# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1627 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1628 --- ## [Location of json data file and yml](https://discuss.elastic.co/t/location-of-json-data-file-and-yml/219347)
**Author:** [@Vagelis](https://discuss.elastic.co/u/Vagelis)\ **Replies:** 0\ **Last updated:** [February 14, 2020, 10:18am UTC](https://discuss.elastic.co/t/location-of-json-data-file-and-yml/219347 "2020-02-14T10:18:15Z")
I would like to specify in the yml file where the json data file is located. It is the file that I would like the elasticsearch to read. I have set in the yml path.data: /etc/elasticsearch/data and elasticsearch seem… --- ## [Size limit Scripted field? Request Entity Too Large](https://discuss.elastic.co/t/size-limit-scripted-field-request-entity-too-large/219317)
**Author:** [@PavolHocko](https://discuss.elastic.co/u/PavolHocko)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 10:47am UTC](https://discuss.elastic.co/t/size-limit-scripted-field-request-entity-too-large/219317 "2020-02-14T10:47:40Z")
Hi, I am using Kibana 7.6.0. I am getting a 413 error (Request Entity Too Large) when I am trying to save my scripted filed. Is there any size limit of Scripred field? I am trying to save 340 chars to this script. If I… --- ## [Kibana controls visualization](https://discuss.elastic.co/t/kibana-controls-visualization/219227)
**Author:** [@rwr](https://discuss.elastic.co/u/rwr)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 10:43am UTC](https://discuss.elastic.co/t/kibana-controls-visualization/219227 "2020-02-14T10:43:59Z")
Hi All I'm sorry, I have been confused again :smile: is it true if I config in kibana.yml, this warning will be lost ? this picture taken from visualization controls if true, what kind of config ? thanks before --- ## [How to push nested documents with filebeat to a dynamically create index](https://discuss.elastic.co/t/how-to-push-nested-documents-with-filebeat-to-a-dynamically-create-index/219192)
**Author:** [@Baylib](https://discuss.elastic.co/u/Baylib)\ **Replies:** 1\ **Last updated:** [February 14, 2020, 10:31am UTC](https://discuss.elastic.co/t/how-to-push-nested-documents-with-filebeat-to-a-dynamically-create-index/219192 "2020-02-14T10:31:57Z")
Hi, I create nested json documents. I manage to push them with filebeat to get the mapping done dynamicaly. There was some arrays of objects. Then reindexed them in new index with the mapping changed for those arrays… --- ## [Deleting Logs on ElastaCloud](https://discuss.elastic.co/t/deleting-logs-on-elastacloud/219349)
**Author:** [@Bill.S.Preston](https://discuss.elastic.co/u/Bill.S.Preston)\ **Replies:** 0\ **Last updated:** [February 14, 2020, 10:28am UTC](https://discuss.elastic.co/t/deleting-logs-on-elastacloud/219349 "2020-02-14T10:28:59Z")
I have a lot of dummy logs from an ElastaCloud Environment that were generated during a testing phase that I no longer want. I would like to start from a clean slate. Is there any way for me to delete these? --- ## [I am totally new to elasticsearch and using version 7. I have to save images into elasticsearch](https://discuss.elastic.co/t/i-am-totally-new-to-elasticsearch-and-using-version-7-i-have-to-save-images-into-elasticsearch/219344)
**Author:** [@komal-jaiswal](https://discuss.elastic.co/u/komal-jaiswal)\ **Replies:** 1\ **Last updated:** [February 14, 2020, 10:14am UTC](https://discuss.elastic.co/t/i-am-totally-new-to-elasticsearch-and-using-version-7-i-have-to-save-images-into-elasticsearch/219344 "2020-02-14T10:14:45Z")
I am totally new to elasticsearch and using version 7. I have to save images into elasticsearch. I dont have any idea how to store images into ES.Please help me out --- ## [Fatal Error Elasticsearch](https://discuss.elastic.co/t/fatal-error-elasticsearch/219302)
**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\ **Replies:** 3\ **Last updated:** [February 14, 2020, 9:37am UTC](https://discuss.elastic.co/t/fatal-error-elasticsearch/219302 "2020-02-14T09:37:32Z")
HI Team, We are extending the topic https://discuss.elastic.co/t/fatal-error-in-thread-elasticsearch/214360. We have faced the again same issue when executing queries even we reduce heap size to around 30 GB to make us… --- ## [Splitting message field](https://discuss.elastic.co/t/splitting-message-field/218768)
