# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=666 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 667 --- ## [How to sort keyword/text fields on aggregation results](https://discuss.elastic.co/t/how-to-sort-keyword-text-fields-on-aggregation-results/301160)
**Author:** [@Shushil\_Shankar](https://discuss.elastic.co/u/Shushil_Shankar)\ **Replies:** 0\ **Last updated:** [March 31, 2022, 5:51am UTC](https://discuss.elastic.co/t/how-to-sort-keyword-text-fields-on-aggregation-results/301160 "2022-03-31T05:51:48Z")
Hi Everyone! I have a aggregation results and I need to sort aggregation data using Elasticsearch.Net. When i'm trying using terms aggregation i'm getting this error "buckets\_path must reference either a number value or… --- ## [Kibana dashboard cannot load metricbeat data](https://discuss.elastic.co/t/kibana-dashboard-cannot-load-metricbeat-data/300933)
**Author:** [@leelax22](https://discuss.elastic.co/u/leelax22)\ **Replies:** 4\ **Last updated:** [March 31, 2022, 5:48am UTC](https://discuss.elastic.co/t/kibana-dashboard-cannot-load-metricbeat-data/300933 "2022-03-31T05:48:03Z")
I am testing to monitor aks using ELK stack and beat. The installation is completed with version 8.1.0, and it is confirmed that data is well accumulated in Kibana through the metricbeat-\* index. Because I did not conn… --- ## [Issue with non functionality: toogle column in table \[Kibana 8.1.1\]](https://discuss.elastic.co/t/issue-with-non-functionality-toogle-column-in-table-kibana-8-1-1/301123)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [March 31, 2022, 5:21am UTC](https://discuss.elastic.co/t/issue-with-non-functionality-toogle-column-in-table-kibana-8-1-1/301123 "2022-03-31T05:21:31Z")
Hi Please fix functionality for legacy view in this version of kibana for making " toogle column in table" Now it doesn't work. --- ## [Kibana Discover 10,000 documents download limit](https://discuss.elastic.co/t/kibana-discover-10-000-documents-download-limit/300555)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 6\ **Last updated:** [March 31, 2022, 5:19am UTC](https://discuss.elastic.co/t/kibana-discover-10-000-documents-download-limit/300555 "2022-03-31T05:19:21Z")
I want to save a search and download 100,000 documents from discover page. But I'm able to download only 10,000 documents. How to increase this limit in discover...I checked in advanced settings...But it is not changin… --- ## [Intergation of elastic with a service desk app](https://discuss.elastic.co/t/intergation-of-elastic-with-a-service-desk-app/301055)
**Author:** [@Vinay\_Menon1](https://discuss.elastic.co/u/Vinay_Menon1)\ **Replies:** 1\ **Last updated:** [March 31, 2022, 5:14am UTC](https://discuss.elastic.co/t/intergation-of-elastic-with-a-service-desk-app/301055 "2022-03-31T05:14:05Z")
Hi Team, I have a query not sure if anyone can help in this We have an in house created ticketing system which one of the developers created this we plan to integrate with elastic. We have multiple client regions & on… --- ## [Ssl\_verification\_mode in http\_poller input plugin "An exception happened when converging configuration"](https://discuss.elastic.co/t/ssl-verification-mode-in-http-poller-input-plugin-an-exception-happened-when-converging-configuration/300924)
**Author:** [@Syed\_Saqlain\_Hussain](https://discuss.elastic.co/u/Syed_Saqlain_Hussain)\ **Replies:** 4\ **Last updated:** [March 31, 2022, 3:48am UTC](https://discuss.elastic.co/t/ssl-verification-mode-in-http-poller-input-plugin-an-exception-happened-when-converging-configuration/300924 "2022-03-31T03:48:41Z")
I have this configuration file using http\_poller input plugin. input { http\_poller { urls =\> { myurl2 =\> { # Supports all options supported by ruby's Manticore HTTP client method =\> get … --- ## [How to understand logstash pipeline-to-pipeline patterns?](https://discuss.elastic.co/t/how-to-understand-logstash-pipeline-to-pipeline-patterns/301044)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [March 31, 2022, 12:50am UTC](https://discuss.elastic.co/t/how-to-understand-logstash-pipeline-to-pipeline-patterns/301044 "2022-03-31T00:50:15Z")
