# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1170

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1171

---

## [Kibana 7.9.x redirects to location: /spaces/enter and doesn't work](https://discuss.elastic.co/t/kibana-7-9-x-redirects-to-location-spaces-enter-and-doesnt-work/253241)

<div class="topic-metadata">

**Author:** [@George\_Wainwright](https://discuss.elastic.co/u/George_Wainwright)\
**Replies:** 5\
**Last updated:** [November 2, 2020, 5:56pm UTC](https://discuss.elastic.co/t/kibana-7-9-x-redirects-to-location-spaces-enter-and-doesnt-work/253241 "2020-11-02T17:56:18Z")

</div>

I run my Elasticsearch cluster in docker with the next config: version: '2.4' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:7.9.3 container\_name: elasticsearch …

---

## [Logstash Failed to parse with all enclosed parsers](https://discuss.elastic.co/t/logstash-failed-to-parse-with-all-enclosed-parsers/254054)

<div class="topic-metadata">

**Author:** [@Yuy\_Heero](https://discuss.elastic.co/u/Yuy_Heero)\
**Replies:** 1\
**Last updated:** [November 2, 2020, 5:56pm UTC](https://discuss.elastic.co/t/logstash-failed-to-parse-with-all-enclosed-parsers/254054 "2020-11-02T17:56:16Z")

</div>

I want to use winlogbeat to monitor win10. Logs transfer via logstash to elasticsearch. winlogbeat(7.9.3)-\>logstash(7.9.3)-\>elasticsearch(7.8.0) After I started winlogbeat and logstash, I got no error from winlogbe…

---

## [Logstash replace existing fields & file input advice](https://discuss.elastic.co/t/logstash-replace-existing-fields-file-input-advice/254047)

<div class="topic-metadata">

**Author:** [@iccMe](https://discuss.elastic.co/u/iccMe)\
**Replies:** 3\
**Last updated:** [November 2, 2020, 5:36pm UTC](https://discuss.elastic.co/t/logstash-replace-existing-fields-file-input-advice/254047 "2020-11-02T17:36:29Z")

</div>

Hi, So this is a 2 part question. Below is an example of a log that is being read from a log file: \[09/10/2020 12:16:00\] xxx-server - HTTP Connections Spiking Ok 3.00 Perf Counter test (Current Connections) 4857 T…

---

## [Negative regrex \[field\] comparison in Logstash](https://discuss.elastic.co/t/negative-regrex-field-comparison-in-logstash/254060)

<div class="topic-metadata">

**Author:** [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\
**Replies:** 2\
**Last updated:** [November 2, 2020, 5:19pm UTC](https://discuss.elastic.co/t/negative-regrex-field-comparison-in-logstash/254060 "2020-11-02T17:19:24Z")

</div>

Hi, I'm trying to achieve simple \[username\] field character cheks. If \[username\] field NOT consists of \[A-Za-z\] then add new field. For example, if \[username\] equals foo.foo then write it into separate field. I can't …

---

## [Conditional change in canvas shape BG colour for the data fetched from Jenkins](https://discuss.elastic.co/t/conditional-change-in-canvas-shape-bg-colour-for-the-data-fetched-from-jenkins/253922)

<div class="topic-metadata">

**Author:** [@gaurav1](https://discuss.elastic.co/u/gaurav1)\
**Replies:** 2\
**Last updated:** [November 2, 2020, 5:05pm UTC](https://discuss.elastic.co/t/conditional-change-in-canvas-shape-bg-colour-for-the-data-fetched-from-jenkins/253922 "2020-11-02T17:05:46Z")

</div>

New to Kibana, I am pushing my Jenkins log to Logstash and tring to create a canvas in Kibana using shape. through essql i am able to fetch build number and build status. Depending on build status I want to change the b…

---

## [Replace value with another value](https://discuss.elastic.co/t/replace-value-with-another-value/253741)

<div class="topic-metadata">

**Author:** [@errupeshmca](https://discuss.elastic.co/u/errupeshmca)\
**Replies:** 2\
**Last updated:** [November 2, 2020, 4:55pm UTC](https://discuss.elastic.co/t/replace-value-with-another-value/253741 "2020-11-02T16:55:11Z")

