# Latest **URL:** https://discuss.elastic.co/latest.md?page=1327 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1328 --- ## [Default keyword analyzer not work](https://discuss.elastic.co/t/default-keyword-analyzer-not-work/293194)
**Author:** [@5minutes](https://discuss.elastic.co/u/5minutes)\ **Replies:** 1\ **Last updated:** [December 30, 2021, 11:59am UTC](https://discuss.elastic.co/t/default-keyword-analyzer-not-work/293194 "2021-12-30T11:59:30Z")
Hi, I would like all my fields to be indexed as a keyword. Creating index: PUT abcd { "settings": { "analysis": { "analyzer": { "default": { "type": "keyword" } } } } … --- ## [Cisco Duo Integration not working](https://discuss.elastic.co/t/cisco-duo-integration-not-working/292746)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 9\ **Last updated:** [December 30, 2021, 11:46am UTC](https://discuss.elastic.co/t/cisco-duo-integration-not-working/292746 "2021-12-30T11:46:24Z")
Hello, I'm looking to ingest Cisco Duo logs, I signed up for a trial of Duo to test this out, but when adding the information to the Fleet integration, no logs are coming through to Elastic. I've followed the instructio… --- ## [Functionbeat missing package io/fs](https://discuss.elastic.co/t/functionbeat-missing-package-io-fs/284975)
**Author:** [@Yero\_Me](https://discuss.elastic.co/u/Yero_Me)\ **Replies:** 11\ **Last updated:** [December 30, 2021, 11:34am UTC](https://discuss.elastic.co/t/functionbeat-missing-package-io-fs/284975 "2021-12-30T11:34:18Z")
Hello, Since 7.15, deployment for functionbeat on GCP cloud function leads to an error : Function: functionbeat-XXXXX, could not update, error: error while creating function (code: 3): \[89\](/-/jobs/1615821324#L89)Buil… --- ## [Difference search\_analyzer and search\_quote\_analyzer](https://discuss.elastic.co/t/difference-search-analyzer-and-search-quote-analyzer/293197)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [December 30, 2021, 10:40am UTC](https://discuss.elastic.co/t/difference-search-analyzer-and-search-quote-analyzer/293197 "2021-12-30T10:40:11Z")
Hi team, I am learning analyzer in Elasticsearch and i have little confusion what is the use of search\_analyzer and search\_quote\_analyzer i have read the documentation but i couldn't understand. Case 1 PUT my\_index-00… --- ## [Httop Poller Input Plugin - Need help](https://discuss.elastic.co/t/httop-poller-input-plugin-need-help/293107)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 2\ **Last updated:** [December 30, 2021, 10:50am UTC](https://discuss.elastic.co/t/httop-poller-input-plugin-need-help/293107 "2021-12-30T10:50:11Z")
Hie Everyone, HTTP poller plugin when used fetches only 1000 records from the URL triggered even though the actual response has more than 1000 events. ​ here is the config file : input { http\_poller { urls =\> { … --- ## [How can we achive this in elasticsearch](https://discuss.elastic.co/t/how-can-we-achive-this-in-elasticsearch/292594)
**Author:** [@ajeet\_jha1](https://discuss.elastic.co/u/ajeet_jha1)\ **Replies:** 4\ **Last updated:** [December 30, 2021, 9:51am UTC](https://discuss.elastic.co/t/how-can-we-achive-this-in-elasticsearch/292594 "2021-12-30T09:51:46Z")
when I search this "elasticsearchfulltext search" On google I get the result "Showing results for Elasticsearch full text search" --- ## [Couldn't find any elasticsearch data (index pattern) / but index available in index management tab](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data-index-pattern-but-index-available-in-index-management-tab/293105)
**Author:** [@julianf19](https://discuss.elastic.co/u/julianf19)\ **Replies:** 2\ **Last updated:** [December 30, 2021, 9:05am UTC](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data-index-pattern-but-index-available-in-index-management-tab/293105 "2021-12-30T09:05:00Z")
Hi, I am using kibana 7.9.0 and it's the first time I try to create an index pattern. The data is there, I upload it with python and as you can see the data is available in the index management tab: But when I try … --- ## [Error in parsing Pretty Json Data](https://discuss.elastic.co/t/error-in-parsing-pretty-json-data/293103)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 4\ **Last updated:** [December 30, 2021, 6:51am UTC](https://discuss.elastic.co/t/error-in-parsing-pretty-json-data/293103 "2021-12-30T06:51:43Z")
