# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=949 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 950 --- ## [Time filter not working properly](https://discuss.elastic.co/t/time-filter-not-working-properly/272440)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 14\ **Last updated:** [May 13, 2021, 7:35pm UTC](https://discuss.elastic.co/t/time-filter-not-working-properly/272440 "2021-05-13T19:35:14Z")
Hi, Running ELK 7.11.2 Standalone Running Winlogbeat 7.11.2 I have a visualization table that is filtering Windows events from Winlogbeat, to show only events with code 4625 "Failed account log on". This dashboard has… --- ## [HTTP load balancer for dedicated master nodes](https://discuss.elastic.co/t/http-load-balancer-for-dedicated-master-nodes/272947)
**Author:** [@kianm](https://discuss.elastic.co/u/kianm)\ **Replies:** 2\ **Last updated:** [May 13, 2021, 7:31pm UTC](https://discuss.elastic.co/t/http-load-balancer-for-dedicated-master-nodes/272947 "2021-05-13T19:31:30Z")
Hello, I'm creating an Elasticsearch cluster on AWS EC2. I currently have: 1 kibana node 3 dedicated master nodes 5 data nodes These nodes are configured with the discovery-ec2 plugin which is working well. I am co… --- ## [Trying to install elastic search with Msi keep finding the same error when requesting password](https://discuss.elastic.co/t/trying-to-install-elastic-search-with-msi-keep-finding-the-same-error-when-requesting-password/272899)
**Author:** [@Tino23](https://discuss.elastic.co/u/Tino23)\ **Replies:** 0\ **Last updated:** [May 13, 2021, 9:56am UTC](https://discuss.elastic.co/t/trying-to-install-elastic-search-with-msi-keep-finding-the-same-error-when-requesting-password/272899 "2021-05-13T09:56:31Z")
i looked for config file cant find it i downloaded using msi Unexpected response code \[405\] from calling GET http://127.0.0.1:9200/\_security/\_authenticate?pretty It doesn't look like the X-Pack security feature is enab… --- ## [Logstash Elasticsearch Filter Lookup No Results](https://discuss.elastic.co/t/logstash-elasticsearch-filter-lookup-no-results/272933)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 1\ **Last updated:** [May 13, 2021, 6:02pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-lookup-no-results/272933 "2021-05-13T18:02:01Z")
I am having an issue with the Logstash Elasticsearch filter plugin not returning results, when I know there should be. I am sure it is an escape character, or something along those lines, but I cannot for the life of me … --- ## [Share Synonym Path for multiple nodes](https://discuss.elastic.co/t/share-synonym-path-for-multiple-nodes/272940)
**Author:** [@Coder\_Cub](https://discuss.elastic.co/u/Coder_Cub)\ **Replies:** 0\ **Last updated:** [May 13, 2021, 5:35pm UTC](https://discuss.elastic.co/t/share-synonym-path-for-multiple-nodes/272940 "2021-05-13T17:35:45Z")
Hi, I have 3 nodes for my index. I am using synonym filter with synonym .txt for few fields in my index. Is it possible to use one file for all 3 nodes? Something like keeping it in network path and using that in Synon… --- ## [Elastic sharding strategy](https://discuss.elastic.co/t/elastic-sharding-strategy/272925)
**Author:** [@alexs1](https://discuss.elastic.co/u/alexs1)\ **Replies:** 3\ **Last updated:** [May 13, 2021, 5:28pm UTC](https://discuss.elastic.co/t/elastic-sharding-strategy/272925 "2021-05-13T17:28:50Z")
Hello, I have a question about sharding strategy and performance please: when creating an index, the default number of shards is 1 and 1 replica. when creating an ILM policy, the default rollover is 30days/ 50gb. So … --- ## [Version Conflict Engine Exception - seqNo question](https://discuss.elastic.co/t/version-conflict-engine-exception-seqno-question/272930)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 1\ **Last updated:** [May 13, 2021, 5:11pm UTC](https://discuss.elastic.co/t/version-conflict-engine-exception-seqno-question/272930 "2021-05-13T17:11:49Z")
Hi All, I'm getting version\_conflict\_engine\_exception when doing an update by query in an index with one shard and no replicas. I do not understand well why is this situation happening. Is there any place in the doc … --- ## [Kibana and custom-es exporter cannot connect to Elastic search](https://discuss.elastic.co/t/kibana-and-custom-es-exporter-cannot-connect-to-elastic-search/272550)
