# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1474

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1475

---

## [Timelion heartbeat downtime count analysis](https://discuss.elastic.co/t/timelion-heartbeat-downtime-count-analysis/230873)

<div class="topic-metadata">

**Author:** [@hmd\_hmd](https://discuss.elastic.co/u/hmd_hmd)\
**Replies:** 1\
**Last updated:** [May 3, 2020, 9:37pm UTC](https://discuss.elastic.co/t/timelion-heartbeat-downtime-count-analysis/230873 "2020-05-03T21:37:08Z")

</div>

A spark-streaming data ingestion service sends a heartbeat every batch loop duration (in a field called ingestion\_alive, with a value of 1). So, if the batch loop is 2 minutes, we expect to receive 30 (+-3) heartbeat mes…

---

## [Kibana show field as string in "Table" view and as number in "JSON" view](https://discuss.elastic.co/t/kibana-show-field-as-string-in-table-view-and-as-number-in-json-view/230586)

<div class="topic-metadata">

**Author:** [@111320](https://discuss.elastic.co/u/111320)\
**Replies:** 5\
**Last updated:** [May 3, 2020, 9:24pm UTC](https://discuss.elastic.co/t/kibana-show-field-as-string-in-table-view-and-as-number-in-json-view/230586 "2020-05-03T21:24:28Z")

</div>

I parse my log with grok. Some fields parsed to number with the grok format {BASE10NUM:DB\_time:int}. When I look on the data in Kibana (version 7.6) I see something that looks like bug. In "Table" view the DB\_time fiel…

---

## [Number of buckets in a timelion query](https://discuss.elastic.co/t/number-of-buckets-in-a-timelion-query/230878)

<div class="topic-metadata">

**Author:** [@hmd\_hmd](https://discuss.elastic.co/u/hmd_hmd)\
**Replies:** 1\
**Last updated:** [May 3, 2020, 9:17pm UTC](https://discuss.elastic.co/t/number-of-buckets-in-a-timelion-query/230878 "2020-05-03T21:17:21Z")

</div>

I would like to know how many buckets were there in total when doing a timeline query. For example, if the query range is set for the last 24 hours, and the interval is 1 hour, then there must be 24 buckets. How to get t…

---

## [How to find the port where kibana is running?](https://discuss.elastic.co/t/how-to-find-the-port-where-kibana-is-running/230769)

<div class="topic-metadata">

**Author:** [@Pradeep\_Sanjeewa](https://discuss.elastic.co/u/Pradeep_Sanjeewa)\
**Replies:** 4\
**Last updated:** [May 3, 2020, 9:09pm UTC](https://discuss.elastic.co/t/how-to-find-the-port-where-kibana-is-running/230769 "2020-05-03T21:09:33Z")

</div>

I have Elastic Stack set up in on-prem servers. It is runnnig fine and querying data is possible without any issue. How can I find the port where kibana is running?

---

## [Why is this delete operation reported as success if the document is still there after refresh?](https://discuss.elastic.co/t/why-is-this-delete-operation-reported-as-success-if-the-document-is-still-there-after-refresh/230702)

<div class="topic-metadata">

**Author:** [@Thomas\_Thiebaud](https://discuss.elastic.co/u/Thomas_Thiebaud)\
**Replies:** 7\
**Last updated:** [May 3, 2020, 8:32pm UTC](https://discuss.elastic.co/t/why-is-this-delete-operation-reported-as-success-if-the-document-is-still-there-after-refresh/230702 "2020-05-03T20:32:24Z")

</div>

I'm deleting a bunch a documents in elasticsearch using helpers.streaming\_bulk from the python library for ok, results in helpers.streaming\_bulk( \_es\_session.es\_client, operations, max\_retries=20, raise\_on\_error…

---

## [Winlogbeat not able to send log to the logstash](https://discuss.elastic.co/t/winlogbeat-not-able-to-send-log-to-the-logstash/230833)

<div class="topic-metadata">

**Author:** [@srv95](https://discuss.elastic.co/u/srv95)\
**Replies:** 7\
**Last updated:** [May 3, 2020, 7:35pm UTC](https://discuss.elastic.co/t/winlogbeat-not-able-to-send-log-to-the-logstash/230833 "2020-05-03T19:35:27Z")

