# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1173

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1174

---

## [Error searching, probably (Global Serach plugin) error. ELK 7.9.1](https://discuss.elastic.co/t/error-searching-probably-global-serach-plugin-error-elk-7-9-1/251935)

<div class="topic-metadata">

**Author:** [@mdecastrosimon](https://discuss.elastic.co/u/mdecastrosimon)\
**Replies:** 2\
**Last updated:** [October 30, 2020, 10:11am UTC](https://discuss.elastic.co/t/error-searching-probably-global-serach-plugin-error-elk-7-9-1/251935 "2020-10-30T10:11:05Z")

</div>

When I am trying to search any word withous specify the field I am obtaining this error: search\_phase\_execution\_exception all shards failed Error: Bad Request at Fetch.\_callee3$ (http://127.0.0.1:5601/33912/bundle…

---

## [Show Max and Min value for given period](https://discuss.elastic.co/t/show-max-and-min-value-for-given-period/253435)

<div class="topic-metadata">

**Author:** [@bubba](https://discuss.elastic.co/u/bubba)\
**Replies:** 2\
**Last updated:** [October 30, 2020, 9:48am UTC](https://discuss.elastic.co/t/show-max-and-min-value-for-given-period/253435 "2020-10-30T09:48:09Z")

</div>

Hi All, I'm measuring temperature with a sensor, send it to Logstash -\> Elasticsearch. Currently everything is going well with temperature change visualizer, but I play a lot with all other available visualizers last 2 …

---

## [Unexpected behaviour with search\_as\_you\_type field indexed as arrays](https://discuss.elastic.co/t/unexpected-behaviour-with-search-as-you-type-field-indexed-as-arrays/253790)

<div class="topic-metadata">

**Author:** [@serkanozer](https://discuss.elastic.co/u/serkanozer)\
**Replies:** 0\
**Last updated:** [October 30, 2020, 9:18am UTC](https://discuss.elastic.co/t/unexpected-behaviour-with-search-as-you-type-field-indexed-as-arrays/253790 "2020-10-30T09:18:36Z")

</div>

curl -X PUT "localhost:9200/test\_index?pretty" -H 'Content-Type: application/json' -d' { "mappings": { "properties": { "search\_as\_you\_type\_field": { "type": "search\_as\_you\_type" } } } } ' …

---

## [How to improve performance of ID query](https://discuss.elastic.co/t/how-to-improve-performance-of-id-query/253699)

<div class="topic-metadata">

**Author:** [@anjali\_zarkar](https://discuss.elastic.co/u/anjali_zarkar)\
**Replies:** 1\
**Last updated:** [October 30, 2020, 9:12am UTC](https://discuss.elastic.co/t/how-to-improve-performance-of-id-query/253699 "2020-10-30T09:12:38Z")

</div>

'Hi , I am new to Elasticsearch, I am trying to fetch documents from eleasticsearch using Id query . Numbers of records in query are just 180 and query takes ~800 ms. { "profile" : "true", "query": { "ids" : { "va…

---

## [Packetbeats shards UNASSIGNED](https://discuss.elastic.co/t/packetbeats-shards-unassigned/253717)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 2\
**Last updated:** [October 30, 2020, 9:05am UTC](https://discuss.elastic.co/t/packetbeats-shards-unassigned/253717 "2020-10-30T09:05:52Z")

</div>

Hello, Everything was working fine in my cluster, and today I found out that I have no log from packetbeat, and shards' health is red: and when I run GET \_cat/shards I get something like that: packetbeat-7.9.3-2020.…

---

## [Daylight saving time, strange display in kibana discover diagram](https://discuss.elastic.co/t/daylight-saving-time-strange-display-in-kibana-discover-diagram/253309)

<div class="topic-metadata">

**Author:** [@erigaut](https://discuss.elastic.co/u/erigaut)\
**Replies:** 1\
**Last updated:** [October 30, 2020, 8:39am UTC](https://discuss.elastic.co/t/daylight-saving-time-strange-display-in-kibana-discover-diagram/253309 "2020-10-30T08:39:31Z")

