# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1779

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1780

---

## [Data Table - Compare two periods from different years](https://discuss.elastic.co/t/data-table-compare-two-periods-from-different-years/207534)

<div class="topic-metadata">

**Author:** [@crpj](https://discuss.elastic.co/u/crpj)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 9:50pm UTC](https://discuss.elastic.co/t/data-table-compare-two-periods-from-different-years/207534 "2019-11-15T21:50:33Z")

</div>

Hello, I know Timelion enables one to compare two different periods easily with Offset feature, however, do we have a workaround to mimic Offset for Data Table component? For example, I would have a table like so (consi…

---

## [Strange error message. To many dynamic script](https://discuss.elastic.co/t/strange-error-message-to-many-dynamic-script/207730)

<div class="topic-metadata">

**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\
**Replies:** 5\
**Last updated:** [November 15, 2019, 9:49pm UTC](https://discuss.elastic.co/t/strange-error-message-to-many-dynamic-script/207730 "2019-11-15T21:49:29Z")

</div>

Hello, guys, I am using the Palo Alto and Cisco ASA module in file beats and I suddenly started getting the following error message. error.message \[script\] Too many dynamic script compilations within, max: \[100/1m\]; pl…

---

## [Tiny dataset very high read rate, how to optimise?](https://discuss.elastic.co/t/tiny-dataset-very-high-read-rate-how-to-optimise/208135)

<div class="topic-metadata">

**Author:** [@sutty100](https://discuss.elastic.co/u/sutty100)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 9:46pm UTC](https://discuss.elastic.co/t/tiny-dataset-very-high-read-rate-how-to-optimise/208135 "2019-11-15T21:46:28Z")

</div>

We are trying to work out how to improve the throughput of our elasticSearch cluster and I think our use case is a little different from normal hence my post! Our cluster is currently 3 nodes with 8GB of memory each. Our…

---

## ["Group by" in Line Charts?](https://discuss.elastic.co/t/group-by-in-line-charts/207412)

<div class="topic-metadata">

**Author:** [@PerA](https://discuss.elastic.co/u/PerA)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 9:41pm UTC](https://discuss.elastic.co/t/group-by-in-line-charts/207412 "2019-11-15T21:41:34Z")

</div>

Hi! I'm new to both Elasticsearch and Kibana, so this might be really simple so solve. I'm trying to summarize some data and display it in a simple Line Chart in Kibana, but having a hard time getting the result i want. …

---

## [Kibana Locale](https://discuss.elastic.co/t/kibana-locale/207376)

<div class="topic-metadata">

**Author:** [@beerygaz](https://discuss.elastic.co/u/beerygaz)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 9:38pm UTC](https://discuss.elastic.co/t/kibana-locale/207376 "2019-11-15T21:38:26Z")

</div>

I'm trying to set my Kibana locale to en-za in order to get the correct currency format. In the format:number:defaultLocale dropdown in the Kibana GUI I don't see "en-za" listed, but it is in the /usr/share/kibana/node\_…

---

## [Create custom bucket interval](https://discuss.elastic.co/t/create-custom-bucket-interval/207342)

<div class="topic-metadata">

**Author:** [@maco](https://discuss.elastic.co/u/maco)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 9:30pm UTC](https://discuss.elastic.co/t/create-custom-bucket-interval/207342 "2019-11-15T21:30:26Z")

</div>

Hi, Is it possible to create custom bucket interval on x-axis ? Because I'm displaying my data in area plot for 2 months but some data are not shown because my bucket interval is set 12h and some data are changing on 5h…

---

## [Need help with the Grok filter](https://discuss.elastic.co/t/need-help-with-the-grok-filter/207416)

<div class="topic-metadata">

**Author:** [@o1o1o11o1](https://discuss.elastic.co/u/o1o1o11o1)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 8:28pm UTC](https://discuss.elastic.co/t/need-help-with-the-grok-filter/207416 "2019-11-15T20:28:29Z")

