# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1740 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1741 --- ## [Confusion about index and doc\_values](https://discuss.elastic.co/t/confusion-about-index-and-doc-values/210448)
**Author:** [@KellyK313](https://discuss.elastic.co/u/KellyK313)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 3:12am UTC](https://discuss.elastic.co/t/confusion-about-index-and-doc-values/210448 "2019-12-05T03:12:36Z")
When I test the mapping parameter 'index' and 'doc\_values',I found out that when numeric type "index" set "false" and this column can not be aggregated,the result will be 0. In my opinion,I think 'index' controls the qu… --- ## [Use separate indexes according to the time range we select on time filter](https://discuss.elastic.co/t/use-separate-indexes-according-to-the-time-range-we-select-on-time-filter/210481)
**Author:** [@Rajith\_konara](https://discuss.elastic.co/u/Rajith_konara)\ **Replies:** 4\ **Last updated:** [December 6, 2019, 3:49am UTC](https://discuss.elastic.co/t/use-separate-indexes-according-to-the-time-range-we-select-on-time-filter/210481 "2019-12-06T03:49:04Z")
Hi team, We have a requirement to use to load visualizations/dashboards from different indexes depending on the time range selected in the time filter. eg: If we choose time range one year, data should be load from the… --- ## [Some tests failed when running test in idea on macos](https://discuss.elastic.co/t/some-tests-failed-when-running-test-in-idea-on-macos/210704)
**Author:** [@gaobinlong](https://discuss.elastic.co/u/gaobinlong)\ **Replies:** 1\ **Last updated:** [December 6, 2019, 2:17am UTC](https://discuss.elastic.co/t/some-tests-failed-when-running-test-in-idea-on-macos/210704 "2019-12-06T02:17:30Z")
Elasticsearch Version: 7.5.0 Idea Version: 2019.1 Gradle Version : 5.6.4 OS Info : Mac OS X 10.13.6 (x86\_64) Compiler JDK Version : 12 (Oracle Corporation 12 \[OpenJDK 64-Bit Server VM 12+33\]) … --- ## [Can index.query.default\_field exclude certain fields if no field is provided in the query string](https://discuss.elastic.co/t/can-index-query-default-field-exclude-certain-fields-if-no-field-is-provided-in-the-query-string/210630)
**Author:** [@android.kc](https://discuss.elastic.co/u/android.kc)\ **Replies:** 4\ **Last updated:** [December 6, 2019, 1:09am UTC](https://discuss.elastic.co/t/can-index-query-default-field-exclude-certain-fields-if-no-field-is-provided-in-the-query-string/210630 "2019-12-06T01:09:12Z")
I am trying to ignore certain fields if no field is provided in the query string. index.query.default\_field can whitelist all the fields in an array. is there a way to blacklist certain fields, e.g. by name or by type? W… --- ## [Use s3 backup\_bucket option and create folder structure dynamically](https://discuss.elastic.co/t/use-s3-backup-bucket-option-and-create-folder-structure-dynamically/210797)
**Author:** [@user2416](https://discuss.elastic.co/u/user2416)\ **Replies:** 0\ **Last updated:** [December 6, 2019, 12:59am UTC](https://discuss.elastic.co/t/use-s3-backup-bucket-option-and-create-folder-structure-dynamically/210797 "2019-12-06T00:59:32Z")
Hi, I am trying to read AWS cloudtrail logs stored in S3 bucket in the below folder structure AWSLogs/accountnumber/CloudTrail/region/year/month/day and send the processed files to the backup S3 bucket using s3 backup\_… --- ## [Update offline logstash-input-s3 plugin](https://discuss.elastic.co/t/update-offline-logstash-input-s3-plugin/210796)
**Author:** [@sili.redwork](https://discuss.elastic.co/u/sili.redwork)\ **Replies:** 0\ **Last updated:** [December 6, 2019, 12:51am UTC](https://discuss.elastic.co/t/update-offline-logstash-input-s3-plugin/210796 "2019-12-06T00:51:07Z")
Hello, I am trying to install logstash-input-s3 plugin from logstash v 6.5.0 into logstash v 6.0.0 on RHEL7 Installed logstash v 6.5.0 on server1 and prepared offline plugin pack with below command and copied generat… --- ## [Whether enable action.auto\_create\_index decrease performance](https://discuss.elastic.co/t/whether-enable-action-auto-create-index-decrease-performance/210795)
**Author:** [@Nathan\_Li](https://discuss.elastic.co/u/Nathan_Li)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 11:59pm UTC](https://discuss.elastic.co/t/whether-enable-action-auto-create-index-decrease-performance/210795 "2019-12-05T23:59:03Z")
I want to enable index auto-creation in our cluster, but one concern is I don't know if this will cause performance issues. Glad to know this if you have any experience with this. --- ## [Setup system IDs, encryption, and licenses.what Order?](https://discuss.elastic.co/t/setup-system-ids-encryption-and-licenses-what-order/210767)
