# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1806 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1807 --- ## [Best practices for multi language search and index](https://discuss.elastic.co/t/best-practices-for-multi-language-search-and-index/206086)
**Author:** [@ixsorribas](https://discuss.elastic.co/u/ixsorribas)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 6:35pm UTC](https://discuss.elastic.co/t/best-practices-for-multi-language-search-and-index/206086 "2019-10-31T18:35:34Z")
Hi, i´m new :slight\_smile: I have the next scenario: a document with a nested field that includes one or more "blocks" with a text field each. That text field could be in one of four different languages. (I know the lan… --- ## [Multi-match query with boolean prefix on search\_as\_you\_type is always 1.0](https://discuss.elastic.co/t/multi-match-query-with-boolean-prefix-on-search-as-you-type-is-always-1-0/206049)
**Author:** [@2DSharp](https://discuss.elastic.co/u/2DSharp)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 6:28pm UTC](https://discuss.elastic.co/t/multi-match-query-with-boolean-prefix-on-search-as-you-type-is-always-1-0/206049 "2019-10-31T18:28:00Z")
Hi, I am trying to set up a search system on my java application. I have tried using MatchQuery for searches however I am trying to add a suggestions feature that will suggest autocompletion results. I have used the ht… --- ## [EOFError: End of file reached](https://discuss.elastic.co/t/eoferror-end-of-file-reached/204933)
**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\ **Replies:** 3\ **Last updated:** [October 31, 2019, 5:52pm UTC](https://discuss.elastic.co/t/eoferror-end-of-file-reached/204933 "2019-10-31T17:52:33Z")
Hi, I am routing logstash logs to another logstash using TCP, there is no connection issue between them and I am able to telnet. but while sending the logs getting below error. Is that a bug ? \[2019-10-22T14:50:48,395\]… --- ## [Important logstash metrics to monitor](https://discuss.elastic.co/t/important-logstash-metrics-to-monitor/205941)
**Author:** [@funlearning321](https://discuss.elastic.co/u/funlearning321)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 5:45pm UTC](https://discuss.elastic.co/t/important-logstash-metrics-to-monitor/205941 "2019-10-31T17:45:06Z")
Hello, What are the important logstash performance metrics to be monitored using watcher or zabbix ? Thanks --- ## [Cannot access Kibana remotely or on local machine](https://discuss.elastic.co/t/cannot-access-kibana-remotely-or-on-local-machine/196986)
**Author:** [@Terran](https://discuss.elastic.co/u/Terran)\ **Replies:** 15\ **Last updated:** [October 31, 2019, 5:33pm UTC](https://discuss.elastic.co/t/cannot-access-kibana-remotely-or-on-local-machine/196986 "2019-10-31T17:33:56Z")
I have installed ES in a 3 node cluster. I have Kibana on #3 as well. ES is running fine as far as I can tell. Kibana installed and started fine. I have edited the .yml file with the following Contents of kibana.yml … --- ## [Journalbeat and packetbeat config separation](https://discuss.elastic.co/t/journalbeat-and-packetbeat-config-separation/206057)
**Author:** [@micas](https://discuss.elastic.co/u/micas)\ **Replies:** 3\ **Last updated:** [October 31, 2019, 4:54pm UTC](https://discuss.elastic.co/t/journalbeat-and-packetbeat-config-separation/206057 "2019-10-31T16:54:15Z")
All the other beats support some sort of "conf.d/\*.yml" way of separating the configs. I cannot find documentation of journalbeat and packetbeat supporting a similar feature. Is it possible? how can it be done? --- ## [Logsatsh String To Date convertion](https://discuss.elastic.co/t/logsatsh-string-to-date-convertion/205705)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 4:48pm UTC](https://discuss.elastic.co/t/logsatsh-string-to-date-convertion/205705 "2019-10-31T16:48:07Z")
Hello Guys , so lately i've trying to insert some data from txt file into elasticsearch index , but i'm having a problem converting string field to date type , here is my logsatsh conf : input { file { path =\> "C:/Ela… --- ## [How to add column headings to csv](https://discuss.elastic.co/t/how-to-add-column-headings-to-csv/206082)
