# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=703 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 704 --- ## [Filter on rank\_features](https://discuss.elastic.co/t/filter-on-rank-features/297181)
**Author:** [@dvisz-inf](https://discuss.elastic.co/u/dvisz-inf)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 7:13pm UTC](https://discuss.elastic.co/t/filter-on-rank-features/297181 "2022-02-16T19:13:05Z")
Hi all Back in 2017/2018 I attended Elasticon in San Francisco and got to meet a bunch of the engineers there. It was a really good experience and I got to have a lot of questions answered. One in particular was buggin… --- ## [Scripted metric aggregation inside nested aggregation: \`params.\_source\` is empty in map script](https://discuss.elastic.co/t/scripted-metric-aggregation-inside-nested-aggregation-params-source-is-empty-in-map-script/297237)
**Author:** [@asupranovich](https://discuss.elastic.co/u/asupranovich)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 2:58pm UTC](https://discuss.elastic.co/t/scripted-metric-aggregation-inside-nested-aggregation-params-source-is-empty-in-map-script/297237 "2022-02-16T14:58:49Z")
Hi community! My Elasticsearch version is 7.7.0. I'm facing a weird issue for my aggregation query. Let's say we have a car index, car data model looks like below: { "vin": "08c00679-8a58-11ec-9745-1aed518f8637", … --- ## [Logstash Pipeline Filter (\*)](https://discuss.elastic.co/t/logstash-pipeline-filter/297266)
**Author:** [@max\_cyril](https://discuss.elastic.co/u/max_cyril)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 6:40pm UTC](https://discuss.elastic.co/t/logstash-pipeline-filter/297266 "2022-02-16T18:40:46Z")
RE: Hi,I am struggling to write a logstash pipeline filter section i have used "TRANSFORMS" from kibana interface, it did not solve the case. \*\*\* i want to filter and only output event that correspond to the maxim… --- ## [Get lines in one line logstash filter](https://discuss.elastic.co/t/get-lines-in-one-line-logstash-filter/297263)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 6:32pm UTC](https://discuss.elastic.co/t/get-lines-in-one-line-logstash-filter/297263 "2022-02-16T18:32:32Z")
Hi, log file example: 0101-15:17:39:012|aze|exp|id|aa|bb|ee|rr|zz|tt|jj 0101-15:17:39:012|aze|exp|id....|ERR exception nom du para: sss à System... à Web.............|Ref|lev|15|Code\_Status = 50 0101-15:17:39:0… --- ## [Logstsh parce grok add teg \_grokparsefailure](https://discuss.elastic.co/t/logstsh-parce-grok-add-teg-grokparsefailure/297251)
**Author:** [@bsilsy](https://discuss.elastic.co/u/bsilsy)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 6:30pm UTC](https://discuss.elastic.co/t/logstsh-parce-grok-add-teg-grokparsefailure/297251 "2022-02-16T18:30:27Z")
good day everyone! I'm trying to parse field "message" with grock but, i get \_grokparsefailure tag on 100% of documents send data using filebeat message log example "message": "10.10.10.10 - text \[15/Feb/2022:15:27:2… --- ## [Java Client API data indexed but not available in a search, works in debug mode](https://discuss.elastic.co/t/java-client-api-data-indexed-but-not-available-in-a-search-works-in-debug-mode/297399)
**Author:** [@vmassol](https://discuss.elastic.co/u/vmassol)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 5:56pm UTC](https://discuss.elastic.co/t/java-client-api-data-indexed-but-not-available-in-a-search-works-in-debug-mode/297399 "2022-02-16T17:56:02Z")
Hi guys, I'm a bit stuck on a problem I don't understand. I'm basically doing the following, using the Java Client API in ES 7.17: RestClient restClient = RestClient.builder("...some url...") … --- ## [Visualize data from appsearch with kibana](https://discuss.elastic.co/t/visualize-data-from-appsearch-with-kibana/296450)
**Author:** [@Teckinfor](https://discuss.elastic.co/u/Teckinfor)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 5:10pm UTC](https://discuss.elastic.co/t/visualize-data-from-appsearch-with-kibana/296450 "2022-02-16T17:10:15Z")
Hello, I've been trying to figure out for a long time how I can create dashboards with information I get from the AppSearch API. Is it possible and if so could you tell me how? Or could you give me the necessary documen… --- ## [Mapping Json Object and Array under the same field](https://discuss.elastic.co/t/mapping-json-object-and-array-under-the-same-field/294853)
