# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=740

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 741

---

## [Logstash is running but not sending logs to elasticsearch](https://discuss.elastic.co/t/logstash-is-running-but-not-sending-logs-to-elasticsearch/293433)

<div class="topic-metadata">

**Author:** [@Othmane\_CHHAIBI](https://discuss.elastic.co/u/Othmane_CHHAIBI)\
**Replies:** 1\
**Last updated:** [January 4, 2022, 4:48pm UTC](https://discuss.elastic.co/t/logstash-is-running-but-not-sending-logs-to-elasticsearch/293433 "2022-01-04T16:48:42Z")

</div>

Hello everyone, after the upgrade of logstash from version 6.8 to 7.16.2, the status of logstash is running but it isn't sending logs to Elasticsearch. this is the logstash log file in the image below :slight\_smile: …

---

## [Bar chart single color and bar for Others bucket](https://discuss.elastic.co/t/bar-chart-single-color-and-bar-for-others-bucket/293136)

<div class="topic-metadata">

**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\
**Replies:** 3\
**Last updated:** [January 4, 2022, 4:21pm UTC](https://discuss.elastic.co/t/bar-chart-single-color-and-bar-for-others-bucket/293136 "2022-01-04T16:21:29Z")

</div>

Hi, Lets say I have table of countries and their GDP. I would like to have bar chart splitted on X-Axis by terms (countries) and be also colored by terms. I wanna show TOP 10 and Others buckets. I saw this is possible…

---

## [Can't reach ECE created in strigo lab](https://discuss.elastic.co/t/cant-reach-ece-created-in-strigo-lab/293454)

<div class="topic-metadata">

**Author:** [@paulov](https://discuss.elastic.co/u/paulov)\
**Replies:** 1\
**Last updated:** [January 4, 2022, 2:20pm UTC](https://discuss.elastic.co/t/cant-reach-ece-created-in-strigo-lab/293454 "2022-01-04T14:20:43Z")

</div>

Hi, I just finished installing ECE and upon trying to access the Cloud UI, http://172.31.38.182:12400, I get the page "This site can't be reached". (also not on the 12443 address) The port is up and can be connected t…

---

## [How to whitelist NULL values?](https://discuss.elastic.co/t/how-to-whitelist-null-values/293449)

<div class="topic-metadata">

**Author:** [@Wooden\_tree](https://discuss.elastic.co/u/Wooden_tree)\
**Replies:** 0\
**Last updated:** [January 4, 2022, 1:55pm UTC](https://discuss.elastic.co/t/how-to-whitelist-null-values/293449 "2022-01-04T13:55:57Z")

</div>

Hello, I’m a quite new in Elastic world and I’d like to know if it’s possible to whitelist a NULL value. We have a rule that detects the authentications of our privileges accounts on unauthorized assets which is based …

---

## [Force saved object URL when accessing Kibana](https://discuss.elastic.co/t/force-saved-object-url-when-accessing-kibana/292694)

<div class="topic-metadata">

**Author:** [@Bustencio](https://discuss.elastic.co/u/Bustencio)\
**Replies:** 2\
**Last updated:** [January 4, 2022, 1:18pm UTC](https://discuss.elastic.co/t/force-saved-object-url-when-accessing-kibana/292694 "2022-01-04T13:18:00Z")

</div>

Hi, Currently a lot of our users are accessing old snapshots of our dashboards because they saved them as markers by copying the URL that the browser showed in the search bar. I was wondering if there is any way to for…

---

## [Kibana SIEM and custom indexes](https://discuss.elastic.co/t/kibana-siem-and-custom-indexes/293186)

<div class="topic-metadata">

**Author:** [@ulysse31](https://discuss.elastic.co/u/ulysse31)\
**Replies:** 3\
**Last updated:** [January 4, 2022, 12:39pm UTC](https://discuss.elastic.co/t/kibana-siem-and-custom-indexes/293186 "2022-01-04T12:39:12Z")

</div>

Hello All, We have used Kibana SIEM essentially for network metadata retention, So historically, all network related metadata from various network filebeat modules (suricata, sonicwall, iptables, etc ...) ends up into s…

