# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1387

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1388

---

## [Root mapping definition has unsupported parameters new](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-new/237136)

<div class="topic-metadata">

**Author:** [@Ashwini\_Machale](https://discuss.elastic.co/u/Ashwini_Machale)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 10:39pm UTC](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-new/237136 "2020-06-15T22:39:41Z")

</div>

reason": "Root mapping definition has unsupported parameters: \[set : {dynamic=true, dynamic\_templates=\[{set={path\_match=\*, mapping={type=text, fields={custom={analyzer=custom\_english, type=text}, raw={index=true, type=ke…

---

## [How to update nested field using query in elasticsearch 2.4?](https://discuss.elastic.co/t/how-to-update-nested-field-using-query-in-elasticsearch-2-4/237164)

<div class="topic-metadata">

**Author:** [@prasad98](https://discuss.elastic.co/u/prasad98)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 9:54pm UTC](https://discuss.elastic.co/t/how-to-update-nested-field-using-query-in-elasticsearch-2-4/237164 "2020-06-15T21:54:21Z")

</div>

I have made an Elasticsearch query: GET shop/products/\_search { "\_source": \[ "similar\_group.product\_info.product\_id", "shop\_id", "similar\_group.product\_info.tags", "similar\_group.product\_info.…

---

## [How to use search\_as\_you\_type datatype with multiple languages? Best practice/experiences](https://discuss.elastic.co/t/how-to-use-search-as-you-type-datatype-with-multiple-languages-best-practice-experiences/237153)

<div class="topic-metadata">

**Author:** [@as\_ES](https://discuss.elastic.co/u/as_ES)\
**Replies:** 0\
**Last updated:** [June 15, 2020, 2:31pm UTC](https://discuss.elastic.co/t/how-to-use-search-as-you-type-datatype-with-multiple-languages-best-practice-experiences/237153 "2020-06-15T14:31:56Z")

</div>

Hi, how does one handle the combination of search\_as\_you\_type dataytpe and fields in multiple languages? Or is it not applicable in such a use-case? For Example: An index of books has a field book\_title and alternativ…

---

## [Calculating new fields using ruby filter](https://discuss.elastic.co/t/calculating-new-fields-using-ruby-filter/237163)

<div class="topic-metadata">

**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\
**Replies:** 2\
**Last updated:** [June 15, 2020, 9:13pm UTC](https://discuss.elastic.co/t/calculating-new-fields-using-ruby-filter/237163 "2020-06-15T21:13:28Z")

</div>

Hi evryone i tried o use ruby filter to calculate 3 new fields: The first is the total number of observation in may table. the second id the number of observations where(Contrainte\>=-78),Contrainte is a field in my cs…

---

## [Decode and Add derived/custom fields](https://discuss.elastic.co/t/decode-and-add-derived-custom-fields/237175)

<div class="topic-metadata">

**Author:** [@Mike\_Labman](https://discuss.elastic.co/u/Mike_Labman)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 8:57pm UTC](https://discuss.elastic.co/t/decode-and-add-derived-custom-fields/237175 "2020-06-15T20:57:54Z")

</div>

I am brand new to elastic. I have regularly incoming data that has an encoded field, i.e. { id: 1, time: "2020-06-15 13:45:00", encoded: "AAIBdQYmaSUAoPy2Bbx7bP9QX4V3UKCHbYGfxjz" } I have external javascript that I us…

---

## [Searching for data over multiple indexes](https://discuss.elastic.co/t/searching-for-data-over-multiple-indexes/237182)

<div class="topic-metadata">

**Author:** [@alphalol](https://discuss.elastic.co/u/alphalol)\
**Replies:** 5\
**Last updated:** [June 15, 2020, 8:44pm UTC](https://discuss.elastic.co/t/searching-for-data-over-multiple-indexes/237182 "2020-06-15T20:44:22Z")

</div>

Lets say I have two indices: foo and bar. foo has an id and type field. bar has an id and total field. This is obviously a contrived minimal example, so while you may think the data could be refactored into one docu…

---

## [Error: \`fsevents\` module is not installed](https://discuss.elastic.co/t/error-fsevents-module-is-not-installed/237139)

<div class="topic-metadata">

**Author:** [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Replies:** 11\
**Last updated:** [June 15, 2020, 8:32pm UTC](https://discuss.elastic.co/t/error-fsevents-module-is-not-installed/237139 "2020-06-15T20:32:55Z")

</div>

Setting up my development area on MacOS Catalina 10.15.5 (19F101) following kibana/CONTRIBUTING.md at main · elastic/kibana · GitHub When running YARN START I get the below error. New platform optimizer error Error: …

