# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=843

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 844

---

## [Error in using EXEC filter for curl](https://discuss.elastic.co/t/error-in-using-exec-filter-for-curl/282459)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 5\
**Last updated:** [August 27, 2021, 7:27am UTC](https://discuss.elastic.co/t/error-in-using-exec-filter-for-curl/282459 "2021-08-27T07:27:35Z")

</div>

Hi All, We have a scenario where through curl we are getting some output, when tried the curl command directly we are getting the output. curl --location --request POST 'https://demo.cloud.ie/api/v2/analytics/conversat…

---

## [The rebalance tasks keeps going and not stop](https://discuss.elastic.co/t/the-rebalance-tasks-keeps-going-and-not-stop/282619)

<div class="topic-metadata">

**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\
**Replies:** 8\
**Last updated:** [August 27, 2021, 6:56am UTC](https://discuss.elastic.co/t/the-rebalance-tasks-keeps-going-and-not-stop/282619 "2021-08-27T06:56:20Z")

</div>

version ：7.10.2 i add a dataNode to cluster，and then the rebalance tasks started... but a week has passed，rebalance keeps going now and not only for new dataNode。 i found this situation exists for GET \_cat/recovery?v …

---

## [Парсинг поля “message” windows print](https://discuss.elastic.co/t/message-windows-print/282018)

<div class="topic-metadata">

**Author:** [@zhsv](https://discuss.elastic.co/u/zhsv)\
**Replies:** 4\
**Last updated:** [August 27, 2021, 6:16am UTC](https://discuss.elastic.co/t/message-windows-print/282018 "2021-08-27T06:16:24Z")

</div>

Добрый день! Прошу помочь разобрать лог печати из windows. За ранее извиняюсь, т.к. дуб дубом в grok \[2021-08-19T23:14:41,726\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[7a22c627e1accad82d7e582d6ff4b94f3fb25a00d65131…

---

## [How to start with API's](https://discuss.elastic.co/t/how-to-start-with-apis/282511)

<div class="topic-metadata">

**Author:** [@uk642](https://discuss.elastic.co/u/uk642)\
**Replies:** 3\
**Last updated:** [August 27, 2021, 1:16am UTC](https://discuss.elastic.co/t/how-to-start-with-apis/282511 "2021-08-27T01:16:24Z")

</div>

I have installed Elastic search, logstash and kibana on localhost. I have uploaded sample data using logstash using a configuration file and I can view the data in Kibana dashboard. I want to create a search engine. How…

---

## [CSV Export for Kibana failing in case of non indexed fields](https://discuss.elastic.co/t/csv-export-for-kibana-failing-in-case-of-non-indexed-fields/281800)

<div class="topic-metadata">

**Author:** [@MitParekh](https://discuss.elastic.co/u/MitParekh)\
**Replies:** 3\
**Last updated:** [August 26, 2021, 6:20pm UTC](https://discuss.elastic.co/t/csv-export-for-kibana-failing-in-case-of-non-indexed-fields/281800 "2021-08-26T18:20:14Z")

</div>

Hi, I am trying to export a csv from kibana discover. It successfully gives me all the data in the csv when the fields selected are indexed. For the fields which are not indexed (i.e. enabled: false), it fails to genera…

---

## [Is it possible to have a visualization show up/populate only after a parameter in the controls panel is selected?](https://discuss.elastic.co/t/is-it-possible-to-have-a-visualization-show-up-populate-only-after-a-parameter-in-the-controls-panel-is-selected/282600)

<div class="topic-metadata">

**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\
**Replies:** 1\
**Last updated:** [August 26, 2021, 5:41pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-a-visualization-show-up-populate-only-after-a-parameter-in-the-controls-panel-is-selected/282600 "2021-08-26T17:41:03Z")

</div>

Is it possible to have a visualization show up/populate only after a parameter in the controls panel is selected? Can we make that parameter a required parameter? Thank you!

