# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1765 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1766 --- ## [Logtstash not recognizing the columns created in Geojson format](https://discuss.elastic.co/t/logtstash-not-recognizing-the-columns-created-in-geojson-format/208832)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 0\ **Last updated:** [November 21, 2019, 8:47am UTC](https://discuss.elastic.co/t/logtstash-not-recognizing-the-columns-created-in-geojson-format/208832 "2019-11-21T08:47:22Z")
Hi, I have fields like A\_Latitude, A\_Longitude, B\_Latitude and B\_Longitude. I would like to make use of this data and create Maps in Kibana. The problem is data is getting into elasticsearch, but the gejson columns creat… --- ## [Getting the count of filtered buckets in elasticsearch](https://discuss.elastic.co/t/getting-the-count-of-filtered-buckets-in-elasticsearch/209000)
**Author:** [@Rahul\_Jhawar1](https://discuss.elastic.co/u/Rahul_Jhawar1)\ **Replies:** 0\ **Last updated:** [November 22, 2019, 3:34am UTC](https://discuss.elastic.co/t/getting-the-count-of-filtered-buckets-in-elasticsearch/209000 "2019-11-22T03:34:22Z")
Hi,I want to get the count of the buckets array after applying bucket\_filter in the aggregated bucket.This is how my document looks like- { "cdid" : "CD1234", "transactionid" : "000000261119929", … --- ## [Sort fieldname](https://discuss.elastic.co/t/sort-fieldname/208709)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 2\ **Last updated:** [November 22, 2019, 3:31am UTC](https://discuss.elastic.co/t/sort-fieldname/208709 "2019-11-22T03:31:23Z")
Are there some mechanism how we can sort the fields in the query? Same as below. { field1 =\> "" field2 =\> "" field3 =\> "" } In sql command, it is equivalent to "Order by field1,field2,field3" --- ## [Grok pattern query for access logs](https://discuss.elastic.co/t/grok-pattern-query-for-access-logs/208413)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 9\ **Last updated:** [November 22, 2019, 1:58am UTC](https://discuss.elastic.co/t/grok-pattern-query-for-access-logs/208413 "2019-11-22T01:58:56Z")
I am using the below query to extract IP address, timestamp and such from an access log like this below: 192.168.10.182 - - - 18/Nov/2019:13:42:14 -0800 "GET /xxxx-xxxx-xxxx/xxxxxxxxxx/xxx/xxxx/xxxxxxxxxx HTTP/1.1" 200 … --- ## [TSVB multiple axis](https://discuss.elastic.co/t/tsvb-multiple-axis/208218)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 4\ **Last updated:** [November 22, 2019, 1:08am UTC](https://discuss.elastic.co/t/tsvb-multiple-axis/208218 "2019-11-22T01:08:43Z")
4 data are shown in TSVB. Two of them(current error, last hour error) added the y-axis separately. like this... 'current error' and 'last hour error' use the same format y-axis. Can I have two y-axes appear only … --- ## [Failed to read pipelines yaml file even when in correct folder](https://discuss.elastic.co/t/failed-to-read-pipelines-yaml-file-even-when-in-correct-folder/208987)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 11:46pm UTC](https://discuss.elastic.co/t/failed-to-read-pipelines-yaml-file-even-when-in-correct-folder/208987 "2019-11-21T23:46:04Z")
Hi, My pipelines.yml is in the logstash/config folder and I still get this error- Settings ------------------- \[2019-11-21T13:50:15,239\]\[DEBUG\]\[logstash.config.source.multilocal\] Reading pipeline configurations from YA… --- ## [Is there a disadvantage to setting a large client\_inactivity\_timeout?](https://discuss.elastic.co/t/is-there-a-disadvantage-to-setting-a-large-client-inactivity-timeout/208789)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 4\ **Last updated:** [November 21, 2019, 11:35pm UTC](https://discuss.elastic.co/t/is-there-a-disadvantage-to-setting-a-large-client-inactivity-timeout/208789 "2019-11-21T23:35:50Z")
I have a set of logs that sometimes only sends once every 3 days. Is it okay if I set the client\_inactivity\_timeout =\> 300000? What is the advantage to setting this value to a lower vs a higher value? Can I set it to 999… --- ## [Issues Installing Amazon\_ES Plug In in Windows](https://discuss.elastic.co/t/issues-installing-amazon-es-plug-in-in-windows/208794)
