# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1574 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1575 --- ## [Sincedbに書き込まれる内容について](https://discuss.elastic.co/t/sincedb/223452)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 1:10pm UTC](https://discuss.elastic.co/t/sincedb/223452 "2020-03-13T13:10:22Z")
logstashでどこまでファイルを読み込んだかを記録するincedbがあると思います。 出力させてみたのですが、どの数字が何を表すのかご教示頂けないでしょうか？ マニュアルを参照しても分からず、お手数ですがお願い致します。 (sincedb出力例) 540437991024698906 0 37 8 1584078010.747719 /XXX/XXX.log --- ## [Conditional objects](https://discuss.elastic.co/t/conditional-objects/223507)
**Author:** [@balaji\_18](https://discuss.elastic.co/u/balaji_18)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 1:05pm UTC](https://discuss.elastic.co/t/conditional-objects/223507 "2020-03-13T13:05:01Z")
Is there is any conditional objects ? suppose if I need to ignore one location in some charts, is there any IF condition available ???? Please help me out Thank you! --- ## [Data Table Visualizations - Suppress Descriptors in Column Names](https://discuss.elastic.co/t/data-table-visualizations-suppress-descriptors-in-column-names/223502)
**Author:** [@gardanni](https://discuss.elastic.co/u/gardanni)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 12:57pm UTC](https://discuss.elastic.co/t/data-table-visualizations-suppress-descriptors-in-column-names/223502 "2020-03-13T12:57:57Z")
I wonder if someone can suggest a way to get around an annoying characteristic of DATA TABLE visualizations. I am reporting some SIBLING PIPELINE AGGREGATIONS in my tables - averages, maxes and mins. I am hoping to esta… --- ## [Multiple pipelines configuration while using the distributor pattern](https://discuss.elastic.co/t/multiple-pipelines-configuration-while-using-the-distributor-pattern/223100)
**Author:** [@moscha](https://discuss.elastic.co/u/moscha)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 12:57pm UTC](https://discuss.elastic.co/t/multiple-pipelines-configuration-while-using-the-distributor-pattern/223100 "2020-03-13T12:57:05Z")
Hello all. I have a quick question about using multiple pipelines along with the distributor pattern. So basically, as per the given examples on the official doc, I have set up the following piece of code, so depending … --- ## [Datatable with only the last results on a certain term?](https://discuss.elastic.co/t/datatable-with-only-the-last-results-on-a-certain-term/223486)
**Author:** [@Marco\_Pas](https://discuss.elastic.co/u/Marco_Pas)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 12:54pm UTC](https://discuss.elastic.co/t/datatable-with-only-the-last-results-on-a-certain-term/223486 "2020-03-13T12:54:02Z")
Hi there, i am trying to visualize a datatable that contains documents but i only want to display the latest rows per for example "project-code".. Any hint on how to achieve this? I tried to set a x-axis metric based… --- ## [Putting 2 different fields to compare on the same chart](https://discuss.elastic.co/t/putting-2-different-fields-to-compare-on-the-same-chart/223291)
**Author:** [@DeniseLow](https://discuss.elastic.co/u/DeniseLow)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 12:33pm UTC](https://discuss.elastic.co/t/putting-2-different-fields-to-compare-on-the-same-chart/223291 "2020-03-13T12:33:51Z")
hi, need help to see if 2 charts comparing results of 2 different fields can be merged into one I am currently comparing the machine and operator disposition performance by 2 different charts using Kibana as below Bas… --- ## [How to choose time slot in shared dashboard?](https://discuss.elastic.co/t/how-to-choose-time-slot-in-shared-dashboard/223285)
**Author:** [@samargh](https://discuss.elastic.co/u/samargh)\ **Replies:** 4\ **Last updated:** [March 13, 2020, 12:32pm UTC](https://discuss.elastic.co/t/how-to-choose-time-slot-in-shared-dashboard/223285 "2020-03-13T12:32:00Z")
i found this solution but it's not working help !!! cd KIBANA\_HOME/plugins git clone git@github.com:nreese/kibana-time-plugin.git cd KIBANA\_HOME/plugins/kibana-time-plugin bower install vi kibana-time-plugin/package… --- ## [To generate a bar graph for the given scenario](https://discuss.elastic.co/t/to-generate-a-bar-graph-for-the-given-scenario/222665)
