# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=914

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 915

---

## [Metric value 0 breaking change (since upgrade to version 7.13)](https://discuss.elastic.co/t/metric-value-0-breaking-change-since-upgrade-to-version-7-13/275956)

<div class="topic-metadata">

**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\
**Replies:** 5\
**Last updated:** [June 15, 2021, 10:09am UTC](https://discuss.elastic.co/t/metric-value-0-breaking-change-since-upgrade-to-version-7-13/275956 "2021-06-15T10:09:22Z")

</div>

Hello, since upgrading to version 7.13, Metric visualizations with value of 0 look like this: where before upgrade Metric visualizations showed 0. Is there any solution to this? we want to show the value 0 and not da…

---

## [Logstash is not creating ingest pipelines](https://discuss.elastic.co/t/logstash-is-not-creating-ingest-pipelines/275953)

<div class="topic-metadata">

**Author:** [@Mocem](https://discuss.elastic.co/u/Mocem)\
**Replies:** 2\
**Last updated:** [June 15, 2021, 9:35am UTC](https://discuss.elastic.co/t/logstash-is-not-creating-ingest-pipelines/275953 "2021-06-15T09:35:42Z")

</div>

Hi All, For the past few days I'm struggling with loading the pipelines from filebeat. Basically nothing is happening. It works directly to Elastic but not when logstash is in between. Once I create the ingest pipeline …

---

## [How to write query in Dev tools to find expired date of customers by comparing current date?](https://discuss.elastic.co/t/how-to-write-query-in-dev-tools-to-find-expired-date-of-customers-by-comparing-current-date/275663)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 4\
**Last updated:** [June 15, 2021, 9:32am UTC](https://discuss.elastic.co/t/how-to-write-query-in-dev-tools-to-find-expired-date-of-customers-by-comparing-current-date/275663 "2021-06-15T09:32:08Z")

</div>

I have a index that contains date field of customers that contains date of customers to be expired. Now my task is you to compare that date with current date(dynamically) changes as current date change gives result "expi…

---

## [Hide the Kibana Header (black/top)](https://discuss.elastic.co/t/hide-the-kibana-header-black-top/275939)

<div class="topic-metadata">

**Author:** [@Jayanth\_Palle](https://discuss.elastic.co/u/Jayanth_Palle)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 8:45am UTC](https://discuss.elastic.co/t/hide-the-kibana-header-black-top/275939 "2021-06-15T08:45:47Z")

</div>

I am new to ELK stack.The Kibana header(black/top) is good but it will be fine for us if there is an option to hide it (we aren't using it at all) so that we could use some more space.Is there a way to do so? Need to re…

---

## [Received an event that has a different character encoding than you configured. Log4j2 to Logstash](https://discuss.elastic.co/t/received-an-event-that-has-a-different-character-encoding-than-you-configured-log4j2-to-logstash/275952)

<div class="topic-metadata">

**Author:** [@Rashmika\_Gamage](https://discuss.elastic.co/u/Rashmika_Gamage)\
**Replies:** 0\
**Last updated:** [June 15, 2021, 7:08am UTC](https://discuss.elastic.co/t/received-an-event-that-has-a-different-character-encoding-than-you-configured-log4j2-to-logstash/275952 "2021-06-15T07:08:21Z")

</div>

I am trying to get spark logs to logstash with custom log4j2 properties. My log4j2 properties file #Define the log4j configuration for local application #log4j.rootLogger=INFO, server #We will use socket appender log4j…

---

## [Constant increase in RAM location for Elasticsearch](https://discuss.elastic.co/t/constant-increase-in-ram-location-for-elasticsearch/275128)

<div class="topic-metadata">

**Author:** [@kaerhick.networker](https://discuss.elastic.co/u/kaerhick.networker)\
**Replies:** 5\
**Last updated:** [June 15, 2021, 7:52am UTC](https://discuss.elastic.co/t/constant-increase-in-ram-location-for-elasticsearch/275128 "2021-06-15T07:52:26Z")

</div>

Initially the application stated running on 1Gig or Ram, next day we upgraded to 2Gig and then 4GB and still continues to consume more and more RAM over time. All it was indexing is just a 32.4 MB worth of data all toge…

