# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1385 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1386 --- ## [Creating a visualization that uses filter ratios to see utilization rate of a certain field](https://discuss.elastic.co/t/creating-a-visualization-that-uses-filter-ratios-to-see-utilization-rate-of-a-certain-field/237308)
**Author:** [@Rietty](https://discuss.elastic.co/u/Rietty)\ **Replies:** 5\ **Last updated:** [June 16, 2020, 2:55pm UTC](https://discuss.elastic.co/t/creating-a-visualization-that-uses-filter-ratios-to-see-utilization-rate-of-a-certain-field/237308 "2020-06-16T14:55:00Z")
Hi! I have a very simple query that I need to make with a dashboard/visualization, but can't figure out how. I believe I need to use the visualization builder widget and filter ratios for this, but perhaps there is a bet… --- ## [Grouped bar chart - Canvas](https://discuss.elastic.co/t/grouped-bar-chart-canvas/237151)
**Author:** [@Cate](https://discuss.elastic.co/u/Cate)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 2:16pm UTC](https://discuss.elastic.co/t/grouped-bar-chart-canvas/237151 "2020-06-16T14:16:24Z")
Hi, I would like to create a grouped bar chart i Canvas. In Kibana - Visualize it is possible to create group bar chart using Buckets - Split series. How is it possible to achieve the same result in Canvas? Thanks for… --- ## [Analyzers returning exact word](https://discuss.elastic.co/t/analyzers-returning-exact-word/237201)
**Author:** [@Kevin\_Juliano](https://discuss.elastic.co/u/Kevin_Juliano)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 1:57pm UTC](https://discuss.elastic.co/t/analyzers-returning-exact-word/237201 "2020-06-16T13:57:11Z")
Hi! I successfully indexed and configure phonetic and synonym analyzers, but my problem now is, when I search a word or a phrase, it is returning the exact thing instead of just returning the synonym or the soundex of t… --- ## ["doc\_values: False" not working for simple\_query\_string](https://discuss.elastic.co/t/doc-values-false-not-working-for-simple-query-string/237310)
**Author:** [@cool\_arun](https://discuss.elastic.co/u/cool_arun)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 1:42pm UTC](https://discuss.elastic.co/t/doc-values-false-not-working-for-simple-query-string/237310 "2020-06-16T13:42:49Z")
Hi, I've set "doc\_values": false for some fields because of this when I try to use this in simple\_query\_string it's not searching over those fields, but if I remove the fields parameter from simple\_query\_string it search… --- ## ["SMTP to Internet" signal detection rule is not fired up by Elastic SIEM](https://discuss.elastic.co/t/smtp-to-internet-signal-detection-rule-is-not-fired-up-by-elastic-siem/236754)
**Author:** [@jelocabral](https://discuss.elastic.co/u/jelocabral)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 1:35pm UTC](https://discuss.elastic.co/t/smtp-to-internet-signal-detection-rule-is-not-fired-up-by-elastic-siem/236754 "2020-06-16T13:35:04Z")
Hi people, I'm new at this forum so nice to meet you. I'm testing the detection power of Elastic SIEM and in some cases it doesn't detect the rule events. This is a case: Signal detection rule: SMTP to Internet (it's a… --- ## [Differences between 2 groups of documents by multiple criteria](https://discuss.elastic.co/t/differences-between-2-groups-of-documents-by-multiple-criteria/237300)
**Author:** [@mihailo](https://discuss.elastic.co/u/mihailo)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 1:32pm UTC](https://discuss.elastic.co/t/differences-between-2-groups-of-documents-by-multiple-criteria/237300 "2020-06-16T13:32:45Z")
Hello everyone, Please take a look at this dummy documents: \[ { "project": "a", "run": 1, "tool\_name": "tool\_1", "tool\_output": "abc.com" }, { "project": "a", … --- ## [Visalization with aggregate and bucket\_script](https://discuss.elastic.co/t/visalization-with-aggregate-and-bucket-script/237301)
**Author:** [@David70](https://discuss.elastic.co/u/David70)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 1:12pm UTC](https://discuss.elastic.co/t/visalization-with-aggregate-and-bucket-script/237301 "2020-06-16T13:12:51Z")
I'm trying to create a visualization based on the number of days between createdAt and publishedAt. I'm struggling to add the aggregation based on a bucket\_script to Kibana's visualization tab. How do I do it? Below is … --- ## [Implement cross\_field in simple\_query\_string](https://discuss.elastic.co/t/implement-cross-field-in-simple-query-string/237304)
