# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1489 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1490 --- ## [Is there anything similar to a Reference Set in Elasticsearch](https://discuss.elastic.co/t/is-there-anything-similar-to-a-reference-set-in-elasticsearch/229742)
**Author:** [@hilo21](https://discuss.elastic.co/u/hilo21)\ **Replies:** 0\ **Last updated:** [April 25, 2020, 4:37am UTC](https://discuss.elastic.co/t/is-there-anything-similar-to-a-reference-set-in-elasticsearch/229742 "2020-04-25T04:37:18Z")
Hello great community, So we're migrating and testing Elastic Stack and I was wondering if there is anything similar to a Reference Set (in QRadar) where I can push and update the internal IP address (or host name) in i… --- ## [Signal SIEM Detections using log files](https://discuss.elastic.co/t/signal-siem-detections-using-log-files/226667)
**Author:** [@david-vazquez](https://discuss.elastic.co/u/david-vazquez)\ **Replies:** 4\ **Last updated:** [April 25, 2020, 12:26am UTC](https://discuss.elastic.co/t/signal-siem-detections-using-log-files/226667 "2020-04-25T00:26:44Z")
Hello, I ingested some data from firewall devices of which I would like to create rules in the Detections part of the Elastic SIEM. I created a rule to detect Malware using a field of the log file which has that inform… --- ## [Stack Monitoring with Metricbeat](https://discuss.elastic.co/t/stack-monitoring-with-metricbeat/229733)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 4\ **Last updated:** [April 24, 2020, 11:52pm UTC](https://discuss.elastic.co/t/stack-monitoring-with-metricbeat/229733 "2020-04-24T23:52:18Z")
Hi I was wondering what make the Stack Monitoring app in Kibana understand that the metrics are coming from Metricbeat, instead of self monitoring. (the documentation says this is the prefered way, and also the interfac… --- ## [No results when SQL Statement contains "Create ClusteredIndex"](https://discuss.elastic.co/t/no-results-when-sql-statement-contains-create-clusteredindex/229732)
**Author:** [@sidsniper](https://discuss.elastic.co/u/sidsniper)\ **Replies:** 0\ **Last updated:** [April 24, 2020, 11:10pm UTC](https://discuss.elastic.co/t/no-results-when-sql-statement-contains-create-clusteredindex/229732 "2020-04-24T23:10:11Z")
Hi Team, I am facing an issue where if I am adding a cluster or nonclustered index to temp tables in the sql statement, the jdbc input plugin is not giving any results. Any idea how I can create these indexes in temp t… --- ## [Can I upload a csv file without timestamp to kibana?](https://discuss.elastic.co/t/can-i-upload-a-csv-file-without-timestamp-to-kibana/229700)
**Author:** [@samnayak1](https://discuss.elastic.co/u/samnayak1)\ **Replies:** 7\ **Last updated:** [April 24, 2020, 10:55pm UTC](https://discuss.elastic.co/t/can-i-upload-a-csv-file-without-timestamp-to-kibana/229700 "2020-04-24T22:55:43Z")
File could not be read \[illegal\_argument\_exception\] Could not find a timestamp in the sample provided --- ## [Kibana Date histogram - interpretation](https://discuss.elastic.co/t/kibana-date-histogram-interpretation/227745)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 7\ **Last updated:** [April 24, 2020, 10:46pm UTC](https://discuss.elastic.co/t/kibana-date-histogram-interpretation/227745 "2020-04-24T22:46:24Z")
I am looking at the demo dashboard - https://demo.elastic.co/app/kibana#/visualize/edit/37cc8650-b882-11e8-a6d9-e546fe2bba5f?\_g=(refreshInterval:(pause:!f,value:900000),time:(from:'2020-03-25T11:15:07.466Z',to:'2020-04… --- ## [Clone an Index Elasticsearch 6.7](https://discuss.elastic.co/t/clone-an-index-elasticsearch-6-7/229729)
**Author:** [@karanmig12](https://discuss.elastic.co/u/karanmig12)\ **Replies:** 1\ **Last updated:** [April 24, 2020, 10:15pm UTC](https://discuss.elastic.co/t/clone-an-index-elasticsearch-6-7/229729 "2020-04-24T22:15:29Z")
What's the best way to clone index in Elasticsearch 6.7 --- ## [Kibana Browser Session not active for the set time](https://discuss.elastic.co/t/kibana-browser-session-not-active-for-the-set-time/229724)
