elasticsearch-7-7-field-expansion-matches-too-many-fields-limit-1024-got-1139/237425 "2020-06-17T09:00:06Z")

</div>

Hi, I am using ES 7.7 and indexed around 70K data. I also verified index has around 540 fields by invokinghttp://es\_host:port/2/\_mapping. While performing simple search query I am getting query\_shard\_exception. GE…

---

## [Timing of Backup and composition shards and indices](https://discuss.elastic.co/t/timing-of-backup-and-composition-shards-and-indices/237223)

<div class="topic-metadata">

**Author:** [@jact](https://discuss.elastic.co/u/jact)\
**Replies:** 11\
**Last updated:** [June 17, 2020, 9:48am UTC](https://discuss.elastic.co/t/timing-of-backup-and-composition-shards-and-indices/237223 "2020-06-17T09:48:57Z")

</div>

Hi , Please provide an explanation: If I want to focus on data log security, I currently do a daily backup to avoid any problems with the server. Can monthly backups cover data before server problems? or is there ano…

---

## ["Incorrect HTTP method for uri" when PUTting \_index\_template](https://discuss.elastic.co/t/incorrect-http-method-for-uri-when-putting-index-template/237299)

<div class="topic-metadata">

**Author:** [@mujina93](https://discuss.elastic.co/u/mujina93)\
**Replies:** 3\
**Last updated:** [June 17, 2020, 9:46am UTC](https://discuss.elastic.co/t/incorrect-http-method-for-uri-when-putting-index-template/237299 "2020-06-17T09:46:36Z")

</div>

I am trying to create an index template. Following the examples in getting-started-index-lifecycle-management and indices-templates I'm trying with a PUT request that looks like: http://\<elasticsearch\_ip\>:9200/\_index\_t…

---

## [Filter duplicate record of log in kibana dashboard](https://discuss.elastic.co/t/filter-duplicate-record-of-log-in-kibana-dashboard/237016)

<div class="topic-metadata">

**Author:** [@anand27889](https://discuss.elastic.co/u/anand27889)\
**Replies:** 10\
**Last updated:** [June 17, 2020, 8:21am UTC](https://discuss.elastic.co/t/filter-duplicate-record-of-log-in-kibana-dashboard/237016 "2020-06-17T08:21:03Z")

</div>

Hi Friends, I want to remove the duplicate record of log file which is displaying in kibana dashboard, for example: {TransactionID: 23750 , Status: failed, Time: 14/06/2020 11:20:25} {TransactionID: 23750 , Status: …

---

## [Read a CSV in Logstash level and filter on basis of the extracted data](https://discuss.elastic.co/t/read-a-csv-in-logstash-level-and-filter-on-basis-of-the-extracted-data/237420)

<div class="topic-metadata">

**Author:** [@Gurkeerat\_Sondhi](https://discuss.elastic.co/u/Gurkeerat_Sondhi)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 8:15am UTC](https://discuss.elastic.co/t/read-a-csv-in-logstash-level-and-filter-on-basis-of-the-extracted-data/237420 "2020-06-17T08:15:42Z")

</div>

I am using Metricbeat to get process-level data and push it to Elastic Search using Logstash. Now, the aim is to categorize the processes into 2 tags i.e the process running is either a browser or it is something else. …

---

## [Ошибка "master not discovered yet" - 7.7.1](https://discuss.elastic.co/t/master-not-discovered-yet-7-7-1/237282)

<div class="topic-metadata">

**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 8:09am UTC](https://discuss.elastic.co/t/master-not-discovered-yet-7-7-1/237282 "2020-06-17T08:09:12Z")

</div>

Добрый день! Собираю новый кластер (3 мастера, 5 дата-нод.) Один из мастеров не может подключиться. Вижу такую ошибку в его логе: \[2020-06-16T14:01:49,770\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[wss-es-master1a…

---

## [Adding second Y-axis to stacked bar graph](https://discuss.elastic.co/t/adding-second-y-axis-to-stacked-bar-graph/236119)

