# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=939 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 940 --- ## [How to get counts / stats for different periods of time?](https://discuss.elastic.co/t/how-to-get-counts-stats-for-different-periods-of-time/273799)
**Author:** [@ashwinbhaskar](https://discuss.elastic.co/u/ashwinbhaskar)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 10:46am UTC](https://discuss.elastic.co/t/how-to-get-counts-stats-for-different-periods-of-time/273799 "2021-05-24T10:46:22Z")
I am trying to get the count of documents that were created for the last 10 weeks grouped by week. To get the count for the last week, I would do something like this GET my\_index/\_count { "query": { "range": { … --- ## [Delete\_by\_query increases the storage size](https://discuss.elastic.co/t/delete-by-query-increases-the-storage-size/273806)
**Author:** [@Billz1026](https://discuss.elastic.co/u/Billz1026)\ **Replies:** 4\ **Last updated:** [May 24, 2021, 10:22am UTC](https://discuss.elastic.co/t/delete-by-query-increases-the-storage-size/273806 "2021-05-24T10:22:13Z")
Hi All, I have used following "delete\_by\_query" to delete large number of documents from an index of my ES. POST /winlogbeat-7.12.0-2021.05.20-000029/\_delete\_by\_query { "query": { "match": { "event.code": "… --- ## [Connecting google sheets to elasticsearch](https://discuss.elastic.co/t/connecting-google-sheets-to-elasticsearch/273758)
**Author:** [@Rgvr\_S](https://discuss.elastic.co/u/Rgvr_S)\ **Replies:** 0\ **Last updated:** [May 23, 2021, 11:48am UTC](https://discuss.elastic.co/t/connecting-google-sheets-to-elasticsearch/273758 "2021-05-23T11:48:55Z")
I'm trying to connect a few sheets saved in my google drive to visualize in Kibana, I tried using Google sheets to elasticsearch add-on and it looks like the add-on no longer exists. Is there an alternative for this ? T… --- ## [Logstash logs are not generating](https://discuss.elastic.co/t/logstash-logs-are-not-generating/273504)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 8:31am UTC](https://discuss.elastic.co/t/logstash-logs-are-not-generating/273504 "2021-05-24T08:31:06Z")
Hi, I setup logstash on centos7. I done some work on it. now logstash logs is not generating. It could not able to find logstash.yml and log4j2.properties. There are warning; sudo /usr/share/logstash/bin/logstash -f… --- ## [Edge ngram for numeric value](https://discuss.elastic.co/t/edge-ngram-for-numeric-value/273793)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 0\ **Last updated:** [May 24, 2021, 8:28am UTC](https://discuss.elastic.co/t/edge-ngram-for-numeric-value/273793 "2021-05-24T08:28:52Z")
Hi, I am implementing edge ngram on a text field for letters and digits. But it is not able to search numeric value. My code is: PUT my-index-00001 { "settings": { "analysis": { "analyzer": { "aut… --- ## [Monitoring.ui.logs.index not working on docker?](https://discuss.elastic.co/t/monitoring-ui-logs-index-not-working-on-docker/273186)
**Author:** [@Flavio\_Pompermaier](https://discuss.elastic.co/u/Flavio_Pompermaier)\ **Replies:** 2\ **Last updated:** [May 24, 2021, 8:17am UTC](https://discuss.elastic.co/t/monitoring-ui-logs-index-not-working-on-docker/273186 "2021-05-24T08:17:07Z")
Hi to all, I've setup a working Kibana using docker-compose and I use journalbeat to collect elasticsearch logs of my docker container (that use journald as logging option). I've tried to change monitoring.ui.logs.index … --- ## [Adding static legend in Kibana dashboards](https://discuss.elastic.co/t/adding-static-legend-in-kibana-dashboards/273759)
**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 8:01am UTC](https://discuss.elastic.co/t/adding-static-legend-in-kibana-dashboards/273759 "2021-05-24T08:01:44Z")
I'm trying to add a static legend to my Kibana dashboard in order to mark things in TSVB visualization. I'm using color in the TSVB visualization and am trying to explain the colors in a static legend: I want it to b… --- ## [What happens when logstash can't access to elasticsearch](https://discuss.elastic.co/t/what-happens-when-logstash-cant-access-to-elasticsearch/273783)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 7:54am UTC](https://discuss.elastic.co/t/what-happens-when-logstash-cant-access-to-elasticsearch/273783 "2021-05-24T07:54:12Z")
