# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1640 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1641 --- ## [Average of Serial Diff in kibana](https://discuss.elastic.co/t/average-of-serial-diff-in-kibana/217026)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 3\ **Last updated:** [February 7, 2020, 3:01pm UTC](https://discuss.elastic.co/t/average-of-serial-diff-in-kibana/217026 "2020-02-07T15:01:55Z")
Hello, Is there any way to show the average of Serial Diff in Kibana? I am trying to create a line graph using Serial Diff in Y axis but then I want to add another Y axis with average of Serial Diff. In kibana line gra… --- ## [How to search using only month and year (or only date) in date field?](https://discuss.elastic.co/t/how-to-search-using-only-month-and-year-or-only-date-in-date-field/218332)
**Author:** [@franzisk](https://discuss.elastic.co/u/franzisk)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 2:51pm UTC](https://discuss.elastic.co/t/how-to-search-using-only-month-and-year-or-only-date-in-date-field/218332 "2020-02-07T14:51:41Z")
Hi, I am using Spring Boot Elasticsearch and I have something like this: Optional\\> findByClienteIdAndDataEqualsAndLogLike(Integer id, String eventDate, String log, Pageable pageable); This eventDate has t… --- ## [Effient way to copy index](https://discuss.elastic.co/t/effient-way-to-copy-index/218365)
**Author:** [@bhushan\_badgujar](https://discuss.elastic.co/u/bhushan_badgujar)\ **Replies:** 0\ **Last updated:** [February 7, 2020, 2:47pm UTC](https://discuss.elastic.co/t/effient-way-to-copy-index/218365 "2020-02-07T14:47:45Z")
We have two index parent\_index child\_index My task is to create new\_child\_index with some fields from parent\_index. Parent Index =\> { "\_parent": { "type": "parent" }, "properties": { "id" : { "id" : "String" … --- ## [How to get rid of the dented weel of managemente on a read only user?](https://discuss.elastic.co/t/how-to-get-rid-of-the-dented-weel-of-managemente-on-a-read-only-user/218349)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 2:28pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-the-dented-weel-of-managemente-on-a-read-only-user/218349 "2020-02-07T14:28:40Z")
Hi I need to get rid of the dented weel on kibana, anyone knows where to disable it for a especific user? --- ## [Filebeat is running on two different systems with two different modules but no documents appear in filebeat indx](https://discuss.elastic.co/t/filebeat-is-running-on-two-different-systems-with-two-different-modules-but-no-documents-appear-in-filebeat-indx/218360)
**Author:** [@dsdameron](https://discuss.elastic.co/u/dsdameron)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 2:20pm UTC](https://discuss.elastic.co/t/filebeat-is-running-on-two-different-systems-with-two-different-modules-but-no-documents-appear-in-filebeat-indx/218360 "2020-02-07T14:20:27Z")
We have a filebeat with the panw module enabled collecting data from Palo Alto Firewalls.On a separate system, we have filebeat running with the system module enabled. The data is being received by elastic search but the… --- ## [Rename field winlog.event\_data.TargetUserName](https://discuss.elastic.co/t/rename-field-winlog-event-data-targetusername/218345)
**Author:** [@shortcommand](https://discuss.elastic.co/u/shortcommand)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 2:16pm UTC](https://discuss.elastic.co/t/rename-field-winlog-event-data-targetusername/218345 "2020-02-07T14:16:42Z")
Hi, I'm running ELK stack with winlogbeat and I would like to change the name of the field winlog.event\_data.TargetUserName. Currently I've put this in my logstash config: filter{ if \[winlog\]\[event\_data\]\[TargetUse… --- ## [Hover-box placement in visualisation at bottom of screen](https://discuss.elastic.co/t/hover-box-placement-in-visualisation-at-bottom-of-screen/218301)
**Author:** [@ahoffskov](https://discuss.elastic.co/u/ahoffskov)\ **Replies:** 3\ **Last updated:** [February 7, 2020, 2:15pm UTC](https://discuss.elastic.co/t/hover-box-placement-in-visualisation-at-bottom-of-screen/218301 "2020-02-07T14:15:40Z")
When viewing a trendline that is placed at the bottom of the page, the full info can not be viewed. Would it be possible to edit the placement given the position on the screen? ( I know this might not be an easy task). S… --- ## [Parsing nested JSON in logstash](https://discuss.elastic.co/t/parsing-nested-json-in-logstash/218306)
