# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=988

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 989

---

## [Summ of two buckets](https://discuss.elastic.co/t/summ-of-two-buckets/269366)

<div class="topic-metadata">

**Author:** [@rmartinez.rv](https://discuss.elastic.co/u/rmartinez.rv)\
**Replies:** 2\
**Last updated:** [April 7, 2021, 3:18pm UTC](https://discuss.elastic.co/t/summ-of-two-buckets/269366 "2021-04-07T15:18:51Z")

</div>

Hi. I'm using Kibana to show a particular metric for data collected from a local SIP device. My data is indexed like this: { "\_index": "calls", "\_type": "\_doc", "\_id": "0ysOqHgBtkTNQGR8TH85", "\_version": 1, …

---

## [Elasticsearch processor environment variable](https://discuss.elastic.co/t/elasticsearch-processor-environment-variable/269089)

<div class="topic-metadata">

**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\
**Replies:** 1\
**Last updated:** [April 7, 2021, 3:17pm UTC](https://discuss.elastic.co/t/elasticsearch-processor-environment-variable/269089 "2021-04-07T15:17:34Z")

</div>

Hi, I recently posted a question about threadpools for my stack on kubernetes. (Question about threadpools) I'm planning to manually increase the node processor count. On docker-compose i can just add "processors=x" to…

---

## [Try to reduce number of mapped field before migrating from elasticsearch 2.4](https://discuss.elastic.co/t/try-to-reduce-number-of-mapped-field-before-migrating-from-elasticsearch-2-4/269496)

<div class="topic-metadata">

**Author:** [@kintetsu](https://discuss.elastic.co/u/kintetsu)\
**Replies:** 0\
**Last updated:** [April 7, 2021, 3:12pm UTC](https://discuss.elastic.co/t/try-to-reduce-number-of-mapped-field-before-migrating-from-elasticsearch-2-4/269496 "2021-04-07T15:12:05Z")

</div>

Hi, we are still running elasticsearch 2.4 and planning to migrate to the 7.x in the near future. To prepare for the upgrade we already used the migration plugin and found out that our current mapping is a problem. We h…

---

## [Elastic search aggregation not fetching complete Java trace](https://discuss.elastic.co/t/elastic-search-aggregation-not-fetching-complete-java-trace/269365)

<div class="topic-metadata">

**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\
**Replies:** 4\
**Last updated:** [April 7, 2021, 3:05pm UTC](https://discuss.elastic.co/t/elastic-search-aggregation-not-fetching-complete-java-trace/269365 "2021-04-07T15:05:47Z")

</div>

Hello Experts, I have created Data Table visualization and API for aggregations to get the application logs. It is fetching only 2 lines of log messages in the Data Table, if the log contains more than 3 lines example J…

---

## [How to recover cluster when 2 master nodes have been lost](https://discuss.elastic.co/t/how-to-recover-cluster-when-2-master-nodes-have-been-lost/269472)

<div class="topic-metadata">

**Author:** [@russinholi](https://discuss.elastic.co/u/russinholi)\
**Replies:** 3\
**Last updated:** [April 7, 2021, 3:05pm UTC](https://discuss.elastic.co/t/how-to-recover-cluster-when-2-master-nodes-have-been-lost/269472 "2021-04-07T15:05:07Z")

</div>

Hi everyone, I have the following situation, my cluster is formed by 3 master nodes and 3 data nodes, unfortunately due to a hardware problem we lost 2 master nodes at same time and the left one was not able to assume a…

---

## [Fail to upgrade Kibana from 7.11 to 7.12](https://discuss.elastic.co/t/fail-to-upgrade-kibana-from-7-11-to-7-12/269370)

<div class="topic-metadata">

**Author:** [@paulbrown4](https://discuss.elastic.co/u/paulbrown4)\
**Replies:** 9\
**Last updated:** [April 7, 2021, 3:01pm UTC](https://discuss.elastic.co/t/fail-to-upgrade-kibana-from-7-11-to-7-12/269370 "2021-04-07T15:01:12Z")

