# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1561 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1562 --- ## [Use array in wildcard field in query](https://discuss.elastic.co/t/use-array-in-wildcard-field-in-query/224392)
**Author:** [@Dev-Flo](https://discuss.elastic.co/u/Dev-Flo)\ **Replies:** 0\ **Last updated:** [March 20, 2020, 9:50am UTC](https://discuss.elastic.co/t/use-array-in-wildcard-field-in-query/224392 "2020-03-20T09:50:44Z")
Hey, I have an array of selected modules, called selectedModules that contains the names of the selected modules. Now, I want to search my Elasticsearch Index for sources that begin with either of the selected modules,… --- ## [Optimizing Index that has grown far too large, suggested settings based on experience needed!](https://discuss.elastic.co/t/optimizing-index-that-has-grown-far-too-large-suggested-settings-based-on-experience-needed/224314)
**Author:** [@ford](https://discuss.elastic.co/u/ford)\ **Replies:** 1\ **Last updated:** [March 20, 2020, 9:43am UTC](https://discuss.elastic.co/t/optimizing-index-that-has-grown-far-too-large-suggested-settings-based-on-experience-needed/224314 "2020-03-20T09:43:07Z")
So I have an index that I did not expect to grow to the size it's at now, it was setup very naively. I've put off updating it long enough, time to set up a fresh cluster designed for the load! The Index has reached a tot… --- ## [Product Matrix doesnt list CentOS8 compatibility for ELK Stack](https://discuss.elastic.co/t/product-matrix-doesnt-list-centos8-compatibility-for-elk-stack/224343)
**Author:** [@snehid](https://discuss.elastic.co/u/snehid)\ **Replies:** 1\ **Last updated:** [March 20, 2020, 9:29am UTC](https://discuss.elastic.co/t/product-matrix-doesnt-list-centos8-compatibility-for-elk-stack/224343 "2020-03-20T09:29:06Z")
Product matrix https://www.elastic.co/support/matrix#matrix\_os doesnt list centOS8, how about the ELK stack compatibility of CentOS8? --- ## [CSV overwrite/ delete index](https://discuss.elastic.co/t/csv-overwrite-delete-index/224196)
**Author:** [@FoRMaTC](https://discuss.elastic.co/u/FoRMaTC)\ **Replies:** 4\ **Last updated:** [March 20, 2020, 8:45am UTC](https://discuss.elastic.co/t/csv-overwrite-delete-index/224196 "2020-03-20T08:45:45Z")
Hi, I'm downloading a CSV from our ticketing system and I want to import that into elastic every 15 minutes. However I want to start with a clean slate over and over again. What i've done now is wrote a small perl scr… --- ## [Pinned Query](https://discuss.elastic.co/t/pinned-query/224028)
**Author:** [@avinash\_kumawat](https://discuss.elastic.co/u/avinash_kumawat)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 8:37am UTC](https://discuss.elastic.co/t/pinned-query/224028 "2020-03-20T08:37:29Z")
Hello All, I am trying the Elasticsearch pinned query, for that, I have some questions: Is there any analytics tool elasticsearch plugin or built-in functionality to find out the most searched terms? Is there any way … --- ## [Filtered queries in vega sankey visualization](https://discuss.elastic.co/t/filtered-queries-in-vega-sankey-visualization/224254)
**Author:** [@g\_k\_b](https://discuss.elastic.co/u/g_k_b)\ **Replies:** 6\ **Last updated:** [March 20, 2020, 8:05am UTC](https://discuss.elastic.co/t/filtered-queries-in-vega-sankey-visualization/224254 "2020-03-20T08:05:28Z")
Hi everyone! I "built" a vega sankey visualzation showing a flow between 2 fields. I have a source field and a destination field whose terms are correctly linked with lines. It works perfectly! :slight\_smile: Now I woul… --- ## [Filter is slower than that not in a skewed dataset](https://discuss.elastic.co/t/filter-is-slower-than-that-not-in-a-skewed-dataset/224361)
