# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1030

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1031

---

## [Index names are getting generated as 2021.53](https://discuss.elastic.co/t/index-names-are-getting-generated-as-2021-53/265763)

<div class="topic-metadata">

**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\
**Replies:** 4\
**Last updated:** [March 1, 2021, 2:18pm UTC](https://discuss.elastic.co/t/index-names-are-getting-generated-as-2021-53/265763 "2021-03-01T14:18:28Z")

</div>

Hi All.. The syntax for naming our indices for different applications is "application-YYYY-ww". But we are having some indices that are getting generated as application-2021.53. And they have significant sizes too, the…

---

## [Kibana\_system user management](https://discuss.elastic.co/t/kibana-system-user-management/265793)

<div class="topic-metadata">

**Author:** [@dimm](https://discuss.elastic.co/u/dimm)\
**Replies:** 2\
**Last updated:** [March 1, 2021, 1:58pm UTC](https://discuss.elastic.co/t/kibana-system-user-management/265793 "2021-03-01T13:58:52Z")

</div>

Hi, I'm faced with strange situation while trying to change password for reserved kibana\_system user: This is looks like vicious circle, when I'm trying to update password I'm getting: "roles are missing" when I'm tr…

---

## [ECK readiness for Kubernetes 1.19 - deprecated APIVersions](https://discuss.elastic.co/t/eck-readiness-for-kubernetes-1-19-deprecated-apiversions/236670)

<div class="topic-metadata">

**Author:** [@Presence](https://discuss.elastic.co/u/Presence)\
**Replies:** 6\
**Last updated:** [March 1, 2021, 1:35pm UTC](https://discuss.elastic.co/t/eck-readiness-for-kubernetes-1-19-deprecated-apiversions/236670 "2021-03-01T13:35:00Z")

</div>

Hi, We're using ECK Elastic Cloud on Kubernetes v1.1.2 on Kubernetes 1.16 and we notice that some of the APIVersions used are deprecated and scheduled to be dropped in Kubernetes 1.19. CustomResourceDefinition/apmserv…

---

## [Perform division of two fields in a Kibana visualisation](https://discuss.elastic.co/t/perform-division-of-two-fields-in-a-kibana-visualisation/265772)

<div class="topic-metadata">

**Author:** [@2f404140b7ab0f69189f](https://discuss.elastic.co/u/2f404140b7ab0f69189f)\
**Replies:** 5\
**Last updated:** [March 1, 2021, 1:19pm UTC](https://discuss.elastic.co/t/perform-division-of-two-fields-in-a-kibana-visualisation/265772 "2021-03-01T13:19:54Z")

</div>

I'm unable to perform a basic division of two fields on Kibana. First, I tried to do so in a Line Chart bu using the Advanced Json Input section with this script: {"script": "if(doc\['kpi.abc'\].value \> 0) then {(doc\['kpi…

---

## [Understanding fielddata mapping parameter](https://discuss.elastic.co/t/understanding-fielddata-mapping-parameter/265798)

<div class="topic-metadata">

**Author:** [@stravag](https://discuss.elastic.co/u/stravag)\
**Replies:** 0\
**Last updated:** [March 1, 2021, 12:58pm UTC](https://discuss.elastic.co/t/understanding-fielddata-mapping-parameter/265798 "2021-03-01T12:58:54Z")

</div>

I'm attempting to build a kind of "next word prediction" using elasticsearch. The goal is to have suggest search terms based on different fields of the index. I found a solution based on the work done here https://bilya…

---

## [Rs.8000.00 withdrawn from ATM using logstash](https://discuss.elastic.co/t/rs-8000-00-withdrawn-from-atm-using-logstash/265778)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 2\
**Last updated:** [March 1, 2021, 12:10pm UTC](https://discuss.elastic.co/t/rs-8000-00-withdrawn-from-atm-using-logstash/265778 "2021-03-01T12:10:19Z")

</div>

how to get amount from above sentence and convert into integer.

