# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1605 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1606 --- ## [Perform count with high-level-rest-client ans spring boot](https://discuss.elastic.co/t/perform-count-with-high-level-rest-client-ans-spring-boot/221150)
**Author:** [@RAHULRAJSONU](https://discuss.elastic.co/u/RAHULRAJSONU)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 6:28am UTC](https://discuss.elastic.co/t/perform-count-with-high-level-rest-client-ans-spring-boot/221150 "2020-02-27T06:28:55Z")
I am trying to get the count of total documents with some filtration. here what I am trying- public Object count() throws IOException { SearchSourceBuilder sourceBuilder = new SearchSourceBuilder(); … --- ## [Logstash shutdown automatically](https://discuss.elastic.co/t/logstash-shutdown-automatically/221139)
**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 4:07am UTC](https://discuss.elastic.co/t/logstash-shutdown-automatically/221139 "2020-02-27T04:07:50Z")
Hi All , Our Logstash got shutdown automatically. Logstash Log above is the Log of the logstash before it got shut down. i could not see much information . can any one help after seeing the log. --- ## [Unable to set field\_name using pre-aggregated field in machine learning](https://discuss.elastic.co/t/unable-to-set-field-name-using-pre-aggregated-field-in-machine-learning/221136)
**Author:** [@KEVISONG](https://discuss.elastic.co/u/KEVISONG)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 3:31am UTC](https://discuss.elastic.co/t/unable-to-set-field-name-using-pre-aggregated-field-in-machine-learning/221136 "2020-02-27T03:31:37Z")
I configure the datafeed with aggregation and a self-defined aggregation field naming "success\_percentage". Shown below And the Datafeed preview shows correct output However, as I tried to specify this field in det… --- ## [Term query for date type field doesn't work if query is list](https://discuss.elastic.co/t/term-query-for-date-type-field-doesnt-work-if-query-is-list/218140)
**Author:** [@tnarita](https://discuss.elastic.co/u/tnarita)\ **Replies:** 2\ **Last updated:** [February 27, 2020, 3:19am UTC](https://discuss.elastic.co/t/term-query-for-date-type-field-doesnt-work-if-query-is-list/218140 "2020-02-27T03:19:06Z")
Hi, I inserted a data whose data type is "date". Then I tried to find the data by term query. If search query contains one value, it works but if search query contain a list of value, I get exception. If data type of … --- ## [Join 2 Index in elastic 7.5](https://discuss.elastic.co/t/join-2-index-in-elastic-7-5/221134)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 3:03am UTC](https://discuss.elastic.co/t/join-2-index-in-elastic-7-5/221134 "2020-02-27T03:03:24Z")
i want to join my data. its like VLOOKUP in Ms Excel. how can i doing this in elastic? thanks before --- ## [Data Visualization with Bar and Line In one Chart](https://discuss.elastic.co/t/data-visualization-with-bar-and-line-in-one-chart/220950)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 2\ **Last updated:** [February 27, 2020, 2:52am UTC](https://discuss.elastic.co/t/data-visualization-with-bar-and-line-in-one-chart/220950 "2020-02-27T02:52:01Z")
I want to create a visualization object with a combined bar and line charts, i want create the Line chart with Percentage of Bar Charts like this : how can i create that? is in Visualisasi support percentage ? Thank y… --- ## [Logstash pipeline systax errors after 7.6.0](https://discuss.elastic.co/t/logstash-pipeline-systax-errors-after-7-6-0/220903)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 13\ **Last updated:** [February 27, 2020, 1:09am UTC](https://discuss.elastic.co/t/logstash-pipeline-systax-errors-after-7-6-0/220903 "2020-02-27T01:09:21Z")
Working logstash 7.5.2 upgraded to 7.6.0 causes 3 of my pipelines to fail with syntax error messages. Or course, since they were working, I can't really find any syntax errors. Has anyone else seen this? Thanks --- ## [How to reduce doc\_count\_error\_upper\_bound to 0](https://discuss.elastic.co/t/how-to-reduce-doc-count-error-upper-bound-to-0/221130)
