# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1452 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1453 --- ## [Inserting a dummy value for empty field while parsing using grok logstash](https://discuss.elastic.co/t/inserting-a-dummy-value-for-empty-field-while-parsing-using-grok-logstash/232408)
**Author:** [@Devyani](https://discuss.elastic.co/u/Devyani)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 9:59am UTC](https://discuss.elastic.co/t/inserting-a-dummy-value-for-empty-field-while-parsing-using-grok-logstash/232408 "2020-05-13T09:59:44Z")
I want to have the dummy value for empty field while parsing grok pattern. I have used the following condition--\> if !\[exception\_stacktrace\] { mutate { replace =\> \[ "exception\_stacktrace", "-" \] } } But with this … --- ## [Terms aggregation on keyword array](https://discuss.elastic.co/t/terms-aggregation-on-keyword-array/232271)
**Author:** [@lloadingll](https://discuss.elastic.co/u/lloadingll)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 9:57am UTC](https://discuss.elastic.co/t/terms-aggregation-on-keyword-array/232271 "2020-05-13T09:57:47Z")
Hi guys, I have a field which is keyword array: e.g. \[\] \["A"\] \["A"\] \["B"\] \["A","B"\] if I do terms aggregation on this field, I will get "A" : 3 "B" : 2 is there any way that can make the combination as the bucket k… --- ## [Can't set different values to the same field in different documents using updateByQuery](https://discuss.elastic.co/t/cant-set-different-values-to-the-same-field-in-different-documents-using-updatebyquery/232407)
**Author:** [@Shahak\_Gabay](https://discuss.elastic.co/u/Shahak_Gabay)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 9:51am UTC](https://discuss.elastic.co/t/cant-set-different-values-to-the-same-field-in-different-documents-using-updatebyquery/232407 "2020-05-13T09:51:40Z")
Hi, Using elasticsearch-7.5.2 with NEST client I'm trying to iterate through all documents in an update\_by\_query request and set different values to the same field (called wcf) in each doc. My code looks like this: va… --- ## ["error" : "Content-Type header \[application/x-www-form-urlencoded\] is not supported",](https://discuss.elastic.co/t/error-content-type-header-application-x-www-form-urlencoded-is-not-supported/231849)
**Author:** [@joaopedro](https://discuss.elastic.co/u/joaopedro)\ **Replies:** 5\ **Last updated:** [May 12, 2020, 9:10pm UTC](https://discuss.elastic.co/t/error-content-type-header-application-x-www-form-urlencoded-is-not-supported/231849 "2020-05-12T21:10:27Z")
I'm new to elasticsearch, this is literally my first cluster. I am using Windows 10 and was trying to run the following at the command line: C:\\elastic\>curl -X POST "localhost:9200/students/student/1?pretty" -d '{"joao"… --- ## [Geoip filter plugin dat extension and update](https://discuss.elastic.co/t/geoip-filter-plugin-dat-extension-and-update/232277)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 4\ **Last updated:** [May 13, 2020, 9:46am UTC](https://discuss.elastic.co/t/geoip-filter-plugin-dat-extension-and-update/232277 "2020-05-13T09:46:23Z")
Hi, I didn't have any recent (within a year) discussions on the above (most of them are unanswered). My questions are: Can I use the ".dat" extension instead of the ".mmdb" format? Is there any way to avoid restarting… --- ## [Divide users by the number of weekly sessions using aggregates from events\_index](https://discuss.elastic.co/t/divide-users-by-the-number-of-weekly-sessions-using-aggregates-from-events-index/232404)
**Author:** [@Nisrein\_Sada](https://discuss.elastic.co/u/Nisrein_Sada)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 9:40am UTC](https://discuss.elastic.co/t/divide-users-by-the-number-of-weekly-sessions-using-aggregates-from-events-index/232404 "2020-05-13T09:40:49Z")
I am trying to measure the number of users into different categories based on their weekly activities by reading the events\_log\_index ES, this index has all the user interactions from a mobile. Therefore the user might h… --- ## [How to bootstrap an index template with a part of the name not defined yet?](https://discuss.elastic.co/t/how-to-bootstrap-an-index-template-with-a-part-of-the-name-not-defined-yet/232332)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 4\ **Last updated:** [May 13, 2020, 9:36am UTC](https://discuss.elastic.co/t/how-to-bootstrap-an-index-template-with-a-part-of-the-name-not-defined-yet/232332 "2020-05-13T09:36:41Z")
