# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1872 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1873 --- ## [How to add values of a specific fields from 2 different version in Index?](https://discuss.elastic.co/t/how-to-add-values-of-a-specific-fields-from-2-different-version-in-index/244696)
**Author:** [@NirmitJain](https://discuss.elastic.co/u/NirmitJain)\ **Replies:** 0\ **Last updated:** [August 12, 2020, 10:21am UTC](https://discuss.elastic.co/t/how-to-add-values-of-a-specific-fields-from-2-different-version-in-index/244696 "2020-08-12T10:21:04Z")
Hi , I am looking for a way by which we can add value of a field already indexed with value of same field from new updated document to be indexed. for e.g. version 1 document: { "\_index" : "test\_index", "\_type" : "… --- ## [Date displays in inspect panel](https://discuss.elastic.co/t/date-displays-in-inspect-panel/241844)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 10:22am UTC](https://discuss.elastic.co/t/date-displays-in-inspect-panel/241844 "2020-08-12T10:22:16Z")
If I've got data that covers a few days displayed, when I go to the inspect view, it shows the date and time for each row. This is good. The problem comes if I've only got data from a particular day displayed. In this… --- ## [Filebeat installation on FortiOS](https://discuss.elastic.co/t/filebeat-installation-on-fortios/244435)
**Author:** [@anon56147639](https://discuss.elastic.co/u/anon56147639)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 10:19am UTC](https://discuss.elastic.co/t/filebeat-installation-on-fortios/244435 "2020-08-12T10:19:49Z")
Hi everyone! I'd like to use the Filebeat Fortinet module to send the firewall log files to my logstash server. However, I can't execute the cURL command mentioned in the Filebeat installation reference. I'm referring … --- ## [I can't find occurrences of the character "="](https://discuss.elastic.co/t/i-cant-find-occurrences-of-the-character/244197)
**Author:** [@blenolopes](https://discuss.elastic.co/u/blenolopes)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 10:18am UTC](https://discuss.elastic.co/t/i-cant-find-occurrences-of-the-character/244197 "2020-08-12T10:18:15Z")
Hello, I have a problem that seemed simple, but I am not able to solve it. In my log, field "message" I have a string: 8273832 ===\> 8278213 How do I search for occurrences of the string "===" via Kibana search? I've… --- ## [ElasticSearch nodes create a lot of logs](https://discuss.elastic.co/t/elasticsearch-nodes-create-a-lot-of-logs/244514)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 6\ **Last updated:** [August 12, 2020, 10:10am UTC](https://discuss.elastic.co/t/elasticsearch-nodes-create-a-lot-of-logs/244514 "2020-08-12T10:10:43Z")
Hi guys, I have seen that the elasticsearch nodes are creating a very huge amount of logs in my ECK cluster. Is there a way to reduce the amount of logs? Right now I am seeing the index being flooded by entries like t… --- ## [Conditional colouring of values in a column in a data table](https://discuss.elastic.co/t/conditional-colouring-of-values-in-a-column-in-a-data-table/244693)
**Author:** [@silasr](https://discuss.elastic.co/u/silasr)\ **Replies:** 4\ **Last updated:** [August 12, 2020, 10:10am UTC](https://discuss.elastic.co/t/conditional-colouring-of-values-in-a-column-in-a-data-table/244693 "2020-08-12T10:10:30Z")
Hi everyone. I'm trying to do some possibly advanced conditional statement for columns in a data table. Ideally, I would like to change the color of a string, based on the value of another field in the same document. I'… --- ## [Identifying what terms were matched in a match query](https://discuss.elastic.co/t/identifying-what-terms-were-matched-in-a-match-query/244202)
**Author:** [@Daymon\_Schroeder](https://discuss.elastic.co/u/Daymon_Schroeder)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 9:58am UTC](https://discuss.elastic.co/t/identifying-what-terms-were-matched-in-a-match-query/244202 "2020-08-12T09:58:13Z")
Consider the following example query where we match a percentage of terms GET /\_search { "query": { "bool": { "should": \[ { "match" : { "body": {… --- ## [Search latest events and unique by field](https://discuss.elastic.co/t/search-latest-events-and-unique-by-field/244199)
