# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1098 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1099 --- ## [Create bar visualization with count multiple boolean variables](https://discuss.elastic.co/t/create-bar-visualization-with-count-multiple-boolean-variables/259904)
**Author:** [@Joao\_Palma](https://discuss.elastic.co/u/Joao_Palma)\ **Replies:** 3\ **Last updated:** [December 30, 2020, 7:24pm UTC](https://discuss.elastic.co/t/create-bar-visualization-with-count-multiple-boolean-variables/259904 "2020-12-30T19:24:00Z")
Hello, I have an log like this: {"option1":"false", "option2":"true", "option3":"false"} {"option1":"true", "option2":"true", "option3":"false"} {"option1":"false", "option2":"true", "option3":"true"} ... And… --- ## [Difficulty displaying all hits in kibana](https://discuss.elastic.co/t/difficulty-displaying-all-hits-in-kibana/259790)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 13\ **Last updated:** [December 30, 2020, 7:19pm UTC](https://discuss.elastic.co/t/difficulty-displaying-all-hits-in-kibana/259790 "2020-12-30T19:19:45Z")
Hello, I send the logs continuously to logstash. But, the logs are not displayed continuously in kibana. It shows me 8 hits over the last 7 days. While logs logs have been sent continuously for 7 days. Can you help m… --- ## [Querying a file path field by just the basename](https://discuss.elastic.co/t/querying-a-file-path-field-by-just-the-basename/257582)
**Author:** [@dansei](https://discuss.elastic.co/u/dansei)\ **Replies:** 6\ **Last updated:** [December 30, 2020, 7:02pm UTC](https://discuss.elastic.co/t/querying-a-file-path-field-by-just-the-basename/257582 "2020-12-30T19:02:25Z")
I have a field that stores the full path of a file on disk. The file's basename is unique and I'd like to be able to query for just the basename as well. The simplest solution is to add a second field which contains the… --- ## [Is it possible to remove unrelated y-axis value in visualization?](https://discuss.elastic.co/t/is-it-possible-to-remove-unrelated-y-axis-value-in-visualization/259818)
**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\ **Replies:** 1\ **Last updated:** [December 30, 2020, 7:01pm UTC](https://discuss.elastic.co/t/is-it-possible-to-remove-unrelated-y-axis-value-in-visualization/259818 "2020-12-30T19:01:11Z")
Hi, I have a log coming in from different sources with exitCode. I created a heatmap to show how many exitCode happened in specific source. However, sometimes one of the source doesn't have some of the exitCode, but it… --- ## [Data Node Hardware Failure](https://discuss.elastic.co/t/data-node-hardware-failure/259887)
**Author:** [@jalaine](https://discuss.elastic.co/u/jalaine)\ **Replies:** 16\ **Last updated:** [December 30, 2020, 6:22pm UTC](https://discuss.elastic.co/t/data-node-hardware-failure/259887 "2020-12-30T18:22:58Z")
Hi there, Unfortunately, due to the circumstances of where I work I can't be to specific or share screen shots, but hopefully I can get you guys in the ballpark. We have a cluster that is made up of 7 data nodes (dell r… --- ## [Prioritise a "should" query](https://discuss.elastic.co/t/prioritise-a-should-query/259907)
**Author:** [@ivanibash](https://discuss.elastic.co/u/ivanibash)\ **Replies:** 0\ **Last updated:** [December 30, 2020, 6:19pm UTC](https://discuss.elastic.co/t/prioritise-a-should-query/259907 "2020-12-30T18:19:02Z")
I have a should query like query: { bool: { should: \[ { match: { name: value, } }, { … --- ## [Help with installing elastic stack](https://discuss.elastic.co/t/help-with-installing-elastic-stack/259831)
**Author:** [@Grant1999](https://discuss.elastic.co/u/Grant1999)\ **Replies:** 2\ **Last updated:** [December 30, 2020, 5:32pm UTC](https://discuss.elastic.co/t/help-with-installing-elastic-stack/259831 "2020-12-30T17:32:10Z")
I have downloaded elastic search and kibana, extracted them both into a folder called elastic stack and when trying to run elastic search in the command prompt it comes up with this error. Any ideas how to resolve this?.… --- ## [How to create chart for User Growth Rate in kibana](https://discuss.elastic.co/t/how-to-create-chart-for-user-growth-rate-in-kibana/258692)
