# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=712 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 713 --- ## [Question about strange behaviour with Fuzzy query in elasticsearch](https://discuss.elastic.co/t/question-about-strange-behaviour-with-fuzzy-query-in-elasticsearch/296362)
**Author:** [@psydow](https://discuss.elastic.co/u/psydow)\ **Replies:** 4\ **Last updated:** [February 7, 2022, 12:30pm UTC](https://discuss.elastic.co/t/question-about-strange-behaviour-with-fuzzy-query-in-elasticsearch/296362 "2022-02-07T12:30:07Z")
Hello everyone, I am new to the elastic stack and fulltext search for this reason there came up a question regarding some fuzzy queries I was working with the last Weeks. For context I want to realise a system where th… --- ## [Kibana Dashboard display no content without filtering](https://discuss.elastic.co/t/kibana-dashboard-display-no-content-without-filtering/296256)
**Author:** [@fionachan](https://discuss.elastic.co/u/fionachan)\ **Replies:** 17\ **Last updated:** [February 7, 2022, 11:28am UTC](https://discuss.elastic.co/t/kibana-dashboard-display-no-content-without-filtering/296256 "2022-02-07T11:28:46Z")
Hi, is there a way to make the table in the dashboard shows a sentence like "please select", after filtering show the data? --- ## [Nested queries (or secondary query)](https://discuss.elastic.co/t/nested-queries-or-secondary-query/296452)
**Author:** [@eladf](https://discuss.elastic.co/u/eladf)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 10:21am UTC](https://discuss.elastic.co/t/nested-queries-or-secondary-query/296452 "2022-02-07T10:21:17Z")
Hi all, I encountered an issue and will appreciate your help with it. I have a huge index (~0.5B documents) with a mapping that includes numeric fields (enum values), one keyword field and a nested field. The nested f… --- ## [Making elasticdb container persistant in EKS](https://discuss.elastic.co/t/making-elasticdb-container-persistant-in-eks/296158)
**Author:** [@gaurav.mittal](https://discuss.elastic.co/u/gaurav.mittal)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 10:01am UTC](https://discuss.elastic.co/t/making-elasticdb-container-persistant-in-eks/296158 "2022-02-07T10:01:38Z")
Hi, We are deploying the Elasticsearch and one of the container is for elasticdb. the default location for the database is under "/usr/share/Elasticsearch" it creates a data directory and database is created here. How t… --- ## [How to set a custom logo in kibana 7.16](https://discuss.elastic.co/t/how-to-set-a-custom-logo-in-kibana-7-16/296422)
**Author:** [@Sunil\_Bhakar](https://discuss.elastic.co/u/Sunil_Bhakar)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 9:34am UTC](https://discuss.elastic.co/t/how-to-set-a-custom-logo-in-kibana-7-16/296422 "2022-02-07T09:34:21Z")
Hello, I want to set a custom logo in kibana 7.16. Thanks in Advance for the help. --- ## [Customize chart fields](https://discuss.elastic.co/t/customize-chart-fields/296071)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 5\ **Last updated:** [February 7, 2022, 9:18am UTC](https://discuss.elastic.co/t/customize-chart-fields/296071 "2022-02-07T09:18:56Z")
Hello everybody I have a small problem that I encounter on most of my graphs. I would like to display the field name + its value in the captions. There is currently only the value and it is not too telling. Is it pos… --- ## [Translog of index size is huge](https://discuss.elastic.co/t/translog-of-index-size-is-huge/296385)
**Author:** [@Ariel\_Benichou](https://discuss.elastic.co/u/Ariel_Benichou)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 9:14am UTC](https://discuss.elastic.co/t/translog-of-index-size-is-huge/296385 "2022-02-07T09:14:41Z")
TL;DR one of my index in one of my data node got out of end and took all the disk available space making the node crash. The Problem On one of my data nodes, one of my biggest index (~10G) had suddenly a translog the w… --- ## [Indexing latency slowly increases until it's taking hours](https://discuss.elastic.co/t/indexing-latency-slowly-increases-until-its-taking-hours/296324)
