# Latest **URL:** https://discuss.elastic.co/latest.md?page=1119 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1120 --- ## [How to search in Elasticsearch when same field is present multiple times?](https://discuss.elastic.co/t/how-to-search-in-elasticsearch-when-same-field-is-present-multiple-times/305385)
**Author:** [@Vipul\_Kumar](https://discuss.elastic.co/u/Vipul_Kumar)\ **Replies:** 7\ **Last updated:** [May 24, 2022, 6:30am UTC](https://discuss.elastic.co/t/how-to-search-in-elasticsearch-when-same-field-is-present-multiple-times/305385 "2022-05-24T06:30:41Z")
I'm trying to figure out how do I search an index when same field is present multiple times. Look at the below example: "\_source" : { "field1" : "value1", "field\_list" : \[ { … --- ## [Fuzzysearch not working as expected](https://discuss.elastic.co/t/fuzzysearch-not-working-as-expected/305450)
**Author:** [@Reset\_Button](https://discuss.elastic.co/u/Reset_Button)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 6:04am UTC](https://discuss.elastic.co/t/fuzzysearch-not-working-as-expected/305450 "2022-05-24T06:04:25Z")
Hello! I try to implement fuzzysearch like explained here How to Use Fuzzy Query Matches in Elasticsearch | HackerNoon - but get strange results. { "query": { "match" : { "term": { "query" : "At w… --- ## [Elastic Cloud performance data in Stack Monitoring](https://discuss.elastic.co/t/elastic-cloud-performance-data-in-stack-monitoring/303978)
**Author:** [@keiransteele](https://discuss.elastic.co/u/keiransteele)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 5:21am UTC](https://discuss.elastic.co/t/elastic-cloud-performance-data-in-stack-monitoring/303978 "2022-05-24T05:21:59Z")
Are there any plans to have the performance metrics from the Elastic Cloud deployment interface available in Stack Monitoring? The graphs in the deployment interface are small and not very useful, it's also not possible … --- ## [Using formula section on the vertical axis](https://discuss.elastic.co/t/using-formula-section-on-the-vertical-axis/305410)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 3\ **Last updated:** [May 24, 2022, 5:09am UTC](https://discuss.elastic.co/t/using-formula-section-on-the-vertical-axis/305410 "2022-05-24T05:09:30Z")
Hi, I want to show the count as a percentage. Currently it is displaying the count of files. How do I show the count as a percentage of the total number of files in the formula section of the vertical axis. attached scr… --- ## [Index document: very bad performance in Elasticsearch 8.2.0](https://discuss.elastic.co/t/index-document-very-bad-performance-in-elasticsearch-8-2-0/305392)
**Author:** [@Alexander\_Ott](https://discuss.elastic.co/u/Alexander_Ott)\ **Replies:** 3\ **Last updated:** [May 24, 2022, 5:07am UTC](https://discuss.elastic.co/t/index-document-very-bad-performance-in-elasticsearch-8-2-0/305392 "2022-05-24T05:07:03Z")
We are trying to migrate from Elasticsearch 6.7.1 to Elasticsearch 8.2.0. With the same amount of documents per bulk request, we always get a socket timeout in Elasticsearch 8.2.0. Everything works fine in Elasticsearch… --- ## [Filebeat on raspberry pi 3](https://discuss.elastic.co/t/filebeat-on-raspberry-pi-3/303671)
**Author:** [@Dhia\_Saibi](https://discuss.elastic.co/u/Dhia_Saibi)\ **Replies:** 5\ **Last updated:** [May 24, 2022, 4:59am UTC](https://discuss.elastic.co/t/filebeat-on-raspberry-pi-3/303671 "2022-05-24T04:59:26Z")
I wanna know if is it possible to install filebeat from elasticstack (I need it to get logs file from an indoor camera) on raspberry pi 3 and if yes does anyone have a tutorial or can teach me the process? --- ## [Elastic Cloud : Option to deploy into a single zone / alternative cloud providers](https://discuss.elastic.co/t/elastic-cloud-option-to-deploy-into-a-single-zone-alternative-cloud-providers/303866)
**Author:** [@devops\_uilicious](https://discuss.elastic.co/u/devops_uilicious)\ **Replies:** 3\ **Last updated:** [May 24, 2022, 3:32am UTC](https://discuss.elastic.co/t/elastic-cloud-option-to-deploy-into-a-single-zone-alternative-cloud-providers/303866 "2022-05-24T03:32:43Z")
We would like to ideally be able to avoid "inter-node" fees by ... deploying all our nodes into a single zone (for the existing GCP/AWS/Azure workload), saving both elastic (and us) the inter networking fees. deploying… --- ## [Parse specific field when JSON filter failed](https://discuss.elastic.co/t/parse-specific-field-when-json-filter-failed/305439)
