# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=844 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 845 --- ## [Problem downloading results that contain the # character](https://discuss.elastic.co/t/problem-downloading-results-that-contain-the-character/282520)
**Author:** [@Vince\_D](https://discuss.elastic.co/u/Vince_D)\ **Replies:** 5\ **Last updated:** [August 26, 2021, 1:03am UTC](https://discuss.elastic.co/t/problem-downloading-results-that-contain-the-character/282520 "2021-08-26T01:03:30Z")
I am having a problem downloading results obtained using the Kibana SQL Workbench. It appears that the downloaded file is truncated when a "#" character appears in the text. For example, here is the last record in the … --- ## [Blacklisting with Ruby Filter](https://discuss.elastic.co/t/blacklisting-with-ruby-filter/282517)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 2\ **Last updated:** [August 26, 2021, 12:28am UTC](https://discuss.elastic.co/t/blacklisting-with-ruby-filter/282517 "2021-08-26T00:28:47Z")
Hi, I'm looking to blacklist 1000+ nested fields. I've read in another forum that it's not possible to use the prune filter for nested filters, but I can with a ruby filter. I wanted to know is there a way to blacklist … --- ## [Approx sizing for indexes and shard counts per data node](https://discuss.elastic.co/t/approx-sizing-for-indexes-and-shard-counts-per-data-node/282524)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 10:08pm UTC](https://discuss.elastic.co/t/approx-sizing-for-indexes-and-shard-counts-per-data-node/282524 "2021-08-25T22:08:45Z")
I know what I'm asking can be subjective but I'm wondering if I have say 5 data nodes with access to 29gb Ram in the JVM (64gb of physical ram), with 5 data nodes, what is the best way to estimate when I need to add a ne… --- ## [Impact of default indices refresh time on Bulk Indexing](https://discuss.elastic.co/t/impact-of-default-indices-refresh-time-on-bulk-indexing/282441)
**Author:** [@Pathak18](https://discuss.elastic.co/u/Pathak18)\ **Replies:** 8\ **Last updated:** [August 25, 2021, 10:05pm UTC](https://discuss.elastic.co/t/impact-of-default-indices-refresh-time-on-bulk-indexing/282441 "2021-08-25T22:05:21Z")
Hi Group, During Bulk Indexing, when the index.refresh\_interval defaults to 1sec and RefreshPolicy set to NONE. Query: In my case - Save Bulk Request runs in batches with 1k records in each batch. Out of 1k records, su… --- ## [Multi tenant architecture. multiple engines vs filter field](https://discuss.elastic.co/t/multi-tenant-architecture-multiple-engines-vs-filter-field/282403)
**Author:** [@gpribi](https://discuss.elastic.co/u/gpribi)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 9:54pm UTC](https://discuss.elastic.co/t/multi-tenant-architecture-multiple-engines-vs-filter-field/282403 "2021-08-25T21:54:39Z")
I have a multi-tenant marketplace, consisting in up to 5 tenants, each one having 1M documents to be searched. What are the performance considerations between having 5 identical engines of 1M documents, or have 1 engine… --- ## [How to get only the average system metrics from Cloudwatch to Elasticsearch?](https://discuss.elastic.co/t/how-to-get-only-the-average-system-metrics-from-cloudwatch-to-elasticsearch/282488)
**Author:** [@missdoctor](https://discuss.elastic.co/u/missdoctor)\ **Replies:** 0\ **Last updated:** [August 25, 2021, 1:02pm UTC](https://discuss.elastic.co/t/how-to-get-only-the-average-system-metrics-from-cloudwatch-to-elasticsearch/282488 "2021-08-25T13:02:13Z")
Current setup: Cloudwatch collecting metrics from different namespaces and the data gets ingested to Elasticsearch. With the below configuration (i.e AWS/EC2 namespace, metric name: CPUUtilization) Cloudwatch is getting … --- ## [How can I create a table with fields from different index patterns?](https://discuss.elastic.co/t/how-can-i-create-a-table-with-fields-from-different-index-patterns/282424)
**Author:** [@Marcos\_K\_Minkoves](https://discuss.elastic.co/u/Marcos_K_Minkoves)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 9:36pm UTC](https://discuss.elastic.co/t/how-can-i-create-a-table-with-fields-from-different-index-patterns/282424 "2021-08-25T21:36:13Z")
Hi, I'm trying to create a table that contains data from fields that are allocated in different index patterns. Whenever I try to drag and drop a field that belongs to a different index, the table resets and only show t… --- ## [Best option for Displaying Metric with $ Value for YeartoDate, MonthtoDate in Dashboard](https://discuss.elastic.co/t/best-option-for-displaying-metric-with-value-for-yeartodate-monthtodate-in-dashboard/281863)