---

## [Considerations about default terms agg for Elastic SIEM Detections histogram](https://discuss.elastic.co/t/considerations-about-default-terms-agg-for-elastic-siem-detections-histogram/237111)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 7:39pm UTC](https://discuss.elastic.co/t/considerations-about-default-terms-agg-for-elastic-siem-detections-histogram/237111 "2020-06-15T19:39:37Z")

</div>

Hello, Starting from 7.7 the detections histogram in SIEM seems to have an issue with the legend. When 2 digit number get cut off... Also, I'm seriously wondering why the default aggregation is on signal.rule.risk\_sc…

---

## [Index pattern timeFieldName is getting changed when using CURL command for creation](https://discuss.elastic.co/t/index-pattern-timefieldname-is-getting-changed-when-using-curl-command-for-creation/237118)

<div class="topic-metadata">

**Author:** [@manojkrishna561994](https://discuss.elastic.co/u/manojkrishna561994)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 7:22pm UTC](https://discuss.elastic.co/t/index-pattern-timefieldname-is-getting-changed-when-using-curl-command-for-creation/237118 "2020-06-15T19:22:47Z")

</div>

I have a bash script which creates index-pattern using the below curl command and after that http\_poller\_plugin is run. " curl -X POST 'localhost:5601/api/saved\_objects/index-pattern/lucy\_data' -H 'kbn-xsrf: true' -H …

---

## [How to use Controls filter condition?](https://discuss.elastic.co/t/how-to-use-controls-filter-condition/237084)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 6:57pm UTC](https://discuss.elastic.co/t/how-to-use-controls-filter-condition/237084 "2020-06-15T18:57:43Z")

</div>

I don't want to display the portal-ims service in the drop-down list, but it still appears? Is there any way to filter it out? kibana: 7.4.2

---

## [Want to have counter field](https://discuss.elastic.co/t/want-to-have-counter-field/237077)

<div class="topic-metadata">

**Author:** [@jyotis](https://discuss.elastic.co/u/jyotis)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 6:50pm UTC](https://discuss.elastic.co/t/want-to-have-counter-field/237077 "2020-06-15T18:50:42Z")

</div>

Hi Team, I want to have a counter field which increases by 1 after each update. Please advise a way to achieve it. Thanks

---

## [Your query is taking a while run beyond timeout and error in visualization](https://discuss.elastic.co/t/your-query-is-taking-a-while-run-beyond-timeout-and-error-in-visualization/237071)

<div class="topic-metadata">

**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 6:48pm UTC](https://discuss.elastic.co/t/your-query-is-taking-a-while-run-beyond-timeout-and-error-in-visualization/237071 "2020-06-15T18:48:12Z")

</div>

Hi Team, I am getting below error when i change the time frame for last 3 days and another change last 7 days your query is taking a while run beyond timeout and error in visualization Note: Also changed to 60000ms fr…

---

## [Dynamically changing pages](https://discuss.elastic.co/t/dynamically-changing-pages/237053)

<div class="topic-metadata">

**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 6:43pm UTC](https://discuss.elastic.co/t/dynamically-changing-pages/237053 "2020-06-15T18:43:11Z")

</div>

Wondering whether it is possible to dynamically switch dashboards or canvas sheets? If so how? Just some context on my use case, i currently use ELK to ingest application log files. The application are are hosted in var…

---

## [Ошибка Index lifecycle error: index\_closed\_exception: closed](https://discuss.elastic.co/t/index-lifecycle-error-index-closed-exception-closed/236724)

<div class="topic-metadata">

**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\
**Replies:** 9\
**Last updated:** [June 15, 2020, 4:49pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-index-closed-exception-closed/236724 "2020-06-15T16:49:04Z")

</div>

Добрый день! В Elasticsearch 7.3.1 возникает ошибка ilm Index lifecycle error index\_closed\_exception: closed Индекс при этом открыт - 100% уверен, для надежности даже делал POST logs-servicename-2020.05.29-001972/\_o…

---

## [Add annotation to TSVB at specific time](https://discuss.elastic.co/t/add-annotation-to-tsvb-at-specific-time/235853)

<div class="topic-metadata">

**Author:** [@butchkelley](https://discuss.elastic.co/u/butchkelley)\
**Replies:** 2\
**Last updated:** [June 15, 2020, 3:35pm UTC](https://discuss.elastic.co/t/add-annotation-to-tsvb-at-specific-time/235853 "2020-06-15T15:35:13Z")

</div>

Hello, I need to add a simple annotation to a time series visual every day at 12:10am. I was thinking of adding a document every day at that time than create a annotation query to look for it. Is there a simpler way? …

---

## [Return big amount of values without paging](https://discuss.elastic.co/t/return-big-amount-of-values-without-paging/235369)

