# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=871 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 872 --- ## [Not equal condtions in elasticsearch aggregation](https://discuss.elastic.co/t/not-equal-condtions-in-elasticsearch-aggregation/308976)
**Author:** [@hadii](https://discuss.elastic.co/u/hadii)\ **Replies:** 5\ **Last updated:** [July 9, 2022, 5:21am UTC](https://discuss.elastic.co/t/not-equal-condtions-in-elasticsearch-aggregation/308976 "2022-07-09T05:21:23Z")
I have a rails app that connects to Elasticsearch and the user could define some conditions like (at least),(at most), and ... to compare and find his specific result. everything is fine but now I have to add not equal t… --- ## [Logstash filter if internal networks](https://discuss.elastic.co/t/logstash-filter-if-internal-networks/309238)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 2\ **Last updated:** [July 9, 2022, 5:07am UTC](https://discuss.elastic.co/t/logstash-filter-if-internal-networks/309238 "2022-07-09T05:07:01Z")
This is a continuation of my previous thread which Badger kindly solved. I have sflow data coming in with the src\_ip and dst\_ip fields My internal networks are in this range and I'd like them not to be scanned for geoi… --- ## [Username or password is incorrect. Please try again. / HTTP/1.1 401 Unauthorized](https://discuss.elastic.co/t/username-or-password-is-incorrect-please-try-again-http-1-1-401-unauthorized/309145)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 3\ **Last updated:** [July 9, 2022, 4:41am UTC](https://discuss.elastic.co/t/username-or-password-is-incorrect-please-try-again-http-1-1-401-unauthorized/309145 "2022-07-09T04:41:33Z")
Hello World! I'm trying to follow Install Kibana with Docker | Kibana Guide \[7.17\] | Elastic and even though it looks like Kibana started fine: % docker compose logs --tail 1 kibana | {"type":"log","@timestamp":"2022-… --- ## [ECS expect \`target\` value](https://discuss.elastic.co/t/ecs-expect-target-value/308652)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 8\ **Last updated:** [July 2, 2022, 12:40am UTC](https://discuss.elastic.co/t/ecs-expect-target-value/308652 "2022-07-02T00:40:54Z")
Hello boys and girls, I'm playing with logstash and sflow codec input Trying to enrich the data with geoip and get this error: \[WARN \]\[logstash.filters.geoip \]\[3\_sflow\] ECS expect \`target\` value \`destination.geo.ip\`… --- ## [How to implement space ignored search across a document with multiple fields](https://discuss.elastic.co/t/how-to-implement-space-ignored-search-across-a-document-with-multiple-fields/309236)
**Author:** [@Karan\_Bansal](https://discuss.elastic.co/u/Karan_Bansal)\ **Replies:** 0\ **Last updated:** [July 8, 2022, 11:04pm UTC](https://discuss.elastic.co/t/how-to-implement-space-ignored-search-across-a-document-with-multiple-fields/309236 "2022-07-08T23:04:29Z")
I'm trying to implement a space agnostic product catalog search solution using Elasticsearch for a chemical oriented product database. I am using the word\_joiner with catenate\_all to join words, but when using multi\_matc… --- ## [Specify search analyzer during query time with the new Elastic Java Client](https://discuss.elastic.co/t/specify-search-analyzer-during-query-time-with-the-new-elastic-java-client/309235)
**Author:** [@Karan\_Bansal](https://discuss.elastic.co/u/Karan_Bansal)\ **Replies:** 0\ **Last updated:** [July 8, 2022, 10:58pm UTC](https://discuss.elastic.co/t/specify-search-analyzer-during-query-time-with-the-new-elastic-java-client/309235 "2022-07-08T22:58:58Z")
Hi, is there a way to specify which analyzer to use for the query string while querying the index via the Elasticsearch Java Client API? I'm using the new Java Client API and when I'm specifying the analyzer during sear… --- ## [Ingress Nginx Integration](https://discuss.elastic.co/t/ingress-nginx-integration/309230)
**Author:** [@AlexandreCoelho](https://discuss.elastic.co/u/AlexandreCoelho)\ **Replies:** 0\ **Last updated:** [July 8, 2022, 8:49pm UTC](https://discuss.elastic.co/t/ingress-nginx-integration/309230 "2022-07-08T20:49:49Z")
Hey, today i have elasticsearch implemented with fluentbit and Kibana, we are using nginx as ingress of my cluster. And I have notice that exist that integration with integrations. I have managed to implement agent … --- ## [Java Client for Composite Aggregation using Terms queries](https://discuss.elastic.co/t/java-client-for-composite-aggregation-using-terms-queries/309227)
