# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1152

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1153

---

## [Logstash saving data into two indices (Duplicated Data)](https://discuss.elastic.co/t/logstash-saving-data-into-two-indices-duplicated-data/255457)

<div class="topic-metadata">

**Author:** [@gonzalo2kx](https://discuss.elastic.co/u/gonzalo2kx)\
**Replies:** 1\
**Last updated:** [November 16, 2020, 12:16am UTC](https://discuss.elastic.co/t/logstash-saving-data-into-two-indices-duplicated-data/255457 "2020-11-16T00:16:00Z")

</div>

Good day, I am currently processing the data from filebeat's system module using Logstash. The data provided by filebeat's system module (syslog and auth) is properly parsed but unfortunately it was saving the structure…

---

## [this.uiSettings is undefined](https://discuss.elastic.co/t/this-uisettings-is-undefined/251689)

<div class="topic-metadata">

**Author:** [@Kenneth\_M\_Kolano](https://discuss.elastic.co/u/Kenneth_M_Kolano)\
**Replies:** 9\
**Last updated:** [November 15, 2020, 10:10pm UTC](https://discuss.elastic.co/t/this-uisettings-is-undefined/251689 "2020-11-15T22:10:12Z")

</div>

After updating to a recent release of ELK and importing my old discover pane and visualizations, besides one using Timelion, all fail to display showing only the error... "this.uiSettings is undefined"?

---

## [About the User Experience category](https://discuss.elastic.co/t/about-the-user-experience-category/255066)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0

</div>

Understand the experience of visitors on your websites using Core Web Vitals. Explore your user experience data and identify performance outliers. User Experience is an evolving set of features, so keep an eye out on fo…

---

## [Curl Output is not complete](https://discuss.elastic.co/t/curl-output-is-not-complete/255048)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 6\
**Last updated:** [November 15, 2020, 5:33pm UTC](https://discuss.elastic.co/t/curl-output-is-not-complete/255048 "2020-11-15T17:33:36Z")

</div>

Hello Team I am using Elasticsearch Version 7.8.0. I am executing an query on Elasticsearch index. The output of CURL command is not complete, IT shows incomplete records only. I suppose there is some limit / default …

---

## [Kibana can't connect to elasticsearch in linux](https://discuss.elastic.co/t/kibana-cant-connect-to-elasticsearch-in-linux/255429)

<div class="topic-metadata">

**Author:** [@Ehsan\_sarshar](https://discuss.elastic.co/u/Ehsan_sarshar)\
**Replies:** 2\
**Last updated:** [November 15, 2020, 5:17pm UTC](https://discuss.elastic.co/t/kibana-cant-connect-to-elasticsearch-in-linux/255429 "2020-11-15T17:17:36Z")

</div>

I have a docker-compose file with a kibana.yml everything is working correctly in macos but in linux it throw this error "Unable to revive connection: http://es01:9200/"

---

## [Wrong doc\_count in term\_vectors?](https://discuss.elastic.co/t/wrong-doc-count-in-term-vectors/255440)

<div class="topic-metadata">

**Author:** [@flm](https://discuss.elastic.co/u/flm)\
**Replies:** 0\
**Last updated:** [November 15, 2020, 2:58pm UTC](https://discuss.elastic.co/t/wrong-doc-count-in-term-vectors/255440 "2020-11-15T14:58:15Z")

</div>

doc\_count is incremented when adding the same document several times. To reproduce execute twice: PUT /test\_index/\_doc/1 { "somefield": "somedata" } There is 1 document in the index but doc\_count=2: { "\_index"…

---

## [Query data from C# program the result not equal to the data filter from kibana](https://discuss.elastic.co/t/query-data-from-c-program-the-result-not-equal-to-the-data-filter-from-kibana/255428)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 0\
**Last updated:** [November 15, 2020, 8:13am UTC](https://discuss.elastic.co/t/query-data-from-c-program-the-result-not-equal-to-the-data-filter-from-kibana/255428 "2020-11-15T08:13:51Z")

</div>

I am new to C#, and I want to write a program to query data from elasticsearch. First of all, I load kibana sample log and want to query from my C# program, and below is my C# program. I want to filter clientip is 20.10…

