# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1242

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1243

---

## [Delete index command from kibana not working](https://discuss.elastic.co/t/delete-index-command-from-kibana-not-working/248215)

<div class="topic-metadata">

**Author:** [@baidwan007](https://discuss.elastic.co/u/baidwan007)\
**Replies:** 2\
**Last updated:** [September 10, 2020, 6:32pm UTC](https://discuss.elastic.co/t/delete-index-command-from-kibana-not-working/248215 "2020-09-10T18:32:42Z")

</div>

I am running DELETE /\<index\_name\> command from kibana. I get acknowledged:true response from kibana but Instead of the index getting deleted, i see that a replica shard appears instead while the primary index also stays.…

---

## [Mapping fields cannot be replaced during template composition](https://discuss.elastic.co/t/mapping-fields-cannot-be-replaced-during-template-composition/248217)

<div class="topic-metadata">

**Author:** [@Lolo\_Bee](https://discuss.elastic.co/u/Lolo_Bee)\
**Replies:** 0\
**Last updated:** [September 10, 2020, 6:18pm UTC](https://discuss.elastic.co/t/mapping-fields-cannot-be-replaced-during-template-composition/248217 "2020-09-10T18:18:47Z")

</div>

Hi, I'm trying to setup a template index composed of some component templates. One of the component templates creates new fields mapping on an existing object, and this raises the following error "mapping fields \[tcp\] c…

---

## [Remove wildcard fields in logstash](https://discuss.elastic.co/t/remove-wildcard-fields-in-logstash/248173)

<div class="topic-metadata">

**Author:** [@Yanick\_Quirion](https://discuss.elastic.co/u/Yanick_Quirion)\
**Replies:** 4\
**Last updated:** [September 10, 2020, 5:40pm UTC](https://discuss.elastic.co/t/remove-wildcard-fields-in-logstash/248173 "2020-09-10T17:40:10Z")

</div>

Hello, I have this data: "winlog" =\> { "channel" =\> "Security", "record\_id" =\> 1401770357, "event\_data" =\> { "param14" =\> "-", "param9" =\> "-", "param21" =\> "-", "param13" =\> …

---

## [Efficient way to sort by different fields by client](https://discuss.elastic.co/t/efficient-way-to-sort-by-different-fields-by-client/248206)

<div class="topic-metadata">

**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\
**Replies:** 0\
**Last updated:** [September 10, 2020, 4:48pm UTC](https://discuss.elastic.co/t/efficient-way-to-sort-by-different-fields-by-client/248206 "2020-09-10T16:48:17Z")

</div>

I have an index named items . And we have many stores (now around 100, and in the future it may be 10,000) . Each item has a price for each store. So item document may look like this: { "item\_id": 1, "description":…

---

## [Failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/248169)

<div class="topic-metadata">

**Author:** [@JB06](https://discuss.elastic.co/u/JB06)\
**Replies:** 1\
**Last updated:** [September 10, 2020, 4:44pm UTC](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/248169 "2020-09-10T16:44:13Z")

</div>

Hello, Version "7.8.0" I use this command /usr/share/elasticsearch/bin/elasticsearch-certutil cert ca --pem --silent -in /var/tmp/instance.yml --out /var/tmp/certs.zip --pass $PASSWORD I copy result in /etc/elasticse…

---

## [Error with Elasticsearch lab environment](https://discuss.elastic.co/t/error-with-elasticsearch-lab-environment/248051)

<div class="topic-metadata">

**Author:** [@Keith\_Sanks](https://discuss.elastic.co/u/Keith_Sanks)\
**Replies:** 7\
**Last updated:** [September 10, 2020, 4:32pm UTC](https://discuss.elastic.co/t/error-with-elasticsearch-lab-environment/248051 "2020-09-10T16:32:34Z")

</div>

I'm currently enrolled and taking the On-Demand Elasticsearch Engineering 1 course, and I've run into an issue, the course lab informs me to make edits to the elasticsearch.yml, after making the edit to the elasticsearch…

