# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=829 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 830 --- ## [Kibana: Divide column data with time range](https://discuss.elastic.co/t/kibana-divide-column-data-with-time-range/284075)
**Author:** [@Vishal\_Patil](https://discuss.elastic.co/u/Vishal_Patil)\ **Replies:** 3\ **Last updated:** [September 13, 2021, 3:52pm UTC](https://discuss.elastic.co/t/kibana-divide-column-data-with-time-range/284075 "2021-09-13T15:52:19Z")
I have a data table in Kibana with one of the columns representing a metric in terms of hours . I would like to create a new column whose values equal to the hour values divided by the number of hours selected in the tim… --- ## [Elastic pipeline compare two fields condition](https://discuss.elastic.co/t/elastic-pipeline-compare-two-fields-condition/283620)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 3:26pm UTC](https://discuss.elastic.co/t/elastic-pipeline-compare-two-fields-condition/283620 "2021-09-13T15:26:01Z")
Im trying to create a set condition if two fields are the same, ive not been able to find how to do this with the elastic pipeline ctx.dns.question.name =='{{{ctx.host.hostname}}}' --- ## [Does ES join support composite key?](https://discuss.elastic.co/t/does-es-join-support-composite-key/283806)
**Author:** [@manjurgani](https://discuss.elastic.co/u/manjurgani)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 2:57pm UTC](https://discuss.elastic.co/t/does-es-join-support-composite-key/283806 "2021-09-13T14:57:44Z")
\--my parent document looks like below PUT example3/\_doc/9 { "userId":9999 "accountId":101, } -- PUT example3/\_doc/10 { "userId":9999 "accountId":102, } ---my child look like below PUT example3/\_doc/11 { "a… --- ## [How to aggregate frequency count of words which exist in a field](https://discuss.elastic.co/t/how-to-aggregate-frequency-count-of-words-which-exist-in-a-field/283931)
**Author:** [@Pooya\_Pilechi](https://discuss.elastic.co/u/Pooya_Pilechi)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 2:45pm UTC](https://discuss.elastic.co/t/how-to-aggregate-frequency-count-of-words-which-exist-in-a-field/283931 "2021-09-13T14:45:20Z")
Hi. I want to evaluate frequency of terms which exist in a hashtags field of a twitter data. for example i have an index which its name is twitter . in twitter index i have a field which its name is hashtags. for ins… --- ## [Search After Pagination with sort field in Query](https://discuss.elastic.co/t/search-after-pagination-with-sort-field-in-query/283952)
**Author:** [@rahulpatwari](https://discuss.elastic.co/u/rahulpatwari)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 2:40pm UTC](https://discuss.elastic.co/t/search-after-pagination-with-sort-field-in-query/283952 "2021-09-13T14:40:42Z")
Hi, I am using search after pagination logic for deep pagination. The search query extracts documents with a specific DateTime range. { "range": { "my\_date\_t… --- ## [Elasticsearch Query on Array object with must clause is giving empty results](https://discuss.elastic.co/t/elasticsearch-query-on-array-object-with-must-clause-is-giving-empty-results/284066)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 2:23pm UTC](https://discuss.elastic.co/t/elasticsearch-query-on-array-object-with-must-clause-is-giving-empty-results/284066 "2021-09-13T14:23:12Z")
Hi There, I'm always getting empty results when i query the array objects with multi must clause as mentioned below Index docs: POST test/doc/1 { "name":\["Alex","Bob","Matt"\], "company":"ABC", "city":"NY" } P… --- ## [How to fix one field in elasticsearch by using document\_id?](https://discuss.elastic.co/t/how-to-fix-one-field-in-elasticsearch-by-using-document-id/283538)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 3\ **Last updated:** [September 13, 2021, 2:12pm UTC](https://discuss.elastic.co/t/how-to-fix-one-field-in-elasticsearch-by-using-document-id/283538 "2021-09-13T14:12:17Z")
I am getting multiple messages in different queues and I am also using document\_id to avoid duplicates values. But the problem with docuemnt\_id is, it is overwriting the existing data with a new one But I want to fix one… --- ## [Endpoint Security custom notification logo](https://discuss.elastic.co/t/endpoint-security-custom-notification-logo/283709)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 1:35pm UTC](https://discuss.elastic.co/t/endpoint-security-custom-notification-logo/283709 "2021-09-13T13:35:54Z")
