# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1395 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1396 --- ## [Kuromoji\_readingform を使用して読み仮名でサジェストを得たい](https://discuss.elastic.co/t/kuromoji-readingform/235883)
**Author:** [@kaiba](https://discuss.elastic.co/u/kaiba)\ **Replies:** 2\ **Last updated:** [June 11, 2020, 1:11am UTC](https://discuss.elastic.co/t/kuromoji-readingform/235883 "2020-06-11T01:11:32Z")
お世話になっております。 「貴社の記者が汽車で帰社する」というドキュメントに対して、漢字、読み仮名でサジェストを得たいのですが、うまくいかず相談させていただきました。 indexは以下のようになっております。 PUT kaiba { "settings": { "index": { "analysis": { "analyzer": { "tag\_analyzer": {… --- ## [Unknown key \[productid\] for create index](https://discuss.elastic.co/t/unknown-key-productid-for-create-index/236581)
**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 11:36pm UTC](https://discuss.elastic.co/t/unknown-key-productid-for-create-index/236581 "2020-06-10T23:36:26Z")
Hi following are my mapping { "dynamic" : "true", "\_meta" : { }, "\_source" : { "includes" : \[ \], "excludes" : \[ \] }, "dynamic\_date\_formats" : \[ "strict\_date\_optional\_time", "yyyy/MM/dd HH:mm:s… --- ## [Kibana does not open in my browser](https://discuss.elastic.co/t/kibana-does-not-open-in-my-browser/236586)
**Author:** [@Rodrigo\_Ceballos](https://discuss.elastic.co/u/Rodrigo_Ceballos)\ **Replies:** 2\ **Last updated:** [June 10, 2020, 10:57pm UTC](https://discuss.elastic.co/t/kibana-does-not-open-in-my-browser/236586 "2020-06-10T22:57:24Z")
119/5000 Hi. We are starting to work with Elastic and Kibana so we don't have much experience with this tool. I installed Elastic in a cento 7 with the steps: 1.- rpm --import https://artifacts.elastic.co/GPG-KEY-elas… --- ## [File\_completed\_action not deleting files](https://discuss.elastic.co/t/file-completed-action-not-deleting-files/236424)
**Author:** [@zfmoto](https://discuss.elastic.co/u/zfmoto)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 10:34pm UTC](https://discuss.elastic.co/t/file-completed-action-not-deleting-files/236424 "2020-06-09T22:34:11Z")
I enabled file\_completed\_action to delete, however the files still exist & are not logged after parsing. I've tried enabling permissions for these files as well to allow write. Here's a view of my config + permissions. i… --- ## [Elasticsearch Engineer I Exception](https://discuss.elastic.co/t/elasticsearch-engineer-i-exception/236391)
**Author:** [@lhayden](https://discuss.elastic.co/u/lhayden)\ **Replies:** 7\ **Last updated:** [June 10, 2020, 9:01pm UTC](https://discuss.elastic.co/t/elasticsearch-engineer-i-exception/236391 "2020-06-10T21:01:43Z")
I'm currently working through the Elastic Engineer I (On-Demand) course and I am stuck on Lab 1.4 In trying to setup Logstash ./logstash-7.3.1/bin/logstash -f datasets/blogs\_sql.conf I get the following as output: \[2… --- ## [Join two log files in logstash conf](https://discuss.elastic.co/t/join-two-log-files-in-logstash-conf/236306)
**Author:** [@Rushabh\_Doshi](https://discuss.elastic.co/u/Rushabh_Doshi)\ **Replies:** 15\ **Last updated:** [June 10, 2020, 8:57pm UTC](https://discuss.elastic.co/t/join-two-log-files-in-logstash-conf/236306 "2020-06-10T20:57:21Z")
i have an activity log like: 2020-06-02 03:30:50,712 USERID="(not logged in)" IP="103.226.146.203" SESSION="" HOST="h2t57-hrm.gh.pri" HOMEDIR="8.57" SITE="ps" METHOD="GET" HTTP\_USER\_AGENT="Mozilla/5.0 (Macintosh; Intel … --- ## [Get field mapping API with nested field](https://discuss.elastic.co/t/get-field-mapping-api-with-nested-field/236580)
**Author:** [@Peliser](https://discuss.elastic.co/u/Peliser)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 8:49pm UTC](https://discuss.elastic.co/t/get-field-mapping-api-with-nested-field/236580 "2020-06-10T20:49:20Z")
Hi everyone! I am using the Get field mapping API to check if a field exists in Elasticsearch. My index is: "mappings": { "dynamic": "strict", "properties": { "\_customer": { "type": "nested… --- ## [Upgrade 7.6-\>7.7 unable to verify the first certificate"](https://discuss.elastic.co/t/upgrade-7-6-7-7-unable-to-verify-the-first-certificate/233625)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 20\ **Last updated:** [June 10, 2020, 8:38pm UTC](https://discuss.elastic.co/t/upgrade-7-6-7-7-unable-to-verify-the-first-certificate/233625 "2020-06-10T20:38:56Z")
