# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1289

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1290

---

## [How to Show Month names in Control Visualaization by Sorting](https://discuss.elastic.co/t/how-to-show-month-names-in-control-visualaization-by-sorting/241454)

<div class="topic-metadata">

**Author:** [@jeeva](https://discuss.elastic.co/u/jeeva)\
**Replies:** 1\
**Last updated:** [August 11, 2020, 6:33pm UTC](https://discuss.elastic.co/t/how-to-show-month-names-in-control-visualaization-by-sorting/241454 "2020-08-11T18:33:17Z")

</div>

Hi Team, We have index with "Month" Field and it has all 12 Months value. We are using Control Visualization to show all 12 months in Drop Down list but how to Sort all month values (like Jan,Feb,Mar,Apr..Dec). Curre…

---

## [Query metrics of VMS through API call via HTTP Poller](https://discuss.elastic.co/t/query-metrics-of-vms-through-api-call-via-http-poller/244569)

<div class="topic-metadata">

**Author:** [@Ayesha](https://discuss.elastic.co/u/Ayesha)\
**Replies:** 3\
**Last updated:** [August 11, 2020, 6:32pm UTC](https://discuss.elastic.co/t/query-metrics-of-vms-through-api-call-via-http-poller/244569 "2020-08-11T18:32:48Z")

</div>

Hi I want to grab specific metrics of VMs by API calls Currently I am using ///suite-api/api/resources?resourceKind=VirtualMachine to call all VMs and their resource IDs in postman Next I am using below to get metri…

---

## [Cant see my chart plugins after i added them on elastic cloud](https://discuss.elastic.co/t/cant-see-my-chart-plugins-after-i-added-them-on-elastic-cloud/244573)

<div class="topic-metadata">

**Author:** [@Venkatesh\_Guruprasad](https://discuss.elastic.co/u/Venkatesh_Guruprasad)\
**Replies:** 4\
**Last updated:** [August 11, 2020, 6:29pm UTC](https://discuss.elastic.co/t/cant-see-my-chart-plugins-after-i-added-them-on-elastic-cloud/244573 "2020-08-11T18:29:09Z")

</div>

I added a plugin on the EC deployment hosted with elastic cloud. i restarted all the services. I still dont see them in my visualizations.

---

## [Create temp metadata field using regex in message field and parse json](https://discuss.elastic.co/t/create-temp-metadata-field-using-regex-in-message-field-and-parse-json/244594)

<div class="topic-metadata">

**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\
**Replies:** 6\
**Last updated:** [August 11, 2020, 6:15pm UTC](https://discuss.elastic.co/t/create-temp-metadata-field-using-regex-in-message-field-and-parse-json/244594 "2020-08-11T18:15:12Z")

</div>

I need to extract the JSON object from the message field filter { grok { match =\> { "message" =\> "(?\<\[@metadata\]\[tempjson\]\>{.+})" } } json { source =\> "\[@metadata\]\[tempjson\]" } } Above…

---

## [Kibana TSVB No data to display once I add another series](https://discuss.elastic.co/t/kibana-tsvb-no-data-to-display-once-i-add-another-series/244541)

<div class="topic-metadata">

**Author:** [@nada.nasser](https://discuss.elastic.co/u/nada.nasser)\
**Replies:** 2\
**Last updated:** [August 11, 2020, 6:00pm UTC](https://discuss.elastic.co/t/kibana-tsvb-no-data-to-display-once-i-add-another-series/244541 "2020-08-11T18:00:58Z")

</div>

I am using Elastic v 7.7.0 once I add a new series No data displays unless I disable one of them

---

## [Kibana and Elasticsearch Node configuration not working after moving data directory](https://discuss.elastic.co/t/kibana-and-elasticsearch-node-configuration-not-working-after-moving-data-directory/244467)

<div class="topic-metadata">

**Author:** [@userR](https://discuss.elastic.co/u/userR)\
**Replies:** 3\
**Last updated:** [August 11, 2020, 5:58pm UTC](https://discuss.elastic.co/t/kibana-and-elasticsearch-node-configuration-not-working-after-moving-data-directory/244467 "2020-08-11T17:58:49Z")

