# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=815

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 816

---

## [Anonymization - Do not display a bar in a chart if occurence / count below 10](https://discuss.elastic.co/t/anonymization-do-not-display-a-bar-in-a-chart-if-occurence-count-below-10/284730)

<div class="topic-metadata">

**Author:** [@wgault](https://discuss.elastic.co/u/wgault)\
**Replies:** 3\
**Last updated:** [September 29, 2021, 9:30pm UTC](https://discuss.elastic.co/t/anonymization-do-not-display-a-bar-in-a-chart-if-occurence-count-below-10/284730 "2021-09-29T21:30:28Z")

</div>

Hello, I wish to create some anonymized dashboard. This requires to have a minimum amount of occurence/count per category / bar in a chart. In this case, if the count is below 10, then we would have two options : 1 - …

---

## [How to search using keywords or tags?](https://discuss.elastic.co/t/how-to-search-using-keywords-or-tags/285516)

<div class="topic-metadata">

**Author:** [@Sebastian\_Marroquin](https://discuss.elastic.co/u/Sebastian_Marroquin)\
**Replies:** 0\
**Last updated:** [September 29, 2021, 7:58pm UTC](https://discuss.elastic.co/t/how-to-search-using-keywords-or-tags/285516 "2021-09-29T19:58:55Z")

</div>

Hello everyone, I need help to resolve a question regarding Elasticsearch. I want to use the tags but in a different way. I am using the following composition when making the "tags": #RGB keyboard Is it possible to d…

---

## [How to enrich data based on similar values?](https://discuss.elastic.co/t/how-to-enrich-data-based-on-similar-values/285508)

<div class="topic-metadata">

**Author:** [@rsokolova](https://discuss.elastic.co/u/rsokolova)\
**Replies:** 0\
**Last updated:** [September 29, 2021, 6:53pm UTC](https://discuss.elastic.co/t/how-to-enrich-data-based-on-similar-values/285508 "2021-09-29T18:53:38Z")

</div>

Hello, Does Elasticsearch has any capability to enrich data based on possible or close match ? First index: "name" : "Hamilton Law LLC", "risk" : "High" Second index : "name": "Hamilton Company ", "description": " T…

---

## [Filters contains invalid key: status](https://discuss.elastic.co/t/filters-contains-invalid-key-status/285267)

<div class="topic-metadata">

**Author:** [@dgetz-riskalyze](https://discuss.elastic.co/u/dgetz-riskalyze)\
**Replies:** 3\
**Last updated:** [September 29, 2021, 6:04pm UTC](https://discuss.elastic.co/t/filters-contains-invalid-key-status/285267 "2021-09-29T18:04:55Z")

</div>

We added a new field to the schema of our engine, but not all of the documents have the field yet, which is named "status". When we do the App Search query below, we get the error, "Filters contains invalid key: status".…

---

## [Pipeline worker error in logstash config](https://discuss.elastic.co/t/pipeline-worker-error-in-logstash-config/285496)

<div class="topic-metadata">

**Author:** [@kriss332](https://discuss.elastic.co/u/kriss332)\
**Replies:** 2\
**Last updated:** [September 29, 2021, 5:24pm UTC](https://discuss.elastic.co/t/pipeline-worker-error-in-logstash-config/285496 "2021-09-29T17:24:05Z")

</div>

Hello all. I am trying to parse a VPN device logs. t send data in KV format. The data received as I see in netcat's output is- \<13\>Sep 29 21:52:00 172.xx.43.101 488 \<134\>1 2021-09-29T21:52:00+05:30 vpn.com2 PulseSecure…

---

## [Change kibana.autocompleteTerminateAfter](https://discuss.elastic.co/t/change-kibana-autocompleteterminateafter/285311)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 3\
**Last updated:** [September 29, 2021, 3:07pm UTC](https://discuss.elastic.co/t/change-kibana-autocompleteterminateafter/285311 "2021-09-29T15:07:08Z")