Hello, Will there be an option in the future to modify the logo that appears on the pop up notifications for Endpoint Security malware/ransomware, similar to how you can modify the pop up message? It appears to be loca… --- ## [Script\_score query does not support \[query\]](https://discuss.elastic.co/t/script-score-query-does-not-support-query/284076)
**Author:** [@Ahmed\_ZERHOUNI](https://discuss.elastic.co/u/Ahmed_ZERHOUNI)\ **Replies:** 0\ **Last updated:** [September 13, 2021, 1:06pm UTC](https://discuss.elastic.co/t/script-score-query-does-not-support-query/284076 "2021-09-13T13:06:38Z")
\*\*Hey everyone, i'm trying to apply a custom score using script score but i'm facing this issue...i would really appreciate your help Here's the query i'm using for that. my query was based on the documentation of Ela… --- ## [Is it possible to add the "number of replicas" in logstash code , rather than in index template?](https://discuss.elastic.co/t/is-it-possible-to-add-the-number-of-replicas-in-logstash-code-rather-than-in-index-template/284064)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 1:00pm UTC](https://discuss.elastic.co/t/is-it-possible-to-add-the-number-of-replicas-in-logstash-code-rather-than-in-index-template/284064 "2021-09-13T13:00:13Z")
Hello, I wanted to know if its possible to mention "number of replicas" in the logstash code , rather than in index template , so when i rollover the index , this is inherited by the newer index. Mine is a single node … --- ## [Two bars in vertical/horizontal chart](https://discuss.elastic.co/t/two-bars-in-vertical-horizontal-chart/282674)
**Author:** [@mzagrajek](https://discuss.elastic.co/u/mzagrajek)\ **Replies:** 4\ **Last updated:** [September 13, 2021, 12:58pm UTC](https://discuss.elastic.co/t/two-bars-in-vertical-horizontal-chart/282674 "2021-09-13T12:58:45Z")
Hi there I have problem with visualization. What I want? vertical or horizontal chart one bar representing field with all products divided by some business unit: Y-axis will be count of those, X-axis the business uni… --- ## [Maximum number of inputs in filter section terms](https://discuss.elastic.co/t/maximum-number-of-inputs-in-filter-section-terms/283807)
**Author:** [@manjurgani](https://discuss.elastic.co/u/manjurgani)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 12:00pm UTC](https://discuss.elastic.co/t/maximum-number-of-inputs-in-filter-section-terms/283807 "2021-09-13T12:00:45Z")
GET example3/\_search?size=0 { "query": { "bool": { "filter": \[ { "terms": { "userId": \[ 199196,199195 \] }} \] } }, "aggs": { "top-tags": { "terms": { "field": "userId", "size": 10 }, "aggs": { "to-answe… --- ## [Display top value of counter rate of nested fields](https://discuss.elastic.co/t/display-top-value-of-counter-rate-of-nested-fields/283276)
**Author:** [@Benoti](https://discuss.elastic.co/u/Benoti)\ **Replies:** 4\ **Last updated:** [September 13, 2021, 11:40am UTC](https://discuss.elastic.co/t/display-top-value-of-counter-rate-of-nested-fields/283276 "2021-09-13T11:40:04Z")
Hello there, I an in the midle of adding some SNMP monitoring data to our Elastic stack and I cannot find a good way to display the data in Kibana's dashboard. I use logstash snmp input plugin and, thanks to this threa… --- ## [Customize logo in kibana-7.14.0](https://discuss.elastic.co/t/customize-logo-in-kibana-7-14-0/284010)
**Author:** [@Samrudhi\_Kuwar](https://discuss.elastic.co/u/Samrudhi_Kuwar)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 11:30am UTC](https://discuss.elastic.co/t/customize-logo-in-kibana-7-14-0/284010 "2021-09-13T11:30:15Z")
Hello to everyone! I am trying to customize kibana 7.14.0 I have successfully changed the logo in Header ( the logo in the tab). I have replaced the favicons folder. I am facing problem in changing logo in Logo in Lo… --- ## [Remove unwanted indices from a Kibana space](https://discuss.elastic.co/t/remove-unwanted-indices-from-a-kibana-space/284017)