**Author:** [@Hari\_Krishna](https://discuss.elastic.co/u/Hari_Krishna)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 12:25pm UTC](https://discuss.elastic.co/t/to-generate-a-bar-graph-for-the-given-scenario/222665 "2020-03-13T12:25:33Z")
I have a log from which i need to extract the state field and generate a bar graph for the state transitions that the logs have gone through for a given NexthopId. Please help me with this scenario. LOGS: 2020-03-06 09… --- ## [Cannot use percentile aggregation on custom double field](https://discuss.elastic.co/t/cannot-use-percentile-aggregation-on-custom-double-field/222940)
**Author:** [@Jack\_Phan](https://discuss.elastic.co/u/Jack_Phan)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 12:21pm UTC](https://discuss.elastic.co/t/cannot-use-percentile-aggregation-on-custom-double-field/222940 "2020-03-13T12:21:45Z")
I added $request\_time field to my Nginx access log without update the default mapping and used %{NUMBER:http.response.time:double} in Grok to parse it. I can use percentiles aggregation in DevTools on this field: Howe… --- ## [Policy based on a term](https://discuss.elastic.co/t/policy-based-on-a-term/223495)
**Author:** [@A\_Mightiev](https://discuss.elastic.co/u/A_Mightiev)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 11:41am UTC](https://discuss.elastic.co/t/policy-based-on-a-term/223495 "2020-03-13T11:41:20Z")
I am ingesting logs which has very high verbosity, in order to cope with the high number of documents I wanted to create a policy in the index lifecyle, rolling over to cold an index after certain number of documents or … --- ## [Alias on rollup index](https://discuss.elastic.co/t/alias-on-rollup-index/223027)
**Author:** [@apiras](https://discuss.elastic.co/u/apiras)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 11:10am UTC](https://discuss.elastic.co/t/alias-on-rollup-index/223027 "2020-03-13T11:10:40Z")
Hi all, is it possible to create alias and alias with filters on one rollup index? Thanks in advance. Regards, Andrea --- ## [Updating the existing index in elastic search](https://discuss.elastic.co/t/updating-the-existing-index-in-elastic-search/222931)
**Author:** [@Thamini\_NellaiKumar](https://discuss.elastic.co/u/Thamini_NellaiKumar)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 10:36am UTC](https://discuss.elastic.co/t/updating-the-existing-index-in-elastic-search/222931 "2020-03-13T10:36:52Z")
Hi, I have created the visualisation with the static data for my dashboard..now I want to change the data...is there any way to update the existing index without having to rework from the scratch? --- ## [Logstash read the entire file again whenever pipeline reload](https://discuss.elastic.co/t/logstash-read-the-entire-file-again-whenever-pipeline-reload/223247)
**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\ **Replies:** 12\ **Last updated:** [March 13, 2020, 10:34am UTC](https://discuss.elastic.co/t/logstash-read-the-entire-file-again-whenever-pipeline-reload/223247 "2020-03-13T10:34:31Z")
Hi all, What I want is read all the file in a directory and tail for new change and discover new files Btw, the sincedb file I specified is always 0byte, nothing ever write My config: input { file { path =\> "/home… --- ## [Autosize Kibana pages](https://discuss.elastic.co/t/autosize-kibana-pages/223325)
**Author:** [@balaji\_18](https://discuss.elastic.co/u/balaji_18)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 10:03am UTC](https://discuss.elastic.co/t/autosize-kibana-pages/223325 "2020-03-13T10:03:32Z")
Is there any way to auto resize the kibana pages based on the user monitor size... Thank you! --- ## [Using Kibana API, How do I query for all dashboards including its related spaces](https://discuss.elastic.co/t/using-kibana-api-how-do-i-query-for-all-dashboards-including-its-related-spaces/222629)
