# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=878

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 879

---

## [Kibana dashboard multiple panels and filtering](https://discuss.elastic.co/t/kibana-dashboard-multiple-panels-and-filtering/279116)

<div class="topic-metadata">

**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 10:43pm UTC](https://discuss.elastic.co/t/kibana-dashboard-multiple-panels-and-filtering/279116 "2021-07-20T22:43:44Z")

</div>

Hi, I have a dashboard containing multiple panels which use different indices. But when I use a filter on one of the panels. It is applied to other panels too which use different indices. Which means filter operation f…

---

## [Difference between using (in the Field Metric) Count and Unique Count](https://discuss.elastic.co/t/difference-between-using-in-the-field-metric-count-and-unique-count/278173)

<div class="topic-metadata">

**Author:** [@rosammb](https://discuss.elastic.co/u/rosammb)\
**Replies:** 3\
**Last updated:** [July 20, 2021, 7:55pm UTC](https://discuss.elastic.co/t/difference-between-using-in-the-field-metric-count-and-unique-count/278173 "2021-07-20T19:55:03Z")

</div>

Hi, I'm using 6.8.3 Elastic version. I'm having problems when I create visualizes and using the Field Metric. If I use Unique count the result is different than if I use count. My feeling is that Unique count is the co…

---

## [Elasticsearch: отказ работоспособности](https://discuss.elastic.co/t/elasticsearch/279181)

<div class="topic-metadata">

**Author:** [@Vladimir2](https://discuss.elastic.co/u/Vladimir2)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 7:41pm UTC](https://discuss.elastic.co/t/elasticsearch/279181 "2021-07-20T19:41:59Z")

</div>

При выполнении запросов к elasticsearch (v.2.4.6.) возрастает нагрузка на процессор, курсоры перестают возвращаться (запрос отдает ошибку), статус кластера меняется на YELLOW, в итоге эластик перестает отвечать. Как счит…

---

## [Kibana icon colorless](https://discuss.elastic.co/t/kibana-icon-colorless/279187)

<div class="topic-metadata">

**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 7:31pm UTC](https://discuss.elastic.co/t/kibana-icon-colorless/279187 "2021-07-20T19:31:11Z")

</div>

Hi, Updated from 7.10.2 to 7.13.3. Kibana favicon seems colorless. Any specific reason? Is this an indication to a problem? Thanks.

---

## [Logstash xml filter ruby cleanup code help](https://discuss.elastic.co/t/logstash-xml-filter-ruby-cleanup-code-help/279099)

<div class="topic-metadata">

**Author:** [@grants](https://discuss.elastic.co/u/grants)\
**Replies:** 3\
**Last updated:** [July 20, 2021, 5:16pm UTC](https://discuss.elastic.co/t/logstash-xml-filter-ruby-cleanup-code-help/279099 "2021-07-20T17:16:48Z")

</div>

I'm using the xml logstash filter to parse xml values into json, but I'm having issues indexing them into Elasticsearch due to an issue where a null string gets parsed into an empty object. Source String Snip: \<Actio…

---

## [Advice on Scaling writes](https://discuss.elastic.co/t/advice-on-scaling-writes/278518)

<div class="topic-metadata">

**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\
**Replies:** 22\
**Last updated:** [July 20, 2021, 3:29pm UTC](https://discuss.elastic.co/t/advice-on-scaling-writes/278518 "2021-07-20T15:29:13Z")

</div>

Hi, Our systems are generating CSV files containing all events that happened during the past hour. There are about 15.000 CSV files generated every hour, containing thousand of events each. A quick estimate would mean…

---

## [How to limit data Print When I use ES as input](https://discuss.elastic.co/t/how-to-limit-data-print-when-i-use-es-as-input/279014)

<div class="topic-metadata">

**Author:** [@London\_Kim](https://discuss.elastic.co/u/London_Kim)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 3:23pm UTC](https://discuss.elastic.co/t/how-to-limit-data-print-when-i-use-es-as-input/279014 "2021-07-20T15:23:39Z")

</div>

I am using ES as an input tool. I am trying to output data to stdout, but I want to see only about 5 data as a test. But until I stop logstash, logstash continues to load data. How can I control the data for as many cas…

---

## [Elastic Cloud Enterprise security update](https://discuss.elastic.co/t/elastic-cloud-enterprise-security-update/279180)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [July 20, 2021, 3:17pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-security-update/279180 "2021-07-20T15:17:20Z")

</div>

Elastic Cloud Enterprise security update (ESA-2021-17) Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters. While in the default setting the anonymous user has no perm…

