# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1658 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1659 --- ## [Kibana table visualization beautify](https://discuss.elastic.co/t/kibana-table-visualization-beautify/216965)
**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\ **Replies:** 1\ **Last updated:** [January 29, 2020, 7:24pm UTC](https://discuss.elastic.co/t/kibana-table-visualization-beautify/216965 "2020-01-29T19:24:42Z")
Hey, I am using Kibana 6.7.1 and am trying to figure out if there is an option of separating the table data in either Data Table or Visual Builder visualizations. When i'm saying separation i mean that i wouldn't want … --- ## [Conflict between ECS and SIEM authentication events visualization](https://discuss.elastic.co/t/conflict-between-ecs-and-siem-authentication-events-visualization/216936)
**Author:** [@wconnell](https://discuss.elastic.co/u/wconnell)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 7:16pm UTC](https://discuss.elastic.co/t/conflict-between-ecs-and-siem-authentication-events-visualization/216936 "2020-01-29T19:16:31Z")
On the Host tab of the SIEM app, there's a visualization that counts authentication events using the following logic: { "aggs": { "authentication\_success": { "filter": { "term": { "event.ty… --- ## [Can Kibana create a visualization or canvas graph with two indexes?](https://discuss.elastic.co/t/can-kibana-create-a-visualization-or-canvas-graph-with-two-indexes/216904)
**Author:** [@Gustavo\_Batista](https://discuss.elastic.co/u/Gustavo_Batista)\ **Replies:** 1\ **Last updated:** [January 29, 2020, 6:39pm UTC](https://discuss.elastic.co/t/can-kibana-create-a-visualization-or-canvas-graph-with-two-indexes/216904 "2020-01-29T18:39:38Z")
Can a Canvas or Visualization user two indexes to make a graph? --- ## [How to compare two documents from two different indexes using script](https://discuss.elastic.co/t/how-to-compare-two-documents-from-two-different-indexes-using-script/217047)
**Author:** [@JBone](https://discuss.elastic.co/u/JBone)\ **Replies:** 0\ **Last updated:** [January 29, 2020, 5:08pm UTC](https://discuss.elastic.co/t/how-to-compare-two-documents-from-two-different-indexes-using-script/217047 "2020-01-29T17:08:04Z")
Hi, I am searching for similar fields in two different indexes. My goal is to if those fields match, then I know there is a correlation between those two documents. I do search first with accountNumber, and I group them… --- ## [Refresh\_interval](https://discuss.elastic.co/t/refresh-interval/215420)
**Author:** [@111276](https://discuss.elastic.co/u/111276)\ **Replies:** 5\ **Last updated:** [January 29, 2020, 5:55pm UTC](https://discuss.elastic.co/t/refresh-interval/215420 "2020-01-29T17:55:14Z")
hello I have eight elasticsearch data nodes (ver. 6.4.1) (8 shards, 2 replica) they have following data indexed disk size : 21.5GB Document Count : 67.7m Segment Count : 336 A large amount of data is bached and ind… --- ## [Extract From a Field Name and Add Fields](https://discuss.elastic.co/t/extract-from-a-field-name-and-add-fields/216911)
**Author:** [@mfisher](https://discuss.elastic.co/u/mfisher)\ **Replies:** 5\ **Last updated:** [January 29, 2020, 5:53pm UTC](https://discuss.elastic.co/t/extract-from-a-field-name-and-add-fields/216911 "2020-01-29T17:53:19Z")
I need to copy the dynamic "MODEL" from the field name and copy the value "RandomSerial" to new fields. When "MODEL" and "RandomSerial" will be different for all messages. Logstash Output: "Serial Number (MODEL)" =\> … --- ## [ElasticSearch 7.x exact match](https://discuss.elastic.co/t/elasticsearch-7-x-exact-match/216974)
**Author:** [@CiprianaM](https://discuss.elastic.co/u/CiprianaM)\ **Replies:** 3\ **Last updated:** [January 29, 2020, 5:20pm UTC](https://discuss.elastic.co/t/elasticsearch-7-x-exact-match/216974 "2020-01-29T17:20:14Z")
Hello, I am trying to implement an exact match for a term (a url) and I get 0 hits for the following implementation. I am doing this with node, with the latest npm package ("@elastic/elasticsearch": "^7.5.0") Mapping: … --- ## [Using nodejs ES client to query on two arrays of index associated values](https://discuss.elastic.co/t/using-nodejs-es-client-to-query-on-two-arrays-of-index-associated-values/217039)
