# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1925 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1926 --- ## [\[SOLVED\] Deleted index pattern, dashboards not working](https://discuss.elastic.co/t/solved-deleted-index-pattern-dashboards-not-working/197641)
**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 3:58am UTC](https://discuss.elastic.co/t/solved-deleted-index-pattern-dashboards-not-working/197641 "2019-09-02T03:58:44Z")
Hi, I accidently deleted an index pattern, and dashboards relying on it no longer load. Using ELK 5.6.16 I tried Get index pattern ID? but I get 0 results: GET .kibana/\_search { "\_source": \["index-pattern.title"\], … --- ## [Calculating the hit counts as a bytes in kibana](https://discuss.elastic.co/t/calculating-the-hit-counts-as-a-bytes-in-kibana/197642)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 0\ **Last updated:** [September 2, 2019, 3:58am UTC](https://discuss.elastic.co/t/calculating-the-hit-counts-as-a-bytes-in-kibana/197642 "2019-09-02T03:58:16Z")
Hi there I would like to check size (bytes) of particular fields in kibana. Is there any query to do that? --- ## [Count the number of occurence of my keywords from all the retrieved documents](https://discuss.elastic.co/t/count-the-number-of-occurence-of-my-keywords-from-all-the-retrieved-documents/197452)
**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\ **Replies:** 0\ **Last updated:** [August 30, 2019, 7:01am UTC](https://discuss.elastic.co/t/count-the-number-of-occurence-of-my-keywords-from-all-the-retrieved-documents/197452 "2019-08-30T07:01:14Z")
My original post: Applications I'm using: Elasticsearch: v7.1 PHP: v7.2 Laravel: v5.8 Elasticsearch/elasticsearch, official API of Elasticsearch to PHP Hello and good day! Is it possible to do an Elasticsearch q… --- ## [Why do Elastic provide Crippleware on the AWS Marketplace](https://discuss.elastic.co/t/why-do-elastic-provide-crippleware-on-the-aws-marketplace/196791)
**Author:** [@RoryBrowne](https://discuss.elastic.co/u/RoryBrowne)\ **Replies:** 5\ **Last updated:** [September 1, 2019, 8:17pm UTC](https://discuss.elastic.co/t/why-do-elastic-provide-crippleware-on-the-aws-marketplace/196791 "2019-09-01T20:17:53Z")
OK - I can understand why Elastic would cripple services from other providers that Elastic aren't paid for, such as Amazon's hosted service ( that's managed by Amazon ). I can't understand however, why Elastic would lim… --- ## [Elasticsearch and Client Version to choose](https://discuss.elastic.co/t/elasticsearch-and-client-version-to-choose/197626)
**Author:** [@mrjayarajj](https://discuss.elastic.co/u/mrjayarajj)\ **Replies:** 1\ **Last updated:** [September 1, 2019, 5:52pm UTC](https://discuss.elastic.co/t/elasticsearch-and-client-version-to-choose/197626 "2019-09-01T17:52:10Z")
We are planning to implement elastic search for our project , need expert comment on the following which elasticsearch version to choose ? is 7.3.1 stable ? or is it better to go to two level lower version, say 7.0.1 ? … --- ## [Using aggregate filter to merge different events](https://discuss.elastic.co/t/using-aggregate-filter-to-merge-different-events/197619)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 3\ **Last updated:** [September 1, 2019, 3:31pm UTC](https://discuss.elastic.co/t/using-aggregate-filter-to-merge-different-events/197619 "2019-09-01T15:31:42Z")
Hi all, there is a log which some evenets of it have a same task\_id A1=12;A2=gty;A3=tsbr;A4=5798 B1=adr;B2=156;B3=765 A1=12;A2=gty;A3=tsbr;A4=5798;A5=895 B1=adr;B2=156;B3=765;B4=khu as following: task\_id=1 =\> A1=… --- ## [Kibana Error : Kibana should not be run as root. Use --allow-root to continue](https://discuss.elastic.co/t/kibana-error-kibana-should-not-be-run-as-root-use-allow-root-to-continue/197541)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 2\ **Last updated:** [September 1, 2019, 8:42am UTC](https://discuss.elastic.co/t/kibana-error-kibana-should-not-be-run-as-root-use-allow-root-to-continue/197541 "2019-09-01T08:42:33Z")
Hi All , After the installation of kibana 7.3.1 rpm (Cent Os) , when I am running the binary by command ./bin/kibana its showing an error messsage "Kibana should not be run as root. Use --allow-root to c… --- ## [How to read SQL Server log trace(log.trc)?](https://discuss.elastic.co/t/how-to-read-sql-server-log-trace-log-trc/197613)
