# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=890 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 891 --- ## [Kibana dashboard DSL aggregations problem](https://discuss.elastic.co/t/kibana-dashboard-dsl-aggregations-problem/278014)
**Author:** [@harryb](https://discuss.elastic.co/u/harryb)\ **Replies:** 3\ **Last updated:** [July 8, 2021, 7:35am UTC](https://discuss.elastic.co/t/kibana-dashboard-dsl-aggregations-problem/278014 "2021-07-08T07:35:35Z")
I am trying to filter an Elastic index to only return one record per doc\_id and which I want to base the visualization on. If I use this in a Kibana dashboard visualization filter I get an error: '\[size\] query malformed,… --- ## [Count impressions with Winlogbeat](https://discuss.elastic.co/t/count-impressions-with-winlogbeat/278146)
**Author:** [@rdrit](https://discuss.elastic.co/u/rdrit)\ **Replies:** 0\ **Last updated:** [July 8, 2021, 7:30am UTC](https://discuss.elastic.co/t/count-impressions-with-winlogbeat/278146 "2021-07-08T07:30:09Z")
Hello everyone, I am coming to you because I am facing a problem. I am using ELK and Winlogbeat, I have enabled print service logging on a server and I want to do a Dashboard to track impressions. After some research … --- ## [ES 6.5.4 - Error : monitoring execution failed org.elasticsearch](https://discuss.elastic.co/t/es-6-5-4-error-monitoring-execution-failed-org-elasticsearch/278076)
**Author:** [@giulian](https://discuss.elastic.co/u/giulian)\ **Replies:** 2\ **Last updated:** [July 8, 2021, 7:25am UTC](https://discuss.elastic.co/t/es-6-5-4-error-monitoring-execution-failed-org-elasticsearch/278076 "2021-07-08T07:25:27Z")
Hi in my new job i discover we use Elasticsearch cluser 6.5.4 and i am totaly newbie, i try to understand how it s work since many hours. since many day we encoutering many mistake i discover my 3 node have same error … --- ## [ターミナルを終了した後もEnterpriseSearchを起動させ続ける方法](https://discuss.elastic.co/t/enterprisesearch/278005)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 1\ **Last updated:** [July 8, 2021, 6:30am UTC](https://discuss.elastic.co/t/enterprisesearch/278005 "2021-07-08T06:30:49Z")
オンプレミスのCentOSにrpmパッケージのEnterpriseSearchをインストールしました。 公式の手順に沿ってターミナルから下記のコマンドでEnterpriseSearchを実行しました。 $ ENT\_SEARCH\_DEFAULT\_PASSWORD=\[REDACTED\] bin/enterprise-search これでEnterpriseSearchが起動し、動作を確認しましたが、ターミナルを占有し、ターミナルを閉じ… --- ## [Any sane way to filter/remove fields in an array such as \[0\], \[1\]?](https://discuss.elastic.co/t/any-sane-way-to-filter-remove-fields-in-an-array-such-as-0-1/278140)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 0\ **Last updated:** [July 8, 2021, 6:21am UTC](https://discuss.elastic.co/t/any-sane-way-to-filter-remove-fields-in-an-array-such-as-0-1/278140 "2021-07-08T06:21:44Z")
Hi, My data contains an array from which I only want to save the message fields. But I don't think you can do regexp on fields in prune, grok or mutate filters (I tried, it didn't work). The problem is that I do not kno… --- ## [Return Results With Diatrics](https://discuss.elastic.co/t/return-results-with-diatrics/278123)
**Author:** [@hbobbala](https://discuss.elastic.co/u/hbobbala)\ **Replies:** 1\ **Last updated:** [July 8, 2021, 6:18am UTC](https://discuss.elastic.co/t/return-results-with-diatrics/278123 "2021-07-08T06:18:05Z")
Hi All, I'm trying to return results for names with Diacritics . I want to be able to search using regular characters and receive all results, including names with diacritics (Example: want to search for Jose and return… --- ## [Xpack users migration](https://discuss.elastic.co/t/xpack-users-migration/278138)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 0\ **Last updated:** [July 8, 2021, 6:14am UTC](https://discuss.elastic.co/t/xpack-users-migration/278138 "2021-07-08T06:14:17Z")
Hi, we are currently migrating one of our clusters to new machines. We need to migrate the users and roles from xpack too. What would be the best option here? Create a snapshot and import it in the new cluster or reinde… --- ## [Is there a way to feed base64 encoded string to the ingest\_attachment plugin or fscrawler?](https://discuss.elastic.co/t/is-there-a-way-to-feed-base64-encoded-string-to-the-ingest-attachment-plugin-or-fscrawler/278016)
