# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=923 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 924 --- ## [How backup delete indices](https://discuss.elastic.co/t/how-backup-delete-indices/275080)
**Author:** [@Ilya\_21bA](https://discuss.elastic.co/u/Ilya_21bA)\ **Replies:** 17\ **Last updated:** [June 8, 2021, 12:59am UTC](https://discuss.elastic.co/t/how-backup-delete-indices/275080 "2021-06-08T00:59:06Z")
Hi! System indexes were accidentally deleted, name: .kibana, .kibana\_1, .kibana\_task\_manager, .security, .security-7 Log text on Elasticsearch: \[2021-06-02T17:44:32,369\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[AGILEVLG… --- ## [Scripted fields values not getting populated on visualize but are populated during discover](https://discuss.elastic.co/t/scripted-fields-values-not-getting-populated-on-visualize-but-are-populated-during-discover/274931)
**Author:** [@nitish012](https://discuss.elastic.co/u/nitish012)\ **Replies:** 10\ **Last updated:** [June 7, 2021, 11:48pm UTC](https://discuss.elastic.co/t/scripted-fields-values-not-getting-populated-on-visualize-but-are-populated-during-discover/274931 "2021-06-07T23:48:00Z")
Hi Kibana Experts, I am using Kibana scripted fields using painless to populate a URL like this: Url Template : https://dummy\_url?branch={{value}}&id=abc Script: if (!doc\['branch\_name'\].empty) { return (doc\['branc… --- ## [Updating index with new field, based on the values of existing fields](https://discuss.elastic.co/t/updating-index-with-new-field-based-on-the-values-of-existing-fields/275144)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 11:44pm UTC](https://discuss.elastic.co/t/updating-index-with-new-field-based-on-the-values-of-existing-fields/275144 "2021-06-07T23:44:50Z")
Hello, I have an index with two fields: City\_1 and City\_2. I would like to create a new field and update all existing documents based on the outcome of the following logical test: If City\_1 = City\_2 Then Match Else No … --- ## [Unable to view the monitor up/down details in Kibana dashboard through docker run in multiple .js/.ts files](https://discuss.elastic.co/t/unable-to-view-the-monitor-up-down-details-in-kibana-dashboard-through-docker-run-in-multiple-js-ts-files/274093)
**Author:** [@sadik](https://discuss.elastic.co/u/sadik)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 11:15pm UTC](https://discuss.elastic.co/t/unable-to-view-the-monitor-up-down-details-in-kibana-dashboard-through-docker-run-in-multiple-js-ts-files/274093 "2021-06-07T23:15:15Z")
Title:-Unable to view the monitor up/down details in Kibana dashboard through docker run in multiple .js/.ts files Description: Hi Team, we are currently run the "heartbeat.yml" file with the config of multiple .js fil… --- ## [Elasticsearch error: Validation Failed: 1: parent histogram of moving\_avg aggregation \[3\] must have min\_doc\_count of 0;](https://discuss.elastic.co/t/elasticsearch-error-validation-failed-1-parent-histogram-of-moving-avg-aggregation-3-must-have-min-doc-count-of-0/274033)
**Author:** [@Isekai](https://discuss.elastic.co/u/Isekai)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 8:54pm UTC](https://discuss.elastic.co/t/elasticsearch-error-validation-failed-1-parent-histogram-of-moving-avg-aggregation-3-must-have-min-doc-count-of-0/274033 "2021-06-07T20:54:24Z")
Greetings everyone Yesterday we updated elastic from 7.4.x to 7.10.1 and some of our grafana dashboards broke with the following error: Elasticsearch error: Validation Failed: 1: parent histogram of moving\_avg aggrega… --- ## [ELK Agent - Parse Custom NGINX Log](https://discuss.elastic.co/t/elk-agent-parse-custom-nginx-log/275203)
**Author:** [@peganet](https://discuss.elastic.co/u/peganet)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 8:50pm UTC](https://discuss.elastic.co/t/elk-agent-parse-custom-nginx-log/275203 "2021-06-07T20:50:19Z")
Hello there, I am using "Custom Log Format" on my NGINX Reverse Proxy server. I want to make a Dashboard for myself, but the logs appear as messages. When I use the common log format instead of Custom, the data appears … --- ## [Could not execute action: PipelineAction::Create](https://discuss.elastic.co/t/could-not-execute-action-pipelineaction-create/275196)