**Author:** [@mcburn13](https://discuss.elastic.co/u/mcburn13)\ **Replies:** 1\ **Last updated:** [November 21, 2019, 9:57pm UTC](https://discuss.elastic.co/t/issues-installing-amazon-es-plug-in-in-windows/208794 "2019-11-21T21:57:35Z")
Trying to plug in my IAM creds to get through an ES access policy in AWS, and getting an error that can't find the amazon\_es plugin. So, there seems to be very little specific information on installing this plug in on Wi… --- ## [Is there a way to merge columns in discover view to occupy less horizontal space?](https://discuss.elastic.co/t/is-there-a-way-to-merge-columns-in-discover-view-to-occupy-less-horizontal-space/208969)
**Author:** [@nielarshi](https://discuss.elastic.co/u/nielarshi)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 9:52pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-merge-columns-in-discover-view-to-occupy-less-horizontal-space/208969 "2019-11-21T21:52:17Z")
I have a case when a lot of data is spread horizontally and can be just reduced if combined in one column. For ex: Any thoughts on how data could be shown with less white spaces in the discover view? The keywords PAS… --- ## [Multi words synonym query issues](https://discuss.elastic.co/t/multi-words-synonym-query-issues/208679)
**Author:** [@jasoncodingguru](https://discuss.elastic.co/u/jasoncodingguru)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 9:31pm UTC](https://discuss.elastic.co/t/multi-words-synonym-query-issues/208679 "2019-11-21T21:31:10Z")
Hi guys, I am having a challenge with multi words synonym related queries. E.g I have the following format of synonym: Spanish onion, red onion I have a document which contains words “onion red”. When I use multi matc… --- ## [View surrounding documents is losing the filter](https://discuss.elastic.co/t/view-surrounding-documents-is-losing-the-filter/208976)
**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\ **Replies:** 3\ **Last updated:** [November 21, 2019, 9:21pm UTC](https://discuss.elastic.co/t/view-surrounding-documents-is-losing-the-filter/208976 "2019-11-21T21:21:46Z")
I have a filter in the Discoverer view that is pinned. When I click the 'view surrounding documents' link i'm taking to the context view but the pinned filters are lost. I'm using Kibana 7.4.2. I had a similar issue w… --- ## [A Question on whether to use a Nested Datatype](https://discuss.elastic.co/t/a-question-on-whether-to-use-a-nested-datatype/208394)
**Author:** [@matthew.whill](https://discuss.elastic.co/u/matthew.whill)\ **Replies:** 4\ **Last updated:** [November 21, 2019, 8:36pm UTC](https://discuss.elastic.co/t/a-question-on-whether-to-use-a-nested-datatype/208394 "2019-11-21T20:36:46Z")
Hello All. I wanted to ask for peoples thoughts around whether to use nested datatypes in a particular scenario. The scenario: I am wanting to store into an index the contents of files and each file contains reference… --- ## [Can't take Elastic 6.8.0 snapshot](https://discuss.elastic.co/t/cant-take-elastic-6-8-0-snapshot/208171)
**Author:** [@tfe2012](https://discuss.elastic.co/u/tfe2012)\ **Replies:** 3\ **Last updated:** [November 21, 2019, 8:18pm UTC](https://discuss.elastic.co/t/cant-take-elastic-6-8-0-snapshot/208171 "2019-11-21T20:18:10Z")
Hi, Try to make a snapshot of the cluster PUT /\_snapshot/my\_backup/pre\_prod\_2 It works for 3-4 hours and after struggling on this state: "snapshot" : "pre\_prod\_2", "repository" : "my\_backup", "uuid" : "YhlA8Ke9Rlu34… --- ## [Where the conditional goes?](https://discuss.elastic.co/t/where-the-conditional-goes/208960)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 9\ **Last updated:** [November 21, 2019, 8:07pm UTC](https://discuss.elastic.co/t/where-the-conditional-goes/208960 "2019-11-21T20:07:42Z")
where in the file a conditional that check if a field contains certain string, and if contains it, drop the log, goes? it goes after the grok? it contains the grok? it goes in the output? The following code doesnt work… --- ## [Kinana 7.0 - how to create a histogram chart based on latest event in a httpsessionID](https://discuss.elastic.co/t/kinana-7-0-how-to-create-a-histogram-chart-based-on-latest-event-in-a-httpsessionid/208479)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 1\ **Last updated:** [November 21, 2019, 7:49pm UTC](https://discuss.elastic.co/t/kinana-7-0-how-to-create-a-histogram-chart-based-on-latest-event-in-a-httpsessionid/208479 "2019-11-21T19:49:13Z")
