# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1722 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1723 --- ## [DrillDown Dashboards: Navigation to previous Dashboard](https://discuss.elastic.co/t/drilldown-dashboards-navigation-to-previous-dashboard/212139)
**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\ **Replies:** 1\ **Last updated:** [December 17, 2019, 7:56pm UTC](https://discuss.elastic.co/t/drilldown-dashboards-navigation-to-previous-dashboard/212139 "2019-12-17T19:56:50Z")
Hi all, We have a set of dashboards (All in Kibana) which goes like this: \[High-level Overview\] --\> \[Detailed Overview\] --\> \[Deep link\] We did all these using vega visualizations for these dashboards. All works well,… --- ## [Elastic SIEM - Adding more data](https://discuss.elastic.co/t/elastic-siem-adding-more-data/212154)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 1\ **Last updated:** [December 17, 2019, 7:44pm UTC](https://discuss.elastic.co/t/elastic-siem-adding-more-data/212154 "2019-12-17T19:44:27Z")
HI There, Iam Elastic's SIEM for security analysis, but I would like to know if can add other datas to SIEM app, for example there are many logs sources sends syslog to my logstash .Can I have those logs as well in my E… --- ## [Kibana 7.5](https://discuss.elastic.co/t/kibana-7-5/212127)
**Author:** [@rwr](https://discuss.elastic.co/u/rwr)\ **Replies:** 1\ **Last updated:** [December 17, 2019, 7:41pm UTC](https://discuss.elastic.co/t/kibana-7-5/212127 "2019-12-17T19:41:39Z")
why the logout button doesn't appear in kibana 7.5. Please anyone help .. --- ## [Download data from data table visualisation using python/link](https://discuss.elastic.co/t/download-data-from-data-table-visualisation-using-python-link/212124)
**Author:** [@ELK\_CL](https://discuss.elastic.co/u/ELK_CL)\ **Replies:** 1\ **Last updated:** [December 17, 2019, 7:21pm UTC](https://discuss.elastic.co/t/download-data-from-data-table-visualisation-using-python-link/212124 "2019-12-17T19:21:59Z")
Hi, Is there any way we can download the formatted data from the data table visualisation using python or via link ? Thanks --- ## [Clustering failed](https://discuss.elastic.co/t/clustering-failed/211911)
**Author:** [@epacke](https://discuss.elastic.co/u/epacke)\ **Replies:** 6\ **Last updated:** [December 17, 2019, 7:03pm UTC](https://discuss.elastic.co/t/clustering-failed/211911 "2019-12-17T19:03:48Z")
Dear experts I've had one elasticsearch server at home for a few months now and it's been working well for a few months. However, with an power outage I lost a few indices and looking around it seems like having a clust… --- ## [Sort in task char](https://discuss.elastic.co/t/sort-in-task-char/212090)
**Author:** [@Quach\_Phong](https://discuss.elastic.co/u/Quach_Phong)\ **Replies:** 1\ **Last updated:** [December 17, 2019, 6:56pm UTC](https://discuss.elastic.co/t/sort-in-task-char/212090 "2019-12-17T18:56:58Z")
Hello every body! Please help me sort 1,2,3....10,11,12! Kibana sort 1,11,12,2,3,4... (now) --- ## [Visualization / Dashboard error: Saved "field" parameter is now invalid](https://discuss.elastic.co/t/visualization-dashboard-error-saved-field-parameter-is-now-invalid/211934)
**Author:** [@Camilo\_Diaz](https://discuss.elastic.co/u/Camilo_Diaz)\ **Replies:** 2\ **Last updated:** [December 17, 2019, 6:53pm UTC](https://discuss.elastic.co/t/visualization-dashboard-error-saved-field-parameter-is-now-invalid/211934 "2019-12-17T18:53:32Z")
I have a clean install of Elastic stack + Filebeat Filetbeats 7.5 --\> Logstash --\> Elasticsearch 7.5 From Filebeats client I have loaded the Suricata Module and have manually loaded the ingest pipelines (all completed … --- ## [Range output from Elastic query search](https://discuss.elastic.co/t/range-output-from-elastic-query-search/212196)
**Author:** [@njaggi](https://discuss.elastic.co/u/njaggi)\ **Replies:** 3\ **Last updated:** [December 17, 2019, 6:44pm UTC](https://discuss.elastic.co/t/range-output-from-elastic-query-search/212196 "2019-12-17T18:44:05Z")
I have to query Elastic search to return time ranges My data is {"run-id": "xxx", "name": "unknown", "event" : \[{"value": "event name1"}\], "epoch" : 1576530536} {"run-id": "xxx", "name": "unknown", "event" : \[{"value"… --- ## [Performance problem within add a new object to a nested array](https://discuss.elastic.co/t/performance-problem-within-add-a-new-object-to-a-nested-array/212195)
