# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=986

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 987

---

## [Epoch to readable timestamp](https://discuss.elastic.co/t/epoch-to-readable-timestamp/269623)

<div class="topic-metadata">

**Author:** [@gneves](https://discuss.elastic.co/u/gneves)\
**Replies:** 1\
**Last updated:** [April 8, 2021, 5:51pm UTC](https://discuss.elastic.co/t/epoch-to-readable-timestamp/269623 "2021-04-08T17:51:52Z")

</div>

Hello guys. Hope you are doing well. Im having a little problem trying to convert an event time in epoch to a readable timestamp, per example in UTC. So, the log that i have is something like this: event\_time=1613523…

---

## [Elasticsearch stuck applyingchanges and reconciliation ended with failed predicates](https://discuss.elastic.co/t/elasticsearch-stuck-applyingchanges-and-reconciliation-ended-with-failed-predicates/268954)

<div class="topic-metadata">

**Author:** [@fozzylyon](https://discuss.elastic.co/u/fozzylyon)\
**Replies:** 3\
**Last updated:** [April 8, 2021, 5:04pm UTC](https://discuss.elastic.co/t/elasticsearch-stuck-applyingchanges-and-reconciliation-ended-with-failed-predicates/268954 "2021-04-08T17:04:28Z")

</div>

ECK 1.0.1 k8s 1.16.9 The ECK operator's been stellar. But I ran into trouble deploying node resource and count changes at the same time. In one cluster, it seems to have worked as expected, but in another the elastic…

---

## [Composite Query and Aggregation results different doc\_count value](https://discuss.elastic.co/t/composite-query-and-aggregation-results-different-doc-count-value/269626)

<div class="topic-metadata">

**Author:** [@amr1](https://discuss.elastic.co/u/amr1)\
**Replies:** 0\
**Last updated:** [April 8, 2021, 4:41pm UTC](https://discuss.elastic.co/t/composite-query-and-aggregation-results-different-doc-count-value/269626 "2021-04-08T16:41:57Z")

</div>

I am trying to query on my data set with composite query. Here is my Query 1: curl -X POST "localhost:9200/index1-202103/\_search?size=0&pretty" -H 'Content-Type: application/json' -d' { "query": {"bool": {"filter": \[{ …

---

## [XML parser, alter field](https://discuss.elastic.co/t/xml-parser-alter-field/269415)

<div class="topic-metadata">

**Author:** [@Soren\_vdc](https://discuss.elastic.co/u/Soren_vdc)\
**Replies:** 3\
**Last updated:** [April 8, 2021, 3:55pm UTC](https://discuss.elastic.co/t/xml-parser-alter-field/269415 "2021-04-08T15:55:29Z")

</div>

Hi, I have this setup for XML parser: xml { source =\> "message" target =\> "xml" add\_field =\> { Audit\_Type =\> "%{\[xml\]\[Audit\_Type\]}" Ext\_Name …

---

## [Kibana Road Map layer is not showing](https://discuss.elastic.co/t/kibana-road-map-layer-is-not-showing/269574)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 4\
**Last updated:** [April 8, 2021, 3:49pm UTC](https://discuss.elastic.co/t/kibana-road-map-layer-is-not-showing/269574 "2021-04-08T15:49:46Z")

</div>

I am using elk stack 7.11 , the road map layer is not showing

---

## [Clickable URL kibana 7.11](https://discuss.elastic.co/t/clickable-url-kibana-7-11/269476)

<div class="topic-metadata">

**Author:** [@Chaimaa\_ABD](https://discuss.elastic.co/u/Chaimaa_ABD)\
**Replies:** 5\
**Last updated:** [April 8, 2021, 3:47pm UTC](https://discuss.elastic.co/t/clickable-url-kibana-7-11/269476 "2021-04-08T15:47:52Z")

</div>

How to display a field as a clickable URL in data table visualization in kibana 7.11 ? I tried to format the field but it doesn't work

---

## [Show all unique values](https://discuss.elastic.co/t/show-all-unique-values/269606)

<div class="topic-metadata">

**Author:** [@Andrey\_RF](https://discuss.elastic.co/u/Andrey_RF)\
**Replies:** 3\
**Last updated:** [April 8, 2021, 3:30pm UTC](https://discuss.elastic.co/t/show-all-unique-values/269606 "2021-04-08T15:30:00Z")

</div>

I have a field and I need to get all unique values by this field in table or something else. Does it have some tools for it ?

