# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1020 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1021 --- ## [How to increase score for documents matching multiple words in elasticsearch](https://discuss.elastic.co/t/how-to-increase-score-for-documents-matching-multiple-words-in-elasticsearch/299281)
**Author:** [@Ashu\_kumar](https://discuss.elastic.co/u/Ashu_kumar)\ **Replies:** 3\ **Last updated:** [March 10, 2022, 3:33am UTC](https://discuss.elastic.co/t/how-to-increase-score-for-documents-matching-multiple-words-in-elasticsearch/299281 "2022-03-10T03:33:20Z")
When I am searching for dubai tour , I am getting these results: Dubai iVenture Dubai Select Pass Big Bus Dubai: Night Tour Big Bus Dubai: Hop-On, Hop-Off Bus Tour City Sightseeing Dubai: Hop-On, Hop-Off Bus Tour At-Th… --- ## [Which will cause the LocalCheckpoint less than GlobalCheckpoint?](https://discuss.elastic.co/t/which-will-cause-the-localcheckpoint-less-than-globalcheckpoint/299197)
**Author:** [@armsword](https://discuss.elastic.co/u/armsword)\ **Replies:** 2\ **Last updated:** [March 10, 2022, 3:00am UTC](https://discuss.elastic.co/t/which-will-cause-the-localcheckpoint-less-than-globalcheckpoint/299197 "2022-03-10T03:00:49Z")
https://github.com/elastic/elasticsearch/blob/master/server/src/main/java/org/elasticsearch/index/seqno/ReplicationTracker.java#L1250 Hi, I have a question about the Local CheckPoint and Global CheckPoint. The Code in l… --- ## [Does Logstash8.0 support modern authentication to access Outlook with token?](https://discuss.elastic.co/t/does-logstash8-0-support-modern-authentication-to-access-outlook-with-token/299278)
**Author:** [@Albert\_Jia](https://discuss.elastic.co/u/Albert_Jia)\ **Replies:** 0\ **Last updated:** [March 10, 2022, 2:35am UTC](https://discuss.elastic.co/t/does-logstash8-0-support-modern-authentication-to-access-outlook-with-token/299278 "2022-03-10T02:35:44Z")
input { imap { host =\> "outlook.office365.com" user =\> "$USER" password =\> "$PASSWORD" port =\> $PORT folder =\> "Inbox" } } Currently I'm using username/password way to pul… --- ## [Elastic Search injest attachment cannot index multiple pdf](https://discuss.elastic.co/t/elastic-search-injest-attachment-cannot-index-multiple-pdf/299234)
**Author:** [@Leo\_Baby\_Jacob](https://discuss.elastic.co/u/Leo_Baby_Jacob)\ **Replies:** 4\ **Last updated:** [March 9, 2022, 10:01pm UTC](https://discuss.elastic.co/t/elastic-search-injest-attachment-cannot-index-multiple-pdf/299234 "2022-03-09T22:01:57Z")
I have an mysql table with multiple pdfs and an associated item\_name for title pdf\_s3\_link -------- -------------- Harry Potter linktopdfons3 Batman s3\_link\_to\_pdfons3 I am trying t… --- ## [Some index rollover\_alias are not updating](https://discuss.elastic.co/t/some-index-rollover-alias-are-not-updating/299194)
**Author:** [@V\_Steeph](https://discuss.elastic.co/u/V_Steeph)\ **Replies:** 0\ **Last updated:** [March 9, 2022, 9:56am UTC](https://discuss.elastic.co/t/some-index-rollover-alias-are-not-updating/299194 "2022-03-09T09:56:39Z")
Hello, We are currently using ELK to centralize every log of our system. There are lots of elements and everything is retrieved through Logstash with one big config file. Each element has the same structure : else if… --- ## [Can't establish a secure connection](https://discuss.elastic.co/t/cant-establish-a-secure-connection/299224)
