# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1802 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1803 --- ## [Nested objects proximity query](https://discuss.elastic.co/t/nested-objects-proximity-query/206410)
**Author:** [@Trausti\_Dagsson](https://discuss.elastic.co/u/Trausti_Dagsson)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 1:15pm UTC](https://discuss.elastic.co/t/nested-objects-proximity-query/206410 "2019-11-04T13:15:00Z")
Hello everyone. Is it possible to query on nested data and take into account nested items proximity? Let me hopefully make myself understandable: Look at the example below, it is a part of a sentence where each word i… --- ## [Getting error when bulk json files trasfer from logstash to ELK](https://discuss.elastic.co/t/getting-error-when-bulk-json-files-trasfer-from-logstash-to-elk/206409)
**Author:** [@namali](https://discuss.elastic.co/u/namali)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 1:13pm UTC](https://discuss.elastic.co/t/getting-error-when-bulk-json-files-trasfer-from-logstash-to-elk/206409 "2019-11-04T13:13:50Z")
transferring more than 12000 same structured json files to ELK once. when I run logstash config file getting following error. \[2019-11-04T17:47:36,249\]\[ERROR\]\[org.logstash.Logstash \] java.lang.InternalError: java.io.… --- ## [Read JSON array file](https://discuss.elastic.co/t/read-json-array-file/206376)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 2\ **Last updated:** [November 4, 2019, 12:58pm UTC](https://discuss.elastic.co/t/read-json-array-file/206376 "2019-11-04T12:58:48Z")
I am using Logstash 6.5. I want to read the JSON file, process it and end the execution of Logstash. The format of the input file is similar to the following: \[ { "id":"1", "value":"v1" }, { "id":"2", "v… --- ## [Best practice for denormalize Relational database table to Elasticsearch](https://discuss.elastic.co/t/best-practice-for-denormalize-relational-database-table-to-elasticsearch/206404)
**Author:** [@LinJIngYun](https://discuss.elastic.co/u/LinJIngYun)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 12:57pm UTC](https://discuss.elastic.co/t/best-practice-for-denormalize-relational-database-table-to-elasticsearch/206404 "2019-11-04T12:57:49Z")
Greeting everybody. How I can denormalize MongoDB(normalize) collections that have relation between collections (joined) and insert it to Elasticsearch (denormalized data)? For now I have an simplest ways is Create API… --- ## [Logstash start parsing old data when restart happened](https://discuss.elastic.co/t/logstash-start-parsing-old-data-when-restart-happened/206347)
**Author:** [@Suresh\_Pal](https://discuss.elastic.co/u/Suresh_Pal)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 12:42pm UTC](https://discuss.elastic.co/t/logstash-start-parsing-old-data-when-restart-happened/206347 "2019-11-04T12:42:03Z")
Hi Team, I'm facing the issue as logstash parses the old data whenever i restart the logstash service. I don't know why it happened but it impact my use case and logs. Can somebody help me to figure out the issue. I… --- ## [Accessing extended stats bucket in sibling aggregation](https://discuss.elastic.co/t/accessing-extended-stats-bucket-in-sibling-aggregation/206395)
**Author:** [@mcampster](https://discuss.elastic.co/u/mcampster)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 12:15pm UTC](https://discuss.elastic.co/t/accessing-extended-stats-bucket-in-sibling-aggregation/206395 "2019-11-04T12:15:13Z")
I am trying to access the lower and upper thresholds from the extended\_stats\_bucket in another aggregation but not having any joy. (Elastic 5.4). What am I doing wrong? { "size": 0, "aggs": { "byWeeklyDocCount":… --- ## [New cluster vs. existing on Kubernetes](https://discuss.elastic.co/t/new-cluster-vs-existing-on-kubernetes/206389)
**Author:** [@bcbrockway](https://discuss.elastic.co/u/bcbrockway)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 11:43am UTC](https://discuss.elastic.co/t/new-cluster-vs-existing-on-kubernetes/206389 "2019-11-04T11:43:59Z")
Hey, we ran into the same issue as this - Recreate a cluster with the same cluster\_uuid in k8s stetefullset configuration - and will now add a persistent volume to the master nodes but I was wondering what best practices… --- ## [How to separate arriving syslog messages](https://discuss.elastic.co/t/how-to-separate-arriving-syslog-messages/206379)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 10:53am UTC](https://discuss.elastic.co/t/how-to-separate-arriving-syslog-messages/206379 "2019-11-04T10:53:23Z")
