# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1181 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1182 --- ## [Включить/исключить документы из группы terms aggs](https://discuss.elastic.co/t/terms-aggs/250417)
**Author:** [@bio](https://discuss.elastic.co/u/bio)\ **Replies:** 4\ **Last updated:** [October 23, 2020, 1:44pm UTC](https://discuss.elastic.co/t/terms-aggs/250417 "2020-10-23T13:44:42Z")
Здравствуйте, подскажите пож-та, можно ли сделать terms аггрегацию с условием что один из сгруппированных документов должен иметь определённое значение поля, при этом остальные документы могут иметь другое значение, но о… --- ## [JDBC\_static lookup timeout](https://discuss.elastic.co/t/jdbc-static-lookup-timeout/253134)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 0\ **Last updated:** [October 23, 2020, 1:29pm UTC](https://discuss.elastic.co/t/jdbc-static-lookup-timeout/253134 "2020-10-23T13:29:13Z")
I'm running a static lookup to enhance my syslog data and I'm seeing this WARN in the log. Is there some configuration I can hit to help this timeout problem? \[2020-10-23T13:25:35,278\]\[WARN \]\[logstash.filters.jdbc.looku… --- ## [Logstash Error after enabling xpack security](https://discuss.elastic.co/t/logstash-error-after-enabling-xpack-security/253123)
**Author:** [@Craig2188](https://discuss.elastic.co/u/Craig2188)\ **Replies:** 3\ **Last updated:** [October 23, 2020, 12:11pm UTC](https://discuss.elastic.co/t/logstash-error-after-enabling-xpack-security/253123 "2020-10-23T12:11:25Z")
Hi, I enabled xpack security on Elastic, then set the logstash account as per the below link: Add user information in Logstash | Elasticsearch Reference \[6.8\] | Elastic I used the keystore option. However I am getting… --- ## [Please help me to understand mapping templates](https://discuss.elastic.co/t/please-help-me-to-understand-mapping-templates/253027)
**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\ **Replies:** 6\ **Last updated:** [October 23, 2020, 11:29am UTC](https://discuss.elastic.co/t/please-help-me-to-understand-mapping-templates/253027 "2020-10-23T11:29:43Z")
In documentation we have information that: "index templates are deprecated and will be replaced by the composable templates". But when we enter composable templates documentation we have statement: "You cannot dire… --- ## [Elasticsearch snapshots](https://discuss.elastic.co/t/elasticsearch-snapshots/253121)
**Author:** [@KA3AXCTAH](https://discuss.elastic.co/u/KA3AXCTAH)\ **Replies:** 1\ **Last updated:** [October 23, 2020, 11:24am UTC](https://discuss.elastic.co/t/elasticsearch-snapshots/253121 "2020-10-23T11:24:50Z")
I have many (10+) Elasticsearch clusters, and this clusters is use for different purposes (storing logs, storing some business and analytical data) So for example i have a 3-node elasticsearch cluster used for some busin… --- ## [Similarity scoring based on array length and matching terms](https://discuss.elastic.co/t/similarity-scoring-based-on-array-length-and-matching-terms/253116)
**Author:** [@KoPee](https://discuss.elastic.co/u/KoPee)\ **Replies:** 0\ **Last updated:** [October 23, 2020, 10:29am UTC](https://discuss.elastic.co/t/similarity-scoring-based-on-array-length-and-matching-terms/253116 "2020-10-23T10:29:52Z")
I need to end up with a score where doc 1 and doc 2 both score 100% while document 3 scores 50%. I'd like to score based on "Matching keywords" divided by length of keywords array. BM25 with a k1 and b of 0 comes clo… --- ## [Logstash results coming from behind](https://discuss.elastic.co/t/logstash-results-coming-from-behind/253115)
