# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1059 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1060 --- ## [Aggregate similar documents](https://discuss.elastic.co/t/aggregate-similar-documents/263332)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 6:30am UTC](https://discuss.elastic.co/t/aggregate-similar-documents/263332 "2021-02-05T06:30:09Z")
I have a documents see example "message":"Syslog connection established; fd='15', server='AF\_INET(111.103.111.65:1514)', local='AF\_INET(0.0.0.0:0)'" "message":"Syslog connection established; fd='14', server='AF\_INET(222… --- ## [Why I got so many entries \*.createdAt and \*.updatedAt inside "fields"?](https://discuss.elastic.co/t/why-i-got-so-many-entries-createdat-and-updatedat-inside-fields/263326)
**Author:** [@thesn](https://discuss.elastic.co/u/thesn)\ **Replies:** 1\ **Last updated:** [February 5, 2021, 4:33am UTC](https://discuss.elastic.co/t/why-i-got-so-many-entries-createdat-and-updatedat-inside-fields/263326 "2021-02-05T04:33:02Z")
Hi, I am new to ELK. I have filebeat 7.8.1, Logstash 7.8.0 (in docker), Elasticsearch 7.8.0. I have log like this in my .log file: {"@timestamp":"2021-02-03T09:43:44.439+07:00","@version":"1","message":"channelAct… --- ## [Routing key for multi index query](https://discuss.elastic.co/t/routing-key-for-multi-index-query/263322)
**Author:** [@prosens](https://discuss.elastic.co/u/prosens)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 3:16am UTC](https://discuss.elastic.co/t/routing-key-for-multi-index-query/263322 "2021-02-05T03:16:13Z")
For a multi-index query, is it possible to specify a separate routing key for each index? --- ## [Field reference with a split event](https://discuss.elastic.co/t/field-reference-with-a-split-event/263315)
**Author:** [@jiacob](https://discuss.elastic.co/u/jiacob)\ **Replies:** 1\ **Last updated:** [February 5, 2021, 12:20am UTC](https://discuss.elastic.co/t/field-reference-with-a-split-event/263315 "2021-02-05T00:20:25Z")
Hello, I'm looking into trying to split a nested field that uses a field reference and I'm not sure which is the right way of doing it. split { field =\> "\[field1\]\[field2\]\['%{\[field3\]}'\]" } This gives me a field refere… --- ## [Date format error from elasticsearch](https://discuss.elastic.co/t/date-format-error-from-elasticsearch/263307)
**Author:** [@earlsanchez](https://discuss.elastic.co/u/earlsanchez)\ **Replies:** 2\ **Last updated:** [February 4, 2021, 11:32pm UTC](https://discuss.elastic.co/t/date-format-error-from-elasticsearch/263307 "2021-02-04T23:32:11Z")
Hello, I originally posted this in the Logstash forum but it was suggested that I should post in Elasticsearch instead. I'm getting a date format error from elasticsearch but the format seems to match the posted date o… --- ## [Date format error from logstash](https://discuss.elastic.co/t/date-format-error-from-logstash/263299)
**Author:** [@earlsanchez](https://discuss.elastic.co/u/earlsanchez)\ **Replies:** 4\ **Last updated:** [February 4, 2021, 11:26pm UTC](https://discuss.elastic.co/t/date-format-error-from-logstash/263299 "2021-02-04T23:26:33Z")
Hello, I'm getting a date format error from logstash but the format seems to match the posted date object. Can some one see specifically what it is complaining about? Logstash error: {"error":{"root\_cause":\[{"type":"m… --- ## [Dropdown in Kibana](https://discuss.elastic.co/t/dropdown-in-kibana/263217)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 2\ **Last updated:** [February 4, 2021, 11:13pm UTC](https://discuss.elastic.co/t/dropdown-in-kibana/263217 "2021-02-04T23:13:00Z")
How to make a drop-down in Kibana. In reality i want to get realised a drop-down list with the information as in the following photo. Thank you all --- ## [Can ES host a form that posts to an API?](https://discuss.elastic.co/t/can-es-host-a-form-that-posts-to-an-api/263070)
**Author:** [@irwazr](https://discuss.elastic.co/u/irwazr)\ **Replies:** 2\ **Last updated:** [February 4, 2021, 10:58pm UTC](https://discuss.elastic.co/t/can-es-host-a-form-that-posts-to-an-api/263070 "2021-02-04T22:58:14Z")
We want to be able to create a form in ES/Kibana that allows users to select an option from a dropdown list, and then click a button to make a POST to an API. Is this possible in ES or Kibana? If so, how? Thanks heaps… --- ## [Filebeat's Data not showing in Kibana Dashboard](https://discuss.elastic.co/t/filebeats-data-not-showing-in-kibana-dashboard/263115)
