# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1107 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1108 --- ## [Pattern for this log](https://discuss.elastic.co/t/pattern-for-this-log/259184)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 6\ **Last updated:** [December 20, 2020, 9:24am UTC](https://discuss.elastic.co/t/pattern-for-this-log/259184 "2020-12-20T09:24:36Z")
Hello everyone! Can someone please help me with writing a grok pattern for this log line? I am not able to seperate its fields. {"name":"test","test\_arr":\[{"key\_word":"ok","test\_code":"👌","h\_code":"1234.png"}\],"create\_d… --- ## [Dec 20th, 2020: \[EN\] Exploratory data visualization with Kibana](https://discuss.elastic.co/t/dec-20th-2020-en-exploratory-data-visualization-with-kibana/258243)
**Author:** [@raya](https://discuss.elastic.co/u/raya)\ **Replies:** 0\ **Last updated:** [December 20, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-20th-2020-en-exploratory-data-visualization-with-kibana/258243 "2020-12-20T08:00:19Z")
Русская версия Practitioners in the field of data visualizations distinguish between the explanatory data visualizations (using graphical tools to convey information) from exploratory. To quote Google definitions (the m… --- ## [Dec 7th, 2020: \[EN\] Using Rally as a data import/export tool](https://discuss.elastic.co/t/dec-7th-2020-en-using-rally-as-a-data-import-export-tool/257820)
**Author:** [@Laurent\_Huet](https://discuss.elastic.co/u/Laurent_Huet)\ **Replies:** 1\ **Last updated:** [December 19, 2020, 8:50pm UTC](https://discuss.elastic.co/t/dec-7th-2020-en-using-rally-as-a-data-import-export-tool/257820 "2020-12-19T20:50:51Z")
French version This post will show you how you can use Rally to export data from one cluster to another. The idea is to extract the whole data from one or more indices in a (big) flat file and reuse it later to easily … --- ## [Increased node timeouts after 7.7.0 to 7.10.1 upgrade](https://discuss.elastic.co/t/increased-node-timeouts-after-7-7-0-to-7-10-1-upgrade/258888)
**Author:** [@Aharon](https://discuss.elastic.co/u/Aharon)\ **Replies:** 2\ **Last updated:** [December 19, 2020, 7:58pm UTC](https://discuss.elastic.co/t/increased-node-timeouts-after-7-7-0-to-7-10-1-upgrade/258888 "2020-12-19T19:58:52Z")
We have a largish production cluster that is experiencing a high number of node timeouts (on our hot indexing nodes) since we upgraded to 7.10.1 (from 7.7.0). Prior to the upgrade, we did not experience these timeouts. O… --- ## [Elastic search is not working into ubuntu 18.04](https://discuss.elastic.co/t/elastic-search-is-not-working-into-ubuntu-18-04/259169)
**Author:** [@Balwinder\_Singh](https://discuss.elastic.co/u/Balwinder_Singh)\ **Replies:** 1\ **Last updated:** [December 19, 2020, 7:16pm UTC](https://discuss.elastic.co/t/elastic-search-is-not-working-into-ubuntu-18-04/259169 "2020-12-19T19:16:21Z")
Dear All, Please help me to sort out below mention problem. Dec 17 21:05:14 zammad091212020-Virtual-Machine systemd\[1\]: Starting Elasticsearch... Dec 17 21:06:29 zammad091212020-Virtual-Machine systemd\[1\]: elasticsear… --- ## [Removing ongoing duplicates](https://discuss.elastic.co/t/removing-ongoing-duplicates/259157)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [December 19, 2020, 3:36pm UTC](https://discuss.elastic.co/t/removing-ongoing-duplicates/259157 "2020-12-19T15:36:14Z")
This is what I need however I would like do it on input due parsing jsons. What I mean this tutorial show how do it post-factum, but I would like do it every time I recieve new data basing for example on data from last… --- ## [Missing fields in Kibana](https://discuss.elastic.co/t/missing-fields-in-kibana/256519)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 1\ **Last updated:** [December 19, 2020, 11:16am UTC](https://discuss.elastic.co/t/missing-fields-in-kibana/256519 "2020-12-19T11:16:40Z")
OS : Centos 7.4, ELK Version: 7.6.2 I am trying to count how many hosts are configured in the ELK stack and for some reason beat.hostname.keyword is not pulling any data. If i use the default metric without any other f… --- ## [Query to search multiple values in a single field with wildcard startswith condition](https://discuss.elastic.co/t/query-to-search-multiple-values-in-a-single-field-with-wildcard-startswith-condition/259155)
