# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1299

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1300

---

## [How to change logo in Kibana 7.8.0](https://discuss.elastic.co/t/how-to-change-logo-in-kibana-7-8-0/242412)

<div class="topic-metadata">

**Author:** [@yrtqz](https://discuss.elastic.co/u/yrtqz)\
**Replies:** 8\
**Last updated:** [August 5, 2020, 5:15am UTC](https://discuss.elastic.co/t/how-to-change-logo-in-kibana-7-8-0/242412 "2020-08-05T05:15:12Z")

</div>

I've found multiple posts about how to do this in earlier versions, but none of the solutions i saw worked on kibana 7.8.0. What can i do to change the loading screen elastic logo and the kibana logo in the sidebar?

---

## [Logstash grok pattern validator](https://discuss.elastic.co/t/logstash-grok-pattern-validator/243807)

<div class="topic-metadata">

**Author:** [@ash2](https://discuss.elastic.co/u/ash2)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 4:52am UTC](https://discuss.elastic.co/t/logstash-grok-pattern-validator/243807 "2020-08-05T04:52:27Z")

</div>

I am working on an application in which I am taking grok pattern as input and want to validate if the pattern is correct or not. Is there any library or any other way to validate the grok pattern in Java Spring backend?

---

## [Elasticsearch and Snapshots?](https://discuss.elastic.co/t/elasticsearch-and-snapshots/243717)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 5\
**Last updated:** [August 5, 2020, 4:44am UTC](https://discuss.elastic.co/t/elasticsearch-and-snapshots/243717 "2020-08-05T04:44:11Z")

</div>

Hi, I have very quick information about making snapshots at Elasticsearch. The documentation is here: https://www.elastic.co/guide/en/elasticsearch/reference/current/snapshots-register-repository.html However, I have…

---

## [Want to aggregate and search multiple route\_path as same function](https://discuss.elastic.co/t/want-to-aggregate-and-search-multiple-route-path-as-same-function/243804)

<div class="topic-metadata">

**Author:** [@hanase](https://discuss.elastic.co/u/hanase)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 3:42am UTC](https://discuss.elastic.co/t/want-to-aggregate-and-search-multiple-route-path-as-same-function/243804 "2020-08-05T03:42:34Z")

</div>

Hi, here is my DSL, GET access-2020.07.29/\_search { "query": { "match": { "route": "PIDInterface" } }, "aggs": { "route\_path": { "terms": { "field": "route\_path.keyword", "…

---

## [Ask about the usage of negative query\_string](https://discuss.elastic.co/t/ask-about-the-usage-of-negative-query-string/243412)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 2\
**Last updated:** [August 5, 2020, 1:01am UTC](https://discuss.elastic.co/t/ask-about-the-usage-of-negative-query-string/243412 "2020-08-05T01:01:21Z")

</div>

I've read the latest documentation and am sure I can't answer my question. https://www.elastic.co/guide/en/elasticsearch/reference/7.8/query-dsl-query-string-query.html#query-string-syntax The first DSL syntax succeede…

---

## [NEST Bulk API Validation Error: type is missing](https://discuss.elastic.co/t/nest-bulk-api-validation-error-type-is-missing/243752)

<div class="topic-metadata">

**Author:** [@lmattingly](https://discuss.elastic.co/u/lmattingly)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 12:13am UTC](https://discuss.elastic.co/t/nest-bulk-api-validation-error-type-is-missing/243752 "2020-08-05T00:13:03Z")

</div>

Hi, I'm experiencing "Invalid NEST response built from a unsuccessful (400) low level call on POST: /indexname/\_bulk" Bad Request with '{Type: action\_request\_validation\_exception Reason: "Validation Failed: 1: type is…

---

## [Calculating Disk Space being used](https://discuss.elastic.co/t/calculating-disk-space-being-used/243778)

<div class="topic-metadata">

**Author:** [@The-Nebertcher](https://discuss.elastic.co/u/The-Nebertcher)\
**Replies:** 3\
**Last updated:** [August 4, 2020, 11:24pm UTC](https://discuss.elastic.co/t/calculating-disk-space-being-used/243778 "2020-08-04T23:24:48Z")

</div>

Hello All I am working on a potential upgrade for our Elk stack and need to find a few things. One is how much space is being taken up just by Elk indexing new logs as they come in. For example if I am taking in ~10gb …

---

## [Query\_string is not returning expected result ES 5.x vs ES 7.7](https://discuss.elastic.co/t/query-string-is-not-returning-expected-result-es-5-x-vs-es-7-7/243783)

<div class="topic-metadata">

**Author:** [@pappukhode](https://discuss.elastic.co/u/pappukhode)\
**Replies:** 1\
**Last updated:** [August 4, 2020, 9:05pm UTC](https://discuss.elastic.co/t/query-string-is-not-returning-expected-result-es-5-x-vs-es-7-7/243783 "2020-08-04T21:05:11Z")