**Author:** [@mikehardenize](https://discuss.elastic.co/u/mikehardenize)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 9:10am UTC](https://discuss.elastic.co/t/indexing-latency-slowly-increases-until-its-taking-hours/296324 "2022-02-07T09:10:59Z")
I have a 3 node cluster. Once a day I create a new index and bulk insert some data. Then throughout the day singular docs are slowly added to that same index. Once a new index has been created and fulfilled the previous … --- ## [Percolation with document containing huge geo\_shape](https://discuss.elastic.co/t/percolation-with-document-containing-huge-geo-shape/294557)
**Author:** [@Pingouin](https://discuss.elastic.co/u/Pingouin)\ **Replies:** 3\ **Last updated:** [February 7, 2022, 8:58am UTC](https://discuss.elastic.co/t/percolation-with-document-containing-huge-geo-shape/294557 "2022-02-07T08:58:21Z")
Hello, i have strange error when using percolation with a document containing a huge geo\_shape property. I have an index containing documents (dt\_prior\_lake\_database\_continent\_basin). These documents have a mapped geo\_s… --- ## [I got "Limited to 500 results. Refine your search. 256 documents" in save search displayed in dashboard](https://discuss.elastic.co/t/i-got-limited-to-500-results-refine-your-search-256-documents-in-save-search-displayed-in-dashboard/296420)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 6:57am UTC](https://discuss.elastic.co/t/i-got-limited-to-500-results-refine-your-search-256-documents-in-save-search-displayed-in-dashboard/296420 "2022-02-07T06:57:25Z")
Hi All, I'm using 7.16.2 version. I have a saved search that I'm displaying in dashboard. When I add a filter for a text field which contains certain text I get: "Limited to 500 results. Refine your search. 256 documen… --- ## [No data for query "exists": { "field": "event.original" }](https://discuss.elastic.co/t/no-data-for-query-exists-field-event-original/296355)
**Author:** [@Slavik\_Fursov](https://discuss.elastic.co/u/Slavik_Fursov)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:13am UTC](https://discuss.elastic.co/t/no-data-for-query-exists-field-event-original/296355 "2022-02-07T04:13:46Z")
I'm sending web access logs from Nginx server to Elastic. Everything works. I can see all data in Kibana correctly: However, when I try to add "exists": { "field": "event.original" } I'm getting no data: What … --- ## [Some questions](https://discuss.elastic.co/t/some-questions/296304)
**Author:** [@sandeepmuthathi](https://discuss.elastic.co/u/sandeepmuthathi)\ **Replies:** 4\ **Last updated:** [February 7, 2022, 5:35am UTC](https://discuss.elastic.co/t/some-questions/296304 "2022-02-07T05:35:24Z")
Is it a good idea to use Elasticsearch master nodes IPs(3 nodes) in the logstash or filebeat Or do we need to tell beat to use datanodes directly? Please note that master nodes has lots of resources but master nodes min… --- ## [Kibana Sizing Guide?](https://discuss.elastic.co/t/kibana-sizing-guide/296395)
**Author:** [@crpj](https://discuss.elastic.co/u/crpj)\ **Replies:** 4\ **Last updated:** [February 7, 2022, 4:44am UTC](https://discuss.elastic.co/t/kibana-sizing-guide/296395 "2022-02-07T04:44:51Z")
Hello, I am attempting to create a sizing estimate and did not find specific guidance for Kibana, could anyone clarify if there is an official guide? As of now, I am considering this setup to be a single machine: 4 CPU… --- ## [Elasticsearch-5.5.1 not starting](https://discuss.elastic.co/t/elasticsearch-5-5-1-not-starting/296325)
**Author:** [@Kiranreddyk](https://discuss.elastic.co/u/Kiranreddyk)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:43am UTC](https://discuss.elastic.co/t/elasticsearch-5-5-1-not-starting/296325 "2022-02-07T04:43:32Z")
HI , Need help on Elasticsearch-5.5.1.. When i start services on RHEL 7 .. it just hungs without any logs/error message.. where as I am able start Elasticsearch-6.2.2 services on same server.. This is all hapening af… --- ## [Logstash Persistant Queue](https://discuss.elastic.co/t/logstash-persistant-queue/296410)
**Author:** [@amitmahajan29](https://discuss.elastic.co/u/amitmahajan29)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 4:18am UTC](https://discuss.elastic.co/t/logstash-persistant-queue/296410 "2022-02-07T04:18:17Z")
I'm trying to create a persistant Queue which will sit between logstash and Elasticsearch. My aim being, in case the cluster goes red due to any scenario, the logs won't be lost. But since the persistant queue typicall… --- ## [Create alerts for logs ingestion in kibana](https://discuss.elastic.co/t/create-alerts-for-logs-ingestion-in-kibana/295772)
