# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1310 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1311 --- ## [Syntax error for XPath](https://discuss.elastic.co/t/syntax-error-for-xpath/242846)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 2:07am UTC](https://discuss.elastic.co/t/syntax-error-for-xpath/242846 "2020-07-29T02:07:18Z")
Hi All, Trying to get the xml-xpath working, but logstash is crashing out at a certain part of the config file. The error points to it being a syntax problem Jul 28 17:09:30 QPS-HPI-TESTELK1 logstash\[730767\]: \[2020-0… --- ## [Loading Oracle into Elastic with Logstash](https://discuss.elastic.co/t/loading-oracle-into-elastic-with-logstash/242957)
**Author:** [@Queyon](https://discuss.elastic.co/u/Queyon)\ **Replies:** 4\ **Last updated:** [July 29, 2020, 12:02am UTC](https://discuss.elastic.co/t/loading-oracle-into-elastic-with-logstash/242957 "2020-07-29T00:02:13Z")
I'm trying to load Oracle data into Elastic with Logstash. The query returns a number of rows, but it only loaded one record into Elastic. Is there anything wrong with my config file? input { jdbc { jdbc\_driver\_libr… --- ## [Kibana User not able to access Dashboard inside a Space](https://discuss.elastic.co/t/kibana-user-not-able-to-access-dashboard-inside-a-space/242897)
**Author:** [@Kavin](https://discuss.elastic.co/u/Kavin)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 11:23pm UTC](https://discuss.elastic.co/t/kibana-user-not-able-to-access-dashboard-inside-a-space/242897 "2020-07-28T23:23:34Z")
Hi, My requirement is to create 2 spaces (eg. Wipro and Coznizant) and 2 different users (Wipro\_User, Cognizant\_User). "Wipro\_User" should be able to see only "Wipro" space and the Cognizant\_User should be seeing only … --- ## [Filter synonym not working](https://discuss.elastic.co/t/filter-synonym-not-working/242868)
**Author:** [@ggiff](https://discuss.elastic.co/u/ggiff)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 9:19am UTC](https://discuss.elastic.co/t/filter-synonym-not-working/242868 "2020-07-28T09:19:15Z")
I am using ingest processor to ingest/index files like pdf, xls etc. This is my pipeline: curl -XPUT 'ES\_HOST:ES\_PORT/\_ingest/pipeline/attachment?pretty' -H 'Content-Type: application/json' -d '{ "description" : "Extr… --- ## [Java testing framework documents deleted?](https://discuss.elastic.co/t/java-testing-framework-documents-deleted/242977)
**Author:** [@chenqi0805](https://discuss.elastic.co/u/chenqi0805)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 10:33pm UTC](https://discuss.elastic.co/t/java-testing-framework-documents-deleted/242977 "2020-07-28T22:33:25Z")
https://www.elastic.co/guide/en/elasticsearch/reference/current/testing-framework.html What is the latest practice? Also, is there example on how to set up es cluster for integration test in gradle? --- ## [Logstash stops forwarding to elasticsearch after short run](https://discuss.elastic.co/t/logstash-stops-forwarding-to-elasticsearch-after-short-run/242841)
**Author:** [@amhulli](https://discuss.elastic.co/u/amhulli)\ **Replies:** 3\ **Last updated:** [July 28, 2020, 10:27pm UTC](https://discuss.elastic.co/t/logstash-stops-forwarding-to-elasticsearch-after-short-run/242841 "2020-07-28T22:27:13Z")
i notice that my issue is similar to https://discuss.elastic.co/t/logstash-runs-as-service-but-stops-sending-logs-over-http-after-some-time/102938 but also note there was no resolution at that time. I'm hoping someone … --- ## [Semantic Search using ML capabilities](https://discuss.elastic.co/t/semantic-search-using-ml-capabilities/242860)
**Author:** [@Shubham\_Mittal](https://discuss.elastic.co/u/Shubham_Mittal)\ **Replies:** 3\ **Last updated:** [July 28, 2020, 10:19pm UTC](https://discuss.elastic.co/t/semantic-search-using-ml-capabilities/242860 "2020-07-28T22:19:40Z")
Hi Team, Could you please tell if elastic search currently supports semantic search using machine learning features? --- ## [Dynamic queue sizes](https://discuss.elastic.co/t/dynamic-queue-sizes/242418)
