# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=798 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 799 --- ## [Match with or without thousands separator](https://discuss.elastic.co/t/match-with-or-without-thousands-separator/287183)
**Author:** [@Morten\_Sjogren](https://discuss.elastic.co/u/Morten_Sjogren)\ **Replies:** 2\ **Last updated:** [October 20, 2021, 10:53am UTC](https://discuss.elastic.co/t/match-with-or-without-thousands-separator/287183 "2021-10-20T10:53:23Z")
How do we match numbers in text-fields with and without thousands separators? Use-case: The user searches for titles with one of "15000", "15,000" or "15.000" They expect to find items with titles like these: "Histor… --- ## [Detected an unhandled Promise rejection.\\nResponseError: \[parent\] Data too large, data for](https://discuss.elastic.co/t/detected-an-unhandled-promise-rejection-nresponseerror-parent-data-too-large-data-for/287172)
**Author:** [@Mesut\_Yilmaz](https://discuss.elastic.co/u/Mesut_Yilmaz)\ **Replies:** 3\ **Last updated:** [October 20, 2021, 10:08am UTC](https://discuss.elastic.co/t/detected-an-unhandled-promise-rejection-nresponseerror-parent-data-too-large-data-for/287172 "2021-10-20T10:08:18Z")
Hi there, I am suffering with this issue on kibana.log elastic cluster is up but kibana doesnt come up. JVM heapsize is set 32GB and VMs have 64GB Memories. What could be reason for this error? \` Management,enterpriseS… --- ## [Kibana Data Table returns "missing" for existing values](https://discuss.elastic.co/t/kibana-data-table-returns-missing-for-existing-values/287093)
**Author:** [@Svetilnicheg](https://discuss.elastic.co/u/Svetilnicheg)\ **Replies:** 1\ **Last updated:** [October 20, 2021, 9:53am UTC](https://discuss.elastic.co/t/kibana-data-table-returns-missing-for-existing-values/287093 "2021-10-20T09:53:16Z")
Hi! I created Data Table viz and noticed that some of my records are missing. all records exist in Discover but when I try to find them in data table they are not there. I suspect that \\n is the problem (it's present i… --- ## [Remove buckets from being returned in Aggregation](https://discuss.elastic.co/t/remove-buckets-from-being-returned-in-aggregation/287107)
**Author:** [@EricPSU](https://discuss.elastic.co/u/EricPSU)\ **Replies:** 4\ **Last updated:** [October 19, 2021, 3:44pm UTC](https://discuss.elastic.co/t/remove-buckets-from-being-returned-in-aggregation/287107 "2021-10-19T15:44:58Z")
Is there a way to prevent the buckets array from being returned as a part of the aggregation result? I am using a sum\_bucket to total all of the buckets and I don't need all of the buckets to be returned. I'm just usin… --- ## [Lock lens from filters](https://discuss.elastic.co/t/lock-lens-from-filters/287168)
**Author:** [@Greninja\_San](https://discuss.elastic.co/u/Greninja_San)\ **Replies:** 4\ **Last updated:** [October 20, 2021, 9:33am UTC](https://discuss.elastic.co/t/lock-lens-from-filters/287168 "2021-10-20T09:33:49Z")
Hello! I am currently trying to create a filter selector that is not a dropdown. Since there are no checkboxes, I'm trying to use a pie chart as the selector. Is it possible to create a checkbox list, and if not, to pr… --- ## [Find source of events causing Logstash errors](https://discuss.elastic.co/t/find-source-of-events-causing-logstash-errors/287173)
**Author:** [@Napsty](https://discuss.elastic.co/u/Napsty)\ **Replies:** 0\ **Last updated:** [October 20, 2021, 9:24am UTC](https://discuss.elastic.co/t/find-source-of-events-causing-logstash-errors/287173 "2021-10-20T09:24:23Z")
A central Logstash receives events from many clients, all using Filebeat as "sender" application. Since a couple of weeks, Logstash loggs a lot of JSON parsing errors, for example: Oct 20 11:17:46 inf-elkloge01-p logsta… --- ## [Visualization for status field](https://discuss.elastic.co/t/visualization-for-status-field/287140)
**Author:** [@vishal\_bisa](https://discuss.elastic.co/u/vishal_bisa)\ **Replies:** 3\ **Last updated:** [October 20, 2021, 8:52am UTC](https://discuss.elastic.co/t/visualization-for-status-field/287140 "2021-10-20T08:52:28Z")
Hi Team, I have a below requirement to show the status visualization for below data let's say that for the last 24 hours i have a field for incidents and the latest value shows whether that service is down incidents.s… --- ## [Grok parsing timestamp with 2 fields](https://discuss.elastic.co/t/grok-parsing-timestamp-with-2-fields/286312)
