# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=725

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 726

---

## [Calculation of percentages](https://discuss.elastic.co/t/calculation-of-percentages/295082)

<div class="topic-metadata">

**Author:** [@RaulSan](https://discuss.elastic.co/u/RaulSan)\
**Replies:** 1\
**Last updated:** [January 21, 2022, 6:00pm UTC](https://discuss.elastic.co/t/calculation-of-percentages/295082 "2022-01-21T18:00:08Z")

</div>

Hello! I am somewhat of a newbie to Kibana. I'm not sure how to calculate percentages. I tell you my problem with a simple example. I have candies of different flavors bought in different stores. I have already eaten …

---

## [Querying on multiple flattened sub-fields for an array of items](https://discuss.elastic.co/t/querying-on-multiple-flattened-sub-fields-for-an-array-of-items/294990)

<div class="topic-metadata">

**Author:** [@robert-n-stewart](https://discuss.elastic.co/u/robert-n-stewart)\
**Replies:** 4\
**Last updated:** [January 21, 2022, 5:00pm UTC](https://discuss.elastic.co/t/querying-on-multiple-flattened-sub-fields-for-an-array-of-items/294990 "2022-01-21T17:00:01Z")

</div>

If I have a flattened or object field named X, which is an array of objects with subfields A and B, how can I query for an item that has specific values for both A and B? E.g. if I run the following: { "query": { …

---

## [Facing issues in logstash](https://discuss.elastic.co/t/facing-issues-in-logstash/295075)

<div class="topic-metadata">

**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\
**Replies:** 1\
**Last updated:** [January 21, 2022, 4:44pm UTC](https://discuss.elastic.co/t/facing-issues-in-logstash/295075 "2022-01-21T16:44:59Z")

</div>

/usr/share/logstash/bin/logstash --config.test\_and\_exit -f nginx.conf --path.settings /etc/logstash -----------------Getting this error when i run the logstash --------------------------------------------- Thread.exclu…

---

## [Logstash 8.0 @timestamp with nanoseconds precision](https://discuss.elastic.co/t/logstash-8-0-timestamp-with-nanoseconds-precision/294910)

<div class="topic-metadata">

**Author:** [@ale\_ve](https://discuss.elastic.co/u/ale_ve)\
**Replies:** 1\
**Last updated:** [January 21, 2022, 4:29pm UTC](https://discuss.elastic.co/t/logstash-8-0-timestamp-with-nanoseconds-precision/294910 "2022-01-21T16:29:01Z")

</div>

Hi, I'd need help to understand how to set the @timestamp field with the content of another field that contains date and time with nanoseconds precision. I've tried to use the date match but it's not clear to me which p…

---

## [Kibana plugin development connection issue](https://discuss.elastic.co/t/kibana-plugin-development-connection-issue/295078)

<div class="topic-metadata">

**Author:** [@Richard\_L\_Nichols](https://discuss.elastic.co/u/Richard_L_Nichols)\
**Replies:** 0\
**Last updated:** [January 21, 2022, 3:35pm UTC](https://discuss.elastic.co/t/kibana-plugin-development-connection-issue/295078 "2022-01-21T15:35:32Z")

</div>

I have Elastic and Kibana running successfully. Now I’m unsure how to launch the development version. I went to the directory in WSL and used the “yarn start” command. I have updated the kibana.yml file to reflect the v…

---

## [Question on replica shards](https://discuss.elastic.co/t/question-on-replica-shards/295076)

<div class="topic-metadata">

**Author:** [@Pradyumna\_Achar](https://discuss.elastic.co/u/Pradyumna_Achar)\
**Replies:** 0\
**Last updated:** [January 21, 2022, 3:32pm UTC](https://discuss.elastic.co/t/question-on-replica-shards/295076 "2022-01-21T15:32:11Z")

</div>

Hello, I have a question regarding replica shards. As I understand, a write to the primary gets propagated to replicas on other nodes via requests that use the same write pool and the same write queue as user-initiated …