**Author:** [@pilo](https://discuss.elastic.co/u/pilo)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 1:12pm UTC](https://discuss.elastic.co/t/implement-cross-field-in-simple-query-string/237304 "2020-06-16T13:12:39Z")
can we use cross\_fields mode in simple\_query\_string ? I just read this topic about stopword analyzer in simple\_query\_string : This topic give me two perfect solutions: one is using cross\_field mode with multi\_ma… --- ## [Fs snapshot permission issues inside a kubernetes cluster](https://discuss.elastic.co/t/fs-snapshot-permission-issues-inside-a-kubernetes-cluster/237147)
**Author:** [@Rajashree\_Sekar](https://discuss.elastic.co/u/Rajashree_Sekar)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 1:06pm UTC](https://discuss.elastic.co/t/fs-snapshot-permission-issues-inside-a-kubernetes-cluster/237147 "2020-06-16T13:06:37Z")
Hi Team, I'm trying to take snapshot of elasticsearch which is deployed inside a kubernetes cluster. I'm trying to take backup on file system whereas Im getting below error. I understand that the default user will be … --- ## [Kibana Visualization with string filter](https://discuss.elastic.co/t/kibana-visualization-with-string-filter/235964)
**Author:** [@Santosh\_Boorlagadda](https://discuss.elastic.co/u/Santosh_Boorlagadda)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 12:28pm UTC](https://discuss.elastic.co/t/kibana-visualization-with-string-filter/235964 "2020-06-16T12:28:08Z")
Hi, I am trying to create a pie chart filtering two strings. I have to get a pie diagram on operation(my field) contains string with Add or subtract. Suppose If I have 10 documents with operation field string contains… --- ## [Rollup indexes - pattern definition and visualization](https://discuss.elastic.co/t/rollup-indexes-pattern-definition-and-visualization/237295)
**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 12:19pm UTC](https://discuss.elastic.co/t/rollup-indexes-pattern-definition-and-visualization/237295 "2020-06-16T12:19:32Z")
Hello, I'm using a rather old version (6.8), but have some problems/questions that hope had been addressed and solved in 7.x. (because, as it is in 6.8, rollup isn't that much useful (for visualization purposes, at lea… --- ## [Multiline XML not parsing](https://discuss.elastic.co/t/multiline-xml-not-parsing/237293)
**Author:** [@DWbank](https://discuss.elastic.co/u/DWbank)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 12:14pm UTC](https://discuss.elastic.co/t/multiline-xml-not-parsing/237293 "2020-06-16T12:14:35Z")
There are may different examples out here on how to take Nessus files and bring them in to Elastic via Logstash. I have read them and tried many different configs. Here is the XML file I am trying to read in. https://… --- ## [Issues with geoip data logstash and filebeat using iis logs](https://discuss.elastic.co/t/issues-with-geoip-data-logstash-and-filebeat-using-iis-logs/236933)
**Author:** [@genehunter29009](https://discuss.elastic.co/u/genehunter29009)\ **Replies:** 6\ **Last updated:** [June 16, 2020, 11:57am UTC](https://discuss.elastic.co/t/issues-with-geoip-data-logstash-and-filebeat-using-iis-logs/236933 "2020-06-16T11:57:56Z")
Having a hard time getting geoip to work. I have the latest current verion of filebeat and logstash. filebeat 7.7.7 template is loaded. one strange thing also I get like 6 ip addresses when I use geoip but nothing els… --- ## [Need help to simple sort aggregation by other field](https://discuss.elastic.co/t/need-help-to-simple-sort-aggregation-by-other-field/237287)
**Author:** [@Uli\_Kasper](https://discuss.elastic.co/u/Uli_Kasper)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 11:51am UTC](https://discuss.elastic.co/t/need-help-to-simple-sort-aggregation-by-other-field/237287 "2020-06-16T11:51:40Z")
Hi, my documents in the index have fields named "filter\_color" and "filter\_color\_value". "filter\_color" is an interger mapped field containing a number from 10 to 160. "filter\_color\_value" is a string field which cont… --- ## [TLS certificate generation from let's encrypt for csr from kibana](https://discuss.elastic.co/t/tls-certificate-generation-from-lets-encrypt-for-csr-from-kibana/237279)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 11:19am UTC](https://discuss.elastic.co/t/tls-certificate-generation-from-lets-encrypt-for-csr-from-kibana/237279 "2020-06-16T11:19:11Z")