---

## [Tryining to get float number in scripted filed](https://discuss.elastic.co/t/tryining-to-get-float-number-in-scripted-filed/275895)

<div class="topic-metadata">

**Author:** [@dontAskToAsk](https://discuss.elastic.co/u/dontAskToAsk)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 7:50am UTC](https://discuss.elastic.co/t/tryining-to-get-float-number-in-scripted-filed/275895 "2021-06-15T07:50:36Z")

</div>

hey I am tried to run this command in a scripted filed if (doc\['tunnels\_map.rx\_stats.counters.packets\_lost'\].size() != 0 && doc\['tunnels\_map.rx\_stats.counters.packets'\].size() != 0) {doc\['tunnels\_map.rx\_stats.counters.…

---

## [Cannot have two kibana port-forwarded to localhost:5601 and localhost:5602](https://discuss.elastic.co/t/cannot-have-two-kibana-port-forwarded-to-localhost-5601-and-localhost-5602/275915)

<div class="topic-metadata">

**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Replies:** 5\
**Last updated:** [June 15, 2021, 7:33am UTC](https://discuss.elastic.co/t/cannot-have-two-kibana-port-forwarded-to-localhost-5601-and-localhost-5602/275915 "2021-06-15T07:33:47Z")

</div>

Hi thanks for the wonderful framework! I have two unrelated elastic cluster. I port-forward the kibanas to 5601 and 5602. However, when I login 5602, the 5601 automatically log out, and vise versa. Is there any way to av…

---

## [Will the data be lost when the network is disconnected?](https://discuss.elastic.co/t/will-the-data-be-lost-when-the-network-is-disconnected/275946)

<div class="topic-metadata">

**Author:** [@aurantiacus](https://discuss.elastic.co/u/aurantiacus)\
**Replies:** 0\
**Last updated:** [June 15, 2021, 6:43am UTC](https://discuss.elastic.co/t/will-the-data-be-lost-when-the-network-is-disconnected/275946 "2021-06-15T06:43:16Z")

</div>

Hello, I am using beat version 6.8.0 and Logstash version 6.8.0 I am sending data from "beat"(auditbeat,filebeat,packetbeat,winlogbeat) to "logstash A" and from "logstash A" to another "logstash B". What happens to th…

---

## [Index architecture](https://discuss.elastic.co/t/index-architecture/275937)

<div class="topic-metadata">

**Author:** [@silvafa](https://discuss.elastic.co/u/silvafa)\
**Replies:** 0\
**Last updated:** [June 15, 2021, 5:39am UTC](https://discuss.elastic.co/t/index-architecture/275937 "2021-06-15T05:39:33Z")

</div>

Hello, So I'm trying to build an index, and I'm struggling with the approach to follow. I have an entity "person" with some related information. That person can have multiple name, like name variations, etc. Something …

---

## [Math operation on Kibana lucene query](https://discuss.elastic.co/t/math-operation-on-kibana-lucene-query/275930)

<div class="topic-metadata">

**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 5:02am UTC](https://discuss.elastic.co/t/math-operation-on-kibana-lucene-query/275930 "2021-06-15T05:02:14Z")

</div>

Hi, Just want to know can we perform math operation with lucene query in kibana. I have a variable and it's value is in GB. I want to convert it in KB in lucene query something like this. $mem = 4 Kibana lucene query…

---

## [How to get the timestamp difference](https://discuss.elastic.co/t/how-to-get-the-timestamp-difference/275746)

<div class="topic-metadata">

**Author:** [@Kiran\_manohar\_Chaval](https://discuss.elastic.co/u/Kiran_manohar_Chaval)\
**Replies:** 2\
**Last updated:** [June 15, 2021, 4:38am UTC](https://discuss.elastic.co/t/how-to-get-the-timestamp-difference/275746 "2021-06-15T04:38:27Z")

</div>

Hi All I am trying to get timestamp difference for the following kql filter Here log\_message and timestamp are fields Screenshot attached log\_message : "submit async job-514" or log\_message : "Complete async job-…

---

## [Guice in Elasticsearch](https://discuss.elastic.co/t/guice-in-elasticsearch/275926)

<div class="topic-metadata">

**Author:** [@Yashasvi\_Raj\_Pant](https://discuss.elastic.co/u/Yashasvi_Raj_Pant)\
**Replies:** 0\
**Last updated:** [June 15, 2021, 4:29am UTC](https://discuss.elastic.co/t/guice-in-elasticsearch/275926 "2021-06-15T04:29:19Z")

</div>

Is Elasticsearch still using Guice to wire dependencies, they used to used Guice in their old versions. Could anybody confirm it?

