# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1335 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1336 --- ## [Introduction to Observability,Topics: lesson-4-multi-line-processing , is the last row correct?](https://discuss.elastic.co/t/introduction-to-observability-topics-lesson-4-multi-line-processing-is-the-last-row-correct/240833)
**Author:** [@manojb1-in.ibm.com](https://discuss.elastic.co/u/manojb1-in.ibm.com)\ **Replies:** 1\ **Last updated:** [July 13, 2020, 9:03am UTC](https://discuss.elastic.co/t/introduction-to-observability-topics-lesson-4-multi-line-processing-is-the-last-row-correct/240833 "2020-07-13T09:03:41Z")
Could you please validate, the last row(selected in red reactangle) is correct? Correct option for the explanation should be Negate: True(instead of false) and Match: Before --- ## [Ingesting Winlogbeat File output Text file](https://discuss.elastic.co/t/ingesting-winlogbeat-file-output-text-file/240925)
**Author:** [@OntheHighSeas](https://discuss.elastic.co/u/OntheHighSeas)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 8:44am UTC](https://discuss.elastic.co/t/ingesting-winlogbeat-file-output-text-file/240925 "2020-07-13T08:44:11Z")
Hi, Apologies if this should be in the Beats section, though I think it should be Logstash. I need to ingest WInlogbeat events from a system which has WinlogBeats installed but is using a File output, rather than Logst… --- ## [How Create Multiple Line Charts Using Line graph](https://discuss.elastic.co/t/how-create-multiple-line-charts-using-line-graph/240911)
**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 7:31am UTC](https://discuss.elastic.co/t/how-create-multiple-line-charts-using-line-graph/240911 "2020-07-13T07:31:22Z")
Hello all, I want to visualize multiple fields as different lines using line graph and below is the output that I want. I have some data which consists idle stats of two cpu and want to visualize it on a single graph. Is… --- ## [怎样使用QueryBuilders查询列表字段](https://discuss.elastic.co/t/querybuilders/240306)
**Author:** [@PeterZhao](https://discuss.elastic.co/u/PeterZhao)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 8:17am UTC](https://discuss.elastic.co/t/querybuilders/240306 "2020-07-13T08:17:53Z")
新手 列表字段：docBuilder.field(FreeTextField, List freeTextFieldAsArray) 想用QueryBuilders做一个查询匹配列表中的一项，怎么做呢？ --- ## [Sending Incident data from PD to elastic](https://discuss.elastic.co/t/sending-incident-data-from-pd-to-elastic/240686)
**Author:** [@Lambo1971](https://discuss.elastic.co/u/Lambo1971)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 8:15am UTC](https://discuss.elastic.co/t/sending-incident-data-from-pd-to-elastic/240686 "2020-07-13T08:15:05Z")
Hi All, would anyone know if it's possible to send PagerDuty incident data to Elastic ..? I know there is a logstash plugin allowing us to monitor Elastic using PD, but I am interested in collating PD data into Elastic. … --- ## [To create one dashbord with more than one time range](https://discuss.elastic.co/t/to-create-one-dashbord-with-more-than-one-time-range/240914)
**Author:** [@DeniseLow](https://discuss.elastic.co/u/DeniseLow)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 7:44am UTC](https://discuss.elastic.co/t/to-create-one-dashbord-with-more-than-one-time-range/240914 "2020-07-13T07:44:22Z")
Hi is it possible to to have 2 different time range in a dashboard so that there can be a comparison between current performance vs past weeks/month's performance in example above thank you --- ## [Index got corrupted without any crash](https://discuss.elastic.co/t/index-got-corrupted-without-any-crash/240895)
**Author:** [@chelawatankit](https://discuss.elastic.co/u/chelawatankit)\ **Replies:** 8\ **Last updated:** [July 13, 2020, 7:41am UTC](https://discuss.elastic.co/t/index-got-corrupted-without-any-crash/240895 "2020-07-13T07:41:16Z")
Hi, We have one single node elastic cluster which was running fine till last week. From last week we saw frequently one index got corrupted and went in 'RED' state without any system crash and disk space problem. When … --- ## [Using the Elastic Stack as database for big data](https://discuss.elastic.co/t/using-the-elastic-stack-as-database-for-big-data/237276)
