# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1577

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1578

---

## [Сбор логов с ошибками windows server и логирование](https://discuss.elastic.co/t/windows-server/223287)

<div class="topic-metadata">

**Author:** [@mrbig](https://discuss.elastic.co/u/mrbig)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 2:47pm UTC](https://discuss.elastic.co/t/windows-server/223287 "2020-03-12T14:47:31Z")

</div>

Добрый день! Есть elk stack 7.5.2 Хотелось бы понять каким образом можно сделать так что бы с windows server (например) приходили логи только с ошибками? Я знаю что через winlogbeat можно сделать так что б он отсылал т…

---

## [Daily Ingestion graphs Per Index](https://discuss.elastic.co/t/daily-ingestion-graphs-per-index/222490)

<div class="topic-metadata">

**Author:** [@vsubrama](https://discuss.elastic.co/u/vsubrama)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 2:39pm UTC](https://discuss.elastic.co/t/daily-ingestion-graphs-per-index/222490 "2020-03-12T14:39:18Z")

</div>

Has someone build reliable Kibana dashboards for displaying ingestion rate for a duration of time (say a day) per index? We have a self managed ELK cluster that ingests 1 TB per day across some 150 different log indices…

---

## [How to visualize the Sum,Max of serial diff aggregated values](https://discuss.elastic.co/t/how-to-visualize-the-sum-max-of-serial-diff-aggregated-values/222436)

<div class="topic-metadata">

**Author:** [@avishnu](https://discuss.elastic.co/u/avishnu)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 2:29pm UTC](https://discuss.elastic.co/t/how-to-visualize-the-sum-max-of-serial-diff-aggregated-values/222436 "2020-03-12T14:29:34Z")

</div>

Hi Team, I have a CSV file in the below format.All the values corresponding to the ACK,BYE,INFO and PRACK are cumulative not absolute values .We are using logstash for parse and send this values to elastic search. |Sat…

---

## [How to get \_id in search API in java high level rest client](https://discuss.elastic.co/t/how-to-get-id-in-search-api-in-java-high-level-rest-client/222164)

<div class="topic-metadata">

**Author:** [@hemamalini](https://discuss.elastic.co/u/hemamalini)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 2:27pm UTC](https://discuss.elastic.co/t/how-to-get-id-in-search-api-in-java-high-level-rest-client/222164 "2020-03-12T14:27:52Z")

</div>

Hi I am using Elastic search 5.6 . As of now i cannot upgrade to higher versions. I am using Java High level rest client to fetch documents . I need to get \_id in search response. I am not getting document id in search r…

---

## [Font size, byte rounding and date histogram dashboard](https://discuss.elastic.co/t/font-size-byte-rounding-and-date-histogram-dashboard/223119)

<div class="topic-metadata">

**Author:** [@JoseLuisEzquerro](https://discuss.elastic.co/u/JoseLuisEzquerro)\
**Replies:** 3\
**Last updated:** [March 12, 2020, 2:12pm UTC](https://discuss.elastic.co/t/font-size-byte-rounding-and-date-histogram-dashboard/223119 "2020-03-12T14:12:40Z")

</div>

Hello, I'm working with Kibana 6.8.2 and when I make a dashboard like the one below I cannot find the way to: Change the font size. On the X and Y Axis the font is very small, is there any way to make it bigger? I…

---

## [Elasticsearch Unreachable!](https://discuss.elastic.co/t/elasticsearch-unreachable/223168)

<div class="topic-metadata">

**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Replies:** 6\
**Last updated:** [March 12, 2020, 2:06pm UTC](https://discuss.elastic.co/t/elasticsearch-unreachable/223168 "2020-03-12T14:06:58Z")

</div>

Hi, i am getting below error, after enable firewall on the logstash server. 2020-03-11T15:46:14,189\]\[WARN \]\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance, but got an error. {:u…

---

## [Match all nested array terms](https://discuss.elastic.co/t/match-all-nested-array-terms/223336)

<div class="topic-metadata">

**Author:** [@janis.sakars](https://discuss.elastic.co/u/janis.sakars)\
**Replies:** 0\
**Last updated:** [March 12, 2020, 1:19pm UTC](https://discuss.elastic.co/t/match-all-nested-array-terms/223336 "2020-03-12T13:19:07Z")

</div>

Hi! I have the need to index and search by Question/Answers logic e.g. There is a Question with multiple answers =\> You can choose many of them e.g. "What languages do You speak?" would allow answers like "English", "Ge…

---

## [Searching sentence/words with different order/position](https://discuss.elastic.co/t/searching-sentence-words-with-different-order-position/223324)