</div>

Kibana version : 6.1 Last night we underwent the time change and went back to winter time (Daylight saving time). The data in elasticsearch is apparently correctly indexed however Kibana displays a gap when the time ha…

---

## [Create mutliples area with jmx data](https://discuss.elastic.co/t/create-mutliples-area-with-jmx-data/253117)

<div class="topic-metadata">

**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\
**Replies:** 1\
**Last updated:** [October 30, 2020, 8:11am UTC](https://discuss.elastic.co/t/create-mutliples-area-with-jmx-data/253117 "2020-10-30T08:11:20Z")

</div>

Hello, i'm trying to create a vizualise which contains two area of jmx metrics of my java application : Heap used Heap max. To do it, I use jmx plugin. This is my logstash pipeline : input { jmx { path =\> "/etc…

---

## [I cant start up Elastic search](https://discuss.elastic.co/t/i-cant-start-up-elastic-search/253348)

<div class="topic-metadata">

**Author:** [@Fisnik\_Myrtezaj](https://discuss.elastic.co/u/Fisnik_Myrtezaj)\
**Replies:** 8\
**Last updated:** [October 30, 2020, 8:07am UTC](https://discuss.elastic.co/t/i-cant-start-up-elastic-search/253348 "2020-10-30T08:07:44Z")

</div>

When i try startup the elasticsearch i get this error : ./bin/elasticsearch-env: line 77: /volume1/web/elasticsearch/jdk/bin/java: cannot execute binary file: Exec format error im using Linux nas synology

---

## [Wildcard in aggregation acting Funny](https://discuss.elastic.co/t/wildcard-in-aggregation-acting-funny/253616)

<div class="topic-metadata">

**Author:** [@katana\_handler](https://discuss.elastic.co/u/katana_handler)\
**Replies:** 1\
**Last updated:** [October 30, 2020, 6:17am UTC](https://discuss.elastic.co/t/wildcard-in-aggregation-acting-funny/253616 "2020-10-30T06:17:09Z")

</div>

My docs (movies) are in this kind of format: { "title" : "title of movie", "cast": \[list of names\], "genres": \[list of genres\], "year" : long } Now i have attached the query that i performed and the res…

---

## [Roll up Jobs Performance](https://discuss.elastic.co/t/roll-up-jobs-performance/253773)

<div class="topic-metadata">

**Author:** [@Dimple\_Goyal](https://discuss.elastic.co/u/Dimple_Goyal)\
**Replies:** 0\
**Last updated:** [October 30, 2020, 6:14am UTC](https://discuss.elastic.co/t/roll-up-jobs-performance/253773 "2020-10-30T06:14:33Z")

</div>

I have about 90 indexes 50gb each. I have created rollup job to process information of these indices. The max page size for the rollup job is 10000 indexing is taking forever, any ideas on how i could ehance the perform…

---

## [Need help with co-occurrence of values in nested documents across documents](https://discuss.elastic.co/t/need-help-with-co-occurrence-of-values-in-nested-documents-across-documents/253718)

<div class="topic-metadata">

**Author:** [@verdict-lg](https://discuss.elastic.co/u/verdict-lg)\
**Replies:** 0\
**Last updated:** [October 29, 2020, 3:21pm UTC](https://discuss.elastic.co/t/need-help-with-co-occurrence-of-values-in-nested-documents-across-documents/253718 "2020-10-29T15:21:10Z")

</div>

Hi, Say this is my document and Book Meta is a nested field { { "Book ID": 1, "Book Meta": \[ { "Chapter\_ID" : 1, "Chapter\_Gist": "\<some-text-h…