Currently I use logstash to operate pipeline.yml, the contents are as follows, according to my understanding, a line of pipeline.id should be a thread, it should be independent, but recently I found that there is a probl… --- ## [Metricbeat - system.memory.actual.used.pct](https://discuss.elastic.co/t/metricbeat-system-memory-actual-used-pct/301035)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 2\ **Last updated:** [March 30, 2022, 11:59pm UTC](https://discuss.elastic.co/t/metricbeat-system-memory-actual-used-pct/301035 "2022-03-30T23:59:07Z")
Hi, When i try to find the root cause of a crash using metricbeat field system.memory.actual.used.pct, my dashboard appears to change the values when i filter by host.name for the machine that crashed. Before I filter b… --- ## [Missing authentication credentials for REST request](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/301144)
**Author:** [@Kishan\_Kini](https://discuss.elastic.co/u/Kishan_Kini)\ **Replies:** 1\ **Last updated:** [March 30, 2022, 11:52pm UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/301144 "2022-03-30T23:52:13Z")
\[ERROR\]\[Elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. security\_exception: \[security\_exception\] Reason: missing authentication credentials for REST request \[/\_nodes?filter\_path=no… --- ## [After a while the logs stop](https://discuss.elastic.co/t/after-a-while-the-logs-stop/301030)
**Author:** [@Arraso26](https://discuss.elastic.co/u/Arraso26)\ **Replies:** 1\ **Last updated:** [March 30, 2022, 11:49pm UTC](https://discuss.elastic.co/t/after-a-while-the-logs-stop/301030 "2022-03-30T23:49:48Z")
Hello, my problem for half an hour the logs arrive perfect but after about 30 minutes or so the logs stop arriving and I get all the time the log shown below or one very similar and the rest of the logs do not arrive, I … --- ## [Previous versions of dashboards](https://discuss.elastic.co/t/previous-versions-of-dashboards/301113)
**Author:** [@Marjolein](https://discuss.elastic.co/u/Marjolein)\ **Replies:** 1\ **Last updated:** [March 30, 2022, 11:47pm UTC](https://discuss.elastic.co/t/previous-versions-of-dashboards/301113 "2022-03-30T23:47:48Z")
Hi! I'm a very new user of kibana and running into some issues. Is it possible to revert (roll back) to a previous saved version of a dashboard? I can't find it anywhere. Thanks! --- ## [Request/API to display detailed view of elasticsearch index field options](https://discuss.elastic.co/t/request-api-to-display-detailed-view-of-elasticsearch-index-field-options/301128)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 1\ **Last updated:** [March 30, 2022, 11:45pm UTC](https://discuss.elastic.co/t/request-api-to-display-detailed-view-of-elasticsearch-index-field-options/301128 "2022-03-30T23:45:23Z")
I have defined datatype and set the following options for some of the fields of an index "doc\_values": true "enabled ": false "index": false Even though data is getting indexed and some of the set options can be viewe… --- ## [Logstash ruby code DateTime fails](https://discuss.elastic.co/t/logstash-ruby-code-datetime-fails/301137)
**Author:** [@scottfred](https://discuss.elastic.co/u/scottfred)\ **Replies:** 4\ **Last updated:** [March 30, 2022, 8:19pm UTC](https://discuss.elastic.co/t/logstash-ruby-code-datetime-fails/301137 "2022-03-30T20:19:16Z")
I've tried parsing this date string, "2022-01-25 08:30:22.126714" a few different ways in Logstash, but I keep coming up short. I don't want to use filter { date {} }... I should be able to use this ruby code because i… --- ## [Make in india percentage(This is a purchase related query)](https://discuss.elastic.co/t/make-in-india-percentage-this-is-a-purchase-related-query/301124)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 3\ **Last updated:** [March 30, 2022, 7:48pm UTC](https://discuss.elastic.co/t/make-in-india-percentage-this-is-a-purchase-related-query/301124 "2022-03-30T19:48:18Z")
What is the make in india percentage for Elasticsearch? (This is a non technical query) regards shini --- ## [Kibana stuck after upgrading to 7.17.1](https://discuss.elastic.co/t/kibana-stuck-after-upgrading-to-7-17-1/301139)
**Author:** [@danilopc](https://discuss.elastic.co/u/danilopc)\ **Replies:** 0\ **Last updated:** [March 30, 2022, 7:22pm UTC](https://discuss.elastic.co/t/kibana-stuck-after-upgrading-to-7-17-1/301139 "2022-03-30T19:22:29Z")
Hi everyone I've upgraded my Elasticsearch cluster from 7.16.3 to 7.17.1. The process ran without problems and no errors occurred. When I upgraded the kibana from 7.16.3 to 7.17.1 it got stuck at initialization. The lo… --- ## [Logstash aggregate filter not working for GCP MySQL slow query logs](https://discuss.elastic.co/t/logstash-aggregate-filter-not-working-for-gcp-mysql-slow-query-logs/301103)