**Author:** [@dharanesh](https://discuss.elastic.co/u/dharanesh)\ **Replies:** 3\ **Last updated:** [December 30, 2020, 5:05pm UTC](https://discuss.elastic.co/t/how-to-create-chart-for-user-growth-rate-in-kibana/258692 "2020-12-30T17:05:12Z")
I have user logs i need to find user growth rate how to do this in kibana. --- ## [Read actual and previous line using plugin file in Logstash](https://discuss.elastic.co/t/read-actual-and-previous-line-using-plugin-file-in-logstash/259823)
**Author:** [@dooger21](https://discuss.elastic.co/u/dooger21)\ **Replies:** 2\ **Last updated:** [December 30, 2020, 4:36pm UTC](https://discuss.elastic.co/t/read-actual-and-previous-line-using-plugin-file-in-logstash/259823 "2020-12-30T16:36:31Z")
Hello everyone, I need to read a log in tail mode and for each record read in real time to also obtain the previous record. That is, whatever you read the row (11) that has the date 20200607-00:10:00 also get the previo… --- ## [How can I include specific facet values in an aggregation?](https://discuss.elastic.co/t/how-can-i-include-specific-facet-values-in-an-aggregation/259819)
**Author:** [@Catalin](https://discuss.elastic.co/u/Catalin)\ **Replies:** 3\ **Last updated:** [December 30, 2020, 3:37pm UTC](https://discuss.elastic.co/t/how-can-i-include-specific-facet-values-in-an-aggregation/259819 "2020-12-30T15:37:20Z")
I have the following field and values for my documents: publication\_year : 2000, 2001, 2002, ..., 2020 I'd like to aggregate by publication\_year , return the top 5 buckets, but also add specific buckets to the result (… --- ## [Physical replication in Elasticsearch](https://discuss.elastic.co/t/physical-replication-in-elasticsearch/259886)
**Author:** [@itiyamas](https://discuss.elastic.co/u/itiyamas)\ **Replies:** 0\ **Last updated:** [December 30, 2020, 2:10pm UTC](https://discuss.elastic.co/t/physical-replication-in-elasticsearch/259886 "2020-12-30T14:10:59Z")
I know that this has been discussed earlier, but not all advantages were discussed in the earlier post. Also, the earlier discussion happened really long back and I would like to understand if you still feel that it does… --- ## [Multiple output options in logstash.conf](https://discuss.elastic.co/t/multiple-output-options-in-logstash-conf/259877)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 8\ **Last updated:** [December 30, 2020, 1:45pm UTC](https://discuss.elastic.co/t/multiple-output-options-in-logstash-conf/259877 "2020-12-30T13:45:54Z")
Hi, I'm trying to come up with a logstash.conf to seperate the indexing method between 2 different sources. One will be daily index and other will be monthly index. I came up with something like this but it didn't work. … --- ## [How to intercept kibana request from ES to use only a subset of data](https://discuss.elastic.co/t/how-to-intercept-kibana-request-from-es-to-use-only-a-subset-of-data/259885)
**Author:** [@ranitg](https://discuss.elastic.co/u/ranitg)\ **Replies:** 1\ **Last updated:** [December 30, 2020, 2:04pm UTC](https://discuss.elastic.co/t/how-to-intercept-kibana-request-from-es-to-use-only-a-subset-of-data/259885 "2020-12-30T14:04:23Z")
Hi, I'm trying to intercept Kibana query to ES. I need for the Dashboards only to use a subset of documents as it's DATA. This can't be achieved as a dashboard filter. How can this be achieved? Do I need to intercept t… --- ## [Error from stock auditbeat dashboards](https://discuss.elastic.co/t/error-from-stock-auditbeat-dashboards/259485)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 5\ **Last updated:** [December 30, 2020, 1:16pm UTC](https://discuss.elastic.co/t/error-from-stock-auditbeat-dashboards/259485 "2020-12-30T13:16:47Z")
I installed the 'stock' auditbeat dashboards for v7.10. Opening the 'System Overview ECS' I get this error on the majority of the panels: search\_phase\_execution\_exception Error: Bad Request at Fetch.\_callee3$ (http://10… --- ## [Logstash S3 Input Plugin not recognizing IAM Instance Profile](https://discuss.elastic.co/t/logstash-s3-input-plugin-not-recognizing-iam-instance-profile/259812)
**Author:** [@prod](https://discuss.elastic.co/u/prod)\ **Replies:** 2\ **Last updated:** [December 30, 2020, 12:47pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-not-recognizing-iam-instance-profile/259812 "2020-12-30T12:47:44Z")
Checking the S3 Input plugin documentation This plugin uses the AWS SDK and supports several ways to get credentials, which will be tried in this order: Static configuration, using access\_key\_id and secret\_access\_k… --- ## [Logstash grok field not found](https://discuss.elastic.co/t/logstash-grok-field-not-found/259864)
