# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=783 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 784 --- ## [The data table in the dashboard does not support click sorting](https://discuss.elastic.co/t/the-data-table-in-the-dashboard-does-not-support-click-sorting/288479)
**Author:** [@Pad0y](https://discuss.elastic.co/u/Pad0y)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 8:51pm UTC](https://discuss.elastic.co/t/the-data-table-in-the-dashboard-does-not-support-click-sorting/288479 "2021-11-08T20:51:06Z")
In kibana 7.x, the dashboard cannot be sorted by clicking on the table header --- ## [Group by latest Plus Aggregation for Analysis or Delete old records](https://discuss.elastic.co/t/group-by-latest-plus-aggregation-for-analysis-or-delete-old-records/288663)
**Author:** [@Ahmed\_Mousa](https://discuss.elastic.co/u/Ahmed_Mousa)\ **Replies:** 0\ **Last updated:** [November 8, 2021, 6:03pm UTC](https://discuss.elastic.co/t/group-by-latest-plus-aggregation-for-analysis-or-delete-old-records/288663 "2021-11-08T18:03:39Z")
Hello everyone, I am trying to get statistics from my elastic on some filters. I managed to get some using this: GET \/\_search { "query": { "bool": {"must":\[ {"terms":{"type.keyword":\[ "video", "tex… --- ## [Python Client : Receive illegal\_argument\_exception error when trying to create an index template](https://discuss.elastic.co/t/python-client-receive-illegal-argument-exception-error-when-trying-to-create-an-index-template/288457)
**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\ **Replies:** 3\ **Last updated:** [November 8, 2021, 5:55pm UTC](https://discuss.elastic.co/t/python-client-receive-illegal-argument-exception-error-when-trying-to-create-an-index-template/288457 "2021-11-08T17:55:15Z")
Hi, I am trying to create an index template to use it for my data stream. I use this command to create the template: es = client.Elasticsearch(\['\_host\_name'\], http\_auth=('user', 'psw'), port=\_port, scheme='https', tim… --- ## [Elasticsearch cardinality aggregation not returning accurate numbers despite using precision\_threshold](https://discuss.elastic.co/t/elasticsearch-cardinality-aggregation-not-returning-accurate-numbers-despite-using-precision-threshold/288632)
**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\ **Replies:** 3\ **Last updated:** [November 8, 2021, 5:10pm UTC](https://discuss.elastic.co/t/elasticsearch-cardinality-aggregation-not-returning-accurate-numbers-despite-using-precision-threshold/288632 "2021-11-08T17:10:15Z")
Hi folks, I am trying to show unique count in a metric and observed that the numbers are wrong. Setup: I ​used enhanced table visualisation and did a "unique count" of keyword type field. in advanced setting I used {"… --- ## [Multiple data sources over same port](https://discuss.elastic.co/t/multiple-data-sources-over-same-port/288598)
**Author:** [@IsaacKr](https://discuss.elastic.co/u/IsaacKr)\ **Replies:** 2\ **Last updated:** [November 8, 2021, 5:05pm UTC](https://discuss.elastic.co/t/multiple-data-sources-over-same-port/288598 "2021-11-08T17:05:31Z")
We are ingesting data from multiple data sources over port 514 and using Logstash to ship them out to multiple destinations. Is there a way to tag ingested data based on source IP so that it can be forwarded to the corre… --- ## [Training query](https://discuss.elastic.co/t/training-query/288428)
**Author:** [@Mark3](https://discuss.elastic.co/u/Mark3)\ **Replies:** 5\ **Last updated:** [November 8, 2021, 4:26pm UTC](https://discuss.elastic.co/t/training-query/288428 "2021-11-08T16:26:56Z")
When I move from the OBs ENG labs (2.2-2.3) I can no longer see the data metrics from both mysqk and petclinic...one or the other? is this an ongoing issue? Cheers, Mark --- ## [Does Heartbeat Support Data Stream?](https://discuss.elastic.co/t/does-heartbeat-support-data-stream/288602)
**Author:** [@Ray\_Lin](https://discuss.elastic.co/u/Ray_Lin)\ **Replies:** 2\ **Last updated:** [November 8, 2021, 4:00pm UTC](https://discuss.elastic.co/t/does-heartbeat-support-data-stream/288602 "2021-11-08T16:00:46Z")
Hi Team, I want to use data stream instead of ILM to manage the data from Heartbeat. But it seems the document didn't mention related setting about data stream. Does Heartbeat supports data stream? --- ## [Unable to associate to elasticsearch on kibana](https://discuss.elastic.co/t/unable-to-associate-to-elasticsearch-on-kibana/288050)
