# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1023 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1024 --- ## [Item 381of GeoJSON will not load?](https://discuss.elastic.co/t/item-381of-geojson-will-not-load/266414)
**Author:** [@dshashek](https://discuss.elastic.co/u/dshashek)\ **Replies:** 2\ **Last updated:** [March 6, 2021, 9:57pm UTC](https://discuss.elastic.co/t/item-381of-geojson-will-not-load/266414 "2021-03-06T21:57:47Z")
I do not understand at all what is going on here. I'm trying to load a geojson of congressional districts that I've merged with additional information about each congressman using the geopandas library. Every district … --- ## [Java connection lost](https://discuss.elastic.co/t/java-connection-lost/266454)
**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\ **Replies:** 0\ **Last updated:** [March 6, 2021, 9:06pm UTC](https://discuss.elastic.co/t/java-connection-lost/266454 "2021-03-06T21:06:17Z")
Hi! I'm trying to connect to my Elasticsearch node from Java. I have this code : final CredentialsProvider credentialsProvider = new BasicCredentialsProvider(); credentialsProvider.setCredentials(AuthS… --- ## [Problem with searching and deleting data in Elasticsearch using term and regexp](https://discuss.elastic.co/t/problem-with-searching-and-deleting-data-in-elasticsearch-using-term-and-regexp/266447)
**Author:** [@white\_rabbit](https://discuss.elastic.co/u/white_rabbit)\ **Replies:** 0\ **Last updated:** [March 6, 2021, 2:59pm UTC](https://discuss.elastic.co/t/problem-with-searching-and-deleting-data-in-elasticsearch-using-term-and-regexp/266447 "2021-03-06T14:59:26Z")
I am currently developing a user data analysis platform and have a problem with searching and deleting data in Elasticsearch using term and regexp. I would be very grateful for checking the solutions below and writing so… --- ## [What is elasticsearch best feature to achieve what I need?](https://discuss.elastic.co/t/what-is-elasticsearch-best-feature-to-achieve-what-i-need/266360)
**Author:** [@Nuno\_Oliveira](https://discuss.elastic.co/u/Nuno_Oliveira)\ **Replies:** 3\ **Last updated:** [March 6, 2021, 8:52am UTC](https://discuss.elastic.co/t/what-is-elasticsearch-best-feature-to-achieve-what-i-need/266360 "2021-03-06T08:52:21Z")
Hi, I'm relatively new to elasticsearch and I'm not sure what is the best approach to achieve what I want, but this is what I've been trying: I have a list of dog breeds in an Index and given the input "0293 Corki USA" … --- ## [Никак не могу обновить elasticsearch выше 7.9.3](https://discuss.elastic.co/t/elasticsearch-7-9-3/266400)
**Author:** [@Jhonny-2005](https://discuss.elastic.co/u/Jhonny-2005)\ **Replies:** 3\ **Last updated:** [March 6, 2021, 12:28am UTC](https://discuss.elastic.co/t/elasticsearch-7-9-3/266400 "2021-03-06T00:28:50Z")
Сейчас установлена версия Elasticsearch 7.9.0. Никак не могу обновить Elastic, начиная с версии 7.10.0. Это происходит и в более новых версия. До 7.9.3 обновляется нормально. Прошу, помогите, куда копать уже не знаю. По… --- ## [Optimization for rolling restart without stopping indexing](https://discuss.elastic.co/t/optimization-for-rolling-restart-without-stopping-indexing/266411)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 10:30pm UTC](https://discuss.elastic.co/t/optimization-for-rolling-restart-without-stopping-indexing/266411 "2021-03-05T22:30:03Z")
I know the topic of shard allocation during rolling restarts is a well worn path here. When we do node restarts, we: Disable shard allocation Restart the node Once the node comes back online, we reenable allocation Whe… --- ## [Detection Failiure in ELK7.8 SIEM](https://discuss.elastic.co/t/detection-failiure-in-elk7-8-siem/266217)
**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 10:18pm UTC](https://discuss.elastic.co/t/detection-failiure-in-elk7-8-siem/266217 "2021-03-05T22:18:07Z")
Hello, It is noticed that detection rule is getting failed by showing the bellow error message. "Consider increasing your look back time or adding more Kibana instances." I have tried increasing the look back time fro… --- ## [Field aliases in search results](https://discuss.elastic.co/t/field-aliases-in-search-results/266221)