**Author:** [@Ji\_Qiujia](https://discuss.elastic.co/u/Ji_Qiujia)\ **Replies:** 0\ **Last updated:** [March 20, 2020, 7:06am UTC](https://discuss.elastic.co/t/filter-is-slower-than-that-not-in-a-skewed-dataset/224361 "2020-03-20T07:06:36Z")
{ "from": 0, "size": 10, "query": { "bool": { "filter": \[ { "terms": { "platform": \[ "DPA" \], "boost": 1 } } \], … --- ## [Why Certain watchers are disabled](https://discuss.elastic.co/t/why-certain-watchers-are-disabled/224239)
**Author:** [@karthik2](https://discuss.elastic.co/u/karthik2)\ **Replies:** 3\ **Last updated:** [March 20, 2020, 5:00am UTC](https://discuss.elastic.co/t/why-certain-watchers-are-disabled/224239 "2020-03-20T05:00:43Z")
Hi Team, Please find the attached screenshot and please let me know how to enable the default available watchers in kibana Kind Regards Karthik --- ## [Mismatch between Kibana totals and direct \_msearch totals Elasticsearch 7.3.0](https://discuss.elastic.co/t/mismatch-between-kibana-totals-and-direct-msearch-totals-elasticsearch-7-3-0/224200)
**Author:** [@jimmymacGA](https://discuss.elastic.co/u/jimmymacGA)\ **Replies:** 4\ **Last updated:** [March 20, 2020, 1:45am UTC](https://discuss.elastic.co/t/mismatch-between-kibana-totals-and-direct-msearch-totals-elasticsearch-7-3-0/224200 "2020-03-20T01:45:21Z")
I am having an issue with geospatial queries in Kibana returning different results that a direct \_msearch query. I copied the query params from the developer tools and posted it directly to my ElasticSearch server in Po… --- ## [How can I get the status of a Index in elasticsearch in java](https://discuss.elastic.co/t/how-can-i-get-the-status-of-a-index-in-elasticsearch-in-java/224248)
**Author:** [@daniel-0930](https://discuss.elastic.co/u/daniel-0930)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 1:37am UTC](https://discuss.elastic.co/t/how-can-i-get-the-status-of-a-index-in-elasticsearch-in-java/224248 "2020-03-20T01:37:38Z")
I try to find a Java api, of cause the High-level one, to get the status of a index. It can be done in kibana console with single GET /index/\_stats. However, it is so hard to find one single relevent api in High-level ja… --- ## [Help me set elasticsearch.yml variable](https://discuss.elastic.co/t/help-me-set-elasticsearch-yml-variable/224228)
**Author:** [@jw.lee](https://discuss.elastic.co/u/jw.lee)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 1:19am UTC](https://discuss.elastic.co/t/help-me-set-elasticsearch-yml-variable/224228 "2020-03-20T01:19:30Z")
This is the contents of my elasticsearch.yml file. cluster.name: test-cluster node.name: test-m node.master: true node.data: false cluster.initial\_master\_nodes: \["${ES\_MASTER\_NODES}"\] discovery.seed\_hosts: \["${ES\_SEED… --- ## [Logstash.Config syntax/query/error](https://discuss.elastic.co/t/logstash-config-syntax-query-error/224324)
**Author:** [@Joshua\_Wilford](https://discuss.elastic.co/u/Joshua_Wilford)\ **Replies:** 1\ **Last updated:** [March 20, 2020, 12:44am UTC](https://discuss.elastic.co/t/logstash-config-syntax-query-error/224324 "2020-03-20T00:44:39Z")
Hey Community, Been beating my head against the wall all week over this error. I think its syntax but I can't find the error. Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :excep… --- ## [Running into issue with sourcing from Kafka using Spark Scala to write to Elastic Search](https://discuss.elastic.co/t/running-into-issue-with-sourcing-from-kafka-using-spark-scala-to-write-to-elastic-search/224328)
