# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1358 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1359 --- ## [How to format or delete typical bold "filters" field in a visualization](https://discuss.elastic.co/t/how-to-format-or-delete-typical-bold-filters-field-in-a-visualization/239276)
**Author:** [@Juanjo\_Herrero\_Berme](https://discuss.elastic.co/u/Juanjo_Herrero_Berme)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 11:03am UTC](https://discuss.elastic.co/t/how-to-format-or-delete-typical-bold-filters-field-in-a-visualization/239276 "2020-06-30T11:03:15Z")
Hi, im looking for a way to delete or format the typical "filters" field (in bold default) in many visualizations in order to make a presentation more beautiful visually. I'm working in Kibana 7.3.0 now. Some examples: … --- ## [Kibana control Logstash](https://discuss.elastic.co/t/kibana-control-logstash/239275)
**Author:** [@Jasmin](https://discuss.elastic.co/u/Jasmin)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 11:00am UTC](https://discuss.elastic.co/t/kibana-control-logstash/239275 "2020-06-30T11:00:16Z")
Hi , i want when kibana user specify exact date this date is writing to logstash : select \* from Tables where date = "variable" if this date does'nt exist on elasticsearch , so the logstash only select information wan… --- ## [Select Only new entries from Mssql](https://discuss.elastic.co/t/select-only-new-entries-from-mssql/239268)
**Author:** [@Jasmin](https://discuss.elastic.co/u/Jasmin)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 10:13am UTC](https://discuss.elastic.co/t/select-only-new-entries-from-mssql/239268 "2020-06-30T10:13:01Z")
Hi, Logstash is listening to MSSQL using JBCD connector , i want to make logstash select only new entires because i have millions of Tables , and select them all every time gonna make MSSQL so Slow . so How can i mak… --- ## [Flag a result based on a ES "sub" query](https://discuss.elastic.co/t/flag-a-result-based-on-a-es-sub-query/239269)
**Author:** [@PeteAllison](https://discuss.elastic.co/u/PeteAllison)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 10:06am UTC](https://discuss.elastic.co/t/flag-a-result-based-on-a-es-sub-query/239269 "2020-06-30T10:06:54Z")
Hi all! Hopefully somebody is able to assist or point me in the right direction with this. I look after an online store and we use Elasticsearch (v 5.5) for all of our product lookups. We want to implement functionali… --- ## [Querying syslog data to fetch unique error messages](https://discuss.elastic.co/t/querying-syslog-data-to-fetch-unique-error-messages/239259)
**Author:** [@N220](https://discuss.elastic.co/u/N220)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 9:07am UTC](https://discuss.elastic.co/t/querying-syslog-data-to-fetch-unique-error-messages/239259 "2020-06-30T09:07:35Z")
Here is the query I have tried.... Although I have kept filter\_duplicate\_text as true still I get messages of the form {"............June 3 time stamp ...log message.............."} I want to filter out all these duplica… --- ## [Elastsicsearch: Odd Behaviour on Index Deletion](https://discuss.elastic.co/t/elastsicsearch-odd-behaviour-on-index-deletion/237747)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 7\ **Last updated:** [June 30, 2020, 9:04am UTC](https://discuss.elastic.co/t/elastsicsearch-odd-behaviour-on-index-deletion/237747 "2020-06-30T09:04:50Z")
Hi, I'm running elasticsearch 6.8.6 and am seeing this odd behaviour on deleting an old filebeat index. Here is the log from the master node which shows what's happening: \[2020-06-19T07:06:30,899\]\[INFO \]\[o.e.c.m.MetaDa… --- ## [Beat doesn't take in count index template configuration](https://discuss.elastic.co/t/beat-doesnt-take-in-count-index-template-configuration/239258)
**Author:** [@NeitoFR](https://discuss.elastic.co/u/NeitoFR)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 9:04am UTC](https://discuss.elastic.co/t/beat-doesnt-take-in-count-index-template-configuration/239258 "2020-06-30T09:04:15Z")
I'm using the ELK Stack in version 7.5.2 in Docker container on a CentOS7 AWS Machine. My goal is to load filebeat Kibana dashboards with custom index pattern set (to replace the filebeat-\* default). Here is the beginn… --- ## [Highlights not returned for multiple queries on the same JSON object field](https://discuss.elastic.co/t/highlights-not-returned-for-multiple-queries-on-the-same-json-object-field/239140)