**Author:** [@TiTanT](https://discuss.elastic.co/u/TiTanT)\ **Replies:** 4\ **Last updated:** [July 13, 2020, 7:26am UTC](https://discuss.elastic.co/t/using-the-elastic-stack-as-database-for-big-data/237276 "2020-07-13T07:26:31Z")
Hi Guys, I wanted to know if it is a good idea to use the elastic stack as database for big data. The data is used to do data science stuff later. Further the database should scale and enable a lot of read and write ac… --- ## [Questions about recovering cluster](https://discuss.elastic.co/t/questions-about-recovering-cluster/240774)
**Author:** [@spdoes](https://discuss.elastic.co/u/spdoes)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 7:25am UTC](https://discuss.elastic.co/t/questions-about-recovering-cluster/240774 "2020-07-13T07:25:57Z")
I had a cluster of 2 nodes with id: 8Z1G5AyPTSCq7grGsAiMTw and id:\_9nxYpwyR\_ekow9NqicxBw Now I only have access to one of the nodes\[\_9nxYpwyR\_ekow9NqicxBw\], however I can´t start ES even if I set the cluster.initial\_mas… --- ## [Restrict user to not change password through kibana UI](https://discuss.elastic.co/t/restrict-user-to-not-change-password-through-kibana-ui/240907)
**Author:** [@chnaahmad](https://discuss.elastic.co/u/chnaahmad)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 7:16am UTC](https://discuss.elastic.co/t/restrict-user-to-not-change-password-through-kibana-ui/240907 "2020-07-13T07:16:06Z")
Hi All, M requirement is to not allowed for some user to change the password FROM KIBANA UI. For example i have one user testUser with read-only access over dashboard; so that user (testUser) should not be able to chang… --- ## [ES 5.5.1 exception caught on transport layer:closing connection,java.io.IOException: Operation timed out](https://discuss.elastic.co/t/es-5-5-1-exception-caught-on-transport-layer-closing-connection-java-io-ioexception-operation-timed-out/240905)
**Author:** [@wtfDragon1](https://discuss.elastic.co/u/wtfDragon1)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 7:08am UTC](https://discuss.elastic.co/t/es-5-5-1-exception-caught-on-transport-layer-closing-connection-java-io-ioexception-operation-timed-out/240905 "2020-07-13T07:08:46Z")
I have a very urgent question，ask for help this is my config file: master: network.host: 0.0.0.0 discovery.zen.minimum\_master\_nodes: 1 node.master: true bootstrap.memory\_lock: false node.data: false node.ingest: … --- ## [How can we take import index in elasticsearch to export in new Index of elasticsearch...?](https://discuss.elastic.co/t/how-can-we-take-import-index-in-elasticsearch-to-export-in-new-index-of-elasticsearch/240687)
**Author:** [@navdeepk](https://discuss.elastic.co/u/navdeepk)\ **Replies:** 3\ **Last updated:** [July 13, 2020, 7:03am UTC](https://discuss.elastic.co/t/how-can-we-take-import-index-in-elasticsearch-to-export-in-new-index-of-elasticsearch/240687 "2020-07-13T07:03:54Z")
Actually, I have to take backup of index to export in new elasticsearch.... --- ## [Is there any way to customize visualization tooltip?](https://discuss.elastic.co/t/is-there-any-way-to-customize-visualization-tooltip/240901)
**Author:** [@PRACHI\_GUPTA](https://discuss.elastic.co/u/PRACHI_GUPTA)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 7:01am UTC](https://discuss.elastic.co/t/is-there-any-way-to-customize-visualization-tooltip/240901 "2020-07-13T07:01:26Z")
Is there any way to customize visualization tooltip? --- ## [Dev Tools query not working on Discover Query](https://discuss.elastic.co/t/dev-tools-query-not-working-on-discover-query/240900)
**Author:** [@edbautista](https://discuss.elastic.co/u/edbautista)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 7:00am UTC](https://discuss.elastic.co/t/dev-tools-query-not-working-on-discover-query/240900 "2020-07-13T07:00:52Z")
Hi! Kibana: 7.6.2 Our team is trying to create a navigation tool on the Kibana dashboard for specific filters. We have made the filters and necessary markdown for the dashboard. However we are stuck with one query that… --- ## [Cluster with different heap/node](https://discuss.elastic.co/t/cluster-with-different-heap-node/240548)
**Author:** [@Paul-Matthieu](https://discuss.elastic.co/u/Paul-Matthieu)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 6:54am UTC](https://discuss.elastic.co/t/cluster-with-different-heap-node/240548 "2020-07-13T06:54:19Z")
Hi Is there any particular recommendation against giving different nodes a different amount of heap ? I have a cluster with 10 nodes, each has 32Go of RAM but 2 have - for now - only 24Go I would like to maximize the … --- ## [Manually Moving Replica Shard To Node](https://discuss.elastic.co/t/manually-moving-replica-shard-to-node/240789)