**Author:** [@Radha\_Krishna](https://discuss.elastic.co/u/Radha_Krishna)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 2:10pm UTC](https://discuss.elastic.co/t/parsing-nested-json-in-logstash/218306 "2020-02-07T14:10:12Z")
I'm facing an issue with indexing the following event in logstash. { "event\_id" : 132, "thread\_id" : 5664, "record\_number" : "1270538", "beat" : { "hostname" : "my\_host", "version" : "5.4.2", "name" : "events" } … --- ## [Custom Analyzer \[my\_analyzer\] failed to find tokenizer under name \[whitespace\]](https://discuss.elastic.co/t/custom-analyzer-my-analyzer-failed-to-find-tokenizer-under-name-whitespace/217743)
**Author:** [@amit.nema](https://discuss.elastic.co/u/amit.nema)\ **Replies:** 6\ **Last updated:** [February 7, 2020, 2:06pm UTC](https://discuss.elastic.co/t/custom-analyzer-my-analyzer-failed-to-find-tokenizer-under-name-whitespace/217743 "2020-02-07T14:06:23Z")
Hello Team, I'm using elasticsearch version 6.7.2. While testing with elasticsearch test framework, getting following error. java.lang.IllegalArgumentException: Custom Analyzer \[my\_analyzer\] failed to find tokenizer un… --- ## [Pagination of the elastic buckets with size, from and order by a timestamp field](https://discuss.elastic.co/t/pagination-of-the-elastic-buckets-with-size-from-and-order-by-a-timestamp-field/217803)
**Author:** [@shivamkrpandey](https://discuss.elastic.co/u/shivamkrpandey)\ **Replies:** 3\ **Last updated:** [February 7, 2020, 2:02pm UTC](https://discuss.elastic.co/t/pagination-of-the-elastic-buckets-with-size-from-and-order-by-a-timestamp-field/217803 "2020-02-07T14:02:20Z")
I want to paginate the buckets with "size" and "from" ordered by the "Timestamp" field. I have tried the bucket\_sort but it did not work as it expects another sibling aggregation and cannot aggregate on the Timestamp fie… --- ## [Encrypt Snapshots before sending to S3](https://discuss.elastic.co/t/encrypt-snapshots-before-sending-to-s3/218351)
**Author:** [@danieln](https://discuss.elastic.co/u/danieln)\ **Replies:** 3\ **Last updated:** [February 7, 2020, 1:59pm UTC](https://discuss.elastic.co/t/encrypt-snapshots-before-sending-to-s3/218351 "2020-02-07T13:59:18Z")
I wonder if there is any possibility to encrypt snapshots before uploading them to s3 via the repository plugin. According to the documentation only server\_side\_encryption seems to be possible, or am I missing something? … --- ## [Regex string from field value](https://discuss.elastic.co/t/regex-string-from-field-value/218298)
**Author:** [@ganchu](https://discuss.elastic.co/u/ganchu)\ **Replies:** 5\ **Last updated:** [February 7, 2020, 1:54pm UTC](https://discuss.elastic.co/t/regex-string-from-field-value/218298 "2020-02-07T13:54:01Z")
First query can find events included this string "registry\_key\_path" : """HKCR\\mscfile\\shell\\open\\command\\(Default)""" GET \_search { "query": { "query\_string": { "query": "(registry\_key\_path:/.\*mscfile.\*/)" } } }… --- ## [Qucikstart - fail to get API group resources and unable to crate controller manager](https://discuss.elastic.co/t/qucikstart-fail-to-get-api-group-resources-and-unable-to-crate-controller-manager/218198)
**Author:** [@Autumn](https://discuss.elastic.co/u/Autumn)\ **Replies:** 2\ **Last updated:** [February 7, 2020, 1:39pm UTC](https://discuss.elastic.co/t/qucikstart-fail-to-get-api-group-resources-and-unable-to-crate-controller-manager/218198 "2020-02-07T13:39:11Z")
Hi all! I'm trying to deploy the ECK following the quick start document. Running the Step 1: Install custom resource definitions and the operator with its RBAC rules: However, the logging show me that it fails to get AP… --- ## [Trying to apply a wildcard exclusion in the Query bar using Lucene](https://discuss.elastic.co/t/trying-to-apply-a-wildcard-exclusion-in-the-query-bar-using-lucene/218250)
**Author:** [@dleota](https://discuss.elastic.co/u/dleota)\ **Replies:** 2\ **Last updated:** [February 7, 2020, 1:13pm UTC](https://discuss.elastic.co/t/trying-to-apply-a-wildcard-exclusion-in-the-query-bar-using-lucene/218250 "2020-02-07T13:13:44Z")
Hello I am trying filter out the records where the field: "callCodeDesc" does not equal wildcard "NIVR" in the query bar for Lucene I entered: callCodeDesc: - NIVR (I have an asterisk before the "N" and after the "R"… --- ## [Closed index shard replication prior to Elasticsearch 7.2](https://discuss.elastic.co/t/closed-index-shard-replication-prior-to-elasticsearch-7-2/218337)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 3\ **Last updated:** [February 7, 2020, 1:08pm UTC](https://discuss.elastic.co/t/closed-index-shard-replication-prior-to-elasticsearch-7-2/218337 "2020-02-07T13:08:12Z")
