# Top **URL:** https://discuss.elastic.co/top.md?page=1399&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1400 --- ## [Elastic 7.x - how to create coordinate map?](https://discuss.elastic.co/t/elastic-7-x-how-to-create-coordinate-map/285394)
**Author:** [@ppine7](https://discuss.elastic.co/u/ppine7)\ **Replies:** 6\ **Last updated:** [September 29, 2021, 9:40pm UTC](https://discuss.elastic.co/t/elastic-7-x-how-to-create-coordinate-map/285394 "2021-09-29T21:40:20Z")
Hello, I had a coordinate map visualization created in ES 6.x - but when I try to create a similar one in ES 7.x (Elastic Cloud) - I can't find the same options. In particular, I want to create a Coordinate Map with Sca… --- ## [Can Kibana mutate documents?](https://discuss.elastic.co/t/can-kibana-mutate-documents/264580)
**Author:** [@trympet](https://discuss.elastic.co/u/trympet)\ **Replies:** 6\ **Last updated:** [February 18, 2021, 11:39am UTC](https://discuss.elastic.co/t/can-kibana-mutate-documents/264580 "2021-02-18T11:39:56Z")
I am building a dashboard to track and correlate exceptions and events in a desktop application. Previously, I was using Visual Studio App Center, but since they enforce limits on the number of events per day, I switched… --- ## [Adding asciifolding in default analyzer?](https://discuss.elastic.co/t/adding-asciifolding-in-default-analyzer/3277)
**Author:** [@colinsurprenant](https://discuss.elastic.co/u/colinsurprenant)\ **Replies:** 6\ **Last updated:** [September 1, 2010, 6:37pm UTC](https://discuss.elastic.co/t/adding-asciifolding-in-default-analyzer/3277 "2010-09-01T18:37:57Z")
Hi, I am (still) running 0.8 on a production box and I would like to add the asciifolding filter. I haven't defined mappings for my index (using the default dynamic mapping). Can I simply add the asciifolding fil… --- ## [Mapping null values](https://discuss.elastic.co/t/mapping-null-values/292900)
**Author:** [@Emile\_Plas](https://discuss.elastic.co/u/Emile_Plas)\ **Replies:** 1\ **Last updated:** [December 24, 2021, 4:02pm UTC](https://discuss.elastic.co/t/mapping-null-values/292900 "2021-12-24T16:02:17Z")
Hey everyone! I am quite new to Elasticsearch so feel free to criticize my work method. I am currently working on a project in which multiple pdf documents (a series of court decisions) need to be searched. The PDF docu… --- ## [Kibana Logo and background colour Change](https://discuss.elastic.co/t/kibana-logo-and-background-colour-change/167232)
**Author:** [@madhan88](https://discuss.elastic.co/u/madhan88)\ **Replies:** 1\ **Last updated:** [February 6, 2019, 11:34pm UTC](https://discuss.elastic.co/t/kibana-logo-and-background-colour-change/167232 "2019-02-06T23:34:27Z")
Hello Guys, Good day! I just want to create a customized view of Kibana. I need to understand the method of changing the Kibana UI logo and its background colour. I have got multiple topics regarding the same but nothi… --- ## [Logstash with Grok and \_jsonparsefailure](https://discuss.elastic.co/t/logstash-with-grok-and--jsonparsefailure/63719)
**Author:** [@Guillermo\_Ortiz](https://discuss.elastic.co/u/Guillermo_Ortiz)\ **Replies:** 1\ **Last updated:** [October 26, 2016, 6:01am UTC](https://discuss.elastic.co/t/logstash-with-grok-and--jsonparsefailure/63719 "2016-10-26T06:01:15Z")
I'm trying to parse the access log from NGINX with Logstash but, I get an \_jsonparsefailure although I'm not using a JSON format. Why do I get that \_jsonparsefailure? My input lines are like nginx: 127.0.0.1 - - \[24/Oc… --- ## [Dynamic template for nested object at arbitrary locations in document?](https://discuss.elastic.co/t/dynamic-template-for-nested-object-at-arbitrary-locations-in-document/14024)
