# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1484

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1485

---

## [Difference between Store and Fielddata](https://discuss.elastic.co/t/difference-between-store-and-fielddata/230114)

<div class="topic-metadata">

**Author:** [@divyangshah97](https://discuss.elastic.co/u/divyangshah97)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 9:05am UTC](https://discuss.elastic.co/t/difference-between-store-and-fielddata/230114 "2020-04-28T09:05:58Z")

</div>

Hi , My question relates to the difference between store : true and fielddata :true . As per my knowledge , store : true stores the values of a particular field . Fielddata true caches values for a particular field . Do…

---

## [ElasticSearch 7 APT repository - hash sum mismatch](https://discuss.elastic.co/t/elasticsearch-7-apt-repository-hash-sum-mismatch/226365)

<div class="topic-metadata">

**Author:** [@JYG\_NAOS](https://discuss.elastic.co/u/JYG_NAOS)\
**Replies:** 7\
**Last updated:** [April 28, 2020, 8:56am UTC](https://discuss.elastic.co/t/elasticsearch-7-apt-repository-hash-sum-mismatch/226365 "2020-04-28T08:56:34Z")

</div>

Hello, Since 31th March 2020, install from https://artifacts.elastic.co/packages/7.x/apt stable/main amd64 elasticsearch amd64 7.6.2 doesn't work because of hash sum mismatch. Problem is for multiple DEB packets. I te…

---

## [Index and query performance](https://discuss.elastic.co/t/index-and-query-performance/230104)

<div class="topic-metadata">

**Author:** [@Thomas\_Ardal](https://discuss.elastic.co/u/Thomas_Ardal)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 8:22am UTC](https://discuss.elastic.co/t/index-and-query-performance/230104 "2020-04-28T08:22:23Z")

</div>

I know there's a high level of "it depends" when it comes to splitting up data into indexes and shards. I still want to share some thoughts to try and find the best separation for my data. I currently have a single node…

---

## [Date parsing issue - ElasticSearch 7.6](https://discuss.elastic.co/t/date-parsing-issue-elasticsearch-7-6/229989)

<div class="topic-metadata">

**Author:** [@IanCap](https://discuss.elastic.co/u/IanCap)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 8:22am UTC](https://discuss.elastic.co/t/date-parsing-issue-elasticsearch-7-6/229989 "2020-04-28T08:22:13Z")

</div>

Hi everyone, I recently migrated from ElasticSearch 6.8 to 7.6 and i have an issue with the date format I'm pushing documents to ElasticSearch with the following format : yyyy-MM-dd'T'HH:mm:ssZ I red the following li…

---

## [Data not available in Visualization but available in Discover mode](https://discuss.elastic.co/t/data-not-available-in-visualization-but-available-in-discover-mode/230069)

<div class="topic-metadata">

**Author:** [@Manjula\_Wanasinghe](https://discuss.elastic.co/u/Manjula_Wanasinghe)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 8:18am UTC](https://discuss.elastic.co/t/data-not-available-in-visualization-but-available-in-discover-mode/230069 "2020-04-28T08:18:07Z")

</div>

Hi All, I have been trying to retrieve data into the Kibana visualization field but data not shown there whereas the data available in discover mode. my elasticsearch version is 7.4.2. I have no idea where the problem i…

---

## [Feed data into the newly created index](https://discuss.elastic.co/t/feed-data-into-the-newly-created-index/229822)

<div class="topic-metadata">

**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\
**Replies:** 7\
**Last updated:** [April 28, 2020, 7:53am UTC](https://discuss.elastic.co/t/feed-data-into-the-newly-created-index/229822 "2020-04-28T07:53:20Z")

</div>

I am new to ELK. I have created a new index myself. But the data is still feeding into the old index. How do i switch it to new index?

---

## [Extending storage of elasticsearch](https://discuss.elastic.co/t/extending-storage-of-elasticsearch/229307)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 7:52am UTC](https://discuss.elastic.co/t/extending-storage-of-elasticsearch/229307 "2020-04-28T07:52:11Z")

</div>

Hi Assume I have a storage size of 100 GB and it got filled up almost. Then I wish to extend the storage with external hard drive. Can I visualize both existing and external storage data in Kibana, means can I ask Kiban…

---

## [Upgraded all stack. Then get "Error fetching fields for index pattern" in kibana](https://discuss.elastic.co/t/upgraded-all-stack-then-get-error-fetching-fields-for-index-pattern-in-kibana/230060)