**Author:** [@bibilena](https://discuss.elastic.co/u/bibilena)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 9:50pm UTC](https://discuss.elastic.co/t/cant-establish-a-secure-connection/299224 "2022-03-09T21:50:45Z")
Hello, I have some problem: I have a docker-compose with Elasticsearch, Kibana and Enterprise Search. all work locally but I need https to use connector with a custom domain name. When I try, I have an error: "Safari ca… --- ## [The overall view of the logs on the screen is very small. We are able to see only 3 to 4 logs in the page even if we hide the chart and using the tiny scroll bar is difficult](https://discuss.elastic.co/t/the-overall-view-of-the-logs-on-the-screen-is-very-small-we-are-able-to-see-only-3-to-4-logs-in-the-page-even-if-we-hide-the-chart-and-using-the-tiny-scroll-bar-is-difficult/299219)
**Author:** [@anushyaadam](https://discuss.elastic.co/u/anushyaadam)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 9:49pm UTC](https://discuss.elastic.co/t/the-overall-view-of-the-logs-on-the-screen-is-very-small-we-are-able-to-see-only-3-to-4-logs-in-the-page-even-if-we-hide-the-chart-and-using-the-tiny-scroll-bar-is-difficult/299219 "2022-03-09T21:49:54Z")
--- ## [Need to change Kibana defaultRoute/path/uri from /app/kibana to /app/kibana76](https://discuss.elastic.co/t/need-to-change-kibana-defaultroute-path-uri-from-app-kibana-to-app-kibana76/299216)
**Author:** [@kumar716](https://discuss.elastic.co/u/kumar716)\ **Replies:** 2\ **Last updated:** [March 9, 2022, 9:47pm UTC](https://discuss.elastic.co/t/need-to-change-kibana-defaultroute-path-uri-from-app-kibana-to-app-kibana76/299216 "2022-03-09T21:47:48Z")
Hi, Requirement: we have 2 kibana servers (different versions) running on same vm. Old kibana is running on version 6 (port 5601), new kibana is running on version 7.6.2 (port 5611 with ssl enabled). The default UI ur… --- ## [Mapping error: Please use a keyword field instead](https://discuss.elastic.co/t/mapping-error-please-use-a-keyword-field-instead/299240)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 9:47pm UTC](https://discuss.elastic.co/t/mapping-error-please-use-a-keyword-field-instead/299240 "2022-03-09T21:47:00Z")
Hi, Im getting data from Azure with metricbeat, and also getting additional data from event hub. the data from metricbeat and Event Hub is shown in the same dashboard. In order to filter with a control visualization i… --- ## [Elasticsearch license renewal](https://discuss.elastic.co/t/elasticsearch-license-renewal/299222)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 9:29pm UTC](https://discuss.elastic.co/t/elasticsearch-license-renewal/299222 "2022-03-09T21:29:26Z")
HI Team, I have few question regarding my license renewal, Our platinum license is about to expire on next week and we are working on renewal process. If we face any difficulties on renewal before the dew date will it… --- ## [Shard failed recovery upon rolling upgrade due to storeTermVector error](https://discuss.elastic.co/t/shard-failed-recovery-upon-rolling-upgrade-due-to-storetermvector-error/299260)
**Author:** [@jz1603](https://discuss.elastic.co/u/jz1603)\ **Replies:** 0\ **Last updated:** [March 9, 2022, 9:01pm UTC](https://discuss.elastic.co/t/shard-failed-recovery-upon-rolling-upgrade-due-to-storetermvector-error/299260 "2022-03-09T21:01:40Z")
Hi there, I am testing the rolling upgrade from 7.5 to 8.0 on a single node cluster. According to the documentations, I did 7.5-\>7.17, then 7.17-\>8.0. The 7.5 to 7.17 rolling upgrade went smoothly, but when I did 7.17-\>8… --- ## [Help with Oracle JDBC connection issue](https://discuss.elastic.co/t/help-with-oracle-jdbc-connection-issue/299254)
**Author:** [@WHenry](https://discuss.elastic.co/u/WHenry)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 8:57pm UTC](https://discuss.elastic.co/t/help-with-oracle-jdbc-connection-issue/299254 "2022-03-09T20:57:29Z")
Hi, I'm trying to setup jdbc to an oracle db and i'm getting this error: \[2022-03-09T18:34:00,464\]\[ERROR\]\[logstash.inputs.jdbc \]\[main\]\[d8b8d7fe74757907ee914a1d4234f10bc8889d0c39bd99e2b0b0929f51efafab\] Unable to con… --- ## [Error sending data from logstash to elasticsearch](https://discuss.elastic.co/t/error-sending-data-from-logstash-to-elasticsearch/299238)