Could someone clarify how replicas of closed index shards are handled prior to 7.2? I work with a cluster that's currently running Elasticsearch 6.8.6. I have always thought that closed index shards are replicated. I.e.… --- ## [Drop filter in logstash with filebeat pipelines](https://discuss.elastic.co/t/drop-filter-in-logstash-with-filebeat-pipelines/218309)
**Author:** [@old\_chocobo](https://discuss.elastic.co/u/old_chocobo)\ **Replies:** 2\ **Last updated:** [February 7, 2020, 12:24pm UTC](https://discuss.elastic.co/t/drop-filter-in-logstash-with-filebeat-pipelines/218309 "2020-02-07T12:24:00Z")
Hello, I have a Filebeat+Logstash+Elasticsearch stack, it is working nice. I am using Filebeat module pipelines in Elasticsearch because I want to use default Filebeat dashboards in Kibana. Now I need to drop some log … --- ## [How to connect mongodb query to logstash plugins](https://discuss.elastic.co/t/how-to-connect-mongodb-query-to-logstash-plugins/218329)
**Author:** [@saravana\_hariharan](https://discuss.elastic.co/u/saravana_hariharan)\ **Replies:** 0\ **Last updated:** [February 7, 2020, 11:10am UTC](https://discuss.elastic.co/t/how-to-connect-mongodb-query-to-logstash-plugins/218329 "2020-02-07T11:10:28Z")
Hi Friends, i am tried to connect mongodb plugins to logstash it worked fine but filters plugins cant be worked there i need some process in inside the filter plugins, can you share logstash code for mongodb statement… --- ## [Update data into a existing key](https://discuss.elastic.co/t/update-data-into-a-existing-key/218330)
**Author:** [@dkishore](https://discuss.elastic.co/u/dkishore)\ **Replies:** 0\ **Last updated:** [February 7, 2020, 11:14am UTC](https://discuss.elastic.co/t/update-data-into-a-existing-key/218330 "2020-02-07T11:14:01Z")
How can I update data in ES when we want to insert a huge amount of data for example- { appName:test, notes:test notes, bulkData:\[ { id:345345, name:test, data:\[ {temp:1},{temp;2} \] } \] } now I want to ad… --- ## [Help with logstash filter](https://discuss.elastic.co/t/help-with-logstash-filter/218154)
**Author:** [@ademir.andrade](https://discuss.elastic.co/u/ademir.andrade)\ **Replies:** 4\ **Last updated:** [February 7, 2020, 10:59am UTC](https://discuss.elastic.co/t/help-with-logstash-filter/218154 "2020-02-07T10:59:16Z")
Good morning, I would like a help to make a filter in the logstash, I do not want the logstash to process the one of a certain IP range, also including multicast and broadcast. I thank you for your help. --- ## [Filter with spaces and extra pattern](https://discuss.elastic.co/t/filter-with-spaces-and-extra-pattern/218162)
**Author:** [@Ben240489](https://discuss.elastic.co/u/Ben240489)\ **Replies:** 2\ **Last updated:** [February 7, 2020, 10:36am UTC](https://discuss.elastic.co/t/filter-with-spaces-and-extra-pattern/218162 "2020-02-07T10:36:48Z")
Hi guys, I have another parsing question :slight\_smile: My filebeat and logstash are working fine except for a problem in parsing a time in the format HH.MM.SS instead of the double point. My message currently looks l… --- ## [ServiceNow integration with Elasticsearch](https://discuss.elastic.co/t/servicenow-integration-with-elasticsearch/218095)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 9\ **Last updated:** [February 7, 2020, 10:31am UTC](https://discuss.elastic.co/t/servicenow-integration-with-elasticsearch/218095 "2020-02-07T10:31:34Z")
Hi, I have a setup of ELK Stack 7.5.1 to visualize/analyse different kind of logs in our environment. Now, I have a serviceNow of tool where we raise ticket. I want to integrate serviceNow with elasticsearch is there a… --- ## [Method getTotalHits() duplicated and not found at the same time?](https://discuss.elastic.co/t/method-gettotalhits-duplicated-and-not-found-at-the-same-time/217251)
**Author:** [@franzisk](https://discuss.elastic.co/u/franzisk)\ **Replies:** 6\ **Last updated:** [February 7, 2020, 10:27am UTC](https://discuss.elastic.co/t/method-gettotalhits-duplicated-and-not-found-at-the-same-time/217251 "2020-02-07T10:27:53Z")
Hi, I am using spring-boot-starter-elasticsearch and when I do query via repository I get this error saying the method getTotalHits() doesn't exist, at the same time shows on Eclipse console that there are 2 classes on … --- ## [Union query](https://discuss.elastic.co/t/union-query/218192)
