# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=786 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 787 --- ## [Kibana dashboard table without aggregation](https://discuss.elastic.co/t/kibana-dashboard-table-without-aggregation/287968)
**Author:** [@111505](https://discuss.elastic.co/u/111505)\ **Replies:** 5\ **Last updated:** [November 3, 2021, 4:54am UTC](https://discuss.elastic.co/t/kibana-dashboard-table-without-aggregation/287968 "2021-11-03T04:54:09Z")
Hello. I want to create a Data Table similar to Discover Tab in Kibana's Dashobard, but I can not find a way. Do not have a way to create a table that only shows Data without aggregation? --- ## ["all shards failed"](https://discuss.elastic.co/t/all-shards-failed/288230)
**Author:** [@mmuzammil45](https://discuss.elastic.co/u/mmuzammil45)\ **Replies:** 3\ **Last updated:** [November 3, 2021, 11:44pm UTC](https://discuss.elastic.co/t/all-shards-failed/288230 "2021-11-03T23:44:14Z")
I am indexing nested JSON object. The issue is when the number of fields in the object approached to 1200, it started giving the error "all shards failed". I have tried multiple solutions but nothing has worked so far.… --- ## [Add a field from one grok match to another](https://discuss.elastic.co/t/add-a-field-from-one-grok-match-to-another/288246)
**Author:** [@mwas](https://discuss.elastic.co/u/mwas)\ **Replies:** 2\ **Last updated:** [November 3, 2021, 11:38pm UTC](https://discuss.elastic.co/t/add-a-field-from-one-grok-match-to-another/288246 "2021-11-03T23:38:14Z")
I've got log that starts with a jobid on our build cluster live following: "Job \<7073381\> is submitted to queue " I'd like to extract the job id from that line and add it to all other matched lines that look like this: … --- ## [Date to string using localtime](https://discuss.elastic.co/t/date-to-string-using-localtime/288360)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [November 3, 2021, 9:16pm UTC](https://discuss.elastic.co/t/date-to-string-using-localtime/288360 "2021-11-03T21:16:46Z")
Hi, Im trying to convert a date to string with timezone different from UTC tz = "-03:00" t = event.get("lastHeartbeat") event.set("last\_heartbeat\_text", Time.at(t.to\_f).localtime(tz)) and no matter what time is in las… --- ## [What are the best practices for reading logs/data from cold or frozen data (more than 3, 6 or 12 months old)](https://discuss.elastic.co/t/what-are-the-best-practices-for-reading-logs-data-from-cold-or-frozen-data-more-than-3-6-or-12-months-old/288167)
**Author:** [@parasavelli](https://discuss.elastic.co/u/parasavelli)\ **Replies:** 2\ **Last updated:** [November 3, 2021, 8:16pm UTC](https://discuss.elastic.co/t/what-are-the-best-practices-for-reading-logs-data-from-cold-or-frozen-data-more-than-3-6-or-12-months-old/288167 "2021-11-03T20:16:29Z")
I would like to explore the best practices to search frozen data. Can you please help me to understand all the available options and best approaches. Thanks. --- ## [Need to make logs in order](https://discuss.elastic.co/t/need-to-make-logs-in-order/287845)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 15\ **Last updated:** [November 3, 2021, 8:05pm UTC](https://discuss.elastic.co/t/need-to-make-logs-in-order/287845 "2021-11-03T20:05:23Z")
Hi, I have below app logs, like below but they are not in oder in kibana i.e the last log line below is not the first in kibana discover. 2021-10-27 16:51:14.864 | INFO | | | | | \[http-nio-8080-exec-32\] | next-con… --- ## [Logstash fails to start: "no such file to load -- concurrent"](https://discuss.elastic.co/t/logstash-fails-to-start-no-such-file-to-load-concurrent/288268)
**Author:** [@dwasss](https://discuss.elastic.co/u/dwasss)\ **Replies:** 9\ **Last updated:** [November 3, 2021, 7:47pm UTC](https://discuss.elastic.co/t/logstash-fails-to-start-no-such-file-to-load-concurrent/288268 "2021-11-03T19:47:06Z")
I recently upgraded my Elastic stack from 7.12 to 7.15.1 on Ubuntu 18.04. Logstash is running via systemd. Now Logstash fails to start with the following error: Nov 02 19:58:28 server logstash\[30340\]: Using bundled JDK:… --- ## [Best similarity for retrieving exact matches first](https://discuss.elastic.co/t/best-similarity-for-retrieving-exact-matches-first/288319)
