# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1604

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1605

---

## [Alert plugin or Alert software to be integrated with Elastic stack in Basic License](https://discuss.elastic.co/t/alert-plugin-or-alert-software-to-be-integrated-with-elastic-stack-in-basic-license/221192)

<div class="topic-metadata">

**Author:** [@Shefali](https://discuss.elastic.co/u/Shefali)\
**Replies:** 2\
**Last updated:** [February 27, 2020, 12:26pm UTC](https://discuss.elastic.co/t/alert-plugin-or-alert-software-to-be-integrated-with-elastic-stack-in-basic-license/221192 "2020-02-27T12:26:01Z")

</div>

We are using Elastic stack in Basic License , but we require alert configuration. If there is any, please respond. For version 7.5

---

## [Problems connecting an ec2 instances with logstash on to the elastic cloud](https://discuss.elastic.co/t/problems-connecting-an-ec2-instances-with-logstash-on-to-the-elastic-cloud/220865)

<div class="topic-metadata">

**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\
**Replies:** 8\
**Last updated:** [February 27, 2020, 12:25pm UTC](https://discuss.elastic.co/t/problems-connecting-an-ec2-instances-with-logstash-on-to-the-elastic-cloud/220865 "2020-02-27T12:25:39Z")

</div>

Hello there, In need of some help, have newly come around the realm of AWS and the Elastic Cloud set up(s). Have recently set up and configured an Logstash agent in an ec2 instance. On the output of this, I would like …

---

## [How to search in array of objects](https://discuss.elastic.co/t/how-to-search-in-array-of-objects/221225)

<div class="topic-metadata">

**Author:** [@thewasta](https://discuss.elastic.co/u/thewasta)\
**Replies:** 2\
**Last updated:** [February 27, 2020, 12:24pm UTC](https://discuss.elastic.co/t/how-to-search-in-array-of-objects/221225 "2020-02-27T12:24:58Z")

</div>

Current version of ElasticSearch & Kibana 7.6.0 Hello folks! this is my template: GET \_template/my\_template "mappings" : { "\_meta" : { }, "\_source" : { }, "properties" : { "brands" : { …

---

## [SAP Applications Monitoring](https://discuss.elastic.co/t/sap-applications-monitoring/221235)

<div class="topic-metadata">

**Author:** [@raviraj80](https://discuss.elastic.co/u/raviraj80)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 12:16pm UTC](https://discuss.elastic.co/t/sap-applications-monitoring/221235 "2020-02-27T12:16:52Z")

</div>

Whether it is possible to do SAP Applications monitoring using ELK stack ? If yes then how..Can we integrate SAP Solution Manager with ELK ..how to ingest SAP logs into ELK

---

## [How to get correct count in aggregations](https://discuss.elastic.co/t/how-to-get-correct-count-in-aggregations/221232)

<div class="topic-metadata">

**Author:** [@tarungargbtp2612](https://discuss.elastic.co/u/tarungargbtp2612)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 12:06pm UTC](https://discuss.elastic.co/t/how-to-get-correct-count-in-aggregations/221232 "2020-02-27T12:06:49Z")

</div>

The count in aggregation is different than the documents matching on the aggregated value. Is there any correct way to get exact count of aggregation values. Example: "aggregations" : { "profiles" : { "doc\_co…

---

## [AWS ELK](https://discuss.elastic.co/t/aws-elk/221224)

<div class="topic-metadata">

**Author:** [@Vikas\_Sobti](https://discuss.elastic.co/u/Vikas_Sobti)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 11:46am UTC](https://discuss.elastic.co/t/aws-elk/221224 "2020-02-27T11:46:41Z")

</div>

Dear Team I am facing Issue with AWS ELK setup in back end we are facing below issue 1.SNAPSHOT STATUS RED 2.KIBANA STATUS YELLOW 3.DOMAIN STATUS PROCESSING (STUCK HERE FROM LAST FEW DAYS) Below is CLUSTER HEALTH S…

