# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1394

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1395

---

## [How to prioritize exact match using nGram tokenizer? Solved, see solution](https://discuss.elastic.co/t/how-to-prioritize-exact-match-using-ngram-tokenizer-solved-see-solution/235823)

<div class="topic-metadata">

**Author:** [@buka\_bidzina](https://discuss.elastic.co/u/buka_bidzina)\
**Replies:** 10\
**Last updated:** [June 11, 2020, 12:16pm UTC](https://discuss.elastic.co/t/how-to-prioritize-exact-match-using-ngram-tokenizer-solved-see-solution/235823 "2020-06-11T12:16:23Z")

</div>

Hello All, I am wondering, how to rank an exact match higher than the ngram matches. For instance: If I search for asus It scores higher casual than asus or if I search for app it gives me first laptop and than it gi…

---

## [How to graphic a Division between two selected metrics](https://discuss.elastic.co/t/how-to-graphic-a-division-between-two-selected-metrics/235216)

<div class="topic-metadata">

**Author:** [@fchantada](https://discuss.elastic.co/u/fchantada)\
**Replies:** 2\
**Last updated:** [June 11, 2020, 11:53am UTC](https://discuss.elastic.co/t/how-to-graphic-a-division-between-two-selected-metrics/235216 "2020-06-11T11:53:14Z")

</div>

Hi, Starting from MetricBeats metrics with the ElasticSearch Module. I want to graphic on Kibana the Search Latency. I know that the necessary metrics are node\_stats.indices.search.query\_time\_in\_millis and node\_stats.in…

---

## [Using %{MONTHDAY:MONTHDAY}-%{MONTH:MONTH}-%{YEAR:YEAR} %{HOUR:HOUR}:%{MINUTE:MINUTE}](https://discuss.elastic.co/t/using-monthday-monthday-month-month-year-year-hour-hour-minute-minute/236658)

<div class="topic-metadata">

**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 11:46am UTC](https://discuss.elastic.co/t/using-monthday-monthday-month-month-year-year-hour-hour-minute-minute/236658 "2020-06-11T11:46:07Z")

</div>

Hi , in my grok I'm parsing date column : match =\> { "message" =\> "%{MONTHDAY:MONTHDAY}-%{MONTH:MONTH}-%{YEAR:YEAR} %{HOUR:HOUR}:%{MINUTE:MINUTE}:%{SECOND:SECOND}%{SPACE} %{DATA:loglevel}%{SPACE} \\\[%{DATA:thread}\\\]%{GR…

---

## [How to set limit log elasticsearch + filebeat](https://discuss.elastic.co/t/how-to-set-limit-log-elasticsearch-filebeat/236505)

<div class="topic-metadata">

**Author:** [@111304](https://discuss.elastic.co/u/111304)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 11:03am UTC](https://discuss.elastic.co/t/how-to-set-limit-log-elasticsearch-filebeat/236505 "2020-06-11T11:03:33Z")

</div>

Hi everyone, there is a setting forasticsearch + filebeat. I want to limit the number of logs that come in elasticsearch. There is a set of servers, about 20,000 events from different sets of files that filebeat scans th…

---

## [Elasticsearch Expansion and upgrading](https://discuss.elastic.co/t/elasticsearch-expansion-and-upgrading/236666)

<div class="topic-metadata">

**Author:** [@wangcc7](https://discuss.elastic.co/u/wangcc7)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 9:50am UTC](https://discuss.elastic.co/t/elasticsearch-expansion-and-upgrading/236666 "2020-06-11T09:50:53Z")

</div>

Set discovery.zen.ping.unicast.hosts For all nodes hostname, Data synchronization is slow. Is there a fast way to synchronize It's terrible. The backstage reminds me of this

---

## [プラグインからの外部プログラム呼び出しについて](https://discuss.elastic.co/t/topic/236622)

<div class="topic-metadata">

**Author:** [@ken1](https://discuss.elastic.co/u/ken1)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 5:56am UTC](https://discuss.elastic.co/t/topic/236622 "2020-06-11T05:56:42Z")

</div>

Analysis Plugins を作成して、自然言語解析が行える外部プログラムを呼び出したいと考えているのですが、呼び出した際に、以下のような IOException が発生しており、調査をしています。 ...\<略\>... Caused by: java.io.IOException: Cannot run program "C:/DummyAnalyzer/dummyanalyzer.bat": CreateProcess err…

---

## [How do I set timezone in a scripted field?](https://discuss.elastic.co/t/how-do-i-set-timezone-in-a-scripted-field/235367)

<div class="topic-metadata">

**Author:** [@Hugo\_Pires](https://discuss.elastic.co/u/Hugo_Pires)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 9:49am UTC](https://discuss.elastic.co/t/how-do-i-set-timezone-in-a-scripted-field/235367 "2020-06-11T09:49:02Z")

