# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1899

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1900

---

## [How fix “Failed to import index-pattern”](https://discuss.elastic.co/t/how-fix-failed-to-import-index-pattern/199020)

<div class="topic-metadata">

**Author:** [@111209](https://discuss.elastic.co/u/111209)\
**Replies:** 7\
**Last updated:** [September 13, 2019, 12:50pm UTC](https://discuss.elastic.co/t/how-fix-failed-to-import-index-pattern/199020 "2019-09-13T12:50:25Z")

</div>

When i\`m try setup metricbeat dashboard i get error. i run this command: // metricbeat setup --dashboards and got this error: metricbeat setup --dashboards Loading dashboards (Kibana must be running and reachable) Ex…

---

## [Schema error: extra keys not allowed @ data\['action'\] using curator for rollover api](https://discuss.elastic.co/t/schema-error-extra-keys-not-allowed-data-action-using-curator-for-rollover-api/197072)

<div class="topic-metadata">

**Author:** [@yestoprince](https://discuss.elastic.co/u/yestoprince)\
**Replies:** 8\
**Last updated:** [September 13, 2019, 12:47pm UTC](https://discuss.elastic.co/t/schema-error-extra-keys-not-allowed-data-action-using-curator-for-rollover-api/197072 "2019-09-13T12:47:46Z")

</div>

action file action: rollover description: \>- Rollover the index associated with alias 'aliasname', which should be in the form of prefix-YYYY.MM.DD-1. options: name: aliasname new\_indices: "\<logstash-{now/d{YYYY.M…

---

## [Terms aggregation by field, but shows another field in Kibana](https://discuss.elastic.co/t/terms-aggregation-by-field-but-shows-another-field-in-kibana/198430)

<div class="topic-metadata">

**Author:** [@gferrette](https://discuss.elastic.co/u/gferrette)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 12:30pm UTC](https://discuss.elastic.co/t/terms-aggregation-by-field-but-shows-another-field-in-kibana/198430 "2019-09-13T12:30:23Z")

</div>

Hello, I have the sample data below and i want to know if is it possible to make a Terms aggregation in Kibana by the field "codigo", but showing on the chart the field "nome". For example, with the sample data below …

---

## [Monitors not showing in Uptime](https://discuss.elastic.co/t/monitors-not-showing-in-uptime/198243)

<div class="topic-metadata">

**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 12:28pm UTC](https://discuss.elastic.co/t/monitors-not-showing-in-uptime/198243 "2019-09-13T12:28:06Z")

</div>

I have an index with name "heartbeat-something". In the considerations for uptime it's said, that uptime requires an index pattern called "heartbeat-7\*". https://www.elastic.co/guide/en/uptime/current/install-heartbeat.h…

---

## [Kibana is slowly reponsing](https://discuss.elastic.co/t/kibana-is-slowly-reponsing/198402)

<div class="topic-metadata">

**Author:** [@zbawio](https://discuss.elastic.co/u/zbawio)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 12:20pm UTC](https://discuss.elastic.co/t/kibana-is-slowly-reponsing/198402 "2019-09-13T12:20:01Z")

</div>

Hi all, I have 57.000 documents in a 1 index (1 shard and 1 replicas). total size of index is 1.2 gb but my logs are so long i mean 1 document has 120 -150 k characters or more. my elasticsearch is using 8gb of ram a…

---

## [RestHighLevelClient & http.compression for gzip](https://discuss.elastic.co/t/resthighlevelclient-http-compression-for-gzip/199155)

<div class="topic-metadata">

**Author:** [@kiran\_reddy1](https://discuss.elastic.co/u/kiran_reddy1)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 11:36am UTC](https://discuss.elastic.co/t/resthighlevelclient-http-compression-for-gzip/199155 "2019-09-13T11:36:40Z")

</div>

Hi , Trying to enable http.compression on elasticsearch but the response is not able to parse through handlers on RestHighLevelClient. Error : Caused by: com.fasterxml.jackson.core.JsonParseException: Illegal charact…

---

## [How to Setup Frequency on Alerts/Watcher?](https://discuss.elastic.co/t/how-to-setup-frequency-on-alerts-watcher/199411)

<div class="topic-metadata">

**Author:** [@sonal\_singh](https://discuss.elastic.co/u/sonal_singh)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 11:34am UTC](https://discuss.elastic.co/t/how-to-setup-frequency-on-alerts-watcher/199411 "2019-09-13T11:34:59Z")

</div>

Here is a scenario: I have setup a watcher which runs every hour searching a "keyword", and if the occurrence of this keyword is more than "100" then it sends an alert. Now it could be possible I am receiving it every …

---

## [Storing dependency trees as materialized paths in ES, and search for them with Regex](https://discuss.elastic.co/t/storing-dependency-trees-as-materialized-paths-in-es-and-search-for-them-with-regex/199413)