---

## [Kibana Bar chart - Replacing alldocs name in x-axis](https://discuss.elastic.co/t/kibana-bar-chart-replacing-alldocs-name-in-x-axis/279076)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 3\
**Last updated:** [July 20, 2021, 3:07pm UTC](https://discuss.elastic.co/t/kibana-bar-chart-replacing-alldocs-name-in-x-axis/279076 "2021-07-20T15:07:31Z")

</div>

Hi all, I'm creating a bar chart with split series option instead of x-axis because i want to show all values with different colours. However, I'm unable to change "\_all All docs" name. I want it according to my name …

---

## [ELK SQL query](https://discuss.elastic.co/t/elk-sql-query/278934)

<div class="topic-metadata">

**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 2:17pm UTC](https://discuss.elastic.co/t/elk-sql-query/278934 "2021-07-20T14:17:12Z")

</div>

Hello Team, I want to Execute SQL query on my Index data , where i have 6 records of same transaction id in Index. In each record there is timestamp , so i need to calculate timestamp diff between 1st , 6th and 2dn ,3…

---

## [Observability Engineer Lab 4.2 - Unreadable Events](https://discuss.elastic.co/t/observability-engineer-lab-4-2-unreadable-events/279157)

<div class="topic-metadata">

**Author:** [@TonyY](https://discuss.elastic.co/u/TonyY)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 2:02pm UTC](https://discuss.elastic.co/t/observability-engineer-lab-4-2-unreadable-events/279157 "2021-07-20T14:02:59Z")

</div>

Hi, settings up the nginx input for lab 4.2 results in a large number of unreadable events like \[20/Jul/2021:11:50:04 +0000\] "\\xB5\\x96Wix\\xC3l\\xD0Aj\\x17WV\<\\x08\\x9B\\x10\\xAEi\\x099I\\x14o \\x90\\xD2\\xBE\\xDA\\xEDcC\\xA4\\x9Bt\\xD…

---

## [Edge N-gram at word level](https://discuss.elastic.co/t/edge-n-gram-at-word-level/279166)

<div class="topic-metadata">

**Author:** [@mmoreram](https://discuss.elastic.co/u/mmoreram)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 1:47pm UTC](https://discuss.elastic.co/t/edge-n-gram-at-word-level/279166 "2021-07-20T13:47:38Z")

</div>

In Elasticsearch, edge n-gram divides a word into progressive tokens, starting from the begining, and adding a new letter per each token. Is there a way to add the same logic at word level? "This is a sentence" \["T…

---

## [Direct link to doc & get index pattern ID of \*](https://discuss.elastic.co/t/direct-link-to-doc-get-index-pattern-id-of/278663)

<div class="topic-metadata">

**Author:** [@amit.haim](https://discuss.elastic.co/u/amit.haim)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 1:46pm UTC](https://discuss.elastic.co/t/direct-link-to-doc-get-index-pattern-id-of/278663 "2021-07-20T13:46:22Z")

</div>

Hi everyone, I didn't found any solution online yet: Is it possible to get a direct link to elastic doc by the \_id arg? Is it possible to get the index pattern ID of \*? thank you all

---

## [Filter with regex to select lines that contain a certain word type](https://discuss.elastic.co/t/filter-with-regex-to-select-lines-that-contain-a-certain-word-type/279162)

<div class="topic-metadata">

**Author:** [@boubou](https://discuss.elastic.co/u/boubou)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 1:27pm UTC](https://discuss.elastic.co/t/filter-with-regex-to-select-lines-that-contain-a-certain-word-type/279162 "2021-07-20T13:27:00Z")

</div>

Hello, I would like to know if it is possible to make a filter, in kibana, which contain the word "error". Indeed, I have in a log field (named "message") lines similar to these : message: ANS2832E Incremental snapsh…

---

## [Wildcard search only returns partial results](https://discuss.elastic.co/t/wildcard-search-only-returns-partial-results/279069)

<div class="topic-metadata">

**Author:** [@muns](https://discuss.elastic.co/u/muns)\
**Replies:** 4\
**Last updated:** [July 20, 2021, 12:54pm UTC](https://discuss.elastic.co/t/wildcard-search-only-returns-partial-results/279069 "2021-07-20T12:54:03Z")

</div>

Hello, i have the following NEST query and my issue is that the wildcard search is only performed on the last field, "title". It ignores the author and subject fields, even though it should be returning data because ther…