**Author:** [@KrishnanR](https://discuss.elastic.co/u/KrishnanR)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 11:24am UTC](https://discuss.elastic.co/t/remove-unwanted-indices-from-a-kibana-space/284017 "2021-09-13T11:24:18Z")
I am having an index metricbeat-\* created in the default Kibana space, which is shared with the newly created space. Now, I wanted to remove that index from the newly created spaces. Can someone help me with that? N… --- ## [Anonymous user config](https://discuss.elastic.co/t/anonymous-user-config/284037)
**Author:** [@imarkvisser](https://discuss.elastic.co/u/imarkvisser)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 11:22am UTC](https://discuss.elastic.co/t/anonymous-user-config/284037 "2021-09-13T11:22:22Z")
Hi there, We are currently running ECK with an anonymous user for users to log in with, which looks like; kibana: enabled: true name: foo version: 7.11.2 http: image: count: 1 config: xpack.security.a… --- ## [Same color for actual value points and trendline on it](https://discuss.elastic.co/t/same-color-for-actual-value-points-and-trendline-on-it/284063)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 0\ **Last updated:** [September 13, 2021, 11:19am UTC](https://discuss.elastic.co/t/same-color-for-actual-value-points-and-trendline-on-it/284063 "2021-09-13T11:19:02Z")
Hi, I create a timelion visualization and displayed values on it by colored circle. I am displaying multiple values at a time point. After that I create trendlines on it. I want to make trendline color same respected … --- ## [Is there a way to save Index Templates?](https://discuss.elastic.co/t/is-there-a-way-to-save-index-templates/284019)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 11:14am UTC](https://discuss.elastic.co/t/is-there-a-way-to-save-index-templates/284019 "2021-09-13T11:14:07Z")
Hello, Is there a way to save index templates , in the UI (under "actions") i don't see an option that lets one save an index template . I have a few log types that would probably require a few index templates and pr… --- ## [Monitoring Elastic Stack?](https://discuss.elastic.co/t/monitoring-elastic-stack/283791)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 4\ **Last updated:** [September 13, 2021, 8:44am UTC](https://discuss.elastic.co/t/monitoring-elastic-stack/283791 "2021-09-13T08:44:09Z")
Hello We have a monitoring system that watchest the Elastic Stack but the CPU and memory randomly shoot up to 94% (in case of memory) and all of a sudden, go back down to 70% or so. Are there any metrics that I should … --- ## [Circuit break exception - version 7.7.0](https://discuss.elastic.co/t/circuit-break-exception-version-7-7-0/281568)
**Author:** [@ravindrababua](https://discuss.elastic.co/u/ravindrababua)\ **Replies:** 3\ **Last updated:** [September 13, 2021, 8:35am UTC](https://discuss.elastic.co/t/circuit-break-exception-version-7-7-0/281568 "2021-09-13T08:35:18Z")
We have configured 3node cluster (2masters and 1data node),we have two sites prod and DR. between prod and DR we configured replication via kafka. We have observed below errors in logstash, and elasticsearch on DR site,… --- ## [Equivalent of 'Group By' along with significant\_text aggregation](https://discuss.elastic.co/t/equivalent-of-group-by-along-with-significant-text-aggregation/283944)
**Author:** [@firasd](https://discuss.elastic.co/u/firasd)\ **Replies:** 4\ **Last updated:** [September 13, 2021, 8:25am UTC](https://discuss.elastic.co/t/equivalent-of-group-by-along-with-significant-text-aggregation/283944 "2021-09-13T08:25:06Z")
Hi folks.. I'm looking for some equivalent of SQL's 'group by' or 'distinct' ... basically I have this query { "query": { "range": { "post\_date": { "from": "2016-04-14 00:00:00", "to": "2016-04-15 00:00:0… --- ## [Change Color palette in Lens](https://discuss.elastic.co/t/change-color-palette-in-lens/282339)
**Author:** [@AlexM566](https://discuss.elastic.co/u/AlexM566)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 7:04am UTC](https://discuss.elastic.co/t/change-color-palette-in-lens/282339 "2021-09-13T07:04:19Z")
Hello, I have a Mixed XY visualization made in Lens mode and what I want to do is to change the colours palette to my wish. Here it is : So what I want is for nr.1 to assign green colour and for nr 3. orange and so… --- ## [Replacing cluster level objects (e.g. ClusterRole)](https://discuss.elastic.co/t/replacing-cluster-level-objects-e-g-clusterrole/283986)