**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\ **Replies:** 0\ **Last updated:** [December 30, 2020, 9:10am UTC](https://discuss.elastic.co/t/logstash-grok-field-not-found/259864 "2020-12-30T09:10:11Z")
Thanks all --- ## [Magento 2.4.1 with Elasticsearch 7.10](https://discuss.elastic.co/t/magento-2-4-1-with-elasticsearch-7-10/257585)
**Author:** [@ioannigz](https://discuss.elastic.co/u/ioannigz)\ **Replies:** 4\ **Last updated:** [December 30, 2020, 11:35am UTC](https://discuss.elastic.co/t/magento-2-4-1-with-elasticsearch-7-10/257585 "2020-12-30T11:35:17Z")
Hi....If anyone has experience with Magento and Elasticsearch please? We have this strange issue which came up latest days. We use magento 2.4.1 and elasticsearch 7.10 Our catalog contains about 600 categories with 20… --- ## [Create a table from array of objects](https://discuss.elastic.co/t/create-a-table-from-array-of-objects/259519)
**Author:** [@Oscar\_de\_Dios](https://discuss.elastic.co/u/Oscar_de_Dios)\ **Replies:** 4\ **Last updated:** [December 30, 2020, 11:04am UTC](https://discuss.elastic.co/t/create-a-table-from-array-of-objects/259519 "2020-12-30T11:04:40Z")
Hi. I have some logs like this: log1 { someField: \[ { name: 'A', occurrencies: 4}, {name: 'B', occurencies: 10}\] } log2 { someField: \[ { name: 'A', occurrencies: 2}, {name: 'B', occurencies: 12} , name: 'C', occure… --- ## [Logstask nested field problem](https://discuss.elastic.co/t/logstask-nested-field-problem/259781)
**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\ **Replies:** 2\ **Last updated:** [December 30, 2020, 10:41am UTC](https://discuss.elastic.co/t/logstask-nested-field-problem/259781 "2020-12-30T10:41:10Z")
Logs message : "message" =\> "Backoff FixedBackOff{interval=0, currentAttempts=10, maxAttempts=9} exhausted " I need field like below: "FixedBackOff" =\> { "interval"=0, "currentAttempts"=10, "maxAttempts"=9 } Than… --- ## [Elastic APM skip transactions and metrics](https://discuss.elastic.co/t/elastic-apm-skip-transactions-and-metrics/259828)
**Author:** [@Nikhil\_Bhaware](https://discuss.elastic.co/u/Nikhil_Bhaware)\ **Replies:** 1\ **Last updated:** [December 30, 2020, 7:59am UTC](https://discuss.elastic.co/t/elastic-apm-skip-transactions-and-metrics/259828 "2020-12-30T07:59:42Z")
Kibana version: kibana-7.10.0 Elasticsearch version: elasticsearch-7.10.0 APM Server version: apm-server-7.10.0 APM Agent language and version: java : 1.19.0 Browser version: chrome 72.0.3626.121 Original install me… --- ## [Recovering from crashlooping masters due to exhausted disk capacity (2/3)](https://discuss.elastic.co/t/recovering-from-crashlooping-masters-due-to-exhausted-disk-capacity-2-3/259844)
**Author:** [@John\_Nason](https://discuss.elastic.co/u/John_Nason)\ **Replies:** 0\ **Last updated:** [December 30, 2020, 2:50am UTC](https://discuss.elastic.co/t/recovering-from-crashlooping-masters-due-to-exhausted-disk-capacity-2-3/259844 "2020-12-30T02:50:20Z")
My ECK topology is 3 master nodes, and 4 data/ingest nodes (as specified in the config: stanza). The data nodes all have large volumes attached. Without knowing better, I left the masters at the default, which happens … --- ## [Regular IO peak in Elasticsearch data disk](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771)
**Author:** [@zhiweiv](https://discuss.elastic.co/u/zhiweiv)\ **Replies:** 7\ **Last updated:** [December 30, 2020, 2:47am UTC](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771 "2020-12-30T02:47:44Z")
We observed regular IO peak in Elasticsearch data disk, it is triggered every 10 minutes. How can I find which function triggered this? There is nothing in ES log. --- ## [Date filter plugin not working as expected](https://discuss.elastic.co/t/date-filter-plugin-not-working-as-expected/259835)
**Author:** [@S3l3ct3d](https://discuss.elastic.co/u/S3l3ct3d)\ **Replies:** 8\ **Last updated:** [December 29, 2020, 11:48pm UTC](https://discuss.elastic.co/t/date-filter-plugin-not-working-as-expected/259835 "2020-12-29T23:48:33Z")
Good evening, I have a rather extensive .conf file with a Date filter plugin being used. However it is not actually working. I am sending it to a target of @timestamp, but, I am not seeing the corresponding Original Eve… --- ## [How to Get Disk Usage by Search or Query Terms?](https://discuss.elastic.co/t/how-to-get-disk-usage-by-search-or-query-terms/259836)