**Author:** [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\ **Replies:** 3\ **Last updated:** [February 4, 2021, 10:47pm UTC](https://discuss.elastic.co/t/filebeats-data-not-showing-in-kibana-dashboard/263115 "2021-02-04T22:47:54Z")
I have install ELK on ubuntu18.04 for monitoring remote server logs. On remote server i have installed Filebeat to send data to logstash. Remote server's logs are showing in Kibana--\>observability--\>logs. But in dashboad… --- ## [Elasticsearch rollup question](https://discuss.elastic.co/t/elasticsearch-rollup-question/263095)
**Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\ **Replies:** 1\ **Last updated:** [February 4, 2021, 10:46pm UTC](https://discuss.elastic.co/t/elasticsearch-rollup-question/263095 "2021-02-04T22:46:08Z")
hI I Just have a question re the rollup feature. if i have a index, attached to a ILM which deletes the index after 30 days. if i roll this up daily, does the rollup job also delete the index once it has completed, or… --- ## [Simple Query String Search - Wildcard (\*) inside a phrase (" ")](https://discuss.elastic.co/t/simple-query-string-search-wildcard-inside-a-phrase/263190)
**Author:** [@russellmenezes](https://discuss.elastic.co/u/russellmenezes)\ **Replies:** 1\ **Last updated:** [February 4, 2021, 10:40pm UTC](https://discuss.elastic.co/t/simple-query-string-search-wildcard-inside-a-phrase/263190 "2021-02-04T22:40:36Z")
Hi every one, I've been looking all over the web on how to preform a wildcard query inside a phrase search. I have used the English Analyzer to index a text field. I have also modified the analyzer with a custom mappi… --- ## [Filtrar a diretiva request nos logs do NAXSI](https://discuss.elastic.co/t/filtrar-a-diretiva-request-nos-logs-do-naxsi/263302)
**Author:** [@Saulo\_Neiva](https://discuss.elastic.co/u/Saulo_Neiva)\ **Replies:** 2\ **Last updated:** [February 4, 2021, 10:36pm UTC](https://discuss.elastic.co/t/filtrar-a-diretiva-request-nos-logs-do-naxsi/263302 "2021-02-04T22:36:56Z")
Olá Pessoal Estou com um problema a meses e gostaria de uma ajuda de vocês.... Estou usando os logs do NAXSI e não estou conseguinto filtrar no logstash alguns parametros. 2021/02/03 21:53:08 \[error\] 4464#4464: \*13928… --- ## [Create Field for Control Visualization](https://discuss.elastic.co/t/create-field-for-control-visualization/261025)
**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\ **Replies:** 2\ **Last updated:** [February 4, 2021, 10:10pm UTC](https://discuss.elastic.co/t/create-field-for-control-visualization/261025 "2021-02-04T22:10:55Z")
I am looking at creating a friendly ID for use in the Controls Visualization to aid in filtering dashboard results. For some reason, I can't seem to create a field which is available in the Field selector of that visual… --- ## [Kibana plugin standalone build](https://discuss.elastic.co/t/kibana-plugin-standalone-build/263282)
**Author:** [@zixon89](https://discuss.elastic.co/u/zixon89)\ **Replies:** 2\ **Last updated:** [February 4, 2021, 8:56pm UTC](https://discuss.elastic.co/t/kibana-plugin-standalone-build/263282 "2021-02-04T20:56:52Z")
Hi there, I'm still fresh with Kibana plugin development, so currently I'm doing building by using this (Getting started | Kibana Guide \[7.10\] | Elastic) guide: Clone Kibana repo Set my plugin inside kibana's plugin f… --- ## [Почему не работает dfs\_query\_then\_fetch?](https://discuss.elastic.co/t/dfs-query-then-fetch/262474)
**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\ **Replies:** 23\ **Last updated:** [February 4, 2021, 8:42pm UTC](https://discuss.elastic.co/t/dfs-query-then-fetch/262474 "2021-02-04T20:42:05Z")
Давным-давно, была проблема: выполняя один и тот же запрос мы получали разный список документов. Оказалось из-за близости \_score два документна меняли местами в зависимости от того на какой шард уйдет запрос. Тогда я из… --- ## [Metricbeat showing values as 1000% in dashboard](https://discuss.elastic.co/t/metricbeat-showing-values-as-1000-in-dashboard/263216)