**Author:** [@Ankit\_Malpani](https://discuss.elastic.co/u/Ankit_Malpani)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 9:49pm UTC](https://discuss.elastic.co/t/dynamic-queue-sizes/242418 "2020-07-28T21:49:35Z")
I wanted to hear thoughts on adding an API to make queues dynamic. I understand this is an advanced setting and there can be drawbacks to raising queue sizes etc. but a queue does help during bursty behaviors and even th… --- ## [Getting additional fields without \_source](https://discuss.elastic.co/t/getting-additional-fields-without-source/242955)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 6\ **Last updated:** [July 28, 2020, 9:42pm UTC](https://discuss.elastic.co/t/getting-additional-fields-without-source/242955 "2020-07-28T21:42:08Z")
Hi, I was looking for options to improve indexing performance and reduce disk space usage on our ES cluster. When I checked the documentation for the \_source field, I saw the warnings mentioned there. However, it occurr… --- ## [Elasticsearh query tuning](https://discuss.elastic.co/t/elasticsearh-query-tuning/242817)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 8:16pm UTC](https://discuss.elastic.co/t/elasticsearh-query-tuning/242817 "2020-07-28T20:16:08Z")
Hi All, Is there any tool for elasticsearch query optimation or any manual way to optimize query running time? --- ## [Metrics Explorer results incorrect?](https://discuss.elastic.co/t/metrics-explorer-results-incorrect/242152)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 6\ **Last updated:** [July 28, 2020, 7:57pm UTC](https://discuss.elastic.co/t/metrics-explorer-results-incorrect/242152 "2020-07-28T19:57:36Z")
I've created some views with Metrics Explorer, but by chance I've noticed, that the results seems to be incorrect. I compared it with the results from Discover and the visualization "CPU Usage \[Metricbeat System\] EC… --- ## [Table visualization not showing accurate amounts](https://discuss.elastic.co/t/table-visualization-not-showing-accurate-amounts/242962)
**Author:** [@jvictorbr](https://discuss.elastic.co/u/jvictorbr)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 7:42pm UTC](https://discuss.elastic.co/t/table-visualization-not-showing-accurate-amounts/242962 "2020-07-28T19:42:41Z")
Hi, I have configured a table visualization that should display the actual values of a time series. To achieve that I configured the metrics as per the screenshot below: The problem is that the information displayed… --- ## [Kibana SIEM Function: Failed to Parse Date field? (Epoch Time)](https://discuss.elastic.co/t/kibana-siem-function-failed-to-parse-date-field-epoch-time/242710)
**Author:** [@cleared\_blue\_sky](https://discuss.elastic.co/u/cleared_blue_sky)\ **Replies:** 8\ **Last updated:** [July 28, 2020, 7:36pm UTC](https://discuss.elastic.co/t/kibana-siem-function-failed-to-parse-date-field-epoch-time/242710 "2020-07-28T19:36:40Z")
Hi All, Really need some help here. I am trying to use the Kibana SIEM Function; in particular the network function. I have mapped all my fields to ECS standard but for some reason it is returning 'Data Fetch Failure' … --- ## [ECK cluster dies after 3-4 months and tries to automatically create new cluster](https://discuss.elastic.co/t/eck-cluster-dies-after-3-4-months-and-tries-to-automatically-create-new-cluster/242950)
**Author:** [@Jack\_Watroba](https://discuss.elastic.co/u/Jack_Watroba)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 6:17pm UTC](https://discuss.elastic.co/t/eck-cluster-dies-after-3-4-months-and-tries-to-automatically-create-new-cluster/242950 "2020-07-28T18:17:51Z")
We've been using ECK late last year, started with the beta operator, moved to 1.0, and now we're on 1.1.2, each time doing a complete uninstall/reinstall of the operator, and have updated the cluster to various versions … --- ## [Logs de las búsquedas en ElasticSearch](https://discuss.elastic.co/t/logs-de-las-busquedas-en-elasticsearch/242179)
**Author:** [@Jesus2121](https://discuss.elastic.co/u/Jesus2121)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 6:12pm UTC](https://discuss.elastic.co/t/logs-de-las-busquedas-en-elasticsearch/242179 "2020-07-28T18:12:08Z")
Buenas. Estoy intentando auditar las búsquedas que se realizan en elasticsearch ( las realizo desde python con la libreria elasticsearch o desde rest en cerebro). ¿Donde se guardan estos datos? Hasta ahora solo consig… --- ## [Why the same logs ingested over multiple index](https://discuss.elastic.co/t/why-the-same-logs-ingested-over-multiple-index/242901)
