# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1616

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1617

---

## [Rally 1.4.1 released](https://discuss.elastic.co/t/rally-1-4-1-released/220231)

<div class="topic-metadata">

**Author:** [@Dennis\_Lawler](https://discuss.elastic.co/u/Dennis_Lawler)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 4:49pm UTC](https://discuss.elastic.co/t/rally-1-4-1-released/220231 "2020-02-20T16:49:17Z")

</div>

We have just released Rally 1.4.1. The highlight of this release: #890: Speed up client-side bulk-handling There are also a breaking change that can be viewed in the migration docs. Please see the 1.4.1 release page…

---

## [Merge daily indexes into monthly](https://discuss.elastic.co/t/merge-daily-indexes-into-monthly/220230)

<div class="topic-metadata">

**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 4:48pm UTC](https://discuss.elastic.co/t/merge-daily-indexes-into-monthly/220230 "2020-02-20T16:48:29Z")

</div>

Hello, Currently we have daily indexes, so I am looking to run a monthly job task to merge these, for example: POST \_reindex?requests\_per\_second=115&wait\_for\_completion=true { "source": { "index": "analytics-stag…

---

## [Logstash as a service config not working](https://discuss.elastic.co/t/logstash-as-a-service-config-not-working/219836)

<div class="topic-metadata">

**Author:** [@sdkeslar](https://discuss.elastic.co/u/sdkeslar)\
**Replies:** 6\
**Last updated:** [February 20, 2020, 4:47pm UTC](https://discuss.elastic.co/t/logstash-as-a-service-config-not-working/219836 "2020-02-20T16:47:28Z")

</div>

Trying to get a new install of LogStash running as a service on Ubuntu 18.04 LTS. I can start it ok as root, but it won't start using systemctl. /etc/systemd/system/logstash.service: \[Unit\] Description=logstash \[Serv…

---

## [Get cheapest trip departure based on inner hits](https://discuss.elastic.co/t/get-cheapest-trip-departure-based-on-inner-hits/220125)

<div class="topic-metadata">

**Author:** [@AndyFurniss](https://discuss.elastic.co/u/AndyFurniss)\
**Replies:** 4\
**Last updated:** [February 20, 2020, 3:58pm UTC](https://discuss.elastic.co/t/get-cheapest-trip-departure-based-on-inner-hits/220125 "2020-02-20T15:58:19Z")

</div>

I have a index containing trips. Each trip will have multiple departures, each departure will have it's own departure date and a collection of prices (each with a different currency). I want to be able to query and find…

---

## [Logstash stuck on "Will Retry with exponential backoff"](https://discuss.elastic.co/t/logstash-stuck-on-will-retry-with-exponential-backoff/220221)

<div class="topic-metadata">

**Author:** [@TDV](https://discuss.elastic.co/u/TDV)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 3:52pm UTC](https://discuss.elastic.co/t/logstash-stuck-on-will-retry-with-exponential-backoff/220221 "2020-02-20T15:52:47Z")

</div>

Hi, We use ELK 7.5.1 version It seems that logstash stucks on trying to make bulk requests to elastic when document size exceeded http.max\_content\_length: \[ERROR\]\[logstash.outputs.elasticsearch\]\[index\_name\] Encountere…

---

## [Add new field to existing documents in an index from logstash is recreating the index](https://discuss.elastic.co/t/add-new-field-to-existing-documents-in-an-index-from-logstash-is-recreating-the-index/217096)

<div class="topic-metadata">

**Author:** [@Sivaraman\_Subbiah](https://discuss.elastic.co/u/Sivaraman_Subbiah)\
**Replies:** 3\
**Last updated:** [February 20, 2020, 3:33pm UTC](https://discuss.elastic.co/t/add-new-field-to-existing-documents-in-an-index-from-logstash-is-recreating-the-index/217096 "2020-02-20T15:33:24Z")

</div>

Hi, My setup includes using logstash 7.2.0 to fetch records from database and push to Elasticsearch. I have a requirement to add new field to existing documents in an index plus index new documents with the new field v…

