# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1576

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1577

---

## [All\[request\] Data too large, data for \[\<agg \[filter\_brand\]\>\] would be larger than limit of \[4488796569/4.1gb\]](https://discuss.elastic.co/t/all-request-data-too-large-data-for-agg-filter-brand-would-be-larger-than-limit-of-4488796569-4-1gb/223385)

<div class="topic-metadata">

**Author:** [@Anilkumar061988](https://discuss.elastic.co/u/Anilkumar061988)\
**Replies:** 0\
**Last updated:** [March 12, 2020, 5:23pm UTC](https://discuss.elastic.co/t/all-request-data-too-large-data-for-agg-filter-brand-would-be-larger-than-limit-of-4488796569-4-1gb/223385 "2020-03-12T17:23:38Z")

</div>

When I do search All my shards are failing and I am receiving the below exception. It was working fine till yesterday and all my query's and shard's are continuously failing now //\[2020-03-12T16:30:30,410\]\[DEBUG\]\[o.e.a…

---

## [Error in visualisation - Kibana 7.6](https://discuss.elastic.co/t/error-in-visualisation-kibana-7-6/222818)

<div class="topic-metadata">

**Author:** [@luiz.ooliveira](https://discuss.elastic.co/u/luiz.ooliveira)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 5:17pm UTC](https://discuss.elastic.co/t/error-in-visualisation-kibana-7-6/222818 "2020-03-12T17:17:11Z")

</div>

Hello, I'm receiving an error every time I open a Dashboard or Visualize. Error in visualisation \[esaggs\] \> Unexpected token \< in JSON at position 0 It's now clear to me that the error is caused by some timeout, bec…

---

## [Number of nodes for primary and replicas required for resilience](https://discuss.elastic.co/t/number-of-nodes-for-primary-and-replicas-required-for-resilience/223377)

<div class="topic-metadata">

**Author:** [@jkhere](https://discuss.elastic.co/u/jkhere)\
**Replies:** 4\
**Last updated:** [March 12, 2020, 5:16pm UTC](https://discuss.elastic.co/t/number-of-nodes-for-primary-and-replicas-required-for-resilience/223377 "2020-03-12T17:16:50Z")

</div>

I am building a large elasticsearch cluster. I will have probably have around 100 to 150 primary shards. Since the dataset is very large, I am planning to limit the number of shards per node to max of 3. So for 100 prim…

---

## [Show conditional lines in table - kibana 7.6.1](https://discuss.elastic.co/t/show-conditional-lines-in-table-kibana-7-6-1/223338)

<div class="topic-metadata">

**Author:** [@f.Cavenaghi](https://discuss.elastic.co/u/f.Cavenaghi)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 5:09pm UTC](https://discuss.elastic.co/t/show-conditional-lines-in-table-kibana-7-6-1/223338 "2020-03-12T17:09:02Z")

</div>

Hello, pretty new with Kibana. need help or advise. i've managed to setup several dashboard. in one of them i have a table showing data, the data keeps a keep-alive time: i the screenshot all set to some default. …

---

## [How to build Kibana Plugin using Git CI?](https://discuss.elastic.co/t/how-to-build-kibana-plugin-using-git-ci/223304)

<div class="topic-metadata">

**Author:** [@ranitg](https://discuss.elastic.co/u/ranitg)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 5:08pm UTC](https://discuss.elastic.co/t/how-to-build-kibana-plugin-using-git-ci/223304 "2020-03-12T17:08:07Z")

</div>

I am trying to build a Kibana Plugin using Git CI. What is the best practice to do so? Using Kibana 7.5.2

---

## [Kibana won't start: “node” can’t be opened because Apple cannot check it for malicious software](https://discuss.elastic.co/t/kibana-wont-start-node-can-t-be-opened-because-apple-cannot-check-it-for-malicious-software/222994)

<div class="topic-metadata">

**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 5:02pm UTC](https://discuss.elastic.co/t/kibana-wont-start-node-can-t-be-opened-because-apple-cannot-check-it-for-malicious-software/222994 "2020-03-12T17:02:27Z")

</div>

I downloaded Kibana and tried to start it on Mac OSX 10.13.3 (Catalina) but I get the following error and the application is killed: It seems like more of a mac issue but I was hoping someone here might be able to hel…

---

## [From php to kibana](https://discuss.elastic.co/t/from-php-to-kibana/223243)

<div class="topic-metadata">

**Author:** [@rwr](https://discuss.elastic.co/u/rwr)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 4:59pm UTC](https://discuss.elastic.co/t/from-php-to-kibana/223243 "2020-03-12T16:59:47Z")

</div>

Hi everyone maybe this is a very strange question ... is there a way to implement the page from php to kibana ? thanks everyone

---

## [Apache status](https://discuss.elastic.co/t/apache-status/223228)

<div class="topic-metadata">

**Author:** [@mbrown009](https://discuss.elastic.co/u/mbrown009)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 4:56pm UTC](https://discuss.elastic.co/t/apache-status/223228 "2020-03-12T16:56:32Z")

</div>

what is the best way to convert the uptime from apache in x days, x hours, x minutes, x seconds? if the uptime is only 600 seconds then it should only say 10 minutes anyone have any suggestions?

