# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1589

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1590

---

## [Load The Data Set KIBANA](https://discuss.elastic.co/t/load-the-data-set-kibana/222352)

<div class="topic-metadata">

**Author:** [@bharatchhajed](https://discuss.elastic.co/u/bharatchhajed)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 7:18pm UTC](https://discuss.elastic.co/t/load-the-data-set-kibana/222352 "2020-03-05T19:18:56Z")

</div>

I am trying this on cloud ES and Kibana which has credentials to call API. In the example it is not using any credential. https://www.elastic.co/guide/en/kibana/current/tutorial-build-dashboard.html#\_load\_the\_data\_sets …

---

## [Unable to show Hourly Average](https://discuss.elastic.co/t/unable-to-show-hourly-average/221773)

<div class="topic-metadata">

**Author:** [@askids](https://discuss.elastic.co/u/askids)\
**Replies:** 2\
**Last updated:** [March 5, 2020, 7:00pm UTC](https://discuss.elastic.co/t/unable-to-show-hourly-average/221773 "2020-03-05T19:00:04Z")

</div>

hi All, I am trying to show hourly average in a Kibana Visualization. I referred to the example in this link -https://discuss.elastic.co/t/hourly-average-over-24-hours/201445/2. However, when I select Histogram option,…

---

## [Agregar documentos con python](https://discuss.elastic.co/t/agregar-documentos-con-python/222356)

<div class="topic-metadata">

**Author:** [@Oscar\_Benitez](https://discuss.elastic.co/u/Oscar_Benitez)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 6:54pm UTC](https://discuss.elastic.co/t/agregar-documentos-con-python/222356 "2020-03-05T18:54:11Z")

</div>

buenas, mi pregunta es si se puede agregar documentos json usando un script de python, y como podria hacerlo ?

---

## [Selectively dedot some fields](https://discuss.elastic.co/t/selectively-dedot-some-fields/218489)

<div class="topic-metadata">

**Author:** [@Todd\_Lyons](https://discuss.elastic.co/u/Todd_Lyons)\
**Replies:** 3\
**Last updated:** [March 5, 2020, 5:55pm UTC](https://discuss.elastic.co/t/selectively-dedot-some-fields/218489 "2020-03-05T17:55:30Z")

</div>

TL;DR: How to detect subfields with dots, converting those dots to underscores, but ONLY in fields under that subfield. Detail: We use filebeats, logstash, and feed messages to an Elastic Stack, of which all pieces are…

---

## [Настройки для поиска телефонных номеров](https://discuss.elastic.co/t/topic/222322)

<div class="topic-metadata">

**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\
**Replies:** 4\
**Last updated:** [March 5, 2020, 5:38pm UTC](https://discuss.elastic.co/t/topic/222322 "2020-03-05T17:38:55Z")

</div>

Доброго времени суток. Хочу перевести телефонный справочник сотрудников (3 основных поля - Фио, номер и заметка) из MS SQL на Elastic (так исторически сложилось, что в заметках о сотрудниках содержится значимая текстов…

---

## [Writes with offline primary and no replicas](https://discuss.elastic.co/t/writes-with-offline-primary-and-no-replicas/222346)

<div class="topic-metadata">

**Author:** [@reighnman](https://discuss.elastic.co/u/reighnman)\
**Replies:** 2\
**Last updated:** [March 5, 2020, 5:12pm UTC](https://discuss.elastic.co/t/writes-with-offline-primary-and-no-replicas/222346 "2020-03-05T17:12:39Z")

</div>

I had a ticket open with support on this but they could not explain what would happen so trying here. Single index, multiple primaries spread across multiple nodes, 0 replicas. Do writes continue if 1 of the primaries …

---

## [Signed CLA. Yet PR shows as not signed](https://discuss.elastic.co/t/signed-cla-yet-pr-shows-as-not-signed/221715)

<div class="topic-metadata">

**Author:** [@jibsonline](https://discuss.elastic.co/u/jibsonline)\
**Replies:** 14\
**Last updated:** [March 5, 2020, 5:02pm UTC](https://discuss.elastic.co/t/signed-cla-yet-pr-shows-as-not-signed/221715 "2020-03-05T17:02:06Z")

</div>

Hi, I was trying to raise a PR to fix a documentation issue. The PR didn't pass as I didn't sign the CLA. I signed the CLA and raise the PR again. It still shows the same. I didn't receive the copy also via mail. Is the…

---

## [Request entity too large on specific index](https://discuss.elastic.co/t/request-entity-too-large-on-specific-index/220332)

<div class="topic-metadata">

**Author:** [@ghl1l0](https://discuss.elastic.co/u/ghl1l0)\
**Replies:** 3\
**Last updated:** [March 5, 2020, 4:57pm UTC](https://discuss.elastic.co/t/request-entity-too-large-on-specific-index/220332 "2020-03-05T16:57:42Z")

