# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1108

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1109

---

## [Kibana Service won't start after 7.8 -\> 7.10 Upgrade](https://discuss.elastic.co/t/kibana-service-wont-start-after-7-8-7-10-upgrade/258866)

<div class="topic-metadata">

**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\
**Replies:** 9\
**Last updated:** [December 18, 2020, 3:40pm UTC](https://discuss.elastic.co/t/kibana-service-wont-start-after-7-8-7-10-upgrade/258866 "2020-12-18T15:40:18Z")

</div>

My Cluster: 3x CentOS 7 Elasticsearch 7.10 Logstash 7.10 Kibana 7.10 Filebeat 7.10 So i just upgraded my Cluster to version 7.10 Everything works fine (even Elasticsearch after messing with jvm.options a bit), but…

---

## [Painless - check if a log contains a certain field](https://discuss.elastic.co/t/painless-check-if-a-log-contains-a-certain-field/258718)

<div class="topic-metadata">

**Author:** [@yaelg](https://discuss.elastic.co/u/yaelg)\
**Replies:** 1\
**Last updated:** [December 18, 2020, 2:39pm UTC](https://discuss.elastic.co/t/painless-check-if-a-log-contains-a-certain-field/258718 "2020-12-18T14:39:55Z")

</div>

Hey everyone, I have the following fields in my logs: "module": String "audit": {"action": String, "user": String} "audit" does not appear in all logs. I wanted to create a visualization of tag-cloud which would show…

---

## [Logstash 7.10 is ignoring custom index template](https://discuss.elastic.co/t/logstash-7-10-is-ignoring-custom-index-template/258615)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 26\
**Last updated:** [December 18, 2020, 2:35pm UTC](https://discuss.elastic.co/t/logstash-7-10-is-ignoring-custom-index-template/258615 "2020-12-18T14:35:56Z")

</div>

Hi, This is a fresh installation of ELK 7.10.0. I am trying to configure Logstash to process .csv files and index into ES. I created a config file and a custom index template. It looks like the .csv are being processed,…

---

## [Elasticsearch input plugin: range query doesn't match any document](https://discuss.elastic.co/t/elasticsearch-input-plugin-range-query-doesnt-match-any-document/259097)

<div class="topic-metadata">

**Author:** [@Mathias\_Bazin](https://discuss.elastic.co/u/Mathias_Bazin)\
**Replies:** 0\
**Last updated:** [December 18, 2020, 12:04pm UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-range-query-doesnt-match-any-document/259097 "2020-12-18T12:04:26Z")

</div>

Hello, I'm having trouble collecting data periodically from an elasticsearch index. My input config is quite simple input { elasticsearch { hosts =\> "${ELASTICSEARCH\_URL\_INPUT}" index =\> 'logcentral\_pn' d…

---

## [Kibana 7.10.1 Login Logo](https://discuss.elastic.co/t/kibana-7-10-1-login-logo/259076)

<div class="topic-metadata">

**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\
**Replies:** 3\
**Last updated:** [December 18, 2020, 2:06pm UTC](https://discuss.elastic.co/t/kibana-7-10-1-login-logo/259076 "2020-12-18T14:06:58Z")

</div>

Hi guys , i downloaded the latest version of ELK and i followed the steps that @ManuelF described in this thread https://discuss.elastic.co/t/custom-logo-kibana-7-10-0-guide/257686 , i changed the loading logo but i co…

---

## [Avoid user to edit kibana visualization fields](https://discuss.elastic.co/t/avoid-user-to-edit-kibana-visualization-fields/259102)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 2\
**Last updated:** [December 18, 2020, 1:40pm UTC](https://discuss.elastic.co/t/avoid-user-to-edit-kibana-visualization-fields/259102 "2020-12-18T13:40:41Z")

</div>

Hi All, I have created a separate user for my end customer, and have restricted his usage to view only Kibana visualization. I have used a filter(Consumer = Mobile). so that he will not be able to view data of any other…

---

## [Using multi\_match from the start of fields](https://discuss.elastic.co/t/using-multi-match-from-the-start-of-fields/259110)

<div class="topic-metadata">

**Author:** [@rmbutler83](https://discuss.elastic.co/u/rmbutler83)\
**Replies:** 0\
**Last updated:** [December 18, 2020, 1:36pm UTC](https://discuss.elastic.co/t/using-multi-match-from-the-start-of-fields/259110 "2020-12-18T13:36:04Z")

</div>

Hi, I'm trying to search for drug names in my datastore, { "index": "drugs", "body": { "size": 20, "query": { "bool": { "must": \[ { "term": { "RouteOfAdmini…