**Author:** [@namali](https://discuss.elastic.co/u/namali)\ **Replies:** 0\ **Last updated:** [October 31, 2019, 4:42pm UTC](https://discuss.elastic.co/t/how-to-add-column-headings-to-csv/206082 "2019-10-31T16:42:51Z")
transferred json file to csv from logstash. but there is no column headings in csv files. how can I add column headings to csv files while transfer json to csv. --- ## [Unpriviledge image](https://discuss.elastic.co/t/unpriviledge-image/206072)
**Author:** [@jof300](https://discuss.elastic.co/u/jof300)\ **Replies:** 0\ **Last updated:** [October 31, 2019, 3:43pm UTC](https://discuss.elastic.co/t/unpriviledge-image/206072 "2019-10-31T15:43:23Z")
Hi, I am trying to deploy logtash on Openshift. As you know, Openshift doesn't allow to run containers in root. Result is that it can't open /usr/share/logstash/config/logtash.yml Is there any unpriviledged logtash im… --- ## [Winlogbeat Evt 4741 4742 4743 - Computer Management Events](https://discuss.elastic.co/t/winlogbeat-evt-4741-4742-4743-computer-management-events/206069)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 0\ **Last updated:** [October 31, 2019, 3:23pm UTC](https://discuss.elastic.co/t/winlogbeat-evt-4741-4742-4743-computer-management-events/206069 "2019-10-31T15:23:32Z")
Hi, I'm working now with Events related to creation, changing and deletion of computers in windows Active directory. In these events the fields TargetUserSID, TargetUserName and TargetDomainName represents the SID,Name… --- ## [Not able to create the filter with correct pattern](https://discuss.elastic.co/t/not-able-to-create-the-filter-with-correct-pattern/205956)
**Author:** [@Bharath\_Pusuluri](https://discuss.elastic.co/u/Bharath_Pusuluri)\ **Replies:** 4\ **Last updated:** [October 31, 2019, 3:16pm UTC](https://discuss.elastic.co/t/not-able-to-create-the-filter-with-correct-pattern/205956 "2019-10-31T15:16:38Z")
input file - {"apps":{"app":\[{"id":"application\_1571691267503\_939654","user":"Z013J5W","name":"HIVE-d9904734e7fa7249f0","queue":"default","state":"RUNNING","finalStatus":"UNDEFINED","progress":55.259087}\],"logAggregatio… --- ## [Медленный unified highlighting](https://discuss.elastic.co/t/unified-highlighting/205653)
**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\ **Replies:** 25\ **Last updated:** [October 31, 2019, 3:03pm UTC](https://discuss.elastic.co/t/unified-highlighting/205653 "2019-10-31T15:03:02Z")
День добрый! Очень медленно работает unified highlighting если в analizer используется hunspell filter. Я понимаю, что многое зависит от словаря... но в моей проблеме задерживается подсветка, а не поиск. Причем очень с… --- ## [How to determine a difference in results from the same query?](https://discuss.elastic.co/t/how-to-determine-a-difference-in-results-from-the-same-query/206063)
**Author:** [@Bart\_de\_Man](https://discuss.elastic.co/u/Bart_de_Man)\ **Replies:** 0\ **Last updated:** [October 31, 2019, 2:44pm UTC](https://discuss.elastic.co/t/how-to-determine-a-difference-in-results-from-the-same-query/206063 "2019-10-31T14:44:41Z")
My settings: Elasticsearch version ( bin/elasticsearch --version ): 5.6.11 Plugins installed : JVM version ( java -version ): openjdk version "1.8.0\_222" OpenJDK Runtime Environment (build 1.8.0\_222-8u222-b10-1ubun… --- ## [logstashとElasticsearch Serviceの連携について](https://discuss.elastic.co/t/logstash-elasticsearch-service/206027)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 2:33pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-service/206027 "2019-10-31T14:33:32Z")
logstashを使用してElasticsearch Service上のdeploymentに対して indexの作成や更新等を行いたいと考えています。 docker等でサーバを立ててlogstashのイメージをpullしてきた場合、logstashからindexをElasticsearch Service上のdeploymentへ流し込む際の指定はlogstash.yml上にCloud IDとUser ID、PWだけでよいのでしょ… --- ## [Replace field value by part of output message](https://discuss.elastic.co/t/replace-field-value-by-part-of-output-message/206011)
**Author:** [@kavindu\_manaram](https://discuss.elastic.co/u/kavindu_manaram)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 2:31pm UTC](https://discuss.elastic.co/t/replace-field-value-by-part-of-output-message/206011 "2019-10-31T14:31:09Z")
I want to replace level filed value by output message "levelName" 's value. Is it possible to do this in logstash conf? filter { if \[fields\]\[level\] == "default" { grok { match =\> {"message" =\> \["(?m)%{TIMESTAMP… --- ## [Logstash file-input doesn't pick up new files](https://discuss.elastic.co/t/logstash-file-input-doesnt-pick-up-new-files/206026)