**Author:** [@sushmamagesh](https://discuss.elastic.co/u/sushmamagesh)\ **Replies:** 1\ **Last updated:** [April 24, 2020, 10:05pm UTC](https://discuss.elastic.co/t/kibana-browser-session-not-active-for-the-set-time/229724 "2020-04-24T22:05:45Z")
We are trying to keep the browser sessions alive for a long time for some of the usecases we have and below are the setting i have used. Note the encryption key and sessionTimeout is commented out for the 7.6 version. I … --- ## [Need help on kibana dashboard](https://discuss.elastic.co/t/need-help-on-kibana-dashboard/229727)
**Author:** [@Bjen\_Shah](https://discuss.elastic.co/u/Bjen_Shah)\ **Replies:** 1\ **Last updated:** [April 24, 2020, 9:25pm UTC](https://discuss.elastic.co/t/need-help-on-kibana-dashboard/229727 "2020-04-24T21:25:52Z")
On Following image, can anyone tell me how can I or is it possible to connect lines between them while there are missing data. what's the option should I select to fill in the blank, as similar as in grafana. Here is… --- ## [Error in visualization \[esaggs\] \> “field” is a required parameter](https://discuss.elastic.co/t/error-in-visualization-esaggs-field-is-a-required-parameter/229722)
**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\ **Replies:** 0\ **Last updated:** [April 24, 2020, 8:51pm UTC](https://discuss.elastic.co/t/error-in-visualization-esaggs-field-is-a-required-parameter/229722 "2020-04-24T20:51:25Z")
I tried the solution as described in https://discuss.elastic.co/t/logstash-output-wrong-error-in-visualization-esaggs-field-is-a-required-parameter/215412/4?u=tbhaxor But this is not working --- ## [Third-party rest-delivery service does provide params which get an error at document creation](https://discuss.elastic.co/t/third-party-rest-delivery-service-does-provide-params-which-get-an-error-at-document-creation/229664)
**Author:** [@rndee](https://discuss.elastic.co/u/rndee)\ **Replies:** 4\ **Last updated:** [April 24, 2020, 8:30pm UTC](https://discuss.elastic.co/t/third-party-rest-delivery-service-does-provide-params-which-get-an-error-at-document-creation/229664 "2020-04-24T20:30:43Z")
I have a third-party service on which I can configure a url (I have put the elastic https://...../index/\_doc) this has lead: the error received: { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", … --- ## [Decsription added to Visualization does not appear on Dashboard](https://discuss.elastic.co/t/decsription-added-to-visualization-does-not-appear-on-dashboard/229692)
**Author:** [@Ravneet](https://discuss.elastic.co/u/Ravneet)\ **Replies:** 1\ **Last updated:** [April 24, 2020, 7:53pm UTC](https://discuss.elastic.co/t/decsription-added-to-visualization-does-not-appear-on-dashboard/229692 "2020-04-24T19:53:30Z")
Hi, I am trying to add Description to Visualizations and want that description to be reflected on Dashboard for that visualization. I have added description but that description does not appear on Dashboard. Any help … --- ## [Code optimization](https://discuss.elastic.co/t/code-optimization/229713)
**Author:** [@nikolaj\_88](https://discuss.elastic.co/u/nikolaj_88)\ **Replies:** 0\ **Last updated:** [April 24, 2020, 7:45pm UTC](https://discuss.elastic.co/t/code-optimization/229713 "2020-04-24T19:45:22Z")
Hello, I'm implementing the new search engine on my website and I have doubts about my code. The following code (working version) it's quite bulky and can be bigger depending on search term and I think that it could be… --- ## [Issue with writing Spark dataset to Elastic](https://discuss.elastic.co/t/issue-with-writing-spark-dataset-to-elastic/229694)
**Author:** [@angryninja](https://discuss.elastic.co/u/angryninja)\ **Replies:** 2\ **Last updated:** [April 24, 2020, 7:12pm UTC](https://discuss.elastic.co/t/issue-with-writing-spark-dataset-to-elastic/229694 "2020-04-24T19:12:56Z")
Hi, I'm trying to write a Spark dataset to es but I get following error while executing following piece of code - items.write().format("es").options(getOptions()).save(); I'm also setting following options while tryin… --- ## [Link external data to Elastic](https://discuss.elastic.co/t/link-external-data-to-elastic/226964)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 4\ **Last updated:** [April 24, 2020, 6:39pm UTC](https://discuss.elastic.co/t/link-external-data-to-elastic/226964 "2020-04-24T18:39:49Z")
Kibana version : 7.6 Elasticsearch version : 7.6 APM Server version : 7.3.2 APM Agent language and version : java 1.9.0 Fresh install or upgraded from other version? fresh install Is there anything special in your s… --- ## [Mute certain APM errors from watcher](https://discuss.elastic.co/t/mute-certain-apm-errors-from-watcher/229703)
