# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1629 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1630 --- ## [Question about diacritics stored as NCR data in database](https://discuss.elastic.co/t/question-about-diacritics-stored-as-ncr-data-in-database/219196)
**Author:** [@Wakizashi\_Yoshikawa](https://discuss.elastic.co/u/Wakizashi_Yoshikawa)\ **Replies:** 0\ **Last updated:** [February 13, 2020, 12:18pm UTC](https://discuss.elastic.co/t/question-about-diacritics-stored-as-ncr-data-in-database/219196 "2020-02-13T12:18:09Z")
Hello, hopefully someone will be able to clarify this for me. We are planing e-commerce upgrade to a system that comes with ES built in. Our current data in the database is stored as UTF-8. However during the migration… --- ## [Change logo in kibana 6.7.0 in kubernetes](https://discuss.elastic.co/t/change-logo-in-kibana-6-7-0-in-kubernetes/219172)
**Author:** [@111290](https://discuss.elastic.co/u/111290)\ **Replies:** 1\ **Last updated:** [February 13, 2020, 11:08am UTC](https://discuss.elastic.co/t/change-logo-in-kibana-6-7-0-in-kubernetes/219172 "2020-02-13T11:08:25Z")
Hello, I installed elastic-stack as service in k8s. It includes kibana. I want to change the logo of kibana. Is there any help? Thank you! --- ## [Elastic Cluster Rejected Execution Exception](https://discuss.elastic.co/t/elastic-cluster-rejected-execution-exception/219143)
**Author:** [@Garima\_Tripathi](https://discuss.elastic.co/u/Garima_Tripathi)\ **Replies:** 2\ **Last updated:** [February 13, 2020, 10:43am UTC](https://discuss.elastic.co/t/elastic-cluster-rejected-execution-exception/219143 "2020-02-13T10:43:28Z")
Hi, I have the following cluster configuration : Master -3 node (4 cpu, 20 gb ram) coordinating -3 node (16 cpu, 98 GB,) data- 5 node (28 cpu, 48 RAM) And thread pool configuration is following thread\_pool: search… --- ## [Building a website that uses elastic](https://discuss.elastic.co/t/building-a-website-that-uses-elastic/219051)
**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\ **Replies:** 2\ **Last updated:** [February 13, 2020, 10:27am UTC](https://discuss.elastic.co/t/building-a-website-that-uses-elastic/219051 "2020-02-13T10:27:49Z")
Hello, I need some wisdom and guidance. I am trying to build a website where users can submit an IP address into a search box and that search box reaches into an Elasticsearch server and pulls out the data associated w… --- ## [How to add several test results in the same pie in kibana](https://discuss.elastic.co/t/how-to-add-several-test-results-in-the-same-pie-in-kibana/219021)
**Author:** [@josemiguellopez](https://discuss.elastic.co/u/josemiguellopez)\ **Replies:** 5\ **Last updated:** [February 13, 2020, 10:23am UTC](https://discuss.elastic.co/t/how-to-add-several-test-results-in-the-same-pie-in-kibana/219021 "2020-02-13T10:23:20Z")
Hi friends, I have a question with Kibana, is it possible to add several test results to a cake? since at the time of doing so it generates 3 cakes --- ## [Logstash ingestion de fichiers textes et csv entières ne fonctionne pas](https://discuss.elastic.co/t/logstash-ingestion-de-fichiers-textes-et-csv-entieres-ne-fonctionne-pas/218991)
**Author:** [@romainfoulono](https://discuss.elastic.co/u/romainfoulono)\ **Replies:** 8\ **Last updated:** [February 13, 2020, 10:10am UTC](https://discuss.elastic.co/t/logstash-ingestion-de-fichiers-textes-et-csv-entieres-ne-fonctionne-pas/218991 "2020-02-13T10:10:10Z")
Bonjour tout le monde Je voudrais ingérer des fichiers textes et CSV en tant que fichier distincts via Logstash dans Elasticsearch. J'ai donc trouvé le paramètre "mode" avec la valeur "read", sauf que ça ne fonctionne p… --- ## [Plotting time diff based on uniq thread\_id and API](https://discuss.elastic.co/t/plotting-time-diff-based-on-uniq-thread-id-and-api/219157)
