# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1255 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1256 --- ## [Date Range series in Kibana: how to fit the global date range filter of kibana?](https://discuss.elastic.co/t/date-range-series-in-kibana-how-to-fit-the-global-date-range-filter-of-kibana/247107)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 3\ **Last updated:** [September 1, 2020, 7:59pm UTC](https://discuss.elastic.co/t/date-range-series-in-kibana-how-to-fit-the-global-date-range-filter-of-kibana/247107 "2020-09-01T19:59:14Z")
I have created this date range filter on a visualization using the acceptable date formats here is my first draft OK, I am happy if I stick to now. But if I go back in time in my global filter, then the visualizati… --- ## [Hot-cold setup](https://discuss.elastic.co/t/hot-cold-setup/246858)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [September 1, 2020, 7:53pm UTC](https://discuss.elastic.co/t/hot-cold-setup/246858 "2020-09-01T19:53:07Z")
I have running cluster, five data node with node.attr.box\_type: hot now I would like to introduce cold storage as well I have a node which I will be using as cold storage node.attr.box\_type: cold but most all my i… --- ## [Time zone in the field?](https://discuss.elastic.co/t/time-zone-in-the-field/247139)
**Author:** [@Alex9](https://discuss.elastic.co/u/Alex9)\ **Replies:** 1\ **Last updated:** [September 1, 2020, 7:52pm UTC](https://discuss.elastic.co/t/time-zone-in-the-field/247139 "2020-09-01T19:52:06Z")
Good day :slightly\_smiling\_face: (I probably have a simple question, but I haven't been able to figure it out on my own) Please tell me how to properly configure the date display in the fields? I have a service that, … --- ## [Sending a all source document into one dest field](https://discuss.elastic.co/t/sending-a-all-source-document-into-one-dest-field/247134)
**Author:** [@bmth](https://discuss.elastic.co/u/bmth)\ **Replies:** 3\ **Last updated:** [September 1, 2020, 7:45pm UTC](https://discuss.elastic.co/t/sending-a-all-source-document-into-one-dest-field/247134 "2020-09-01T19:45:56Z")
I have the following documents in a index: { "demand\_id": 1, "date": "2020-08-20 12:00:00" }, { "action\_id": 1, "demand\_id": 1, "client": "renato", "date": "2020-08-20 12:05:00", "topic": "ready" }, { "action\_id": 1, "d… --- ## [Issues with special characters in docker env](https://discuss.elastic.co/t/issues-with-special-characters-in-docker-env/247021)
**Author:** [@NickyW1995](https://discuss.elastic.co/u/NickyW1995)\ **Replies:** 2\ **Last updated:** [September 1, 2020, 7:45pm UTC](https://discuss.elastic.co/t/issues-with-special-characters-in-docker-env/247021 "2020-09-01T19:45:45Z")
Hi, I've got an issue trying to parse special characters into CONFIG\_STRING in my dockerfile. I'm not sure here is the right place to ask, but figured someone might've come across this before. If I try to parse EN… --- ## [Logstash and InfluxDB](https://discuss.elastic.co/t/logstash-and-influxdb/246965)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 2\ **Last updated:** [September 1, 2020, 7:39pm UTC](https://discuss.elastic.co/t/logstash-and-influxdb/246965 "2020-09-01T19:39:25Z")
Hello everyone! I'm struggling with cooperation of Logstash and InfluxDB. I'm trying to use Logstash for parsing some data and then push them to influxdb. I'm trying it with influxdb output plugin that seems not be real… --- ## [Elasctisearch warning failed to add documents to export bulks](https://discuss.elastic.co/t/elasctisearch-warning-failed-to-add-documents-to-export-bulks/247142)
**Author:** [@chen\_levi1](https://discuss.elastic.co/u/chen_levi1)\ **Replies:** 1\ **Last updated:** [September 1, 2020, 7:20pm UTC](https://discuss.elastic.co/t/elasctisearch-warning-failed-to-add-documents-to-export-bulks/247142 "2020-09-01T19:20:57Z")
Hi Elasticsearch log is full with the following warning message: \[instance-0000000057\] monitoring execution failed org.elasticsearch.xpack.monitoring.exporter.ExportException: failed to add documents to export bulks at… --- ## [Elasticsearch Indexing Not Working Periodically](https://discuss.elastic.co/t/elasticsearch-indexing-not-working-periodically/247036)
