# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1597

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1598

---

## [Kibana user statistics](https://discuss.elastic.co/t/kibana-user-statistics/221690)

<div class="topic-metadata">

**Author:** [@valerica\_georgescu](https://discuss.elastic.co/u/valerica_georgescu)\
**Replies:** 2\
**Last updated:** [March 3, 2020, 7:26am UTC](https://discuss.elastic.co/t/kibana-user-statistics/221690 "2020-03-03T07:26:05Z")

</div>

I want to know if kibana stores some user statistics. I want to find at least when was a user last time log in.

---

## [Unable to run mulitiple logstash](https://discuss.elastic.co/t/unable-to-run-mulitiple-logstash/221821)

<div class="topic-metadata">

**Author:** [@kopilim96](https://discuss.elastic.co/u/kopilim96)\
**Replies:** 0\
**Last updated:** [March 3, 2020, 7:25am UTC](https://discuss.elastic.co/t/unable-to-run-mulitiple-logstash/221821 "2020-03-03T07:25:53Z")

</div>

I would like to work with multi logstash but I failed after gone through the steps and instruction from the internet. Firstly, I did not install Logstash somehow I unzip the Logstash with tar.gz format. So the question…

---

## [How to use scroll zoom in existing Coordinate Map](https://discuss.elastic.co/t/how-to-use-scroll-zoom-in-existing-coordinate-map/221702)

<div class="topic-metadata">

**Author:** [@Anikesh\_Paul](https://discuss.elastic.co/u/Anikesh_Paul)\
**Replies:** 2\
**Last updated:** [March 3, 2020, 7:24am UTC](https://discuss.elastic.co/t/how-to-use-scroll-zoom-in-existing-coordinate-map/221702 "2020-03-03T07:24:38Z")

</div>

Hi, I was trying to implement mouse scroll zoom in/out in coordinate map graph under visualization. But I'm getting only tool tip with +/- for zooming. Is there any possible way to achieve mouse scroll zoom in/out in co…

---

## [Elasticsearch 7.5 unable to retrieve complete result set](https://discuss.elastic.co/t/elasticsearch-7-5-unable-to-retrieve-complete-result-set/221819)

<div class="topic-metadata">

**Author:** [@Vismay\_Shah](https://discuss.elastic.co/u/Vismay_Shah)\
**Replies:** 0\
**Last updated:** [March 3, 2020, 7:13am UTC](https://discuss.elastic.co/t/elasticsearch-7-5-unable-to-retrieve-complete-result-set/221819 "2020-03-03T07:13:32Z")

</div>

Hello, I have imported 0.7 million records in elasticsearch using logstash , find below the mapping details. \< { "mappings":{ "properties":{ "date\_time": { "type": "date", "format": "yyyyMMddHHmmss", "index": fal…

---

## [Index should be re-indexed while being sent from Streamsets. How can i make this automatically?](https://discuss.elastic.co/t/index-should-be-re-indexed-while-being-sent-from-streamsets-how-can-i-make-this-automatically/221795)

<div class="topic-metadata">

**Author:** [@Jangunee](https://discuss.elastic.co/u/Jangunee)\
**Replies:** 7\
**Last updated:** [March 3, 2020, 7:10am UTC](https://discuss.elastic.co/t/index-should-be-re-indexed-while-being-sent-from-streamsets-how-can-i-make-this-automatically/221795 "2020-03-03T07:10:20Z")

</div>

Hi , I'm using 6.4 with Streamsets. Data exported and transported from DB to ES by Streamsets with hourly base. Since my index in ES is set up with nori-tokenizer which cannot be set in Streamsets, reindexing in ES proc…

---

## [Sharepoint List to Logstash](https://discuss.elastic.co/t/sharepoint-list-to-logstash/219114)

<div class="topic-metadata">

**Author:** [@yummycake](https://discuss.elastic.co/u/yummycake)\
**Replies:** 2\
**Last updated:** [March 3, 2020, 6:37am UTC](https://discuss.elastic.co/t/sharepoint-list-to-logstash/219114 "2020-03-03T06:37:34Z")

