# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=958

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 959

---

## [SQL expression to calculate the percentage](https://discuss.elastic.co/t/sql-expression-to-calculate-the-percentage/271732)

<div class="topic-metadata">

**Author:** [@saintjohn](https://discuss.elastic.co/u/saintjohn)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 2:36pm UTC](https://discuss.elastic.co/t/sql-expression-to-calculate-the-percentage/271732 "2021-05-04T14:36:36Z")

</div>

Hi experts, I have a dataset like below, separated with data range. Field name is set to "test" where number of "≧-∞ and \< 1" is 1, and "≧1 and \<+∞" is 15. What I'm trying to do is to add a metric element in the cent…

---

## [Show colored heading in the Kibana Dashboard](https://discuss.elastic.co/t/show-colored-heading-in-the-kibana-dashboard/272039)

<div class="topic-metadata">

**Author:** [@Manjula\_Piyumal](https://discuss.elastic.co/u/Manjula_Piyumal)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 2:32pm UTC](https://discuss.elastic.co/t/show-colored-heading-in-the-kibana-dashboard/272039 "2021-05-04T14:32:54Z")

</div>

Hi, I want to show a heading in my health check dashboard. Color of this heading should be able to change to Green, Yellow and Red depending on the health status. I could not find any straight forward way to create this…

---

## [Filter limit in Kibana visualisations](https://discuss.elastic.co/t/filter-limit-in-kibana-visualisations/272055)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 4\
**Last updated:** [May 4, 2021, 2:29pm UTC](https://discuss.elastic.co/t/filter-limit-in-kibana-visualisations/272055 "2021-05-04T14:29:10Z")

</div>

Hi! I have a script that creates a filter. In the future, this filter can be very large so it can filter around 1200 elements or more. Is there any limit on how many filters can be added in Kibana visualisations or dis…

---

## [Logstash with docker compose and grafana](https://discuss.elastic.co/t/logstash-with-docker-compose-and-grafana/272075)

<div class="topic-metadata">

**Author:** [@XXXPVSZYON](https://discuss.elastic.co/u/XXXPVSZYON)\
**Replies:** 0\
**Last updated:** [May 4, 2021, 2:07pm UTC](https://discuss.elastic.co/t/logstash-with-docker-compose-and-grafana/272075 "2021-05-04T14:07:26Z")

</div>

Hi, I'm working on my final degree work and i'm stuck uploading a .cvs from logstash to elasticsearch with Docker Compose. This is my Docker-Compose.yml: version: '3' services: grafana: image: grafana/grafana ports…

---

## [How many indices we can create at a time using logstash.conf?](https://discuss.elastic.co/t/how-many-indices-we-can-create-at-a-time-using-logstash-conf/272059)

<div class="topic-metadata">

**Author:** [@Learn\_Mulesoft\_With](https://discuss.elastic.co/u/Learn_Mulesoft_With)\
**Replies:** 3\
**Last updated:** [May 4, 2021, 1:50pm UTC](https://discuss.elastic.co/t/how-many-indices-we-can-create-at-a-time-using-logstash-conf/272059 "2021-05-04T13:50:22Z")

</div>

consider my logstash.conf input{ http{ host =\>"localhost" port =\>"5044" response\_code =\>201 type =\> "log\_error" } http{ host =\>"localhost" port =\>"5045" response\_code =\>201 type =\> "log\_message" } http{ ho…

---

## [Older version Link in machine learning mail alerts doesnt work with 7.12](https://discuss.elastic.co/t/older-version-link-in-machine-learning-mail-alerts-doesnt-work-with-7-12/271918)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 3\
**Last updated:** [May 4, 2021, 12:11pm UTC](https://discuss.elastic.co/t/older-version-link-in-machine-learning-mail-alerts-doesnt-work-with-7-12/271918 "2021-05-04T12:11:35Z")

</div>

Hi Im tring to send ML alert mail with the link to the anomaly explorer, im using the older version of the link (7.5) but it doesnt seems to work in the newer version 7.12 \<a href="\<es\_url\>/app/ml#/explorer/?\_g=(m…

