# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1508 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1509 --- ## [Help interpreting explain results, IDF behavior (newbie)](https://discuss.elastic.co/t/help-interpreting-explain-results-idf-behavior-newbie/228217)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 5:11pm UTC](https://discuss.elastic.co/t/help-interpreting-explain-results-idf-behavior-newbie/228217 "2020-04-16T17:11:22Z")
I have 2 documents which match my filter, and both have an identical value in the field being queried, but yet they yield vastly different scores. Here is the returned result: { "took" : 3, "timed\_out" : false, "… --- ## [Unable to rename host to \[host\]\[name\]](https://discuss.elastic.co/t/unable-to-rename-host-to-host-name/227824)
**Author:** [@boyhittscar](https://discuss.elastic.co/u/boyhittscar)\ **Replies:** 4\ **Last updated:** [April 16, 2020, 5:05pm UTC](https://discuss.elastic.co/t/unable-to-rename-host-to-host-name/227824 "2020-04-16T17:05:17Z")
Hello - I feel like this should be easy, and I'm not really sure why this isn't working. I have the following data host: MYPC endpoint\_type: computer To follow ECS, I'm attempting to do a mutate and rename /nest the… --- ## [Vulnerabilities associated with jackson-databind 2.8.11.3](https://discuss.elastic.co/t/vulnerabilities-associated-with-jackson-databind-2-8-11-3/228376)
**Author:** [@Sunil\_Chadha](https://discuss.elastic.co/u/Sunil_Chadha)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 5:04pm UTC](https://discuss.elastic.co/t/vulnerabilities-associated-with-jackson-databind-2-8-11-3/228376 "2020-04-16T17:04:20Z")
Hi, In the Elasticsearch 6.8.4 jackson-databind version 2.8.11.3 used. This version of Jackson-databind has many high vulnerabilities associated. CVE-2019-16943 CVE-2018-19360 CVE-2019-14893 CVE-2018-14719 CVE-201… --- ## [Strigo lab error in ElasticSearch Engineer 1 ondemand class lab 1.3](https://discuss.elastic.co/t/strigo-lab-error-in-elasticsearch-engineer-1-ondemand-class-lab-1-3/223748)
**Author:** [@ADHo](https://discuss.elastic.co/u/ADHo)\ **Replies:** 8\ **Last updated:** [April 16, 2020, 4:49pm UTC](https://discuss.elastic.co/t/strigo-lab-error-in-elasticsearch-engineer-1-ondemand-class-lab-1-3/223748 "2020-04-16T16:49:17Z")
I am currently undertaking ES Engineer 1 on demand course and working in Strigo to conduct the labs. In Lab 1.3 I am looking to start Kibana in a second server tab, with the first running ES. The Kibana launcher errors… --- ## [Elastic Search 5.6 - Getting HTTP/1.1 504 Gateway Timeout](https://discuss.elastic.co/t/elastic-search-5-6-getting-http-1-1-504-gateway-timeout/228371)
**Author:** [@kc404](https://discuss.elastic.co/u/kc404)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 4:36pm UTC](https://discuss.elastic.co/t/elastic-search-5-6-getting-http-1-1-504-gateway-timeout/228371 "2020-04-16T16:36:06Z")
We are using ES 5.6. Our application (Java,Play) keeps on receiving requests on application-akka.actor.default-dispatcher and response for those will be collected by ForkJoinPool.commonPool-worker threads from elastic. A… --- ## [Charm Elasticsearch Security and P12 certificates with password](https://discuss.elastic.co/t/charm-elasticsearch-security-and-p12-certificates-with-password/228363)
**Author:** [@jgato](https://discuss.elastic.co/u/jgato)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 4:04pm UTC](https://discuss.elastic.co/t/charm-elasticsearch-security-and-p12-certificates-with-password/228363 "2020-04-16T16:04:29Z")
I have almost everything up and running to enable security, certificates, user and password. But the p12 certificate is protected with a password. How do I configure that in the Charm values? --- ## [How to store and search for same values in a field](https://discuss.elastic.co/t/how-to-store-and-search-for-same-values-in-a-field/228357)
**Author:** [@kent120103](https://discuss.elastic.co/u/kent120103)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 3:38pm UTC](https://discuss.elastic.co/t/how-to-store-and-search-for-same-values-in-a-field/228357 "2020-04-16T15:38:22Z")
Dear Elastic community, My index contains following documents: {. "\_index": "sametokensearch", "\_type": "\_doc", "\_id": "1", "found": true, "\_source": { "dob": \["202", "020", "20-", "0-0", "-03", "03-", … --- ## [Migrate to ECS](https://discuss.elastic.co/t/migrate-to-ecs/228356)