</div>

Hi, Below is my code to replace one value with another value, i have True and false value in field Order completed ? , and i want to replace true with Total order shipped and false with total order Pending. But when y…

---

## [Possible malformed shape detected - ES 7.9.3](https://discuss.elastic.co/t/possible-malformed-shape-detected-es-7-9-3/253804)

<div class="topic-metadata">

**Author:** [@oshan](https://discuss.elastic.co/u/oshan)\
**Replies:** 2\
**Last updated:** [November 2, 2020, 4:18pm UTC](https://discuss.elastic.co/t/possible-malformed-shape-detected-es-7-9-3/253804 "2020-11-02T16:18:31Z")

</div>

ES 7.9.3 throws a exception when I'm indexing this polygon. Possible malformed shape detected.type"":""mapper\_parsing\_exception"",""reason"":""failed to parse field \[ranges.geometry\] of type \[geo\_shape\] polygon and the…

---

## [How to find the difference between last 5 minutes to last 10 minutes time range?](https://discuss.elastic.co/t/how-to-find-the-difference-between-last-5-minutes-to-last-10-minutes-time-range/253480)

<div class="topic-metadata">

**Author:** [@jacobdeiter](https://discuss.elastic.co/u/jacobdeiter)\
**Replies:** 1\
**Last updated:** [November 2, 2020, 3:39pm UTC](https://discuss.elastic.co/t/how-to-find-the-difference-between-last-5-minutes-to-last-10-minutes-time-range/253480 "2020-11-02T15:39:01Z")

</div>

I am trying to compare last 5 minutes(now -5m) data to last 10 minutes(now -10m) in TImelion. I tried offset but it does not help me because I does not compare data in the range. Is there a way to do it Timelion, if not…

---

## [How can I make a calculation across multiple documents with a given ID?](https://discuss.elastic.co/t/how-can-i-make-a-calculation-across-multiple-documents-with-a-given-id/253475)

<div class="topic-metadata">

**Author:** [@alphalol](https://discuss.elastic.co/u/alphalol)\
**Replies:** 1\
**Last updated:** [November 2, 2020, 3:27pm UTC](https://discuss.elastic.co/t/how-can-i-make-a-calculation-across-multiple-documents-with-a-given-id/253475 "2020-11-02T15:27:48Z")

</div>

I want to be able to add a bar chart on Kibana which displays a count of users (identified by name) which have a total of more than 0 in total\_a (with total of 0 for total\_b) and column for those with a total of more th…

---

## [Is there anyway to hold a TSVB params value independent of the overall filter?](https://discuss.elastic.co/t/is-there-anyway-to-hold-a-tsvb-params-value-independent-of-the-overall-filter/253834)

<div class="topic-metadata">

**Author:** [@blin432](https://discuss.elastic.co/u/blin432)\
**Replies:** 1\
**Last updated:** [November 2, 2020, 3:24pm UTC](https://discuss.elastic.co/t/is-there-anyway-to-hold-a-tsvb-params-value-independent-of-the-overall-filter/253834 "2020-11-02T15:24:24Z")

</div>

Currently the filter applies for the whole visual, I would like to hold params.z constant of any filter:

---

## [Kibana Keyword compare and collate based on the unique query list in string format](https://discuss.elastic.co/t/kibana-keyword-compare-and-collate-based-on-the-unique-query-list-in-string-format/254039)

<div class="topic-metadata">

**Author:** [@Kannan\_Rajendran](https://discuss.elastic.co/u/Kannan_Rajendran)\
**Replies:** 1\
**Last updated:** [November 2, 2020, 3:08pm UTC](https://discuss.elastic.co/t/kibana-keyword-compare-and-collate-based-on-the-unique-query-list-in-string-format/254039 "2020-11-02T15:08:24Z")

</div>

i have a scenario of collating some list of repeated SQL slow query with date vise transaction. My aim is to achieve unique no of the repeated SLOW query list which occurs in the certain time period in a data table visua…

---

## [Cluster state limitations/recommendations in es 7.x](https://discuss.elastic.co/t/cluster-state-limitations-recommendations-in-es-7-x/253458)

<div class="topic-metadata">

**Author:** [@Johan\_Nilsson\_Hansen](https://discuss.elastic.co/u/Johan_Nilsson_Hansen)\
**Replies:** 5\
**Last updated:** [November 2, 2020, 2:48pm UTC](https://discuss.elastic.co/t/cluster-state-limitations-recommendations-in-es-7-x/253458 "2020-11-02T14:48:58Z")