</div>

emstats":{"gc\_next":57446288,"memory\_alloc":28758904,"memory\_total":636265600},"runtime":{"goroutines":28}},"libbeat":{"config":{"module":{"running":0}},"output":{"read":{"errors":1},"write":{"bytes":124}},"pipeline":{"c…

---

## [Creating metrics from a filebeat input](https://discuss.elastic.co/t/creating-metrics-from-a-filebeat-input/230894)

<div class="topic-metadata">

**Author:** [@WimDH](https://discuss.elastic.co/u/WimDH)\
**Replies:** 0\
**Last updated:** [May 3, 2020, 6:58pm UTC](https://discuss.elastic.co/t/creating-metrics-from-a-filebeat-input/230894 "2020-05-03T18:58:58Z")

</div>

Hello everybody, Can someone explain me how to create metrics from values retrieved fro a logfile (or point me to some good docs)? I have a logfile on a server that I parse with filebeat and which are forwarded to aa l…

---

## [Pipeline Workers and CPU count?](https://discuss.elastic.co/t/pipeline-workers-and-cpu-count/230893)

<div class="topic-metadata">

**Author:** [@AtyNewman](https://discuss.elastic.co/u/AtyNewman)\
**Replies:** 0\
**Last updated:** [May 3, 2020, 6:47pm UTC](https://discuss.elastic.co/t/pipeline-workers-and-cpu-count/230893 "2020-05-03T18:47:37Z")

</div>

I have a Logstash instance sending data into an Elasticsearch cluster what take place on the same machine. 2 Elasticsearch and 1 Logstash. Should i separate CPU Cores between them like this? in case of 10 CPU: logsta…

---

## [Poximity search with wildcards and phrase (multiple word terms)](https://discuss.elastic.co/t/poximity-search-with-wildcards-and-phrase-multiple-word-terms/228360)

<div class="topic-metadata">

**Author:** [@th.wyns](https://discuss.elastic.co/u/th.wyns)\
**Replies:** 1\
**Last updated:** [May 3, 2020, 6:04pm UTC](https://discuss.elastic.co/t/poximity-search-with-wildcards-and-phrase-multiple-word-terms/228360 "2020-05-03T18:04:44Z")

</div>

Hello, We have a business requirement where the customer would like to run proximity searches that contain wildcards and phrases (multiple words). For eg: query: "somet\*" within 5 word distance of "need to find" shou…

---

## [Formula from fields](https://discuss.elastic.co/t/formula-from-fields/229570)

<div class="topic-metadata">

**Author:** [@peretz\_shlomi](https://discuss.elastic.co/u/peretz_shlomi)\
**Replies:** 7\
**Last updated:** [May 3, 2020, 5:42pm UTC](https://discuss.elastic.co/t/formula-from-fields/229570 "2020-05-03T17:42:03Z")

</div>

Hi I need a new column with formula 'NG Amount' / 'Component Qty' \* 1000000 I tried to perform SCRIPTED FIELDS but without success. Thanks for the helpers

---

## [Newbie question: Filter/Matching for different criterias with kind of matching score?](https://discuss.elastic.co/t/newbie-question-filter-matching-for-different-criterias-with-kind-of-matching-score/230876)

<div class="topic-metadata">

**Author:** [@iparker](https://discuss.elastic.co/u/iparker)\
**Replies:** 0\
**Last updated:** [May 3, 2020, 1:36pm UTC](https://discuss.elastic.co/t/newbie-question-filter-matching-for-different-criterias-with-kind-of-matching-score/230876 "2020-05-03T13:36:49Z")

</div>

Hello, I'm completely new to elasticsearch so sorry for this newbie question. I read about elasticsearch score calculation for full text search and also about the filter in a query (in a boolean way: 1 if the document …

---

## [Hide Scrollbars But Keep Functionality in a Kibana app plugin](https://discuss.elastic.co/t/hide-scrollbars-but-keep-functionality-in-a-kibana-app-plugin/229849)

<div class="topic-metadata">

**Author:** [@Nicolap](https://discuss.elastic.co/u/Nicolap)\
**Replies:** 2\
**Last updated:** [May 3, 2020, 3:49pm UTC](https://discuss.elastic.co/t/hide-scrollbars-but-keep-functionality-in-a-kibana-app-plugin/229849 "2020-05-03T15:49:46Z")