---

## [Logstash to logstash communication: Connection reset by peer error](https://discuss.elastic.co/t/logstash-to-logstash-communication-connection-reset-by-peer-error/219858)

<div class="topic-metadata">

**Author:** [@Riddhesh](https://discuss.elastic.co/u/Riddhesh)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 3:33pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-communication-connection-reset-by-peer-error/219858 "2020-02-20T15:33:08Z")

</div>

I'm trying to setup logstash to logstash setup(veresion 6.1.3 on both), using lumberjack output and beats input as per guide. My sender config output looks like (the sender input produces around 600 events per sec): ou…

---

## [Elasticsearch Cluster on Docker Stack Fails](https://discuss.elastic.co/t/elasticsearch-cluster-on-docker-stack-fails/220043)

<div class="topic-metadata">

**Author:** [@areller](https://discuss.elastic.co/u/areller)\
**Replies:** 3\
**Last updated:** [February 20, 2020, 3:21pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-on-docker-stack-fails/220043 "2020-02-20T15:21:01Z")

</div>

I try to create a 3-node Elasticsearch cluster on docker stack. I started with the docker-stack.yml file from this repository https://github.com/deviantony/docker-elk#how-to-scale-out-the-elasticsearch-cluster And exte…

---

## [How to structure this index/query problem](https://discuss.elastic.co/t/how-to-structure-this-index-query-problem/220189)

<div class="topic-metadata">

**Author:** [@martinjuhasz](https://discuss.elastic.co/u/martinjuhasz)\
**Replies:** 5\
**Last updated:** [February 20, 2020, 3:27pm UTC](https://discuss.elastic.co/t/how-to-structure-this-index-query-problem/220189 "2020-02-20T15:27:51Z")

</div>

Hey, i'm pretty new to using ES and wonder how one would solve my current problem, regarding how to index this best and how to query it. As an example lets say i have two entities in my application. Users and Challenge…

---

## [Metricbeat couchdb module not working](https://discuss.elastic.co/t/metricbeat-couchdb-module-not-working/219094)

<div class="topic-metadata">

**Author:** [@Allan\_Johns](https://discuss.elastic.co/u/Allan_Johns)\
**Replies:** 6\
**Last updated:** [February 20, 2020, 3:23pm UTC](https://discuss.elastic.co/t/metricbeat-couchdb-module-not-working/219094 "2020-02-20T15:23:29Z")

</div>

I'm using metricbeat-7.5.2 to monitor couchdb-2.3.1. I get the following error in the docs in elastic written by metricbeat: error in http fetch: HTTP error 404 in : 404 Object Not Found I cannot get any further info,…

---

## [Filter Ratio in TSVB to show Percentage](https://discuss.elastic.co/t/filter-ratio-in-tsvb-to-show-percentage/219744)

<div class="topic-metadata">

**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\
**Replies:** 4\
**Last updated:** [February 20, 2020, 3:08pm UTC](https://discuss.elastic.co/t/filter-ratio-in-tsvb-to-show-percentage/219744 "2020-02-20T15:08:52Z")

</div>

I need to calculate the percentage for a null values present in a column w.r.t to unique ids present in another column and not based on record counts. I tried the percentage in Table and Pie chart but they are quiet mi…

---

## [ELK cloud- kafka ec2 connection to visualize kafka-topic data on kibana](https://discuss.elastic.co/t/elk-cloud-kafka-ec2-connection-to-visualize-kafka-topic-data-on-kibana/219116)

<div class="topic-metadata">

**Author:** [@rahulanand](https://discuss.elastic.co/u/rahulanand)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 3:04pm UTC](https://discuss.elastic.co/t/elk-cloud-kafka-ec2-connection-to-visualize-kafka-topic-data-on-kibana/219116 "2020-02-20T15:04:55Z")

</div>

Hi, I want to link kafka to elasticsearch, kibana to visualize data from kafka-topic. I was able to do it on local via following this link: https://logz.io/blog/deploying-kafka-with-elk/ But i am not able to replicate …