---

## [Logstash converts integer value in scientific notation to float, causing mapping error in Elasticsearch](https://discuss.elastic.co/t/logstash-converts-integer-value-in-scientific-notation-to-float-causing-mapping-error-in-elasticsearch/253396)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 7\
**Last updated:** [October 30, 2020, 3:40am UTC](https://discuss.elastic.co/t/logstash-converts-integer-value-in-scientific-notation-to-float-causing-mapping-error-in-elasticsearch/253396 "2020-10-30T03:40:22Z")

</div>

Background Given the following input (these are snippets from the input JSON Lines): "MEMLIMIT Size":0 ... "MEMLIMIT Size":0.8590E+10 Logstash (I'm using 7.9.3) outputs: "MEMLIMIT Size" =\> 0 "MEMLIMIT Size" =\> 859000…

---

## [How do I get the highest matching set of data in a multi-value field?](https://discuss.elastic.co/t/how-do-i-get-the-highest-matching-set-of-data-in-a-multi-value-field/252141)

<div class="topic-metadata">

**Author:** [@yanglingqiang](https://discuss.elastic.co/u/yanglingqiang)\
**Replies:** 3\
**Last updated:** [October 30, 2020, 3:10am UTC](https://discuss.elastic.co/t/how-do-i-get-the-highest-matching-set-of-data-in-a-multi-value-field/252141 "2020-10-30T03:10:38Z")

</div>

my index mapping "mapping":{ "test":{ "descript": { "properties": { "prop": { "type": "long" }, "value": { "analyzer": "english", "type": "text" } } }, "id":{ "type":"lo…

---

## [Show total count on line graph when using split series bucket](https://discuss.elastic.co/t/show-total-count-on-line-graph-when-using-split-series-bucket/253143)

<div class="topic-metadata">

**Author:** [@buncieboy](https://discuss.elastic.co/u/buncieboy)\
**Replies:** 2\
**Last updated:** [October 30, 2020, 1:54am UTC](https://discuss.elastic.co/t/show-total-count-on-line-graph-when-using-split-series-bucket/253143 "2020-10-30T01:54:14Z")

</div>

We have a line graph that shows the occurrence of an event over time, using count on the y axis and a date histogram on the x axis. If we add a split series sub bucket on the data (for example on the field "owner") it sp…

---

## [Kibana system indices](https://discuss.elastic.co/t/kibana-system-indices/253538)

<div class="topic-metadata">

**Author:** [@congwensheng](https://discuss.elastic.co/u/congwensheng)\
**Replies:** 3\
**Last updated:** [October 30, 2020, 1:29am UTC](https://discuss.elastic.co/t/kibana-system-indices/253538 "2020-10-30T01:29:28Z")

</div>

the elasticsearch version is 7.9.2 i found there are some system indices .kibana-event-log-7.9.2-000001 .kibana\_task\_manager\_1 .monitoring-kibana-7-2020.10.28 .kibana\_2 .kibana\_1 I can't figure out how these index…

---

## [Java JDK old version](https://discuss.elastic.co/t/java-jdk-old-version/253383)

<div class="topic-metadata">

**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\
**Replies:** 3\
**Last updated:** [October 30, 2020, 12:44am UTC](https://discuss.elastic.co/t/java-jdk-old-version/253383 "2020-10-30T00:44:25Z")

</div>

ELK version 7.1.1... vulnerability scanning shows Java old version found on elasticsearch nodes path for ELK cluster and logstash Java JDK installation on Elasticsearch nodes path /usr/share/elasticsearch/jdk/ version …

---

## [How to create alert in watcher advance? for the basic metrics of CPU, MEMORY](https://discuss.elastic.co/t/how-to-create-alert-in-watcher-advance-for-the-basic-metrics-of-cpu-memory/253363)

<div class="topic-metadata">

**Author:** [@aandrewsllp](https://discuss.elastic.co/u/aandrewsllp)\
**Replies:** 1\
**Last updated:** [October 30, 2020, 12:35am UTC](https://discuss.elastic.co/t/how-to-create-alert-in-watcher-advance-for-the-basic-metrics-of-cpu-memory/253363 "2020-10-30T00:35:59Z")