---

## [Elastic No mapping found for \[\_shard\_doc\] in order to sort on](https://discuss.elastic.co/t/elastic-no-mapping-found-for-shard-doc-in-order-to-sort-on/268188)

<div class="topic-metadata">

**Author:** [@111452](https://discuss.elastic.co/u/111452)\
**Replies:** 4\
**Last updated:** [April 8, 2021, 2:11pm UTC](https://discuss.elastic.co/t/elastic-no-mapping-found-for-shard-doc-in-order-to-sort-on/268188 "2021-04-08T14:11:32Z")

</div>

I'm trying to use search after parameter in the query to retrieve the next page as it says in Paginate search results | Elasticsearch Reference \[7.12\] | Elastic. If I sort it like "sort": \[ {"@timestamp": "asc"}, …

---

## [Does Search Alert in 7.12 include query?](https://discuss.elastic.co/t/does-search-alert-in-7-12-include-query/269572)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 4\
**Last updated:** [April 8, 2021, 2:10pm UTC](https://discuss.elastic.co/t/does-search-alert-in-7-12-include-query/269572 "2021-04-08T14:10:36Z")

</div>

Dear all =) When I read the summary for https://github.com/elastic/kibana/pull/88528 it says New stack alert for executing ES DSL (query only, no aggregation support) and evaluating the number of matches against a thr…

---

## [Remote Access Available But Local Access Not Available](https://discuss.elastic.co/t/remote-access-available-but-local-access-not-available/268752)

<div class="topic-metadata">

**Author:** [@sewox](https://discuss.elastic.co/u/sewox)\
**Replies:** 22\
**Last updated:** [April 8, 2021, 1:53pm UTC](https://discuss.elastic.co/t/remote-access-available-but-local-access-not-available/268752 "2021-04-08T13:53:43Z")

</div>

Hi Everyone, I can access it remotely elasticsearch but I can't access local with PHP driver. \<?php ini\_set('display\_errors', 1); ini\_set('display\_startup\_errors', 1); error\_reporting(E\_ALL); requi…

---

## [Dot in field names in ES7.11](https://discuss.elastic.co/t/dot-in-field-names-in-es7-11/269588)

<div class="topic-metadata">

**Author:** [@AneskaFrisbib](https://discuss.elastic.co/u/AneskaFrisbib)\
**Replies:** 1\
**Last updated:** [April 8, 2021, 1:05pm UTC](https://discuss.elastic.co/t/dot-in-field-names-in-es7-11/269588 "2021-04-08T13:05:31Z")

</div>

Hello, I currently have the same problem as the one described here : How to handle dot in field names in ES 7.0 Unfortunately, I can't modify the document field names as suggested in the last update. Is there any othe…

---

## [Elasticsearch query time range issue](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672)

<div class="topic-metadata">

**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\
**Replies:** 50\
**Last updated:** [April 8, 2021, 12:41pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672 "2021-04-08T12:41:54Z")

</div>

Hello Experts, I am not able to retrieve all the status\_code values with below query. It has given only less value than actual values. \*\*My query\*\* "\_source": \[ "status\_code", "referrer", "timestamp" \], "query":…

---

## [I want to input row of csv file](https://discuss.elastic.co/t/i-want-to-input-row-of-csv-file/269538)

<div class="topic-metadata">

**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\
**Replies:** 2\
**Last updated:** [April 8, 2021, 12:12pm UTC](https://discuss.elastic.co/t/i-want-to-input-row-of-csv-file/269538 "2021-04-08T12:12:44Z")

</div>

I want to input per one row and csv file haven't column name. Please teach me how to set for logstash. Data flow is filebeat → logstash → elasticsearch. I attached sample image of csv file.

