# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1084 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1085 --- ## [Using Elasticsearch in intergration test](https://discuss.elastic.co/t/using-elasticsearch-in-intergration-test/260742)
**Author:** [@mojtaba\_safavi](https://discuss.elastic.co/u/mojtaba_safavi)\ **Replies:** 2\ **Last updated:** [January 14, 2021, 9:06am UTC](https://discuss.elastic.co/t/using-elasticsearch-in-intergration-test/260742 "2021-01-14T09:06:58Z")
I want elasticsearch in memorydb for Integration test in .net platform. same as other db in memorydb. --- ## [How to get splited tokens of query、 best matched document and those document's term vector at the same time when searching in elasticsearch](https://discuss.elastic.co/t/how-to-get-splited-tokens-of-query-best-matched-document-and-those-documents-term-vector-at-the-same-time-when-searching-in-elasticsearch/261094)
**Author:** [@Shiwei\_Zhang](https://discuss.elastic.co/u/Shiwei_Zhang)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 8:43am UTC](https://discuss.elastic.co/t/how-to-get-splited-tokens-of-query-best-matched-document-and-those-documents-term-vector-at-the-same-time-when-searching-in-elasticsearch/261094 "2021-01-14T08:43:56Z")
I want to recalculate the score according to the tf and idf according to the term\_vector from elasticsearch, so I need : query's tokens splitted by analyzer(i use ik\_max\_word) of elasticsearch best matched document id t… --- ## [Range query on integer fields](https://discuss.elastic.co/t/range-query-on-integer-fields/261089)
**Author:** [@Jogi\_Michal](https://discuss.elastic.co/u/Jogi_Michal)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 8:06am UTC](https://discuss.elastic.co/t/range-query-on-integer-fields/261089 "2021-01-14T08:06:43Z")
Hi all, My mapping: { 'doc': { 'sources': { 'properties': { 'depth': { 'type': 'integer' } } … --- ## [Retrying failed action with response code 503](https://discuss.elastic.co/t/retrying-failed-action-with-response-code-503/261088)
**Author:** [@Tabriz](https://discuss.elastic.co/u/Tabriz)\ **Replies:** 1\ **Last updated:** [January 14, 2021, 7:57am UTC](https://discuss.elastic.co/t/retrying-failed-action-with-response-code-503/261088 "2021-01-14T07:57:30Z")
Sometimes the logstash service stops automatically in ELK and the data is not displayed on the kibana web service. What could be the reason?may is the reason amount of the files? --- ## [How to change value on pie charts using lense](https://discuss.elastic.co/t/how-to-change-value-on-pie-charts-using-lense/260990)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 2\ **Last updated:** [January 14, 2021, 5:54am UTC](https://discuss.elastic.co/t/how-to-change-value-on-pie-charts-using-lense/260990 "2021-01-14T05:54:32Z")
Hi, I have a setup of ELK 7.10.0v. I made pie chart using lense there I want to change the value at the end of the number in pie chart to Million and in Billions for making easy to understand. Please suggest me how … --- ## [Error on an external ruby script](https://discuss.elastic.co/t/error-on-an-external-ruby-script/261069)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 2:32am UTC](https://discuss.elastic.co/t/error-on-an-external-ruby-script/261069 "2021-01-14T02:32:31Z")
Hi im getting the following error in an external ruby code: Could not process event: undefined method \`\[\]' for nil not every key in this hash, exist on the data being consumed by logstash, so I added a conditional that… --- ## [Logstash refuses to start](https://discuss.elastic.co/t/logstash-refuses-to-start/261013)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 1\ **Last updated:** [January 14, 2021, 2:14am UTC](https://discuss.elastic.co/t/logstash-refuses-to-start/261013 "2021-01-14T02:14:44Z")
Logstash configuration parsing is: input { tcp { port =\> "5141" codec =\> json type =\> "syslog" } } filter { grok { match =\> { "message" =\> "%{SYSLOG5424PRI:syslog\_index}-\\s\*%{SYSLOGHOST:syslog\_hostnam… --- ## [CountRequest does not carry over default index for ElasticSearch 7.10.1](https://discuss.elastic.co/t/countrequest-does-not-carry-over-default-index-for-elasticsearch-7-10-1/261067)
