# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=658 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 659 --- ## [Whitespaces are not displayed on the visialization](https://discuss.elastic.co/t/whitespaces-are-not-displayed-on-the-visialization/301340)
**Author:** [@nikaes](https://discuss.elastic.co/u/nikaes)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 7:09am UTC](https://discuss.elastic.co/t/whitespaces-are-not-displayed-on-the-visialization/301340 "2022-04-11T07:09:00Z")
Hi All, I have a string field with multiple whitespaces in it(replaced whitespaces with \_ to show): "numloops\_\_\_\_\_\_\_\_\_\_\_\_\_\_| 5\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_" I see the the text is correctly captured in the Jason output… --- ## [Unable to execute custom mapping in Elasticsearch 7.10.2 Using Logstash 7.10.2](https://discuss.elastic.co/t/unable-to-execute-custom-mapping-in-elasticsearch-7-10-2-using-logstash-7-10-2/302068)
**Author:** [@Satya\_N](https://discuss.elastic.co/u/Satya_N)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 5:55am UTC](https://discuss.elastic.co/t/unable-to-execute-custom-mapping-in-elasticsearch-7-10-2-using-logstash-7-10-2/302068 "2022-04-11T05:55:15Z")
Hi All, I am trying to sync data from mysql to Elasticsearch using logstash 7.10.2..Elasticsearch version I am using is : 7.10.2. When I am executing template using logstash , it is not creating in Elasticsearch so ev… --- ## [Aggregation Filter Sort - InternalFilter cannot be cast to class InternalMultiBucketAggregation](https://discuss.elastic.co/t/aggregation-filter-sort-internalfilter-cannot-be-cast-to-class-internalmultibucketaggregation/302050)
**Author:** [@Sridatta19](https://discuss.elastic.co/u/Sridatta19)\ **Replies:** 4\ **Last updated:** [April 11, 2022, 5:02am UTC](https://discuss.elastic.co/t/aggregation-filter-sort-internalfilter-cannot-be-cast-to-class-internalmultibucketaggregation/302050 "2022-04-11T05:02:05Z")
I'm try to sort the results generated after performing terms, filter and sum aggregation. But I keep facing an error. GET stats/\_search { "size": 0, "aggs": { "group\_by\_names": { "terms": { "field"… --- ## [No Structured Logs Found in Stack Monitoring when using Logstash](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstash/302005)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 6\ **Last updated:** [April 11, 2022, 2:23am UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstash/302005 "2022-04-11T02:23:59Z")
Same issue Running filebeat -\> Elasticsearch = Works, can see Server, GC, Kibana etc logs... filebeat -\> Logstash = No Logs displayed --- ## [Getting Unique Set of nested objects within aggregations](https://discuss.elastic.co/t/getting-unique-set-of-nested-objects-within-aggregations/301434)
**Author:** [@Assaf\_Cohen](https://discuss.elastic.co/u/Assaf_Cohen)\ **Replies:** 1\ **Last updated:** [April 10, 2022, 3:30pm UTC](https://discuss.elastic.co/t/getting-unique-set-of-nested-objects-within-aggregations/301434 "2022-04-10T15:30:50Z")
Hello, to make my question clear i am attaching steps to reproduce: PUT /test { "mappings": { "dynamic\_templates": \[ { "strings\_as\_keywords": { "match\_mapping\_type": "string", "m… --- ## [How to make suggestions taking into account a few document fields?](https://discuss.elastic.co/t/how-to-make-suggestions-taking-into-account-a-few-document-fields/299934)
**Author:** [@iNikolas](https://discuss.elastic.co/u/iNikolas)\ **Replies:** 1\ **Last updated:** [April 10, 2022, 3:17pm UTC](https://discuss.elastic.co/t/how-to-make-suggestions-taking-into-account-a-few-document-fields/299934 "2022-04-10T15:17:03Z")
Hi all! I'm trying to master Elasticsearch and there is one issue I have run into. My documents have fields first\_name, last\_name, and country. And seems the search is working as I'm expecting with a multi\_match query. … --- ## [Open closed index encountered problems](https://discuss.elastic.co/t/open-closed-index-encountered-problems/302046)