</div>

I have the following filter in Logstash that parses AWS ELB access logs: filter { grok { match =\> \[ "message", '%{TIMESTAMP\_ISO8601:timestamp} %{NOTSPACE:loadbalancer} %{IP:client\_ip}:%{NUMBER:client\_port:int} (?:…

---

## [Trouble installing kibana plugin](https://discuss.elastic.co/t/trouble-installing-kibana-plugin/207984)

<div class="topic-metadata">

**Author:** [@terryE](https://discuss.elastic.co/u/terryE)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 8:05pm UTC](https://discuss.elastic.co/t/trouble-installing-kibana-plugin/207984 "2019-11-15T20:05:40Z")

</div>

I'm trying to use an init container to install a kibana plugin but I'm getting an error. Events: Type Reason Age From Message Warning ReconciliationErr…

---

## [Translate Filters :: How to Check the Dictionary if a Value is Listed?](https://discuss.elastic.co/t/translate-filters-how-to-check-the-dictionary-if-a-value-is-listed/207951)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 2\
**Last updated:** [November 15, 2019, 7:37pm UTC](https://discuss.elastic.co/t/translate-filters-how-to-check-the-dictionary-if-a-value-is-listed/207951 "2019-11-15T19:37:30Z")

</div>

Hi Logstash Ninjas, I have a working Logstash instance that inputs log data about my customers. The raw data contains multiple integer fields, which I’ll call “Code1”, “Code2”, “Code3”, and “Code4”: Name Code1 …

---

## [Forcemerge is not allowed in cold phase](https://discuss.elastic.co/t/forcemerge-is-not-allowed-in-cold-phase/208124)

<div class="topic-metadata">

**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\
**Replies:** 0\
**Last updated:** [November 15, 2019, 6:58pm UTC](https://discuss.elastic.co/t/forcemerge-is-not-allowed-in-cold-phase/208124 "2019-11-15T18:58:35Z")

</div>

I am trying the following request for ILM: PUT \_ilm/policy/test1 { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "set\_priority": { "priority": 100 …

---

## [HTTPD24\_ERRORLOG grok pattern issues](https://discuss.elastic.co/t/httpd24-errorlog-grok-pattern-issues/207946)

<div class="topic-metadata">

**Author:** [@CodeName](https://discuss.elastic.co/u/CodeName)\
**Replies:** 4\
**Last updated:** [November 15, 2019, 6:23pm UTC](https://discuss.elastic.co/t/httpd24-errorlog-grok-pattern-issues/207946 "2019-11-15T18:23:22Z")

</div>

I am having trouble getting the HTTPD24\_ERRORLOG to work when the module field is blank it works great in the kibana tester but not in logstash i get a grokparsefailue ls config input { stdin{} } filter{ grok{ m…

---

## [Where to download predefined dashboard?](https://discuss.elastic.co/t/where-to-download-predefined-dashboard/208097)

<div class="topic-metadata">

**Author:** [@ashadp](https://discuss.elastic.co/u/ashadp)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 6:15pm UTC](https://discuss.elastic.co/t/where-to-download-predefined-dashboard/208097 "2019-11-15T18:15:30Z")

</div>

I have installed ELK stack but don't see any predefined dashboard. Is there any place where I can just download only these dashboard? Thanks!

---

## [Licence to include Filebeat in our commercial product?](https://discuss.elastic.co/t/licence-to-include-filebeat-in-our-commercial-product/207537)

<div class="topic-metadata">

**Author:** [@Vijay\_Daggumati](https://discuss.elastic.co/u/Vijay_Daggumati)\
**Replies:** 6\
**Last updated:** [November 15, 2019, 5:20pm UTC](https://discuss.elastic.co/t/licence-to-include-filebeat-in-our-commercial-product/207537 "2019-11-15T17:20:17Z")

</div>

Hi, I would like to know the details regarding usage of file beat in our commercial product. We have a piece of software which we sell to our clients. To be clear, we only run the software on client hardware. We don't …