**Author:** [@Udayabharathi](https://discuss.elastic.co/u/Udayabharathi)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 2:23am UTC](https://discuss.elastic.co/t/how-to-reduce-doc-count-error-upper-bound-to-0/221130 "2020-02-27T02:23:09Z")
I'm new to elasticsearch and I recently came across this doc\_count\_error\_upper\_bound in the results. When I tried to aggregate the data using terms based on a field with sorting based on descending count and limited the … --- ## [Jsonフィルター利用時に他のフィールドを消さない](https://discuss.elastic.co/t/json/221031)
**Author:** [@hashimoto](https://discuss.elastic.co/u/hashimoto)\ **Replies:** 2\ **Last updated:** [February 27, 2020, 2:10am UTC](https://discuss.elastic.co/t/json/221031 "2020-02-27T02:10:40Z")
filebeatで吐き出したjsonをlogstashで再度取り込むという処理をしています。 その際、grokfilterでjsonより前の情報をとったあと、json部分にjsonフィルターを適用しますがその場合、他のフィールドが削除されてしまうようです。 これを回避する方法はありますか？ https://www.elastic.co/guide/en/logstash/current/plugins-filters-json.h… --- ## [How to grok complex patterns with logstash 7.1](https://discuss.elastic.co/t/how-to-grok-complex-patterns-with-logstash-7-1/218480)
**Author:** [@keshavl](https://discuss.elastic.co/u/keshavl)\ **Replies:** 13\ **Last updated:** [February 27, 2020, 1:03am UTC](https://discuss.elastic.co/t/how-to-grok-complex-patterns-with-logstash-7-1/218480 "2020-02-27T01:03:26Z")
HI. I am aware that DATA and GREEDYDATA are expensive patterns but those are most simple to use. I am using following pattern to extract data out of JMS XML . I am pasting both Input as well as Pattern which I have confi… --- ## [VEGA Visualizationでy軸に複数の項目をセットしたい。](https://discuss.elastic.co/t/vega-visualization-y/220076)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 4\ **Last updated:** [February 27, 2020, 12:12am UTC](https://discuss.elastic.co/t/vega-visualization-y/220076 "2020-02-27T00:12:18Z")
お世話になります。 VEGAを用いて散布図を作成しています。 一つのx軸を共通で使用し、y軸に複数の項目をセットしたいのですが、上手くいきません。 やりたいこと 下記のデータ群で、値を x軸: testdate , y軸: value1 でセットする簡単な散布図は作成できました。 Sample data testdate value1 value2 value3 2020-01-03 00:00:00 10 2… --- ## [How to speed up msearch queries?](https://discuss.elastic.co/t/how-to-speed-up-msearch-queries/221105)
**Author:** [@hjiop\_oop](https://discuss.elastic.co/u/hjiop_oop)\ **Replies:** 5\ **Last updated:** [February 26, 2020, 10:13pm UTC](https://discuss.elastic.co/t/how-to-speed-up-msearch-queries/221105 "2020-02-26T22:13:58Z")
I'm using elasticsearch's msearch for making a large number of batch queries. Problem is this is very slow, I'm primarily using this for doing searches / counts over an index. For eg. if I have 2000 of such queries lin… --- ## [Search Overhead Per Shard](https://discuss.elastic.co/t/search-overhead-per-shard/221120)
**Author:** [@dvisz-inf](https://discuss.elastic.co/u/dvisz-inf)\ **Replies:** 0\ **Last updated:** [February 26, 2020, 10:42pm UTC](https://discuss.elastic.co/t/search-overhead-per-shard/221120 "2020-02-26T22:42:17Z")
Hi all I have a vague memory and a question I'd like to seek clarity on! ISTR reading somewhere that elasticsearch has settings to control how search across multiple shards (the usual case) is carried out: either all s… --- ## [Recording CVE data in Elastic and displaying with Kibana](https://discuss.elastic.co/t/recording-cve-data-in-elastic-and-displaying-with-kibana/220763)
**Author:** [@tomdell](https://discuss.elastic.co/u/tomdell)\ **Replies:** 7\ **Last updated:** [February 26, 2020, 10:40pm UTC](https://discuss.elastic.co/t/recording-cve-data-in-elastic-and-displaying-with-kibana/220763 "2020-02-26T22:40:31Z")
Hi all, I haven't been able to find anyone else really doing this, and after a week of playing around I'm still pretty lost. Currently my goal is to ingest vulnerability data into ELK, and then use Kibana to see the dat… --- ## [Metric beat, File beat and Stack monitoring metrics able to view in single dashboard](https://discuss.elastic.co/t/metric-beat-file-beat-and-stack-monitoring-metrics-able-to-view-in-single-dashboard/220486)
**Author:** [@akesava](https://discuss.elastic.co/u/akesava)\ **Replies:** 1\ **Last updated:** [February 26, 2020, 10:31pm UTC](https://discuss.elastic.co/t/metric-beat-file-beat-and-stack-monitoring-metrics-able-to-view-in-single-dashboard/220486 "2020-02-26T22:31:43Z")
Currently we are using elastic search 7.x and installed metric and hear beat. Able to view all data in uptime, Infrastructure and stack monitor individual. Is there any way to monitor all these metrics in single dashboar… --- ## [Reason:null (unhelpful error message)](https://discuss.elastic.co/t/reason-null-unhelpful-error-message/220944)