**Author:** [@Paresh\_Gandhare](https://discuss.elastic.co/u/Paresh_Gandhare)\ **Replies:** 5\ **Last updated:** [February 13, 2020, 10:08am UTC](https://discuss.elastic.co/t/plotting-time-diff-based-on-uniq-thread-id-and-api/219157 "2020-02-13T10:08:38Z")
i have a log file as below. Fields are indexed as \[thread\_id\] \[API\] \[method\] \[timestamp\] \[GREEDYDATA\] respectively. describing more on first two lines , 1st line --\> 1111 is the thread\_id for api=/API1 with init time… --- ## [Search empty string not working](https://discuss.elastic.co/t/search-empty-string-not-working/219049)
**Author:** [@telebh](https://discuss.elastic.co/u/telebh)\ **Replies:** 1\ **Last updated:** [February 13, 2020, 9:59am UTC](https://discuss.elastic.co/t/search-empty-string-not-working/219049 "2020-02-13T09:59:48Z")
hi there, I am searching ES to find empty string field using "must\_not" and exists as follows, but it returns "0" hits. After I change the query to "must" and exists I am getting all hits where the filed having empty va… --- ## [Illegal\_argument\_exception while creating new index](https://discuss.elastic.co/t/illegal-argument-exception-while-creating-new-index/219074)
**Author:** [@JustSomeoneOnline](https://discuss.elastic.co/u/JustSomeoneOnline)\ **Replies:** 1\ **Last updated:** [February 13, 2020, 9:54am UTC](https://discuss.elastic.co/t/illegal-argument-exception-while-creating-new-index/219074 "2020-02-13T09:54:41Z")
Hi. I'm running into issues when trying to create a new index in ElasticSearch 7.5 The error message is: The difference between max\_gram and min\_gram in NGram Tokenizer must be less than or equal to: \[1\] but was \[18\]. … --- ## [Unable to update the ES using http-output-plugin](https://discuss.elastic.co/t/unable-to-update-the-es-using-http-output-plugin/219179)
**Author:** [@psiva017](https://discuss.elastic.co/u/psiva017)\ **Replies:** 0\ **Last updated:** [February 13, 2020, 9:54am UTC](https://discuss.elastic.co/t/unable-to-update-the-es-using-http-output-plugin/219179 "2020-02-13T09:54:12Z")
http { url =\> "http://localhost:9200/test\_index/\_update\_by\_query" format =\> "message" content\_type =\> "application/json" message =\> '{"query": {"match":{ "userId": %{userId}}},"script": "ctx.\_source.recentStatus = %{… --- ## [Geopoint requires deprecated Elasticsearch mapping types](https://discuss.elastic.co/t/geopoint-requires-deprecated-elasticsearch-mapping-types/219085)
**Author:** [@Junebee](https://discuss.elastic.co/u/Junebee)\ **Replies:** 1\ **Last updated:** [February 13, 2020, 9:49am UTC](https://discuss.elastic.co/t/geopoint-requires-deprecated-elasticsearch-mapping-types/219085 "2020-02-13T09:49:52Z")
I would like to add Geopoint data to my index. The Elasticsearch 7.6 geoip processor states I need to add the geopoint type to my index mappings. https://www.elastic.co/guide/en/logstash/current/plugins-filters-geoip.… --- ## [Binary data type](https://discuss.elastic.co/t/binary-data-type/219176)
**Author:** [@assafh](https://discuss.elastic.co/u/assafh)\ **Replies:** 0\ **Last updated:** [February 13, 2020, 9:45am UTC](https://discuss.elastic.co/t/binary-data-type/219176 "2020-02-13T09:45:34Z")
What is the usage of the Binary data type. It is not searchable or stored by default and I know storing binary data in elastic is a bad idea. --- ## [Failed to installed pre-packaged rules from elastic](https://discuss.elastic.co/t/failed-to-installed-pre-packaged-rules-from-elastic/219111)
