# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1621 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1622 --- ## [Visualization line : divide Sum](https://discuss.elastic.co/t/visualization-line-divide-sum/219641)
**Author:** [@Bruno1](https://discuss.elastic.co/u/Bruno1)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 3:04pm UTC](https://discuss.elastic.co/t/visualization-line-divide-sum/219641 "2020-02-18T15:04:07Z")
Hello I want divide a Sum on "Visualization Line" graph Sum is Bytes and I want Sum in Megabytes If someone have a solution ? Thanks --- ## [Logstash - http-Poller plugin fails to disable SSL validation](https://discuss.elastic.co/t/logstash-http-poller-plugin-fails-to-disable-ssl-validation/219785)
**Author:** [@prasanna2104](https://discuss.elastic.co/u/prasanna2104)\ **Replies:** 2\ **Last updated:** [February 18, 2020, 2:48pm UTC](https://discuss.elastic.co/t/logstash-http-poller-plugin-fails-to-disable-ssl-validation/219785 "2020-02-18T14:48:17Z")
Hi Team, I have installed logstash7.3.0 in the Linux server. I have created a configuration which will connect to the JIRA rest API using http\_poller plugin. Since our JIRA is self signed, and for testing purpose we are… --- ## [Kibana 7.5.2 Startup Exception: "Error: Optimizations failure"](https://discuss.elastic.co/t/kibana-7-5-2-startup-exception-error-optimizations-failure/218650)
**Author:** [@jshapiro001](https://discuss.elastic.co/u/jshapiro001)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 2:43pm UTC](https://discuss.elastic.co/t/kibana-7-5-2-startup-exception-error-optimizations-failure/218650 "2020-02-18T14:43:46Z")
I'm deploying Elasticsearch and Kibana on to OpenShift via a template yaml file. ES is deployed without issue, but I'm having trouble getting Kibana to start. Here are the details: Template YML Configuration- apiVersio… --- ## [E-commerce logging strategy](https://discuss.elastic.co/t/e-commerce-logging-strategy/219003)
**Author:** [@Chaim](https://discuss.elastic.co/u/Chaim)\ **Replies:** 6\ **Last updated:** [February 18, 2020, 11:49am UTC](https://discuss.elastic.co/t/e-commerce-logging-strategy/219003 "2020-02-18T11:49:23Z")
Our Current Setup We have an elastic cloud deployment, collecting browsing logs for an e-commerce website, on a regular day our log reaches ~100GB Given the huge amount of data, we only keep 3 days of logs then ar… --- ## [Webhook action, json payload size limit](https://discuss.elastic.co/t/webhook-action-json-payload-size-limit/219281)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 2:23pm UTC](https://discuss.elastic.co/t/webhook-action-json-payload-size-limit/219281 "2020-02-18T14:23:05Z")
Are there any size limits to the size of the json payload sent in a webhook (action of a watcher)? I'm debugging why one of my watchers is failing, and the json validates just fine...it is just as my other watchers, doi… --- ## [Logstash Two Different Date Format](https://discuss.elastic.co/t/logstash-two-different-date-format/219718)
**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 2:10pm UTC](https://discuss.elastic.co/t/logstash-two-different-date-format/219718 "2020-02-18T14:10:00Z")
I am parsing data from mysql to kibana. I have datefield which has datatype varchar now i have two different date format that is 1/4/2020 2:17:23 PM and 1/1/2020 12:00:00 AM can anyone please tell me what is the correc… --- ## [Search for parts of a string field](https://discuss.elastic.co/t/search-for-parts-of-a-string-field/219670)
**Author:** [@fabriciofs](https://discuss.elastic.co/u/fabriciofs)\ **Replies:** 6\ **Last updated:** [February 18, 2020, 1:42pm UTC](https://discuss.elastic.co/t/search-for-parts-of-a-string-field/219670 "2020-02-18T13:42:16Z")
Hello guys, I'm new to the Elasticsearch world and I'm sorry if my doubt is very basic. I need to create an index on there will be a type that will store a product catalog. In this there will be several fields but what … --- ## [Custom preference key in searching](https://discuss.elastic.co/t/custom-preference-key-in-searching/219794)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 1\ **Last updated:** [February 18, 2020, 1:37pm UTC](https://discuss.elastic.co/t/custom-preference-key-in-searching/219794 "2020-02-18T13:37:09Z")