**Author:** [@parashar1505](https://discuss.elastic.co/u/parashar1505)\ **Replies:** 0\ **Last updated:** [July 8, 2022, 7:34pm UTC](https://discuss.elastic.co/t/java-client-for-composite-aggregation-using-terms-queries/309227 "2022-07-08T19:34:58Z")
Hi Team, I have created a composite query for aggregating on 2 different attributes as below - { "from": 0, "size": 0, "query": { "bool": { "must": \[ { … --- ## [If statement not work](https://discuss.elastic.co/t/if-statement-not-work/309183)
**Author:** [@david-a76](https://discuss.elastic.co/u/david-a76)\ **Replies:** 6\ **Last updated:** [July 8, 2022, 6:13pm UTC](https://discuss.elastic.co/t/if-statement-not-work/309183 "2022-07-08T18:13:32Z")
Hi all, I'm trying to import a sample json file: ... { "id": 2, "timestamp": "2019-08-11T17:55:56Z", "paymentType": "Visa", "name": "Darby Dacks", "gender": "Female", "ip\_address": "77.72.239.47", "purpos… --- ## [Logstash error "Errno::EACCES: Permission denied - NUL" when installing plugin input-syslog](https://discuss.elastic.co/t/logstash-error-errno-permission-denied-nul-when-installing-plugin-input-syslog/308523)
**Author:** [@CarlosD](https://discuss.elastic.co/u/CarlosD)\ **Replies:** 3\ **Last updated:** [July 8, 2022, 6:04pm UTC](https://discuss.elastic.co/t/logstash-error-errno-permission-denied-nul-when-installing-plugin-input-syslog/308523 "2022-07-08T18:04:39Z")
Hi, I haven't been able to install logstash-input-syslog I thought this could be solved by following this but it did not solve it I am trying this in a Windows 11 Enterprise Evaluation VM (WINDEV2204EVAL) Attaching t… --- ## [Using Custom Elastic Charts Fork in Kibana](https://discuss.elastic.co/t/using-custom-elastic-charts-fork-in-kibana/302780)
**Author:** [@Jacob\_Williams](https://discuss.elastic.co/u/Jacob_Williams)\ **Replies:** 2\ **Last updated:** [July 8, 2022, 4:47pm UTC](https://discuss.elastic.co/t/using-custom-elastic-charts-fork-in-kibana/302780 "2022-07-08T16:47:31Z")
Like the title suggests I am trying to use a custom fork of elastic-charts in Kibana so I can do some custom themeing, mostly small things like adjusting font size on bar chart to client request. I was able to prepare a… --- ## [Exiting: error unpacking config data: more than one namespace configured accessing 'output' (source:'heartbeat.yml')](https://discuss.elastic.co/t/exiting-error-unpacking-config-data-more-than-one-namespace-configured-accessing-output-source-heartbeat-yml/309161)
**Author:** [@Ronald1](https://discuss.elastic.co/u/Ronald1)\ **Replies:** 1\ **Last updated:** [July 8, 2022, 4:28pm UTC](https://discuss.elastic.co/t/exiting-error-unpacking-config-data-more-than-one-namespace-configured-accessing-output-source-heartbeat-yml/309161 "2022-07-08T16:28:00Z")
Hello, I run ELK stack using Docker Compose. See Install Elasticsearch with Docker | Elasticsearch Guide \[8.3\] | Elastic. It works fine. I can login using Kibana. I want to run Heartbeat on Docker as well, using Run He… --- ## [Convert json nested fields into integer](https://discuss.elastic.co/t/convert-json-nested-fields-into-integer/309167)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 7\ **Last updated:** [July 8, 2022, 4:23pm UTC](https://discuss.elastic.co/t/convert-json-nested-fields-into-integer/309167 "2022-07-08T16:23:35Z")
Hi. I am trying to convert a field read by a json filter in logstash. I am used to convert fields from other sources, but with this nested field from a json log file, I cannot convert a quoted number string to a integer. … --- ## [Calculate Apdex value in elasticsearch](https://discuss.elastic.co/t/calculate-apdex-value-in-elasticsearch/305955)
**Author:** [@mmartinez](https://discuss.elastic.co/u/mmartinez)\ **Replies:** 6\ **Last updated:** [July 8, 2022, 4:21pm UTC](https://discuss.elastic.co/t/calculate-apdex-value-in-elasticsearch/305955 "2022-07-08T16:21:00Z")
Hello, Recently, we migrated our New Relic APM stack to escloud but we realised there is no official way to calculate the Apdex value. There is this new User Experience App but some people from our company are still req… --- ## [Add runtime field to system index template](https://discuss.elastic.co/t/add-runtime-field-to-system-index-template/307749)
