# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1642

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1643

---

## [Запрет релоцирования определённых индексов](https://discuss.elastic.co/t/topic/217426)

<div class="topic-metadata">

**Author:** [@111229](https://discuss.elastic.co/u/111229)\
**Replies:** 6\
**Last updated:** [February 6, 2020, 7:04pm UTC](https://discuss.elastic.co/t/topic/217426 "2020-02-06T19:04:36Z")

</div>

Коллеги, добрый вечер! У нас кластер из 8-дата-нод. Есть задача добавить ещё 2 дата- ноды и перенести туда только определённые индексы, которые располагаются на 8 дата-нодах (шардирование 8). Также нужно создать прави…

---

## [Logstash xml plugin not working](https://discuss.elastic.co/t/logstash-xml-plugin-not-working/217772)

<div class="topic-metadata">

**Author:** [@muireann](https://discuss.elastic.co/u/muireann)\
**Replies:** 3\
**Last updated:** [February 6, 2020, 6:12pm UTC](https://discuss.elastic.co/t/logstash-xml-plugin-not-working/217772 "2020-02-06T18:12:08Z")

</div>

hello, I'm trying to use the below logstash config to read from an xml file. The xml is being read into logstash as I can see the different lines from the xml printed in the "message" in the console when I run logstash. …

---

## [What is the equivalent of grock parse failure for a ruby script](https://discuss.elastic.co/t/what-is-the-equivalent-of-grock-parse-failure-for-a-ruby-script/218178)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 5:10pm UTC](https://discuss.elastic.co/t/what-is-the-equivalent-of-grock-parse-failure-for-a-ruby-script/218178 "2020-02-06T17:10:47Z")

</div>

Hi I want to make shure that what I send to logstash doesnt contain errors so I wan to add something similar to grokparse failure , but for ruby. output { if "\_grokparsefailure" not in \[tags\] { …

---

## [Unable to load large set of records from a table in Servicenow into Elasticsearch using Logstash](https://discuss.elastic.co/t/unable-to-load-large-set-of-records-from-a-table-in-servicenow-into-elasticsearch-using-logstash/218085)

<div class="topic-metadata">

**Author:** [@ramypala](https://discuss.elastic.co/u/ramypala)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 5:00pm UTC](https://discuss.elastic.co/t/unable-to-load-large-set-of-records-from-a-table-in-servicenow-into-elasticsearch-using-logstash/218085 "2020-02-06T17:00:31Z")

</div>

Hi Team, I am trying to load Servicenow tables in Elasticsearch using Logstash HTTP Poller Plugin.I am able to load a table with 42 records into Elasticsearch index without any issue.But when I tried to load a table wit…

---

## [Removing the old reports](https://discuss.elastic.co/t/removing-the-old-reports/215021)

<div class="topic-metadata">

**Author:** [@emnioj](https://discuss.elastic.co/u/emnioj)\
**Replies:** 2\
**Last updated:** [February 6, 2020, 4:58pm UTC](https://discuss.elastic.co/t/removing-the-old-reports/215021 "2020-02-06T16:58:48Z")

</div>

Hi Team, i have created so many reports and now would like to delete the old reports. Since i can not find any tab existing to deleting the old reports. Is there any way we could delete the reports only? all these ar…

---

## [Does an ES sizing calculator exist?](https://discuss.elastic.co/t/does-an-es-sizing-calculator-exist/218218)

<div class="topic-metadata">

**Author:** [@F\_eq\_kx](https://discuss.elastic.co/u/F_eq_kx)\
**Replies:** 0\
**Last updated:** [February 6, 2020, 4:35pm UTC](https://discuss.elastic.co/t/does-an-es-sizing-calculator-exist/218218 "2020-02-06T16:35:52Z")

</div>

Since I haven't found any, I'm considering making a CLI tool / library where you can enter some info about what you'll be using ES for and it can give you a recommended config. Do you think this would be useful?