**Author:** [@Daniel\_Myung](https://discuss.elastic.co/u/Daniel_Myung)\ **Replies:** 1\ **Last updated:** [October 21, 2013, 9:35am UTC](https://discuss.elastic.co/t/dynamic-template-for-nested-object-at-arbitrary-locations-in-document/14024 "2013-10-21T09:35:26Z")
Hi, We have user defined data coming in that may have interspersed within its data a "packet" of well structured data that we'd like to index as a nested document. so for example: form1 = { "name": "dan", … --- ## [How to write alert rule in Elastalert](https://discuss.elastic.co/t/how-to-write-alert-rule-in-elastalert/147575)
**Author:** [@Pradnya](https://discuss.elastic.co/u/Pradnya)\ **Replies:** 1\ **Last updated:** [September 15, 2018, 3:55pm UTC](https://discuss.elastic.co/t/how-to-write-alert-rule-in-elastalert/147575 "2018-09-15T15:55:01Z")
I have configured metricbeat-Elasticsearch-kibana to monitor docker containers metric. and Elastalert to get email alert. I am getting CPU, memory, Network usage perfectly. and getting docker container status as field:… --- ## [Make a grok pattern for a field that might be missing](https://discuss.elastic.co/t/make-a-grok-pattern-for-a-field-that-might-be-missing/327014)
**Author:** [@ira-zaya](https://discuss.elastic.co/u/ira-zaya)\ **Replies:** 3\ **Last updated:** [March 6, 2023, 11:12am UTC](https://discuss.elastic.co/t/make-a-grok-pattern-for-a-field-that-might-be-missing/327014 "2023-03-06T11:12:38Z")
Hi! There are logs in the following format: 2023-03-05 17:07:01.586+0000 \[L: WARN\] \[O: A.b.c.d.e.FGScript\] \[I: \] \[U: email@example.com\] \[S: \] \[P: \] \[T: ABCProcessor-23 \] @@@ aboba=5 beboba=1 ceboba=4 So I have a correc… --- ## [Filters contains invalid key: status](https://discuss.elastic.co/t/filters-contains-invalid-key-status/285267)
**Author:** [@dgetz-riskalyze](https://discuss.elastic.co/u/dgetz-riskalyze)\ **Replies:** 3\ **Last updated:** [September 29, 2021, 6:04pm UTC](https://discuss.elastic.co/t/filters-contains-invalid-key-status/285267 "2021-09-29T18:04:55Z")
We added a new field to the schema of our engine, but not all of the documents have the field yet, which is named "status". When we do the App Search query below, we get the error, "Filters contains invalid key: status".… --- ## [Watcher Timestamp showing in EPOCH](https://discuss.elastic.co/t/watcher-timestamp-showing-in-epoch/283075)
**Author:** [@arunhk3](https://discuss.elastic.co/u/arunhk3)\ **Replies:** 3\ **Last updated:** [September 3, 2021, 2:51pm UTC](https://discuss.elastic.co/t/watcher-timestamp-showing-in-epoch/283075 "2021-09-03T14:51:28Z")
Hi All, I was creating a watch in watcher which looks as below { "trigger" : { "schedule" : { "interval" : "3h" } } }, "input": { "search": { "request": { "search\_type": "query\_the… --- ## [We had a Elasticsearch cluster when i check the nodes its is showing 3 nodes active but in the logs it is saying one node is not active](https://discuss.elastic.co/t/we-had-a-elasticsearch-cluster-when-i-check-the-nodes-its-is-showing-3-nodes-active-but-in-the-logs-it-is-saying-one-node-is-not-active/236862)
**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\ **Replies:** 3\ **Last updated:** [June 12, 2020, 12:05pm UTC](https://discuss.elastic.co/t/we-had-a-elasticsearch-cluster-when-i-check-the-nodes-its-is-showing-3-nodes-active-but-in-the-logs-it-is-saying-one-node-is-not-active/236862 "2020-06-12T12:05:13Z")
we had a elasticsearch cluster with 3 nodes and all the nodes are running i checked that by using \[root@ip-10-0-0-170 elasticsearch\]# curl --user elastic:yLwz4s2yRGiUQsXyFkXw -X GET "10.0.0.170:9200/\_cat/nodes?pretty"… --- ## [Need to understand logs loss](https://discuss.elastic.co/t/need-to-understand-logs-loss/164621)
