# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=693

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 694

---

## [Kibana pin filters from embeded dashboard are not applied when we navigate to another dashboard](https://discuss.elastic.co/t/kibana-pin-filters-from-embeded-dashboard-are-not-applied-when-we-navigate-to-another-dashboard/298367)

<div class="topic-metadata">

**Author:** [@Prathibha\_Y](https://discuss.elastic.co/u/Prathibha_Y)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 8:08am UTC](https://discuss.elastic.co/t/kibana-pin-filters-from-embeded-dashboard-are-not-applied-when-we-navigate-to-another-dashboard/298367 "2022-02-28T08:08:03Z")

</div>

Pin filters works perfectly when we navigate from one dashboard to another using hyperlink(configured link in url template of index patterns) inside Kibana, where as we try navigating from embedded dashboard to another …

---

## [Last value of syste.uptime.duration.ms](https://discuss.elastic.co/t/last-value-of-syste-uptime-duration-ms/298119)

<div class="topic-metadata">

**Author:** [@ratseba](https://discuss.elastic.co/u/ratseba)\
**Replies:** 2\
**Last updated:** [February 28, 2022, 7:30am UTC](https://discuss.elastic.co/t/last-value-of-syste-uptime-duration-ms/298119 "2022-02-28T07:30:45Z")

</div>

Hi, I need show on dashboard uptime for server. I tried do this by Lens -\> Metric. When i set for metric: Last value od system.uptime.duration.ms and sort by @timestamp then i dont see anything. In index i have this dat…

---

## [What is taking up disk space if I disable indexing of all properties and \_source?](https://discuss.elastic.co/t/what-is-taking-up-disk-space-if-i-disable-indexing-of-all-properties-and-source/298372)

<div class="topic-metadata">

**Author:** [@Adnukator](https://discuss.elastic.co/u/Adnukator)\
**Replies:** 2\
**Last updated:** [February 28, 2022, 6:56am UTC](https://discuss.elastic.co/t/what-is-taking-up-disk-space-if-i-disable-indexing-of-all-properties-and-source/298372 "2022-02-28T06:56:07Z")

</div>

I'm trying to restructure our Elasticsearch settings to be more space efficient, even if at the price of less comfort. I have a set of 150k documents from a live server where I'm trying to measure the impact of different…

---

## [Relying on default value of \`pipeline.ecs\_compatibility\`,](https://discuss.elastic.co/t/relying-on-default-value-of-pipeline-ecs-compatibility/298370)

<div class="topic-metadata">

**Author:** [@gou\_gemma](https://discuss.elastic.co/u/gou_gemma)\
**Replies:** 1\
**Last updated:** [February 28, 2022, 6:19am UTC](https://discuss.elastic.co/t/relying-on-default-value-of-pipeline-ecs-compatibility/298370 "2022-02-28T06:19:51Z")

</div>

logstashを以下のコマンド起動したら「Relying on default value of pipeline.ecs\_compatibility～」というエラーが表示されました。 \[root@rhel8 conf.d\]# /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash.conf \[INFO \] 2022-02-28 13:45:46.786 …

---

## [Script condition for not matching records](https://discuss.elastic.co/t/script-condition-for-not-matching-records/298293)

<div class="topic-metadata">

**Author:** [@vradder](https://discuss.elastic.co/u/vradder)\
**Replies:** 4\
**Last updated:** [February 28, 2022, 5:19am UTC](https://discuss.elastic.co/t/script-condition-for-not-matching-records/298293 "2022-02-28T05:19:00Z")

</div>

Hi, I am selecting records based on range query. /\_update\_by\_query?conflicts=proceed { "query":{"range":{"dateTime":{"gte":"xxx","lte":"xxx"}}}, "script":{"source":"ctx.\_source.selected = true"} } how can i unselect…

---

## [Beatsで収集したログをそのままlogstashに送信できない](https://discuss.elastic.co/t/beats-logstash/297840)

<div class="topic-metadata">

**Author:** [@gou\_gemma](https://discuss.elastic.co/u/gou_gemma)\
**Replies:** 6\
**Last updated:** [February 28, 2022, 4:48am UTC](https://discuss.elastic.co/t/beats-logstash/297840 "2022-02-28T04:48:51Z")

