# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1791

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1792

---

## [Migrating Indicies from Kibana 6.x to 7.x](https://discuss.elastic.co/t/migrating-indicies-from-kibana-6-x-to-7-x/205708)

<div class="topic-metadata">

**Author:** [@ShaharYak](https://discuss.elastic.co/u/ShaharYak)\
**Replies:** 1\
**Last updated:** [November 11, 2019, 6:21am UTC](https://discuss.elastic.co/t/migrating-indicies-from-kibana-6-x-to-7-x/205708 "2019-11-11T06:21:03Z")

</div>

Hi, I'm working on migrating my indicies while upgrading to kibana 7.x. I have been looking for a list that contains all the migrations changes but did not found any place that contains them (such as working with refer…

---

## [Joint bar graph in vega](https://discuss.elastic.co/t/joint-bar-graph-in-vega/205539)

<div class="topic-metadata">

**Author:** [@Ankit\_Sawant](https://discuss.elastic.co/u/Ankit_Sawant)\
**Replies:** 1\
**Last updated:** [November 11, 2019, 6:17am UTC](https://discuss.elastic.co/t/joint-bar-graph-in-vega/205539 "2019-11-11T06:17:38Z")

</div>

I want to draw a joint bar graph for my success failure count for each airline in vega-lite Can anyone guide me please? { "$schema": "https://vega.github.io/schema/vega-lite/v2.json", "data":{ "url":{ "index":"kiban…

---

## [Can I have multiple Shards per node?](https://discuss.elastic.co/t/can-i-have-multiple-shards-per-node/207272)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 0\
**Last updated:** [November 11, 2019, 5:49am UTC](https://discuss.elastic.co/t/can-i-have-multiple-shards-per-node/207272 "2019-11-11T05:49:32Z")

</div>

Hi Right now I have only one server for elasticsearch which has one index ( with default 5 shards). Approx I will have 4 million documents for one month. I have created a time based index with time frame of 3 months, w…

---

## [How to integrate logstash in nodejs application?](https://discuss.elastic.co/t/how-to-integrate-logstash-in-nodejs-application/207238)

<div class="topic-metadata">

**Author:** [@Shubham\_Akodiya](https://discuss.elastic.co/u/Shubham_Akodiya)\
**Replies:** 1\
**Last updated:** [November 11, 2019, 5:38am UTC](https://discuss.elastic.co/t/how-to-integrate-logstash-in-nodejs-application/207238 "2019-11-11T05:38:47Z")

</div>

I'm working on node application and my main goal is to maintain the logs (error, info) of the backend part in logstash so that I could do some analysis of which api is breaking and why. I'm new to logstash and I read som…

---

## [How to get shard id from document Id?](https://discuss.elastic.co/t/how-to-get-shard-id-from-document-id/207250)

<div class="topic-metadata">

**Author:** [@chaitup](https://discuss.elastic.co/u/chaitup)\
**Replies:** 1\
**Last updated:** [November 11, 2019, 5:33am UTC](https://discuss.elastic.co/t/how-to-get-shard-id-from-document-id/207250 "2019-11-11T05:33:27Z")

</div>

I am trying to do a large number of lookups and searches (in order a few million) based on document ids. Instead of sending requests to all shards I would like to partition document id's by specific shards they belong to…

---

## [Windows log visualization for a number of events per day](https://discuss.elastic.co/t/windows-log-visualization-for-a-number-of-events-per-day/207044)

<div class="topic-metadata">

**Author:** [@forestgump](https://discuss.elastic.co/u/forestgump)\
**Replies:** 2\
**Last updated:** [November 11, 2019, 2:56am UTC](https://discuss.elastic.co/t/windows-log-visualization-for-a-number-of-events-per-day/207044 "2019-11-11T02:56:30Z")

</div>

Hi, I am new to Kibana and I am trying to visualize on how many times a particular windows event happened per day. For an example lets say I want to count the number of successful logons for a server per day. The relev…

---

## [Logstash Template Format For Adding Multiple Fields of the Same Type](https://discuss.elastic.co/t/logstash-template-format-for-adding-multiple-fields-of-the-same-type/207263)