---

## [Logstash query to elastic](https://discuss.elastic.co/t/logstash-query-to-elastic/248205)

<div class="topic-metadata">

**Author:** [@FDO](https://discuss.elastic.co/u/FDO)\
**Replies:** 0\
**Last updated:** [September 10, 2020, 4:27pm UTC](https://discuss.elastic.co/t/logstash-query-to-elastic/248205 "2020-09-10T16:27:25Z")

</div>

I use https://www.elastic.co/guide/en/logstash/current/plugins-filters-elasticsearch.html For end event I trying to find data from first event if \[url\] { elasticsearch { hosts =\> \["${ES\_node…

---

## [Kibana Data Table Math Operations](https://discuss.elastic.co/t/kibana-data-table-math-operations/248078)

<div class="topic-metadata">

**Author:** [@Samuel\_Amico](https://discuss.elastic.co/u/Samuel_Amico)\
**Replies:** 1\
**Last updated:** [September 10, 2020, 4:14pm UTC](https://discuss.elastic.co/t/kibana-data-table-math-operations/248078 "2020-09-10T16:14:17Z")

</div>

Hi guys, this question is very Important to me, so please help me: I have two fields: priceA and priceB, and I have to do some operation like this in the data table: sum(priceA) / sum(priceB). How can I achive this, t…

---

## [Install radar plugin for kibana](https://discuss.elastic.co/t/install-radar-plugin-for-kibana/248011)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 1\
**Last updated:** [September 10, 2020, 4:08pm UTC](https://discuss.elastic.co/t/install-radar-plugin-for-kibana/248011 "2020-09-10T16:08:37Z")

</div>

Hi all I am interested in using radar plugin in kibana. My kibana version is 6.6. I download kbn\_radar-6.zip using following link and extract it in the kibana/plugins folder. https://github.com/dlumbrer/kbn\_radar/relea…

---

## [Suggestions for person names doens't work so well](https://discuss.elastic.co/t/suggestions-for-person-names-doenst-work-so-well/248035)

<div class="topic-metadata">

**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\
**Replies:** 4\
**Last updated:** [September 10, 2020, 4:08pm UTC](https://discuss.elastic.co/t/suggestions-for-person-names-doenst-work-so-well/248035 "2020-09-10T16:08:18Z")

</div>

Hi guys, I know that this use case is quite common but I'm a bit confused after I've read several tutorials and docs. In my application I'm trying to help the user when he digits a person's name in the form. I'd like t…

---

## [Logstash rabbitmq\_input connection recovery fails](https://discuss.elastic.co/t/logstash-rabbitmq-input-connection-recovery-fails/247554)

<div class="topic-metadata">

**Author:** [@Helena\_Ji](https://discuss.elastic.co/u/Helena_Ji)\
**Replies:** 2\
**Last updated:** [September 10, 2020, 4:00pm UTC](https://discuss.elastic.co/t/logstash-rabbitmq-input-connection-recovery-fails/247554 "2020-09-10T16:00:52Z")

</div>

I am facing some issue that logstash does not want to reconnect to the rabbitMQ after losing the connection somehow. I am using two logstash instances on two different VMs, these two logstash instances listen to the sam…

---

## [Elasticsearch vertical clustering](https://discuss.elastic.co/t/elasticsearch-vertical-clustering/248006)

<div class="topic-metadata">

**Author:** [@cham](https://discuss.elastic.co/u/cham)\
**Replies:** 4\
**Last updated:** [September 10, 2020, 3:50pm UTC](https://discuss.elastic.co/t/elasticsearch-vertical-clustering/248006 "2020-09-10T15:50:51Z")

</div>

Hi, We are setting up ES cluster in our env and have 2 concerns. Is it advisable to do vertical clustering (putting more than one node per server) is it possible to move the elasticsearch.yml configuration file to a s…