**Author:** [@abrejuin](https://discuss.elastic.co/u/abrejuin)\ **Replies:** 3\ **Last updated:** [February 28, 2019, 5:16pm UTC](https://discuss.elastic.co/t/need-to-understand-logs-loss/164621 "2019-02-28T17:16:13Z")
Hello, I am creating this Topic because I really don't know what to do with a behaviour I just noticed. Actually, I have an Elastic stack which is working and one application server is sending me logs with rsyslog. Ev… --- ## [日本におけるElastic CloudでのAWSかGCPかの選定について。](https://discuss.elastic.co/t/elastic-cloud-aws-gcp/163911)
**Author:** [@MarketVS](https://discuss.elastic.co/u/MarketVS)\ **Replies:** 3\ **Last updated:** [January 21, 2019, 7:33am UTC](https://discuss.elastic.co/t/elastic-cloud-aws-gcp/163911 "2019-01-21T07:33:23Z")
Tokyo RegionにGCPで構成されているメインのシステムがある時に、Elastic Cloudのクラウドの選定は、ToKyo RegionのあるAWSか、ToKyo RegionがないGCPのどちらが良いでしょうか（Elasticsearchのレスポンスが速いかどうかなど。） GCPであれば、どちらのサポートされているどこのRegionが一番レスポンスなどが速くなるでしょうか。 また、Elastic CloudのGCPクラウ… --- ## [Elasticsearch 5.6.0 not starting (no logs in logfiles made)](https://discuss.elastic.co/t/elasticsearch-5-6-0-not-starting-no-logs-in-logfiles-made/100836)
**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\ **Replies:** 3\ **Last updated:** [September 18, 2017, 9:30am UTC](https://discuss.elastic.co/t/elasticsearch-5-6-0-not-starting-no-logs-in-logfiles-made/100836 "2017-09-18T09:30:58Z")
I am having trouble starting elasticsearch. I upgraded it to 5.6.0 2 days ago. Today, I stopped it, and installed searchguard for 5.6.0. Now, when I started elasticsearch, it is not getting started. No logs are being… --- ## [How to filter results based upon values using logstash ruby](https://discuss.elastic.co/t/how-to-filter-results-based-upon-values-using-logstash-ruby/89913)
**Author:** [@sachintanpure85](https://discuss.elastic.co/u/sachintanpure85)\ **Replies:** 3\ **Last updated:** [June 20, 2017, 12:02pm UTC](https://discuss.elastic.co/t/how-to-filter-results-based-upon-values-using-logstash-ruby/89913 "2017-06-20T12:02:01Z")
I want filter the results based upon some column values of the index and perform math operation. 'tier0\_cnt','tier1\_cnt','tier2\_cnt','tier0\_amt','tier1\_amt','tier2\_amt' are the columns of my index. I am using below logst… --- ## [Field data or doc values on the not\_analyzed "raw" value of an analyzed string?](https://discuss.elastic.co/t/field-data-or-doc-values-on-the-not-analyzed-raw-value-of-an-analyzed-string/67420)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 3\ **Last updated:** [December 5, 2016, 12:06am UTC](https://discuss.elastic.co/t/field-data-or-doc-values-on-the-not-analyzed-raw-value-of-an-analyzed-string/67420 "2016-12-05T00:06:44Z")
We are using ES 2.3.2. We have a large number of fields that we are aggregating on to create a facet like filter pane experience. The values are either non-string, not\_analyzed, or a multi-field for an analyzed string … --- ## [Tag and include/exclude filters](https://discuss.elastic.co/t/tag-and-include-exclude-filters/13640)
**Author:** [@seb\_2](https://discuss.elastic.co/u/seb_2)\ **Replies:** 3\ **Last updated:** [September 17, 2013, 10:23am UTC](https://discuss.elastic.co/t/tag-and-include-exclude-filters/13640 "2013-09-17T10:23:06Z")
Hi I'm trying to use node.tag to force some indexes to be on a specific node. Let's say, my cluster has 3 nodes with tag1 (master/data), tag2(data), tag3(data). I want to create an index that has to be only on t… --- ## [Data not appearing in elasticsearch after being received by APM server](https://discuss.elastic.co/t/data-not-appearing-in-elasticsearch-after-being-received-by-apm-server/325667)
