# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1026

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1027

---

## [Displaying numbers in Guage as 1M,1B,1K in kibana](https://discuss.elastic.co/t/displaying-numbers-in-guage-as-1m-1b-1k-in-kibana/266073)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 6:38am UTC](https://discuss.elastic.co/t/displaying-numbers-in-guage-as-1m-1b-1k-in-kibana/266073 "2021-03-04T06:38:28Z")

</div>

I have a dataset of Bank, I want to sum total amount But it is so large. Can someone help me how to convert it into Million or Billion.

---

## [Unable to sort term aggregation based on score calculated via script in sub aggregation](https://discuss.elastic.co/t/unable-to-sort-term-aggregation-based-on-score-calculated-via-script-in-sub-aggregation/266184)

<div class="topic-metadata">

**Author:** [@AadarshKumayan](https://discuss.elastic.co/u/AadarshKumayan)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 6:21am UTC](https://discuss.elastic.co/t/unable-to-sort-term-aggregation-based-on-score-calculated-via-script-in-sub-aggregation/266184 "2021-03-04T06:21:54Z")

</div>

I have index of stores at various location. With each store I have a nested list of discount coupon. Now I have query to get list of all unique coupons in a x km of radius sorted by the distance of the nearest applicabl…

---

## [Limit number of shards on a particular Elasticsearch node](https://discuss.elastic.co/t/limit-number-of-shards-on-a-particular-elasticsearch-node/263943)

<div class="topic-metadata">

**Author:** [@Nitish\_Goyal](https://discuss.elastic.co/u/Nitish_Goyal)\
**Replies:** 2\
**Last updated:** [March 4, 2021, 3:45am UTC](https://discuss.elastic.co/t/limit-number-of-shards-on-a-particular-elasticsearch-node/263943 "2021-03-04T03:45:32Z")

</div>

I have a huge 300 node Elasticsearch cluster and the machines added over the years are with different configuration. By default, elasticsearch tries to make sure equal number of shards exists on each and every node of t…

---

## [Click on bars in a bar chart and go to another dashboard](https://discuss.elastic.co/t/click-on-bars-in-a-bar-chart-and-go-to-another-dashboard/266059)

<div class="topic-metadata">

**Author:** [@kasun](https://discuss.elastic.co/u/kasun)\
**Replies:** 4\
**Last updated:** [March 4, 2021, 3:08am UTC](https://discuss.elastic.co/t/click-on-bars-in-a-bar-chart-and-go-to-another-dashboard/266059 "2021-03-04T03:08:23Z")

</div>

Hi all, I have different dashboards named as leave,time.... for each row in the above chart . Is it possible to go to the relevant dashboard when click on a bar? As an example when click on the leave bar it should r…

---

## [Optinal way to index and search data](https://discuss.elastic.co/t/optinal-way-to-index-and-search-data/266179)

<div class="topic-metadata">

**Author:** [@ekrx](https://discuss.elastic.co/u/ekrx)\
**Replies:** 0\
**Last updated:** [March 4, 2021, 2:57am UTC](https://discuss.elastic.co/t/optinal-way-to-index-and-search-data/266179 "2021-03-04T02:57:53Z")

</div>

Lets say that I am creating an application that will search text from a huge data set. Say my document is something like this: { "type": "string", "message": "String" ....... } The type field is used to limit my sear…

---

## [Break up large index into multiple smaller equally sized indexes?](https://discuss.elastic.co/t/break-up-large-index-into-multiple-smaller-equally-sized-indexes/265745)

<div class="topic-metadata">

**Author:** [@stevedwray](https://discuss.elastic.co/u/stevedwray)\
**Replies:** 22\
**Last updated:** [March 4, 2021, 12:45am UTC](https://discuss.elastic.co/t/break-up-large-index-into-multiple-smaller-equally-sized-indexes/265745 "2021-03-04T00:45:31Z")

</div>

Whats the best way to break up large index into multiple smaller equally sized indexes? I've looked at using reindex with a query but it seems extremely slow: XPOST localhost:9200/\_reindex { "source": { …