<div class="topic-metadata">

**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\
**Replies:** 0\
**Last updated:** [November 11, 2019, 2:28am UTC](https://discuss.elastic.co/t/logstash-template-format-for-adding-multiple-fields-of-the-same-type/207263 "2019-11-11T02:28:39Z")

</div>

My template file is becoming very large as I have had to add a lot of fields to it of Long and Text, so I have the following in the file over and over again: (for text and long types) "server": { "ty…

---

## [ECE Upgrade v2.3.2 to v2.4.1](https://discuss.elastic.co/t/ece-upgrade-v2-3-2-to-v2-4-1/207262)

<div class="topic-metadata">

**Author:** [@Jugsofbeer](https://discuss.elastic.co/u/Jugsofbeer)\
**Replies:** 0\
**Last updated:** [November 11, 2019, 1:49am UTC](https://discuss.elastic.co/t/ece-upgrade-v2-3-2-to-v2-4-1/207262 "2019-11-11T01:49:46Z")

</div>

Hi, Has anyone tried to do an upgrade on-premise, from ECE 2.3.2 to v2.4.1 on RHEL 7.5 with Docker 1.13? Does anyone have any feedback on how the new proxy has improved things in your environment ? We are just wanting…

---

## [Clustering using elasticsearch 7.2](https://discuss.elastic.co/t/clustering-using-elasticsearch-7-2/207258)

<div class="topic-metadata">

**Author:** [@proxx](https://discuss.elastic.co/u/proxx)\
**Replies:** 0\
**Last updated:** [November 11, 2019, 12:11am UTC](https://discuss.elastic.co/t/clustering-using-elasticsearch-7-2/207258 "2019-11-11T00:11:04Z")

</div>

I have two nodes running elasticsearch 7.2, have try all possible ways for my nodes to cluster but failing, help me out here. Below is the link to the two nodes .yml file Note: Firewall disabled on each node Each …

---

## [Replacing part of one field's string with value from another field](https://discuss.elastic.co/t/replacing-part-of-one-fields-string-with-value-from-another-field/207257)

<div class="topic-metadata">

**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\
**Replies:** 0\
**Last updated:** [November 10, 2019, 10:19pm UTC](https://discuss.elastic.co/t/replacing-part-of-one-fields-string-with-value-from-another-field/207257 "2019-11-10T22:19:29Z")

</div>

Hi, I'm parsing an XML and I currently have the following array: errorinfo.Msg { "Index": \[ "1" \], "Display": \[ "0" \], "Name": \[ "Movement too slow" \], "Text": \[ "1 Movement too slow con…

---

## [Kibana 7.4.0 embed=true not working as expected](https://discuss.elastic.co/t/kibana-7-4-0-embed-true-not-working-as-expected/206684)

<div class="topic-metadata">

**Author:** [@mmg](https://discuss.elastic.co/u/mmg)\
**Replies:** 4\
**Last updated:** [November 10, 2019, 6:53pm UTC](https://discuss.elastic.co/t/kibana-7-4-0-embed-true-not-working-as-expected/206684 "2019-11-10T18:53:10Z")

</div>

I've just upgraded environment from 5.5.2 to 7.4.0, and everything is successful, except the dashboards that we're sharing embedded in an asp.net app via a reverse proxy appear not to be respecting the ?embed=true option…

---

## [Share snapshot - embed code not removing menus](https://discuss.elastic.co/t/share-snapshot-embed-code-not-removing-menus/206866)

<div class="topic-metadata">

**Author:** [@mmg](https://discuss.elastic.co/u/mmg)\
**Replies:** 4\
**Last updated:** [November 10, 2019, 6:51pm UTC](https://discuss.elastic.co/t/share-snapshot-embed-code-not-removing-menus/206866 "2019-11-10T18:51:48Z")

</div>

I've just upgraded our environment from 5.5.2 to 7.4.0, and find that the embedded iframe short URL includes the Kibana menu/frame. Is this a bug? Am I doing something wrong? Is this not recommended practice in v7 ?

