# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1193 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1194 --- ## [What's the best way to backup ILM policies & index templates](https://discuss.elastic.co/t/whats-the-best-way-to-backup-ilm-policies-index-templates/251231)
**Author:** [@Chr0my](https://discuss.elastic.co/u/Chr0my)\ **Replies:** 4\ **Last updated:** [October 15, 2020, 7:26am UTC](https://discuss.elastic.co/t/whats-the-best-way-to-backup-ilm-policies-index-templates/251231 "2020-10-15T07:26:51Z")
Hi everyone, I'm currently looking for a way to backup ILM policies and index templates automatically, but I cannot find where these informations are stored, and I don't want to snapshot my entire cluster. Is it stored… --- ## [Kibana 7.9.1 to 7.9.2 failure](https://discuss.elastic.co/t/kibana-7-9-1-to-7-9-2-failure/249883)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 3\ **Last updated:** [October 15, 2020, 7:16am UTC](https://discuss.elastic.co/t/kibana-7-9-1-to-7-9-2-failure/249883 "2020-10-15T07:16:59Z")
Ok I'm at a loss normally the updates even failed ones are easy to fix. Roll back to 7.9.1 worked thankfully. On the journal log when attempting to start kibana 7.9.2 with the elasticsearch already updated to 7.9.2 and … --- ## [Elastic endpoint Could not communicate with Checking API will retry](https://discuss.elastic.co/t/elastic-endpoint-could-not-communicate-with-checking-api-will-retry/251303)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 4\ **Last updated:** [October 15, 2020, 7:04am UTC](https://discuss.elastic.co/t/elastic-endpoint-could-not-communicate-with-checking-api-will-retry/251303 "2020-10-15T07:04:06Z")
Hello everybody, I am trying elastic endpoint from code source and I am getting this error: Could not communicate with Checking API will retry, error: fail to checkin to fleet: Post "https://@IP\_KIBANA:5601/api/ingest\_… --- ## [Email Notification when column value reached to threshold value in dashboards](https://discuss.elastic.co/t/email-notification-when-column-value-reached-to-threshold-value-in-dashboards/251209)
**Author:** [@sajjithreddy](https://discuss.elastic.co/u/sajjithreddy)\ **Replies:** 3\ **Last updated:** [October 15, 2020, 6:05am UTC](https://discuss.elastic.co/t/email-notification-when-column-value-reached-to-threshold-value-in-dashboards/251209 "2020-10-15T06:05:06Z")
Hi Team, I am trying to send email notification when a column value reached to threshold value in dashboards in Kibana. Is there any way to send notification ?? If so, please provide me with the solution. Thanks in a… --- ## [Scripted Field in Kibana](https://discuss.elastic.co/t/scripted-field-in-kibana/252037)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 13\ **Last updated:** [October 15, 2020, 5:58am UTC](https://discuss.elastic.co/t/scripted-field-in-kibana/252037 "2020-10-15T05:58:31Z")
Hi all, i want to calculate the capacity of every room using scripted field: my data looks ike this: rooms { "board": "Soft All Inclusive", "quantity": 1, "roomId": 42114, "paxes": { "infant": 1, "adults": 2, … --- ## [Elastic search considers date field send by java service as string](https://discuss.elastic.co/t/elastic-search-considers-date-field-send-by-java-service-as-string/251924)
**Author:** [@Mohan\_vel](https://discuss.elastic.co/u/Mohan_vel)\ **Replies:** 2\ **Last updated:** [October 15, 2020, 5:56am UTC](https://discuss.elastic.co/t/elastic-search-considers-date-field-send-by-java-service-as-string/251924 "2020-10-15T05:56:46Z")
Hi I have created a java service and i am indexing the response into elasticseaarch i am sending a date value but elasticsearch considers it as string. Code is already deployed in production. How to change the incoming f… --- ## [How to add Date in mutate add field](https://discuss.elastic.co/t/how-to-add-date-in-mutate-add-field/251601)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 10\ **Last updated:** [October 15, 2020, 5:46am UTC](https://discuss.elastic.co/t/how-to-add-date-in-mutate-add-field/251601 "2020-10-15T05:46:21Z")
Hi Team I am using logstash v7.8 to extract data from ES v7.8 index and inserting respective records to ES v7.8 index-2. While doing so , I want to use filter --\> mutate --\> add\_field ==\> { "doc\_date" =\> "now-1d" } Ho… --- ## [How can buckets be sorted by doc\_count ratio?](https://discuss.elastic.co/t/how-can-buckets-be-sorted-by-doc-count-ratio/250068)