**Author:** [@bnmtl](https://discuss.elastic.co/u/bnmtl)\ **Replies:** 0\ **Last updated:** [October 23, 2020, 10:14am UTC](https://discuss.elastic.co/t/logstash-results-coming-from-behind/253115 "2020-10-23T10:14:19Z")
Hello, I have incremental json input in my logstash configuration, and using aggregation and some mutation in my filter and output is rabbit I see that logstash outputs are coming from behind about 2-3 hour. I mean tha… --- ## [Question about filtering in a visualisation in Kibana](https://discuss.elastic.co/t/question-about-filtering-in-a-visualisation-in-kibana/252652)
**Author:** [@blansdown](https://discuss.elastic.co/u/blansdown)\ **Replies:** 2\ **Last updated:** [October 23, 2020, 9:49am UTC](https://discuss.elastic.co/t/question-about-filtering-in-a-visualisation-in-kibana/252652 "2020-10-23T09:49:55Z")
Hi, New to Elastic/Kibana and have got a simple question about filtering in a visualisation in Kibana. I have some data stored in a rollup index, and when I visualise it, the y-axis displays 'count', and the buckets are… --- ## [Error on sudo systemctl enable --now elasticsearch](https://discuss.elastic.co/t/error-on-sudo-systemctl-enable-now-elasticsearch/252199)
**Author:** [@robin76](https://discuss.elastic.co/u/robin76)\ **Replies:** 3\ **Last updated:** [October 23, 2020, 9:30am UTC](https://discuss.elastic.co/t/error-on-sudo-systemctl-enable-now-elasticsearch/252199 "2020-10-23T09:30:02Z")
Hi, I am new here. I am trying to install elasticsearch on my Centos 7.8 to support Magento 2.4\] I followed all instruction but on enabling it with command sudo systemctl enable --now elasticsearch I have this error … --- ## [Logstash can't reach elasticsearch](https://discuss.elastic.co/t/logstash-cant-reach-elasticsearch/253101)
**Author:** [@mw\_two](https://discuss.elastic.co/u/mw_two)\ **Replies:** 0\ **Last updated:** [October 23, 2020, 8:46am UTC](https://discuss.elastic.co/t/logstash-cant-reach-elasticsearch/253101 "2020-10-23T08:46:25Z")
Hello, we've following setup: 3x elasticsearch 2x logstash 2x kibana Since two weeks the second logstash-server cannot reach the elasticsearch servers. Following errors can be found in logs: \[2020-10-22T13:17:28,84… --- ## [Issue with highlighting a sentence in ElasticSearch cut off](https://discuss.elastic.co/t/issue-with-highlighting-a-sentence-in-elasticsearch-cut-off/253099)
**Author:** [@Deepukeloth](https://discuss.elastic.co/u/Deepukeloth)\ **Replies:** 0\ **Last updated:** [October 23, 2020, 8:31am UTC](https://discuss.elastic.co/t/issue-with-highlighting-a-sentence-in-elasticsearch-cut-off/253099 "2020-10-23T08:31:56Z")
Hi, I am facing an issue with highlighting of multi-synonym word in search response. Our ES version is 5.x .The issue is that if a synonym word is present at the beginning or at the end of the sentence, then part of th… --- ## [Change date format with in uptime graphs](https://discuss.elastic.co/t/change-date-format-with-in-uptime-graphs/252761)
**Author:** [@Aiders](https://discuss.elastic.co/u/Aiders)\ **Replies:** 6\ **Last updated:** [October 23, 2020, 8:02am UTC](https://discuss.elastic.co/t/change-date-format-with-in-uptime-graphs/252761 "2020-10-23T08:02:19Z")
Hi all, Question about uptime screen graphs within Elastic/Kibana 7.8.1 interface. The dates shown on the graphs are in MM-DD standard, is there a way to change to DD-MM? I have tried the usual setting timezone and tr… --- ## [What is excluded column in kibana index pattern?](https://discuss.elastic.co/t/what-is-excluded-column-in-kibana-index-pattern/252667)