---

## [Logstash мониторинг file input](https://discuss.elastic.co/t/logstash-file-input/264934)

<div class="topic-metadata">

**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\
**Replies:** 10\
**Last updated:** [March 4, 2021, 12:18am UTC](https://discuss.elastic.co/t/logstash-file-input/264934 "2021-03-04T00:18:30Z")

</div>

Добрый день, подскажите, кто нибудь сталкивался с мониторингом входящих данных? Есть несколько серверов которые каждый день по sftp скидывают логи в директорию на сервер logstash, можно ли настроить мониторинг файлов на…

---

## [Mapping Location By Mailing Address](https://discuss.elastic.co/t/mapping-location-by-mailing-address/266154)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 2\
**Last updated:** [March 3, 2021, 10:51pm UTC](https://discuss.elastic.co/t/mapping-location-by-mailing-address/266154 "2021-03-03T22:51:16Z")

</div>

Is it possible to map a location by it's mailing address or does Kibana only map by lat/long coordinates?

---

## [Logs are not reflecting in Kibana](https://discuss.elastic.co/t/logs-are-not-reflecting-in-kibana/265684)

<div class="topic-metadata">

**Author:** [@roh689](https://discuss.elastic.co/u/roh689)\
**Replies:** 9\
**Last updated:** [March 3, 2021, 10:25pm UTC](https://discuss.elastic.co/t/logs-are-not-reflecting-in-kibana/265684 "2021-03-03T22:25:33Z")

</div>

In our ELK environment, we are not seeing any issues on elasticsearch and Logstash server. We can also see logs are receiving on Logstash side, but it is not reflecting in index on Kibana side. Can anyone suggest what w…

---

## [ELK stack Upgrade from 7.10 to 7.11 Memory Usage](https://discuss.elastic.co/t/elk-stack-upgrade-from-7-10-to-7-11-memory-usage/265834)

<div class="topic-metadata">

**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\
**Replies:** 3\
**Last updated:** [March 3, 2021, 10:24pm UTC](https://discuss.elastic.co/t/elk-stack-upgrade-from-7-10-to-7-11-memory-usage/265834 "2021-03-03T22:24:56Z")

</div>

On Debian 10, I just now ran an update which upgraded our ELK stack from 7.10 to 7.11. Prior to the upgrade, our system had been using approximately 2-3GB or RAM. Immediately upon reboot after the upgrade, we are notic…

---

## [Filter on Nested Values - Not Contains](https://discuss.elastic.co/t/filter-on-nested-values-not-contains/266168)

<div class="topic-metadata">

**Author:** [@ankitshah692](https://discuss.elastic.co/u/ankitshah692)\
**Replies:** 0\
**Last updated:** [March 3, 2021, 10:07pm UTC](https://discuss.elastic.co/t/filter-on-nested-values-not-contains/266168 "2021-03-03T22:07:45Z")

</div>

Hello All , I have a problem where i need to find a parent document which doesnt have a specific value in any of its nested documents. In below example - i need to ignore this below document if any of its children have …

---

## [Suggest: No results with anything I've tried (term, phrase, simple\_phrase, collate)](https://discuss.elastic.co/t/suggest-no-results-with-anything-ive-tried-term-phrase-simple-phrase-collate/266159)

<div class="topic-metadata">

**Author:** [@Mark\_Petersen](https://discuss.elastic.co/u/Mark_Petersen)\
**Replies:** 0\
**Last updated:** [March 3, 2021, 8:57pm UTC](https://discuss.elastic.co/t/suggest-no-results-with-anything-ive-tried-term-phrase-simple-phrase-collate/266159 "2021-03-03T20:57:06Z")

</div>

Hi everyone, I'm new to Elasticsearch and I've been trying for some time to get a suggest search to return me anything at all and I really need help. Requirement Suggest article titles based on incomplete or misspelled…

---

## [Elasticsearch portuguese stemmer inconsistency](https://discuss.elastic.co/t/elasticsearch-portuguese-stemmer-inconsistency/266153)

