# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=896 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 897 --- ## [Aggregations to show all values with filter](https://discuss.elastic.co/t/aggregations-to-show-all-values-with-filter/277591)
**Author:** [@saiteja](https://discuss.elastic.co/u/saiteja)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 7:48pm UTC](https://discuss.elastic.co/t/aggregations-to-show-all-values-with-filter/277591 "2021-07-01T19:48:37Z")
Hello, I am trying to get all aggregations on specific field with filter same as exclude facet in solr If I run below query GET /measurement/\_search { "query": { "query\_string": { "query": "\*" } }, … --- ## [Elastic has a large number os rejections search](https://discuss.elastic.co/t/elastic-has-a-large-number-os-rejections-search/277097)
**Author:** [@guimap](https://discuss.elastic.co/u/guimap)\ **Replies:** 8\ **Last updated:** [July 1, 2021, 6:31pm UTC](https://discuss.elastic.co/t/elastic-has-a-large-number-os-rejections-search/277097 "2021-07-01T18:31:10Z")
Hi guys Recently my elasticsearch are returning 429 HTTP code for all \_search requests, after few search, i noticed that has a large number of rejected search in my threads node\_name name active rejected … --- ## [Creating Index for different Systems is problematic](https://discuss.elastic.co/t/creating-index-for-different-systems-is-problematic/277516)
**Author:** [@Saumyadipta\_Sarkar](https://discuss.elastic.co/u/Saumyadipta_Sarkar)\ **Replies:** 9\ **Last updated:** [July 1, 2021, 5:19pm UTC](https://discuss.elastic.co/t/creating-index-for-different-systems-is-problematic/277516 "2021-07-01T17:19:09Z")
When I create an Index in Kibana and Search specific logs using query its giving me correct response. But Then if I want to open the URL composed with queries from any other system then its asking me to create an Index a… --- ## [1 of 21 shards failed](https://discuss.elastic.co/t/1-of-21-shards-failed/276797)
**Author:** [@Vlad\_Piratov](https://discuss.elastic.co/u/Vlad_Piratov)\ **Replies:** 13\ **Last updated:** [July 1, 2021, 4:27pm UTC](https://discuss.elastic.co/t/1-of-21-shards-failed/276797 "2021-07-01T16:27:51Z")
Привет товарищи! Ни у кого не вываливалось подобное сообщение в Кибане (1 of 21 shards failed)? Оно возникает когда включаю визуализацию 3х таблиц с логами nginx с выборкой за +-3 часа (не только с ним проблема) и когда … --- ## [Authentications zero successes - SIEM](https://discuss.elastic.co/t/authentications-zero-successes-siem/276707)
**Author:** [@fabinho1314](https://discuss.elastic.co/u/fabinho1314)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 3:25pm UTC](https://discuss.elastic.co/t/authentications-zero-successes-siem/276707 "2021-07-01T15:25:02Z")
Hi there, I deployed with azure the solution "Elasticsearch (Self-Managed)" and im getting an odd error. When i go to the SIEM part \> Hosts \> Authentications, it only returns fails and zero successes as per the image b… --- ## [Dynamic custom fields with numeric and date range queries](https://discuss.elastic.co/t/dynamic-custom-fields-with-numeric-and-date-range-queries/277574)
**Author:** [@nbiondic](https://discuss.elastic.co/u/nbiondic)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 3:14pm UTC](https://discuss.elastic.co/t/dynamic-custom-fields-with-numeric-and-date-range-queries/277574 "2021-07-01T15:14:51Z")
We have a requirement to support custom search fields for our users. Each user should have an ability to create their own fields which can than be searched through by using our built-in filtering mechanism Our initial i… --- ## [How to create a user defined data table visualization](https://discuss.elastic.co/t/how-to-create-a-user-defined-data-table-visualization/277540)
**Author:** [@abhinav3](https://discuss.elastic.co/u/abhinav3)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 3:06pm UTC](https://discuss.elastic.co/t/how-to-create-a-user-defined-data-table-visualization/277540 "2021-07-01T15:06:26Z")
Hi I have been using Kibana dashboard to monitor my Raspberry Pi devices health. Each raspberry pi sends its health log to elasticsearch and from their I have dashboard which then have multiple visualization to monitor … --- ## [How to create a master list of devices and compare with the input logs to show in Kibana](https://discuss.elastic.co/t/how-to-create-a-master-list-of-devices-and-compare-with-the-input-logs-to-show-in-kibana/277569)
