# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1342 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1343 --- ## [Can't access kibana when enable xpack.security](https://discuss.elastic.co/t/cant-access-kibana-when-enable-xpack-security/240114)
**Author:** [@Jinlian\_Chen](https://discuss.elastic.co/u/Jinlian_Chen)\ **Replies:** 4\ **Last updated:** [July 9, 2020, 3:08am UTC](https://discuss.elastic.co/t/cant-access-kibana-when-enable-xpack-security/240114 "2020-07-09T03:08:19Z")
Os: macOS Mojave 10.14.5 Elasticsearch version: 7.8.0 Kibana version: 7.8.0 Chrome version: Version 83.0.4103.106 (Official Build) (64-bit) Safari version: Version 12.1.1 (14607.2.6.1.1) Issue: Use Chrome can't acc… --- ## [Uptime not showing UP Down Monitors](https://discuss.elastic.co/t/uptime-not-showing-up-down-monitors/240349)
**Author:** [@Ameyamacha](https://discuss.elastic.co/u/Ameyamacha)\ **Replies:** 1\ **Last updated:** [July 9, 2020, 2:48am UTC](https://discuss.elastic.co/t/uptime-not-showing-up-down-monitors/240349 "2020-07-09T02:48:12Z")
Hello We are using Elasticsearch cloud 7.8 with kibana 7.8 versions. I set up Heartbeat (using docker) and configured the heartbeat.yml properly. The configuration is setup to send the data directly to logstash. I see … --- ## [Questions about default sorting！！！](https://discuss.elastic.co/t/questions-about-default-sorting/240362)
**Author:** [@111365](https://discuss.elastic.co/u/111365)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 1:50am UTC](https://discuss.elastic.co/t/questions-about-default-sorting/240362 "2020-07-09T01:50:56Z")
When I use elasticsearch's search function, matchall always returns documents in a fixed order, without relevance ranking. So what is the sort order without using sort? --- ## [Help parsing a date field](https://discuss.elastic.co/t/help-parsing-a-date-field/240253)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 3\ **Last updated:** [July 9, 2020, 1:24am UTC](https://discuss.elastic.co/t/help-parsing-a-date-field/240253 "2020-07-09T01:24:34Z")
Hello, my source data has the following dates, which i am struggling to create the correct field mapping. "notBefore": "Jun 9 00:31:02 2020 GMT", "notAfter": "Jun 9 00:31:02 2025 GMT" i have tried various combination… --- ## [JSON Inputでメトリック値の変更ができない](https://discuss.elastic.co/t/json-input/240241)
**Author:** [@kuehara](https://discuss.elastic.co/u/kuehara)\ **Replies:** 1\ **Last updated:** [July 9, 2020, 1:14am UTC](https://discuss.elastic.co/t/json-input/240241 "2020-07-09T01:14:29Z")
https://www.elastic.co/guide/en/kibana/7.4/metric-chart.html これらURLで紹介されているJSON Inputによる単位の変更ができません。 記載の通りに入力しても、エラーが表示されます。 入力値 { "script" : "doc\['dfTime'\].value \* 1.2" } エラーメッセージ 環境はElastic Cloud 7.8です。 df… --- ## [Is there a way to bring back in clause without using OR in query string](https://discuss.elastic.co/t/is-there-a-way-to-bring-back-in-clause-without-using-or-in-query-string/240374)
**Author:** [@dcengl](https://discuss.elastic.co/u/dcengl)\ **Replies:** 1\ **Last updated:** [July 9, 2020, 12:48am UTC](https://discuss.elastic.co/t/is-there-a-way-to-bring-back-in-clause-without-using-or-in-query-string/240374 "2020-07-09T00:48:14Z")
Is there a way to bring back the "in" query without using OR in ES 7. For example: q=my-field:(value1 value2 value3) instead of q=my-field:(value1 OR value2 OR value3) --- ## [Conditionally merge values from 2 fields into 1 new field](https://discuss.elastic.co/t/conditionally-merge-values-from-2-fields-into-1-new-field/240436)