**Author:** [@CPot](https://discuss.elastic.co/u/CPot)\ **Replies:** 2\ **Last updated:** [June 30, 2020, 9:00am UTC](https://discuss.elastic.co/t/highlights-not-returned-for-multiple-queries-on-the-same-json-object-field/239140 "2020-06-30T09:00:09Z")
Hi all, I have the following query: With ES 7.5 "query": { "bool": { "must": \[ { "term": { "siren": "493754261" } } \], "should": \[ { … --- ## [How can I show average by 2 month from TSVB?](https://discuss.elastic.co/t/how-can-i-show-average-by-2-month-from-tsvb/234675)
**Author:** [@Ethonwu](https://discuss.elastic.co/u/Ethonwu)\ **Replies:** 2\ **Last updated:** [June 30, 2020, 8:26am UTC](https://discuss.elastic.co/t/how-can-i-show-average-by-2-month-from-tsvb/234675 "2020-06-30T08:26:44Z")
Hello , I am ELK rookie I have a small question wanna ask here How can I show average by 2 month from TSVB ? Here is sample data like this : date Execution Time Job Name 20200102 … --- ## [About the installed plugins when upgrade Java (8 - \> 11)](https://discuss.elastic.co/t/about-the-installed-plugins-when-upgrade-java-8-11/239236)
**Author:** [@Hyunsoo\_Shim](https://discuss.elastic.co/u/Hyunsoo_Shim)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 8:11am UTC](https://discuss.elastic.co/t/about-the-installed-plugins-when-upgrade-java-8-11/239236 "2020-06-30T08:11:01Z")
Hello, We are using Elasticsearch 6.5.2 on Java 8 currently, and have a plan to upgrade Java 11 for using G1GC safely. But, we have already installed many custom plugins made of Java 8. Do we need to install them aga… --- ## [Query about cluster metadata file - global.sts](https://discuss.elastic.co/t/query-about-cluster-metadata-file-global-sts/239128)
**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\ **Replies:** 3\ **Last updated:** [June 30, 2020, 7:36am UTC](https://discuss.elastic.co/t/query-about-cluster-metadata-file-global-sts/239128 "2020-06-30T07:36:04Z")
Hi, I have an Elasticsearch cluster with version 6.6.1. I have 14 data nodes, 3 master nodes, 3 client nodes. When I check in the above elasticsearch nodes under data/nodes/0/\_state folder I can see different version o… --- ## [Cannot set up script\_score for dense\_vector using Java REST API](https://discuss.elastic.co/t/cannot-set-up-script-score-for-dense-vector-using-java-rest-api/238849)
**Author:** [@ivanqwam](https://discuss.elastic.co/u/ivanqwam)\ **Replies:** 2\ **Last updated:** [June 29, 2020, 4:34pm UTC](https://discuss.elastic.co/t/cannot-set-up-script-score-for-dense-vector-using-java-rest-api/238849 "2020-06-29T16:34:25Z")
I want to search similar sentences using dense vectors calculated by BERT. I am following this great paper in french or english I indexed sentences with each having a dense\_vector calculated by BERT. I ran this query … --- ## [Is it possible to suppress gc logs in filebeat elasticsearch module?](https://discuss.elastic.co/t/is-it-possible-to-suppress-gc-logs-in-filebeat-elasticsearch-module/239066)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 2:48am UTC](https://discuss.elastic.co/t/is-it-possible-to-suppress-gc-logs-in-filebeat-elasticsearch-module/239066 "2020-06-30T02:48:56Z")
I tried editing the elasticsearch.yml file in modules.d folder but it does not seem to be working I tried both commenting out gc section and tried gc.enabled: false but none of them seem to be working. When this module… --- ## [Cases - Disable external systems prompt](https://discuss.elastic.co/t/cases-disable-external-systems-prompt/239197)
**Author:** [@tacomaster](https://discuss.elastic.co/u/tacomaster)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 1:59am UTC](https://discuss.elastic.co/t/cases-disable-external-systems-prompt/239197 "2020-06-30T01:59:21Z")
Is there a way to permanently disable the "To send cases to external systems, you need to" prompt that asks to "Upgrade to Elastic Platinum"/"Configure external connector". Right now if I dismiss it, the same prompt come… --- ## [Monitoring cluster logstash error](https://discuss.elastic.co/t/monitoring-cluster-logstash-error/238795)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 4\ **Last updated:** [June 30, 2020, 12:53am UTC](https://discuss.elastic.co/t/monitoring-cluster-logstash-error/238795 "2020-06-30T00:53:18Z")
Hi all, I currently have a ELK stack in product and have metricbeat setup on every node logstash instances pushing metric and monitoring data to a separate monitoring cluster. Everything was working in 7.7.1, but since… --- ## [How to implement handlers to render my own data with Search UI](https://discuss.elastic.co/t/how-to-implement-handlers-to-render-my-own-data-with-search-ui/239204)
