# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1823

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1824

---

## [Duplicate field mapping in kibana with ".keyword" at the end](https://discuss.elastic.co/t/duplicate-field-mapping-in-kibana-with-keyword-at-the-end/204830)

<div class="topic-metadata">

**Author:** [@deepak\_deore](https://discuss.elastic.co/u/deepak_deore)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 2:47pm UTC](https://discuss.elastic.co/t/duplicate-field-mapping-in-kibana-with-keyword-at-the-end/204830 "2019-10-23T14:47:25Z")

</div>

i have setup EFK stack in k8 cluster, created the index pattern, it crated an extra field with ".keyword" at the end, this field has aggregateable option enabled. why are there 2 same field mappings, one is aggregateab…

---

## [Index name removes date](https://discuss.elastic.co/t/index-name-removes-date/204705)

<div class="topic-metadata">

**Author:** [@John\_McAfee1](https://discuss.elastic.co/u/John_McAfee1)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 2:46pm UTC](https://discuss.elastic.co/t/index-name-removes-date/204705 "2019-10-23T14:46:07Z")

</div>

Hello, I am using Logstash 7.2.0 and have encountered an issue with naming my index with a timestamp. An index is created in Logstash, but it doesn't contain the date. It only contains the characters before the dash. …

---

## [Combining timeseries](https://discuss.elastic.co/t/combining-timeseries/204894)

<div class="topic-metadata">

**Author:** [@olt](https://discuss.elastic.co/u/olt)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 2:44pm UTC](https://discuss.elastic.co/t/combining-timeseries/204894 "2019-10-23T14:44:59Z")

</div>

Hi there! I'm new to Elasticsearch, and I'm trying to combine two time-series from two IoT devices. Each of my two devices upload measurements from a single sensor, to an index as 'data-point's, meaning that each data-…

---

## [Input kafka: the decorate\_events option overwrites @timestamp](https://discuss.elastic.co/t/input-kafka-the-decorate-events-option-overwrites-timestamp/204800)

<div class="topic-metadata">

**Author:** [@zeenon](https://discuss.elastic.co/u/zeenon)\
**Replies:** 4\
**Last updated:** [October 23, 2019, 2:15pm UTC](https://discuss.elastic.co/t/input-kafka-the-decorate-events-option-overwrites-timestamp/204800 "2019-10-23T14:15:30Z")

</div>

Version: logstash-input-kafka (8.3.1) Operating System: Red Hat 7.2 Logstash: 6.8.1 I am using decorate\_event in my kafka input section. It works nicely but unfortunatly, in combination with codec json, I lost @timest…

---

## [Watcher setting up alerts for kibana dashboard](https://discuss.elastic.co/t/watcher-setting-up-alerts-for-kibana-dashboard/204273)

<div class="topic-metadata">

**Author:** [@kingkranthi](https://discuss.elastic.co/u/kingkranthi)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 2:11pm UTC](https://discuss.elastic.co/t/watcher-setting-up-alerts-for-kibana-dashboard/204273 "2019-10-23T14:11:58Z")

</div>

Create a new threshold alert I'm trying to setup an alert if A is more than 80% of A,B & C using watcher in ELK. I'm able to get the percentage of it using pie graph in dashboard using split keyword. Please help me in …

---

## [Limit Saved Object Permissions](https://discuss.elastic.co/t/limit-saved-object-permissions/204667)

<div class="topic-metadata">

**Author:** [@j\_a\_griffiths](https://discuss.elastic.co/u/j_a_griffiths)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 2:11pm UTC](https://discuss.elastic.co/t/limit-saved-object-permissions/204667 "2019-10-23T14:11:24Z")

</div>

I would like to allow users the ability to delete saved searches. From what I see this needs to be done via the Saved Object Management Screen, is there a way to limit them to be able to just delete search saved objects …

---

## [Некорректное отображение данных в kibana](https://discuss.elastic.co/t/kibana/204609)

<div class="topic-metadata">

**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\
**Replies:** 5\
**Last updated:** [October 23, 2019, 2:02pm UTC](https://discuss.elastic.co/t/kibana/204609 "2019-10-23T14:02:00Z")

</div>

Есть массив, каждый элемент которого выглядит следующим образом: t \_id htqe7m0BSOdvtuXlL\_IK t \_index currency\_data # \_score - t \_type …

---

## [Logstash 7.3 question about multiple outputs](https://discuss.elastic.co/t/logstash-7-3-question-about-multiple-outputs/204877)

<div class="topic-metadata">

**Author:** [@robroy](https://discuss.elastic.co/u/robroy)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 1:58pm UTC](https://discuss.elastic.co/t/logstash-7-3-question-about-multiple-outputs/204877 "2019-10-23T13:58:59Z")