<div class="topic-metadata">

**Author:** [@Kevin\_Juliano](https://discuss.elastic.co/u/Kevin_Juliano)\
**Replies:** 4\
**Last updated:** [March 12, 2020, 1:32pm UTC](https://discuss.elastic.co/t/searching-sentence-words-with-different-order-position/223324 "2020-03-12T13:32:12Z")

</div>

Hi! Is there a way to search a sentence or words and the result will be same number of words but they are in different order, I know my question is confusing so I will just give an example: if I search for a phrase flo…

---

## [SSO Using OpenID Connect](https://discuss.elastic.co/t/sso-using-openid-connect/222428)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 1:30pm UTC](https://discuss.elastic.co/t/sso-using-openid-connect/222428 "2020-03-12T13:30:11Z")

</div>

I am currently conducting the sso test. User authentication has all been successful. However 403 error occurs. What settings should I add? ERROR: {"statusCode":403,"error":"Forbidden","message":"Forbidden"} ES LOG: …

---

## [Remove totally suggest tag in Visualization](https://discuss.elastic.co/t/remove-totally-suggest-tag-in-visualization/221647)

<div class="topic-metadata">

**Author:** [@kieulam141](https://discuss.elastic.co/u/kieulam141)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 1:26pm UTC](https://discuss.elastic.co/t/remove-totally-suggest-tag-in-visualization/221647 "2020-03-12T13:26:55Z")

</div>

Hi Everyone, I got the trouble with the suggest tag in Visualization. When I test push log in to ELK then index A got 1 field name "syslog\_facility\_code", index B didn't got the field name "syslog\_facility\_code". Then …

---

## [I want to make a pull down box using vega-lite](https://discuss.elastic.co/t/i-want-to-make-a-pull-down-box-using-vega-lite/222401)

<div class="topic-metadata">

**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 1:24pm UTC](https://discuss.elastic.co/t/i-want-to-make-a-pull-down-box-using-vega-lite/222401 "2020-03-12T13:24:53Z")

</div>

Is that possible to make a pull down box using vega-lite? Or I should use vega?

---

## [Kibana server is not ready yet and could not create APM agent configuration](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-and-could-not-create-apm-agent-configuration/222377)

<div class="topic-metadata">

**Author:** [@Mohamed\_Koubaa](https://discuss.elastic.co/u/Mohamed_Koubaa)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 1:23pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-and-could-not-create-apm-agent-configuration/222377 "2020-03-12T13:23:26Z")

</div>

Kibana used to work until I did user configuration by adding xpack.security.enabled: true discovery.type: single-node to the elasticsearch.yml which look this way now\` # ======================== Elasticse…

---

## [Terms aggregation on an inner object and retrieving bucket metadata](https://discuss.elastic.co/t/terms-aggregation-on-an-inner-object-and-retrieving-bucket-metadata/223337)

<div class="topic-metadata">

**Author:** [@pierre\_n](https://discuss.elastic.co/u/pierre_n)\
**Replies:** 0\
**Last updated:** [March 12, 2020, 1:20pm UTC](https://discuss.elastic.co/t/terms-aggregation-on-an-inner-object-and-retrieving-bucket-metadata/223337 "2020-03-12T13:20:28Z")

</div>

We index the following products: { "id": "1", "name": "the-name", "categories": \[ { "id" : 10, "name" : "cat-1" }, { "id" : 20, "name" …

---

## [Kibana 7.5.1 - calculating user's AGE by using Scripted Field](https://discuss.elastic.co/t/kibana-7-5-1-calculating-users-age-by-using-scripted-field/222311)

<div class="topic-metadata">

**Author:** [@Aviad\_Amar](https://discuss.elastic.co/u/Aviad_Amar)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 1:18pm UTC](https://discuss.elastic.co/t/kibana-7-5-1-calculating-users-age-by-using-scripted-field/222311 "2020-03-12T13:18:35Z")

</div>

hey guys, this is my script (found it online), unfortunately it keeps returning "0". Field Type: Number Script: return Period.between ( doc\['@timestamp'\].value.toLocalDate(), Instant.ofEpochMilli(System.currentTime…

---

## [BACnet connector](https://discuss.elastic.co/t/bacnet-connector/223333)

<div class="topic-metadata">

**Author:** [@zdenek](https://discuss.elastic.co/u/zdenek)\
**Replies:** 0\
**Last updated:** [March 12, 2020, 1:05pm UTC](https://discuss.elastic.co/t/bacnet-connector/223333 "2020-03-12T13:05:11Z")

</div>

is possible connect to BACnet? - PLC network protocol.