**Author:** [@Amirhossein\_Ebadi](https://discuss.elastic.co/u/Amirhossein_Ebadi)\ **Replies:** 1\ **Last updated:** [April 10, 2022, 1:03pm UTC](https://discuss.elastic.co/t/open-closed-index-encountered-problems/302046 "2022-04-10T13:03:53Z")
Hi elastic community, I recentley closed an open index in my elastic cluster version 7.0. Few days after I re-opened that closed index.Everything worked fine and reponses status was ok. I used to get indices status by … --- ## [Mapper parsing exception - failed to parse field](https://discuss.elastic.co/t/mapper-parsing-exception-failed-to-parse-field/302040)
**Author:** [@Robert777](https://discuss.elastic.co/u/Robert777)\ **Replies:** 9\ **Last updated:** [April 10, 2022, 9:44am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-failed-to-parse-field/302040 "2022-04-10T09:44:23Z")
Hello, could you please advise what this problem is related to and how to solve it? Below is a snippet of the warning I am getting from logstash. A little situational description, we have a large number of microservice… --- ## [How to use fuzzy and match phrase?](https://discuss.elastic.co/t/how-to-use-fuzzy-and-match-phrase/301386)
**Author:** [@asil](https://discuss.elastic.co/u/asil)\ **Replies:** 1\ **Last updated:** [April 6, 2022, 2:56pm UTC](https://discuss.elastic.co/t/how-to-use-fuzzy-and-match-phrase/301386 "2022-04-06T14:56:59Z")
I'm using elasticsearch version 7.6.2 I want to search for a sentence and get results of the same words order (like match\_phrase) with sentence fuzziness for example: suppose for simplicity i have 1 document in the in… --- ## [How to create Pivot table in Kibana 7.16.2](https://discuss.elastic.co/t/how-to-create-pivot-table-in-kibana-7-16-2/301937)
**Author:** [@Ely\_96](https://discuss.elastic.co/u/Ely_96)\ **Replies:** 5\ **Last updated:** [April 9, 2022, 8:44pm UTC](https://discuss.elastic.co/t/how-to-create-pivot-table-in-kibana-7-16-2/301937 "2022-04-09T20:44:11Z")
Hi, I need an help. I have a json like: \[ {"name": "Albert", "year": 1980, "class": "B"}, {"name": "John", "year": 1990, "class": "C"}, {"name": "Lerry", "year": 1990, "class": "C"}, {"name": "Joe", "year": 1980, "class… --- ## [Logstash ruby code error](https://discuss.elastic.co/t/logstash-ruby-code-error/302030)
**Author:** [@leela](https://discuss.elastic.co/u/leela)\ **Replies:** 2\ **Last updated:** [April 9, 2022, 5:35pm UTC](https://discuss.elastic.co/t/logstash-ruby-code-error/302030 "2022-04-09T17:35:37Z")
ruby { code =\> " byt = event.get('\[network\]\[bytes\]'); bytes = byt\*8; microsec = ((event.get('\[netflow\]\[flow\_end\_sys\_up\_time\]'))-(event.get('\[netflow\]\[flow\_start\_sys\_up\_time\]')))/1000; avg = bytes/microsec; event.se… --- ## [Erro Data too large ao inserir documento no index](https://discuss.elastic.co/t/erro-data-too-large-ao-inserir-documento-no-index/244928)
**Author:** [@francisco.carvalho](https://discuss.elastic.co/u/francisco.carvalho)\ **Replies:** 1\ **Last updated:** [April 9, 2022, 3:51pm UTC](https://discuss.elastic.co/t/erro-data-too-large-ao-inserir-documento-no-index/244928 "2022-04-09T15:51:44Z")
Blz pessoal? Estou tentando inserindo vários documentos no index e vez ou outra recebo esse erro no retorno. Não entendi bem o erro, mas ao que parece ele está limitando o tamanho do index. Alguém sabe me dizer o porq… --- ## [Kibana - perfil only mode deprecated](https://discuss.elastic.co/t/kibana-perfil-only-mode-deprecated/240731)
**Author:** [@dicto](https://discuss.elastic.co/u/dicto)\ **Replies:** 1\ **Last updated:** [April 9, 2022, 3:47pm UTC](https://discuss.elastic.co/t/kibana-perfil-only-mode-deprecated/240731 "2022-04-09T15:47:03Z")
Olá, Gostaria de saber como expor um dashboard através de um link sem necessidade de login. Ou que pelo menos o login seja de um usuário com perfil apenas de exibição. Vi que a Role kibana only mode está deprecated e … --- ## [Erros de visualização e painel](https://discuss.elastic.co/t/erros-de-visualizacao-e-painel/223178)
**Author:** [@Rocha](https://discuss.elastic.co/u/Rocha)\ **Replies:** 1\ **Last updated:** [April 9, 2022, 3:41pm UTC](https://discuss.elastic.co/t/erros-de-visualizacao-e-painel/223178 "2022-04-09T15:41:31Z")
Boa tarde. Sou novo no elastic, instalei aqui tem mais ou menos uma semana, porém estou tendo algumas dificuldades. Quando é selecionado um período de dados de até 1horas ou menos, ele funciona corretamente, ao selecio… --- ## [Clarification on how search\_type works](https://discuss.elastic.co/t/clarification-on-how-search-type-works/300203)
