# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=794

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 795

---

## [Customize the dashboards page](https://discuss.elastic.co/t/customize-the-dashboards-page/285835)

<div class="topic-metadata">

**Author:** [@Fosco](https://discuss.elastic.co/u/Fosco)\
**Replies:** 2\
**Last updated:** [October 25, 2021, 8:41pm UTC](https://discuss.elastic.co/t/customize-the-dashboards-page/285835 "2021-10-25T20:41:17Z")

</div>

Hello, I'm looking to add a link after the word dashboards, I've tried this in \\src\\plugins\\dashboard\\target\\public\\dashboard.chunk.2.js tableListTitle: external\_kbnSharedDeps\_KbnI18n\_\["i18n"\].translate("dashboard.list…

---

## [Use Dynamic Values in array](https://discuss.elastic.co/t/use-dynamic-values-in-array/285978)

<div class="topic-metadata">

**Author:** [@varunbsgaur](https://discuss.elastic.co/u/varunbsgaur)\
**Replies:** 0\
**Last updated:** [October 6, 2021, 6:33am UTC](https://discuss.elastic.co/t/use-dynamic-values-in-array/285978 "2021-10-06T06:33:49Z")

</div>

Need to use dynamic values in script processor for better results , but its always giving error. Kindly help!!!! "processors": \[ { "split": { "field": "f1", "separator": "\_", "target\_field":"temp" }, "script":…

---

## [On controls panel the date filter controls is erroring out](https://discuss.elastic.co/t/on-controls-panel-the-date-filter-controls-is-erroring-out/285952)

<div class="topic-metadata">

**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 8:13pm UTC](https://discuss.elastic.co/t/on-controls-panel-the-date-filter-controls-is-erroring-out/285952 "2021-10-25T20:13:57Z")

</div>

As you can see with my image I have the 'month' filter on my controls filled in with some date. It keeps erroring out with \[esaggs\]\>. The 'month' field is the time field on my index pattern. When I check my dev tools …

---

## [Not getting complete data on Reports](https://discuss.elastic.co/t/not-getting-complete-data-on-reports/285780)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 7:45pm UTC](https://discuss.elastic.co/t/not-getting-complete-data-on-reports/285780 "2021-10-25T19:45:27Z")

</div>

Hi Team, We have multiple reports created using data table visualization, each report are having multiple bucket aggregations (term aggregation). Whenever we set the size to 10 data in reports is getting rendered witho…

---

## [Removing the “$” sign from event\_data.TargetUserName](https://discuss.elastic.co/t/removing-the-sign-from-event-data-targetusername/285742)

<div class="topic-metadata">

**Author:** [@schroray](https://discuss.elastic.co/u/schroray)\
**Replies:** 0\
**Last updated:** [October 2, 2021, 4:18pm UTC](https://discuss.elastic.co/t/removing-the-sign-from-event-data-targetusername/285742 "2021-10-02T16:18:14Z")

</div>

I found an Elastic blog on a possible dashboard for Winlogbeat logs: Monitoring Windows Logons with Winlogbeat | Elastic Blog I was trying to remove the dollar sign "$" from usernames in the field winlog.event\_data.Targ…

---

## [Top 10 values in dynamic options](https://discuss.elastic.co/t/top-10-values-in-dynamic-options/285430)

<div class="topic-metadata">

**Author:** [@PradeepJ](https://discuss.elastic.co/u/PradeepJ)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 7:41pm UTC](https://discuss.elastic.co/t/top-10-values-in-dynamic-options/285430 "2021-10-25T19:41:03Z")

</div>

Hi, The dynamic options in the controls visualization shows default 10 records (even when not selecting parent control). Can you please explain how dynamic option works with/without parent control?

---

## [How to extract data from multiline(codec)](https://discuss.elastic.co/t/how-to-extract-data-from-multiline-codec/287575)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 3\
**Last updated:** [October 25, 2021, 7:34pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-multiline-codec/287575 "2021-10-25T19:34:26Z")

</div>

Hi Does anyone know how to extract data from under the codec multiline. After parse xml data I need to avoid the header (prefix of name measData ) for whole of ingested rows... it makes also some keyword field and mul…

---

## [What is the grok expression that can match variable length documents from a single log file?](https://discuss.elastic.co/t/what-is-the-grok-expression-that-can-match-variable-length-documents-from-a-single-log-file/285320)

<div class="topic-metadata">

**Author:** [@shi](https://discuss.elastic.co/u/shi)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 7:32pm UTC](https://discuss.elastic.co/t/what-is-the-grok-expression-that-can-match-variable-length-documents-from-a-single-log-file/285320 "2021-10-25T19:32:41Z")