**Author:** [@anirbandas](https://discuss.elastic.co/u/anirbandas)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 5:23pm UTC](https://discuss.elastic.co/t/why-the-same-logs-ingested-over-multiple-index/242901 "2020-07-28T17:23:28Z")
Hi , Recently we have configured the ELK cluster but when i start the collecting logs through logstash from three log sources like firewall, cisco router and windows server, i can see that that firewall logs ingested to… --- ## [Upgrading 200+ document types in single index from ES 1.4 to ES 7.4](https://discuss.elastic.co/t/upgrading-200-document-types-in-single-index-from-es-1-4-to-es-7-4/242910)
**Author:** [@pavanpatel20](https://discuss.elastic.co/u/pavanpatel20)\ **Replies:** 7\ **Last updated:** [July 28, 2020, 3:59pm UTC](https://discuss.elastic.co/t/upgrading-200-document-types-in-single-index-from-es-1-4-to-es-7-4/242910 "2020-07-28T15:59:19Z")
In my project we are using ES 1.4 and one of our index has around 200 document types. We are now upgrading ES to 7.4 and one of the major problem is removal of document types. We are on single node, so creating 200 indic… --- ## [Different Query Returns for Kibana and FME HTTP Caller](https://discuss.elastic.co/t/different-query-returns-for-kibana-and-fme-http-caller/242926)
**Author:** [@jattoe](https://discuss.elastic.co/u/jattoe)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 3:26pm UTC](https://discuss.elastic.co/t/different-query-returns-for-kibana-and-fme-http-caller/242926 "2020-07-28T15:26:20Z")
I have been using the dev tools console on Kibana to write my queries and make sure everything is working as I would like. You can see an example of the return I get below. I then take this query and put it into an h… --- ## [Kibana 7.8 ZIP for Windows - extraction fail](https://discuss.elastic.co/t/kibana-7-8-zip-for-windows-extraction-fail/242657)
**Author:** [@Gnintz](https://discuss.elastic.co/u/Gnintz)\ **Replies:** 5\ **Last updated:** [July 28, 2020, 2:36pm UTC](https://discuss.elastic.co/t/kibana-7-8-zip-for-windows-extraction-fail/242657 "2020-07-28T14:36:14Z")
On my W 10 1903 system, even the attempt to view the downloaded Kibana 7.8 zipped package does crash the explorer - unzipping it kills the whole system. There are 2 options - something is severely wrong with my machine,… --- ## [Kibana Index - Splitting Index Values and Adding to New Field](https://discuss.elastic.co/t/kibana-index-splitting-index-values-and-adding-to-new-field/242896)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 13\ **Last updated:** [July 28, 2020, 1:49pm UTC](https://discuss.elastic.co/t/kibana-index-splitting-index-values-and-adding-to-new-field/242896 "2020-07-28T13:49:44Z")
Hello, I am trying to figure out how to split the value of an index field and add that to a new field. Basically what I have on Kibana is as shown: This is the json document output of the index fields: I am trying… --- ## [Search query total hits not adding up when using multiple queries](https://discuss.elastic.co/t/search-query-total-hits-not-adding-up-when-using-multiple-queries/242676)
**Author:** [@antonsamper](https://discuss.elastic.co/u/antonsamper)\ **Replies:** 9\ **Last updated:** [July 28, 2020, 1:13pm UTC](https://discuss.elastic.co/t/search-query-total-hits-not-adding-up-when-using-multiple-queries/242676 "2020-07-28T13:13:50Z")
I have encountered a strange problem whereby the total hits don't seem to be adding up when I use multiple filters. I have an index with around 40 million documents. A typical document looks like something like this: {… --- ## [Why update\_by\_query/delete\_by\_query are taking almost same time with Automatic Slicing & Without Slicing?](https://discuss.elastic.co/t/why-update-by-query-delete-by-query-are-taking-almost-same-time-with-automatic-slicing-without-slicing/242911)
**Author:** [@dillibabu.mekala](https://discuss.elastic.co/u/dillibabu.mekala)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 1:06pm UTC](https://discuss.elastic.co/t/why-update-by-query-delete-by-query-are-taking-almost-same-time-with-automatic-slicing-without-slicing/242911 "2020-07-28T13:06:57Z")
Hi Team, I have gone through the elastic search docx and tried to implement the slicing concept in 2-ways for update\_by\_query/delete\_by\_query. Manual Slicing (https://www.elastic.co/guide/en/elasticsearch/reference/cu… --- ## [Combine fields in Elasticsearch from logs with same ID](https://discuss.elastic.co/t/combine-fields-in-elasticsearch-from-logs-with-same-id/242880)