**Author:** [@dvisz-inf](https://discuss.elastic.co/u/dvisz-inf)\ **Replies:** 1\ **Last updated:** [February 26, 2020, 10:29pm UTC](https://discuss.elastic.co/t/reason-null-unhelpful-error-message/220944 "2020-02-26T22:29:37Z")
Hi all This error isn't very helpful: Anyone have advice for where to go from here? I don't see anything in my ES logs, either. Thanks! --- ## [Authorization in HTTP\_POLLER](https://discuss.elastic.co/t/authorization-in-http-poller/221117)
**Author:** [@RunningSmurf](https://discuss.elastic.co/u/RunningSmurf)\ **Replies:** 0\ **Last updated:** [February 26, 2020, 10:07pm UTC](https://discuss.elastic.co/t/authorization-in-http-poller/221117 "2020-02-26T22:07:08Z")
Hello, I can run a CURL command to verify a website. For the login, I add the following: --NTLM --negotiate -u \: Does anyone know how to translate this into HTTP\_POLLER? Thanks! Sincerely, RS --- ## [How to search through two different index patterns with common field?](https://discuss.elastic.co/t/how-to-search-through-two-different-index-patterns-with-common-field/220446)
**Author:** [@emad101](https://discuss.elastic.co/u/emad101)\ **Replies:** 1\ **Last updated:** [February 26, 2020, 9:26pm UTC](https://discuss.elastic.co/t/how-to-search-through-two-different-index-patterns-with-common-field/220446 "2020-02-26T21:26:06Z")
Hello, I am trying to get metric data from two different index pattern that have a common field. Suppose that I have Index A: with fields a , b, c Index B: with fields c, d, e what I want to do is to get the sum of … --- ## [Kibana not starting after 7.6 Upgrade](https://discuss.elastic.co/t/kibana-not-starting-after-7-6-upgrade/220928)
**Author:** [@rluzardo](https://discuss.elastic.co/u/rluzardo)\ **Replies:** 4\ **Last updated:** [February 26, 2020, 9:22pm UTC](https://discuss.elastic.co/t/kibana-not-starting-after-7-6-upgrade/220928 "2020-02-26T21:22:31Z")
Hello, I just did an upgrade from Kibana 7.3 to 7.6. After installing with the RPM and using the same kibana.yml file I had before, I tried to start the service and after 3 restarts I got the following error journalctl … --- ## [Time filter and histogram missing on rollup index patterns](https://discuss.elastic.co/t/time-filter-and-histogram-missing-on-rollup-index-patterns/220624)
**Author:** [@Blake\_Wills](https://discuss.elastic.co/u/Blake_Wills)\ **Replies:** 1\ **Last updated:** [February 26, 2020, 9:16pm UTC](https://discuss.elastic.co/t/time-filter-and-histogram-missing-on-rollup-index-patterns/220624 "2020-02-26T21:16:27Z")
We have started looking at rollup indexes and have noticed that the time filter and histogram are missing in the discover tab when we use a rollup index pattern. Is this expected or have we misconfigured something? When… --- ## ["apple" and the english analyzer](https://discuss.elastic.co/t/apple-and-the-english-analyzer/220753)
**Author:** [@emarthinsen](https://discuss.elastic.co/u/emarthinsen)\ **Replies:** 3\ **Last updated:** [February 26, 2020, 9:05pm UTC](https://discuss.elastic.co/t/apple-and-the-english-analyzer/220753 "2020-02-26T21:05:44Z")
I'm not sure why ES is behaving like this. Here's my request: GET /\_analyze { "analyzer": "english", "text": "apple" } And here's the response: { "tokens": \[ { "token": "appl", "start\_offset": 0, … --- ## [Winlogbeat event.type has 0 records](https://discuss.elastic.co/t/winlogbeat-event-type-has-0-records/220920)
**Author:** [@SeekAndDestroy](https://discuss.elastic.co/u/SeekAndDestroy)\ **Replies:** 0\ **Last updated:** [February 25, 2020, 8:59pm UTC](https://discuss.elastic.co/t/winlogbeat-event-type-has-0-records/220920 "2020-02-25T20:59:02Z")
I'm trying to get familiar with the SIEM. When I look at "Authentications" in the Hosts section, it is empty. If I look at the request, it appears to be looking for event.type: "aggregations": { "eventActionGroup": { … --- ## [Unable to send data from logstash to aws elastic service using amazon\_es plugin](https://discuss.elastic.co/t/unable-to-send-data-from-logstash-to-aws-elastic-service-using-amazon-es-plugin/221110)
**Author:** [@Shubham\_Dangare](https://discuss.elastic.co/u/Shubham_Dangare)\ **Replies:** 0\ **Last updated:** [February 26, 2020, 8:35pm UTC](https://discuss.elastic.co/t/unable-to-send-data-from-logstash-to-aws-elastic-service-using-amazon-es-plugin/221110 "2020-02-26T20:35:45Z")
I have setup logstash config to send postgres data to aws elastic and have policy set to public for now output { stdout {codec =\> rubydebug} amazon\_es { hosts =\> \["https://.us-east-2.es.amazonaws.com"\] region =\> "us… --- ## [JSON Transformation for use in Elastic/Kibana Aggregations](https://discuss.elastic.co/t/json-transformation-for-use-in-elastic-kibana-aggregations/221097)