</div>

A log file is having records of different leighths, say 3 different types of records? what is the grok expression that can match variable length documents from a single log file? This will be very useful for creating i…

---

## [Filebeat setup dont load because kibana version](https://discuss.elastic.co/t/filebeat-setup-dont-load-because-kibana-version/285712)

<div class="topic-metadata">

**Author:** [@Francisca\_Olave](https://discuss.elastic.co/u/Francisca_Olave)\
**Replies:** 0\
**Last updated:** [October 1, 2021, 7:24pm UTC](https://discuss.elastic.co/t/filebeat-setup-dont-load-because-kibana-version/285712 "2021-10-01T19:24:30Z")

</div>

Hi, I have a single node server with a basic license in ELK and I want to monitor a machine with filebeat but the following error appears: # filebeat setup Overwriting ILM policy is disabled. Set \`setup.ilm.overwrite: …

---

## [Authentication issue between kafka(OpenShift Operator deployed) and Logstash](https://discuss.elastic.co/t/authentication-issue-between-kafka-openshift-operator-deployed-and-logstash/287614)

<div class="topic-metadata">

**Author:** [@karanjit.rai](https://discuss.elastic.co/u/karanjit.rai)\
**Replies:** 0\
**Last updated:** [October 25, 2021, 6:02pm UTC](https://discuss.elastic.co/t/authentication-issue-between-kafka-openshift-operator-deployed-and-logstash/287614 "2021-10-25T18:02:47Z")

</div>

Hello, I have installed Kafka through the OpenShift operator and now I am trying to connect it to Logstash (running in a OpenShift cluster). I do not see anyway to connect through authentication between the two or where…

---

## [Physically Moving Indices To New Drive](https://discuss.elastic.co/t/physically-moving-indices-to-new-drive/287611)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 5:46pm UTC](https://discuss.elastic.co/t/physically-moving-indices-to-new-drive/287611 "2021-10-25T17:46:02Z")

</div>

I have a need to move where indices are stored to a new drive. How do I go about migrating to the new drive? Change Elasticsearch.yml to the new drive and then reindex all the existing data? I'd hate to do that with t…

---

## [Logstash JDBC output](https://discuss.elastic.co/t/logstash-jdbc-output/287605)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 5:44pm UTC](https://discuss.elastic.co/t/logstash-jdbc-output/287605 "2021-10-25T17:44:32Z")

</div>

Do we have the JDBC output plugin in logstash to write to the database?

---

## [RUM dashboard showing same data for all environments](https://discuss.elastic.co/t/rum-dashboard-showing-same-data-for-all-environments/285768)

<div class="topic-metadata">

**Author:** [@sonowaan](https://discuss.elastic.co/u/sonowaan)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 5:27pm UTC](https://discuss.elastic.co/t/rum-dashboard-showing-same-data-for-all-environments/285768 "2021-10-25T17:27:16Z")

</div>

Hello, I've setup RUM agent in Rails application and data is correctly getting to Kibana. I can see updates on the User Experience dashboard as activities happen in the application. I'm using the same APM server for mult…

---

## [Пагинация и производительность](https://discuss.elastic.co/t/topic/287329)

<div class="topic-metadata">

**Author:** [@korvin](https://discuss.elastic.co/u/korvin)\
**Replies:** 3\
**Last updated:** [October 25, 2021, 4:03pm UTC](https://discuss.elastic.co/t/topic/287329 "2021-10-25T16:03:39Z")

</div>

Добрый день есть тестовый индекс на 5 млн документов требуется пагинация. Причем хочется именно все 5 млн разбить на страницы. В документации рекомендуют избегать пагинации т.к. это большая нагрузка особенно если кластер…

---

## [Term query wrong behaviour?](https://discuss.elastic.co/t/term-query-wrong-behaviour/287530)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 4\
**Last updated:** [October 25, 2021, 3:11pm UTC](https://discuss.elastic.co/t/term-query-wrong-behaviour/287530 "2021-10-25T15:11:12Z")

</div>

Hi, according to the documentation a term query search for the exact match. but when I do the below search I get results and when I look for the exact match in uppercase I dont get any results This should not hap…

---

## [Kibana удаление полей из index pattern](https://discuss.elastic.co/t/kibana-index-pattern/287586)

<div class="topic-metadata">

**Author:** [@hellotty](https://discuss.elastic.co/u/hellotty)\
**Replies:** 0\
**Last updated:** [October 25, 2021, 2:25pm UTC](https://discuss.elastic.co/t/kibana-index-pattern/287586 "2021-10-25T14:25:04Z")

</div>

Добрый день. Во время теста, я создал множество полей которые сейчас неактуальны и мешают при поиске. Можно ли удалить поля которые мне не нужны?