**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:16am UTC](https://discuss.elastic.co/t/create-alerts-for-logs-ingestion-in-kibana/295772 "2022-02-07T04:16:07Z")
Hello, I'm trying to create an alert for log ingestion alert. ex- If we have one index pattern and logs stopped coming to the kibana for the last 5 min, Can we create an alert for this in kibana? --- ## [Filter for field contains value in Dashboard](https://discuss.elastic.co/t/filter-for-field-contains-value-in-dashboard/296398)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 5\ **Last updated:** [February 7, 2022, 3:29am UTC](https://discuss.elastic.co/t/filter-for-field-contains-value-in-dashboard/296398 "2022-02-07T03:29:29Z")
Hi All, I'm using 7.16.2 version. I want to ask if there is a possibility to filter the dashboard by field that contain certain string? Thanks, Shay --- ## [Find all the nearest points that lie near linestring data](https://discuss.elastic.co/t/find-all-the-nearest-points-that-lie-near-linestring-data/296400)
**Author:** [@vaseem001](https://discuss.elastic.co/u/vaseem001)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 1:58am UTC](https://discuss.elastic.co/t/find-all-the-nearest-points-that-lie-near-linestring-data/296400 "2022-02-07T01:58:08Z")
Let's say I have an index of points and I query linestring data so how can I find the nearest point that lies near give linestring data --- ## [How to compare index pattern values?](https://discuss.elastic.co/t/how-to-compare-index-pattern-values/296394)
**Author:** [@Travel\_Time](https://discuss.elastic.co/u/Travel_Time)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 1:56am UTC](https://discuss.elastic.co/t/how-to-compare-index-pattern-values/296394 "2022-02-07T01:56:55Z")
Hello. I want to compare index patterns and as a result find the same ones. So for example I have index pattern1 where I have indexes with columns like --\> |pattern1\* \[index-1, index-2\] | col1 | col2 | col3 | ==… --- ## [Storage size doubled after Update By Query](https://discuss.elastic.co/t/storage-size-doubled-after-update-by-query/296405)
**Author:** [@yamaga](https://discuss.elastic.co/u/yamaga)\ **Replies:** 1\ **Last updated:** [February 6, 2022, 11:58pm UTC](https://discuss.elastic.co/t/storage-size-doubled-after-update-by-query/296405 "2022-02-06T23:58:17Z")
Hi, Mi index has 17Gb of storage size But where I executed (2 times !) the "update by query" querey to copy a field in an other one the size is increased : The Docs count doesnt change. POST jp\_data\_stk\_mouv/\_updat… --- ## [Getting Error while configuring ELK stack Filebeat to remote server via Terraform](https://discuss.elastic.co/t/getting-error-while-configuring-elk-stack-filebeat-to-remote-server-via-terraform/296252)
**Author:** [@MurLeeDas](https://discuss.elastic.co/u/MurLeeDas)\ **Replies:** 0\ **Last updated:** [February 4, 2022, 5:47am UTC](https://discuss.elastic.co/t/getting-error-while-configuring-elk-stack-filebeat-to-remote-server-via-terraform/296252 "2022-02-04T05:47:51Z")
Hello All, My usecase is to deploy ELK stack to AWS ubuntu server. I have all the required installation and configurations commands in .sh file in the local. And while doing apply, I am getting error in the remote exec … --- ## [Feature Question around KPI Visualisation](https://discuss.elastic.co/t/feature-question-around-kpi-visualisation/296287)
**Author:** [@Gosborne](https://discuss.elastic.co/u/Gosborne)\ **Replies:** 0\ **Last updated:** [February 4, 2022, 11:50am UTC](https://discuss.elastic.co/t/feature-question-around-kpi-visualisation/296287 "2022-02-04T11:50:18Z")
I'm currently setting up Elastic Security as a single pane of glass for security information and event management. As part of this we have all our alerts being created in the detections pane with the SOC opening/closing … --- ## [Concatenating 3 columns using Computed columns in enhanced table](https://discuss.elastic.co/t/concatenating-3-columns-using-computed-columns-in-enhanced-table/296269)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 2\ **Last updated:** [February 6, 2022, 9:47pm UTC](https://discuss.elastic.co/t/concatenating-3-columns-using-computed-columns-in-enhanced-table/296269 "2022-02-06T21:47:18Z")
