# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=998 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 999 --- ## [How to get different Exceptions volume /count occured in given Pod in Kibana](https://discuss.elastic.co/t/how-to-get-different-exceptions-volume-count-occured-in-given-pod-in-kibana/268167)
**Author:** [@mvrnaidu](https://discuss.elastic.co/u/mvrnaidu)\ **Replies:** 1\ **Last updated:** [March 29, 2021, 3:51pm UTC](https://discuss.elastic.co/t/how-to-get-different-exceptions-volume-count-occured-in-given-pod-in-kibana/268167 "2021-03-29T15:51:05Z")
I have some 6 pods running in a container and i need to get all types of Exceptions from their logs by day wise, and also need to get alerts everyday to my email box .how to implement this in Kibana ? thanks in adva… --- ## [Add new values to the field if not available](https://discuss.elastic.co/t/add-new-values-to-the-field-if-not-available/266881)
**Author:** [@Shashankdevaraj](https://discuss.elastic.co/u/Shashankdevaraj)\ **Replies:** 1\ **Last updated:** [March 29, 2021, 3:35pm UTC](https://discuss.elastic.co/t/add-new-values-to-the-field-if-not-available/266881 "2021-03-29T15:35:45Z")
I am splitting the rows on a field called names, if some names are not available in a given time frame I want to add it and display NA across other columns. Please help. Example table: name country state n1 c1 … --- ## ["cannot divide by 0" TinyMath error in Visual builder](https://discuss.elastic.co/t/cannot-divide-by-0-tinymath-error-in-visual-builder/268251)
**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\ **Replies:** 2\ **Last updated:** [March 29, 2021, 3:26pm UTC](https://discuss.elastic.co/t/cannot-divide-by-0-tinymath-error-in-visual-builder/268251 "2021-03-29T15:26:53Z")
Hello Elastic community, I am trying to build a metric in visual builder with 2 aggregations and a Math aggregation below them. But I am getting "Cannot divide by 0". Below is my structure of data: sr\_number some\_… --- ## [Data node high CPU usage - find job/query](https://discuss.elastic.co/t/data-node-high-cpu-usage-find-job-query/268666)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 0\ **Last updated:** [March 29, 2021, 2:24pm UTC](https://discuss.elastic.co/t/data-node-high-cpu-usage-find-job-query/268666 "2021-03-29T14:24:18Z")
I am observing very high CPU usage on data nodes in my 7.9 ES cluster: It happens during "business hours" so I am suspecting one of the applications is issuing a query (or multiple queries) that is causing such high C… --- ## [Question: define default pipeline with different patterns depending on log.file.path](https://discuss.elastic.co/t/question-define-default-pipeline-with-different-patterns-depending-on-log-file-path/268636)
**Author:** [@Christos\_Gitsis](https://discuss.elastic.co/u/Christos_Gitsis)\ **Replies:** 2\ **Last updated:** [March 29, 2021, 3:13pm UTC](https://discuss.elastic.co/t/question-define-default-pipeline-with-different-patterns-depending-on-log-file-path/268636 "2021-03-29T15:13:53Z")
Hi, I would like to have my logs ingested by two different pipelines, depending on the log file which is the source of the document. Everything coming from /var/log/a.log should be processed by a\_pipeline everything f… --- ## [Elastic Search 5.1.1 - How to fetch all documents that contains/ startswith operator on a field in ElasticSearch](https://discuss.elastic.co/t/elastic-search-5-1-1-how-to-fetch-all-documents-that-contains-startswith-operator-on-a-field-in-elasticsearch/266945)
**Author:** [@HS161148](https://discuss.elastic.co/u/HS161148)\ **Replies:** 9\ **Last updated:** [March 29, 2021, 3:06pm UTC](https://discuss.elastic.co/t/elastic-search-5-1-1-how-to-fetch-all-documents-that-contains-startswith-operator-on-a-field-in-elasticsearch/266945 "2021-03-29T15:06:59Z")
How to fetch all documents that contains/ startswith with value on a field in ElasticSearch. --- ## [Logstash syslog фильтр для Cisco ACI](https://discuss.elastic.co/t/logstash-syslog-cisco-aci/268481)
**Author:** [@linuxoid70](https://discuss.elastic.co/u/linuxoid70)\ **Replies:** 3\ **Last updated:** [March 29, 2021, 3:01pm UTC](https://discuss.elastic.co/t/logstash-syslog-cisco-aci/268481 "2021-03-29T15:01:11Z")
У кого-нибудь есть готовый фильтр для logstash по приёму syslog трафика от Cisco ACI? Не нашел в гугле ни фильтра, ни patterns, если у кого есть - можете поделиться? --- ## ["Elastic did not load properly". Kibana failed loading in Browser](https://discuss.elastic.co/t/elastic-did-not-load-properly-kibana-failed-loading-in-browser/268043)