Logstash instance is listening on a single port. I tried to separate incoming syslog messages as follows: Two ways with "IN" and "==" operator but logstash doesn't catch one of the IFs. input { syslog { po… --- ## [Picked up from multi-line logs using grok pattern](https://discuss.elastic.co/t/picked-up-from-multi-line-logs-using-grok-pattern/206365)
**Author:** [@kavindu\_manaram](https://discuss.elastic.co/u/kavindu_manaram)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 10:19am UTC](https://discuss.elastic.co/t/picked-up-from-multi-line-logs-using-grok-pattern/206365 "2019-11-04T10:19:10Z")
Here is my one log segment which file beat picked. 2019-10-23 09:53:43.2218 - \[yyy\] \[EF\] Opened connection at 10/23/2019 9:53:43 AM +05:30 2019-10-23 09:53:43.2218 - \[yyy\] \[EF\] \*SELECT Count() FROM INFORMATION\_SCHEMA … --- ## [\[Kibana visualization\] max of sum](https://discuss.elastic.co/t/kibana-visualization-max-of-sum/206201)
**Author:** [@yazid](https://discuss.elastic.co/u/yazid)\ **Replies:** 3\ **Last updated:** [November 4, 2019, 7:28am UTC](https://discuss.elastic.co/t/kibana-visualization-max-of-sum/206201 "2019-11-04T07:28:05Z")
Hi need your help to do a max of sum group by document's date field Assuming I have 2 series , can you please tell me what metric aggregation I have to use to do this: each line is in the separate document Thanks i… --- ## [Is there a way to check ES busy status](https://discuss.elastic.co/t/is-there-a-way-to-check-es-busy-status/206124)
**Author:** [@May](https://discuss.elastic.co/u/May)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 10:17am UTC](https://discuss.elastic.co/t/is-there-a-way-to-check-es-busy-status/206124 "2019-11-04T10:17:58Z")
I am using ES as backend for an app. To avoid ES not responding due to concurrent requests at the same time, is there a way to check ES busy status? --- ## [Does Elasticsearch high-level client offer a method similar to wrapperQuery?](https://discuss.elastic.co/t/does-elasticsearch-high-level-client-offer-a-method-similar-to-wrapperquery/206364)
**Author:** [@Pato\_Python](https://discuss.elastic.co/u/Pato_Python)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 10:17am UTC](https://discuss.elastic.co/t/does-elasticsearch-high-level-client-offer-a-method-similar-to-wrapperquery/206364 "2019-11-04T10:17:43Z")
Does Elasticsearch high-level client offer a method similar to wrapperQuery​(java.lang.String source) that can be used to build highlight property of a search request? Context: We're bulding an API layer that will a… --- ## [Ignoring fields from indexing and updating same fields](https://discuss.elastic.co/t/ignoring-fields-from-indexing-and-updating-same-fields/205760)
**Author:** [@Ivan\_Petrovic](https://discuss.elastic.co/u/Ivan_Petrovic)\ **Replies:** 3\ **Last updated:** [November 4, 2019, 9:54am UTC](https://discuss.elastic.co/t/ignoring-fields-from-indexing-and-updating-same-fields/205760 "2019-11-04T09:54:43Z")
Hi everyone, We are about to release Elasticsearch in production for our time-series analytics data. We have few concerns about optimizing performance. By default ES indexes all fields and we want to prevent that. As … --- ## [Difference between sorting in index level and inside query](https://discuss.elastic.co/t/difference-between-sorting-in-index-level-and-inside-query/205385)
**Author:** [@liorisme6](https://discuss.elastic.co/u/liorisme6)\ **Replies:** 4\ **Last updated:** [November 4, 2019, 9:52am UTC](https://discuss.elastic.co/t/difference-between-sorting-in-index-level-and-inside-query/205385 "2019-11-04T09:52:18Z")
Hi, What's the difference between sorting according to a specific field (adding a sort clause in the query itself) and adding sorting in the index definition (meaning, sorting it on the segment level), without adding so… --- ## [How to use "ECS logging Java"?](https://discuss.elastic.co/t/how-to-use-ecs-logging-java/206348)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 4\ **Last updated:** [November 4, 2019, 9:08am UTC](https://discuss.elastic.co/t/how-to-use-ecs-logging-java/206348 "2019-11-04T09:08:40Z")
