# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=872

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 873

---

## [How to get two different timefilters for two date-fields](https://discuss.elastic.co/t/how-to-get-two-different-timefilters-for-two-date-fields/279603)

<div class="topic-metadata">

**Author:** [@basti1798](https://discuss.elastic.co/u/basti1798)\
**Replies:** 2\
**Last updated:** [July 27, 2021, 1:30pm UTC](https://discuss.elastic.co/t/how-to-get-two-different-timefilters-for-two-date-fields/279603 "2021-07-27T13:30:32Z")

</div>

Hi all, for my project I have to use all data in kibana, which has a timestamp of the last week, which is not the problem. But there is another date field called lastSeen which is independent to the timestamp and this …

---

## [Translog file doesn't exist with generation: 44 lastCommitted: -1 checkpoint: 45 - translog ids must be consecutive](https://discuss.elastic.co/t/translog-file-doesnt-exist-with-generation-44-lastcommitted-1-checkpoint-45-translog-ids-must-be-consecutive/279725)

<div class="topic-metadata">

**Author:** [@Krzysztof\_Bak](https://discuss.elastic.co/u/Krzysztof_Bak)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 12:26pm UTC](https://discuss.elastic.co/t/translog-file-doesnt-exist-with-generation-44-lastcommitted-1-checkpoint-45-translog-ids-must-be-consecutive/279725 "2021-07-27T12:26:56Z")

</div>

Hi community I have issue after dirty shutdown of Elasticsearch. I've tried to start but without success. I tried to find resolution on this community but other cases don't have comments. Maybe someone can help me to r…

---

## [Kibana Index Patterns - Refresh Types](https://discuss.elastic.co/t/kibana-index-patterns-refresh-types/279633)

<div class="topic-metadata">

**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\
**Replies:** 1\
**Last updated:** [July 27, 2021, 12:00pm UTC](https://discuss.elastic.co/t/kibana-index-patterns-refresh-types/279633 "2021-07-27T12:00:34Z")

</div>

Hi everyone, I'm using Kibana 7.13.1. I've established a Logstash instance on some web hosting servers that I connect to an elasticsearch data stream to store IIS (Internet Information Services) logs in a daily rolling …

---

## [Logstash can not connect Elasticsearch URL](https://discuss.elastic.co/t/logstash-can-not-connect-elasticsearch-url/279257)

<div class="topic-metadata">

**Author:** [@Aboli\_77](https://discuss.elastic.co/u/Aboli_77)\
**Replies:** 2\
**Last updated:** [July 27, 2021, 11:48am UTC](https://discuss.elastic.co/t/logstash-can-not-connect-elasticsearch-url/279257 "2021-07-27T11:48:09Z")

</div>

Hello Team, When I run the following command: ./logstash -f logstash-conf-name (from /opt/logstash/bin directory) I get the error as follows: \[2020-09-23T22:08:16,324\]\[INFO \]\[logstash.runner \] Starting Logst…

---

## [Fetching results beyond 10k - scroll/searchAfter](https://discuss.elastic.co/t/fetching-results-beyond-10k-scroll-searchafter/279702)

<div class="topic-metadata">

**Author:** [@mouli\_99](https://discuss.elastic.co/u/mouli_99)\
**Replies:** 4\
**Last updated:** [July 27, 2021, 10:02am UTC](https://discuss.elastic.co/t/fetching-results-beyond-10k-scroll-searchafter/279702 "2021-07-27T10:02:23Z")

</div>

We are on elastic 7.8, we have use case to fetch beyond 10k results are in interactive mode from users on pretty decent scale (say ~40 concurrent hits) We have stumbled upon scroll (everytime open a scroll, retrieve a…

---

## [Hide y-axis in heat map](https://discuss.elastic.co/t/hide-y-axis-in-heat-map/279593)

<div class="topic-metadata">

**Author:** [@D\_R](https://discuss.elastic.co/u/D_R)\
**Replies:** 1\
**Last updated:** [July 27, 2021, 9:41am UTC](https://discuss.elastic.co/t/hide-y-axis-in-heat-map/279593 "2021-07-27T09:41:03Z")

