# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1535 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1536 --- ## [Update value on field with spaces](https://discuss.elastic.co/t/update-value-on-field-with-spaces/225652)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 3\ **Last updated:** [April 3, 2020, 7:54am UTC](https://discuss.elastic.co/t/update-value-on-field-with-spaces/225652 "2020-04-03T07:54:46Z")
I have a field in my elasticsearch that I wish to be able to update using the \_update API. Currently I make a request and change the value of field FIELD to VALUE using this body: { "script": { "source": "ctx.\_so… --- ## [Question about "FileNotFoundException(no segments\* file found)" while allocating replica shard](https://discuss.elastic.co/t/question-about-filenotfoundexception-no-segments-file-found-while-allocating-replica-shard/226296)
**Author:** [@Hyunsoo\_Shim](https://discuss.elastic.co/u/Hyunsoo_Shim)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 7:49am UTC](https://discuss.elastic.co/t/question-about-filenotfoundexception-no-segments-file-found-while-allocating-replica-shard/226296 "2020-04-03T07:49:55Z")
Hello, we have got an issue when we have replica allocation after making primary shard. \[System ENV\] ES version : 6.5.2 Cluster has total 6 nodes (one node per one instance) \[Scenario\] At first, we created an index … --- ## [How to give more importance to recent dates within a certain range?](https://discuss.elastic.co/t/how-to-give-more-importance-to-recent-dates-within-a-certain-range/226347)
**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 7:29am UTC](https://discuss.elastic.co/t/how-to-give-more-importance-to-recent-dates-within-a-certain-range/226347 "2020-04-03T07:29:25Z")
Hi, I wanted to know whether it is possible to sort queries by most relevant within a specified range. For example, lets take three scores that have been returned by a query. Doc 1 = 85.1 - Date = 2 March 2020 Doc 2 … --- ## [ELK setup on IBM MQ](https://discuss.elastic.co/t/elk-setup-on-ibm-mq/226163)
**Author:** [@Deena](https://discuss.elastic.co/u/Deena)\ **Replies:** 0\ **Last updated:** [April 2, 2020, 7:06am UTC](https://discuss.elastic.co/t/elk-setup-on-ibm-mq/226163 "2020-04-02T07:06:55Z")
We are in process of doing a POC for setting up ELK stack for gathering IBM MQ Log data and QMGR metrics data into ELK. While working with ELK we found beat modules for MQ LOG but not with QMGR metrics. Can we setup the… --- ## [Exporting CSV from Logstash](https://discuss.elastic.co/t/exporting-csv-from-logstash/226330)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 7:04am UTC](https://discuss.elastic.co/t/exporting-csv-from-logstash/226330 "2020-04-03T07:04:39Z")
Hi Team, How to Export CSV file from logstash ? is this even possible to export CSV file. If is there is any possible solution do help Thanks and Regards, Sagar Mandak --- ## [How are matched\_queries ordered?](https://discuss.elastic.co/t/how-are-matched-queries-ordered/225581)
**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 6:56am UTC](https://discuss.elastic.co/t/how-are-matched-queries-ordered/225581 "2020-04-03T06:56:33Z")
Hi, I wanted to know in what order are the matched\_queries returned when we specify \_name? Is it in order of relevance? --- ## [ES errors - illegal\_argument\_exception](https://discuss.elastic.co/t/es-errors-illegal-argument-exception/226260)
**Author:** [@Juan\_Bertolotti](https://discuss.elastic.co/u/Juan_Bertolotti)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 6:46am UTC](https://discuss.elastic.co/t/es-errors-illegal-argument-exception/226260 "2020-04-03T06:46:07Z")
Im getting the following error {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"No endpoint or operation is available at \[search\_shards\]"}\],"type":"illegal\_argument\_exception","reason":"No endpoint… --- ## [How to inspect write queue](https://discuss.elastic.co/t/how-to-inspect-write-queue/225986)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 6:45am UTC](https://discuss.elastic.co/t/how-to-inspect-write-queue/225986 "2020-04-03T06:45:16Z")