Hello, In my kibana setup I've secured using elastic ca certs. Chrome, firefox don't like them. Chrome refuses to allow login to my app. I would like to know how to generate certificate from let's encrypt using the car… --- ## [Nested data type limit](https://discuss.elastic.co/t/nested-data-type-limit/237239)
**Author:** [@divya005](https://discuss.elastic.co/u/divya005)\ **Replies:** 5\ **Last updated:** [June 16, 2020, 10:02am UTC](https://discuss.elastic.co/t/nested-data-type-limit/237239 "2020-06-16T10:02:45Z")
Hello team, I have more than 100 nested items in my project and while fetching i need to get only 10 based on grouping.Can you please help me how to get this. --- ## [Got Invalid Frame Type Exception even Filebeat version is same which pointing to Logstash 5.6.14](https://discuss.elastic.co/t/got-invalid-frame-type-exception-even-filebeat-version-is-same-which-pointing-to-logstash-5-6-14/237255)
**Author:** [@ridwanbejo](https://discuss.elastic.co/u/ridwanbejo)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 8:40am UTC](https://discuss.elastic.co/t/got-invalid-frame-type-exception-even-filebeat-version-is-same-which-pointing-to-logstash-5-6-14/237255 "2020-06-16T08:40:48Z")
Hi Magnus, I have problems with Filebeat and Logstash setup. So I assigned to move logstash service to dockerize one. Then, I use logstash Docker with version 5.6.14. But I have an exception when attempt to redirect one… --- ## [Searching term with it's position range](https://discuss.elastic.co/t/searching-term-with-its-position-range/236984)
**Author:** [@Kazuki\_Matsuda](https://discuss.elastic.co/u/Kazuki_Matsuda)\ **Replies:** 3\ **Last updated:** [June 16, 2020, 9:26am UTC](https://discuss.elastic.co/t/searching-term-with-its-position-range/236984 "2020-06-16T09:26:44Z")
Hello, I have a following three document 1. \`{field: "one two three"}\` 2. \`{field: "x one two three"}\` 3. \`{field: "x y one two three"}\` Question: Can I query term tow with it's position range? Example: {match: "two",… --- ## [Elasticsearch performance issues after upgrade from 5.6 to 6.8](https://discuss.elastic.co/t/elasticsearch-performance-issues-after-upgrade-from-5-6-to-6-8/237264)
**Author:** [@ahronl](https://discuss.elastic.co/u/ahronl)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-performance-issues-after-upgrade-from-5-6-to-6-8/237264 "2020-06-16T09:13:24Z")
Hi, we upgraded our server from elasticsearch 5.6 to 6.8.6 and experience performance issues,, high cpu usage and frequent full GC. the cluster is 10 data nodes with 300~ shards, we have a daily index shards size very … --- ## [How to use memcached plugin in logstash](https://discuss.elastic.co/t/how-to-use-memcached-plugin-in-logstash/237256)
**Author:** [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 8:44am UTC](https://discuss.elastic.co/t/how-to-use-memcached-plugin-in-logstash/237256 "2020-06-16T08:44:21Z")
Hi, I am recently learning elk stack and paying more attention to logstash configs. most recently decided to use memcached plugin to get data from another server and write it to elasticsearch according to this url … --- ## [Centralized configuration with Wildcard is not working](https://discuss.elastic.co/t/centralized-configuration-with-wildcard-is-not-working/237120)
**Author:** [@Seraph](https://discuss.elastic.co/u/Seraph)\ **Replies:** 3\ **Last updated:** [June 16, 2020, 8:39am UTC](https://discuss.elastic.co/t/centralized-configuration-with-wildcard-is-not-working/237120 "2020-06-16T08:39:30Z")
Hello, I'm facing a problem concerning the centralized configuration and I've not been able to solve it for a couple of weeks and I don't know why. OS : Centos 7 Here is the think : I would like to use the shared conf… --- ## [Distributed Pipeline - Can the send\_to address be resolved from a variable?](https://discuss.elastic.co/t/distributed-pipeline-can-the-send-to-address-be-resolved-from-a-variable/237204)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 8:33am UTC](https://discuss.elastic.co/t/distributed-pipeline-can-the-send-to-address-be-resolved-from-a-variable/237204 "2020-06-16T08:33:25Z")
