# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1232 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1233 --- ## [Just need to find the length of Array in DOC](https://discuss.elastic.co/t/just-need-to-find-the-length-of-array-in-doc/249021)
**Author:** [@Md\_Iburahimsha\_S](https://discuss.elastic.co/u/Md_Iburahimsha_S)\ **Replies:** 0\ **Last updated:** [September 17, 2020, 6:38pm UTC](https://discuss.elastic.co/t/just-need-to-find-the-length-of-array-in-doc/249021 "2020-09-17T18:38:22Z")
'''I have a doc, just need to get the length of array in kibana objects,' 'Query:''' ''' GET .kibana/\_search { "query": {"match": { "\_id" : "dashboard:Dashboard1" }} } ''' Query results: ''' { "\_index" : ".ki… --- ## [Why so huge memory requirements when creating new replicas?](https://discuss.elastic.co/t/why-so-huge-memory-requirements-when-creating-new-replicas/248560)
**Author:** [@zdeseb](https://discuss.elastic.co/u/zdeseb)\ **Replies:** 14\ **Last updated:** [September 17, 2020, 5:04pm UTC](https://discuss.elastic.co/t/why-so-huge-memory-requirements-when-creating-new-replicas/248560 "2020-09-17T17:04:31Z")
Hello, does anyone know what exactly is going on on data nodes when number of replica setting is increased and new replicas are started to build? When I change the replica number from 0 to 1 on some slightly larger ind… --- ## [JSON parse error - Suricata](https://discuss.elastic.co/t/json-parse-error-suricata/248997)
**Author:** [@Paulogbr](https://discuss.elastic.co/u/Paulogbr)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 4:02pm UTC](https://discuss.elastic.co/t/json-parse-error-suricata/248997 "2020-09-17T16:02:30Z")
Hello Team, I mounted my lab with suricata and web servers. I tried send log suricata to ELK. But I received error when i did the parse My conf: input { udp { port =\> "514" type =\> "syslog" } } filter { json { … --- ## [Filebeat возможности и настройки](https://discuss.elastic.co/t/filebeat/248775)
**Author:** [@Ivan\_Bykov](https://discuss.elastic.co/u/Ivan_Bykov)\ **Replies:** 4\ **Last updated:** [September 17, 2020, 3:00pm UTC](https://discuss.elastic.co/t/filebeat/248775 "2020-09-17T15:00:22Z")
Подскажите пожалуйста, можно-ли настроить filebeat так что-бы он работал с двумя каталогами одновременно для мониторинга логов, и умеент -ли он работать с логами в zip файлах. Сейчас у меня такие настройки - type: log … --- ## [Tutorials and Examples of Aggregations in the Java High Level Client](https://discuss.elastic.co/t/tutorials-and-examples-of-aggregations-in-the-java-high-level-client/248980)
**Author:** [@robshep](https://discuss.elastic.co/u/robshep)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 2:16pm UTC](https://discuss.elastic.co/t/tutorials-and-examples-of-aggregations-in-the-java-high-level-client/248980 "2020-09-17T14:16:25Z")
Hi, I'm looking for tutorials and examples of building aggregates using the Java High Level client API. Google doesn't throw up much, the ES guide is an overview of functionality and the Javadocs just list the API of c… --- ## [Logstash file input mix up](https://discuss.elastic.co/t/logstash-file-input-mix-up/248942)
**Author:** [@logben](https://discuss.elastic.co/u/logben)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 1:58pm UTC](https://discuss.elastic.co/t/logstash-file-input-mix-up/248942 "2020-09-17T13:58:49Z")
Hello! I read two Windows file shares with DNS logs with the following two seperate configuration files: DNS-Server 1: input { file { path =\> "/var/log/logstash/dns-share-pdc/dns.log" … --- ## [CPU usage behavior in the frozen indices](https://discuss.elastic.co/t/cpu-usage-behavior-in-the-frozen-indices/248988)