**Author:** [@honelight](https://discuss.elastic.co/u/honelight)\ **Replies:** 0\ **Last updated:** [January 14, 2021, 1:11am UTC](https://discuss.elastic.co/t/countrequest-does-not-carry-over-default-index-for-elasticsearch-7-10-1/261067 "2021-01-14T01:11:31Z")
Hi: I am fairly new to the NEST Library. I am using both the Count function and the Search function, below is some sample code I wrote to recreate the issue: using System; using Nest; namespace NestCountTe… --- ## [Is there a way to evaluate an expression and get the result?](https://discuss.elastic.co/t/is-there-a-way-to-evaluate-an-expression-and-get-the-result/260986)
**Author:** [@AgrPriyank](https://discuss.elastic.co/u/AgrPriyank)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 11:31am UTC](https://discuss.elastic.co/t/is-there-a-way-to-evaluate-an-expression-and-get-the-result/260986 "2021-01-13T11:31:06Z")
I have multiple nodes scattered around different regions. My application is deployed region wise, i.e. the application present in region A will only talk to resources in region A. However, in order to provide high avail… --- ## [Json parser error](https://discuss.elastic.co/t/json-parser-error/261061)
**Author:** [@Surjiths](https://discuss.elastic.co/u/Surjiths)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 10:05pm UTC](https://discuss.elastic.co/t/json-parser-error/261061 "2021-01-13T22:05:29Z")
Hi Team, I am getting the following error from logstash \[2020-12-09T08:20:57.962Z\]\[ERROR\]\[logstash.codecs.json \] JSON parse error, original data now in message field {:error=\>#\ **Author:** [@Minor\_Vargas](https://discuss.elastic.co/u/Minor_Vargas)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 10:01pm UTC](https://discuss.elastic.co/t/inges-pipeline-kv-processor-not-working-with-foreach/261060 "2021-01-13T22:01:32Z") hello guys! I'm using an ingest pipeline. I'm using the foreach processor and inside of it the kv processor but it's not really working.. Having the following array (made after using the split processor) "detail" : \[ … --- ## [Upgrading from 5.6 to 7.5.0 -\> What problems could I face on the query/aggregation side and indexing side](https://discuss.elastic.co/t/upgrading-from-5-6-to-7-5-0-what-problems-could-i-face-on-the-query-aggregation-side-and-indexing-side/261054)
**Author:** [@JonathanAaron](https://discuss.elastic.co/u/JonathanAaron)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 9:29pm UTC](https://discuss.elastic.co/t/upgrading-from-5-6-to-7-5-0-what-problems-could-i-face-on-the-query-aggregation-side-and-indexing-side/261054 "2021-01-13T21:29:23Z")
We do basic bool/must type queries based a couple of fields and several nested terms aggregations with some sum aggs. On the indexing side of things we're going with bulk indexing. My team is getting a new cluster set … --- ## [Index.lifecycle.rollover\_alias \[filebeat-7.9.1\] does not point to index \[filebeat-7.9.1-2020.09.30\]](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-filebeat-7-9-1-does-not-point-to-index-filebeat-7-9-1-2020-09-30/259798)
**Author:** [@NaiaraSS](https://discuss.elastic.co/u/NaiaraSS)\ **Replies:** 6\ **Last updated:** [January 13, 2021, 9:25pm UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-filebeat-7-9-1-does-not-point-to-index-filebeat-7-9-1-2020-09-30/259798 "2021-01-13T21:25:28Z")
Hi everyone! I was balancing my nodes, and after i get sucessfull i needed to improve my storeage, after i finish this procedure, i got this error in node master: \[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[n… --- ## [Can we configure logstash to listen only to a paricular set of hosts](https://discuss.elastic.co/t/can-we-configure-logstash-to-listen-only-to-a-paricular-set-of-hosts/261049)
**Author:** [@prashant\_Rajenderan](https://discuss.elastic.co/u/prashant_Rajenderan)\ **Replies:** 2\ **Last updated:** [January 13, 2021, 9:21pm UTC](https://discuss.elastic.co/t/can-we-configure-logstash-to-listen-only-to-a-paricular-set-of-hosts/261049 "2021-01-13T21:21:32Z")
Currently my logstash input is listening to filebeat on port XXXX,my requirement is to collect log data only from a particular hosts(let's say only from Webservers). I dont want to modify the filebeat configuration direc… --- ## [Parsing syslog RFC 5424 format](https://discuss.elastic.co/t/parsing-syslog-rfc-5424-format/261021)