**Author:** [@subham\_p](https://discuss.elastic.co/u/subham_p)\ **Replies:** 0\ **Last updated:** [December 19, 2020, 9:52am UTC](https://discuss.elastic.co/t/query-to-search-multiple-values-in-a-single-field-with-wildcard-startswith-condition/259155 "2020-12-19T09:52:50Z")
Diseases: “fever, headache, cold cough” Diseases:” fever, infection” Diseases:” fever,covid\_19” I want to find out the (diseases:” fever,covid\_19”) with in a must with wildcard condition starts with. I have tried wit… --- ## [How to Program APPs in ELK?](https://discuss.elastic.co/t/how-to-program-apps-in-elk/259141)
**Author:** [@xenon-xenon](https://discuss.elastic.co/u/xenon-xenon)\ **Replies:** 1\ **Last updated:** [December 19, 2020, 5:02am UTC](https://discuss.elastic.co/t/how-to-program-apps-in-elk/259141 "2020-12-19T05:02:27Z")
Hi everyone, I just got familiar with ELK , My question is how I can program APPs in ELK (I think most of it is in Kibana) what programming language should I know and how can I learn programming APPs in Kibana and ELK… --- ## [Accessing two various indexes in canvas datatable](https://discuss.elastic.co/t/accessing-two-various-indexes-in-canvas-datatable/259134)
**Author:** [@Alfar](https://discuss.elastic.co/u/Alfar)\ **Replies:** 2\ **Last updated:** [December 19, 2020, 4:45am UTC](https://discuss.elastic.co/t/accessing-two-various-indexes-in-canvas-datatable/259134 "2020-12-19T04:45:21Z")
I want to populate a data table in canvas with this kind of query SELECT student\_id,name,address,department\_id FROM student WHERE department\_id IN ( SELECT department\_id FROM department WHERE department\_name ="Engine… --- ## [How to delete documents older than 10 days - cant use daily indices](https://discuss.elastic.co/t/how-to-delete-documents-older-than-10-days-cant-use-daily-indices/259119)
**Author:** [@Jana\_P](https://discuss.elastic.co/u/Jana_P)\ **Replies:** 6\ **Last updated:** [December 18, 2020, 11:13pm UTC](https://discuss.elastic.co/t/how-to-delete-documents-older-than-10-days-cant-use-daily-indices/259119 "2020-12-18T23:13:14Z")
Hello, I'm trying to figure out how to delete documents older than 10 days. It sounds simple (curator etc.) - but my situation is quite complicated - I have 3 nodes cluster for DEV logs from about 30 environments. So … --- ## [Configuring Uptime Alerting to Send Out Email](https://discuss.elastic.co/t/configuring-uptime-alerting-to-send-out-email/259115)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 1\ **Last updated:** [December 18, 2020, 9:34pm UTC](https://discuss.elastic.co/t/configuring-uptime-alerting-to-send-out-email/259115 "2020-12-18T21:34:24Z")
I have set up a handful of Uptime and have enabled Status Alerting to report when the monitor itself is down but what I want to do next is to alert when the response code is not equal to 200 in the case of a server ping … --- ## [How to create alert in watcher advance? for the basic metrics of CPU, MEMORY](https://discuss.elastic.co/t/how-to-create-alert-in-watcher-advance-for-the-basic-metrics-of-cpu-memory/257705)
**Author:** [@aandrewsllp](https://discuss.elastic.co/u/aandrewsllp)\ **Replies:** 1\ **Last updated:** [December 18, 2020, 9:04pm UTC](https://discuss.elastic.co/t/how-to-create-alert-in-watcher-advance-for-the-basic-metrics-of-cpu-memory/257705 "2020-12-18T21:04:15Z")
How do I add more fields in the message of my alert by watcher --- ## [Elasticsearch bucket\_script agg](https://discuss.elastic.co/t/elasticsearch-bucket-script-agg/259138)
**Author:** [@Alexkl](https://discuss.elastic.co/u/Alexkl)\ **Replies:** 0\ **Last updated:** [December 18, 2020, 8:23pm UTC](https://discuss.elastic.co/t/elasticsearch-bucket-script-agg/259138 "2020-12-18T20:23:03Z")
Hello, There is something i don't understand. I want to get a daily hit ratio calculated on the hit/miss stored in a particular field on my index. I tried to reproduce the doc example adding an extra agg. When i try … --- ## [Amazon\_s3\_exception: Access Denied Service: Amazon S3; Status Code: 403;](https://discuss.elastic.co/t/amazon-s3-exception-access-denied-service-amazon-s3-status-code-403/257267)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 5\ **Last updated:** [December 18, 2020, 8:11pm UTC](https://discuss.elastic.co/t/amazon-s3-exception-access-denied-service-amazon-s3-status-code-403/257267 "2020-12-18T20:11:30Z")