</div>

Kibana times out waiting for index migration. {"type":"log","@timestamp":"2021-04-06T13:09:46-05:00","tags":\["info","savedobjects-service"\],"pid":9608,"message":"\[.kibana\] UPDATE\_TARGET\_MAPPINGS -\> UPDATE\_TARGET\_MAPPING…

---

## [Elastic Lab 1.4](https://discuss.elastic.co/t/elastic-lab-1-4/269131)

<div class="topic-metadata">

**Author:** [@Troy\_Kelley](https://discuss.elastic.co/u/Troy_Kelley)\
**Replies:** 3\
**Last updated:** [April 7, 2021, 2:59pm UTC](https://discuss.elastic.co/t/elastic-lab-1-4/269131 "2021-04-07T14:59:20Z")

</div>

Hello, I am working through the elastic lab 1.4. I am not using virtual lab, I am running mine locally. For some reason I did not have the blogs\_sql.conf when I installed Elastic. So, I found an example on the web, cr…

---

## [Question about wildcard query](https://discuss.elastic.co/t/question-about-wildcard-query/269129)

<div class="topic-metadata">

**Author:** [@anyla](https://discuss.elastic.co/u/anyla)\
**Replies:** 8\
**Last updated:** [April 7, 2021, 2:56pm UTC](https://discuss.elastic.co/t/question-about-wildcard-query/269129 "2021-04-07T14:56:00Z")

</div>

Hi all, It seems that there is something about wildcard queries that it is not clear to me As far as I understand, Wildcard queries are term queries so. the search term is not analysed itself and it is "compared" aga…

---

## [Save logstash and metricbeat indices on diferent place](https://discuss.elastic.co/t/save-logstash-and-metricbeat-indices-on-diferent-place/269425)

<div class="topic-metadata">

**Author:** [@jobanuls](https://discuss.elastic.co/u/jobanuls)\
**Replies:** 4\
**Last updated:** [April 7, 2021, 2:37pm UTC](https://discuss.elastic.co/t/save-logstash-and-metricbeat-indices-on-diferent-place/269425 "2021-04-07T14:37:44Z")

</div>

Hi, I want have two path on my elasticsearch node for save metricbeat indices in the second path. Anyone knows how save metricbeat indices on second path directly? ElasticVersión : 7.9.2-1

---

## [Logstash HTTP output plugin not reading metadata fields correctly for user/password fields, what am I doing wrong](https://discuss.elastic.co/t/logstash-http-output-plugin-not-reading-metadata-fields-correctly-for-user-password-fields-what-am-i-doing-wrong/269482)

<div class="topic-metadata">

**Author:** [@R.L](https://discuss.elastic.co/u/R.L)\
**Replies:** 1\
**Last updated:** [April 7, 2021, 2:32pm UTC](https://discuss.elastic.co/t/logstash-http-output-plugin-not-reading-metadata-fields-correctly-for-user-password-fields-what-am-i-doing-wrong/269482 "2021-04-07T14:32:37Z")

</div>

This is my config: filter { prune { blacklist\_names =\> \[ "timestamp", "path", "size", "@version", "host" \] } uuid { target =\> "\[@metadata\]\[snapshot\]\[id\]" overwrit…

---

## [Filter out terms aggregation buckets in elastic search after applying aggregation](https://discuss.elastic.co/t/filter-out-terms-aggregation-buckets-in-elastic-search-after-applying-aggregation/269486)

<div class="topic-metadata">

**Author:** [@ruzeenpalsetia](https://discuss.elastic.co/u/ruzeenpalsetia)\
**Replies:** 0\
**Last updated:** [April 7, 2021, 2:32pm UTC](https://discuss.elastic.co/t/filter-out-terms-aggregation-buckets-in-elastic-search-after-applying-aggregation/269486 "2021-04-07T14:32:09Z")

</div>

Below is snapshot of the dataset: recordNo employeeId employeeStatus employeeAddr 1 employeeA Permanent 2 employeeA ABC …

---

## [Logstash-oss yum packages missing?](https://discuss.elastic.co/t/logstash-oss-yum-packages-missing/269258)

<div class="topic-metadata">

**Author:** [@mentzerk](https://discuss.elastic.co/u/mentzerk)\
**Replies:** 2\
**Last updated:** [April 7, 2021, 2:12pm UTC](https://discuss.elastic.co/t/logstash-oss-yum-packages-missing/269258 "2021-04-07T14:12:45Z")