**Author:** [@spadel](https://discuss.elastic.co/u/spadel)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 12:14am UTC](https://discuss.elastic.co/t/how-to-implement-handlers-to-render-my-own-data-with-search-ui/239204 "2020-06-30T00:14:15Z")
I worked through the Elastic Search UI on github and finally found what I need, to render my own data: It seems like I can implement a handler, that takes the search query, so that I can send it to my API and render m… --- ## [How schedule periodic task but execute when Logstash instance starts?](https://discuss.elastic.co/t/how-schedule-periodic-task-but-execute-when-logstash-instance-starts/238899)
**Author:** [@Fabio\_Naspolini](https://discuss.elastic.co/u/Fabio_Naspolini)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 10:35pm UTC](https://discuss.elastic.co/t/how-schedule-periodic-task-but-execute-when-logstash-instance-starts/238899 "2020-06-29T22:35:29Z")
How schedule periodic task but execute on Logstash instance starts? I need to schedule tasks to execute every hour, but I need force re-execute this when Logstash service restarted. How to do this? Thank you! --- ## [Sflow data into Kafka?](https://discuss.elastic.co/t/sflow-data-into-kafka/236613)
**Author:** [@ceekay](https://discuss.elastic.co/u/ceekay)\ **Replies:** 1\ **Last updated:** [June 29, 2020, 9:45pm UTC](https://discuss.elastic.co/t/sflow-data-into-kafka/236613 "2020-06-29T21:45:25Z")
HI there, I'm shipping sflow data into my Elastic Stack, using Elastiflow's filters and dashboards. Input is UDP with sflow codec. My architecture has Logstash ingress nodes which are only doing minimal processing, and… --- ## [Update 2 million record with a correct format of country prefix in phone number field](https://discuss.elastic.co/t/update-2-million-record-with-a-correct-format-of-country-prefix-in-phone-number-field/239152)
**Author:** [@meena](https://discuss.elastic.co/u/meena)\ **Replies:** 2\ **Last updated:** [June 29, 2020, 9:19pm UTC](https://discuss.elastic.co/t/update-2-million-record-with-a-correct-format-of-country-prefix-in-phone-number-field/239152 "2020-06-29T21:19:12Z")
Hi, Am not an Expert on elastic search but would like to update around 2 million records in my database with a country prefix to be added to the phone number field in correct format. My phone number field lies under ne… --- ## [How can I do a “match\_phrase” that ranks solely on “does the phrase exists”?](https://discuss.elastic.co/t/how-can-i-do-a-match-phrase-that-ranks-solely-on-does-the-phrase-exists/238976)
**Author:** [@chrislentz](https://discuss.elastic.co/u/chrislentz)\ **Replies:** 1\ **Last updated:** [June 29, 2020, 8:57pm UTC](https://discuss.elastic.co/t/how-can-i-do-a-match-phrase-that-ranks-solely-on-does-the-phrase-exists/238976 "2020-06-29T20:57:35Z")
Is there a way to make “match\_phrase” only look for a match, but not take other things into account, like the match in relation to other terms in the text field? i.e. If I search "star wars", "Star Wars: Revelations" re… --- ## [Auditbeat reliance on auditd](https://discuss.elastic.co/t/auditbeat-reliance-on-auditd/239193)
**Author:** [@perfecto25](https://discuss.elastic.co/u/perfecto25)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 8:49pm UTC](https://discuss.elastic.co/t/auditbeat-reliance-on-auditd/239193 "2020-06-29T20:49:22Z")
Hello, question, on my Centos7 servers, if I install auditbeat, do I need to have auditd process running or is auditbeat able to pick up all audit events by itself? Should I run both auditd and auditbeat services, or o… --- ## [Use Bind-Mounted Setting for Local Config File?](https://discuss.elastic.co/t/use-bind-mounted-setting-for-local-config-file/238500)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 5\ **Last updated:** [June 29, 2020, 8:27pm UTC](https://discuss.elastic.co/t/use-bind-mounted-setting-for-local-config-file/238500 "2020-06-29T20:27:31Z")
Hello Logstash Wizards, I’m struggling to understand how I can spin up a Logstash Docker container using bind-mounted settings (see here) to run the container with a config file on the local host. To explain: Let’s say… --- ## [Parsing filter for nested json](https://discuss.elastic.co/t/parsing-filter-for-nested-json/239180)