Hi Team, I have an requirement to create histogram chart based on latest events in a httpsessionID. There's multiple events based on a httpsessionID. Sample events like below. "@timestamp",cn,ci,si,ui,module,fa,at,if1… --- ## [Query string with AND operator in nested query not working. Any idea?](https://discuss.elastic.co/t/query-string-with-and-operator-in-nested-query-not-working-any-idea/208630)
**Author:** [@Devang\_Prajapati](https://discuss.elastic.co/u/Devang_Prajapati)\ **Replies:** 1\ **Last updated:** [November 21, 2019, 7:28pm UTC](https://discuss.elastic.co/t/query-string-with-and-operator-in-nested-query-not-working-any-idea/208630 "2019-11-21T19:28:10Z")
I want to get the document in which nested child contains both words Mifune AND Miller-Meteor. For more detail of nested, I've gone through Nested query | Elasticsearch Guide \[8.11\] | Elastic here are the mappings { … --- ## [Working with inconsistent logs](https://discuss.elastic.co/t/working-with-inconsistent-logs/208968)
**Author:** [@Hyperion0](https://discuss.elastic.co/u/Hyperion0)\ **Replies:** 0\ **Last updated:** [November 21, 2019, 7:23pm UTC](https://discuss.elastic.co/t/working-with-inconsistent-logs/208968 "2019-11-21T19:23:52Z")
This night be a silly question but. Is there a reasonable way to handle inconsistencies in text logs? For example I have a text log, the bulk of witch is well formed but at certain points carriage returns are inserted i… --- ## [EDR in parallel with AV](https://discuss.elastic.co/t/edr-in-parallel-with-av/208946)
**Author:** [@p3464782](https://discuss.elastic.co/u/p3464782)\ **Replies:** 1\ **Last updated:** [November 21, 2019, 7:16pm UTC](https://discuss.elastic.co/t/edr-in-parallel-with-av/208946 "2019-11-21T19:16:38Z")
Is it technically possible to run an Endgame or Elastic Endpoint Security agent in parallel with an existing AV/EPP solution like ESET, or does the agent conflicts with any AV running on the same system? --- ## [GROK ASA Issues](https://discuss.elastic.co/t/grok-asa-issues/208914)
**Author:** [@JPetrucka](https://discuss.elastic.co/u/JPetrucka)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 6:55pm UTC](https://discuss.elastic.co/t/grok-asa-issues/208914 "2019-11-21T18:55:17Z")
Hey everyone, I am a logstash/grok beginner and would love some help parsing my syslog from our ASA to create some tags. I have tried both the grok debugger on herokuapp and the dev tools in Kibana without luck. My sysl… --- ## [How to revive connection?](https://discuss.elastic.co/t/how-to-revive-connection/208931)
**Author:** [@ishv](https://discuss.elastic.co/u/ishv)\ **Replies:** 11\ **Last updated:** [November 21, 2019, 6:00pm UTC](https://discuss.elastic.co/t/how-to-revive-connection/208931 "2019-11-21T18:00:08Z")
I'm trying to set up Kibana and ElasticSearch in the container but continuously receive that error message: Unable to revive connection: http://maperclip-elasticsearch:9200/" This is how my docker-compose.yml looks lik… --- ## [Frequent young GC loop crashing nodes](https://discuss.elastic.co/t/frequent-young-gc-loop-crashing-nodes/208955)
**Author:** [@adam.wight](https://discuss.elastic.co/u/adam.wight)\ **Replies:** 0\ **Last updated:** [November 21, 2019, 5:58pm UTC](https://discuss.elastic.co/t/frequent-young-gc-loop-crashing-nodes/208955 "2019-11-21T17:58:30Z")
Running ES 6.8.4 on a cluster with heavy search activity, for the past few weeks we're seeing nodes go into a continuous garbage collection loop, and eventually crash the ES process. Is triggered by spike in search acti… --- ## [Agent deployments multi tenancy](https://discuss.elastic.co/t/agent-deployments-multi-tenancy/208948)
**Author:** [@p3464782](https://discuss.elastic.co/u/p3464782)\ **Replies:** 0\ **Last updated:** [November 21, 2019, 5:46pm UTC](https://discuss.elastic.co/t/agent-deployments-multi-tenancy/208948 "2019-11-21T17:46:21Z")
Will the Elastic Endpoint Security cloud environment have multi-tenancy capabilities to group agents within multiple organizations/networks, for example within Kibana? --- ## [Snapshots are failing in ECE minio](https://discuss.elastic.co/t/snapshots-are-failing-in-ece-minio/207553)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 9\ **Last updated:** [November 21, 2019, 5:32pm UTC](https://discuss.elastic.co/t/snapshots-are-failing-in-ece-minio/207553 "2019-11-21T17:32:28Z")