**Author:** [@Marko\_Todoric](https://discuss.elastic.co/u/Marko_Todoric)\ **Replies:** 2\ **Last updated:** [February 18, 2023, 10:00pm UTC](https://discuss.elastic.co/t/data-not-appearing-in-elasticsearch-after-being-received-by-apm-server/325667 "2023-02-18T22:00:36Z")
Kibana version: 8.6.1 Elasticsearch version: 8.6.1 APM Server version: 8.6.1 APM Agent language and version: Java 8 (Elastic APM Agent 1.35 and 1.36) Browser version: Firefox 102.0 (64-bit) Original install met… --- ## [How yo make a fuzzy query with the new java api](https://discuss.elastic.co/t/how-yo-make-a-fuzzy-query-with-the-new-java-api/307563)
**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\ **Replies:** 2\ **Last updated:** [June 18, 2022, 2:38pm UTC](https://discuss.elastic.co/t/how-yo-make-a-fuzzy-query-with-the-new-java-api/307563 "2022-06-18T14:38:21Z")
I try to make a fuzzy query but it doesn't work. Can someone help ? --- ## [\[Canvas\] How to pass variable as timerange to savedVisualization](https://discuss.elastic.co/t/canvas-how-to-pass-variable-as-timerange-to-savedvisualization/279602)
**Author:** [@Salman\_Ahmed](https://discuss.elastic.co/u/Salman_Ahmed)\ **Replies:** 2\ **Last updated:** [August 12, 2021, 1:52am UTC](https://discuss.elastic.co/t/canvas-how-to-pass-variable-as-timerange-to-savedvisualization/279602 "2021-08-12T01:52:42Z")
I have created a canvas with multiple Kibana visualization and need to dynamically (from url parameter" pass the "from" argument of the visualization. It works until I save/run the expression at which point it changes th… --- ## [Logstash container using AWS-S3-output-plugin not shipping logs](https://discuss.elastic.co/t/logstash-container-using-aws-s3-output-plugin-not-shipping-logs/197659)
**Author:** [@KalleDania](https://discuss.elastic.co/u/KalleDania)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 6:30am UTC](https://discuss.elastic.co/t/logstash-container-using-aws-s3-output-plugin-not-shipping-logs/197659 "2019-09-03T06:30:51Z")
Hello all, i hope some friendly soul can help me debug why my setup is not working. First off, the goal: Syslogs --\> Container running Logstash --\> AWS S3 bucket I have the container up and running without errors, howe… --- ## [Parsing xml message inside json file](https://discuss.elastic.co/t/parsing-xml-message-inside-json-file/189100)
**Author:** [@saisimo02](https://discuss.elastic.co/u/saisimo02)\ **Replies:** 2\ **Last updated:** [July 8, 2019, 7:29am UTC](https://discuss.elastic.co/t/parsing-xml-message-inside-json-file/189100 "2019-07-08T07:29:32Z")
Hello, I am getting an error while filtering a json file. Previously, I was using filebeat to send data directly to logstash, but now I am using kafka between filebeat and logstash. So the output is not the same: Previ… --- ## [Data ignores datatype!](https://discuss.elastic.co/t/data-ignores-datatype/159849)
**Author:** [@inandi](https://discuss.elastic.co/u/inandi)\ **Replies:** 2\ **Last updated:** [December 7, 2018, 6:33am UTC](https://discuss.elastic.co/t/data-ignores-datatype/159849 "2018-12-07T06:33:43Z")
I am trying to insert data to ES using logstash template. Data is inserting fine but I have an issue with the data type. I have set datatype date for a particular data (in example reviewId), but it is also letting insert… --- ## [Request timeout on mget?](https://discuss.elastic.co/t/request-timeout-on-mget/110587)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 2\ **Last updated:** [December 8, 2017, 9:42pm UTC](https://discuss.elastic.co/t/request-timeout-on-mget/110587 "2017-12-08T21:42:59Z")
Can mget requests in realtime mode timeout? Specifically, I'm curious if mget requests via the official Python client can timeout. --- ## [Could not config test logstash](https://discuss.elastic.co/t/could-not-config-test-logstash/108153)