**Author:** [@1upNathan](https://discuss.elastic.co/u/1upNathan)\ **Replies:** 0\ **Last updated:** [January 29, 2020, 4:20pm UTC](https://discuss.elastic.co/t/using-nodejs-es-client-to-query-on-two-arrays-of-index-associated-values/217039 "2020-01-29T16:20:29Z")
I'm using version 6.11.2 of the nodeJS elasticsearch client in an attempt to access records based on two distinct fields. My query syntax currently looks something like this. While this yields the records that have a … --- ## [Apply grok pattern based on logfile name](https://discuss.elastic.co/t/apply-grok-pattern-based-on-logfile-name/216901)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 10\ **Last updated:** [January 29, 2020, 4:21pm UTC](https://discuss.elastic.co/t/apply-grok-pattern-based-on-logfile-name/216901 "2020-01-29T16:21:59Z")
Under one index I have multiple log files and one of those log file will use a different grok format than the other three log files. How can I apply grok pattern based on if statement on file name? For example, - type: … --- ## [Enable CORS from Kibana for ES](https://discuss.elastic.co/t/enable-cors-from-kibana-for-es/217008)
**Author:** [@Rakesh\_More](https://discuss.elastic.co/u/Rakesh_More)\ **Replies:** 1\ **Last updated:** [January 29, 2020, 4:22pm UTC](https://discuss.elastic.co/t/enable-cors-from-kibana-for-es/217008 "2020-01-29T16:22:25Z")
Hello All, I am new to Elasticsearch. I have created elasticsearch cluster on AWS cloud. And have added some data for for particular index. Now while connecting to cluster from React App I am facing CORS issue. How c… --- ## [Need help to modify the Mustache Condition](https://discuss.elastic.co/t/need-help-to-modify-the-mustache-condition/217033)
**Author:** [@Priyan\_Murugan](https://discuss.elastic.co/u/Priyan_Murugan)\ **Replies:** 0\ **Last updated:** [January 29, 2020, 3:56pm UTC](https://discuss.elastic.co/t/need-help-to-modify-the-mustache-condition/217033 "2020-01-29T15:56:28Z")
Hi I have the below mustache script for my slack notification message. Total hits: {{#ctx.results}}{{#hits}}{{total}}{{/hits}}{{/ctx.results}} Period start: {{ctx.periodStart}} Period end: {{ctx.periodEnd}} Error Det… --- ## [Elasticsearch doesn't start on Windows 2016 Server](https://discuss.elastic.co/t/elasticsearch-doesnt-start-on-windows-2016-server/200182)
**Author:** [@PBachmann](https://discuss.elastic.co/u/PBachmann)\ **Replies:** 0\ **Last updated:** [September 19, 2019, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-start-on-windows-2016-server/200182 "2019-09-19T10:43:02Z")
Hi there I've installed the latest Elasticsearch Version for Windows 7.3.2 on a Windows Server 2016. The Installation finished without Errors, but the Service cannot start. Here is the Application Log Blockquote Fau… --- ## [Evaluate non-empty list to true in mustache](https://discuss.elastic.co/t/evaluate-non-empty-list-to-true-in-mustache/216864)
**Author:** [@styks90](https://discuss.elastic.co/u/styks90)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 3:43pm UTC](https://discuss.elastic.co/t/evaluate-non-empty-list-to-true-in-mustache/216864 "2020-01-29T15:43:34Z")
Quick question on mustache: Is it possible to evaluate a conditional on a list just once? That is, instead of iterating and applying the template to each element in the array, evaluate it as non-empty and do stuff in it… --- ## [Beats on VM vs on Kubernetes](https://discuss.elastic.co/t/beats-on-vm-vs-on-kubernetes/217023)
**Author:** [@Mauricio\_Borges](https://discuss.elastic.co/u/Mauricio_Borges)\ **Replies:** 0\ **Last updated:** [January 29, 2020, 3:04pm UTC](https://discuss.elastic.co/t/beats-on-vm-vs-on-kubernetes/217023 "2020-01-29T15:04:08Z")
Hi team! I exploring Beats and have some doubts about differences and limit between Beats installed over Operation System and ones over Kubernetes. 1 - At first look, appears Beats installed over Host/VM will collect m… --- ## [Geoip not reading dot expanded field (or any field, actually)](https://discuss.elastic.co/t/geoip-not-reading-dot-expanded-field-or-any-field-actually/216929)
**Author:** [@AddChickpeas](https://discuss.elastic.co/u/AddChickpeas)\ **Replies:** 1\ **Last updated:** [January 29, 2020, 3:09pm UTC](https://discuss.elastic.co/t/geoip-not-reading-dot-expanded-field-or-any-field-actually/216929 "2020-01-29T15:09:17Z")
Hello, I've been trying to get geoip working on field with dot notation without much luck. EDIT: So this is happening even when not using nested fields. Same error either way. I'm using Fluentd so maybe the way it outp… --- ## [Alerting on no log entires](https://discuss.elastic.co/t/alerting-on-no-log-entires/216955)