</div>

We have stored our data in Sharepoint list. I was wondering if there is any way or any plugins that I can call our the data from the SharePoint list to Logstash and parsed the data to Elasticsearch so that we can use Kib…

---

## [Latest full document in transform](https://discuss.elastic.co/t/latest-full-document-in-transform/221435)

<div class="topic-metadata">

**Author:** [@Reshad](https://discuss.elastic.co/u/Reshad)\
**Replies:** 4\
**Last updated:** [March 3, 2020, 4:10am UTC](https://discuss.elastic.co/t/latest-full-document-in-transform/221435 "2020-03-03T04:10:44Z")

</div>

Hi, I am using elasticsearch, kibana and metricbeat to gather metrics from my systems. I want to build a few Data Table visualisation that have a list of: hosts that are currently at more than 80% RAM hosts that curre…

---

## [Send Parameter With Reset Plugin](https://discuss.elastic.co/t/send-parameter-with-reset-plugin/221803)

<div class="topic-metadata">

**Author:** [@shakesperoo](https://discuss.elastic.co/u/shakesperoo)\
**Replies:** 1\
**Last updated:** [March 3, 2020, 4:01am UTC](https://discuss.elastic.co/t/send-parameter-with-reset-plugin/221803 "2020-03-03T04:01:25Z")

</div>

I am using reset with twitter API and i need to pass conditonal paramter like tweet\_id" =\>"tweet" =\>(truncated) ? :"%{extend\_full\_text}%" :"%{text}" below my code . rest { request =\> { cacert =\> 'E:/Momp\_Social\_Me…

---

## [Resize image on Visualization](https://discuss.elastic.co/t/resize-image-on-visualization/221761)

<div class="topic-metadata">

**Author:** [@Martin\_Bouhier](https://discuss.elastic.co/u/Martin_Bouhier)\
**Replies:** 1\
**Last updated:** [March 3, 2020, 3:48am UTC](https://discuss.elastic.co/t/resize-image-on-visualization/221761 "2020-03-03T03:48:59Z")

</div>

I would like to re size all image in a visualization. My problem is I extract links from linkedin so I have the image in linkedin size. I mean, Are there any way to set height and weight of all images??

---

## [Nothing in filter block is being parsed. Why is only the filter not working in logstash?](https://discuss.elastic.co/t/nothing-in-filter-block-is-being-parsed-why-is-only-the-filter-not-working-in-logstash/221796)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 5\
**Last updated:** [March 3, 2020, 3:41am UTC](https://discuss.elastic.co/t/nothing-in-filter-block-is-being-parsed-why-is-only-the-filter-not-working-in-logstash/221796 "2020-03-03T03:41:39Z")

</div>

I tried adding mutate and add\_filed along with grok filter but nothing is working. The logs are only parsed as default method. #listening on this port input { beats { port =\> 5044 } } filter { if\[fields\]\[tags…

---

## [Elasticsearch 7 Slower Indexing than 6](https://discuss.elastic.co/t/elasticsearch-7-slower-indexing-than-6/221794)

<div class="topic-metadata">

**Author:** [@Brent\_Farrell](https://discuss.elastic.co/u/Brent_Farrell)\
**Replies:** 0\
**Last updated:** [March 3, 2020, 1:23am UTC](https://discuss.elastic.co/t/elasticsearch-7-slower-indexing-than-6/221794 "2020-03-03T01:23:30Z")

</div>

We have been testing Elasticsearch 7.4.0 and comparing it to our previous deployment of Elasticsearch 6.4.3. I have tried running both versions on a Mac and the indexing workload takes about 30% longer with Elasticsearc…

---

## [Logstash new codec plugin fails while using](https://discuss.elastic.co/t/logstash-new-codec-plugin-fails-while-using/221756)

<div class="topic-metadata">

**Author:** [@i-mohit-a](https://discuss.elastic.co/u/i-mohit-a)\
**Replies:** 1\
**Last updated:** [March 3, 2020, 12:59am UTC](https://discuss.elastic.co/t/logstash-new-codec-plugin-fails-while-using/221756 "2020-03-03T00:59:20Z")