---

## [Custom Visualisation](https://discuss.elastic.co/t/custom-visualisation/271623)

<div class="topic-metadata">

**Author:** [@mralladin](https://discuss.elastic.co/u/mralladin)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 12:22pm UTC](https://discuss.elastic.co/t/custom-visualisation/271623 "2021-05-04T12:22:43Z")

</div>

Hello I hope this is the correct category for my question and I wonder if this is even realisable in elastic. I want to create a custom visualisation for monitoring our interfaces as following: With filebeat I read th…

---

## [\[ES v7.9.1\] DateHistogram - OutOfMemory](https://discuss.elastic.co/t/es-v7-9-1-datehistogram-outofmemory/271840)

<div class="topic-metadata">

**Author:** [@sag-tobias-frey](https://discuss.elastic.co/u/sag-tobias-frey)\
**Replies:** 7\
**Last updated:** [May 4, 2021, 12:11pm UTC](https://discuss.elastic.co/t/es-v7-9-1-datehistogram-outofmemory/271840 "2021-05-04T12:11:28Z")

</div>

Hi, I have noticed that when using DateHistograms I'm often running out of memory and my Elasticsearch is crashing. Especially with lower configured intervals. I have tried to tweak Elasticsearch circuit breaker setting…

---

## [List all the full logs in a table Kibana](https://discuss.elastic.co/t/list-all-the-full-logs-in-a-table-kibana/271640)

<div class="topic-metadata">

**Author:** [@Izusa](https://discuss.elastic.co/u/Izusa)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 12:03pm UTC](https://discuss.elastic.co/t/list-all-the-full-logs-in-a-table-kibana/271640 "2021-05-04T12:03:24Z")

</div>

Hello ! I'm starting with Kibana and have a quick question. I have just separated my logs with Grok to have several distinct fields. Only, at the end of my dashboard I would like to have a table with my entire logs, bu…

---

## [Alerts and actions issue](https://discuss.elastic.co/t/alerts-and-actions-issue/270584)

<div class="topic-metadata">

**Author:** [@divakar\_maradana](https://discuss.elastic.co/u/divakar_maradana)\
**Replies:** 4\
**Last updated:** [May 4, 2021, 11:35am UTC](https://discuss.elastic.co/t/alerts-and-actions-issue/270584 "2021-05-04T11:35:40Z")

</div>

Hi Team, We are trying to integrate ELK to IPP application and trying to fetch the alert to IPP so i have created alert and connector using webhook. we have added the metric condition to fetch alerts eventhough alert i…

---

## [Dashboard embeded iframe CORS issue](https://discuss.elastic.co/t/dashboard-embeded-iframe-cors-issue/271681)

<div class="topic-metadata">

**Author:** [@Manuel\_Castro\_Romero](https://discuss.elastic.co/u/Manuel_Castro_Romero)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 11:09am UTC](https://discuss.elastic.co/t/dashboard-embeded-iframe-cors-issue/271681 "2021-05-04T11:09:17Z")

</div>

Tried to embed a kibana iframe into my SPA built with react. I try to adjusting the height of the iframe to fit with its content this is a code snips of who I am trying to do it: const Iframe = ({ url }) =\> { const …

---

## [Kibana Dashboard - define his own index pattern](https://discuss.elastic.co/t/kibana-dashboard-define-his-own-index-pattern/270881)

<div class="topic-metadata">

**Author:** [@pestevao](https://discuss.elastic.co/u/pestevao)\
**Replies:** 3\
**Last updated:** [May 4, 2021, 9:46am UTC](https://discuss.elastic.co/t/kibana-dashboard-define-his-own-index-pattern/270881 "2021-05-04T09:46:05Z")

</div>

Hi all, I'm trying to apply some filter in a Kibana dashboard with no success because it will be applyed to the defined global default index pattern and this Dashboard visualizations get all their data from other index …