---

## [Snmp network traffic and trends](https://discuss.elastic.co/t/snmp-network-traffic-and-trends/287585)

<div class="topic-metadata">

**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\
**Replies:** 0\
**Last updated:** [October 25, 2021, 2:22pm UTC](https://discuss.elastic.co/t/snmp-network-traffic-and-trends/287585 "2021-10-25T14:22:21Z")

</div>

Hi guys. I have same experience using elk with neflow beat. Now im looking for some way to bring traffic from my router , create graphs , similar than librenms , cacti , an so. But I would also add some intelligence t…

---

## [Stack trace parsing issue](https://discuss.elastic.co/t/stack-trace-parsing-issue/287573)

<div class="topic-metadata">

**Author:** [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\
**Replies:** 9\
**Last updated:** [October 25, 2021, 2:15pm UTC](https://discuss.elastic.co/t/stack-trace-parsing-issue/287573 "2021-10-25T14:15:57Z")

</div>

I am having a json data in the following manne:- {"@timestamp":"2021-06-04T09:57:25.141Z","@metadata":{"beat":"filebeat","type":"\_doc","version":"7.6.3"},"log":{"offset":10413931,"file":{"path":""}},"message":"\[ERROR\] 2…

---

## [Logstash file input plugin: missing first lines after log rotation](https://discuss.elastic.co/t/logstash-file-input-plugin-missing-first-lines-after-log-rotation/287112)

<div class="topic-metadata">

**Author:** [@adminunix](https://discuss.elastic.co/u/adminunix)\
**Replies:** 2\
**Last updated:** [October 25, 2021, 1:56pm UTC](https://discuss.elastic.co/t/logstash-file-input-plugin-missing-first-lines-after-log-rotation/287112 "2021-10-25T13:56:26Z")

</div>

Hello, I´m using logstash with a pipeline that collects logs with the file input plugin. Everything works fine, but when log files are rotated, logstash doesn´t collect some of the first few lines of the new log file. T…

---

## [Help with query in CLI](https://discuss.elastic.co/t/help-with-query-in-cli/287584)

<div class="topic-metadata">

**Author:** [@Nick\_Hatfield](https://discuss.elastic.co/u/Nick_Hatfield)\
**Replies:** 0\
**Last updated:** [October 25, 2021, 1:52pm UTC](https://discuss.elastic.co/t/help-with-query-in-cli/287584 "2021-10-25T13:52:11Z")

</div>

Hi guys, please help me understand how to make a query work from the cli. I either match too much or nothing at all... So here's the payload sample: { "took": 3, "timed\_out": false, "\_shards": { "total": 5, …

---

## [Problem in adding two range facets with the same options names but for different filters](https://discuss.elastic.co/t/problem-in-adding-two-range-facets-with-the-same-options-names-but-for-different-filters/287202)

<div class="topic-metadata">

**Author:** [@AhmedTohamy01](https://discuss.elastic.co/u/AhmedTohamy01)\
**Replies:** 6\
**Last updated:** [October 25, 2021, 1:05pm UTC](https://discuss.elastic.co/t/problem-in-adding-two-range-facets-with-the-same-options-names-but-for-different-filters/287202 "2021-10-25T13:05:52Z")

</div>

Hi, I'm trying to add two range facets, the options in both of them are the same but it's for different filters. something like this: const installs = { type: 'range', ranges: \[ { from: 0, to: 101, name: '\<=…

---

## [Removing elastic-user Secret from K8s Secrets](https://discuss.elastic.co/t/removing-elastic-user-secret-from-k8s-secrets/287544)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 2\
**Last updated:** [October 25, 2021, 12:29pm UTC](https://discuss.elastic.co/t/removing-elastic-user-secret-from-k8s-secrets/287544 "2021-10-25T12:29:08Z")

</div>

When we create an Elasticsearch resource, the credentials for the "elastic" user are created and stored in the kubernetes secrets, with the name "-es-elastic-user" Is it safe to delete this k8s secret? Does the system h…

---

## [Suddenly pipeline got stuck with error couldn't find any output plugin named http](https://discuss.elastic.co/t/suddenly-pipeline-got-stuck-with-error-couldnt-find-any-output-plugin-named-http/287376)

<div class="topic-metadata">

**Author:** [@michael.l](https://discuss.elastic.co/u/michael.l)\
**Replies:** 3\
**Last updated:** [October 25, 2021, 11:55am UTC](https://discuss.elastic.co/t/suddenly-pipeline-got-stuck-with-error-couldnt-find-any-output-plugin-named-http/287376 "2021-10-25T11:55:41Z")

