# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=920 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 921 --- ## [How to create MTTR graph in Kibana dashboard](https://discuss.elastic.co/t/how-to-create-mttr-graph-in-kibana-dashboard/275454)
**Author:** [@chauhann2](https://discuss.elastic.co/u/chauhann2)\ **Replies:** 1\ **Last updated:** [June 9, 2021, 2:49pm UTC](https://discuss.elastic.co/t/how-to-create-mttr-graph-in-kibana-dashboard/275454 "2021-06-09T14:49:04Z")
I need help on below for Kibana dashboard MTTR based on ticket created and resolve in kibana dashboard. SLA failure based on ticket due date and resolve date Kibana version is 5.6.2. --- ## [Problem with German charater ß](https://discuss.elastic.co/t/problem-with-german-charater-ss/275450)
**Author:** [@Stefan\_F1](https://discuss.elastic.co/u/Stefan_F1)\ **Replies:** 0\ **Last updated:** [June 9, 2021, 2:08pm UTC](https://discuss.elastic.co/t/problem-with-german-charater-ss/275450 "2021-06-09T14:08:35Z")
Hi, I added a document to my index with the name abcß. Then I tried to read the data with a query over postman: {"query":"SELECT \*, id FROM sapalink\_fi WHERE name = 'abcß' and (repository='rfHN5c3RlbXwxfFNGfC8=') AND (… --- ## [Error while sending oracle data from logstash - elastic](https://discuss.elastic.co/t/error-while-sending-oracle-data-from-logstash-elastic/275447)
**Author:** [@Rahul\_Choubey](https://discuss.elastic.co/u/Rahul_Choubey)\ **Replies:** 0\ **Last updated:** [June 9, 2021, 1:51pm UTC](https://discuss.elastic.co/t/error-while-sending-oracle-data-from-logstash-elastic/275447 "2021-06-09T13:51:07Z")
I am facing below issue while streaming message from logstash to kiabana: \[2021-06-09T10:15:01,047\]\[INFO \]\[logstash.inputs.jdbc\]\[main\] (0.067667s) SELECT \* FROM GV$ACTIVE\_SESSION\_HISTORY WHERE SAMPLE\_TIME \> TIMESTAMP '2… --- ## [How to set default value while using env in elasticsearch.yml config file?](https://discuss.elastic.co/t/how-to-set-default-value-while-using-env-in-elasticsearch-yml-config-file/275440)
**Author:** [@kamolhasan](https://discuss.elastic.co/u/kamolhasan)\ **Replies:** 0\ **Last updated:** [June 9, 2021, 1:12pm UTC](https://discuss.elastic.co/t/how-to-set-default-value-while-using-env-in-elasticsearch-yml-config-file/275440 "2021-06-09T13:12:31Z")
I'm using environment variable in config file (ie. elasticsearch.yml) to configure node roles. For example: elasticsearch.yml: node.roles: '${NODE\_ROLES}' When, I set NODE\_ROLES="master", NODE\_ROLES="ml, remote\_clus… --- ## [Number of documents in Dev tools is different from number of document in Discover](https://discuss.elastic.co/t/number-of-documents-in-dev-tools-is-different-from-number-of-document-in-discover/274917)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 8\ **Last updated:** [June 9, 2021, 12:31pm UTC](https://discuss.elastic.co/t/number-of-documents-in-dev-tools-is-different-from-number-of-document-in-discover/274917 "2021-06-09T12:31:09Z")
I am using ELK 7.9.3 and I have an index which contain more then 2M documents, I used reindex API to have a sample using the following command: POST /\_reindex?wait\_for\_completion=false { "max\_docs": 1000, "source":… --- ## [Is there are max number of operators in a query?](https://discuss.elastic.co/t/is-there-are-max-number-of-operators-in-a-query/275291)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 1\ **Last updated:** [June 9, 2021, 12:27pm UTC](https://discuss.elastic.co/t/is-there-are-max-number-of-operators-in-a-query/275291 "2021-06-09T12:27:53Z")
Dear all =) Ideally would I like to make a search query that contains approx 100 OR operators and 1 AND NOT like so (logLevel:error OR logLevel:fatal) AND NOT (searchString1 OR searchString2 OR searchString3 OR ... O… --- ## [Icon in Kibana](https://discuss.elastic.co/t/icon-in-kibana/275306)
