# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=963 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 964 --- ## [Can Kibana serve static HTML files?](https://discuss.elastic.co/t/can-kibana-serve-static-html-files/271062)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 7\ **Last updated:** [April 29, 2021, 2:44pm UTC](https://discuss.elastic.co/t/can-kibana-serve-static-html-files/271062 "2021-04-29T14:44:53Z")
I'd like to front-end a set of related Kibana dashboards with a static web page that displays a set of tiles with links to those dashboards: This is just a skeleton layout: The color and sizing specs are temporary … --- ## [Filebeat and multiline events](https://discuss.elastic.co/t/filebeat-and-multiline-events/271665)
**Author:** [@the3rdway](https://discuss.elastic.co/u/the3rdway)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 2:42pm UTC](https://discuss.elastic.co/t/filebeat-and-multiline-events/271665 "2021-04-29T14:42:16Z")
I'm working with a virtual appliance that has Filebeat baked in. I have no control over the Filebeat configuration, which is forwarding multiple files of different formats. I can filter on source and grab the file that… --- ## [Kibana Visuals - count number of customers with more than X buys](https://discuss.elastic.co/t/kibana-visuals-count-number-of-customers-with-more-than-x-buys/271107)
**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\ **Replies:** 7\ **Last updated:** [April 29, 2021, 2:38pm UTC](https://discuss.elastic.co/t/kibana-visuals-count-number-of-customers-with-more-than-x-buys/271107 "2021-04-29T14:38:26Z")
Hi all, Image that i have in elastic something like: Customer id Product I need to create a metric that tells me the number of customers that bought the product Y more than X time. Example number of customer that bo… --- ## [TSVB timeseries broken?](https://discuss.elastic.co/t/tsvb-timeseries-broken/271548)
**Author:** [@wlbsxnlp22](https://discuss.elastic.co/u/wlbsxnlp22)\ **Replies:** 6\ **Last updated:** [April 29, 2021, 2:37pm UTC](https://discuss.elastic.co/t/tsvb-timeseries-broken/271548 "2021-04-29T14:37:13Z")
Hi The following is an attempt to display average response times across our different systems in one TSVB Timeseries. Each series has its own separate index pattern. (There is no index main index pattern in panel optio… --- ## [Unable to install specific logstash version in Ubuntu](https://discuss.elastic.co/t/unable-to-install-specific-logstash-version-in-ubuntu/271663)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 2:22pm UTC](https://discuss.elastic.co/t/unable-to-install-specific-logstash-version-in-ubuntu/271663 "2021-04-29T14:22:48Z")
I want to install logstash 7.11.1 in Ubuntu 18.04 but getting below error while trying to install: ubuntu@ip-xxx-xx-xx-xxx:~$ sudo apt-get install logstash=7.11.1 Reading package lists... Done Building dependency tree … --- ## [Increase shards without changing index name](https://discuss.elastic.co/t/increase-shards-without-changing-index-name/271409)
**Author:** [@ggio](https://discuss.elastic.co/u/ggio)\ **Replies:** 3\ **Last updated:** [April 29, 2021, 2:11pm UTC](https://discuss.elastic.co/t/increase-shards-without-changing-index-name/271409 "2021-04-29T14:11:28Z")
Hi, I have a couple of indexes which are very big and I want to increase the shards number. Split index API offered by ES seems to be very interesting and useful for my case but it requires to change the index name. W… --- ## [Highlight feature - limitToMaxAnalyzedOffset - does still exist?](https://discuss.elastic.co/t/highlight-feature-limittomaxanalyzedoffset-does-still-exist/271644)
**Author:** [@jlarroque](https://discuss.elastic.co/u/jlarroque)\ **Replies:** 2\ **Last updated:** [April 29, 2021, 1:45pm UTC](https://discuss.elastic.co/t/highlight-feature-limittomaxanalyzedoffset-does-still-exist/271644 "2021-04-29T13:45:31Z")
Hi everyone, I was wondering if you could help me. I found an interesting feature added in a specific PR: But I can't find documentation of how to use that using java HighLevel rest client. Was that removed? That PR … --- ## [ElasticsearchException got in indexing function: TransportError](https://discuss.elastic.co/t/elasticsearchexception-got-in-indexing-function-transporterror/271195)