</div>

Hi In a deployment with Elasticsearch and kibana, I get the below: I saw from Terms list might be incomplete because the request is taking to long - #15 by Fedi\_Ben\_Messaoud that kibana.autocompleteTerminateAfter pa…

---

## [Parsing JSON with a string at the beginning of each JSON Object](https://discuss.elastic.co/t/parsing-json-with-a-string-at-the-beginning-of-each-json-object/285480)

<div class="topic-metadata">

**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\
**Replies:** 7\
**Last updated:** [September 29, 2021, 2:57pm UTC](https://discuss.elastic.co/t/parsing-json-with-a-string-at-the-beginning-of-each-json-object/285480 "2021-09-29T14:57:03Z")

</div>

Hello, I'm trying to parse a json file with a string at the beginning of each object. What is the easiest way to bypass the initial string or parse the json with string at the beginning? Here is an example of the JSON: …

---

## [Kibana User Session](https://discuss.elastic.co/t/kibana-user-session/285342)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 5\
**Last updated:** [September 29, 2021, 2:49pm UTC](https://discuss.elastic.co/t/kibana-user-session/285342 "2021-09-29T14:49:06Z")

</div>

Hi team, I have a question that I’m having trouble finding the answer to elsewhere. I would like to create dashboards that customize the data based on the specific user logged in. The response of this api Post : http:…

---

## [Kibana filter for thousands of IPs](https://discuss.elastic.co/t/kibana-filter-for-thousands-of-ips/285379)

<div class="topic-metadata">

**Author:** [@MasonNorris](https://discuss.elastic.co/u/MasonNorris)\
**Replies:** 8\
**Last updated:** [September 29, 2021, 2:26pm UTC](https://discuss.elastic.co/t/kibana-filter-for-thousands-of-ips/285379 "2021-09-29T14:26:07Z")

</div>

Kibana Version: 7.12.1 Is there a way to filter for thousands of IPs in one visualization. Currently I have enabled state:storeinseesion and am using a DSL filter but am limited to 1024 clauses within the DSL filter. I …

---

## [Observability Engineer Training - Modules](https://discuss.elastic.co/t/observability-engineer-training-modules/285408)

<div class="topic-metadata">

**Author:** [@kvmuralidhar](https://discuss.elastic.co/u/kvmuralidhar)\
**Replies:** 1\
**Last updated:** [September 29, 2021, 1:39pm UTC](https://discuss.elastic.co/t/observability-engineer-training-modules/285408 "2021-09-29T13:39:52Z")

</div>

Hi, I can't keep the heartbeat/metricbeat/filebeat modules running even if I start on the background mode. The machine changes all the time. Is there an option to have this up and running for ever ? Thanks Murali

---

## [Synthetic Monitoring using proxy servers](https://discuss.elastic.co/t/synthetic-monitoring-using-proxy-servers/283389)

<div class="topic-metadata">

**Author:** [@shinmaeng](https://discuss.elastic.co/u/shinmaeng)\
**Replies:** 1\
**Last updated:** [September 29, 2021, 1:23pm UTC](https://discuss.elastic.co/t/synthetic-monitoring-using-proxy-servers/283389 "2021-09-29T13:23:03Z")

</div>

Hi, elastic staffs. I have two questions about Synthetic installed in private network. It can not call any outbound requests to the internet unless I do any network works. I read the heartbeat document below about s…

---

## [Synthetics test configuration](https://discuss.elastic.co/t/synthetics-test-configuration/284150)

<div class="topic-metadata">

**Author:** [@shinmaeng](https://discuss.elastic.co/u/shinmaeng)\
**Replies:** 1\
**Last updated:** [September 29, 2021, 1:10pm UTC](https://discuss.elastic.co/t/synthetics-test-configuration/284150 "2021-09-29T13:10:49Z")

</div>

Hi elastic staff. I got the error message from synthetic agent. io:error executing step: Error: page.goto:net::ERR\_CERT\_AUTHORITY\_INVALID at .. So, I wanted to set ignoreHTTPSErrors to true and I found that playwrigh…

