# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1761 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1762 --- ## [ALL fields from 1 day](https://discuss.elastic.co/t/all-fields-from-1-day/209290)
**Author:** [@Arnodl](https://discuss.elastic.co/u/Arnodl)\ **Replies:** 0\ **Last updated:** [November 25, 2019, 11:07am UTC](https://discuss.elastic.co/t/all-fields-from-1-day/209290 "2019-11-25T11:07:54Z")
hey, how can I display all the fields that are in the index from one day. I am looking for fields that are not in ECS --- ## [What is adjust\_pure\_negative?](https://discuss.elastic.co/t/what-is-adjust-pure-negative/209187)
**Author:** [@chanakagl](https://discuss.elastic.co/u/chanakagl)\ **Replies:** 5\ **Last updated:** [November 25, 2019, 10:41am UTC](https://discuss.elastic.co/t/what-is-adjust-pure-negative/209187 "2019-11-25T10:41:00Z")
Can someone please explain what does "adjust\_pure\_negative" do exactly. I couldn't find any documentation regarding on this. I'm using Elasticsearch 6.8.2 version. --- ## [ECK data node type selection](https://discuss.elastic.co/t/eck-data-node-type-selection/209277)
**Author:** [@Komal\_Agarwal](https://discuss.elastic.co/u/Komal_Agarwal)\ **Replies:** 1\ **Last updated:** [November 25, 2019, 10:37am UTC](https://discuss.elastic.co/t/eck-data-node-type-selection/209277 "2019-11-25T10:37:35Z")
We have a cluster holding ~400gbs of data. We have divided this using 6 data nodes(2 nodes X 3 zones). Currently, in Elastic Cloud, all these are I3 machines. We want to understand what would be better in ECK - I3 nodes … --- ## [Multi-Match Bool Prefix Query - search query for search-as-you-type and keyword fields](https://discuss.elastic.co/t/multi-match-bool-prefix-query-search-query-for-search-as-you-type-and-keyword-fields/209274)
**Author:** [@lwronski](https://discuss.elastic.co/u/lwronski)\ **Replies:** 0\ **Last updated:** [November 25, 2019, 10:07am UTC](https://discuss.elastic.co/t/multi-match-bool-prefix-query-search-query-for-search-as-you-type-and-keyword-fields/209274 "2019-11-25T10:07:19Z")
Hi, I want to find out, how multi match works for search-as-you-type and keyword type fields in one query. If I make multi match query on only search-as-you-type fields, I get expected result. If only, I make query whi… --- ## [Elastic/Elasticsearch community members are invited to take part in the Express 2019 F/OSS-Firms Survey!](https://discuss.elastic.co/t/elastic-elasticsearch-community-members-are-invited-to-take-part-in-the-express-2019-f-oss-firms-survey/209272)
**Author:** [@moneil](https://discuss.elastic.co/u/moneil)\ **Replies:** 0\ **Last updated:** [November 25, 2019, 10:02am UTC](https://discuss.elastic.co/t/elastic-elasticsearch-community-members-are-invited-to-take-part-in-the-express-2019-f-oss-firms-survey/209272 "2019-11-25T10:02:45Z")
Hi everyone We are looking for participants to help us with a study on the sustainability of free and open source software, ‘Mapping the co-production of digital infrastructure by peer projects and firms’, which is fund… --- ## [Kibana page is not loading properly in any browser](https://discuss.elastic.co/t/kibana-page-is-not-loading-properly-in-any-browser/209251)
**Author:** [@Khurram](https://discuss.elastic.co/u/Khurram)\ **Replies:** 1\ **Last updated:** [November 25, 2019, 9:56am UTC](https://discuss.elastic.co/t/kibana-page-is-not-loading-properly-in-any-browser/209251 "2019-11-25T09:56:03Z")
I had to restart kibana server and restarted kibana services but after that kibana page is not loading properly, i am attaching the screenshots, i have restarted the kibana services, it is showing logs from wazuh server … --- ## [How to change size during scroll](https://discuss.elastic.co/t/how-to-change-size-during-scroll/209265)
**Author:** [@shashwat001](https://discuss.elastic.co/u/shashwat001)\ **Replies:** 0\ **Last updated:** [November 25, 2019, 9:34am UTC](https://discuss.elastic.co/t/how-to-change-size-during-scroll/209265 "2019-11-25T09:34:56Z")
I am running scroll on multiple indexes which are built on timeseries data. I have an index for each day with a common prefix in indexname. Earlier I was giving index name wildcard to serve scroll but since it was using … --- ## [How to add 'key:{a:b,c:d}' by using add\_field](https://discuss.elastic.co/t/how-to-add-key-a-b-c-d-by-using-add-field/209261)
