# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=775 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 776 --- ## [How to extract a function from Kibana source code?](https://discuss.elastic.co/t/how-to-extract-a-function-from-kibana-source-code/288996)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 4\ **Last updated:** [November 18, 2021, 12:07pm UTC](https://discuss.elastic.co/t/how-to-extract-a-function-from-kibana-source-code/288996 "2021-11-18T12:07:21Z")
Dear all =) I would like to be able to convert KQL to Lucene in my NodeJS application that uses the Kibana API to create rules. In this I see fromExpression(expression) and toElasticsearchQuery(node, indexPattern) does… --- ## [How to remove write-lock for elasticsearch segment after reindexing?](https://discuss.elastic.co/t/how-to-remove-write-lock-for-elasticsearch-segment-after-reindexing/289580)
**Author:** [@Adarsh\_Nair](https://discuss.elastic.co/u/Adarsh_Nair)\ **Replies:** 3\ **Last updated:** [November 18, 2021, 11:35am UTC](https://discuss.elastic.co/t/how-to-remove-write-lock-for-elasticsearch-segment-after-reindexing/289580 "2021-11-18T11:35:15Z")
How to remove write-lock for elasticsearch segment after reindexing? Looking at the stack trace there is a missing Lucene file which is not good. Did this index/shard have any docs in it before shutdown? Can you list … --- ## [Index management](https://discuss.elastic.co/t/index-management/289444)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 4\ **Last updated:** [November 18, 2021, 11:24am UTC](https://discuss.elastic.co/t/index-management/289444 "2021-11-18T11:24:12Z")
I am reading through the documentation and cannot find a section that describes how to set up date retention, such that data is deleted as it ages. I believe its possible to slim data down over time, but i've not yet se… --- ## [413 Request Entity Too Large - how to debug this? \[Elastic\]\[Logstash\]\[Filebeat\]](https://discuss.elastic.co/t/413-request-entity-too-large-how-to-debug-this-elastic-logstash-filebeat/289584)
**Author:** [@bhrt](https://discuss.elastic.co/u/bhrt)\ **Replies:** 0\ **Last updated:** [November 18, 2021, 11:10am UTC](https://discuss.elastic.co/t/413-request-entity-too-large-how-to-debug-this-elastic-logstash-filebeat/289584 "2021-11-18T11:10:59Z")
Hello, I am facing issue with my logstash configuration. I am feeding logstash with log events using filebeat as a client. There are multiple logfiles (with different file formats) parsed in single logstash pipeline (I… --- ## [How to remove write-lock in elasticsearch segment after re-indexing](https://discuss.elastic.co/t/how-to-remove-write-lock-in-elasticsearch-segment-after-re-indexing/289545)
**Author:** [@Adarsh\_Nair](https://discuss.elastic.co/u/Adarsh_Nair)\ **Replies:** 1\ **Last updated:** [November 18, 2021, 11:02am UTC](https://discuss.elastic.co/t/how-to-remove-write-lock-in-elasticsearch-segment-after-re-indexing/289545 "2021-11-18T11:02:42Z")
Caused by: java.io.FileNotFoundException: no segments\* file found in store(mmapfs(E:\\nice\_systems\\RTServer\\Elasticsearch\\data\\nodes\\0\\indices\\AgGE3T0CQqmNUbTa7mgxog\\0\\index)): files: \[recovery.AXzg-JDdOOIh9tEF6n7G.\_f7t.d… --- ## [Limit Case Visibility based on Tag](https://discuss.elastic.co/t/limit-case-visibility-based-on-tag/288671)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 1\ **Last updated:** [November 18, 2021, 10:54am UTC](https://discuss.elastic.co/t/limit-case-visibility-based-on-tag/288671 "2021-11-18T10:54:05Z")
Hello, I don't want every user who has Read permissions in the Security app to be able to view the details of All cases. Is it possible to limit the visibility of Cases based on the Tag value? Thanks --- ## [Calculate size of top hit in elasticsearch based on number of buckets](https://discuss.elastic.co/t/calculate-size-of-top-hit-in-elasticsearch-based-on-number-of-buckets/289577)