**Author:** [@sanjay\_sheel](https://discuss.elastic.co/u/sanjay_sheel)\ **Replies:** 3\ **Last updated:** [April 29, 2021, 11:47am UTC](https://discuss.elastic.co/t/elasticsearchexception-got-in-indexing-function-transporterror/271195 "2021-04-29T11:47:25Z")
\[17:15:47\]{completed\_searching2.py:346}ERROR- Error Occured: Exception in indexing function: ElasticsearchException got in indexing function: TransportError(429, 'circuit\_breaking\_exception', '\[parent\] Data too large, da… --- ## [Update a single field vs Inserting the whole document again](https://discuss.elastic.co/t/update-a-single-field-vs-inserting-the-whole-document-again/271607)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 11:33am UTC](https://discuss.elastic.co/t/update-a-single-field-vs-inserting-the-whole-document-again/271607 "2021-04-29T11:33:44Z")
Which one is more costly operation? Suppose I have 50 fields per document in an index. Updating a single field in a document Or, Re-inserting the complete whole document with that changed field. Basically \_update vs … --- ## [Can't we get total number of matches in \_search api?](https://discuss.elastic.co/t/cant-we-get-total-number-of-matches-in-search-api/271612)
**Author:** [@raja\_augstin](https://discuss.elastic.co/u/raja_augstin)\ **Replies:** 3\ **Last updated:** [April 29, 2021, 11:29am UTC](https://discuss.elastic.co/t/cant-we-get-total-number-of-matches-in-search-api/271612 "2021-04-29T11:29:48Z")
can't we get total number of matches in \_search api? i'm using following search api to get total matched document and to find number of match for the given query. in this we don't receive the actual total match for th… --- ## [Indexing with deprecated \_type field](https://discuss.elastic.co/t/indexing-with-deprecated-type-field/271478)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 16\ **Last updated:** [April 29, 2021, 11:11am UTC](https://discuss.elastic.co/t/indexing-with-deprecated-type-field/271478 "2021-04-29T11:11:52Z")
Hello community. I have a question. What happens in elasticsearch 7.10 if a write attempt occurs with deprecated \_type field (we use apache metron, that tries to write to elastic), something like this "{"index":{"\_ind… --- ## [Please add count for selected indices](https://discuss.elastic.co/t/please-add-count-for-selected-indices/271610)
**Author:** [@Nurlan199206](https://discuss.elastic.co/u/Nurlan199206)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 10:07am UTC](https://discuss.elastic.co/t/please-add-count-for-selected-indices/271610 "2021-04-29T10:07:52Z")
I have a suggestion, if possible you can add items count for selected indices? it is difficult to count manually. --- ## [Remote node cluster join](https://discuss.elastic.co/t/remote-node-cluster-join/271488)
**Author:** [@Makss39](https://discuss.elastic.co/u/Makss39)\ **Replies:** 12\ **Last updated:** [April 29, 2021, 9:31am UTC](https://discuss.elastic.co/t/remote-node-cluster-join/271488 "2021-04-29T09:31:40Z")
Hi, I've a 3 node cluster on my local network, it works like a charm. I just want to add a 4th node, but on another nework. But i'm not able to perform the discovery, my local master is well discovered by the remote no… --- ## [Search - keyword vs text and ngram](https://discuss.elastic.co/t/search-keyword-vs-text-and-ngram/271606)
**Author:** [@lele15](https://discuss.elastic.co/u/lele15)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 9:21am UTC](https://discuss.elastic.co/t/search-keyword-vs-text-and-ngram/271606 "2021-04-29T09:21:36Z")
Hi, I have an index like: "name": { "type": "keyword" }, "address": { "type": "keyword" }, "addressText": { "type": "text", "analyzer": "autocomplete", "search\_analyzer": "autocomplete\_search" }, "nameText":… --- ## [Mapping Explosion for Kubernetes/Openshift Index](https://discuss.elastic.co/t/mapping-explosion-for-kubernetes-openshift-index/271418)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 5\ **Last updated:** [April 29, 2021, 8:54am UTC](https://discuss.elastic.co/t/mapping-explosion-for-kubernetes-openshift-index/271418 "2021-04-29T08:54:21Z")
