# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1485

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1486

---

## [For allocating unassigned replicas: Why does DiskThresholdDecider need free disk space \>= shard size when only a few MBs need to be recovered](https://discuss.elastic.co/t/for-allocating-unassigned-replicas-why-does-diskthresholddecider-need-free-disk-space-shard-size-when-only-a-few-mbs-need-to-be-recovered/230037)

<div class="topic-metadata">

**Author:** [@UDixit](https://discuss.elastic.co/u/UDixit)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 9:43pm UTC](https://discuss.elastic.co/t/for-allocating-unassigned-replicas-why-does-diskthresholddecider-need-free-disk-space-shard-size-when-only-a-few-mbs-need-to-be-recovered/230037 "2020-04-27T21:43:52Z")

</div>

ES5; Index size ~500GB, ShardSize ~45GB each. I have a 120GB disk and only 2 of the shards of this index are allocated on this disk. Currently, these replica shards are unassigned, with reason NODE-LEFT, doing a PEER r…

---

## [GROK match multiple pattern drop the log](https://discuss.elastic.co/t/grok-match-multiple-pattern-drop-the-log/229986)

<div class="topic-metadata">

**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 9:20pm UTC](https://discuss.elastic.co/t/grok-match-multiple-pattern-drop-the-log/229986 "2020-04-27T21:20:46Z")

</div>

I used following grok pattern to extract IIS log. The match message containing multiple grok pattern due to IIS log configuration on several server. Unfortunately one I have execute this filter, no messages were parsers…

---

## [Dotted fieldnames, how to create?](https://discuss.elastic.co/t/dotted-fieldnames-how-to-create/230018)

<div class="topic-metadata">

**Author:** [@WimDH](https://discuss.elastic.co/u/WimDH)\
**Replies:** 2\
**Last updated:** [April 27, 2020, 9:16pm UTC](https://discuss.elastic.co/t/dotted-fieldnames-how-to-create/230018 "2020-04-27T21:16:29Z")

</div>

Hi all, Not sure if this is the right place to ask... I'm new to ElasticStack, and I'm trying to find documentation on how fieldnames are built. When I look at Kibana Discover, I see fieldnames like host.name and syst…

---

## [Bind kibana's server.host to multiple interfaces (both localhost and 192.168.0.0/16)](https://discuss.elastic.co/t/bind-kibanas-server-host-to-multiple-interfaces-both-localhost-and-192-168-0-0-16/229789)

<div class="topic-metadata">

**Author:** [@archon810](https://discuss.elastic.co/u/archon810)\
**Replies:** 2\
**Last updated:** [April 27, 2020, 9:14pm UTC](https://discuss.elastic.co/t/bind-kibanas-server-host-to-multiple-interfaces-both-localhost-and-192-168-0-0-16/229789 "2020-04-27T21:14:32Z")

</div>

Hi, I'd like to be able to access kibana by typing in localhost:5601 as well as MACHINE\_HOST\_NAME:5601. Elastic can do it easily with network.host: \[\_site\_, \_local\_\]. But I haven't found a way to do this in kibana. I …

---

## [Can I safely use Solr and Elasticsearch dependencies in the same Java project?](https://discuss.elastic.co/t/can-i-safely-use-solr-and-elasticsearch-dependencies-in-the-same-java-project/230029)

<div class="topic-metadata">

**Author:** [@rmavilia\_w](https://discuss.elastic.co/u/rmavilia_w)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 8:54pm UTC](https://discuss.elastic.co/t/can-i-safely-use-solr-and-elasticsearch-dependencies-in-the-same-java-project/230029 "2020-04-27T20:54:44Z")

</div>

Intro Hi so I have a Java project which started as a way to get data from a database and transport it into Solr. This project uses Maven and relies on the solr-core and solr-solrj artifacts as dependencies. For the Solr…

---

## [Repository verification exception when trying to create snapshot](https://discuss.elastic.co/t/repository-verification-exception-when-trying-to-create-snapshot/225125)

<div class="topic-metadata">

**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\
**Replies:** 5\
**Last updated:** [April 27, 2020, 8:54pm UTC](https://discuss.elastic.co/t/repository-verification-exception-when-trying-to-create-snapshot/225125 "2020-04-27T20:54:30Z")

</div>

version: 7.6.1 We are using the latest version of elasticsearch in kubernetes and the cluster is not able to verify the snapshot repository. As you can see, I'm able to upload files to the bucket and I was also able to…

---

## [Can use multiple field in compare\_key?](https://discuss.elastic.co/t/can-use-multiple-field-in-compare-key/229883)

<div class="topic-metadata">

**Author:** [@shilpa](https://discuss.elastic.co/u/shilpa)\
**Replies:** 2\
**Last updated:** [April 27, 2020, 8:34pm UTC](https://discuss.elastic.co/t/can-use-multiple-field-in-compare-key/229883 "2020-04-27T20:34:20Z")