**Author:** [@abhinav3](https://discuss.elastic.co/u/abhinav3)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 2:59pm UTC](https://discuss.elastic.co/t/how-to-create-a-master-list-of-devices-and-compare-with-the-input-logs-to-show-in-kibana/277569 "2021-07-01T14:59:43Z")
Hi I have 20 Raspberry Pi devices installed. They all are uploading data to elasticsearch and I can see the online devices in kibana dashboard. But along with online, I also want to see the list of device name which are… --- ## [Индексы](https://discuss.elastic.co/t/topic/277567)
**Author:** [@\_LA](https://discuss.elastic.co/u/_LA)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 2:58pm UTC](https://discuss.elastic.co/t/topic/277567 "2021-07-01T14:58:26Z")
Подскажите пожалуйста, как и где в эластике посмотреть уже имеющуюся взаимосвязь индексов со всеми полями? --- ## [How to ignore URL when searching using ElasticSearch？](https://discuss.elastic.co/t/how-to-ignore-url-when-searching-using-elasticsearch/277443)
**Author:** [@bobfang1992](https://discuss.elastic.co/u/bobfang1992)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 2:27pm UTC](https://discuss.elastic.co/t/how-to-ignore-url-when-searching-using-elasticsearch/277443 "2021-07-01T14:27:54Z")
Hi，I have a set of documents which may contains some texts, but may have URLs inside them: Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nullam tincidunt metus a convallis imperdiet. Praesent interdum magna u… --- ## [Need a script field tag to calculate time difference](https://discuss.elastic.co/t/need-a-script-field-tag-to-calculate-time-difference/277438)
**Author:** [@vikram.sablok](https://discuss.elastic.co/u/vikram.sablok)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 2:27pm UTC](https://discuss.elastic.co/t/need-a-script-field-tag-to-calculate-time-difference/277438 "2021-07-01T14:27:05Z")
\-(minus) this will give me overall time taken for a request. I can use this field to show average time over a period of time. --- ## [Difference range query between numeric type and range type](https://discuss.elastic.co/t/difference-range-query-between-numeric-type-and-range-type/277527)
**Author:** [@kr\_junhodo](https://discuss.elastic.co/u/kr_junhodo)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 2:21pm UTC](https://discuss.elastic.co/t/difference-range-query-between-numeric-type-and-range-type/277527 "2021-07-01T14:21:17Z")
i Think this article says that range type is better way for range query. example 1) doc mapping : start\_date(date) and end\_date(date) query description : start\_date \< criteria && criteria \< end\_date via range query … --- ## [Importing dashboard and index pattern on ECK](https://discuss.elastic.co/t/importing-dashboard-and-index-pattern-on-eck/277341)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 2:02pm UTC](https://discuss.elastic.co/t/importing-dashboard-and-index-pattern-on-eck/277341 "2021-07-01T14:02:51Z")
Hey there, I am currently playing around on ECK on minikube on macOS and I was wondering how to load previously saved Saved Objects. The idea I had was to create a pod, mount the .ndjson and push it with curl to the ki… --- ## [Is it possible to connect Workplace Search with outlook mailboxes?](https://discuss.elastic.co/t/is-it-possible-to-connect-workplace-search-with-outlook-mailboxes/277520)
**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 2:02pm UTC](https://discuss.elastic.co/t/is-it-possible-to-connect-workplace-search-with-outlook-mailboxes/277520 "2021-07-01T14:02:27Z")
Hello, I'm going to start a project for which I have several data sources to index : Sharepoint Online, Salesforce, Custom Database, and Outlook mailboxes. Is there a connector for Outlook ? And is it possible to manage… --- ## [Programmatically rename (re-title) Kibana index patterns](https://discuss.elastic.co/t/programmatically-rename-re-title-kibana-index-patterns/277398)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 1:40pm UTC](https://discuss.elastic.co/t/programmatically-rename-re-title-kibana-index-patterns/277398 "2021-07-01T13:40:38Z")
I've developed a set of Kibana dashboards that use about a dozen index patterns with the following structure: product\_x-table\_name-\* where product\_x is a fixed string and table\_name has a dozen or so values. Example in… --- ## [Elasticsearch cannot up because /org/freedesktop/PolicyKit1/AuthenticationAgent Blocked](https://discuss.elastic.co/t/elasticsearch-cannot-up-because-org-freedesktop-policykit1-authenticationagent-blocked/277464)