</div>

I have two elasticsearch nodes and for one of them, I moved the the /var/lib/elasticsearch folder to a mount with more storage. I chown'd an elasticsearch user and changed the path.data in the elasticsearch.yml file and …

---

## [Kibana Dynamically Time Filter](https://discuss.elastic.co/t/kibana-dynamically-time-filter/242940)

<div class="topic-metadata">

**Author:** [@alparslan](https://discuss.elastic.co/u/alparslan)\
**Replies:** 1\
**Last updated:** [August 11, 2020, 5:31pm UTC](https://discuss.elastic.co/t/kibana-dynamically-time-filter/242940 "2020-08-11T17:31:03Z")

</div>

I need to show daily/weekly/monthly average of duration of my job with Gauge in Kibana. We can call this graph as daily/weekly/monthly load percente of machine. I have duration-time-in-day field in index. want to sum …

---

## [Update by query adds "ctx" in source of all the matching document](https://discuss.elastic.co/t/update-by-query-adds-ctx-in-source-of-all-the-matching-document/244570)

<div class="topic-metadata">

**Author:** [@ahmadimt07](https://discuss.elastic.co/u/ahmadimt07)\
**Replies:** 7\
**Last updated:** [August 11, 2020, 5:13pm UTC](https://discuss.elastic.co/t/update-by-query-adds-ctx-in-source-of-all-the-matching-document/244570 "2020-08-11T17:13:14Z")

</div>

We are using update\_by\_query to add/modify some of the fields in our documents. The update is working fine. However, it is adding an additional field "ctx" in each of the document: Here is the query I am using : POST …

---

## [Query to divide aggregation result by a parent value](https://discuss.elastic.co/t/query-to-divide-aggregation-result-by-a-parent-value/244552)

<div class="topic-metadata">

**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\
**Replies:** 1\
**Last updated:** [August 11, 2020, 4:14pm UTC](https://discuss.elastic.co/t/query-to-divide-aggregation-result-by-a-parent-value/244552 "2020-08-11T16:14:20Z")

</div>

Say I have a series of documents with an event type and a user\_id. Is there an Elasticsearch pipeline aggregation that allows me to divide the count of events by the unique total users (not total users per event)? I kn…

---

## [An exception caught while applying mutate filter - Could not set field 'log' on object '' to value '...'](https://discuss.elastic.co/t/an-exception-caught-while-applying-mutate-filter-could-not-set-field-log-on-object-to-value/244583)

<div class="topic-metadata">

**Author:** [@Yuval\_Khalifa](https://discuss.elastic.co/u/Yuval_Khalifa)\
**Replies:** 5\
**Last updated:** [August 11, 2020, 4:02pm UTC](https://discuss.elastic.co/t/an-exception-caught-while-applying-mutate-filter-could-not-set-field-log-on-object-to-value/244583 "2020-08-11T16:02:03Z")

</div>

Hi, I'm getting the following error message in Logstash logs: \[2020-08-11T15:07:11,248\]\[WARN \]\[logstash.filters.mutate \]\[main\]\[51aae80b265c32978f64e0aace0ece634a29ae2a08ef228095111afd72bfdd0b\] Exception caught while a…

---

## [Beats can not connect to Logstash](https://discuss.elastic.co/t/beats-can-not-connect-to-logstash/244584)

<div class="topic-metadata">

**Author:** [@Ben\_said](https://discuss.elastic.co/u/Ben_said)\
**Replies:** 1\
**Last updated:** [August 11, 2020, 3:52pm UTC](https://discuss.elastic.co/t/beats-can-not-connect-to-logstash/244584 "2020-08-11T15:52:33Z")

</div>

\[2020-08-12T12:53:29,146\]\[INFO \]\[org.logstash.beats.BeatsHandler\]\[main\]\[2ab0e765b84268c7156e67dc3b10bd35b876b27ad91871edfa9d3b1669f4fea7\] \[local: 10.100.80.40:5044, remote: 10.100.80.40:39494\] Handling exception: org.log…