<div class="topic-metadata">

**Author:** [@Mathulbrich](https://discuss.elastic.co/u/Mathulbrich)\
**Replies:** 0\
**Last updated:** [March 3, 2021, 7:52pm UTC](https://discuss.elastic.co/t/elasticsearch-portuguese-stemmer-inconsistency/266153 "2021-03-03T19:52:44Z")

</div>

Hi, recently I noticed an strange behavior by using the portuguese stemmers. First of all, I'm using light\_portuguese stemmer in production environment and have some problems stemming the word "comissões" (is equivalent …

---

## [Deprication logs dump WARN message even after setting deprication log level to ERROR](https://discuss.elastic.co/t/deprication-logs-dump-warn-message-even-after-setting-deprication-log-level-to-error/265879)

<div class="topic-metadata">

**Author:** [@abhinavk](https://discuss.elastic.co/u/abhinavk)\
**Replies:** 1\
**Last updated:** [March 3, 2021, 7:45pm UTC](https://discuss.elastic.co/t/deprication-logs-dump-warn-message-even-after-setting-deprication-log-level-to-error/265879 "2021-03-03T19:45:21Z")

</div>

Hi All We're running ES cluster (version6.8.6) with the following settings. PUT /\_cluster/settings { "persistent" : { "logger.\_root": "DEBUG", "logger.org.elasticsearch.deprecation": "ERROR" } } B…

---

## [Unable to parse correctly a filter as part of a custom URL when field values contain apostrophe characters](https://discuss.elastic.co/t/unable-to-parse-correctly-a-filter-as-part-of-a-custom-url-when-field-values-contain-apostrophe-characters/264789)

<div class="topic-metadata">

**Author:** [@Gerardo\_Marcotrigian](https://discuss.elastic.co/u/Gerardo_Marcotrigian)\
**Replies:** 2\
**Last updated:** [March 3, 2021, 7:32pm UTC](https://discuss.elastic.co/t/unable-to-parse-correctly-a-filter-as-part-of-a-custom-url-when-field-values-contain-apostrophe-characters/264789 "2021-03-03T19:32:26Z")

</div>

Hi Everyone, I’m struggling to create a link (from a table visualization) to a drill-down dashboard using scripted fields with the URL format template. This is the following: s/my\_kibana\_space/app/kibana#/dashboard/c2d…

---

## [No release file issue](https://discuss.elastic.co/t/no-release-file-issue/263367)

<div class="topic-metadata">

**Author:** [@Abhishek\_Singh1](https://discuss.elastic.co/u/Abhishek_Singh1)\
**Replies:** 1\
**Last updated:** [March 3, 2021, 7:29pm UTC](https://discuss.elastic.co/t/no-release-file-issue/263367 "2021-03-03T19:29:00Z")

</div>

Hi, I am trying to reinstall elasticsearch & Kibana in my Ubuntu 20.04 OS. There was some issue with Kibana loading, I tried fixing the yml files of both of them but port 5601 kept showing Kibana server is not ready yet…

---

## [JDBC Input](https://discuss.elastic.co/t/jdbc-input/266028)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 2\
**Last updated:** [March 3, 2021, 7:26pm UTC](https://discuss.elastic.co/t/jdbc-input/266028 "2021-03-03T19:26:51Z")

</div>

Investigating data ingest using the JDBC input plugin to pull from a SQL database. Is there a way to configure the query to only pull records based on time? The table I'm pulling from has an updated\_on column. As an e…

---

## [Bytes not showing proper human readable](https://discuss.elastic.co/t/bytes-not-showing-proper-human-readable/266143)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 6\
**Last updated:** [March 3, 2021, 7:11pm UTC](https://discuss.elastic.co/t/bytes-not-showing-proper-human-readable/266143 "2021-03-03T19:11:54Z")

</div>

I have daily value which is in bytes but not properly getting converted to Human readable format { "totalsize": 17439122738118656 } this is = 17.4 PB now when I try to draw that up in kibana it shows only 15.5PB. …

---

## [Recommendation for specific analyser settings](https://discuss.elastic.co/t/recommendation-for-specific-analyser-settings/266150)