**Author:** [@jaydba](https://discuss.elastic.co/u/jaydba)\ **Replies:** 6\ **Last updated:** [September 1, 2020, 7:17pm UTC](https://discuss.elastic.co/t/elasticsearch-indexing-not-working-periodically/247036 "2020-09-01T19:17:43Z")
Hello; I am very new to working with Elasticsearch, but I've come up against an error that the vendor of our software (bundled with Elasticsearch) is not able to solve or find a root cause of. Unfortunately I am not se… --- ## [SSL verification mode](https://discuss.elastic.co/t/ssl-verification-mode/246964)
**Author:** [@Boom](https://discuss.elastic.co/u/Boom)\ **Replies:** 6\ **Last updated:** [September 1, 2020, 6:58pm UTC](https://discuss.elastic.co/t/ssl-verification-mode/246964 "2020-09-01T18:58:52Z")
Добрый день, Я не могу запустить службу winlogbeat на win\_server 2016 После команды: . \\ winlogbeat.exe -c winlogbeat.yml -e -v -d "\*" У меня ошибка: certificate signed by unknown authority Я пытаюсь добавить метод … --- ## [Syslog events from Watchguard firewall not appearing](https://discuss.elastic.co/t/syslog-events-from-watchguard-firewall-not-appearing/247097)
**Author:** [@finbarr996](https://discuss.elastic.co/u/finbarr996)\ **Replies:** 2\ **Last updated:** [September 1, 2020, 6:50pm UTC](https://discuss.elastic.co/t/syslog-events-from-watchguard-firewall-not-appearing/247097 "2020-09-01T18:50:58Z")
Hi there, I have upgraded to 7.9 across the board and syslog events aren't showing up in security as they previously did in SEIM. I am bringing these in via Logstash with a config file that reformats them, and I can se… --- ## [Campo Geolocalização no Elastic como String](https://discuss.elastic.co/t/campo-geolocalizacao-no-elastic-como-string/247117)
**Author:** [@correa.wlan](https://discuss.elastic.co/u/correa.wlan)\ **Replies:** 12\ **Last updated:** [September 1, 2020, 5:55pm UTC](https://discuss.elastic.co/t/campo-geolocalizacao-no-elastic-como-string/247117 "2020-09-01T17:55:51Z")
Bom dia a todos, estou tentando converter o campo "Localizacao" no Elastic através do kibana mais não estou tendo sucesso, alguém pode me dar uma força pra eu entender onde estou errando. Segue parametros de envio no Lo… --- ## [Problem with Logstash Kinesis Input Plugin](https://discuss.elastic.co/t/problem-with-logstash-kinesis-input-plugin/247037)
**Author:** [@Rahul\_Kumar4](https://discuss.elastic.co/u/Rahul_Kumar4)\ **Replies:** 2\ **Last updated:** [September 1, 2020, 5:39pm UTC](https://discuss.elastic.co/t/problem-with-logstash-kinesis-input-plugin/247037 "2020-09-01T17:39:43Z")
Seeing this error in the Kinesis input plugin which is preventing the Kinesis records from getting consumed by the Logstash workers. I switched the log level to DEBUG and managed to see this. Is this a known problem? \[2… --- ## [Remove Multiple entries in visualization](https://discuss.elastic.co/t/remove-multiple-entries-in-visualization/246327)
**Author:** [@jerin](https://discuss.elastic.co/u/jerin)\ **Replies:** 4\ **Last updated:** [September 1, 2020, 5:07pm UTC](https://discuss.elastic.co/t/remove-multiple-entries-in-visualization/246327 "2020-09-01T17:07:32Z")
Hello , I am trying to remove duplicate values in kibana viz Example : i have two keys and values Key: id value: value1 key:status value: value1 key:id value:value1 key:status value:value2 if you look above F… --- ## [After changing index template, new index not taking the changes](https://discuss.elastic.co/t/after-changing-index-template-new-index-not-taking-the-changes/245465)
**Author:** [@zvazquez](https://discuss.elastic.co/u/zvazquez)\ **Replies:** 8\ **Last updated:** [September 1, 2020, 5:06pm UTC](https://discuss.elastic.co/t/after-changing-index-template-new-index-not-taking-the-changes/245465 "2020-09-01T17:06:09Z")
Hi, I am experiencing a weird problem where I am updating an index template by changing the mapping of a timestamp property from date to date\_nano and even when in the definition of template it shows the proper mapping … --- ## [ECE kibana portal not accessible](https://discuss.elastic.co/t/ece-kibana-portal-not-accessible/247135)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 0\ **Last updated:** [September 1, 2020, 5:01pm UTC](https://discuss.elastic.co/t/ece-kibana-portal-not-accessible/247135 "2020-09-01T17:01:41Z")
Previous post got closed hence opening a new request Dear All, My new ECE cluster is up and running however I am getting below message when I access kibana portal directly on port serverIP:9243. I am able to access the… --- ## [Problem with build dev kibana plugin in 7.8](https://discuss.elastic.co/t/problem-with-build-dev-kibana-plugin-in-7-8/247046)
