# Top **URL:** https://discuss.elastic.co/top.md?page=1048&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1049 --- ## [Kibana - Translate Filter Options](https://discuss.elastic.co/t/kibana-translate-filter-options/223930)
**Author:** [@charlz](https://discuss.elastic.co/u/charlz)\ **Replies:** 4\ **Last updated:** [May 12, 2020, 9:30am UTC](https://discuss.elastic.co/t/kibana-translate-filter-options/223930 "2020-05-12T09:30:38Z")
Hi, I am using 7.6 version I have a use case, in an Index, a Field will have Integer values, it has to mapped to Text when displayed as Filter in Kibana and this Text will also need to be translatable in two languages. … --- ## [Skipping rollover option](https://discuss.elastic.co/t/skipping-rollover-option/209750)
**Author:** [@ark516](https://discuss.elastic.co/u/ark516)\ **Replies:** 4\ **Last updated:** [January 28, 2020, 3:34pm UTC](https://discuss.elastic.co/t/skipping-rollover-option/209750 "2020-01-28T15:34:12Z")
I have enabled skipping rollover option while using index lifyce cycle policy . But ILM still tries to perform rollover. https://www.elastic.co/guide/en/elasticsearch/reference/current/skipping-rollover.html below is t… --- ## [Automatically Updating the Blacklisted IP on a daily basis](https://discuss.elastic.co/t/automatically-updating-the-blacklisted-ip-on-a-daily-basis/42000)
**Author:** [@praveen\_siem](https://discuss.elastic.co/u/praveen_siem)\ **Replies:** 4\ **Last updated:** [February 16, 2017, 10:44am UTC](https://discuss.elastic.co/t/automatically-updating-the-blacklisted-ip-on-a-daily-basis/42000 "2017-02-16T10:44:26Z")
Hello, We are building a rule "Sucessful Connection to Blacklisted IP". We are doing this using translate filter. We are taking the Blacklisted IPs from SANS or other security websites. Is their any way to automatic… --- ## [ES backups without using snapshots?](https://discuss.elastic.co/t/es-backups-without-using-snapshots/20852)
**Author:** [@Mathew\_D](https://discuss.elastic.co/u/Mathew_D)\ **Replies:** 4\ **Last updated:** [November 20, 2014, 5:40pm UTC](https://discuss.elastic.co/t/es-backups-without-using-snapshots/20852 "2014-11-20T17:40:36Z")
Hi there, Any suggestions as to how I can create full ES backups without using snapshot functionality? The reason I can't use snapshots is because they require a shared directory mounted on all nodes, but my 3-… --- ## [Junit issue with node(local): No shard available](https://discuss.elastic.co/t/junit-issue-with-node-local-no-shard-available/6943)
**Author:** [@Christian\_von\_Wendt\_](https://discuss.elastic.co/u/Christian_von_Wendt_)\ **Replies:** 4\ **Last updated:** [March 8, 2012, 3:16pm UTC](https://discuss.elastic.co/t/junit-issue-with-node-local-no-shard-available/6943 "2012-03-08T15:16:26Z")
Hi, I'm having a junit setup with a local node with data, and on "@BeforeClass", I initialize the node like this: @BeforeClass public static void init() { node = nodeBuilder().local(true).d… --- ## [Filebeat on ECK with AWS Module Fails Due To Metadata Error](https://discuss.elastic.co/t/filebeat-on-eck-with-aws-module-fails-due-to-metadata-error/264616)
**Author:** [@jgriffiths](https://discuss.elastic.co/u/jgriffiths)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 9:21pm UTC](https://discuss.elastic.co/t/filebeat-on-eck-with-aws-module-fails-due-to-metadata-error/264616 "2021-02-17T21:21:41Z")
We are running an Elastic Stack with ECK in EKS (7.8). We noticed that our filebeat daemonset and the AWS module were not processing logs from S3 and our SQS queues backing up. Looking at the logs on our FileBeat conta… --- ## [Default Logstash 6 mapping template is deprecated](https://discuss.elastic.co/t/default-logstash-6-mapping-template-is-deprecated/121613)