</div>

While developing a new logstash codec plugin, the plugin gets installed successfully. But error occurs while using it. Steps to replicate: Install logstash 7.6 or pull the code from git and cd to the folder where log…

---

## [\[Kibana\] I want to increase the display limit of Visualize on the dashboard editing screen](https://discuss.elastic.co/t/kibana-i-want-to-increase-the-display-limit-of-visualize-on-the-dashboard-editing-screen/221614)

<div class="topic-metadata">

**Author:** [@yokoyoko](https://discuss.elastic.co/u/yokoyoko)\
**Replies:** 2\
**Last updated:** [March 3, 2020, 12:56am UTC](https://discuss.elastic.co/t/kibana-i-want-to-increase-the-display-limit-of-visualize-on-the-dashboard-editing-screen/221614 "2020-03-03T00:56:55Z")

</div>

Problem On the Kibana dashboard screen, press "Edit" → "Add" to add Visualize, Only up to 100 Visualize candidates are displayed (actually more than 100 have been created).Please let me know if there is a way to increas…

---

## [Shards failed warning on Network dashboard in SIEM app](https://discuss.elastic.co/t/shards-failed-warning-on-network-dashboard-in-siem-app/219908)

<div class="topic-metadata">

**Author:** [@wconnell](https://discuss.elastic.co/u/wconnell)\
**Replies:** 8\
**Last updated:** [March 3, 2020, 12:04am UTC](https://discuss.elastic.co/t/shards-failed-warning-on-network-dashboard-in-siem-app/219908 "2020-03-03T00:04:40Z")

</div>

Hi there, I'm getting a shards failed warning in the Network dashboard of the SIEM app (v7.6). I'm unable to diagnose as when I click the "Show details" button, nothing happens. I used the inspect tool in Chrome and it …

---

## [Video: How To Install Elasticsearch and Kibana on Ubuntu Linux](https://discuss.elastic.co/t/video-how-to-install-elasticsearch-and-kibana-on-ubuntu-linux/221786)

<div class="topic-metadata">

**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 11:44pm UTC](https://discuss.elastic.co/t/video-how-to-install-elasticsearch-and-kibana-on-ubuntu-linux/221786 "2020-03-02T23:44:03Z")

</div>

The Elastic Stack is a great platform for various data analytics use-cases. But how do you get started? This video goes beyond a simple default installation of Elasticsearch and Kibana. It discusses real-world best pract…

---

## [Indexing plain text files](https://discuss.elastic.co/t/indexing-plain-text-files/221745)

<div class="topic-metadata">

**Author:** [@Adspectus](https://discuss.elastic.co/u/Adspectus)\
**Replies:** 3\
**Last updated:** [March 2, 2020, 11:37pm UTC](https://discuss.elastic.co/t/indexing-plain-text-files/221745 "2020-03-02T23:37:40Z")

</div>

Hello, just installed Elasticsearch as a full text engine for my nextcloud installation. I noticed that plain text files such as .txt or .tex (LaTeX source code) are not getting indexed - or at least a search for text sh…

---

## [Help to choose hardware](https://discuss.elastic.co/t/help-to-choose-hardware/221775)

<div class="topic-metadata">

**Author:** [@yann9602](https://discuss.elastic.co/u/yann9602)\
**Replies:** 1\
**Last updated:** [March 2, 2020, 11:35pm UTC](https://discuss.elastic.co/t/help-to-choose-hardware/221775 "2020-03-02T23:35:02Z")

</div>

Hello guys ! I work for a company who used elastic search to serve data to customers. I would like to get help in choosing our elastic search configuration. Our case : We use elastic version 1.5 and no shard. We have…

---

## [Using synonym graph filter VS adding OR clause in search query](https://discuss.elastic.co/t/using-synonym-graph-filter-vs-adding-or-clause-in-search-query/221778)

<div class="topic-metadata">

**Author:** [@Zhang\_Jack](https://discuss.elastic.co/u/Zhang_Jack)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 9:47pm UTC](https://discuss.elastic.co/t/using-synonym-graph-filter-vs-adding-or-clause-in-search-query/221778 "2020-03-02T21:47:49Z")