---

## [Not dynamically changing charts in Dashboard Kibana](https://discuss.elastic.co/t/not-dynamically-changing-charts-in-dashboard-kibana/221203)

<div class="topic-metadata">

**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\
**Replies:** 3\
**Last updated:** [February 27, 2020, 11:42am UTC](https://discuss.elastic.co/t/not-dynamically-changing-charts-in-dashboard-kibana/221203 "2020-02-27T11:42:30Z")

</div>

Hi everyone! I want to create a dashboard with 5 charts. Two of these charts should not be dynamically changed when for example a filter is applied (eg. a filter is applied for the filed, price \> 30€ but the DataTable i…

---

## [How to convert comma to ; in field](https://discuss.elastic.co/t/how-to-convert-comma-to-in-field/220869)

<div class="topic-metadata">

**Author:** [@vpolizki](https://discuss.elastic.co/u/vpolizki)\
**Replies:** 2\
**Last updated:** [February 27, 2020, 11:23am UTC](https://discuss.elastic.co/t/how-to-convert-comma-to-in-field/220869 "2020-02-27T11:23:02Z")

</div>

Hi i want to collect csv file, but some field include comma in text i want to change it to ;

---

## [elasticSearch -Search in Italian and Hebrew](https://discuss.elastic.co/t/elasticsearch-search-in-italian-and-hebrew/221205)

<div class="topic-metadata">

**Author:** [@rezekiel](https://discuss.elastic.co/u/rezekiel)\
**Replies:** 5\
**Last updated:** [February 27, 2020, 11:21am UTC](https://discuss.elastic.co/t/elasticsearch-search-in-italian-and-hebrew/221205 "2020-02-27T11:21:21Z")

</div>

With elasticSearch 7.4 installed on Windows - what do i need to do/install to search for strings in Hebrew and in Italian

---

## [How to search Text in Multi-valued field elementwise](https://discuss.elastic.co/t/how-to-search-text-in-multi-valued-field-elementwise/221212)

<div class="topic-metadata">

**Author:** [@tarungargbtp2612](https://discuss.elastic.co/u/tarungargbtp2612)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 10:55am UTC](https://discuss.elastic.co/t/how-to-search-text-in-multi-valued-field-elementwise/221212 "2020-02-27T10:55:23Z")

</div>

I have a field: "skills" : \[ "smart worker", "dedicated", "english", "bengali", "dbms" \] If I write a match quer…

---

## [Kibana Threshold line](https://discuss.elastic.co/t/kibana-threshold-line/221191)

<div class="topic-metadata">

**Author:** [@Alok](https://discuss.elastic.co/u/Alok)\
**Replies:** 1\
**Last updated:** [February 27, 2020, 11:02am UTC](https://discuss.elastic.co/t/kibana-threshold-line/221191 "2020-02-27T11:02:30Z")

</div>

Dear Extperts, As of ES 7.6 , The threshold line in Kibana takes only static values and accepts integers. Is there a way we can parameterize the threshold value? For example , I plot a bar chart showing marks obtained…

---

## [Kibana 7.6 sorting in discovery](https://discuss.elastic.co/t/kibana-7-6-sorting-in-discovery/221194)

<div class="topic-metadata">

**Author:** [@gofbor](https://discuss.elastic.co/u/gofbor)\
**Replies:** 2\
**Last updated:** [February 27, 2020, 10:53am UTC](https://discuss.elastic.co/t/kibana-7-6-sorting-in-discovery/221194 "2020-02-27T10:53:06Z")

</div>

Hi, I have a problem with kibana 7.6 discovery sorting. It's not working correctly. There was no problem with it in 7.5.1 BR.

---

## [Time filter](https://discuss.elastic.co/t/time-filter/221140)

<div class="topic-metadata">

**Author:** [@cravinder489](https://discuss.elastic.co/u/cravinder489)\
**Replies:** 1\
**Last updated:** [February 27, 2020, 10:40am UTC](https://discuss.elastic.co/t/time-filter/221140 "2020-02-27T10:40:06Z")

</div>

Can I change/update the time filter I selected while creating an index pattern, once after the index pattern has been created?