---

## [Name or service not known](https://discuss.elastic.co/t/name-or-service-not-known/284831)

<div class="topic-metadata">

**Author:** [@mahalanobis](https://discuss.elastic.co/u/mahalanobis)\
**Replies:** 6\
**Last updated:** [September 29, 2021, 12:29pm UTC](https://discuss.elastic.co/t/name-or-service-not-known/284831 "2021-09-29T12:29:50Z")

</div>

I'm trying to setup an Elasticsearch cluster but I'm getting "Name or service not known" Below you can find configuration and logs first node logs: https://gist.github.com/sintonag/d6ee4e4c68084a0941c28afcf251b519 sec…

---

## [How to concatenate two fields in logstash?](https://discuss.elastic.co/t/how-to-concatenate-two-fields-in-logstash/285455)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 2\
**Last updated:** [September 29, 2021, 12:13pm UTC](https://discuss.elastic.co/t/how-to-concatenate-two-fields-in-logstash/285455 "2021-09-29T12:13:35Z")

</div>

I have json format data. I want to concatenate firstName and LastName. I have tried by using mutate filter filter{ mutate { add\_field =\> { "Full Name" =\> "%{FirstName}%{LastName}" } …

---

## [Single node consuming more disk space](https://discuss.elastic.co/t/single-node-consuming-more-disk-space/285250)

<div class="topic-metadata">

**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\
**Replies:** 6\
**Last updated:** [September 29, 2021, 11:24am UTC](https://discuss.elastic.co/t/single-node-consuming-more-disk-space/285250 "2021-09-29T11:24:59Z")

</div>

Hi All, I have setup Elasticsearch cluster using eck operator. details as follows. master nodes: 3 data nodes: 9 only single data node is consuming more disk space although it has less number of shards than the other…

---

## [Logstash Pipeline events emits and received](https://discuss.elastic.co/t/logstash-pipeline-events-emits-and-received/285465)

<div class="topic-metadata">

**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\
**Replies:** 0\
**Last updated:** [September 29, 2021, 11:20am UTC](https://discuss.elastic.co/t/logstash-pipeline-events-emits-and-received/285465 "2021-09-29T11:20:43Z")

</div>

Hi, I am setting up a logstash pipeline to get data from sql db. I executed it and monitored it after pipeline completion on kibana server. I saw Events Received and Events Emitted. Both values are different. I did…

---

## [Logstash dropping a lot of logs](https://discuss.elastic.co/t/logstash-dropping-a-lot-of-logs/285429)

<div class="topic-metadata">

**Author:** [@Parthib\_Dutta](https://discuss.elastic.co/u/Parthib_Dutta)\
**Replies:** 2\
**Last updated:** [September 29, 2021, 11:12am UTC](https://discuss.elastic.co/t/logstash-dropping-a-lot-of-logs/285429 "2021-09-29T11:12:44Z")

</div>

I have this current setup where Filebeat is reading Lumen logs and forwarding them to Logstash . And Logstash is parsing one of those field in log lines as JSON . I am only seeing partial outputs in my Kibana dashboard a…

---

## [Metricbeat duplicated data in elastic cloud](https://discuss.elastic.co/t/metricbeat-duplicated-data-in-elastic-cloud/283895)

<div class="topic-metadata">

**Author:** [@Misagh](https://discuss.elastic.co/u/Misagh)\
**Replies:** 2\
**Last updated:** [September 29, 2021, 10:54am UTC](https://discuss.elastic.co/t/metricbeat-duplicated-data-in-elastic-cloud/283895 "2021-09-29T10:54:32Z")

</div>

Hi there, I am using metricbeat to collect metrics from AWS cloudwatch and insert them into the elastic cloud environment. it works fine but there is an issue that I couldn't solve. there are duplicated data for one nam…

---

## [Inconsistency in parsing timestamps for search\_after](https://discuss.elastic.co/t/inconsistency-in-parsing-timestamps-for-search-after/285463)