**Author:** [@Sergey\_Oprya](https://discuss.elastic.co/u/Sergey_Oprya)\ **Replies:** 3\ **Last updated:** [December 17, 2019, 6:28pm UTC](https://discuss.elastic.co/t/performance-problem-within-add-a-new-object-to-a-nested-array/212195 "2019-12-17T18:28:55Z")
Hi Everyone, I have a performance issue when I try to add object to a nested array field. If this array has ~ 0-500 objects performance is ok but when I add more and more the performance is going down quite fast. Eventu… --- ## [Case insensitive search by default](https://discuss.elastic.co/t/case-insensitive-search-by-default/212211)
**Author:** [@kevin.neumann](https://discuss.elastic.co/u/kevin.neumann)\ **Replies:** 0\ **Last updated:** [December 17, 2019, 6:11pm UTC](https://discuss.elastic.co/t/case-insensitive-search-by-default/212211 "2019-12-17T18:11:03Z")
So it's my understanding that we can just use a custom normalizer to provide lowercase search for a given keyword. Is there a way to make this the default for all new keywords that are added, including those automaticall… --- ## [Scroll cost (how to tune the \`search.max\_open\_scroll\_context\` limit)](https://discuss.elastic.co/t/scroll-cost-how-to-tune-the-search-max-open-scroll-context-limit/212210)
**Author:** [@liev](https://discuss.elastic.co/u/liev)\ **Replies:** 0\ **Last updated:** [December 17, 2019, 6:01pm UTC](https://discuss.elastic.co/t/scroll-cost-how-to-tune-the-search-max-open-scroll-context-limit/212210 "2019-12-17T18:01:38Z")
Hi, While preparing a migration to ES v7.5 I've seen that the limit of max\_open\_scroll\_context defaults to 500. What metrics should I monitor before considering raising this limit? How can I monitor the "cost" of my scr… --- ## [Metricbeat AWS Module - Which metrics are pulled?](https://discuss.elastic.co/t/metricbeat-aws-module-which-metrics-are-pulled/212175)
**Author:** [@cesarlino](https://discuss.elastic.co/u/cesarlino)\ **Replies:** 2\ **Last updated:** [December 17, 2019, 5:46pm UTC](https://discuss.elastic.co/t/metricbeat-aws-module-which-metrics-are-pulled/212175 "2019-12-17T17:46:46Z")
Hi, We want to setup AWS module to collect only RDS and S3 metrics with the following frequency: RDS: every minute S3: once a day AWS charges by the number of metrics requested. It is not clear how many and which met… --- ## [MongoDB full text search vs Elasticsearch](https://discuss.elastic.co/t/mongodb-full-text-search-vs-elasticsearch/212143)
**Author:** [@wozza.lowe](https://discuss.elastic.co/u/wozza.lowe)\ **Replies:** 3\ **Last updated:** [December 17, 2019, 5:28pm UTC](https://discuss.elastic.co/t/mongodb-full-text-search-vs-elasticsearch/212143 "2019-12-17T17:28:44Z")
In light of the the advancing full text search feature in MongoDB, from a strategic perspective Elasticsearch is starting to slip away from our technology set. I was just wondering if there is still a strong argument fo… --- ## [I\_o\_exception Invalid argument error when taking snapshot](https://discuss.elastic.co/t/i-o-exception-invalid-argument-error-when-taking-snapshot/212144)
**Author:** [@ion\_popa](https://discuss.elastic.co/u/ion_popa)\ **Replies:** 5\ **Last updated:** [December 17, 2019, 5:07pm UTC](https://discuss.elastic.co/t/i-o-exception-invalid-argument-error-when-taking-snapshot/212144 "2019-12-17T17:07:10Z")
Hello, I'm getting the following error when trying to take a snapshot of an Elasticsearch cluster. { "error" : { "root\_cause" : \[ { "type" : "snapshot\_creation\_exception", "reason" : "\[backup:snapshot\_2/abcjahdki… --- ## [Forcemerge concerns](https://discuss.elastic.co/t/forcemerge-concerns/211838)
**Author:** [@FabioRodrigues](https://discuss.elastic.co/u/FabioRodrigues)\ **Replies:** 8\ **Last updated:** [December 17, 2019, 4:56pm UTC](https://discuss.elastic.co/t/forcemerge-concerns/211838 "2019-12-17T16:56:22Z")
Hi! I need to reduce de size of a database by shrinking one field from a document. The problem is: the size of this database is huge. Also, I need to not reduce the performance of it significantly. I'm wondering if I ca… --- ## [Index alias functionality](https://discuss.elastic.co/t/index-alias-functionality/211524)