**Author:** [@Matthew\_Field](https://discuss.elastic.co/u/Matthew_Field)\ **Replies:** 16\ **Last updated:** [October 23, 2020, 7:52am UTC](https://discuss.elastic.co/t/what-is-excluded-column-in-kibana-index-pattern/252667 "2020-10-23T07:52:45Z")
I am trying to create an index pattern in kibana and setting the time field to be @timestamp. The index pattern apparently creates OK with @timestamp as the time filter, but when i refresh the fields, the time filter ge… --- ## [How to optimize memory and heap usage for Single node Elastic Search](https://discuss.elastic.co/t/how-to-optimize-memory-and-heap-usage-for-single-node-elastic-search/252492)
**Author:** [@avadhut](https://discuss.elastic.co/u/avadhut)\ **Replies:** 6\ **Last updated:** [October 23, 2020, 6:32am UTC](https://discuss.elastic.co/t/how-to-optimize-memory-and-heap-usage-for-single-node-elastic-search/252492 "2020-10-23T06:32:07Z")
Hi everyone, I have set up a single node latest version elasticsearch cluster with Xpack and Kibana UI on the same VM. The VM has 23 GB RAM. I have provided 12 GB of JAVA heap space. But still, elastic search uses all o… --- ## [Which class and functions in Java code to use for Aggregation queries using Low Level Rest Client for elastic](https://discuss.elastic.co/t/which-class-and-functions-in-java-code-to-use-for-aggregation-queries-using-low-level-rest-client-for-elastic/253037)
**Author:** [@daviddavid](https://discuss.elastic.co/u/daviddavid)\ **Replies:** 3\ **Last updated:** [October 23, 2020, 5:28am UTC](https://discuss.elastic.co/t/which-class-and-functions-in-java-code-to-use-for-aggregation-queries-using-low-level-rest-client-for-elastic/253037 "2020-10-23T05:28:08Z")
Which class and functions in Java code to use for Aggregation queries using Low Level Rest Client for elastic. Which Class to be used. AggregationBuilder class seems to be not present in older version like in High Level … --- ## [Does elasticsearch recommend to use any special character in user password for user](https://discuss.elastic.co/t/does-elasticsearch-recommend-to-use-any-special-character-in-user-password-for-user/252974)
**Author:** [@sreerama.naga](https://discuss.elastic.co/u/sreerama.naga)\ **Replies:** 3\ **Last updated:** [October 23, 2020, 4:23am UTC](https://discuss.elastic.co/t/does-elasticsearch-recommend-to-use-any-special-character-in-user-password-for-user/252974 "2020-10-23T04:23:59Z")
Hi, Here I am trying to get the details, does elasticsearch recommend to use any special character for user password? I tried doing some search in those lines but didn't succeed in getting any proper pages with recommen… --- ## [Searching with special characters](https://discuss.elastic.co/t/searching-with-special-characters/253083)
**Author:** [@Alex\_Pravdin](https://discuss.elastic.co/u/Alex_Pravdin)\ **Replies:** 0\ **Last updated:** [October 23, 2020, 4:08am UTC](https://discuss.elastic.co/t/searching-with-special-characters/253083 "2020-10-23T04:08:53Z")
I'm trying to make an autocomplete search that will account for special characters and add weights to the results which match a query with these characters. Index: { "institution\_test":{ "settings":{ … --- ## [Can not add mapping](https://discuss.elastic.co/t/can-not-add-mapping/252979)
**Author:** [@Alex\_Pravdin](https://discuss.elastic.co/u/Alex_Pravdin)\ **Replies:** 1\ **Last updated:** [October 23, 2020, 2:46am UTC](https://discuss.elastic.co/t/can-not-add-mapping/252979 "2020-10-23T02:46:46Z")
I'm using Elasticsearch 5.6 (I know it's outdated but I can not switch it right now). I'm doing the following request: { "settings":{ "index":{ "analysis":{ "filter":{ … --- ## [Difference between PluginCLI and PluginManager used in Plugin.bat](https://discuss.elastic.co/t/difference-between-plugincli-and-pluginmanager-used-in-plugin-bat/253080)