**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\ **Replies:** 6\ **Last updated:** [July 13, 2020, 6:43am UTC](https://discuss.elastic.co/t/manually-moving-replica-shard-to-node/240789 "2020-07-13T06:43:45Z")
My goal is to have dedicated nodes for primary and replica shards. As far as I know, this is not supported/guaranteed out of the box but I'd be happy to do it manually if someone could point me out to a way to move a rep… --- ## [Elastic Stack Version](https://discuss.elastic.co/t/elastic-stack-version/240894)
**Author:** [@saket\_gupta](https://discuss.elastic.co/u/saket_gupta)\ **Replies:** 1\ **Last updated:** [July 13, 2020, 6:38am UTC](https://discuss.elastic.co/t/elastic-stack-version/240894 "2020-07-13T06:38:40Z")
Hi Team, I would like to know which versions of Elastic Stack are stable . I am a bit confused from https://www.elastic.co/blog/elasticsearch-7-5-0-released and https://www.elastic.co/blog/whats-new-in-elastic-stack-7-8… --- ## [Not able to add links in data table to different dashboards](https://discuss.elastic.co/t/not-able-to-add-links-in-data-table-to-different-dashboards/240465)
**Author:** [@PRACHI\_GUPTA](https://discuss.elastic.co/u/PRACHI_GUPTA)\ **Replies:** 13\ **Last updated:** [July 13, 2020, 6:34am UTC](https://discuss.elastic.co/t/not-able-to-add-links-in-data-table-to-different-dashboards/240465 "2020-07-13T06:34:28Z")
Hi, I am new to kibana. I need to create a table having 4 links in each row for different dashboards. But I can not find any suitable way to do that. Please help. Thanks!! --- ## [Elasticsearch not creating index post upgrade to version 6.8.10 from version 5.6.16](https://discuss.elastic.co/t/elasticsearch-not-creating-index-post-upgrade-to-version-6-8-10-from-version-5-6-16/240884)
**Author:** [@vsudhaka](https://discuss.elastic.co/u/vsudhaka)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 6:28am UTC](https://discuss.elastic.co/t/elasticsearch-not-creating-index-post-upgrade-to-version-6-8-10-from-version-5-6-16/240884 "2020-07-13T06:28:51Z")
Hello Team, We have ELK stack in our environment for Log management.Recently I upgraded Elasticsearch nodes and Kibana instance from version 5.6.16 to 6.8.10. Logstash and Beats were not upgraded since they have backwa… --- ## [Added a new field mapping and want to reindex only that field](https://discuss.elastic.co/t/added-a-new-field-mapping-and-want-to-reindex-only-that-field/240886)
**Author:** [@Ubeta](https://discuss.elastic.co/u/Ubeta)\ **Replies:** 5\ **Last updated:** [July 13, 2020, 6:24am UTC](https://discuss.elastic.co/t/added-a-new-field-mapping-and-want-to-reindex-only-that-field/240886 "2020-07-13T06:24:18Z")
Hi! I have added a new field property to an existing field and now I want to reindex only the newly added field property. My old index mappings were { "org\_assignee\_name" : { "type" : "text", "fie… --- ## [Connect Filebeat to logstash](https://discuss.elastic.co/t/connect-filebeat-to-logstash/240040)
**Author:** [@Revathy](https://discuss.elastic.co/u/Revathy)\ **Replies:** 8\ **Last updated:** [July 13, 2020, 6:15am UTC](https://discuss.elastic.co/t/connect-filebeat-to-logstash/240040 "2020-07-13T06:15:30Z")
Hi, I am trying to setup filebeat to logstash and get below errors at filebeat and logstash end: filebeat; Version: 7.7.0 logstash "number" : "7.8.0" Modified /etc/filebeat/filebeat.yml: enabled: true paths: co… --- ## [Can we customize Kibana UI](https://discuss.elastic.co/t/can-we-customize-kibana-ui/240698)
**Author:** [@vkg0312](https://discuss.elastic.co/u/vkg0312)\ **Replies:** 1\ **Last updated:** [July 13, 2020, 6:11am UTC](https://discuss.elastic.co/t/can-we-customize-kibana-ui/240698 "2020-07-13T06:11:56Z")
Hi I want to customize kibana UI to show some UI Like system healh and its usage --- ## [Concurrency command as in Splunk](https://discuss.elastic.co/t/concurrency-command-as-in-splunk/237579)