**Author:** [@Athul\_Devkar](https://discuss.elastic.co/u/Athul_Devkar)\ **Replies:** 3\ **Last updated:** [August 18, 2021, 7:36pm UTC](https://discuss.elastic.co/t/best-option-for-displaying-metric-with-value-for-yeartodate-monthtodate-in-dashboard/281863 "2021-08-18T19:36:11Z")
Dear All, I am trying to find the best option to display sum of $value for YtD, MtD and QtD in Dashboard. Tried multiple options. However, running in to some issues. Currently issues with these 2 options #1: Created … --- ## [Upgrading Elastic from 7.13.1 to 7.14](https://discuss.elastic.co/t/upgrading-elastic-from-7-13-1-to-7-14/282478)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 7:57pm UTC](https://discuss.elastic.co/t/upgrading-elastic-from-7-13-1-to-7-14/282478 "2021-08-25T19:57:45Z")
I am trying to upgrade elastic from 7.13.1 to 7.14.0 by following the steps in Rolling upgrades | Elasticsearch Guide \[7.14\] | Elastic I am getting the conflict error as follows localhost:~ # sudo rpm --install elastic… --- ## [Fingerprint & record drop not working as expected](https://discuss.elastic.co/t/fingerprint-record-drop-not-working-as-expected/282513)
**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 6:35pm UTC](https://discuss.elastic.co/t/fingerprint-record-drop-not-working-as-expected/282513 "2021-08-25T18:35:05Z")
I'm reading lines from a log that, after converting to JSON need to be split based on a field & then I want to generate fingerprint using some fields & drop the event if the fields are not found. But I'm facing issues: … --- ## [Network overview page does not load completely](https://discuss.elastic.co/t/network-overview-page-does-not-load-completely/280582)
**Author:** [@termcap](https://discuss.elastic.co/u/termcap)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 5:26pm UTC](https://discuss.elastic.co/t/network-overview-page-does-not-load-completely/280582 "2021-08-25T17:26:15Z")
I have Elastic Security running on version 7.14. Unfortunately I am unable to get the Elastic Security Network Overview page to load completely. \[Please check the attached screenshot\] The lowest section of the page … --- ## [Pipeline aggs with more than one level depth](https://discuss.elastic.co/t/pipeline-aggs-with-more-than-one-level-depth/282502)
**Author:** [@caraboy](https://discuss.elastic.co/u/caraboy)\ **Replies:** 0\ **Last updated:** [August 25, 2021, 3:02pm UTC](https://discuss.elastic.co/t/pipeline-aggs-with-more-than-one-level-depth/282502 "2021-08-25T15:02:20Z")
Hi everyone, I'm trying to make an avg\_bucket agg that goes more than one level deep like this ... "aggs": { "group\_by\_implementation\_waiting": { "terms": { "field": "implementation.keyword", … --- ## [Yii2 and nested objects](https://discuss.elastic.co/t/yii2-and-nested-objects/282268)
**Author:** [@Web\_Hildus](https://discuss.elastic.co/u/Web_Hildus)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 4:58pm UTC](https://discuss.elastic.co/t/yii2-and-nested-objects/282268 "2021-08-25T16:58:10Z")
Hi. I'm totally new in ElasticSearch. I'm using "Yii2 Framework" and stalked on. Elastic not works with nested field. Is here specialist in Yii2 & Elasticsearch? Or where I can find the answer? Documents in index are lik… --- ## [Nanoseconds with Logstash and Elasticsearch](https://discuss.elastic.co/t/nanoseconds-with-logstash-and-elasticsearch/282492)
**Author:** [@Nico\_Pampaloni](https://discuss.elastic.co/u/Nico_Pampaloni)\ **Replies:** 7\ **Last updated:** [August 25, 2021, 4:21pm UTC](https://discuss.elastic.co/t/nanoseconds-with-logstash-and-elasticsearch/282492 "2021-08-25T16:21:43Z")
Good Morning! I am a little stuck figuring out how to handle custom time formats with nanosecond precision. The data that I am currently trying to ingest has two different time formats: 1629480840.652062565 and 2021:08:2… --- ## [Aggregate plugin does not add all results](https://discuss.elastic.co/t/aggregate-plugin-does-not-add-all-results/282503)