**Author:** [@yanglingqiang](https://discuss.elastic.co/u/yanglingqiang)\ **Replies:** 1\ **Last updated:** [October 15, 2020, 4:45am UTC](https://discuss.elastic.co/t/how-can-buckets-be-sorted-by-doc-count-ratio/250068 "2020-10-15T04:45:40Z")
I have data { "id": 1, "buyer\_id": 101, "total\_count": 2 } { "id": 2, "buyer\_id": 101, "total\_count": 2 } { "id": 3, "buyer\_id": 102, "total\_count": 1 } After aggregation by buyer\_id, I want to sort by… --- ## [Kibana interface opening problem](https://discuss.elastic.co/t/kibana-interface-opening-problem/251891)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 2\ **Last updated:** [October 15, 2020, 4:25am UTC](https://discuss.elastic.co/t/kibana-interface-opening-problem/251891 "2020-10-15T04:25:00Z")
Hi Experts, After installing elastic serach and kibana with 7.8.1 version I am not able to open the Kibana landing page in chrome (or in any browser) http://elasticsearchip:kibanaport/ Curl output \

**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 5\ **Last updated:** [October 15, 2020, 2:59am UTC](https://discuss.elastic.co/t/simple-kibana-term-query-not-searching-the-all-the-fields/252113 "2020-10-15T02:59:38Z") Hello, I'm puzzled by the following explanation here: Kibana Query Language | Kibana Guide \[8.11\] | Elastic Terms without fields are matched against the default field in your index settings. If a default field is not s… --- ## [How to search special characters in elasticsearch](https://discuss.elastic.co/t/how-to-search-special-characters-in-elasticsearch/251997)
**Author:** [@yen\_l\_ng\_th](https://discuss.elastic.co/u/yen_l_ng_th)\ **Replies:** 2\ **Last updated:** [October 15, 2020, 2:40am UTC](https://discuss.elastic.co/t/how-to-search-special-characters-in-elasticsearch/251997 "2020-10-15T02:40:44Z")
I want query terms name in string "9.999%". But it not working. setting document 'analysis' =\> \[ 'analyzer' =\> \[ 'default' =\> \[ 'type' =\> 'custom', 'tokenizer' =\> 'whitespace', 'filter' =\> \[ 'lowercase', 'word\_d… --- ## [How to convert format "yyyy-MM-dd HH:mm:ss in logstash?](https://discuss.elastic.co/t/how-to-convert-format-yyyy-mm-dd-hhss-in-logstash/252005)
**Author:** [@pamiers](https://discuss.elastic.co/u/pamiers)\ **Replies:** 2\ **Last updated:** [October 15, 2020, 2:28am UTC](https://discuss.elastic.co/t/how-to-convert-format-yyyy-mm-dd-hhss-in-logstash/252005 "2020-10-15T02:28:12Z")
I fetch the data through Oracle, and the database has a field updated\_at in the format "yyyy-MM-dd HH:mm:ss". However, it has been automatically changed to ISO8601 format in logstash. So I try to change the format "yyyy-… --- ## [Save App Search results as csv file](https://discuss.elastic.co/t/save-app-search-results-as-csv-file/251683)
**Author:** [@dmm](https://discuss.elastic.co/u/dmm)\ **Replies:** 2\ **Last updated:** [October 14, 2020, 11:01pm UTC](https://discuss.elastic.co/t/save-app-search-results-as-csv-file/251683 "2020-10-14T23:01:25Z")
Hello, What is the best way to add "Save As" functionality to App Search (ideally within Search-UI)? Preferably in csv format, but any other format is ok as well. Thank you --- ## [Kibana embedded dashboard IFrame empty](https://discuss.elastic.co/t/kibana-embedded-dashboard-iframe-empty/250971)
**Author:** [@buncieboy](https://discuss.elastic.co/u/buncieboy)\ **Replies:** 4\ **Last updated:** [October 14, 2020, 10:51pm UTC](https://discuss.elastic.co/t/kibana-embedded-dashboard-iframe-empty/250971 "2020-10-14T22:51:05Z")
When I load our dashboard from a remote cluster, all works as intended. Loading the same dashboard from my local docker cluster the dashboard is completely empty (not even a "no results found" message). Inspecting the so… --- ## [Metrics not useable in reports](https://discuss.elastic.co/t/metrics-not-useable-in-reports/252109)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 0\ **Last updated:** [October 14, 2020, 10:01pm UTC](https://discuss.elastic.co/t/metrics-not-useable-in-reports/252109 "2020-10-14T22:01:01Z")
In metrics on Kibana 7.9.1 is it possible to add additional metrics to alert on past the default CPU, Memory, Load, traffic rate and log rate? For instance adding system.filesystem.used.pct shows the metrics as expected… --- ## [Elastic SIEM](https://discuss.elastic.co/t/elastic-siem/251784)