**Author:** [@dotel](https://discuss.elastic.co/u/dotel)\ **Replies:** 10\ **Last updated:** [July 8, 2021, 6:12am UTC](https://discuss.elastic.co/t/is-there-a-way-to-feed-base64-encoded-string-to-the-ingest-attachment-plugin-or-fscrawler/278016 "2021-07-08T06:12:34Z")
So I've been trying to come up with a poc for document content search. What I've found so far is, I can feed the documents to fscrawler and search for the content using something like GET bookstore/\_search { "query":… --- ## [Difference between simple search query and multi match](https://discuss.elastic.co/t/difference-between-simple-search-query-and-multi-match/278132)
**Author:** [@Gopal\_Chauhan](https://discuss.elastic.co/u/Gopal_Chauhan)\ **Replies:** 0\ **Last updated:** [July 8, 2021, 5:02am UTC](https://discuss.elastic.co/t/difference-between-simple-search-query-and-multi-match/278132 "2021-07-08T05:02:05Z")
Hi I am using two search query which is giving similar result. what is difference between these two query simple query string and multimatch? 1- simple\_query\_string GET index/\_search { "size": 50, "query": { "b… --- ## [Creating watcher for index rate to alert in case of excessive logging](https://discuss.elastic.co/t/creating-watcher-for-index-rate-to-alert-in-case-of-excessive-logging/278125)
**Author:** [@MarcelVarallo](https://discuss.elastic.co/u/MarcelVarallo)\ **Replies:** 0\ **Last updated:** [July 8, 2021, 2:50am UTC](https://discuss.elastic.co/t/creating-watcher-for-index-rate-to-alert-in-case-of-excessive-logging/278125 "2021-07-08T02:50:49Z")
How would you create a watcher to email alert you when the index rate for an index exceeds something stupid. Use Case: When everything is fine we don't log too much to this index but if one of our apps has a problem it… --- ## [Unknown time-zone ID: strict\_date\_hour\_minute\_second](https://discuss.elastic.co/t/unknown-time-zone-id-strict-date-hour-minute-second/277933)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 11:56pm UTC](https://discuss.elastic.co/t/unknown-time-zone-id-strict-date-hour-minute-second/277933 "2021-07-07T23:56:51Z")
I read the document and wrote a DSL query, but there was an error. What is a time zone ID? It's not mentioned in the document. quote doc date\_hour\_minute\_second or strict\_date\_hour\_minute\_second A formatter that com… --- ## [Why elasticsearch cannot show manually inserted data?](https://discuss.elastic.co/t/why-elasticsearch-cannot-show-manually-inserted-data/277946)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 11:54pm UTC](https://discuss.elastic.co/t/why-elasticsearch-cannot-show-manually-inserted-data/277946 "2021-07-07T23:54:44Z")
I mean, I copied a doc data and then inserted it back into elastic search. The data did not appear. I try to select the largest time range of query,but still no results. What changes do I need to make to successfull… --- ## [New documents are not getting added to an already existing index](https://discuss.elastic.co/t/new-documents-are-not-getting-added-to-an-already-existing-index/278026)
**Author:** [@Krishna\_Sathya\_A\_C](https://discuss.elastic.co/u/Krishna_Sathya_A_C)\ **Replies:** 1\ **Last updated:** [July 7, 2021, 11:37pm UTC](https://discuss.elastic.co/t/new-documents-are-not-getting-added-to-an-already-existing-index/278026 "2021-07-07T23:37:38Z")
Hi, I am new to the ELK stack workflow, currently I am doing a project that pulls live feed from twitter every time a user requests and I want to display the results using Kibana. In my project instead of using Logstash… --- ## [Kibana Search Question](https://discuss.elastic.co/t/kibana-search-question/277689)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 11:24pm UTC](https://discuss.elastic.co/t/kibana-search-question/277689 "2021-07-07T23:24:48Z")
Hi there! I have an index that has ID + Description and another index that has ID + Status. Would it be possible to report on the first index and subtract any document where the ID exist on the 2nd index and the Status … --- ## [Logstash insufficient memory for java runtime env](https://discuss.elastic.co/t/logstash-insufficient-memory-for-java-runtime-env/276705)