</div>

Hi, I have upgraded my elasticsearch recently from 5.5 to 7.7. While running my automation test suite, I found that query\_string in ES 5.5 was returning me expected document but ES 7.7 is returning empty results. I no…

---

## [7.8.1 Kibana server not ready yet](https://discuss.elastic.co/t/7-8-1-kibana-server-not-ready-yet/243774)

<div class="topic-metadata">

**Author:** [@pzachry](https://discuss.elastic.co/u/pzachry)\
**Replies:** 4\
**Last updated:** [August 4, 2020, 8:44pm UTC](https://discuss.elastic.co/t/7-8-1-kibana-server-not-ready-yet/243774 "2020-08-04T20:44:30Z")

</div>

Hey guys, we are running 7.8 Elasticsearch, Kibana, and Logstash. We were able to set up our stack and everything was working fine. A week later and we started getting the "Kibana server is not ready yet" when we would g…

---

## [Regex Kibana Filter with backslash](https://discuss.elastic.co/t/regex-kibana-filter-with-backslash/243686)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 1\
**Last updated:** [August 4, 2020, 8:30pm UTC](https://discuss.elastic.co/t/regex-kibana-filter-with-backslash/243686 "2020-08-04T20:30:51Z")

</div>

Hello, How can I create a regex filter in Kibana containing an escaped dollar? When I double backslash, the regex does not work as expected. My goal is to exclude computer accounts (which end with a dollar). Grtz W…

---

## [Supplying the After key to search template with aggregation](https://discuss.elastic.co/t/supplying-the-after-key-to-search-template-with-aggregation/243575)

<div class="topic-metadata">

**Author:** [@l570](https://discuss.elastic.co/u/l570)\
**Replies:** 1\
**Last updated:** [August 4, 2020, 7:41pm UTC](https://discuss.elastic.co/t/supplying-the-after-key-to-search-template-with-aggregation/243575 "2020-08-04T19:41:15Z")

</div>

I'm new to using search templates and aggregations. In previous queries using aggregations, I've used the "after" key to advance my search through the aggregations. Is it possible to do this with search templates? A…

---

## [Search in Kibana version 5.5.2](https://discuss.elastic.co/t/search-in-kibana-version-5-5-2/243750)

<div class="topic-metadata">

**Author:** [@Rafael\_Jordan](https://discuss.elastic.co/u/Rafael_Jordan)\
**Replies:** 4\
**Last updated:** [August 4, 2020, 7:33pm UTC](https://discuss.elastic.co/t/search-in-kibana-version-5-5-2/243750 "2020-08-04T19:33:25Z")

</div>

HI, We are currently using the Kibana tool for the treatment of CDRS (call detail records). We have tried to see the search options for certain types of calls and we are interested in filtering the following information…

---

## [Starting ES-7.8.0 hung up CLI](https://discuss.elastic.co/t/starting-es-7-8-0-hung-up-cli/241768)

<div class="topic-metadata">

**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\
**Replies:** 10\
**Last updated:** [August 4, 2020, 3:37pm UTC](https://discuss.elastic.co/t/starting-es-7-8-0-hung-up-cli/241768 "2020-08-04T15:37:43Z")

</div>

Hello, I setup ES-7.8.0 cluster on 2 hosts (Linux), 2 master and 2 data nodes on each host. I'm able to start all 4 nodes, the cluster health=GREEN and I can see all nodes joined the cluster. Environment: ES-7.8.0 (el…

---

## [Ingest manager without security enabled](https://discuss.elastic.co/t/ingest-manager-without-security-enabled/243756)

<div class="topic-metadata">

**Author:** [@Sc7565](https://discuss.elastic.co/u/Sc7565)\
**Replies:** 1\
**Last updated:** [August 4, 2020, 5:37pm UTC](https://discuss.elastic.co/t/ingest-manager-without-security-enabled/243756 "2020-08-04T17:37:33Z")

</div>

Can ingest manager work without security enabled?