**Author:** [@sundar\_elk](https://discuss.elastic.co/u/sundar_elk)\ **Replies:** 0\ **Last updated:** [September 1, 2019, 6:16am UTC](https://discuss.elastic.co/t/how-to-read-sql-server-log-trace-log-trc/197613 "2019-09-01T06:16:08Z")
Hi Team, Use case :- Reading SQL server log trace file. file name and extension :- log.trc file path :- Program Files/Microsoft SQL Server/MSSQL13.MSSQLSERVER/MSSQL/Log/log\_64.trc I tried to read .trc file directly f… --- ## [Autogenerated IDs settings](https://discuss.elastic.co/t/autogenerated-ids-settings/197607)
**Author:** [@Mohamad-Sobhie](https://discuss.elastic.co/u/Mohamad-Sobhie)\ **Replies:** 1\ **Last updated:** [August 31, 2019, 7:39pm UTC](https://discuss.elastic.co/t/autogenerated-ids-settings/197607 "2019-08-31T19:39:57Z")
Is there a way to edit the settings of the autogenerated Ids in Elasticsearch, like the length of it, specific syntax etc? and is it possible to make Elasticsearch generate all ids even if some documents have the id set … --- ## [How to separate fields in different logs using logstash](https://discuss.elastic.co/t/how-to-separate-fields-in-different-logs-using-logstash/197581)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 2\ **Last updated:** [August 31, 2019, 1:08pm UTC](https://discuss.elastic.co/t/how-to-separate-fields-in-different-logs-using-logstash/197581 "2019-08-31T13:08:49Z")
hi all, I have different lines of logs for example as following: A1=5454;A2=34757354575;A3=setoh;A4=NU;A5=(555);A6=\[78925\] B1=get;B2=589641;B3=258 C1=(5472);C2=LA;C3=Mid;C4=0000 I am using a csv filter in order to sep… --- ## [Problem restarting cluster on 6.6.1](https://discuss.elastic.co/t/problem-restarting-cluster-on-6-6-1/194200)
**Author:** [@punppis](https://discuss.elastic.co/u/punppis)\ **Replies:** 2\ **Last updated:** [August 31, 2019, 10:51am UTC](https://discuss.elastic.co/t/problem-restarting-cluster-on-6-6-1/194200 "2019-08-31T10:51:36Z")
Elasticsearch 6.6.1 I have a 3-node cluster. 2 master+data, 1 data only. Our setup has been running ok for few months until I have to restart them for any reason. The problem is that I have to restart the machines in s… --- ## [Триггеры как в SQL](https://discuss.elastic.co/t/sql/197585)
**Author:** [@korableg](https://discuss.elastic.co/u/korableg)\ **Replies:** 2\ **Last updated:** [August 31, 2019, 10:41am UTC](https://discuss.elastic.co/t/sql/197585 "2019-08-31T10:41:11Z")
Добрый день! Мне необходимо реализовать запись в одном индексе при записи в другом, существует ли такой механизм? Например как триггеры в SQL. --- ## [Orphan Data Node](https://discuss.elastic.co/t/orphan-data-node/197463)
**Author:** [@Erik\_Jonsson\_Thoren](https://discuss.elastic.co/u/Erik_Jonsson_Thoren)\ **Replies:** 2\ **Last updated:** [August 31, 2019, 6:06am UTC](https://discuss.elastic.co/t/orphan-data-node/197463 "2019-08-31T06:06:10Z")
Hi, We lost our master-nodes in our cluster due to a faulty deployment process, and now our data-nodes cant join the new master nodes due to cluster id mismatch. If we want no data-loss, what are our options? --- ## [Calculating Number of Data nodes](https://discuss.elastic.co/t/calculating-number-of-data-nodes/197545)
**Author:** [@Nikhil04](https://discuss.elastic.co/u/Nikhil04)\ **Replies:** 4\ **Last updated:** [August 31, 2019, 5:55am UTC](https://discuss.elastic.co/t/calculating-number-of-data-nodes/197545 "2019-08-31T05:55:00Z")
Hi, I was going through one of the webinars by elastic.In the webinar,I came across a formula to calculate data nodes as below: Data Nodes: ROUNDUP(Total Storage(GB) / Memory per data node / Memory:data ratio) + 1 Data… --- ## [Elasticsearch如何进行跨库查询](https://discuss.elastic.co/t/elasticsearch/197446)
**Author:** [@wwl1](https://discuss.elastic.co/u/wwl1)\ **Replies:** 1\ **Last updated:** [August 31, 2019, 5:53am UTC](https://discuss.elastic.co/t/elasticsearch/197446 "2019-08-31T05:53:53Z")
在elasticsearch中如何才能进行跨库查询，希望大佬们能指点迷津，谢谢。 --- ## [Embed Kibana 7.3.1 in iframe behind nginx?](https://discuss.elastic.co/t/embed-kibana-7-3-1-in-iframe-behind-nginx/197481)
