# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1457 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1458 --- ## ['Other Buckets' shown when Inpecting Heatmap visualization](https://discuss.elastic.co/t/other-buckets-shown-when-inpecting-heatmap-visualization/231687)
**Author:** [@FL\_Kibana](https://discuss.elastic.co/u/FL_Kibana)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 4:41pm UTC](https://discuss.elastic.co/t/other-buckets-shown-when-inpecting-heatmap-visualization/231687 "2020-05-11T16:41:24Z")
Hi there, When I click on 'Inspect' -\> 'View: Requests' for a heatmap visualization, I get the following options: Request: Data Request: Other bucket Request: Other bucket Should the 'Other Bucket' not point to the… --- ## [Time difference between two timestamps separated by a unique ID using scripted fields](https://discuss.elastic.co/t/time-difference-between-two-timestamps-separated-by-a-unique-id-using-scripted-fields/231539)
**Author:** [@muntazirabbas](https://discuss.elastic.co/u/muntazirabbas)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 4:39pm UTC](https://discuss.elastic.co/t/time-difference-between-two-timestamps-separated-by-a-unique-id-using-scripted-fields/231539 "2020-05-11T16:39:58Z")
Hi guyz, I am new to scripted fields. I have logs with entries 'RequestExecuted' and RequestReceived' with their timestamps and connected by unique ID called 'TransactionId'. I am trying to get the time difference betwe… --- ## [How to visualize Metricbeat Prometheus histograms](https://discuss.elastic.co/t/how-to-visualize-metricbeat-prometheus-histograms/232074)
**Author:** [@iulian7](https://discuss.elastic.co/u/iulian7)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 4:38pm UTC](https://discuss.elastic.co/t/how-to-visualize-metricbeat-prometheus-histograms/232074 "2020-05-11T16:38:24Z")
Hello, Elastic offers a Prometheus Metricbeat (https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-module-prometheus.html) module that scrapes a Prometheus /metrics endpoint and pushes the metrics to an … --- ## [Inspect -\> Download CSV -\> download as .txt file?](https://discuss.elastic.co/t/inspect-download-csv-download-as-txt-file/231683)
**Author:** [@FL\_Kibana](https://discuss.elastic.co/u/FL_Kibana)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 4:37pm UTC](https://discuss.elastic.co/t/inspect-download-csv-download-as-txt-file/231683 "2020-05-11T16:37:16Z")
Hi there, (Kibana version 7.4) When exporting data from a table visualization (Raw or Formatted), the exported file is by default a .CSV file. However, when exporting data (from any visualization) via 'Inspect' -\> 'Do… --- ## [Install ECE on premise and then use hydrid infrastructure](https://discuss.elastic.co/t/install-ece-on-premise-and-then-use-hydrid-infrastructure/231716)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 10\ **Last updated:** [May 11, 2020, 4:32pm UTC](https://discuss.elastic.co/t/install-ece-on-premise-and-then-use-hydrid-infrastructure/231716 "2020-05-11T16:32:57Z")
hi guys, I'm trying to explore this new functionality to understand if it could help me to decrease infrastructure costs (against bare-metal or virtual machines). I saw that I can install ECE on premise, so I can insta… --- ## [Kibana: Line Graph from a JSON Array](https://discuss.elastic.co/t/kibana-line-graph-from-a-json-array/231591)
**Author:** [@mailinglists19](https://discuss.elastic.co/u/mailinglists19)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 4:26pm UTC](https://discuss.elastic.co/t/kibana-line-graph-from-a-json-array/231591 "2020-05-11T16:26:29Z")
I’ve messages in Elasticsearch in the following format: { "root": { "attributes": { "attribute1": { "trends": \[47.0, 47.0, 47.0, 47.0, 47.0, 47.0, 62.0, 62.0, 63.0, 63.0, 485.0\] }, "attr… --- ## [Elastic Search Version](https://discuss.elastic.co/t/elastic-search-version/232021)
**Author:** [@test\_profession](https://discuss.elastic.co/u/test_profession)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 4:11pm UTC](https://discuss.elastic.co/t/elastic-search-version/232021 "2020-05-11T16:11:21Z")
Hi There, Is it mandatory to maintain the same Elastic Search Version on all available environments like Development,Testing,UAT and Production environment? --- ## [JSON Schema for Query](https://discuss.elastic.co/t/json-schema-for-query/231886)