---

## [Index Boost along with sort not working](https://discuss.elastic.co/t/index-boost-along-with-sort-not-working/282582)

<div class="topic-metadata">

**Author:** [@nileshsoor](https://discuss.elastic.co/u/nileshsoor)\
**Replies:** 1\
**Last updated:** [August 26, 2021, 3:32pm UTC](https://discuss.elastic.co/t/index-boost-along-with-sort-not-working/282582 "2021-08-26T15:32:29Z")

</div>

I have a query, which will fired against 2 indices A & B. Results from index A is more important than B. ES version : 7.8.0 Query:: { "query": { "terms": { "id": \["a5af38bf-63ac-4e26-af25-68044ffea298","a5…

---

## [Mtericbeat - error - Failed to connect to elasticsearch](https://discuss.elastic.co/t/mtericbeat-error-failed-to-connect-to-elasticsearch/282323)

<div class="topic-metadata">

**Author:** [@nehasinha1807](https://discuss.elastic.co/u/nehasinha1807)\
**Replies:** 2\
**Last updated:** [August 26, 2021, 4:09pm UTC](https://discuss.elastic.co/t/mtericbeat-error-failed-to-connect-to-elasticsearch/282323 "2021-08-26T16:09:09Z")

</div>

I'm new to ELK. here is my doubt - we had installed ELK lite on a linux server(A) and trying to install metricbeat on a different server(B) but my metricbeat is failed to connect to elasticsearch(A). metricbeat i insta…

---

## [Logstash filter for a log record from filebeats](https://discuss.elastic.co/t/logstash-filter-for-a-log-record-from-filebeats/282228)

<div class="topic-metadata">

**Author:** [@Rabin\_Bhattacharya](https://discuss.elastic.co/u/Rabin_Bhattacharya)\
**Replies:** 5\
**Last updated:** [August 26, 2021, 3:35pm UTC](https://discuss.elastic.co/t/logstash-filter-for-a-log-record-from-filebeats/282228 "2021-08-26T15:35:57Z")

</div>

Hi, I am using ELK stack+filebeats in our project and the application log is integration with filebeats. Filebeat is reading the application log. The log is successfully read by logstash. My question is how to parse the…

---

## [Does it make sense to separate rarely used documents for faster performance?](https://discuss.elastic.co/t/does-it-make-sense-to-separate-rarely-used-documents-for-faster-performance/282550)

<div class="topic-metadata">

**Author:** [@Yoan\_Arnaudov](https://discuss.elastic.co/u/Yoan_Arnaudov)\
**Replies:** 1\
**Last updated:** [August 26, 2021, 3:34pm UTC](https://discuss.elastic.co/t/does-it-make-sense-to-separate-rarely-used-documents-for-faster-performance/282550 "2021-08-26T15:34:38Z")

</div>

I'm designing a system which will have ~2M documents and 95% percent of the queries will be targeted against 40-50k documents. Documents in the system have two states bool fields active and inactive. I have ~50k in the…

---

## [Remove duplicate / multiple data records in Elastic](https://discuss.elastic.co/t/remove-duplicate-multiple-data-records-in-elastic/282569)

<div class="topic-metadata">

**Author:** [@cf4455](https://discuss.elastic.co/u/cf4455)\
**Replies:** 1\
**Last updated:** [August 26, 2021, 3:33pm UTC](https://discuss.elastic.co/t/remove-duplicate-multiple-data-records-in-elastic/282569 "2021-08-26T15:33:08Z")

</div>

Hi, due to an error in the program that writes data records to the Elastic, there are now a lot of entries in our Elastic, all with exactly the same value in the "time" attribute. For example, there are 50 data records i…

---

## [Metric count aggregation difference](https://discuss.elastic.co/t/metric-count-aggregation-difference/282575)

<div class="topic-metadata">

**Author:** [@gijo](https://discuss.elastic.co/u/gijo)\
**Replies:** 1\
**Last updated:** [August 26, 2021, 3:27pm UTC](https://discuss.elastic.co/t/metric-count-aggregation-difference/282575 "2021-08-26T15:27:53Z")