Hi team I have file in json format. \[ { "year": 2013, "title": "Rush", "info": { "directors": \["Ron Howard"\], "release\_date": "2013-09-02T00:00:00Z", "rat… --- ## [Merge 2 index based off fields and not rows](https://discuss.elastic.co/t/merge-2-index-based-off-fields-and-not-rows/292706)
**Author:** [@Sugand](https://discuss.elastic.co/u/Sugand)\ **Replies:** 7\ **Last updated:** [December 30, 2021, 5:36am UTC](https://discuss.elastic.co/t/merge-2-index-based-off-fields-and-not-rows/292706 "2021-12-30T05:36:10Z")
Hi ES team, I'm looking to merge 2 index's based off unique ID which is same across both the index and the desired index should look like, Index 1 Fields ID, Email, Fax Index 2 Fields ID, Email, Fax Now the merge… --- ## [Winlogbeat collect log from difference windows log source](https://discuss.elastic.co/t/winlogbeat-collect-log-from-difference-windows-log-source/293166)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 0\ **Last updated:** [December 30, 2021, 2:55am UTC](https://discuss.elastic.co/t/winlogbeat-collect-log-from-difference-windows-log-source/293166 "2021-12-30T02:55:52Z")
Hi all, In one of my systems i recently change the folder which windows event log get stored. Now i want to know if winlogbeat can collect log from the changed source or i have to change the config file to point to wher… --- ## [BM25 how to scoring ignore idf or set scope for total number of documents with search field](https://discuss.elastic.co/t/bm25-how-to-scoring-ignore-idf-or-set-scope-for-total-number-of-documents-with-search-field/293104)
**Author:** [@wlc015f](https://discuss.elastic.co/u/wlc015f)\ **Replies:** 0\ **Last updated:** [December 29, 2021, 11:03am UTC](https://discuss.elastic.co/t/bm25-how-to-scoring-ignore-idf-or-set-scope-for-total-number-of-documents-with-search-field/293104 "2021-12-29T11:03:34Z")
elasticsearch version 7.16.2 index settings : "similarity" : { "default" : { "type" : "BM25", "b" : "0.75", "k1" : "1.2" } } Data example: { "application" : 110, "… --- ## [Why doesn't DevTool get error "index\_closed\_exception" with same query syntax?](https://discuss.elastic.co/t/why-doesnt-devtool-get-error-index-closed-exception-with-same-query-syntax/293030)
**Author:** [@jenhouwu](https://discuss.elastic.co/u/jenhouwu)\ **Replies:** 1\ **Last updated:** [December 30, 2021, 1:34am UTC](https://discuss.elastic.co/t/why-doesnt-devtool-get-error-index-closed-exception-with-same-query-syntax/293030 "2021-12-30T01:34:37Z")
Hi, I try to prepare a search to query indices name as a-\*, for some reason I closed some of a-\* indices that are one month old. I can get data by Kibana DevTool even if I query closed index. However when I use "curl" … --- ## [KIbana no data over FQDN](https://discuss.elastic.co/t/kibana-no-data-over-fqdn/289416)
**Author:** [@yanick](https://discuss.elastic.co/u/yanick)\ **Replies:** 3\ **Last updated:** [December 15, 2021, 11:48pm UTC](https://discuss.elastic.co/t/kibana-no-data-over-fqdn/289416 "2021-12-15T23:48:44Z")
Hey there, Currently, I have a problem with Kibana, which is behind a proxy. If I log in (over the FQDN) to Kibana there is no data shown in the Tab "Analytics - Discover" and in the Tab "Security" (all sub-tabs). If I… --- ## [Assign completion suggest weight with field value in logstash](https://discuss.elastic.co/t/assign-completion-suggest-weight-with-field-value-in-logstash/293155)
**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\ **Replies:** 3\ **Last updated:** [December 29, 2021, 11:19pm UTC](https://discuss.elastic.co/t/assign-completion-suggest-weight-with-field-value-in-logstash/293155 "2021-12-29T23:19:09Z")
I am trying to add a weight to a completion suggest field using logstash, but I'm getting errors. Has anybody done this? The completion suggester field is set up as follows: display\_name": { "type": "text", "fi… --- ## [Under what circumstances can log4j be used to exploit Logstash?](https://discuss.elastic.co/t/under-what-circumstances-can-log4j-be-used-to-exploit-logstash/291886)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 8\ **Last updated:** [December 29, 2021, 9:54pm UTC](https://discuss.elastic.co/t/under-what-circumstances-can-log4j-be-used-to-exploit-logstash/291886 "2021-12-29T21:54:13Z")