**Author:** [@ericl](https://discuss.elastic.co/u/ericl)\ **Replies:** 1\ **Last updated:** [July 9, 2020, 12:44am UTC](https://discuss.elastic.co/t/conditionally-merge-values-from-2-fields-into-1-new-field/240436 "2020-07-09T00:44:53Z")
I'm looking for a recommended way to copy value either from field1 or field2, whichever is not empty and field2 take precedence over field1, into a third field name field3 I was trying to do that with scripted fields, I… --- ## [Filter with multiple string queries with wildcard](https://discuss.elastic.co/t/filter-with-multiple-string-queries-with-wildcard/240432)
**Author:** [@okemu](https://discuss.elastic.co/u/okemu)\ **Replies:** 0\ **Last updated:** [July 8, 2020, 9:41pm UTC](https://discuss.elastic.co/t/filter-with-multiple-string-queries-with-wildcard/240432 "2020-07-08T21:41:32Z")
Hello, I'm new to Elasticsearch and would greatly appreciate help on this In the query below I only want the first document to be returned, but instead both documents are returned. How can I write a query to allow wildc… --- ## [How many user are logging in to kibana?](https://discuss.elastic.co/t/how-many-user-are-logging-in-to-kibana/240430)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [July 8, 2020, 10:06pm UTC](https://discuss.elastic.co/t/how-many-user-are-logging-in-to-kibana/240430 "2020-07-08T22:06:43Z")
I am running 7.8.0 enable xpack.security.audit.enabled: true in kibana.yml where are these two information going, which index or log? saved\_objects\_authorization\_success saved\_objects\_authorization\_failure --- ## [Question in using elasticsearch-certutil to generate cert](https://discuss.elastic.co/t/question-in-using-elasticsearch-certutil-to-generate-cert/240433)
**Author:** [@azteker](https://discuss.elastic.co/u/azteker)\ **Replies:** 0\ **Last updated:** [July 8, 2020, 9:46pm UTC](https://discuss.elastic.co/t/question-in-using-elasticsearch-certutil-to-generate-cert/240433 "2020-07-08T21:46:04Z")
I have generated elastic-stack-ca.p12 Then I use this command to generate crt and key files for logstash. ./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12 --name logstash --dns \[?\] --ip \[elk server's ip\] --p… --- ## [Query multiple indexes](https://discuss.elastic.co/t/query-multiple-indexes/240396)
**Author:** [@sai\_16](https://discuss.elastic.co/u/sai_16)\ **Replies:** 1\ **Last updated:** [July 8, 2020, 9:42pm UTC](https://discuss.elastic.co/t/query-multiple-indexes/240396 "2020-07-08T21:42:38Z")
I need to perform this,how is it possible? I have index1 - with cpu,mem,hostname details. index-2 with location details. Now i need to fetch cpu,mem information of hostnames starting with host\* and location is bgl.How… --- ## [Matching combined words in elasticsearch?](https://discuss.elastic.co/t/matching-combined-words-in-elasticsearch/240284)
**Author:** [@jnatten](https://discuss.elastic.co/u/jnatten)\ **Replies:** 0\ **Last updated:** [July 8, 2020, 7:32am UTC](https://discuss.elastic.co/t/matching-combined-words-in-elasticsearch/240284 "2020-07-08T07:32:54Z")
Hi, We're using Elasticsearch for providing content search for users on our website, and I have a question regarding combined/compound words. In our language (Norwegian) "combined words" are a very regular occurrence, … --- ## [Need to fetch Avg CPU values for a particular set of hosts](https://discuss.elastic.co/t/need-to-fetch-avg-cpu-values-for-a-particular-set-of-hosts/240323)