</div>

I have a heatmap with max aggregation and a sub aggregation to show index name as I am using index pattern as input data. I want to hide the y-axis. Is there anyway to hide y-axis aggregation in heatmap. I am using KIban…

---

## [Latency issues when using nested queries and inner hists](https://discuss.elastic.co/t/latency-issues-when-using-nested-queries-and-inner-hists/279711)

<div class="topic-metadata">

**Author:** [@wedul](https://discuss.elastic.co/u/wedul)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 9:34am UTC](https://discuss.elastic.co/t/latency-issues-when-using-nested-queries-and-inner-hists/279711 "2021-07-27T09:34:47Z")

</div>

I have two questions while using elasticsearch. using version : 7.1.1 index cluster: master node: 5, client node 6, data node 18, 4 shard, 10gb search rate : about 5~600 tps index mapping example: { "mappings": { …

---

## [Update elasticsearch.yml in elastic cloud through API](https://discuss.elastic.co/t/update-elasticsearch-yml-in-elastic-cloud-through-api/279598)

<div class="topic-metadata">

**Author:** [@idelix](https://discuss.elastic.co/u/idelix)\
**Replies:** 3\
**Last updated:** [July 27, 2021, 9:38am UTC](https://discuss.elastic.co/t/update-elasticsearch-yml-in-elastic-cloud-through-api/279598 "2021-07-27T09:38:55Z")

</div>

Hello, I deployed Elastic Cloud in Azure using terraform provider hovewer I cannot use terraform to update elasticsearch.yml (below) since OpenID configuration (Secure your clusters with OpenID Connect | Elasticsearch S…

---

## [Intermittent fault](https://discuss.elastic.co/t/intermittent-fault/279710)

<div class="topic-metadata">

**Author:** [@JesusDavid](https://discuss.elastic.co/u/JesusDavid)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 9:21am UTC](https://discuss.elastic.co/t/intermittent-fault/279710 "2021-07-27T09:21:59Z")

</div>

We have the following error intermittently. It occurs between the communication between a SpringBoot service and the elastic. Caused by: java.lang.RuntimeException: Request cannot be executed; I/O reactor status: STOPPE…

---

## [Filebeat Multiline Patterns not working with Cloudfoundry](https://discuss.elastic.co/t/filebeat-multiline-patterns-not-working-with-cloudfoundry/279705)

<div class="topic-metadata">

**Author:** [@checkmateasus](https://discuss.elastic.co/u/checkmateasus)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 8:47am UTC](https://discuss.elastic.co/t/filebeat-multiline-patterns-not-working-with-cloudfoundry/279705 "2021-07-27T08:47:16Z")

</div>

Running Elastic Stack 7.10.2 ( Filebeat, Elastic search). The input for logs in filebeat is cloudfoundry (6.5). The filebeat runs as a container in cloud foundry. We need to read multiline messages coming from cloudfou…

---

## [Terms aggregation with nested objects performs poorly](https://discuss.elastic.co/t/terms-aggregation-with-nested-objects-performs-poorly/279706)

<div class="topic-metadata">

**Author:** [@pa.pecherskij](https://discuss.elastic.co/u/pa.pecherskij)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 8:50am UTC](https://discuss.elastic.co/t/terms-aggregation-with-nested-objects-performs-poorly/279706 "2021-07-27T08:50:22Z")

</div>

Hello! For one of our scenarios we require to run terms aggregation with script on nested objects to extract ids only from certain nested objects (based on passed mention type and identity data). And from basic load tes…

---

## [Winlogbeat Dashboards mullered](https://discuss.elastic.co/t/winlogbeat-dashboards-mullered/279688)

<div class="topic-metadata">

**Author:** [@insurin](https://discuss.elastic.co/u/insurin)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 6:59am UTC](https://discuss.elastic.co/t/winlogbeat-dashboards-mullered/279688 "2021-07-27T06:59:59Z")

</div>

Hello all. After recovering my ELK server back to normal operation after I increased disk space and deleted one of my main winlogbeat indices which was 650gb, I can now see a new winlogbeat-7-12-1 growing in size. I have…