</div>

Hi all, Is there any limitations or recommendation of how large the cluster state can/should be in elasticsearch 7.x? Eg, how many nodes is recommended? How many shards and indices? The context for this question is tha…

---

## [Grok succeeds in debugger and through input{stdin. but with this config file I'm getting \_grokparsefailure](https://discuss.elastic.co/t/grok-succeeds-in-debugger-and-through-input-stdin-but-with-this-config-file-im-getting-grokparsefailure/253556)

<div class="topic-metadata">

**Author:** [@Vita\_Rosenberg](https://discuss.elastic.co/u/Vita_Rosenberg)\
**Replies:** 2\
**Last updated:** [November 2, 2020, 2:26pm UTC](https://discuss.elastic.co/t/grok-succeeds-in-debugger-and-through-input-stdin-but-with-this-config-file-im-getting-grokparsefailure/253556 "2020-11-02T14:26:18Z")

</div>

path =\> "C:/ELK/LocalLogs/\*" start\_position =\> beginning } } filter { grok{ match =\> { "message" =\> \["%{GREEDYDATA:first}%{DATE\_US:date\_}-%{TIME:time\_}%{GREEDYDATA:last}"\]} } da…

---

## [Logstash-Ruby is using which Testing Framework?](https://discuss.elastic.co/t/logstash-ruby-is-using-which-testing-framework/254041)

<div class="topic-metadata">

**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\
**Replies:** 0\
**Last updated:** [November 2, 2020, 2:19pm UTC](https://discuss.elastic.co/t/logstash-ruby-is-using-which-testing-framework/254041 "2020-11-02T14:19:52Z")

</div>

I am using the test sample shown in this page: But it seems this assert works events.size == 0 Because the debugging it very hard with this, if i have multiple assert, it doesnt tell me which assert failed...

---

## [Shingle filter to allow mismatching spaces](https://discuss.elastic.co/t/shingle-filter-to-allow-mismatching-spaces/253846)

<div class="topic-metadata">

**Author:** [@awarrenlove](https://discuss.elastic.co/u/awarrenlove)\
**Replies:** 4\
**Last updated:** [November 2, 2020, 2:15pm UTC](https://discuss.elastic.co/t/shingle-filter-to-allow-mismatching-spaces/253846 "2020-11-02T14:15:21Z")

</div>

I am trying to solve a problem where users sometimes include an extra space in their search terms, or alternatively a space was missing in the search term compared to what is in the index. In order to do this, I attempte…

---

## [Elasticsearch cluster monitoring](https://discuss.elastic.co/t/elasticsearch-cluster-monitoring/253897)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 2\
**Last updated:** [November 2, 2020, 2:08pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-monitoring/253897 "2020-11-02T14:08:24Z")

</div>

I've successfully setup the 8 node of elasticsearch cluster.In kibana stack monitoring it showing me the disk free space . My question is that is there any setting that it will show me the disk free space of all data no…

---

## [Weird error with kibana cluster](https://discuss.elastic.co/t/weird-error-with-kibana-cluster/253904)

<div class="topic-metadata">

**Author:** [@mtbx88](https://discuss.elastic.co/u/mtbx88)\
**Replies:** 1\
**Last updated:** [November 2, 2020, 2:08pm UTC](https://discuss.elastic.co/t/weird-error-with-kibana-cluster/253904 "2020-11-02T14:08:23Z")

</div>

I keep getting this error in Kibana, it has some thing to do with the monitoring. Any ideas? log \[14:46:39.367\] \[error\]\[http\] { Error: Saved object \[task/ad935fc0-1b37-11eb-b82d-4de2f86f3632\] not found at Function.cr…

---

## [Logstash Error while configuring the JDBC connection](https://discuss.elastic.co/t/logstash-error-while-configuring-the-jdbc-connection/254036)

<div class="topic-metadata">

**Author:** [@Kannan\_Rajendran](https://discuss.elastic.co/u/Kannan_Rajendran)\
**Replies:** 0\
**Last updated:** [November 2, 2020, 1:57pm UTC](https://discuss.elastic.co/t/logstash-error-while-configuring-the-jdbc-connection/254036 "2020-11-02T13:57:32Z")