**Author:** [@John\_Guzman](https://discuss.elastic.co/u/John_Guzman)\ **Replies:** 2\ **Last updated:** [December 17, 2019, 4:43pm UTC](https://discuss.elastic.co/t/index-alias-functionality/211524 "2019-12-17T16:43:02Z")
Hello ES Community! I want to know what happens when i make a search on an Index Alias ​​with a time filter. Will it bring me back only the indexes that contains that data to search on them or it will bring me back all … --- ## [7.4.2 SearchHits not supporting elasticsearch-sql 6.3.0.0](https://discuss.elastic.co/t/7-4-2-searchhits-not-supporting-elasticsearch-sql-6-3-0-0/212164)
**Author:** [@rajesh\_elasticsearch](https://discuss.elastic.co/u/rajesh_elasticsearch)\ **Replies:** 1\ **Last updated:** [December 17, 2019, 4:11pm UTC](https://discuss.elastic.co/t/7-4-2-searchhits-not-supporting-elasticsearch-sql-6-3-0-0/212164 "2019-12-17T16:11:47Z")
Hi, I am using elasticsearch 7.4.2 and I am using transport client as well as REST api. In my use case I need to work with joining the index, so I am using elasticsearch-sql-6.3.0.0.jar. And I am using org.elasticsear… --- ## [How to aggregate by doc\_count?](https://discuss.elastic.co/t/how-to-aggregate-by-doc-count/212106)
**Author:** [@Sergio\_Blanco](https://discuss.elastic.co/u/Sergio_Blanco)\ **Replies:** 8\ **Last updated:** [December 17, 2019, 4:15pm UTC](https://discuss.elastic.co/t/how-to-aggregate-by-doc-count/212106 "2019-12-17T16:15:22Z")
I want to aggregate the result of other aggregation using Elasticsearch. I have created the first aggregation I need: "size":0, "query": { "bool": { "filter": { "match" : {"type":… --- ## [Pipeline convert all sub-fields](https://discuss.elastic.co/t/pipeline-convert-all-sub-fields/212155)
**Author:** [@ridago](https://discuss.elastic.co/u/ridago)\ **Replies:** 1\ **Last updated:** [December 17, 2019, 3:26pm UTC](https://discuss.elastic.co/t/pipeline-convert-all-sub-fields/212155 "2019-12-17T15:26:49Z")
Is there a way to setup a pipeline to run auto convert on all sub-fields of a container? Basically I would like to do something like (had wildcards been supported): "processors": \[ { "convert": { "field": "parent.\*… --- ## [Elasticsearch Retrieve token\_count standard value from search](https://discuss.elastic.co/t/elasticsearch-retrieve-token-count-standard-value-from-search/211161)
**Author:** [@Diogo\_Correia](https://discuss.elastic.co/u/Diogo_Correia)\ **Replies:** 2\ **Last updated:** [December 17, 2019, 2:51pm UTC](https://discuss.elastic.co/t/elasticsearch-retrieve-token-count-standard-value-from-search/211161 "2019-12-17T14:51:45Z")
Hi! I am trying to add a new field into the ElasticSearch index to analyze and store the number of words a text has. { "settings": { "analysis": { "analyzer": { "character\_analyzer": { … --- ## [REST API using logstash](https://discuss.elastic.co/t/rest-api-using-logstash/212177)
**Author:** [@akhilsharma.in](https://discuss.elastic.co/u/akhilsharma.in)\ **Replies:** 0\ **Last updated:** [December 17, 2019, 2:51pm UTC](https://discuss.elastic.co/t/rest-api-using-logstash/212177 "2019-12-17T14:51:18Z")
Hi Team, I'm executing REST API calls via logstash. I'm using http\_poller to generate authentication token in the input block. Then I'm using http filter plugin to fetch data. However, we've seen that it does not always… --- ## [Change indices settings in Metric app](https://discuss.elastic.co/t/change-indices-settings-in-metric-app/211769)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 3\ **Last updated:** [December 17, 2019, 2:50pm UTC](https://discuss.elastic.co/t/change-indices-settings-in-metric-app/211769 "2019-12-17T14:50:28Z")
Hi, we have a lot of servers due to several kubernets environments, that are monitored by the Elastic stack. Due to this fact, I often get an error "Failed to load datasources" (Response 504) when opening the metrics or… --- ## [Dashboard only role shows all applications in the menu](https://discuss.elastic.co/t/dashboard-only-role-shows-all-applications-in-the-menu/211722)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 3\ **Last updated:** [December 17, 2019, 2:34pm UTC](https://discuss.elastic.co/t/dashboard-only-role-shows-all-applications-in-the-menu/211722 "2019-12-17T14:34:36Z")