**Author:** [@andreas123](https://discuss.elastic.co/u/andreas123)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 10:10pm UTC](https://discuss.elastic.co/t/field-aliases-in-search-results/266221 "2021-03-05T22:10:19Z")
Hey, we have different suppliers for data that is imported into elastic. The suppliers use different field names, but some of them use the same type of data. Example: Supplier A: last\_seen: 2020\_02\_03 IP: 10.10.10.1… --- ## [Indicator match rule not matched and Mapped with filebeat-\* (MISP Module)](https://discuss.elastic.co/t/indicator-match-rule-not-matched-and-mapped-with-filebeat-misp-module/266315)
**Author:** [@raviraja](https://discuss.elastic.co/u/raviraja)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 10:01pm UTC](https://discuss.elastic.co/t/indicator-match-rule-not-matched-and-mapped-with-filebeat-misp-module/266315 "2021-03-05T22:01:05Z")
Hi guys, We are using ELK 7.11.1 version. We have ingested threat intelligence feeds from MISP server and stored in Elasticsearch through Filebeat.(Using Module MISP) and we want to map and match with Zscalerlog. Base… --- ## [Need help to update es6 template to es7](https://discuss.elastic.co/t/need-help-to-update-es6-template-to-es7/266409)
**Author:** [@michbsd](https://discuss.elastic.co/u/michbsd)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 9:27pm UTC](https://discuss.elastic.co/t/need-help-to-update-es6-template-to-es7/266409 "2021-03-05T21:27:38Z")
Hi, I have been using varnishstatbeat in the past to ship varnish statistics to Elasticsearch. I am currently in the process of upgrading my cluster to 7.x - and there is no es7 template for the varnishstatbeat project… --- ## [Processor for shingles, similar to split?](https://discuss.elastic.co/t/processor-for-shingles-similar-to-split/266254)
**Author:** [@Mark\_Petersen](https://discuss.elastic.co/u/Mark_Petersen)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 7:40pm UTC](https://discuss.elastic.co/t/processor-for-shingles-similar-to-split/266254 "2021-03-05T19:40:02Z")
Is there a processor that will do shingles or can I make a custom one somehow? In the pipeline processor below, I split on the space character, but I'd also like to combine words like a shingle analyzer would: PUT \_ing… --- ## [Filebeat module's fields in SIEM columns](https://discuss.elastic.co/t/filebeat-modules-fields-in-siem-columns/266090)
**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 7:42pm UTC](https://discuss.elastic.co/t/filebeat-modules-fields-in-siem-columns/266090 "2021-03-05T19:42:34Z")
Hi, after upgrading our cluster from 7.10.2 to 7.11.1 we can no more see values of filebeat module's fields in columns, for example suricata's fields (screenshot below), although they are included in the signal's fi… --- ## [Invalid license found, requires a basic or a valid trial license and received Open source](https://discuss.elastic.co/t/invalid-license-found-requires-a-basic-or-a-valid-trial-license-and-received-open-source/266391)
**Author:** [@Charles100](https://discuss.elastic.co/u/Charles100)\ **Replies:** 6\ **Last updated:** [March 5, 2021, 7:10pm UTC](https://discuss.elastic.co/t/invalid-license-found-requires-a-basic-or-a-valid-trial-license-and-received-open-source/266391 "2021-03-05T19:10:05Z")
Hi, I followed this procedure to install ELK on Kubernetes (Deploy ECK in your Kubernetes cluster | Elastic Cloud on Kubernetes \[1.4\] | Elastic). Everything looks ok. Now, I want to use filebeat on my kubernetes host t… --- ## [When it is useful to have multiple config files for a single Kibana instance?](https://discuss.elastic.co/t/when-it-is-useful-to-have-multiple-config-files-for-a-single-kibana-instance/266363)
**Author:** [@trex](https://discuss.elastic.co/u/trex)\ **Replies:** 3\ **Last updated:** [March 5, 2021, 7:04pm UTC](https://discuss.elastic.co/t/when-it-is-useful-to-have-multiple-config-files-for-a-single-kibana-instance/266363 "2021-03-05T19:04:58Z")
When is it useful to have multiple config files for a single Kibana instance? $ ./bin/kibana --help -c, --config \ Path to the config file, use multiple --config args to include multiple config files --- ## [Enterprise search](https://discuss.elastic.co/t/enterprise-search/266340)