---

## [Handling / dropping files according to previously handled files](https://discuss.elastic.co/t/handling-dropping-files-according-to-previously-handled-files/220799)

<div class="topic-metadata">

**Author:** [@AxelR](https://discuss.elastic.co/u/AxelR)\
**Replies:** 5\
**Last updated:** [February 27, 2020, 10:25am UTC](https://discuss.elastic.co/t/handling-dropping-files-according-to-previously-handled-files/220799 "2020-02-27T10:25:35Z")

</div>

I'm having an issue on how to deal with a batch of files. The lines of each file contain different pieces of information: the first line acts as a header (with a recognizable prefix) and includes (among other things)…

---

## [Logstash shuts down after a few seconds](https://discuss.elastic.co/t/logstash-shuts-down-after-a-few-seconds/221195)

<div class="topic-metadata">

**Author:** [@PRAV01](https://discuss.elastic.co/u/PRAV01)\
**Replies:** 3\
**Last updated:** [February 27, 2020, 10:19am UTC](https://discuss.elastic.co/t/logstash-shuts-down-after-a-few-seconds/221195 "2020-02-27T10:19:53Z")

</div>

Hi, i'm using Logstash 7.6.0 and i am trying to make a function where i read logs on port 3003. to do so i installed the http output plugin and created a file called plugin.conf in /usr/share/logstash/config as so: outp…

---

## [Filebeat 7.6.0 oss can't work with AWS Elasticsearch Service because it tries to access xpack](https://discuss.elastic.co/t/filebeat-7-6-0-oss-cant-work-with-aws-elasticsearch-service-because-it-tries-to-access-xpack/221189)

<div class="topic-metadata">

**Author:** [@Vlad\_Lukyanov](https://discuss.elastic.co/u/Vlad_Lukyanov)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 9:21am UTC](https://discuss.elastic.co/t/filebeat-7-6-0-oss-cant-work-with-aws-elasticsearch-service-because-it-tries-to-access-xpack/221189 "2020-02-27T09:21:36Z")

</div>

Have AWS ES instance open to world AWS EC2 instance for testing FileBeat OSS 7.6.0 installed from OSS-7.x Debian repo on 'filebeat setup -e --template' Got 2020-02-27T09:06:00.826Z INFO elasticsearch/client.go:757 A…

---

## [Elasticsearch Range Aggregation is including upper limit excluding lower limit](https://discuss.elastic.co/t/elasticsearch-range-aggregation-is-including-upper-limit-excluding-lower-limit/221185)

<div class="topic-metadata">

**Author:** [@tarungargbtp2612](https://discuss.elastic.co/u/tarungargbtp2612)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 9:14am UTC](https://discuss.elastic.co/t/elasticsearch-range-aggregation-is-including-upper-limit-excluding-lower-limit/221185 "2020-02-27T09:14:34Z")

</div>

I am using the following query: { "aggs": { "profiles": { "nested": { "path": "profiles" }, "aggs": { "ctc": { "filter": { "range": { "profil…

---

## [How to divide two fields for visualization?](https://discuss.elastic.co/t/how-to-divide-two-fields-for-visualization/221009)

<div class="topic-metadata">

**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\
**Replies:** 5\
**Last updated:** [February 27, 2020, 9:12am UTC](https://discuss.elastic.co/t/how-to-divide-two-fields-for-visualization/221009 "2020-02-27T09:12:19Z")

</div>

Hello, I have been experimenting with visualizations and wanted to know if there is a way to divide the value of a field? I would prefer not to have to write a script. I am looking for a simple "calculation" or "divisi…

---

## [Sync Elasticsearch with Microsoft SQL](https://discuss.elastic.co/t/sync-elasticsearch-with-microsoft-sql/220977)

<div class="topic-metadata">

**Author:** [@skjoos](https://discuss.elastic.co/u/skjoos)\
**Replies:** 3\
**Last updated:** [February 27, 2020, 9:06am UTC](https://discuss.elastic.co/t/sync-elasticsearch-with-microsoft-sql/220977 "2020-02-27T09:06:44Z")