**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\ **Replies:** 5\ **Last updated:** [October 14, 2020, 9:04pm UTC](https://discuss.elastic.co/t/elastic-siem/251784 "2020-10-14T21:04:24Z")
I am having issues starting the ML datafeeds for SIEM, I've tried manually putting in a mapping for @timestamp as date but i still get this error anyone else have this issue ? \` "{"error":{"root\_cause":\[{"type":"status… --- ## [Is there any way to disbale Kibana News and Help buttons?](https://discuss.elastic.co/t/is-there-any-way-to-disbale-kibana-news-and-help-buttons/252084)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 8:30pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-disbale-kibana-news-and-help-buttons/252084 "2020-10-14T20:30:24Z")
Hi, I am using Elastic Stack 7.9.2 and I would like to disable Help and News Feed buttons from Kibana; I have alrady disabled newsfeed system configuration in kibana.yml file; newsfeed.enabled: false but still, I a… --- ## [ILM keeping rolling over the same old indexes daily](https://discuss.elastic.co/t/ilm-keeping-rolling-over-the-same-old-indexes-daily/252097)
**Author:** [@dobesv](https://discuss.elastic.co/u/dobesv)\ **Replies:** 7\ **Last updated:** [October 14, 2020, 8:27pm UTC](https://discuss.elastic.co/t/ilm-keeping-rolling-over-the-same-old-indexes-daily/252097 "2020-10-14T20:27:52Z")
Hi, I have fluentd pushing logs into elasticsearch with index names based on the date, e.g. logs.kubelet.YYYY.MM.DD and using index lifecycle management (ILM). I have set the ILM policy to roll over after 50GB or daily… --- ## [Remove field on logstash](https://discuss.elastic.co/t/remove-field-on-logstash/252088)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [October 14, 2020, 6:38pm UTC](https://discuss.elastic.co/t/remove-field-on-logstash/252088 "2020-10-14T18:38:49Z")
I am receiving metricbeat data on logstash and I want to remove certain part of it. how can I remove this I try mutate { remove\_field =\> \[ "\[process\]\[args\]0","\[process\]\[args\]1" \] } try mutate { remove\_field =\> \[ "\[p… --- ## [How to get size (total) of events send by a host per day](https://discuss.elastic.co/t/how-to-get-size-total-of-events-send-by-a-host-per-day/251912)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 3\ **Last updated:** [October 14, 2020, 6:17pm UTC](https://discuss.elastic.co/t/how-to-get-size-total-of-events-send-by-a-host-per-day/251912 "2020-10-14T18:17:41Z")
We have been asked different scenarios What is the original size/volume of data send by a particular host? What is the size/volume of data indexed into ES from a particular host For (1) it is actually the size of the … --- ## [Analysing active directory users and computers](https://discuss.elastic.co/t/analysing-active-directory-users-and-computers/252085)
**Author:** [@carpetpants](https://discuss.elastic.co/u/carpetpants)\ **Replies:** 0\ **Last updated:** [October 14, 2020, 5:30pm UTC](https://discuss.elastic.co/t/analysing-active-directory-users-and-computers/252085 "2020-10-14T17:30:57Z")
Hi There, I am looking to analyse active directory users and computers in elastic and wondered if anyone has done this before and able to offer some guidance. What I am looking to achieve is report on the total number o… --- ## [Elastic\_app\_search set engine based on document value](https://discuss.elastic.co/t/elastic-app-search-set-engine-based-on-document-value/252079)
**Author:** [@Tam2](https://discuss.elastic.co/u/Tam2)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 5:24pm UTC](https://discuss.elastic.co/t/elastic-app-search-set-engine-based-on-document-value/252079 "2020-10-14T17:24:55Z")
Within my document, there is a client\_id field I would like to set the engine for my elastic\_app\_search based on this value. So each document goes into the correct engine based on the document's client\_id I tried to do… --- ## [A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/251913)
