# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1747 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1748 --- ## [Query about logstash](https://discuss.elastic.co/t/query-about-logstash/210277)
**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\ **Replies:** 0\ **Last updated:** [December 3, 2019, 4:21am UTC](https://discuss.elastic.co/t/query-about-logstash/210277 "2019-12-03T04:21:40Z")
Hi Team, We have EFK stack running in out k8s cluster. All components are part of cluster. Now we want to implement logstash to create parsing rules for logs. How do I install it in current environment? What should I u… --- ## [Inverted Index Creation](https://discuss.elastic.co/t/inverted-index-creation/210194)
**Author:** [@Harinath](https://discuss.elastic.co/u/Harinath)\ **Replies:** 2\ **Last updated:** [December 3, 2019, 4:34am UTC](https://discuss.elastic.co/t/inverted-index-creation/210194 "2019-12-03T04:34:45Z")
It might be a dumb question. Please excuse me. I understand from the documentation that for every document created in elasticsearch (ES), ES creates an index using TF-IDF or BM25 algorithm. Will inverted index will be… --- ## [Text similarity search with vector fields](https://discuss.elastic.co/t/text-similarity-search-with-vector-fields/208970)
**Author:** [@Leonardo\_Seccia](https://discuss.elastic.co/u/Leonardo_Seccia)\ **Replies:** 2\ **Last updated:** [December 3, 2019, 3:43am UTC](https://discuss.elastic.co/t/text-similarity-search-with-vector-fields/208970 "2019-12-03T03:43:28Z")
@Julie\_Tibshirani post on Text similarity search with vector fields and the accompanying repo has been really helpful in jump-start a QnA project I am working on. Thank you! I have now migrated it to TensorFlow v2 and … --- ## [Could i assign field properties when index?](https://discuss.elastic.co/t/could-i-assign-field-properties-when-index/210159)
**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\ **Replies:** 2\ **Last updated:** [December 3, 2019, 2:56am UTC](https://discuss.elastic.co/t/could-i-assign-field-properties-when-index/210159 "2019-12-03T02:56:53Z")
I have some special field such as geo\_point , could i assign field properties when index, i do not want to create mapping before index --- ## [Out of memory in Elasticsearch](https://discuss.elastic.co/t/out-of-memory-in-elasticsearch/209588)
**Author:** [@kgpersonal](https://discuss.elastic.co/u/kgpersonal)\ **Replies:** 3\ **Last updated:** [December 3, 2019, 2:41am UTC](https://discuss.elastic.co/t/out-of-memory-in-elasticsearch/209588 "2019-12-03T02:41:56Z")
Hi Team, We have seen out of memory messages in one of our cluster logs with "java.lang.OutOfMemoryError: Java heap space" I am trying to understand on What are the different kinds of OutOfMemory messages occur in th… --- ## [Logstash Email - Constantly sending](https://discuss.elastic.co/t/logstash-email-constantly-sending/210262)
**Author:** [@lquin1978](https://discuss.elastic.co/u/lquin1978)\ **Replies:** 0\ **Last updated:** [December 3, 2019, 12:23am UTC](https://discuss.elastic.co/t/logstash-email-constantly-sending/210262 "2019-12-03T00:23:10Z")
I am using an email output within logstash to send me a copy of an xml file that has been generated by an NMAP scan. The issue is Logstash is repeatedly sending me a copy of the same file every minute. Is there a way t… --- ## [Composite search question and error (need help please)](https://discuss.elastic.co/t/composite-search-question-and-error-need-help-please/210078)
**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\ **Replies:** 1\ **Last updated:** [December 3, 2019, 12:06am UTC](https://discuss.elastic.co/t/composite-search-question-and-error-need-help-please/210078 "2019-12-03T00:06:23Z")
Hello Elastic bros I am seeking some wisdom on setting up a composite search. I am trying to filter out "OS\_Threat.IO\_Threats" Below is my search quarry GET logstash-\*/\_search { "query": { "bool": { "must… --- ## [Drop logs that does not contains type syslog](https://discuss.elastic.co/t/drop-logs-that-does-not-contains-type-syslog/207094)
**Author:** [@Jiri\_Safar](https://discuss.elastic.co/u/Jiri_Safar)\ **Replies:** 2\ **Last updated:** [December 2, 2019, 9:44pm UTC](https://discuss.elastic.co/t/drop-logs-that-does-not-contains-type-syslog/207094 "2019-12-02T21:44:37Z")
Hi, I have a multiple input and output: input is gelf and output for that is log that in to elastic. input is a syslog and output is in to elastic. But what hapens is that some gelf are send in to my syslog out… --- ## [🎉 Elastic Stack 7.5.0 released](https://discuss.elastic.co/t/elastic-stack-7-5-0-released/210231)
