# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1225 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1226 --- ## [Obtaining each field score in the same document](https://discuss.elastic.co/t/obtaining-each-field-score-in-the-same-document/285132)
**Author:** [@ahmadnabil](https://discuss.elastic.co/u/ahmadnabil)\ **Replies:** 0\ **Last updated:** [September 25, 2021, 12:22pm UTC](https://discuss.elastic.co/t/obtaining-each-field-score-in-the-same-document/285132 "2021-09-25T12:22:22Z")
Assuming I have a document with three fields: name, company, email each one mapped with edge-ngram { "name": "John", "company": "John's company", "email": "johndoe@gmail.com" } When searching for "john" I want … --- ## [How to Ingest data into Elasticsearch with URL Callback?](https://discuss.elastic.co/t/how-to-ingest-data-into-elasticsearch-with-url-callback/284003)
**Author:** [@e-fo](https://discuss.elastic.co/u/e-fo)\ **Replies:** 4\ **Last updated:** [September 25, 2021, 12:10pm UTC](https://discuss.elastic.co/t/how-to-ingest-data-into-elasticsearch-with-url-callback/284003 "2021-09-25T12:10:33Z")
Hello, thanks for your great community I want to logging some data from some mobile app attribution service (such as Adjust or Appsflyer) into Elasticsearch the admin panel of attribution service allow me to set an url… --- ## [Terms query without sort](https://discuss.elastic.co/t/terms-query-without-sort/285126)
**Author:** [@sathiez](https://discuss.elastic.co/u/sathiez)\ **Replies:** 1\ **Last updated:** [September 25, 2021, 7:54am UTC](https://discuss.elastic.co/t/terms-query-without-sort/285126 "2021-09-25T07:54:52Z")
My document: { "\_index": "comb\_index", "\_type": "\_doc", "\_id": "i\_ZFO3sB\_48g2JrGjt9P", "\_version": 2, "\_seq\_no": 5057859, "\_primary\_term": 1, "found": true, "\_source": { "row": "54,9658", "value": 1481985587… --- ## [Issue parsing db2diag log using grok filter](https://discuss.elastic.co/t/issue-parsing-db2diag-log-using-grok-filter/281957)
**Author:** [@Atta](https://discuss.elastic.co/u/Atta)\ **Replies:** 3\ **Last updated:** [August 28, 2021, 2:13pm UTC](https://discuss.elastic.co/t/issue-parsing-db2diag-log-using-grok-filter/281957 "2021-08-28T14:13:09Z")
Hi all, I am new in ELK solution and currently I am working on Logstash -\> Elasticsearch -\> Kibana. I need to parse db2diag.log. I am using grok filter for this. The problem is when I use grok debugger website everythi… --- ## [Error with elasricsearch](https://discuss.elastic.co/t/error-with-elasricsearch/285113)
**Author:** [@ahaashoor](https://discuss.elastic.co/u/ahaashoor)\ **Replies:** 1\ **Last updated:** [September 25, 2021, 6:16am UTC](https://discuss.elastic.co/t/error-with-elasricsearch/285113 "2021-09-25T06:16:42Z")
i run this line sudo -i service elasticsearch start i got this error Job for elasticsearch.service failed because a fatal signal was delivered to the control process. See "systemctl status elasticsearch.service" and "… --- ## [I cannot login Kibana](https://discuss.elastic.co/t/i-cannot-login-kibana/285110)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 1\ **Last updated:** [September 25, 2021, 3:19am UTC](https://discuss.elastic.co/t/i-cannot-login-kibana/285110 "2021-09-25T03:19:26Z")
On the kibana https://127.0.0.1:5601 page, I log in by username elastic and password, but I got an error: Username or password is incorrect. Please try again. Http response: {"statusCode":401,"error":"Unauthorized","mes… --- ## [Nested fields Visualization - Examples](https://discuss.elastic.co/t/nested-fields-visualization-examples/284500)