</div>

I use the following code doc\['time\_start\_ts'\].value.hourOfDay to get hour of day from a time field with date format. How can I set the timezone in order get the correct value after Daylight Saving Time changes? Thank…

---

## [Hashing index fields using elasticsearch](https://discuss.elastic.co/t/hashing-index-fields-using-elasticsearch/236657)

<div class="topic-metadata">

**Author:** [@MarcoV](https://discuss.elastic.co/u/MarcoV)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 9:14am UTC](https://discuss.elastic.co/t/hashing-index-fields-using-elasticsearch/236657 "2020-06-11T09:14:05Z")

</div>

Hi all, I have a question. In my index I have two fields that I want merge into a third field and than I whish to hash this "new field" using elasticsearch' script processor. For exemple: My index: field1: foo1 fiel…

---

## [Combine master /child index for server metrics](https://discuss.elastic.co/t/combine-master-child-index-for-server-metrics/236343)

<div class="topic-metadata">

**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 9:19am UTC](https://discuss.elastic.co/t/combine-master-child-index-for-server-metrics/236343 "2020-06-11T09:19:51Z")

</div>

We are collecting server metrics via beats. we want to get server details in visualization like datacenter , memory size etc in the dashboard . instead of adding custom fields . i have created a statis index wit…

---

## [How to store data in elastic search & access it?](https://discuss.elastic.co/t/how-to-store-data-in-elastic-search-access-it/236628)

<div class="topic-metadata">

**Author:** [@Hamendra\_Sunthwal](https://discuss.elastic.co/u/Hamendra_Sunthwal)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 9:11am UTC](https://discuss.elastic.co/t/how-to-store-data-in-elastic-search-access-it/236628 "2020-06-11T09:11:57Z")

</div>

I am working on to store , wishlist items in server in Vue + magento setup How to store data in elastic search ?

---

## [Write genric search query using nest C# client](https://discuss.elastic.co/t/write-genric-search-query-using-nest-c-client/236555)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 3\
**Last updated:** [June 11, 2020, 8:59am UTC](https://discuss.elastic.co/t/write-genric-search-query-using-nest-c-client/236555 "2020-06-11T08:59:09Z")

</div>

Hi i am trying to use nest client for c# to write search query . i know these ways of writing query var searchresponse = client.Search\<test\>(s =\> s .From(0) …

---

## [Field exists check in enrich ingest pipeline](https://discuss.elastic.co/t/field-exists-check-in-enrich-ingest-pipeline/236653)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 8:57am UTC](https://discuss.elastic.co/t/field-exists-check-in-enrich-ingest-pipeline/236653 "2020-06-11T08:57:05Z")

</div>

Hi I am using enricher in ingest pipeline to enrch the data for incoming documents. In few incoming documents, the matching field is not exist and throwing an error while inserting the document. How to check the condit…

---

## [Xml attribute PARSING IN LOGSTASH](https://discuss.elastic.co/t/xml-attribute-parsing-in-logstash/236307)

<div class="topic-metadata">

**Author:** [@Puneeth\_S\_B\_Gowda1](https://discuss.elastic.co/u/Puneeth_S_B_Gowda1)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 8:51am UTC](https://discuss.elastic.co/t/xml-attribute-parsing-in-logstash/236307 "2020-06-11T08:51:58Z")

</div>

Hi I am looking for xml attribute parsing through Logstash + file beat This is my xml \<OTA\_HotelAvailRS\>\<RoomType RoomType="M2S"\>M1S\</RoomType\>\</OTA\_HotelAvailRS\> from above one i need M2S attribute value as new colum…

---

## [Sysmon v.11 and new 'file delete' event without archive](https://discuss.elastic.co/t/sysmon-v-11-and-new-file-delete-event-without-archive/236141)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 3\
**Last updated:** [June 11, 2020, 8:46am UTC](https://discuss.elastic.co/t/sysmon-v-11-and-new-file-delete-event-without-archive/236141 "2020-06-11T08:46:13Z")

</div>

Anyone know if it's possible to configure Windows Sysmon v.11's new 'File Delete' event not to archive a copy of deleted files in the 'ArchiveDirectory' config key directory (as config key has a default value: Sysmon, he…

---

## [Rollup Job when one of the Terms field is array](https://discuss.elastic.co/t/rollup-job-when-one-of-the-terms-field-is-array/236651)

<div class="topic-metadata">

**Author:** [@vaibhavseth](https://discuss.elastic.co/u/vaibhavseth)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 8:45am UTC](https://discuss.elastic.co/t/rollup-job-when-one-of-the-terms-field-is-array/236651 "2020-06-11T08:45:51Z")

</div>

I am trying to create a RollUp job from Kibana. In the Terms field where I have given multiple fields, in which one of the fields is of an array type (String type in Index). How RollUp job will aggregate data on the arra…