**Author:** [@inandi](https://discuss.elastic.co/u/inandi)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 3:38pm UTC](https://discuss.elastic.co/t/migrate-to-ecs/228356 "2020-04-16T15:38:05Z")
Hi, I want to migrate ECS. my current project log system is below my sample data in kibana is { "\_index": "winlogbeat-6.6.1-2020.04.16", "\_type": "doc", "\_id": "ayaGg3EBM9cZYkQ41G7F", "\_version": 1, "\_scor… --- ## [Feed custom label latlong to maps](https://discuss.elastic.co/t/feed-custom-label-latlong-to-maps/228309)
**Author:** [@Manish\_Saraf](https://discuss.elastic.co/u/Manish_Saraf)\ **Replies:** 3\ **Last updated:** [April 16, 2020, 3:32pm UTC](https://discuss.elastic.co/t/feed-custom-label-latlong-to-maps/228309 "2020-04-16T15:32:42Z")
we want to use APM RUM feeds to reflect users on teh maps for an application. Does kibana support only geo tags or we can use the custom tags --- ## [Problem with Kibana unable to load Dashboards](https://discuss.elastic.co/t/problem-with-kibana-unable-to-load-dashboards/228325)
**Author:** [@Chandrashekar467](https://discuss.elastic.co/u/Chandrashekar467)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 3:17pm UTC](https://discuss.elastic.co/t/problem-with-kibana-unable-to-load-dashboards/228325 "2020-04-16T15:17:07Z")
Hi all, I have installed metric-beat , but unable to load he kibana dashboard for mongodb. i am getting below error, \[10.0.1.1:9300\]\[indices:data/read/search\[phase/query\]\] Caused by: java.lang.IllegalArgumentExceptio… --- ## [KIbana server not ready yet. Update from 7.5.2 to 7.6.2](https://discuss.elastic.co/t/kibana-server-not-ready-yet-update-from-7-5-2-to-7-6-2/228100)
**Author:** [@MichaelA](https://discuss.elastic.co/u/MichaelA)\ **Replies:** 16\ **Last updated:** [April 16, 2020, 3:14pm UTC](https://discuss.elastic.co/t/kibana-server-not-ready-yet-update-from-7-5-2-to-7-6-2/228100 "2020-04-16T15:14:36Z")
Hi, dear community! I updated Kibana and Elasticsearch from version 7.5.2 to 7.6.2 and received an error - KIbana server not ready yet. I do not see anything suspicious in the logs except that the Kibana service is rest… --- ## [How to check multiple values using if else condition in field and add new values to another field?](https://discuss.elastic.co/t/how-to-check-multiple-values-using-if-else-condition-in-field-and-add-new-values-to-another-field/228331)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 3:10pm UTC](https://discuss.elastic.co/t/how-to-check-multiple-values-using-if-else-condition-in-field-and-add-new-values-to-another-field/228331 "2020-04-16T15:10:55Z")
HI, I want to add a code which contains if else conditions which helps me to add values ​​to a new field according to conditions on another field. for example; Blockquote if \[Duration\] \>= 360 { mutate { add\_field … --- ## [Parsing events before forwarding](https://discuss.elastic.co/t/parsing-events-before-forwarding/228330)
**Author:** [@calebhoch](https://discuss.elastic.co/u/calebhoch)\ **Replies:** 3\ **Last updated:** [April 16, 2020, 2:55pm UTC](https://discuss.elastic.co/t/parsing-events-before-forwarding/228330 "2020-04-16T14:55:00Z")
Hi there, we're looking into leveraging Logstash to forward our system logs to our SIEM, QRadar. I wanted to know if there is a way to filter out specific events with Logstash before forwarding onto QRadar. Any help or … --- ## [Kibana 7.4.2 is taking too much time to load](https://discuss.elastic.co/t/kibana-7-4-2-is-taking-too-much-time-to-load/226539)
**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Replies:** 4\ **Last updated:** [April 16, 2020, 2:49pm UTC](https://discuss.elastic.co/t/kibana-7-4-2-is-taking-too-much-time-to-load/226539 "2020-04-16T14:49:06Z")
Hi Team, In am using kibana 7.4.2 , It is taking too much time to load around 10 seconds. There are few modules which are not needed in my use case like APM, timelion, SIEM. how can i remove these modules at code level… --- ## [Rules in ElasticSIEM not create signals](https://discuss.elastic.co/t/rules-in-elasticsiem-not-create-signals/228068)