**Author:** [@muguaofyu](https://discuss.elastic.co/u/muguaofyu)\ **Replies:** 0\ **Last updated:** [November 25, 2019, 9:29am UTC](https://discuss.elastic.co/t/how-to-add-key-a-b-c-d-by-using-add-field/209261 "2019-11-25T09:29:15Z")
i want to add 'key:{a:b,c:d}' to es by using add\_field. how to achieve it? i want to see the above. --- ## [Elastic Maps: How to set the fill color of the point feature according to defined thresholds?](https://discuss.elastic.co/t/elastic-maps-how-to-set-the-fill-color-of-the-point-feature-according-to-defined-thresholds/208898)
**Author:** [@Volkan\_E](https://discuss.elastic.co/u/Volkan_E)\ **Replies:** 2\ **Last updated:** [November 25, 2019, 9:27am UTC](https://discuss.elastic.co/t/elastic-maps-how-to-set-the-fill-color-of-the-point-feature-according-to-defined-thresholds/208898 "2019-11-25T09:27:53Z")
Hi, I've built a map showing the network statistics of some clients. I want to define my own critical threshold level, or a configurable static scale so that Kibana will color it red only if it is above the given thresh… --- ## [Elasticsearch index name with date/time](https://discuss.elastic.co/t/elasticsearch-index-name-with-date-time/209259)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 0\ **Last updated:** [November 25, 2019, 9:26am UTC](https://discuss.elastic.co/t/elasticsearch-index-name-with-date-time/209259 "2019-11-25T09:26:35Z")
Hi I have created a index as "test-000001" and alias as "test\_search" I have given rollover action as below action: rollover description: \>- Rollover the index associated with alias 'aliasname', which should be in t… --- ## [How to rename a field after extracting it from another field](https://discuss.elastic.co/t/how-to-rename-a-field-after-extracting-it-from-another-field/209050)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 6\ **Last updated:** [November 25, 2019, 9:14am UTC](https://discuss.elastic.co/t/how-to-rename-a-field-after-extracting-it-from-another-field/209050 "2019-11-25T09:14:48Z")
kv { source =\> "remain" field\_split =\> "," value\_split =\> "=" } mutate { rename =\> \["USERNAME", "user.name" \] … --- ## [Watcher alert when specific event logged against unique IP](https://discuss.elastic.co/t/watcher-alert-when-specific-event-logged-against-unique-ip/209252)
**Author:** [@elastic\_user.pk](https://discuss.elastic.co/u/elastic_user.pk)\ **Replies:** 0\ **Last updated:** [November 25, 2019, 8:54am UTC](https://discuss.elastic.co/t/watcher-alert-when-specific-event-logged-against-unique-ip/209252 "2019-11-25T08:54:49Z")
Hi, I am new to Elasticsearch and want to configure alerts when there are more than X number of failed login attempts from unique IP (i.e alert should not be triggered when total failed login attempts are more than X. O… --- ## [Trying to find difference between two column for two different rows for a time series data](https://discuss.elastic.co/t/trying-to-find-difference-between-two-column-for-two-different-rows-for-a-time-series-data/209250)
**Author:** [@Alok\_Singh](https://discuss.elastic.co/u/Alok_Singh)\ **Replies:** 0\ **Last updated:** [November 25, 2019, 8:47am UTC](https://discuss.elastic.co/t/trying-to-find-difference-between-two-column-for-two-different-rows-for-a-time-series-data/209250 "2019-11-25T08:47:10Z")
Let say we have an indexed table in Kibana with columns as "time", "svalue", "lvalue". Now, say they have values as (t1,S1,L1), (t2,S2,L2),(t3,S3,L3) and so on. I need to add a watcher to check if (Ln - Sn+1). = 0 , th… --- ## [How to see the surrounding documents in kibana v7.4.2 log tab](https://discuss.elastic.co/t/how-to-see-the-surrounding-documents-in-kibana-v7-4-2-log-tab/208834)
**Author:** [@111244](https://discuss.elastic.co/u/111244)\ **Replies:** 2\ **Last updated:** [November 25, 2019, 8:37am UTC](https://discuss.elastic.co/t/how-to-see-the-surrounding-documents-in-kibana-v7-4-2-log-tab/208834 "2019-11-25T08:37:13Z")
how to see the surrounding documents in kibana v7.4.2 log tab? i can't find this link --- ## [Is there a way to limit RES memory used by ES](https://discuss.elastic.co/t/is-there-a-way-to-limit-res-memory-used-by-es/209100)