**Author:** [@bbek](https://discuss.elastic.co/u/bbek)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 11:07pm UTC](https://discuss.elastic.co/t/how-to-get-disk-usage-by-search-or-query-terms/259836 "2020-12-29T23:07:05Z")
I have multiple systems feeding a single index. What is the best approach to find size on disk, specific to search results? I'm trying to allocate by actual storage to get each 'department' cost. For instance mixing: … --- ## [Help with unassigned shards / CircuitBreakingException / Values less than -1 bytes are not supported](https://discuss.elastic.co/t/help-with-unassigned-shards-circuitbreakingexception-values-less-than-1-bytes-are-not-supported/257441)
**Author:** [@DevFullStack](https://discuss.elastic.co/u/DevFullStack)\ **Replies:** 31\ **Last updated:** [December 29, 2020, 10:04pm UTC](https://discuss.elastic.co/t/help-with-unassigned-shards-circuitbreakingexception-values-less-than-1-bytes-are-not-supported/257441 "2020-12-29T22:04:09Z")
Hi Elasticians, I'm looking for help fixing an issue (or family of issues) that causes a Elasticsearch v7.8.1 cluster to go consistently to yellow state due to unassigned shard(s) that sometimes cannot "auto-heal". This … --- ## [Event Correlation](https://discuss.elastic.co/t/event-correlation/259144)
**Author:** [@escrimaglia](https://discuss.elastic.co/u/escrimaglia)\ **Replies:** 3\ **Last updated:** [December 29, 2020, 9:17pm UTC](https://discuss.elastic.co/t/event-correlation/259144 "2020-12-29T21:17:09Z")
Hi, I’m testing ELK. So far it’s been very well sending logs from different platforms to elastic as well as indexing and creating views or graphs. My interest now is correlate event using all those logs entries. For exa… --- ## [Day\_of\_week field does not show data when sent through the index](https://discuss.elastic.co/t/day-of-week-field-does-not-show-data-when-sent-through-the-index/259584)
**Author:** [@Luukv](https://discuss.elastic.co/u/Luukv)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 8:28pm UTC](https://discuss.elastic.co/t/day-of-week-field-does-not-show-data-when-sent-through-the-index/259584 "2020-12-29T20:28:33Z")
We had some scripted field for time values. Think of the day of week values so we can see the average income for the monday over a full year. Same with weeks/months/hour. This was causing some performance issues when com… --- ## [Issue Magento 2.4.1 and Elasticsearch](https://discuss.elastic.co/t/issue-magento-2-4-1-and-elasticsearch/259801)
**Author:** [@trotlix](https://discuss.elastic.co/u/trotlix)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 8:12pm UTC](https://discuss.elastic.co/t/issue-magento-2-4-1-and-elasticsearch/259801 "2020-12-29T20:12:01Z")
Hello guys, I am still facing the issue which probably related with Magento 2 (2.4.1) and Elastic search. You can see the error page here: http://mage2.kouzloloutek.cz/loutky-spejbl-hurvinek I read in another discussi… --- ## [Unsupported script value error in visual](https://discuss.elastic.co/t/unsupported-script-value-error-in-visual/259800)
**Author:** [@Rajesh\_M](https://discuss.elastic.co/u/Rajesh_M)\ **Replies:** 2\ **Last updated:** [December 29, 2020, 7:51pm UTC](https://discuss.elastic.co/t/unsupported-script-value-error-in-visual/259800 "2020-12-29T19:51:52Z")
Hi, I am using ELK 7.6.2. In my index, there are two fields, timestamp and duration (duration is in ms). I have created a new field using painless script to find the start time (timestamp - duration). Below is my scrip… --- ## [Logstash s3 input plugin not deleting files after processing](https://discuss.elastic.co/t/logstash-s3-input-plugin-not-deleting-files-after-processing/259302)
**Author:** [@mcjay](https://discuss.elastic.co/u/mcjay)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 7:48pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-not-deleting-files-after-processing/259302 "2020-12-29T19:48:14Z")
I am using s3 input plugin on logstash to read AWS VPC flow logs from s3 bucket. I have this as my input.conf file input { s3 { bucket =\> "vpc-flow-logs-elk" prefix =\> "AWSLogs/200312345677/vpcflowlogs/us-east-1/" regio… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1097) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1099)