**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\ **Replies:** 5\ **Last updated:** [July 7, 2021, 9:23pm UTC](https://discuss.elastic.co/t/logstash-insufficient-memory-for-java-runtime-env/276705 "2021-07-07T21:23:10Z")
Hi ELK Users, I am wondering if anyone has come across this issue when running logstash PS C:\\Program Files\\ELK\\logstash-7.13.1\\bin\> .\\logstash.bat -f C:\\Program Files\\ELK\\logstash-7.13.1\\config\\logstash-test-std.conf … --- ## [Script Field - version change](https://discuss.elastic.co/t/script-field-version-change/278098)
**Author:** [@angelogabeira](https://discuss.elastic.co/u/angelogabeira)\ **Replies:** 0\ **Last updated:** [July 7, 2021, 5:06pm UTC](https://discuss.elastic.co/t/script-field-version-change/278098 "2021-07-07T17:06:25Z")
guys, I'm changing from version 6.5 to version 7.9 and I need to redo the fields scripts. They're not working the same way, I've done some research but I couldn't. this example is what i did in 6.5 and it's working, i … --- ## [Conditional Transfer of updated data between Clusters](https://discuss.elastic.co/t/conditional-transfer-of-updated-data-between-clusters/278105)
**Author:** [@Wondwosen\_Eshetu](https://discuss.elastic.co/u/Wondwosen_Eshetu)\ **Replies:** 0\ **Last updated:** [July 7, 2021, 6:20pm UTC](https://discuss.elastic.co/t/conditional-transfer-of-updated-data-between-clusters/278105 "2021-07-07T18:20:27Z")
Hello, I want to transfer updated data between two clusters on a daily basis (Periodically). The process fetches modified data from first cluster and update the second (if the document exists and its modified time stamp… --- ## [How to drop data in logstash if ES index is not available](https://discuss.elastic.co/t/how-to-drop-data-in-logstash-if-es-index-is-not-available/278071)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 1\ **Last updated:** [July 7, 2021, 5:35pm UTC](https://discuss.elastic.co/t/how-to-drop-data-in-logstash-if-es-index-is-not-available/278071 "2021-07-07T17:35:10Z")
Hi All, We do not want logstash to create indexes since we are creating indexes with custom settings / mappings. some times we are getting the data from beats to logstash but the es index is not available. if the index… --- ## [Fix x-axis in Kibana 7.13.2](https://discuss.elastic.co/t/fix-x-axis-in-kibana-7-13-2/277918)
**Author:** [@ANKITA\_SAHA](https://discuss.elastic.co/u/ANKITA_SAHA)\ **Replies:** 10\ **Last updated:** [July 7, 2021, 5:28pm UTC](https://discuss.elastic.co/t/fix-x-axis-in-kibana-7-13-2/277918 "2021-07-07T17:28:04Z")
Hi i m new to kibana! I want help in making the x-axis static. I have two columns "no.of errors" and "hours". I have no.of errors in y-axis and in x-axis is hours . When i try to filter my data my x-axis gets filtered … --- ## [Elasticsearch 7.13.3 and 6.8.17 Security Update](https://discuss.elastic.co/t/elasticsearch-7-13-3-and-6-8-17-security-update/278100)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [July 7, 2021, 5:23pm UTC](https://discuss.elastic.co/t/elasticsearch-7-13-3-and-6-8-17-security-update/278100 "2021-07-07T17:23:56Z")
Elasticsearch Denial of Service issue (ESA-2021-15) An uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submi… --- ## [Wait\_for not working as expected](https://discuss.elastic.co/t/wait-for-not-working-as-expected/278001)
**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 4:48pm UTC](https://discuss.elastic.co/t/wait-for-not-working-as-expected/278001 "2021-07-07T16:48:14Z")
Hello, I'm performing a test indexing documents with 'wait\_for' refresh policy using a bulk processor. This bulk processor flushes documents every 500ms. The index refresh interval is 60s for this example. When I perfo… --- ## [Translating Field Names in a Dashboard](https://discuss.elastic.co/t/translating-field-names-in-a-dashboard/278087)
**Author:** [@Thomas\_Carmichael](https://discuss.elastic.co/u/Thomas_Carmichael)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 4:33pm UTC](https://discuss.elastic.co/t/translating-field-names-in-a-dashboard/278087 "2021-07-07T16:33:50Z")
I'm trying to build a pie chart lens that displays percentages of sex from my data. The data comes across as M, F, and O, but I would like to translate these to "Male" "Female" and "Other" when making the dashboard. I … --- ## [Constant\_score in kibana](https://discuss.elastic.co/t/constant-score-in-kibana/277575)