I'm on 6.8... my write queues are filling up and I don't really know, how to inspect their contents. I have even stopped Logstashes, but something is constantly writing. Does recovery use the write queues? It's not cons… --- ## [Get logstash to fail on undefined variable](https://discuss.elastic.co/t/get-logstash-to-fail-on-undefined-variable/223320)
**Author:** [@macau](https://discuss.elastic.co/u/macau)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 11:34am UTC](https://discuss.elastic.co/t/get-logstash-to-fail-on-undefined-variable/223320 "2020-03-12T11:34:14Z")
output { file { path =\> "/srv/logstash-logs/%{somevar}.log" ... How can I get logstash to fail when an undefined variable is encountered? --- ## [Setup-Passwords for 3 nodes cluster](https://discuss.elastic.co/t/setup-passwords-for-3-nodes-cluster/226338)
**Author:** [@rufus001](https://discuss.elastic.co/u/rufus001)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 6:34am UTC](https://discuss.elastic.co/t/setup-passwords-for-3-nodes-cluster/226338 "2020-04-03T06:34:46Z")
I can able to set password for elastic super user in single node cluster using x-pack security authentication with basic license (https://www.elastic.co/guide/en/elasticsearch/reference/6.2/setup-passwords.html). With th… --- ## [Index selection optimisation when \_index filter is used](https://discuss.elastic.co/t/index-selection-optimisation-when-index-filter-is-used/226324)
**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 6:08am UTC](https://discuss.elastic.co/t/index-selection-optimisation-when-index-filter-is-used/226324 "2020-04-03T06:08:13Z")
If we take a query like below, where the index selection in request path has a wider scope, but we are only interested in results from a subset of the indices. GET 123-logs-\*/\_search?size=1 { "profile": true, "q… --- ## [Jdbc error](https://discuss.elastic.co/t/jdbc-error/226335)
**Author:** [@chelseia](https://discuss.elastic.co/u/chelseia)\ **Replies:** 0\ **Last updated:** [April 3, 2020, 5:52am UTC](https://discuss.elastic.co/t/jdbc-error/226335 "2020-04-03T05:52:22Z")
i am receiving the error ORA-01008: not all variables bound when i tried to run my logstash configuration file.I dont have any idea about this error.anyone can explain. input{ jdbc{ clean\_run =\> true jdbc\_driver\_lib… --- ## [Snapshot has been deleted but can’t reduce disk usage](https://discuss.elastic.co/t/snapshot-has-been-deleted-but-can-t-reduce-disk-usage/226322)
**Author:** [@maddog](https://discuss.elastic.co/u/maddog)\ **Replies:** 0\ **Last updated:** [April 3, 2020, 5:14am UTC](https://discuss.elastic.co/t/snapshot-has-been-deleted-but-can-t-reduce-disk-usage/226322 "2020-04-03T05:14:23Z")
Hi All. I create daily indices and snapshots are created for indices 90 days and retain the snapshots for 7 more days. I create the NFS Fileshare Path for stored data index of the snapshot (3TB). but I have met a ques… --- ## [How to you search for a filebeat tag?](https://discuss.elastic.co/t/how-to-you-search-for-a-filebeat-tag/226321)
**Author:** [@meatwad](https://discuss.elastic.co/u/meatwad)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 5:13am UTC](https://discuss.elastic.co/t/how-to-you-search-for-a-filebeat-tag/226321 "2020-04-03T05:13:02Z")
Hi, I'm trying to search for logs originating from nodes that have a specific tag defined in their filebeat configuration. Is there a way to do that in Elasticsearch? Thanks! --- ## [Directed graph in Kibana graphs](https://discuss.elastic.co/t/directed-graph-in-kibana-graphs/226251)
**Author:** [@ntsh999](https://discuss.elastic.co/u/ntsh999)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 4:59am UTC](https://discuss.elastic.co/t/directed-graph-in-kibana-graphs/226251 "2020-04-03T04:59:57Z")
I want to address a use case where I want to show - to which all people a particular infected person has passed on the COVID19 infection. Is it possible to address this through Elastic graphs? I tried but I failed. I ex… --- ## [Connect directly azure table storage to Kibana](https://discuss.elastic.co/t/connect-directly-azure-table-storage-to-kibana/226313)