**Author:** [@wlzylal](https://discuss.elastic.co/u/wlzylal)\ **Replies:** 3\ **Last updated:** [February 13, 2020, 9:44am UTC](https://discuss.elastic.co/t/failed-to-installed-pre-packaged-rules-from-elastic/219111 "2020-02-13T09:44:07Z")
I have just upgrade my elk to 7.6.0 and I want to test the rules in SIEM, but I just can't load prebuilt detection rules. It said that // Your visualization has error(s) Failed to installed pre-packaged rules from elas… --- ## [Migration data from MariaDB to Elasticsearch via Logstash](https://discuss.elastic.co/t/migration-data-from-mariadb-to-elasticsearch-via-logstash/218225)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 1\ **Last updated:** [February 13, 2020, 9:42am UTC](https://discuss.elastic.co/t/migration-data-from-mariadb-to-elasticsearch-via-logstash/218225 "2020-02-13T09:42:36Z")
I'm trying to migrate data from MariaDB to Elasticsearch by using Logstash. I never worked with jdbc before so I installed jdbc with sudo apt-get install libmysql-java command and created the following mysql.conf file… --- ## [Looking for an alternative to reindex and collapse](https://discuss.elastic.co/t/looking-for-an-alternative-to-reindex-and-collapse/219173)
**Author:** [@andni233](https://discuss.elastic.co/u/andni233)\ **Replies:** 0\ **Last updated:** [February 13, 2020, 9:38am UTC](https://discuss.elastic.co/t/looking-for-an-alternative-to-reindex-and-collapse/219173 "2020-02-13T09:38:18Z")
Hello! I have an index that contains a lot of "raw" data, around 40.000 documents. I want to refine this data a bit, and store the refined data in a different index. For this purpose, I came up with this search query t… --- ## [Single field object to Elasticsearch using Logstash](https://discuss.elastic.co/t/single-field-object-to-elasticsearch-using-logstash/215735)
**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\ **Replies:** 7\ **Last updated:** [February 13, 2020, 9:31am UTC](https://discuss.elastic.co/t/single-field-object-to-elasticsearch-using-logstash/215735 "2020-02-13T09:31:17Z")
Hi Support, I have group concat field values like :slight\_smile: Document\_Type 1,2,3,4,5,6 In Elasticsearch field mapping with object type "Document\_Type": { "properties": { "d": { "typ… --- ## [How to show three point in single line in bar graph](https://discuss.elastic.co/t/how-to-show-three-point-in-single-line-in-bar-graph/218740)
**Author:** [@naveenj](https://discuss.elastic.co/u/naveenj)\ **Replies:** 4\ **Last updated:** [February 13, 2020, 9:08am UTC](https://discuss.elastic.co/t/how-to-show-three-point-in-single-line-in-bar-graph/218740 "2020-02-13T09:08:59Z")
The chart is depicting fictional fruit consumption data, with the minimum, maximum and median values for each month of 2019. Can we active this chart in kibana? --- ## [Time in discover mode is GMT in 7.6?](https://discuss.elastic.co/t/time-in-discover-mode-is-gmt-in-7-6/219113)
**Author:** [@kagoadvs](https://discuss.elastic.co/u/kagoadvs)\ **Replies:** 1\ **Last updated:** [February 13, 2020, 9:01am UTC](https://discuss.elastic.co/t/time-in-discover-mode-is-gmt-in-7-6/219113 "2020-02-13T09:01:12Z")
I am wondering if something is wrong ElasticSearch/Kibana 7.6, because the time column in Discover mode is showing time in GMT, which was not the case 7.5. My Kibana advanced settings indicates that I am using Browser fo… --- ## [Can we show bar graph range?](https://discuss.elastic.co/t/can-we-show-bar-graph-range/218754)