</div>

How to create alert in watcher advance? for the basic metrics of CPU, MEMORY

---

## [Report on user and the role](https://discuss.elastic.co/t/report-on-user-and-the-role/253531)

<div class="topic-metadata">

**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\
**Replies:** 2\
**Last updated:** [October 30, 2020, 12:22am UTC](https://discuss.elastic.co/t/report-on-user-and-the-role/253531 "2020-10-30T00:22:01Z")

</div>

Hi, I am thinking to create a report about user and the role granted. I know I can run following script in Console to get the list of role mapping, but is there a way to index it so that i can create a Discover or Visu…

---

## [In Kibana 7.7.1, often try create too many scroll contexts when query the index kibana\_task\_manager](https://discuss.elastic.co/t/in-kibana-7-7-1-often-try-create-too-many-scroll-contexts-when-query-the-index-kibana-task-manager/251626)

<div class="topic-metadata">

**Author:** [@bruceandalvin](https://discuss.elastic.co/u/bruceandalvin)\
**Replies:** 3\
**Last updated:** [October 29, 2020, 10:50pm UTC](https://discuss.elastic.co/t/in-kibana-7-7-1-often-try-create-too-many-scroll-contexts-when-query-the-index-kibana-task-manager/251626 "2020-10-29T22:50:43Z")

</div>

\[2020-10-09T21:08:38,776\]\[WARN \]\[r.suppressed \] \[MyNode00\] path: /.kibana\_task\_manager/\_update\_by\_query, params: {ignore\_unavailable=true, refresh=true, conflicts=proceed, index=.kibana\_task\_manager, max\_doc…

---

## [How to extract data from a field and get the max values?](https://discuss.elastic.co/t/how-to-extract-data-from-a-field-and-get-the-max-values/253491)

<div class="topic-metadata">

**Author:** [@AdrianH](https://discuss.elastic.co/u/AdrianH)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 9:46pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-a-field-and-get-the-max-values/253491 "2020-10-29T21:46:43Z")

</div>

Hi, I'm new to Kibana (using version 6.4.2) and am trying to extract some values out of a field. This would require parsing the field to extract 3 numbers. I could export this data out to a CSV, but seems that if I …

---

## [Dynamic Titles to Bar Chart](https://discuss.elastic.co/t/dynamic-titles-to-bar-chart/253489)

<div class="topic-metadata">

**Author:** [@tilakraj](https://discuss.elastic.co/u/tilakraj)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 9:38pm UTC](https://discuss.elastic.co/t/dynamic-titles-to-bar-chart/253489 "2020-10-29T21:38:32Z")

</div>

I have a question to the community. I am using Kibana 7.7.0 . I have been trying creating a Bar chart with a dynamic title using aggregation of one of the fields from indices. But I am not able find the option like how …

---

## [Internals of snapshot and restore](https://discuss.elastic.co/t/internals-of-snapshot-and-restore/253750)

<div class="topic-metadata">

**Author:** [@avee](https://discuss.elastic.co/u/avee)\
**Replies:** 0\
**Last updated:** [October 29, 2020, 9:21pm UTC](https://discuss.elastic.co/t/internals-of-snapshot-and-restore/253750 "2020-10-29T21:21:24Z")

</div>

How does snapshot and restore works in the background? For example - When a snapshot is taken with AWS S3 as backend store, what all oprations are carried out on elastic nodes and which nodes ? And which node is responsi…

---

## [Elasticsearch plugin status RED](https://discuss.elastic.co/t/elasticsearch-plugin-status-red/253550)

<div class="topic-metadata">

**Author:** [@Jonny\_Reyes](https://discuss.elastic.co/u/Jonny_Reyes)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 9:19pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-status-red/253550 "2020-10-29T21:19:49Z")

</div>

Hi everyone, I have a version 5.6 of elk stack and kibana crashes every day, as you can see in the following image. I have two questions This heap size is from kibana or elasticsearch Because a restart of the servi…