**Author:** [@akh](https://discuss.elastic.co/u/akh)\ **Replies:** 1\ **Last updated:** [July 13, 2020, 5:48am UTC](https://discuss.elastic.co/t/concurrency-command-as-in-splunk/237579 "2020-07-13T05:48:12Z")
Hi, Is there a way to implement the concurrency command as in Splunk? We need to take into consideration the processes that started earlier but are still in progress during the current second. Is it possible to do so? --- ## [Does logstash map to geo\_point type when parsing geoip?](https://discuss.elastic.co/t/does-logstash-map-to-geo-point-type-when-parsing-geoip/240776)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 5:28am UTC](https://discuss.elastic.co/t/does-logstash-map-to-geo-point-type-when-parsing-geoip/240776 "2020-07-13T05:28:48Z")
input{ kafka{ codec =\> "json" decorate\_events =\> true ...... } } filter { geoip { source =\> "remote\_addr" target =\> "geoip" add\_field =\> \["\[geoip\]\[coordinates\]","%{\[geoip\]\[lo… --- ## [Snapshot and restore source only feature](https://discuss.elastic.co/t/snapshot-and-restore-source-only-feature/240881)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 15\ **Last updated:** [July 13, 2020, 4:38am UTC](https://discuss.elastic.co/t/snapshot-and-restore-source-only-feature/240881 "2020-07-13T04:38:55Z")
Hi all i recently trying the snapshot feature in elastic and i noticed the feature source only button there, according to what i have read the source only will only save the metadata and the field of the index and nothi… --- ## [CSV export issue single date present in two columns - v6.8.1](https://discuss.elastic.co/t/csv-export-issue-single-date-present-in-two-columns-v6-8-1/240877)
**Author:** [@z018782](https://discuss.elastic.co/u/z018782)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 1:55am UTC](https://discuss.elastic.co/t/csv-export-issue-single-date-present-in-two-columns-v6-8-1/240877 "2020-07-13T01:55:31Z")
Export CSV will gives two rows instead of single row. Is there any settings to change this. because earlier version of excel (2012) is not able to import these type of CSV in an single row. what i am getting now! hell… --- ## [Logstash\_jdbc\_last\_run file is not created](https://discuss.elastic.co/t/logstash-jdbc-last-run-file-is-not-created/240882)
**Author:** [@ohoroyoi](https://discuss.elastic.co/u/ohoroyoi)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 2:11am UTC](https://discuss.elastic.co/t/logstash-jdbc-last-run-file-is-not-created/240882 "2020-07-13T02:11:50Z")
./logstash -V 6.8.8 The logstash\_jdbc\_last\_run file is not created. It was created at first, but I deleted it. Then, when I run it with a arbitrary file in another location, sql\_last\_value is not created. And the fil… --- ## [Terms filter not receiving a hit within a function score](https://discuss.elastic.co/t/terms-filter-not-receiving-a-hit-within-a-function-score/240747)
**Author:** [@Stephen\_Kneubuehl](https://discuss.elastic.co/u/Stephen_Kneubuehl)\ **Replies:** 4\ **Last updated:** [July 13, 2020, 2:22am UTC](https://discuss.elastic.co/t/terms-filter-not-receiving-a-hit-within-a-function-score/240747 "2020-07-13T02:22:29Z")
I am relatively new to Elasticsearch and am building a function score query to find vehicles that may be of interest to our users. We have a field called "make" which holds the brand of the car manufacturer such as "BMW"… --- ## [PayloadFactor needed in similarity(es7)](https://discuss.elastic.co/t/payloadfactor-needed-in-similarity-es7/240880)
**Author:** [@chembohuang](https://discuss.elastic.co/u/chembohuang)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 2:10am UTC](https://discuss.elastic.co/t/payloadfactor-needed-in-similarity-es7/240880 "2020-07-13T02:10:43Z")
https://issues.apache.org/jira/browse/LUCENE-8014 As we can see from the link above, SimScorer.computeSlopFactor and SimScorer.computePayloadFactor were removed in 7x. What if i need payloadfactor? How can i get this … --- ## [Reindexing docs that don’t yet exist in new index only (by doc id)](https://discuss.elastic.co/t/reindexing-docs-that-don-t-yet-exist-in-new-index-only-by-doc-id/240761)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 1\ **Last updated:** [July 13, 2020, 1:15am UTC](https://discuss.elastic.co/t/reindexing-docs-that-don-t-yet-exist-in-new-index-only-by-doc-id/240761 "2020-07-13T01:15:30Z")
I need to reindex some indices so that it will change some object mapping to nested. I plan on setting the doc IDs to be the same in the source index and destination index. The challenge is that the source indices will c… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1334) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1336)