</div>

Hello, I've been installing the logstash-oss package for some time now from the elastic.co yum repo, but today, it seems that the "-oss" packages are no longer included in the repo. Is this maybe a known change that I m…

---

## [Calculating time spent in state with Metricbeat and Kibana](https://discuss.elastic.co/t/calculating-time-spent-in-state-with-metricbeat-and-kibana/269457)

<div class="topic-metadata">

**Author:** [@m\_x](https://discuss.elastic.co/u/m_x)\
**Replies:** 1\
**Last updated:** [April 7, 2021, 2:00pm UTC](https://discuss.elastic.co/t/calculating-time-spent-in-state-with-metricbeat-and-kibana/269457 "2021-04-07T14:00:26Z")

</div>

Hi, I would like to calculate the time spent in a certain state with Metricbeat and Kibana . For example : how long have the system been up during specified period ? how long have a user spent logged in ?. I'm discoveri…

---

## [Enrich-Policy with daily changes in reference data](https://discuss.elastic.co/t/enrich-policy-with-daily-changes-in-reference-data/269474)

<div class="topic-metadata">

**Author:** [@Oren\_Zomer](https://discuss.elastic.co/u/Oren_Zomer)\
**Replies:** 2\
**Last updated:** [April 7, 2021, 1:57pm UTC](https://discuss.elastic.co/t/enrich-policy-with-daily-changes-in-reference-data/269474 "2021-04-07T13:57:44Z")

</div>

We are trying to create an enrich-processor to add more data to our event documents, based on an existing reference data that may contain ~10k documents. I've read the example in: However, in my case the reference dat…

---

## [\[Canvas\] Cibler un élément du markdown en CSS](https://discuss.elastic.co/t/canvas-cibler-un-element-du-markdown-en-css/269473)

<div class="topic-metadata">

**Author:** [@lgllrd](https://discuss.elastic.co/u/lgllrd)\
**Replies:** 1\
**Last updated:** [April 7, 2021, 1:55pm UTC](https://discuss.elastic.co/t/canvas-cibler-un-element-du-markdown-en-css/269473 "2021-04-07T13:55:21Z")

</div>

Bonjour à tous, J'utilise 'Markdown' dans mon Canvas et j'aimerais cibler un élément particulier de celui-ci afin de le modifier avec le CSS. Est-ce que cela est possible ? Merci

---

## [Elk requirement](https://discuss.elastic.co/t/elk-requirement/269441)

<div class="topic-metadata">

**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\
**Replies:** 7\
**Last updated:** [April 7, 2021, 1:33pm UTC](https://discuss.elastic.co/t/elk-requirement/269441 "2021-04-07T13:33:51Z")

</div>

hi , i hope this message finds you well, so How much cpu(GHz) /memory/storage at least I need to use ELK stack . regards.

---

## [Did Search Alert land in 7.12?](https://discuss.elastic.co/t/did-search-alert-land-in-7-12/269470)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 1\
**Last updated:** [April 7, 2021, 1:32pm UTC](https://discuss.elastic.co/t/did-search-alert-land-in-7-12/269470 "2021-04-07T13:32:17Z")

</div>

Dear all =) When I read the release notes for 7.12 Elasticsearch version 7.12.0 | Elasticsearch Guide \[7.12\] | Elastic I don't see Search Alert \[Alerting\] Search alert by ymao1 · Pull Request #88528 · elastic/kibana · G…

---

## [Sorting log data by specific key](https://discuss.elastic.co/t/sorting-log-data-by-specific-key/269469)

<div class="topic-metadata">

**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\
**Replies:** 0\
**Last updated:** [April 7, 2021, 1:12pm UTC](https://discuss.elastic.co/t/sorting-log-data-by-specific-key/269469 "2021-04-07T13:12:48Z")

</div>

Hello there. I faced with the same problem as described here Documents order in Elasticsearch after processing with filebeat/logstash. Several log lines can be created at the same second, so their order can be incorrect…