---

## [Can't get index.max\_result\_window for Elasticsearch 7 working](https://discuss.elastic.co/t/cant-get-index-max-result-window-for-elasticsearch-7-working/235189)

<div class="topic-metadata">

**Author:** [@Alexey\_Pshenichnov](https://discuss.elastic.co/u/Alexey_Pshenichnov)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 8:43am UTC](https://discuss.elastic.co/t/cant-get-index-max-result-window-for-elasticsearch-7-working/235189 "2020-06-11T08:43:13Z")

</div>

For some reason I cannot set index.max\_result\_window from https://www.elastic.co/guide/en/elasticsearch/reference/current/index-modules.html#dynamic-index-settings I have tried different options like PUT /articles/\_set…

---

## [Strigo Issues](https://discuss.elastic.co/t/strigo-issues/233552)

<div class="topic-metadata">

**Author:** [@kplantholt](https://discuss.elastic.co/u/kplantholt)\
**Replies:** 2\
**Last updated:** [June 11, 2020, 8:18am UTC](https://discuss.elastic.co/t/strigo-issues/233552 "2020-06-11T08:18:30Z")

</div>

Since the Training Updates that occurred (on 5/18/2020?), I have not been able to log into the Strigo lab environment. I get the same error. I've tried created other Elastic Training accounts and paired them with new Str…

---

## [Elasticsearch cluster problems](https://discuss.elastic.co/t/elasticsearch-cluster-problems/236611)

<div class="topic-metadata">

**Author:** [@kase](https://discuss.elastic.co/u/kase)\
**Replies:** 4\
**Last updated:** [June 11, 2020, 8:04am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-problems/236611 "2020-06-11T08:04:34Z")

</div>

Hi there, I want to create elasticsearch cluster, but encountered some problems... my os version: ubuntu 18.04 my elasticsearch version: 7.7 my java version: openjdk version "11.0.7" 2020-04-14 OpenJDK Runtime Envi…

---

## [Saving frequently used user favourite filters](https://discuss.elastic.co/t/saving-frequently-used-user-favourite-filters/236290)

<div class="topic-metadata">

**Author:** [@Viktor\_Markvardt](https://discuss.elastic.co/u/Viktor_Markvardt)\
**Replies:** 2\
**Last updated:** [June 11, 2020, 7:53am UTC](https://discuss.elastic.co/t/saving-frequently-used-user-favourite-filters/236290 "2020-06-11T07:53:20Z")

</div>

Hi guys, How can I save a favourite filter like a drop-down list? (NOT a QUERY!) Are there any plugins for such purposes?

---

## [What coordinate system does geopoint use?](https://discuss.elastic.co/t/what-coordinate-system-does-geopoint-use/236634)

<div class="topic-metadata">

**Author:** [@Lo\_ading](https://discuss.elastic.co/u/Lo_ading)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 7:31am UTC](https://discuss.elastic.co/t/what-coordinate-system-does-geopoint-use/236634 "2020-06-11T07:31:35Z")

</div>

ES version is 7.6 geo\_shape datatype support GeoJSON:Point , here description is \[Elasticsearch uses WGS-84 coordinates only\] . but geo\_point datatype no description with coordinate system support, i want to know what …

---

## [Searching for strings with Special characters in ElasticSearch Scripts](https://discuss.elastic.co/t/searching-for-strings-with-special-characters-in-elasticsearch-scripts/236623)

<div class="topic-metadata">

**Author:** [@vkandiva](https://discuss.elastic.co/u/vkandiva)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 6:11am UTC](https://discuss.elastic.co/t/searching-for-strings-with-special-characters-in-elasticsearch-scripts/236623 "2020-06-11T06:11:22Z")

</div>

How do I escape special characters in Elastic Search Scripts? For example: I need to search for a string like "{NY} Albany" or "{CA} San Diego" in my script below: { "size": 0, "aggs": { "Test":…

---

## [Scripted fields =~ does not work as described in original documentation](https://discuss.elastic.co/t/scripted-fields-does-not-work-as-described-in-original-documentation/235727)

<div class="topic-metadata">

**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\
**Replies:** 2\
**Last updated:** [June 11, 2020, 7:30am UTC](https://discuss.elastic.co/t/scripted-fields-does-not-work-as-described-in-original-documentation/235727 "2020-06-11T07:30:42Z")

</div>

Hi folks, I need a little help here to understand how that works. Tried with Kibana 7.3.1, 7.6.2. 7.7.0 I've found this: Under "Regex" how to script a wildcard Then I took a look inside the 7.7x Documentation an…

---

## [Elasticsearch / Kibana: How can they run 24/7?](https://discuss.elastic.co/t/elasticsearch-kibana-how-can-they-run-24-7/235119)