**Author:** [@KypMon](https://discuss.elastic.co/u/KypMon)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 3:36pm UTC](https://discuss.elastic.co/t/unable-to-associate-to-elasticsearch-on-kibana/288050 "2021-11-08T15:36:42Z")
basically just following this code sample: # Install OLM (Operator Lifecycle Management) kubectl apply -f https://github.com/operator-framework/operator-lifecycle-manager/releases/download/0.16.1/crds.yaml kubectl apply… --- ## [Jdbc\_streming and prepared statement](https://discuss.elastic.co/t/jdbc-streming-and-prepared-statement/288647)
**Author:** [@Roberto\_B](https://discuss.elastic.co/u/Roberto_B)\ **Replies:** 0\ **Last updated:** [November 8, 2021, 2:56pm UTC](https://discuss.elastic.co/t/jdbc-streming-and-prepared-statement/288647 "2021-11-08T14:56:21Z")
Hi , I'm trying to use a prepared statement in jdbc\_streaming filter, I setuped the prepared statement on mySql instance using this commands: PREPARE lookup\_persone FROM 'SELECT persone.id, persone.nome AS nome\_person… --- ## [Kibana server not ready yet](https://discuss.elastic.co/t/kibana-server-not-ready-yet/288560)
**Author:** [@dat\_nguyen](https://discuss.elastic.co/u/dat_nguyen)\ **Replies:** 17\ **Last updated:** [November 8, 2021, 2:57pm UTC](https://discuss.elastic.co/t/kibana-server-not-ready-yet/288560 "2021-11-08T14:57:02Z")
Dear everyone, Could you please help me solve a problem "kibana server not ready yet" although Elasticsearch and kibana service is running. Attached is the kibana log file. Thank you so much for your help --- ## [Text not stemmed after inserted in the index with language specific analyzer](https://discuss.elastic.co/t/text-not-stemmed-after-inserted-in-the-index-with-language-specific-analyzer/288645)
**Author:** [@makons](https://discuss.elastic.co/u/makons)\ **Replies:** 0\ **Last updated:** [November 8, 2021, 2:52pm UTC](https://discuss.elastic.co/t/text-not-stemmed-after-inserted-in-the-index-with-language-specific-analyzer/288645 "2021-11-08T14:52:12Z")
I have 2 fields in my index, one containing the standardly analyzed content, while the other one uses a german analyzer. However, when I insert documents, they don't seem to be stemmed at all, even though they should be … --- ## [Character filter analyzer not working](https://discuss.elastic.co/t/character-filter-analyzer-not-working/288531)
**Author:** [@Kevin\_Juliano](https://discuss.elastic.co/u/Kevin_Juliano)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 1:28pm UTC](https://discuss.elastic.co/t/character-filter-analyzer-not-working/288531 "2021-11-08T13:28:52Z")
Hi! I have a special character analyzer, but for some reason, I am not getting the result I want. Here are my configurations: ANALYZER: { index: "my\_idx", body: { settings: { … --- ## [Kibana server not ready after update to 7.15](https://discuss.elastic.co/t/kibana-server-not-ready-after-update-to-7-15/286509)
**Author:** [@someone83](https://discuss.elastic.co/u/someone83)\ **Replies:** 5\ **Last updated:** [November 8, 2021, 12:13pm UTC](https://discuss.elastic.co/t/kibana-server-not-ready-after-update-to-7-15/286509 "2021-11-08T12:13:55Z")
I upgraded my ELK-Stack from 7.14 to 7.15. There are two Elasticsearch nodes (1 hot / 1 warm) and a kibana server. From the kibana server on the web-interface i get just the message "Kibana server is not ready yet" and… --- ## [TSVB Metric from the difference between avg value from two time intervals](https://discuss.elastic.co/t/tsvb-metric-from-the-difference-between-avg-value-from-two-time-intervals/288570)
**Author:** [@alejandrosl](https://discuss.elastic.co/u/alejandrosl)\ **Replies:** 3\ **Last updated:** [November 8, 2021, 10:46am UTC](https://discuss.elastic.co/t/tsvb-metric-from-the-difference-between-avg-value-from-two-time-intervals/288570 "2021-11-08T10:46:54Z")
Hi there !!! I'm currently trying to make a "metric" TSVB that show the difference between of average of same field in two diferentes time intervals... For example, we have a numeric field called "value\_before", we get… --- ## [UseConcMarkSweepGC error - cannot start ElasticSearch](https://discuss.elastic.co/t/useconcmarksweepgc-error-cannot-start-elasticsearch/288616)
**Author:** [@TVRV8S](https://discuss.elastic.co/u/TVRV8S)\ **Replies:** 0\ **Last updated:** [November 8, 2021, 10:42am UTC](https://discuss.elastic.co/t/useconcmarksweepgc-error-cannot-start-elasticsearch/288616 "2021-11-08T10:42:00Z")
I posted a question on Stack Overflow but perhaps it's better here. https://stackoverflow.com/questions/69875937/elasticsearch-windows-2016-hosted-server-useconcmarksweepgc-error I downloaded the Elasticsearch ZIP and … --- ## [Updating old 6.x index pattern to use newer mapping requirments](https://discuss.elastic.co/t/updating-old-6-x-index-pattern-to-use-newer-mapping-requirments/286776)