**Author:** [@jeroen.antsec](https://discuss.elastic.co/u/jeroen.antsec)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 8:02pm UTC](https://discuss.elastic.co/t/could-not-execute-action-pipelineaction-create/275196 "2021-06-07T20:02:26Z")
Hi guys, I have a question. I have a nice running logstash and elastic cluster. When i create a large pipeline of over 4000 lines logstash crashes with the following error: \[2021-06-07T19:27:23,511\]\[INFO \]\[logstash.jav… --- ## [Having a hard time writing a query to exclude results](https://discuss.elastic.co/t/having-a-hard-time-writing-a-query-to-exclude-results/275186)
**Author:** [@ccvanilla](https://discuss.elastic.co/u/ccvanilla)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 6:25pm UTC](https://discuss.elastic.co/t/having-a-hard-time-writing-a-query-to-exclude-results/275186 "2021-06-07T18:25:00Z")
Hello! I'm having a hard time writing a query to exclude certain results. I want to be able to search the index for one or many job titles, but also exclude one or many job titles from the results. For example, I want … --- ## [Logstash stops getting events once in 3 days](https://discuss.elastic.co/t/logstash-stops-getting-events-once-in-3-days/274490)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 10\ **Last updated:** [June 7, 2021, 5:11pm UTC](https://discuss.elastic.co/t/logstash-stops-getting-events-once-in-3-days/274490 "2021-06-07T17:11:40Z")
We are using Logstash 7.4.2. Once in 3-4 days, Logstash stops processing events and its not parsing new events till we restart the service. We see only below error in log , :body=\>"{"error":{"root\_cause":\[{"type":"actio… --- ## [Filter aggregation buckets by top hits scripted field](https://discuss.elastic.co/t/filter-aggregation-buckets-by-top-hits-scripted-field/275181)
**Author:** [@mouse\_clicker](https://discuss.elastic.co/u/mouse_clicker)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 5:03pm UTC](https://discuss.elastic.co/t/filter-aggregation-buckets-by-top-hits-scripted-field/275181 "2021-06-07T17:03:41Z")
Hello everyone. Let me start by explaining the end goal of the query I'm trying to build. We have a document with the following (relative to the question) mapping: { "analysis-results" : { "mappings" : { "pr… --- ## [Cannot get original timestamp from WSo2 logs coming from Source -\> filebeat -\> logstash -\> Elasticsearch](https://discuss.elastic.co/t/cannot-get-original-timestamp-from-wso2-logs-coming-from-source-filebeat-logstash-elasticsearch/275148)
**Author:** [@Jefledge](https://discuss.elastic.co/u/Jefledge)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:59pm UTC](https://discuss.elastic.co/t/cannot-get-original-timestamp-from-wso2-logs-coming-from-source-filebeat-logstash-elasticsearch/275148 "2021-06-07T16:59:19Z")
I currently have logstash and filebeat running on the same AWS EC2 as a proof of concept to get logs from efs and push to Elastic for us to view on Kibana. It is all set up and working nicely, there is just one issue I c… --- ## [How Logstash works for 10,000 lines of log file](https://discuss.elastic.co/t/how-logstash-works-for-10-000-lines-of-log-file/275118)
**Author:** [@sudo-ranjith](https://discuss.elastic.co/u/sudo-ranjith)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 4:58pm UTC](https://discuss.elastic.co/t/how-logstash-works-for-10-000-lines-of-log-file/275118 "2021-06-07T16:58:00Z")
I have log file that has 10,000 lines of logs, every hour 10 lines of logs will be added in the log file. at 3 AM I have 10,000 line of logs at 4 AM 10,010 lines of logs at 5 AM 10,020 lines of logs.... I would like … --- ## [Elastic App Search -- Importing Json files](https://discuss.elastic.co/t/elastic-app-search-importing-json-files/274992)
**Author:** [@NiklasSpira](https://discuss.elastic.co/u/NiklasSpira)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 4:51pm UTC](https://discuss.elastic.co/t/elastic-app-search-importing-json-files/274992 "2021-06-07T16:51:35Z")
Hello Guys, I have a problem with importing Jsons into my Elastic App Search. I've gone through nearly all the existing threads, here and everywhere else but I couldn't get my problem fixed. I'm currently trying to imp… --- ## [Logstach output data to mongodb handshake error](https://discuss.elastic.co/t/logstach-output-data-to-mongodb-handshake-error/275099)
**Author:** [@zhidong\_yuan](https://discuss.elastic.co/u/zhidong_yuan)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:35pm UTC](https://discuss.elastic.co/t/logstach-output-data-to-mongodb-handshake-error/275099 "2021-06-07T16:35:12Z")
I just output data to monodb with Mongodb output plugin(v3.1.6). However, somethong worng happens when logstash straring up . The logs like this: \[INFO \] 2021-06-07 13:20:09.220 \[\[main\]-pipeline-manager\] javapipeline… --- ## [Highest value possible for boosted fields](https://discuss.elastic.co/t/highest-value-possible-for-boosted-fields/275175)