When using a custom preference key in searches, ES ends up querying all the N shards of the index right? Surely out of N, few will be replicas, few will be primary How does ES achieve this just using the string we pass?… --- ## [Elasticsearch service will not start on Ubuntu server 18.04](https://discuss.elastic.co/t/elasticsearch-service-will-not-start-on-ubuntu-server-18-04/219541)
**Author:** [@miceffre](https://discuss.elastic.co/u/miceffre)\ **Replies:** 4\ **Last updated:** [February 17, 2020, 9:02pm UTC](https://discuss.elastic.co/t/elasticsearch-service-will-not-start-on-ubuntu-server-18-04/219541 "2020-02-17T21:02:16Z")
I get the following error: "Job for elasticsearch.service failed because the control process exited with error code." When I try to start elasticsearch on my Ubuntu 18.04 server. I have tried uninstalling and re-insta… --- ## [Shield License Update Problem](https://discuss.elastic.co/t/shield-license-update-problem/217314)
**Author:** [@anilkocaturk](https://discuss.elastic.co/u/anilkocaturk)\ **Replies:** 4\ **Last updated:** [February 18, 2020, 12:42pm UTC](https://discuss.elastic.co/t/shield-license-update-problem/217314 "2020-02-18T12:42:46Z")
Hi Everyone, Several years ago, "shield" installed to one of our new customer's elasticsearch(v5.5) servers by an old employee and it's licence expired long time ago. On here they have 10 servers as cluster structure. … --- ## [Specify different path.data for different enviroments](https://discuss.elastic.co/t/specify-different-path-data-for-different-enviroments/219779)
**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\ **Replies:** 1\ **Last updated:** [February 18, 2020, 12:44pm UTC](https://discuss.elastic.co/t/specify-different-path-data-for-different-enviroments/219779 "2020-02-18T12:44:47Z")
Hello All , We are using same Elastic search instance for storing DEV,TEST and PROD data . My path.data and path.logs . path.data: G:/DEV/Elastic\_Search\_Data path.logs: G:/DEV/Elastic\_Search\_logs But i am trying to s… --- ## [Connect a role to a space](https://discuss.elastic.co/t/connect-a-role-to-a-space/218029)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 6\ **Last updated:** [February 18, 2020, 12:44pm UTC](https://discuss.elastic.co/t/connect-a-role-to-a-space/218029 "2020-02-18T12:44:26Z")
hello I have a case where we have 1 dashboard for all clients (created in the default space) with index pattern client\_\*. (includes: client\_1 , client\_2\_ and so on..) example names... I created a space for each clien… --- ## [Why minimum\_should\_match does not return multiple match?](https://discuss.elastic.co/t/why-minimum-should-match-does-not-return-multiple-match/219680)
**Author:** [@Fosiul\_Alam](https://discuss.elastic.co/u/Fosiul_Alam)\ **Replies:** 0\ **Last updated:** [February 17, 2020, 8:50pm UTC](https://discuss.elastic.co/t/why-minimum-should-match-does-not-return-multiple-match/219680 "2020-02-17T20:50:57Z")
Hi All, i am refering to this question How to use "OR" in Dev Tool Query While trying to extend this to 3 Match with a minimum should match number to 2 it does not return any when i set it like this ""minimum\_should\_mat… --- ## [Grouping the Index values by using common field](https://discuss.elastic.co/t/grouping-the-index-values-by-using-common-field/219780)
**Author:** [@SanTiaGo\_KarThiCk](https://discuss.elastic.co/u/SanTiaGo_KarThiCk)\ **Replies:** 0\ **Last updated:** [February 18, 2020, 12:24pm UTC](https://discuss.elastic.co/t/grouping-the-index-values-by-using-common-field/219780 "2020-02-18T12:24:01Z")
Hy guys, My indexes are =\> index1=\> eid,name,age index2=\>eid,company,address Now i am combine these two indexes by creating index as index\* but, … --- ## [Kibana looks like it cancels requests if they take more than 30 seconds?](https://discuss.elastic.co/t/kibana-looks-like-it-cancels-requests-if-they-take-more-than-30-seconds/219689)
**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\ **Replies:** 1\ **Last updated:** [February 18, 2020, 12:03pm UTC](https://discuss.elastic.co/t/kibana-looks-like-it-cancels-requests-if-they-take-more-than-30-seconds/219689 "2020-02-18T12:03:06Z")
I was running the newest version of Kibana, 7.6. I was noticing that during ingestion process, some of my visualizations are taking over 30 seconds. When they take that long it will expose the error: \[esaggs\] \> Unexpe… --- ## [Logstash does not parse agent from NGINX access logs as it already has filebeat agent information in agent](https://discuss.elastic.co/t/logstash-does-not-parse-agent-from-nginx-access-logs-as-it-already-has-filebeat-agent-information-in-agent/219776)