---

## [Could not index event to elasticsearch limit of total fields \[1000\]](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-limit-of-total-fields-1000/269464)

<div class="topic-metadata">

**Author:** [@azxqw](https://discuss.elastic.co/u/azxqw)\
**Replies:** 2\
**Last updated:** [April 7, 2021, 12:58pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-limit-of-total-fields-1000/269464 "2021-04-07T12:58:42Z")

</div>

Hi all, I have some trouble with a particular pipeline. I'm trying to index events from our F5 waf, however i get this error on every event. I dont understand why elasticsearch decided that there are more than 1000 fie…

---

## [Scripted field in kibana](https://discuss.elastic.co/t/scripted-field-in-kibana/269465)

<div class="topic-metadata">

**Author:** [@Changra](https://discuss.elastic.co/u/Changra)\
**Replies:** 0\
**Last updated:** [April 7, 2021, 12:50pm UTC](https://discuss.elastic.co/t/scripted-field-in-kibana/269465 "2021-04-07T12:50:57Z")

</div>

Hi Team, I have been to substract the date value and store the value in the variable defined as " duration" and then check if the value is smaller than 2 then return a value through scripted filed in kibana \` \`\` if…

---

## [Issues collecting data from Windows servers](https://discuss.elastic.co/t/issues-collecting-data-from-windows-servers/269433)

<div class="topic-metadata">

**Author:** [@Peque](https://discuss.elastic.co/u/Peque)\
**Replies:** 0\
**Last updated:** [April 7, 2021, 9:54am UTC](https://discuss.elastic.co/t/issues-collecting-data-from-windows-servers/269433 "2021-04-07T09:54:31Z")

</div>

Hi Forum Just a Noobie for this kind of setup - but linuxnerd for +30 years - I have build a server with Elasticsearch/Kibana and Logstash -and are running into some issues. From Linux - I can collect the data/logs and…

---

## [I push documents to elastic successfully but they are not visualized in Kibana's Discover](https://discuss.elastic.co/t/i-push-documents-to-elastic-successfully-but-they-are-not-visualized-in-kibanas-discover/269267)

<div class="topic-metadata">

**Author:** [@orfeas2021](https://discuss.elastic.co/u/orfeas2021)\
**Replies:** 4\
**Last updated:** [April 7, 2021, 10:42am UTC](https://discuss.elastic.co/t/i-push-documents-to-elastic-successfully-but-they-are-not-visualized-in-kibanas-discover/269267 "2021-04-07T10:42:46Z")

</div>

Hi! I have a 3-node installation (1 master, 2 data) , installed into the OpenStack VMs. I want to push data (logs) from an application to the stack and find them in Discover section of Kibana. (I have installed Kibana o…

---

## [How to add parameters to URL in Markdown](https://discuss.elastic.co/t/how-to-add-parameters-to-url-in-markdown/268224)

<div class="topic-metadata">

**Author:** [@Dvir\_Alony](https://discuss.elastic.co/u/Dvir_Alony)\
**Replies:** 6\
**Last updated:** [April 7, 2021, 10:36am UTC](https://discuss.elastic.co/t/how-to-add-parameters-to-url-in-markdown/268224 "2021-04-07T10:36:20Z")

</div>

Hi, I created a dashboard with two TSVB visualization, one control/filter and one markdown. I defined a URL in Markdown visualization (see 4 in png) I want to add tree parameters to the URL first control/filter fiel…

---

## [How to change the symbol separating decimals?](https://discuss.elastic.co/t/how-to-change-the-symbol-separating-decimals/268090)

<div class="topic-metadata">

**Author:** [@Betaminos](https://discuss.elastic.co/u/Betaminos)\
**Replies:** 2\
**Last updated:** [April 7, 2021, 10:01am UTC](https://discuss.elastic.co/t/how-to-change-the-symbol-separating-decimals/268090 "2021-04-07T10:01:43Z")

</div>

Hey there, I am currently using Logstash to consume data and insert it into Elasticsearch. Unfortunately for me, I am living in a country that uses . (dots) to group numbers into thousands and uses , (comma) to separat…

