# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1451

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1452

---

## [Using Controls in Dashboards](https://discuss.elastic.co/t/using-controls-in-dashboards/232056)

<div class="topic-metadata">

**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\
**Replies:** 2\
**Last updated:** [May 13, 2020, 7:17pm UTC](https://discuss.elastic.co/t/using-controls-in-dashboards/232056 "2020-05-13T19:17:10Z")

</div>

Hi, Imaging that i have a dashboard with a couple of visualizations. The first x visualizations are "global" then i would like to add a control visualization to affect only a few following visualizations, is that possi…

---

## [Need help with grok pattern for logstash config file for Oracle Alert log](https://discuss.elastic.co/t/need-help-with-grok-pattern-for-logstash-config-file-for-oracle-alert-log/232313)

<div class="topic-metadata">

**Author:** [@Gaurav\_Batta](https://discuss.elastic.co/u/Gaurav_Batta)\
**Replies:** 4\
**Last updated:** [May 13, 2020, 6:22pm UTC](https://discuss.elastic.co/t/need-help-with-grok-pattern-for-logstash-config-file-for-oracle-alert-log/232313 "2020-05-13T18:22:41Z")

</div>

Please help with grok pattern for following Oracle Database Alert.log message below to trap ORA- errors and its timestamp using logstash. Oracle Database alert log has following error log messages: ORA-12222: Test erro…

---

## [Kibana dashboard No result found](https://discuss.elastic.co/t/kibana-dashboard-no-result-found/232173)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 14\
**Last updated:** [May 13, 2020, 5:46pm UTC](https://discuss.elastic.co/t/kibana-dashboard-no-result-found/232173 "2020-05-13T17:46:52Z")

</div>

Hi, I've installed elasticsearch, kibana, on server. Installed Filebeat on ubuntu client. For a reason (couldn't find logstash index, didn't knew it will have filebeat name, forgot about logstash for now) I deleted the…

---

## [How to retrieve index template version number using High Level REST API](https://discuss.elastic.co/t/how-to-retrieve-index-template-version-number-using-high-level-rest-api/226473)

<div class="topic-metadata">

**Author:** [@Cat](https://discuss.elastic.co/u/Cat)\
**Replies:** 4\
**Last updated:** [May 13, 2020, 5:33pm UTC](https://discuss.elastic.co/t/how-to-retrieve-index-template-version-number-using-high-level-rest-api/226473 "2020-05-13T17:33:47Z")

</div>

I am new to elasticsearch. I am looking for example how to retrieve index template version using HLRest API. I saw some posts indicating that this is not possible?

---

## [Annotated Text Plugin: full-text queries for annotated\_text](https://discuss.elastic.co/t/annotated-text-plugin-full-text-queries-for-annotated-text/232308)

<div class="topic-metadata">

**Author:** [@JohnathanBostrom](https://discuss.elastic.co/u/JohnathanBostrom)\
**Replies:** 6\
**Last updated:** [May 13, 2020, 4:59pm UTC](https://discuss.elastic.co/t/annotated-text-plugin-full-text-queries-for-annotated-text/232308 "2020-05-13T16:59:25Z")

</div>

I would like to use a full-text query on annotated text. A similar question was asked last year, but didn't receive any responses. Just as that poster, I want to be able to do the following: if I have the annotated te…

---

## [How to partially use x-pack feature (OSS version) - Use role/user feature but not Authentication](https://discuss.elastic.co/t/how-to-partially-use-x-pack-feature-oss-version-use-role-user-feature-but-not-authentication/232486)

<div class="topic-metadata">

**Author:** [@harshilfadia](https://discuss.elastic.co/u/harshilfadia)\
**Replies:** 0\
**Last updated:** [May 13, 2020, 4:57pm UTC](https://discuss.elastic.co/t/how-to-partially-use-x-pack-feature-oss-version-use-role-user-feature-but-not-authentication/232486 "2020-05-13T16:57:50Z")

</div>

I am doing some POC on ES and Kibana 7.6.4. Please advise on below need on how to implement this. Requirement: How can I use x-pack OSS feature partially? Details: Feature I want to use: Roles & User management for …