**Author:** [@vakhtang](https://discuss.elastic.co/u/vakhtang)\ **Replies:** 0\ **Last updated:** [September 17, 2020, 1:56pm UTC](https://discuss.elastic.co/t/cpu-usage-behavior-in-the-frozen-indices/248988 "2020-09-17T13:56:58Z")
Hello, We try to benchmark the frozen indices part, and recognize some strange CPU behavior: We have Hot - Cold architecture In the test time, we test the nodes only with frozen indices. We do not write in the test t… --- ## [Auto Reload conf file + Pipelines.yml](https://discuss.elastic.co/t/auto-reload-conf-file-pipelines-yml/248865)
**Author:** [@Pankaj\_Jadhav](https://discuss.elastic.co/u/Pankaj_Jadhav)\ **Replies:** 3\ **Last updated:** [September 17, 2020, 1:56pm UTC](https://discuss.elastic.co/t/auto-reload-conf-file-pipelines-yml/248865 "2020-09-17T13:56:42Z")
I am running conf files via pipelines.yml. pipeline.id: pipeline19 config.reload.automatic: true config.reload.interval: 3s path.config: "/etc/logstash/conf.d/ds-recentsearch.conf" queue.type: persisted After sett… --- ## [How to use minhash filter?](https://discuss.elastic.co/t/how-to-use-minhash-filter/248320)
**Author:** [@ennian001](https://discuss.elastic.co/u/ennian001)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 1:39pm UTC](https://discuss.elastic.co/t/how-to-use-minhash-filter/248320 "2020-09-17T13:39:31Z")
could someone give me some search example for minhash filter ??? --- ## [Importing vulnwhisperer kibana.json file for out of the box visualization in kibana dashboard](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889)
**Author:** [@Subhadeep](https://discuss.elastic.co/u/Subhadeep)\ **Replies:** 8\ **Last updated:** [September 17, 2020, 1:36pm UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889 "2020-09-17T13:36:58Z")
Hello Guys, I am extracting reports from Openvas through vulnwhisperer and I would like to view it on my kibana dashboard. I have the configuration file provided by vulnwhisperer which is kibana.json. Could anyone pleas… --- ## [Boolean filter question](https://discuss.elastic.co/t/boolean-filter-question/248346)
**Author:** [@shon3r](https://discuss.elastic.co/u/shon3r)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 1:32pm UTC](https://discuss.elastic.co/t/boolean-filter-question/248346 "2020-09-17T13:32:37Z")
Hello, I have a problem with filter in boolean query. I want to apply a filter based on 3 fields with 1 minimum filter match : $params = \[ 'from' =\> 0, 'size' =\> 25, 'index' =\> 'document', 'body' =\> \[ … --- ## [Limit CPU/Memory usage in Auditbeat & Filebeats , version 7.9.0](https://discuss.elastic.co/t/limit-cpu-memory-usage-in-auditbeat-filebeats-version-7-9-0/248231)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 7\ **Last updated:** [September 17, 2020, 1:23pm UTC](https://discuss.elastic.co/t/limit-cpu-memory-usage-in-auditbeat-filebeats-version-7-9-0/248231 "2020-09-17T13:23:10Z")
Hi Team, We are seeing that auditbeat service is using lot of memory in our VM's , we suspect that when elasticsearch cluster is down its taking more memory in auditbeat to buffer the data. Could you please let me know … --- ## [How to get cacert for enablingssl\_certificate\_verification?](https://discuss.elastic.co/t/how-to-get-cacert-for-enablingssl-certificate-verification/248909)