**Author:** [@Vishal\_Patil](https://discuss.elastic.co/u/Vishal_Patil)\ **Replies:** 1\ **Last updated:** [September 24, 2021, 9:14pm UTC](https://discuss.elastic.co/t/nested-fields-visualization-examples/284500 "2021-09-24T21:14:08Z")
Can someone please point me to some examples of Kibana visualizations utilized nested fields in elasticsearch documents ? --- ## [(Watcher) send emails separately via a single alert](https://discuss.elastic.co/t/watcher-send-emails-separately-via-a-single-alert/284113)
**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\ **Replies:** 3\ **Last updated:** [September 24, 2021, 8:44pm UTC](https://discuss.elastic.co/t/watcher-send-emails-separately-via-a-single-alert/284113 "2021-09-24T20:44:32Z")
is there any way the emails are sent separately for each alert notification in the watcher? as we received several alerts on our team, we preferred that they come separately. --- ## [Kibana Table Visualization of documents with nested array of JSON](https://discuss.elastic.co/t/kibana-table-visualization-of-documents-with-nested-array-of-json/284740)
**Author:** [@fefontana](https://discuss.elastic.co/u/fefontana)\ **Replies:** 5\ **Last updated:** [September 24, 2021, 8:42pm UTC](https://discuss.elastic.co/t/kibana-table-visualization-of-documents-with-nested-array-of-json/284740 "2021-09-24T20:42:13Z")
Hi, I have the following json documents stored in Elasticsearch. It is a json with a nested array with json items: { "took": 40, "timed\_out": false, "\_shards": { "total": 1, "successful": 1, "skipped": 0, "faile… --- ## [What is the definition of Client Requests in Stack Monitoring?](https://discuss.elastic.co/t/what-is-the-definition-of-client-requests-in-stack-monitoring/284538)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 1\ **Last updated:** [September 24, 2021, 7:31pm UTC](https://discuss.elastic.co/t/what-is-the-definition-of-client-requests-in-stack-monitoring/284538 "2021-09-24T19:31:40Z")
Hello. Kibana metrics has item called Client Requests . Tooltip describes as below but I would like to know more in depth. From UX perspective, is it per elasticsearch query ? Total number client requests received… --- ## [How to add custom Logo's and Icons in Elastic cloud platform](https://discuss.elastic.co/t/how-to-add-custom-logos-and-icons-in-elastic-cloud-platform/284893)
**Author:** [@Mannem\_Saikiran](https://discuss.elastic.co/u/Mannem_Saikiran)\ **Replies:** 1\ **Last updated:** [September 24, 2021, 5:53pm UTC](https://discuss.elastic.co/t/how-to-add-custom-logos-and-icons-in-elastic-cloud-platform/284893 "2021-09-24T17:53:17Z")
In standalone we can customize the elastic UI using "Elastic UI framework (EUI)", But we are looking for custom changes in the Elastic Cloud environment. So, is there any way to customize the Elastic Cloud UI? If yes, c… --- ## [Match\_bool\_prefix query acts different than Prefix query when searching on a single token](https://discuss.elastic.co/t/match-bool-prefix-query-acts-different-than-prefix-query-when-searching-on-a-single-token/285105)
**Author:** [@Mike\_M1](https://discuss.elastic.co/u/Mike_M1)\ **Replies:** 0\ **Last updated:** [September 24, 2021, 5:45pm UTC](https://discuss.elastic.co/t/match-bool-prefix-query-acts-different-than-prefix-query-when-searching-on-a-single-token/285105 "2021-09-24T17:45:31Z")
Having an issue with match\_bool\_prefix behaving weirdly when having an ampersand at the end of a one token query. According to docs, it should build out a term query with a prefix at the end. However, it does that fine e… --- ## [Input Watcher problem with https](https://discuss.elastic.co/t/input-watcher-problem-with-https/284029)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 1\ **Last updated:** [September 24, 2021, 5:40pm UTC](https://discuss.elastic.co/t/input-watcher-problem-with-https/284029 "2021-09-24T17:40:04Z")