**Author:** [@Gordon\_Thompson](https://discuss.elastic.co/u/Gordon_Thompson)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 2:15pm UTC](https://discuss.elastic.co/t/logstash-file-input-doesnt-pick-up-new-files/206026 "2019-10-31T14:15:53Z")
We have a simple logstash 7.1.1 installation on a hardened Redhat 7.7 pipelines.yml - pipeline.id: synonyms-ingest pipeline.workers: 1 path.config: "/etc/logstash/CDE/synonym-logstash-csv-to-es.conf" synonym-logst… --- ## [How to configure Logstash and JDBC to upload new records based on ascending serial number](https://discuss.elastic.co/t/how-to-configure-logstash-and-jdbc-to-upload-new-records-based-on-ascending-serial-number/206032)
**Author:** [@MAvD](https://discuss.elastic.co/u/MAvD)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 2:12pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-and-jdbc-to-upload-new-records-based-on-ascending-serial-number/206032 "2019-10-31T14:12:23Z")
Hello, Currently, we are updating our data in Elasticsearch by uploading a lot of data once in a while from a firebird database which uses quite some data. We want this this to be synchronized by uploading only new and … --- ## [Running tests for output file plugin](https://discuss.elastic.co/t/running-tests-for-output-file-plugin/205979)
**Author:** [@Nitin\_Gupta3](https://discuss.elastic.co/u/Nitin_Gupta3)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 2:03pm UTC](https://discuss.elastic.co/t/running-tests-for-output-file-plugin/205979 "2019-10-31T14:03:00Z")
I'm not able to run tests for logstash-output-file plugin. While I'm able to execute "jruby -S bundle install" successfully. but next command: "jruby -S bundle exec rspec" gives an error: You have requested: logstas… --- ## [How to configure logstash to get only new data/updated data into elasticsearch](https://discuss.elastic.co/t/how-to-configure-logstash-to-get-only-new-data-updated-data-into-elasticsearch/203266)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 9\ **Last updated:** [October 31, 2019, 1:41pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-to-get-only-new-data-updated-data-into-elasticsearch/203266 "2019-10-31T13:41:11Z")
Dear All. i am facing the issue from a long time.i have unique column in sql server side and i want to get only new data/updated data into elasticsearch every 15 min. how will i do ...after loading first time data int… --- ## [Combine two queries in one](https://discuss.elastic.co/t/combine-two-queries-in-one/206020)
**Author:** [@DesireeNordlund](https://discuss.elastic.co/u/DesireeNordlund)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 1:27pm UTC](https://discuss.elastic.co/t/combine-two-queries-in-one/206020 "2019-10-31T13:27:58Z")
I have a search field where the user can enter words to search for in a bunch of fields. I use a MultiMatchQuery and it works nicely. But, there as an access issue to it. Besides from the search I do today, I would like… --- ## [Different format for different output](https://discuss.elastic.co/t/different-format-for-different-output/206034)
**Author:** [@skowron-line](https://discuss.elastic.co/u/skowron-line)\ **Replies:** 3\ **Last updated:** [October 31, 2019, 1:25pm UTC](https://discuss.elastic.co/t/different-format-for-different-output/206034 "2019-10-31T13:25:51Z")
I would like to send 2 different format message to outputs so I have something like this input { beats { port =\> 5044 } } filter { clone { clones =\> \["message"\] add\_tag =\> \["siem"\] … --- ## [Kibana and spaces API](https://discuss.elastic.co/t/kibana-and-spaces-api/205878)
**Author:** [@boubakr](https://discuss.elastic.co/u/boubakr)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 1:23pm UTC](https://discuss.elastic.co/t/kibana-and-spaces-api/205878 "2019-10-31T13:23:17Z")
How can I create and manage spaces in kibana 7.4? I've tried to follow this documentation but when i post the request in the example I get this error: #! Deprecation: \[types removal\] Specifying types in document index … --- ## [Elasticsearch fail](https://discuss.elastic.co/t/elasticsearch-fail/205373)