**Author:** [@dikkini](https://discuss.elastic.co/u/dikkini)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 9:56am UTC](https://discuss.elastic.co/t/search-latest-events-and-unique-by-field/244199 "2020-08-12T09:56:44Z")
Hello. I got the following data in my indice: {"username": "michael", "is\_vac": true, "created\_date": 1596647898006} {"username": "kate", "is\_vac": true, "created\_date": 1596647898007} {"username": "michael", "is\_vac":… --- ## [Using Exact Prefix/MatchPhrase Prefix Queries with Ngram Filter](https://discuss.elastic.co/t/using-exact-prefix-matchphrase-prefix-queries-with-ngram-filter/244207)
**Author:** [@k3np4ch1](https://discuss.elastic.co/u/k3np4ch1)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 9:55am UTC](https://discuss.elastic.co/t/using-exact-prefix-matchphrase-prefix-queries-with-ngram-filter/244207 "2020-08-12T09:55:55Z")
Hi, My goal is to search query text having length one or two character long. This is my setting for the index. "settings" : { "index" : { "number\_of\_shards" : "5", "provided\_name" : "my\_user", … --- ## [How to grant permission in ESClientYamlSuiteTestCase integTest?](https://discuss.elastic.co/t/how-to-grant-permission-in-esclientyamlsuitetestcase-integtest/241975)
**Author:** [@nooneuse](https://discuss.elastic.co/u/nooneuse)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 9:51am UTC](https://discuss.elastic.co/t/how-to-grant-permission-in-esclientyamlsuitetestcase-integtest/241975 "2020-08-12T09:51:17Z")
Hello, I wrote a plugin which provide support for Datasketches aggregation, I think it is easy to use and I want to contribute it. I added it to the plugins folder with code, unit tests and all license for dependencies… --- ## [How to merge Array while reindexing data?](https://discuss.elastic.co/t/how-to-merge-array-while-reindexing-data/244388)
**Author:** [@darshan\_ambre](https://discuss.elastic.co/u/darshan_ambre)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 9:47am UTC](https://discuss.elastic.co/t/how-to-merge-array-while-reindexing-data/244388 "2020-08-12T09:47:07Z")
I have an index in which i have duplication document information which i wish to transform and to create one document with array of information. I've the following data in the index: \ { "took" : 0, … --- ## [How to iterate over Geopoints in painless?](https://discuss.elastic.co/t/how-to-iterate-over-geopoints-in-painless/244648)
**Author:** [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\ **Replies:** 5\ **Last updated:** [August 12, 2020, 9:46am UTC](https://discuss.elastic.co/t/how-to-iterate-over-geopoints-in-painless/244648 "2020-08-12T09:46:28Z")
Hi, I have a painless script, it iterate over a set of geopoints and compute the shortest distance. But it seems that there is an error: "script\_fields": { "distance": { "script": { "source": "double d = Double.MA… --- ## [ElasticSearch 7.8 date and time format issue: unable to store date in MMM-dd-yyyy HH:mm:ss format . Was woking in 6.7.1](https://discuss.elastic.co/t/elasticsearch-7-8-date-and-time-format-issue-unable-to-store-date-in-mmm-dd-yyyy-hhss-format-was-woking-in-6-7-1/244450)
**Author:** [@naresh\_sharma](https://discuss.elastic.co/u/naresh_sharma)\ **Replies:** 3\ **Last updated:** [August 12, 2020, 9:41am UTC](https://discuss.elastic.co/t/elasticsearch-7-8-date-and-time-format-issue-unable-to-store-date-in-mmm-dd-yyyy-hhss-format-was-woking-in-6-7-1/244450 "2020-08-12T09:41:51Z")
\[2020-08-10T14:30:58,866\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"metrics", :routing=\>nil, :\_type=\>"\_doc"}, #LogStash::… --- ## [Kibana check if field is equal to 1 for every document during the selected time period](https://discuss.elastic.co/t/kibana-check-if-field-is-equal-to-1-for-every-document-during-the-selected-time-period/241754)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 4\ **Last updated:** [August 12, 2020, 9:36am UTC](https://discuss.elastic.co/t/kibana-check-if-field-is-equal-to-1-for-every-document-during-the-selected-time-period/241754 "2020-08-12T09:36:16Z")
Hi guys , i'm working on a project where i need to check absence and presence of employees , my index has 5 fields(MAT,NAME,DATE,PRESENCE(1or 0),ABSENCE(1 or 0)) it contains the data of the presence and absence of emplo… --- ## [Aggregation using something similar to First when data is grouped](https://discuss.elastic.co/t/aggregation-using-something-similar-to-first-when-data-is-grouped/244587)