---

## [How to remove duplicate fields within doc?](https://discuss.elastic.co/t/how-to-remove-duplicate-fields-within-doc/254316)

<div class="topic-metadata">

**Author:** [@Kyle\_Neal](https://discuss.elastic.co/u/Kyle_Neal)\
**Replies:** 1\
**Last updated:** [November 15, 2020, 7:08am UTC](https://discuss.elastic.co/t/how-to-remove-duplicate-fields-within-doc/254316 "2020-11-15T07:08:02Z")

</div>

Hi, Trying to migrate from 5.X to 6.X but have issues when reading ES data that was stored before the migration. The error I'm getting back is: {error,{400, \[{\<\<"error"\>\>, \[{\<\<"root\_cause"\>\>, …

---

## [Filter results in a visualization using JSON (filter for a "greater than" result)](https://discuss.elastic.co/t/filter-results-in-a-visualization-using-json-filter-for-a-greater-than-result/255269)

<div class="topic-metadata">

**Author:** [@forestgump](https://discuss.elastic.co/u/forestgump)\
**Replies:** 1\
**Last updated:** [November 15, 2020, 6:01am UTC](https://discuss.elastic.co/t/filter-results-in-a-visualization-using-json-filter-for-a-greater-than-result/255269 "2020-11-15T06:01:14Z")

</div>

Hi, I have a data table which counts a total of certain parameter in each server. I need to filter and show in this table where the "Total" is more than "10,000". Other servers which has less than 10,000 is not signific…

---

## [System has not been booted with systemd as init system (PID 1)](https://discuss.elastic.co/t/system-has-not-been-booted-with-systemd-as-init-system-pid-1/255422)

<div class="topic-metadata">

**Author:** [@Naba01](https://discuss.elastic.co/u/Naba01)\
**Replies:** 0\
**Last updated:** [November 15, 2020, 5:04am UTC](https://discuss.elastic.co/t/system-has-not-been-booted-with-systemd-as-init-system-pid-1/255422 "2020-11-15T05:04:03Z")

</div>

I have installed elasticsearch and kibana on my WSL.Able to start services using "sudo /etc/init.d/" command But unable to start services for logstash Below command is not working: root@Flamingo:~# sudo systemctl star…

---

## [Logstash-\>Elasticsearch document deduplication efficiency & optimization](https://discuss.elastic.co/t/logstash-elasticsearch-document-deduplication-efficiency-optimization/255336)

<div class="topic-metadata">

**Author:** [@petersedivec](https://discuss.elastic.co/u/petersedivec)\
**Replies:** 2\
**Last updated:** [November 14, 2020, 9:25pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-document-deduplication-efficiency-optimization/255336 "2020-11-14T21:25:23Z")

</div>

Quick Summary: Looking for feedback on our data deduplication approach using generated doc IDs for time-based event data vs leveraging ES for generating document IDs. Data Overview: We are working with an event dataset …

---

## [Dashboard kibana in to web page](https://discuss.elastic.co/t/dashboard-kibana-in-to-web-page/254749)

<div class="topic-metadata">

**Author:** [@grian](https://discuss.elastic.co/u/grian)\
**Replies:** 2\
**Last updated:** [November 14, 2020, 9:21pm UTC](https://discuss.elastic.co/t/dashboard-kibana-in-to-web-page/254749 "2020-11-14T21:21:35Z")

</div>

Hi guys, I added an iframe with a kibana dashboard in a web page created with google sites, but when I go to enter the login crediants in kibana I don't access the view as if I don't recognize them, why?

---

## [Elastic 7.10.0 on ubuntu 20 : error NoSuchFileException: /etc/elasticsearch/jvm.options](https://discuss.elastic.co/t/elastic-7-10-0-on-ubuntu-20-error-nosuchfileexception-etc-elasticsearch-jvm-options/255415)

<div class="topic-metadata">

**Author:** [@ysimonx](https://discuss.elastic.co/u/ysimonx)\
**Replies:** 0\
**Last updated:** [November 14, 2020, 7:38pm UTC](https://discuss.elastic.co/t/elastic-7-10-0-on-ubuntu-20-error-nosuchfileexception-etc-elasticsearch-jvm-options/255415 "2020-11-14T19:38:30Z")