<div class="topic-metadata">

**Author:** [@Rgvr\_S](https://discuss.elastic.co/u/Rgvr_S)\
**Replies:** 8\
**Last updated:** [June 17, 2020, 7:52am UTC](https://discuss.elastic.co/t/adding-second-y-axis-to-stacked-bar-graph/236119 "2020-06-17T07:52:58Z")

</div>

I have a stacked bar graph made for the following data, The bar graph looks like this, I'd like to add another Y-axis to divide the graph based on months. How do I do this ? I use elasticsearch7.3.2 and kibana7.3…

---

## [Kibana unable to find Elasticsearch Indexes, even though they exist in Index Management](https://discuss.elastic.co/t/kibana-unable-to-find-elasticsearch-indexes-even-though-they-exist-in-index-management/235096)

<div class="topic-metadata">

**Author:** [@AlanMark](https://discuss.elastic.co/u/AlanMark)\
**Replies:** 1\
**Last updated:** [June 17, 2020, 7:37am UTC](https://discuss.elastic.co/t/kibana-unable-to-find-elasticsearch-indexes-even-though-they-exist-in-index-management/235096 "2020-06-17T07:37:29Z")

</div>

I've set up an ELK server for a client for testing purposes. It's running on an Ubuntu 18.04 server. Current setup: ElasticSearch, Logstash, FileBeat, Kibana all running latest versions. Elasticsearch is set to netw…

---

## [Is my data really replicated across the cluster? How to know?](https://discuss.elastic.co/t/is-my-data-really-replicated-across-the-cluster-how-to-know/237382)

<div class="topic-metadata">

**Author:** [@pszm](https://discuss.elastic.co/u/pszm)\
**Replies:** 7\
**Last updated:** [June 17, 2020, 7:32am UTC](https://discuss.elastic.co/t/is-my-data-really-replicated-across-the-cluster-how-to-know/237382 "2020-06-17T07:32:38Z")

</div>

We used to have just a single node in our cluster. In the past 2 weeks, we added 2 more nodes. Now we want to switch off the old node because the machine is old. But I am doubtful that all our data has actually been spr…

---

## [Can you give me an advice to make the elasticsearch query?](https://discuss.elastic.co/t/can-you-give-me-an-advice-to-make-the-elasticsearch-query/237274)

<div class="topic-metadata">

**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\
**Replies:** 1\
**Last updated:** [June 17, 2020, 7:28am UTC](https://discuss.elastic.co/t/can-you-give-me-an-advice-to-make-the-elasticsearch-query/237274 "2020-06-17T07:28:55Z")

</div>

Hello, I try to make elasticsearch query to perform below action I have 4 documents like this \_id : 1 user\_id : 12345 number : 1 \_id : 2 user\_id : 12345 number : 2 \_id : 3 user\_id : 12345 number : 3 \_id : 4 user\_…

---

## [Kibana active but not loading on host browser](https://discuss.elastic.co/t/kibana-active-but-not-loading-on-host-browser/233992)

<div class="topic-metadata">

**Author:** [@sydjunaidshah](https://discuss.elastic.co/u/sydjunaidshah)\
**Replies:** 1\
**Last updated:** [June 17, 2020, 7:02am UTC](https://discuss.elastic.co/t/kibana-active-but-not-loading-on-host-browser/233992 "2020-06-17T07:02:34Z")

</div>

Hello all , I just started learning ossec wazuh elastic stack for HIDS and siem . I just download OVA from https://documentation.wazuh.com/3.12/installation-guide/virtual-machine.html and then check my elastic manage…

---

## [How to store bar chart data?](https://discuss.elastic.co/t/how-to-store-bar-chart-data/237160)

<div class="topic-metadata">

**Author:** [@Jenni](https://discuss.elastic.co/u/Jenni)\
**Replies:** 5\
**Last updated:** [June 17, 2020, 7:02am UTC](https://discuss.elastic.co/t/how-to-store-bar-chart-data/237160 "2020-06-17T07:02:19Z")