---

## [Manual delete of indices on elastic search not freeing up space](https://discuss.elastic.co/t/manual-delete-of-indices-on-elastic-search-not-freeing-up-space/279686)

<div class="topic-metadata">

**Author:** [@save4elastic](https://discuss.elastic.co/u/save4elastic)\
**Replies:** 2\
**Last updated:** [July 27, 2021, 5:47am UTC](https://discuss.elastic.co/t/manual-delete-of-indices-on-elastic-search-not-freeing-up-space/279686 "2021-07-27T05:47:37Z")

</div>

I have 2TB of indices. It just hit the flood stage watermark. I resolved this via CURL and now it allows manually deleting some indices. It removes them from Kibana, etc. I can delete it via curl or Kibana and it is ackn…

---

## [Split string by newline to Logstash](https://discuss.elastic.co/t/split-string-by-newline-to-logstash/279620)

<div class="topic-metadata">

**Author:** [@esther90](https://discuss.elastic.co/u/esther90)\
**Replies:** 2\
**Last updated:** [July 27, 2021, 1:23am UTC](https://discuss.elastic.co/t/split-string-by-newline-to-logstash/279620 "2021-07-27T01:23:27Z")

</div>

\[2021-07-26 12:09:19.877 +08\] \[pgAdmin 4 - DB:testdatabase\] \[postgres\]-\[testdatabase\]-\[::1(57223)\] \[\] \[00000\]LOG: disconnection: session time: 0:00:00.218 user=postgres database=testdatabase host=::1 port=57223 \[2021-07…

---

## [プロセス毎のCPU/メモリ使用率でのjavaプロセスの詳細化](https://discuss.elastic.co/t/cpu-java/279679)

<div class="topic-metadata">

**Author:** [@K.taka99](https://discuss.elastic.co/u/K.taka99)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 1:18am UTC](https://discuss.elastic.co/t/cpu-java/279679 "2021-07-27T01:18:05Z")

</div>

表題の通り、プロセス毎のCPU/メモリ使用率をグラフ化しているのですが、 javaプロセスに関しては「java」としか表示されなく悩んでいます。 JVM名で表示させる方法をご存じの方はいらっしゃいませんか？ 現状の設定は以下の通りです。 Index：metricbeatｰ\* Data Metrics Y-axis Aggregation：Max Field：system.process.cpu.total.pct B…

---

## [Index value to be used across different index patterns](https://discuss.elastic.co/t/index-value-to-be-used-across-different-index-patterns/279676)

<div class="topic-metadata">

**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\
**Replies:** 1\
**Last updated:** [July 27, 2021, 12:39am UTC](https://discuss.elastic.co/t/index-value-to-be-used-across-different-index-patterns/279676 "2021-07-27T00:39:39Z")

</div>

Hi, I understand that if you have a dashboard with multiple index patterns. If you use the search field and apply filter to any of the fields; if that field exists in other indices too it will apply that filter i.e. se…

---

## [Cannot update parameter analyzer from autocomplete to default](https://discuss.elastic.co/t/cannot-update-parameter-analyzer-from-autocomplete-to-default/277257)

<div class="topic-metadata">

**Author:** [@Luiz\_Firmino](https://discuss.elastic.co/u/Luiz_Firmino)\
**Replies:** 4\
**Last updated:** [July 26, 2021, 11:04pm UTC](https://discuss.elastic.co/t/cannot-update-parameter-analyzer-from-autocomplete-to-default/277257 "2021-07-26T23:04:21Z")

</div>

Hello all, I have no prior knowledge on ES and I'm trying to make an old code written for elasticsearch 6.5 to work on the 7.3 version. So far I got the code updated and running however I can't understand why during re-…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/279624)

<div class="topic-metadata">

**Author:** [@insurin](https://discuss.elastic.co/u/insurin)\
**Replies:** 4\
**Last updated:** [July 26, 2021, 11:03pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/279624 "2021-07-26T23:03:46Z")

</div>

Hi all. I have been running ELK for a few months now version 7.12.0. I tried to log on today with username elastic and my browser saved password and it would not let me. I restarted the server but I cannot get to the log…