**Author:** [@harsh9](https://discuss.elastic.co/u/harsh9)\ **Replies:** 3\ **Last updated:** [May 13, 2021, 4:54pm UTC](https://discuss.elastic.co/t/kibana-and-custom-es-exporter-cannot-connect-to-elastic-search/272550 "2021-05-13T16:54:57Z")
I cannot connect to my es from my kibana pod and my custom-es-exporter pod, the error which is thrown is Version of elastic search we are using is 7.7.1 Error from the custom-es-exporter logs --- ## [Bulk retry drops whole BulkResponse if only one BulkItemResponse can not be retried](https://discuss.elastic.co/t/bulk-retry-drops-whole-bulkresponse-if-only-one-bulkitemresponse-can-not-be-retried/272936)
**Author:** [@Chobicus](https://discuss.elastic.co/u/Chobicus)\ **Replies:** 0\ **Last updated:** [May 13, 2021, 4:41pm UTC](https://discuss.elastic.co/t/bulk-retry-drops-whole-bulkresponse-if-only-one-bulkitemresponse-can-not-be-retried/272936 "2021-05-13T16:41:04Z")
Hello. Not sure if canRetry method is intended to behave like this. I have an index where sometimes I try to index the document that is already indexed getting CONFLICT(409) which is fine and should not be retried. Som… --- ## [TSVB: aggregate across ALL documents in index, not just those in a selected time range](https://discuss.elastic.co/t/tsvb-aggregate-across-all-documents-in-index-not-just-those-in-a-selected-time-range/272852)
**Author:** [@ivh](https://discuss.elastic.co/u/ivh)\ **Replies:** 2\ **Last updated:** [May 13, 2021, 3:59pm UTC](https://discuss.elastic.co/t/tsvb-aggregate-across-all-documents-in-index-not-just-those-in-a-selected-time-range/272852 "2021-05-13T15:59:13Z")
Hello! I have a working aggregation (cumulative sum) that behaves as expected when I've used the time picker to select a date range large enough (i.e., goes far enough back in time) to calculate the agg cumulative sum ac… --- ## [Not able to import data in elastic through logstash](https://discuss.elastic.co/t/not-able-to-import-data-in-elastic-through-logstash/271912)
**Author:** [@ajay8310](https://discuss.elastic.co/u/ajay8310)\ **Replies:** 7\ **Last updated:** [May 13, 2021, 3:19pm UTC](https://discuss.elastic.co/t/not-able-to-import-data-in-elastic-through-logstash/271912 "2021-05-13T15:19:16Z")
I am using logstash to import data in elastic search. I am using .conf file to import data in index in elastic. Every time I run the .conf file I get the following message repeatedly and index DOES NOT get created. \< \[… --- ## [Detecting empty fields not working as before in logstash 7.12.1](https://discuss.elastic.co/t/detecting-empty-fields-not-working-as-before-in-logstash-7-12-1/271764)
**Author:** [@mario\_wood](https://discuss.elastic.co/u/mario_wood)\ **Replies:** 3\ **Last updated:** [May 13, 2021, 3:18pm UTC](https://discuss.elastic.co/t/detecting-empty-fields-not-working-as-before-in-logstash-7-12-1/271764 "2021-05-13T15:18:34Z")
Hi, I'm migrating our logstash from 6.8 to 7.12 and I'm finding that the detection of empty fields is not working as it used to. For example given the input { "foo":"", "bar":"baz" } and the logstash filter if \[… --- ## [Calculate the maximum number of requests per second for the same IP](https://discuss.elastic.co/t/calculate-the-maximum-number-of-requests-per-second-for-the-same-ip/272842)
**Author:** [@CHIAWEI\_WU](https://discuss.elastic.co/u/CHIAWEI_WU)\ **Replies:** 2\ **Last updated:** [May 13, 2021, 2:56pm UTC](https://discuss.elastic.co/t/calculate-the-maximum-number-of-requests-per-second-for-the-same-ip/272842 "2021-05-13T14:56:44Z")
I have logs with the fields: . IP . Timestamp how to use visualize calculation the same ip per second ? I have calculated with csv, but due to the maximum length limit ... --- ## [No results match your search criteria in discover](https://discuss.elastic.co/t/no-results-match-your-search-criteria-in-discover/272853)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [May 13, 2021, 1:48pm UTC](https://discuss.elastic.co/t/no-results-match-your-search-criteria-in-discover/272853 "2021-05-13T13:48:33Z")
I have a data which has @timestamp (when data was ingested) and time\_logged where log event happen. When I create index pattern with @timestamp I can see data on discover but when I create index pattern with time\_logge… --- ## [Unique count exact value](https://discuss.elastic.co/t/unique-count-exact-value/272910)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 0\ **Last updated:** [May 13, 2021, 12:50pm UTC](https://discuss.elastic.co/t/unique-count-exact-value/272910 "2021-05-13T12:50:47Z")