**Author:** [@mostpha456](https://discuss.elastic.co/u/mostpha456)\ **Replies:** 4\ **Last updated:** [June 9, 2021, 12:23pm UTC](https://discuss.elastic.co/t/icon-in-kibana/275306 "2021-06-09T12:23:08Z")
Hello, I want to know if it is possible to create a visualisation in kibana with a custom icon. For exemple, i have a field X and i want to put an icon depending on the value of the field in data table. Is that possib… --- ## [Elastic user password not working](https://discuss.elastic.co/t/elastic-user-password-not-working/275342)
**Author:** [@redamberfish](https://discuss.elastic.co/u/redamberfish)\ **Replies:** 5\ **Last updated:** [June 9, 2021, 12:07pm UTC](https://discuss.elastic.co/t/elastic-user-password-not-working/275342 "2021-06-09T12:07:23Z")
Hello, Similar to Sudo password for elastic user, I am trying to complete the lab for Observability Fundamentals, but I need to use "sudo" to download and install packages. It keeps telling me the password is incorrect,… --- ## [How to index custom json with C# object using NEST](https://discuss.elastic.co/t/how-to-index-custom-json-with-c-object-using-nest/275431)
**Author:** [@Lilan\_Silva](https://discuss.elastic.co/u/Lilan_Silva)\ **Replies:** 0\ **Last updated:** [June 9, 2021, 11:56am UTC](https://discuss.elastic.co/t/how-to-index-custom-json-with-c-object-using-nest/275431 "2021-06-09T11:56:55Z")
I am new to elastic search and we need to migrate from mongodb to elastic. we used public class Book { \[BsonId\] public string Id { get; set; } public string ApplicationId { get; set; } … --- ## [Get value from ctx.payload.results](https://discuss.elastic.co/t/get-value-from-ctx-payload-results/275423)
**Author:** [@A\_Mightiev](https://discuss.elastic.co/u/A_Mightiev)\ **Replies:** 1\ **Last updated:** [June 9, 2021, 11:32am UTC](https://discuss.elastic.co/t/get-value-from-ctx-payload-results/275423 "2021-06-09T11:32:25Z")
I'm trying to extract the results from the payload to display in a message for a watcher The value is in "payload": { "results": \[ { "value": 1644, "key": "foo" … --- ## [Dashboard Panel not show data when change indices](https://discuss.elastic.co/t/dashboard-panel-not-show-data-when-change-indices/275393)
**Author:** [@cuongnp](https://discuss.elastic.co/u/cuongnp)\ **Replies:** 6\ **Last updated:** [June 9, 2021, 11:21am UTC](https://discuss.elastic.co/t/dashboard-panel-not-show-data-when-change-indices/275393 "2021-06-09T11:21:02Z")
Hi community, My dashboard panel show blank page when I delete old indice and create new one. I'm also not able to edit panels. The new indice is still received document and I can create new panel with visualization. B… --- ## [Multi field search criteria results to include all input or either words](https://discuss.elastic.co/t/multi-field-search-criteria-results-to-include-all-input-or-either-words/275408)
**Author:** [@Mithoon](https://discuss.elastic.co/u/Mithoon)\ **Replies:** 0\ **Last updated:** [June 9, 2021, 8:58am UTC](https://discuss.elastic.co/t/multi-field-search-criteria-results-to-include-all-input-or-either-words/275408 "2021-06-09T08:58:48Z")
Currently using Elastic Search for inventory search feature implementation and trying to build query logic. Search requirements: User shall be able to search for words in ProductName, BrandName and description fields … --- ## [Metric count mismatch in production setup 7.9.0](https://discuss.elastic.co/t/metric-count-mismatch-in-production-setup-7-9-0/275390)