**Author:** [@alon\_carmelly](https://discuss.elastic.co/u/alon_carmelly)\ **Replies:** 8\ **Last updated:** [October 20, 2021, 8:36am UTC](https://discuss.elastic.co/t/grok-parsing-timestamp-with-2-fields/286312 "2021-10-20T08:36:11Z")
Hi, I got this log which has 2 fields of time stamp. How would I go about parsing it, couldn't find any examples online ! {"type": "GreatLog", \*\*"date": "10/3/2021", "time": "6:21:35 AM"\*\*, "message": "Take a Measureme… --- ## [Cannot disable TLS and security in EKS](https://discuss.elastic.co/t/cannot-disable-tls-and-security-in-eks/222335)
**Author:** [@yannalbou](https://discuss.elastic.co/u/yannalbou)\ **Replies:** 11\ **Last updated:** [October 20, 2021, 8:16am UTC](https://discuss.elastic.co/t/cannot-disable-tls-and-security-in-eks/222335 "2021-10-20T08:16:16Z")
Hello, I Installed ECK open source 1.0.1 in k8s 1.15.5 I tried to disable the security and TLS using: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: elasticsearch spec: … --- ## [プライマリシャードが未割り当てになってしまう](https://discuss.elastic.co/t/topic/287162)
**Author:** [@abet](https://discuss.elastic.co/u/abet)\ **Replies:** 0\ **Last updated:** [October 20, 2021, 8:00am UTC](https://discuss.elastic.co/t/topic/287162 "2021-10-20T08:00:30Z")
FessでElasticsearchを使用していると、プライマリシャードが未割り当てになってしまうことがありました。 \_cluster/allocation/explain?pretty で確認をすると、以下が表示されます。 { "note": "No shard was specified in the explain API request, so this response explains a randomly chos… --- ## [Add sample data but can't see any log](https://discuss.elastic.co/t/add-sample-data-but-cant-see-any-log/287157)
**Author:** [@saraaa](https://discuss.elastic.co/u/saraaa)\ **Replies:** 2\ **Last updated:** [October 20, 2021, 7:42am UTC](https://discuss.elastic.co/t/add-sample-data-but-cant-see-any-log/287157 "2021-10-20T07:42:33Z")
hi there, I added sample data and can see it in dashboard and discover but I have no log I'm newbie in kibana and search for it to known how can see my log can't find any solution --- ## [\[7.14.1\] Linearly increasing latency in task manager index searches](https://discuss.elastic.co/t/7-14-1-linearly-increasing-latency-in-task-manager-index-searches/286010)
**Author:** [@spiqueras](https://discuss.elastic.co/u/spiqueras)\ **Replies:** 5\ **Last updated:** [October 20, 2021, 7:27am UTC](https://discuss.elastic.co/t/7-14-1-linearly-increasing-latency-in-task-manager-index-searches/286010 "2021-10-20T07:27:57Z")
We're migrating from a 6.8 cluster to a 7.14 cluster and we're seeing some abnormal behavior with Kibana's task manager index. Sorry if this is the wrong forum. For context, this is a 3-node ES v7.14.1 cluster that as o… --- ## [Problem with useRelayStateDeepLink in Kibana's SAML configuration](https://discuss.elastic.co/t/problem-with-userelaystatedeeplink-in-kibanas-saml-configuration/286273)
**Author:** [@medina](https://discuss.elastic.co/u/medina)\ **Replies:** 13\ **Last updated:** [October 20, 2021, 6:45am UTC](https://discuss.elastic.co/t/problem-with-userelaystatedeeplink-in-kibanas-saml-configuration/286273 "2021-10-20T06:45:44Z")
Hello, I managed to make the SAML SSO work with a custom IdP (a Laravel app with this package, with both IdP and SP initiated flows. However, I want to redirect the user to specific dashboards on Kibana, from my Laravel… --- ## [Logstash GeoIP filter plugin not working after update to 7.15.1](https://discuss.elastic.co/t/logstash-geoip-filter-plugin-not-working-after-update-to-7-15-1/286989)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 2\ **Last updated:** [October 20, 2021, 5:23am UTC](https://discuss.elastic.co/t/logstash-geoip-filter-plugin-not-working-after-update-to-7-15-1/286989 "2021-10-20T05:23:13Z")
Hi, I am running a logstash server with 7.14.0 and one of my pipelines uses the geoip filter plugin. After upgrade to 7.15.1, the pipeline refuses to start with an error like \[2021-10-18T17:22:08,987\]\[ERROR\]\[logstash.j… --- ## [Kibana service is getting down frequently](https://discuss.elastic.co/t/kibana-service-is-getting-down-frequently/286610)
**Author:** [@Suresh\_Babu\_Ragunath](https://discuss.elastic.co/u/Suresh_Babu_Ragunath)\ **Replies:** 3\ **Last updated:** [October 20, 2021, 4:50am UTC](https://discuss.elastic.co/t/kibana-service-is-getting-down-frequently/286610 "2021-10-20T04:50:30Z")
Hi All, I installed kibana-7.2.0-linux-x86\_64 and the service is getting down at least weekly once. Got the following error message in kibana.log at the time of service down. --- log snip -- {"type":"error","@timestam… --- ## [How do I implement the synonym dictionary - step-by-step?](https://discuss.elastic.co/t/how-do-i-implement-the-synonym-dictionary-step-by-step/287094)