hi , we trying to use unique count in Elasticsearch we know its Cardinality Aggregation and give approximate count . we also tried using "precision\_threshold":10000 , but still count is not exact. let me give info - … --- ## [Elastic Query for single field on multiple values](https://discuss.elastic.co/t/elastic-query-for-single-field-on-multiple-values/272903)
**Author:** [@Divy\_Garg](https://discuss.elastic.co/u/Divy_Garg)\ **Replies:** 0\ **Last updated:** [May 13, 2021, 11:19am UTC](https://discuss.elastic.co/t/elastic-query-for-single-field-on-multiple-values/272903 "2021-05-13T11:19:10Z")
Hi, I am not able to come up with a solution how to implement this query. So if someone could help that will be great. My doc looks something like this { a: "val", b: "val1", c: "val3" } I want to g… --- ## [How to deal with brackets json input filter](https://discuss.elastic.co/t/how-to-deal-with-brackets-json-input-filter/272848)
**Author:** [@Magnuss](https://discuss.elastic.co/u/Magnuss)\ **Replies:** 8\ **Last updated:** [May 13, 2021, 11:02am UTC](https://discuss.elastic.co/t/how-to-deal-with-brackets-json-input-filter/272848 "2021-05-13T11:02:15Z")
Hi there, I'm trying to figure out how to deal with brackets in logstash. The code is as following: { "test1": "text", "images": \[ "https://test2.com/images/I/test.jpg", "https://test2.com/images/I/test.jpg", … --- ## [Reindex data on old ES version using Logstash](https://discuss.elastic.co/t/reindex-data-on-old-es-version-using-logstash/272496)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [May 13, 2021, 9:48am UTC](https://discuss.elastic.co/t/reindex-data-on-old-es-version-using-logstash/272496 "2021-05-13T09:48:01Z")
Hey there, I am trying to reindex data from an old ES version to another old ES version using Logstash with elasticsearch input. Anyway I have some doubts. If I schedule the action, during the second execution it will … --- ## [Children aggregation not returning results](https://discuss.elastic.co/t/children-aggregation-not-returning-results/272896)
**Author:** [@brjisc](https://discuss.elastic.co/u/brjisc)\ **Replies:** 0\ **Last updated:** [May 13, 2021, 9:14am UTC](https://discuss.elastic.co/t/children-aggregation-not-returning-results/272896 "2021-05-13T09:14:26Z")
Using a mapping with: "stats\_rel": { "type": "join", "relations": { "metadata": "stat" } }\`\`\` and sample data of: \`\`\`{ "\_index": "irustest", "\_type": "\_doc", "\_id": … --- ## [I add documents to elastic indexes but they don't refresh in Kibana](https://discuss.elastic.co/t/i-add-documents-to-elastic-indexes-but-they-dont-refresh-in-kibana/272892)
**Author:** [@Julio1974](https://discuss.elastic.co/u/Julio1974)\ **Replies:** 1\ **Last updated:** [May 13, 2021, 8:52am UTC](https://discuss.elastic.co/t/i-add-documents-to-elastic-indexes-but-they-dont-refresh-in-kibana/272892 "2021-05-13T08:52:02Z")
Hello I am adding data with a java application to several elasticsearch indexes, I see that the number of documents increases but they are not refreshed in my Kibana dashboard. I imagine that there is some problem in th… --- ## [How to make Timeseries TSVB is broken line to connecting line?](https://discuss.elastic.co/t/how-to-make-timeseries-tsvb-is-broken-line-to-connecting-line/272567)
**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\ **Replies:** 3\ **Last updated:** [May 13, 2021, 8:49am UTC](https://discuss.elastic.co/t/how-to-make-timeseries-tsvb-is-broken-line-to-connecting-line/272567 "2021-05-13T08:49:27Z")
Hi Team, Please refer attached screenshot, line graph is broken after group by with terms aggregation. . Before group by aggregation . Please help me to get continuous line in TSVB Timeseries even with group by … --- ## [Link in Markdown panel to saved objects page for the current Kibana space?](https://discuss.elastic.co/t/link-in-markdown-panel-to-saved-objects-page-for-the-current-kibana-space/272596)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 2\ **Last updated:** [May 13, 2021, 6:57am UTC](https://discuss.elastic.co/t/link-in-markdown-panel-to-saved-objects-page-for-the-current-kibana-space/272596 "2021-05-13T06:57:33Z")