---

## [Kibana service is not running it's waiting with “loading elastic”](https://discuss.elastic.co/t/kibana-service-is-not-running-its-waiting-with-loading-elastic/269550)

<div class="topic-metadata">

**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\
**Replies:** 8\
**Last updated:** [April 8, 2021, 12:04pm UTC](https://discuss.elastic.co/t/kibana-service-is-not-running-its-waiting-with-loading-elastic/269550 "2021-04-08T12:04:16Z")

</div>

When I try to run bin/kibana. I get the below message. When I check the localhost:5601. Kibana is waiting "loading elastic" message. How can i solve this problem ? log \[16:25:00.767\] \[info\]\[plugins-service\] Plugi…

---

## [Customize kibana 7.11](https://discuss.elastic.co/t/customize-kibana-7-11/269584)

<div class="topic-metadata">

**Author:** [@Chaimaa\_ABD](https://discuss.elastic.co/u/Chaimaa_ABD)\
**Replies:** 1\
**Last updated:** [April 8, 2021, 11:45am UTC](https://discuss.elastic.co/t/customize-kibana-7-11/269584 "2021-04-08T11:45:59Z")

</div>

Im trying to make the kibana dashbord more functional, so im wondering if i can customize kibana 7.11 dashbord Add a company logo instead of elastic logo Delete dashbord edit bar Define lucence search and delete the w…

---

## [Users and Rolesnot available in 7.11 version](https://discuss.elastic.co/t/users-and-rolesnot-available-in-7-11-version/268953)

<div class="topic-metadata">

**Author:** [@pooja1](https://discuss.elastic.co/u/pooja1)\
**Replies:** 4\
**Last updated:** [April 8, 2021, 11:34am UTC](https://discuss.elastic.co/t/users-and-rolesnot-available-in-7-11-version/268953 "2021-04-08T11:34:34Z")

</div>

I am not able to see Users and Roles options to share the dashboard

---

## [Unable to use SIEM module](https://discuss.elastic.co/t/unable-to-use-siem-module/268033)

<div class="topic-metadata">

**Author:** [@new2\_elk](https://discuss.elastic.co/u/new2_elk)\
**Replies:** 10\
**Last updated:** [April 8, 2021, 11:33am UTC](https://discuss.elastic.co/t/unable-to-use-siem-module/268033 "2021-04-08T11:33:26Z")

</div>

Hi All, I have setup a lab environment with below configuration: Lab firewall sending log -\> (Filebeat -\> Logstash -\> Elasticsearch) which Fliebeat, logstash, Elasticsearch is on Alibaba Cloud. When I try to use the S…

---

## [Generate Customized Report from Data in Kibana](https://discuss.elastic.co/t/generate-customized-report-from-data-in-kibana/268901)

<div class="topic-metadata">

**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\
**Replies:** 5\
**Last updated:** [April 8, 2021, 11:33am UTC](https://discuss.elastic.co/t/generate-customized-report-from-data-in-kibana/268901 "2021-04-08T11:33:24Z")

</div>

My dataset contains data of various batches and each batch record is distributed in number of rows. Using Kibana dashboard, I want to enable the end user to filter the data with respect to batch ID (which is easy) and th…

---

## [Dropdown custom field aggregation](https://discuss.elastic.co/t/dropdown-custom-field-aggregation/269527)

<div class="topic-metadata">

**Author:** [@bilel\_meddeb](https://discuss.elastic.co/u/bilel_meddeb)\
**Replies:** 3\
**Last updated:** [April 8, 2021, 11:27am UTC](https://discuss.elastic.co/t/dropdown-custom-field-aggregation/269527 "2021-04-08T11:27:52Z")

</div>

HELLO, i'm new in ELK i have table id | f1 | f2 | f3 0 | 10| 15| 2 1 | 30| 5 | 9 2 | 1 | 75| 6 i want to create a dropdown list. that list contain a multi choice (x1 x2 x3) if i choice x1 so the result shoul…