**Author:** [@suraj\_kumar3](https://discuss.elastic.co/u/suraj_kumar3)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 6:53pm UTC](https://discuss.elastic.co/t/enterprise-search/266340 "2021-03-05T18:53:39Z")
enterprise search is able to start and shows the below message but i am not able to connect to it and getting connection refused error. URL: http://10.156.86.236:7000 If this is your first time starting Enterprise Sea… --- ## [Remove/Hide metrics column from DataTable visualization](https://discuss.elastic.co/t/remove-hide-metrics-column-from-datatable-visualization/266403)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 6:44pm UTC](https://discuss.elastic.co/t/remove-hide-metrics-column-from-datatable-visualization/266403 "2021-03-05T18:44:34Z")
Hi, I need some help in structuring Datatable visualization so that I can download the CSV without Metrics column. If I try to create a DataTable visualization, it adds Mandatorily "Metrics" column. Business need is to a… --- ## [Create complex document and integration questions](https://discuss.elastic.co/t/create-complex-document-and-integration-questions/266058)
**Author:** [@wilson93](https://discuss.elastic.co/u/wilson93)\ **Replies:** 3\ **Last updated:** [March 5, 2021, 6:36pm UTC](https://discuss.elastic.co/t/create-complex-document-and-integration-questions/266058 "2021-03-05T18:36:10Z")
I have watched both video and tried elastic search dashboard i got few questions : i wish to let my search show multiple document, now i uploaded document json for products what is the best practice for adding other … --- ## [Ingest pipeline differences with Logstash and Beats](https://discuss.elastic.co/t/ingest-pipeline-differences-with-logstash-and-beats/266302)
**Author:** [@b133](https://discuss.elastic.co/u/b133)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 5:11pm UTC](https://discuss.elastic.co/t/ingest-pipeline-differences-with-logstash-and-beats/266302 "2021-03-05T17:11:27Z")
I want to bifurcate my logs using Logstash. When I sent logs directly from Filebeat to Elasticsearch, the log fields were all properly parsed and converted to appropriate variable types. I have since changed the Filebea… --- ## [S3snssqs - multiline support?](https://discuss.elastic.co/t/s3snssqs-multiline-support/266370)
**Author:** [@justroll](https://discuss.elastic.co/u/justroll)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 4:21pm UTC](https://discuss.elastic.co/t/s3snssqs-multiline-support/266370 "2021-03-05T16:21:33Z")
Hi we are trying to read our log usign s3snssqs ; this all works great but the only thing is when we want to detect multiline logs .. The module doesn't seem to support codec =\> multiline in order to use a pattern mis… --- ## [Performing a conditional mutation to circumvent parsing issue](https://discuss.elastic.co/t/performing-a-conditional-mutation-to-circumvent-parsing-issue/266349)
**Author:** [@nectide](https://discuss.elastic.co/u/nectide)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 4:13pm UTC](https://discuss.elastic.co/t/performing-a-conditional-mutation-to-circumvent-parsing-issue/266349 "2021-03-05T16:13:24Z")
Hi, I'm a newcomer to Logstash, so bear with me. My logstash logs are reporting: \[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"… --- ## [Indexes are not going to Warm Tier](https://discuss.elastic.co/t/indexes-are-not-going-to-warm-tier/266389)
**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 3:55pm UTC](https://discuss.elastic.co/t/indexes-are-not-going-to-warm-tier/266389 "2021-03-05T15:55:14Z")
Trying to get indexes to go into warm for 30 days. Am I doing something incorrect? --- ## [Highlight. Different tags for different words in one highlight request. For one field](https://discuss.elastic.co/t/highlight-different-tags-for-different-words-in-one-highlight-request-for-one-field/266388)
**Author:** [@boralex](https://discuss.elastic.co/u/boralex)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 3:43pm UTC](https://discuss.elastic.co/t/highlight-different-tags-for-different-words-in-one-highlight-request-for-one-field/266388 "2021-03-05T15:43:59Z")
Good day I have a question: Can I use several different tags for different words in one highlight request? Is it possible? For example (Let I have one text field): I have a request with phrases that should definitely… --- ## [KQL syntax for serial difference/delta filter](https://discuss.elastic.co/t/kql-syntax-for-serial-difference-delta-filter/266100)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 6\ **Last updated:** [March 5, 2021, 3:39pm UTC](https://discuss.elastic.co/t/kql-syntax-for-serial-difference-delta-filter/266100 "2021-03-05T15:39:55Z")