**Author:** [@Nick\_N](https://discuss.elastic.co/u/Nick_N)\ **Replies:** 1\ **Last updated:** [October 20, 2021, 2:43am UTC](https://discuss.elastic.co/t/how-do-i-implement-the-synonym-dictionary-step-by-step/287094 "2021-10-20T02:43:58Z")
I want to look for all the jackets that are blue (in the "name" and "tags" fields). But the color blue has many shades. How do I implement the dictionary of synonyms? (I tried many things, without conclusive results w… --- ## [Last value of each interface in the match phrase query](https://discuss.elastic.co/t/last-value-of-each-interface-in-the-match-phrase-query/287135)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [October 20, 2021, 1:49am UTC](https://discuss.elastic.co/t/last-value-of-each-interface-in-the-match-phrase-query/287135 "2021-10-20T01:49:18Z")
Hi, How can I get the last value of each interface in the match phrase query? I have tried with max timestamp, but I get a time out error GET /metrics-inf-\*/\_search { "query": { "bool": { "filter": \[ … --- ## [How to aggregate log transactions based on field value in logstash](https://discuss.elastic.co/t/how-to-aggregate-log-transactions-based-on-field-value-in-logstash/287134)
**Author:** [@venkataraman](https://discuss.elastic.co/u/venkataraman)\ **Replies:** 1\ **Last updated:** [October 20, 2021, 1:40am UTC](https://discuss.elastic.co/t/how-to-aggregate-log-transactions-based-on-field-value-in-logstash/287134 "2021-10-20T01:40:20Z")
My log file looks like this: start time: 2021-10-11T13:54:34Z category: commercial status: started end time: start time: 2021-10-11T13:54:34Z category: commercial status: Running end time: start time: 2021-10-11T… --- ## [Aggregate nested arrays](https://discuss.elastic.co/t/aggregate-nested-arrays/285934)
**Author:** [@Lyes\_Ouchene](https://discuss.elastic.co/u/Lyes_Ouchene)\ **Replies:** 6\ **Last updated:** [October 19, 2021, 9:17pm UTC](https://discuss.elastic.co/t/aggregate-nested-arrays/285934 "2021-10-19T21:17:33Z")
Hello everyone i am new to Elasticsearch, i need help with a use case, I want to create an array inside an array using the aggregate option The desired result is to have a list of services, for each service there will… --- ## [Copy as cURL is gray out](https://discuss.elastic.co/t/copy-as-curl-is-gray-out/287028)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 12\ **Last updated:** [October 19, 2021, 8:28pm UTC](https://discuss.elastic.co/t/copy-as-curl-is-gray-out/287028 "2021-10-19T20:28:09Z")
I upgraded to 7.15 and I can't use copy as cURL in kabana How do I get that back.. using Google chrome as browser if it helps It was working fine on 7.12 --- ## [ECK cluster always on MigratingData status](https://discuss.elastic.co/t/eck-cluster-always-on-migratingdata-status/286941)
**Author:** [@chenyg0911](https://discuss.elastic.co/u/chenyg0911)\ **Replies:** 1\ **Last updated:** [October 19, 2021, 7:59pm UTC](https://discuss.elastic.co/t/eck-cluster-always-on-migratingdata-status/286941 "2021-10-19T19:59:36Z")
eck: v1.8. kubernetes: v1.20.7 kubectl get es: NAME HEALTH NODES VERSION PHASE AGE es-v7132 yellow 4 7.13.2 MigratingData 83d GET \_cat/health?v epoch timestamp cluster st… --- ## [Dynamic input (file hashes) for HTTP JSON data collection](https://discuss.elastic.co/t/dynamic-input-file-hashes-for-http-json-data-collection/287016)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 5\ **Last updated:** [October 19, 2021, 7:20pm UTC](https://discuss.elastic.co/t/dynamic-input-file-hashes-for-http-json-data-collection/287016 "2021-10-19T19:20:47Z")
Hello, I hope you and your loved ones are safe and healthy. I want to ingest data from an API endpoint that uses JSON for both request and response. (https://developers.virustotal.com/reference) I am aware that filebe… --- ## [Translate error not working](https://discuss.elastic.co/t/translate-error-not-working/287118)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 1\ **Last updated:** [October 19, 2021, 5:22pm UTC](https://discuss.elastic.co/t/translate-error-not-working/287118 "2021-10-19T17:22:43Z")
