# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1977 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1978 --- ## [Filter\_path usage](https://discuss.elastic.co/t/filter-path-usage/193054)
**Author:** [@rubpa](https://discuss.elastic.co/u/rubpa)\ **Replies:** 3\ **Last updated:** [August 6, 2019, 12:04pm UTC](https://discuss.elastic.co/t/filter-path-usage/193054 "2019-08-06T12:04:04Z")
I have used templates to tune the number of replicas and over time I've a number of templates. I don't remember the exact names. GET \_template gives very verbose output because of a huge number of internal templates (st… --- ## [Kibana Data Table division between two column](https://discuss.elastic.co/t/kibana-data-table-division-between-two-column/193882)
**Author:** [@simple\_commentateur](https://discuss.elastic.co/u/simple_commentateur)\ **Replies:** 3\ **Last updated:** [August 6, 2019, 11:54am UTC](https://discuss.elastic.co/t/kibana-data-table-division-between-two-column/193882 "2019-08-06T11:54:04Z")
Hi, My data table look like this : and i want to add a column with the ratio sum(delivered)/sum(volume). Is it possible? I see in others topics that it could be done with canvas or Visual Builder math aggregation. … --- ## [CPU usage 100% when Elasticsearch is down (Act 2)](https://discuss.elastic.co/t/cpu-usage-100-when-elasticsearch-is-down-act-2/193997)
**Author:** [@fredrik.jonsson](https://discuss.elastic.co/u/fredrik.jonsson)\ **Replies:** 1\ **Last updated:** [August 6, 2019, 11:51am UTC](https://discuss.elastic.co/t/cpu-usage-100-when-elasticsearch-is-down-act-2/193997 "2019-08-06T11:51:20Z")
This is a continue of, https://discuss.elastic.co/t/cpu-usage-100-when-elasticsearch-is-down/185850, which was automatically closed during vacation. The issue was this, "I noticed that when Elasticsearch can't retrieve… --- ## [End-User Customize Field Names](https://discuss.elastic.co/t/end-user-customize-field-names/193803)
**Author:** [@rockso](https://discuss.elastic.co/u/rockso)\ **Replies:** 2\ **Last updated:** [August 6, 2019, 11:35am UTC](https://discuss.elastic.co/t/end-user-customize-field-names/193803 "2019-08-06T11:35:05Z")
I am building a project that allows the user to export data to Elasticsearch. The users have asked for the ability to change several of the field names that my project uses so that my project's data matches their other e… --- ## [How can i approach to object in object using scripted fields??](https://discuss.elastic.co/t/how-can-i-approach-to-object-in-object-using-scripted-fields/193995)
**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 11:21am UTC](https://discuss.elastic.co/t/how-can-i-approach-to-object-in-object-using-scripted-fields/193995 "2019-08-06T11:21:38Z")
How can i approach to object in object using scripted fields? I have data like below: human : \[ { info : \[ { type: "A" user: "a@domain.com" }, { type: "B" user: "a@domain.com" } \] }, { info : \[ { type:… --- ## [\[ImageURL\] query malformed, no start\_object after query name](https://discuss.elastic.co/t/imageurl-query-malformed-no-start-object-after-query-name/193988)
**Author:** [@nauman76](https://discuss.elastic.co/u/nauman76)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 10:53am UTC](https://discuss.elastic.co/t/imageurl-query-malformed-no-start-object-after-query-name/193988 "2019-08-06T10:53:51Z")
I have the following request json for ES query. It gives me error "\[ImageURL\] query malformed, no start\_object after query name" Where i am doing wrong? Please help. I want to get records where "ImageURL" is not null { … --- ## [How to fetch data from elasticsearch by an external reporting application .?](https://discuss.elastic.co/t/how-to-fetch-data-from-elasticsearch-by-an-external-reporting-application/193986)
**Author:** [@ritesh\_singh](https://discuss.elastic.co/u/ritesh_singh)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 10:46am UTC](https://discuss.elastic.co/t/how-to-fetch-data-from-elasticsearch-by-an-external-reporting-application/193986 "2019-08-06T10:46:42Z")
I have a large amount of data in my elasticsearch and i have to get the data of some fields for a specific time periods (based on the specific value of some fields) for a reporting application.Please provide me the best … --- ## [Can we use basic elastic package for commercial use](https://discuss.elastic.co/t/can-we-use-basic-elastic-package-for-commercial-use/192230)