</div>

Hi All :wink: I have a pipeline in which I would like to perform a s3 backup in an output in logstash. My source event has "role" and "type" fields among others. In "filter" part of my config I have this: filter { m…

---

## [Enable to deploy kibana using ECK v1beta1](https://discuss.elastic.co/t/enable-to-deploy-kibana-using-eck-v1beta1/204871)

<div class="topic-metadata">

**Author:** [@kusmanjali\_jenamoni](https://discuss.elastic.co/u/kusmanjali_jenamoni)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 1:55pm UTC](https://discuss.elastic.co/t/enable-to-deploy-kibana-using-eck-v1beta1/204871 "2019-10-23T13:55:16Z")

</div>

I am trying to deploy Elasticsearch and Kibana using ECK operator v1beta1 on a private kubernetes deployment. I am following https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-overview.html The yaml files are use…

---

## [Logstash plugin error while running with config file](https://discuss.elastic.co/t/logstash-plugin-error-while-running-with-config-file/204860)

<div class="topic-metadata">

**Author:** [@manu4387](https://discuss.elastic.co/u/manu4387)\
**Replies:** 7\
**Last updated:** [October 23, 2019, 1:49pm UTC](https://discuss.elastic.co/t/logstash-plugin-error-while-running-with-config-file/204860 "2019-10-23T13:49:42Z")

</div>

I am getting this error while running the github plugin in logstash. Plugin: \<LogStash::Inputs::GitHub id=\>"a8d9de94a4535953974b37dedbea2c29254692fa33ebd1b70372cf8413e435f2", port=\>22, secret\_token=\>"3e27bb366ae773d231a…

---

## [NavBar ExtensionsRegistryProvider stopped working in kibana 7.4](https://discuss.elastic.co/t/navbar-extensionsregistryprovider-stopped-working-in-kibana-7-4/204872)

<div class="topic-metadata">

**Author:** [@Sincore](https://discuss.elastic.co/u/Sincore)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 1:49pm UTC](https://discuss.elastic.co/t/navbar-extensionsregistryprovider-stopped-working-in-kibana-7-4/204872 "2019-10-23T13:49:28Z")

</div>

Does anyone know if the function for NavBarExtensionsRegistryProvider changed in 7.4? my code worked in 7.2 and looked like this: function navbarButtonProvider(Private, $location, dashboardConfig) { //discover, visuali…

---

## [Debugging Slow queries](https://discuss.elastic.co/t/debugging-slow-queries/204880)

<div class="topic-metadata">

**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 1:32pm UTC](https://discuss.elastic.co/t/debugging-slow-queries/204880 "2019-10-23T13:32:06Z")

</div>

Some queries are taking a very long time, from 8 to 24 seconds. I suspect a node is suffering from network throttling, but it is anyone's guess. Is there an option to request more diagnostic information about each node…

---

## [Unable to connect to database. Tried 1 times {:error\_message=\>"Java::JavaLang::NoClassDefFoundError: javax/xml/bind/DatatypeConverter"](https://discuss.elastic.co/t/unable-to-connect-to-database-tried-1-times-error-message-java-javax-xml-bind-datatypeconverter/200901)

<div class="topic-metadata">

**Author:** [@raquelg](https://discuss.elastic.co/u/raquelg)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 1:21pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-database-tried-1-times-error-message-java-javax-xml-bind-datatypeconverter/200901 "2019-10-23T13:21:47Z")

</div>

Hi, I am trying to move a table form SQL Server to ElasticSearch with Logstash I have installed elasticsearch and logstash 7.3.1 with docker-compose. pipeline/logstash has the following configuration: input { tcp { …

---

## [How is checkbox controls add Options List in the Controls widget in Visualizations](https://discuss.elastic.co/t/how-is-checkbox-controls-add-options-list-in-the-controls-widget-in-visualizations/204371)

<div class="topic-metadata">

**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 1:20pm UTC](https://discuss.elastic.co/t/how-is-checkbox-controls-add-options-list-in-the-controls-widget-in-visualizations/204371 "2019-10-23T13:20:53Z")

</div>

KİBANA-VİSUALİZE -CONTROLS I wait answer

---

## [Replace the kibana logo in version 7.4](https://discuss.elastic.co/t/replace-the-kibana-logo-in-version-7-4/204161)

<div class="topic-metadata">

**Author:** [@stanzin\_kadol](https://discuss.elastic.co/u/stanzin_kadol)\
**Replies:** 8\
**Last updated:** [October 23, 2019, 1:18pm UTC](https://discuss.elastic.co/t/replace-the-kibana-logo-in-version-7-4/204161 "2019-10-23T13:18:54Z")

</div>

/src/ui/public/images/kibana.svg This path does'nt exist in kibana version 7.4. There is a file named commons.style.css in /usr/share/kibana/optimize/bundles in which def : src image - url of mapbox is there but not of k…

