# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1689 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1690 --- ## [How to sum field?](https://discuss.elastic.co/t/how-to-sum-field/214471)
**Author:** [@ja123](https://discuss.elastic.co/u/ja123)\ **Replies:** 4\ **Last updated:** [January 10, 2020, 11:21pm UTC](https://discuss.elastic.co/t/how-to-sum-field/214471 "2020-01-10T23:21:50Z")
I've got many docs in elasticsearch and I want to sum the field Verspätung by the field Linie. When I say Kibana to sum the Verspätung , it sums all Verspätung fields of result. So I got following : Linie Sum… --- ## [Grok filter for log files in logstash](https://discuss.elastic.co/t/grok-filter-for-log-files-in-logstash/213377)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 13\ **Last updated:** [January 10, 2020, 7:30pm UTC](https://discuss.elastic.co/t/grok-filter-for-log-files-in-logstash/213377 "2020-01-10T19:30:35Z")
input { beats { port =\> 5044 } } filter { if\[log\_type\] =="access"{ grok { match =\> {"message" =\> "%{COMBINEDAPACHELOG}"} } else if \[log\_type\] == "errors" { grok { match =\> { "messa… --- ## [Date filter dateparsefailure](https://discuss.elastic.co/t/date-filter-dateparsefailure/214668)
**Author:** [@DevOP](https://discuss.elastic.co/u/DevOP)\ **Replies:** 1\ **Last updated:** [January 10, 2020, 9:21pm UTC](https://discuss.elastic.co/t/date-filter-dateparsefailure/214668 "2020-01-10T21:21:30Z")
Hello... I've been experimenting with logstash capabilities lately, and no matter which direction I take with the date filter, I seem to end up with \_dateparsefailure. So to save myself the frustration, I was wondering … --- ## [Is there any way to see what caused a change in Template settings?](https://discuss.elastic.co/t/is-there-any-way-to-see-what-caused-a-change-in-template-settings/214503)
**Author:** [@cwilliams](https://discuss.elastic.co/u/cwilliams)\ **Replies:** 2\ **Last updated:** [January 10, 2020, 9:22pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-see-what-caused-a-change-in-template-settings/214503 "2020-01-10T21:22:55Z")
I have a 4-node cluster running version 5.6.6 where a template setting accidentally got changed and I am wondering if there are any logs, etc. that I can use to identify what happened. The specific change was the number\_… --- ## [A typical case of SQL relation: aggregating results from jdbc input plugin (nested)](https://discuss.elastic.co/t/a-typical-case-of-sql-relation-aggregating-results-from-jdbc-input-plugin-nested/214597)
**Author:** [@Ahmed\_Ahmed](https://discuss.elastic.co/u/Ahmed_Ahmed)\ **Replies:** 5\ **Last updated:** [January 10, 2020, 9:22pm UTC](https://discuss.elastic.co/t/a-typical-case-of-sql-relation-aggregating-results-from-jdbc-input-plugin-nested/214597 "2020-01-10T21:22:53Z")
I would like to ask With reference to the following where there is a parent-child relation is pipelined Logstash aggregate-example4 I wonder how to achieve a scenario where event elements have a hierarchal relationship… --- ## [Regex in filter plugin not working](https://discuss.elastic.co/t/regex-in-filter-plugin-not-working/214641)
**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\ **Replies:** 7\ **Last updated:** [January 10, 2020, 9:22pm UTC](https://discuss.elastic.co/t/regex-in-filter-plugin-not-working/214641 "2020-01-10T21:22:23Z")
Hello, I'm trying to tag one host by using syslog5424\_host but it's not matching anything. First, can I tag syslog5424\_host? if yes can I use it directly in the output section and forward it to the destination instead … --- ## [Index lifecyle policy doesn't rollover the index automatically](https://discuss.elastic.co/t/index-lifecyle-policy-doesnt-rollover-the-index-automatically/214511)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 1\ **Last updated:** [January 10, 2020, 9:08pm UTC](https://discuss.elastic.co/t/index-lifecyle-policy-doesnt-rollover-the-index-automatically/214511 "2020-01-10T21:08:47Z")
Objective: Write a Logstash configuration that receives logs and sends it to an index using an ILM policy, and rolls over an index after a certain threshold (max 10 documents). Below is my Logstash configuration for th… --- ## [Visualizing Terms In A Field](https://discuss.elastic.co/t/visualizing-terms-in-a-field/214648)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 3\ **Last updated:** [January 10, 2020, 9:06pm UTC](https://discuss.elastic.co/t/visualizing-terms-in-a-field/214648 "2020-01-10T21:06:21Z")