</div>

Je poste ce message au cas où ca peut aider d'autres qui sont dans mon cas : J'ai mis à jour elastic search sur ubuntu 20 Il est passé de la version 7.9.x à la version 7.10 ElasticSearch n'a plus fonctionné, impossibl…

---

## [Node.role: \[data\_cold\]](https://discuss.elastic.co/t/node-role-data-cold/255410)

<div class="topic-metadata">

**Author:** [@mutt13y](https://discuss.elastic.co/u/mutt13y)\
**Replies:** 1\
**Last updated:** [November 14, 2020, 6:56pm UTC](https://discuss.elastic.co/t/node-role-data-cold/255410 "2020-11-14T18:56:17Z")

</div>

Hi According to I should set my cold nodes to data cold I have node.attr.class: cold node.roles: \["data\_cold"\] set in elasticsearch.yml Yet I get this on startup \[2020-11-14T12:24:27,891\]\[ERROR\]\[o.e.b.Bootstr…

---

## [No puedo filtrar por un campo](https://discuss.elastic.co/t/no-puedo-filtrar-por-un-campo/255011)

<div class="topic-metadata">

**Author:** [@edu1](https://discuss.elastic.co/u/edu1)\
**Replies:** 3\
**Last updated:** [November 13, 2020, 3:15pm UTC](https://discuss.elastic.co/t/no-puedo-filtrar-por-un-campo/255011 "2020-11-13T15:15:07Z")

</div>

Estoy indexando informacion de usuarios en elastic. Puedo filtrar por todos los campos pero, en el caso del codigo postal, elastic nunca retorna nada.

---

## [Newbie: CentOS + Docker + Elastic Stack = Master not discovered yet](https://discuss.elastic.co/t/newbie-centos-docker-elastic-stack-master-not-discovered-yet/255240)

<div class="topic-metadata">

**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\
**Replies:** 16\
**Last updated:** [November 14, 2020, 6:10pm UTC](https://discuss.elastic.co/t/newbie-centos-docker-elastic-stack-master-not-discovered-yet/255240 "2020-11-14T18:10:18Z")

</div>

I'm trying to start learning Elastic Stack, but I can't get it to even start. I have: Installed CentOS 8 Minimal Installed Docker, following this: https://docs.docker.com/engine/install/centos/ Managing non-root and …

---

## [I want to convert my date format yyyymmdd into month name date and year like mmm dd yyy (Apr 30 2012)](https://discuss.elastic.co/t/i-want-to-convert-my-date-format-yyyymmdd-into-month-name-date-and-year-like-mmm-dd-yyy-apr-30-2012/255394)

<div class="topic-metadata">

**Author:** [@Lokesh\_Mayan](https://discuss.elastic.co/u/Lokesh_Mayan)\
**Replies:** 11\
**Last updated:** [November 14, 2020, 5:19pm UTC](https://discuss.elastic.co/t/i-want-to-convert-my-date-format-yyyymmdd-into-month-name-date-and-year-like-mmm-dd-yyy-apr-30-2012/255394 "2020-11-14T17:19:26Z")

</div>

Hi I am having a log like the below \<#\> 20200924 15:14:40.918 280018000 EV.INF \[ MVINB-LSL2.T1G1\_ATMTH\_SL main.main TSP1.T1G1\_ATMTH\_SL \] Process T1G1\_ATMTH\_SL starting in progress... in the …

---

## [Elasticsearch cluster is crashing often](https://discuss.elastic.co/t/elasticsearch-cluster-is-crashing-often/254640)

<div class="topic-metadata">

**Author:** [@alx2020](https://discuss.elastic.co/u/alx2020)\
**Replies:** 6\
**Last updated:** [November 14, 2020, 3:20pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-is-crashing-often/254640 "2020-11-14T15:20:55Z")

</div>

We have several large clusters v1.7. Please don't ask why :frowning: - we are on the way to upgrade to v7 but need some hints to make it stable. Recently one of the clusters started crashing several times per day and we…

