# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=831 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 832 --- ## [Creating an array of values via ruby on logstash config](https://discuss.elastic.co/t/creating-an-array-of-values-via-ruby-on-logstash-config/283649)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 4\ **Last updated:** [September 10, 2021, 9:51am UTC](https://discuss.elastic.co/t/creating-an-array-of-values-via-ruby-on-logstash-config/283649 "2021-09-10T09:51:04Z")
Hello, Im trying to get the cpu core values in a single array on my logstash config . I'm not familiar with ruby code, however based on my very limited understanding i was able to do this . It has the cpu core values , … --- ## [Generate CSV log file automatically from kibana -\> discover -\>share](https://discuss.elastic.co/t/generate-csv-log-file-automatically-from-kibana-discover-share/283160)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 1\ **Last updated:** [September 10, 2021, 8:16am UTC](https://discuss.elastic.co/t/generate-csv-log-file-automatically-from-kibana-discover-share/283160 "2021-09-10T08:16:00Z")
Hello Team, How to automatically download CSV report from Kibana -\> discover -\> share -\> CSV reports -\> Geerate csv (either shell script or any automation script) Regards, Suresh --- ## [Kibana filter window](https://discuss.elastic.co/t/kibana-filter-window/283522)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 12\ **Last updated:** [September 10, 2021, 7:48am UTC](https://discuss.elastic.co/t/kibana-filter-window/283522 "2021-09-10T07:48:32Z")
Hi, In kibana (currently 7.14.1) we often use the filter window when working on the 'discover' pages. One chooses the concerning field, the operator and then in the past in the past the value field had a dropdown whi… --- ## [Logstash 7.11 ruby filter error](https://discuss.elastic.co/t/logstash-7-11-ruby-filter-error/283844)
**Author:** [@shharukh](https://discuss.elastic.co/u/shharukh)\ **Replies:** 0\ **Last updated:** [September 10, 2021, 7:09am UTC](https://discuss.elastic.co/t/logstash-7-11-ruby-filter-error/283844 "2021-09-10T07:09:51Z")
Hello World, I wanted to add 5 hours in my datetime through logstash. have found a way in logstash 6.4. ruby { code =\> 'event.set("@timestamp", LogStash::Timestamp.new(Time.at(event.get("@timestamp").to\_f+86400)))' … --- ## [Kibana slowness and random errors](https://discuss.elastic.co/t/kibana-slowness-and-random-errors/283444)
**Author:** [@mitesh.gangaramani](https://discuss.elastic.co/u/mitesh.gangaramani)\ **Replies:** 5\ **Last updated:** [September 10, 2021, 5:15am UTC](https://discuss.elastic.co/t/kibana-slowness-and-random-errors/283444 "2021-09-10T05:15:01Z")
Hello Experts, Kibana becomes too slow sometimes and keep loading. Also, I want to know if the current elasticsearch setup is correct or not as sometimes it shows spikes in CPU and RAM and stop logs from some nodes. Se… --- ## [Почему Эластик не выводит документы, в которых другой падеж](https://discuss.elastic.co/t/topic/283759)
**Author:** [@SkaaRJ](https://discuss.elastic.co/u/SkaaRJ)\ **Replies:** 2\ **Last updated:** [September 10, 2021, 3:47am UTC](https://discuss.elastic.co/t/topic/283759 "2021-09-10T03:47:48Z")
У меня на интересующие поля привязан плагин русской морфологии. Маппинги на индекс выглядят следующим образом: PUT reg-document { "settings" : { "index" : { "analysis" : { "filter" : { … --- ## [Unable to install composable template from the logstash.outputs.elasticsearch plugin](https://discuss.elastic.co/t/unable-to-install-composable-template-from-the-logstash-outputs-elasticsearch-plugin/283835)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 0\ **Last updated:** [September 10, 2021, 1:39am UTC](https://discuss.elastic.co/t/unable-to-install-composable-template-from-the-logstash-outputs-elasticsearch-plugin/283835 "2021-09-10T01:39:45Z")
When I try to load a composable template from the logstash into the elasticsearch using the logstash output elasticsearch plugin, I get the error Failed to install template. {:message=\>"Got response code '400' contactin… --- ## [关于多层nested 嵌套查询(多规格商品查询),数据查询要怎么做](https://discuss.elastic.co/t/nested/281930)