**Author:** [@habeebperwad](https://discuss.elastic.co/u/habeebperwad)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 1:20pm UTC](https://discuss.elastic.co/t/how-to-get-cacert-for-enablingssl-certificate-verification/248909 "2020-09-17T13:20:13Z")
ACTUAL TITLE OF THIS QUESTION: How to get cacert for enablingssl\_certificate\_verification? The validation says: Title seems unclear, is it a complete sentence? It may be a very silly question, but I couldn't resolve it… --- ## [Visualization of array vs array from a single document](https://discuss.elastic.co/t/visualization-of-array-vs-array-from-a-single-document/248528)
**Author:** [@Leonid\_Pantaler](https://discuss.elastic.co/u/Leonid_Pantaler)\ **Replies:** 4\ **Last updated:** [September 17, 2020, 1:17pm UTC](https://discuss.elastic.co/t/visualization-of-array-vs-array-from-a-single-document/248528 "2020-09-17T13:17:40Z")
Hi, I'm new to kibana and trying to create a line visualization from arrays given in a single document Let's say some document has the following arrays: A: \[55, 99, 57, 8\] B: \[1, 2, 3, 4\] I want B to be my X axis an… --- ## [Some entries missing when uploading json file in kibana](https://discuss.elastic.co/t/some-entries-missing-when-uploading-json-file-in-kibana/248448)
**Author:** [@Kanav\_Ghai](https://discuss.elastic.co/u/Kanav_Ghai)\ **Replies:** 3\ **Last updated:** [September 17, 2020, 12:46pm UTC](https://discuss.elastic.co/t/some-entries-missing-when-uploading-json-file-in-kibana/248448 "2020-09-17T12:46:53Z")
I have 153 entries in my json file, but when i upload the corresponding log file in kibana, it shows 121 entires (sometimes lesser) . I don't understand why is it missing out a few entries. Below is my conf file inp… --- ## [Where to add min\_doc-count](https://discuss.elastic.co/t/where-to-add-min-doc-count/248612)
**Author:** [@imantha](https://discuss.elastic.co/u/imantha)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 12:45pm UTC](https://discuss.elastic.co/t/where-to-add-min-doc-count/248612 "2020-09-17T12:45:40Z")
let peopleCount = { size: 0, aggs: { 'min\_doc\_count': 0, group\_by\_day: { // min\_doc\_count: 0, date\_histogram: { field: 'timestamp', interval: '1d', time\_zone: '+11:00', … --- ## [Enrich Processor - If the fields do not match](https://discuss.elastic.co/t/enrich-processor-if-the-fields-do-not-match/248707)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 12:40pm UTC](https://discuss.elastic.co/t/enrich-processor-if-the-fields-do-not-match/248707 "2020-09-17T12:40:06Z")
Hi, I am using enrich processor to enrich some fields from the already existing Index in elasticsearch. The problem is, if the enrich processor does not find any match, it skips the document. I want to ingest both mat… --- ## [Skipping duplicates with search\_as\_you\_type field in Elasticsearch](https://discuss.elastic.co/t/skipping-duplicates-with-search-as-you-type-field-in-elasticsearch/248845)
**Author:** [@zaidw21](https://discuss.elastic.co/u/zaidw21)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 12:35pm UTC](https://discuss.elastic.co/t/skipping-duplicates-with-search-as-you-type-field-in-elasticsearch/248845 "2020-09-17T12:35:35Z")
We are using the completion suggester for showing text suggestions and autocomplete functionality in our search implementation. We recently migrated to the Elasticsearch v7.4 from v7.1. As a new field (search\_as\_you\_typ… --- ## [How to apply different index patterns to same dashboard and its widgets?](https://discuss.elastic.co/t/how-to-apply-different-index-patterns-to-same-dashboard-and-its-widgets/248723)