**Author:** [@Erin](https://discuss.elastic.co/u/Erin)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 11:02pm UTC](https://discuss.elastic.co/t/setup-system-ids-encryption-and-licenses-what-order/210767 "2019-12-05T23:02:53Z")
I am using elastic 7.4. I am wanting to put in my licenses userids and passwords. Also setup AD authentication and encryption of the connections. Last time on non prod servers i had an issue where i enabled security and … --- ## [Using py curator Shrink method hangs on ES 7.x AWS managed service](https://discuss.elastic.co/t/using-py-curator-shrink-method-hangs-on-es-7-x-aws-managed-service/210791)
**Author:** [@sbalaram](https://discuss.elastic.co/u/sbalaram)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 10:45pm UTC](https://discuss.elastic.co/t/using-py-curator-shrink-method-hangs-on-es-7-x-aws-managed-service/210791 "2019-12-05T22:45:24Z")
shrink using curator python never completes and the cluster status goes to unassigned shards. AWS support explanation : Cause of the issue: From ES 7.0 , Elastic deprecated the use of "copy\_settings" parameter in the s… --- ## [SIEM - Any overlap between filbeat ingesting syslog, auditlog, authlog and auditbeat (with auditd, system and FI modules)?](https://discuss.elastic.co/t/siem-any-overlap-between-filbeat-ingesting-syslog-auditlog-authlog-and-auditbeat-with-auditd-system-and-fi-modules/210235)
**Author:** [@vsubrama](https://discuss.elastic.co/u/vsubrama)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 10:26pm UTC](https://discuss.elastic.co/t/siem-any-overlap-between-filbeat-ingesting-syslog-auditlog-authlog-and-auditbeat-with-auditd-system-and-fi-modules/210235 "2019-12-05T22:26:14Z")
We are currently ingesting syslog, auditlog, authlog from our ubuntu systems via filebeat to Elasticsearch 7.4.2 as a part of build our SIEM. We are planning to add auditbeat with auditd, system and file integrity module… --- ## [Dark Mode per user](https://discuss.elastic.co/t/dark-mode-per-user/210414)
**Author:** [@Tripodal](https://discuss.elastic.co/u/Tripodal)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 10:24pm UTC](https://discuss.elastic.co/t/dark-mode-per-user/210414 "2019-12-05T22:24:11Z")
Is there any way to enable dark mode on a per user basis? --- ## [Kibana Logs UI query match\_all](https://discuss.elastic.co/t/kibana-logs-ui-query-match-all/210786)
**Author:** [@delphi](https://discuss.elastic.co/u/delphi)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 9:43pm UTC](https://discuss.elastic.co/t/kibana-logs-ui-query-match-all/210786 "2019-12-05T21:43:29Z")
Hi. I'm using Kibana Logs UI to view my logs from my k8s pods. Although, when I do a simple query such as "kubernetes.pod.name: foo.bar" , I can check a high load on cluster and all Stack hangs. Is that query doing a "… --- ## [Permission denied when installing plugin](https://discuss.elastic.co/t/permission-denied-when-installing-plugin/208100)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 4\ **Last updated:** [December 5, 2019, 9:17pm UTC](https://discuss.elastic.co/t/permission-denied-when-installing-plugin/208100 "2019-12-05T21:17:03Z")
I have my own plugin that I want to install into a new ubuntu system. I have installed everything using standard settings. When I run bin/kibana-plugin install file://\ I get the error: Plugin installatio… --- ## [Dashboard - Hide filters](https://discuss.elastic.co/t/dashboard-hide-filters/210781)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 8:59pm UTC](https://discuss.elastic.co/t/dashboard-hide-filters/210781 "2019-12-05T20:59:17Z")
In a given Space, for some of our dashboards we would like to hide the two filters at the top and for other dashboards we would like to have the two filters. Is there toggle somewhere, one can use to makes these filters… --- ## [JSON Parsing Error - Logstash](https://discuss.elastic.co/t/json-parsing-error-logstash/210768)