I've had my Elastic Stack secured using a public CA certificate for about a year now and upgraded from version to version without issue. Updated Elasticsearch and Kibana from 7.6.2 to 7.7.0 today and everything seemed t… --- ## [Ayuda update](https://discuss.elastic.co/t/ayuda-update/236578)
**Author:** [@Andres\_BH](https://discuss.elastic.co/u/Andres_BH)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 8:26pm UTC](https://discuss.elastic.co/t/ayuda-update/236578 "2020-06-10T20:26:22Z")
Tengo el siguiente indice: POST /i\_ktra\_lote/s\_ktra\_lote/0001 { "set\_id":"0001", "payment\_id":"0001", "estatus":\[ { "id\_status":"PV", "descripcion": "Pendiente de validar" … --- ## [Creating new index with an already existing index pattern](https://discuss.elastic.co/t/creating-new-index-with-an-already-existing-index-pattern/236560)
**Author:** [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 8:23pm UTC](https://discuss.elastic.co/t/creating-new-index-with-an-already-existing-index-pattern/236560 "2020-06-10T20:23:06Z")
Hello, Actually, I have by mistakenly deleted an index "filebeat-2020-06-05". My index gets generated on daily basis. Now, I am trying create an index manually with older date, and trying to restore older data, but tha… --- ## [Logstash + Lumberjack error](https://discuss.elastic.co/t/logstash-lumberjack-error/236574)
**Author:** [@18visions](https://discuss.elastic.co/u/18visions)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 7:49pm UTC](https://discuss.elastic.co/t/logstash-lumberjack-error/236574 "2020-06-10T19:49:50Z")
Hello. I've had some issues connecting to our host. I get this message from journalctl- Is there anything that sticks out in this error message? { :"hosts=\>"\[ "\", "\", "\" … --- ## [Multi match query and the scoring](https://discuss.elastic.co/t/multi-match-query-and-the-scoring/236573)
**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 7:45pm UTC](https://discuss.elastic.co/t/multi-match-query-and-the-scoring/236573 "2020-06-10T19:45:35Z")
I have couple documents in the index, and 2 of them are { "id" : "c0706549-d06c-4043-8086-1b4b3ec1ef95", "title" : "Google Pixel XL", "memory" : "4GB", "quantity" : 3 } { … --- ## [Lockdown access to Kibana and ElasticSearch console but open access to reports/dashboards](https://discuss.elastic.co/t/lockdown-access-to-kibana-and-elasticsearch-console-but-open-access-to-reports-dashboards/236387)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 3\ **Last updated:** [June 10, 2020, 7:44pm UTC](https://discuss.elastic.co/t/lockdown-access-to-kibana-and-elasticsearch-console-but-open-access-to-reports-dashboards/236387 "2020-06-10T19:44:30Z")
Hello, I have an app built in React. The apps has buttons to invoke Kibana Reports when clicked. The reports are visible and work fine when I open access to port 5601 for 0.0.0.0/0. But with this option, The user can … --- ## [Elasticsearch not starting after remove indices from one one out of three](https://discuss.elastic.co/t/elasticsearch-not-starting-after-remove-indices-from-one-one-out-of-three/236569)
**Author:** [@NISHANT\_KHARAT](https://discuss.elastic.co/u/NISHANT_KHARAT)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 7:04pm UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-remove-indices-from-one-one-out-of-three/236569 "2020-06-10T19:04:37Z")
tail -f elastic-logs.log at org.elasticsearch.gateway.GatewayMetaState.upgradeMetaData(GatewayMetaState.java:141) ~\[elasticsearch-7.4.1.jar:7.4.1\] at org.elasticsearch.gateway.GatewayMetaState.(GatewayMetaState.java:95… --- ## [How to apply filter for one field,](https://discuss.elastic.co/t/how-to-apply-filter-for-one-field/236348)
**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\ **Replies:** 5\ **Last updated:** [June 10, 2020, 6:52pm UTC](https://discuss.elastic.co/t/how-to-apply-filter-for-one-field/236348 "2020-06-10T18:52:59Z")
Hello, I tried to apply filter for the second field "Attempt Compliant" but each time its applied for the two fields. Could anyone help me please? --- ## [Edit existing apm alerts](https://discuss.elastic.co/t/edit-existing-apm-alerts/236519)