**Author:** [@Makra](https://discuss.elastic.co/u/Makra)\ **Replies:** 2\ **Last updated:** [November 18, 2017, 6:59am UTC](https://discuss.elastic.co/t/could-not-config-test-logstash/108153 "2017-11-18T06:59:20Z")
Hi I have an issue where i cannot config test logstash configuration file, Looks like a Java issue but could not figured out. JAVA\_HOME and java path is set correctly. I m using CentOS 7 and logstash 5 $ /usr/share/l… --- ## [Avoid overridding of default message field in logstash](https://discuss.elastic.co/t/avoid-overridding-of-default-message-field-in-logstash/63127)
**Author:** [@javatechy](https://discuss.elastic.co/u/javatechy)\ **Replies:** 2\ **Last updated:** [October 17, 2016, 2:09pm UTC](https://discuss.elastic.co/t/avoid-overridding-of-default-message-field-in-logstash/63127 "2016-10-17T14:09:33Z")
I am using logstash to parse my logs. when i am parsing the json (which contains a "message" field) overrides the default message field. I tried using remove\_field option of json{ } filter but that didn't work work for … --- ## [Batch Searches for Threat Data - Indicators Of Compromise](https://discuss.elastic.co/t/batch-searches-for-threat-data-indicators-of-compromise/52759)
**Author:** [@Gman1982](https://discuss.elastic.co/u/Gman1982)\ **Replies:** 2\ **Last updated:** [June 20, 2016, 1:03pm UTC](https://discuss.elastic.co/t/batch-searches-for-threat-data-indicators-of-compromise/52759 "2016-06-20T13:03:17Z")
Hi, We're making use of ELK to do daily Operational Searches in Kibana and it is proving extremely useful. Is there a way to Automate searches, say once or twice a day against our Indices with a script if we had a st… --- ## [Failed parsing date, linux syslog](https://discuss.elastic.co/t/failed-parsing-date-linux-syslog/44549)
**Author:** [@Willie\_Cadete](https://discuss.elastic.co/u/Willie_Cadete)\ **Replies:** 2\ **Last updated:** [March 16, 2016, 12:33pm UTC](https://discuss.elastic.co/t/failed-parsing-date-linux-syslog/44549 "2016-03-16T12:33:52Z")
Hello, Everyone I'm having problems to parse field timestamp, it shoud be something simple but I'm not getting to see! I'm already here trying resolve this all day log example: Mar 8 03:34:15 fw01 block-INPUT IN=w… --- ## [How to make a text field aggregate-able in Kibana](https://discuss.elastic.co/t/how-to-make-a-text-field-aggregate-able-in-kibana/340107)
**Author:** [@Pratishruti](https://discuss.elastic.co/u/Pratishruti)\ **Replies:** 4\ **Last updated:** [August 9, 2023, 6:25am UTC](https://discuss.elastic.co/t/how-to-make-a-text-field-aggregate-able-in-kibana/340107 "2023-08-09T06:25:24Z")
Hi, I am using Kibana 6.8.1 version. We are using EFK. There is a text field name Message, I want to make visualization by using this field. However the field is not showing in option. I have tried to do it by assignin… --- ## [Question about permission for file input \[Linux\]](https://discuss.elastic.co/t/question-about-permission-for-file-input-linux/291108)
**Author:** [@Fosco](https://discuss.elastic.co/u/Fosco)\ **Replies:** 4\ **Last updated:** [December 8, 2021, 11:20am UTC](https://discuss.elastic.co/t/question-about-permission-for-file-input-linux/291108 "2021-12-08T11:20:04Z")
Hi, I have some scripts which download files and need to be read and deleted by logstash afterwards Regarding the permission, the files must be logstash:logstash or only the folder containing the files? Thanks ! --- ## [Documents are stored on elasticsearch, can be checked via query, but Kibana does not find it in the discovery tab](https://discuss.elastic.co/t/documents-are-stored-on-elasticsearch-can-be-checked-via-query-but-kibana-does-not-find-it-in-the-discovery-tab/235206)