---

## [TSVB Metric visualization with dynamic data filter](https://discuss.elastic.co/t/tsvb-metric-visualization-with-dynamic-data-filter/248192)

<div class="topic-metadata">

**Author:** [@paolinux](https://discuss.elastic.co/u/paolinux)\
**Replies:** 1\
**Last updated:** [September 10, 2020, 3:34pm UTC](https://discuss.elastic.co/t/tsvb-metric-visualization-with-dynamic-data-filter/248192 "2020-09-10T15:34:36Z")

</div>

Hi there, I have created a TSVB Metric visualization in Kibana with a filter hardcoded in the "Data" -\> "Options" section. I would like to re-use this visualization in a Dashboard where I have a control field (option l…

---

## [Synonym graph filterにてエラーの出る単語を一括検知に関して](https://discuss.elastic.co/t/synonym-graph-filter/248196)

<div class="topic-metadata">

**Author:** [@nuko](https://discuss.elastic.co/u/nuko)\
**Replies:** 0\
**Last updated:** [September 10, 2020, 3:15pm UTC](https://discuss.elastic.co/t/synonym-graph-filter/248196 "2020-09-10T15:15:17Z")

</div>

kuromoji\_tokenizerを "search"モードで指定して、 synonym graph filterを使用している場合、 辞書に入ってない単語をシノニムとして指定すると、 シノニムファイルのロード時に、下記のようなレスポンスとなります。 （ POST /indexname/\_reload\_search\_analyzers でリロードをかけています） { "error" : { "root\_caus…

---

## [Is auto-generated @timestamp field will always be in UTC timezone?](https://discuss.elastic.co/t/is-auto-generated-timestamp-field-will-always-be-in-utc-timezone/248125)

<div class="topic-metadata">

**Author:** [@patilsharanu](https://discuss.elastic.co/u/patilsharanu)\
**Replies:** 1\
**Last updated:** [September 10, 2020, 3:10pm UTC](https://discuss.elastic.co/t/is-auto-generated-timestamp-field-will-always-be-in-utc-timezone/248125 "2020-09-10T15:10:33Z")

</div>

Query: @timestamp field is auto-generated and its in UTC timezone. Will is it always be in UTC or will it change in future releases? \[Input source\](input.txt): 1524206424.034 19395 207.96.0.0 TCP\_MISS/306 15363 GET ht…

---

## [Access original, un-decoded input message](https://discuss.elastic.co/t/access-original-un-decoded-input-message/248100)

<div class="topic-metadata">

**Author:** [@truekonrads](https://discuss.elastic.co/u/truekonrads)\
**Replies:** 1\
**Last updated:** [September 10, 2020, 3:04pm UTC](https://discuss.elastic.co/t/access-original-un-decoded-input-message/248100 "2020-09-10T15:04:18Z")

</div>

Hello, How can I access the original input message before it was decoded so that I can refer to it from filter or output? The setup is as follows: I am reading JSON from rabbitmq; the default codec is json and it bre…

---

## [How to filter log file by id in kibana](https://discuss.elastic.co/t/how-to-filter-log-file-by-id-in-kibana/248148)

<div class="topic-metadata">

**Author:** [@HR\_Amani](https://discuss.elastic.co/u/HR_Amani)\
**Replies:** 1\
**Last updated:** [September 10, 2020, 2:58pm UTC](https://discuss.elastic.co/t/how-to-filter-log-file-by-id-in-kibana/248148 "2020-09-10T14:58:44Z")

</div>

Hi i am new to ELk stack . i have a log file that contain many bills. every bill has more then 200 lignes of information plus the id of the bill presented in this way informations about bill 1 : informations bill ID :…

---

## [LogStash not showing output on console](https://discuss.elastic.co/t/logstash-not-showing-output-on-console/248163)

<div class="topic-metadata">

**Author:** [@Vishal\_Donderia](https://discuss.elastic.co/u/Vishal_Donderia)\
**Replies:** 1\
**Last updated:** [September 10, 2020, 2:57pm UTC](https://discuss.elastic.co/t/logstash-not-showing-output-on-console/248163 "2020-09-10T14:57:55Z")

