# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1530 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1531 --- ## [Kibana /elastic analytics use case](https://discuss.elastic.co/t/kibana-elastic-analytics-use-case/226225)
**Author:** [@rpc](https://discuss.elastic.co/u/rpc)\ **Replies:** 2\ **Last updated:** [April 6, 2020, 2:04pm UTC](https://discuss.elastic.co/t/kibana-elastic-analytics-use-case/226225 "2020-04-06T14:04:26Z")
Hi we are looking if there is any of the existing elastic /kibana feature or products the will help us achieve the below use case find the patients in the patient\_hie\_\* index pattern that doesnt exist in other index pa… --- ## [Terms aggregation: how many is too many?](https://discuss.elastic.co/t/terms-aggregation-how-many-is-too-many/226653)
**Author:** [@mredaelli](https://discuss.elastic.co/u/mredaelli)\ **Replies:** 1\ **Last updated:** [April 6, 2020, 1:54pm UTC](https://discuss.elastic.co/t/terms-aggregation-how-many-is-too-many/226653 "2020-04-06T13:54:15Z")
In the documentation for the terms aggregation it is stated that to retrieve all terms you'd normally go for a composite aggregation and use paging. Since for our current use-case having a one-shot query would be much e… --- ## [How to join a index to filter aggregations](https://discuss.elastic.co/t/how-to-join-a-index-to-filter-aggregations/226250)
**Author:** [@maxheyer](https://discuss.elastic.co/u/maxheyer)\ **Replies:** 4\ **Last updated:** [April 6, 2020, 1:52pm UTC](https://discuss.elastic.co/t/how-to-join-a-index-to-filter-aggregations/226250 "2020-04-06T13:52:25Z")
I'm trying to filter my result by a second index. Elasticsearch version 6.2.2 Can I filter my aggregations by "joining" a second index named product? Something like: { "query": { "bool": { "must": \[ … --- ## [Parse\_exception errror](https://discuss.elastic.co/t/parse-exception-errror/226659)
**Author:** [@thywoe](https://discuss.elastic.co/u/thywoe)\ **Replies:** 1\ **Last updated:** [April 6, 2020, 1:52pm UTC](https://discuss.elastic.co/t/parse-exception-errror/226659 "2020-04-06T13:52:21Z")
Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"parse\_exception","reason":"failed to parse date field \[-1588464815700\] with format \[epoch\_millis\]: \[failed to parse date field \[-1588464815700\] wit… --- ## [Share dashboard problem](https://discuss.elastic.co/t/share-dashboard-problem/226683)
**Author:** [@sowter](https://discuss.elastic.co/u/sowter)\ **Replies:** 1\ **Last updated:** [April 6, 2020, 1:48pm UTC](https://discuss.elastic.co/t/share-dashboard-problem/226683 "2020-04-06T13:48:12Z")
I don't want to share the Red area just share the blue area what should I do because there are no search and Date selection in visualize --- ## [Elasticsearch 5.6.16 on Ubuntu 18.04](https://discuss.elastic.co/t/elasticsearch-5-6-16-on-ubuntu-18-04/226698)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 1\ **Last updated:** [April 6, 2020, 1:46pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-16-on-ubuntu-18-04/226698 "2020-04-06T13:46:56Z")
Can someone let me know if elasticsearch is supported on Ubuntu 18.04? I looked through the 5.6.16 documentation but could not find anything related to Ubuntu 18. --- ## [Can I Extend the Logstash API?](https://discuss.elastic.co/t/can-i-extend-the-logstash-api/226714)
**Author:** [@bibblyb](https://discuss.elastic.co/u/bibblyb)\ **Replies:** 1\ **Last updated:** [April 6, 2020, 1:25pm UTC](https://discuss.elastic.co/t/can-i-extend-the-logstash-api/226714 "2020-04-06T13:25:38Z")
I'm looking to extend the API logstash provides to add an endpoint for scraping more in-depth metrics for our prometheus monitoring. I've been examining the source code and can get something working with adding a manual… --- ## [Mixing data](https://discuss.elastic.co/t/mixing-data/226021)
**Author:** [@yen\_l\_ng\_th](https://discuss.elastic.co/u/yen_l_ng_th)\ **Replies:** 3\ **Last updated:** [April 6, 2020, 1:20pm UTC](https://discuss.elastic.co/t/mixing-data/226021 "2020-04-06T13:20:49Z")
I want to add an object to the query. Is there any solution? Example Object = { Struct} data query return = \[Obj1, Obj2, Obj3\] How that Object is in the returned data query data = \[Obj1, Obj2, Obj3, Object \] --- ## [Doubts: Sending data from apm-agent to apm-server](https://discuss.elastic.co/t/doubts-sending-data-from-apm-agent-to-apm-server/226677)
