# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1659 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1660 --- ## [Search phase execution exception - Request to Elasticsearch failed](https://discuss.elastic.co/t/search-phase-execution-exception-request-to-elasticsearch-failed/216988)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 0\ **Last updated:** [January 29, 2020, 11:25am UTC](https://discuss.elastic.co/t/search-phase-execution-exception-request-to-elasticsearch-failed/216988 "2020-01-29T11:25:51Z")
Hi! I am trying to add a sub-bucket in an kibana histogram and i get the bellow: Request to Elasticsearch failed: {"error":{ "root\_cause": "type":"search\_phase\_execution\_exception","reason":"all shards failed","phase… --- ## [Search phase execution exception with reason all shards failed](https://discuss.elastic.co/t/search-phase-execution-exception-with-reason-all-shards-failed/216797)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 6\ **Last updated:** [January 29, 2020, 11:13am UTC](https://discuss.elastic.co/t/search-phase-execution-exception-with-reason-all-shards-failed/216797 "2020-01-29T11:13:34Z")
Hi! I am trying to add a sub-bucket in an kibana histogram and i get the bellow: "type":"search\_phase\_execution\_exception","reason":"all shards failed","phase":"query","grouped":true,"failed\_shards":\[ {"shard":0,"inde… --- ## [Export to csv](https://discuss.elastic.co/t/export-to-csv/216655)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 4\ **Last updated:** [January 29, 2020, 11:09am UTC](https://discuss.elastic.co/t/export-to-csv/216655 "2020-01-29T11:09:35Z")
Hi! I am using kibana 7.0.1. I made a dashboard which includes a control visualization, an histogram, a pie and a discover/search table. I can export to csv the pie and histogram data from the corresponding iframe, but… --- ## [Unable to post data into ElasticSearch from Jmeter using Backend listeners](https://discuss.elastic.co/t/unable-to-post-data-into-elasticsearch-from-jmeter-using-backend-listeners/216985)
**Author:** [@sGhosh86](https://discuss.elastic.co/u/sGhosh86)\ **Replies:** 0\ **Last updated:** [January 29, 2020, 11:06am UTC](https://discuss.elastic.co/t/unable-to-post-data-into-elasticsearch-from-jmeter-using-backend-listeners/216985 "2020-01-29T11:06:40Z")
Hi, I am facing an issue while trying to post Jmeter data into ElasticSearch using Backend listener. Initially I had done PoC on local system where everything (JMeter, ElasticSearch, Kibana, Grafana etc.) were in my loc… --- ## [Countries Map Kibana](https://discuss.elastic.co/t/countries-map-kibana/216366)
**Author:** [@jamesyone](https://discuss.elastic.co/u/jamesyone)\ **Replies:** 3\ **Last updated:** [January 29, 2020, 10:57am UTC](https://discuss.elastic.co/t/countries-map-kibana/216366 "2020-01-29T10:57:47Z")
Hello, I am trying to use the Region Map for Kibana, but Im having a hard time. It seems that my data terms has the countries listed in lower case letters, while the join field is in Upper Case letters. Please Help!!… --- ## [\[kibana7.5\] Kibana plugin generator](https://discuss.elastic.co/t/kibana7-5-kibana-plugin-generator/215893)
**Author:** [@kwang\_hee\_Han](https://discuss.elastic.co/u/kwang_hee_Han)\ **Replies:** 3\ **Last updated:** [January 29, 2020, 10:56am UTC](https://discuss.elastic.co/t/kibana7-5-kibana-plugin-generator/215893 "2020-01-29T10:56:44Z")
Hello, I use Kibana 7.5 and make kiban plugin using " \[kbn-plugin-generator\] . (https://github.com/elastic/kibana/tree/master/packages/kbn-plugin-generator) I checked manual kibana 7.5 - visualization factory. https://… --- ## [How to do mathematic operations on metric of unique count of fieldname.keyword?](https://discuss.elastic.co/t/how-to-do-mathematic-operations-on-metric-of-unique-count-of-fieldname-keyword/216392)
**Author:** [@sourav](https://discuss.elastic.co/u/sourav)\ **Replies:** 4\ **Last updated:** [January 29, 2020, 10:56am UTC](https://discuss.elastic.co/t/how-to-do-mathematic-operations-on-metric-of-unique-count-of-fieldname-keyword/216392 "2020-01-29T10:56:16Z")
need to do math operations on the metric --- ## [Unable to order by top hits results](https://discuss.elastic.co/t/unable-to-order-by-top-hits-results/216530)