---

## [The easiet way to add field editable in control visualisation?](https://discuss.elastic.co/t/the-easiet-way-to-add-field-editable-in-control-visualisation/232189)

<div class="topic-metadata">

**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\
**Replies:** 2\
**Last updated:** [May 13, 2020, 4:46pm UTC](https://discuss.elastic.co/t/the-easiet-way-to-add-field-editable-in-control-visualisation/232189 "2020-05-13T16:46:32Z")

</div>

Hi, i want to know the easiet way to do point 2: 1.i must do range slider in control visualisation with field duration and i specify the interval min & max and after that i want to add 2. editable input field which…

---

## [Search API not returning all the results](https://discuss.elastic.co/t/search-api-not-returning-all-the-results/232483)

<div class="topic-metadata">

**Author:** [@labuka](https://discuss.elastic.co/u/labuka)\
**Replies:** 0\
**Last updated:** [May 13, 2020, 4:45pm UTC](https://discuss.elastic.co/t/search-api-not-returning-all-the-results/232483 "2020-05-13T16:45:12Z")

</div>

I have three indexes, all three of them share a particular key-value pair. When I do a blanket search with the api "http://localhost:9200/\_search" using the request body {"query":{ "query\_string": { "query":"city\*" …

---

## [Nested JSON is confusing me](https://discuss.elastic.co/t/nested-json-is-confusing-me/232480)

<div class="topic-metadata">

**Author:** [@BlueTeamNinja](https://discuss.elastic.co/u/BlueTeamNinja)\
**Replies:** 0\
**Last updated:** [May 13, 2020, 4:40pm UTC](https://discuss.elastic.co/t/nested-json-is-confusing-me/232480 "2020-05-13T16:40:59Z")

</div>

I have the exact same problem in two places and I can't quite figure it out. I think I need an ELI5. I have a JSON structure coming from a giant hodge-podge of Powershell scripts that are pulling in local computer info…

---

## [Is there a way to index a text file which has the data in the following format](https://discuss.elastic.co/t/is-there-a-way-to-index-a-text-file-which-has-the-data-in-the-following-format/232396)

<div class="topic-metadata">

**Author:** [@avneshkumar98](https://discuss.elastic.co/u/avneshkumar98)\
**Replies:** 4\
**Last updated:** [May 13, 2020, 4:24pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-index-a-text-file-which-has-the-data-in-the-following-format/232396 "2020-05-13T16:24:02Z")

</div>

device="ABC" date=2010-05-12 time=15:24:10 timezone="IST" device\_name="PG15625" device="ABC" date=2010-05-12 time=15:24:10 timezone="IST" device\_name="PG15625" device="ABC" date=2010-05-12 time=15:24:10 timezone="IST" …

---

## [Create WATCHER with dynamic search value](https://discuss.elastic.co/t/create-watcher-with-dynamic-search-value/232298)

<div class="topic-metadata">

**Author:** [@greg.melasecca](https://discuss.elastic.co/u/greg.melasecca)\
**Replies:** 2\
**Last updated:** [May 13, 2020, 3:59pm UTC](https://discuss.elastic.co/t/create-watcher-with-dynamic-search-value/232298 "2020-05-13T15:59:56Z")

</div>

kibana version: 7.4.1 Description: We want to create a WATCHER event that triggers an alert (slack, pd, email, etc.) when a field is found with the same string but that string is unknown (can not hard code it into WATC…

---

## [Kibana index pattern looks empty while related Elasticsearch index contains data](https://discuss.elastic.co/t/kibana-index-pattern-looks-empty-while-related-elasticsearch-index-contains-data/231217)

<div class="topic-metadata">

**Author:** [@renim](https://discuss.elastic.co/u/renim)\
**Replies:** 3\
**Last updated:** [May 13, 2020, 3:29pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-looks-empty-while-related-elasticsearch-index-contains-data/231217 "2020-05-13T15:29:22Z")

</div>

Hi there. Im newbie in ELK and I ve got a trouble :slight\_smile: I have fresh install of ELK 7.6.2 and I want to log some value from my app via REST. So I make such calls: POST http://es-host/app-metrics/reqs-count-do…