---

## [Index.mapping.total\_fields.limit is important only for query operations?](https://discuss.elastic.co/t/index-mapping-total-fields-limit-is-important-only-for-query-operations/218217)

<div class="topic-metadata">

**Author:** [@111287](https://discuss.elastic.co/u/111287)\
**Replies:** 0\
**Last updated:** [February 6, 2020, 4:25pm UTC](https://discuss.elastic.co/t/index-mapping-total-fields-limit-is-important-only-for-query-operations/218217 "2020-02-06T16:25:51Z")

</div>

Hello, On next page I fount interesting statement regarding mapping total fields limit settings: index.mapping.total\_fields.limit The maximum number of fields in an index. Field and object mappings, as well as field…

---

## [Elastic Cloud with Synonyms](https://discuss.elastic.co/t/elastic-cloud-with-synonyms/218213)

<div class="topic-metadata">

**Author:** [@Lone\_Eagle](https://discuss.elastic.co/u/Lone_Eagle)\
**Replies:** 0\
**Last updated:** [February 6, 2020, 3:45pm UTC](https://discuss.elastic.co/t/elastic-cloud-with-synonyms/218213 "2020-02-06T15:45:46Z")

</div>

Hi, How do I use synonyms with Elastic Cloud as I can not use a text file? I want something that is expandable (change the list) and if possible, no re-indexing. I found an example to create a new index with synonyms …

---

## [Impossible de définir mon field comme un geo\_point](https://discuss.elastic.co/t/impossible-de-definir-mon-field-comme-un-geo-point/216703)

<div class="topic-metadata">

**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\
**Replies:** 29\
**Last updated:** [February 6, 2020, 3:53pm UTC](https://discuss.elastic.co/t/impossible-de-definir-mon-field-comme-un-geo-point/216703 "2020-02-06T15:53:16Z")

</div>

Bonjour, Je vais d'abord expliquer le contexte. Je développe un outil pour analyser différent type de logs et en tirer le maximum d'information. J'utilise filebeat, logstash, elactic et kibana pour la partie traitement/…

---

## [Deviation of 20% or more of the average value](https://discuss.elastic.co/t/deviation-of-20-or-more-of-the-average-value/214768)

<div class="topic-metadata">

**Author:** [@tamjid](https://discuss.elastic.co/u/tamjid)\
**Replies:** 2\
**Last updated:** [February 6, 2020, 3:44pm UTC](https://discuss.elastic.co/t/deviation-of-20-or-more-of-the-average-value/214768 "2020-02-06T15:44:38Z")

</div>

ES and Kibana version: 6.8 I have some document in an index like (only showing \_source field for simplicity): { "name": "unique1", "amount": 200 }, { "name": "unique1", "amount": 100 }, { "name": …

---

## [Module not found: Error: Can't resolve 'plugins/\*/hack'](https://discuss.elastic.co/t/module-not-found-error-cant-resolve-plugins-hack/218014)

<div class="topic-metadata">

**Author:** [@Marina\_Grechuhin](https://discuss.elastic.co/u/Marina_Grechuhin)\
**Replies:** 3\
**Last updated:** [February 6, 2020, 3:38pm UTC](https://discuss.elastic.co/t/module-not-found-error-cant-resolve-plugins-hack/218014 "2020-02-06T15:38:59Z")

</div>

I'm generating a plugin code using: node scripts/generate\_plugin marina-test with only hacks enabled. And I keep getting the following error: Module not found: Error: Can't resolve 'plugins/marina\_test/hack' in '/kib…

---

## [Search within 2 index where 'not in'](https://discuss.elastic.co/t/search-within-2-index-where-not-in/215012)

<div class="topic-metadata">

**Author:** [@pbc3199](https://discuss.elastic.co/u/pbc3199)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 3:33pm UTC](https://discuss.elastic.co/t/search-within-2-index-where-not-in/215012 "2020-02-06T15:33:50Z")