---

## [Elasticsearch 3+ nodes set up on Windows Server 2016](https://discuss.elastic.co/t/elasticsearch-3-nodes-set-up-on-windows-server-2016/223380)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 0\
**Last updated:** [March 12, 2020, 4:34pm UTC](https://discuss.elastic.co/t/elasticsearch-3-nodes-set-up-on-windows-server-2016/223380 "2020-03-12T16:34:22Z")

</div>

I'm having trouble setting up 3+ nodes Elasticsearch cluster on Windows Server 2016. I was wondering if anyone has done this in the past and wondering if you could share your solution? I trying to use docker and creatin…

---

## [It has some problem when i build kibana 6.8](https://discuss.elastic.co/t/it-has-some-problem-when-i-build-kibana-6-8/222864)

<div class="topic-metadata">

**Author:** [@dforel](https://discuss.elastic.co/u/dforel)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 4:30pm UTC](https://discuss.elastic.co/t/it-has-some-problem-when-i-build-kibana-6-8/222864 "2020-03-12T16:30:00Z")

</div>

i use commond yarn build,when step to Cleaning client node\_modules bundled into the DLL it wrong on .\\kibana-6.8\\build\\kibana\\node\_modules\\x-pack\\package.json; the package.json is null, and the x-pack path is all none; …

---

## [Breakdown xml to nested object](https://discuss.elastic.co/t/breakdown-xml-to-nested-object/223379)

<div class="topic-metadata">

**Author:** [@crab86](https://discuss.elastic.co/u/crab86)\
**Replies:** 0\
**Last updated:** [March 12, 2020, 4:23pm UTC](https://discuss.elastic.co/t/breakdown-xml-to-nested-object/223379 "2020-03-12T16:23:32Z")

</div>

Hi, i am trying to break down PubMed Articles with Logstash, but i am not able to think of any filter suitable to break down the following xml structure. (Please also note that within the abstracttext xml element there …

---

## [Logstash json filter not sending to root of event](https://discuss.elastic.co/t/logstash-json-filter-not-sending-to-root-of-event/223332)

<div class="topic-metadata">

**Author:** [@Axl](https://discuss.elastic.co/u/Axl)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 4:03pm UTC](https://discuss.elastic.co/t/logstash-json-filter-not-sending-to-root-of-event/223332 "2020-03-12T16:03:03Z")

</div>

I see that my event has a field "message", and that field is a JSON object, with several values, e.g message: {"eventid":"cowrie.login.failed","username":"uno85",...}. I would like all subvalues of message to be put at …

---

## [Date field data type is timestamp in elasticsearch but string in Kibana](https://discuss.elastic.co/t/date-field-data-type-is-timestamp-in-elasticsearch-but-string-in-kibana/222934)

<div class="topic-metadata">

**Author:** [@ramypala](https://discuss.elastic.co/u/ramypala)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 3:55pm UTC](https://discuss.elastic.co/t/date-field-data-type-is-timestamp-in-elasticsearch-but-string-in-kibana/222934 "2020-03-12T15:55:48Z")

</div>

Hi Team, I tried to add a Date field as timestamp using date filter in Logstash. In Elastic search that date is loaded as timestamp but in Kibana it is still showing as string field.So I am not able to use that field in…

---

## [Change Kibana metrics infrastructure waffle color gradient & color scheme](https://discuss.elastic.co/t/change-kibana-metrics-infrastructure-waffle-color-gradient-color-scheme/222932)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 3:54pm UTC](https://discuss.elastic.co/t/change-kibana-metrics-infrastructure-waffle-color-gradient-color-scheme/222932 "2020-03-12T15:54:52Z")

</div>

Is there a way to change the waffle colors of the Metrics-\>Infrastructure page? Were looking for a green, yellow, red pattern. From a GitHub feature request thread it seems like this was available at one point, then re…

---

## [Page hits of a dashboard/visualization in Kibana](https://discuss.elastic.co/t/page-hits-of-a-dashboard-visualization-in-kibana/222904)

<div class="topic-metadata">

**Author:** [@geethusureshkrishna](https://discuss.elastic.co/u/geethusureshkrishna)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 3:52pm UTC](https://discuss.elastic.co/t/page-hits-of-a-dashboard-visualization-in-kibana/222904 "2020-03-12T15:52:15Z")