---

## [Fields are not populating in the kibana filter](https://discuss.elastic.co/t/fields-are-not-populating-in-the-kibana-filter/265589)

<div class="topic-metadata">

**Author:** [@gobi\_s](https://discuss.elastic.co/u/gobi_s)\
**Replies:** 3\
**Last updated:** [March 1, 2021, 11:38am UTC](https://discuss.elastic.co/t/fields-are-not-populating-in-the-kibana-filter/265589 "2021-03-01T11:38:51Z")

</div>

Fields are not populating in the kibana filter. whereas i could see fields in the search. can you pls let me know if I need to add anything.

---

## [% calculation doesn't seem correct](https://discuss.elastic.co/t/calculation-doesnt-seem-correct/265590)

<div class="topic-metadata">

**Author:** [@vivekshukla](https://discuss.elastic.co/u/vivekshukla)\
**Replies:** 4\
**Last updated:** [March 1, 2021, 11:27am UTC](https://discuss.elastic.co/t/calculation-doesnt-seem-correct/265590 "2021-03-01T11:27:34Z")

</div>

Hi Team, I drew a Metric using TSVB by following the excellent article https://www.elastic.co/blog/how-to-display-data-as-a-percentage-in-kibana-visualizations So far so good. But when I am calculating the % manually,…

---

## [Engineer 2 : Lab 3.1, no Kibana has been installed on server7](https://discuss.elastic.co/t/engineer-2-lab-3-1-no-kibana-has-been-installed-on-server7/265751)

<div class="topic-metadata">

**Author:** [@suselena22](https://discuss.elastic.co/u/suselena22)\
**Replies:** 3\
**Last updated:** [March 1, 2021, 11:10am UTC](https://discuss.elastic.co/t/engineer-2-lab-3-1-no-kibana-has-been-installed-on-server7/265751 "2021-03-01T11:10:05Z")

</div>

Hi there: I was having trouble to restart the Kibana after I configured the security in Lab 3.1. I noticed that, I won't able to find Kibana installation directory when I ssh to server7 and I tried to install it but cou…

---

## [Kubectl top vs kubernetes.pod.memory.usage.bytes / kubernetes.pod.cpu.usage.nanocores](https://discuss.elastic.co/t/kubectl-top-vs-kubernetes-pod-memory-usage-bytes-kubernetes-pod-cpu-usage-nanocores/265395)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 1\
**Last updated:** [March 1, 2021, 10:44am UTC](https://discuss.elastic.co/t/kubectl-top-vs-kubernetes-pod-memory-usage-bytes-kubernetes-pod-cpu-usage-nanocores/265395 "2021-03-01T10:44:32Z")

</div>

I am comparing the output of kubectl top with kubernetes.pod.memory.usage.bytes and kubernetes.pod.cpu.usage.nanocores I am looking for a stat which is closest to kubectl top for both memory and cpu.

---

## [Kibana and logstash](https://discuss.elastic.co/t/kibana-and-logstash/265781)

<div class="topic-metadata">

**Author:** [@Gharsa\_Khouloud](https://discuss.elastic.co/u/Gharsa_Khouloud)\
**Replies:** 0\
**Last updated:** [March 1, 2021, 10:42am UTC](https://discuss.elastic.co/t/kibana-and-logstash/265781 "2021-03-01T10:42:59Z")

</div>

What is the best way to integrate more than one collection of mongodb into Kibana via Logstash and Elasticsearch . i want to join two or 3 collection from my database and index it in one index to elasticsearch ?