---

## [Issue with ordered intervals queries](https://discuss.elastic.co/t/issue-with-ordered-intervals-queries/208110)

<div class="topic-metadata">

**Author:** [@bperalta](https://discuss.elastic.co/u/bperalta)\
**Replies:** 0\
**Last updated:** [November 15, 2019, 5:07pm UTC](https://discuss.elastic.co/t/issue-with-ordered-intervals-queries/208110 "2019-11-15T17:07:11Z")

</div>

Hello, we use elasticsearch 7.2.0 (but the problem also exists in 7.4.2) and we have some problems with intervals queries. To reproduce our problem, create a simple index : PUT intervals\_tests { "mappings": { "d…

---

## [Minimal interval = auto error](https://discuss.elastic.co/t/minimal-interval-auto-error/208074)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 2\
**Last updated:** [November 15, 2019, 4:29pm UTC](https://discuss.elastic.co/t/minimal-interval-auto-error/208074 "2019-11-15T16:29:35Z")

</div>

Hi, I am ingesting Cisco ASA logs via filebeats to logstash. I am now trying to convert the ASA Dashboard to my index. The format is in ECS and if I have modified the ASA querys to use my Index. Issue is now the visu…

---

## [Random Logout of Multiple Load Balanced Kibana on Multiple Elasticsearch Clusters](https://discuss.elastic.co/t/random-logout-of-multiple-load-balanced-kibana-on-multiple-elasticsearch-clusters/207942)

<div class="topic-metadata">

**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\
**Replies:** 2\
**Last updated:** [November 15, 2019, 4:13pm UTC](https://discuss.elastic.co/t/random-logout-of-multiple-load-balanced-kibana-on-multiple-elasticsearch-clusters/207942 "2019-11-15T16:13:06Z")

</div>

Hi all, SETUP: Analytics Cluster 1 Kibana Load Balancer (Sticky Session configured) 2 Analytics Kibana instances connecting to Coordinating Nodes 2 Coordinating Nodes 3 Data Nodes Monitoring Cluster 1 Kibana Load…

---

## [Elasticsearch cluster is down](https://discuss.elastic.co/t/elasticsearch-cluster-is-down/207917)

<div class="topic-metadata">

**Author:** [@yaminisridaran](https://discuss.elastic.co/u/yaminisridaran)\
**Replies:** 4\
**Last updated:** [November 15, 2019, 4:04pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-is-down/207917 "2019-11-15T16:04:50Z")

</div>

We have deployed elasticsearch cluster on kubernetes cluster. We have deployed 3 master nodes, 3 client nodes and 5 data nodes. We are able to ping the endpoint ips mentioned in the logs from the master,client and dat…

---

## [Elasticsearch 7.4.2 : Problem with SSL configuration](https://discuss.elastic.co/t/elasticsearch-7-4-2-problem-with-ssl-configuration/208101)

<div class="topic-metadata">

**Author:** [@Michael\_Oullion](https://discuss.elastic.co/u/Michael_Oullion)\
**Replies:** 0\
**Last updated:** [November 15, 2019, 3:50pm UTC](https://discuss.elastic.co/t/elasticsearch-7-4-2-problem-with-ssl-configuration/208101 "2019-11-15T15:50:27Z")

</div>

Hi, I try to configure https on my Elasticsearch and I have some trouble to do it. I start with a pfx certificate provide by my Ops team. I try to use this type of configuration : xpack.security.http.ssl.enabled: tru…

---

## [How can I send the body of an http request in logstash](https://discuss.elastic.co/t/how-can-i-send-the-body-of-an-http-request-in-logstash/208096)

<div class="topic-metadata">

**Author:** [@vbryandc](https://discuss.elastic.co/u/vbryandc)\
**Replies:** 0\
**Last updated:** [November 15, 2019, 3:27pm UTC](https://discuss.elastic.co/t/how-can-i-send-the-body-of-an-http-request-in-logstash/208096 "2019-11-15T15:27:44Z")