Hi all, There are 3 fields a,b,c . For every document, only 1 of them will have a value. So I'm trying to concatenate 3 columns , but it is showing null with the string. For example : document 1: a=Hi b= c= When … --- ## [Should I have one Index or Multiple Indexes](https://discuss.elastic.co/t/should-i-have-one-index-or-multiple-indexes/296312)
**Author:** [@Pawan\_Misra](https://discuss.elastic.co/u/Pawan_Misra)\ **Replies:** 2\ **Last updated:** [February 6, 2022, 9:46pm UTC](https://discuss.elastic.co/t/should-i-have-one-index-or-multiple-indexes/296312 "2022-02-06T21:46:29Z")
We have a scenario where we have data from multiple clients. some figures to note: No of clients - 100 Data/client - 10GB (avg) With the above data, what should be our Indexing strategy? We know that we will need to… --- ## [Use LVM cache for Elasticsearch](https://discuss.elastic.co/t/use-lvm-cache-for-elasticsearch/296326)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 1\ **Last updated:** [February 6, 2022, 9:45pm UTC](https://discuss.elastic.co/t/use-lvm-cache-for-elasticsearch/296326 "2022-02-06T21:45:46Z")
Hello Everyone, can we use the Elasticseacrh with LVM cache logical volume? Cache logical volume The cache logical volume type uses a small and fast LV to improve the performance of a large and slow LV. It does this … --- ## [Couldn't find any Elasticsearch data](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/296330)
**Author:** [@mikemiko](https://discuss.elastic.co/u/mikemiko)\ **Replies:** 1\ **Last updated:** [February 6, 2022, 9:44pm UTC](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/296330 "2022-02-06T21:44:55Z")
I deployed an EFK stack on a 3 Node Kubernetes cluster (kind cluster). The Cluster is also running a custom app that I intend to monitor through the stack. All Pods are running. I can access Kibana at: \\ **Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 1\ **Last updated:** [February 6, 2022, 9:44pm UTC](https://discuss.elastic.co/t/can-i-have-two-different-kibana-servers-pointed-at-the-same-elasticsearch-cluster/296339 "2022-02-06T21:44:20Z") Good Morning All, I have an ES cluster running and an instance of Kibana (Lets call this instance A) pointed at that. And because of some involved weird "business reasons" I wanted to know if I could have a separate Kib… --- ## [ElastisSearch JVM Heap running full](https://discuss.elastic.co/t/elastissearch-jvm-heap-running-full/295928)
**Author:** [@grregm](https://discuss.elastic.co/u/grregm)\ **Replies:** 5\ **Last updated:** [February 6, 2022, 9:00pm UTC](https://discuss.elastic.co/t/elastissearch-jvm-heap-running-full/295928 "2022-02-06T21:00:17Z")
Hey there, We are running a Elasticsearch (7.16.1, Docker inside Kubernetes) cluster which is monitored by a Kibana Stack. After 5-6 days (sometimes sooner) Elasticsearch is running into JVM Heap issues/errors. Is there… --- ## [Automatically centre the map around a specified point by dropdown menu](https://discuss.elastic.co/t/automatically-centre-the-map-around-a-specified-point-by-dropdown-menu/296281)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 1\ **Last updated:** [February 4, 2022, 7:44pm UTC](https://discuss.elastic.co/t/automatically-centre-the-map-around-a-specified-point-by-dropdown-menu/296281 "2022-02-04T19:44:01Z")
Hi, There is a dropdown menu filter of ID's with each of them having different latitudes and longitudes on the map. Is there any way that I can centre the map around the specified point by clicking on the ID in the dropd… --- ## [How to organize snmp tables like in nagios](https://discuss.elastic.co/t/how-to-organize-snmp-tables-like-in-nagios/296372)
**Author:** [@Samt1](https://discuss.elastic.co/u/Samt1)\ **Replies:** 1\ **Last updated:** [February 6, 2022, 1:32am UTC](https://discuss.elastic.co/t/how-to-organize-snmp-tables-like-in-nagios/296372 "2022-02-06T01:32:23Z")
Hello. I'm trying to monitor some devices via snmp and logstash. I want to display the information in a table like this (this table is from nagios). Is it possible? I've made some tables on the visualization library, bu… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=711) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=713)