# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1929 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1930 --- ## [After upgrading to 7.3.1 - esaggs can't read doc\_count undefined](https://discuss.elastic.co/t/after-upgrading-to-7-3-1-esaggs-cant-read-doc-count-undefined/197387)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [August 29, 2019, 6:42pm UTC](https://discuss.elastic.co/t/after-upgrading-to-7-3-1-esaggs-cant-read-doc-count-undefined/197387 "2019-08-29T18:42:40Z")
This is just so other people had same problem. Error \*\*\[esaggs\] \> Cannot read property 'doc\_count' of undefined \*\* After upgrade from any version to 7.3.1 your visulize will break if you have use filter because by de… --- ## [Monitoring fail to insert due mapping error](https://discuss.elastic.co/t/monitoring-fail-to-insert-due-mapping-error/197401)
**Author:** [@Sebastian\_Herrera](https://discuss.elastic.co/u/Sebastian_Herrera)\ **Replies:** 0\ **Last updated:** [August 29, 2019, 6:40pm UTC](https://discuss.elastic.co/t/monitoring-fail-to-insert-due-mapping-error/197401 "2019-08-29T18:40:45Z")
Hello, i am having an issue with elasticsearch monitoring index, in elasticsearch i am having this log java.lang.IllegalArgumentException: Rejecting mapping update to \[.monitoring-es-6-2019.08.29\] as the final mapping … --- ## [Kibana alerts](https://discuss.elastic.co/t/kibana-alerts/197336)
**Author:** [@Mohan\_babu\_71](https://discuss.elastic.co/u/Mohan_babu_71)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 6:15pm UTC](https://discuss.elastic.co/t/kibana-alerts/197336 "2019-08-29T18:15:47Z")
Hello In my Company we are using ELK Stack for micro-services logs in AWS. I have setup kibana alerts to slack.Now we are getting the alerts to slack. But, we need to get more information about the logs. For example:- … --- ## [Current date time in kibana watcher action body](https://discuss.elastic.co/t/current-date-time-in-kibana-watcher-action-body/197261)
**Author:** [@Karthik2411](https://discuss.elastic.co/u/Karthik2411)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 6:10pm UTC](https://discuss.elastic.co/t/current-date-time-in-kibana-watcher-action-body/197261 "2019-08-29T18:10:14Z")
How can I print current time/watcher trigger time in action body of a kibana watcher? --- ## [Logstash s3 plugin](https://discuss.elastic.co/t/logstash-s3-plugin/194895)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 4\ **Last updated:** [August 29, 2019, 6:09pm UTC](https://discuss.elastic.co/t/logstash-s3-plugin/194895 "2019-08-29T18:09:21Z")
Whether logstash s3 input plugin will read the files line by line in real time from s3 bucket similar to the filebeat reading from the files? --- ## [StatusLogger Multiple logging implementations found warn message on adding elasticsearch jar](https://discuss.elastic.co/t/statuslogger-multiple-logging-implementations-found-warn-message-on-adding-elasticsearch-jar/196761)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 2\ **Last updated:** [August 29, 2019, 5:51pm UTC](https://discuss.elastic.co/t/statuslogger-multiple-logging-implementations-found-warn-message-on-adding-elasticsearch-jar/196761 "2019-08-29T17:51:32Z")
In an application using log4j with slf4j, I am trying to use elasticsearch jar which depends on log4j2. The application's logging dependency looks like this- \ \org.slf4j\ … --- ## [Network graph over the world's map](https://discuss.elastic.co/t/network-graph-over-the-worlds-map/197308)
**Author:** [@adib](https://discuss.elastic.co/u/adib)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 5:48pm UTC](https://discuss.elastic.co/t/network-graph-over-the-worlds-map/197308 "2019-08-29T17:48:27Z")
hey, I want to display the world's map and place over it locations of users who interact between them. I want to draw lines between the users (e.g. user in London interacts with user in NY). The more interaction, the w… --- ## [Strange behavior with bucket/pipeline aggregations](https://discuss.elastic.co/t/strange-behavior-with-bucket-pipeline-aggregations/197386)
**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\ **Replies:** 0\ **Last updated:** [August 29, 2019, 5:26pm UTC](https://discuss.elastic.co/t/strange-behavior-with-bucket-pipeline-aggregations/197386 "2019-08-29T17:26:56Z")
Hi I have logs index with events logged every sec. The date filed is request\_dtm. I am trying to build the data visualization to plot in below format to have 24 rows per a day. "Transaction Hour - Total Requests - Mi… --- ## [Conditional sort](https://discuss.elastic.co/t/conditional-sort/197372)