Hi, I created a new role called test which has been mapped to role abc which has been created as a dedicated Dashboard group. I mapped it to AD group. This group is suppose to show only Dashboard menu in Kibana with Rea… --- ## [Unique count of host based on system cpu pct and system memory pct](https://discuss.elastic.co/t/unique-count-of-host-based-on-system-cpu-pct-and-system-memory-pct/211770)
**Author:** [@aparnababu](https://discuss.elastic.co/u/aparnababu)\ **Replies:** 5\ **Last updated:** [December 17, 2019, 2:32pm UTC](https://discuss.elastic.co/t/unique-count-of-host-based-on-system-cpu-pct-and-system-memory-pct/211770 "2019-12-17T14:32:29Z")
i want to classify the server as healthy,warning and bad health server based on range.Suppose if my system.cpu.used.pct and system.memory.actual.used.pct is \<40 then it falls under healthy server if it falls between 40 t… --- ## [Converting SQL query to Lucence query grafana](https://discuss.elastic.co/t/converting-sql-query-to-lucence-query-grafana/211784)
**Author:** [@mindbee](https://discuss.elastic.co/u/mindbee)\ **Replies:** 1\ **Last updated:** [December 17, 2019, 2:20pm UTC](https://discuss.elastic.co/t/converting-sql-query-to-lucence-query-grafana/211784 "2019-12-17T14:20:29Z")
Hi, I can get the data required using Kibana devtool using sql query. POST \_sql?format=txt { "query": "SELECT transactionID.keyword, max(responseTime) FROM "test-logs" GROUP BY transactionID.keyword HAVING count(tr… --- ## [Visualisation from Kibana using SQL query](https://discuss.elastic.co/t/visualisation-from-kibana-using-sql-query/211676)
**Author:** [@mindbee](https://discuss.elastic.co/u/mindbee)\ **Replies:** 2\ **Last updated:** [December 17, 2019, 2:15pm UTC](https://discuss.elastic.co/t/visualisation-from-kibana-using-sql-query/211676 "2019-12-17T14:15:51Z")
Hi, I have results correct getting from SQL query using devtools of Kibana. But not sure how I can translate into the visualization of kibana. Below are the things done using devtool: POST \_sql?format=txt { "query":… --- ## [Scripted upsert fails](https://discuss.elastic.co/t/scripted-upsert-fails/149078)
**Author:** [@Nenad](https://discuss.elastic.co/u/Nenad)\ **Replies:** 1\ **Last updated:** [December 17, 2019, 2:06pm UTC](https://discuss.elastic.co/t/scripted-upsert-fails/149078 "2019-12-17T14:06:03Z")
I have below output: output { elasticsearch { index =\> "meet2" document\_type =\> "seen" document\_id =\> "%{member\_a}" hosts =\> \["s1:9200"\] # doc\_as\_upsert =\> true action =\> "update" scripted\_upsert =\> true script… --- ## [Logstash for AWS security events?](https://discuss.elastic.co/t/logstash-for-aws-security-events/212173)
**Author:** [@mrcsmonteiro](https://discuss.elastic.co/u/mrcsmonteiro)\ **Replies:** 0\ **Last updated:** [December 17, 2019, 2:05pm UTC](https://discuss.elastic.co/t/logstash-for-aws-security-events/212173 "2019-12-17T14:05:55Z")
Hi All, I am new to Elasticsearch, and I have been assigned to a task to ingest AWS (CloudTrail, Config, and GuardDuty logs) from S3 buckets to Elastic Cloud for Security Compliance. This is the initial scope for Elasti… --- ## [Clustering data consistency question](https://discuss.elastic.co/t/clustering-data-consistency-question/212165)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [December 17, 2019, 1:41pm UTC](https://discuss.elastic.co/t/clustering-data-consistency-question/212165 "2019-12-17T13:41:01Z")
Hi, I have a cluster of 3 nodes where each node has all roles (master, data, ingest). I use logstash which pushes the data to elasticsearch. When is the ack sent to logstash? After the data has been replicated or just… --- ## [Cannot visualize windows server counters](https://discuss.elastic.co/t/cannot-visualize-windows-server-counters/212168)
**Author:** [@thomas7467](https://discuss.elastic.co/u/thomas7467)\ **Replies:** 0\ **Last updated:** [December 17, 2019, 1:37pm UTC](https://discuss.elastic.co/t/cannot-visualize-windows-server-counters/212168 "2019-12-17T13:37:08Z")
Hi all, I've just installed 7.5.0 elastic and Kibana on an Bionic ubuntu server. I've installed 7.5.0 metricbeats on a windows server Dataflow seems to be OK on elastic side, docs count increase normally in Kibana in… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1721) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1723)