**Author:** [@Chris\_Pinto](https://discuss.elastic.co/u/Chris_Pinto)\ **Replies:** 2\ **Last updated:** [March 30, 2022, 6:53pm UTC](https://discuss.elastic.co/t/logstash-aggregate-filter-not-working-for-gcp-mysql-slow-query-logs/301103 "2022-03-30T18:53:53Z")
Hi Team, I'm trying to send Google Cloud MySQL slow query logs from GCP Cloud Logging to elastic through Logstash pubsub input. The Slow query logs are in the JSON format and Pubsub has a limitation - it does not main… --- ## [Filter to add fiels of on nested JSON name value fields](https://discuss.elastic.co/t/filter-to-add-fiels-of-on-nested-json-name-value-fields/300848)
**Author:** [@DI\_Ralph](https://discuss.elastic.co/u/DI_Ralph)\ **Replies:** 4\ **Last updated:** [March 30, 2022, 6:26pm UTC](https://discuss.elastic.co/t/filter-to-add-fiels-of-on-nested-json-name-value-fields/300848 "2022-03-30T18:26:40Z")
Hi, In Logstash I'm trying to create new fields from Nested JSON where the value of "Name" is part of the field name and "Value" is the actual value of the new field. For example I got part of an audit log here below. … --- ## [Keep only domain.tld in field with various subdomains](https://discuss.elastic.co/t/keep-only-domain-tld-in-field-with-various-subdomains/301097)
**Author:** [@andre22](https://discuss.elastic.co/u/andre22)\ **Replies:** 1\ **Last updated:** [March 30, 2022, 5:34pm UTC](https://discuss.elastic.co/t/keep-only-domain-tld-in-field-with-various-subdomains/301097 "2022-03-30T17:34:16Z")
Hi, in my DNS logs I have a lot of very long URLs, for example those from CDNs. They can have one or more levels of subdomains, and I am looking to remove these. For example: safebrowsing.googleapis.com \> googleapis.c… --- ## [Multi node setup for elastic search](https://discuss.elastic.co/t/multi-node-setup-for-elastic-search/301116)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 3\ **Last updated:** [March 30, 2022, 4:54pm UTC](https://discuss.elastic.co/t/multi-node-setup-for-elastic-search/301116 "2022-03-30T16:54:41Z")
Is it possible to set up Elasticsearch in a multiple nodes architecture with basic license? regards shini --- ## [Fs-crawler for data scraping](https://discuss.elastic.co/t/fs-crawler-for-data-scraping/301063)
**Author:** [@Um\_Ar](https://discuss.elastic.co/u/Um_Ar)\ **Replies:** 1\ **Last updated:** [March 30, 2022, 4:37pm UTC](https://discuss.elastic.co/t/fs-crawler-for-data-scraping/301063 "2022-03-30T16:37:30Z")
I would like to use fs-crawler for page by page data extraction or extract data based on title hierarchy(title) instead of getting all the data of a document in a single row. --- ## [Drilldown Based on Query Results](https://discuss.elastic.co/t/drilldown-based-on-query-results/301122)
**Author:** [@DamiaRita](https://discuss.elastic.co/u/DamiaRita)\ **Replies:** 0\ **Last updated:** [March 30, 2022, 4:16pm UTC](https://discuss.elastic.co/t/drilldown-based-on-query-results/301122 "2022-03-30T16:16:26Z")
Hi, I want to connect two dashboards via Drilldown (or a similar feature). I have been reading the docs regarding drilldown and did not find a way to do precisely what I want. So, I am hoping for someone with more exper… --- ## [Not able to access my elasticsearch url via public IP](https://discuss.elastic.co/t/not-able-to-access-my-elasticsearch-url-via-public-ip/301110)
**Author:** [@sandeepbisht](https://discuss.elastic.co/u/sandeepbisht)\ **Replies:** 6\ **Last updated:** [March 30, 2022, 4:14pm UTC](https://discuss.elastic.co/t/not-able-to-access-my-elasticsearch-url-via-public-ip/301110 "2022-03-30T16:14:08Z")
Hi All, I am not able to able to access url via public IP on port 9200. Even when i changed below setting in config file and tried to restart service, getting below error. network.host: \ http.port: 9200 r… --- ## [Can i apply a KQL query that works on all indices present?](https://discuss.elastic.co/t/can-i-apply-a-kql-query-that-works-on-all-indices-present/301008)