Dear team, we have defined a http input watcher to query status of cluster. ELS cluster is secured with node certificates and https communication. When watcher is executed we got this: \[2021-09-12T11:16:48,633\]\[ERROR… --- ## [ELK sentiment classification](https://discuss.elastic.co/t/elk-sentiment-classification/285099)
**Author:** [@byul](https://discuss.elastic.co/u/byul)\ **Replies:** 0\ **Last updated:** [September 24, 2021, 4:15pm UTC](https://discuss.elastic.co/t/elk-sentiment-classification/285099 "2021-09-24T16:15:54Z")
Hello everybody, I got this technical test from an employer, it is about using ELK an integrate a sentiment classification service in it. Here are the questions: install ELK (I have already done it in a virtual machine… --- ## [Creating separate elasticsearch docs with batched log messages](https://discuss.elastic.co/t/creating-separate-elasticsearch-docs-with-batched-log-messages/284902)
**Author:** [@sdndude](https://discuss.elastic.co/u/sdndude)\ **Replies:** 2\ **Last updated:** [September 24, 2021, 3:44pm UTC](https://discuss.elastic.co/t/creating-separate-elasticsearch-docs-with-batched-log-messages/284902 "2021-09-24T15:44:22Z")
I have searched for this and have found a few forum entries that can help me figure out how to get the batch msgs (below) separated but I have no idea what to do with them after they are separated. As an example, here i… --- ## [Using multiple hosts in env var / Elasticsearch filter](https://discuss.elastic.co/t/using-multiple-hosts-in-env-var-elasticsearch-filter/285090)
**Author:** [@whatgeorgemade](https://discuss.elastic.co/u/whatgeorgemade)\ **Replies:** 1\ **Last updated:** [September 24, 2021, 2:56pm UTC](https://discuss.elastic.co/t/using-multiple-hosts-in-env-var-elasticsearch-filter/285090 "2021-09-24T14:56:07Z")
Hi all, I have a three node Elasticsearch cluster. I'm using Logstash to do some enrichment by pulling un-enriched documents from an index, using the elasticsearch filter to look up values, then output again to Elastics… --- ## [FSCrawler - Best approach to load massive amount of document](https://discuss.elastic.co/t/fscrawler-best-approach-to-load-massive-amount-of-document/284900)
**Author:** [@classless\_oak](https://discuss.elastic.co/u/classless_oak)\ **Replies:** 2\ **Last updated:** [September 24, 2021, 2:25pm UTC](https://discuss.elastic.co/t/fscrawler-best-approach-to-load-massive-amount-of-document/284900 "2021-09-24T14:25:57Z")
Hello, I am trying to come up with a solution to load massive amount of documents (xlx, xlsx, doc, xml, txt, pdf, etd.) 30+ terabytes into Elastic. I have spun up the stack with the FSCrawler and have been adding docume… --- ## [\_search field added to mappings long before installing plugins](https://discuss.elastic.co/t/search-field-added-to-mappings-long-before-installing-plugins/284867)
**Author:** [@BogdanD](https://discuss.elastic.co/u/BogdanD)\ **Replies:** 2\ **Last updated:** [September 24, 2021, 2:25pm UTC](https://discuss.elastic.co/t/search-field-added-to-mappings-long-before-installing-plugins/284867 "2021-09-24T14:25:45Z")
Hi all, I'm having an issue with setting up the mapper-size plugin, specifically: I have an ES instance that I've been upgrading since 6.x, now at 7.14. My mappings for my indices have always included: "\_size": { "en… --- ## [Characters coming in non-readable format in ES after sending from filebeat\>logstash\>ES](https://discuss.elastic.co/t/characters-coming-in-non-readable-format-in-es-after-sending-from-filebeat-logstash-es/284645)