**Author:** [@naveenj](https://discuss.elastic.co/u/naveenj)\ **Replies:** 3\ **Last updated:** [February 13, 2020, 8:38am UTC](https://discuss.elastic.co/t/can-we-show-bar-graph-range/218754 "2020-02-13T08:38:22Z")
Bar graph bar can we display the bars in 0 to 10, 2 to 50 25 to 80 values? --- ## [Long-term, low query logs storage in Elasticsearch 5.6 Cluster - what are the risks of using more than 50% of RAM to heap?](https://discuss.elastic.co/t/long-term-low-query-logs-storage-in-elasticsearch-5-6-cluster-what-are-the-risks-of-using-more-than-50-of-ram-to-heap/218870)
**Author:** [@heapheaphurray](https://discuss.elastic.co/u/heapheaphurray)\ **Replies:** 4\ **Last updated:** [February 13, 2020, 7:54am UTC](https://discuss.elastic.co/t/long-term-low-query-logs-storage-in-elasticsearch-5-6-cluster-what-are-the-risks-of-using-more-than-50-of-ram-to-heap/218870 "2020-02-13T07:54:22Z")
Hello! We are trying to optimize our ES 5.6 cluster to use less heap memory. We have 19Tb of data, 9bln of rows in ~560 shards on 2 warm, 4 cold data nodes, which are only rarely queried. Memory is scarce resource in o… --- ## [No logstash directory in /usr/share](https://discuss.elastic.co/t/no-logstash-directory-in-usr-share/218851)
**Author:** [@kevin5617](https://discuss.elastic.co/u/kevin5617)\ **Replies:** 3\ **Last updated:** [February 13, 2020, 7:27am UTC](https://discuss.elastic.co/t/no-logstash-directory-in-usr-share/218851 "2020-02-13T07:27:18Z")
I am running Logstash with Docker and after I pull the docker image, there is no logstash directory in /usr/share to add config files. --- ## [Usage of coordinator node for indexing](https://discuss.elastic.co/t/usage-of-coordinator-node-for-indexing/219034)
**Author:** [@1fe60245fe160bc0f8ab](https://discuss.elastic.co/u/1fe60245fe160bc0f8ab)\ **Replies:** 7\ **Last updated:** [February 13, 2020, 7:43am UTC](https://discuss.elastic.co/t/usage-of-coordinator-node-for-indexing/219034 "2020-02-13T07:43:39Z")
Hi all, I've read that the best practice for querying/searching is to use a coordinator node, which makes sense to me (a node that's not busy on disk operations for indexing and uses memory for gather phase of searches)… --- ## [Auto expand replicas](https://discuss.elastic.co/t/auto-expand-replicas/219140)
**Author:** [@royal\_man](https://discuss.elastic.co/u/royal_man)\ **Replies:** 0\ **Last updated:** [February 13, 2020, 7:26am UTC](https://discuss.elastic.co/t/auto-expand-replicas/219140 "2020-02-13T07:26:14Z")
I am trying to implement a scale up of elasticsearch cluster by increasing data nodes. Data nodes: 10 nodes 1 node: 2 shards (index1 and index2) Index1: 10 Primary and 0 replica Index2: 1 Primary and 9 Replica I wan… --- ## [I don't know why do not match the keyword are searched](https://discuss.elastic.co/t/i-dont-know-why-do-not-match-the-keyword-are-searched/218886)
**Author:** [@fuzes](https://discuss.elastic.co/u/fuzes)\ **Replies:** 2\ **Last updated:** [February 13, 2020, 6:55am UTC](https://discuss.elastic.co/t/i-dont-know-why-do-not-match-the-keyword-are-searched/218886 "2020-02-13T06:55:30Z")
following is my mapping "tags" : { "properties" : { "zh-TW" : { "type" : "text", "fields" : { "keyword" : { "type" : "keyword", … --- ## [McAfee EPO logs to Logstash, XML parsing failure, XML: missing tag start, XML fails to generate datastructure](https://discuss.elastic.co/t/mcafee-epo-logs-to-logstash-xml-parsing-failure-xml-missing-tag-start-xml-fails-to-generate-datastructure/217827)