**Author:** [@RichardH](https://discuss.elastic.co/u/RichardH)\ **Replies:** 1\ **Last updated:** [January 29, 2020, 3:06pm UTC](https://discuss.elastic.co/t/alerting-on-no-log-entires/216955 "2020-01-29T15:06:26Z")
Hi All, I am putting this under Logstash as I am reasonably sure (but not totally sure) I will need Logstash to achieve this. We have around 170 servers all running the same application. On each of these servers there … --- ## [Not able to start elasticsearch](https://discuss.elastic.co/t/not-able-to-start-elasticsearch/216996)
**Author:** [@Aayush\_Agrawal](https://discuss.elastic.co/u/Aayush_Agrawal)\ **Replies:** 1\ **Last updated:** [January 29, 2020, 2:52pm UTC](https://discuss.elastic.co/t/not-able-to-start-elasticsearch/216996 "2020-01-29T14:52:49Z")
My ELK setup on unix box was working fine, but elasticsearch and kibana stopped working. I restarted both services using /etc/init.d/elasticsearch restart and /etc/init.d/kibana restart. Kibana started working but elas… --- ## [Problem with Aggregate Filter](https://discuss.elastic.co/t/problem-with-aggregate-filter/216908)
**Author:** [@codecounselor](https://discuss.elastic.co/u/codecounselor)\ **Replies:** 5\ **Last updated:** [January 29, 2020, 2:50pm UTC](https://discuss.elastic.co/t/problem-with-aggregate-filter/216908 "2020-01-29T14:50:57Z")
I am trying to aggregate all of the log entries for database deadlocks into a single entry. Right now I'm focusing on MySQL's log output, but I need to so something very similar for MSSQL. In comments I have the first … --- ## [Timelion won't show anything in the graph for any metric other than "count"](https://discuss.elastic.co/t/timelion-wont-show-anything-in-the-graph-for-any-metric-other-than-count/215500)
**Author:** [@rosamar](https://discuss.elastic.co/u/rosamar)\ **Replies:** 4\ **Last updated:** [January 29, 2020, 2:39pm UTC](https://discuss.elastic.co/t/timelion-wont-show-anything-in-the-graph-for-any-metric-other-than-count/215500 "2020-01-29T14:39:07Z")
I am using a version lower than 7.4 and most metrics (all but count) do not show any data in the diagram. I am working with Kibana (and ELK) 7.5. Any suggestions? Sample working query: .es(index=jos\_data\*, timefield=@t… --- ## [Logstash CSV Kibana input error](https://discuss.elastic.co/t/logstash-csv-kibana-input-error/216948)
**Author:** [@ELK4Life](https://discuss.elastic.co/u/ELK4Life)\ **Replies:** 6\ **Last updated:** [January 29, 2020, 2:32pm UTC](https://discuss.elastic.co/t/logstash-csv-kibana-input-error/216948 "2020-01-29T14:32:40Z")
Dear Logstash community, I have challenged myself to capture my network data using TShark and make custom dashboards in Kibana. I have the following setup: 1 Ubuntu 18.04 VM with ElasticSearch, Logstash and Kibana do… --- ## [Update using "join" with other index](https://discuss.elastic.co/t/update-using-join-with-other-index/217010)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 1\ **Last updated:** [January 29, 2020, 2:09pm UTC](https://discuss.elastic.co/t/update-using-join-with-other-index/217010 "2020-01-29T14:09:09Z")
I am using Elasticsearch 6.5. Let's say that I have index\_trg, that has fields: id, value, and some additional fields. I also have index\_src with fields id and new\_value, that is subset id ids from index\_trg. What I w… --- ## [Logstash beginner configuration issues](https://discuss.elastic.co/t/logstash-beginner-configuration-issues/216692)
**Author:** [@Marie-Laure\_Aix](https://discuss.elastic.co/u/Marie-Laure_Aix)\ **Replies:** 10\ **Last updated:** [January 29, 2020, 2:00pm UTC](https://discuss.elastic.co/t/logstash-beginner-configuration-issues/216692 "2020-01-29T14:00:08Z")
Hi there, I am a complete beginner with Logstash and I have issues configurating it. I am getting this error message : Thread.exclusive is deprecated, use Thread::Mutex Sending Logstash logs to /var/log/logstash which… --- ## [Geo\_point property (timestamp) is not displaying in tooltip](https://discuss.elastic.co/t/geo-point-property-timestamp-is-not-displaying-in-tooltip/216052)
**Author:** [@Suren\_ds](https://discuss.elastic.co/u/Suren_ds)\ **Replies:** 4\ **Last updated:** [January 29, 2020, 1:59pm UTC](https://discuss.elastic.co/t/geo-point-property-timestamp-is-not-displaying-in-tooltip/216052 "2020-01-29T13:59:57Z")
Hello experts, I am a newbie to Elastic Maps. I have 3 dimension multiple geo\_points i.e. lat, lon & timestamp. I would like to plot the co-ords in Maps and timestamp to be displayed in tool tip. Somehow i could not get… --- ## [Thread park Event seen in RestClient multiGet \_msearch operation](https://discuss.elastic.co/t/thread-park-event-seen-in-restclient-multiget-msearch-operation/217011)