**Author:** [@AkbarHabeeb](https://discuss.elastic.co/u/AkbarHabeeb)\ **Replies:** 2\ **Last updated:** [April 6, 2020, 1:02pm UTC](https://discuss.elastic.co/t/doubts-sending-data-from-apm-agent-to-apm-server/226677 "2020-04-06T13:02:57Z")
I have few questions, Does APM keeps polling the data from apm-agent to apm-server ? Does the agent waits for response from the server ? What will be the response from the server ? Does APM group the details(data) an… --- ## [Metricbeat: Not using docker but getting error: "Is the docker daemon running?"](https://discuss.elastic.co/t/metricbeat-not-using-docker-but-getting-error-is-the-docker-daemon-running/226696)
**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\ **Replies:** 1\ **Last updated:** [April 6, 2020, 1:06pm UTC](https://discuss.elastic.co/t/metricbeat-not-using-docker-but-getting-error-is-the-docker-daemon-running/226696 "2020-04-06T13:06:57Z")
Hello, I just installed using rpm metricbeat 6.6.2. In /lib/systemd/system I have service metricbeat.service. When I want to run it using service metricbeat start I'm getting error: ERROR instance/beat.go:911 Ex… --- ## [One cluster to monitor them all](https://discuss.elastic.co/t/one-cluster-to-monitor-them-all/226598)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 3\ **Last updated:** [April 6, 2020, 1:03pm UTC](https://discuss.elastic.co/t/one-cluster-to-monitor-them-all/226598 "2020-04-06T13:03:46Z")
Hi there So I'm planning to deploy a single cluster to centralize logs and metrics from a group of different clients. The scope of this would be metrics from hosts and services (Metricbeat), log files (Filebeat), networ… --- ## [Is this possible?](https://discuss.elastic.co/t/is-this-possible/226713)
**Author:** [@Thomas1](https://discuss.elastic.co/u/Thomas1)\ **Replies:** 0\ **Last updated:** [April 6, 2020, 12:46pm UTC](https://discuss.elastic.co/t/is-this-possible/226713 "2020-04-06T12:46:57Z")
Hi everyone, We would like to use an SQL DB (MySQL to be exact) with ELK in order to display some financial and banking data. Is this possible? And if the answer is positive, what should we do in order to link MySQL w… --- ## [How to use regex in role\_mapping.yml](https://discuss.elastic.co/t/how-to-use-regex-in-role-mapping-yml/226241)
**Author:** [@spadhi](https://discuss.elastic.co/u/spadhi)\ **Replies:** 2\ **Last updated:** [April 6, 2020, 12:25pm UTC](https://discuss.elastic.co/t/how-to-use-regex-in-role-mapping-yml/226241 "2020-04-06T12:25:30Z")
I am using below Role mapping configuration in role\_mapping.yml and it works. kibana\_user: - "CN=grp1\_viewer,OU=Groups,OU=ISO,DC=abcd,DC=com" - "CN=grp1\_editor,OU=Groups,OU=ISO,DC=abcd,DC=com" - "CN=grp1\_admin,OU=Gro… --- ## [Querying distinct sub message from elastic search](https://discuss.elastic.co/t/querying-distinct-sub-message-from-elastic-search/226665)
**Author:** [@vinodvenugopal](https://discuss.elastic.co/u/vinodvenugopal)\ **Replies:** 3\ **Last updated:** [April 6, 2020, 12:01pm UTC](https://discuss.elastic.co/t/querying-distinct-sub-message-from-elastic-search/226665 "2020-04-06T12:01:36Z")
Hi, I am new to ELK stack and trying to create dashboard in Kibana for my project. I want to query distinct values in message. For example, I want to display number to messages received in Kafka topic. "\_inde… --- ## [Logstash batch size query](https://discuss.elastic.co/t/logstash-batch-size-query/226651)
**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\ **Replies:** 3\ **Last updated:** [April 6, 2020, 11:33am UTC](https://discuss.elastic.co/t/logstash-batch-size-query/226651 "2020-04-06T11:33:45Z")
Hi Team, We have observed that we are missing logs.Currently we have 24 workers and batch size 125 and batch delay 50 ms.Heap size is 8 GB.Currently we are getting 300000 logs per second.Do we have to increase batch siz… --- ## [Reindex with mapping of data](https://discuss.elastic.co/t/reindex-with-mapping-of-data/226692)