**Author:** [@tomeri](https://discuss.elastic.co/u/tomeri)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 10:54am UTC](https://discuss.elastic.co/t/unable-to-order-by-top-hits-results/216530 "2020-01-29T10:54:15Z")
Hi guys, I'm trying to create a pie chart that will show the most recent docs using the Top Hit aggregation, then aggregate them by some field and sort them by the results of the Top Hit. Here's what I did: As yo… --- ## [Kibana Discover page doesn't show the data after updating the index pattern](https://discuss.elastic.co/t/kibana-discover-page-doesnt-show-the-data-after-updating-the-index-pattern/216717)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 3\ **Last updated:** [January 29, 2020, 10:52am UTC](https://discuss.elastic.co/t/kibana-discover-page-doesnt-show-the-data-after-updating-the-index-pattern/216717 "2020-01-29T10:52:46Z")
Issue: Updating the index pattern to include the new fields from other indices doesn't now show their data on Kibana discover page. Steps to replicate: index error-codes-test vs Index error-codes-final have slightly… --- ## [Watchers Actions Send Field Value](https://discuss.elastic.co/t/watchers-actions-send-field-value/216424)
**Author:** [@Andrey\_Nazim](https://discuss.elastic.co/u/Andrey_Nazim)\ **Replies:** 1\ **Last updated:** [January 29, 2020, 10:30am UTC](https://discuss.elastic.co/t/watchers-actions-send-field-value/216424 "2020-01-29T10:30:24Z")
How can I send a field value in the watchers' actions (pager duty notifications)? For example: This one works and return number of total hits: "description":"Total Hits # {{ctx.payload.hits.total}}" But I want to ge… --- ## [Question about terms join](https://discuss.elastic.co/t/question-about-terms-join/215511)
**Author:** [@flaviogoncalves](https://discuss.elastic.co/u/flaviogoncalves)\ **Replies:** 1\ **Last updated:** [January 29, 2020, 10:21am UTC](https://discuss.elastic.co/t/question-about-terms-join/215511 "2020-01-29T10:21:58Z")
I´m having and issue with terms join in Kibana for a map. Even with the exactly same term, (actually a code with 15 digits) in both index in some areas the map does not highlight. The map sector do not activate for c… --- ## [Histogram graph no showing in Discover view/module](https://discuss.elastic.co/t/histogram-graph-no-showing-in-discover-view-module/214848)
**Author:** [@sri](https://discuss.elastic.co/u/sri)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 10:18am UTC](https://discuss.elastic.co/t/histogram-graph-no-showing-in-discover-view-module/214848 "2020-01-29T10:18:14Z")
I keep getting this error "custom xDomain is invalid, custom minInterval is greater than computed minInterval" in browser when 'Auto' is selected a time period for the graph in discover view, but i can view the graph whe… --- ## [Logstash with puppet module and OpenJDK gives install error](https://discuss.elastic.co/t/logstash-with-puppet-module-and-openjdk-gives-install-error/216794)
**Author:** [@pw64](https://discuss.elastic.co/u/pw64)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 9:58am UTC](https://discuss.elastic.co/t/logstash-with-puppet-module-and-openjdk-gives-install-error/216794 "2020-01-29T09:58:07Z")
We just switched from Oracle Java to OpenJDK for licensing issues. The same Puppet code now results in an installation error: Notice: /Stage\[main\]/Logstash::Service/Exec\[logstash-system-install\]/returns: Unrecognized V… --- ## [How to fix signal red?](https://discuss.elastic.co/t/how-to-fix-signal-red/216945)
**Author:** [@Nobuo1106](https://discuss.elastic.co/u/Nobuo1106)\ **Replies:** 6\ **Last updated:** [January 29, 2020, 9:50am UTC](https://discuss.elastic.co/t/how-to-fix-signal-red/216945 "2020-01-29T09:50:51Z")
I am very new to Elastic. The project, which I was assigned, uses Elastic and worked without problem, but from a few days ago we could not be able to reach Elastic. When I command curl http://localhost:9200/\_cluster/… --- ## [How to use pagination per batch](https://discuss.elastic.co/t/how-to-use-pagination-per-batch/216940)
**Author:** [@Toshif](https://discuss.elastic.co/u/Toshif)\ **Replies:** 4\ **Last updated:** [January 29, 2020, 8:43am UTC](https://discuss.elastic.co/t/how-to-use-pagination-per-batch/216940 "2020-01-29T08:43:56Z")
Hello people, My query is retrieving 10000 records from elasticSearch in 1 hit. I used pagination (from & size) but its giving me only specified records. I want 10000 records but in a batch size of 50. (I am not able… --- ## [Logstash cef](https://discuss.elastic.co/t/logstash-cef/216957)