Hi, depending on the hostgroup field, I want to add certain string to part of the index name: filter{ if \[hostgroup\] =~ /mass/ { mutate { add\_field =\> { "indexname" =\> "mass" }} } } outp… --- ## [Kibana with Excel parameter file](https://discuss.elastic.co/t/kibana-with-excel-parameter-file/232206)
**Author:** [@balaji\_18](https://discuss.elastic.co/u/balaji_18)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 9:30am UTC](https://discuss.elastic.co/t/kibana-with-excel-parameter-file/232206 "2020-05-13T09:30:01Z")
Hi, Suppose if i do all the expression in Excel or CSV, is there any possible way to load that file as parameter file into kibana and call one variable (to call that expression) to show the results ? Eg. if there is … --- ## [Value on chart in line Visualization](https://discuss.elastic.co/t/value-on-chart-in-line-visualization/232174)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 9:13am UTC](https://discuss.elastic.co/t/value-on-chart-in-line-visualization/232174 "2020-05-13T09:13:32Z")
Hi All, I create a line visualization like this its posible to show the value in line chart like this? I think this is a much needed feature --- ## [Plugin installation with Istio enabled?](https://discuss.elastic.co/t/plugin-installation-with-istio-enabled/232368)
**Author:** [@Atreus-Technologies](https://discuss.elastic.co/u/Atreus-Technologies)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 9:03am UTC](https://discuss.elastic.co/t/plugin-installation-with-istio-enabled/232368 "2020-05-13T09:03:36Z")
I am trying to get some plugins installed on my ECK cluster (v 1.1.0) using initContainers, e.g. - initContainers: - name: install-plugins command: - sh - -c - bin… --- ## [Time Series adding a static line](https://discuss.elastic.co/t/time-series-adding-a-static-line/232164)
**Author:** [@suibgui](https://discuss.elastic.co/u/suibgui)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 9:01am UTC](https://discuss.elastic.co/t/time-series-adding-a-static-line/232164 "2020-05-13T09:01:57Z")
Hello, when i add a second serie with a static value in kibana 7.0.4 the first serie become also a line at zero !!! thank you --- ## [Using Elastic Cloud Private with multiple AWS accounts](https://discuss.elastic.co/t/using-elastic-cloud-private-with-multiple-aws-accounts/232275)
**Author:** [@scottcowan](https://discuss.elastic.co/u/scottcowan)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 8:58am UTC](https://discuss.elastic.co/t/using-elastic-cloud-private-with-multiple-aws-accounts/232275 "2020-05-13T08:58:59Z")
Hi we're looking at breaking up our AWS accounts and I'd still like to have centralised logs. Are we able to use Elastic Cloud Private were we setup Elastic VPCs in multiple accounts to retrieve logs onto a central accou… --- ## [/bundles/app/kibana/bootstrap.js not found](https://discuss.elastic.co/t/bundles-app-kibana-bootstrap-js-not-found/232359)
**Author:** [@kavya12345](https://discuss.elastic.co/u/kavya12345)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 8:58am UTC](https://discuss.elastic.co/t/bundles-app-kibana-bootstrap-js-not-found/232359 "2020-05-13T08:58:41Z")
Hi, I am working on using kibana reports in Angular-8 application. Embeding kibana reports using Iframe. The kibana reports have login page wiith username and password. I am doing GET call from front-end to "https://..… --- ## [Elastic Cluster Fails on Docker Swarm](https://discuss.elastic.co/t/elastic-cluster-fails-on-docker-swarm/232392)
**Author:** [@msaik3](https://discuss.elastic.co/u/msaik3)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 8:37am UTC](https://discuss.elastic.co/t/elastic-cluster-fails-on-docker-swarm/232392 "2020-05-13T08:37:17Z")
Hi, I'm trying to Deploy Elasticsearch on a 3 node Swarm cluster. with Elasticsearch -3 replicas. I'm using the following docker compose file for it: elastic\_compose.yml version: "3.7" services: elasticsearch: im… --- ## [Can I use Elasticsearch to save time-based events and get the intervals between them?](https://discuss.elastic.co/t/can-i-use-elasticsearch-to-save-time-based-events-and-get-the-intervals-between-them/232378)
**Author:** [@gabipetrovay](https://discuss.elastic.co/u/gabipetrovay)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 8:32am UTC](https://discuss.elastic.co/t/can-i-use-elasticsearch-to-save-time-based-events-and-get-the-intervals-between-them/232378 "2020-05-13T08:32:22Z")
I am receiving time-based events like the following: In March I get: { "id": "e0efc334-eeb5-4740-b983-e2e8f78d8c39", "timestamp": "2020-03-20T05:30:00Z", "state": "UP", "service": { "id": "7704b… --- ## [Kibana - Watcher Script](https://discuss.elastic.co/t/kibana-watcher-script/232389)