---

## [NewRelic not showing JVM node after upgrade to 6.8.10](https://discuss.elastic.co/t/newrelic-not-showing-jvm-node-after-upgrade-to-6-8-10/243549)

<div class="topic-metadata">

**Author:** [@het](https://discuss.elastic.co/u/het)\
**Replies:** 2\
**Last updated:** [August 4, 2020, 5:18pm UTC](https://discuss.elastic.co/t/newrelic-not-showing-jvm-node-after-upgrade-to-6-8-10/243549 "2020-08-04T17:18:45Z")

</div>

Hi team, I have upgraded the Elastic-Search cluster from 5.3 to 6.8.10. When I am on 5.3 Version of ES, I have added the below the line in my jvm.option. -javaagent:$NEW\_RELIC\_HOME/newrelic.jar So with this, I can show…

---

## [POST adding new keys](https://discuss.elastic.co/t/post-adding-new-keys/243753)

<div class="topic-metadata">

**Author:** [@gdiaz](https://discuss.elastic.co/u/gdiaz)\
**Replies:** 0\
**Last updated:** [August 4, 2020, 5:15pm UTC](https://discuss.elastic.co/t/post-adding-new-keys/243753 "2020-08-04T17:15:17Z")

</div>

Hi all, I'm writing a service where other services can CRUD ElasticSearch. I'm have a schema that I stick to it to create POST body. I'm testing the service with Postman and I notice something unexpected. Just for giggl…

---

## [How to delete the indices older than 30 days](https://discuss.elastic.co/t/how-to-delete-the-indices-older-than-30-days/242182)

<div class="topic-metadata">

**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\
**Replies:** 11\
**Last updated:** [August 4, 2020, 4:54pm UTC](https://discuss.elastic.co/t/how-to-delete-the-indices-older-than-30-days/242182 "2020-08-04T16:54:52Z")

</div>

Hi Team, i am using ELK version 7.5, i would like to delete the indices which are older than 30 days. can i create the index life cycle policy to achieve this? Also, does this policy deletes the default indices which …

---

## [Coalesce field values together](https://discuss.elastic.co/t/coalesce-field-values-together/242378)

<div class="topic-metadata">

**Author:** [@surjray](https://discuss.elastic.co/u/surjray)\
**Replies:** 2\
**Last updated:** [August 4, 2020, 4:44pm UTC](https://discuss.elastic.co/t/coalesce-field-values-together/242378 "2020-08-04T16:44:24Z")

</div>

Is there a way to coalesce field content values into one value so that when we visualize in Kibana it shows up as one value, e.g. Say I have a field that has several values, 2 of them being system\_test, and system\_Test. …

---

## [How to make range filter on a multi-field field?](https://discuss.elastic.co/t/how-to-make-range-filter-on-a-multi-field-field/243653)

<div class="topic-metadata">

**Author:** [@opsuthar](https://discuss.elastic.co/u/opsuthar)\
**Replies:** 7\
**Last updated:** [August 4, 2020, 4:34pm UTC](https://discuss.elastic.co/t/how-to-make-range-filter-on-a-multi-field-field/243653 "2020-08-04T16:34:27Z")

</div>

Here is the mapping file, I am using: { "settings": { "number\_of\_shards": 2 }, "mappings": { "properties": { "SensitiveInfoTypeData": { "type": "nested", …

---

## [Unable to create the response header 'set-cookie' in Kibana 7.6.2](https://discuss.elastic.co/t/unable-to-create-the-response-header-set-cookie-in-kibana-7-6-2/243461)

<div class="topic-metadata">

**Author:** [@Natarajan](https://discuss.elastic.co/u/Natarajan)\
**Replies:** 1\
**Last updated:** [August 4, 2020, 4:29pm UTC](https://discuss.elastic.co/t/unable-to-create-the-response-header-set-cookie-in-kibana-7-6-2/243461 "2020-08-04T16:29:16Z")

</div>

I am using Kibana 7.6.2. I tried to hit /internal/security/login with valid credentials from iFrame . But getting 404 error. I just want to authenticate user and create the response header set-cookie which will create a…

---

## [Update detection rules from elastic github repository to on-premises](https://discuss.elastic.co/t/update-detection-rules-from-elastic-github-repository-to-on-premises/242211)

<div class="topic-metadata">

**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\
**Replies:** 2\
**Last updated:** [August 4, 2020, 4:19pm UTC](https://discuss.elastic.co/t/update-detection-rules-from-elastic-github-repository-to-on-premises/242211 "2020-08-04T16:19:19Z")

</div>

Hi there, I would like to know if is possible to update existing rules from elastic detection rules repository to kibana on-premises? For example: CVE-2020-1350 which has been released by the elastic security team. Th…

---

## [Update mapping index parameter of existing field](https://discuss.elastic.co/t/update-mapping-index-parameter-of-existing-field/243749)

<div class="topic-metadata">

**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\
**Replies:** 0\
**Last updated:** [August 4, 2020, 4:00pm UTC](https://discuss.elastic.co/t/update-mapping-index-parameter-of-existing-field/243749 "2020-08-04T16:00:38Z")

</div>

I have the mapping { "test" : { "mappings" : { "properties" : { "description" : { "type" : "text" }, "location" : { "type" : "keyword", "index" : false …