**Author:** [@JLarue](https://discuss.elastic.co/u/JLarue)\ **Replies:** 4\ **Last updated:** [May 11, 2020, 4:09pm UTC](https://discuss.elastic.co/t/json-schema-for-query/231886 "2020-05-11T16:09:20Z")
I am looking for a JSON Schema that describes the Elastic Query syntax so I can use to validate queries in JSON form. Is there something available? --- ## [Logstash 7.4.2 Page file size is too small to hold elements](https://discuss.elastic.co/t/logstash-7-4-2-page-file-size-is-too-small-to-hold-elements/232062)
**Author:** [@dweljali](https://discuss.elastic.co/u/dweljali)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 3:43pm UTC](https://discuss.elastic.co/t/logstash-7-4-2-page-file-size-is-too-small-to-hold-elements/232062 "2020-05-11T15:43:29Z")
We are using logstash 7.4.2, we faced queue corruption issue, below error. We tried pqcheck and pqrepair logstash utility however its not fixed. Any pointer would be really helpful. Thank you. Error :\[2020-05-08T11… --- ## ["LogStash::ConfigurationError", :message=\>"Expected one of #, input, filter, output at line 1, column 1 (byte 1) after ", :backtrace](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after-backtrace/231818)
**Author:** [@subramanyam.setty](https://discuss.elastic.co/u/subramanyam.setty)\ **Replies:** 2\ **Last updated:** [May 11, 2020, 3:52pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after-backtrace/231818 "2020-05-11T15:52:23Z")
Hi team, I am getting below exception .I have mentioned .conf file and log file which is given input to the .conf.Please let suggest. Exception: {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exceptio… --- ## [Unassigned shards after node was restarted](https://discuss.elastic.co/t/unassigned-shards-after-node-was-restarted/231915)
**Author:** [@praveenmak](https://discuss.elastic.co/u/praveenmak)\ **Replies:** 2\ **Last updated:** [May 11, 2020, 3:51pm UTC](https://discuss.elastic.co/t/unassigned-shards-after-node-was-restarted/231915 "2020-05-11T15:51:21Z")
I am using v7.5.2, I have 10 nodes, 6 Data nodes having 8 TB of data and there is plenty of space left. I have an ILM policy to rollover index after a month from Hot to warm. I restarted a node after minor config chang… --- ## [Use logstash to transform a message](https://discuss.elastic.co/t/use-logstash-to-transform-a-message/231811)
**Author:** [@dooger21](https://discuss.elastic.co/u/dooger21)\ **Replies:** 2\ **Last updated:** [May 11, 2020, 3:50pm UTC](https://discuss.elastic.co/t/use-logstash-to-transform-a-message/231811 "2020-05-11T15:50:10Z")
Hello everyone, I have a log that generates thousands of events a day, a group of events and its entire plot can be differentiated and obtained by the KEY field generated by the application as in the following example. … --- ## [Logstash deployment on AKS/EKS](https://discuss.elastic.co/t/logstash-deployment-on-aks-eks/232063)
**Author:** [@dweljali](https://discuss.elastic.co/u/dweljali)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 3:46pm UTC](https://discuss.elastic.co/t/logstash-deployment-on-aks-eks/232063 "2020-05-11T15:46:24Z")
How can we deploy Logstash on AKS or EKS in multicluster mode? Does logstash support it or any other application can be use to achive it. Thank you. --- ## [No entries in sincedb after starting logstash](https://discuss.elastic.co/t/no-entries-in-sincedb-after-starting-logstash/232054)
**Author:** [@subramanyam.setty](https://discuss.elastic.co/u/subramanyam.setty)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 3:15pm UTC](https://discuss.elastic.co/t/no-entries-in-sincedb-after-starting-logstash/232054 "2020-05-11T15:15:04Z")
Hi Team, I have created the portal.conf and input log file then restarted the logstash . Logstash started with out any error but not processing any records.I have mentioned portal.conf /input log file.Please help me wit… --- ## [Adding new field to existing index where field does not exist](https://discuss.elastic.co/t/adding-new-field-to-existing-index-where-field-does-not-exist/227587)
**Author:** [@Rowan](https://discuss.elastic.co/u/Rowan)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 2:59pm UTC](https://discuss.elastic.co/t/adding-new-field-to-existing-index-where-field-does-not-exist/227587 "2020-05-11T14:59:38Z")
Firstly, totally new to the ELK stack so still struggling with the terminology. I have been trying to create some visualizations and discovered that merging fields via a JSON scipt is kind of finicky, and apparently not… --- ## [Unable to Get API token](https://discuss.elastic.co/t/unable-to-get-api-token/232051)