---

## [Converting a quantity processed /day chart to rate /day chart](https://discuss.elastic.co/t/converting-a-quantity-processed-day-chart-to-rate-day-chart/223281)

<div class="topic-metadata">

**Author:** [@DeniseLow](https://discuss.elastic.co/u/DeniseLow)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 1:03pm UTC](https://discuss.elastic.co/t/converting-a-quantity-processed-day-chart-to-rate-day-chart/223281 "2020-03-12T13:03:46Z")

</div>

hi , need some help. I am new to Kibana visualisation. I have done a line chart to show the the breakdown of no of bags processed/day I would like to do it show it as clearance rate/day. Something like below (the b…

---

## [Log stash not passing log fields](https://discuss.elastic.co/t/log-stash-not-passing-log-fields/223322)

<div class="topic-metadata">

**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\
**Replies:** 0\
**Last updated:** [March 12, 2020, 12:11pm UTC](https://discuss.elastic.co/t/log-stash-not-passing-log-fields/223322 "2020-03-12T12:11:24Z")

</div>

Hi All , Logstash Log , unable to understand what is the problem in pasing my log artifact. above is the error in logstash logs. can some one help me in analyzing the log please ? My logstash config file : log stash …

---

## [Number of master nodes for a multi-node cluster](https://discuss.elastic.co/t/number-of-master-nodes-for-a-multi-node-cluster/223310)

<div class="topic-metadata">

**Author:** [@jkhere](https://discuss.elastic.co/u/jkhere)\
**Replies:** 4\
**Last updated:** [March 12, 2020, 12:45pm UTC](https://discuss.elastic.co/t/number-of-master-nodes-for-a-multi-node-cluster/223310 "2020-03-12T12:45:02Z")

</div>

Hi, I am planning to set up an elasticsearch cluster of around 160 nodes. As I have read in the documentation and some other forum posts, I need to set up dedicated master nodes and data nodes. The cluster will be Inde…

---

## [Percentile and percentile ranks in heat map?](https://discuss.elastic.co/t/percentile-and-percentile-ranks-in-heat-map/221730)

<div class="topic-metadata">

**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 12:32pm UTC](https://discuss.elastic.co/t/percentile-and-percentile-ranks-in-heat-map/221730 "2020-03-12T12:32:46Z")

</div>

Hi, According to https://www.elastic.co/guide/en/kibana/current/heatmap.html, a heat map supports the metric aggregations percentile and percentile ranks. But I can't find it in my Kibana. I use 7.6.0. Is the documentat…

---

## [Export logs feature in Kibana v5.5.2](https://discuss.elastic.co/t/export-logs-feature-in-kibana-v5-5-2/222232)

<div class="topic-metadata">

**Author:** [@aakash1](https://discuss.elastic.co/u/aakash1)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 12:31pm UTC](https://discuss.elastic.co/t/export-logs-feature-in-kibana-v5-5-2/222232 "2020-03-12T12:31:04Z")

</div>

Hello Team I want to export all my logs in a CSV/Excel file format. We have Kibana v5.5.2. Is there any patch available that can be used to get the export option. Kindly assist.

---

## [Multipolygon support for elastic search](https://discuss.elastic.co/t/multipolygon-support-for-elastic-search/223042)

<div class="topic-metadata">

**Author:** [@tamil5ag](https://discuss.elastic.co/u/tamil5ag)\
**Replies:** 4\
**Last updated:** [March 12, 2020, 12:31pm UTC](https://discuss.elastic.co/t/multipolygon-support-for-elastic-search/223042 "2020-03-12T12:31:00Z")

</div>

Hi, Elastic search support multipolygon query? If yes, how to form a query to get coordinates under different polygon(An array of separate polygons - multipolygon). And also which type need to define to create schema i…

---

## [Data Dif @timestamp](https://discuss.elastic.co/t/data-dif-timestamp/222099)

<div class="topic-metadata">

**Author:** [@marcelosouzadias](https://discuss.elastic.co/u/marcelosouzadias)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 12:18pm UTC](https://discuss.elastic.co/t/data-dif-timestamp/222099 "2020-03-12T12:18:46Z")

</div>

Hello I have an index containing an id and @timestamp. I need to make the difference between the first @timestamp and the last @timestamp. Is it possible to perform this calculation in Script Fields?