**Author:** [@sai\_16](https://discuss.elastic.co/u/sai_16)\ **Replies:** 0\ **Last updated:** [July 8, 2020, 10:29am UTC](https://discuss.elastic.co/t/need-to-fetch-avg-cpu-values-for-a-particular-set-of-hosts/240323 "2020-07-08T10:29:35Z")
I want to fetch all the records of avg cpu and memory usage for a particular set of hosts,with one hour of granularity. I'm using below query { "size": 0, "\_source" : \["@timestamp","beat.name","system.memory.used.pct",… --- ## [RSS Feeds ingestion](https://discuss.elastic.co/t/rss-feeds-ingestion/240332)
**Author:** [@anu\_gaur](https://discuss.elastic.co/u/anu_gaur)\ **Replies:** 0\ **Last updated:** [July 8, 2020, 11:16am UTC](https://discuss.elastic.co/t/rss-feeds-ingestion/240332 "2020-07-08T11:16:26Z")
Hi, I have elasticsearch on elastic cloud deployment. I want to ingest RSS feeds into the elasticsearch on elastic cloud. Could you please guide for the same. --- ## [Received response for a request that has timed out Issue & \[o.e.c.c.C.CoordinatorPublication\] \[Master Node Name\] after \[30s\] publication of cluster state version \[number\] is still waiting for {Data Node Name}](https://discuss.elastic.co/t/received-response-for-a-request-that-has-timed-out-issue-o-e-c-c-c-coordinatorpublication-master-node-name-after-30s-publication-of-cluster-state-version-number-is-still-waiting-for-data-node-name/240353)
**Author:** [@ankitag79](https://discuss.elastic.co/u/ankitag79)\ **Replies:** 0\ **Last updated:** [July 8, 2020, 1:31pm UTC](https://discuss.elastic.co/t/received-response-for-a-request-that-has-timed-out-issue-o-e-c-c-c-coordinatorpublication-master-node-name-after-30s-publication-of-cluster-state-version-number-is-still-waiting-for-data-node-name/240353 "2020-07-08T13:31:46Z")
Hi, Obviously, this error indicates cluster overload but this has become more frequent after adding more data nodes to cluster and separating out master only nodes. Also the throughput of the cluster has reduced. There… --- ## [Fetching all the buckets using Composite Search](https://discuss.elastic.co/t/fetching-all-the-buckets-using-composite-search/240381)
**Author:** [@ankitagarwal9156](https://discuss.elastic.co/u/ankitagarwal9156)\ **Replies:** 0\ **Last updated:** [July 8, 2020, 3:30pm UTC](https://discuss.elastic.co/t/fetching-all-the-buckets-using-composite-search/240381 "2020-07-08T15:30:09Z")
Is there any way to fetch all the buckets (without pagination) using composite aggregation? Right now by default 10 buckets are returned. --- ## [Hora errada en el Log de Kibana](https://discuss.elastic.co/t/hora-errada-en-el-log-de-kibana/238754)
**Author:** [@Consultoria\_SI](https://discuss.elastic.co/u/Consultoria_SI)\ **Replies:** 3\ **Last updated:** [July 8, 2020, 9:21pm UTC](https://discuss.elastic.co/t/hora-errada-en-el-log-de-kibana/238754 "2020-07-08T21:21:31Z")
Buenas Tardes, Tengo instalado kibana y cuando quiero validar el log me sale una hora diferente a la configurada en el sistema. ¿Alguna forma solucionar este problema? --- ## [How to fetch the count of the documents from the sql query translate](https://discuss.elastic.co/t/how-to-fetch-the-count-of-the-documents-from-the-sql-query-translate/240394)
**Author:** [@Jayasri\_Cimba](https://discuss.elastic.co/u/Jayasri_Cimba)\ **Replies:** 0\ **Last updated:** [July 8, 2020, 4:06pm UTC](https://discuss.elastic.co/t/how-to-fetch-the-count-of-the-documents-from-the-sql-query-translate/240394 "2020-07-08T16:06:46Z")
I translate this elastic query sql POST \_sql?translate { "query": "SELECT HISTOGRAM(\\"@timestamp\\", INTERVAL 1 MONTH) AS month, count(DISTINCT(ID)) as id\_count, report\_period FROM \\"indexname-\*\\" WHERE \\"@t… --- ## [Horizontal Bar calculation string](https://discuss.elastic.co/t/horizontal-bar-calculation-string/240341)