**Author:** [@Vidhya](https://discuss.elastic.co/u/Vidhya)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 8:20am UTC](https://discuss.elastic.co/t/kibana-watcher-script/232389 "2020-05-13T08:20:45Z")
Trying to execute the below query from Watcher in Kibana to get the result of result.input.payload.hits.total from Watcher history (last executed) and getting Null Value in result. ctx.payload.hits.hits.\_source.result.i… --- ## [Elasticsearch first backup/snapshot](https://discuss.elastic.co/t/elasticsearch-first-backup-snapshot/232285)
**Author:** [@cm-vdp](https://discuss.elastic.co/u/cm-vdp)\ **Replies:** 5\ **Last updated:** [May 13, 2020, 8:01am UTC](https://discuss.elastic.co/t/elasticsearch-first-backup-snapshot/232285 "2020-05-13T08:01:39Z")
I 'm new to eleasticsearch and I have a question about backing up the environment. I already read the documentation about backup/restore and it's clear to me. Our previous sysadmin has configured the elasticsearch envi… --- ## [Offline Elasticsearch Exporter](https://discuss.elastic.co/t/offline-elasticsearch-exporter/232379)
**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 7:31am UTC](https://discuss.elastic.co/t/offline-elasticsearch-exporter/232379 "2020-05-13T07:31:17Z")
Hi! Is there any way to perform data export from Elasticsearch data path without starting the Elasticsearch? Some googling tells me there are some tools out there to perform this, but all of them require Elasticsearch … --- ## [Metricbeat Oracle Overview](https://discuss.elastic.co/t/metricbeat-oracle-overview/232156)
**Author:** [@giorgiogale](https://discuss.elastic.co/u/giorgiogale)\ **Replies:** 3\ **Last updated:** [May 13, 2020, 7:18am UTC](https://discuss.elastic.co/t/metricbeat-oracle-overview/232156 "2020-05-13T07:18:57Z")
Hello, I need to download the json for the dashboard in question for version 7.5.0 of Kibana. Where can I find it? --- ## [How get average agregation without negative value in field](https://discuss.elastic.co/t/how-get-average-agregation-without-negative-value-in-field/232299)
**Author:** [@111334](https://discuss.elastic.co/u/111334)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 7:02am UTC](https://discuss.elastic.co/t/how-get-average-agregation-without-negative-value-in-field/232299 "2020-05-13T07:02:58Z")
Tell me how to exclude negative values ​​from aggregation? --- ## [Eligible H/W specs for master only node in a cluster?](https://discuss.elastic.co/t/eligible-h-w-specs-for-master-only-node-in-a-cluster/232365)
**Author:** [@joey-yoonsung](https://discuss.elastic.co/u/joey-yoonsung)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 6:08am UTC](https://discuss.elastic.co/t/eligible-h-w-specs-for-master-only-node-in-a-cluster/232365 "2020-05-13T06:08:52Z")
Hi. I'm going to setup a new elasticsearch cluster like below data and coordinator node spec. Broadwell E5-2630 v4 2P10C CPU, 64GB RAM, 4.8TB SSD. There are 30 nodes for data-node and 3 nodes for coordinator-node. I … --- ## [Problems trying to register Elasticsearch.NET/NEST in PowerShell](https://discuss.elastic.co/t/problems-trying-to-register-elasticsearch-net-nest-in-powershell/232215)
**Author:** [@syPY45Xb5n7S](https://discuss.elastic.co/u/syPY45Xb5n7S)\ **Replies:** 4\ **Last updated:** [May 13, 2020, 5:32am UTC](https://discuss.elastic.co/t/problems-trying-to-register-elasticsearch-net-nest-in-powershell/232215 "2020-05-13T05:32:12Z")
I've been looking into using elasticsearch.net and nest via powershell instead of re-inventing the wheel with all the different type of web-requests. As dotnet DLLs, it should be possible to use them with PowerShell via A… --- ## [Indicate the current tab in Kibana Mardown Widget multiple tabs option](https://discuss.elastic.co/t/indicate-the-current-tab-in-kibana-mardown-widget-multiple-tabs-option/231943)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 4\ **Last updated:** [May 13, 2020, 5:19am UTC](https://discuss.elastic.co/t/indicate-the-current-tab-in-kibana-mardown-widget-multiple-tabs-option/231943 "2020-05-13T05:19:41Z")
Hi, Is there any way to highlight/indicate the current tab position in Kibana Markdown Widget? Thanks in advance --- ## [Is there any beginner's guide to achieving better search results in elasticsearch?](https://discuss.elastic.co/t/is-there-any-beginners-guide-to-achieving-better-search-results-in-elasticsearch/232360)