**Author:** [@austin0918](https://discuss.elastic.co/u/austin0918)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 2:53am UTC](https://discuss.elastic.co/t/parse-specific-field-when-json-filter-failed/305439 "2022-05-24T02:53:53Z")
I have some logs in JSON format with some offending key-value pairs that cause \_jsonparsefailure. I wanted to leave the log as is and just parse the timestamp. I tried the below config but failed to parse the timestamp f… --- ## [Kibana URL breaking and navigates back to home page](https://discuss.elastic.co/t/kibana-url-breaking-and-navigates-back-to-home-page/305442)
**Author:** [@shyamnguitar](https://discuss.elastic.co/u/shyamnguitar)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 2:48am UTC](https://discuss.elastic.co/t/kibana-url-breaking-and-navigates-back-to-home-page/305442 "2022-05-24T02:48:14Z")
When I run a query and share the URLs to my developers, the URL breaks and goes to home page. The developer who wants to debug has to construct the whole query again from beginning. Thanks folks in advance for any guidan… --- ## [Elasticsearch等の学習方法について](https://discuss.elastic.co/t/elasticsearch/305437)
**Author:** [@Yos](https://discuss.elastic.co/u/Yos)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 2:09am UTC](https://discuss.elastic.co/t/elasticsearch/305437 "2022-05-24T02:09:50Z")
※このようなことをここに投稿してよいのかわかりませんので、 不適切であれば削除いたしますのでご返信ください。 私は仕事でElasticsearch＋Kibana＋Logstash＋Beatsを組み合わせたログ分析の仕組みを構築中ですが、そのための学習は書籍（ElasticStack実践ガイド）や公式ドキュメント、このコミュニティ、個人のブログで進めております。 皆様はElasticsearchやその他Kibana、Logstash… --- ## [\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\] Encountered a retryable error (will retry with exponential backoff) {:code=\>400, :url=\>"http://127.0.0.1:9200/\_bulk", :content\_length=\>137306}](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-main-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-http-127-0-0-1-9200-bulk-content-length-137306/305436)
**Author:** [@sunpasup](https://discuss.elastic.co/u/sunpasup)\ **Replies:** 4\ **Last updated:** [May 24, 2022, 2:03am UTC](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-main-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-http-127-0-0-1-9200-bulk-content-length-137306/305436 "2022-05-24T02:03:29Z")
we are facing above issue while uploading large sets of data from postgres table. based on basic research it looks like, its because of malfunctioned data. how to fix this ? how to identify what data is causing this is… --- ## [Hide weekends for date histogram field in time series in graph](https://discuss.elastic.co/t/hide-weekends-for-date-histogram-field-in-time-series-in-graph/305434)
**Author:** [@monilgangar](https://discuss.elastic.co/u/monilgangar)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 12:54am UTC](https://discuss.elastic.co/t/hide-weekends-for-date-histogram-field-in-time-series-in-graph/305434 "2022-05-24T00:54:51Z")
Our application runs between Monday to Friday... and not on Saturday and Sunday. We are creating a chart in Kibana and using the date histogram field for time series. It is showing the weekends as well in the graph. so… --- ## [Transition time old to new licence](https://discuss.elastic.co/t/transition-time-old-to-new-licence/305394)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [May 24, 2022, 12:46am UTC](https://discuss.elastic.co/t/transition-time-old-to-new-licence/305394 "2022-05-24T00:46:38Z")
Dear Elastic, I have a basic question: What does happen if a gold licence in an onpremises cluster runs out of time (and only e.g. a week later) the new license gets appied? What does not funtion in that 'transition we… --- ## [Max\_terms\_count parameter in Elastic search 6.1](https://discuss.elastic.co/t/max-terms-count-parameter-in-elastic-search-6-1/305413)
**Author:** [@akshay\_chavan](https://discuss.elastic.co/u/akshay_chavan)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 12:40am UTC](https://discuss.elastic.co/t/max-terms-count-parameter-in-elastic-search-6-1/305413 "2022-05-24T00:40:04Z")
We have upgraded Elasticsearch from 6.1 to 7.1 and getting error for max\_terms\_count parameter, can anyone confirm if this parameter was present in ES 6.1 and what is the default value for it ? --- ## [Your Query is taking a while - Kibana](https://discuss.elastic.co/t/your-query-is-taking-a-while-kibana/305417)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [May 24, 2022, 12:22am UTC](https://discuss.elastic.co/t/your-query-is-taking-a-while-kibana/305417 "2022-05-24T00:22:29Z")