**Author:** [@ragnar1290](https://discuss.elastic.co/u/ragnar1290)\ **Replies:** 2\ **Last updated:** [August 6, 2019, 10:46am UTC](https://discuss.elastic.co/t/can-we-use-basic-elastic-package-for-commercial-use/192230 "2019-08-06T10:46:28Z")
Hi Team, I want to know can we use basic package of elasticsearch,kibana and logstash for commercial use cases. --- ## [About monitoring error](https://discuss.elastic.co/t/about-monitoring-error/193979)
**Author:** [@lugo](https://discuss.elastic.co/u/lugo)\ **Replies:** 1\ **Last updated:** [August 6, 2019, 10:31am UTC](https://discuss.elastic.co/t/about-monitoring-error/193979 "2019-08-06T10:31:03Z")
I seem to have deleted some indexes about kibana before. Then I started to report errors. I updated the ES version and kibana version, or I was still reporting errors. \[2019-08-06T18:19:39,689\]\[WARN \]\[o.e.x.m.e.l.Loca… --- ## [While searching a string I cannot retrieve strings which consist of a symbol(.,& ) between characters](https://discuss.elastic.co/t/while-searching-a-string-i-cannot-retrieve-strings-which-consist-of-a-symbol-between-characters/193978)
**Author:** [@Chetan\_Pandey](https://discuss.elastic.co/u/Chetan_Pandey)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 10:24am UTC](https://discuss.elastic.co/t/while-searching-a-string-i-cannot-retrieve-strings-which-consist-of-a-symbol-between-characters/193978 "2019-08-06T10:24:08Z")
\----\> I am using elastic search 7.3, My data consists of strings like K&S K.S. K S KS KS. when I search for K S I don't get any result for K&S. I have tried normalizer for this problem but still not getting relevant res… --- ## [Logstash not processing data](https://discuss.elastic.co/t/logstash-not-processing-data/193726)
**Author:** [@mzidy](https://discuss.elastic.co/u/mzidy)\ **Replies:** 5\ **Last updated:** [August 6, 2019, 10:14am UTC](https://discuss.elastic.co/t/logstash-not-processing-data/193726 "2019-08-06T10:14:36Z")
Hi guys, Trying to send data Logstash -\> Elasticsearch (WIN 10, both are running on localhost, configs are tested and are ok) and I'm experiencing issue that actual data is not sent (this is the only warning I get): \[2… --- ## [Conditionally add a new field to existing data in elastic search](https://discuss.elastic.co/t/conditionally-add-a-new-field-to-existing-data-in-elastic-search/193456)
**Author:** [@feb](https://discuss.elastic.co/u/feb)\ **Replies:** 6\ **Last updated:** [August 6, 2019, 10:05am UTC](https://discuss.elastic.co/t/conditionally-add-a-new-field-to-existing-data-in-elastic-search/193456 "2019-08-06T10:05:03Z")
Hello there. New to Elastic Search. Kindly suggest a solution to add a new field conditionally to my document current data in ElasticSearch "\_index": "test", "\_type": "logs", "\_id": "AWDgIKFCvg3odC71dRbc", "\_score":… --- ## [Elastic is not running on port 9200](https://discuss.elastic.co/t/elastic-is-not-running-on-port-9200/193960)
**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\ **Replies:** 2\ **Last updated:** [August 6, 2019, 9:09am UTC](https://discuss.elastic.co/t/elastic-is-not-running-on-port-9200/193960 "2019-08-06T09:09:14Z")
Hello, l started Elasticsearch using docker-compose.yml: version: '2' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:5.6.16 container\_name: elasticsearch restart: unless-stop… --- ## [Is it normal for elastic search to occupy 12 gb of ram](https://discuss.elastic.co/t/is-it-normal-for-elastic-search-to-occupy-12-gb-of-ram/193945)
**Author:** [@iaskdoubt](https://discuss.elastic.co/u/iaskdoubt)\ **Replies:** 3\ **Last updated:** [August 6, 2019, 9:07am UTC](https://discuss.elastic.co/t/is-it-normal-for-elastic-search-to-occupy-12-gb-of-ram/193945 "2019-08-06T09:07:25Z")
Hi we are using elastic search and have a per day index with a event per second of around 900 and each event having a size of .5 ~ 2 kB . The problem is that our elastic search is occupying a lot of memory .. can any on… --- ## [Ingest processor: Attaching header information to all the following log entries](https://discuss.elastic.co/t/ingest-processor-attaching-header-information-to-all-the-following-log-entries/193966)