</div>

I have 2 index in elasticsearch, trxtxn ( transaction ) and trxrsp ( response ) Both index have same unique id call header.serialnum. Is it possible to display document only for trxtxn which not in trxrsp? So, I can…

---

## [Zoom out](https://discuss.elastic.co/t/zoom-out/214996)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 3:31pm UTC](https://discuss.elastic.co/t/zoom-out/214996 "2020-02-06T15:31:04Z")

</div>

Hi! I did zoom in at a histogram but there is no way to zoom out except pressing back botton. Is there any other way to zoom out that I am missing? Also when you zoom in in a visualization of an iframe there is no way…

---

## [Failed to authenticate user when starting kibana service](https://discuss.elastic.co/t/failed-to-authenticate-user-when-starting-kibana-service/214984)

<div class="topic-metadata">

**Author:** [@Tennis](https://discuss.elastic.co/u/Tennis)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 3:24pm UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-when-starting-kibana-service/214984 "2020-02-06T15:24:39Z")

</div>

My Kibana version 7.5.1 and it seems that x-pack is a default setting. I added the configuration following in elasticsearch.yml: xpack.security.enabled: true xpack.security.transport.ssl.enabled: true In kibana.yml …

---

## [How to not display group by field](https://discuss.elastic.co/t/how-to-not-display-group-by-field/214934)

<div class="topic-metadata">

**Author:** [@reyhanadp](https://discuss.elastic.co/u/reyhanadp)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 3:24pm UTC](https://discuss.elastic.co/t/how-to-not-display-group-by-field/214934 "2020-02-06T15:24:13Z")

</div>

I have the following data: I want to display data group by jobId and display the latest processName and message based on jobId. but jobId doesn't need to be displayed. I have successfully displayed processName and me…

---

## [Auto Auth for kibana visualization using Nginx not working](https://discuss.elastic.co/t/auto-auth-for-kibana-visualization-using-nginx-not-working/215001)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 3:23pm UTC](https://discuss.elastic.co/t/auto-auth-for-kibana-visualization-using-nginx-not-working/215001 "2020-02-06T15:23:37Z")

</div>

Hi im trying to use nginx to auto authenticate in kibana shared visualizations and it isnt working. Im on a centos 8, installed nginx, installed httpd-tools ,I create a folder called: sites-available, with a filed calle…

---

## [How to give higher score to exact searches than phonetic ones in Elasticsearch?](https://discuss.elastic.co/t/how-to-give-higher-score-to-exact-searches-than-phonetic-ones-in-elasticsearch/218197)

<div class="topic-metadata">

**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\
**Replies:** 2\
**Last updated:** [February 6, 2020, 2:56pm UTC](https://discuss.elastic.co/t/how-to-give-higher-score-to-exact-searches-than-phonetic-ones-in-elasticsearch/218197 "2020-02-06T14:56:47Z")

</div>

I am currenty using Elasticsearch's phonetic analyzer. I want the query to give higher score to exact matches then phonetic ones. Here is the query I am using: { "query": { "multi\_match" : { "que…

---

## [How can I solve Root mapping definition has unsupported parameters by using nested property for created elasticsearch index?](https://discuss.elastic.co/t/how-can-i-solve-root-mapping-definition-has-unsupported-parameters-by-using-nested-property-for-created-elasticsearch-index/218200)

<div class="topic-metadata">

**Author:** [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\
**Replies:** 0\
**Last updated:** [February 6, 2020, 2:48pm UTC](https://discuss.elastic.co/t/how-can-i-solve-root-mapping-definition-has-unsupported-parameters-by-using-nested-property-for-created-elasticsearch-index/218200 "2020-02-06T14:48:26Z")

</div>

How can I create a mapping structure by using nested property for created index? I got an error below. This url produces below result: http://xxx:9200/usereventsreduced-2020/event/\_search?pretty=true UrlQueryString is …

---

## [Logstash processing order of S3 Buckets](https://discuss.elastic.co/t/logstash-processing-order-of-s3-buckets/218199)