---

## [Logstash http output plugin customize building json array for batching](https://discuss.elastic.co/t/logstash-http-output-plugin-customize-building-json-array-for-batching/275535)

<div class="topic-metadata">

**Author:** [@RahulGS](https://discuss.elastic.co/u/RahulGS)\
**Replies:** 8\
**Last updated:** [June 15, 2021, 4:11am UTC](https://discuss.elastic.co/t/logstash-http-output-plugin-customize-building-json-array-for-batching/275535 "2021-06-15T04:11:17Z")

</div>

Hello , We have a pipeline running on logstash 6.6.2 with input(redis)-\>filter(ruby)-\>output(http) how do you batch http output using custom format ? we can't use format="json\_batch" because it will construct a simple…

---

## [Logstash plain-log file is getting following lines of errors and causing no logs appear in Kibana. Please help!](https://discuss.elastic.co/t/logstash-plain-log-file-is-getting-following-lines-of-errors-and-causing-no-logs-appear-in-kibana-please-help/275922)

<div class="topic-metadata">

**Author:** [@devashishsingh](https://discuss.elastic.co/u/devashishsingh)\
**Replies:** 0\
**Last updated:** [June 15, 2021, 4:07am UTC](https://discuss.elastic.co/t/logstash-plain-log-file-is-getting-following-lines-of-errors-and-causing-no-logs-appear-in-kibana-please-help/275922 "2021-06-15T04:07:38Z")

</div>

\[2021-06-15T11:52:59,022\]\[WARN \]\[io.netty.channel.AbstractChannelHandlerContext\]\[main\]\[841e111a9a3864d5c6aa677dd9865551e728aa14cc10a6e208f20d80a45001cd\] The exceptionCaught() event that was failed to submit was: java.ut…

---

## [Best proxy for Elasticsearch rate limiting](https://discuss.elastic.co/t/best-proxy-for-elasticsearch-rate-limiting/275664)

<div class="topic-metadata">

**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\
**Replies:** 2\
**Last updated:** [June 15, 2021, 3:54am UTC](https://discuss.elastic.co/t/best-proxy-for-elasticsearch-rate-limiting/275664 "2021-06-15T03:54:01Z")

</div>

Hi Is there rate limiting feature for elasticsearch basic license? Not the cloud version If not, what is the best way to perform rate limiting on users' query? My elasticsearch cluster have TLS authentication setup an…

---

## [Note able use bool followed by must followed by should](https://discuss.elastic.co/t/note-able-use-bool-followed-by-must-followed-by-should/275865)

<div class="topic-metadata">

**Author:** [@Anurag\_Mishra2](https://discuss.elastic.co/u/Anurag_Mishra2)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 3:36am UTC](https://discuss.elastic.co/t/note-able-use-bool-followed-by-must-followed-by-should/275865 "2021-06-15T03:36:19Z")

</div>

Hi I am trying to search but not getting desired result. I have condition like this detail '--\>' account '--\>' List '--\>' credential '--\>' active also detail '--\>' List '--\>' List '--\> 'credential '--\>' active if(de…

---

## [Sync data from MongoDB using logstash](https://discuss.elastic.co/t/sync-data-from-mongodb-using-logstash/275918)

<div class="topic-metadata">

**Author:** [@Bach\_Tran](https://discuss.elastic.co/u/Bach_Tran)\
**Replies:** 0\
**Last updated:** [June 15, 2021, 2:45am UTC](https://discuss.elastic.co/t/sync-data-from-mongodb-using-logstash/275918 "2021-06-15T02:45:24Z")

</div>

I'm using Logstash 6.8.0 to push my Message collection to Elasticsearch 6.8.0. This is my logstash file: input { jdbc { jdbc\_connection\_string =\> "jdbc:mongodb://127.0.0.1:27017/vnpost\_chatdb" jdbc\_driver\_libr…