**Author:** [@NetwarSystem](https://discuss.elastic.co/u/NetwarSystem)\ **Replies:** 3\ **Last updated:** [August 30, 2019, 10:27pm UTC](https://discuss.elastic.co/t/embed-kibana-7-3-1-in-iframe-behind-nginx/197481 "2019-08-30T22:27:00Z")
I have a single VM with Elastic 7.3.1 and Kibana 7.3.1 - a fresh install, just so I can do this without stepping on production stuff. The system works fine, log in with username and password, that's great. The nginx reve… --- ## [ScrollAll Timeout](https://discuss.elastic.co/t/scrollall-timeout/196418)
**Author:** [@bo.clifton](https://discuss.elastic.co/u/bo.clifton)\ **Replies:** 6\ **Last updated:** [August 30, 2019, 10:25pm UTC](https://discuss.elastic.co/t/scrollall-timeout/196418 "2019-08-30T22:25:44Z")
I'm running into timeouts using ScrollAll. Code is below. I have a large index (160mil items in this index) and need to be planning for substantially larger indices. We will routinely need to perform a scroll search t… --- ## [Elastic.elasticsearch template in azure marketplace is giving error while deploying custom scripts](https://discuss.elastic.co/t/elastic-elasticsearch-template-in-azure-marketplace-is-giving-error-while-deploying-custom-scripts/197284)
**Author:** [@BasavarajKambali](https://discuss.elastic.co/u/BasavarajKambali)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 10:18pm UTC](https://discuss.elastic.co/t/elastic-elasticsearch-template-in-azure-marketplace-is-giving-error-while-deploying-custom-scripts/197284 "2019-08-30T22:18:24Z")
Created all VMs and infra part of the template after creating VMs failing at Datanode/custom scripts exicution. { "id": "/subscriptions/425d7347-3ff5-4474-be64-653fa/resourceGroups/AZRDEVLOGSTASH-RG/providers/Microsoft.… --- ## [Index sorting in rollover request not supported?](https://discuss.elastic.co/t/index-sorting-in-rollover-request-not-supported/197430)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 5\ **Last updated:** [August 30, 2019, 9:43pm UTC](https://discuss.elastic.co/t/index-sorting-in-rollover-request-not-supported/197430 "2019-08-30T21:43:20Z")
ES 7.3.0 I'm trying to issue rollover command with index sorting. But I'm getting status 400 with "reason": "unknown index sort field:\[ts\]" This is my payload: POST test/\_rollover { "conditions": { "max\_size"… --- ## [Export CSV limited to 500 records](https://discuss.elastic.co/t/export-csv-limited-to-500-records/197420)
**Author:** [@russellpetrichsophos](https://discuss.elastic.co/u/russellpetrichsophos)\ **Replies:** 4\ **Last updated:** [August 30, 2019, 9:12pm UTC](https://discuss.elastic.co/t/export-csv-limited-to-500-records/197420 "2019-08-30T21:12:22Z")
Hello Kibana Team, I'm using Kibana 6.3.2 and I'm trying to export the results of a saved search with over 200k hits. However, when I click "Export" only the first 500 hits are included in the exported CSV:Kibana\_Expor… --- ## [No result when filter by scripted field](https://discuss.elastic.co/t/no-result-when-filter-by-scripted-field/197575)
**Author:** [@jcaballero](https://discuss.elastic.co/u/jcaballero)\ **Replies:** 2\ **Last updated:** [August 30, 2019, 8:24pm UTC](https://discuss.elastic.co/t/no-result-when-filter-by-scripted-field/197575 "2019-08-30T20:24:02Z")
Hello, using Kibana 5.4.1 My documents in ElasticSearch have 2 date fields: start and end. Or only start while the event is still happening. I have created a scripted field in Kibana, length, defined like this if (!d… --- ## [How Can I See the Inside of my Logstash Event Object in a Ruby Script?](https://discuss.elastic.co/t/how-can-i-see-the-inside-of-my-logstash-event-object-in-a-ruby-script/197415)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 2\ **Last updated:** [August 30, 2019, 8:15pm UTC](https://discuss.elastic.co/t/how-can-i-see-the-inside-of-my-logstash-event-object-in-a-ruby-script/197415 "2019-08-30T20:15:50Z")
Hi Logstash Jedi Masters, I’m building my first Logstash service. I want my filter to be able to do a little processing based on the data flowing through LS. My LS setup is pretty basic. Here’s my LS config file, sim… --- ## [Discover - Saving one search affects other saved searches](https://discuss.elastic.co/t/discover-saving-one-search-affects-other-saved-searches/197567)