**Author:** [@jcheeks5281](https://discuss.elastic.co/u/jcheeks5281)\ **Replies:** 0\ **Last updated:** [March 19, 2020, 11:32pm UTC](https://discuss.elastic.co/t/running-into-issue-with-sourcing-from-kafka-using-spark-scala-to-write-to-elastic-search/224328 "2020-03-19T23:32:07Z")
Running into an issue where our spark logs are saying B cannot be cast to scala.Tuple2 import java.sql.Timestamp import java.text.{ParsePosition, SimpleDateFormat} import com.gm.SparkDataIngest.ManifestClasses.{Manifes… --- ## [Enriching Docs with Cached Elasticsearch Data](https://discuss.elastic.co/t/enriching-docs-with-cached-elasticsearch-data/224325)
**Author:** [@scottdfedorov](https://discuss.elastic.co/u/scottdfedorov)\ **Replies:** 0\ **Last updated:** [March 19, 2020, 11:06pm UTC](https://discuss.elastic.co/t/enriching-docs-with-cached-elasticsearch-data/224325 "2020-03-19T23:06:35Z")
Howdy, I am curious if anyone has used the jdbc\_static (or streaming) filter plugin to query and cache Elasticsearch data? I am aware of the elasticsearch filter plugin, but that plugin does not cache data. We store so… --- ## [How To get the alert severity in the body of the message , while sending the data via WEBHOOK](https://discuss.elastic.co/t/how-to-get-the-alert-severity-in-the-body-of-the-message-while-sending-the-data-via-webhook/224237)
**Author:** [@karthik2](https://discuss.elastic.co/u/karthik2)\ **Replies:** 1\ **Last updated:** [March 19, 2020, 9:54pm UTC](https://discuss.elastic.co/t/how-to-get-the-alert-severity-in-the-body-of-the-message-while-sending-the-data-via-webhook/224237 "2020-03-19T21:54:32Z")
Hi I'm creating a threshold alert by using the metric beat module. But while creating the event , we need to specify the information in the Body part so that it wil appear once the alert got generated. My question he… --- ## [Visualizations and time filter](https://discuss.elastic.co/t/visualizations-and-time-filter/224211)
**Author:** [@c95mbq](https://discuss.elastic.co/u/c95mbq)\ **Replies:** 1\ **Last updated:** [March 19, 2020, 9:03pm UTC](https://discuss.elastic.co/t/visualizations-and-time-filter/224211 "2020-03-19T21:03:45Z")
Hi, This is such a broad topic and I'm guessing the answer is that this can't be done because of how the index has been setup. Basically, imagine an index in kibana that has an order\_date\_time field set as the time fil… --- ## [SNMP map Values to Router Interface](https://discuss.elastic.co/t/snmp-map-values-to-router-interface/224312)
**Author:** [@hitman22](https://discuss.elastic.co/u/hitman22)\ **Replies:** 0\ **Last updated:** [March 19, 2020, 8:52pm UTC](https://discuss.elastic.co/t/snmp-map-values-to-router-interface/224312 "2020-03-19T20:52:26Z")
Hello, I am query my Router with SNMP with Logstash and I want to ask if it is possible to map the Fields for example ifHCOutOctets.1 to GigabitEthner1.ifHCOutOctets or something like that and the same also for ifHCInO… --- ## [Can't embed instagram post on custom plugin visualization](https://discuss.elastic.co/t/cant-embed-instagram-post-on-custom-plugin-visualization/224181)
**Author:** [@Jessica\_Langanz](https://discuss.elastic.co/u/Jessica_Langanz)\ **Replies:** 3\ **Last updated:** [March 19, 2020, 7:30pm UTC](https://discuss.elastic.co/t/cant-embed-instagram-post-on-custom-plugin-visualization/224181 "2020-03-19T19:30:46Z")
I am creating a kibana plugin that embeds an instagram post and receiving this error: C:\\Users\\User\\Documents\\Projects\\kibana\\plugins\\kbn\_tp\_custom\_visualizations\\node\_modules\\react-instagram-embed\\lib\\index.js:135 Refu… --- ## [Cumulative sum of count, while keeping track of data prior to the initial date](https://discuss.elastic.co/t/cumulative-sum-of-count-while-keeping-track-of-data-prior-to-the-initial-date/223996)