</div>

Hello, we are in the middle of restructuring one of our products to use ES instead of MySQL as its data storage. Now we are not sure what would be the best way to model the following data: Each element has a bar chart …

---

## [\[Logstash\] Replace the @timestamp with a rsyslog ISO8691 timestamp from Filebeat log lines](https://discuss.elastic.co/t/logstash-replace-the-timestamp-with-a-rsyslog-iso8691-timestamp-from-filebeat-log-lines/237344)

<div class="topic-metadata">

**Author:** [@Kuo\_Hugo](https://discuss.elastic.co/u/Kuo_Hugo)\
**Replies:** 8\
**Last updated:** [June 17, 2020, 6:53am UTC](https://discuss.elastic.co/t/logstash-replace-the-timestamp-with-a-rsyslog-iso8691-timestamp-from-filebeat-log-lines/237344 "2020-06-17T06:53:18Z")

</div>

Hi Elastic users, I'm forwarding logs from host to an ELK's logstash instance via filebeat. I'm using @timestamp as the time for the index pattern for my logs. The original @timestamp from filebeat while processing the …

---

## [Generate certificates](https://discuss.elastic.co/t/generate-certificates/237403)

<div class="topic-metadata">

**Author:** [@Aayush\_Agrawal](https://discuss.elastic.co/u/Aayush_Agrawal)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 6:27am UTC](https://discuss.elastic.co/t/generate-certificates/237403 "2020-06-17T06:27:16Z")

</div>

Trying to generate certificates using below command bin/elasticsearch-certutil ca --pem Getting below error Exception in thread "main" java.lang.IllegalArgumentException: Could not resolve placeholder 'FQDN' at org.e…

---

## [I didn't understand the Elastic Snapshot properly Please help](https://discuss.elastic.co/t/i-didnt-understand-the-elastic-snapshot-properly-please-help/237260)

<div class="topic-metadata">

**Author:** [@111349](https://discuss.elastic.co/u/111349)\
**Replies:** 10\
**Last updated:** [June 17, 2020, 6:14am UTC](https://discuss.elastic.co/t/i-didnt-understand-the-elastic-snapshot-properly-please-help/237260 "2020-06-17T06:14:14Z")

</div>

My configuration is to run each elastic on 3 different servers. Elastic that works as a master node (also a data node) on the 1st server. Elastic No. 2 and No. 3 operate as data nodes. I know that I have to specify th…

---

## [Unable to reach Elasticsearch 7.7 on network.host: \_global\_. YML works for previous versions](https://discuss.elastic.co/t/unable-to-reach-elasticsearch-7-7-on-network-host-global-yml-works-for-previous-versions/237398)

<div class="topic-metadata">

**Author:** [@Saadan](https://discuss.elastic.co/u/Saadan)\
**Replies:** 1\
**Last updated:** [June 17, 2020, 6:10am UTC](https://discuss.elastic.co/t/unable-to-reach-elasticsearch-7-7-on-network-host-global-yml-works-for-previous-versions/237398 "2020-06-17T06:10:58Z")

</div>

I have set the value of network.host to '0.0.0.0' , 'global' , 'machine ip address' but nothing seems to work when I try to access Elasticsearch from network. I have tried some solutions available online but the problem …

---

## [Can I contribute a datasketches aggregation plugin for elasticsearch?What should I provide?](https://discuss.elastic.co/t/can-i-contribute-a-datasketches-aggregation-plugin-for-elasticsearch-what-should-i-provide/237394)

<div class="topic-metadata">

**Author:** [@nooneuse](https://discuss.elastic.co/u/nooneuse)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 6:08am UTC](https://discuss.elastic.co/t/can-i-contribute-a-datasketches-aggregation-plugin-for-elasticsearch-what-should-i-provide/237394 "2020-06-17T06:08:51Z")

