# Latest **URL:** https://discuss.elastic.co/latest.md?page=1950 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1951 --- ## [Unable to get gte and lte from elastic Java API in range query](https://discuss.elastic.co/t/unable-to-get-gte-and-lte-from-elastic-java-api-in-range-query/257781)
**Author:** [@AKASH\_DUBEY1](https://discuss.elastic.co/u/AKASH_DUBEY1)\ **Replies:** 22\ **Last updated:** [December 9, 2020, 8:47am UTC](https://discuss.elastic.co/t/unable-to-get-gte-and-lte-from-elastic-java-api-in-range-query/257781 "2020-12-09T08:47:57Z")
Hi , I am using RestHighLevelclient to get data from elastic.I am using below query BoolQueryBuilder boolQuery=QueryBuilders.boolQuery(); boolQuery.must(QueryBuilders.rangeQuery("ipFromLong").gte(ipLong)); boolQuery.… --- ## [Resource upper bounds on keyword sorting](https://discuss.elastic.co/t/resource-upper-bounds-on-keyword-sorting/258095)
**Author:** [@rex-remind](https://discuss.elastic.co/u/rex-remind)\ **Replies:** 0\ **Last updated:** [December 9, 2020, 8:47am UTC](https://discuss.elastic.co/t/resource-upper-bounds-on-keyword-sorting/258095 "2020-12-09T08:47:26Z")
I was reading through the docs on fielddata and came about this: It usually doesn’t make sense to enable fielddata on text fields. Field data is stored in the heap with the field data cache because it is expensive to c… --- ## [EdgeGram Search trouble](https://discuss.elastic.co/t/edgegram-search-trouble/258070)
**Author:** [@murilozilli](https://discuss.elastic.co/u/murilozilli)\ **Replies:** 1\ **Last updated:** [December 9, 2020, 8:30am UTC](https://discuss.elastic.co/t/edgegram-search-trouble/258070 "2020-12-09T08:30:15Z")
I am very new to ES so I am probably getting something wrong but this is my mapping and settings: { "locations":{ "mappings":{ "locations":{ "\_meta":{ … --- ## [Pin filter in a specific dashboard](https://discuss.elastic.co/t/pin-filter-in-a-specific-dashboard/257199)
**Author:** [@yaelg](https://discuss.elastic.co/u/yaelg)\ **Replies:** 2\ **Last updated:** [December 9, 2020, 8:29am UTC](https://discuss.elastic.co/t/pin-filter-in-a-specific-dashboard/257199 "2020-12-09T08:29:55Z")
Hey everyone, I'm quite new to ELK so my question might be trivial. I am working with multiple dashboards. Is there a way to pin a filter only in one dashboards? whenever I pin a filter, it applies it to all dashboards… --- ## [Price sort not working in elasticsearch 7.9.3 version](https://discuss.elastic.co/t/price-sort-not-working-in-elasticsearch-7-9-3-version/257970)
**Author:** [@magesh\_kumar](https://discuss.elastic.co/u/magesh_kumar)\ **Replies:** 11\ **Last updated:** [December 9, 2020, 8:27am UTC](https://discuss.elastic.co/t/price-sort-not-working-in-elasticsearch-7-9-3-version/257970 "2020-12-09T08:27:12Z")
Hi everyone, Currently I am using the Elasticsearch 7.9.3 version. the issue is price sort works wrong after upgrading the old version. Price data's are mixed with double , integer. Please let me know what happened in t… --- ## [How to calculate weighted score depending on order of an array field](https://discuss.elastic.co/t/how-to-calculate-weighted-score-depending-on-order-of-an-array-field/258071)
**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\ **Replies:** 2\ **Last updated:** [December 9, 2020, 8:12am UTC](https://discuss.elastic.co/t/how-to-calculate-weighted-score-depending-on-order-of-an-array-field/258071 "2020-12-09T08:12:26Z")
I would like to search by an array field, and give weight depending on where the value appears in the arrays. For example, I have 3 documents like this: { "foo": \[1, 2, 3\] } { "foo": \[2, 3, 4\] } { "foo": \[3, 4, 5\] } a… --- ## [Data is lost when outputting to file](https://discuss.elastic.co/t/data-is-lost-when-outputting-to-file/258089)
**Author:** [@lon](https://discuss.elastic.co/u/lon)\ **Replies:** 0\ **Last updated:** [December 9, 2020, 8:06am UTC](https://discuss.elastic.co/t/data-is-lost-when-outputting-to-file/258089 "2020-12-09T08:06:00Z")
\[Please excuse my poor English...\] If output the file to the same file with a line codec of the file output, the data will be lost. my logstash.conf input { beats { port =\> "5044" } } … --- ## [Dec 9th, 2020: \[EN\] Don't let your Christmas tree Rust in a corner](https://discuss.elastic.co/t/dec-9th-2020-en-dont-let-your-christmas-tree-rust-in-a-corner/257377)