**Author:** [@Anton91](https://discuss.elastic.co/u/Anton91)\ **Replies:** 1\ **Last updated:** [July 8, 2020, 8:41pm UTC](https://discuss.elastic.co/t/horizontal-bar-calculation-string/240341 "2020-07-08T20:41:55Z")
Hello, i have the following question: I have a string field and i want to count it and then divide it by the sum and calculate \*100 at the end. Theoretically I want to find out what percentage of each application uses a… --- ## [Specifying match\_phrases to search for dynamically](https://discuss.elastic.co/t/specifying-match-phrases-to-search-for-dynamically/238537)
**Author:** [@chari](https://discuss.elastic.co/u/chari)\ **Replies:** 1\ **Last updated:** [July 8, 2020, 8:21pm UTC](https://discuss.elastic.co/t/specifying-match-phrases-to-search-for-dynamically/238537 "2020-07-08T20:21:25Z")
I have a list of bigrams that I would like to search for. How can I specify each of them dynamically ? "query" : { "bool" : { "must": \[ … --- ## [Parsing Error Logs with line breaks](https://discuss.elastic.co/t/parsing-error-logs-with-line-breaks/240419)
**Author:** [@milkene](https://discuss.elastic.co/u/milkene)\ **Replies:** 1\ **Last updated:** [July 8, 2020, 7:49pm UTC](https://discuss.elastic.co/t/parsing-error-logs-with-line-breaks/240419 "2020-07-08T19:49:27Z")
Hi, I am trying to parse logs with Logstash using Grok filters. Most of the logs are a single line but some have line breaks and spaces between them. Is there a way to get Logstash to recognize them as one log rather tha… --- ## [Simple query string, default operator and, doesn't work with nested objects](https://discuss.elastic.co/t/simple-query-string-default-operator-and-doesnt-work-with-nested-objects/240426)
**Author:** [@pilo](https://discuss.elastic.co/u/pilo)\ **Replies:** 1\ **Last updated:** [July 8, 2020, 7:48pm UTC](https://discuss.elastic.co/t/simple-query-string-default-operator-and-doesnt-work-with-nested-objects/240426 "2020-07-08T19:48:36Z")
Hello everyone, as mentioned in the title, seem like simple\_query\_string with default operator and doesn't work with nested data type. For example, i have a mapping like bellow: PUT test1 { "mappings": { "propert… --- ## [Creating dropdowns within a dashboard to select particular visualisation](https://discuss.elastic.co/t/creating-dropdowns-within-a-dashboard-to-select-particular-visualisation/240224)
**Author:** [@Ram2416](https://discuss.elastic.co/u/Ram2416)\ **Replies:** 2\ **Last updated:** [July 8, 2020, 7:39pm UTC](https://discuss.elastic.co/t/creating-dropdowns-within-a-dashboard-to-select-particular-visualisation/240224 "2020-07-08T19:39:14Z")
Hi, I've currently multiple visualizations embedded within a dashboard. When I open the dashboard, What I see is all the visualizations present in the dashboard all at once. I would like to know if there is any way aro… --- ## [Different results in different graphs - same data in kibana](https://discuss.elastic.co/t/different-results-in-different-graphs-same-data-in-kibana/240292)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 1\ **Last updated:** [July 8, 2020, 6:51pm UTC](https://discuss.elastic.co/t/different-results-in-different-graphs-same-data-in-kibana/240292 "2020-07-08T18:51:22Z")