---

## [How to setup AWS generated SSL certificate usage for Elasticsearch and Kibana in Elastic Cloud Enterprise clusters](https://discuss.elastic.co/t/how-to-setup-aws-generated-ssl-certificate-usage-for-elasticsearch-and-kibana-in-elastic-cloud-enterprise-clusters/219940)

<div class="topic-metadata">

**Author:** [@RamanV](https://discuss.elastic.co/u/RamanV)\
**Replies:** 3\
**Last updated:** [February 20, 2020, 3:03pm UTC](https://discuss.elastic.co/t/how-to-setup-aws-generated-ssl-certificate-usage-for-elasticsearch-and-kibana-in-elastic-cloud-enterprise-clusters/219940 "2020-02-20T15:03:08Z")

</div>

Hello, I have an SSL certificate from AWS Certificate Manager which is attached for corresponding ports on LoadBalancer, that forwards traffic to Elasticsearch and KIbana in ECE cluster. But SSL connection is not workin…

---

## [Logstash: Beats input and filters](https://discuss.elastic.co/t/logstash-beats-input-and-filters/220212)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 3:01pm UTC](https://discuss.elastic.co/t/logstash-beats-input-and-filters/220212 "2020-02-20T15:01:36Z")

</div>

I have a problem. I have a pipeline in Logstash. I use beats at the entrance. Beats. Logs are sent by Winlogbeat. Everything works okay. But there is a problem. I want to copy the value of a new field to another fie…

---

## [Cross tabulation Visualization between two categorical columns where both column are in different indexes](https://discuss.elastic.co/t/cross-tabulation-visualization-between-two-categorical-columns-where-both-column-are-in-different-indexes/219955)

<div class="topic-metadata">

**Author:** [@sarvendras](https://discuss.elastic.co/u/sarvendras)\
**Replies:** 3\
**Last updated:** [February 20, 2020, 2:41pm UTC](https://discuss.elastic.co/t/cross-tabulation-visualization-between-two-categorical-columns-where-both-column-are-in-different-indexes/219955 "2020-02-20T14:41:44Z")

</div>

Hi All, Can we create cross tabultion visulaization(like stacked Vertical bar or stacked Pie Chart) between 2 categorical fields where both fields are in two different indexes having some common primary id. one index n…

---

## [Why is this (specific) mutate not working?](https://discuss.elastic.co/t/why-is-this-specific-mutate-not-working/219029)

<div class="topic-metadata">

**Author:** [@Dennis\_Bohs](https://discuss.elastic.co/u/Dennis_Bohs)\
**Replies:** 10\
**Last updated:** [February 20, 2020, 2:39pm UTC](https://discuss.elastic.co/t/why-is-this-specific-mutate-not-working/219029 "2020-02-20T14:39:35Z")

</div>

Hi Folks, it has been some time since i asked my last question here and i learned a lot in the meantime, but i still feel like a bloody beginner from time to time. Here comes my Situation: I am filtering several logs …

---

## [Configuring Elasticsearch output in filebeat](https://discuss.elastic.co/t/configuring-elasticsearch-output-in-filebeat/220143)

<div class="topic-metadata">

**Author:** [@Ilayda\_Akinalan](https://discuss.elastic.co/u/Ilayda_Akinalan)\
**Replies:** 3\
**Last updated:** [February 20, 2020, 2:29pm UTC](https://discuss.elastic.co/t/configuring-elasticsearch-output-in-filebeat/220143 "2020-02-20T14:29:12Z")

</div>

Currently we are using Elasticsearch 6.7.1 and have: 3 master nodes and 4 data nodes. In filebeat configuration, should the output to elasticsearch point to master or the data nodes? We also have a load balancer for t…

---

## [Shards Failed on geoip](https://discuss.elastic.co/t/shards-failed-on-geoip/220050)

<div class="topic-metadata">

**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\
**Replies:** 6\
**Last updated:** [February 20, 2020, 2:28pm UTC](https://discuss.elastic.co/t/shards-failed-on-geoip/220050 "2020-02-20T14:28:32Z")