**Author:** [@josedelrio](https://discuss.elastic.co/u/josedelrio)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 4:20pm UTC](https://discuss.elastic.co/t/aggregate-plugin-does-not-add-all-results/282503 "2021-08-25T16:20:16Z")
Aggreation plugin overwrites data I am trying to implement an aggregation using a MySQL 5.7 database as source. select u.id as user\_id, u.first\_name as first\_name, u.last\_name as last\_name,t.id as 'tag\_id', t.name as 't… --- ## [LoadBalancer in Kibana](https://discuss.elastic.co/t/loadbalancer-in-kibana/282310)
**Author:** [@Dhamodharan](https://discuss.elastic.co/u/Dhamodharan)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 4:07pm UTC](https://discuss.elastic.co/t/loadbalancer-in-kibana/282310 "2021-08-25T16:07:42Z")
I have 2 es nodes cluster and have 2kibana nodes and wanted to maintain HA in kibana. What is the best approach inorder to maintain the HA. Do i need go with external loadbalancer for kibana or any settings can be done … --- ## [Elastic cluster sizing estimator : why I am not having 2 data nodes](https://discuss.elastic.co/t/elastic-cluster-sizing-estimator-why-i-am-not-having-2-data-nodes/282378)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 3:39pm UTC](https://discuss.elastic.co/t/elastic-cluster-sizing-estimator-why-i-am-not-having-2-data-nodes/282378 "2021-08-25T15:39:14Z")
I am trying to estimate my cluster size based on an excel sheet provided by elastic.co in a webinar in 20/05/2021 about "elastic sizing", I filled the daily volume data but I see that it gives me only 1 data not for "Ho… --- ## [Data tier problem - New Indices not allocating in data\_hot](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 3:37pm UTC](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498 "2021-08-25T15:37:30Z")
Hi, I'm (trying) to implement a hot/warm architecture using the concept of data tiers. I have several clusters with a hot/warm/cold architecture working perfectly but the implementation was done based on node.attr. No… --- ## [All of a sudden Elastic Search, 100% CPU usage and high memory usage](https://discuss.elastic.co/t/all-of-a-sudden-elastic-search-100-cpu-usage-and-high-memory-usage/281915)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 2:59pm UTC](https://discuss.elastic.co/t/all-of-a-sudden-elastic-search-100-cpu-usage-and-high-memory-usage/281915 "2021-08-25T14:59:38Z")
Hello I havent touched any configuration on the Elastic Stack in about a month and all of a sudden, we are seeing the CPU at 100% and the memory usage very high. Im surprised that this has been going on for about 8 hou… --- ## [Logstash jdbc\_static types doesn't work (longtext, tinyint...)](https://discuss.elastic.co/t/logstash-jdbc-static-types-doesnt-work-longtext-tinyint/282497)
**Author:** [@Atesrin](https://discuss.elastic.co/u/Atesrin)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 2:58pm UTC](https://discuss.elastic.co/t/logstash-jdbc-static-types-doesnt-work-longtext-tinyint/282497 "2021-08-25T14:58:33Z")
Hi, I would like to know if there is some place where I can find some information about the accepted types for jdbc\_static ? From what I see on websites only "varchar" seems accepted, but I have some longtext, tinyint … --- ## [Date field being ignored in new index pattern](https://discuss.elastic.co/t/date-field-being-ignored-in-new-index-pattern/282360)
**Author:** [@bacony0atmeal](https://discuss.elastic.co/u/bacony0atmeal)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 2:39pm UTC](https://discuss.elastic.co/t/date-field-being-ignored-in-new-index-pattern/282360 "2021-08-25T14:39:33Z")
i have an index called "bobGoblin" ... "bobGoblin" has a field called bobTimestamp which shows as a date "type" in the "mapping" ... when i go to make a new index pattern for the bobGoblin index ... The indices which mat… --- ## [Mappings restore errors](https://discuss.elastic.co/t/mappings-restore-errors/282417)
**Author:** [@Leonardo\_De\_Oliveira](https://discuss.elastic.co/u/Leonardo_De_Oliveira)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 2:37pm UTC](https://discuss.elastic.co/t/mappings-restore-errors/282417 "2021-08-25T14:37:35Z")
Hello Folks! I am currently running Elasticsearch v5.5.2 in production, and I am setting up a downsized version in our Staging environment. I used elasticdump v6.67.1 to dump our mappings and a subset of our data which… --- ## [Token input in Logstash](https://discuss.elastic.co/t/token-input-in-logstash/282460)