**Author:** [@Ronin](https://discuss.elastic.co/u/Ronin)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 6:29pm UTC](https://discuss.elastic.co/t/edit-existing-apm-alerts/236519 "2020-06-10T18:29:04Z")
Following this documentation: https://www.elastic.co/guide/en/kibana/master/alert-management.html It appears in the alerts page you can edit custom alerts you have made, but alerts made for APM would need to be edited i… --- ## [Apply filter from the \_user variable](https://discuss.elastic.co/t/apply-filter-from-the-user-variable/236356)
**Author:** [@Felix\_Valembois](https://discuss.elastic.co/u/Felix_Valembois)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 6:24pm UTC](https://discuss.elastic.co/t/apply-filter-from-the-user-variable/236356 "2020-06-10T18:24:46Z")
Hello, My problem is this : I want to filter the data in kibana in function of the name of the user connected (and other restriction that goes with the user.) So far, I applied a restriction on document with a query th… --- ## [Unable to delete remote cluster from Kibana](https://discuss.elastic.co/t/unable-to-delete-remote-cluster-from-kibana/236521)
**Author:** [@chinmoy\_padhi](https://discuss.elastic.co/u/chinmoy_padhi)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 2:11pm UTC](https://discuss.elastic.co/t/unable-to-delete-remote-cluster-from-kibana/236521 "2020-06-10T14:11:17Z")
Hi, I am unable to delete the Remote cluster from Kibana both from UI and through PUT request PUT \_cluster/settings { "persistent": { "cluster": { "remote": { "cluster\_two": { "mode": nul… --- ## [Getting Error decoding JSON: invalid character](https://discuss.elastic.co/t/getting-error-decoding-json-invalid-character/236562)
**Author:** [@userdhiru](https://discuss.elastic.co/u/userdhiru)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 6:06pm UTC](https://discuss.elastic.co/t/getting-error-decoding-json-invalid-character/236562 "2020-06-10T18:06:56Z")
I have tried Filebeat 7.7.0 and 7.7.1, setup with the following filebeat.yml filebeat.inputs: type: container paths: '/var/lib/docker/containers//.log' json.keys\_under\_root: true json.add\_error\_key: true json.mes… --- ## [Right role to access https://$ES\_HOST/\_stats](https://discuss.elastic.co/t/right-role-to-access-https-es-host-stats/235872)
**Author:** [@Rajesh\_Kodali](https://discuss.elastic.co/u/Rajesh_Kodali)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 6:06pm UTC](https://discuss.elastic.co/t/right-role-to-access-https-es-host-stats/235872 "2020-06-10T18:06:52Z")
I have created a role with Cluster Privileges monitor and monitor\_watcher and attached to user. Using the user creds I get the below error: Error, sdchecks\[499898\] Exception on running check elasticsearch: HTTPE… --- ## [Logstash grok IF condition fields](https://discuss.elastic.co/t/logstash-grok-if-condition-fields/236561)
**Author:** [@himalc](https://discuss.elastic.co/u/himalc)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 5:58pm UTC](https://discuss.elastic.co/t/logstash-grok-if-condition-fields/236561 "2020-06-10T17:58:35Z")
Hi, Please let me know, following if condition can run for any docker images. I want to filter postgres-1 docker image logs only. What are those values (\[docker\]\[container\]\[labels\] ) How can I create this type of filter… --- ## [Logstash email alerts](https://discuss.elastic.co/t/logstash-email-alerts/236416)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 3\ **Last updated:** [June 10, 2020, 5:28pm UTC](https://discuss.elastic.co/t/logstash-email-alerts/236416 "2020-06-10T17:28:11Z")
Hi, I'm trying to configure logstash to send mail . But it seems doesn't work. my config file : input { http\_poller { urls =\> { url =\> "xxxl" } request\_timeout =\> 60 schedule =\> { every =\> "60s" } codec =\> "jso… --- ## [If condition in the logstash output section](https://discuss.elastic.co/t/if-condition-in-the-logstash-output-section/236456)