---

## [Absolute instead of relative URL field](https://discuss.elastic.co/t/absolute-instead-of-relative-url-field/295068)

<div class="topic-metadata">

**Author:** [@blumre](https://discuss.elastic.co/u/blumre)\
**Replies:** 0\
**Last updated:** [January 21, 2022, 2:49pm UTC](https://discuss.elastic.co/t/absolute-instead-of-relative-url-field/295068 "2022-01-21T14:49:00Z")

</div>

Hi, I have one field in an index that contains list of URLs. I changed the index pattern to be URL but the problem is that most of the URLS opened as relative paths although I want it to be absolute , for example if the …

---

## [Indexing flattened field with unique keys is very slow](https://discuss.elastic.co/t/indexing-flattened-field-with-unique-keys-is-very-slow/294833)

<div class="topic-metadata">

**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\
**Replies:** 11\
**Last updated:** [January 21, 2022, 1:38pm UTC](https://discuss.elastic.co/t/indexing-flattened-field-with-unique-keys-is-very-slow/294833 "2022-01-21T13:38:20Z")

</div>

I have a logstash ingest process that ingests records at 4k events per second. Recently we added field that is an object consisting of unique keys. I save it as a flattened data type. But ingest processing time starts at…

---

## [Know Kibana & elasticsearch metrics](https://discuss.elastic.co/t/know-kibana-elasticsearch-metrics/295050)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [January 21, 2022, 1:32pm UTC](https://discuss.elastic.co/t/know-kibana-elasticsearch-metrics/295050 "2022-01-21T13:32:06Z")

</div>

Hi, i want to know my Elasticsearch metrics like RAM, heap size, CPU , memory etc. How do I know these ..Is there a Elasticsearch command for this?

---

## [Logstash - Json Parse Failure and Encoding Problem](https://discuss.elastic.co/t/logstash-json-parse-failure-and-encoding-problem/293447)

<div class="topic-metadata">

**Author:** [@nevincansel](https://discuss.elastic.co/u/nevincansel)\
**Replies:** 7\
**Last updated:** [January 21, 2022, 1:26pm UTC](https://discuss.elastic.co/t/logstash-json-parse-failure-and-encoding-problem/293447 "2022-01-21T13:26:32Z")

</div>

Hello, I have a pipeline with tcp input in logstash and pipeline is working without a problem but logs are broken. These are error logs in logstash. 13:34:43.868 \[nioEventLoopGroup-2-2\] WARN logstash.codecs.jsonlines …

---

## [Visual Builder issue - The request for this panel failed](https://discuss.elastic.co/t/visual-builder-issue-the-request-for-this-panel-failed/295056)

<div class="topic-metadata">

**Author:** [@omshankarkumar161](https://discuss.elastic.co/u/omshankarkumar161)\
**Replies:** 0\
**Last updated:** [January 21, 2022, 12:43pm UTC](https://discuss.elastic.co/t/visual-builder-issue-the-request-for-this-panel-failed/295056 "2022-01-21T12:43:07Z")

</div>

While creating Time Series visualization using Visual builder, i am facing below issue.

---

## [Support-diagnostics](https://discuss.elastic.co/t/support-diagnostics/294925)

<div class="topic-metadata">

**Author:** [@jadhav.datta](https://discuss.elastic.co/u/jadhav.datta)\
**Replies:** 1\
**Last updated:** [January 21, 2022, 12:05pm UTC](https://discuss.elastic.co/t/support-diagnostics/294925 "2022-01-21T12:05:58Z")

</div>

Getting below error while run diagnostics my windows workstation , please help . JAVA\_HOME found, using C:\\Program Files\\Java\\jdk-17.0.2 2022-01-20 10:38:47,017 main ERROR Unable to locate appender "diag" for logger c…

---

## [Retreive all documents of specific index from ES with snapshot](https://discuss.elastic.co/t/retreive-all-documents-of-specific-index-from-es-with-snapshot/295034)