---

## [Visualization for delivery comfiramtion](https://discuss.elastic.co/t/visualization-for-delivery-comfiramtion/269385)

<div class="topic-metadata">

**Author:** [@thaideval](https://discuss.elastic.co/u/thaideval)\
**Replies:** 4\
**Last updated:** [April 7, 2021, 9:25am UTC](https://discuss.elastic.co/t/visualization-for-delivery-comfiramtion/269385 "2021-04-07T09:25:59Z")

</div>

Hello everyone, so i have index with 2 types of events: 1 - Requests with field ID: 123 2 - Response with field ID: 123 "Response" event with same field "ID" and same value. It tells me that some delivery indeed hap…

---

## [\[search-telemetry:search-telemetry\]: version conflict,](https://discuss.elastic.co/t/search-telemetry-search-telemetry-version-conflict/267111)

<div class="topic-metadata">

**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\
**Replies:** 6\
**Last updated:** [April 7, 2021, 9:13am UTC](https://discuss.elastic.co/t/search-telemetry-search-telemetry-version-conflict/267111 "2021-04-07T09:13:49Z")

</div>

Hi All, I'm receiving a bunch of following errors on Kibana logs, Do you know what could be the reason/solution for them? My Kibana instance is up and running but I'm receiving those errors Any help would be much app…

---

## [Dashboard GUI for listing enrich policies](https://discuss.elastic.co/t/dashboard-gui-for-listing-enrich-policies/269422)

<div class="topic-metadata">

**Author:** [@Oren\_Zomer](https://discuss.elastic.co/u/Oren_Zomer)\
**Replies:** 1\
**Last updated:** [April 7, 2021, 9:12am UTC](https://discuss.elastic.co/t/dashboard-gui-for-listing-enrich-policies/269422 "2021-04-07T09:12:07Z")

</div>

The enrich-policies tutorials that I've found all say to create the enrich policies with a PUT request, i.e.: I was wondering the the dashboard shows somewhere the list of enrich-policies (and if it allows to create n…

---

## [Grouping doc in Data table viz](https://discuss.elastic.co/t/grouping-doc-in-data-table-viz/269361)

<div class="topic-metadata">

**Author:** [@Skander\_Harrabi](https://discuss.elastic.co/u/Skander_Harrabi)\
**Replies:** 2\
**Last updated:** [April 7, 2021, 8:58am UTC](https://discuss.elastic.co/t/grouping-doc-in-data-table-viz/269361 "2021-04-07T08:58:16Z")

</div>

Hello guys, i want know if this is possible to achieve, i want group docs like this picture is showing :

---

## [Upgrade breaks config](https://discuss.elastic.co/t/upgrade-breaks-config/269405)

<div class="topic-metadata">

**Author:** [@viper539](https://discuss.elastic.co/u/viper539)\
**Replies:** 2\
**Last updated:** [April 7, 2021, 8:13am UTC](https://discuss.elastic.co/t/upgrade-breaks-config/269405 "2021-04-07T08:13:54Z")

</div>

Hello Friends, maybe i'm doing it wrong sind years... Can anyone tell me where i can put my individual config and keep it safe during an upgrade? Every time, when i upgrade my ELK, the process tries to overwrite my el…

---

## [Kibana "cannot read property 'statusCodes' of undefined" when behind reverse proxy](https://discuss.elastic.co/t/kibana-cannot-read-property-statuscodes-of-undefined-when-behind-reverse-proxy/269178)

<div class="topic-metadata">

**Author:** [@Dtunktolsoty](https://discuss.elastic.co/u/Dtunktolsoty)\
**Replies:** 4\
**Last updated:** [April 7, 2021, 8:12am UTC](https://discuss.elastic.co/t/kibana-cannot-read-property-statuscodes-of-undefined-when-behind-reverse-proxy/269178 "2021-04-07T08:12:32Z")

</div>

Hey :wave: I'm trying to access my server's kibana dashboard (that works perfectly locally) through an IIS reverse proxy with URL rewrite. But it give me a console error: "\[warning\]\[environment\] Detected an unhandled …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=987)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=989)