---

## [Beats, ECK, and Openshift 3.11](https://discuss.elastic.co/t/beats-eck-and-openshift-3-11/243627)

<div class="topic-metadata">

**Author:** [@SeanPlacchetti](https://discuss.elastic.co/u/SeanPlacchetti)\
**Replies:** 3\
**Last updated:** [August 4, 2020, 3:55pm UTC](https://discuss.elastic.co/t/beats-eck-and-openshift-3-11/243627 "2020-08-04T15:55:05Z")

</div>

Hi, I started looking into deploying out the various beats based on the examples in the documentation to our OpenShift 3.11 cluster and have run into some issues. I wonder if there are quickstart examples for OpenShift …

---

## [Offline Logstash install \[Unable to download data from https://rubygems.org\]](https://discuss.elastic.co/t/offline-logstash-install-unable-to-download-data-from-https-rubygems-org/243706)

<div class="topic-metadata">

**Author:** [@Arethusa](https://discuss.elastic.co/u/Arethusa)\
**Replies:** 2\
**Last updated:** [August 4, 2020, 3:54pm UTC](https://discuss.elastic.co/t/offline-logstash-install-unable-to-download-data-from-https-rubygems-org/243706 "2020-08-04T15:54:48Z")

</div>

Hello, I must install logstash and his plugin on offline VM. First on online VM I do: Install Java and Logstash yum install --downloadonly --downloaddir=/home/logstash/ logstash yum install --downloadonly --download…

---

## [ElasticSearch query to filter out distinct results](https://discuss.elastic.co/t/elasticsearch-query-to-filter-out-distinct-results/243622)

<div class="topic-metadata">

**Author:** [@karna98](https://discuss.elastic.co/u/karna98)\
**Replies:** 2\
**Last updated:** [August 4, 2020, 3:30pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-filter-out-distinct-results/243622 "2020-08-04T15:30:21Z")

</div>

Consider a table, where artifacts are mapped to publications. ------------------------------------------------------------------ id | artifact\_id | publication\_id | A | B | C | --------------------…

---

## [How to pull error logs from Kibana?](https://discuss.elastic.co/t/how-to-pull-error-logs-from-kibana/243709)

<div class="topic-metadata">

**Author:** [@Tiny\_Jacob](https://discuss.elastic.co/u/Tiny_Jacob)\
**Replies:** 1\
**Last updated:** [August 4, 2020, 3:27pm UTC](https://discuss.elastic.co/t/how-to-pull-error-logs-from-kibana/243709 "2020-08-04T15:27:49Z")

</div>

Is it possible to pull out error logs from Kibana?

---

## [On-demand Training Real User Monitoring Lab issue](https://discuss.elastic.co/t/on-demand-training-real-user-monitoring-lab-issue/243673)

<div class="topic-metadata">

**Author:** [@jhun4m](https://discuss.elastic.co/u/jhun4m)\
**Replies:** 2\
**Last updated:** [August 4, 2020, 3:07pm UTC](https://discuss.elastic.co/t/on-demand-training-real-user-monitoring-lab-issue/243673 "2020-08-04T15:07:09Z")

</div>

Hi, I'm taking the On-demand Training Real User Monitoring and i'm facing issues with the lab 1 when setting all the environment, followed the instruction step by step and when it comes on setting the apm-server with thi…

---

## [Unable to capture some syslog with socket input](https://discuss.elastic.co/t/unable-to-capture-some-syslog-with-socket-input/243735)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 0\
**Last updated:** [August 4, 2020, 2:47pm UTC](https://discuss.elastic.co/t/unable-to-capture-some-syslog-with-socket-input/243735 "2020-08-04T14:47:14Z")

</div>

I'm unable to capture some syslog from different sources: this is my conf: input { udp { port =\> 514 } tcp { port =\> 514 } } filter { } output { file { path …

---

## [Boolean should and proximity?](https://discuss.elastic.co/t/boolean-should-and-proximity/243734)

<div class="topic-metadata">

**Author:** [@flm](https://discuss.elastic.co/u/flm)\
**Replies:** 0\
**Last updated:** [August 4, 2020, 2:41pm UTC](https://discuss.elastic.co/t/boolean-should-and-proximity/243734 "2020-08-04T14:41:41Z")

</div>

Is there a way to mix boolean should and span or proximity queries? I want to match documents that contain X% of a group of terms in any order but not further apart from each other than distance D. Is this possible?

---

## [JSON parse error, original data now in message field](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field/242459)

<div class="topic-metadata">

**Author:** [@nisaxena](https://discuss.elastic.co/u/nisaxena)\
**Replies:** 7\
**Last updated:** [August 4, 2020, 2:12pm UTC](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field/242459 "2020-08-04T14:12:13Z")

</div>

Hi There, I am new to ELK, and need support. I have deployed a new ELK stack \[7.8.0\] & I am trying to ingest my rsyslogs to logstash. I am able to retrieve the logs to logstash but with following errors, logstash-plain…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1298)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1300)