**Author:** [@egray](https://discuss.elastic.co/u/egray)\ **Replies:** 6\ **Last updated:** [July 28, 2020, 1:06pm UTC](https://discuss.elastic.co/t/combine-fields-in-elasticsearch-from-logs-with-same-id/242880 "2020-07-28T13:06:03Z")
I am working on a log aggregation solution for my company's web requests, using Logstash and Elasticsearch. There are several logs produced for each web request containing slightly different information, and they would l… --- ## [Logstash Unvailable When Syncing with Elastic's Yum Repository](https://discuss.elastic.co/t/logstash-unvailable-when-syncing-with-elastics-yum-repository/242904)
**Author:** [@alpo](https://discuss.elastic.co/u/alpo)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 1:01pm UTC](https://discuss.elastic.co/t/logstash-unvailable-when-syncing-with-elastics-yum-repository/242904 "2020-07-28T13:01:56Z")
All, Looks like when we attempt to sync with Elastic's yum repository, the logstash rpm is not downloaded. Here is our full reposync command: /usr/bin/dnf reposync \\ --repoid=elastic-7.x \\ --arch=x86\_64 \\ --down… --- ## [How to Merge 2-index data in to One of the two Self Indexes without Re-Indexing to Third Index?](https://discuss.elastic.co/t/how-to-merge-2-index-data-in-to-one-of-the-two-self-indexes-without-re-indexing-to-third-index/242359)
**Author:** [@dillibabu.mekala](https://discuss.elastic.co/u/dillibabu.mekala)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 12:57pm UTC](https://discuss.elastic.co/t/how-to-merge-2-index-data-in-to-one-of-the-two-self-indexes-without-re-indexing-to-third-index/242359 "2020-07-28T12:57:33Z")
Assume i have indices with names carssdata\_original, carssdata\_stage The data in the carsspark\_original is given below. { "\_index": "carssdata\_original", "\_type": "doc", "\_score": 1, "\_source": { "carid": "1", "c… --- ## [Secure elasticstack](https://discuss.elastic.co/t/secure-elasticstack/242752)
**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\ **Replies:** 10\ **Last updated:** [July 28, 2020, 12:10pm UTC](https://discuss.elastic.co/t/secure-elasticstack/242752 "2020-07-28T12:10:23Z")
I have a small cluster that sits on one machine which pulls data from about 5 servers. Now, I was asked to secure the connection and set up a user for when entering Kibana. I read the latest documentation and it seems … --- ## [Rate() function in elasticsearch](https://discuss.elastic.co/t/rate-function-in-elasticsearch/242895)
**Author:** [@Nikparab](https://discuss.elastic.co/u/Nikparab)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 11:53am UTC](https://discuss.elastic.co/t/rate-function-in-elasticsearch/242895 "2020-07-28T11:53:55Z")
I want to query data present in elasticsearch index using grafana. I want to use rate function. The prometheus query is as below. sum (rate (container\_network\_receive\_bytes\_total{image!="",name=~".",namespace=~"$Namespa… --- ## [Elasticsearch query result in xml](https://discuss.elastic.co/t/elasticsearch-query-result-in-xml/242892)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 11:27am UTC](https://discuss.elastic.co/t/elasticsearch-query-result-in-xml/242892 "2020-07-28T11:27:14Z")
Dears, Is there any way to convert result of query (json) to xml format? Best Regards, Daniel --- ## [Elasticsearch analyzing and mapping data](https://discuss.elastic.co/t/elasticsearch-analyzing-and-mapping-data/242601)
**Author:** [@Saber\_Ben\_Njima](https://discuss.elastic.co/u/Saber_Ben_Njima)\ **Replies:** 5\ **Last updated:** [July 28, 2020, 11:20am UTC](https://discuss.elastic.co/t/elasticsearch-analyzing-and-mapping-data/242601 "2020-07-28T11:20:29Z")
{ "\_index" : "filebeat-7.7.0-2020.06.26", "\_type" : "\_doc", "\_id" : "-cmj8HIBlEC9388KS7SY", "\_score" : 1.0, "\_source" : { "message" : "17-02-2020 11:45:55TO -\> | Brand : TT | Channel : di… --- ## [Issue in building Kibana rpm 7.8.0 from src](https://discuss.elastic.co/t/issue-in-building-kibana-rpm-7-8-0-from-src/241976)
**Author:** [@Mohitj252](https://discuss.elastic.co/u/Mohitj252)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 10:55am UTC](https://discuss.elastic.co/t/issue-in-building-kibana-rpm-7-8-0-from-src/241976 "2020-07-28T10:55:19Z")
Hi, I am trying to builidng kibana rpm but I am facing issues while running yarn kbn bootstrap --oss command. PFB output of the mentioned command, this error is related to the chrome driver installation. \`info \[kibana\] … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1309) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1311)