**Author:** [@liammcc](https://discuss.elastic.co/u/liammcc)\ **Replies:** 5\ **Last updated:** [February 14, 2020, 9:10am UTC](https://discuss.elastic.co/t/splitting-message-field/218768 "2020-02-14T09:10:05Z")
Good morning we have recently just set up kibana and don't have much knowledge on it. It is splitting everything well apart from our message which can be seen below. 2020-02-11T11:59:25.700Z das43423-fsdads434-sfafd4 IN… --- ## [Scroll api or search\_after giving duplicate records](https://discuss.elastic.co/t/scroll-api-or-search-after-giving-duplicate-records/219254)
**Author:** [@arjun\_kumar](https://discuss.elastic.co/u/arjun_kumar)\ **Replies:** 4\ **Last updated:** [February 14, 2020, 9:05am UTC](https://discuss.elastic.co/t/scroll-api-or-search-after-giving-duplicate-records/219254 "2020-02-14T09:05:54Z")
Hi I would like query huge amount of data (more than 500k), to achieve this, I used scroll API and searc\_after(with modified time) in both the cases it's giving me the same records(duplicate) multiple times { … --- ## [Logstash always take file opened to read](https://discuss.elastic.co/t/logstash-always-take-file-opened-to-read/219333)
**Author:** [@alexnar](https://discuss.elastic.co/u/alexnar)\ **Replies:** 0\ **Last updated:** [February 14, 2020, 8:59am UTC](https://discuss.elastic.co/t/logstash-always-take-file-opened-to-read/219333 "2020-02-14T08:59:55Z")
Problem description We have the following problem with file input: Logstash read customer system logs Customer system rotate file every 3 hours. it is working the following way: -- At first File is renamed -- At sec… --- ## [Custom "Order By" Aggregation for Kibana Bar Chart](https://discuss.elastic.co/t/custom-order-by-aggregation-for-kibana-bar-chart/218642)
**Author:** [@Jade](https://discuss.elastic.co/u/Jade)\ **Replies:** 3\ **Last updated:** [February 14, 2020, 8:18am UTC](https://discuss.elastic.co/t/custom-order-by-aggregation-for-kibana-bar-chart/218642 "2020-02-14T08:18:48Z")
I have a bar chart and have used split series into 2 time buckets - the past 3 months (now/M-3M to now/M), and 3 months prior to that (now/M-6M to now/M-3M). I would simply like to order the chart by the values of only … --- ## [Parsing message using kv filter](https://discuss.elastic.co/t/parsing-message-using-kv-filter/219267)
**Author:** [@toms130](https://discuss.elastic.co/u/toms130)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 8:04am UTC](https://discuss.elastic.co/t/parsing-message-using-kv-filter/219267 "2020-02-14T08:04:12Z")
Hi all, I'd like to parse some part of a message with VKv filter, and keep end of the message into another field. Message is : \[MarketplaceGroup=data\]\[MarketplaceId=10\]\[AccountId=1234\] updating 926 items My filter is… --- ## [How to Mongodb logs to elasticsearch through logstash](https://discuss.elastic.co/t/how-to-mongodb-logs-to-elasticsearch-through-logstash/217181)
**Author:** [@jskishor](https://discuss.elastic.co/u/jskishor)\ **Replies:** 4\ **Last updated:** [February 14, 2020, 7:38am UTC](https://discuss.elastic.co/t/how-to-mongodb-logs-to-elasticsearch-through-logstash/217181 "2020-02-14T07:38:26Z")
Hi There, How do I send mongodb logs into elasticsearch. While MongoDB is on a VM and logstash on other different server, what is the best way to ingest logs into Elasticsearch Thanks Kishore --- ## [How to Display Total Sum of counts available on Table visualisation?](https://discuss.elastic.co/t/how-to-display-total-sum-of-counts-available-on-table-visualisation/218916)
**Author:** [@vaseemQA](https://discuss.elastic.co/u/vaseemQA)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 7:29am UTC](https://discuss.elastic.co/t/how-to-display-total-sum-of-counts-available-on-table-visualisation/218916 "2020-02-14T07:29:25Z")
Hi Team, I have a use case where I need to display the sum of counts available on the table. Example Customer A bought 10 Apples Customer B bought 11 Apples I can have the above details on a table by customer wise a… --- ## [Avoid recalculation from scratch of Transform aggregation](https://discuss.elastic.co/t/avoid-recalculation-from-scratch-of-transform-aggregation/218845)
**Author:** [@pmagne](https://discuss.elastic.co/u/pmagne)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 7:14am UTC](https://discuss.elastic.co/t/avoid-recalculation-from-scratch-of-transform-aggregation/218845 "2020-02-14T07:14:33Z")
Hi, In a continuous transform, when a new document is added to the source index and the transform has to update one of its own document, it seems that the aggregations calculations are restarted from scratch. It induces… --- ## [Error: Not Found - commons.bundle.js](https://discuss.elastic.co/t/error-not-found-commons-bundle-js/216998)