**Author:** [@yBother](https://discuss.elastic.co/u/yBother)\ **Replies:** 0\ **Last updated:** [April 6, 2020, 11:31am UTC](https://discuss.elastic.co/t/reindex-with-mapping-of-data/226692 "2020-04-06T11:31:41Z")
I am using high level NEST client for C# version 7.6.0. I want to migrate existing data created in 5.2 to 7.6.0 I understand that I need to migrate to version 6.x (6.8) first. The only thing I found was this: var r… --- ## [Logstash 6.6.0 with syslog output 3.0.5 ssl-tcp issue](https://discuss.elastic.co/t/logstash-6-6-0-with-syslog-output-3-0-5-ssl-tcp-issue/226684)
**Author:** [@J.Timmer](https://discuss.elastic.co/u/J.Timmer)\ **Replies:** 0\ **Last updated:** [April 6, 2020, 11:04am UTC](https://discuss.elastic.co/t/logstash-6-6-0-with-syslog-output-3-0-5-ssl-tcp-issue/226684 "2020-04-06T11:04:53Z")
Hello all, I am having trouble getting the syslog output working with the ssl-tcp setting. Once I configure the pipeline to use ssl-tcp I get the following errors: Error registering plugin {:pipeline\_id=\>"\", :p… --- ## [Restoring snapshot on another machine?](https://discuss.elastic.co/t/restoring-snapshot-on-another-machine/226390)
**Author:** [@Arp](https://discuss.elastic.co/u/Arp)\ **Replies:** 3\ **Last updated:** [April 6, 2020, 11:04am UTC](https://discuss.elastic.co/t/restoring-snapshot-on-another-machine/226390 "2020-04-06T11:04:28Z")
Hi, I am playing around with elasticsearch. I have three VMs set up. 1 provides a common nfs folder. Every machine has access to it. 2 has a syslog server which sends logs into elasticsearch 3 is supposed to be a mac… --- ## [Elasticsearch not update](https://discuss.elastic.co/t/elasticsearch-not-update/226341)
**Author:** [@111306](https://discuss.elastic.co/u/111306)\ **Replies:** 9\ **Last updated:** [April 6, 2020, 10:38am UTC](https://discuss.elastic.co/t/elasticsearch-not-update/226341 "2020-04-06T10:38:26Z")
I met a strange thing, that is, I can use \_update\_by\_query locally to successfully update, but not on the server. I considered the problem of multithreading and added a lock, but it still doesn't work. Can anyone have id… --- ## [How to make Logstash talk to Elasticsearch?](https://discuss.elastic.co/t/how-to-make-logstash-talk-to-elasticsearch/226080)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 3\ **Last updated:** [April 6, 2020, 10:23am UTC](https://discuss.elastic.co/t/how-to-make-logstash-talk-to-elasticsearch/226080 "2020-04-06T10:23:13Z")
I have Elasticsearch running in K8s via the operator, and want to talk to it from Logstash. Everything I've tried so far has failed, mostly resulting in \[2020-04-01T15:25:22,773\]\[WARN \]\[logstash.outputs.elasticsearch\] … --- ## [How to define order of stacked values in TSVB?](https://discuss.elastic.co/t/how-to-define-order-of-stacked-values-in-tsvb/226358)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [April 6, 2020, 9:46am UTC](https://discuss.elastic.co/t/how-to-define-order-of-stacked-values-in-tsvb/226358 "2020-04-06T09:46:09Z")
Hi, I've setup a new dev system of elastic stack. Currently Version 7.5.1. I imported a space and it's saved object from previous kibana version 7.4.2. When I open the dashboard TSVB looks different. the order of the… --- ## [Elasticsearch update by query problem](https://discuss.elastic.co/t/elasticsearch-update-by-query-problem/226611)
**Author:** [@111306](https://discuss.elastic.co/u/111306)\ **Replies:** 1\ **Last updated:** [April 6, 2020, 9:42am UTC](https://discuss.elastic.co/t/elasticsearch-update-by-query-problem/226611 "2020-04-06T09:42:45Z")
遇到一个问题，我的 elasticsearch 版本是 7.6.1 ，使用的系统是 Debian 9 。我们在线上运行 elasticsearch 时，发现使用 update\_by\_query 接口发现有时并没有更新，但单个请求又是成功的。什么情况下会显示更新成功，但并没有发生更新呢？请问这个是什么问题，困扰很久了。 --- ## [Failed to execute bulk item error in elasticsearch pods](https://discuss.elastic.co/t/failed-to-execute-bulk-item-error-in-elasticsearch-pods/226385)