**Author:** [@Varsha\_Muzumdar](https://discuss.elastic.co/u/Varsha_Muzumdar)\ **Replies:** 0\ **Last updated:** [October 23, 2020, 2:16am UTC](https://discuss.elastic.co/t/difference-between-plugincli-and-pluginmanager-used-in-plugin-bat/253080 "2020-10-23T02:16:57Z")
I am new to ES community and I have been using ES on Windows. I see that some distributions of ElasticSearch plugin.bat reference org.elasticsearch.plugins.PluginManager whereas some others reference org.elasticsearch.pl… --- ## [Memory -Xmx and -Xms "should" be the same... how severely "should" we heed this recommendation?](https://discuss.elastic.co/t/memory-xmx-and-xms-should-be-the-same-how-severely-should-we-heed-this-recommendation/252737)
**Author:** [@cjcjameson](https://discuss.elastic.co/u/cjcjameson)\ **Replies:** 2\ **Last updated:** [October 23, 2020, 12:33am UTC](https://discuss.elastic.co/t/memory-xmx-and-xms-should-be-the-same-how-severely-should-we-heed-this-recommendation/252737 "2020-10-23T00:33:35Z")
https://github.com/elastic/elasticsearch/blob/master/docs/reference/setup/important-settings/heap-size.asciidoc#heap-size-settings mentions: Elasticsearch will assign the entire heap specified in jvm.options via the Xms… --- ## [Security\_tenant in dashboard url when sharing or embedding missing in latest version](https://discuss.elastic.co/t/security-tenant-in-dashboard-url-when-sharing-or-embedding-missing-in-latest-version/252280)
**Author:** [@DMinovski](https://discuss.elastic.co/u/DMinovski)\ **Replies:** 2\ **Last updated:** [October 22, 2020, 11:36pm UTC](https://discuss.elastic.co/t/security-tenant-in-dashboard-url-when-sharing-or-embedding-missing-in-latest-version/252280 "2020-10-22T23:36:22Z")
In version 7.2, when I shared an embedded URL of a dashboard, it included the parameter kibana?security\_tenant=tenantName#. The users were able to be logged as another tenant and see the dashboard. In the latest versio… --- ## [Mutate rename, remove does not work on fields in list](https://discuss.elastic.co/t/mutate-rename-remove-does-not-work-on-fields-in-list/253069)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 2\ **Last updated:** [October 22, 2020, 11:18pm UTC](https://discuss.elastic.co/t/mutate-rename-remove-does-not-work-on-fields-in-list/253069 "2020-10-22T23:18:06Z")
Hello, I want to use logstash snmp walk input for fetching data from my network devices. This is the config I use. input { snmp { hosts =\> \[ {host =\> "udp:ip/port" community =\> "secret"} … --- ## [Logic Issue....Or Maybe Gsub](https://discuss.elastic.co/t/logic-issue-or-maybe-gsub/253047)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 1\ **Last updated:** [October 22, 2020, 9:37pm UTC](https://discuss.elastic.co/t/logic-issue-or-maybe-gsub/253047 "2020-10-22T21:37:54Z")
I am capturing logs that primarily look like this: \[2020-10-21 22:12:44,067\]\[INFO\]\[audit\]{"JSON formatted stuff"} However, I will occasionally get lines that look like this: \[2020-10-21 22:12:44,067\]\[INFO\]\[audit\]text … --- ## [Pass batch size in deleteByQuery \[elasticsearch\] \[scala\]](https://discuss.elastic.co/t/pass-batch-size-in-deletebyquery-elasticsearch-scala/253067)
**Author:** [@Priya3](https://discuss.elastic.co/u/Priya3)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 8:46pm UTC](https://discuss.elastic.co/t/pass-batch-size-in-deletebyquery-elasticsearch-scala/253067 "2020-10-22T20:46:03Z")
I need to pass batch size while using deletebyQuery. My requirement is: Get x rows based on filters Run DeletebyQuery on them Return this list While doing search using filters, there can 1000 rows but I need only bat… --- ## [Mapper for \[someField\] conflicts with existing mapping: \[mapper \[someField\] has different \[norms\] values, cannot change from disable to enabled](https://discuss.elastic.co/t/mapper-for-somefield-conflicts-with-existing-mapping-mapper-somefield-has-different-norms-values-cannot-change-from-disable-to-enabled/253064)