**Author:** [@S3l3ct3d](https://discuss.elastic.co/u/S3l3ct3d)\ **Replies:** 2\ **Last updated:** [January 13, 2021, 9:07pm UTC](https://discuss.elastic.co/t/parsing-syslog-rfc-5424-format/261021 "2021-01-13T21:07:56Z")
Good morning, I have a log source that sends syslog messages in RFC 5424 format. I have searched everywhere to figure out how to parse these syslog messages. Since logstash's syslog input is for RFC 3164 format, nothing… --- ## [GROK Custom Pattern help. Drop leading and trailing spaces](https://discuss.elastic.co/t/grok-custom-pattern-help-drop-leading-and-trailing-spaces/261037)
**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\ **Replies:** 1\ **Last updated:** [January 13, 2021, 8:41pm UTC](https://discuss.elastic.co/t/grok-custom-pattern-help-drop-leading-and-trailing-spaces/261037 "2021-01-13T20:41:36Z")
Looking to GROK the following data "(DATA: SOME STUFF)" What I am after is "SOME STUFF". When I use the following \\(DATA: (?\ \*(.+?) \*)\\) I get this result in the debugger { "DATA": "SOME STUFF" } but if my da… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/261019)
**Author:** [@Gustavo](https://discuss.elastic.co/u/Gustavo)\ **Replies:** 5\ **Last updated:** [January 13, 2021, 8:00pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/261019 "2021-01-13T20:00:56Z")
Guys, after updating the system to 7.10 Kibana does not start. Elastic ''' { "name" : "Ubuntu20", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "gS3kil9cSqC2c8b3ENegow", "version" : { "number" : "7.10.1", "… --- ## [Match query with best match at top](https://discuss.elastic.co/t/match-query-with-best-match-at-top/261036)
**Author:** [@Padam\_Sethia](https://discuss.elastic.co/u/Padam_Sethia)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 6:46pm UTC](https://discuss.elastic.co/t/match-query-with-best-match-at-top/261036 "2021-01-13T18:46:30Z")
Hello , I am having real difficulty getting best matches at top. Here's a sample of my document { "\_index": "finished\_goods", "\_type": "\_doc", "\_id": "1", "\_score": 1, … --- ## [Unified Highlighter throws too\_complex\_to\_determinize\_exception with \>288 filter terms](https://discuss.elastic.co/t/unified-highlighter-throws-too-complex-to-determinize-exception-with-288-filter-terms/261035)
**Author:** [@idoub](https://discuss.elastic.co/u/idoub)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 6:35pm UTC](https://discuss.elastic.co/t/unified-highlighter-throws-too-complex-to-determinize-exception-with-288-filter-terms/261035 "2021-01-13T18:35:04Z")
There seems to be a problem with the Unified Highlighter in Lucene 8.6.2 that is affecting ElasticSearch 7.9.1. I already asked the Lucene developers if they knew of the bug and they said it's an ElasticSearch specific i… --- ## [Annotated-text field in Kibana](https://discuss.elastic.co/t/annotated-text-field-in-kibana/260770)
**Author:** [@Naid](https://discuss.elastic.co/u/Naid)\ **Replies:** 3\ **Last updated:** [January 13, 2021, 6:07pm UTC](https://discuss.elastic.co/t/annotated-text-field-in-kibana/260770 "2021-01-13T18:07:15Z")
Hi, I've created an index with a field type annotated-text and then an index pattern for this index. The type shows up as 'unknown' and therefore there are limitations in what I can do with it in Kibana. Is this type n… --- ## [Alert and connector email context format](https://discuss.elastic.co/t/alert-and-connector-email-context-format/260927)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 1\ **Last updated:** [January 13, 2021, 5:47pm UTC](https://discuss.elastic.co/t/alert-and-connector-email-context-format/260927 "2021-01-13T17:47:51Z")
Hi all I want to format to output some information regarding the detection in SIEM. For example i want to output the source.ip when some query that i have for dns log. To be more precise, i have an detection rule that… --- ## [Should filter "pin across all apps" work between Discover and APM?](https://discuss.elastic.co/t/should-filter-pin-across-all-apps-work-between-discover-and-apm/261020)
**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\ **Replies:** 1\ **Last updated:** [January 13, 2021, 5:42pm UTC](https://discuss.elastic.co/t/should-filter-pin-across-all-apps-work-between-discover-and-apm/261020 "2021-01-13T17:42:49Z")
Hello all, pretty selfexplanatory... Should filter "pin across all apps" work between Discover and APM? I'm on v 7.8.1 As Loading Kibana dashboards from APM Server is no longer supported should pinned Kibana filters s… --- ## [Indicator match - limit indicator look back time](https://discuss.elastic.co/t/indicator-match-limit-indicator-look-back-time/260867)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 3\ **Last updated:** [January 13, 2021, 5:21pm UTC](https://discuss.elastic.co/t/indicator-match-limit-indicator-look-back-time/260867 "2021-01-13T17:21:39Z")