**Author:** [@Nebojsa](https://discuss.elastic.co/u/Nebojsa)\ **Replies:** 0\ **Last updated:** [November 18, 2021, 10:39am UTC](https://discuss.elastic.co/t/calculate-size-of-top-hit-in-elasticsearch-based-on-number-of-buckets/289577 "2021-11-18T10:39:07Z")
I'm filtering documents based on top left and bottom right coordinates and after that using geohash forming buckets. Each bucket has fixed number of top documents in it. I want to always show for example 60 documents, eq… --- ## [Duplication data in the event](https://discuss.elastic.co/t/duplication-data-in-the-event/289567)
**Author:** [@EugeneZ](https://discuss.elastic.co/u/EugeneZ)\ **Replies:** 0\ **Last updated:** [November 18, 2021, 10:09am UTC](https://discuss.elastic.co/t/duplication-data-in-the-event/289567 "2021-11-18T10:09:41Z")
Hi guys I have some log from filebeat--logstash--\> elastic I see logs in kibana and it is strange in JSON for example: { "\_index": "test-fbt-2021.11", "\_type": "\_doc", "\_id": "dvMV\_3wBOQF85F2Xl-Y4", "\_score"… --- ## [Date histogram aggregation returns a wrong number of buckets and wrong start date of each bucket](https://discuss.elastic.co/t/date-histogram-aggregation-returns-a-wrong-number-of-buckets-and-wrong-start-date-of-each-bucket/289324)
**Author:** [@Helmi\_Akermi](https://discuss.elastic.co/u/Helmi_Akermi)\ **Replies:** 2\ **Last updated:** [November 18, 2021, 10:04am UTC](https://discuss.elastic.co/t/date-histogram-aggregation-returns-a-wrong-number-of-buckets-and-wrong-start-date-of-each-bucket/289324 "2021-11-18T10:04:06Z")
Elasticsearch version is 7 Code : GET /my\_alias/\_search { "from": 0, "size": 10, "query": { "bool": { "must": \[ { "range": { "timestamp": { "gte": 16364160000… --- ## [Retrieve each filter response in one result](https://discuss.elastic.co/t/retrieve-each-filter-response-in-one-result/289467)
**Author:** [@uedemir](https://discuss.elastic.co/u/uedemir)\ **Replies:** 2\ **Last updated:** [November 18, 2021, 8:36am UTC](https://discuss.elastic.co/t/retrieve-each-filter-response-in-one-result/289467 "2021-11-18T08:36:37Z")
Hi, Is it possible to combine three or more filter query with each wished size and get ids of document separately in result? For example; size parameter in query is 100 and I need to get 10 documents from first of my f… --- ## [Urgent Help Required :: Need to sync specific Feilds from three different indexes to single Index using Logstash pipeline](https://discuss.elastic.co/t/urgent-help-required-need-to-sync-specific-feilds-from-three-different-indexes-to-single-index-using-logstash-pipeline/289535)
**Author:** [@BASHEER\_DS](https://discuss.elastic.co/u/BASHEER_DS)\ **Replies:** 0\ **Last updated:** [November 18, 2021, 6:59am UTC](https://discuss.elastic.co/t/urgent-help-required-need-to-sync-specific-feilds-from-three-different-indexes-to-single-index-using-logstash-pipeline/289535 "2021-11-18T06:59:20Z")
Hi, I am trying to sync specific fields from three different index in to single index using Logstash pipeline. Am using Elasticsearch as input, filter and output plugins, But while creating Pipeline am getting error(No … --- ## [How to sync specific fields based on common values of three different collections in MongoDB to ElasticSearch using logstash pipeline](https://discuss.elastic.co/t/how-to-sync-specific-fields-based-on-common-values-of-three-different-collections-in-mongodb-to-elasticsearch-using-logstash-pipeline/289532)