<div class="topic-metadata">

**Author:** [@Reid\_Loper](https://discuss.elastic.co/u/Reid_Loper)\
**Replies:** 0\
**Last updated:** [February 6, 2020, 2:40pm UTC](https://discuss.elastic.co/t/logstash-processing-order-of-s3-buckets/218199 "2020-02-06T14:40:25Z")

</div>

I'm architecting a solution where Logstash will process files in an Amazon S3 bucket from multiple sources. Common sense would tell me that Logstash will process these files in a first in, first out order based on the t…

---

## [Pipeline throttle not working properly](https://discuss.elastic.co/t/pipeline-throttle-not-working-properly/218193)

<div class="topic-metadata">

**Author:** [@Henrique\_Gossi](https://discuss.elastic.co/u/Henrique_Gossi)\
**Replies:** 0\
**Last updated:** [February 6, 2020, 2:22pm UTC](https://discuss.elastic.co/t/pipeline-throttle-not-working-properly/218193 "2020-02-06T14:22:49Z")

</div>

Using throttle filter, same events get the tag "throttled" and some others don't. follow the content from throttle conf file: filter { throttle { before\_count =\> -1 after\_count =\> 1 period =\> "86400" # 1 …

---

## [Management thread pool gone in 7.5?](https://discuss.elastic.co/t/management-thread-pool-gone-in-7-5/217838)

<div class="topic-metadata">

**Author:** [@Doc\_Kaos](https://discuss.elastic.co/u/Doc_Kaos)\
**Replies:** 2\
**Last updated:** [February 6, 2020, 2:21pm UTC](https://discuss.elastic.co/t/management-thread-pool-gone-in-7-5/217838 "2020-02-06T14:21:40Z")

</div>

We are having issues with 7.4.1 and the data nodes getting backlogs on the management threadpool and then all cluster communication stops. Then just noticed that in the documentation https://www.elastic.co/guide/en/elast…

---

## [Kibana will not start behind reverse proxy with X-Content-Type-Options: nosniff](https://discuss.elastic.co/t/kibana-will-not-start-behind-reverse-proxy-with-x-content-type-options-nosniff/214438)

<div class="topic-metadata">

**Author:** [@WillemvdW](https://discuss.elastic.co/u/WillemvdW)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 2:21pm UTC](https://discuss.elastic.co/t/kibana-will-not-start-behind-reverse-proxy-with-x-content-type-options-nosniff/214438 "2020-02-06T14:21:19Z")

</div>

We have an urgent problem in moving Kibana to a production environment where the proxy adds X-Content-Type-Options: nosniff to the response headers. If we run the kibana instance directly to bypass the proxy environment…

---

## [Device Uptime Metric Visualization](https://discuss.elastic.co/t/device-uptime-metric-visualization/214651)

<div class="topic-metadata">

**Author:** [@joaoantoniopereira2](https://discuss.elastic.co/u/joaoantoniopereira2)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 2:14pm UTC](https://discuss.elastic.co/t/device-uptime-metric-visualization/214651 "2020-02-06T14:14:48Z")

</div>

Hi! I am doing some dashboards for an iot device. The entries count for the respective index is diplayed in the following visual: Can we create a percentage metric for the uptime of this device considering any selec…

---

## [Modify internal request response in Kibana](https://discuss.elastic.co/t/modify-internal-request-response-in-kibana/214446)

<div class="topic-metadata">

**Author:** [@arseni-lipinski](https://discuss.elastic.co/u/arseni-lipinski)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 2:12pm UTC](https://discuss.elastic.co/t/modify-internal-request-response-in-kibana/214446 "2020-02-06T14:12:12Z")

</div>

Hello I'm working on a Kibana plugin and the question I have is: is it possible to modify the internal request's response in Kibana, when loading the Discover page. The thing I'm trying to achieve is modifying response…