</div>

How to get the number of page hits of a particular dashboard/visualization in Kibana

---

## [Scripted field: Joining a groupped value into indice](https://discuss.elastic.co/t/scripted-field-joining-a-groupped-value-into-indice/222898)

<div class="topic-metadata">

**Author:** [@KTH](https://discuss.elastic.co/u/KTH)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 3:51pm UTC](https://discuss.elastic.co/t/scripted-field-joining-a-groupped-value-into-indice/222898 "2020-03-12T15:51:14Z")

</div>

Hi. I have a OrderItem-indice in Elasticsearch cluster, where this indice contains information on each ordered item. This indice has order timestamp, which I use for building up bar chart all ordered items count visuali…

---

## [Scale down production cluster](https://discuss.elastic.co/t/scale-down-production-cluster/223374)

<div class="topic-metadata">

**Author:** [@royal\_man](https://discuss.elastic.co/u/royal_man)\
**Replies:** 0\
**Last updated:** [March 12, 2020, 3:50pm UTC](https://discuss.elastic.co/t/scale-down-production-cluster/223374 "2020-03-12T15:50:36Z")

</div>

I want the opinion about scaling down elasticsearch. I have 2 shard cluster having 2 replicas (2P + 4R = 6shards) running on kubernetes. Now I want to remove replicas and corresponding nodes. I reduced kubernetes deploy…

---

## [Javascript to elasticsearch](https://discuss.elastic.co/t/javascript-to-elasticsearch/223373)

<div class="topic-metadata">

**Author:** [@Abhinav\_Gandhi](https://discuss.elastic.co/u/Abhinav_Gandhi)\
**Replies:** 0\
**Last updated:** [March 12, 2020, 3:47pm UTC](https://discuss.elastic.co/t/javascript-to-elasticsearch/223373 "2020-03-12T15:47:24Z")

</div>

I have a javascript AWS lambda which writes to my elastic search cluster. The problem i am facing is that all long values are truncated in javascript because of javascript parsing issues. When I parse this little piece …

---

## [No spaces match search criteria](https://discuss.elastic.co/t/no-spaces-match-search-criteria/222792)

<div class="topic-metadata">

**Author:** [@Be1](https://discuss.elastic.co/u/Be1)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 3:41pm UTC](https://discuss.elastic.co/t/no-spaces-match-search-criteria/222792 "2020-03-12T15:41:43Z")

</div>

Hi Experts, I have installed kibana.But when I open the url localhost:5601 I get the below issue: Select your space You can change your space at anytime No spaces match search criteria When i start the Kibana Servi…

---

## [In visualize i get a number and in disover i get another number , in the same index](https://discuss.elastic.co/t/in-visualize-i-get-a-number-and-in-disover-i-get-another-number-in-the-same-index/222754)

<div class="topic-metadata">

**Author:** [@samargh](https://discuss.elastic.co/u/samargh)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 3:37pm UTC](https://discuss.elastic.co/t/in-visualize-i-get-a-number-and-in-disover-i-get-another-number-in-the-same-index/222754 "2020-03-12T15:37:56Z")

</div>

i don't get what is wrong ? the same index shows diffrent results in discover and visualize

---

## [New scripted fields causes shards failed](https://discuss.elastic.co/t/new-scripted-fields-causes-shards-failed/222465)

<div class="topic-metadata">

**Author:** [@beam022](https://discuss.elastic.co/u/beam022)\
**Replies:** 3\
**Last updated:** [March 12, 2020, 3:35pm UTC](https://discuss.elastic.co/t/new-scripted-fields-causes-shards-failed/222465 "2020-03-12T15:35:06Z")

</div>

Hi, I've defined a new scripted field that extracts a substring based on a regex. Immediately after adding that field, I've been observing warning messages on our Kibana and it's impossible to look at any logs right now. …

---

## [Advice for a beginner: Substract two time evolutions](https://discuss.elastic.co/t/advice-for-a-beginner-substract-two-time-evolutions/222747)

<div class="topic-metadata">

**Author:** [@YC777](https://discuss.elastic.co/u/YC777)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 3:33pm UTC](https://discuss.elastic.co/t/advice-for-a-beginner-substract-two-time-evolutions/222747 "2020-03-12T15:33:09Z")

</div>

Hi ! I am fairly new to Elastic, I wish someone could give me some advice. I am building a dashboard and I want to create a vizualisation with two graphs showing a time evolution (cf attached picture), and I want to sub…

---

## [Kibana : how to show counts of one date only?](https://discuss.elastic.co/t/kibana-how-to-show-counts-of-one-date-only/222682)