---

## [How to use if else in logstash output](https://discuss.elastic.co/t/how-to-use-if-else-in-logstash-output/256793)

<div class="topic-metadata">

**Author:** [@lokeshbabloo](https://discuss.elastic.co/u/lokeshbabloo)\
**Replies:** 6\
**Last updated:** [December 18, 2020, 1:16pm UTC](https://discuss.elastic.co/t/how-to-use-if-else-in-logstash-output/256793 "2020-12-18T13:16:00Z")

</div>

Hi i need a help in constructing the logstash output i am having two log files like this, one is \<#\> 20200806 17:04:23.261 280018000 EV.INF \[ MVINB-LSL2.T1G1\_WEBSVR1 main.main TSP1.T1G1\_WEBSVR1 …

---

## [Relational data](https://discuss.elastic.co/t/relational-data/259082)

<div class="topic-metadata">

**Author:** [@Jean-Marc\_Autexier](https://discuss.elastic.co/u/Jean-Marc_Autexier)\
**Replies:** 3\
**Last updated:** [December 18, 2020, 12:34pm UTC](https://discuss.elastic.co/t/relational-data/259082 "2020-12-18T12:34:44Z")

</div>

Hi, I think we all know the limits of elastic when having relational data.... There are things you can solve (using de-normalization, nested, parent-child, lookups) but sometimes your uses cases require query time join…

---

## [Indices per website or deleteByQuery](https://discuss.elastic.co/t/indices-per-website-or-deletebyquery/259088)

<div class="topic-metadata">

**Author:** [@adriaan](https://discuss.elastic.co/u/adriaan)\
**Replies:** 0\
**Last updated:** [December 18, 2020, 11:26am UTC](https://discuss.elastic.co/t/indices-per-website-or-deletebyquery/259088 "2020-12-18T11:26:50Z")

</div>

I have an analytics business called Simple Analytics. It's powered by Elasticsearch and it works great. We store analytics data for the websites of our customers. We give our customers to option to delete their account a…

---

## [Unsupported parameters for multi fields](https://discuss.elastic.co/t/unsupported-parameters-for-multi-fields/258423)

<div class="topic-metadata">

**Author:** [@S\_Hamdi](https://discuss.elastic.co/u/S_Hamdi)\
**Replies:** 1\
**Last updated:** [December 18, 2020, 11:24am UTC](https://discuss.elastic.co/t/unsupported-parameters-for-multi-fields/258423 "2020-12-18T11:24:23Z")

</div>

Hello, I am new to Elastic. I am getting the following error while uploading the ES index template. {"error":{"root\_cause":\[{"type":"mapper\_parsing\_exception","reason":"Mapping definition for \[path\] has unsupported pa…

---

## [Dateparse failure](https://discuss.elastic.co/t/dateparse-failure/259001)

<div class="topic-metadata">

**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\
**Replies:** 2\
**Last updated:** [December 18, 2020, 10:09am UTC](https://discuss.elastic.co/t/dateparse-failure/259001 "2020-12-18T10:09:16Z")

</div>

I cannot find a way to either debug or fix this. I have provided below the log output and the various grok filters that are used. What can I do to fix this? RAW Log output \`logstash\[23980\]: \[2020-12-17T14:19:12,925…

---

## [Query to get the last x values](https://discuss.elastic.co/t/query-to-get-the-last-x-values/259078)

<div class="topic-metadata">

**Author:** [@grra](https://discuss.elastic.co/u/grra)\
**Replies:** 0\
**Last updated:** [December 18, 2020, 10:01am UTC](https://discuss.elastic.co/t/query-to-get-the-last-x-values/259078 "2020-12-18T10:01:28Z")

</div>

Hi, Is there a way to query for the last x Values in a field?

---

## [How can we convert Splunk query into Elastic Query](https://discuss.elastic.co/t/how-can-we-convert-splunk-query-into-elastic-query/259075)

<div class="topic-metadata">

**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\
**Replies:** 0\
**Last updated:** [December 18, 2020, 9:12am UTC](https://discuss.elastic.co/t/how-can-we-convert-splunk-query-into-elastic-query/259075 "2020-12-18T09:12:38Z")

</div>

Hi Folks, Can you please help me to convert below splunk query into elastic query ? It has single index and we need to put two time ranges on similar field(ChannelSessionId) and calculate percentage in both counts. in…

---

## [Refresh data](https://discuss.elastic.co/t/refresh-data/258989)

<div class="topic-metadata">

**Author:** [@mihai.radulescu](https://discuss.elastic.co/u/mihai.radulescu)\
**Replies:** 3\
**Last updated:** [December 18, 2020, 9:03am UTC](https://discuss.elastic.co/t/refresh-data/258989 "2020-12-18T09:03:17Z")

</div>

Hello, I have a logstash configuration that is inserting the data from csv files from a specific folder. In the past two weeks I have made numerous changes and the data that I inserted is incomplete. How do I drop ever…

---

## [SNMP Traffic Utilization graph](https://discuss.elastic.co/t/snmp-traffic-utilization-graph/258978)

<div class="topic-metadata">

**Author:** [@pavansh](https://discuss.elastic.co/u/pavansh)\
**Replies:** 6\
**Last updated:** [December 18, 2020, 9:00am UTC](https://discuss.elastic.co/t/snmp-traffic-utilization-graph/258978 "2020-12-18T09:00:55Z")

</div>

I am using SNMP input Plugin to get IfInOctects and OutOctects Can anyone help me to create a chart to show Inbound/Outbound Traffic in Mbps?