---

## [Create map using longitude and latitude coordinates](https://discuss.elastic.co/t/create-map-using-longitude-and-latitude-coordinates/204696)

<div class="topic-metadata">

**Author:** [@computer\_engineer](https://discuss.elastic.co/u/computer_engineer)\
**Replies:** 6\
**Last updated:** [October 23, 2019, 1:05pm UTC](https://discuss.elastic.co/t/create-map-using-longitude-and-latitude-coordinates/204696 "2019-10-23T13:05:56Z")

</div>

I have data coming into elastic that contains the longitude, latitude and even altitude points. I would like to have these plotted on a coordinate map in kibana. Search results showed I need to map another field that is …

---

## [Query child documents, with values from child and parent document](https://discuss.elastic.co/t/query-child-documents-with-values-from-child-and-parent-document/204614)

<div class="topic-metadata">

**Author:** [@Java\_Developet](https://discuss.elastic.co/u/Java_Developet)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 12:53pm UTC](https://discuss.elastic.co/t/query-child-documents-with-values-from-child-and-parent-document/204614 "2019-10-23T12:53:16Z")

</div>

Hello. Lets say I have made an index of books. Each book has a name and a publish date. Each book also has a list of users that have read the said book. These users have an username and a birthday date. The mapping wou…

---

## [Parsing xml parameters & values separated on new line](https://discuss.elastic.co/t/parsing-xml-parameters-values-separated-on-new-line/204823)

<div class="topic-metadata">

**Author:** [@Vijay\_Gharge](https://discuss.elastic.co/u/Vijay_Gharge)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 12:52pm UTC](https://discuss.elastic.co/t/parsing-xml-parameters-values-separated-on-new-line/204823 "2019-10-23T12:52:10Z")

</div>

Hi, I am trying to parse below xml file wherein parameter name & value is covered in 2 different tags. I am looking for guidance on how to parse this xml data using logstash ? \<values\> \<id1\>parameter-1\</id1\> \<id\>10\</id\>…

---

## [\_grokparsefailure while creating field using grok filter](https://discuss.elastic.co/t/grokparsefailure-while-creating-field-using-grok-filter/204729)

<div class="topic-metadata">

**Author:** [@Vishal\_Sharma4](https://discuss.elastic.co/u/Vishal_Sharma4)\
**Replies:** 5\
**Last updated:** [October 23, 2019, 12:39pm UTC](https://discuss.elastic.co/t/grokparsefailure-while-creating-field-using-grok-filter/204729 "2019-10-23T12:39:19Z")

</div>

Hi , I am new on logstash , I have created grok pattern for below mentioned tomcat access logs. 10.0.6.35 - - \[21/Oct/2019:00:00:21 +0000\] "GET /rest/V1/productlist/category/4/ar/18/20 HTTP/1.1" 200 15917 25 My logsta…

---

## [How to summarize or join index with different kind of data structure](https://discuss.elastic.co/t/how-to-summarize-or-join-index-with-different-kind-of-data-structure/204818)

<div class="topic-metadata">

**Author:** [@elserhumano](https://discuss.elastic.co/u/elserhumano)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 8:11am UTC](https://discuss.elastic.co/t/how-to-summarize-or-join-index-with-different-kind-of-data-structure/204818 "2019-10-23T08:11:15Z")

</div>

Hello, As part of a project or rather as a proof of concept, we are trying to take data from two inventory systems, Ocs and Altiris to link them with Active Directory logs. In Ocs and Altiris I have the inventory of my…

---

## [How to avoid single line events in filebeat multiline configuration](https://discuss.elastic.co/t/how-to-avoid-single-line-events-in-filebeat-multiline-configuration/204839)

<div class="topic-metadata">

**Author:** [@ajojohnk](https://discuss.elastic.co/u/ajojohnk)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 12:17pm UTC](https://discuss.elastic.co/t/how-to-avoid-single-line-events-in-filebeat-multiline-configuration/204839 "2019-10-23T12:17:45Z")

</div>

Hi I've a simple xml file which has this format Here, i succeded in extracting events at the object level using multiline. But, along with it for each line of the xml file where it finds a "\\n" it also fires a …

---

## [Split Function in Painless](https://discuss.elastic.co/t/split-function-in-painless/204728)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 12:02pm UTC](https://discuss.elastic.co/t/split-function-in-painless/204728 "2019-10-23T12:02:44Z")

</div>

Hi- I have a field name (Testjob/admin/pipeline#1) getting injected in the Elasticsearch, I'd like to split the field name by ('/') and take the last index value which is (pipeline#1) and show the field names on the gra…