**Author:** [@XuShall](https://discuss.elastic.co/u/XuShall)\ **Replies:** 4\ **Last updated:** [September 10, 2021, 1:07am UTC](https://discuss.elastic.co/t/nested/281930 "2021-09-10T01:07:30Z")
关于多层nested 嵌套查询(多规格商品查询),数据查询要怎么做 结构 PUT goods { "mappings": { "properties": { "spu\_id": { "type": "integer" }, "title": { "type": "text", "analyzer": "ik\_smart" }, "sub\_title": { "typ… --- ## [Working with key:value arrays](https://discuss.elastic.co/t/working-with-key-value-arrays/283772)
**Author:** [@awer1967](https://discuss.elastic.co/u/awer1967)\ **Replies:** 4\ **Last updated:** [September 10, 2021, 1:06am UTC](https://discuss.elastic.co/t/working-with-key-value-arrays/283772 "2021-09-10T01:06:04Z")
Good day ! Accordingly to my logstash configuration I get a message with an array consists of key:value pairs. I have to mutate it on a very special way adding two fields and put there the key and the value . For examp… --- ## [Kibana installation: why does it try to connect to dynatrace on start up?](https://discuss.elastic.co/t/kibana-installation-why-does-it-try-to-connect-to-dynatrace-on-start-up/283782)
**Author:** [@mrproper](https://discuss.elastic.co/u/mrproper)\ **Replies:** 2\ **Last updated:** [September 10, 2021, 12:09am UTC](https://discuss.elastic.co/t/kibana-installation-why-does-it-try-to-connect-to-dynatrace-on-start-up/283782 "2021-09-10T00:09:37Z")
Hi! Trying to install Kibana 7.14.1 as yum package or from zip onto CentOS 7. Getting error while starting: \[XXX@YYYY kibana-7.14.1-linux-x86\_64\]$ ./bin/kibana /home/XXX/kibana-7.14.1-linux-x86\_64/src/cli/dist.js:10 … --- ## [The need of gpgkey](https://discuss.elastic.co/t/the-need-of-gpgkey/283774)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 1\ **Last updated:** [September 9, 2021, 11:37pm UTC](https://discuss.elastic.co/t/the-need-of-gpgkey/283774 "2021-09-09T23:37:03Z")
I am performing my installation of Kibana (full ELK stack) in my production environment now. As I am going through the documentation I see that when installing it indicates the need to add the lines : baseurl=https://… --- ## [Install ES stack in a k8s cluster composed of multiple machines](https://discuss.elastic.co/t/install-es-stack-in-a-k8s-cluster-composed-of-multiple-machines/283373)
**Author:** [@bigESFan](https://discuss.elastic.co/u/bigESFan)\ **Replies:** 3\ **Last updated:** [September 9, 2021, 11:25pm UTC](https://discuss.elastic.co/t/install-es-stack-in-a-k8s-cluster-composed-of-multiple-machines/283373 "2021-09-09T23:25:00Z")
I want to install ES stack in a K8s cluster composed of multiple machines which runs vanilla K8s. These machines are all on-prem machines running Ubuntu, hence I need to install ES stack on in-house servers, not on any … --- ## [Removing \_source increases size of index](https://discuss.elastic.co/t/removing-source-increases-size-of-index/283699)
**Author:** [@Dan\_Christensen](https://discuss.elastic.co/u/Dan_Christensen)\ **Replies:** 3\ **Last updated:** [September 9, 2021, 10:06pm UTC](https://discuss.elastic.co/t/removing-source-increases-size-of-index/283699 "2021-09-09T22:06:00Z")
I've been trying to find ways to optimize my index size in Elasticsearch. In order to understand the size impact of the \_source field, I dumped an index and re-indexed into another index with \_source {enabled:false}. The… --- ## [Logstash - Difference between date into new field](https://discuss.elastic.co/t/logstash-difference-between-date-into-new-field/283818)
**Author:** [@stemons](https://discuss.elastic.co/u/stemons)\ **Replies:** 6\ **Last updated:** [September 9, 2021, 10:02pm UTC](https://discuss.elastic.co/t/logstash-difference-between-date-into-new-field/283818 "2021-09-09T22:02:17Z")
Hello team, I'm trying to add a new field to metricbeat data collection through logstash. The idea is to create a field from the difference between two dates (@timestamp and system.process.cpu.start\_date). I've made so… --- ## [Questions regarding auto-reload and encryption](https://discuss.elastic.co/t/questions-regarding-auto-reload-and-encryption/283758)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 6\ **Last updated:** [September 9, 2021, 7:40pm UTC](https://discuss.elastic.co/t/questions-regarding-auto-reload-and-encryption/283758 "2021-09-09T19:40:23Z")