**Author:** [@jlarroque](https://discuss.elastic.co/u/jlarroque)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 3:49pm UTC](https://discuss.elastic.co/t/highest-value-possible-for-boosted-fields/275175 "2021-06-07T15:49:14Z")
Hi Elastic team, I would like to know what are the limits for boosting for boosted fields on a query, can I use 2000 ? Can I use 1M ? All examples I have seen are between 0 and 2, but I would like to know in advance what… --- ## [Kibana TSVB Metric -\> Delta between today and yesterday](https://discuss.elastic.co/t/kibana-tsvb-metric-delta-between-today-and-yesterday/274064)
**Author:** [@Lucas\_Erlacher](https://discuss.elastic.co/u/Lucas_Erlacher)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 3:39pm UTC](https://discuss.elastic.co/t/kibana-tsvb-metric-delta-between-today-and-yesterday/274064 "2021-06-07T15:39:55Z")
Hello Community, I have the following metric showing today's & yesterday's avg. session duration. Is there a way to show the delta between the 2 metrics? Thanks a lot for your help. --- ## [Vega Maps Zoom](https://discuss.elastic.co/t/vega-maps-zoom/275111)
**Author:** [@gerardo\_dutan](https://discuss.elastic.co/u/gerardo_dutan)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 2:47pm UTC](https://discuss.elastic.co/t/vega-maps-zoom/275111 "2021-06-07T14:47:04Z")
I'm currently using vega maps to look at geo data and noticed that the zoom level for a vega map based visualization seems to lower than what is theoretically possible from the local map tile server that I'm using, curre… --- ## [Time\_zone parameter](https://discuss.elastic.co/t/time-zone-parameter/275161)
**Author:** [@qwerty123](https://discuss.elastic.co/u/qwerty123)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 2:41pm UTC](https://discuss.elastic.co/t/time-zone-parameter/275161 "2021-06-07T14:41:34Z")
hi !! does elasticsearch range query always work based on UTC time zone ?? if so, is it possible to change this and make it work according to user required time zone ?? even when i use time\_zone parameter in my query, t… --- ## [Value does not exist](https://discuss.elastic.co/t/value-does-not-exist/274833)
**Author:** [@kehers](https://discuss.elastic.co/u/kehers)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 2:04pm UTC](https://discuss.elastic.co/t/value-does-not-exist/274833 "2021-06-07T14:04:05Z")
I am familiar with checking if a field exists using the exists query. I am wondering if there is a way to check if a value does not exist instead; something like this: GET /\_search { "query": { "bool": { "m… --- ## [Data Path per-Index Basis](https://discuss.elastic.co/t/data-path-per-index-basis/275157)
**Author:** [@tepus](https://discuss.elastic.co/u/tepus)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 2:00pm UTC](https://discuss.elastic.co/t/data-path-per-index-basis/275157 "2021-06-07T14:00:57Z")
Hi Elastic Community, I'm running a three node cluster. I've defined the directory for storing indices with data.path in elasticsearch.yml. Is it possible to change the storing directory for a specific index? Personall… --- ## [Display aggregated counter value per interval](https://discuss.elastic.co/t/display-aggregated-counter-value-per-interval/272333)
**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\ **Replies:** 8\ **Last updated:** [June 7, 2021, 1:34pm UTC](https://discuss.elastic.co/t/display-aggregated-counter-value-per-interval/272333 "2021-06-07T13:34:33Z")
I have two counters for open and closes issues, something like this: timpestamp: epoch\_mill1, total: 2000, open: 200, closed: 1800 timpestamp: epoch\_mill2, total: 2200, open: 250, closed: 1950 timpestamp: epoch\_mill3, t… --- ## [Selecting a dashboard links to a blank screen](https://discuss.elastic.co/t/selecting-a-dashboard-links-to-a-blank-screen/275151)
**Author:** [@aerodynamic](https://discuss.elastic.co/u/aerodynamic)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 12:55pm UTC](https://discuss.elastic.co/t/selecting-a-dashboard-links-to-a-blank-screen/275151 "2021-06-07T12:55:11Z")
Hello, Selecting a dashboard in Kibana leads to a blank screen. Any ideas on what could be causing this? --- ## [Logstash/grok to match only first occurrence and stop parsing repeatedly for same values](https://discuss.elastic.co/t/logstash-grok-to-match-only-first-occurrence-and-stop-parsing-repeatedly-for-same-values/274201)