</div>

I need to retrieve the response of a POST REST API, for which I have to send the body of this service in json format, for example: { "customerID": "123456", "context": "001" } I have seen that the documentation uses…

---

## [Parse log with different lines in logstash](https://discuss.elastic.co/t/parse-log-with-different-lines-in-logstash/208045)

<div class="topic-metadata">

**Author:** [@ahmedrao](https://discuss.elastic.co/u/ahmedrao)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 3:22pm UTC](https://discuss.elastic.co/t/parse-log-with-different-lines-in-logstash/208045 "2019-11-15T15:22:38Z")

</div>

Hi, I am trying to parse following logs: \<0\> 2019-11-08 16:26:03.420 10.5.4.2 \[logsource="" logid="50"\] SystemTrace TID:1 Tracer started. \<1\> 2019-11-08 16:26:03.418 10.5.4.2 \[logsource="" logid="50"\] SystemTrace TID:…

---

## [Percentage symbol](https://discuss.elastic.co/t/percentage-symbol/208022)

<div class="topic-metadata">

**Author:** [@KrisKarrots](https://discuss.elastic.co/u/KrisKarrots)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 3:09pm UTC](https://discuss.elastic.co/t/percentage-symbol/208022 "2019-11-15T15:09:43Z")

</div>

Hi, I could not find information on what is the purpose of % symbol when using a field? For example "%{\[Temp1\]\[Temp2\]\[Temp3\]}" Thanks,

---

## [How to rename an index with a special char (tabulation) in its name?](https://discuss.elastic.co/t/how-to-rename-an-index-with-a-special-char-tabulation-in-its-name/208085)

<div class="topic-metadata">

**Author:** [@tbarnier](https://discuss.elastic.co/u/tbarnier)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 2:54pm UTC](https://discuss.elastic.co/t/how-to-rename-an-index-with-a-special-char-tabulation-in-its-name/208085 "2019-11-15T14:54:54Z")

</div>

A colleague created an index through an API Name of the index: LF\_IDX\_THE\_INDX But - no idea how - with a leading TAB char in front When running GET \_cat/indices?v the LF\_IDX\_THE\_INDXshows a "whitespace" in the lis…

---

## [Logash ip address in ELastic search](https://discuss.elastic.co/t/logash-ip-address-in-elastic-search/207987)

<div class="topic-metadata">

**Author:** [@Tejesh](https://discuss.elastic.co/u/Tejesh)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 2:43pm UTC](https://discuss.elastic.co/t/logash-ip-address-in-elastic-search/207987 "2019-11-15T14:43:19Z")

</div>

i have 6 logstash instances processing events to elastic search .Is there a way that i can get the Logstash ip from which the event is processed to elastic search as a field

---

## [How to filter data despite the spelling mistake and according to the max gap between passed words](https://discuss.elastic.co/t/how-to-filter-data-despite-the-spelling-mistake-and-according-to-the-max-gap-between-passed-words/208092)

<div class="topic-metadata">

**Author:** [@akhut13](https://discuss.elastic.co/u/akhut13)\
**Replies:** 0\
**Last updated:** [November 15, 2019, 2:33pm UTC](https://discuss.elastic.co/t/how-to-filter-data-despite-the-spelling-mistake-and-according-to-the-max-gap-between-passed-words/208092 "2019-11-15T14:33:16Z")

</div>

If I have these two strings: George Orwell is my favorite writer My favorite writers name is George, who was born in 1903 and whose last name is Orwell Here's the criteria that i would like to apply to my search when …

---

## [Setting Filter on an Analysed Field](https://discuss.elastic.co/t/setting-filter-on-an-analysed-field/208083)

<div class="topic-metadata">

**Author:** [@Evangelos\_Gkavogiann](https://discuss.elastic.co/u/Evangelos_Gkavogiann)\
**Replies:** 0\
**Last updated:** [November 15, 2019, 1:40pm UTC](https://discuss.elastic.co/t/setting-filter-on-an-analysed-field/208083 "2019-11-15T13:40:36Z")