---

## [How to seperate message field filebeat](https://discuss.elastic.co/t/how-to-seperate-message-field-filebeat/255167)

<div class="topic-metadata">

**Author:** [@Hi\_u\_Nguy\_n\_Dang](https://discuss.elastic.co/u/Hi_u_Nguy_n_Dang)\
**Replies:** 5\
**Last updated:** [November 14, 2020, 1:00pm UTC](https://discuss.elastic.co/t/how-to-seperate-message-field-filebeat/255167 "2020-11-14T13:00:39Z")

</div>

Guys, how can I seperate message field with filebeat to more field ? It keep just giving me message field, I am trying to use grok filter but it does not work. Filebeat agent work in 1 machine meanwhile elastic server wo…

---

## [Créer une requête de type foo%](https://discuss.elastic.co/t/creer-une-requete-de-type-foo/254655)

<div class="topic-metadata">

**Author:** [@ewkilian](https://discuss.elastic.co/u/ewkilian)\
**Replies:** 2\
**Last updated:** [November 14, 2020, 10:45am UTC](https://discuss.elastic.co/t/creer-une-requete-de-type-foo/254655 "2020-11-14T10:45:14Z")

</div>

Bonjour, Je suis très débutant dans l'utilisation d'elastic search. Je l'utilise au niveau d'un système E-Commerce (thirty bees). Avec la configuration suivante : { "bool": { "must": \[ { "multi\_match": { …

---

## [Elastic and Logstash pipeline for Customer history](https://discuss.elastic.co/t/elastic-and-logstash-pipeline-for-customer-history/255181)

<div class="topic-metadata">

**Author:** [@ratheeshkrishnan92](https://discuss.elastic.co/u/ratheeshkrishnan92)\
**Replies:** 2\
**Last updated:** [November 14, 2020, 9:00am UTC](https://discuss.elastic.co/t/elastic-and-logstash-pipeline-for-customer-history/255181 "2020-11-14T09:00:14Z")

</div>

Hello Team, I am using Elasticsearch version 6.2.4. I have below scenario and need a work around for this. Planning to have two indices with below properties. EmployeeId, EmployeeName, Designation. index 1 : Employee…

---

## [Does logstash-input-s3-sns-sqs support backup\_to\_bucket?](https://discuss.elastic.co/t/does-logstash-input-s3-sns-sqs-support-backup-to-bucket/255389)

<div class="topic-metadata">

**Author:** [@Ying-Yi\_Huang](https://discuss.elastic.co/u/Ying-Yi_Huang)\
**Replies:** 0\
**Last updated:** [November 14, 2020, 12:48am UTC](https://discuss.elastic.co/t/does-logstash-input-s3-sns-sqs-support-backup-to-bucket/255389 "2020-11-14T00:48:05Z")

</div>

Hello, I want to use the plugin to read from S3 and then backup the files completed to a backup S3 back. It doesn't seem to work. Here is my config: input { s3snssqs { region =\> "us-e…

---

## [CANVAS Vertical Bar Chart with more than one Y axis](https://discuss.elastic.co/t/canvas-vertical-bar-chart-with-more-than-one-y-axis/255380)

<div class="topic-metadata">

**Author:** [@jose-sonicwebdev.com](https://discuss.elastic.co/u/jose-sonicwebdev.com)\
**Replies:** 1\
**Last updated:** [November 13, 2020, 10:17pm UTC](https://discuss.elastic.co/t/canvas-vertical-bar-chart-with-more-than-one-y-axis/255380 "2020-11-13T22:17:35Z")

</div>

Hi I was wondering if CANVAS allowed for more than one Y axis on Bar Charts. I want to use the same input for X Axis but Two Y axis columns . I need to add "Week Total" and "Supplemental Total" to the Y Axis filters …

---

## [Elasticsearch service won't start, nested elasticsearch node state exception](https://discuss.elastic.co/t/elasticsearch-service-wont-start-nested-elasticsearch-node-state-exception/255376)

<div class="topic-metadata">

**Author:** [@penguinairlines](https://discuss.elastic.co/u/penguinairlines)\
**Replies:** 3\
**Last updated:** [November 13, 2020, 10:01pm UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-start-nested-elasticsearch-node-state-exception/255376 "2020-11-13T22:01:48Z")

</div>

Hello, I noticed one of my elasticsearch nodes is down and started digging into the issue. I found the service won't start and notice a couple of key errors: ElasticsearchException\[failed to bind service\]; nested: Corr…

---

## [Customize Detection Columns?](https://discuss.elastic.co/t/customize-detection-columns/254455)

<div class="topic-metadata">

**Author:** [@ikiril01](https://discuss.elastic.co/u/ikiril01)\
**Replies:** 10\
**Last updated:** [November 13, 2020, 9:14pm UTC](https://discuss.elastic.co/t/customize-detection-columns/254455 "2020-11-13T21:14:01Z")

</div>

Is it possible to customize the columns in the detections alerts view? I'd like to incorporate some fields from the underlying events, if possible.