I have a 3 node ec2 dev cluster. I'm trying to setup a snapshot repository for elasticsearch to s3 but I'm getting the following error. AWS command line works for me but setting up through elasticsearch is not. any ide… --- ## [Scripted field add a value of 1 for every match](https://discuss.elastic.co/t/scripted-field-add-a-value-of-1-for-every-match/257746)
**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\ **Replies:** 15\ **Last updated:** [December 18, 2020, 8:06pm UTC](https://discuss.elastic.co/t/scripted-field-add-a-value-of-1-for-every-match/257746 "2020-12-18T20:06:33Z")
Hello, New to the Elastic Stack and trying to get familiar with it. I'm not sure if this should be done on the ingest pipeline or visualization (I haven't had luck on either) but attempting to solve this with a scripte… --- ## [Server 1 down again](https://discuss.elastic.co/t/server-1-down-again/259136)
**Author:** [@holgus103](https://discuss.elastic.co/u/holgus103)\ **Replies:** 0\ **Last updated:** [December 18, 2020, 7:19pm UTC](https://discuss.elastic.co/t/server-1-down-again/259136 "2020-12-18T19:19:02Z")
Hi everyone, I was doing the Elastic Engineer I course and today ran into some downtime with Strigo, I was able to confirm that the initial issue was fixed and I can start my environment again but now server1 is not ava… --- ## [Search arrays with arrays](https://discuss.elastic.co/t/search-arrays-with-arrays/259132)
**Author:** [@Luca\_Frost](https://discuss.elastic.co/u/Luca_Frost)\ **Replies:** 4\ **Last updated:** [December 18, 2020, 7:07pm UTC](https://discuss.elastic.co/t/search-arrays-with-arrays/259132 "2020-12-18T19:07:32Z")
Hi all, I have an ES index where one of my mappings stores a simple array of named entities pre-set at the point of ingestion. I'm trying to search my index using a given array of entities, to return documents where co… --- ## [Can kibana date/ time picker pick date time based on](https://discuss.elastic.co/t/can-kibana-date-time-picker-pick-date-time-based-on/259131)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 4\ **Last updated:** [December 18, 2020, 6:42pm UTC](https://discuss.elastic.co/t/can-kibana-date-time-picker-pick-date-time-based-on/259131 "2020-12-18T18:42:34Z")
Can Kibana date/ time picker be configured to pick date/time based on a different timestamp say the timeCreated field as seen below? The purpose is to avoid creating a filter. --- ## [topN graph not aggregating on field](https://discuss.elastic.co/t/topn-graph-not-aggregating-on-field/259044)
**Author:** [@Andythsu](https://discuss.elastic.co/u/Andythsu)\ **Replies:** 4\ **Last updated:** [December 18, 2020, 6:38pm UTC](https://discuss.elastic.co/t/topn-graph-not-aggregating-on-field/259044 "2020-12-18T18:38:38Z")
Hello, I'm on Kibana 6.8.0 and was trying with top N graph. The top N doesn't seem to be aggregating on the field. For example, shows that the red bar sums up to 0, but the time series graph clearly shows that there is… --- ## [Geoip lookup failure while parsing http json data](https://discuss.elastic.co/t/geoip-lookup-failure-while-parsing-http-json-data/259120)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 2\ **Last updated:** [December 18, 2020, 5:49pm UTC](https://discuss.elastic.co/t/geoip-lookup-failure-while-parsing-http-json-data/259120 "2020-12-18T17:49:56Z")
I am trying to perform Geoip filter while parsing json logs data from clouflare API but it says \_geoip\_lookup\_failure here is my conf file configurations input { http\_poller { urls =\> { test… --- ## [Index duplicate documents with the different routing id](https://discuss.elastic.co/t/index-duplicate-documents-with-the-different-routing-id/259124)
**Author:** [@Maksym1](https://discuss.elastic.co/u/Maksym1)\ **Replies:** 6\ **Last updated:** [December 18, 2020, 5:46pm UTC](https://discuss.elastic.co/t/index-duplicate-documents-with-the-different-routing-id/259124 "2020-12-18T17:46:22Z")
When I try to index two similar documents (in my case, these are customers) with the same id and a different routing id, I get the first document is created, but the second document is updated. As I know, I can index tw… --- ## [Unable to Access the Kibana Lab for Lesson 1.1](https://discuss.elastic.co/t/unable-to-access-the-kibana-lab-for-lesson-1-1/258428)