<div class="topic-metadata">

**Author:** [@elisavet](https://discuss.elastic.co/u/elisavet)\
**Replies:** 2\
**Last updated:** [June 11, 2020, 7:26am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-how-can-they-run-24-7/235119 "2020-06-11T07:26:53Z")

</div>

Hi! How can elasticsearch and kibana run 24/7? Details: I am running the elk stack on a remote server on production mode. The installation was with .tar.gz. I start elasticsearch running the bin/elasticsearch command…

---

## [Integration of kibana dashboard and keycloack](https://discuss.elastic.co/t/integration-of-kibana-dashboard-and-keycloack/236469)

<div class="topic-metadata">

**Author:** [@akg](https://discuss.elastic.co/u/akg)\
**Replies:** 3\
**Last updated:** [June 11, 2020, 5:41am UTC](https://discuss.elastic.co/t/integration-of-kibana-dashboard-and-keycloack/236469 "2020-06-11T05:41:50Z")

</div>

Hi All, I'm trying to integrate kibana and keycloak. does anyone have any idea about implementation and make it working?

---

## [Es query mapping and agg](https://discuss.elastic.co/t/es-query-mapping-and-agg/236619)

<div class="topic-metadata">

**Author:** [@Zephery\_Wen](https://discuss.elastic.co/u/Zephery_Wen)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 4:55am UTC](https://discuss.elastic.co/t/es-query-mapping-and-agg/236619 "2020-06-11T04:55:21Z")

</div>

How to realize agg according to dynamic map's key? PUT aaa/1 { "name": { "first": "Alice", "1": "John" }, "age": 26, "joiningDate": "2015-10-15" } PUT aaa/2 { "name": { "second": "Blob", "1"…

---

## [Fscrawler create duplicates](https://discuss.elastic.co/t/fscrawler-create-duplicates/236618)

<div class="topic-metadata">

**Author:** [@Ostr1969](https://discuss.elastic.co/u/Ostr1969)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 4:41am UTC](https://discuss.elastic.co/t/fscrawler-create-duplicates/236618 "2020-06-11T04:41:18Z")

</div>

After stopping fscrawler job and then starting again with the same job name. It reindexes all documents and create duplicates. How can I avoid it?

---

## [Filebeat to kafka: Failed to connect to broker](https://discuss.elastic.co/t/filebeat-to-kafka-failed-to-connect-to-broker/236440)

<div class="topic-metadata">

**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\
**Replies:** 4\
**Last updated:** [June 11, 2020, 3:29am UTC](https://discuss.elastic.co/t/filebeat-to-kafka-failed-to-connect-to-broker/236440 "2020-06-11T03:29:28Z")

</div>

environment : kafka 2.11 (installed via ambari) filebeat 7.4.2 (windows) according this source since it was installed via ambari i should use port 6667 here is my filebeat.conf filebeat.inputs: - type: log p…

---

## [Elasticsearch Primary/Replica DocFreq Not In Sync](https://discuss.elastic.co/t/elasticsearch-primary-replica-docfreq-not-in-sync/236599)

<div class="topic-metadata">

**Author:** [@Hubert\_Pham](https://discuss.elastic.co/u/Hubert_Pham)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 2:18am UTC](https://discuss.elastic.co/t/elasticsearch-primary-replica-docfreq-not-in-sync/236599 "2020-06-11T02:18:17Z")

</div>

Using an explain query, I'm seeing a drastic difference in the docFreqs between a query with preference for \_primary vs one for \_replica. The index is restored from a snapshot from a 5.4.3 cluster to a 6.8.6 cluster. …

---

## [Elasticsearch service won't start](https://discuss.elastic.co/t/elasticsearch-service-wont-start/236591)

<div class="topic-metadata">

**Author:** [@ckunkel](https://discuss.elastic.co/u/ckunkel)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 1:11am UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-start/236591 "2020-06-11T01:11:40Z")

</div>

I started out by installing jdk-14.0.1 and setting JAVA\_HOME environment variable to C:\\Program Files\\Java\\jdk-14.0.1 elasticsearch-service install worked, but the service won't start. Logs say \[2020-06-10 03:10:14\] …

---

## [Elastic SIEM for MSSP](https://discuss.elastic.co/t/elastic-siem-for-mssp/235866)

<div class="topic-metadata">

**Author:** [@Gilles\_Villeneuve](https://discuss.elastic.co/u/Gilles_Villeneuve)\
**Replies:** 6\
**Last updated:** [June 11, 2020, 1:20am UTC](https://discuss.elastic.co/t/elastic-siem-for-mssp/235866 "2020-06-11T01:20:46Z")

</div>

Hi All, I have been trying to architect how I could use the Elastic SIEM in a MSSP environment where multiple clients would have a collector ( logstash, Filebeat ), and these would forward the logs to my main ELK stack. …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1393)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1395)