---

## [Create geo\_points using script fields](https://discuss.elastic.co/t/create-geo-points-using-script-fields/204630)

<div class="topic-metadata">

**Author:** [@AstroSlazak](https://discuss.elastic.co/u/AstroSlazak)\
**Replies:** 3\
**Last updated:** [October 23, 2019, 7:47am UTC](https://discuss.elastic.co/t/create-geo-points-using-script-fields/204630 "2019-10-23T07:47:55Z")

</div>

Hi, I'm working on problem where i get a message: "DateTime:22.10.2019 10.24.15,Longitude:10,3315497,Latitude:63,3504556,Bearing:0" and trying to get location from it and show it on map. But now i have a problem, i am …

---

## [Import button grayed out for CSV import](https://discuss.elastic.co/t/import-button-grayed-out-for-csv-import/204825)

<div class="topic-metadata">

**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 11:15am UTC](https://discuss.elastic.co/t/import-button-grayed-out-for-csv-import/204825 "2019-10-23T11:15:26Z")

</div>

I'm unable to find the right permissions to grant a user to let them import CSV files in Kibana. The user can load the CSV and visualize the data, but the "Import" button is grayed out and can't be clicked: The but…

---

## [How to install elatsic seach curator when working wth docker](https://discuss.elastic.co/t/how-to-install-elatsic-seach-curator-when-working-wth-docker/204844)

<div class="topic-metadata">

**Author:** [@Prafull](https://discuss.elastic.co/u/Prafull)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 11:09am UTC](https://discuss.elastic.co/t/how-to-install-elatsic-seach-curator-when-working-wth-docker/204844 "2019-10-23T11:09:15Z")

</div>

Hi, I have started the elastic search via docker, now I wanna take snapshot via curator. When I am trying to create repository via curl -X PUT "http://127.0.0.1:9200/\_snapshot/s3autosnapshots" -H 'Content-Type: applica…

---

## [Circuit\_breaking\_exception during reindex](https://discuss.elastic.co/t/circuit-breaking-exception-during-reindex/198255)

<div class="topic-metadata">

**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\
**Replies:** 21\
**Last updated:** [October 23, 2019, 11:04am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-during-reindex/198255 "2019-10-23T11:04:15Z")

</div>

We've started getting frequent circuit breaker exceptions in our cluster, and I need some advice on how to tackle our situation. I've read up on circuit breakers, read lots of posts on the topic, but I'm still not sure w…

---

## [Does elastic remembers most recently indexed documents?](https://discuss.elastic.co/t/does-elastic-remembers-most-recently-indexed-documents/202815)

<div class="topic-metadata">

**Author:** [@Tinkerbell](https://discuss.elastic.co/u/Tinkerbell)\
**Replies:** 9\
**Last updated:** [October 23, 2019, 11:04am UTC](https://discuss.elastic.co/t/does-elastic-remembers-most-recently-indexed-documents/202815 "2019-10-23T11:04:08Z")

</div>

I have a requirement in which i need to update the indexed data. Based on the value from the recent document , i need to update the current document. Ex: similar to a counter. Can someone pour in some suggestions pleas…

---

## [How can i get client source log path same filebeat](https://discuss.elastic.co/t/how-can-i-get-client-source-log-path-same-filebeat/204762)

<div class="topic-metadata">

**Author:** [@Hoang\_Duy1](https://discuss.elastic.co/u/Hoang_Duy1)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 11:02am UTC](https://discuss.elastic.co/t/how-can-i-get-client-source-log-path-same-filebeat/204762 "2019-10-23T11:02:33Z")

</div>

I need create field "LogPath" to get location of log path.. like field log.file.path in filbeat but i dont know how filebeat do that. Pls help me!! My input from UDP

---

## [Speeding up "more\_like\_this" query](https://discuss.elastic.co/t/speeding-up-more-like-this-query/204841)

<div class="topic-metadata">

**Author:** [@arshad\_javeed](https://discuss.elastic.co/u/arshad_javeed)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 10:51am UTC](https://discuss.elastic.co/t/speeding-up-more-like-this-query/204841 "2019-10-23T10:51:56Z")

</div>

Hi, I was interested in fetching similar documents for a given input document (similar to KNN). Since I'm dealing with only text fields, I went ahead with using more\_like\_this query, which does the job for text fields. …

---

## [Beats Mass installation](https://discuss.elastic.co/t/beats-mass-installation/204620)

<div class="topic-metadata">

**Author:** [@a.gavric](https://discuss.elastic.co/u/a.gavric)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 10:47am UTC](https://discuss.elastic.co/t/beats-mass-installation/204620 "2019-10-23T10:47:03Z")

</div>

Hello Everyone, i am preparing for a Production deployment for elasticstack that will be used for Centralized Log-management. Now the question i have is one i was unable to find an answer for and is as follows: Is there …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1822)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1824)