<div class="topic-metadata">

**Author:** [@samargh](https://discuss.elastic.co/u/samargh)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 3:30pm UTC](https://discuss.elastic.co/t/kibana-how-to-show-counts-of-one-date-only/222682 "2020-03-12T15:30:40Z")

</div>

well i get a result from this but it shows the count of 2 days .. but i only need to show 1 day (exmpl : 2020-01-02) how can i do it ?? help

---

## [Kibana 7.6 tries to start and hangs](https://discuss.elastic.co/t/kibana-7-6-tries-to-start-and-hangs/221066)

<div class="topic-metadata">

**Author:** [@NanaRoland](https://discuss.elastic.co/u/NanaRoland)\
**Replies:** 10\
**Last updated:** [March 12, 2020, 3:20pm UTC](https://discuss.elastic.co/t/kibana-7-6-tries-to-start-and-hangs/221066 "2020-03-12T15:20:58Z")

</div>

Hello, i habe a fresh installation of logstash, elasticsearch and kibana. logstash and elasticsearch are running fine. kibana tries to start but hangs. Can anyone help me please. I'm using Suse Linux 64 Bit and openjd…

---

## [Convert date to string](https://discuss.elastic.co/t/convert-date-to-string/223232)

<div class="topic-metadata">

**Author:** [@hyhong](https://discuss.elastic.co/u/hyhong)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 3:20pm UTC](https://discuss.elastic.co/t/convert-date-to-string/223232 "2020-03-12T15:20:23Z")

</div>

Logstah version:7.4.0 When I used the follow command,it doesn't word: mutate{ convert =\> { "depDate"=\>"string" } } The depDate formate is '2020-03-12' or '-' or '2020-03-12/2020-03-18'

---

## [Kibana service cannot start. It is paused](https://discuss.elastic.co/t/kibana-service-cannot-start-it-is-paused/222648)

<div class="topic-metadata">

**Author:** [@acyli](https://discuss.elastic.co/u/acyli)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 3:19pm UTC](https://discuss.elastic.co/t/kibana-service-cannot-start-it-is-paused/222648 "2020-03-12T15:19:00Z")

</div>

Hi I have installed Kibana 7.6.0 as a service but the status is paused. I tried stopping it and running it again. I have also tried reinstalling it and old version (5.5.2). Still do not work. What to do? Regards Alex

---

## [Struggling to visualize histogram of max temperatures \[newbie\]](https://discuss.elastic.co/t/struggling-to-visualize-histogram-of-max-temperatures-newbie/222621)

<div class="topic-metadata">

**Author:** [@hevi](https://discuss.elastic.co/u/hevi)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 3:12pm UTC](https://discuss.elastic.co/t/struggling-to-visualize-histogram-of-max-temperatures-newbie/222621 "2020-03-12T15:12:54Z")

</div>

OK, to make a long story short, I'm trying to visualize the distribution of maximum temperatures a fleet of IoT devices see during each of their operating sessions and since I am a total newbie on both elastic and kibana…

---

## [Issues while using SQL queries with curl](https://discuss.elastic.co/t/issues-while-using-sql-queries-with-curl/223118)

<div class="topic-metadata">

**Author:** [@tarund](https://discuss.elastic.co/u/tarund)\
**Replies:** 5\
**Last updated:** [March 12, 2020, 3:10pm UTC](https://discuss.elastic.co/t/issues-while-using-sql-queries-with-curl/223118 "2020-03-12T15:10:42Z")

</div>

Hi there, I am trying to export data out of Elasticsearch into csv files using SQL queries through curl. Most of the basic queries work fine, but when I try to use LIKE operator or CASE WHEN operators, I get exceptions.…

---

## [Grock inception](https://discuss.elastic.co/t/grock-inception/223359)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 3\
**Last updated:** [March 12, 2020, 3:06pm UTC](https://discuss.elastic.co/t/grock-inception/223359 "2020-03-12T15:06:37Z")

</div>

Hi, it is posible to do a grok inside a groked field? This is mi log line: monitor:Something\_otherthing\_anotherthing the main grok grok { match =\> {"message" =\> "monitor:%{DATA:monitor}"} } result: Somethin…

---

## [How to include given documents to my query that DONT match?](https://discuss.elastic.co/t/how-to-include-given-documents-to-my-query-that-dont-match/223327)

<div class="topic-metadata">

**Author:** [@Bart\_de\_Man](https://discuss.elastic.co/u/Bart_de_Man)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 2:47pm UTC](https://discuss.elastic.co/t/how-to-include-given-documents-to-my-query-that-dont-match/223327 "2020-03-12T14:47:53Z")

</div>

How would I include documents to my result (given \_id's) when they DONT match the query? example query: { "query": { "bool": { "must": \[ { "term": { "purpose": { …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1575)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1577)