</div>

filebeat,winlogbeatで収集したログを、logstashがインストールされているログ管理サーバに送信して、ログの管理を行いたいです。 filebeat,winlogbeatで収集したログを、logstashに受信できたと思ったのですが、生ログではなく、ログの情報（該当ログファイルのパス、ログファイルの作成日時等）が送られてきます。 filebeat,winlogbeatで収集したログを、生ログのままlogstashに…

---

## [Slow listing indices in Kibana Index Management](https://discuss.elastic.co/t/slow-listing-indices-in-kibana-index-management/298143)

<div class="topic-metadata">

**Author:** [@tellus83](https://discuss.elastic.co/u/tellus83)\
**Replies:** 1\
**Last updated:** [February 27, 2022, 11:49pm UTC](https://discuss.elastic.co/t/slow-listing-indices-in-kibana-index-management/298143 "2022-02-27T23:49:05Z")

</div>

We are runing a cluster whit 15 Nodes, Detecated master, data-hot, data-warm, data-cold, ingest and coordinating nodes. And only 1222 Indices. Normal querys and indexing looks like its ok. But listing listing indices in…

---

## [Upgrading Endgame appliance](https://discuss.elastic.co/t/upgrading-endgame-appliance/298273)

<div class="topic-metadata">

**Author:** [@pruttle](https://discuss.elastic.co/u/pruttle)\
**Replies:** 0\
**Last updated:** [February 25, 2022, 11:26am UTC](https://discuss.elastic.co/t/upgrading-endgame-appliance/298273 "2022-02-25T11:26:23Z")

</div>

Hi I have an Endgame appliance that needs nginx upgrading. Can I upgrade using the nginx repo or do I need to install a new appliance? According to this link it is now EOL. Elastic product end of life dates | Elastic T…

---

## [Transforming documents after they have been retrieved?](https://discuss.elastic.co/t/transforming-documents-after-they-have-been-retrieved/298213)

<div class="topic-metadata">

**Author:** [@mafej](https://discuss.elastic.co/u/mafej)\
**Replies:** 2\
**Last updated:** [February 27, 2022, 11:34pm UTC](https://discuss.elastic.co/t/transforming-documents-after-they-have-been-retrieved/298213 "2022-02-27T23:34:20Z")

</div>

I'm wondering, is there functionality similar to ingest pipelines, but for output instead of input? Being able to transform data when it's ingested is nice, but what about the opposite of that, transforming documents aft…

---

## [Logs delay in Kibana](https://discuss.elastic.co/t/logs-delay-in-kibana/298332)

<div class="topic-metadata">

**Author:** [@vijayja](https://discuss.elastic.co/u/vijayja)\
**Replies:** 1\
**Last updated:** [February 27, 2022, 11:33pm UTC](https://discuss.elastic.co/t/logs-delay-in-kibana/298332 "2022-02-27T23:33:08Z")

</div>

Hi Team, We are facing the log delay issue in Kibana dashboard, Logs are getting delay by 2 hours, 2.5 hours and sometimes 3 hours, We have two identical kubernetes cluster, But facing the issue with only one cluster, n…

---

## [Kibana Dashboard field value count](https://discuss.elastic.co/t/kibana-dashboard-field-value-count/297494)

<div class="topic-metadata">

**Author:** [@shanthveeresh](https://discuss.elastic.co/u/shanthveeresh)\
**Replies:** 4\
**Last updated:** [February 27, 2022, 3:30pm UTC](https://discuss.elastic.co/t/kibana-dashboard-field-value-count/297494 "2022-02-27T15:30:20Z")

</div>

Hi All, I am trying to find a .json script or keyword to count the number of field value count in Kibana dashboard, let me know if there is any way to do it, it will be very helpful.