**Author:** [@lmit](https://discuss.elastic.co/u/lmit)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 9:56am UTC](https://discuss.elastic.co/t/using-kibana-api-how-do-i-query-for-all-dashboards-including-its-related-spaces/222629 "2020-03-13T09:56:31Z")
According to the Kibana API doc, I can query for all dashboards using curl -u user:pwd -X GET 'https://kibana.elastic-cloud.com:9243/api/saved\_objects/\_find?type=dashboard' and I can query for all spaces using curl -u… --- ## [AWS Elastic Search Vs Elastic search cloud](https://discuss.elastic.co/t/aws-elastic-search-vs-elastic-search-cloud/223458)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 9:44am UTC](https://discuss.elastic.co/t/aws-elastic-search-vs-elastic-search-cloud/223458 "2020-03-13T09:44:53Z")
Hi , Current stack - single node ELK Env - PoC As I am planning to productionize ELK stack . I would like to hear thoughts from community people . which version works best . AWS Elastic Search Elastic Cloud Docke… --- ## [How to put mapping by JAVA API](https://discuss.elastic.co/t/how-to-put-mapping-by-java-api/223475)
**Author:** [@SomberOfShadow](https://discuss.elastic.co/u/SomberOfShadow)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 9:40am UTC](https://discuss.elastic.co/t/how-to-put-mapping-by-java-api/223475 "2020-03-13T09:40:37Z")
hi， guys I met a problem that blockde me several days. I want to put mapping for a field by JAVA API but failed. Following is detailded information: My data struction is : { "mje-test-execution-id": "464b66ea6c914d… --- ## [Why elastic search is generating this files](https://discuss.elastic.co/t/why-elastic-search-is-generating-this-files/223460)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 9:30am UTC](https://discuss.elastic.co/t/why-elastic-search-is-generating-this-files/223460 "2020-03-13T09:30:24Z")
Dear All. I don't know why this files is generating in elastic search side. i having more than 200 files generated by elastic and taking huge storage in machine. why? is below is solution? xpack.monitoring.enabled… --- ## [Logstash run as service](https://discuss.elastic.co/t/logstash-run-as-service/223371)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 9:01am UTC](https://discuss.elastic.co/t/logstash-run-as-service/223371 "2020-03-13T09:01:25Z")
I installed logstash with a tar.gz package. I want to run as a service so that logstash can run automatically when the system reboots. How should I set it up? logstash: 7.6 os: centos7 Instead of using rpm, we need … --- ## [How to adress \[fields\]\[env\] (f.e.) if i want to combine them into a single string](https://discuss.elastic.co/t/how-to-adress-fields-env-f-e-if-i-want-to-combine-them-into-a-single-string/223469)
**Author:** [@Dennis\_Bohs](https://discuss.elastic.co/u/Dennis_Bohs)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 8:36am UTC](https://discuss.elastic.co/t/how-to-adress-fields-env-f-e-if-i-want-to-combine-them-into-a-single-string/223469 "2020-03-13T08:36:36Z")
Hi there, i hope this is a simple question and i just can't find it in the documentation: I have several fields, that i'd adress by \[fields\]\[something\] in logstash. Now i want to write an email-alert (with output emai… --- ## [Get top n with date histogram](https://discuss.elastic.co/t/get-top-n-with-date-histogram/222843)
**Author:** [@ming1997](https://discuss.elastic.co/u/ming1997)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 8:35am UTC](https://discuss.elastic.co/t/get-top-n-with-date-histogram/222843 "2020-03-13T08:35:53Z")
"aggs": { "2": { "date\_histogram": { "field": "@timestamp", "interval": "30s", "time\_zone": "Asia/Shanghai", "min\_doc\_count": 1 }, "aggs": { "3": { "terms": { "field": "flow.src\_addr.keyword", "order": { "\_c… --- ## [Kibana Watcher - Pagerduty Connection Issue](https://discuss.elastic.co/t/kibana-watcher-pagerduty-connection-issue/223455)
**Author:** [@rj23495](https://discuss.elastic.co/u/rj23495)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 8:30am UTC](https://discuss.elastic.co/t/kibana-watcher-pagerduty-connection-issue/223455 "2020-03-13T08:30:54Z")
Lets say, I am using Watcher in ELK stack and there are 2 network interfaces in ELK- one for elasticsearch and other one for kibana, so when watcher triggers an alert in pagerduty, which network interface does it use - k… --- ## [Cluster configuration advice](https://discuss.elastic.co/t/cluster-configuration-advice/221201)