**Author:** [@Rithik\_greendeck](https://discuss.elastic.co/u/Rithik_greendeck)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 5:58pm UTC](https://discuss.elastic.co/t/error-sending-data-from-logstash-to-elasticsearch/299238 "2022-03-09T17:58:20Z")
\[2022-03-09T14:40:58,425\]\[ERROR\]\[logstash.outputs.Elasticsearch\]\[main\]\[6c4be64292281ece43eb3c0a90ef5aa3634da5f79c62d74a63d7a5637e24049b\] Encountered an unexpected error submitting a bulk request! Will retry. {:error\_mess… --- ## [Failed to obtain node locks Elasticsearch \[8.0.1\]](https://discuss.elastic.co/t/failed-to-obtain-node-locks-elasticsearch-8-0-1/298994)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 5:40pm UTC](https://discuss.elastic.co/t/failed-to-obtain-node-locks-elasticsearch-8-0-1/298994 "2022-03-09T17:40:27Z")
Hi Can You help me with fix it? During install elasticsearch over docker swarm/docker compose I've met a common issue with java.lang.IllegalStateException: failed to obtain node locks I'm pretty sure that only one… --- ## [Need to bypass authentication in iframe](https://discuss.elastic.co/t/need-to-bypass-authentication-in-iframe/299175)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 5:39pm UTC](https://discuss.elastic.co/t/need-to-bypass-authentication-in-iframe/299175 "2022-03-09T17:39:04Z")
I have an iframe which I need to embed in our application, but whenever I tried to access the iframe a login page comes. I need to bypass this authentication as this page will be accessed by client. I have found same que… --- ## [Windows event classification mapping - is there a source for this?](https://discuss.elastic.co/t/windows-event-classification-mapping-is-there-a-source-for-this/299248)
**Author:** [@mistrhanky](https://discuss.elastic.co/u/mistrhanky)\ **Replies:** 2\ **Last updated:** [March 9, 2022, 5:35pm UTC](https://discuss.elastic.co/t/windows-event-classification-mapping-is-there-a-source-for-this/299248 "2022-03-09T17:35:09Z")
I am writing(re-writing) a logstash parser for windows and I want to ensure that all of my events get categorized as closely as possible to the ECS definitions. The mappings I am directly referring to are event.type, eve… --- ## [Handle short time connection issues - Filebeat](https://discuss.elastic.co/t/handle-short-time-connection-issues-filebeat/299250)
**Author:** [@arvin495](https://discuss.elastic.co/u/arvin495)\ **Replies:** 0\ **Last updated:** [March 9, 2022, 5:26pm UTC](https://discuss.elastic.co/t/handle-short-time-connection-issues-filebeat/299250 "2022-03-09T17:26:29Z")
Hello Team, we are running 3 node Elasticsearch cluster. All our k8s cluster has filebeats configured - which pushes the logs to Elasticsearch. We have a requirement of upgrading the the Elasticsearch. when I performed… --- ## [Elastic agent not shipping data](https://discuss.elastic.co/t/elastic-agent-not-shipping-data/299236)
**Author:** [@Youssef\_Kaak](https://discuss.elastic.co/u/Youssef_Kaak)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 3:25pm UTC](https://discuss.elastic.co/t/elastic-agent-not-shipping-data/299236 "2022-03-09T15:25:55Z")
Hello everyone, I am new to ELK. Recently, I got access to a server which is running Vagrant and many other stuff. My mission is to mainly deploy ELK on a VM that will be running on Vagrant. I followed the steps menti… --- ## [Top 50 Fields based on per second average count](https://discuss.elastic.co/t/top-50-fields-based-on-per-second-average-count/298734)