**Author:** [@DEEPTHI\_SONA\_G](https://discuss.elastic.co/u/DEEPTHI_SONA_G)\ **Replies:** 3\ **Last updated:** [March 29, 2021, 2:39pm UTC](https://discuss.elastic.co/t/elastic-did-not-load-properly-kibana-failed-loading-in-browser/268043 "2021-03-29T14:39:22Z")
I have tried installing Elasticsearch and kibana in centos7. Both of them are working fine. But when it come to loading kibana on browser we get the error " Elastic did not load properly. Check the server output for more… --- ## [High performance](https://discuss.elastic.co/t/high-performance/267737)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 13\ **Last updated:** [March 29, 2021, 1:51pm UTC](https://discuss.elastic.co/t/high-performance/267737 "2021-03-29T13:51:54Z")
How can I increace high performance of ES? Is this possible to do high performance cluster? or cluster give me "only" data security / availability? Most important for me is not data stored in ES, but abiliti doing querie… --- ## [Two filed in Dashboard](https://discuss.elastic.co/t/two-filed-in-dashboard/268187)
**Author:** [@Arethusa](https://discuss.elastic.co/u/Arethusa)\ **Replies:** 2\ **Last updated:** [March 29, 2021, 1:38pm UTC](https://discuss.elastic.co/t/two-filed-in-dashboard/268187 "2021-03-29T13:38:27Z")
Hello, I am new to Kibana (v7.10.0) but have experience with Graylog. I create widget with "Hostname", but I want add "IP" On "Bucket" I use the field "Hostname". Is it possible to add an other field ? Thank you. --- ## [Searching for event completion](https://discuss.elastic.co/t/searching-for-event-completion/268658)
**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\ **Replies:** 0\ **Last updated:** [March 29, 2021, 1:15pm UTC](https://discuss.elastic.co/t/searching-for-event-completion/268658 "2021-03-29T13:15:17Z")
Hi I have a application which logs everytime it get a file to process with 2021-03-19 10:59:44.8386| INFO|MY App||Starting 2021-03-19 10:59:44.9177| INFO|AppSetting||Exporting to file Appsetting.txt .... .... .... 202… --- ## [Elastic Search Nest Slow Scroll Speed](https://discuss.elastic.co/t/elastic-search-nest-slow-scroll-speed/268648)
**Author:** [@markanalyzer](https://discuss.elastic.co/u/markanalyzer)\ **Replies:** 4\ **Last updated:** [March 29, 2021, 12:48pm UTC](https://discuss.elastic.co/t/elastic-search-nest-slow-scroll-speed/268648 "2021-03-29T12:48:39Z")
Hi everyone, Firstly i sorry for my bad english. I have one node in my server. My index stats below this : { "\_shards" : { "total" : 4, "successful" : 4, "failed" : 0 }, "\_all" : { "primaries" : … --- ## [Convert EST to GMT using kibana script field](https://discuss.elastic.co/t/convert-est-to-gmt-using-kibana-script-field/268497)
**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\ **Replies:** 2\ **Last updated:** [March 29, 2021, 12:20pm UTC](https://discuss.elastic.co/t/convert-est-to-gmt-using-kibana-script-field/268497 "2021-03-29T12:20:07Z")
I have a field of date type(in EST) and I want to convert this to GMT before subtracting from another field using kibana script. below is the script field definition doc\['re.pdz.end'\].value - doc\['test.P\_START\_TIME'\].… --- ## [Data from indices are shown on other indices](https://discuss.elastic.co/t/data-from-indices-are-shown-on-other-indices/268608)
**Author:** [@snobysmake](https://discuss.elastic.co/u/snobysmake)\ **Replies:** 5\ **Last updated:** [March 29, 2021, 12:17pm UTC](https://discuss.elastic.co/t/data-from-indices-are-shown-on-other-indices/268608 "2021-03-29T12:17:34Z")
I seem to be having a strange problem but quite possibly be a misconfiguration on my side. We are trying to monitor AWS S3 logs which have the following structure s3://bucket/projectA s3://bucket/projectB s3://bucket/p… --- ## [Dynamic index names](https://discuss.elastic.co/t/dynamic-index-names/268645)
**Author:** [@neilt](https://discuss.elastic.co/u/neilt)\ **Replies:** 0\ **Last updated:** [March 29, 2021, 10:36am UTC](https://discuss.elastic.co/t/dynamic-index-names/268645 "2021-03-29T10:36:02Z")
I've lifted the below pattern from the logstash docs and modified for my use case. Deffo have a field service.region in my log messages that is populated with values dev1 dev2 or sit. But i am not seeing the indexes wi… --- ## [London Information Retrieval Meetup March (with special guests!)](https://discuss.elastic.co/t/london-information-retrieval-meetup-march-with-special-guests/268643)