---

## [Can \[TSVB\] add controls to toggle re-enable/enable of annotation on dashboard?](https://discuss.elastic.co/t/can-tsvb-add-controls-to-toggle-re-enable-enable-of-annotation-on-dashboard/221978)

<div class="topic-metadata">

**Author:** [@Tennis](https://discuss.elastic.co/u/Tennis)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 12:08pm UTC](https://discuss.elastic.co/t/can-tsvb-add-controls-to-toggle-re-enable-enable-of-annotation-on-dashboard/221978 "2020-03-12T12:08:34Z")

</div>

Currently, \[TSVB\] can control re-enable/enable of annotation when editing visualization such as this link: \[TSVB\] add controls to toggle disable/enable individual series and annotations However, Is there any way to mak…

---

## [Should CircuitBreakingException cause the node to become failed?](https://discuss.elastic.co/t/should-circuitbreakingexception-cause-the-node-to-become-failed/220817)

<div class="topic-metadata">

**Author:** [@rsyne](https://discuss.elastic.co/u/rsyne)\
**Replies:** 13\
**Last updated:** [March 12, 2020, 12:05pm UTC](https://discuss.elastic.co/t/should-circuitbreakingexception-cause-the-node-to-become-failed/220817 "2020-03-12T12:05:33Z")

</div>

Hello I'm running a 7.5.2 cluster. Today, while snapshots were being made (although I'm not sure it was snapshotting that triggered the issue), one of the nodes logged CircuitBreakingException and became failed for seve…

---

## [Create a visualize with field value](https://discuss.elastic.co/t/create-a-visualize-with-field-value/223313)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 11:24am UTC](https://discuss.elastic.co/t/create-a-visualize-with-field-value/223313 "2020-03-12T11:24:54Z")

</div>

I have a lot of documents like this into elasticsearch: { "\_index": "logstash-people-2020.01.22", "\_type": "\_doc", "\_id": "I7xKznAB6obTCirlmSMC", "\_version": 1, "\_score": null, "\_source": { "men": 111, …

---

## [ELK 7.3](https://discuss.elastic.co/t/elk-7-3/223115)

<div class="topic-metadata">

**Author:** [@mounikasony](https://discuss.elastic.co/u/mounikasony)\
**Replies:** 3\
**Last updated:** [March 12, 2020, 11:23am UTC](https://discuss.elastic.co/t/elk-7-3/223115 "2020-03-12T11:23:59Z")

</div>

how to enable kibana audit logs? I have made configuration changes xpack.security.audit.enabled= true in elasticsearch.yml . how do the data write into this file elasticsearch\_audit.json with audited events like access…

---

## [Bool Query giving inappropriate results](https://discuss.elastic.co/t/bool-query-giving-inappropriate-results/223277)

<div class="topic-metadata">

**Author:** [@cravinder489](https://discuss.elastic.co/u/cravinder489)\
**Replies:** 4\
**Last updated:** [March 12, 2020, 11:22am UTC](https://discuss.elastic.co/t/bool-query-giving-inappropriate-results/223277 "2020-03-12T11:22:03Z")

</div>

This is the structure of my index "chatbot" : { "chatbot" : { "aliases" : { }, "mappings" : { "properties" : { "answer" : { "type" : "text" }, "creationDate" : { …

---

## [How to sort split group of metric visualization](https://discuss.elastic.co/t/how-to-sort-split-group-of-metric-visualization/222924)

<div class="topic-metadata">

**Author:** [@SrHades](https://discuss.elastic.co/u/SrHades)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 11:13am UTC](https://discuss.elastic.co/t/how-to-sort-split-group-of-metric-visualization/222924 "2020-03-12T11:13:02Z")

</div>

Is there a way to sort a bucket splitted group of metrics descending?

---

## [FSCrawler path to remote dir](https://discuss.elastic.co/t/fscrawler-path-to-remote-dir/223080)

<div class="topic-metadata">

**Author:** [@LaaKii](https://discuss.elastic.co/u/LaaKii)\
**Replies:** 31\
**Last updated:** [March 12, 2020, 10:51am UTC](https://discuss.elastic.co/t/fscrawler-path-to-remote-dir/223080 "2020-03-12T10:51:18Z")

</div>

I'm using FSCrawler by @dadoonet and im trying to index files on a remote server. The ssh connection is established, but it can't find the path. I tried all variants I could think of in the URL String. My config looks …

---

## [Writing multiple grok filters](https://discuss.elastic.co/t/writing-multiple-grok-filters/223095)

<div class="topic-metadata">

**Author:** [@Hari\_Krishna](https://discuss.elastic.co/u/Hari_Krishna)\
**Replies:** 4\
**Last updated:** [March 12, 2020, 10:54am UTC](https://discuss.elastic.co/t/writing-multiple-grok-filters/223095 "2020-03-12T10:54:37Z")

</div>

This is how my log looks like: 2020-03-06 09:41:13.756480168 re0:ndp:18310 NDP\_TP\_NDP\_MSG Function = "NdpIRBNhMapHandler", message = "NdpIRBNhMapHandler Entered" 2020-03-06 09:41:13.756485401 re0:ndp:18310 lltp\_debug …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1576)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1578)