<div class="topic-metadata">

**Author:** [@Hyeongjun\_Kim](https://discuss.elastic.co/u/Hyeongjun_Kim)\
**Replies:** 1\
**Last updated:** [January 21, 2022, 11:45am UTC](https://discuss.elastic.co/t/retreive-all-documents-of-specific-index-from-es-with-snapshot/295034 "2022-01-21T11:45:13Z")

</div>

Hello, I want to extract all documents from ES index. More than 6M documents are stored in target index. In order to get all documents with scroll or search\_after API, I have to send lots of search requests. Many sear…

---

## [Vector tiles search not returning hits on geo\_shape fields](https://discuss.elastic.co/t/vector-tiles-search-not-returning-hits-on-geo-shape-fields/294926)

<div class="topic-metadata">

**Author:** [@henri.normak](https://discuss.elastic.co/u/henri.normak)\
**Replies:** 11\
**Last updated:** [January 21, 2022, 11:33am UTC](https://discuss.elastic.co/t/vector-tiles-search-not-returning-hits-on-geo-shape-fields/294926 "2022-01-21T11:33:28Z")

</div>

The index mapping being used is equivalent to this one (simplified): PUT locations { "mappings": { "properties": { "geoshape": { "type": "geo\_shape" } } } } There is a specific document …

---

## [Help with collecting Custom Windows Event Logs with Elastic Agent](https://discuss.elastic.co/t/help-with-collecting-custom-windows-event-logs-with-elastic-agent/295053)

<div class="topic-metadata">

**Author:** [@Josh\_G](https://discuss.elastic.co/u/Josh_G)\
**Replies:** 0\
**Last updated:** [January 21, 2022, 11:29am UTC](https://discuss.elastic.co/t/help-with-collecting-custom-windows-event-logs-with-elastic-agent/295053 "2022-01-21T11:29:11Z")

</div>

Hello everyone! A very rudimentary question I think, but haven't been able to find clarification myself. I am still very much getting to grips with the platform, and logging itself, so apologies if it is a really obviou…

---

## [Elastic Endpoint Security Data Sources](https://discuss.elastic.co/t/elastic-endpoint-security-data-sources/295052)

<div class="topic-metadata">

**Author:** [@beijo](https://discuss.elastic.co/u/beijo)\
**Replies:** 0\
**Last updated:** [January 21, 2022, 10:49am UTC](https://discuss.elastic.co/t/elastic-endpoint-security-data-sources/295052 "2022-01-21T10:49:08Z")

</div>

Hello, right now I'm testing the Elastic-Agent with the endpoint security integration in a lab environment and I'm very happy with it so far. Via integration settings we can define the events to be collected on windows…

---

## [Security rule exception not working](https://discuss.elastic.co/t/security-rule-exception-not-working/294811)

<div class="topic-metadata">

**Author:** [@masual](https://discuss.elastic.co/u/masual)\
**Replies:** 4\
**Last updated:** [January 21, 2022, 10:20am UTC](https://discuss.elastic.co/t/security-rule-exception-not-working/294811 "2022-01-21T10:20:31Z")

</div>

Hi everyone, We are using Elasticsearch and Kibana version 7.16.3. We have defined a security rule and added some exceptions to this rule. Some of the exceptions are working fine, filtering the events that match the e…

---

## [Customize Date range not appearing in visualization gear icon](https://discuss.elastic.co/t/customize-date-range-not-appearing-in-visualization-gear-icon/294980)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 3\
**Last updated:** [January 21, 2022, 10:16am UTC](https://discuss.elastic.co/t/customize-date-range-not-appearing-in-visualization-gear-icon/294980 "2022-01-21T10:16:51Z")

</div>

Hi, I want to customize Date range not appearing in visualization gear icon. I want to show chart for past 7 days for only this visualization. But this option cannot be seen. I can only see Edit this tile. Any idea w…

---

## [Change the default precision\_threshold from 3000 to 40000](https://discuss.elastic.co/t/change-the-default-precision-threshold-from-3000-to-40000/295038)