Hi, Under what circumstances can the log4j bug be exploited in Logstash? Is it as simple as sending the exploit string an open port Logstash is listening on regardless of whatever input is configured in your Logstash co… --- ## [Integrations Docs](https://discuss.elastic.co/t/integrations-docs/293093)
**Author:** [@Sagi\_Tiger1](https://discuss.elastic.co/u/Sagi_Tiger1)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 8:41pm UTC](https://discuss.elastic.co/t/integrations-docs/293093 "2021-12-29T20:41:42Z")
Im trying to locate some docs or guides on how to setup integrations using Kibana but unable to. Is there a specific area these are located in? Im trying to setup vpc flow logs to ES using an Integration but im stuck on … --- ## [Referencing a value within a bucket within a bucket](https://discuss.elastic.co/t/referencing-a-value-within-a-bucket-within-a-bucket/292823)
**Author:** [@walshe06](https://discuss.elastic.co/u/walshe06)\ **Replies:** 0\ **Last updated:** [December 23, 2021, 3:26pm UTC](https://discuss.elastic.co/t/referencing-a-value-within-a-bucket-within-a-bucket/292823 "2021-12-23T15:26:04Z")
Hi I am looking to create a watcher alert to trigger if the value within a bucket is above a certain threshold. However the value will vary as it is within a bucket within a bucket. The value is shown in (ctx.payload.pe… --- ## [How to visualize a query in kibana](https://discuss.elastic.co/t/how-to-visualize-a-query-in-kibana/293019)
**Author:** [@cva](https://discuss.elastic.co/u/cva)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 6:54pm UTC](https://discuss.elastic.co/t/how-to-visualize-a-query-in-kibana/293019 "2021-12-29T18:54:51Z")
Hello! need help with visualizing this query in kibana: { "size": 0, "aggs": { "orders\_per\_day": { "terms": { "script": { "lang": "painless", "source": "doc\['ctime'\].value.dayOf… --- ## [Json parsing problem](https://discuss.elastic.co/t/json-parsing-problem/293110)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 3\ **Last updated:** [December 29, 2021, 6:10pm UTC](https://discuss.elastic.co/t/json-parsing-problem/293110 "2021-12-29T18:10:01Z")
Hi Guys, I have a problem with ingesting json data. I am guessing that the problem is with the structure. I have tried different configurations (with and without the json codec). Any idea? The json data: \[{"name": … --- ## [Date range query returns no hits](https://discuss.elastic.co/t/date-range-query-returns-no-hits/293134)
**Author:** [@knwosu](https://discuss.elastic.co/u/knwosu)\ **Replies:** 5\ **Last updated:** [December 29, 2021, 5:59pm UTC](https://discuss.elastic.co/t/date-range-query-returns-no-hits/293134 "2021-12-29T17:59:55Z")
I am trying to get all the hits from a specific index over the past 24 hours. I entered the following command into the kibana dev console, but no hits are being returned. GET /my-index/\_search { "query": { "range"… --- ## [Nested, flattened or object](https://discuss.elastic.co/t/nested-flattened-or-object/292974)
**Author:** [@ailengcon](https://discuss.elastic.co/u/ailengcon)\ **Replies:** 0\ **Last updated:** [December 27, 2021, 1:30pm UTC](https://discuss.elastic.co/t/nested-flattened-or-object/292974 "2021-12-27T13:30:19Z")
I am trying to figure out if I should use the datatype nested, flattened och object when using an index template to better map my index. I've got some large documents with some arrays and several objects within them. I … --- ## [TypeError : Cannot read properties of null ( reading time\_out)](https://discuss.elastic.co/t/typeerror-cannot-read-properties-of-null-reading-time-out/292864)
**Author:** [@Rahul\_Singh1](https://discuss.elastic.co/u/Rahul_Singh1)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 5:48pm UTC](https://discuss.elastic.co/t/typeerror-cannot-read-properties-of-null-reading-time-out/292864 "2021-12-29T17:48:06Z")
Hi everyone, @Badger Getting this error while searching and loading for data of indices in Kibana. TypeError : Cannot read properties of null ( reading timeout) . it is referring to response handle js files. Pls Sugg… --- ## [New third party certificate](https://discuss.elastic.co/t/new-third-party-certificate/292988)