**Author:** [@Remi\_Czternasty](https://discuss.elastic.co/u/Remi_Czternasty)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 4:38pm UTC](https://discuss.elastic.co/t/mapping-json-object-and-array-under-the-same-field/294853 "2022-02-16T16:38:23Z")
Hello, I'm trying to ingests logs that are json documents. As I don't know the structure of each possible logs, I'm looking into dynamic templates. And I encounter an issue because I have a case where a field is an obje… --- ## [Logstash runner error](https://discuss.elastic.co/t/logstash-runner-error/297378)
**Author:** [@Bigboy0706](https://discuss.elastic.co/u/Bigboy0706)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 3:41pm UTC](https://discuss.elastic.co/t/logstash-runner-error/297378 "2022-02-16T15:41:43Z")
\[2022-02-16T14:02:47,966\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /etc/logstash/log4j2.properties \[2022-02-16T14:02:47,980\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.versi… --- ## [Kibana -\> interactive controls](https://discuss.elastic.co/t/kibana-interactive-controls/297172)
**Author:** [@lupolo](https://discuss.elastic.co/u/lupolo)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 3:22pm UTC](https://discuss.elastic.co/t/kibana-interactive-controls/297172 "2022-02-16T15:22:33Z")
Interactive controls in Kibana are great but I have not figured out a way to pass a variable from an interactive control to a visualization widget. For example: Let's say we have a pull down menu interactive control lab… --- ## [Where can I find the Lab Guide to implement the labs](https://discuss.elastic.co/t/where-can-i-find-the-lab-guide-to-implement-the-labs/297372)
**Author:** [@Kareem\_Amin](https://discuss.elastic.co/u/Kareem_Amin)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 2:39pm UTC](https://discuss.elastic.co/t/where-can-i-find-the-lab-guide-to-implement-the-labs/297372 "2022-02-16T14:39:13Z")
I am attending some courses on Elastic Learn. I can't find the lab instructions for two courses: Elastic Observability Engineer (On-Demand) Data Analysis with Kibana (On-Demand) In the course, the lab's URL takes me t… --- ## [Logstash ingest and export to elasticsearch files twice](https://discuss.elastic.co/t/logstash-ingest-and-export-to-elasticsearch-files-twice/297247)
**Author:** [@Greninja\_San](https://discuss.elastic.co/u/Greninja_San)\ **Replies:** 15\ **Last updated:** [February 16, 2022, 2:06pm UTC](https://discuss.elastic.co/t/logstash-ingest-and-export-to-elasticsearch-files-twice/297247 "2022-02-16T14:06:26Z")
Hello! I have a logstash config that gather lines from CSVs and then send them to Elasticsearch. However, for some unknown reason, lines are duplicated in Elasticsearch, taking twice the storage space, and making statis… --- ## [Obtain UTC Offset with location](https://discuss.elastic.co/t/obtain-utc-offset-with-location/297359)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 1:25pm UTC](https://discuss.elastic.co/t/obtain-utc-offset-with-location/297359 "2022-02-16T13:25:44Z")
Hello everyone. I would like to know if it was possible to obtain the time difference (compared to utc time) if we have a location. I have for example a residencyTimezone: America/Los\_Angeles I would like as a result:… --- ## [ECK with elastic helm-charts](https://discuss.elastic.co/t/eck-with-elastic-helm-charts/297316)
**Author:** [@Ajay\_56611](https://discuss.elastic.co/u/Ajay_56611)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 12:00pm UTC](https://discuss.elastic.co/t/eck-with-elastic-helm-charts/297316 "2022-02-16T12:00:43Z")
Hi @pebrc and team, is there any helm charts available to deploy Elasticsearch, kibana and APM server in a cluster where ECK operator was deployed with the helm chart? Please advise. Many thanks in advance. --- ## [Aggregation based visualization metric percentage](https://discuss.elastic.co/t/aggregation-based-visualization-metric-percentage/297145)