**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\ **Replies:** 4\ **Last updated:** [July 7, 2021, 4:29pm UTC](https://discuss.elastic.co/t/constant-score-in-kibana/277575 "2021-07-07T16:29:33Z")
Hello, I'm looking at removing the relevancy score for some of my terms queries to speed them up. I understand how to do that as part of an elasticsearch query but how might I go about setting the constant\_score in a k… --- ## [Hard time setting up monitoring cluster using metricbeat](https://discuss.elastic.co/t/hard-time-setting-up-monitoring-cluster-using-metricbeat/278088)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 0\ **Last updated:** [July 7, 2021, 3:38pm UTC](https://discuss.elastic.co/t/hard-time-setting-up-monitoring-cluster-using-metricbeat/278088 "2021-07-07T15:38:39Z")
I have follow few document of elk. it making me more confuse what am I missing? this is my simple test that I am trying to run. elkprod01 single node cluster elkmonprod01 is single node cluster ( which I would like t… --- ## [Enable \_size in index template](https://discuss.elastic.co/t/enable-size-in-index-template/278055)
**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\ **Replies:** 7\ **Last updated:** [July 7, 2021, 3:25pm UTC](https://discuss.elastic.co/t/enable-size-in-index-template/278055 "2021-07-07T15:25:28Z")
Hi, I've installed mapper size plugin on all of our elastic nodes, I can see/use the size field, when I enable it on an index: PUT index-xxx/\_mapping { "\_size": { "enabled": true } } and create a scripted fiel… --- ## [Intermittent Problem with nssm and Kibana / Logstash](https://discuss.elastic.co/t/intermittent-problem-with-nssm-and-kibana-logstash/278086)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 0\ **Last updated:** [July 7, 2021, 3:12pm UTC](https://discuss.elastic.co/t/intermittent-problem-with-nssm-and-kibana-logstash/278086 "2021-07-07T15:12:42Z")
Good Morning, I'm having an intermittent issue with Logstash / Kibana services created using nssm and am wondering if anybody else has experienced something similar and if so were they able to resolve the issue. My iss… --- ## [Bar chart visualization with timestamp delta/difference as the y-axis](https://discuss.elastic.co/t/bar-chart-visualization-with-timestamp-delta-difference-as-the-y-axis/277736)
**Author:** [@girvandip](https://discuss.elastic.co/u/girvandip)\ **Replies:** 5\ **Last updated:** [July 7, 2021, 3:11pm UTC](https://discuss.elastic.co/t/bar-chart-visualization-with-timestamp-delta-difference-as-the-y-axis/277736 "2021-07-07T15:11:47Z")
Hi! I am trying to create a bar chart using the visualize section. Below is the example of the data in tabular format: | timestamp | Id | category | --------------------------------- | 08:49:10 | 1 | A … --- ## [ES queries became very slow after upgrading from 7.11 to 7.13.2](https://discuss.elastic.co/t/es-queries-became-very-slow-after-upgrading-from-7-11-to-7-13-2/277932)
**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\ **Replies:** 1\ **Last updated:** [July 7, 2021, 2:52pm UTC](https://discuss.elastic.co/t/es-queries-became-very-slow-after-upgrading-from-7-11-to-7-13-2/277932 "2021-07-07T14:52:50Z")
Hi, ES queries became very slow after upgrading from 7.11 to 7.13.2. what can I do ? what changes made in 7.12 and 7.13 that may affect the performance ? Thanks --- ## [Query containing special character is not working](https://discuss.elastic.co/t/query-containing-special-character-is-not-working/277080)
**Author:** [@ElektroKinetik](https://discuss.elastic.co/u/ElektroKinetik)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 2:35pm UTC](https://discuss.elastic.co/t/query-containing-special-character-is-not-working/277080 "2021-07-07T14:35:13Z")
This works! { "match\_phrase": { "fields.customer": { "query": “\\"MFG OPS AC DEV\\"" } } }, This doe's … --- ## [Completely scaling down an ECK-based cluster](https://discuss.elastic.co/t/completely-scaling-down-an-eck-based-cluster/278074)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 2:31pm UTC](https://discuss.elastic.co/t/completely-scaling-down-an-eck-based-cluster/278074 "2021-07-07T14:31:11Z")
I want to completely scale down (i.e zero out all nodes) of an ECK-based cluster. I have tried to set nodeSet.count to 0 but this fails with spec.nodeSets: Required value: Elasticsearch needs to have at least one maste… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=889) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=891)