I add log4j2-ecs-layout dependency to the application log4j2.xml COMMAND: ————————————————————— java -javaagent:/root/elastic-apm-agent-1.11.0.jar -Delastic.apm.service\_name=my-cool-service -Delastic.apm.enab… --- ## [Roles, users and viewing the dashboard](https://discuss.elastic.co/t/roles-users-and-viewing-the-dashboard/205826)
**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\ **Replies:** 2\ **Last updated:** [November 4, 2019, 8:55am UTC](https://discuss.elastic.co/t/roles-users-and-viewing-the-dashboard/205826 "2019-11-04T08:55:19Z")
I have two dashboards - one displaying data from the client system and one displaying data from Kibanas own .security index. I have made two roles: user\_data user\_security I want the people in "user\_data" to be able … --- ## [Increase Elasticsearch maximum dimensions for sparse vectors](https://discuss.elastic.co/t/increase-elasticsearch-maximum-dimensions-for-sparse-vectors/204808)
**Author:** [@Pablo\_gps](https://discuss.elastic.co/u/Pablo_gps)\ **Replies:** 2\ **Last updated:** [November 4, 2019, 8:22am UTC](https://discuss.elastic.co/t/increase-elasticsearch-maximum-dimensions-for-sparse-vectors/204808 "2019-11-04T08:22:43Z")
Using sparse vectors in elastic search has two dimensional limits. On the one hand, vectors should not have more than 1024 elements. This can be solved, as seen in this question. The second limit is not the number of e… --- ## [ES7.4 returns unsupported symbol in geohash](https://discuss.elastic.co/t/es7-4-returns-unsupported-symbol-in-geohash/206306)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 8:10am UTC](https://discuss.elastic.co/t/es7-4-returns-unsupported-symbol-in-geohash/206306 "2019-11-04T08:10:44Z")
Mapping defined as this: "source": { "properties": { "address": { "type": "keyword", "fields": { "text": { "type" : "text" } } }, "ip": { "type": "ip" }, "… --- ## [Replace existing record if \_id matches (filebeat)](https://discuss.elastic.co/t/replace-existing-record-if-id-matches-filebeat/206351)
**Author:** [@avizen-j](https://discuss.elastic.co/u/avizen-j)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 7:58am UTC](https://discuss.elastic.co/t/replace-existing-record-if-id-matches-filebeat/206351 "2019-11-04T07:58:00Z")
Hello, Lets say I have 3 records with same correlation id. The only thing that is different is statuses of these records (active, errornous, issued). I want the flow to be like that: Example: 1000 records are generat… --- ## [Filebeat dashboard create failing](https://discuss.elastic.co/t/filebeat-dashboard-create-failing/203699)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 9\ **Last updated:** [November 4, 2019, 7:19am UTC](https://discuss.elastic.co/t/filebeat-dashboard-create-failing/203699 "2019-11-04T07:19:40Z")
Hi, I installed Elastic and Kibana on one server and Filebeat on another. Running file except for 'sudo filebeat setup -e' I changed 'localhost' to the right IP in elastic, kibana and filebeat yml's but still this err… --- ## [Collecting specific data from within each virtual machine](https://discuss.elastic.co/t/collecting-specific-data-from-within-each-virtual-machine/206309)
**Author:** [@greavette](https://discuss.elastic.co/u/greavette)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 7:17am UTC](https://discuss.elastic.co/t/collecting-specific-data-from-within-each-virtual-machine/206309 "2019-11-04T07:17:28Z")
Hello Forum, I've just begun to use Kibana (ELK) so my understanding is very limited at our company but I'm hoping this forum can educate me or lead me in the right direction. I have a need to collect various data fro… --- ## [Connection not establishing between logstash and elastic search](https://discuss.elastic.co/t/connection-not-establishing-between-logstash-and-elastic-search/206333)
**Author:** [@Gowtham\_Gandham](https://discuss.elastic.co/u/Gowtham_Gandham)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 6:14am UTC](https://discuss.elastic.co/t/connection-not-establishing-between-logstash-and-elastic-search/206333 "2019-11-04T06:14:13Z")
version: '3.5' services: elasticsearch: build: context: elasticsearch/ volumes: - ./elasticsearch/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml:ro ports: - '9200:9200' - '9300:9300' … --- ## [Visualization with conditional aggregation](https://discuss.elastic.co/t/visualization-with-conditional-aggregation/206142)