**Author:** [@skyrudi](https://discuss.elastic.co/u/skyrudi)\ **Replies:** 6\ **Last updated:** [February 16, 2022, 10:27am UTC](https://discuss.elastic.co/t/aggregation-based-visualization-metric-percentage/297145 "2022-02-16T10:27:40Z")
Hi any idea why aggregation based visualization metric percentage is not multiplied by by 100 but divided by 100 ? --- ## [I set it to niofs but the performance was too poor](https://discuss.elastic.co/t/i-set-it-to-niofs-but-the-performance-was-too-poor/297091)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 4\ **Last updated:** [February 16, 2022, 8:02am UTC](https://discuss.elastic.co/t/i-set-it-to-niofs-but-the-performance-was-too-poor/297091 "2022-02-16T08:02:05Z")
Performance tests were conducted with niofs and hybridfs, but in the case of niofs, 100 TPS hybridfs came out 680 TPS. Why is that? Do you have any documentation that goes deeper into niofs, mmapfs, and hybridfs? Help m… --- ## [How do you print a value of a variable in the source script?](https://discuss.elastic.co/t/how-do-you-print-a-value-of-a-variable-in-the-source-script/297160)
**Author:** [@Marco\_Ramos](https://discuss.elastic.co/u/Marco_Ramos)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 7:35am UTC](https://discuss.elastic.co/t/how-do-you-print-a-value-of-a-variable-in-the-source-script/297160 "2022-02-16T07:35:54Z")
how do you print a value of a variable in the source script? --- ## [ELK upgrade from 7.8.0 to 7.17.0](https://discuss.elastic.co/t/elk-upgrade-from-7-8-0-to-7-17-0/297333)
**Author:** [@nandatibco](https://discuss.elastic.co/u/nandatibco)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 7:31am UTC](https://discuss.elastic.co/t/elk-upgrade-from-7-8-0-to-7-17-0/297333 "2022-02-16T07:31:19Z")
Hello all, I'm planning to upgrade ELK stack from 7.8.0 to 7.17.0, please suggest if I need to take care of any scenarios and risks that I may encounter during this upgrade. Thanks, Nandakishor --- ## [Elastic search pagination to log server](https://discuss.elastic.co/t/elastic-search-pagination-to-log-server/296922)
**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\ **Replies:** 4\ **Last updated:** [February 16, 2022, 7:12am UTC](https://discuss.elastic.co/t/elastic-search-pagination-to-log-server/296922 "2022-02-16T07:12:37Z")
Hello friends. I have a question today, so I'm writing it down. I'm going to write it down in detail today. I ask for your understanding of my poor English skills. I have a question when building a log server using E… --- ## [Kibana Hostname/IP does not match certificate's](https://discuss.elastic.co/t/kibana-hostname-ip-does-not-match-certificates/297256)
**Author:** [@onjangkim](https://discuss.elastic.co/u/onjangkim)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 6:23am UTC](https://discuss.elastic.co/t/kibana-hostname-ip-does-not-match-certificates/297256 "2022-02-16T06:23:51Z")
Hi please help me What is the cause of this error in kibana? scmail: error sending email: Hostname/IP does not match certificate's altnames: IP: 192.168.18.220 is not in the cert's list: "} --- ## [How to compare the log values and drop the deduplicated log in Logstash](https://discuss.elastic.co/t/how-to-compare-the-log-values-and-drop-the-deduplicated-log-in-logstash/297239)
**Author:** [@Bigboy0706](https://discuss.elastic.co/u/Bigboy0706)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 4:16am UTC](https://discuss.elastic.co/t/how-to-compare-the-log-values-and-drop-the-deduplicated-log-in-logstash/297239 "2022-02-16T04:16:37Z")
Feb 15, 2022 @ 16:16:01.743 columns.url:https://mail.google.com/mail/u/0/#inbox name:chrome\_browser\_history @timestamp:Feb 15, 2022 @ 16:16:01.743 @version:1 action:added calendarTime:Tue Feb 15 08:15:58 2022 UTC columns… --- ## [Re-indexing into schema with new multifields](https://discuss.elastic.co/t/re-indexing-into-schema-with-new-multifields/297203)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 1:32am UTC](https://discuss.elastic.co/t/re-indexing-into-schema-with-new-multifields/297203 "2022-02-16T01:32:33Z")
Hi, Let's say, for the sake of simplicity, I have an index "a" with only this field in the schema: "foo": { "type": "keyword", } And then I create a new index "b" with a new multifield … --- ## [Separating HTTPJSON array to separate log entries](https://discuss.elastic.co/t/separating-httpjson-array-to-separate-log-entries/297030)