Hello All, I'm facing an issue in almost in all my Index when I'm trying to get data more than 1 day. Below is the error screenshot , I'm not sure how to resolve this,any suggestion would be helpful. Note: I've done v… --- ## [Maintenance of the node/cluster in Elasticsearch](https://discuss.elastic.co/t/maintenance-of-the-node-cluster-in-elasticsearch/305366)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 3\ **Last updated:** [May 23, 2022, 10:01pm UTC](https://discuss.elastic.co/t/maintenance-of-the-node-cluster-in-elasticsearch/305366 "2022-05-23T22:01:17Z")
Hello everyone, this time isn't much of a problem, is more like a topic for advice so I hope theres no problem posting it here. Up until now I've been using all the settings of Elasticsearch in default by recommendation… --- ## [Running multiple filebeat instances](https://discuss.elastic.co/t/running-multiple-filebeat-instances/305423)
**Author:** [@justplanenutz](https://discuss.elastic.co/u/justplanenutz)\ **Replies:** 2\ **Last updated:** [May 23, 2022, 8:59pm UTC](https://discuss.elastic.co/t/running-multiple-filebeat-instances/305423 "2022-05-23T20:59:07Z")
We have a system that is very chatty with regard to the number of logs produced. Our current production implementation has a single filebeat container ( in k8s ) running and it is struggling to keep up. We have adjusted … --- ## [Error with Security Rules](https://discuss.elastic.co/t/error-with-security-rules/303960)
**Author:** [@efadeev](https://discuss.elastic.co/u/efadeev)\ **Replies:** 8\ **Last updated:** [May 23, 2022, 8:58pm UTC](https://discuss.elastic.co/t/error-with-security-rules/303960 "2022-05-23T20:58:58Z")
I got an error with Security Rules in my Kibana. Both custom and pre-built rules. " An error occurred when reading the rule. Unauthorized to get a "siem.queryRule" rule for "siem"" Rules added under elastic user --- ## [Syntax of Elastic.Clients.Elasticsearch](https://discuss.elastic.co/t/syntax-of-elastic-clients-elasticsearch/305433)
**Author:** [@Sjaak](https://discuss.elastic.co/u/Sjaak)\ **Replies:** 0\ **Last updated:** [May 23, 2022, 7:59pm UTC](https://discuss.elastic.co/t/syntax-of-elastic-clients-elasticsearch/305433 "2022-05-23T19:59:02Z")
I can find a lot of examples for Elastic 8.2 'NEST' namespace, but nothing for the new 'Elastic.Clients.Elasticsearch' namespace. For example, this code works, but how to add the second field 'name'. Nothing seems to wo… --- ## [Parsing whole phrase](https://discuss.elastic.co/t/parsing-whole-phrase/305420)
**Author:** [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\ **Replies:** 3\ **Last updated:** [May 23, 2022, 7:58pm UTC](https://discuss.elastic.co/t/parsing-whole-phrase/305420 "2022-05-23T19:58:01Z")
I'm collecting Windows Applications Event Logs, all of them are multiline and can have a variety of formats. My message field which I would like to match has such format: \[Message: An error occurred while trying to ch… --- ## [How not to duplicate data in Elasticserch](https://discuss.elastic.co/t/how-not-to-duplicate-data-in-elasticserch/305428)
**Author:** [@Daniel\_Oliveira](https://discuss.elastic.co/u/Daniel_Oliveira)\ **Replies:** 1\ **Last updated:** [May 23, 2022, 7:45pm UTC](https://discuss.elastic.co/t/how-not-to-duplicate-data-in-elasticserch/305428 "2022-05-23T19:45:03Z")
Hello gentlemen. I have a logstash pipeline that processes data from a .csv file this file has a column called id how do i not duplicate the data with the same id in case i reprocessed the file or another file that co… --- ## [Recover connection vs logstash further processing](https://discuss.elastic.co/t/recover-connection-vs-logstash-further-processing/305429)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 0\ **Last updated:** [May 23, 2022, 7:36pm UTC](https://discuss.elastic.co/t/recover-connection-vs-logstash-further-processing/305429 "2022-05-23T19:36:12Z")
Hi I observe in my production environment such suspicious behavior. Under in spike period of shooting data to ELK cluster a few of master nodes are occupying and in that time I got it that connection is Unreachable. T… --- ## [Error on import with Python and Eland](https://discuss.elastic.co/t/error-on-import-with-python-and-eland/304713)