</div>

Hi , When i try to connect the JDBC connection and test the logstash conf file i'm getting the below error. i have tried the some forum solution but nothing worked. \[logstash.runner \] The given configuration is…

---

## [Engineer2 unable to kill kibana](https://discuss.elastic.co/t/engineer2-unable-to-kill-kibana/254024)

<div class="topic-metadata">

**Author:** [@jems](https://discuss.elastic.co/u/jems)\
**Replies:** 2\
**Last updated:** [November 2, 2020, 1:37pm UTC](https://discuss.elastic.co/t/engineer2-unable-to-kill-kibana/254024 "2020-11-02T13:37:43Z")

</div>

Hello, I am on Engineer 2 course - "Securing Elasticsearch". One of the things mentioned there is to kill and restart kibana. My logged in user is elastic, but all applications are running as ubuntu user. Therefore I am…

---

## [Timeseries visualization for plotting no. of matching documents against time](https://discuss.elastic.co/t/timeseries-visualization-for-plotting-no-of-matching-documents-against-time/253465)

<div class="topic-metadata">

**Author:** [@sharmashrayansh](https://discuss.elastic.co/u/sharmashrayansh)\
**Replies:** 3\
**Last updated:** [November 2, 2020, 1:06pm UTC](https://discuss.elastic.co/t/timeseries-visualization-for-plotting-no-of-matching-documents-against-time/253465 "2020-11-02T13:06:08Z")

</div>

Hello, We are creating a Dashboard to monitor issues from an external system. We are collecting data of "issues" using Logstash from a different application and storing them in ElasticSearch. As a crucial requirement,…

---

## [Alternatives to mapping types in Elasticsearch](https://discuss.elastic.co/t/alternatives-to-mapping-types-in-elasticsearch/254007)

<div class="topic-metadata">

**Author:** [@Kanika27](https://discuss.elastic.co/u/Kanika27)\
**Replies:** 3\
**Last updated:** [November 2, 2020, 12:23pm UTC](https://discuss.elastic.co/t/alternatives-to-mapping-types-in-elasticsearch/254007 "2020-11-02T12:23:18Z")

</div>

I understand that the mapping types are being removed, I want to know is their any other way out to have multiple schema in a single index? Something like putting different schema in different shards for one single inde…

---

## [Circuit breaker problem](https://discuss.elastic.co/t/circuit-breaker-problem/253828)

<div class="topic-metadata">

**Author:** [@gborg](https://discuss.elastic.co/u/gborg)\
**Replies:** 3\
**Last updated:** [November 2, 2020, 12:16pm UTC](https://discuss.elastic.co/t/circuit-breaker-problem/253828 "2020-11-02T12:16:47Z")

</div>

So, my situation is: I have a pretty big cluster (10TB) of real time log data, today is a high-load day and I am getting circuit breaker errors ## circuit\_breaking\_exception at \`shard\` 0 \`index\` open--2020.09.30 \`no…

---

## [How to get arrays with variable length into Elasticsearch?](https://discuss.elastic.co/t/how-to-get-arrays-with-variable-length-into-elasticsearch/254020)

<div class="topic-metadata">

**Author:** [@Toontje](https://discuss.elastic.co/u/Toontje)\
**Replies:** 0\
**Last updated:** [November 2, 2020, 12:11pm UTC](https://discuss.elastic.co/t/how-to-get-arrays-with-variable-length-into-elasticsearch/254020 "2020-11-02T12:11:55Z")

</div>

I have log files with a JSON data structure that looks like this: {"windowNumber": 1830323, "timestamp": "2020-09-24T01:26:31.673097Z", "tagData": {"103040840050DDABCD10028300003B93": {"inIntensity": "2542", "inCount": …

---

## [Sorting on keyword not working as expected](https://discuss.elastic.co/t/sorting-on-keyword-not-working-as-expected/253959)

<div class="topic-metadata">

**Author:** [@F\_eq\_kx](https://discuss.elastic.co/u/F_eq_kx)\
**Replies:** 1\
**Last updated:** [November 2, 2020, 11:56am UTC](https://discuss.elastic.co/t/sorting-on-keyword-not-working-as-expected/253959 "2020-11-02T11:56:37Z")