**Author:** [@jonare77](https://discuss.elastic.co/u/jonare77)\ **Replies:** 9\ **Last updated:** [February 14, 2020, 7:12am UTC](https://discuss.elastic.co/t/error-not-found-commons-bundle-js/216998 "2020-02-14T07:12:21Z")
Hey I have set up elaticsearch+kibana+logstash+filebeat on Ubuntu 18.04.3 (using nginx as proxy\_pass) with OpenJDK11. Everything with Kabana seems to work as expected except the "Discover" tab. When clicking "Discover… --- ## [Pipeline in Elastic cloud](https://discuss.elastic.co/t/pipeline-in-elastic-cloud/219215)
**Author:** [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 6:58am UTC](https://discuss.elastic.co/t/pipeline-in-elastic-cloud/219215 "2020-02-14T06:58:19Z")
Hi everyone, I am a new to the Elasticsearch stack. We are using the Elasticsearch cloud (7.5.2). Because logstash isn't part of the cloud solution I am trying out the ingest node using the pipeline. We want to be able… --- ## [Pass raw json string query to Elastic Search using java](https://discuss.elastic.co/t/pass-raw-json-string-query-to-elastic-search-using-java/219154)
**Author:** [@Smack\_Alpha](https://discuss.elastic.co/u/Smack_Alpha)\ **Replies:** 1\ **Last updated:** [February 14, 2020, 6:41am UTC](https://discuss.elastic.co/t/pass-raw-json-string-query-to-elastic-search-using-java/219154 "2020-02-14T06:41:47Z")
I have got the data from Elasticsearch index by using the below code: SearchRequest request = new SearchRequest("football\_sum\_csv").scroll(new TimeValue(60000)); SearchSourceBuilder searchSourceBuilder = new SearchSourc… --- ## [How to create the similar chart](https://discuss.elastic.co/t/how-to-create-the-similar-chart/219162)
**Author:** [@naveenj](https://discuss.elastic.co/u/naveenj)\ **Replies:** 4\ **Last updated:** [February 14, 2020, 6:18am UTC](https://discuss.elastic.co/t/how-to-create-the-similar-chart/219162 "2020-02-14T06:18:04Z")
The above chat two x-axis bucket one is the barcode and another component-id. In y-axis volume and median of the volume. I am able to draw first leave volume but not able to draw the median of the volume of the barc… --- ## [\[SOLVED\] Recommendations for index mapping](https://discuss.elastic.co/t/solved-recommendations-for-index-mapping/219303)
**Author:** [@lepe](https://discuss.elastic.co/u/lepe)\ **Replies:** 0\ **Last updated:** [February 14, 2020, 3:56am UTC](https://discuss.elastic.co/t/solved-recommendations-for-index-mapping/219303 "2020-02-14T03:56:55Z")
I'm trying to imitate a SQL database structure (to have a similar structure, but I can change it if needed). The SQL tables are like: Table: main ------------------------ main\_id : integer added : datetime part\_i… --- ## ["IOException while reading user\_dictionary: /app/config/userdict\_ko.txt"](https://discuss.elastic.co/t/ioexception-while-reading-user-dictionary-app-config-userdict-ko-txt/219314)
**Author:** [@fuzes](https://discuss.elastic.co/u/fuzes)\ **Replies:** 0\ **Last updated:** [February 14, 2020, 6:02am UTC](https://discuss.elastic.co/t/ioexception-while-reading-user-dictionary-app-config-userdict-ko-txt/219314 "2020-02-14T06:02:03Z")
I'm using elastic cloud deployment and i want to add user dictionary to deployment so I add custom plugin with .zip file which is consist of /dictionaries/userdict\_ko.txt and I manage plugins and settings. but when i c… --- ## [Error from server (InternalError): error when creating "STDIN": Internal error occurred: resource quota evaluates timeout](https://discuss.elastic.co/t/error-from-server-internalerror-error-when-creating-stdin-internal-error-occurred-resource-quota-evaluates-timeout/216539)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [February 14, 2020, 5:36am UTC](https://discuss.elastic.co/t/error-from-server-internalerror-error-when-creating-stdin-internal-error-occurred-resource-quota-evaluates-timeout/216539 "2020-02-14T05:36:14Z")
Hello World! I'm trying to follow Quickstart | Elastic Cloud on Kubernetes \[1.0\] | Elastic, yet running into following error: $ cat \<\ apiVersion: elasticsearch.k8s.elastic.co/v1 \> kind: Elast… --- ## [Elasticsearchのコマンドでの「.monitoring」のindex削除について](https://discuss.elastic.co/t/elasticsearch-monitoring-index/218565)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 5:30am UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-index/218565 "2020-02-14T05:30:44Z")