</div>

Hi, I am trying to set a filter on the following field; e.Properties.Uri: https://api.checkout.com/payments/pay\_rtpotpropoepoe It is an analysed Field, so it gets tokenized into two tokens: https://api.checkout.com/pa…

---

## [\[Kibana\] Changement des couleurs, Pie](https://discuss.elastic.co/t/kibana-changement-des-couleurs-pie/207738)

<div class="topic-metadata">

**Author:** [@YoubaYT](https://discuss.elastic.co/u/YoubaYT)\
**Replies:** 6\
**Last updated:** [November 15, 2019, 1:34pm UTC](https://discuss.elastic.co/t/kibana-changement-des-couleurs-pie/207738 "2019-11-15T13:34:30Z")

</div>

Bonjour à tous, Quand je réalise une visualisation de type "Pie" je souhaite définir les couleurs des deux catégories, mais impossible. Quand je les définis ils redeviennent automatiquement aléatoire, j'ai essayé de déf…

---

## [Unable to parse in grok](https://discuss.elastic.co/t/unable-to-parse-in-grok/208076)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 1:26pm UTC](https://discuss.elastic.co/t/unable-to-parse-in-grok/208076 "2019-11-15T13:26:00Z")

</div>

Hi Folks, Somehow I am not able to parse the below Text in grok. grokdebug is consistently showing no match. {"org\_name": "google.com", "org\_email": "abuse-support@google.com", } Here are my parser which are pretty b…

---

## [Collect logs about users logging in to Kibana](https://discuss.elastic.co/t/collect-logs-about-users-logging-in-to-kibana/208040)

<div class="topic-metadata">

**Author:** [@Pheebzer](https://discuss.elastic.co/u/Pheebzer)\
**Replies:** 3\
**Last updated:** [November 15, 2019, 1:17pm UTC](https://discuss.elastic.co/t/collect-logs-about-users-logging-in-to-kibana/208040 "2019-11-15T13:17:24Z")

</div>

Hello. I have an ELK stack hosted on elastic cloud. I have multiple different customers who regularly log in to view their respected dashboards. I would like to collect logs showing successful and unsuccessful login at…

---

## [Parsing Dynatrace dashboard reports in XML format](https://discuss.elastic.co/t/parsing-dynatrace-dashboard-reports-in-xml-format/206179)

<div class="topic-metadata">

**Author:** [@Volkan\_E](https://discuss.elastic.co/u/Volkan_E)\
**Replies:** 6\
**Last updated:** [November 15, 2019, 12:52pm UTC](https://discuss.elastic.co/t/parsing-dynatrace-dashboard-reports-in-xml-format/206179 "2019-11-15T12:52:29Z")

</div>

I'm trying to use Logstash 7.4.1 to parse XML files that are being generated each minute upon request to the Dynatrace server via REST api. The output will be sent to ElasticSearch. Dynatrace Dashboard Report My goal i…

---

## [Using Java Client to hit Kibana Space - GIVING me 400](https://discuss.elastic.co/t/using-java-client-to-hit-kibana-space-giving-me-400/207805)

<div class="topic-metadata">

**Author:** [@ashish\_kumar1490](https://discuss.elastic.co/u/ashish_kumar1490)\
**Replies:** 3\
**Last updated:** [November 15, 2019, 12:33pm UTC](https://discuss.elastic.co/t/using-java-client-to-hit-kibana-space-giving-me-400/207805 "2019-11-15T12:33:08Z")

</div>

try { String url = "http://10.11.92.23:5601/api/spaces/space"; String id = "Demo", name = "Sample", description = "This is my sample demo", initials = "DM", color ="#aabbcc"; URL obj = new URL(url); HttpURLConnection…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1778)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1780)