**Author:** [@earthpatipon](https://discuss.elastic.co/u/earthpatipon)\ **Replies:** 6\ **Last updated:** [November 4, 2019, 5:18am UTC](https://discuss.elastic.co/t/visualization-with-conditional-aggregation/206142 "2019-11-04T05:18:49Z")
Hi there, Let's say I define the index like below PUT my\_index/\_doc/1 { "user": \[ { "first": "John", "last": "Frank" }, { "first": "Hero", "last": "Tim" } \] } PUT my\_index/\_… --- ## [VIsualize 2 array in data table](https://discuss.elastic.co/t/visualize-2-array-in-data-table/206017)
**Author:** [@DawitCh](https://discuss.elastic.co/u/DawitCh)\ **Replies:** 2\ **Last updated:** [November 4, 2019, 3:47am UTC](https://discuss.elastic.co/t/visualize-2-array-in-data-table/206017 "2019-11-04T03:47:24Z")
Hi, I'm trying to create a data table visualization from a log that contains 2 arrays. For example, the log has 2 fields which are a and b. In the Discover page, it will show field value a aa,bb,c… --- ## [Simple nested query returns no matches](https://discuss.elastic.co/t/simple-nested-query-returns-no-matches/206303)
**Author:** [@ChristoKiwi](https://discuss.elastic.co/u/ChristoKiwi)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 2:19am UTC](https://discuss.elastic.co/t/simple-nested-query-returns-no-matches/206303 "2019-11-04T02:19:18Z")
My first post, please be gentle. I have 100 Million records in an AWS ElasticSearch instance running 6.8, with the mapping: "mappings":{ "message":{ "properties":{ "messageID":{ "type":"long" }, "conten… --- ## [Any solutions ? Please share me](https://discuss.elastic.co/t/any-solutions-please-share-me/206263)
**Author:** [@pbona](https://discuss.elastic.co/u/pbona)\ **Replies:** 3\ **Last updated:** [November 3, 2019, 11:18pm UTC](https://discuss.elastic.co/t/any-solutions-please-share-me/206263 "2019-11-03T23:18:03Z")
\[root@elastic logstash\]# tail -f /var/log/logstash/logstash-plain.log \[2019-10-30T04:39:22,142\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>#\ **Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\ **Replies:** 12\ **Last updated:** [November 3, 2019, 11:05pm UTC](https://discuss.elastic.co/t/date-matching/205333 "2019-11-03T23:05:39Z") I have a CSV and I have got it indexed in ELASTICSEARCH. The issue is that I have the following set up and how can I verify that the dates are timestamps? # Sample Logstash configuration for creating a simple # Beats -\> … --- ## [Configure logstash input jdbc plugin to disable autocommit for postgresql connection](https://discuss.elastic.co/t/configure-logstash-input-jdbc-plugin-to-disable-autocommit-for-postgresql-connection/206307)
**Author:** [@turntwo463](https://discuss.elastic.co/u/turntwo463)\ **Replies:** 0\ **Last updated:** [November 3, 2019, 11:02pm UTC](https://discuss.elastic.co/t/configure-logstash-input-jdbc-plugin-to-disable-autocommit-for-postgresql-connection/206307 "2019-11-03T23:02:55Z")
I've come across the issue where the fetch size cannot be applied for postgresql jdbc connections since the connections default to autocommit, as reported here: Looking at the documentation I see that under the sequel… --- ## [Custom grok pattern to pull field from large text](https://discuss.elastic.co/t/custom-grok-pattern-to-pull-field-from-large-text/202946)
**Author:** [@c95mbq](https://discuss.elastic.co/u/c95mbq)\ **Replies:** 1\ **Last updated:** [November 3, 2019, 9:29pm UTC](https://discuss.elastic.co/t/custom-grok-pattern-to-pull-field-from-large-text/202946 "2019-11-03T21:29:52Z")
Apologies for the poor topic, it was the best I could do, sad as that is. I'm really struggling with this but here's what I'm trying to do. I have a large number of documents that are in RTF format. The documents themse… --- ## [Bad number display regardless of Mapping used (float, double)](https://discuss.elastic.co/t/bad-number-display-regardless-of-mapping-used-float-double/206297)
**Author:** [@crpj](https://discuss.elastic.co/u/crpj)\ **Replies:** 0\ **Last updated:** [November 3, 2019, 4:53pm UTC](https://discuss.elastic.co/t/bad-number-display-regardless-of-mapping-used-float-double/206297 "2019-11-03T16:53:39Z")
Hello all :grinning: After researching and testing I could not figure out why I am still getting wrong numbers returned by queries regardless of the mapping used. E.g. 8.217157748E9 I tried float and double. For the re… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1801) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1803)