# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1776 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1777 --- ## [Creating bar graph based on count occurrences of keyword (text field)](https://discuss.elastic.co/t/creating-bar-graph-based-on-count-occurrences-of-keyword-text-field/205779)
**Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 4:06pm UTC](https://discuss.elastic.co/t/creating-bar-graph-based-on-count-occurrences-of-keyword-text-field/205779 "2019-11-18T16:06:09Z")
want to create a bar graph or even a pie graph based on a text field. This text field does say in ES that it is Aggregatable. There is the field name and then field name.keyword. (Home Type & Home Type.keyword) I have s… --- ## [Upgrading The Elastic Stack from 7.3 to 7.4](https://discuss.elastic.co/t/upgrading-the-elastic-stack-from-7-3-to-7-4/208347)
**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 3:59pm UTC](https://discuss.elastic.co/t/upgrading-the-elastic-stack-from-7-3-to-7-4/208347 "2019-11-18T15:59:53Z")
I am wanting to upgrade my 7.3 Elastic Stack to 7.4 But I'm not sure the best way to do it. I have a test 7.3 ELK system running on a Windows box I am going to experiment with before moving on the the production instanc… --- ## [Anotation on average values in Visual Builder](https://discuss.elastic.co/t/anotation-on-average-values-in-visual-builder/205769)
**Author:** [@rbeg](https://discuss.elastic.co/u/rbeg)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 3:48pm UTC](https://discuss.elastic.co/t/anotation-on-average-values-in-visual-builder/205769 "2019-11-18T15:48:47Z")
Hello, In visual builder I use time series to see the average of values over time. I want to put anotation if average value is less than an arbitrary value. Is it possible to do that in "anotation" ? For example, I h… --- ## [Ranking in count API](https://discuss.elastic.co/t/ranking-in-count-api/208342)
**Author:** [@woutermostard](https://discuss.elastic.co/u/woutermostard)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 3:38pm UTC](https://discuss.elastic.co/t/ranking-in-count-api/208342 "2019-11-18T15:38:56Z")
Does the count API perform any sorts of ranking? I thought that it wouldn't in order to improve performance but in the documentation it says that there is a min\_score parameter. if the count API does perform ranking, wha… --- ## [Translate filter is not working with yaml](https://discuss.elastic.co/t/translate-filter-is-not-working-with-yaml/207766)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [November 18, 2019, 3:31pm UTC](https://discuss.elastic.co/t/translate-filter-is-not-working-with-yaml/207766 "2019-11-18T15:31:58Z")
what am I missing here? ### Tranlate and define new field translate { field =\> "\[site\_code\]" dictionary\_path =\> "/tmp/network\_site\_name.yaml" destination =\> "\[site\_name\]" } ### Tranlate and defi… --- ## [Delete\_by\_query vs index journalier](https://discuss.elastic.co/t/delete-by-query-vs-index-journalier/207931)
**Author:** [@vdsm](https://discuss.elastic.co/u/vdsm)\ **Replies:** 4\ **Last updated:** [November 18, 2019, 3:29pm UTC](https://discuss.elastic.co/t/delete-by-query-vs-index-journalier/207931 "2019-11-18T15:29:33Z")
Bonjour à tous, Je rencontre des soucis sur mon serveur ELK, et j'ai éventuellement plusieurs pistes pour y remédier mais aucune n'aboutit car j'ai toujours des contraintes que je ne peux pas gérer. En fait, tout part … --- ## [Error message with scripted field when changing the date range](https://discuss.elastic.co/t/error-message-with-scripted-field-when-changing-the-date-range/205768)
**Author:** [@jogabonito](https://discuss.elastic.co/u/jogabonito)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 3:29pm UTC](https://discuss.elastic.co/t/error-message-with-scripted-field-when-changing-the-date-range/205768 "2019-11-18T15:29:14Z")
Hi I use Kibana v 7.3.2 I get two error messages under whenever I try to change the date ranges in my dashboard. I have one scripted field which calculates the percentage using two other fields in the same index. The … --- ## [How to calculate actual date time using timezone offset?](https://discuss.elastic.co/t/how-to-calculate-actual-date-time-using-timezone-offset/205546)