</div>

hello , i need some help with kibana " error fetchng fields" i got request entity too large when i chose specific index the other one appaers without problem Kibana version is 7.5.1

---

## [Preciso limitar minhas analises em 12 horas por falta de armazenamento](https://discuss.elastic.co/t/preciso-limitar-minhas-analises-em-12-horas-por-falta-de-armazenamento/220349)

<div class="topic-metadata">

**Author:** [@rafaelassis53](https://discuss.elastic.co/u/rafaelassis53)\
**Replies:** 3\
**Last updated:** [March 5, 2020, 4:56pm UTC](https://discuss.elastic.co/t/preciso-limitar-minhas-analises-em-12-horas-por-falta-de-armazenamento/220349 "2020-03-05T16:56:42Z")

</div>

I need to limit my analysis to 12 hours due to lack of storage,

---

## [How to get first match regex grok](https://discuss.elastic.co/t/how-to-get-first-match-regex-grok/222339)

<div class="topic-metadata">

**Author:** [@nino](https://discuss.elastic.co/u/nino)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 4:27pm UTC](https://discuss.elastic.co/t/how-to-get-first-match-regex-grok/222339 "2020-03-05T16:27:48Z")

</div>

Dear all, I want to retrieve only "14" from this message 3/03/0 EE 14 GFR 20 AAA XXXXX 50 3365.00 this is my grok code grok{ match =\> { field1 =\> \[ "(?\<number\_extract\>\\d{0}\\s\\d{1,3}\\s{1})" …

---

## [Uninstalling ECK - hangs forever](https://discuss.elastic.co/t/uninstalling-eck-hangs-forever/215521)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 5\
**Last updated:** [March 5, 2020, 4:30pm UTC](https://discuss.elastic.co/t/uninstalling-eck-hangs-forever/215521 "2020-03-05T16:30:25Z")

</div>

Hello World! I'm tried to follow Uninstalling ECK | Elastic Cloud on Kubernetes \[1.0\] | Elastic, however bellow commands hangs forever: $ kubectl get namespaces --no-headers -o custom-columns=:metadata.name \\ \> | xargs…

---

## [I need to calculate diffrence of the same field with diffrent date but it's not working (elasticsearch , kibana)](https://discuss.elastic.co/t/i-need-to-calculate-diffrence-of-the-same-field-with-diffrent-date-but-its-not-working-elasticsearch-kibana/222334)

<div class="topic-metadata">

**Author:** [@samargh](https://discuss.elastic.co/u/samargh)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 3:46pm UTC](https://discuss.elastic.co/t/i-need-to-calculate-diffrence-of-the-same-field-with-diffrent-date-but-its-not-working-elasticsearch-kibana/222334 "2020-03-05T15:46:54Z")

</div>

well i have the same field in 2 indexes , i managed to join them in 1 index , but the problem is that i need to calculate the diffrence between activation date in day1 and activation date in day2 (day2 - day 1 shows n…

---

## [RemoteTransportException caused by NullPointerException when trying to create snapshot through Kibana UI](https://discuss.elastic.co/t/remotetransportexception-caused-by-nullpointerexception-when-trying-to-create-snapshot-through-kibana-ui/222287)

<div class="topic-metadata">

**Author:** [@bcbrockway](https://discuss.elastic.co/u/bcbrockway)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 3:28pm UTC](https://discuss.elastic.co/t/remotetransportexception-caused-by-nullpointerexception-when-trying-to-create-snapshot-through-kibana-ui/222287 "2020-03-05T15:28:08Z")

</div>

We're running an ES cluster using cloud-on-k8s and when I try and create a snapshot using the Kibana UI I get the following errors from elasticsearch and kibana: portal-elastic-es-main-0 elasticsearch {"type": "server",…

---

## [Data missing with logstash elasticsearch-input-plugin](https://discuss.elastic.co/t/data-missing-with-logstash-elasticsearch-input-plugin/222327)

<div class="topic-metadata">

**Author:** [@higee](https://discuss.elastic.co/u/higee)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 3:09pm UTC](https://discuss.elastic.co/t/data-missing-with-logstash-elasticsearch-input-plugin/222327 "2020-03-05T15:09:31Z")

</div>

Hi, I was using Logstash (7.4.2) to transfer documents between Elasticsearch indices (7.4.2). First have a look at the Logstash.conf input { elasticsearch { hosts =\> "" index =\> "haproxy-\*" scroll =\> "10m…

---

## [Logstash log is static and not moving with input data](https://discuss.elastic.co/t/logstash-log-is-static-and-not-moving-with-input-data/222319)

<div class="topic-metadata">

**Author:** [@lnitin](https://discuss.elastic.co/u/lnitin)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 2:42pm UTC](https://discuss.elastic.co/t/logstash-log-is-static-and-not-moving-with-input-data/222319 "2020-03-05T14:42:53Z")