---

## [Elasticsearch Number of Replicas](https://discuss.elastic.co/t/elasticsearch-number-of-replicas/265593)

<div class="topic-metadata">

**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\
**Replies:** 2\
**Last updated:** [March 1, 2021, 10:39am UTC](https://discuss.elastic.co/t/elasticsearch-number-of-replicas/265593 "2021-03-01T10:39:18Z")

</div>

Elasticsearch only has one node I created template in error e.g. 1 shard (Primary) and 1 replica so I have updated the template for no replica. PUT friday-000012/\_settings {"number\_of\_replicas": 0} I checked the templ…

---

## [Logstash has stopped processing logs suddenly](https://discuss.elastic.co/t/logstash-has-stopped-processing-logs-suddenly/264273)

<div class="topic-metadata">

**Author:** [@amanpradhan](https://discuss.elastic.co/u/amanpradhan)\
**Replies:** 1\
**Last updated:** [March 1, 2021, 10:33am UTC](https://discuss.elastic.co/t/logstash-has-stopped-processing-logs-suddenly/264273 "2021-03-01T10:33:12Z")

</div>

Hi Everyone, My logstash stopped processing logs all of sudden when i checked in kibana one day. I did not make any changes in any config and it was working earlier from past one year. Now it is giving below error At…

---

## [Logstash parsing json](https://discuss.elastic.co/t/logstash-parsing-json/265163)

<div class="topic-metadata">

**Author:** [@ali\_ghorbani](https://discuss.elastic.co/u/ali_ghorbani)\
**Replies:** 8\
**Last updated:** [March 1, 2021, 10:23am UTC](https://discuss.elastic.co/t/logstash-parsing-json/265163 "2021-03-01T10:23:51Z")

</div>

I am trying to use log-stash to read input file 1.log in JSON format and write on elasticsearch. This is my log file: {"key":"value00"} {"key":"value01"} {"key1":\[{"key2":"value02"},{"key3":"value03"},{"key4":\[{"key5":"…

---

## [Dev Tools Throwing Storage Quota Error](https://discuss.elastic.co/t/dev-tools-throwing-storage-quota-error/265693)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 1\
**Last updated:** [March 1, 2021, 9:36am UTC](https://discuss.elastic.co/t/dev-tools-throwing-storage-quota-error/265693 "2021-03-01T09:36:41Z")

</div>

Hello, Got the following error while working in Dev Tools Kibana 7.10.2: Error: Failed to execute 'setItem' on 'Storage': Setting the value of 'sense:hist\_elem\_1614440073476' exceeded the quota. at Storage.set (htt…

---

## [Date range as metric](https://discuss.elastic.co/t/date-range-as-metric/265675)

<div class="topic-metadata">

**Author:** [@sramya](https://discuss.elastic.co/u/sramya)\
**Replies:** 1\
**Last updated:** [March 1, 2021, 9:30am UTC](https://discuss.elastic.co/t/date-range-as-metric/265675 "2021-03-01T09:30:52Z")

</div>

I am new to Kibana and want to know if this is possible. My app makes service calls and many times it gets zero transactions and a few times it receives transactions. I want to create a table that may look like this S…

---

## [Kibana Dev Tools Console Broken v7.11](https://discuss.elastic.co/t/kibana-dev-tools-console-broken-v7-11/265732)

<div class="topic-metadata">

**Author:** [@Cesidio\_DiBenedetto](https://discuss.elastic.co/u/Cesidio_DiBenedetto)\
**Replies:** 1\
**Last updated:** [March 1, 2021, 9:28am UTC](https://discuss.elastic.co/t/kibana-dev-tools-console-broken-v7-11/265732 "2021-03-01T09:28:13Z")

</div>

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-xxxxxxx'), or a nonce ('nonce-.…

---

## [Selecting "file" in logstash input does not send to elasticsearch](https://discuss.elastic.co/t/selecting-file-in-logstash-input-does-not-send-to-elasticsearch/265602)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 8\
**Last updated:** [March 1, 2021, 8:04am UTC](https://discuss.elastic.co/t/selecting-file-in-logstash-input-does-not-send-to-elasticsearch/265602 "2021-03-01T08:04:24Z")

</div>

I am trying to send log files from logstash to elasticsearch. I have completed the whole setup and the test to send the standard input to elasticsearch has passed. Now, I want to send the file to elasticsearch by speci…

---

## [Data loss in bulk update for field type date using painless script](https://discuss.elastic.co/t/data-loss-in-bulk-update-for-field-type-date-using-painless-script/265761)