<div class="topic-metadata">

**Author:** [@zevodku](https://discuss.elastic.co/u/zevodku)\
**Replies:** 0\
**Last updated:** [January 21, 2022, 9:03am UTC](https://discuss.elastic.co/t/change-the-default-precision-threshold-from-3000-to-40000/295038 "2022-01-21T09:03:59Z")

</div>

Hello folks, Is there any way to change the default precision\_threshold from "3000" to "40000" as a global thing? Like in the configuration files (Elasticsearch.yml or kibana.yml)? I'm using cardinality extensively and…

---

## [Kibana not loading due to "Cannot read properties of undefined"](https://discuss.elastic.co/t/kibana-not-loading-due-to-cannot-read-properties-of-undefined/295036)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 0\
**Last updated:** [January 21, 2022, 8:55am UTC](https://discuss.elastic.co/t/kibana-not-loading-due-to-cannot-read-properties-of-undefined/295036 "2022-01-21T08:55:55Z")

</div>

I am trying to spin up a kibana / Elasticsearch stack using ECK operator. This is something I have done multiple times. In just one of the attempts however, kibana is not loading on my browser with the following error …

---

## [Multi field custom elasticsearch analyzer](https://discuss.elastic.co/t/multi-field-custom-elasticsearch-analyzer/294613)

<div class="topic-metadata">

**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\
**Replies:** 2\
**Last updated:** [January 21, 2022, 8:54am UTC](https://discuss.elastic.co/t/multi-field-custom-elasticsearch-analyzer/294613 "2022-01-21T08:54:40Z")

</div>

I am creating an Elasticsearch plugin. I want to analyze a url in two different ways using the same analyzer that is pattern analyzer but with different regular expressions for getting different tokens. I have started c…

---

## [Enrichment - is it the best way?](https://discuss.elastic.co/t/enrichment-is-it-the-best-way/294802)

<div class="topic-metadata">

**Author:** [@jkulcsar](https://discuss.elastic.co/u/jkulcsar)\
**Replies:** 3\
**Last updated:** [January 21, 2022, 8:44am UTC](https://discuss.elastic.co/t/enrichment-is-it-the-best-way/294802 "2022-01-21T08:44:27Z")

</div>

Hello all, We've been using Elastic in capturing and consolidating IoT data however - my experience with Elastic is however limited to about 6 months. Consider the scenario: large number of IoT devices with known s…

---

## [Lower case problem in field names](https://discuss.elastic.co/t/lower-case-problem-in-field-names/295026)

<div class="topic-metadata">

**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\
**Replies:** 1\
**Last updated:** [January 21, 2022, 8:42am UTC](https://discuss.elastic.co/t/lower-case-problem-in-field-names/295026 "2022-01-21T08:42:41Z")

</div>

Hello dear friends, I have a problem, if you can help me I would be very happy. The problem is that; I reindexed from an existing index. While reindexing, there was a capitalization problem in the field names, so I added…

---

## [Pipeline in pipe output Logstash](https://discuss.elastic.co/t/pipeline-in-pipe-output-logstash/295032)

<div class="topic-metadata">

**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Replies:** 0\
**Last updated:** [January 21, 2022, 8:41am UTC](https://discuss.elastic.co/t/pipeline-in-pipe-output-logstash/295032 "2022-01-21T08:41:16Z")

</div>

hello! I would like to know if, like an Elasticsearch output, we can use pipeline =\> "%{\[@metadata\]\[pipeline\]}" for parsing logs, we could use these predefined pipelines in the pipe type output to parse previously parse…

---

## [SIEM News feed on securitySolution:enableNewsFeed(Advance Settings) is not working](https://discuss.elastic.co/t/siem-news-feed-on-securitysolution-enablenewsfeed-advance-settings-is-not-working/295030)

<div class="topic-metadata">

**Author:** [@Ilias\_Kou](https://discuss.elastic.co/u/Ilias_Kou)\
**Replies:** 0\
**Last updated:** [January 21, 2022, 8:34am UTC](https://discuss.elastic.co/t/siem-news-feed-on-securitysolution-enablenewsfeed-advance-settings-is-not-working/295030 "2022-01-21T08:34:34Z")