**Author:** [@Kennedy\_Batista](https://discuss.elastic.co/u/Kennedy_Batista)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 5:15pm UTC](https://discuss.elastic.co/t/conditional-sort/197372 "2019-08-29T17:15:32Z")
Hi, I have the following index: "norm\_id": { "type": "keyword" }, "precedence": { "type": "float" }, … --- ## [Grok filter date error](https://discuss.elastic.co/t/grok-filter-date-error/196599)
**Author:** [@zolthar-z](https://discuss.elastic.co/u/zolthar-z)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 4:29pm UTC](https://discuss.elastic.co/t/grok-filter-date-error/196599 "2019-08-29T16:29:15Z")
Hello My current platform is composed by filebeat-\>logstash-\>elasticsearch-\>Kibana (everything in 7.3 version) and I have configured a grok in logstash, the grok extract the time from the log and put it in the @timestam… --- ## [How are these fields created?](https://discuss.elastic.co/t/how-are-these-fields-created/197333)
**Author:** [@Ihor\_Menshikov](https://discuss.elastic.co/u/Ihor_Menshikov)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 4:20pm UTC](https://discuss.elastic.co/t/how-are-these-fields-created/197333 "2019-08-29T16:20:31Z")
Hi, I have an elasticsearch 5.5 index that has 2 fields: percentl50 and percentl90. I try to find how do we generate these fields and found no way they can get data. No application is writing data into those fields, the… --- ## [Facing Error in Painless script in Kibana Version 7.3, But same script is working in 6.5.3](https://discuss.elastic.co/t/facing-error-in-painless-script-in-kibana-version-7-3-but-same-script-is-working-in-6-5-3/197345)
**Author:** [@vinay.rao](https://discuss.elastic.co/u/vinay.rao)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 4:17pm UTC](https://discuss.elastic.co/t/facing-error-in-painless-script-in-kibana-version-7-3-but-same-script-is-working-in-6-5-3/197345 "2019-08-29T16:17:11Z")
Dear Team, Am facing error in Painless script in version 7.3. Same script is working fine in the version 6.5.3. Please help to identify the issue. Error message : Script is invalid. View script preview for details(Atta… --- ## [Logstash : Extract values from a String field in Json](https://discuss.elastic.co/t/logstash-extract-values-from-a-string-field-in-json/197349)
**Author:** [@chimbu3306](https://discuss.elastic.co/u/chimbu3306)\ **Replies:** 3\ **Last updated:** [August 29, 2019, 4:15pm UTC](https://discuss.elastic.co/t/logstash-extract-values-from-a-string-field-in-json/197349 "2019-08-29T16:15:32Z")
I have the below Json submitted to my logstash from kinesis where the message string in the json contains all the required values which I need to store it as a separate field in elasticsearch . Currently its stored as a … --- ## [Increase Elasticsearch Diskspace](https://discuss.elastic.co/t/increase-elasticsearch-diskspace/197379)
**Author:** [@Callonski](https://discuss.elastic.co/u/Callonski)\ **Replies:** 0\ **Last updated:** [August 29, 2019, 4:14pm UTC](https://discuss.elastic.co/t/increase-elasticsearch-diskspace/197379 "2019-08-29T16:14:03Z")
I'm running a ES cluster on GCE (Google compute engine). I'm starting to run out of space and increased the disk-space in the GCE console. Elasticsearch does not seem to pick up this change. Do I have to do some kind of… --- ## [Any workaround for kibana error "Object in arrays are not well supported"](https://discuss.elastic.co/t/any-workaround-for-kibana-error-object-in-arrays-are-not-well-supported/197343)
**Author:** [@sagar.it01](https://discuss.elastic.co/u/sagar.it01)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 3:58pm UTC](https://discuss.elastic.co/t/any-workaround-for-kibana-error-object-in-arrays-are-not-well-supported/197343 "2019-08-29T15:58:11Z")
Hi.., Do we have any kind of workaround for kibana error :"Object in arrays are not well supported" Object array is as follow : System.processors { "name": "Intel(R) Core(TM) i5-2310 CPU @ 2.90GHz", "cores": 4, … --- ## [Monitor Status Table](https://discuss.elastic.co/t/monitor-status-table/196921)