**Author:** [@Giovanni\_Montobbio](https://discuss.elastic.co/u/Giovanni_Montobbio)\ **Replies:** 7\ **Last updated:** [November 3, 2021, 7:04pm UTC](https://discuss.elastic.co/t/best-similarity-for-retrieving-exact-matches-first/288319 "2021-11-03T19:04:14Z")
Hi I'm working on a project with elasticseach. I have an index with 1 million phrases inside and I want to retrieve phrases from the index which match with some query phrases. The phrases are in italian and I use an ital… --- ## [Weird kibana exception after authentication](https://discuss.elastic.co/t/weird-kibana-exception-after-authentication/288347)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 1\ **Last updated:** [November 3, 2021, 6:56pm UTC](https://discuss.elastic.co/t/weird-kibana-exception-after-authentication/288347 "2021-11-03T18:56:27Z")
I am able to access the initial page of my kibana instance. After however providing username and password, I see this in my web browser page {"statusCode":500,"error":"Internal Server Error","message":"illegal\_state\_ex… --- ## [Оптимизация запросов \_delete\_by\_query](https://discuss.elastic.co/t/delete-by-query/288293)
**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\ **Replies:** 1\ **Last updated:** [November 3, 2021, 6:54pm UTC](https://discuss.elastic.co/t/delete-by-query/288293 "2021-11-03T18:54:22Z")
Коллеги, добрый день! Мне нужно ежедневно удалять большое количество документов из индекса, для этого я использую \_delete\_by\_query запросы. Но удаление идет очень медленно. Все оптимизации которые предлагает документац… --- ## [Replace paths in every field](https://discuss.elastic.co/t/replace-paths-in-every-field/287106)
**Author:** [@AnneHermann](https://discuss.elastic.co/u/AnneHermann)\ **Replies:** 5\ **Last updated:** [November 3, 2021, 6:15pm UTC](https://discuss.elastic.co/t/replace-paths-in-every-field/287106 "2021-11-03T18:15:59Z")
Hello, I've been trying to edit my logstash.config so that all file paths in all fields are changed to "anonym". input { http { port =\> 5044 codec =\> json } } filter { split { field… --- ## [Search by an incomplete id](https://discuss.elastic.co/t/search-by-an-incomplete-id/288297)
**Author:** [@ntruongsinh](https://discuss.elastic.co/u/ntruongsinh)\ **Replies:** 2\ **Last updated:** [November 3, 2021, 6:02pm UTC](https://discuss.elastic.co/t/search-by-an-incomplete-id/288297 "2021-11-03T18:02:32Z")
Hi all, I have a document with the id abc and the requirement that when user search by ab, it should return my document. Currently, after I check Elasticsearch to see how appsearch indexes the document. I recoginize th… --- ## [Logstash (Running as Windows Service) - cannot obtain logs from Windows Network Drive](https://discuss.elastic.co/t/logstash-running-as-windows-service-cannot-obtain-logs-from-windows-network-drive/288290)
**Author:** [@coldycc](https://discuss.elastic.co/u/coldycc)\ **Replies:** 3\ **Last updated:** [November 3, 2021, 4:12pm UTC](https://discuss.elastic.co/t/logstash-running-as-windows-service-cannot-obtain-logs-from-windows-network-drive/288290 "2021-11-03T16:12:08Z")
Hi Everyone, I'm having issue to get Logstash to send logs from Windows network drive while running it as Windows Service (using NSSM), it works perfectly fine using the CLI. Here's the logstash.conf: input { file {… --- ## [Nodejs ingest pdf](https://discuss.elastic.co/t/nodejs-ingest-pdf/288335)
**Author:** [@uros87](https://discuss.elastic.co/u/uros87)\ **Replies:** 3\ **Last updated:** [November 3, 2021, 3:58pm UTC](https://discuss.elastic.co/t/nodejs-ingest-pdf/288335 "2021-11-03T15:58:20Z")
Hello, I've tried to inject pdf file to elastic. PUT \_ingest/pipeline/pdfnew { "description": "Extract attachment information encoded in Base64 with UTF-8 charset", "processors": \[ { "attachment": { … --- ## [While creating control visualization we are getting warning "Terms list might be incomplete"](https://discuss.elastic.co/t/while-creating-control-visualization-we-are-getting-warning-terms-list-might-be-incomplete/288187)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 1\ **Last updated:** [November 3, 2021, 3:04pm UTC](https://discuss.elastic.co/t/while-creating-control-visualization-we-are-getting-warning-terms-list-might-be-incomplete/288187 "2021-11-03T15:04:12Z")