---

## [SIEM Network Page Queries all indexes](https://discuss.elastic.co/t/siem-network-page-queries-all-indexes/231490)

<div class="topic-metadata">

**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\
**Replies:** 4\
**Last updated:** [May 13, 2020, 2:31pm UTC](https://discuss.elastic.co/t/siem-network-page-queries-all-indexes/231490 "2020-05-13T14:31:26Z")

</div>

Hi I have recently spent a lot of time getting a few of my data sources ingested in ECS format so that I can get the benefits from the SIEM capability. Some data comes direct from the \*beats tools but some are via Logs…

---

## [Logstash multiple json field](https://discuss.elastic.co/t/logstash-multiple-json-field/232138)

<div class="topic-metadata">

**Author:** [@ohoroyoi](https://discuss.elastic.co/u/ohoroyoi)\
**Replies:** 5\
**Last updated:** [May 13, 2020, 2:30pm UTC](https://discuss.elastic.co/t/logstash-multiple-json-field/232138 "2020-05-13T14:30:28Z")

</div>

I want to send postgres data to elasticsearch using logstash. I have json column more than one in postgres table. for example, continent and country column are both json type. then, How can I configure filter option? …

---

## [Ingestion de deux fichiers CSV dans elastic](https://discuss.elastic.co/t/ingestion-de-deux-fichiers-csv-dans-elastic/232091)

<div class="topic-metadata">

**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Replies:** 8\
**Last updated:** [May 13, 2020, 2:21pm UTC](https://discuss.elastic.co/t/ingestion-de-deux-fichiers-csv-dans-elastic/232091 "2020-05-13T14:21:55Z")

</div>

Bonjour, J'utilise Logstash et filebeat pour l'ingestion de deux fichiers csv dans elastic j'ai créer deux config logstash et une config file beat pour la lecture de mes deux fichiers j'ai remarquer quand mes data dan…

---

## [95th percentile aggregation for time series like documents](https://discuss.elastic.co/t/95th-percentile-aggregation-for-time-series-like-documents/231331)

<div class="topic-metadata">

**Author:** [@nroccolsw](https://discuss.elastic.co/u/nroccolsw)\
**Replies:** 4\
**Last updated:** [May 13, 2020, 2:22pm UTC](https://discuss.elastic.co/t/95th-percentile-aggregation-for-time-series-like-documents/231331 "2020-05-13T14:22:52Z")

</div>

Hi there, I am struggling with elastic search (and finally Grafana) to display the 95th percentile value for a given time period. Consider the following setup: I have an an index called traffic: POST /traffic/\_search…

---

## [Logstash - set @timestamp in .conf files](https://discuss.elastic.co/t/logstash-set-timestamp-in-conf-files/232449)

<div class="topic-metadata">

**Author:** [@cedric2](https://discuss.elastic.co/u/cedric2)\
**Replies:** 1\
**Last updated:** [May 13, 2020, 2:19pm UTC](https://discuss.elastic.co/t/logstash-set-timestamp-in-conf-files/232449 "2020-05-13T14:19:57Z")

</div>

Hi, I need to update existing logstash .conf files to generate indexes with tiemstamp\* \*Reason: ensure new indexes are regularly generated when rollup of index when ILM policy rules are reach which then allow me to clea…

---

## [What type of node should I use for GET and PUT?](https://discuss.elastic.co/t/what-type-of-node-should-i-use-for-get-and-put/232438)

<div class="topic-metadata">

**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\
**Replies:** 5\
**Last updated:** [May 13, 2020, 2:13pm UTC](https://discuss.elastic.co/t/what-type-of-node-should-i-use-for-get-and-put/232438 "2020-05-13T14:13:10Z")

</div>

Hi! I have the an elasticsearch cluster, with: master nodes data nodes (hot & warm) coordinator nodes When a client like APM post documents to it, should it to aim to coordinators nodes or master nodes? What if I ad…

---

## [Data Type issue from Data Visualizer Import Data in Kibana](https://discuss.elastic.co/t/data-type-issue-from-data-visualizer-import-data-in-kibana/232147)