</div>

hello, I wrote a datasketch aggregation plugin for elasticsearch, I have tested it in some situations, and its performance can meet my needs. I really want to share it and contribute it to the community to make elastics…

---

## [Kibana 7.7 generate\_plugin.jsの変更点](https://discuss.elastic.co/t/kibana-7-7-generate-plugin-js/237399)

<div class="topic-metadata">

**Author:** [@nekolder](https://discuss.elastic.co/u/nekolder)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 6:06am UTC](https://discuss.elastic.co/t/kibana-7-7-generate-plugin-js/237399 "2020-06-17T06:06:46Z")

</div>

7.7から生成されるテンプレートがTypeScriptに変わったのはいいのですが、package.jsonはテンプレートに含まれていません。これは自前で用意するようになったんでしょうか？ どこかに詳しく説明されたところがあれば知りたいです。 現状見つかるドキュメントはyarn buildでZIPができる。と記載されているので、generatorの変更が反映されていないのか、それともgeneratorでpackage.jsonも作らる…

---

## [SLM policy for elastic snapshot for 30 mins is failing](https://discuss.elastic.co/t/slm-policy-for-elastic-snapshot-for-30-mins-is-failing/237242)

<div class="topic-metadata">

**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\
**Replies:** 0\
**Last updated:** [June 16, 2020, 7:44am UTC](https://discuss.elastic.co/t/slm-policy-for-elastic-snapshot-for-30-mins-is-failing/237242 "2020-06-16T07:44:31Z")

</div>

I had set up a Elasticsearch snapshot to s3 and setup an SLM policy to create snapshot for every 30 mins but it's throwing an error and i'm sharing the slm policy details as well can anyone help me out curl -X GET "10.…

---

## [Column not not shown in visualize](https://discuss.elastic.co/t/column-not-not-shown-in-visualize/237070)

<div class="topic-metadata">

**Author:** [@Rgvr\_S](https://discuss.elastic.co/u/Rgvr_S)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 5:41am UTC](https://discuss.elastic.co/t/column-not-not-shown-in-visualize/237070 "2020-06-17T05:41:27Z")

</div>

I have some data with the following columns. While I'm able to view them all in Discover, the column 'Position' does not appear as an option when I try to use it a field to visualize. I have multiple files with simil…

---

## [Not able to retrieve new logs in real-time](https://discuss.elastic.co/t/not-able-to-retrieve-new-logs-in-real-time/237387)

<div class="topic-metadata">

**Author:** [@drjosephliu](https://discuss.elastic.co/u/drjosephliu)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 5:13am UTC](https://discuss.elastic.co/t/not-able-to-retrieve-new-logs-in-real-time/237387 "2020-06-17T05:13:24Z")

</div>

This is the setup: I'm running ELK locally with a java spring boot app that writes logs to a file called elk-logs.log I'm able to see the logs in kibana when I first run the java spring boot app, but after the initial …

---

## [Creating Kibana dashboard using (parameter file) and variable](https://discuss.elastic.co/t/creating-kibana-dashboard-using-parameter-file-and-variable/237269)

<div class="topic-metadata">

**Author:** [@Dhandeep\_Kumar](https://discuss.elastic.co/u/Dhandeep_Kumar)\
**Replies:** 3\
**Last updated:** [June 17, 2020, 4:58am UTC](https://discuss.elastic.co/t/creating-kibana-dashboard-using-parameter-file-and-variable/237269 "2020-06-17T04:58:20Z")

</div>

Hi There, is this possible to create a table using a parameter file in Kibana? for eg: - I have an excel file which contains all the dimension field and in the expression field I want a calculated value like - sum(Ne…

---

## [Scripted Fields - Script is invalid](https://discuss.elastic.co/t/scripted-fields-script-is-invalid/237211)

<div class="topic-metadata">

**Author:** [@jjums](https://discuss.elastic.co/u/jjums)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 4:17am UTC](https://discuss.elastic.co/t/scripted-fields-script-is-invalid/237211 "2020-06-17T04:17:51Z")