**Author:** [@mmartinez](https://discuss.elastic.co/u/mmartinez)\ **Replies:** 2\ **Last updated:** [July 8, 2022, 4:08pm UTC](https://discuss.elastic.co/t/add-runtime-field-to-system-index-template/307749 "2022-07-08T16:08:14Z")
Hello, We have a Data View created based on the .ds-.monitoring-es\* indices. We created a scripted field in that Data View that is working but as elastic says, it is deprecated. We tried to move that scripted field int… --- ## [Flattening JSON string level with other fields](https://discuss.elastic.co/t/flattening-json-string-level-with-other-fields/309182)
**Author:** [@Mostafa\_Talebi](https://discuss.elastic.co/u/Mostafa_Talebi)\ **Replies:** 1\ **Last updated:** [July 8, 2022, 4:03pm UTC](https://discuss.elastic.co/t/flattening-json-string-level-with-other-fields/309182 "2022-07-08T16:03:43Z")
I have set up my kibana and Elastic. I am getting my logs from Fluentbit. My main app log, which is JSON, is sent by Fluent with other meta fields like this: { "containerId": "foo", "clusterId" : "bar", "s… --- ## [Can't export Data table visualization into CSV](https://discuss.elastic.co/t/cant-export-data-table-visualization-into-csv/307890)
**Author:** [@mmartinez](https://discuss.elastic.co/u/mmartinez)\ **Replies:** 2\ **Last updated:** [July 8, 2022, 3:46pm UTC](https://discuss.elastic.co/t/cant-export-data-table-visualization-into-csv/307890 "2022-07-08T15:46:05Z")
Hello, We would like to export one of our Data table visualizations into a CSV file but we just have the option to generate PDF and PNG reports. I have seen some examples in different webpages that exported in CSV but w… --- ## [Kibana TSVB Markdown styling](https://discuss.elastic.co/t/kibana-tsvb-markdown-styling/309208)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 1\ **Last updated:** [July 8, 2022, 3:26pm UTC](https://discuss.elastic.co/t/kibana-tsvb-markdown-styling/309208 "2022-07-08T15:26:34Z")
Hello, I want to create a pretty and highly functional dashboard containing all important information and metrics regarding the whole network. Right now I am working on displaying information on failover status for ASA … --- ## [Kiban show wrong time](https://discuss.elastic.co/t/kiban-show-wrong-time/309193)
**Author:** [@anton.potekhin](https://discuss.elastic.co/u/anton.potekhin)\ **Replies:** 4\ **Last updated:** [July 8, 2022, 3:01pm UTC](https://discuss.elastic.co/t/kiban-show-wrong-time/309193 "2022-07-08T15:01:16Z")
i have log messages in the following format: {"@timestamp":"2022-07-08T10:01:43.181Z","log.level":"info","message":"verifyReceipt: found receipt","ecs":{"version":"1.6.0"}} @timestamp in UTC. When i check logs in Kiban… --- ## [Grok Parsing](https://discuss.elastic.co/t/grok-parsing/309200)
**Author:** [@escanor\_sama](https://discuss.elastic.co/u/escanor_sama)\ **Replies:** 2\ **Last updated:** [July 8, 2022, 2:03pm UTC](https://discuss.elastic.co/t/grok-parsing/309200 "2022-07-08T14:03:28Z")
Hi everyone, I am having trouble when I want to parse this Fortigate Log \<189\>devname="FWFG240D" type="traffic" subtype="forward" level="notice" vd="root" eventtime=1565130979 srcip=146.0.138.202 srcport=61103 dstip=192… --- ## [Creating Multiple Elastic Search Ingest Pipelines](https://discuss.elastic.co/t/creating-multiple-elastic-search-ingest-pipelines/309206)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 1\ **Last updated:** [July 8, 2022, 1:54pm UTC](https://discuss.elastic.co/t/creating-multiple-elastic-search-ingest-pipelines/309206 "2022-07-08T13:54:23Z")
I have created multiple ingest pipelines. I can export these pipelines from the dev console with the following command: GET \_ingest/pipeline/logs\* I copy this into a .json file, I would like to now import this back int… --- ## [Elasticsearch Source Plugin in Cloud Data Fusion (GCP)](https://discuss.elastic.co/t/elasticsearch-source-plugin-in-cloud-data-fusion-gcp/309168)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 1\ **Last updated:** [July 8, 2022, 1:25pm UTC](https://discuss.elastic.co/t/elasticsearch-source-plugin-in-cloud-data-fusion-gcp/309168 "2022-07-08T13:25:12Z")
Hello Every One I am using Elasticsearch plugin in to cloud data fusion (CDAP tool) I am using follwing Configration but I am not detecting Output schema may be I am doing miss configuration please help how to I co… --- ## [Unable to search array values on filter](https://discuss.elastic.co/t/unable-to-search-array-values-on-filter/309196)