</div>

I’m installing Logstash 7.5.1 on cent os 7 machine, Logstash logs are not showing any data being digested when passed Apache logs. If shows successful and api is up on 9600 and port 5400. But however Logstash shows few…

---

## [termFreq vs phraseFreq in Explanation](https://discuss.elastic.co/t/termfreq-vs-phrasefreq-in-explanation/222320)

<div class="topic-metadata">

**Author:** [@LJA](https://discuss.elastic.co/u/LJA)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 2:43pm UTC](https://discuss.elastic.co/t/termfreq-vs-phrasefreq-in-explanation/222320 "2020-03-05T14:43:29Z")

</div>

Hi. According to https://www.elastic.co/guide/en/elasticsearch/guide/current/relevance-intro.html when I want to see an explanation of the score I can use "explain":true and I should se something like: "\_explanation": …

---

## [Продолжение проблем на FreeBSD](https://discuss.elastic.co/t/freebsd/221640)

<div class="topic-metadata">

**Author:** [@Chawoosh](https://discuss.elastic.co/u/Chawoosh)\
**Replies:** 19\
**Last updated:** [March 5, 2020, 2:41pm UTC](https://discuss.elastic.co/t/freebsd/221640 "2020-03-05T14:41:50Z")

</div>

Текущее состояние: Эластик, Файлбит и Кибана приведены к одной версии (6.8), логи в окне Кибаны бегут, Файлбит с ключом -e ошибок по поводу логов не выдаёт, но... Попытки активизировать модуль system заканчивается сообщ…

---

## [Grok to parse Json in a Json](https://discuss.elastic.co/t/grok-to-parse-json-in-a-json/222258)

<div class="topic-metadata">

**Author:** [@aashish](https://discuss.elastic.co/u/aashish)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 2:34pm UTC](https://discuss.elastic.co/t/grok-to-parse-json-in-a-json/222258 "2020-03-05T14:34:42Z")

</div>

Hi Team, I'm facing issue to parse json in a json. Below is my sample log. Using Json formate in logstash it is working fine. But now I want to parse fields that are in "txn\_pl\_resp" (i.e. code & message) Using ELK ve…

---

## [Spark-elasticsearch에서 SQL 문을 사용하면 응답속도가 매우느립니다](https://discuss.elastic.co/t/spark-elasticsearch-sql/222317)

<div class="topic-metadata">

**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 2:33pm UTC](https://discuss.elastic.co/t/spark-elasticsearch-sql/222317 "2020-03-05T14:33:39Z")

</div>

안녕하세요? 현재 es에서 spark로 데이터를 읽어와 SQL 처리를 하는 기능을 적용중인데요. 아래와 같은 코드 사용시 문제가 있습니다. # Initializing PySpark from pyspark import SparkContext, SparkConf, SQLContext # Spark Config conf = SparkConf().setAppName("es\_app") sc = …

---

## [Support for multipolygon query](https://discuss.elastic.co/t/support-for-multipolygon-query/222316)

<div class="topic-metadata">

**Author:** [@tamil5ag](https://discuss.elastic.co/u/tamil5ag)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 2:31pm UTC](https://discuss.elastic.co/t/support-for-multipolygon-query/222316 "2020-03-05T14:31:50Z")

</div>

Hi, I need to get the geo-coordinates under 2 different polygon(An array of separate polygons) whether need to use geo-polygon query or multipolygon query? Can you help with the example query which ever is supported E…

---

## [Disable Data Usage in Config File](https://discuss.elastic.co/t/disable-data-usage-in-config-file/222296)

<div class="topic-metadata">

**Author:** [@heydo](https://discuss.elastic.co/u/heydo)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 2:31pm UTC](https://discuss.elastic.co/t/disable-data-usage-in-config-file/222296 "2020-03-05T14:31:21Z")

</div>

Hi, in Kibana, I get a notification "Help us improve the Elastic Stack". Is there a way to disable the usage data in the config files? Or alternatively to suppress banners in general using the config files? Thanks!

---

## [How to provide custom Java path without JAVA\_HOME or bundled JDK for service installation](https://discuss.elastic.co/t/how-to-provide-custom-java-path-without-java-home-or-bundled-jdk-for-service-installation/222309)

<div class="topic-metadata">

**Author:** [@antimatter](https://discuss.elastic.co/u/antimatter)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 2:17pm UTC](https://discuss.elastic.co/t/how-to-provide-custom-java-path-without-java-home-or-bundled-jdk-for-service-installation/222309 "2020-03-05T14:17:29Z")

</div>

Hello, I could not find answers regarding my issue by searching. As far as I understand, Elasticsearch will look at JAVA\_HOME environment variable to get the location of the JVM. If JAVA\_HOME is not set, it will use th…