Hi, I'm using this visualization in kibana - filebeat : Top pages \[Filebeat Nginx\] ECS In the (Time Series) , I can see that robots.txt has 5 visits, but when switching to the (Top N) tab robots.txt value is zero! Als… --- ## [Getting Error in ingest pipeline](https://discuss.elastic.co/t/getting-error-in-ingest-pipeline/240042)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 1\ **Last updated:** [July 8, 2020, 5:20pm UTC](https://discuss.elastic.co/t/getting-error-in-ingest-pipeline/240042 "2020-07-08T17:20:52Z")
Hi, We are using filebeat and ingest pipeline to load the csv data file. if the last value is null in any line, getting error while mapping the field headers in ingest pipeline for those lines. Sample ingest pipeline: … --- ## [Problem removing nested object using UpdateByQuery](https://discuss.elastic.co/t/problem-removing-nested-object-using-updatebyquery/240409)
**Author:** [@maynestream](https://discuss.elastic.co/u/maynestream)\ **Replies:** 0\ **Last updated:** [July 8, 2020, 5:15pm UTC](https://discuss.elastic.co/t/problem-removing-nested-object-using-updatebyquery/240409 "2020-07-08T17:15:25Z")
Hi all, Apologies if there are similar answers, I have extensively searched, but this does appear to be quite a niche problem. As the title suggests, I have a scenario where I am using UpdateByQuery (java API) using gr… --- ## [Register FieldFormat plugin in v. 7.6.2](https://discuss.elastic.co/t/register-fieldformat-plugin-in-v-7-6-2/240408)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 0\ **Last updated:** [July 8, 2020, 5:13pm UTC](https://discuss.elastic.co/t/register-fieldformat-plugin-in-v-7-6-2/240408 "2020-07-08T17:13:45Z")
This is basically the same question as this post: But this one does not have a solution, at the very least the last post does not solve my issue. Although I believe there are typos in the last post also. I am trying t… --- ## [Flatten json and create dynamic field](https://discuss.elastic.co/t/flatten-json-and-create-dynamic-field/240360)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 9\ **Last updated:** [July 8, 2020, 5:03pm UTC](https://discuss.elastic.co/t/flatten-json-and-create-dynamic-field/240360 "2020-07-08T17:03:23Z")
I know ruby will be involve I have try few code that I found on forum. but didn't work out here is my input message =\> '{"jobid":348332180, "runtime":{"cputime": 24, "totalelapsed": 105},"dataflow":\[{"gate": "v204.06",… --- ## [Logstash windows memory offset delete](https://discuss.elastic.co/t/logstash-windows-memory-offset-delete/240347)
**Author:** [@amaleswar](https://discuss.elastic.co/u/amaleswar)\ **Replies:** 4\ **Last updated:** [July 8, 2020, 4:17pm UTC](https://discuss.elastic.co/t/logstash-windows-memory-offset-delete/240347 "2020-07-08T16:17:28Z")
Hello Team, I want to delete anything after dll, example showing below. I\`m trying to use mutate gsub but failing Parsed data: "CallTrace" =\> \[ \[ 0\] "c:\\windows\\system32\\nll.dll+92c34", \[ 1\] "c:\\windows\\system32\\ker… --- ## [Find documents that might have unindexed fields](https://discuss.elastic.co/t/find-documents-that-might-have-unindexed-fields/239709)
**Author:** [@ddreier](https://discuss.elastic.co/u/ddreier)\ **Replies:** 3\ **Last updated:** [July 8, 2020, 4:14pm UTC](https://discuss.elastic.co/t/find-documents-that-might-have-unindexed-fields/239709 "2020-07-08T16:14:03Z")
We recently disabled dynamic field mapping on one of our logging index templates after a field explosion basically took down our cluster. Most documents (log lines) coming into the indices should only have fields that a… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1341) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1343)