**Author:** [@Ali\_Zali](https://discuss.elastic.co/u/Ali_Zali)\ **Replies:** 2\ **Last updated:** [September 1, 2020, 4:51pm UTC](https://discuss.elastic.co/t/problem-with-build-dev-kibana-plugin-in-7-8/247046 "2020-09-01T16:51:06Z")
Hi I want to build an external kibana plugin. I create plugin with node scripts/generate\_plugin my\_plugin\_name then in the plugin directory yarn build Its work on 7.6 and create build folder with zip file in a few seco… --- ## [Multiple small indexes or one index with potential mapping explosion](https://discuss.elastic.co/t/multiple-small-indexes-or-one-index-with-potential-mapping-explosion/244917)
**Author:** [@mcampster](https://discuss.elastic.co/u/mcampster)\ **Replies:** 2\ **Last updated:** [September 1, 2020, 4:22pm UTC](https://discuss.elastic.co/t/multiple-small-indexes-or-one-index-with-potential-mapping-explosion/244917 "2020-09-01T16:22:34Z")
Background Having read the various posts on multiple indexes with small number of document vs single index with all the documents, I still am not sure what to do in my situation... We have a approximately 2-3 million d… --- ## [How to get metadata file for Kibana to use for OKTA](https://discuss.elastic.co/t/how-to-get-metadata-file-for-kibana-to-use-for-okta/247023)
**Author:** [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)\ **Replies:** 3\ **Last updated:** [September 1, 2020, 3:32pm UTC](https://discuss.elastic.co/t/how-to-get-metadata-file-for-kibana-to-use-for-okta/247023 "2020-09-01T15:32:51Z")
Hello, Need to know how to get the metadata file for Kibana. I am needing for Okta setup. ny information greatly appreciated. Thanks, Freddie2020 --- ## [SIEM Threshold - unique values](https://discuss.elastic.co/t/siem-threshold-unique-values/246606)
**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\ **Replies:** 5\ **Last updated:** [September 1, 2020, 3:18pm UTC](https://discuss.elastic.co/t/siem-threshold-unique-values/246606 "2020-09-01T15:18:33Z")
Hi I am playing with the SIEM capability and have been using it since it was released with custom queries. I am now looking at Threshold based detection in v7.9 - something I think will be very useful. I'm not sure if… --- ## [Cidr filter for over 1000 subnets](https://discuss.elastic.co/t/cidr-filter-for-over-1000-subnets/247110)
**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\ **Replies:** 0\ **Last updated:** [September 1, 2020, 3:04pm UTC](https://discuss.elastic.co/t/cidr-filter-for-over-1000-subnets/247110 "2020-09-01T15:04:54Z")
I have round about 1500 subnets, with masks from /18 to /29, but mainly /24 networks. I tried to use the cidr logstash filter plugin but the pipeline then come not up. i think because the pipeline is too big and there a… --- ## [Kibana error in log : Unable to connect to Elasticsearch Error: master not discovered exception](https://discuss.elastic.co/t/kibana-error-in-log-unable-to-connect-to-elasticsearch-error-master-not-discovered-exception/247103)
**Author:** [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)\ **Replies:** 1\ **Last updated:** [September 1, 2020, 2:29pm UTC](https://discuss.elastic.co/t/kibana-error-in-log-unable-to-connect-to-elasticsearch-error-master-not-discovered-exception/247103 "2020-09-01T14:29:29Z")
Hello All, I am trying to execute mt Kibana UI login and it fails. I checked the logs for the pod and this is what it shows: \[lewellf\_adm@awva-pclif03001 kibana\]$ kubectl logs kibana-75f647cf75-5l5lz -n monitoring-too… --- ## [Scripted fields regular expression not working](https://discuss.elastic.co/t/scripted-fields-regular-expression-not-working/247102)
**Author:** [@greg.melasecca](https://discuss.elastic.co/u/greg.melasecca)\ **Replies:** 1\ **Last updated:** [September 1, 2020, 2:25pm UTC](https://discuss.elastic.co/t/scripted-fields-regular-expression-not-working/247102 "2020-09-01T14:25:33Z")
I am having issues getting my regular expression to work with my scripted fields. I have the below code (dont judge I am not a developer) and for some reason the same exact line ends up in different "else" clauses. the m… --- ## [Kibana 7.4.1 Does not search string directly](https://discuss.elastic.co/t/kibana-7-4-1-does-not-search-string-directly/245358)