**Author:** [@Surya369](https://discuss.elastic.co/u/Surya369)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 3:28pm UTC](https://discuss.elastic.co/t/monitor-status-table/196921 "2019-08-29T15:28:10Z")
There has been an issue that the monitor status tab is only able to show 50 entries whereas I have setup this system for 54 entries. The endpoint status is displaying that all the 54 servers are up but the monitor statu… --- ## [Date\_histogram and top\_hits from unique values only](https://discuss.elastic.co/t/date-histogram-and-top-hits-from-unique-values-only/197363)
**Author:** [@tzn01](https://discuss.elastic.co/u/tzn01)\ **Replies:** 0\ **Last updated:** [August 29, 2019, 2:32pm UTC](https://discuss.elastic.co/t/date-histogram-and-top-hits-from-unique-values-only/197363 "2019-08-29T14:32:13Z")
Hi, I am trying to do a date\_histogram aggregation to show a sum of Duration for each hour. I have the following documents: { "EntryTimestamp": 1567029600000, "Username": "johndoe", "UpdateTimestamp": 1567029600000… --- ## [Elasticsearch output template\_name and template index pattern doubt](https://discuss.elastic.co/t/elasticsearch-output-template-name-and-template-index-pattern-doubt/197219)
**Author:** [@Sebastian\_Herrera](https://discuss.elastic.co/u/Sebastian_Herrera)\ **Replies:** 3\ **Last updated:** [August 29, 2019, 2:50pm UTC](https://discuss.elastic.co/t/elasticsearch-output-template-name-and-template-index-pattern-doubt/197219 "2019-08-29T14:50:57Z")
Hello i am trying to understand more the flow and privileges of the stack in my output configuration i have this hosts =\> "${ELASTICSEARCH\_HOST}" ssl =\> true user =\> "${ELASTICSEARCH\_USER}" … --- ## [How to dynamically bucket low, medium, high on prices and pick 2 per bucker](https://discuss.elastic.co/t/how-to-dynamically-bucket-low-medium-high-on-prices-and-pick-2-per-bucker/197256)
**Author:** [@Gag\_Gag](https://discuss.elastic.co/u/Gag_Gag)\ **Replies:** 5\ **Last updated:** [August 29, 2019, 2:49pm UTC](https://discuss.elastic.co/t/how-to-dynamically-bucket-low-medium-high-on-prices-and-pick-2-per-bucker/197256 "2019-08-29T14:49:58Z")
I have docs containing a price field indexed as such: { price: 100 } { price: 200 } { price: 300 } The prices can be anything from 100 to 1000. Depending on a given filter, I want to bucket in low, med, high price… --- ## [Random top hits from each bucket](https://discuss.elastic.co/t/random-top-hits-from-each-bucket/197358)
**Author:** [@Gag\_Gag](https://discuss.elastic.co/u/Gag_Gag)\ **Replies:** 0\ **Last updated:** [August 29, 2019, 2:20pm UTC](https://discuss.elastic.co/t/random-top-hits-from-each-bucket/197358 "2019-08-29T14:20:43Z")
I have a histogram bucket and when I put a top hits sub aggregation, I see the same results. Is there a way to make it randomly return results from each bucket? --- ## [Decide if nested JSON is JSON or text](https://discuss.elastic.co/t/decide-if-nested-json-is-json-or-text/197338)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 2\ **Last updated:** [August 29, 2019, 1:36pm UTC](https://discuss.elastic.co/t/decide-if-nested-json-is-json-or-text/197338 "2019-08-29T13:36:01Z")
I'm receiving JSON formatted events from Filebeat, parsed as JSON. I.e. Original log: {"date" : "2019...", "data" : { "subdata" : "sometext" }} (CASE1) {"date" : "2019...", "data" : { "subdata" : { "field1" : "blah" … --- ## [Snapshot repository backup - Indices - Content](https://discuss.elastic.co/t/snapshot-repository-backup-indices-content/197341)
**Author:** [@Ab\_Avramidis](https://discuss.elastic.co/u/Ab_Avramidis)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 1:03pm UTC](https://discuss.elastic.co/t/snapshot-repository-backup-indices-content/197341 "2019-08-29T13:03:33Z")
Hi, I would like If someone can give me a brief explanation of what represents each of the content that stored during a snapshot repository backup. I can see in my storage bucket the following type of files and folders… --- ## [Timelion: secondary axis as yesterday total cusum?](https://discuss.elastic.co/t/timelion-secondary-axis-as-yesterday-total-cusum/196856)
**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\ **Replies:** 3\ **Last updated:** [August 29, 2019, 1:29pm UTC](https://discuss.elastic.co/t/timelion-secondary-axis-as-yesterday-total-cusum/196856 "2019-08-29T13:29:24Z")
So! Wild guess here: I've been trying to get it on my own, but I'm running out of ideas on how this could be achieved. The idea would be to have the main axis as points and the secondary as line, with it being the cumula… --- ## [How to filter for field with value NULL?](https://discuss.elastic.co/t/how-to-filter-for-field-with-value-null/197079)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [August 29, 2019, 1:24pm UTC](https://discuss.elastic.co/t/how-to-filter-for-field-with-value-null/197079 "2019-08-29T13:24:07Z")