**Author:** [@mehmetozalp](https://discuss.elastic.co/u/mehmetozalp)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 10:11am UTC](https://discuss.elastic.co/t/union-query/218192 "2020-02-07T10:11:52Z")
Hi can i do this query in elasticsearch? My elasticsearch is last version. Thank you. (SELECT \* FROM images where file\_id = 0) UNION (SELECT \* FROM images where file\_id \> 0 Group by image\_path,file\_id) LIMIT 20,2… --- ## [Thread pool configuration](https://discuss.elastic.co/t/thread-pool-configuration/215683)
**Author:** [@Abhishek\_Tiwari](https://discuss.elastic.co/u/Abhishek_Tiwari)\ **Replies:** 11\ **Last updated:** [February 7, 2020, 10:04am UTC](https://discuss.elastic.co/t/thread-pool-configuration/215683 "2020-02-07T10:04:50Z")
Hi , I am new in elastic search . here i want to know that how one should configure thread pool. My current configuration is following thread\_pool: search: size: 64 queue\_size: 500 min\_queue\_size: 10 max\_queue\_si… --- ## [Remote filebeat ingest pipeline working with logstash](https://discuss.elastic.co/t/remote-filebeat-ingest-pipeline-working-with-logstash/218289)
**Author:** [@mahboubeh](https://discuss.elastic.co/u/mahboubeh)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 10:01am UTC](https://discuss.elastic.co/t/remote-filebeat-ingest-pipeline-working-with-logstash/218289 "2020-02-07T10:01:59Z")
Hi i have installed logstash 7.4.1 in my vmware and elasticsearch 7.4.1 . besides that i have installed filebeat 7.4.1 in a remote machine and want to send logs with apache module pipeline into my logstash.then logstash… --- ## [Visualization : count every occurrence of every not null field](https://discuss.elastic.co/t/visualization-count-every-occurrence-of-every-not-null-field/215101)
**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\ **Replies:** 4\ **Last updated:** [February 7, 2020, 10:00am UTC](https://discuss.elastic.co/t/visualization-count-every-occurrence-of-every-not-null-field/215101 "2020-02-07T10:00:01Z")
Hello ! Is there a way to count the number of occurrences of each not null field in a visualization (a table seems appropriate to me) Kibana please? Thank you in advance and have a nice day ! --- ## [Grock filter](https://discuss.elastic.co/t/grock-filter/218308)
**Author:** [@kau0826](https://discuss.elastic.co/u/kau0826)\ **Replies:** 0\ **Last updated:** [February 7, 2020, 9:50am UTC](https://discuss.elastic.co/t/grock-filter/218308 "2020-02-07T09:50:57Z")
Hi Team, I have a logs as below and its currently view in kinaba, but i need to get logs from start and end point. as a example in below logs i need to get logs between "API CALL" to "API CALL END" in kibana. could y… --- ## [Plugin OwnHome on Kibana 7.5](https://discuss.elastic.co/t/plugin-ownhome-on-kibana-7-5/217839)
**Author:** [@pchakour](https://discuss.elastic.co/u/pchakour)\ **Replies:** 2\ **Last updated:** [February 7, 2020, 9:45am UTC](https://discuss.elastic.co/t/plugin-ownhome-on-kibana-7-5/217839 "2020-02-07T09:45:47Z")
Hello guys ! I'm working on the migration of OwnHome on Kibana 7.5.0 and I've a little issue. OwnHome is similar to the x-pack spaces mecanism, to isolate Kibana index in different spaces, the plugin set up a proxy bet… --- ## [Logstash default document type from logs to doc](https://discuss.elastic.co/t/logstash-default-document-type-from-logs-to-doc/217998)
**Author:** [@alessandro](https://discuss.elastic.co/u/alessandro)\ **Replies:** 2\ **Last updated:** [February 6, 2020, 3:26pm UTC](https://discuss.elastic.co/t/logstash-default-document-type-from-logs-to-doc/217998 "2020-02-06T15:26:08Z")
Hi forum, I would like to ask an advice for a smooth transition from Logstash version 5.6.4 to 6.8.6, given that I have recently updated succesfully both Elasticsearch and Kibana. My main doubts are about the breaking … --- ## [Setting : username / password / new logo for kibana](https://discuss.elastic.co/t/setting-username-password-new-logo-for-kibana/218244)
**Author:** [@boucha26](https://discuss.elastic.co/u/boucha26)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 8:36am UTC](https://discuss.elastic.co/t/setting-username-password-new-logo-for-kibana/218244 "2020-02-07T08:36:11Z")
hey there , i'm using elastic. 7.5.2 and i want to set a user name and password and change the logo of kibana any help! [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1639) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1641)