**Author:** [@kemalkolcuoglu](https://discuss.elastic.co/u/kemalkolcuoglu)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 1:18pm UTC](https://discuss.elastic.co/t/elasticsearch-cannot-up-because-org-freedesktop-policykit1-authenticationagent-blocked/277464 "2021-07-01T13:18:11Z")
Hello Everyone, Cluster version: 7.7.0 OS Version: Centos 7.9 Java Version: Java 8 We have an issue with Elasticsearch when we try to up the service. journalctl -xe output: Jun 30 08:59:10 elk-master-2 systemd\[1\]: … --- ## [ES 7.11 Heap Out of memory error](https://discuss.elastic.co/t/es-7-11-heap-out-of-memory-error/277478)
**Author:** [@tmathew](https://discuss.elastic.co/u/tmathew)\ **Replies:** 4\ **Last updated:** [July 1, 2021, 1:01pm UTC](https://discuss.elastic.co/t/es-7-11-heap-out-of-memory-error/277478 "2021-07-01T13:01:04Z")
Hi ! We upgraded from 2.4 to 7.11, we are having below issues all around the ES. ES data nodes are going down alternatively, and it is due to Heap Out of memory issues. Today morning we did re-indexing around 100k/s a… --- ## [How to fetch Kibana APi logs in Dashboard using Powershell](https://discuss.elastic.co/t/how-to-fetch-kibana-api-logs-in-dashboard-using-powershell/277369)
**Author:** [@Sahithi\_V](https://discuss.elastic.co/u/Sahithi_V)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 12:34pm UTC](https://discuss.elastic.co/t/how-to-fetch-kibana-api-logs-in-dashboard-using-powershell/277369 "2021-07-01T12:34:43Z")
Recently part of automation we are trying to fetch kibana dashboard apis through any script lang ie Python /powershell . Tried to fetch with Rest APis, but through unable to connect. Server of Elastic search looks somet… --- ## [Cirrus Search setting with elastic search in mediawiki , not showing auto suggest when typing in search engine](https://discuss.elastic.co/t/cirrus-search-setting-with-elastic-search-in-mediawiki-not-showing-auto-suggest-when-typing-in-search-engine/277546)
**Author:** [@Pooja\_Sharma](https://discuss.elastic.co/u/Pooja_Sharma)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 11:38am UTC](https://discuss.elastic.co/t/cirrus-search-setting-with-elastic-search-in-mediawiki-not-showing-auto-suggest-when-typing-in-search-engine/277546 "2021-07-01T11:38:29Z")
Hi iam using, MediaWiki1.35.1 \[PHP\]7.4.15 \[Elasticsearch\] 6.5.4 Iam geeting result from my search engine.But ,not showing auto suggest when typing in search engine. In console iam able to see error {"error":{"code":… --- ## [Logstash problems with fields (Point to Point)](https://discuss.elastic.co/t/logstash-problems-with-fields-point-to-point/277196)
**Author:** [@Michael\_Dylan\_McAloo](https://discuss.elastic.co/u/Michael_Dylan_McAloo)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 11:23am UTC](https://discuss.elastic.co/t/logstash-problems-with-fields-point-to-point/277196 "2021-07-01T11:23:29Z")
I have a problem, I have two IPs one source and one destination, for the source IP Logstash automatically creates a field called "geoip.location" that contains the latitude and longitude of the specific IP, but for the d… --- ## [Hide time interval text](https://discuss.elastic.co/t/hide-time-interval-text/277431)
**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\ **Replies:** 8\ **Last updated:** [July 1, 2021, 11:19am UTC](https://discuss.elastic.co/t/hide-time-interval-text/277431 "2021-07-01T11:19:27Z")
I want to have a table showing the created at date for the data and would like to customize the text for the time interval. How do I hide the "per week", "per month" and so on? I want to only show the label --- ## [Query\_string with "fields" option behaves unexpectedly](https://discuss.elastic.co/t/query-string-with-fields-option-behaves-unexpectedly/277529)
**Author:** [@andreas123](https://discuss.elastic.co/u/andreas123)\ **Replies:** 1\ **Last updated:** [July 1, 2021, 10:30am UTC](https://discuss.elastic.co/t/query-string-with-fields-option-behaves-unexpectedly/277529 "2021-07-01T10:30:26Z")
Hey, i would like to understand why my search query behaves that unexpectedly. I have an index with 3 docs: { "\_index" : "test\_index", "\_type" : "\_doc", "\_id" : "2", "\_score" : 1.0, … --- ## [K8S topology for deploying ECK and ELK components](https://discuss.elastic.co/t/k8s-topology-for-deploying-eck-and-elk-components/277295)