**Author:** [@toshi78](https://discuss.elastic.co/u/toshi78)\ **Replies:** 4\ **Last updated:** [June 2, 2020, 2:08pm UTC](https://discuss.elastic.co/t/documents-are-stored-on-elasticsearch-can-be-checked-via-query-but-kibana-does-not-find-it-in-the-discovery-tab/235206 "2020-06-02T14:08:52Z")
Hi! I'm facing an issue on Kibana: Looks like statistics show that a number of documents are available: However, on the Discover tab, it does not find any document, no matter the date range set: No results match y… --- ## [Logstash unable to create custom indices in Elastisearch](https://discuss.elastic.co/t/logstash-unable-to-create-custom-indices-in-elastisearch/211269)
**Author:** [@tritri](https://discuss.elastic.co/u/tritri)\ **Replies:** 4\ **Last updated:** [December 11, 2019, 9:09am UTC](https://discuss.elastic.co/t/logstash-unable-to-create-custom-indices-in-elastisearch/211269 "2019-12-11T09:09:57Z")
I am trying to configure ELK locally on Windows. I have been able to create a pipeline, detect, parse and view logs in Kibana. I now want to define indexation conditionally in the pipeline config, but this is causing som… --- ## [Metric vis on latest date point](https://discuss.elastic.co/t/metric-vis-on-latest-date-point/202037)
**Author:** [@warp](https://discuss.elastic.co/u/warp)\ **Replies:** 4\ **Last updated:** [October 4, 2019, 12:50pm UTC](https://discuss.elastic.co/t/metric-vis-on-latest-date-point/202037 "2019-10-04T12:50:48Z")
I'd like to mix in one dashboard historic data (a date histogram) with simple data e.g. a metric vis that should show metrics of the latest date inside the currently selected timepicker range. Say my date field is statC… --- ## [Multiple codecs? running multiline codec during filter?](https://discuss.elastic.co/t/multiple-codecs-running-multiline-codec-during-filter/193894)
**Author:** [@tedder](https://discuss.elastic.co/u/tedder)\ **Replies:** 4\ **Last updated:** [August 6, 2019, 12:52am UTC](https://discuss.elastic.co/t/multiple-codecs-running-multiline-codec-during-filter/193894 "2019-08-06T00:52:12Z")
I have log entries coming in as a JSON payload. I'm using a json codec, then splitting the entries in a filter. My JSON looks something like this: payload = { "date": "...", "source": "...", "entries": \["line1", "line2"… --- ## [How to get geo.src and geo.dest fields while creating Sankey Chart](https://discuss.elastic.co/t/how-to-get-geo-src-and-geo-dest-fields-while-creating-sankey-chart/182801)
**Author:** [@Pankaj\_Navneet](https://discuss.elastic.co/u/Pankaj_Navneet)\ **Replies:** 4\ **Last updated:** [May 28, 2019, 6:19pm UTC](https://discuss.elastic.co/t/how-to-get-geo-src-and-geo-dest-fields-while-creating-sankey-chart/182801 "2019-05-28T18:19:50Z")
Hi, Can somebody help me in knowing how to get the geo.src & geo.dest fields in Sankey Chart creation? I am trying to parse the Apache logs but I want to have Source IP + Destination IP to view the traffic. or you can s… --- ## [Grok filter with file input](https://discuss.elastic.co/t/grok-filter-with-file-input/150348)
**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\ **Replies:** 4\ **Last updated:** [October 3, 2018, 8:17pm UTC](https://discuss.elastic.co/t/grok-filter-with-file-input/150348 "2018-10-03T20:17:59Z")
Hi I have set of logs that are generated to .log files, and I want to index them in Elasticsearch using Logstash. The log file contains many lines each line looks like the following: 2018-09-26 17:05:34,060 INFO: Proc… --- ## [Histogram from terms aggregation result](https://discuss.elastic.co/t/histogram-from-terms-aggregation-result/140777)