**Author:** [@labuka](https://discuss.elastic.co/u/labuka)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 5:18am UTC](https://discuss.elastic.co/t/is-there-any-beginners-guide-to-achieving-better-search-results-in-elasticsearch/232360 "2020-05-13T05:18:42Z")
I have indexed the data with certain mappings inside elasticsearch, however I'm trying to understand what are all the ways to achieve better search results. Let's say a generic search and on top of that I can add filters… --- ## [How to create new fields and documents based on variable length log?](https://discuss.elastic.co/t/how-to-create-new-fields-and-documents-based-on-variable-length-log/232303)
**Author:** [@san\_sun](https://discuss.elastic.co/u/san_sun)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 5:03am UTC](https://discuss.elastic.co/t/how-to-create-new-fields-and-documents-based-on-variable-length-log/232303 "2020-05-13T05:03:10Z")
I have a log message with a format like: status : name message ; status: name message ; status: name message ; status: name message..... I need to split based on the semicolon, and create separate Elasticsearch docu… --- ## [Logstash can read and loaded the files into ES. But I cannot find the data in ES](https://discuss.elastic.co/t/logstash-can-read-and-loaded-the-files-into-es-but-i-cannot-find-the-data-in-es/232190)
**Author:** [@logittech](https://discuss.elastic.co/u/logittech)\ **Replies:** 5\ **Last updated:** [May 13, 2020, 3:52am UTC](https://discuss.elastic.co/t/logstash-can-read-and-loaded-the-files-into-es-but-i-cannot-find-the-data-in-es/232190 "2020-05-13T03:52:04Z")
Hi all, I'm trying to load the data into ES. It seems like Logstash can read the files and loaded it into ES. But the doc\_count in Kibana/ES show 0 and I cannot create the index pattern. I'm using ES:7.6.1; Kibana:7.6.… --- ## [How to interact on rows of Data Table Visualization](https://discuss.elastic.co/t/how-to-interact-on-rows-of-data-table-visualization/232202)
**Author:** [@jaytran](https://discuss.elastic.co/u/jaytran)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 3:48am UTC](https://discuss.elastic.co/t/how-to-interact-on-rows-of-data-table-visualization/232202 "2020-05-13T03:48:42Z")
Hi All, I want to build a report that list down information in a table with Actions column as below, when user click on X, that row will be hidden, Please let me know is it possible to do this action with Visualization?… --- ## [Error while connecting to Amazon Elasticsearch](https://discuss.elastic.co/t/error-while-connecting-to-amazon-elasticsearch/232352)
**Author:** [@rupini](https://discuss.elastic.co/u/rupini)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 3:48am UTC](https://discuss.elastic.co/t/error-while-connecting-to-amazon-elasticsearch/232352 "2020-05-13T03:48:21Z")
Hi, I am a beginner and trying to figure our ELK. I have logstash configured in an AWS EC2 instance. I am trying to transfer the data from S3 bucket to AWS ES service using logstash. I am getting the following error whe… --- ## ['unknown key \[actor\] for create index](https://discuss.elastic.co/t/unknown-key-actor-for-create-index/232344)
**Author:** [@Kevin\_Juliano](https://discuss.elastic.co/u/Kevin_Juliano)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 2:58am UTC](https://discuss.elastic.co/t/unknown-key-actor-for-create-index/232344 "2020-05-13T02:58:29Z")
Hi Guys, I'm still familiarizing myself in Elasticsearch, Right now, I am experimenting on analyzers but when I finished the mapping and started the indexing, it gives me this error: type: 'parse\_exception'reason: 'unk… --- ## [Grouped country wise record then i want to get maximum value from each country and id](https://discuss.elastic.co/t/grouped-country-wise-record-then-i-want-to-get-maximum-value-from-each-country-and-id/232342)
**Author:** [@Ramesh\_Kumar](https://discuss.elastic.co/u/Ramesh_Kumar)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 2:30am UTC](https://discuss.elastic.co/t/grouped-country-wise-record-then-i-want-to-get-maximum-value-from-each-country-and-id/232342 "2020-05-13T02:30:31Z")
{ "aggs" : { "country\_groups" : { "terms" : { "field" : "country.keyword", "size":30000 }, "aggs":{ "max\_price":{ "max": { "field" : "video\_count"} } } } } } [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1451) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1453)