下記のようなelasticsearchのコマンドで「.monitoring」のindexを削除したいのですが、 可能でしょうか？ 可能でしたら削除コマンドのご教示をお願いします。 ■「.monitoring」のindex削除コマンドの例 curl -XDELETE localhost:9200/{.monitoring-es-6-yyyy.mm.dd}?pretty よろしくお願いします。 --- ## [Lucene query syntax of exact match query in Kibana Discover view](https://discuss.elastic.co/t/lucene-query-syntax-of-exact-match-query-in-kibana-discover-view/219297)
**Author:** [@Michael\_C.H\_Wang](https://discuss.elastic.co/u/Michael_C.H_Wang)\ **Replies:** 1\ **Last updated:** [February 14, 2020, 5:22am UTC](https://discuss.elastic.co/t/lucene-query-syntax-of-exact-match-query-in-kibana-discover-view/219297 "2020-02-14T05:22:07Z")
Hi, I might have an index with two created Available Fields "Product" and "Bom" and other default ones like \_id, \_index, Bom is a string like "260-70-0002-00 650-66-0009-00 560-34-0106-00 560-34-0106-00 560-34-0211-00.… --- ## [System setting for logstash](https://discuss.elastic.co/t/system-setting-for-logstash/219309)
**Author:** [@SNJY](https://discuss.elastic.co/u/SNJY)\ **Replies:** 0\ **Last updated:** [February 14, 2020, 5:05am UTC](https://discuss.elastic.co/t/system-setting-for-logstash/219309 "2020-02-14T05:05:45Z")
Below document suggests system settings for elasticsearch -- https://www.elastic.co/guide/en/elasticsearch/reference/6.2/system-config.html Are above recommendations valid for logstash as well ? Is there any such docu… --- ## [SIEM app doesn't use Timezone setting](https://discuss.elastic.co/t/siem-app-doesnt-use-timezone-setting/216906)
**Author:** [@wconnell](https://discuss.elastic.co/u/wconnell)\ **Replies:** 12\ **Last updated:** [February 14, 2020, 4:28am UTC](https://discuss.elastic.co/t/siem-app-doesnt-use-timezone-setting/216906 "2020-02-14T04:28:39Z")
I set the "Timezone for date formatting" to UTC in the Advanced settings, so all my dashboards and visualizations use it as expected. However the SIEM app seems to use the browser settings which throws things off. Is the… --- ## [How to change from filebeat-\* to logstash-\*](https://discuss.elastic.co/t/how-to-change-from-filebeat-to-logstash/219305)
**Author:** [@Raphael\_Machnicki](https://discuss.elastic.co/u/Raphael_Machnicki)\ **Replies:** 1\ **Last updated:** [February 14, 2020, 4:23am UTC](https://discuss.elastic.co/t/how-to-change-from-filebeat-to-logstash/219305 "2020-02-14T04:23:07Z")
I used filebeat and logstash before, but now I just want to use pure logstash, how do I change from one to another? i.e. in discover section of kibana, I wanna see logstash-\* instead of filebeat-\*, is there a way to do t… --- ## [The Docs seach on elastic.co is weird](https://discuss.elastic.co/t/the-docs-seach-on-elastic-co-is-weird/219298)
**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\ **Replies:** 0\ **Last updated:** [February 14, 2020, 1:22am UTC](https://discuss.elastic.co/t/the-docs-seach-on-elastic-co-is-weird/219298 "2020-02-14T01:22:07Z")
Hi, Maybe from version 7.x it's really hard to find correct results in the docs. Here one example : If I'm in the elasticsearch version 7.6 documentation page: https://www.elastic.co/guide/en/elasticsearch/reference/c… --- ## [Need help to store and access document](https://discuss.elastic.co/t/need-help-to-store-and-access-document/219293)
**Author:** [@Benoit\_Martin](https://discuss.elastic.co/u/Benoit_Martin)\ **Replies:** 0\ **Last updated:** [February 13, 2020, 11:53pm UTC](https://discuss.elastic.co/t/need-help-to-store-and-access-document/219293 "2020-02-13T23:53:42Z")
Hi, Data : { "key1": "value1", "key2": "value2", "key3": "value3", "key4": "value4", "key5": { "key6": \[ { "key7": { "ipv4\_unicast": \[ "somevalue" … --- ## [Moving Visualization and Dashboard to new index](https://discuss.elastic.co/t/moving-visualization-and-dashboard-to-new-index/219177)
**Author:** [@Rizin\_Hussain](https://discuss.elastic.co/u/Rizin_Hussain)\ **Replies:** 1\ **Last updated:** [February 13, 2020, 9:34pm UTC](https://discuss.elastic.co/t/moving-visualization-and-dashboard-to-new-index/219177 "2020-02-13T21:34:59Z")
I need to move all the existing Visualization and Dashboard from one Index to Another index(new). I have tried export and import. but while import did not ask to select the new index to map these visualization and dashbo… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1626) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1628)