<div class="topic-metadata">

**Author:** [@Manjunath\_Kadrolli](https://discuss.elastic.co/u/Manjunath_Kadrolli)\
**Replies:** 0\
**Last updated:** [March 1, 2021, 7:16am UTC](https://discuss.elastic.co/t/data-loss-in-bulk-update-for-field-type-date-using-painless-script/265761 "2021-03-01T07:16:01Z")

</div>

Following is a row from my bulk update http body When i run the same for small set of records (100) the same works fine but if i trigger the for the entire DB the the valueTimestamp field always null where other values …

---

## [How to configure ingest pipeline with filebeat to send filtered data to elastic search](https://discuss.elastic.co/t/how-to-configure-ingest-pipeline-with-filebeat-to-send-filtered-data-to-elastic-search/265755)

<div class="topic-metadata">

**Author:** [@chintu1411](https://discuss.elastic.co/u/chintu1411)\
**Replies:** 0\
**Last updated:** [March 1, 2021, 6:51am UTC](https://discuss.elastic.co/t/how-to-configure-ingest-pipeline-with-filebeat-to-send-filtered-data-to-elastic-search/265755 "2021-03-01T06:51:24Z")

</div>

Hi All, this is very first time we are using ELK with filebeat. we have been instructed to use ingest pipeline to use it with filebeat to filter the data. all over the internet and elastic.co only its given how to wri…

---

## [Controls visualization filter uses the default index pattern](https://discuss.elastic.co/t/controls-visualization-filter-uses-the-default-index-pattern/265553)

<div class="topic-metadata">

**Author:** [@yash\_gupta](https://discuss.elastic.co/u/yash_gupta)\
**Replies:** 2\
**Last updated:** [March 1, 2021, 6:30am UTC](https://discuss.elastic.co/t/controls-visualization-filter-uses-the-default-index-pattern/265553 "2021-03-01T06:30:45Z")

</div>

Hi, I did end up in this situation where the filter uses default index and no option to change it. I also know that this is an known defect and just wanted to check if we have any resolution or work around for this ? de…

---

## [Elasticsearch IOPS](https://discuss.elastic.co/t/elasticsearch-iops/265680)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 10\
**Last updated:** [March 1, 2021, 6:10am UTC](https://discuss.elastic.co/t/elasticsearch-iops/265680 "2021-03-01T06:10:15Z")

</div>

Hello Team I am having Elasticsearch version 5.6.3 running on RHEL 7.4. This Cluster is of 10 nodes. Hardware : 8 CPU and 32 GB RAM. Hard Disk : HDD { CEPH Storage } Elastic Data Paths : Multiple { 7 Different mount …

---

## [CPU running high only on one node at time in the ES cluster](https://discuss.elastic.co/t/cpu-running-high-only-on-one-node-at-time-in-the-es-cluster/265708)

<div class="topic-metadata">

**Author:** [@sbk-elk](https://discuss.elastic.co/u/sbk-elk)\
**Replies:** 5\
**Last updated:** [March 1, 2021, 5:03am UTC](https://discuss.elastic.co/t/cpu-running-high-only-on-one-node-at-time-in-the-es-cluster/265708 "2021-03-01T05:03:53Z")

</div>

Not sure why only one node in the cluster has such high CPU when there is nothing happening in the cluster. top - 00:34:43 up 137 days, 17:43, 1 user, load average: 1.24, 2.14, 3.15 Tasks: 198 total, 1 running, 197 …

---

## [How to stop logstash to not creating multiple conf.save file](https://discuss.elastic.co/t/how-to-stop-logstash-to-not-creating-multiple-conf-save-file/265747)

<div class="topic-metadata">

**Author:** [@asan](https://discuss.elastic.co/u/asan)\
**Replies:** 1\
**Last updated:** [March 1, 2021, 4:55am UTC](https://discuss.elastic.co/t/how-to-stop-logstash-to-not-creating-multiple-conf-save-file/265747 "2021-03-01T04:55:13Z")