**Author:** [@Matthew\_Petrie](https://discuss.elastic.co/u/Matthew_Petrie)\ **Replies:** 0\ **Last updated:** [April 24, 2020, 5:55pm UTC](https://discuss.elastic.co/t/mute-certain-apm-errors-from-watcher/229703 "2020-04-24T17:55:27Z")
Kibana version : 7.6.2 Elasticsearch version : 7.6.2 APM Server version :7.6.2 APM Agent language and version : Node.JS 3.5.0 Original install method : Elastic Cloud Is there anything special in your setup? No … --- ## [Multiple pipelines running on same machine](https://discuss.elastic.co/t/multiple-pipelines-running-on-same-machine/225217)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 16\ **Last updated:** [April 24, 2020, 5:41pm UTC](https://discuss.elastic.co/t/multiple-pipelines-running-on-same-machine/225217 "2020-04-24T17:41:26Z")
Hello Team, I am facing issues with logstash pipelines filter section i am using multiple filters like grok, elasticsearch translate, ruby etc in combination, The issue is the data of some other record processed at the… --- ## [Changes to config file not updating the data in kibana](https://discuss.elastic.co/t/changes-to-config-file-not-updating-the-data-in-kibana/229572)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 3\ **Last updated:** [April 24, 2020, 5:34pm UTC](https://discuss.elastic.co/t/changes-to-config-file-not-updating-the-data-in-kibana/229572 "2020-04-24T17:34:28Z")
Hello All, I am using the latest version of logstash(7.6.2). I tried uploading a sample data and was able to successfully upload it into the elasticsearch using logstash(enabled auto-reload) and was able to see the inde… --- ## [Proper RegEx with Mutate\>GSub](https://discuss.elastic.co/t/proper-regex-with-mutate-gsub/229679)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [April 24, 2020, 5:25pm UTC](https://discuss.elastic.co/t/proper-regex-with-mutate-gsub/229679 "2020-04-24T17:25:30Z")
Pulling what's left of my hair out trying to get this field to properly display. I have log data coming in from a firewall in key=value format. I'm using kv to parse all the fields out and I'm left with a field called \[… --- ## [Delete data oldest than 80 days](https://discuss.elastic.co/t/delete-data-oldest-than-80-days/229690)
**Author:** [@Wesley\_Vieira](https://discuss.elastic.co/u/Wesley_Vieira)\ **Replies:** 1\ **Last updated:** [April 24, 2020, 5:20pm UTC](https://discuss.elastic.co/t/delete-data-oldest-than-80-days/229690 "2020-04-24T17:20:08Z")
Hi, how can i release storage from my Elasticsearch server, i receive logs from 6 other servers from filebeat and logstash, and have an index that contains 190GB and the server is with only 5% of free storage, Although, … --- ## [Logstash with ruby command](https://discuss.elastic.co/t/logstash-with-ruby-command/229576)
**Author:** [@111228](https://discuss.elastic.co/u/111228)\ **Replies:** 1\ **Last updated:** [April 24, 2020, 4:53pm UTC](https://discuss.elastic.co/t/logstash-with-ruby-command/229576 "2020-04-24T16:53:42Z")
Hello everyone I use ruby in my logstash to increase the value of the field by 1000 and I do it but in logstash logs I constantly see a message with error \[ERROR\]\[logstash.filters.ruby \]\[main\] Ruby exception occurred… --- ## [Unknown type in Discover even with Dynamic Mapping](https://discuss.elastic.co/t/unknown-type-in-discover-even-with-dynamic-mapping/229423)
**Author:** [@Bibas](https://discuss.elastic.co/u/Bibas)\ **Replies:** 3\ **Last updated:** [April 24, 2020, 4:52pm UTC](https://discuss.elastic.co/t/unknown-type-in-discover-even-with-dynamic-mapping/229423 "2020-04-24T16:52:31Z")
Hello ! I'm new to the ELK stack so this question might be a bit dumb and I apologize. I have logs going through Logstash, then Elastic Search and arriving to Kibana without problems. My logs contains severals custom f… --- ## [Elasticsearch Keeps Crashing shards and data to big](https://discuss.elastic.co/t/elasticsearch-keeps-crashing-shards-and-data-to-big/229463)
**Author:** [@Archie\_Crawford](https://discuss.elastic.co/u/Archie_Crawford)\ **Replies:** 17\ **Last updated:** [April 24, 2020, 4:52pm UTC](https://discuss.elastic.co/t/elasticsearch-keeps-crashing-shards-and-data-to-big/229463 "2020-04-24T16:52:02Z")
When I restart elasticsearch the cluster will go into green for a little while then it will go back to read and kibana will no longer come up. Instead I see this error " {"message":"all shards failed: \[search\_phase\_execu… --- ## [Shrink using ILM](https://discuss.elastic.co/t/shrink-using-ilm/229677)