---

## [Logstash input: Twitter](https://discuss.elastic.co/t/logstash-input-twitter/298351)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 1\
**Last updated:** [February 27, 2022, 2:42pm UTC](https://discuss.elastic.co/t/logstash-input-twitter/298351 "2022-02-27T14:42:32Z")

</div>

Hello, I have a simple pipeline setup in Logstash (keys changed of course): input { twitter { consumer\_key =\> "rcLfXIhprrPKLgVI467Slbux0" consumer\_secret =\>"uYk68znfoDQq70lfWXS3I…

---

## [Timestamp does not match data](https://discuss.elastic.co/t/timestamp-does-not-match-data/298344)

<div class="topic-metadata">

**Author:** [@tjunge](https://discuss.elastic.co/u/tjunge)\
**Replies:** 2\
**Last updated:** [February 27, 2022, 2:21pm UTC](https://discuss.elastic.co/t/timestamp-does-not-match-data/298344 "2022-02-27T14:21:44Z")

</div>

Hi, I am new to Elastic Stack and trying to filter my fail2ban log. In Grok Debugger I tried to simulate my Grok pattern on my data but have problems with the timestamp. I always get the simulate error: Provided Grok p…

---

## [Help getting started with text embeddings](https://discuss.elastic.co/t/help-getting-started-with-text-embeddings/297185)

<div class="topic-metadata">

**Author:** [@spruitt](https://discuss.elastic.co/u/spruitt)\
**Replies:** 2\
**Last updated:** [February 27, 2022, 1:41pm UTC](https://discuss.elastic.co/t/help-getting-started-with-text-embeddings/297185 "2022-02-27T13:41:55Z")

</div>

I am getting up to speed with semantic search. I started with a repository link I found in the blog "Text similarity search with vector fields." It's Python starter code. I'm having problems from the start. A lot of …

---

## [Age from year of birth](https://discuss.elastic.co/t/age-from-year-of-birth/298280)

<div class="topic-metadata">

**Author:** [@Anand\_p\_s](https://discuss.elastic.co/u/Anand_p_s)\
**Replies:** 3\
**Last updated:** [February 26, 2022, 7:05pm UTC](https://discuss.elastic.co/t/age-from-year-of-birth/298280 "2022-02-26T19:05:29Z")

</div>

Sir, I need to do a range aggeration for age ,from year of birth field. How it possible . Pls help

---

## [Failed to start Elasticsearch, error code status 143](https://discuss.elastic.co/t/failed-to-start-elasticsearch-error-code-status-143/298303)

<div class="topic-metadata">

**Author:** [@shiva1](https://discuss.elastic.co/u/shiva1)\
**Replies:** 2\
**Last updated:** [February 26, 2022, 11:42am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-error-code-status-143/298303 "2022-02-26T11:42:42Z")

</div>

Hi, I am new to installing Elasticsearch, I did install Elasticsearch in debian buster 10, and when trying to start the Elasticsearch have the issue, it fails to start with (code=exited, status=143) Output : root@ip…

---

## [Parsing Json logs separtly](https://discuss.elastic.co/t/parsing-json-logs-separtly/298329)

<div class="topic-metadata">

**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\
**Replies:** 0\
**Last updated:** [February 26, 2022, 11:08am UTC](https://discuss.elastic.co/t/parsing-json-logs-separtly/298329 "2022-02-26T11:08:22Z")

</div>

Hello every body, I want to send the results of this json file to ELK through Logstash, \` {“logsourcetypename\_deviceType": "Stonesoft Management Center", "High Level Category": "Access"}, {"logsourcetypename\_deviceTy…

---

## [Document level security alternatives for indexing requests](https://discuss.elastic.co/t/document-level-security-alternatives-for-indexing-requests/298328)

<div class="topic-metadata">

**Author:** [@duongcongtoai](https://discuss.elastic.co/u/duongcongtoai)\
**Replies:** 0\
**Last updated:** [February 26, 2022, 9:56am UTC](https://discuss.elastic.co/t/document-level-security-alternatives-for-indexing-requests/298328 "2022-02-26T09:56:38Z")

</div>

At my company, i use Elasticsearch to store data of multiple tenants, and go with the approach using 1 index to store 1 document type for all tenants. I'm adopting Elasticsearch document level security, and all read req…

---

## [Unable to submit fluentd logs to elasticsearch](https://discuss.elastic.co/t/unable-to-submit-fluentd-logs-to-elasticsearch/298326)