---

## [How to trace/log all delete action](https://discuss.elastic.co/t/how-to-trace-log-all-delete-action/272054)

<div class="topic-metadata">

**Author:** [@Michael\_Oullion](https://discuss.elastic.co/u/Michael_Oullion)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 9:44am UTC](https://discuss.elastic.co/t/how-to-trace-log-all-delete-action/272054 "2021-05-04T09:44:21Z")

</div>

Hi, I have a shared ELK in my Enterprise and we need to trace/log 2 type of action : Delete Index by API DELETE Call Delete doc by Delete\_by\_query I try without success with Audit and slowlog. Is there a way to have…

---

## [Kibana stack monitoring graphs is not clear](https://discuss.elastic.co/t/kibana-stack-monitoring-graphs-is-not-clear/271875)

<div class="topic-metadata">

**Author:** [@fatihtekin](https://discuss.elastic.co/u/fatihtekin)\
**Replies:** 4\
**Last updated:** [May 4, 2021, 9:31am UTC](https://discuss.elastic.co/t/kibana-stack-monitoring-graphs-is-not-clear/271875 "2021-05-04T09:31:58Z")

</div>

I upgraded elasticsearch and kibana version from 7.5 to 7.12. I have seen unclear stack monitoring graphs after the upgrade process. I don't understand why it happens. I added screenshots. Can you help me with why it hap…

---

## [Output Elasticsearch index name error](https://discuss.elastic.co/t/output-elasticsearch-index-name-error/271979)

<div class="topic-metadata">

**Author:** [@Frack](https://discuss.elastic.co/u/Frack)\
**Replies:** 3\
**Last updated:** [May 4, 2021, 9:25am UTC](https://discuss.elastic.co/t/output-elasticsearch-index-name-error/271979 "2021-05-04T09:25:45Z")

</div>

I have a "logstash" index with documents while I have hardcoded the name of the output index by the tags. when I check in the index "logstash" my logs have the right tag "windows" or "iptable" ... I added a final "else…

---

## [Remote cluster - TCP connection is not happened with Istio ingress](https://discuss.elastic.co/t/remote-cluster-tcp-connection-is-not-happened-with-istio-ingress/271040)

<div class="topic-metadata">

**Author:** [@rmssath](https://discuss.elastic.co/u/rmssath)\
**Replies:** 3\
**Last updated:** [May 4, 2021, 8:57am UTC](https://discuss.elastic.co/t/remote-cluster-tcp-connection-is-not-happened-with-istio-ingress/271040 "2021-05-04T08:57:01Z")

</div>

Hi Team, We have followed the below step to configure remote cluster. In remote cluster, we have create istio ingress gateway/virtualservice with TCP to expose the service. apiVersion: networking.istio.io/v1alpha3 k…

---

## [Elasticsearch 7.9, set or not manually JVM heap memory](https://discuss.elastic.co/t/elasticsearch-7-9-set-or-not-manually-jvm-heap-memory/272041)

<div class="topic-metadata">

**Author:** [@parallelism](https://discuss.elastic.co/u/parallelism)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-7-9-set-or-not-manually-jvm-heap-memory/272041 "2021-05-04T08:22:51Z")

</div>

Hello, We are deploying an Elasticsearch 7.9.3 cluster in a production environment. About setting or not the Java heap memory assignment, we find in the documentation something that seems a little contradictory. Accord…

---

## [Is Elasticsearch going to sleep after some hours?](https://discuss.elastic.co/t/is-elasticsearch-going-to-sleep-after-some-hours/272035)

<div class="topic-metadata">

**Author:** [@JdKock](https://discuss.elastic.co/u/JdKock)\
**Replies:** 9\
**Last updated:** [May 4, 2021, 8:20am UTC](https://discuss.elastic.co/t/is-elasticsearch-going-to-sleep-after-some-hours/272035 "2021-05-04T08:20:34Z")

</div>

We are using Elasticsearch (v7.3.2) for our search solution and we use a Java API to get the search results from Elasticsearch. This is working fine. In the Test environment we are not using Elasticsearch everyday. What…