**Author:** [@rnataraja](https://discuss.elastic.co/u/rnataraja)\ **Replies:** 9\ **Last updated:** [November 25, 2019, 8:08am UTC](https://discuss.elastic.co/t/is-there-a-way-to-limit-res-memory-used-by-es/209100 "2019-11-25T08:08:57Z")
ES 6.8.3 I understand from reading up through forum that ES will use more than actually the Heap Max. On our systems we see that if its given 32Gig of Max Heap. It slowly keeps increasing and consumes a lot more than 32… --- ## [Boosting для блоков should](https://discuss.elastic.co/t/boosting-should/209083)
**Author:** [@surkis](https://discuss.elastic.co/u/surkis)\ **Replies:** 2\ **Last updated:** [November 25, 2019, 8:00am UTC](https://discuss.elastic.co/t/boosting-should/209083 "2019-11-25T08:00:54Z")
Есть способ для определения приоритета блоков should? Или бустинга по них? --- ## [Percentage format for actual percentage value](https://discuss.elastic.co/t/percentage-format-for-actual-percentage-value/209123)
**Author:** [@sera123k](https://discuss.elastic.co/u/sera123k)\ **Replies:** 1\ **Last updated:** [November 25, 2019, 7:46am UTC](https://discuss.elastic.co/t/percentage-format-for-actual-percentage-value/209123 "2019-11-25T07:46:48Z")
Hello, I am receiving CPU percentages from some devices and they are reporting their utilization as 32.0 for 32% or 5 for 5% but when I change the field format to percentage it changes to 3,200% or 500%. I've been search… --- ## [LEAK: ByteBuf.release() was not called before it's garbage-collected](https://discuss.elastic.co/t/leak-bytebuf-release-was-not-called-before-its-garbage-collected/207063)
**Author:** [@Mac\_Oscar](https://discuss.elastic.co/u/Mac_Oscar)\ **Replies:** 4\ **Last updated:** [November 25, 2019, 7:37am UTC](https://discuss.elastic.co/t/leak-bytebuf-release-was-not-called-before-its-garbage-collected/207063 "2019-11-25T07:37:20Z")
Hi, I have a problem I have never encountered, so I need some help. My es cluster has two masters and four data nodes. Master 1 is the standby node and it is also the problem node. Everything is working normally！！！ … --- ## [Extract nested fields into new fields](https://discuss.elastic.co/t/extract-nested-fields-into-new-fields/209026)
**Author:** [@a.kuz](https://discuss.elastic.co/u/a.kuz)\ **Replies:** 5\ **Last updated:** [November 25, 2019, 7:28am UTC](https://discuss.elastic.co/t/extract-nested-fields-into-new-fields/209026 "2019-11-25T07:28:23Z")
Hi! I have json input like: Summary{ "Parameters": \[ { "Name": "SentTo", "Value": "User User" }, { "Name": "BlindCopyTo", "Value": … --- ## [Help needed for field to template date mapping](https://discuss.elastic.co/t/help-needed-for-field-to-template-date-mapping/209120)
**Author:** [@SathishPrakasam](https://discuss.elastic.co/u/SathishPrakasam)\ **Replies:** 1\ **Last updated:** [November 22, 2019, 9:34pm UTC](https://discuss.elastic.co/t/help-needed-for-field-to-template-date-mapping/209120 "2019-11-22T21:34:06Z")
Hi team, My date mapping from logstash, logstash: date { match =\> \[ "logtime" , "yyyy-MM-dd HH:mm:ss" \] timezone =\> UTC } Field mapping in the template: "logtime": {"type": "date","format":"yyyy-MM-dd HH:mm:ss"}… --- ## [Multi tenant Elasticsearch deployment - storage usage](https://discuss.elastic.co/t/multi-tenant-elasticsearch-deployment-storage-usage/209098)
**Author:** [@Ravi\_Narayan](https://discuss.elastic.co/u/Ravi_Narayan)\ **Replies:** 1\ **Last updated:** [November 25, 2019, 6:42am UTC](https://discuss.elastic.co/t/multi-tenant-elasticsearch-deployment-storage-usage/209098 "2019-11-25T06:42:48Z")
Hello, I have a multi tenant environment where the indexes are shared between tenants.The tenant data is secured using filtered alias . But I need a way to track the storage used by each tenant in order to move their d… --- ## [Elastic shard question?](https://discuss.elastic.co/t/elastic-shard-question/209213)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 2\ **Last updated:** [November 25, 2019, 5:45am UTC](https://discuss.elastic.co/t/elastic-shard-question/209213 "2019-11-25T05:45:55Z")