**Author:** [@T3rm11](https://discuss.elastic.co/u/T3rm11)\ **Replies:** 0\ **Last updated:** [February 27, 2018, 9:07am UTC](https://discuss.elastic.co/t/default-logstash-6-mapping-template-is-deprecated/121613 "2018-02-27T09:07:52Z")
I just upgraded to ELK 6 and updated my Logstash mapping template to the default one shipped with Logstash 6. When I use this the Elasticsearch deprecation log show me this warning: \[2018-02-27T09:40:46,871\]\[WARN \]\[o.… --- ## [Rolling Restart-Related Anxiety Disorder](https://discuss.elastic.co/t/rolling-restart-related-anxiety-disorder/63558)
**Author:** [@aaron\_ximm](https://discuss.elastic.co/u/aaron_ximm)\ **Replies:** 0\ **Last updated:** [October 21, 2016, 12:50am UTC](https://discuss.elastic.co/t/rolling-restart-related-anxiety-disorder/63558 "2016-10-21T00:50:03Z")
Howdy hey. Is there a doctor in the house? Here at my organization we suffer from Rolling Restart-Related Anxiety Disorder, or, RRRAD. Symptoms include white knuckles, elevated heart rate/blood pressure, and cold … --- ## [Index\_not\_found\_exception error](https://discuss.elastic.co/t/index-not-found-exception-error/321581)
**Author:** [@Reg\_Dancy](https://discuss.elastic.co/u/Reg_Dancy)\ **Replies:** 2\ **Last updated:** [December 21, 2022, 3:13pm UTC](https://discuss.elastic.co/t/index-not-found-exception-error/321581 "2022-12-21T15:13:02Z")
Hello all, I'm working on removing nodes from my cluster to drain and I'm getting the errors {"error":{"root\_cause":\[{"type":"index\_not\_found\_exception","reason":"no such index and \[action.auto\_create\_index\] (\[.monitori… --- ## [Sum aggregation on distinct values query](https://discuss.elastic.co/t/sum-aggregation-on-distinct-values-query/239865)
**Author:** [@Giselle\_Castrejon](https://discuss.elastic.co/u/Giselle_Castrejon)\ **Replies:** 2\ **Last updated:** [July 4, 2020, 8:50pm UTC](https://discuss.elastic.co/t/sum-aggregation-on-distinct-values-query/239865 "2020-07-04T20:50:52Z")
Hi, I am having trouble with my sum aggregation. I am using Elasticsearch \[7.6.1\] and I cant get the sum of each field, my data is the following: POST test\_2/\_doc/1 { "gender": \[ { "name": "other",… --- ## [Difference between histogram bars](https://discuss.elastic.co/t/difference-between-histogram-bars/60457)
**Author:** [@Shubham\_Agrawal](https://discuss.elastic.co/u/Shubham_Agrawal)\ **Replies:** 2\ **Last updated:** [September 22, 2016, 1:13pm UTC](https://discuss.elastic.co/t/difference-between-histogram-bars/60457 "2016-09-22T13:13:46Z")
Hi, I am currently working on custom kibana visualizations. The new visualization is similar to vertical bar chart. In that, i want to use filter aggregation. now instead of showing the metric for each filter, the bars s… --- ## [Computing aggregation bucket size in actions](https://discuss.elastic.co/t/computing-aggregation-bucket-size-in-actions/54465)
**Author:** [@rastro](https://discuss.elastic.co/u/rastro)\ **Replies:** 2\ **Last updated:** [July 1, 2016, 9:38pm UTC](https://discuss.elastic.co/t/computing-aggregation-bucket-size-in-actions/54465 "2016-07-01T21:38:00Z")
I'm trying to get the number of buckets in my aggregation. I tried {{ ctx.payload.aggregations.myAgg.buckets.size() }}, but nothing was displayed. I've seen other posts using that method in conditions, but I need it i… --- ## [Simple query string and upper case prefixes](https://discuss.elastic.co/t/simple-query-string-and-upper-case-prefixes/16675)