**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\ **Replies:** 5\ **Last updated:** [June 10, 2020, 5:23pm UTC](https://discuss.elastic.co/t/if-condition-in-the-logstash-output-section/236456 "2020-06-10T17:23:51Z")
Hi Having the latest logstash-7.7.1-1.noarch from the official repo (baseurl=https://artifacts.elastic.co/packages/7.x/yum) In the output section the if "\_grokparsefailure" not in \[tags\] works fine. But any of the … --- ## [EOF error](https://discuss.elastic.co/t/eof-error/236553)
**Author:** [@Preo](https://discuss.elastic.co/u/Preo)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 4:54pm UTC](https://discuss.elastic.co/t/eof-error/236553 "2020-06-10T16:54:00Z")
Exiting: Couldn't connect to any of the configured Elasticsearch hosts. Errors: \[Error connection to Elasticsearch http://:9200: Get http://:9200: EOF\] I'm not sure what is causing this error and have found little nothi… --- ## [Backup of Elasticsearch using velero](https://discuss.elastic.co/t/backup-of-elasticsearch-using-velero/236408)
**Author:** [@Rajashree\_Sekar](https://discuss.elastic.co/u/Rajashree_Sekar)\ **Replies:** 6\ **Last updated:** [June 10, 2020, 4:46pm UTC](https://discuss.elastic.co/t/backup-of-elasticsearch-using-velero/236408 "2020-06-10T16:46:05Z")
Hi Team, I'm running Elastic search cluster in k8s environment. And I'm using Velero and restic for the backup and restore. But I'm not able to backup the elastic search cluster, as I could not freeze the volume using … --- ## [Update mapping to add new context to 'completion' type field](https://discuss.elastic.co/t/update-mapping-to-add-new-context-to-completion-type-field/236413)
**Author:** [@sameersawant](https://discuss.elastic.co/u/sameersawant)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 8:04pm UTC](https://discuss.elastic.co/t/update-mapping-to-add-new-context-to-completion-type-field/236413 "2020-06-09T20:04:24Z")
I have a suggest mapping like so "mappings": { "item": { "dynamic": "false", "properties": { "name": { "type": "text", }, "type": { … --- ## [Duplicate conditions in bool query](https://discuss.elastic.co/t/duplicate-conditions-in-bool-query/236197)
**Author:** [@oridool](https://discuss.elastic.co/u/oridool)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 4:29pm UTC](https://discuss.elastic.co/t/duplicate-conditions-in-bool-query/236197 "2020-06-10T16:29:51Z")
Hi, I'd like to know if having duplicate conditions in a bool query matters and makes the query slower, or that Elasticsearch knows how to ignore those duplicates. Example for such a query: GET /events-04357d39-96b5-4… --- ## [Logstash elasticsearch input reads same set of data everytime](https://discuss.elastic.co/t/logstash-elasticsearch-input-reads-same-set-of-data-everytime/236451)
**Author:** [@Ullas7](https://discuss.elastic.co/u/Ullas7)\ **Replies:** 3\ **Last updated:** [June 10, 2020, 4:12pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-input-reads-same-set-of-data-everytime/236451 "2020-06-10T16:12:22Z")
I am reading data from elasticsearch with below conf input { elasticsearch { hosts =\> "localhost:9200" index =\> "indexName" query =\> '{ "sort": \[ "\_doc" \] }' schedule =\> "/20 \* \* \* \* \*" doci… --- ## [Elastic/ELK to a Use Case Framework (UCF) like Magma & Mitre Framework](https://discuss.elastic.co/t/elastic-elk-to-a-use-case-framework-ucf-like-magma-mitre-framework/236517)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 4:11pm UTC](https://discuss.elastic.co/t/elastic-elk-to-a-use-case-framework-ucf-like-magma-mitre-framework/236517 "2020-06-10T16:11:20Z")
hi folks, anyone have written/implemented logic to best make use of tagging and alerting SIEM outcomes to a use case framework. I was mostly looking for MaGMa framework which is getting popularity Any help or implement… --- ## [Scripted fields to calculate %](https://discuss.elastic.co/t/scripted-fields-to-calculate/235114)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 4:10pm UTC](https://discuss.elastic.co/t/scripted-fields-to-calculate/235114 "2020-06-10T16:10:15Z")
Hi, I have a field in Kibana which would say if my ticket is passed or failed. has\_passed is the field. I wanna write a scripted\_field based on this value. \> target % = (count(has\_passed='passed')/count(total)) \*100 … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1394) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1396)