**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\ **Replies:** 2\ **Last updated:** [November 18, 2019, 3:17pm UTC](https://discuss.elastic.co/t/how-to-calculate-actual-date-time-using-timezone-offset/205546 "2019-11-18T15:17:02Z")
I am trying to calculate the actual datetime using the offset value present in my field. I am currently calculating the sc-occurredOn-actual value using below piece of code. "return doc\['occurredOn'\].value.getMillis(… --- ## [Get access to user selected filter value in Kibana](https://discuss.elastic.co/t/get-access-to-user-selected-filter-value-in-kibana/205614)
**Author:** [@Venkata\_Naresh](https://discuss.elastic.co/u/Venkata_Naresh)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 3:13pm UTC](https://discuss.elastic.co/t/get-access-to-user-selected-filter-value-in-kibana/205614 "2019-11-18T15:13:45Z")
I have a drop down viz in Kibana which will list all the years. When the user selected an Year from the list, I want the data for next 2 years. For Ex: If user selects 2015 as Year, I want data for 2015,2016 and 2017. A… --- ## [3 master nodes all creating individual clusters](https://discuss.elastic.co/t/3-master-nodes-all-creating-individual-clusters/208321)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 3:00pm UTC](https://discuss.elastic.co/t/3-master-nodes-all-creating-individual-clusters/208321 "2019-11-18T15:00:50Z")
Hello, I have 3 master nodes all meant to be part of 1 cluster. I have added the nodes to the discovery.zen.ping.unicast.hosts field in the yml files. However, they are creating 3 separate clusters. How can I remove thos… --- ## [LUCENE regexp sintax not working](https://discuss.elastic.co/t/lucene-regexp-sintax-not-working/205456)
**Author:** [@Ernesto\_Porro](https://discuss.elastic.co/u/Ernesto_Porro)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 2:54pm UTC](https://discuss.elastic.co/t/lucene-regexp-sintax-not-working/205456 "2019-11-18T14:54:09Z")
Hey guys, recently i provisioned a kubernetes cluster of ES, and Kibana with anothers tools, like filebeat, etc. The problem is with Lucene Search sintax on Kibana Search bar, in a testing install, this sintax: "agent.ho… --- ## [Logstash 7.x on raspberry pi 4](https://discuss.elastic.co/t/logstash-7-x-on-raspberry-pi-4/205348)
**Author:** [@wiznil](https://discuss.elastic.co/u/wiznil)\ **Replies:** 3\ **Last updated:** [November 18, 2019, 2:49pm UTC](https://discuss.elastic.co/t/logstash-7-x-on-raspberry-pi-4/205348 "2019-11-18T14:49:35Z")
Hi all, never had any success in getting logstash 7.x installed on raspberry pi 4, is anyone able to get it running? Below are the steps that I have taken: root@wks:/# uname -a Linux home-wks 4.19.57-v7l+ #1244 SMP T… --- ## [How to track down a document based on a Logstash error](https://discuss.elastic.co/t/how-to-track-down-a-document-based-on-a-logstash-error/208139)
**Author:** [@tm8747a](https://discuss.elastic.co/u/tm8747a)\ **Replies:** 3\ **Last updated:** [November 18, 2019, 2:33pm UTC](https://discuss.elastic.co/t/how-to-track-down-a-document-based-on-a-logstash-error/208139 "2019-11-18T14:33:00Z")
I'm getting an error from Logstash that looks like this: Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"np-audit-7.4.0-2019.11.14", :\_type=\>"\_doc", :\_routing=\>nil}, #\ **Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 2:31pm UTC](https://discuss.elastic.co/t/logstash-ruby-filter-in-separate-script-throws-undefined-local-variable-or-method-new-event-block-for-logstash-filt-ers-executioncontext/208324 "2019-11-18T14:31:31Z") Hi, I am migrating my inline ruby script to an external ruby script file. First I create an new event with : service\_trace\_event = LogStash::Event.new After filling the fields like : service\_trace\_event.set("id",re… --- ## [Kibana Alert Action Message with Range Vaues](https://discuss.elastic.co/t/kibana-alert-action-message-with-range-vaues/205297)
**Author:** [@Michael\_Schellhouse](https://discuss.elastic.co/u/Michael_Schellhouse)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 2:24pm UTC](https://discuss.elastic.co/t/kibana-alert-action-message-with-range-vaues/205297 "2019-11-18T14:24:32Z")
I am trying to output search timestamp range in alert notification message rather than the monitor start/end time. Using a 5 minute offset in search. "range": { "@timestamp": {… --- ## [Conditional with a lot of or statements, is there a way to optimize the conditional?](https://discuss.elastic.co/t/conditional-with-a-lot-of-or-statements-is-there-a-way-to-optimize-the-conditional/208266)