</div>

I was trying to use filebeat to push data into logstash filebeat.yml type: log # Change to true to enable this input configuration. enabled: false #Paths that should be crawled and fetched. Glob based paths. …

---

## [Index pattern type in Elasticsearch](https://discuss.elastic.co/t/index-pattern-type-in-elasticsearch/248183)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 2\
**Last updated:** [September 10, 2020, 2:27pm UTC](https://discuss.elastic.co/t/index-pattern-type-in-elasticsearch/248183 "2020-09-10T14:27:33Z")

</div>

HI Team, I would like to take some suggestion to create index pattern in ELK. As per my current configuration in production, i'm index data in ES by monthly index with 1 Primary Shard and 2 replicas. Due to that i was…

---

## [CSP in Kibana](https://discuss.elastic.co/t/csp-in-kibana/248149)

<div class="topic-metadata">

**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\
**Replies:** 3\
**Last updated:** [September 10, 2020, 2:07pm UTC](https://discuss.elastic.co/t/csp-in-kibana/248149 "2020-09-10T14:07:42Z")

</div>

Hello to all of the elastic team. I'm trying create a space with the C# code below. The http response suggests that CSP rules are blocking my request private void testCreateSpace() { string spaceJson = …

---

## [Logstash HA](https://discuss.elastic.co/t/logstash-ha/247956)

<div class="topic-metadata">

**Author:** [@aksshm](https://discuss.elastic.co/u/aksshm)\
**Replies:** 8\
**Last updated:** [September 10, 2020, 2:07pm UTC](https://discuss.elastic.co/t/logstash-ha/247956 "2020-09-10T14:07:21Z")

</div>

Hi, We're trying to install/achieve logstash HA. Is logstash support HA? or Is there any way to achieve the same?

---

## [Comparison of two lists in Elsticsearch](https://discuss.elastic.co/t/comparison-of-two-lists-in-elsticsearch/248182)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 0\
**Last updated:** [September 10, 2020, 1:43pm UTC](https://discuss.elastic.co/t/comparison-of-two-lists-in-elsticsearch/248182 "2020-09-10T13:43:44Z")

</div>

Hi All, I am new to ELK and facing issues with below scenario. I am trying to compare two lists, listA and listB. This should provide a list of numbers which are present in listB but are not there in listA. I have wri…

---

## [Sql Query vs Dsl Query](https://discuss.elastic.co/t/sql-query-vs-dsl-query/247048)

<div class="topic-metadata">

**Author:** [@Nupur](https://discuss.elastic.co/u/Nupur)\
**Replies:** 2\
**Last updated:** [September 10, 2020, 1:32pm UTC](https://discuss.elastic.co/t/sql-query-vs-dsl-query/247048 "2020-09-10T13:32:07Z")

</div>

querying through sql access api or querying through dsl .. which is faster in searching . Is there is performance difference in both.

---

## [How to properly display prices in Kibana](https://discuss.elastic.co/t/how-to-properly-display-prices-in-kibana/247563)

<div class="topic-metadata">

**Author:** [@Jackson](https://discuss.elastic.co/u/Jackson)\
**Replies:** 4\
**Last updated:** [September 10, 2020, 1:29pm UTC](https://discuss.elastic.co/t/how-to-properly-display-prices-in-kibana/247563 "2020-09-10T13:29:46Z")

</div>

Hello, I'm trying to properly display prices in Kibaba. Currently, prices are mapped as a long integer so that 120.00 is stored as 12000. We have some dashboards we show to clients such as their total revenue. I need t…

---

## [Kibana index document count increasing even when there are no saved objects](https://discuss.elastic.co/t/kibana-index-document-count-increasing-even-when-there-are-no-saved-objects/247177)