<div class="topic-metadata">

**Author:** [@InJong\_Park](https://discuss.elastic.co/u/InJong_Park)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 7:43am UTC](https://discuss.elastic.co/t/upgraded-all-stack-then-get-error-fetching-fields-for-index-pattern-in-kibana/230060 "2020-04-28T07:43:37Z")

</div>

Hi. I'm newbie. I'm upgraded all stack. 7.2.0 \>\> 7.6.2 Cluster's status is green Get error when i create index pattern in kibana. Error dialog Error fetching fields for index pattern ${index-pattern} (ID: 82699…

---

## [Visual Builder: fill the area between time series](https://discuss.elastic.co/t/visual-builder-fill-the-area-between-time-series/229999)

<div class="topic-metadata">

**Author:** [@Jessica\_d](https://discuss.elastic.co/u/Jessica_d)\
**Replies:** 2\
**Last updated:** [April 28, 2020, 7:17am UTC](https://discuss.elastic.co/t/visual-builder-fill-the-area-between-time-series/229999 "2020-04-28T07:17:46Z")

</div>

Hi, I was wondering if it was possible to fill the area between two lines (e.g. lower and upper bounds) in the tsvb like the single metric viewer of Anomaly Detection does.

---

## [Description for each field in Elasticsearch Index](https://discuss.elastic.co/t/description-for-each-field-in-elasticsearch-index/229659)

<div class="topic-metadata">

**Author:** [@dspatil90](https://discuss.elastic.co/u/dspatil90)\
**Replies:** 3\
**Last updated:** [April 28, 2020, 7:09am UTC](https://discuss.elastic.co/t/description-for-each-field-in-elasticsearch-index/229659 "2020-04-28T07:09:13Z")

</div>

Hello All, I am new to Elasticsearch. I wanted to create a description sub-field for each field in the index. For ex. {'properties': { 'location': { 'type': …

---

## [Creating index ~ mapping rdbms to index](https://discuss.elastic.co/t/creating-index-mapping-rdbms-to-index/230082)

<div class="topic-metadata">

**Author:** [@rajiv\_d](https://discuss.elastic.co/u/rajiv_d)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 6:02am UTC](https://discuss.elastic.co/t/creating-index-mapping-rdbms-to-index/230082 "2020-04-28T06:02:26Z")

</div>

We have an existing sql data from where we kind of planning to get only aggregated entity which is bounded by key constraints which is mapped to index . Now my query , is it good to have one sql table or entity per inde…

---

## [Batch http lookup filter](https://discuss.elastic.co/t/batch-http-lookup-filter/228789)

<div class="topic-metadata">

**Author:** [@AmirBahrami](https://discuss.elastic.co/u/AmirBahrami)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 5:52am UTC](https://discuss.elastic.co/t/batch-http-lookup-filter/228789 "2020-04-28T05:52:04Z")

</div>

Hey everybody I'm looking for a way to do batch lookups by http filter on some event field an then merge those parts together. I thought it'd be possible with something temporary like '@metadata' field but as I found m…

---

## [Sync data to elastic cloud](https://discuss.elastic.co/t/sync-data-to-elastic-cloud/230078)

<div class="topic-metadata">

**Author:** [@Neha\_Nakrani912](https://discuss.elastic.co/u/Neha_Nakrani912)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 5:37am UTC](https://discuss.elastic.co/t/sync-data-to-elastic-cloud/230078 "2020-04-28T05:37:33Z")

</div>

My data structure have a child-parent relationship and it’s bit complex nested structure of data so that can be nested objects to syncing raise Problem Let's say we have a parent-child relationship of has many and one t…

---

## [Elasticsearch Unknown Field, logEvents](https://discuss.elastic.co/t/elasticsearch-unknown-field-logevents/230076)

<div class="topic-metadata">

**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 5:23am UTC](https://discuss.elastic.co/t/elasticsearch-unknown-field-logevents/230076 "2020-04-28T05:23:02Z")

</div>

Hi there, I'm using ELK 7.6. I am ingesting logs from S3 buckets via SQS. These S3 logs are piped using Firehose from Cloudwatch logs. I have encountered Unknown Field, logEvents, in my indices. What it contains ins…

---

## [ECS network.direction field](https://discuss.elastic.co/t/ecs-network-direction-field/229662)

<div class="topic-metadata">

**Author:** [@Saurabh\_Singh1](https://discuss.elastic.co/u/Saurabh_Singh1)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 5:17am UTC](https://discuss.elastic.co/t/ecs-network-direction-field/229662 "2020-04-28T05:17:04Z")

</div>

Hi All, Can anybody help me in understanding the meaning of network.direction field in ECS ? I went through Network Fields | Elastic Common Schema (ECS) Reference \[8.11\] | Elastic Please help me with an example to un…