**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\ **Replies:** 5\ **Last updated:** [November 8, 2021, 10:10am UTC](https://discuss.elastic.co/t/updating-old-6-x-index-pattern-to-use-newer-mapping-requirments/286776 "2021-11-08T10:10:56Z")
I have an ELK cluster which I have upgraded over time from early 6.x days. Focused on resolving other issues, but somewhere along the 7.x releases my old mapping broke. This was for a host that was pushing via filebeat… --- ## [Do not recieve sysmon log from the Windows Integration in elastic agent](https://discuss.elastic.co/t/do-not-recieve-sysmon-log-from-the-windows-integration-in-elastic-agent/288362)
**Author:** [@RobinIT](https://discuss.elastic.co/u/RobinIT)\ **Replies:** 7\ **Last updated:** [November 8, 2021, 7:57am UTC](https://discuss.elastic.co/t/do-not-recieve-sysmon-log-from-the-windows-integration-in-elastic-agent/288362 "2021-11-08T07:57:34Z")
Hello, I want to enable in elastic agent the Windows integration (version 1.2.2) I want to use this integration to ship in Sysmon and powershell log. The agent is connected to a Fleet. Adding the integration to the age… --- ## [Dynamic field type in template](https://discuss.elastic.co/t/dynamic-field-type-in-template/288568)
**Author:** [@anna.kuranda](https://discuss.elastic.co/u/anna.kuranda)\ **Replies:** 3\ **Last updated:** [November 8, 2021, 6:17am UTC](https://discuss.elastic.co/t/dynamic-field-type-in-template/288568 "2021-11-08T06:17:04Z")
I use template and alias to manage my insert data The issue : I have field that have different types , so I failed on field type inconsistency the field can be of String type or Nested JSON Object For example : St… --- ## [Will Elasticsearch optimize dsl query?](https://discuss.elastic.co/t/will-elasticsearch-optimize-dsl-query/288588)
**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\ **Replies:** 0\ **Last updated:** [November 8, 2021, 6:07am UTC](https://discuss.elastic.co/t/will-elasticsearch-optimize-dsl-query/288588 "2021-11-08T06:07:06Z")
Hi there, I have a program to convert some text into Elasticsearch dsl query. For some reasons it generates complex bool query which somethimes is actually can be simplified, for example: { "query":{ "bool"… --- ## [Kibana Import Objects API](https://discuss.elastic.co/t/kibana-import-objects-api/288383)
**Author:** [@Ryan\_Clark](https://discuss.elastic.co/u/Ryan_Clark)\ **Replies:** 2\ **Last updated:** [November 8, 2021, 5:40am UTC](https://discuss.elastic.co/t/kibana-import-objects-api/288383 "2021-11-08T05:40:15Z")
Hi, I'm trying to write a powershell script to import some saved objects I have created and exported from Kibana. I can get this to work just fine on linux using curl: curl -X POST "http://myserver:5601/api/saved\_obje… --- ## [FilebeatからJDBC接続できるかどうか](https://discuss.elastic.co/t/filebeat-jdbc/288124)
**Author:** [@111402](https://discuss.elastic.co/u/111402)\ **Replies:** 2\ **Last updated:** [November 8, 2021, 5:34am UTC](https://discuss.elastic.co/t/filebeat-jdbc/288124 "2021-11-08T05:34:45Z")
お世話になります。 ログに追加情報を付与するためにFilebeatからDBにJDBC接続することは可能でしょうか。 下記のURLではそのような機能はなさそうだったのですが、 もしあるようでしたらご教示お願いしたい次第です。 ※ないようであればLogstashを使用をしたいと思います。 --- ## [Need to create unique index names for metric and filebeat where logs/metrics of one particular namespace would flow](https://discuss.elastic.co/t/need-to-create-unique-index-names-for-metric-and-filebeat-where-logs-metrics-of-one-particular-namespace-would-flow/288580)
**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 1:47am UTC](https://discuss.elastic.co/t/need-to-create-unique-index-names-for-metric-and-filebeat-where-logs-metrics-of-one-particular-namespace-would-flow/288580 "2021-11-08T01:47:44Z")
Usually all logs/Metrics goes to a common index but need a solution where dev namespace logs goes to filebeat-dev-\* How do i do this in filebeat i do not have logstash or any pipelines --- ## [Should I store user id or name in logging?](https://discuss.elastic.co/t/should-i-store-user-id-or-name-in-logging/288460)