**Author:** [@abhishek30](https://discuss.elastic.co/u/abhishek30)\ **Replies:** 4\ **Last updated:** [June 9, 2021, 9:04am UTC](https://discuss.elastic.co/t/metric-count-mismatch-in-production-setup-7-9-0/275390 "2021-06-09T09:04:28Z")
Hi, I have a standalone setup of ELK stack version 7.12.1. in windows machine. I have ingested examination data from csv file to kibana using logstash. Using this data I had to show total students count. I did this usin… --- ## [Automatic data ingestion in logstash](https://discuss.elastic.co/t/automatic-data-ingestion-in-logstash/275071)
**Author:** [@Kanishk\_Madan](https://discuss.elastic.co/u/Kanishk_Madan)\ **Replies:** 5\ **Last updated:** [June 9, 2021, 8:44am UTC](https://discuss.elastic.co/t/automatic-data-ingestion-in-logstash/275071 "2021-06-09T08:44:00Z")
Hello community, This thread is regarding the automate of ingestion of data in logstash. I have created a python script in which I have written the command for the logstash data ingestion. The python script is also auto… --- ## [Hi, I want to ask a thing in Elasticsearch. If I want to ignore a document based on a certain field value, how can I do that in the flatmap function of javascript](https://discuss.elastic.co/t/hi-i-want-to-ask-a-thing-in-elasticsearch-if-i-want-to-ignore-a-document-based-on-a-certain-field-value-how-can-i-do-that-in-the-flatmap-function-of-javascript/275401)
**Author:** [@appydam](https://discuss.elastic.co/u/appydam)\ **Replies:** 0\ **Last updated:** [June 9, 2021, 8:43am UTC](https://discuss.elastic.co/t/hi-i-want-to-ask-a-thing-in-elasticsearch-if-i-want-to-ignore-a-document-based-on-a-certain-field-value-how-can-i-do-that-in-the-flatmap-function-of-javascript/275401 "2021-06-09T08:43:47Z")
Hi, I want to ask a thing in Elasticsearch. If I want to ignore a document based on a certain field value, how can I do that in the flatmap function of javascript const body = datajson.flatMap((doc: Resource) =\> \[ … --- ## [Logstash not able to connect to Elasticsearch deployed through Kubernetes pod](https://discuss.elastic.co/t/logstash-not-able-to-connect-to-elasticsearch-deployed-through-kubernetes-pod/275400)
**Author:** [@Shubham\_Dhote](https://discuss.elastic.co/u/Shubham_Dhote)\ **Replies:** 0\ **Last updated:** [June 9, 2021, 8:34am UTC](https://discuss.elastic.co/t/logstash-not-able-to-connect-to-elasticsearch-deployed-through-kubernetes-pod/275400 "2021-06-09T08:34:59Z")
Hi, I have deployed Logstash and elasticsearch pod on EKS cluster. When I am checking the logs for logstash pod it is showing unreachable elasticserach server. Though my elasticsearch is up and running. Please find below… --- ## [How searching over multiple indices using alias work internally, is it faster that having one index having all the documents](https://discuss.elastic.co/t/how-searching-over-multiple-indices-using-alias-work-internally-is-it-faster-that-having-one-index-having-all-the-documents/275372)
**Author:** [@code\_merchant](https://discuss.elastic.co/u/code_merchant)\ **Replies:** 1\ **Last updated:** [June 9, 2021, 7:56am UTC](https://discuss.elastic.co/t/how-searching-over-multiple-indices-using-alias-work-internally-is-it-faster-that-having-one-index-having-all-the-documents/275372 "2021-06-09T07:56:37Z")
I have 2 clusters. Cluster A: have 1 big index storing 500 GB of data Cluster B: have monthly indices of 30GB for 15 months There is a search query which search over a single index in cluster A and over read-alias \[im… --- ## [Embed custom plugin in another custom plugin](https://discuss.elastic.co/t/embed-custom-plugin-in-another-custom-plugin/275165)
**Author:** [@jackson123](https://discuss.elastic.co/u/jackson123)\ **Replies:** 4\ **Last updated:** [June 9, 2021, 7:47am UTC](https://discuss.elastic.co/t/embed-custom-plugin-in-another-custom-plugin/275165 "2021-06-09T07:47:15Z")
Hi, I need help in a use case. I am developing two custom plugins (say P1 & P2) . And I want to embed P2 into P1. (May be multiple plugins also). Can you please help me how to do this? --- ## [Problems in Elasticsearch combining two types of logs using two pipelines (Logstash)](https://discuss.elastic.co/t/problems-in-elasticsearch-combining-two-types-of-logs-using-two-pipelines-logstash/273900)