---

## [How to configure GREDDYDATA in logstash to take mutiline input](https://discuss.elastic.co/t/how-to-configure-greddydata-in-logstash-to-take-mutiline-input/272046)

<div class="topic-metadata">

**Author:** [@Learn\_Mulesoft\_With](https://discuss.elastic.co/u/Learn_Mulesoft_With)\
**Replies:** 0\
**Last updated:** [May 4, 2021, 7:46am UTC](https://discuss.elastic.co/t/how-to-configure-greddydata-in-logstash-to-take-mutiline-input/272046 "2021-05-04T07:46:33Z")

</div>

INFO 2021-04-17 21:40:25,689 \[\[MuleRuntime\].uber.01: \[testproject\].testprojectFlow.CPU\_LITE @4d779882\] \[processor: testprojectFlow/processors/0; event: 6b78a980-9f97-11eb-a8e6-f8ac6500be0e\] org.mule.runtime.core.interna…

---

## [Issues with "Analyzing Windows Host Data" Course](https://discuss.elastic.co/t/issues-with-analyzing-windows-host-data-course/271821)

<div class="topic-metadata">

**Author:** [@merium.khalid](https://discuss.elastic.co/u/merium.khalid)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 7:35am UTC](https://discuss.elastic.co/t/issues-with-analyzing-windows-host-data-course/271821 "2021-05-04T07:35:50Z")

</div>

When trying to do the Lab for the course “Analyzing Windows Host Data”. I am unable to get to the Kibana instance on “https://ec2-35-157-116-2.eu-central-1.compute.amazonaws.com:5601/app/kibana#”. I was able to obtain th…

---

## [Thread Pool max Size and Number of Processor](https://discuss.elastic.co/t/thread-pool-max-size-and-number-of-processor/271971)

<div class="topic-metadata">

**Author:** [@mani1](https://discuss.elastic.co/u/mani1)\
**Replies:** 10\
**Last updated:** [May 4, 2021, 7:25am UTC](https://discuss.elastic.co/t/thread-pool-max-size-and-number-of-processor/271971 "2021-05-04T07:25:03Z")

</div>

Hi, In latest elasticSearch Version 7 series, How to decide the maximum Search Thread Pool Size, will it depends on number of vCPUs , and decided by the formula (vCPU\*3/2)+1 OR the max size still is based on 32 vCPUs a…

---

## [Join indexes in Kibana](https://discuss.elastic.co/t/join-indexes-in-kibana/271885)

<div class="topic-metadata">

**Author:** [@Tulay](https://discuss.elastic.co/u/Tulay)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 6:37am UTC](https://discuss.elastic.co/t/join-indexes-in-kibana/271885 "2021-05-04T06:37:39Z")

</div>

How can we join two indexes , if we want to join by a specific field of each index in Kibana

---

## [Synonym filter not working within a Multiplexer Filter](https://discuss.elastic.co/t/synonym-filter-not-working-within-a-multiplexer-filter/271719)

<div class="topic-metadata">

**Author:** [@gquaire](https://discuss.elastic.co/u/gquaire)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 5:53am UTC](https://discuss.elastic.co/t/synonym-filter-not-working-within-a-multiplexer-filter/271719 "2021-05-04T05:53:06Z")

</div>

Hello, I'm using Elasticsearch v7.6.2. I am currently trying to create an custom analyser that uses a MultiplexerFilter with only one filters branc. This branch contains only a SynonymFilter. My goal is to keep original…

---

## [Grok regex, How should I interpret the hour pattern?](https://discuss.elastic.co/t/grok-regex-how-should-i-interpret-the-hour-pattern/272030)

<div class="topic-metadata">

**Author:** [@111420](https://discuss.elastic.co/u/111420)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 5:33am UTC](https://discuss.elastic.co/t/grok-regex-how-should-i-interpret-the-hour-pattern/272030 "2021-05-04T05:33:59Z")

</div>

In Logstash, does HOUR's regular expression (?:2\[0123\]|\[01\])?\[0-9\]) I wonder what the number after the colon means and how to interpret the whole thing.