**Author:** [@Amine\_Maalfi](https://discuss.elastic.co/u/Amine_Maalfi)\ **Replies:** 8\ **Last updated:** [March 13, 2020, 8:24am UTC](https://discuss.elastic.co/t/cluster-configuration-advice/221201 "2020-03-13T08:24:48Z")
Hello, I need to store logs generated by say 50 apps and the average log size a day is 5 GB with a retention period of a month, the write speed isn't important for me but the read time is, high availability isn't also t… --- ## [Starting a new plugin in Kibana 7](https://discuss.elastic.co/t/starting-a-new-plugin-in-kibana-7/223054)
**Author:** [@HH2O77](https://discuss.elastic.co/u/HH2O77)\ **Replies:** 6\ **Last updated:** [March 13, 2020, 8:14am UTC](https://discuss.elastic.co/t/starting-a-new-plugin-in-kibana-7/223054 "2020-03-13T08:14:01Z")
Hi there, I am trying to start to write a new plugin in kibana where I can display specific fields of a single record in vertical manner. Looking for examples or/and documentation where I can understand how my plugin c… --- ## [UEBA for elk](https://discuss.elastic.co/t/ueba-for-elk/223353)
**Author:** [@oumy](https://discuss.elastic.co/u/oumy)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 7:54am UTC](https://discuss.elastic.co/t/ueba-for-elk/223353 "2020-03-13T07:54:06Z")
hello there is there an opensource UEBA that can be integrated with Elastic stack? and also a Netework monitoring tools --- ## [Kibana\_task\_manger\_2 cannot be deleted](https://discuss.elastic.co/t/kibana-task-manger-2-cannot-be-deleted/221659)
**Author:** [@Aldugama](https://discuss.elastic.co/u/Aldugama)\ **Replies:** 1\ **Last updated:** [March 13, 2020, 6:47am UTC](https://discuss.elastic.co/t/kibana-task-manger-2-cannot-be-deleted/221659 "2020-03-13T06:47:09Z")
I need help, please. I tried the following comand: // curl -XDELETE 'http://localhost:9200/.kibana\_task\_manager\_2' --header "content-type: application/JSON" -u elastic -p and I get the following response: curl: (52) … --- ## [What is meant by Heap in relation to ES?](https://discuss.elastic.co/t/what-is-meant-by-heap-in-relation-to-es/223031)
**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\ **Replies:** 9\ **Last updated:** [March 13, 2020, 6:37am UTC](https://discuss.elastic.co/t/what-is-meant-by-heap-in-relation-to-es/223031 "2020-03-13T06:37:07Z")
Consider the following situation: the node has 100 GB of RAM, but the ES heap size is 30 GB. Does this mean that ES will only ever use 30 GB of RAM? And the other 70 GB will go unused? If not, than what how does it use… --- ## [Indices is showing red in Kibana](https://discuss.elastic.co/t/indices-is-showing-red-in-kibana/222298)
**Author:** [@vijay90](https://discuss.elastic.co/u/vijay90)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 6:34am UTC](https://discuss.elastic.co/t/indices-is-showing-red-in-kibana/222298 "2020-03-13T06:34:20Z")
Hi All, I am new to Elastic Stack and I have two queries, Indices status in Kibana - we are indexing all the data from servers to ElasticSearch using Fluentd agent. When we did a POC setup, we were able to search dat… --- ## [Any reason why having 1 shard is slower than 5 shards?](https://discuss.elastic.co/t/any-reason-why-having-1-shard-is-slower-than-5-shards/223429)
**Author:** [@NewHere](https://discuss.elastic.co/u/NewHere)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 6:21am UTC](https://discuss.elastic.co/t/any-reason-why-having-1-shard-is-slower-than-5-shards/223429 "2020-03-13T06:21:39Z")
According to various online sources (e.g. https://www.elastic.co/guide/en/elasticsearch/reference/master/tune-for-search-speed.html), they all said fewer shard the faster. However, my experience was 5 shards index retur… --- ## [Logstash sends to elasticsearch cluster failed](https://discuss.elastic.co/t/logstash-sends-to-elasticsearch-cluster-failed/223303)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 5:01am UTC](https://discuss.elastic.co/t/logstash-sends-to-elasticsearch-cluster-failed/223303 "2020-03-13T05:01:10Z")
I have configured logstash output with three elasticsearch nodes which is in a cluster as below elasticsearch { hosts =\> \["http://ip1:9200","http://ip2:9200","http://ip3:9200"\] do… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1573) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1575)