**Author:** [@BASHEER\_DS](https://discuss.elastic.co/u/BASHEER_DS)\ **Replies:** 0\ **Last updated:** [November 18, 2021, 6:42am UTC](https://discuss.elastic.co/t/how-to-sync-specific-fields-based-on-common-values-of-three-different-collections-in-mongodb-to-elasticsearch-using-logstash-pipeline/289532 "2021-11-18T06:42:54Z")
In Logstash Pipeline we are using mongoDB as input plugin and we are using three different collection to sync specific Fields in Elasticsearch Index based on common values of different collections. But How to sync specif… --- ## [Reindex api request failing on Elasticsearch 6.6](https://discuss.elastic.co/t/reindex-api-request-failing-on-elasticsearch-6-6/289428)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 4\ **Last updated:** [November 18, 2021, 5:09am UTC](https://discuss.elastic.co/t/reindex-api-request-failing-on-elasticsearch-6-6/289428 "2021-11-18T05:09:33Z")
Facing issue while running reindex api on ES v6.6. Please refer below shared output: Command: $ curl -XPOST http://\:9200/\_reindex?pretty -H 'Content-Type: application/json' -d' { "source": { "in… --- ## [Logstashのkvフィルターについて](https://discuss.elastic.co/t/logstash-kv/289523)
**Author:** [@a-naga](https://discuss.elastic.co/u/a-naga)\ **Replies:** 0\ **Last updated:** [November 18, 2021, 4:08am UTC](https://discuss.elastic.co/t/logstash-kv/289523 "2021-11-18T04:08:47Z")
logstashで以下のようなフォーマットのログを取り込もうとしています。 {column1=1 column2=MESSAGE XXXXX column3=10.xxx.xx.xx column4=test1 column5=test2} 以下のようにkvフィルターを使用していますが、 「column2」が「"column2" : "MESSAGE"」になります。 kv { source =\> "message" … --- ## [Unable to see DNS queries though it shows count](https://discuss.elastic.co/t/unable-to-see-dns-queries-though-it-shows-count/289388)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 2\ **Last updated:** [November 18, 2021, 2:53am UTC](https://discuss.elastic.co/t/unable-to-see-dns-queries-though-it-shows-count/289388 "2021-11-18T02:53:54Z")
Hi Team, My elastic stack version is 7.15 and have windows AD which has DNS roles on it. I configured the SIEM APP and enrolled the server with elastic agent and fleet server. However in Security App/Kibana under Networ… --- ## [Mssql server data -\> elasticsearch](https://discuss.elastic.co/t/mssql-server-data-elasticsearch/289517)
**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\ **Replies:** 0\ **Last updated:** [November 18, 2021, 1:03am UTC](https://discuss.elastic.co/t/mssql-server-data-elasticsearch/289517 "2021-11-18T01:03:58Z")
We currently have an application that sends it's logs to an mssql server database. I'd like to pull those logs into Elasticsearch directly from sql server similar using filebeat to import file based logs. I've looked a… --- ## [Does an index pattern have a limit to the amount of fields it contains?](https://discuss.elastic.co/t/does-an-index-pattern-have-a-limit-to-the-amount-of-fields-it-contains/289434)
**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\ **Replies:** 1\ **Last updated:** [November 17, 2021, 11:26pm UTC](https://discuss.elastic.co/t/does-an-index-pattern-have-a-limit-to-the-amount-of-fields-it-contains/289434 "2021-11-17T23:26:44Z")
Hi, We have an index pattern that is currently at 1008 fields and when trying to add a new index that would fall into this index pattern the extra fields are not appearing on the index pattern. I have had a look and al… --- ## [How to avoid memory leak on creating role in huge elastic instance](https://discuss.elastic.co/t/how-to-avoid-memory-leak-on-creating-role-in-huge-elastic-instance/289426)