</div>

Have had ELK up and running now for a few days. All was working just fine. Today however and am getting the attached error and data isn't showing up in 2 panels. When I try to click on Show Details it's a dead link. H…

---

## [How to use \_source to create a scripted filter](https://discuss.elastic.co/t/how-to-use-source-to-create-a-scripted-filter/219646)

<div class="topic-metadata">

**Author:** [@wiouser](https://discuss.elastic.co/u/wiouser)\
**Replies:** 11\
**Last updated:** [February 20, 2020, 1:56pm UTC](https://discuss.elastic.co/t/how-to-use-source-to-create-a-scripted-filter/219646 "2020-02-20T13:56:28Z")

</div>

Hi I am trying to write a query to return documents which has the length of the log field more than 900. It is a text field. Running the below search I get variable \_source is not defined GET logdata/\_search { "query…

---

## [Virtualization - Change color similarity](https://discuss.elastic.co/t/virtualization-change-color-similarity/220185)

<div class="topic-metadata">

**Author:** [@JesperH](https://discuss.elastic.co/u/JesperH)\
**Replies:** 2\
**Last updated:** [February 20, 2020, 1:46pm UTC](https://discuss.elastic.co/t/virtualization-change-color-similarity/220185 "2020-02-20T13:46:22Z")

</div>

Hi, We're using Dashboards to visualize traffic hitting our servers on our different customers. We have limited this to 10 but we have issues with color similarity. Can this be changed somehow where they differ more …

---

## [Extra quote/parenthesis impedes typing](https://discuss.elastic.co/t/extra-quote-parenthesis-impedes-typing/218212)

<div class="topic-metadata">

**Author:** [@nashley](https://discuss.elastic.co/u/nashley)\
**Replies:** 2\
**Last updated:** [February 20, 2020, 1:38pm UTC](https://discuss.elastic.co/t/extra-quote-parenthesis-impedes-typing/218212 "2020-02-20T13:38:48Z")

</div>

Apologies if this is the wrong place to post this. When typing queries into Kibana, it'll "helpfully" add a " or ) after a " or ( is typed. Is there any chance this could be configurable? I imagine that some people woul…

---

## [Need query to filter two field and get the unique count bases on one field](https://discuss.elastic.co/t/need-query-to-filter-two-field-and-get-the-unique-count-bases-on-one-field/220129)

<div class="topic-metadata">

**Author:** [@Prateek\_Bajaj](https://discuss.elastic.co/u/Prateek_Bajaj)\
**Replies:** 4\
**Last updated:** [February 20, 2020, 1:03pm UTC](https://discuss.elastic.co/t/need-query-to-filter-two-field-and-get-the-unique-count-bases-on-one-field/220129 "2020-02-20T13:03:52Z")

</div>

Hi , I want to write a \_search or \_count query (kql) that will give the unique count based on one field after filtering two other fields. It will be really helpful if you guys can help me with it.

---

## [Trouble sending GELF event - Graylog](https://discuss.elastic.co/t/trouble-sending-gelf-event-graylog/219048)

<div class="topic-metadata">

**Author:** [@djbrunoatimix](https://discuss.elastic.co/u/djbrunoatimix)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 1:00pm UTC](https://discuss.elastic.co/t/trouble-sending-gelf-event-graylog/219048 "2020-02-20T13:00:16Z")

</div>

Hello guys, Could someone help me? I am having some issue when trying to push data to Graylog. At the moment I am testing my environment, and everything is working properly. Filebeat -\> Logstash -\> Graylog -\> Elastics…

---

## [Remove null values from aggregated table visualization](https://discuss.elastic.co/t/remove-null-values-from-aggregated-table-visualization/220190)

<div class="topic-metadata">

**Author:** [@opellulo](https://discuss.elastic.co/u/opellulo)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 12:58pm UTC](https://discuss.elastic.co/t/remove-null-values-from-aggregated-table-visualization/220190 "2020-02-20T12:58:25Z")

</div>

Hi all, I have a simple visualization issue in Kibana that i suspect it's harder to fix than i thought, here is my situation: I have an index where the docs have different fields, however one of this field is common fo…