**Author:** [@vidamon](https://discuss.elastic.co/u/vidamon)\ **Replies:** 0\ **Last updated:** [December 2, 2019, 6:50pm UTC](https://discuss.elastic.co/t/elastic-stack-7-5-0-released/210231 "2019-12-02T18:50:47Z")
We're excited to announce that version 7.5 of the Elastic Stack is here! 7.5 brings Kibana Lens — a new, intuitive way to build visualizations. Plus, strong observability enhancements, expanded security use cases, Enterp… --- ## [Why is ElasticSearch SQL excruciatingly slow?](https://discuss.elastic.co/t/why-is-elasticsearch-sql-excruciatingly-slow/209276)
**Author:** [@Nick\_Walton](https://discuss.elastic.co/u/Nick_Walton)\ **Replies:** 14\ **Last updated:** [December 2, 2019, 9:14pm UTC](https://discuss.elastic.co/t/why-is-elasticsearch-sql-excruciatingly-slow/209276 "2019-12-02T21:14:19Z")
I have a very simple SQL query select hashstring from "flink-index-deduplicated" where bearing = 60 over about 118 million documents of which around 1/19th will match bearing = 60. The bearing values are defined as Lon… --- ## [Mapping of WKT POINT to GEOPOINT](https://discuss.elastic.co/t/mapping-of-wkt-point-to-geopoint/210246)
**Author:** [@silvermax](https://discuss.elastic.co/u/silvermax)\ **Replies:** 0\ **Last updated:** [December 2, 2019, 9:13pm UTC](https://discuss.elastic.co/t/mapping-of-wkt-point-to-geopoint/210246 "2019-12-02T21:13:57Z")
Dear All, I saw that WKT POINT is one of the primitive described in the GEO-POINT datatype documentation. I'm fetching this data from SQL DB using the JDBL connector. I saw a lot of thread but still not clear how to ma… --- ## [Cosine similarity not working in elastic search](https://discuss.elastic.co/t/cosine-similarity-not-working-in-elastic-search/209702)
**Author:** [@Divyanshu\_Pandey](https://discuss.elastic.co/u/Divyanshu_Pandey)\ **Replies:** 4\ **Last updated:** [December 2, 2019, 8:52pm UTC](https://discuss.elastic.co/t/cosine-similarity-not-working-in-elastic-search/209702 "2019-12-02T20:52:21Z")
This is my my query : script\_query = { "function\_score": { "query" : { "match\_all": {} }, "script\_score": {"script": { "inline": "cosineSimilarity(params.query\_vector, doc\['title\_vector'\]) + 1.0", "params": { "q… --- ## [Custom function for Text Similarity Search](https://discuss.elastic.co/t/custom-function-for-text-similarity-search/210158)
**Author:** [@Loreto\_Parisi](https://discuss.elastic.co/u/Loreto_Parisi)\ **Replies:** 1\ **Last updated:** [December 2, 2019, 8:49pm UTC](https://discuss.elastic.co/t/custom-function-for-text-similarity-search/210158 "2019-12-02T20:49:10Z")
I'm using a dense\_vector and cosineSimilarity to get documents similarity following the good tutorial here script\_query = { "script\_score": { "query": {"match\_all": {}}, "script": { … --- ## [Update timestamp only if partial update changes other fields](https://discuss.elastic.co/t/update-timestamp-only-if-partial-update-changes-other-fields/210243)
**Author:** [@Anver\_S](https://discuss.elastic.co/u/Anver_S)\ **Replies:** 0\ **Last updated:** [December 2, 2019, 8:41pm UTC](https://discuss.elastic.co/t/update-timestamp-only-if-partial-update-changes-other-fields/210243 "2019-12-02T20:41:02Z")
Hi, I am making a partial update on a document and I'd want to update a corresponding timestamp field only if any of the other fields defined in partial update have changed. If I explicitly set timestamp field to "now" … --- ## [Data Visualizer - Import/Convert multiple date fields](https://discuss.elastic.co/t/data-visualizer-import-convert-multiple-date-fields/209396)
**Author:** [@bytemedwb](https://discuss.elastic.co/u/bytemedwb)\ **Replies:** 2\ **Last updated:** [December 2, 2019, 8:19pm UTC](https://discuss.elastic.co/t/data-visualizer-import-convert-multiple-date-fields/209396 "2019-12-02T20:19:47Z")
All: Fought this all day and asking for help. I am running 7.4.2 I have a CSV file with two date fields. I want to keep both a keyword and date version of each field. I have reviewed several posts but don't see o… --- ## [Time series visual builder (tsvb): Change the x-axis](https://discuss.elastic.co/t/time-series-visual-builder-tsvb-change-the-x-axis/207743)