Hi We are using elk version 7.10.2. We have created a control visualisation in kibana UI. We noticed that when we selected the options list and after adding the fields it gives the below warning "Terms list might be inc… --- ## [Unable to to enter data into Strigo Terminal](https://discuss.elastic.co/t/unable-to-to-enter-data-into-strigo-terminal/287818)
**Author:** [@Mark3](https://discuss.elastic.co/u/Mark3)\ **Replies:** 3\ **Last updated:** [November 3, 2021, 2:44pm UTC](https://discuss.elastic.co/t/unable-to-to-enter-data-into-strigo-terminal/287818 "2021-11-03T14:44:27Z")
Whilst taking the first lab in the Observability Course I have found that rather than being able to enter the required commands in Strigo under Terminal, I am just met with an ongoing "Preparing Workstation" timer icon. … --- ## [How does can\_match functionality work](https://discuss.elastic.co/t/how-does-can-match-functionality-work/288164)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 7\ **Last updated:** [November 3, 2021, 2:21pm UTC](https://discuss.elastic.co/t/how-does-can-match-functionality-work/288164 "2021-11-03T14:21:36Z")
Just finished watching the video(@ruflin ):Deep dive into the new Elastic Indexing Strategy - YouTube and it's mentioned that because of the can\_match functionality, indices that don't have relevant documents won't be qu… --- ## [An index for each host](https://discuss.elastic.co/t/an-index-for-each-host/287333)
**Author:** [@enp2s6](https://discuss.elastic.co/u/enp2s6)\ **Replies:** 4\ **Last updated:** [November 3, 2021, 1:59pm UTC](https://discuss.elastic.co/t/an-index-for-each-host/287333 "2021-11-03T13:59:06Z")
Hello, I would like to have a separate index created for each host. During a test to include a second host with Filebeat, the data was included in the already existing index. I could not find anything suitable in the … --- ## [Documents \_version changes](https://discuss.elastic.co/t/documents-version-changes/287684)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 13\ **Last updated:** [November 3, 2021, 9:45am UTC](https://discuss.elastic.co/t/documents-version-changes/287684 "2021-11-03T09:45:51Z")
Dears, Does the system problems like missing space on disks or exceeded heap space or network problems can have influence on change documents \_version? What is your experience with that? Why I'm asking about it? Becaus… --- ## [How to provide time +5.30(Time zone value in date format)](https://discuss.elastic.co/t/how-to-provide-time-5-30-time-zone-value-in-date-format/288304)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 0\ **Last updated:** [November 3, 2021, 9:15am UTC](https://discuss.elastic.co/t/how-to-provide-time-5-30-time-zone-value-in-date-format/288304 "2021-11-03T09:15:58Z")
Hi everyone, I need to provide the date format for the below type of data."2021-10-28 21:16:41.504 +05:30". Kindly help me with that format. Thanks in advance. --- ## [How to create elasticsearch template in logstash pipeline](https://discuss.elastic.co/t/how-to-create-elasticsearch-template-in-logstash-pipeline/287898)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 3\ **Last updated:** [November 3, 2021, 9:11am UTC](https://discuss.elastic.co/t/how-to-create-elasticsearch-template-in-logstash-pipeline/287898 "2021-11-03T09:11:58Z")
Hi Team, Greetings..! Is there any way to create Elasticsearch index template in logstash pipeline? I want push csv data to Elasticsearch via logstash, but I want to store data in custom data type. Please help me to cr… --- ## [ElasticSearch Error](https://discuss.elastic.co/t/elasticsearch-error/288186)
**Author:** [@Mudit\_Tripathi](https://discuss.elastic.co/u/Mudit_Tripathi)\ **Replies:** 4\ **Last updated:** [November 3, 2021, 8:23am UTC](https://discuss.elastic.co/t/elasticsearch-error/288186 "2021-11-03T08:23:41Z")
Hi All, I was able to start Elasticsearch on my local machine at port 9200 till 2 days back. Now when I am going to the path and executing ./Elasticsearch - It gives me an error: PP-C02Z66G1LVCG:bin mudit.tripathi$ ./E… --- ## [How does Elasticsearch search on multiple fields in the same query?](https://discuss.elastic.co/t/how-does-elasticsearch-search-on-multiple-fields-in-the-same-query/288272)