**Author:** [@morus\_walter\_ml](https://discuss.elastic.co/u/morus_walter_ml)\ **Replies:** 2\ **Last updated:** [March 28, 2014, 3:24pm UTC](https://discuss.elastic.co/t/simple-query-string-and-upper-case-prefixes/16675 "2014-03-28T15:24:48Z")
Hi, I'm trying to do a prefix query using the simple\_query\_string query. The field I'm searching on it analyzed using an Analyzer named "unstemmed", which basically does lowercase, unicode normalisation and acce… --- ## [Using Logstash http input filter, what is the max file size limit can be sent to it?](https://discuss.elastic.co/t/using-logstash-http-input-filter-what-is-the-max-file-size-limit-can-be-sent-to-it/240839)
**Author:** [@Agniv\_Gon](https://discuss.elastic.co/u/Agniv_Gon)\ **Replies:** 1\ **Last updated:** [July 24, 2020, 7:06am UTC](https://discuss.elastic.co/t/using-logstash-http-input-filter-what-is-the-max-file-size-limit-can-be-sent-to-it/240839 "2020-07-24T07:06:55Z")
I am using Logstash 7.7.1 and using below conf for my logstash. I am trying to send .gz file and in header passing Content-Encoding: gzip which is working fine. But I am clueless about the max size limit which I can send… --- ## [Kibana data table Split row on String with pipe seperator](https://discuss.elastic.co/t/kibana-data-table-split-row-on-string-with-pipe-seperator/196964)
**Author:** [@Kailayla](https://discuss.elastic.co/u/Kailayla)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 2:35pm UTC](https://discuss.elastic.co/t/kibana-data-table-split-row-on-string-with-pipe-seperator/196964 "2019-08-28T14:35:26Z")
Hello, I just started working with Kibana and I am just learning the ropes. I have log messages in a data table, and I want to see the ones that occur the most. There are key values in the messages that differ sometim… --- ## [Dynamic Mapping for Nested json documents in elasticsearch](https://discuss.elastic.co/t/dynamic-mapping-for-nested-json-documents-in-elasticsearch/103496)
**Author:** [@nmalinip](https://discuss.elastic.co/u/nmalinip)\ **Replies:** 1\ **Last updated:** [October 11, 2017, 9:04pm UTC](https://discuss.elastic.co/t/dynamic-mapping-for-nested-json-documents-in-elasticsearch/103496 "2017-10-11T21:04:49Z")
Hi All, We have a requirement to store nested json objects ( depth can be upto 5 levels) in elastic search. I have the current mapping "dynamic\_templates": \[ { "nested\_feature": { "match": "pay… --- ## [Logstash\[ version-1.5.4\] stopped if I insert lumberjack input in configuration](https://discuss.elastic.co/t/logstash-version-1-5-4-stopped-if-i-insert-lumberjack-input-in-configuration/27872)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 1\ **Last updated:** [August 24, 2015, 2:20am UTC](https://discuss.elastic.co/t/logstash-version-1-5-4-stopped-if-i-insert-lumberjack-input-in-configuration/27872 "2015-08-24T02:20:22Z")
Not sure whether I can post this issue here. as I have posted the same on github. Problem : When I insert lumberjack configuration in logstash-1.5.4 , its getting stopped with this error message " The error reported i… --- ## [Kibana and NodeJS](https://discuss.elastic.co/t/kibana-and-nodejs/27667)
**Author:** [@sureshadapa](https://discuss.elastic.co/u/sureshadapa)\ **Replies:** 1\ **Last updated:** [August 20, 2015, 4:52am UTC](https://discuss.elastic.co/t/kibana-and-nodejs/27667 "2015-08-20T04:52:08Z")
I thought the "~\\kibana-4.1.1-windows\\src\\bin\\kibana.bat" should be corrected. As highlighted below.I was able to start Kibana after that change. @echo off SETLOCAL set SCRIPT\_DIR=%~dp0 for %%I in ("%SCRIPT\_DIR%...… --- ## [Disk write and eviction](https://discuss.elastic.co/t/disk-write-and-eviction/34903)
**Author:** [@binurajps](https://discuss.elastic.co/u/binurajps)\ **Replies:** 8\ **Last updated:** [November 19, 2015, 9:04am UTC](https://discuss.elastic.co/t/disk-write-and-eviction/34903 "2015-11-19T09:04:21Z")
Hi Team, Elastic search able to write the data into disk? I think the maximum heap size of the elastic search is 32GB. Once they reach the maximum will get OutOfMemory exception. Is there is any way to evict the old… --- ## [CCR request circuit breakers error](https://discuss.elastic.co/t/ccr-request-circuit-breakers-error/292809)