<div class="topic-metadata">

**Author:** [@sarvendras](https://discuss.elastic.co/u/sarvendras)\
**Replies:** 3\
**Last updated:** [May 13, 2020, 1:52pm UTC](https://discuss.elastic.co/t/data-type-issue-from-data-visualizer-import-data-in-kibana/232147 "2020-05-13T13:52:14Z")

</div>

Hi Team, I am trying to import csv file in elasticsearch using Data Visualizer import file for creating index in ES.But I am facing some issues data type issues like some numerical field(values with decimals) in csv co…

---

## [Create third column in kibana data table by dividing two previous columns](https://discuss.elastic.co/t/create-third-column-in-kibana-data-table-by-dividing-two-previous-columns/232448)

<div class="topic-metadata">

**Author:** [@elisavet](https://discuss.elastic.co/u/elisavet)\
**Replies:** 0\
**Last updated:** [May 13, 2020, 1:42pm UTC](https://discuss.elastic.co/t/create-third-column-in-kibana-data-table-by-dividing-two-previous-columns/232448 "2020-05-13T13:42:24Z")

</div>

Hi! I have a data table in kibana with two columns. My goal is to create a 3rd column which is the division of previous two. For example, in the following table I want the thrid column to be RATIO=PRICE/QUANTITY, where…

---

## [How to use multiple csv files in logstash and filebeat](https://discuss.elastic.co/t/how-to-use-multiple-csv-files-in-logstash-and-filebeat/232222)

<div class="topic-metadata">

**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Replies:** 10\
**Last updated:** [May 13, 2020, 11:55am UTC](https://discuss.elastic.co/t/how-to-use-multiple-csv-files-in-logstash-and-filebeat/232222 "2020-05-13T11:55:29Z")

</div>

I want to use multiple csv files in filebeat my config file beat filebeat.inputs: # Each - is an input. Most options can be set at the input level, so # you can use different inputs for various configurations. # Below…

---

## [How to display pagination bar when using Data Table](https://discuss.elastic.co/t/how-to-display-pagination-bar-when-using-data-table/232353)

<div class="topic-metadata">

**Author:** [@jaytran](https://discuss.elastic.co/u/jaytran)\
**Replies:** 1\
**Last updated:** [May 13, 2020, 11:53am UTC](https://discuss.elastic.co/t/how-to-display-pagination-bar-when-using-data-table/232353 "2020-05-13T11:53:27Z")

</div>

Hi All, Please let me know how to display pagination bar with Data Table Visualization? Is this feature supported by Data Table Visualization? Thank you for any response.

---

## [Help configuring Logstash](https://discuss.elastic.co/t/help-configuring-logstash/232055)

<div class="topic-metadata">

**Author:** [@Joggy\_John](https://discuss.elastic.co/u/Joggy_John)\
**Replies:** 6\
**Last updated:** [May 13, 2020, 11:42am UTC](https://discuss.elastic.co/t/help-configuring-logstash/232055 "2020-05-13T11:42:13Z")

</div>

Hello, I'm new into logstash ; I am trying to input data into ELK but am struggling to get anything done. The installation is done in a windows 2016 for both ELK and Logstash. I have two major issues though : first …

---

## [Not able to authenticate Kibana via jwt](https://discuss.elastic.co/t/not-able-to-authenticate-kibana-via-jwt/232226)

<div class="topic-metadata">

**Author:** [@kibana-rocks](https://discuss.elastic.co/u/kibana-rocks)\
**Replies:** 2\
**Last updated:** [May 13, 2020, 6:21am UTC](https://discuss.elastic.co/t/not-able-to-authenticate-kibana-via-jwt/232226 "2020-05-13T06:21:18Z")

</div>

Hi, we have requirement from our application on pivoting to Kibana, we should directly land to dashboard tab without any login screen. To achieve this we are using jwt kibana authentication. We have added the below ngi…

---

## [High CPU usage / High load](https://discuss.elastic.co/t/high-cpu-usage-high-load/232406)

<div class="topic-metadata">

**Author:** [@sasvmware](https://discuss.elastic.co/u/sasvmware)\
**Replies:** 2\
**Last updated:** [May 13, 2020, 10:16am UTC](https://discuss.elastic.co/t/high-cpu-usage-high-load/232406 "2020-05-13T10:16:56Z")