<div class="topic-metadata">

**Author:** [@muchawiec](https://discuss.elastic.co/u/muchawiec)\
**Replies:** 0\
**Last updated:** [September 29, 2021, 10:33am UTC](https://discuss.elastic.co/t/inconsistency-in-parsing-timestamps-for-search-after/285463 "2021-09-29T10:33:00Z")

</div>

Hello, I've been fighting with pagination using search\_after for dates that might be undefined. When I sort in ascending order and the date is undefined I receive in sort property value 9223372036854775807, which I can…

---

## [Set Kibana bar chart bucket order according a metric field](https://discuss.elastic.co/t/set-kibana-bar-chart-bucket-order-according-a-metric-field/285440)

<div class="topic-metadata">

**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\
**Replies:** 1\
**Last updated:** [September 29, 2021, 10:17am UTC](https://discuss.elastic.co/t/set-kibana-bar-chart-bucket-order-according-a-metric-field/285440 "2021-09-29T10:17:47Z")

</div>

Hi, I created Bucket bar chart with multiple metric fields. Now I want to sort order descending to a metric field. But I only want to filter this bucket basis of one field. Here is an image I want to descending or…

---

## [Limit the number of pages on kibana datatable visualization](https://discuss.elastic.co/t/limit-the-number-of-pages-on-kibana-datatable-visualization/285031)

<div class="topic-metadata">

**Author:** [@Srikanth\_V](https://discuss.elastic.co/u/Srikanth_V)\
**Replies:** 7\
**Last updated:** [September 29, 2021, 10:11am UTC](https://discuss.elastic.co/t/limit-the-number-of-pages-on-kibana-datatable-visualization/285031 "2021-09-29T10:11:49Z")

</div>

Hello people, I'm currently using the kibana dashboard and showing them in my application using iframe. Currently the data table has 100 pages with 10 rows being displayed on each page. Is there is a way to limit the nu…

---

## [Discover is not showing any data when used date field other than @timestamps](https://discuss.elastic.co/t/discover-is-not-showing-any-data-when-used-date-field-other-than-timestamps/285270)

<div class="topic-metadata">

**Author:** [@Indigo\_Star](https://discuss.elastic.co/u/Indigo_Star)\
**Replies:** 1\
**Last updated:** [September 29, 2021, 9:46am UTC](https://discuss.elastic.co/t/discover-is-not-showing-any-data-when-used-date-field-other-than-timestamps/285270 "2021-09-29T09:46:57Z")

</div>

Hi, I am loading offline logs into ELK and I am using my logDate field instead of the @timestamp field while creating the index pattern in Kibana. My field appears in the list of fields with the @timestamp but when i u…

---

## [Can I create a query with multiple filter?](https://discuss.elastic.co/t/can-i-create-a-query-with-multiple-filter/285452)

<div class="topic-metadata">

**Author:** [@psyapathy](https://discuss.elastic.co/u/psyapathy)\
**Replies:** 0\
**Last updated:** [September 29, 2021, 9:02am UTC](https://discuss.elastic.co/t/can-i-create-a-query-with-multiple-filter/285452 "2021-09-29T09:02:44Z")

</div>

Hi all! Can I create a query with multiple filter? In my documents i have 2 fields: switch-host and port I want get result with multiple filter. Like: switch-host = host1 and ports = port1,port2,port3 switch-host = …

---

## [About Elastic Cluster status erro](https://discuss.elastic.co/t/about-elastic-cluster-status-erro/285450)

<div class="topic-metadata">

**Author:** [@zekaifeng](https://discuss.elastic.co/u/zekaifeng)\
**Replies:** 1\
**Last updated:** [September 29, 2021, 8:50am UTC](https://discuss.elastic.co/t/about-elastic-cluster-status-erro/285450 "2021-09-29T08:50:39Z")