**Author:** [@Dave\_E](https://discuss.elastic.co/u/Dave_E)\ **Replies:** 0\ **Last updated:** [December 11, 2020, 3:37pm UTC](https://discuss.elastic.co/t/unable-to-access-the-kibana-lab-for-lesson-1-1/258428 "2020-12-11T15:37:08Z")
Hello, I’m trying to log into Kibana for training and accomplish Lab: Introduction to Kibana, Lab 1.1 I got Strigo VM to show as ready. I copied the Public DNS address and pasted it into a new tab to get the lab instr… --- ## [Unable to include runtime log data in 'mutate' filter plugin](https://discuss.elastic.co/t/unable-to-include-runtime-log-data-in-mutate-filter-plugin/259125)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 6\ **Last updated:** [December 18, 2020, 5:18pm UTC](https://discuss.elastic.co/t/unable-to-include-runtime-log-data-in-mutate-filter-plugin/259125 "2020-12-18T17:18:34Z")
I am trying to fetch cloudflare log data via API and want add a new field such as actor.email in index. My end goal is to add a new field in index having data in meaningful sentence like A user someone@email.com(actor.… --- ## [Own function in search template](https://discuss.elastic.co/t/own-function-in-search-template/259126)
**Author:** [@sundarcse1216](https://discuss.elastic.co/u/sundarcse1216)\ **Replies:** 0\ **Last updated:** [December 18, 2020, 4:56pm UTC](https://discuss.elastic.co/t/own-function-in-search-template/259126 "2020-12-18T16:56:59Z")
I need to write my own function inside the search template like toJson ............. "functions": \[ { "filter": { "terms": { "empId": {{#my\_own\_function}}PARAM\_VALUE{{/my\_own\_function}} } … --- ## [Elasticsearch Closing Index after removing read-only index block followed by Restart](https://discuss.elastic.co/t/elasticsearch-closing-index-after-removing-read-only-index-block-followed-by-restart/259065)
**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\ **Replies:** 4\ **Last updated:** [December 18, 2020, 4:40pm UTC](https://discuss.elastic.co/t/elasticsearch-closing-index-after-removing-read-only-index-block-followed-by-restart/259065 "2020-12-18T16:40:02Z")
Hi, We are on Elasticsearch 6.0 and we need help on the following scenario: Index A is in "Open" state Elasticsearch crossed flood\_stage watermark, Index A got read-only index block Resolve flood\_stage watermark, Remo… --- ## [Viewing the docker image Dockerfiles?](https://discuss.elastic.co/t/viewing-the-docker-image-dockerfiles/259123)
**Author:** [@BigAl](https://discuss.elastic.co/u/BigAl)\ **Replies:** 0\ **Last updated:** [December 18, 2020, 4:31pm UTC](https://discuss.elastic.co/t/viewing-the-docker-image-dockerfiles/259123 "2020-12-18T16:31:27Z")
Hi, Is there a way to view the Dockerfiles that generate the docker images that we pull from elastic.co downloads. for example: https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-oss- Thanks! --- ## [Elastic Endgame Fundamentals](https://discuss.elastic.co/t/elastic-endgame-fundamentals/258939)
**Author:** [@PASONI](https://discuss.elastic.co/u/PASONI)\ **Replies:** 1\ **Last updated:** [December 18, 2020, 4:24pm UTC](https://discuss.elastic.co/t/elastic-endgame-fundamentals/258939 "2020-12-18T16:24:40Z")
I have one doubt regarding Elastic Endgame Fundamentals Course. While doing the course in Lab 1 where I have to deploy the sensor, I am not getting the desired output. I tried everything to resolve the error but it is no… --- ## [TSVB showing old field values in KQL query](https://discuss.elastic.co/t/tsvb-showing-old-field-values-in-kql-query/258548)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 1\ **Last updated:** [December 18, 2020, 3:56pm UTC](https://discuss.elastic.co/t/tsvb-showing-old-field-values-in-kql-query/258548 "2020-12-18T15:56:49Z")
hi all, in TSVB visualization , under "DATA", "Query string" , group by filter ....when i put a filter using KQL , it shows/pop-up field values which are not a part of current index pattern.....but field values of some… --- ## [Pie chart into Kibana dashboard](https://discuss.elastic.co/t/pie-chart-into-kibana-dashboard/259114)
**Author:** [@alex92360](https://discuss.elastic.co/u/alex92360)\ **Replies:** 3\ **Last updated:** [December 18, 2020, 3:42pm UTC](https://discuss.elastic.co/t/pie-chart-into-kibana-dashboard/259114 "2020-12-18T15:42:57Z")
Hello all, i'm trying to do a pie chart in Kibana dashboard based on some data i have. I don't understand if i am missing something or is Kibana that just works differently. Let's say i have the following data (n docs) … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1106) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1108)