---

## [New Error Dashboard / Watcher Creation](https://discuss.elastic.co/t/new-error-dashboard-watcher-creation/218189)

<div class="topic-metadata">

**Author:** [@Bhaskar1](https://discuss.elastic.co/u/Bhaskar1)\
**Replies:** 0\
**Last updated:** [February 6, 2020, 2:01pm UTC](https://discuss.elastic.co/t/new-error-dashboard-watcher-creation/218189 "2020-02-06T14:01:32Z")

</div>

Hello All, Can you please help me how to create a watcher or dashboard for new error detection that is like, i would like to run a watcher and it should generate the error where that error doesn't occured in previous(7/…

---

## [Counting unique values in y axis of a line/bar visualization](https://discuss.elastic.co/t/counting-unique-values-in-y-axis-of-a-line-bar-visualization/215272)

<div class="topic-metadata">

**Author:** [@Omer\_Botenski](https://discuss.elastic.co/u/Omer_Botenski)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 1:49pm UTC](https://discuss.elastic.co/t/counting-unique-values-in-y-axis-of-a-line-bar-visualization/215272 "2020-02-06T13:49:15Z")

</div>

Hi there! I'm trying to create a line/bar visualization based upon a query which returns all tests I run on my system. The main goal is to show a count of unique test titles on the Y axis (since some tests run several t…

---

## [Filter Plugins Are not working for Mongodb input](https://discuss.elastic.co/t/filter-plugins-are-not-working-for-mongodb-input/218185)

<div class="topic-metadata">

**Author:** [@saravana\_hariharan](https://discuss.elastic.co/u/saravana_hariharan)\
**Replies:** 0\
**Last updated:** [February 6, 2020, 1:36pm UTC](https://discuss.elastic.co/t/filter-plugins-are-not-working-for-mongodb-input/218185 "2020-02-06T13:36:13Z")

</div>

Hi i have used mutate filter ,it does work for oracle sql input , but its not working for mongodb input.please help.

---

## [How to simulate X-Opaque-Id semantics in Elasticsearch 5.3](https://discuss.elastic.co/t/how-to-simulate-x-opaque-id-semantics-in-elasticsearch-5-3/217710)

<div class="topic-metadata">

**Author:** [@btiernay-o](https://discuss.elastic.co/u/btiernay-o)\
**Replies:** 3\
**Last updated:** [February 6, 2020, 1:34pm UTC](https://discuss.elastic.co/t/how-to-simulate-x-opaque-id-semantics-in-elasticsearch-5-3/217710 "2020-02-06T13:34:44Z")

</div>

Are there any known ways to simulate the newer X-Opaque-Id semantics for /\_search requests in older versions of Elasticsearch (specifically 5.3.x)? One approach I considered is co-opting the \_name field as described in h…

---

## [Search text occurring priority](https://discuss.elastic.co/t/search-text-occurring-priority/217783)

<div class="topic-metadata">

**Author:** [@Yash\_Thakkar](https://discuss.elastic.co/u/Yash_Thakkar)\
**Replies:** 1\
**Last updated:** [February 6, 2020, 1:22pm UTC](https://discuss.elastic.co/t/search-text-occurring-priority/217783 "2020-02-06T13:22:01Z")

</div>

We want to show results based on word position. e.g. Let's say we have below data in elasticsearch. \[ { "name": "ANNUALS ASSORTED", "code": 3896, "color": "", "species": "ANNUALS" }, { …

---

## [Translate filter trouble](https://discuss.elastic.co/t/translate-filter-trouble/218007)

<div class="topic-metadata">

**Author:** [@raged](https://discuss.elastic.co/u/raged)\
**Replies:** 2\
**Last updated:** [February 6, 2020, 1:05pm UTC](https://discuss.elastic.co/t/translate-filter-trouble/218007 "2020-02-06T13:05:10Z")

</div>

Hello, I am attempting to utilize a pipeline that is for populating a json yml that looks like this: {"name":"PCNAME","collectionname":"Early Adopters - Ring 2 - Office","resourceid":16778707,"@version":"1","@timestamp…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1641)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1643)
