# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=724 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 725 --- ## [Custom time frame for charts](https://discuss.elastic.co/t/custom-time-frame-for-charts/294194)
**Author:** [@DanielCC](https://discuss.elastic.co/u/DanielCC)\ **Replies:** 3\ **Last updated:** [January 24, 2022, 8:42am UTC](https://discuss.elastic.co/t/custom-time-frame-for-charts/294194 "2022-01-24T08:42:58Z")
Hello there, Which version of Kibana allows me to have this option for my panels? --- ## [Getting 502 bad gateway error while creating new index](https://discuss.elastic.co/t/getting-502-bad-gateway-error-while-creating-new-index/295183)
**Author:** [@Nikhil\_Sonkar](https://discuss.elastic.co/u/Nikhil_Sonkar)\ **Replies:** 3\ **Last updated:** [January 24, 2022, 8:23am UTC](https://discuss.elastic.co/t/getting-502-bad-gateway-error-while-creating-new-index/295183 "2022-01-24T08:23:54Z")
502 Bad Gateway 502 Bad Gateway --- ## [How to zoom in the Y-Axis in a line chart using kibana 7.16?](https://discuss.elastic.co/t/how-to-zoom-in-the-y-axis-in-a-line-chart-using-kibana-7-16/295162)
**Author:** [@GustavoEH](https://discuss.elastic.co/u/GustavoEH)\ **Replies:** 2\ **Last updated:** [January 24, 2022, 7:53am UTC](https://discuss.elastic.co/t/how-to-zoom-in-the-y-axis-in-a-line-chart-using-kibana-7-16/295162 "2022-01-24T07:53:47Z")
Hello everyone, I'm new in Elasticsearch/Kibana and this is my first post, maybe the question is simple but I already expend hours trying to solve this issue, also looking for something similar in many forums but nothin… --- ## [How is Kibana accessing Large amounts of data from Elasticsearch in few seconds?](https://discuss.elastic.co/t/how-is-kibana-accessing-large-amounts-of-data-from-elasticsearch-in-few-seconds/295039)
**Author:** [@Harish\_fragger](https://discuss.elastic.co/u/Harish_fragger)\ **Replies:** 3\ **Last updated:** [January 24, 2022, 7:20am UTC](https://discuss.elastic.co/t/how-is-kibana-accessing-large-amounts-of-data-from-elasticsearch-in-few-seconds/295039 "2022-01-24T07:20:52Z")
I am trying to understand how is kibana fetching 129,306,319 hits from Elasticsearch and displaying it in Discover -\> Inspect -\> Responses? I can see from the request query that they are retrieving only 500 records at a… --- ## [How to migrate all dashboard, visualization, map, template, kibana settings data?](https://discuss.elastic.co/t/how-to-migrate-all-dashboard-visualization-map-template-kibana-settings-data/295173)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 7\ **Last updated:** [January 24, 2022, 6:31am UTC](https://discuss.elastic.co/t/how-to-migrate-all-dashboard-visualization-map-template-kibana-settings-data/295173 "2022-01-24T06:31:28Z")
I want to completely migrate the data of the 7.12 cluster to the 7.16 cluster, including all the data, which can be understood as mirroring. I suspect that the data on kibana is all on the kibana index. If it is copied … --- ## [Why do i see multiple nodes in the data folder](https://discuss.elastic.co/t/why-do-i-see-multiple-nodes-in-the-data-folder/295040)
**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\ **Replies:** 4\ **Last updated:** [January 24, 2022, 5:49am UTC](https://discuss.elastic.co/t/why-do-i-see-multiple-nodes-in-the-data-folder/295040 "2022-01-24T05:49:49Z")
Hello , I have upgraded Elasticsearch last month twice to fix log4j vulnerability . In EMEA i see only one folder and used disk space is 400GB. But in NAFTA i see 3 folders under node and overall it is consuming 750GB w… --- ## [Fingerprint option in logstash filter not working properly?](https://discuss.elastic.co/t/fingerprint-option-in-logstash-filter-not-working-properly/295115)
**Author:** [@Anjali\_Kushwaha](https://discuss.elastic.co/u/Anjali_Kushwaha)\ **Replies:** 9\ **Last updated:** [January 24, 2022, 5:39am UTC](https://discuss.elastic.co/t/fingerprint-option-in-logstash-filter-not-working-properly/295115 "2022-01-24T05:39:37Z")
I have used below code but its only inserting one record to ES . filter { fingerprint { target =\> "document\_id" method =\> "SHA256" key =\> "9ced3827c6a1c9dafac6da9abac41386ba1038ac95b3a865a0951bc2e948c58c" … --- ## [Elasticsearch top\_hits aggregation result and doc\_count are different](https://discuss.elastic.co/t/elasticsearch-top-hits-aggregation-result-and-doc-count-are-different/293400)