**Author:** [@srkn66](https://discuss.elastic.co/u/srkn66)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 5:42pm UTC](https://discuss.elastic.co/t/new-third-party-certificate/292988 "2021-12-29T17:42:05Z")
I have a question. Today I created and configured new ceritificates for fleet, kibana and my nodes with letsencrypt, (previously it was Elasticsearch-cerutil). When I add the certificates in .yaml I get an authenticatio… --- ## [Elasticsearch as a database for Django](https://discuss.elastic.co/t/elasticsearch-as-a-database-for-django/293145)
**Author:** [@derekmizak](https://discuss.elastic.co/u/derekmizak)\ **Replies:** 0\ **Last updated:** [December 29, 2021, 5:35pm UTC](https://discuss.elastic.co/t/elasticsearch-as-a-database-for-django/293145 "2021-12-29T17:35:31Z")
I would like to explore possibility of using Elasticsearch as a backend database for Django. Did anyone had any experience with it? Can you recommend any resources? Basically I want to have forms in Django app where use… --- ## [Pb mix of indexes, using two or three conf file](https://discuss.elastic.co/t/pb-mix-of-indexes-using-two-or-three-conf-file/292999)
**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\ **Replies:** 2\ **Last updated:** [December 29, 2021, 2:08pm UTC](https://discuss.elastic.co/t/pb-mix-of-indexes-using-two-or-three-conf-file/292999 "2021-12-29T14:08:30Z")
Hello, I have set up two logstach pipelines via two conf files. One is going to look for an rss feed and the other one for tweets. In both, I have a different index type variable to differentiate obviously the data colle… --- ## [Dynamic value substitution for date is NULL](https://discuss.elastic.co/t/dynamic-value-substitution-for-date-is-null/293144)
**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 5:07pm UTC](https://discuss.elastic.co/t/dynamic-value-substitution-for-date-is-null/293144 "2021-12-29T17:07:36Z")
To quote the docs: Writing to different indices: best practices You cannot use dynamic variable substitution when ilm\_enabled is true and when using ilm\_rollover\_alias. So what I think I want to do is make each new bat… --- ## [Elastic Search using Message Content Parse with Logstash](https://discuss.elastic.co/t/elastic-search-using-message-content-parse-with-logstash/293111)
**Author:** [@kiran\_tirumalasetti](https://discuss.elastic.co/u/kiran_tirumalasetti)\ **Replies:** 5\ **Last updated:** [December 29, 2021, 4:07pm UTC](https://discuss.elastic.co/t/elastic-search-using-message-content-parse-with-logstash/293111 "2021-12-29T16:07:25Z")
Hello, I am trying to push some data into Elasticsearch from an application via logstash and is there anyway to search/filter the json message in Elasticsearch for a particular field in the json message. I am using bel… --- ## [Upgrade Elasticserch single node cluster](https://discuss.elastic.co/t/upgrade-elasticserch-single-node-cluster/292858)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 3\ **Last updated:** [December 29, 2021, 3:33pm UTC](https://discuss.elastic.co/t/upgrade-elasticserch-single-node-cluster/292858 "2021-12-29T15:33:11Z")
How to upgrade a single node elasticserch cluster with out data loss --- ## [Fuzzy search doesn't return all available results](https://discuss.elastic.co/t/fuzzy-search-doesnt-return-all-available-results/292935)
**Author:** [@eladf](https://discuss.elastic.co/u/eladf)\ **Replies:** 11\ **Last updated:** [December 29, 2021, 3:25pm UTC](https://discuss.elastic.co/t/fuzzy-search-doesnt-return-all-available-results/292935 "2021-12-29T15:25:16Z")
Hi, I've been trying to use fuzziness in order to find typos for specific terms. My terms usually consist of a single word. Although there are thousands of possible results available that I'm aware of (fuzziness of 1 … --- ## [Using values from controls in string range filter](https://discuss.elastic.co/t/using-values-from-controls-in-string-range-filter/292725)
**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 3:09pm UTC](https://discuss.elastic.co/t/using-values-from-controls-in-string-range-filter/292725 "2021-12-29T15:09:55Z")
Hi, I have column where are dates stored as string like this 20212, 20213,20214,20215….. Now I would like to have controls panel which consists of two dropdown menu FROM and TO, in which user would choose the range of … [Previous page](https://discuss.elastic.co/latest.md?page=1326) [Next page](https://discuss.elastic.co/latest.md?page=1328)