**Author:** [@b0redom](https://discuss.elastic.co/u/b0redom)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 8:02pm UTC](https://discuss.elastic.co/t/mapper-for-somefield-conflicts-with-existing-mapping-mapper-somefield-has-different-norms-values-cannot-change-from-disable-to-enabled/253064 "2020-10-22T20:02:10Z")
Hi, I'm reasonably new to ElasticSearch, and I've been Googling and reading, but I've not found anything to help. I use Index Templates to ingest data. I have one with well defined mapped fields, but 2 in particular: a… --- ## [High CPU usage 80/90% on elastic search cluster](https://discuss.elastic.co/t/high-cpu-usage-80-90-on-elastic-search-cluster/253062)
**Author:** [@Isa](https://discuss.elastic.co/u/Isa)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 7:35pm UTC](https://discuss.elastic.co/t/high-cpu-usage-80-90-on-elastic-search-cluster/253062 "2020-10-22T19:35:46Z")
Hi Disclaimer: I'm new to elastic and have inheritted this cluster so please excuse my ignorance. Our cluster is used for logs. We create an index for each system each day and some indexes are huge 500GB. We started n… --- ## [Shards failed in Network screen](https://discuss.elastic.co/t/shards-failed-in-network-screen/252774)
**Author:** [@gnordli](https://discuss.elastic.co/u/gnordli)\ **Replies:** 6\ **Last updated:** [October 22, 2020, 6:54pm UTC](https://discuss.elastic.co/t/shards-failed-in-network-screen/252774 "2020-10-22T18:54:57Z")
I am using the Elastic Endpoint agents with 7.9.2. Elasticsearch is running in a single node cluster I am getting an error when in the network screen saying 5 of 7 shards have failed. curl -u elastic -X GET "127.0.0.1… --- ## [Configuring ES coordinating only nodes in Kubernetes](https://discuss.elastic.co/t/configuring-es-coordinating-only-nodes-in-kubernetes/253053)
**Author:** [@jdevilla20](https://discuss.elastic.co/u/jdevilla20)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 6:29pm UTC](https://discuss.elastic.co/t/configuring-es-coordinating-only-nodes-in-kubernetes/253053 "2020-10-22T18:29:23Z")
Hi I want to create coordinating only nodes on my ES cluster. How do I configure client only nodes? For example, in my data nodes, I do this: config: node.master: false node.data: true n… --- ## [Huge ES query logging issue](https://discuss.elastic.co/t/huge-es-query-logging-issue/253055)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 6:31pm UTC](https://discuss.elastic.co/t/huge-es-query-logging-issue/253055 "2020-10-22T18:31:06Z")
We use elasticsearch 7.2.0 Yesterday we had an incident where nearly 4-5mb (request size) query was fired by one of our client. We use master nodes as our coordinating nodes ( i know, bad practice ) One of our master n… --- ## [Primary shard is not active Timeout: \[1m\]](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout-1m/253051)
**Author:** [@jaraws](https://discuss.elastic.co/u/jaraws)\ **Replies:** 0\ **Last updated:** [October 22, 2020, 6:16pm UTC](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout-1m/253051 "2020-10-22T18:16:50Z")
I have got a single node(unix machine) where we have setup ELK 6.8.6. However while sending the logs from logstash to elasticsearch I am getting following exception s repeatedly. \[2020-10-22T13:59:23,500\]\[INFO \]\[logstas… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1180) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1182)