**Author:** [@vyas.radhakrishnan](https://discuss.elastic.co/u/vyas.radhakrishnan)\ **Replies:** 0\ **Last updated:** [January 29, 2020, 1:33pm UTC](https://discuss.elastic.co/t/thread-park-event-seen-in-restclient-multiget-msearch-operation/217011 "2020-01-29T13:33:46Z")
We are seeing a ThreadPark of 249 ms in a 1 node elastic setup, Elastic server version is 6.5.4. Thread park event is seen when on a sync multiGet operation . I.e a POST request for multiGet(\_msearch) performRequestAP… --- ## [Migrate from co-location to the cloud without downtime(?)](https://discuss.elastic.co/t/migrate-from-co-location-to-the-cloud-without-downtime/216819)
**Author:** [@jimmie](https://discuss.elastic.co/u/jimmie)\ **Replies:** 6\ **Last updated:** [January 29, 2020, 1:29pm UTC](https://discuss.elastic.co/t/migrate-from-co-location-to-the-cloud-without-downtime/216819 "2020-01-29T13:29:30Z")
We want to move out from co-lo (Sweden), and in to AWS EC2 in USA (i3.2xl) (maintaining it our-self, not the service one) We have a 18 data node setup on co-location. We are running elasticsearch 5.6 We have two replica… --- ## [Not able to create index using logstash for my ES cluster](https://discuss.elastic.co/t/not-able-to-create-index-using-logstash-for-my-es-cluster/216654)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 17\ **Last updated:** [January 29, 2020, 1:24pm UTC](https://discuss.elastic.co/t/not-able-to-create-index-using-logstash-for-my-es-cluster/216654 "2020-01-29T13:24:39Z")
Hello, I am using jdbc input plugin with logstash to fetch data from database and create index in ES. But when i am trying to run config file it is not getting started. I am having 3 node cluster with one master node … --- ## [HighLevel RestClient difference between 6.6.2 and 7.3.+ (or latest)](https://discuss.elastic.co/t/highlevel-restclient-difference-between-6-6-2-and-7-3-or-latest/210707)
**Author:** [@AshishUser](https://discuss.elastic.co/u/AshishUser)\ **Replies:** 3\ **Last updated:** [January 29, 2020, 12:56pm UTC](https://discuss.elastic.co/t/highlevel-restclient-difference-between-6-6-2-and-7-3-or-latest/210707 "2020-01-29T12:56:02Z")
Hi Guys, I have application which using older version of elastic 6.6.2 high level rest client search api. We are planning to upgrade our instance to latest version of elastic in coming months. I am trying to understand… --- ## [Not getting proper Response as per the count](https://discuss.elastic.co/t/not-getting-proper-response-as-per-the-count/216986)
**Author:** [@Toshif](https://discuss.elastic.co/u/Toshif)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 12:35pm UTC](https://discuss.elastic.co/t/not-getting-proper-response-as-per-the-count/216986 "2020-01-29T12:35:25Z")
Hello, I am trying to retrieve 1500 records from ElasticSearch but in response I am getting only around 10 records. I am getting count as 1500, also in kibana same query returns 1500 records. But in response I am not … --- ## [How can Kibana reporting process multiple jobs at once?](https://discuss.elastic.co/t/how-can-kibana-reporting-process-multiple-jobs-at-once/216876)
**Author:** [@kaisan.nowah](https://discuss.elastic.co/u/kaisan.nowah)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 11:30am UTC](https://discuss.elastic.co/t/how-can-kibana-reporting-process-multiple-jobs-at-once/216876 "2020-01-29T11:30:56Z")
Hi, I'm using the Kibana API to retrieve visualisations. I want to be able to post multiple jobs at once and have them all process at the same time: As you can see currently any new reporting jobs will wait until the… --- ## [Kibana Security Settings](https://discuss.elastic.co/t/kibana-security-settings/214005)
**Author:** [@ulas.keskin](https://discuss.elastic.co/u/ulas.keskin)\ **Replies:** 6\ **Last updated:** [January 29, 2020, 11:26am UTC](https://discuss.elastic.co/t/kibana-security-settings/214005 "2020-01-29T11:26:22Z")
Hi, While I'm using security tab on Kibana, I'm getting permission denied error. Kindly help on this thanks in advance [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1657) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1659)