I have a working setup, where events come in from a single filebeat node, hit the log stash main pipeline which sends the event to one of 20 different pipelines. To do this there is an ugly if statement that does 20 str… --- ## [Elasticsearch on Kubernetes losing Cluster Connection every hour](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-losing-cluster-connection-every-hour/237086)
**Author:** [@fewagewasd](https://discuss.elastic.co/u/fewagewasd)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 8:23am UTC](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-losing-cluster-connection-every-hour/237086 "2020-06-16T08:23:47Z")
Hi, I am migrating an older application using elasticsearch 2.4 (I know that's a very old version, but I'm not able to upgrade at this point) to Kubernetes. I set it up using a StatefulSet and a headless service, which … --- ## [ElasticSearch cluster unreachable every night between 00.00 and 02.00](https://discuss.elastic.co/t/elasticsearch-cluster-unreachable-every-night-between-00-00-and-02-00/237249)
**Author:** [@Zeroc0pter](https://discuss.elastic.co/u/Zeroc0pter)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 8:15am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-unreachable-every-night-between-00-00-and-02-00/237249 "2020-06-16T08:15:36Z")
Hi fellows, I have a question regarding the 'possible' scheduled jobs of ElasticSeach. We monitor the application with cURL and run it every 30 seconds to inspect the HTTPS response. Somehow, we receive an unavailable e… --- ## [Indexing Rate is fluctuating](https://discuss.elastic.co/t/indexing-rate-is-fluctuating/237252)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 8:17am UTC](https://discuss.elastic.co/t/indexing-rate-is-fluctuating/237252 "2020-06-16T08:17:47Z")
The indexing rate is quite fluctuating. Is it normal? Is there any way to make it more stable? --- ## [Aggregationの結果を別のドキュメントに登録する方法](https://discuss.elastic.co/t/aggregation/237064)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 8:12am UTC](https://discuss.elastic.co/t/aggregation/237064 "2020-06-16T08:12:13Z")
とあるインデックスＡに対し、aggregationを実施した結果を、別のインデックスＢに登録することは可能でしょうか。また、インデックスAにデータを登録した契機で自動的にaggregation結果がインデックスBに格納されるようにしたいです。 例えば、以下のページにある例について https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggreg… --- ## [Transforms weird situation](https://discuss.elastic.co/t/transforms-weird-situation/237224)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 5\ **Last updated:** [June 16, 2020, 8:03am UTC](https://discuss.elastic.co/t/transforms-weird-situation/237224 "2020-06-16T08:03:20Z")
Hi experts, I have several transforms for pivot, this is the situation that make me confused: The transform works as expected The Documents Processes and documents indexed increased as expected with around 500 documen… --- ## [Numeric metrics aggregation on Nested key-value set](https://discuss.elastic.co/t/numeric-metrics-aggregation-on-nested-key-value-set/237096)
**Author:** [@Yonatan\_Omer](https://discuss.elastic.co/u/Yonatan_Omer)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 7:54am UTC](https://discuss.elastic.co/t/numeric-metrics-aggregation-on-nested-key-value-set/237096 "2020-06-16T07:54:08Z")
Hi Our index contains docs with a nested set of key-values, we would need to perform metric aggregation per key. So we for example, we would need the average cpuTime per taskId for such docs: { "tasks" : \[ … --- ## [How to pass multiple terms as a param in script scoring](https://discuss.elastic.co/t/how-to-pass-multiple-terms-as-a-param-in-script-scoring/237240)
**Author:** [@Dahea\_Moon](https://discuss.elastic.co/u/Dahea_Moon)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 7:34am UTC](https://discuss.elastic.co/t/how-to-pass-multiple-terms-as-a-param-in-script-scoring/237240 "2020-06-16T07:34:31Z")
I'm making custom score script plugin for scoring based on payload value. I've done with scoring logic, but it's working properly when it receives only one term. I want to receive several analyzed terms in query. How c… --- ## [【ダッシュボード】重複行を1行にまとめて表示する方法](https://discuss.elastic.co/t/topic/236829)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 7:33am UTC](https://discuss.elastic.co/t/topic/236829 "2020-06-16T07:33:04Z")
お世話になります。 以下のように"id"と"time"が存在するindexがあります。 id time 1 2020/6/1 10:00 1 2020/6/1 11:00 1 2020/7/1 11:00 2 2020/6/1 12:00 2 2020/6/1 12:00 3 2020/7/1 12:00 上記indexに関して、同じidの中でtimeが最も過去の日付のデータのみ、 ダッシ… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1384) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1386)