**Author:** [@Raster](https://discuss.elastic.co/u/Raster)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 9:29am UTC](https://discuss.elastic.co/t/aggregation-using-something-similar-to-first-when-data-is-grouped/244587 "2020-08-12T09:29:45Z")
Lets say I have data like this. Every unique "key" has a unique "long key" - totally 1 to 1. Because key is numeric will prefer using it for agrregating (using) using terms-\> field. Field "somedata" is subject to aggre… --- ## [Heap usage is More.. Need to understand more details where the heap is being used and how to optimize it](https://discuss.elastic.co/t/heap-usage-is-more-need-to-understand-more-details-where-the-heap-is-being-used-and-how-to-optimize-it/244588)
**Author:** [@srikhark](https://discuss.elastic.co/u/srikhark)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 9:28am UTC](https://discuss.elastic.co/t/heap-usage-is-more-need-to-understand-more-details-where-the-heap-is-being-used-and-how-to-optimize-it/244588 "2020-08-12T09:28:32Z")
Hi , Below are my ES cluster node Stats.. ElasticSearch version - 5.6. It is occupying more space in "old" gen space. Why heap usage is more here ? what all are occupying more heap here. And how can i optimize here? T… --- ## [Can aggregations values be used in script score calculations?](https://discuss.elastic.co/t/can-aggregations-values-be-used-in-script-score-calculations/244590)
**Author:** [@iajpl](https://discuss.elastic.co/u/iajpl)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 9:26am UTC](https://discuss.elastic.co/t/can-aggregations-values-be-used-in-script-score-calculations/244590 "2020-08-12T09:26:18Z")
Each one of my documents within my index contains values associated with sales data and I calculate a score for each document based on those values. Currently, the values are bucketed globally, meaning that before indexi… --- ## [Remove 2 nodes from a 4 nodes cluster](https://discuss.elastic.co/t/remove-2-nodes-from-a-4-nodes-cluster/244690)
**Author:** [@claud81](https://discuss.elastic.co/u/claud81)\ **Replies:** 0\ **Last updated:** [August 12, 2020, 9:24am UTC](https://discuss.elastic.co/t/remove-2-nodes-from-a-4-nodes-cluster/244690 "2020-08-12T09:24:48Z")
Hi everyone, I would like to reduce the number of my 4 Ubuntu master-eligible nodes cluster (version 6.8) to a 3 master-eligible nodes cluster. In order to do this I have to temporarily remove 2 nodes from the cluster … --- ## [Ingest nodes persistent queue](https://discuss.elastic.co/t/ingest-nodes-persistent-queue/244591)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 9:20am UTC](https://discuss.elastic.co/t/ingest-nodes-persistent-queue/244591 "2020-08-12T09:20:41Z")
Hello, Imho it would be an awesome feature if ingest nodes could have a persistent queue. Is this something worthy of a feature request? Or technically undoable? Grtz Willem --- ## [Nested terms](https://discuss.elastic.co/t/nested-terms/244593)
**Author:** [@krathore](https://discuss.elastic.co/u/krathore)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 9:20am UTC](https://discuss.elastic.co/t/nested-terms/244593 "2020-08-12T09:20:19Z")
Can some one pls help me to write a query , i cannot get result back body: { query: { bool: { must: \[ { … --- ## [Using KV processors when field names have space](https://discuss.elastic.co/t/using-kv-processors-when-field-names-have-space/244631)
**Author:** [@BkQc](https://discuss.elastic.co/u/BkQc)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 9:02am UTC](https://discuss.elastic.co/t/using-kv-processors-when-field-names-have-space/244631 "2020-08-12T09:02:09Z")
Hello, I'm trying to parse a log in which elements are separated by ; and keys/values by =. My problem is that some keys have spaces in their name. Though KV will process it correctly, having spaces in name causes lot… --- ## [Index size Reduced in Elasticsearch even When Number of Documents Increased](https://discuss.elastic.co/t/index-size-reduced-in-elasticsearch-even-when-number-of-documents-increased/244664)
**Author:** [@pulkit007](https://discuss.elastic.co/u/pulkit007)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 8:55am UTC](https://discuss.elastic.co/t/index-size-reduced-in-elasticsearch-even-when-number-of-documents-increased/244664 "2020-08-12T08:55:48Z")
Hi There, I am storing incremental data (Everyday 0.7 - 1 GB of data gets added) in Elasticsearch. The interesting observation I found is that : The index size in the elasticsearch decreased with time while the number … --- ## [Are there any benefits of running elasticsearch in linux and not windows?](https://discuss.elastic.co/t/are-there-any-benefits-of-running-elasticsearch-in-linux-and-not-windows/244675)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 8:46am UTC](https://discuss.elastic.co/t/are-there-any-benefits-of-running-elasticsearch-in-linux-and-not-windows/244675 "2020-08-12T08:46:36Z")