<div class="topic-metadata">

**Author:** [@Veran](https://discuss.elastic.co/u/Veran)\
**Replies:** 0\
**Last updated:** [March 3, 2021, 6:24pm UTC](https://discuss.elastic.co/t/recommendation-for-specific-analyser-settings/266150 "2021-03-03T18:24:11Z")

</div>

Hello, I have been using Elasticsearch to create a search system based on data from RDBMS. I have documents with only 8 fields, where each field contains text data. This data represents best practice recommendations from…

---

## [ElasticSerch returns an error if the query contains strings with brackets and other characters](https://discuss.elastic.co/t/elasticserch-returns-an-error-if-the-query-contains-strings-with-brackets-and-other-characters/263611)

<div class="topic-metadata">

**Author:** [@mor\_mor](https://discuss.elastic.co/u/mor_mor)\
**Replies:** 2\
**Last updated:** [March 3, 2021, 5:39pm UTC](https://discuss.elastic.co/t/elasticserch-returns-an-error-if-the-query-contains-strings-with-brackets-and-other-characters/263611 "2021-03-03T17:39:47Z")

</div>

Description: The application has the ability to filter the date by key values. For example, if you need to display all items in which "Result: success"; For one of the keys, the value is always in the form of a JS objec…

---

## [Exclusions for elastic EQL rules](https://discuss.elastic.co/t/exclusions-for-elastic-eql-rules/266144)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 0\
**Last updated:** [March 3, 2021, 5:39pm UTC](https://discuss.elastic.co/t/exclusions-for-elastic-eql-rules/266144 "2021-03-03T17:39:46Z")

</div>

Hi, We are trying to create exclusions for one of the new EQL rules - remote execution via file shares Within the detection there is no relevent info to base an exclusion, from the timeline we see the events and fields…

---

## [How to Restrict Enterprise Search to a specific Domain Origin](https://discuss.elastic.co/t/how-to-restrict-enterprise-search-to-a-specific-domain-origin/265907)

<div class="topic-metadata">

**Author:** [@MCL](https://discuss.elastic.co/u/MCL)\
**Replies:** 4\
**Last updated:** [March 3, 2021, 5:28pm UTC](https://discuss.elastic.co/t/how-to-restrict-enterprise-search-to-a-specific-domain-origin/265907 "2021-03-03T17:28:31Z")

</div>

Hi, We just set up enterprise search for our website. We use the query suggestion api (/api/as/v1/engines/{ENGINE\_NAME}/query\_suggestion) on our frontend. Since our endpoint and public key are exposed, how can we rest…

---

## [Merge multiple fields in document into json array](https://discuss.elastic.co/t/merge-multiple-fields-in-document-into-json-array/266036)

<div class="topic-metadata">

**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\
**Replies:** 2\
**Last updated:** [March 3, 2021, 5:09pm UTC](https://discuss.elastic.co/t/merge-multiple-fields-in-document-into-json-array/266036 "2021-03-03T17:09:56Z")

</div>

Hi, I have following document Ingesting into Elasticsearch using the logstash \_source": { "server\_name": "abc", "server\_ip": "0.0.0.0", "server\_location: "us" "type" : "…

---

## [For large texts, indexing with offsets or term vectors is recommended](https://discuss.elastic.co/t/for-large-texts-indexing-with-offsets-or-term-vectors-is-recommended/266115)

<div class="topic-metadata">

**Author:** [@cas4](https://discuss.elastic.co/u/cas4)\
**Replies:** 2\
**Last updated:** [March 3, 2021, 4:47pm UTC](https://discuss.elastic.co/t/for-large-texts-indexing-with-offsets-or-term-vectors-is-recommended/266115 "2021-03-03T16:47:01Z")

</div>

I have an index that contains the text of files. Most files aren't that large, but some do have more than 1,000,000 characters. I'm using the default unified highlighter when displaying results to the end users. When a s…

---

## [I see timeout excpetion in logstash](https://discuss.elastic.co/t/i-see-timeout-excpetion-in-logstash/266140)

<div class="topic-metadata">

**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\
**Replies:** 0\
**Last updated:** [March 3, 2021, 4:20pm UTC](https://discuss.elastic.co/t/i-see-timeout-excpetion-in-logstash/266140 "2021-03-03T16:20:59Z")