</div>

I am trying to change the default news feed from https://feeds.elastic.co/security-solution to anything on this list for example https://www.reddit.com/r/netsecstudents/comments/5rtmu1/rss\_infosec\_news/ but I find no suc…

---

## [Kibana not loading due to unsafe script](https://discuss.elastic.co/t/kibana-not-loading-due-to-unsafe-script/295025)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 0\
**Last updated:** [January 21, 2022, 7:50am UTC](https://discuss.elastic.co/t/kibana-not-loading-due-to-unsafe-script/295025 "2022-01-21T07:50:25Z")

</div>

I have upgraded my elastic / kibana stack from 7.12.1 to 7.16.2 Unfortunately and despite the fact that elasticsearch is now healthy, kibana is not loading due to a js error: login:1 Refused to execute script from 'htt…

---

## [Logstash configuration to process 1M events per second](https://discuss.elastic.co/t/logstash-configuration-to-process-1m-events-per-second/288989)

<div class="topic-metadata">

**Author:** [@KunwarAkanksha](https://discuss.elastic.co/u/KunwarAkanksha)\
**Replies:** 11\
**Last updated:** [January 21, 2022, 7:23am UTC](https://discuss.elastic.co/t/logstash-configuration-to-process-1m-events-per-second/288989 "2022-01-21T07:23:56Z")

</div>

I have events of around 1M (real time), logstash is proecessing 40K at one instances and one pipeline, if I increase the logstash instance to two it goes around 30K each (60K cummulative) but increasing the logstash inst…

---

## [Elasticsearch disk based shard allocation tuning](https://discuss.elastic.co/t/elasticsearch-disk-based-shard-allocation-tuning/293616)

<div class="topic-metadata">

**Author:** [@tarund](https://discuss.elastic.co/u/tarund)\
**Replies:** 4\
**Last updated:** [January 21, 2022, 5:38am UTC](https://discuss.elastic.co/t/elasticsearch-disk-based-shard-allocation-tuning/293616 "2022-01-21T05:38:50Z")

</div>

I am running 2 node Elasticsearch cluster v7.9.2 Ingesting data through APM-Server v7.15.0, creates ~50 new indices daily with pattern apm-7.15.0-\<service.name\>-transaction-YYYY.MM.DD Observing that all new primary sh…

---

## [Error: Port 5601 is already in use. Another instance of Kibana may be running!--Sometime it's working sometime not if it is not worked then i restart my pc then it's worked](https://discuss.elastic.co/t/error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running-sometime-its-working-sometime-not-if-it-is-not-worked-then-i-restart-my-pc-then-its-worked/294762)

<div class="topic-metadata">

**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\
**Replies:** 2\
**Last updated:** [January 21, 2022, 5:26am UTC](https://discuss.elastic.co/t/error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running-sometime-its-working-sometime-not-if-it-is-not-worked-then-i-restart-my-pc-then-its-worked/294762 "2022-01-21T05:26:17Z")

</div>

I already kill port 5601 and also reinstall kibana but still not working log \[10:32:00.035\] \[info\]\[plugins-service\] Plugin "metricsEntities" is disabled. log \[10:32:00.161\] \[fatal\]\[root\] Error: Port 5601 is alread…

---

## [Index pattern \> field format \> color hex codes removed in 7.15.2?](https://discuss.elastic.co/t/index-pattern-field-format-color-hex-codes-removed-in-7-15-2/294442)

<div class="topic-metadata">

**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\
**Replies:** 1\
**Last updated:** [January 21, 2022, 4:39am UTC](https://discuss.elastic.co/t/index-pattern-field-format-color-hex-codes-removed-in-7-15-2/294442 "2022-01-21T04:39:28Z")

</div>

I used to be able to set a hex code for the particular color that I wanted for a field in an index pattern, but that looks to have been replaced with a color graph and no option to set the value exactly. so now I cannot…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=724)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=726)