</div>

Two questions: Does below elastalert rule is correct to get a cumulative data in "system.network.in.dropped"? Can we use two fields in compare\_key? we tried but did not work means when have both fields then do not send…

---

## [To implement Kibana reporting feature for free](https://discuss.elastic.co/t/to-implement-kibana-reporting-feature-for-free/229821)

<div class="topic-metadata">

**Author:** [@hitesh6666k](https://discuss.elastic.co/u/hitesh6666k)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 8:21pm UTC](https://discuss.elastic.co/t/to-implement-kibana-reporting-feature-for-free/229821 "2020-04-27T20:21:26Z")

</div>

Wants to use kibana x-pack reporting feature for free. Is any way to implement this. If not is any other way to do it.

---

## [Kibana: hide chart label and values](https://discuss.elastic.co/t/kibana-hide-chart-label-and-values/229806)

<div class="topic-metadata">

**Author:** [@kimjavier43](https://discuss.elastic.co/u/kimjavier43)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 8:10pm UTC](https://discuss.elastic.co/t/kibana-hide-chart-label-and-values/229806 "2020-04-27T20:10:29Z")

</div>

Hello, How can I hide the chart labels for empty values when using filter aggregation? Thanks,

---

## [Getting Index related error on kibana](https://discuss.elastic.co/t/getting-index-related-error-on-kibana/229797)

<div class="topic-metadata">

**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 8:08pm UTC](https://discuss.elastic.co/t/getting-index-related-error-on-kibana/229797 "2020-04-27T20:08:14Z")

</div>

On integrating beats - logstash with elasticsearch, on kibana Saved "field" parameter is now invalid. Please select a new field. \[esaggs\] \> "field" is a required parameter PS: Tested on winlogbeat, packetbeat, metricb…

---

## [How to get distinct values from elastic search](https://discuss.elastic.co/t/how-to-get-distinct-values-from-elastic-search/230020)

<div class="topic-metadata">

**Author:** [@msaundi](https://discuss.elastic.co/u/msaundi)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 7:53pm UTC](https://discuss.elastic.co/t/how-to-get-distinct-values-from-elastic-search/230020 "2020-04-27T19:53:15Z")

</div>

Hello, I am trying to get distinct count form the elastic search. for the grouping I am using cardinality aggregation along with query string. I am using elastic 6.x with php client. below is my query. Array …

---

## [Calculate Avg By Doing Query1 Count/Query2 Count](https://discuss.elastic.co/t/calculate-avg-by-doing-query1-count-query2-count/229787)

<div class="topic-metadata">

**Author:** [@karanmig12](https://discuss.elastic.co/u/karanmig12)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 7:59pm UTC](https://discuss.elastic.co/t/calculate-avg-by-doing-query1-count-query2-count/229787 "2020-04-27T19:59:33Z")

</div>

I have 2 Queries for an index which are calculating Count on "field1" but have different filter Criteria. I would build a metric chart to show count from Query1/Count from Query2. I am using Kibana 6.7

---

## [In jvm.options file pass kill -9 for killing logstash on outofmemory](https://discuss.elastic.co/t/in-jvm-options-file-pass-kill-9-for-killing-logstash-on-outofmemory/227414)

<div class="topic-metadata">

**Author:** [@Sunil\_Vp](https://discuss.elastic.co/u/Sunil_Vp)\
**Replies:** 2\
**Last updated:** [April 27, 2020, 7:58pm UTC](https://discuss.elastic.co/t/in-jvm-options-file-pass-kill-9-for-killing-logstash-on-outofmemory/227414 "2020-04-27T19:58:12Z")

</div>

Hi, I wanted to pass -XX:OnOutOfMemoryError=kill -9 %p option to the JVM arguments of logstash. I added the same in jvm.options file, But once i add it i get: Error: Could not create the Java Virtual Machine. Error: A…

---

## [Filtering records in kibana based on conditions](https://discuss.elastic.co/t/filtering-records-in-kibana-based-on-conditions/229634)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 10\
**Last updated:** [April 27, 2020, 7:55pm UTC](https://discuss.elastic.co/t/filtering-records-in-kibana-based-on-conditions/229634 "2020-04-27T19:55:00Z")

</div>

Hi, Can some one please help in the below scenario. I have the data 1000 records with each record is having 10 fields. I want to display the table with number of output fields. one out put field calculation is : fie…

---

## [I want to take the count of Top Hits Status](https://discuss.elastic.co/t/i-want-to-take-the-count-of-top-hits-status/229753)

<div class="topic-metadata">

**Author:** [@Upasana\_Gupta](https://discuss.elastic.co/u/Upasana_Gupta)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 7:50pm UTC](https://discuss.elastic.co/t/i-want-to-take-the-count-of-top-hits-status/229753 "2020-04-27T19:50:49Z")