---

## [How to Limit Message Length in Watcher Json File](https://discuss.elastic.co/t/how-to-limit-message-length-in-watcher-json-file/253581)

<div class="topic-metadata">

**Author:** [@mdamera](https://discuss.elastic.co/u/mdamera)\
**Replies:** 0\
**Last updated:** [October 28, 2020, 3:17pm UTC](https://discuss.elastic.co/t/how-to-limit-message-length-in-watcher-json-file/253581 "2020-10-28T15:17:17Z")

</div>

Hello Everyone, I have following lines on a watcher Json configuration file and I would like to trim/limit the {{\_source.message}} to 3000 characters in the email alert Can anyone help me how can we do that ? "body":…

---

## [Kibana canvas create using api error](https://discuss.elastic.co/t/kibana-canvas-create-using-api-error/253350)

<div class="topic-metadata">

**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 9:02pm UTC](https://discuss.elastic.co/t/kibana-canvas-create-using-api-error/253350 "2020-10-29T21:02:35Z")

</div>

Hello. I am trying to create a canvas using this API endpoint: For this I am using the following curl: curl -X POST curl -X POST localhost:5601/api/saved\_objects/canvas -H 'kbn-xsrf: true' -H 'Content-Type: applic…

---

## [Cross Log source field unify format](https://discuss.elastic.co/t/cross-log-source-field-unify-format/253308)

<div class="topic-metadata">

**Author:** [@akefallonitis](https://discuss.elastic.co/u/akefallonitis)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 8:29pm UTC](https://discuss.elastic.co/t/cross-log-source-field-unify-format/253308 "2020-10-29T20:29:34Z")

</div>

Hi one question. I have to different indexes with an IP field: src.ip clientip Is there a way to combine both with scripted field somehow so i can be able to search in both indexes using the same field name (without …

---

## [Skip Kibana login without reverse proxy](https://discuss.elastic.co/t/skip-kibana-login-without-reverse-proxy/253226)

<div class="topic-metadata">

**Author:** [@aneelkhan](https://discuss.elastic.co/u/aneelkhan)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 8:03pm UTC](https://discuss.elastic.co/t/skip-kibana-login-without-reverse-proxy/253226 "2020-10-29T20:03:34Z")

</div>

Is there any way to skip kibana login screen and access the dashboard directly without any credentials? I know this can be done via reverse proxy or search guard but I am looking for a solution with in Kibana or ES using…

---

## [Problem with kibana index pattern](https://discuss.elastic.co/t/problem-with-kibana-index-pattern/253202)

<div class="topic-metadata">

**Author:** [@milguad](https://discuss.elastic.co/u/milguad)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:59pm UTC](https://discuss.elastic.co/t/problem-with-kibana-index-pattern/253202 "2020-10-29T19:59:48Z")

</div>

Hi, I have a problem with kibana index pattern. I set up a ES Cluster with Nginx as a reverse proxy. Everything is working well, but the Kibana index pattern. I have logs coming from fluentd into elasticsearch. I can se…

---

## [Adding two dasboards in a space Kibana](https://discuss.elastic.co/t/adding-two-dasboards-in-a-space-kibana/253183)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:43pm UTC](https://discuss.elastic.co/t/adding-two-dasboards-in-a-space-kibana/253183 "2020-10-29T19:43:19Z")

</div>

I want to associate two dashboards in a kibana space ? How can i do this ?

---

## [How to remove the "double" value from tooltip in kibana heatmap](https://discuss.elastic.co/t/how-to-remove-the-double-value-from-tooltip-in-kibana-heatmap/253682)

<div class="topic-metadata">

**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:42pm UTC](https://discuss.elastic.co/t/how-to-remove-the-double-value-from-tooltip-in-kibana-heatmap/253682 "2020-10-29T19:42:34Z")

</div>

Hi! I would like to use heatmap visualization in order to display some data but I am facing an issue with the tooltip. I have chosen for Y-axis Term as aggregation (which is a string type field, id\_no) and for the X-ax…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1172)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1174)