</div>

Hello, Does it exits any service, plugin or something like that to sync Elasticsearch with MSSQL? I've tried Logstash, but I don't think it's such a good fit since the database has alot of complicated relationship. Th…

---

## [Elasticsearch self signed certificate](https://discuss.elastic.co/t/elasticsearch-self-signed-certificate/221181)

<div class="topic-metadata">

**Author:** [@HadarPeeran](https://discuss.elastic.co/u/HadarPeeran)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 9:00am UTC](https://discuss.elastic.co/t/elasticsearch-self-signed-certificate/221181 "2020-02-27T09:00:24Z")

</div>

Elasticsearch version 7.5.2 I followed instructions of blog Configuring SSL, TLS, and HTTPS to secure Elasticsearch, Kibana, Beats, and Logstash | Elastic Blog created self-signed certificate by command: elasticsearc…

---

## [Aggregate across the document from Nested Documents](https://discuss.elastic.co/t/aggregate-across-the-document-from-nested-documents/221171)

<div class="topic-metadata">

**Author:** [@Thilak](https://discuss.elastic.co/u/Thilak)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 8:25am UTC](https://discuss.elastic.co/t/aggregate-across-the-document-from-nested-documents/221171 "2020-02-27T08:25:31Z")

</div>

Hello I have a document like this Example Document 1 "applicationId": "12345", "accountId": "test", "interactionInfo": \[ { "title": "body", "value": "test" }, { "title": "UserLocati…

---

## [Mapping expressions](https://discuss.elastic.co/t/mapping-expressions/221173)

<div class="topic-metadata">

**Author:** [@karnabal](https://discuss.elastic.co/u/karnabal)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 8:33am UTC](https://discuss.elastic.co/t/mapping-expressions/221173 "2020-02-27T08:33:42Z")

</div>

Hello, I want to map expressions from two lists. \*black wooden console table \*black wood console table should match with: Console table Black Wood Could you bring any advice to do this? Thanks in advance!

---

## [Need help designing index & mapping (Great Type Refactoring)](https://discuss.elastic.co/t/need-help-designing-index-mapping-great-type-refactoring/221172)

<div class="topic-metadata">

**Author:** [@swarnkar](https://discuss.elastic.co/u/swarnkar)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 8:26am UTC](https://discuss.elastic.co/t/need-help-designing-index-mapping-great-type-refactoring/221172 "2020-02-27T08:26:40Z")

</div>

Hello there, I have multiple data series which are inter-related, I am not sure how to logically club this and design index and mapping for below: application-name=Cloobar series-1: webtraffic with fields {co…

---

## [API to provision Elasticsearch cluster in Elastic Cloud](https://discuss.elastic.co/t/api-to-provision-elasticsearch-cluster-in-elastic-cloud/221080)

<div class="topic-metadata">

**Author:** [@alexzelenuyk](https://discuss.elastic.co/u/alexzelenuyk)\
**Replies:** 2\
**Last updated:** [February 27, 2020, 8:21am UTC](https://discuss.elastic.co/t/api-to-provision-elasticsearch-cluster-in-elastic-cloud/221080 "2020-02-27T08:21:45Z")

</div>

Hello everyone, I'd like to provision an Elasticsearch cluster in Elastic Cloud using Terraform. There is a nice community provider but it supposes to work with ECE. Is there any option how to provision a cluster in E…

---

## [Ideal number of shards for 2 node ES cluster](https://discuss.elastic.co/t/ideal-number-of-shards-for-2-node-es-cluster/221063)

<div class="topic-metadata">

**Author:** [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\
**Replies:** 3\
**Last updated:** [February 27, 2020, 8:00am UTC](https://discuss.elastic.co/t/ideal-number-of-shards-for-2-node-es-cluster/221063 "2020-02-27T08:00:33Z")