**Author:** [@remo\_anil](https://discuss.elastic.co/u/remo_anil)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 2:55pm UTC](https://discuss.elastic.co/t/unable-to-get-api-token/232051 "2020-05-11T14:55:55Z")
Hi all, Need help !! This is my first post. i am trying to get API token/Key to read some logs from Kibana server using API. Below is the information i Have used. API URI - http://xxxxxxxxxxxxxxxx:9200/\_xpack/securit… --- ## [How to change mappings of index data type from "Text" to "float"](https://discuss.elastic.co/t/how-to-change-mappings-of-index-data-type-from-text-to-float/232043)
**Author:** [@Anil\_Kumar8](https://discuss.elastic.co/u/Anil_Kumar8)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 2:18pm UTC](https://discuss.elastic.co/t/how-to-change-mappings-of-index-data-type-from-text-to-float/232043 "2020-05-11T14:18:21Z")
Hi, I have part of one month data existing in old server elastic 6.8 and after re-index moved to new server 7.8. Issues is the mapping of first part of data is showing data type which was moved from 6.8 is showing ""ty… --- ## [Error installing attachment plugin offline - missing x-pack-core\\plugin-descriptor.properties file](https://discuss.elastic.co/t/error-installing-attachment-plugin-offline-missing-x-pack-core-plugin-descriptor-properties-file/231903)
**Author:** [@ImaMacCan](https://discuss.elastic.co/u/ImaMacCan)\ **Replies:** 3\ **Last updated:** [May 11, 2020, 2:18pm UTC](https://discuss.elastic.co/t/error-installing-attachment-plugin-offline-missing-x-pack-core-plugin-descriptor-properties-file/231903 "2020-05-11T14:18:49Z")
Command is: C:\\APPS\\elasticsearch-7.6.2\>bin\\elasticsearch-plugin install file:///C:/install/ingest-attachment-7.6.2.zip Error is: Exception in thread "main" java.lang.IllegalStateException: Could not load plugin descr… --- ## [Error with integer field in kibana](https://discuss.elastic.co/t/error-with-integer-field-in-kibana/232042)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 2:15pm UTC](https://discuss.elastic.co/t/error-with-integer-field-in-kibana/232042 "2020-05-11T14:15:55Z")
Hi, my data source is as follows (API json) { "bookings": \[ { "bookingId": 553267, "bookingRef": "VO20200108460", "statusId": 1, "status": "Confirmed", "createdDate": "2020-01-06 00:00:00", "confirmedDate": "", … --- ## [Logstash Filter - Breaking up fields into multiple documents](https://discuss.elastic.co/t/logstash-filter-breaking-up-fields-into-multiple-documents/231755)
**Author:** [@Sinnott](https://discuss.elastic.co/u/Sinnott)\ **Replies:** 4\ **Last updated:** [May 11, 2020, 2:11pm UTC](https://discuss.elastic.co/t/logstash-filter-breaking-up-fields-into-multiple-documents/231755 "2020-05-11T14:11:25Z")
Hi Logstash Community, I am trying to break up a single input with multiple fields into multiple output documents in elasticsearch with a subsection of these fields contained, all using the same set of field names. Bac… --- ## [Error ingestion two csv in elastic search](https://discuss.elastic.co/t/error-ingestion-two-csv-in-elastic-search/229435)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 11\ **Last updated:** [May 11, 2020, 2:08pm UTC](https://discuss.elastic.co/t/error-ingestion-two-csv-in-elastic-search/229435 "2020-05-11T14:08:32Z")
Hello it is possible to ingest of two csv files in elastic using file beat and logstsh with the same index --- ## [What is the role of stdout { codec =\> rubydebug }](https://discuss.elastic.co/t/what-is-the-role-of-stdout-codec-rubydebug/232039)
**Author:** [@Devyani](https://discuss.elastic.co/u/Devyani)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 2:08pm UTC](https://discuss.elastic.co/t/what-is-the-role-of-stdout-codec-rubydebug/232039 "2020-05-11T14:08:04Z")
I've created the following grok pattern to parse the log file--\> (?%{TIMESTAMP\_ISO8601}) %{LOGLEVEL:loglevel} \* (?\[A-Za-z0-9$\_.\]+) ((%{WORD:log-AppCode})?:(%{NOTSPACE:log-ServerId})?:(%{NOTSPACE:log-ProcessId})?:%{NOTSP… --- ## [Elastic Search Not Properly Filtering Search Terms for autocomplete. Causing sql error to show when using words like "MAX" or "COUNT" etc in product names](https://discuss.elastic.co/t/elastic-search-not-properly-filtering-search-terms-for-autocomplete-causing-sql-error-to-show-when-using-words-like-max-or-count-etc-in-product-names/231562)