**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 2:24pm UTC](https://discuss.elastic.co/t/conditional-with-a-lot-of-or-statements-is-there-a-way-to-optimize-the-conditional/208266 "2019-11-18T14:24:23Z")
Hi, We have a conditional in our pipeline where we check the value of a field against a list of 45+ values. We separate each value like this: if "AAA-5-AAA\_AUTH\_ADMIN\_USER" in \[ciscotag\] OR "APF-4-INVALID\_ENC\_POL\_SET"… --- ## [Unwanted truncating of start of multiline XML message from filebeat](https://discuss.elastic.co/t/unwanted-truncating-of-start-of-multiline-xml-message-from-filebeat/208114)
**Author:** [@Bhozar](https://discuss.elastic.co/u/Bhozar)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 2:09pm UTC](https://discuss.elastic.co/t/unwanted-truncating-of-start-of-multiline-xml-message-from-filebeat/208114 "2019-11-18T14:09:01Z")
I'm having an issue with an XML log file being ingested by Filebeat and some of the messages being passed onto Logstash with the opening tag truncated. There's no pattern to the failures that I can spot and works 95% of … --- ## [Can't find ElasticSearch on Magento 2](https://discuss.elastic.co/t/cant-find-elasticsearch-on-magento-2/208323)
**Author:** [@Erpicor](https://discuss.elastic.co/u/Erpicor)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 2:06pm UTC](https://discuss.elastic.co/t/cant-find-elasticsearch-on-magento-2/208323 "2019-11-18T14:06:11Z")
Hi! I have installed ElasticSearch on my vps, i want to put it on Magento 2.2.5, but when i go in Magento 2 back-end, in Store-\>Settings-\>Configuration-\>Catalog-\>catalog-\>Catalog Search i can't find it in the Search En… --- ## [How to wait for other dependent event to receive while using script](https://discuss.elastic.co/t/how-to-wait-for-other-dependent-event-to-receive-while-using-script/208318)
**Author:** [@Md\_Iburahimsha\_S](https://discuss.elastic.co/u/Md_Iburahimsha_S)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 1:54pm UTC](https://discuss.elastic.co/t/how-to-wait-for-other-dependent-event-to-receive-while-using-script/208318 "2019-11-18T13:54:03Z")
Currently i am using the below configuration to update the appdata value to other events 000C. Condition like 000A or 000B document ID matched with 000C event Document ID if\[eventid\]=="000A" or \[eventid\]=="000B" { el… --- ## [Applying post\_filter to limit inner\_hits in nested document](https://discuss.elastic.co/t/applying-post-filter-to-limit-inner-hits-in-nested-document/207925)
**Author:** [@Emil](https://discuss.elastic.co/u/Emil)\ **Replies:** 2\ **Last updated:** [November 18, 2019, 1:09pm UTC](https://discuss.elastic.co/t/applying-post-filter-to-limit-inner-hits-in-nested-document/207925 "2019-11-18T13:09:46Z")
Hi, I'm struggling how to apply a post\_filter to some nested documents. What I'd like to do is have some aggregation on all my nested documents, but have only certain nested documents returned (the general idea of a pos… --- ## [Query\_string with "+" operator](https://discuss.elastic.co/t/query-string-with-operator/208308)
**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 12:38pm UTC](https://discuss.elastic.co/t/query-string-with-operator/208308 "2019-11-18T12:38:10Z")
Hi there, I have an issue related to query\_string using the "+" operator. Suppose that my index contains the documents below: doc\_1 { field1: "foo bar", field2: "zoo" } doc\_2 { field1: "foo", … --- ## [Why different behavior on @metadata vs normal fields?](https://discuss.elastic.co/t/why-different-behavior-on-metadata-vs-normal-fields/208028)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [November 18, 2019, 12:26pm UTC](https://discuss.elastic.co/t/why-different-behavior-on-metadata-vs-normal-fields/208028 "2019-11-18T12:26:57Z")
Hi, I have json data which is harvested by filebeat and shipped to logstash. Filebeat encapsulating the orginal json message in message field by default. I didn't change it. What I want to do (in logstash): parse js… --- ## [Logstash 6.8.3 not exporting its metrics, running on CentOS 7](https://discuss.elastic.co/t/logstash-6-8-3-not-exporting-its-metrics-running-on-centos-7/208311)
