# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1943 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1944 --- ## [Troubles to apply aggregation on search](https://discuss.elastic.co/t/troubles-to-apply-aggregation-on-search/193222)
**Author:** [@Leonardo\_Antonio](https://discuss.elastic.co/u/Leonardo_Antonio)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 10:45pm UTC](https://discuss.elastic.co/t/troubles-to-apply-aggregation-on-search/193222 "2019-08-22T22:45:48Z")
I'm working with a stock entity and it's updated every 30 minutes. So I'm loading on elastic every modification of stock entity. With this information I can create a stocklevel view but when I try to create the last sta… --- ## [Kibana show No legend for all visualizations multi edit](https://discuss.elastic.co/t/kibana-show-no-legend-for-all-visualizations-multi-edit/193208)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 10:41pm UTC](https://discuss.elastic.co/t/kibana-show-no-legend-for-all-visualizations-multi-edit/193208 "2019-08-22T22:41:19Z")
I have multiple visualizations in a dashboard. All of my visualizations are created using visual builder. I see I have an option that I can choose not to show the legend by default. Just change the show legend to "off" … --- ## [Easiest way to export query results for importing to an independent elasticsearch instance](https://discuss.elastic.co/t/easiest-way-to-export-query-results-for-importing-to-an-independent-elasticsearch-instance/196318)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 10:35pm UTC](https://discuss.elastic.co/t/easiest-way-to-export-query-results-for-importing-to-an-independent-elasticsearch-instance/196318 "2019-08-22T22:35:34Z")
Hi, Our customer is running our application on premise in his own datacenter. If there are any issues / bugs, we ask him for grepping information from logfiles and to deliver these snippets to us for analysis and bugfix… --- ## [How to handle partial updates concurrency](https://discuss.elastic.co/t/how-to-handle-partial-updates-concurrency/196374)
**Author:** [@vncsalencar](https://discuss.elastic.co/u/vncsalencar)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 9:59pm UTC](https://discuss.elastic.co/t/how-to-handle-partial-updates-concurrency/196374 "2019-08-22T21:59:51Z")
Hi there! I've got a problem. How should one deal with partial updates concurrency? I mean... what if, for instance, update the same field of a document and my request arrives unorderly (at the wrong order, meaning a o… --- ## [Logstash converting data from a flattened table from a SQL query into JSON inner object](https://discuss.elastic.co/t/logstash-converting-data-from-a-flattened-table-from-a-sql-query-into-json-inner-object/196403)
**Author:** [@aohsie](https://discuss.elastic.co/u/aohsie)\ **Replies:** 4\ **Last updated:** [August 22, 2019, 9:55pm UTC](https://discuss.elastic.co/t/logstash-converting-data-from-a-flattened-table-from-a-sql-query-into-json-inner-object/196403 "2019-08-22T21:55:58Z")
I'm looking to index flattened data into Elasticsearch without creating duplicate data. For example, if a person has multiple cars, then a flattened table will look something like this: | Name | Car … --- ## [Revisiting a possible Kibana enhancement](https://discuss.elastic.co/t/revisiting-a-possible-kibana-enhancement/196204)
**Author:** [@marbleRye](https://discuss.elastic.co/u/marbleRye)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 9:50pm UTC](https://discuss.elastic.co/t/revisiting-a-possible-kibana-enhancement/196204 "2019-08-22T21:50:14Z")
This question was proposed a couple years ago (here) and I'm curious if an enhancement was ever made. I am having almost the exact problem the OP discussed: the inability to visualize a nested geo\_point (i.e., coordinate… --- ## [Adding an Id into an array field and split filter](https://discuss.elastic.co/t/adding-an-id-into-an-array-field-and-split-filter/196223)
**Author:** [@manunc](https://discuss.elastic.co/u/manunc)\ **Replies:** 2\ **Last updated:** [August 22, 2019, 9:40pm UTC](https://discuss.elastic.co/t/adding-an-id-into-an-array-field-and-split-filter/196223 "2019-08-22T21:40:41Z")
Hello, I have a event that I want to split in 2 because the field 'object.Voie' is a json array composed of 2 item. When splitting the document I miss one information, I need to add an Id corresponding to the index of … --- ## [Trying to search field name with the wildcard on kibana visualisation](https://discuss.elastic.co/t/trying-to-search-field-name-with-the-wildcard-on-kibana-visualisation/196306)