**Author:** [@Moe\_Hmaidan](https://discuss.elastic.co/u/Moe_Hmaidan)\ **Replies:** 1\ **Last updated:** [January 29, 2020, 8:28am UTC](https://discuss.elastic.co/t/logstash-cef/216957 "2020-01-29T08:28:42Z")
Good evening, I just started working with elk and I'm facing the issue of decoding/filter/split the cef file as you can see in the pic the CEF file contains some security alerts information which filter should i use t… --- ## [Time range in Kibana Visualization](https://discuss.elastic.co/t/time-range-in-kibana-visualization/216600)
**Author:** [@rk2020](https://discuss.elastic.co/u/rk2020)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 7:24am UTC](https://discuss.elastic.co/t/time-range-in-kibana-visualization/216600 "2020-01-29T07:24:35Z")
How can we plot time range over a running time on x-axis in Kibana Visualization? --- ## [Using analyzer defined in index leads not to the same result when using \_analyze API](https://discuss.elastic.co/t/using-analyzer-defined-in-index-leads-not-to-the-same-result-when-using-analyze-api/216834)
**Author:** [@itarch](https://discuss.elastic.co/u/itarch)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 7:19am UTC](https://discuss.elastic.co/t/using-analyzer-defined-in-index-leads-not-to-the-same-result-when-using-analyze-api/216834 "2020-01-29T07:19:30Z")
Hi, need some help please! I expect that A) and B) leads to the same result. However, in A), using the \_analayze API leads to what I expect. In B), defining "my\_analyzer" like i do in A) in "mytest01" index do not lea… --- ## [Unable to convert a column with Date and time format from string to date](https://discuss.elastic.co/t/unable-to-convert-a-column-with-date-and-time-format-from-string-to-date/216235)
**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\ **Replies:** 4\ **Last updated:** [January 29, 2020, 6:46am UTC](https://discuss.elastic.co/t/unable-to-convert-a-column-with-date-and-time-format-from-string-to-date/216235 "2020-01-29T06:46:43Z")
Hi... my csv file contains closedDate with only date(e.g: 9/3/2019) and createdDate with date and time(e.g: 9/4/2019 06:40). I'm able to convert "closedDate" field to date format but "createdDate" field is remaining as … --- ## [Add more than 3 sub-buckets in Histogram visualization](https://discuss.elastic.co/t/add-more-than-3-sub-buckets-in-histogram-visualization/216665)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 6:42am UTC](https://discuss.elastic.co/t/add-more-than-3-sub-buckets-in-histogram-visualization/216665 "2020-01-29T06:42:51Z")
Hi! I am using Kibana 7.0.1 and I want to make an Histogram with 4 "Split series" sub-buckets. When I am trying to add the 4th sub-bucket I have as option only "Split chart". Is that somehow possible? Thank you in ad… --- ## [Append nested object to exisiting nested field in elasticsearch](https://discuss.elastic.co/t/append-nested-object-to-exisiting-nested-field-in-elasticsearch/215696)
**Author:** [@Ram\_29](https://discuss.elastic.co/u/Ram_29)\ **Replies:** 1\ **Last updated:** [January 28, 2020, 9:41am UTC](https://discuss.elastic.co/t/append-nested-object-to-exisiting-nested-field-in-elasticsearch/215696 "2020-01-28T09:41:34Z")
I'm having nested object like below "appdata": { "type":"nested", "include\_in\_parent":true, "properties": { "accessType": { "type": "text", "norms": false, "fields": { "keyword": { "type": "keyword", "ignore\_a… --- ## [Multiple Logstash to a single Elasticsearch](https://discuss.elastic.co/t/multiple-logstash-to-a-single-elasticsearch/216764)
**Author:** [@Prajwal\_Bhusari](https://discuss.elastic.co/u/Prajwal_Bhusari)\ **Replies:** 3\ **Last updated:** [January 29, 2020, 5:08am UTC](https://discuss.elastic.co/t/multiple-logstash-to-a-single-elasticsearch/216764 "2020-01-29T05:08:50Z")
I had to make a log analyzer. My friend has created a same thing last year to analyze log using ELK stack but it take 30-40 mins for logstash processing in his project. Is there any way that I can use multiple Logstash i… --- ## [How to get percentage change of field values for two different time periods or differentiated by other field in visualizations](https://discuss.elastic.co/t/how-to-get-percentage-change-of-field-values-for-two-different-time-periods-or-differentiated-by-other-field-in-visualizations/216688)
**Author:** [@skt](https://discuss.elastic.co/u/skt)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 3:58am UTC](https://discuss.elastic.co/t/how-to-get-percentage-change-of-field-values-for-two-different-time-periods-or-differentiated-by-other-field-in-visualizations/216688 "2020-01-29T03:58:18Z")
I have requirement where I need to show percentage change of certain field values for two different time periods or differentiated by other field like runName. Basically, How to do arithmetic functions like difference on… --- ## [Avaya IP Office 500 R11 SMDR -\> Logstash](https://discuss.elastic.co/t/avaya-ip-office-500-r11-smdr-logstash/215340)