**Author:** [@greengeek](https://discuss.elastic.co/u/greengeek)\ **Replies:** 1\ **Last updated:** [May 23, 2022, 6:20pm UTC](https://discuss.elastic.co/t/error-on-import-with-python-and-eland/304713 "2022-05-23T18:20:53Z")
I am using Python and Eland to loop through 2757 json files that I have created and import them into Elasticsearch. With my code I am able to import the majority of them, only 5 of them do not import and throw the same … --- ## [Environment name instead of hostname](https://discuss.elastic.co/t/environment-name-instead-of-hostname/305359)
**Author:** [@Anagha\_nambiar](https://discuss.elastic.co/u/Anagha_nambiar)\ **Replies:** 4\ **Last updated:** [May 23, 2022, 4:29pm UTC](https://discuss.elastic.co/t/environment-name-instead-of-hostname/305359 "2022-05-23T16:29:15Z")
Hi All, Suppose I have installed metricbeat in 3 servers and their machine names are IIS1, IIS2 and IIS3. If I have to filter metric data for dashboard creation in Kibana, then I used the query "agent.hostname"or "host… --- ## [Kibana Canvas: createTable creates duplicate rows](https://discuss.elastic.co/t/kibana-canvas-createtable-creates-duplicate-rows/301210)
**Author:** [@JeroenK](https://discuss.elastic.co/u/JeroenK)\ **Replies:** 7\ **Last updated:** [May 23, 2022, 3:52pm UTC](https://discuss.elastic.co/t/kibana-canvas-createtable-creates-duplicate-rows/301210 "2022-05-23T15:52:42Z")
Hi, I want to create a bar chart in canvas with a consistent 10 bars even if there is no data for 10 bars. It is for a competition and, for example, at the beginning of the week there might not be enough data to have 10 … --- ## [MetricBeat no longer creating new indexes](https://discuss.elastic.co/t/metricbeat-no-longer-creating-new-indexes/305400)
**Author:** [@ozonshak](https://discuss.elastic.co/u/ozonshak)\ **Replies:** 2\ **Last updated:** [May 23, 2022, 3:39pm UTC](https://discuss.elastic.co/t/metricbeat-no-longer-creating-new-indexes/305400 "2022-05-23T15:39:48Z")
Hello. I've been using MetricBeat for a while now and it was working just fine. All of a sudden, about mid April, I noticed that it stopped logging to the index. Upon closer inspection, all of the metricbeat agents ar… --- ## [About Ingest Processor patterns](https://discuss.elastic.co/t/about-ingest-processor-patterns/305353)
**Author:** [@katakam\_chaitanya](https://discuss.elastic.co/u/katakam_chaitanya)\ **Replies:** 3\ **Last updated:** [May 23, 2022, 3:20pm UTC](https://discuss.elastic.co/t/about-ingest-processor-patterns/305353 "2022-05-23T15:20:53Z")
My custom log lines look something like this level=WARNING;user=john;location=xxx; Its like "LHS=RHS;" A processor I have to write for this is:- "processors": \[ { "grok": { "field": "message",… --- ## [Data Node disconnects randomly from cluster](https://discuss.elastic.co/t/data-node-disconnects-randomly-from-cluster/305396)
**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\ **Replies:** 2\ **Last updated:** [May 23, 2022, 3:12pm UTC](https://discuss.elastic.co/t/data-node-disconnects-randomly-from-cluster/305396 "2022-05-23T15:12:05Z")
Hi Team, Data node from the cluster some times automatically removed without any high heap usage. with in sometime it joins automatically. Please help me to sort it out. Elasticsearch version :7.3.2 OS:ubunutu 2022… --- ## [Latest timestamp in lens table?](https://discuss.elastic.co/t/latest-timestamp-in-lens-table/305333)
**Author:** [@David\_Hodgson](https://discuss.elastic.co/u/David_Hodgson)\ **Replies:** 5\ **Last updated:** [May 23, 2022, 3:11pm UTC](https://discuss.elastic.co/t/latest-timestamp-in-lens-table/305333 "2022-05-23T15:11:44Z")
I'm trying to create a Lens table in a Dashboard summarising heartbeats, with columns: monitor.name, monitor.status, last\_value(@timestamp, kql='monitor.status:"up"'), last\_value(@timestamp, kql='monitor.status:"down"'… --- ## [Increased Search Latency After Closing Index, Adding Analyzer, and Then Reopening Index](https://discuss.elastic.co/t/increased-search-latency-after-closing-index-adding-analyzer-and-then-reopening-index/305352)
**Author:** [@Christopher\_Levy](https://discuss.elastic.co/u/Christopher_Levy)\ **Replies:** 3\ **Last updated:** [May 23, 2022, 2:42pm UTC](https://discuss.elastic.co/t/increased-search-latency-after-closing-index-adding-analyzer-and-then-reopening-index/305352 "2022-05-23T14:42:06Z")
Hey, we have a production AWS opensearch cluster running Elasticsearch 7.10. We needed to add a new custom analyzer to a running cluster. We closed the index, added the analyzer, and then reopened the index. No search… [Previous page](https://discuss.elastic.co/latest.md?page=1118) [Next page](https://discuss.elastic.co/latest.md?page=1120)