**Author:** [@Hamidreza\_Ahmadinia](https://discuss.elastic.co/u/Hamidreza_Ahmadinia)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 11:24pm UTC](https://discuss.elastic.co/t/how-to-avoid-memory-leak-on-creating-role-in-huge-elastic-instance/289426 "2021-11-17T23:24:10Z")
hi I have an Elasticsearch instane with 25,612,514,771 documents When i create role in kibana, unassigned\_shards inceases and status turn to yellow. for about 10 minutes Search Latency increases too. --- ## [Kibana kql suggestions not working](https://discuss.elastic.co/t/kibana-kql-suggestions-not-working/289240)
**Author:** [@Tingda\_Du](https://discuss.elastic.co/u/Tingda_Du)\ **Replies:** 10\ **Last updated:** [November 17, 2021, 10:32pm UTC](https://discuss.elastic.co/t/kibana-kql-suggestions-not-working/289240 "2021-11-17T22:32:35Z")
Do I need to configure anything to make kibana kql filtering suggestions working? --- ## ['logging-and-metrics' system owned cluster unhealthy with Kibana instance deployment failing](https://discuss.elastic.co/t/logging-and-metrics-system-owned-cluster-unhealthy-with-kibana-instance-deployment-failing/289505)
**Author:** [@A\_I](https://discuss.elastic.co/u/A_I)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 9:02pm UTC](https://discuss.elastic.co/t/logging-and-metrics-system-owned-cluster-unhealthy-with-kibana-instance-deployment-failing/289505 "2021-11-17T21:02:36Z")
I am unfortunately not able to provide logs at this time however guidance on a starting point would be helpful. We recently needed to increase the capacity of our logging-and-metrics cluster, the advice was to change sy… --- ## [Understanding extremely slow rewrite\_time due to fuzziness](https://discuss.elastic.co/t/understanding-extremely-slow-rewrite-time-due-to-fuzziness/289502)
**Author:** [@blackmad](https://discuss.elastic.co/u/blackmad)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 7:47pm UTC](https://discuss.elastic.co/t/understanding-extremely-slow-rewrite-time-due-to-fuzziness/289502 "2021-11-17T19:47:00Z")
I'm managing a relatively large ES cluster and I'm struggling to understand why I'm seeing such large rewrite\_time on searches of more than a few tokens. For this nonsense query "djkh hjk hjk hjkh jhkj jhjk jkh jewrh" I… --- ## [Elasticsearch for social networking sites like instagram for user posts and likes,](https://discuss.elastic.co/t/elasticsearch-for-social-networking-sites-like-instagram-for-user-posts-and-likes/289496)
**Author:** [@MOHIT2710](https://discuss.elastic.co/u/MOHIT2710)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 6:53pm UTC](https://discuss.elastic.co/t/elasticsearch-for-social-networking-sites-like-instagram-for-user-posts-and-likes/289496 "2021-11-17T18:53:10Z")
Hi Elastic team, I need your suggestions for using Elasticsearch as a search engine for my application similar to instagram or fb. Use case::If user is searching for any word that could be any post title,username,chann… --- ## [Query with wildcard](https://discuss.elastic.co/t/query-with-wildcard/289372)
**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 6:47pm UTC](https://discuss.elastic.co/t/query-with-wildcard/289372 "2021-11-17T18:47:53Z")
I want to generate phrase queries with wildcard, but this query returns 0 result: "query": { "bool": { "must": \[ { "query\_string": { "query": "\\"user login authen\*\\"", … --- ## [TSVB ability to use tokens in panel filters that represent global time filter values to adjust viz based on global time selection](https://discuss.elastic.co/t/tsvb-ability-to-use-tokens-in-panel-filters-that-represent-global-time-filter-values-to-adjust-viz-based-on-global-time-selection/287841)
**Author:** [@catchsvix](https://discuss.elastic.co/u/catchsvix)\ **Replies:** 6\ **Last updated:** [November 17, 2021, 6:24pm UTC](https://discuss.elastic.co/t/tsvb-ability-to-use-tokens-in-panel-filters-that-represent-global-time-filter-values-to-adjust-viz-based-on-global-time-selection/287841 "2021-11-17T18:24:11Z")
Apologies if I'm not using the correct terminology for the kibana fields I'm referring to. I have a need to create a day-over-day (or WoW etc) comparison visualization for a given time range. I'm able to do it for a fi… --- ## [?refresh or block on the Search API](https://discuss.elastic.co/t/refresh-or-block-on-the-search-api/289382)