**Author:** [@jaysolanki](https://discuss.elastic.co/u/jaysolanki)\ **Replies:** 3\ **Last updated:** [March 9, 2022, 2:59pm UTC](https://discuss.elastic.co/t/top-50-fields-based-on-per-second-average-count/298734 "2022-03-09T14:59:37Z")
Hi All, I'm trying to create a visualization on kibana for top 50 entries of a certain field based on it's average count per second, but not able to achieve the same yet. Have tried it to shocase as table --- ## [Kibana 8.0.0 - Unknown configuration key(s): "kibana.index"](https://discuss.elastic.co/t/kibana-8-0-0-unknown-configuration-key-s-kibana-index/299228)
**Author:** [@Harish619](https://discuss.elastic.co/u/Harish619)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 2:48pm UTC](https://discuss.elastic.co/t/kibana-8-0-0-unknown-configuration-key-s-kibana-index/299228 "2022-03-09T14:48:43Z")
Hi Team - After i upgraded to 8.0.0 from 7.17.0 . Im getting below error. What is the alternative syntax for "kibana.index" in 8.0.0 FATAL Error: Unknown configuration key(s): "kibana.index". Check for spelling erro… --- ## [How can i ingest static key value log file to elastic and dynamically choose string or int](https://discuss.elastic.co/t/how-can-i-ingest-static-key-value-log-file-to-elastic-and-dynamically-choose-string-or-int/299229)
**Author:** [@hagaluly](https://discuss.elastic.co/u/hagaluly)\ **Replies:** 0\ **Last updated:** [March 9, 2022, 2:19pm UTC](https://discuss.elastic.co/t/how-can-i-ingest-static-key-value-log-file-to-elastic-and-dynamically-choose-string-or-int/299229 "2022-03-09T14:19:58Z")
server=server.com ip=192.168.1.2 role=webserver up=1 I am looking for a logstash configuration to do the following thanks! ingest the file and delete after go row by row and decide if value is string or integer deploy… --- ## [Copy content from one field of another record if certain condition matches](https://discuss.elastic.co/t/copy-content-from-one-field-of-another-record-if-certain-condition-matches/298605)
**Author:** [@Ashutosh\_Vaidya](https://discuss.elastic.co/u/Ashutosh_Vaidya)\ **Replies:** 12\ **Last updated:** [March 9, 2022, 1:08pm UTC](https://discuss.elastic.co/t/copy-content-from-one-field-of-another-record-if-certain-condition-matches/298605 "2022-03-09T13:08:12Z")
Hi I need to copy contents of :path field from No. 15256 into the :path field of No.15257 if Stream\_Identifier of both lines in 15256 and 15257 are matching. Kindly suggest how to get this done in the conf file of logs… --- ## [Logstash-Twitter plugin - AND logical operator between keywords](https://discuss.elastic.co/t/logstash-twitter-plugin-and-logical-operator-between-keywords/299211)
**Author:** [@dihiaselma](https://discuss.elastic.co/u/dihiaselma)\ **Replies:** 0\ **Last updated:** [March 9, 2022, 12:17pm UTC](https://discuss.elastic.co/t/logstash-twitter-plugin-and-logical-operator-between-keywords/299211 "2022-03-09T12:17:05Z")
I'm using Twitter logstash plugin to extract data from twitter. I need to specify an AND operator between my keywords. I tried this syntax \["apple samsung"\] i.e. if I find a tweet containing these two words I bring it. … --- ## [How config "Allow for cookie's SameSite" in YAML type CDRS?](https://discuss.elastic.co/t/how-config-allow-for-cookies-samesite-in-yaml-type-cdrs/299209)
**Author:** [@Pablo\_Andrei](https://discuss.elastic.co/u/Pablo_Andrei)\ **Replies:** 0\ **Last updated:** [March 9, 2022, 12:05pm UTC](https://discuss.elastic.co/t/how-config-allow-for-cookies-samesite-in-yaml-type-cdrs/299209 "2022-03-09T12:05:50Z")
I need to use EMBED CODE for displaying dashboards, but I need the parameters to: xpack.security.secureCookies: true xpack.security.sameSiteCookies: None or XPACK\_SECURITY\_SECURECOOKIES=true XPACK\_SECURITY\_SAMESICOO… --- ## [Filebeat add\_kubernetes\_metadata pod uid matcher doesn't match poduid for rotated file on AKS](https://discuss.elastic.co/t/filebeat-add-kubernetes-metadata-pod-uid-matcher-doesnt-match-poduid-for-rotated-file-on-aks/298938)