I want to ask that, I have logstash pipelines. Output filter only goes elasticsearch. when elasticsearch stops while logstash is running, logstash service stops with an error but what about sincedb ? When i restart ela… --- ## [Out of memory error in elasticsearch](https://discuss.elastic.co/t/out-of-memory-error-in-elasticsearch/273785)
**Author:** [@jake\_JJ](https://discuss.elastic.co/u/jake_JJ)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 6:39am UTC](https://discuss.elastic.co/t/out-of-memory-error-in-elasticsearch/273785 "2021-05-24T06:39:05Z")
jvm.options ################################################################ ## ## JVM configuration ## ################################################################ ## ## WARNING: DO NOT EDIT THIS FILE. If you wa… --- ## [Constant score + Fuzzy query issue](https://discuss.elastic.co/t/constant-score-fuzzy-query-issue/273779)
**Author:** [@jihyun\_ahn](https://discuss.elastic.co/u/jihyun_ahn)\ **Replies:** 0\ **Last updated:** [May 24, 2021, 3:52am UTC](https://discuss.elastic.co/t/constant-score-fuzzy-query-issue/273779 "2021-05-24T03:52:13Z")
We are using a constant score to ignore the distance score while using the Fuzzy Query. The result is successful. However, the difference between the CPU usage of Elasticsearch and the one used with the Constant score i… --- ## [Convert Epoch to Date Histogram format on Kibana Dashboard](https://discuss.elastic.co/t/convert-epoch-to-date-histogram-format-on-kibana-dashboard/273743)
**Author:** [@singyuentang](https://discuss.elastic.co/u/singyuentang)\ **Replies:** 1\ **Last updated:** [May 24, 2021, 3:32am UTC](https://discuss.elastic.co/t/convert-epoch-to-date-histogram-format-on-kibana-dashboard/273743 "2021-05-24T03:32:13Z")
Hi, My input data into the ElasticSearch database is limited to epoch time. I need to display the data on the X-axis as date histogram format. Does anyone know how we can make this format conversion on the Kibana dashb… --- ## [Logstash Regex](https://discuss.elastic.co/t/logstash-regex/273700)
**Author:** [@pmorenosi](https://discuss.elastic.co/u/pmorenosi)\ **Replies:** 1\ **Last updated:** [May 21, 2021, 10:05pm UTC](https://discuss.elastic.co/t/logstash-regex/273700 "2021-05-21T22:05:36Z")
Hello everybody, in a logstash pipeline I am doing the following "if" if \[message\] = ~ /^postfix.\*/anvil$/ { match =\> \["message", "% {POSTFIX\_ANVIL} $"\] } LOG May 11 05:49:37 smtp postfix / anvil \[27651\]: statistics… --- ## [Stashing your first event assistance](https://discuss.elastic.co/t/stashing-your-first-event-assistance/273769)
**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\ **Replies:** 2\ **Last updated:** [May 23, 2021, 7:34pm UTC](https://discuss.elastic.co/t/stashing-your-first-event-assistance/273769 "2021-05-23T19:34:22Z")
Hi All, I'm following the guide to stash first event, but I'm getting an error message in the command line when verifying logstash installation. I can CD to logstash directory but it's when I specify configuration from … --- ## [Logstash not working in docker](https://discuss.elastic.co/t/logstash-not-working-in-docker/273748)
**Author:** [@Shubham\_Pachpande](https://discuss.elastic.co/u/Shubham_Pachpande)\ **Replies:** 1\ **Last updated:** [May 23, 2021, 7:15pm UTC](https://discuss.elastic.co/t/logstash-not-working-in-docker/273748 "2021-05-23T19:15:09Z")
Using bundled JDK: /usr/share/logstash/jdk OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. Sending Logstash logs to /usr/share/l… --- ## [Is it possible to use field exists Canvas essql?](https://discuss.elastic.co/t/is-it-possible-to-use-field-exists-canvas-essql/273624)
**Author:** [@thirukumaran09](https://discuss.elastic.co/u/thirukumaran09)\ **Replies:** 2\ **Last updated:** [May 23, 2021, 2:02pm UTC](https://discuss.elastic.co/t/is-it-possible-to-use-field-exists-canvas-essql/273624 "2021-05-23T14:02:46Z")
Hi! I am trying to use Canvas to build a Dashboard to show the Metrics based on certain field availability. Is it possible to use the exists function in essql? Or is there any alternative functions available to execut… --- ## [Where does the documents and segments are present in the system](https://discuss.elastic.co/t/where-does-the-documents-and-segments-are-present-in-the-system/273756)