---

## [IO Reactor errors closing connection](https://discuss.elastic.co/t/io-reactor-errors-closing-connection/279148)

<div class="topic-metadata">

**Author:** [@Mariusz\_Pala](https://discuss.elastic.co/u/Mariusz_Pala)\
**Replies:** 11\
**Last updated:** [July 20, 2021, 12:18pm UTC](https://discuss.elastic.co/t/io-reactor-errors-closing-connection/279148 "2021-07-20T12:18:22Z")

</div>

Hi, I asked ES about the IOReactor connection issues(Request cannot be executed; I/O reactor status: STOPPED) and as per an answer in my ticket RestHighLevelClient disconnection issues · Issue #75364 · elastic/elasticse…

---

## [Time control panel in dashboard](https://discuss.elastic.co/t/time-control-panel-in-dashboard/278948)

<div class="topic-metadata">

**Author:** [@Jihed\_BACCOUCHE](https://discuss.elastic.co/u/Jihed_BACCOUCHE)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 12:02pm UTC](https://discuss.elastic.co/t/time-control-panel-in-dashboard/278948 "2021-07-20T12:02:14Z")

</div>

hiii, please I want to add a control panel in my dashboard according to a date field in my data which is of type timestamp i want an option that give me the Opportunity to select a date from a calendar o something saim…

---

## [Date Time parsing problems](https://discuss.elastic.co/t/date-time-parsing-problems/279088)

<div class="topic-metadata">

**Author:** [@cibernicola](https://discuss.elastic.co/u/cibernicola)\
**Replies:** 6\
**Last updated:** [July 20, 2021, 11:38am UTC](https://discuss.elastic.co/t/date-time-parsing-problems/279088 "2021-07-20T11:38:09Z")

</div>

Hello I have a bunch of dates to sort, this is the format I have: 2018-05-12 00:00pm GMT (always 00:00pm) 2021-04-01 1:17am GMT If I try to ingest with no template, elasticsearch detects them as a string, but if I map…

---

## [I want to Filter the Visualization only with one controller](https://discuss.elastic.co/t/i-want-to-filter-the-visualization-only-with-one-controller/278171)

<div class="topic-metadata">

**Author:** [@aswanth\_jabba](https://discuss.elastic.co/u/aswanth_jabba)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 11:35am UTC](https://discuss.elastic.co/t/i-want-to-filter-the-visualization-only-with-one-controller/278171 "2021-07-20T11:35:55Z")

</div>

I am using TSVB for Visualization. I want the visualization should be filtered only based of the Agile Release Train and ignore remaining Filters (Program Increment, Iteration). Ignore Global Filter wouldn't work be…

---

## [How do I change text size canvas kibana filter time](https://discuss.elastic.co/t/how-do-i-change-text-size-canvas-kibana-filter-time/278828)

<div class="topic-metadata">

**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 11:24am UTC](https://discuss.elastic.co/t/how-do-i-change-text-size-canvas-kibana-filter-time/278828 "2021-07-20T11:24:42Z")

</div>

How do I change text size canvas kibana filter time

---

## [Does donut chart available with ranking?](https://discuss.elastic.co/t/does-donut-chart-available-with-ranking/278608)

<div class="topic-metadata">

**Author:** [@paigekim](https://discuss.elastic.co/u/paigekim)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 11:12am UTC](https://discuss.elastic.co/t/does-donut-chart-available-with-ranking/278608 "2021-07-20T11:12:57Z")

</div>

Hello, I am currently drawing the top 50 revenue. I am just wondering whether I can add a ranking next to each title of legend so that it would be easier to recognize the ranking of each portion. Current legend shows it…

---

## [What happens with my message field if I use decode\_json\_fields processor?](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279036)

<div class="topic-metadata">

**Author:** [@testisnullus](https://discuss.elastic.co/u/testisnullus)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 11:07am UTC](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279036 "2021-07-20T11:07:26Z")

</div>

Hi all! I have the next message field: message: {"app":"rbac","args":\[\],"commandTag":null,"fields.time":353859,"file":"adapter.go","func":"Log","level":"info","msg":"Exec","pid":28700,"sql":";","time":"2021-07-20T07:59…

---

## [Visualize - How to visualize on a field using fuzzy logic](https://discuss.elastic.co/t/visualize-how-to-visualize-on-a-field-using-fuzzy-logic/279072)

<div class="topic-metadata">

**Author:** [@MWLonKso](https://discuss.elastic.co/u/MWLonKso)\
**Replies:** 5\
**Last updated:** [July 20, 2021, 11:06am UTC](https://discuss.elastic.co/t/visualize-how-to-visualize-on-a-field-using-fuzzy-logic/279072 "2021-07-20T11:06:57Z")