**Author:** [@swallez](https://discuss.elastic.co/u/swallez)\ **Replies:** 0\ **Last updated:** [December 9, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-9th-2020-en-dont-let-your-christmas-tree-rust-in-a-corner/257377 "2020-12-09T08:00:04Z")
Christmas trees are part of what makes this time of the year so unique and brings sparkles in the eyes of children and adults alike. But what do you do with the tree once the party’s over? The best is to make sure it’s r… --- ## [Logs of elastic stack components should go to their respective log file](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 4\ **Last updated:** [December 9, 2020, 7:48am UTC](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732 "2020-12-09T07:48:19Z")
Hi Team, I am seeing logs of elastic stack components such as Kibana, Logstash, filebeat are going everywhere like in /var/log/message , /var/log/daemon, journal.log and flooding filesystem. how to make sure logs of el… --- ## [Downgrade elasticsearch to previous version](https://discuss.elastic.co/t/downgrade-elasticsearch-to-previous-version/258083)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 1\ **Last updated:** [December 9, 2020, 7:42am UTC](https://discuss.elastic.co/t/downgrade-elasticsearch-to-previous-version/258083 "2020-12-09T07:42:44Z")
Hi All, I am planning to upgrade my 6 node elk cluster from 7.7 to 7.10. I am just looking for a scenario when two nodes are upgraded and 3rd node fails. So is there a way to downgrade all the nodes back to v7.7 --- ## [Filebeat doesn\`t collect logs from Kubernetes cronjobs](https://discuss.elastic.co/t/filebeat-doesn-t-collect-logs-from-kubernetes-cronjobs/257859)
**Author:** [@malcolm666](https://discuss.elastic.co/u/malcolm666)\ **Replies:** 2\ **Last updated:** [December 9, 2020, 7:06am UTC](https://discuss.elastic.co/t/filebeat-doesn-t-collect-logs-from-kubernetes-cronjobs/257859 "2020-12-09T07:06:06Z")
Hi. I use filebeat 7.6.1 and k8s autodiscovery that works good for each pod. Example: filebeat.autodiscover: providers: - type: kubernetes templates: - condition: … --- ## [In my filebeat enable system module and application logs](https://discuss.elastic.co/t/in-my-filebeat-enable-system-module-and-application-logs/257985)
**Author:** [@prakash22](https://discuss.elastic.co/u/prakash22)\ **Replies:** 2\ **Last updated:** [December 9, 2020, 7:01am UTC](https://discuss.elastic.co/t/in-my-filebeat-enable-system-module-and-application-logs/257985 "2020-12-09T07:01:01Z")
I am sending these logs to logstash. But here both application, system logs are going to one index. But I want send to two indexes. This is logstash pipeline. input { beats { port =\> 5044 ssl =\> false } } output … --- ## [Elasticsearch muat\_not match on all elemets of array](https://discuss.elastic.co/t/elasticsearch-muat-not-match-on-all-elemets-of-array/257997)
**Author:** [@roy\_einhorn](https://discuss.elastic.co/u/roy_einhorn)\ **Replies:** 6\ **Last updated:** [December 9, 2020, 6:58am UTC](https://discuss.elastic.co/t/elasticsearch-muat-not-match-on-all-elemets-of-array/257997 "2020-12-09T06:58:01Z")
i have multiple documents with a field containing an array : for example: "person1" : \[ { "network" : "A" }, { "network" : "B" }, \] "person2" : \[ { "network" : "A" }, { "network" : "C" } \] i want to look… --- ## [Minimum Elasticsearch Hardware Requirement](https://discuss.elastic.co/t/minimum-elasticsearch-hardware-requirement/258074)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 1\ **Last updated:** [December 9, 2020, 6:57am UTC](https://discuss.elastic.co/t/minimum-elasticsearch-hardware-requirement/258074 "2020-12-09T06:57:37Z")
Hi Experts, I want to configure Elasticsearch Cluster from Data Ingested per day and retention period. Is there any formula to calculate Number of Nodes required , Minimum Ram and Processor cores and storage Requiremen… --- ## [General information regarding ELK](https://discuss.elastic.co/t/general-information-regarding-elk/258073)