**Author:** [@Shaiju\_Sam](https://discuss.elastic.co/u/Shaiju_Sam)\ **Replies:** 1\ **Last updated:** [September 24, 2021, 12:51pm UTC](https://discuss.elastic.co/t/characters-coming-in-non-readable-format-in-es-after-sending-from-filebeat-logstash-es/284645 "2021-09-24T12:51:01Z")
Hi Team, Im tring to get .log files from linux servers to ES using filebeat, logstash and then to ES however when it reaches ES, below is the outcome Y\\xD9\\xE7IU\\xC8JC\\xD5\\u000FW\\x8EC'\\x95j\\x8A\\x86\\xC4kRm\\xABFݯ\\x87C\\u0… --- ## [Don't auto discard unsaved work to log back in](https://discuss.elastic.co/t/dont-auto-discard-unsaved-work-to-log-back-in/284281)
**Author:** [@nahoj](https://discuss.elastic.co/u/nahoj)\ **Replies:** 2\ **Last updated:** [September 24, 2021, 12:18pm UTC](https://discuss.elastic.co/t/dont-auto-discard-unsaved-work-to-log-back-in/284281 "2021-09-24T12:18:28Z")
Hi, I started to use Kibana 7.8.1 a few days ago and even though I think it's a great tool overall, I would like to report a misfeature I just ran in: Two hours ago I was working in several browser tabs on a visualizat… --- ## [Osquerybeat standalone without elastic-agent?](https://discuss.elastic.co/t/osquerybeat-standalone-without-elastic-agent/284872)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 5\ **Last updated:** [September 24, 2021, 12:02pm UTC](https://discuss.elastic.co/t/osquerybeat-standalone-without-elastic-agent/284872 "2021-09-24T12:02:51Z")
Hi, I'm currently using various \*beats deployed to servers and clients. For a number of reasons, I have my beats output to logstash, before they are sent to Elasticsearch. I'm evaluating elastic-agent, to at least repla… --- ## [Alternative to SQS queue for AWS log ingest](https://discuss.elastic.co/t/alternative-to-sqs-queue-for-aws-log-ingest/284911)
**Author:** [@kbirhan](https://discuss.elastic.co/u/kbirhan)\ **Replies:** 3\ **Last updated:** [September 24, 2021, 11:56am UTC](https://discuss.elastic.co/t/alternative-to-sqs-queue-for-aws-log-ingest/284911 "2021-09-24T11:56:26Z")
The documentation for the AWS module states "It uses filebeat s3 input to get log files from AWS S3 buckets with SQS notification or directly polling list of S3 objects in an S3 bucket. The use of SQS notification is pre… --- ## [What is the best way to classify data?](https://discuss.elastic.co/t/what-is-the-best-way-to-classify-data/285076)
**Author:** [@wifi](https://discuss.elastic.co/u/wifi)\ **Replies:** 0\ **Last updated:** [September 24, 2021, 11:44am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-classify-data/285076 "2021-09-24T11:44:25Z")
I have data that originates from three sources and thus saved in a separate index each. metricbeat manual data: manually ingested data app data: data ingested by an app The documents in each index have different field… --- ## [Getting Error while installing checkstyle on IntelliJ](https://discuss.elastic.co/t/getting-error-while-installing-checkstyle-on-intellij/285074)
**Author:** [@Ankur\_Jain](https://discuss.elastic.co/u/Ankur_Jain)\ **Replies:** 0\ **Last updated:** [September 24, 2021, 11:16am UTC](https://discuss.elastic.co/t/getting-error-while-installing-checkstyle-on-intellij/285074 "2021-09-24T11:16:49Z")
Hi Team, I have cloned elasticsearch project on my local and getting below error while installing checkstyle. Could not determine the dependencies of task ':buildDependencyArtifacts'. Task with path ':plugins:reposit… --- ## [Logstash-output-syslog plugin fix message and structured data](https://discuss.elastic.co/t/logstash-output-syslog-plugin-fix-message-and-structured-data/285071)