<div class="topic-metadata">

**Author:** [@Gianca](https://discuss.elastic.co/u/Gianca)\
**Replies:** 0\
**Last updated:** [September 13, 2019, 10:55am UTC](https://discuss.elastic.co/t/storing-dependency-trees-as-materialized-paths-in-es-and-search-for-them-with-regex/199413 "2019-09-13T10:55:40Z")

</div>

Hello all, I'd like to share what I'm doing and hopefully get feedback to know if I'm on the right way. We process some text, and for each sentence, we get a tree representing the sentence structure, like the image belo…

---

## [Aggregate Value based on 2 Date/ time fields](https://discuss.elastic.co/t/aggregate-value-based-on-2-date-time-fields/199347)

<div class="topic-metadata">

**Author:** [@christeven94](https://discuss.elastic.co/u/christeven94)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 11:19am UTC](https://discuss.elastic.co/t/aggregate-value-based-on-2-date-time-fields/199347 "2019-09-13T11:19:44Z")

</div>

Hi I have a data set with 2 different time fields (Start Time and End Time), and 1 count value. Let Say I have Start Time - End Time - Count 6.00 - 8.00 - 5 7.00 - 9.00 …

---

## [Dynamic mapping: Confusing type inference behaviour](https://discuss.elastic.co/t/dynamic-mapping-confusing-type-inference-behaviour/197371)

<div class="topic-metadata">

**Author:** [@timost](https://discuss.elastic.co/u/timost)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 11:17am UTC](https://discuss.elastic.co/t/dynamic-mapping-confusing-type-inference-behaviour/197371 "2019-09-13T11:17:32Z")

</div>

Hi, I'm using Elasticsearch 6.8.2. I've been playing with mappings and I've stumbled across this behavior for which I can't find an explanation: # Step 0: Creating an index with dynamic mappings enabled PUT /test-data…

---

## [Custom web and other stuffs in Kibana](https://discuss.elastic.co/t/custom-web-and-other-stuffs-in-kibana/199394)

<div class="topic-metadata">

**Author:** [@Donny\_Nightfrost](https://discuss.elastic.co/u/Donny_Nightfrost)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 11:13am UTC](https://discuss.elastic.co/t/custom-web-and-other-stuffs-in-kibana/199394 "2019-09-13T11:13:41Z")

</div>

Greetings, I'm currently working on making ELK as SIEM and was wondering: is there a way for my custom web to appear on Kibana? The custom web is used to insert and view entries from database. Right clicking on logs an…

---

## [CreateIndexRequest is failing](https://discuss.elastic.co/t/createindexrequest-is-failing/199415)

<div class="topic-metadata">

**Author:** [@lucabes](https://discuss.elastic.co/u/lucabes)\
**Replies:** 0\
**Last updated:** [September 13, 2019, 11:13am UTC](https://discuss.elastic.co/t/createindexrequest-is-failing/199415 "2019-09-13T11:13:23Z")

</div>

I have problem with create index. Using ELK 7.3 Getting error: MapperParsingException\[Failed to parse mapping \[properties\]: Root mapping definition has unsupported parameters: on request: CreateIndexRequest request =…

---

## [Query To Compare Two Columns From Two Different Indexes](https://discuss.elastic.co/t/query-to-compare-two-columns-from-two-different-indexes/198341)

<div class="topic-metadata">

**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 11:04am UTC](https://discuss.elastic.co/t/query-to-compare-two-columns-from-two-different-indexes/198341 "2019-09-13T11:04:21Z")

</div>

I have a Column in one Index with a number of Countries in it, I want to check whether these countries are similar or same as the countries in the Column in another index. So it is like, in one index we have user data w…

---

## [How to use Central Management Pipelines without specifying pipeline id and restarting logstash](https://discuss.elastic.co/t/how-to-use-central-management-pipelines-without-specifying-pipeline-id-and-restarting-logstash/198333)

<div class="topic-metadata">

**Author:** [@rwatts3](https://discuss.elastic.co/u/rwatts3)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 11:03am UTC](https://discuss.elastic.co/t/how-to-use-central-management-pipelines-without-specifying-pipeline-id-and-restarting-logstash/198333 "2019-09-13T11:03:05Z")

</div>

Greetings, I am running an ELK stack using docker. I have configured logstash and kibana to enable the central management pipelines. Unfortunately when I create a new pipeline via the UI it doesn't seem to register un…

---

## [Create fields for data in Kibana](https://discuss.elastic.co/t/create-fields-for-data-in-kibana/198334)

<div class="topic-metadata">

**Author:** [@kvtang](https://discuss.elastic.co/u/kvtang)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 10:54am UTC](https://discuss.elastic.co/t/create-fields-for-data-in-kibana/198334 "2019-09-13T10:54:17Z")