**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\ **Replies:** 2\ **Last updated:** [April 6, 2020, 9:30am UTC](https://discuss.elastic.co/t/failed-to-execute-bulk-item-error-in-elasticsearch-pods/226385 "2020-04-06T09:30:25Z")
Hi Team, Recently, I configured elasticsearch cluster with official helm by using default values. I have not changed any setting. I am seeing few error messages related to index. Could you guide me why I am getting b… --- ## [Regarding Cluster Sizing](https://discuss.elastic.co/t/regarding-cluster-sizing/226509)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 5\ **Last updated:** [April 6, 2020, 9:25am UTC](https://discuss.elastic.co/t/regarding-cluster-sizing/226509 "2020-04-06T09:25:14Z")
Hi, If I deploy a topology that separates ingest nodes and data nodes, all things being equal, how many data nodes can be served by a single ingest node without the heap of the ingest node becoming a bottleneck? Thx D … --- ## [Flushing logs from AWS S3 bucket to ElasticSearch : Validation Failed: 1: type is missing](https://discuss.elastic.co/t/flushing-logs-from-aws-s3-bucket-to-elasticsearch-validation-failed-1-type-is-missing/226661)
**Author:** [@IanCap](https://discuss.elastic.co/u/IanCap)\ **Replies:** 0\ **Last updated:** [April 6, 2020, 9:21am UTC](https://discuss.elastic.co/t/flushing-logs-from-aws-s3-bucket-to-elasticsearch-validation-failed-1-type-is-missing/226661 "2020-04-06T09:21:28Z")
Hi everyone, I'm currently trying to collect logs files stored in a S3 Bucket on AWS and send them to a clouded ES deployment. I followed the following tutorial : https://developers.cloudflare.com/logs/analytics-integra… --- ## [Node stats - indices.search.scroll\_time\_in\_millis](https://discuss.elastic.co/t/node-stats-indices-search-scroll-time-in-millis/226660)
**Author:** [@whatgeorgemade](https://discuss.elastic.co/u/whatgeorgemade)\ **Replies:** 0\ **Last updated:** [April 6, 2020, 9:21am UTC](https://discuss.elastic.co/t/node-stats-indices-search-scroll-time-in-millis/226660 "2020-04-06T09:21:21Z")
I've been looking through some stats in a customer's cluster and have noticed a lot of time is being spent performing scroll operations, according to indices.search.scroll\_time\_in\_millis. There is a legitimate use-case … --- ## [How to replace ' to " with gsub](https://discuss.elastic.co/t/how-to-replace-to-with-gsub/226612)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 4\ **Last updated:** [April 6, 2020, 9:11am UTC](https://discuss.elastic.co/t/how-to-replace-to-with-gsub/226612 "2020-04-06T09:11:28Z")
Hi all How can i use gsub to replace ' to become ", i need it to parse json data. So some how json can only parse data field with "" and not '' so i need to replace ' to ". Can anyone help me Thanks in advance --- ## [Unique Count Conditions](https://discuss.elastic.co/t/unique-count-conditions/225377)
**Author:** [@Oggy](https://discuss.elastic.co/u/Oggy)\ **Replies:** 5\ **Last updated:** [April 6, 2020, 9:00am UTC](https://discuss.elastic.co/t/unique-count-conditions/225377 "2020-04-06T09:00:53Z")
Hello, I need to do an unique count of items that are duplicates, let me explain. We use customer.id , it is unique for every customer. What we would like to visualize is only the customer.id's that are logged more than… --- ## [Logstash aggregate filter use with pagination](https://discuss.elastic.co/t/logstash-aggregate-filter-use-with-pagination/226530)
**Author:** [@kamboh](https://discuss.elastic.co/u/kamboh)\ **Replies:** 4\ **Last updated:** [April 5, 2020, 9:51am UTC](https://discuss.elastic.co/t/logstash-aggregate-filter-use-with-pagination/226530 "2020-04-05T09:51:23Z")
I have a logstash pipeline that fetches data from mysql using jdbc input connecter aggregates data for users based on user id pushes aggregated data to elasticsearch cluster It fetches large amount of data (e.g 2 mill… --- ## [Grok + Dissect - how to work properly?](https://discuss.elastic.co/t/grok-dissect-how-to-work-properly/226121)
**Author:** [@dmitryB](https://discuss.elastic.co/u/dmitryB)\ **Replies:** 3\ **Last updated:** [April 6, 2020, 8:18am UTC](https://discuss.elastic.co/t/grok-dissect-how-to-work-properly/226121 "2020-04-06T08:18:18Z")
Hello, everyone. I have a problem with running grok and dissect filtering at once. My config: grok { match =\> { 'message' =\> '\\\[%{TIMESTAMP\_ISO8601:time\_stamp}\\\] \\\[%{DATA:correlation\_id}\\\] \\\[%{LOGLEVEL:log\_le… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1529) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1531)