Hi, I get some json logs which I ingest via logstash (json filter plugin). The current version of the logs is setting null values for some json fields. In Kibana's json view for an event it looks like this: How can… --- ## [Does a snapahot of elasticsearch that ended with 'success' state, can have missing index documents?](https://discuss.elastic.co/t/does-a-snapahot-of-elasticsearch-that-ended-with-success-state-can-have-missing-index-documents/197329)
**Author:** [@Yotam\_Levy](https://discuss.elastic.co/u/Yotam_Levy)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 1:04pm UTC](https://discuss.elastic.co/t/does-a-snapahot-of-elasticsearch-that-ended-with-success-state-can-have-missing-index-documents/197329 "2019-08-29T13:04:17Z")
I have a snapahot I did that ended in 'success' state. but I wonder, is that necessarily means that all the documents inside the index that have been snapshotted, were indeed snapshotted? it has been said in their docu… --- ## [Use a match field from the message field in a conditional of the logstash output](https://discuss.elastic.co/t/use-a-match-field-from-the-message-field-in-a-conditional-of-the-logstash-output/197274)
**Author:** [@dferez](https://discuss.elastic.co/u/dferez)\ **Replies:** 1\ **Last updated:** [August 29, 2019, 12:52pm UTC](https://discuss.elastic.co/t/use-a-match-field-from-the-message-field-in-a-conditional-of-the-logstash-output/197274 "2019-08-29T12:52:12Z")
Hello, it is my first question, if there is something wrong, please forgive me. I present my problem to you: My Logstash I get logs from Sophos XG. The sophos logs reach me in the "message" field, so with the filter, gr… --- ## [Access data from different index using ingest pipeline](https://discuss.elastic.co/t/access-data-from-different-index-using-ingest-pipeline/197312)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 3\ **Last updated:** [August 29, 2019, 12:49pm UTC](https://discuss.elastic.co/t/access-data-from-different-index-using-ingest-pipeline/197312 "2019-08-29T12:49:15Z")
hi all, when a pipeline catches an index operation is there a way to query another index to get a specific field's value? I mean, if the current document will be indexed into index1 but I want to create also another fi… --- ## [Changing the workers number](https://discuss.elastic.co/t/changing-the-workers-number/197098)
**Author:** [@Alisa\_Faingold](https://discuss.elastic.co/u/Alisa_Faingold)\ **Replies:** 6\ **Last updated:** [August 29, 2019, 12:44pm UTC](https://discuss.elastic.co/t/changing-the-workers-number/197098 "2019-08-29T12:44:41Z")
Hi, I'm trying to define transactions with elapsed filter, and I got the "elapsed\_end\_without\_start" tag. I found that the same issue happens to other people and the solution that has been suggested is changing the wor… --- ## [How to build custom plugin](https://discuss.elastic.co/t/how-to-build-custom-plugin/197138)
**Author:** [@LacioDrom](https://discuss.elastic.co/u/LacioDrom)\ **Replies:** 3\ **Last updated:** [August 29, 2019, 12:43pm UTC](https://discuss.elastic.co/t/how-to-build-custom-plugin/197138 "2019-08-29T12:43:23Z")
Hi all, I'd like to install kbn\_network plugin (https://github.com/dlumbrer/kbn\_network) into the Elasticsearch 7.3.0 Saas deployment (trial version), should I build it for 7.3.0 version before installing it? What is t… --- ## [Saved object is missing Could not locate that visualization](https://discuss.elastic.co/t/saved-object-is-missing-could-not-locate-that-visualization/197231)
**Author:** [@akatla](https://discuss.elastic.co/u/akatla)\ **Replies:** 3\ **Last updated:** [August 29, 2019, 12:42pm UTC](https://discuss.elastic.co/t/saved-object-is-missing-could-not-locate-that-visualization/197231 "2019-08-29T12:42:09Z")
Saved object is missing Could not locate that visualization Added sample data but I get this error in Kibana 7.2.0 Elasticsearch is load balanced with 2 nodes (both nodes are master + data ) when I run :9200 \_cat/ind… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1928) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1930)