</div>

Hi, I am creating a Kibana report where I wanted to fetch Latest Results of Testcase Status. As I understand,we dont have Top Hit available for String for any Graphical visualization like Piechart/Vertical Graph. So I …

---

## [Data Table Related Query](https://discuss.elastic.co/t/data-table-related-query/229882)

<div class="topic-metadata">

**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 7:27pm UTC](https://discuss.elastic.co/t/data-table-related-query/229882 "2020-04-27T19:27:30Z")

</div>

Is it possible to have a data table where for every cell I can specify the ES query which should be used to populate that cell? I just want to display a lot of metrics in a tabular fashion rather than having to create s…

---

## [Color formatter for table](https://discuss.elastic.co/t/color-formatter-for-table/229873)

<div class="topic-metadata">

**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 7:25pm UTC](https://discuss.elastic.co/t/color-formatter-for-table/229873 "2020-04-27T19:25:18Z")

</div>

I'm trying to get the color formatter working for a Kibana EuiBasicTable object, but I'm not seeing any changes. If I load a "Data Table" from the "New Visualization" selection window in Kibana, that table does show my c…

---

## [Logstash does not clean the old generation of garbage](https://discuss.elastic.co/t/logstash-does-not-clean-the-old-generation-of-garbage/230008)

<div class="topic-metadata">

**Author:** [@lym](https://discuss.elastic.co/u/lym)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 6:48pm UTC](https://discuss.elastic.co/t/logstash-does-not-clean-the-old-generation-of-garbage/230008 "2020-04-27T18:48:22Z")

</div>

Hi, I have a problem with logstash, it starts working normally, but later I see huge heap usage. After analyzing logs from garbage collector I see that Old Generation is rises and not cleaned well. It leads to degradatio…

---

## [Lapsed time column in a table which needs to be a running time](https://discuss.elastic.co/t/lapsed-time-column-in-a-table-which-needs-to-be-a-running-time/226066)

<div class="topic-metadata">

**Author:** [@RichardBaerveldt](https://discuss.elastic.co/u/RichardBaerveldt)\
**Replies:** 3\
**Last updated:** [April 27, 2020, 6:37pm UTC](https://discuss.elastic.co/t/lapsed-time-column-in-a-table-which-needs-to-be-a-running-time/226066 "2020-04-27T18:37:54Z")

</div>

Hi Guys, I am busy with a project to create real time dashboards for our workflow. Our POC was successful and I'm busy clarifying the final requirements. One thing which I am stumped with is an elapsed time value which …

---

## [Input and output "message" field in Ruby filter](https://discuss.elastic.co/t/input-and-output-message-field-in-ruby-filter/229886)

<div class="topic-metadata">

**Author:** [@erikwp](https://discuss.elastic.co/u/erikwp)\
**Replies:** 2\
**Last updated:** [April 27, 2020, 6:21pm UTC](https://discuss.elastic.co/t/input-and-output-message-field-in-ruby-filter/229886 "2020-04-27T18:21:20Z")

</div>

I am having difficulties with the Ruby filter. As I understand it, "message" is the default field that contains your input. What I want to do is take my input and filter the whole message string into my Ruby filter (whic…

---

## [Is there any API directly tell how many shard on a node](https://discuss.elastic.co/t/is-there-any-api-directly-tell-how-many-shard-on-a-node/229736)

<div class="topic-metadata">

**Author:** [@Louis\_Zhang](https://discuss.elastic.co/u/Louis_Zhang)\
**Replies:** 4\
**Last updated:** [April 27, 2020, 6:14pm UTC](https://discuss.elastic.co/t/is-there-any-api-directly-tell-how-many-shard-on-a-node/229736 "2020-04-27T18:14:43Z")

</div>

is there any API like GET /\_cat/nodes to get the quatiity of the shard on a node \[ { "name" : "node-2", "cpu" : "1" }, { "name" : "node-1", "cpu" : "4" }, { "name" : "node-3", "cpu" :…

---

## [Getting "1 of 2 shards failed"](https://discuss.elastic.co/t/getting-1-of-2-shards-failed/229781)

<div class="topic-metadata">

**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\
**Replies:** 2\
**Last updated:** [April 27, 2020, 6:06pm UTC](https://discuss.elastic.co/t/getting-1-of-2-shards-failed/229781 "2020-04-27T18:06:30Z")

</div>

When i opened the dashboard on kibana, I am getting 1 of 2 shards failed The data you are seeing might be incomplete or wrong.