**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\ **Replies:** 2\ **Last updated:** [January 23, 2022, 11:33pm UTC](https://discuss.elastic.co/t/elasticsearch-top-hits-aggregation-result-and-doc-count-are-different/293400 "2022-01-23T23:33:56Z")
Query GET /someindex/\_search { "size": 0, "query": { "ids": { "types": \[\], "values": \["08a2","08a3","03a2","03a3","84a1"\] } }, "aggregations": { "498": { "terms":… --- ## [Unmapped field in document not appearing in filter drop down](https://discuss.elastic.co/t/unmapped-field-in-document-not-appearing-in-filter-drop-down/295128)
**Author:** [@Tech\_solution](https://discuss.elastic.co/u/Tech_solution)\ **Replies:** 4\ **Last updated:** [January 23, 2022, 11:08pm UTC](https://discuss.elastic.co/t/unmapped-field-in-document-not-appearing-in-filter-drop-down/295128 "2022-01-23T23:08:58Z")
Hi, I am new to Kibana dashboard . The issue I came across is that I want to create a dashboard for an unmapped field while that field is not mapped in index ( it doesn't appear in drop down for filters or in the fields… --- ## [Elastic Community Conference 2022 - 11 and 12th February 2022](https://discuss.elastic.co/t/elastic-community-conference-2022-11-and-12th-february-2022/295166)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [January 23, 2022, 9:25pm UTC](https://discuss.elastic.co/t/elastic-community-conference-2022-11-and-12th-february-2022/295166 "2022-01-23T21:25:48Z")
The second annual Elastic Community Conference (ElasticCC) is taking place February 11–12, 2022. Join us and hear success stories, lessons learned, tips, tricks, best practices, or funny anecdotes. ElasticCC is a free t… --- ## [Recreate index from GET mappings output](https://discuss.elastic.co/t/recreate-index-from-get-mappings-output/295159)
**Author:** [@markrity](https://discuss.elastic.co/u/markrity)\ **Replies:** 0\ **Last updated:** [January 23, 2022, 8:30pm UTC](https://discuss.elastic.co/t/recreate-index-from-get-mappings-output/295159 "2022-01-23T20:30:26Z")
I'm trying to find a way to recreate all index mappings from when I use GET /\_all/\_mapping or iterate over each index. For creating development cluster purposes. I have tried to use the json I get from get all mappings… --- ## [Xpath Functions in Logstash](https://discuss.elastic.co/t/xpath-functions-in-logstash/295119)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 4\ **Last updated:** [January 23, 2022, 6:43pm UTC](https://discuss.elastic.co/t/xpath-functions-in-logstash/295119 "2022-01-23T18:43:31Z")
I am needing to use xpath functions like string-join() and concat() to extract what I need from my XML file, however whenever I use these functions I get the following warning in my logstash-plain.log: \[2022-01-21T20:4… --- ## [Getting every 2nd element from \_source](https://discuss.elastic.co/t/getting-every-2nd-element-from-source/295123)
**Author:** [@EnJay](https://discuss.elastic.co/u/EnJay)\ **Replies:** 6\ **Last updated:** [January 23, 2022, 6:19pm UTC](https://discuss.elastic.co/t/getting-every-2nd-element-from-source/295123 "2022-01-23T18:19:25Z")
Hello dear community. I have been looking for information for a very long time. I need to make mapping from search for every 2nd element. For example, I have "size": 1000, while I want to get every second element as a … --- ## [How to different syslog in the same port?](https://discuss.elastic.co/t/how-to-different-syslog-in-the-same-port/295134)
**Author:** [@baalchina](https://discuss.elastic.co/u/baalchina)\ **Replies:** 6\ **Last updated:** [January 23, 2022, 3:22pm UTC](https://discuss.elastic.co/t/how-to-different-syslog-in-the-same-port/295134 "2022-01-23T15:22:24Z")
Hi all, I have many network devices, I forward their syslog to a logstash server, and then to elastisearch. In logstash, I start many ports, such 514,515,516... and each port to different log types, and when output to e… --- ## [Logstash Aggregate Problem tag in subdirectories Please Help](https://discuss.elastic.co/t/logstash-aggregate-problem-tag-in-subdirectories-please-help/295116)
**Author:** [@melorium](https://discuss.elastic.co/u/melorium)\ **Replies:** 7\ **Last updated:** [January 23, 2022, 3:20pm UTC](https://discuss.elastic.co/t/logstash-aggregate-problem-tag-in-subdirectories-please-help/295116 "2022-01-23T15:20:04Z")
Hi i trying to use logstash aggregate to tag all log events i main and sub folders. I want all logs in APP1 folders and subfolders to have tag "APP1" and all logs in app2 folders to have APP2 etc. My friend did some ki… --- ## [Filter to remember field accross lines with between start and stop tag](https://discuss.elastic.co/t/filter-to-remember-field-accross-lines-with-between-start-and-stop-tag/295147)