**Author:** [@Aamir\_A](https://discuss.elastic.co/u/Aamir_A)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 9:27pm UTC](https://discuss.elastic.co/t/trying-to-search-field-name-with-the-wildcard-on-kibana-visualisation/196306 "2019-08-22T21:27:23Z")
Hello, We are trying to creating a sample visualiser based on wildcard field name. We have below sample data. { "\_index" : "bitbucket", "\_type" : "pr", "\_id" : "6MX7t2wBin-1xMwjuoah", "… --- ## [Compare 2 documents in same index](https://discuss.elastic.co/t/compare-2-documents-in-same-index/196227)
**Author:** [@tannaga](https://discuss.elastic.co/u/tannaga)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 9:18pm UTC](https://discuss.elastic.co/t/compare-2-documents-in-same-index/196227 "2019-08-22T21:18:53Z")
Is there a way 2 documents in the same index be compared and the diff highlighted? For example, lets say a resource has gone through multiple updates. compare 2 revisions of this resource to find out what changed. Base… --- ## [Sum Aggregation on present and last year](https://discuss.elastic.co/t/sum-aggregation-on-present-and-last-year/193176)
**Author:** [@Venkata\_Naresh](https://discuss.elastic.co/u/Venkata_Naresh)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 8:58pm UTC](https://discuss.elastic.co/t/sum-aggregation-on-present-and-last-year/193176 "2019-08-22T20:58:17Z")
I have a Kibana table which contains year wise sales data. Now I want to add a new column which should contain the sum of sales of selected month to current month in the previous year. Ex: The table contains all the sal… --- ## [Keeping duplicates](https://discuss.elastic.co/t/keeping-duplicates/196337)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 4\ **Last updated:** [August 22, 2019, 8:35pm UTC](https://discuss.elastic.co/t/keeping-duplicates/196337 "2019-08-22T20:35:13Z")
Hi, Is there anyway to keep duplicate rows as they are and maybe include a number which differentiates them. The duplicate records aren't necessarily duplicates so much as they are multiple instances of the same item. T… --- ## [Pie chart or vertical bar](https://discuss.elastic.co/t/pie-chart-or-vertical-bar/196385)
**Author:** [@mouli](https://discuss.elastic.co/u/mouli)\ **Replies:** 5\ **Last updated:** [August 22, 2019, 8:30pm UTC](https://discuss.elastic.co/t/pie-chart-or-vertical-bar/196385 "2019-08-22T20:30:53Z")
Hi, I am very new to Kibana. I have a use case where we have to get a bar or pie chart and below are the values for one of the attribute requested.path is: google.com/images google.com/images/a google.com/images/b go… --- ## [Saved search. Is minimum column width before breaking the line configurable?](https://discuss.elastic.co/t/saved-search-is-minimum-column-width-before-breaking-the-line-configurable/196356)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 8:23pm UTC](https://discuss.elastic.co/t/saved-search-is-minimum-column-width-before-breaking-the-line-configurable/196356 "2019-08-22T20:23:04Z")
Hi, when I want to show many columns in a kibana search, kibana is entering newlines and truncating the context. Is it configureable to set a minimum width of a column and and is it possible do define the max number … --- ## [Bulk insert to Elastic from Logstash "bulk\_path"](https://discuss.elastic.co/t/bulk-insert-to-elastic-from-logstash-bulk-path/196352)
**Author:** [@baselai](https://discuss.elastic.co/u/baselai)\ **Replies:** 5\ **Last updated:** [August 22, 2019, 7:42pm UTC](https://discuss.elastic.co/t/bulk-insert-to-elastic-from-logstash-bulk-path/196352 "2019-08-22T19:42:12Z")
I have a huge csv file, like 500k rows, that I'm processing and want to push to elastic This output: elasticsearch { index =\> "%{pipelineId}" hosts =\> \["${domain:port}/"\] } outputs one document at … --- ## [Add ID as one of the columns (index page)](https://discuss.elastic.co/t/add-id-as-one-of-the-columns-index-page/196371)
**Author:** [@shanekm](https://discuss.elastic.co/u/shanekm)\ **Replies:** 3\ **Last updated:** [August 22, 2019, 7:38pm UTC](https://discuss.elastic.co/t/add-id-as-one-of-the-columns-index-page/196371 "2019-08-22T19:38:28Z")
I've set up everything and it's working. However my urls for heartbeat are pretty long (under ID drop down) ex: http://myservertocheck.uat.net:19081/QA/Configuration.Service/Status.Api/api/application/status/QA.Configu… --- ## [Not able to create index(with geo\_point mapping) in elasticsearch 7.3.0](https://discuss.elastic.co/t/not-able-to-create-index-with-geo-point-mapping-in-elasticsearch-7-3-0/196002)