**Author:** [@lizbiella](https://discuss.elastic.co/u/lizbiella)\ **Replies:** 0\ **Last updated:** [March 29, 2021, 10:21am UTC](https://discuss.elastic.co/t/london-information-retrieval-meetup-march-with-special-guests/268643 "2021-03-29T10:21:04Z")
Hello folks, Don't miss the next London Information Retrieval Meetup (ONLINE), that will take place tomorrow, the 30th of March, starting at 6:15 PM (GMT+1). This time, we are going to have two amazing talks: Talk 1 … --- ## [Kibana 8.0 compilation on aarm64 error](https://discuss.elastic.co/t/kibana-8-0-compilation-on-aarm64-error/268139)
**Author:** [@Abbi\_Satdea](https://discuss.elastic.co/u/Abbi_Satdea)\ **Replies:** 3\ **Last updated:** [March 29, 2021, 10:18am UTC](https://discuss.elastic.co/t/kibana-8-0-compilation-on-aarm64-error/268139 "2021-03-29T10:18:49Z")
Hi, I am trying to compile kibana on raspberry pi. It all seems to go well until it hits a wall. Here are the logs: --- ## [Cannot read field \\"outputs\\" because \\"this.fst\\" is null](https://discuss.elastic.co/t/cannot-read-field-outputs-because-this-fst-is-null/267060)
**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\ **Replies:** 6\ **Last updated:** [March 29, 2021, 10:08am UTC](https://discuss.elastic.co/t/cannot-read-field-outputs-because-this-fst-is-null/267060 "2021-03-29T10:08:02Z")
Hi everyone. I've got a very strange problem: when I used dsl like: GET index/\_search { "query": { "bool": { "must": \[ { "match\_phrase": { "name": "some words here" } … --- ## [Multiple max aggs for last months](https://discuss.elastic.co/t/multiple-max-aggs-for-last-months/268639)
**Author:** [@pbroek](https://discuss.elastic.co/u/pbroek)\ **Replies:** 0\ **Last updated:** [March 29, 2021, 9:18am UTC](https://discuss.elastic.co/t/multiple-max-aggs-for-last-months/268639 "2021-03-29T09:18:27Z")
Hi, I am struggling with the query to search for 2 max values, mag and depth, over the last day or so. I have read in the topics here but cannot find the solution. Any help is appreciated. This portion works, but if … --- ## [Measuring reaction to detection](https://discuss.elastic.co/t/measuring-reaction-to-detection/268362)
**Author:** [@Anna\_Foxx](https://discuss.elastic.co/u/Anna_Foxx)\ **Replies:** 4\ **Last updated:** [March 29, 2021, 8:49am UTC](https://discuss.elastic.co/t/measuring-reaction-to-detection/268362 "2021-03-29T08:49:48Z")
Hi! I want to know whether there is a functionality in Elastic Security to monitor reaction time to detection for example to count SLA. Is there smth called internal index from which I can get fields that will show me w… --- ## [Filter by display name](https://discuss.elastic.co/t/filter-by-display-name/268583)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [March 29, 2021, 8:04am UTC](https://discuss.elastic.co/t/filter-by-display-name/268583 "2021-03-29T08:04:14Z")
Is this possible to filder by display name (which I made in indexPatterns)? or somehow do something simillar like filter for values which don't have display name for "that" field? it would be great for finding "unknown" … --- ## [Invalid value "persisted", Options are : \["memory","persisted"\] in 7.9.2 logstash](https://discuss.elastic.co/t/invalid-value-persisted-options-are-memory-persisted-in-7-9-2-logstash/268633)
**Author:** [@Kshema](https://discuss.elastic.co/u/Kshema)\ **Replies:** 0\ **Last updated:** [March 29, 2021, 7:01am UTC](https://discuss.elastic.co/t/invalid-value-persisted-options-are-memory-persisted-in-7-9-2-logstash/268633 "2021-03-29T07:01:52Z")
In 7.9.2 version of logstash, when logstash is run using pipelines.yml, an error occurs saying "Invalid value \\"persisted#\\". Options are : \\"persisted\\", \\"memory\\" ". The error occurs in settings.rb file validate(val… --- ## [Jdk upgrade for ES v7.x](https://discuss.elastic.co/t/jdk-upgrade-for-es-v7-x/268524)
**Author:** [@sb116](https://discuss.elastic.co/u/sb116)\ **Replies:** 3\ **Last updated:** [March 29, 2021, 6:49am UTC](https://discuss.elastic.co/t/jdk-upgrade-for-es-v7-x/268524 "2021-03-29T06:49:45Z")
is there a way to upgrade embedded jdk from 15.x to 15.0.2/3 for ES v7.x? --- ## [Why the speed of geoDistanceQuery is not increasing？](https://discuss.elastic.co/t/why-the-speed-of-geodistancequery-is-not-increasing/268627)