**Author:** [@francesco96](https://discuss.elastic.co/u/francesco96)\ **Replies:** 1\ **Last updated:** [June 9, 2021, 6:51am UTC](https://discuss.elastic.co/t/problems-in-elasticsearch-combining-two-types-of-logs-using-two-pipelines-logstash/273900 "2021-06-09T06:51:43Z")
Hi everyone, I need some help. I have configured my ES stack inside a docker. I need to show two types of logs (syslog, log), in an Elastic index. I have created two configuration files logstash.cong logstash-syslog.c… --- ## [Logstash elasticsearch output, expand variables in data stream parameters](https://discuss.elastic.co/t/logstash-elasticsearch-output-expand-variables-in-data-stream-parameters/275276)
**Author:** [@ebourlon](https://discuss.elastic.co/u/ebourlon)\ **Replies:** 2\ **Last updated:** [June 9, 2021, 6:13am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-expand-variables-in-data-stream-parameters/275276 "2021-06-09T06:13:01Z")
Hello, I am using logstash 7.13.1 that has support for datastreams in the elasticsearch output. As far as I looked at it is not possible to specify a variable in one of the datastream related parameter like below: e… --- ## [Top 10 in bar graph in kibana](https://discuss.elastic.co/t/top-10-in-bar-graph-in-kibana/275301)
**Author:** [@abhishek30](https://discuss.elastic.co/u/abhishek30)\ **Replies:** 2\ **Last updated:** [June 9, 2021, 6:11am UTC](https://discuss.elastic.co/t/top-10-in-bar-graph-in-kibana/275301 "2021-06-09T06:11:10Z")
Hi, I have a small setup of elk stack of 7.12.1. I have ingested some data related to candidate examination. I wanted to show top 10 questions for which candidate answered correct. This is shown as such in tag cloud. … --- ## [How to give cluster IP in fluentd/kibana for 3 node Elasticsearch cluster](https://discuss.elastic.co/t/how-to-give-cluster-ip-in-fluentd-kibana-for-3-node-elasticsearch-cluster/275289)
**Author:** [@khgupta3](https://discuss.elastic.co/u/khgupta3)\ **Replies:** 5\ **Last updated:** [June 9, 2021, 5:13am UTC](https://discuss.elastic.co/t/how-to-give-cluster-ip-in-fluentd-kibana-for-3-node-elasticsearch-cluster/275289 "2021-06-09T05:13:13Z")
Hi All, I have 3 node cluster (3 VM with different IPs) . After going thru some documentations and other community questions, I read that in small cluster like if 3, to have redundancy it is good to make all Master as w… --- ## [Send the Ruby Exception message along with the \_rubyException tag](https://discuss.elastic.co/t/send-the-ruby-exception-message-along-with-the-rubyexception-tag/275369)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 0\ **Last updated:** [June 9, 2021, 4:40am UTC](https://discuss.elastic.co/t/send-the-ruby-exception-message-along-with-the-rubyexception-tag/275369 "2021-06-09T04:40:25Z")
I have ruby filter processing and for some inputs, I do have ruby-exceptions and they are successfully propogated to elastic search with the tag. (expected). However I do not know why this exceptions are caused i.e the s… --- ## [logstashでindex作成時にtemplateとtemplate-nameを指定するとFailed to install templateになる](https://discuss.elastic.co/t/logstash-index-template-template-name-failed-to-install-template/275368)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 0\ **Last updated:** [June 9, 2021, 4:12am UTC](https://discuss.elastic.co/t/logstash-index-template-template-name-failed-to-install-template/275368 "2021-06-09T04:12:30Z")