**Author:** [@Hs\_Kishore](https://discuss.elastic.co/u/Hs_Kishore)\ **Replies:** 3\ **Last updated:** [August 22, 2019, 7:00pm UTC](https://discuss.elastic.co/t/not-able-to-create-index-with-geo-point-mapping-in-elasticsearch-7-3-0/196002 "2019-08-22T19:00:48Z")
Hi, Here is the curl command that I'm using to create an index with geo\_point mapping in elasticsearch. The command works fine in elasticsearch 6.8.2, but fails to execute in 7.3.0. command: curl -H "Content-Type: app… --- ## [Timezone Precedence in Date Filter](https://discuss.elastic.co/t/timezone-precedence-in-date-filter/196380)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 2\ **Last updated:** [August 22, 2019, 6:58pm UTC](https://discuss.elastic.co/t/timezone-precedence-in-date-filter/196380 "2019-08-22T18:58:03Z")
TL;DR Which takes precedence in a date filter - the timezone in the timestamp or the timezone specified in the filter? Longer Version A question regarding the date filter. I have the following date filter: date { m… --- ## [Kibana 7.0.0 - Pie Visualisation excluding results if results value \< x% (less then x%)](https://discuss.elastic.co/t/kibana-7-0-0-pie-visualisation-excluding-results-if-results-value-x-less-then-x/193999)
**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 6:37pm UTC](https://discuss.elastic.co/t/kibana-7-0-0-pie-visualisation-excluding-results-if-results-value-x-less-then-x/193999 "2019-08-22T18:37:09Z")
Hi there, I need your advice how to manage this case with an aggregated result. I have a simple pie and I wanted to exclude results \< 1% in order to have only a pie with results \> 1%: I tried a few ways with terms agg… --- ## [Select last value in Data Table](https://discuss.elastic.co/t/select-last-value-in-data-table/196063)
**Author:** [@luc1](https://discuss.elastic.co/u/luc1)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 6:23pm UTC](https://discuss.elastic.co/t/select-last-value-in-data-table/196063 "2019-08-22T18:23:04Z")
Hi, I'm trying to display only the last "alarms" of my server in a data table. So I did the following thing (Sort on Time) I display several fields But as shown here : It shows me the last time an alarm was see… --- ## [How can I visualize aggregation buckets using vega (not vega-lite)](https://discuss.elastic.co/t/how-can-i-visualize-aggregation-buckets-using-vega-not-vega-lite/194336)
**Author:** [@anelson-edge](https://discuss.elastic.co/u/anelson-edge)\ **Replies:** 7\ **Last updated:** [August 22, 2019, 6:10pm UTC](https://discuss.elastic.co/t/how-can-i-visualize-aggregation-buckets-using-vega-not-vega-lite/194336 "2019-08-22T18:10:51Z")
Elasticsearch queries return an array named "buckets". All the examples I found for vega assume that the array is named "values. Try this gist: --- ## [Data Type conversion](https://discuss.elastic.co/t/data-type-conversion/196349)
**Author:** [@rohitg](https://discuss.elastic.co/u/rohitg)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 6:10pm UTC](https://discuss.elastic.co/t/data-type-conversion/196349 "2019-08-22T18:10:23Z")
How to convert? Latitude and longitude from string type to float type Date from String type to Date type or DateTime type Thanks. --- ## [How to divide data from one agent into two indexes?](https://discuss.elastic.co/t/how-to-divide-data-from-one-agent-into-two-indexes/196360)
**Author:** [@psyapathy](https://discuss.elastic.co/u/psyapathy)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 6:03pm UTC](https://discuss.elastic.co/t/how-to-divide-data-from-one-agent-into-two-indexes/196360 "2019-08-22T18:03:10Z")
Hello! I have a Windows server, it is winlogbeat, data is sent to Elasticsearch via Logstash. I'm getting data from the security log and sysmon. All this data is sent to the index "index1". But there is data, which ha… --- ## [Epoch unix to date](https://discuss.elastic.co/t/epoch-unix-to-date/196364)
**Author:** [@cjb312](https://discuss.elastic.co/u/cjb312)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 5:58pm UTC](https://discuss.elastic.co/t/epoch-unix-to-date/196364 "2019-08-22T17:58:26Z")
I'm trying to convert 1422083623.329786 to a format like 1-24-2015 7:13:43.329 I've been looking it up through some past posts but I'm pretty lost. My current grok filter for it is %{NUMBER:ts} Thanks in advance --- ## [Logstash Filter to drop Beats events](https://discuss.elastic.co/t/logstash-filter-to-drop-beats-events/196372)