Hello .. i am trying to use translate filter in my logstash config file but im getting below error here's is my logstash config file input { tcp { port =\> 9563 codec =\> plain { charset=\>"UTF-8" } } } fil… --- ## [Issues with Logstash reading csv file](https://discuss.elastic.co/t/issues-with-logstash-reading-csv-file/287117)
**Author:** [@ThePurple5merf](https://discuss.elastic.co/u/ThePurple5merf)\ **Replies:** 2\ **Last updated:** [October 19, 2021, 3:34pm UTC](https://discuss.elastic.co/t/issues-with-logstash-reading-csv-file/287117 "2021-10-19T15:34:39Z")
Hello! I'm pretty new to the ELK Stack so I'm not sure how to troubleshoot this error. I've set up my Elasticsearch and kibana successfully, but I'm having issues with getting logstash to read in my .csv file to the ELK… --- ## [Enrich Processor: Match Longest](https://discuss.elastic.co/t/enrich-processor-match-longest/287116)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 0\ **Last updated:** [October 19, 2021, 3:19pm UTC](https://discuss.elastic.co/t/enrich-processor-match-longest/287116 "2021-10-19T15:19:10Z")
We are enriching documents via Ingest pipeline. It looks like the enrichment processor is only able to enrich by exact match. But what I need is that it enriches incoming documents by longest match. Lets assume I'm enric… --- ## [Does sum\_other\_doc\_count include docs without that field?](https://discuss.elastic.co/t/does-sum-other-doc-count-include-docs-without-that-field/286028)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 1\ **Last updated:** [October 19, 2021, 2:46pm UTC](https://discuss.elastic.co/t/does-sum-other-doc-count-include-docs-without-that-field/286028 "2021-10-19T14:46:21Z")
I'm performing a terms agg that gives me 5 top buckets and a sum\_other\_doc\_count against a specific field. Not every document in my index has that field. Does sum\_other\_doc\_count include a count of documents without th… --- ## [Add new field in Kibana based off condition](https://discuss.elastic.co/t/add-new-field-in-kibana-based-off-condition/287064)
**Author:** [@Sugand](https://discuss.elastic.co/u/Sugand)\ **Replies:** 1\ **Last updated:** [October 19, 2021, 1:55pm UTC](https://discuss.elastic.co/t/add-new-field-in-kibana-based-off-condition/287064 "2021-10-19T13:55:29Z")
Hi all, Need to have a quick compare of 2 index's , Example: index1 have columns a,b,c index 2 also have same columns a,b,c, now I want to create a new column "d" if the condition index1.a == index2.a, if equal the val… --- ## [Perform a pipelines aggregation over the full set of potential buckets](https://discuss.elastic.co/t/perform-a-pipelines-aggregation-over-the-full-set-of-potential-buckets/287097)
**Author:** [@seanletendre](https://discuss.elastic.co/u/seanletendre)\ **Replies:** 0\ **Last updated:** [October 19, 2021, 1:38pm UTC](https://discuss.elastic.co/t/perform-a-pipelines-aggregation-over-the-full-set-of-potential-buckets/287097 "2021-10-19T13:38:58Z")
When using the \_search API of Elasticsearch, if you set size to 10, and perform an avg metric aggregation, the average will be of all values across the dataset matching the query, not just the average of the 10 items ret… --- ## [What is the best way to get the average number of documents per bucket in Elasticsearch](https://discuss.elastic.co/t/what-is-the-best-way-to-get-the-average-number-of-documents-per-bucket-in-elasticsearch/287096)
**Author:** [@seanletendre](https://discuss.elastic.co/u/seanletendre)\ **Replies:** 0\ **Last updated:** [October 19, 2021, 1:31pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-get-the-average-number-of-documents-per-bucket-in-elasticsearch/287096 "2021-10-19T13:31:43Z")
Suppose that we are hat maker and have an Elasticsearch index where each document corresponds to the sale of one hat. Part of the sales record is the name of the store at which the hat was sold. I want to find out the n… --- ## [Oralce to elasticsearch Date time issue](https://discuss.elastic.co/t/oralce-to-elasticsearch-date-time-issue/287068)
**Author:** [@bhavin.shah](https://discuss.elastic.co/u/bhavin.shah)\ **Replies:** 1\ **Last updated:** [October 19, 2021, 12:58pm UTC](https://discuss.elastic.co/t/oralce-to-elasticsearch-date-time-issue/287068 "2021-10-19T12:58:27Z")
Dear team, ES Mapping information :- "ord\_trd\_trade\_time" : { "type" : "date", "format" : "yyyy-MM-dd HH:mm:ss||strict\_date\_optional\_time||epoch\_millis" } Logstash Statement :- to\_char(ord\_trd\_trade\_time,'yyyy-MM-… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=797) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=799)