<div class="topic-metadata">

**Author:** [@rugby2312](https://discuss.elastic.co/u/rugby2312)\
**Replies:** 0\
**Last updated:** [February 26, 2022, 6:37am UTC](https://discuss.elastic.co/t/unable-to-submit-fluentd-logs-to-elasticsearch/298326 "2022-02-26T06:37:10Z")

</div>

I want to send some nginx logs from fluentd to Elasticsearch , however, fluentd is unable to start due to following error message: The client is unable to verify that the server is Elasticsearch. Some functionality may …

---

## [Elasticsearch Startup Error with NFS repo for backup](https://discuss.elastic.co/t/elasticsearch-startup-error-with-nfs-repo-for-backup/297864)

<div class="topic-metadata">

**Author:** [@Avnish\_Singh](https://discuss.elastic.co/u/Avnish_Singh)\
**Replies:** 5\
**Last updated:** [February 26, 2022, 6:29am UTC](https://discuss.elastic.co/t/elasticsearch-startup-error-with-nfs-repo-for-backup/297864 "2022-02-26T06:29:42Z")

</div>

Elasticsearch doesn't start with repo as NFS mount-point. Elasticsearch Version: \[root@ip-10-92-3-133 ~\]# curl -XGET localhost:9200 { "name" : "ip-10-92-3-133.ap-south-1.compute.internal", "cluster\_name" : "elastic…

---

## [Restore an index on single node only](https://discuss.elastic.co/t/restore-an-index-on-single-node-only/298250)

<div class="topic-metadata">

**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\
**Replies:** 4\
**Last updated:** [February 26, 2022, 6:04am UTC](https://discuss.elastic.co/t/restore-an-index-on-single-node-only/298250 "2022-02-26T06:04:20Z")

</div>

Hi, we have a 3-node ES cluster. Each node provides both master-eligible & data role. Is it possible to restore an index there temporarily without spreading its contents across all nodes? Just the current node or the cur…

---

## [\[0\] "\_jsonparsefailure" how do you remove this?](https://discuss.elastic.co/t/0-jsonparsefailure-how-do-you-remove-this/298225)

<div class="topic-metadata">

**Author:** [@itschobot](https://discuss.elastic.co/u/itschobot)\
**Replies:** 3\
**Last updated:** [February 26, 2022, 3:41am UTC](https://discuss.elastic.co/t/0-jsonparsefailure-how-do-you-remove-this/298225 "2022-02-26T03:41:51Z")

</div>

how do you get rid of the \[0\] "\_jsonparsefailure? { "origin" =\> "some\_platform", "ls-source" =\> "some\_platform", "port" =\> 1234, "event" =\> { …

---

## [I tried to check if the server running by typing "http://localhost:9200/\_status" but i got on the browser "ERR\_EMPTY\_RESPONSE"](https://discuss.elastic.co/t/i-tried-to-check-if-the-server-running-by-typing-http-localhost-9200-status-but-i-got-on-the-browser-err-empty-response/298191)

<div class="topic-metadata">

**Author:** [@moazmahmoud\_saad](https://discuss.elastic.co/u/moazmahmoud_saad)\
**Replies:** 2\
**Last updated:** [February 26, 2022, 12:40am UTC](https://discuss.elastic.co/t/i-tried-to-check-if-the-server-running-by-typing-http-localhost-9200-status-but-i-got-on-the-browser-err-empty-response/298191 "2022-02-26T00:40:07Z")

</div>

i tried to check if the server running by typing "http://localhost:9200/\_status" but i got on the browser "ERR\_EMPTY\_RESPONSE" and here what is printed on the cmd (windows) \[2022-02-24T18:48:46,917\]\[INFO \]\[o.e.g.Gatewa…

---

## [Accessing end of dataset with search\_after](https://discuss.elastic.co/t/accessing-end-of-dataset-with-search-after/298212)

<div class="topic-metadata">

**Author:** [@TonyxSun](https://discuss.elastic.co/u/TonyxSun)\
**Replies:** 1\
**Last updated:** [February 26, 2022, 2:04am UTC](https://discuss.elastic.co/t/accessing-end-of-dataset-with-search-after/298212 "2022-02-26T02:04:22Z")

</div>

Hello, We are using search\_after to populate and paginate a data grid using fetch requests from an index with around 200,000 documents. We would like to include a "jump to last page" button in our table, but search\_afte…