---

## [Mapping error while writing to index](https://discuss.elastic.co/t/mapping-error-while-writing-to-index/259068)

<div class="topic-metadata">

**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\
**Replies:** 0\
**Last updated:** [December 18, 2020, 8:13am UTC](https://discuss.elastic.co/t/mapping-error-while-writing-to-index/259068 "2020-12-18T08:13:04Z")

</div>

Hello together, i am trying to read, with logstash, from an influxdb via http-poller, that seems to work when writing to an file, but when i write to an index i get the following error: \[2020-12-18T08:59:14,281\]\[WARN \]…

---

## [Dec 18th, 2020: \[EN\] Set up searchable snapshots in ECK](https://discuss.elastic.co/t/dec-18th-2020-en-set-up-searchable-snapshots-in-eck/257788)

<div class="topic-metadata">

**Author:** [@idanmo](https://discuss.elastic.co/u/idanmo)\
**Replies:** 0\
**Last updated:** [December 18, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-18th-2020-en-set-up-searchable-snapshots-in-eck/257788 "2020-12-18T08:00:15Z")

</div>

Searchable snapshots, recently released as BETA in Elasticsearch 7.10, let you reduce your operating costs by using snapshots for resiliency rather than maintaining replica shards within a cluster. In this blog, we’ll d…

---

## [What if all filter not applied ? filter with null FIELD VALUE not NULL value in DOC](https://discuss.elastic.co/t/what-if-all-filter-not-applied-filter-with-null-field-value-not-null-value-in-doc/259063)

<div class="topic-metadata">

**Author:** [@Kajal\_Pandya](https://discuss.elastic.co/u/Kajal_Pandya)\
**Replies:** 0\
**Last updated:** [December 18, 2020, 7:10am UTC](https://discuss.elastic.co/t/what-if-all-filter-not-applied-filter-with-null-field-value-not-null-value-in-doc/259063 "2020-12-18T07:10:01Z")

</div>

I have search for subjects..Teacher can add multiple subjects and students can search thode subject and can apply filter on resulted data..student can filter by LEVEL, CURRICULUM, LOCATION.. My query is what if student …

---

## [Control visualization](https://discuss.elastic.co/t/control-visualization/258682)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 5\
**Last updated:** [December 18, 2020, 5:17am UTC](https://discuss.elastic.co/t/control-visualization/258682 "2020-12-18T05:17:50Z")

</div>

Hi, Is there any other type of visualization that could do quite the same job as control visualiztion's drop down? Thank you in advance!

---

## [Logstash Pipeline issue (I'm an idiot or something)](https://discuss.elastic.co/t/logstash-pipeline-issue-im-an-idiot-or-something/259042)

<div class="topic-metadata">

**Author:** [@SigmazGFX](https://discuss.elastic.co/u/SigmazGFX)\
**Replies:** 4\
**Last updated:** [December 18, 2020, 1:15am UTC](https://discuss.elastic.co/t/logstash-pipeline-issue-im-an-idiot-or-something/259042 "2020-12-18T01:15:15Z")

</div>

Hey gang. I am working with our dev team and they are dumping custom logging into the windows events Using winlogbeat to ship the log entries into logstash i am trying to set up a central pipeline to handle the differen…

---

## [Effective Way to Remove Existing Duplicate Documents in ElasticSearch](https://discuss.elastic.co/t/effective-way-to-remove-existing-duplicate-documents-in-elasticsearch/258798)

<div class="topic-metadata">

**Author:** [@test\_tester](https://discuss.elastic.co/u/test_tester)\
**Replies:** 11\
**Last updated:** [December 17, 2020, 11:31pm UTC](https://discuss.elastic.co/t/effective-way-to-remove-existing-duplicate-documents-in-elasticsearch/258798 "2020-12-17T23:31:15Z")

</div>

Hi Everyone, Using aggregation, I am able query out doc\_count: 272152 of duplicates instances in my elasticsearch database. The problem now is if I were to simply run a \_delete\_by\_query, it will delete everything inclu…

---

## [Kibana visualization to plot field values on y-axis without docs aggregation](https://discuss.elastic.co/t/kibana-visualization-to-plot-field-values-on-y-axis-without-docs-aggregation/259002)