</div>

Could someone pls suggest me the number of shards and replicas for a 2 node elasticsearch cluster. Thank you! I am fully aware that the ideal setup is of 3 nodes but I would like to try with 2 nodes first before moving …

---

## [Getting "Failed to flush outgoing items {exception=\>WebHDFS::ServerError}" while using output plugin 'logstash.outputs.webhdfs'](https://discuss.elastic.co/t/getting-failed-to-flush-outgoing-items-exception-webhdfs-servererror-while-using-output-plugin-logstash-outputs-webhdfs/221162)

<div class="topic-metadata">

**Author:** [@hits.elastic](https://discuss.elastic.co/u/hits.elastic)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 7:50am UTC](https://discuss.elastic.co/t/getting-failed-to-flush-outgoing-items-exception-webhdfs-servererror-while-using-output-plugin-logstash-outputs-webhdfs/221162 "2020-02-27T07:50:19Z")

</div>

Hi, I am using 'logstash.outputs.webhdfs' logstash output plugin. Below is my logstash configuration input { file { type =\> "file1" path =\> "/var/log/logstash/logstash-1/\*" start\_position =\> "beginni…

---

## [How sincedb works when using read mode for the file input plugin](https://discuss.elastic.co/t/how-sincedb-works-when-using-read-mode-for-the-file-input-plugin/221163)

<div class="topic-metadata">

**Author:** [@akwoprosper](https://discuss.elastic.co/u/akwoprosper)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 7:51am UTC](https://discuss.elastic.co/t/how-sincedb-works-when-using-read-mode-for-the-file-input-plugin/221163 "2020-02-27T07:51:16Z")

</div>

Hello everyone, I just want to find out the behavior of the sincedb when using the read mode of the file input plugin. As a matter of fact, I just want to confirm that the current read position is logged only after a f…

---

## [Add date timestamp to name via math expression which will contain date and time](https://discuss.elastic.co/t/add-date-timestamp-to-name-via-math-expression-which-will-contain-date-and-time/221161)

<div class="topic-metadata">

**Author:** [@Davit\_Paytyan](https://discuss.elastic.co/u/Davit_Paytyan)\
**Replies:** 0\
**Last updated:** [February 27, 2020, 7:46am UTC](https://discuss.elastic.co/t/add-date-timestamp-to-name-via-math-expression-which-will-contain-date-and-time/221161 "2020-02-27T07:46:15Z")

</div>

Hello, I have a question about elasticsearch 7.4. We want to implement backup via snapshot lifecycle management API using time frame. Here is the query PUT /\_slm/policy/dailypolicy { "schedule": "\*/5 \* \* \* \* ?", "na…

---

## [Парсинг логов. Поиск ошибок системы или приложений в логах windows](https://discuss.elastic.co/t/windows/221032)

<div class="topic-metadata">

**Author:** [@mrbig](https://discuss.elastic.co/u/mrbig)\
**Replies:** 2\
**Last updated:** [February 27, 2020, 7:10am UTC](https://discuss.elastic.co/t/windows/221032 "2020-02-27T07:10:05Z")

</div>

Приветствую всех! Ребят версия elk stack у меня 7.4.2 Все логи собираются всё хорошо всё работает. (winlogbeat отправляет все логи в logstash) Вопрос возник как из этих логов вытащить ошибки? Если можно что нибудь в …

---

## [Split multi- nested XML in Logstash](https://discuss.elastic.co/t/split-multi-nested-xml-in-logstash/220077)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 11\
**Last updated:** [February 27, 2020, 6:40am UTC](https://discuss.elastic.co/t/split-multi-nested-xml-in-logstash/220077 "2020-02-27T06:40:06Z")

</div>

Hi All, Here's a sample of my xml data \<metric-datas\> \<metric-data\> \<metricId\>120778\</metricId\> \<metricName\> Average Response Time (ms) \</metricName\> \<metricPath\>…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1603)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1605)