Hi folks, I am shipping application logs using filebeat daemonset (7.9.0) from openshift to elasticsearch (7.6.2) Right now I am running into following warnings: "Limit of total fields \[10000\] in index \[filebeat-opens… --- ## [Elasticsearch Disk indices storage greater than the indices used space](https://discuss.elastic.co/t/elasticsearch-disk-indices-storage-greater-than-the-indices-used-space/271328)
**Author:** [@Ahmed\_Abdulaleem](https://discuss.elastic.co/u/Ahmed_Abdulaleem)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 8:07am UTC](https://discuss.elastic.co/t/elasticsearch-disk-indices-storage-greater-than-the-indices-used-space/271328 "2021-04-29T08:07:54Z")
I have an issue with disk space as the disk indices greater than size of index as shown in the attached file. can anyone help me to understand why the data much greater than actual index size as sum of storage o… --- ## [\[processors\] required property is missing](https://discuss.elastic.co/t/processors-required-property-is-missing/271554)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 6\ **Last updated:** [April 29, 2021, 7:17am UTC](https://discuss.elastic.co/t/processors-required-property-is-missing/271554 "2021-04-29T07:17:26Z")
I am creating a ingest pipeline for custom index for Azure activity log with same configurations it has for Filebeat index. I copied pipeline content from \_ingest/pipeline. Due to character limit, I am unable to paste th… --- ## [Sankey Chart](https://discuss.elastic.co/t/sankey-chart/270335)
**Author:** [@Ashvin\_Bhutekar](https://discuss.elastic.co/u/Ashvin_Bhutekar)\ **Replies:** 9\ **Last updated:** [April 29, 2021, 6:58am UTC](https://discuss.elastic.co/t/sankey-chart/270335 "2021-04-29T06:58:03Z")
Is it possible to create 4 level (or more ) sankey chart? --- ## [Structured logging with Filebeat](https://discuss.elastic.co/t/structured-logging-with-filebeat/269383)
**Author:** [@vharabor](https://discuss.elastic.co/u/vharabor)\ **Replies:** 11\ **Last updated:** [April 29, 2021, 6:42am UTC](https://discuss.elastic.co/t/structured-logging-with-filebeat/269383 "2021-04-29T06:42:59Z")
Signed up for the elastic trial and quickly got the Filebeat up and running and getting docker statistics to Elasticsearch. I'm really stuck in trying to add any kind of structured logging to kibana. I've tried to add… --- ## [Index sorting causes illegal\_state\_exception](https://discuss.elastic.co/t/index-sorting-causes-illegal-state-exception/271592)
**Author:** [@buinauskas\_evaldas](https://discuss.elastic.co/u/buinauskas_evaldas)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 6:23am UTC](https://discuss.elastic.co/t/index-sorting-causes-illegal-state-exception/271592 "2021-04-29T06:23:52Z")
Heavily inspired by the Introducing Index Sorting in Elasticsearch 6.0 | Elastic Blog article I went to try index sorting out for faster AND conjunctions. This is my index structure: { "index\_name": { "mappings":… --- ## [Kibana 4 to 7 update](https://discuss.elastic.co/t/kibana-4-to-7-update/271072)
**Author:** [@cesar.hernandez.a3se](https://discuss.elastic.co/u/cesar.hernandez.a3se)\ **Replies:** 6\ **Last updated:** [April 29, 2021, 6:14am UTC](https://discuss.elastic.co/t/kibana-4-to-7-update/271072 "2021-04-29T06:14:29Z")
Hi I have a kibana 4.1.2 and I'm wondering if it's possible to update it right to the last kibana 7 version, or maybe I have to update first to an intermediate version (5, 6?) Thanks --- ## [Individual Tokens are not searched when a synonym rule is matched](https://discuss.elastic.co/t/individual-tokens-are-not-searched-when-a-synonym-rule-is-matched/270933)
**Author:** [@jacksumit](https://discuss.elastic.co/u/jacksumit)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 4:50am UTC](https://discuss.elastic.co/t/individual-tokens-are-not-searched-when-a-synonym-rule-is-matched/270933 "2021-04-29T04:50:08Z")
Elasticsearch 7.10.2 Description: When using synonym\_graph filter, and if a synonym rule is matched, Elastic is not searching for individual tokens. I have defined below synonym rule. "synonyms": \[ … --- ## [How to List Indices based on their settings](https://discuss.elastic.co/t/how-to-list-indices-based-on-their-settings/271345)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 6\ **Last updated:** [April 29, 2021, 4:47am UTC](https://discuss.elastic.co/t/how-to-list-indices-based-on-their-settings/271345 "2021-04-29T04:47:01Z")