</div>

Hi there, In a Kibana app plugin I need to hide the vertical scrollbar, but keep functionality.. I tryed with the following CSS code, but It doesn't works: /\* Hide scrollbar for Chrome, Safari and Opera \*/ .app-wrapp…

---

## [I cannot see every column or see wrong output for the exisiting ones](https://discuss.elastic.co/t/i-cannot-see-every-column-or-see-wrong-output-for-the-exisiting-ones/230343)

<div class="topic-metadata">

**Author:** [@Burak\_Sakallioglu](https://discuss.elastic.co/u/Burak_Sakallioglu)\
**Replies:** 9\
**Last updated:** [May 3, 2020, 1:30pm UTC](https://discuss.elastic.co/t/i-cannot-see-every-column-or-see-wrong-output-for-the-exisiting-ones/230343 "2020-05-03T13:30:20Z")

</div>

Hi everyone, I have been trying to import my csv file with logstash, however, the output is not seen as I expected. Firstly, I cannot see every column in the output, then I cannot see the correct value for some existin…

---

## [Elastic Search Java API implementaion to get No of Hits(First time working on Elastic Search)](https://discuss.elastic.co/t/elastic-search-java-api-implementaion-to-get-no-of-hits-first-time-working-on-elastic-search/230794)

<div class="topic-metadata">

**Author:** [@abhir83](https://discuss.elastic.co/u/abhir83)\
**Replies:** 7\
**Last updated:** [May 3, 2020, 1:01pm UTC](https://discuss.elastic.co/t/elastic-search-java-api-implementaion-to-get-no-of-hits-first-time-working-on-elastic-search/230794 "2020-05-03T13:01:09Z")

</div>

Hi I am a Software tester trying to get the Number of Hits through Elastic Search for the first time. I have no idea about Ellastic Search.Please tell me if my approach is correct. Following are the dependencies in pom…

---

## [Kafka Consumer ElasticSearch?](https://discuss.elastic.co/t/kafka-consumer-elasticsearch/230765)

<div class="topic-metadata">

**Author:** [@rishabh\_jain](https://discuss.elastic.co/u/rishabh_jain)\
**Replies:** 6\
**Last updated:** [May 3, 2020, 12:33pm UTC](https://discuss.elastic.co/t/kafka-consumer-elasticsearch/230765 "2020-05-03T12:33:06Z")

</div>

is there any way by which the data sent into kafka stream can be dumped into elasticsearch?

---

## [Simple aggregation on a field for more than one value](https://discuss.elastic.co/t/simple-aggregation-on-a-field-for-more-than-one-value/230861)

<div class="topic-metadata">

**Author:** [@Daud\_Ahmed](https://discuss.elastic.co/u/Daud_Ahmed)\
**Replies:** 0\
**Last updated:** [May 3, 2020, 11:02am UTC](https://discuss.elastic.co/t/simple-aggregation-on-a-field-for-more-than-one-value/230861 "2020-05-03T11:02:36Z")

</div>

Basically what i want is instead of creating doc\_count for every unique value for a field.... i just want to have two keys "passed" and "failed". failed key doc\_count should be equal to sum of doc\_count containing valu…

---

## [Ingest mongodb data into elastic search](https://discuss.elastic.co/t/ingest-mongodb-data-into-elastic-search/230860)

<div class="topic-metadata">

**Author:** [@santosh1607kumar](https://discuss.elastic.co/u/santosh1607kumar)\
**Replies:** 0\
**Last updated:** [May 3, 2020, 10:41am UTC](https://discuss.elastic.co/t/ingest-mongodb-data-into-elastic-search/230860 "2020-05-03T10:41:26Z")

</div>

Hi all, I was wondering if i can ingest mongodb data into elasticsearch from one aws ec2 ubuntu instance where I have my mongodb into another ec2 ubuntu instance where I have my elasticsearch and kibana already setup wi…

---

## [Error OPERATION\_NOT\_ALLOWED](https://discuss.elastic.co/t/error-operation-not-allowed/230644)

<div class="topic-metadata">

**Author:** [@rrs](https://discuss.elastic.co/u/rrs)\
**Replies:** 2\
**Last updated:** [May 3, 2020, 10:17am UTC](https://discuss.elastic.co/t/error-operation-not-allowed/230644 "2020-05-03T10:17:58Z")