**Author:** [@korrmal](https://discuss.elastic.co/u/korrmal)\ **Replies:** 1\ **Last updated:** [June 29, 2020, 8:26pm UTC](https://discuss.elastic.co/t/parsing-filter-for-nested-json/239180 "2020-06-29T20:26:52Z")
Hi. I have input string {'message': 'send data to', 'payload': {'params': {'cardNo': '77'}}, 'remote-url': 'https://api.com/status', 'cookie': {}, 'headers': {'User-Agent': 'req', 'Accept-Encoding': 'gzip, deflate', 'A… --- ## [Add Nested Field Value to a new field using Logstash Filter](https://discuss.elastic.co/t/add-nested-field-value-to-a-new-field-using-logstash-filter/239151)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 6\ **Last updated:** [June 29, 2020, 8:26pm UTC](https://discuss.elastic.co/t/add-nested-field-value-to-a-new-field-using-logstash-filter/239151 "2020-06-29T20:26:14Z")
Hello All, I hope someone here could help me as I have been stuck for days on this issue I am facing. I have got the kibana output as shown below: I am trying to add the nested field value of "key" into a new field c… --- ## [Transform kills the whole cluster](https://discuss.elastic.co/t/transform-kills-the-whole-cluster/237294)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 8:25pm UTC](https://discuss.elastic.co/t/transform-kills-the-whole-cluster/237294 "2020-06-29T20:25:12Z")
Hi I'm using elastic cloud (cloud.elastic.co) I'm not sure if that's the correct category, but I want to run a transform for the past 6 month, and it's killing the cpu. the whole cluster becomes unresponsive (queries, k… --- ## [Error client.addTransportAddress(new TransportAddress(InetAddress.getByName("localhost"), 9300));](https://discuss.elastic.co/t/error-client-addtransportaddress-new-transportaddress-inetaddress-getbyname-localhost-9300/239098)
**Author:** [@Najib\_Ghlissi](https://discuss.elastic.co/u/Najib_Ghlissi)\ **Replies:** 1\ **Last updated:** [June 29, 2020, 7:52pm UTC](https://discuss.elastic.co/t/error-client-addtransportaddress-new-transportaddress-inetaddress-getbyname-localhost-9300/239098 "2020-06-29T19:52:24Z")
hi All developers i have i error in my projetct Exception in thread "main" NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{zSavWRA4QBGzdYdox-h2Aw}{localhost}{127.0.0.1:9300}\]\] att … --- ## [Transforms cannot group by boolean](https://discuss.elastic.co/t/transforms-cannot-group-by-boolean/238752)
**Author:** [@Xavier\_Marti\_Bofill](https://discuss.elastic.co/u/Xavier_Marti_Bofill)\ **Replies:** 1\ **Last updated:** [June 29, 2020, 7:46pm UTC](https://discuss.elastic.co/t/transforms-cannot-group-by-boolean/238752 "2020-06-29T19:46:28Z")
When I try to add a boolean field into the group\_by list of a transform, preview returns me an error: "type" : "illegal\_argument\_exception", "reason" : "Value of type \[class java.lang.Boolean\] is not supported" Am I u… --- ## [How to create a default index pattern via kibana api](https://discuss.elastic.co/t/how-to-create-a-default-index-pattern-via-kibana-api/238905)
**Author:** [@damasu](https://discuss.elastic.co/u/damasu)\ **Replies:** 2\ **Last updated:** [June 29, 2020, 7:19pm UTC](https://discuss.elastic.co/t/how-to-create-a-default-index-pattern-via-kibana-api/238905 "2020-06-29T19:19:10Z")
Using the experimental Kibana 7.8 API, how can i create a DEFAULT index pattern. I am calling the api as such: http://kibana:5601/s/\/api/saved\_objects/index-pattern/dummy\_index\_pattern { "attributes": { … --- ## [Weird field names with Transforms](https://discuss.elastic.co/t/weird-field-names-with-transforms/238597)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 7:34pm UTC](https://discuss.elastic.co/t/weird-field-names-with-transforms/238597 "2020-06-29T19:34:07Z")
I used a text field to group my data - STATE, although the input to the grouping was STATE.keyword. Then I defined a second level transfrom that took my hourly data and rolled it up to daily data, also grouping it by st… --- ## [Ask for advice on elastic search client](https://discuss.elastic.co/t/ask-for-advice-on-elastic-search-client/239178)
**Author:** [@kendraschwartz](https://discuss.elastic.co/u/kendraschwartz)\ **Replies:** 0\ **Last updated:** [June 29, 2020, 7:33pm UTC](https://discuss.elastic.co/t/ask-for-advice-on-elastic-search-client/239178 "2020-06-29T19:33:19Z")
Hello, I want to be able to pass in "server\_hostname" to the elastic search python client. Because I would like to give an IP address and still have the SSL work. Do you have any suggestions? [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1357) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1359)