**Author:** [@surya3](https://discuss.elastic.co/u/surya3)\ **Replies:** 1\ **Last updated:** [May 23, 2021, 1:50pm UTC](https://discuss.elastic.co/t/where-does-the-documents-and-segments-are-present-in-the-system/273756 "2021-05-23T13:50:22Z")
Hi team, I got one doubt while I was exploring on how documents are retrieved based on the search query. Then I came to know that the search query will be given to the shards in the cluster of the nodes by the one of th… --- ## [Visual Builder \> Removing Axis Min and Axis Max sets min=0 max=1](https://discuss.elastic.co/t/visual-builder-removing-axis-min-and-axis-max-sets-min-0-max-1/273647)
**Author:** [@Ludek\_Sanda](https://discuss.elastic.co/u/Ludek_Sanda)\ **Replies:** 2\ **Last updated:** [May 23, 2021, 9:46am UTC](https://discuss.elastic.co/t/visual-builder-removing-axis-min-and-axis-max-sets-min-0-max-1/273647 "2021-05-23T09:46:41Z")
There seems to be a bug that when you remove the Axis Min and Axis Max in VB it's set to 0-1. After setting the Separate axis = F the min/max is set based on the data correctly, but setting Separate axis = T back will b… --- ## [What is the need of installing Nginix while installing elastic search and kibana](https://discuss.elastic.co/t/what-is-the-need-of-installing-nginix-while-installing-elastic-search-and-kibana/272486)
**Author:** [@surya3](https://discuss.elastic.co/u/surya3)\ **Replies:** 3\ **Last updated:** [May 23, 2021, 8:00am UTC](https://discuss.elastic.co/t/what-is-the-need-of-installing-nginix-while-installing-elastic-search-and-kibana/272486 "2021-05-23T08:00:56Z")
Hi Team, Recently i followed some tutorials on the installation of elastic search and kibana. Some of them are installing Nginx along with elastic search and kibana. What is the need for installing Nginx? How does it … --- ## [What is the difference between fields pass by filebeat and fields in logstash?](https://discuss.elastic.co/t/what-is-the-difference-between-fields-pass-by-filebeat-and-fields-in-logstash/273727)
**Author:** [@stille](https://discuss.elastic.co/u/stille)\ **Replies:** 5\ **Last updated:** [May 23, 2021, 3:37am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-fields-pass-by-filebeat-and-fields-in-logstash/273727 "2021-05-23T03:37:35Z")
I'm a new guy about elk. i'm trying use logstash filter instead of filebeat processors. There are some fields passed by filebeat in logstash , for example: i had set some fields in filebeat: "fields.app"="nginx" or "do… --- ## [Parse subdomain from fqdn in logstash](https://discuss.elastic.co/t/parse-subdomain-from-fqdn-in-logstash/273535)
**Author:** [@tushar.bansal](https://discuss.elastic.co/u/tushar.bansal)\ **Replies:** 6\ **Last updated:** [May 22, 2021, 11:45pm UTC](https://discuss.elastic.co/t/parse-subdomain-from-fqdn-in-logstash/273535 "2021-05-22T23:45:16Z")
Hi, I have several events coming in logstash with info of web link accessed. example: DNS query is called for the name crl.sectigo.com, type 28 DNS query is called for the name repo.maven.apache.org, type 2 DNS quer… --- ## [Failed to start elastic search](https://discuss.elastic.co/t/failed-to-start-elastic-search/273323)
**Author:** [@cedler](https://discuss.elastic.co/u/cedler)\ **Replies:** 18\ **Last updated:** [May 22, 2021, 10:27pm UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/273323 "2021-05-22T22:27:36Z")
Good evening, all seems ok, I have installed java 11, etc... But when I want to start the service I have somes errors... I put you the commandes and answers in putty : \[root@ortie-bio ~\]# systemctl start elasticsearch… --- ## [Could not locate that index-pattern-field (id: @timestamp)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-timestamp/273737)
**Author:** [@majidbarz](https://discuss.elastic.co/u/majidbarz)\ **Replies:** 3\ **Last updated:** [May 22, 2021, 6:43pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-timestamp/273737 "2021-05-22T18:43:14Z")
anyone can help me? Error: Could not locate that index-pattern-field (id: @timestamp) at FieldParamType.deserialize (http://192.168.226.11:5601/39457/bundles/plugin/data/data.plugin.js:1:535357) at http://192.168.226.… --- ## [Detection Rule Key Value Reference Url's](https://discuss.elastic.co/t/detection-rule-key-value-reference-urls/272466)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 5\ **Last updated:** [May 22, 2021, 5:23pm UTC](https://discuss.elastic.co/t/detection-rule-key-value-reference-urls/272466 "2021-05-22T17:23:17Z")