</div>

I have a index with source field. It can have two values. For ex: "sourceA" & "sourceB". I am trying to create to metric aggregation panels with source filter. It is possible to create metric aggregation with single f…

---

## [Logstash filter check value without fields](https://discuss.elastic.co/t/logstash-filter-check-value-without-fields/282598)

<div class="topic-metadata">

**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\
**Replies:** 0\
**Last updated:** [August 26, 2021, 3:27pm UTC](https://discuss.elastic.co/t/logstash-filter-check-value-without-fields/282598 "2021-08-26T15:27:24Z")

</div>

Below document there are 3 values without fields I need add logstash configuration to pick up 3 values, can you help please? maybe start with loglevel as DEBUG and error N13 to confirm before pick up 3 values below. 70-…

---

## [Double split series possible?](https://discuss.elastic.co/t/double-split-series-possible/282494)

<div class="topic-metadata">

**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\
**Replies:** 2\
**Last updated:** [August 26, 2021, 3:16pm UTC](https://discuss.elastic.co/t/double-split-series-possible/282494 "2021-08-26T15:16:58Z")

</div>

Hello all, Please take a look at my above screenshot. The X-Axis has the week (time component). Y-Axis is count of occurrences. I am currently splitting this with a field called 'Responsible Party'. I want to break up…

---

## [Can we Visualize Jenkins stages through Kibana?](https://discuss.elastic.co/t/can-we-visualize-jenkins-stages-through-kibana/281974)

<div class="topic-metadata">

**Author:** [@Harindra\_Balanagired](https://discuss.elastic.co/u/Harindra_Balanagired)\
**Replies:** 9\
**Last updated:** [August 26, 2021, 2:06pm UTC](https://discuss.elastic.co/t/can-we-visualize-jenkins-stages-through-kibana/281974 "2021-08-26T14:06:57Z")

</div>

In Jenkins I have 4 stages for each stage it takes some time to finish you can check on 1st image. I want to visualize the same thing on kibana for each stage run time See the 3rd image stage name empty so in k…

---

## [Kibana Server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/281884)

<div class="topic-metadata">

**Author:** [@jaskaran](https://discuss.elastic.co/u/jaskaran)\
**Replies:** 17\
**Last updated:** [August 26, 2021, 2:25pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/281884 "2021-08-26T14:25:08Z")

</div>

Hi All, I have Kibana and Elasticserach running on one server, everything was working fine from last 1 year and just from past few weeks elasticserach is keep crashing, and now i am not able to access Kibana at all. Bel…

---

## [I want hide date filter from dashboard](https://discuss.elastic.co/t/i-want-hide-date-filter-from-dashboard/282534)

<div class="topic-metadata">

**Author:** [@Satish\_Yadav](https://discuss.elastic.co/u/Satish_Yadav)\
**Replies:** 1\
**Last updated:** [August 26, 2021, 2:12pm UTC](https://discuss.elastic.co/t/i-want-hide-date-filter-from-dashboard/282534 "2021-08-26T14:12:16Z")

</div>

---

## [Failing cluster](https://discuss.elastic.co/t/failing-cluster/282474)

<div class="topic-metadata">

**Author:** [@dusatvoj](https://discuss.elastic.co/u/dusatvoj)\
**Replies:** 3\
**Last updated:** [August 26, 2021, 1:41pm UTC](https://discuss.elastic.co/t/failing-cluster/282474 "2021-08-26T13:41:10Z")

</div>

Hello, I have a problem with my elasticsearch cluster. (ES 7.14.0) I have virtualized cluster with setup like: elk-node-1 (master, small ssd storage, hot data, ingester, ...) elk-node-2 (warm data, cold data) NumberO…

---

## [Filter Kibana dashboard date range by day of week](https://discuss.elastic.co/t/filter-kibana-dashboard-date-range-by-day-of-week/282394)

<div class="topic-metadata">

**Author:** [@tiago.ferneda](https://discuss.elastic.co/u/tiago.ferneda)\
**Replies:** 1\
**Last updated:** [August 26, 2021, 1:37pm UTC](https://discuss.elastic.co/t/filter-kibana-dashboard-date-range-by-day-of-week/282394 "2021-08-26T13:37:35Z")