---

## [Failed to obtain node locks](https://discuss.elastic.co/t/failed-to-obtain-node-locks/229902)

<div class="topic-metadata">

**Author:** [@Rajeev\_Bhat](https://discuss.elastic.co/u/Rajeev_Bhat)\
**Replies:** 7\
**Last updated:** [April 28, 2020, 5:06am UTC](https://discuss.elastic.co/t/failed-to-obtain-node-locks/229902 "2020-04-28T05:06:21Z")

</div>

I have a single node ElasticSearch Cluster in local. I am unable to start elasticsearch service getting this error: \[bhatr@BLRVCESVM27547\]~/elasticsearch-6.8.8/bin% elasticsearch …

---

## [Split chart hide duplicate columns with no data](https://discuss.elastic.co/t/split-chart-hide-duplicate-columns-with-no-data/229895)

<div class="topic-metadata">

**Author:** [@Greg1](https://discuss.elastic.co/u/Greg1)\
**Replies:** 2\
**Last updated:** [April 28, 2020, 4:03am UTC](https://discuss.elastic.co/t/split-chart-hide-duplicate-columns-with-no-data/229895 "2020-04-28T04:03:55Z")

</div>

Hello, I would like to hide those columns with no data from the plot below. Often a split chart will be on a filtered set of the same data, and the buckets will be exclusive between the split charts (as you can see in t…

---

## [Host.name field winlogbeat (FQDN) vs filebeat (shortname)](https://discuss.elastic.co/t/host-name-field-winlogbeat-fqdn-vs-filebeat-shortname/228398)

<div class="topic-metadata">

**Author:** [@jimmburton](https://discuss.elastic.co/u/jimmburton)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 2:25am UTC](https://discuss.elastic.co/t/host-name-field-winlogbeat-fqdn-vs-filebeat-shortname/228398 "2020-04-28T02:25:13Z")

</div>

I have built a brand new 7.6.2 cluster and I am testing SIEM with it as well as making some changes in the architecture and index layout from my old 6.x cluster I have updated a few times. I have a windows system where …

---

## [How to use 'precision\_threshold' in TSVB?](https://discuss.elastic.co/t/how-to-use-precision-threshold-in-tsvb/229904)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 2\
**Last updated:** [April 28, 2020, 1:19am UTC](https://discuss.elastic.co/t/how-to-use-precision-threshold-in-tsvb/229904 "2020-04-28T01:19:16Z")

</div>

I am using cardinality aggregation in TSVB. In metric graph, 'precision threshold' was used in 'json input'. like this... { "precision\_threshold":40000 } How to use it in TSVB?

---

## [Logstash to transfer data from Elastic search source to Elastic Search Destination Realtime](https://discuss.elastic.co/t/logstash-to-transfer-data-from-elastic-search-source-to-elastic-search-destination-realtime/230055)

<div class="topic-metadata">

**Author:** [@vikrant\_baraiya1](https://discuss.elastic.co/u/vikrant_baraiya1)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 12:49am UTC](https://discuss.elastic.co/t/logstash-to-transfer-data-from-elastic-search-source-to-elastic-search-destination-realtime/230055 "2020-04-28T00:49:41Z")

</div>

Hello ES/Logstash Gurus, As I am new with Elastic Stack, I need your help. I am working on one of the Use Case which requires to transfer the data from one Elastic Search Cluster to another Elastic Search cluster in re…

---

## [Question about "forcemerge" policy](https://discuss.elastic.co/t/question-about-forcemerge-policy/230050)

<div class="topic-metadata">

**Author:** [@Hyunsoo\_Shim](https://discuss.elastic.co/u/Hyunsoo_Shim)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 12:07am UTC](https://discuss.elastic.co/t/question-about-forcemerge-policy/230050 "2020-04-28T00:07:41Z")

</div>

Hello, I want to know the policy of "forcemerge". (I am using Elasticsearch 6.5.2 version) For all I know, the automatic merge is following with TieredMergePolicy of Lucene, And some conditions can trigger merge acti…

---

## [Run Logstash config file from a web app](https://discuss.elastic.co/t/run-logstash-config-file-from-a-web-app/230052)

<div class="topic-metadata">

**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 12:25am UTC](https://discuss.elastic.co/t/run-logstash-config-file-from-a-web-app/230052 "2020-04-28T00:25:08Z")

</div>

Hello, I build a web app with flask. Through a button the user gonna choose a csv file from his desktop and when he clicks to submit a LOGSTASH config file gonna run to import that file (the user previously chosen) into…

---

## [Number of scroll contexts created by reindex](https://discuss.elastic.co/t/number-of-scroll-contexts-created-by-reindex/230051)