<div class="topic-metadata">

**Author:** [@ivgenik](https://discuss.elastic.co/u/ivgenik)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 3:05pm UTC](https://discuss.elastic.co/t/return-big-amount-of-values-without-paging/235369 "2020-06-15T15:05:21Z")

</div>

Hello, Lets say I got an index with a big amount of documents. Each one has a field called UniqueId. I need to create a query with a simple filter and return all of the uniqueIds that answers the query. The data look…

---

## [Multiple Index Step by step query](https://discuss.elastic.co/t/multiple-index-step-by-step-query/234096)

<div class="topic-metadata">

**Author:** [@ivgenik](https://discuss.elastic.co/u/ivgenik)\
**Replies:** 4\
**Last updated:** [June 15, 2020, 3:09pm UTC](https://discuss.elastic.co/t/multiple-index-step-by-step-query/234096 "2020-06-15T15:09:46Z")

</div>

Hello, I probably need to create a multi step multi index query and I am not sure if such a thing is supported or if it is the right approach at all. Example Data: 2 indexes , 1 for orders, 1 for invoices I made a sim…

---

## [Query and return aggs group by terms](https://discuss.elastic.co/t/query-and-return-aggs-group-by-terms/234290)

<div class="topic-metadata">

**Author:** [@ivgenik](https://discuss.elastic.co/u/ivgenik)\
**Replies:** 5\
**Last updated:** [June 15, 2020, 2:56pm UTC](https://discuss.elastic.co/t/query-and-return-aggs-group-by-terms/234290 "2020-06-15T14:56:17Z")

</div>

Hello, A minimal data example: ... References: \[ { DocType: { SysName: "order"} DocId: "12345" }, { "DocType: {SysName: "invoice"} "DocId: "22222"} \] MessageDate: "05/05/20" ... I need to query this data, scan the ref…

---

## [Взаимодействие score в should контексте](https://discuss.elastic.co/t/score-should/237138)

<div class="topic-metadata">

**Author:** [@Pavel\_Novoydarskiy](https://discuss.elastic.co/u/Pavel_Novoydarskiy)\
**Replies:** 3\
**Last updated:** [June 15, 2020, 2:43pm UTC](https://discuss.elastic.co/t/score-should/237138 "2020-06-15T14:43:18Z")

</div>

Если я правильно понимаю, то в Elasticsearch на данный момент, каждый score полученный из одного should запроса, складывается с остальными, можно ли переопределить это поведение и сделать, например умножение? Для пример…

---

## [Would it be possible to reduce the size of the kibana RPM?](https://discuss.elastic.co/t/would-it-be-possible-to-reduce-the-size-of-the-kibana-rpm/236884)

<div class="topic-metadata">

**Author:** [@faxm0dem](https://discuss.elastic.co/u/faxm0dem)\
**Replies:** 2\
**Last updated:** [June 15, 2020, 2:18pm UTC](https://discuss.elastic.co/t/would-it-be-possible-to-reduce-the-size-of-the-kibana-rpm/236884 "2020-06-15T14:18:32Z")

</div>

The problem we face is that for some small vms ,it's not possible to upgrade kibana because of its bloated footprint. The file size of the RPM is more than 150MB and contains more than 100000 files ! The last time I tr…

---

## [Creating a partial clone of a cluster](https://discuss.elastic.co/t/creating-a-partial-clone-of-a-cluster/237106)

<div class="topic-metadata">

**Author:** [@Konrad\_Moskal](https://discuss.elastic.co/u/Konrad_Moskal)\
**Replies:** 2\
**Last updated:** [June 15, 2020, 2:14pm UTC](https://discuss.elastic.co/t/creating-a-partial-clone-of-a-cluster/237106 "2020-06-15T14:14:54Z")

</div>

My ES cluster is constantly updating but I have a use case where I'd like to have a snapshot of static data, which I'd update periodically. Doesn't have to be all of the data, could be a fraction of it. Any tips on how w…

---

## [Reindex, convert float to float, mapper \[variableX\] cannot be changed from type \[float\] to \[long\]](https://discuss.elastic.co/t/reindex-convert-float-to-float-mapper-variablex-cannot-be-changed-from-type-float-to-long/237123)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 2:13pm UTC](https://discuss.elastic.co/t/reindex-convert-float-to-float-mapper-variablex-cannot-be-changed-from-type-float-to-long/237123 "2020-06-15T14:13:58Z")

</div>

Hi, I am trying to reindex something. It works with 4/5 of my indcies but the last one fails because of: { "took": 4178, "timed\_out": false, "total": 56576151, "updated": 0, "created": 994, "del…

---

## [Multiple Y axis](https://discuss.elastic.co/t/multiple-y-axis/235781)

<div class="topic-metadata">

**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\
**Replies:** 3\
**Last updated:** [June 15, 2020, 2:08pm UTC](https://discuss.elastic.co/t/multiple-y-axis/235781 "2020-06-15T14:08:26Z")