**Author:** [@aksh\_18](https://discuss.elastic.co/u/aksh_18)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 9:32am UTC](https://discuss.elastic.co/t/k8s-topology-for-deploying-eck-and-elk-components/277295 "2021-07-01T09:32:37Z")
Hi Team, I want to install ECK on K8s cluster with 2 elasticsearch nodes and 1 deployement of kibana, apm-server and logstash. I have 3 node K8s cluster with all nodes having "Node" as a role. Do I need to define node t… --- ## [Why we need index template?](https://discuss.elastic.co/t/why-we-need-index-template/277523)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 6\ **Last updated:** [July 1, 2021, 9:26am UTC](https://discuss.elastic.co/t/why-we-need-index-template/277523 "2021-07-01T09:26:51Z")
Why we need to create index template when we can simply define the fields and there datatype in the logstash itself using below syntax: mutate {convert =\> \["field\_name", "data\_type"\] --- ## [Kibana advanced search split by](https://discuss.elastic.co/t/kibana-advanced-search-split-by/277473)
**Author:** [@Alex112345](https://discuss.elastic.co/u/Alex112345)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 7:42am UTC](https://discuss.elastic.co/t/kibana-advanced-search-split-by/277473 "2021-07-01T07:42:12Z")
Hi all, I'm quite new to Elastic & Kibana. I've used Splunk in the past and I was wondering if someone could point me in the right direction to do something as below Let's say we have an indexed field called users. The… --- ## [Config Error 403: "error":{"message":"blocked by: \[FORBIDDEN/8/index write (api)\];: \[cluster\_block\_exception\] blocked by: \[FORBIDDEN/8/index write (api)\];","name":"Error","stack":"\[cluster\_block\_exception\] blocked by: \[FORBIDDEN/8/index write (api)\]](https://discuss.elastic.co/t/config-error-403-error-message-blocked-by-forbidden-8-index-write-api-cluster-block-exception-blocked-by-forbidden-8-index-write-api-name-error-stack-cluster-block-exception-blocked-by-forbidden-8-index-write-api/277512)
**Author:** [@Ashish\_Manjrekar](https://discuss.elastic.co/u/Ashish_Manjrekar)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 7:31am UTC](https://discuss.elastic.co/t/config-error-403-error-message-blocked-by-forbidden-8-index-write-api-cluster-block-exception-blocked-by-forbidden-8-index-write-api-name-error-stack-cluster-block-exception-blocked-by-forbidden-8-index-write-api/277512 "2021-07-01T07:31:58Z")
Can someone help me understand the below issue. Also, if any resolution available. {"type":"error","@timestamp":"2021-04-25T01:41:28Z","tags":,"pid":3076,"level":"error","error":{"message":"blocked by: \[FORBIDDEN/8/inde… --- ## [Monitoring API query](https://discuss.elastic.co/t/monitoring-api-query/277200)
**Author:** [@priamai](https://discuss.elastic.co/u/priamai)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 5:30am UTC](https://discuss.elastic.co/t/monitoring-api-query/277200 "2021-07-01T05:30:31Z")
Hi there, I am with ELK 7.13.0 the basic free licence. Is there a way to monitor the queries that are performed via the Elastic API? Even to keep the last N most recent ones for example. I basically have different pyt… --- ## [Unable to install kibana-plugin](https://discuss.elastic.co/t/unable-to-install-kibana-plugin/277304)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 4\ **Last updated:** [July 1, 2021, 5:27am UTC](https://discuss.elastic.co/t/unable-to-install-kibana-plugin/277304 "2021-07-01T05:27:28Z")
Hello team, I am unable to install kibana plugin on my local. Can you please help me on this OS: Windows Kiban Version: 7.9 Below is the error: PS C:\\WINDOWS\\system32\> cd C:\\Users\\mangeshsuresh.jadhav\\Downloads\\EKL\\… --- ## [Logstash not listening to 5044](https://discuss.elastic.co/t/logstash-not-listening-to-5044/277432)
**Author:** [@azid](https://discuss.elastic.co/u/azid)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 4:21am UTC](https://discuss.elastic.co/t/logstash-not-listening-to-5044/277432 "2021-07-01T04:21:54Z")
Hi Im new to ELK, when I try to transfert data filebeat -\>logstash I got my logstash not listening to port 5044 any help would be appreciated Pipeline : input { beats { port =\> 5044 } } filter { gro… --- ## [Max number of shard a elastic node can hold](https://discuss.elastic.co/t/max-number-of-shard-a-elastic-node-can-hold/277434)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 5\ **Last updated:** [July 1, 2021, 4:17am UTC](https://discuss.elastic.co/t/max-number-of-shard-a-elastic-node-can-hold/277434 "2021-07-01T04:17:59Z")
Hi all What is the max number of shard that an elastic node can hold. and i dont mean per index or anything i mean the max number of shard for all index that a node can hold. [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=895) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=897)