---

## [KV Filter registered without jruby interruptible regular expressions enabled](https://discuss.elastic.co/t/kv-filter-registered-without-jruby-interruptible-regular-expressions-enabled/275916)

<div class="topic-metadata">

**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 2:29am UTC](https://discuss.elastic.co/t/kv-filter-registered-without-jruby-interruptible-regular-expressions-enabled/275916 "2021-06-15T02:29:25Z")

</div>

When logstash starts it logs this for each KV I have configured this logs: Jun 15 01:49:10 hostname logstash\[3879863\]: \[2021-06-15T01:49:10,651\]\[WARN \]\[logstash.filters.kv \] KV Filter registered without jruby inter…

---

## [Unable to access "share" button in Discovery menu](https://discuss.elastic.co/t/unable-to-access-share-button-in-discovery-menu/275892)

<div class="topic-metadata">

**Author:** [@aerodynamic](https://discuss.elastic.co/u/aerodynamic)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 1:45am UTC](https://discuss.elastic.co/t/unable-to-access-share-button-in-discovery-menu/275892 "2021-06-15T01:45:24Z")

</div>

Hello, While previously I have been able to access the "share" button in the discovery tab. I'm no longer able to. License is Platinum Version is 7.8.0 Broken in Chrome, works in Safari

---

## [Problems with Part 4 of the Crash Course](https://discuss.elastic.co/t/problems-with-part-4-of-the-crash-course/275888)

<div class="topic-metadata">

**Author:** [@alejohnny](https://discuss.elastic.co/u/alejohnny)\
**Replies:** 6\
**Last updated:** [June 15, 2021, 1:25am UTC](https://discuss.elastic.co/t/problems-with-part-4-of-the-crash-course/275888 "2021-06-15T01:25:15Z")

</div>

Hi, I'm new to Elasticsearch and I'm starting with it watching the Crash Course, and in the part 4, when I run the first command to setup data within Elasticsearch, I'm returing a error 400 and couldn't figure out whats …

---

## [How to export dashboard/visualization to another es clusters? (I have 3 isolated es clusters, and I want to sync the dashboards among them)](https://discuss.elastic.co/t/how-to-export-dashboard-visualization-to-another-es-clusters-i-have-3-isolated-es-clusters-and-i-want-to-sync-the-dashboards-among-them/275847)

<div class="topic-metadata">

**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Replies:** 2\
**Last updated:** [June 15, 2021, 12:55am UTC](https://discuss.elastic.co/t/how-to-export-dashboard-visualization-to-another-es-clusters-i-have-3-isolated-es-clusters-and-i-want-to-sync-the-dashboards-among-them/275847 "2021-06-15T00:55:45Z")

</div>

Hi thanks for the wonderful app! I have 3 isolated es clusters, and I want to sync the dashboards among them. Therefore, I wonder how to export dashboard/visualization to another es clusters?

---

## [Need help with splitting a log using logstash split filter](https://discuss.elastic.co/t/need-help-with-splitting-a-log-using-logstash-split-filter/275906)

<div class="topic-metadata">

**Author:** [@kajira](https://discuss.elastic.co/u/kajira)\
**Replies:** 4\
**Last updated:** [June 15, 2021, 12:49am UTC](https://discuss.elastic.co/t/need-help-with-splitting-a-log-using-logstash-split-filter/275906 "2021-06-15T00:49:50Z")

</div>

Hi, I receive json logs with the structure as shown below on logstash from a remote server. { "timestamp: "...". "message": { "records": \[ { result ... }, { result ... }, …

---

## [If query contains \*word\* then the document must contain \*word\*](https://discuss.elastic.co/t/if-query-contains-word-then-the-document-must-contain-word/275911)

<div class="topic-metadata">

**Author:** [@Gabriel\_Nicolae](https://discuss.elastic.co/u/Gabriel_Nicolae)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 12:46am UTC](https://discuss.elastic.co/t/if-query-contains-word-then-the-document-must-contain-word/275911 "2021-06-15T00:46:09Z")

</div>

Hi, I am trying to search on how to do the next thing: if my query contains a certain word, let's say "covid" then the documents returned must also contain "covid". Is there a way to do it directly in elasticsearch? The …

---

## [Dashboard Drilldowns do not work in Data Table (7.13.1)](https://discuss.elastic.co/t/dashboard-drilldowns-do-not-work-in-data-table-7-13-1/275878)