---

## [Java API - "Unable to parse response body for Response"at term suggestions query](https://discuss.elastic.co/t/java-api-unable-to-parse-response-body-for-response-at-term-suggestions-query/207255)

<div class="topic-metadata">

**Author:** [@gustavo.lei](https://discuss.elastic.co/u/gustavo.lei)\
**Replies:** 0\
**Last updated:** [November 10, 2019, 6:41pm UTC](https://discuss.elastic.co/t/java-api-unable-to-parse-response-body-for-response-at-term-suggestions-query/207255 "2019-11-10T18:41:04Z")

</div>

I'm trying to use implement Elasticsearch terms suggestions query using Java High Level Rest Client but going some issues. Some important information: I'm using jdk8 I'm using the latest version of java api (7.4) Any o…

---

## [Range query and pagination](https://discuss.elastic.co/t/range-query-and-pagination/207254)

<div class="topic-metadata">

**Author:** [@anand1](https://discuss.elastic.co/u/anand1)\
**Replies:** 0\
**Last updated:** [November 10, 2019, 6:29pm UTC](https://discuss.elastic.co/t/range-query-and-pagination/207254 "2019-11-10T18:29:35Z")

</div>

Hi team, I have log index which contains product and modification date and its has around 10M documents with duplicates of products since the same products modified on different date. i have a requirement to create RES…

---

## [Logstash parsing mysql-slow.log](https://discuss.elastic.co/t/logstash-parsing-mysql-slow-log/206597)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 10\
**Last updated:** [November 10, 2019, 5:50pm UTC](https://discuss.elastic.co/t/logstash-parsing-mysql-slow-log/206597 "2019-11-10T17:50:59Z")

</div>

Hey guys, I'm a little bit struggling with Logtash parsing mysql-slow.log file. I configured Filebeat to send logs from the file into Elasticsearch through Logstash so I can see recieved messages in Kibana like this: N…

---

## [Elasticsearch-master election is taking too long (+30mins)](https://discuss.elastic.co/t/elasticsearch-master-election-is-taking-too-long-30mins/204488)

<div class="topic-metadata">

**Author:** [@zgergely](https://discuss.elastic.co/u/zgergely)\
**Replies:** 24\
**Last updated:** [November 10, 2019, 5:23pm UTC](https://discuss.elastic.co/t/elasticsearch-master-election-is-taking-too-long-30mins/204488 "2019-11-10T17:23:23Z")

</div>

Hi, We have a custom ELK stack deployed on IKS (Kubernetes Service @IBM) version 7.1.1 with HelmCharts. The setup is made up from 3x elasticsearch-master nodes, 2x elasticsearch-data nodes, 1x logstash pod for gatherin…

---

## [How to rename dynamical fields](https://discuss.elastic.co/t/how-to-rename-dynamical-fields/207245)

<div class="topic-metadata">

**Author:** [@ja123](https://discuss.elastic.co/u/ja123)\
**Replies:** 1\
**Last updated:** [November 10, 2019, 4:03pm UTC](https://discuss.elastic.co/t/how-to-rename-dynamical-fields/207245 "2019-11-10T16:03:29Z")

</div>

I have got the following filterd xml and I would like to rename the field fpDate for every single element, but I don't know how to interate through the \[parsed\]\[Journey\]. The size of the \[Journey\] array is always 20 elem…

---

## [Parse rancher logs with logstash](https://discuss.elastic.co/t/parse-rancher-logs-with-logstash/207242)

<div class="topic-metadata">

**Author:** [@tru64gurus](https://discuss.elastic.co/u/tru64gurus)\
**Replies:** 0\
**Last updated:** [November 10, 2019, 2:04pm UTC](https://discuss.elastic.co/t/parse-rancher-logs-with-logstash/207242 "2019-11-10T14:04:56Z")

</div>

Hi, I have serveral k8s clusters running on rancher 2.3.1 sending several GB of logs per second and causing disk pressure on source side . To solve source bottlneck , logs are being sent to syslog server and get writte…

---

## [How to parse field name with '.'](https://discuss.elastic.co/t/how-to-parse-field-name-with/207241)

<div class="topic-metadata">

**Author:** [@111233](https://discuss.elastic.co/u/111233)\
**Replies:** 0\
**Last updated:** [November 10, 2019, 1:41pm UTC](https://discuss.elastic.co/t/how-to-parse-field-name-with/207241 "2019-11-10T13:41:22Z")

</div>

"error"=\>{"type"=\>"mapper\_parsing\_exception", "reason"=\>"Field name \[Sea Scallops N.Y. Times Recipe\] cannot contain '.'"} Are there any solutions to this problem??