**Author:** [@dgarcia](https://discuss.elastic.co/u/dgarcia)\ **Replies:** 5\ **Last updated:** [January 5, 2022, 4:58pm UTC](https://discuss.elastic.co/t/ccr-request-circuit-breakers-error/292809 "2022-01-05T16:58:12Z")
Hi, We are using the CCR feature as part of ours process to migrate our data between two cluster, but we are experimenting some unexpected behaviour in the remote cluster. Once begin to follow an index in the remote cl… --- ## [Extract nested fields into new fields](https://discuss.elastic.co/t/extract-nested-fields-into-new-fields/209026)
**Author:** [@a.kuz](https://discuss.elastic.co/u/a.kuz)\ **Replies:** 5\ **Last updated:** [November 25, 2019, 7:28am UTC](https://discuss.elastic.co/t/extract-nested-fields-into-new-fields/209026 "2019-11-25T07:28:23Z")
Hi! I have json input like: Summary{ "Parameters": \[ { "Name": "SentTo", "Value": "User User" }, { "Name": "BlindCopyTo", "Value": … --- ## [Continuous Profile-Guided Optimization (PGO) platform based on Elastic Universal Profiling](https://discuss.elastic.co/t/continuous-profile-guided-optimization-pgo-platform-based-on-elastic-universal-profiling/354605)
**Author:** [@zamazan4ik](https://discuss.elastic.co/u/zamazan4ik)\ **Replies:** 1\ **Last updated:** [March 4, 2024, 1:27pm UTC](https://discuss.elastic.co/t/continuous-profile-guided-optimization-pgo-platform-based-on-elastic-universal-profiling/354605 "2024-03-04T13:27:29Z")
Hi! I evaluate multiple approaches to applying Profile-Guided Optimization (PGO) to the IT ecosystem (if you are interested you can check the results here). According to my tests, PGO helps with achieving better perform… --- ## [Elastic search](https://discuss.elastic.co/t/elastic-search/9575)
**Author:** [@Akash\_Gupta](https://discuss.elastic.co/u/Akash_Gupta)\ **Replies:** 1\ **Last updated:** [November 6, 2012, 12:13pm UTC](https://discuss.elastic.co/t/elastic-search/9575 "2012-11-06T12:13:30Z")
Is elastic search free to be used for commercial purposes? -- --- ## [Triggered esql alert rule does not expose document results](https://discuss.elastic.co/t/triggered-esql-alert-rule-does-not-expose-document-results/375907)
**Author:** [@FPTravStan](https://discuss.elastic.co/u/FPTravStan)\ **Replies:** 2\ **Last updated:** [March 24, 2025, 6:27am UTC](https://discuss.elastic.co/t/triggered-esql-alert-rule-does-not-expose-document-results/375907 "2025-03-24T06:27:05Z")
Hello, I'm looking for some help with getting an ESQL query based alert to expose the documents results so that it can be used in the customDetails of the pagerduty payload when triggered. Looking at the an example of … --- ## [ES regexp not working properly](https://discuss.elastic.co/t/es-regexp-not-working-properly/264297)
**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 3:09pm UTC](https://discuss.elastic.co/t/es-regexp-not-working-properly/264297 "2021-02-15T15:09:39Z")
Hello, I want to query my index and get documents where "@" is present in my "cust\_email" field. GET my\_index/\_search { "sort": \[ { "last\_updated\_date": {"order":"desc"}} \], "\_source": \[ "cust\_email"\], … --- ## [Filebeat startup fail](https://discuss.elastic.co/t/filebeat-startup-fail/173677)