<div class="topic-metadata">

**Author:** [@Jeffrey\_Wilk](https://discuss.elastic.co/u/Jeffrey_Wilk)\
**Replies:** 6\
**Last updated:** [June 14, 2021, 8:15pm UTC](https://discuss.elastic.co/t/dashboard-drilldowns-do-not-work-in-data-table-7-13-1/275878 "2021-06-14T20:15:26Z")

</div>

At the help page here it says that Drilldowns are supported in data tables, and the option exists when editing a table panel from a dashboard. However, it does not work. I have tried on our previous version of 7.12.1 a…

---

## [Why does heap memory increase?](https://discuss.elastic.co/t/why-does-heap-memory-increase/275768)

<div class="topic-metadata">

**Author:** [@jaeho](https://discuss.elastic.co/u/jaeho)\
**Replies:** 1\
**Last updated:** [June 14, 2021, 9:49pm UTC](https://discuss.elastic.co/t/why-does-heap-memory-increase/275768 "2021-06-14T21:49:03Z")

</div>

Hello. I am curious about the increase in memory usage even though the query traffic is low and the number of documents is small, and I would like expert opinions on how to tune the GC. \[Servers (Nodes)\] Total: 4 Nod…

---

## [Log reg scoring with nested fields, use case for multiply score in should clauses?](https://discuss.elastic.co/t/log-reg-scoring-with-nested-fields-use-case-for-multiply-score-in-should-clauses/275028)

<div class="topic-metadata">

**Author:** [@nihaux](https://discuss.elastic.co/u/nihaux)\
**Replies:** 3\
**Last updated:** [June 14, 2021, 9:25pm UTC](https://discuss.elastic.co/t/log-reg-scoring-with-nested-fields-use-case-for-multiply-score-in-should-clauses/275028 "2021-06-14T21:25:40Z")

</div>

Hello everyone this might be a semi-long post. My use case is the following. We have a stack that makes use of a logistic regression on different features in python to rank documents. I am POCing a version on ES to be…

---

## [Not able to create index pattern in kibana (7.10.2)](https://discuss.elastic.co/t/not-able-to-create-index-pattern-in-kibana-7-10-2/275519)

<div class="topic-metadata">

**Author:** [@attacker](https://discuss.elastic.co/u/attacker)\
**Replies:** 3\
**Last updated:** [June 14, 2021, 9:16pm UTC](https://discuss.elastic.co/t/not-able-to-create-index-pattern-in-kibana-7-10-2/275519 "2021-06-14T21:16:29Z")

</div>

Hi, I have a standalone setup of ELK 7.10.2 on CentOS Server. I have ingested data into elasticsearch using logstash, but the problem here is after ingesting data into elasticsearch the kibana UI is not allowing me the …

---

## [How to send proxmox logs to ELK](https://discuss.elastic.co/t/how-to-send-proxmox-logs-to-elk/275153)

<div class="topic-metadata">

**Author:** [@jubin03](https://discuss.elastic.co/u/jubin03)\
**Replies:** 3\
**Last updated:** [June 14, 2021, 9:03pm UTC](https://discuss.elastic.co/t/how-to-send-proxmox-logs-to-elk/275153 "2021-06-14T21:03:10Z")

</div>

How can we configure proxmox logs to ELK. I have already using Grok for pfsense logs. Is there any way to configure log settings on proxmox

---

## [Unique count per fieldA by FieldB and sum this total per fieldC + graphing](https://discuss.elastic.co/t/unique-count-per-fielda-by-fieldb-and-sum-this-total-per-fieldc-graphing/275359)

<div class="topic-metadata">

**Author:** [@KS\_123](https://discuss.elastic.co/u/KS_123)\
**Replies:** 3\
**Last updated:** [June 14, 2021, 9:02pm UTC](https://discuss.elastic.co/t/unique-count-per-fielda-by-fieldb-and-sum-this-total-per-fieldc-graphing/275359 "2021-06-14T21:02:04Z")

</div>

I want to do a unique count per fieldA(serialNumber) by FieldB(CommandID) and sum this total per fieldC(farmID). Which I can do in Kibana, but then I want to be able to collapse the rows to just show the FieldC(farmID) …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=913)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=915)