**Author:** [@Matthew\_Dominic\_Ramp](https://discuss.elastic.co/u/Matthew_Dominic_Ramp)\ **Replies:** 3\ **Last updated:** [March 30, 2022, 4:12pm UTC](https://discuss.elastic.co/t/can-i-apply-a-kql-query-that-works-on-all-indices-present/301008 "2022-03-30T16:12:58Z")
Scenario: I have a dashboard which displays info from two indices, a & b both a& b have a field (which acts as a primary key would in sql) called id i want to type into the search/query bar a filter that searches for d… --- ## [Logstash.yaml configuration xpack.management.elasticsearch.hosts (Elastic 7.10.)](https://discuss.elastic.co/t/logstash-yaml-configuration-xpack-management-elasticsearch-hosts-elastic-7-10/301114)
**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\ **Replies:** 0\ **Last updated:** [March 30, 2022, 3:22pm UTC](https://discuss.elastic.co/t/logstash-yaml-configuration-xpack-management-elasticsearch-hosts-elastic-7-10/301114 "2022-03-30T15:22:12Z")
We have a 7 node Elasticsearch cluster (v7.10). Is it good practice to point xpack.management.Elasticsearch.hosts: to all the cluster nodes ? At the moment it is pointing to the 1st 3 nodes which was the original clus… --- ## [Copy dashboard](https://discuss.elastic.co/t/copy-dashboard/301111)
**Author:** [@Marjolein](https://discuss.elastic.co/u/Marjolein)\ **Replies:** 1\ **Last updated:** [March 30, 2022, 3:14pm UTC](https://discuss.elastic.co/t/copy-dashboard/301111 "2022-03-30T15:14:38Z")
Hi! I'm a very new user of Kibana and running into some issues. I have a dashboard from a colleague and I want to copy the dashboard and make some alterations while the dashboard of my colleague stays the same. I tried … --- ## [Grouping legend entries](https://discuss.elastic.co/t/grouping-legend-entries/301058)
**Author:** [@Marjolein](https://discuss.elastic.co/u/Marjolein)\ **Replies:** 3\ **Last updated:** [March 30, 2022, 3:08pm UTC](https://discuss.elastic.co/t/grouping-legend-entries/301058 "2022-03-30T15:08:05Z")
Hi! I'm currently making my first Kibana dashboards and I'm running into an issue. I want to make a Pie chart of values with tags that look like this: Node1-1 Node1-2 Node1-3 Node2-1 Node2-2 Node2-3 etc I want t… --- ## [Metric aggregations on custom fields that use flattened field type](https://discuss.elastic.co/t/metric-aggregations-on-custom-fields-that-use-flattened-field-type/300724)
**Author:** [@amkoehler](https://discuss.elastic.co/u/amkoehler)\ **Replies:** 5\ **Last updated:** [March 30, 2022, 2:52pm UTC](https://discuss.elastic.co/t/metric-aggregations-on-custom-fields-that-use-flattened-field-type/300724 "2022-03-30T14:52:32Z")
Hello, I am looking for a way to index our documents in such a way that gives me the ability to run metric aggregations on custom number fields. Here's an example data structure we are indexing: { name: 'My Element',… --- ## [S3 input plugin does not recognise Glacier Flexible Retrieval](https://discuss.elastic.co/t/s3-input-plugin-does-not-recognise-glacier-flexible-retrieval/299875)
**Author:** [@banana](https://discuss.elastic.co/u/banana)\ **Replies:** 1\ **Last updated:** [March 30, 2022, 2:42pm UTC](https://discuss.elastic.co/t/s3-input-plugin-does-not-recognise-glacier-flexible-retrieval/299875 "2022-03-30T14:42:06Z")
HI All, We have noticed that the s3 input plugin does not recognise Glacier Flexible Retrieval storage classes. The result is that logstash takes forever to process our files. We would appreciate some input on how to … --- ## [Elastic Agent for syslog](https://discuss.elastic.co/t/elastic-agent-for-syslog/301104)
**Author:** [@hebph001](https://discuss.elastic.co/u/hebph001)\ **Replies:** 0\ **Last updated:** [March 30, 2022, 2:27pm UTC](https://discuss.elastic.co/t/elastic-agent-for-syslog/301104 "2022-03-30T14:27:12Z")
Hi Elastic community, I am trying to determine what would be the best and easiest way to gather logs and metrics from 35 SLES 12 servers because Elastic Agent is not supported on that version. I am currently collecting … --- ## [Accidentally deleted .security index for x-pack](https://discuss.elastic.co/t/accidentally-deleted-security-index-for-x-pack/69844)
**Author:** [@Johntdyer](https://discuss.elastic.co/u/Johntdyer)\ **Replies:** 3\ **Last updated:** [March 30, 2022, 12:29pm UTC](https://discuss.elastic.co/t/accidentally-deleted-security-index-for-x-pack/69844 "2022-03-30T12:29:45Z")
So by some horrible error we deleted the .security index for x-pack. How do we get that back? We tried reinstalling in a lab deployment and it didnt seem to recover that index. [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=665) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=667)