**Author:** [@thps](https://discuss.elastic.co/u/thps)\ **Replies:** 3\ **Last updated:** [March 25, 2019, 12:43pm UTC](https://discuss.elastic.co/t/filebeat-startup-fail/173677 "2019-03-25T12:43:07Z")
Hello everyone, i´m trying to setup elastic-stack as a logserver with elastic search, logstash and filebeat. I´ve tested it on poc-machines with root-acces. Everything works fine. On our productive enviroment i got in … --- ## [Kibana visualizations with terms on Y-axis but without aggregations](https://discuss.elastic.co/t/kibana-visualizations-with-terms-on-y-axis-but-without-aggregations/169225)
**Author:** [@abdulsofts](https://discuss.elastic.co/u/abdulsofts)\ **Replies:** 3\ **Last updated:** [February 21, 2019, 1:10pm UTC](https://discuss.elastic.co/t/kibana-visualizations-with-terms-on-y-axis-but-without-aggregations/169225 "2019-02-21T13:10:41Z")
Hi, I have been struggling since few days to create a timeline chart which contains only terms (not aggregations) on Y-axis and time periods on X-axis. My data contains fields like timestamp, some server names and their… --- ## [What minimal h/w requirements my laptop should have?](https://discuss.elastic.co/t/what-minimal-h-w-requirements-my-laptop-should-have/168383)
**Author:** [@tmtanzeel](https://discuss.elastic.co/u/tmtanzeel)\ **Replies:** 3\ **Last updated:** [February 15, 2019, 3:37pm UTC](https://discuss.elastic.co/t/what-minimal-h-w-requirements-my-laptop-should-have/168383 "2019-02-15T15:37:11Z")
I want to learn EFK stack for college mini project, not very complex. --- ## [Requête pour filter les mêmes messages dans différentes indices d'un même index (Kibana Dashboard))](https://discuss.elastic.co/t/requete-pour-filter-les-memes-messages-dans-differentes-indices-dun-meme-index-kibana-dashboard/132123)
**Author:** [@alicia1](https://discuss.elastic.co/u/alicia1)\ **Replies:** 6\ **Last updated:** [May 16, 2018, 4:35pm UTC](https://discuss.elastic.co/t/requete-pour-filter-les-memes-messages-dans-differentes-indices-dun-meme-index-kibana-dashboard/132123 "2018-05-16T16:35:53Z")
Bonjour, Dans kibana, j'ai plusieurs indices d'un même index, exemple: Index1\_date1, Index1\_date2 et Index\_daten, un même message de log peut retrouver dans une ou plusieurs indices différentes, je souhaite filter ces … --- ## [Why my logstash aggregate sometimes works, sometimes not?](https://discuss.elastic.co/t/why-my-logstash-aggregate-sometimes-works-sometimes-not/293342)
**Author:** [@maoxuguang](https://discuss.elastic.co/u/maoxuguang)\ **Replies:** 7\ **Last updated:** [January 7, 2022, 4:46pm UTC](https://discuss.elastic.co/t/why-my-logstash-aggregate-sometimes-works-sometimes-not/293342 "2022-01-07T16:46:26Z")
for example, sometimes I can get the tag \[ "fordebug\_%{job\_name}" \], it indicates that the aggregate executed successfully, sometimes I can not get this tag. why? I struggled for days but no finding. I am exhausted. cou… --- ## [Using 2.2.0, getting "Nul character not allowed"](https://discuss.elastic.co/t/using-2-2-0-getting-nul-character-not-allowed/53797)
**Author:** [@tmashos](https://discuss.elastic.co/u/tmashos)\ **Replies:** 1\ **Last updated:** [June 23, 2016, 9:19pm UTC](https://discuss.elastic.co/t/using-2-2-0-getting-nul-character-not-allowed/53797 "2016-06-23T21:19:34Z")
I'm getting this error "Nul character not allowed: wa-2016.06.17" which is causing 2 indexes to remain red after my nodes restarted. I've attempted to delete this one (and one other with the same issue), but elasticsearc… --- ## [Recency boost, and boosts in general giving irrelevant responses](https://discuss.elastic.co/t/recency-boost-and-boosts-in-general-giving-irrelevant-responses/229962)