---

## [How to use Dashboards on another machine?](https://discuss.elastic.co/t/how-to-use-dashboards-on-another-machine/298116)

<div class="topic-metadata">

**Author:** [@VibhutiSaxena](https://discuss.elastic.co/u/VibhutiSaxena)\
**Replies:** 8\
**Last updated:** [February 26, 2022, 12:46am UTC](https://discuss.elastic.co/t/how-to-use-dashboards-on-another-machine/298116 "2022-02-26T00:46:55Z")

</div>

Hello everyone, I am beginner in elastic and kibana. I created dashboards for logs on a machine, exported them in ndjson files and now I want to use these dashboards on another machine .Is it possible to use them on anot…

---

## [CSV filter not working properly](https://discuss.elastic.co/t/csv-filter-not-working-properly/298274)

<div class="topic-metadata">

**Author:** [@elasticity2](https://discuss.elastic.co/u/elasticity2)\
**Replies:** 2\
**Last updated:** [February 25, 2022, 11:33pm UTC](https://discuss.elastic.co/t/csv-filter-not-working-properly/298274 "2022-02-25T23:33:37Z")

</div>

Hi all, I have a folder which contains two different types of CSV files. My logstash config is as below. When I run logstash, it just ingests the csvs as is without the columns getting generated. If I explicitly mention …

---

## [Can't create new line or use HTML in Detection email action](https://discuss.elastic.co/t/cant-create-new-line-or-use-html-in-detection-email-action/298315)

<div class="topic-metadata">

**Author:** [@kossde](https://discuss.elastic.co/u/kossde)\
**Replies:** 0\
**Last updated:** [February 25, 2022, 9:51pm UTC](https://discuss.elastic.co/t/cant-create-new-line-or-use-html-in-detection-email-action/298315 "2022-02-25T21:51:26Z")

</div>

I am trying to create a new email action for an alert but when it runs, everything appears on the same line. It doesn't appear to allow me to send HTML at all, so I can't use that to create a new line. I have tried /…

---

## [Multiple dropdown filters in kibana canvas - only one populating](https://discuss.elastic.co/t/multiple-dropdown-filters-in-kibana-canvas-only-one-populating/298304)

<div class="topic-metadata">

**Author:** [@Moni](https://discuss.elastic.co/u/Moni)\
**Replies:** 1\
**Last updated:** [February 25, 2022, 8:40pm UTC](https://discuss.elastic.co/t/multiple-dropdown-filters-in-kibana-canvas-only-one-populating/298304 "2022-02-25T20:40:08Z")

</div>

I have two dropdowns filters in a single canvas page. For both the drop-downs I verified that the preview data is able to show the required data. However only one (the one I created first time) is able to show the data i…

---

## [How to merge two data sets into one with Logstash?](https://discuss.elastic.co/t/how-to-merge-two-data-sets-into-one-with-logstash/298218)

<div class="topic-metadata">

**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\
**Replies:** 7\
**Last updated:** [February 25, 2022, 5:24pm UTC](https://discuss.elastic.co/t/how-to-merge-two-data-sets-into-one-with-logstash/298218 "2022-02-25T17:24:56Z")

</div>

Hi, I'm trying to merge two data sets into one document that will get stored in ES. My first data set looks like this: "\_source": { "protocol-name": "BGP", "name-tag": "default", "@version": "1", "host…

---

## [Help with Aggregate filter](https://discuss.elastic.co/t/help-with-aggregate-filter/298167)

<div class="topic-metadata">

**Author:** [@BhawanaSharma](https://discuss.elastic.co/u/BhawanaSharma)\
**Replies:** 3\
**Last updated:** [February 25, 2022, 5:23pm UTC](https://discuss.elastic.co/t/help-with-aggregate-filter/298167 "2022-02-25T17:23:32Z")

</div>

aggregate { timeout\_tags =\> \['\_aggregatetimeout'\] task\_id =\> "%{\[log\]\[file\]\[path\]}" code =\> 'map\["build\_name"\] = event.get("\[build\_name\_long\]") ; map\["build\_link"\] = event.get("\[build\_name\_start\]") ; event.set("bui…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=692)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=694)