**Author:** [@buaaytt](https://discuss.elastic.co/u/buaaytt)\ **Replies:** 2\ **Last updated:** [November 8, 2021, 12:23am UTC](https://discuss.elastic.co/t/should-i-store-user-id-or-name-in-logging/288460 "2021-11-08T00:23:10Z")
A common scenario in logging is the need to store the backend user performing the logging action. So using ES should I store the user id or its username in the document? After all, when retrieving logs, I need to return … --- ## [Kibana 7.1 No Lens / Canvas](https://discuss.elastic.co/t/kibana-7-1-no-lens-canvas/288576)
**Author:** [@Glenn\_Pauling](https://discuss.elastic.co/u/Glenn_Pauling)\ **Replies:** 3\ **Last updated:** [November 8, 2021, 12:22am UTC](https://discuss.elastic.co/t/kibana-7-1-no-lens-canvas/288576 "2021-11-08T00:22:12Z")
Hello, We recently upgraded to Kibana 7.1 by downloading install file provided by Oracle (for Peoplesoft). Peoplesoft now is integrated with Kibana, so many new companies are starting to use this product. I've done … --- ## [Talk to server... ERROR 401 Unauthorized: Unauthorized](https://discuss.elastic.co/t/talk-to-server-error-401-unauthorized-unauthorized/288469)
**Author:** [@nasirnjs](https://discuss.elastic.co/u/nasirnjs)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 12:03am UTC](https://discuss.elastic.co/t/talk-to-server-error-401-unauthorized-unauthorized/288469 "2021-11-08T00:03:07Z")
Hi Experts assist me please .... after install Wazuh I have added agent, when I click agent there is no log showing. Elasticsearch: https://127.0.0.1:9200... parse url... OK connection... parse host... OK dns lookup… --- ## [X of y shards failed](https://discuss.elastic.co/t/x-of-y-shards-failed/285559)
**Author:** [@Noursh](https://discuss.elastic.co/u/Noursh)\ **Replies:** 6\ **Last updated:** [November 7, 2021, 11:55pm UTC](https://discuss.elastic.co/t/x-of-y-shards-failed/285559 "2021-11-07T23:55:45Z")
Type: es\_rejected\_execution\_exception Reason: rejected execution of org.Elasticsearch.common.util.concurrent.TimedRunnable@5ec3e8 on QueueResizingEsThreadPoolExecutor I had monitored the CPU and RAM and all the metrics… --- ## [Logging into Elasticsearch](https://discuss.elastic.co/t/logging-into-elasticsearch/288535)
**Author:** [@SteveP](https://discuss.elastic.co/u/SteveP)\ **Replies:** 5\ **Last updated:** [November 7, 2021, 8:35pm UTC](https://discuss.elastic.co/t/logging-into-elasticsearch/288535 "2021-11-07T20:35:19Z")
Hello all, I have created a single node ES system, as a way to ingest security data from my firewall. As part of this I need to configure the security plugin on my firewall to login to ES and setup it’s data indices. I… --- ## [Bug on logstash input for gz files](https://discuss.elastic.co/t/bug-on-logstash-input-for-gz-files/288547)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 0\ **Last updated:** [November 6, 2021, 7:05pm UTC](https://discuss.elastic.co/t/bug-on-logstash-input-for-gz-files/288547 "2021-11-06T19:05:42Z")
Hi I've observed that logstash with input plugin doesn't proceed in the correct way gz files in sincedb. I saw that logstash doesn't put all logs info to sincedb but only the header without names. If I have restarted lo… --- ## [Is timestamp field also indexed while storing time siries data like logs into an index?](https://discuss.elastic.co/t/is-timestamp-field-also-indexed-while-storing-time-siries-data-like-logs-into-an-index/288438)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 2\ **Last updated:** [November 6, 2021, 7:52pm UTC](https://discuss.elastic.co/t/is-timestamp-field-also-indexed-while-storing-time-siries-data-like-logs-into-an-index/288438 "2021-11-06T19:52:41Z")
Is timestamp field in a logentry of logfile also indexed (ie, made searchable by means of inverted index data structure) while storing time series data like logs into an index/data stream, provided we are not explicitly… --- ## [If the intended value itself contains the 'field split', can we use kv processor?](https://discuss.elastic.co/t/if-the-intended-value-itself-contains-the-field-split-can-we-use-kv-processor/288540)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 6\ **Last updated:** [November 6, 2021, 7:51pm UTC](https://discuss.elastic.co/t/if-the-intended-value-itself-contains-the-field-split-can-we-use-kv-processor/288540 "2021-11-06T19:51:29Z")
The following sample log entry , is in the form of key=value pairs action="blocked" direction="outgoing" msg="from ip is in blocklist" proto=6 I have tried the following kv processor in ingest pipeline for the log e… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=782) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=784)