hi guys, my numeric data is coming aggregating , so i am using aggregation "sum of serial difference of values" to take delta...how do i put this delta in KQL filter in search box... example value1 : 20 value 2: 50 … --- ## [How to Create New User in Kibana](https://discuss.elastic.co/t/how-to-create-new-user-in-kibana/265826)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 2:37pm UTC](https://discuss.elastic.co/t/how-to-create-new-user-in-kibana/265826 "2021-03-05T14:37:35Z")
Hi, I have created the new user in Kibana via kibana UI. But i am unable to login with that id. Getting Error as:- {"statusCode":403,"error":"Forbidden","message":"Forbidden"} Note:- I am able to login with System use… --- ## [Kibana Data Table visualization - advanced filter](https://discuss.elastic.co/t/kibana-data-table-visualization-advanced-filter/266358)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 1:39pm UTC](https://discuss.elastic.co/t/kibana-data-table-visualization-advanced-filter/266358 "2021-03-05T13:39:02Z")
I am creating Kibana Dashboard based on log data. I want to create Data Table for the most common warnings, with some stacktrace info (if exists). Each entry can contain multiple stacktrace messages, but the first one … --- ## [How does the "version" tag works in the Json export of a visualization in Kibana?](https://discuss.elastic.co/t/how-does-the-version-tag-works-in-the-json-export-of-a-visualization-in-kibana/265954)
**Author:** [@Harpreet\_Singh](https://discuss.elastic.co/u/Harpreet_Singh)\ **Replies:** 5\ **Last updated:** [March 5, 2021, 1:35pm UTC](https://discuss.elastic.co/t/how-does-the-version-tag-works-in-the-json-export-of-a-visualization-in-kibana/265954 "2021-03-05T13:35:37Z")
Hi Team, This is regarding version control of the kibana visualizations, we are planning to export the Json files and then put them into git. Now when i am exporting the files as Json, there is a version Tag there(PFA … --- ## [Beats dahsboards error \[ esaggs\] JSON parse: Unexpected chararter at line 1 column 1 of the JSON data](https://discuss.elastic.co/t/beats-dahsboards-error-esaggs-json-parse-unexpected-chararter-at-line-1-column-1-of-the-json-data/266343)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 1:25pm UTC](https://discuss.elastic.co/t/beats-dahsboards-error-esaggs-json-parse-unexpected-chararter-at-line-1-column-1-of-the-json-data/266343 "2021-03-05T13:25:09Z")
Hello, I am trying ELK 8.0.0 from code source as dev cluster, and used the same configuration of my prod cluster (Version 7.10.1) but when I installed beats (version 7.11.1) I am getting errors in the dashboards as you … --- ## [Share Kibana Dashboard](https://discuss.elastic.co/t/share-kibana-dashboard/266316)
**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 12:56pm UTC](https://discuss.elastic.co/t/share-kibana-dashboard/266316 "2021-03-05T12:56:17Z")
Hi All, I want to share my dashboard with the client without the 'Edit' button but the 'save query' button should be enabled. --- ## [Pull fields in the kibana watcher](https://discuss.elastic.co/t/pull-fields-in-the-kibana-watcher/265779)
**Author:** [@richis](https://discuss.elastic.co/u/richis)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 12:51pm UTC](https://discuss.elastic.co/t/pull-fields-in-the-kibana-watcher/265779 "2021-03-05T12:51:20Z")
Hi all, I have created a watcher. I am new to this concept so finding it difficult to achieve. The watcher is created successfully but, i am trying to get the fields that i have in my log. With the help of google search … --- ## [Error in scripted field, working with arrays of objects](https://discuss.elastic.co/t/error-in-scripted-field-working-with-arrays-of-objects/265944)
**Author:** [@Casper\_Thrane](https://discuss.elastic.co/u/Casper_Thrane)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 12:48pm UTC](https://discuss.elastic.co/t/error-in-scripted-field-working-with-arrays-of-objects/265944 "2021-03-05T12:48:07Z")
Hi I think I have found an error, in the way Kibana/Scripted Fields handles arrays of objects. My example is this. My ES Data: {"@timestamp":"2021-02-28T22:59:38.786Z", "message":"ExclusionsDeparturesArrivalsExeption:… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1022) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1024)