**Author:** [@melorium](https://discuss.elastic.co/u/melorium)\ **Replies:** 3\ **Last updated:** [January 23, 2022, 2:41pm UTC](https://discuss.elastic.co/t/filter-to-remember-field-accross-lines-with-between-start-and-stop-tag/295147 "2022-01-23T14:41:07Z")
Hi. I have a log with a s tart and stop tag. 2021-12-30 13:15:08.614 +0100 \[AWT-EventQueue-0\] 51818 INFO com.nuix.data.keystore.b - Read 0 passwords from C:\\CASE\\Test Log 1-1\\Stores\\DecryptionKeys\\pgpkeylist.dat This… --- ## [Date field shows different values](https://discuss.elastic.co/t/date-field-shows-different-values/294788)
**Author:** [@Aviel\_Bashari](https://discuss.elastic.co/u/Aviel_Bashari)\ **Replies:** 2\ **Last updated:** [January 23, 2022, 7:08am UTC](https://discuss.elastic.co/t/date-field-shows-different-values/294788 "2022-01-23T07:08:22Z")
Hi, i have a python script that converts CSV files into ndjson files, add a date custom field with iso format and pushes to elk using the 'Elasticsearch' package. I'm having an issue with the values shows in the Kibana… --- ## [Intermittent issues with Elasticsearch. Where do I even start?](https://discuss.elastic.co/t/intermittent-issues-with-elasticsearch-where-do-i-even-start/295064)
**Author:** [@Henrik41](https://discuss.elastic.co/u/Henrik41)\ **Replies:** 5\ **Last updated:** [January 23, 2022, 6:18am UTC](https://discuss.elastic.co/t/intermittent-issues-with-elasticsearch-where-do-i-even-start/295064 "2022-01-23T06:18:27Z")
Using Magento 2.3.4 Elasticsearch 7.16.3 java 1.8.0\_312 I installed it on Ubuntu 20.04 with 2cpu and 2g RAM. /etc/default/Elasticsearch ES\_HEAP\_SIZE=1g ES\_STARTUP\_SLEEP\_TIME=5 MAX\_OPEN\_FILES=65535 MAX\_LOCKED\_MEM… --- ## [About Comments within Logstash Plugin Config](https://discuss.elastic.co/t/about-comments-within-logstash-plugin-config/295120)
**Author:** [@usb](https://discuss.elastic.co/u/usb)\ **Replies:** 2\ **Last updated:** [January 23, 2022, 4:34am UTC](https://discuss.elastic.co/t/about-comments-within-logstash-plugin-config/295120 "2022-01-23T04:34:53Z")
Hi everyone. Recently, I am trying to add more comments to my Logstash pipeline config so that it is more understandable. However, I found that it seems comments cannot be added in-between lines of a plugin config. For … --- ## [How to keep 3 numbers for all shards？](https://discuss.elastic.co/t/how-to-keep-3-numbers-for-all-shards/295125)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 1\ **Last updated:** [January 23, 2022, 3:26am UTC](https://discuss.elastic.co/t/how-to-keep-3-numbers-for-all-shards/295125 "2022-01-23T03:26:01Z")
I have three nodes, and I want to maintain 3 primary shards and 1 replica for each index on the cluster. I know that I can specify a template by setting a template and logstash output, but is there a way to do it once an… --- ## [Kibana is not ready yet error after v7.16.2 Upgrade](https://discuss.elastic.co/t/kibana-is-not-ready-yet-error-after-v7-16-2-upgrade/293652)
**Author:** [@vincpas](https://discuss.elastic.co/u/vincpas)\ **Replies:** 5\ **Last updated:** [January 22, 2022, 9:15pm UTC](https://discuss.elastic.co/t/kibana-is-not-ready-yet-error-after-v7-16-2-upgrade/293652 "2022-01-22T21:15:02Z")
I have completed upgrading Elasticsearch cluster from 7.10.2 to 7.16.2. After completing Kibana upgrade from 7.10.2 to 7.16.2, I am now getting Kibana is not ready yet error. I verified the Elasticsearch cluster is in go… --- ## [Optional parameters in search template](https://discuss.elastic.co/t/optional-parameters-in-search-template/295113)
**Author:** [@senthilkumarsevi](https://discuss.elastic.co/u/senthilkumarsevi)\ **Replies:** 1\ **Last updated:** [January 22, 2022, 10:26am UTC](https://discuss.elastic.co/t/optional-parameters-in-search-template/295113 "2022-01-22T10:26:32Z")
I have search template with multiple parameters, while searching if the parameter value is empty string "" then filter applies in value with empty string "" returns 0 hits for that reason i need optional parameter for… --- ## [\_dateparsefailure](https://discuss.elastic.co/t/dateparsefailure/294997)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 9\ **Last updated:** [January 22, 2022, 10:22am UTC](https://discuss.elastic.co/t/dateparsefailure/294997 "2022-01-22T10:22:20Z")