---

## [How to avoid ��� chars when using FS Crawler?](https://discuss.elastic.co/t/how-to-avoid-chars-when-using-fs-crawler/206996)

<div class="topic-metadata">

**Author:** [@Danilo\_Felix](https://discuss.elastic.co/u/Danilo_Felix)\
**Replies:** 5\
**Last updated:** [November 10, 2019, 1:12pm UTC](https://discuss.elastic.co/t/how-to-avoid-chars-when-using-fs-crawler/206996 "2019-11-10T13:12:02Z")

</div>

Hello, I'm trying to use FS Crawler 2.6 in a Windows Server machine to index a huge number of files in my company. It's a very large Windows folders tree in a network drive: 14,92 Tb size, 7,2M files in 2,3M folders. Da…

---

## [Unsupported database type in elasticsearch](https://discuss.elastic.co/t/unsupported-database-type-in-elasticsearch/207229)

<div class="topic-metadata">

**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\
**Replies:** 0\
**Last updated:** [November 10, 2019, 6:05am UTC](https://discuss.elastic.co/t/unsupported-database-type-in-elasticsearch/207229 "2019-11-10T06:05:46Z")

</div>

Hi, i copy GeoIP2-ISP.mmdb into /etc/elasticsearch/ingest-geoip. Then I create a pipline like this: PUT \_ingest/pipeline/geoip { "description" : "Add ISP geoip info", "processors" : \[ { "geoip" : { "field" : "cli…

---

## [/etc/init.d/kibana status show kibana not running, but actually it is running](https://discuss.elastic.co/t/etc-init-d-kibana-status-show-kibana-not-running-but-actually-it-is-running/206739)

<div class="topic-metadata">

**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\
**Replies:** 6\
**Last updated:** [November 10, 2019, 2:28am UTC](https://discuss.elastic.co/t/etc-init-d-kibana-status-show-kibana-not-running-but-actually-it-is-running/206739 "2019-11-10T02:28:22Z")

</div>

Hi All , Good morning I am using the latest stable version of elaticsearch and kibana 7.4.2 Like to point out the status of kibana using /etc/init.d/kibana status shows it as not running root@apm:~# /etc/init.d/e…

---

## [Config packetbeat for graylog error](https://discuss.elastic.co/t/config-packetbeat-for-graylog-error/207209)

<div class="topic-metadata">

**Author:** [@jam\_mahmoudi](https://discuss.elastic.co/u/jam_mahmoudi)\
**Replies:** 1\
**Last updated:** [November 9, 2019, 1:30pm UTC](https://discuss.elastic.co/t/config-packetbeat-for-graylog-error/207209 "2019-11-09T13:30:57Z")

</div>

hi, guys i install packetbeat version 7.4.2 (amd64), on linux centOS 7 but with error The following was encountered \*// \[root@webgateway ~\]# packetbeat test output elasticsearch: http://192.100.102.25:9200... pars…

---

## [Fitlers in buckets are not working in kibana pie chart](https://discuss.elastic.co/t/fitlers-in-buckets-are-not-working-in-kibana-pie-chart/205521)

<div class="topic-metadata">

**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\
**Replies:** 10\
**Last updated:** [November 10, 2019, 1:30am UTC](https://discuss.elastic.co/t/fitlers-in-buckets-are-not-working-in-kibana-pie-chart/205521 "2019-11-10T01:30:26Z")