<div class="topic-metadata">

**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\
**Replies:** 1\
**Last updated:** [December 17, 2020, 11:25pm UTC](https://discuss.elastic.co/t/kibana-visualization-to-plot-field-values-on-y-axis-without-docs-aggregation/259002 "2020-12-17T23:25:37Z")

</div>

hi guys, i am unable to find which visualization will plot below in KIBANA . on Y-axis : Plot values of field called "Logs" ( Don't plot the count of documents having field logs) on X-axis: timestamp My JSON documen…

---

## [Convert String to date format](https://discuss.elastic.co/t/convert-string-to-date-format/258899)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 25\
**Last updated:** [December 17, 2020, 9:29pm UTC](https://discuss.elastic.co/t/convert-string-to-date-format/258899 "2020-12-17T21:29:12Z")

</div>

Hi All, I am using ELK7.6.2 Trying to convert "createdTime" field from String to date format. Added following filter in my logstash config file: date { match =\> \["createdTime", "YYYY-MM-dd HH:mm:ss.SSS"\] target =\> "cr…

---

## [Kibana Index Management](https://discuss.elastic.co/t/kibana-index-management/259028)

<div class="topic-metadata">

**Author:** [@srinivasape](https://discuss.elastic.co/u/srinivasape)\
**Replies:** 1\
**Last updated:** [December 17, 2020, 9:01pm UTC](https://discuss.elastic.co/t/kibana-index-management/259028 "2020-12-17T21:01:03Z")

</div>

Hello EveryBody! I use Kibana for index management in elasticsearch (7.6.1). When i show index stats, the json says: I willl wait for any answer. Thanks.

---

## [Master node not discovered yet after upgrade from 6.8 to 7.10](https://discuss.elastic.co/t/master-node-not-discovered-yet-after-upgrade-from-6-8-to-7-10/258915)

<div class="topic-metadata">

**Author:** [@David\_Tomasheski](https://discuss.elastic.co/u/David_Tomasheski)\
**Replies:** 1\
**Last updated:** [December 17, 2020, 8:01pm UTC](https://discuss.elastic.co/t/master-node-not-discovered-yet-after-upgrade-from-6-8-to-7-10/258915 "2020-12-17T20:01:28Z")

</div>

In order to deal with the Chrome Samesite cookies issue I have just upgraded ES and Kibana from 6.7 to 6.8 and that went fine. I then went to upgrade ES to 7.10 and now I am getting The below error message. I had followe…

---

## [Logstash 7.10 Error](https://discuss.elastic.co/t/logstash-7-10-error/259022)

<div class="topic-metadata">

**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\
**Replies:** 2\
**Last updated:** [December 17, 2020, 7:23pm UTC](https://discuss.elastic.co/t/logstash-7-10-error/259022 "2020-12-17T19:23:46Z")

</div>

I' ve installed last version of Logstash and gives me this error for ingested pipelines: \[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[....\] Encountered a retryable error. Will Retry with exponential backoff {:code=\>40…

---

## [Filtering Nested Child Objects](https://discuss.elastic.co/t/filtering-nested-child-objects/258791)

<div class="topic-metadata">

**Author:** [@mgncl](https://discuss.elastic.co/u/mgncl)\
**Replies:** 5\
**Last updated:** [December 17, 2020, 7:16pm UTC](https://discuss.elastic.co/t/filtering-nested-child-objects/258791 "2020-12-17T19:16:21Z")

</div>

I am trying to fine tune the query on a nested collection. The nested collection should match all the criteria and the size of the collection. I created a sample data set to the mimic my use case. Index { "map…

---

## [Snapsot Deletion Times Out](https://discuss.elastic.co/t/snapsot-deletion-times-out/259029)

<div class="topic-metadata">

**Author:** [@pooja\_shukla](https://discuss.elastic.co/u/pooja_shukla)\
**Replies:** 0\
**Last updated:** [December 17, 2020, 6:58pm UTC](https://discuss.elastic.co/t/snapsot-deletion-times-out/259029 "2020-12-17T18:58:10Z")

</div>

1) Snapshot deletion is timing out using elasticsearch python client client.snapshot.delete(repository="repo\_name", snapshot="snapshot\_name") 2) We are using curator to delete old snapshot beyond a certain date, curato…

---

## [How to config hot-warm arch in elasticsearch 7.9.1](https://discuss.elastic.co/t/how-to-config-hot-warm-arch-in-elasticsearch-7-9-1/258904)

<div class="topic-metadata">

**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\
**Replies:** 4\
**Last updated:** [December 17, 2020, 6:52pm UTC](https://discuss.elastic.co/t/how-to-config-hot-warm-arch-in-elasticsearch-7-9-1/258904 "2020-12-17T18:52:20Z")

</div>

Configurations of hot-warm arch in elasticsearch is only changing elasticsearch.yml?

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1107)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1109)