---

## [Kibana ECE dashboard error](https://discuss.elastic.co/t/kibana-ece-dashboard-error/244565)

<div class="topic-metadata">

**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\
**Replies:** 0\
**Last updated:** [August 11, 2020, 1:48pm UTC](https://discuss.elastic.co/t/kibana-ece-dashboard-error/244565 "2020-08-11T13:48:25Z")

</div>

Hi All, I want to do a POC and try out some of the features of remote ingestion, ML & SIEM before we buy and implement ECE in prod. its been few days I am trying to get this issue resolved but I am unable to resolve com…

---

## [Rollover Fails of max\_size condition](https://discuss.elastic.co/t/rollover-fails-of-max-size-condition/244125)

<div class="topic-metadata">

**Author:** [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)\
**Replies:** 1\
**Last updated:** [August 11, 2020, 2:56pm UTC](https://discuss.elastic.co/t/rollover-fails-of-max-size-condition/244125 "2020-08-11T14:56:48Z")

</div>

Greetings I Am trying to create a ilm policy that rolls over my index on size condition My ilm policy looks like : { "testing\_ilm\_dataloss" : { "version" : 7, "modified\_date" : "2020-08-06T14:25:09.434Z", "policy" : {…

---

## [Excessive "External Alerts" after update to 7.8](https://discuss.elastic.co/t/excessive-external-alerts-after-update-to-7-8/244428)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 2\
**Last updated:** [August 11, 2020, 2:49pm UTC](https://discuss.elastic.co/t/excessive-external-alerts-after-update-to-7-8/244428 "2020-08-11T14:49:02Z")

</div>

Hello, Updated to 7.8.1 last week and just noticed that we have a huge amount of external alerts now from panw.panos. I've been working on updating event.kind to alert for mcafee and cylance logs, but that's kind of …

---

## [JDBC Driver to be used to crawl the data from IBM db2 database](https://discuss.elastic.co/t/jdbc-driver-to-be-used-to-crawl-the-data-from-ibm-db2-database/243338)

<div class="topic-metadata">

**Author:** [@Mohan\_vel](https://discuss.elastic.co/u/Mohan_vel)\
**Replies:** 1\
**Last updated:** [August 11, 2020, 2:45pm UTC](https://discuss.elastic.co/t/jdbc-driver-to-be-used-to-crawl-the-data-from-ibm-db2-database/243338 "2020-08-11T14:45:26Z")

</div>

Hi All, I have created a logstash configuration file to crawl the data from IBM Db2. I am getting an issue that JDBC driver libirary is not loaded. Here i am using logstash version 7.7.1. Configuration file in…

---

## [Elastic Query](https://discuss.elastic.co/t/elastic-query/244572)

<div class="topic-metadata">

**Author:** [@thejaswani](https://discuss.elastic.co/u/thejaswani)\
**Replies:** 0\
**Last updated:** [August 11, 2020, 2:39pm UTC](https://discuss.elastic.co/t/elastic-query/244572 "2020-08-11T14:39:39Z")

</div>

we are using elastic 5.6.2. In this version, how we do the term aggregation for nested objetcs with limit and offset? Please advice.. We have tried this query { "index": "sample\_mastercollection", "type": "collectio…

---

## [Reduced precision on date fields when used in field\_value\_factor score](https://discuss.elastic.co/t/reduced-precision-on-date-fields-when-used-in-field-value-factor-score/244497)

<div class="topic-metadata">

**Author:** [@zoellner](https://discuss.elastic.co/u/zoellner)\
**Replies:** 0\
**Last updated:** [August 11, 2020, 6:51am UTC](https://discuss.elastic.co/t/reduced-precision-on-date-fields-when-used-in-field-value-factor-score/244497 "2020-08-11T06:51:03Z")

</div>

I am trying to do a custom scoring using a date field. I need the score to take the date into account with millisecond precision. However, when I run the code below, I get a result where the score for both 2020-01-01T00:…

---

## [Received ban for the parent , reason: \[by user request\]](https://discuss.elastic.co/t/received-ban-for-the-parent-reason-by-user-request/244566)

<div class="topic-metadata">

**Author:** [@Anis](https://discuss.elastic.co/u/Anis)\
**Replies:** 0\
**Last updated:** [August 11, 2020, 1:50pm UTC](https://discuss.elastic.co/t/received-ban-for-the-parent-reason-by-user-request/244566 "2020-08-11T13:50:01Z")