---

## [What this query mean?](https://discuss.elastic.co/t/what-this-query-mean/279669)

<div class="topic-metadata">

**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\
**Replies:** 0\
**Last updated:** [July 26, 2021, 9:49pm UTC](https://discuss.elastic.co/t/what-this-query-mean/279669 "2021-07-26T21:49:20Z")

</div>

I've inherited a project with the following query: POST listings/\_search { "aggs": { "gridcells": { "aggs": { "latlons": { "aggs": { "latStats": { "stats": { …

---

## [Am I the only one who hates the Kibana 7 UX changes (date picker, filters)?](https://discuss.elastic.co/t/am-i-the-only-one-who-hates-the-kibana-7-ux-changes-date-picker-filters/279470)

<div class="topic-metadata">

**Author:** [@ThiefMaster](https://discuss.elastic.co/u/ThiefMaster)\
**Replies:** 1\
**Last updated:** [July 26, 2021, 9:35pm UTC](https://discuss.elastic.co/t/am-i-the-only-one-who-hates-the-kibana-7-ux-changes-date-picker-filters/279470 "2021-07-26T21:35:56Z")

</div>

Am I the only one who hates the Kibana 7 UX changes (date picker, filters)? Filters In Kibana 6 the next field automatically focused, which made entering filters really quick - I could even press ENTER to confirm the fi…

---

## [Sound alert in kibana](https://discuss.elastic.co/t/sound-alert-in-kibana/279589)

<div class="topic-metadata">

**Author:** [@ranjan.regmi](https://discuss.elastic.co/u/ranjan.regmi)\
**Replies:** 1\
**Last updated:** [July 26, 2021, 9:12pm UTC](https://discuss.elastic.co/t/sound-alert-in-kibana/279589 "2021-07-26T21:12:43Z")

</div>

Can we hvae any sound notification in kibana?

---

## [Search data multiple ip address](https://discuss.elastic.co/t/search-data-multiple-ip-address/279640)

<div class="topic-metadata">

**Author:** [@ratheeshp](https://discuss.elastic.co/u/ratheeshp)\
**Replies:** 1\
**Last updated:** [July 26, 2021, 8:48pm UTC](https://discuss.elastic.co/t/search-data-multiple-ip-address/279640 "2021-07-26T20:48:49Z")

</div>

Hi, I'm trying to get data based on my ip search 10.88.143/144/145/146/147/148.. is it possible search using regex like 10.88.14\[3-8\]. or what is the best of searching this.

---

## [How to replace objects in documents?](https://discuss.elastic.co/t/how-to-replace-objects-in-documents/279657)

<div class="topic-metadata">

**Author:** [@nahh](https://discuss.elastic.co/u/nahh)\
**Replies:** 4\
**Last updated:** [July 26, 2021, 7:15pm UTC](https://discuss.elastic.co/t/how-to-replace-objects-in-documents/279657 "2021-07-26T19:15:32Z")

</div>

This may be a bug, but if not it's undocumented behavior (see Object field type). I accidentally created some objects with properties I don't want them to have, and I need to remove them. The object is dynamic and looks …

---

## [Log Rotate Elastic Endpoint Windows](https://discuss.elastic.co/t/log-rotate-elastic-endpoint-windows/279635)

<div class="topic-metadata">

**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\
**Replies:** 1\
**Last updated:** [July 26, 2021, 6:50pm UTC](https://discuss.elastic.co/t/log-rotate-elastic-endpoint-windows/279635 "2021-07-26T18:50:23Z")

</div>

Hello there, I would like to know if there´s any way to control the logs rotate using fleet admin page?? Or even throught the fleet policies??? I´m getting too many unexpected logs on the C:\\Program Files\\Elastic\\Endpoi…

---

## [Migrate kibana 7.11.1 to 7.12.0](https://discuss.elastic.co/t/migrate-kibana-7-11-1-to-7-12-0/279484)

<div class="topic-metadata">

**Author:** [@es1thelita](https://discuss.elastic.co/u/es1thelita)\
**Replies:** 4\
**Last updated:** [July 26, 2021, 5:16pm UTC](https://discuss.elastic.co/t/migrate-kibana-7-11-1-to-7-12-0/279484 "2021-07-26T17:16:52Z")