---

## [Using external document\_id](https://discuss.elastic.co/t/using-external-document-id/221200)

<div class="topic-metadata">

**Author:** [@jwinth](https://discuss.elastic.co/u/jwinth)\
**Replies:** 8\
**Last updated:** [March 5, 2020, 2:16pm UTC](https://discuss.elastic.co/t/using-external-document-id/221200 "2020-03-05T14:16:17Z")

</div>

Hi, Whenever i try to assign the document\_id with some attribute from the documents, it creates just one new document on ElasticSearch with the document\_id as the name of the attribute i'm trying to use. What i want is …

---

## [Incorrect Doc Count vs index total returns in ES](https://discuss.elastic.co/t/incorrect-doc-count-vs-index-total-returns-in-es/222182)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 4\
**Last updated:** [March 5, 2020, 2:13pm UTC](https://discuss.elastic.co/t/incorrect-doc-count-vs-index-total-returns-in-es/222182 "2020-03-05T14:13:59Z")

</div>

Hi team, Using ES 7.1.1 and noticing a weird count of documents shown in Kibana vs the reporting totals from ES APIs and Elastic HQ. Specifically, I have an index pattern created daily for Jaeger spans. This is showing…

---

## [Create fields by splitting a log](https://discuss.elastic.co/t/create-fields-by-splitting-a-log/221891)

<div class="topic-metadata">

**Author:** [@prasadlele](https://discuss.elastic.co/u/prasadlele)\
**Replies:** 7\
**Last updated:** [March 5, 2020, 2:11pm UTC](https://discuss.elastic.co/t/create-fields-by-splitting-a-log/221891 "2020-03-05T14:11:29Z")

</div>

Hi , I have configure logstash to read my log file which gives me below input. Now I want to split the message and create a field for each comma separated values against each. Tried to use mutate in my logstash.conf f…

---

## [Index not getting created in elasticsearch hot node](https://discuss.elastic.co/t/index-not-getting-created-in-elasticsearch-hot-node/222281)

<div class="topic-metadata">

**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\
**Replies:** 4\
**Last updated:** [March 5, 2020, 1:49pm UTC](https://discuss.elastic.co/t/index-not-getting-created-in-elasticsearch-hot-node/222281 "2020-03-05T13:49:14Z")

</div>

Below is the elasticsearch output plugin in logstash output { elasticsearch { hosts =\> \["https://10.5.36.5:9200"\] index =\> "test-axiom" # ilm\_r…

---

## [If condition not working](https://discuss.elastic.co/t/if-condition-not-working/222122)

<div class="topic-metadata">

**Author:** [@wifi](https://discuss.elastic.co/u/wifi)\
**Replies:** 8\
**Last updated:** [March 5, 2020, 1:36pm UTC](https://discuss.elastic.co/t/if-condition-not-working/222122 "2020-03-05T13:36:36Z")

</div>

I use Logstash + Filebeat + Elasticsearch. In filebeat the elasticsearch plugin is enabled so that the logs of elasticsearch get collected. Now i want to define a simple condition in a logstash pipeline. I want to do s…

---

## [Understanding Logstash configuration naming](https://discuss.elastic.co/t/understanding-logstash-configuration-naming/222295)

<div class="topic-metadata">

**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 1:34pm UTC](https://discuss.elastic.co/t/understanding-logstash-configuration-naming/222295 "2020-03-05T13:34:13Z")

</div>

In one of the online documentation, I found this name10-suricata.conf. Also, the prefix number changes for some other configurations. So apart from prioritizing configs, what else this numbering means?

---

## [Visualize REST API calls?](https://discuss.elastic.co/t/visualize-rest-api-calls/221667)

<div class="topic-metadata">

**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\
**Replies:** 4\
**Last updated:** [March 5, 2020, 12:51pm UTC](https://discuss.elastic.co/t/visualize-rest-api-calls/221667 "2020-03-05T12:51:38Z")

</div>

Is it possible to directly visualize REST API calls, without resorting to monitoring methods like metricbeat monitoring or xpack internal collection? E.g. could I just make a visual out of this call: "GET \_cluster/heal…

---

## [Problems with terminateAfter Java API](https://discuss.elastic.co/t/problems-with-terminateafter-java-api/222288)

<div class="topic-metadata">

**Author:** [@marlonfa](https://discuss.elastic.co/u/marlonfa)\
**Replies:** 0\
**Last updated:** [March 5, 2020, 12:41pm UTC](https://discuss.elastic.co/t/problems-with-terminateafter-java-api/222288 "2020-03-05T12:41:47Z")

</div>

Hello guys, I'm using the java API with RestHighLevelClient currently I have more than 100.000 documents and using the scroll I'm getting the results perfectly applying a date order, returning this way: 154238, 154237, 1…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1588)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1590)