**Author:** [@Phandora](https://discuss.elastic.co/u/Phandora)\ **Replies:** 2\ **Last updated:** [April 24, 2020, 4:45pm UTC](https://discuss.elastic.co/t/shrink-using-ilm/229677 "2020-04-24T16:45:04Z")
Hi, We are designing our cluster taking into consideration some Elasticsearch best practices, focusing on keeping the shard size as close to our desired one (currently 25gb) as possible. We decided to create ILM polici… --- ## [How is a template used while creating an index with Java API](https://discuss.elastic.co/t/how-is-a-template-used-while-creating-an-index-with-java-api/229339)
**Author:** [@angryninja](https://discuss.elastic.co/u/angryninja)\ **Replies:** 6\ **Last updated:** [April 24, 2020, 4:25pm UTC](https://discuss.elastic.co/t/how-is-a-template-used-while-creating-an-index-with-java-api/229339 "2020-04-24T16:25:34Z")
Hi, I'm trying to create an index which is going to have a common structure every time it'll be recreated. I've created a template on ES and want to use it while creating and populating the index via Java program. How… --- ## [Range ip v4 address in kibana region map](https://discuss.elastic.co/t/range-ip-v4-address-in-kibana-region-map/229514)
**Author:** [@Nazarenko](https://discuss.elastic.co/u/Nazarenko)\ **Replies:** 3\ **Last updated:** [April 24, 2020, 4:25pm UTC](https://discuss.elastic.co/t/range-ip-v4-address-in-kibana-region-map/229514 "2020-04-24T16:25:12Z")
Hello everyone. Recently and ran into a problem, i created personal region map and i want that kibana make visualization using ip v4 range. For example, if the message has an ip\_address field i see a that kibana visuali… --- ## [Search by GeoDistance(DESC) and another field "created\_date"(DESC)](https://discuss.elastic.co/t/search-by-geodistance-desc-and-another-field-created-date-desc/229686)
**Author:** [@Edgar\_Adrian\_Munoz\_M](https://discuss.elastic.co/u/Edgar_Adrian_Munoz_M)\ **Replies:** 1\ **Last updated:** [April 24, 2020, 4:10pm UTC](https://discuss.elastic.co/t/search-by-geodistance-desc-and-another-field-created-date-desc/229686 "2020-04-24T16:10:56Z")
Hi, I'm doing a search that will return to me through the location of the closest point to the furthest point. And to that include the date of creation from the most current to the oldest I am using the REST API search… --- ## [Fuzziness not work with bool\_prefix multi\_match (search-as-you-type)](https://discuss.elastic.co/t/fuzziness-not-work-with-bool-prefix-multi-match-search-as-you-type/229602)
**Author:** [@andrewbien](https://discuss.elastic.co/u/andrewbien)\ **Replies:** 4\ **Last updated:** [April 24, 2020, 3:59pm UTC](https://discuss.elastic.co/t/fuzziness-not-work-with-bool-prefix-multi-match-search-as-you-type/229602 "2020-04-24T15:59:20Z")
Hi everyone. I struggling with a problem is that fuzziness not work with multi\_match bool\_prefix query , but I found on document that fuzziness option was supported: https://www.elastic.co/guide/en/elasticsearch/refere… --- ## [Dividing two values from same field and same index](https://discuss.elastic.co/t/dividing-two-values-from-same-field-and-same-index/229643)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 3\ **Last updated:** [April 24, 2020, 3:53pm UTC](https://discuss.elastic.co/t/dividing-two-values-from-same-field-and-same-index/229643 "2020-04-24T15:53:09Z")
Hello, My index has a field: my\_field that can have two possible values: yes and no. The following query: { "size": 0, "aggs": { "count": { "terms": { "field": "my\_field" } } } } retu… --- ## [Aggregate count for the day](https://discuss.elastic.co/t/aggregate-count-for-the-day/229520)
**Author:** [@edvrfn](https://discuss.elastic.co/u/edvrfn)\ **Replies:** 3\ **Last updated:** [April 24, 2020, 3:38pm UTC](https://discuss.elastic.co/t/aggregate-count-for-the-day/229520 "2020-04-24T15:38:12Z")
I created a visualization which works fine for the time period set against KQL search bar. I want to display this visualization on the dashboard which has a refresh cycle of 30 minutes, but this visualization need to sho… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1488) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1490)