</div>

We have a ELK-5.6.3 cluster with readonlyrest pro plugin and running fine. For some reasons we need to migrate to 7.6.2 as separate cluster. The new cluster also enabled with readonlyrest free and xpack disabled. When do…

---

## [Excluding documents from a search](https://discuss.elastic.co/t/excluding-documents-from-a-search/230843)

<div class="topic-metadata">

**Author:** [@apezzatto](https://discuss.elastic.co/u/apezzatto)\
**Replies:** 1\
**Last updated:** [May 3, 2020, 8:06am UTC](https://discuss.elastic.co/t/excluding-documents-from-a-search/230843 "2020-05-03T08:06:16Z")

</div>

Hello all, I'm a brand new developer using elastic search, and I'm struggling to accomplish what seems to be a simple task: filtering documents that I don't want from my search result result. My index consists, among o…

---

## [Elasticsearch real time write indexing performance](https://discuss.elastic.co/t/elasticsearch-real-time-write-indexing-performance/230758)

<div class="topic-metadata">

**Author:** [@Vinod\_Kandula](https://discuss.elastic.co/u/Vinod_Kandula)\
**Replies:** 9\
**Last updated:** [May 3, 2020, 5:19am UTC](https://discuss.elastic.co/t/elasticsearch-real-time-write-indexing-performance/230758 "2020-05-03T05:19:15Z")

</div>

Hi, pls help me with ES write performance for real time indexing and how soon the document is available for search. To establish this in my jmeter performance script, after every document index, a fixed delay of 300ms o…

---

## [RequestError: RequestError(400, 'parsing\_exception', '\[terms\] query does not support \[country\]')](https://discuss.elastic.co/t/requesterror-requesterror-400-parsing-exception-terms-query-does-not-support-country/230841)

<div class="topic-metadata">

**Author:** [@TanmoyP](https://discuss.elastic.co/u/TanmoyP)\
**Replies:** 1\
**Last updated:** [May 3, 2020, 4:35am UTC](https://discuss.elastic.co/t/requesterror-requesterror-400-parsing-exception-terms-query-does-not-support-country/230841 "2020-05-03T04:35:58Z")

</div>

I am new to Elasticsearch and getting error while running this: for brand in extract\['brand'\].values: s\_names = Search() \\ .query('multi\_match', type = "cross\_fields", …

---

## [Groovy Scripting optional paramters](https://discuss.elastic.co/t/groovy-scripting-optional-paramters/230835)

<div class="topic-metadata">

**Author:** [@teebu](https://discuss.elastic.co/u/teebu)\
**Replies:** 0\
**Last updated:** [May 3, 2020, 12:05am UTC](https://discuss.elastic.co/t/groovy-scripting-optional-paramters/230835 "2020-05-03T00:05:19Z")

</div>

I'm trying to figure out how to have optional params with default value. My script is simple: { "script": "doc\[field\].empty ? 0 : (201 - doc\[field\]) \* boost" } I want the boost to default to 1 if its omitted in the …

---

## [How to create a linegraph chart with different "dot" colors based on column values](https://discuss.elastic.co/t/how-to-create-a-linegraph-chart-with-different-dot-colors-based-on-column-values/230738)

<div class="topic-metadata">

**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\
**Replies:** 1\
**Last updated:** [May 2, 2020, 11:55pm UTC](https://discuss.elastic.co/t/how-to-create-a-linegraph-chart-with-different-dot-colors-based-on-column-values/230738 "2020-05-02T23:55:46Z")

</div>

Hi, x-axis - time y-axis - my\_metric (line graph) y-axis - mymetric2 (dots) on the line... I want to create a line graph where one of the columns has 3 possible values (1,2,3) and I want to show a "red", "green", "bl…

---

## [Field count limit](https://discuss.elastic.co/t/field-count-limit/230831)

<div class="topic-metadata">

**Author:** [@Antony\_Ukken](https://discuss.elastic.co/u/Antony_Ukken)\
**Replies:** 3\
**Last updated:** [May 2, 2020, 10:53pm UTC](https://discuss.elastic.co/t/field-count-limit/230831 "2020-05-02T22:53:42Z")