**Author:** [@Booooooo](https://discuss.elastic.co/u/Booooooo)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 8:52pm UTC](https://discuss.elastic.co/t/json-parsing-error-logstash/210768 "2019-12-05T20:52:31Z")
Hi, I am trying to ingest a JSON file but I'm getting errors and none of the key value pairs are being extrated to any fields. I currently have this configuration: input { file { path =\> "/home/path\_to\_jso… --- ## [Calculated Metrics In Charts?](https://discuss.elastic.co/t/calculated-metrics-in-charts/210778)
**Author:** [@Sincore](https://discuss.elastic.co/u/Sincore)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 8:45pm UTC](https://discuss.elastic.co/t/calculated-metrics-in-charts/210778 "2019-12-05T20:45:26Z")
Is there a way to create a calculated metic inside of a bar graph for example Plot out the sum of bounces / Sum of sessions to see bounce rate over time? I know you can do this TSVB but I am interested in plotting bounce… --- ## [Data nodes being ignored by ES cluster for shard allocation](https://discuss.elastic.co/t/data-nodes-being-ignored-by-es-cluster-for-shard-allocation/210747)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 4\ **Last updated:** [December 5, 2019, 8:35pm UTC](https://discuss.elastic.co/t/data-nodes-being-ignored-by-es-cluster-for-shard-allocation/210747 "2019-12-05T20:35:45Z")
Hi everyone, I have two nodes with very little number of shards allocated there, distribution across the cluster is skewed due to these two nodes. I checked and there's far enough disk space in each and also their IP… --- ## [Delete documents by query and disk storage](https://discuss.elastic.co/t/delete-documents-by-query-and-disk-storage/210746)
**Author:** [@Nonow53](https://discuss.elastic.co/u/Nonow53)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 8:26pm UTC](https://discuss.elastic.co/t/delete-documents-by-query-and-disk-storage/210746 "2019-12-05T20:26:56Z")
Hi, I use Delete by Query API to delete old documents. On the monitoring console, I can see the storage size of the index was not changed. I can see the file for this index in DATA folder is still present. If the ind… --- ## [Upgrading 1.x to 7.5](https://discuss.elastic.co/t/upgrading-1-x-to-7-5/210760)
**Author:** [@Phil\_Messenger](https://discuss.elastic.co/u/Phil_Messenger)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 8:05pm UTC](https://discuss.elastic.co/t/upgrading-1-x-to-7-5/210760 "2019-12-05T20:05:24Z")
I've inherited a product that still uses Elasticsearch 1.x (don't ask!) and would like to upgrade to 7.5. From reading the documentation it seems that: upgrading from one major version to another is possible without a … --- ## [Uptime 7.5: Overview pagination settings](https://discuss.elastic.co/t/uptime-7-5-overview-pagination-settings/210259)
**Author:** [@Slavik\_Fursov](https://discuss.elastic.co/u/Slavik_Fursov)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 6:51pm UTC](https://discuss.elastic.co/t/uptime-7-5-overview-pagination-settings/210259 "2019-12-05T18:51:18Z")
Upgraded to 7.5 I see, that Uptime app now has pagination. ok. However, it looks like I can't change number of rows per page. Is it true? Looks to be major omission. The app (only 10 rows) now looks strange on my 32" … --- ## [Use regexp and terms together in query](https://discuss.elastic.co/t/use-regexp-and-terms-together-in-query/210590)
**Author:** [@lorrenrules](https://discuss.elastic.co/u/lorrenrules)\ **Replies:** 3\ **Last updated:** [December 5, 2019, 6:39pm UTC](https://discuss.elastic.co/t/use-regexp-and-terms-together-in-query/210590 "2019-12-05T18:39:36Z")
Hi, I am trying to use both a regexp and a terms query in the body of my query, and can't figure out how to make it work. Goal: query: { regexp: { 'canonicalUrl.keyword… --- ## [How to set an Environment variable in Http\_poller](https://discuss.elastic.co/t/how-to-set-an-environment-variable-in-http-poller/210757)
**Author:** [@kamalesh](https://discuss.elastic.co/u/kamalesh)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 5:59pm UTC](https://discuss.elastic.co/t/how-to-set-an-environment-variable-in-http-poller/210757 "2019-12-05T17:59:08Z")
Hi All, I am trying to use Environment variable in http\_poller in the Url part but not sure on how to do it and where it need to be configured Can any one please let me know where i need to set the environment variable… --- ## [Logstash Fingerprint for Regulations](https://discuss.elastic.co/t/logstash-fingerprint-for-regulations/210675)