**Author:** [@Bryji](https://discuss.elastic.co/u/Bryji)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 1:41am UTC](https://discuss.elastic.co/t/refresh-or-block-on-the-search-api/289382 "2021-11-17T01:41:22Z")
It would be nice if the Search API supported ?refresh like the Index/Update/Delete APIs, so that requests could block until a consistent result could be returned. Has this ever been discussed / proposed? Any other sugges… --- ## [Failed to start Elasticsearch.7.15.2](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-15-2/289361)
**Author:** [@tranha31](https://discuss.elastic.co/u/tranha31)\ **Replies:** 6\ **Last updated:** [November 17, 2021, 4:52pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-15-2/289361 "2021-11-17T16:52:57Z")
I want to start Elasticsearch v7.12.1. But it is not working. I don't know what is wrong. Someone help me, please!!!!!!!! elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.se… --- ## [Accessing index shard directories via pylucene](https://discuss.elastic.co/t/accessing-index-shard-directories-via-pylucene/289384)
**Author:** [@Ben\_Timby](https://discuss.elastic.co/u/Ben_Timby)\ **Replies:** 4\ **Last updated:** [November 17, 2021, 4:50pm UTC](https://discuss.elastic.co/t/accessing-index-shard-directories-via-pylucene/289384 "2021-11-17T16:50:36Z")
Hi, I have old index files from Elasticsearch 1.7.6. The version of lucene utilized is 4.10.4, I was able to get lucene to open a directory that represents one of the three shards of my index. I can pull the documents fr… --- ## [Delete by query?](https://discuss.elastic.co/t/delete-by-query/289472)
**Author:** [@Saliinger](https://discuss.elastic.co/u/Saliinger)\ **Replies:** 2\ **Last updated:** [November 17, 2021, 4:27pm UTC](https://discuss.elastic.co/t/delete-by-query/289472 "2021-11-17T16:27:25Z")
Hello. :slight\_smile: I'm using delete\_by\_query to remove old data from all index. Looks like that: POST \*/\_delete\_by\_query { "query": { "bool": { "filter": \[ { "range": { "@t… --- ## [File Integrity Monitoring for Windows Using Elastic Agent](https://discuss.elastic.co/t/file-integrity-monitoring-for-windows-using-elastic-agent/289476)
**Author:** [@afarley](https://discuss.elastic.co/u/afarley)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 3:46pm UTC](https://discuss.elastic.co/t/file-integrity-monitoring-for-windows-using-elastic-agent/289476 "2021-11-17T15:46:35Z")
Hello all, I have been looking into how to implement Elastic Security most effectively to meet PCI requirements and a snag I've run into with other tools is successfully implementing FIM in a Windows environment. I am n… --- ## [Dashboard TSVB panel item url ignores filter when linked to dashboard](https://discuss.elastic.co/t/dashboard-tsvb-panel-item-url-ignores-filter-when-linked-to-dashboard/289431)
**Author:** [@ella.danielsson](https://discuss.elastic.co/u/ella.danielsson)\ **Replies:** 1\ **Last updated:** [November 17, 2021, 4:17pm UTC](https://discuss.elastic.co/t/dashboard-tsvb-panel-item-url-ignores-filter-when-linked-to-dashboard/289431 "2021-11-17T16:17:17Z")
Hi, I have linked the objects in a TSVB data table to another kibana dashboard via the item URL option. In the link I use the value of the data table as input to a query like: meta:(alias:!n,disabled:!f,index:'5beaebb… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=774) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=776)