I remember doing this once upon a time but can't figure it out anymore.... I have a field that is stored as both text and keyword. I would like to aggregate and visualize on a table the frequency of terms within the fi… --- ## [Access to user only to view and create dashboard](https://discuss.elastic.co/t/access-to-user-only-to-view-and-create-dashboard/214351)
**Author:** [@Praveen\_Yallala](https://discuss.elastic.co/u/Praveen_Yallala)\ **Replies:** 1\ **Last updated:** [January 10, 2020, 8:10pm UTC](https://discuss.elastic.co/t/access-to-user-only-to-view-and-create-dashboard/214351 "2020-01-10T20:10:10Z")
Hi, I want to create a role where user should be only able to see dashboards tab, create new dashboards and also share option should be visible. I am using Kibana V6.8.4 in RHEL 7. How to do that? Please help. Regard… --- ## [Not all geo points are shown in Kibana Maps](https://discuss.elastic.co/t/not-all-geo-points-are-shown-in-kibana-maps/214549)
**Author:** [@johnny1](https://discuss.elastic.co/u/johnny1)\ **Replies:** 1\ **Last updated:** [January 10, 2020, 8:04pm UTC](https://discuss.elastic.co/t/not-all-geo-points-are-shown-in-kibana-maps/214549 "2020-01-10T20:04:14Z")
Hello, I want to show about 30000 geo points in Kibana Maps but unfortunately the results are limited to first 10000 documents. How can I increase the size and display all points in Maps? Thanks --- ## [PKI Auth on Elasticsearch Service](https://discuss.elastic.co/t/pki-auth-on-elasticsearch-service/214332)
**Author:** [@Arthur\_Spector](https://discuss.elastic.co/u/Arthur_Spector)\ **Replies:** 1\ **Last updated:** [January 10, 2020, 8:02pm UTC](https://discuss.elastic.co/t/pki-auth-on-elasticsearch-service/214332 "2020-01-10T20:02:36Z")
It is well documented that Elasticsearch can be configured to authenticate users via PKI authentication but can this be configured for deployments on Elastic Cloud? This page references three auth providers, none of whi… --- ## [Remove reporting csv from elasticsearch](https://discuss.elastic.co/t/remove-reporting-csv-from-elasticsearch/214643)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [January 10, 2020, 7:58pm UTC](https://discuss.elastic.co/t/remove-reporting-csv-from-elasticsearch/214643 "2020-01-10T19:58:31Z")
I want to remove saved report that is basically when I run a report it saves in to somewhere. I don't want that after I download. how do I remove it management-reporting has no option about delete --- ## [Create two different index pattern for a single index for time filter](https://discuss.elastic.co/t/create-two-different-index-pattern-for-a-single-index-for-time-filter/214501)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [January 10, 2020, 7:53pm UTC](https://discuss.elastic.co/t/create-two-different-index-pattern-for-a-single-index-for-time-filter/214501 "2020-01-10T19:53:04Z")
I have a index-2019 which has two date field, and they are different date/time then each other. I have a requirement to use both date for different graph is it possible to create two different index pattern with two s… --- ## [Data migration from cluster A to cluster B](https://discuss.elastic.co/t/data-migration-from-cluster-a-to-cluster-b/214653)
**Author:** [@Autrui](https://discuss.elastic.co/u/Autrui)\ **Replies:** 0\ **Last updated:** [January 10, 2020, 7:08pm UTC](https://discuss.elastic.co/t/data-migration-from-cluster-a-to-cluster-b/214653 "2020-01-10T19:08:49Z")
Hi, I'm trying to migrate all my data from cluster A to cluster B. I'm using Filebeat, Elastic and Kibana version 7.5. Currently, I made some snapshots in a shared repository from cluster A, and restored it in my clust… --- ## [EDIT query as DSL in Kibana](https://discuss.elastic.co/t/edit-query-as-dsl-in-kibana/214541)
**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\ **Replies:** 1\ **Last updated:** [January 10, 2020, 6:51pm UTC](https://discuss.elastic.co/t/edit-query-as-dsl-in-kibana/214541 "2020-01-10T18:51:14Z")
Hi i want to write queries directly in DSL to add filters in kibana vizualisations. for eg below screen shot talks about a query which is phrase type. i achieved this by just creating one filter using the default opti… --- ## [How to sent my system logs to remote kibana host using ssh](https://discuss.elastic.co/t/how-to-sent-my-system-logs-to-remote-kibana-host-using-ssh/214527)