**Author:** [@Kevin\_Ferm](https://discuss.elastic.co/u/Kevin_Ferm)\ **Replies:** 4\ **Last updated:** [May 15, 2020, 4:24am UTC](https://discuss.elastic.co/t/recency-boost-and-boosts-in-general-giving-irrelevant-responses/229962 "2020-05-15T04:24:52Z")
Hi! I have a dataset of about 300k articles, each one of them contains a unix timestamp (unixtimestamp) and a date string (published - "2020-04-14T03:00:00+00:00"). Now, unixtimestamp is in App Search defined as a Numb… --- ## [Sum field values from nested json and put them in new field using logstash ruby plugin](https://discuss.elastic.co/t/sum-field-values-from-nested-json-and-put-them-in-new-field-using-logstash-ruby-plugin/219084)
**Author:** [@Gangadhar\_Mahadevan](https://discuss.elastic.co/u/Gangadhar_Mahadevan)\ **Replies:** 4\ **Last updated:** [February 13, 2020, 1:31am UTC](https://discuss.elastic.co/t/sum-field-values-from-nested-json-and-put-them-in-new-field-using-logstash-ruby-plugin/219084 "2020-02-13T01:31:49Z")
This is my input stored in .log file {"@timestamp":"2020-02-12T17:53:54.305Z","beat":{"hostname":"xx.xx","name":"xx.xx","version":"5.2.1"},"input\_type":"log","log\_dc":"xx","log\_dc\_type":"rg","message":"{\\"server\_name\\":… --- ## [How do I generate a new CA with hostname?](https://discuss.elastic.co/t/how-do-i-generate-a-new-ca-with-hostname/305489)
**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\ **Replies:** 2\ **Last updated:** [May 25, 2022, 3:16am UTC](https://discuss.elastic.co/t/how-do-i-generate-a-new-ca-with-hostname/305489 "2022-05-25T03:16:12Z")
Hello! I need a new http\_ca.crt file with the CN=hostname.net Instead of Subject: CN=Elasticsearch security auto-configuration HTTP CA. But how? Best Andy --- ## [Ingest mixed container logs with text and JSON \[ECK\]\[filebeat\]](https://discuss.elastic.co/t/ingest-mixed-container-logs-with-text-and-json-eck-filebeat/289464)
**Author:** [@Sven\_Eliasson](https://discuss.elastic.co/u/Sven_Eliasson)\ **Replies:** 2\ **Last updated:** [November 18, 2021, 2:54am UTC](https://discuss.elastic.co/t/ingest-mixed-container-logs-with-text-and-json-eck-filebeat/289464 "2021-11-18T02:54:06Z")
Hi, I'm trying to digest logs with Filebeat on our Kubernetes cluster which is using ECK on Kubernetes. We are migrating logs to a JSON format, but many legacy or 3rd party containers use plain logs. So we need to suppo… --- ## [How to calculate elapsed Time between Timestamps in a given Timerange?](https://discuss.elastic.co/t/how-to-calculate-elapsed-time-between-timestamps-in-a-given-timerange/283449)
**Author:** [@Elastomer](https://discuss.elastic.co/u/Elastomer)\ **Replies:** 2\ **Last updated:** [September 12, 2021, 5:25pm UTC](https://discuss.elastic.co/t/how-to-calculate-elapsed-time-between-timestamps-in-a-given-timerange/283449 "2021-09-12T17:25:24Z")
Hallo fellow Users. I would like to know how i can get the Time difference from the "First" to the"Last" Document within a specific Time Range. Question: How much distance did i travel in a specific Time Range. Situat… --- ## [Resetear un cluster - todos los nodos como nuevos](https://discuss.elastic.co/t/resetear-un-cluster-todos-los-nodos-como-nuevos/263842)
**Author:** [@grillo](https://discuss.elastic.co/u/grillo)\ **Replies:** 2\ **Last updated:** [February 10, 2021, 4:13pm UTC](https://discuss.elastic.co/t/resetear-un-cluster-todos-los-nodos-como-nuevos/263842 "2021-02-10T16:13:07Z")
Hola a todos, Hace unos pocos años que estoy trabajando con esta solución ELK y no consigo reiniciar todos los nodos de un cluster para… empezar de cero con un nuevo cluster 1º - Eliminar todos los datos almacenados S… --- ## [How to check multiple values using if else condition in field and add new values to another field?](https://discuss.elastic.co/t/how-to-check-multiple-values-using-if-else-condition-in-field-and-add-new-values-to-another-field/228331)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 3:10pm UTC](https://discuss.elastic.co/t/how-to-check-multiple-values-using-if-else-condition-in-field-and-add-new-values-to-another-field/228331 "2020-04-16T15:10:55Z")