Hi there, I have integrated a repository with minio. After I recognized that elasticsearch 6.x was not able to resolve hostnames I changed to IP. Elasticsearch 7.x worked fine for a while. I use version 2.4.1 and updat… --- ## [Auto Detect Date/Time](https://discuss.elastic.co/t/auto-detect-date-time/207418)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 5:30pm UTC](https://discuss.elastic.co/t/auto-detect-date-time/207418 "2019-11-21T17:30:10Z")
Hello! So I have records coming in CSV format and they are parsed out properly. One issue is that a few of the fields have a time or date in them. That time/date is accurate when I look at the raw data but after the re… --- ## [How to make elasticsearch synchronous call in ActionListner response](https://discuss.elastic.co/t/how-to-make-elasticsearch-synchronous-call-in-actionlistner-response/208945)
**Author:** [@developer\_apk](https://discuss.elastic.co/u/developer_apk)\ **Replies:** 0\ **Last updated:** [November 21, 2019, 5:23pm UTC](https://discuss.elastic.co/t/how-to-make-elasticsearch-synchronous-call-in-actionlistner-response/208945 "2019-11-21T17:23:37Z")
I am using Elasticsearch java high level rest client and synchronous API calls are hanging forever in onResponse method public String indexDocument(String document) throws Exception { IndexRequest indexRequest = new Ind… --- ## [Kibana scripted field used in interactive control shows no data](https://discuss.elastic.co/t/kibana-scripted-field-used-in-interactive-control-shows-no-data/208934)
**Author:** [@jmcclure](https://discuss.elastic.co/u/jmcclure)\ **Replies:** 4\ **Last updated:** [November 21, 2019, 5:21pm UTC](https://discuss.elastic.co/t/kibana-scripted-field-used-in-interactive-control-shows-no-data/208934 "2019-11-21T17:21:23Z")
Hi, (Elastic stack version 6.7.1 on Centos 7.6 OS) I have a dashboard that utilizes a control visualization, which specifies a field that is defined in Kibana as a scripted field. I have document data going into Elast… --- ## [Reporting Options?](https://discuss.elastic.co/t/reporting-options/208080)
**Author:** [@awataszko](https://discuss.elastic.co/u/awataszko)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 5:13pm UTC](https://discuss.elastic.co/t/reporting-options/208080 "2019-11-21T17:13:58Z")
Has anyone came across any reporting solutions other than what you can do in Kibana, which is basically just a print screen poorly formatted in a PDF or PNG file. My issue is data tables that have scroll bars or more th… --- ## [How can I setup in Watcher to send out an email depend on the Search condition?](https://discuss.elastic.co/t/how-can-i-setup-in-watcher-to-send-out-an-email-depend-on-the-search-condition/208749)
**Author:** [@Shaw](https://discuss.elastic.co/u/Shaw)\ **Replies:** 4\ **Last updated:** [November 21, 2019, 5:15pm UTC](https://discuss.elastic.co/t/how-can-i-setup-in-watcher-to-send-out-an-email-depend-on-the-search-condition/208749 "2019-11-21T17:15:51Z")
Hi, In my Watcher, I setup a template below to send out an email base on the search condition, it works. However, I have different Indices and Tags that I want to put all together in one Watcher. For example, If Inde… --- ## [No cached mapping for this field (Elastic Cloud, APM)](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-elastic-cloud-apm/207116)
**Author:** [@insanity13](https://discuss.elastic.co/u/insanity13)\ **Replies:** 5\ **Last updated:** [November 21, 2019, 5:01pm UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-elastic-cloud-apm/207116 "2019-11-21T17:01:44Z")
I'm using Elastic Cloud v7.4.2 with APM (.NET Framework) and got a lot of warning fields in Kibana. Refresh Index does not helps --- ## [Options list in Controls-Visualization doesn't work properly with scripted field as type static lookup](https://discuss.elastic.co/t/options-list-in-controls-visualization-doesnt-work-properly-with-scripted-field-as-type-static-lookup/208882)
**Author:** [@marlich](https://discuss.elastic.co/u/marlich)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 5:00pm UTC](https://discuss.elastic.co/t/options-list-in-controls-visualization-doesnt-work-properly-with-scripted-field-as-type-static-lookup/208882 "2019-11-21T17:00:17Z")
Hello In my index pattern I have a field "categories.code\_a.keyword" of type string. Content can be values like 400, C01, A47, etc.. It must be possible to filter the codes via the visualization "option list". However,… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1764) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1766)