**Author:** [@hieunguyen](https://discuss.elastic.co/u/hieunguyen)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 3:31am UTC](https://discuss.elastic.co/t/connect-directly-azure-table-storage-to-kibana/226313 "2020-04-03T03:31:44Z")
Hi everyone, I want to connect directly Kibana to Azure Table Storage to visualize my data in realtime. I try to do follow a lot of documents on websites but I still don't do it! Can you give me a way to resolve this p… --- ## [Visualization empty for scripted field](https://discuss.elastic.co/t/visualization-empty-for-scripted-field/224348)
**Author:** [@ReenaN](https://discuss.elastic.co/u/ReenaN)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 2:55am UTC](https://discuss.elastic.co/t/visualization-empty-for-scripted-field/224348 "2020-04-03T02:55:56Z")
I have created a scripted field to get dayOfWeek from date field as below: if (doc\['result.opened\_at'\].size() != 0) { if (!doc\['result.opened\_at'\].empty) { doc\['result.opened\_at'\].value.dayOfWeek } } I could see t… --- ## [Kibana 構成情報のみスナップショット](https://discuss.elastic.co/t/kibana/226307)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 0\ **Last updated:** [April 3, 2020, 2:51am UTC](https://discuss.elastic.co/t/kibana/226307 "2020-04-03T02:51:03Z")
お世話になります。 Kibanaの構成情報(indexデータ以外)のスナップショットを取得する方法はありますでしょうか。 構成情報とは ・pipeline,template等のPUT APIでの設定値 ・indexpattern,visualize,dashboard.machine learning等の画面での設定値 ・ユーザー,ロールの設定値 など 質問の目的：Kibana(elasticseach)環境がエラーで使え… --- ## [Combining 2 Line Graphs that has the same x-axis and y-axis timestamp](https://discuss.elastic.co/t/combining-2-line-graphs-that-has-the-same-x-axis-and-y-axis-timestamp/224924)
**Author:** [@soffonisol](https://discuss.elastic.co/u/soffonisol)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 1:19am UTC](https://discuss.elastic.co/t/combining-2-line-graphs-that-has-the-same-x-axis-and-y-axis-timestamp/224924 "2020-04-03T01:19:23Z")
I was trying to consolidate two different line graphs that shows the count of response error 400 and response error 404. I was able to graph them separately with no problem. How would I combine the graphs so it shows bot… --- ## [Restore snapshots on a different environment](https://discuss.elastic.co/t/restore-snapshots-on-a-different-environment/225325)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 12\ **Last updated:** [April 2, 2020, 10:09pm UTC](https://discuss.elastic.co/t/restore-snapshots-on-a-different-environment/225325 "2020-04-02T22:09:11Z")
Hey All, I want to take a snapshot and restore on a different environment. What are the steps I should follow? I already created the snapshots on the original environment. I have multiple files created on each node (… --- ## [Getting 403 after ECK installation on Openshift](https://discuss.elastic.co/t/getting-403-after-eck-installation-on-openshift/226281)
**Author:** [@Vijay\_Bhaskar\_Chinta](https://discuss.elastic.co/u/Vijay_Bhaskar_Chinta)\ **Replies:** 3\ **Last updated:** [April 2, 2020, 9:25pm UTC](https://discuss.elastic.co/t/getting-403-after-eck-installation-on-openshift/226281 "2020-04-02T21:25:54Z")
I am following the instructions from this page. I tried logging into Kibana using the username/password in the secret: kibana-sample-kibana-user. Once I log in, I get a 403 and I do not know how to proceed from here. Ple… --- ## [Copy index fields from one ES to another](https://discuss.elastic.co/t/copy-index-fields-from-one-es-to-another/225954)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 9\ **Last updated:** [April 2, 2020, 9:01pm UTC](https://discuss.elastic.co/t/copy-index-fields-from-one-es-to-another/225954 "2020-04-02T21:01:43Z")
How can I download index "Fields" frome one ES and upload it to another? I would like not to direct copy between instances, but store it as some config to use in many ES which don't have connection between another insta… --- ## [Geo Distance Query and OR Syntax?](https://discuss.elastic.co/t/geo-distance-query-and-or-syntax/226282)
**Author:** [@west415](https://discuss.elastic.co/u/west415)\ **Replies:** 0\ **Last updated:** [April 2, 2020, 8:37pm UTC](https://discuss.elastic.co/t/geo-distance-query-and-or-syntax/226282 "2020-04-02T20:37:33Z")
I am using Elasticsearch 7.6 and trying to run a query that runs a geo\_distance query to find matching documents within an exact city OR within a distance range of 25 miles in this case. In layman's terms, it would be "… --- ## [Remove Subfield using ruby](https://discuss.elastic.co/t/remove-subfield-using-ruby/225055)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 5\ **Last updated:** [April 2, 2020, 4:09pm UTC](https://discuss.elastic.co/t/remove-subfield-using-ruby/225055 "2020-04-02T16:09:55Z")