HI, I want to add a code which contains if else conditions which helps me to add values ​​to a new field according to conditions on another field. for example; Blockquote if \[Duration\] \>= 360 { mutate { add\_field … --- ## [Created scripted fields to break out JSON values](https://discuss.elastic.co/t/created-scripted-fields-to-break-out-json-values/175827)
**Author:** [@elastimatic](https://discuss.elastic.co/u/elastimatic)\ **Replies:** 2\ **Last updated:** [April 8, 2019, 1:14pm UTC](https://discuss.elastic.co/t/created-scripted-fields-to-break-out-json-values/175827 "2019-04-08T13:14:45Z")
I have been failing repeatedly trying to create a Scripted Field that will break out nested JSON values as separate columns. (They are fields that indicate whether web traffic comes from a bot or spider) What am I missin… --- ## [Displaying a signal element in Vega visualization within a Kibana dashboard](https://discuss.elastic.co/t/displaying-a-signal-element-in-vega-visualization-within-a-kibana-dashboard/302562)
**Author:** [@mbsnider](https://discuss.elastic.co/u/mbsnider)\ **Replies:** 5\ **Last updated:** [April 18, 2022, 1:11pm UTC](https://discuss.elastic.co/t/displaying-a-signal-element-in-vega-visualization-within-a-kibana-dashboard/302562 "2022-04-18T13:11:13Z")
I'm building my own visualizations in Vega, and I am adding signals to my Vega code using the "bind" option to have a "range" or "select" object that the user of my Kibana dashboard can use to customize the visualization… --- ## [X-Pack watch for storage usage (disk usage)](https://discuss.elastic.co/t/x-pack-watch-for-storage-usage-disk-usage/99762)
**Author:** [@FlorinAndrei](https://discuss.elastic.co/u/FlorinAndrei)\ **Replies:** 1\ **Last updated:** [September 7, 2017, 11:06pm UTC](https://discuss.elastic.co/t/x-pack-watch-for-storage-usage-disk-usage/99762 "2017-09-07T23:06:25Z")
I’m looking at this example: https://www.elastic.co/guide/en/x-pack/current/watch-cluster-status.html PUT \_xpack/watcher/watch/cluster\_health\_watch { "trigger" : { "schedule" : { "interval" : "10s" } }, "inpu… --- ## [ECK vs Elastic Cloud](https://discuss.elastic.co/t/eck-vs-elastic-cloud/258878)
**Author:** [@wittydavid](https://discuss.elastic.co/u/wittydavid)\ **Replies:** 3\ **Last updated:** [December 31, 2020, 3:14am UTC](https://discuss.elastic.co/t/eck-vs-elastic-cloud/258878 "2020-12-31T03:14:08Z")
Hi all, I'm researching the main differences between using an ECK on a GKE on GCP vs just going for the fully managed Elastic-cloud solution. One of our main concerns is the price differences. Is there some online calc… --- ## [Elasticsearch - query with 2 conditions](https://discuss.elastic.co/t/elasticsearch-query-with-2-conditions/238273)
**Author:** [@Rohlik](https://discuss.elastic.co/u/Rohlik)\ **Replies:** 3\ **Last updated:** [June 26, 2020, 1:15pm UTC](https://discuss.elastic.co/t/elasticsearch-query-with-2-conditions/238273 "2020-06-26T13:15:40Z")
Hi there, I want get result from Elasticsearch of specific fields (and their values) which match 2 criteria - date and string match. But I something doing wrong, because I receiving this error: \[match\] malformed quer… --- ## [There's no APM index pattern available. To use the Query bar 6.5.4](https://discuss.elastic.co/t/theres-no-apm-index-pattern-available-to-use-the-query-bar-6-5-4/171040)