<div class="topic-metadata">

**Author:** [@bobbyi](https://discuss.elastic.co/u/bobbyi)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 12:20am UTC](https://discuss.elastic.co/t/number-of-scroll-contexts-created-by-reindex/230051 "2020-04-28T00:20:39Z")

</div>

I am performing a reindex operation from one index to another within the same cluster running ES 7.5.1. I am using slices=32 and I thought this meant that 32 scroll contexts would be created and used in parallel to pull …

---

## [How to customize kibana logo](https://discuss.elastic.co/t/how-to-customize-kibana-logo/226882)

<div class="topic-metadata">

**Author:** [@lokmanopt](https://discuss.elastic.co/u/lokmanopt)\
**Replies:** 5\
**Last updated:** [April 27, 2020, 11:45pm UTC](https://discuss.elastic.co/t/how-to-customize-kibana-logo/226882 "2020-04-27T23:45:44Z")

</div>

Dear Concern, Hope you are very well, I would like to inform you that, I want to some customize in kibana login page like Login Logo, as well as icon as per my requirement. I have attached a screenshot. Please check a…

---

## [Logo change](https://discuss.elastic.co/t/logo-change/226370)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 5\
**Last updated:** [April 27, 2020, 11:44pm UTC](https://discuss.elastic.co/t/logo-change/226370 "2020-04-27T23:44:23Z")

</div>

How can I change logo in newest Kibana?

---

## [Is it possible to schedule a reindex which only indexes certain messages?](https://discuss.elastic.co/t/is-it-possible-to-schedule-a-reindex-which-only-indexes-certain-messages/229966)

<div class="topic-metadata">

**Author:** [@Mugen](https://discuss.elastic.co/u/Mugen)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 10:57pm UTC](https://discuss.elastic.co/t/is-it-possible-to-schedule-a-reindex-which-only-indexes-certain-messages/229966 "2020-04-27T22:57:46Z")

</div>

Hi Folks. I'm currently using a cron job to reindex certain log-messages of multiple daily indexes into a new one. Is this possible via elastic internal tools like rollups ? Im currently querying the logs if they contai…

---

## [Issue with Kibana - {"statusCode":404,"error":"Not Found","message":"Not Found"}](https://discuss.elastic.co/t/issue-with-kibana-statuscode-404-error-not-found-message-not-found/229997)

<div class="topic-metadata">

**Author:** [@Georgios\_Nikoloudis](https://discuss.elastic.co/u/Georgios_Nikoloudis)\
**Replies:** 7\
**Last updated:** [April 27, 2020, 10:46pm UTC](https://discuss.elastic.co/t/issue-with-kibana-statuscode-404-error-not-found-message-not-found/229997 "2020-04-27T22:46:27Z")

</div>

Hi I have installed the ELK. I enabled the xpack and the even though the kibana status is showing all "green" when I am trying to access the kibana site I am getting the error: {"statusCode":404,"error":"Not Found","m…

---

## [Elastic Stack 6.8.8 and 7.6.2 security update](https://discuss.elastic.co/t/elastic-stack-6-8-8-and-7-6-2-security-update/225920)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [March 31, 2020, 5:08pm UTC](https://discuss.elastic.co/t/elastic-stack-6-8-8-and-7-6-2-security-update/225920 "2020-03-31T17:08:34Z")

</div>

Elasticsearch API key privilege escalation (ESA-2020-02) Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to create API keys. An attacker who is ab…

---

## [Child Dashboards?](https://discuss.elastic.co/t/child-dashboards/230040)

<div class="topic-metadata">

**Author:** [@edvrfn](https://discuss.elastic.co/u/edvrfn)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 10:17pm UTC](https://discuss.elastic.co/t/child-dashboards/230040 "2020-04-27T22:17:50Z")

</div>

I was watching a youtube video and noticed the dashboard the presenter was using had tabs. How can i replicate this behavior.

---

## [Organization of dashboard objects](https://discuss.elastic.co/t/organization-of-dashboard-objects/229146)

<div class="topic-metadata">

**Author:** [@dataplatform12345](https://discuss.elastic.co/u/dataplatform12345)\
**Replies:** 6\
**Last updated:** [April 27, 2020, 10:11pm UTC](https://discuss.elastic.co/t/organization-of-dashboard-objects/229146 "2020-04-27T22:11:24Z")

</div>

Hi, What are the typical ways to organize dashboard and visualization objects in a multi-tenant implementation of elastic stack. Is the Kibana Space the preferred and only approach ? Is it possible to create folders o…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1483)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1485)