---

## [After Elasticsearch 7.10-\>7.16 Upgrade Geo Shape Queries Cause Heap Problem ( G1 Humongous Allocation )](https://discuss.elastic.co/t/after-elasticsearch-7-10-7-16-upgrade-geo-shape-queries-cause-heap-problem-g1-humongous-allocation/292912)

<div class="topic-metadata">

**Author:** [@bulent](https://discuss.elastic.co/u/bulent)\
**Replies:** 6\
**Last updated:** [January 4, 2022, 10:03am UTC](https://discuss.elastic.co/t/after-elasticsearch-7-10-7-16-upgrade-geo-shape-queries-cause-heap-problem-g1-humongous-allocation/292912 "2022-01-04T10:03:59Z")

</div>

Hi; We have upgraded our ES Cluster from 7.10.0 to 7.16.2 . After upgrade , we have noticed heap usage increased a lot because of G1 Humongous Allocations. ES heap has a lot of Humongous regions. When Heap usage reac…

---

## [Data not visibile in Kibana](https://discuss.elastic.co/t/data-not-visibile-in-kibana/293122)

<div class="topic-metadata">

**Author:** [@d6036de2b54af16665f4](https://discuss.elastic.co/u/d6036de2b54af16665f4)\
**Replies:** 9\
**Last updated:** [January 4, 2022, 9:20am UTC](https://discuss.elastic.co/t/data-not-visibile-in-kibana/293122 "2022-01-04T09:20:20Z")

</div>

Hello, I ingested data from s3 bucket into Elasticsearch through Logstash pipelines. BUT I AM NOT ABLE TO visualize DATA IN KIBANA . I am only able to see data till october monthsm and after that no data is visible th…

---

## [Calculate total time of a list of documents](https://discuss.elastic.co/t/calculate-total-time-of-a-list-of-documents/293280)

<div class="topic-metadata">

**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\
**Replies:** 3\
**Last updated:** [January 4, 2022, 9:15am UTC](https://discuss.elastic.co/t/calculate-total-time-of-a-list-of-documents/293280 "2022-01-04T09:15:30Z")

</div>

Hi I have some documents with a field called "duration", in the format HH:MM:SS. I would like to calculate the sum of the duration of the documents i have filtered by a date. However, when trying to sum the data, since …

---

## [Unable to start Elasticsearch on my local Windows system](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-my-local-windows-system/293202)

<div class="topic-metadata">

**Author:** [@gauravraje](https://discuss.elastic.co/u/gauravraje)\
**Replies:** 2\
**Last updated:** [January 4, 2022, 8:54am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-my-local-windows-system/293202 "2022-01-04T08:54:43Z")

</div>

Team, I have downloaded Elasticsearch on my local system but when i am trying to open/start elastic server from bin/Elasticsearch.bat, we are facing below issue plz share possible steps to launch Elasticsearch succes…

---

## [How to show "N/A" in a field has null value](https://discuss.elastic.co/t/how-to-show-n-a-in-a-field-has-null-value/293416)

<div class="topic-metadata">

**Author:** [@v.le](https://discuss.elastic.co/u/v.le)\
**Replies:** 1\
**Last updated:** [January 4, 2022, 8:22am UTC](https://discuss.elastic.co/t/how-to-show-n-a-in-a-field-has-null-value/293416 "2022-01-04T08:22:34Z")

</div>

Hi, I am new for Elasticsearch! I had imported my data content to Elasticsearch but I cant work out how to show the N/A value of the sales field. Here's the data : country group brand PT date sales Japan…

---

## [Hexadecimal to Decimal](https://discuss.elastic.co/t/hexadecimal-to-decimal/293361)

<div class="topic-metadata">

**Author:** [@dayajamal](https://discuss.elastic.co/u/dayajamal)\
**Replies:** 2\
**Last updated:** [January 4, 2022, 8:16am UTC](https://discuss.elastic.co/t/hexadecimal-to-decimal/293361 "2022-01-04T08:16:42Z")

</div>

Hi, I am trying to convert a field in my log from hexadecimal to decimal. I tried with the following log: 2021-07-26T16:49:02.189807+0200 | DEBUG | 910EAB70 | flyscan/core/server.1 | ScanActorTask::handle\_message Usin…

---

## [How to run multiple views of the same log set on same VM](https://discuss.elastic.co/t/how-to-run-multiple-views-of-the-same-log-set-on-same-vm/293417)