**Author:** [@jwwags92](https://discuss.elastic.co/u/jwwags92)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 5:46pm UTC](https://discuss.elastic.co/t/logstash-filter-to-drop-beats-events/196372 "2019-08-22T17:46:25Z")
I tried hard to filter most events i'm not interested in in the Winlogbeat config. However, I've now got ~100 Windows servers and I don't want to edit 100 files to filter events 256 / 258. I'm trying to use Logstash to d… --- ## [Interactive vega chart is not working in Kibana](https://discuss.elastic.co/t/interactive-vega-chart-is-not-working-in-kibana/196239)
**Author:** [@Sagesh](https://discuss.elastic.co/u/Sagesh)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 4:55pm UTC](https://discuss.elastic.co/t/interactive-vega-chart-is-not-working-in-kibana/196239 "2019-08-22T16:55:00Z")
I created a Vega interactive chart in Kibana and it's not working as expected. The chart is getting rendered but it's not clickable. Kibana version : 6.5 I tried the same code in vega editor and it's working fine there… --- ## [Kibana 7.1.1 failing percentiles chart type](https://discuss.elastic.co/t/kibana-7-1-1-failing-percentiles-chart-type/196066)
**Author:** [@okvittem](https://discuss.elastic.co/u/okvittem)\ **Replies:** 4\ **Last updated:** [August 22, 2019, 4:32pm UTC](https://discuss.elastic.co/t/kibana-7-1-1-failing-percentiles-chart-type/196066 "2019-08-22T16:32:26Z")
Hi, Upgrading to 7.1.1 I discovered that percentiles visualization fails to generate right Chart Type. it chooses a random of scatter or histogram and does not change when changing Chart type to Line. Back in 5.6 it … --- ## [\[Reporting\] Generate PNG for only one visualization from a dashboard](https://discuss.elastic.co/t/reporting-generate-png-for-only-one-visualization-from-a-dashboard/196292)
**Author:** [@qdelettre](https://discuss.elastic.co/u/qdelettre)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 3:44pm UTC](https://discuss.elastic.co/t/reporting-generate-png-for-only-one-visualization-from-a-dashboard/196292 "2019-08-22T15:44:36Z")
Hi, I'm trying to generate a PNG for only one visualization from a dashboard, but i'm getting the same error : TimeoutError: waiting for selector "\[data-test-subj="euiToastHeader"\]" failed: timeout 30000ms exceeded Th… --- ## [Monitoring & ML not available: "you should also assign the monitoring\_user role."](https://discuss.elastic.co/t/monitoring-ml-not-available-you-should-also-assign-the-monitoring-user-role/196162)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 4\ **Last updated:** [August 22, 2019, 3:43pm UTC](https://discuss.elastic.co/t/monitoring-ml-not-available-you-should-also-assign-the-monitoring-user-role/196162 "2019-08-22T15:43:20Z")
One more issue after upgrade 6.8 -\> 7.3 It is not clear how to grant "Stack Monitoring" and "Machine Learning" privileges to an AD group (unmapped\_groups\_as\_roles: true), which already has access to all indices and has a… --- ## [Custom text for Metric Chart items](https://discuss.elastic.co/t/custom-text-for-metric-chart-items/196291)
**Author:** [@girishpaik](https://discuss.elastic.co/u/girishpaik)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 3:32pm UTC](https://discuss.elastic.co/t/custom-text-for-metric-chart-items/196291 "2019-08-22T15:32:17Z")
Hi Team, I have developed a metric chart to get thread related data like status of the thread. In actual log, status is printed in single character (for Eg: 'Running' printed as 'R', 'Pending' printed as 'P', 'Continue … --- ## [ElasticSearch: What is the param limit in painless scripting?](https://discuss.elastic.co/t/elasticsearch-what-is-the-param-limit-in-painless-scripting/196282)
**Author:** [@aniruddha.raje](https://discuss.elastic.co/u/aniruddha.raje)\ **Replies:** 0\ **Last updated:** [August 22, 2019, 9:24am UTC](https://discuss.elastic.co/t/elasticsearch-what-is-the-param-limit-in-painless-scripting/196282 "2019-08-22T09:24:55Z")
I will have documents with the following data - id user\_id online\_hr offline\_hr My use case is the following - I wish to sort the users who are active using online\_hr field, While I want to sort the users wh… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1942) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1944)