---

## [Query on Incremental backups using snapshots](https://discuss.elastic.co/t/query-on-incremental-backups-using-snapshots/229597)

<div class="topic-metadata">

**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\
**Replies:** 4\
**Last updated:** [April 27, 2020, 5:56pm UTC](https://discuss.elastic.co/t/query-on-incremental-backups-using-snapshots/229597 "2020-04-27T17:56:49Z")

</div>

Hi, We use elasticsearch snapshot API to take backup of ES data daily and also regularly copy the entire content from the snapshot repository to another remote system. Now that we have huge amount of data in ES (in TBs…

---

## [Elastic-search cluster load-balancing](https://discuss.elastic.co/t/elastic-search-cluster-load-balancing/230003)

<div class="topic-metadata">

**Author:** [@opensourcengineer](https://discuss.elastic.co/u/opensourcengineer)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 5:55pm UTC](https://discuss.elastic.co/t/elastic-search-cluster-load-balancing/230003 "2020-04-27T17:55:13Z")

</div>

I am using Elastic-search version 7.5.2 . My cluster has 1 master node and 3 data nodes and 1 co-ordinating node which is essentially a kibana node. The workflow is beats-\>logstash-\>elasti-search-\>kibana. All my logs …

---

## [Indices name in logstash conf not reflecting in kibana](https://discuss.elastic.co/t/indices-name-in-logstash-conf-not-reflecting-in-kibana/230001)

<div class="topic-metadata">

**Author:** [@opensourcengineer](https://discuss.elastic.co/u/opensourcengineer)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 5:49pm UTC](https://discuss.elastic.co/t/indices-name-in-logstash-conf-not-reflecting-in-kibana/230001 "2020-04-27T17:49:34Z")

</div>

i m using 7.5.2 version of ELK . my pipeline is as follows: Beast -\> logstash -\> elastic-search-\> kibana i am giving the indices name in my logstash conf file but its not reflecting in my kibana. its is showing the def…

---

## [Geopoint common Schema suggestion](https://discuss.elastic.co/t/geopoint-common-schema-suggestion/229562)

<div class="topic-metadata">

**Author:** [@Patrick\_Harris](https://discuss.elastic.co/u/Patrick_Harris)\
**Replies:** 6\
**Last updated:** [April 27, 2020, 5:38pm UTC](https://discuss.elastic.co/t/geopoint-common-schema-suggestion/229562 "2020-04-27T17:38:05Z")

</div>

Geopoint needs altitude added: Use cases are: Things that move need lat, long and altitude Vehicles, humans and covid are all moving. Need to correlate on altitude. Thx for considering suggestion.

---

## [Could not index event to Elasticsearch Errror](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-errror/229740)

<div class="topic-metadata">

**Author:** [@bruno\_aleixo](https://discuss.elastic.co/u/bruno_aleixo)\
**Replies:** 4\
**Last updated:** [April 27, 2020, 5:09pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-errror/229740 "2020-04-27T17:09:09Z")

</div>

Hi, Please, help me with error \[2020-04-25T01:23:57,058\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"wl\_audit-2020.04.25", :\_ty…

---

## [Custom regionmap not working](https://discuss.elastic.co/t/custom-regionmap-not-working/229553)

<div class="topic-metadata">

**Author:** [@Zakwan\_hajjar](https://discuss.elastic.co/u/Zakwan_hajjar)\
**Replies:** 6\
**Last updated:** [April 27, 2020, 5:07pm UTC](https://discuss.elastic.co/t/custom-regionmap-not-working/229553 "2020-04-27T17:07:02Z")

</div>

I get error “Cannot download https://d1lbavwamyyh16.cloudfront.net/kibana/us\_counties\_with\_states.geojson file. Please ensure the CORS configuration of the server permits requests from the Kibana application on this host…

---

## [Elasticsearch Java API : token \['result'\] was expecting one of \[{\<EOF\>, ';'}\]](https://discuss.elastic.co/t/elasticsearch-java-api-token-result-was-expecting-one-of-eof/229995)

<div class="topic-metadata">

**Author:** [@shamim\_Khadivinia](https://discuss.elastic.co/u/shamim_Khadivinia)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 5:06pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-token-result-was-expecting-one-of-eof/229995 "2020-04-27T17:06:54Z")

</div>

I wanna update one of the fields with new value In the document. The type of new value is JSON. I send a String parameter it works but when I send JSON it has an error. UpdateResponse response = dataTransport…

---

## [Kibana Server not ready yet](https://discuss.elastic.co/t/kibana-server-not-ready-yet/229685)

<div class="topic-metadata">

**Author:** [@aman97](https://discuss.elastic.co/u/aman97)\
**Replies:** 9\
**Last updated:** [April 27, 2020, 4:59pm UTC](https://discuss.elastic.co/t/kibana-server-not-ready-yet/229685 "2020-04-27T16:59:50Z")

</div>

Hi Everyone, I have installed kibana and elastic search on my VM, elasticsearch is running and accessible outside the VM but when I run kibana and try to access on the browser it showing kibana server not ready yet.but …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1484)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1486)