</div>

Hello, I'm not a developer, so I'm not familiar with program language. I added several scripted fields. I tried to add a new scripted field, but I can't. "Script is invalid." Following is an err. How can I solve…

---

## [How can I return results having a unique id field (i.e. no duplicates) when requesting a multisearch or search?](https://discuss.elastic.co/t/how-can-i-return-results-having-a-unique-id-field-i-e-no-duplicates-when-requesting-a-multisearch-or-search/237346)

<div class="topic-metadata">

**Author:** [@aorona](https://discuss.elastic.co/u/aorona)\
**Replies:** 1\
**Last updated:** [June 17, 2020, 3:25am UTC](https://discuss.elastic.co/t/how-can-i-return-results-having-a-unique-id-field-i-e-no-duplicates-when-requesting-a-multisearch-or-search/237346 "2020-06-17T03:25:19Z")

</div>

I am running a query against my index and when I do a multisearch or search, I get duplicate results. I have specified the \_id with a unique value, but I am still seeing duplicates. Is there a filter aggregation, or ot…

---

## [No cached mapping for this field.Refresh field list from the lanagement](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-refresh-field-list-from-the-lanagement/236835)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 5\
**Last updated:** [June 17, 2020, 3:00am UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-refresh-field-list-from-the-lanagement/236835 "2020-06-17T03:00:26Z")

</div>

I tried "Management -\> Index Patterns and hit Refresh button",but it didn't work. I updated the fields.yml http field of apmserver, but it is still useless. apmserver: 7.6.2 ELK: 7.4.2

---

## [Multiple analyzers with stemmed synonyms](https://discuss.elastic.co/t/multiple-analyzers-with-stemmed-synonyms/237317)

<div class="topic-metadata">

**Author:** [@Kushikawa](https://discuss.elastic.co/u/Kushikawa)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 12:48am UTC](https://discuss.elastic.co/t/multiple-analyzers-with-stemmed-synonyms/237317 "2020-06-17T00:48:06Z")

</div>

I want to create an index with a stemmer analyzer to generalize my synonyms and apply it in other analyzers. For a simplified example: I want to use all these synonyms \[beautiful, pretty, beauteous, gorgeous\] in multipl…

---

## [How to offset the visualization graph in Kibana to the right](https://discuss.elastic.co/t/how-to-offset-the-visualization-graph-in-kibana-to-the-right/237375)

<div class="topic-metadata">

**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 12:13am UTC](https://discuss.elastic.co/t/how-to-offset-the-visualization-graph-in-kibana-to-the-right/237375 "2020-06-17T00:13:52Z")

</div>

Hi all, Attached please see my visualization. I want to shift the graph along the X axis to the right otherwise the largest DOT does not display completely Thanks sanjay

---

## [Are there any best practices for the migration of saved objects between different versions?](https://discuss.elastic.co/t/are-there-any-best-practices-for-the-migration-of-saved-objects-between-different-versions/236443)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 8\
**Last updated:** [June 17, 2020, 12:10am UTC](https://discuss.elastic.co/t/are-there-any-best-practices-for-the-migration-of-saved-objects-between-different-versions/236443 "2020-06-17T00:10:31Z")

</div>

I want to migrate the "saved objects" from ELK 7.6.2 version to 7.4.2 version. what data must be consistent? what needs attention? how to move safely, steadily and quickly?

---

## [About Elastic em Português](https://discuss.elastic.co/t/about-elastic-em-portugues/178324)

<div class="topic-metadata">

**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 11:51pm UTC](https://discuss.elastic.co/t/about-elastic-em-portugues/178324 "2020-06-16T23:51:24Z")

</div>

Esta categoria é dedicada a discussões em Português - Brasil. Aqui vamos falar sobre todos os projetos da Elastic e todas as perguntas são bem vindas! Se você estiver no Brasil, poderá participar dos meetups organizados…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1382)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1384)