---

## [Get number of unique results from multiple indices](https://discuss.elastic.co/t/get-number-of-unique-results-from-multiple-indices/271401)

<div class="topic-metadata">

**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\
**Replies:** 2\
**Last updated:** [May 3, 2021, 7:37pm UTC](https://discuss.elastic.co/t/get-number-of-unique-results-from-multiple-indices/271401 "2021-05-03T19:37:21Z")

</div>

I have 5 indices: all of them with the same schema, so each one of them represents a dataset among many datasets. Each one of them is around 1Tb of size. I want to issue a query to all of the indices at the same time and…

---

## [Multiple indices for single logstash pipeline](https://discuss.elastic.co/t/multiple-indices-for-single-logstash-pipeline/272015)

<div class="topic-metadata">

**Author:** [@srk1](https://discuss.elastic.co/u/srk1)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 12:12am UTC](https://discuss.elastic.co/t/multiple-indices-for-single-logstash-pipeline/272015 "2021-05-04T00:12:31Z")

</div>

Hello ES users, i have filebeat instance sending one source log to ES via logstash pipeline. Now, i want to add another file on filebeat input list and use the same logstash pipeline but write to a different new index. C…

---

## [Different field type on couple shards](https://discuss.elastic.co/t/different-field-type-on-couple-shards/272019)

<div class="topic-metadata">

**Author:** [@rh\_es](https://discuss.elastic.co/u/rh_es)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 12:09am UTC](https://discuss.elastic.co/t/different-field-type-on-couple-shards/272019 "2021-05-04T00:09:42Z")

</div>

Hello. Somehow the type of one field in two shards is different of type at entire index and rest of the shards. As result some queries that rely on the field having specific type (number) are impacted. I know that it is …

---

## [Failed to start Kibana with HTTPS](https://discuss.elastic.co/t/failed-to-start-kibana-with-https/271943)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 12\
**Last updated:** [May 3, 2021, 10:48pm UTC](https://discuss.elastic.co/t/failed-to-start-kibana-with-https/271943 "2021-05-03T22:48:30Z")

</div>

Hi I have a cluster with two nodes and two nginx I configured ssl tls and https between 2nodes and kibana, but unfortunately my kibana does not open :frowning\_face: I followed step by step with the bellow link: This…

---

## [Force logstash to restart after "Pipeline aborted due to error"](https://discuss.elastic.co/t/force-logstash-to-restart-after-pipeline-aborted-due-to-error/272007)

<div class="topic-metadata">

**Author:** [@wmd](https://discuss.elastic.co/u/wmd)\
**Replies:** 4\
**Last updated:** [May 3, 2021, 9:45pm UTC](https://discuss.elastic.co/t/force-logstash-to-restart-after-pipeline-aborted-due-to-error/272007 "2021-05-03T21:45:51Z")

</div>

Logstash v6.3.1 is logging this at startup and then getting stuck forever: Sending Logstash's logs to /usr/share/logstash/logs which is now configured via log4j2.properties \[2021-04-30T13:05:39,258\]\[ERROR\]\[logstash.pipe…

---

## [Kibana not loading after providing credential, It is coming back to login page itself](https://discuss.elastic.co/t/kibana-not-loading-after-providing-credential-it-is-coming-back-to-login-page-itself/267086)

<div class="topic-metadata">

**Author:** [@r\_aravind](https://discuss.elastic.co/u/r_aravind)\
**Replies:** 10\
**Last updated:** [May 3, 2021, 7:53pm UTC](https://discuss.elastic.co/t/kibana-not-loading-after-providing-credential-it-is-coming-back-to-login-page-itself/267086 "2021-05-03T19:53:43Z")

</div>

I have setup my ELK stack kibana instance in Azure kubernetes. I have exposed my kibana service to external load balancer and accessing the load balancer service using DNS from NGINX ingress. I have tried accessing elas…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=957)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=959)