**Author:** [@isa\_slngr](https://discuss.elastic.co/u/isa_slngr)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 12:37am UTC](https://discuss.elastic.co/t/separating-httpjson-array-to-separate-log-entries/297030 "2022-02-16T00:37:33Z")
Good evening all, Does anyone in the community know how I can create separate log entries using an ingest pipeline for JSON results pulled via the HTTPJSON integration? We are pulling events via an API and the results … --- ## [Reindex data is multiplying docs](https://discuss.elastic.co/t/reindex-data-is-multiplying-docs/296920)
**Author:** [@cris](https://discuss.elastic.co/u/cris)\ **Replies:** 13\ **Last updated:** [February 16, 2022, 12:21am UTC](https://discuss.elastic.co/t/reindex-data-is-multiplying-docs/296920 "2022-02-16T00:21:19Z")
Hello community! I am working with logstash to reindex some data, I have a problem when I run logstash.service the documents increase a lot in the new index, in the original index I have 3000 documents and I expect like… --- ## [Filter last day documents in index](https://discuss.elastic.co/t/filter-last-day-documents-in-index/297302)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 11:45pm UTC](https://discuss.elastic.co/t/filter-last-day-documents-in-index/297302 "2022-02-15T23:45:56Z")
Hello all, i have an index that recieves data from monday to friday, i need to retrieve the last day documents. Because of data is not recieving on saturday and sunday, 1 day ago filter is not wotking correctly. i would… --- ## [Is it possible to call REST API call to elastic using JAVA](https://discuss.elastic.co/t/is-it-possible-to-call-rest-api-call-to-elastic-using-java/297278)
**Author:** [@ranju](https://discuss.elastic.co/u/ranju)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 10:22pm UTC](https://discuss.elastic.co/t/is-it-possible-to-call-rest-api-call-to-elastic-using-java/297278 "2022-02-15T22:22:45Z")
Need to call this type of query via REST API String query = "{"bool": {"must": \[{"match\_phrase": {"countryName": "INDIA"}}\], "must\_not": \[\], "should": \[\]}}"; --- ## [How to use curl API curl -X GET -u elastic:elastic http://elasticsearchprd.vbox.com/\_cat/shards | grep -i "UNASSIGNED" from the REST client tool](https://discuss.elastic.co/t/how-to-use-curl-api-curl-x-get-u-elastic-elastic-http-elasticsearchprd-vbox-com-cat-shards-grep-i-unassigned-from-the-rest-client-tool/297052)
**Author:** [@chinmoy\_padhi](https://discuss.elastic.co/u/chinmoy_padhi)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 10:05pm UTC](https://discuss.elastic.co/t/how-to-use-curl-api-curl-x-get-u-elastic-elastic-http-elasticsearchprd-vbox-com-cat-shards-grep-i-unassigned-from-the-rest-client-tool/297052 "2022-02-15T22:05:08Z")
Hi, How can I use this curl command curl -X GET -u elastic:elastic http://elasticsearchprd.vbox.com/\_cat/shards | grep -i "UNASSIGNED" in any of the REST client tool such as POSTMAN or anything else. If any one come acr… --- ## [Escape single quotes in URL field](https://discuss.elastic.co/t/escape-single-quotes-in-url-field/297120)
**Author:** [@thenotoriousciu](https://discuss.elastic.co/u/thenotoriousciu)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 8:32pm UTC](https://discuss.elastic.co/t/escape-single-quotes-in-url-field/297120 "2022-02-15T20:32:31Z")
Hello, I am trying to create a URL field which redirects to a different dashboard. The values in this field have the following format: 'Application': Create (notice the single quotes). The problem is that when the link … --- ## [How to create field that can get input?](https://discuss.elastic.co/t/how-to-create-field-that-can-get-input/297249)
**Author:** [@paz\_Ben\_Netanel](https://discuss.elastic.co/u/paz_Ben_Netanel)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 8:13pm UTC](https://discuss.elastic.co/t/how-to-create-field-that-can-get-input/297249 "2022-02-15T20:13:46Z")
I want to create a field that can get input and the output will be accordingly --- ## [Forecasts on a dashboard](https://discuss.elastic.co/t/forecasts-on-a-dashboard/153788)
**Author:** [@Kult](https://discuss.elastic.co/u/Kult)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 8:12pm UTC](https://discuss.elastic.co/t/forecasts-on-a-dashboard/153788 "2022-02-15T20:12:16Z")
ML's Forecast feature is great, but is there any way to incorporate forecasts into visualisations (traditional, Timelion or otherwise)? If not, can regular visualisations, Timelion or some another plugin you'd recommend … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=702) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=704)