</div>

I am experiencing the follwoig BUG/WARN when sporadically our searches appear to not be returning when these messages are seen. They all seem to begin with the "Received ban for the parent" message. Other times the same…

---

## [Kibana UI Customization](https://discuss.elastic.co/t/kibana-ui-customization/244360)

<div class="topic-metadata">

**Author:** [@sima](https://discuss.elastic.co/u/sima)\
**Replies:** 1\
**Last updated:** [August 11, 2020, 1:02pm UTC](https://discuss.elastic.co/t/kibana-ui-customization/244360 "2020-08-11T13:02:38Z")

</div>

Hi!! I want to slightly change the UI of kibana without installing any other themes. I just want to change some colors fonts using the original source code file. However i couldnt find the index page or the exact locatio…

---

## [Imports cannot resolved to a type](https://discuss.elastic.co/t/imports-cannot-resolved-to-a-type/244551)

<div class="topic-metadata">

**Author:** [@mun-inder-jeet-singh](https://discuss.elastic.co/u/mun-inder-jeet-singh)\
**Replies:** 0\
**Last updated:** [August 11, 2020, 12:52pm UTC](https://discuss.elastic.co/t/imports-cannot-resolved-to-a-type/244551 "2020-08-11T12:52:14Z")

</div>

Hi All I have cloned the repo from github and imported into eclipse. There are imports error for groovy classes only which i need to resolve. Kindly guide . P.S. All the necessary files which needs to be imported is…

---

## [Query Performance in ES](https://discuss.elastic.co/t/query-performance-in-es/244342)

<div class="topic-metadata">

**Author:** [@randidwiputra](https://discuss.elastic.co/u/randidwiputra)\
**Replies:** 5\
**Last updated:** [August 11, 2020, 12:24pm UTC](https://discuss.elastic.co/t/query-performance-in-es/244342 "2020-08-11T12:24:25Z")

</div>

Hi All, I need suggestions if we have data 6TB with 10 datanode ES, how about query performance in Elasticsearch. Can the query be successful in 2 seconds? Every nodes are 8 core, 64GB RAM, 6TB SSD. Thanks All

---

## [How to use ingest pipeline with logstash elaticsearch output update feature](https://discuss.elastic.co/t/how-to-use-ingest-pipeline-with-logstash-elaticsearch-output-update-feature/244314)

<div class="topic-metadata">

**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\
**Replies:** 1\
**Last updated:** [August 11, 2020, 12:19pm UTC](https://discuss.elastic.co/t/how-to-use-ingest-pipeline-with-logstash-elaticsearch-output-update-feature/244314 "2020-08-11T12:19:33Z")

</div>

I am using Logstash Elasticsearch output to publish data to Elasticsearch. Two records are merged to create a single record from a request and a response. This code is working with no issues. elasticsearch { hosts =\> …

---

## [Line visualization](https://discuss.elastic.co/t/line-visualization/244003)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 5\
**Last updated:** [August 11, 2020, 12:10pm UTC](https://discuss.elastic.co/t/line-visualization/244003 "2020-08-11T12:10:16Z")

</div>

Hi , I use kibana 7.7.0 how can i dislay values in a line visualization. for example : axe X : date (i can display it ) axe Y : price ( I want to display the prices of each document as in discover , without any fun…

---

## [Multi node fail](https://discuss.elastic.co/t/multi-node-fail/244244)

<div class="topic-metadata">

**Author:** [@cadirol](https://discuss.elastic.co/u/cadirol)\
**Replies:** 15\
**Last updated:** [August 11, 2020, 11:47am UTC](https://discuss.elastic.co/t/multi-node-fail/244244 "2020-08-11T11:47:35Z")

</div>

Hi All For operational continuity in an multinode cluster i have two questions in my head: the cluster contains, 14 nodes, 7 nodes on site A, 7 nodes on site B, ES Version 6.4 What if a) one site goes down unexpected …

---

## [Using a codec with the BigQuery output plugin](https://discuss.elastic.co/t/using-a-codec-with-the-bigquery-output-plugin/241510)