**Author:** [@SELVA\_VIGNESH](https://discuss.elastic.co/u/SELVA_VIGNESH)\ **Replies:** 1\ **Last updated:** [January 10, 2020, 6:47pm UTC](https://discuss.elastic.co/t/how-to-sent-my-system-logs-to-remote-kibana-host-using-ssh/214527 "2020-01-10T18:47:51Z")
My configuration yml files are here:https://github.com/Selvahere/ELK.git. --- ## [Source Filtering for all index patterns](https://discuss.elastic.co/t/source-filtering-for-all-index-patterns/214628)
**Author:** [@lantern77](https://discuss.elastic.co/u/lantern77)\ **Replies:** 4\ **Last updated:** [January 10, 2020, 6:41pm UTC](https://discuss.elastic.co/t/source-filtering-for-all-index-patterns/214628 "2020-01-10T18:41:23Z")
Hello, So we have a very large nested field that contains alot of objects, and on the "discover" page for kibana whenever it appears, the application crashes. I am aware that source filtering exists for index patterns h… --- ## [Individual default route for different spaces](https://discuss.elastic.co/t/individual-default-route-for-different-spaces/214506)
**Author:** [@Matthias\_Seidl](https://discuss.elastic.co/u/Matthias_Seidl)\ **Replies:** 2\ **Last updated:** [January 10, 2020, 6:37pm UTC](https://discuss.elastic.co/t/individual-default-route-for-different-spaces/214506 "2020-01-10T18:37:53Z")
Hi, my understanding of the 7.5 release of Kibana is that I can set a different default route for each space. How can I do that? I only see that default route setting in the advanced settings and they only apply to my d… --- ## [Is it possible to set advanced settings for user with admin user](https://discuss.elastic.co/t/is-it-possible-to-set-advanced-settings-for-user-with-admin-user/214460)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 3\ **Last updated:** [January 10, 2020, 6:34pm UTC](https://discuss.elastic.co/t/is-it-possible-to-set-advanced-settings-for-user-with-admin-user/214460 "2020-01-10T18:34:30Z")
HI, i have created users, roles and spaces in kibana, and those users are not able to set or view advanced settings, but i'd like to set for them defaultRoute. Is it possible to set that setting for a user without being … --- ## [Process.binding is not supported when running kibana 7.5.1 with custom plugin deployed](https://discuss.elastic.co/t/process-binding-is-not-supported-when-running-kibana-7-5-1-with-custom-plugin-deployed/213699)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 4\ **Last updated:** [January 10, 2020, 6:31pm UTC](https://discuss.elastic.co/t/process-binding-is-not-supported-when-running-kibana-7-5-1-with-custom-plugin-deployed/213699 "2020-01-10T18:31:38Z")
I am using kibana tags/v7.5.1 to develop a custom plugin It's working fine on dev When i build and deploy the plugin into a stable release of kibana 7.5.1, i started Kibana but when running browser into http://kibana\_s… --- ## [callWithRequest security.hasPrivileges not available](https://discuss.elastic.co/t/callwithrequest-security-hasprivileges-not-available/214500)
**Author:** [@diniden](https://discuss.elastic.co/u/diniden)\ **Replies:** 4\ **Last updated:** [January 10, 2020, 6:15pm UTC](https://discuss.elastic.co/t/callwithrequest-security-hasprivileges-not-available/214500 "2020-01-10T18:15:39Z")
I am attempting to use callWithRequest to fetch elastic privilieges so I can customize my user's plugin experience based on whether or not they have access to read/write to an index within elastic. However, I can't find… --- ## [Plugin Extended Metric under 7.5.1](https://discuss.elastic.co/t/plugin-extended-metric-under-7-5-1/214638)
**Author:** [@Matthias\_Seidl](https://discuss.elastic.co/u/Matthias_Seidl)\ **Replies:** 2\ **Last updated:** [January 10, 2020, 5:59pm UTC](https://discuss.elastic.co/t/plugin-extended-metric-under-7-5-1/214638 "2020-01-10T17:59:24Z")
I'm having trouble using this plugin (https://github.com/ommsolutions/kibana\_ext\_metrics\_vis) under Kibana 7.5.1 I did try changing the version in the package.json, but it still wouldn't work. Is anyone using the plugi… --- ## [Index alias does not show up in discover](https://discuss.elastic.co/t/index-alias-does-not-show-up-in-discover/213210)
**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\ **Replies:** 9\ **Last updated:** [January 10, 2020, 5:40pm UTC](https://discuss.elastic.co/t/index-alias-does-not-show-up-in-discover/213210 "2020-01-10T17:40:50Z")
I have created aliases to an existing index via update alias as shown in https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-aliases.html in dev tools. When i use dev tools via GET / it creates a pop… --- ## [Unique filter in Data Table visualisation](https://discuss.elastic.co/t/unique-filter-in-data-table-visualisation/214306)