</div>

Hi, I'm having some trouble in creating a specific elasticsearch query DSL for a Kibana Dashboard. I need to filter data by created date and time. I apllied the solution bellow so we can bring data to our scope, we call…

---

## [Cant seem to install plugin with elasticsearch](https://discuss.elastic.co/t/cant-seem-to-install-plugin-with-elasticsearch/282086)

<div class="topic-metadata">

**Author:** [@cctk](https://discuss.elastic.co/u/cctk)\
**Replies:** 7\
**Last updated:** [August 26, 2021, 12:52pm UTC](https://discuss.elastic.co/t/cant-seem-to-install-plugin-with-elasticsearch/282086 "2021-08-26T12:52:58Z")

</div>

HI , I am having issues with Elasticsearch-plugin command or maybe elasticsearch in general. I have tried countless ways and can't seem to find out the issue. when I install the plugin ./elasticsearch-plugin install r…

---

## [Unable to refer lang-mustache plug to parse mustache template in custom plugin](https://discuss.elastic.co/t/unable-to-refer-lang-mustache-plug-to-parse-mustache-template-in-custom-plugin/282573)

<div class="topic-metadata">

**Author:** [@Akshayyha\_Krishnamur](https://discuss.elastic.co/u/Akshayyha_Krishnamur)\
**Replies:** 0\
**Last updated:** [August 26, 2021, 12:20pm UTC](https://discuss.elastic.co/t/unable-to-refer-lang-mustache-plug-to-parse-mustache-template-in-custom-plugin/282573 "2021-08-26T12:20:46Z")

</div>

This post is with reference to Unable to start Elastic search when i delete jar from lang-mustache and place it in lib I faced the same issue in es 7.9.0 and the fix was to have the lang-mustache jar in modules folder a…

---

## [Elastic Search query](https://discuss.elastic.co/t/elastic-search-query/282562)

<div class="topic-metadata">

**Author:** [@chris.aw](https://discuss.elastic.co/u/chris.aw)\
**Replies:** 1\
**Last updated:** [August 26, 2021, 10:57am UTC](https://discuss.elastic.co/t/elastic-search-query/282562 "2021-08-26T10:57:51Z")

</div>

Hi guys! I've come across this UX (as shown below). Just wondering if elastic search can support the same results as well. I believe it is identifying by keywords

---

## [Index not creating](https://discuss.elastic.co/t/index-not-creating/282345)

<div class="topic-metadata">

**Author:** [@jubin03](https://discuss.elastic.co/u/jubin03)\
**Replies:** 17\
**Last updated:** [August 26, 2021, 10:55am UTC](https://discuss.elastic.co/t/index-not-creating/282345 "2021-08-26T10:55:13Z")

</div>

After configuring filter.conf and logstash input index not showing in Kibana. Successfully tested logstash conf files. No errors. Below are the conf files Filter.conf filter { if \[type\] == "signinattempts" { j…

---

## [How to change "timeout" value in Request payload of "\_msearch" query?](https://discuss.elastic.co/t/how-to-change-timeout-value-in-request-payload-of-msearch-query/282358)

<div class="topic-metadata">

**Author:** [@mgharikrishnan](https://discuss.elastic.co/u/mgharikrishnan)\
**Replies:** 4\
**Last updated:** [August 26, 2021, 10:14am UTC](https://discuss.elastic.co/t/how-to-change-timeout-value-in-request-payload-of-msearch-query/282358 "2021-08-26T10:14:29Z")

</div>

Hi Team, We use Elasticsearch 7.9.1 & Kibana 7.3.2 version in our product. While Kibana dashboard loading, there is a variable "timeout":"30000ms" in the "Request payload" of \_msearch queries. We tried to change this v…

---

## [How to manage data retention time in ElasticSearch](https://discuss.elastic.co/t/how-to-manage-data-retention-time-in-elasticsearch/282541)