**Author:** [@scottbolasevich](https://discuss.elastic.co/u/scottbolasevich)\ **Replies:** 4\ **Last updated:** [May 11, 2020, 1:49pm UTC](https://discuss.elastic.co/t/elastic-search-not-properly-filtering-search-terms-for-autocomplete-causing-sql-error-to-show-when-using-words-like-max-or-count-etc-in-product-names/231562 "2020-05-11T13:49:28Z")
Not Properly Filtering Search Terms for autocomplete. Causing sql error to show when using words like "MAX" or "COUNT" etc Preconditions magento 2.3.4 and elastic search 6+ on nexcess Magento Version : 2.3.4 ElasticS… --- ## [How to get last N documents with ascending order](https://discuss.elastic.co/t/how-to-get-last-n-documents-with-ascending-order/232028)
**Author:** [@JavaDeveloper](https://discuss.elastic.co/u/JavaDeveloper)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 1:29pm UTC](https://discuss.elastic.co/t/how-to-get-last-n-documents-with-ascending-order/232028 "2020-05-11T13:29:21Z")
Hi everyone. I know with the following command, we can get last N documents: POST index/\_search { "size": N, (N=10 for example) "sort": { "timestamp": "desc"}, "query": { "match\_all": {} } } But if … --- ## [How can I persist Elasticsearch license update](https://discuss.elastic.co/t/how-can-i-persist-elasticsearch-license-update/232027)
**Author:** [@wyze1](https://discuss.elastic.co/u/wyze1)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 1:28pm UTC](https://discuss.elastic.co/t/how-can-i-persist-elasticsearch-license-update/232027 "2020-05-11T13:28:53Z")
Currently on version 5.5 and exploring ways to persist the license update to Platinum. This reverts back to trial version after pod restarts --- ## [Problem ingest Two csv in elastic](https://discuss.elastic.co/t/problem-ingest-two-csv-in-elastic/231995)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 3\ **Last updated:** [May 11, 2020, 1:25pm UTC](https://discuss.elastic.co/t/problem-ingest-two-csv-in-elastic/231995 "2020-05-11T13:25:32Z")
I use Logsash and filebeat for ingestion in elastic my config file beat is filebeat.inputs: - type: log enabled: true paths: - C:\\Users\\h83710\\Desktop\\elastic\\logstash-7.5.2\\test\\FICHIER.csv paths: -… --- ## [Upgrade ES 2.4 to 5.6 index.mapping.total\_fields.limit](https://discuss.elastic.co/t/upgrade-es-2-4-to-5-6-index-mapping-total-fields-limit/232023)
**Author:** [@rhangl](https://discuss.elastic.co/u/rhangl)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 1:20pm UTC](https://discuss.elastic.co/t/upgrade-es-2-4-to-5-6-index-mapping-total-fields-limit/232023 "2020-05-11T13:20:49Z")
Hi, We plan the Upgrade from ES 2.4 to 5.6. After running the Elasticsearch Migration Helper v2.0.4 it comes out that some of our indices have more then 1000 field mapping (between 1010 and 1090). Will this be a problem… --- ## [Filtered aliases warning - cannot have more than one for same index?](https://discuss.elastic.co/t/filtered-aliases-warning-cannot-have-more-than-one-for-same-index/232019)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 1:12pm UTC](https://discuss.elastic.co/t/filtered-aliases-warning-cannot-have-more-than-one-for-same-index/232019 "2020-05-11T13:12:17Z")
I have the following WARNING level message in my Elasticsearch 6.8 logs (index names are made up): More than one (4) filtered alias found for same index (myindex-2012.12.12). This is currently not recommended. Aliases: … --- ## [Is it possible to check that specific data matches the query without loading it to the index?](https://discuss.elastic.co/t/is-it-possible-to-check-that-specific-data-matches-the-query-without-loading-it-to-the-index/232014)
**Author:** [@pavlovdog](https://discuss.elastic.co/u/pavlovdog)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 12:51pm UTC](https://discuss.elastic.co/t/is-it-possible-to-check-that-specific-data-matches-the-query-without-loading-it-to-the-index/232014 "2020-05-11T12:51:53Z")
Hi, there! Imagine that I have a specific data string and a specific query. The simple way to check that the query matches the data is to load the data into the Elastic index and run the online query. But can I do it wi… --- ## [Elasticsearch upgrade failed from 7.4.0 to 7.5.2](https://discuss.elastic.co/t/elasticsearch-upgrade-failed-from-7-4-0-to-7-5-2/229622)
**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\ **Replies:** 3\ **Last updated:** [May 11, 2020, 12:28pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-failed-from-7-4-0-to-7-5-2/229622 "2020-05-11T12:28:49Z")
Hi Team, We have a elasticsearch cluster configured with 7.4.0 version. Now we wanted to upgrade it to 7.5.2 and enable xpack security. When I tried to upgrade to 7.5.2 version, I ended up with below error message. Wha… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1456) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1458)