**Author:** [@ravnica1](https://discuss.elastic.co/u/ravnica1)\ **Replies:** 4\ **Last updated:** [January 10, 2020, 5:14pm UTC](https://discuss.elastic.co/t/unique-filter-in-data-table-visualisation/214306 "2020-01-10T17:14:20Z")
Hello Given the following set of documents: "eventType":"Added", "movieId":1, "user":"Jane.Blogs@gmail.com" "name":"Terminator", "userId":1, "eventDate":"01-01-2020" "eventType":"Viewed", "movieId":1, "user":"J… --- ## [Process twice a specific field created by grok](https://discuss.elastic.co/t/process-twice-a-specific-field-created-by-grok/214623)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 1\ **Last updated:** [January 10, 2020, 5:12pm UTC](https://discuss.elastic.co/t/process-twice-a-specific-field-created-by-grok/214623 "2020-01-10T17:12:27Z")
Hi guys, I would like to know if there is a way to apply grok filter on a message to obtain several fields and then apply one more time grok filter to extract a subset of information from a field. currently, collecting… --- ## [Routing one input to diferent indexes](https://discuss.elastic.co/t/routing-one-input-to-diferent-indexes/214423)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 5\ **Last updated:** [January 10, 2020, 4:27pm UTC](https://discuss.elastic.co/t/routing-one-input-to-diferent-indexes/214423 "2020-01-10T16:27:05Z")
Hello all, i don't know if this can be achieve with logstah. I am just starting with logstash. This is the structure of each file that comes in the folder every day: DATE: FEB 10, 2020 \*\*\*\*\*\*\* section 1 \*\*\*\*\*\*\*\* COL… --- ## [Max Calculation in TSVB over interval](https://discuss.elastic.co/t/max-calculation-in-tsvb-over-interval/214418)
**Author:** [@Matthias\_Seidl](https://discuss.elastic.co/u/Matthias_Seidl)\ **Replies:** 3\ **Last updated:** [January 10, 2020, 4:54pm UTC](https://discuss.elastic.co/t/max-calculation-in-tsvb-over-interval/214418 "2020-01-10T16:54:47Z")
Hi, I need to visualize the maximum value of a field during the last 10s. I have to use the TSVB for it (because later I need that value in a bucket script). But I'm having problems with the calculation. I'm using th… --- ## [How to get the count of the pre or post tags in the highlight fragment?](https://discuss.elastic.co/t/how-to-get-the-count-of-the-pre-or-post-tags-in-the-highlight-fragment/214639)
**Author:** [@sgomez](https://discuss.elastic.co/u/sgomez)\ **Replies:** 0\ **Last updated:** [January 10, 2020, 4:48pm UTC](https://discuss.elastic.co/t/how-to-get-the-count-of-the-pre-or-post-tags-in-the-highlight-fragment/214639 "2020-01-10T16:48:06Z")
Hi, I have a query that has highlight fields. I was wondering if there's a way to get the count of pre or post tags on the fragment on java. For example if the fragment of my highlight field is something like "john Joh… --- ## [How to exhibit last record for each different possibility in a field?](https://discuss.elastic.co/t/how-to-exhibit-last-record-for-each-different-possibility-in-a-field/213987)
**Author:** [@b3owu1f](https://discuss.elastic.co/u/b3owu1f)\ **Replies:** 3\ **Last updated:** [January 10, 2020, 4:42pm UTC](https://discuss.elastic.co/t/how-to-exhibit-last-record-for-each-different-possibility-in-a-field/213987 "2020-01-10T16:42:23Z")
Greetings, I need help to find a way to exhibit the following type of data, filtering Locomotive id field to not repeat, showing only the last available record for each different Locomotive id in a given period of time. … --- ## [Kibana - Port 5601 is already in use. Another instance of Kibana may be running!](https://discuss.elastic.co/t/kibana-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/213804)
**Author:** [@Vinoth\_kumar\_Ramasam](https://discuss.elastic.co/u/Vinoth_kumar_Ramasam)\ **Replies:** 4\ **Last updated:** [January 10, 2020, 4:36pm UTC](https://discuss.elastic.co/t/kibana-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/213804 "2020-01-10T16:36:51Z")
Im trying to setup ELK stack version 7.5.1 in my 64 bit windows machine. But, im always keep on getting the following error whenever i tried to start Kibana. Also, I checked using netstat -ano | findstr 5601. It returned… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1688) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1690)