**Author:** [@Sakura1996](https://discuss.elastic.co/u/Sakura1996)\ **Replies:** 0\ **Last updated:** [March 29, 2021, 5:55am UTC](https://discuss.elastic.co/t/why-the-speed-of-geodistancequery-is-not-increasing/268627 "2021-03-29T05:55:31Z")
Hi ,I tested the geoDistanceQuery performance locally then found that it cost similar time to query 500,000 data or 2,000,000 data even through different amounts of data returned. geo-query filter distance is 100km… --- ## [Research topic related to Elasticsearch](https://discuss.elastic.co/t/research-topic-related-to-elasticsearch/268560)
**Author:** [@Yashasvi\_Raj\_Pant](https://discuss.elastic.co/u/Yashasvi_Raj_Pant)\ **Replies:** 4\ **Last updated:** [March 29, 2021, 5:37am UTC](https://discuss.elastic.co/t/research-topic-related-to-elasticsearch/268560 "2021-03-29T05:37:02Z")
Can anybody suggest to me any research topic related to Elasticsearch for the master thesis? --- ## [Writing Kafka message headers using Logstash's Kafka output plugin](https://discuss.elastic.co/t/writing-kafka-message-headers-using-logstashs-kafka-output-plugin/268625)
**Author:** [@vigneshr35](https://discuss.elastic.co/u/vigneshr35)\ **Replies:** 0\ **Last updated:** [March 29, 2021, 5:25am UTC](https://discuss.elastic.co/t/writing-kafka-message-headers-using-logstashs-kafka-output-plugin/268625 "2021-03-29T05:25:04Z")
Hi All, I am looking to use Logstash's Kafka output plugin. This plugin allows us to post message to Kafka topic, but I don't see any configuration in the documentation that allows to post kafka message headers. Thank … --- ## [Logsash pipeline terminating before timeout duration of aggregation filter plugin](https://discuss.elastic.co/t/logsash-pipeline-terminating-before-timeout-duration-of-aggregation-filter-plugin/268112)
**Author:** [@vigneshr35](https://discuss.elastic.co/u/vigneshr35)\ **Replies:** 2\ **Last updated:** [March 29, 2021, 5:06am UTC](https://discuss.elastic.co/t/logsash-pipeline-terminating-before-timeout-duration-of-aggregation-filter-plugin/268112 "2021-03-29T05:06:23Z")
Hi All, I am having a logstash pipeline that has an elasticsearch plugin for input and aggregation filter plugin. The aggregation filter plugin has a timeout duration of 15 seconds. Refer to the filter plugin configurat… --- ## [Relationship between two indexes?](https://discuss.elastic.co/t/relationship-between-two-indexes/268477)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 2\ **Last updated:** [March 29, 2021, 4:45am UTC](https://discuss.elastic.co/t/relationship-between-two-indexes/268477 "2021-03-29T04:45:17Z")
I have two different Indexes and having key common. It is possible to create relationship between them. I made a visualization from both indexes. I want to merge both into one dashboard and analysis data on the basis of … --- ## [Logstash aggregation to get total memory available at a timestamp](https://discuss.elastic.co/t/logstash-aggregation-to-get-total-memory-available-at-a-timestamp/268431)
**Author:** [@D\_R](https://discuss.elastic.co/u/D_R)\ **Replies:** 2\ **Last updated:** [March 29, 2021, 4:26am UTC](https://discuss.elastic.co/t/logstash-aggregation-to-get-total-memory-available-at-a-timestamp/268431 "2021-03-29T04:26:50Z")
Hi, I am new to logstash filters. My input files looks something like below ''' { "@version" =\> "1", "collectd\_type" =\> "memory", "host" =\> "ubuntues", "type\_instance" =\> "slab\_unrecl", "plugin" =\> "memory", "va… --- ## [Aggregate records type based on a field type - but allow for searching with normal filters](https://discuss.elastic.co/t/aggregate-records-type-based-on-a-field-type-but-allow-for-searching-with-normal-filters/268623)
**Author:** [@M\_Gibbs](https://discuss.elastic.co/u/M_Gibbs)\ **Replies:** 0\ **Last updated:** [March 29, 2021, 4:23am UTC](https://discuss.elastic.co/t/aggregate-records-type-based-on-a-field-type-but-allow-for-searching-with-normal-filters/268623 "2021-03-29T04:23:58Z")
Hey all, I might be overcomplicating this (most likely!). I have a huge data set. Within that data set there are 'organisations' these appear nested within the main record as an array, as there will be multiple of the… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=997) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=999)