---

## [Simulate tail -f](https://discuss.elastic.co/t/simulate-tail-f/219735)

<div class="topic-metadata">

**Author:** [@robertofabrizi](https://discuss.elastic.co/u/robertofabrizi)\
**Replies:** 6\
**Last updated:** [February 20, 2020, 12:19pm UTC](https://discuss.elastic.co/t/simulate-tail-f/219735 "2020-02-20T12:19:15Z")

</div>

Dear friends, I'm new to ElasticSearch, only been enjoying it as the backend of the Kibana instance running in production. I have a new requirement, I have to parse application logs in real time, until now via buffered…

---

## [Error loading data](https://discuss.elastic.co/t/error-loading-data/220160)

<div class="topic-metadata">

**Author:** [@tennaen](https://discuss.elastic.co/u/tennaen)\
**Replies:** 2\
**Last updated:** [February 20, 2020, 11:54am UTC](https://discuss.elastic.co/t/error-loading-data/220160 "2020-02-20T11:54:10Z")

</div>

Starting from today, i receive this error: SyntaxError: Unexpected token u in JSON at position 0 at JSON.parse (\<anonymous\>) at http://10.2.202.116:5601/bundles/commons.bundle.js:3:3378900 at http://10.2.202…

---

## [S3 Snapshot on S3 compatible servers](https://discuss.elastic.co/t/s3-snapshot-on-s3-compatible-servers/217750)

<div class="topic-metadata">

**Author:** [@SimonJ](https://discuss.elastic.co/u/SimonJ)\
**Replies:** 11\
**Last updated:** [February 20, 2020, 10:34am UTC](https://discuss.elastic.co/t/s3-snapshot-on-s3-compatible-servers/217750 "2020-02-20T10:34:18Z")

</div>

Hi, I've been trying to setup the snapshot plugin in order to be able to backup my cluster, but I'm running into some issues with setting up the repository in ElasticSearch 7.5. I'm using OVH OpenStack Swift with S3 co…

---

## [\[HELP\] Xml xpath dynamic destination-field](https://discuss.elastic.co/t/help-xml-xpath-dynamic-destination-field/220157)

<div class="topic-metadata">

**Author:** [@FajarFebriano](https://discuss.elastic.co/u/FajarFebriano)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 10:26am UTC](https://discuss.elastic.co/t/help-xml-xpath-dynamic-destination-field/220157 "2020-02-20T10:26:22Z")

</div>

Based on documentation Logstash Xpath My XML Format : \<isomsg direction="outgoing"\> \<!-- org.jpos.iso.packager.GenericPackager\[cfg/packager/iso87binaryedc.xml\] --\> \<field id="0" value="0210"/\> \<field id="3" value="1…

---

## [Creating a TSVB chart with unique count of ID's across all fields in Kibana](https://discuss.elastic.co/t/creating-a-tsvb-chart-with-unique-count-of-ids-across-all-fields-in-kibana/220155)

<div class="topic-metadata">

**Author:** [@dmomi](https://discuss.elastic.co/u/dmomi)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 10:22am UTC](https://discuss.elastic.co/t/creating-a-tsvb-chart-with-unique-count-of-ids-across-all-fields-in-kibana/220155 "2020-02-20T10:22:28Z")

</div>

Hi I am new to Kibana and TSVB. I am trying to create a filter ratio using unique number of records for transaction\_status = 2 / \*. I am able to find out till unique no of records using cardinality of ID column not the …

---

## [Change indices on discover](https://discuss.elastic.co/t/change-indices-on-discover/220154)

<div class="topic-metadata">

**Author:** [@andras.vecsi](https://discuss.elastic.co/u/andras.vecsi)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 10:26am UTC](https://discuss.elastic.co/t/change-indices-on-discover/220154 "2020-02-20T10:26:08Z")

</div>

Hello, I have two spaces: Users and IT In the IT space I am able to change the indices on the discover page: In the Users space I am not able to change the indices Under Management/Spaces I can see this In the…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1615)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1617)