**Author:** [@babolivier](https://discuss.elastic.co/u/babolivier)\ **Replies:** 4\ **Last updated:** [August 2, 2018, 2:22pm UTC](https://discuss.elastic.co/t/histogram-from-terms-aggregation-result/140777 "2018-08-02T14:22:36Z")
Hey, I'm trying to get a histogram (not a date histogram) from the amount of time our users logged in in a given time window. We store a user's username in each document related to any activity from that specific user, … --- ## [Why reporting is a part of x-pack?](https://discuss.elastic.co/t/why-reporting-is-a-part-of-x-pack/113217)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 4\ **Last updated:** [December 27, 2017, 9:13am UTC](https://discuss.elastic.co/t/why-reporting-is-a-part-of-x-pack/113217 "2017-12-27T09:13:15Z")
I want to ask a general question, regrading generating reports from kibana: A very useful feature of kibana is the abilty to generate reports and export dashboards and visualizations automaticly. The thing I don't get i… --- ## [Cannot create Tile Map visualization](https://discuss.elastic.co/t/cannot-create-tile-map-visualization/95520)
**Author:** [@siemnoob](https://discuss.elastic.co/u/siemnoob)\ **Replies:** 4\ **Last updated:** [August 4, 2017, 6:38am UTC](https://discuss.elastic.co/t/cannot-create-tile-map-visualization/95520 "2017-08-04T06:38:41Z")
Hi Guys, I’m dealing with some problem to create a visualization on Kibana. I debugged my previous log stash problem to match the good field with Geo Info and apply a filter to use the GeoIPDatabase, now I have the pop… --- ## [Text Search with more preference to prefix matches](https://discuss.elastic.co/t/text-search-with-more-preference-to-prefix-matches/10388)
**Author:** [@0xff](https://discuss.elastic.co/u/0xff)\ **Replies:** 4\ **Last updated:** [January 19, 2013, 2:58pm UTC](https://discuss.elastic.co/t/text-search-with-more-preference-to-prefix-matches/10388 "2013-01-19T14:58:14Z")
Started to work on elasticsearch recently and it has been an interesting couple of months. I have Indexed few documents in elasticsearch. Each document has got fields like username, biography, post, interests etc… --- ## [Elasticsearch splits field by space on facets](https://discuss.elastic.co/t/elasticsearch-splits-field-by-space-on-facets/8992)
**Author:** [@pere\_roca\_ristol](https://discuss.elastic.co/u/pere_roca_ristol)\ **Replies:** 4\ **Last updated:** [September 11, 2012, 4:15pm UTC](https://discuss.elastic.co/t/elasticsearch-splits-field-by-space-on-facets/8992 "2012-09-11T16:15:58Z")
I am tryingo to do a simple facet request over a field having more than a simple word (simply 'Name1 Name2', sometimes with dots and commas inside) but what I get is... "terms" : \[{ "term" : "Name1", … --- ## [Wrap text in dashboard table](https://discuss.elastic.co/t/wrap-text-in-dashboard-table/283107)
**Author:** [@elastic9](https://discuss.elastic.co/u/elastic9)\ **Replies:** 1\ **Last updated:** [September 2, 2021, 9:27am UTC](https://discuss.elastic.co/t/wrap-text-in-dashboard-table/283107 "2021-09-02T09:27:48Z")
I'm currently on Kibana 7.13.3, and was wondering if it was possible to wrap text in tables made in the dashboard. I've got long text entries, and when visualising them in the dashboard tables, they seem to just truncate… --- ## [Heatmap layered with an image as background](https://discuss.elastic.co/t/heatmap-layered-with-an-image-as-background/234443)