</div>

We have a simple pipeline that has been running fine for weeks without any errors, and then suddenly stopped outputting events while repeatedly printing this error: {"level":"ERROR","loggerName":"logstash.agent","timeMi…

---

## [Doc\_as\_upsert but don't deleted nested](https://discuss.elastic.co/t/doc-as-upsert-but-dont-deleted-nested/287564)

<div class="topic-metadata">

**Author:** [@Grant\_Donovan1](https://discuss.elastic.co/u/Grant_Donovan1)\
**Replies:** 0\
**Last updated:** [October 25, 2021, 10:51am UTC](https://discuss.elastic.co/t/doc-as-upsert-but-dont-deleted-nested/287564 "2021-10-25T10:51:16Z")

</div>

I am using the doc\_as\_upsert to update my document if it already exists, for example { "doc": { "apple": "new\_name", "test\_list": \[ { "value": "first value group 1", "value\_set": {…

---

## [SLM Policy Naming](https://discuss.elastic.co/t/slm-policy-naming/287557)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 9:52am UTC](https://discuss.elastic.co/t/slm-policy-naming/287557 "2021-10-25T09:52:14Z")

</div>

Hi, I'm trying to upload an SLM policy and am getting the following error: elasticsearch.exceptions.RequestError: RequestError(400, 'action\_request\_validation\_exception', 'Validation Failed: 1: invalid snapshot name \[s…

---

## [Query optimization](https://discuss.elastic.co/t/query-optimization/287559)

<div class="topic-metadata">

**Author:** [@hadrienrsq](https://discuss.elastic.co/u/hadrienrsq)\
**Replies:** 0\
**Last updated:** [October 25, 2021, 9:43am UTC](https://discuss.elastic.co/t/query-optimization/287559 "2021-10-25T09:43:44Z")

</div>

Dear community, I am pretty brand new to Elasticsearch and am looking to perform some sort of two steps query on one index. Indeed, the items in the index have what we call a cli\_ID attribute, which I would like to pre-…

---

## [Logstash Error](https://discuss.elastic.co/t/logstash-error/287404)

<div class="topic-metadata">

**Author:** [@Mudit\_Tripathi](https://discuss.elastic.co/u/Mudit_Tripathi)\
**Replies:** 5\
**Last updated:** [October 25, 2021, 9:22am UTC](https://discuss.elastic.co/t/logstash-error/287404 "2021-10-25T09:22:27Z")

</div>

Hi Guys, I have created a sample csv file with 3 columns and I am using to log the csv file into Elasticsearch using logstash. This is my logstash.conf input { file { path =\> "/Users/mudit.tripathi/Downloads/samplel…

---

## [Automatic deletion of old documents](https://discuss.elastic.co/t/automatic-deletion-of-old-documents/287297)

<div class="topic-metadata">

**Author:** [@x41lakazam](https://discuss.elastic.co/u/x41lakazam)\
**Replies:** 3\
**Last updated:** [October 25, 2021, 8:57am UTC](https://discuss.elastic.co/t/automatic-deletion-of-old-documents/287297 "2021-10-25T08:57:24Z")

</div>

Hi there, Is there a way to configure an index so that every document gets deleted once he is more than 90 days ? I saw a lot of topics that propose to use a delete query in a crontab job but that sounds very inefficie…

---

## [Document indexed asynchronously](https://discuss.elastic.co/t/document-indexed-asynchronously/287090)

<div class="topic-metadata">

**Author:** [@ntruongsinh](https://discuss.elastic.co/u/ntruongsinh)\
**Replies:** 9\
**Last updated:** [October 25, 2021, 4:59am UTC](https://discuss.elastic.co/t/document-indexed-asynchronously/287090 "2021-10-25T04:59:18Z")

</div>

Hi everyone, As I know that when we create a document, this document will be indexed asynchronously as mentioned here Documents API | Elastic App Search Documentation \[7.15\] | Elastic. So when I create the document, it…

---

## [How to save One index field into another index?](https://discuss.elastic.co/t/how-to-save-one-index-field-into-another-index/287399)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 3:54am UTC](https://discuss.elastic.co/t/how-to-save-one-index-field-into-another-index/287399 "2021-10-25T03:54:14Z")

</div>

I want to save SMS data in another field because I am getting the same SMS three times that's why to avoid duplication I used document\_id that is overriding the old with a new one but problem is that I am getting SMS dat…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=793)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=795)