**Author:** [@theirfan](https://discuss.elastic.co/u/theirfan)\ **Replies:** 23\ **Last updated:** [June 7, 2021, 12:10pm UTC](https://discuss.elastic.co/t/logstash-grok-to-match-only-first-occurrence-and-stop-parsing-repeatedly-for-same-values/274201 "2021-06-07T12:10:28Z")
Hi all, I have this issue with logstash/grok. Stated Working with ELK some days back. A newbie, please help. I have a log (sample below) Timestamp temperature 20 Timestamp temperature 20 Timestamp temperature 21 N… --- ## [Batch request failed with status 0 meaning](https://discuss.elastic.co/t/batch-request-failed-with-status-0-meaning/272321)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 11:40am UTC](https://discuss.elastic.co/t/batch-request-failed-with-status-0-meaning/272321 "2021-06-07T11:40:43Z")
I'm getting this error on my visuals and I can't find information anywhere about what it may mean. Can anyone tell me? --- ## [Import JSON with nested fields](https://discuss.elastic.co/t/import-json-with-nested-fields/275010)
**Author:** [@aamrankw](https://discuss.elastic.co/u/aamrankw)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 11:06am UTC](https://discuss.elastic.co/t/import-json-with-nested-fields/275010 "2021-06-07T11:06:23Z")
Hello all, I would like your support in defining a proper filter for importing the following JSON object: { "status": "ok", "message-type": "work-list", "message-version": "1.0.0", "message": { … --- ## [Unable to update mappings for Date fields in order to prepare for migration from 6.x to 7.x](https://discuss.elastic.co/t/unable-to-update-mappings-for-date-fields-in-order-to-prepare-for-migration-from-6-x-to-7-x/275138)
**Author:** [@Raja\_Kolluri](https://discuss.elastic.co/u/Raja_Kolluri)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 11:04am UTC](https://discuss.elastic.co/t/unable-to-update-mappings-for-date-fields-in-order-to-prepare-for-migration-from-6-x-to-7-x/275138 "2021-06-07T11:04:32Z")
Hi, i am trying to migrate Elasticsearch from 6.x to 7.x version. "Indices" Tab in Upgrade Assistant 7.0 page in Kibana shows below warning message for most of my indices, This index has date fields with deprecated f… --- ## [Performance of 'Update by query' for frequent runs with at most 1 object returned](https://discuss.elastic.co/t/performance-of-update-by-query-for-frequent-runs-with-at-most-1-object-returned/275122)
**Author:** [@hariso](https://discuss.elastic.co/u/hariso)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 10:06am UTC](https://discuss.elastic.co/t/performance-of-update-by-query-for-frequent-runs-with-at-most-1-object-returned/275122 "2021-06-07T10:06:51Z")
How does UBQ perform when it's being run frequently, and where at most one object will be updated? I have a cluster with a significant number of indexes and quite some documents (a few billions in total). In certain proc… --- ## [Transform api gives unsupported aggregation type \[multi\_terms\]](https://discuss.elastic.co/t/transform-api-gives-unsupported-aggregation-type-multi-terms/274616)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 9:25am UTC](https://discuss.elastic.co/t/transform-api-gives-unsupported-aggregation-type-multi-terms/274616 "2021-06-07T09:25:58Z")
Below is my query for getting distinct values of the fields. { "size": 0, "aggs": { "unique\_pair": { "multi\_terms": { "terms": \[ { "field": "username" }, {… --- ## [Range query](https://discuss.elastic.co/t/range-query/275116)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 8:13am UTC](https://discuss.elastic.co/t/range-query/275116 "2021-06-07T08:13:21Z")
i am using the below range query to read data from elasticsearch using spark and in kibana i have set Asia/Riyadh Timezone for date formatting. .set("es.query","""{ "query": { "range": { "@timestamp": { "gte": "now… --- ## [Unable to open kibana ui](https://discuss.elastic.co/t/unable-to-open-kibana-ui/275117)
**Author:** [@1ac727ff300829bca0fa](https://discuss.elastic.co/u/1ac727ff300829bca0fa)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 8:12am UTC](https://discuss.elastic.co/t/unable-to-open-kibana-ui/275117 "2021-06-07T08:12:52Z")
this is my kibana.yml # Kibana is served by a back end server. This setting specifies the port to use. #server.port: 5601 # Specifies the address to which the Kibana server will bind. IP addresses and host names are bo… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=922) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=924)