</div>

We see High cpu upto of 93% and load upto 11 Hot threads at 2020-05-13T09:33:20.955Z, interval=500ms, busiestThreads=3, ignoreIdleThreads=true: 87.5% (437.5ms out of 500ms) cpu usage by thread 'elasticsearch\[.xxxxxxxxx…

---

## [Connecting MySql to Logstash Using JDBC](https://discuss.elastic.co/t/connecting-mysql-to-logstash-using-jdbc/232403)

<div class="topic-metadata">

**Author:** [@Jasmin](https://discuss.elastic.co/u/Jasmin)\
**Replies:** 2\
**Last updated:** [May 13, 2020, 10:37am UTC](https://discuss.elastic.co/t/connecting-mysql-to-logstash-using-jdbc/232403 "2020-05-13T10:37:32Z")

</div>

Hi , this is my first time working on logstash , i am trying to send data from mysql to elasticsearch using logstash , but as a first step i specify json\_line output This is my output when running /usr/share/logstash…

---

## [Beats write\_index causes single hotspots](https://discuss.elastic.co/t/beats-write-index-causes-single-hotspots/232393)

<div class="topic-metadata">

**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\
**Replies:** 1\
**Last updated:** [May 13, 2020, 10:25am UTC](https://discuss.elastic.co/t/beats-write-index-causes-single-hotspots/232393 "2020-05-13T10:25:55Z")

</div>

Hi, I'm using beats to ship most of my data to elasticsearch. I'm using the suggested ILM in a hot-warm-cold setup, which works fine. The biggest problem I see with the way beats utilizes the write\_indices with aliases…

---

## [TransportError(503, 'cluster\_block\_exception', 'blocked by: \[SERVICE\_UNAVAILABLE/2/no master\];')](https://discuss.elastic.co/t/transporterror-503-cluster-block-exception-blocked-by-service-unavailable-2-no-master/232247)

<div class="topic-metadata">

**Author:** [@Cloud\_newbie](https://discuss.elastic.co/u/Cloud_newbie)\
**Replies:** 5\
**Last updated:** [May 13, 2020, 10:12am UTC](https://discuss.elastic.co/t/transporterror-503-cluster-block-exception-blocked-by-service-unavailable-2-no-master/232247 "2020-05-13T10:12:03Z")

</div>

Hello, I have deployed an ECK on GKE following the quickstart documentation and 3 nodes. The ES YAML file looks like this: cat \<\<EOF | kubectl apply -f - apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsear…

---

## [ES DSL match query is giving addition result](https://discuss.elastic.co/t/es-dsl-match-query-is-giving-addition-result/232411)

<div class="topic-metadata">

**Author:** [@Dhiraj\_Singh\_Chauhan](https://discuss.elastic.co/u/Dhiraj_Singh_Chauhan)\
**Replies:** 0\
**Last updated:** [May 13, 2020, 10:08am UTC](https://discuss.elastic.co/t/es-dsl-match-query-is-giving-addition-result/232411 "2020-05-13T10:08:50Z")

</div>

Hi, I have written the DSL query and want the exact match of string "e2network" but my query matching with some extra strings . { "match": { "xxxxxxx.lowercase" :{ "query" :"e2network" } } } I am getting result…

---

## [Security role privilages indices to perform GET \_cat/indices](https://discuss.elastic.co/t/security-role-privilages-indices-to-perform-get-cat-indices/232223)

<div class="topic-metadata">

**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\
**Replies:** 3\
**Last updated:** [May 13, 2020, 10:08am UTC](https://discuss.elastic.co/t/security-role-privilages-indices-to-perform-get-cat-indices/232223 "2020-05-13T10:08:12Z")

</div>

Hi, I am using Kibana 7.3.1. I have setup a guest role for user to read dashboards, visualization, and perform read operation on the indexes. But when I tried to perform "GET \_cat/indices" in devtool, I see problem be…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1450)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1452)