**Author:** [@Adrien\_Carlyle](https://discuss.elastic.co/u/Adrien_Carlyle)\ **Replies:** 3\ **Last updated:** [January 28, 2020, 11:09pm UTC](https://discuss.elastic.co/t/avaya-ip-office-500-r11-smdr-logstash/215340 "2020-01-28T23:09:03Z")
Just wanted to share my configuration with the community after refining it for the better part of a week. Being new to the ELK stack it took a bit of time to understand how to get tcp flows into the platform. There was… --- ## [Total Storage for Data Nodes](https://discuss.elastic.co/t/total-storage-for-data-nodes/216925)
**Author:** [@Jesbourne](https://discuss.elastic.co/u/Jesbourne)\ **Replies:** 0\ **Last updated:** [January 28, 2020, 10:33pm UTC](https://discuss.elastic.co/t/total-storage-for-data-nodes/216925 "2020-01-28T22:33:09Z")
I was watching the webinars on sizing, and they give this math equation to calculate Total Storage needed - Total Storage (GB) = Total Data (GB) \* (1 + 0.15 default Disk watermark threshold + 0.05 Margin of error) And i… --- ## [Unable to create correct visualization](https://discuss.elastic.co/t/unable-to-create-correct-visualization/216725)
**Author:** [@plisovyi](https://discuss.elastic.co/u/plisovyi)\ **Replies:** 2\ **Last updated:** [January 28, 2020, 10:18pm UTC](https://discuss.elastic.co/t/unable-to-create-correct-visualization/216725 "2020-01-28T22:18:15Z")
Hi I created an index in Elasticsearch using elasticsearch\_dsl python module. This is just sample data, and looks as follows: When I try to create a histogram, Kibana displays only rounded numbers. For instance, for … --- ## [How to change the Logstash console log timezone (UTC -\> localtime)](https://discuss.elastic.co/t/how-to-change-the-logstash-console-log-timezone-utc-localtime/216903)
**Author:** [@Gelinski](https://discuss.elastic.co/u/Gelinski)\ **Replies:** 1\ **Last updated:** [January 28, 2020, 10:03pm UTC](https://discuss.elastic.co/t/how-to-change-the-logstash-console-log-timezone-utc-localtime/216903 "2020-01-28T22:03:53Z")
I want change the timezone of Logstash console output (logs) to my localtime. Example: \[WARN \] 2020-01-28 18:30:06.611 \[Ruby-0-Thread-15: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch… --- ## [Parsing timestamps with two-digit offsets](https://discuss.elastic.co/t/parsing-timestamps-with-two-digit-offsets/216885)
**Author:** [@SpeedDaemon](https://discuss.elastic.co/u/SpeedDaemon)\ **Replies:** 1\ **Last updated:** [January 28, 2020, 10:00pm UTC](https://discuss.elastic.co/t/parsing-timestamps-with-two-digit-offsets/216885 "2020-01-28T22:00:38Z")
The date filter seems to be able to handle TZ names, or offsets formatted as -0600 or -06:00. Mine are 2020-01-24 15:11:30-06. I can't find anything in the date filter documentation on how to handle just a two-digit offs… --- ## [Compare three different fields from two different indices in a watcher](https://discuss.elastic.co/t/compare-three-different-fields-from-two-different-indices-in-a-watcher/216528)
**Author:** [@pierrejutard](https://discuss.elastic.co/u/pierrejutard)\ **Replies:** 1\ **Last updated:** [January 28, 2020, 9:47pm UTC](https://discuss.elastic.co/t/compare-three-different-fields-from-two-different-indices-in-a-watcher/216528 "2020-01-28T21:47:40Z")
Hello, I have two indice on elastic search and i would like to compare it on a watcher. I have from one index the spot field : "hits" : \[ { "\_index" : "mktdata-2020.01.25", "\_type" : "\_doc", "\_id" : "Ue883W8BBSmq… --- ## [Watcher source script problem /Index\_out\_of\_bounds\_exception](https://discuss.elastic.co/t/watcher-source-script-problem-index-out-of-bounds-exception/216909)
**Author:** [@pierrejutard](https://discuss.elastic.co/u/pierrejutard)\ **Replies:** 1\ **Last updated:** [January 28, 2020, 9:46pm UTC](https://discuss.elastic.co/t/watcher-source-script-problem-index-out-of-bounds-exception/216909 "2020-01-28T21:46:52Z")
Hello, I try to make a watcher where one field ("spot") from one indice ("mktdata-2020.01.28") will be compared from two fields ("lbound" and "ubound") from another indice ("price-request-2020.01.28") but i am stuck sin… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1658) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1660)