<div class="topic-metadata">

**Author:** [@vp096](https://discuss.elastic.co/u/vp096)\
**Replies:** 2\
**Last updated:** [August 26, 2021, 9:25am UTC](https://discuss.elastic.co/t/how-to-manage-data-retention-time-in-elasticsearch/282541 "2021-08-26T09:25:21Z")

</div>

Hello to all! I'm using Logastash to send syslog data to ElasticSearch and I'm browsing it using Kibana. I have 2 questions regarding log backup: I would like to keep this data for at least 1 year before it is deleted…

---

## [Logstash pipeline graceful shutdown: потеря in-memory данных?](https://discuss.elastic.co/t/logstash-pipeline-graceful-shutdown-in-memory/281978)

<div class="topic-metadata">

**Author:** [@ep4sh](https://discuss.elastic.co/u/ep4sh)\
**Replies:** 4\
**Last updated:** [August 26, 2021, 8:50am UTC](https://discuss.elastic.co/t/logstash-pipeline-graceful-shutdown-in-memory/281978 "2021-08-26T08:50:29Z")

</div>

Ребят всем привет! Подскажите у нас имеется Logstash версии 6.x (latest) который отправляет данные в Elasticsearch, он установлен на AWS ASG. Я пытаюсь понять, при терминировании инстанса ASG (ASG делает нечто вроде sh…

---

## [Kibana not ready error](https://discuss.elastic.co/t/kibana-not-ready-error/282531)

<div class="topic-metadata">

**Author:** [@Jedrick](https://discuss.elastic.co/u/Jedrick)\
**Replies:** 6\
**Last updated:** [August 26, 2021, 7:54am UTC](https://discuss.elastic.co/t/kibana-not-ready-error/282531 "2021-08-26T07:54:07Z")

</div>

Hi I would like to have an assistance about my Kibana. I'm currently building wazuh. But once I access in into the browser it says kibana isnot yet ready

---

## [Provide order of ids and retrieve docs in the provided order](https://discuss.elastic.co/t/provide-order-of-ids-and-retrieve-docs-in-the-provided-order/282535)

<div class="topic-metadata">

**Author:** [@voldemort02](https://discuss.elastic.co/u/voldemort02)\
**Replies:** 2\
**Last updated:** [August 26, 2021, 5:52am UTC](https://discuss.elastic.co/t/provide-order-of-ids-and-retrieve-docs-in-the-provided-order/282535 "2021-08-26T05:52:17Z")

</div>

I have I have order of ids, \[1, 4, 2, 5\] and some filters { match: {...} } and I want the resulting documents to be returned in the order \[1, 4, 2, 5\]. What would be the best way to achieve this? Sample document: { …

---

## [Delete API for duplicate records](https://discuss.elastic.co/t/delete-api-for-duplicate-records/282438)

<div class="topic-metadata">

**Author:** [@onkark](https://discuss.elastic.co/u/onkark)\
**Replies:** 2\
**Last updated:** [August 26, 2021, 5:02am UTC](https://discuss.elastic.co/t/delete-api-for-duplicate-records/282438 "2021-08-26T05:02:12Z")

</div>

I have documents with duplicate data say like Doc 1 :- { id : 1, empid : 1, name : Peter } Doc 2 :- { id : 2, empid : 2, name : Leo} Doc 3 :- { id : 1, empid : 1, name : Peter } Doc 4 :- { id : 3, empid : 3, name : D…

---

## [Kibana report not reading \_source](https://discuss.elastic.co/t/kibana-report-not-reading-source/281625)

<div class="topic-metadata">

**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\
**Replies:** 10\
**Last updated:** [August 26, 2021, 3:40am UTC](https://discuss.elastic.co/t/kibana-report-not-reading-source/281625 "2021-08-26T03:40:56Z")

</div>

Hi Team, Kibana version 7.13.4. I've enabled read fields from \_source in Kibana advanced settings. Issue - I've saved a search in Kibana and tried to generate the CSV, however only the Timestamp has a value. \_source…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=842)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=844)