**Author:** [@zhangyongzhe20](https://discuss.elastic.co/u/zhangyongzhe20)\ **Replies:** 1\ **Last updated:** [May 28, 2020, 3:15am UTC](https://discuss.elastic.co/t/heatmap-layered-with-an-image-as-background/234443 "2020-05-28T03:15:12Z")
Hi, I want to ask whether it's possible to customize the visualization in Kibana, which is using heatmap layering with an image as background. Something like the picture in the below. I'm new to the Vega and Kibana and t… --- ## [ILM with multiple indices](https://discuss.elastic.co/t/ilm-with-multiple-indices/203481)
**Author:** [@jtdepalm](https://discuss.elastic.co/u/jtdepalm)\ **Replies:** 1\ **Last updated:** [October 23, 2019, 6:08pm UTC](https://discuss.elastic.co/t/ilm-with-multiple-indices/203481 "2019-10-23T18:08:19Z")
Hello, I am working to set-up a hot-warm-cold-delete policy for my ELK cluster that has multiple indices. I basically have 4 questions and as much data following them up as I thought needed. Many thanks to any help! A… --- ## [Filebeat 6 fails to connect to proxy server](https://discuss.elastic.co/t/filebeat-6-fails-to-connect-to-proxy-server/146955)
**Author:** [@victor3](https://discuss.elastic.co/u/victor3)\ **Replies:** 1\ **Last updated:** [September 3, 2018, 8:28am UTC](https://discuss.elastic.co/t/filebeat-6-fails-to-connect-to-proxy-server/146955 "2018-09-03T08:28:08Z")
I am upgrading filebeat 5 to 6.2. As part of upgrade, I introduce filebeat 6 ssl to replace stunnel. It works well when no proxy between filebeat 6 and Logstash server. With proxy server, filebeat 6 fails to connect to … --- ## [SID field Mapping with Windows Active Directory Users](https://discuss.elastic.co/t/sid-field-mapping-with-windows-active-directory-users/92037)
**Author:** [@saravanan.m](https://discuss.elastic.co/u/saravanan.m)\ **Replies:** 1\ **Last updated:** [July 9, 2017, 5:06pm UTC](https://discuss.elastic.co/t/sid-field-mapping-with-windows-active-directory-users/92037 "2017-07-09T17:06:17Z")
Hi I have created one POC setup in ELK for analyzing EMC ISILON storage audit log. I forwarded the log through Syslog server and filebeat is sending the log to logstash. The ISILON was integrated with Windows AD so i … --- ## [Wildcard index name with date range filter](https://discuss.elastic.co/t/wildcard-index-name-with-date-range-filter/79199)
**Author:** [@tomr](https://discuss.elastic.co/u/tomr)\ **Replies:** 1\ **Last updated:** [March 20, 2017, 5:58am UTC](https://discuss.elastic.co/t/wildcard-index-name-with-date-range-filter/79199 "2017-03-20T05:58:53Z")
Hi, I'm having trouble figuring out whether I can safely use wildcard index names when I have a date range filter, ie whether ES will do magic to query only those indices that should be required by a given date range. … --- ## [Bootstrap failed](https://discuss.elastic.co/t/bootstrap-failed/71490)
**Author:** [@tramchamploo](https://discuss.elastic.co/u/tramchamploo)\ **Replies:** 1\ **Last updated:** [January 13, 2017, 8:59am UTC](https://discuss.elastic.co/t/bootstrap-failed/71490 "2017-01-13T08:59:54Z")
Elasticsearch version: 5.1.2 Plugins installed: \[none\] JVM version: JVM\[Oracle Corporation/Java HotSpot(TM) 64-Bit Server VM/1.8.0\_65/25.65-b01 OS version: OS\[Linux/3.10.0-229.el7.x86\_64/amd64\] Elasticsearch director… --- ## [Sending metrics to InfluxDB](https://discuss.elastic.co/t/sending-metrics-to-influxdb/51591)
**Author:** [@aodj](https://discuss.elastic.co/u/aodj)\ **Replies:** 1\ **Last updated:** [August 24, 2016, 3:24pm UTC](https://discuss.elastic.co/t/sending-metrics-to-influxdb/51591 "2016-08-24T15:24:48Z")
I'm attempting to use the metrics filter to parse incoming logs, and to dispatch the results to influxdb using the Logstash output for Influx. The influx plugin requires a hard coded list of data points to send to Influx… [Previous page](https://discuss.elastic.co/top.md?page=1398&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1400&per_page=50&period=all)