Hi everyone I have a question upon shard in elasticsearch First how many primary shard should i have in an index Second will there be an increase in searching time if i set many primary shard in an index Thank you. --- ## [LogStash Codec](https://discuss.elastic.co/t/logstash-codec/209210)
**Author:** [@Yohan\_al](https://discuss.elastic.co/u/Yohan_al)\ **Replies:** 0\ **Last updated:** [November 25, 2019, 2:48am UTC](https://discuss.elastic.co/t/logstash-codec/209210 "2019-11-25T02:48:34Z")
Hi, I m facing an issue with a spring boot 2 project and logstash. It seems i use the wrong codec on my TCP configuration. tcp { port =\> 8050 codec =\> "json" } When i checked logstash logs , i see that my log is s… --- ## [How to set moving average in TSVB](https://discuss.elastic.co/t/how-to-set-moving-average-in-tsvb/208996)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 2\ **Last updated:** [November 25, 2019, 2:29am UTC](https://discuss.elastic.co/t/how-to-set-moving-average-in-tsvb/208996 "2019-11-25T02:29:40Z")
I am trying to set moving average that set in timelion in TSVB. window is the time unit in timelion, what is the unit of window in TSVB? What if I want to set window to yesterday? timelion query: .es(index=indexname… --- ## [Monitoring Docker application](https://discuss.elastic.co/t/monitoring-docker-application/209196)
**Author:** [@gopikrishnan](https://discuss.elastic.co/u/gopikrishnan)\ **Replies:** 1\ **Last updated:** [November 25, 2019, 1:16am UTC](https://discuss.elastic.co/t/monitoring-docker-application/209196 "2019-11-25T01:16:50Z")
Hi Team, Kindly help me to understand whether elastic APM is capable of monitoring Docker application running on Linux machine and if yes then how to instrument it. Thanks, Gopikrishnan --- ## [S3の情報を取得する方法](https://discuss.elastic.co/t/s3/209205)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 0\ **Last updated:** [November 25, 2019, 12:43am UTC](https://discuss.elastic.co/t/s3/209205 "2019-11-25T00:43:02Z")
質問を失礼させて頂きます。 S3→SQS→Filebeat→Logstash→Elasticsearchの連携時、 filebeat.ymlでS3バケット名・ファイル名を条件にindex名を振り分けたい場合、記述内容は以下で合っていますでしょうか。 #現状、filebeat→Logstashの連携時にエラーが出力されています。 #別処理にてfilebeat→Logstashの疎通はとれており、ymlを編集したところ疎通出来なくな… --- ## [INDEX作成時に自動でAliasを設定したい](https://discuss.elastic.co/t/index-alias/207991)
**Author:** [@sat1100](https://discuss.elastic.co/u/sat1100)\ **Replies:** 2\ **Last updated:** [November 25, 2019, 12:38am UTC](https://discuss.elastic.co/t/index-alias/207991 "2019-11-25T00:38:48Z")
Logstashのtest.confのoutput出力で「index =\> "test-%{+yyyy.MM.dd}"」と記載し、 Elasticsearchへindexが作成されますが、コマンドラインで設定する以外にelasticseach.ymlに Aliasを記載して設定する事は実現可能でしょうか。 もし、可能であれば記載方法等ご教示お願いします。 --- ## [Network Latency](https://discuss.elastic.co/t/network-latency/208923)
**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\ **Replies:** 1\ **Last updated:** [November 25, 2019, 12:37am UTC](https://discuss.elastic.co/t/network-latency/208923 "2019-11-25T00:37:00Z")
Hello I need to graph/measure network latency, which beat should I use? metricbeat? heartbeat? packetbeat? is there any dashboard already for that? any examples around here? Thank you very much!! really appreciated yo… --- ## [【Filebeat】s3のログ情報を取得する方法](https://discuss.elastic.co/t/filebeat-s3/208795)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 7:08am UTC](https://discuss.elastic.co/t/filebeat-s3/208795 "2019-11-21T07:08:07Z")
お世話になります。 Filebeatのs3 inputについて質問です。 公式ドキュメント s3にログをアップロード後、s3→SQS→Filebeatの疎通を実施しています。 Filebeatのymlにて、ログがアップロードされたs3のバケット名、ファイル名を取得する方法があれば教えてください。 取得理由：バケット名、ファイル名によりindex名を振り分けたいため情報が必要です。 SQSに格納されているメッセージには以下の情… --- ## [Удаление дубликатов документов в индексе](https://discuss.elastic.co/t/topic/209199)
**Author:** [@111229](https://discuss.elastic.co/u/111229)\ **Replies:** 1\ **Last updated:** [November 24, 2019, 10:10pm UTC](https://discuss.elastic.co/t/topic/209199 "2019-11-24T22:10:03Z")
Коллеги, доброго! Есть SQL-запрос, который добавляет в индекс значения посредством Logstash jdbc{} результат запроса помещается в индекс. Запрос может выводить одинаковые строчки - в результате у меня в индексе дублиро… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1760) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1762)