Hello Team I am using Elasticsearch 5.6.3 version. I know its old , we are in process of upgrading the cluster. I have a question , How to list Indexes which are having particular settings like : The ones which are ma… --- ## [Password policy configuration](https://discuss.elastic.co/t/password-policy-configuration/271531)
**Author:** [@nadia.a](https://discuss.elastic.co/u/nadia.a)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 4:18am UTC](https://discuss.elastic.co/t/password-policy-configuration/271531 "2021-04-29T04:18:58Z")
Hello is there any advancement with the new release regarding password policy configuration? how is it possible today to enforce the password choice through kibana? Thank you for your answers --- ## [Sorting logevent datetime in asc order](https://discuss.elastic.co/t/sorting-logevent-datetime-in-asc-order/271532)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 3:57am UTC](https://discuss.elastic.co/t/sorting-logevent-datetime-in-asc-order/271532 "2021-04-29T03:57:27Z")
Hello Team, We have multiple logline for requestID & responseID. we need to identify which requestID & responseID come first and calculate difference between theses requestID time & responseID time. Request Log: OUT 2… --- ## [Kibanaで２つの時間項目の差を統計表示したい](https://discuss.elastic.co/t/kibana/271308)
**Author:** [@vavan](https://discuss.elastic.co/u/vavan)\ **Replies:** 2\ **Last updated:** [April 29, 2021, 3:54am UTC](https://discuss.elastic.co/t/kibana/271308 "2021-04-29T03:54:53Z")
どなたかご存知の方がいたら教えて下さい。 ２つのDate型の項目（TimeA,TimeB) を持つIndexで、その２項目の時間の差をグラフに統計表示したいと思っています。 TimeB\>TimeA の前提なので、スクリプトフィールドで書けると思ったのですが、うまく書けません。 もしかしたら、Visualizationにある「高度な設定＞Json Input を使って実現でき ますか？（あれは複数項目を跨いだ演算はできない、という… --- ## [How to expand elasticsearch memory disk size](https://discuss.elastic.co/t/how-to-expand-elasticsearch-memory-disk-size/271348)
**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\ **Replies:** 6\ **Last updated:** [April 29, 2021, 2:51am UTC](https://discuss.elastic.co/t/how-to-expand-elasticsearch-memory-disk-size/271348 "2021-04-29T02:51:02Z")
Hi elasticsearch team, I have this case where my VM size is 110gb. Then my freshly installed elasticsearch have 58gb maximum disk available. How do I Optimize my elasticsearch disk available? This cluster is a single n… --- ## [How to return default value for getCell](https://discuss.elastic.co/t/how-to-return-default-value-for-getcell/271565)
**Author:** [@tangkalo](https://discuss.elastic.co/u/tangkalo)\ **Replies:** 3\ **Last updated:** [April 29, 2021, 2:21am UTC](https://discuss.elastic.co/t/how-to-return-default-value-for-getcell/271565 "2021-04-29T02:21:54Z")
Hi, I have the following canvas expression that uses getCell against a data source but it may return null, i.e.the kql returns nothing. Is there a way I can make getCell to return a default value when that happens. Any h… --- ## [Configuration reloading can't be used with 'config.string' (-e)](https://discuss.elastic.co/t/configuration-reloading-cant-be-used-with-config-string-e/271576)
**Author:** [@PAVAN\_KUMAR\_REDDY\_GP](https://discuss.elastic.co/u/PAVAN_KUMAR_REDDY_GP)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 1:10am UTC](https://discuss.elastic.co/t/configuration-reloading-cant-be-used-with-config-string-e/271576 "2021-04-29T01:10:00Z")
Hi Team, Getting an error " Configuration reloading can't be used with 'config.string' (-e)" while running logstash with below command. I tried testing the command in logstash version 7.6.2 and 7.9.2 . Can you please … --- ## [Wildcard query string](https://discuss.elastic.co/t/wildcard-query-string/271572)
**Author:** [@jrojasp95](https://discuss.elastic.co/u/jrojasp95)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 12:37am UTC](https://discuss.elastic.co/t/wildcard-query-string/271572 "2021-04-29T00:37:30Z")
Hello I need to use wildcards to query about the full\_name and pedt\_fechanac fields, since the input values ​​come from an OCR, I also need the score to be able to get the best match Any recommendation Thank you FIEL… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=962) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=964)