**Author:** [@vinod\_kumar](https://discuss.elastic.co/u/vinod_kumar)\ **Replies:** 1\ **Last updated:** [February 4, 2021, 7:00pm UTC](https://discuss.elastic.co/t/metricbeat-showing-values-as-1000-in-dashboard/263216 "2021-02-04T19:00:07Z")
I have configured Metricbeat but showing values as 1000% instead of 100%. How this can be resolved --- ## [Add Date and Time on TSVB Graph](https://discuss.elastic.co/t/add-date-and-time-on-tsvb-graph/263239)
**Author:** [@pavansh](https://discuss.elastic.co/u/pavansh)\ **Replies:** 1\ **Last updated:** [February 4, 2021, 7:00pm UTC](https://discuss.elastic.co/t/add-date-and-time-on-tsvb-graph/263239 "2021-02-04T19:00:04Z")
Check this Screenshot, Is there any way to add Date and Time on TSVB Graph? --- ## [Error 404 on \[server\]/\_search (works fine on my other instance!)](https://discuss.elastic.co/t/error-404-on-server-search-works-fine-on-my-other-instance/263288)
**Author:** [@thiago.preihs](https://discuss.elastic.co/u/thiago.preihs)\ **Replies:** 0\ **Last updated:** [February 4, 2021, 6:51pm UTC](https://discuss.elastic.co/t/error-404-on-server-search-works-fine-on-my-other-instance/263288 "2021-02-04T18:51:57Z")
Hello guys! I am scratching my head to understand why the same very simple query works fine on one instance (v. 7.6.0) but does not work on my other instance (v. 7.9.3) - I get 404. curl --location --request GET 'https… --- ## [Values near to 0 are not visible in histogram](https://discuss.elastic.co/t/values-near-to-0-are-not-visible-in-histogram/263229)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 1\ **Last updated:** [February 4, 2021, 6:30pm UTC](https://discuss.elastic.co/t/values-near-to-0-are-not-visible-in-histogram/263229 "2021-02-04T18:30:23Z")
Hi, In an histogram visualization, when the values of the field of the Metrics are near to 0, you can hardly see them. Is there any way to zoom also in x-axis except of the zoom in y-axis you can now do? Or other way to… --- ## [Drop documents when similar to previous processed ones](https://discuss.elastic.co/t/drop-documents-when-similar-to-previous-processed-ones/262484)
**Author:** [@Ernesto\_Guerra](https://discuss.elastic.co/u/Ernesto_Guerra)\ **Replies:** 2\ **Last updated:** [February 4, 2021, 5:01pm UTC](https://discuss.elastic.co/t/drop-documents-when-similar-to-previous-processed-ones/262484 "2021-02-04T17:01:15Z")
Hello, I'm pretty new to this but I would like to know if there is the possibility to drop one document in a logstash configuration file if the timestamp is similar to a previous one processed. For example, I would like… --- ## [Logstash JVM Heap Errors (Not Allocating to Xms)](https://discuss.elastic.co/t/logstash-jvm-heap-errors-not-allocating-to-xms/263270)
**Author:** [@randyitguy](https://discuss.elastic.co/u/randyitguy)\ **Replies:** 0\ **Last updated:** [February 4, 2021, 4:57pm UTC](https://discuss.elastic.co/t/logstash-jvm-heap-errors-not-allocating-to-xms/263270 "2021-02-04T16:57:00Z")
I'm using logstash 7.10. I have 3 pipelines with 3 different input sources. Two out of the three stop producing output after a short number of documents. One of them runs fine. If I try to run logstash with all 3 specifi… --- ## [How to create table with a term and percentage value from boolean property](https://discuss.elastic.co/t/how-to-create-table-with-a-term-and-percentage-value-from-boolean-property/262893)
**Author:** [@shellshock79](https://discuss.elastic.co/u/shellshock79)\ **Replies:** 1\ **Last updated:** [February 4, 2021, 4:34pm UTC](https://discuss.elastic.co/t/how-to-create-table-with-a-term-and-percentage-value-from-boolean-property/262893 "2021-02-04T16:34:39Z")
Hi Guys, I have been going round and round for days with this one and seem to hit a dead end no matter what I try. I keep pushing because I have a feeling it should be fairly easy, but alas I cannot find how to do it. P… --- ## [Hiding Visualization on Dashboard](https://discuss.elastic.co/t/hiding-visualization-on-dashboard/263080)
**Author:** [@maniGupt](https://discuss.elastic.co/u/maniGupt)\ **Replies:** 1\ **Last updated:** [February 4, 2021, 4:30pm UTC](https://discuss.elastic.co/t/hiding-visualization-on-dashboard/263080 "2021-02-04T16:30:07Z")
HI , Is there a way to hide a visualization if there is "no result found" for it , on dashboard. There are many control filters, based on which, some visualization might not have data. Can we hide such visualization a… --- ## [How i can add option field in Kibana metrics](https://discuss.elastic.co/t/how-i-can-add-option-field-in-kibana-metrics/263141)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 1\ **Last updated:** [February 4, 2021, 4:25pm UTC](https://discuss.elastic.co/t/how-i-can-add-option-field-in-kibana-metrics/263141 "2021-02-04T16:25:02Z")