**Author:** [@rysisnice](https://discuss.elastic.co/u/rysisnice)\ **Replies:** 0\ **Last updated:** [February 26, 2020, 7:21pm UTC](https://discuss.elastic.co/t/json-transformation-for-use-in-elastic-kibana-aggregations/221097 "2020-02-26T19:21:39Z")
I am working to aggregate key value pairs in Kibana that currently do not have unique key names, because of this I understand that some type of document transformation needs to happen. These key value pairs are put into… --- ## [Jaro Winkler for fuzzy seach?](https://discuss.elastic.co/t/jaro-winkler-for-fuzzy-seach/221107)
**Author:** [@deslauriersp](https://discuss.elastic.co/u/deslauriersp)\ **Replies:** 0\ **Last updated:** [February 26, 2020, 8:18pm UTC](https://discuss.elastic.co/t/jaro-winkler-for-fuzzy-seach/221107 "2020-02-26T20:18:51Z")
This has been asked mulitple times, but has not been answered It is possible to configure StringDistance for suggester with JaroWrinkler... But how about fuzzy search? Thanks! --- ## [What are the best practices around increasing the replica count drastically](https://discuss.elastic.co/t/what-are-the-best-practices-around-increasing-the-replica-count-drastically/220936)
**Author:** [@UDixit](https://discuss.elastic.co/u/UDixit)\ **Replies:** 8\ **Last updated:** [February 26, 2020, 8:04pm UTC](https://discuss.elastic.co/t/what-are-the-best-practices-around-increasing-the-replica-count-drastically/220936 "2020-02-26T20:04:03Z")
I want to understand the implications of drastically increasing ReplicaCount eg:0-\>5 on Indexing requests. Since we have only 1 available copy, and the quorum has suddenly changed to 4 (n/2+1) the indexing requests are… --- ## [Some trivial command line utils](https://discuss.elastic.co/t/some-trivial-command-line-utils/221103)
**Author:** [@ppbrown](https://discuss.elastic.co/u/ppbrown)\ **Replies:** 0\ **Last updated:** [February 26, 2020, 7:54pm UTC](https://discuss.elastic.co/t/some-trivial-command-line-utils/221103 "2020-02-26T19:54:38Z")
I'm relatively new to Elastic Search. I found a kind of nice tool by way of Cerebro. But, I'm kinda shocked there doesnt seem to be any command-line oriented toolset out there. I started to put together my own tools. … --- ## [Max\_docs when using ILM and automatic rollover](https://discuss.elastic.co/t/max-docs-when-using-ilm-and-automatic-rollover/219278)
**Author:** [@orjan](https://discuss.elastic.co/u/orjan)\ **Replies:** 1\ **Last updated:** [February 26, 2020, 7:49pm UTC](https://discuss.elastic.co/t/max-docs-when-using-ilm-and-automatic-rollover/219278 "2020-02-26T19:49:54Z")
I'm exploring the automatic rollover for ILM and are looking for some sensible default when to rollover. max\_age is straight forward e.g. 1 day, 7 days e.g. 1 month. When it comes to max\_size I'll guess it depends. But l… --- ## [Aggregate messages in sequence order?](https://discuss.elastic.co/t/aggregate-messages-in-sequence-order/220251)
**Author:** [@jfro](https://discuss.elastic.co/u/jfro)\ **Replies:** 4\ **Last updated:** [February 26, 2020, 7:26pm UTC](https://discuss.elastic.co/t/aggregate-messages-in-sequence-order/220251 "2020-02-26T19:26:11Z")
I have vendor appliance that I'm sending syslog data from to logstash v6.5.4. The appliance splits messages that are over 1kB into separate messages and then sends them out via UDP. We had kafka buffering messages befor… --- ## [Logstash Kafka Input Plugin delivery gurantee](https://discuss.elastic.co/t/logstash-kafka-input-plugin-delivery-gurantee/219645)
**Author:** [@danielyahn](https://discuss.elastic.co/u/danielyahn)\ **Replies:** 1\ **Last updated:** [February 26, 2020, 7:18pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-plugin-delivery-gurantee/219645 "2020-02-26T19:18:37Z")
Can Logstash Kafka input plug-in make any delivery guarantee? Per Tips and Best Practices | Logstash Reference \[7.6\] | Elastic, we don't get at-least-once guarantee. "Does Kafka Input commit offsets only after the eve… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1604) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1606)