</div>

I upgrade kibana from 7.11.1 to 7.12.0 the process has been finished the index has green status and I have access to kibana but I check .kibana\_task\_manager\_7.12.0\_001 index and looks like it still reindex health status…

---

## [Загрузка файлов с помощью Ingest attachment plugin](https://discuss.elastic.co/t/ingest-attachment-plugin/279297)

<div class="topic-metadata">

**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\
**Replies:** 9\
**Last updated:** [July 26, 2021, 5:11pm UTC](https://discuss.elastic.co/t/ingest-attachment-plugin/279297 "2021-07-26T17:11:53Z")

</div>

Доброго времени суток. Использую версию ES 7.13 на Centos 7 + Ingest attachment плагин. Вопрос такой: возможно ли используя данный плагин брать файлы с сетевой папки windows, вытягивать из них текст (файлы .doc, .do…

---

## [Why is first index creation each day slower?](https://discuss.elastic.co/t/why-is-first-index-creation-each-day-slower/279096)

<div class="topic-metadata">

**Author:** [@lbarker\_q](https://discuss.elastic.co/u/lbarker_q)\
**Replies:** 6\
**Last updated:** [July 26, 2021, 4:54pm UTC](https://discuss.elastic.co/t/why-is-first-index-creation-each-day-slower/279096 "2021-07-26T16:54:19Z")

</div>

Hello On various Elasticsearch deployments I am finding that the first time I create a document in a new index each day (or at least in a long period of time) the response time is much higher. In these cases the total r…

---

## [Matching yyyy-MM-dd HH:mm:ss.SSSZ in a logstash filter](https://discuss.elastic.co/t/matching-yyyy-mm-dd-hhss-sssz-in-a-logstash-filter/279643)

<div class="topic-metadata">

**Author:** [@mshwf](https://discuss.elastic.co/u/mshwf)\
**Replies:** 1\
**Last updated:** [July 26, 2021, 3:10pm UTC](https://discuss.elastic.co/t/matching-yyyy-mm-dd-hhss-sssz-in-a-logstash-filter/279643 "2021-07-26T15:10:26Z")

</div>

I'm trying to extract some fields from this log entry: 2021-07-26 16:45:59.4640|0|WARN|LoggerTestASP.Controllers.WeatherForecastController|NEW\_FROM\_NLOG: 67b9de16-47a1-4308-a163-263f5f06e841, Hola Pola, 11/26/2017 16:45…

---

## [Kafka Input - avro https schema\_registry\_url: unable to find valid certification path to requested target](https://discuss.elastic.co/t/kafka-input-avro-https-schema-registry-url-unable-to-find-valid-certification-path-to-requested-target/278438)

<div class="topic-metadata">

**Author:** [@Malec](https://discuss.elastic.co/u/Malec)\
**Replies:** 5\
**Last updated:** [July 26, 2021, 3:09pm UTC](https://discuss.elastic.co/t/kafka-input-avro-https-schema-registry-url-unable-to-find-valid-certification-path-to-requested-target/278438 "2021-07-26T15:09:48Z")

</div>

Hi friends, Logstash version is 7.11.1 I am having trouble consuming messages from a kafka that uses confluent avro. I can't seem to connect to an https schema registry. Here is my config : input { kafka { …

---

## [Observability Engineer Lab 4.3 - Step 5: Result image](https://discuss.elastic.co/t/observability-engineer-lab-4-3-step-5-result-image/279535)

<div class="topic-metadata">

**Author:** [@StashLogs](https://discuss.elastic.co/u/StashLogs)\
**Replies:** 1\
**Last updated:** [July 26, 2021, 1:57pm UTC](https://discuss.elastic.co/t/observability-engineer-lab-4-3-step-5-result-image/279535 "2021-07-26T13:57:08Z")

</div>

Hello, I completed lab Observability Engineer Lab 4.3 and see the results only for a generated 404. The lab guide shows an image for response\_code 200 which was filtered out in a previous lab. That's not possible unless…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=871)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=873)