<div class="topic-metadata">

**Author:** [@smarajit\_mishra](https://discuss.elastic.co/u/smarajit_mishra)\
**Replies:** 0\
**Last updated:** [January 4, 2022, 8:16am UTC](https://discuss.elastic.co/t/how-to-run-multiple-views-of-the-same-log-set-on-same-vm/293417 "2022-01-04T08:16:41Z")

</div>

The requirement here is to create 2 views. 1 with the comprehensive view of all debug logs in like one week or so. And second view to have a job wise view. Where you can filter out logs and errors. The logs in themselv…

---

## [In Logstash Log I am receiving Elasticsearch unreachable error](https://discuss.elastic.co/t/in-logstash-log-i-am-receiving-elasticsearch-unreachable-error/293199)

<div class="topic-metadata">

**Author:** [@d6036de2b54af16665f4](https://discuss.elastic.co/u/d6036de2b54af16665f4)\
**Replies:** 11\
**Last updated:** [January 4, 2022, 7:42am UTC](https://discuss.elastic.co/t/in-logstash-log-i-am-receiving-elasticsearch-unreachable-error/293199 "2022-01-04T07:42:15Z")

</div>

I am not able to view data in kibana and grafana as well . And also i am getting {:message=\>"Elasticsearch Unreachable: error in logstash log

---

## [Composite aggregation behavior when missing a key, not value](https://discuss.elastic.co/t/composite-aggregation-behavior-when-missing-a-key-not-value/293407)

<div class="topic-metadata">

**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\
**Replies:** 0\
**Last updated:** [January 4, 2022, 6:17am UTC](https://discuss.elastic.co/t/composite-aggregation-behavior-when-missing-a-key-not-value/293407 "2022-01-04T06:17:01Z")

</div>

Hi every body! I'm using composite aggregation to multi terms on my data. some where in docs elastic says: By default documents without a value for a given source are ignored. It is possible to include them in the res…

---

## [How to stop auto index creation](https://discuss.elastic.co/t/how-to-stop-auto-index-creation/293275)

<div class="topic-metadata">

**Author:** [@ken\_kentan](https://discuss.elastic.co/u/ken_kentan)\
**Replies:** 1\
**Last updated:** [January 4, 2022, 5:55am UTC](https://discuss.elastic.co/t/how-to-stop-auto-index-creation/293275 "2022-01-04T05:55:47Z")

</div>

I'm using Elasticsearch(7.16.0) with Metricbeat and Filebeat. It will create unused indexes automtically. e.g. dekitateserver-filebeat-7.11.1-\*. Curentlly, Filebeat is using only dekitateserver-filebeat-2021-\*. How to…

---

## [\[16:00:31.383\] \[error\]\[data\]\[elasticsearch\] \[TimeoutError\]: Request timed out](https://discuss.elastic.co/t/1631-383-error-data-elasticsearch-timeouterror-request-timed-out/293277)

<div class="topic-metadata">

**Author:** [@adkyushu](https://discuss.elastic.co/u/adkyushu)\
**Replies:** 1\
**Last updated:** [January 4, 2022, 5:55am UTC](https://discuss.elastic.co/t/1631-383-error-data-elasticsearch-timeouterror-request-timed-out/293277 "2022-01-04T05:55:14Z")

</div>

When I start Kibana, it prompts me log \[15:59:26.369\] \[error\]\[data\]\[elasticsearch\] \[TimeoutError\]: Request timed out log \[15:59:26.370\] \[error\]\[data\]\[elasticsearch\] \[TimeoutError\]: Request timed out log \[15:59:26.372\]…

---

## [Query about the Logstash compatibility with ELK 6.7.2](https://discuss.elastic.co/t/query-about-the-logstash-compatibility-with-elk-6-7-2/293301)

<div class="topic-metadata">

**Author:** [@Sunil\_Kumar1](https://discuss.elastic.co/u/Sunil_Kumar1)\
**Replies:** 1\
**Last updated:** [January 4, 2022, 5:54am UTC](https://discuss.elastic.co/t/query-about-the-logstash-compatibility-with-elk-6-7-2/293301 "2022-01-04T05:54:32Z")