Hello everybody. I need help. how can add field option in kibana. the result should be like the follow pictures. thank in advance --- ## [Kibana Shard Issue](https://discuss.elastic.co/t/kibana-shard-issue/263203)
**Author:** [@Daniel\_J1996](https://discuss.elastic.co/u/Daniel_J1996)\ **Replies:** 1\ **Last updated:** [February 4, 2021, 4:23pm UTC](https://discuss.elastic.co/t/kibana-shard-issue/263203 "2021-02-04T16:23:56Z")
Hey all, I'm trying to build a test cluster pertaining to 1 master node and 2 data nodes. The master node runs elasticsearch and Kibana while the other two nodes only run elasticsearch. I am running into an issue with K… --- ## [ES 7.8 Percolate Performance Issues](https://discuss.elastic.co/t/es-7-8-percolate-performance-issues/263262)
**Author:** [@plush](https://discuss.elastic.co/u/plush)\ **Replies:** 0\ **Last updated:** [February 4, 2021, 3:23pm UTC](https://discuss.elastic.co/t/es-7-8-percolate-performance-issues/263262 "2021-02-04T15:23:46Z")
We've recently updated our Elasticsearch cluster version from 6.7 to 7.8. Since we upgraded, we've noticed that the performance of our percolate queries has significantly degraded. For reference, when running a single-t… --- ## [Logstash elasticsearch output plugin - Populating api\_key from metadata field does not work](https://discuss.elastic.co/t/logstash-elasticsearch-output-plugin-populating-api-key-from-metadata-field-does-not-work/263259)
**Author:** [@vigneshr35](https://discuss.elastic.co/u/vigneshr35)\ **Replies:** 0\ **Last updated:** [February 4, 2021, 3:13pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-plugin-populating-api-key-from-metadata-field-does-not-work/263259 "2021-02-04T15:13:50Z")
Hi All, I am using the elasticsearch output plugin of logstash to post my events to elasticsearch. I am using the api\_key authentication method. It is all working fine until I have the api\_key parameter value hardcoded.… --- ## [\[ES 7.6\] regular expression has redundant nested repeat operator](https://discuss.elastic.co/t/es-7-6-regular-expression-has-redundant-nested-repeat-operator/220835)
**Author:** [@yurgers](https://discuss.elastic.co/u/yurgers)\ **Replies:** 8\ **Last updated:** [February 4, 2021, 2:54pm UTC](https://discuss.elastic.co/t/es-7-6-regular-expression-has-redundant-nested-repeat-operator/220835 "2021-02-04T14:54:03Z")
good day! I'm new to ELK Noticed that after updating ES to 7.6 a large number of messages started appearing in /var/log/messages Feb 25 13:55:01 elasticsearch elasticsearch\[23298\]: regular expression has redundant ne… --- ## [Can I use my time range in a details visualization?](https://discuss.elastic.co/t/can-i-use-my-time-range-in-a-details-visualization/263255)
**Author:** [@ematal96](https://discuss.elastic.co/u/ematal96)\ **Replies:** 0\ **Last updated:** [February 4, 2021, 2:44pm UTC](https://discuss.elastic.co/t/can-i-use-my-time-range-in-a-details-visualization/263255 "2021-02-04T14:44:17Z")
Hi all, I need to parse my time range into my scripted field to set a details table to start from: "time-range-start" , to:"time-range-end". Actually i've a scripted filed that create the visualization with a fixed t… --- ## [Same output when searching exact phrase in Discovery search](https://discuss.elastic.co/t/same-output-when-searching-exact-phrase-in-discovery-search/263248)
**Author:** [@nastymajestic](https://discuss.elastic.co/u/nastymajestic)\ **Replies:** 0\ **Last updated:** [February 4, 2021, 2:09pm UTC](https://discuss.elastic.co/t/same-output-when-searching-exact-phrase-in-discovery-search/263248 "2021-02-04T14:09:00Z")
I'm trying to search for exact phrase in Discovery tab. In "message" field I'm trying to search for "transactionId:" phrase (with quotation marks) and when I search for it like this: "message": "\\"transactionId\\"\\:" It… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1058) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1060)