So I don't know why I got the so kind error : \_dateparsefailure below You can find one of data input |date|time|millisecond| |18.11.2021|09:29:15|257| code: ruby { code =\> " event\_millisecond = ('000' + eve… --- ## [Some words are not searched by elasticsearch](https://discuss.elastic.co/t/some-words-are-not-searched-by-elasticsearch/295100)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 4\ **Last updated:** [January 22, 2022, 6:16am UTC](https://discuss.elastic.co/t/some-words-are-not-searched-by-elasticsearch/295100 "2022-01-22T06:16:41Z")
Hello I have noticed that some of the words that the user searches for are not searched by Elasticsearch For example, if the user searches for machine L, Elasticsearch only searches for L and does not search for the wo… --- ## [Which is better in terms of performance? one wildcard or six matches](https://discuss.elastic.co/t/which-is-better-in-terms-of-performance-one-wildcard-or-six-matches/295057)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 0\ **Last updated:** [January 21, 2022, 1:09pm UTC](https://discuss.elastic.co/t/which-is-better-in-terms-of-performance-one-wildcard-or-six-matches/295057 "2022-01-21T13:09:42Z")
Hello Based on the words searched by the user, I want to prioritize products whose matched words are closer to the beginning of the product name. For example, if we have two products as follows "Samsung mobile phone c… --- ## [How to know user who log into Kibana](https://discuss.elastic.co/t/how-to-know-user-who-log-into-kibana/294568)
**Author:** [@harith](https://discuss.elastic.co/u/harith)\ **Replies:** 2\ **Last updated:** [January 21, 2022, 11:37pm UTC](https://discuss.elastic.co/t/how-to-know-user-who-log-into-kibana/294568 "2022-01-21T23:37:17Z")
Hi guys, I'm new here. Sorry if I'm in wrong category. My question: How can I know user who log into my Kibana? Kibana: Free version 7.4.0 Elasticsearch: Free version 7.4.0 What I've already done: I set \ **Author:** [@adnan-krit](https://discuss.elastic.co/u/adnan-krit)\ **Replies:** 3\ **Last updated:** [January 21, 2022, 10:49pm UTC](https://discuss.elastic.co/t/creating-our-own-kibana-metric-based-upon-the-api-response/294075 "2022-01-21T22:49:53Z") Hi Discussion Team, Is there any way we can create our own metric based on an Elasticsearch API response ? So my use case is, that i want to keep track on rejected requests on my Elasticsearch cluster (i.e, response fr… --- ## [Clicking 1 field but filtering based on other field for drildowns](https://discuss.elastic.co/t/clicking-1-field-but-filtering-based-on-other-field-for-drildowns/294836)
**Author:** [@orhiee](https://discuss.elastic.co/u/orhiee)\ **Replies:** 1\ **Last updated:** [January 21, 2022, 10:08pm UTC](https://discuss.elastic.co/t/clicking-1-field-but-filtering-based-on-other-field-for-drildowns/294836 "2022-01-21T22:08:57Z")
Sorry for the possible confusing title, but here is what I am trying to do: in my dashboard for DNS I have name of the domain and number of hits (ex: elastic.co - 100hits). When I click the (+) on Kibana next to "elast… --- ## [Migration Deprecation for Phantom Index Templates](https://discuss.elastic.co/t/migration-deprecation-for-phantom-index-templates/295096)
**Author:** [@cspencer](https://discuss.elastic.co/u/cspencer)\ **Replies:** 0\ **Last updated:** [January 21, 2022, 8:29pm UTC](https://discuss.elastic.co/t/migration-deprecation-for-phantom-index-templates/295096 "2022-01-21T20:29:54Z")
I just upgraded my Elasticsearch cluster from 7.13.4 to 7.16.3 . After upgrading all nodes in the cluster, I checked the migration deprecations endpoint and found this warning: GET \_migration/deprecations { "cluster\_se… --- ## [Limit of total fields \[1000\] in index exceeded](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-exceeded/295093)
**Author:** [@galion96](https://discuss.elastic.co/u/galion96)\ **Replies:** 0\ **Last updated:** [January 21, 2022, 6:33pm UTC](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-exceeded/295093 "2022-01-21T18:33:11Z")
Hello, I saw that there are some concerns to raising the total limit on fields above 1000. I have a situation where I am not sure how to approach it from the design point of view. I lots simple key value pairs: key1:1… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=723) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=725)