elasticsearch serviceのインスタンスへ向けて実行しています。 予めtemplateをPUTしておかなくてはならないのでしょうか？ (でもそれだとconfファイルにtemplateのJSONファイルやtemplate\_nameをわざわざ指定する意味はないですよね・・・) 実行環境 mac book pro logstash-7.13.0 confファイルの内容 input { file { … --- ## [Kibana url redirecting to /space/enter and giving 503 error when deployed on Kubernetes cluster](https://discuss.elastic.co/t/kibana-url-redirecting-to-space-enter-and-giving-503-error-when-deployed-on-kubernetes-cluster/275257)
**Author:** [@Shubham\_Dhote](https://discuss.elastic.co/u/Shubham_Dhote)\ **Replies:** 2\ **Last updated:** [June 9, 2021, 3:57am UTC](https://discuss.elastic.co/t/kibana-url-redirecting-to-space-enter-and-giving-503-error-when-deployed-on-kubernetes-cluster/275257 "2021-06-09T03:57:17Z")
I have deployed Kibana and elasticsearch pods in Kubernetes cluster, I have created ingress path url for both of them. Elasticsearch is accessible with ingress path url, but when trying to access kibana ui with ingress u… --- ## [Create event on change of field](https://discuss.elastic.co/t/create-event-on-change-of-field/275363)
**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\ **Replies:** 1\ **Last updated:** [June 9, 2021, 3:31am UTC](https://discuss.elastic.co/t/create-event-on-change-of-field/275363 "2021-06-09T03:31:42Z")
Hi All I need some help getting started in the right direction with a logstash configuration please: We have log events coming into logstash right now. From each of the events we currently parse the name of a computer … --- ## [Losing logs in ELK](https://discuss.elastic.co/t/losing-logs-in-elk/275356)
**Author:** [@devopscanada](https://discuss.elastic.co/u/devopscanada)\ **Replies:** 2\ **Last updated:** [June 9, 2021, 2:08am UTC](https://discuss.elastic.co/t/losing-logs-in-elk/275356 "2021-06-09T02:08:24Z")
Setup: Kubernetes cluster with filebeat-7.12.0 -\> logstash-7.9. -\> elasticsearch-7.9.1 -\> kibana-7.9.1 Problem: we lose many logs often and sometimes in a massive way, as in we stop seeing logs from one or more pods… --- ## [Auto Delete old indices based on size (on hitting the low watermark setting)](https://discuss.elastic.co/t/auto-delete-old-indices-based-on-size-on-hitting-the-low-watermark-setting/275353)
**Author:** [@rakeshr](https://discuss.elastic.co/u/rakeshr)\ **Replies:** 2\ **Last updated:** [June 9, 2021, 2:04am UTC](https://discuss.elastic.co/t/auto-delete-old-indices-based-on-size-on-hitting-the-low-watermark-setting/275353 "2021-06-09T02:04:46Z")
Hi, Is there any setting which would auto Delete old indices on hitting the lower watermark setting? I could not find much information from the documentation regarding such a setting. If not, how can this be done ? --- ## [Kibana build error](https://discuss.elastic.co/t/kibana-build-error/275261)
**Author:** [@541002492](https://discuss.elastic.co/u/541002492)\ **Replies:** 3\ **Last updated:** [June 9, 2021, 1:36am UTC](https://discuss.elastic.co/t/kibana-build-error/275261 "2021-06-09T01:36:36Z")
info \[ kibana \] Copying source into platform-generic build directory │ERROR failure 13 sec │ERROR Error: EINVAL: invalid argument, utime 'D:\\Desktop\\kibana\\kibana\\kibana-7.10.0.0\\build\\kibana\\yarn.lock' My operating… --- ## [logstashからElasticsearch Serviceへindex作成を実行すると実行ログが途中で止まる](https://discuss.elastic.co/t/logstash-elasticsearch-service-index/275226)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 0\ **Last updated:** [June 8, 2021, 3:42am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-service-index/275226 "2021-06-08T03:42:14Z")
試しにindexの作成を行おうと思い、以下の内容で実行したのですがログが途中で止まり、 indexが作成されてるかクエリで確認しても作成されてないという状態で、どこの設定が間違ってるのかわからない状況です。 お手数ですが、ご教示いただけると幸いです。 参考にした記事 使用したconfファイルの内容 input { file { mode =\> "tail" path =\> \["/Use… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=919) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=921)