</div>

There is limit on the number of fields that a index can have. i guess by default the limit is around 1000. In my case, the fields are generated dynamically and there could be a lot of fields actually. Is there any way t…

---

## [Translate private ip to geo location using external dictionary](https://discuss.elastic.co/t/translate-private-ip-to-geo-location-using-external-dictionary/230710)

<div class="topic-metadata">

**Author:** [@ptamba](https://discuss.elastic.co/u/ptamba)\
**Replies:** 5\
**Last updated:** [May 2, 2020, 10:20pm UTC](https://discuss.elastic.co/t/translate-private-ip-to-geo-location-using-external-dictionary/230710 "2020-05-02T22:20:54Z")

</div>

Hi all, I'm trying to follow example in this link https://discuss.elastic.co/t/private-ip-geoip-from-dictionary/156763, however I can't seem to make it work. Basically I want to translate private ip address using exter…

---

## [How to hide default space on Kibana for users (basic license)](https://discuss.elastic.co/t/how-to-hide-default-space-on-kibana-for-users-basic-license/230799)

<div class="topic-metadata">

**Author:** [@nino](https://discuss.elastic.co/u/nino)\
**Replies:** 1\
**Last updated:** [May 2, 2020, 7:50pm UTC](https://discuss.elastic.co/t/how-to-hide-default-space-on-kibana-for-users-basic-license/230799 "2020-05-02T19:50:33Z")

</div>

Hello all, i am playing arund roles, spaces & users and i am not be able to hide default space to users. Default space is always present. Is that possible? elastic version: 7.5.0 Thanks

---

## [I have added SSL certificate ti single node cluster and I'm ended up with this error?](https://discuss.elastic.co/t/i-have-added-ssl-certificate-ti-single-node-cluster-and-im-ended-up-with-this-error/230823)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 1\
**Last updated:** [May 2, 2020, 7:35pm UTC](https://discuss.elastic.co/t/i-have-added-ssl-certificate-ti-single-node-cluster-and-im-ended-up-with-this-error/230823 "2020-05-02T19:35:06Z")

</div>

I have successfully installed SSL certificate and restarted the elasticsearch instance. Then while I'm running this query curl -k http://localhost:9200?pretty -u elastic I'm getting this error curl: (35) error:…

---

## [Apply scripted field to existing data retroactively?](https://discuss.elastic.co/t/apply-scripted-field-to-existing-data-retroactively/230812)

<div class="topic-metadata">

**Author:** [@gthang](https://discuss.elastic.co/u/gthang)\
**Replies:** 1\
**Last updated:** [May 2, 2020, 6:53pm UTC](https://discuss.elastic.co/t/apply-scripted-field-to-existing-data-retroactively/230812 "2020-05-02T18:53:53Z")

</div>

Hello, Is it possible to retroactively create a scripted field retroactively to an index? I have created some visualizations, and it works great with this new field and would like this field available from data capture…

---

## [How to calculate "net expansion factor"](https://discuss.elastic.co/t/how-to-calculate-net-expansion-factor/230824)

<div class="topic-metadata">

**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\
**Replies:** 2\
**Last updated:** [May 2, 2020, 6:44pm UTC](https://discuss.elastic.co/t/how-to-calculate-net-expansion-factor/230824 "2020-05-02T18:44:51Z")

</div>

Hi , I'm trying to figure out how to calculate "net expansion factor" , from reading a few notes I understand that net expansion factor = JSON Factor \* Indexing Factor \* Compression Factor but how can I calculate JS…

---

## [Http\_poller input with basic authentification](https://discuss.elastic.co/t/http-poller-input-with-basic-authentification/230811)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 1\
**Last updated:** [May 2, 2020, 5:48pm UTC](https://discuss.elastic.co/t/http-poller-input-with-basic-authentification/230811 "2020-05-02T17:48:59Z")

</div>

Hi , i can't get data from this api: this is my logstash file.conf: input { http\_poller { urls =\> { url =\> "XXXXXXXX" auth =\> { user =\> "bbc" password =\> "bbc" } } request\_timeout =\> 60 schedule =\> { every =\>…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1473)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1475)