**Author:** [@Purk](https://discuss.elastic.co/u/Purk)\ **Replies:** 7\ **Last updated:** [February 13, 2020, 6:55am UTC](https://discuss.elastic.co/t/mcafee-epo-logs-to-logstash-xml-parsing-failure-xml-missing-tag-start-xml-fails-to-generate-datastructure/217827 "2020-02-13T06:55:26Z")
Hi I am looking for a help on how to parse the McAfee ePO XML logs into the logstash. I tried to use a XML filter plugin, but it fails to create an actual datastructure of the XML file. I have seen a similar topic in … --- ## [Filter data from 6PM today and for 24 hours](https://discuss.elastic.co/t/filter-data-from-6pm-today-and-for-24-hours/218900)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 5\ **Last updated:** [February 13, 2020, 6:15am UTC](https://discuss.elastic.co/t/filter-data-from-6pm-today-and-for-24-hours/218900 "2020-02-13T06:15:02Z")
Hi, I would like to filter a visualisation to show the data from 6 PM every day until 6 PM the next day. That is because I have a process which starts daily at 6 PM every day. How is that possible? If at all? Example… --- ## [What does "index": "no" do? Is there any alternative of this?](https://discuss.elastic.co/t/what-does-index-no-do-is-there-any-alternative-of-this/219122)
**Author:** [@prasad98](https://discuss.elastic.co/u/prasad98)\ **Replies:** 2\ **Last updated:** [February 13, 2020, 6:13am UTC](https://discuss.elastic.co/t/what-does-index-no-do-is-there-any-alternative-of-this/219122 "2020-02-13T06:13:01Z")
Hi, I'm currently working on the elasticsearch migration from v2.4 to v7.5. In v2.4, there is field property like this: custom\_key\_field: { "type": "text", "index": "no" } What does "index": "no" means? Is it … --- ## [Sum field values from nested json and put them in new field using logstash ruby plugin](https://discuss.elastic.co/t/sum-field-values-from-nested-json-and-put-them-in-new-field-using-logstash-ruby-plugin/219084)
**Author:** [@Gangadhar\_Mahadevan](https://discuss.elastic.co/u/Gangadhar_Mahadevan)\ **Replies:** 4\ **Last updated:** [February 13, 2020, 1:31am UTC](https://discuss.elastic.co/t/sum-field-values-from-nested-json-and-put-them-in-new-field-using-logstash-ruby-plugin/219084 "2020-02-13T01:31:49Z")
This is my input stored in .log file {"@timestamp":"2020-02-12T17:53:54.305Z","beat":{"hostname":"xx.xx","name":"xx.xx","version":"5.2.1"},"input\_type":"log","log\_dc":"xx","log\_dc\_type":"rg","message":"{\\"server\_name\\":… --- ## [Elasticsearch aggs filter with condition](https://discuss.elastic.co/t/elasticsearch-aggs-filter-with-condition/216372)
**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\ **Replies:** 3\ **Last updated:** [February 13, 2020, 2:25am UTC](https://discuss.elastic.co/t/elasticsearch-aggs-filter-with-condition/216372 "2020-02-13T02:25:43Z")
Elasticsearch v 7.5 Hello and good day! I have an index named articles , and has the following sample contents: { "\_id" : 1, "title" : "Title 1" "cms" : \[ { "cli\_id" : 0, "cmx\_… --- ## [Is this possible to refer multiple buckets\_path in \`moving\_fn\` aggregation?](https://discuss.elastic.co/t/is-this-possible-to-refer-multiple-buckets-path-in-moving-fn-aggregation/219101)
**Author:** [@seyoongit](https://discuss.elastic.co/u/seyoongit)\ **Replies:** 0\ **Last updated:** [February 13, 2020, 1:11am UTC](https://discuss.elastic.co/t/is-this-possible-to-refer-multiple-buckets-path-in-moving-fn-aggregation/219101 "2020-02-13T01:11:17Z")
official doc introduces moving\_fn syntax as below. { "moving\_fn": { "buckets\_path": "the\_sum", "window": 10, "script": "MovingFunctions.min(values)" } } then, is this possible to refer m… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1628) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1630)