Anyone knows how to remove the attachment.documentcharacteristic field? using logstash ruby. Here the json data --- ## [Logstash gives error "Error: Address already in use" when ingesting filebeat with two inputs](https://discuss.elastic.co/t/logstash-gives-error-error-address-already-in-use-when-ingesting-filebeat-with-two-inputs/226168)
**Author:** [@chintanp](https://discuss.elastic.co/u/chintanp)\ **Replies:** 0\ **Last updated:** [April 2, 2020, 7:27am UTC](https://discuss.elastic.co/t/logstash-gives-error-error-address-already-in-use-when-ingesting-filebeat-with-two-inputs/226168 "2020-04-02T07:27:29Z")
Hi, I saw several similar posts, but none seemed to match my case. I got the open-source ELK stack from Bitnami and deployed it on AWS (Debian Linux 4.9). I am able to read the apache server logs locally, all the way t… --- ## [Why source.ip.keyword instead source.ip after upgrade](https://discuss.elastic.co/t/why-source-ip-keyword-instead-source-ip-after-upgrade/222579)
**Author:** [@Sasha\_Zn](https://discuss.elastic.co/u/Sasha_Zn)\ **Replies:** 2\ **Last updated:** [April 2, 2020, 6:29pm UTC](https://discuss.elastic.co/t/why-source-ip-keyword-instead-source-ip-after-upgrade/222579 "2020-04-02T18:29:11Z")
Hi everyone! I upgrade my installation of elastic from 7.6 to 7.6.1 and break my dashboards. In my visualizations I used split by Terms=source.ip and now I have error that field not exist. Now I can select source.ip.k… --- ## [Elasticsearch clustering and storage issues](https://discuss.elastic.co/t/elasticsearch-clustering-and-storage-issues/226216)
**Author:** [@snambu5878](https://discuss.elastic.co/u/snambu5878)\ **Replies:** 4\ **Last updated:** [April 2, 2020, 6:17pm UTC](https://discuss.elastic.co/t/elasticsearch-clustering-and-storage-issues/226216 "2020-04-02T18:17:23Z")
Hi Everyone, We are doing a POC to analyse and visualize 64 million records (175 colomns) of data on a 3 node cluster. Below are the settings: Each node capacity: CPU: 10 cores; RAM: 64Gig; Storage: 150GB I am using l… --- ## [How to set default pipeline even for indices that don't exist yet](https://discuss.elastic.co/t/how-to-set-default-pipeline-even-for-indices-that-dont-exist-yet/226249)
**Author:** [@Goishin](https://discuss.elastic.co/u/Goishin)\ **Replies:** 2\ **Last updated:** [April 2, 2020, 6:12pm UTC](https://discuss.elastic.co/t/how-to-set-default-pipeline-even-for-indices-that-dont-exist-yet/226249 "2020-04-02T18:12:33Z")
Hi all, I'm using ElasticSearch in AWS. It's the default cluster type that you get for free. It is almost entirely managed automatically. My logs go to cloudwatch, and then a lambda streams my log data into ES. I don't … --- ## [Cleaning up after installing a Logstash plugin ( 200Mb + of dependencies downloaded)](https://discuss.elastic.co/t/cleaning-up-after-installing-a-logstash-plugin-200mb-of-dependencies-downloaded/226266)
**Author:** [@deslauriersp](https://discuss.elastic.co/u/deslauriersp)\ **Replies:** 0\ **Last updated:** [April 2, 2020, 6:11pm UTC](https://discuss.elastic.co/t/cleaning-up-after-installing-a-logstash-plugin-200mb-of-dependencies-downloaded/226266 "2020-04-02T18:11:21Z")
Its seems that hundreds of dependencies are downloaded in order to install a logstash plugin. I installed the example Java filter plugin, which is very small gem (2mb), and it downloaded more than 200 Mb of dependencies… --- ## [Distinct values of a field](https://discuss.elastic.co/t/distinct-values-of-a-field/226264)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 0\ **Last updated:** [April 2, 2020, 5:55pm UTC](https://discuss.elastic.co/t/distinct-values-of-a-field/226264 "2020-04-02T17:55:20Z")
is there a way to get a list of distinct values of a field except the term aggregation? I'm referring to a use case when I don't need the doc\_count, but only list of values (I assume that calculating the doc\_count requi… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1534) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1536)