<div class="topic-metadata">

**Author:** [@James\_Sherwood\_Jones](https://discuss.elastic.co/u/James_Sherwood_Jones)\
**Replies:** 1\
**Last updated:** [August 11, 2020, 11:15am UTC](https://discuss.elastic.co/t/using-a-codec-with-the-bigquery-output-plugin/241510 "2020-08-11T11:15:56Z")

</div>

I've set a codec on the BigQuery output plugin in my pipeline: google\_bigquery { codec =\> "my-custom-codec" ... } The codec itself works great with an output like "stdout" but I've spent a considerable amount of ti…

---

## [Virtualenv issue in Lab 2](https://discuss.elastic.co/t/virtualenv-issue-in-lab-2/244470)

<div class="topic-metadata">

**Author:** [@John\_Blythe](https://discuss.elastic.co/u/John_Blythe)\
**Replies:** 3\
**Last updated:** [August 11, 2020, 11:10am UTC](https://discuss.elastic.co/t/virtualenv-issue-in-lab-2/244470 "2020-08-11T11:10:51Z")

</div>

when trying to follow the first command in Lab 2 of the NLP course I'm getting an error saying that virtualenv is not installed and i should contact my admin to do so. is this something others have experienced? my searc…

---

## [Load Balancing Elasticsearch Hot Nodes](https://discuss.elastic.co/t/load-balancing-elasticsearch-hot-nodes/244531)

<div class="topic-metadata">

**Author:** [@jijo.john](https://discuss.elastic.co/u/jijo.john)\
**Replies:** 0\
**Last updated:** [August 11, 2020, 10:23am UTC](https://discuss.elastic.co/t/load-balancing-elasticsearch-hot-nodes/244531 "2020-08-11T10:23:13Z")

</div>

Hi All, We have a query for elasticsearch node redundancy. Can we use a AWS NLB/ALB to load balance the Hot Nodes so that in the Node failure data will still be pushed to another active hot node under the load balancer …

---

## [Cannot allocate because allocation is not permitted to any of the nodes](https://discuss.elastic.co/t/cannot-allocate-because-allocation-is-not-permitted-to-any-of-the-nodes/244530)

<div class="topic-metadata">

**Author:** [@Dipesh](https://discuss.elastic.co/u/Dipesh)\
**Replies:** 0\
**Last updated:** [August 11, 2020, 10:16am UTC](https://discuss.elastic.co/t/cannot-allocate-because-allocation-is-not-permitted-to-any-of-the-nodes/244530 "2020-08-11T10:16:53Z")

</div>

Hi , we are facing issue on elasticsearch, when we are adding replica 1 and shrads 1 on templates then iml policy is not working properly. indices are not moving from warm to cold phase and delete phase. { "index" …

---

## [Query on Source only snapshot](https://discuss.elastic.co/t/query-on-source-only-snapshot/242919)

<div class="topic-metadata">

**Author:** [@jijo.john](https://discuss.elastic.co/u/jijo.john)\
**Replies:** 11\
**Last updated:** [August 11, 2020, 10:10am UTC](https://discuss.elastic.co/t/query-on-source-only-snapshot/242919 "2020-08-11T10:10:33Z")

</div>

Hello Team, I am currently testing snapshot and restore process in elasticsearch. After restoring a source only snapshot from s3 , it is not showing any doc counts and storage size. do we need to do any thing here to st…

---

## [Is it able to get rank (order number) of \_score in Elasticsearch script score?](https://discuss.elastic.co/t/is-it-able-to-get-rank-order-number-of-score-in-elasticsearch-script-score/244527)

<div class="topic-metadata">

**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\
**Replies:** 0\
**Last updated:** [August 11, 2020, 9:51am UTC](https://discuss.elastic.co/t/is-it-able-to-get-rank-order-number-of-score-in-elasticsearch-script-score/244527 "2020-08-11T09:51:44Z")

</div>

I would like to use \_score in script score, calculating its rank in entire hits. For example, if there are these 3 hit documents; { "\_id": 1, "\_score": 0.7 } { "\_id": 2, "\_score": 0.5 } { "\_id": 3, "\_score": 1.0 } I w…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1288)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1290)