**Author:** [@DSMilestone](https://discuss.elastic.co/u/DSMilestone)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 12:13pm UTC](https://discuss.elastic.co/t/how-to-apply-different-index-patterns-to-same-dashboard-and-its-widgets/248723 "2020-09-17T12:13:49Z")
I have created a kibana dashboard for katalon reports for my API services. For that I have created a index pattern api\_katalon\_reports\*. all the widgets inside that dashboard use this index pattern. Now, I have katalon … --- ## [Filebeats on ECK](https://discuss.elastic.co/t/filebeats-on-eck/248849)
**Author:** [@ssurenr](https://discuss.elastic.co/u/ssurenr)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 12:04pm UTC](https://discuss.elastic.co/t/filebeats-on-eck/248849 "2020-09-17T12:04:13Z")
While collecting logs from all pods using a filebeat daemonset in an ECK cluster, is there a way to use filebeat modules in this setup? Most filebeat modules expect a path value typically var.paths. In kubernetes enviro… --- ## [Issue with Multiple .conf files](https://discuss.elastic.co/t/issue-with-multiple-conf-files/247760)
**Author:** [@anirudh.venkata](https://discuss.elastic.co/u/anirudh.venkata)\ **Replies:** 6\ **Last updated:** [September 17, 2020, 11:31am UTC](https://discuss.elastic.co/t/issue-with-multiple-conf-files/247760 "2020-09-17T11:31:33Z")
Hi All, My ELK is setup in a single Ubuntu machine.. I am using Logstash as a service to collect different logs and send them to Elasticsearch..Initially ,i have created an auth.conf in logstash conf.d folder to parse L… --- ## [Using FVH Highlighter and multi pre/post tags to map query string to highlight tag](https://discuss.elastic.co/t/using-fvh-highlighter-and-multi-pre-post-tags-to-map-query-string-to-highlight-tag/248969)
**Author:** [@jackhodkinson](https://discuss.elastic.co/u/jackhodkinson)\ **Replies:** 0\ **Last updated:** [September 17, 2020, 11:22am UTC](https://discuss.elastic.co/t/using-fvh-highlighter-and-multi-pre-post-tags-to-map-query-string-to-highlight-tag/248969 "2020-09-17T11:22:58Z")
I am using Elasticsearch Version 7.1.1 Given a search object like this: { "query": { "bool": { "must": { {"query\_string": {"query": "bar", "default\_field": "text"}, {"query\_string": {"query"… --- ## [Validation API got error with highlight.(org.elasticsearch.common.ParsingException: request does not support \[highlight\]](https://discuss.elastic.co/t/validation-api-got-error-with-highlight-org-elasticsearch-common-parsingexception-request-does-not-support-highlight/248953)
**Author:** [@po3rin](https://discuss.elastic.co/u/po3rin)\ **Replies:** 0\ **Last updated:** [September 17, 2020, 9:48am UTC](https://discuss.elastic.co/t/validation-api-got-error-with-highlight-org-elasticsearch-common-parsingexception-request-does-not-support-highlight/248953 "2020-09-17T09:48:14Z")
Hello :slight\_smile: I tried highlight with reference to the following document. (using docker.elastic.co/elasticsearch/elasticsearch:7.5.1) This example works fine, but when I check it with the validation api, I ge… --- ## [KQL (or SQL or DSL): How to do transaction/pairing up between events based on a same sessiond, user combo?](https://discuss.elastic.co/t/kql-or-sql-or-dsl-how-to-do-transaction-pairing-up-between-events-based-on-a-same-sessiond-user-combo/248877)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 3\ **Last updated:** [September 17, 2020, 9:40am UTC](https://discuss.elastic.co/t/kql-or-sql-or-dsl-how-to-do-transaction-pairing-up-between-events-based-on-a-same-sessiond-user-combo/248877 "2020-09-17T09:40:59Z")
We have certain dataset like below 2020-09-10T01:00:01 entry=1 user=A session=ses1 action=create 2020-09-10T01:01:01 entry=2 user=A session=ses1 action=delete 2020-09-10T01:02:01 entry=3 user=B session=ses2 action=creat… --- ## [I need to get the last document field to visualize](https://discuss.elastic.co/t/i-need-to-get-the-last-document-field-to-visualize/248932)