**Author:** [@ncoles](https://discuss.elastic.co/u/ncoles)\ **Replies:** 1\ **Last updated:** [April 9, 2022, 2:34pm UTC](https://discuss.elastic.co/t/clarification-on-how-search-type-works/300203 "2022-04-09T14:34:32Z")
I'm looking into some strange results from a "more like this" query involving search\_type. I switched to dfs\_query\_then\_fetch from the default query\_then\_fetch because I wanted more accurate results and the overhead did… --- ## [Multi index aggregations](https://discuss.elastic.co/t/multi-index-aggregations/302012)
**Author:** [@kasvith](https://discuss.elastic.co/u/kasvith)\ **Replies:** 1\ **Last updated:** [April 9, 2022, 1:20pm UTC](https://discuss.elastic.co/t/multi-index-aggregations/302012 "2022-04-09T13:20:32Z")
Hi all, I've a scenario like this Im maintaining an index for a list that holds the basic fields like title I also maintain two separate indexes called idx-1 and idx-2 which also have listId as a field. When Im addi… --- ## [Waiting for Fleet Server to connect](https://discuss.elastic.co/t/waiting-for-fleet-server-to-connect/302027)
**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\ **Replies:** 0\ **Last updated:** [April 9, 2022, 1:19pm UTC](https://discuss.elastic.co/t/waiting-for-fleet-server-to-connect/302027 "2022-04-09T13:19:26Z")
Hello, I tried to install a fleet server using the Kibana UI and copying the command to the CentOS Server. But after the successful enrollment the fleet server seems to stop itself for some reason and Kibana still "Wait… --- ## [Using alias indice in visualization](https://discuss.elastic.co/t/using-alias-indice-in-visualization/302013)
**Author:** [@rogerlee](https://discuss.elastic.co/u/rogerlee)\ **Replies:** 1\ **Last updated:** [April 9, 2022, 1:08pm UTC](https://discuss.elastic.co/t/using-alias-indice-in-visualization/302013 "2022-04-09T13:08:29Z")
Hi Guys, I am trying to use alias indice in visualization, but something weird happens. My version is 7.10, and my data are sample data " kibana\_sample\_data\_flights" and "kibana\_sample\_data\_ecommerce" . I create a ali… --- ## [Filebeat -\> kafka -\> logstash multiple brokers](https://discuss.elastic.co/t/filebeat-kafka-logstash-multiple-brokers/301978)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 1\ **Last updated:** [April 9, 2022, 9:06am UTC](https://discuss.elastic.co/t/filebeat-kafka-logstash-multiple-brokers/301978 "2022-04-09T09:06:21Z")
Hi, I have 3 brokers in one kafka cluster with zookeeper server and i create some topics with --replication-factor 3 --partitions 3 I run the zookeeper and the 3 brokers it works fine but when i kill the broker 1 it di… --- ## [Date format set in advanced settings not replicated in CSV export from Discover](https://discuss.elastic.co/t/date-format-set-in-advanced-settings-not-replicated-in-csv-export-from-discover/300251)
**Author:** [@JulieB](https://discuss.elastic.co/u/JulieB)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 11:27pm UTC](https://discuss.elastic.co/t/date-format-set-in-advanced-settings-not-replicated-in-csv-export-from-discover/300251 "2022-04-08T23:27:04Z")
Version: Kibana 6.8.23 I set up a customized date format in Management \> Advanced Settings of my Kibana UI to YYYY-MM-DD-THH:mm:ss which works well when I look at the data in Discover tab or Dashboard view. However, onc… --- ## [Peak Second Each Day Over Time](https://discuss.elastic.co/t/peak-second-each-day-over-time/301984)
**Author:** [@JWR](https://discuss.elastic.co/u/JWR)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 9:07pm UTC](https://discuss.elastic.co/t/peak-second-each-day-over-time/301984 "2022-04-08T21:07:59Z")
I'm ingesting data real time and would like to see the peak event rate second by day. Essentially, what was the busiest second each day and how many events occurred at that second. It's pretty straightforward on a smal… --- ## [Circuit\_breaking\_exception \[parent\]](https://discuss.elastic.co/t/circuit-breaking-exception-parent/301987)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 4:00pm UTC](https://discuss.elastic.co/t/circuit-breaking-exception-parent/301987 "2022-04-08T16:00:08Z")