**Author:** [@Alexical](https://discuss.elastic.co/u/Alexical)\ **Replies:** 2\ **Last updated:** [November 3, 2021, 8:06am UTC](https://discuss.elastic.co/t/how-does-elasticsearch-search-on-multiple-fields-in-the-same-query/288272 "2021-11-03T08:06:03Z")
Hey, I have a decent enough idea of how various indexes work in SQL, how multicolumn index data structures are laid out, and how Postgres can use multiple different indexes by using each individually then doing bitmap op… --- ## [Grok filter in logstash for more than one different lines](https://discuss.elastic.co/t/grok-filter-in-logstash-for-more-than-one-different-lines/288108)
**Author:** [@root\_linux](https://discuss.elastic.co/u/root_linux)\ **Replies:** 5\ **Last updated:** [November 3, 2021, 6:37am UTC](https://discuss.elastic.co/t/grok-filter-in-logstash-for-more-than-one-different-lines/288108 "2021-11-03T06:37:56Z")
I have logs in which there are different types of lines are present. And I want to write grok filter for each line. How I can I achieve it? My logs are as given below: Oct 5 14:05:53 centos-8gb-nbg1-1 openvpn: Tue Oct … --- ## [Sum of Averages of individual in lens visualization](https://discuss.elastic.co/t/sum-of-averages-of-individual-in-lens-visualization/287574)
**Author:** [@Prasanth\_V](https://discuss.elastic.co/u/Prasanth_V)\ **Replies:** 8\ **Last updated:** [November 3, 2021, 5:39am UTC](https://discuss.elastic.co/t/sum-of-averages-of-individual-in-lens-visualization/287574 "2021-11-03T05:39:47Z")
Dear Team, Is it possible to calculate sum of averages of each individual(nodes) apache workers in single lens visualization? Kindly suggest us --- ## [Documents are not visible and searchable in workplace search](https://discuss.elastic.co/t/documents-are-not-visible-and-searchable-in-workplace-search/288222)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 2\ **Last updated:** [November 3, 2021, 5:18am UTC](https://discuss.elastic.co/t/documents-are-not-visible-and-searchable-in-workplace-search/288222 "2021-11-03T05:18:54Z")
Hi, I connected dropbox with workplace search, Drobox id is of Business Type.It contains currently 7 docs, While connecting dropbox with workplace search, I disabled document level permission so that all docs will be v… --- ## [Thread Pool Management](https://discuss.elastic.co/t/thread-pool-management/288275)
**Author:** [@tsousahs](https://discuss.elastic.co/u/tsousahs)\ **Replies:** 0\ **Last updated:** [November 3, 2021, 12:33am UTC](https://discuss.elastic.co/t/thread-pool-management/288275 "2021-11-03T00:33:34Z")
Hello, We are seeing a lot of CPU processing without much indexing activity. I have run the following command to see the hot thread: GET \_nodes/hot\_threads which i got the following output. 100.5% (502.6ms out of 500… --- ## [Kibana time series visual](https://discuss.elastic.co/t/kibana-time-series-visual/288195)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 1\ **Last updated:** [November 2, 2021, 11:26pm UTC](https://discuss.elastic.co/t/kibana-time-series-visual/288195 "2021-11-02T23:26:07Z")
Hi, I am trying to build a time series chart to get the stages of my pipeline(status getting updated) on the basis of a timestamp field "status.created\_at". The status of a particular pipeline changes in seconds/minute… --- ## [Replace my \\r\\n with a new line using mutate gsub](https://discuss.elastic.co/t/replace-my-r-n-with-a-new-line-using-mutate-gsub/288240)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 6\ **Last updated:** [November 2, 2021, 9:35pm UTC](https://discuss.elastic.co/t/replace-my-r-n-with-a-new-line-using-mutate-gsub/288240 "2021-11-02T21:35:49Z")
Hi All I have a csv data in this format { "message" : "value1,value2,value3\\r\\nvalue4,value5,value6" } My expected result is { "message" : "value1,value2,value3 value4,value5,value6" } I have tried mutate g… --- ## [Visualize - Change legends font size](https://discuss.elastic.co/t/visualize-change-legends-font-size/288260)
**Author:** [@Silvy20](https://discuss.elastic.co/u/Silvy20)\ **Replies:** 1\ **Last updated:** [November 2, 2021, 8:56pm UTC](https://discuss.elastic.co/t/visualize-change-legends-font-size/288260 "2021-11-02T20:56:41Z")
Hi all, I'm new here and this maybe a stupid question but I didn't found a solution for it. There are a way to increase the size of the text legends in the graphs? I need to work with print screens to put in a PowerPoin… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=785) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=787)