Apologies beforehand for the dilettante question. I have an up and running Logstash configuration. Now and then I edit my grok parser and then I always have to type systemctl restart logstash so that the latest config i… --- ## [Logstash Ruby Tmp Folders - Temporary Solution](https://discuss.elastic.co/t/logstash-ruby-tmp-folders-temporary-solution/283793)
**Author:** [@Tydorius](https://discuss.elastic.co/u/Tydorius)\ **Replies:** 0\ **Last updated:** [September 9, 2021, 2:38pm UTC](https://discuss.elastic.co/t/logstash-ruby-tmp-folders-temporary-solution/283793 "2021-09-09T14:38:55Z")
I am currently experiencing the known issue where JRuby files are not cleaned up in /tmp on CentOS 7. My temporary resolution has been to set up a cron job to remove these folders. To save others trouble, here is my set… --- ## [Can 'scripted field' in index patterns be used to calculate a value using two existing fields?](https://discuss.elastic.co/t/can-scripted-field-in-index-patterns-be-used-to-calculate-a-value-using-two-existing-fields/283778)
**Author:** [@lchen](https://discuss.elastic.co/u/lchen)\ **Replies:** 3\ **Last updated:** [September 9, 2021, 3:36pm UTC](https://discuss.elastic.co/t/can-scripted-field-in-index-patterns-be-used-to-calculate-a-value-using-two-existing-fields/283778 "2021-09-09T15:36:59Z")
I have two timestamp fields in my index and I want to calculate the time difference between two fields using scripted fields, and after that, I want to use fields in the visualization. is this possible? --- ## [Disable swap on Linux?](https://discuss.elastic.co/t/disable-swap-on-linux/283266)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 5\ **Last updated:** [September 9, 2021, 3:04pm UTC](https://discuss.elastic.co/t/disable-swap-on-linux/283266 "2021-09-09T15:04:22Z")
Hello Reading this Disable swapping | Elasticsearch Guide \[master\] | Elastic it seems the general advice is to disable swap completely....That being said, I have Elastic, Logstash and Kibana all installed on the same se… --- ## [Lookup fields / index](https://discuss.elastic.co/t/lookup-fields-index/283680)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 1\ **Last updated:** [September 8, 2021, 4:48pm UTC](https://discuss.elastic.co/t/lookup-fields-index/283680 "2021-09-08T16:48:51Z")
Hi, Consider an index with a field with error-codes in it (version 7.14.1) . Is it possible to (for example) have another index (or another way to store a list of key:value data) with the errorcode as key and a descrip… --- ## [Encrypt or hide ES credentials in td-agent configuration file](https://discuss.elastic.co/t/encrypt-or-hide-es-credentials-in-td-agent-configuration-file/283770)
**Author:** [@Swathi\_Nayak](https://discuss.elastic.co/u/Swathi_Nayak)\ **Replies:** 1\ **Last updated:** [September 9, 2021, 1:49pm UTC](https://discuss.elastic.co/t/encrypt-or-hide-es-credentials-in-td-agent-configuration-file/283770 "2021-09-09T13:49:51Z")
We have a td-agent configuration file that connects to elastic search with SSL enabled. User and password is used for safe connection. But these credentials are in plain text. How to encrypt or hide these credentials? \ **Author:** [@hapkoek](https://discuss.elastic.co/u/hapkoek)\ **Replies:** 4\ **Last updated:** [September 9, 2021, 8:10am UTC](https://discuss.elastic.co/t/kibana-dmarc-ip-location/282574 "2021-09-09T08:10:04Z") Hi all, Recently I installed Elastic and Kibana to create a dashboard for DMARC statistics. (ParseDMARC) Currently Kibana uses ParseDMARC objects to import the data. Two of the fields are Source\_IP and Destination\_IP. … --- ## [Analyse usage on Kibana](https://discuss.elastic.co/t/analyse-usage-on-kibana/283443)
**Author:** [@Ankit\_Vishwakarma](https://discuss.elastic.co/u/Ankit_Vishwakarma)\ **Replies:** 3\ **Last updated:** [September 9, 2021, 11:53am UTC](https://discuss.elastic.co/t/analyse-usage-on-kibana/283443 "2021-09-09T11:53:13Z")
I want to capture the user's action on Kibana dashboard. User actions like the open dashboard, click on visualizations, etc. Is there any metric that captures user actions/events? This will help us to identify the usage… --- ## [Java Heap dump consuming disk space](https://discuss.elastic.co/t/java-heap-dump-consuming-disk-space/283068)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 11\ **Last updated:** [September 9, 2021, 11:35am UTC](https://discuss.elastic.co/t/java-heap-dump-consuming-disk-space/283068 "2021-09-09T11:35:41Z")