</div>

Hi, Recently I just make some changes to the logstash and the new data that are flowing into Kibana comes with field. However, for the data that has already been inside Kibana, obviously it will not be affected by the …

---

## [Forum for development topics](https://discuss.elastic.co/t/forum-for-development-topics/198392)

<div class="topic-metadata">

**Author:** [@dantonag](https://discuss.elastic.co/u/dantonag)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 10:45am UTC](https://discuss.elastic.co/t/forum-for-development-topics/198392 "2019-09-13T10:45:26Z")

</div>

Hello, is there a topic specific on Kibana development? For example, to ask how to do a specific thing with code, architectural questions, etc. Thanks

---

## [Upload several csv files to kibana](https://discuss.elastic.co/t/upload-several-csv-files-to-kibana/198513)

<div class="topic-metadata">

**Author:** [@yaharin\_ben\_ayon](https://discuss.elastic.co/u/yaharin_ben_ayon)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 10:24am UTC](https://discuss.elastic.co/t/upload-several-csv-files-to-kibana/198513 "2019-09-13T10:24:09Z")

</div>

Hello, does anyone know how can i upload several csv files (i converted excel to csv) into kibana to work on the same dashboard? right now i can only upload one. Thank you.

---

## [How to set refresh\_interval globally in runing elastic search cluster](https://discuss.elastic.co/t/how-to-set-refresh-interval-globally-in-runing-elastic-search-cluster/199225)

<div class="topic-metadata">

**Author:** [@arun.kumar92](https://discuss.elastic.co/u/arun.kumar92)\
**Replies:** 10\
**Last updated:** [September 13, 2019, 10:20am UTC](https://discuss.elastic.co/t/how-to-set-refresh-interval-globally-in-runing-elastic-search-cluster/199225 "2019-09-13T10:20:52Z")

</div>

Hi Team Kindly help me to configure refresh\_interval settings globally in running elastic search cluster Kindly go through the below command, Which I used to setup refresh\_interval curl -X PUT -k -u elastic:xxxxxx "h…

---

## [Get EventLogFile - Salesforce input plugin](https://discuss.elastic.co/t/get-eventlogfile-salesforce-input-plugin/199401)

<div class="topic-metadata">

**Author:** [@Nelson\_Nunes](https://discuss.elastic.co/u/Nelson_Nunes)\
**Replies:** 0\
**Last updated:** [September 13, 2019, 9:31am UTC](https://discuss.elastic.co/t/get-eventlogfile-salesforce-input-plugin/199401 "2019-09-13T09:31:59Z")

</div>

Hi, input { salesforce { client\_id =\> 'XXXXXXXXXXXXXrEIKI89zOgB8e8Uo9PrZk..9jFs' client\_secret =\> '7C4D2BXXXXXXXXXXXXX' username =\> 'XXXXXXXXXXXXX@test-pkxswlXXXXXXXXXXXXX' password =\> 'XXXXXXXXXXXXX' security\_tok…

---

## [Logstash input kafka not reading messages from topic](https://discuss.elastic.co/t/logstash-input-kafka-not-reading-messages-from-topic/199395)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 9:30am UTC](https://discuss.elastic.co/t/logstash-input-kafka-not-reading-messages-from-topic/199395 "2019-09-13T09:30:43Z")

</div>

I am using kafka as message broker and writing and reading messages using logstash-6.3.1. Attached document shows all the configuration. I have producer pipeline, which creates messages in kafka and consumr pipeline w…

---

## [Not able to create certain possible indexes in kibana](https://discuss.elastic.co/t/not-able-to-create-certain-possible-indexes-in-kibana/199398)

<div class="topic-metadata">

**Author:** [@saddy](https://discuss.elastic.co/u/saddy)\
**Replies:** 0\
**Last updated:** [September 13, 2019, 9:12am UTC](https://discuss.elastic.co/t/not-able-to-create-certain-possible-indexes-in-kibana/199398 "2019-09-13T09:12:33Z")

</div>

Hi Team, I am using KIBANA UI to create index patterns for my work but getting error while creating some of them. Although we have matching indices it's not going to the step 2 where we have options to select @timestamp …

---

## [Not able to map Fields in NestedModel in Nest Search API](https://discuss.elastic.co/t/not-able-to-map-fields-in-nestedmodel-in-nest-search-api/198500)

<div class="topic-metadata">

**Author:** [@vikasnew](https://discuss.elastic.co/u/vikasnew)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 9:08am UTC](https://discuss.elastic.co/t/not-able-to-map-fields-in-nestedmodel-in-nest-search-api/198500 "2019-09-13T09:08:58Z")

</div>

Hello, i am facing issue while getting data from elasticsearch. i am using NEST client version 7.3. i have my data stored in elasticsearch in following format: { "\_index": "custom-index-dev", "\_type": "logevent", "…