**Author:** [@EldrosKandar](https://discuss.elastic.co/u/EldrosKandar)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 9:03am UTC](https://discuss.elastic.co/t/ingest-processor-attaching-header-information-to-all-the-following-log-entries/193966 "2019-08-06T09:03:43Z")
I'm using Filebeat and Ingest node to feed my ELK stack with logs. The first line of the log is an header with a different format but information relevant to the rest of the log entries. Is there a way to forward this in… --- ## [Filter by script](https://discuss.elastic.co/t/filter-by-script/193917)
**Author:** [@sinhnguyen](https://discuss.elastic.co/u/sinhnguyen)\ **Replies:** 1\ **Last updated:** [August 6, 2019, 8:42am UTC](https://discuss.elastic.co/t/filter-by-script/193917 "2019-08-06T08:42:43Z")
I would like to get records had updatedAt value at least 6 months ago from now. filter: { script: { // 186 \* 24 \* 60 \* 60 \* 1000 = 16070400000 (186 days ago ~ 6 months) script: "doc\['latestScrape'\].value \<= (new Dat… --- ## [Intermittent unknown host exception in elasticsearch](https://discuss.elastic.co/t/intermittent-unknown-host-exception-in-elasticsearch/193958)
**Author:** [@Vivek\_Vardhan](https://discuss.elastic.co/u/Vivek_Vardhan)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 8:03am UTC](https://discuss.elastic.co/t/intermittent-unknown-host-exception-in-elasticsearch/193958 "2019-08-06T08:03:14Z")
Hi Team, I am getting intermittently, unknown host exception while bulk inserting data in elasticsearch. \[INFO \] 2019-08-05 07:29:54.859 \[pool-4-thread-1\] ElasticSearchRestClient - Total Time taken: 1326 \[INFO \] 2019-0… --- ## [Use elastic for laravel logs](https://discuss.elastic.co/t/use-elastic-for-laravel-logs/193961)
**Author:** [@farshadf](https://discuss.elastic.co/u/farshadf)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 8:05am UTC](https://discuss.elastic.co/t/use-elastic-for-laravel-logs/193961 "2019-08-06T08:05:20Z")
hi and good day , i want to know if there is any good source or plugin to use the laravel log system in elk i know there are some tutorials out there like using graylog but none working with elk now unfortunately . th… --- ## [Elasticsearch goes down when there's lot of data to search](https://discuss.elastic.co/t/elasticsearch-goes-down-when-theres-lot-of-data-to-search/193498)
**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\ **Replies:** 3\ **Last updated:** [August 6, 2019, 7:59am UTC](https://discuss.elastic.co/t/elasticsearch-goes-down-when-theres-lot-of-data-to-search/193498 "2019-08-06T07:59:59Z")
Hi I have an index with almost 1 million documents, and when i set the time range for more than 30 days, it gives me a timeout, and the elasticsearch instance goes down. Any idea what could be the problem? I assume the… --- ## [Clustering Dockerized Elasticsearch with multiple Docker Host](https://discuss.elastic.co/t/clustering-dockerized-elasticsearch-with-multiple-docker-host/193950)
**Author:** [@ts-kazuob](https://discuss.elastic.co/u/ts-kazuob)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 7:30am UTC](https://discuss.elastic.co/t/clustering-dockerized-elasticsearch-with-multiple-docker-host/193950 "2019-08-06T07:30:30Z")
Trying to make it clustering with docker compose. I have two elasticsearch docker containers which are deployed in different Docker Hosts. docker-compose.yml for docker-container-1 services: elasticsearch: rest… --- ## [Logstash Grok Pattern-Problem with finding every ")"](https://discuss.elastic.co/t/logstash-grok-pattern-problem-with-finding-every/192034)
**Author:** [@Dennis\_Bohs](https://discuss.elastic.co/u/Dennis_Bohs)\ **Replies:** 5\ **Last updated:** [August 6, 2019, 7:57am UTC](https://discuss.elastic.co/t/logstash-grok-pattern-problem-with-finding-every/192034 "2019-08-06T07:57:53Z")
Hi there and thanks for your time in advance. I did build my first grok-pattern myself to differ some fields in my events. The filter looks like this: filter { grok { match =\> { "message" =\> "\\A%{TIMEST… --- ## [\[ELK 7.3.0\] Visual Builder Gauge not visualizing data if different timespan](https://discuss.elastic.co/t/elk-7-3-0-visual-builder-gauge-not-visualizing-data-if-different-timespan/193753)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 3\ **Last updated:** [August 6, 2019, 7:45am UTC](https://discuss.elastic.co/t/elk-7-3-0-visual-builder-gauge-not-visualizing-data-if-different-timespan/193753 "2019-08-06T07:45:39Z")
Hi there! I'm having some problems with the Visual Builder Gauge visualization. I have all the data on some given indices (say test\_1, test\_2, test\_3, test\_4) between the 2019/07/10 and 2019/07/20. I wanted to make a … --- ## [Unable to create index pattern in kibana 7.2](https://discuss.elastic.co/t/unable-to-create-index-pattern-in-kibana-7-2/193269)