**Author:** [@Mohit\_Kunjir](https://discuss.elastic.co/u/Mohit_Kunjir)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 12:24pm UTC](https://discuss.elastic.co/t/logstash-6-8-3-not-exporting-its-metrics-running-on-centos-7/208311 "2019-11-18T12:24:41Z")
I am running the rpm version of Logstash 6.8.3 on full GUI based CentOS 7 running locally on VM Player on my desktop. Downloaded the rpm version from official site. This version does not export its metrics via xpack.mo… --- ## [Linux Logs from Elasticsearch are not showing in Discover tab](https://discuss.elastic.co/t/linux-logs-from-elasticsearch-are-not-showing-in-discover-tab/207866)
**Author:** [@Mohit\_Kunjir](https://discuss.elastic.co/u/Mohit_Kunjir)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 12:11pm UTC](https://discuss.elastic.co/t/linux-logs-from-elasticsearch-are-not-showing-in-discover-tab/207866 "2019-11-18T12:11:00Z")
Hello, Kibana's Discover tab not showing the data comming from Filebeat on its corresponding Elasticsearch index pattern. Tried ingesting logs into a new index with different index pattern. The logs are visible on … --- ## [Stacked horizontal graph showing counts of "Terms"](https://discuss.elastic.co/t/stacked-horizontal-graph-showing-counts-of-terms/207882)
**Author:** [@rahul\_saini](https://discuss.elastic.co/u/rahul_saini)\ **Replies:** 2\ **Last updated:** [November 18, 2019, 11:51am UTC](https://discuss.elastic.co/t/stacked-horizontal-graph-showing-counts-of-terms/207882 "2019-11-18T11:51:35Z")
Hello, I've 3 Terms in my Elasticsearch data, viz. Happy, Sad & Neutral. I'm taking this survey data for a set of users say 200 people. I want to show this data in horizontal bar, something like below: So counts wi… --- ## [Find difference between two fields of two different values](https://discuss.elastic.co/t/find-difference-between-two-fields-of-two-different-values/208303)
**Author:** [@Yossi\_Saadi](https://discuss.elastic.co/u/Yossi_Saadi)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 11:47am UTC](https://discuss.elastic.co/t/find-difference-between-two-fields-of-two-different-values/208303 "2019-11-18T11:47:19Z")
Hello, I want to know how to get it done, and I just can't figure it out. Let's say I have 3 logs. Each log has fields 'buildNumber', 'startedAt', 'finishedAt' (and more unrelevant fields). I want to calculate the: d… --- ## [Filebeat flag files as inactive after roll](https://discuss.elastic.co/t/filebeat-flag-files-as-inactive-after-roll/208268)
**Author:** [@Palyndrome](https://discuss.elastic.co/u/Palyndrome)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 11:15am UTC](https://discuss.elastic.co/t/filebeat-flag-files-as-inactive-after-roll/208268 "2019-11-18T11:15:46Z")
Hello, We are facing an issue on our production server. We are logging into a file using Log4Net with a rolling file appender. Sometimes, when the file is rolling the file is flagged as inactive and nor more logs are s… --- ## [Plot multiple graphs in Kibana](https://discuss.elastic.co/t/plot-multiple-graphs-in-kibana/206594)
**Author:** [@ajg](https://discuss.elastic.co/u/ajg)\ **Replies:** 3\ **Last updated:** [November 18, 2019, 11:11am UTC](https://discuss.elastic.co/t/plot-multiple-graphs-in-kibana/206594 "2019-11-18T11:11:41Z")
Hi everybody, I am working on a proyect that requires to visualize several graphs in the same plot: The problem is that I cannot create them on the same "visualization line", because they get the data from different s… --- ## [Multi-language content](https://discuss.elastic.co/t/multi-language-content/208296)
**Author:** [@Lauxley](https://discuss.elastic.co/u/Lauxley)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 11:06am UTC](https://discuss.elastic.co/t/multi-language-content/208296 "2019-11-18T11:06:00Z")
Hello, I'm trying to figure out the best way to index multi-language content without a definitive list of supported languages, meaning the list is dynamic and will grow quickly depending on user input (we work with histo… --- ## [Elasticsearch running in local failing](https://discuss.elastic.co/t/elasticsearch-running-in-local-failing/208294)
**Author:** [@chandresh-pancholi](https://discuss.elastic.co/u/chandresh-pancholi)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 11:00am UTC](https://discuss.elastic.co/t/elasticsearch-running-in-local-failing/208294 "2019-11-18T11:00:26Z")
Steps: ./gradlew assemble ./gradlew run --debug-jvm Task :distribution:run Running elasticsearch in debug mode, node{:distribution:runTask-0} suspending until connected on debugPort 5005 Exec output and error: | Ou… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1775) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1777)