---

## [Query String query limited to sentence](https://discuss.elastic.co/t/query-string-query-limited-to-sentence/199387)

<div class="topic-metadata">

**Author:** [@philv](https://discuss.elastic.co/u/philv)\
**Replies:** 0\
**Last updated:** [September 13, 2019, 8:22am UTC](https://discuss.elastic.co/t/query-string-query-limited-to-sentence/199387 "2019-09-13T08:22:46Z")

</div>

Hi All, I have a use case where I'd like to be able to use the mini language , or at least the boolean operator parser of the query string query on a document level or a sentence level. I can define sentences easily en…

---

## [Sort on collapsed best inner\_hit document field value](https://discuss.elastic.co/t/sort-on-collapsed-best-inner-hit-document-field-value/199284)

<div class="topic-metadata">

**Author:** [@ludovic\_boutros](https://discuss.elastic.co/u/ludovic_boutros)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 7:38am UTC](https://discuss.elastic.co/t/sort-on-collapsed-best-inner-hit-document-field-value/199284 "2019-09-13T07:38:19Z")

</div>

Hi all, I have documents which must be collapsed. I would like to sort the global result on a field of the best first document of each group. For instance : { "took" : 49, "timed\_out" : false, "\_shards" : { …

---

## [Gem file Error](https://discuss.elastic.co/t/gem-file-error/199379)

<div class="topic-metadata">

**Author:** [@Vineeth\_Ananthula1](https://discuss.elastic.co/u/Vineeth_Ananthula1)\
**Replies:** 0\
**Last updated:** [September 13, 2019, 7:25am UTC](https://discuss.elastic.co/t/gem-file-error/199379 "2019-09-13T07:25:32Z")

</div>

We are unable to start logstash due to gemfile error \[ERROR\] 2019-09-13 12:52:22.884 \[main\] Logstash - java.lang.IllegalStateException: Logstash stopped processing because of an error: (GemNotFound) Could not find publi…

---

## [How do we know logstash is reading from dead letter queue or not](https://discuss.elastic.co/t/how-do-we-know-logstash-is-reading-from-dead-letter-queue-or-not/199378)

<div class="topic-metadata">

**Author:** [@yestoprince](https://discuss.elastic.co/u/yestoprince)\
**Replies:** 0\
**Last updated:** [September 13, 2019, 7:24am UTC](https://discuss.elastic.co/t/how-do-we-know-logstash-is-reading-from-dead-letter-queue-or-not/199378 "2019-09-13T07:24:40Z")

</div>

Hi, I have added a input pipeline to read from dead queue then i restart the logstash and there is no error in logs but don't know if it is reading from dead queue or not. by the way there is no change in the size of dea…

---

## [ELK 7 with shards failing](https://discuss.elastic.co/t/elk-7-with-shards-failing/199171)

<div class="topic-metadata">

**Author:** [@bcochofel](https://discuss.elastic.co/u/bcochofel)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 7:18am UTC](https://discuss.elastic.co/t/elk-7-with-shards-failing/199171 "2019-09-13T07:18:42Z")

</div>

Hi, I'm using Elk 7.3 and installed filebeat on a few linux servers. Now on kibana it appears N shards of NN failing when I open a dashboard. How can I solve this issue? Thanks, Bruno

---

## [How to embed kibana 6.8 within an iframe](https://discuss.elastic.co/t/how-to-embed-kibana-6-8-within-an-iframe/199277)

<div class="topic-metadata">

**Author:** [@amanciao](https://discuss.elastic.co/u/amanciao)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 7:12am UTC](https://discuss.elastic.co/t/how-to-embed-kibana-6-8-within-an-iframe/199277 "2019-09-13T07:12:16Z")

</div>

I want to wrap kibana 6.8 within an Iframe so that I can have navbar with my own logo.

---

## [Specifying template using Order](https://discuss.elastic.co/t/specifying-template-using-order/199376)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 0\
**Last updated:** [September 13, 2019, 7:05am UTC](https://discuss.elastic.co/t/specifying-template-using-order/199376 "2019-09-13T07:05:14Z")

</div>

Hi, When specifying the template file in logstash is it possible to utilise multiple template files using the Order functionality within the templates, i was looking to build a base template then branch that off with ex…

---

## [Canvas Chained Elasticsearch SQL Queries](https://discuss.elastic.co/t/canvas-chained-elasticsearch-sql-queries/199274)

<div class="topic-metadata">

**Author:** [@wmcleod](https://discuss.elastic.co/u/wmcleod)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 7:04am UTC](https://discuss.elastic.co/t/canvas-chained-elasticsearch-sql-queries/199274 "2019-09-13T07:04:54Z")

</div>

Hi, I am trying to create a canvas visualisation that displays a line chart with data for the last 1 hour containing CPU metrics only from servers that have breached a CPU threshold at least once in the last 1 hour. I …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1898)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1900)