**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 2:22pm UTC](https://discuss.elastic.co/t/token-input-in-logstash/282460 "2021-08-25T14:22:05Z")
We have an API from Genesys to integrate with Elasticsearch through logstash, but the authorization to that api is token system. Is there a way to fetch the token in Logstash. What would be the best approach to integrat… --- ## [Alert on changes](https://discuss.elastic.co/t/alert-on-changes/280790)
**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 1:56pm UTC](https://discuss.elastic.co/t/alert-on-changes/280790 "2021-08-25T13:56:35Z")
Hello, i have 1 index which is filled once a day with some values. I have to create an alert only if a value is added which was not present in the day before. how to archive this? any ideas? thanks --- ## [Search\_after query doesn't return correct results for pagination](https://discuss.elastic.co/t/search-after-query-doesnt-return-correct-results-for-pagination/281999)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 1:45pm UTC](https://discuss.elastic.co/t/search-after-query-doesnt-return-correct-results-for-pagination/281999 "2021-08-25T13:45:03Z")
I have a process that queries the watcher-history indices for a specified time, and the amount of results is over 10000 docs, which is the limit. So I tried to use the search\_after query, after adding a sort value, but t… --- ## [Transaction error rate threshold alert are not editable filed for kibana 7.14](https://discuss.elastic.co/t/transaction-error-rate-threshold-alert-are-not-editable-filed-for-kibana-7-14/281287)
**Author:** [@prashant.j.singh](https://discuss.elastic.co/u/prashant.j.singh)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 1:38pm UTC](https://discuss.elastic.co/t/transaction-error-rate-threshold-alert-are-not-editable-filed-for-kibana-7-14/281287 "2021-08-25T13:38:39Z")
I am using elasticserch : 7.14 and Kibana 7.14 I am not able edit alert detail in Transaction error rate threshold: these filed are not edit and showing fixed value. -- 30 % , 5 min and ALL. Environment , IS ABOVE 30… --- ## [Get all items](https://discuss.elastic.co/t/get-all-items/282386)
**Author:** [@Nastya.JavaScript\_Ko](https://discuss.elastic.co/u/Nastya.JavaScript_Ko)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 1:11pm UTC](https://discuss.elastic.co/t/get-all-items/282386 "2021-08-25T13:11:39Z")
Hey! First time I work with elastic. I have a request like this - but it does not return data after August 10th. { "query": { "bool": { "must\_not": \[ { "term": { … --- ## [Include Exim main log](https://discuss.elastic.co/t/include-exim-main-log/282243)
**Author:** [@BaseSL](https://discuss.elastic.co/u/BaseSL)\ **Replies:** 7\ **Last updated:** [August 25, 2021, 9:01am UTC](https://discuss.elastic.co/t/include-exim-main-log/282243 "2021-08-25T09:01:22Z")
Hello, how can I, in the current version, include the Exim log and search entries via Kibana ? About Filebeat I can transfer the log into Kibana, but there the assignment is not correct. So what do I have to set, that … --- ## [Fields, keywords and text](https://discuss.elastic.co/t/fields-keywords-and-text/282422)
**Author:** [@iLemming](https://discuss.elastic.co/u/iLemming)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 11:37am UTC](https://discuss.elastic.co/t/fields-keywords-and-text/282422 "2021-08-25T11:37:40Z")
I'm dealing with a headache where it seems I can't find the correct set of parameters for the analyzer. So here's the problem: I have an index where some fields are type of text and some fields are "type": "keyword". L… --- ## [Problem with if statement in GROK filter](https://discuss.elastic.co/t/problem-with-if-statement-in-grok-filter/282466)
**Author:** [@vp096](https://discuss.elastic.co/u/vp096)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 11:27am UTC](https://discuss.elastic.co/t/problem-with-if-statement-in-grok-filter/282466 "2021-08-25T11:27:13Z")
Hello, I send syslog data from a WiFi controller to ElasticSearch. This controller sends me different types of packets and I want to keep only the packets of this type: Aug 25 11:19:50 2021 MC72-WI-AS1-06-B authmgr\[364… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=843) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=845)