**Author:** [@ZuperZero](https://discuss.elastic.co/u/ZuperZero)\ **Replies:** 0\ **Last updated:** [September 24, 2021, 10:58am UTC](https://discuss.elastic.co/t/logstash-output-syslog-plugin-fix-message-and-structured-data/285071 "2021-09-24T10:58:53Z")
So I tried to use the logstash-output-syslog plugin to send information to a syslog server. I had multiple issues with messages containing all sorts of garbage (duplicate timestamp, duplicate message ID and host field??… --- ## [My bucket-script-based Transform is not showing the aggregation fields in the destination index](https://discuss.elastic.co/t/my-bucket-script-based-transform-is-not-showing-the-aggregation-fields-in-the-destination-index/284992)
**Author:** [@nsouth](https://discuss.elastic.co/u/nsouth)\ **Replies:** 2\ **Last updated:** [September 24, 2021, 10:33am UTC](https://discuss.elastic.co/t/my-bucket-script-based-transform-is-not-showing-the-aggregation-fields-in-the-destination-index/284992 "2021-09-24T10:33:12Z")
Hi, I'm trying to make my first transform and I'm not getting the results I expect. My source has multiple events correlated by a command\_unique\_id and I want to find the duration of these events by getting the timestam… --- ## [Elastic search 7.13 found vulnerable in Twistlock report](https://discuss.elastic.co/t/elastic-search-7-13-found-vulnerable-in-twistlock-report/285050)
**Author:** [@Shraddha2](https://discuss.elastic.co/u/Shraddha2)\ **Replies:** 3\ **Last updated:** [September 24, 2021, 10:14am UTC](https://discuss.elastic.co/t/elastic-search-7-13-found-vulnerable-in-twistlock-report/285050 "2021-09-24T10:14:51Z")
We are using Elastic search 7.13 version and in recent twist lock vulnerability scan this jar reported for 2 High vulnerabilities. CVE-2020-25649 CVE-2020-28491 com.fasterxml.jackson.core\_jackson-databind - 2.10.4 A … --- ## [Logstash metricbeat monitoring issue](https://discuss.elastic.co/t/logstash-metricbeat-monitoring-issue/285064)
**Author:** [@jalaine](https://discuss.elastic.co/u/jalaine)\ **Replies:** 0\ **Last updated:** [September 24, 2021, 9:27am UTC](https://discuss.elastic.co/t/logstash-metricbeat-monitoring-issue/285064 "2021-09-24T09:27:03Z")
Good Morning, I have kind of a strange use case, and am hoping someone might be able to help me out. I have a monitoring cluster and a production cluster. It is a strange contractual issue, but we want the customer to h… --- ## [Radar Chart with Dynamic Data](https://discuss.elastic.co/t/radar-chart-with-dynamic-data/285002)
**Author:** [@bodach](https://discuss.elastic.co/u/bodach)\ **Replies:** 4\ **Last updated:** [September 24, 2021, 9:21am UTC](https://discuss.elastic.co/t/radar-chart-with-dynamic-data/285002 "2021-09-24T09:21:29Z")
Hello, I am a beginner with Kibana and Vega. I m trying to create a radar chart with an index. I managed to create a chart with static values. See below: vega code However, when I try to do the same with my index, I … --- ## [Auditbeat on docker fails to run auditd module](https://discuss.elastic.co/t/auditbeat-on-docker-fails-to-run-auditd-module/284399)
**Author:** [@MarshalHex](https://discuss.elastic.co/u/MarshalHex)\ **Replies:** 16\ **Last updated:** [September 24, 2021, 8:58am UTC](https://discuss.elastic.co/t/auditbeat-on-docker-fails-to-run-auditd-module/284399 "2021-09-24T08:58:20Z")
Hi! I'm setting up Auditbeat to run on amazon linux EC2 instance. When I run the default install and config for auditbeat, everything works fine for auditbeat auditd module and I can configure my rules to be implemente… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1224) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1226)