**Author:** [@sukumar.koganti](https://discuss.elastic.co/u/sukumar.koganti)\ **Replies:** 12\ **Last updated:** [October 14, 2020, 5:20pm UTC](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/251913 "2020-10-14T17:20:08Z")
Hi Team, I am trying to read my Sql Server table from the DB and here is my .conf file, when i am trying to read the table through logstash i am getting the below error. input { jdbc { jdbc\_driver\_library =\> "C:/Pr… --- ## [Coordinating node configuration](https://discuss.elastic.co/t/coordinating-node-configuration/252080)
**Author:** [@deeps](https://discuss.elastic.co/u/deeps)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 5:19pm UTC](https://discuss.elastic.co/t/coordinating-node-configuration/252080 "2020-10-14T17:19:46Z")
hey there, could someone share the coordinator node config for elasticsearch 7.8.1 version? I tried with node.roles: \[ \] but its not accepting (i believe this is for 7.9 version) and throwing below error: Caused by: … --- ## [Read the Logevent into exec output](https://discuss.elastic.co/t/read-the-logevent-into-exec-output/252077)
**Author:** [@praveenmak](https://discuss.elastic.co/u/praveenmak)\ **Replies:** 0\ **Last updated:** [October 14, 2020, 4:57pm UTC](https://discuss.elastic.co/t/read-the-logevent-into-exec-output/252077 "2020-10-14T16:57:09Z")
Hello folks, I want to get the whole event to a shell script, I am trying to use exec output plugin. Please note, I don't have "message" variable. This is the output in JSON. {"taskid":"vMUKrDoBSX-12349","@version":… --- ## [Aggregation based on Array Intersection](https://discuss.elastic.co/t/aggregation-based-on-array-intersection/252068)
**Author:** [@Charles\_Lariviere](https://discuss.elastic.co/u/Charles_Lariviere)\ **Replies:** 2\ **Last updated:** [October 14, 2020, 4:53pm UTC](https://discuss.elastic.co/t/aggregation-based-on-array-intersection/252068 "2020-10-14T16:53:40Z")
Hi, I'm looking to write a query that will return the "most frequently co-occurring terms given an input of one or more terms", though I'm quite unclear as to how I would structure such a query (or if it is even possibl… --- ## [Issue with deploying Elasticsearch helm chart with dedicated nodes and deleting and re-deploying the release](https://discuss.elastic.co/t/issue-with-deploying-elasticsearch-helm-chart-with-dedicated-nodes-and-deleting-and-re-deploying-the-release/252067)
**Author:** [@mehta-ankit](https://discuss.elastic.co/u/mehta-ankit)\ **Replies:** 2\ **Last updated:** [October 14, 2020, 4:53pm UTC](https://discuss.elastic.co/t/issue-with-deploying-elasticsearch-helm-chart-with-dedicated-nodes-and-deleting-and-re-deploying-the-release/252067 "2020-10-14T16:53:36Z")
I have been using the elasticsearch helm chart from elastic for a long time now, but recently wanted to switch my architecture to use dedicated master and data nodes. I looked at the example provided here: https://githu… --- ## [How to retrieve organizations IP address](https://discuss.elastic.co/t/how-to-retrieve-organizations-ip-address/251911)
**Author:** [@witcher](https://discuss.elastic.co/u/witcher)\ **Replies:** 15\ **Last updated:** [October 14, 2020, 12:56pm UTC](https://discuss.elastic.co/t/how-to-retrieve-organizations-ip-address/251911 "2020-10-14T12:56:33Z")
I am trying to create a visualization which shows the organization the IP address. --- ## [Elasticsearch 5.5 - Ways Export Monitoring](https://discuss.elastic.co/t/elasticsearch-5-5-ways-export-monitoring/252069)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 0\ **Last updated:** [October 14, 2020, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-5-5-ways-export-monitoring/252069 "2020-10-14T16:13:43Z")
Hello, I have a large elasticsearch cluster 60 instances Overview Version: 5.5.1 Uptime: 12 days Nodes: 60 Disk Available: 249TB / 413TB (60.26%) JVM Heap: 65.84% (1TB / 2TB) Indices: 2,855 Documents: 24,229,929… --- ## [Setting up Index Lifecycle Policies](https://discuss.elastic.co/t/setting-up-index-lifecycle-policies/251902)
**Author:** [@Gavin\_Clark](https://discuss.elastic.co/u/Gavin_Clark)\ **Replies:** 2\ **Last updated:** [October 14, 2020, 3:40pm UTC](https://discuss.elastic.co/t/setting-up-index-lifecycle-policies/251902 "2020-10-14T15:40:50Z")
We're currently working on setting up a more automated way of keeping our indices and shard count low and saw 'Index Lifecycle Policies' in Kibana which seems very powerful and easy to setup. We've created a policy, but… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1192) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1194)