We have been getting java heap out of memory errors quite regularly, so this time we decided to take the heap dump and analyze it. But, unfortunately its tough for us to make anything out of it. So we are seeking for … --- ## [Is there any method to show specific host into one single chart in the dashboard?](https://discuss.elastic.co/t/is-there-any-method-to-show-specific-host-into-one-single-chart-in-the-dashboard/283166)
**Author:** [@afan](https://discuss.elastic.co/u/afan)\ **Replies:** 4\ **Last updated:** [September 9, 2021, 10:41am UTC](https://discuss.elastic.co/t/is-there-any-method-to-show-specific-host-into-one-single-chart-in-the-dashboard/283166 "2021-09-09T10:41:41Z")
I am trying to build the dashboard right now and able to show the CPU/memory usage by single specific host as below. however, I would like to group some specific hostnames (just like uat servers or app servers) to sho… --- ## [How get sum for example with integer fields of each doc](https://discuss.elastic.co/t/how-get-sum-for-example-with-integer-fields-of-each-doc/283747)
**Author:** [@Grigor\_Martirosyan](https://discuss.elastic.co/u/Grigor_Martirosyan)\ **Replies:** 5\ **Last updated:** [September 9, 2021, 10:39am UTC](https://discuss.elastic.co/t/how-get-sum-for-example-with-integer-fields-of-each-doc/283747 "2021-09-09T10:39:33Z")
I use elastic with spring boot ,and have integer fields in my doc and now I need to do some calculation with those fields for each doc ,is that possible?? this is some try Script script = new Script("{\\n" + … --- ## [Read-only Query](https://discuss.elastic.co/t/read-only-query/283040)
**Author:** [@k.schmidtke](https://discuss.elastic.co/u/k.schmidtke)\ **Replies:** 2\ **Last updated:** [September 9, 2021, 9:54am UTC](https://discuss.elastic.co/t/read-only-query/283040 "2021-09-09T09:54:23Z")
I want to have preset Dashboards for Users with fixed querys that cannot be changed. Example: I want my Dashboard to query with "header\_from : company.com", but it schouldn't be changeable by read-only users Is this p… --- ## [Need help to have space on elasticsearch](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220)
**Author:** [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Replies:** 13\ **Last updated:** [September 9, 2021, 9:42am UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220 "2021-09-09T09:42:03Z")
When I replay the logs from logstash to elasticsearch, I no longer see them on kibana. I think there is no more storage space. So I go to Stack Management -\> Index Management to delete Indices. But, that does not solve… --- ## [TSVB Clipping with elk 7.10.2](https://discuss.elastic.co/t/tsvb-clipping-with-elk-7-10-2/281973)
**Author:** [@Rollup\_eval](https://discuss.elastic.co/u/Rollup_eval)\ **Replies:** 1\ **Last updated:** [September 9, 2021, 8:26am UTC](https://discuss.elastic.co/t/tsvb-clipping-with-elk-7-10-2/281973 "2021-09-09T08:26:13Z")
I'am using elk 7.10.2 and TSVB kibana plugin. For TSVB , I enter axis-min 0.1 for axis betwwen 0% and 100%, i get the following Any lines with one extremity lower than axis min dissappear: clipping fails Note that … --- ## [Plain text on markdown is not displayed if I select a long time range](https://discuss.elastic.co/t/plain-text-on-markdown-is-not-displayed-if-i-select-a-long-time-range/283626)
**Author:** [@Fosco](https://discuss.elastic.co/u/Fosco)\ **Replies:** 6\ **Last updated:** [September 9, 2021, 8:17am UTC](https://discuss.elastic.co/t/plain-text-on-markdown-is-not-displayed-if-i-select-a-long-time-range/283626 "2021-09-09T08:17:43Z")
Hello, I am on kibana 7.10.2 and when I create a TSVB Markdown visual with only plain text (or with an image), and then I select a time range of one year, the visual loads a long time until this error : Thanks --- ## [Pin main menu](https://discuss.elastic.co/t/pin-main-menu/283659)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 2\ **Last updated:** [September 9, 2021, 8:09am UTC](https://discuss.elastic.co/t/pin-main-menu/283659 "2021-09-09T08:09:16Z")
Hi, Using 7.14.1 In the past there was the possibility to pin the main menu, hoewever nowadays the menu slides away always. Is there no way to pin this/ make it always visible? Cheers [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=830) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=832)