</div>

Hi All This might be a bit of a strange question and hopefully someone can just point me straight at some documentation. I want to visualize on a text field where I know that part of the message will contain a fixed str…

---

## [What happens with my message field if I use decode\_json\_fields processor?](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279139)

<div class="topic-metadata">

**Author:** [@testisnullus](https://discuss.elastic.co/u/testisnullus)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 11:02am UTC](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279139 "2021-07-20T11:02:51Z")

</div>

Greatings all! I have the next message field: message: {"app":"rbac","args":\[\],"commandTag":null,"fields.time":353859,"file":"adapter.go","func":"Log","level":"info","msg":"Exec","pid":28700,"sql":";","time":"2021-07-2…

---

## [What is the use of enterprise search client](https://discuss.elastic.co/t/what-is-the-use-of-enterprise-search-client/279143)

<div class="topic-metadata">

**Author:** [@anon33720113](https://discuss.elastic.co/u/anon33720113)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 10:22am UTC](https://discuss.elastic.co/t/what-is-the-use-of-enterprise-search-client/279143 "2021-07-20T10:22:18Z")

</div>

Hey, just a quick question : What is the actual difference between elastic enterprise search (Elastic Enterprise Search Documentation \[7.13\] | Elastic) and elastic enterprise search client (Enterprise Search Clients | El…

---

## [ES 2.4 GC time % unmanageable. Any tip?](https://discuss.elastic.co/t/es-2-4-gc-time-unmanageable-any-tip/279124)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 4\
**Last updated:** [July 20, 2021, 9:37am UTC](https://discuss.elastic.co/t/es-2-4-gc-time-unmanageable-any-tip/279124 "2021-07-20T09:37:04Z")

</div>

Hey there, I am trying to find the sweet spot for my application. I got these results: DATA nodes 8cpu-32gb ram with 16gb heap size and 8gb young heap size GC time % is generally around 5% (this is in case the limit) …

---

## [Import data into ES](https://discuss.elastic.co/t/import-data-into-es/279044)

<div class="topic-metadata">

**Author:** [@kfaf](https://discuss.elastic.co/u/kfaf)\
**Replies:** 3\
**Last updated:** [July 20, 2021, 9:29am UTC](https://discuss.elastic.co/t/import-data-into-es/279044 "2021-07-20T09:29:47Z")

</div>

Please i really need help. i want to import json file to my ES using logstash. but nothing goes well on my side. this is my logstash.conf: \< input { file { start\_position =\> "beginning" path =\> "C:\\Users\\Downloa…

---

## [How to split the field in Kibana?](https://discuss.elastic.co/t/how-to-split-the-field-in-kibana/279048)

<div class="topic-metadata">

**Author:** [@testisnullus](https://discuss.elastic.co/u/testisnullus)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 8:22am UTC](https://discuss.elastic.co/t/how-to-split-the-field-in-kibana/279048 "2021-07-20T08:22:57Z")

</div>

Hi all! I have the message field in Kibana like this: I want to convert this field in something like: message.app: rbac message.args: \[\] message.commandTag: null message.fields.time: 330709 etc Kibana version: 7.7…

---

## [Error in adding yaml file for destinantion path in translate filter](https://discuss.elastic.co/t/error-in-adding-yaml-file-for-destinantion-path-in-translate-filter/278890)

<div class="topic-metadata">

**Author:** [@Sarthak\_Mishra](https://discuss.elastic.co/u/Sarthak_Mishra)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 8:14am UTC](https://discuss.elastic.co/t/error-in-adding-yaml-file-for-destinantion-path-in-translate-filter/278890 "2021-07-20T08:14:49Z")

</div>

Hello community, I am trying to use translate filter where I add a yaml file with list of ips. When the ips in the csv don't match with IP in yaml file a new field is created "Added\_asset" with value as new. Please help…

---

## [What happens with my message field if I use decode\_json\_fields processor?](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279061)

<div class="topic-metadata">

**Author:** [@testisnullus](https://discuss.elastic.co/u/testisnullus)\
**Replies:** 0\
**Last updated:** [July 19, 2021, 12:48pm UTC](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279061 "2021-07-19T12:48:01Z")

</div>

Greatings all! I have the next message field: message: {"app":"rbac","args":\[\],"commandTag":null,"fields.time":353859,"file":"adapter.go","func":"Log","level":"info","msg":"Exec","pid":28700,"sql":";","time":"2021-07-2…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=877)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=879)