**Author:** [@anilozyurt](https://discuss.elastic.co/u/anilozyurt)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 5:40pm UTC](https://discuss.elastic.co/t/logstash-fingerprint-for-regulations/210675 "2019-12-05T17:40:56Z")
Hi, We're using ELK stack to centralize logs of our systems and need to encrypt some of these log types(access logs, audit logs etc.). Logstash fingerprint seems suitable for this but we have to check if the log content… --- ## [Logstash runing with the flowing configuration](https://discuss.elastic.co/t/logstash-runing-with-the-flowing-configuration/210756)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 5:40pm UTC](https://discuss.elastic.co/t/logstash-runing-with-the-flowing-configuration/210756 "2019-12-05T17:40:39Z")
i have the follwing config for logstash (shown in image) and i want to know how to specify the index name and howa to start data collect and wher to put this file thnak you --- ## [Filtering table entries](https://discuss.elastic.co/t/filtering-table-entries/210749)
**Author:** [@amirraz26](https://discuss.elastic.co/u/amirraz26)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 4:45pm UTC](https://discuss.elastic.co/t/filtering-table-entries/210749 "2019-12-05T16:45:13Z")
Subject might be a bit confusing so here is an example. Let's say that I have logs that looks like this: { "filed1":"name","count":number}. For a specific time period I have 5 logs with field1 value "A". One of them ha… --- ## [How to sort by a property with NEST when the name is given as string? Please help](https://discuss.elastic.co/t/how-to-sort-by-a-property-with-nest-when-the-name-is-given-as-string-please-help/208696)
**Author:** [@TDev](https://discuss.elastic.co/u/TDev)\ **Replies:** 4\ **Last updated:** [December 5, 2019, 4:08pm UTC](https://discuss.elastic.co/t/how-to-sort-by-a-property-with-nest-when-the-name-is-given-as-string-please-help/208696 "2019-12-05T16:08:55Z")
This is a C# snippet of what I am trying to do: string MyProperty = "MyPropertyName"; var MyOrder = SortOrder.Ascending; Func\, Nest.IPromise\\>\> Sorting; Sorting = sort =\> sort… --- ## [Remove documents with certain conditions based on what exists in another index](https://discuss.elastic.co/t/remove-documents-with-certain-conditions-based-on-what-exists-in-another-index/210740)
**Author:** [@johanwallenborg](https://discuss.elastic.co/u/johanwallenborg)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 4:01pm UTC](https://discuss.elastic.co/t/remove-documents-with-certain-conditions-based-on-what-exists-in-another-index/210740 "2019-12-05T16:01:44Z")
Today I have two indices (Lets call them A and B). Index A contains "rawdata" and Index B is a simple index with one column with different values. What I want to do is to remove or mark documents if it contains values t… --- ## [Is this the best way to compare and enrich two datasets?](https://discuss.elastic.co/t/is-this-the-best-way-to-compare-and-enrich-two-datasets/210738)
**Author:** [@onetrickwolf](https://discuss.elastic.co/u/onetrickwolf)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 3:38pm UTC](https://discuss.elastic.co/t/is-this-the-best-way-to-compare-and-enrich-two-datasets/210738 "2019-12-05T15:38:01Z")
Hi I have a similar use case to this: https://discuss.elastic.co/t/compare-two-datasets/129006/3 However, we are an e-commerce platform and are looking to flag data from bad sellers/buyers instead of IP addresses. So we… --- ## [Logstash WMI plugin logstash-input-wmi](https://discuss.elastic.co/t/logstash-wmi-plugin-logstash-input-wmi/209774)
**Author:** [@jeaolucas](https://discuss.elastic.co/u/jeaolucas)\ **Replies:** 0\ **Last updated:** [November 27, 2019, 11:28pm UTC](https://discuss.elastic.co/t/logstash-wmi-plugin-logstash-input-wmi/209774 "2019-11-27T23:28:10Z")
Hi i have the next problem when i try to excecute my pipeline logstash -f config\\logstash-wmi-simple.conf this is the content of file // WMI -\> Logstash -\> Elasticsearch pipeline. input { # prueba local wmi { host… --- ## [Skewed bars on a graph](https://discuss.elastic.co/t/skewed-bars-on-a-graph/206943)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 8\ **Last updated:** [December 5, 2019, 3:16pm UTC](https://discuss.elastic.co/t/skewed-bars-on-a-graph/206943 "2019-12-05T15:16:13Z")
Hello! There is a graph where each value of X-axis is splited onto 3 bars. When creating the visualization I noticed that each third bar is located above its "neightboring" right value. I mean that the 3rd bar of the 1s… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1739) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1741)