Can I specify a link in a Markdown panel that goes to the Saved Objects page: /s/space-name/app/management/kibana/objects for the current Kibana space (that is, without hardcoding the space name)? If so, how? #/manag… --- ## [Kafka to kibana](https://discuss.elastic.co/t/kafka-to-kibana/272883)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 0\ **Last updated:** [May 13, 2021, 6:34am UTC](https://discuss.elastic.co/t/kafka-to-kibana/272883 "2021-05-13T06:34:44Z")
hi, how to push to topic from kafka into logstash with two different index? can anyone suggest me that conf file? --- ## [Change .kibana index name](https://discuss.elastic.co/t/change-kibana-index-name/272812)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 2\ **Last updated:** [May 13, 2021, 6:02am UTC](https://discuss.elastic.co/t/change-kibana-index-name/272812 "2021-05-13T06:02:54Z")
hii to all, i need solution for, how to change default index name to custom name for .kibana? --- ## [Verifying Install of Proposed Setup](https://discuss.elastic.co/t/verifying-install-of-proposed-setup/272609)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 4\ **Last updated:** [May 13, 2021, 5:24am UTC](https://discuss.elastic.co/t/verifying-install-of-proposed-setup/272609 "2021-05-13T05:24:20Z")
Good Day, I've been working with many of you in the past few weeks and you all have been ULTRA HELPFUL. SO thanks for that. With that said, I'm finalizing my final setup / re-install and want to verify this works... I… --- ## [Query that return similar words](https://discuss.elastic.co/t/query-that-return-similar-words/272825)
**Author:** [@abdess](https://discuss.elastic.co/u/abdess)\ **Replies:** 3\ **Last updated:** [May 13, 2021, 5:16am UTC](https://discuss.elastic.co/t/query-that-return-similar-words/272825 "2021-05-13T05:16:43Z")
I have a document that contains "chnik" word in a field and i want to return it in the result if i search for "china" word. Query used: { "query": { "query\_string": { "query": "\*china\* \*chin\* … --- ## [Kibana converts any date and month to a specific date and month](https://discuss.elastic.co/t/kibana-converts-any-date-and-month-to-a-specific-date-and-month/272838)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 3\ **Last updated:** [May 13, 2021, 4:17am UTC](https://discuss.elastic.co/t/kibana-converts-any-date-and-month-to-a-specific-date-and-month/272838 "2021-05-13T04:17:41Z")
Hi All, I am facing issues in date format. I have dates in '2021-05-03 23:11:25.84' format. If I create mapping like: { "format": "YYYY-MM-DD HH:mm:ss.SSS||YYYY-MM-DD HH:mm: ss.SS ||YYYY-MM-DD HH:mm:ss.S", … --- ## [\[Question\] Use aggregation result to query documents in a single query to optimise calls to ES](https://discuss.elastic.co/t/question-use-aggregation-result-to-query-documents-in-a-single-query-to-optimise-calls-to-es/272775)
**Author:** [@RapTvin](https://discuss.elastic.co/u/RapTvin)\ **Replies:** 4\ **Last updated:** [May 13, 2021, 3:42am UTC](https://discuss.elastic.co/t/question-use-aggregation-result-to-query-documents-in-a-single-query-to-optimise-calls-to-es/272775 "2021-05-13T03:42:35Z")
Aggregate a max for a field and then query only those documents which contain the field equal to that aggregated result. Can we perform this operation so that we get the queried results also rather than giving an aggreg… --- ## [Daily Indexing (at Midnight)](https://discuss.elastic.co/t/daily-indexing-at-midnight/272867)
**Author:** [@inf](https://discuss.elastic.co/u/inf)\ **Replies:** 6\ **Last updated:** [May 13, 2021, 2:25am UTC](https://discuss.elastic.co/t/daily-indexing-at-midnight/272867 "2021-05-13T02:25:17Z")
Hi there, As I understand from this GitHub post and this Elastic Discuss post about having a new daily index (at midnight for my case), the solution to it is not Index Lifecycle Management. Instead, it should be using d… --- ## [Remove single quotes from a string](https://discuss.elastic.co/t/remove-single-quotes-from-a-string/272863)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 5\ **Last updated:** [May 13, 2021, 1:48am UTC](https://discuss.elastic.co/t/remove-single-quotes-from-a-string/272863 "2021-05-13T01:48:37Z")
How do I remove single quotes from the message field using Logstash gsub filter? I've tried the syntax below, and it didn't work. mutate { gsub =\> \[ "\[message\]", "'", "" \] } mutate { gsub =\> \[ "\[message\]… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=948) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=950)