---

## [How to change moment.js in Kibana?](https://discuss.elastic.co/t/how-to-change-moment-js-in-kibana/269289)

<div class="topic-metadata">

**Author:** [@eniserkaya](https://discuss.elastic.co/u/eniserkaya)\
**Replies:** 2\
**Last updated:** [April 8, 2021, 11:21am UTC](https://discuss.elastic.co/t/how-to-change-moment-js-in-kibana/269289 "2021-04-08T11:21:29Z")

</div>

I would like to change language for Duration in readable format. I have scripted fields. The scripted fields calculate duration. When i show the duration to clients, appear the label to screen 10 hours ago, 15 hours ago…

---

## [How to sort primarily on one score, and secondarily on another score](https://discuss.elastic.co/t/how-to-sort-primarily-on-one-score-and-secondarily-on-another-score/269564)

<div class="topic-metadata">

**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\
**Replies:** 3\
**Last updated:** [April 8, 2021, 10:19am UTC](https://discuss.elastic.co/t/how-to-sort-primarily-on-one-score-and-secondarily-on-another-score/269564 "2021-04-08T10:19:11Z")

</div>

Hi I have n terms ie: "Cheese","Robot" and "Cake" I wish to do a primary sorting strictly on number of these terms matched, and secondarily on the total score of the three terms. I know a way to sort by number of hit…

---

## [\[ERROR\]\[logstash.filters.ruby \] Ruby exception occurred: undefined method \`\[\]' for #\<LogStash::Event:0x9a18b32\>](https://discuss.elastic.co/t/error-logstash-filters-ruby-ruby-exception-occurred-undefined-method-for-logstash-0x9a18b32/269301)

<div class="topic-metadata">

**Author:** [@rumala](https://discuss.elastic.co/u/rumala)\
**Replies:** 2\
**Last updated:** [April 8, 2021, 9:57am UTC](https://discuss.elastic.co/t/error-logstash-filters-ruby-ruby-exception-occurred-undefined-method-for-logstash-0x9a18b32/269301 "2021-04-08T09:57:12Z")

</div>

Hello experts, I'm still learning about ELK. last week i set up my ELK lab. And I got error in my Logstash. I'm using logstash 7.5.1. I would like to parse through all fields of my Logstash and convert field starting wi…

---

## [Logstash unable to connect ssl enabled elasticsearch](https://discuss.elastic.co/t/logstash-unable-to-connect-ssl-enabled-elasticsearch/269570)

<div class="topic-metadata">

**Author:** [@abhishek\_s1](https://discuss.elastic.co/u/abhishek_s1)\
**Replies:** 0\
**Last updated:** [April 8, 2021, 9:37am UTC](https://discuss.elastic.co/t/logstash-unable-to-connect-ssl-enabled-elasticsearch/269570 "2021-04-08T09:37:23Z")

</div>

I was using logstash to ingest data into elasticearch. But now after enabling ssl to elasticsearch (using this) for using alerts & detections, Logstash is unable to connect elasticsearch. Browser or curl command works a…

---

## [What is the source of kubernetes.pod.memory.usage.bytes and kubernetes.pod.cpu.usage.nanocores metrics?](https://discuss.elastic.co/t/what-is-the-source-of-kubernetes-pod-memory-usage-bytes-and-kubernetes-pod-cpu-usage-nanocores-metrics/269053)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 3\
**Last updated:** [April 8, 2021, 9:27am UTC](https://discuss.elastic.co/t/what-is-the-source-of-kubernetes-pod-memory-usage-bytes-and-kubernetes-pod-cpu-usage-nanocores-metrics/269053 "2021-04-08T09:27:45Z")

</div>

I am wondering where the metrics kubernetes.pod.memory.usage.bytes and kubernetes.pod.cpu.usage.nanocores in metricbeat are obtained from? Are they OS statistics? If so, which statistic? I am trying to compare them again…

---

## [Line graph duplicating y-axes legend](https://discuss.elastic.co/t/line-graph-duplicating-y-axes-legend/269117)

<div class="topic-metadata">

**Author:** [@Jasper\_Tan](https://discuss.elastic.co/u/Jasper_Tan)\
**Replies:** 1\
**Last updated:** [April 8, 2021, 9:06am UTC](https://discuss.elastic.co/t/line-graph-duplicating-y-axes-legend/269117 "2021-04-08T09:06:30Z")