**Author:** [@Jayw77](https://discuss.elastic.co/u/Jayw77)\ **Replies:** 5\ **Last updated:** [March 9, 2022, 10:51am UTC](https://discuss.elastic.co/t/filebeat-add-kubernetes-metadata-pod-uid-matcher-doesnt-match-poduid-for-rotated-file-on-aks/298938 "2022-03-09T10:51:55Z")
Hi, As the title suggests, I believe when using pod UID (/var/log/pod) with the below config which was fixed and backported into release v7.17.1, it still cannot get the metadata for the second file when rotated in AKS … --- ## [Fluend periodically fails sending logs to Elasticsearch](https://discuss.elastic.co/t/fluend-periodically-fails-sending-logs-to-elasticsearch/299201)
**Author:** [@Vlad\_Stavarache](https://discuss.elastic.co/u/Vlad_Stavarache)\ **Replies:** 0\ **Last updated:** [March 9, 2022, 10:51am UTC](https://discuss.elastic.co/t/fluend-periodically-fails-sending-logs-to-elasticsearch/299201 "2022-03-09T10:51:41Z")
Issue: fluentd periodically stops sending logs to Elasticsearch. when i delete the fluentd pod, fluentd starts sending previously stuck logs successfully to Elasticsearch and i can see them in kibana. after several hours… --- ## [\[Filebeat System\] Syslog dashboard ECS](https://discuss.elastic.co/t/filebeat-system-syslog-dashboard-ecs/299065)
**Author:** [@Alphonse\_Kambo](https://discuss.elastic.co/u/Alphonse_Kambo)\ **Replies:** 4\ **Last updated:** [March 9, 2022, 10:47am UTC](https://discuss.elastic.co/t/filebeat-system-syslog-dashboard-ecs/299065 "2022-03-09T10:47:11Z")
Hello Everyone, on the Dashboard "Syslog dashboard ECS" there is the following Visualization: This Visualization is a Markdown: Can someone tell me where to find the path /dashboard/Filebeat-syslog-dashboard-ecs … --- ## [Make several fields from one nested field](https://discuss.elastic.co/t/make-several-fields-from-one-nested-field/299177)
**Author:** [@voverm](https://discuss.elastic.co/u/voverm)\ **Replies:** 5\ **Last updated:** [March 9, 2022, 10:40am UTC](https://discuss.elastic.co/t/make-several-fields-from-one-nested-field/299177 "2022-03-09T10:40:26Z")
Hello! I've an index which has a field called properties (besides the one that is defined in the top-level) in mappings with this structure: "properties": { "type": "nested", "properties": { "code": { "typ… --- ## [Authenticating issue when using iframe outside the kibana](https://discuss.elastic.co/t/authenticating-issue-when-using-iframe-outside-the-kibana/299196)
**Author:** [@Hashika\_Maduranga](https://discuss.elastic.co/u/Hashika_Maduranga)\ **Replies:** 3\ **Last updated:** [March 9, 2022, 10:29am UTC](https://discuss.elastic.co/t/authenticating-issue-when-using-iframe-outside-the-kibana/299196 "2022-03-09T10:29:13Z")
When I used Kibana visualization on my web page it was not working correctly. I just used Kibana configuration (kibana.yml) xpack.security.authc.providers: basic.basic1: order: 0 anonymous.anonymous1: order… --- ## [Elasticsearch with React.js: match\_phrase](https://discuss.elastic.co/t/elasticsearch-with-react-js-match-phrase/298958)
**Author:** [@Karina\_Ivanova](https://discuss.elastic.co/u/Karina_Ivanova)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-with-react-js-match-phrase/298958 "2022-03-09T10:23:34Z")
Hello, I'm quite new to Elasticsearch and React and I'm trying to build an app that fetches .json data through API. Everything works fine but I can't get my head around two things: how to use Match phrase query and how … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1019) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1021)