**Author:** [@chaitanya\_chandake](https://discuss.elastic.co/u/chaitanya_chandake)\ **Replies:** 0\ **Last updated:** [February 18, 2020, 11:44am UTC](https://discuss.elastic.co/t/logstash-does-not-parse-agent-from-nginx-access-logs-as-it-already-has-filebeat-agent-information-in-agent/219776 "2020-02-18T11:44:12Z")
When tried to use default COMBINEDAPACHELOG for NGINX access logs, all fields are getting parsed correctly except agent field which contains useragent information. (https://www.elastic.co/guide/en/logstash/current/config… --- ## [Advice for a Active Session graph](https://discuss.elastic.co/t/advice-for-a-active-session-graph/219774)
**Author:** [@Stefano\_Bossi](https://discuss.elastic.co/u/Stefano_Bossi)\ **Replies:** 0\ **Last updated:** [February 18, 2020, 11:32am UTC](https://discuss.elastic.co/t/advice-for-a-active-session-graph/219774 "2020-02-18T11:32:52Z")
Dear ES forum, I am facing a problem with elastic search and I would like to ask an advice from some expert member. In my ES I have an index which is basically a streaming server log (e.g. it's actually radio streaming… --- ## [Highlighting copied fields in percolate queries](https://discuss.elastic.co/t/highlighting-copied-fields-in-percolate-queries/219768)
**Author:** [@smatamoros](https://discuss.elastic.co/u/smatamoros)\ **Replies:** 0\ **Last updated:** [February 18, 2020, 11:15am UTC](https://discuss.elastic.co/t/highlighting-copied-fields-in-percolate-queries/219768 "2020-02-18T11:15:54Z")
Hi, I'm working with a use case where the results of percolate queries must been highlighted. With normal fields it works fine but I have problems with fields which content has been copied from other field. Here is an … --- ## [Comparison between two data in kibana](https://discuss.elastic.co/t/comparison-between-two-data-in-kibana/218538)
**Author:** [@ROHINI13](https://discuss.elastic.co/u/ROHINI13)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 11:06am UTC](https://discuss.elastic.co/t/comparison-between-two-data-in-kibana/218538 "2020-02-18T11:06:57Z")
Hi guys, I have one doubt in kibana , I want to compare two different data , I want to compare and overlap between the two different data in kibana using timelion or kibna lens. Can anyone help me how to compare betwee… --- ## [Issue with grok pattern which doesn't work](https://discuss.elastic.co/t/issue-with-grok-pattern-which-doesnt-work/219406)
**Author:** [@Cuju](https://discuss.elastic.co/u/Cuju)\ **Replies:** 1\ **Last updated:** [February 18, 2020, 10:59am UTC](https://discuss.elastic.co/t/issue-with-grok-pattern-which-doesnt-work/219406 "2020-02-18T10:59:46Z")
Hello, I need to create a grok into Elasticsearch/Kibana/Filebeat to parse my message field. I find myself with two issues : Here is my pipeline : PUT /\_ingest/pipeline/filebeat-7.6.2-system-syslog-pipeline { "desc… --- ## [ES watcher Transform: formatting the script source](https://discuss.elastic.co/t/es-watcher-transform-formatting-the-script-source/219660)
**Author:** [@abdelhedi\_yassine](https://discuss.elastic.co/u/abdelhedi_yassine)\ **Replies:** 4\ **Last updated:** [February 18, 2020, 10:50am UTC](https://discuss.elastic.co/t/es-watcher-transform-formatting-the-script-source/219660 "2020-02-18T10:50:22Z")
Hi team, I'm really getting a hard time working with transform scripts cause it's only allowing me to write on 1 line: example: "transform": { "script": { "source": " String k; int i; int s; int a; float sar; for(i=0… --- ## [ES 7.0 New Date Format](https://discuss.elastic.co/t/es-7-0-new-date-format/219413)
**Author:** [@ben-charles](https://discuss.elastic.co/u/ben-charles)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 10:40am UTC](https://discuss.elastic.co/t/es-7-0-new-date-format/219413 "2020-02-18T10:40:28Z")
We are currently upgrading from ES 6.8.2 to 7.0.0. We have date fields in our documents that are stored with the format yyyy-MM-dd'T'HH:mm:ss.SSSZ However, since in ES 7.0 uses java.util.time instead of Joda based time… --- ## [Ruby filter to extract JSON value](https://discuss.elastic.co/t/ruby-filter-to-extract-json-value/219745)