**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\ **Replies:** 3\ **Last updated:** [December 2, 2019, 8:09pm UTC](https://discuss.elastic.co/t/time-series-visual-builder-tsvb-change-the-x-axis/207743 "2019-12-02T20:09:15Z")
Hi! Does anyone have insight -- we'd like to change the x-axis of our tsvb graph to use another field. It's a strictly increasing integer associated with our documents. This is possible with the other visualization type… --- ## [Falha ao criar chave de segurança para cada nó do cluster](https://discuss.elastic.co/t/falha-ao-criar-chave-de-seguranca-para-cada-no-do-cluster/209369)
**Author:** [@pedro.pacm](https://discuss.elastic.co/u/pedro.pacm)\ **Replies:** 2\ **Last updated:** [December 2, 2019, 7:23pm UTC](https://discuss.elastic.co/t/falha-ao-criar-chave-de-seguranca-para-cada-no-do-cluster/209369 "2019-12-02T19:23:22Z")
Preciso configurar um cluster elasticsearch para rodar em um cluster Kubernetes. Criei um CA, salvei em um secret, mapeei este secret para um volume... tudo certinho. Porém não consigo gerar a chave para cada nó para con… --- ## [Need help - logstash pipeline isn't working anymore ...?](https://discuss.elastic.co/t/need-help-logstash-pipeline-isnt-working-anymore/210006)
**Author:** [@Cdnvballer](https://discuss.elastic.co/u/Cdnvballer)\ **Replies:** 3\ **Last updated:** [December 2, 2019, 7:08pm UTC](https://discuss.elastic.co/t/need-help-logstash-pipeline-isnt-working-anymore/210006 "2019-12-02T19:08:21Z")
Kibana -- Discover console is showing events coming in, but the indexing is not working right. used to be able to see the fields \[system\]\[syslog\]\[hostname\] and related but now they're gone?? ==02-beats-input.conf == i… --- ## [Where can i find a list of available options for elasticssearch.yml?](https://discuss.elastic.co/t/where-can-i-find-a-list-of-available-options-for-elasticssearch-yml/210232)
**Author:** [@the-vampiire](https://discuss.elastic.co/u/the-vampiire)\ **Replies:** 0\ **Last updated:** [December 2, 2019, 6:51pm UTC](https://discuss.elastic.co/t/where-can-i-find-a-list-of-available-options-for-elasticssearch-yml/210232 "2019-12-02T18:51:04Z")
going through the configuration reference there are a few properties listed. i did find this generic config file on github there was another property discovery.type listed on the docker elasticsearch image example too. … --- ## [Alias not created based on index name - beats output](https://discuss.elastic.co/t/alias-not-created-based-on-index-name-beats-output/210230)
**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\ **Replies:** 0\ **Last updated:** [December 2, 2019, 6:48pm UTC](https://discuss.elastic.co/t/alias-not-created-based-on-index-name-beats-output/210230 "2019-12-02T18:48:09Z")
Hi there, I'm trying to make a custom ILM and Index Template for my incoming filebeat and metricbeat shippers. I've got it now so that the beats send to a custom index in ElasticSearch called "filebeat" and "metricbeat… --- ## [Unable to parse data when I try to POST to Elasticsearch](https://discuss.elastic.co/t/unable-to-parse-data-when-i-try-to-post-to-elasticsearch/210227)
**Author:** [@chari](https://discuss.elastic.co/u/chari)\ **Replies:** 0\ **Last updated:** [December 2, 2019, 6:14pm UTC](https://discuss.elastic.co/t/unable-to-parse-data-when-i-try-to-post-to-elasticsearch/210227 "2019-12-02T18:14:10Z")
page='ABCD' header='{"content":"' footer='", "my-join-field":{"name": "my\_page","parent": "1"}}' !curl -X POST "localhost:9200/docpage/\_doc/?refresh&pretty" -H 'Content-Type: application/json' -d"$header$page$footer" … --- ## [Elastic node crashing with JVM dump file error generated after a while](https://discuss.elastic.co/t/elastic-node-crashing-with-jvm-dump-file-error-generated-after-a-while/209898)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 7\ **Last updated:** [December 2, 2019, 6:10pm UTC](https://discuss.elastic.co/t/elastic-node-crashing-with-jvm-dump-file-error-generated-after-a-while/209898 "2019-12-02T18:10:02Z")
Hello everyone, I've started to notice very recently that some of our ElasticSearch services crash all of a sudden and they generate the attached dumpfile. Gist here. Please help as our nodes are currently restarting v… --- ## [Cumulative Sum irrespective of Time Range](https://discuss.elastic.co/t/cumulative-sum-irrespective-of-time-range/210226)