I was wondering if there are any significant performance differences between Linux, Windows and Docker. Thanks for your answers. --- ## [Cannot get desired query results with filter](https://discuss.elastic.co/t/cannot-get-desired-query-results-with-filter/244680)
**Author:** [@vinodkrishnanr](https://discuss.elastic.co/u/vinodkrishnanr)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 8:46am UTC](https://discuss.elastic.co/t/cannot-get-desired-query-results-with-filter/244680 "2020-08-12T08:46:35Z")
Hi Im trying to understand why the below query does not produce the results. { "query": { "bool": { "filter": { "terms": { "classifica… --- ## [Alias with multiple filters](https://discuss.elastic.co/t/alias-with-multiple-filters/243095)
**Author:** [@Rom1](https://discuss.elastic.co/u/Rom1)\ **Replies:** 4\ **Last updated:** [August 12, 2020, 8:45am UTC](https://discuss.elastic.co/t/alias-with-multiple-filters/243095 "2020-08-12T08:45:29Z")
Hi guys, In order to filter data to be displayed in a drop down list of the control visualization in Kibana, I decided to create an alias on my index by filtering some data but I'm facing like an issue. Here is the pa… --- ## [Import Data via Machine Learning - Data not sent](https://discuss.elastic.co/t/import-data-via-machine-learning-data-not-sent/242900)
**Author:** [@aducSG](https://discuss.elastic.co/u/aducSG)\ **Replies:** 5\ **Last updated:** [August 12, 2020, 8:45am UTC](https://discuss.elastic.co/t/import-data-via-machine-learning-data-not-sent/242900 "2020-08-12T08:45:20Z")
Hello, I have been using the experimental feature to import Data from a CSV file (in Machine Learning \> Import Data). The import is working perfectly fine, all the documents are imported in a new index. However, when … --- ## [Unable to connect Kibana to Elasticsearch through AWS load balancer with an SSL certificate](https://discuss.elastic.co/t/unable-to-connect-kibana-to-elasticsearch-through-aws-load-balancer-with-an-ssl-certificate/244409)
**Author:** [@matt.farrow](https://discuss.elastic.co/u/matt.farrow)\ **Replies:** 2\ **Last updated:** [August 11, 2020, 2:12pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-to-elasticsearch-through-aws-load-balancer-with-an-ssl-certificate/244409 "2020-08-11T14:12:46Z")
Hi, hopefully I am able to provide all the necessary information needed for my problem. Let me know if anything extra is required. My current set up currently is an AWS load balancer with an SSL certificate attached to … --- ## [Restored data to fresh cluster incorrectly and receiving "master not discovered or elected yet"](https://discuss.elastic.co/t/restored-data-to-fresh-cluster-incorrectly-and-receiving-master-not-discovered-or-elected-yet/244617)
**Author:** [@ronenf](https://discuss.elastic.co/u/ronenf)\ **Replies:** 6\ **Last updated:** [August 12, 2020, 8:28am UTC](https://discuss.elastic.co/t/restored-data-to-fresh-cluster-incorrectly-and-receiving-master-not-discovered-or-elected-yet/244617 "2020-08-12T08:28:36Z")
Hi I had a 3 nodes cluster running on on Kubernetes. There were space issues with the volumes so I was forced to provision new volumes. Before I read this article I decided to make a copy of the data directory, I create… --- ## [Watcher alert only on state transition (error / ok state)](https://discuss.elastic.co/t/watcher-alert-only-on-state-transition-error-ok-state/243076)
**Author:** [@trigger-unhappy](https://discuss.elastic.co/u/trigger-unhappy)\ **Replies:** 3\ **Last updated:** [August 12, 2020, 8:27am UTC](https://discuss.elastic.co/t/watcher-alert-only-on-state-transition-error-ok-state/243076 "2020-08-12T08:27:15Z")
I've read this nice post on how you could possibly set up Watcher to trigger an action only when a watch change state (similar to how cloudwatch does it with events). I'd love to set something like that up to avoid spamm… --- ## [Tags field filter](https://discuss.elastic.co/t/tags-field-filter/241520)
**Author:** [@Yachee\_Leo](https://discuss.elastic.co/u/Yachee_Leo)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 8:25am UTC](https://discuss.elastic.co/t/tags-field-filter/241520 "2020-08-12T08:25:44Z")
I have a 'tags' feild in under my index, it contains 3 values like : a,b,c. I want to filter out just 'a' in visualizition/timelion, but every time the results would contain all 3 values, how can I get rid of b and c ? t… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1871) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1873)