**Author:** [@dotnet85](https://discuss.elastic.co/u/dotnet85)\ **Replies:** 4\ **Last updated:** [September 17, 2020, 8:56am UTC](https://discuss.elastic.co/t/i-need-to-get-the-last-document-field-to-visualize/248932 "2020-09-17T08:56:26Z")
I have created an index and I would like to get the latest value available in the index e.g.: { "\_index": "tester", "\_type": "\_doc", "\_id": "Qujl-nMBaIdydddddd", "\_version": 1, "\_score": 0, "\_source": { … --- ## [How to filter all in KQL](https://discuss.elastic.co/t/how-to-filter-all-in-kql/248908)
**Author:** [@syafeera](https://discuss.elastic.co/u/syafeera)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 7:28am UTC](https://discuss.elastic.co/t/how-to-filter-all-in-kql/248908 "2020-09-17T07:28:32Z")
HI all, may i know how i want to filter all panw.panos.threat.id in KQL? --- ## [Weird "\_dateparsefailure" issue](https://discuss.elastic.co/t/weird-dateparsefailure-issue/248798)
**Author:** [@opellulo](https://discuss.elastic.co/u/opellulo)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 6:44am UTC](https://discuss.elastic.co/t/weird-dateparsefailure-issue/248798 "2020-09-17T06:44:00Z")
Hi all, I'm facing a really weird issue parsing the date from an access log that doesn't use standard ISO8601 format but one that looks like: \[08/Sep/2020:18:39:23 +0200\] I captured the group with a simple grok in a fi… --- ## [Remove time chart from Discover in Kibana](https://discuss.elastic.co/t/remove-time-chart-from-discover-in-kibana/248860)
**Author:** [@Cosmin\_Marginean1](https://discuss.elastic.co/u/Cosmin_Marginean1)\ **Replies:** 7\ **Last updated:** [September 17, 2020, 6:36am UTC](https://discuss.elastic.co/t/remove-time-chart-from-discover-in-kibana/248860 "2020-09-17T06:36:17Z")
We're using Kibana 7.2.0 and we'd very much like to remove the bar chart at the top of the Discover section (see below) but we couldn't find the setting for it. Thanks! --- ## [Unable to configure environment to get metrics of my another server using metricbeat into one central server](https://discuss.elastic.co/t/unable-to-configure-environment-to-get-metrics-of-my-another-server-using-metricbeat-into-one-central-server/248823)
**Author:** [@Shriram\_Wasule](https://discuss.elastic.co/u/Shriram_Wasule)\ **Replies:** 4\ **Last updated:** [September 17, 2020, 4:26am UTC](https://discuss.elastic.co/t/unable-to-configure-environment-to-get-metrics-of-my-another-server-using-metricbeat-into-one-central-server/248823 "2020-09-17T04:26:03Z")
Hello Everyone, I am new to ElK stack, and i want to monitor my system metrics of one or more servers into one central server. i hope i am clear with my architecture! i am using metricbeat 7.9.1 elasticsearch 7.9.1 … --- ## [Getting org.elasticsearch.discovery.MasterNotDiscoveredException, while I use only one node](https://discuss.elastic.co/t/getting-org-elasticsearch-discovery-masternotdiscoveredexception-while-i-use-only-one-node/248662)
**Author:** [@111320](https://discuss.elastic.co/u/111320)\ **Replies:** 3\ **Last updated:** [September 17, 2020, 6:19am UTC](https://discuss.elastic.co/t/getting-org-elasticsearch-discovery-masternotdiscoveredexception-while-i-use-only-one-node/248662 "2020-09-17T06:19:26Z")
I'm running elasticsearch (7.6.2) on RHEL 6.1 with only one node and I get: org.elasticsearch.discovery.MasterNotDiscoveredException org.elasticsearch.discovery.MasterNotDiscoveredException This is my elasticsearch.ym… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1231) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1233)