**Author:** [@AndreyL](https://discuss.elastic.co/u/AndreyL)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 7:01am UTC](https://discuss.elastic.co/t/replacing-cluster-level-objects-e-g-clusterrole/283986 "2021-09-13T07:01:27Z")
I want to deploy ECK to our internal Kubernetes cluster. The issue I ran into is that ECK uses cluster level objects like ClusterRole, and I am not able to deploy those - we use Nirmata for cluster management, and each a… --- ## [Elastic search shutdown automatically](https://discuss.elastic.co/t/elastic-search-shutdown-automatically/283927)
**Author:** [@DANISH\_MAHER](https://discuss.elastic.co/u/DANISH_MAHER)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 6:01am UTC](https://discuss.elastic.co/t/elastic-search-shutdown-automatically/283927 "2021-09-13T06:01:29Z")
Elastic search shutdown automatically every hour can you tell me solution i am using magento 2 VPS cent os --- ## [Elasticsearch backup only hot indices](https://discuss.elastic.co/t/elasticsearch-backup-only-hot-indices/283856)
**Author:** [@auto\_reply\_007](https://discuss.elastic.co/u/auto_reply_007)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 5:54am UTC](https://discuss.elastic.co/t/elasticsearch-backup-only-hot-indices/283856 "2021-09-13T05:54:45Z")
I have a cluster of elastiсsearch consisting of 6 nodes. 5 indexes are created per day (each index consume about 10 to 250 gigabytes) we now have a snapshot repository (which is located on the NFS share) where these indi… --- ## [Kibana visualize table Metrics Count limit range](https://discuss.elastic.co/t/kibana-visualize-table-metrics-count-limit-range/283257)
**Author:** [@rf1388](https://discuss.elastic.co/u/rf1388)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 5:26am UTC](https://discuss.elastic.co/t/kibana-visualize-table-metrics-count-limit-range/283257 "2021-09-13T05:26:50Z")
about to extract an IP list with more than 100 "count" fields. Is there a way to implement it? kibana v7.8.1 used --- ## [Error login](https://discuss.elastic.co/t/error-login/283597)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 4\ **Last updated:** [September 13, 2021, 2:45am UTC](https://discuss.elastic.co/t/error-login/283597 "2021-09-13T02:45:52Z")
hi everyone, i have a kibana. Yesterday I was still able to login, but today I can't. it only says "oops! Error. Try again" the username and password are all correct and the elsticsearch and kibana services are running p… --- ## [What is this java\_pid%pid\_number%.hprof and can it be deleted](https://discuss.elastic.co/t/what-is-this-java-pid-pid-number-hprof-and-can-it-be-deleted/283907)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 1:50am UTC](https://discuss.elastic.co/t/what-is-this-java-pid-pid-number-hprof-and-can-it-be-deleted/283907 "2021-09-13T01:50:29Z")
I have my ES data and ES Logs going to another location, but in my /var/lib/elasticsearch I have a file named java\_pid%pid\_number%.hprof that has cause my OS drive to be out of space. which is now causing me issues. Wha… --- ## [Expanding non-LVM Disk with Elasticsearch indicies stored on](https://discuss.elastic.co/t/expanding-non-lvm-disk-with-elasticsearch-indicies-stored-on/283779)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 3\ **Last updated:** [September 13, 2021, 1:03am UTC](https://discuss.elastic.co/t/expanding-non-lvm-disk-with-elasticsearch-indicies-stored-on/283779 "2021-09-13T01:03:26Z")
We have a capacity problem with our worker nodes (ELK stack) oot@xxx03:/elkdata# yum list | grep elasticsearch | grep \\.12 apm-server.i686 7.12.0-1 elasticsearch-7.x apm-s… --- ## [Comment added to case or event](https://discuss.elastic.co/t/comment-added-to-case-or-event/283694)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 3\ **Last updated:** [September 13, 2021, 12:59am UTC](https://discuss.elastic.co/t/comment-added-to-case-or-event/283694 "2021-09-13T00:59:24Z")
Hello every body, I have a question about the notes added by the user in ELK, it is possible to have the visibility of them in ONE place? Best regards, [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=828) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=830)