**Author:** [@BS\_Lee](https://discuss.elastic.co/u/BS_Lee)\ **Replies:** 5\ **Last updated:** [August 6, 2019, 7:35am UTC](https://discuss.elastic.co/t/unable-to-create-index-pattern-in-kibana-7-2/193269 "2019-08-06T07:35:58Z")
Hi, all I am trying to make an ELK stack sample after installation of ELK and Filebeat. But I couldn’t “create an index pattern” in Kibana(version 7.2) Please let me know what’s wrong in my configuration? I really ap… --- ## [Result window is too large error in custom plugin](https://discuss.elastic.co/t/result-window-is-too-large-error-in-custom-plugin/193949)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 0\ **Last updated:** [August 6, 2019, 7:26am UTC](https://discuss.elastic.co/t/result-window-is-too-large-error-in-custom-plugin/193949 "2019-08-06T07:26:46Z")
hi team, i m writing my custom plugin in Kibana and use table in EUI to visualize events. So when i click to 241403 page it comes to error " Result window is too large, from + size must be less than or equal to: \[10000\]… --- ## [Filebeatでインデックス名を任意に作成する方法](https://discuss.elastic.co/t/filebeat/193921)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [August 6, 2019, 7:00am UTC](https://discuss.elastic.co/t/filebeat/193921 "2019-08-06T07:00:50Z")
filebeat.ymlにインデックス名の設定をしてElasticSearchからファイルを転送したのですが、デフォルトのインデックス名(filebeat-%{\[agent.version\]}-%{+yyyy.MM.dd})で作成されてしまいます。インデックスを任意に指定する方法を教えて下さい ■filebeat.yml設定内容(抜粋) #==================== Elasticsearch template set… --- ## [How many pipelines can at max be configured in pipelines.yml](https://discuss.elastic.co/t/how-many-pipelines-can-at-max-be-configured-in-pipelines-yml/193920)
**Author:** [@bharatwaj](https://discuss.elastic.co/u/bharatwaj)\ **Replies:** 1\ **Last updated:** [August 6, 2019, 7:00am UTC](https://discuss.elastic.co/t/how-many-pipelines-can-at-max-be-configured-in-pipelines-yml/193920 "2019-08-06T07:00:26Z")
I wish to know the maximum number of pipelines that can be successfully configured in pipelines.yml --- ## [Alertingのリアルタイム検知](https://discuss.elastic.co/t/alerting/193925)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [August 6, 2019, 6:57am UTC](https://discuss.elastic.co/t/alerting/193925 "2019-08-06T06:57:35Z")
同一のAlertingの定義内で、Alerting対象を複数検知した場合、検知した数分のメールを送信することは可能ですか？ 例えば、過去10分以内のログを検索し、対象が10件以上存在したらメールを送信するという定義をWatcherのAlertingで設定した場合(trigger.schedule.intervalを10分に設定)、過去10分以内に対象が20件あったら、メールも20件送信したいです。 --- ## [How to show '0' in empty cells in heatmap in kibana 7.1.1?](https://discuss.elastic.co/t/how-to-show-0-in-empty-cells-in-heatmap-in-kibana-7-1-1/193432)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [August 6, 2019, 6:39am UTC](https://discuss.elastic.co/t/how-to-show-0-in-empty-cells-in-heatmap-in-kibana-7-1-1/193432 "2019-08-06T06:39:31Z")
Hello . I am using heatmap visualization and counts that are 0\< are showing as expected , however counts that are =0 aren't showing in cells which 0 is the value that I expect to be shown. I am using terms aggregatio… --- ## [Modify Vega Json Template data source to read from Elasticsearch Index](https://discuss.elastic.co/t/modify-vega-json-template-data-source-to-read-from-elasticsearch-index/193230)
**Author:** [@Aniss\_Chohra](https://discuss.elastic.co/u/Aniss_Chohra)\ **Replies:** 4\ **Last updated:** [August 6, 2019, 6:35am UTC](https://discuss.elastic.co/t/modify-vega-json-template-data-source-to-read-from-elasticsearch-index/193230 "2019-08-06T06:35:26Z")
Hello everyone, I am new to Vega plugin in kibana and I need some help to change the json code of some visualization to read from my own Elasticsearch index. In more details, I want to use the following template: and… --- ## [Time picker missing in Kibana 7](https://discuss.elastic.co/t/time-picker-missing-in-kibana-7/193537)
**Author:** [@Sommerdal](https://discuss.elastic.co/u/Sommerdal)\ **Replies:** 4\ **Last updated:** [August 6, 2019, 6:01am UTC](https://discuss.elastic.co/t/time-picker-missing-in-kibana-7/193537 "2019-08-06T06:01:58Z")
I just upgraded from ELK 6.3 thru 6.8, 7.7 to 7.3 on ES and Kibana. Now I have several problems, but I'll take them one at a time to avoid confusion. Time Picker in the Kibana toolbar is completely missing in Default s… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1976) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1978)