**Author:** [@jruivo](https://discuss.elastic.co/u/jruivo)\ **Replies:** 2\ **Last updated:** [March 19, 2020, 6:55pm UTC](https://discuss.elastic.co/t/cumulative-sum-of-count-while-keeping-track-of-data-prior-to-the-initial-date/223996 "2020-03-19T18:55:06Z")
Hey everyone! I'm trying to create a bar graph visualization with the evolution of new users over a period of time. The problem is that when I set an initial date on Kibana, it disregards the total number of existing u… --- ## [Logstash Regex Unrecognized character escape](https://discuss.elastic.co/t/logstash-regex-unrecognized-character-escape/224298)
**Author:** [@james.garside](https://discuss.elastic.co/u/james.garside)\ **Replies:** 0\ **Last updated:** [March 19, 2020, 6:22pm UTC](https://discuss.elastic.co/t/logstash-regex-unrecognized-character-escape/224298 "2020-03-19T18:22:45Z")
Hello all, I have this regex which is working for most names but throws an error for some. It seems my use of escape charaters is wrong. \[client\]\[user\]\[name\] =~ /staff\\\\.\*/ or \[client\]\[user\]\[name\] =~ /students\\\\.\*/ … --- ## [Saved search](https://discuss.elastic.co/t/saved-search/224176)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 4\ **Last updated:** [March 19, 2020, 6:06pm UTC](https://discuss.elastic.co/t/saved-search/224176 "2020-03-19T18:06:58Z")
Hi, I have created a saved search, and no matter how I try to sort the table, it always sorts by @timestamp, AND the column I asked to sort by. Is that by design, or something that I have missed? thanks --- ## [Geographical Map on Timeline](https://discuss.elastic.co/t/geographical-map-on-timeline/224267)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 3\ **Last updated:** [March 19, 2020, 6:02pm UTC](https://discuss.elastic.co/t/geographical-map-on-timeline/224267 "2020-03-19T18:02:58Z")
I have certain geographic data that is tied to a date time stamp. Is there a way to somehow show a route map or show a timeline of geographical areas? Like person A went from NYC to Boston to LA to Washington etc? --- ## [Range queries](https://discuss.elastic.co/t/range-queries/223447)
**Author:** [@afzal](https://discuss.elastic.co/u/afzal)\ **Replies:** 3\ **Last updated:** [March 19, 2020, 5:30pm UTC](https://discuss.elastic.co/t/range-queries/223447 "2020-03-19T17:30:07Z")
I have a source object similar to this "\_source" : { "phone" : "1234567890", "email" : "test\_test.com", "group" : "test", "name" : "Rhonda Shawarma", "prop.size\_min" : "0", "prop.size… --- ## [Filter out all docs that occur more than once](https://discuss.elastic.co/t/filter-out-all-docs-that-occur-more-than-once/221848)
**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\ **Replies:** 1\ **Last updated:** [March 19, 2020, 5:08pm UTC](https://discuss.elastic.co/t/filter-out-all-docs-that-occur-more-than-once/221848 "2020-03-19T17:08:33Z")
Hello, I want to filter out all entries from a table that have a count greater than 1. (red ones in the picture) Since I don't want to see them at all the "TopHit" aggregation isn't helpful. How can I achieve this other… --- ## [Error with starting ElasticSearch: OpenSDK 64-Bit Server VM](https://discuss.elastic.co/t/error-with-starting-elasticsearch-opensdk-64-bit-server-vm/224295)