**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 7:42pm UTC](https://discuss.elastic.co/t/discover-saving-one-search-affects-other-saved-searches/197567 "2019-08-30T19:42:03Z")
\[Elastic Stack 7.3\] Attempting to discover data in different time horizons, and save separately, but values across the different views are showing the same data. Example: Trying to save two separate searches, which dis… --- ## [How to create aggregated field and further kibana dashboard](https://discuss.elastic.co/t/how-to-create-aggregated-field-and-further-kibana-dashboard/197534)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 7:03pm UTC](https://discuss.elastic.co/t/how-to-create-aggregated-field-and-further-kibana-dashboard/197534 "2019-08-30T19:03:17Z")
Hello, I created several filters in fluentd like below and have separate fields in Kibana as well: nginx\_timestamp, DATA:nginx\_log\_level, nginx\_message Question: what is need to have aggregated field created nginx\_log\_l… --- ## [\_forcemerge multithreading / performance?](https://discuss.elastic.co/t/forcemerge-multithreading-performance/197573)
**Author:** [@jeroen1](https://discuss.elastic.co/u/jeroen1)\ **Replies:** 0\ **Last updated:** [August 30, 2019, 7:01pm UTC](https://discuss.elastic.co/t/forcemerge-multithreading-performance/197573 "2019-08-30T19:01:23Z")
I mentioned that \_forcemerge uses only a single core. Is there an options to use multiple cores? If not: any tips of tricks to exploit massive core count for a \_forcemerge? --- ## [High Memory buffer/cache Kubernetes](https://discuss.elastic.co/t/high-memory-buffer-cache-kubernetes/197569)
**Author:** [@beyond](https://discuss.elastic.co/u/beyond)\ **Replies:** 0\ **Last updated:** [August 30, 2019, 6:50pm UTC](https://discuss.elastic.co/t/high-memory-buffer-cache-kubernetes/197569 "2019-08-30T18:50:23Z")
Describe the bug i tried to start a cluster in kubernetes with below nodes while setting pods memory limits 3G 2 clients nodes 3 masters nodes 3 Data nodes The problem that i found is that elastic pods dont see this… --- ## [Questions related to Elastic Cloud: upsizing, load-balancing, auto-restarts, S3 archiving](https://discuss.elastic.co/t/questions-related-to-elastic-cloud-upsizing-load-balancing-auto-restarts-s3-archiving/196459)
**Author:** [@marko\_vranjkovic](https://discuss.elastic.co/u/marko_vranjkovic)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 6:32pm UTC](https://discuss.elastic.co/t/questions-related-to-elastic-cloud-upsizing-load-balancing-auto-restarts-s3-archiving/196459 "2019-08-30T18:32:56Z")
Hello, I'm doing a research on Elastic Cloud using AWS and have several questions: Can we down/upsize elastic instances without downtime? The endpoint here: Is that an endpoint to a load balancer? If is, which … --- ## [Realtime Clone in cloud without affecting Local Cluster](https://discuss.elastic.co/t/realtime-clone-in-cloud-without-affecting-local-cluster/196806)
**Author:** [@sspilleman](https://discuss.elastic.co/u/sspilleman)\ **Replies:** 2\ **Last updated:** [August 30, 2019, 6:28pm UTC](https://discuss.elastic.co/t/realtime-clone-in-cloud-without-affecting-local-cluster/196806 "2019-08-30T18:28:06Z")
Hi, I have a 3-node cluster on-premise. I want to create a full clone in a cloud (oracle). that syncs a few indexes to the on-premise cluster. My cloud environment is not "always-on" however. I don't want my local on-p… --- ## [ELK HA with 2 logstash nodes](https://discuss.elastic.co/t/elk-ha-with-2-logstash-nodes/195860)
**Author:** [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\ **Replies:** 2\ **Last updated:** [August 30, 2019, 6:23pm UTC](https://discuss.elastic.co/t/elk-ha-with-2-logstash-nodes/195860 "2019-08-30T18:23:48Z")
Hi Everyone, Trying to setup an ELK stack with high availability using below configurations. 1 Kibana node 3 Elasticsearch nodes ( 1 master and 2 child) 2 Logstash nodes Can someone please help me setting up this co… --- ## [How to write case statement in Where clause](https://discuss.elastic.co/t/how-to-write-case-statement-in-where-clause/197220)
**Author:** [@navjeet.singh](https://discuss.elastic.co/u/navjeet.singh)\ **Replies:** 4\ **Last updated:** [August 30, 2019, 6:10pm UTC](https://discuss.elastic.co/t/how-to-write-case-statement-in-where-clause/197220 "2019-08-30T18:10:13Z")
Hello Team , i am trying to run the below query but it gives me error as mismatch any idea what i am doing wrong. SELECT \* FROM "chat\_comment" c1 where (c1."createdDate" \>= '2019-08-27' AND c1."createdDate" \<= '20… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1924) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1926)