</div>

Hi Recently i configured logstsh for parsing my mikrotik and fortigate log and they are working correctly but in conf.d logstsh started to create multiple conf.save like : mikrotik.conf.save.1, mikrotik.conf.save.2, m…

---

## [Elastic Stack alerting now generally available](https://discuss.elastic.co/t/elastic-stack-alerting-now-generally-available/265714)

<div class="topic-metadata">

**Author:** [@arp220](https://discuss.elastic.co/u/arp220)\
**Replies:** 1\
**Last updated:** [February 28, 2021, 4:33pm UTC](https://discuss.elastic.co/t/elastic-stack-alerting-now-generally-available/265714 "2021-02-28T16:33:09Z")

</div>

Hello. I use elasticsearch and kibana 7.11.1 but alerting slack and webhook and etc, They are not activatedfor me. . I have to do something special? thanks.

---

## [Aggregation to find largest range (diff of min max)](https://discuss.elastic.co/t/aggregation-to-find-largest-range-diff-of-min-max/265710)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 2\
**Last updated:** [March 1, 2021, 12:03am UTC](https://discuss.elastic.co/t/aggregation-to-find-largest-range-diff-of-min-max/265710 "2021-03-01T00:03:16Z")

</div>

Is there a way to quickly find the largest range of values (i.e. the difference of min and max within a timeframe)? What I want to do: in a time series with an example doc structured as something like below, find the pr…

---

## [Calculating size of record in queue](https://discuss.elastic.co/t/calculating-size-of-record-in-queue/265727)

<div class="topic-metadata">

**Author:** [@pikomen](https://discuss.elastic.co/u/pikomen)\
**Replies:** 1\
**Last updated:** [February 28, 2021, 11:35pm UTC](https://discuss.elastic.co/t/calculating-size-of-record-in-queue/265727 "2021-02-28T23:35:30Z")

</div>

hi, any way to calculate record size in write.queue\_size? from 7.9 the write.queue\_size was updated from 200 to 10000 and I wonder if the heap size of 16 Gb can hold all the 10000 requests (most of them bulk requests) i…

---

## [Multi \_update\_by\_query API like MultiSearch \_msearch - how to? possible?](https://discuss.elastic.co/t/multi-update-by-query-api-like-multisearch-msearch-how-to-possible/261673)

<div class="topic-metadata">

**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\
**Replies:** 3\
**Last updated:** [February 28, 2021, 11:15pm UTC](https://discuss.elastic.co/t/multi-update-by-query-api-like-multisearch-msearch-how-to-possible/261673 "2021-02-28T23:15:28Z")

</div>

Hi all, I have following question regarding the multiple search api \_msearch Is there a way to do the same by using the \_update\_by\_query api ? UseCase: change entries of fields based on mutliple bool query like: POST…

---

## [Uknown fields](https://discuss.elastic.co/t/uknown-fields/265254)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 4\
**Last updated:** [February 28, 2021, 10:51pm UTC](https://discuss.elastic.co/t/uknown-fields/265254 "2021-02-28T22:51:30Z")

</div>

In newest ELK stack, how I should deal with unknown fields? Before this version it was just about refresh index pattern. What should I do now? Removing and adding pattern will lead to lost my edits made in this pattern l…

---

## [Manage connection between source and target clusters for remote index](https://discuss.elastic.co/t/manage-connection-between-source-and-target-clusters-for-remote-index/265701)

<div class="topic-metadata">

**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\
**Replies:** 2\
**Last updated:** [February 28, 2021, 10:15pm UTC](https://discuss.elastic.co/t/manage-connection-between-source-and-target-clusters-for-remote-index/265701 "2021-02-28T22:15:17Z")

</div>

We are migrating our ES cluster to a new environment (from stand-alone Azure VMs to Service Fabric hosted, updating the OS image, upgrading ES version, adding security etc.). I have my new cluster ready for data and am w…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1029)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1031)