**Author:** [@Nazarenko](https://discuss.elastic.co/u/Nazarenko)\ **Replies:** 4\ **Last updated:** [April 16, 2020, 2:23pm UTC](https://discuss.elastic.co/t/rules-in-elasticsiem-not-create-signals/228068 "2020-04-16T14:23:48Z")
Hello, i have some problem with rules in ElasticSIEM. I have a lot of indexies but in on of them rules don't working. Messages about error rules are absent. WIth one index rule are working but when i write rule for other… --- ## [How to prevent an occurence of \_aggregatefinalflush tag?](https://discuss.elastic.co/t/how-to-prevent-an-occurence-of-aggregatefinalflush-tag/228284)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 3\ **Last updated:** [April 16, 2020, 2:23pm UTC](https://discuss.elastic.co/t/how-to-prevent-an-occurence-of-aggregatefinalflush-tag/228284 "2020-04-16T14:23:33Z")
Hello, can someone help me how to prevent an occurence of \_aggregatefinalflush tag? aggregate { ... timeout =\> 5 timeout\_tags =\> \[\] } --- ## [Dark theme by default](https://discuss.elastic.co/t/dark-theme-by-default/228326)
**Author:** [@centurus](https://discuss.elastic.co/u/centurus)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 2:03pm UTC](https://discuss.elastic.co/t/dark-theme-by-default/228326 "2020-04-16T14:03:29Z")
Hello. Is it possible to set dark theme as default for all users? --- ## [Conditional Filter issue](https://discuss.elastic.co/t/conditional-filter-issue/227990)
**Author:** [@bikramsingh](https://discuss.elastic.co/u/bikramsingh)\ **Replies:** 3\ **Last updated:** [April 16, 2020, 1:54pm UTC](https://discuss.elastic.co/t/conditional-filter-issue/227990 "2020-04-16T13:54:14Z")
I have this filter in the config file, i trying to validate it using in build test config functionality. I am getting error. filter { if( "Network Login" in \[message\]){ if("caps\_fail" in \[message\]){ grok{ … --- ## [Word Frequency for search term](https://discuss.elastic.co/t/word-frequency-for-search-term/228332)
**Author:** [@sanjaye218](https://discuss.elastic.co/u/sanjaye218)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 1:44pm UTC](https://discuss.elastic.co/t/word-frequency-for-search-term/228332 "2020-04-16T13:44:26Z")
Hi, I am trying to find word frequency suing query string. But in case search term is more than single word and field is of type text, then its returning incorrect results. Like if my data is "This is word tied off" an… --- ## [Welcome to kibana fundamentals](https://discuss.elastic.co/t/welcome-to-kibana-fundamentals/227965)
**Author:** [@vinoth\_kumar](https://discuss.elastic.co/u/vinoth_kumar)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 1:27pm UTC](https://discuss.elastic.co/t/welcome-to-kibana-fundamentals/227965 "2020-04-16T13:27:38Z")
HI All , Discover interface i have doubt with the following question from the training "Welcome to kibana fundamentals" : f.)Customize the table in order to display only the fields: occupation, geo.country, favorite\_… --- ## [Cloud NAT egress cost to elastic cloud](https://discuss.elastic.co/t/cloud-nat-egress-cost-to-elastic-cloud/228327)
**Author:** [@Edgar\_Peixoto](https://discuss.elastic.co/u/Edgar_Peixoto)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 1:27pm UTC](https://discuss.elastic.co/t/cloud-nat-egress-cost-to-elastic-cloud/228327 "2020-04-16T13:27:35Z")
I have a Elastic Cloud as a service and a google private GKE cluster in the same region with filebeat and metric beat sending metrics to my EC installation. They are using Cloud NAT. I noticed a great cost using Cloud N… --- ## [String Manipulation in Scripts](https://discuss.elastic.co/t/string-manipulation-in-scripts/228321)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 1:10pm UTC](https://discuss.elastic.co/t/string-manipulation-in-scripts/228321 "2020-04-16T13:10:55Z")
Hi, If I have a string looking something like: aaa-bbb-ccc-dddd How can I use painless scripts to extract ccc into a new field? Thx D --- ## [Поле "duration" время больше 23:59:59](https://discuss.elastic.co/t/duration-2359/228316)
**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 1:05pm UTC](https://discuss.elastic.co/t/duration-2359/228316 "2020-04-16T13:05:00Z")
Всем привет! Есть поле "duration" в него преобразуется UNIXTIME, но если UNIXTIME больше 86400, то один день не учитывается. Например, если UNIXTIME 86407, то в "duration " запишется 00:00:07. Вот код который преобраз… --- ## [Data lost in kibana when either logstash or elasticsearch servers are down](https://discuss.elastic.co/t/data-lost-in-kibana-when-either-logstash-or-elasticsearch-servers-are-down/228277)