<div class="topic-metadata">

**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\
**Replies:** 5\
**Last updated:** [September 10, 2020, 1:24pm UTC](https://discuss.elastic.co/t/kibana-index-document-count-increasing-even-when-there-are-no-saved-objects/247177 "2020-09-10T13:24:49Z")

</div>

Hi, we recently migrated elk version from 7.0.1 to 7.8.0. In kibana 7.0.1, the document count for kibana index increases when we create any new saved object. But with elk 7.8.0, we observed that the document count of k…

---

## [Composite Aggregation Sorting Based on Field Which is Not Key](https://discuss.elastic.co/t/composite-aggregation-sorting-based-on-field-which-is-not-key/248146)

<div class="topic-metadata">

**Author:** [@mstzn](https://discuss.elastic.co/u/mstzn)\
**Replies:** 3\
**Last updated:** [September 10, 2020, 1:07pm UTC](https://discuss.elastic.co/t/composite-aggregation-sorting-based-on-field-which-is-not-key/248146 "2020-09-10T13:07:17Z")

</div>

Hello Everyone, I have a composite aggregation which aggregate bucket based on a term field like number field. Composite aggregation orders buckets by natural order of key. I want to order buckets based on max date on …

---

## [Relative value calculation and visualization in Kibana](https://discuss.elastic.co/t/relative-value-calculation-and-visualization-in-kibana/246927)

<div class="topic-metadata">

**Author:** [@Hung\_The](https://discuss.elastic.co/u/Hung_The)\
**Replies:** 4\
**Last updated:** [September 10, 2020, 12:42pm UTC](https://discuss.elastic.co/t/relative-value-calculation-and-visualization-in-kibana/246927 "2020-09-10T12:42:33Z")

</div>

Hi All, I am new to Kibana and ES. I get some issues with how to display our data in relative fashion. I want to get the minimum of queried result and divided all other values in the queried result to that minimum so w…

---

## [Time entry in Index different from application](https://discuss.elastic.co/t/time-entry-in-index-different-from-application/248161)

<div class="topic-metadata">

**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\
**Replies:** 0\
**Last updated:** [September 10, 2020, 11:49am UTC](https://discuss.elastic.co/t/time-entry-in-index-different-from-application/248161 "2020-09-10T11:49:55Z")

</div>

I am trying to learn Elasticsearch and I have made a Python script that will send data to an index. One of the things I am sending is the date/time. The format of the date/time in my output is 'date': '2020-09-10T06:45…

---

## [Not able to view the index in elastic search and kibana](https://discuss.elastic.co/t/not-able-to-view-the-index-in-elastic-search-and-kibana/248157)

<div class="topic-metadata">

**Author:** [@Jaya\_chandra](https://discuss.elastic.co/u/Jaya_chandra)\
**Replies:** 0\
**Last updated:** [September 10, 2020, 11:38am UTC](https://discuss.elastic.co/t/not-able-to-view-the-index-in-elastic-search-and-kibana/248157 "2020-09-10T11:38:18Z")

</div>

Hi, I am trying to import the s3 data from aws to logstash. However, when i look at elastic search/kibana i am not able to find the index. Below is my configuration details of logstash: input { s3 { "access\_key\_id" …

---

## [Pushing index templates fails on 7.9 with Java transport client](https://discuss.elastic.co/t/pushing-index-templates-fails-on-7-9-with-java-transport-client/248151)

<div class="topic-metadata">

**Author:** [@amugofjava](https://discuss.elastic.co/u/amugofjava)\
**Replies:** 0\
**Last updated:** [September 10, 2020, 11:01am UTC](https://discuss.elastic.co/t/pushing-index-templates-fails-on-7-9-with-java-transport-client/248151 "2020-09-10T11:01:20Z")

</div>

I am in the progress of migrating from 6.8 to 7.9. I have updated my index templates to work with the 7.9 format and if I submit the template via REST it installs fine; however, if I use the PutIndexTemplateRequest with …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1241)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1243)