---

## [Correct Sizing and compression on Elasticsearch](https://discuss.elastic.co/t/correct-sizing-and-compression-on-elasticsearch/255349)

<div class="topic-metadata">

**Author:** [@xziten](https://discuss.elastic.co/u/xziten)\
**Replies:** 4\
**Last updated:** [November 13, 2020, 8:54pm UTC](https://discuss.elastic.co/t/correct-sizing-and-compression-on-elasticsearch/255349 "2020-11-13T20:54:36Z")

</div>

Hi, I am trying to get some ratio about Elasticsearch cluster. I have this base : \*\*For 100 Gb of raw data / day :\*\* \* 110 Gb of data are indexed (~ +10% for datatype) \* 220 Gb with 1 replica \* 6600 Gb per month \* +…

---

## [Index Templates - Differences between \_template & \_index\_template](https://discuss.elastic.co/t/index-templates-differences-between-template-index-template/255367)

<div class="topic-metadata">

**Author:** [@Eduardo\_Iglesias](https://discuss.elastic.co/u/Eduardo_Iglesias)\
**Replies:** 2\
**Last updated:** [November 13, 2020, 8:09pm UTC](https://discuss.elastic.co/t/index-templates-differences-between-template-index-template/255367 "2020-11-13T20:09:24Z")

</div>

Hello everyone, Need help to identify the differences between the subject mentioned endpoints usage. \_index\_template endpoint POST \_index\_template/index-template-1 { "index\_patterns": \["logs-2019\*"\], "template": …

---

## [Logstash import CSV data classification](https://discuss.elastic.co/t/logstash-import-csv-data-classification/255362)

<div class="topic-metadata">

**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\
**Replies:** 4\
**Last updated:** [November 13, 2020, 7:59pm UTC](https://discuss.elastic.co/t/logstash-import-csv-data-classification/255362 "2020-11-13T19:59:07Z")

</div>

First off, I am relatively inexperienced with ELK and am trying to perform a demo of ELK because I'm convinced it is a powerful and useful application for much of our work. I have been presented with a CSV export of dat…

---

## [Logstash not reading CSV file when running as CSV](https://discuss.elastic.co/t/logstash-not-reading-csv-file-when-running-as-csv/255374)

<div class="topic-metadata">

**Author:** [@errupeshmca](https://discuss.elastic.co/u/errupeshmca)\
**Replies:** 1\
**Last updated:** [November 13, 2020, 7:46pm UTC](https://discuss.elastic.co/t/logstash-not-reading-csv-file-when-running-as-csv/255374 "2020-11-13T19:46:16Z")

</div>

Hi, I am trying to run ELK through service on windows, Kibana and Elasticsearch is working fine as service. I have configured service through nssm and used below reference to configure logstash Logstash starting p…

---

## [Loosing filter settings when changing the dashboard at v 7.9.2](https://discuss.elastic.co/t/loosing-filter-settings-when-changing-the-dashboard-at-v-7-9-2/254968)

<div class="topic-metadata">

**Author:** [@mayer](https://discuss.elastic.co/u/mayer)\
**Replies:** 4\
**Last updated:** [November 13, 2020, 7:44pm UTC](https://discuss.elastic.co/t/loosing-filter-settings-when-changing-the-dashboard-at-v-7-9-2/254968 "2020-11-13T19:44:54Z")

</div>

Dear All, I am using ELK stack version 7.9.2 on Debian buster (amd64) I build 2 dashboards with a visualization where I can navigate between these 2 dashboards. I enter a filter with the "+ add filter" button in one of…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1151)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1153)