</div>

Hello Team, We are running the Elastic cluster with 6.7.2 version and we are also using logstash 6.7.2 to ship the application logs from our kubernetes containers to Elasticsearch. Our query is, is logstash 6.8.22 is co…

---

## [Correct way to map HTTP Server logs](https://discuss.elastic.co/t/correct-way-to-map-http-server-logs/293357)

<div class="topic-metadata">

**Author:** [@Jonathan\_Rosenboim](https://discuss.elastic.co/u/Jonathan_Rosenboim)\
**Replies:** 1\
**Last updated:** [January 4, 2022, 5:52am UTC](https://discuss.elastic.co/t/correct-way-to-map-http-server-logs/293357 "2022-01-04T05:52:50Z")

</div>

Hi all! I am relatively new with Elasticsearch, and I want to store logs of all HTTP requests made to multiple services, including info like headers, body and params to Elasticsearch, and wish for all this info to be ac…

---

## [BadRequest400Exception latitude must be a number](https://discuss.elastic.co/t/badrequest400exception-latitude-must-be-a-number/293169)

<div class="topic-metadata">

**Author:** [@rayuth](https://discuss.elastic.co/u/rayuth)\
**Replies:** 3\
**Last updated:** [January 4, 2022, 5:48am UTC](https://discuss.elastic.co/t/badrequest400exception-latitude-must-be-a-number/293169 "2022-01-04T05:48:52Z")

</div>

Hi All, I got an error: Elasticsearch\\Common\\Exceptions\\BadRequest400Exception: {"error":{"root\_cause":\[{"type":"parse\_exception","reason":"latitude must be a number"}\],"type":"mapper\_parsing\_exception","reason":"faile…

---

## [Kibana Server Is Not Ready Yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/293393)

<div class="topic-metadata">

**Author:** [@Jared9922](https://discuss.elastic.co/u/Jared9922)\
**Replies:** 1\
**Last updated:** [January 4, 2022, 5:46am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/293393 "2022-01-04T05:46:11Z")

</div>

Hello, I just had a quick question on Kibana and Elasticsearch. I am getting what seems to be a pretty common error. "Kibana server is not ready yet". This happened after I followed this tutorial https://www.elastic.co/…

---

## [How to calculate EXCEPT SET from one to another?](https://discuss.elastic.co/t/how-to-calculate-except-set-from-one-to-another/293244)

<div class="topic-metadata">

**Author:** [@hiteny](https://discuss.elastic.co/u/hiteny)\
**Replies:** 2\
**Last updated:** [December 31, 2021, 11:05am UTC](https://discuss.elastic.co/t/how-to-calculate-except-set-from-one-to-another/293244 "2021-12-31T11:05:31Z")

</div>

I want to get the keys which only appears in bucket2\>metric2 Here is the code : POST testa/\_search?size=0 { "size": 0, "query": { "term": { "create\_date": { "value": "2021-12-25" } } …

---

## [Add grok patterns on unformatted message in Kibana visualization](https://discuss.elastic.co/t/add-grok-patterns-on-unformatted-message-in-kibana-visualization/293379)

<div class="topic-metadata">

**Author:** [@vee](https://discuss.elastic.co/u/vee)\
**Replies:** 1\
**Last updated:** [January 3, 2022, 10:11pm UTC](https://discuss.elastic.co/t/add-grok-patterns-on-unformatted-message-in-kibana-visualization/293379 "2022-01-03T22:11:20Z")

</div>

Hi there, am trying to create a "metric visualization" to show the count of the "number of instances matching a text pattern", but do not see that field within the list of eligible fields when trying to use. From the ma…

---

## [Can we rename any index?](https://discuss.elastic.co/t/can-we-rename-any-index/293377)

<div class="topic-metadata">

**Author:** [@yash\_196](https://discuss.elastic.co/u/yash_196)\
**Replies:** 3\
**Last updated:** [January 3, 2022, 6:11pm UTC](https://discuss.elastic.co/t/can-we-rename-any-index/293377 "2022-01-03T18:11:46Z")

</div>

Is there any way to rename an index without the need of copying data to another index ?