**Author:** [@alpanthiya123](https://discuss.elastic.co/u/alpanthiya123)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 1:16pm UTC](https://discuss.elastic.co/t/elasticsearch-fail/205373 "2019-10-31T13:16:21Z")
Continuing the discussion from Elasticsearch status failed. how to fix this: ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled; vendor p Active: failed (Result:… --- ## [Reference Result of Aggregation in Sub-Aggregation](https://discuss.elastic.co/t/reference-result-of-aggregation-in-sub-aggregation/205425)
**Author:** [@gose](https://discuss.elastic.co/u/gose)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 1:15pm UTC](https://discuss.elastic.co/t/reference-result-of-aggregation-in-sub-aggregation/205425 "2019-10-31T13:15:10Z")
How do I refer to "avg\_flight\_min" in the Range Aggregation, replacing the hard-coded value of 100: GET kibana\_sample\_data\_flights/\_search { "size": 0, "aggs": { "avg\_flight\_min": { "avg": { "field… --- ## [Elasticsearch data in another storage server](https://discuss.elastic.co/t/elasticsearch-data-in-another-storage-server/205459)
**Author:** [@morita](https://discuss.elastic.co/u/morita)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 1:13pm UTC](https://discuss.elastic.co/t/elasticsearch-data-in-another-storage-server/205459 "2019-10-31T13:13:00Z")
hi, I wonder can I use data nodes with sufficient CPU and Ram for indexing documents then save them in another storage server? --- ## [Wazuh API cannot start, multiple errors](https://discuss.elastic.co/t/wazuh-api-cannot-start-multiple-errors/205780)
**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 1:03pm UTC](https://discuss.elastic.co/t/wazuh-api-cannot-start-multiple-errors/205780 "2019-10-31T13:03:43Z")
My wazuh-manager version installed v3.9.3 (for Kibana 7.1.1) but the wazuh-api cannot be started. I have run the following command to remove / reindex the system: service kibana stop curl -u elastic -XDELETE 10.0.106.1… --- ## [Searching/filtering index B using all field.values from index A](https://discuss.elastic.co/t/searching-filtering-index-b-using-all-field-values-from-index-a/205773)
**Author:** [@bug\_tester](https://discuss.elastic.co/u/bug_tester)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 1:02pm UTC](https://discuss.elastic.co/t/searching-filtering-index-b-using-all-field-values-from-index-a/205773 "2019-10-31T13:02:22Z")
i'm new to elastic stack and trying to figure out how to approach this problem. I have two index A B . data is being fed into them regularly index A has many fields including a model field with model name {"mode… --- ## [Partial date search on Date Of Birth Fields](https://discuss.elastic.co/t/partial-date-search-on-date-of-birth-fields/206023)
**Author:** [@Pushpak\_Chavan](https://discuss.elastic.co/u/Pushpak_Chavan)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 12:47pm UTC](https://discuss.elastic.co/t/partial-date-search-on-date-of-birth-fields/206023 "2019-10-31T12:47:25Z")
Hi, I have one field which is dateofbirth whose mapping is something like below "dateofbirth" : { "type" : "date", "fields" : { "tokens" : { "type" : "text" } }, "ignore\_malformed" : true, "format" : "yyyy-MM-d… --- ## [type":"date\_time\_exception","reason":"Invalid date 'February 29' as '1970' is not a leap year"}](https://discuss.elastic.co/t/type-date-time-exception-reason-invalid-date-february-29-as-1970-is-not-a-leap-year/205570)
**Author:** [@GeoffreyCutaia](https://discuss.elastic.co/u/GeoffreyCutaia)\ **Replies:** 5\ **Last updated:** [October 31, 2019, 12:42pm UTC](https://discuss.elastic.co/t/type-date-time-exception-reason-invalid-date-february-29-as-1970-is-not-a-leap-year/205570 "2019-10-31T12:42:30Z")
Hi, We have some issues trying to index documents with date fields set on the 29 of February. Below an example : {"type":"mapper\_parsing\_exception","reason":"failed to parse field \[date\_updated\] of type \[date\] in docu… --- ## [Store Filtered Results](https://discuss.elastic.co/t/store-filtered-results/205910)
**Author:** [@bmille52](https://discuss.elastic.co/u/bmille52)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 12:35pm UTC](https://discuss.elastic.co/t/store-filtered-results/205910 "2019-10-31T12:35:15Z")
I have a character filter that removes some markdown elements, such as link structure, from a text blob Im storing. I'd like to be able to use the filtered results for highlighting so that I can show highlights of the te… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1805) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1807)