</div>

I am storing Windows UNC paths in a path field with the following mapping: "path": { "type": "text", "fields": { "keyword": { "type": "keyword" }, "tree": { "type"…

---

## [How not to get double entries in my datastream using the Index API](https://discuss.elastic.co/t/how-not-to-get-double-entries-in-my-datastream-using-the-index-api/254015)

<div class="topic-metadata">

**Author:** [@hugohendriks](https://discuss.elastic.co/u/hugohendriks)\
**Replies:** 0\
**Last updated:** [November 2, 2020, 10:53am UTC](https://discuss.elastic.co/t/how-not-to-get-double-entries-in-my-datastream-using-the-index-api/254015 "2020-11-02T10:53:45Z")

</div>

Hi, We are using the Index API to post data to my datastream. I read from a queue and then perform a POST but I do have a timeout setting of 10 seconds. What sometimes happens it seems is that elastic takes more then 10…

---

## [How to search with special character in search bar](https://discuss.elastic.co/t/how-to-search-with-special-character-in-search-bar/253572)

<div class="topic-metadata">

**Author:** [@beam5544](https://discuss.elastic.co/u/beam5544)\
**Replies:** 3\
**Last updated:** [November 2, 2020, 10:46am UTC](https://discuss.elastic.co/t/how-to-search-with-special-character-in-search-bar/253572 "2020-11-02T10:46:22Z")

</div>

Now, I already have data "reqBody" in String format ... but it look like JSON somehow. FYI, {"masterStagingId":"PAYROLL72e6972d84b047af88e62258dbaea998","paymentProductId":"PAYROLL","batchReferenceId":"PAY201028df78…

---

## [Ruby syntax error](https://discuss.elastic.co/t/ruby-syntax-error/252197)

<div class="topic-metadata">

**Author:** [@Jan\_Kabelka](https://discuss.elastic.co/u/Jan_Kabelka)\
**Replies:** 3\
**Last updated:** [November 2, 2020, 10:40am UTC](https://discuss.elastic.co/t/ruby-syntax-error/252197 "2020-11-02T10:40:21Z")

</div>

Hi, I did not find anything what would work therefore please let me ask... I need to create new field with length of DNS domain. Also I would like to have another field with entropy value for that DNS domain. What field…

---

## [Issue enter to Kibana](https://discuss.elastic.co/t/issue-enter-to-kibana/253981)

<div class="topic-metadata">

**Author:** [@Lamya\_Alzomai](https://discuss.elastic.co/u/Lamya_Alzomai)\
**Replies:** 3\
**Last updated:** [November 2, 2020, 9:13am UTC](https://discuss.elastic.co/t/issue-enter-to-kibana/253981 "2020-11-02T09:13:50Z")

</div>

I have an issue when singe in to Kibana it show me this message. And i try to rest the password and still same problem.

---

## [Logstash error](https://discuss.elastic.co/t/logstash-error/253664)

<div class="topic-metadata">

**Author:** [@punithjigali](https://discuss.elastic.co/u/punithjigali)\
**Replies:** 2\
**Last updated:** [November 2, 2020, 9:05am UTC](https://discuss.elastic.co/t/logstash-error/253664 "2020-11-02T09:05:48Z")

</div>

Hi team, I have installed jdk 15. I am getting this error when I run below command... C:\\Elastic stack\\logstash-7.9.3\\logstash-7.9.3\\bin\>logstash -f C:\\Elastic stack\\logstash.conf Unrecognized VM option 'UseConcMarkSw…

---

## [Failed to process cluster event (put-mapping) within 30s](https://discuss.elastic.co/t/failed-to-process-cluster-event-put-mapping-within-30s/253987)

<div class="topic-metadata">

**Author:** [@Yasiru\_Kanchana](https://discuss.elastic.co/u/Yasiru_Kanchana)\
**Replies:** 3\
**Last updated:** [November 2, 2020, 8:15am UTC](https://discuss.elastic.co/t/failed-to-process-cluster-event-put-mapping-within-30s/253987 "2020-11-02T08:15:28Z")

</div>

Currently, I am running Elasticsearch in cluster mode and there are 6 nodes. My logs are flooded with below error message. Also we are creating daily basis indexes and each having 10 shards (according to the template). I…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1169)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1171)