**Author:** [@shiv97](https://discuss.elastic.co/u/shiv97)\ **Replies:** 1\ **Last updated:** [December 9, 2020, 6:36am UTC](https://discuss.elastic.co/t/general-information-regarding-elk/258073 "2020-12-09T06:36:10Z")
Hello Team, I wanted to know some of the information regarding elk as I am new to this topic a) Difference between ELK self vs ELk managed b) Approach for pushing logs into ELK to meet near / real-time requirement ki… --- ## [Translated SQL query to SearchRequest](https://discuss.elastic.co/t/translated-sql-query-to-searchrequest/254087)
**Author:** [@yuriy.kasterin](https://discuss.elastic.co/u/yuriy.kasterin)\ **Replies:** 7\ **Last updated:** [November 4, 2020, 11:20am UTC](https://discuss.elastic.co/t/translated-sql-query-to-searchrequest/254087 "2020-11-04T11:20:40Z")
Hello I want to create a search request from a translated SQL query. Here is the code that i use to translate the SQL query to json ES query: RestClient restClient = RestClient.builder( new HttpHost("local… --- ## [Kibana server not starting up](https://discuss.elastic.co/t/kibana-server-not-starting-up/257944)
**Author:** [@sudhakar\_u](https://discuss.elastic.co/u/sudhakar_u)\ **Replies:** 16\ **Last updated:** [December 9, 2020, 4:42am UTC](https://discuss.elastic.co/t/kibana-server-not-starting-up/257944 "2020-12-09T04:42:37Z")
iam seeing this error in the logs.It was working fine till 1 day back.Whta could be the issue here. i restarted the kibana.Still the same issue.ECerything was properly setup. {"type":"log","@timestamp":"2020-12-08T06:5… --- ## [Elasticsearch server could not be reached](https://discuss.elastic.co/t/elasticsearch-server-could-not-be-reached/257937)
**Author:** [@webapps](https://discuss.elastic.co/u/webapps)\ **Replies:** 5\ **Last updated:** [December 9, 2020, 3:57am UTC](https://discuss.elastic.co/t/elasticsearch-server-could-not-be-reached/257937 "2020-12-09T03:57:31Z")
I just want to integrate external https Elasticsearch server URI with Drupal 8 version. I got an external https Elasticsearch server URI and got the credentials for it. When I’m accessing the https Elasticsearch server … --- ## [Kibana interacting with Elasticsearch](https://discuss.elastic.co/t/kibana-interacting-with-elasticsearch/257940)
**Author:** [@anarnold](https://discuss.elastic.co/u/anarnold)\ **Replies:** 5\ **Last updated:** [December 9, 2020, 3:39am UTC](https://discuss.elastic.co/t/kibana-interacting-with-elasticsearch/257940 "2020-12-09T03:39:04Z")
Hi All, I was exploring the Kibana as one of our solutions for Observability. Had 2 queries: Q: How does Kibana interact with the elasticsearch? Does it internally call the same elasticsearch APIs that are already expo… --- ## [Query seach in elasticsearch](https://discuss.elastic.co/t/query-seach-in-elasticsearch/257939)
**Author:** [@111411](https://discuss.elastic.co/u/111411)\ **Replies:** 6\ **Last updated:** [December 8, 2020, 7:24am UTC](https://discuss.elastic.co/t/query-seach-in-elasticsearch/257939 "2020-12-08T07:24:24Z")
I'm trying to search in elasticsearch by query. I'm want to get uuid = 002A13AC-93E6-4141-AA28-0A86F1B5E5C2 of device index. GET device/\_search? { "query": { "match": { "uuid" : "0aaa02A13AC-93E6-4141-AA28-0A86F1B5… --- ## [Filebeat MISP module refresh](https://discuss.elastic.co/t/filebeat-misp-module-refresh/256281)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 11\ **Last updated:** [December 9, 2020, 1:33am UTC](https://discuss.elastic.co/t/filebeat-misp-module-refresh/256281 "2020-12-09T01:33:26Z")
Is there a way to get the filebeat misp module to delete & re-create the index that stores the misp data in? I'm wanting to refresh this data hourly? --- ## [Kibana authentication](https://discuss.elastic.co/t/kibana-authentication/257824)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 4\ **Last updated:** [December 9, 2020, 12:56am UTC](https://discuss.elastic.co/t/kibana-authentication/257824 "2020-12-09T00:56:57Z")
Hi all, Lets say I want to use authentication with kibana but I don't want to encript or authenticate my elasticsearch cluster. How cant I do that? --- ## [Elasticsearch 7.9 will spend long time to forcemerge](https://discuss.elastic.co/t/elasticsearch-7-9-will-spend-long-time-to-forcemerge/257983)