Hi, Within a indicator match detection, for the indicator index query are we able to modify how far that looks back within that index? --- ## [Elasticsearch service not accessible from external system](https://discuss.elastic.co/t/elasticsearch-service-not-accessible-from-external-system/260892)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 2\ **Last updated:** [January 13, 2021, 5:12pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-accessible-from-external-system/260892 "2021-01-13T17:12:49Z")
I have installed elasticsearch on CentOS and trying to start the service in a single-node mode. I see that the service is bound properly at 10.100.1.197. However, when I execute the command http://10.100.1.197:9200, … --- ## [Kbana Visualisation for Numeric data](https://discuss.elastic.co/t/kbana-visualisation-for-numeric-data/260819)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 3\ **Last updated:** [January 13, 2021, 4:57pm UTC](https://discuss.elastic.co/t/kbana-visualisation-for-numeric-data/260819 "2021-01-13T16:57:47Z")
I have few hundreds of events having Cloudflare analytics data. For example, I want to show a line chart for bandwidth increasing and decreasing on certain dates. Cloudflare already giving the total count for each field(… --- ## [Data Correction](https://discuss.elastic.co/t/data-correction/260256)
**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\ **Replies:** 6\ **Last updated:** [January 13, 2021, 4:55pm UTC](https://discuss.elastic.co/t/data-correction/260256 "2021-01-13T16:55:26Z")
I have an index that is comprised of two separate data dumps. Upon further analysis, it was discovered that one of those seems to have had a 1hr shift. This has been partially rectified by using offsets with the visual… --- ## [Lumberjack input vs beats input considerations (can I remove lumberjack intake altogether?)](https://discuss.elastic.co/t/lumberjack-input-vs-beats-input-considerations-can-i-remove-lumberjack-intake-altogether/260914)
**Author:** [@rmauri](https://discuss.elastic.co/u/rmauri)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 10:11pm UTC](https://discuss.elastic.co/t/lumberjack-input-vs-beats-input-considerations-can-i-remove-lumberjack-intake-altogether/260914 "2021-01-12T22:11:34Z")
The elastic doc https://www.elastic.co/guide/en/logstash/current/plugins-inputs-lumberjack.html states " Consider using the Beats input plugin instead. The Beats input implements the Lumberjack protocol v1 and v2." Howe… --- ## [How to disable 3 dots options from dashboards](https://discuss.elastic.co/t/how-to-disable-3-dots-options-from-dashboards/260930)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 1\ **Last updated:** [January 13, 2021, 4:25pm UTC](https://discuss.elastic.co/t/how-to-disable-3-dots-options-from-dashboards/260930 "2021-01-13T16:25:07Z")
Hi, I have an ELK 7.10.0v cluster setup with 3 master + data nodes and one kibana. I have created one dashboard, and I am sharing the dashboard url by clicking on (shared -\> Embed Code -\> Copy iFrame Code) with inclu… --- ## [Merging Year and Month together](https://discuss.elastic.co/t/merging-year-and-month-together/261018)
**Author:** [@luckyluke](https://discuss.elastic.co/u/luckyluke)\ **Replies:** 1\ **Last updated:** [January 13, 2021, 4:21pm UTC](https://discuss.elastic.co/t/merging-year-and-month-together/261018 "2021-01-13T16:21:34Z")
Hey Guys, In my CVS the Year and Month are seperated. How do i merge these together so that they both used as the timestamp? --- ## [Waterfall chart with kibana](https://discuss.elastic.co/t/waterfall-chart-with-kibana/260928)
**Author:** [@chamiduz](https://discuss.elastic.co/u/chamiduz)\ **Replies:** 2\ **Last updated:** [January 13, 2021, 4:12pm UTC](https://discuss.elastic.co/t/waterfall-chart-with-kibana/260928 "2021-01-13T16:12:52Z")
Hi, I would like to know how to create a waterfall chart in kibana. is there a visualizer for that? [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1083) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1085)