---

## [Sort on object part that exist](https://discuss.elastic.co/t/sort-on-object-part-that-exist/293354)

<div class="topic-metadata">

**Author:** [@MrDeliK](https://discuss.elastic.co/u/MrDeliK)\
**Replies:** 3\
**Last updated:** [January 3, 2022, 5:18pm UTC](https://discuss.elastic.co/t/sort-on-object-part-that-exist/293354 "2022-01-03T17:18:39Z")

</div>

Hi guys, sorry i have another question but this time concerning the sorting of a request. Considering this mapping { "sample\_data": { "mappings": { "properties": { "title": { …

---

## [Completion Suggester not showing results if value is already in previous field](https://discuss.elastic.co/t/completion-suggester-not-showing-results-if-value-is-already-in-previous-field/293370)

<div class="topic-metadata">

**Author:** [@javaman](https://discuss.elastic.co/u/javaman)\
**Replies:** 0\
**Last updated:** [January 3, 2022, 4:12pm UTC](https://discuss.elastic.co/t/completion-suggester-not-showing-results-if-value-is-already-in-previous-field/293370 "2022-01-03T16:12:13Z")

</div>

I experience a problem with the completion suggester in Elasticsearch 7.9.1 (also present in 6.7) If I have more than one suggest input with the same value for different contexts it will only find a completion for the f…

---

## [Is it worse to have very large documents/indices with a ton of data, or split that data into smaller documents/indices using a relational paradigm?](https://discuss.elastic.co/t/is-it-worse-to-have-very-large-documents-indices-with-a-ton-of-data-or-split-that-data-into-smaller-documents-indices-using-a-relational-paradigm/293284)

<div class="topic-metadata">

**Author:** [@annmarie-switzer](https://discuss.elastic.co/u/annmarie-switzer)\
**Replies:** 1\
**Last updated:** [January 3, 2022, 3:59pm UTC](https://discuss.elastic.co/t/is-it-worse-to-have-very-large-documents-indices-with-a-ton-of-data-or-split-that-data-into-smaller-documents-indices-using-a-relational-paradigm/293284 "2022-01-03T15:59:23Z")

</div>

Say I have a store and each product I sell has a document in Elasticsearch: { id: "abc", name: "mittens", price: "$10.00" }, { id: "def", name: "hat", price: "$13.00" } My store's website allows…

---

## [Elastic Agent - critical issues, filling up hard drive space](https://discuss.elastic.co/t/elastic-agent-critical-issues-filling-up-hard-drive-space/293304)

<div class="topic-metadata">

**Author:** [@Ndx](https://discuss.elastic.co/u/Ndx)\
**Replies:** 1\
**Last updated:** [January 3, 2022, 2:40am UTC](https://discuss.elastic.co/t/elastic-agent-critical-issues-filling-up-hard-drive-space/293304 "2022-01-03T02:40:15Z")

</div>

@ferullo I think there might be critical bug in elastic agent - today all servers ( system drives were filled up ) server 2012, 2016, 2019, Win 10 machines as well. Files in C:\\Program Files\\Elastic\\Endpoint\\state\\log\\…

---

## [Search text part in object](https://discuss.elastic.co/t/search-text-part-in-object/293332)

<div class="topic-metadata">

**Author:** [@MrDeliK](https://discuss.elastic.co/u/MrDeliK)\
**Replies:** 3\
**Last updated:** [January 3, 2022, 3:19pm UTC](https://discuss.elastic.co/t/search-text-part-in-object/293332 "2022-01-03T15:19:42Z")

</div>

Hi guys, new here and had some trouble for this basic search. In the database, we have objects containing strings like this. {fr: "french string", en: "english string", nl: "nl string"} for generic purpose (defined in…

---

## [Ingest pipeline to copy data from one field to another based on condition](https://discuss.elastic.co/t/ingest-pipeline-to-copy-data-from-one-field-to-another-based-on-condition/293352)

<div class="topic-metadata">

**Author:** [@Sugand](https://discuss.elastic.co/u/Sugand)\
**Replies:** 0\
**Last updated:** [January 3, 2022, 1:50pm UTC](https://discuss.elastic.co/t/ingest-pipeline-to-copy-data-from-one-field-to-another-based-on-condition/293352 "2022-01-03T13:50:05Z")

</div>

Hi, I'm looking to copy data from one field to another, if initially the destination field is blank assign a value, if non blank don't overwrite to another but upon re-indexing from another source the doc pipeline doesn…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=739)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=741)