I have a Elasticsearch cluster with around more than 100 data nodes. around 30 hot nodes and the rest warm nodes. I am coming across an issue where I just try to load data with the index pattern say logs\* in kibana disc… --- ## [Update kibana](https://discuss.elastic.co/t/update-kibana/301967)
**Author:** [@vatsal](https://discuss.elastic.co/u/vatsal)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 3:33pm UTC](https://discuss.elastic.co/t/update-kibana/301967 "2022-04-08T15:33:03Z")
Hi, I want to update kibana . Please tell if I have to do fresh intall or is there any option to update? Thanks. --- ## [Error when using elasticsearch logstash filter](https://discuss.elastic.co/t/error-when-using-elasticsearch-logstash-filter/301952)
**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 2:29pm UTC](https://discuss.elastic.co/t/error-when-using-elasticsearch-logstash-filter/301952 "2022-04-08T14:29:32Z")
Good day! Please advice. I have an error when using Elasticsearch logstash filter. I need to make a query among index to find a value of ip, and if there is write it in the field 'match' Here is code of my .conf file: … --- ## [Join two csv files](https://discuss.elastic.co/t/join-two-csv-files/301949)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 2:25pm UTC](https://discuss.elastic.co/t/join-two-csv-files/301949 "2022-04-08T14:25:55Z")
Hello! I have 2 csv files that share a common field and I would like to pass 2 fields from one of the files to the other. The functionality that I want is the same that I usually have with the Elasticsearch filter obta… --- ## [1 of 24 shards failed](https://discuss.elastic.co/t/1-of-24-shards-failed/301928)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 2:13pm UTC](https://discuss.elastic.co/t/1-of-24-shards-failed/301928 "2022-04-08T14:13:39Z")
Hello, already asked a similar creature, but did not receive an answer, when opening the index, this error appears: 1 of 24 shards failed, when you click "show details" it gives the following: Request: { "aggs": { … --- ## [Elasticsearch not able to create index daily for filebeat-17.6.2\*](https://discuss.elastic.co/t/elasticsearch-not-able-to-create-index-daily-for-filebeat-17-6-2/301975)
**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-create-index-daily-for-filebeat-17-6-2/301975 "2022-04-08T12:52:57Z")
Recently I tried to deploy journald input for sending systems logs and it's showing in the filebeat indice. but it's not creating indices daily basis it's writing the same indice. Even errors not showing in the Elastics… --- ## [Is Elastic what I need for our solution?](https://discuss.elastic.co/t/is-elastic-what-i-need-for-our-solution/301974)
**Author:** [@alivingstone](https://discuss.elastic.co/u/alivingstone)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 12:33pm UTC](https://discuss.elastic.co/t/is-elastic-what-i-need-for-our-solution/301974 "2022-04-08T12:33:25Z")
Hey - totally new to Elastic, someone mentioned it may be the solution we need. I've had a quick look and I'm getting more and more confused by all the options! Briefly - we have 16 Forcepoint proxies. They have acces… --- ## [Impossible to rename a field](https://discuss.elastic.co/t/impossible-to-rename-a-field/301956)
**Author:** [@mehdielfi](https://discuss.elastic.co/u/mehdielfi)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 11:06am UTC](https://discuss.elastic.co/t/impossible-to-rename-a-field/301956 "2022-04-08T11:06:48Z")
Hi i struggle to find the solution i try to rename a JSON field from X-Global-Transaction-Id to X-Global-Transaction-ID Here is the filter logstash filter { mutate { rename =\> {"\[response\_http\_head… --- ## [Search\_after without PIT](https://discuss.elastic.co/t/search-after-without-pit/300788)
**Author:** [@ahmedasadi](https://discuss.elastic.co/u/ahmedasadi)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 10:11am UTC](https://discuss.elastic.co/t/search-after-without-pit/300788 "2022-04-08T10:11:28Z")
In the documentation for 'search\_after', it says that inconsistent results may be returned if a refresh occurs when not using a PIT. I have a few questions: Can duplicate results be returned? Will it return all the doc… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=657) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=659)