</div>

I was trying to create a new visualization using the "Aggregation based \>\> Line Graph". However I encountered a bug where my y-axes legends seems to be duplicating (See axes "N6\_TEMP, N7\_TEMP and N8\_TEMP" in the image be…

---

## [Fill an Elasticsearch index with data from another index on same cluster](https://discuss.elastic.co/t/fill-an-elasticsearch-index-with-data-from-another-index-on-same-cluster/269451)

<div class="topic-metadata">

**Author:** [@workaround](https://discuss.elastic.co/u/workaround)\
**Replies:** 6\
**Last updated:** [April 8, 2021, 8:30am UTC](https://discuss.elastic.co/t/fill-an-elasticsearch-index-with-data-from-another-index-on-same-cluster/269451 "2021-04-08T08:30:18Z")

</div>

This is kind of a noob question so please be kind. I have an elasticsearch cluster (v5) with 3 nodes and two indexes, lets say indexes X and Y(default). I would like to know if there is a way to write data to the index …

---

## [TSVB dates not lining up (1M offset, 1st MAR vs 1st FEB)](https://discuss.elastic.co/t/tsvb-dates-not-lining-up-1m-offset-1st-mar-vs-1st-feb/269327)

<div class="topic-metadata">

**Author:** [@Brendan\_Fisher](https://discuss.elastic.co/u/Brendan_Fisher)\
**Replies:** 3\
**Last updated:** [April 8, 2021, 8:26am UTC](https://discuss.elastic.co/t/tsvb-dates-not-lining-up-1m-offset-1st-mar-vs-1st-feb/269327 "2021-04-08T08:26:03Z")

</div>

Hi, I've been trying to get a Month over Month comparison going using TSVB Time Series. I finalised this series last week and everything looked good. I've opened up the visualisation this morning and found that the date…

---

## [Bulk upsert of nested document without mapping](https://discuss.elastic.co/t/bulk-upsert-of-nested-document-without-mapping/269563)

<div class="topic-metadata">

**Author:** [@Omri](https://discuss.elastic.co/u/Omri)\
**Replies:** 0\
**Last updated:** [April 8, 2021, 8:04am UTC](https://discuss.elastic.co/t/bulk-upsert-of-nested-document-without-mapping/269563 "2021-04-08T08:04:20Z")

</div>

Hello everyone, I'm using the dynamic mapping feature of ES while predefining the mapping of specific index which also contains a nested field and a mapping to the fields in this nested field. When I run a bulk upsert …

---

## [Cryptogalaxy : An app to get crypto market data from multiple exchanges](https://discuss.elastic.co/t/cryptogalaxy-an-app-to-get-crypto-market-data-from-multiple-exchanges/269559)

<div class="topic-metadata">

**Author:** [@milkywaybrain](https://discuss.elastic.co/u/milkywaybrain)\
**Replies:** 0\
**Last updated:** [April 8, 2021, 7:15am UTC](https://discuss.elastic.co/t/cryptogalaxy-an-app-to-get-crypto-market-data-from-multiple-exchanges/269559 "2021-04-08T07:15:29Z")

</div>

Hey, this is Pavan. I just created an open source project called Cryptogalaxy, by using which you can get any cryptocurrencies ticker and trade data from multiple exchanges through REST / websocket and save it into multi…

---

## [Using an array as parameter for update script](https://discuss.elastic.co/t/using-an-array-as-parameter-for-update-script/269562)

<div class="topic-metadata">

**Author:** [@yen\_l\_ng\_th](https://discuss.elastic.co/u/yen_l_ng_th)\
**Replies:** 0\
**Last updated:** [April 8, 2021, 7:45am UTC](https://discuss.elastic.co/t/using-an-array-as-parameter-for-update-script/269562 "2021-04-08T07:45:48Z")

</div>

I am using ElasticSearch 6.8, I want to update many documents at the same time. So I use update by query \` { "index": "index", "type": "type" "body": { "query" : { "bool" :{ "must" :{ …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=985)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=987)