**Author:** [@gaocx2000cn](https://discuss.elastic.co/u/gaocx2000cn)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 11:43pm UTC](https://discuss.elastic.co/t/elasticsearch-7-9-will-spend-long-time-to-forcemerge/257983 "2020-12-08T23:43:26Z")
Elasticsearch 7.9 will spend long time to forcemerge. curl -s -XPOST http://:9200/\_forcemerge?max\_num\_segments=1 Elasticsearch 6.2 will spend less time to forcemerge. We have same data source on Elasticsearch 6.2 and … --- ## [Can we create custom datastream types?](https://discuss.elastic.co/t/can-we-create-custom-datastream-types/258060)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 10:34pm UTC](https://discuss.elastic.co/t/can-we-create-custom-datastream-types/258060 "2020-12-08T22:34:57Z")
Hello, So the new datastream concepts are slightly confusing. I'd like to play a bit with the details and possible configurations. Can I create my own datastream type? For example some documentations say only logs and m… --- ## [What do you think is more critical? To allocate more resources or change architecture?](https://discuss.elastic.co/t/what-do-you-think-is-more-critical-to-allocate-more-resources-or-change-architecture/258003)
**Author:** [@mahalabobis](https://discuss.elastic.co/u/mahalabobis)\ **Replies:** 12\ **Last updated:** [December 8, 2020, 10:29pm UTC](https://discuss.elastic.co/t/what-do-you-think-is-more-critical-to-allocate-more-resources-or-change-architecture/258003 "2020-12-08T22:29:29Z")
I have multiple issues with Elasticsearch right now. I'm running out of disk I'm running out of memory Architecture may need to change since I have more than 600 shards per node. For sure, I will add a new node to the … --- ## [Elastic-agent 7.10.0 install error](https://discuss.elastic.co/t/elastic-agent-7-10-0-install-error/255368)
**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\ **Replies:** 6\ **Last updated:** [December 8, 2020, 10:02pm UTC](https://discuss.elastic.co/t/elastic-agent-7-10-0-install-error/255368 "2020-12-08T22:02:38Z")
I have tried this on a couple different GCP instances with the same error below ffoti@ep-test-gcp-debian:~$ sudo rpm -vi elastic-agent-7.10.0-x86\_64.rpm sudo: rpm: command not found ffoti@ep-test-gcp-debian:~$ curl -L … --- ## [Cannot connect to elasticsearch server instance on port 9200](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-server-instance-on-port-9200/257728)
**Author:** [@freshlinx](https://discuss.elastic.co/u/freshlinx)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 9:54pm UTC](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-server-instance-on-port-9200/257728 "2020-12-08T21:54:12Z")
I have installed Elasticsearch and when I run a curl localhost:9200 request on the machine it returns the expected response showing that Elasticsearch is running. I have a Wordpress site on another server and I want to … --- ## [Create an Alert for top 10 exceptions in my Log](https://discuss.elastic.co/t/create-an-alert-for-top-10-exceptions-in-my-log/257966)
**Author:** [@sukanto](https://discuss.elastic.co/u/sukanto)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 9:50pm UTC](https://discuss.elastic.co/t/create-an-alert-for-top-10-exceptions-in-my-log/257966 "2020-12-08T21:50:08Z")
I am looking to create an Alert for Top 10 Exceptions in my log during last 12 hours. The alert should trigger every 12 hours and email to a group of people the count of each of the top 10 Exceptions during last 12 hours… --- ## [Kibana Clustering](https://discuss.elastic.co/t/kibana-clustering/257961)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 9:48pm UTC](https://discuss.elastic.co/t/kibana-clustering/257961 "2020-12-08T21:48:45Z")
Hi guys I\`ve using a cluster with 5 nodes (Elasticsearch) The question is, in "Stack Monitoring" I see GREEN health and OK nodes(one of them is master) but my Kibana is like this: How can I have multi-instance of Ki… --- ## [Find hosts that do not have any documents matching a query](https://discuss.elastic.co/t/find-hosts-that-do-not-have-any-documents-matching-a-query/257871)
**Author:** [@jmcclelland](https://discuss.elastic.co/u/jmcclelland)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 9:42pm UTC](https://discuss.elastic.co/t/find-hosts-that-do-not-have-any-documents-matching-a-query/257871 "2020-12-08T21:42:58Z")
Is it possible to create a dashboard that lists all unique hosts that do not have any documents matching a particular query? Thanks for any tips you might have! [Previous page](https://discuss.elastic.co/latest.md?page=1949) [Next page](https://discuss.elastic.co/latest.md?page=1951)