**Author:** [@Alex123](https://discuss.elastic.co/u/Alex123)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 1:01pm UTC](https://discuss.elastic.co/t/data-lost-in-kibana-when-either-logstash-or-elasticsearch-servers-are-down/228277 "2020-04-16T13:01:51Z")
Data gets lost when either logstash/elasticsearch server is down.. and data gets picked up when one of the both servers are restarted again.. Is there any way to recover/stop the data to be lost. Or search anything else … --- ## [Can't fetch data using REST / POSTMAN](https://discuss.elastic.co/t/cant-fetch-data-using-rest-postman/228318)
**Author:** [@ahmadalibaloch](https://discuss.elastic.co/u/ahmadalibaloch)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 1:00pm UTC](https://discuss.elastic.co/t/cant-fetch-data-using-rest-postman/228318 "2020-04-16T13:00:33Z")
I did a simple deployment and using the JS client pushed some records for an index 'hear2learn'. That was successful. I can also fetch records using JS client. but when I do a request using POSTMAN or browser passing my … --- ## [Nested Discover Fields Display as Hyphen/Dashpayments.payer.payerIdentification.name](https://discuss.elastic.co/t/nested-discover-fields-display-as-hyphen-dashpayments-payer-payeridentification-name/228191)
**Author:** [@valentim](https://discuss.elastic.co/u/valentim)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 12:51pm UTC](https://discuss.elastic.co/t/nested-discover-fields-display-as-hyphen-dashpayments-payer-payeridentification-name/228191 "2020-04-16T12:51:10Z")
In Kibana 7.6.2 discover tab, I have an index that displays all json nested field data as a hyphen/dash. However, I'm expecting data to display. Here's an example of one field: payments.payer.payerIdentification.name pa… --- ## [Kibana Pod going into CrashLoopBackOff](https://discuss.elastic.co/t/kibana-pod-going-into-crashloopbackoff/228214)
**Author:** [@ntsh999](https://discuss.elastic.co/u/ntsh999)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 12:50pm UTC](https://discuss.elastic.co/t/kibana-pod-going-into-crashloopbackoff/228214 "2020-04-16T12:50:03Z")
I am running Elastic stack v7.2 on Kubernetes, my ES cluster is in RED state. As a reason my Kibana application never comes up as the Kibana pod is down with the error CrashLoopBackOff. Kibana pod shows the following err… --- ## [Are elk 6 rpms supported on centos8/python3?](https://discuss.elastic.co/t/are-elk-6-rpms-supported-on-centos8-python3/228315)
**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 12:36pm UTC](https://discuss.elastic.co/t/are-elk-6-rpms-supported-on-centos8-python3/228315 "2020-04-16T12:36:17Z")
Hi, We are using elk 6.6.1 rpms along with elasticsearch-curator-5.6.0. I just wanted to check if all these RPMs are supported on centos8/python3.x. Best Regards, Akshat Sharma --- ## [Elasticsearch does not work with network.host 0.0.0.0](https://discuss.elastic.co/t/elasticsearch-does-not-work-with-network-host-0-0-0-0/228162)
**Author:** [@wiktort](https://discuss.elastic.co/u/wiktort)\ **Replies:** 5\ **Last updated:** [April 16, 2020, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-work-with-network-host-0-0-0-0/228162 "2020-04-16T12:27:18Z")
I have been trying to set up a test version of a website on a different server. The website uses React, Strapi, Postgres, Nginx and Elasticsearch. All of them are working, but the website is stuck on a loader. I do no… --- ## [Проблема с Logstash](https://discuss.elastic.co/t/logstash/228157)
**Author:** [@Vlad\_Piratov](https://discuss.elastic.co/u/Vlad_Piratov)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 12:09pm UTC](https://discuss.elastic.co/t/logstash/228157 "2020-04-16T12:09:38Z")
В общем пытаюсь слать метрики через logstash - все ок. Но когда дело доходит до filbeat, но начинается несусветный бред. Вроде он проглатывает все, но в дашборды ничего информативного не выдает (тому пример на скрине). К… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1507) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1509)