</div>

Hi, i have a TSVB with request, % success, % of failure. % success, % of failure i set the option Separate axis. the problem is that now i have 3 Y Axis,1 for requests and 1 for % success and other for % failure. How…

---

## [No cached mapping for this field!](https://discuss.elastic.co/t/no-cached-mapping-for-this-field/235810)

<div class="topic-metadata">

**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\
**Replies:** 2\
**Last updated:** [June 15, 2020, 2:07pm UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field/235810 "2020-06-15T14:07:54Z")

</div>

Hello As the following image show i cant map many of my fields. I tried to refresh the index pattern but the problem persist. I checked the index template and i saw that dynamic mapping is enabled: I also used…

---

## [Types Removal](https://discuss.elastic.co/t/types-removal/236772)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 1:56pm UTC](https://discuss.elastic.co/t/types-removal/236772 "2020-06-15T13:56:12Z")

</div>

I've previously posted a question about this, but waited too long to respond and the topic got closed. I've read the notice about types being removed, but I can't figure it out. I'm getting a warning in my deprecation …

---

## [Import Saved Objects from 6.8.4 to 7.6.1](https://discuss.elastic.co/t/import-saved-objects-from-6-8-4-to-7-6-1/236833)

<div class="topic-metadata">

**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\
**Replies:** 5\
**Last updated:** [June 15, 2020, 1:48pm UTC](https://discuss.elastic.co/t/import-saved-objects-from-6-8-4-to-7-6-1/236833 "2020-06-15T13:48:28Z")

</div>

Hello All , I am trying to import the saved objects from 6.8.4 to 7.6.1 . When i try to import the .json file of saved objects , it gives me error . So i see it requires NDJSON format. Kindly help out please. Support f…

---

## [Add links like share ,edit in kibana top nav bar](https://discuss.elastic.co/t/add-links-like-share-edit-in-kibana-top-nav-bar/236675)

<div class="topic-metadata">

**Author:** [@suibgui](https://discuss.elastic.co/u/suibgui)\
**Replies:** 1\
**Last updated:** [June 15, 2020, 1:19pm UTC](https://discuss.elastic.co/t/add-links-like-share-edit-in-kibana-top-nav-bar/236675 "2020-06-15T13:19:22Z")

</div>

hello team , i want to add other links like share ,edit in kibana top nav bar , i'm using kibana 7.4.0 and lunix os any solution ? thanks.

---

## [Kibana opens but does not save visualize](https://discuss.elastic.co/t/kibana-opens-but-does-not-save-visualize/236513)

<div class="topic-metadata">

**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\
**Replies:** 10\
**Last updated:** [June 15, 2020, 1:18pm UTC](https://discuss.elastic.co/t/kibana-opens-but-does-not-save-visualize/236513 "2020-06-15T13:18:56Z")

</div>

Kibana with error, I checked the logs and gave the following error: log \[12: 50: 26.691\] \[error\] \[plugins\] \[taskManager\] \[taskManager\] Failed to poll for work: Error: Request Timeout after 30000ms

---

## [Logstash Json filter re-formated the @timestamp field unexpectedly](https://discuss.elastic.co/t/logstash-json-filter-re-formated-the-timestamp-field-unexpectedly/237027)

<div class="topic-metadata">

**Author:** [@STAR\_DEVX](https://discuss.elastic.co/u/STAR_DEVX)\
**Replies:** 5\
**Last updated:** [June 15, 2020, 12:36pm UTC](https://discuss.elastic.co/t/logstash-json-filter-re-formated-the-timestamp-field-unexpectedly/237027 "2020-06-15T12:36:13Z")

</div>

Hi, I'm encounter an issue with the logstash json plugin. In my "message", there's an field called "@timestamp", it's in UNIX epoch float format. However, when I try to use json filter to parse the "message" field, it …

---

## [Passing data into KIbana iframe state and accessing it via a plugin](https://discuss.elastic.co/t/passing-data-into-kibana-iframe-state-and-accessing-it-via-a-plugin/235768)

<div class="topic-metadata">

**Author:** [@gurtgurt](https://discuss.elastic.co/u/gurtgurt)\
**Replies:** 5\
**Last updated:** [June 15, 2020, 12:35pm UTC](https://discuss.elastic.co/t/passing-data-into-kibana-iframe-state-and-accessing-it-via-a-plugin/235768 "2020-06-15T12:35:20Z")

</div>

Hi I've got a pretty basic Kibana plugin that is running on the client side (no server side logic), and I have a Kibana visualization inside of an iframe. In the parent, I have some values that I would like the plugin t…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1386)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1388)