</div>

Below is the error message in logstash-plain.log \[2021-03-03T16:00:46,719\]\[WARN \]\[io.netty.channel.DefaultChannelPipeline\]\[main\]\[ed5928ede48a4919694eb040ed1411b2d0e6482d5881ff856cc046fe3412681f\] An exceptionCaught() eve…

---

## [Elastic-Agent - filebeat and metricbeat - Error Log help](https://discuss.elastic.co/t/elastic-agent-filebeat-and-metricbeat-error-log-help/264054)

<div class="topic-metadata">

**Author:** [@cwobuzz](https://discuss.elastic.co/u/cwobuzz)\
**Replies:** 3\
**Last updated:** [March 3, 2021, 4:05pm UTC](https://discuss.elastic.co/t/elastic-agent-filebeat-and-metricbeat-error-log-help/264054 "2021-03-03T16:05:05Z")

</div>

I have ElasticSearch and Kibana running as dockers I documented it here: https://github.com/cwobuzz/Setting-up-Docker-Elastic-Kibana-Running-Sysmon-And-Agent/blob/master/.README.md My Elastic-Agent is pushing Endpoint s…

---

## [Upgrade Assistant: Internal Server Error](https://discuss.elastic.co/t/upgrade-assistant-internal-server-error/265955)

<div class="topic-metadata">

**Author:** [@adsr](https://discuss.elastic.co/u/adsr)\
**Replies:** 3\
**Last updated:** [March 3, 2021, 4:03pm UTC](https://discuss.elastic.co/t/upgrade-assistant-internal-server-error/265955 "2021-03-03T16:03:25Z")

</div>

Hello everyone, after upgrading to 7.11.1 (coming from 7.5.0) I notice that the "Upgrade Assistant" reports an Internal Server Error: I tried starting kibana with logging.verbose: true but can't seem to see any "usef…

---

## [Does elastic Security agent replace the use of Auditbeat, packetbeat, and filebeat agents?](https://discuss.elastic.co/t/does-elastic-security-agent-replace-the-use-of-auditbeat-packetbeat-and-filebeat-agents/266021)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 2\
**Last updated:** [March 3, 2021, 3:43pm UTC](https://discuss.elastic.co/t/does-elastic-security-agent-replace-the-use-of-auditbeat-packetbeat-and-filebeat-agents/266021 "2021-03-03T15:43:00Z")

</div>

I was watching a webinar of SIEM with version 7.2 of elastic, and the speaker use multiples agents (Auditbeat, packetbeat, and filebeat agents) to feed SIEM, and now with elastic 7.11 there is a new agent, Endpoint, I wa…

---

## [Disable auto refresh](https://discuss.elastic.co/t/disable-auto-refresh/264653)

<div class="topic-metadata">

**Author:** [@thaideval](https://discuss.elastic.co/u/thaideval)\
**Replies:** 4\
**Last updated:** [March 3, 2021, 3:24pm UTC](https://discuss.elastic.co/t/disable-auto-refresh/264653 "2021-03-03T15:24:51Z")

</div>

Hello, i was trying to disable auto refresh in Kibana. I would like to completely disable it. But timepicker:refreshInterval "pause": true is not working no matter what i do. It always goes back to enable and 10sec. Ki…

---

## [Can you confirm this is false positive?](https://discuss.elastic.co/t/can-you-confirm-this-is-false-positive/266119)

<div class="topic-metadata">

**Author:** [@ThiruKumaran](https://discuss.elastic.co/u/ThiruKumaran)\
**Replies:** 3\
**Last updated:** [March 3, 2021, 3:09pm UTC](https://discuss.elastic.co/t/can-you-confirm-this-is-false-positive/266119 "2021-03-03T15:09:05Z")

</div>

Hi, Could you please check this file, as I think it is a false detection. his file has been falsely detected as malware link for the issue : https://www.virustotal.com/gui/file/4f8248e9f80ce5c367f75956a2f6b77262e72964…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1025)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1027)