**Author:** [@tagmetag](https://discuss.elastic.co/u/tagmetag)\ **Replies:** 1\ **Last updated:** [March 19, 2020, 4:54pm UTC](https://discuss.elastic.co/t/error-with-starting-elasticsearch-opensdk-64-bit-server-vm/224295 "2020-03-19T16:54:22Z")
Hi, Today I tried to install ElasticSearch in my VPS, which running Ubuntu 64bit and have Java installed. When I install ElasticSearch and tried to start, I got failed with an error about JVM in the below photo. Wha… --- ## [Logstash pipeline check for index](https://discuss.elastic.co/t/logstash-pipeline-check-for-index/224179)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 4\ **Last updated:** [March 19, 2020, 4:44pm UTC](https://discuss.elastic.co/t/logstash-pipeline-check-for-index/224179 "2020-03-19T16:44:12Z")
Hello, Is there a way to check in logstash pipeline if the exists. I am trying to use elasticsearch filter but I am getting an error on the first document because the index is not yet created. Regards, Peter --- ## [Search by a particular object of an array](https://discuss.elastic.co/t/search-by-a-particular-object-of-an-array/224005)
**Author:** [@gborasio](https://discuss.elastic.co/u/gborasio)\ **Replies:** 4\ **Last updated:** [March 19, 2020, 3:53pm UTC](https://discuss.elastic.co/t/search-by-a-particular-object-of-an-array/224005 "2020-03-19T15:53:36Z")
Hi all i have a json with this format: { "\_source": { "m\_header": { "m\_playerCarIndex": 2 }, "m\_lapData": \[ { "m\_currentLapTime": 1.5848066806793213 }, { "m\_currentLapTime": 1.6660668067933333 }, { "m\_curr… --- ## [Logstash geoip that works with Kibana SIEM UI](https://discuss.elastic.co/t/logstash-geoip-that-works-with-kibana-siem-ui/224288)
**Author:** [@Vincent\_Maury](https://discuss.elastic.co/u/Vincent_Maury)\ **Replies:** 0\ **Last updated:** [March 19, 2020, 3:46pm UTC](https://discuss.elastic.co/t/logstash-geoip-that-works-with-kibana-siem-ui/224288 "2020-03-19T15:46:18Z")
I'm using Logstash 7.6.0 with Elasticsearch & Kibana, and I figured out we need to change a couple of things to have geoip work with SIEM UI: The Logstash config sample: input { generator { count =\> 1 message =\> "… --- ## [Create map visualizsation of alb logs data](https://discuss.elastic.co/t/create-map-visualizsation-of-alb-logs-data/224283)
**Author:** [@vinayak\_k\_g](https://discuss.elastic.co/u/vinayak_k_g)\ **Replies:** 0\ **Last updated:** [March 19, 2020, 3:15pm UTC](https://discuss.elastic.co/t/create-map-visualizsation-of-alb-logs-data/224283 "2020-03-19T15:15:51Z")
Hi We have setup alb logs to show on our kibana dashboards successfully so far. Now we want to map the geography data. Have followed this article created the geo field but the data shown for geo ip is 0,0. Please le… --- ## [Calculate the hour of the day in the ingest pipeline / display error message](https://discuss.elastic.co/t/calculate-the-hour-of-the-day-in-the-ingest-pipeline-display-error-message/224222)
**Author:** [@daniellienert](https://discuss.elastic.co/u/daniellienert)\ **Replies:** 1\ **Last updated:** [March 19, 2020, 3:15pm UTC](https://discuss.elastic.co/t/calculate-the-hour-of-the-day-in-the-ingest-pipeline-display-error-message/224222 "2020-03-19T15:15:13Z")
Hello there, I am currently struggling with calculating the hour of the day from the timestamp of a log record using painless. The painless code (with adjusted field accessor) works as a scripted field. Wether date\_hou… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1560) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1562)