</div>

Hi, I am wondering is there any difference between using synonym graph filter and construct my search query adding OR clause with synonyms. Eg. as the example described here: https://www.elastic.co/guide/en/elasticsear…

---

## [Ingesting to Logstash Beat through Istio Gateway Ingress](https://discuss.elastic.co/t/ingesting-to-logstash-beat-through-istio-gateway-ingress/221774)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 9:22pm UTC](https://discuss.elastic.co/t/ingesting-to-logstash-beat-through-istio-gateway-ingress/221774 "2020-03-02T21:22:52Z")

</div>

I have exposed port 5044 through an Istio gateway/virtual service for Logstash beats ingestion. All other ports defined in this gateway/VS are accessible through Istio, but 5044 is not. However, the service it points to …

---

## [Index name that Uptime look for](https://discuss.elastic.co/t/index-name-that-uptime-look-for/221198)

<div class="topic-metadata">

**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\
**Replies:** 7\
**Last updated:** [March 2, 2020, 8:46pm UTC](https://discuss.elastic.co/t/index-name-that-uptime-look-for/221198 "2020-03-02T20:46:48Z")

</div>

Hi, I want to have different users not to be able to see all uptime data in the Uptime app. My approach would be to have different heartbeat instances creating indices with different names and set the permissions for th…

---

## [Aggregate filter in Logstash not behaving correctly](https://discuss.elastic.co/t/aggregate-filter-in-logstash-not-behaving-correctly/221764)

<div class="topic-metadata">

**Author:** [@avaishnav](https://discuss.elastic.co/u/avaishnav)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 7:51pm UTC](https://discuss.elastic.co/t/aggregate-filter-in-logstash-not-behaving-correctly/221764 "2020-03-02T19:51:51Z")

</div>

I have a use case where application is writing data into log file. Filebeat sends log to Logstash, Logstash aggregates data and sends aggregated data to Elasticsearch to store it. Logstash drops the original data and sen…

---

## [Creating Elasticsearch Complicated Data Table](https://discuss.elastic.co/t/creating-elasticsearch-complicated-data-table/221718)

<div class="topic-metadata">

**Author:** [@lmit](https://discuss.elastic.co/u/lmit)\
**Replies:** 2\
**Last updated:** [March 2, 2020, 7:09pm UTC](https://discuss.elastic.co/t/creating-elasticsearch-complicated-data-table/221718 "2020-03-02T19:09:20Z")

</div>

Hello, I am Looking to build the following report data table as a Elasticsearch Dashboard Using the following JSON data in Elasticsearch document(s) PUT canpi-v1-2020.03.01/\_doc/004D58\_5E5C0DA7 { "@timestamp": "202…

---

## [How can i get a distinct USERID from a table](https://discuss.elastic.co/t/how-can-i-get-a-distinct-userid-from-a-table/221728)

<div class="topic-metadata">

**Author:** [@axedenim](https://discuss.elastic.co/u/axedenim)\
**Replies:** 1\
**Last updated:** [March 2, 2020, 5:51pm UTC](https://discuss.elastic.co/t/how-can-i-get-a-distinct-userid-from-a-table/221728 "2020-03-02T17:51:51Z")

</div>

I have a SQL query for SELECT DISTINCT(USER\_ID) FROM TABLENAME Need help to frame the query on Kibana for elastic search

---

## [Possible to change order of key fields with S3 Output plugin?](https://discuss.elastic.co/t/possible-to-change-order-of-key-fields-with-s3-output-plugin/221740)

<div class="topic-metadata">

**Author:** [@joshuarobinson](https://discuss.elastic.co/u/joshuarobinson)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 4:52pm UTC](https://discuss.elastic.co/t/possible-to-change-order-of-key-fields-with-s3-output-plugin/221740 "2020-03-02T16:52:33Z")

</div>

Hi, According to https://www.elastic.co/guide/en/logstash/current/plugins-outputs-s3.html, the objects created have a key with uuid before the date field. This makes listing objects by date range far less efficient, for…