**Author:** [@alerta](https://discuss.elastic.co/u/alerta)\ **Replies:** 8\ **Last updated:** [March 11, 2019, 12:21pm UTC](https://discuss.elastic.co/t/theres-no-apm-index-pattern-available-to-use-the-query-bar-6-5-4/171040 "2019-03-11T12:21:52Z")
Kibana version: 6.5.4 Elasticsearch version: 6.5.4 APM Server version: 6.5.4 APM Agent language and version: java 1.4.0 Browser version: Version 69.0.3497.100 (Official Build) (64-bit) Original install method (e.g.… --- ## [Best practices for reading elastic data to logstash](https://discuss.elastic.co/t/best-practices-for-reading-elastic-data-to-logstash/138570)
**Author:** [@dmamalis](https://discuss.elastic.co/u/dmamalis)\ **Replies:** 8\ **Last updated:** [July 9, 2018, 9:23am UTC](https://discuss.elastic.co/t/best-practices-for-reading-elastic-data-to-logstash/138570 "2018-07-09T09:23:35Z")
Greetings to everybody, having only scratched the surface of the ELK stack I found myself in the following situation: one of my linux servers runs a few services which have built-in functionality to send logs directly t… --- ## [Query on a remote server](https://discuss.elastic.co/t/query-on-a-remote-server/105330)
**Author:** [@Wessam](https://discuss.elastic.co/u/Wessam)\ **Replies:** 3\ **Last updated:** [October 30, 2017, 6:35am UTC](https://discuss.elastic.co/t/query-on-a-remote-server/105330 "2017-10-30T06:35:44Z")
Hello, I'm currently trying to setup and work with Kibana from a laptop. Is it possible to ssh to a remote server from windows to query without installing any applications on the remote server? --- ## [ES heap components](https://discuss.elastic.co/t/es-heap-components/72683)
**Author:** [@Utkarsh\_Pyne](https://discuss.elastic.co/u/Utkarsh_Pyne)\ **Replies:** 3\ **Last updated:** [January 31, 2017, 12:12pm UTC](https://discuss.elastic.co/t/es-heap-components/72683 "2017-01-31T12:12:44Z")
Recently the heap utilization went close to 98% for about 2-3 hosts in the cluster which triggered GC. GC ran for quite long duration (about 300 seconds for 10-12 in an hours) and after that even heap utilization didn't … --- ## [Filter documents based on different values in same field in different documents](https://discuss.elastic.co/t/filter-documents-based-on-different-values-in-same-field-in-different-documents/65875)
**Author:** [@cm\_a](https://discuss.elastic.co/u/cm_a)\ **Replies:** 2\ **Last updated:** [November 14, 2016, 4:32am UTC](https://discuss.elastic.co/t/filter-documents-based-on-different-values-in-same-field-in-different-documents/65875 "2016-11-14T04:32:46Z")
Hi, I have a question regarding the requirement in elastic-search. I have following documents in my index. { "name":"a1", "userId": 1, "tag":"tag1" }, { "name":"abc", "userId":1, "tag":"tag2… --- ## [Abount compress algorithms](https://discuss.elastic.co/t/abount-compress-algorithms/178345)
**Author:** [@Arizon](https://discuss.elastic.co/u/Arizon)\ **Replies:** 3\ **Last updated:** [April 25, 2019, 12:37pm UTC](https://discuss.elastic.co/t/abount-compress-algorithms/178345 "2019-04-25T12:37:12Z")
Hello， as i know, elasticsearch provide two compression algorithms, lz4 and deflate. The former focused on compression and decompression speed. And the latter means more space saving. Recently, I have done a test. I re… --- ## [Snapshot to S3 compatible storage issue](https://discuss.elastic.co/t/snapshot-to-s3-compatible-storage-issue/226510)
**Author:** [@Sergey\_Mucha](https://discuss.elastic.co/u/Sergey_Mucha)\ **Replies:** 4\ **Last updated:** [April 8, 2020, 12:37pm UTC](https://discuss.elastic.co/t/snapshot-to-s3-compatible-storage-issue/226510 "2020-04-08T12:37:44Z")
Stack ES 6.8.2 Minio S3 VERSION: 2019-10-12T01:39:57Z I have es cluster running. When I try to create repo for s3 on minio with { "type": "s3", "settings": { "bucket": "elasticsearch-backups", "endpoint": "dns… [Previous page](https://discuss.elastic.co/top.md?page=1047&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1049&per_page=50&period=all)