**Author:** [@karlm](https://discuss.elastic.co/u/karlm)\ **Replies:** 1\ **Last updated:** [February 18, 2020, 10:36am UTC](https://discuss.elastic.co/t/ruby-filter-to-extract-json-value/219745 "2020-02-18T10:36:14Z")
I have an array and need to extract the latest date value, the array below looks like this { "conversations": \[ { "userMessages": \[ { "sbdh": { … --- ## [Is process cluster event timeout value configurable and how if yes?](https://discuss.elastic.co/t/is-process-cluster-event-timeout-value-configurable-and-how-if-yes/219710)
**Author:** [@f02061232](https://discuss.elastic.co/u/f02061232)\ **Replies:** 1\ **Last updated:** [February 18, 2020, 10:12am UTC](https://discuss.elastic.co/t/is-process-cluster-event-timeout-value-configurable-and-how-if-yes/219710 "2020-02-18T10:12:05Z")
I got ProcessClusterEventTimeoutException when create/delete index, default value is 30s. Is this configurable and how to config it? org.elasticsearch.cluster.metadata.ProcessClusterEventTimeoutException: failed to proc… --- ## [Elasticsearch docs purging](https://discuss.elastic.co/t/elasticsearch-docs-purging/219656)
**Author:** [@Ron\_ITS](https://discuss.elastic.co/u/Ron_ITS)\ **Replies:** 1\ **Last updated:** [February 18, 2020, 10:11am UTC](https://discuss.elastic.co/t/elasticsearch-docs-purging/219656 "2020-02-18T10:11:48Z")
Hi, Is there a ES function that can replace the epoch time? Currently we purge the doc according to ttl for past 35 days. is there a better way to handle it? {"size":0, "query": { "bool": { "must": \[ { "exists" : … --- ## [Python interface with elasticsearch base & PUT request](https://discuss.elastic.co/t/python-interface-with-elasticsearch-base-put-request/219067)
**Author:** [@cyrduf](https://discuss.elastic.co/u/cyrduf)\ **Replies:** 2\ **Last updated:** [February 18, 2020, 10:11am UTC](https://discuss.elastic.co/t/python-interface-with-elasticsearch-base-put-request/219067 "2020-02-18T10:11:11Z")
Once a base is created when i send a put request with : r = requests.put("http://localhost:9200//\_doc/", data=, headers=headers) I have sometimes exception in elasticsearch : \[2020-02-12T19:09:42,487\]\[INFO \]\[o.e.c.m.M… --- ## [Must\_not but include some data](https://discuss.elastic.co/t/must-not-but-include-some-data/219753)
**Author:** [@grant\_donovan](https://discuss.elastic.co/u/grant_donovan)\ **Replies:** 1\ **Last updated:** [February 18, 2020, 10:08am UTC](https://discuss.elastic.co/t/must-not-but-include-some-data/219753 "2020-02-18T10:08:57Z")
I am trying to do the following, exclude data that matches restricted\_general\_calculated = "all" unless another field(s) = something This is the must\_not { "query": { "bool": { "must\_not": \[ { "terms": { … --- ## [Customize a Dictionary\_Decompounder](https://discuss.elastic.co/t/customize-a-dictionary-decompounder/219668)
**Author:** [@highchem](https://discuss.elastic.co/u/highchem)\ **Replies:** 1\ **Last updated:** [February 18, 2020, 10:07am UTC](https://discuss.elastic.co/t/customize-a-dictionary-decompounder/219668 "2020-02-18T10:07:43Z")
Hello Elasticsearch experts, I have a question about writing a custom analyzer using a dictionary\_decompounder. Here is a simplified example of the current mappings and settings of my index. PUT my\_index { "mapping… --- ## [Integration with Cisco Umbrella](https://discuss.elastic.co/t/integration-with-cisco-umbrella/219741)
**Author:** [@joelle.nader](https://discuss.elastic.co/u/joelle.nader)\ **Replies:** 0\ **Last updated:** [February 18, 2020, 9:22am UTC](https://discuss.elastic.co/t/integration-with-cisco-umbrella/219741 "2020-02-18T09:22:43Z")
Hello, Is it possible to get logs from Cisco Umbrella and integrate them with logstash ? Cisco Umbrella writes the logs in AWS --- ## [機械学習の遅延](https://discuss.elastic.co/t/topic/219737)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 0\ **Last updated:** [February 18, 2020, 9:06am UTC](https://discuss.elastic.co/t/topic/219737 "2020-02-18T09:06:06Z")
機械学習において、シングルメトリックでジョブを設定していますが、以下のような遅延が発生している旨のエラーが発生します。 Datafeed has missed 325 documents due to ingest latency, latest bucket with missing data is \[2020-02-13T09:30:00.000Z\]. Consider increasing query\_delay マニュアルを… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1620) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1622)