</div>

Elasticsearch version is 7.3.1. Due to the frequent data cleaning of the index in the early morning, memory fusions occur frequently in multiple nodes. At this time, another index is performing a bulk operation, and the…

---

## [TSVB hide empty time intervals](https://discuss.elastic.co/t/tsvb-hide-empty-time-intervals/284721)

<div class="topic-metadata">

**Author:** [@Janujc](https://discuss.elastic.co/u/Janujc)\
**Replies:** 3\
**Last updated:** [September 29, 2021, 8:40am UTC](https://discuss.elastic.co/t/tsvb-hide-empty-time-intervals/284721 "2021-09-29T08:40:55Z")

</div>

Hello, I'm wondering if it is possible to hide days (time interval units) when no event was happened in TSVB. I am interested in showing daily events, but when this extends to a longer time period it is very easy to get …

---

## [JVM automatic heap sizing set too low (version 7.14.1)](https://discuss.elastic.co/t/jvm-automatic-heap-sizing-set-too-low-version-7-14-1/285447)

<div class="topic-metadata">

**Author:** [@simone-smith](https://discuss.elastic.co/u/simone-smith)\
**Replies:** 0\
**Last updated:** [September 29, 2021, 8:07am UTC](https://discuss.elastic.co/t/jvm-automatic-heap-sizing-set-too-low-version-7-14-1/285447 "2021-09-29T08:07:37Z")

</div>

I'm running a cluster on version 7.14.1 with the bundled JDK: ubuntu@JaneMisme:/$ /usr/share/elasticsearch/jdk/bin/java -version openjdk version "16.0.2" 2021-07-20 OpenJDK Runtime Environment Temurin-16.0.2+7 (build 16…

---

## [Convert single node to Clustered Nodes](https://discuss.elastic.co/t/convert-single-node-to-clustered-nodes/285432)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 5\
**Last updated:** [September 29, 2021, 7:48am UTC](https://discuss.elastic.co/t/convert-single-node-to-clustered-nodes/285432 "2021-09-29T07:48:23Z")

</div>

I have a single node Elasticsearch instance. It had default Elasticsearch yml configuration as below. It has one index with some data. # ======================== Elasticsearch Configuration ========================= # #…

---

## [Kibana rules de-duplication behavior](https://discuss.elastic.co/t/kibana-rules-de-duplication-behavior/285168)

<div class="topic-metadata">

**Author:** [@Tkachleo](https://discuss.elastic.co/u/Tkachleo)\
**Replies:** 2\
**Last updated:** [September 29, 2021, 4:53am UTC](https://discuss.elastic.co/t/kibana-rules-de-duplication-behavior/285168 "2021-09-29T04:53:44Z")

</div>

Hi, I'm experiencing an issue with the behavior of Kibana Rules. I have Metricbeat writing different metrics to Elasticsearch every 10 seconds. I want to create rules using Elasticsearch Query over the values that are…

---

## [Use multiple analyzers by field on query](https://discuss.elastic.co/t/use-multiple-analyzers-by-field-on-query/285396)

<div class="topic-metadata">

**Author:** [@oskrdt](https://discuss.elastic.co/u/oskrdt)\
**Replies:** 5\
**Last updated:** [September 28, 2021, 10:48pm UTC](https://discuss.elastic.co/t/use-multiple-analyzers-by-field-on-query/285396 "2021-09-28T22:48:16Z")

</div>

I want to do a multi\_match query for 3 different fields, but I want 2 of those fields (indexed as text using standard analyzer) to use the english language analyzer and the 3rd one to use the standard analyzer. I want to…

---

## [About Kibana Settings](https://discuss.elastic.co/t/about-kibana-settings/285357)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 4\
**Last updated:** [September 28, 2021, 10:33pm UTC](https://discuss.elastic.co/t/about-kibana-settings/285357 "2021-09-28T22:33:23Z")

</div>

Hi, Is there a way to view all of the configuration settings a kibana instance is running without access to the kibana config file? Version is 7.13.1. Thx D

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=814)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=816)