**Author:** [@Himanshu\_Joshi1](https://discuss.elastic.co/u/Himanshu_Joshi1)\ **Replies:** 2\ **Last updated:** [July 8, 2022, 1:07pm UTC](https://discuss.elastic.co/t/unable-to-search-array-values-on-filter/309196 "2022-07-08T13:07:43Z")
\*\*This is my data\*\* { "took" : 2, "timed\_out" : false, "\_shards" : { "total" : 6, "successful" : 6, "skipped" : 0, "failed" : 0 }, "hits" : { "total" : { "value" : 2, "relation" … --- ## [Elasticsearch - Score for a document pair](https://discuss.elastic.co/t/elasticsearch-score-for-a-document-pair/309172)
**Author:** [@Pazhaniyappan](https://discuss.elastic.co/u/Pazhaniyappan)\ **Replies:** 1\ **Last updated:** [July 8, 2022, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-score-for-a-document-pair/309172 "2022-07-08T12:52:41Z")
Hello, Is there a way to find out the similarity between the two documents? For example, I have document A and document B in JSON format. I will select some parameters from the documents for calculating the match sco… --- ## [Elasticsearch Unreachable Error](https://discuss.elastic.co/t/elasticsearch-unreachable-error/309185)
**Author:** [@pooja5](https://discuss.elastic.co/u/pooja5)\ **Replies:** 1\ **Last updated:** [July 8, 2022, 11:15am UTC](https://discuss.elastic.co/t/elasticsearch-unreachable-error/309185 "2022-07-08T11:15:55Z")
Hello! We have observed a log message \[ERROR\]\[logstash.outputs.elasticsearch\]\[.monitoring-logstash\] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_messa… --- ## [Bad parsing json with logstash](https://discuss.elastic.co/t/bad-parsing-json-with-logstash/309121)
**Author:** [@Lynow](https://discuss.elastic.co/u/Lynow)\ **Replies:** 4\ **Last updated:** [July 7, 2022, 2:55pm UTC](https://discuss.elastic.co/t/bad-parsing-json-with-logstash/309121 "2022-07-07T14:55:39Z")
Hello, I'm having trouble with logstash json parsing. I receive several events of this type: { "ignoreSimilarity" =\> false, "message" =\> "19/04/22 19h47\\n\\nLogin:\*\*\*", "@timestamp" =\> 2022-04… --- ## [Log UI doesn't show log.level](https://discuss.elastic.co/t/log-ui-doesnt-show-log-level/309191)
**Author:** [@anton.potekhin](https://discuss.elastic.co/u/anton.potekhin)\ **Replies:** 0\ **Last updated:** [July 8, 2022, 10:26am UTC](https://discuss.elastic.co/t/log-ui-doesnt-show-log-level/309191 "2022-07-08T10:26:52Z")
I have filebeat that process my logs. Logs in the following format: {"@timestamp":"2022-07-08T10:01:43.181Z","log.level":"info","message":"verifyReceipt: found receipt","ecs":{"version":"1.6.0"}} When i use discover s… --- ## [Memory usage of completion/context suggester](https://discuss.elastic.co/t/memory-usage-of-completion-context-suggester/309186)
**Author:** [@mpinho](https://discuss.elastic.co/u/mpinho)\ **Replies:** 0\ **Last updated:** [July 8, 2022, 9:20am UTC](https://discuss.elastic.co/t/memory-usage-of-completion-context-suggester/309186 "2022-07-08T09:20:35Z")
Hello, I have a question regarding the context suggester implementation, on Elasticsearch 8.3.1. I have this mapping: { "mappings": { "properties": { "suggest": { "type": "completion", "contexts": \[ … --- ## [Dashboard - field Host.hostname not found error](https://discuss.elastic.co/t/dashboard-field-host-hostname-not-found-error/309173)
**Author:** [@Darshana](https://discuss.elastic.co/u/Darshana)\ **Replies:** 3\ **Last updated:** [July 8, 2022, 7:55am UTC](https://discuss.elastic.co/t/dashboard-field-host-hostname-not-found-error/309173 "2022-07-08T07:55:36Z")
Hi, I'm getting error for Kibana Dashboard : "Field host.hostname was not found Edit in Lens editor to see more errors" --- ## [Bulk Partial update of a Nested object List by condition](https://discuss.elastic.co/t/bulk-partial-update-of-a-nested-object-list-by-condition/308948)
**Author:** [@krishnapss](https://discuss.elastic.co/u/krishnapss)\ **Replies:** 2\ **Last updated:** [July 8, 2022, 7:28am UTC](https://discuss.elastic.co/t/bulk-partial-update-of-a-nested-object-list-by-condition/308948 "2022-07-08T07:28:08Z")
Hi, I have an index which has nested list object. I need to only update certain values based on a condition. List of history with dates and values I need to update only certain dates values. In the below example I only … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=870) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=872)