**Author:** [@Arshia](https://discuss.elastic.co/u/Arshia)\ **Replies:** 0\ **Last updated:** [December 2, 2019, 5:46pm UTC](https://discuss.elastic.co/t/cumulative-sum-irrespective-of-time-range/210226 "2019-12-02T17:46:48Z")
Hi, I have following scenario, where amount is credited every day and I would want to plot cumulative sum of amounts irrespective of time range. For example, 1st Jan 2019 - Amount 50 is credited (Cumulative Sum - 50) … --- ## [Elastic Stack 7.5.0 security update](https://discuss.elastic.co/t/elastic-stack-7-5-0-security-update/210217)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [December 2, 2019, 4:39pm UTC](https://discuss.elastic.co/t/elastic-stack-7-5-0-security-update/210217 "2019-12-02T16:39:13Z")
Metricbeat and Filebeat DSA public key panic (ESA-2019-15) A denial of service flaw when parsing malformed DSA public keys was discovered in Go, the language used to implement Beats. If Metricbeat or Filebeat are config… --- ## [SNMPTRAP input behind F5 load balancer - Service Monitor generating lots of errors in log](https://discuss.elastic.co/t/snmptrap-input-behind-f5-load-balancer-service-monitor-generating-lots-of-errors-in-log/210207)
**Author:** [@marc1](https://discuss.elastic.co/u/marc1)\ **Replies:** 3\ **Last updated:** [December 2, 2019, 4:57pm UTC](https://discuss.elastic.co/t/snmptrap-input-behind-f5-load-balancer-service-monitor-generating-lots-of-errors-in-log/210207 "2019-12-02T16:57:48Z")
Hello, We have a cluster of logstash instances behind an F5 load balancer. Part of the F5 implementation includes a health check that is sent every couple of seconds to make sure the UDP port on the logstash is still up… --- ## [Logstash failing for csv load with double quotes](https://discuss.elastic.co/t/logstash-failing-for-csv-load-with-double-quotes/210213)
**Author:** [@krishna\_bhargav](https://discuss.elastic.co/u/krishna_bhargav)\ **Replies:** 1\ **Last updated:** [December 2, 2019, 4:49pm UTC](https://discuss.elastic.co/t/logstash-failing-for-csv-load-with-double-quotes/210213 "2019-12-02T16:49:06Z")
Am using csv filter pluggin with separator =\> '|', it works if we remove the quotes for "QA". Ay work around to make this work or is this limitation with CSV filter. Here is the sample load data: QA8\_COMMON|1044|AC|101… --- ## [Math Aggregation not working on TSVB with two parameters](https://discuss.elastic.co/t/math-aggregation-not-working-on-tsvb-with-two-parameters/210219)
**Author:** [@BrunoSdeMenezes](https://discuss.elastic.co/u/BrunoSdeMenezes)\ **Replies:** 0\ **Last updated:** [December 2, 2019, 4:47pm UTC](https://discuss.elastic.co/t/math-aggregation-not-working-on-tsvb-with-two-parameters/210219 "2019-12-02T16:47:08Z")
Hello all, I'm trying to use TSVB to calculate a ratio between two fields. If I use only one field works fine, but if I try to divide the first variable by the second variable, this is what I get as return: If I u… --- ## [Error when loading Google Cloud Storage credentials file](https://discuss.elastic.co/t/error-when-loading-google-cloud-storage-credentials-file/94370)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 11\ **Last updated:** [December 2, 2019, 4:14pm UTC](https://discuss.elastic.co/t/error-when-loading-google-cloud-storage-credentials-file/94370 "2019-12-02T16:14:22Z")
I’m trying to get Google Cloud Storage Repository Plugin going: I installed repository-gcs plugin: # /opt/elasticsearch/bin/elasticsearch-plugin install repository-gcs -\> Downloading repository-gcs from elastic \[======… --- ## [Table with field's value as column](https://discuss.elastic.co/t/table-with-fields-value-as-column/209832)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 3\ **Last updated:** [December 2, 2019, 4:13pm UTC](https://discuss.elastic.co/t/table-with-fields-value-as-column/209832 "2019-12-02T16:13:58Z")
Hi! I have in elasticsearch the below data. Is it possible to make a visualization (table ?) like the below one? MemUsed CpuUsed CpuUsed MaxCpuUsed 10:00:00 30 10 5 1 … --- ## [Elastic Search - All Parents and Matching Nested](https://discuss.elastic.co/t/elastic-search-all-parents-and-matching-nested/209088)
**Author:** [@ci\_ms](https://discuss.elastic.co/u/ci_ms)\ **Replies:** 1\ **Last updated:** [December 2, 2019, 3:47pm UTC](https://discuss.elastic.co/t/elastic-search-all-parents-and-matching-nested/209088 "2019-12-02T15:47:52Z")
Our use case is having a list of products and in a nested field have the last purchase date by customer number. When a customer searches for products we want to return all items that match their search term. The inner\_hi… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1746) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1748)