---

## [My Kibana dashboard has Kibana processed time stamp , instead I want source log file time stamp](https://discuss.elastic.co/t/my-kibana-dashboard-has-kibana-processed-time-stamp-instead-i-want-source-log-file-time-stamp/221737)

<div class="topic-metadata">

**Author:** [@pjvijay](https://discuss.elastic.co/u/pjvijay)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 4:48pm UTC](https://discuss.elastic.co/t/my-kibana-dashboard-has-kibana-processed-time-stamp-instead-i-want-source-log-file-time-stamp/221737 "2020-03-02T16:48:34Z")

</div>

Hello All Seems the issue is simple , but struggling from long time. I want to view my Source log time stamp in the Kibana dashboard intead of Kibana processed time . As I want to visualize using Log time stamp and th…

---

## [Too Many Scrolls | Kibana](https://discuss.elastic.co/t/too-many-scrolls-kibana/221557)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 0\
**Last updated:** [March 1, 2020, 5:10am UTC](https://discuss.elastic.co/t/too-many-scrolls-kibana/221557 "2020-03-01T05:10:45Z")

</div>

Hi all, I keep getting this error message. How I can reproduce the issue: Querying through dev tools Status 500 error will appear ("Internal Service Error") Refresh the page and this error message would appear Refres…

---

## [Migrate from daily indices to ILM rollover with same index pattern?](https://discuss.elastic.co/t/migrate-from-daily-indices-to-ilm-rollover-with-same-index-pattern/221733)

<div class="topic-metadata">

**Author:** [@Dan\_Cohen](https://discuss.elastic.co/u/Dan_Cohen)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 4:34pm UTC](https://discuss.elastic.co/t/migrate-from-daily-indices-to-ilm-rollover-with-same-index-pattern/221733 "2020-03-02T16:34:18Z")

</div>

We have a bunch of daily indices matched by the index pattern lambda-\* e.g. lambda-2020-02-02. We want to start using a size-based ilm rollover policy but we don't want to break our existing visualisations etc. Is it po…

---

## [Fetch 1 million records](https://discuss.elastic.co/t/fetch-1-million-records/220636)

<div class="topic-metadata">

**Author:** [@otherview](https://discuss.elastic.co/u/otherview)\
**Replies:** 6\
**Last updated:** [March 2, 2020, 4:33pm UTC](https://discuss.elastic.co/t/fetch-1-million-records/220636 "2020-03-02T16:33:09Z")

</div>

Hi ! I'm trying to fetch +1 Million records from elastic search. So far all approaches are still slow. At the moment I'm using a sliced scroll search. I just need a few fields from the documents, not the whole docume…

---

## [How can I add condition in the Watcher](https://discuss.elastic.co/t/how-can-i-add-condition-in-the-watcher/221357)

<div class="topic-metadata">

**Author:** [@shylendran](https://discuss.elastic.co/u/shylendran)\
**Replies:** 1\
**Last updated:** [March 2, 2020, 4:21pm UTC](https://discuss.elastic.co/t/how-can-i-add-condition-in-the-watcher/221357 "2020-03-02T16:21:35Z")

</div>

I am configuring Watcher and getting the alert email. Version is 7.3 Actually, I need to add conditions like this - if the statusCode (one of the available field in the index) is 500 in the last 10 min, generate an emai…

---

## [Rookie Question: Record a count in a new Index](https://discuss.elastic.co/t/rookie-question-record-a-count-in-a-new-index/221716)

<div class="topic-metadata">

**Author:** [@BlueTeamNinja](https://discuss.elastic.co/u/BlueTeamNinja)\
**Replies:** 2\
**Last updated:** [March 2, 2020, 3:47pm UTC](https://discuss.elastic.co/t/rookie-question-record-a-count-in-a-new-index/221716 "2020-03-02T15:47:21Z")

</div>

Hey all, I'm brand new to my Elastic journey. I am collecting some firewall logs, which accumulate really quickly. What would I like to do is create a new index based on the counts of some of my tags. A daily record …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1596)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1598)