**Author:** [@mricote](https://discuss.elastic.co/u/mricote)\ **Replies:** 5\ **Last updated:** [September 1, 2020, 2:11pm UTC](https://discuss.elastic.co/t/kibana-7-4-1-does-not-search-string-directly/245358 "2020-09-01T14:11:31Z")
Hi. Kibana 7.4.1 in discover does not found string directly. Any idea? Regards --- ## [Uninstall/Install Elastic-Endpoint. Endpoint stays after uninstall](https://discuss.elastic.co/t/uninstall-install-elastic-endpoint-endpoint-stays-after-uninstall/247014)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 1\ **Last updated:** [September 1, 2020, 2:10pm UTC](https://discuss.elastic.co/t/uninstall-install-elastic-endpoint-endpoint-stays-after-uninstall/247014 "2020-09-01T14:10:54Z")
To not high jack an existing thread about another subject see " https://discuss.elastic.co/t/elastic-endpoint-overwrites-configuration-file/246531/6 " Uninstall goes like this. Open power shell as admin. Run uninstall-s… --- ## [ES 7.9 doesn't start](https://discuss.elastic.co/t/es-7-9-doesnt-start/246908)
**Author:** [@YURA](https://discuss.elastic.co/u/YURA)\ **Replies:** 7\ **Last updated:** [September 1, 2020, 1:34pm UTC](https://discuss.elastic.co/t/es-7-9-doesnt-start/246908 "2020-09-01T13:34:04Z")
java -version openjdk version "1.8.0\_262" OpenJDK Runtime Environment (build 1.8.0\_262-b10) OpenJDK 64-Bit Server VM (build 25.262-b10, mixed mode) cat /etc/redhat-release CentOS Linux release 7.8.2003 (Core) was i… --- ## [Automatically Delete older Documents](https://discuss.elastic.co/t/automatically-delete-older-documents/247078)
**Author:** [@Arun\_N](https://discuss.elastic.co/u/Arun_N)\ **Replies:** 10\ **Last updated:** [September 1, 2020, 1:16pm UTC](https://discuss.elastic.co/t/automatically-delete-older-documents/247078 "2020-09-01T13:16:54Z")
Hi Team, I need your help to understand how to set TTL like mechanism to delete the Elastic Search documentation automatically once it's reached the expiration time. I have read about delete by query API but the proble… --- ## [TopHitsAggregator objects are not Garbage Collected](https://discuss.elastic.co/t/tophitsaggregator-objects-are-not-garbage-collected/246487)
**Author:** [@parasharsh](https://discuss.elastic.co/u/parasharsh)\ **Replies:** 1\ **Last updated:** [September 1, 2020, 12:57pm UTC](https://discuss.elastic.co/t/tophitsaggregator-objects-are-not-garbage-collected/246487 "2020-09-01T12:57:02Z")
Hi,Recently we saw the OOM on our ES instance. On Checking the Heap Dump in VisulaVM we observed large number of instances of org.apache.lucene.search.ScoreDoc in the HEAP - 41,984,154 The dominators by Retained size (O… --- ## [Scripted field causes discover to fail kibana 7.8](https://discuss.elastic.co/t/scripted-field-causes-discover-to-fail-kibana-7-8/247083)
**Author:** [@perfectduffer](https://discuss.elastic.co/u/perfectduffer)\ **Replies:** 1\ **Last updated:** [September 1, 2020, 12:45pm UTC](https://discuss.elastic.co/t/scripted-field-causes-discover-to-fail-kibana-7-8/247083 "2020-09-01T12:45:53Z")
i added a scripted field and after that i can no longer use the discover to search or create filters, on the particular index that i added the field on... this is what i have in scripted field if(doc\['keywords.sentime… --- ## [Can we use " :: " as a separator in csv filter in logstash](https://discuss.elastic.co/t/can-we-use-as-a-separator-in-csv-filter-in-logstash/246983)
**Author:** [@Shahid\_Mustafa](https://discuss.elastic.co/u/Shahid_Mustafa)\ **Replies:** 3\ **Last updated:** [September 1, 2020, 11:59am UTC](https://discuss.elastic.co/t/can-we-use-as-a-separator-in-csv-filter-in-logstash/246983 "2020-09-01T11:59:13Z")
Can we use following csv filter: I cannot test this directly in our system. csv { columns =\> \[ "LogLevel", "DateTime", "RequestID", "LogMessage" \] s… --- ## [How to extract the uri path and the param from the uri](https://discuss.elastic.co/t/how-to-extract-the-uri-path-and-the-param-from-the-uri/245521)
**Author:** [@Tristan\_D](https://discuss.elastic.co/u/Tristan_D)\ **Replies:** 1\ **Last updated:** [September 1, 2020, 11:43am UTC](https://discuss.elastic.co/t/how-to-extract-the-uri-path-and-the-param-from-the-uri/245521 "2020-09-01T11:43:20Z")
I want to extract the uri path and the param from the uri. There are two forms of the uri, one with params and one without. Here is the examples of the uri /sentence\_func?key=23872323232 /bot\_recognize I use this patt… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1254) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1256)