Hello, After working intensively with Elastic Detections and alerting etc, I wanted to suggest that imho it would be an improvement if the reference url's were key / value instead of only the url's. Sometimes the url's … --- ## [Logstash input/ouput elasticsearch plugin capped performances](https://discuss.elastic.co/t/logstash-input-ouput-elasticsearch-plugin-capped-performances/273686)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [May 22, 2021, 11:55am UTC](https://discuss.elastic.co/t/logstash-input-ouput-elasticsearch-plugin-capped-performances/273686 "2021-05-22T11:55:22Z")
Hey There, inside a Logstash pipeline I was using both input and output elasticsearch plugin. Taking a look to Stack monitoring I saw that Event Received Rate (/s) and Event Emitted Rate (/s) are capped to 4000 events/… --- ## [Gradually introducing a portion of traffic to a new logstash configuration](https://discuss.elastic.co/t/gradually-introducing-a-portion-of-traffic-to-a-new-logstash-configuration/273603)
**Author:** [@cknz](https://discuss.elastic.co/u/cknz)\ **Replies:** 2\ **Last updated:** [May 22, 2021, 10:35am UTC](https://discuss.elastic.co/t/gradually-introducing-a-portion-of-traffic-to-a-new-logstash-configuration/273603 "2021-05-22T10:35:04Z")
Hi all, my colleague and I have been working on using the memcached filter plugin. We've got memcached fed with a inventory data about our various network equipment. The goal: I want to label all syslog traffic from our… --- ## [XMLHttpRequest error for flutter web requests (chrome)?](https://discuss.elastic.co/t/xmlhttprequest-error-for-flutter-web-requests-chrome/273715)
**Author:** [@sabetai](https://discuss.elastic.co/u/sabetai)\ **Replies:** 0\ **Last updated:** [May 22, 2021, 5:09am UTC](https://discuss.elastic.co/t/xmlhttprequest-error-for-flutter-web-requests-chrome/273715 "2021-05-22T05:09:07Z")
http requests to elasticsearch work when I debug my app for android/ios, but not for web (through chrome). Are there headers or server-side permissions I'm missing to make http requests through a browser? --- ## [LogStash conf file help](https://discuss.elastic.co/t/logstash-conf-file-help/273705)
**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\ **Replies:** 6\ **Last updated:** [May 22, 2021, 1:19am UTC](https://discuss.elastic.co/t/logstash-conf-file-help/273705 "2021-05-22T01:19:43Z")
Hi, I have created a logstash conf file. It's just bare bones, trying to get the service up and running so I can practice on my PC. This is what's in the file. \`input { \`stdin {} \`} \`output{ \`elasticsearch { hosts… --- ## [Unable to escape special character ""](https://discuss.elastic.co/t/unable-to-escape-special-character/273474)
**Author:** [@ravi-shanker](https://discuss.elastic.co/u/ravi-shanker)\ **Replies:** 9\ **Last updated:** [May 22, 2021, 12:03am UTC](https://discuss.elastic.co/t/unable-to-escape-special-character/273474 "2021-05-22T00:03:32Z")
I am trying to index my data into elasticsearch cluster through logstash. Currently my data is in aws postgres and i have to move data from postgres to elasticsearch. Below is my logstash config file: input { jdbc { … --- ## [Indexing after merging data from 2 tables from 2 different postgres db](https://discuss.elastic.co/t/indexing-after-merging-data-from-2-tables-from-2-different-postgres-db/273658)
**Author:** [@ravi-shanker](https://discuss.elastic.co/u/ravi-shanker)\ **Replies:** 0\ **Last updated:** [May 21, 2021, 11:48am UTC](https://discuss.elastic.co/t/indexing-after-merging-data-from-2-tables-from-2-different-postgres-db/273658 "2021-05-21T11:48:12Z")
Dear ELK User's Could you please guide me on how to approach the below requirement. -- There are two tables in two different postgres db say db1 (table1) and db2 (table2). -- There is one column in table1 which has 14… --- ## [Heatmap is hiding empty rows](https://discuss.elastic.co/t/heatmap-is-hiding-empty-rows/272938)
**Author:** [@gelfert](https://discuss.elastic.co/u/gelfert)\ **Replies:** 4\ **Last updated:** [May 21, 2021, 10:59pm UTC](https://discuss.elastic.co/t/heatmap-is-hiding-empty-rows/272938 "2021-05-21T22:59:48Z")
I am trying to create a heatmap on a numeric field over some time period, using the aggregation based tool. After selecting "Value: count", I create the y-axis histogram. I select "show empty buckets" and I get a bunch … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=938) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=940)