</div>

I am trying to add multiple Monitors and their up and down status in in single Pie visualization. Each monitor as a donut and up and down status are as slices. I used below: Metric: Count Bucket 1: filter monitor.nam…

---

## [Executing Searches : Query DSL: Windows Server 2019](https://discuss.elastic.co/t/executing-searches-query-dsl-windows-server-2019/206019)

<div class="topic-metadata">

**Author:** [@dirkduplooy](https://discuss.elastic.co/u/dirkduplooy)\
**Replies:** 1\
**Last updated:** [November 10, 2019, 12:35am UTC](https://discuss.elastic.co/t/executing-searches-query-dsl-windows-server-2019/206019 "2019-11-10T00:35:43Z")

</div>

Hi there I am busy learning Elasticsearch through the Udemy course Elasticsearch 7 and the Elastic Stack - In Depth & Hands On. It is Linux based but I am also running ElasticSearch on Windows Server 2019. I ran this qu…

---

## [Create index by aggregating existing index](https://discuss.elastic.co/t/create-index-by-aggregating-existing-index/207011)

<div class="topic-metadata">

**Author:** [@aasoft](https://discuss.elastic.co/u/aasoft)\
**Replies:** 6\
**Last updated:** [November 9, 2019, 10:22pm UTC](https://discuss.elastic.co/t/create-index-by-aggregating-existing-index/207011 "2019-11-09T22:22:55Z")

</div>

I created an index as below: "hits" : \[ { "\_index" : "family", "\_type" : "doc", "\_id" : "1", "\_score" : 1.0, "\_source" : { "fkm\_family" : "1", "pkm\_article" : "1001" } }, { "\_index" : "family", "\_type" : "d…

---

## [How to visualize a raw ES query](https://discuss.elastic.co/t/how-to-visualize-a-raw-es-query/207174)

<div class="topic-metadata">

**Author:** [@mikea](https://discuss.elastic.co/u/mikea)\
**Replies:** 1\
**Last updated:** [November 9, 2019, 9:58pm UTC](https://discuss.elastic.co/t/how-to-visualize-a-raw-es-query/207174 "2019-11-09T21:58:38Z")

</div>

I am trying to create a report of devices that have not sent logs in 24 hours. I have a query that gets the data I need, but I can't figure out how to turn this into a saved search or visualization in Kibana. Any suggest…

---

## [Updating two documents at once - error management](https://discuss.elastic.co/t/updating-two-documents-at-once-error-management/207223)

<div class="topic-metadata">

**Author:** [@Luigi\_Bardelli](https://discuss.elastic.co/u/Luigi_Bardelli)\
**Replies:** 0\
**Last updated:** [November 9, 2019, 9:42pm UTC](https://discuss.elastic.co/t/updating-two-documents-at-once-error-management/207223 "2019-11-09T21:42:58Z")

</div>

Hi all, after reading the optimistic concurrency docs, I would like to understand which is the best way to handle the following scenario: client fetches two "related" documents client does its biz logic, changing both …

---

## [Parsing xml with 3 different variants of its content](https://discuss.elastic.co/t/parsing-xml-with-3-different-variants-of-its-content/207179)

<div class="topic-metadata">

**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\
**Replies:** 4\
**Last updated:** [November 9, 2019, 8:11pm UTC](https://discuss.elastic.co/t/parsing-xml-with-3-different-variants-of-its-content/207179 "2019-11-09T20:11:38Z")

</div>

Hi, One of our production machines outputs the log into an xml file. Said xml can have 3 different structures: \<useraction\> ... \<error\> ... \</error\> ... \</useraction\> or \<useraction\> ... \</useraction\> or \<error\> ..…

---

## [Disable SIEM and Uptime?](https://discuss.elastic.co/t/disable-siem-and-uptime/207130)

<div class="topic-metadata">

**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Replies:** 3\
**Last updated:** [November 9, 2019, 5:56pm UTC](https://discuss.elastic.co/t/disable-siem-and-uptime/207130 "2019-11-09T17:56:33Z")

</div>

Are there settings to disable the SIEM and Uptime apps, as is possible with other Kibana apps?

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1790)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1792)
